emdash 0.39.1 → 0.40.1

package/dist/astro/routes/api/media/_id_/confirm.mjs

@@ -1,19 +1,25 @@
-import "../../../../../config-CGVeT8Hc.mjs";
+import "../../../../../config-CvmjJcVw.mjs";
 import "../../../../../base64-DvnNgP7e.mjs";
 import "../../../../../types-BkUg2yHx.mjs";
-import { t as MediaRepository } from "../../../../../media-TBlKCwo7.mjs";
-import "../../../../../dist-2hDLsLeq.mjs";
-import { t as enrichImageMetadata } from "../../../../../enrich-C2Mk0lwE.mjs";
-import { n as computeContentHash, t as MAX_CONTENT_HASH_BYTES } from "../../../../../hash-CLVFzWvx.mjs";
-import { n as apiSuccess, r as handleError, t as apiError } from "../../../../../error-CCTCskie.mjs";
-import { r as parseOptionalBody, t as isParseError } from "../../../../../parse-Cr379Av9.mjs";
-import "../../../../../redirects-BCiTaIQ-.mjs";
-import { Mt as mediaConfirmBody } from "../../../../../entry-lock-CwWdnFyR.mjs";
-import "../../../../../comments-BVzzt6x5.mjs";
-import "../../../../../relations-B4w-G5U9.mjs";
-import "../../../../../status-DLoBmcDz.mjs";
+import { t as MediaRepository } from "../../../../../media-CPXTbb1R.mjs";
+import "../../../../../dist-BNwANFJR.mjs";
+import { t as enrichImageMetadata } from "../../../../../enrich-Dl3kZ-lP.mjs";
+import "../../../../../errors-DgE1zJGG.mjs";
+import { n as computeContentHash, t as MAX_CONTENT_HASH_BYTES } from "../../../../../hash-SDAW6zC-.mjs";
+import "../../../../../settings-DYidIB26.mjs";
+import "../../../../../site-settings-DOgRUoFX.mjs";
+import "../../../../../errors-BF0_LFhW.mjs";
+import { n as apiSuccess, r as handleError, t as apiError } from "../../../../../error-CfvOHP0M.mjs";
+import { r as parseOptionalBody, t as isParseError } from "../../../../../parse-DY6OD1j_.mjs";
+import "../../../../../redirects-Cv9apQKj.mjs";
+import "../../../../../entry-lock-BJYdBfXb.mjs";
+import { i as mediaConfirmBody } from "../../../../../media-Pu1L6xir.mjs";
+import "../../../../../comments-fHZ8ON9O.mjs";
+import "../../../../../relations-CK9CYUyr.mjs";
+import "../../../../../menus-BM7BPLOb.mjs";
+import "../../../../../status-DZKIG4a9.mjs";
 import "../../../../../api/schemas/index.mjs";
-import { n as requireOwnerPerm, r as requirePerm } from "../../../../../authorize-BXpfMpp0.mjs";
+import { i as requirePerm, r as requireOwnerPerm } from "../../../../../authorize-seCifOMJ.mjs";
 
 //#region src/astro/routes/api/media/[id]/confirm.ts
 const prerender = false;

package/dist/astro/routes/api/media/_id_/confirm.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"confirm.mjs","names":[],"sources":["../../../../../../src/astro/routes/api/media/[id]/confirm.ts"],"sourcesContent":["/**\n * Confirm media upload endpoint\n *\n * POST /_emdash/api/media/{id}/confirm\n *\n * Confirms that the client has successfully uploaded the file to storage.\n * Marks the media record as ready and optionally updates metadata.\n */\n\nimport type { APIRoute } from \"astro\";\nimport type { DownloadResult } from \"emdash\";\n\nimport { requireOwnerPerm, requirePerm } from \"#api/authorize.js\";\nimport { apiError, apiSuccess, handleError } from \"#api/error.js\";\nimport { isParseError, parseOptionalBody } from \"#api/parse.js\";\nimport { mediaConfirmBody } from \"#api/schemas.js\";\nimport { MediaRepository } from \"#db/repositories/media.js\";\nimport { enrichImageMetadata } from \"#media/enrich.js\";\nimport type { MediaItem } from \"#types\";\nimport { computeContentHash, MAX_CONTENT_HASH_BYTES } from \"#utils/hash.js\";\n\nexport const prerender = false;\n\n/**\n * Max raw bytes to buffer for server-side LQIP generation at confirm time. The\n * signed-URL upload flow exists so large files bypass server buffering — re-reading\n * the whole object into a Worker's 128 MB heap to compute a blurhash would OOM\n * on the very uploads that flow was designed for. LQIP is progressive\n * enhancement: large images simply ship without a server-generated placeholder.\n */\nconst MAX_PLACEHOLDER_DOWNLOAD_BYTES = MAX_CONTENT_HASH_BYTES;\n\n/**\n * Add URL to media item (relative URL for portability)\n */\nfunction addUrlToMedia(item: MediaItem): MediaItem & { url: string } {\n\treturn {\n\t\t...item,\n\t\turl: `/_emdash/api/media/file/${item.storageKey}`,\n\t};\n}\n\nasync function cancelDownload(download: DownloadResult): Promise<void> {\n\ttry {\n\t\tawait download.body.cancel();\n\t} catch (error) {\n\t\tconsole.error(\"[media] confirm download cancellation failed:\", error);\n\t}\n}\n\nasync function forgetUploadAttempt(repo: MediaRepository, storageKey: string): Promise<void> {\n\ttry {\n\t\tawait repo.deleteUploadAttempt(storageKey);\n\t} catch (error) {\n\t\tconsole.error(\"[media] confirm upload attempt cleanup failed:\", error);\n\t}\n}\n\nasync function confirmationConflict(repo: MediaRepository, id: string): Promise<Response> {\n\tconst current = await repo.findById(id);\n\tif (!current) {\n\t\treturn apiError(\"NOT_FOUND\", `Media item not found: ${id}`, 404);\n\t}\n\tif (current.status === \"ready\") {\n\t\tawait forgetUploadAttempt(repo, current.storageKey);\n\t\treturn apiSuccess({ item: addUrlToMedia(current) });\n\t}\n\tif (current.status === \"pending\") {\n\t\treturn apiError(\"INVALID_STATE\", \"Media item changed during confirmation\", 409);\n\t}\n\treturn apiError(\"INVALID_STATE\", `Media item is not pending: ${current.status}`, 400);\n}\n\nasync function consumeDownload(download: DownloadResult): Promise<Uint8Array> {\n\tconst reader = download.body.getReader();\n\ttry {\n\t\tconst bytes = new Uint8Array(download.size);\n\t\tlet receivedSize = 0;\n\t\twhile (true) {\n\t\t\tconst { done, value } = await reader.read();\n\t\t\tif (done) break;\n\t\t\tif (receivedSize + value.byteLength > bytes.byteLength) {\n\t\t\t\tthrow new Error(\"Stored file exceeds its reported size\");\n\t\t\t}\n\t\t\tbytes.set(value, receivedSize);\n\t\t\treceivedSize += value.byteLength;\n\t\t}\n\t\tif (receivedSize !== download.size) {\n\t\t\tthrow new Error(\"Stored file size does not match its reported size\");\n\t\t}\n\t\treturn bytes;\n\t} catch (error) {\n\t\ttry {\n\t\t\tawait reader.cancel(error);\n\t\t} catch (cancelError) {\n\t\t\tconsole.error(\"[media] confirm download cancellation failed:\", cancelError);\n\t\t}\n\t\tthrow error;\n\t} finally {\n\t\treader.releaseLock();\n\t}\n}\n\n/**\n * Confirm upload completion\n */\nexport const POST: APIRoute = async ({ params, request, locals }) => {\n\tconst { emdash, user } = locals;\n\tconst { id } = params;\n\n\tconst denied = requirePerm(user, \"media:upload\");\n\tif (denied) return denied;\n\n\tif (!id) {\n\t\treturn apiError(\"INVALID_REQUEST\", \"Media ID is required\", 400);\n\t}\n\n\tif (!emdash?.db) {\n\t\treturn apiError(\"NOT_CONFIGURED\", \"EmDash is not initialized\", 500);\n\t}\n\n\ttry {\n\t\tconst body = await parseOptionalBody(request, mediaConfirmBody, {});\n\t\tif (isParseError(body)) return body;\n\n\t\tconst repo = new MediaRepository(emdash.db);\n\n\t\t// Get the media item first to check status\n\t\tconst existing = await repo.findById(id);\n\t\tif (!existing) {\n\t\t\treturn apiError(\"NOT_FOUND\", `Media item not found: ${id}`, 404);\n\t\t}\n\n\t\t// Only the uploader or a user with media:edit_any can confirm/fail a pending upload\n\t\tconst ownerDenied = requireOwnerPerm(\n\t\t\tuser,\n\t\t\texisting.authorId ?? \"\",\n\t\t\t\"media:upload\",\n\t\t\t\"media:edit_any\",\n\t\t);\n\t\tif (ownerDenied) return ownerDenied;\n\n\t\tif (existing.status === \"ready\") {\n\t\t\tawait forgetUploadAttempt(repo, existing.storageKey);\n\t\t\treturn apiSuccess({ item: addUrlToMedia(existing) });\n\t\t}\n\t\tif (existing.status !== \"pending\") {\n\t\t\treturn apiError(\"INVALID_STATE\", `Media item is not pending: ${existing.status}`, 400);\n\t\t}\n\n\t\tif (body.size !== undefined && existing.size !== null && body.size !== existing.size) {\n\t\t\treturn apiError(\n\t\t\t\t\"UPLOAD_SIZE_MISMATCH\",\n\t\t\t\t\"Confirmed size does not match the pending media item\",\n\t\t\t\t400,\n\t\t\t);\n\t\t}\n\n\t\tlet confirmedSize = existing.size ?? body.size;\n\t\tlet contentHash = existing.contentHash;\n\t\tlet imageBytes: Uint8Array | undefined;\n\n\t\tif (emdash.storage) {\n\t\t\tconst exists = await emdash.storage.exists(existing.storageKey);\n\t\t\tif (!exists) {\n\t\t\t\tconst failed = await repo.markFailed(id, existing.storageKey);\n\t\t\t\tif (!failed) return await confirmationConflict(repo, id);\n\t\t\t\treturn apiError(\"FILE_NOT_FOUND\", \"File was not uploaded to storage\", 400);\n\t\t\t}\n\n\t\t\tconst storedFile = await emdash.storage.download(existing.storageKey);\n\t\t\tif (confirmedSize !== undefined && storedFile.size !== confirmedSize) {\n\t\t\t\tawait cancelDownload(storedFile);\n\t\t\t\treturn apiError(\n\t\t\t\t\t\"UPLOAD_SIZE_MISMATCH\",\n\t\t\t\t\t\"Stored file size does not match the pending media item\",\n\t\t\t\t\t400,\n\t\t\t\t);\n\t\t\t}\n\t\t\tconfirmedSize = storedFile.size;\n\n\t\t\tconst isImage = existing.mimeType.startsWith(\"image/\");\n\t\t\tconst canBuffer = storedFile.size <= MAX_PLACEHOLDER_DOWNLOAD_BYTES;\n\t\t\tconst hasServerHash =\n\t\t\t\tcontentHash !== null && (await repo.hasUploadAttempt(existing.storageKey));\n\t\t\tif (canBuffer && (isImage || !hasServerHash)) {\n\t\t\t\tconst bytes = await consumeDownload(storedFile);\n\t\t\t\tcontentHash = bytes.byteLength > 0 ? await computeContentHash(bytes) : null;\n\t\t\t\tif (isImage && bytes.byteLength > 0) imageBytes = bytes;\n\t\t\t} else {\n\t\t\t\tif (!hasServerHash) contentHash = null;\n\t\t\t\tawait cancelDownload(storedFile);\n\t\t\t}\n\n\t\t\tif (isImage && !canBuffer) {\n\t\t\t\tconsole.warn(\n\t\t\t\t\t`[media] confirm skipping placeholder: object ${existing.storageKey} reported size ${storedFile.size} bytes (> ${MAX_PLACEHOLDER_DOWNLOAD_BYTES})`,\n\t\t\t\t);\n\t\t\t}\n\t\t}\n\n\t\t// LQIP is best-effort; oversized images skip server-side placeholders.\n\t\tlet blurhash: string | undefined;\n\t\tlet dominantColor: string | undefined;\n\t\tlet width = body.width;\n\t\tlet height = body.height;\n\t\tif (imageBytes) {\n\t\t\ttry {\n\t\t\t\tconst enriched = await enrichImageMetadata(imageBytes, existing.mimeType, {\n\t\t\t\t\tknownDimensions:\n\t\t\t\t\t\tbody.width != null && body.height != null\n\t\t\t\t\t\t\t? { width: body.width, height: body.height }\n\t\t\t\t\t\t\t: undefined,\n\t\t\t\t});\n\t\t\t\tblurhash = enriched.blurhash;\n\t\t\t\tdominantColor = enriched.dominantColor;\n\t\t\t\twidth = width ?? enriched.width;\n\t\t\t\theight = height ?? enriched.height;\n\t\t\t} catch (error) {\n\t\t\t\tconsole.error(\"[media] confirm placeholder generation failed:\", error);\n\t\t\t}\n\t\t}\n\n\t\t// Confirm the upload\n\t\tconst item = await repo.confirmUpload(\n\t\t\tid,\n\t\t\t{\n\t\t\t\tsize: confirmedSize,\n\t\t\t\twidth,\n\t\t\t\theight,\n\t\t\t\tblurhash,\n\t\t\t\tdominantColor,\n\t\t\t\tcontentHash,\n\t\t\t},\n\t\t\texisting.storageKey,\n\t\t);\n\n\t\tif (!item) {\n\t\t\treturn await confirmationConflict(repo, id);\n\t\t}\n\n\t\tawait forgetUploadAttempt(repo, item.storageKey);\n\n\t\t// Add URL to the response (relative URL for portability)\n\t\tconst itemWithUrl = addUrlToMedia(item);\n\n\t\treturn apiSuccess({ item: itemWithUrl });\n\t} catch (error) {\n\t\treturn handleError(error, \"Failed to confirm upload\", \"CONFIRM_ERROR\");\n\t}\n};\n"],"mappings":";;;;;;;;;;;;;;;;;;AAqBA,MAAa,YAAY;;;;;;;;AASzB,MAAM,iCAAiC;;;;AAKvC,SAAS,cAAc,MAA8C;AACpE,QAAO;EACN,GAAG;EACH,KAAK,2BAA2B,KAAK;EACrC;;AAGF,eAAe,eAAe,UAAyC;AACtE,KAAI;AACH,QAAM,SAAS,KAAK,QAAQ;UACpB,OAAO;AACf,UAAQ,MAAM,iDAAiD,MAAM;;;AAIvE,eAAe,oBAAoB,MAAuB,YAAmC;AAC5F,KAAI;AACH,QAAM,KAAK,oBAAoB,WAAW;UAClC,OAAO;AACf,UAAQ,MAAM,kDAAkD,MAAM;;;AAIxE,eAAe,qBAAqB,MAAuB,IAA+B;CACzF,MAAM,UAAU,MAAM,KAAK,SAAS,GAAG;AACvC,KAAI,CAAC,QACJ,QAAO,SAAS,aAAa,yBAAyB,MAAM,IAAI;AAEjE,KAAI,QAAQ,WAAW,SAAS;AAC/B,QAAM,oBAAoB,MAAM,QAAQ,WAAW;AACnD,SAAO,WAAW,EAAE,MAAM,cAAc,QAAQ,EAAE,CAAC;;AAEpD,KAAI,QAAQ,WAAW,UACtB,QAAO,SAAS,iBAAiB,0CAA0C,IAAI;AAEhF,QAAO,SAAS,iBAAiB,8BAA8B,QAAQ,UAAU,IAAI;;AAGtF,eAAe,gBAAgB,UAA+C;CAC7E,MAAM,SAAS,SAAS,KAAK,WAAW;AACxC,KAAI;EACH,MAAM,QAAQ,IAAI,WAAW,SAAS,KAAK;EAC3C,IAAI,eAAe;AACnB,SAAO,MAAM;GACZ,MAAM,EAAE,MAAM,UAAU,MAAM,OAAO,MAAM;AAC3C,OAAI,KAAM;AACV,OAAI,eAAe,MAAM,aAAa,MAAM,WAC3C,OAAM,IAAI,MAAM,wCAAwC;AAEzD,SAAM,IAAI,OAAO,aAAa;AAC9B,mBAAgB,MAAM;;AAEvB,MAAI,iBAAiB,SAAS,KAC7B,OAAM,IAAI,MAAM,oDAAoD;AAErE,SAAO;UACC,OAAO;AACf,MAAI;AACH,SAAM,OAAO,OAAO,MAAM;WAClB,aAAa;AACrB,WAAQ,MAAM,iDAAiD,YAAY;;AAE5E,QAAM;WACG;AACT,SAAO,aAAa;;;;;;AAOtB,MAAa,OAAiB,OAAO,EAAE,QAAQ,SAAS,aAAa;CACpE,MAAM,EAAE,QAAQ,SAAS;CACzB,MAAM,EAAE,OAAO;CAEf,MAAM,SAAS,YAAY,MAAM,eAAe;AAChD,KAAI,OAAQ,QAAO;AAEnB,KAAI,CAAC,GACJ,QAAO,SAAS,mBAAmB,wBAAwB,IAAI;AAGhE,KAAI,CAAC,QAAQ,GACZ,QAAO,SAAS,kBAAkB,6BAA6B,IAAI;AAGpE,KAAI;EACH,MAAM,OAAO,MAAM,kBAAkB,SAAS,kBAAkB,EAAE,CAAC;AACnE,MAAI,aAAa,KAAK,CAAE,QAAO;EAE/B,MAAM,OAAO,IAAI,gBAAgB,OAAO,GAAG;EAG3C,MAAM,WAAW,MAAM,KAAK,SAAS,GAAG;AACxC,MAAI,CAAC,SACJ,QAAO,SAAS,aAAa,yBAAyB,MAAM,IAAI;EAIjE,MAAM,cAAc,iBACnB,MACA,SAAS,YAAY,IACrB,gBACA,iBACA;AACD,MAAI,YAAa,QAAO;AAExB,MAAI,SAAS,WAAW,SAAS;AAChC,SAAM,oBAAoB,MAAM,SAAS,WAAW;AACpD,UAAO,WAAW,EAAE,MAAM,cAAc,SAAS,EAAE,CAAC;;AAErD,MAAI,SAAS,WAAW,UACvB,QAAO,SAAS,iBAAiB,8BAA8B,SAAS,UAAU,IAAI;AAGvF,MAAI,KAAK,SAAS,UAAa,SAAS,SAAS,QAAQ,KAAK,SAAS,SAAS,KAC/E,QAAO,SACN,wBACA,wDACA,IACA;EAGF,IAAI,gBAAgB,SAAS,QAAQ,KAAK;EAC1C,IAAI,cAAc,SAAS;EAC3B,IAAI;AAEJ,MAAI,OAAO,SAAS;AAEnB,OAAI,CADW,MAAM,OAAO,QAAQ,OAAO,SAAS,WAAW,EAClD;AAEZ,QAAI,CADW,MAAM,KAAK,WAAW,IAAI,SAAS,WAAW,CAChD,QAAO,MAAM,qBAAqB,MAAM,GAAG;AACxD,WAAO,SAAS,kBAAkB,oCAAoC,IAAI;;GAG3E,MAAM,aAAa,MAAM,OAAO,QAAQ,SAAS,SAAS,WAAW;AACrE,OAAI,kBAAkB,UAAa,WAAW,SAAS,eAAe;AACrE,UAAM,eAAe,WAAW;AAChC,WAAO,SACN,wBACA,0DACA,IACA;;AAEF,mBAAgB,WAAW;GAE3B,MAAM,UAAU,SAAS,SAAS,WAAW,SAAS;GACtD,MAAM,YAAY,WAAW,QAAQ;GACrC,MAAM,gBACL,gBAAgB,QAAS,MAAM,KAAK,iBAAiB,SAAS,WAAW;AAC1E,OAAI,cAAc,WAAW,CAAC,gBAAgB;IAC7C,MAAM,QAAQ,MAAM,gBAAgB,WAAW;AAC/C,kBAAc,MAAM,aAAa,IAAI,MAAM,mBAAmB,MAAM,GAAG;AACvE,QAAI,WAAW,MAAM,aAAa,EAAG,cAAa;UAC5C;AACN,QAAI,CAAC,cAAe,eAAc;AAClC,UAAM,eAAe,WAAW;;AAGjC,OAAI,WAAW,CAAC,UACf,SAAQ,KACP,gDAAgD,SAAS,WAAW,iBAAiB,WAAW,KAAK,YAAY,+BAA+B,GAChJ;;EAKH,IAAI;EACJ,IAAI;EACJ,IAAI,QAAQ,KAAK;EACjB,IAAI,SAAS,KAAK;AAClB,MAAI,WACH,KAAI;GACH,MAAM,WAAW,MAAM,oBAAoB,YAAY,SAAS,UAAU,EACzE,iBACC,KAAK,SAAS,QAAQ,KAAK,UAAU,OAClC;IAAE,OAAO,KAAK;IAAO,QAAQ,KAAK;IAAQ,GAC1C,QACJ,CAAC;AACF,cAAW,SAAS;AACpB,mBAAgB,SAAS;AACzB,WAAQ,SAAS,SAAS;AAC1B,YAAS,UAAU,SAAS;WACpB,OAAO;AACf,WAAQ,MAAM,kDAAkD,MAAM;;EAKxE,MAAM,OAAO,MAAM,KAAK,cACvB,IACA;GACC,MAAM;GACN;GACA;GACA;GACA;GACA;GACA,EACD,SAAS,WACT;AAED,MAAI,CAAC,KACJ,QAAO,MAAM,qBAAqB,MAAM,GAAG;AAG5C,QAAM,oBAAoB,MAAM,KAAK,WAAW;AAKhD,SAAO,WAAW,EAAE,MAFA,cAAc,KAAK,EAEA,CAAC;UAChC,OAAO;AACf,SAAO,YAAY,OAAO,4BAA4B,gBAAgB"}
+{"version":3,"file":"confirm.mjs","names":[],"sources":["../../../../../../src/astro/routes/api/media/[id]/confirm.ts"],"sourcesContent":["/**\n * Confirm media upload endpoint\n *\n * POST /_emdash/api/media/{id}/confirm\n *\n * Confirms that the client has successfully uploaded the file to storage.\n * Marks the media record as ready and optionally updates metadata.\n */\n\nimport type { APIRoute } from \"astro\";\nimport type { DownloadResult } from \"emdash\";\n\nimport { requireOwnerPerm, requirePerm } from \"#api/authorize.js\";\nimport { apiError, apiSuccess, handleError } from \"#api/error.js\";\nimport { isParseError, parseOptionalBody } from \"#api/parse.js\";\nimport { mediaConfirmBody } from \"#api/schemas.js\";\nimport { MediaRepository } from \"#db/repositories/media.js\";\nimport { enrichImageMetadata } from \"#media/enrich.js\";\nimport type { MediaItem } from \"#types\";\nimport { computeContentHash, MAX_CONTENT_HASH_BYTES } from \"#utils/hash.js\";\n\nexport const prerender = false;\n\n/**\n * Max raw bytes to buffer for server-side LQIP generation at confirm time. The\n * signed-URL upload flow exists so large files bypass server buffering — re-reading\n * the whole object into a Worker's 128 MB heap to compute a blurhash would OOM\n * on the very uploads that flow was designed for. LQIP is progressive\n * enhancement: large images simply ship without a server-generated placeholder.\n */\nconst MAX_PLACEHOLDER_DOWNLOAD_BYTES = MAX_CONTENT_HASH_BYTES;\n\n/**\n * Add URL to media item (relative URL for portability)\n */\nfunction addUrlToMedia(item: MediaItem): MediaItem & { url: string } {\n\treturn {\n\t\t...item,\n\t\turl: `/_emdash/api/media/file/${item.storageKey}`,\n\t};\n}\n\nasync function cancelDownload(download: DownloadResult): Promise<void> {\n\ttry {\n\t\tawait download.body.cancel();\n\t} catch (error) {\n\t\tconsole.error(\"[media] confirm download cancellation failed:\", error);\n\t}\n}\n\nasync function forgetUploadAttempt(repo: MediaRepository, storageKey: string): Promise<void> {\n\ttry {\n\t\tawait repo.deleteUploadAttempt(storageKey);\n\t} catch (error) {\n\t\tconsole.error(\"[media] confirm upload attempt cleanup failed:\", error);\n\t}\n}\n\nasync function confirmationConflict(repo: MediaRepository, id: string): Promise<Response> {\n\tconst current = await repo.findById(id);\n\tif (!current) {\n\t\treturn apiError(\"NOT_FOUND\", `Media item not found: ${id}`, 404);\n\t}\n\tif (current.status === \"ready\") {\n\t\tawait forgetUploadAttempt(repo, current.storageKey);\n\t\treturn apiSuccess({ item: addUrlToMedia(current) });\n\t}\n\tif (current.status === \"pending\") {\n\t\treturn apiError(\"INVALID_STATE\", \"Media item changed during confirmation\", 409);\n\t}\n\treturn apiError(\"INVALID_STATE\", `Media item is not pending: ${current.status}`, 400);\n}\n\nasync function consumeDownload(download: DownloadResult): Promise<Uint8Array> {\n\tconst reader = download.body.getReader();\n\ttry {\n\t\tconst bytes = new Uint8Array(download.size);\n\t\tlet receivedSize = 0;\n\t\twhile (true) {\n\t\t\tconst { done, value } = await reader.read();\n\t\t\tif (done) break;\n\t\t\tif (receivedSize + value.byteLength > bytes.byteLength) {\n\t\t\t\tthrow new Error(\"Stored file exceeds its reported size\");\n\t\t\t}\n\t\t\tbytes.set(value, receivedSize);\n\t\t\treceivedSize += value.byteLength;\n\t\t}\n\t\tif (receivedSize !== download.size) {\n\t\t\tthrow new Error(\"Stored file size does not match its reported size\");\n\t\t}\n\t\treturn bytes;\n\t} catch (error) {\n\t\ttry {\n\t\t\tawait reader.cancel(error);\n\t\t} catch (cancelError) {\n\t\t\tconsole.error(\"[media] confirm download cancellation failed:\", cancelError);\n\t\t}\n\t\tthrow error;\n\t} finally {\n\t\treader.releaseLock();\n\t}\n}\n\n/**\n * Confirm upload completion\n */\nexport const POST: APIRoute = async ({ params, request, locals }) => {\n\tconst { emdash, user } = locals;\n\tconst { id } = params;\n\n\tconst denied = requirePerm(user, \"media:upload\");\n\tif (denied) return denied;\n\n\tif (!id) {\n\t\treturn apiError(\"INVALID_REQUEST\", \"Media ID is required\", 400);\n\t}\n\n\tif (!emdash?.db) {\n\t\treturn apiError(\"NOT_CONFIGURED\", \"EmDash is not initialized\", 500);\n\t}\n\n\ttry {\n\t\tconst body = await parseOptionalBody(request, mediaConfirmBody, {});\n\t\tif (isParseError(body)) return body;\n\n\t\tconst repo = new MediaRepository(emdash.db);\n\n\t\t// Get the media item first to check status\n\t\tconst existing = await repo.findById(id);\n\t\tif (!existing) {\n\t\t\treturn apiError(\"NOT_FOUND\", `Media item not found: ${id}`, 404);\n\t\t}\n\n\t\t// Only the uploader or a user with media:edit_any can confirm/fail a pending upload\n\t\tconst ownerDenied = requireOwnerPerm(\n\t\t\tuser,\n\t\t\texisting.authorId ?? \"\",\n\t\t\t\"media:upload\",\n\t\t\t\"media:edit_any\",\n\t\t);\n\t\tif (ownerDenied) return ownerDenied;\n\n\t\tif (existing.status === \"ready\") {\n\t\t\tawait forgetUploadAttempt(repo, existing.storageKey);\n\t\t\treturn apiSuccess({ item: addUrlToMedia(existing) });\n\t\t}\n\t\tif (existing.status !== \"pending\") {\n\t\t\treturn apiError(\"INVALID_STATE\", `Media item is not pending: ${existing.status}`, 400);\n\t\t}\n\n\t\tif (body.size !== undefined && existing.size !== null && body.size !== existing.size) {\n\t\t\treturn apiError(\n\t\t\t\t\"UPLOAD_SIZE_MISMATCH\",\n\t\t\t\t\"Confirmed size does not match the pending media item\",\n\t\t\t\t400,\n\t\t\t);\n\t\t}\n\n\t\tlet confirmedSize = existing.size ?? body.size;\n\t\tlet contentHash = existing.contentHash;\n\t\tlet imageBytes: Uint8Array | undefined;\n\n\t\tif (emdash.storage) {\n\t\t\tconst exists = await emdash.storage.exists(existing.storageKey);\n\t\t\tif (!exists) {\n\t\t\t\tconst failed = await repo.markFailed(id, existing.storageKey);\n\t\t\t\tif (!failed) return await confirmationConflict(repo, id);\n\t\t\t\treturn apiError(\"FILE_NOT_FOUND\", \"File was not uploaded to storage\", 400);\n\t\t\t}\n\n\t\t\tconst storedFile = await emdash.storage.download(existing.storageKey);\n\t\t\tif (confirmedSize !== undefined && storedFile.size !== confirmedSize) {\n\t\t\t\tawait cancelDownload(storedFile);\n\t\t\t\treturn apiError(\n\t\t\t\t\t\"UPLOAD_SIZE_MISMATCH\",\n\t\t\t\t\t\"Stored file size does not match the pending media item\",\n\t\t\t\t\t400,\n\t\t\t\t);\n\t\t\t}\n\t\t\tconfirmedSize = storedFile.size;\n\n\t\t\tconst isImage = existing.mimeType.startsWith(\"image/\");\n\t\t\tconst canBuffer = storedFile.size <= MAX_PLACEHOLDER_DOWNLOAD_BYTES;\n\t\t\tconst hasServerHash =\n\t\t\t\tcontentHash !== null && (await repo.hasUploadAttempt(existing.storageKey));\n\t\t\tif (canBuffer && (isImage || !hasServerHash)) {\n\t\t\t\tconst bytes = await consumeDownload(storedFile);\n\t\t\t\tcontentHash = bytes.byteLength > 0 ? await computeContentHash(bytes) : null;\n\t\t\t\tif (isImage && bytes.byteLength > 0) imageBytes = bytes;\n\t\t\t} else {\n\t\t\t\tif (!hasServerHash) contentHash = null;\n\t\t\t\tawait cancelDownload(storedFile);\n\t\t\t}\n\n\t\t\tif (isImage && !canBuffer) {\n\t\t\t\tconsole.warn(\n\t\t\t\t\t`[media] confirm skipping placeholder: object ${existing.storageKey} reported size ${storedFile.size} bytes (> ${MAX_PLACEHOLDER_DOWNLOAD_BYTES})`,\n\t\t\t\t);\n\t\t\t}\n\t\t}\n\n\t\t// LQIP is best-effort; oversized images skip server-side placeholders.\n\t\tlet blurhash: string | undefined;\n\t\tlet dominantColor: string | undefined;\n\t\tlet width = body.width;\n\t\tlet height = body.height;\n\t\tif (imageBytes) {\n\t\t\ttry {\n\t\t\t\tconst enriched = await enrichImageMetadata(imageBytes, existing.mimeType, {\n\t\t\t\t\tknownDimensions:\n\t\t\t\t\t\tbody.width != null && body.height != null\n\t\t\t\t\t\t\t? { width: body.width, height: body.height }\n\t\t\t\t\t\t\t: undefined,\n\t\t\t\t});\n\t\t\t\tblurhash = enriched.blurhash;\n\t\t\t\tdominantColor = enriched.dominantColor;\n\t\t\t\twidth = width ?? enriched.width;\n\t\t\t\theight = height ?? enriched.height;\n\t\t\t} catch (error) {\n\t\t\t\tconsole.error(\"[media] confirm placeholder generation failed:\", error);\n\t\t\t}\n\t\t}\n\n\t\t// Confirm the upload\n\t\tconst item = await repo.confirmUpload(\n\t\t\tid,\n\t\t\t{\n\t\t\t\tsize: confirmedSize,\n\t\t\t\twidth,\n\t\t\t\theight,\n\t\t\t\tblurhash,\n\t\t\t\tdominantColor,\n\t\t\t\tcontentHash,\n\t\t\t},\n\t\t\texisting.storageKey,\n\t\t);\n\n\t\tif (!item) {\n\t\t\treturn await confirmationConflict(repo, id);\n\t\t}\n\n\t\tawait forgetUploadAttempt(repo, item.storageKey);\n\n\t\t// Add URL to the response (relative URL for portability)\n\t\tconst itemWithUrl = addUrlToMedia(item);\n\n\t\treturn apiSuccess({ item: itemWithUrl });\n\t} catch (error) {\n\t\treturn handleError(error, \"Failed to confirm upload\", \"CONFIRM_ERROR\");\n\t}\n};\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;AAqBA,MAAa,YAAY;;;;;;;;AASzB,MAAM,iCAAiC;;;;AAKvC,SAAS,cAAc,MAA8C;AACpE,QAAO;EACN,GAAG;EACH,KAAK,2BAA2B,KAAK;EACrC;;AAGF,eAAe,eAAe,UAAyC;AACtE,KAAI;AACH,QAAM,SAAS,KAAK,QAAQ;UACpB,OAAO;AACf,UAAQ,MAAM,iDAAiD,MAAM;;;AAIvE,eAAe,oBAAoB,MAAuB,YAAmC;AAC5F,KAAI;AACH,QAAM,KAAK,oBAAoB,WAAW;UAClC,OAAO;AACf,UAAQ,MAAM,kDAAkD,MAAM;;;AAIxE,eAAe,qBAAqB,MAAuB,IAA+B;CACzF,MAAM,UAAU,MAAM,KAAK,SAAS,GAAG;AACvC,KAAI,CAAC,QACJ,QAAO,SAAS,aAAa,yBAAyB,MAAM,IAAI;AAEjE,KAAI,QAAQ,WAAW,SAAS;AAC/B,QAAM,oBAAoB,MAAM,QAAQ,WAAW;AACnD,SAAO,WAAW,EAAE,MAAM,cAAc,QAAQ,EAAE,CAAC;;AAEpD,KAAI,QAAQ,WAAW,UACtB,QAAO,SAAS,iBAAiB,0CAA0C,IAAI;AAEhF,QAAO,SAAS,iBAAiB,8BAA8B,QAAQ,UAAU,IAAI;;AAGtF,eAAe,gBAAgB,UAA+C;CAC7E,MAAM,SAAS,SAAS,KAAK,WAAW;AACxC,KAAI;EACH,MAAM,QAAQ,IAAI,WAAW,SAAS,KAAK;EAC3C,IAAI,eAAe;AACnB,SAAO,MAAM;GACZ,MAAM,EAAE,MAAM,UAAU,MAAM,OAAO,MAAM;AAC3C,OAAI,KAAM;AACV,OAAI,eAAe,MAAM,aAAa,MAAM,WAC3C,OAAM,IAAI,MAAM,wCAAwC;AAEzD,SAAM,IAAI,OAAO,aAAa;AAC9B,mBAAgB,MAAM;;AAEvB,MAAI,iBAAiB,SAAS,KAC7B,OAAM,IAAI,MAAM,oDAAoD;AAErE,SAAO;UACC,OAAO;AACf,MAAI;AACH,SAAM,OAAO,OAAO,MAAM;WAClB,aAAa;AACrB,WAAQ,MAAM,iDAAiD,YAAY;;AAE5E,QAAM;WACG;AACT,SAAO,aAAa;;;;;;AAOtB,MAAa,OAAiB,OAAO,EAAE,QAAQ,SAAS,aAAa;CACpE,MAAM,EAAE,QAAQ,SAAS;CACzB,MAAM,EAAE,OAAO;CAEf,MAAM,SAAS,YAAY,MAAM,eAAe;AAChD,KAAI,OAAQ,QAAO;AAEnB,KAAI,CAAC,GACJ,QAAO,SAAS,mBAAmB,wBAAwB,IAAI;AAGhE,KAAI,CAAC,QAAQ,GACZ,QAAO,SAAS,kBAAkB,6BAA6B,IAAI;AAGpE,KAAI;EACH,MAAM,OAAO,MAAM,kBAAkB,SAAS,kBAAkB,EAAE,CAAC;AACnE,MAAI,aAAa,KAAK,CAAE,QAAO;EAE/B,MAAM,OAAO,IAAI,gBAAgB,OAAO,GAAG;EAG3C,MAAM,WAAW,MAAM,KAAK,SAAS,GAAG;AACxC,MAAI,CAAC,SACJ,QAAO,SAAS,aAAa,yBAAyB,MAAM,IAAI;EAIjE,MAAM,cAAc,iBACnB,MACA,SAAS,YAAY,IACrB,gBACA,iBACA;AACD,MAAI,YAAa,QAAO;AAExB,MAAI,SAAS,WAAW,SAAS;AAChC,SAAM,oBAAoB,MAAM,SAAS,WAAW;AACpD,UAAO,WAAW,EAAE,MAAM,cAAc,SAAS,EAAE,CAAC;;AAErD,MAAI,SAAS,WAAW,UACvB,QAAO,SAAS,iBAAiB,8BAA8B,SAAS,UAAU,IAAI;AAGvF,MAAI,KAAK,SAAS,UAAa,SAAS,SAAS,QAAQ,KAAK,SAAS,SAAS,KAC/E,QAAO,SACN,wBACA,wDACA,IACA;EAGF,IAAI,gBAAgB,SAAS,QAAQ,KAAK;EAC1C,IAAI,cAAc,SAAS;EAC3B,IAAI;AAEJ,MAAI,OAAO,SAAS;AAEnB,OAAI,CADW,MAAM,OAAO,QAAQ,OAAO,SAAS,WAAW,EAClD;AAEZ,QAAI,CADW,MAAM,KAAK,WAAW,IAAI,SAAS,WAAW,CAChD,QAAO,MAAM,qBAAqB,MAAM,GAAG;AACxD,WAAO,SAAS,kBAAkB,oCAAoC,IAAI;;GAG3E,MAAM,aAAa,MAAM,OAAO,QAAQ,SAAS,SAAS,WAAW;AACrE,OAAI,kBAAkB,UAAa,WAAW,SAAS,eAAe;AACrE,UAAM,eAAe,WAAW;AAChC,WAAO,SACN,wBACA,0DACA,IACA;;AAEF,mBAAgB,WAAW;GAE3B,MAAM,UAAU,SAAS,SAAS,WAAW,SAAS;GACtD,MAAM,YAAY,WAAW,QAAQ;GACrC,MAAM,gBACL,gBAAgB,QAAS,MAAM,KAAK,iBAAiB,SAAS,WAAW;AAC1E,OAAI,cAAc,WAAW,CAAC,gBAAgB;IAC7C,MAAM,QAAQ,MAAM,gBAAgB,WAAW;AAC/C,kBAAc,MAAM,aAAa,IAAI,MAAM,mBAAmB,MAAM,GAAG;AACvE,QAAI,WAAW,MAAM,aAAa,EAAG,cAAa;UAC5C;AACN,QAAI,CAAC,cAAe,eAAc;AAClC,UAAM,eAAe,WAAW;;AAGjC,OAAI,WAAW,CAAC,UACf,SAAQ,KACP,gDAAgD,SAAS,WAAW,iBAAiB,WAAW,KAAK,YAAY,+BAA+B,GAChJ;;EAKH,IAAI;EACJ,IAAI;EACJ,IAAI,QAAQ,KAAK;EACjB,IAAI,SAAS,KAAK;AAClB,MAAI,WACH,KAAI;GACH,MAAM,WAAW,MAAM,oBAAoB,YAAY,SAAS,UAAU,EACzE,iBACC,KAAK,SAAS,QAAQ,KAAK,UAAU,OAClC;IAAE,OAAO,KAAK;IAAO,QAAQ,KAAK;IAAQ,GAC1C,QACJ,CAAC;AACF,cAAW,SAAS;AACpB,mBAAgB,SAAS;AACzB,WAAQ,SAAS,SAAS;AAC1B,YAAS,UAAU,SAAS;WACpB,OAAO;AACf,WAAQ,MAAM,kDAAkD,MAAM;;EAKxE,MAAM,OAAO,MAAM,KAAK,cACvB,IACA;GACC,MAAM;GACN;GACA;GACA;GACA;GACA;GACA,EACD,SAAS,WACT;AAED,MAAI,CAAC,KACJ,QAAO,MAAM,qBAAqB,MAAM,GAAG;AAG5C,QAAM,oBAAoB,MAAM,KAAK,WAAW;AAKhD,SAAO,WAAW,EAAE,MAFA,cAAc,KAAK,EAEA,CAAC;UAChC,OAAO;AACf,SAAO,YAAY,OAAO,4BAA4B,gBAAgB"}

package/dist/astro/routes/api/media/_id_/replace.mjs

@@ -1,17 +1,23 @@
-import "../../../../../config-CGVeT8Hc.mjs";
+import "../../../../../config-CvmjJcVw.mjs";
 import "../../../../../base64-DvnNgP7e.mjs";
 import "../../../../../types-BkUg2yHx.mjs";
-import { n as normalizeMime } from "../../../../../mime-CCYRC4r1.mjs";
-import { n as computeContentHash } from "../../../../../hash-CLVFzWvx.mjs";
-import { a as unwrapResult, n as apiSuccess, r as handleError, t as apiError } from "../../../../../error-CCTCskie.mjs";
-import "../../../../../redirects-BCiTaIQ-.mjs";
-import { At as DEFAULT_MAX_UPLOAD_SIZE, Qt as mediaReplaceMetadataForm } from "../../../../../entry-lock-CwWdnFyR.mjs";
-import "../../../../../comments-BVzzt6x5.mjs";
-import "../../../../../relations-B4w-G5U9.mjs";
-import "../../../../../status-DLoBmcDz.mjs";
+import { n as normalizeMime } from "../../../../../mime-ChLqYwDk.mjs";
+import "../../../../../errors-DgE1zJGG.mjs";
+import { n as computeContentHash } from "../../../../../hash-SDAW6zC-.mjs";
+import "../../../../../settings-DYidIB26.mjs";
+import "../../../../../site-settings-DOgRUoFX.mjs";
+import "../../../../../errors-BF0_LFhW.mjs";
+import { a as unwrapResult, n as apiSuccess, r as handleError, t as apiError } from "../../../../../error-CfvOHP0M.mjs";
+import "../../../../../redirects-Cv9apQKj.mjs";
+import "../../../../../entry-lock-BJYdBfXb.mjs";
+import { n as DEFAULT_MAX_UPLOAD_SIZE, w as mediaReplaceMetadataForm } from "../../../../../media-Pu1L6xir.mjs";
+import "../../../../../comments-fHZ8ON9O.mjs";
+import "../../../../../relations-CK9CYUyr.mjs";
+import "../../../../../menus-BM7BPLOb.mjs";
+import "../../../../../status-DZKIG4a9.mjs";
 import "../../../../../api/schemas/index.mjs";
 import { MUTABLE_MEDIA_CACHE_CONTROL } from "../../../../../media/image-endpoint.mjs";
-import { n as requireOwnerPerm, r as requirePerm } from "../../../../../authorize-BXpfMpp0.mjs";
+import { i as requirePerm, r as requireOwnerPerm } from "../../../../../authorize-seCifOMJ.mjs";
 
 //#region src/astro/routes/api/media/[id]/replace.ts
 const prerender = false;

package/dist/astro/routes/api/media/_id_/replace.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"replace.mjs","names":[],"sources":["../../../../../../src/astro/routes/api/media/[id]/replace.ts"],"sourcesContent":["import type { APIRoute } from \"astro\";\n\nimport { requireOwnerPerm, requirePerm } from \"#api/authorize.js\";\nimport { apiError, apiSuccess, handleError, unwrapResult } from \"#api/error.js\";\nimport { DEFAULT_MAX_UPLOAD_SIZE, mediaReplaceMetadataForm } from \"#api/schemas.js\";\nimport { MUTABLE_MEDIA_CACHE_CONTROL } from \"#media/image-endpoint.js\";\nimport { normalizeMime } from \"#media/mime.js\";\nimport { computeContentHash } from \"#utils/hash.js\";\n\nexport const prerender = false;\n\nconst REPLACEABLE_IMAGE_TYPES = new Set([\"image/jpeg\", \"image/png\", \"image/webp\"]);\n\nexport const PUT: APIRoute = async ({ params, request, locals }) => {\n\tconst { emdash, user } = locals;\n\tconst { id } = params;\n\n\tconst editDenied = requirePerm(user, \"media:edit_own\");\n\tif (editDenied) return editDenied;\n\tif (!id) return apiError(\"INVALID_REQUEST\", \"Media ID required\", 400);\n\tif (!emdash?.handleMediaGet || !emdash?.handleMediaReplaceMetadata) {\n\t\treturn apiError(\"NOT_CONFIGURED\", \"EmDash is not initialized\", 500);\n\t}\n\tif (!emdash.storage) return apiError(\"NO_STORAGE\", \"Storage not configured\", 500);\n\n\tconst getResult = await emdash.handleMediaGet(id);\n\tif (!getResult.success) return unwrapResult(getResult);\n\tconst media = getResult.data.item;\n\tconst ownerDenied = requireOwnerPerm(\n\t\tuser,\n\t\tmedia.authorId ?? \"\",\n\t\t\"media:edit_own\",\n\t\t\"media:edit_any\",\n\t);\n\tif (ownerDenied) return ownerDenied;\n\tif (media.status !== \"ready\") {\n\t\treturn apiError(\"INVALID_STATE\", \"Only ready media can be replaced\", 400);\n\t}\n\n\tconst sourceMime = normalizeMime(media.mimeType);\n\tif (!REPLACEABLE_IMAGE_TYPES.has(sourceMime)) {\n\t\treturn apiError(\"INVALID_TYPE\", \"Media type cannot be replaced\", 400);\n\t}\n\n\tconst rawMax = emdash.config.maxUploadSize ?? DEFAULT_MAX_UPLOAD_SIZE;\n\tif (!Number.isFinite(rawMax) || rawMax <= 0) {\n\t\treturn apiError(\"CONFIGURATION_ERROR\", \"Invalid maxUploadSize configuration\", 500);\n\t}\n\tconst maxUploadSize = rawMax;\n\tconst contentLength = request.headers.get(\"Content-Length\");\n\tif (contentLength && parseInt(contentLength, 10) > maxUploadSize) {\n\t\treturn apiError(\"PAYLOAD_TOO_LARGE\", \"Upload too large\", 413);\n\t}\n\n\ttry {\n\t\tconst formData = await request.formData();\n\t\tconst fileEntry = formData.get(\"file\");\n\t\tconst file = fileEntry instanceof File ? fileEntry : null;\n\t\tif (!file) return apiError(\"NO_FILE\", \"No file provided\", 400);\n\t\tif (file.size === 0) return apiError(\"VALIDATION_ERROR\", \"Replacement file is empty\", 400);\n\t\tif (file.size > maxUploadSize) {\n\t\t\treturn apiError(\"PAYLOAD_TOO_LARGE\", \"Upload too large\", 413);\n\t\t}\n\n\t\tconst replacementMime = normalizeMime(file.type);\n\t\tif (!REPLACEABLE_IMAGE_TYPES.has(replacementMime) || replacementMime !== sourceMime) {\n\t\t\treturn apiError(\"INVALID_TYPE\", \"Replacement file type must match the media item\", 400);\n\t\t}\n\n\t\tconst metadataResult = mediaReplaceMetadataForm.safeParse({\n\t\t\twidth: formData.get(\"width\"),\n\t\t\theight: formData.get(\"height\"),\n\t\t});\n\t\tif (!metadataResult.success) {\n\t\t\treturn apiError(\"VALIDATION_ERROR\", \"Invalid request data\", 400, {\n\t\t\t\tissues: metadataResult.error.issues.map((issue) => ({\n\t\t\t\t\tpath: issue.path.join(\".\"),\n\t\t\t\t\tmessage: issue.message,\n\t\t\t\t})),\n\t\t\t});\n\t\t}\n\t\tconst { width, height } = metadataResult.data;\n\n\t\tconst bytes = new Uint8Array(await file.arrayBuffer());\n\t\tconst contentHash = await computeContentHash(bytes);\n\t\ttry {\n\t\t\tawait emdash.storage.upload({\n\t\t\t\tkey: media.storageKey,\n\t\t\t\tbody: bytes,\n\t\t\t\tcontentType: sourceMime,\n\t\t\t\tcacheControl: MUTABLE_MEDIA_CACHE_CONTROL,\n\t\t\t});\n\t\t} catch (error) {\n\t\t\treturn handleError(error, \"Failed to replace media\", \"MEDIA_REPLACE_ERROR\");\n\t\t}\n\n\t\tconst result = await emdash.handleMediaReplaceMetadata(id, media.storageKey, {\n\t\t\tsize: file.size,\n\t\t\twidth,\n\t\t\theight,\n\t\t\tcontentHash,\n\t\t});\n\t\tif (!result.success) return unwrapResult(result);\n\n\t\treturn apiSuccess({\n\t\t\titem: {\n\t\t\t\t...result.data.item,\n\t\t\t\turl: `/_emdash/api/media/file/${result.data.item.storageKey}`,\n\t\t\t},\n\t\t});\n\t} catch (error) {\n\t\treturn handleError(error, \"Failed to replace media\", \"MEDIA_REPLACE_ERROR\");\n\t}\n};\n"],"mappings":";;;;;;;;;;;;;;;;AASA,MAAa,YAAY;AAEzB,MAAM,0BAA0B,IAAI,IAAI;CAAC;CAAc;CAAa;CAAa,CAAC;AAElF,MAAa,MAAgB,OAAO,EAAE,QAAQ,SAAS,aAAa;CACnE,MAAM,EAAE,QAAQ,SAAS;CACzB,MAAM,EAAE,OAAO;CAEf,MAAM,aAAa,YAAY,MAAM,iBAAiB;AACtD,KAAI,WAAY,QAAO;AACvB,KAAI,CAAC,GAAI,QAAO,SAAS,mBAAmB,qBAAqB,IAAI;AACrE,KAAI,CAAC,QAAQ,kBAAkB,CAAC,QAAQ,2BACvC,QAAO,SAAS,kBAAkB,6BAA6B,IAAI;AAEpE,KAAI,CAAC,OAAO,QAAS,QAAO,SAAS,cAAc,0BAA0B,IAAI;CAEjF,MAAM,YAAY,MAAM,OAAO,eAAe,GAAG;AACjD,KAAI,CAAC,UAAU,QAAS,QAAO,aAAa,UAAU;CACtD,MAAM,QAAQ,UAAU,KAAK;CAC7B,MAAM,cAAc,iBACnB,MACA,MAAM,YAAY,IAClB,kBACA,iBACA;AACD,KAAI,YAAa,QAAO;AACxB,KAAI,MAAM,WAAW,QACpB,QAAO,SAAS,iBAAiB,oCAAoC,IAAI;CAG1E,MAAM,aAAa,cAAc,MAAM,SAAS;AAChD,KAAI,CAAC,wBAAwB,IAAI,WAAW,CAC3C,QAAO,SAAS,gBAAgB,iCAAiC,IAAI;CAGtE,MAAM,SAAS,OAAO,OAAO,iBAAiB;AAC9C,KAAI,CAAC,OAAO,SAAS,OAAO,IAAI,UAAU,EACzC,QAAO,SAAS,uBAAuB,uCAAuC,IAAI;CAEnF,MAAM,gBAAgB;CACtB,MAAM,gBAAgB,QAAQ,QAAQ,IAAI,iBAAiB;AAC3D,KAAI,iBAAiB,SAAS,eAAe,GAAG,GAAG,cAClD,QAAO,SAAS,qBAAqB,oBAAoB,IAAI;AAG9D,KAAI;EACH,MAAM,WAAW,MAAM,QAAQ,UAAU;EACzC,MAAM,YAAY,SAAS,IAAI,OAAO;EACtC,MAAM,OAAO,qBAAqB,OAAO,YAAY;AACrD,MAAI,CAAC,KAAM,QAAO,SAAS,WAAW,oBAAoB,IAAI;AAC9D,MAAI,KAAK,SAAS,EAAG,QAAO,SAAS,oBAAoB,6BAA6B,IAAI;AAC1F,MAAI,KAAK,OAAO,cACf,QAAO,SAAS,qBAAqB,oBAAoB,IAAI;EAG9D,MAAM,kBAAkB,cAAc,KAAK,KAAK;AAChD,MAAI,CAAC,wBAAwB,IAAI,gBAAgB,IAAI,oBAAoB,WACxE,QAAO,SAAS,gBAAgB,mDAAmD,IAAI;EAGxF,MAAM,iBAAiB,yBAAyB,UAAU;GACzD,OAAO,SAAS,IAAI,QAAQ;GAC5B,QAAQ,SAAS,IAAI,SAAS;GAC9B,CAAC;AACF,MAAI,CAAC,eAAe,QACnB,QAAO,SAAS,oBAAoB,wBAAwB,KAAK,EAChE,QAAQ,eAAe,MAAM,OAAO,KAAK,WAAW;GACnD,MAAM,MAAM,KAAK,KAAK,IAAI;GAC1B,SAAS,MAAM;GACf,EAAE,EACH,CAAC;EAEH,MAAM,EAAE,OAAO,WAAW,eAAe;EAEzC,MAAM,QAAQ,IAAI,WAAW,MAAM,KAAK,aAAa,CAAC;EACtD,MAAM,cAAc,MAAM,mBAAmB,MAAM;AACnD,MAAI;AACH,SAAM,OAAO,QAAQ,OAAO;IAC3B,KAAK,MAAM;IACX,MAAM;IACN,aAAa;IACb,cAAc;IACd,CAAC;WACM,OAAO;AACf,UAAO,YAAY,OAAO,2BAA2B,sBAAsB;;EAG5E,MAAM,SAAS,MAAM,OAAO,2BAA2B,IAAI,MAAM,YAAY;GAC5E,MAAM,KAAK;GACX;GACA;GACA;GACA,CAAC;AACF,MAAI,CAAC,OAAO,QAAS,QAAO,aAAa,OAAO;AAEhD,SAAO,WAAW,EACjB,MAAM;GACL,GAAG,OAAO,KAAK;GACf,KAAK,2BAA2B,OAAO,KAAK,KAAK;GACjD,EACD,CAAC;UACM,OAAO;AACf,SAAO,YAAY,OAAO,2BAA2B,sBAAsB"}
+{"version":3,"file":"replace.mjs","names":[],"sources":["../../../../../../src/astro/routes/api/media/[id]/replace.ts"],"sourcesContent":["import type { APIRoute } from \"astro\";\n\nimport { requireOwnerPerm, requirePerm } from \"#api/authorize.js\";\nimport { apiError, apiSuccess, handleError, unwrapResult } from \"#api/error.js\";\nimport { DEFAULT_MAX_UPLOAD_SIZE, mediaReplaceMetadataForm } from \"#api/schemas.js\";\nimport { MUTABLE_MEDIA_CACHE_CONTROL } from \"#media/image-endpoint.js\";\nimport { normalizeMime } from \"#media/mime.js\";\nimport { computeContentHash } from \"#utils/hash.js\";\n\nexport const prerender = false;\n\nconst REPLACEABLE_IMAGE_TYPES = new Set([\"image/jpeg\", \"image/png\", \"image/webp\"]);\n\nexport const PUT: APIRoute = async ({ params, request, locals }) => {\n\tconst { emdash, user } = locals;\n\tconst { id } = params;\n\n\tconst editDenied = requirePerm(user, \"media:edit_own\");\n\tif (editDenied) return editDenied;\n\tif (!id) return apiError(\"INVALID_REQUEST\", \"Media ID required\", 400);\n\tif (!emdash?.handleMediaGet || !emdash?.handleMediaReplaceMetadata) {\n\t\treturn apiError(\"NOT_CONFIGURED\", \"EmDash is not initialized\", 500);\n\t}\n\tif (!emdash.storage) return apiError(\"NO_STORAGE\", \"Storage not configured\", 500);\n\n\tconst getResult = await emdash.handleMediaGet(id);\n\tif (!getResult.success) return unwrapResult(getResult);\n\tconst media = getResult.data.item;\n\tconst ownerDenied = requireOwnerPerm(\n\t\tuser,\n\t\tmedia.authorId ?? \"\",\n\t\t\"media:edit_own\",\n\t\t\"media:edit_any\",\n\t);\n\tif (ownerDenied) return ownerDenied;\n\tif (media.status !== \"ready\") {\n\t\treturn apiError(\"INVALID_STATE\", \"Only ready media can be replaced\", 400);\n\t}\n\n\tconst sourceMime = normalizeMime(media.mimeType);\n\tif (!REPLACEABLE_IMAGE_TYPES.has(sourceMime)) {\n\t\treturn apiError(\"INVALID_TYPE\", \"Media type cannot be replaced\", 400);\n\t}\n\n\tconst rawMax = emdash.config.maxUploadSize ?? DEFAULT_MAX_UPLOAD_SIZE;\n\tif (!Number.isFinite(rawMax) || rawMax <= 0) {\n\t\treturn apiError(\"CONFIGURATION_ERROR\", \"Invalid maxUploadSize configuration\", 500);\n\t}\n\tconst maxUploadSize = rawMax;\n\tconst contentLength = request.headers.get(\"Content-Length\");\n\tif (contentLength && parseInt(contentLength, 10) > maxUploadSize) {\n\t\treturn apiError(\"PAYLOAD_TOO_LARGE\", \"Upload too large\", 413);\n\t}\n\n\ttry {\n\t\tconst formData = await request.formData();\n\t\tconst fileEntry = formData.get(\"file\");\n\t\tconst file = fileEntry instanceof File ? fileEntry : null;\n\t\tif (!file) return apiError(\"NO_FILE\", \"No file provided\", 400);\n\t\tif (file.size === 0) return apiError(\"VALIDATION_ERROR\", \"Replacement file is empty\", 400);\n\t\tif (file.size > maxUploadSize) {\n\t\t\treturn apiError(\"PAYLOAD_TOO_LARGE\", \"Upload too large\", 413);\n\t\t}\n\n\t\tconst replacementMime = normalizeMime(file.type);\n\t\tif (!REPLACEABLE_IMAGE_TYPES.has(replacementMime) || replacementMime !== sourceMime) {\n\t\t\treturn apiError(\"INVALID_TYPE\", \"Replacement file type must match the media item\", 400);\n\t\t}\n\n\t\tconst metadataResult = mediaReplaceMetadataForm.safeParse({\n\t\t\twidth: formData.get(\"width\"),\n\t\t\theight: formData.get(\"height\"),\n\t\t});\n\t\tif (!metadataResult.success) {\n\t\t\treturn apiError(\"VALIDATION_ERROR\", \"Invalid request data\", 400, {\n\t\t\t\tissues: metadataResult.error.issues.map((issue) => ({\n\t\t\t\t\tpath: issue.path.join(\".\"),\n\t\t\t\t\tmessage: issue.message,\n\t\t\t\t})),\n\t\t\t});\n\t\t}\n\t\tconst { width, height } = metadataResult.data;\n\n\t\tconst bytes = new Uint8Array(await file.arrayBuffer());\n\t\tconst contentHash = await computeContentHash(bytes);\n\t\ttry {\n\t\t\tawait emdash.storage.upload({\n\t\t\t\tkey: media.storageKey,\n\t\t\t\tbody: bytes,\n\t\t\t\tcontentType: sourceMime,\n\t\t\t\tcacheControl: MUTABLE_MEDIA_CACHE_CONTROL,\n\t\t\t});\n\t\t} catch (error) {\n\t\t\treturn handleError(error, \"Failed to replace media\", \"MEDIA_REPLACE_ERROR\");\n\t\t}\n\n\t\tconst result = await emdash.handleMediaReplaceMetadata(id, media.storageKey, {\n\t\t\tsize: file.size,\n\t\t\twidth,\n\t\t\theight,\n\t\t\tcontentHash,\n\t\t});\n\t\tif (!result.success) return unwrapResult(result);\n\n\t\treturn apiSuccess({\n\t\t\titem: {\n\t\t\t\t...result.data.item,\n\t\t\t\turl: `/_emdash/api/media/file/${result.data.item.storageKey}`,\n\t\t\t},\n\t\t});\n\t} catch (error) {\n\t\treturn handleError(error, \"Failed to replace media\", \"MEDIA_REPLACE_ERROR\");\n\t}\n};\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;AASA,MAAa,YAAY;AAEzB,MAAM,0BAA0B,IAAI,IAAI;CAAC;CAAc;CAAa;CAAa,CAAC;AAElF,MAAa,MAAgB,OAAO,EAAE,QAAQ,SAAS,aAAa;CACnE,MAAM,EAAE,QAAQ,SAAS;CACzB,MAAM,EAAE,OAAO;CAEf,MAAM,aAAa,YAAY,MAAM,iBAAiB;AACtD,KAAI,WAAY,QAAO;AACvB,KAAI,CAAC,GAAI,QAAO,SAAS,mBAAmB,qBAAqB,IAAI;AACrE,KAAI,CAAC,QAAQ,kBAAkB,CAAC,QAAQ,2BACvC,QAAO,SAAS,kBAAkB,6BAA6B,IAAI;AAEpE,KAAI,CAAC,OAAO,QAAS,QAAO,SAAS,cAAc,0BAA0B,IAAI;CAEjF,MAAM,YAAY,MAAM,OAAO,eAAe,GAAG;AACjD,KAAI,CAAC,UAAU,QAAS,QAAO,aAAa,UAAU;CACtD,MAAM,QAAQ,UAAU,KAAK;CAC7B,MAAM,cAAc,iBACnB,MACA,MAAM,YAAY,IAClB,kBACA,iBACA;AACD,KAAI,YAAa,QAAO;AACxB,KAAI,MAAM,WAAW,QACpB,QAAO,SAAS,iBAAiB,oCAAoC,IAAI;CAG1E,MAAM,aAAa,cAAc,MAAM,SAAS;AAChD,KAAI,CAAC,wBAAwB,IAAI,WAAW,CAC3C,QAAO,SAAS,gBAAgB,iCAAiC,IAAI;CAGtE,MAAM,SAAS,OAAO,OAAO,iBAAiB;AAC9C,KAAI,CAAC,OAAO,SAAS,OAAO,IAAI,UAAU,EACzC,QAAO,SAAS,uBAAuB,uCAAuC,IAAI;CAEnF,MAAM,gBAAgB;CACtB,MAAM,gBAAgB,QAAQ,QAAQ,IAAI,iBAAiB;AAC3D,KAAI,iBAAiB,SAAS,eAAe,GAAG,GAAG,cAClD,QAAO,SAAS,qBAAqB,oBAAoB,IAAI;AAG9D,KAAI;EACH,MAAM,WAAW,MAAM,QAAQ,UAAU;EACzC,MAAM,YAAY,SAAS,IAAI,OAAO;EACtC,MAAM,OAAO,qBAAqB,OAAO,YAAY;AACrD,MAAI,CAAC,KAAM,QAAO,SAAS,WAAW,oBAAoB,IAAI;AAC9D,MAAI,KAAK,SAAS,EAAG,QAAO,SAAS,oBAAoB,6BAA6B,IAAI;AAC1F,MAAI,KAAK,OAAO,cACf,QAAO,SAAS,qBAAqB,oBAAoB,IAAI;EAG9D,MAAM,kBAAkB,cAAc,KAAK,KAAK;AAChD,MAAI,CAAC,wBAAwB,IAAI,gBAAgB,IAAI,oBAAoB,WACxE,QAAO,SAAS,gBAAgB,mDAAmD,IAAI;EAGxF,MAAM,iBAAiB,yBAAyB,UAAU;GACzD,OAAO,SAAS,IAAI,QAAQ;GAC5B,QAAQ,SAAS,IAAI,SAAS;GAC9B,CAAC;AACF,MAAI,CAAC,eAAe,QACnB,QAAO,SAAS,oBAAoB,wBAAwB,KAAK,EAChE,QAAQ,eAAe,MAAM,OAAO,KAAK,WAAW;GACnD,MAAM,MAAM,KAAK,KAAK,IAAI;GAC1B,SAAS,MAAM;GACf,EAAE,EACH,CAAC;EAEH,MAAM,EAAE,OAAO,WAAW,eAAe;EAEzC,MAAM,QAAQ,IAAI,WAAW,MAAM,KAAK,aAAa,CAAC;EACtD,MAAM,cAAc,MAAM,mBAAmB,MAAM;AACnD,MAAI;AACH,SAAM,OAAO,QAAQ,OAAO;IAC3B,KAAK,MAAM;IACX,MAAM;IACN,aAAa;IACb,cAAc;IACd,CAAC;WACM,OAAO;AACf,UAAO,YAAY,OAAO,2BAA2B,sBAAsB;;EAG5E,MAAM,SAAS,MAAM,OAAO,2BAA2B,IAAI,MAAM,YAAY;GAC5E,MAAM,KAAK;GACX;GACA;GACA;GACA,CAAC;AACF,MAAI,CAAC,OAAO,QAAS,QAAO,aAAa,OAAO;AAEhD,SAAO,WAAW,EACjB,MAAM;GACL,GAAG,OAAO,KAAK;GACf,KAAK,2BAA2B,OAAO,KAAK,KAAK;GACjD,EACD,CAAC;UACM,OAAO;AACf,SAAO,YAAY,OAAO,2BAA2B,sBAAsB"}

package/dist/astro/routes/api/media/_id_/upload.mjs

@@ -1,11 +1,13 @@
 import "../../../../../base64-DvnNgP7e.mjs";
 import "../../../../../types-BkUg2yHx.mjs";
-import { t as MediaRepository } from "../../../../../media-TBlKCwo7.mjs";
-import { n as normalizeMime } from "../../../../../mime-CCYRC4r1.mjs";
-import { n as computeContentHash, t as MAX_CONTENT_HASH_BYTES } from "../../../../../hash-CLVFzWvx.mjs";
-import { n as apiSuccess, r as handleError, t as apiError } from "../../../../../error-CCTCskie.mjs";
-import { t as removeUploadAttempt } from "../../../../../upload-attempts-2xdnoKGe.mjs";
-import { n as requireOwnerPerm, r as requirePerm } from "../../../../../authorize-BXpfMpp0.mjs";
+import { t as MediaRepository } from "../../../../../media-CPXTbb1R.mjs";
+import { n as normalizeMime } from "../../../../../mime-ChLqYwDk.mjs";
+import "../../../../../errors-DgE1zJGG.mjs";
+import { n as computeContentHash, t as MAX_CONTENT_HASH_BYTES } from "../../../../../hash-SDAW6zC-.mjs";
+import { t as removeUploadAttempt } from "../../../../../upload-attempts-B68ZGNu9.mjs";
+import "../../../../../errors-BF0_LFhW.mjs";
+import { n as apiSuccess, r as handleError, t as apiError } from "../../../../../error-CfvOHP0M.mjs";
+import { i as requirePerm, r as requireOwnerPerm } from "../../../../../authorize-seCifOMJ.mjs";
 import { ulid } from "ulidx";
 
 //#region src/astro/routes/api/media/[id]/upload.ts

package/dist/astro/routes/api/media/_id_/upload.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"upload.mjs","names":[],"sources":["../../../../../../src/astro/routes/api/media/[id]/upload.ts"],"sourcesContent":["import type { APIRoute } from \"astro\";\nimport type { Storage } from \"emdash\";\nimport { ulid } from \"ulidx\";\n\nimport { requireOwnerPerm, requirePerm } from \"#api/authorize.js\";\nimport { apiError, apiSuccess, handleError } from \"#api/error.js\";\nimport { MediaRepository } from \"#db/repositories/media.js\";\nimport { normalizeMime } from \"#media/mime.js\";\nimport { removeUploadAttempt } from \"#media/upload-attempts.js\";\nimport { computeContentHash, MAX_CONTENT_HASH_BYTES } from \"#utils/hash.js\";\n\nexport const prerender = false;\n\nconst INITIAL_HASH_BUFFER_BYTES = 64 * 1024;\n\ntype FixedLengthStreamConstructor = new (\n\texpectedLength: number | bigint,\n) => TransformStream<ArrayBuffer | ArrayBufferView, Uint8Array>;\n\ndeclare const FixedLengthStream: FixedLengthStreamConstructor | undefined;\n\nclass UploadBodyError extends Error {\n\treadonly code: \"PAYLOAD_TOO_LARGE\" | \"UPLOAD_SIZE_MISMATCH\";\n\n\tconstructor(code: \"PAYLOAD_TOO_LARGE\" | \"UPLOAD_SIZE_MISMATCH\") {\n\t\tsuper(code);\n\t\tthis.code = code;\n\t}\n}\n\nfunction findUploadBodyError(error: unknown): UploadBodyError | null {\n\tlet current = error;\n\tfor (let depth = 0; depth < 5 && current instanceof Error; depth++) {\n\t\tif (current instanceof UploadBodyError) return current;\n\t\tcurrent = current.cause;\n\t}\n\treturn null;\n}\n\nfunction preserveKnownLength(\n\tbody: ReadableStream<Uint8Array>,\n\texpectedLength: number,\n): ReadableStream<Uint8Array> {\n\tif (typeof FixedLengthStream === \"undefined\") return body;\n\treturn body.pipeThrough(new FixedLengthStream(expectedLength));\n}\n\nfunction createUploadAttemptKey(key: string): string {\n\tconst pathSeparator = key.lastIndexOf(\"/\");\n\tconst extensionSeparator = key.lastIndexOf(\".\");\n\tif (extensionSeparator > pathSeparator) {\n\t\treturn `${key.slice(0, extensionSeparator)}.${ulid()}${key.slice(extensionSeparator)}`;\n\t}\n\treturn `${key}.${ulid()}`;\n}\n\nasync function getStoredSize(storage: Storage, key: string): Promise<number | null> {\n\tif (!(await storage.exists(key))) return null;\n\tconst download = await storage.download(key);\n\ttry {\n\t\treturn download.size;\n\t} finally {\n\t\ttry {\n\t\t\tawait download.body.cancel();\n\t\t} catch (error) {\n\t\t\tconsole.error(\"[media] upload download cancellation failed:\", error);\n\t\t}\n\t}\n}\n\nexport const PUT: APIRoute = async ({ params, request, locals }) => {\n\tconst { emdash, user } = locals;\n\tconst { id } = params;\n\n\tconst denied = requirePerm(user, \"media:upload\");\n\tif (denied) return denied;\n\n\tif (!id) {\n\t\treturn apiError(\"INVALID_REQUEST\", \"Media ID is required\", 400);\n\t}\n\n\tif (!emdash?.db) {\n\t\treturn apiError(\"NOT_CONFIGURED\", \"EmDash is not initialized\", 500);\n\t}\n\n\tif (!emdash.storage) {\n\t\treturn apiError(\"NO_STORAGE\", \"Storage not configured\", 500);\n\t}\n\n\ttry {\n\t\tconst repo = new MediaRepository(emdash.db);\n\t\tconst media = await repo.findById(id);\n\t\tif (!media) {\n\t\t\treturn apiError(\"NOT_FOUND\", `Media item not found: ${id}`, 404);\n\t\t}\n\n\t\tif (media.status !== \"pending\") {\n\t\t\treturn apiError(\"INVALID_STATE\", `Media item is not pending: ${media.status}`, 400);\n\t\t}\n\n\t\tconst ownerDenied = requireOwnerPerm(\n\t\t\tuser,\n\t\t\tmedia.authorId ?? \"\",\n\t\t\t\"media:upload\",\n\t\t\t\"media:edit_any\",\n\t\t);\n\t\tif (ownerDenied) return ownerDenied;\n\n\t\tif (!Number.isSafeInteger(media.size) || media.size === null || media.size < 0) {\n\t\t\treturn apiError(\"INVALID_STATE\", \"Pending media item has no valid upload size\", 400);\n\t\t}\n\t\tconst expectedSize = media.size;\n\n\t\tconst contentType = request.headers.get(\"Content-Type\");\n\t\tif (!contentType || normalizeMime(contentType) !== media.mimeType) {\n\t\t\treturn apiError(\"INVALID_TYPE\", \"Upload content type does not match the media item\", 400);\n\t\t}\n\n\t\tconst requestBody =\n\t\t\trequest.body ??\n\t\t\t(expectedSize === 0\n\t\t\t\t? new ReadableStream<Uint8Array>({\n\t\t\t\t\t\tstart(controller) {\n\t\t\t\t\t\t\tcontroller.close();\n\t\t\t\t\t\t},\n\t\t\t\t\t})\n\t\t\t\t: null);\n\t\tif (!requestBody) {\n\t\t\treturn apiError(\"NO_FILE\", \"No file provided\", 400);\n\t\t}\n\n\t\tconst contentLength = request.headers.get(\"Content-Length\");\n\t\tif (contentLength !== null) {\n\t\t\tconst declaredSize = Number(contentLength);\n\t\t\tif (!Number.isSafeInteger(declaredSize) || declaredSize < 0) {\n\t\t\t\treturn apiError(\"INVALID_REQUEST\", \"Invalid Content-Length header\", 400);\n\t\t\t}\n\t\t\tif (declaredSize > expectedSize) {\n\t\t\t\treturn apiError(\"PAYLOAD_TOO_LARGE\", \"Upload exceeds the expected size\", 413);\n\t\t\t}\n\t\t\tif (declaredSize !== expectedSize) {\n\t\t\t\treturn apiError(\"UPLOAD_SIZE_MISMATCH\", \"Upload size does not match the media item\", 400);\n\t\t\t}\n\t\t}\n\n\t\tlet receivedSize = 0;\n\t\tconst shouldHash = expectedSize > 0 && expectedSize <= MAX_CONTENT_HASH_BYTES;\n\t\tlet hashBytes: Uint8Array | null = null;\n\t\tconst checkedBody = requestBody.pipeThrough(\n\t\t\tnew TransformStream<Uint8Array, Uint8Array>({\n\t\t\t\ttransform(chunk, controller) {\n\t\t\t\t\tconst offset = receivedSize;\n\t\t\t\t\treceivedSize += chunk.byteLength;\n\t\t\t\t\tif (receivedSize > expectedSize) {\n\t\t\t\t\t\tcontroller.error(new UploadBodyError(\"PAYLOAD_TOO_LARGE\"));\n\t\t\t\t\t\treturn;\n\t\t\t\t\t}\n\t\t\t\t\tif (shouldHash && chunk.byteLength > 0) {\n\t\t\t\t\t\tif (!hashBytes) {\n\t\t\t\t\t\t\thashBytes = new Uint8Array(\n\t\t\t\t\t\t\t\tMath.min(expectedSize, Math.max(INITIAL_HASH_BUFFER_BYTES, receivedSize)),\n\t\t\t\t\t\t\t);\n\t\t\t\t\t\t} else if (receivedSize > hashBytes.byteLength) {\n\t\t\t\t\t\t\tconst grown = new Uint8Array(\n\t\t\t\t\t\t\t\tMath.min(expectedSize, Math.max(receivedSize, hashBytes.byteLength * 2)),\n\t\t\t\t\t\t\t);\n\t\t\t\t\t\t\tgrown.set(hashBytes);\n\t\t\t\t\t\t\thashBytes = grown;\n\t\t\t\t\t\t}\n\t\t\t\t\t\thashBytes.set(chunk, offset);\n\t\t\t\t\t}\n\t\t\t\t\tcontroller.enqueue(chunk);\n\t\t\t\t},\n\t\t\t\tflush(controller) {\n\t\t\t\t\tif (receivedSize !== expectedSize) {\n\t\t\t\t\t\tcontroller.error(new UploadBodyError(\"UPLOAD_SIZE_MISMATCH\"));\n\t\t\t\t\t}\n\t\t\t\t},\n\t\t\t}),\n\t\t);\n\t\tconst body = preserveKnownLength(checkedBody, expectedSize);\n\n\t\tconst attemptKey = createUploadAttemptKey(media.storageKey);\n\t\tawait repo.createUploadAttempt(id, attemptKey);\n\n\t\tlet attemptSize: number;\n\t\ttry {\n\t\t\tconst result = await emdash.storage.upload({\n\t\t\t\tkey: attemptKey,\n\t\t\t\tbody,\n\t\t\t\tcontentType: media.mimeType,\n\t\t\t});\n\t\t\tattemptSize = result.size;\n\t\t} catch (error) {\n\t\t\tawait removeUploadAttempt(emdash.storage, repo, attemptKey);\n\t\t\tconst bodyError = findUploadBodyError(error);\n\t\t\tif (bodyError?.code === \"PAYLOAD_TOO_LARGE\") {\n\t\t\t\treturn apiError(\"PAYLOAD_TOO_LARGE\", \"Upload exceeds the expected size\", 413);\n\t\t\t}\n\t\t\tif (bodyError?.code === \"UPLOAD_SIZE_MISMATCH\") {\n\t\t\t\treturn apiError(\"UPLOAD_SIZE_MISMATCH\", \"Upload size does not match the media item\", 400);\n\t\t\t}\n\t\t\treturn handleError(error, \"Upload failed\", \"UPLOAD_ERROR\");\n\t\t}\n\n\t\tif (receivedSize !== expectedSize || attemptSize !== expectedSize) {\n\t\t\tawait removeUploadAttempt(emdash.storage, repo, attemptKey);\n\t\t\treturn apiError(\"UPLOAD_SIZE_MISMATCH\", \"Upload size does not match the media item\", 400);\n\t\t}\n\t\tconst contentHash = hashBytes ? await computeContentHash(hashBytes) : undefined;\n\n\t\tlet published: boolean;\n\t\ttry {\n\t\t\tpublished = await repo.publishPendingStorageKey(\n\t\t\t\tid,\n\t\t\t\tmedia.storageKey,\n\t\t\t\tattemptKey,\n\t\t\t\tcontentHash,\n\t\t\t);\n\t\t} catch (error) {\n\t\t\ttry {\n\t\t\t\tconst current = await repo.findById(id);\n\t\t\t\tif (\n\t\t\t\t\tcurrent?.storageKey === attemptKey &&\n\t\t\t\t\t(current.status === \"pending\" || current.status === \"ready\") &&\n\t\t\t\t\tcurrent.size === expectedSize &&\n\t\t\t\t\t(await getStoredSize(emdash.storage, attemptKey)) === expectedSize\n\t\t\t\t) {\n\t\t\t\t\treturn apiSuccess({ uploaded: true, size: expectedSize });\n\t\t\t\t}\n\t\t\t} catch (verificationError) {\n\t\t\t\tconsole.error(\"[media] upload publication verification failed:\", verificationError);\n\t\t\t}\n\t\t\treturn handleError(error, \"Upload failed\", \"UPLOAD_ERROR\");\n\t\t}\n\n\t\tif (!published) {\n\t\t\tconst current = await repo.findById(id);\n\t\t\tif (\n\t\t\t\tcurrent &&\n\t\t\t\t(current.status === \"pending\" || current.status === \"ready\") &&\n\t\t\t\tcurrent.size === expectedSize &&\n\t\t\t\t(current.storageKey === attemptKey ||\n\t\t\t\t\texpectedSize === 0 ||\n\t\t\t\t\t(contentHash !== undefined && current.contentHash === contentHash)) &&\n\t\t\t\t(await getStoredSize(emdash.storage, current.storageKey)) === expectedSize\n\t\t\t) {\n\t\t\t\tif (current.storageKey !== attemptKey) {\n\t\t\t\t\tawait removeUploadAttempt(emdash.storage, repo, attemptKey);\n\t\t\t\t}\n\t\t\t\treturn apiSuccess({ uploaded: true, size: expectedSize });\n\t\t\t}\n\t\t\tawait removeUploadAttempt(emdash.storage, repo, attemptKey);\n\t\t\treturn apiError(\"INVALID_STATE\", \"Media item is no longer pending\", 400);\n\t\t}\n\n\t\tawait removeUploadAttempt(emdash.storage, repo, media.storageKey);\n\t\treturn apiSuccess({ uploaded: true, size: receivedSize });\n\t} catch (error) {\n\t\treturn handleError(error, \"Upload failed\", \"UPLOAD_ERROR\");\n\t}\n};\n"],"mappings":";;;;;;;;;;;AAWA,MAAa,YAAY;AAEzB,MAAM,4BAA4B,KAAK;AAQvC,IAAM,kBAAN,cAA8B,MAAM;CACnC,AAAS;CAET,YAAY,MAAoD;AAC/D,QAAM,KAAK;AACX,OAAK,OAAO;;;AAId,SAAS,oBAAoB,OAAwC;CACpE,IAAI,UAAU;AACd,MAAK,IAAI,QAAQ,GAAG,QAAQ,KAAK,mBAAmB,OAAO,SAAS;AACnE,MAAI,mBAAmB,gBAAiB,QAAO;AAC/C,YAAU,QAAQ;;AAEnB,QAAO;;AAGR,SAAS,oBACR,MACA,gBAC6B;AAC7B,KAAI,OAAO,sBAAsB,YAAa,QAAO;AACrD,QAAO,KAAK,YAAY,IAAI,kBAAkB,eAAe,CAAC;;AAG/D,SAAS,uBAAuB,KAAqB;CACpD,MAAM,gBAAgB,IAAI,YAAY,IAAI;CAC1C,MAAM,qBAAqB,IAAI,YAAY,IAAI;AAC/C,KAAI,qBAAqB,cACxB,QAAO,GAAG,IAAI,MAAM,GAAG,mBAAmB,CAAC,GAAG,MAAM,GAAG,IAAI,MAAM,mBAAmB;AAErF,QAAO,GAAG,IAAI,GAAG,MAAM;;AAGxB,eAAe,cAAc,SAAkB,KAAqC;AACnF,KAAI,CAAE,MAAM,QAAQ,OAAO,IAAI,CAAG,QAAO;CACzC,MAAM,WAAW,MAAM,QAAQ,SAAS,IAAI;AAC5C,KAAI;AACH,SAAO,SAAS;WACP;AACT,MAAI;AACH,SAAM,SAAS,KAAK,QAAQ;WACpB,OAAO;AACf,WAAQ,MAAM,gDAAgD,MAAM;;;;AAKvE,MAAa,MAAgB,OAAO,EAAE,QAAQ,SAAS,aAAa;CACnE,MAAM,EAAE,QAAQ,SAAS;CACzB,MAAM,EAAE,OAAO;CAEf,MAAM,SAAS,YAAY,MAAM,eAAe;AAChD,KAAI,OAAQ,QAAO;AAEnB,KAAI,CAAC,GACJ,QAAO,SAAS,mBAAmB,wBAAwB,IAAI;AAGhE,KAAI,CAAC,QAAQ,GACZ,QAAO,SAAS,kBAAkB,6BAA6B,IAAI;AAGpE,KAAI,CAAC,OAAO,QACX,QAAO,SAAS,cAAc,0BAA0B,IAAI;AAG7D,KAAI;EACH,MAAM,OAAO,IAAI,gBAAgB,OAAO,GAAG;EAC3C,MAAM,QAAQ,MAAM,KAAK,SAAS,GAAG;AACrC,MAAI,CAAC,MACJ,QAAO,SAAS,aAAa,yBAAyB,MAAM,IAAI;AAGjE,MAAI,MAAM,WAAW,UACpB,QAAO,SAAS,iBAAiB,8BAA8B,MAAM,UAAU,IAAI;EAGpF,MAAM,cAAc,iBACnB,MACA,MAAM,YAAY,IAClB,gBACA,iBACA;AACD,MAAI,YAAa,QAAO;AAExB,MAAI,CAAC,OAAO,cAAc,MAAM,KAAK,IAAI,MAAM,SAAS,QAAQ,MAAM,OAAO,EAC5E,QAAO,SAAS,iBAAiB,+CAA+C,IAAI;EAErF,MAAM,eAAe,MAAM;EAE3B,MAAM,cAAc,QAAQ,QAAQ,IAAI,eAAe;AACvD,MAAI,CAAC,eAAe,cAAc,YAAY,KAAK,MAAM,SACxD,QAAO,SAAS,gBAAgB,qDAAqD,IAAI;EAG1F,MAAM,cACL,QAAQ,SACP,iBAAiB,IACf,IAAI,eAA2B,EAC/B,MAAM,YAAY;AACjB,cAAW,OAAO;KAEnB,CAAC,GACD;AACJ,MAAI,CAAC,YACJ,QAAO,SAAS,WAAW,oBAAoB,IAAI;EAGpD,MAAM,gBAAgB,QAAQ,QAAQ,IAAI,iBAAiB;AAC3D,MAAI,kBAAkB,MAAM;GAC3B,MAAM,eAAe,OAAO,cAAc;AAC1C,OAAI,CAAC,OAAO,cAAc,aAAa,IAAI,eAAe,EACzD,QAAO,SAAS,mBAAmB,iCAAiC,IAAI;AAEzE,OAAI,eAAe,aAClB,QAAO,SAAS,qBAAqB,oCAAoC,IAAI;AAE9E,OAAI,iBAAiB,aACpB,QAAO,SAAS,wBAAwB,6CAA6C,IAAI;;EAI3F,IAAI,eAAe;EACnB,MAAM,aAAa,eAAe,KAAK,gBAAgB;EACvD,IAAI,YAA+B;EAiCnC,MAAM,OAAO,oBAhCO,YAAY,YAC/B,IAAI,gBAAwC;GAC3C,UAAU,OAAO,YAAY;IAC5B,MAAM,SAAS;AACf,oBAAgB,MAAM;AACtB,QAAI,eAAe,cAAc;AAChC,gBAAW,MAAM,IAAI,gBAAgB,oBAAoB,CAAC;AAC1D;;AAED,QAAI,cAAc,MAAM,aAAa,GAAG;AACvC,SAAI,CAAC,UACJ,aAAY,IAAI,WACf,KAAK,IAAI,cAAc,KAAK,IAAI,2BAA2B,aAAa,CAAC,CACzE;cACS,eAAe,UAAU,YAAY;MAC/C,MAAM,QAAQ,IAAI,WACjB,KAAK,IAAI,cAAc,KAAK,IAAI,cAAc,UAAU,aAAa,EAAE,CAAC,CACxE;AACD,YAAM,IAAI,UAAU;AACpB,kBAAY;;AAEb,eAAU,IAAI,OAAO,OAAO;;AAE7B,eAAW,QAAQ,MAAM;;GAE1B,MAAM,YAAY;AACjB,QAAI,iBAAiB,aACpB,YAAW,MAAM,IAAI,gBAAgB,uBAAuB,CAAC;;GAG/D,CAAC,CACF,EAC6C,aAAa;EAE3D,MAAM,aAAa,uBAAuB,MAAM,WAAW;AAC3D,QAAM,KAAK,oBAAoB,IAAI,WAAW;EAE9C,IAAI;AACJ,MAAI;AAMH,kBALe,MAAM,OAAO,QAAQ,OAAO;IAC1C,KAAK;IACL;IACA,aAAa,MAAM;IACnB,CAAC,EACmB;WACb,OAAO;AACf,SAAM,oBAAoB,OAAO,SAAS,MAAM,WAAW;GAC3D,MAAM,YAAY,oBAAoB,MAAM;AAC5C,OAAI,WAAW,SAAS,oBACvB,QAAO,SAAS,qBAAqB,oCAAoC,IAAI;AAE9E,OAAI,WAAW,SAAS,uBACvB,QAAO,SAAS,wBAAwB,6CAA6C,IAAI;AAE1F,UAAO,YAAY,OAAO,iBAAiB,eAAe;;AAG3D,MAAI,iBAAiB,gBAAgB,gBAAgB,cAAc;AAClE,SAAM,oBAAoB,OAAO,SAAS,MAAM,WAAW;AAC3D,UAAO,SAAS,wBAAwB,6CAA6C,IAAI;;EAE1F,MAAM,cAAc,YAAY,MAAM,mBAAmB,UAAU,GAAG;EAEtE,IAAI;AACJ,MAAI;AACH,eAAY,MAAM,KAAK,yBACtB,IACA,MAAM,YACN,YACA,YACA;WACO,OAAO;AACf,OAAI;IACH,MAAM,UAAU,MAAM,KAAK,SAAS,GAAG;AACvC,QACC,SAAS,eAAe,eACvB,QAAQ,WAAW,aAAa,QAAQ,WAAW,YACpD,QAAQ,SAAS,gBAChB,MAAM,cAAc,OAAO,SAAS,WAAW,KAAM,aAEtD,QAAO,WAAW;KAAE,UAAU;KAAM,MAAM;KAAc,CAAC;YAElD,mBAAmB;AAC3B,YAAQ,MAAM,mDAAmD,kBAAkB;;AAEpF,UAAO,YAAY,OAAO,iBAAiB,eAAe;;AAG3D,MAAI,CAAC,WAAW;GACf,MAAM,UAAU,MAAM,KAAK,SAAS,GAAG;AACvC,OACC,YACC,QAAQ,WAAW,aAAa,QAAQ,WAAW,YACpD,QAAQ,SAAS,iBAChB,QAAQ,eAAe,cACvB,iBAAiB,KAChB,gBAAgB,UAAa,QAAQ,gBAAgB,gBACtD,MAAM,cAAc,OAAO,SAAS,QAAQ,WAAW,KAAM,cAC7D;AACD,QAAI,QAAQ,eAAe,WAC1B,OAAM,oBAAoB,OAAO,SAAS,MAAM,WAAW;AAE5D,WAAO,WAAW;KAAE,UAAU;KAAM,MAAM;KAAc,CAAC;;AAE1D,SAAM,oBAAoB,OAAO,SAAS,MAAM,WAAW;AAC3D,UAAO,SAAS,iBAAiB,mCAAmC,IAAI;;AAGzE,QAAM,oBAAoB,OAAO,SAAS,MAAM,MAAM,WAAW;AACjE,SAAO,WAAW;GAAE,UAAU;GAAM,MAAM;GAAc,CAAC;UACjD,OAAO;AACf,SAAO,YAAY,OAAO,iBAAiB,eAAe"}
+{"version":3,"file":"upload.mjs","names":[],"sources":["../../../../../../src/astro/routes/api/media/[id]/upload.ts"],"sourcesContent":["import type { APIRoute } from \"astro\";\nimport type { Storage } from \"emdash\";\nimport { ulid } from \"ulidx\";\n\nimport { requireOwnerPerm, requirePerm } from \"#api/authorize.js\";\nimport { apiError, apiSuccess, handleError } from \"#api/error.js\";\nimport { MediaRepository } from \"#db/repositories/media.js\";\nimport { normalizeMime } from \"#media/mime.js\";\nimport { removeUploadAttempt } from \"#media/upload-attempts.js\";\nimport { computeContentHash, MAX_CONTENT_HASH_BYTES } from \"#utils/hash.js\";\n\nexport const prerender = false;\n\nconst INITIAL_HASH_BUFFER_BYTES = 64 * 1024;\n\ntype FixedLengthStreamConstructor = new (\n\texpectedLength: number | bigint,\n) => TransformStream<ArrayBuffer | ArrayBufferView, Uint8Array>;\n\ndeclare const FixedLengthStream: FixedLengthStreamConstructor | undefined;\n\nclass UploadBodyError extends Error {\n\treadonly code: \"PAYLOAD_TOO_LARGE\" | \"UPLOAD_SIZE_MISMATCH\";\n\n\tconstructor(code: \"PAYLOAD_TOO_LARGE\" | \"UPLOAD_SIZE_MISMATCH\") {\n\t\tsuper(code);\n\t\tthis.code = code;\n\t}\n}\n\nfunction findUploadBodyError(error: unknown): UploadBodyError | null {\n\tlet current = error;\n\tfor (let depth = 0; depth < 5 && current instanceof Error; depth++) {\n\t\tif (current instanceof UploadBodyError) return current;\n\t\tcurrent = current.cause;\n\t}\n\treturn null;\n}\n\nfunction preserveKnownLength(\n\tbody: ReadableStream<Uint8Array>,\n\texpectedLength: number,\n): ReadableStream<Uint8Array> {\n\tif (typeof FixedLengthStream === \"undefined\") return body;\n\treturn body.pipeThrough(new FixedLengthStream(expectedLength));\n}\n\nfunction createUploadAttemptKey(key: string): string {\n\tconst pathSeparator = key.lastIndexOf(\"/\");\n\tconst extensionSeparator = key.lastIndexOf(\".\");\n\tif (extensionSeparator > pathSeparator) {\n\t\treturn `${key.slice(0, extensionSeparator)}.${ulid()}${key.slice(extensionSeparator)}`;\n\t}\n\treturn `${key}.${ulid()}`;\n}\n\nasync function getStoredSize(storage: Storage, key: string): Promise<number | null> {\n\tif (!(await storage.exists(key))) return null;\n\tconst download = await storage.download(key);\n\ttry {\n\t\treturn download.size;\n\t} finally {\n\t\ttry {\n\t\t\tawait download.body.cancel();\n\t\t} catch (error) {\n\t\t\tconsole.error(\"[media] upload download cancellation failed:\", error);\n\t\t}\n\t}\n}\n\nexport const PUT: APIRoute = async ({ params, request, locals }) => {\n\tconst { emdash, user } = locals;\n\tconst { id } = params;\n\n\tconst denied = requirePerm(user, \"media:upload\");\n\tif (denied) return denied;\n\n\tif (!id) {\n\t\treturn apiError(\"INVALID_REQUEST\", \"Media ID is required\", 400);\n\t}\n\n\tif (!emdash?.db) {\n\t\treturn apiError(\"NOT_CONFIGURED\", \"EmDash is not initialized\", 500);\n\t}\n\n\tif (!emdash.storage) {\n\t\treturn apiError(\"NO_STORAGE\", \"Storage not configured\", 500);\n\t}\n\n\ttry {\n\t\tconst repo = new MediaRepository(emdash.db);\n\t\tconst media = await repo.findById(id);\n\t\tif (!media) {\n\t\t\treturn apiError(\"NOT_FOUND\", `Media item not found: ${id}`, 404);\n\t\t}\n\n\t\tif (media.status !== \"pending\") {\n\t\t\treturn apiError(\"INVALID_STATE\", `Media item is not pending: ${media.status}`, 400);\n\t\t}\n\n\t\tconst ownerDenied = requireOwnerPerm(\n\t\t\tuser,\n\t\t\tmedia.authorId ?? \"\",\n\t\t\t\"media:upload\",\n\t\t\t\"media:edit_any\",\n\t\t);\n\t\tif (ownerDenied) return ownerDenied;\n\n\t\tif (!Number.isSafeInteger(media.size) || media.size === null || media.size < 0) {\n\t\t\treturn apiError(\"INVALID_STATE\", \"Pending media item has no valid upload size\", 400);\n\t\t}\n\t\tconst expectedSize = media.size;\n\n\t\tconst contentType = request.headers.get(\"Content-Type\");\n\t\tif (!contentType || normalizeMime(contentType) !== media.mimeType) {\n\t\t\treturn apiError(\"INVALID_TYPE\", \"Upload content type does not match the media item\", 400);\n\t\t}\n\n\t\tconst requestBody =\n\t\t\trequest.body ??\n\t\t\t(expectedSize === 0\n\t\t\t\t? new ReadableStream<Uint8Array>({\n\t\t\t\t\t\tstart(controller) {\n\t\t\t\t\t\t\tcontroller.close();\n\t\t\t\t\t\t},\n\t\t\t\t\t})\n\t\t\t\t: null);\n\t\tif (!requestBody) {\n\t\t\treturn apiError(\"NO_FILE\", \"No file provided\", 400);\n\t\t}\n\n\t\tconst contentLength = request.headers.get(\"Content-Length\");\n\t\tif (contentLength !== null) {\n\t\t\tconst declaredSize = Number(contentLength);\n\t\t\tif (!Number.isSafeInteger(declaredSize) || declaredSize < 0) {\n\t\t\t\treturn apiError(\"INVALID_REQUEST\", \"Invalid Content-Length header\", 400);\n\t\t\t}\n\t\t\tif (declaredSize > expectedSize) {\n\t\t\t\treturn apiError(\"PAYLOAD_TOO_LARGE\", \"Upload exceeds the expected size\", 413);\n\t\t\t}\n\t\t\tif (declaredSize !== expectedSize) {\n\t\t\t\treturn apiError(\"UPLOAD_SIZE_MISMATCH\", \"Upload size does not match the media item\", 400);\n\t\t\t}\n\t\t}\n\n\t\tlet receivedSize = 0;\n\t\tconst shouldHash = expectedSize > 0 && expectedSize <= MAX_CONTENT_HASH_BYTES;\n\t\tlet hashBytes: Uint8Array | null = null;\n\t\tconst checkedBody = requestBody.pipeThrough(\n\t\t\tnew TransformStream<Uint8Array, Uint8Array>({\n\t\t\t\ttransform(chunk, controller) {\n\t\t\t\t\tconst offset = receivedSize;\n\t\t\t\t\treceivedSize += chunk.byteLength;\n\t\t\t\t\tif (receivedSize > expectedSize) {\n\t\t\t\t\t\tcontroller.error(new UploadBodyError(\"PAYLOAD_TOO_LARGE\"));\n\t\t\t\t\t\treturn;\n\t\t\t\t\t}\n\t\t\t\t\tif (shouldHash && chunk.byteLength > 0) {\n\t\t\t\t\t\tif (!hashBytes) {\n\t\t\t\t\t\t\thashBytes = new Uint8Array(\n\t\t\t\t\t\t\t\tMath.min(expectedSize, Math.max(INITIAL_HASH_BUFFER_BYTES, receivedSize)),\n\t\t\t\t\t\t\t);\n\t\t\t\t\t\t} else if (receivedSize > hashBytes.byteLength) {\n\t\t\t\t\t\t\tconst grown = new Uint8Array(\n\t\t\t\t\t\t\t\tMath.min(expectedSize, Math.max(receivedSize, hashBytes.byteLength * 2)),\n\t\t\t\t\t\t\t);\n\t\t\t\t\t\t\tgrown.set(hashBytes);\n\t\t\t\t\t\t\thashBytes = grown;\n\t\t\t\t\t\t}\n\t\t\t\t\t\thashBytes.set(chunk, offset);\n\t\t\t\t\t}\n\t\t\t\t\tcontroller.enqueue(chunk);\n\t\t\t\t},\n\t\t\t\tflush(controller) {\n\t\t\t\t\tif (receivedSize !== expectedSize) {\n\t\t\t\t\t\tcontroller.error(new UploadBodyError(\"UPLOAD_SIZE_MISMATCH\"));\n\t\t\t\t\t}\n\t\t\t\t},\n\t\t\t}),\n\t\t);\n\t\tconst body = preserveKnownLength(checkedBody, expectedSize);\n\n\t\tconst attemptKey = createUploadAttemptKey(media.storageKey);\n\t\tawait repo.createUploadAttempt(id, attemptKey);\n\n\t\tlet attemptSize: number;\n\t\ttry {\n\t\t\tconst result = await emdash.storage.upload({\n\t\t\t\tkey: attemptKey,\n\t\t\t\tbody,\n\t\t\t\tcontentType: media.mimeType,\n\t\t\t});\n\t\t\tattemptSize = result.size;\n\t\t} catch (error) {\n\t\t\tawait removeUploadAttempt(emdash.storage, repo, attemptKey);\n\t\t\tconst bodyError = findUploadBodyError(error);\n\t\t\tif (bodyError?.code === \"PAYLOAD_TOO_LARGE\") {\n\t\t\t\treturn apiError(\"PAYLOAD_TOO_LARGE\", \"Upload exceeds the expected size\", 413);\n\t\t\t}\n\t\t\tif (bodyError?.code === \"UPLOAD_SIZE_MISMATCH\") {\n\t\t\t\treturn apiError(\"UPLOAD_SIZE_MISMATCH\", \"Upload size does not match the media item\", 400);\n\t\t\t}\n\t\t\treturn handleError(error, \"Upload failed\", \"UPLOAD_ERROR\");\n\t\t}\n\n\t\tif (receivedSize !== expectedSize || attemptSize !== expectedSize) {\n\t\t\tawait removeUploadAttempt(emdash.storage, repo, attemptKey);\n\t\t\treturn apiError(\"UPLOAD_SIZE_MISMATCH\", \"Upload size does not match the media item\", 400);\n\t\t}\n\t\tconst contentHash = hashBytes ? await computeContentHash(hashBytes) : undefined;\n\n\t\tlet published: boolean;\n\t\ttry {\n\t\t\tpublished = await repo.publishPendingStorageKey(\n\t\t\t\tid,\n\t\t\t\tmedia.storageKey,\n\t\t\t\tattemptKey,\n\t\t\t\tcontentHash,\n\t\t\t);\n\t\t} catch (error) {\n\t\t\ttry {\n\t\t\t\tconst current = await repo.findById(id);\n\t\t\t\tif (\n\t\t\t\t\tcurrent?.storageKey === attemptKey &&\n\t\t\t\t\t(current.status === \"pending\" || current.status === \"ready\") &&\n\t\t\t\t\tcurrent.size === expectedSize &&\n\t\t\t\t\t(await getStoredSize(emdash.storage, attemptKey)) === expectedSize\n\t\t\t\t) {\n\t\t\t\t\treturn apiSuccess({ uploaded: true, size: expectedSize });\n\t\t\t\t}\n\t\t\t} catch (verificationError) {\n\t\t\t\tconsole.error(\"[media] upload publication verification failed:\", verificationError);\n\t\t\t}\n\t\t\treturn handleError(error, \"Upload failed\", \"UPLOAD_ERROR\");\n\t\t}\n\n\t\tif (!published) {\n\t\t\tconst current = await repo.findById(id);\n\t\t\tif (\n\t\t\t\tcurrent &&\n\t\t\t\t(current.status === \"pending\" || current.status === \"ready\") &&\n\t\t\t\tcurrent.size === expectedSize &&\n\t\t\t\t(current.storageKey === attemptKey ||\n\t\t\t\t\texpectedSize === 0 ||\n\t\t\t\t\t(contentHash !== undefined && current.contentHash === contentHash)) &&\n\t\t\t\t(await getStoredSize(emdash.storage, current.storageKey)) === expectedSize\n\t\t\t) {\n\t\t\t\tif (current.storageKey !== attemptKey) {\n\t\t\t\t\tawait removeUploadAttempt(emdash.storage, repo, attemptKey);\n\t\t\t\t}\n\t\t\t\treturn apiSuccess({ uploaded: true, size: expectedSize });\n\t\t\t}\n\t\t\tawait removeUploadAttempt(emdash.storage, repo, attemptKey);\n\t\t\treturn apiError(\"INVALID_STATE\", \"Media item is no longer pending\", 400);\n\t\t}\n\n\t\tawait removeUploadAttempt(emdash.storage, repo, media.storageKey);\n\t\treturn apiSuccess({ uploaded: true, size: receivedSize });\n\t} catch (error) {\n\t\treturn handleError(error, \"Upload failed\", \"UPLOAD_ERROR\");\n\t}\n};\n"],"mappings":";;;;;;;;;;;;;AAWA,MAAa,YAAY;AAEzB,MAAM,4BAA4B,KAAK;AAQvC,IAAM,kBAAN,cAA8B,MAAM;CACnC,AAAS;CAET,YAAY,MAAoD;AAC/D,QAAM,KAAK;AACX,OAAK,OAAO;;;AAId,SAAS,oBAAoB,OAAwC;CACpE,IAAI,UAAU;AACd,MAAK,IAAI,QAAQ,GAAG,QAAQ,KAAK,mBAAmB,OAAO,SAAS;AACnE,MAAI,mBAAmB,gBAAiB,QAAO;AAC/C,YAAU,QAAQ;;AAEnB,QAAO;;AAGR,SAAS,oBACR,MACA,gBAC6B;AAC7B,KAAI,OAAO,sBAAsB,YAAa,QAAO;AACrD,QAAO,KAAK,YAAY,IAAI,kBAAkB,eAAe,CAAC;;AAG/D,SAAS,uBAAuB,KAAqB;CACpD,MAAM,gBAAgB,IAAI,YAAY,IAAI;CAC1C,MAAM,qBAAqB,IAAI,YAAY,IAAI;AAC/C,KAAI,qBAAqB,cACxB,QAAO,GAAG,IAAI,MAAM,GAAG,mBAAmB,CAAC,GAAG,MAAM,GAAG,IAAI,MAAM,mBAAmB;AAErF,QAAO,GAAG,IAAI,GAAG,MAAM;;AAGxB,eAAe,cAAc,SAAkB,KAAqC;AACnF,KAAI,CAAE,MAAM,QAAQ,OAAO,IAAI,CAAG,QAAO;CACzC,MAAM,WAAW,MAAM,QAAQ,SAAS,IAAI;AAC5C,KAAI;AACH,SAAO,SAAS;WACP;AACT,MAAI;AACH,SAAM,SAAS,KAAK,QAAQ;WACpB,OAAO;AACf,WAAQ,MAAM,gDAAgD,MAAM;;;;AAKvE,MAAa,MAAgB,OAAO,EAAE,QAAQ,SAAS,aAAa;CACnE,MAAM,EAAE,QAAQ,SAAS;CACzB,MAAM,EAAE,OAAO;CAEf,MAAM,SAAS,YAAY,MAAM,eAAe;AAChD,KAAI,OAAQ,QAAO;AAEnB,KAAI,CAAC,GACJ,QAAO,SAAS,mBAAmB,wBAAwB,IAAI;AAGhE,KAAI,CAAC,QAAQ,GACZ,QAAO,SAAS,kBAAkB,6BAA6B,IAAI;AAGpE,KAAI,CAAC,OAAO,QACX,QAAO,SAAS,cAAc,0BAA0B,IAAI;AAG7D,KAAI;EACH,MAAM,OAAO,IAAI,gBAAgB,OAAO,GAAG;EAC3C,MAAM,QAAQ,MAAM,KAAK,SAAS,GAAG;AACrC,MAAI,CAAC,MACJ,QAAO,SAAS,aAAa,yBAAyB,MAAM,IAAI;AAGjE,MAAI,MAAM,WAAW,UACpB,QAAO,SAAS,iBAAiB,8BAA8B,MAAM,UAAU,IAAI;EAGpF,MAAM,cAAc,iBACnB,MACA,MAAM,YAAY,IAClB,gBACA,iBACA;AACD,MAAI,YAAa,QAAO;AAExB,MAAI,CAAC,OAAO,cAAc,MAAM,KAAK,IAAI,MAAM,SAAS,QAAQ,MAAM,OAAO,EAC5E,QAAO,SAAS,iBAAiB,+CAA+C,IAAI;EAErF,MAAM,eAAe,MAAM;EAE3B,MAAM,cAAc,QAAQ,QAAQ,IAAI,eAAe;AACvD,MAAI,CAAC,eAAe,cAAc,YAAY,KAAK,MAAM,SACxD,QAAO,SAAS,gBAAgB,qDAAqD,IAAI;EAG1F,MAAM,cACL,QAAQ,SACP,iBAAiB,IACf,IAAI,eAA2B,EAC/B,MAAM,YAAY;AACjB,cAAW,OAAO;KAEnB,CAAC,GACD;AACJ,MAAI,CAAC,YACJ,QAAO,SAAS,WAAW,oBAAoB,IAAI;EAGpD,MAAM,gBAAgB,QAAQ,QAAQ,IAAI,iBAAiB;AAC3D,MAAI,kBAAkB,MAAM;GAC3B,MAAM,eAAe,OAAO,cAAc;AAC1C,OAAI,CAAC,OAAO,cAAc,aAAa,IAAI,eAAe,EACzD,QAAO,SAAS,mBAAmB,iCAAiC,IAAI;AAEzE,OAAI,eAAe,aAClB,QAAO,SAAS,qBAAqB,oCAAoC,IAAI;AAE9E,OAAI,iBAAiB,aACpB,QAAO,SAAS,wBAAwB,6CAA6C,IAAI;;EAI3F,IAAI,eAAe;EACnB,MAAM,aAAa,eAAe,KAAK,gBAAgB;EACvD,IAAI,YAA+B;EAiCnC,MAAM,OAAO,oBAhCO,YAAY,YAC/B,IAAI,gBAAwC;GAC3C,UAAU,OAAO,YAAY;IAC5B,MAAM,SAAS;AACf,oBAAgB,MAAM;AACtB,QAAI,eAAe,cAAc;AAChC,gBAAW,MAAM,IAAI,gBAAgB,oBAAoB,CAAC;AAC1D;;AAED,QAAI,cAAc,MAAM,aAAa,GAAG;AACvC,SAAI,CAAC,UACJ,aAAY,IAAI,WACf,KAAK,IAAI,cAAc,KAAK,IAAI,2BAA2B,aAAa,CAAC,CACzE;cACS,eAAe,UAAU,YAAY;MAC/C,MAAM,QAAQ,IAAI,WACjB,KAAK,IAAI,cAAc,KAAK,IAAI,cAAc,UAAU,aAAa,EAAE,CAAC,CACxE;AACD,YAAM,IAAI,UAAU;AACpB,kBAAY;;AAEb,eAAU,IAAI,OAAO,OAAO;;AAE7B,eAAW,QAAQ,MAAM;;GAE1B,MAAM,YAAY;AACjB,QAAI,iBAAiB,aACpB,YAAW,MAAM,IAAI,gBAAgB,uBAAuB,CAAC;;GAG/D,CAAC,CACF,EAC6C,aAAa;EAE3D,MAAM,aAAa,uBAAuB,MAAM,WAAW;AAC3D,QAAM,KAAK,oBAAoB,IAAI,WAAW;EAE9C,IAAI;AACJ,MAAI;AAMH,kBALe,MAAM,OAAO,QAAQ,OAAO;IAC1C,KAAK;IACL;IACA,aAAa,MAAM;IACnB,CAAC,EACmB;WACb,OAAO;AACf,SAAM,oBAAoB,OAAO,SAAS,MAAM,WAAW;GAC3D,MAAM,YAAY,oBAAoB,MAAM;AAC5C,OAAI,WAAW,SAAS,oBACvB,QAAO,SAAS,qBAAqB,oCAAoC,IAAI;AAE9E,OAAI,WAAW,SAAS,uBACvB,QAAO,SAAS,wBAAwB,6CAA6C,IAAI;AAE1F,UAAO,YAAY,OAAO,iBAAiB,eAAe;;AAG3D,MAAI,iBAAiB,gBAAgB,gBAAgB,cAAc;AAClE,SAAM,oBAAoB,OAAO,SAAS,MAAM,WAAW;AAC3D,UAAO,SAAS,wBAAwB,6CAA6C,IAAI;;EAE1F,MAAM,cAAc,YAAY,MAAM,mBAAmB,UAAU,GAAG;EAEtE,IAAI;AACJ,MAAI;AACH,eAAY,MAAM,KAAK,yBACtB,IACA,MAAM,YACN,YACA,YACA;WACO,OAAO;AACf,OAAI;IACH,MAAM,UAAU,MAAM,KAAK,SAAS,GAAG;AACvC,QACC,SAAS,eAAe,eACvB,QAAQ,WAAW,aAAa,QAAQ,WAAW,YACpD,QAAQ,SAAS,gBAChB,MAAM,cAAc,OAAO,SAAS,WAAW,KAAM,aAEtD,QAAO,WAAW;KAAE,UAAU;KAAM,MAAM;KAAc,CAAC;YAElD,mBAAmB;AAC3B,YAAQ,MAAM,mDAAmD,kBAAkB;;AAEpF,UAAO,YAAY,OAAO,iBAAiB,eAAe;;AAG3D,MAAI,CAAC,WAAW;GACf,MAAM,UAAU,MAAM,KAAK,SAAS,GAAG;AACvC,OACC,YACC,QAAQ,WAAW,aAAa,QAAQ,WAAW,YACpD,QAAQ,SAAS,iBAChB,QAAQ,eAAe,cACvB,iBAAiB,KAChB,gBAAgB,UAAa,QAAQ,gBAAgB,gBACtD,MAAM,cAAc,OAAO,SAAS,QAAQ,WAAW,KAAM,cAC7D;AACD,QAAI,QAAQ,eAAe,WAC1B,OAAM,oBAAoB,OAAO,SAAS,MAAM,WAAW;AAE5D,WAAO,WAAW;KAAE,UAAU;KAAM,MAAM;KAAc,CAAC;;AAE1D,SAAM,oBAAoB,OAAO,SAAS,MAAM,WAAW;AAC3D,UAAO,SAAS,iBAAiB,mCAAmC,IAAI;;AAGzE,QAAM,oBAAoB,OAAO,SAAS,MAAM,MAAM,WAAW;AACjE,SAAO,WAAW;GAAE,UAAU;GAAM,MAAM;GAAc,CAAC;UACjD,OAAO;AACf,SAAO,YAAY,OAAO,iBAAiB,eAAe"}

package/dist/astro/routes/api/media/_id_/usage.mjs

@@ -1,27 +1,40 @@
-import "../../../../../dialect-helpers-CtYdsX4W.mjs";
-import "../../../../../config-CGVeT8Hc.mjs";
+import "../../../../../dialect-helpers-7_IqPdh9.mjs";
+import "../../../../../config-CvmjJcVw.mjs";
 import "../../../../../base64-DvnNgP7e.mjs";
 import "../../../../../types-BkUg2yHx.mjs";
-import "../../../../../media-TBlKCwo7.mjs";
-import "../../../../../fts-manager-CjX0e5BR.mjs";
-import "../../../../../capture-triggers-gxQxnxrJ.mjs";
-import "../../../../../activation-CaMfdBt1.mjs";
-import "../../../../../collection-deletion-C-yQB9fq.mjs";
-import "../../../../../content-refresh-iRBhQHr5.mjs";
-import "../../../../../media-usage-work-Cu5DqewW.mjs";
-import "../../../../../content-repair-8uHRIJkd.mjs";
-import { t as handleMediaUsageDetails } from "../../../../../media-usage-Bd9rFPKN.mjs";
-import { a as unwrapResult, t as apiError } from "../../../../../error-CCTCskie.mjs";
-import { i as parseQuery, t as isParseError } from "../../../../../parse-Cr379Av9.mjs";
-import "../../../../../redirects-BCiTaIQ-.mjs";
-import { Sn as mediaUsageDetailsQuery } from "../../../../../entry-lock-CwWdnFyR.mjs";
-import "../../../../../comments-BVzzt6x5.mjs";
-import "../../../../../relations-B4w-G5U9.mjs";
-import "../../../../../status-DLoBmcDz.mjs";
+import "../../../../../media-CPXTbb1R.mjs";
+import "../../../../../request-cache-DzLYKm_x.mjs";
+import "../../../../../fts-manager-S-K0laoS.mjs";
+import "../../../../../collection-slugs-cache-CjGk__zp.mjs";
+import "../../../../../capture-triggers-kJyl_yyM.mjs";
+import "../../../../../activation-LOkDM5WT.mjs";
+import "../../../../../block-type-registry-DUI_3KxT.mjs";
+import "../../../../../collection-deletion-BIm28mo3.mjs";
+import "../../../../../errors-DgE1zJGG.mjs";
+import "../../../../../canonical-YhEQezjg.mjs";
+import "../../../../../digest-BarSh-pN.mjs";
+import "../../../../../hash-SDAW6zC-.mjs";
+import "../../../../../zod-generator-D6uE4WiS.mjs";
+import "../../../../../media-usage-work-C2OZLCAd.mjs";
+import "../../../../../content-repair-Q8IUrpLL.mjs";
+import "../../../../../collection-deletion-processor-Br6rxs3u.mjs";
+import { t as handleMediaUsageDetails } from "../../../../../media-usage-De-zeR9E.mjs";
+import "../../../../../settings-DYidIB26.mjs";
+import "../../../../../site-settings-DOgRUoFX.mjs";
+import "../../../../../errors-BF0_LFhW.mjs";
+import { a as unwrapResult, t as apiError } from "../../../../../error-CfvOHP0M.mjs";
+import { i as parseQuery, t as isParseError } from "../../../../../parse-DY6OD1j_.mjs";
+import "../../../../../redirects-Cv9apQKj.mjs";
+import "../../../../../entry-lock-BJYdBfXb.mjs";
+import { J as mediaUsageDetailsQuery } from "../../../../../media-Pu1L6xir.mjs";
+import "../../../../../comments-fHZ8ON9O.mjs";
+import "../../../../../relations-CK9CYUyr.mjs";
+import "../../../../../menus-BM7BPLOb.mjs";
+import "../../../../../status-DZKIG4a9.mjs";
 import "../../../../../api/schemas/index.mjs";
-import "../../../../../api-tokens-DS1VzN7_.mjs";
-import { r as requirePerm } from "../../../../../authorize-BXpfMpp0.mjs";
-import { t as requireScope } from "../../../../../scopes-Bn8_rCSt.mjs";
+import "../../../../../api-tokens-CE1ECIg0.mjs";
+import { i as requirePerm } from "../../../../../authorize-seCifOMJ.mjs";
+import { n as requireScope } from "../../../../../scopes-Dbk-ElhT.mjs";
 
 //#region src/astro/routes/api/media/[id]/usage.ts
 const prerender = false;

package/dist/astro/routes/api/media/_id_/usage.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"usage.mjs","names":[],"sources":["../../../../../../src/astro/routes/api/media/[id]/usage.ts"],"sourcesContent":["import type { APIRoute } from \"astro\";\n\nimport { requirePerm } from \"#api/authorize.js\";\nimport { apiError, unwrapResult } from \"#api/error.js\";\nimport { handleMediaUsageDetails } from \"#api/handlers/media-usage.js\";\nimport { isParseError, parseQuery } from \"#api/parse.js\";\nimport { mediaUsageDetailsQuery } from \"#api/schemas.js\";\nimport { requireScope } from \"#auth/scopes.js\";\n\nexport const prerender = false;\n\nexport const GET: APIRoute = async ({ params, request, locals }) => {\n\tconst { emdash, user } = locals;\n\n\tconst mediaDenied = requirePerm(user, \"media:read\");\n\tif (mediaDenied) return mediaDenied;\n\tconst contentDenied = requirePerm(user, \"content:read_drafts\");\n\tif (contentDenied) return contentDenied;\n\tconst scopeDenied = requireScope(locals, \"admin\");\n\tif (scopeDenied) return scopeDenied;\n\n\tconst { id } = params;\n\tif (!id) return apiError(\"INVALID_REQUEST\", \"Media ID required\", 400);\n\tif (!emdash?.db) return apiError(\"NOT_CONFIGURED\", \"EmDash is not initialized\", 500);\n\n\tconst query = parseQuery(new URL(request.url), mediaUsageDetailsQuery);\n\tif (isParseError(query)) return query;\n\n\treturn unwrapResult(await handleMediaUsageDetails(emdash.db, id, query));\n};\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;AASA,MAAa,YAAY;AAEzB,MAAa,MAAgB,OAAO,EAAE,QAAQ,SAAS,aAAa;CACnE,MAAM,EAAE,QAAQ,SAAS;CAEzB,MAAM,cAAc,YAAY,MAAM,aAAa;AACnD,KAAI,YAAa,QAAO;CACxB,MAAM,gBAAgB,YAAY,MAAM,sBAAsB;AAC9D,KAAI,cAAe,QAAO;CAC1B,MAAM,cAAc,aAAa,QAAQ,QAAQ;AACjD,KAAI,YAAa,QAAO;CAExB,MAAM,EAAE,OAAO;AACf,KAAI,CAAC,GAAI,QAAO,SAAS,mBAAmB,qBAAqB,IAAI;AACrE,KAAI,CAAC,QAAQ,GAAI,QAAO,SAAS,kBAAkB,6BAA6B,IAAI;CAEpF,MAAM,QAAQ,WAAW,IAAI,IAAI,QAAQ,IAAI,EAAE,uBAAuB;AACtE,KAAI,aAAa,MAAM,CAAE,QAAO;AAEhC,QAAO,aAAa,MAAM,wBAAwB,OAAO,IAAI,IAAI,MAAM,CAAC"}
+{"version":3,"file":"usage.mjs","names":[],"sources":["../../../../../../src/astro/routes/api/media/[id]/usage.ts"],"sourcesContent":["import type { APIRoute } from \"astro\";\n\nimport { requirePerm } from \"#api/authorize.js\";\nimport { apiError, unwrapResult } from \"#api/error.js\";\nimport { handleMediaUsageDetails } from \"#api/handlers/media-usage.js\";\nimport { isParseError, parseQuery } from \"#api/parse.js\";\nimport { mediaUsageDetailsQuery } from \"#api/schemas.js\";\nimport { requireScope } from \"#auth/scopes.js\";\n\nexport const prerender = false;\n\nexport const GET: APIRoute = async ({ params, request, locals }) => {\n\tconst { emdash, user } = locals;\n\n\tconst mediaDenied = requirePerm(user, \"media:read\");\n\tif (mediaDenied) return mediaDenied;\n\tconst contentDenied = requirePerm(user, \"content:read_drafts\");\n\tif (contentDenied) return contentDenied;\n\tconst scopeDenied = requireScope(locals, \"admin\");\n\tif (scopeDenied) return scopeDenied;\n\n\tconst { id } = params;\n\tif (!id) return apiError(\"INVALID_REQUEST\", \"Media ID required\", 400);\n\tif (!emdash?.db) return apiError(\"NOT_CONFIGURED\", \"EmDash is not initialized\", 500);\n\n\tconst query = parseQuery(new URL(request.url), mediaUsageDetailsQuery);\n\tif (isParseError(query)) return query;\n\n\treturn unwrapResult(await handleMediaUsageDetails(emdash.db, id, query));\n};\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AASA,MAAa,YAAY;AAEzB,MAAa,MAAgB,OAAO,EAAE,QAAQ,SAAS,aAAa;CACnE,MAAM,EAAE,QAAQ,SAAS;CAEzB,MAAM,cAAc,YAAY,MAAM,aAAa;AACnD,KAAI,YAAa,QAAO;CACxB,MAAM,gBAAgB,YAAY,MAAM,sBAAsB;AAC9D,KAAI,cAAe,QAAO;CAC1B,MAAM,cAAc,aAAa,QAAQ,QAAQ;AACjD,KAAI,YAAa,QAAO;CAExB,MAAM,EAAE,OAAO;AACf,KAAI,CAAC,GAAI,QAAO,SAAS,mBAAmB,qBAAqB,IAAI;AACrE,KAAI,CAAC,QAAQ,GAAI,QAAO,SAAS,kBAAkB,6BAA6B,IAAI;CAEpF,MAAM,QAAQ,WAAW,IAAI,IAAI,QAAQ,IAAI,EAAE,uBAAuB;AACtE,KAAI,aAAa,MAAM,CAAE,QAAO;AAEhC,QAAO,aAAa,MAAM,wBAAwB,OAAO,IAAI,IAAI,MAAM,CAAC"}

package/dist/astro/routes/api/media/_id_.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"_id_.d.mts","names":[],"sources":["../../../../../src/astro/routes/api/media/[id].ts"],"mappings":";;;cAkBa,SAAA;;;;cAKA,GAAA,EAAK,QAAA;AAkClB;;;;;AAAA,cAAa,GAAA,EAAK,QAAA;;;;;;cAqDL,MAAA,EAAQ,QAAA"}
+{"version":3,"file":"_id_.d.mts","names":[],"sources":["../../../../../src/astro/routes/api/media/[id].ts"],"mappings":";;;cAea,SAAA;;;;cAKA,GAAA,EAAK,QAAA;AAkClB;;;;;AAAA,cAAa,GAAA,EAAK,QAAA;;;;;;cAqDL,MAAA,EAAQ,QAAA"}

package/dist/astro/routes/api/media/_id_.mjs

@@ -1,26 +1,38 @@
-import "../../../../dialect-helpers-CtYdsX4W.mjs";
-import "../../../../config-CGVeT8Hc.mjs";
+import "../../../../dialect-helpers-7_IqPdh9.mjs";
+import "../../../../config-CvmjJcVw.mjs";
 import "../../../../base64-DvnNgP7e.mjs";
 import "../../../../types-BkUg2yHx.mjs";
-import { t as MediaRepository } from "../../../../media-TBlKCwo7.mjs";
-import "../../../../fts-manager-CjX0e5BR.mjs";
-import "../../../../capture-triggers-gxQxnxrJ.mjs";
-import "../../../../activation-CaMfdBt1.mjs";
-import "../../../../collection-deletion-C-yQB9fq.mjs";
-import "../../../../content-refresh-iRBhQHr5.mjs";
-import "../../../../media-usage-work-Cu5DqewW.mjs";
-import "../../../../content-repair-8uHRIJkd.mjs";
-import { a as handleMediaUsageSummaries } from "../../../../media-usage-Bd9rFPKN.mjs";
-import { a as unwrapResult, n as apiSuccess, r as handleError, t as apiError } from "../../../../error-CCTCskie.mjs";
-import { i as parseQuery, n as parseBody, t as isParseError } from "../../../../parse-Cr379Av9.mjs";
-import "../../../../redirects-BCiTaIQ-.mjs";
-import { Ht as mediaGetQuery, nn as mediaUpdateBody } from "../../../../entry-lock-CwWdnFyR.mjs";
-import "../../../../comments-BVzzt6x5.mjs";
-import "../../../../relations-B4w-G5U9.mjs";
-import "../../../../status-DLoBmcDz.mjs";
+import "../../../../media-CPXTbb1R.mjs";
+import "../../../../request-cache-DzLYKm_x.mjs";
+import "../../../../fts-manager-S-K0laoS.mjs";
+import "../../../../collection-slugs-cache-CjGk__zp.mjs";
+import "../../../../capture-triggers-kJyl_yyM.mjs";
+import "../../../../activation-LOkDM5WT.mjs";
+import "../../../../block-type-registry-DUI_3KxT.mjs";
+import "../../../../collection-deletion-BIm28mo3.mjs";
+import "../../../../errors-DgE1zJGG.mjs";
+import "../../../../canonical-YhEQezjg.mjs";
+import "../../../../digest-BarSh-pN.mjs";
+import "../../../../hash-SDAW6zC-.mjs";
+import "../../../../zod-generator-D6uE4WiS.mjs";
+import "../../../../media-usage-work-C2OZLCAd.mjs";
+import "../../../../content-repair-Q8IUrpLL.mjs";
+import "../../../../collection-deletion-processor-Br6rxs3u.mjs";
+import { a as handleMediaUsageSummaries } from "../../../../media-usage-De-zeR9E.mjs";
+import "../../../../settings-DYidIB26.mjs";
+import "../../../../site-settings-DOgRUoFX.mjs";
+import "../../../../errors-BF0_LFhW.mjs";
+import { a as unwrapResult, n as apiSuccess, r as handleError, t as apiError } from "../../../../error-CfvOHP0M.mjs";
+import { i as parseQuery, n as parseBody, t as isParseError } from "../../../../parse-DY6OD1j_.mjs";
+import "../../../../redirects-Cv9apQKj.mjs";
+import "../../../../entry-lock-BJYdBfXb.mjs";
+import { O as mediaUpdateBody, m as mediaGetQuery } from "../../../../media-Pu1L6xir.mjs";
+import "../../../../comments-fHZ8ON9O.mjs";
+import "../../../../relations-CK9CYUyr.mjs";
+import "../../../../menus-BM7BPLOb.mjs";
+import "../../../../status-DZKIG4a9.mjs";
 import "../../../../api/schemas/index.mjs";
-import { t as removeUploadAttempt } from "../../../../upload-attempts-2xdnoKGe.mjs";
-import { n as requireOwnerPerm, r as requirePerm, t as canReadMediaUsageCount } from "../../../../authorize-BXpfMpp0.mjs";
+import { i as requirePerm, r as requireOwnerPerm, t as canReadMediaUsageCount } from "../../../../authorize-seCifOMJ.mjs";
 
 //#region src/astro/routes/api/media/[id].ts
 const prerender = false;
@@ -101,12 +113,11 @@ const DELETE = async ({ params, locals }) => {
 		if (ownerDenied) return ownerDenied;
 		const result = await emdash.handleMediaDelete(id);
 		if (!result.success) return unwrapResult(result);
-		if (typeof result.data !== "object" || result.data === null || !("storageKey" in result.data) || typeof result.data.storageKey !== "string") return apiError("MEDIA_DELETE_ERROR", "Failed to delete media", 500);
-		if (emdash.storage) {
-			const repo = new MediaRepository(emdash.db);
-			await removeUploadAttempt(emdash.storage, repo, result.data.storageKey, { allowUntracked: true });
-		}
-		return apiSuccess({ deleted: true });
+		if (typeof result.data !== "object" || result.data === null || !("storageDeleted" in result.data) || typeof result.data.storageDeleted !== "boolean") return apiError("MEDIA_DELETE_ERROR", "Failed to delete media", 500);
+		return apiSuccess({
+			deleted: true,
+			storageDeleted: result.data.storageDeleted
+		});
 	} catch (error) {
 		return handleError(error, "Failed to delete media", "MEDIA_DELETE_ERROR");
 	}

package/dist/astro/routes/api/media/_id_.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"_id_.mjs","names":[],"sources":["../../../../../src/astro/routes/api/media/[id].ts"],"sourcesContent":["/**\n * Single media item endpoint\n *\n * GET /_emdash/api/media/:id - Get media item\n * PUT /_emdash/api/media/:id - Update media metadata\n * DELETE /_emdash/api/media/:id - Delete media item\n */\n\nimport type { APIRoute } from \"astro\";\n\nimport { canReadMediaUsageCount, requireOwnerPerm, requirePerm } from \"#api/authorize.js\";\nimport { apiError, apiSuccess, handleError, unwrapResult } from \"#api/error.js\";\nimport { handleMediaUsageSummaries } from \"#api/handlers/media-usage.js\";\nimport { isParseError, parseBody, parseQuery } from \"#api/parse.js\";\nimport { mediaGetQuery, mediaUpdateBody } from \"#api/schemas.js\";\nimport { MediaRepository } from \"#db/repositories/media.js\";\nimport { removeUploadAttempt } from \"#media/upload-attempts.js\";\n\nexport const prerender = false;\n\n/**\n * Get media item\n */\nexport const GET: APIRoute = async ({ params, request, locals }) => {\n\tconst { emdash, user } = locals;\n\tconst { id } = params;\n\n\tconst readDenied = requirePerm(user, \"media:read\");\n\tif (readDenied) return readDenied;\n\n\tif (!id) {\n\t\treturn apiError(\"INVALID_REQUEST\", \"Media ID required\", 400);\n\t}\n\n\tif (!emdash?.handleMediaGet) {\n\t\treturn apiError(\"NOT_CONFIGURED\", \"EmDash is not initialized\", 500);\n\t}\n\tconst query = parseQuery(new URL(request.url), mediaGetQuery);\n\tif (isParseError(query)) return query;\n\n\tconst result = await emdash.handleMediaGet(id);\n\tif (!result.success || query.includeUsage !== \"1\") return unwrapResult(result);\n\n\tconst includeCount = canReadMediaUsageCount(user, locals.tokenScopes);\n\tconst usageResult = await handleMediaUsageSummaries(emdash.db, [id], { includeCount });\n\tif (!usageResult.success) return unwrapResult(usageResult);\n\tconst usage = usageResult.data[id];\n\tif (!usage) return apiError(\"MEDIA_USAGE_READ_ERROR\", \"Failed to read media usage\", 500);\n\n\treturn apiSuccess({ item: { ...result.data.item, usage } });\n};\n\n/**\n * Update media metadata\n *\n * Authors can edit their own media; editors+ can edit any.\n */\nexport const PUT: APIRoute = async ({ params, request, locals }) => {\n\tconst { emdash, user } = locals;\n\tconst { id } = params;\n\n\t// Minimum permission gate — ownership checked below\n\tconst editDenied = requirePerm(user, \"media:edit_own\");\n\tif (editDenied) return editDenied;\n\n\tif (!id) {\n\t\treturn apiError(\"INVALID_REQUEST\", \"Media ID required\", 400);\n\t}\n\n\tif (!emdash?.handleMediaGet || !emdash?.handleMediaUpdate) {\n\t\treturn apiError(\"NOT_CONFIGURED\", \"EmDash is not initialized\", 500);\n\t}\n\n\ttry {\n\t\t// Fetch media item for ownership check\n\t\tconst getResult = await emdash.handleMediaGet(id);\n\t\tif (!getResult.success || !getResult.data?.item) {\n\t\t\treturn apiError(\"NOT_FOUND\", \"Media item not found\", 404);\n\t\t}\n\n\t\tconst media = getResult.data.item;\n\n\t\t// Ownership check: authors can edit own, editors+ can edit any\n\t\tconst ownerDenied = requireOwnerPerm(user, media.authorId, \"media:edit_own\", \"media:edit_any\");\n\t\tif (ownerDenied) return ownerDenied;\n\n\t\tconst body = await parseBody(request, mediaUpdateBody);\n\t\tif (isParseError(body)) return body;\n\n\t\tconst result = await emdash.handleMediaUpdate(id, {\n\t\t\talt: body.alt,\n\t\t\tcaption: body.caption,\n\t\t\twidth: body.width,\n\t\t\theight: body.height,\n\t\t\tfolderId: body.folderId,\n\t\t\tfocalX: body.focalX,\n\t\t\tfocalY: body.focalY,\n\t\t});\n\n\t\treturn unwrapResult(result);\n\t} catch (error) {\n\t\treturn handleError(error, \"Failed to update media\", \"MEDIA_UPDATE_ERROR\");\n\t}\n};\n\n/**\n * Delete media item\n *\n * Authors can delete their own media; editors+ can delete any.\n */\nexport const DELETE: APIRoute = async ({ params, locals }) => {\n\tconst { emdash, user } = locals;\n\tconst { id } = params;\n\n\t// Minimum permission gate — ownership checked below\n\tconst deleteDenied = requirePerm(user, \"media:delete_own\");\n\tif (deleteDenied) return deleteDenied;\n\n\tif (!id) {\n\t\treturn apiError(\"INVALID_REQUEST\", \"Media ID required\", 400);\n\t}\n\n\tif (!emdash?.handleMediaGet || !emdash?.handleMediaDelete) {\n\t\treturn apiError(\"NOT_CONFIGURED\", \"EmDash is not initialized\", 500);\n\t}\n\n\ttry {\n\t\t// Fetch media item for ownership check and storage key\n\t\tconst getResult = await emdash.handleMediaGet(id);\n\t\tif (!getResult.success || !getResult.data?.item) {\n\t\t\treturn apiError(\"NOT_FOUND\", \"Media item not found\", 404);\n\t\t}\n\n\t\tconst media = getResult.data.item;\n\n\t\t// Ownership check: authors can delete own, editors+ can delete any\n\t\tconst ownerDenied = requireOwnerPerm(\n\t\t\tuser,\n\t\t\tmedia.authorId,\n\t\t\t\"media:delete_own\",\n\t\t\t\"media:delete_any\",\n\t\t);\n\t\tif (ownerDenied) return ownerDenied;\n\n\t\t// Delete from database — site-settings cache invalidation happens\n\t\t// in `EmDashRuntime.handleMediaDelete` so MCP/plugin paths inherit it.\n\t\tconst result = await emdash.handleMediaDelete(id);\n\t\tif (!result.success) return unwrapResult(result);\n\t\tif (\n\t\t\ttypeof result.data !== \"object\" ||\n\t\t\tresult.data === null ||\n\t\t\t!(\"storageKey\" in result.data) ||\n\t\t\ttypeof result.data.storageKey !== \"string\"\n\t\t) {\n\t\t\treturn apiError(\"MEDIA_DELETE_ERROR\", \"Failed to delete media\", 500);\n\t\t}\n\n\t\tif (emdash.storage) {\n\t\t\tconst repo = new MediaRepository(emdash.db);\n\t\t\tawait removeUploadAttempt(emdash.storage, repo, result.data.storageKey, {\n\t\t\t\tallowUntracked: true,\n\t\t\t});\n\t\t}\n\n\t\treturn apiSuccess({ deleted: true });\n\t} catch (error) {\n\t\treturn handleError(error, \"Failed to delete media\", \"MEDIA_DELETE_ERROR\");\n\t}\n};\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;AAkBA,MAAa,YAAY;;;;AAKzB,MAAa,MAAgB,OAAO,EAAE,QAAQ,SAAS,aAAa;CACnE,MAAM,EAAE,QAAQ,SAAS;CACzB,MAAM,EAAE,OAAO;CAEf,MAAM,aAAa,YAAY,MAAM,aAAa;AAClD,KAAI,WAAY,QAAO;AAEvB,KAAI,CAAC,GACJ,QAAO,SAAS,mBAAmB,qBAAqB,IAAI;AAG7D,KAAI,CAAC,QAAQ,eACZ,QAAO,SAAS,kBAAkB,6BAA6B,IAAI;CAEpE,MAAM,QAAQ,WAAW,IAAI,IAAI,QAAQ,IAAI,EAAE,cAAc;AAC7D,KAAI,aAAa,MAAM,CAAE,QAAO;CAEhC,MAAM,SAAS,MAAM,OAAO,eAAe,GAAG;AAC9C,KAAI,CAAC,OAAO,WAAW,MAAM,iBAAiB,IAAK,QAAO,aAAa,OAAO;CAE9E,MAAM,eAAe,uBAAuB,MAAM,OAAO,YAAY;CACrE,MAAM,cAAc,MAAM,0BAA0B,OAAO,IAAI,CAAC,GAAG,EAAE,EAAE,cAAc,CAAC;AACtF,KAAI,CAAC,YAAY,QAAS,QAAO,aAAa,YAAY;CAC1D,MAAM,QAAQ,YAAY,KAAK;AAC/B,KAAI,CAAC,MAAO,QAAO,SAAS,0BAA0B,8BAA8B,IAAI;AAExF,QAAO,WAAW,EAAE,MAAM;EAAE,GAAG,OAAO,KAAK;EAAM;EAAO,EAAE,CAAC;;;;;;;AAQ5D,MAAa,MAAgB,OAAO,EAAE,QAAQ,SAAS,aAAa;CACnE,MAAM,EAAE,QAAQ,SAAS;CACzB,MAAM,EAAE,OAAO;CAGf,MAAM,aAAa,YAAY,MAAM,iBAAiB;AACtD,KAAI,WAAY,QAAO;AAEvB,KAAI,CAAC,GACJ,QAAO,SAAS,mBAAmB,qBAAqB,IAAI;AAG7D,KAAI,CAAC,QAAQ,kBAAkB,CAAC,QAAQ,kBACvC,QAAO,SAAS,kBAAkB,6BAA6B,IAAI;AAGpE,KAAI;EAEH,MAAM,YAAY,MAAM,OAAO,eAAe,GAAG;AACjD,MAAI,CAAC,UAAU,WAAW,CAAC,UAAU,MAAM,KAC1C,QAAO,SAAS,aAAa,wBAAwB,IAAI;EAG1D,MAAM,QAAQ,UAAU,KAAK;EAG7B,MAAM,cAAc,iBAAiB,MAAM,MAAM,UAAU,kBAAkB,iBAAiB;AAC9F,MAAI,YAAa,QAAO;EAExB,MAAM,OAAO,MAAM,UAAU,SAAS,gBAAgB;AACtD,MAAI,aAAa,KAAK,CAAE,QAAO;AAY/B,SAAO,aAVQ,MAAM,OAAO,kBAAkB,IAAI;GACjD,KAAK,KAAK;GACV,SAAS,KAAK;GACd,OAAO,KAAK;GACZ,QAAQ,KAAK;GACb,UAAU,KAAK;GACf,QAAQ,KAAK;GACb,QAAQ,KAAK;GACb,CAAC,CAEyB;UACnB,OAAO;AACf,SAAO,YAAY,OAAO,0BAA0B,qBAAqB;;;;;;;;AAS3E,MAAa,SAAmB,OAAO,EAAE,QAAQ,aAAa;CAC7D,MAAM,EAAE,QAAQ,SAAS;CACzB,MAAM,EAAE,OAAO;CAGf,MAAM,eAAe,YAAY,MAAM,mBAAmB;AAC1D,KAAI,aAAc,QAAO;AAEzB,KAAI,CAAC,GACJ,QAAO,SAAS,mBAAmB,qBAAqB,IAAI;AAG7D,KAAI,CAAC,QAAQ,kBAAkB,CAAC,QAAQ,kBACvC,QAAO,SAAS,kBAAkB,6BAA6B,IAAI;AAGpE,KAAI;EAEH,MAAM,YAAY,MAAM,OAAO,eAAe,GAAG;AACjD,MAAI,CAAC,UAAU,WAAW,CAAC,UAAU,MAAM,KAC1C,QAAO,SAAS,aAAa,wBAAwB,IAAI;EAG1D,MAAM,QAAQ,UAAU,KAAK;EAG7B,MAAM,cAAc,iBACnB,MACA,MAAM,UACN,oBACA,mBACA;AACD,MAAI,YAAa,QAAO;EAIxB,MAAM,SAAS,MAAM,OAAO,kBAAkB,GAAG;AACjD,MAAI,CAAC,OAAO,QAAS,QAAO,aAAa,OAAO;AAChD,MACC,OAAO,OAAO,SAAS,YACvB,OAAO,SAAS,QAChB,EAAE,gBAAgB,OAAO,SACzB,OAAO,OAAO,KAAK,eAAe,SAElC,QAAO,SAAS,sBAAsB,0BAA0B,IAAI;AAGrE,MAAI,OAAO,SAAS;GACnB,MAAM,OAAO,IAAI,gBAAgB,OAAO,GAAG;AAC3C,SAAM,oBAAoB,OAAO,SAAS,MAAM,OAAO,KAAK,YAAY,EACvE,gBAAgB,MAChB,CAAC;;AAGH,SAAO,WAAW,EAAE,SAAS,MAAM,CAAC;UAC5B,OAAO;AACf,SAAO,YAAY,OAAO,0BAA0B,qBAAqB"}
+{"version":3,"file":"_id_.mjs","names":[],"sources":["../../../../../src/astro/routes/api/media/[id].ts"],"sourcesContent":["/**\n * Single media item endpoint\n *\n * GET /_emdash/api/media/:id - Get media item\n * PUT /_emdash/api/media/:id - Update media metadata\n * DELETE /_emdash/api/media/:id - Delete media item\n */\n\nimport type { APIRoute } from \"astro\";\n\nimport { canReadMediaUsageCount, requireOwnerPerm, requirePerm } from \"#api/authorize.js\";\nimport { apiError, apiSuccess, handleError, unwrapResult } from \"#api/error.js\";\nimport { handleMediaUsageSummaries } from \"#api/handlers/media-usage.js\";\nimport { isParseError, parseBody, parseQuery } from \"#api/parse.js\";\nimport { mediaGetQuery, mediaUpdateBody } from \"#api/schemas.js\";\nexport const prerender = false;\n\n/**\n * Get media item\n */\nexport const GET: APIRoute = async ({ params, request, locals }) => {\n\tconst { emdash, user } = locals;\n\tconst { id } = params;\n\n\tconst readDenied = requirePerm(user, \"media:read\");\n\tif (readDenied) return readDenied;\n\n\tif (!id) {\n\t\treturn apiError(\"INVALID_REQUEST\", \"Media ID required\", 400);\n\t}\n\n\tif (!emdash?.handleMediaGet) {\n\t\treturn apiError(\"NOT_CONFIGURED\", \"EmDash is not initialized\", 500);\n\t}\n\tconst query = parseQuery(new URL(request.url), mediaGetQuery);\n\tif (isParseError(query)) return query;\n\n\tconst result = await emdash.handleMediaGet(id);\n\tif (!result.success || query.includeUsage !== \"1\") return unwrapResult(result);\n\n\tconst includeCount = canReadMediaUsageCount(user, locals.tokenScopes);\n\tconst usageResult = await handleMediaUsageSummaries(emdash.db, [id], { includeCount });\n\tif (!usageResult.success) return unwrapResult(usageResult);\n\tconst usage = usageResult.data[id];\n\tif (!usage) return apiError(\"MEDIA_USAGE_READ_ERROR\", \"Failed to read media usage\", 500);\n\n\treturn apiSuccess({ item: { ...result.data.item, usage } });\n};\n\n/**\n * Update media metadata\n *\n * Authors can edit their own media; editors+ can edit any.\n */\nexport const PUT: APIRoute = async ({ params, request, locals }) => {\n\tconst { emdash, user } = locals;\n\tconst { id } = params;\n\n\t// Minimum permission gate — ownership checked below\n\tconst editDenied = requirePerm(user, \"media:edit_own\");\n\tif (editDenied) return editDenied;\n\n\tif (!id) {\n\t\treturn apiError(\"INVALID_REQUEST\", \"Media ID required\", 400);\n\t}\n\n\tif (!emdash?.handleMediaGet || !emdash?.handleMediaUpdate) {\n\t\treturn apiError(\"NOT_CONFIGURED\", \"EmDash is not initialized\", 500);\n\t}\n\n\ttry {\n\t\t// Fetch media item for ownership check\n\t\tconst getResult = await emdash.handleMediaGet(id);\n\t\tif (!getResult.success || !getResult.data?.item) {\n\t\t\treturn apiError(\"NOT_FOUND\", \"Media item not found\", 404);\n\t\t}\n\n\t\tconst media = getResult.data.item;\n\n\t\t// Ownership check: authors can edit own, editors+ can edit any\n\t\tconst ownerDenied = requireOwnerPerm(user, media.authorId, \"media:edit_own\", \"media:edit_any\");\n\t\tif (ownerDenied) return ownerDenied;\n\n\t\tconst body = await parseBody(request, mediaUpdateBody);\n\t\tif (isParseError(body)) return body;\n\n\t\tconst result = await emdash.handleMediaUpdate(id, {\n\t\t\talt: body.alt,\n\t\t\tcaption: body.caption,\n\t\t\twidth: body.width,\n\t\t\theight: body.height,\n\t\t\tfolderId: body.folderId,\n\t\t\tfocalX: body.focalX,\n\t\t\tfocalY: body.focalY,\n\t\t});\n\n\t\treturn unwrapResult(result);\n\t} catch (error) {\n\t\treturn handleError(error, \"Failed to update media\", \"MEDIA_UPDATE_ERROR\");\n\t}\n};\n\n/**\n * Delete media item\n *\n * Authors can delete their own media; editors+ can delete any.\n */\nexport const DELETE: APIRoute = async ({ params, locals }) => {\n\tconst { emdash, user } = locals;\n\tconst { id } = params;\n\n\t// Minimum permission gate — ownership checked below\n\tconst deleteDenied = requirePerm(user, \"media:delete_own\");\n\tif (deleteDenied) return deleteDenied;\n\n\tif (!id) {\n\t\treturn apiError(\"INVALID_REQUEST\", \"Media ID required\", 400);\n\t}\n\n\tif (!emdash?.handleMediaGet || !emdash?.handleMediaDelete) {\n\t\treturn apiError(\"NOT_CONFIGURED\", \"EmDash is not initialized\", 500);\n\t}\n\n\ttry {\n\t\t// Fetch media item for ownership check and storage key\n\t\tconst getResult = await emdash.handleMediaGet(id);\n\t\tif (!getResult.success || !getResult.data?.item) {\n\t\t\treturn apiError(\"NOT_FOUND\", \"Media item not found\", 404);\n\t\t}\n\n\t\tconst media = getResult.data.item;\n\n\t\t// Ownership check: authors can delete own, editors+ can delete any\n\t\tconst ownerDenied = requireOwnerPerm(\n\t\t\tuser,\n\t\t\tmedia.authorId,\n\t\t\t\"media:delete_own\",\n\t\t\t\"media:delete_any\",\n\t\t);\n\t\tif (ownerDenied) return ownerDenied;\n\n\t\t// Storage deletion and site-settings cache invalidation happen in\n\t\t// `EmDashRuntime.handleMediaDelete` so the MCP tool inherits them.\n\t\tconst result = await emdash.handleMediaDelete(id);\n\t\tif (!result.success) return unwrapResult(result);\n\t\tif (\n\t\t\ttypeof result.data !== \"object\" ||\n\t\t\tresult.data === null ||\n\t\t\t!(\"storageDeleted\" in result.data) ||\n\t\t\ttypeof result.data.storageDeleted !== \"boolean\"\n\t\t) {\n\t\t\treturn apiError(\"MEDIA_DELETE_ERROR\", \"Failed to delete media\", 500);\n\t\t}\n\n\t\treturn apiSuccess({ deleted: true, storageDeleted: result.data.storageDeleted });\n\t} catch (error) {\n\t\treturn handleError(error, \"Failed to delete media\", \"MEDIA_DELETE_ERROR\");\n\t}\n};\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAeA,MAAa,YAAY;;;;AAKzB,MAAa,MAAgB,OAAO,EAAE,QAAQ,SAAS,aAAa;CACnE,MAAM,EAAE,QAAQ,SAAS;CACzB,MAAM,EAAE,OAAO;CAEf,MAAM,aAAa,YAAY,MAAM,aAAa;AAClD,KAAI,WAAY,QAAO;AAEvB,KAAI,CAAC,GACJ,QAAO,SAAS,mBAAmB,qBAAqB,IAAI;AAG7D,KAAI,CAAC,QAAQ,eACZ,QAAO,SAAS,kBAAkB,6BAA6B,IAAI;CAEpE,MAAM,QAAQ,WAAW,IAAI,IAAI,QAAQ,IAAI,EAAE,cAAc;AAC7D,KAAI,aAAa,MAAM,CAAE,QAAO;CAEhC,MAAM,SAAS,MAAM,OAAO,eAAe,GAAG;AAC9C,KAAI,CAAC,OAAO,WAAW,MAAM,iBAAiB,IAAK,QAAO,aAAa,OAAO;CAE9E,MAAM,eAAe,uBAAuB,MAAM,OAAO,YAAY;CACrE,MAAM,cAAc,MAAM,0BAA0B,OAAO,IAAI,CAAC,GAAG,EAAE,EAAE,cAAc,CAAC;AACtF,KAAI,CAAC,YAAY,QAAS,QAAO,aAAa,YAAY;CAC1D,MAAM,QAAQ,YAAY,KAAK;AAC/B,KAAI,CAAC,MAAO,QAAO,SAAS,0BAA0B,8BAA8B,IAAI;AAExF,QAAO,WAAW,EAAE,MAAM;EAAE,GAAG,OAAO,KAAK;EAAM;EAAO,EAAE,CAAC;;;;;;;AAQ5D,MAAa,MAAgB,OAAO,EAAE,QAAQ,SAAS,aAAa;CACnE,MAAM,EAAE,QAAQ,SAAS;CACzB,MAAM,EAAE,OAAO;CAGf,MAAM,aAAa,YAAY,MAAM,iBAAiB;AACtD,KAAI,WAAY,QAAO;AAEvB,KAAI,CAAC,GACJ,QAAO,SAAS,mBAAmB,qBAAqB,IAAI;AAG7D,KAAI,CAAC,QAAQ,kBAAkB,CAAC,QAAQ,kBACvC,QAAO,SAAS,kBAAkB,6BAA6B,IAAI;AAGpE,KAAI;EAEH,MAAM,YAAY,MAAM,OAAO,eAAe,GAAG;AACjD,MAAI,CAAC,UAAU,WAAW,CAAC,UAAU,MAAM,KAC1C,QAAO,SAAS,aAAa,wBAAwB,IAAI;EAG1D,MAAM,QAAQ,UAAU,KAAK;EAG7B,MAAM,cAAc,iBAAiB,MAAM,MAAM,UAAU,kBAAkB,iBAAiB;AAC9F,MAAI,YAAa,QAAO;EAExB,MAAM,OAAO,MAAM,UAAU,SAAS,gBAAgB;AACtD,MAAI,aAAa,KAAK,CAAE,QAAO;AAY/B,SAAO,aAVQ,MAAM,OAAO,kBAAkB,IAAI;GACjD,KAAK,KAAK;GACV,SAAS,KAAK;GACd,OAAO,KAAK;GACZ,QAAQ,KAAK;GACb,UAAU,KAAK;GACf,QAAQ,KAAK;GACb,QAAQ,KAAK;GACb,CAAC,CAEyB;UACnB,OAAO;AACf,SAAO,YAAY,OAAO,0BAA0B,qBAAqB;;;;;;;;AAS3E,MAAa,SAAmB,OAAO,EAAE,QAAQ,aAAa;CAC7D,MAAM,EAAE,QAAQ,SAAS;CACzB,MAAM,EAAE,OAAO;CAGf,MAAM,eAAe,YAAY,MAAM,mBAAmB;AAC1D,KAAI,aAAc,QAAO;AAEzB,KAAI,CAAC,GACJ,QAAO,SAAS,mBAAmB,qBAAqB,IAAI;AAG7D,KAAI,CAAC,QAAQ,kBAAkB,CAAC,QAAQ,kBACvC,QAAO,SAAS,kBAAkB,6BAA6B,IAAI;AAGpE,KAAI;EAEH,MAAM,YAAY,MAAM,OAAO,eAAe,GAAG;AACjD,MAAI,CAAC,UAAU,WAAW,CAAC,UAAU,MAAM,KAC1C,QAAO,SAAS,aAAa,wBAAwB,IAAI;EAG1D,MAAM,QAAQ,UAAU,KAAK;EAG7B,MAAM,cAAc,iBACnB,MACA,MAAM,UACN,oBACA,mBACA;AACD,MAAI,YAAa,QAAO;EAIxB,MAAM,SAAS,MAAM,OAAO,kBAAkB,GAAG;AACjD,MAAI,CAAC,OAAO,QAAS,QAAO,aAAa,OAAO;AAChD,MACC,OAAO,OAAO,SAAS,YACvB,OAAO,SAAS,QAChB,EAAE,oBAAoB,OAAO,SAC7B,OAAO,OAAO,KAAK,mBAAmB,UAEtC,QAAO,SAAS,sBAAsB,0BAA0B,IAAI;AAGrE,SAAO,WAAW;GAAE,SAAS;GAAM,gBAAgB,OAAO,KAAK;GAAgB,CAAC;UACxE,OAAO;AACf,SAAO,YAAY,OAAO,0BAA0B,qBAAqB"}

package/dist/astro/routes/api/media/asset/_id_/_filename_.mjs

@@ -1,8 +1,10 @@
 import "../../../../../../base64-DvnNgP7e.mjs";
 import "../../../../../../types-BkUg2yHx.mjs";
-import { t as MediaRepository } from "../../../../../../media-TBlKCwo7.mjs";
-import { r as handleError, t as apiError } from "../../../../../../error-CCTCskie.mjs";
-import { r as requirePerm } from "../../../../../../authorize-BXpfMpp0.mjs";
+import { t as MediaRepository } from "../../../../../../media-CPXTbb1R.mjs";
+import "../../../../../../errors-DgE1zJGG.mjs";
+import "../../../../../../errors-BF0_LFhW.mjs";
+import { r as handleError, t as apiError } from "../../../../../../error-CfvOHP0M.mjs";
+import { i as requirePerm } from "../../../../../../authorize-seCifOMJ.mjs";
 
 //#region src/astro/routes/api/media/asset/[id]/[filename].ts
 const prerender = false;

package/dist/astro/routes/api/media/asset/_id_/_filename_.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"_filename_.mjs","names":[],"sources":["../../../../../../../src/astro/routes/api/media/asset/[id]/[filename].ts"],"sourcesContent":["import type { APIRoute } from \"astro\";\n\nimport { requirePerm } from \"#api/authorize.js\";\nimport { apiError, handleError } from \"#api/error.js\";\nimport { MediaRepository } from \"#db/repositories/media.js\";\n\nexport const prerender = false;\n\nconst SAFE_INLINE_TYPES = new Set([\n\t\"image/jpeg\",\n\t\"image/png\",\n\t\"image/gif\",\n\t\"image/webp\",\n\t\"image/avif\",\n\t\"image/x-icon\",\n\t\"video/mp4\",\n\t\"video/webm\",\n\t\"audio/mpeg\",\n\t\"audio/wav\",\n\t\"audio/ogg\",\n]);\n\nexport const GET: APIRoute = async ({ params, locals }) => {\n\tconst { id, filename } = params;\n\tconst { emdash, user } = locals;\n\tconst denied = requirePerm(user, \"media:read\");\n\tif (denied) return denied;\n\tif (!id || !filename) return apiError(\"NOT_FOUND\", \"File not found\", 404);\n\tif (!emdash?.storage) return apiError(\"NOT_CONFIGURED\", \"Storage not configured\", 500);\n\n\ttry {\n\t\tconst item = await new MediaRepository(emdash.db).findById(id);\n\t\tif (!item || item.status !== \"ready\" || item.filename !== filename) {\n\t\t\treturn apiError(\"NOT_FOUND\", \"File not found\", 404);\n\t\t}\n\t\tconst result = await emdash.storage.download(item.storageKey);\n\t\tconst headers: Record<string, string> = {\n\t\t\t\"Content-Type\": result.contentType,\n\t\t\t\"Cache-Control\": \"private, max-age=0, must-revalidate\",\n\t\t\t\"X-Content-Type-Options\": \"nosniff\",\n\t\t\t\"Content-Security-Policy\":\n\t\t\t\t\"sandbox; default-src 'none'; img-src 'self'; style-src 'unsafe-inline'\",\n\t\t\t\"Content-Disposition\": SAFE_INLINE_TYPES.has(result.contentType) ? \"inline\" : \"attachment\",\n\t\t};\n\t\tif (result.size) headers[\"Content-Length\"] = String(result.size);\n\t\treturn new Response(result.body, { status: 200, headers });\n\t} catch (error) {\n\t\treturn handleError(error, \"Failed to serve file\", \"FILE_SERVE_ERROR\");\n\t}\n};\n"],"mappings":";;;;;;;AAMA,MAAa,YAAY;AAEzB,MAAM,oBAAoB,IAAI,IAAI;CACjC;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA,CAAC;AAEF,MAAa,MAAgB,OAAO,EAAE,QAAQ,aAAa;CAC1D,MAAM,EAAE,IAAI,aAAa;CACzB,MAAM,EAAE,QAAQ,SAAS;CACzB,MAAM,SAAS,YAAY,MAAM,aAAa;AAC9C,KAAI,OAAQ,QAAO;AACnB,KAAI,CAAC,MAAM,CAAC,SAAU,QAAO,SAAS,aAAa,kBAAkB,IAAI;AACzE,KAAI,CAAC,QAAQ,QAAS,QAAO,SAAS,kBAAkB,0BAA0B,IAAI;AAEtF,KAAI;EACH,MAAM,OAAO,MAAM,IAAI,gBAAgB,OAAO,GAAG,CAAC,SAAS,GAAG;AAC9D,MAAI,CAAC,QAAQ,KAAK,WAAW,WAAW,KAAK,aAAa,SACzD,QAAO,SAAS,aAAa,kBAAkB,IAAI;EAEpD,MAAM,SAAS,MAAM,OAAO,QAAQ,SAAS,KAAK,WAAW;EAC7D,MAAM,UAAkC;GACvC,gBAAgB,OAAO;GACvB,iBAAiB;GACjB,0BAA0B;GAC1B,2BACC;GACD,uBAAuB,kBAAkB,IAAI,OAAO,YAAY,GAAG,WAAW;GAC9E;AACD,MAAI,OAAO,KAAM,SAAQ,oBAAoB,OAAO,OAAO,KAAK;AAChE,SAAO,IAAI,SAAS,OAAO,MAAM;GAAE,QAAQ;GAAK;GAAS,CAAC;UAClD,OAAO;AACf,SAAO,YAAY,OAAO,wBAAwB,mBAAmB"}
+{"version":3,"file":"_filename_.mjs","names":[],"sources":["../../../../../../../src/astro/routes/api/media/asset/[id]/[filename].ts"],"sourcesContent":["import type { APIRoute } from \"astro\";\n\nimport { requirePerm } from \"#api/authorize.js\";\nimport { apiError, handleError } from \"#api/error.js\";\nimport { MediaRepository } from \"#db/repositories/media.js\";\n\nexport const prerender = false;\n\nconst SAFE_INLINE_TYPES = new Set([\n\t\"image/jpeg\",\n\t\"image/png\",\n\t\"image/gif\",\n\t\"image/webp\",\n\t\"image/avif\",\n\t\"image/x-icon\",\n\t\"video/mp4\",\n\t\"video/webm\",\n\t\"audio/mpeg\",\n\t\"audio/wav\",\n\t\"audio/ogg\",\n]);\n\nexport const GET: APIRoute = async ({ params, locals }) => {\n\tconst { id, filename } = params;\n\tconst { emdash, user } = locals;\n\tconst denied = requirePerm(user, \"media:read\");\n\tif (denied) return denied;\n\tif (!id || !filename) return apiError(\"NOT_FOUND\", \"File not found\", 404);\n\tif (!emdash?.storage) return apiError(\"NOT_CONFIGURED\", \"Storage not configured\", 500);\n\n\ttry {\n\t\tconst item = await new MediaRepository(emdash.db).findById(id);\n\t\tif (!item || item.status !== \"ready\" || item.filename !== filename) {\n\t\t\treturn apiError(\"NOT_FOUND\", \"File not found\", 404);\n\t\t}\n\t\tconst result = await emdash.storage.download(item.storageKey);\n\t\tconst headers: Record<string, string> = {\n\t\t\t\"Content-Type\": result.contentType,\n\t\t\t\"Cache-Control\": \"private, max-age=0, must-revalidate\",\n\t\t\t\"X-Content-Type-Options\": \"nosniff\",\n\t\t\t\"Content-Security-Policy\":\n\t\t\t\t\"sandbox; default-src 'none'; img-src 'self'; style-src 'unsafe-inline'\",\n\t\t\t\"Content-Disposition\": SAFE_INLINE_TYPES.has(result.contentType) ? \"inline\" : \"attachment\",\n\t\t};\n\t\tif (result.size) headers[\"Content-Length\"] = String(result.size);\n\t\treturn new Response(result.body, { status: 200, headers });\n\t} catch (error) {\n\t\treturn handleError(error, \"Failed to serve file\", \"FILE_SERVE_ERROR\");\n\t}\n};\n"],"mappings":";;;;;;;;;AAMA,MAAa,YAAY;AAEzB,MAAM,oBAAoB,IAAI,IAAI;CACjC;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA,CAAC;AAEF,MAAa,MAAgB,OAAO,EAAE,QAAQ,aAAa;CAC1D,MAAM,EAAE,IAAI,aAAa;CACzB,MAAM,EAAE,QAAQ,SAAS;CACzB,MAAM,SAAS,YAAY,MAAM,aAAa;AAC9C,KAAI,OAAQ,QAAO;AACnB,KAAI,CAAC,MAAM,CAAC,SAAU,QAAO,SAAS,aAAa,kBAAkB,IAAI;AACzE,KAAI,CAAC,QAAQ,QAAS,QAAO,SAAS,kBAAkB,0BAA0B,IAAI;AAEtF,KAAI;EACH,MAAM,OAAO,MAAM,IAAI,gBAAgB,OAAO,GAAG,CAAC,SAAS,GAAG;AAC9D,MAAI,CAAC,QAAQ,KAAK,WAAW,WAAW,KAAK,aAAa,SACzD,QAAO,SAAS,aAAa,kBAAkB,IAAI;EAEpD,MAAM,SAAS,MAAM,OAAO,QAAQ,SAAS,KAAK,WAAW;EAC7D,MAAM,UAAkC;GACvC,gBAAgB,OAAO;GACvB,iBAAiB;GACjB,0BAA0B;GAC1B,2BACC;GACD,uBAAuB,kBAAkB,IAAI,OAAO,YAAY,GAAG,WAAW;GAC9E;AACD,MAAI,OAAO,KAAM,SAAQ,oBAAoB,OAAO,OAAO,KAAK;AAChE,SAAO,IAAI,SAAS,OAAO,MAAM;GAAE,QAAQ;GAAK;GAAS,CAAC;UAClD,OAAO;AACf,SAAO,YAAY,OAAO,wBAAwB,mBAAmB"}

package/dist/astro/routes/api/media/file/_...key_.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"_...key_.d.mts","names":[],"sources":["../../../../../../src/astro/routes/api/media/file/[...key].ts"],"mappings":";;;cAWa,SAAA;AAAA,cAoBA,GAAA,EAAK,QAAA"}
+{"version":3,"file":"_...key_.d.mts","names":[],"sources":["../../../../../../src/astro/routes/api/media/file/[...key].ts"],"mappings":";;;cAaa,SAAA;AAAA,cA4CA,GAAA,EAAK,QAAA"}

package/dist/astro/routes/api/media/file/_...key_.mjs

@@ -1,10 +1,39 @@
 import "../../../../../base64-DvnNgP7e.mjs";
 import "../../../../../types-BkUg2yHx.mjs";
-import { r as handleError, t as apiError } from "../../../../../error-CCTCskie.mjs";
+import "../../../../../errors-DgE1zJGG.mjs";
+import "../../../../../canonical-YhEQezjg.mjs";
+import "../../../../../settings-DYidIB26.mjs";
+import "../../../../../errors-BF0_LFhW.mjs";
+import { r as handleError, t as apiError } from "../../../../../error-CfvOHP0M.mjs";
 import { IMMUTABLE_IMAGE_CACHE, MUTABLE_MEDIA_CACHE_CONTROL } from "../../../../../media/image-endpoint.mjs";
+import "../../../../../kinds-CRu_T5T5.mjs";
+import "../../../../../paths-JxokKIbr.mjs";
+import { t as isRefusedStorageKey } from "../../../../../keys-yxLm5l35.mjs";
 
 //#region src/astro/routes/api/media/file/[...key].ts
 const prerender = false;
+const MAX_KEY_DECODES = 3;
+/**
+* Whether a key is, or percent-decodes to, a key this route must refuse.
+* Every decoding layer is checked because storage backends differ in whether
+* they decode keys; a key that is still encoded after the last layer, or
+* does not decode, is refused.
+*/
+function isPrivateMediaKey(key) {
+	let candidate = key;
+	for (let layer = 0; layer <= MAX_KEY_DECODES; layer++) {
+		if (isRefusedStorageKey(candidate)) return true;
+		let decoded;
+		try {
+			decoded = decodeURIComponent(candidate);
+		} catch {
+			return true;
+		}
+		if (decoded === candidate) return false;
+		candidate = decoded;
+	}
+	return true;
+}
 /**
 * Content types that are safe to display inline (simple raster/vector images, video, audio).
 * Everything else gets Content-Disposition: attachment to prevent script execution.
@@ -26,7 +55,7 @@ const GET = async ({ params, locals }) => {
 	const { key } = params;
 	const { emdash } = locals;
 	if (!key) return apiError("NOT_FOUND", "File not found", 404);
-	if (key.startsWith("backups/")) return apiError("NOT_FOUND", "File not found", 404);
+	if (isPrivateMediaKey(key)) return apiError("NOT_FOUND", "File not found", 404);
 	if (!emdash?.storage) return apiError("NOT_CONFIGURED", "Storage not configured", 500);
 	try {
 		const result = await emdash.storage.download(key);