emdash 0.38.0 → 0.39.0

package/dist/seo-C4AmbsMU.mjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"seo-C4AmbsMU.mjs","names":[],"sources":["../src/api/handlers/seo.ts"],"sourcesContent":["/**\n * SEO Handlers\n *\n * Business logic for sitemap generation and robots.txt.\n */\n\nimport { sql, type Kysely } from \"kysely\";\n\nimport type { Database } from \"../../database/types.js\";\nimport { validateIdentifier } from \"../../database/validate.js\";\nimport type { ApiResult } from \"../types.js\";\n\n/** Raw content data for sitemap generation — the route builds the actual URLs */\nexport interface SitemapContentEntry {\n\t/** Content ID (ULID) */\n\tid: string;\n\t/** Content slug, or null when the entry has no slug */\n\tslug: string | null;\n\t/** ISO date of last modification */\n\tupdatedAt: string;\n\t/**\n\t * ISO publish date, or null when never published. Used to resolve\n\t * date tokens (`{year}`/`{month}`/`{day}`) in the collection's\n\t * `url_pattern` — the published date keeps permalinks stable across\n\t * later edits (unlike `updatedAt`).\n\t */\n\tpublishedAt: string | null;\n\t/**\n\t * Locale of this row (e.g. `\"en\"`, `\"fr\"`). Always present — rows in\n\t * pre-i18n databases are backfilled to the configured `defaultLocale`.\n\t */\n\tlocale: string;\n\t/**\n\t * `translation_group` ULID shared across all locale variants of the\n\t * same content. Used by the sitemap route to emit `hreflang`\n\t * alternates between siblings.\n\t */\n\ttranslationGroup: string | null;\n\t/**\n\t * Stored SEO image reference (`_emdash_seo.seo_image`), or null when\n\t * the entry has no SEO image. The route resolves it to an absolute\n\t * URL and emits it as an `<image:image>` sitemap entry.\n\t */\n\timage: string | null;\n}\n\n/** Per-collection sitemap data with entries and URL pattern */\nexport interface SitemapCollectionData {\n\t/** Collection slug (e.g., \"post\", \"page\") */\n\tcollection: string;\n\t/** URL pattern with {slug} placeholder, or null for default /{collection}/{slug} */\n\turlPattern: string | null;\n\t/** Most recent updated_at across all entries (for sitemap index lastmod) */\n\tlastmod: string;\n\t/** Individual content entries */\n\tentries: SitemapContentEntry[];\n}\n\nexport interface SitemapDataResponse {\n\tcollections: SitemapCollectionData[];\n}\n\n/** Maximum entries per sitemap (per spec) */\nconst SITEMAP_MAX_ENTRIES = 50_000;\n\n/** Matches a trailing timezone designator (`Z` or `±HH`, `±HHMM`, `±HH:MM`). */\nconst TZ_SUFFIX_RE = /([zZ]|[+-]\\d{2}(:?\\d{2})?)$/;\n\n/**\n * Normalize a stored timestamp to W3C Datetime (ISO 8601) for sitemaps.\n *\n * `updated_at` is not guaranteed to be ISO: the column default is\n * `datetime('now')` on SQLite and `CURRENT_TIMESTAMP` on Postgres, both of\n * which store a space-separated `YYYY-MM-DD HH:MM:SS` string (and imported\n * content can carry other shapes). The sitemap `<lastmod>` field requires\n * W3C Datetime, and Google Search Console rejects the space-separated form\n * as \"Invalid date\". Normalize defensively, assuming UTC when no offset is\n * present (matches SQLite's `datetime('now')`). Valid date strings are\n * normalized to UTC ISO 8601; unparseable values are returned as-is.\n */\nfunction toW3CDate(value: string): string {\n\tif (!value) return value;\n\tlet normalized = value.trim();\n\tif (normalized.includes(\" \") && !normalized.includes(\"T\")) {\n\t\tnormalized = normalized.replace(\" \", \"T\");\n\t}\n\tif (!TZ_SUFFIX_RE.test(normalized)) {\n\t\tnormalized += \"Z\";\n\t}\n\tconst parsed = Date.parse(normalized);\n\treturn Number.isNaN(parsed) ? value : new Date(parsed).toISOString();\n}\n\n/**\n * Collect all published, indexable content across SEO-enabled collections\n * for sitemap generation, grouped by collection.\n *\n * Only includes content from routable collections with `has_seo = 1`.\n * Excludes content with `seo_no_index = 1` in the `_emdash_seo` table.\n *\n * Returns raw data grouped per collection. The caller (route) is\n * responsible for building absolute URLs — this handler does NOT\n * assume a URL structure.\n */\nexport async function handleSitemapData(\n\tdb: Kysely<Database>,\n\t/** When set, only return data for this collection. */\n\tcollectionSlug?: string,\n): Promise<ApiResult<SitemapDataResponse>> {\n\ttry {\n\t\t// Find SEO-enabled collections (optionally filtered)\n\t\tlet query = db\n\t\t\t.selectFrom(\"_emdash_collections\")\n\t\t\t.select([\"slug\", \"url_pattern\"])\n\t\t\t.where(\"has_seo\", \"=\", 1)\n\t\t\t.where(\"routable\", \"=\", 1);\n\n\t\tif (collectionSlug) {\n\t\t\tquery = query.where(\"slug\", \"=\", collectionSlug);\n\t\t}\n\n\t\tconst collections = await query.execute();\n\n\t\tconst result: SitemapCollectionData[] = [];\n\n\t\tfor (const col of collections) {\n\t\t\t// Validate the slug before using it as a table name identifier.\n\t\t\t// Should always pass (slugs are validated on creation), but\n\t\t\t// guards against corrupted DB data.\n\t\t\ttry {\n\t\t\t\tvalidateIdentifier(col.slug, \"collection slug\");\n\t\t\t} catch {\n\t\t\t\tconsole.warn(`[SITEMAP] Skipping collection with invalid slug: ${col.slug}`);\n\t\t\t\tcontinue;\n\t\t\t}\n\n\t\t\tconst tableName = `ec_${col.slug}`;\n\n\t\t\t// Query published, non-deleted content.\n\t\t\t// LEFT JOIN _emdash_seo to check noindex flag.\n\t\t\t// Content without an SEO row is assumed indexable (default).\n\t\t\t// Wrapped in try/catch so a missing/broken table doesn't fail the\n\t\t\t// entire sitemap — we skip that collection and continue.\n\t\t\ttry {\n\t\t\t\tconst rows = await sql<{\n\t\t\t\t\tslug: string | null;\n\t\t\t\t\tid: string;\n\t\t\t\t\tupdated_at: string;\n\t\t\t\t\tpublished_at: string | null;\n\t\t\t\t\tlocale: string;\n\t\t\t\t\ttranslation_group: string | null;\n\t\t\t\t\tseo_image: string | null;\n\t\t\t\t}>`\n\t\t\t\t\tSELECT c.slug, c.id, c.updated_at, c.published_at, c.locale, c.translation_group, s.seo_image\n\t\t\t\t\tFROM ${sql.ref(tableName)} c\n\t\t\t\t\tLEFT JOIN _emdash_seo s\n\t\t\t\t\t\tON s.collection = ${col.slug}\n\t\t\t\t\t\tAND s.content_id = c.id\n\t\t\t\t\tWHERE c.status = 'published'\n\t\t\t\t\tAND c.deleted_at IS NULL\n\t\t\t\t\tAND c.slug IS NOT NULL\n\t\t\t\t\tAND TRIM(c.slug) <> ''\n\t\t\t\t\tAND (s.seo_no_index IS NULL OR s.seo_no_index = 0)\n\t\t\t\t\tORDER BY c.updated_at DESC\n\t\t\t\t\tLIMIT ${SITEMAP_MAX_ENTRIES}\n\t\t\t\t`.execute(db);\n\n\t\t\t\tif (rows.rows.length === 0) continue;\n\n\t\t\t\tconst entries: SitemapContentEntry[] = [];\n\t\t\t\tfor (const row of rows.rows) {\n\t\t\t\t\tentries.push({\n\t\t\t\t\t\tid: row.id,\n\t\t\t\t\t\tslug: row.slug,\n\t\t\t\t\t\tupdatedAt: toW3CDate(row.updated_at),\n\t\t\t\t\t\tpublishedAt: row.published_at ?? null,\n\t\t\t\t\t\tlocale: row.locale,\n\t\t\t\t\t\ttranslationGroup: row.translation_group,\n\t\t\t\t\t\timage: row.seo_image ?? null,\n\t\t\t\t\t});\n\t\t\t\t}\n\n\t\t\t\tresult.push({\n\t\t\t\t\tcollection: col.slug,\n\t\t\t\t\turlPattern: col.url_pattern,\n\t\t\t\t\t// Rows are ordered by updated_at DESC, so first row is the latest\n\t\t\t\t\tlastmod: toW3CDate(rows.rows[0].updated_at),\n\t\t\t\t\tentries,\n\t\t\t\t});\n\t\t\t} catch (err) {\n\t\t\t\t// Table missing or query error — skip this collection\n\t\t\t\tconsole.warn(`[SITEMAP] Failed to query collection \"${col.slug}\":`, err);\n\t\t\t\tcontinue;\n\t\t\t}\n\t\t}\n\n\t\treturn { success: true, data: { collections: result } };\n\t} catch (error) {\n\t\tconsole.error(\"[SITEMAP_ERROR]\", error);\n\t\treturn {\n\t\t\tsuccess: false,\n\t\t\terror: { code: \"SITEMAP_ERROR\", message: \"Failed to generate sitemap data\" },\n\t\t};\n\t}\n}\n"],"mappings":";;;;;;;;;;AA+DA,MAAM,sBAAsB;;AAG5B,MAAM,eAAe;;;;;;;;;;;;;AAcrB,SAAS,UAAU,OAAuB;AACzC,KAAI,CAAC,MAAO,QAAO;CACnB,IAAI,aAAa,MAAM,MAAM;AAC7B,KAAI,WAAW,SAAS,IAAI,IAAI,CAAC,WAAW,SAAS,IAAI,CACxD,cAAa,WAAW,QAAQ,KAAK,IAAI;AAE1C,KAAI,CAAC,aAAa,KAAK,WAAW,CACjC,eAAc;CAEf,MAAM,SAAS,KAAK,MAAM,WAAW;AACrC,QAAO,OAAO,MAAM,OAAO,GAAG,QAAQ,IAAI,KAAK,OAAO,CAAC,aAAa;;;;;;;;;;;;;AAcrE,eAAsB,kBACrB,IAEA,gBAC0C;AAC1C,KAAI;EAEH,IAAI,QAAQ,GACV,WAAW,sBAAsB,CACjC,OAAO,CAAC,QAAQ,cAAc,CAAC,CAC/B,MAAM,WAAW,KAAK,EAAE,CACxB,MAAM,YAAY,KAAK,EAAE;AAE3B,MAAI,eACH,SAAQ,MAAM,MAAM,QAAQ,KAAK,eAAe;EAGjD,MAAM,cAAc,MAAM,MAAM,SAAS;EAEzC,MAAM,SAAkC,EAAE;AAE1C,OAAK,MAAM,OAAO,aAAa;AAI9B,OAAI;AACH,uBAAmB,IAAI,MAAM,kBAAkB;WACxC;AACP,YAAQ,KAAK,oDAAoD,IAAI,OAAO;AAC5E;;GAGD,MAAM,YAAY,MAAM,IAAI;AAO5B,OAAI;IACH,MAAM,OAAO,MAAM,GAQjB;;YAEM,IAAI,IAAI,UAAU,CAAC;;0BAEL,IAAI,KAAK;;;;;;;;aAQtB,oBAAoB;MAC3B,QAAQ,GAAG;AAEb,QAAI,KAAK,KAAK,WAAW,EAAG;IAE5B,MAAM,UAAiC,EAAE;AACzC,SAAK,MAAM,OAAO,KAAK,KACtB,SAAQ,KAAK;KACZ,IAAI,IAAI;KACR,MAAM,IAAI;KACV,WAAW,UAAU,IAAI,WAAW;KACpC,aAAa,IAAI,gBAAgB;KACjC,QAAQ,IAAI;KACZ,kBAAkB,IAAI;KACtB,OAAO,IAAI,aAAa;KACxB,CAAC;AAGH,WAAO,KAAK;KACX,YAAY,IAAI;KAChB,YAAY,IAAI;KAEhB,SAAS,UAAU,KAAK,KAAK,GAAG,WAAW;KAC3C;KACA,CAAC;YACM,KAAK;AAEb,YAAQ,KAAK,yCAAyC,IAAI,KAAK,KAAK,IAAI;AACxE;;;AAIF,SAAO;GAAE,SAAS;GAAM,MAAM,EAAE,aAAa,QAAQ;GAAE;UAC/C,OAAO;AACf,UAAQ,MAAM,mBAAmB,MAAM;AACvC,SAAO;GACN,SAAS;GACT,OAAO;IAAE,MAAM;IAAiB,SAAS;IAAmC;GAC5E"}

package/dist/service-J_-Vgo7R.mjs

@@ -1,195 +0,0 @@
-import { t as validateIdentifier } from "./validate-BpwoDOgt.mjs";
-import { t as CommentRepository } from "./comment-vxOzWbZN.mjs";
-import { t as escapeHtml } from "./escape-B3asJC6W.mjs";
-
-//#region src/comments/notifications.ts
-const NOTIFICATION_SOURCE = "emdash-comments";
-const MAX_EXCERPT_LENGTH = 500;
-const CRLF_RE = /[\r\n]/g;
-/**
-* Build an email notification for a new comment.
-*/
-function buildCommentNotificationEmail(to, data) {
-	const title = data.contentTitle || `${data.collection} item`;
-	const subject = `New comment on "${title}"`.replace(CRLF_RE, " ");
-	const excerpt = data.commentBody.length > MAX_EXCERPT_LENGTH ? data.commentBody.slice(0, MAX_EXCERPT_LENGTH) + "..." : data.commentBody;
-	const adminUrl = `${data.adminBaseUrl}/admin/comments`;
-	return {
-		to,
-		subject,
-		text: [
-			`${data.commentAuthorName} commented on "${title}":`,
-			"",
-			excerpt,
-			"",
-			`View in admin: ${adminUrl}`
-		].join("\n"),
-		html: [
-			`<p><strong>${escapeHtml(data.commentAuthorName)}</strong> commented on &ldquo;${escapeHtml(title)}&rdquo;:</p>`,
-			`<blockquote style="border-left:3px solid #ccc;padding-left:12px;margin:12px 0;color:#555">${escapeHtml(excerpt)}</blockquote>`,
-			`<p><a href="${escapeHtml(adminUrl)}">View in admin</a></p>`
-		].join("\n")
-	};
-}
-/**
-* Send a comment notification to the content author if all conditions are met:
-* 1. Comment status is "approved"
-* 2. Content author exists and has an email
-* 3. Email provider is configured
-* 4. Commenter is not the content author (no self-notifications)
-*
-* Returns true if the email was sent, false if skipped.
-*/
-async function sendCommentNotification(params) {
-	const { email, comment, contentAuthor, adminBaseUrl } = params;
-	if (comment.status !== "approved") return false;
-	if (!contentAuthor?.email) return false;
-	if (!email.isAvailable()) return false;
-	if (comment.authorEmail.toLowerCase() === contentAuthor.email.toLowerCase()) return false;
-	const message = buildCommentNotificationEmail(contentAuthor.email, {
-		commentAuthorName: comment.authorName,
-		commentBody: comment.body,
-		contentTitle: params.contentTitle || "",
-		collection: comment.collection,
-		adminBaseUrl
-	});
-	await email.send(message, NOTIFICATION_SOURCE);
-	return true;
-}
-/**
-* Look up a content item's author from the database.
-*
-* Used by the admin moderation route where content info isn't
-* readily available (only the comment record is at hand).
-*/
-async function lookupContentAuthor(db, collection, contentId) {
-	validateIdentifier(collection, "collection");
-	const contentRow = await db.selectFrom(`ec_${collection}`).select(["slug", "author_id"]).where("id", "=", contentId).executeTakeFirst();
-	if (!contentRow) return null;
-	const typed = contentRow;
-	let author;
-	if (typed.author_id) {
-		const userRow = await db.selectFrom("users").select([
-			"id",
-			"name",
-			"email",
-			"email_verified"
-		]).where("id", "=", typed.author_id).executeTakeFirst();
-		if (userRow && userRow.email_verified) author = {
-			id: userRow.id,
-			email: userRow.email,
-			name: userRow.name
-		};
-	}
-	return {
-		slug: typed.slug,
-		author
-	};
-}
-
-//#endregion
-//#region src/comments/service.ts
-/**
-* Create a comment through the full hook pipeline.
-*
-* Returns null if the comment was rejected by a beforeCreate handler.
-*/
-async function createComment(db, input, collectionSettings, hooks, contentInfo) {
-	const repo = new CommentRepository(db);
-	const beforeCreateEvent = {
-		comment: {
-			collection: input.collection,
-			contentId: input.contentId,
-			parentId: input.parentId ?? null,
-			authorName: input.authorName,
-			authorEmail: input.authorEmail,
-			authorUserId: input.authorUserId ?? null,
-			body: input.body,
-			ipHash: input.ipHash ?? null,
-			userAgent: input.userAgent ?? null
-		},
-		metadata: {}
-	};
-	const result = await hooks.runBeforeCreate(beforeCreateEvent);
-	if (result === false) return null;
-	const event = result;
-	const priorApprovedCount = await repo.countApprovedByEmail(event.comment.authorEmail);
-	const moderateEvent = {
-		comment: event.comment,
-		metadata: event.metadata,
-		collectionSettings,
-		priorApprovedCount
-	};
-	const decision = await hooks.runModerate(moderateEvent);
-	const comment = await repo.create({
-		collection: event.comment.collection,
-		contentId: event.comment.contentId,
-		parentId: event.comment.parentId,
-		authorName: event.comment.authorName,
-		authorEmail: event.comment.authorEmail,
-		authorUserId: event.comment.authorUserId,
-		body: event.comment.body,
-		status: decision.status,
-		ipHash: event.comment.ipHash,
-		userAgent: event.comment.userAgent,
-		moderationMetadata: Object.keys(event.metadata).length > 0 ? event.metadata : null
-	});
-	if (contentInfo) {
-		const afterEvent = {
-			comment: commentToStored(comment),
-			metadata: event.metadata,
-			content: {
-				id: contentInfo.id,
-				collection: contentInfo.collection,
-				slug: contentInfo.slug,
-				title: contentInfo.title
-			},
-			contentAuthor: contentInfo.author
-		};
-		hooks.fireAfterCreate(afterEvent);
-	}
-	return {
-		comment,
-		decision
-	};
-}
-/**
-* Admin moderation — change a comment's status.
-* Fires comment:afterModerate hook.
-*/
-async function moderateComment(db, id, newStatus, moderator, hooks) {
-	const repo = new CommentRepository(db);
-	const existing = await repo.findById(id);
-	if (!existing) return null;
-	const previousStatus = existing.status;
-	const updated = await repo.updateStatus(id, newStatus);
-	if (!updated) return null;
-	const afterEvent = {
-		comment: commentToStored(updated),
-		previousStatus,
-		newStatus,
-		moderator
-	};
-	hooks.fireAfterModerate(afterEvent);
-	return updated;
-}
-function commentToStored(comment) {
-	return {
-		id: comment.id,
-		collection: comment.collection,
-		contentId: comment.contentId,
-		parentId: comment.parentId,
-		authorName: comment.authorName,
-		authorEmail: comment.authorEmail,
-		authorUserId: comment.authorUserId,
-		body: comment.body,
-		status: comment.status,
-		moderationMetadata: comment.moderationMetadata,
-		createdAt: comment.createdAt,
-		updatedAt: comment.updatedAt
-	};
-}
-
-//#endregion
-export { sendCommentNotification as i, moderateComment as n, lookupContentAuthor as r, createComment as t };
-//# sourceMappingURL=service-J_-Vgo7R.mjs.map

package/dist/service-J_-Vgo7R.mjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"service-J_-Vgo7R.mjs","names":[],"sources":["../src/comments/notifications.ts","../src/comments/service.ts"],"sourcesContent":["/**\n * Comment Notification Emails\n *\n * Sends email notifications to content authors when comments are\n * approved on their content. Used by:\n *   - Public comment POST route (comment:afterCreate, if auto-approved)\n *   - Admin moderation route (comment:afterModerate, when approving)\n */\n\nimport type { Kysely } from \"kysely\";\n\nimport { escapeHtml } from \"../api/escape.js\";\nimport type { Database } from \"../database/types.js\";\nimport { validateIdentifier } from \"../database/validate.js\";\nimport type { EmailPipeline } from \"../plugins/email.js\";\nimport type { EmailMessage } from \"../plugins/types.js\";\n\nconst NOTIFICATION_SOURCE = \"emdash-comments\";\nconst MAX_EXCERPT_LENGTH = 500;\nconst CRLF_RE = /[\\r\\n]/g;\n\nexport interface CommentNotificationData {\n\tcommentAuthorName: string;\n\tcommentBody: string;\n\tcontentTitle: string;\n\tcollection: string;\n\tadminBaseUrl: string;\n}\n\n/**\n * Build an email notification for a new comment.\n */\nexport function buildCommentNotificationEmail(\n\tto: string,\n\tdata: CommentNotificationData,\n): EmailMessage {\n\tconst title = data.contentTitle || `${data.collection} item`;\n\tconst subject = `New comment on \"${title}\"`.replace(CRLF_RE, \" \");\n\n\tconst excerpt =\n\t\tdata.commentBody.length > MAX_EXCERPT_LENGTH\n\t\t\t? data.commentBody.slice(0, MAX_EXCERPT_LENGTH) + \"...\"\n\t\t\t: data.commentBody;\n\n\tconst adminUrl = `${data.adminBaseUrl}/admin/comments`;\n\n\tconst text = [\n\t\t`${data.commentAuthorName} commented on \"${title}\":`,\n\t\t\"\",\n\t\texcerpt,\n\t\t\"\",\n\t\t`View in admin: ${adminUrl}`,\n\t].join(\"\\n\");\n\n\tconst html = [\n\t\t`<p><strong>${escapeHtml(data.commentAuthorName)}</strong> commented on &ldquo;${escapeHtml(title)}&rdquo;:</p>`,\n\t\t`<blockquote style=\"border-left:3px solid #ccc;padding-left:12px;margin:12px 0;color:#555\">${escapeHtml(excerpt)}</blockquote>`,\n\t\t`<p><a href=\"${escapeHtml(adminUrl)}\">View in admin</a></p>`,\n\t].join(\"\\n\");\n\n\treturn { to, subject, text, html };\n}\n\n/**\n * Send a comment notification to the content author if all conditions are met:\n * 1. Comment status is \"approved\"\n * 2. Content author exists and has an email\n * 3. Email provider is configured\n * 4. Commenter is not the content author (no self-notifications)\n *\n * Returns true if the email was sent, false if skipped.\n */\nexport async function sendCommentNotification(params: {\n\temail: EmailPipeline;\n\tcomment: {\n\t\tauthorName: string;\n\t\tauthorEmail: string;\n\t\tbody: string;\n\t\tstatus: string;\n\t\tcollection: string;\n\t};\n\tcontentTitle?: string;\n\tcontentAuthor?: { email: string; name: string | null };\n\tadminBaseUrl: string;\n}): Promise<boolean> {\n\tconst { email, comment, contentAuthor, adminBaseUrl } = params;\n\n\tif (comment.status !== \"approved\") return false;\n\tif (!contentAuthor?.email) return false;\n\tif (!email.isAvailable()) return false;\n\tif (comment.authorEmail.toLowerCase() === contentAuthor.email.toLowerCase()) return false;\n\n\tconst message = buildCommentNotificationEmail(contentAuthor.email, {\n\t\tcommentAuthorName: comment.authorName,\n\t\tcommentBody: comment.body,\n\t\tcontentTitle: params.contentTitle || \"\",\n\t\tcollection: comment.collection,\n\t\tadminBaseUrl,\n\t});\n\n\tawait email.send(message, NOTIFICATION_SOURCE);\n\treturn true;\n}\n\n/**\n * Look up a content item's author from the database.\n *\n * Used by the admin moderation route where content info isn't\n * readily available (only the comment record is at hand).\n */\nexport async function lookupContentAuthor(\n\tdb: Kysely<Database>,\n\tcollection: string,\n\tcontentId: string,\n): Promise<{\n\tslug: string;\n\tauthor?: { id: string; email: string; name: string | null };\n} | null> {\n\tvalidateIdentifier(collection, \"collection\");\n\n\tconst contentRow = await db\n\t\t.selectFrom(`ec_${collection}` as never)\n\t\t.select([\"slug\" as never, \"author_id\" as never])\n\t\t.where(\"id\" as never, \"=\", contentId as never)\n\t\t.executeTakeFirst();\n\n\tif (!contentRow) return null;\n\n\tconst typed = contentRow as { slug: string; author_id: string | null };\n\n\tlet author: { id: string; email: string; name: string | null } | undefined;\n\tif (typed.author_id) {\n\t\tconst userRow = await db\n\t\t\t.selectFrom(\"users\")\n\t\t\t.select([\"id\", \"name\", \"email\", \"email_verified\"])\n\t\t\t.where(\"id\", \"=\", typed.author_id)\n\t\t\t.executeTakeFirst();\n\t\tif (userRow && userRow.email_verified) {\n\t\t\tauthor = { id: userRow.id, email: userRow.email, name: userRow.name };\n\t\t}\n\t}\n\n\treturn { slug: typed.slug, author };\n}\n","/**\n * Comment Service\n *\n * Orchestrates comment creation through the hook pipeline:\n *   1. Run comment:beforeCreate pipeline (transform/reject)\n *   2. Query priorApprovedCount for first-time moderation\n *   3. Invoke comment:moderate exclusive hook (or built-in fallback)\n *   4. Save comment with determined status\n *   5. Fire comment:afterCreate (fire-and-forget)\n *\n * Also handles admin moderation (status changes) with afterModerate hooks.\n */\n\nimport type { Kysely } from \"kysely\";\n\nimport { CommentRepository } from \"../database/repositories/comment.js\";\nimport type { Comment, CommentStatus } from \"../database/repositories/comment.js\";\nimport type { Database } from \"../database/types.js\";\nimport type {\n\tCollectionCommentSettings,\n\tCommentAfterCreateEvent,\n\tCommentAfterModerateEvent,\n\tCommentBeforeCreateEvent,\n\tCommentModerateEvent,\n\tModerationDecision,\n\tStoredComment,\n} from \"../plugins/types.js\";\n\n// ---------------------------------------------------------------------------\n// Types\n// ---------------------------------------------------------------------------\n\nexport interface CommentCreateInput {\n\tcollection: string;\n\tcontentId: string;\n\tparentId?: string | null;\n\tauthorName: string;\n\tauthorEmail: string;\n\tauthorUserId?: string | null;\n\tbody: string;\n\tipHash?: string | null;\n\tuserAgent?: string | null;\n}\n\nexport interface CommentCreateResult {\n\tcomment: Comment;\n\tdecision: ModerationDecision;\n}\n\n/**\n * Hook runner interface — injected from the runtime so the service\n * doesn't need to know about the hook pipeline internals.\n */\nexport interface CommentHookRunner {\n\t/** Run comment:beforeCreate pipeline. Returns modified event or false. */\n\trunBeforeCreate(event: CommentBeforeCreateEvent): Promise<CommentBeforeCreateEvent | false>;\n\n\t/** Run comment:moderate exclusive hook. Returns moderation decision. */\n\trunModerate(event: CommentModerateEvent): Promise<ModerationDecision>;\n\n\t/** Fire comment:afterCreate (fire-and-forget). */\n\tfireAfterCreate(event: CommentAfterCreateEvent): void;\n\n\t/** Fire comment:afterModerate (fire-and-forget). */\n\tfireAfterModerate(event: CommentAfterModerateEvent): void;\n}\n\n// ---------------------------------------------------------------------------\n// Service\n// ---------------------------------------------------------------------------\n\n/**\n * Create a comment through the full hook pipeline.\n *\n * Returns null if the comment was rejected by a beforeCreate handler.\n */\nexport async function createComment(\n\tdb: Kysely<Database>,\n\tinput: CommentCreateInput,\n\tcollectionSettings: CollectionCommentSettings,\n\thooks: CommentHookRunner,\n\tcontentInfo?: {\n\t\tid: string;\n\t\tcollection: string;\n\t\tslug: string;\n\t\ttitle?: string;\n\t\tauthor?: { id: string; name: string | null; email: string };\n\t},\n): Promise<CommentCreateResult | null> {\n\tconst repo = new CommentRepository(db);\n\n\t// 1. Build the beforeCreate event\n\tconst beforeCreateEvent: CommentBeforeCreateEvent = {\n\t\tcomment: {\n\t\t\tcollection: input.collection,\n\t\t\tcontentId: input.contentId,\n\t\t\tparentId: input.parentId ?? null,\n\t\t\tauthorName: input.authorName,\n\t\t\tauthorEmail: input.authorEmail,\n\t\t\tauthorUserId: input.authorUserId ?? null,\n\t\t\tbody: input.body,\n\t\t\tipHash: input.ipHash ?? null,\n\t\t\tuserAgent: input.userAgent ?? null,\n\t\t},\n\t\tmetadata: {},\n\t};\n\n\t// 2. Run comment:beforeCreate pipeline\n\tconst result = await hooks.runBeforeCreate(beforeCreateEvent);\n\tif (result === false) {\n\t\treturn null; // Rejected\n\t}\n\n\tconst event = result;\n\n\t// 3. Query prior approved count for first-time moderation\n\tconst priorApprovedCount = await repo.countApprovedByEmail(event.comment.authorEmail);\n\n\t// 4. Run comment:moderate exclusive hook\n\tconst moderateEvent: CommentModerateEvent = {\n\t\tcomment: event.comment,\n\t\tmetadata: event.metadata,\n\t\tcollectionSettings,\n\t\tpriorApprovedCount,\n\t};\n\n\tconst decision = await hooks.runModerate(moderateEvent);\n\n\t// 5. Save comment with determined status\n\tconst comment = await repo.create({\n\t\tcollection: event.comment.collection,\n\t\tcontentId: event.comment.contentId,\n\t\tparentId: event.comment.parentId,\n\t\tauthorName: event.comment.authorName,\n\t\tauthorEmail: event.comment.authorEmail,\n\t\tauthorUserId: event.comment.authorUserId,\n\t\tbody: event.comment.body,\n\t\tstatus: decision.status,\n\t\tipHash: event.comment.ipHash,\n\t\tuserAgent: event.comment.userAgent,\n\t\tmoderationMetadata: Object.keys(event.metadata).length > 0 ? event.metadata : null,\n\t});\n\n\t// 6. Fire comment:afterCreate (fire-and-forget)\n\tif (contentInfo) {\n\t\tconst afterEvent: CommentAfterCreateEvent = {\n\t\t\tcomment: commentToStored(comment),\n\t\t\tmetadata: event.metadata,\n\t\t\tcontent: {\n\t\t\t\tid: contentInfo.id,\n\t\t\t\tcollection: contentInfo.collection,\n\t\t\t\tslug: contentInfo.slug,\n\t\t\t\ttitle: contentInfo.title,\n\t\t\t},\n\t\t\tcontentAuthor: contentInfo.author,\n\t\t};\n\t\thooks.fireAfterCreate(afterEvent);\n\t}\n\n\treturn { comment, decision };\n}\n\n/**\n * Admin moderation — change a comment's status.\n * Fires comment:afterModerate hook.\n */\nexport async function moderateComment(\n\tdb: Kysely<Database>,\n\tid: string,\n\tnewStatus: CommentStatus,\n\tmoderator: { id: string; name: string | null },\n\thooks: CommentHookRunner,\n): Promise<Comment | null> {\n\tconst repo = new CommentRepository(db);\n\tconst existing = await repo.findById(id);\n\tif (!existing) return null;\n\n\tconst previousStatus = existing.status;\n\tconst updated = await repo.updateStatus(id, newStatus);\n\tif (!updated) return null;\n\n\t// Fire comment:afterModerate (fire-and-forget)\n\tconst afterEvent: CommentAfterModerateEvent = {\n\t\tcomment: commentToStored(updated),\n\t\tpreviousStatus,\n\t\tnewStatus,\n\t\tmoderator,\n\t};\n\thooks.fireAfterModerate(afterEvent);\n\n\treturn updated;\n}\n\n// ---------------------------------------------------------------------------\n// Helpers\n// ---------------------------------------------------------------------------\n\nfunction commentToStored(comment: Comment): StoredComment {\n\treturn {\n\t\tid: comment.id,\n\t\tcollection: comment.collection,\n\t\tcontentId: comment.contentId,\n\t\tparentId: comment.parentId,\n\t\tauthorName: comment.authorName,\n\t\tauthorEmail: comment.authorEmail,\n\t\tauthorUserId: comment.authorUserId,\n\t\tbody: comment.body,\n\t\tstatus: comment.status,\n\t\tmoderationMetadata: comment.moderationMetadata,\n\t\tcreatedAt: comment.createdAt,\n\t\tupdatedAt: comment.updatedAt,\n\t};\n}\n"],"mappings":";;;;;AAiBA,MAAM,sBAAsB;AAC5B,MAAM,qBAAqB;AAC3B,MAAM,UAAU;;;;AAahB,SAAgB,8BACf,IACA,MACe;CACf,MAAM,QAAQ,KAAK,gBAAgB,GAAG,KAAK,WAAW;CACtD,MAAM,UAAU,mBAAmB,MAAM,GAAG,QAAQ,SAAS,IAAI;CAEjE,MAAM,UACL,KAAK,YAAY,SAAS,qBACvB,KAAK,YAAY,MAAM,GAAG,mBAAmB,GAAG,QAChD,KAAK;CAET,MAAM,WAAW,GAAG,KAAK,aAAa;AAgBtC,QAAO;EAAE;EAAI;EAAS,MAdT;GACZ,GAAG,KAAK,kBAAkB,iBAAiB,MAAM;GACjD;GACA;GACA;GACA,kBAAkB;GAClB,CAAC,KAAK,KAAK;EAQgB,MANf;GACZ,cAAc,WAAW,KAAK,kBAAkB,CAAC,gCAAgC,WAAW,MAAM,CAAC;GACnG,6FAA6F,WAAW,QAAQ,CAAC;GACjH,eAAe,WAAW,SAAS,CAAC;GACpC,CAAC,KAAK,KAAK;EAEsB;;;;;;;;;;;AAYnC,eAAsB,wBAAwB,QAYzB;CACpB,MAAM,EAAE,OAAO,SAAS,eAAe,iBAAiB;AAExD,KAAI,QAAQ,WAAW,WAAY,QAAO;AAC1C,KAAI,CAAC,eAAe,MAAO,QAAO;AAClC,KAAI,CAAC,MAAM,aAAa,CAAE,QAAO;AACjC,KAAI,QAAQ,YAAY,aAAa,KAAK,cAAc,MAAM,aAAa,CAAE,QAAO;CAEpF,MAAM,UAAU,8BAA8B,cAAc,OAAO;EAClE,mBAAmB,QAAQ;EAC3B,aAAa,QAAQ;EACrB,cAAc,OAAO,gBAAgB;EACrC,YAAY,QAAQ;EACpB;EACA,CAAC;AAEF,OAAM,MAAM,KAAK,SAAS,oBAAoB;AAC9C,QAAO;;;;;;;;AASR,eAAsB,oBACrB,IACA,YACA,WAIS;AACT,oBAAmB,YAAY,aAAa;CAE5C,MAAM,aAAa,MAAM,GACvB,WAAW,MAAM,aAAsB,CACvC,OAAO,CAAC,QAAiB,YAAqB,CAAC,CAC/C,MAAM,MAAe,KAAK,UAAmB,CAC7C,kBAAkB;AAEpB,KAAI,CAAC,WAAY,QAAO;CAExB,MAAM,QAAQ;CAEd,IAAI;AACJ,KAAI,MAAM,WAAW;EACpB,MAAM,UAAU,MAAM,GACpB,WAAW,QAAQ,CACnB,OAAO;GAAC;GAAM;GAAQ;GAAS;GAAiB,CAAC,CACjD,MAAM,MAAM,KAAK,MAAM,UAAU,CACjC,kBAAkB;AACpB,MAAI,WAAW,QAAQ,eACtB,UAAS;GAAE,IAAI,QAAQ;GAAI,OAAO,QAAQ;GAAO,MAAM,QAAQ;GAAM;;AAIvE,QAAO;EAAE,MAAM,MAAM;EAAM;EAAQ;;;;;;;;;;AClEpC,eAAsB,cACrB,IACA,OACA,oBACA,OACA,aAOsC;CACtC,MAAM,OAAO,IAAI,kBAAkB,GAAG;CAGtC,MAAM,oBAA8C;EACnD,SAAS;GACR,YAAY,MAAM;GAClB,WAAW,MAAM;GACjB,UAAU,MAAM,YAAY;GAC5B,YAAY,MAAM;GAClB,aAAa,MAAM;GACnB,cAAc,MAAM,gBAAgB;GACpC,MAAM,MAAM;GACZ,QAAQ,MAAM,UAAU;GACxB,WAAW,MAAM,aAAa;GAC9B;EACD,UAAU,EAAE;EACZ;CAGD,MAAM,SAAS,MAAM,MAAM,gBAAgB,kBAAkB;AAC7D,KAAI,WAAW,MACd,QAAO;CAGR,MAAM,QAAQ;CAGd,MAAM,qBAAqB,MAAM,KAAK,qBAAqB,MAAM,QAAQ,YAAY;CAGrF,MAAM,gBAAsC;EAC3C,SAAS,MAAM;EACf,UAAU,MAAM;EAChB;EACA;EACA;CAED,MAAM,WAAW,MAAM,MAAM,YAAY,cAAc;CAGvD,MAAM,UAAU,MAAM,KAAK,OAAO;EACjC,YAAY,MAAM,QAAQ;EAC1B,WAAW,MAAM,QAAQ;EACzB,UAAU,MAAM,QAAQ;EACxB,YAAY,MAAM,QAAQ;EAC1B,aAAa,MAAM,QAAQ;EAC3B,cAAc,MAAM,QAAQ;EAC5B,MAAM,MAAM,QAAQ;EACpB,QAAQ,SAAS;EACjB,QAAQ,MAAM,QAAQ;EACtB,WAAW,MAAM,QAAQ;EACzB,oBAAoB,OAAO,KAAK,MAAM,SAAS,CAAC,SAAS,IAAI,MAAM,WAAW;EAC9E,CAAC;AAGF,KAAI,aAAa;EAChB,MAAM,aAAsC;GAC3C,SAAS,gBAAgB,QAAQ;GACjC,UAAU,MAAM;GAChB,SAAS;IACR,IAAI,YAAY;IAChB,YAAY,YAAY;IACxB,MAAM,YAAY;IAClB,OAAO,YAAY;IACnB;GACD,eAAe,YAAY;GAC3B;AACD,QAAM,gBAAgB,WAAW;;AAGlC,QAAO;EAAE;EAAS;EAAU;;;;;;AAO7B,eAAsB,gBACrB,IACA,IACA,WACA,WACA,OAC0B;CAC1B,MAAM,OAAO,IAAI,kBAAkB,GAAG;CACtC,MAAM,WAAW,MAAM,KAAK,SAAS,GAAG;AACxC,KAAI,CAAC,SAAU,QAAO;CAEtB,MAAM,iBAAiB,SAAS;CAChC,MAAM,UAAU,MAAM,KAAK,aAAa,IAAI,UAAU;AACtD,KAAI,CAAC,QAAS,QAAO;CAGrB,MAAM,aAAwC;EAC7C,SAAS,gBAAgB,QAAQ;EACjC;EACA;EACA;EACA;AACD,OAAM,kBAAkB,WAAW;AAEnC,QAAO;;AAOR,SAAS,gBAAgB,SAAiC;AACzD,QAAO;EACN,IAAI,QAAQ;EACZ,YAAY,QAAQ;EACpB,WAAW,QAAQ;EACnB,UAAU,QAAQ;EAClB,YAAY,QAAQ;EACpB,aAAa,QAAQ;EACrB,cAAc,QAAQ;EACtB,MAAM,QAAQ;EACd,QAAQ,QAAQ;EAChB,oBAAoB,QAAQ;EAC5B,WAAW,QAAQ;EACnB,WAAW,QAAQ;EACnB"}

package/dist/session-user-CbnMMwk6.mjs

@@ -1,51 +0,0 @@
-import { t as after } from "./after-CBU2vkoO.mjs";
-
-//#region src/astro/session-user.ts
-/**
-* Backstop timeout for resolving the session user. A live session-store read
-* settles in a few ms, so this only ever fires on a genuinely stalled read.
-*/
-const SESSION_GET_TIMEOUT_MS = 3e3;
-/**
-* Resolve the Astro session user without risking an isolate-wide hang.
-*
-* On Cloudflare Workers, a request cancelled mid-`session.get()` (client
-* disconnect, context teardown) can leave the underlying session-store read as
-* a promise that never settles — neither resolving nor rejecting. Awaiting it
-* directly hangs the request, and because the stalled promise is shared at the
-* isolate level, every later session-bearing request hangs too (observed as
-* 0-CPU, multi-minute, `canceled` responses; see #1274). A surrounding
-* try/catch cannot help: the promise never rejects.
-*
-* Two layers, mirroring the reclaimable-cache pattern used elsewhere in core:
-*  1. `after()` anchors the read so a cancelled request still drives it to
-*     completion — the promise settles and the isolate is not poisoned for
-*     subsequent requests (prevents the hang rather than merely surviving it).
-*  2. A timeout is a fail-closed backstop: a still-stalled (or rejecting) read
-*     resolves to `undefined`, and every caller treats the absence of a session
-*     user as unauthenticated (anonymous on public routes, 401/redirect on
-*     protected ones). It can only ever drop privileges for that one request,
-*     never grant them.
-*
-* Used by every session read on the request path: the main middleware (the
-* first read on a session-bearing request), the auth middleware, and the
-* preview-snapshot route (which bypasses the auth middleware).
-*/
-async function resolveSessionUser(session, timeoutMs = SESSION_GET_TIMEOUT_MS) {
-	if (!session) return void 0;
-	const read = Promise.resolve(session.get("user")).catch(() => void 0);
-	after(() => read.then(() => void 0, () => void 0));
-	let timer;
-	const timeout = new Promise((resolve) => {
-		timer = setTimeout(resolve, timeoutMs, void 0);
-	});
-	try {
-		return await Promise.race([read, timeout]);
-	} finally {
-		clearTimeout(timer);
-	}
-}
-
-//#endregion
-export { resolveSessionUser as t };
-//# sourceMappingURL=session-user-CbnMMwk6.mjs.map

package/dist/session-user-CbnMMwk6.mjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"session-user-CbnMMwk6.mjs","names":[],"sources":["../src/astro/session-user.ts"],"sourcesContent":["import { after } from \"../after.js\";\n\n/**\n * Backstop timeout for resolving the session user. A live session-store read\n * settles in a few ms, so this only ever fires on a genuinely stalled read.\n */\nexport const SESSION_GET_TIMEOUT_MS = 3_000;\n\n/**\n * Resolve the Astro session user without risking an isolate-wide hang.\n *\n * On Cloudflare Workers, a request cancelled mid-`session.get()` (client\n * disconnect, context teardown) can leave the underlying session-store read as\n * a promise that never settles — neither resolving nor rejecting. Awaiting it\n * directly hangs the request, and because the stalled promise is shared at the\n * isolate level, every later session-bearing request hangs too (observed as\n * 0-CPU, multi-minute, `canceled` responses; see #1274). A surrounding\n * try/catch cannot help: the promise never rejects.\n *\n * Two layers, mirroring the reclaimable-cache pattern used elsewhere in core:\n *  1. `after()` anchors the read so a cancelled request still drives it to\n *     completion — the promise settles and the isolate is not poisoned for\n *     subsequent requests (prevents the hang rather than merely surviving it).\n *  2. A timeout is a fail-closed backstop: a still-stalled (or rejecting) read\n *     resolves to `undefined`, and every caller treats the absence of a session\n *     user as unauthenticated (anonymous on public routes, 401/redirect on\n *     protected ones). It can only ever drop privileges for that one request,\n *     never grant them.\n *\n * Used by every session read on the request path: the main middleware (the\n * first read on a session-bearing request), the auth middleware, and the\n * preview-snapshot route (which bypasses the auth middleware).\n */\nexport async function resolveSessionUser<T>(\n\tsession: { get(key: \"user\"): Promise<T> } | undefined,\n\ttimeoutMs = SESSION_GET_TIMEOUT_MS,\n): Promise<T | undefined> {\n\tif (!session) return undefined;\n\tconst read: Promise<T | undefined> = Promise.resolve(session.get(\"user\")).catch(() => undefined);\n\t// Keep the worker alive past response/cancellation so the read completes and\n\t// the shared promise settles — this is what prevents the isolate poisoning.\n\tafter(() =>\n\t\tread.then(\n\t\t\t() => undefined,\n\t\t\t() => undefined,\n\t\t),\n\t);\n\tlet timer: ReturnType<typeof setTimeout> | undefined;\n\tconst timeout = new Promise<undefined>((resolve) => {\n\t\ttimer = setTimeout(resolve, timeoutMs, undefined);\n\t});\n\ttry {\n\t\treturn await Promise.race([read, timeout]);\n\t} finally {\n\t\tclearTimeout(timer);\n\t}\n}\n"],"mappings":";;;;;;;AAMA,MAAa,yBAAyB;;;;;;;;;;;;;;;;;;;;;;;;;;AA2BtC,eAAsB,mBACrB,SACA,YAAY,wBACa;AACzB,KAAI,CAAC,QAAS,QAAO;CACrB,MAAM,OAA+B,QAAQ,QAAQ,QAAQ,IAAI,OAAO,CAAC,CAAC,YAAY,OAAU;AAGhG,aACC,KAAK,WACE,cACA,OACN,CACD;CACD,IAAI;CACJ,MAAM,UAAU,IAAI,SAAoB,YAAY;AACnD,UAAQ,WAAW,SAAS,WAAW,OAAU;GAChD;AACF,KAAI;AACH,SAAO,MAAM,QAAQ,KAAK,CAAC,MAAM,QAAQ,CAAC;WACjC;AACT,eAAa,MAAM"}

package/dist/settings-AnEFYICn.mjs

@@ -1,51 +0,0 @@
-import { c as __exportAll } from "./runner-nEzvnogG.mjs";
-import { c as setSiteSettings, o as getSiteSettingsWithDb } from "./settings-DcMjREe5.mjs";
-
-//#region src/api/handlers/settings.ts
-var settings_exports = /* @__PURE__ */ __exportAll({
-	handleSettingsGet: () => handleSettingsGet,
-	handleSettingsUpdate: () => handleSettingsUpdate
-});
-/**
-* Get all site settings
-*/
-async function handleSettingsGet(db, storage) {
-	try {
-		return {
-			success: true,
-			data: await getSiteSettingsWithDb(db, storage)
-		};
-	} catch {
-		return {
-			success: false,
-			error: {
-				code: "SETTINGS_READ_ERROR",
-				message: "Failed to get settings"
-			}
-		};
-	}
-}
-/**
-* Update site settings
-*/
-async function handleSettingsUpdate(db, storage, input) {
-	try {
-		await setSiteSettings(input, db);
-		return {
-			success: true,
-			data: await getSiteSettingsWithDb(db, storage)
-		};
-	} catch {
-		return {
-			success: false,
-			error: {
-				code: "SETTINGS_UPDATE_ERROR",
-				message: "Failed to update settings"
-			}
-		};
-	}
-}
-
-//#endregion
-export { handleSettingsUpdate as n, settings_exports as r, handleSettingsGet as t };
-//# sourceMappingURL=settings-AnEFYICn.mjs.map

package/dist/settings-AnEFYICn.mjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"settings-AnEFYICn.mjs","names":[],"sources":["../src/api/handlers/settings.ts"],"sourcesContent":["/**\n * Settings handlers\n */\n\nimport type { Kysely } from \"kysely\";\n\nimport type { Database } from \"../../database/types.js\";\nimport { getSiteSettingsWithDb, setSiteSettings } from \"../../settings/index.js\";\nimport type { SiteSettings } from \"../../settings/types.js\";\nimport type { Storage } from \"../../storage/types.js\";\nimport type { ApiResult } from \"../types.js\";\n\n/**\n * Get all site settings\n */\nexport async function handleSettingsGet(\n\tdb: Kysely<Database>,\n\tstorage: Storage | null,\n): Promise<ApiResult<Partial<SiteSettings>>> {\n\ttry {\n\t\tconst settings = await getSiteSettingsWithDb(db, storage);\n\t\treturn { success: true, data: settings };\n\t} catch {\n\t\treturn {\n\t\t\tsuccess: false,\n\t\t\terror: { code: \"SETTINGS_READ_ERROR\", message: \"Failed to get settings\" },\n\t\t};\n\t}\n}\n\n/**\n * Update site settings\n */\nexport async function handleSettingsUpdate(\n\tdb: Kysely<Database>,\n\tstorage: Storage | null,\n\tinput: Partial<SiteSettings>,\n): Promise<ApiResult<Partial<SiteSettings>>> {\n\ttry {\n\t\tawait setSiteSettings(input, db);\n\t\tconst updatedSettings = await getSiteSettingsWithDb(db, storage);\n\t\treturn { success: true, data: updatedSettings };\n\t} catch {\n\t\treturn {\n\t\t\tsuccess: false,\n\t\t\terror: { code: \"SETTINGS_UPDATE_ERROR\", message: \"Failed to update settings\" },\n\t\t};\n\t}\n}\n"],"mappings":";;;;;;;;;;;AAeA,eAAsB,kBACrB,IACA,SAC4C;AAC5C,KAAI;AAEH,SAAO;GAAE,SAAS;GAAM,MADP,MAAM,sBAAsB,IAAI,QAAQ;GACjB;SACjC;AACP,SAAO;GACN,SAAS;GACT,OAAO;IAAE,MAAM;IAAuB,SAAS;IAA0B;GACzE;;;;;;AAOH,eAAsB,qBACrB,IACA,SACA,OAC4C;AAC5C,KAAI;AACH,QAAM,gBAAgB,OAAO,GAAG;AAEhC,SAAO;GAAE,SAAS;GAAM,MADA,MAAM,sBAAsB,IAAI,QAAQ;GACjB;SACxC;AACP,SAAO;GACN,SAAS;GACT,OAAO;IAAE,MAAM;IAAyB,SAAS;IAA6B;GAC9E"}

package/dist/settings-DcMjREe5.mjs

@@ -1,258 +0,0 @@
-import { t as after } from "./after-CBU2vkoO.mjs";
-import { d as invalidateObjectCache, n as cachedQuery } from "./object-cache-DVKnyOfy.mjs";
-import { t as MediaRepository } from "./media-BBm8Wg3f.mjs";
-import { t as OptionsRepository } from "./options-D1FBiAv1.mjs";
-import { n as peekRequestCache, r as requestCached } from "./request-cache-DAZZmesc.mjs";
-import { n as invalidateSingleFlightCache, r as singleFlightCached, t as createSingleFlightCache } from "./single-flight-cache-jaswDzmQ.mjs";
-import { n as siteSettingsTag } from "./chrome-tags-DzDQBCjX.mjs";
-import { s as getDb } from "./loader-WJi6GFRn.mjs";
-
-//#region src/settings/index.ts
-/** Object-cache namespace for site settings. */
-const SETTINGS_CACHE_NAMESPACE = "settings";
-/** Prefix for site settings in the options table */
-const SETTINGS_PREFIX = "site:";
-/**
-* Worker-isolate cache for the resolved `site:*` settings.
-*
-* Site settings (title, logo, SEO defaults) change rarely but are read on
-* every public request. Caching across the isolate's lifetime drops the
-* `options WHERE name LIKE 'site:%'` prefix scan from once-per-request to
-* once-per-isolate. Cross-isolate staleness is bounded by isolate lifetime
-* (workerd typically recycles within minutes); acceptable for chrome.
-*
-* Backed by single-flight-cache.ts: concurrent cold reads coalesce onto one
-* query via a reclaimable single-flight lock and the resolved *value* is
-* cached — never a shared in-flight promise, so a cancelled request can't
-* poison the isolate (see that file's header). Stored on globalThis with a
-* Symbol.for key so Vite SSR chunk duplication doesn't produce two
-* independent caches (same pattern as request-context.ts).
-*/
-const SITE_SETTINGS_CACHE_KEY = Symbol.for("emdash:site-settings");
-const g = globalThis;
-const settingsCache = g[SITE_SETTINGS_CACHE_KEY] ?? (() => {
-	const c = createSingleFlightCache();
-	g[SITE_SETTINGS_CACHE_KEY] = c;
-	return c;
-})();
-/**
-* Bump the isolate-wide site-settings cache version, forcing the next
-* `getSiteSettings()` to re-query the database.
-*
-* Called from every `site:*` write path. Other isolates still serve their
-* own cached copy until they expire — staleness bounded by isolate lifetime.
-*/
-function invalidateSiteSettingsCache() {
-	invalidateSingleFlightCache(settingsCache);
-	invalidateObjectCache(SETTINGS_CACHE_NAMESPACE);
-}
-/**
-* Type guard for MediaReference values
-*/
-function isMediaReference(value) {
-	return typeof value === "object" && value !== null && "mediaId" in value;
-}
-/**
-* Resolve a media reference to include the full URL plus content metadata.
-*
-* Pulls `mimeType` and intrinsic dimensions from the media row so callers
-* can emit correct head tags (e.g. `<link rel="icon" type="image/svg+xml">`,
-* which Chromium requires when the URL has no `.svg` extension) without
-* a second round-trip to the media table.
-*/
-async function resolveMediaReference(mediaRef, db, _storage) {
-	if (!mediaRef?.mediaId) return mediaRef;
-	try {
-		const media = await new MediaRepository(db).findById(mediaRef.mediaId);
-		if (media) return {
-			...mediaRef,
-			url: `/_emdash/api/media/file/${media.storageKey}`,
-			contentType: media.mimeType,
-			...media.width !== null ? { width: media.width } : {},
-			...media.height !== null ? { height: media.height } : {}
-		};
-	} catch {}
-	return mediaRef;
-}
-/**
-* Get a single site setting by key
-*
-* Returns `undefined` if the setting has not been configured.
-* For media settings (logo, favicon), the URL is resolved automatically.
-*
-* @param key - The setting key (e.g., "title", "logo", "social")
-* @returns The setting value, or undefined if not set
-*
-* @example
-* ```ts
-* import { getSiteSetting } from "emdash";
-*
-* const title = await getSiteSetting("title");
-* const logo = await getSiteSetting("logo");
-* console.log(logo?.url); // Resolved URL
-* ```
-*/
-async function getSiteSetting(key) {
-	const primed = peekRequestCache("siteSettings");
-	if (primed) return (await primed)[key];
-	return requestCached(`siteSetting:${key}`, async () => {
-		return getSiteSettingWithDb(key, await getDb());
-	});
-}
-/**
-* Get a single site setting by key (with explicit db)
-*
-* @internal Use `getSiteSetting()` in templates. This variant is for admin routes
-* that already have a database handle.
-*/
-async function getSiteSettingWithDb(key, db, storage = null) {
-	const value = await new OptionsRepository(db).get(`${SETTINGS_PREFIX}${key}`);
-	if (!value) return;
-	if ((key === "logo" || key === "favicon") && isMediaReference(value)) return await resolveMediaReference(value, db, storage);
-	if (key === "seo" && value && typeof value === "object") {
-		const seo = value;
-		if (seo.defaultOgImage) return {
-			...seo,
-			defaultOgImage: await resolveMediaReference(seo.defaultOgImage, db, storage)
-		};
-	}
-	return value;
-}
-/**
-* Get all site settings
-*
-* Returns all configured settings. Unset values are undefined.
-* Media references (logo/favicon) are resolved to include URLs.
-*
-* @example
-* ```ts
-* import { getSiteSettings } from "emdash";
-*
-* const settings = await getSiteSettings();
-* console.log(settings.title); // "My Site"
-* console.log(settings.logo?.url); // "/_emdash/api/media/file/abc123"
-* ```
-*/
-function getSiteSettings() {
-	return requestCached("siteSettings", () => singleFlightCached(settingsCache, () => cachedQuery({
-		namespace: SETTINGS_CACHE_NAMESPACE,
-		key: "all",
-		load: async () => {
-			return getSiteSettingsWithDb(await getDb());
-		}
-	}), {
-		anchor: (promise) => after(() => promise),
-		ownerTimeoutMs: 3e4
-	}));
-}
-/**
-* Get all site settings with a Workers edge-cache hint.
-*
-* Use the returned `cacheHint` with `Astro.cache.set()` so pages that render
-* settings can be purged automatically when site settings change.
-*/
-async function getSiteSettingsWithCacheHint() {
-	return {
-		data: await getSiteSettings(),
-		cacheHint: { tags: [siteSettingsTag()] }
-	};
-}
-/**
-* Get all site settings (with explicit db)
-*
-* @internal Use `getSiteSettings()` in templates. This variant is for admin routes
-* that already have a database handle.
-*/
-async function getSiteSettingsWithDb(db, storage = null) {
-	const allOptions = await new OptionsRepository(db).getByPrefix(SETTINGS_PREFIX);
-	const settings = {};
-	for (const [key, value] of allOptions) {
-		const settingKey = key.replace(SETTINGS_PREFIX, "");
-		settings[settingKey] = value;
-	}
-	const typedSettings = settings;
-	if (typedSettings.logo) typedSettings.logo = await resolveMediaReference(typedSettings.logo, db, storage);
-	if (typedSettings.favicon) typedSettings.favicon = await resolveMediaReference(typedSettings.favicon, db, storage);
-	if (typedSettings.seo?.defaultOgImage) typedSettings.seo = {
-		...typedSettings.seo,
-		defaultOgImage: await resolveMediaReference(typedSettings.seo.defaultOgImage, db, storage)
-	};
-	return typedSettings;
-}
-/**
-* Set site settings (internal function used by admin API)
-*
-* Merges provided settings with existing ones. Only provided fields are updated.
-* Media references should include just the mediaId; URLs are resolved on read.
-*
-* @param settings - Partial settings object with values to update
-* @param db - Kysely database instance
-* @returns Promise that resolves when settings are saved
-*
-* @internal
-*
-* @example
-* ```ts
-* // Update multiple settings at once
-* await setSiteSettings({
-*   title: "My Site",
-*   tagline: "Welcome",
-*   logo: { mediaId: "med_123", alt: "Logo" }
-* }, db);
-* ```
-*/
-async function setSiteSettings(settings, db) {
-	const options = new OptionsRepository(db);
-	const updates = {};
-	for (const [key, value] of Object.entries(settings)) if (value !== void 0) updates[`${SETTINGS_PREFIX}${key}`] = value;
-	try {
-		await options.setMany(updates);
-	} finally {
-		invalidateSiteSettingsCache();
-	}
-}
-/**
-* Get a single plugin setting by key.
-*
-* Plugin settings are stored in the options table under
-* `plugin:<pluginId>:settings:<key>`.
-*/
-async function getPluginSetting(pluginId, key) {
-	return getPluginSettingWithDb(pluginId, key, await getDb());
-}
-/**
-* Get a single plugin setting by key (with explicit db).
-*
-* @internal Use `getPluginSetting()` in templates and plugin rendering code.
-*/
-async function getPluginSettingWithDb(pluginId, key, db) {
-	return await new OptionsRepository(db).get(`plugin:${pluginId}:settings:${key}`) ?? void 0;
-}
-/**
-* Get all persisted plugin settings for a plugin.
-*
-* Defaults declared in `admin.settingsSchema` are not materialized
-* automatically; callers should apply their own fallback defaults.
-*/
-async function getPluginSettings(pluginId) {
-	return getPluginSettingsWithDb(pluginId, await getDb());
-}
-/**
-* Get all persisted plugin settings for a plugin (with explicit db).
-*
-* @internal Use `getPluginSettings()` in templates and plugin rendering code.
-*/
-async function getPluginSettingsWithDb(pluginId, db) {
-	const prefix = `plugin:${pluginId}:settings:`;
-	const allOptions = await new OptionsRepository(db).getByPrefix(prefix);
-	const settings = {};
-	for (const [key, value] of allOptions) {
-		if (!key.startsWith(prefix)) continue;
-		settings[key.slice(prefix.length)] = value;
-	}
-	return settings;
-}
-
-//#endregion
-export { getSiteSettingsWithCacheHint as a, setSiteSettings as c, getSiteSettings as i, getPluginSettings as n, getSiteSettingsWithDb as o, getSiteSetting as r, invalidateSiteSettingsCache as s, getPluginSetting as t };
-//# sourceMappingURL=settings-DcMjREe5.mjs.map