emdash 0.39.0 → 0.40.0

package/dist/types-DA1Te3Oy.d.mts

@@ -0,0 +1,198 @@
+//#region src/storage/types.d.ts
+/**
+ * Storage Layer Types
+ *
+ * Defines the interface for S3-compatible storage backends.
+ * Works with R2, AWS S3, Minio, and other S3-compatible services.
+ */
+/**
+ * Storage configuration for S3-compatible backends
+ */
+interface S3StorageConfig {
+  /** S3 endpoint URL (e.g., "https://xxx.r2.cloudflarestorage.com") */
+  endpoint: string;
+  /** Bucket name */
+  bucket: string;
+  /**
+   * AWS access key ID.
+   * May be resolved from the `S3_ACCESS_KEY_ID` env var at runtime on Node.
+   * Must be provided together with `secretAccessKey`, or both omitted.
+   */
+  accessKeyId?: string;
+  /**
+   * AWS secret access key.
+   * May be resolved from the `S3_SECRET_ACCESS_KEY` env var at runtime on Node.
+   * Must be provided together with `accessKeyId`, or both omitted.
+   */
+  secretAccessKey?: string;
+  /** Optional region (defaults to "auto") */
+  region?: string;
+  /** Optional public URL prefix for generated URLs (e.g., CDN URL) */
+  publicUrl?: string;
+}
+/**
+ * Local filesystem storage for development
+ */
+interface LocalStorageConfig {
+  /** Directory path for storing files */
+  directory: string;
+  /** Base URL for serving files */
+  baseUrl: string;
+}
+/**
+ * Storage adapter descriptor (serializable config)
+ */
+interface StorageDescriptor {
+  /** Module path exporting createStorage function */
+  entrypoint: string;
+  /** Serializable config passed to createStorage at runtime */
+  config: Record<string, unknown>;
+}
+/**
+ * Factory function signature for storage adapters
+ *
+ * Each adapter accesses its own bindings directly:
+ * - R2: imports from cloudflare:workers
+ * - S3: uses credentials from config
+ * - Local: uses filesystem path from config
+ */
+type CreateStorageFn = (config: Record<string, unknown>) => Storage;
+/**
+ * Upload result
+ */
+interface UploadResult {
+  /** Storage key (path within bucket) */
+  key: string;
+  /** Public URL to access the file */
+  url: string;
+  /** File size in bytes */
+  size: number;
+}
+/**
+ * Download result
+ */
+interface DownloadResult {
+  /** File content as readable stream */
+  body: ReadableStream<Uint8Array>;
+  /** MIME type */
+  contentType: string;
+  /** File size in bytes */
+  size: number;
+}
+/**
+ * Signed URL for direct upload
+ */
+interface SignedUploadUrl {
+  /** Signed URL for PUT request */
+  url: string;
+  /** HTTP method (always PUT) */
+  method: "PUT";
+  /** Headers to include in the upload request */
+  headers: Record<string, string>;
+  /** URL expiration time (ISO string) */
+  expiresAt: string;
+}
+/**
+ * Options for generating signed upload URL
+ */
+interface SignedUploadOptions {
+  /** Storage key (path within bucket) */
+  key: string;
+  /** MIME type of the file */
+  contentType: string;
+  /** File size in bytes (for content-length validation) */
+  size?: number;
+  /** URL expiration in seconds (default: 3600) */
+  expiresIn?: number;
+}
+/**
+ * File listing result
+ */
+interface ListResult {
+  /** List of files */
+  files: FileInfo[];
+  /** Cursor for next page (if more results) */
+  nextCursor?: string;
+}
+/**
+ * File info from listing
+ */
+interface FileInfo {
+  /** Storage key */
+  key: string;
+  /** File size in bytes */
+  size: number;
+  /** Last modified date */
+  lastModified: Date;
+  /** ETag (content hash) */
+  etag?: string;
+}
+/**
+ * Options for listing files
+ */
+interface ListOptions {
+  /** Filter by key prefix */
+  prefix?: string;
+  /** Maximum results per page */
+  limit?: number;
+  /** Cursor from previous list call */
+  cursor?: string;
+}
+/**
+ * Storage interface
+ *
+ * All storage backends must implement this interface.
+ */
+interface Storage {
+  /**
+   * Upload a file to storage
+   */
+  upload(options: {
+    key: string;
+    body: Buffer | Uint8Array | ReadableStream<Uint8Array>;
+    contentType: string; /** Optional HTTP cache policy stored with publicly served objects. */
+    cacheControl?: string;
+  }): Promise<UploadResult>;
+  /**
+   * Download a file from storage
+   */
+  download(key: string): Promise<DownloadResult>;
+  /**
+   * Delete a file from storage
+   * Idempotent - does not throw if file doesn't exist
+   */
+  delete(key: string): Promise<void>;
+  /**
+   * Check if a file exists
+   */
+  exists(key: string): Promise<boolean>;
+  /**
+   * List files in storage
+   */
+  list(options?: ListOptions): Promise<ListResult>;
+  /**
+   * Generate a signed URL for direct upload
+   * Client uploads directly to storage, bypassing the server
+   */
+  getSignedUploadUrl(options: SignedUploadOptions): Promise<SignedUploadUrl>;
+  /**
+   * Get public URL for a file
+   */
+  getPublicUrl(key: string): string;
+  /**
+   * Get the origin the browser connects to for direct client uploads.
+   * Used by the admin CSP when the storage descriptor has no static endpoint.
+   */
+  getClientUploadOrigin?(): string;
+}
+/**
+ * Storage error with additional context
+ */
+declare class EmDashStorageError extends Error {
+  code: string;
+  cause?: unknown | undefined;
+  constructor(message: string, code: string, cause?: unknown | undefined);
+}
+//#endregion
+export { ListOptions as a, S3StorageConfig as c, Storage as d, StorageDescriptor as f, FileInfo as i, SignedUploadOptions as l, DownloadResult as n, ListResult as o, UploadResult as p, EmDashStorageError as r, LocalStorageConfig as s, CreateStorageFn as t, SignedUploadUrl as u };
+//# sourceMappingURL=types-DA1Te3Oy.d.mts.map

package/dist/types-DA1Te3Oy.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types-DA1Te3Oy.d.mts","names":[],"sources":["../src/storage/types.ts"],"mappings":";;AAUA;;;;;;;;UAAiB,eAAA;EAoBhB;EAlBA,QAAA;EAkBS;EAhBT,MAAA;EAsBkC;;;;AAUnC;EA1BC,WAAA;;;;;;EAMA,eAAA;EAwBc;EAtBd,MAAA;EAiC0B;EA/B1B,SAAA;AAAA;;;;UAMgB,kBAAA;EAyByD;EAvBzE,SAAA;EA4B4B;EA1B5B,OAAA;AAAA;;;;UAMgB,iBAAA;EA0BZ;EAxBJ,UAAA;EA8B8B;EA5B9B,MAAA,EAAQ,MAAA;AAAA;;;;;;;;AAwCT;KA7BY,eAAA,IAAmB,MAAA,EAAQ,MAAA,sBAA4B,OAAA;;;;UAKlD,YAAA;EA8BhB;EA5BA,GAAA;EA8BA;EA5BA,GAAA;EA4BS;EA1BT,IAAA;AAAA;;;;UAMgB,cAAA;EAgChB;EA9BA,IAAA,EAAM,cAAA,CAAe,UAAA;EAgCZ;EA9BT,WAAA;EAoCgB;EAlChB,IAAA;AAAA;;;;UAMgB,eAAA;EAgCN;EA9BV,GAAA;EAoCgB;EAlChB,MAAA;;EAEA,OAAA,EAAS,MAAA;EAkCT;EAhCA,SAAA;AAAA;;;;UAMgB,mBAAA;EAsCA;EApChB,GAAA;;EAEA,WAAA;EAoCA;EAlCA,IAAA;EAsCA;EApCA,SAAA;AAAA;AA4CD;;;AAAA,UAtCiB,UAAA;EA4CA;EA1ChB,KAAA,EAAO,QAAA;EA0CsB;EAxC7B,UAAA;AAAA;;;;UAMgB,QAAA;EA2DD;EAzDf,GAAA;EAyD6B;EAvD7B,IAAA;EA6D0D;EA3D1D,YAAA,EAAc,IAAA;EA2D2C;EAzDzD,IAAA;AAAA;;;;UAMgB,WAAA;EAoBa;EAlB7B,MAAA;EAmBC;EAjBD,KAAA;EAcO;EAZP,MAAA;AAAA;;;;;;UAQgB,OAAA;EAqBK;;;EAjBrB,MAAA,CAAO,OAAA;IACN,GAAA;IACA,IAAA,EAAM,MAAA,GAAS,UAAA,GAAa,cAAA,CAAe,UAAA;IAC3C,WAAA,UAwB4B;IAtB5B,YAAA;EAAA,IACG,OAAA,CAAQ,YAAA;EA2BgB;;;EAtB5B,QAAA,CAAS,GAAA,WAAc,OAAA,CAAQ,cAAA;EA2B/B;;;;EArBA,MAAA,CAAO,GAAA,WAAc,OAAA;EAiCT;;;EA5BZ,MAAA,CAAO,GAAA,WAAc,OAAA;EA4BkB;;;EAvBvC,IAAA,CAAK,OAAA,GAAU,WAAA,GAAc,OAAA,CAAQ,UAAA;EAyBpC;;;;EAnBD,kBAAA,CAAmB,OAAA,EAAS,mBAAA,GAAsB,OAAA,CAAQ,eAAA;;;;EAK1D,YAAA,CAAa,GAAA;;;;;EAMb,qBAAA;AAAA;;;;cAMY,kBAAA,SAA2B,KAAA;EAG/B,IAAA;EACS,KAAA;cAFhB,OAAA,UACO,IAAA,UACS,KAAA;AAAA"}

package/dist/types-DhV6Q5bP.mjs

@@ -0,0 +1,18 @@
+//#region src/search/types.ts
+/**
+* Search Types
+*
+* Type definitions for the EmDash search system.
+*/
+/**
+* Search configuration for a collection
+*/
+const SEARCH_TOKENIZERS = [
+	"porter unicode61",
+	"unicode61",
+	"trigram"
+];
+
+//#endregion
+export { SEARCH_TOKENIZERS as t };
+//# sourceMappingURL=types-DhV6Q5bP.mjs.map

package/dist/types-DhV6Q5bP.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"types-DhV6Q5bP.mjs","names":[],"sources":["../src/search/types.ts"],"sourcesContent":["/**\n * Search Types\n *\n * Type definitions for the EmDash search system.\n */\n\n/**\n * Search configuration for a collection\n */\nexport const SEARCH_TOKENIZERS = [\"porter unicode61\", \"unicode61\", \"trigram\"] as const;\n\nexport type SearchTokenizer = (typeof SEARCH_TOKENIZERS)[number];\n\nexport interface SearchConfig {\n\t/** Whether search is enabled for this collection */\n\tenabled: boolean;\n\t/** Field weights for ranking (higher = more important) */\n\tweights?: Record<string, number>;\n\t/** Field slug used as the result title, from the collection's titleField. */\n\ttitleField?: string;\n\t/** FTS5 tokenizer configuration (defaults to English Porter stemming) */\n\ttokenize?: SearchTokenizer;\n}\n\n/**\n * Options for search queries\n */\nexport interface SearchOptions {\n\t/** Collections to search (defaults to all searchable collections) */\n\tcollections?: string[];\n\t/** Filter by content status (defaults to 'published') */\n\tstatus?: string;\n\t/** Filter by locale (omit to search all locales) */\n\tlocale?: string;\n\t/** Maximum results to return (defaults to 20) */\n\tlimit?: number;\n\t/** Pagination cursor */\n\tcursor?: string;\n\t/**\n\t * Which indexed fields to match against (defaults to 'all').\n\t * With 'title', only the collection's title field is matched; collections\n\t * whose title field is not indexed for search return no results.\n\t */\n\tscope?: \"all\" | \"title\";\n}\n\n/**\n * Options for collection-specific search\n */\nexport interface CollectionSearchOptions {\n\t/** Filter by content status (defaults to 'published') */\n\tstatus?: string;\n\t/** Filter by locale (omit to search all locales) */\n\tlocale?: string;\n\t/** Maximum results to return (defaults to 20) */\n\tlimit?: number;\n\t/** Pagination cursor */\n\tcursor?: string;\n\t/** Which indexed fields to match against (defaults to 'all'). */\n\tscope?: \"all\" | \"title\";\n}\n\n/**\n * A single search result\n */\nexport interface SearchResult {\n\t/** Collection the result belongs to */\n\tcollection: string;\n\t/** Entry ID */\n\tid: string;\n\t/** Entry slug */\n\tslug: string | null;\n\t/** Content locale */\n\tlocale: string;\n\t/** Entry title (if available) */\n\ttitle?: string;\n\t/**\n\t * Highlighted snippet showing match context.\n\t *\n\t * Sanitized server-side to be safe for `set:html` / `innerHTML`:\n\t * all HTML metacharacters in the source text are escaped, and\n\t * matched terms are wrapped in literal `<mark>...</mark>` tags\n\t * (the only HTML the snippet is allowed to contain).\n\t */\n\tsnippet?: string;\n\t/** Relevance score (higher = more relevant) */\n\tscore: number;\n}\n\n/**\n * Response from a search query\n */\nexport interface SearchResponse {\n\t/** Search results */\n\titems: SearchResult[];\n\t/** Cursor for next page of results */\n\tnextCursor?: string;\n}\n\n/**\n * Options for suggestion/autocomplete queries\n */\nexport interface SuggestOptions {\n\t/** Collections to search (defaults to all searchable collections) */\n\tcollections?: string[];\n\t/** Filter by locale (omit to search all locales) */\n\tlocale?: string;\n\t/** Maximum suggestions to return (defaults to 5) */\n\tlimit?: number;\n}\n\n/**\n * A single suggestion result\n */\nexport interface Suggestion {\n\t/** Collection the suggestion belongs to */\n\tcollection: string;\n\t/** Entry ID */\n\tid: string;\n\t/** Entry slug, when available */\n\tslug?: string | null;\n\t/** Entry title */\n\ttitle: string;\n}\n\n/**\n * Search index statistics\n */\nexport interface SearchStats {\n\tcollections: Record<\n\t\tstring,\n\t\t{\n\t\t\t/** Number of indexed entries */\n\t\t\tindexed: number;\n\t\t\t/** When the index was last rebuilt */\n\t\t\tlastRebuilt?: string;\n\t\t}\n\t>;\n}\n"],"mappings":";;;;;;;;;AASA,MAAa,oBAAoB;CAAC;CAAoB;CAAa;CAAU"}

package/dist/types-DnnVSl6Y.d.mts

@@ -0,0 +1,85 @@
+//#region src/settings/types.d.ts
+/**
+ * Site Settings Types
+ *
+ * Global configuration for the site (title, logo, social links, etc.)
+ */
+/**
+ * Media reference for logo/favicon/seo.defaultOgImage.
+ *
+ * Stored shape is just `{ mediaId, alt? }`. The remaining fields are
+ * populated by `resolveMediaReference` on read so templates can emit
+ * correct head tags without a second round-trip to the media table.
+ *
+ * The Zod schemas at the REST/MCP boundary are split:
+ *  - `mediaReferenceInput` (used by `settingsUpdateBody`) defines only
+ *    `mediaId` and `alt`. Default strip-mode parsing discards any
+ *    resolved fields a client posts back, so they never reach storage.
+ *  - `mediaReferenceResponse` (used by `siteSettingsSchema`) includes
+ *    the resolved fields so generated OpenAPI clients see them.
+ *
+ * If you ever switch `mediaReferenceInput` to `passthrough`, you must
+ * also strip the resolved fields explicitly in `setSiteSettings`, or
+ * stored options will accumulate stale `url` / `contentType` / `width`
+ * / `height` snapshots.
+ */
+interface MediaReference {
+  mediaId: string;
+  alt?: string;
+  /** Resolved URL. Populated by `resolveMediaReference`; absent on raw stored values. */
+  url?: string;
+  /** Stored MIME type (e.g. `image/svg+xml`). Populated alongside `url`. */
+  contentType?: string;
+  /** Pixel width if known. Populated alongside `url`. */
+  width?: number;
+  /** Pixel height if known. Populated alongside `url`. */
+  height?: number;
+}
+/** Site-level SEO settings */
+interface SeoSettings {
+  /** Separator between page title and site title (e.g., " | ", " — ") */
+  titleSeparator?: string;
+  /** Default OG image when content has no seo_image */
+  defaultOgImage?: MediaReference;
+  /** Custom robots.txt content. If unset, a default is generated. */
+  robotsTxt?: string;
+  /** Google Search Console verification meta tag content */
+  googleVerification?: string;
+  /** Bing Webmaster Tools verification meta tag content */
+  bingVerification?: string;
+}
+/** Site settings schema */
+interface SiteSettings {
+  title: string;
+  tagline?: string;
+  logo?: MediaReference;
+  favicon?: MediaReference;
+  url?: string;
+  postsPerPage: number;
+  dateFormat: string;
+  timezone: string;
+  social?: {
+    twitter?: string;
+    github?: string;
+    facebook?: string;
+    instagram?: string;
+    linkedin?: string;
+    youtube?: string;
+  };
+  seo?: SeoSettings;
+}
+/** Partial SEO update. `null` removes the configured default image. */
+interface SeoSettingsUpdate extends Omit<SeoSettings, "defaultOgImage"> {
+  defaultOgImage?: MediaReference | null;
+}
+/** Site-settings write shape. `null` removes media references; omitted fields are unchanged. */
+interface SiteSettingsUpdate extends Omit<Partial<SiteSettings>, "logo" | "favicon" | "seo"> {
+  logo?: MediaReference | null;
+  favicon?: MediaReference | null;
+  seo?: SeoSettingsUpdate;
+}
+/** Keys that are valid site settings */
+type SiteSettingKey = keyof SiteSettings;
+//#endregion
+export { SiteSettings as a, SiteSettingKey as i, SeoSettings as n, SiteSettingsUpdate as o, SeoSettingsUpdate as r, MediaReference as t };
+//# sourceMappingURL=types-DnnVSl6Y.d.mts.map

package/dist/types-DnnVSl6Y.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types-DnnVSl6Y.d.mts","names":[],"sources":["../src/settings/types.ts"],"mappings":";;AAyBA;;;;;;;;;;;;AAcA;;;;;;;;;;;UAdiB,cAAA;EAChB,OAAA;EACA,GAAA;;EAEA,GAAA;EA6BU;EA3BV,WAAA;EAgDiB;EA9CjB,KAAA;EAsBA;EApBA,MAAA;AAAA;;UAIgB,WAAA;EAmBN;EAjBV,cAAA;EAuBA;EArBA,cAAA,GAAiB,cAAA;EAuBjB;EArBA,SAAA;EAyBC;EAvBD,kBAAA;EAyBC;EAvBD,gBAAA;AAAA;;UAIgB,YAAA;EAEhB,KAAA;EACA,OAAA;EACA,IAAA,GAAO,cAAA;EACP,OAAA,GAAU,cAAA;EAGV,GAAA;EAGA,YAAA;EACA,UAAA;EACA,QAAA;EAGA,MAAA;IACC,OAAA;IACA,MAAA;IACA,QAAA;IACA,SAAA;IACA,QAAA;IACA,OAAA;EAAA;EAID,GAAA,GAAM,WAAA;AAAA;;UAIU,iBAAA,SAA0B,IAAA,CAAK,WAAA;EAC/C,cAAA,GAAiB,cAAA;AAAA;;UAID,kBAAA,SAA2B,IAAA,CAC3C,OAAA,CAAQ,YAAA;EAGR,IAAA,GAAO,cAAA;EACP,OAAA,GAAU,cAAA;EACV,GAAA,GAAM,iBAAA;AAAA;;KAIK,cAAA,SAAuB,YAAA"}

package/dist/types-VT4-BugW.mjs

@@ -0,0 +1,16 @@
+//#region src/storage/types.ts
+/**
+* Storage error with additional context
+*/
+var EmDashStorageError = class extends Error {
+	constructor(message, code, cause) {
+		super(message);
+		this.code = code;
+		this.cause = cause;
+		this.name = "EmDashStorageError";
+	}
+};
+
+//#endregion
+export { EmDashStorageError as t };
+//# sourceMappingURL=types-VT4-BugW.mjs.map

package/dist/types-VT4-BugW.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"types-VT4-BugW.mjs","names":[],"sources":["../src/storage/types.ts"],"sourcesContent":["/**\n * Storage Layer Types\n *\n * Defines the interface for S3-compatible storage backends.\n * Works with R2, AWS S3, Minio, and other S3-compatible services.\n */\n\n/**\n * Storage configuration for S3-compatible backends\n */\nexport interface S3StorageConfig {\n\t/** S3 endpoint URL (e.g., \"https://xxx.r2.cloudflarestorage.com\") */\n\tendpoint: string;\n\t/** Bucket name */\n\tbucket: string;\n\t/**\n\t * AWS access key ID.\n\t * May be resolved from the `S3_ACCESS_KEY_ID` env var at runtime on Node.\n\t * Must be provided together with `secretAccessKey`, or both omitted.\n\t */\n\taccessKeyId?: string;\n\t/**\n\t * AWS secret access key.\n\t * May be resolved from the `S3_SECRET_ACCESS_KEY` env var at runtime on Node.\n\t * Must be provided together with `accessKeyId`, or both omitted.\n\t */\n\tsecretAccessKey?: string;\n\t/** Optional region (defaults to \"auto\") */\n\tregion?: string;\n\t/** Optional public URL prefix for generated URLs (e.g., CDN URL) */\n\tpublicUrl?: string;\n}\n\n/**\n * Local filesystem storage for development\n */\nexport interface LocalStorageConfig {\n\t/** Directory path for storing files */\n\tdirectory: string;\n\t/** Base URL for serving files */\n\tbaseUrl: string;\n}\n\n/**\n * Storage adapter descriptor (serializable config)\n */\nexport interface StorageDescriptor {\n\t/** Module path exporting createStorage function */\n\tentrypoint: string;\n\t/** Serializable config passed to createStorage at runtime */\n\tconfig: Record<string, unknown>;\n}\n\n/**\n * Factory function signature for storage adapters\n *\n * Each adapter accesses its own bindings directly:\n * - R2: imports from cloudflare:workers\n * - S3: uses credentials from config\n * - Local: uses filesystem path from config\n */\nexport type CreateStorageFn = (config: Record<string, unknown>) => Storage;\n\n/**\n * Upload result\n */\nexport interface UploadResult {\n\t/** Storage key (path within bucket) */\n\tkey: string;\n\t/** Public URL to access the file */\n\turl: string;\n\t/** File size in bytes */\n\tsize: number;\n}\n\n/**\n * Download result\n */\nexport interface DownloadResult {\n\t/** File content as readable stream */\n\tbody: ReadableStream<Uint8Array>;\n\t/** MIME type */\n\tcontentType: string;\n\t/** File size in bytes */\n\tsize: number;\n}\n\n/**\n * Signed URL for direct upload\n */\nexport interface SignedUploadUrl {\n\t/** Signed URL for PUT request */\n\turl: string;\n\t/** HTTP method (always PUT) */\n\tmethod: \"PUT\";\n\t/** Headers to include in the upload request */\n\theaders: Record<string, string>;\n\t/** URL expiration time (ISO string) */\n\texpiresAt: string;\n}\n\n/**\n * Options for generating signed upload URL\n */\nexport interface SignedUploadOptions {\n\t/** Storage key (path within bucket) */\n\tkey: string;\n\t/** MIME type of the file */\n\tcontentType: string;\n\t/** File size in bytes (for content-length validation) */\n\tsize?: number;\n\t/** URL expiration in seconds (default: 3600) */\n\texpiresIn?: number;\n}\n\n/**\n * File listing result\n */\nexport interface ListResult {\n\t/** List of files */\n\tfiles: FileInfo[];\n\t/** Cursor for next page (if more results) */\n\tnextCursor?: string;\n}\n\n/**\n * File info from listing\n */\nexport interface FileInfo {\n\t/** Storage key */\n\tkey: string;\n\t/** File size in bytes */\n\tsize: number;\n\t/** Last modified date */\n\tlastModified: Date;\n\t/** ETag (content hash) */\n\tetag?: string;\n}\n\n/**\n * Options for listing files\n */\nexport interface ListOptions {\n\t/** Filter by key prefix */\n\tprefix?: string;\n\t/** Maximum results per page */\n\tlimit?: number;\n\t/** Cursor from previous list call */\n\tcursor?: string;\n}\n\n/**\n * Storage interface\n *\n * All storage backends must implement this interface.\n */\nexport interface Storage {\n\t/**\n\t * Upload a file to storage\n\t */\n\tupload(options: {\n\t\tkey: string;\n\t\tbody: Buffer | Uint8Array | ReadableStream<Uint8Array>;\n\t\tcontentType: string;\n\t\t/** Optional HTTP cache policy stored with publicly served objects. */\n\t\tcacheControl?: string;\n\t}): Promise<UploadResult>;\n\n\t/**\n\t * Download a file from storage\n\t */\n\tdownload(key: string): Promise<DownloadResult>;\n\n\t/**\n\t * Delete a file from storage\n\t * Idempotent - does not throw if file doesn't exist\n\t */\n\tdelete(key: string): Promise<void>;\n\n\t/**\n\t * Check if a file exists\n\t */\n\texists(key: string): Promise<boolean>;\n\n\t/**\n\t * List files in storage\n\t */\n\tlist(options?: ListOptions): Promise<ListResult>;\n\n\t/**\n\t * Generate a signed URL for direct upload\n\t * Client uploads directly to storage, bypassing the server\n\t */\n\tgetSignedUploadUrl(options: SignedUploadOptions): Promise<SignedUploadUrl>;\n\n\t/**\n\t * Get public URL for a file\n\t */\n\tgetPublicUrl(key: string): string;\n\n\t/**\n\t * Get the origin the browser connects to for direct client uploads.\n\t * Used by the admin CSP when the storage descriptor has no static endpoint.\n\t */\n\tgetClientUploadOrigin?(): string;\n}\n\n/**\n * Storage error with additional context\n */\nexport class EmDashStorageError extends Error {\n\tconstructor(\n\t\tmessage: string,\n\t\tpublic code: string,\n\t\tpublic override cause?: unknown,\n\t) {\n\t\tsuper(message);\n\t\tthis.name = \"EmDashStorageError\";\n\t}\n}\n"],"mappings":";;;;AAkNA,IAAa,qBAAb,cAAwC,MAAM;CAC7C,YACC,SACA,AAAO,MACP,AAAgB,OACf;AACD,QAAM,QAAQ;EAHP;EACS;AAGhB,OAAK,OAAO"}

package/dist/upload-attempts-B68ZGNu9.mjs

@@ -0,0 +1,32 @@
+//#region src/media/upload-attempts.ts
+async function removeUploadAttempt(storage, repo, storageKey, options = {}) {
+	try {
+		if (!await repo.claimUploadAttemptForCleanup(storageKey)) {
+			if (await repo.hasUploadAttempt(storageKey) || !options.allowUntracked) return false;
+		}
+	} catch (error) {
+		console.error("[media] upload cleanup claim failed:", error);
+		return false;
+	}
+	try {
+		await storage.delete(storageKey);
+	} catch (error) {
+		console.error("[media] upload cleanup failed:", error);
+		try {
+			await repo.deferUploadAttemptCleanup(storageKey);
+		} catch (deferError) {
+			console.error("[media] upload cleanup deferral failed:", deferError);
+		}
+		return false;
+	}
+	try {
+		await repo.deleteUploadAttempt(storageKey);
+	} catch (error) {
+		console.error("[media] upload cleanup record deletion failed:", error);
+	}
+	return true;
+}
+
+//#endregion
+export { removeUploadAttempt as t };
+//# sourceMappingURL=upload-attempts-B68ZGNu9.mjs.map

package/dist/upload-attempts-B68ZGNu9.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"upload-attempts-B68ZGNu9.mjs","names":[],"sources":["../src/media/upload-attempts.ts"],"sourcesContent":["import type { MediaRepository } from \"../database/repositories/media.js\";\nimport type { Storage } from \"../storage/types.js\";\n\nexport async function removeUploadAttempt(\n\tstorage: Storage,\n\trepo: MediaRepository,\n\tstorageKey: string,\n\toptions: { allowUntracked?: boolean } = {},\n): Promise<boolean> {\n\ttry {\n\t\tif (!(await repo.claimUploadAttemptForCleanup(storageKey))) {\n\t\t\tconst tracked = await repo.hasUploadAttempt(storageKey);\n\t\t\tif (tracked || !options.allowUntracked) return false;\n\t\t}\n\t} catch (error) {\n\t\tconsole.error(\"[media] upload cleanup claim failed:\", error);\n\t\treturn false;\n\t}\n\n\ttry {\n\t\tawait storage.delete(storageKey);\n\t} catch (error) {\n\t\tconsole.error(\"[media] upload cleanup failed:\", error);\n\t\ttry {\n\t\t\tawait repo.deferUploadAttemptCleanup(storageKey);\n\t\t} catch (deferError) {\n\t\t\tconsole.error(\"[media] upload cleanup deferral failed:\", deferError);\n\t\t}\n\t\treturn false;\n\t}\n\n\ttry {\n\t\tawait repo.deleteUploadAttempt(storageKey);\n\t} catch (error) {\n\t\tconsole.error(\"[media] upload cleanup record deletion failed:\", error);\n\t}\n\treturn true;\n}\n"],"mappings":";AAGA,eAAsB,oBACrB,SACA,MACA,YACA,UAAwC,EAAE,EACvB;AACnB,KAAI;AACH,MAAI,CAAE,MAAM,KAAK,6BAA6B,WAAW,EAExD;OADgB,MAAM,KAAK,iBAAiB,WAAW,IACxC,CAAC,QAAQ,eAAgB,QAAO;;UAExC,OAAO;AACf,UAAQ,MAAM,wCAAwC,MAAM;AAC5D,SAAO;;AAGR,KAAI;AACH,QAAM,QAAQ,OAAO,WAAW;UACxB,OAAO;AACf,UAAQ,MAAM,kCAAkC,MAAM;AACtD,MAAI;AACH,SAAM,KAAK,0BAA0B,WAAW;WACxC,YAAY;AACpB,WAAQ,MAAM,2CAA2C,WAAW;;AAErE,SAAO;;AAGR,KAAI;AACH,QAAM,KAAK,oBAAoB,WAAW;UAClC,OAAO;AACf,UAAQ,MAAM,kDAAkD,MAAM;;AAEvE,QAAO"}

package/dist/url-pattern-CCeZMGOh.mjs

@@ -0,0 +1,33 @@
+//#region src/schema/url-pattern.ts
+const URL_PARAM_PATTERN = /\{(\w+)\}/g;
+const REGEX_SPECIAL_CHARACTERS = /[.*+?^${}()|[\]\\]/g;
+const INVALID_LITERAL_PATTERN = /[{}]/;
+function escapeRegex(literal) {
+	return literal.replace(REGEX_SPECIAL_CHARACTERS, "\\$&");
+}
+function compileUrlPattern(pattern) {
+	const paramNames = [];
+	let regexSource = "";
+	let previousIndex = 0;
+	for (const match of pattern.matchAll(URL_PARAM_PATTERN)) {
+		const matchIndex = match.index;
+		const literal = pattern.slice(previousIndex, matchIndex);
+		if (INVALID_LITERAL_PATTERN.test(literal)) throw new Error("Invalid URL pattern placeholder");
+		regexSource += escapeRegex(literal);
+		const name = match[1];
+		paramNames.push(name);
+		regexSource += "([^/]+)";
+		previousIndex = matchIndex + match[0].length;
+	}
+	const trailingLiteral = pattern.slice(previousIndex);
+	if (INVALID_LITERAL_PATTERN.test(trailingLiteral)) throw new Error("Invalid URL pattern placeholder");
+	regexSource += escapeRegex(trailingLiteral);
+	return {
+		regex: new RegExp(`^${regexSource}$`),
+		paramNames
+	};
+}
+
+//#endregion
+export { compileUrlPattern as t };
+//# sourceMappingURL=url-pattern-CCeZMGOh.mjs.map

package/dist/url-pattern-CCeZMGOh.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"url-pattern-CCeZMGOh.mjs","names":[],"sources":["../src/schema/url-pattern.ts"],"sourcesContent":["const URL_PARAM_PATTERN = /\\{(\\w+)\\}/g;\nconst REGEX_SPECIAL_CHARACTERS = /[.*+?^${}()|[\\]\\\\]/g;\nconst INVALID_LITERAL_PATTERN = /[{}]/;\n\nfunction escapeRegex(literal: string): string {\n\treturn literal.replace(REGEX_SPECIAL_CHARACTERS, \"\\\\$&\");\n}\n\nexport function compileUrlPattern(pattern: string): { regex: RegExp; paramNames: string[] } {\n\tconst paramNames: string[] = [];\n\tlet regexSource = \"\";\n\tlet previousIndex = 0;\n\n\tfor (const match of pattern.matchAll(URL_PARAM_PATTERN)) {\n\t\tconst matchIndex = match.index;\n\t\tconst literal = pattern.slice(previousIndex, matchIndex);\n\t\tif (INVALID_LITERAL_PATTERN.test(literal)) throw new Error(\"Invalid URL pattern placeholder\");\n\t\tregexSource += escapeRegex(literal);\n\n\t\tconst name = match[1];\n\t\tparamNames.push(name);\n\t\tregexSource += \"([^/]+)\";\n\t\tpreviousIndex = matchIndex + match[0].length;\n\t}\n\n\tconst trailingLiteral = pattern.slice(previousIndex);\n\tif (INVALID_LITERAL_PATTERN.test(trailingLiteral)) {\n\t\tthrow new Error(\"Invalid URL pattern placeholder\");\n\t}\n\tregexSource += escapeRegex(trailingLiteral);\n\n\treturn { regex: new RegExp(`^${regexSource}$`), paramNames };\n}\n"],"mappings":";AAAA,MAAM,oBAAoB;AAC1B,MAAM,2BAA2B;AACjC,MAAM,0BAA0B;AAEhC,SAAS,YAAY,SAAyB;AAC7C,QAAO,QAAQ,QAAQ,0BAA0B,OAAO;;AAGzD,SAAgB,kBAAkB,SAA0D;CAC3F,MAAM,aAAuB,EAAE;CAC/B,IAAI,cAAc;CAClB,IAAI,gBAAgB;AAEpB,MAAK,MAAM,SAAS,QAAQ,SAAS,kBAAkB,EAAE;EACxD,MAAM,aAAa,MAAM;EACzB,MAAM,UAAU,QAAQ,MAAM,eAAe,WAAW;AACxD,MAAI,wBAAwB,KAAK,QAAQ,CAAE,OAAM,IAAI,MAAM,kCAAkC;AAC7F,iBAAe,YAAY,QAAQ;EAEnC,MAAM,OAAO,MAAM;AACnB,aAAW,KAAK,KAAK;AACrB,iBAAe;AACf,kBAAgB,aAAa,MAAM,GAAG;;CAGvC,MAAM,kBAAkB,QAAQ,MAAM,cAAc;AACpD,KAAI,wBAAwB,KAAK,gBAAgB,CAChD,OAAM,IAAI,MAAM,kCAAkC;AAEnD,gBAAe,YAAY,gBAAgB;AAE3C,QAAO;EAAE,OAAO,IAAI,OAAO,IAAI,YAAY,GAAG;EAAE;EAAY"}

package/dist/user-DDSL-sGw.mjs

@@ -0,0 +1,171 @@
+import { n as chunks, t as SQL_BATCH_SIZE } from "./chunks-Dms7Uxbt.mjs";
+import { o as decodeCursor, s as encodeCursor } from "./types-BkUg2yHx.mjs";
+import { ulid } from "ulidx";
+
+//#region src/database/repositories/user.ts
+/**
+* User repository for CRUD operations
+*/
+var UserRepository = class UserRepository {
+	constructor(db) {
+		this.db = db;
+	}
+	/**
+	* Create a new user
+	*/
+	async create(input) {
+		const id = ulid();
+		const row = {
+			id,
+			email: input.email.toLowerCase(),
+			name: input.name ?? null,
+			role: UserRepository.resolveRole(input.role ?? 10),
+			avatar_url: input.avatarUrl ?? null,
+			email_verified: 0,
+			data: input.data ? JSON.stringify(input.data) : null
+		};
+		await this.db.insertInto("users").values(row).execute();
+		const user = await this.findById(id);
+		if (!user) throw new Error("Failed to create user");
+		return user;
+	}
+	/**
+	* Find user by ID
+	*/
+	async findById(id) {
+		const row = await this.db.selectFrom("users").selectAll().where("id", "=", id).executeTakeFirst();
+		return row ? this.rowToUser(row) : null;
+	}
+	/**
+	* Batch-resolve users by ID. Returns only the users that exist; missing
+	* IDs are silently dropped. Chunked at `SQL_BATCH_SIZE` to stay within
+	* D1's bind-parameter limit.
+	*/
+	async findByIds(ids) {
+		const unique = [...new Set(ids)].filter((id) => id.length > 0);
+		if (unique.length === 0) return [];
+		const out = [];
+		for (const batch of chunks(unique, SQL_BATCH_SIZE)) {
+			const rows = await this.db.selectFrom("users").selectAll().where("id", "in", batch).execute();
+			for (const row of rows) out.push(this.rowToUser(row));
+		}
+		return out;
+	}
+	/**
+	* Find user by email (case-insensitive)
+	*/
+	async findByEmail(email) {
+		const row = await this.db.selectFrom("users").selectAll().where("email", "=", email.toLowerCase()).executeTakeFirst();
+		return row ? this.rowToUser(row) : null;
+	}
+	/**
+	* List all users with cursor-based pagination
+	*/
+	async findMany(options = {}) {
+		const limit = Math.min(Math.max(1, options.limit || 50), 100);
+		let query = this.db.selectFrom("users").selectAll().orderBy("created_at", "desc").orderBy("id", "desc").limit(limit + 1);
+		if (options.role !== void 0) query = query.where("role", "=", UserRepository.resolveRole(options.role));
+		if (options.cursor) {
+			const decoded = decodeCursor(options.cursor);
+			query = query.where((eb) => eb.or([eb("created_at", "<", decoded.orderValue), eb.and([eb("created_at", "=", decoded.orderValue), eb("id", "<", decoded.id)])]));
+		}
+		const rows = await query.execute();
+		const items = rows.slice(0, limit).map((row) => this.rowToUser(row));
+		const result = { items };
+		if (rows.length > limit && items.length > 0) {
+			const last = items.at(-1);
+			result.nextCursor = encodeCursor(last.createdAt, last.id);
+		}
+		return result;
+	}
+	/**
+	* Update a user
+	*/
+	async update(id, input) {
+		if (!await this.findById(id)) return null;
+		const updates = {};
+		if (input.name !== void 0) updates.name = input.name;
+		if (input.role !== void 0) updates.role = UserRepository.resolveRole(input.role);
+		if (input.avatarUrl !== void 0) updates.avatar_url = input.avatarUrl;
+		if (input.data !== void 0) updates.data = JSON.stringify(input.data);
+		if (Object.keys(updates).length > 0) await this.db.updateTable("users").set(updates).where("id", "=", id).execute();
+		return this.findById(id);
+	}
+	/**
+	* Delete a user
+	*/
+	async delete(id) {
+		return ((await this.db.deleteFrom("users").where("id", "=", id).executeTakeFirst()).numDeletedRows ?? 0) > 0;
+	}
+	/**
+	* Count users
+	*/
+	async count(role) {
+		let query = this.db.selectFrom("users").select((eb) => eb.fn.count("id").as("count"));
+		if (role !== void 0) query = query.where("role", "=", UserRepository.resolveRole(role));
+		const result = await query.executeTakeFirst();
+		return Number(result?.count || 0);
+	}
+	/**
+	* Check if email exists
+	*/
+	async emailExists(email) {
+		return !!await this.db.selectFrom("users").select("id").where("email", "=", email.toLowerCase()).executeTakeFirst();
+	}
+	/**
+	* Convert database row to User object
+	*/
+	rowToUser(row) {
+		return {
+			id: row.id,
+			email: row.email,
+			name: row.name,
+			role: UserRepository.toRole(row.role),
+			avatarUrl: row.avatar_url,
+			emailVerified: row.email_verified === 1,
+			data: row.data ? JSON.parse(row.data) : null,
+			createdAt: row.created_at
+		};
+	}
+	/** Map of role name strings to numeric levels */
+	static ROLE_NAME_TO_LEVEL = {
+		subscriber: 10,
+		contributor: 20,
+		author: 30,
+		editor: 40,
+		admin: 50
+	};
+	/** Valid numeric role levels */
+	static VALID_LEVELS = new Set([
+		10,
+		20,
+		30,
+		40,
+		50
+	]);
+	/**
+	* Resolve a role name or number to a valid numeric UserRole.
+	* Accepts both string names ("admin") and numeric levels (50).
+	*/
+	static resolveRole(role) {
+		if (typeof role === "string") {
+			const level = UserRepository.ROLE_NAME_TO_LEVEL[role];
+			if (level === void 0) throw new Error(`Invalid role name: ${role}`);
+			return level;
+		}
+		if (!UserRepository.VALID_LEVELS.has(role)) throw new Error(`Invalid role level: ${role}`);
+		return role;
+	}
+	/**
+	* Convert a raw DB integer to a typed UserRole.
+	* Falls back to subscriber (10) for unknown values.
+	*/
+	static toRole(level) {
+		if (UserRepository.VALID_LEVELS.has(level)) return level;
+		return 10;
+	}
+};
+
+//#endregion
+export { UserRepository as t };
+//# sourceMappingURL=user-DDSL-sGw.mjs.map

package/dist/user-DDSL-sGw.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"user-DDSL-sGw.mjs","names":[],"sources":["../src/database/repositories/user.ts"],"sourcesContent":["import type { Kysely, Selectable, Updateable } from \"kysely\";\nimport { ulid } from \"ulidx\";\n\nimport { chunks, SQL_BATCH_SIZE } from \"../../utils/chunks.js\";\nimport type { Database, UserTable } from \"../types.js\";\nimport { encodeCursor, decodeCursor, type FindManyResult } from \"./types.js\";\n\ntype UserRow = Selectable<UserTable>;\n\n/**\n * Valid role levels matching the database schema.\n * 10=subscriber, 20=contributor, 30=author, 40=editor, 50=admin\n */\nexport type UserRole = 10 | 20 | 30 | 40 | 50;\n\n/** String role names for convenience APIs */\nexport type UserRoleName = \"subscriber\" | \"contributor\" | \"author\" | \"editor\" | \"admin\";\n\nexport interface User {\n\tid: string;\n\temail: string;\n\tname: string | null;\n\trole: UserRole;\n\tavatarUrl: string | null;\n\temailVerified: boolean;\n\tdata: Record<string, unknown> | null;\n\tcreatedAt: string;\n}\n\nexport interface CreateUserInput {\n\temail: string;\n\tname?: string;\n\trole?: UserRole | UserRoleName;\n\tavatarUrl?: string;\n\tdata?: Record<string, unknown>;\n}\n\nexport interface UpdateUserInput {\n\tname?: string;\n\trole?: UserRole | UserRoleName;\n\tavatarUrl?: string | null;\n\tdata?: Record<string, unknown>;\n}\n\n/**\n * User repository for CRUD operations\n */\nexport class UserRepository {\n\tconstructor(private db: Kysely<Database>) {}\n\n\t/**\n\t * Create a new user\n\t */\n\tasync create(input: CreateUserInput): Promise<User> {\n\t\tconst id = ulid();\n\n\t\tconst row: Omit<UserTable, \"created_at\" | \"updated_at\" | \"disabled\"> = {\n\t\t\tid,\n\t\t\temail: input.email.toLowerCase(),\n\t\t\tname: input.name ?? null,\n\t\t\trole: UserRepository.resolveRole(input.role ?? 10),\n\t\t\tavatar_url: input.avatarUrl ?? null,\n\t\t\temail_verified: 0,\n\t\t\tdata: input.data ? JSON.stringify(input.data) : null,\n\t\t};\n\n\t\tawait this.db.insertInto(\"users\").values(row).execute();\n\n\t\tconst user = await this.findById(id);\n\t\tif (!user) {\n\t\t\tthrow new Error(\"Failed to create user\");\n\t\t}\n\t\treturn user;\n\t}\n\n\t/**\n\t * Find user by ID\n\t */\n\tasync findById(id: string): Promise<User | null> {\n\t\tconst row = await this.db\n\t\t\t.selectFrom(\"users\")\n\t\t\t.selectAll()\n\t\t\t.where(\"id\", \"=\", id)\n\t\t\t.executeTakeFirst();\n\n\t\treturn row ? this.rowToUser(row) : null;\n\t}\n\n\t/**\n\t * Batch-resolve users by ID. Returns only the users that exist; missing\n\t * IDs are silently dropped. Chunked at `SQL_BATCH_SIZE` to stay within\n\t * D1's bind-parameter limit.\n\t */\n\tasync findByIds(ids: string[]): Promise<User[]> {\n\t\tconst unique = [...new Set(ids)].filter((id) => id.length > 0);\n\t\tif (unique.length === 0) return [];\n\n\t\tconst out: User[] = [];\n\t\tfor (const batch of chunks(unique, SQL_BATCH_SIZE)) {\n\t\t\tconst rows = await this.db.selectFrom(\"users\").selectAll().where(\"id\", \"in\", batch).execute();\n\t\t\tfor (const row of rows) out.push(this.rowToUser(row));\n\t\t}\n\t\treturn out;\n\t}\n\n\t/**\n\t * Find user by email (case-insensitive)\n\t */\n\tasync findByEmail(email: string): Promise<User | null> {\n\t\tconst row = await this.db\n\t\t\t.selectFrom(\"users\")\n\t\t\t.selectAll()\n\t\t\t.where(\"email\", \"=\", email.toLowerCase())\n\t\t\t.executeTakeFirst();\n\n\t\treturn row ? this.rowToUser(row) : null;\n\t}\n\n\t/**\n\t * List all users with cursor-based pagination\n\t */\n\tasync findMany(\n\t\toptions: {\n\t\t\trole?: UserRole | UserRoleName;\n\t\t\tlimit?: number;\n\t\t\tcursor?: string;\n\t\t} = {},\n\t): Promise<FindManyResult<User>> {\n\t\tconst limit = Math.min(Math.max(1, options.limit || 50), 100);\n\n\t\tlet query = this.db\n\t\t\t.selectFrom(\"users\")\n\t\t\t.selectAll()\n\t\t\t.orderBy(\"created_at\", \"desc\")\n\t\t\t.orderBy(\"id\", \"desc\")\n\t\t\t.limit(limit + 1);\n\n\t\tif (options.role !== undefined) {\n\t\t\tquery = query.where(\"role\", \"=\", UserRepository.resolveRole(options.role));\n\t\t}\n\n\t\tif (options.cursor) {\n\t\t\tconst decoded = decodeCursor(options.cursor);\n\t\t\tquery = query.where((eb) =>\n\t\t\t\teb.or([\n\t\t\t\t\teb(\"created_at\", \"<\", decoded.orderValue),\n\t\t\t\t\teb.and([eb(\"created_at\", \"=\", decoded.orderValue), eb(\"id\", \"<\", decoded.id)]),\n\t\t\t\t]),\n\t\t\t);\n\t\t}\n\n\t\tconst rows = await query.execute();\n\t\tconst items = rows.slice(0, limit).map((row) => this.rowToUser(row));\n\t\tconst result: FindManyResult<User> = { items };\n\n\t\tif (rows.length > limit && items.length > 0) {\n\t\t\tconst last = items.at(-1)!;\n\t\t\tresult.nextCursor = encodeCursor(last.createdAt, last.id);\n\t\t}\n\n\t\treturn result;\n\t}\n\n\t/**\n\t * Update a user\n\t */\n\tasync update(id: string, input: UpdateUserInput): Promise<User | null> {\n\t\tconst existing = await this.findById(id);\n\t\tif (!existing) return null;\n\n\t\tconst updates: Updateable<UserTable> = {};\n\t\tif (input.name !== undefined) updates.name = input.name;\n\t\tif (input.role !== undefined) updates.role = UserRepository.resolveRole(input.role);\n\t\tif (input.avatarUrl !== undefined) updates.avatar_url = input.avatarUrl;\n\t\tif (input.data !== undefined) updates.data = JSON.stringify(input.data);\n\n\t\tif (Object.keys(updates).length > 0) {\n\t\t\tawait this.db.updateTable(\"users\").set(updates).where(\"id\", \"=\", id).execute();\n\t\t}\n\n\t\treturn this.findById(id);\n\t}\n\n\t/**\n\t * Delete a user\n\t */\n\tasync delete(id: string): Promise<boolean> {\n\t\tconst result = await this.db.deleteFrom(\"users\").where(\"id\", \"=\", id).executeTakeFirst();\n\n\t\treturn (result.numDeletedRows ?? 0) > 0;\n\t}\n\n\t/**\n\t * Count users\n\t */\n\tasync count(role?: UserRole | UserRoleName): Promise<number> {\n\t\tlet query = this.db.selectFrom(\"users\").select((eb) => eb.fn.count(\"id\").as(\"count\"));\n\n\t\tif (role !== undefined) {\n\t\t\tquery = query.where(\"role\", \"=\", UserRepository.resolveRole(role));\n\t\t}\n\n\t\tconst result = await query.executeTakeFirst();\n\t\treturn Number(result?.count || 0);\n\t}\n\n\t/**\n\t * Check if email exists\n\t */\n\tasync emailExists(email: string): Promise<boolean> {\n\t\tconst row = await this.db\n\t\t\t.selectFrom(\"users\")\n\t\t\t.select(\"id\")\n\t\t\t.where(\"email\", \"=\", email.toLowerCase())\n\t\t\t.executeTakeFirst();\n\n\t\treturn !!row;\n\t}\n\n\t/**\n\t * Convert database row to User object\n\t */\n\tprivate rowToUser(row: UserRow): User {\n\t\treturn {\n\t\t\tid: row.id,\n\t\t\temail: row.email,\n\t\t\tname: row.name,\n\t\t\trole: UserRepository.toRole(row.role),\n\t\t\tavatarUrl: row.avatar_url,\n\t\t\temailVerified: row.email_verified === 1,\n\t\t\tdata: row.data ? JSON.parse(row.data) : null,\n\t\t\tcreatedAt: row.created_at,\n\t\t};\n\t}\n\n\t/** Map of role name strings to numeric levels */\n\tprivate static readonly ROLE_NAME_TO_LEVEL: Record<UserRoleName, UserRole> = {\n\t\tsubscriber: 10,\n\t\tcontributor: 20,\n\t\tauthor: 30,\n\t\teditor: 40,\n\t\tadmin: 50,\n\t};\n\n\t/** Valid numeric role levels */\n\tprivate static readonly VALID_LEVELS = new Set<number>([10, 20, 30, 40, 50]);\n\n\t/**\n\t * Resolve a role name or number to a valid numeric UserRole.\n\t * Accepts both string names (\"admin\") and numeric levels (50).\n\t */\n\tstatic resolveRole(role: UserRole | UserRoleName): UserRole {\n\t\tif (typeof role === \"string\") {\n\t\t\tconst level = UserRepository.ROLE_NAME_TO_LEVEL[role];\n\t\t\tif (level === undefined) {\n\t\t\t\tthrow new Error(`Invalid role name: ${role}`);\n\t\t\t}\n\t\t\treturn level;\n\t\t}\n\t\tif (!UserRepository.VALID_LEVELS.has(role)) {\n\t\t\tthrow new Error(`Invalid role level: ${role}`);\n\t\t}\n\t\treturn role;\n\t}\n\n\t/**\n\t * Convert a raw DB integer to a typed UserRole.\n\t * Falls back to subscriber (10) for unknown values.\n\t */\n\tprivate static toRole(level: number): UserRole {\n\t\tif (UserRepository.VALID_LEVELS.has(level)) return level as UserRole;\n\t\treturn 10;\n\t}\n}\n"],"mappings":";;;;;;;;AA+CA,IAAa,iBAAb,MAAa,eAAe;CAC3B,YAAY,AAAQ,IAAsB;EAAtB;;;;;CAKpB,MAAM,OAAO,OAAuC;EACnD,MAAM,KAAK,MAAM;EAEjB,MAAM,MAAiE;GACtE;GACA,OAAO,MAAM,MAAM,aAAa;GAChC,MAAM,MAAM,QAAQ;GACpB,MAAM,eAAe,YAAY,MAAM,QAAQ,GAAG;GAClD,YAAY,MAAM,aAAa;GAC/B,gBAAgB;GAChB,MAAM,MAAM,OAAO,KAAK,UAAU,MAAM,KAAK,GAAG;GAChD;AAED,QAAM,KAAK,GAAG,WAAW,QAAQ,CAAC,OAAO,IAAI,CAAC,SAAS;EAEvD,MAAM,OAAO,MAAM,KAAK,SAAS,GAAG;AACpC,MAAI,CAAC,KACJ,OAAM,IAAI,MAAM,wBAAwB;AAEzC,SAAO;;;;;CAMR,MAAM,SAAS,IAAkC;EAChD,MAAM,MAAM,MAAM,KAAK,GACrB,WAAW,QAAQ,CACnB,WAAW,CACX,MAAM,MAAM,KAAK,GAAG,CACpB,kBAAkB;AAEpB,SAAO,MAAM,KAAK,UAAU,IAAI,GAAG;;;;;;;CAQpC,MAAM,UAAU,KAAgC;EAC/C,MAAM,SAAS,CAAC,GAAG,IAAI,IAAI,IAAI,CAAC,CAAC,QAAQ,OAAO,GAAG,SAAS,EAAE;AAC9D,MAAI,OAAO,WAAW,EAAG,QAAO,EAAE;EAElC,MAAM,MAAc,EAAE;AACtB,OAAK,MAAM,SAAS,OAAO,QAAQ,eAAe,EAAE;GACnD,MAAM,OAAO,MAAM,KAAK,GAAG,WAAW,QAAQ,CAAC,WAAW,CAAC,MAAM,MAAM,MAAM,MAAM,CAAC,SAAS;AAC7F,QAAK,MAAM,OAAO,KAAM,KAAI,KAAK,KAAK,UAAU,IAAI,CAAC;;AAEtD,SAAO;;;;;CAMR,MAAM,YAAY,OAAqC;EACtD,MAAM,MAAM,MAAM,KAAK,GACrB,WAAW,QAAQ,CACnB,WAAW,CACX,MAAM,SAAS,KAAK,MAAM,aAAa,CAAC,CACxC,kBAAkB;AAEpB,SAAO,MAAM,KAAK,UAAU,IAAI,GAAG;;;;;CAMpC,MAAM,SACL,UAII,EAAE,EAC0B;EAChC,MAAM,QAAQ,KAAK,IAAI,KAAK,IAAI,GAAG,QAAQ,SAAS,GAAG,EAAE,IAAI;EAE7D,IAAI,QAAQ,KAAK,GACf,WAAW,QAAQ,CACnB,WAAW,CACX,QAAQ,cAAc,OAAO,CAC7B,QAAQ,MAAM,OAAO,CACrB,MAAM,QAAQ,EAAE;AAElB,MAAI,QAAQ,SAAS,OACpB,SAAQ,MAAM,MAAM,QAAQ,KAAK,eAAe,YAAY,QAAQ,KAAK,CAAC;AAG3E,MAAI,QAAQ,QAAQ;GACnB,MAAM,UAAU,aAAa,QAAQ,OAAO;AAC5C,WAAQ,MAAM,OAAO,OACpB,GAAG,GAAG,CACL,GAAG,cAAc,KAAK,QAAQ,WAAW,EACzC,GAAG,IAAI,CAAC,GAAG,cAAc,KAAK,QAAQ,WAAW,EAAE,GAAG,MAAM,KAAK,QAAQ,GAAG,CAAC,CAAC,CAC9E,CAAC,CACF;;EAGF,MAAM,OAAO,MAAM,MAAM,SAAS;EAClC,MAAM,QAAQ,KAAK,MAAM,GAAG,MAAM,CAAC,KAAK,QAAQ,KAAK,UAAU,IAAI,CAAC;EACpE,MAAM,SAA+B,EAAE,OAAO;AAE9C,MAAI,KAAK,SAAS,SAAS,MAAM,SAAS,GAAG;GAC5C,MAAM,OAAO,MAAM,GAAG,GAAG;AACzB,UAAO,aAAa,aAAa,KAAK,WAAW,KAAK,GAAG;;AAG1D,SAAO;;;;;CAMR,MAAM,OAAO,IAAY,OAA8C;AAEtE,MAAI,CADa,MAAM,KAAK,SAAS,GAAG,CACzB,QAAO;EAEtB,MAAM,UAAiC,EAAE;AACzC,MAAI,MAAM,SAAS,OAAW,SAAQ,OAAO,MAAM;AACnD,MAAI,MAAM,SAAS,OAAW,SAAQ,OAAO,eAAe,YAAY,MAAM,KAAK;AACnF,MAAI,MAAM,cAAc,OAAW,SAAQ,aAAa,MAAM;AAC9D,MAAI,MAAM,SAAS,OAAW,SAAQ,OAAO,KAAK,UAAU,MAAM,KAAK;AAEvE,MAAI,OAAO,KAAK,QAAQ,CAAC,SAAS,EACjC,OAAM,KAAK,GAAG,YAAY,QAAQ,CAAC,IAAI,QAAQ,CAAC,MAAM,MAAM,KAAK,GAAG,CAAC,SAAS;AAG/E,SAAO,KAAK,SAAS,GAAG;;;;;CAMzB,MAAM,OAAO,IAA8B;AAG1C,WAFe,MAAM,KAAK,GAAG,WAAW,QAAQ,CAAC,MAAM,MAAM,KAAK,GAAG,CAAC,kBAAkB,EAEzE,kBAAkB,KAAK;;;;;CAMvC,MAAM,MAAM,MAAiD;EAC5D,IAAI,QAAQ,KAAK,GAAG,WAAW,QAAQ,CAAC,QAAQ,OAAO,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,QAAQ,CAAC;AAErF,MAAI,SAAS,OACZ,SAAQ,MAAM,MAAM,QAAQ,KAAK,eAAe,YAAY,KAAK,CAAC;EAGnE,MAAM,SAAS,MAAM,MAAM,kBAAkB;AAC7C,SAAO,OAAO,QAAQ,SAAS,EAAE;;;;;CAMlC,MAAM,YAAY,OAAiC;AAOlD,SAAO,CAAC,CANI,MAAM,KAAK,GACrB,WAAW,QAAQ,CACnB,OAAO,KAAK,CACZ,MAAM,SAAS,KAAK,MAAM,aAAa,CAAC,CACxC,kBAAkB;;;;;CAQrB,AAAQ,UAAU,KAAoB;AACrC,SAAO;GACN,IAAI,IAAI;GACR,OAAO,IAAI;GACX,MAAM,IAAI;GACV,MAAM,eAAe,OAAO,IAAI,KAAK;GACrC,WAAW,IAAI;GACf,eAAe,IAAI,mBAAmB;GACtC,MAAM,IAAI,OAAO,KAAK,MAAM,IAAI,KAAK,GAAG;GACxC,WAAW,IAAI;GACf;;;CAIF,OAAwB,qBAAqD;EAC5E,YAAY;EACZ,aAAa;EACb,QAAQ;EACR,QAAQ;EACR,OAAO;EACP;;CAGD,OAAwB,eAAe,IAAI,IAAY;EAAC;EAAI;EAAI;EAAI;EAAI;EAAG,CAAC;;;;;CAM5E,OAAO,YAAY,MAAyC;AAC3D,MAAI,OAAO,SAAS,UAAU;GAC7B,MAAM,QAAQ,eAAe,mBAAmB;AAChD,OAAI,UAAU,OACb,OAAM,IAAI,MAAM,sBAAsB,OAAO;AAE9C,UAAO;;AAER,MAAI,CAAC,eAAe,aAAa,IAAI,KAAK,CACzC,OAAM,IAAI,MAAM,uBAAuB,OAAO;AAE/C,SAAO;;;;;;CAOR,OAAe,OAAO,OAAyB;AAC9C,MAAI,eAAe,aAAa,IAAI,MAAM,CAAE,QAAO;AACnD,SAAO"}