emdash 0.39.1 → 0.40.0

package/dist/seo-rCk6pDwT.mjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"seo-rCk6pDwT.mjs","names":[],"sources":["../src/database/repositories/seo.ts"],"sourcesContent":["import { sql, type Kysely } from \"kysely\";\n\nimport { invalidateCollectionCache } from \"../../object-cache/index.js\";\nimport { chunks, SQL_BATCH_SIZE } from \"../../utils/chunks.js\";\nimport type { Database } from \"../types.js\";\nimport type { ContentSeo, ContentSeoInput } from \"./types.js\";\n\n/** Default SEO values for content without an explicit SEO row */\nconst SEO_DEFAULTS: ContentSeo = {\n\ttitle: null,\n\tdescription: null,\n\timage: null,\n\tcanonical: null,\n\tnoIndex: false,\n};\n\n/**\n * Returns true if the input has at least one explicitly-set SEO field.\n * Used to skip no-op upserts when callers pass `{ seo: {} }`.\n */\nfunction hasAnyField(input: ContentSeoInput): boolean {\n\treturn (\n\t\tinput.title !== undefined ||\n\t\tinput.description !== undefined ||\n\t\tinput.image !== undefined ||\n\t\tinput.canonical !== undefined ||\n\t\tinput.noIndex !== undefined\n\t);\n}\n\n/**\n * Repository for SEO metadata stored in `_emdash_seo`.\n *\n * SEO data lives in a separate table keyed by (collection, content_id).\n * Only collections with `has_seo = 1` should use this — callers are\n * responsible for checking the flag before reading/writing.\n */\nexport class SeoRepository {\n\tconstructor(private db: Kysely<Database>) {}\n\n\t/**\n\t * Check whether a collection has SEO enabled (`has_seo = 1`).\n\t * Returns `false` if the collection does not exist.\n\t */\n\tasync isEnabled(collection: string): Promise<boolean> {\n\t\tconst row = await this.db\n\t\t\t.selectFrom(\"_emdash_collections\")\n\t\t\t.select(\"has_seo\")\n\t\t\t.where(\"slug\", \"=\", collection)\n\t\t\t.executeTakeFirst();\n\t\treturn row?.has_seo === 1;\n\t}\n\n\t/**\n\t * Get SEO data for a content item. Returns null defaults if no row exists.\n\t */\n\tasync get(collection: string, contentId: string): Promise<ContentSeo> {\n\t\tconst row = await this.db\n\t\t\t.selectFrom(\"_emdash_seo\")\n\t\t\t.selectAll()\n\t\t\t.where(\"collection\", \"=\", collection)\n\t\t\t.where(\"content_id\", \"=\", contentId)\n\t\t\t.executeTakeFirst();\n\n\t\tif (!row) {\n\t\t\treturn { ...SEO_DEFAULTS };\n\t\t}\n\n\t\treturn {\n\t\t\ttitle: row.seo_title ?? null,\n\t\t\tdescription: row.seo_description ?? null,\n\t\t\timage: row.seo_image ?? null,\n\t\t\tcanonical: row.seo_canonical ?? null,\n\t\t\tnoIndex: row.seo_no_index === 1,\n\t\t};\n\t}\n\n\t/**\n\t * Get SEO data for multiple content items.\n\t * Returns a Map keyed by content_id. Items without SEO rows get defaults.\n\t *\n\t * Chunks the `content_id IN (…)` clause so the total bound-parameter count\n\t * per statement (ids + the `collection = ?` filter) stays within Cloudflare\n\t * D1's 100-variable limit regardless of how many content items are passed.\n\t */\n\tasync getMany(collection: string, contentIds: string[]): Promise<Map<string, ContentSeo>> {\n\t\tconst result = new Map<string, ContentSeo>();\n\n\t\tif (contentIds.length === 0) return result;\n\n\t\t// Pre-fill with defaults so every input id has an entry even if no row exists.\n\t\tfor (const id of contentIds) {\n\t\t\tresult.set(id, { ...SEO_DEFAULTS });\n\t\t}\n\n\t\tconst uniqueContentIds = [...new Set(contentIds)];\n\t\tfor (const chunk of chunks(uniqueContentIds, SQL_BATCH_SIZE)) {\n\t\t\tconst rows = await this.db\n\t\t\t\t.selectFrom(\"_emdash_seo\")\n\t\t\t\t.selectAll()\n\t\t\t\t.where(\"collection\", \"=\", collection)\n\t\t\t\t.where(\"content_id\", \"in\", chunk)\n\t\t\t\t.execute();\n\n\t\t\tfor (const row of rows) {\n\t\t\t\tresult.set(row.content_id, {\n\t\t\t\t\ttitle: row.seo_title ?? null,\n\t\t\t\t\tdescription: row.seo_description ?? null,\n\t\t\t\t\timage: row.seo_image ?? null,\n\t\t\t\t\tcanonical: row.seo_canonical ?? null,\n\t\t\t\t\tnoIndex: row.seo_no_index === 1,\n\t\t\t\t});\n\t\t\t}\n\t\t}\n\n\t\treturn result;\n\t}\n\n\t/**\n\t * Upsert SEO data for a content item using INSERT ON CONFLICT DO UPDATE\n\t * for atomicity. Skips no-op writes when input has no fields set.\n\t */\n\tasync upsert(collection: string, contentId: string, input: ContentSeoInput): Promise<ContentSeo> {\n\t\t// Skip no-op: empty input (e.g., `{ seo: {} }` from form libs)\n\t\tif (!hasAnyField(input)) {\n\t\t\treturn this.get(collection, contentId);\n\t\t}\n\n\t\tconst now = new Date().toISOString();\n\n\t\t// Use INSERT ON CONFLICT for atomic upsert — avoids TOCTOU race\n\t\t// where two concurrent requests both see \"no row\" and both try INSERT.\n\t\t//\n\t\t// On conflict, we use COALESCE(excluded.col, current.col) so that\n\t\t// only explicitly-provided fields overwrite existing values.\n\t\tawait sql`\n\t\t\tINSERT INTO _emdash_seo (\n\t\t\t\tcollection, content_id,\n\t\t\t\tseo_title, seo_description, seo_image, seo_canonical, seo_no_index,\n\t\t\t\tcreated_at, updated_at\n\t\t\t) VALUES (\n\t\t\t\t${collection}, ${contentId},\n\t\t\t\t${input.title ?? null}, ${input.description ?? null},\n\t\t\t\t${input.image ?? null}, ${input.canonical ?? null},\n\t\t\t\t${input.noIndex ? 1 : 0},\n\t\t\t\t${now}, ${now}\n\t\t\t)\n\t\t\tON CONFLICT (collection, content_id) DO UPDATE SET\n\t\t\t\tseo_title = ${input.title !== undefined ? sql`${input.title}` : sql`_emdash_seo.seo_title`},\n\t\t\t\tseo_description = ${input.description !== undefined ? sql`${input.description}` : sql`_emdash_seo.seo_description`},\n\t\t\t\tseo_image = ${input.image !== undefined ? sql`${input.image}` : sql`_emdash_seo.seo_image`},\n\t\t\t\tseo_canonical = ${input.canonical !== undefined ? sql`${input.canonical}` : sql`_emdash_seo.seo_canonical`},\n\t\t\t\tseo_no_index = ${input.noIndex !== undefined ? sql`${input.noIndex ? 1 : 0}` : sql`_emdash_seo.seo_no_index`},\n\t\t\t\tupdated_at = ${now}\n\t\t`.execute(this.db);\n\n\t\tinvalidateCollectionCache(collection);\n\t\treturn this.get(collection, contentId);\n\t}\n\n\t/**\n\t * Delete SEO data for a content item.\n\t */\n\tasync delete(collection: string, contentId: string): Promise<void> {\n\t\tawait this.db\n\t\t\t.deleteFrom(\"_emdash_seo\")\n\t\t\t.where(\"collection\", \"=\", collection)\n\t\t\t.where(\"content_id\", \"=\", contentId)\n\t\t\t.execute();\n\t\tinvalidateCollectionCache(collection);\n\t}\n\n\t/**\n\t * Copy SEO data from one content item to another.\n\t * Used by duplicate. Clears canonical (it pointed to the original).\n\t */\n\tasync copyForDuplicate(collection: string, sourceId: string, targetId: string): Promise<void> {\n\t\tconst source = await this.get(collection, sourceId);\n\n\t\t// Only write if there's actual SEO data worth copying\n\t\tif (\n\t\t\tsource.title !== null ||\n\t\t\tsource.description !== null ||\n\t\t\tsource.image !== null ||\n\t\t\tsource.noIndex\n\t\t) {\n\t\t\tawait this.upsert(collection, targetId, {\n\t\t\t\ttitle: source.title,\n\t\t\t\tdescription: source.description,\n\t\t\t\timage: source.image,\n\t\t\t\tcanonical: null, // Don't copy canonical — it pointed to the original\n\t\t\t\tnoIndex: source.noIndex,\n\t\t\t});\n\t\t}\n\t}\n}\n"],"mappings":";;;;;;AAQA,MAAM,eAA2B;CAChC,OAAO;CACP,aAAa;CACb,OAAO;CACP,WAAW;CACX,SAAS;CACT;;;;;AAMD,SAAS,YAAY,OAAiC;AACrD,QACC,MAAM,UAAU,UAChB,MAAM,gBAAgB,UACtB,MAAM,UAAU,UAChB,MAAM,cAAc,UACpB,MAAM,YAAY;;;;;;;;;AAWpB,IAAa,gBAAb,MAA2B;CAC1B,YAAY,AAAQ,IAAsB;EAAtB;;;;;;CAMpB,MAAM,UAAU,YAAsC;AAMrD,UALY,MAAM,KAAK,GACrB,WAAW,sBAAsB,CACjC,OAAO,UAAU,CACjB,MAAM,QAAQ,KAAK,WAAW,CAC9B,kBAAkB,GACR,YAAY;;;;;CAMzB,MAAM,IAAI,YAAoB,WAAwC;EACrE,MAAM,MAAM,MAAM,KAAK,GACrB,WAAW,cAAc,CACzB,WAAW,CACX,MAAM,cAAc,KAAK,WAAW,CACpC,MAAM,cAAc,KAAK,UAAU,CACnC,kBAAkB;AAEpB,MAAI,CAAC,IACJ,QAAO,EAAE,GAAG,cAAc;AAG3B,SAAO;GACN,OAAO,IAAI,aAAa;GACxB,aAAa,IAAI,mBAAmB;GACpC,OAAO,IAAI,aAAa;GACxB,WAAW,IAAI,iBAAiB;GAChC,SAAS,IAAI,iBAAiB;GAC9B;;;;;;;;;;CAWF,MAAM,QAAQ,YAAoB,YAAwD;EACzF,MAAM,yBAAS,IAAI,KAAyB;AAE5C,MAAI,WAAW,WAAW,EAAG,QAAO;AAGpC,OAAK,MAAM,MAAM,WAChB,QAAO,IAAI,IAAI,EAAE,GAAG,cAAc,CAAC;EAGpC,MAAM,mBAAmB,CAAC,GAAG,IAAI,IAAI,WAAW,CAAC;AACjD,OAAK,MAAM,SAAS,OAAO,kBAAkB,eAAe,EAAE;GAC7D,MAAM,OAAO,MAAM,KAAK,GACtB,WAAW,cAAc,CACzB,WAAW,CACX,MAAM,cAAc,KAAK,WAAW,CACpC,MAAM,cAAc,MAAM,MAAM,CAChC,SAAS;AAEX,QAAK,MAAM,OAAO,KACjB,QAAO,IAAI,IAAI,YAAY;IAC1B,OAAO,IAAI,aAAa;IACxB,aAAa,IAAI,mBAAmB;IACpC,OAAO,IAAI,aAAa;IACxB,WAAW,IAAI,iBAAiB;IAChC,SAAS,IAAI,iBAAiB;IAC9B,CAAC;;AAIJ,SAAO;;;;;;CAOR,MAAM,OAAO,YAAoB,WAAmB,OAA6C;AAEhG,MAAI,CAAC,YAAY,MAAM,CACtB,QAAO,KAAK,IAAI,YAAY,UAAU;EAGvC,MAAM,uBAAM,IAAI,MAAM,EAAC,aAAa;AAOpC,QAAM,GAAG;;;;;;MAML,WAAW,IAAI,UAAU;MACzB,MAAM,SAAS,KAAK,IAAI,MAAM,eAAe,KAAK;MAClD,MAAM,SAAS,KAAK,IAAI,MAAM,aAAa,KAAK;MAChD,MAAM,UAAU,IAAI,EAAE;MACtB,IAAI,IAAI,IAAI;;;kBAGA,MAAM,UAAU,SAAY,GAAG,GAAG,MAAM,UAAU,GAAG,wBAAwB;wBACvE,MAAM,gBAAgB,SAAY,GAAG,GAAG,MAAM,gBAAgB,GAAG,8BAA8B;kBACrG,MAAM,UAAU,SAAY,GAAG,GAAG,MAAM,UAAU,GAAG,wBAAwB;sBACzE,MAAM,cAAc,SAAY,GAAG,GAAG,MAAM,cAAc,GAAG,4BAA4B;qBAC1F,MAAM,YAAY,SAAY,GAAG,GAAG,MAAM,UAAU,IAAI,MAAM,GAAG,2BAA2B;mBAC9F,IAAI;IACnB,QAAQ,KAAK,GAAG;AAElB,4BAA0B,WAAW;AACrC,SAAO,KAAK,IAAI,YAAY,UAAU;;;;;CAMvC,MAAM,OAAO,YAAoB,WAAkC;AAClE,QAAM,KAAK,GACT,WAAW,cAAc,CACzB,MAAM,cAAc,KAAK,WAAW,CACpC,MAAM,cAAc,KAAK,UAAU,CACnC,SAAS;AACX,4BAA0B,WAAW;;;;;;CAOtC,MAAM,iBAAiB,YAAoB,UAAkB,UAAiC;EAC7F,MAAM,SAAS,MAAM,KAAK,IAAI,YAAY,SAAS;AAGnD,MACC,OAAO,UAAU,QACjB,OAAO,gBAAgB,QACvB,OAAO,UAAU,QACjB,OAAO,QAEP,OAAM,KAAK,OAAO,YAAY,UAAU;GACvC,OAAO,OAAO;GACd,aAAa,OAAO;GACpB,OAAO,OAAO;GACd,WAAW;GACX,SAAS,OAAO;GAChB,CAAC"}

package/dist/service-Bpy5iTX0.mjs

@@ -1,150 +0,0 @@
-import { t as CommentRepository } from "./comment-DcT8qdPK.mjs";
-import { AsyncLocalStorage } from "node:async_hooks";
-
-//#region src/comments/service.ts
-/**
-* Comment Service
-*
-* Orchestrates comment creation through the hook pipeline:
-*   1. Run comment:beforeCreate pipeline (transform/reject)
-*   2. Query priorApprovedCount for first-time moderation
-*   3. Invoke comment:moderate exclusive hook (or built-in fallback)
-*   4. Save comment with determined status
-*   5. Fire comment:afterCreate (fire-and-forget)
-*
-* Also handles admin moderation (status changes) with afterModerate hooks.
-*/
-var CommentStatusConflictError = class extends Error {
-	code = "COMMENT_STATUS_CONFLICT";
-	currentStatus;
-	constructor(currentStatus) {
-		super("Comment status changed; read the current comment before retrying");
-		this.name = "CommentStatusConflictError";
-		this.currentStatus = currentStatus;
-	}
-};
-const commentModerationALS = new AsyncLocalStorage();
-/**
-* Create a comment through the full hook pipeline.
-*
-* Returns null if the comment was rejected by a beforeCreate handler.
-*/
-async function createComment(db, input, collectionSettings, hooks, contentInfo) {
-	const repo = new CommentRepository(db);
-	const beforeCreateEvent = {
-		comment: {
-			collection: input.collection,
-			contentId: input.contentId,
-			parentId: input.parentId ?? null,
-			authorName: input.authorName,
-			authorEmail: input.authorEmail,
-			authorUserId: input.authorUserId ?? null,
-			body: input.body,
-			ipHash: input.ipHash ?? null,
-			userAgent: input.userAgent ?? null
-		},
-		metadata: {}
-	};
-	const result = await hooks.runBeforeCreate(beforeCreateEvent);
-	if (result === false) return null;
-	const event = result;
-	const priorApprovedCount = await repo.countApprovedByEmail(event.comment.authorEmail);
-	const moderateEvent = {
-		comment: event.comment,
-		metadata: event.metadata,
-		collectionSettings,
-		priorApprovedCount
-	};
-	const decision = await hooks.runModerate(moderateEvent);
-	const comment = await repo.create({
-		collection: event.comment.collection,
-		contentId: event.comment.contentId,
-		parentId: event.comment.parentId,
-		authorName: event.comment.authorName,
-		authorEmail: event.comment.authorEmail,
-		authorUserId: event.comment.authorUserId,
-		body: event.comment.body,
-		status: decision.status,
-		ipHash: event.comment.ipHash,
-		userAgent: event.comment.userAgent,
-		moderationMetadata: Object.keys(event.metadata).length > 0 ? event.metadata : null
-	});
-	if (contentInfo) {
-		const afterEvent = {
-			comment: commentToStored(comment),
-			metadata: event.metadata,
-			content: {
-				id: contentInfo.id,
-				collection: contentInfo.collection,
-				slug: contentInfo.slug,
-				title: contentInfo.title
-			},
-			contentAuthor: contentInfo.author
-		};
-		hooks.fireAfterCreate(afterEvent);
-	}
-	return {
-		comment,
-		decision
-	};
-}
-/**
-* Admin moderation — change a comment's status.
-* Fires comment:afterModerate hook.
-*/
-async function moderateComment(db, id, newStatus, expectedStatus, origin, hooks, onApproved) {
-	const active = commentModerationALS.getStore();
-	if (active?.has(id)) throw new Error("Recursive comment moderation is not allowed");
-	const next = new Set(active);
-	next.add(id);
-	return commentModerationALS.run(next, () => moderateCommentWithinGuard(db, id, newStatus, expectedStatus, origin, hooks, onApproved));
-}
-async function moderateCommentWithinGuard(db, id, newStatus, expectedStatus, origin, hooks, onApproved) {
-	const result = await new CommentRepository(db).updateStatusIf(id, newStatus, expectedStatus);
-	if (result.state === "not_found") return null;
-	if (result.state === "conflict") throw new CommentStatusConflictError(result.comment.status);
-	if (result.state === "unchanged") return result.comment;
-	const updated = result.comment;
-	if (newStatus === "approved") await onApproved?.(updated);
-	const afterEvent = {
-		comment: commentToStored(updated),
-		previousStatus: expectedStatus,
-		newStatus,
-		moderator: origin.source === "admin" ? {
-			id: origin.userId,
-			name: origin.name
-		} : {
-			id: origin.pluginId,
-			name: null
-		},
-		origin: origin.source === "admin" ? {
-			source: "admin",
-			userId: origin.userId
-		} : {
-			source: "plugin",
-			pluginId: origin.pluginId
-		}
-	};
-	await hooks.fireAfterModerate(afterEvent);
-	return updated;
-}
-function commentToStored(comment) {
-	return {
-		id: comment.id,
-		collection: comment.collection,
-		contentId: comment.contentId,
-		parentId: comment.parentId,
-		authorName: comment.authorName,
-		authorEmail: comment.authorEmail,
-		authorUserId: comment.authorUserId,
-		body: comment.body,
-		status: comment.status,
-		moderationMetadata: comment.moderationMetadata,
-		createdAt: comment.createdAt,
-		updatedAt: comment.updatedAt
-	};
-}
-
-//#endregion
-export { createComment as n, moderateComment as r, CommentStatusConflictError as t };
-//# sourceMappingURL=service-Bpy5iTX0.mjs.map

package/dist/service-Bpy5iTX0.mjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"service-Bpy5iTX0.mjs","names":[],"sources":["../src/comments/service.ts"],"sourcesContent":["/**\n * Comment Service\n *\n * Orchestrates comment creation through the hook pipeline:\n *   1. Run comment:beforeCreate pipeline (transform/reject)\n *   2. Query priorApprovedCount for first-time moderation\n *   3. Invoke comment:moderate exclusive hook (or built-in fallback)\n *   4. Save comment with determined status\n *   5. Fire comment:afterCreate (fire-and-forget)\n *\n * Also handles admin moderation (status changes) with afterModerate hooks.\n */\n\nimport { AsyncLocalStorage } from \"node:async_hooks\";\n\nimport type { Kysely } from \"kysely\";\n\nimport { CommentRepository } from \"../database/repositories/comment.js\";\nimport type { Comment, CommentStatus } from \"../database/repositories/comment.js\";\nimport type { Database } from \"../database/types.js\";\nimport type {\n\tCollectionCommentSettings,\n\tCommentAfterCreateEvent,\n\tCommentAfterModerateEvent,\n\tCommentBeforeCreateEvent,\n\tCommentModerateEvent,\n\tModerationDecision,\n\tStoredComment,\n} from \"../plugins/types.js\";\n\n// ---------------------------------------------------------------------------\n// Types\n// ---------------------------------------------------------------------------\n\nexport interface CommentCreateInput {\n\tcollection: string;\n\tcontentId: string;\n\tparentId?: string | null;\n\tauthorName: string;\n\tauthorEmail: string;\n\tauthorUserId?: string | null;\n\tbody: string;\n\tipHash?: string | null;\n\tuserAgent?: string | null;\n}\n\nexport interface CommentCreateResult {\n\tcomment: Comment;\n\tdecision: ModerationDecision;\n}\n\n/**\n * Hook runner interface — injected from the runtime so the service\n * doesn't need to know about the hook pipeline internals.\n */\nexport interface CommentHookRunner {\n\t/** Run comment:beforeCreate pipeline. Returns modified event or false. */\n\trunBeforeCreate(event: CommentBeforeCreateEvent): Promise<CommentBeforeCreateEvent | false>;\n\n\t/** Run comment:moderate exclusive hook. Returns moderation decision. */\n\trunModerate(event: CommentModerateEvent): Promise<ModerationDecision>;\n\n\t/** Fire comment:afterCreate (fire-and-forget). */\n\tfireAfterCreate(event: CommentAfterCreateEvent): void;\n\n\t/** Run comment:afterModerate after a successful transition. */\n\tfireAfterModerate(event: CommentAfterModerateEvent): void | Promise<void>;\n}\n\nexport type CommentModerationOrigin =\n\t| { source: \"admin\"; userId: string; name: string | null }\n\t| { source: \"plugin\"; pluginId: string };\n\nexport class CommentStatusConflictError extends Error {\n\treadonly code = \"COMMENT_STATUS_CONFLICT\";\n\treadonly currentStatus: CommentStatus;\n\n\tconstructor(currentStatus: CommentStatus) {\n\t\tsuper(\"Comment status changed; read the current comment before retrying\");\n\t\tthis.name = \"CommentStatusConflictError\";\n\t\tthis.currentStatus = currentStatus;\n\t}\n}\n\nconst commentModerationALS = new AsyncLocalStorage<ReadonlySet<string>>();\n\n// ---------------------------------------------------------------------------\n// Service\n// ---------------------------------------------------------------------------\n\n/**\n * Create a comment through the full hook pipeline.\n *\n * Returns null if the comment was rejected by a beforeCreate handler.\n */\nexport async function createComment(\n\tdb: Kysely<Database>,\n\tinput: CommentCreateInput,\n\tcollectionSettings: CollectionCommentSettings,\n\thooks: CommentHookRunner,\n\tcontentInfo?: {\n\t\tid: string;\n\t\tcollection: string;\n\t\tslug: string;\n\t\ttitle?: string;\n\t\tauthor?: { id: string; name: string | null; email: string };\n\t},\n): Promise<CommentCreateResult | null> {\n\tconst repo = new CommentRepository(db);\n\n\t// 1. Build the beforeCreate event\n\tconst beforeCreateEvent: CommentBeforeCreateEvent = {\n\t\tcomment: {\n\t\t\tcollection: input.collection,\n\t\t\tcontentId: input.contentId,\n\t\t\tparentId: input.parentId ?? null,\n\t\t\tauthorName: input.authorName,\n\t\t\tauthorEmail: input.authorEmail,\n\t\t\tauthorUserId: input.authorUserId ?? null,\n\t\t\tbody: input.body,\n\t\t\tipHash: input.ipHash ?? null,\n\t\t\tuserAgent: input.userAgent ?? null,\n\t\t},\n\t\tmetadata: {},\n\t};\n\n\t// 2. Run comment:beforeCreate pipeline\n\tconst result = await hooks.runBeforeCreate(beforeCreateEvent);\n\tif (result === false) {\n\t\treturn null; // Rejected\n\t}\n\n\tconst event = result;\n\n\t// 3. Query prior approved count for first-time moderation\n\tconst priorApprovedCount = await repo.countApprovedByEmail(event.comment.authorEmail);\n\n\t// 4. Run comment:moderate exclusive hook\n\tconst moderateEvent: CommentModerateEvent = {\n\t\tcomment: event.comment,\n\t\tmetadata: event.metadata,\n\t\tcollectionSettings,\n\t\tpriorApprovedCount,\n\t};\n\n\tconst decision = await hooks.runModerate(moderateEvent);\n\n\t// 5. Save comment with determined status\n\tconst comment = await repo.create({\n\t\tcollection: event.comment.collection,\n\t\tcontentId: event.comment.contentId,\n\t\tparentId: event.comment.parentId,\n\t\tauthorName: event.comment.authorName,\n\t\tauthorEmail: event.comment.authorEmail,\n\t\tauthorUserId: event.comment.authorUserId,\n\t\tbody: event.comment.body,\n\t\tstatus: decision.status,\n\t\tipHash: event.comment.ipHash,\n\t\tuserAgent: event.comment.userAgent,\n\t\tmoderationMetadata: Object.keys(event.metadata).length > 0 ? event.metadata : null,\n\t});\n\n\t// 6. Fire comment:afterCreate (fire-and-forget)\n\tif (contentInfo) {\n\t\tconst afterEvent: CommentAfterCreateEvent = {\n\t\t\tcomment: commentToStored(comment),\n\t\t\tmetadata: event.metadata,\n\t\t\tcontent: {\n\t\t\t\tid: contentInfo.id,\n\t\t\t\tcollection: contentInfo.collection,\n\t\t\t\tslug: contentInfo.slug,\n\t\t\t\ttitle: contentInfo.title,\n\t\t\t},\n\t\t\tcontentAuthor: contentInfo.author,\n\t\t};\n\t\thooks.fireAfterCreate(afterEvent);\n\t}\n\n\treturn { comment, decision };\n}\n\n/**\n * Admin moderation — change a comment's status.\n * Fires comment:afterModerate hook.\n */\nexport async function moderateComment(\n\tdb: Kysely<Database>,\n\tid: string,\n\tnewStatus: CommentStatus,\n\texpectedStatus: CommentStatus,\n\torigin: CommentModerationOrigin,\n\thooks: CommentHookRunner,\n\tonApproved?: (comment: Comment) => void | Promise<void>,\n): Promise<Comment | null> {\n\tconst active = commentModerationALS.getStore();\n\tif (active?.has(id)) throw new Error(\"Recursive comment moderation is not allowed\");\n\tconst next = new Set(active);\n\tnext.add(id);\n\treturn commentModerationALS.run(next, () =>\n\t\tmoderateCommentWithinGuard(db, id, newStatus, expectedStatus, origin, hooks, onApproved),\n\t);\n}\n\nasync function moderateCommentWithinGuard(\n\tdb: Kysely<Database>,\n\tid: string,\n\tnewStatus: CommentStatus,\n\texpectedStatus: CommentStatus,\n\torigin: CommentModerationOrigin,\n\thooks: CommentHookRunner,\n\tonApproved?: (comment: Comment) => void | Promise<void>,\n): Promise<Comment | null> {\n\tconst repo = new CommentRepository(db);\n\tconst result = await repo.updateStatusIf(id, newStatus, expectedStatus);\n\tif (result.state === \"not_found\") return null;\n\tif (result.state === \"conflict\") throw new CommentStatusConflictError(result.comment.status);\n\tif (result.state === \"unchanged\") return result.comment;\n\tconst updated = result.comment;\n\n\tif (newStatus === \"approved\") await onApproved?.(updated);\n\n\t// Run comment:afterModerate after a successful transition\n\tconst afterEvent: CommentAfterModerateEvent = {\n\t\tcomment: commentToStored(updated),\n\t\tpreviousStatus: expectedStatus,\n\t\tnewStatus,\n\t\tmoderator:\n\t\t\torigin.source === \"admin\"\n\t\t\t\t? { id: origin.userId, name: origin.name }\n\t\t\t\t: { id: origin.pluginId, name: null },\n\t\torigin:\n\t\t\torigin.source === \"admin\"\n\t\t\t\t? { source: \"admin\", userId: origin.userId }\n\t\t\t\t: { source: \"plugin\", pluginId: origin.pluginId },\n\t};\n\tawait hooks.fireAfterModerate(afterEvent);\n\n\treturn updated;\n}\n\n// ---------------------------------------------------------------------------\n// Helpers\n// ---------------------------------------------------------------------------\n\nfunction commentToStored(comment: Comment): StoredComment {\n\treturn {\n\t\tid: comment.id,\n\t\tcollection: comment.collection,\n\t\tcontentId: comment.contentId,\n\t\tparentId: comment.parentId,\n\t\tauthorName: comment.authorName,\n\t\tauthorEmail: comment.authorEmail,\n\t\tauthorUserId: comment.authorUserId,\n\t\tbody: comment.body,\n\t\tstatus: comment.status,\n\t\tmoderationMetadata: comment.moderationMetadata,\n\t\tcreatedAt: comment.createdAt,\n\t\tupdatedAt: comment.updatedAt,\n\t};\n}\n"],"mappings":";;;;;;;;;;;;;;;;AAyEA,IAAa,6BAAb,cAAgD,MAAM;CACrD,AAAS,OAAO;CAChB,AAAS;CAET,YAAY,eAA8B;AACzC,QAAM,mEAAmE;AACzE,OAAK,OAAO;AACZ,OAAK,gBAAgB;;;AAIvB,MAAM,uBAAuB,IAAI,mBAAwC;;;;;;AAWzE,eAAsB,cACrB,IACA,OACA,oBACA,OACA,aAOsC;CACtC,MAAM,OAAO,IAAI,kBAAkB,GAAG;CAGtC,MAAM,oBAA8C;EACnD,SAAS;GACR,YAAY,MAAM;GAClB,WAAW,MAAM;GACjB,UAAU,MAAM,YAAY;GAC5B,YAAY,MAAM;GAClB,aAAa,MAAM;GACnB,cAAc,MAAM,gBAAgB;GACpC,MAAM,MAAM;GACZ,QAAQ,MAAM,UAAU;GACxB,WAAW,MAAM,aAAa;GAC9B;EACD,UAAU,EAAE;EACZ;CAGD,MAAM,SAAS,MAAM,MAAM,gBAAgB,kBAAkB;AAC7D,KAAI,WAAW,MACd,QAAO;CAGR,MAAM,QAAQ;CAGd,MAAM,qBAAqB,MAAM,KAAK,qBAAqB,MAAM,QAAQ,YAAY;CAGrF,MAAM,gBAAsC;EAC3C,SAAS,MAAM;EACf,UAAU,MAAM;EAChB;EACA;EACA;CAED,MAAM,WAAW,MAAM,MAAM,YAAY,cAAc;CAGvD,MAAM,UAAU,MAAM,KAAK,OAAO;EACjC,YAAY,MAAM,QAAQ;EAC1B,WAAW,MAAM,QAAQ;EACzB,UAAU,MAAM,QAAQ;EACxB,YAAY,MAAM,QAAQ;EAC1B,aAAa,MAAM,QAAQ;EAC3B,cAAc,MAAM,QAAQ;EAC5B,MAAM,MAAM,QAAQ;EACpB,QAAQ,SAAS;EACjB,QAAQ,MAAM,QAAQ;EACtB,WAAW,MAAM,QAAQ;EACzB,oBAAoB,OAAO,KAAK,MAAM,SAAS,CAAC,SAAS,IAAI,MAAM,WAAW;EAC9E,CAAC;AAGF,KAAI,aAAa;EAChB,MAAM,aAAsC;GAC3C,SAAS,gBAAgB,QAAQ;GACjC,UAAU,MAAM;GAChB,SAAS;IACR,IAAI,YAAY;IAChB,YAAY,YAAY;IACxB,MAAM,YAAY;IAClB,OAAO,YAAY;IACnB;GACD,eAAe,YAAY;GAC3B;AACD,QAAM,gBAAgB,WAAW;;AAGlC,QAAO;EAAE;EAAS;EAAU;;;;;;AAO7B,eAAsB,gBACrB,IACA,IACA,WACA,gBACA,QACA,OACA,YAC0B;CAC1B,MAAM,SAAS,qBAAqB,UAAU;AAC9C,KAAI,QAAQ,IAAI,GAAG,CAAE,OAAM,IAAI,MAAM,8CAA8C;CACnF,MAAM,OAAO,IAAI,IAAI,OAAO;AAC5B,MAAK,IAAI,GAAG;AACZ,QAAO,qBAAqB,IAAI,YAC/B,2BAA2B,IAAI,IAAI,WAAW,gBAAgB,QAAQ,OAAO,WAAW,CACxF;;AAGF,eAAe,2BACd,IACA,IACA,WACA,gBACA,QACA,OACA,YAC0B;CAE1B,MAAM,SAAS,MADF,IAAI,kBAAkB,GAAG,CACZ,eAAe,IAAI,WAAW,eAAe;AACvE,KAAI,OAAO,UAAU,YAAa,QAAO;AACzC,KAAI,OAAO,UAAU,WAAY,OAAM,IAAI,2BAA2B,OAAO,QAAQ,OAAO;AAC5F,KAAI,OAAO,UAAU,YAAa,QAAO,OAAO;CAChD,MAAM,UAAU,OAAO;AAEvB,KAAI,cAAc,WAAY,OAAM,aAAa,QAAQ;CAGzD,MAAM,aAAwC;EAC7C,SAAS,gBAAgB,QAAQ;EACjC,gBAAgB;EAChB;EACA,WACC,OAAO,WAAW,UACf;GAAE,IAAI,OAAO;GAAQ,MAAM,OAAO;GAAM,GACxC;GAAE,IAAI,OAAO;GAAU,MAAM;GAAM;EACvC,QACC,OAAO,WAAW,UACf;GAAE,QAAQ;GAAS,QAAQ,OAAO;GAAQ,GAC1C;GAAE,QAAQ;GAAU,UAAU,OAAO;GAAU;EACnD;AACD,OAAM,MAAM,kBAAkB,WAAW;AAEzC,QAAO;;AAOR,SAAS,gBAAgB,SAAiC;AACzD,QAAO;EACN,IAAI,QAAQ;EACZ,YAAY,QAAQ;EACpB,WAAW,QAAQ;EACnB,UAAU,QAAQ;EAClB,YAAY,QAAQ;EACpB,aAAa,QAAQ;EACrB,cAAc,QAAQ;EACtB,MAAM,QAAQ;EACd,QAAQ,QAAQ;EAChB,oBAAoB,QAAQ;EAC5B,WAAW,QAAQ;EACnB,WAAW,QAAQ;EACnB"}

package/dist/session-user-BQeS2Mrb.mjs

@@ -1,51 +0,0 @@
-import { t as after } from "./after-PcEvMY_6.mjs";
-
-//#region src/astro/session-user.ts
-/**
-* Backstop timeout for resolving the session user. A live session-store read
-* settles in a few ms, so this only ever fires on a genuinely stalled read.
-*/
-const SESSION_GET_TIMEOUT_MS = 3e3;
-/**
-* Resolve the Astro session user without risking an isolate-wide hang.
-*
-* On Cloudflare Workers, a request cancelled mid-`session.get()` (client
-* disconnect, context teardown) can leave the underlying session-store read as
-* a promise that never settles — neither resolving nor rejecting. Awaiting it
-* directly hangs the request, and because the stalled promise is shared at the
-* isolate level, every later session-bearing request hangs too (observed as
-* 0-CPU, multi-minute, `canceled` responses; see #1274). A surrounding
-* try/catch cannot help: the promise never rejects.
-*
-* Two layers, mirroring the reclaimable-cache pattern used elsewhere in core:
-*  1. `after()` anchors the read so a cancelled request still drives it to
-*     completion — the promise settles and the isolate is not poisoned for
-*     subsequent requests (prevents the hang rather than merely surviving it).
-*  2. A timeout is a fail-closed backstop: a still-stalled (or rejecting) read
-*     resolves to `undefined`, and every caller treats the absence of a session
-*     user as unauthenticated (anonymous on public routes, 401/redirect on
-*     protected ones). It can only ever drop privileges for that one request,
-*     never grant them.
-*
-* Used by every session read on the request path: the main middleware (the
-* first read on a session-bearing request), the auth middleware, and the
-* preview-snapshot route (which bypasses the auth middleware).
-*/
-async function resolveSessionUser(session, timeoutMs = SESSION_GET_TIMEOUT_MS) {
-	if (!session) return void 0;
-	const read = Promise.resolve(session.get("user")).catch(() => void 0);
-	after(() => read.then(() => void 0, () => void 0));
-	let timer;
-	const timeout = new Promise((resolve) => {
-		timer = setTimeout(resolve, timeoutMs, void 0);
-	});
-	try {
-		return await Promise.race([read, timeout]);
-	} finally {
-		clearTimeout(timer);
-	}
-}
-
-//#endregion
-export { resolveSessionUser as t };
-//# sourceMappingURL=session-user-BQeS2Mrb.mjs.map

package/dist/session-user-BQeS2Mrb.mjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"session-user-BQeS2Mrb.mjs","names":[],"sources":["../src/astro/session-user.ts"],"sourcesContent":["import { after } from \"../after.js\";\n\n/**\n * Backstop timeout for resolving the session user. A live session-store read\n * settles in a few ms, so this only ever fires on a genuinely stalled read.\n */\nexport const SESSION_GET_TIMEOUT_MS = 3_000;\n\n/**\n * Resolve the Astro session user without risking an isolate-wide hang.\n *\n * On Cloudflare Workers, a request cancelled mid-`session.get()` (client\n * disconnect, context teardown) can leave the underlying session-store read as\n * a promise that never settles — neither resolving nor rejecting. Awaiting it\n * directly hangs the request, and because the stalled promise is shared at the\n * isolate level, every later session-bearing request hangs too (observed as\n * 0-CPU, multi-minute, `canceled` responses; see #1274). A surrounding\n * try/catch cannot help: the promise never rejects.\n *\n * Two layers, mirroring the reclaimable-cache pattern used elsewhere in core:\n *  1. `after()` anchors the read so a cancelled request still drives it to\n *     completion — the promise settles and the isolate is not poisoned for\n *     subsequent requests (prevents the hang rather than merely surviving it).\n *  2. A timeout is a fail-closed backstop: a still-stalled (or rejecting) read\n *     resolves to `undefined`, and every caller treats the absence of a session\n *     user as unauthenticated (anonymous on public routes, 401/redirect on\n *     protected ones). It can only ever drop privileges for that one request,\n *     never grant them.\n *\n * Used by every session read on the request path: the main middleware (the\n * first read on a session-bearing request), the auth middleware, and the\n * preview-snapshot route (which bypasses the auth middleware).\n */\nexport async function resolveSessionUser<T>(\n\tsession: { get(key: \"user\"): Promise<T> } | undefined,\n\ttimeoutMs = SESSION_GET_TIMEOUT_MS,\n): Promise<T | undefined> {\n\tif (!session) return undefined;\n\tconst read: Promise<T | undefined> = Promise.resolve(session.get(\"user\")).catch(() => undefined);\n\t// Keep the worker alive past response/cancellation so the read completes and\n\t// the shared promise settles — this is what prevents the isolate poisoning.\n\tafter(() =>\n\t\tread.then(\n\t\t\t() => undefined,\n\t\t\t() => undefined,\n\t\t),\n\t);\n\tlet timer: ReturnType<typeof setTimeout> | undefined;\n\tconst timeout = new Promise<undefined>((resolve) => {\n\t\ttimer = setTimeout(resolve, timeoutMs, undefined);\n\t});\n\ttry {\n\t\treturn await Promise.race([read, timeout]);\n\t} finally {\n\t\tclearTimeout(timer);\n\t}\n}\n"],"mappings":";;;;;;;AAMA,MAAa,yBAAyB;;;;;;;;;;;;;;;;;;;;;;;;;;AA2BtC,eAAsB,mBACrB,SACA,YAAY,wBACa;AACzB,KAAI,CAAC,QAAS,QAAO;CACrB,MAAM,OAA+B,QAAQ,QAAQ,QAAQ,IAAI,OAAO,CAAC,CAAC,YAAY,OAAU;AAGhG,aACC,KAAK,WACE,cACA,OACN,CACD;CACD,IAAI;CACJ,MAAM,UAAU,IAAI,SAAoB,YAAY;AACnD,UAAQ,WAAW,SAAS,WAAW,OAAU;GAChD;AACF,KAAI;AACH,SAAO,MAAM,QAAQ,KAAK,CAAC,MAAM,QAAQ,CAAC;WACjC;AACT,eAAa,MAAM"}

package/dist/settings-CsoLiwpL.mjs

@@ -1,420 +0,0 @@
-import { t as after } from "./after-PcEvMY_6.mjs";
-import { n as assertStorageKey, t as OptionsRepository } from "./options-D5WcorD5.mjs";
-import { a as encodeBase64url, r as decodeBase64url } from "./base64-DvnNgP7e.mjs";
-import { n as invalidateSingleFlightCache, r as singleFlightCached, t as createSingleFlightCache } from "./single-flight-cache-B5O2qhO1.mjs";
-import { i as resolvePluginEncryptionKeys } from "./secrets-DNgVgz_e.mjs";
-import { d as invalidateObjectCache, n as cachedQuery } from "./object-cache-DlSVbn5Y.mjs";
-import { t as MediaRepository } from "./media-TBlKCwo7.mjs";
-import { n as peekRequestCache, r as requestCached } from "./request-cache-DaMhSQdx.mjs";
-import { n as siteSettingsTag } from "./chrome-tags-D7LGB91U.mjs";
-import { s as getDb } from "./loader-xhNQiT9T.mjs";
-
-//#region src/plugins/settings.ts
-const ENVELOPE_VERSION = 1;
-const ENVELOPE_MARKER = "plugin-setting";
-const IV_BYTES = 12;
-const KEY_ID_PATTERN = /^[0-9a-f]{8}$/;
-const BASE64URL_PATTERN = /^[A-Za-z0-9_-]+$/;
-const textEncoder = new TextEncoder();
-const textDecoder = new TextDecoder("utf-8", { fatal: true });
-var PluginSettingEncryptionError = class extends Error {
-	name = "PluginSettingEncryptionError";
-	code;
-	constructor(code, message) {
-		super(message);
-		this.code = code;
-	}
-};
-function isEncryptedPluginSetting(value) {
-	if (typeof value !== "object" || value === null || Array.isArray(value)) return false;
-	return Object.keys(value).length === 5 && "$emdash" in value && value.$emdash === ENVELOPE_MARKER && "v" in value && value.v === ENVELOPE_VERSION && "kid" in value && typeof value.kid === "string" && KEY_ID_PATTERN.test(value.kid) && "iv" in value && typeof value.iv === "string" && BASE64URL_PATTERN.test(value.iv) && "ciphertext" in value && typeof value.ciphertext === "string" && BASE64URL_PATTERN.test(value.ciphertext);
-}
-function additionalData(pluginId, key) {
-	return textEncoder.encode(JSON.stringify([
-		"emdash-plugin-setting",
-		ENVELOPE_VERSION,
-		pluginId,
-		key
-	]));
-}
-function exactBuffer(bytes) {
-	return bytes.slice().buffer;
-}
-async function importEncryptionKey(key, usage) {
-	return crypto.subtle.importKey("raw", exactBuffer(key.key), "AES-GCM", false, [usage]);
-}
-async function keysOrDefault(keys) {
-	return keys === void 0 ? resolvePluginEncryptionKeys() : keys;
-}
-async function encryptPluginSetting(pluginId, key, value, keys) {
-	const primary = (await keysOrDefault(keys))?.[0];
-	if (!primary) throw new PluginSettingEncryptionError("PLUGIN_SETTING_ENCRYPTION_KEY_MISSING", "Plugin secret settings require EMDASH_ENCRYPTION_KEY");
-	try {
-		const iv = crypto.getRandomValues(new Uint8Array(IV_BYTES));
-		const cryptoKey = await importEncryptionKey(primary, "encrypt");
-		const ciphertext = await crypto.subtle.encrypt({
-			name: "AES-GCM",
-			iv: exactBuffer(iv),
-			additionalData: exactBuffer(additionalData(pluginId, key))
-		}, cryptoKey, exactBuffer(textEncoder.encode(value)));
-		return {
-			$emdash: ENVELOPE_MARKER,
-			v: ENVELOPE_VERSION,
-			kid: primary.kid,
-			iv: encodeBase64url(iv),
-			ciphertext: encodeBase64url(new Uint8Array(ciphertext))
-		};
-	} catch (error) {
-		if (error instanceof PluginSettingEncryptionError) throw error;
-		throw new PluginSettingEncryptionError("PLUGIN_SETTING_ENCRYPTION_FAILED", "Plugin secret setting could not be encrypted");
-	}
-}
-async function decryptPluginSetting(pluginId, key, envelope, keys) {
-	const resolved = await keysOrDefault(keys);
-	if (!resolved?.length) throw new PluginSettingEncryptionError("PLUGIN_SETTING_ENCRYPTION_KEY_MISSING", "Plugin secret setting cannot be decrypted because its encryption key is unavailable");
-	const matched = resolved.find((candidate) => candidate.kid === envelope.kid);
-	if (!matched) throw new PluginSettingEncryptionError("PLUGIN_SETTING_ENCRYPTION_KEY_UNKNOWN", "Plugin secret setting was encrypted with an unavailable key");
-	try {
-		const iv = decodeBase64url(envelope.iv);
-		const ciphertext = decodeBase64url(envelope.ciphertext);
-		if (iv.byteLength !== IV_BYTES || ciphertext.byteLength < 16) throw new Error("invalid envelope");
-		const cryptoKey = await importEncryptionKey(matched, "decrypt");
-		const plaintext = await crypto.subtle.decrypt({
-			name: "AES-GCM",
-			iv: exactBuffer(iv),
-			additionalData: exactBuffer(additionalData(pluginId, key))
-		}, cryptoKey, exactBuffer(ciphertext));
-		return textDecoder.decode(plaintext);
-	} catch {
-		throw new PluginSettingEncryptionError("PLUGIN_SETTING_DECRYPTION_FAILED", "Plugin secret setting could not be decrypted");
-	}
-}
-function isSecretField(schema, key) {
-	return schema[key]?.type === "secret";
-}
-async function encodePluginSettingValue(pluginId, key, value, schema, keys, onSecret) {
-	if (!isSecretField(schema, key)) return value;
-	if (typeof value !== "string") throw new PluginSettingEncryptionError("PLUGIN_SETTING_ENCRYPTION_FAILED", "Plugin secret settings must be strings");
-	onSecret?.(key, value);
-	return encryptPluginSetting(pluginId, key, value, keys);
-}
-async function decodePluginSettingValue(pluginId, key, value, schema, keys, onSecret) {
-	if (!isSecretField(schema, key)) {
-		if (isEncryptedPluginSetting(value)) throw new PluginSettingEncryptionError("PLUGIN_SETTING_DECRYPTION_FAILED", "Encrypted plugin setting is not declared as a secret");
-		return value;
-	}
-	if (typeof value === "string") {
-		onSecret?.(key, value);
-		return value;
-	}
-	if (!isEncryptedPluginSetting(value)) throw new PluginSettingEncryptionError("PLUGIN_SETTING_DECRYPTION_FAILED", "Plugin secret setting has an invalid encrypted envelope");
-	const decrypted = await decryptPluginSetting(pluginId, key, value, keys);
-	onSecret?.(key, decrypted);
-	return decrypted;
-}
-function createSettingsAccess(optionsRepo, pluginId, schema = {}, keys, onSecret) {
-	const prefix = `plugin:${pluginId}:settings:`;
-	const optionKey = (key) => {
-		assertStorageKey(key);
-		return `${prefix}${key}`;
-	};
-	return {
-		async get(key) {
-			const value = await optionsRepo.get(optionKey(key));
-			return value === null ? null : decodePluginSettingValue(pluginId, key, value, schema, keys, onSecret);
-		},
-		async getVersioned(key) {
-			const value = await optionsRepo.getVersioned(optionKey(key));
-			if (!value) return null;
-			return {
-				value: await decodePluginSettingValue(pluginId, key, value.value, schema, keys, onSecret),
-				revision: value.revision
-			};
-		},
-		async compareAndSet(key, expectedRevision, value) {
-			return optionsRepo.compareAndSet(optionKey(key), expectedRevision, await encodePluginSettingValue(pluginId, key, value, schema, keys, onSecret));
-		},
-		compareAndDelete(key, expectedRevision) {
-			return optionsRepo.compareAndDelete(optionKey(key), expectedRevision);
-		},
-		async set(key, value) {
-			await optionsRepo.set(optionKey(key), await encodePluginSettingValue(pluginId, key, value, schema, keys, onSecret));
-		},
-		delete(key) {
-			return optionsRepo.delete(optionKey(key));
-		},
-		async list(keyPrefix = "") {
-			assertStorageKey(keyPrefix || "_");
-			const values = await optionsRepo.getByPrefix(`${prefix}${keyPrefix}`);
-			const result = [];
-			for (const [fullKey, value] of values) {
-				const key = fullKey.slice(prefix.length);
-				result.push({
-					key,
-					value: await decodePluginSettingValue(pluginId, key, value, schema, keys, onSecret)
-				});
-			}
-			return result;
-		}
-	};
-}
-
-//#endregion
-//#region src/settings/index.ts
-/** Object-cache namespace for site settings. */
-const SETTINGS_CACHE_NAMESPACE = "settings";
-/** Prefix for site settings in the options table */
-const SETTINGS_PREFIX = "site:";
-function isPluginSettingEnvelopeRecord(value) {
-	return typeof value === "object" && value !== null && !Array.isArray(value) && "$emdash" in value && value.$emdash === "plugin-setting";
-}
-async function decodePersistedPluginSetting(pluginId, key, value, encryptionKeys) {
-	if (isEncryptedPluginSetting(value)) return decryptPluginSetting(pluginId, key, value, encryptionKeys);
-	if (isPluginSettingEnvelopeRecord(value)) throw new PluginSettingEncryptionError("PLUGIN_SETTING_DECRYPTION_FAILED", "Plugin secret setting has an invalid encrypted envelope");
-	return value;
-}
-/**
-* Worker-isolate cache for the resolved `site:*` settings.
-*
-* Site settings (title, logo, SEO defaults) change rarely but are read on
-* every public request. Caching across the isolate's lifetime drops the
-* `options WHERE name LIKE 'site:%'` prefix scan from once-per-request to
-* once-per-isolate. Cross-isolate staleness is bounded by isolate lifetime
-* (workerd typically recycles within minutes); acceptable for chrome.
-*
-* Backed by single-flight-cache.ts: concurrent cold reads coalesce onto one
-* query via a reclaimable single-flight lock and the resolved *value* is
-* cached — never a shared in-flight promise, so a cancelled request can't
-* poison the isolate (see that file's header). Stored on globalThis with a
-* Symbol.for key so Vite SSR chunk duplication doesn't produce two
-* independent caches (same pattern as request-context.ts).
-*/
-const SITE_SETTINGS_CACHE_KEY = Symbol.for("emdash:site-settings");
-const g = globalThis;
-const settingsCache = g[SITE_SETTINGS_CACHE_KEY] ?? (() => {
-	const c = createSingleFlightCache();
-	g[SITE_SETTINGS_CACHE_KEY] = c;
-	return c;
-})();
-/**
-* Bump the isolate-wide site-settings cache version, forcing the next
-* `getSiteSettings()` to re-query the database.
-*
-* Called from every `site:*` write path. Other isolates still serve their
-* own cached copy until they expire — staleness bounded by isolate lifetime.
-*/
-function invalidateSiteSettingsCache() {
-	invalidateSingleFlightCache(settingsCache);
-	invalidateObjectCache(SETTINGS_CACHE_NAMESPACE);
-}
-/**
-* Type guard for MediaReference values
-*/
-function isMediaReference(value) {
-	return typeof value === "object" && value !== null && "mediaId" in value;
-}
-/**
-* Resolve a media reference to include the full URL plus content metadata.
-*
-* Pulls `mimeType` and intrinsic dimensions from the media row so callers
-* can emit correct head tags (e.g. `<link rel="icon" type="image/svg+xml">`,
-* which Chromium requires when the URL has no `.svg` extension) without
-* a second round-trip to the media table.
-*/
-async function resolveMediaReference(mediaRef, db, _storage) {
-	if (!mediaRef?.mediaId) return mediaRef;
-	try {
-		const media = await new MediaRepository(db).findById(mediaRef.mediaId);
-		if (media) return {
-			...mediaRef,
-			url: `/_emdash/api/media/file/${media.storageKey}`,
-			contentType: media.mimeType,
-			...media.width !== null ? { width: media.width } : {},
-			...media.height !== null ? { height: media.height } : {}
-		};
-	} catch {}
-	return mediaRef;
-}
-/**
-* Get a single site setting by key
-*
-* Returns `undefined` if the setting has not been configured.
-* For media settings (logo, favicon), the URL is resolved automatically.
-*
-* @param key - The setting key (e.g., "title", "logo", "social")
-* @returns The setting value, or undefined if not set
-*
-* @example
-* ```ts
-* import { getSiteSetting } from "emdash";
-*
-* const title = await getSiteSetting("title");
-* const logo = await getSiteSetting("logo");
-* console.log(logo?.url); // Resolved URL
-* ```
-*/
-async function getSiteSetting(key) {
-	const primed = peekRequestCache("siteSettings");
-	if (primed) return (await primed)[key];
-	return requestCached(`siteSetting:${key}`, async () => {
-		return getSiteSettingWithDb(key, await getDb());
-	});
-}
-/**
-* Get a single site setting by key (with explicit db)
-*
-* @internal Use `getSiteSetting()` in templates. This variant is for admin routes
-* that already have a database handle.
-*/
-async function getSiteSettingWithDb(key, db, storage = null) {
-	const value = await new OptionsRepository(db).get(`${SETTINGS_PREFIX}${key}`);
-	if (!value) return;
-	if ((key === "logo" || key === "favicon") && isMediaReference(value)) return await resolveMediaReference(value, db, storage);
-	if (key === "seo" && value && typeof value === "object") {
-		const seo = value;
-		if (seo.defaultOgImage) return {
-			...seo,
-			defaultOgImage: await resolveMediaReference(seo.defaultOgImage, db, storage)
-		};
-	}
-	return value;
-}
-/**
-* Get all site settings
-*
-* Returns all configured settings. Unset values are undefined.
-* Media references (logo/favicon) are resolved to include URLs.
-*
-* @example
-* ```ts
-* import { getSiteSettings } from "emdash";
-*
-* const settings = await getSiteSettings();
-* console.log(settings.title); // "My Site"
-* console.log(settings.logo?.url); // "/_emdash/api/media/file/abc123"
-* ```
-*/
-function getSiteSettings() {
-	return requestCached("siteSettings", () => singleFlightCached(settingsCache, () => cachedQuery({
-		namespace: SETTINGS_CACHE_NAMESPACE,
-		key: "all",
-		load: async () => {
-			return getSiteSettingsWithDb(await getDb());
-		}
-	}), {
-		anchor: (promise) => after(() => promise),
-		ownerTimeoutMs: 3e4
-	}));
-}
-/**
-* Get all site settings with a Workers edge-cache hint.
-*
-* Use the returned `cacheHint` with `Astro.cache.set()` so pages that render
-* settings can be purged automatically when site settings change.
-*/
-async function getSiteSettingsWithCacheHint() {
-	return {
-		data: await getSiteSettings(),
-		cacheHint: { tags: [siteSettingsTag()] }
-	};
-}
-/**
-* Get all site settings (with explicit db)
-*
-* @internal Use `getSiteSettings()` in templates. This variant is for admin routes
-* that already have a database handle.
-*/
-async function getSiteSettingsWithDb(db, storage = null) {
-	const allOptions = await new OptionsRepository(db).getByPrefix(SETTINGS_PREFIX);
-	const settings = {};
-	for (const [key, value] of allOptions) {
-		const settingKey = key.replace(SETTINGS_PREFIX, "");
-		settings[settingKey] = value;
-	}
-	const typedSettings = settings;
-	if (typedSettings.logo) typedSettings.logo = await resolveMediaReference(typedSettings.logo, db, storage);
-	if (typedSettings.favicon) typedSettings.favicon = await resolveMediaReference(typedSettings.favicon, db, storage);
-	if (typedSettings.seo?.defaultOgImage) typedSettings.seo = {
-		...typedSettings.seo,
-		defaultOgImage: await resolveMediaReference(typedSettings.seo.defaultOgImage, db, storage)
-	};
-	return typedSettings;
-}
-/**
-* Set site settings (internal function used by admin API)
-*
-* Merges provided settings with existing ones. Only provided fields are updated.
-* Media references should include just the mediaId; URLs are resolved on read.
-*
-* @param settings - Partial settings object with values to update
-* @param db - Kysely database instance
-* @returns Promise that resolves when settings are saved
-*
-* @internal
-*
-* @example
-* ```ts
-* // Update multiple settings at once
-* await setSiteSettings({
-*   title: "My Site",
-*   tagline: "Welcome",
-*   logo: { mediaId: "med_123", alt: "Logo" }
-* }, db);
-* ```
-*/
-async function setSiteSettings(settings, db) {
-	const options = new OptionsRepository(db);
-	const updates = {};
-	for (const [key, value] of Object.entries(settings)) if (value !== void 0) updates[`${SETTINGS_PREFIX}${key}`] = value;
-	try {
-		await options.setMany(updates);
-	} finally {
-		invalidateSiteSettingsCache();
-	}
-}
-/**
-* Get a single plugin setting by key.
-*
-* Plugin settings are stored in the options table under
-* `plugin:<pluginId>:settings:<key>`.
-*/
-async function getPluginSetting(pluginId, key) {
-	return getPluginSettingWithDb(pluginId, key, await getDb());
-}
-/**
-* Get a single plugin setting by key (with explicit db).
-*
-* @internal Use `getPluginSetting()` in templates and plugin rendering code.
-*/
-async function getPluginSettingWithDb(pluginId, key, db) {
-	const value = await new OptionsRepository(db).get(`plugin:${pluginId}:settings:${key}`);
-	if (value === null) return void 0;
-	return await decodePersistedPluginSetting(pluginId, key, value);
-}
-/**
-* Get all persisted plugin settings for a plugin.
-*
-* Defaults declared in `admin.settingsSchema` are not materialized
-* automatically; callers should apply their own fallback defaults.
-*/
-async function getPluginSettings(pluginId) {
-	return getPluginSettingsWithDb(pluginId, await getDb());
-}
-/**
-* Get all persisted plugin settings for a plugin (with explicit db).
-*
-* @internal Use `getPluginSettings()` in templates and plugin rendering code.
-*/
-async function getPluginSettingsWithDb(pluginId, db) {
-	const prefix = `plugin:${pluginId}:settings:`;
-	const entries = [...await new OptionsRepository(db).getByPrefix(prefix)].filter(([key]) => key.startsWith(prefix));
-	const encryptionKeys = entries.some(([, value]) => isEncryptedPluginSetting(value)) ? await resolvePluginEncryptionKeys() : void 0;
-	return Object.fromEntries(await Promise.all(entries.map(async ([storedKey, value]) => {
-		const key = storedKey.slice(prefix.length);
-		return [key, await decodePersistedPluginSetting(pluginId, key, value, encryptionKeys)];
-	})));
-}
-
-//#endregion
-export { getSiteSettingsWithCacheHint as a, setSiteSettings as c, decodePluginSettingValue as d, encodePluginSettingValue as f, getSiteSettings as i, PluginSettingEncryptionError as l, isEncryptedPluginSetting as m, getPluginSettings as n, getSiteSettingsWithDb as o, encryptPluginSetting as p, getSiteSetting as r, invalidateSiteSettingsCache as s, getPluginSetting as t, createSettingsAccess as u };
-//# sourceMappingURL=settings-CsoLiwpL.mjs.map