emdash 0.39.1 → 0.40.0

package/dist/hreflang-DOQeTXpg.mjs

@@ -1,105 +0,0 @@
-import { i as isI18nEnabled, r as getI18nConfig } from "./config-CGVeT8Hc.mjs";
-import { t as ContentRepository } from "./content-C0Hl3ktM.mjs";
-import { i as resolveLocalizedContentRoutePath } from "./resolve-BJIS8wKr.mjs";
-import { r as requestCached } from "./request-cache-DaMhSQdx.mjs";
-import { n as getCollectionInfoWithDb } from "./query-sgHYEgBW.mjs";
-import { o as getSiteSettingsWithDb } from "./settings-CsoLiwpL.mjs";
-
-//#region src/seo/hreflang.ts
-const TRAILING_SLASH_RE = /\/$/;
-const ABSOLUTE_URL_RE = /^https?:\/\//i;
-/**
-* IDs of variants flagged `noindex` in the SEO panel. Entries without
-* an `_emdash_seo` row are indexable by default (same as the sitemap).
-* The id list is bounded by the number of configured locales, so no
-* chunking is needed.
-*/
-async function findNoindexIds(db, collection, ids) {
-	if (ids.length === 0) return /* @__PURE__ */ new Set();
-	const rows = await db.selectFrom("_emdash_seo").select("content_id").where("collection", "=", collection).where("content_id", "in", ids).where("seo_no_index", "=", 1).execute();
-	return new Set(rows.map((r) => r.content_id));
-}
-/**
-* Resolve hreflang alternates for a content entry.
-*
-* @example
-* ```astro
-* ---
-* import { getHreflangAlternates } from "emdash";
-*
-* const alternates = await getHreflangAlternates("posts", entry.data.id, {
-*   siteUrl: Astro.url.origin,
-* });
-* ---
-* <head>
-*   {alternates.map((a) => <link rel="alternate" hreflang={a.hreflang} href={a.href} />)}
-* </head>
-* ```
-*/
-async function getHreflangAlternates(collection, entryId, options = {}) {
-	if (!isI18nEnabled()) return [];
-	return requestCached(`hreflang:${collection}:${entryId}:${options.siteUrl ?? ""}:${options.trailingSlash ?? "ignore"}`, async () => {
-		const { getDb } = await import("./loader-xhNQiT9T.mjs").then((n) => n.c);
-		return getHreflangAlternatesWithDb(await getDb(), collection, entryId, options);
-	});
-}
-/**
-* Resolve hreflang alternates with an explicit db handle.
-*
-* @internal Use `getHreflangAlternates()` in templates. This variant is
-* for routes/components that already have a database handle.
-*/
-async function getHreflangAlternatesWithDb(db, collection, entryId, options = {}) {
-	if (!isI18nEnabled()) return [];
-	let siteUrl = options.siteUrl;
-	if (!siteUrl) siteUrl = (await getSiteSettingsWithDb(db)).url;
-	if (!siteUrl || !ABSOLUTE_URL_RE.test(siteUrl)) return [];
-	siteUrl = siteUrl.replace(TRAILING_SLASH_RE, "");
-	const repo = new ContentRepository(db);
-	const item = await repo.findByIdOrSlug(collection, entryId);
-	if (!item) return [];
-	const group = item.translationGroup || item.id;
-	let variants = await repo.findTranslations(collection, group);
-	if (variants.length === 0) variants = [item];
-	let published = variants.filter((v) => v.status === "published");
-	if (published.length === 0) return [];
-	const noindexIds = await findNoindexIds(db, collection, published.map((v) => v.id));
-	if (noindexIds.has(item.id)) return [];
-	published = published.filter((v) => !noindexIds.has(v.id));
-	const urlPattern = (await getCollectionInfoWithDb(db, collection))?.urlPattern ?? null;
-	const resolved = [];
-	for (const variant of published) {
-		const locale = variant.locale || "en";
-		const path = await resolveLocalizedContentRoutePath({
-			pattern: urlPattern,
-			collection,
-			slug: variant.slug || variant.id,
-			id: variant.id,
-			date: variant.publishedAt,
-			locale,
-			trailingSlash: options.trailingSlash
-		});
-		if (path === null) continue;
-		resolved.push({
-			locale,
-			href: `${siteUrl}${path}`
-		});
-	}
-	if (resolved.length === 0) return [];
-	resolved.sort((a, b) => a.locale.localeCompare(b.locale));
-	const alternates = resolved.map((r) => ({
-		hreflang: r.locale,
-		href: r.href
-	}));
-	const defaultLocale = getI18nConfig()?.defaultLocale;
-	const xDefault = resolved.find((r) => r.locale === defaultLocale) ?? resolved[0];
-	if (xDefault) alternates.push({
-		hreflang: "x-default",
-		href: xDefault.href
-	});
-	return alternates;
-}
-
-//#endregion
-export { getHreflangAlternatesWithDb as n, getHreflangAlternates as t };
-//# sourceMappingURL=hreflang-DOQeTXpg.mjs.map

package/dist/hreflang-DOQeTXpg.mjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"hreflang-DOQeTXpg.mjs","names":[],"sources":["../src/seo/hreflang.ts"],"sourcesContent":["/**\n * hreflang alternate resolution for translated content (#1690).\n *\n * Mirrors the sitemap route's semantics so the render path and the\n * sitemap always agree:\n *\n * - Alternates are emitted per published locale variant of a\n *   translation group, including a self-referencing entry (Google\n *   recommends the page annotate itself).\n * - `x-default` points at the default-locale variant, falling back to\n *   the first routable variant when the default locale has no\n *   translation.\n * - Variants whose locale isn't in the configured `i18n.locales` list\n *   are dropped: linking to a route the site can't serve is worse than\n *   no link at all.\n * - Variants flagged `noindex` in the SEO panel are excluded — the\n *   sitemap doesn't list them, and pointing search engines at a page\n *   that asks not to be indexed is a contradictory signal. When the\n *   entry itself is noindex the result is empty: a page opting out of\n *   indexing shouldn't announce an hreflang set at all.\n * - When i18n is disabled (or no absolute site URL can be resolved,\n *   which hreflang requires) the result is empty and no queries run.\n */\n\nimport type { Kysely } from \"kysely\";\n\nimport { ContentRepository } from \"../database/repositories/content.js\";\nimport type { Database } from \"../database/types.js\";\nimport { getI18nConfig, isI18nEnabled } from \"../i18n/config.js\";\nimport { resolveLocalizedContentRoutePath } from \"../i18n/resolve.js\";\nimport { requestCached } from \"../request-cache.js\";\nimport { getCollectionInfoWithDb } from \"../schema/query.js\";\nimport { getSiteSettingsWithDb } from \"../settings/index.js\";\n\nconst TRAILING_SLASH_RE = /\\/$/;\nconst ABSOLUTE_URL_RE = /^https?:\\/\\//i;\n\n/**\n * IDs of variants flagged `noindex` in the SEO panel. Entries without\n * an `_emdash_seo` row are indexable by default (same as the sitemap).\n * The id list is bounded by the number of configured locales, so no\n * chunking is needed.\n */\nasync function findNoindexIds(\n\tdb: Kysely<Database>,\n\tcollection: string,\n\tids: string[],\n): Promise<Set<string>> {\n\tif (ids.length === 0) return new Set();\n\tconst rows = await db\n\t\t.selectFrom(\"_emdash_seo\")\n\t\t.select(\"content_id\")\n\t\t.where(\"collection\", \"=\", collection)\n\t\t.where(\"content_id\", \"in\", ids)\n\t\t.where(\"seo_no_index\", \"=\", 1)\n\t\t.execute();\n\treturn new Set(rows.map((r) => r.content_id));\n}\n\n/** A single alternate link, ready to render as `<link rel=\"alternate\">`. */\nexport interface HreflangAlternate {\n\t/** Locale code, or `\"x-default\"` for the default variant */\n\threflang: string;\n\t/** Absolute URL of the variant */\n\thref: string;\n}\n\nexport interface HreflangOptions {\n\t/**\n\t * Absolute site origin (e.g. `https://example.com`) used to build\n\t * the alternate URLs. Falls back to the site settings URL; when\n\t * neither is available the result is empty, since hreflang\n\t * requires fully-qualified URLs.\n\t */\n\tsiteUrl?: string;\n\t/** Astro's route trailing-slash policy. */\n\ttrailingSlash?: \"always\" | \"never\" | \"ignore\";\n}\n\n/**\n * Resolve hreflang alternates for a content entry.\n *\n * @example\n * ```astro\n * ---\n * import { getHreflangAlternates } from \"emdash\";\n *\n * const alternates = await getHreflangAlternates(\"posts\", entry.data.id, {\n *   siteUrl: Astro.url.origin,\n * });\n * ---\n * <head>\n *   {alternates.map((a) => <link rel=\"alternate\" hreflang={a.hreflang} href={a.href} />)}\n * </head>\n * ```\n */\nexport async function getHreflangAlternates(\n\tcollection: string,\n\tentryId: string,\n\toptions: HreflangOptions = {},\n): Promise<HreflangAlternate[]> {\n\tif (!isI18nEnabled()) return [];\n\tconst key = `hreflang:${collection}:${entryId}:${options.siteUrl ?? \"\"}:${options.trailingSlash ?? \"ignore\"}`;\n\treturn requestCached(key, async () => {\n\t\tconst { getDb } = await import(\"../loader.js\");\n\t\tconst db = await getDb();\n\t\treturn getHreflangAlternatesWithDb(db, collection, entryId, options);\n\t});\n}\n\n/**\n * Resolve hreflang alternates with an explicit db handle.\n *\n * @internal Use `getHreflangAlternates()` in templates. This variant is\n * for routes/components that already have a database handle.\n */\nexport async function getHreflangAlternatesWithDb(\n\tdb: Kysely<Database>,\n\tcollection: string,\n\tentryId: string,\n\toptions: HreflangOptions = {},\n): Promise<HreflangAlternate[]> {\n\tif (!isI18nEnabled()) return [];\n\n\tlet siteUrl = options.siteUrl;\n\tif (!siteUrl) {\n\t\tconst settings = await getSiteSettingsWithDb(db);\n\t\tsiteUrl = settings.url;\n\t}\n\t// hreflang requires fully-qualified URLs; a relative site URL would\n\t// produce invalid output (and EmDashHead's isSafeHref would drop it).\n\tif (!siteUrl || !ABSOLUTE_URL_RE.test(siteUrl)) return [];\n\tsiteUrl = siteUrl.replace(TRAILING_SLASH_RE, \"\");\n\n\tconst repo = new ContentRepository(db);\n\tconst item = await repo.findByIdOrSlug(collection, entryId);\n\tif (!item) return [];\n\n\t// Legacy rows imported before i18n may have no translation_group;\n\t// treat them as a single-variant group.\n\tconst group = item.translationGroup || item.id;\n\tlet variants = await repo.findTranslations(collection, group);\n\tif (variants.length === 0) variants = [item];\n\n\tlet published = variants.filter((v) => v.status === \"published\");\n\tif (published.length === 0) return [];\n\n\t// Exclude noindex variants, matching the sitemap's `_emdash_seo`\n\t// filter so head and sitemap agree on which variants are\n\t// discoverable. When the requested entry itself is noindex, emit\n\t// nothing: a page opting out of indexing shouldn't announce an\n\t// hreflang set.\n\tconst noindexIds = await findNoindexIds(\n\t\tdb,\n\t\tcollection,\n\t\tpublished.map((v) => v.id),\n\t);\n\tif (noindexIds.has(item.id)) return [];\n\tpublished = published.filter((v) => !noindexIds.has(v.id));\n\n\tconst info = await getCollectionInfoWithDb(db, collection);\n\tconst urlPattern = info?.urlPattern ?? null;\n\n\tconst resolved: Array<{ locale: string; href: string }> = [];\n\tfor (const variant of published) {\n\t\tconst locale = variant.locale || \"en\";\n\t\tconst path = await resolveLocalizedContentRoutePath({\n\t\t\tpattern: urlPattern,\n\t\t\tcollection,\n\t\t\tslug: variant.slug || variant.id,\n\t\t\tid: variant.id,\n\t\t\tdate: variant.publishedAt,\n\t\t\tlocale,\n\t\t\ttrailingSlash: options.trailingSlash,\n\t\t});\n\t\tif (path === null) continue;\n\t\tresolved.push({ locale, href: `${siteUrl}${path}` });\n\t}\n\tif (resolved.length === 0) return [];\n\n\tresolved.sort((a, b) => a.locale.localeCompare(b.locale));\n\tconst alternates: HreflangAlternate[] = resolved.map((r) => ({\n\t\threflang: r.locale,\n\t\thref: r.href,\n\t}));\n\n\t// x-default: default-locale variant, else the first routable one.\n\t// Same fallback the sitemap route uses.\n\tconst defaultLocale = getI18nConfig()?.defaultLocale;\n\tconst xDefault = resolved.find((r) => r.locale === defaultLocale) ?? resolved[0];\n\tif (xDefault) {\n\t\talternates.push({ hreflang: \"x-default\", href: xDefault.href });\n\t}\n\n\treturn alternates;\n}\n"],"mappings":";;;;;;;;AAkCA,MAAM,oBAAoB;AAC1B,MAAM,kBAAkB;;;;;;;AAQxB,eAAe,eACd,IACA,YACA,KACuB;AACvB,KAAI,IAAI,WAAW,EAAG,wBAAO,IAAI,KAAK;CACtC,MAAM,OAAO,MAAM,GACjB,WAAW,cAAc,CACzB,OAAO,aAAa,CACpB,MAAM,cAAc,KAAK,WAAW,CACpC,MAAM,cAAc,MAAM,IAAI,CAC9B,MAAM,gBAAgB,KAAK,EAAE,CAC7B,SAAS;AACX,QAAO,IAAI,IAAI,KAAK,KAAK,MAAM,EAAE,WAAW,CAAC;;;;;;;;;;;;;;;;;;;AAwC9C,eAAsB,sBACrB,YACA,SACA,UAA2B,EAAE,EACE;AAC/B,KAAI,CAAC,eAAe,CAAE,QAAO,EAAE;AAE/B,QAAO,cADK,YAAY,WAAW,GAAG,QAAQ,GAAG,QAAQ,WAAW,GAAG,GAAG,QAAQ,iBAAiB,YACzE,YAAY;EACrC,MAAM,EAAE,UAAU,MAAM,OAAO;AAE/B,SAAO,4BADI,MAAM,OAAO,EACe,YAAY,SAAS,QAAQ;GACnE;;;;;;;;AASH,eAAsB,4BACrB,IACA,YACA,SACA,UAA2B,EAAE,EACE;AAC/B,KAAI,CAAC,eAAe,CAAE,QAAO,EAAE;CAE/B,IAAI,UAAU,QAAQ;AACtB,KAAI,CAAC,QAEJ,YADiB,MAAM,sBAAsB,GAAG,EAC7B;AAIpB,KAAI,CAAC,WAAW,CAAC,gBAAgB,KAAK,QAAQ,CAAE,QAAO,EAAE;AACzD,WAAU,QAAQ,QAAQ,mBAAmB,GAAG;CAEhD,MAAM,OAAO,IAAI,kBAAkB,GAAG;CACtC,MAAM,OAAO,MAAM,KAAK,eAAe,YAAY,QAAQ;AAC3D,KAAI,CAAC,KAAM,QAAO,EAAE;CAIpB,MAAM,QAAQ,KAAK,oBAAoB,KAAK;CAC5C,IAAI,WAAW,MAAM,KAAK,iBAAiB,YAAY,MAAM;AAC7D,KAAI,SAAS,WAAW,EAAG,YAAW,CAAC,KAAK;CAE5C,IAAI,YAAY,SAAS,QAAQ,MAAM,EAAE,WAAW,YAAY;AAChE,KAAI,UAAU,WAAW,EAAG,QAAO,EAAE;CAOrC,MAAM,aAAa,MAAM,eACxB,IACA,YACA,UAAU,KAAK,MAAM,EAAE,GAAG,CAC1B;AACD,KAAI,WAAW,IAAI,KAAK,GAAG,CAAE,QAAO,EAAE;AACtC,aAAY,UAAU,QAAQ,MAAM,CAAC,WAAW,IAAI,EAAE,GAAG,CAAC;CAG1D,MAAM,cADO,MAAM,wBAAwB,IAAI,WAAW,GACjC,cAAc;CAEvC,MAAM,WAAoD,EAAE;AAC5D,MAAK,MAAM,WAAW,WAAW;EAChC,MAAM,SAAS,QAAQ,UAAU;EACjC,MAAM,OAAO,MAAM,iCAAiC;GACnD,SAAS;GACT;GACA,MAAM,QAAQ,QAAQ,QAAQ;GAC9B,IAAI,QAAQ;GACZ,MAAM,QAAQ;GACd;GACA,eAAe,QAAQ;GACvB,CAAC;AACF,MAAI,SAAS,KAAM;AACnB,WAAS,KAAK;GAAE;GAAQ,MAAM,GAAG,UAAU;GAAQ,CAAC;;AAErD,KAAI,SAAS,WAAW,EAAG,QAAO,EAAE;AAEpC,UAAS,MAAM,GAAG,MAAM,EAAE,OAAO,cAAc,EAAE,OAAO,CAAC;CACzD,MAAM,aAAkC,SAAS,KAAK,OAAO;EAC5D,UAAU,EAAE;EACZ,MAAM,EAAE;EACR,EAAE;CAIH,MAAM,gBAAgB,eAAe,EAAE;CACvC,MAAM,WAAW,SAAS,MAAM,MAAM,EAAE,WAAW,cAAc,IAAI,SAAS;AAC9E,KAAI,SACH,YAAW,KAAK;EAAE,UAAU;EAAa,MAAM,SAAS;EAAM,CAAC;AAGhE,QAAO"}

package/dist/http-route-dispatch-MCVKiQCl.mjs

@@ -1,339 +0,0 @@
-import { t as generateFieldSchema } from "./zod-generator-DuBjYyrI.mjs";
-import { n as apiSuccess, t as apiError } from "./error-CCTCskie.mjs";
-import { i as pluginRouteResponseToWire, n as parseDeclaredPluginRouteInput, r as pluginRouteResponseFromWire, t as PluginRouteRequestError } from "./route-wire-D66L2oaZ.mjs";
-import { n as requireOwnerPerm, r as requirePerm } from "./authorize-BXpfMpp0.mjs";
-import { t as requireScope } from "./scopes-Bn8_rCSt.mjs";
-import { Permissions } from "@emdash-cms/auth";
-import { getLocaleDir, resolveLocale } from "@emdash-cms/admin/locales";
-import { isEditorDraftPatchEffect, validateContentEditorPanelInteraction, validateEditorDraftPatchEffect } from "@emdash-cms/blocks/server";
-
-//#region src/plugins/editor-draft.ts
-const EDITOR_DRAFT_LIMITS = {
-	maxFields: 32,
-	maxSnapshotBytes: 192 * 1024,
-	maxFieldBytes: 64 * 1024
-};
-const ENCODER = new TextEncoder();
-const INVOCATION_PATTERN = /^[A-Za-z0-9_-]{16,128}$/;
-function isRecord$1(value) {
-	return typeof value === "object" && value !== null && !Array.isArray(value);
-}
-function isBrowserDraftRequest(value) {
-	return isRecord$1(value) && typeof value.collection === "string" && typeof value.entryId === "string" && (value.locale === null || typeof value.locale === "string") && typeof value.baseRevision === "string" && typeof value.generation === "number" && typeof value.invocationId === "string" && isRecord$1(value.fields);
-}
-function jsonBytes(value) {
-	try {
-		return ENCODER.encode(JSON.stringify(value)).byteLength;
-	} catch {
-		return null;
-	}
-}
-function selectedFields(collection, selector) {
-	const selected = new Set(selector?.fields ?? []);
-	if (selector?.translatable) {
-		for (const field of collection.fields) if (field.translatable) selected.add(field.slug);
-	}
-	return selected;
-}
-function sanitizeField(field) {
-	return {
-		slug: field.slug,
-		label: field.label,
-		type: field.type,
-		required: field.required,
-		translatable: field.translatable,
-		...field.validation ? { validation: { ...field.validation } } : {}
-	};
-}
-function fail(code, message) {
-	return {
-		code,
-		message
-	};
-}
-function validateEditorDraftRequest(input) {
-	if (!isBrowserDraftRequest(input.request)) return fail("EDITOR_DRAFT_INVALID", "Invalid editor draft snapshot");
-	const request = input.request;
-	if (request.collection !== input.collection.slug || request.entryId !== input.entry.id || request.locale !== input.entry.locale) return fail("EDITOR_DRAFT_STALE", "Editor draft identity is stale");
-	if (request.baseRevision !== input.entry.revision) return fail("EDITOR_DRAFT_STALE", "Editor draft base revision is stale");
-	if (!Number.isSafeInteger(request.generation) || request.generation < 0 || typeof request.invocationId !== "string" || !INVOCATION_PATTERN.test(request.invocationId)) return fail("EDITOR_DRAFT_INVALID", "Invalid editor draft invocation identity");
-	const size = jsonBytes(request);
-	if (size === null) return fail("EDITOR_DRAFT_INVALID", "Editor draft snapshot must be JSON serializable");
-	if (size > EDITOR_DRAFT_LIMITS.maxSnapshotBytes) return fail("EDITOR_DRAFT_TOO_LARGE", "Editor draft snapshot exceeds the size limit");
-	const readFields = selectedFields(input.collection, input.readSelector);
-	const patchFields = selectedFields(input.collection, input.patchSelector);
-	if (readFields.size > EDITOR_DRAFT_LIMITS.maxFields || patchFields.size > EDITOR_DRAFT_LIMITS.maxFields) return fail("EDITOR_DRAFT_TOO_LARGE", "Editor draft selector exceeds the field limit");
-	const supplied = Object.keys(request.fields);
-	if (supplied.length > EDITOR_DRAFT_LIMITS.maxFields) return fail("EDITOR_DRAFT_TOO_LARGE", "Editor draft snapshot exceeds the field limit");
-	if (supplied.length > 0 && !input.canRead) return fail("EDITOR_DRAFT_CAPABILITY_REQUIRED", "Plugin cannot read unsaved editor content");
-	const bySlug = new Map(input.collection.fields.map((field) => [field.slug, field]));
-	const patchFieldDefinitions = Array.from(patchFields, (slug) => bySlug.get(slug)).filter((field) => Boolean(field && !field.unsupportedType)).map(sanitizeField);
-	const fields = {};
-	const fieldDefinitions = [];
-	for (const slug of supplied) {
-		if (!readFields.has(slug)) return fail("EDITOR_DRAFT_FIELD_FORBIDDEN", `Editor draft field '${slug}' is not allowed`);
-		const field = bySlug.get(slug);
-		if (!field || field.unsupportedType) return fail("EDITOR_DRAFT_UNSUPPORTED_FIELD_TYPE", `Editor draft field '${slug}' has an unsupported type`);
-		const fieldSize = jsonBytes(request.fields[slug]);
-		if (fieldSize === null) return fail("EDITOR_DRAFT_INVALID", `Editor draft field '${slug}' is invalid`);
-		if (fieldSize > EDITOR_DRAFT_LIMITS.maxFieldBytes) return fail("EDITOR_DRAFT_TOO_LARGE", `Editor draft field '${slug}' exceeds the size limit`);
-		if (!generateFieldSchema(field).safeParse(request.fields[slug]).success) return fail("EDITOR_DRAFT_INVALID", `Editor draft field '${slug}' is invalid`);
-		fields[slug] = request.fields[slug];
-		fieldDefinitions.push(sanitizeField(field));
-	}
-	if (input.readSelector && !input.canRead) return fail("EDITOR_DRAFT_CAPABILITY_REQUIRED", "Plugin cannot read unsaved editor content");
-	if (input.patchSelector && !input.canPatch) return fail("EDITOR_DRAFT_CAPABILITY_REQUIRED", "Plugin cannot propose unsaved editor changes");
-	return {
-		snapshot: {
-			collection: input.collection.slug,
-			entryId: input.entry.id,
-			locale: input.entry.locale,
-			baseRevision: input.entry.revision,
-			invocationId: request.invocationId,
-			fields,
-			fieldDefinitions
-		},
-		receipt: {
-			entryId: input.entry.id,
-			locale: input.entry.locale,
-			baseRevision: input.entry.revision,
-			generation: request.generation,
-			invocationId: request.invocationId,
-			fieldDefinitions: patchFieldDefinitions
-		},
-		readFields,
-		patchFields
-	};
-}
-function validateEditorDraftPatch(input) {
-	if (!validateEditorDraftPatchEffect(input.patch).valid || !isEditorDraftPatchEffect(input.patch)) return fail("EDITOR_DRAFT_INVALID", "Plugin returned an invalid editor draft patch");
-	const patch = input.patch;
-	const bySlug = new Map(input.collection.fields.map((field) => [field.slug, field]));
-	for (const operation of patch.operations) {
-		if (!input.allowedFields.has(operation.field)) return fail("EDITOR_DRAFT_FIELD_FORBIDDEN", `Editor draft field '${operation.field}' is not allowed`);
-		const field = bySlug.get(operation.field);
-		if (!field || field.unsupportedType) return fail("EDITOR_DRAFT_UNSUPPORTED_FIELD_TYPE", `Editor draft field '${operation.field}' has an unsupported type`);
-		const value = operation.op === "clear" ? null : operation.value;
-		if (!generateFieldSchema(field).safeParse(value).success) return fail("EDITOR_DRAFT_INVALID", `Editor draft field '${operation.field}' is invalid`);
-		const fieldSize = jsonBytes(value);
-		if (fieldSize === null || fieldSize > EDITOR_DRAFT_LIMITS.maxFieldBytes) return fail("EDITOR_DRAFT_TOO_LARGE", `Editor draft field '${operation.field}' exceeds the size limit`);
-	}
-	return patch;
-}
-
-//#endregion
-//#region src/plugins/http-route-dispatch.ts
-function editorDraftErrorResponse(error) {
-	const status = error.code === "EDITOR_DRAFT_STALE" ? 409 : error.code === "EDITOR_DRAFT_FIELD_FORBIDDEN" || error.code === "EDITOR_DRAFT_CAPABILITY_REQUIRED" ? 403 : error.code === "EDITOR_DRAFT_TOO_LARGE" ? 413 : error.code === "EDITOR_DRAFT_UNSUPPORTED_FIELD_TYPE" ? 422 : 400;
-	return apiError(error.code, error.message, status);
-}
-function toRoleLevel$1(value) {
-	if (value === 10 || value === 20 || value === 30 || value === 40 || value === 50) return value;
-	return null;
-}
-function isRecord(value) {
-	return typeof value === "object" && value !== null && !Array.isArray(value);
-}
-function isPermission(value) {
-	return Object.hasOwn(Permissions, value);
-}
-function authorizePrivatePluginRouteRequest(routeMeta, request, user, tokenScopes) {
-	const permission = routeMeta.permission ?? "plugins:manage";
-	if (!isPermission(permission)) return apiError("INVALID_PLUGIN_ROUTE", "Plugin route declares an invalid permission", 500);
-	let permissionUser;
-	if (user) {
-		const role = toRoleLevel$1(user.role);
-		if (role === null) return apiError("INVALID_USER", "Authenticated user has an invalid role", 500);
-		permissionUser = {
-			id: user.id,
-			role
-		};
-	} else permissionUser = user;
-	const denied = requirePerm(permissionUser, permission);
-	if (denied) return denied;
-	const scopeError = requireScope({ tokenScopes }, "admin");
-	if (scopeError) return scopeError;
-	if (!tokenScopes && request.headers.get("X-EmDash-Request") !== "1") return apiError("CSRF_REJECTED", "Missing required header", 403);
-	return null;
-}
-/** Dispatch a request through the production plugin-route policy boundary. */
-async function dispatchPluginApiRequest({ runtime, pluginId, path, request, user, tokenScopes, invalidateContentCache, editorDispatch }) {
-	const method = request.method.toUpperCase();
-	const routeMeta = runtime.getPluginRouteMeta(pluginId, path);
-	if (!routeMeta) return apiError("NOT_FOUND", "Plugin route not found", 404);
-	if (!routeMeta.public) {
-		const denied = authorizePrivatePluginRouteRequest(routeMeta, request, user, tokenScopes);
-		if (denied) return denied;
-	}
-	if (routeMeta.methods && !routeMeta.methods.some((allowed) => allowed === method)) {
-		const response = apiError("METHOD_NOT_ALLOWED", "Method not allowed", 405);
-		response.headers.set("Allow", routeMeta.methods.join(", "));
-		return response;
-	}
-	const caller = routeMeta.public ? void 0 : user ?? void 0;
-	const result = await runtime.handlePluginApiRoute(pluginId, method, path, request, caller, invalidateContentCache, editorDispatch);
-	if (!result.success) {
-		const code = result.error?.code ?? "PLUGIN_ERROR";
-		return apiError(code, code === "INTERNAL_ERROR" ? "Plugin route error" : result.error?.message ?? "Plugin route error", result.status ?? (code === "NOT_FOUND" ? 404 : 400));
-	}
-	let response;
-	if (routeMeta.response === "raw") try {
-		response = pluginRouteResponseFromWire(await pluginRouteResponseToWire(result.data, routeMeta.public ? { publicRequestUrl: request.url } : { allowExternalLocation: true }), method);
-	} catch (error) {
-		console.error(`[plugin:${pluginId}] Invalid raw route response:`, error);
-		return apiError("INVALID_PLUGIN_RESPONSE", "Plugin returned an invalid response", 500);
-	}
-	else response = apiSuccess(result.data);
-	if (response.ok && routeMeta.public && routeMeta.cacheControl && (method === "GET" || method === "HEAD")) response.headers.set("Cache-Control", routeMeta.cacheControl);
-	else response.headers.set("Cache-Control", "private, no-store");
-	return response;
-}
-const EDITOR_EXTENSION_REQUEST_MAX_BYTES = 256 * 1024;
-/** Dispatch a saved-entry extension through ownership, route, and isolate policy. */
-async function dispatchPluginEditorExtensionApiRequest({ runtime, pluginId, kind, extensionId, collection, entryId, request, user, tokenScopes, invalidateContentCache }) {
-	const definition = runtime.getPluginEditorExtension(pluginId, kind, extensionId, collection);
-	if (!definition) return apiError("NOT_FOUND", "Plugin editor extension not found", 404);
-	const routeMeta = runtime.getPluginRouteMeta(pluginId, definition.extension.route);
-	if (!routeMeta || routeMeta.public) return apiError("INVALID_PLUGIN_EDITOR_EXTENSION", "Plugin editor extension must reference a private route", 500);
-	const denied = authorizePrivatePluginRouteRequest(routeMeta, request, user, tokenScopes);
-	if (denied) return denied;
-	const requestedLocale = new URL(request.url).searchParams.get("locale") || void 0;
-	const contentResult = await runtime.handleContentGet(collection, entryId, requestedLocale);
-	if (!contentResult.success) return contentResult.error?.code === "NOT_FOUND" ? apiError("NOT_FOUND", "Content item not found", 404) : apiError("CONTENT_GET_ERROR", "Failed to load content item", 500);
-	const contentData = contentResult.data;
-	const item = typeof contentData === "object" && contentData !== null && "item" in contentData ? contentData.item : null;
-	if (typeof item !== "object" || item === null) return apiError("CONTENT_GET_ERROR", "Failed to load content item", 500);
-	const authorId = "authorId" in item && typeof item.authorId === "string" ? item.authorId : "";
-	let ownershipUser = user == null ? user : void 0;
-	if (user) {
-		const ownerRole = toRoleLevel$1(user.role);
-		if (ownerRole === null) return apiError("INVALID_USER", "Authenticated user has an invalid role", 500);
-		ownershipUser = {
-			id: user.id,
-			role: ownerRole
-		};
-	}
-	const ownershipDenied = requireOwnerPerm(ownershipUser, authorId, "content:edit_own", "content:edit_any");
-	if (ownershipDenied) return ownershipDenied;
-	const canonicalId = "id" in item && typeof item.id === "string" ? item.id : null;
-	const canonicalLocale = "locale" in item && typeof item.locale === "string" ? item.locale : null;
-	const version = "version" in item && typeof item.version === "number" ? item.version : null;
-	const baseRevision = typeof contentData === "object" && contentData !== null && "_rev" in contentData && typeof contentData._rev === "string" ? contentData._rev : null;
-	if (!canonicalId || version === null) return apiError("CONTENT_GET_ERROR", "Content item has invalid identity", 500);
-	let input;
-	let editorBody;
-	try {
-		editorBody = await parseDeclaredPluginRouteInput(request, {
-			body: "json",
-			maxBytes: EDITOR_EXTENSION_REQUEST_MAX_BYTES
-		});
-	} catch (error) {
-		if (error instanceof PluginRouteRequestError) return apiError(error.status === 413 ? "EDITOR_DRAFT_TOO_LARGE" : "INVALID_REQUEST", error.status === 413 ? "Editor interaction exceeds the size limit" : "Invalid editor interaction", error.status);
-		return apiError("INVALID_REQUEST", "Editor interaction could not be read", 400);
-	}
-	if (kind === "panel") {
-		if (!isRecord(editorBody)) return apiError("INVALID_REQUEST", "Editor panel interaction must be an object", 400);
-		input = editorBody;
-		if (!validateContentEditorPanelInteraction(input).valid) return apiError("INVALID_PLUGIN_UI_CONTEXT", "Invalid editor panel interaction", 400);
-	} else {
-		if (!isRecord(editorBody)) return apiError("INVALID_REQUEST", "Invalid editor action interaction", 400);
-		input = {
-			type: "editor_action",
-			...Object.hasOwn(editorBody, "draft") ? { draft: editorBody.draft } : {}
-		};
-	}
-	let validatedDraft = null;
-	if (input.draft !== void 0) {
-		if (!baseRevision) return apiError("EDITOR_DRAFT_INVALID", "Content item has no draft revision identity", 409);
-		const collectionSchema = await runtime.getPluginEditorDraftSchema(collection);
-		if (!collectionSchema) return apiError("NOT_FOUND", "Collection not found", 404);
-		const draft = validateEditorDraftRequest({
-			request: input.draft,
-			collection: collectionSchema,
-			entry: {
-				id: canonicalId,
-				locale: canonicalLocale,
-				revision: baseRevision
-			},
-			readSelector: definition.extension.draft?.read,
-			patchSelector: definition.extension.draft?.patch,
-			canRead: definition.capabilities.includes("admin.editor-draft:read"),
-			canPatch: definition.capabilities.includes("admin.editor-draft:patch")
-		});
-		if ("code" in draft) {
-			console.warn(`[plugin:${pluginId}] Editor draft ${kind}/${extensionId} rejected: ${draft.code}`);
-			return editorDraftErrorResponse(draft);
-		}
-		validatedDraft = draft;
-		input = {
-			...input,
-			draft: draft.snapshot
-		};
-	}
-	const headers = new Headers(request.headers);
-	headers.delete("content-length");
-	headers.delete("content-encoding");
-	headers.set("Content-Type", "application/json");
-	const pluginRequest = new Request(request.url, {
-		method: "POST",
-		headers,
-		body: JSON.stringify(input)
-	});
-	const locale = resolveLocale(request);
-	const response = await dispatchPluginApiRequest({
-		runtime,
-		pluginId,
-		path: definition.extension.route,
-		request: pluginRequest,
-		user,
-		tokenScopes,
-		invalidateContentCache,
-		editorDispatch: {
-			kind,
-			policy: definition.policy,
-			ui: {
-				surface: kind === "panel" ? "content-editor-panel" : "content-editor-action",
-				locale,
-				direction: getLocaleDir(locale),
-				contentLocale: canonicalLocale ?? void 0,
-				extensionId,
-				entry: {
-					collection,
-					id: canonicalId,
-					locale: canonicalLocale,
-					version
-				}
-			}
-		}
-	});
-	if (!response.ok) return response;
-	const envelope = await response.clone().json();
-	if (!isRecord(envelope) || !isRecord(envelope.data)) return apiError("INVALID_PLUGIN_RESPONSE", "Plugin returned an invalid response", 502);
-	const data = envelope.data;
-	if (data.patch === void 0 && !validatedDraft) return response;
-	if (data.patch !== void 0 && !validatedDraft) return apiError("EDITOR_DRAFT_INVALID", "Plugin returned an editor draft patch without a draft invocation", 400);
-	if (data.patch !== void 0) {
-		const collectionSchema = await runtime.getPluginEditorDraftSchema(collection);
-		if (!collectionSchema) return apiError("NOT_FOUND", "Collection not found", 404);
-		const patch = validateEditorDraftPatch({
-			patch: data.patch,
-			collection: collectionSchema,
-			allowedFields: validatedDraft?.patchFields ?? /* @__PURE__ */ new Set()
-		});
-		if ("code" in patch) {
-			console.warn(`[plugin:${pluginId}] Editor draft ${kind}/${extensionId} rejected: ${patch.code}`);
-			return editorDraftErrorResponse(patch);
-		}
-		data.patch = patch;
-	}
-	const finalResponse = apiSuccess({
-		...data,
-		editorInvocation: validatedDraft?.receipt
-	});
-	finalResponse.headers.set("Cache-Control", "private, no-store");
-	return finalResponse;
-}
-
-//#endregion
-export { validateEditorDraftRequest as i, dispatchPluginEditorExtensionApiRequest as n, validateEditorDraftPatch as r, dispatchPluginApiRequest as t };
-//# sourceMappingURL=http-route-dispatch-MCVKiQCl.mjs.map

package/dist/http-route-dispatch-MCVKiQCl.mjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"http-route-dispatch-MCVKiQCl.mjs","names":["isRecord","toRoleLevel"],"sources":["../src/plugins/editor-draft.ts","../src/plugins/http-route-dispatch.ts"],"sourcesContent":["import type {\n\tEditorDraftFieldDefinition,\n\tEditorDraftInvocationReceipt,\n\tEditorDraftPatchEffect,\n\tEditorDraftSnapshot,\n} from \"@emdash-cms/blocks\";\nimport {\n\tisEditorDraftPatchEffect,\n\tvalidateEditorDraftPatchEffect,\n} from \"@emdash-cms/blocks/server\";\n\nimport type { CollectionWithFields, Field } from \"../schema/types.js\";\nimport { generateFieldSchema } from \"../schema/zod-generator.js\";\nimport type { PluginEditorDraftFieldSelector } from \"./types.js\";\n\nexport const EDITOR_DRAFT_LIMITS = {\n\tmaxFields: 32,\n\tmaxSnapshotBytes: 192 * 1024,\n\tmaxFieldBytes: 64 * 1024,\n} as const;\n\nexport type EditorDraftErrorCode =\n\t| \"EDITOR_DRAFT_STALE\"\n\t| \"EDITOR_DRAFT_FIELD_FORBIDDEN\"\n\t| \"EDITOR_DRAFT_INVALID\"\n\t| \"EDITOR_DRAFT_UNSUPPORTED_FIELD_TYPE\"\n\t| \"EDITOR_DRAFT_TOO_LARGE\"\n\t| \"EDITOR_DRAFT_CAPABILITY_REQUIRED\";\n\nexport interface EditorDraftValidationError {\n\tcode: EditorDraftErrorCode;\n\tmessage: string;\n}\n\ninterface BrowserDraftRequest {\n\tcollection: string;\n\tentryId: string;\n\tlocale: string | null;\n\tbaseRevision: string;\n\tgeneration: number;\n\tinvocationId: string;\n\tfields: Record<string, unknown>;\n}\n\nexport interface ValidatedEditorDraftRequest {\n\tsnapshot: EditorDraftSnapshot;\n\treceipt: EditorDraftInvocationReceipt;\n\treadFields: ReadonlySet<string>;\n\tpatchFields: ReadonlySet<string>;\n}\n\nconst ENCODER = new TextEncoder();\nconst INVOCATION_PATTERN = /^[A-Za-z0-9_-]{16,128}$/;\n\nfunction isRecord(value: unknown): value is Record<string, unknown> {\n\treturn typeof value === \"object\" && value !== null && !Array.isArray(value);\n}\n\nfunction isBrowserDraftRequest(value: unknown): value is BrowserDraftRequest {\n\treturn (\n\t\tisRecord(value) &&\n\t\ttypeof value.collection === \"string\" &&\n\t\ttypeof value.entryId === \"string\" &&\n\t\t(value.locale === null || typeof value.locale === \"string\") &&\n\t\ttypeof value.baseRevision === \"string\" &&\n\t\ttypeof value.generation === \"number\" &&\n\t\ttypeof value.invocationId === \"string\" &&\n\t\tisRecord(value.fields)\n\t);\n}\n\nfunction jsonBytes(value: unknown): number | null {\n\ttry {\n\t\treturn ENCODER.encode(JSON.stringify(value)).byteLength;\n\t} catch {\n\t\treturn null;\n\t}\n}\n\nfunction selectedFields(\n\tcollection: CollectionWithFields,\n\tselector: PluginEditorDraftFieldSelector | undefined,\n): Set<string> {\n\tconst selected = new Set(selector?.fields ?? []);\n\tif (selector?.translatable) {\n\t\tfor (const field of collection.fields) {\n\t\t\tif (field.translatable) selected.add(field.slug);\n\t\t}\n\t}\n\treturn selected;\n}\n\nfunction sanitizeField(field: Field): EditorDraftFieldDefinition {\n\treturn {\n\t\tslug: field.slug,\n\t\tlabel: field.label,\n\t\ttype: field.type,\n\t\trequired: field.required,\n\t\ttranslatable: field.translatable,\n\t\t...(field.validation ? { validation: { ...field.validation } } : {}),\n\t};\n}\n\nfunction fail(code: EditorDraftErrorCode, message: string): EditorDraftValidationError {\n\treturn { code, message };\n}\n\nexport function validateEditorDraftRequest(input: {\n\trequest: unknown;\n\tcollection: CollectionWithFields;\n\tentry: { id: string; locale: string | null; revision: string };\n\treadSelector?: PluginEditorDraftFieldSelector;\n\tpatchSelector?: PluginEditorDraftFieldSelector;\n\tcanRead: boolean;\n\tcanPatch: boolean;\n}): ValidatedEditorDraftRequest | EditorDraftValidationError {\n\tif (!isBrowserDraftRequest(input.request)) {\n\t\treturn fail(\"EDITOR_DRAFT_INVALID\", \"Invalid editor draft snapshot\");\n\t}\n\tconst request = input.request;\n\tif (\n\t\trequest.collection !== input.collection.slug ||\n\t\trequest.entryId !== input.entry.id ||\n\t\trequest.locale !== input.entry.locale\n\t) {\n\t\treturn fail(\"EDITOR_DRAFT_STALE\", \"Editor draft identity is stale\");\n\t}\n\tif (request.baseRevision !== input.entry.revision) {\n\t\treturn fail(\"EDITOR_DRAFT_STALE\", \"Editor draft base revision is stale\");\n\t}\n\tif (\n\t\t!Number.isSafeInteger(request.generation) ||\n\t\trequest.generation < 0 ||\n\t\ttypeof request.invocationId !== \"string\" ||\n\t\t!INVOCATION_PATTERN.test(request.invocationId)\n\t) {\n\t\treturn fail(\"EDITOR_DRAFT_INVALID\", \"Invalid editor draft invocation identity\");\n\t}\n\tconst size = jsonBytes(request);\n\tif (size === null)\n\t\treturn fail(\"EDITOR_DRAFT_INVALID\", \"Editor draft snapshot must be JSON serializable\");\n\tif (size > EDITOR_DRAFT_LIMITS.maxSnapshotBytes) {\n\t\treturn fail(\"EDITOR_DRAFT_TOO_LARGE\", \"Editor draft snapshot exceeds the size limit\");\n\t}\n\n\tconst readFields = selectedFields(input.collection, input.readSelector);\n\tconst patchFields = selectedFields(input.collection, input.patchSelector);\n\tif (\n\t\treadFields.size > EDITOR_DRAFT_LIMITS.maxFields ||\n\t\tpatchFields.size > EDITOR_DRAFT_LIMITS.maxFields\n\t) {\n\t\treturn fail(\"EDITOR_DRAFT_TOO_LARGE\", \"Editor draft selector exceeds the field limit\");\n\t}\n\tconst supplied = Object.keys(request.fields);\n\tif (supplied.length > EDITOR_DRAFT_LIMITS.maxFields) {\n\t\treturn fail(\"EDITOR_DRAFT_TOO_LARGE\", \"Editor draft snapshot exceeds the field limit\");\n\t}\n\tif (supplied.length > 0 && !input.canRead) {\n\t\treturn fail(\"EDITOR_DRAFT_CAPABILITY_REQUIRED\", \"Plugin cannot read unsaved editor content\");\n\t}\n\tconst bySlug = new Map(input.collection.fields.map((field) => [field.slug, field]));\n\tconst patchFieldDefinitions = Array.from(patchFields, (slug) => bySlug.get(slug))\n\t\t.filter((field): field is Field => Boolean(field && !field.unsupportedType))\n\t\t.map(sanitizeField);\n\tconst fields: Record<string, unknown> = {};\n\tconst fieldDefinitions: EditorDraftFieldDefinition[] = [];\n\tfor (const slug of supplied) {\n\t\tif (!readFields.has(slug)) {\n\t\t\treturn fail(\"EDITOR_DRAFT_FIELD_FORBIDDEN\", `Editor draft field '${slug}' is not allowed`);\n\t\t}\n\t\tconst field = bySlug.get(slug);\n\t\tif (!field || field.unsupportedType) {\n\t\t\treturn fail(\n\t\t\t\t\"EDITOR_DRAFT_UNSUPPORTED_FIELD_TYPE\",\n\t\t\t\t`Editor draft field '${slug}' has an unsupported type`,\n\t\t\t);\n\t\t}\n\t\tconst fieldSize = jsonBytes(request.fields[slug]);\n\t\tif (fieldSize === null)\n\t\t\treturn fail(\"EDITOR_DRAFT_INVALID\", `Editor draft field '${slug}' is invalid`);\n\t\tif (fieldSize > EDITOR_DRAFT_LIMITS.maxFieldBytes) {\n\t\t\treturn fail(\"EDITOR_DRAFT_TOO_LARGE\", `Editor draft field '${slug}' exceeds the size limit`);\n\t\t}\n\t\tif (!generateFieldSchema(field).safeParse(request.fields[slug]).success) {\n\t\t\treturn fail(\"EDITOR_DRAFT_INVALID\", `Editor draft field '${slug}' is invalid`);\n\t\t}\n\t\tfields[slug] = request.fields[slug];\n\t\tfieldDefinitions.push(sanitizeField(field));\n\t}\n\tif (input.readSelector && !input.canRead) {\n\t\treturn fail(\"EDITOR_DRAFT_CAPABILITY_REQUIRED\", \"Plugin cannot read unsaved editor content\");\n\t}\n\tif (input.patchSelector && !input.canPatch) {\n\t\treturn fail(\"EDITOR_DRAFT_CAPABILITY_REQUIRED\", \"Plugin cannot propose unsaved editor changes\");\n\t}\n\n\treturn {\n\t\tsnapshot: {\n\t\t\tcollection: input.collection.slug,\n\t\t\tentryId: input.entry.id,\n\t\t\tlocale: input.entry.locale,\n\t\t\tbaseRevision: input.entry.revision,\n\t\t\tinvocationId: request.invocationId,\n\t\t\tfields,\n\t\t\tfieldDefinitions,\n\t\t},\n\t\treceipt: {\n\t\t\tentryId: input.entry.id,\n\t\t\tlocale: input.entry.locale,\n\t\t\tbaseRevision: input.entry.revision,\n\t\t\tgeneration: request.generation,\n\t\t\tinvocationId: request.invocationId,\n\t\t\tfieldDefinitions: patchFieldDefinitions,\n\t\t},\n\t\treadFields,\n\t\tpatchFields,\n\t};\n}\n\nexport function validateEditorDraftPatch(input: {\n\tpatch: unknown;\n\tcollection: CollectionWithFields;\n\tallowedFields: ReadonlySet<string>;\n}): EditorDraftPatchEffect | EditorDraftValidationError {\n\tconst structural = validateEditorDraftPatchEffect(input.patch);\n\tif (!structural.valid || !isEditorDraftPatchEffect(input.patch))\n\t\treturn fail(\"EDITOR_DRAFT_INVALID\", \"Plugin returned an invalid editor draft patch\");\n\tconst patch = input.patch;\n\tconst bySlug = new Map(input.collection.fields.map((field) => [field.slug, field]));\n\tfor (const operation of patch.operations) {\n\t\tif (!input.allowedFields.has(operation.field)) {\n\t\t\treturn fail(\n\t\t\t\t\"EDITOR_DRAFT_FIELD_FORBIDDEN\",\n\t\t\t\t`Editor draft field '${operation.field}' is not allowed`,\n\t\t\t);\n\t\t}\n\t\tconst field = bySlug.get(operation.field);\n\t\tif (!field || field.unsupportedType) {\n\t\t\treturn fail(\n\t\t\t\t\"EDITOR_DRAFT_UNSUPPORTED_FIELD_TYPE\",\n\t\t\t\t`Editor draft field '${operation.field}' has an unsupported type`,\n\t\t\t);\n\t\t}\n\t\tconst value = operation.op === \"clear\" ? null : operation.value;\n\t\tif (!generateFieldSchema(field).safeParse(value).success) {\n\t\t\treturn fail(\"EDITOR_DRAFT_INVALID\", `Editor draft field '${operation.field}' is invalid`);\n\t\t}\n\t\tconst fieldSize = jsonBytes(value);\n\t\tif (fieldSize === null || fieldSize > EDITOR_DRAFT_LIMITS.maxFieldBytes) {\n\t\t\treturn fail(\n\t\t\t\t\"EDITOR_DRAFT_TOO_LARGE\",\n\t\t\t\t`Editor draft field '${operation.field}' exceeds the size limit`,\n\t\t\t);\n\t\t}\n\t}\n\treturn patch;\n}\n","import { getLocaleDir, resolveLocale } from \"@emdash-cms/admin/locales\";\nimport { Permissions, type Permission, type RoleLevel } from \"@emdash-cms/auth\";\nimport { validateContentEditorPanelInteraction } from \"@emdash-cms/blocks/server\";\n\nimport { requirePerm, requireOwnerPerm } from \"../api/authorize.js\";\nimport { apiError, apiSuccess } from \"../api/error.js\";\nimport { requireScope } from \"../auth/scopes.js\";\nimport type { EmDashRuntime, PluginEditorExtensionDispatch } from \"../emdash-runtime.js\";\nimport {\n\tvalidateEditorDraftPatch,\n\tvalidateEditorDraftRequest,\n\ttype ValidatedEditorDraftRequest,\n} from \"./editor-draft.js\";\nimport { pluginRouteResponseFromWire, pluginRouteResponseToWire } from \"./route-wire.js\";\nimport { parseDeclaredPluginRouteInput, PluginRouteRequestError } from \"./route-wire.js\";\nimport type { PluginContentCacheInvalidator, RouteMeta } from \"./routes.js\";\nimport type { UserInfo } from \"./types.js\";\n\nfunction editorDraftErrorResponse(error: { code: string; message: string }): Response {\n\tconst status =\n\t\terror.code === \"EDITOR_DRAFT_STALE\"\n\t\t\t? 409\n\t\t\t: error.code === \"EDITOR_DRAFT_FIELD_FORBIDDEN\" ||\n\t\t\t\t  error.code === \"EDITOR_DRAFT_CAPABILITY_REQUIRED\"\n\t\t\t\t? 403\n\t\t\t\t: error.code === \"EDITOR_DRAFT_TOO_LARGE\"\n\t\t\t\t\t? 413\n\t\t\t\t\t: error.code === \"EDITOR_DRAFT_UNSUPPORTED_FIELD_TYPE\"\n\t\t\t\t\t\t? 422\n\t\t\t\t\t\t: 400;\n\treturn apiError(error.code, error.message, status);\n}\n\nfunction toRoleLevel(value: number): RoleLevel | null {\n\tif (value === 10 || value === 20 || value === 30 || value === 40 || value === 50) {\n\t\treturn value;\n\t}\n\treturn null;\n}\n\nfunction isRecord(value: unknown): value is Record<string, unknown> {\n\treturn typeof value === \"object\" && value !== null && !Array.isArray(value);\n}\n\nfunction isPermission(value: string): value is Permission {\n\treturn Object.hasOwn(Permissions, value);\n}\n\nfunction authorizePrivatePluginRouteRequest(\n\trouteMeta: RouteMeta,\n\trequest: Request,\n\tuser?: UserInfo | null,\n\ttokenScopes?: string[],\n): Response | null {\n\tconst permission = routeMeta.permission ?? \"plugins:manage\";\n\tif (!isPermission(permission)) {\n\t\treturn apiError(\"INVALID_PLUGIN_ROUTE\", \"Plugin route declares an invalid permission\", 500);\n\t}\n\n\tlet permissionUser: { id: string; role: RoleLevel } | null | undefined;\n\tif (user) {\n\t\tconst role = toRoleLevel(user.role);\n\t\tif (role === null) {\n\t\t\treturn apiError(\"INVALID_USER\", \"Authenticated user has an invalid role\", 500);\n\t\t}\n\t\tpermissionUser = { id: user.id, role };\n\t} else {\n\t\tpermissionUser = user;\n\t}\n\n\tconst denied = requirePerm(permissionUser, permission);\n\tif (denied) return denied;\n\tconst scopeError = requireScope({ tokenScopes }, \"admin\");\n\tif (scopeError) return scopeError;\n\tif (!tokenScopes && request.headers.get(\"X-EmDash-Request\") !== \"1\") {\n\t\treturn apiError(\"CSRF_REJECTED\", \"Missing required header\", 403);\n\t}\n\treturn null;\n}\n\nexport interface PluginApiRequestContext {\n\truntime: EmDashRuntime;\n\tpluginId: string;\n\tpath: string;\n\trequest: Request;\n\tuser?: UserInfo | null;\n\ttokenScopes?: string[];\n\tinvalidateContentCache?: PluginContentCacheInvalidator;\n\teditorDispatch?: PluginEditorExtensionDispatch;\n}\n\n/** Dispatch a request through the production plugin-route policy boundary. */\nexport async function dispatchPluginApiRequest({\n\truntime,\n\tpluginId,\n\tpath,\n\trequest,\n\tuser,\n\ttokenScopes,\n\tinvalidateContentCache,\n\teditorDispatch,\n}: PluginApiRequestContext): Promise<Response> {\n\tconst method = request.method.toUpperCase();\n\tconst routeMeta = runtime.getPluginRouteMeta(pluginId, path);\n\tif (!routeMeta) return apiError(\"NOT_FOUND\", \"Plugin route not found\", 404);\n\n\tif (!routeMeta.public) {\n\t\tconst denied = authorizePrivatePluginRouteRequest(routeMeta, request, user, tokenScopes);\n\t\tif (denied) return denied;\n\t}\n\tif (routeMeta.methods && !routeMeta.methods.some((allowed) => allowed === method)) {\n\t\tconst response = apiError(\"METHOD_NOT_ALLOWED\", \"Method not allowed\", 405);\n\t\tresponse.headers.set(\"Allow\", routeMeta.methods.join(\", \"));\n\t\treturn response;\n\t}\n\n\tconst caller = routeMeta.public ? undefined : (user ?? undefined);\n\tconst result = await runtime.handlePluginApiRoute(\n\t\tpluginId,\n\t\tmethod,\n\t\tpath,\n\t\trequest,\n\t\tcaller,\n\t\tinvalidateContentCache,\n\t\teditorDispatch,\n\t);\n\tif (!result.success) {\n\t\tconst code = result.error?.code ?? \"PLUGIN_ERROR\";\n\t\tconst message =\n\t\t\tcode === \"INTERNAL_ERROR\"\n\t\t\t\t? \"Plugin route error\"\n\t\t\t\t: (result.error?.message ?? \"Plugin route error\");\n\t\tconst status = (result as { status?: number }).status ?? (code === \"NOT_FOUND\" ? 404 : 400);\n\t\treturn apiError(code, message, status);\n\t}\n\n\tlet response: Response;\n\tif (routeMeta.response === \"raw\") {\n\t\ttry {\n\t\t\tresponse = pluginRouteResponseFromWire(\n\t\t\t\tawait pluginRouteResponseToWire(\n\t\t\t\t\tresult.data,\n\t\t\t\t\trouteMeta.public ? { publicRequestUrl: request.url } : { allowExternalLocation: true },\n\t\t\t\t),\n\t\t\t\tmethod,\n\t\t\t);\n\t\t} catch (error) {\n\t\t\tconsole.error(`[plugin:${pluginId}] Invalid raw route response:`, error);\n\t\t\treturn apiError(\"INVALID_PLUGIN_RESPONSE\", \"Plugin returned an invalid response\", 500);\n\t\t}\n\t} else {\n\t\tresponse = apiSuccess(result.data);\n\t}\n\tif (\n\t\tresponse.ok &&\n\t\trouteMeta.public &&\n\t\trouteMeta.cacheControl &&\n\t\t(method === \"GET\" || method === \"HEAD\")\n\t) {\n\t\tresponse.headers.set(\"Cache-Control\", routeMeta.cacheControl);\n\t} else {\n\t\tresponse.headers.set(\"Cache-Control\", \"private, no-store\");\n\t}\n\treturn response;\n}\n\nexport interface PluginEditorExtensionApiRequestContext {\n\truntime: EmDashRuntime;\n\tpluginId: string;\n\tkind: \"panel\" | \"action\";\n\textensionId: string;\n\tcollection: string;\n\tentryId: string;\n\trequest: Request;\n\tuser?: UserInfo | null;\n\ttokenScopes?: string[];\n\tinvalidateContentCache?: PluginContentCacheInvalidator;\n}\n\nconst EDITOR_EXTENSION_REQUEST_MAX_BYTES = 256 * 1024;\n\n/** Dispatch a saved-entry extension through ownership, route, and isolate policy. */\nexport async function dispatchPluginEditorExtensionApiRequest({\n\truntime,\n\tpluginId,\n\tkind,\n\textensionId,\n\tcollection,\n\tentryId,\n\trequest,\n\tuser,\n\ttokenScopes,\n\tinvalidateContentCache,\n}: PluginEditorExtensionApiRequestContext): Promise<Response> {\n\tconst definition = runtime.getPluginEditorExtension(pluginId, kind, extensionId, collection);\n\tif (!definition) return apiError(\"NOT_FOUND\", \"Plugin editor extension not found\", 404);\n\n\tconst routeMeta = runtime.getPluginRouteMeta(pluginId, definition.extension.route);\n\tif (!routeMeta || routeMeta.public) {\n\t\treturn apiError(\n\t\t\t\"INVALID_PLUGIN_EDITOR_EXTENSION\",\n\t\t\t\"Plugin editor extension must reference a private route\",\n\t\t\t500,\n\t\t);\n\t}\n\tconst denied = authorizePrivatePluginRouteRequest(routeMeta, request, user, tokenScopes);\n\tif (denied) return denied;\n\n\tconst requestedLocale = new URL(request.url).searchParams.get(\"locale\") || undefined;\n\tconst contentResult = await runtime.handleContentGet(collection, entryId, requestedLocale);\n\tif (!contentResult.success) {\n\t\treturn contentResult.error?.code === \"NOT_FOUND\"\n\t\t\t? apiError(\"NOT_FOUND\", \"Content item not found\", 404)\n\t\t\t: apiError(\"CONTENT_GET_ERROR\", \"Failed to load content item\", 500);\n\t}\n\tconst contentData = contentResult.data;\n\tconst item =\n\t\ttypeof contentData === \"object\" && contentData !== null && \"item\" in contentData\n\t\t\t? contentData.item\n\t\t\t: null;\n\tif (typeof item !== \"object\" || item === null) {\n\t\treturn apiError(\"CONTENT_GET_ERROR\", \"Failed to load content item\", 500);\n\t}\n\tconst authorId = \"authorId\" in item && typeof item.authorId === \"string\" ? item.authorId : \"\";\n\tlet ownershipUser: { id: string; role: RoleLevel } | null | undefined =\n\t\tuser == null ? user : undefined;\n\tif (user) {\n\t\tconst ownerRole = toRoleLevel(user.role);\n\t\tif (ownerRole === null) {\n\t\t\treturn apiError(\"INVALID_USER\", \"Authenticated user has an invalid role\", 500);\n\t\t}\n\t\townershipUser = { id: user.id, role: ownerRole };\n\t}\n\tconst ownershipDenied = requireOwnerPerm(\n\t\townershipUser,\n\t\tauthorId,\n\t\t\"content:edit_own\",\n\t\t\"content:edit_any\",\n\t);\n\tif (ownershipDenied) return ownershipDenied;\n\n\tconst canonicalId = \"id\" in item && typeof item.id === \"string\" ? item.id : null;\n\tconst canonicalLocale = \"locale\" in item && typeof item.locale === \"string\" ? item.locale : null;\n\tconst version = \"version\" in item && typeof item.version === \"number\" ? item.version : null;\n\tconst baseRevision =\n\t\ttypeof contentData === \"object\" &&\n\t\tcontentData !== null &&\n\t\t\"_rev\" in contentData &&\n\t\ttypeof contentData._rev === \"string\"\n\t\t\t? contentData._rev\n\t\t\t: null;\n\tif (!canonicalId || version === null) {\n\t\treturn apiError(\"CONTENT_GET_ERROR\", \"Content item has invalid identity\", 500);\n\t}\n\n\tlet input: Record<string, unknown>;\n\tlet editorBody: unknown;\n\ttry {\n\t\teditorBody = await parseDeclaredPluginRouteInput(request, {\n\t\t\tbody: \"json\",\n\t\t\tmaxBytes: EDITOR_EXTENSION_REQUEST_MAX_BYTES,\n\t\t});\n\t} catch (error) {\n\t\tif (error instanceof PluginRouteRequestError) {\n\t\t\treturn apiError(\n\t\t\t\terror.status === 413 ? \"EDITOR_DRAFT_TOO_LARGE\" : \"INVALID_REQUEST\",\n\t\t\t\terror.status === 413\n\t\t\t\t\t? \"Editor interaction exceeds the size limit\"\n\t\t\t\t\t: \"Invalid editor interaction\",\n\t\t\t\terror.status,\n\t\t\t);\n\t\t}\n\t\treturn apiError(\"INVALID_REQUEST\", \"Editor interaction could not be read\", 400);\n\t}\n\tif (kind === \"panel\") {\n\t\tif (!isRecord(editorBody)) {\n\t\t\treturn apiError(\"INVALID_REQUEST\", \"Editor panel interaction must be an object\", 400);\n\t\t}\n\t\tinput = editorBody;\n\t\tconst validation = validateContentEditorPanelInteraction(input);\n\t\tif (!validation.valid) {\n\t\t\treturn apiError(\"INVALID_PLUGIN_UI_CONTEXT\", \"Invalid editor panel interaction\", 400);\n\t\t}\n\t} else {\n\t\tif (!isRecord(editorBody)) {\n\t\t\treturn apiError(\"INVALID_REQUEST\", \"Invalid editor action interaction\", 400);\n\t\t}\n\t\tinput = {\n\t\t\ttype: \"editor_action\",\n\t\t\t...(Object.hasOwn(editorBody, \"draft\") ? { draft: editorBody.draft } : {}),\n\t\t};\n\t}\n\n\tlet validatedDraft: ValidatedEditorDraftRequest | null = null;\n\tif (input.draft !== undefined) {\n\t\tif (!baseRevision) {\n\t\t\treturn apiError(\"EDITOR_DRAFT_INVALID\", \"Content item has no draft revision identity\", 409);\n\t\t}\n\t\tconst collectionSchema = await runtime.getPluginEditorDraftSchema(collection);\n\t\tif (!collectionSchema) return apiError(\"NOT_FOUND\", \"Collection not found\", 404);\n\t\tconst draft = validateEditorDraftRequest({\n\t\t\trequest: input.draft,\n\t\t\tcollection: collectionSchema,\n\t\t\tentry: { id: canonicalId, locale: canonicalLocale, revision: baseRevision },\n\t\t\treadSelector: definition.extension.draft?.read,\n\t\t\tpatchSelector: definition.extension.draft?.patch,\n\t\t\tcanRead: definition.capabilities.includes(\"admin.editor-draft:read\"),\n\t\t\tcanPatch: definition.capabilities.includes(\"admin.editor-draft:patch\"),\n\t\t});\n\t\tif (\"code\" in draft) {\n\t\t\tconsole.warn(\n\t\t\t\t`[plugin:${pluginId}] Editor draft ${kind}/${extensionId} rejected: ${draft.code}`,\n\t\t\t);\n\t\t\treturn editorDraftErrorResponse(draft);\n\t\t}\n\t\tvalidatedDraft = draft;\n\t\tinput = { ...input, draft: draft.snapshot };\n\t}\n\n\tconst headers = new Headers(request.headers);\n\theaders.delete(\"content-length\");\n\theaders.delete(\"content-encoding\");\n\theaders.set(\"Content-Type\", \"application/json\");\n\tconst pluginRequest = new Request(request.url, {\n\t\tmethod: \"POST\",\n\t\theaders,\n\t\tbody: JSON.stringify(input),\n\t});\n\tconst locale = resolveLocale(request);\n\tconst response = await dispatchPluginApiRequest({\n\t\truntime,\n\t\tpluginId,\n\t\tpath: definition.extension.route,\n\t\trequest: pluginRequest,\n\t\tuser,\n\t\ttokenScopes,\n\t\tinvalidateContentCache,\n\t\teditorDispatch: {\n\t\t\tkind,\n\t\t\tpolicy: definition.policy,\n\t\t\tui: {\n\t\t\t\tsurface: kind === \"panel\" ? \"content-editor-panel\" : \"content-editor-action\",\n\t\t\t\tlocale,\n\t\t\t\tdirection: getLocaleDir(locale),\n\t\t\t\tcontentLocale: canonicalLocale ?? undefined,\n\t\t\t\textensionId,\n\t\t\t\tentry: {\n\t\t\t\t\tcollection,\n\t\t\t\t\tid: canonicalId,\n\t\t\t\t\tlocale: canonicalLocale,\n\t\t\t\t\tversion,\n\t\t\t\t},\n\t\t\t},\n\t\t},\n\t});\n\tif (!response.ok) return response;\n\tconst envelope: unknown = await response.clone().json();\n\tif (!isRecord(envelope) || !isRecord(envelope.data)) {\n\t\treturn apiError(\"INVALID_PLUGIN_RESPONSE\", \"Plugin returned an invalid response\", 502);\n\t}\n\tconst data = envelope.data;\n\tif (data.patch === undefined && !validatedDraft) return response;\n\tif (data.patch !== undefined && !validatedDraft) {\n\t\treturn apiError(\n\t\t\t\"EDITOR_DRAFT_INVALID\",\n\t\t\t\"Plugin returned an editor draft patch without a draft invocation\",\n\t\t\t400,\n\t\t);\n\t}\n\tif (data.patch !== undefined) {\n\t\tconst collectionSchema = await runtime.getPluginEditorDraftSchema(collection);\n\t\tif (!collectionSchema) return apiError(\"NOT_FOUND\", \"Collection not found\", 404);\n\t\tconst patch = validateEditorDraftPatch({\n\t\t\tpatch: data.patch,\n\t\t\tcollection: collectionSchema,\n\t\t\tallowedFields: validatedDraft?.patchFields ?? new Set(),\n\t\t});\n\t\tif (\"code\" in patch) {\n\t\t\tconsole.warn(\n\t\t\t\t`[plugin:${pluginId}] Editor draft ${kind}/${extensionId} rejected: ${patch.code}`,\n\t\t\t);\n\t\t\treturn editorDraftErrorResponse(patch);\n\t\t}\n\t\tdata.patch = patch;\n\t}\n\tconst finalResponse = apiSuccess({ ...data, editorInvocation: validatedDraft?.receipt });\n\tfinalResponse.headers.set(\"Cache-Control\", \"private, no-store\");\n\treturn finalResponse;\n}\n"],"mappings":";;;;;;;;;;AAeA,MAAa,sBAAsB;CAClC,WAAW;CACX,kBAAkB,MAAM;CACxB,eAAe,KAAK;CACpB;AAgCD,MAAM,UAAU,IAAI,aAAa;AACjC,MAAM,qBAAqB;AAE3B,SAASA,WAAS,OAAkD;AACnE,QAAO,OAAO,UAAU,YAAY,UAAU,QAAQ,CAAC,MAAM,QAAQ,MAAM;;AAG5E,SAAS,sBAAsB,OAA8C;AAC5E,QACCA,WAAS,MAAM,IACf,OAAO,MAAM,eAAe,YAC5B,OAAO,MAAM,YAAY,aACxB,MAAM,WAAW,QAAQ,OAAO,MAAM,WAAW,aAClD,OAAO,MAAM,iBAAiB,YAC9B,OAAO,MAAM,eAAe,YAC5B,OAAO,MAAM,iBAAiB,YAC9BA,WAAS,MAAM,OAAO;;AAIxB,SAAS,UAAU,OAA+B;AACjD,KAAI;AACH,SAAO,QAAQ,OAAO,KAAK,UAAU,MAAM,CAAC,CAAC;SACtC;AACP,SAAO;;;AAIT,SAAS,eACR,YACA,UACc;CACd,MAAM,WAAW,IAAI,IAAI,UAAU,UAAU,EAAE,CAAC;AAChD,KAAI,UAAU,cACb;OAAK,MAAM,SAAS,WAAW,OAC9B,KAAI,MAAM,aAAc,UAAS,IAAI,MAAM,KAAK;;AAGlD,QAAO;;AAGR,SAAS,cAAc,OAA0C;AAChE,QAAO;EACN,MAAM,MAAM;EACZ,OAAO,MAAM;EACb,MAAM,MAAM;EACZ,UAAU,MAAM;EAChB,cAAc,MAAM;EACpB,GAAI,MAAM,aAAa,EAAE,YAAY,EAAE,GAAG,MAAM,YAAY,EAAE,GAAG,EAAE;EACnE;;AAGF,SAAS,KAAK,MAA4B,SAA6C;AACtF,QAAO;EAAE;EAAM;EAAS;;AAGzB,SAAgB,2BAA2B,OAQkB;AAC5D,KAAI,CAAC,sBAAsB,MAAM,QAAQ,CACxC,QAAO,KAAK,wBAAwB,gCAAgC;CAErE,MAAM,UAAU,MAAM;AACtB,KACC,QAAQ,eAAe,MAAM,WAAW,QACxC,QAAQ,YAAY,MAAM,MAAM,MAChC,QAAQ,WAAW,MAAM,MAAM,OAE/B,QAAO,KAAK,sBAAsB,iCAAiC;AAEpE,KAAI,QAAQ,iBAAiB,MAAM,MAAM,SACxC,QAAO,KAAK,sBAAsB,sCAAsC;AAEzE,KACC,CAAC,OAAO,cAAc,QAAQ,WAAW,IACzC,QAAQ,aAAa,KACrB,OAAO,QAAQ,iBAAiB,YAChC,CAAC,mBAAmB,KAAK,QAAQ,aAAa,CAE9C,QAAO,KAAK,wBAAwB,2CAA2C;CAEhF,MAAM,OAAO,UAAU,QAAQ;AAC/B,KAAI,SAAS,KACZ,QAAO,KAAK,wBAAwB,kDAAkD;AACvF,KAAI,OAAO,oBAAoB,iBAC9B,QAAO,KAAK,0BAA0B,+CAA+C;CAGtF,MAAM,aAAa,eAAe,MAAM,YAAY,MAAM,aAAa;CACvE,MAAM,cAAc,eAAe,MAAM,YAAY,MAAM,cAAc;AACzE,KACC,WAAW,OAAO,oBAAoB,aACtC,YAAY,OAAO,oBAAoB,UAEvC,QAAO,KAAK,0BAA0B,gDAAgD;CAEvF,MAAM,WAAW,OAAO,KAAK,QAAQ,OAAO;AAC5C,KAAI,SAAS,SAAS,oBAAoB,UACzC,QAAO,KAAK,0BAA0B,gDAAgD;AAEvF,KAAI,SAAS,SAAS,KAAK,CAAC,MAAM,QACjC,QAAO,KAAK,oCAAoC,4CAA4C;CAE7F,MAAM,SAAS,IAAI,IAAI,MAAM,WAAW,OAAO,KAAK,UAAU,CAAC,MAAM,MAAM,MAAM,CAAC,CAAC;CACnF,MAAM,wBAAwB,MAAM,KAAK,cAAc,SAAS,OAAO,IAAI,KAAK,CAAC,CAC/E,QAAQ,UAA0B,QAAQ,SAAS,CAAC,MAAM,gBAAgB,CAAC,CAC3E,IAAI,cAAc;CACpB,MAAM,SAAkC,EAAE;CAC1C,MAAM,mBAAiD,EAAE;AACzD,MAAK,MAAM,QAAQ,UAAU;AAC5B,MAAI,CAAC,WAAW,IAAI,KAAK,CACxB,QAAO,KAAK,gCAAgC,uBAAuB,KAAK,kBAAkB;EAE3F,MAAM,QAAQ,OAAO,IAAI,KAAK;AAC9B,MAAI,CAAC,SAAS,MAAM,gBACnB,QAAO,KACN,uCACA,uBAAuB,KAAK,2BAC5B;EAEF,MAAM,YAAY,UAAU,QAAQ,OAAO,MAAM;AACjD,MAAI,cAAc,KACjB,QAAO,KAAK,wBAAwB,uBAAuB,KAAK,cAAc;AAC/E,MAAI,YAAY,oBAAoB,cACnC,QAAO,KAAK,0BAA0B,uBAAuB,KAAK,0BAA0B;AAE7F,MAAI,CAAC,oBAAoB,MAAM,CAAC,UAAU,QAAQ,OAAO,MAAM,CAAC,QAC/D,QAAO,KAAK,wBAAwB,uBAAuB,KAAK,cAAc;AAE/E,SAAO,QAAQ,QAAQ,OAAO;AAC9B,mBAAiB,KAAK,cAAc,MAAM,CAAC;;AAE5C,KAAI,MAAM,gBAAgB,CAAC,MAAM,QAChC,QAAO,KAAK,oCAAoC,4CAA4C;AAE7F,KAAI,MAAM,iBAAiB,CAAC,MAAM,SACjC,QAAO,KAAK,oCAAoC,+CAA+C;AAGhG,QAAO;EACN,UAAU;GACT,YAAY,MAAM,WAAW;GAC7B,SAAS,MAAM,MAAM;GACrB,QAAQ,MAAM,MAAM;GACpB,cAAc,MAAM,MAAM;GAC1B,cAAc,QAAQ;GACtB;GACA;GACA;EACD,SAAS;GACR,SAAS,MAAM,MAAM;GACrB,QAAQ,MAAM,MAAM;GACpB,cAAc,MAAM,MAAM;GAC1B,YAAY,QAAQ;GACpB,cAAc,QAAQ;GACtB,kBAAkB;GAClB;EACD;EACA;EACA;;AAGF,SAAgB,yBAAyB,OAIe;AAEvD,KAAI,CADe,+BAA+B,MAAM,MAAM,CAC9C,SAAS,CAAC,yBAAyB,MAAM,MAAM,CAC9D,QAAO,KAAK,wBAAwB,gDAAgD;CACrF,MAAM,QAAQ,MAAM;CACpB,MAAM,SAAS,IAAI,IAAI,MAAM,WAAW,OAAO,KAAK,UAAU,CAAC,MAAM,MAAM,MAAM,CAAC,CAAC;AACnF,MAAK,MAAM,aAAa,MAAM,YAAY;AACzC,MAAI,CAAC,MAAM,cAAc,IAAI,UAAU,MAAM,CAC5C,QAAO,KACN,gCACA,uBAAuB,UAAU,MAAM,kBACvC;EAEF,MAAM,QAAQ,OAAO,IAAI,UAAU,MAAM;AACzC,MAAI,CAAC,SAAS,MAAM,gBACnB,QAAO,KACN,uCACA,uBAAuB,UAAU,MAAM,2BACvC;EAEF,MAAM,QAAQ,UAAU,OAAO,UAAU,OAAO,UAAU;AAC1D,MAAI,CAAC,oBAAoB,MAAM,CAAC,UAAU,MAAM,CAAC,QAChD,QAAO,KAAK,wBAAwB,uBAAuB,UAAU,MAAM,cAAc;EAE1F,MAAM,YAAY,UAAU,MAAM;AAClC,MAAI,cAAc,QAAQ,YAAY,oBAAoB,cACzD,QAAO,KACN,0BACA,uBAAuB,UAAU,MAAM,0BACvC;;AAGH,QAAO;;;;;AC7OR,SAAS,yBAAyB,OAAoD;CACrF,MAAM,SACL,MAAM,SAAS,uBACZ,MACA,MAAM,SAAS,kCACd,MAAM,SAAS,qCACf,MACA,MAAM,SAAS,2BACd,MACA,MAAM,SAAS,wCACd,MACA;AACP,QAAO,SAAS,MAAM,MAAM,MAAM,SAAS,OAAO;;AAGnD,SAASC,cAAY,OAAiC;AACrD,KAAI,UAAU,MAAM,UAAU,MAAM,UAAU,MAAM,UAAU,MAAM,UAAU,GAC7E,QAAO;AAER,QAAO;;AAGR,SAAS,SAAS,OAAkD;AACnE,QAAO,OAAO,UAAU,YAAY,UAAU,QAAQ,CAAC,MAAM,QAAQ,MAAM;;AAG5E,SAAS,aAAa,OAAoC;AACzD,QAAO,OAAO,OAAO,aAAa,MAAM;;AAGzC,SAAS,mCACR,WACA,SACA,MACA,aACkB;CAClB,MAAM,aAAa,UAAU,cAAc;AAC3C,KAAI,CAAC,aAAa,WAAW,CAC5B,QAAO,SAAS,wBAAwB,+CAA+C,IAAI;CAG5F,IAAI;AACJ,KAAI,MAAM;EACT,MAAM,OAAOA,cAAY,KAAK,KAAK;AACnC,MAAI,SAAS,KACZ,QAAO,SAAS,gBAAgB,0CAA0C,IAAI;AAE/E,mBAAiB;GAAE,IAAI,KAAK;GAAI;GAAM;OAEtC,kBAAiB;CAGlB,MAAM,SAAS,YAAY,gBAAgB,WAAW;AACtD,KAAI,OAAQ,QAAO;CACnB,MAAM,aAAa,aAAa,EAAE,aAAa,EAAE,QAAQ;AACzD,KAAI,WAAY,QAAO;AACvB,KAAI,CAAC,eAAe,QAAQ,QAAQ,IAAI,mBAAmB,KAAK,IAC/D,QAAO,SAAS,iBAAiB,2BAA2B,IAAI;AAEjE,QAAO;;;AAeR,eAAsB,yBAAyB,EAC9C,SACA,UACA,MACA,SACA,MACA,aACA,wBACA,kBAC8C;CAC9C,MAAM,SAAS,QAAQ,OAAO,aAAa;CAC3C,MAAM,YAAY,QAAQ,mBAAmB,UAAU,KAAK;AAC5D,KAAI,CAAC,UAAW,QAAO,SAAS,aAAa,0BAA0B,IAAI;AAE3E,KAAI,CAAC,UAAU,QAAQ;EACtB,MAAM,SAAS,mCAAmC,WAAW,SAAS,MAAM,YAAY;AACxF,MAAI,OAAQ,QAAO;;AAEpB,KAAI,UAAU,WAAW,CAAC,UAAU,QAAQ,MAAM,YAAY,YAAY,OAAO,EAAE;EAClF,MAAM,WAAW,SAAS,sBAAsB,sBAAsB,IAAI;AAC1E,WAAS,QAAQ,IAAI,SAAS,UAAU,QAAQ,KAAK,KAAK,CAAC;AAC3D,SAAO;;CAGR,MAAM,SAAS,UAAU,SAAS,SAAa,QAAQ;CACvD,MAAM,SAAS,MAAM,QAAQ,qBAC5B,UACA,QACA,MACA,SACA,QACA,wBACA,eACA;AACD,KAAI,CAAC,OAAO,SAAS;EACpB,MAAM,OAAO,OAAO,OAAO,QAAQ;AAMnC,SAAO,SAAS,MAJf,SAAS,mBACN,uBACC,OAAO,OAAO,WAAW,sBACd,OAA+B,WAAW,SAAS,cAAc,MAAM,KACjD;;CAGvC,IAAI;AACJ,KAAI,UAAU,aAAa,MAC1B,KAAI;AACH,aAAW,4BACV,MAAM,0BACL,OAAO,MACP,UAAU,SAAS,EAAE,kBAAkB,QAAQ,KAAK,GAAG,EAAE,uBAAuB,MAAM,CACtF,EACD,OACA;UACO,OAAO;AACf,UAAQ,MAAM,WAAW,SAAS,gCAAgC,MAAM;AACxE,SAAO,SAAS,2BAA2B,uCAAuC,IAAI;;KAGvF,YAAW,WAAW,OAAO,KAAK;AAEnC,KACC,SAAS,MACT,UAAU,UACV,UAAU,iBACT,WAAW,SAAS,WAAW,QAEhC,UAAS,QAAQ,IAAI,iBAAiB,UAAU,aAAa;KAE7D,UAAS,QAAQ,IAAI,iBAAiB,oBAAoB;AAE3D,QAAO;;AAgBR,MAAM,qCAAqC,MAAM;;AAGjD,eAAsB,wCAAwC,EAC7D,SACA,UACA,MACA,aACA,YACA,SACA,SACA,MACA,aACA,0BAC6D;CAC7D,MAAM,aAAa,QAAQ,yBAAyB,UAAU,MAAM,aAAa,WAAW;AAC5F,KAAI,CAAC,WAAY,QAAO,SAAS,aAAa,qCAAqC,IAAI;CAEvF,MAAM,YAAY,QAAQ,mBAAmB,UAAU,WAAW,UAAU,MAAM;AAClF,KAAI,CAAC,aAAa,UAAU,OAC3B,QAAO,SACN,mCACA,0DACA,IACA;CAEF,MAAM,SAAS,mCAAmC,WAAW,SAAS,MAAM,YAAY;AACxF,KAAI,OAAQ,QAAO;CAEnB,MAAM,kBAAkB,IAAI,IAAI,QAAQ,IAAI,CAAC,aAAa,IAAI,SAAS,IAAI;CAC3E,MAAM,gBAAgB,MAAM,QAAQ,iBAAiB,YAAY,SAAS,gBAAgB;AAC1F,KAAI,CAAC,cAAc,QAClB,QAAO,cAAc,OAAO,SAAS,cAClC,SAAS,aAAa,0BAA0B,IAAI,GACpD,SAAS,qBAAqB,+BAA+B,IAAI;CAErE,MAAM,cAAc,cAAc;CAClC,MAAM,OACL,OAAO,gBAAgB,YAAY,gBAAgB,QAAQ,UAAU,cAClE,YAAY,OACZ;AACJ,KAAI,OAAO,SAAS,YAAY,SAAS,KACxC,QAAO,SAAS,qBAAqB,+BAA+B,IAAI;CAEzE,MAAM,WAAW,cAAc,QAAQ,OAAO,KAAK,aAAa,WAAW,KAAK,WAAW;CAC3F,IAAI,gBACH,QAAQ,OAAO,OAAO;AACvB,KAAI,MAAM;EACT,MAAM,YAAYA,cAAY,KAAK,KAAK;AACxC,MAAI,cAAc,KACjB,QAAO,SAAS,gBAAgB,0CAA0C,IAAI;AAE/E,kBAAgB;GAAE,IAAI,KAAK;GAAI,MAAM;GAAW;;CAEjD,MAAM,kBAAkB,iBACvB,eACA,UACA,oBACA,mBACA;AACD,KAAI,gBAAiB,QAAO;CAE5B,MAAM,cAAc,QAAQ,QAAQ,OAAO,KAAK,OAAO,WAAW,KAAK,KAAK;CAC5E,MAAM,kBAAkB,YAAY,QAAQ,OAAO,KAAK,WAAW,WAAW,KAAK,SAAS;CAC5F,MAAM,UAAU,aAAa,QAAQ,OAAO,KAAK,YAAY,WAAW,KAAK,UAAU;CACvF,MAAM,eACL,OAAO,gBAAgB,YACvB,gBAAgB,QAChB,UAAU,eACV,OAAO,YAAY,SAAS,WACzB,YAAY,OACZ;AACJ,KAAI,CAAC,eAAe,YAAY,KAC/B,QAAO,SAAS,qBAAqB,qCAAqC,IAAI;CAG/E,IAAI;CACJ,IAAI;AACJ,KAAI;AACH,eAAa,MAAM,8BAA8B,SAAS;GACzD,MAAM;GACN,UAAU;GACV,CAAC;UACM,OAAO;AACf,MAAI,iBAAiB,wBACpB,QAAO,SACN,MAAM,WAAW,MAAM,2BAA2B,mBAClD,MAAM,WAAW,MACd,8CACA,8BACH,MAAM,OACN;AAEF,SAAO,SAAS,mBAAmB,wCAAwC,IAAI;;AAEhF,KAAI,SAAS,SAAS;AACrB,MAAI,CAAC,SAAS,WAAW,CACxB,QAAO,SAAS,mBAAmB,8CAA8C,IAAI;AAEtF,UAAQ;AAER,MAAI,CADe,sCAAsC,MAAM,CAC/C,MACf,QAAO,SAAS,6BAA6B,oCAAoC,IAAI;QAEhF;AACN,MAAI,CAAC,SAAS,WAAW,CACxB,QAAO,SAAS,mBAAmB,qCAAqC,IAAI;AAE7E,UAAQ;GACP,MAAM;GACN,GAAI,OAAO,OAAO,YAAY,QAAQ,GAAG,EAAE,OAAO,WAAW,OAAO,GAAG,EAAE;GACzE;;CAGF,IAAI,iBAAqD;AACzD,KAAI,MAAM,UAAU,QAAW;AAC9B,MAAI,CAAC,aACJ,QAAO,SAAS,wBAAwB,+CAA+C,IAAI;EAE5F,MAAM,mBAAmB,MAAM,QAAQ,2BAA2B,WAAW;AAC7E,MAAI,CAAC,iBAAkB,QAAO,SAAS,aAAa,wBAAwB,IAAI;EAChF,MAAM,QAAQ,2BAA2B;GACxC,SAAS,MAAM;GACf,YAAY;GACZ,OAAO;IAAE,IAAI;IAAa,QAAQ;IAAiB,UAAU;IAAc;GAC3E,cAAc,WAAW,UAAU,OAAO;GAC1C,eAAe,WAAW,UAAU,OAAO;GAC3C,SAAS,WAAW,aAAa,SAAS,0BAA0B;GACpE,UAAU,WAAW,aAAa,SAAS,2BAA2B;GACtE,CAAC;AACF,MAAI,UAAU,OAAO;AACpB,WAAQ,KACP,WAAW,SAAS,iBAAiB,KAAK,GAAG,YAAY,aAAa,MAAM,OAC5E;AACD,UAAO,yBAAyB,MAAM;;AAEvC,mBAAiB;AACjB,UAAQ;GAAE,GAAG;GAAO,OAAO,MAAM;GAAU;;CAG5C,MAAM,UAAU,IAAI,QAAQ,QAAQ,QAAQ;AAC5C,SAAQ,OAAO,iBAAiB;AAChC,SAAQ,OAAO,mBAAmB;AAClC,SAAQ,IAAI,gBAAgB,mBAAmB;CAC/C,MAAM,gBAAgB,IAAI,QAAQ,QAAQ,KAAK;EAC9C,QAAQ;EACR;EACA,MAAM,KAAK,UAAU,MAAM;EAC3B,CAAC;CACF,MAAM,SAAS,cAAc,QAAQ;CACrC,MAAM,WAAW,MAAM,yBAAyB;EAC/C;EACA;EACA,MAAM,WAAW,UAAU;EAC3B,SAAS;EACT;EACA;EACA;EACA,gBAAgB;GACf;GACA,QAAQ,WAAW;GACnB,IAAI;IACH,SAAS,SAAS,UAAU,yBAAyB;IACrD;IACA,WAAW,aAAa,OAAO;IAC/B,eAAe,mBAAmB;IAClC;IACA,OAAO;KACN;KACA,IAAI;KACJ,QAAQ;KACR;KACA;IACD;GACD;EACD,CAAC;AACF,KAAI,CAAC,SAAS,GAAI,QAAO;CACzB,MAAM,WAAoB,MAAM,SAAS,OAAO,CAAC,MAAM;AACvD,KAAI,CAAC,SAAS,SAAS,IAAI,CAAC,SAAS,SAAS,KAAK,CAClD,QAAO,SAAS,2BAA2B,uCAAuC,IAAI;CAEvF,MAAM,OAAO,SAAS;AACtB,KAAI,KAAK,UAAU,UAAa,CAAC,eAAgB,QAAO;AACxD,KAAI,KAAK,UAAU,UAAa,CAAC,eAChC,QAAO,SACN,wBACA,oEACA,IACA;AAEF,KAAI,KAAK,UAAU,QAAW;EAC7B,MAAM,mBAAmB,MAAM,QAAQ,2BAA2B,WAAW;AAC7E,MAAI,CAAC,iBAAkB,QAAO,SAAS,aAAa,wBAAwB,IAAI;EAChF,MAAM,QAAQ,yBAAyB;GACtC,OAAO,KAAK;GACZ,YAAY;GACZ,eAAe,gBAAgB,+BAAe,IAAI,KAAK;GACvD,CAAC;AACF,MAAI,UAAU,OAAO;AACpB,WAAQ,KACP,WAAW,SAAS,iBAAiB,KAAK,GAAG,YAAY,aAAa,MAAM,OAC5E;AACD,UAAO,yBAAyB,MAAM;;AAEvC,OAAK,QAAQ;;CAEd,MAAM,gBAAgB,WAAW;EAAE,GAAG;EAAM,kBAAkB,gBAAgB;EAAS,CAAC;AACxF,eAAc,QAAQ,IAAI,iBAAiB,oBAAoB;AAC/D,QAAO"}

package/dist/identity-vFbpuwfY.mjs

@@ -1,35 +0,0 @@
-import { n as MIGRATION_NAMES } from "./runner-CIltKk4i.mjs";
-import { n as VERSION } from "./version-DGh4SL8e.mjs";
-
-//#region src/migrations/identity.ts
-function encodeFingerprintInput(emdashVersion, names) {
-	const encoded = new TextEncoder().encode(JSON.stringify({
-		emdashVersion,
-		names
-	}));
-	const buffer = new ArrayBuffer(encoded.byteLength);
-	new Uint8Array(buffer).set(encoded);
-	return buffer;
-}
-function encodeHex(bytes) {
-	return Array.from(bytes, (byte) => byte.toString(16).padStart(2, "0")).join("");
-}
-async function fingerprintMigrationSet(emdashVersion, names) {
-	const digest = await crypto.subtle.digest("SHA-256", encodeFingerprintInput(emdashVersion, names));
-	return encodeHex(new Uint8Array(digest));
-}
-async function createCoreMigrationIdentity(emdashVersion, names) {
-	const nameSnapshot = Object.freeze([...names]);
-	return Object.freeze({
-		emdashVersion,
-		names: nameSnapshot,
-		fingerprint: await fingerprintMigrationSet(emdashVersion, nameSnapshot)
-	});
-}
-function getCoreMigrationIdentity() {
-	return createCoreMigrationIdentity(VERSION, MIGRATION_NAMES);
-}
-
-//#endregion
-export { fingerprintMigrationSet as n, getCoreMigrationIdentity as r, createCoreMigrationIdentity as t };
-//# sourceMappingURL=identity-vFbpuwfY.mjs.map

package/dist/identity-vFbpuwfY.mjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"identity-vFbpuwfY.mjs","names":[],"sources":["../src/migrations/identity.ts"],"sourcesContent":["import { MIGRATION_NAMES } from \"../database/migrations/runner.js\";\nimport { VERSION } from \"../version.js\";\n\nexport interface CoreMigrationIdentity {\n\temdashVersion: string;\n\tnames: readonly string[];\n\tfingerprint: string;\n}\n\nfunction encodeFingerprintInput(emdashVersion: string, names: readonly string[]): ArrayBuffer {\n\tconst encoded = new TextEncoder().encode(JSON.stringify({ emdashVersion, names }));\n\tconst buffer = new ArrayBuffer(encoded.byteLength);\n\tnew Uint8Array(buffer).set(encoded);\n\treturn buffer;\n}\n\nfunction encodeHex(bytes: Uint8Array): string {\n\treturn Array.from(bytes, (byte) => byte.toString(16).padStart(2, \"0\")).join(\"\");\n}\n\nexport async function fingerprintMigrationSet(\n\temdashVersion: string,\n\tnames: readonly string[],\n): Promise<string> {\n\tconst digest = await crypto.subtle.digest(\n\t\t\"SHA-256\",\n\t\tencodeFingerprintInput(emdashVersion, names),\n\t);\n\treturn encodeHex(new Uint8Array(digest));\n}\n\nexport async function createCoreMigrationIdentity(\n\temdashVersion: string,\n\tnames: readonly string[],\n): Promise<CoreMigrationIdentity> {\n\tconst nameSnapshot = Object.freeze([...names]);\n\treturn Object.freeze({\n\t\temdashVersion,\n\t\tnames: nameSnapshot,\n\t\tfingerprint: await fingerprintMigrationSet(emdashVersion, nameSnapshot),\n\t});\n}\n\nexport function getCoreMigrationIdentity(): Promise<CoreMigrationIdentity> {\n\treturn createCoreMigrationIdentity(VERSION, MIGRATION_NAMES);\n}\n"],"mappings":";;;;AASA,SAAS,uBAAuB,eAAuB,OAAuC;CAC7F,MAAM,UAAU,IAAI,aAAa,CAAC,OAAO,KAAK,UAAU;EAAE;EAAe;EAAO,CAAC,CAAC;CAClF,MAAM,SAAS,IAAI,YAAY,QAAQ,WAAW;AAClD,KAAI,WAAW,OAAO,CAAC,IAAI,QAAQ;AACnC,QAAO;;AAGR,SAAS,UAAU,OAA2B;AAC7C,QAAO,MAAM,KAAK,QAAQ,SAAS,KAAK,SAAS,GAAG,CAAC,SAAS,GAAG,IAAI,CAAC,CAAC,KAAK,GAAG;;AAGhF,eAAsB,wBACrB,eACA,OACkB;CAClB,MAAM,SAAS,MAAM,OAAO,OAAO,OAClC,WACA,uBAAuB,eAAe,MAAM,CAC5C;AACD,QAAO,UAAU,IAAI,WAAW,OAAO,CAAC;;AAGzC,eAAsB,4BACrB,eACA,OACiC;CACjC,MAAM,eAAe,OAAO,OAAO,CAAC,GAAG,MAAM,CAAC;AAC9C,QAAO,OAAO,OAAO;EACpB;EACA,OAAO;EACP,aAAa,MAAM,wBAAwB,eAAe,aAAa;EACvE,CAAC;;AAGH,SAAgB,2BAA2D;AAC1E,QAAO,4BAA4B,SAAS,gBAAgB"}