emdash 0.39.0 → 0.40.0

package/dist/astro/routes/api/setup/dev-reset.mjs

@@ -1,7 +1,9 @@
-import { t as OptionsRepository } from "../../../../options-D5WcorD5.mjs";
+import { t as OptionsRepository } from "../../../../options-DhrI7eMv.mjs";
 import "../../../../base64-DvnNgP7e.mjs";
 import "../../../../types-BkUg2yHx.mjs";
-import { n as apiSuccess, r as handleError, t as apiError } from "../../../../error-CCTCskie.mjs";
+import "../../../../errors-DgE1zJGG.mjs";
+import "../../../../errors-BF0_LFhW.mjs";
+import { n as apiSuccess, r as handleError, t as apiError } from "../../../../error-CfvOHP0M.mjs";
 
 //#region src/astro/routes/api/setup/dev-reset.ts
 const prerender = false;

package/dist/astro/routes/api/setup/dev-reset.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"dev-reset.mjs","names":[],"sources":["../../../../../src/astro/routes/api/setup/dev-reset.ts"],"sourcesContent":["/**\n * POST /_emdash/api/setup/dev-reset\n *\n * Development-only endpoint to reset setup state for testing.\n * Clears the setup_complete flag and deletes all users,\n * returning the site to the pre-setup state.\n *\n * ONLY available when import.meta.env.DEV is true.\n */\n\nimport type { APIRoute } from \"astro\";\n\nexport const prerender = false;\n\nimport { apiError, apiSuccess, handleError } from \"#api/error.js\";\nimport { OptionsRepository } from \"#db/repositories/options.js\";\n\nexport const POST: APIRoute = async ({ locals }) => {\n\tif (!import.meta.env.DEV) {\n\t\treturn apiError(\"FORBIDDEN\", \"Dev reset is only available in development mode\", 403);\n\t}\n\n\tconst { emdash } = locals;\n\n\tif (!emdash?.db) {\n\t\treturn apiError(\"NOT_CONFIGURED\", \"EmDash is not initialized\", 500);\n\t}\n\n\ttry {\n\t\tconst options = new OptionsRepository(emdash.db);\n\n\t\tawait options.delete(\"emdash:setup_complete\");\n\t\tawait options.delete(\"emdash:setup_state\");\n\t\tawait emdash.db.deleteFrom(\"users\").execute();\n\n\t\treturn apiSuccess({ success: true });\n\t} catch (error) {\n\t\treturn handleError(error, \"Dev reset failed\", \"DEV_RESET_ERROR\");\n\t}\n};\n"],"mappings":";;;;;;AAYA,MAAa,YAAY;AAKzB,MAAa,OAAiB,OAAO,EAAE,aAAa;AACnD,KAAI,CAAC,OAAO,KAAK,IAAI,IACpB,QAAO,SAAS,aAAa,mDAAmD,IAAI;CAGrF,MAAM,EAAE,WAAW;AAEnB,KAAI,CAAC,QAAQ,GACZ,QAAO,SAAS,kBAAkB,6BAA6B,IAAI;AAGpE,KAAI;EACH,MAAM,UAAU,IAAI,kBAAkB,OAAO,GAAG;AAEhD,QAAM,QAAQ,OAAO,wBAAwB;AAC7C,QAAM,QAAQ,OAAO,qBAAqB;AAC1C,QAAM,OAAO,GAAG,WAAW,QAAQ,CAAC,SAAS;AAE7C,SAAO,WAAW,EAAE,SAAS,MAAM,CAAC;UAC5B,OAAO;AACf,SAAO,YAAY,OAAO,oBAAoB,kBAAkB"}
+{"version":3,"file":"dev-reset.mjs","names":[],"sources":["../../../../../src/astro/routes/api/setup/dev-reset.ts"],"sourcesContent":["/**\n * POST /_emdash/api/setup/dev-reset\n *\n * Development-only endpoint to reset setup state for testing.\n * Clears the setup_complete flag and deletes all users,\n * returning the site to the pre-setup state.\n *\n * ONLY available when import.meta.env.DEV is true.\n */\n\nimport type { APIRoute } from \"astro\";\n\nexport const prerender = false;\n\nimport { apiError, apiSuccess, handleError } from \"#api/error.js\";\nimport { OptionsRepository } from \"#db/repositories/options.js\";\n\nexport const POST: APIRoute = async ({ locals }) => {\n\tif (!import.meta.env.DEV) {\n\t\treturn apiError(\"FORBIDDEN\", \"Dev reset is only available in development mode\", 403);\n\t}\n\n\tconst { emdash } = locals;\n\n\tif (!emdash?.db) {\n\t\treturn apiError(\"NOT_CONFIGURED\", \"EmDash is not initialized\", 500);\n\t}\n\n\ttry {\n\t\tconst options = new OptionsRepository(emdash.db);\n\n\t\tawait options.delete(\"emdash:setup_complete\");\n\t\tawait options.delete(\"emdash:setup_state\");\n\t\tawait emdash.db.deleteFrom(\"users\").execute();\n\n\t\treturn apiSuccess({ success: true });\n\t} catch (error) {\n\t\treturn handleError(error, \"Dev reset failed\", \"DEV_RESET_ERROR\");\n\t}\n};\n"],"mappings":";;;;;;;;AAYA,MAAa,YAAY;AAKzB,MAAa,OAAiB,OAAO,EAAE,aAAa;AACnD,KAAI,CAAC,OAAO,KAAK,IAAI,IACpB,QAAO,SAAS,aAAa,mDAAmD,IAAI;CAGrF,MAAM,EAAE,WAAW;AAEnB,KAAI,CAAC,QAAQ,GACZ,QAAO,SAAS,kBAAkB,6BAA6B,IAAI;AAGpE,KAAI;EACH,MAAM,UAAU,IAAI,kBAAkB,OAAO,GAAG;AAEhD,QAAM,QAAQ,OAAO,wBAAwB;AAC7C,QAAM,QAAQ,OAAO,qBAAqB;AAC1C,QAAM,OAAO,GAAG,WAAW,QAAQ,CAAC,SAAS;AAE7C,SAAO,WAAW,EAAE,SAAS,MAAM,CAAC;UAC5B,OAAO;AACf,SAAO,YAAY,OAAO,oBAAoB,kBAAkB"}

package/dist/astro/routes/api/setup/index.mjs

@@ -1,47 +1,57 @@
-import "../../../../dialect-helpers-CtYdsX4W.mjs";
-import "../../../../config-CGVeT8Hc.mjs";
+import "../../../../dialect-helpers-7_IqPdh9.mjs";
+import "../../../../config-CvmjJcVw.mjs";
 import "../../../../datetime-normalization-PeiEdcRY.mjs";
 import "../../../../after-PcEvMY_6.mjs";
-import { t as OptionsRepository } from "../../../../options-D5WcorD5.mjs";
+import { t as OptionsRepository } from "../../../../options-DhrI7eMv.mjs";
 import "../../../../base64-DvnNgP7e.mjs";
-import "../../../../secrets-DNgVgz_e.mjs";
-import "../../../../content-DZ3B5qtA.mjs";
-import "../../../../object-cache-DlSVbn5Y.mjs";
+import "../../../../secrets-CIi0nFiR.mjs";
+import "../../../../content-DFaIEDj9.mjs";
+import "../../../../object-cache-CqWNY5uP.mjs";
 import "../../../../slugify-T5GHH42D.mjs";
 import "../../../../types-BkUg2yHx.mjs";
-import "../../../../media-TBlKCwo7.mjs";
-import "../../../../taxonomy-Dj1vpw5E.mjs";
-import "../../../../resolve-BJIS8wKr.mjs";
-import "../../../../redirect-D2Yo-b6S.mjs";
-import "../../../../request-cache-DaMhSQdx.mjs";
-import "../../../../byline-registry-D6lWzXk6.mjs";
-import "../../../../field-defs-cache-B337z8UJ.mjs";
-import "../../../../byline-Doh-wt99.mjs";
-import "../../../../dist-2hDLsLeq.mjs";
-import "../../../../fts-manager-DMb0sbIQ.mjs";
-import "../../../../loader-t4TxaFiQ.mjs";
-import "../../../../collection-slugs-cache-D9auiKmI.mjs";
-import "../../../../capture-triggers-gxQxnxrJ.mjs";
-import "../../../../activation-CaMfdBt1.mjs";
-import "../../../../collection-deletion-C3Xixmkx.mjs";
-import "../../../../content-refresh-BHLHJgyt.mjs";
-import "../../../../registry-CkuPoZs7.mjs";
-import "../../../../settings-DmroR53o.mjs";
-import "../../../../ssrf-Co1GGFZz.mjs";
-import { n as apiSuccess, r as handleError, t as apiError } from "../../../../error-CCTCskie.mjs";
-import { n as parseBody, t as isParseError } from "../../../../parse-Cr379Av9.mjs";
-import "../../../../redirects-BCiTaIQ-.mjs";
-import "../../../../entry-lock-D3C99MXS.mjs";
-import "../../../../comments-BVzzt6x5.mjs";
-import { x as setupBody } from "../../../../relations-B4w-G5U9.mjs";
-import "../../../../status-DLoBmcDz.mjs";
+import "../../../../media-Qp5S3eH3.mjs";
+import "../../../../taxonomy-C3Fu1YeH.mjs";
+import "../../../../resolve-2WbQsCvT.mjs";
+import "../../../../redirect-iJf5fltD.mjs";
+import "../../../../request-cache-DzLYKm_x.mjs";
+import "../../../../byline-registry-gnKscbQX.mjs";
+import "../../../../field-defs-cache-HIgBbqZZ.mjs";
+import "../../../../byline-DYmkXqvo.mjs";
+import "../../../../dist-BNwANFJR.mjs";
+import "../../../../fts-manager-S-K0laoS.mjs";
+import "../../../../loader-BzqeR1ZN.mjs";
+import "../../../../collection-slugs-cache-CjGk__zp.mjs";
+import "../../../../capture-triggers-kJyl_yyM.mjs";
+import "../../../../activation-LOkDM5WT.mjs";
+import "../../../../block-type-registry-DUI_3KxT.mjs";
+import "../../../../collection-deletion-BIm28mo3.mjs";
+import "../../../../errors-DgE1zJGG.mjs";
+import "../../../../canonical-YhEQezjg.mjs";
+import "../../../../digest-BarSh-pN.mjs";
+import "../../../../hash-SDAW6zC-.mjs";
+import "../../../../zod-generator-D6uE4WiS.mjs";
+import "../../../../block-values-C_VIPr5t.mjs";
+import "../../../../settings-DYidIB26.mjs";
+import "../../../../site-settings-DOgRUoFX.mjs";
+import "../../../../errors-BF0_LFhW.mjs";
+import "../../../../settings-CgjRWGW9.mjs";
+import "../../../../ssrf-CJUnJymJ.mjs";
+import { n as apiSuccess, r as handleError, t as apiError } from "../../../../error-CfvOHP0M.mjs";
+import { n as parseBody, t as isParseError } from "../../../../parse-DY6OD1j_.mjs";
+import "../../../../redirects-Cv9apQKj.mjs";
+import "../../../../entry-lock-BJYdBfXb.mjs";
+import "../../../../media-Pu1L6xir.mjs";
+import "../../../../comments-fHZ8ON9O.mjs";
+import { x as setupBody } from "../../../../relations-CK9CYUyr.mjs";
+import "../../../../menus-BM7BPLOb.mjs";
+import "../../../../status-DZKIG4a9.mjs";
 import "../../../../api/schemas/index.mjs";
-import "../../../../ssrf-BRpTDMV6.mjs";
-import { t as validateSeed } from "../../../../validate-BCP9HNDn.mjs";
-import { t as applySeed } from "../../../../apply-drpfmqrR.mjs";
-import { t as loadSeed } from "../../../../load-Cu5bvCZh.mjs";
-import { r as getPublicOrigin } from "../../../../public-url-BWVHsfQv.mjs";
-import { t as getAuthMode } from "../../../../mode-CkmOhFqj.mjs";
+import { t as applySeed } from "../../../../apply-CoT603H3.mjs";
+import "../../../../ssrf-DpBH7aOt.mjs";
+import { n as validateSeed } from "../../../../validate-CHosPEhs.mjs";
+import { t as loadSeed } from "../../../../load-XgJiE6_3.mjs";
+import { r as getPublicOrigin } from "../../../../public-url-Bn7U0D7-.mjs";
+import { t as getAuthMode } from "../../../../mode-CCuKXUci.mjs";
 
 //#region src/astro/routes/api/setup/index.ts
 const prerender = false;

package/dist/astro/routes/api/setup/index.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"index.mjs","names":[],"sources":["../../../../../src/astro/routes/api/setup/index.ts"],"sourcesContent":["/**\n * POST /_emdash/api/setup\n *\n * Executes the setup wizard - applies seed file and marks setup complete\n */\n\nimport type { APIRoute } from \"astro\";\n\nexport const prerender = false;\n\nimport { apiError, apiSuccess, handleError } from \"#api/error.js\";\nimport { isParseError, parseBody } from \"#api/parse.js\";\nimport { getPublicOrigin } from \"#api/public-url.js\";\nimport { setupBody } from \"#api/schemas.js\";\nimport { getAuthMode } from \"#auth/mode.js\";\nimport { OptionsRepository } from \"#db/repositories/options.js\";\nimport { applySeed } from \"#seed/apply.js\";\nimport { loadSeed } from \"#seed/load.js\";\nimport { validateSeed } from \"#seed/validate.js\";\n\nexport const POST: APIRoute = async ({ request, url, locals }) => {\n\tconst { emdash } = locals;\n\n\tif (!emdash?.db) {\n\t\treturn apiError(\"NOT_CONFIGURED\", \"EmDash is not initialized\", 500);\n\t}\n\n\ttry {\n\t\t// Guard: reject if setup has already been completed.\n\t\t// The options table may not exist on first-ever setup (pre-migration),\n\t\t// so a query failure means setup hasn't run yet — allow it to proceed.\n\t\ttry {\n\t\t\tconst options = new OptionsRepository(emdash.db);\n\t\t\tconst setupComplete = await options.get(\"emdash:setup_complete\");\n\n\t\t\tif (setupComplete === true || setupComplete === \"true\") {\n\t\t\t\treturn apiError(\"ALREADY_CONFIGURED\", \"Setup has already been completed\", 409);\n\t\t\t}\n\t\t} catch {\n\t\t\t// Options table doesn't exist yet — first-ever setup, allow it\n\t\t}\n\n\t\t// Parse request body\n\t\tconst body = await parseBody(request, setupBody);\n\t\tif (isParseError(body)) return body;\n\n\t\t// Load seed file (user seed or built-in default)\n\t\tconst seed = await loadSeed();\n\n\t\t// Override seed settings with form values\n\t\tseed.settings = {\n\t\t\t...seed.settings,\n\t\t\ttitle: body.title,\n\t\t\ttagline: body.tagline,\n\t\t};\n\n\t\t// Apply seed\n\t\tconst validation = validateSeed(seed);\n\t\tif (!validation.valid) {\n\t\t\treturn apiError(\"INVALID_SEED\", `Invalid seed file: ${validation.errors.join(\", \")}`, 400);\n\t\t}\n\n\t\tlet result;\n\t\ttry {\n\t\t\tresult = await applySeed(emdash.db, seed, {\n\t\t\t\tincludeContent: body.includeContent,\n\t\t\t\tonConflict: \"skip\",\n\t\t\t\tstorage: emdash.storage ?? undefined,\n\t\t\t});\n\t\t} catch (error) {\n\t\t\treturn handleError(error, \"Failed to apply seed\", \"SEED_ERROR\");\n\t\t}\n\n\t\t// Store setup state\n\t\t// In external auth mode, mark setup complete immediately (first user to login becomes admin)\n\t\t// Otherwise, setup_complete is set after admin user is created (passkey or auth provider)\n\t\tconst authMode = getAuthMode(emdash.config);\n\t\tconst useExternalAuth = authMode.type === \"external\";\n\n\t\ttry {\n\t\t\tconst options = new OptionsRepository(emdash.db);\n\n\t\t\t// Store the canonical site URL from the setup request.\n\t\t\t// Write-once at the DB level so concurrent setup POSTs can't both\n\t\t\t// observe an empty value and race to write. A spoofed Host header\n\t\t\t// on a later call during the wizard window must not be able to\n\t\t\t// replace the first value.\n\t\t\tconst siteUrl = getPublicOrigin(url, emdash.config);\n\t\t\tawait options.setIfAbsent(\"emdash:site_url\", siteUrl);\n\n\t\t\tif (useExternalAuth) {\n\t\t\t\t// External auth mode: mark setup complete now\n\t\t\t\t// First user to log in via external provider will become admin\n\t\t\t\tawait options.set(\"emdash:setup_complete\", true);\n\t\t\t\tawait options.set(\"emdash:site_title\", body.title);\n\t\t\t\tif (body.tagline) {\n\t\t\t\t\tawait options.set(\"emdash:site_tagline\", body.tagline);\n\t\t\t\t}\n\t\t\t} else {\n\t\t\t\t// Passkey/provider mode: store state for next step (admin creation)\n\t\t\t\tawait options.set(\"emdash:setup_state\", {\n\t\t\t\t\tstep: \"site_complete\",\n\t\t\t\t\ttitle: body.title,\n\t\t\t\t\ttagline: body.tagline,\n\t\t\t\t});\n\t\t\t}\n\t\t} catch (error) {\n\t\t\tconsole.error(\"Failed to save setup state:\", error);\n\t\t\t// Non-fatal - continue anyway\n\t\t}\n\n\t\t// Return success with result\n\t\treturn apiSuccess({\n\t\t\tsuccess: true,\n\t\t\t// In external auth mode, setup is complete - redirect to admin\n\t\t\tsetupComplete: useExternalAuth,\n\t\t\tresult,\n\t\t});\n\t} catch (error) {\n\t\treturn handleError(error, \"Setup failed\", \"SETUP_ERROR\");\n\t}\n};\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAQA,MAAa,YAAY;AAYzB,MAAa,OAAiB,OAAO,EAAE,SAAS,KAAK,aAAa;CACjE,MAAM,EAAE,WAAW;AAEnB,KAAI,CAAC,QAAQ,GACZ,QAAO,SAAS,kBAAkB,6BAA6B,IAAI;AAGpE,KAAI;AAIH,MAAI;GAEH,MAAM,gBAAgB,MADN,IAAI,kBAAkB,OAAO,GAAG,CACZ,IAAI,wBAAwB;AAEhE,OAAI,kBAAkB,QAAQ,kBAAkB,OAC/C,QAAO,SAAS,sBAAsB,oCAAoC,IAAI;UAExE;EAKR,MAAM,OAAO,MAAM,UAAU,SAAS,UAAU;AAChD,MAAI,aAAa,KAAK,CAAE,QAAO;EAG/B,MAAM,OAAO,MAAM,UAAU;AAG7B,OAAK,WAAW;GACf,GAAG,KAAK;GACR,OAAO,KAAK;GACZ,SAAS,KAAK;GACd;EAGD,MAAM,aAAa,aAAa,KAAK;AACrC,MAAI,CAAC,WAAW,MACf,QAAO,SAAS,gBAAgB,sBAAsB,WAAW,OAAO,KAAK,KAAK,IAAI,IAAI;EAG3F,IAAI;AACJ,MAAI;AACH,YAAS,MAAM,UAAU,OAAO,IAAI,MAAM;IACzC,gBAAgB,KAAK;IACrB,YAAY;IACZ,SAAS,OAAO,WAAW;IAC3B,CAAC;WACM,OAAO;AACf,UAAO,YAAY,OAAO,wBAAwB,aAAa;;EAOhE,MAAM,kBADW,YAAY,OAAO,OAAO,CACV,SAAS;AAE1C,MAAI;GACH,MAAM,UAAU,IAAI,kBAAkB,OAAO,GAAG;GAOhD,MAAM,UAAU,gBAAgB,KAAK,OAAO,OAAO;AACnD,SAAM,QAAQ,YAAY,mBAAmB,QAAQ;AAErD,OAAI,iBAAiB;AAGpB,UAAM,QAAQ,IAAI,yBAAyB,KAAK;AAChD,UAAM,QAAQ,IAAI,qBAAqB,KAAK,MAAM;AAClD,QAAI,KAAK,QACR,OAAM,QAAQ,IAAI,uBAAuB,KAAK,QAAQ;SAIvD,OAAM,QAAQ,IAAI,sBAAsB;IACvC,MAAM;IACN,OAAO,KAAK;IACZ,SAAS,KAAK;IACd,CAAC;WAEK,OAAO;AACf,WAAQ,MAAM,+BAA+B,MAAM;;AAKpD,SAAO,WAAW;GACjB,SAAS;GAET,eAAe;GACf;GACA,CAAC;UACM,OAAO;AACf,SAAO,YAAY,OAAO,gBAAgB,cAAc"}
+{"version":3,"file":"index.mjs","names":[],"sources":["../../../../../src/astro/routes/api/setup/index.ts"],"sourcesContent":["/**\n * POST /_emdash/api/setup\n *\n * Executes the setup wizard - applies seed file and marks setup complete\n */\n\nimport type { APIRoute } from \"astro\";\n\nexport const prerender = false;\n\nimport { apiError, apiSuccess, handleError } from \"#api/error.js\";\nimport { isParseError, parseBody } from \"#api/parse.js\";\nimport { getPublicOrigin } from \"#api/public-url.js\";\nimport { setupBody } from \"#api/schemas.js\";\nimport { getAuthMode } from \"#auth/mode.js\";\nimport { OptionsRepository } from \"#db/repositories/options.js\";\nimport { applySeed } from \"#seed/apply.js\";\nimport { loadSeed } from \"#seed/load.js\";\nimport { validateSeed } from \"#seed/validate.js\";\n\nexport const POST: APIRoute = async ({ request, url, locals }) => {\n\tconst { emdash } = locals;\n\n\tif (!emdash?.db) {\n\t\treturn apiError(\"NOT_CONFIGURED\", \"EmDash is not initialized\", 500);\n\t}\n\n\ttry {\n\t\t// Guard: reject if setup has already been completed.\n\t\t// The options table may not exist on first-ever setup (pre-migration),\n\t\t// so a query failure means setup hasn't run yet — allow it to proceed.\n\t\ttry {\n\t\t\tconst options = new OptionsRepository(emdash.db);\n\t\t\tconst setupComplete = await options.get(\"emdash:setup_complete\");\n\n\t\t\tif (setupComplete === true || setupComplete === \"true\") {\n\t\t\t\treturn apiError(\"ALREADY_CONFIGURED\", \"Setup has already been completed\", 409);\n\t\t\t}\n\t\t} catch {\n\t\t\t// Options table doesn't exist yet — first-ever setup, allow it\n\t\t}\n\n\t\t// Parse request body\n\t\tconst body = await parseBody(request, setupBody);\n\t\tif (isParseError(body)) return body;\n\n\t\t// Load seed file (user seed or built-in default)\n\t\tconst seed = await loadSeed();\n\n\t\t// Override seed settings with form values\n\t\tseed.settings = {\n\t\t\t...seed.settings,\n\t\t\ttitle: body.title,\n\t\t\ttagline: body.tagline,\n\t\t};\n\n\t\t// Apply seed\n\t\tconst validation = validateSeed(seed);\n\t\tif (!validation.valid) {\n\t\t\treturn apiError(\"INVALID_SEED\", `Invalid seed file: ${validation.errors.join(\", \")}`, 400);\n\t\t}\n\n\t\tlet result;\n\t\ttry {\n\t\t\tresult = await applySeed(emdash.db, seed, {\n\t\t\t\tincludeContent: body.includeContent,\n\t\t\t\tonConflict: \"skip\",\n\t\t\t\tstorage: emdash.storage ?? undefined,\n\t\t\t});\n\t\t} catch (error) {\n\t\t\treturn handleError(error, \"Failed to apply seed\", \"SEED_ERROR\");\n\t\t}\n\n\t\t// Store setup state\n\t\t// In external auth mode, mark setup complete immediately (first user to login becomes admin)\n\t\t// Otherwise, setup_complete is set after admin user is created (passkey or auth provider)\n\t\tconst authMode = getAuthMode(emdash.config);\n\t\tconst useExternalAuth = authMode.type === \"external\";\n\n\t\ttry {\n\t\t\tconst options = new OptionsRepository(emdash.db);\n\n\t\t\t// Store the canonical site URL from the setup request.\n\t\t\t// Write-once at the DB level so concurrent setup POSTs can't both\n\t\t\t// observe an empty value and race to write. A spoofed Host header\n\t\t\t// on a later call during the wizard window must not be able to\n\t\t\t// replace the first value.\n\t\t\tconst siteUrl = getPublicOrigin(url, emdash.config);\n\t\t\tawait options.setIfAbsent(\"emdash:site_url\", siteUrl);\n\n\t\t\tif (useExternalAuth) {\n\t\t\t\t// External auth mode: mark setup complete now\n\t\t\t\t// First user to log in via external provider will become admin\n\t\t\t\tawait options.set(\"emdash:setup_complete\", true);\n\t\t\t\tawait options.set(\"emdash:site_title\", body.title);\n\t\t\t\tif (body.tagline) {\n\t\t\t\t\tawait options.set(\"emdash:site_tagline\", body.tagline);\n\t\t\t\t}\n\t\t\t} else {\n\t\t\t\t// Passkey/provider mode: store state for next step (admin creation)\n\t\t\t\tawait options.set(\"emdash:setup_state\", {\n\t\t\t\t\tstep: \"site_complete\",\n\t\t\t\t\ttitle: body.title,\n\t\t\t\t\ttagline: body.tagline,\n\t\t\t\t});\n\t\t\t}\n\t\t} catch (error) {\n\t\t\tconsole.error(\"Failed to save setup state:\", error);\n\t\t\t// Non-fatal - continue anyway\n\t\t}\n\n\t\t// Return success with result\n\t\treturn apiSuccess({\n\t\t\tsuccess: true,\n\t\t\t// In external auth mode, setup is complete - redirect to admin\n\t\t\tsetupComplete: useExternalAuth,\n\t\t\tresult,\n\t\t});\n\t} catch (error) {\n\t\treturn handleError(error, \"Setup failed\", \"SETUP_ERROR\");\n\t}\n};\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAQA,MAAa,YAAY;AAYzB,MAAa,OAAiB,OAAO,EAAE,SAAS,KAAK,aAAa;CACjE,MAAM,EAAE,WAAW;AAEnB,KAAI,CAAC,QAAQ,GACZ,QAAO,SAAS,kBAAkB,6BAA6B,IAAI;AAGpE,KAAI;AAIH,MAAI;GAEH,MAAM,gBAAgB,MADN,IAAI,kBAAkB,OAAO,GAAG,CACZ,IAAI,wBAAwB;AAEhE,OAAI,kBAAkB,QAAQ,kBAAkB,OAC/C,QAAO,SAAS,sBAAsB,oCAAoC,IAAI;UAExE;EAKR,MAAM,OAAO,MAAM,UAAU,SAAS,UAAU;AAChD,MAAI,aAAa,KAAK,CAAE,QAAO;EAG/B,MAAM,OAAO,MAAM,UAAU;AAG7B,OAAK,WAAW;GACf,GAAG,KAAK;GACR,OAAO,KAAK;GACZ,SAAS,KAAK;GACd;EAGD,MAAM,aAAa,aAAa,KAAK;AACrC,MAAI,CAAC,WAAW,MACf,QAAO,SAAS,gBAAgB,sBAAsB,WAAW,OAAO,KAAK,KAAK,IAAI,IAAI;EAG3F,IAAI;AACJ,MAAI;AACH,YAAS,MAAM,UAAU,OAAO,IAAI,MAAM;IACzC,gBAAgB,KAAK;IACrB,YAAY;IACZ,SAAS,OAAO,WAAW;IAC3B,CAAC;WACM,OAAO;AACf,UAAO,YAAY,OAAO,wBAAwB,aAAa;;EAOhE,MAAM,kBADW,YAAY,OAAO,OAAO,CACV,SAAS;AAE1C,MAAI;GACH,MAAM,UAAU,IAAI,kBAAkB,OAAO,GAAG;GAOhD,MAAM,UAAU,gBAAgB,KAAK,OAAO,OAAO;AACnD,SAAM,QAAQ,YAAY,mBAAmB,QAAQ;AAErD,OAAI,iBAAiB;AAGpB,UAAM,QAAQ,IAAI,yBAAyB,KAAK;AAChD,UAAM,QAAQ,IAAI,qBAAqB,KAAK,MAAM;AAClD,QAAI,KAAK,QACR,OAAM,QAAQ,IAAI,uBAAuB,KAAK,QAAQ;SAIvD,OAAM,QAAQ,IAAI,sBAAsB;IACvC,MAAM;IACN,OAAO,KAAK;IACZ,SAAS,KAAK;IACd,CAAC;WAEK,OAAO;AACf,WAAQ,MAAM,+BAA+B,MAAM;;AAKpD,SAAO,WAAW;GACjB,SAAS;GAET,eAAe;GACf;GACA,CAAC;UACM,OAAO;AACf,SAAO,YAAY,OAAO,gBAAgB,cAAc"}

package/dist/astro/routes/api/setup/status.mjs

@@ -1,8 +1,10 @@
 import "../../../../base64-DvnNgP7e.mjs";
 import "../../../../types-BkUg2yHx.mjs";
-import { n as apiSuccess, r as handleError, t as apiError } from "../../../../error-CCTCskie.mjs";
-import { n as loadUserSeed } from "../../../../load-Cu5bvCZh.mjs";
-import { t as getAuthMode } from "../../../../mode-CkmOhFqj.mjs";
+import "../../../../errors-DgE1zJGG.mjs";
+import "../../../../errors-BF0_LFhW.mjs";
+import { n as apiSuccess, r as handleError, t as apiError } from "../../../../error-CfvOHP0M.mjs";
+import { n as loadUserSeed } from "../../../../load-XgJiE6_3.mjs";
+import { t as getAuthMode } from "../../../../mode-CCuKXUci.mjs";
 
 //#region src/astro/routes/api/setup/status.ts
 const prerender = false;

package/dist/astro/routes/api/setup/status.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"status.mjs","names":[],"sources":["../../../../../src/astro/routes/api/setup/status.ts"],"sourcesContent":["/**\n * GET /_emdash/api/setup/status\n *\n * Returns setup status and seed file information\n */\n\nimport type { APIRoute } from \"astro\";\n\nexport const prerender = false;\n\nimport { apiError, apiSuccess, handleError } from \"#api/error.js\";\nimport { getAuthMode } from \"#auth/mode.js\";\nimport { loadUserSeed } from \"#seed/load.js\";\n\nexport const GET: APIRoute = async ({ locals }) => {\n\tconst { emdash } = locals;\n\n\tif (!emdash?.db) {\n\t\treturn apiError(\"NOT_CONFIGURED\", \"EmDash is not initialized\", 500);\n\t}\n\n\ttry {\n\t\t// Check if setup is complete\n\t\tconst setupComplete = await emdash.db\n\t\t\t.selectFrom(\"options\")\n\t\t\t.select(\"value\")\n\t\t\t.where(\"name\", \"=\", \"emdash:setup_complete\")\n\t\t\t.executeTakeFirst();\n\n\t\t// Value is JSON-encoded, parse it. Accepts both boolean true and string \"true\"\n\t\tconst isComplete =\n\t\t\tsetupComplete &&\n\t\t\t(() => {\n\t\t\t\ttry {\n\t\t\t\t\tconst parsed = JSON.parse(setupComplete.value);\n\t\t\t\t\treturn parsed === true || parsed === \"true\";\n\t\t\t\t} catch {\n\t\t\t\t\treturn false;\n\t\t\t\t}\n\t\t\t})();\n\n\t\t// Also check if users exist\n\t\tlet hasUsers = false;\n\t\ttry {\n\t\t\tconst userCount = await emdash.db\n\t\t\t\t.selectFrom(\"users\")\n\t\t\t\t.select((eb) => eb.fn.countAll<number>().as(\"count\"))\n\t\t\t\t.executeTakeFirstOrThrow();\n\t\t\thasUsers = userCount.count > 0;\n\t\t} catch {\n\t\t\t// Users table might not exist yet\n\t\t}\n\n\t\t// Setup is complete only if flag is set AND users exist\n\t\tif (isComplete && hasUsers) {\n\t\t\treturn apiSuccess({\n\t\t\t\tneedsSetup: false,\n\t\t\t});\n\t\t}\n\n\t\t// Determine current step\n\t\t// step: \"start\" | \"site\" | \"admin\" | \"complete\"\n\t\tlet step: \"start\" | \"site\" | \"admin\" = \"start\";\n\n\t\t// Get setup state if it exists\n\t\tconst setupState = await emdash.db\n\t\t\t.selectFrom(\"options\")\n\t\t\t.select(\"value\")\n\t\t\t.where(\"name\", \"=\", \"emdash:setup_state\")\n\t\t\t.executeTakeFirst();\n\n\t\tif (setupState) {\n\t\t\ttry {\n\t\t\t\tconst state = JSON.parse(setupState.value);\n\t\t\t\tif (state.step === \"admin\") {\n\t\t\t\t\tstep = \"admin\";\n\t\t\t\t} else if (state.step === \"site\") {\n\t\t\t\t\tstep = \"site\";\n\t\t\t\t}\n\t\t\t} catch {\n\t\t\t\t// Invalid state, stay at start\n\t\t\t}\n\t\t}\n\n\t\t// If setup_complete but no users, jump to admin step\n\t\tif (isComplete && !hasUsers) {\n\t\t\tstep = \"admin\";\n\t\t}\n\n\t\t// Check auth mode\n\t\tconst authMode = getAuthMode(emdash.config);\n\t\tconst useExternalAuth = authMode.type === \"external\";\n\n\t\t// In external auth mode (not atproto), setup is complete if flag is set (no users required initially)\n\t\tif (useExternalAuth && isComplete) {\n\t\t\treturn apiSuccess({\n\t\t\t\tneedsSetup: false,\n\t\t\t});\n\t\t}\n\n\t\t// Setup needed - try to load seed file info\n\t\tconst seed = await loadUserSeed();\n\t\tconst seedInfo = seed\n\t\t\t? {\n\t\t\t\t\tname: seed.meta?.name || \"Unknown Template\",\n\t\t\t\t\tdescription: seed.meta?.description || \"\",\n\t\t\t\t\tcollections: seed.collections?.length || 0,\n\t\t\t\t\thasContent: !!(seed.content && Object.keys(seed.content).length > 0),\n\t\t\t\t\ttitle: seed.settings?.title,\n\t\t\t\t\ttagline: seed.settings?.tagline,\n\t\t\t\t}\n\t\t\t: null;\n\n\t\treturn apiSuccess({\n\t\t\tneedsSetup: true,\n\t\t\tstep,\n\t\t\tseedInfo,\n\t\t\t// Tell the wizard which auth mode is active\n\t\t\tauthMode: useExternalAuth ? authMode.providerType : \"passkey\",\n\t\t});\n\t} catch (error) {\n\t\treturn handleError(error, \"Failed to check setup status\", \"SETUP_STATUS_ERROR\");\n\t}\n};\n"],"mappings":";;;;;;;AAQA,MAAa,YAAY;AAMzB,MAAa,MAAgB,OAAO,EAAE,aAAa;CAClD,MAAM,EAAE,WAAW;AAEnB,KAAI,CAAC,QAAQ,GACZ,QAAO,SAAS,kBAAkB,6BAA6B,IAAI;AAGpE,KAAI;EAEH,MAAM,gBAAgB,MAAM,OAAO,GACjC,WAAW,UAAU,CACrB,OAAO,QAAQ,CACf,MAAM,QAAQ,KAAK,wBAAwB,CAC3C,kBAAkB;EAGpB,MAAM,aACL,wBACO;AACN,OAAI;IACH,MAAM,SAAS,KAAK,MAAM,cAAc,MAAM;AAC9C,WAAO,WAAW,QAAQ,WAAW;WAC9B;AACP,WAAO;;MAEL;EAGL,IAAI,WAAW;AACf,MAAI;AAKH,eAJkB,MAAM,OAAO,GAC7B,WAAW,QAAQ,CACnB,QAAQ,OAAO,GAAG,GAAG,UAAkB,CAAC,GAAG,QAAQ,CAAC,CACpD,yBAAyB,EACN,QAAQ;UACtB;AAKR,MAAI,cAAc,SACjB,QAAO,WAAW,EACjB,YAAY,OACZ,CAAC;EAKH,IAAI,OAAmC;EAGvC,MAAM,aAAa,MAAM,OAAO,GAC9B,WAAW,UAAU,CACrB,OAAO,QAAQ,CACf,MAAM,QAAQ,KAAK,qBAAqB,CACxC,kBAAkB;AAEpB,MAAI,WACH,KAAI;GACH,MAAM,QAAQ,KAAK,MAAM,WAAW,MAAM;AAC1C,OAAI,MAAM,SAAS,QAClB,QAAO;YACG,MAAM,SAAS,OACzB,QAAO;UAED;AAMT,MAAI,cAAc,CAAC,SAClB,QAAO;EAIR,MAAM,WAAW,YAAY,OAAO,OAAO;EAC3C,MAAM,kBAAkB,SAAS,SAAS;AAG1C,MAAI,mBAAmB,WACtB,QAAO,WAAW,EACjB,YAAY,OACZ,CAAC;EAIH,MAAM,OAAO,MAAM,cAAc;EACjC,MAAM,WAAW,OACd;GACA,MAAM,KAAK,MAAM,QAAQ;GACzB,aAAa,KAAK,MAAM,eAAe;GACvC,aAAa,KAAK,aAAa,UAAU;GACzC,YAAY,CAAC,EAAE,KAAK,WAAW,OAAO,KAAK,KAAK,QAAQ,CAAC,SAAS;GAClE,OAAO,KAAK,UAAU;GACtB,SAAS,KAAK,UAAU;GACxB,GACA;AAEH,SAAO,WAAW;GACjB,YAAY;GACZ;GACA;GAEA,UAAU,kBAAkB,SAAS,eAAe;GACpD,CAAC;UACM,OAAO;AACf,SAAO,YAAY,OAAO,gCAAgC,qBAAqB"}
+{"version":3,"file":"status.mjs","names":[],"sources":["../../../../../src/astro/routes/api/setup/status.ts"],"sourcesContent":["/**\n * GET /_emdash/api/setup/status\n *\n * Returns setup status and seed file information\n */\n\nimport type { APIRoute } from \"astro\";\n\nexport const prerender = false;\n\nimport { apiError, apiSuccess, handleError } from \"#api/error.js\";\nimport { getAuthMode } from \"#auth/mode.js\";\nimport { loadUserSeed } from \"#seed/load.js\";\n\nexport const GET: APIRoute = async ({ locals }) => {\n\tconst { emdash } = locals;\n\n\tif (!emdash?.db) {\n\t\treturn apiError(\"NOT_CONFIGURED\", \"EmDash is not initialized\", 500);\n\t}\n\n\ttry {\n\t\t// Check if setup is complete\n\t\tconst setupComplete = await emdash.db\n\t\t\t.selectFrom(\"options\")\n\t\t\t.select(\"value\")\n\t\t\t.where(\"name\", \"=\", \"emdash:setup_complete\")\n\t\t\t.executeTakeFirst();\n\n\t\t// Value is JSON-encoded, parse it. Accepts both boolean true and string \"true\"\n\t\tconst isComplete =\n\t\t\tsetupComplete &&\n\t\t\t(() => {\n\t\t\t\ttry {\n\t\t\t\t\tconst parsed = JSON.parse(setupComplete.value);\n\t\t\t\t\treturn parsed === true || parsed === \"true\";\n\t\t\t\t} catch {\n\t\t\t\t\treturn false;\n\t\t\t\t}\n\t\t\t})();\n\n\t\t// Also check if users exist\n\t\tlet hasUsers = false;\n\t\ttry {\n\t\t\tconst userCount = await emdash.db\n\t\t\t\t.selectFrom(\"users\")\n\t\t\t\t.select((eb) => eb.fn.countAll<number>().as(\"count\"))\n\t\t\t\t.executeTakeFirstOrThrow();\n\t\t\thasUsers = userCount.count > 0;\n\t\t} catch {\n\t\t\t// Users table might not exist yet\n\t\t}\n\n\t\t// Setup is complete only if flag is set AND users exist\n\t\tif (isComplete && hasUsers) {\n\t\t\treturn apiSuccess({\n\t\t\t\tneedsSetup: false,\n\t\t\t});\n\t\t}\n\n\t\t// Determine current step\n\t\t// step: \"start\" | \"site\" | \"admin\" | \"complete\"\n\t\tlet step: \"start\" | \"site\" | \"admin\" = \"start\";\n\n\t\t// Get setup state if it exists\n\t\tconst setupState = await emdash.db\n\t\t\t.selectFrom(\"options\")\n\t\t\t.select(\"value\")\n\t\t\t.where(\"name\", \"=\", \"emdash:setup_state\")\n\t\t\t.executeTakeFirst();\n\n\t\tif (setupState) {\n\t\t\ttry {\n\t\t\t\tconst state = JSON.parse(setupState.value);\n\t\t\t\tif (state.step === \"admin\") {\n\t\t\t\t\tstep = \"admin\";\n\t\t\t\t} else if (state.step === \"site\") {\n\t\t\t\t\tstep = \"site\";\n\t\t\t\t}\n\t\t\t} catch {\n\t\t\t\t// Invalid state, stay at start\n\t\t\t}\n\t\t}\n\n\t\t// If setup_complete but no users, jump to admin step\n\t\tif (isComplete && !hasUsers) {\n\t\t\tstep = \"admin\";\n\t\t}\n\n\t\t// Check auth mode\n\t\tconst authMode = getAuthMode(emdash.config);\n\t\tconst useExternalAuth = authMode.type === \"external\";\n\n\t\t// In external auth mode (not atproto), setup is complete if flag is set (no users required initially)\n\t\tif (useExternalAuth && isComplete) {\n\t\t\treturn apiSuccess({\n\t\t\t\tneedsSetup: false,\n\t\t\t});\n\t\t}\n\n\t\t// Setup needed - try to load seed file info\n\t\tconst seed = await loadUserSeed();\n\t\tconst seedInfo = seed\n\t\t\t? {\n\t\t\t\t\tname: seed.meta?.name || \"Unknown Template\",\n\t\t\t\t\tdescription: seed.meta?.description || \"\",\n\t\t\t\t\tcollections: seed.collections?.length || 0,\n\t\t\t\t\thasContent: !!(seed.content && Object.keys(seed.content).length > 0),\n\t\t\t\t\ttitle: seed.settings?.title,\n\t\t\t\t\ttagline: seed.settings?.tagline,\n\t\t\t\t}\n\t\t\t: null;\n\n\t\treturn apiSuccess({\n\t\t\tneedsSetup: true,\n\t\t\tstep,\n\t\t\tseedInfo,\n\t\t\t// Tell the wizard which auth mode is active\n\t\t\tauthMode: useExternalAuth ? authMode.providerType : \"passkey\",\n\t\t});\n\t} catch (error) {\n\t\treturn handleError(error, \"Failed to check setup status\", \"SETUP_STATUS_ERROR\");\n\t}\n};\n"],"mappings":";;;;;;;;;AAQA,MAAa,YAAY;AAMzB,MAAa,MAAgB,OAAO,EAAE,aAAa;CAClD,MAAM,EAAE,WAAW;AAEnB,KAAI,CAAC,QAAQ,GACZ,QAAO,SAAS,kBAAkB,6BAA6B,IAAI;AAGpE,KAAI;EAEH,MAAM,gBAAgB,MAAM,OAAO,GACjC,WAAW,UAAU,CACrB,OAAO,QAAQ,CACf,MAAM,QAAQ,KAAK,wBAAwB,CAC3C,kBAAkB;EAGpB,MAAM,aACL,wBACO;AACN,OAAI;IACH,MAAM,SAAS,KAAK,MAAM,cAAc,MAAM;AAC9C,WAAO,WAAW,QAAQ,WAAW;WAC9B;AACP,WAAO;;MAEL;EAGL,IAAI,WAAW;AACf,MAAI;AAKH,eAJkB,MAAM,OAAO,GAC7B,WAAW,QAAQ,CACnB,QAAQ,OAAO,GAAG,GAAG,UAAkB,CAAC,GAAG,QAAQ,CAAC,CACpD,yBAAyB,EACN,QAAQ;UACtB;AAKR,MAAI,cAAc,SACjB,QAAO,WAAW,EACjB,YAAY,OACZ,CAAC;EAKH,IAAI,OAAmC;EAGvC,MAAM,aAAa,MAAM,OAAO,GAC9B,WAAW,UAAU,CACrB,OAAO,QAAQ,CACf,MAAM,QAAQ,KAAK,qBAAqB,CACxC,kBAAkB;AAEpB,MAAI,WACH,KAAI;GACH,MAAM,QAAQ,KAAK,MAAM,WAAW,MAAM;AAC1C,OAAI,MAAM,SAAS,QAClB,QAAO;YACG,MAAM,SAAS,OACzB,QAAO;UAED;AAMT,MAAI,cAAc,CAAC,SAClB,QAAO;EAIR,MAAM,WAAW,YAAY,OAAO,OAAO;EAC3C,MAAM,kBAAkB,SAAS,SAAS;AAG1C,MAAI,mBAAmB,WACtB,QAAO,WAAW,EACjB,YAAY,OACZ,CAAC;EAIH,MAAM,OAAO,MAAM,cAAc;EACjC,MAAM,WAAW,OACd;GACA,MAAM,KAAK,MAAM,QAAQ;GACzB,aAAa,KAAK,MAAM,eAAe;GACvC,aAAa,KAAK,aAAa,UAAU;GACzC,YAAY,CAAC,EAAE,KAAK,WAAW,OAAO,KAAK,KAAK,QAAQ,CAAC,SAAS;GAClE,OAAO,KAAK,UAAU;GACtB,SAAS,KAAK,UAAU;GACxB,GACA;AAEH,SAAO,WAAW;GACjB,YAAY;GACZ;GACA;GAEA,UAAU,kBAAkB,SAAS,eAAe;GACpD,CAAC;UACM,OAAO;AACf,SAAO,YAAY,OAAO,gCAAgC,qBAAqB"}

package/dist/astro/routes/api/snapshot.mjs

@@ -1,14 +1,16 @@
-import "../../../dialect-helpers-CtYdsX4W.mjs";
+import "../../../dialect-helpers-7_IqPdh9.mjs";
 import "../../../after-PcEvMY_6.mjs";
-import "../../../options-D5WcorD5.mjs";
+import "../../../options-DhrI7eMv.mjs";
 import "../../../base64-DvnNgP7e.mjs";
-import { a as resolveSecretsCached } from "../../../secrets-DNgVgz_e.mjs";
+import { a as resolveSecretsCached } from "../../../secrets-CIi0nFiR.mjs";
 import "../../../types-BkUg2yHx.mjs";
-import { n as apiSuccess, r as handleError, t as apiError } from "../../../error-CCTCskie.mjs";
-import { r as getPublicOrigin } from "../../../public-url-BWVHsfQv.mjs";
-import { n as parsePreviewSignatureHeader, r as verifyPreviewSignature, t as generateSnapshot } from "../../../snapshot-C32Xuv3o.mjs";
-import { t as resolveSessionUser } from "../../../session-user-BQeS2Mrb.mjs";
-import { r as requirePerm } from "../../../authorize-BXpfMpp0.mjs";
+import "../../../errors-DgE1zJGG.mjs";
+import "../../../errors-BF0_LFhW.mjs";
+import { n as apiSuccess, r as handleError, t as apiError } from "../../../error-CfvOHP0M.mjs";
+import { r as getPublicOrigin } from "../../../public-url-Bn7U0D7-.mjs";
+import { n as parsePreviewSignatureHeader, r as verifyPreviewSignature, t as generateSnapshot } from "../../../snapshot-CugwUqKQ.mjs";
+import { t as resolveSessionUser } from "../../../session-user-BhaVp8w0.mjs";
+import { i as requirePerm } from "../../../authorize-seCifOMJ.mjs";
 
 //#region src/astro/routes/api/snapshot.ts
 const prerender = false;

package/dist/astro/routes/api/snapshot.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"snapshot.mjs","names":[],"sources":["../../../../src/astro/routes/api/snapshot.ts"],"sourcesContent":["/**\n * Snapshot endpoint — exports a portable database snapshot for preview mode.\n *\n * Security:\n * - Authenticated users: requires content:read + schema:read permissions\n * - Preview services: requires valid X-Preview-Signature header (HMAC-SHA256)\n * - Excludes auth/user/session/token tables\n */\n\nimport type { User } from \"@emdash-cms/auth\";\nimport type { APIRoute } from \"astro\";\n\nimport { requirePerm } from \"#api/authorize.js\";\nimport { apiError, apiSuccess, handleError } from \"#api/error.js\";\nimport {\n\tgenerateSnapshot,\n\tparsePreviewSignatureHeader,\n\tverifyPreviewSignature,\n} from \"#api/handlers/snapshot.js\";\nimport { getPublicOrigin } from \"#api/public-url.js\";\nimport { resolveSecretsCached } from \"#config/secrets.js\";\n\nimport { resolveSessionUser } from \"../../session-user.js\";\n\nexport const prerender = false;\n\nexport const GET: APIRoute = async ({ request, locals, url, session }) => {\n\tconst { emdash } = locals;\n\t// This route is in PUBLIC_API_EXACT (for preview-signature callers with no session),\n\t// so auth middleware skips user resolution. Manually resolve the session user here\n\t// to support session-authenticated admin users alongside preview-signature auth.\n\tlet user: User | undefined = (locals as { user?: User }).user;\n\tif (!user && session && emdash?.db) {\n\t\ttry {\n\t\t\tconst { createKyselyAdapter } = await import(\"@emdash-cms/auth/adapters/kysely\");\n\t\t\tconst sessionUser = await resolveSessionUser(session);\n\t\t\tif (sessionUser?.id) {\n\t\t\t\tconst adapter = createKyselyAdapter(emdash.db);\n\t\t\t\tconst resolved = await adapter.getUserById(sessionUser.id);\n\t\t\t\tif (resolved && !resolved.disabled) {\n\t\t\t\t\tuser = resolved;\n\t\t\t\t}\n\t\t\t}\n\t\t} catch {\n\t\t\t// Session resolution failed, continue to preview-signature check\n\t\t}\n\t}\n\n\tif (!emdash?.db) {\n\t\treturn apiError(\"NOT_CONFIGURED\", \"EmDash is not initialized\", 500);\n\t}\n\n\t// Check for preview signature auth (used by DO preview services)\n\tconst previewSig = request.headers.get(\"X-Preview-Signature\");\n\tlet authorized = false;\n\n\tif (previewSig) {\n\t\t// Resolves env override or DB-stored value. Always non-empty after\n\t\t// resolution, so the signature path is never silently disabled.\n\t\t// Note: a signing process without access to this database (e.g. a\n\t\t// remote preview Worker) must set the same `EMDASH_PREVIEW_SECRET`\n\t\t// env var on both sides.\n\t\tconst { previewSecret: secret, previewSecretSource } = await resolveSecretsCached(emdash.db);\n\t\tconst parsed = parsePreviewSignatureHeader(previewSig);\n\t\tif (!parsed) {\n\t\t\tconsole.warn(\"[snapshot] Failed to parse X-Preview-Signature header\");\n\t\t} else {\n\t\t\tauthorized = await verifyPreviewSignature(parsed.source, parsed.exp, parsed.sig, secret);\n\t\t\tif (!authorized) {\n\t\t\t\tconst fields: Record<string, unknown> = {\n\t\t\t\t\tsource: parsed.source,\n\t\t\t\t\texp: parsed.exp,\n\t\t\t\t\texpired: parsed.exp < Date.now() / 1000,\n\t\t\t\t\tsecretSource: previewSecretSource,\n\t\t\t\t};\n\t\t\t\tif (previewSecretSource === \"db\") {\n\t\t\t\t\tfields.hint =\n\t\t\t\t\t\t\"Set EMDASH_PREVIEW_SECRET in both this process and the signing process to share secrets across deployments\";\n\t\t\t\t}\n\t\t\t\tconsole.warn(\"[snapshot] Preview signature verification failed\", fields);\n\t\t\t}\n\t\t}\n\t}\n\n\tif (!authorized) {\n\t\t// Fall back to standard user auth\n\t\tconst contentDenied = requirePerm(user, \"content:read\");\n\t\tif (contentDenied) return contentDenied;\n\t\tconst schemaDenied = requirePerm(user, \"schema:read\");\n\t\tif (schemaDenied) return schemaDenied;\n\t}\n\n\ttry {\n\t\tconst includeDrafts = url.searchParams.get(\"drafts\") === \"true\";\n\t\tconst snapshot = await generateSnapshot(emdash.db, {\n\t\t\tincludeDrafts,\n\t\t\torigin: getPublicOrigin(url, emdash.config),\n\t\t});\n\n\t\treturn apiSuccess(snapshot);\n\t} catch (error) {\n\t\treturn handleError(error, \"Failed to generate snapshot\", \"SNAPSHOT_ERROR\");\n\t}\n};\n"],"mappings":";;;;;;;;;;;;;AAwBA,MAAa,YAAY;AAEzB,MAAa,MAAgB,OAAO,EAAE,SAAS,QAAQ,KAAK,cAAc;CACzE,MAAM,EAAE,WAAW;CAInB,IAAI,OAA0B,OAA2B;AACzD,KAAI,CAAC,QAAQ,WAAW,QAAQ,GAC/B,KAAI;EACH,MAAM,EAAE,wBAAwB,MAAM,OAAO;EAC7C,MAAM,cAAc,MAAM,mBAAmB,QAAQ;AACrD,MAAI,aAAa,IAAI;GAEpB,MAAM,WAAW,MADD,oBAAoB,OAAO,GAAG,CACf,YAAY,YAAY,GAAG;AAC1D,OAAI,YAAY,CAAC,SAAS,SACzB,QAAO;;SAGF;AAKT,KAAI,CAAC,QAAQ,GACZ,QAAO,SAAS,kBAAkB,6BAA6B,IAAI;CAIpE,MAAM,aAAa,QAAQ,QAAQ,IAAI,sBAAsB;CAC7D,IAAI,aAAa;AAEjB,KAAI,YAAY;EAMf,MAAM,EAAE,eAAe,QAAQ,wBAAwB,MAAM,qBAAqB,OAAO,GAAG;EAC5F,MAAM,SAAS,4BAA4B,WAAW;AACtD,MAAI,CAAC,OACJ,SAAQ,KAAK,wDAAwD;OAC/D;AACN,gBAAa,MAAM,uBAAuB,OAAO,QAAQ,OAAO,KAAK,OAAO,KAAK,OAAO;AACxF,OAAI,CAAC,YAAY;IAChB,MAAM,SAAkC;KACvC,QAAQ,OAAO;KACf,KAAK,OAAO;KACZ,SAAS,OAAO,MAAM,KAAK,KAAK,GAAG;KACnC,cAAc;KACd;AACD,QAAI,wBAAwB,KAC3B,QAAO,OACN;AAEF,YAAQ,KAAK,oDAAoD,OAAO;;;;AAK3E,KAAI,CAAC,YAAY;EAEhB,MAAM,gBAAgB,YAAY,MAAM,eAAe;AACvD,MAAI,cAAe,QAAO;EAC1B,MAAM,eAAe,YAAY,MAAM,cAAc;AACrD,MAAI,aAAc,QAAO;;AAG1B,KAAI;EACH,MAAM,gBAAgB,IAAI,aAAa,IAAI,SAAS,KAAK;AAMzD,SAAO,WALU,MAAM,iBAAiB,OAAO,IAAI;GAClD;GACA,QAAQ,gBAAgB,KAAK,OAAO,OAAO;GAC3C,CAAC,CAEyB;UACnB,OAAO;AACf,SAAO,YAAY,OAAO,+BAA+B,iBAAiB"}
+{"version":3,"file":"snapshot.mjs","names":[],"sources":["../../../../src/astro/routes/api/snapshot.ts"],"sourcesContent":["/**\n * Snapshot endpoint — exports a portable database snapshot for preview mode.\n *\n * Security:\n * - Authenticated users: requires content:read + schema:read permissions\n * - Preview services: requires valid X-Preview-Signature header (HMAC-SHA256)\n * - Excludes auth/user/session/token tables\n */\n\nimport type { User } from \"@emdash-cms/auth\";\nimport type { APIRoute } from \"astro\";\n\nimport { requirePerm } from \"#api/authorize.js\";\nimport { apiError, apiSuccess, handleError } from \"#api/error.js\";\nimport {\n\tgenerateSnapshot,\n\tparsePreviewSignatureHeader,\n\tverifyPreviewSignature,\n} from \"#api/handlers/snapshot.js\";\nimport { getPublicOrigin } from \"#api/public-url.js\";\nimport { resolveSecretsCached } from \"#config/secrets.js\";\n\nimport { resolveSessionUser } from \"../../session-user.js\";\n\nexport const prerender = false;\n\nexport const GET: APIRoute = async ({ request, locals, url, session }) => {\n\tconst { emdash } = locals;\n\t// This route is in PUBLIC_API_EXACT (for preview-signature callers with no session),\n\t// so auth middleware skips user resolution. Manually resolve the session user here\n\t// to support session-authenticated admin users alongside preview-signature auth.\n\tlet user: User | undefined = (locals as { user?: User }).user;\n\tif (!user && session && emdash?.db) {\n\t\ttry {\n\t\t\tconst { createKyselyAdapter } = await import(\"@emdash-cms/auth/adapters/kysely\");\n\t\t\tconst sessionUser = await resolveSessionUser(session);\n\t\t\tif (sessionUser?.id) {\n\t\t\t\tconst adapter = createKyselyAdapter(emdash.db);\n\t\t\t\tconst resolved = await adapter.getUserById(sessionUser.id);\n\t\t\t\tif (resolved && !resolved.disabled) {\n\t\t\t\t\tuser = resolved;\n\t\t\t\t}\n\t\t\t}\n\t\t} catch {\n\t\t\t// Session resolution failed, continue to preview-signature check\n\t\t}\n\t}\n\n\tif (!emdash?.db) {\n\t\treturn apiError(\"NOT_CONFIGURED\", \"EmDash is not initialized\", 500);\n\t}\n\n\t// Check for preview signature auth (used by DO preview services)\n\tconst previewSig = request.headers.get(\"X-Preview-Signature\");\n\tlet authorized = false;\n\n\tif (previewSig) {\n\t\t// Resolves env override or DB-stored value. Always non-empty after\n\t\t// resolution, so the signature path is never silently disabled.\n\t\t// Note: a signing process without access to this database (e.g. a\n\t\t// remote preview Worker) must set the same `EMDASH_PREVIEW_SECRET`\n\t\t// env var on both sides.\n\t\tconst { previewSecret: secret, previewSecretSource } = await resolveSecretsCached(emdash.db);\n\t\tconst parsed = parsePreviewSignatureHeader(previewSig);\n\t\tif (!parsed) {\n\t\t\tconsole.warn(\"[snapshot] Failed to parse X-Preview-Signature header\");\n\t\t} else {\n\t\t\tauthorized = await verifyPreviewSignature(parsed.source, parsed.exp, parsed.sig, secret);\n\t\t\tif (!authorized) {\n\t\t\t\tconst fields: Record<string, unknown> = {\n\t\t\t\t\tsource: parsed.source,\n\t\t\t\t\texp: parsed.exp,\n\t\t\t\t\texpired: parsed.exp < Date.now() / 1000,\n\t\t\t\t\tsecretSource: previewSecretSource,\n\t\t\t\t};\n\t\t\t\tif (previewSecretSource === \"db\") {\n\t\t\t\t\tfields.hint =\n\t\t\t\t\t\t\"Set EMDASH_PREVIEW_SECRET in both this process and the signing process to share secrets across deployments\";\n\t\t\t\t}\n\t\t\t\tconsole.warn(\"[snapshot] Preview signature verification failed\", fields);\n\t\t\t}\n\t\t}\n\t}\n\n\tif (!authorized) {\n\t\t// Fall back to standard user auth\n\t\tconst contentDenied = requirePerm(user, \"content:read\");\n\t\tif (contentDenied) return contentDenied;\n\t\tconst schemaDenied = requirePerm(user, \"schema:read\");\n\t\tif (schemaDenied) return schemaDenied;\n\t}\n\n\ttry {\n\t\tconst includeDrafts = url.searchParams.get(\"drafts\") === \"true\";\n\t\tconst snapshot = await generateSnapshot(emdash.db, {\n\t\t\tincludeDrafts,\n\t\t\torigin: getPublicOrigin(url, emdash.config),\n\t\t});\n\n\t\treturn apiSuccess(snapshot);\n\t} catch (error) {\n\t\treturn handleError(error, \"Failed to generate snapshot\", \"SNAPSHOT_ERROR\");\n\t}\n};\n"],"mappings":";;;;;;;;;;;;;;;AAwBA,MAAa,YAAY;AAEzB,MAAa,MAAgB,OAAO,EAAE,SAAS,QAAQ,KAAK,cAAc;CACzE,MAAM,EAAE,WAAW;CAInB,IAAI,OAA0B,OAA2B;AACzD,KAAI,CAAC,QAAQ,WAAW,QAAQ,GAC/B,KAAI;EACH,MAAM,EAAE,wBAAwB,MAAM,OAAO;EAC7C,MAAM,cAAc,MAAM,mBAAmB,QAAQ;AACrD,MAAI,aAAa,IAAI;GAEpB,MAAM,WAAW,MADD,oBAAoB,OAAO,GAAG,CACf,YAAY,YAAY,GAAG;AAC1D,OAAI,YAAY,CAAC,SAAS,SACzB,QAAO;;SAGF;AAKT,KAAI,CAAC,QAAQ,GACZ,QAAO,SAAS,kBAAkB,6BAA6B,IAAI;CAIpE,MAAM,aAAa,QAAQ,QAAQ,IAAI,sBAAsB;CAC7D,IAAI,aAAa;AAEjB,KAAI,YAAY;EAMf,MAAM,EAAE,eAAe,QAAQ,wBAAwB,MAAM,qBAAqB,OAAO,GAAG;EAC5F,MAAM,SAAS,4BAA4B,WAAW;AACtD,MAAI,CAAC,OACJ,SAAQ,KAAK,wDAAwD;OAC/D;AACN,gBAAa,MAAM,uBAAuB,OAAO,QAAQ,OAAO,KAAK,OAAO,KAAK,OAAO;AACxF,OAAI,CAAC,YAAY;IAChB,MAAM,SAAkC;KACvC,QAAQ,OAAO;KACf,KAAK,OAAO;KACZ,SAAS,OAAO,MAAM,KAAK,KAAK,GAAG;KACnC,cAAc;KACd;AACD,QAAI,wBAAwB,KAC3B,QAAO,OACN;AAEF,YAAQ,KAAK,oDAAoD,OAAO;;;;AAK3E,KAAI,CAAC,YAAY;EAEhB,MAAM,gBAAgB,YAAY,MAAM,eAAe;AACvD,MAAI,cAAe,QAAO;EAC1B,MAAM,eAAe,YAAY,MAAM,cAAc;AACrD,MAAI,aAAc,QAAO;;AAG1B,KAAI;EACH,MAAM,gBAAgB,IAAI,aAAa,IAAI,SAAS,KAAK;AAMzD,SAAO,WALU,MAAM,iBAAiB,OAAO,IAAI;GAClD;GACA,QAAQ,gBAAgB,KAAK,OAAO,OAAO;GAC3C,CAAC,CAEyB;UACnB,OAAO;AACf,SAAO,YAAY,OAAO,+BAA+B,iBAAiB"}

package/dist/astro/routes/api/taxonomies/_name_/reorder.mjs

@@ -1,27 +1,33 @@
-import "../../../../../dialect-helpers-CtYdsX4W.mjs";
-import "../../../../../config-CGVeT8Hc.mjs";
+import "../../../../../dialect-helpers-7_IqPdh9.mjs";
+import "../../../../../config-CvmjJcVw.mjs";
 import "../../../../../after-PcEvMY_6.mjs";
 import "../../../../../base64-DvnNgP7e.mjs";
-import "../../../../../object-cache-DlSVbn5Y.mjs";
+import "../../../../../object-cache-CqWNY5uP.mjs";
 import "../../../../../slugify-T5GHH42D.mjs";
 import "../../../../../types-BkUg2yHx.mjs";
-import "../../../../../taxonomy-Dj1vpw5E.mjs";
-import "../../../../../resolve-BJIS8wKr.mjs";
-import "../../../../../request-cache-DaMhSQdx.mjs";
-import { r as taxonomyTag } from "../../../../../chrome-tags-D7LGB91U.mjs";
-import "../../../../../loader-t4TxaFiQ.mjs";
-import "../../../../../collection-slugs-cache-D9auiKmI.mjs";
-import "../../../../../taxonomies-BpqpXJUE.mjs";
-import { d as handleTermReorder } from "../../../../../taxonomies-ClCo4IGO.mjs";
-import { a as unwrapResult, i as requireDb, r as handleError, t as apiError } from "../../../../../error-CCTCskie.mjs";
-import { n as parseBody, t as isParseError } from "../../../../../parse-Cr379Av9.mjs";
-import "../../../../../redirects-BCiTaIQ-.mjs";
-import { L as reorderTermsBody } from "../../../../../entry-lock-D3C99MXS.mjs";
-import "../../../../../comments-BVzzt6x5.mjs";
-import "../../../../../relations-B4w-G5U9.mjs";
-import "../../../../../status-DLoBmcDz.mjs";
+import "../../../../../taxonomy-C3Fu1YeH.mjs";
+import "../../../../../resolve-2WbQsCvT.mjs";
+import "../../../../../request-cache-DzLYKm_x.mjs";
+import { r as taxonomyTag } from "../../../../../chrome-tags-DApCQSIk.mjs";
+import "../../../../../loader-BzqeR1ZN.mjs";
+import "../../../../../collection-slugs-cache-CjGk__zp.mjs";
+import "../../../../../taxonomies-C1IwNe8Q.mjs";
+import "../../../../../errors-DgE1zJGG.mjs";
+import "../../../../../settings-DYidIB26.mjs";
+import "../../../../../site-settings-DOgRUoFX.mjs";
+import "../../../../../errors-BF0_LFhW.mjs";
+import { d as handleTermReorder } from "../../../../../taxonomies-C_XMoRcX.mjs";
+import { a as unwrapResult, i as requireDb, r as handleError, t as apiError } from "../../../../../error-CfvOHP0M.mjs";
+import { n as parseBody, t as isParseError } from "../../../../../parse-DY6OD1j_.mjs";
+import "../../../../../redirects-Cv9apQKj.mjs";
+import { R as reorderTermsBody } from "../../../../../entry-lock-BJYdBfXb.mjs";
+import "../../../../../media-Pu1L6xir.mjs";
+import "../../../../../comments-fHZ8ON9O.mjs";
+import "../../../../../relations-CK9CYUyr.mjs";
+import "../../../../../menus-BM7BPLOb.mjs";
+import "../../../../../status-DZKIG4a9.mjs";
 import "../../../../../api/schemas/index.mjs";
-import { r as requirePerm } from "../../../../../authorize-BXpfMpp0.mjs";
+import { i as requirePerm } from "../../../../../authorize-seCifOMJ.mjs";
 
 //#region src/astro/routes/api/taxonomies/[name]/reorder.ts
 const prerender = false;

package/dist/astro/routes/api/taxonomies/_name_/reorder.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"reorder.mjs","names":[],"sources":["../../../../../../src/astro/routes/api/taxonomies/[name]/reorder.ts"],"sourcesContent":["/**\n * Taxonomy term reorder endpoint\n *\n * POST /_emdash/api/taxonomies/:name/reorder\n *   body: { parentId?, ids }\n *\n * Sets the manual order of one sibling group. There is no `locale`: a term\n * holds one position across every locale it is translated into.\n */\n\nimport type { APIRoute } from \"astro\";\n\nimport { requirePerm } from \"#api/authorize.js\";\nimport { apiError, handleError, requireDb, unwrapResult } from \"#api/error.js\";\nimport { handleTermReorder } from \"#api/handlers/taxonomies.js\";\nimport { isParseError, parseBody } from \"#api/parse.js\";\nimport { reorderTermsBody } from \"#api/schemas.js\";\nimport { taxonomyTag } from \"#cache/chrome-tags.js\";\n\nexport const prerender = false;\n\nexport const POST: APIRoute = async ({ params, request, locals, cache }) => {\n\tconst { emdash, user } = locals;\n\tconst { name } = params;\n\tif (!name) return apiError(\"VALIDATION_ERROR\", \"Taxonomy name required\", 400);\n\n\tconst dbErr = requireDb(emdash?.db);\n\tif (dbErr) return dbErr;\n\n\tconst denied = requirePerm(user, \"taxonomies:manage\");\n\tif (denied) return denied;\n\n\ttry {\n\t\tconst body = await parseBody(request, reorderTermsBody);\n\t\tif (isParseError(body)) return body;\n\n\t\tconst result = await handleTermReorder(emdash.db, name, body);\n\t\tif (!result.success) return unwrapResult(result);\n\t\tif (cache?.enabled) await cache.invalidate({ tags: [taxonomyTag(name)] });\n\t\treturn unwrapResult(result);\n\t} catch (error) {\n\t\treturn handleError(error, \"Failed to reorder terms\", \"TERM_REORDER_ERROR\");\n\t}\n};\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;AAmBA,MAAa,YAAY;AAEzB,MAAa,OAAiB,OAAO,EAAE,QAAQ,SAAS,QAAQ,YAAY;CAC3E,MAAM,EAAE,QAAQ,SAAS;CACzB,MAAM,EAAE,SAAS;AACjB,KAAI,CAAC,KAAM,QAAO,SAAS,oBAAoB,0BAA0B,IAAI;CAE7E,MAAM,QAAQ,UAAU,QAAQ,GAAG;AACnC,KAAI,MAAO,QAAO;CAElB,MAAM,SAAS,YAAY,MAAM,oBAAoB;AACrD,KAAI,OAAQ,QAAO;AAEnB,KAAI;EACH,MAAM,OAAO,MAAM,UAAU,SAAS,iBAAiB;AACvD,MAAI,aAAa,KAAK,CAAE,QAAO;EAE/B,MAAM,SAAS,MAAM,kBAAkB,OAAO,IAAI,MAAM,KAAK;AAC7D,MAAI,CAAC,OAAO,QAAS,QAAO,aAAa,OAAO;AAChD,MAAI,OAAO,QAAS,OAAM,MAAM,WAAW,EAAE,MAAM,CAAC,YAAY,KAAK,CAAC,EAAE,CAAC;AACzE,SAAO,aAAa,OAAO;UACnB,OAAO;AACf,SAAO,YAAY,OAAO,2BAA2B,qBAAqB"}
+{"version":3,"file":"reorder.mjs","names":[],"sources":["../../../../../../src/astro/routes/api/taxonomies/[name]/reorder.ts"],"sourcesContent":["/**\n * Taxonomy term reorder endpoint\n *\n * POST /_emdash/api/taxonomies/:name/reorder\n *   body: { parentId?, ids }\n *\n * Sets the manual order of one sibling group. There is no `locale`: a term\n * holds one position across every locale it is translated into.\n */\n\nimport type { APIRoute } from \"astro\";\n\nimport { requirePerm } from \"#api/authorize.js\";\nimport { apiError, handleError, requireDb, unwrapResult } from \"#api/error.js\";\nimport { handleTermReorder } from \"#api/handlers/taxonomies.js\";\nimport { isParseError, parseBody } from \"#api/parse.js\";\nimport { reorderTermsBody } from \"#api/schemas.js\";\nimport { taxonomyTag } from \"#cache/chrome-tags.js\";\n\nexport const prerender = false;\n\nexport const POST: APIRoute = async ({ params, request, locals, cache }) => {\n\tconst { emdash, user } = locals;\n\tconst { name } = params;\n\tif (!name) return apiError(\"VALIDATION_ERROR\", \"Taxonomy name required\", 400);\n\n\tconst dbErr = requireDb(emdash?.db);\n\tif (dbErr) return dbErr;\n\n\tconst denied = requirePerm(user, \"taxonomies:manage\");\n\tif (denied) return denied;\n\n\ttry {\n\t\tconst body = await parseBody(request, reorderTermsBody);\n\t\tif (isParseError(body)) return body;\n\n\t\tconst result = await handleTermReorder(emdash.db, name, body);\n\t\tif (!result.success) return unwrapResult(result);\n\t\tif (cache?.enabled) await cache.invalidate({ tags: [taxonomyTag(name)] });\n\t\treturn unwrapResult(result);\n\t} catch (error) {\n\t\treturn handleError(error, \"Failed to reorder terms\", \"TERM_REORDER_ERROR\");\n\t}\n};\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAmBA,MAAa,YAAY;AAEzB,MAAa,OAAiB,OAAO,EAAE,QAAQ,SAAS,QAAQ,YAAY;CAC3E,MAAM,EAAE,QAAQ,SAAS;CACzB,MAAM,EAAE,SAAS;AACjB,KAAI,CAAC,KAAM,QAAO,SAAS,oBAAoB,0BAA0B,IAAI;CAE7E,MAAM,QAAQ,UAAU,QAAQ,GAAG;AACnC,KAAI,MAAO,QAAO;CAElB,MAAM,SAAS,YAAY,MAAM,oBAAoB;AACrD,KAAI,OAAQ,QAAO;AAEnB,KAAI;EACH,MAAM,OAAO,MAAM,UAAU,SAAS,iBAAiB;AACvD,MAAI,aAAa,KAAK,CAAE,QAAO;EAE/B,MAAM,SAAS,MAAM,kBAAkB,OAAO,IAAI,MAAM,KAAK;AAC7D,MAAI,CAAC,OAAO,QAAS,QAAO,aAAa,OAAO;AAChD,MAAI,OAAO,QAAS,OAAM,MAAM,WAAW,EAAE,MAAM,CAAC,YAAY,KAAK,CAAC,EAAE,CAAC;AACzE,SAAO,aAAa,OAAO;UACnB,OAAO;AACf,SAAO,YAAY,OAAO,2BAA2B,qBAAqB"}

package/dist/astro/routes/api/taxonomies/_name_/terms/_slug_/translations.mjs

@@ -1,27 +1,33 @@
-import "../../../../../../../dialect-helpers-CtYdsX4W.mjs";
-import "../../../../../../../config-CGVeT8Hc.mjs";
+import "../../../../../../../dialect-helpers-7_IqPdh9.mjs";
+import "../../../../../../../config-CvmjJcVw.mjs";
 import "../../../../../../../after-PcEvMY_6.mjs";
 import "../../../../../../../base64-DvnNgP7e.mjs";
-import "../../../../../../../object-cache-DlSVbn5Y.mjs";
+import "../../../../../../../object-cache-CqWNY5uP.mjs";
 import "../../../../../../../slugify-T5GHH42D.mjs";
 import "../../../../../../../types-BkUg2yHx.mjs";
-import "../../../../../../../taxonomy-Dj1vpw5E.mjs";
-import "../../../../../../../resolve-BJIS8wKr.mjs";
-import "../../../../../../../request-cache-DaMhSQdx.mjs";
-import { r as taxonomyTag } from "../../../../../../../chrome-tags-D7LGB91U.mjs";
-import "../../../../../../../loader-t4TxaFiQ.mjs";
-import "../../../../../../../collection-slugs-cache-D9auiKmI.mjs";
-import "../../../../../../../taxonomies-BpqpXJUE.mjs";
-import { f as handleTermTranslations, l as handleTermGet, s as handleTermCreate } from "../../../../../../../taxonomies-ClCo4IGO.mjs";
-import { a as unwrapResult, i as requireDb, r as handleError, t as apiError } from "../../../../../../../error-CCTCskie.mjs";
-import { i as parseQuery, n as parseBody, t as isParseError } from "../../../../../../../parse-Cr379Av9.mjs";
-import { b as localeFilterQuery } from "../../../../../../../redirects-BCiTaIQ-.mjs";
-import "../../../../../../../entry-lock-D3C99MXS.mjs";
-import "../../../../../../../comments-BVzzt6x5.mjs";
-import "../../../../../../../relations-B4w-G5U9.mjs";
-import "../../../../../../../status-DLoBmcDz.mjs";
+import "../../../../../../../taxonomy-C3Fu1YeH.mjs";
+import "../../../../../../../resolve-2WbQsCvT.mjs";
+import "../../../../../../../request-cache-DzLYKm_x.mjs";
+import { r as taxonomyTag } from "../../../../../../../chrome-tags-DApCQSIk.mjs";
+import "../../../../../../../loader-BzqeR1ZN.mjs";
+import "../../../../../../../collection-slugs-cache-CjGk__zp.mjs";
+import "../../../../../../../taxonomies-C1IwNe8Q.mjs";
+import "../../../../../../../errors-DgE1zJGG.mjs";
+import "../../../../../../../settings-DYidIB26.mjs";
+import "../../../../../../../site-settings-DOgRUoFX.mjs";
+import "../../../../../../../errors-BF0_LFhW.mjs";
+import { f as handleTermTranslations, l as handleTermGet, s as handleTermCreate } from "../../../../../../../taxonomies-C_XMoRcX.mjs";
+import { a as unwrapResult, i as requireDb, r as handleError, t as apiError } from "../../../../../../../error-CfvOHP0M.mjs";
+import { i as parseQuery, n as parseBody, t as isParseError } from "../../../../../../../parse-DY6OD1j_.mjs";
+import { b as localeFilterQuery } from "../../../../../../../redirects-Cv9apQKj.mjs";
+import "../../../../../../../entry-lock-BJYdBfXb.mjs";
+import "../../../../../../../media-Pu1L6xir.mjs";
+import "../../../../../../../comments-fHZ8ON9O.mjs";
+import "../../../../../../../relations-CK9CYUyr.mjs";
+import "../../../../../../../menus-BM7BPLOb.mjs";
+import "../../../../../../../status-DZKIG4a9.mjs";
 import "../../../../../../../api/schemas/index.mjs";
-import { r as requirePerm } from "../../../../../../../authorize-BXpfMpp0.mjs";
+import { i as requirePerm } from "../../../../../../../authorize-seCifOMJ.mjs";
 import { z } from "zod";
 
 //#region src/astro/routes/api/taxonomies/[name]/terms/[slug]/translations.ts

package/dist/astro/routes/api/taxonomies/_name_/terms/_slug_/translations.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"translations.mjs","names":[],"sources":["../../../../../../../../src/astro/routes/api/taxonomies/[name]/terms/[slug]/translations.ts"],"sourcesContent":["/**\n * Term translation endpoints\n *\n * GET  /_emdash/api/taxonomies/:name/terms/:slug/translations[?locale=xx]\n * POST /_emdash/api/taxonomies/:name/terms/:slug/translations\n *    body: { locale, label?, slug? }\n */\n\nimport type { APIRoute } from \"astro\";\nimport { z } from \"zod\";\n\nimport { requirePerm } from \"#api/authorize.js\";\nimport { apiError, handleError, requireDb, unwrapResult } from \"#api/error.js\";\nimport {\n\thandleTermCreate,\n\thandleTermGet,\n\thandleTermTranslations,\n} from \"#api/handlers/taxonomies.js\";\nimport { isParseError, parseBody, parseQuery } from \"#api/parse.js\";\nimport { localeFilterQuery } from \"#api/schemas.js\";\nimport { taxonomyTag } from \"#cache/chrome-tags.js\";\n\nexport const prerender = false;\n\nconst createTermTranslationBody = z\n\t.object({\n\t\tlocale: z.string().min(1),\n\t\tlabel: z.string().min(1).optional(),\n\t\tslug: z.string().min(1).optional(),\n\t})\n\t.meta({ id: \"CreateTermTranslationBody\" });\n\nexport const GET: APIRoute = async ({ params, request, locals }) => {\n\tconst { emdash, user } = locals;\n\tconst { name, slug } = params;\n\tif (!name || !slug) return apiError(\"VALIDATION_ERROR\", \"Taxonomy name and slug required\", 400);\n\n\tconst dbErr = requireDb(emdash?.db);\n\tif (dbErr) return dbErr;\n\n\tconst denied = requirePerm(user, \"taxonomies:read\");\n\tif (denied) return denied;\n\n\tconst query = parseQuery(new URL(request.url), localeFilterQuery);\n\tif (isParseError(query)) return query;\n\n\ttry {\n\t\tconst anchor = await handleTermGet(emdash.db, name, slug, { locale: query.locale });\n\t\tif (!anchor.success) return unwrapResult(anchor);\n\t\tconst result = await handleTermTranslations(emdash.db, anchor.data.term.id);\n\t\treturn unwrapResult(result);\n\t} catch (error) {\n\t\treturn handleError(error, \"Failed to list term translations\", \"TERM_TRANSLATIONS_ERROR\");\n\t}\n};\n\nexport const POST: APIRoute = async ({ params, request, locals, cache }) => {\n\tconst { emdash, user } = locals;\n\tconst { name, slug } = params;\n\tif (!name || !slug) return apiError(\"VALIDATION_ERROR\", \"Taxonomy name and slug required\", 400);\n\n\tconst dbErr = requireDb(emdash?.db);\n\tif (dbErr) return dbErr;\n\n\tconst denied = requirePerm(user, \"taxonomies:manage\");\n\tif (denied) return denied;\n\n\tconst query = parseQuery(new URL(request.url), localeFilterQuery);\n\tif (isParseError(query)) return query;\n\n\ttry {\n\t\tconst body = await parseBody(request, createTermTranslationBody);\n\t\tif (isParseError(body)) return body;\n\n\t\tconst source = await handleTermGet(emdash.db, name, slug, { locale: query.locale });\n\t\tif (!source.success) return unwrapResult(source);\n\n\t\tconst result = await handleTermCreate(emdash.db, name, {\n\t\t\tslug: body.slug ?? source.data.term.slug,\n\t\t\tlabel: body.label ?? source.data.term.label,\n\t\t\tparentId: source.data.term.parentId,\n\t\t\tdescription: source.data.term.description,\n\t\t\tlocale: body.locale,\n\t\t\ttranslationOf: source.data.term.id,\n\t\t});\n\t\tif (!result.success) return unwrapResult(result, 201);\n\t\tif (cache?.enabled) await cache.invalidate({ tags: [taxonomyTag(name)] });\n\t\treturn unwrapResult(result, 201);\n\t} catch (error) {\n\t\treturn handleError(error, \"Failed to create term translation\", \"TERM_TRANSLATION_CREATE_ERROR\");\n\t}\n};\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;AAsBA,MAAa,YAAY;AAEzB,MAAM,4BAA4B,EAChC,OAAO;CACP,QAAQ,EAAE,QAAQ,CAAC,IAAI,EAAE;CACzB,OAAO,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC,UAAU;CACnC,MAAM,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC,UAAU;CAClC,CAAC,CACD,KAAK,EAAE,IAAI,6BAA6B,CAAC;AAE3C,MAAa,MAAgB,OAAO,EAAE,QAAQ,SAAS,aAAa;CACnE,MAAM,EAAE,QAAQ,SAAS;CACzB,MAAM,EAAE,MAAM,SAAS;AACvB,KAAI,CAAC,QAAQ,CAAC,KAAM,QAAO,SAAS,oBAAoB,mCAAmC,IAAI;CAE/F,MAAM,QAAQ,UAAU,QAAQ,GAAG;AACnC,KAAI,MAAO,QAAO;CAElB,MAAM,SAAS,YAAY,MAAM,kBAAkB;AACnD,KAAI,OAAQ,QAAO;CAEnB,MAAM,QAAQ,WAAW,IAAI,IAAI,QAAQ,IAAI,EAAE,kBAAkB;AACjE,KAAI,aAAa,MAAM,CAAE,QAAO;AAEhC,KAAI;EACH,MAAM,SAAS,MAAM,cAAc,OAAO,IAAI,MAAM,MAAM,EAAE,QAAQ,MAAM,QAAQ,CAAC;AACnF,MAAI,CAAC,OAAO,QAAS,QAAO,aAAa,OAAO;AAEhD,SAAO,aADQ,MAAM,uBAAuB,OAAO,IAAI,OAAO,KAAK,KAAK,GAAG,CAChD;UACnB,OAAO;AACf,SAAO,YAAY,OAAO,oCAAoC,0BAA0B;;;AAI1F,MAAa,OAAiB,OAAO,EAAE,QAAQ,SAAS,QAAQ,YAAY;CAC3E,MAAM,EAAE,QAAQ,SAAS;CACzB,MAAM,EAAE,MAAM,SAAS;AACvB,KAAI,CAAC,QAAQ,CAAC,KAAM,QAAO,SAAS,oBAAoB,mCAAmC,IAAI;CAE/F,MAAM,QAAQ,UAAU,QAAQ,GAAG;AACnC,KAAI,MAAO,QAAO;CAElB,MAAM,SAAS,YAAY,MAAM,oBAAoB;AACrD,KAAI,OAAQ,QAAO;CAEnB,MAAM,QAAQ,WAAW,IAAI,IAAI,QAAQ,IAAI,EAAE,kBAAkB;AACjE,KAAI,aAAa,MAAM,CAAE,QAAO;AAEhC,KAAI;EACH,MAAM,OAAO,MAAM,UAAU,SAAS,0BAA0B;AAChE,MAAI,aAAa,KAAK,CAAE,QAAO;EAE/B,MAAM,SAAS,MAAM,cAAc,OAAO,IAAI,MAAM,MAAM,EAAE,QAAQ,MAAM,QAAQ,CAAC;AACnF,MAAI,CAAC,OAAO,QAAS,QAAO,aAAa,OAAO;EAEhD,MAAM,SAAS,MAAM,iBAAiB,OAAO,IAAI,MAAM;GACtD,MAAM,KAAK,QAAQ,OAAO,KAAK,KAAK;GACpC,OAAO,KAAK,SAAS,OAAO,KAAK,KAAK;GACtC,UAAU,OAAO,KAAK,KAAK;GAC3B,aAAa,OAAO,KAAK,KAAK;GAC9B,QAAQ,KAAK;GACb,eAAe,OAAO,KAAK,KAAK;GAChC,CAAC;AACF,MAAI,CAAC,OAAO,QAAS,QAAO,aAAa,QAAQ,IAAI;AACrD,MAAI,OAAO,QAAS,OAAM,MAAM,WAAW,EAAE,MAAM,CAAC,YAAY,KAAK,CAAC,EAAE,CAAC;AACzE,SAAO,aAAa,QAAQ,IAAI;UACxB,OAAO;AACf,SAAO,YAAY,OAAO,qCAAqC,gCAAgC"}
+{"version":3,"file":"translations.mjs","names":[],"sources":["../../../../../../../../src/astro/routes/api/taxonomies/[name]/terms/[slug]/translations.ts"],"sourcesContent":["/**\n * Term translation endpoints\n *\n * GET  /_emdash/api/taxonomies/:name/terms/:slug/translations[?locale=xx]\n * POST /_emdash/api/taxonomies/:name/terms/:slug/translations\n *    body: { locale, label?, slug? }\n */\n\nimport type { APIRoute } from \"astro\";\nimport { z } from \"zod\";\n\nimport { requirePerm } from \"#api/authorize.js\";\nimport { apiError, handleError, requireDb, unwrapResult } from \"#api/error.js\";\nimport {\n\thandleTermCreate,\n\thandleTermGet,\n\thandleTermTranslations,\n} from \"#api/handlers/taxonomies.js\";\nimport { isParseError, parseBody, parseQuery } from \"#api/parse.js\";\nimport { localeFilterQuery } from \"#api/schemas.js\";\nimport { taxonomyTag } from \"#cache/chrome-tags.js\";\n\nexport const prerender = false;\n\nconst createTermTranslationBody = z\n\t.object({\n\t\tlocale: z.string().min(1),\n\t\tlabel: z.string().min(1).optional(),\n\t\tslug: z.string().min(1).optional(),\n\t})\n\t.meta({ id: \"CreateTermTranslationBody\" });\n\nexport const GET: APIRoute = async ({ params, request, locals }) => {\n\tconst { emdash, user } = locals;\n\tconst { name, slug } = params;\n\tif (!name || !slug) return apiError(\"VALIDATION_ERROR\", \"Taxonomy name and slug required\", 400);\n\n\tconst dbErr = requireDb(emdash?.db);\n\tif (dbErr) return dbErr;\n\n\tconst denied = requirePerm(user, \"taxonomies:read\");\n\tif (denied) return denied;\n\n\tconst query = parseQuery(new URL(request.url), localeFilterQuery);\n\tif (isParseError(query)) return query;\n\n\ttry {\n\t\tconst anchor = await handleTermGet(emdash.db, name, slug, { locale: query.locale });\n\t\tif (!anchor.success) return unwrapResult(anchor);\n\t\tconst result = await handleTermTranslations(emdash.db, anchor.data.term.id);\n\t\treturn unwrapResult(result);\n\t} catch (error) {\n\t\treturn handleError(error, \"Failed to list term translations\", \"TERM_TRANSLATIONS_ERROR\");\n\t}\n};\n\nexport const POST: APIRoute = async ({ params, request, locals, cache }) => {\n\tconst { emdash, user } = locals;\n\tconst { name, slug } = params;\n\tif (!name || !slug) return apiError(\"VALIDATION_ERROR\", \"Taxonomy name and slug required\", 400);\n\n\tconst dbErr = requireDb(emdash?.db);\n\tif (dbErr) return dbErr;\n\n\tconst denied = requirePerm(user, \"taxonomies:manage\");\n\tif (denied) return denied;\n\n\tconst query = parseQuery(new URL(request.url), localeFilterQuery);\n\tif (isParseError(query)) return query;\n\n\ttry {\n\t\tconst body = await parseBody(request, createTermTranslationBody);\n\t\tif (isParseError(body)) return body;\n\n\t\tconst source = await handleTermGet(emdash.db, name, slug, { locale: query.locale });\n\t\tif (!source.success) return unwrapResult(source);\n\n\t\tconst result = await handleTermCreate(emdash.db, name, {\n\t\t\tslug: body.slug ?? source.data.term.slug,\n\t\t\tlabel: body.label ?? source.data.term.label,\n\t\t\tparentId: source.data.term.parentId,\n\t\t\tdescription: source.data.term.description,\n\t\t\tlocale: body.locale,\n\t\t\ttranslationOf: source.data.term.id,\n\t\t});\n\t\tif (!result.success) return unwrapResult(result, 201);\n\t\tif (cache?.enabled) await cache.invalidate({ tags: [taxonomyTag(name)] });\n\t\treturn unwrapResult(result, 201);\n\t} catch (error) {\n\t\treturn handleError(error, \"Failed to create term translation\", \"TERM_TRANSLATION_CREATE_ERROR\");\n\t}\n};\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAsBA,MAAa,YAAY;AAEzB,MAAM,4BAA4B,EAChC,OAAO;CACP,QAAQ,EAAE,QAAQ,CAAC,IAAI,EAAE;CACzB,OAAO,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC,UAAU;CACnC,MAAM,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC,UAAU;CAClC,CAAC,CACD,KAAK,EAAE,IAAI,6BAA6B,CAAC;AAE3C,MAAa,MAAgB,OAAO,EAAE,QAAQ,SAAS,aAAa;CACnE,MAAM,EAAE,QAAQ,SAAS;CACzB,MAAM,EAAE,MAAM,SAAS;AACvB,KAAI,CAAC,QAAQ,CAAC,KAAM,QAAO,SAAS,oBAAoB,mCAAmC,IAAI;CAE/F,MAAM,QAAQ,UAAU,QAAQ,GAAG;AACnC,KAAI,MAAO,QAAO;CAElB,MAAM,SAAS,YAAY,MAAM,kBAAkB;AACnD,KAAI,OAAQ,QAAO;CAEnB,MAAM,QAAQ,WAAW,IAAI,IAAI,QAAQ,IAAI,EAAE,kBAAkB;AACjE,KAAI,aAAa,MAAM,CAAE,QAAO;AAEhC,KAAI;EACH,MAAM,SAAS,MAAM,cAAc,OAAO,IAAI,MAAM,MAAM,EAAE,QAAQ,MAAM,QAAQ,CAAC;AACnF,MAAI,CAAC,OAAO,QAAS,QAAO,aAAa,OAAO;AAEhD,SAAO,aADQ,MAAM,uBAAuB,OAAO,IAAI,OAAO,KAAK,KAAK,GAAG,CAChD;UACnB,OAAO;AACf,SAAO,YAAY,OAAO,oCAAoC,0BAA0B;;;AAI1F,MAAa,OAAiB,OAAO,EAAE,QAAQ,SAAS,QAAQ,YAAY;CAC3E,MAAM,EAAE,QAAQ,SAAS;CACzB,MAAM,EAAE,MAAM,SAAS;AACvB,KAAI,CAAC,QAAQ,CAAC,KAAM,QAAO,SAAS,oBAAoB,mCAAmC,IAAI;CAE/F,MAAM,QAAQ,UAAU,QAAQ,GAAG;AACnC,KAAI,MAAO,QAAO;CAElB,MAAM,SAAS,YAAY,MAAM,oBAAoB;AACrD,KAAI,OAAQ,QAAO;CAEnB,MAAM,QAAQ,WAAW,IAAI,IAAI,QAAQ,IAAI,EAAE,kBAAkB;AACjE,KAAI,aAAa,MAAM,CAAE,QAAO;AAEhC,KAAI;EACH,MAAM,OAAO,MAAM,UAAU,SAAS,0BAA0B;AAChE,MAAI,aAAa,KAAK,CAAE,QAAO;EAE/B,MAAM,SAAS,MAAM,cAAc,OAAO,IAAI,MAAM,MAAM,EAAE,QAAQ,MAAM,QAAQ,CAAC;AACnF,MAAI,CAAC,OAAO,QAAS,QAAO,aAAa,OAAO;EAEhD,MAAM,SAAS,MAAM,iBAAiB,OAAO,IAAI,MAAM;GACtD,MAAM,KAAK,QAAQ,OAAO,KAAK,KAAK;GACpC,OAAO,KAAK,SAAS,OAAO,KAAK,KAAK;GACtC,UAAU,OAAO,KAAK,KAAK;GAC3B,aAAa,OAAO,KAAK,KAAK;GAC9B,QAAQ,KAAK;GACb,eAAe,OAAO,KAAK,KAAK;GAChC,CAAC;AACF,MAAI,CAAC,OAAO,QAAS,QAAO,aAAa,QAAQ,IAAI;AACrD,MAAI,OAAO,QAAS,OAAM,MAAM,WAAW,EAAE,MAAM,CAAC,YAAY,KAAK,CAAC,EAAE,CAAC;AACzE,SAAO,aAAa,QAAQ,IAAI;UACxB,OAAO;AACf,SAAO,YAAY,OAAO,qCAAqC,gCAAgC"}

package/dist/astro/routes/api/taxonomies/_name_/terms/_slug_.mjs

@@ -1,27 +1,33 @@
-import "../../../../../../dialect-helpers-CtYdsX4W.mjs";
-import "../../../../../../config-CGVeT8Hc.mjs";
+import "../../../../../../dialect-helpers-7_IqPdh9.mjs";
+import "../../../../../../config-CvmjJcVw.mjs";
 import "../../../../../../after-PcEvMY_6.mjs";
 import "../../../../../../base64-DvnNgP7e.mjs";
-import "../../../../../../object-cache-DlSVbn5Y.mjs";
+import "../../../../../../object-cache-CqWNY5uP.mjs";
 import "../../../../../../slugify-T5GHH42D.mjs";
 import "../../../../../../types-BkUg2yHx.mjs";
-import "../../../../../../taxonomy-Dj1vpw5E.mjs";
-import "../../../../../../resolve-BJIS8wKr.mjs";
-import "../../../../../../request-cache-DaMhSQdx.mjs";
-import { r as taxonomyTag } from "../../../../../../chrome-tags-D7LGB91U.mjs";
-import "../../../../../../loader-t4TxaFiQ.mjs";
-import "../../../../../../collection-slugs-cache-D9auiKmI.mjs";
-import "../../../../../../taxonomies-BpqpXJUE.mjs";
-import { c as handleTermDelete, l as handleTermGet, p as handleTermUpdate } from "../../../../../../taxonomies-ClCo4IGO.mjs";
-import { a as unwrapResult, i as requireDb, r as handleError, t as apiError } from "../../../../../../error-CCTCskie.mjs";
-import { i as parseQuery, n as parseBody, t as isParseError } from "../../../../../../parse-Cr379Av9.mjs";
-import { b as localeFilterQuery } from "../../../../../../redirects-BCiTaIQ-.mjs";
-import { Z as updateTermBody } from "../../../../../../entry-lock-D3C99MXS.mjs";
-import "../../../../../../comments-BVzzt6x5.mjs";
-import "../../../../../../relations-B4w-G5U9.mjs";
-import "../../../../../../status-DLoBmcDz.mjs";
+import "../../../../../../taxonomy-C3Fu1YeH.mjs";
+import "../../../../../../resolve-2WbQsCvT.mjs";
+import "../../../../../../request-cache-DzLYKm_x.mjs";
+import { r as taxonomyTag } from "../../../../../../chrome-tags-DApCQSIk.mjs";
+import "../../../../../../loader-BzqeR1ZN.mjs";
+import "../../../../../../collection-slugs-cache-CjGk__zp.mjs";
+import "../../../../../../taxonomies-C1IwNe8Q.mjs";
+import "../../../../../../errors-DgE1zJGG.mjs";
+import "../../../../../../settings-DYidIB26.mjs";
+import "../../../../../../site-settings-DOgRUoFX.mjs";
+import "../../../../../../errors-BF0_LFhW.mjs";
+import { c as handleTermDelete, l as handleTermGet, p as handleTermUpdate } from "../../../../../../taxonomies-C_XMoRcX.mjs";
+import { a as unwrapResult, i as requireDb, r as handleError, t as apiError } from "../../../../../../error-CfvOHP0M.mjs";
+import { i as parseQuery, n as parseBody, t as isParseError } from "../../../../../../parse-DY6OD1j_.mjs";
+import { b as localeFilterQuery } from "../../../../../../redirects-Cv9apQKj.mjs";
+import { Q as updateTermBody } from "../../../../../../entry-lock-BJYdBfXb.mjs";
+import "../../../../../../media-Pu1L6xir.mjs";
+import "../../../../../../comments-fHZ8ON9O.mjs";
+import "../../../../../../relations-CK9CYUyr.mjs";
+import "../../../../../../menus-BM7BPLOb.mjs";
+import "../../../../../../status-DZKIG4a9.mjs";
 import "../../../../../../api/schemas/index.mjs";
-import { r as requirePerm } from "../../../../../../authorize-BXpfMpp0.mjs";
+import { i as requirePerm } from "../../../../../../authorize-seCifOMJ.mjs";
 
 //#region src/astro/routes/api/taxonomies/[name]/terms/[slug].ts
 const prerender = false;

package/dist/astro/routes/api/taxonomies/_name_/terms/_slug_.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"_slug_.mjs","names":[],"sources":["../../../../../../../src/astro/routes/api/taxonomies/[name]/terms/[slug].ts"],"sourcesContent":["/**\n * Single term endpoint\n *\n * GET    /_emdash/api/taxonomies/:name/terms/:slug[?locale=xx]\n * PUT    /_emdash/api/taxonomies/:name/terms/:slug[?locale=xx]\n * DELETE /_emdash/api/taxonomies/:name/terms/:slug[?locale=xx]\n */\n\nimport type { APIRoute } from \"astro\";\n\nimport { requirePerm } from \"#api/authorize.js\";\nimport { apiError, handleError, requireDb, unwrapResult } from \"#api/error.js\";\nimport { handleTermDelete, handleTermGet, handleTermUpdate } from \"#api/handlers/taxonomies.js\";\nimport { isParseError, parseBody, parseQuery } from \"#api/parse.js\";\nimport { localeFilterQuery, updateTermBody } from \"#api/schemas.js\";\nimport { taxonomyTag } from \"#cache/chrome-tags.js\";\n\nexport const prerender = false;\n\n/**\n * Get a single term\n */\nexport const GET: APIRoute = async ({ params, request, locals }) => {\n\tconst { emdash, user } = locals;\n\tconst { name, slug } = params;\n\tif (!name || !slug) return apiError(\"VALIDATION_ERROR\", \"Taxonomy name and slug required\", 400);\n\n\tconst dbErr = requireDb(emdash?.db);\n\tif (dbErr) return dbErr;\n\n\tconst denied = requirePerm(user, \"taxonomies:read\");\n\tif (denied) return denied;\n\n\tconst query = parseQuery(new URL(request.url), localeFilterQuery);\n\tif (isParseError(query)) return query;\n\n\ttry {\n\t\tconst result = await handleTermGet(emdash.db, name, slug, { locale: query.locale });\n\t\treturn unwrapResult(result);\n\t} catch (error) {\n\t\treturn handleError(error, \"Failed to get term\", \"TERM_GET_ERROR\");\n\t}\n};\n\n/**\n * Update a term\n */\nexport const PUT: APIRoute = async ({ params, request, locals, cache }) => {\n\tconst { emdash, user } = locals;\n\tconst { name, slug } = params;\n\tif (!name || !slug) return apiError(\"VALIDATION_ERROR\", \"Taxonomy name and slug required\", 400);\n\n\tconst dbErr = requireDb(emdash?.db);\n\tif (dbErr) return dbErr;\n\n\tconst denied = requirePerm(user, \"taxonomies:manage\");\n\tif (denied) return denied;\n\n\tconst query = parseQuery(new URL(request.url), localeFilterQuery);\n\tif (isParseError(query)) return query;\n\n\ttry {\n\t\tconst body = await parseBody(request, updateTermBody);\n\t\tif (isParseError(body)) return body;\n\n\t\tconst result = await handleTermUpdate(emdash.db, name, slug, body, { locale: query.locale });\n\t\tif (!result.success) return unwrapResult(result);\n\t\tif (cache?.enabled) await cache.invalidate({ tags: [taxonomyTag(name)] });\n\t\treturn unwrapResult(result);\n\t} catch (error) {\n\t\treturn handleError(error, \"Failed to update term\", \"TERM_UPDATE_ERROR\");\n\t}\n};\n\n/**\n * Delete a term\n */\nexport const DELETE: APIRoute = async ({ params, request, locals, cache }) => {\n\tconst { emdash, user } = locals;\n\tconst { name, slug } = params;\n\tif (!name || !slug) return apiError(\"VALIDATION_ERROR\", \"Taxonomy name and slug required\", 400);\n\n\tconst dbErr = requireDb(emdash?.db);\n\tif (dbErr) return dbErr;\n\n\tconst denied = requirePerm(user, \"taxonomies:manage\");\n\tif (denied) return denied;\n\n\tconst query = parseQuery(new URL(request.url), localeFilterQuery);\n\tif (isParseError(query)) return query;\n\n\ttry {\n\t\tconst result = await handleTermDelete(emdash.db, name, slug, { locale: query.locale });\n\t\tif (!result.success) return unwrapResult(result);\n\t\tif (cache?.enabled) await cache.invalidate({ tags: [taxonomyTag(name)] });\n\t\treturn unwrapResult(result);\n\t} catch (error) {\n\t\treturn handleError(error, \"Failed to delete term\", \"TERM_DELETE_ERROR\");\n\t}\n};\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;AAiBA,MAAa,YAAY;;;;AAKzB,MAAa,MAAgB,OAAO,EAAE,QAAQ,SAAS,aAAa;CACnE,MAAM,EAAE,QAAQ,SAAS;CACzB,MAAM,EAAE,MAAM,SAAS;AACvB,KAAI,CAAC,QAAQ,CAAC,KAAM,QAAO,SAAS,oBAAoB,mCAAmC,IAAI;CAE/F,MAAM,QAAQ,UAAU,QAAQ,GAAG;AACnC,KAAI,MAAO,QAAO;CAElB,MAAM,SAAS,YAAY,MAAM,kBAAkB;AACnD,KAAI,OAAQ,QAAO;CAEnB,MAAM,QAAQ,WAAW,IAAI,IAAI,QAAQ,IAAI,EAAE,kBAAkB;AACjE,KAAI,aAAa,MAAM,CAAE,QAAO;AAEhC,KAAI;AAEH,SAAO,aADQ,MAAM,cAAc,OAAO,IAAI,MAAM,MAAM,EAAE,QAAQ,MAAM,QAAQ,CAAC,CACxD;UACnB,OAAO;AACf,SAAO,YAAY,OAAO,sBAAsB,iBAAiB;;;;;;AAOnE,MAAa,MAAgB,OAAO,EAAE,QAAQ,SAAS,QAAQ,YAAY;CAC1E,MAAM,EAAE,QAAQ,SAAS;CACzB,MAAM,EAAE,MAAM,SAAS;AACvB,KAAI,CAAC,QAAQ,CAAC,KAAM,QAAO,SAAS,oBAAoB,mCAAmC,IAAI;CAE/F,MAAM,QAAQ,UAAU,QAAQ,GAAG;AACnC,KAAI,MAAO,QAAO;CAElB,MAAM,SAAS,YAAY,MAAM,oBAAoB;AACrD,KAAI,OAAQ,QAAO;CAEnB,MAAM,QAAQ,WAAW,IAAI,IAAI,QAAQ,IAAI,EAAE,kBAAkB;AACjE,KAAI,aAAa,MAAM,CAAE,QAAO;AAEhC,KAAI;EACH,MAAM,OAAO,MAAM,UAAU,SAAS,eAAe;AACrD,MAAI,aAAa,KAAK,CAAE,QAAO;EAE/B,MAAM,SAAS,MAAM,iBAAiB,OAAO,IAAI,MAAM,MAAM,MAAM,EAAE,QAAQ,MAAM,QAAQ,CAAC;AAC5F,MAAI,CAAC,OAAO,QAAS,QAAO,aAAa,OAAO;AAChD,MAAI,OAAO,QAAS,OAAM,MAAM,WAAW,EAAE,MAAM,CAAC,YAAY,KAAK,CAAC,EAAE,CAAC;AACzE,SAAO,aAAa,OAAO;UACnB,OAAO;AACf,SAAO,YAAY,OAAO,yBAAyB,oBAAoB;;;;;;AAOzE,MAAa,SAAmB,OAAO,EAAE,QAAQ,SAAS,QAAQ,YAAY;CAC7E,MAAM,EAAE,QAAQ,SAAS;CACzB,MAAM,EAAE,MAAM,SAAS;AACvB,KAAI,CAAC,QAAQ,CAAC,KAAM,QAAO,SAAS,oBAAoB,mCAAmC,IAAI;CAE/F,MAAM,QAAQ,UAAU,QAAQ,GAAG;AACnC,KAAI,MAAO,QAAO;CAElB,MAAM,SAAS,YAAY,MAAM,oBAAoB;AACrD,KAAI,OAAQ,QAAO;CAEnB,MAAM,QAAQ,WAAW,IAAI,IAAI,QAAQ,IAAI,EAAE,kBAAkB;AACjE,KAAI,aAAa,MAAM,CAAE,QAAO;AAEhC,KAAI;EACH,MAAM,SAAS,MAAM,iBAAiB,OAAO,IAAI,MAAM,MAAM,EAAE,QAAQ,MAAM,QAAQ,CAAC;AACtF,MAAI,CAAC,OAAO,QAAS,QAAO,aAAa,OAAO;AAChD,MAAI,OAAO,QAAS,OAAM,MAAM,WAAW,EAAE,MAAM,CAAC,YAAY,KAAK,CAAC,EAAE,CAAC;AACzE,SAAO,aAAa,OAAO;UACnB,OAAO;AACf,SAAO,YAAY,OAAO,yBAAyB,oBAAoB"}
+{"version":3,"file":"_slug_.mjs","names":[],"sources":["../../../../../../../src/astro/routes/api/taxonomies/[name]/terms/[slug].ts"],"sourcesContent":["/**\n * Single term endpoint\n *\n * GET    /_emdash/api/taxonomies/:name/terms/:slug[?locale=xx]\n * PUT    /_emdash/api/taxonomies/:name/terms/:slug[?locale=xx]\n * DELETE /_emdash/api/taxonomies/:name/terms/:slug[?locale=xx]\n */\n\nimport type { APIRoute } from \"astro\";\n\nimport { requirePerm } from \"#api/authorize.js\";\nimport { apiError, handleError, requireDb, unwrapResult } from \"#api/error.js\";\nimport { handleTermDelete, handleTermGet, handleTermUpdate } from \"#api/handlers/taxonomies.js\";\nimport { isParseError, parseBody, parseQuery } from \"#api/parse.js\";\nimport { localeFilterQuery, updateTermBody } from \"#api/schemas.js\";\nimport { taxonomyTag } from \"#cache/chrome-tags.js\";\n\nexport const prerender = false;\n\n/**\n * Get a single term\n */\nexport const GET: APIRoute = async ({ params, request, locals }) => {\n\tconst { emdash, user } = locals;\n\tconst { name, slug } = params;\n\tif (!name || !slug) return apiError(\"VALIDATION_ERROR\", \"Taxonomy name and slug required\", 400);\n\n\tconst dbErr = requireDb(emdash?.db);\n\tif (dbErr) return dbErr;\n\n\tconst denied = requirePerm(user, \"taxonomies:read\");\n\tif (denied) return denied;\n\n\tconst query = parseQuery(new URL(request.url), localeFilterQuery);\n\tif (isParseError(query)) return query;\n\n\ttry {\n\t\tconst result = await handleTermGet(emdash.db, name, slug, { locale: query.locale });\n\t\treturn unwrapResult(result);\n\t} catch (error) {\n\t\treturn handleError(error, \"Failed to get term\", \"TERM_GET_ERROR\");\n\t}\n};\n\n/**\n * Update a term\n */\nexport const PUT: APIRoute = async ({ params, request, locals, cache }) => {\n\tconst { emdash, user } = locals;\n\tconst { name, slug } = params;\n\tif (!name || !slug) return apiError(\"VALIDATION_ERROR\", \"Taxonomy name and slug required\", 400);\n\n\tconst dbErr = requireDb(emdash?.db);\n\tif (dbErr) return dbErr;\n\n\tconst denied = requirePerm(user, \"taxonomies:manage\");\n\tif (denied) return denied;\n\n\tconst query = parseQuery(new URL(request.url), localeFilterQuery);\n\tif (isParseError(query)) return query;\n\n\ttry {\n\t\tconst body = await parseBody(request, updateTermBody);\n\t\tif (isParseError(body)) return body;\n\n\t\tconst result = await handleTermUpdate(emdash.db, name, slug, body, { locale: query.locale });\n\t\tif (!result.success) return unwrapResult(result);\n\t\tif (cache?.enabled) await cache.invalidate({ tags: [taxonomyTag(name)] });\n\t\treturn unwrapResult(result);\n\t} catch (error) {\n\t\treturn handleError(error, \"Failed to update term\", \"TERM_UPDATE_ERROR\");\n\t}\n};\n\n/**\n * Delete a term\n */\nexport const DELETE: APIRoute = async ({ params, request, locals, cache }) => {\n\tconst { emdash, user } = locals;\n\tconst { name, slug } = params;\n\tif (!name || !slug) return apiError(\"VALIDATION_ERROR\", \"Taxonomy name and slug required\", 400);\n\n\tconst dbErr = requireDb(emdash?.db);\n\tif (dbErr) return dbErr;\n\n\tconst denied = requirePerm(user, \"taxonomies:manage\");\n\tif (denied) return denied;\n\n\tconst query = parseQuery(new URL(request.url), localeFilterQuery);\n\tif (isParseError(query)) return query;\n\n\ttry {\n\t\tconst result = await handleTermDelete(emdash.db, name, slug, { locale: query.locale });\n\t\tif (!result.success) return unwrapResult(result);\n\t\tif (cache?.enabled) await cache.invalidate({ tags: [taxonomyTag(name)] });\n\t\treturn unwrapResult(result);\n\t} catch (error) {\n\t\treturn handleError(error, \"Failed to delete term\", \"TERM_DELETE_ERROR\");\n\t}\n};\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAiBA,MAAa,YAAY;;;;AAKzB,MAAa,MAAgB,OAAO,EAAE,QAAQ,SAAS,aAAa;CACnE,MAAM,EAAE,QAAQ,SAAS;CACzB,MAAM,EAAE,MAAM,SAAS;AACvB,KAAI,CAAC,QAAQ,CAAC,KAAM,QAAO,SAAS,oBAAoB,mCAAmC,IAAI;CAE/F,MAAM,QAAQ,UAAU,QAAQ,GAAG;AACnC,KAAI,MAAO,QAAO;CAElB,MAAM,SAAS,YAAY,MAAM,kBAAkB;AACnD,KAAI,OAAQ,QAAO;CAEnB,MAAM,QAAQ,WAAW,IAAI,IAAI,QAAQ,IAAI,EAAE,kBAAkB;AACjE,KAAI,aAAa,MAAM,CAAE,QAAO;AAEhC,KAAI;AAEH,SAAO,aADQ,MAAM,cAAc,OAAO,IAAI,MAAM,MAAM,EAAE,QAAQ,MAAM,QAAQ,CAAC,CACxD;UACnB,OAAO;AACf,SAAO,YAAY,OAAO,sBAAsB,iBAAiB;;;;;;AAOnE,MAAa,MAAgB,OAAO,EAAE,QAAQ,SAAS,QAAQ,YAAY;CAC1E,MAAM,EAAE,QAAQ,SAAS;CACzB,MAAM,EAAE,MAAM,SAAS;AACvB,KAAI,CAAC,QAAQ,CAAC,KAAM,QAAO,SAAS,oBAAoB,mCAAmC,IAAI;CAE/F,MAAM,QAAQ,UAAU,QAAQ,GAAG;AACnC,KAAI,MAAO,QAAO;CAElB,MAAM,SAAS,YAAY,MAAM,oBAAoB;AACrD,KAAI,OAAQ,QAAO;CAEnB,MAAM,QAAQ,WAAW,IAAI,IAAI,QAAQ,IAAI,EAAE,kBAAkB;AACjE,KAAI,aAAa,MAAM,CAAE,QAAO;AAEhC,KAAI;EACH,MAAM,OAAO,MAAM,UAAU,SAAS,eAAe;AACrD,MAAI,aAAa,KAAK,CAAE,QAAO;EAE/B,MAAM,SAAS,MAAM,iBAAiB,OAAO,IAAI,MAAM,MAAM,MAAM,EAAE,QAAQ,MAAM,QAAQ,CAAC;AAC5F,MAAI,CAAC,OAAO,QAAS,QAAO,aAAa,OAAO;AAChD,MAAI,OAAO,QAAS,OAAM,MAAM,WAAW,EAAE,MAAM,CAAC,YAAY,KAAK,CAAC,EAAE,CAAC;AACzE,SAAO,aAAa,OAAO;UACnB,OAAO;AACf,SAAO,YAAY,OAAO,yBAAyB,oBAAoB;;;;;;AAOzE,MAAa,SAAmB,OAAO,EAAE,QAAQ,SAAS,QAAQ,YAAY;CAC7E,MAAM,EAAE,QAAQ,SAAS;CACzB,MAAM,EAAE,MAAM,SAAS;AACvB,KAAI,CAAC,QAAQ,CAAC,KAAM,QAAO,SAAS,oBAAoB,mCAAmC,IAAI;CAE/F,MAAM,QAAQ,UAAU,QAAQ,GAAG;AACnC,KAAI,MAAO,QAAO;CAElB,MAAM,SAAS,YAAY,MAAM,oBAAoB;AACrD,KAAI,OAAQ,QAAO;CAEnB,MAAM,QAAQ,WAAW,IAAI,IAAI,QAAQ,IAAI,EAAE,kBAAkB;AACjE,KAAI,aAAa,MAAM,CAAE,QAAO;AAEhC,KAAI;EACH,MAAM,SAAS,MAAM,iBAAiB,OAAO,IAAI,MAAM,MAAM,EAAE,QAAQ,MAAM,QAAQ,CAAC;AACtF,MAAI,CAAC,OAAO,QAAS,QAAO,aAAa,OAAO;AAChD,MAAI,OAAO,QAAS,OAAM,MAAM,WAAW,EAAE,MAAM,CAAC,YAAY,KAAK,CAAC,EAAE,CAAC;AACzE,SAAO,aAAa,OAAO;UACnB,OAAO;AACf,SAAO,YAAY,OAAO,yBAAyB,oBAAoB"}

package/dist/astro/routes/api/taxonomies/_name_/terms/index.mjs

@@ -1,27 +1,33 @@
-import "../../../../../../dialect-helpers-CtYdsX4W.mjs";
-import "../../../../../../config-CGVeT8Hc.mjs";
+import "../../../../../../dialect-helpers-7_IqPdh9.mjs";
+import "../../../../../../config-CvmjJcVw.mjs";
 import "../../../../../../after-PcEvMY_6.mjs";
 import "../../../../../../base64-DvnNgP7e.mjs";
-import "../../../../../../object-cache-DlSVbn5Y.mjs";
+import "../../../../../../object-cache-CqWNY5uP.mjs";
 import "../../../../../../slugify-T5GHH42D.mjs";
 import "../../../../../../types-BkUg2yHx.mjs";
-import "../../../../../../taxonomy-Dj1vpw5E.mjs";
-import "../../../../../../resolve-BJIS8wKr.mjs";
-import "../../../../../../request-cache-DaMhSQdx.mjs";
-import { r as taxonomyTag } from "../../../../../../chrome-tags-D7LGB91U.mjs";
-import "../../../../../../loader-t4TxaFiQ.mjs";
-import "../../../../../../collection-slugs-cache-D9auiKmI.mjs";
-import "../../../../../../taxonomies-BpqpXJUE.mjs";
-import { s as handleTermCreate, u as handleTermList } from "../../../../../../taxonomies-ClCo4IGO.mjs";
-import { a as unwrapResult, i as requireDb, r as handleError, t as apiError } from "../../../../../../error-CCTCskie.mjs";
-import { i as parseQuery, n as parseBody, t as isParseError } from "../../../../../../parse-Cr379Av9.mjs";
-import "../../../../../../redirects-BCiTaIQ-.mjs";
-import { I as createTermBody, U as termListQuery } from "../../../../../../entry-lock-D3C99MXS.mjs";
-import "../../../../../../comments-BVzzt6x5.mjs";
-import "../../../../../../relations-B4w-G5U9.mjs";
-import "../../../../../../status-DLoBmcDz.mjs";
+import "../../../../../../taxonomy-C3Fu1YeH.mjs";
+import "../../../../../../resolve-2WbQsCvT.mjs";
+import "../../../../../../request-cache-DzLYKm_x.mjs";
+import { r as taxonomyTag } from "../../../../../../chrome-tags-DApCQSIk.mjs";
+import "../../../../../../loader-BzqeR1ZN.mjs";
+import "../../../../../../collection-slugs-cache-CjGk__zp.mjs";
+import "../../../../../../taxonomies-C1IwNe8Q.mjs";
+import "../../../../../../errors-DgE1zJGG.mjs";
+import "../../../../../../settings-DYidIB26.mjs";
+import "../../../../../../site-settings-DOgRUoFX.mjs";
+import "../../../../../../errors-BF0_LFhW.mjs";
+import { s as handleTermCreate, u as handleTermList } from "../../../../../../taxonomies-C_XMoRcX.mjs";
+import { a as unwrapResult, i as requireDb, r as handleError, t as apiError } from "../../../../../../error-CfvOHP0M.mjs";
+import { i as parseQuery, n as parseBody, t as isParseError } from "../../../../../../parse-DY6OD1j_.mjs";
+import "../../../../../../redirects-Cv9apQKj.mjs";
+import { L as createTermBody, W as termListQuery } from "../../../../../../entry-lock-BJYdBfXb.mjs";
+import "../../../../../../media-Pu1L6xir.mjs";
+import "../../../../../../comments-fHZ8ON9O.mjs";
+import "../../../../../../relations-CK9CYUyr.mjs";
+import "../../../../../../menus-BM7BPLOb.mjs";
+import "../../../../../../status-DZKIG4a9.mjs";
 import "../../../../../../api/schemas/index.mjs";
-import { r as requirePerm } from "../../../../../../authorize-BXpfMpp0.mjs";
+import { i as requirePerm } from "../../../../../../authorize-seCifOMJ.mjs";
 
 //#region src/astro/routes/api/taxonomies/[name]/terms/index.ts
 const prerender = false;

package/dist/astro/routes/api/taxonomies/_name_/terms/index.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"index.mjs","names":[],"sources":["../../../../../../../src/astro/routes/api/taxonomies/[name]/terms/index.ts"],"sourcesContent":["/**\n * Taxonomy terms list and create endpoint\n *\n * GET  /_emdash/api/taxonomies/:name/terms[?locale=xx] - List terms (tree for hierarchical)\n * POST /_emdash/api/taxonomies/:name/terms              - Create a new term (body may include locale & translationOf)\n */\n\nimport type { APIRoute } from \"astro\";\n\nimport { requirePerm } from \"#api/authorize.js\";\nimport { apiError, handleError, requireDb, unwrapResult } from \"#api/error.js\";\nimport { handleTermCreate, handleTermList } from \"#api/handlers/taxonomies.js\";\nimport { isParseError, parseBody, parseQuery } from \"#api/parse.js\";\nimport { createTermBody, termListQuery } from \"#api/schemas.js\";\nimport { taxonomyTag } from \"#cache/chrome-tags.js\";\n\nexport const prerender = false;\n\n/**\n * List all terms for a taxonomy\n */\nexport const GET: APIRoute = async ({ params, request, locals }) => {\n\tconst { emdash, user } = locals;\n\tconst { name } = params;\n\tif (!name) return apiError(\"VALIDATION_ERROR\", \"Taxonomy name required\", 400);\n\n\tconst dbErr = requireDb(emdash?.db);\n\tif (dbErr) return dbErr;\n\n\tconst denied = requirePerm(user, \"taxonomies:read\");\n\tif (denied) return denied;\n\n\tconst query = parseQuery(new URL(request.url), termListQuery);\n\tif (isParseError(query)) return query;\n\n\ttry {\n\t\tconst result = await handleTermList(emdash.db, name, {\n\t\t\tlocale: query.locale,\n\t\t\tincludeCounts: query.includeCounts,\n\t\t\tresolveFallback: query.resolveFallback,\n\t\t});\n\t\treturn unwrapResult(result);\n\t} catch (error) {\n\t\treturn handleError(error, \"Failed to list terms\", \"TERM_LIST_ERROR\");\n\t}\n};\n\n/**\n * Create a new term\n */\nexport const POST: APIRoute = async ({ params, request, locals, cache }) => {\n\tconst { emdash, user } = locals;\n\tconst { name } = params;\n\tif (!name) return apiError(\"VALIDATION_ERROR\", \"Taxonomy name required\", 400);\n\n\tconst dbErr = requireDb(emdash?.db);\n\tif (dbErr) return dbErr;\n\n\tconst denied = requirePerm(user, \"taxonomies:manage\");\n\tif (denied) return denied;\n\n\ttry {\n\t\tconst body = await parseBody(request, createTermBody);\n\t\tif (isParseError(body)) return body;\n\n\t\tconst result = await handleTermCreate(emdash.db, name, body);\n\t\tif (!result.success) return unwrapResult(result, 201);\n\t\tif (cache?.enabled) await cache.invalidate({ tags: [taxonomyTag(name)] });\n\t\treturn unwrapResult(result, 201);\n\t} catch (error) {\n\t\treturn handleError(error, \"Failed to create term\", \"TERM_CREATE_ERROR\");\n\t}\n};\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;AAgBA,MAAa,YAAY;;;;AAKzB,MAAa,MAAgB,OAAO,EAAE,QAAQ,SAAS,aAAa;CACnE,MAAM,EAAE,QAAQ,SAAS;CACzB,MAAM,EAAE,SAAS;AACjB,KAAI,CAAC,KAAM,QAAO,SAAS,oBAAoB,0BAA0B,IAAI;CAE7E,MAAM,QAAQ,UAAU,QAAQ,GAAG;AACnC,KAAI,MAAO,QAAO;CAElB,MAAM,SAAS,YAAY,MAAM,kBAAkB;AACnD,KAAI,OAAQ,QAAO;CAEnB,MAAM,QAAQ,WAAW,IAAI,IAAI,QAAQ,IAAI,EAAE,cAAc;AAC7D,KAAI,aAAa,MAAM,CAAE,QAAO;AAEhC,KAAI;AAMH,SAAO,aALQ,MAAM,eAAe,OAAO,IAAI,MAAM;GACpD,QAAQ,MAAM;GACd,eAAe,MAAM;GACrB,iBAAiB,MAAM;GACvB,CAAC,CACyB;UACnB,OAAO;AACf,SAAO,YAAY,OAAO,wBAAwB,kBAAkB;;;;;;AAOtE,MAAa,OAAiB,OAAO,EAAE,QAAQ,SAAS,QAAQ,YAAY;CAC3E,MAAM,EAAE,QAAQ,SAAS;CACzB,MAAM,EAAE,SAAS;AACjB,KAAI,CAAC,KAAM,QAAO,SAAS,oBAAoB,0BAA0B,IAAI;CAE7E,MAAM,QAAQ,UAAU,QAAQ,GAAG;AACnC,KAAI,MAAO,QAAO;CAElB,MAAM,SAAS,YAAY,MAAM,oBAAoB;AACrD,KAAI,OAAQ,QAAO;AAEnB,KAAI;EACH,MAAM,OAAO,MAAM,UAAU,SAAS,eAAe;AACrD,MAAI,aAAa,KAAK,CAAE,QAAO;EAE/B,MAAM,SAAS,MAAM,iBAAiB,OAAO,IAAI,MAAM,KAAK;AAC5D,MAAI,CAAC,OAAO,QAAS,QAAO,aAAa,QAAQ,IAAI;AACrD,MAAI,OAAO,QAAS,OAAM,MAAM,WAAW,EAAE,MAAM,CAAC,YAAY,KAAK,CAAC,EAAE,CAAC;AACzE,SAAO,aAAa,QAAQ,IAAI;UACxB,OAAO;AACf,SAAO,YAAY,OAAO,yBAAyB,oBAAoB"}
+{"version":3,"file":"index.mjs","names":[],"sources":["../../../../../../../src/astro/routes/api/taxonomies/[name]/terms/index.ts"],"sourcesContent":["/**\n * Taxonomy terms list and create endpoint\n *\n * GET  /_emdash/api/taxonomies/:name/terms[?locale=xx] - List terms (tree for hierarchical)\n * POST /_emdash/api/taxonomies/:name/terms              - Create a new term (body may include locale & translationOf)\n */\n\nimport type { APIRoute } from \"astro\";\n\nimport { requirePerm } from \"#api/authorize.js\";\nimport { apiError, handleError, requireDb, unwrapResult } from \"#api/error.js\";\nimport { handleTermCreate, handleTermList } from \"#api/handlers/taxonomies.js\";\nimport { isParseError, parseBody, parseQuery } from \"#api/parse.js\";\nimport { createTermBody, termListQuery } from \"#api/schemas.js\";\nimport { taxonomyTag } from \"#cache/chrome-tags.js\";\n\nexport const prerender = false;\n\n/**\n * List all terms for a taxonomy\n */\nexport const GET: APIRoute = async ({ params, request, locals }) => {\n\tconst { emdash, user } = locals;\n\tconst { name } = params;\n\tif (!name) return apiError(\"VALIDATION_ERROR\", \"Taxonomy name required\", 400);\n\n\tconst dbErr = requireDb(emdash?.db);\n\tif (dbErr) return dbErr;\n\n\tconst denied = requirePerm(user, \"taxonomies:read\");\n\tif (denied) return denied;\n\n\tconst query = parseQuery(new URL(request.url), termListQuery);\n\tif (isParseError(query)) return query;\n\n\ttry {\n\t\tconst result = await handleTermList(emdash.db, name, {\n\t\t\tlocale: query.locale,\n\t\t\tincludeCounts: query.includeCounts,\n\t\t\tresolveFallback: query.resolveFallback,\n\t\t});\n\t\treturn unwrapResult(result);\n\t} catch (error) {\n\t\treturn handleError(error, \"Failed to list terms\", \"TERM_LIST_ERROR\");\n\t}\n};\n\n/**\n * Create a new term\n */\nexport const POST: APIRoute = async ({ params, request, locals, cache }) => {\n\tconst { emdash, user } = locals;\n\tconst { name } = params;\n\tif (!name) return apiError(\"VALIDATION_ERROR\", \"Taxonomy name required\", 400);\n\n\tconst dbErr = requireDb(emdash?.db);\n\tif (dbErr) return dbErr;\n\n\tconst denied = requirePerm(user, \"taxonomies:manage\");\n\tif (denied) return denied;\n\n\ttry {\n\t\tconst body = await parseBody(request, createTermBody);\n\t\tif (isParseError(body)) return body;\n\n\t\tconst result = await handleTermCreate(emdash.db, name, body);\n\t\tif (!result.success) return unwrapResult(result, 201);\n\t\tif (cache?.enabled) await cache.invalidate({ tags: [taxonomyTag(name)] });\n\t\treturn unwrapResult(result, 201);\n\t} catch (error) {\n\t\treturn handleError(error, \"Failed to create term\", \"TERM_CREATE_ERROR\");\n\t}\n};\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAgBA,MAAa,YAAY;;;;AAKzB,MAAa,MAAgB,OAAO,EAAE,QAAQ,SAAS,aAAa;CACnE,MAAM,EAAE,QAAQ,SAAS;CACzB,MAAM,EAAE,SAAS;AACjB,KAAI,CAAC,KAAM,QAAO,SAAS,oBAAoB,0BAA0B,IAAI;CAE7E,MAAM,QAAQ,UAAU,QAAQ,GAAG;AACnC,KAAI,MAAO,QAAO;CAElB,MAAM,SAAS,YAAY,MAAM,kBAAkB;AACnD,KAAI,OAAQ,QAAO;CAEnB,MAAM,QAAQ,WAAW,IAAI,IAAI,QAAQ,IAAI,EAAE,cAAc;AAC7D,KAAI,aAAa,MAAM,CAAE,QAAO;AAEhC,KAAI;AAMH,SAAO,aALQ,MAAM,eAAe,OAAO,IAAI,MAAM;GACpD,QAAQ,MAAM;GACd,eAAe,MAAM;GACrB,iBAAiB,MAAM;GACvB,CAAC,CACyB;UACnB,OAAO;AACf,SAAO,YAAY,OAAO,wBAAwB,kBAAkB;;;;;;AAOtE,MAAa,OAAiB,OAAO,EAAE,QAAQ,SAAS,QAAQ,YAAY;CAC3E,MAAM,EAAE,QAAQ,SAAS;CACzB,MAAM,EAAE,SAAS;AACjB,KAAI,CAAC,KAAM,QAAO,SAAS,oBAAoB,0BAA0B,IAAI;CAE7E,MAAM,QAAQ,UAAU,QAAQ,GAAG;AACnC,KAAI,MAAO,QAAO;CAElB,MAAM,SAAS,YAAY,MAAM,oBAAoB;AACrD,KAAI,OAAQ,QAAO;AAEnB,KAAI;EACH,MAAM,OAAO,MAAM,UAAU,SAAS,eAAe;AACrD,MAAI,aAAa,KAAK,CAAE,QAAO;EAE/B,MAAM,SAAS,MAAM,iBAAiB,OAAO,IAAI,MAAM,KAAK;AAC5D,MAAI,CAAC,OAAO,QAAS,QAAO,aAAa,QAAQ,IAAI;AACrD,MAAI,OAAO,QAAS,OAAM,MAAM,WAAW,EAAE,MAAM,CAAC,YAAY,KAAK,CAAC,EAAE,CAAC;AACzE,SAAO,aAAa,QAAQ,IAAI;UACxB,OAAO;AACf,SAAO,YAAY,OAAO,yBAAyB,oBAAoB"}