emdash 0.40.0 → 0.40.1

package/dist/runtime.d.mts

@@ -2,11 +2,11 @@ import "./parse-CVgO-Qai.mjs";
 import "./types-B7Lmsh1E.mjs";
 import "./types-Cr-Kg-3D.mjs";
 import "./options-SQCHQCPH.mjs";
-import "./entry-lock-DVhCt49A.mjs";
+import "./entry-lock-Cf5OoIgN.mjs";
 import { f as MediaProvider } from "./placeholder-MSEd8gty.mjs";
-import { Cn as CollectionFilter, On as emdashLoader, Tn as EntryFilter, kn as getDb, wn as EntryData } from "./config-5ii2haYu.mjs";
+import { Cn as CollectionFilter, On as emdashLoader, Tn as EntryFilter, kn as getDb, wn as EntryData } from "./config-BjEm_3xL.mjs";
 import "./runner-D5_LzKXI.mjs";
-import "./storage-query-Bdv7A62k.mjs";
+import "./storage-query-FXJH5pI8.mjs";
 import "./index-D-hdtLe8.mjs";
 import "./types-Cd-O03VG.mjs";
 import "./hreflang-D5uNnsGJ.mjs";

package/dist/seed/index.mjs

@@ -9,10 +9,10 @@ import "../content-DFaIEDj9.mjs";
 import "../object-cache-CqWNY5uP.mjs";
 import "../slugify-T5GHH42D.mjs";
 import "../types-BkUg2yHx.mjs";
-import "../media-Qp5S3eH3.mjs";
+import "../media-CPXTbb1R.mjs";
 import "../taxonomy-C3Fu1YeH.mjs";
 import "../resolve-2WbQsCvT.mjs";
-import "../redirect-iJf5fltD.mjs";
+import "../redirect-B29UjdUn.mjs";
 import "../request-cache-DzLYKm_x.mjs";
 import "../byline-registry-gnKscbQX.mjs";
 import "../field-defs-cache-HIgBbqZZ.mjs";
@@ -31,9 +31,9 @@ import "../digest-BarSh-pN.mjs";
 import "../hash-SDAW6zC-.mjs";
 import "../zod-generator-D6uE4WiS.mjs";
 import "../block-values-C_VIPr5t.mjs";
-import "../settings-CgjRWGW9.mjs";
+import "../settings-B4vDl1fK.mjs";
 import "../ssrf-CJUnJymJ.mjs";
-import { t as applySeed } from "../apply-CoT603H3.mjs";
+import { t as applySeed } from "../apply-npY1TAhG.mjs";
 import "../ssrf-DpBH7aOt.mjs";
 import { n as validateSeed } from "../validate-CHosPEhs.mjs";
 import { t as defaultSeed } from "../default-DQ6vsviu.mjs";

package/dist/seo/index.mjs

@@ -9,7 +9,7 @@ import "../content-DFaIEDj9.mjs";
 import "../object-cache-CqWNY5uP.mjs";
 import "../slugify-T5GHH42D.mjs";
 import "../types-BkUg2yHx.mjs";
-import "../media-Qp5S3eH3.mjs";
+import "../media-CPXTbb1R.mjs";
 import "../resolve-2WbQsCvT.mjs";
 import "../request-cache-DzLYKm_x.mjs";
 import "../fts-manager-S-K0laoS.mjs";
@@ -25,9 +25,9 @@ import "../digest-BarSh-pN.mjs";
 import "../hash-SDAW6zC-.mjs";
 import "../zod-generator-D6uE4WiS.mjs";
 import "../query-C4IH0uhR.mjs";
-import "../settings-CgjRWGW9.mjs";
+import "../settings-B4vDl1fK.mjs";
 import { n as resolveSeoCanonicalUrl, t as buildSeoImageUrl } from "../media-url-jArBpzIG.mjs";
-import { n as getHreflangAlternatesWithDb, t as getHreflangAlternates } from "../hreflang-DMFBL2eb.mjs";
+import { n as getHreflangAlternatesWithDb, t as getHreflangAlternates } from "../hreflang-CbVI4paR.mjs";
 
 //#region src/seo/index.ts
 const TRAILING_SLASH_RE = /\/$/;

package/dist/{settings-CgjRWGW9.mjs → settings-B4vDl1fK.mjs}

@@ -5,7 +5,7 @@ import { n as invalidateSingleFlightCache, r as singleFlightCached, t as createS
 import { i as resolvePluginEncryptionKeys } from "./secrets-CIi0nFiR.mjs";
 import { f as invalidateObjectCache, n as cachedQuery } from "./object-cache-CqWNY5uP.mjs";
 import { t as withTransaction } from "./transaction-BcJO4Tmc.mjs";
-import { t as MediaRepository } from "./media-Qp5S3eH3.mjs";
+import { t as MediaRepository } from "./media-CPXTbb1R.mjs";
 import { n as peekRequestCache, r as requestCached } from "./request-cache-DzLYKm_x.mjs";
 import { n as siteSettingsTag } from "./chrome-tags-DApCQSIk.mjs";
 import { s as getDb } from "./loader-BzqeR1ZN.mjs";
@@ -436,4 +436,4 @@ async function getPluginSettingsWithDb(pluginId, db) {
 
 //#endregion
 export { getSiteSettingsWithCacheHint as a, setSiteSettings as c, decodePluginSettingValue as d, encodePluginSettingValue as f, getSiteSettings as i, PluginSettingEncryptionError as l, isEncryptedPluginSetting as m, getPluginSettings as n, getSiteSettingsWithDb as o, encryptPluginSetting as p, getSiteSetting as r, invalidateSiteSettingsCache as s, getPluginSetting as t, createSettingsAccess as u };
-//# sourceMappingURL=settings-CgjRWGW9.mjs.map
+//# sourceMappingURL=settings-B4vDl1fK.mjs.map

package/dist/{settings-CgjRWGW9.mjs.map → settings-B4vDl1fK.mjs.map}

@@ -1 +1 @@
-{"version":3,"file":"settings-CgjRWGW9.mjs","names":[],"sources":["../src/plugins/settings.ts","../src/settings/index.ts"],"sourcesContent":["import { resolvePluginEncryptionKeys, type ParsedEncryptionKey } from \"../config/secrets.js\";\nimport type { OptionsRepository } from \"../database/repositories/options.js\";\nimport { decodeBase64url, encodeBase64url } from \"../utils/base64.js\";\nimport { assertStorageKey } from \"./conditional-storage.js\";\nexport { createPluginSecretRedactor } from \"./secret-redactor.js\";\nexport type { PluginSecretRedactor } from \"./secret-redactor.js\";\nimport type {\n\tConditionalDeleteResult,\n\tConditionalWriteResult,\n\tSettingField,\n\tSettingsAccess,\n\tVersionedValue,\n} from \"./types.js\";\n\nconst ENVELOPE_VERSION = 1;\nconst ENVELOPE_MARKER = \"plugin-setting\";\nconst IV_BYTES = 12;\nconst KEY_ID_PATTERN = /^[0-9a-f]{8}$/;\nconst BASE64URL_PATTERN = /^[A-Za-z0-9_-]+$/;\nconst textEncoder = new TextEncoder();\nconst textDecoder = new TextDecoder(\"utf-8\", { fatal: true });\n\nexport interface EncryptedPluginSetting {\n\t$emdash: \"plugin-setting\";\n\tv: 1;\n\tkid: string;\n\tiv: string;\n\tciphertext: string;\n}\n\nexport class PluginSettingEncryptionError extends Error {\n\toverride readonly name = \"PluginSettingEncryptionError\";\n\treadonly code:\n\t\t| \"PLUGIN_SETTING_ENCRYPTION_KEY_MISSING\"\n\t\t| \"PLUGIN_SETTING_ENCRYPTION_KEY_UNKNOWN\"\n\t\t| \"PLUGIN_SETTING_ENCRYPTION_FAILED\"\n\t\t| \"PLUGIN_SETTING_DECRYPTION_FAILED\";\n\n\tconstructor(code: PluginSettingEncryptionError[\"code\"], message: string) {\n\t\tsuper(message);\n\t\tthis.code = code;\n\t}\n}\n\nexport function isEncryptedPluginSetting(value: unknown): value is EncryptedPluginSetting {\n\tif (typeof value !== \"object\" || value === null || Array.isArray(value)) return false;\n\treturn (\n\t\tObject.keys(value).length === 5 &&\n\t\t\"$emdash\" in value &&\n\t\tvalue.$emdash === ENVELOPE_MARKER &&\n\t\t\"v\" in value &&\n\t\tvalue.v === ENVELOPE_VERSION &&\n\t\t\"kid\" in value &&\n\t\ttypeof value.kid === \"string\" &&\n\t\tKEY_ID_PATTERN.test(value.kid) &&\n\t\t\"iv\" in value &&\n\t\ttypeof value.iv === \"string\" &&\n\t\tBASE64URL_PATTERN.test(value.iv) &&\n\t\t\"ciphertext\" in value &&\n\t\ttypeof value.ciphertext === \"string\" &&\n\t\tBASE64URL_PATTERN.test(value.ciphertext)\n\t);\n}\n\nfunction additionalData(pluginId: string, key: string): Uint8Array {\n\treturn textEncoder.encode(\n\t\tJSON.stringify([\"emdash-plugin-setting\", ENVELOPE_VERSION, pluginId, key]),\n\t);\n}\n\nfunction exactBuffer(bytes: Uint8Array): ArrayBuffer {\n\treturn bytes.slice().buffer;\n}\n\nasync function importEncryptionKey(key: ParsedEncryptionKey, usage: KeyUsage): Promise<CryptoKey> {\n\treturn crypto.subtle.importKey(\"raw\", exactBuffer(key.key), \"AES-GCM\", false, [usage]);\n}\n\nasync function keysOrDefault(\n\tkeys: ParsedEncryptionKey[] | null | undefined,\n): Promise<ParsedEncryptionKey[] | null> {\n\treturn keys === undefined ? resolvePluginEncryptionKeys() : keys;\n}\n\nexport async function encryptPluginSetting(\n\tpluginId: string,\n\tkey: string,\n\tvalue: string,\n\tkeys?: ParsedEncryptionKey[] | null,\n): Promise<EncryptedPluginSetting> {\n\tconst resolved = await keysOrDefault(keys);\n\tconst primary = resolved?.[0];\n\tif (!primary) {\n\t\tthrow new PluginSettingEncryptionError(\n\t\t\t\"PLUGIN_SETTING_ENCRYPTION_KEY_MISSING\",\n\t\t\t\"Plugin secret settings require EMDASH_ENCRYPTION_KEY\",\n\t\t);\n\t}\n\n\ttry {\n\t\tconst iv = crypto.getRandomValues(new Uint8Array(IV_BYTES));\n\t\tconst cryptoKey = await importEncryptionKey(primary, \"encrypt\");\n\t\tconst ciphertext = await crypto.subtle.encrypt(\n\t\t\t{\n\t\t\t\tname: \"AES-GCM\",\n\t\t\t\tiv: exactBuffer(iv),\n\t\t\t\tadditionalData: exactBuffer(additionalData(pluginId, key)),\n\t\t\t},\n\t\t\tcryptoKey,\n\t\t\texactBuffer(textEncoder.encode(value)),\n\t\t);\n\t\treturn {\n\t\t\t$emdash: ENVELOPE_MARKER,\n\t\t\tv: ENVELOPE_VERSION,\n\t\t\tkid: primary.kid,\n\t\t\tiv: encodeBase64url(iv),\n\t\t\tciphertext: encodeBase64url(new Uint8Array(ciphertext)),\n\t\t};\n\t} catch (error) {\n\t\tif (error instanceof PluginSettingEncryptionError) throw error;\n\t\tthrow new PluginSettingEncryptionError(\n\t\t\t\"PLUGIN_SETTING_ENCRYPTION_FAILED\",\n\t\t\t\"Plugin secret setting could not be encrypted\",\n\t\t);\n\t}\n}\n\nexport async function decryptPluginSetting(\n\tpluginId: string,\n\tkey: string,\n\tenvelope: EncryptedPluginSetting,\n\tkeys?: ParsedEncryptionKey[] | null,\n): Promise<string> {\n\tconst resolved = await keysOrDefault(keys);\n\tif (!resolved?.length) {\n\t\tthrow new PluginSettingEncryptionError(\n\t\t\t\"PLUGIN_SETTING_ENCRYPTION_KEY_MISSING\",\n\t\t\t\"Plugin secret setting cannot be decrypted because its encryption key is unavailable\",\n\t\t);\n\t}\n\tconst matched = resolved.find((candidate) => candidate.kid === envelope.kid);\n\tif (!matched) {\n\t\tthrow new PluginSettingEncryptionError(\n\t\t\t\"PLUGIN_SETTING_ENCRYPTION_KEY_UNKNOWN\",\n\t\t\t\"Plugin secret setting was encrypted with an unavailable key\",\n\t\t);\n\t}\n\n\ttry {\n\t\tconst iv = decodeBase64url(envelope.iv);\n\t\tconst ciphertext = decodeBase64url(envelope.ciphertext);\n\t\tif (iv.byteLength !== IV_BYTES || ciphertext.byteLength < 16)\n\t\t\tthrow new Error(\"invalid envelope\");\n\t\tconst cryptoKey = await importEncryptionKey(matched, \"decrypt\");\n\t\tconst plaintext = await crypto.subtle.decrypt(\n\t\t\t{\n\t\t\t\tname: \"AES-GCM\",\n\t\t\t\tiv: exactBuffer(iv),\n\t\t\t\tadditionalData: exactBuffer(additionalData(pluginId, key)),\n\t\t\t},\n\t\t\tcryptoKey,\n\t\t\texactBuffer(ciphertext),\n\t\t);\n\t\treturn textDecoder.decode(plaintext);\n\t} catch {\n\t\tthrow new PluginSettingEncryptionError(\n\t\t\t\"PLUGIN_SETTING_DECRYPTION_FAILED\",\n\t\t\t\"Plugin secret setting could not be decrypted\",\n\t\t);\n\t}\n}\n\nfunction isSecretField(schema: Record<string, SettingField>, key: string): boolean {\n\treturn schema[key]?.type === \"secret\";\n}\n\nexport async function encodePluginSettingValue(\n\tpluginId: string,\n\tkey: string,\n\tvalue: unknown,\n\tschema: Record<string, SettingField>,\n\tkeys?: ParsedEncryptionKey[] | null,\n\tonSecret?: (key: string, value: string) => void,\n): Promise<unknown> {\n\tif (!isSecretField(schema, key)) return value;\n\tif (typeof value !== \"string\") {\n\t\tthrow new PluginSettingEncryptionError(\n\t\t\t\"PLUGIN_SETTING_ENCRYPTION_FAILED\",\n\t\t\t\"Plugin secret settings must be strings\",\n\t\t);\n\t}\n\tonSecret?.(key, value);\n\treturn encryptPluginSetting(pluginId, key, value, keys);\n}\n\nexport async function decodePluginSettingValue<T = unknown>(\n\tpluginId: string,\n\tkey: string,\n\tvalue: unknown,\n\tschema: Record<string, SettingField>,\n\tkeys?: ParsedEncryptionKey[] | null,\n\tonSecret?: (key: string, value: string) => void,\n): Promise<T> {\n\tif (!isSecretField(schema, key)) {\n\t\tif (isEncryptedPluginSetting(value)) {\n\t\t\tthrow new PluginSettingEncryptionError(\n\t\t\t\t\"PLUGIN_SETTING_DECRYPTION_FAILED\",\n\t\t\t\t\"Encrypted plugin setting is not declared as a secret\",\n\t\t\t);\n\t\t}\n\t\t// eslint-disable-next-line typescript/no-unsafe-type-assertion -- caller supplies the expected non-secret setting type\n\t\treturn value as T;\n\t}\n\tif (typeof value === \"string\") {\n\t\tonSecret?.(key, value);\n\t\t// eslint-disable-next-line typescript/no-unsafe-type-assertion -- secret schema guarantees a string and caller supplies its compatible type\n\t\treturn value as T;\n\t}\n\tif (!isEncryptedPluginSetting(value)) {\n\t\tthrow new PluginSettingEncryptionError(\n\t\t\t\"PLUGIN_SETTING_DECRYPTION_FAILED\",\n\t\t\t\"Plugin secret setting has an invalid encrypted envelope\",\n\t\t);\n\t}\n\tconst decrypted = await decryptPluginSetting(pluginId, key, value, keys);\n\tonSecret?.(key, decrypted);\n\t// eslint-disable-next-line typescript/no-unsafe-type-assertion -- secret schema guarantees a string and caller supplies its compatible type\n\treturn decrypted as T;\n}\n\nexport function createSettingsAccess(\n\toptionsRepo: OptionsRepository,\n\tpluginId: string,\n\tschema: Record<string, SettingField> = {},\n\tkeys?: ParsedEncryptionKey[] | null,\n\tonSecret?: (key: string, value: string) => void,\n): SettingsAccess {\n\tconst prefix = `plugin:${pluginId}:settings:`;\n\tconst optionKey = (key: string) => {\n\t\tassertStorageKey(key);\n\t\treturn `${prefix}${key}`;\n\t};\n\n\treturn {\n\t\tasync get<T>(key: string): Promise<T | null> {\n\t\t\tconst value = await optionsRepo.get(optionKey(key));\n\t\t\treturn value === null\n\t\t\t\t? null\n\t\t\t\t: decodePluginSettingValue<T>(pluginId, key, value, schema, keys, onSecret);\n\t\t},\n\t\tasync getVersioned<T>(key: string): Promise<VersionedValue<T> | null> {\n\t\t\tconst value = await optionsRepo.getVersioned(optionKey(key));\n\t\t\tif (!value) return null;\n\t\t\treturn {\n\t\t\t\tvalue: await decodePluginSettingValue<T>(\n\t\t\t\t\tpluginId,\n\t\t\t\t\tkey,\n\t\t\t\t\tvalue.value,\n\t\t\t\t\tschema,\n\t\t\t\t\tkeys,\n\t\t\t\t\tonSecret,\n\t\t\t\t),\n\t\t\t\trevision: value.revision,\n\t\t\t};\n\t\t},\n\t\tasync compareAndSet(\n\t\t\tkey: string,\n\t\t\texpectedRevision: string | null,\n\t\t\tvalue: unknown,\n\t\t): Promise<ConditionalWriteResult> {\n\t\t\treturn optionsRepo.compareAndSet(\n\t\t\t\toptionKey(key),\n\t\t\t\texpectedRevision,\n\t\t\t\tawait encodePluginSettingValue(pluginId, key, value, schema, keys, onSecret),\n\t\t\t);\n\t\t},\n\t\tcompareAndDelete(key: string, expectedRevision: string): Promise<ConditionalDeleteResult> {\n\t\t\treturn optionsRepo.compareAndDelete(optionKey(key), expectedRevision);\n\t\t},\n\t\tasync set(key: string, value: unknown): Promise<void> {\n\t\t\tawait optionsRepo.set(\n\t\t\t\toptionKey(key),\n\t\t\t\tawait encodePluginSettingValue(pluginId, key, value, schema, keys, onSecret),\n\t\t\t);\n\t\t},\n\t\tdelete(key: string): Promise<boolean> {\n\t\t\treturn optionsRepo.delete(optionKey(key));\n\t\t},\n\t\tasync list(keyPrefix = \"\"): Promise<Array<{ key: string; value: unknown }>> {\n\t\t\tassertStorageKey(keyPrefix || \"_\");\n\t\t\tconst values = await optionsRepo.getByPrefix(`${prefix}${keyPrefix}`);\n\t\t\tconst result: Array<{ key: string; value: unknown }> = [];\n\t\t\tfor (const [fullKey, value] of values) {\n\t\t\t\tconst key = fullKey.slice(prefix.length);\n\t\t\t\tresult.push({\n\t\t\t\t\tkey,\n\t\t\t\t\tvalue: await decodePluginSettingValue(pluginId, key, value, schema, keys, onSecret),\n\t\t\t\t});\n\t\t\t}\n\t\t\treturn result;\n\t\t},\n\t};\n}\n","/**\n * Site Settings API\n *\n * Functions for getting and setting global site configuration.\n * Settings are stored in the options table with 'site:' prefix.\n */\n\nimport type { Kysely } from \"kysely\";\n\nimport { after } from \"../after.js\";\nimport { siteSettingsTag } from \"../cache/chrome-tags.js\";\nimport { resolvePluginEncryptionKeys } from \"../config/secrets.js\";\nimport { MediaRepository } from \"../database/repositories/media.js\";\nimport { OptionsRepository } from \"../database/repositories/options.js\";\nimport { withTransaction } from \"../database/transaction.js\";\nimport type { Database } from \"../database/types.js\";\nimport { getDb } from \"../loader.js\";\nimport { cachedQuery, invalidateObjectCache } from \"../object-cache/index.js\";\nimport {\n\tPluginSettingEncryptionError,\n\tdecryptPluginSetting,\n\tisEncryptedPluginSetting,\n} from \"../plugins/settings.js\";\nimport type { CacheHint } from \"../query.js\";\nimport { peekRequestCache, requestCached } from \"../request-cache.js\";\n\n/** Object-cache namespace for site settings. */\nconst SETTINGS_CACHE_NAMESPACE = \"settings\";\nimport type { Storage } from \"../storage/types.js\";\nimport {\n\tcreateSingleFlightCache,\n\ttype SingleFlightCache,\n\tinvalidateSingleFlightCache,\n\tsingleFlightCached,\n} from \"../utils/single-flight-cache.js\";\nimport type {\n\tMediaReference,\n\tSeoSettings,\n\tSiteSettings,\n\tSiteSettingsUpdate,\n\tSiteSettingKey,\n} from \"./types.js\";\n\n/** Prefix for site settings in the options table */\nconst SETTINGS_PREFIX = \"site:\";\n\nfunction isPluginSettingEnvelopeRecord(value: unknown): value is Record<string, unknown> {\n\treturn (\n\t\ttypeof value === \"object\" &&\n\t\tvalue !== null &&\n\t\t!Array.isArray(value) &&\n\t\t\"$emdash\" in value &&\n\t\tvalue.$emdash === \"plugin-setting\"\n\t);\n}\n\nasync function decodePersistedPluginSetting(\n\tpluginId: string,\n\tkey: string,\n\tvalue: unknown,\n\tencryptionKeys?: Awaited<ReturnType<typeof resolvePluginEncryptionKeys>>,\n): Promise<unknown> {\n\tif (isEncryptedPluginSetting(value)) {\n\t\treturn decryptPluginSetting(pluginId, key, value, encryptionKeys);\n\t}\n\tif (isPluginSettingEnvelopeRecord(value)) {\n\t\tthrow new PluginSettingEncryptionError(\n\t\t\t\"PLUGIN_SETTING_DECRYPTION_FAILED\",\n\t\t\t\"Plugin secret setting has an invalid encrypted envelope\",\n\t\t);\n\t}\n\treturn value;\n}\n\n/**\n * Worker-isolate cache for the resolved `site:*` settings.\n *\n * Site settings (title, logo, SEO defaults) change rarely but are read on\n * every public request. Caching across the isolate's lifetime drops the\n * `options WHERE name LIKE 'site:%'` prefix scan from once-per-request to\n * once-per-isolate. Cross-isolate staleness is bounded by isolate lifetime\n * (workerd typically recycles within minutes); acceptable for chrome.\n *\n * Backed by single-flight-cache.ts: concurrent cold reads coalesce onto one\n * query via a reclaimable single-flight lock and the resolved *value* is\n * cached — never a shared in-flight promise, so a cancelled request can't\n * poison the isolate (see that file's header). Stored on globalThis with a\n * Symbol.for key so Vite SSR chunk duplication doesn't produce two\n * independent caches (same pattern as request-context.ts).\n */\nconst SITE_SETTINGS_CACHE_KEY = Symbol.for(\"emdash:site-settings\");\nconst g = globalThis as Record<symbol, unknown>;\nconst settingsCache: SingleFlightCache<Partial<SiteSettings>> =\n\t// eslint-disable-next-line typescript/no-unsafe-type-assertion -- globalThis singleton pattern (see request-context.ts)\n\t(g[SITE_SETTINGS_CACHE_KEY] as SingleFlightCache<Partial<SiteSettings>> | undefined) ??\n\t(() => {\n\t\tconst c = createSingleFlightCache<Partial<SiteSettings>>();\n\t\tg[SITE_SETTINGS_CACHE_KEY] = c;\n\t\treturn c;\n\t})();\n\n/**\n * Bump the isolate-wide site-settings cache version, forcing the next\n * `getSiteSettings()` to re-query the database.\n *\n * Called from every `site:*` write path. Other isolates still serve their\n * own cached copy until they expire — staleness bounded by isolate lifetime.\n */\nexport function invalidateSiteSettingsCache(): void {\n\tinvalidateSingleFlightCache(settingsCache);\n\t// Cross-isolate invalidation for the optional distributed object cache.\n\tinvalidateObjectCache(SETTINGS_CACHE_NAMESPACE);\n}\n\n/**\n * Type guard for MediaReference values\n */\nfunction isMediaReference(value: unknown): value is MediaReference {\n\treturn typeof value === \"object\" && value !== null && \"mediaId\" in value;\n}\n\n/**\n * Resolve a media reference to include the full URL plus content metadata.\n *\n * Pulls `mimeType` and intrinsic dimensions from the media row so callers\n * can emit correct head tags (e.g. `<link rel=\"icon\" type=\"image/svg+xml\">`,\n * which Chromium requires when the URL has no `.svg` extension) without\n * a second round-trip to the media table.\n */\nasync function resolveMediaReference(\n\tmediaRef: MediaReference | undefined,\n\tdb: Kysely<Database>,\n\t_storage: Storage | null,\n): Promise<MediaReference | undefined> {\n\tif (!mediaRef?.mediaId) {\n\t\treturn mediaRef;\n\t}\n\n\ttry {\n\t\tconst mediaRepo = new MediaRepository(db);\n\t\tconst media = await mediaRepo.findById(mediaRef.mediaId);\n\n\t\tif (media) {\n\t\t\t// Construct URL using the same pattern as API handlers\n\t\t\treturn {\n\t\t\t\t...mediaRef,\n\t\t\t\turl: `/_emdash/api/media/file/${media.storageKey}`,\n\t\t\t\tcontentType: media.mimeType,\n\t\t\t\t...(media.width !== null ? { width: media.width } : {}),\n\t\t\t\t...(media.height !== null ? { height: media.height } : {}),\n\t\t\t};\n\t\t}\n\t} catch {\n\t\t// If media not found or error, return the reference as-is\n\t}\n\n\treturn mediaRef;\n}\n\n/**\n * Get a single site setting by key\n *\n * Returns `undefined` if the setting has not been configured.\n * For media settings (logo, favicon), the URL is resolved automatically.\n *\n * @param key - The setting key (e.g., \"title\", \"logo\", \"social\")\n * @returns The setting value, or undefined if not set\n *\n * @example\n * ```ts\n * import { getSiteSetting } from \"emdash\";\n *\n * const title = await getSiteSetting(\"title\");\n * const logo = await getSiteSetting(\"logo\");\n * console.log(logo?.url); // Resolved URL\n * ```\n */\nexport async function getSiteSetting<K extends SiteSettingKey>(\n\tkey: K,\n): Promise<SiteSettings[K] | undefined> {\n\t// If `getSiteSettings()` has already been called in this request,\n\t// read from that (request-cached) batch rather than firing a second\n\t// options-table query. Common layout: a Base template pulls the\n\t// whole settings object up-front, then `EmDashHead` or a plugin\n\t// asks for one key — no reason the singular call should round-trip\n\t// again.\n\tconst primed = peekRequestCache<Partial<SiteSettings>>(\"siteSettings\");\n\tif (primed) {\n\t\tconst settings = await primed;\n\t\treturn settings[key];\n\t}\n\n\t// Otherwise cache per-key. Templates that pull several settings\n\t// independently still share the in-flight query for each one.\n\treturn requestCached(`siteSetting:${key}`, async () => {\n\t\tconst db = await getDb();\n\t\treturn getSiteSettingWithDb(key, db);\n\t});\n}\n\n/**\n * Get a single site setting by key (with explicit db)\n *\n * @internal Use `getSiteSetting()` in templates. This variant is for admin routes\n * that already have a database handle.\n */\nexport async function getSiteSettingWithDb<K extends SiteSettingKey>(\n\tkey: K,\n\tdb: Kysely<Database>,\n\tstorage: Storage | null = null,\n): Promise<SiteSettings[K] | undefined> {\n\tconst options = new OptionsRepository(db);\n\tconst value = await options.get<SiteSettings[K]>(`${SETTINGS_PREFIX}${key}`);\n\n\tif (!value) {\n\t\treturn undefined;\n\t}\n\n\t// Resolve media references if needed.\n\t// TS cannot narrow generic K from key equality checks — this is a known limitation.\n\t// We use the non-generic getSiteSettingsWithDb for media resolution instead.\n\tif ((key === \"logo\" || key === \"favicon\") && isMediaReference(value)) {\n\t\tconst resolved = await resolveMediaReference(value, db, storage);\n\t\t// eslint-disable-next-line typescript/no-unsafe-type-assertion -- TS can't narrow generic K from key equality; resolved type is correct\n\t\treturn resolved as SiteSettings[K] | undefined;\n\t}\n\n\tif (key === \"seo\" && value && typeof value === \"object\") {\n\t\t// eslint-disable-next-line typescript/no-unsafe-type-assertion -- TS can't narrow generic K from key equality\n\t\tconst seo = value as SeoSettings;\n\t\tif (seo.defaultOgImage) {\n\t\t\tconst resolved = {\n\t\t\t\t...seo,\n\t\t\t\tdefaultOgImage: await resolveMediaReference(seo.defaultOgImage, db, storage),\n\t\t\t};\n\t\t\t// eslint-disable-next-line typescript/no-unsafe-type-assertion -- TS can't narrow generic K from key equality\n\t\t\treturn resolved as SiteSettings[K] | undefined;\n\t\t}\n\t}\n\n\treturn value;\n}\n\n/**\n * Get all site settings\n *\n * Returns all configured settings. Unset values are undefined.\n * Media references (logo/favicon) are resolved to include URLs.\n *\n * @example\n * ```ts\n * import { getSiteSettings } from \"emdash\";\n *\n * const settings = await getSiteSettings();\n * console.log(settings.title); // \"My Site\"\n * console.log(settings.logo?.url); // \"/_emdash/api/media/file/abc123\"\n * ```\n */\nexport function getSiteSettings(): Promise<Partial<SiteSettings>> {\n\t// requestCached dedupes within a single request; singleFlightCached\n\t// coalesces across requests and caches the resolved value for the\n\t// global scope's lifetime without ever sharing an awaitable promise. The\n\t// distributed object cache (cachedQuery) sits beneath both, backing cold\n\t// isolates without a database round-trip.\n\treturn requestCached(\"siteSettings\", () =>\n\t\tsingleFlightCached(\n\t\t\tsettingsCache,\n\t\t\t() =>\n\t\t\t\tcachedQuery({\n\t\t\t\t\tnamespace: SETTINGS_CACHE_NAMESPACE,\n\t\t\t\t\tkey: \"all\",\n\t\t\t\t\tload: async () => {\n\t\t\t\t\t\tconst db = await getDb();\n\t\t\t\t\t\treturn getSiteSettingsWithDb(db);\n\t\t\t\t\t},\n\t\t\t\t}),\n\t\t\t{ anchor: (promise) => after(() => promise), ownerTimeoutMs: 30_000 },\n\t\t),\n\t);\n}\n\n/**\n * Get all site settings with a Workers edge-cache hint.\n *\n * Use the returned `cacheHint` with `Astro.cache.set()` so pages that render\n * settings can be purged automatically when site settings change.\n */\nexport async function getSiteSettingsWithCacheHint(): Promise<{\n\tdata: Partial<SiteSettings>;\n\tcacheHint: CacheHint;\n}> {\n\tconst data = await getSiteSettings();\n\treturn { data, cacheHint: { tags: [siteSettingsTag()] } };\n}\n\n/**\n * Get all site settings (with explicit db)\n *\n * @internal Use `getSiteSettings()` in templates. This variant is for admin routes\n * that already have a database handle.\n */\nexport async function getSiteSettingsWithDb(\n\tdb: Kysely<Database>,\n\tstorage: Storage | null = null,\n): Promise<Partial<SiteSettings>> {\n\tconst options = new OptionsRepository(db);\n\tconst allOptions = await options.getByPrefix(SETTINGS_PREFIX);\n\n\tconst settings: Record<string, unknown> = {};\n\n\t// Convert Map to settings object, removing the prefix\n\tfor (const [key, value] of allOptions) {\n\t\tconst settingKey = key.replace(SETTINGS_PREFIX, \"\");\n\t\tsettings[settingKey] = value;\n\t}\n\n\tconst typedSettings = settings as Partial<SiteSettings>;\n\n\t// Resolve media references\n\tif (typedSettings.logo) {\n\t\ttypedSettings.logo = await resolveMediaReference(typedSettings.logo, db, storage);\n\t}\n\tif (typedSettings.favicon) {\n\t\ttypedSettings.favicon = await resolveMediaReference(typedSettings.favicon, db, storage);\n\t}\n\tif (typedSettings.seo?.defaultOgImage) {\n\t\ttypedSettings.seo = {\n\t\t\t...typedSettings.seo,\n\t\t\tdefaultOgImage: await resolveMediaReference(typedSettings.seo.defaultOgImage, db, storage),\n\t\t};\n\t}\n\n\treturn typedSettings;\n}\n\n/**\n * Set site settings (internal function used by admin API)\n *\n * Merges provided settings with existing ones. Only provided fields are updated.\n * Media references should include just the mediaId; URLs are resolved on read.\n *\n * @param settings - Partial settings object with values to update\n * @param db - Kysely database instance\n * @returns Promise that resolves when settings are saved\n *\n * @internal\n *\n * @example\n * ```ts\n * // Update multiple settings at once\n * await setSiteSettings({\n *   title: \"My Site\",\n *   tagline: \"Welcome\",\n *   logo: { mediaId: \"med_123\", alt: \"Logo\" }\n * }, db);\n * ```\n */\nexport async function setSiteSettings(\n\tsettings: SiteSettingsUpdate,\n\tdb: Kysely<Database>,\n): Promise<void> {\n\tconst updates: Record<string, unknown> = {};\n\tconst deletions: string[] = [];\n\tconst seo = settings.seo;\n\n\tfor (const [key, value] of Object.entries(settings)) {\n\t\tif (value === undefined || (key === \"seo\" && seo?.defaultOgImage === null)) continue;\n\t\tif (value === null) deletions.push(`${SETTINGS_PREFIX}${key}`);\n\t\telse updates[`${SETTINGS_PREFIX}${key}`] = value;\n\t}\n\n\ttry {\n\t\tawait withTransaction(db, async (trx) => {\n\t\t\tconst transactionOptions = new OptionsRepository(trx);\n\t\t\tawait transactionOptions.setMany(updates);\n\t\t\tawait transactionOptions.deleteMany(deletions);\n\n\t\t\tif (seo?.defaultOgImage === null) {\n\t\t\t\tconst existingSeo =\n\t\t\t\t\t(await transactionOptions.get<SeoSettings>(`${SETTINGS_PREFIX}seo`)) ?? {};\n\t\t\t\tconst nextSeo = { ...existingSeo, ...seo };\n\t\t\t\tdelete nextSeo.defaultOgImage;\n\t\t\t\tif (Object.keys(nextSeo).length === 0) {\n\t\t\t\t\tawait transactionOptions.delete(`${SETTINGS_PREFIX}seo`);\n\t\t\t\t} else {\n\t\t\t\t\tawait transactionOptions.set(`${SETTINGS_PREFIX}seo`, nextSeo);\n\t\t\t\t}\n\t\t\t}\n\t\t});\n\t} finally {\n\t\tinvalidateSiteSettingsCache();\n\t}\n}\n\n/**\n * Get a single plugin setting by key.\n *\n * Plugin settings are stored in the options table under\n * `plugin:<pluginId>:settings:<key>`.\n */\nexport async function getPluginSetting<T = unknown>(\n\tpluginId: string,\n\tkey: string,\n): Promise<T | undefined> {\n\tconst db = await getDb();\n\treturn getPluginSettingWithDb<T>(pluginId, key, db);\n}\n\n/**\n * Get a single plugin setting by key (with explicit db).\n *\n * @internal Use `getPluginSetting()` in templates and plugin rendering code.\n */\nexport async function getPluginSettingWithDb<T = unknown>(\n\tpluginId: string,\n\tkey: string,\n\tdb: Kysely<Database>,\n): Promise<T | undefined> {\n\tconst options = new OptionsRepository(db);\n\tconst value = await options.get(`plugin:${pluginId}:settings:${key}`);\n\tif (value === null) return undefined;\n\t// eslint-disable-next-line typescript/no-unsafe-type-assertion -- caller supplies the expected plugin setting type\n\treturn (await decodePersistedPluginSetting(pluginId, key, value)) as T;\n}\n\n/**\n * Get all persisted plugin settings for a plugin.\n *\n * Defaults declared in `admin.settingsSchema` are not materialized\n * automatically; callers should apply their own fallback defaults.\n */\nexport async function getPluginSettings(pluginId: string): Promise<Record<string, unknown>> {\n\tconst db = await getDb();\n\treturn getPluginSettingsWithDb(pluginId, db);\n}\n\n/**\n * Get all persisted plugin settings for a plugin (with explicit db).\n *\n * @internal Use `getPluginSettings()` in templates and plugin rendering code.\n */\nexport async function getPluginSettingsWithDb(\n\tpluginId: string,\n\tdb: Kysely<Database>,\n): Promise<Record<string, unknown>> {\n\tconst prefix = `plugin:${pluginId}:settings:`;\n\tconst options = new OptionsRepository(db);\n\tconst allOptions = await options.getByPrefix(prefix);\n\n\tconst entries = [...allOptions].filter(([key]) => key.startsWith(prefix));\n\tconst encryptionKeys = entries.some(([, value]) => isEncryptedPluginSetting(value))\n\t\t? await resolvePluginEncryptionKeys()\n\t\t: undefined;\n\treturn Object.fromEntries(\n\t\tawait Promise.all(\n\t\t\tentries.map(async ([storedKey, value]) => {\n\t\t\t\tconst key = storedKey.slice(prefix.length);\n\t\t\t\treturn [\n\t\t\t\t\tkey,\n\t\t\t\t\tawait decodePersistedPluginSetting(pluginId, key, value, encryptionKeys),\n\t\t\t\t] as const;\n\t\t\t}),\n\t\t),\n\t);\n}\n"],"mappings":";;;;;;;;;;;;;AAcA,MAAM,mBAAmB;AACzB,MAAM,kBAAkB;AACxB,MAAM,WAAW;AACjB,MAAM,iBAAiB;AACvB,MAAM,oBAAoB;AAC1B,MAAM,cAAc,IAAI,aAAa;AACrC,MAAM,cAAc,IAAI,YAAY,SAAS,EAAE,OAAO,MAAM,CAAC;AAU7D,IAAa,+BAAb,cAAkD,MAAM;CACvD,AAAkB,OAAO;CACzB,AAAS;CAMT,YAAY,MAA4C,SAAiB;AACxE,QAAM,QAAQ;AACd,OAAK,OAAO;;;AAId,SAAgB,yBAAyB,OAAiD;AACzF,KAAI,OAAO,UAAU,YAAY,UAAU,QAAQ,MAAM,QAAQ,MAAM,CAAE,QAAO;AAChF,QACC,OAAO,KAAK,MAAM,CAAC,WAAW,KAC9B,aAAa,SACb,MAAM,YAAY,mBAClB,OAAO,SACP,MAAM,MAAM,oBACZ,SAAS,SACT,OAAO,MAAM,QAAQ,YACrB,eAAe,KAAK,MAAM,IAAI,IAC9B,QAAQ,SACR,OAAO,MAAM,OAAO,YACpB,kBAAkB,KAAK,MAAM,GAAG,IAChC,gBAAgB,SAChB,OAAO,MAAM,eAAe,YAC5B,kBAAkB,KAAK,MAAM,WAAW;;AAI1C,SAAS,eAAe,UAAkB,KAAyB;AAClE,QAAO,YAAY,OAClB,KAAK,UAAU;EAAC;EAAyB;EAAkB;EAAU;EAAI,CAAC,CAC1E;;AAGF,SAAS,YAAY,OAAgC;AACpD,QAAO,MAAM,OAAO,CAAC;;AAGtB,eAAe,oBAAoB,KAA0B,OAAqC;AACjG,QAAO,OAAO,OAAO,UAAU,OAAO,YAAY,IAAI,IAAI,EAAE,WAAW,OAAO,CAAC,MAAM,CAAC;;AAGvF,eAAe,cACd,MACwC;AACxC,QAAO,SAAS,SAAY,6BAA6B,GAAG;;AAG7D,eAAsB,qBACrB,UACA,KACA,OACA,MACkC;CAElC,MAAM,WADW,MAAM,cAAc,KAAK,IACf;AAC3B,KAAI,CAAC,QACJ,OAAM,IAAI,6BACT,yCACA,uDACA;AAGF,KAAI;EACH,MAAM,KAAK,OAAO,gBAAgB,IAAI,WAAW,SAAS,CAAC;EAC3D,MAAM,YAAY,MAAM,oBAAoB,SAAS,UAAU;EAC/D,MAAM,aAAa,MAAM,OAAO,OAAO,QACtC;GACC,MAAM;GACN,IAAI,YAAY,GAAG;GACnB,gBAAgB,YAAY,eAAe,UAAU,IAAI,CAAC;GAC1D,EACD,WACA,YAAY,YAAY,OAAO,MAAM,CAAC,CACtC;AACD,SAAO;GACN,SAAS;GACT,GAAG;GACH,KAAK,QAAQ;GACb,IAAI,gBAAgB,GAAG;GACvB,YAAY,gBAAgB,IAAI,WAAW,WAAW,CAAC;GACvD;UACO,OAAO;AACf,MAAI,iBAAiB,6BAA8B,OAAM;AACzD,QAAM,IAAI,6BACT,oCACA,+CACA;;;AAIH,eAAsB,qBACrB,UACA,KACA,UACA,MACkB;CAClB,MAAM,WAAW,MAAM,cAAc,KAAK;AAC1C,KAAI,CAAC,UAAU,OACd,OAAM,IAAI,6BACT,yCACA,sFACA;CAEF,MAAM,UAAU,SAAS,MAAM,cAAc,UAAU,QAAQ,SAAS,IAAI;AAC5E,KAAI,CAAC,QACJ,OAAM,IAAI,6BACT,yCACA,8DACA;AAGF,KAAI;EACH,MAAM,KAAK,gBAAgB,SAAS,GAAG;EACvC,MAAM,aAAa,gBAAgB,SAAS,WAAW;AACvD,MAAI,GAAG,eAAe,YAAY,WAAW,aAAa,GACzD,OAAM,IAAI,MAAM,mBAAmB;EACpC,MAAM,YAAY,MAAM,oBAAoB,SAAS,UAAU;EAC/D,MAAM,YAAY,MAAM,OAAO,OAAO,QACrC;GACC,MAAM;GACN,IAAI,YAAY,GAAG;GACnB,gBAAgB,YAAY,eAAe,UAAU,IAAI,CAAC;GAC1D,EACD,WACA,YAAY,WAAW,CACvB;AACD,SAAO,YAAY,OAAO,UAAU;SAC7B;AACP,QAAM,IAAI,6BACT,oCACA,+CACA;;;AAIH,SAAS,cAAc,QAAsC,KAAsB;AAClF,QAAO,OAAO,MAAM,SAAS;;AAG9B,eAAsB,yBACrB,UACA,KACA,OACA,QACA,MACA,UACmB;AACnB,KAAI,CAAC,cAAc,QAAQ,IAAI,CAAE,QAAO;AACxC,KAAI,OAAO,UAAU,SACpB,OAAM,IAAI,6BACT,oCACA,yCACA;AAEF,YAAW,KAAK,MAAM;AACtB,QAAO,qBAAqB,UAAU,KAAK,OAAO,KAAK;;AAGxD,eAAsB,yBACrB,UACA,KACA,OACA,QACA,MACA,UACa;AACb,KAAI,CAAC,cAAc,QAAQ,IAAI,EAAE;AAChC,MAAI,yBAAyB,MAAM,CAClC,OAAM,IAAI,6BACT,oCACA,uDACA;AAGF,SAAO;;AAER,KAAI,OAAO,UAAU,UAAU;AAC9B,aAAW,KAAK,MAAM;AAEtB,SAAO;;AAER,KAAI,CAAC,yBAAyB,MAAM,CACnC,OAAM,IAAI,6BACT,oCACA,0DACA;CAEF,MAAM,YAAY,MAAM,qBAAqB,UAAU,KAAK,OAAO,KAAK;AACxE,YAAW,KAAK,UAAU;AAE1B,QAAO;;AAGR,SAAgB,qBACf,aACA,UACA,SAAuC,EAAE,EACzC,MACA,UACiB;CACjB,MAAM,SAAS,UAAU,SAAS;CAClC,MAAM,aAAa,QAAgB;AAClC,mBAAiB,IAAI;AACrB,SAAO,GAAG,SAAS;;AAGpB,QAAO;EACN,MAAM,IAAO,KAAgC;GAC5C,MAAM,QAAQ,MAAM,YAAY,IAAI,UAAU,IAAI,CAAC;AACnD,UAAO,UAAU,OACd,OACA,yBAA4B,UAAU,KAAK,OAAO,QAAQ,MAAM,SAAS;;EAE7E,MAAM,aAAgB,KAAgD;GACrE,MAAM,QAAQ,MAAM,YAAY,aAAa,UAAU,IAAI,CAAC;AAC5D,OAAI,CAAC,MAAO,QAAO;AACnB,UAAO;IACN,OAAO,MAAM,yBACZ,UACA,KACA,MAAM,OACN,QACA,MACA,SACA;IACD,UAAU,MAAM;IAChB;;EAEF,MAAM,cACL,KACA,kBACA,OACkC;AAClC,UAAO,YAAY,cAClB,UAAU,IAAI,EACd,kBACA,MAAM,yBAAyB,UAAU,KAAK,OAAO,QAAQ,MAAM,SAAS,CAC5E;;EAEF,iBAAiB,KAAa,kBAA4D;AACzF,UAAO,YAAY,iBAAiB,UAAU,IAAI,EAAE,iBAAiB;;EAEtE,MAAM,IAAI,KAAa,OAA+B;AACrD,SAAM,YAAY,IACjB,UAAU,IAAI,EACd,MAAM,yBAAyB,UAAU,KAAK,OAAO,QAAQ,MAAM,SAAS,CAC5E;;EAEF,OAAO,KAA+B;AACrC,UAAO,YAAY,OAAO,UAAU,IAAI,CAAC;;EAE1C,MAAM,KAAK,YAAY,IAAqD;AAC3E,oBAAiB,aAAa,IAAI;GAClC,MAAM,SAAS,MAAM,YAAY,YAAY,GAAG,SAAS,YAAY;GACrE,MAAM,SAAiD,EAAE;AACzD,QAAK,MAAM,CAAC,SAAS,UAAU,QAAQ;IACtC,MAAM,MAAM,QAAQ,MAAM,OAAO,OAAO;AACxC,WAAO,KAAK;KACX;KACA,OAAO,MAAM,yBAAyB,UAAU,KAAK,OAAO,QAAQ,MAAM,SAAS;KACnF,CAAC;;AAEH,UAAO;;EAER;;;;;;AClRF,MAAM,2BAA2B;;AAiBjC,MAAM,kBAAkB;AAExB,SAAS,8BAA8B,OAAkD;AACxF,QACC,OAAO,UAAU,YACjB,UAAU,QACV,CAAC,MAAM,QAAQ,MAAM,IACrB,aAAa,SACb,MAAM,YAAY;;AAIpB,eAAe,6BACd,UACA,KACA,OACA,gBACmB;AACnB,KAAI,yBAAyB,MAAM,CAClC,QAAO,qBAAqB,UAAU,KAAK,OAAO,eAAe;AAElE,KAAI,8BAA8B,MAAM,CACvC,OAAM,IAAI,6BACT,oCACA,0DACA;AAEF,QAAO;;;;;;;;;;;;;;;;;;AAmBR,MAAM,0BAA0B,OAAO,IAAI,uBAAuB;AAClE,MAAM,IAAI;AACV,MAAM,gBAEJ,EAAE,mCACI;CACN,MAAM,IAAI,yBAAgD;AAC1D,GAAE,2BAA2B;AAC7B,QAAO;IACJ;;;;;;;;AASL,SAAgB,8BAAoC;AACnD,6BAA4B,cAAc;AAE1C,uBAAsB,yBAAyB;;;;;AAMhD,SAAS,iBAAiB,OAAyC;AAClE,QAAO,OAAO,UAAU,YAAY,UAAU,QAAQ,aAAa;;;;;;;;;;AAWpE,eAAe,sBACd,UACA,IACA,UACsC;AACtC,KAAI,CAAC,UAAU,QACd,QAAO;AAGR,KAAI;EAEH,MAAM,QAAQ,MADI,IAAI,gBAAgB,GAAG,CACX,SAAS,SAAS,QAAQ;AAExD,MAAI,MAEH,QAAO;GACN,GAAG;GACH,KAAK,2BAA2B,MAAM;GACtC,aAAa,MAAM;GACnB,GAAI,MAAM,UAAU,OAAO,EAAE,OAAO,MAAM,OAAO,GAAG,EAAE;GACtD,GAAI,MAAM,WAAW,OAAO,EAAE,QAAQ,MAAM,QAAQ,GAAG,EAAE;GACzD;SAEK;AAIR,QAAO;;;;;;;;;;;;;;;;;;;;AAqBR,eAAsB,eACrB,KACuC;CAOvC,MAAM,SAAS,iBAAwC,eAAe;AACtE,KAAI,OAEH,SADiB,MAAM,QACP;AAKjB,QAAO,cAAc,eAAe,OAAO,YAAY;AAEtD,SAAO,qBAAqB,KADjB,MAAM,OAAO,CACY;GACnC;;;;;;;;AASH,eAAsB,qBACrB,KACA,IACA,UAA0B,MACa;CAEvC,MAAM,QAAQ,MADE,IAAI,kBAAkB,GAAG,CACb,IAAqB,GAAG,kBAAkB,MAAM;AAE5E,KAAI,CAAC,MACJ;AAMD,MAAK,QAAQ,UAAU,QAAQ,cAAc,iBAAiB,MAAM,CAGnE,QAFiB,MAAM,sBAAsB,OAAO,IAAI,QAAQ;AAKjE,KAAI,QAAQ,SAAS,SAAS,OAAO,UAAU,UAAU;EAExD,MAAM,MAAM;AACZ,MAAI,IAAI,eAMP,QALiB;GAChB,GAAG;GACH,gBAAgB,MAAM,sBAAsB,IAAI,gBAAgB,IAAI,QAAQ;GAC5E;;AAMH,QAAO;;;;;;;;;;;;;;;;;AAkBR,SAAgB,kBAAkD;AAMjE,QAAO,cAAc,sBACpB,mBACC,qBAEC,YAAY;EACX,WAAW;EACX,KAAK;EACL,MAAM,YAAY;AAEjB,UAAO,sBADI,MAAM,OAAO,CACQ;;EAEjC,CAAC,EACH;EAAE,SAAS,YAAY,YAAY,QAAQ;EAAE,gBAAgB;EAAQ,CACrE,CACD;;;;;;;;AASF,eAAsB,+BAGnB;AAEF,QAAO;EAAE,MADI,MAAM,iBAAiB;EACrB,WAAW,EAAE,MAAM,CAAC,iBAAiB,CAAC,EAAE;EAAE;;;;;;;;AAS1D,eAAsB,sBACrB,IACA,UAA0B,MACO;CAEjC,MAAM,aAAa,MADH,IAAI,kBAAkB,GAAG,CACR,YAAY,gBAAgB;CAE7D,MAAM,WAAoC,EAAE;AAG5C,MAAK,MAAM,CAAC,KAAK,UAAU,YAAY;EACtC,MAAM,aAAa,IAAI,QAAQ,iBAAiB,GAAG;AACnD,WAAS,cAAc;;CAGxB,MAAM,gBAAgB;AAGtB,KAAI,cAAc,KACjB,eAAc,OAAO,MAAM,sBAAsB,cAAc,MAAM,IAAI,QAAQ;AAElF,KAAI,cAAc,QACjB,eAAc,UAAU,MAAM,sBAAsB,cAAc,SAAS,IAAI,QAAQ;AAExF,KAAI,cAAc,KAAK,eACtB,eAAc,MAAM;EACnB,GAAG,cAAc;EACjB,gBAAgB,MAAM,sBAAsB,cAAc,IAAI,gBAAgB,IAAI,QAAQ;EAC1F;AAGF,QAAO;;;;;;;;;;;;;;;;;;;;;;;;AAyBR,eAAsB,gBACrB,UACA,IACgB;CAChB,MAAM,UAAmC,EAAE;CAC3C,MAAM,YAAsB,EAAE;CAC9B,MAAM,MAAM,SAAS;AAErB,MAAK,MAAM,CAAC,KAAK,UAAU,OAAO,QAAQ,SAAS,EAAE;AACpD,MAAI,UAAU,UAAc,QAAQ,SAAS,KAAK,mBAAmB,KAAO;AAC5E,MAAI,UAAU,KAAM,WAAU,KAAK,GAAG,kBAAkB,MAAM;MACzD,SAAQ,GAAG,kBAAkB,SAAS;;AAG5C,KAAI;AACH,QAAM,gBAAgB,IAAI,OAAO,QAAQ;GACxC,MAAM,qBAAqB,IAAI,kBAAkB,IAAI;AACrD,SAAM,mBAAmB,QAAQ,QAAQ;AACzC,SAAM,mBAAmB,WAAW,UAAU;AAE9C,OAAI,KAAK,mBAAmB,MAAM;IAGjC,MAAM,UAAU;KAAE,GADhB,MAAM,mBAAmB,IAAiB,GAAG,gBAAgB,KAAK,IAAK,EAAE;KACzC,GAAG;KAAK;AAC1C,WAAO,QAAQ;AACf,QAAI,OAAO,KAAK,QAAQ,CAAC,WAAW,EACnC,OAAM,mBAAmB,OAAO,GAAG,gBAAgB,KAAK;QAExD,OAAM,mBAAmB,IAAI,GAAG,gBAAgB,MAAM,QAAQ;;IAG/D;WACO;AACT,+BAA6B;;;;;;;;;AAU/B,eAAsB,iBACrB,UACA,KACyB;AAEzB,QAAO,uBAA0B,UAAU,KADhC,MAAM,OAAO,CAC2B;;;;;;;AAQpD,eAAsB,uBACrB,UACA,KACA,IACyB;CAEzB,MAAM,QAAQ,MADE,IAAI,kBAAkB,GAAG,CACb,IAAI,UAAU,SAAS,YAAY,MAAM;AACrE,KAAI,UAAU,KAAM,QAAO;AAE3B,QAAQ,MAAM,6BAA6B,UAAU,KAAK,MAAM;;;;;;;;AASjE,eAAsB,kBAAkB,UAAoD;AAE3F,QAAO,wBAAwB,UADpB,MAAM,OAAO,CACoB;;;;;;;AAQ7C,eAAsB,wBACrB,UACA,IACmC;CACnC,MAAM,SAAS,UAAU,SAAS;CAIlC,MAAM,UAAU,CAAC,GAFE,MADH,IAAI,kBAAkB,GAAG,CACR,YAAY,OAAO,CAErB,CAAC,QAAQ,CAAC,SAAS,IAAI,WAAW,OAAO,CAAC;CACzE,MAAM,iBAAiB,QAAQ,MAAM,GAAG,WAAW,yBAAyB,MAAM,CAAC,GAChF,MAAM,6BAA6B,GACnC;AACH,QAAO,OAAO,YACb,MAAM,QAAQ,IACb,QAAQ,IAAI,OAAO,CAAC,WAAW,WAAW;EACzC,MAAM,MAAM,UAAU,MAAM,OAAO,OAAO;AAC1C,SAAO,CACN,KACA,MAAM,6BAA6B,UAAU,KAAK,OAAO,eAAe,CACxE;GACA,CACF,CACD"}
+{"version":3,"file":"settings-B4vDl1fK.mjs","names":[],"sources":["../src/plugins/settings.ts","../src/settings/index.ts"],"sourcesContent":["import { resolvePluginEncryptionKeys, type ParsedEncryptionKey } from \"../config/secrets.js\";\nimport type { OptionsRepository } from \"../database/repositories/options.js\";\nimport { decodeBase64url, encodeBase64url } from \"../utils/base64.js\";\nimport { assertStorageKey } from \"./conditional-storage.js\";\nexport { createPluginSecretRedactor } from \"./secret-redactor.js\";\nexport type { PluginSecretRedactor } from \"./secret-redactor.js\";\nimport type {\n\tConditionalDeleteResult,\n\tConditionalWriteResult,\n\tSettingField,\n\tSettingsAccess,\n\tVersionedValue,\n} from \"./types.js\";\n\nconst ENVELOPE_VERSION = 1;\nconst ENVELOPE_MARKER = \"plugin-setting\";\nconst IV_BYTES = 12;\nconst KEY_ID_PATTERN = /^[0-9a-f]{8}$/;\nconst BASE64URL_PATTERN = /^[A-Za-z0-9_-]+$/;\nconst textEncoder = new TextEncoder();\nconst textDecoder = new TextDecoder(\"utf-8\", { fatal: true });\n\nexport interface EncryptedPluginSetting {\n\t$emdash: \"plugin-setting\";\n\tv: 1;\n\tkid: string;\n\tiv: string;\n\tciphertext: string;\n}\n\nexport class PluginSettingEncryptionError extends Error {\n\toverride readonly name = \"PluginSettingEncryptionError\";\n\treadonly code:\n\t\t| \"PLUGIN_SETTING_ENCRYPTION_KEY_MISSING\"\n\t\t| \"PLUGIN_SETTING_ENCRYPTION_KEY_UNKNOWN\"\n\t\t| \"PLUGIN_SETTING_ENCRYPTION_FAILED\"\n\t\t| \"PLUGIN_SETTING_DECRYPTION_FAILED\";\n\n\tconstructor(code: PluginSettingEncryptionError[\"code\"], message: string) {\n\t\tsuper(message);\n\t\tthis.code = code;\n\t}\n}\n\nexport function isEncryptedPluginSetting(value: unknown): value is EncryptedPluginSetting {\n\tif (typeof value !== \"object\" || value === null || Array.isArray(value)) return false;\n\treturn (\n\t\tObject.keys(value).length === 5 &&\n\t\t\"$emdash\" in value &&\n\t\tvalue.$emdash === ENVELOPE_MARKER &&\n\t\t\"v\" in value &&\n\t\tvalue.v === ENVELOPE_VERSION &&\n\t\t\"kid\" in value &&\n\t\ttypeof value.kid === \"string\" &&\n\t\tKEY_ID_PATTERN.test(value.kid) &&\n\t\t\"iv\" in value &&\n\t\ttypeof value.iv === \"string\" &&\n\t\tBASE64URL_PATTERN.test(value.iv) &&\n\t\t\"ciphertext\" in value &&\n\t\ttypeof value.ciphertext === \"string\" &&\n\t\tBASE64URL_PATTERN.test(value.ciphertext)\n\t);\n}\n\nfunction additionalData(pluginId: string, key: string): Uint8Array {\n\treturn textEncoder.encode(\n\t\tJSON.stringify([\"emdash-plugin-setting\", ENVELOPE_VERSION, pluginId, key]),\n\t);\n}\n\nfunction exactBuffer(bytes: Uint8Array): ArrayBuffer {\n\treturn bytes.slice().buffer;\n}\n\nasync function importEncryptionKey(key: ParsedEncryptionKey, usage: KeyUsage): Promise<CryptoKey> {\n\treturn crypto.subtle.importKey(\"raw\", exactBuffer(key.key), \"AES-GCM\", false, [usage]);\n}\n\nasync function keysOrDefault(\n\tkeys: ParsedEncryptionKey[] | null | undefined,\n): Promise<ParsedEncryptionKey[] | null> {\n\treturn keys === undefined ? resolvePluginEncryptionKeys() : keys;\n}\n\nexport async function encryptPluginSetting(\n\tpluginId: string,\n\tkey: string,\n\tvalue: string,\n\tkeys?: ParsedEncryptionKey[] | null,\n): Promise<EncryptedPluginSetting> {\n\tconst resolved = await keysOrDefault(keys);\n\tconst primary = resolved?.[0];\n\tif (!primary) {\n\t\tthrow new PluginSettingEncryptionError(\n\t\t\t\"PLUGIN_SETTING_ENCRYPTION_KEY_MISSING\",\n\t\t\t\"Plugin secret settings require EMDASH_ENCRYPTION_KEY\",\n\t\t);\n\t}\n\n\ttry {\n\t\tconst iv = crypto.getRandomValues(new Uint8Array(IV_BYTES));\n\t\tconst cryptoKey = await importEncryptionKey(primary, \"encrypt\");\n\t\tconst ciphertext = await crypto.subtle.encrypt(\n\t\t\t{\n\t\t\t\tname: \"AES-GCM\",\n\t\t\t\tiv: exactBuffer(iv),\n\t\t\t\tadditionalData: exactBuffer(additionalData(pluginId, key)),\n\t\t\t},\n\t\t\tcryptoKey,\n\t\t\texactBuffer(textEncoder.encode(value)),\n\t\t);\n\t\treturn {\n\t\t\t$emdash: ENVELOPE_MARKER,\n\t\t\tv: ENVELOPE_VERSION,\n\t\t\tkid: primary.kid,\n\t\t\tiv: encodeBase64url(iv),\n\t\t\tciphertext: encodeBase64url(new Uint8Array(ciphertext)),\n\t\t};\n\t} catch (error) {\n\t\tif (error instanceof PluginSettingEncryptionError) throw error;\n\t\tthrow new PluginSettingEncryptionError(\n\t\t\t\"PLUGIN_SETTING_ENCRYPTION_FAILED\",\n\t\t\t\"Plugin secret setting could not be encrypted\",\n\t\t);\n\t}\n}\n\nexport async function decryptPluginSetting(\n\tpluginId: string,\n\tkey: string,\n\tenvelope: EncryptedPluginSetting,\n\tkeys?: ParsedEncryptionKey[] | null,\n): Promise<string> {\n\tconst resolved = await keysOrDefault(keys);\n\tif (!resolved?.length) {\n\t\tthrow new PluginSettingEncryptionError(\n\t\t\t\"PLUGIN_SETTING_ENCRYPTION_KEY_MISSING\",\n\t\t\t\"Plugin secret setting cannot be decrypted because its encryption key is unavailable\",\n\t\t);\n\t}\n\tconst matched = resolved.find((candidate) => candidate.kid === envelope.kid);\n\tif (!matched) {\n\t\tthrow new PluginSettingEncryptionError(\n\t\t\t\"PLUGIN_SETTING_ENCRYPTION_KEY_UNKNOWN\",\n\t\t\t\"Plugin secret setting was encrypted with an unavailable key\",\n\t\t);\n\t}\n\n\ttry {\n\t\tconst iv = decodeBase64url(envelope.iv);\n\t\tconst ciphertext = decodeBase64url(envelope.ciphertext);\n\t\tif (iv.byteLength !== IV_BYTES || ciphertext.byteLength < 16)\n\t\t\tthrow new Error(\"invalid envelope\");\n\t\tconst cryptoKey = await importEncryptionKey(matched, \"decrypt\");\n\t\tconst plaintext = await crypto.subtle.decrypt(\n\t\t\t{\n\t\t\t\tname: \"AES-GCM\",\n\t\t\t\tiv: exactBuffer(iv),\n\t\t\t\tadditionalData: exactBuffer(additionalData(pluginId, key)),\n\t\t\t},\n\t\t\tcryptoKey,\n\t\t\texactBuffer(ciphertext),\n\t\t);\n\t\treturn textDecoder.decode(plaintext);\n\t} catch {\n\t\tthrow new PluginSettingEncryptionError(\n\t\t\t\"PLUGIN_SETTING_DECRYPTION_FAILED\",\n\t\t\t\"Plugin secret setting could not be decrypted\",\n\t\t);\n\t}\n}\n\nfunction isSecretField(schema: Record<string, SettingField>, key: string): boolean {\n\treturn schema[key]?.type === \"secret\";\n}\n\nexport async function encodePluginSettingValue(\n\tpluginId: string,\n\tkey: string,\n\tvalue: unknown,\n\tschema: Record<string, SettingField>,\n\tkeys?: ParsedEncryptionKey[] | null,\n\tonSecret?: (key: string, value: string) => void,\n): Promise<unknown> {\n\tif (!isSecretField(schema, key)) return value;\n\tif (typeof value !== \"string\") {\n\t\tthrow new PluginSettingEncryptionError(\n\t\t\t\"PLUGIN_SETTING_ENCRYPTION_FAILED\",\n\t\t\t\"Plugin secret settings must be strings\",\n\t\t);\n\t}\n\tonSecret?.(key, value);\n\treturn encryptPluginSetting(pluginId, key, value, keys);\n}\n\nexport async function decodePluginSettingValue<T = unknown>(\n\tpluginId: string,\n\tkey: string,\n\tvalue: unknown,\n\tschema: Record<string, SettingField>,\n\tkeys?: ParsedEncryptionKey[] | null,\n\tonSecret?: (key: string, value: string) => void,\n): Promise<T> {\n\tif (!isSecretField(schema, key)) {\n\t\tif (isEncryptedPluginSetting(value)) {\n\t\t\tthrow new PluginSettingEncryptionError(\n\t\t\t\t\"PLUGIN_SETTING_DECRYPTION_FAILED\",\n\t\t\t\t\"Encrypted plugin setting is not declared as a secret\",\n\t\t\t);\n\t\t}\n\t\t// eslint-disable-next-line typescript/no-unsafe-type-assertion -- caller supplies the expected non-secret setting type\n\t\treturn value as T;\n\t}\n\tif (typeof value === \"string\") {\n\t\tonSecret?.(key, value);\n\t\t// eslint-disable-next-line typescript/no-unsafe-type-assertion -- secret schema guarantees a string and caller supplies its compatible type\n\t\treturn value as T;\n\t}\n\tif (!isEncryptedPluginSetting(value)) {\n\t\tthrow new PluginSettingEncryptionError(\n\t\t\t\"PLUGIN_SETTING_DECRYPTION_FAILED\",\n\t\t\t\"Plugin secret setting has an invalid encrypted envelope\",\n\t\t);\n\t}\n\tconst decrypted = await decryptPluginSetting(pluginId, key, value, keys);\n\tonSecret?.(key, decrypted);\n\t// eslint-disable-next-line typescript/no-unsafe-type-assertion -- secret schema guarantees a string and caller supplies its compatible type\n\treturn decrypted as T;\n}\n\nexport function createSettingsAccess(\n\toptionsRepo: OptionsRepository,\n\tpluginId: string,\n\tschema: Record<string, SettingField> = {},\n\tkeys?: ParsedEncryptionKey[] | null,\n\tonSecret?: (key: string, value: string) => void,\n): SettingsAccess {\n\tconst prefix = `plugin:${pluginId}:settings:`;\n\tconst optionKey = (key: string) => {\n\t\tassertStorageKey(key);\n\t\treturn `${prefix}${key}`;\n\t};\n\n\treturn {\n\t\tasync get<T>(key: string): Promise<T | null> {\n\t\t\tconst value = await optionsRepo.get(optionKey(key));\n\t\t\treturn value === null\n\t\t\t\t? null\n\t\t\t\t: decodePluginSettingValue<T>(pluginId, key, value, schema, keys, onSecret);\n\t\t},\n\t\tasync getVersioned<T>(key: string): Promise<VersionedValue<T> | null> {\n\t\t\tconst value = await optionsRepo.getVersioned(optionKey(key));\n\t\t\tif (!value) return null;\n\t\t\treturn {\n\t\t\t\tvalue: await decodePluginSettingValue<T>(\n\t\t\t\t\tpluginId,\n\t\t\t\t\tkey,\n\t\t\t\t\tvalue.value,\n\t\t\t\t\tschema,\n\t\t\t\t\tkeys,\n\t\t\t\t\tonSecret,\n\t\t\t\t),\n\t\t\t\trevision: value.revision,\n\t\t\t};\n\t\t},\n\t\tasync compareAndSet(\n\t\t\tkey: string,\n\t\t\texpectedRevision: string | null,\n\t\t\tvalue: unknown,\n\t\t): Promise<ConditionalWriteResult> {\n\t\t\treturn optionsRepo.compareAndSet(\n\t\t\t\toptionKey(key),\n\t\t\t\texpectedRevision,\n\t\t\t\tawait encodePluginSettingValue(pluginId, key, value, schema, keys, onSecret),\n\t\t\t);\n\t\t},\n\t\tcompareAndDelete(key: string, expectedRevision: string): Promise<ConditionalDeleteResult> {\n\t\t\treturn optionsRepo.compareAndDelete(optionKey(key), expectedRevision);\n\t\t},\n\t\tasync set(key: string, value: unknown): Promise<void> {\n\t\t\tawait optionsRepo.set(\n\t\t\t\toptionKey(key),\n\t\t\t\tawait encodePluginSettingValue(pluginId, key, value, schema, keys, onSecret),\n\t\t\t);\n\t\t},\n\t\tdelete(key: string): Promise<boolean> {\n\t\t\treturn optionsRepo.delete(optionKey(key));\n\t\t},\n\t\tasync list(keyPrefix = \"\"): Promise<Array<{ key: string; value: unknown }>> {\n\t\t\tassertStorageKey(keyPrefix || \"_\");\n\t\t\tconst values = await optionsRepo.getByPrefix(`${prefix}${keyPrefix}`);\n\t\t\tconst result: Array<{ key: string; value: unknown }> = [];\n\t\t\tfor (const [fullKey, value] of values) {\n\t\t\t\tconst key = fullKey.slice(prefix.length);\n\t\t\t\tresult.push({\n\t\t\t\t\tkey,\n\t\t\t\t\tvalue: await decodePluginSettingValue(pluginId, key, value, schema, keys, onSecret),\n\t\t\t\t});\n\t\t\t}\n\t\t\treturn result;\n\t\t},\n\t};\n}\n","/**\n * Site Settings API\n *\n * Functions for getting and setting global site configuration.\n * Settings are stored in the options table with 'site:' prefix.\n */\n\nimport type { Kysely } from \"kysely\";\n\nimport { after } from \"../after.js\";\nimport { siteSettingsTag } from \"../cache/chrome-tags.js\";\nimport { resolvePluginEncryptionKeys } from \"../config/secrets.js\";\nimport { MediaRepository } from \"../database/repositories/media.js\";\nimport { OptionsRepository } from \"../database/repositories/options.js\";\nimport { withTransaction } from \"../database/transaction.js\";\nimport type { Database } from \"../database/types.js\";\nimport { getDb } from \"../loader.js\";\nimport { cachedQuery, invalidateObjectCache } from \"../object-cache/index.js\";\nimport {\n\tPluginSettingEncryptionError,\n\tdecryptPluginSetting,\n\tisEncryptedPluginSetting,\n} from \"../plugins/settings.js\";\nimport type { CacheHint } from \"../query.js\";\nimport { peekRequestCache, requestCached } from \"../request-cache.js\";\n\n/** Object-cache namespace for site settings. */\nconst SETTINGS_CACHE_NAMESPACE = \"settings\";\nimport type { Storage } from \"../storage/types.js\";\nimport {\n\tcreateSingleFlightCache,\n\ttype SingleFlightCache,\n\tinvalidateSingleFlightCache,\n\tsingleFlightCached,\n} from \"../utils/single-flight-cache.js\";\nimport type {\n\tMediaReference,\n\tSeoSettings,\n\tSiteSettings,\n\tSiteSettingsUpdate,\n\tSiteSettingKey,\n} from \"./types.js\";\n\n/** Prefix for site settings in the options table */\nconst SETTINGS_PREFIX = \"site:\";\n\nfunction isPluginSettingEnvelopeRecord(value: unknown): value is Record<string, unknown> {\n\treturn (\n\t\ttypeof value === \"object\" &&\n\t\tvalue !== null &&\n\t\t!Array.isArray(value) &&\n\t\t\"$emdash\" in value &&\n\t\tvalue.$emdash === \"plugin-setting\"\n\t);\n}\n\nasync function decodePersistedPluginSetting(\n\tpluginId: string,\n\tkey: string,\n\tvalue: unknown,\n\tencryptionKeys?: Awaited<ReturnType<typeof resolvePluginEncryptionKeys>>,\n): Promise<unknown> {\n\tif (isEncryptedPluginSetting(value)) {\n\t\treturn decryptPluginSetting(pluginId, key, value, encryptionKeys);\n\t}\n\tif (isPluginSettingEnvelopeRecord(value)) {\n\t\tthrow new PluginSettingEncryptionError(\n\t\t\t\"PLUGIN_SETTING_DECRYPTION_FAILED\",\n\t\t\t\"Plugin secret setting has an invalid encrypted envelope\",\n\t\t);\n\t}\n\treturn value;\n}\n\n/**\n * Worker-isolate cache for the resolved `site:*` settings.\n *\n * Site settings (title, logo, SEO defaults) change rarely but are read on\n * every public request. Caching across the isolate's lifetime drops the\n * `options WHERE name LIKE 'site:%'` prefix scan from once-per-request to\n * once-per-isolate. Cross-isolate staleness is bounded by isolate lifetime\n * (workerd typically recycles within minutes); acceptable for chrome.\n *\n * Backed by single-flight-cache.ts: concurrent cold reads coalesce onto one\n * query via a reclaimable single-flight lock and the resolved *value* is\n * cached — never a shared in-flight promise, so a cancelled request can't\n * poison the isolate (see that file's header). Stored on globalThis with a\n * Symbol.for key so Vite SSR chunk duplication doesn't produce two\n * independent caches (same pattern as request-context.ts).\n */\nconst SITE_SETTINGS_CACHE_KEY = Symbol.for(\"emdash:site-settings\");\nconst g = globalThis as Record<symbol, unknown>;\nconst settingsCache: SingleFlightCache<Partial<SiteSettings>> =\n\t// eslint-disable-next-line typescript/no-unsafe-type-assertion -- globalThis singleton pattern (see request-context.ts)\n\t(g[SITE_SETTINGS_CACHE_KEY] as SingleFlightCache<Partial<SiteSettings>> | undefined) ??\n\t(() => {\n\t\tconst c = createSingleFlightCache<Partial<SiteSettings>>();\n\t\tg[SITE_SETTINGS_CACHE_KEY] = c;\n\t\treturn c;\n\t})();\n\n/**\n * Bump the isolate-wide site-settings cache version, forcing the next\n * `getSiteSettings()` to re-query the database.\n *\n * Called from every `site:*` write path. Other isolates still serve their\n * own cached copy until they expire — staleness bounded by isolate lifetime.\n */\nexport function invalidateSiteSettingsCache(): void {\n\tinvalidateSingleFlightCache(settingsCache);\n\t// Cross-isolate invalidation for the optional distributed object cache.\n\tinvalidateObjectCache(SETTINGS_CACHE_NAMESPACE);\n}\n\n/**\n * Type guard for MediaReference values\n */\nfunction isMediaReference(value: unknown): value is MediaReference {\n\treturn typeof value === \"object\" && value !== null && \"mediaId\" in value;\n}\n\n/**\n * Resolve a media reference to include the full URL plus content metadata.\n *\n * Pulls `mimeType` and intrinsic dimensions from the media row so callers\n * can emit correct head tags (e.g. `<link rel=\"icon\" type=\"image/svg+xml\">`,\n * which Chromium requires when the URL has no `.svg` extension) without\n * a second round-trip to the media table.\n */\nasync function resolveMediaReference(\n\tmediaRef: MediaReference | undefined,\n\tdb: Kysely<Database>,\n\t_storage: Storage | null,\n): Promise<MediaReference | undefined> {\n\tif (!mediaRef?.mediaId) {\n\t\treturn mediaRef;\n\t}\n\n\ttry {\n\t\tconst mediaRepo = new MediaRepository(db);\n\t\tconst media = await mediaRepo.findById(mediaRef.mediaId);\n\n\t\tif (media) {\n\t\t\t// Construct URL using the same pattern as API handlers\n\t\t\treturn {\n\t\t\t\t...mediaRef,\n\t\t\t\turl: `/_emdash/api/media/file/${media.storageKey}`,\n\t\t\t\tcontentType: media.mimeType,\n\t\t\t\t...(media.width !== null ? { width: media.width } : {}),\n\t\t\t\t...(media.height !== null ? { height: media.height } : {}),\n\t\t\t};\n\t\t}\n\t} catch {\n\t\t// If media not found or error, return the reference as-is\n\t}\n\n\treturn mediaRef;\n}\n\n/**\n * Get a single site setting by key\n *\n * Returns `undefined` if the setting has not been configured.\n * For media settings (logo, favicon), the URL is resolved automatically.\n *\n * @param key - The setting key (e.g., \"title\", \"logo\", \"social\")\n * @returns The setting value, or undefined if not set\n *\n * @example\n * ```ts\n * import { getSiteSetting } from \"emdash\";\n *\n * const title = await getSiteSetting(\"title\");\n * const logo = await getSiteSetting(\"logo\");\n * console.log(logo?.url); // Resolved URL\n * ```\n */\nexport async function getSiteSetting<K extends SiteSettingKey>(\n\tkey: K,\n): Promise<SiteSettings[K] | undefined> {\n\t// If `getSiteSettings()` has already been called in this request,\n\t// read from that (request-cached) batch rather than firing a second\n\t// options-table query. Common layout: a Base template pulls the\n\t// whole settings object up-front, then `EmDashHead` or a plugin\n\t// asks for one key — no reason the singular call should round-trip\n\t// again.\n\tconst primed = peekRequestCache<Partial<SiteSettings>>(\"siteSettings\");\n\tif (primed) {\n\t\tconst settings = await primed;\n\t\treturn settings[key];\n\t}\n\n\t// Otherwise cache per-key. Templates that pull several settings\n\t// independently still share the in-flight query for each one.\n\treturn requestCached(`siteSetting:${key}`, async () => {\n\t\tconst db = await getDb();\n\t\treturn getSiteSettingWithDb(key, db);\n\t});\n}\n\n/**\n * Get a single site setting by key (with explicit db)\n *\n * @internal Use `getSiteSetting()` in templates. This variant is for admin routes\n * that already have a database handle.\n */\nexport async function getSiteSettingWithDb<K extends SiteSettingKey>(\n\tkey: K,\n\tdb: Kysely<Database>,\n\tstorage: Storage | null = null,\n): Promise<SiteSettings[K] | undefined> {\n\tconst options = new OptionsRepository(db);\n\tconst value = await options.get<SiteSettings[K]>(`${SETTINGS_PREFIX}${key}`);\n\n\tif (!value) {\n\t\treturn undefined;\n\t}\n\n\t// Resolve media references if needed.\n\t// TS cannot narrow generic K from key equality checks — this is a known limitation.\n\t// We use the non-generic getSiteSettingsWithDb for media resolution instead.\n\tif ((key === \"logo\" || key === \"favicon\") && isMediaReference(value)) {\n\t\tconst resolved = await resolveMediaReference(value, db, storage);\n\t\t// eslint-disable-next-line typescript/no-unsafe-type-assertion -- TS can't narrow generic K from key equality; resolved type is correct\n\t\treturn resolved as SiteSettings[K] | undefined;\n\t}\n\n\tif (key === \"seo\" && value && typeof value === \"object\") {\n\t\t// eslint-disable-next-line typescript/no-unsafe-type-assertion -- TS can't narrow generic K from key equality\n\t\tconst seo = value as SeoSettings;\n\t\tif (seo.defaultOgImage) {\n\t\t\tconst resolved = {\n\t\t\t\t...seo,\n\t\t\t\tdefaultOgImage: await resolveMediaReference(seo.defaultOgImage, db, storage),\n\t\t\t};\n\t\t\t// eslint-disable-next-line typescript/no-unsafe-type-assertion -- TS can't narrow generic K from key equality\n\t\t\treturn resolved as SiteSettings[K] | undefined;\n\t\t}\n\t}\n\n\treturn value;\n}\n\n/**\n * Get all site settings\n *\n * Returns all configured settings. Unset values are undefined.\n * Media references (logo/favicon) are resolved to include URLs.\n *\n * @example\n * ```ts\n * import { getSiteSettings } from \"emdash\";\n *\n * const settings = await getSiteSettings();\n * console.log(settings.title); // \"My Site\"\n * console.log(settings.logo?.url); // \"/_emdash/api/media/file/abc123\"\n * ```\n */\nexport function getSiteSettings(): Promise<Partial<SiteSettings>> {\n\t// requestCached dedupes within a single request; singleFlightCached\n\t// coalesces across requests and caches the resolved value for the\n\t// global scope's lifetime without ever sharing an awaitable promise. The\n\t// distributed object cache (cachedQuery) sits beneath both, backing cold\n\t// isolates without a database round-trip.\n\treturn requestCached(\"siteSettings\", () =>\n\t\tsingleFlightCached(\n\t\t\tsettingsCache,\n\t\t\t() =>\n\t\t\t\tcachedQuery({\n\t\t\t\t\tnamespace: SETTINGS_CACHE_NAMESPACE,\n\t\t\t\t\tkey: \"all\",\n\t\t\t\t\tload: async () => {\n\t\t\t\t\t\tconst db = await getDb();\n\t\t\t\t\t\treturn getSiteSettingsWithDb(db);\n\t\t\t\t\t},\n\t\t\t\t}),\n\t\t\t{ anchor: (promise) => after(() => promise), ownerTimeoutMs: 30_000 },\n\t\t),\n\t);\n}\n\n/**\n * Get all site settings with a Workers edge-cache hint.\n *\n * Use the returned `cacheHint` with `Astro.cache.set()` so pages that render\n * settings can be purged automatically when site settings change.\n */\nexport async function getSiteSettingsWithCacheHint(): Promise<{\n\tdata: Partial<SiteSettings>;\n\tcacheHint: CacheHint;\n}> {\n\tconst data = await getSiteSettings();\n\treturn { data, cacheHint: { tags: [siteSettingsTag()] } };\n}\n\n/**\n * Get all site settings (with explicit db)\n *\n * @internal Use `getSiteSettings()` in templates. This variant is for admin routes\n * that already have a database handle.\n */\nexport async function getSiteSettingsWithDb(\n\tdb: Kysely<Database>,\n\tstorage: Storage | null = null,\n): Promise<Partial<SiteSettings>> {\n\tconst options = new OptionsRepository(db);\n\tconst allOptions = await options.getByPrefix(SETTINGS_PREFIX);\n\n\tconst settings: Record<string, unknown> = {};\n\n\t// Convert Map to settings object, removing the prefix\n\tfor (const [key, value] of allOptions) {\n\t\tconst settingKey = key.replace(SETTINGS_PREFIX, \"\");\n\t\tsettings[settingKey] = value;\n\t}\n\n\tconst typedSettings = settings as Partial<SiteSettings>;\n\n\t// Resolve media references\n\tif (typedSettings.logo) {\n\t\ttypedSettings.logo = await resolveMediaReference(typedSettings.logo, db, storage);\n\t}\n\tif (typedSettings.favicon) {\n\t\ttypedSettings.favicon = await resolveMediaReference(typedSettings.favicon, db, storage);\n\t}\n\tif (typedSettings.seo?.defaultOgImage) {\n\t\ttypedSettings.seo = {\n\t\t\t...typedSettings.seo,\n\t\t\tdefaultOgImage: await resolveMediaReference(typedSettings.seo.defaultOgImage, db, storage),\n\t\t};\n\t}\n\n\treturn typedSettings;\n}\n\n/**\n * Set site settings (internal function used by admin API)\n *\n * Merges provided settings with existing ones. Only provided fields are updated.\n * Media references should include just the mediaId; URLs are resolved on read.\n *\n * @param settings - Partial settings object with values to update\n * @param db - Kysely database instance\n * @returns Promise that resolves when settings are saved\n *\n * @internal\n *\n * @example\n * ```ts\n * // Update multiple settings at once\n * await setSiteSettings({\n *   title: \"My Site\",\n *   tagline: \"Welcome\",\n *   logo: { mediaId: \"med_123\", alt: \"Logo\" }\n * }, db);\n * ```\n */\nexport async function setSiteSettings(\n\tsettings: SiteSettingsUpdate,\n\tdb: Kysely<Database>,\n): Promise<void> {\n\tconst updates: Record<string, unknown> = {};\n\tconst deletions: string[] = [];\n\tconst seo = settings.seo;\n\n\tfor (const [key, value] of Object.entries(settings)) {\n\t\tif (value === undefined || (key === \"seo\" && seo?.defaultOgImage === null)) continue;\n\t\tif (value === null) deletions.push(`${SETTINGS_PREFIX}${key}`);\n\t\telse updates[`${SETTINGS_PREFIX}${key}`] = value;\n\t}\n\n\ttry {\n\t\tawait withTransaction(db, async (trx) => {\n\t\t\tconst transactionOptions = new OptionsRepository(trx);\n\t\t\tawait transactionOptions.setMany(updates);\n\t\t\tawait transactionOptions.deleteMany(deletions);\n\n\t\t\tif (seo?.defaultOgImage === null) {\n\t\t\t\tconst existingSeo =\n\t\t\t\t\t(await transactionOptions.get<SeoSettings>(`${SETTINGS_PREFIX}seo`)) ?? {};\n\t\t\t\tconst nextSeo = { ...existingSeo, ...seo };\n\t\t\t\tdelete nextSeo.defaultOgImage;\n\t\t\t\tif (Object.keys(nextSeo).length === 0) {\n\t\t\t\t\tawait transactionOptions.delete(`${SETTINGS_PREFIX}seo`);\n\t\t\t\t} else {\n\t\t\t\t\tawait transactionOptions.set(`${SETTINGS_PREFIX}seo`, nextSeo);\n\t\t\t\t}\n\t\t\t}\n\t\t});\n\t} finally {\n\t\tinvalidateSiteSettingsCache();\n\t}\n}\n\n/**\n * Get a single plugin setting by key.\n *\n * Plugin settings are stored in the options table under\n * `plugin:<pluginId>:settings:<key>`.\n */\nexport async function getPluginSetting<T = unknown>(\n\tpluginId: string,\n\tkey: string,\n): Promise<T | undefined> {\n\tconst db = await getDb();\n\treturn getPluginSettingWithDb<T>(pluginId, key, db);\n}\n\n/**\n * Get a single plugin setting by key (with explicit db).\n *\n * @internal Use `getPluginSetting()` in templates and plugin rendering code.\n */\nexport async function getPluginSettingWithDb<T = unknown>(\n\tpluginId: string,\n\tkey: string,\n\tdb: Kysely<Database>,\n): Promise<T | undefined> {\n\tconst options = new OptionsRepository(db);\n\tconst value = await options.get(`plugin:${pluginId}:settings:${key}`);\n\tif (value === null) return undefined;\n\t// eslint-disable-next-line typescript/no-unsafe-type-assertion -- caller supplies the expected plugin setting type\n\treturn (await decodePersistedPluginSetting(pluginId, key, value)) as T;\n}\n\n/**\n * Get all persisted plugin settings for a plugin.\n *\n * Defaults declared in `admin.settingsSchema` are not materialized\n * automatically; callers should apply their own fallback defaults.\n */\nexport async function getPluginSettings(pluginId: string): Promise<Record<string, unknown>> {\n\tconst db = await getDb();\n\treturn getPluginSettingsWithDb(pluginId, db);\n}\n\n/**\n * Get all persisted plugin settings for a plugin (with explicit db).\n *\n * @internal Use `getPluginSettings()` in templates and plugin rendering code.\n */\nexport async function getPluginSettingsWithDb(\n\tpluginId: string,\n\tdb: Kysely<Database>,\n): Promise<Record<string, unknown>> {\n\tconst prefix = `plugin:${pluginId}:settings:`;\n\tconst options = new OptionsRepository(db);\n\tconst allOptions = await options.getByPrefix(prefix);\n\n\tconst entries = [...allOptions].filter(([key]) => key.startsWith(prefix));\n\tconst encryptionKeys = entries.some(([, value]) => isEncryptedPluginSetting(value))\n\t\t? await resolvePluginEncryptionKeys()\n\t\t: undefined;\n\treturn Object.fromEntries(\n\t\tawait Promise.all(\n\t\t\tentries.map(async ([storedKey, value]) => {\n\t\t\t\tconst key = storedKey.slice(prefix.length);\n\t\t\t\treturn [\n\t\t\t\t\tkey,\n\t\t\t\t\tawait decodePersistedPluginSetting(pluginId, key, value, encryptionKeys),\n\t\t\t\t] as const;\n\t\t\t}),\n\t\t),\n\t);\n}\n"],"mappings":";;;;;;;;;;;;;AAcA,MAAM,mBAAmB;AACzB,MAAM,kBAAkB;AACxB,MAAM,WAAW;AACjB,MAAM,iBAAiB;AACvB,MAAM,oBAAoB;AAC1B,MAAM,cAAc,IAAI,aAAa;AACrC,MAAM,cAAc,IAAI,YAAY,SAAS,EAAE,OAAO,MAAM,CAAC;AAU7D,IAAa,+BAAb,cAAkD,MAAM;CACvD,AAAkB,OAAO;CACzB,AAAS;CAMT,YAAY,MAA4C,SAAiB;AACxE,QAAM,QAAQ;AACd,OAAK,OAAO;;;AAId,SAAgB,yBAAyB,OAAiD;AACzF,KAAI,OAAO,UAAU,YAAY,UAAU,QAAQ,MAAM,QAAQ,MAAM,CAAE,QAAO;AAChF,QACC,OAAO,KAAK,MAAM,CAAC,WAAW,KAC9B,aAAa,SACb,MAAM,YAAY,mBAClB,OAAO,SACP,MAAM,MAAM,oBACZ,SAAS,SACT,OAAO,MAAM,QAAQ,YACrB,eAAe,KAAK,MAAM,IAAI,IAC9B,QAAQ,SACR,OAAO,MAAM,OAAO,YACpB,kBAAkB,KAAK,MAAM,GAAG,IAChC,gBAAgB,SAChB,OAAO,MAAM,eAAe,YAC5B,kBAAkB,KAAK,MAAM,WAAW;;AAI1C,SAAS,eAAe,UAAkB,KAAyB;AAClE,QAAO,YAAY,OAClB,KAAK,UAAU;EAAC;EAAyB;EAAkB;EAAU;EAAI,CAAC,CAC1E;;AAGF,SAAS,YAAY,OAAgC;AACpD,QAAO,MAAM,OAAO,CAAC;;AAGtB,eAAe,oBAAoB,KAA0B,OAAqC;AACjG,QAAO,OAAO,OAAO,UAAU,OAAO,YAAY,IAAI,IAAI,EAAE,WAAW,OAAO,CAAC,MAAM,CAAC;;AAGvF,eAAe,cACd,MACwC;AACxC,QAAO,SAAS,SAAY,6BAA6B,GAAG;;AAG7D,eAAsB,qBACrB,UACA,KACA,OACA,MACkC;CAElC,MAAM,WADW,MAAM,cAAc,KAAK,IACf;AAC3B,KAAI,CAAC,QACJ,OAAM,IAAI,6BACT,yCACA,uDACA;AAGF,KAAI;EACH,MAAM,KAAK,OAAO,gBAAgB,IAAI,WAAW,SAAS,CAAC;EAC3D,MAAM,YAAY,MAAM,oBAAoB,SAAS,UAAU;EAC/D,MAAM,aAAa,MAAM,OAAO,OAAO,QACtC;GACC,MAAM;GACN,IAAI,YAAY,GAAG;GACnB,gBAAgB,YAAY,eAAe,UAAU,IAAI,CAAC;GAC1D,EACD,WACA,YAAY,YAAY,OAAO,MAAM,CAAC,CACtC;AACD,SAAO;GACN,SAAS;GACT,GAAG;GACH,KAAK,QAAQ;GACb,IAAI,gBAAgB,GAAG;GACvB,YAAY,gBAAgB,IAAI,WAAW,WAAW,CAAC;GACvD;UACO,OAAO;AACf,MAAI,iBAAiB,6BAA8B,OAAM;AACzD,QAAM,IAAI,6BACT,oCACA,+CACA;;;AAIH,eAAsB,qBACrB,UACA,KACA,UACA,MACkB;CAClB,MAAM,WAAW,MAAM,cAAc,KAAK;AAC1C,KAAI,CAAC,UAAU,OACd,OAAM,IAAI,6BACT,yCACA,sFACA;CAEF,MAAM,UAAU,SAAS,MAAM,cAAc,UAAU,QAAQ,SAAS,IAAI;AAC5E,KAAI,CAAC,QACJ,OAAM,IAAI,6BACT,yCACA,8DACA;AAGF,KAAI;EACH,MAAM,KAAK,gBAAgB,SAAS,GAAG;EACvC,MAAM,aAAa,gBAAgB,SAAS,WAAW;AACvD,MAAI,GAAG,eAAe,YAAY,WAAW,aAAa,GACzD,OAAM,IAAI,MAAM,mBAAmB;EACpC,MAAM,YAAY,MAAM,oBAAoB,SAAS,UAAU;EAC/D,MAAM,YAAY,MAAM,OAAO,OAAO,QACrC;GACC,MAAM;GACN,IAAI,YAAY,GAAG;GACnB,gBAAgB,YAAY,eAAe,UAAU,IAAI,CAAC;GAC1D,EACD,WACA,YAAY,WAAW,CACvB;AACD,SAAO,YAAY,OAAO,UAAU;SAC7B;AACP,QAAM,IAAI,6BACT,oCACA,+CACA;;;AAIH,SAAS,cAAc,QAAsC,KAAsB;AAClF,QAAO,OAAO,MAAM,SAAS;;AAG9B,eAAsB,yBACrB,UACA,KACA,OACA,QACA,MACA,UACmB;AACnB,KAAI,CAAC,cAAc,QAAQ,IAAI,CAAE,QAAO;AACxC,KAAI,OAAO,UAAU,SACpB,OAAM,IAAI,6BACT,oCACA,yCACA;AAEF,YAAW,KAAK,MAAM;AACtB,QAAO,qBAAqB,UAAU,KAAK,OAAO,KAAK;;AAGxD,eAAsB,yBACrB,UACA,KACA,OACA,QACA,MACA,UACa;AACb,KAAI,CAAC,cAAc,QAAQ,IAAI,EAAE;AAChC,MAAI,yBAAyB,MAAM,CAClC,OAAM,IAAI,6BACT,oCACA,uDACA;AAGF,SAAO;;AAER,KAAI,OAAO,UAAU,UAAU;AAC9B,aAAW,KAAK,MAAM;AAEtB,SAAO;;AAER,KAAI,CAAC,yBAAyB,MAAM,CACnC,OAAM,IAAI,6BACT,oCACA,0DACA;CAEF,MAAM,YAAY,MAAM,qBAAqB,UAAU,KAAK,OAAO,KAAK;AACxE,YAAW,KAAK,UAAU;AAE1B,QAAO;;AAGR,SAAgB,qBACf,aACA,UACA,SAAuC,EAAE,EACzC,MACA,UACiB;CACjB,MAAM,SAAS,UAAU,SAAS;CAClC,MAAM,aAAa,QAAgB;AAClC,mBAAiB,IAAI;AACrB,SAAO,GAAG,SAAS;;AAGpB,QAAO;EACN,MAAM,IAAO,KAAgC;GAC5C,MAAM,QAAQ,MAAM,YAAY,IAAI,UAAU,IAAI,CAAC;AACnD,UAAO,UAAU,OACd,OACA,yBAA4B,UAAU,KAAK,OAAO,QAAQ,MAAM,SAAS;;EAE7E,MAAM,aAAgB,KAAgD;GACrE,MAAM,QAAQ,MAAM,YAAY,aAAa,UAAU,IAAI,CAAC;AAC5D,OAAI,CAAC,MAAO,QAAO;AACnB,UAAO;IACN,OAAO,MAAM,yBACZ,UACA,KACA,MAAM,OACN,QACA,MACA,SACA;IACD,UAAU,MAAM;IAChB;;EAEF,MAAM,cACL,KACA,kBACA,OACkC;AAClC,UAAO,YAAY,cAClB,UAAU,IAAI,EACd,kBACA,MAAM,yBAAyB,UAAU,KAAK,OAAO,QAAQ,MAAM,SAAS,CAC5E;;EAEF,iBAAiB,KAAa,kBAA4D;AACzF,UAAO,YAAY,iBAAiB,UAAU,IAAI,EAAE,iBAAiB;;EAEtE,MAAM,IAAI,KAAa,OAA+B;AACrD,SAAM,YAAY,IACjB,UAAU,IAAI,EACd,MAAM,yBAAyB,UAAU,KAAK,OAAO,QAAQ,MAAM,SAAS,CAC5E;;EAEF,OAAO,KAA+B;AACrC,UAAO,YAAY,OAAO,UAAU,IAAI,CAAC;;EAE1C,MAAM,KAAK,YAAY,IAAqD;AAC3E,oBAAiB,aAAa,IAAI;GAClC,MAAM,SAAS,MAAM,YAAY,YAAY,GAAG,SAAS,YAAY;GACrE,MAAM,SAAiD,EAAE;AACzD,QAAK,MAAM,CAAC,SAAS,UAAU,QAAQ;IACtC,MAAM,MAAM,QAAQ,MAAM,OAAO,OAAO;AACxC,WAAO,KAAK;KACX;KACA,OAAO,MAAM,yBAAyB,UAAU,KAAK,OAAO,QAAQ,MAAM,SAAS;KACnF,CAAC;;AAEH,UAAO;;EAER;;;;;;AClRF,MAAM,2BAA2B;;AAiBjC,MAAM,kBAAkB;AAExB,SAAS,8BAA8B,OAAkD;AACxF,QACC,OAAO,UAAU,YACjB,UAAU,QACV,CAAC,MAAM,QAAQ,MAAM,IACrB,aAAa,SACb,MAAM,YAAY;;AAIpB,eAAe,6BACd,UACA,KACA,OACA,gBACmB;AACnB,KAAI,yBAAyB,MAAM,CAClC,QAAO,qBAAqB,UAAU,KAAK,OAAO,eAAe;AAElE,KAAI,8BAA8B,MAAM,CACvC,OAAM,IAAI,6BACT,oCACA,0DACA;AAEF,QAAO;;;;;;;;;;;;;;;;;;AAmBR,MAAM,0BAA0B,OAAO,IAAI,uBAAuB;AAClE,MAAM,IAAI;AACV,MAAM,gBAEJ,EAAE,mCACI;CACN,MAAM,IAAI,yBAAgD;AAC1D,GAAE,2BAA2B;AAC7B,QAAO;IACJ;;;;;;;;AASL,SAAgB,8BAAoC;AACnD,6BAA4B,cAAc;AAE1C,uBAAsB,yBAAyB;;;;;AAMhD,SAAS,iBAAiB,OAAyC;AAClE,QAAO,OAAO,UAAU,YAAY,UAAU,QAAQ,aAAa;;;;;;;;;;AAWpE,eAAe,sBACd,UACA,IACA,UACsC;AACtC,KAAI,CAAC,UAAU,QACd,QAAO;AAGR,KAAI;EAEH,MAAM,QAAQ,MADI,IAAI,gBAAgB,GAAG,CACX,SAAS,SAAS,QAAQ;AAExD,MAAI,MAEH,QAAO;GACN,GAAG;GACH,KAAK,2BAA2B,MAAM;GACtC,aAAa,MAAM;GACnB,GAAI,MAAM,UAAU,OAAO,EAAE,OAAO,MAAM,OAAO,GAAG,EAAE;GACtD,GAAI,MAAM,WAAW,OAAO,EAAE,QAAQ,MAAM,QAAQ,GAAG,EAAE;GACzD;SAEK;AAIR,QAAO;;;;;;;;;;;;;;;;;;;;AAqBR,eAAsB,eACrB,KACuC;CAOvC,MAAM,SAAS,iBAAwC,eAAe;AACtE,KAAI,OAEH,SADiB,MAAM,QACP;AAKjB,QAAO,cAAc,eAAe,OAAO,YAAY;AAEtD,SAAO,qBAAqB,KADjB,MAAM,OAAO,CACY;GACnC;;;;;;;;AASH,eAAsB,qBACrB,KACA,IACA,UAA0B,MACa;CAEvC,MAAM,QAAQ,MADE,IAAI,kBAAkB,GAAG,CACb,IAAqB,GAAG,kBAAkB,MAAM;AAE5E,KAAI,CAAC,MACJ;AAMD,MAAK,QAAQ,UAAU,QAAQ,cAAc,iBAAiB,MAAM,CAGnE,QAFiB,MAAM,sBAAsB,OAAO,IAAI,QAAQ;AAKjE,KAAI,QAAQ,SAAS,SAAS,OAAO,UAAU,UAAU;EAExD,MAAM,MAAM;AACZ,MAAI,IAAI,eAMP,QALiB;GAChB,GAAG;GACH,gBAAgB,MAAM,sBAAsB,IAAI,gBAAgB,IAAI,QAAQ;GAC5E;;AAMH,QAAO;;;;;;;;;;;;;;;;;AAkBR,SAAgB,kBAAkD;AAMjE,QAAO,cAAc,sBACpB,mBACC,qBAEC,YAAY;EACX,WAAW;EACX,KAAK;EACL,MAAM,YAAY;AAEjB,UAAO,sBADI,MAAM,OAAO,CACQ;;EAEjC,CAAC,EACH;EAAE,SAAS,YAAY,YAAY,QAAQ;EAAE,gBAAgB;EAAQ,CACrE,CACD;;;;;;;;AASF,eAAsB,+BAGnB;AAEF,QAAO;EAAE,MADI,MAAM,iBAAiB;EACrB,WAAW,EAAE,MAAM,CAAC,iBAAiB,CAAC,EAAE;EAAE;;;;;;;;AAS1D,eAAsB,sBACrB,IACA,UAA0B,MACO;CAEjC,MAAM,aAAa,MADH,IAAI,kBAAkB,GAAG,CACR,YAAY,gBAAgB;CAE7D,MAAM,WAAoC,EAAE;AAG5C,MAAK,MAAM,CAAC,KAAK,UAAU,YAAY;EACtC,MAAM,aAAa,IAAI,QAAQ,iBAAiB,GAAG;AACnD,WAAS,cAAc;;CAGxB,MAAM,gBAAgB;AAGtB,KAAI,cAAc,KACjB,eAAc,OAAO,MAAM,sBAAsB,cAAc,MAAM,IAAI,QAAQ;AAElF,KAAI,cAAc,QACjB,eAAc,UAAU,MAAM,sBAAsB,cAAc,SAAS,IAAI,QAAQ;AAExF,KAAI,cAAc,KAAK,eACtB,eAAc,MAAM;EACnB,GAAG,cAAc;EACjB,gBAAgB,MAAM,sBAAsB,cAAc,IAAI,gBAAgB,IAAI,QAAQ;EAC1F;AAGF,QAAO;;;;;;;;;;;;;;;;;;;;;;;;AAyBR,eAAsB,gBACrB,UACA,IACgB;CAChB,MAAM,UAAmC,EAAE;CAC3C,MAAM,YAAsB,EAAE;CAC9B,MAAM,MAAM,SAAS;AAErB,MAAK,MAAM,CAAC,KAAK,UAAU,OAAO,QAAQ,SAAS,EAAE;AACpD,MAAI,UAAU,UAAc,QAAQ,SAAS,KAAK,mBAAmB,KAAO;AAC5E,MAAI,UAAU,KAAM,WAAU,KAAK,GAAG,kBAAkB,MAAM;MACzD,SAAQ,GAAG,kBAAkB,SAAS;;AAG5C,KAAI;AACH,QAAM,gBAAgB,IAAI,OAAO,QAAQ;GACxC,MAAM,qBAAqB,IAAI,kBAAkB,IAAI;AACrD,SAAM,mBAAmB,QAAQ,QAAQ;AACzC,SAAM,mBAAmB,WAAW,UAAU;AAE9C,OAAI,KAAK,mBAAmB,MAAM;IAGjC,MAAM,UAAU;KAAE,GADhB,MAAM,mBAAmB,IAAiB,GAAG,gBAAgB,KAAK,IAAK,EAAE;KACzC,GAAG;KAAK;AAC1C,WAAO,QAAQ;AACf,QAAI,OAAO,KAAK,QAAQ,CAAC,WAAW,EACnC,OAAM,mBAAmB,OAAO,GAAG,gBAAgB,KAAK;QAExD,OAAM,mBAAmB,IAAI,GAAG,gBAAgB,MAAM,QAAQ;;IAG/D;WACO;AACT,+BAA6B;;;;;;;;;AAU/B,eAAsB,iBACrB,UACA,KACyB;AAEzB,QAAO,uBAA0B,UAAU,KADhC,MAAM,OAAO,CAC2B;;;;;;;AAQpD,eAAsB,uBACrB,UACA,KACA,IACyB;CAEzB,MAAM,QAAQ,MADE,IAAI,kBAAkB,GAAG,CACb,IAAI,UAAU,SAAS,YAAY,MAAM;AACrE,KAAI,UAAU,KAAM,QAAO;AAE3B,QAAQ,MAAM,6BAA6B,UAAU,KAAK,MAAM;;;;;;;;AASjE,eAAsB,kBAAkB,UAAoD;AAE3F,QAAO,wBAAwB,UADpB,MAAM,OAAO,CACoB;;;;;;;AAQ7C,eAAsB,wBACrB,UACA,IACmC;CACnC,MAAM,SAAS,UAAU,SAAS;CAIlC,MAAM,UAAU,CAAC,GAFE,MADH,IAAI,kBAAkB,GAAG,CACR,YAAY,OAAO,CAErB,CAAC,QAAQ,CAAC,SAAS,IAAI,WAAW,OAAO,CAAC;CACzE,MAAM,iBAAiB,QAAQ,MAAM,GAAG,WAAW,yBAAyB,MAAM,CAAC,GAChF,MAAM,6BAA6B,GACnC;AACH,QAAO,OAAO,YACb,MAAM,QAAQ,IACb,QAAQ,IAAI,OAAO,CAAC,WAAW,WAAW;EACzC,MAAM,MAAM,UAAU,MAAM,OAAO,OAAO;AAC1C,SAAO,CACN,KACA,MAAM,6BAA6B,UAAU,KAAK,OAAO,eAAe,CACxE;GACA,CACF,CACD"}

package/dist/{settings-2xNYr90o.mjs → settings-Dyj6v8C4.mjs}

@@ -1,5 +1,5 @@
 import { u as __exportAll } from "./runner-1y4J9fJB.mjs";
-import { c as setSiteSettings, o as getSiteSettingsWithDb } from "./settings-CgjRWGW9.mjs";
+import { c as setSiteSettings, o as getSiteSettingsWithDb } from "./settings-B4vDl1fK.mjs";
 
 //#region src/api/handlers/settings.ts
 var settings_exports = /* @__PURE__ */ __exportAll({
@@ -48,4 +48,4 @@ async function handleSettingsUpdate(db, storage, input) {
 
 //#endregion
 export { handleSettingsUpdate as n, settings_exports as r, handleSettingsGet as t };
-//# sourceMappingURL=settings-2xNYr90o.mjs.map
+//# sourceMappingURL=settings-Dyj6v8C4.mjs.map

package/dist/{settings-2xNYr90o.mjs.map → settings-Dyj6v8C4.mjs.map}

@@ -1 +1 @@
-{"version":3,"file":"settings-2xNYr90o.mjs","names":[],"sources":["../src/api/handlers/settings.ts"],"sourcesContent":["/**\n * Settings handlers\n */\n\nimport type { Kysely } from \"kysely\";\n\nimport type { Database } from \"../../database/types.js\";\nimport { getSiteSettingsWithDb, setSiteSettings } from \"../../settings/index.js\";\nimport type { SiteSettings, SiteSettingsUpdate } from \"../../settings/types.js\";\nimport type { Storage } from \"../../storage/types.js\";\nimport type { ApiResult } from \"../types.js\";\n\n/**\n * Get all site settings\n */\nexport async function handleSettingsGet(\n\tdb: Kysely<Database>,\n\tstorage: Storage | null,\n): Promise<ApiResult<Partial<SiteSettings>>> {\n\ttry {\n\t\tconst settings = await getSiteSettingsWithDb(db, storage);\n\t\treturn { success: true, data: settings };\n\t} catch {\n\t\treturn {\n\t\t\tsuccess: false,\n\t\t\terror: { code: \"SETTINGS_READ_ERROR\", message: \"Failed to get settings\" },\n\t\t};\n\t}\n}\n\n/**\n * Update site settings\n */\nexport async function handleSettingsUpdate(\n\tdb: Kysely<Database>,\n\tstorage: Storage | null,\n\tinput: SiteSettingsUpdate,\n): Promise<ApiResult<Partial<SiteSettings>>> {\n\ttry {\n\t\tawait setSiteSettings(input, db);\n\t\tconst updatedSettings = await getSiteSettingsWithDb(db, storage);\n\t\treturn { success: true, data: updatedSettings };\n\t} catch {\n\t\treturn {\n\t\t\tsuccess: false,\n\t\t\terror: { code: \"SETTINGS_UPDATE_ERROR\", message: \"Failed to update settings\" },\n\t\t};\n\t}\n}\n"],"mappings":";;;;;;;;;;;AAeA,eAAsB,kBACrB,IACA,SAC4C;AAC5C,KAAI;AAEH,SAAO;GAAE,SAAS;GAAM,MADP,MAAM,sBAAsB,IAAI,QAAQ;GACjB;SACjC;AACP,SAAO;GACN,SAAS;GACT,OAAO;IAAE,MAAM;IAAuB,SAAS;IAA0B;GACzE;;;;;;AAOH,eAAsB,qBACrB,IACA,SACA,OAC4C;AAC5C,KAAI;AACH,QAAM,gBAAgB,OAAO,GAAG;AAEhC,SAAO;GAAE,SAAS;GAAM,MADA,MAAM,sBAAsB,IAAI,QAAQ;GACjB;SACxC;AACP,SAAO;GACN,SAAS;GACT,OAAO;IAAE,MAAM;IAAyB,SAAS;IAA6B;GAC9E"}
+{"version":3,"file":"settings-Dyj6v8C4.mjs","names":[],"sources":["../src/api/handlers/settings.ts"],"sourcesContent":["/**\n * Settings handlers\n */\n\nimport type { Kysely } from \"kysely\";\n\nimport type { Database } from \"../../database/types.js\";\nimport { getSiteSettingsWithDb, setSiteSettings } from \"../../settings/index.js\";\nimport type { SiteSettings, SiteSettingsUpdate } from \"../../settings/types.js\";\nimport type { Storage } from \"../../storage/types.js\";\nimport type { ApiResult } from \"../types.js\";\n\n/**\n * Get all site settings\n */\nexport async function handleSettingsGet(\n\tdb: Kysely<Database>,\n\tstorage: Storage | null,\n): Promise<ApiResult<Partial<SiteSettings>>> {\n\ttry {\n\t\tconst settings = await getSiteSettingsWithDb(db, storage);\n\t\treturn { success: true, data: settings };\n\t} catch {\n\t\treturn {\n\t\t\tsuccess: false,\n\t\t\terror: { code: \"SETTINGS_READ_ERROR\", message: \"Failed to get settings\" },\n\t\t};\n\t}\n}\n\n/**\n * Update site settings\n */\nexport async function handleSettingsUpdate(\n\tdb: Kysely<Database>,\n\tstorage: Storage | null,\n\tinput: SiteSettingsUpdate,\n): Promise<ApiResult<Partial<SiteSettings>>> {\n\ttry {\n\t\tawait setSiteSettings(input, db);\n\t\tconst updatedSettings = await getSiteSettingsWithDb(db, storage);\n\t\treturn { success: true, data: updatedSettings };\n\t} catch {\n\t\treturn {\n\t\t\tsuccess: false,\n\t\t\terror: { code: \"SETTINGS_UPDATE_ERROR\", message: \"Failed to update settings\" },\n\t\t};\n\t}\n}\n"],"mappings":";;;;;;;;;;;AAeA,eAAsB,kBACrB,IACA,SAC4C;AAC5C,KAAI;AAEH,SAAO;GAAE,SAAS;GAAM,MADP,MAAM,sBAAsB,IAAI,QAAQ;GACjB;SACjC;AACP,SAAO;GACN,SAAS;GACT,OAAO;IAAE,MAAM;IAAuB,SAAS;IAA0B;GACzE;;;;;;AAOH,eAAsB,qBACrB,IACA,SACA,OAC4C;AAC5C,KAAI;AACH,QAAM,gBAAgB,OAAO,GAAG;AAEhC,SAAO;GAAE,SAAS;GAAM,MADA,MAAM,sBAAsB,IAAI,QAAQ;GACjB;SACxC;AACP,SAAO;GACN,SAAS;GACT,OAAO;IAAE,MAAM;IAAyB,SAAS;IAA6B;GAC9E"}

package/dist/{snapshot-CugwUqKQ.mjs → snapshot-PawoX-WG.mjs}

@@ -45,6 +45,8 @@ function parsePreviewSignatureHeader(header) {
 	};
 }
 const MEDIA_FILE_PREFIX = "/_emdash/api/media/file/";
+const MEDIA_FILE_SUFFIX = /[?#]/;
+const EXTERNAL_OR_ROOT_URL = /^(?:[a-z][a-z0-9+.-]*:|\/)/i;
 /**
 * Parse a JSON string value and inject `src` for local media objects.
 * Returns the original string if it's not a local media value.
@@ -108,13 +110,42 @@ const SYSTEM_TABLES = [
 	"_emdash_widgets",
 	"_emdash_seo",
 	"_emdash_migrations",
-	"taxonomies",
 	"content_taxonomies",
-	"media",
+	"taxonomies",
 	"options",
+	"media",
 	"revisions"
 ];
 /**
+* Published snapshots are available to preview-signature callers, so every
+* system table must be classified explicitly. Adding a snapshot table without
+* choosing a policy is a type error rather than an accidental data export.
+*/
+const PUBLISHED_TABLE_POLICIES = {
+	_emdash_block_types: "full",
+	_emdash_block_type_versions: "full",
+	_emdash_collections: "full",
+	_emdash_fields: "full",
+	_emdash_taxonomy_defs: "full",
+	_emdash_taxonomy_def_groups: "full",
+	_emdash_menus: "full",
+	_emdash_menu_items: "content-linked",
+	_emdash_sections: "full",
+	_emdash_widget_areas: "full",
+	_emdash_widgets: "full",
+	_emdash_seo: "content-linked",
+	_emdash_migrations: "full",
+	content_taxonomies: "content-linked",
+	taxonomies: "content-linked",
+	options: "content-linked",
+	media: "content-linked",
+	revisions: "omit"
+};
+const SYSTEM_TABLE_SET = new Set(SYSTEM_TABLES);
+function isSystemTable(tableName) {
+	return SYSTEM_TABLE_SET.has(tableName);
+}
+/**
 * Table name prefixes excluded from snapshots (auth/security data).
 */
 const EXCLUDED_PREFIXES = [
@@ -165,6 +196,144 @@ function normalizeRows(rows, types) {
 	}
 	return rows;
 }
+function createPublishedProjection() {
+	return {
+		content: /* @__PURE__ */ new Map(),
+		taxonomyGroups: /* @__PURE__ */ new Set(),
+		mediaIds: /* @__PURE__ */ new Set(),
+		mediaStorageKeys: /* @__PURE__ */ new Set()
+	};
+}
+function readString(value) {
+	return typeof value === "string" && value.length > 0 ? value : null;
+}
+function recordPublishedContent(projection, tableName, rows) {
+	const references = {
+		ids: /* @__PURE__ */ new Set(),
+		translationGroups: /* @__PURE__ */ new Set()
+	};
+	for (const row of rows) {
+		const id = readString(row.id);
+		const translationGroup = readString(row.translation_group);
+		if (id) references.ids.add(id);
+		if (translationGroup) references.translationGroups.add(translationGroup);
+	}
+	projection.content.set(tableName.slice(3), references);
+}
+function isPublishedContentReference(projection, collection, reference) {
+	const collectionName = readString(collection);
+	const id = readString(reference);
+	if (!collectionName || !id) return false;
+	const references = projection.content.get(collectionName);
+	return references?.ids.has(id) === true || references?.translationGroups.has(id) === true;
+}
+function collectMediaReferences(value, projection) {
+	if (typeof value === "string") {
+		if (value.startsWith(MEDIA_FILE_PREFIX)) {
+			const storageKey = value.slice(24).split(MEDIA_FILE_SUFFIX, 1)[0];
+			if (storageKey) projection.mediaStorageKeys.add(storageKey);
+			return;
+		}
+		const trimmed = value.trimStart();
+		if (trimmed.startsWith("{") || trimmed.startsWith("[")) try {
+			collectMediaReferences(JSON.parse(value), projection);
+		} catch {}
+		return;
+	}
+	if (Array.isArray(value)) {
+		for (const item of value) collectMediaReferences(item, projection);
+		return;
+	}
+	if (!isRecord(value)) return;
+	const mediaId = readString(value.mediaId);
+	if (mediaId) projection.mediaIds.add(mediaId);
+	const provider = readString(value.provider);
+	const meta = isRecord(value.meta) ? value.meta : null;
+	const localMediaId = readString(value.id);
+	if ((provider === "local" || !provider && meta) && localMediaId) projection.mediaIds.add(localMediaId);
+	const storageKey = readString(value.storageKey) ?? readString(meta?.storageKey);
+	if (storageKey) projection.mediaStorageKeys.add(storageKey);
+	const assetRef = readString((isRecord(value.asset) ? value.asset : null)?._ref);
+	if (assetRef) {
+		projection.mediaIds.add(assetRef);
+		projection.mediaStorageKeys.add(assetRef);
+	}
+	for (const child of Object.values(value)) collectMediaReferences(child, projection);
+}
+function projectTaxonomyRows(rows, projection) {
+	const includedGroups = new Set(projection.taxonomyGroups);
+	const includedIds = new Set(projection.taxonomyGroups);
+	let changed = true;
+	while (changed) {
+		changed = false;
+		for (const row of rows) {
+			const id = readString(row.id);
+			const group = readString(row.translation_group);
+			if (!id) continue;
+			if (includedIds.has(id) || group && includedGroups.has(group)) {
+				if (!includedIds.has(id)) {
+					includedIds.add(id);
+					changed = true;
+				}
+				if (group && !includedGroups.has(group)) {
+					includedGroups.add(group);
+					changed = true;
+				}
+				const parentId = readString(row.parent_id);
+				if (parentId && !includedIds.has(parentId)) {
+					includedIds.add(parentId);
+					changed = true;
+				}
+			}
+		}
+	}
+	return rows.filter((row) => {
+		const id = readString(row.id);
+		const group = readString(row.translation_group);
+		return id && includedIds.has(id) || group && includedGroups.has(group);
+	});
+}
+function projectPublishedRows(tableName, rows, projection) {
+	switch (tableName) {
+		case "_emdash_seo": return rows.filter((row) => {
+			if (!isPublishedContentReference(projection, row.collection, row.content_id)) return false;
+			const image = readString(row.seo_image);
+			if (image) {
+				collectMediaReferences(image, projection);
+				if (!EXTERNAL_OR_ROOT_URL.test(image)) {
+					projection.mediaIds.add(image);
+					projection.mediaStorageKeys.add(image);
+				}
+			}
+			return true;
+		});
+		case "content_taxonomies": return rows.filter((row) => {
+			const published = isPublishedContentReference(projection, row.collection, row.entry_id);
+			const taxonomyGroup = readString(row.taxonomy_id);
+			if (published && taxonomyGroup) projection.taxonomyGroups.add(taxonomyGroup);
+			return published;
+		});
+		case "taxonomies": return projectTaxonomyRows(rows, projection);
+		case "_emdash_menu_items": return rows.filter((row) => {
+			const type = readString(row.type);
+			const referenceId = readString(row.reference_id);
+			if (!referenceId || type === "custom") return true;
+			if (type === "taxonomy") {
+				projection.taxonomyGroups.add(referenceId);
+				return true;
+			}
+			if (type === "collection" && !row.reference_id) return true;
+			return isPublishedContentReference(projection, readString(row.reference_collection) ?? (type === "post" || type === "page" ? `${type}s` : null), referenceId);
+		});
+		case "media": return rows.filter((row) => {
+			const id = readString(row.id);
+			const storageKey = readString(row.storage_key);
+			return id !== null && projection.mediaIds.has(id) || storageKey !== null && projection.mediaStorageKeys.has(storageKey);
+		});
+		case "options": return rows;
+		default: return [];
+	}
+}
 /**
 * Generate a portable database snapshot.
 *
@@ -176,6 +345,8 @@ async function generateSnapshot(db, options) {
 	const includeTrashed = options?.includeTrashed ?? false;
 	const optionPrefixes = options?.optionPrefixes ?? SAFE_OPTIONS_PREFIXES;
 	const optionKeys = new Set(options?.optionKeys);
+	const publishedOnly = !includeDrafts && !includeTrashed;
+	const publishedProjection = createPublishedProjection();
 	const allTables = [...await listTablesLike(db, "ec_%"), ...SYSTEM_TABLES];
 	const tables = {};
 	const schema = {};
@@ -204,6 +375,7 @@ async function generateSnapshot(db, options) {
 						WHERE deleted_at IS NULL
 						AND status = 'published'
 					`.execute(db)).rows;
+		else if (publishedOnly && isSystemTable(tableName) && PUBLISHED_TABLE_POLICIES[tableName] === "omit") rows = [];
 		else if (tableName === "options") rows = (await sql`
 					SELECT * FROM ${sql.ref(tableName)}
 				`.execute(db)).rows.filter((row) => {
@@ -213,6 +385,11 @@ async function generateSnapshot(db, options) {
 		else rows = (await sql`
 					SELECT * FROM ${sql.ref(tableName)}
 				`.execute(db)).rows;
+		if (publishedOnly) {
+			if (tableName.startsWith("ec_")) recordPublishedContent(publishedProjection, tableName, rows);
+			else if (isSystemTable(tableName) && PUBLISHED_TABLE_POLICIES[tableName] === "content-linked") rows = projectPublishedRows(tableName, rows, publishedProjection);
+			for (const row of rows) collectMediaReferences(row, publishedProjection);
+		}
 		if (rows.length > 0) tables[tableName] = normalizeRows(rows, types);
 	}
 	if (options?.origin) {
@@ -234,4 +411,4 @@ async function generateSnapshot(db, options) {
 
 //#endregion
 export { parsePreviewSignatureHeader as n, verifyPreviewSignature as r, generateSnapshot as t };
-//# sourceMappingURL=snapshot-CugwUqKQ.mjs.map
+//# sourceMappingURL=snapshot-PawoX-WG.mjs.map

package/dist/snapshot-PawoX-WG.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"snapshot-PawoX-WG.mjs","names":[],"sources":["../src/api/handlers/snapshot.ts"],"sourcesContent":["/**\n * Snapshot handler — generates a portable database snapshot.\n *\n * Returns all content tables, schema definitions, and supporting data\n * needed to render content in an isolated preview database.\n *\n * Used by:\n * - DO preview database (EmDashPreviewDB.populateFromSnapshot)\n * - Future: CLI export, backup, site migration\n */\n\nimport type { Kysely } from \"kysely\";\nimport { sql } from \"kysely\";\n\nimport { listTableColumns, listTablesLike } from \"../../database/dialect-helpers.js\";\nimport type { Database } from \"../../database/types.js\";\n\n// ─�� Preview signature verification ──────────────────────────────\n\n/**\n * Verify HMAC-SHA256 preview signature using crypto.subtle.\n * Returns true if the signature is valid and not expired.\n */\nexport async function verifyPreviewSignature(\n\tsource: string,\n\texp: number,\n\tsig: string,\n\tsecret: string,\n): Promise<boolean> {\n\tif (exp < Date.now() / 1000) return false;\n\n\tconst encoder = new TextEncoder();\n\tconst key = await crypto.subtle.importKey(\n\t\t\"raw\",\n\t\tencoder.encode(secret),\n\t\t{ name: \"HMAC\", hash: \"SHA-256\" },\n\t\tfalse,\n\t\t[\"verify\"],\n\t);\n\n\tconst sigBytes = new Uint8Array(sig.length / 2);\n\tfor (let i = 0; i < sig.length; i += 2) {\n\t\tsigBytes[i / 2] = parseInt(sig.substring(i, i + 2), 16);\n\t}\n\n\treturn crypto.subtle.verify(\"HMAC\", key, sigBytes, encoder.encode(`${source}:${exp}`));\n}\n\n/**\n * Parse an X-Preview-Signature header value into its components.\n *\n * Format: \"source:exp:sig\" where source is a URL (contains colons),\n * exp is a unix timestamp, and sig is 64 hex chars.\n *\n * Parses from the right since source URLs contain colons.\n *\n * @returns Parsed components, or null if the format is invalid\n */\nexport function parsePreviewSignatureHeader(\n\theader: string,\n): { source: string; exp: number; sig: string } | null {\n\tconst lastColon = header.lastIndexOf(\":\");\n\tif (lastColon <= 0) return null;\n\n\tconst sig = header.substring(lastColon + 1);\n\tif (sig.length !== 64) return null;\n\n\tconst rest = header.substring(0, lastColon);\n\tconst secondLastColon = rest.lastIndexOf(\":\");\n\tif (secondLastColon <= 0) return null;\n\n\tconst source = rest.substring(0, secondLastColon);\n\tconst exp = parseInt(rest.substring(secondLastColon + 1), 10);\n\n\tif (isNaN(exp) || source.length === 0) return null;\n\n\treturn { source, exp, sig };\n}\n\n// ── Media URL rewriting ─────────────────────────────────────────\n\nconst MEDIA_FILE_PREFIX = \"/_emdash/api/media/file/\";\nconst MEDIA_FILE_SUFFIX = /[?#]/;\nconst EXTERNAL_OR_ROOT_URL = /^(?:[a-z][a-z0-9+.-]*:|\\/)/i;\n\n/**\n * Parse a JSON string value and inject `src` for local media objects.\n * Returns the original string if it's not a local media value.\n */\nfunction injectMediaSrc(jsonStr: string, origin: string): string {\n\ttry {\n\t\tconst obj = JSON.parse(jsonStr);\n\t\tif (typeof obj !== \"object\" || obj === null || Array.isArray(obj)) return jsonStr;\n\t\tif (injectMediaSrcInto(obj, origin)) {\n\t\t\treturn JSON.stringify(obj);\n\t\t}\n\t\treturn jsonStr;\n\t} catch {\n\t\treturn jsonStr;\n\t}\n}\n\nfunction isRecord(value: unknown): value is Record<string, unknown> {\n\treturn typeof value === \"object\" && value !== null && !Array.isArray(value);\n}\n\n/**\n * Recursively walk an object and inject `src` into local media values.\n * Returns true if any modifications were made.\n */\nfunction injectMediaSrcInto(obj: Record<string, unknown>, origin: string): boolean {\n\tlet modified = false;\n\n\t// Check if this object itself is a local media value\n\tif ((obj.provider === \"local\" || (!obj.provider && obj.id && obj.meta)) && !obj.src) {\n\t\tconst meta = isRecord(obj.meta) ? obj.meta : undefined;\n\t\tconst storageKey = meta?.storageKey ?? obj.id;\n\t\tif (typeof storageKey === \"string\" && storageKey) {\n\t\t\tobj.src = `${origin}${MEDIA_FILE_PREFIX}${storageKey}`;\n\t\t\tmodified = true;\n\t\t}\n\t}\n\n\t// Recurse into nested objects/arrays (e.g. Portable Text with image blocks)\n\tfor (const value of Object.values(obj)) {\n\t\tif (Array.isArray(value)) {\n\t\t\tfor (const item of value) {\n\t\t\t\tif (isRecord(item)) {\n\t\t\t\t\tif (injectMediaSrcInto(item, origin)) {\n\t\t\t\t\t\tmodified = true;\n\t\t\t\t\t}\n\t\t\t\t}\n\t\t\t}\n\t\t} else if (isRecord(value)) {\n\t\t\tif (injectMediaSrcInto(value, origin)) {\n\t\t\t\tmodified = true;\n\t\t\t}\n\t\t}\n\t}\n\n\treturn modified;\n}\n\n// ── Snapshot generation ─────────────────────────────────────────\n\n/**\n * Safe identifier pattern for snapshot table names.\n * More permissive than validateIdentifier() — allows leading underscores\n * (needed for system tables like _emdash_collections).\n */\nconst SAFE_TABLE_NAME = /^[a-z_][a-z0-9_]*$/;\n\n/** Snapshot shape consumed by the DO preview database */\nexport interface Snapshot {\n\ttables: Record<string, Record<string, unknown>[]>;\n\tschema: Record<\n\t\tstring,\n\t\t{\n\t\t\tcolumns: string[];\n\t\t\ttypes?: Record<string, string>;\n\t\t}\n\t>;\n\tgeneratedAt: string;\n}\n\n/**\n * System tables included in snapshots.\n * Content tables (ec_*) are discovered dynamically.\n */\nconst SYSTEM_TABLES = [\n\t\"_emdash_block_types\",\n\t\"_emdash_block_type_versions\",\n\t\"_emdash_collections\",\n\t\"_emdash_fields\",\n\t\"_emdash_taxonomy_defs\",\n\t\"_emdash_taxonomy_def_groups\",\n\t\"_emdash_menus\",\n\t\"_emdash_menu_items\",\n\t\"_emdash_sections\",\n\t\"_emdash_widget_areas\",\n\t\"_emdash_widgets\",\n\t\"_emdash_seo\",\n\t\"_emdash_migrations\",\n\t\"content_taxonomies\",\n\t\"taxonomies\",\n\t\"options\",\n\t\"media\",\n\t\"revisions\",\n] as const;\n\ntype SystemTable = (typeof SYSTEM_TABLES)[number];\ntype PublishedTablePolicy = \"full\" | \"content-linked\" | \"omit\";\n\n/**\n * Published snapshots are available to preview-signature callers, so every\n * system table must be classified explicitly. Adding a snapshot table without\n * choosing a policy is a type error rather than an accidental data export.\n */\nconst PUBLISHED_TABLE_POLICIES: Record<SystemTable, PublishedTablePolicy> = {\n\t_emdash_block_types: \"full\",\n\t_emdash_block_type_versions: \"full\",\n\t_emdash_collections: \"full\",\n\t_emdash_fields: \"full\",\n\t_emdash_taxonomy_defs: \"full\",\n\t_emdash_taxonomy_def_groups: \"full\",\n\t_emdash_menus: \"full\",\n\t_emdash_menu_items: \"content-linked\",\n\t_emdash_sections: \"full\",\n\t_emdash_widget_areas: \"full\",\n\t_emdash_widgets: \"full\",\n\t_emdash_seo: \"content-linked\",\n\t_emdash_migrations: \"full\",\n\tcontent_taxonomies: \"content-linked\",\n\ttaxonomies: \"content-linked\",\n\toptions: \"content-linked\",\n\tmedia: \"content-linked\",\n\trevisions: \"omit\",\n};\n\nconst SYSTEM_TABLE_SET: ReadonlySet<string> = new Set(SYSTEM_TABLES);\n\nfunction isSystemTable(tableName: string): tableName is SystemTable {\n\treturn SYSTEM_TABLE_SET.has(tableName);\n}\n\ninterface PublishedContentReferences {\n\tids: Set<string>;\n\ttranslationGroups: Set<string>;\n}\n\ninterface PublishedProjection {\n\tcontent: Map<string, PublishedContentReferences>;\n\ttaxonomyGroups: Set<string>;\n\tmediaIds: Set<string>;\n\tmediaStorageKeys: Set<string>;\n}\n\n/**\n * Table name prefixes excluded from snapshots (auth/security data).\n */\nconst EXCLUDED_PREFIXES = [\n\t\"_emdash_api_tokens\",\n\t\"_emdash_oauth_tokens\",\n\t\"_emdash_authorization_codes\",\n\t\"_emdash_device_codes\",\n\t\"_emdash_migrations_lock\",\n\t\"_emdash_transfer_\",\n\t\"_plugin_\",\n\t\"users\",\n\t\"sessions\",\n\t\"credentials\",\n\t\"challenges\",\n];\n\n/**\n * Options key prefixes safe for inclusion in snapshots.\n *\n * The options table contains plugin secrets (plugin:*), passkey challenges\n * (emdash:passkey_pending:*), and setup state that must not leak to\n * preview databases. Only site-level rendering settings are needed.\n */\nconst SAFE_OPTIONS_PREFIXES = [\"site:\"];\n\nfunction isExcluded(tableName: string): boolean {\n\treturn EXCLUDED_PREFIXES.some((prefix) => tableName.startsWith(prefix));\n}\n\ntype SnapshotColumnType = \"TEXT\" | \"INTEGER\" | \"REAL\" | \"BLOB\" | \"JSON\";\n\nfunction normalizeColumnType(type: string): SnapshotColumnType {\n\tswitch (type.toLowerCase()) {\n\t\tcase \"smallint\":\n\t\tcase \"integer\":\n\t\tcase \"bigint\":\n\t\tcase \"boolean\":\n\t\t\treturn \"INTEGER\";\n\t\tcase \"real\":\n\t\tcase \"double precision\":\n\t\tcase \"numeric\":\n\t\tcase \"decimal\":\n\t\t\treturn \"REAL\";\n\t\tcase \"blob\":\n\t\tcase \"bytea\":\n\t\t\treturn \"BLOB\";\n\t\tcase \"json\":\n\t\tcase \"jsonb\":\n\t\t\treturn \"JSON\";\n\t\tdefault:\n\t\t\treturn \"TEXT\";\n\t}\n}\n\nfunction normalizeRows(\n\trows: Record<string, unknown>[],\n\ttypes: Record<string, SnapshotColumnType>,\n): Record<string, unknown>[] {\n\tfor (const row of rows) {\n\t\tfor (const [column, type] of Object.entries(types)) {\n\t\t\tconst value = row[column];\n\t\t\tif (type === \"JSON\" && value !== null && value !== undefined && typeof value !== \"string\") {\n\t\t\t\trow[column] = JSON.stringify(value);\n\t\t\t}\n\t\t}\n\t}\n\treturn rows;\n}\n\nfunction createPublishedProjection(): PublishedProjection {\n\treturn {\n\t\tcontent: new Map(),\n\t\ttaxonomyGroups: new Set(),\n\t\tmediaIds: new Set(),\n\t\tmediaStorageKeys: new Set(),\n\t};\n}\n\nfunction readString(value: unknown): string | null {\n\treturn typeof value === \"string\" && value.length > 0 ? value : null;\n}\n\nfunction recordPublishedContent(\n\tprojection: PublishedProjection,\n\ttableName: string,\n\trows: Record<string, unknown>[],\n): void {\n\tconst references: PublishedContentReferences = {\n\t\tids: new Set(),\n\t\ttranslationGroups: new Set(),\n\t};\n\tfor (const row of rows) {\n\t\tconst id = readString(row.id);\n\t\tconst translationGroup = readString(row.translation_group);\n\t\tif (id) references.ids.add(id);\n\t\tif (translationGroup) references.translationGroups.add(translationGroup);\n\t}\n\tprojection.content.set(tableName.slice(\"ec_\".length), references);\n}\n\nfunction isPublishedContentReference(\n\tprojection: PublishedProjection,\n\tcollection: unknown,\n\treference: unknown,\n): boolean {\n\tconst collectionName = readString(collection);\n\tconst id = readString(reference);\n\tif (!collectionName || !id) return false;\n\tconst references = projection.content.get(collectionName);\n\treturn references?.ids.has(id) === true || references?.translationGroups.has(id) === true;\n}\n\nfunction collectMediaReferences(value: unknown, projection: PublishedProjection): void {\n\tif (typeof value === \"string\") {\n\t\tif (value.startsWith(MEDIA_FILE_PREFIX)) {\n\t\t\tconst storageKey = value.slice(MEDIA_FILE_PREFIX.length).split(MEDIA_FILE_SUFFIX, 1)[0];\n\t\t\tif (storageKey) projection.mediaStorageKeys.add(storageKey);\n\t\t\treturn;\n\t\t}\n\t\tconst trimmed = value.trimStart();\n\t\tif (trimmed.startsWith(\"{\") || trimmed.startsWith(\"[\")) {\n\t\t\ttry {\n\t\t\t\tcollectMediaReferences(JSON.parse(value), projection);\n\t\t\t} catch {\n\t\t\t\t// Not structured data.\n\t\t\t}\n\t\t}\n\t\treturn;\n\t}\n\tif (Array.isArray(value)) {\n\t\tfor (const item of value) collectMediaReferences(item, projection);\n\t\treturn;\n\t}\n\tif (!isRecord(value)) return;\n\n\tconst mediaId = readString(value.mediaId);\n\tif (mediaId) projection.mediaIds.add(mediaId);\n\n\tconst provider = readString(value.provider);\n\tconst meta = isRecord(value.meta) ? value.meta : null;\n\tconst localMediaId = readString(value.id);\n\tif ((provider === \"local\" || (!provider && meta)) && localMediaId) {\n\t\tprojection.mediaIds.add(localMediaId);\n\t}\n\tconst storageKey = readString(value.storageKey) ?? readString(meta?.storageKey);\n\tif (storageKey) projection.mediaStorageKeys.add(storageKey);\n\n\tconst asset = isRecord(value.asset) ? value.asset : null;\n\tconst assetRef = readString(asset?._ref);\n\tif (assetRef) {\n\t\tprojection.mediaIds.add(assetRef);\n\t\tprojection.mediaStorageKeys.add(assetRef);\n\t}\n\n\tfor (const child of Object.values(value)) collectMediaReferences(child, projection);\n}\n\nfunction projectTaxonomyRows(\n\trows: Record<string, unknown>[],\n\tprojection: PublishedProjection,\n): Record<string, unknown>[] {\n\tconst includedGroups = new Set(projection.taxonomyGroups);\n\tconst includedIds = new Set(projection.taxonomyGroups);\n\tlet changed = true;\n\twhile (changed) {\n\t\tchanged = false;\n\t\tfor (const row of rows) {\n\t\t\tconst id = readString(row.id);\n\t\t\tconst group = readString(row.translation_group);\n\t\t\tif (!id) continue;\n\t\t\tif (includedIds.has(id) || (group && includedGroups.has(group))) {\n\t\t\t\tif (!includedIds.has(id)) {\n\t\t\t\t\tincludedIds.add(id);\n\t\t\t\t\tchanged = true;\n\t\t\t\t}\n\t\t\t\tif (group && !includedGroups.has(group)) {\n\t\t\t\t\tincludedGroups.add(group);\n\t\t\t\t\tchanged = true;\n\t\t\t\t}\n\t\t\t\tconst parentId = readString(row.parent_id);\n\t\t\t\tif (parentId && !includedIds.has(parentId)) {\n\t\t\t\t\tincludedIds.add(parentId);\n\t\t\t\t\tchanged = true;\n\t\t\t\t}\n\t\t\t}\n\t\t}\n\t}\n\treturn rows.filter((row) => {\n\t\tconst id = readString(row.id);\n\t\tconst group = readString(row.translation_group);\n\t\treturn (id && includedIds.has(id)) || (group && includedGroups.has(group));\n\t});\n}\n\nfunction projectPublishedRows(\n\ttableName: SystemTable,\n\trows: Record<string, unknown>[],\n\tprojection: PublishedProjection,\n): Record<string, unknown>[] {\n\tswitch (tableName) {\n\t\tcase \"_emdash_seo\":\n\t\t\treturn rows.filter((row) => {\n\t\t\t\tconst published = isPublishedContentReference(projection, row.collection, row.content_id);\n\t\t\t\tif (!published) return false;\n\t\t\t\tconst image = readString(row.seo_image);\n\t\t\t\tif (image) {\n\t\t\t\t\tcollectMediaReferences(image, projection);\n\t\t\t\t\tif (!EXTERNAL_OR_ROOT_URL.test(image)) {\n\t\t\t\t\t\tprojection.mediaIds.add(image);\n\t\t\t\t\t\tprojection.mediaStorageKeys.add(image);\n\t\t\t\t\t}\n\t\t\t\t}\n\t\t\t\treturn true;\n\t\t\t});\n\t\tcase \"content_taxonomies\":\n\t\t\treturn rows.filter((row) => {\n\t\t\t\tconst published = isPublishedContentReference(projection, row.collection, row.entry_id);\n\t\t\t\tconst taxonomyGroup = readString(row.taxonomy_id);\n\t\t\t\tif (published && taxonomyGroup) projection.taxonomyGroups.add(taxonomyGroup);\n\t\t\t\treturn published;\n\t\t\t});\n\t\tcase \"taxonomies\":\n\t\t\treturn projectTaxonomyRows(rows, projection);\n\t\tcase \"_emdash_menu_items\":\n\t\t\treturn rows.filter((row) => {\n\t\t\t\tconst type = readString(row.type);\n\t\t\t\tconst referenceId = readString(row.reference_id);\n\t\t\t\tif (!referenceId || type === \"custom\") return true;\n\t\t\t\tif (type === \"taxonomy\") {\n\t\t\t\t\tprojection.taxonomyGroups.add(referenceId);\n\t\t\t\t\treturn true;\n\t\t\t\t}\n\t\t\t\tif (type === \"collection\" && !row.reference_id) return true;\n\t\t\t\tconst collection =\n\t\t\t\t\treadString(row.reference_collection) ??\n\t\t\t\t\t(type === \"post\" || type === \"page\" ? `${type}s` : null);\n\t\t\t\treturn isPublishedContentReference(projection, collection, referenceId);\n\t\t\t});\n\t\tcase \"media\":\n\t\t\treturn rows.filter((row) => {\n\t\t\t\tconst id = readString(row.id);\n\t\t\t\tconst storageKey = readString(row.storage_key);\n\t\t\t\treturn (\n\t\t\t\t\t(id !== null && projection.mediaIds.has(id)) ||\n\t\t\t\t\t(storageKey !== null && projection.mediaStorageKeys.has(storageKey))\n\t\t\t\t);\n\t\t\t});\n\t\tcase \"options\":\n\t\t\treturn rows;\n\t\tdefault:\n\t\t\treturn [];\n\t}\n}\n\nexport interface GenerateSnapshotOptions {\n\t/** Include draft and scheduled content (default: false) */\n\tincludeDrafts?: boolean;\n\t/** Include trashed content (deleted_at set). Used by backups (default: false) */\n\tincludeTrashed?: boolean;\n\t/** Origin URL for absolutizing local media URLs (e.g. \"https://mysite.com\") */\n\torigin?: string;\n\t/**\n\t * Allowlist of options-table key prefixes to include (default:\n\t * `SAFE_OPTIONS_PREFIXES`). Callers widening this must never include a\n\t * prefix that matches secrets (`emdash:preview_secret`, `plugin:`,\n\t * `emdash:passkey_pending:`) — the output may be user-downloadable.\n\t */\n\toptionPrefixes?: string[];\n\t/** Exact options-table keys to include in addition to `optionPrefixes`. */\n\toptionKeys?: string[];\n}\n\n/**\n * Generate a portable database snapshot.\n *\n * Discovers ec_* content tables dynamically, exports system tables\n * needed for rendering, and includes schema info for table recreation.\n */\nexport async function generateSnapshot(\n\tdb: Kysely<Database>,\n\toptions?: GenerateSnapshotOptions,\n): Promise<Snapshot> {\n\tconst includeDrafts = options?.includeDrafts ?? false;\n\tconst includeTrashed = options?.includeTrashed ?? false;\n\tconst optionPrefixes = options?.optionPrefixes ?? SAFE_OPTIONS_PREFIXES;\n\tconst optionKeys = new Set(options?.optionKeys);\n\tconst publishedOnly = !includeDrafts && !includeTrashed;\n\tconst publishedProjection = createPublishedProjection();\n\n\tconst contentTables = await listTablesLike(db, \"ec_%\");\n\n\t// Build list of all tables to export\n\tconst allTables = [...contentTables, ...SYSTEM_TABLES];\n\n\tconst tables: Record<string, Record<string, unknown>[]> = {};\n\tconst schema: Record<string, { columns: string[]; types?: Record<string, string> }> = {};\n\n\tfor (const tableName of allTables) {\n\t\tif (isExcluded(tableName)) continue;\n\n\t\t// Content table names come from the database catalog. Validate them\n\t\t// before passing them to sql.ref().\n\t\tif (!SAFE_TABLE_NAME.test(tableName)) continue;\n\n\t\tconst columnInfo = await listTableColumns(db, tableName);\n\t\tif (columnInfo.length === 0) continue;\n\n\t\tconst columns = columnInfo.map((column) => column.name);\n\t\tconst types: Record<string, SnapshotColumnType> = {};\n\t\tfor (const column of columnInfo) {\n\t\t\ttypes[column.name] = normalizeColumnType(column.type);\n\t\t}\n\n\t\tschema[tableName] = { columns, types };\n\n\t\tlet rows: Record<string, unknown>[];\n\n\t\tif (tableName.startsWith(\"ec_\")) {\n\t\t\tif (includeTrashed) {\n\t\t\t\trows = (\n\t\t\t\t\tawait sql<Record<string, unknown>>`\n\t\t\t\t\t\tSELECT * FROM ${sql.ref(tableName)}\n\t\t\t\t\t`.execute(db)\n\t\t\t\t).rows;\n\t\t\t} else if (includeDrafts) {\n\t\t\t\trows = (\n\t\t\t\t\tawait sql<Record<string, unknown>>`\n\t\t\t\t\t\tSELECT * FROM ${sql.ref(tableName)}\n\t\t\t\t\t\tWHERE deleted_at IS NULL\n\t\t\t\t\t`.execute(db)\n\t\t\t\t).rows;\n\t\t\t} else {\n\t\t\t\trows = (\n\t\t\t\t\tawait sql<Record<string, unknown>>`\n\t\t\t\t\t\tSELECT * FROM ${sql.ref(tableName)}\n\t\t\t\t\t\tWHERE deleted_at IS NULL\n\t\t\t\t\t\tAND status = 'published'\n\t\t\t\t\t`.execute(db)\n\t\t\t\t).rows;\n\t\t\t}\n\t\t} else if (\n\t\t\tpublishedOnly &&\n\t\t\tisSystemTable(tableName) &&\n\t\t\tPUBLISHED_TABLE_POLICIES[tableName] === \"omit\"\n\t\t) {\n\t\t\trows = [];\n\t\t} else if (tableName === \"options\") {\n\t\t\trows = (\n\t\t\t\tawait sql<Record<string, unknown>>`\n\t\t\t\t\tSELECT * FROM ${sql.ref(tableName)}\n\t\t\t\t`.execute(db)\n\t\t\t).rows.filter((row) => {\n\t\t\t\tconst name = typeof row.name === \"string\" ? row.name : \"\";\n\t\t\t\treturn optionKeys.has(name) || optionPrefixes.some((prefix) => name.startsWith(prefix));\n\t\t\t});\n\t\t} else {\n\t\t\trows = (\n\t\t\t\tawait sql<Record<string, unknown>>`\n\t\t\t\t\tSELECT * FROM ${sql.ref(tableName)}\n\t\t\t\t`.execute(db)\n\t\t\t).rows;\n\t\t}\n\n\t\tif (publishedOnly) {\n\t\t\tif (tableName.startsWith(\"ec_\")) {\n\t\t\t\trecordPublishedContent(publishedProjection, tableName, rows);\n\t\t\t} else if (\n\t\t\t\tisSystemTable(tableName) &&\n\t\t\t\tPUBLISHED_TABLE_POLICIES[tableName] === \"content-linked\"\n\t\t\t) {\n\t\t\t\trows = projectPublishedRows(tableName, rows, publishedProjection);\n\t\t\t}\n\t\t\tfor (const row of rows) collectMediaReferences(row, publishedProjection);\n\t\t}\n\n\t\tif (rows.length > 0) {\n\t\t\ttables[tableName] = normalizeRows(rows, types);\n\t\t}\n\t}\n\n\t// Absolutize local media URLs in content tables so snapshots are portable.\n\t// Local image fields are stored as JSON with provider:\"local\" and\n\t// meta.storageKey but no src — the URL is derived at render time.\n\t// For snapshots consumed by external preview services, inject src now.\n\tif (options?.origin) {\n\t\tconst origin = options.origin;\n\t\tfor (const [tableName, rows] of Object.entries(tables)) {\n\t\t\tif (!tableName.startsWith(\"ec_\")) continue;\n\t\t\tfor (const row of rows) {\n\t\t\t\tfor (const [col, value] of Object.entries(row)) {\n\t\t\t\t\tif (typeof value !== \"string\" || !value.startsWith(\"{\")) continue;\n\t\t\t\t\trow[col] = injectMediaSrc(value, origin);\n\t\t\t\t}\n\t\t\t}\n\t\t}\n\t}\n\n\treturn {\n\t\ttables,\n\t\tschema,\n\t\tgeneratedAt: new Date().toISOString(),\n\t};\n}\n"],"mappings":";;;;;;;;AAuBA,eAAsB,uBACrB,QACA,KACA,KACA,QACmB;AACnB,KAAI,MAAM,KAAK,KAAK,GAAG,IAAM,QAAO;CAEpC,MAAM,UAAU,IAAI,aAAa;CACjC,MAAM,MAAM,MAAM,OAAO,OAAO,UAC/B,OACA,QAAQ,OAAO,OAAO,EACtB;EAAE,MAAM;EAAQ,MAAM;EAAW,EACjC,OACA,CAAC,SAAS,CACV;CAED,MAAM,WAAW,IAAI,WAAW,IAAI,SAAS,EAAE;AAC/C,MAAK,IAAI,IAAI,GAAG,IAAI,IAAI,QAAQ,KAAK,EACpC,UAAS,IAAI,KAAK,SAAS,IAAI,UAAU,GAAG,IAAI,EAAE,EAAE,GAAG;AAGxD,QAAO,OAAO,OAAO,OAAO,QAAQ,KAAK,UAAU,QAAQ,OAAO,GAAG,OAAO,GAAG,MAAM,CAAC;;;;;;;;;;;;AAavF,SAAgB,4BACf,QACsD;CACtD,MAAM,YAAY,OAAO,YAAY,IAAI;AACzC,KAAI,aAAa,EAAG,QAAO;CAE3B,MAAM,MAAM,OAAO,UAAU,YAAY,EAAE;AAC3C,KAAI,IAAI,WAAW,GAAI,QAAO;CAE9B,MAAM,OAAO,OAAO,UAAU,GAAG,UAAU;CAC3C,MAAM,kBAAkB,KAAK,YAAY,IAAI;AAC7C,KAAI,mBAAmB,EAAG,QAAO;CAEjC,MAAM,SAAS,KAAK,UAAU,GAAG,gBAAgB;CACjD,MAAM,MAAM,SAAS,KAAK,UAAU,kBAAkB,EAAE,EAAE,GAAG;AAE7D,KAAI,MAAM,IAAI,IAAI,OAAO,WAAW,EAAG,QAAO;AAE9C,QAAO;EAAE;EAAQ;EAAK;EAAK;;AAK5B,MAAM,oBAAoB;AAC1B,MAAM,oBAAoB;AAC1B,MAAM,uBAAuB;;;;;AAM7B,SAAS,eAAe,SAAiB,QAAwB;AAChE,KAAI;EACH,MAAM,MAAM,KAAK,MAAM,QAAQ;AAC/B,MAAI,OAAO,QAAQ,YAAY,QAAQ,QAAQ,MAAM,QAAQ,IAAI,CAAE,QAAO;AAC1E,MAAI,mBAAmB,KAAK,OAAO,CAClC,QAAO,KAAK,UAAU,IAAI;AAE3B,SAAO;SACA;AACP,SAAO;;;AAIT,SAAS,SAAS,OAAkD;AACnE,QAAO,OAAO,UAAU,YAAY,UAAU,QAAQ,CAAC,MAAM,QAAQ,MAAM;;;;;;AAO5E,SAAS,mBAAmB,KAA8B,QAAyB;CAClF,IAAI,WAAW;AAGf,MAAK,IAAI,aAAa,WAAY,CAAC,IAAI,YAAY,IAAI,MAAM,IAAI,SAAU,CAAC,IAAI,KAAK;EAEpF,MAAM,cADO,SAAS,IAAI,KAAK,GAAG,IAAI,OAAO,SACpB,cAAc,IAAI;AAC3C,MAAI,OAAO,eAAe,YAAY,YAAY;AACjD,OAAI,MAAM,GAAG,SAAS,oBAAoB;AAC1C,cAAW;;;AAKb,MAAK,MAAM,SAAS,OAAO,OAAO,IAAI,CACrC,KAAI,MAAM,QAAQ,MAAM,EACvB;OAAK,MAAM,QAAQ,MAClB,KAAI,SAAS,KAAK,EACjB;OAAI,mBAAmB,MAAM,OAAO,CACnC,YAAW;;YAIJ,SAAS,MAAM,EACzB;MAAI,mBAAmB,OAAO,OAAO,CACpC,YAAW;;AAKd,QAAO;;;;;;;AAUR,MAAM,kBAAkB;;;;;AAmBxB,MAAM,gBAAgB;CACrB;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;;;;;;AAUD,MAAM,2BAAsE;CAC3E,qBAAqB;CACrB,6BAA6B;CAC7B,qBAAqB;CACrB,gBAAgB;CAChB,uBAAuB;CACvB,6BAA6B;CAC7B,eAAe;CACf,oBAAoB;CACpB,kBAAkB;CAClB,sBAAsB;CACtB,iBAAiB;CACjB,aAAa;CACb,oBAAoB;CACpB,oBAAoB;CACpB,YAAY;CACZ,SAAS;CACT,OAAO;CACP,WAAW;CACX;AAED,MAAM,mBAAwC,IAAI,IAAI,cAAc;AAEpE,SAAS,cAAc,WAA6C;AACnE,QAAO,iBAAiB,IAAI,UAAU;;;;;AAkBvC,MAAM,oBAAoB;CACzB;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;;;;;;;;AASD,MAAM,wBAAwB,CAAC,QAAQ;AAEvC,SAAS,WAAW,WAA4B;AAC/C,QAAO,kBAAkB,MAAM,WAAW,UAAU,WAAW,OAAO,CAAC;;AAKxE,SAAS,oBAAoB,MAAkC;AAC9D,SAAQ,KAAK,aAAa,EAA1B;EACC,KAAK;EACL,KAAK;EACL,KAAK;EACL,KAAK,UACJ,QAAO;EACR,KAAK;EACL,KAAK;EACL,KAAK;EACL,KAAK,UACJ,QAAO;EACR,KAAK;EACL,KAAK,QACJ,QAAO;EACR,KAAK;EACL,KAAK,QACJ,QAAO;EACR,QACC,QAAO;;;AAIV,SAAS,cACR,MACA,OAC4B;AAC5B,MAAK,MAAM,OAAO,KACjB,MAAK,MAAM,CAAC,QAAQ,SAAS,OAAO,QAAQ,MAAM,EAAE;EACnD,MAAM,QAAQ,IAAI;AAClB,MAAI,SAAS,UAAU,UAAU,QAAQ,UAAU,UAAa,OAAO,UAAU,SAChF,KAAI,UAAU,KAAK,UAAU,MAAM;;AAItC,QAAO;;AAGR,SAAS,4BAAiD;AACzD,QAAO;EACN,yBAAS,IAAI,KAAK;EAClB,gCAAgB,IAAI,KAAK;EACzB,0BAAU,IAAI,KAAK;EACnB,kCAAkB,IAAI,KAAK;EAC3B;;AAGF,SAAS,WAAW,OAA+B;AAClD,QAAO,OAAO,UAAU,YAAY,MAAM,SAAS,IAAI,QAAQ;;AAGhE,SAAS,uBACR,YACA,WACA,MACO;CACP,MAAM,aAAyC;EAC9C,qBAAK,IAAI,KAAK;EACd,mCAAmB,IAAI,KAAK;EAC5B;AACD,MAAK,MAAM,OAAO,MAAM;EACvB,MAAM,KAAK,WAAW,IAAI,GAAG;EAC7B,MAAM,mBAAmB,WAAW,IAAI,kBAAkB;AAC1D,MAAI,GAAI,YAAW,IAAI,IAAI,GAAG;AAC9B,MAAI,iBAAkB,YAAW,kBAAkB,IAAI,iBAAiB;;AAEzE,YAAW,QAAQ,IAAI,UAAU,MAAM,EAAa,EAAE,WAAW;;AAGlE,SAAS,4BACR,YACA,YACA,WACU;CACV,MAAM,iBAAiB,WAAW,WAAW;CAC7C,MAAM,KAAK,WAAW,UAAU;AAChC,KAAI,CAAC,kBAAkB,CAAC,GAAI,QAAO;CACnC,MAAM,aAAa,WAAW,QAAQ,IAAI,eAAe;AACzD,QAAO,YAAY,IAAI,IAAI,GAAG,KAAK,QAAQ,YAAY,kBAAkB,IAAI,GAAG,KAAK;;AAGtF,SAAS,uBAAuB,OAAgB,YAAuC;AACtF,KAAI,OAAO,UAAU,UAAU;AAC9B,MAAI,MAAM,WAAW,kBAAkB,EAAE;GACxC,MAAM,aAAa,MAAM,MAAM,GAAyB,CAAC,MAAM,mBAAmB,EAAE,CAAC;AACrF,OAAI,WAAY,YAAW,iBAAiB,IAAI,WAAW;AAC3D;;EAED,MAAM,UAAU,MAAM,WAAW;AACjC,MAAI,QAAQ,WAAW,IAAI,IAAI,QAAQ,WAAW,IAAI,CACrD,KAAI;AACH,0BAAuB,KAAK,MAAM,MAAM,EAAE,WAAW;UAC9C;AAIT;;AAED,KAAI,MAAM,QAAQ,MAAM,EAAE;AACzB,OAAK,MAAM,QAAQ,MAAO,wBAAuB,MAAM,WAAW;AAClE;;AAED,KAAI,CAAC,SAAS,MAAM,CAAE;CAEtB,MAAM,UAAU,WAAW,MAAM,QAAQ;AACzC,KAAI,QAAS,YAAW,SAAS,IAAI,QAAQ;CAE7C,MAAM,WAAW,WAAW,MAAM,SAAS;CAC3C,MAAM,OAAO,SAAS,MAAM,KAAK,GAAG,MAAM,OAAO;CACjD,MAAM,eAAe,WAAW,MAAM,GAAG;AACzC,MAAK,aAAa,WAAY,CAAC,YAAY,SAAU,aACpD,YAAW,SAAS,IAAI,aAAa;CAEtC,MAAM,aAAa,WAAW,MAAM,WAAW,IAAI,WAAW,MAAM,WAAW;AAC/E,KAAI,WAAY,YAAW,iBAAiB,IAAI,WAAW;CAG3D,MAAM,WAAW,YADH,SAAS,MAAM,MAAM,GAAG,MAAM,QAAQ,OACjB,KAAK;AACxC,KAAI,UAAU;AACb,aAAW,SAAS,IAAI,SAAS;AACjC,aAAW,iBAAiB,IAAI,SAAS;;AAG1C,MAAK,MAAM,SAAS,OAAO,OAAO,MAAM,CAAE,wBAAuB,OAAO,WAAW;;AAGpF,SAAS,oBACR,MACA,YAC4B;CAC5B,MAAM,iBAAiB,IAAI,IAAI,WAAW,eAAe;CACzD,MAAM,cAAc,IAAI,IAAI,WAAW,eAAe;CACtD,IAAI,UAAU;AACd,QAAO,SAAS;AACf,YAAU;AACV,OAAK,MAAM,OAAO,MAAM;GACvB,MAAM,KAAK,WAAW,IAAI,GAAG;GAC7B,MAAM,QAAQ,WAAW,IAAI,kBAAkB;AAC/C,OAAI,CAAC,GAAI;AACT,OAAI,YAAY,IAAI,GAAG,IAAK,SAAS,eAAe,IAAI,MAAM,EAAG;AAChE,QAAI,CAAC,YAAY,IAAI,GAAG,EAAE;AACzB,iBAAY,IAAI,GAAG;AACnB,eAAU;;AAEX,QAAI,SAAS,CAAC,eAAe,IAAI,MAAM,EAAE;AACxC,oBAAe,IAAI,MAAM;AACzB,eAAU;;IAEX,MAAM,WAAW,WAAW,IAAI,UAAU;AAC1C,QAAI,YAAY,CAAC,YAAY,IAAI,SAAS,EAAE;AAC3C,iBAAY,IAAI,SAAS;AACzB,eAAU;;;;;AAKd,QAAO,KAAK,QAAQ,QAAQ;EAC3B,MAAM,KAAK,WAAW,IAAI,GAAG;EAC7B,MAAM,QAAQ,WAAW,IAAI,kBAAkB;AAC/C,SAAQ,MAAM,YAAY,IAAI,GAAG,IAAM,SAAS,eAAe,IAAI,MAAM;GACxE;;AAGH,SAAS,qBACR,WACA,MACA,YAC4B;AAC5B,SAAQ,WAAR;EACC,KAAK,cACJ,QAAO,KAAK,QAAQ,QAAQ;AAE3B,OAAI,CADc,4BAA4B,YAAY,IAAI,YAAY,IAAI,WAAW,CACzE,QAAO;GACvB,MAAM,QAAQ,WAAW,IAAI,UAAU;AACvC,OAAI,OAAO;AACV,2BAAuB,OAAO,WAAW;AACzC,QAAI,CAAC,qBAAqB,KAAK,MAAM,EAAE;AACtC,gBAAW,SAAS,IAAI,MAAM;AAC9B,gBAAW,iBAAiB,IAAI,MAAM;;;AAGxC,UAAO;IACN;EACH,KAAK,qBACJ,QAAO,KAAK,QAAQ,QAAQ;GAC3B,MAAM,YAAY,4BAA4B,YAAY,IAAI,YAAY,IAAI,SAAS;GACvF,MAAM,gBAAgB,WAAW,IAAI,YAAY;AACjD,OAAI,aAAa,cAAe,YAAW,eAAe,IAAI,cAAc;AAC5E,UAAO;IACN;EACH,KAAK,aACJ,QAAO,oBAAoB,MAAM,WAAW;EAC7C,KAAK,qBACJ,QAAO,KAAK,QAAQ,QAAQ;GAC3B,MAAM,OAAO,WAAW,IAAI,KAAK;GACjC,MAAM,cAAc,WAAW,IAAI,aAAa;AAChD,OAAI,CAAC,eAAe,SAAS,SAAU,QAAO;AAC9C,OAAI,SAAS,YAAY;AACxB,eAAW,eAAe,IAAI,YAAY;AAC1C,WAAO;;AAER,OAAI,SAAS,gBAAgB,CAAC,IAAI,aAAc,QAAO;AAIvD,UAAO,4BAA4B,YAFlC,WAAW,IAAI,qBAAqB,KACnC,SAAS,UAAU,SAAS,SAAS,GAAG,KAAK,KAAK,OACO,YAAY;IACtE;EACH,KAAK,QACJ,QAAO,KAAK,QAAQ,QAAQ;GAC3B,MAAM,KAAK,WAAW,IAAI,GAAG;GAC7B,MAAM,aAAa,WAAW,IAAI,YAAY;AAC9C,UACE,OAAO,QAAQ,WAAW,SAAS,IAAI,GAAG,IAC1C,eAAe,QAAQ,WAAW,iBAAiB,IAAI,WAAW;IAEnE;EACH,KAAK,UACJ,QAAO;EACR,QACC,QAAO,EAAE;;;;;;;;;AA4BZ,eAAsB,iBACrB,IACA,SACoB;CACpB,MAAM,gBAAgB,SAAS,iBAAiB;CAChD,MAAM,iBAAiB,SAAS,kBAAkB;CAClD,MAAM,iBAAiB,SAAS,kBAAkB;CAClD,MAAM,aAAa,IAAI,IAAI,SAAS,WAAW;CAC/C,MAAM,gBAAgB,CAAC,iBAAiB,CAAC;CACzC,MAAM,sBAAsB,2BAA2B;CAKvD,MAAM,YAAY,CAAC,GAHG,MAAM,eAAe,IAAI,OAAO,EAGjB,GAAG,cAAc;CAEtD,MAAM,SAAoD,EAAE;CAC5D,MAAM,SAAgF,EAAE;AAExF,MAAK,MAAM,aAAa,WAAW;AAClC,MAAI,WAAW,UAAU,CAAE;AAI3B,MAAI,CAAC,gBAAgB,KAAK,UAAU,CAAE;EAEtC,MAAM,aAAa,MAAM,iBAAiB,IAAI,UAAU;AACxD,MAAI,WAAW,WAAW,EAAG;EAE7B,MAAM,UAAU,WAAW,KAAK,WAAW,OAAO,KAAK;EACvD,MAAM,QAA4C,EAAE;AACpD,OAAK,MAAM,UAAU,WACpB,OAAM,OAAO,QAAQ,oBAAoB,OAAO,KAAK;AAGtD,SAAO,aAAa;GAAE;GAAS;GAAO;EAEtC,IAAI;AAEJ,MAAI,UAAU,WAAW,MAAM,CAC9B,KAAI,eACH,SACC,MAAM,GAA4B;sBACjB,IAAI,IAAI,UAAU,CAAC;OAClC,QAAQ,GAAG,EACZ;WACQ,cACV,SACC,MAAM,GAA4B;sBACjB,IAAI,IAAI,UAAU,CAAC;;OAElC,QAAQ,GAAG,EACZ;MAEF,SACC,MAAM,GAA4B;sBACjB,IAAI,IAAI,UAAU,CAAC;;;OAGlC,QAAQ,GAAG,EACZ;WAGH,iBACA,cAAc,UAAU,IACxB,yBAAyB,eAAe,OAExC,QAAO,EAAE;WACC,cAAc,UACxB,SACC,MAAM,GAA4B;qBACjB,IAAI,IAAI,UAAU,CAAC;MAClC,QAAQ,GAAG,EACZ,KAAK,QAAQ,QAAQ;GACtB,MAAM,OAAO,OAAO,IAAI,SAAS,WAAW,IAAI,OAAO;AACvD,UAAO,WAAW,IAAI,KAAK,IAAI,eAAe,MAAM,WAAW,KAAK,WAAW,OAAO,CAAC;IACtF;MAEF,SACC,MAAM,GAA4B;qBACjB,IAAI,IAAI,UAAU,CAAC;MAClC,QAAQ,GAAG,EACZ;AAGH,MAAI,eAAe;AAClB,OAAI,UAAU,WAAW,MAAM,CAC9B,wBAAuB,qBAAqB,WAAW,KAAK;YAE5D,cAAc,UAAU,IACxB,yBAAyB,eAAe,iBAExC,QAAO,qBAAqB,WAAW,MAAM,oBAAoB;AAElE,QAAK,MAAM,OAAO,KAAM,wBAAuB,KAAK,oBAAoB;;AAGzE,MAAI,KAAK,SAAS,EACjB,QAAO,aAAa,cAAc,MAAM,MAAM;;AAQhD,KAAI,SAAS,QAAQ;EACpB,MAAM,SAAS,QAAQ;AACvB,OAAK,MAAM,CAAC,WAAW,SAAS,OAAO,QAAQ,OAAO,EAAE;AACvD,OAAI,CAAC,UAAU,WAAW,MAAM,CAAE;AAClC,QAAK,MAAM,OAAO,KACjB,MAAK,MAAM,CAAC,KAAK,UAAU,OAAO,QAAQ,IAAI,EAAE;AAC/C,QAAI,OAAO,UAAU,YAAY,CAAC,MAAM,WAAW,IAAI,CAAE;AACzD,QAAI,OAAO,eAAe,OAAO,OAAO;;;;AAM5C,QAAO;EACN;EACA;EACA,8BAAa,IAAI,MAAM,EAAC,aAAa;EACrC"}

package/dist/{storage-query-Bdv7A62k.d.mts → storage-query-FXJH5pI8.d.mts}

@@ -551,6 +551,10 @@ declare class MediaRepository {
    * Mark upload as failed
    */
   markFailed(id: string, expectedStorageKey?: string): Promise<MediaItem | null>;
+  /**
+   * Find the pending media row minted for a signed upload URL.
+   */
+  findPendingByStorageKey(storageKey: string): Promise<MediaItem | null>;
   /**
    * Find media by ID
    */
@@ -584,6 +588,7 @@ declare class MediaRepository {
    * Delete media item
    */
   deleteWithStorageKey(id: string): Promise<string | null>;
+  isStorageKeyReferenced(storageKey: string): Promise<boolean>;
   delete(id: string): Promise<boolean>;
   /**
    * Count media items
@@ -1573,4 +1578,4 @@ declare class StorageSerializationError extends Error {
 }
 //#endregion
 export { MediaRepository as $, ContentWriteGuard as A, EncryptedPluginSetting as B, SandboxedPluginInstance as C, getSandboxRouteErrorDetails as D, createSandboxRouteErrorEnvelope as E, createMediaAccess as F, isEncryptedPluginSetting as G, createSettingsAccess as H, createRedirectAccess as I, HookResult as J, EmailPipeline as K, createSchemaAccess as L, createCommentAccess as M, createContentAccessWithWrite as N, getSandboxRouteErrorEnvelope as O, createHttpAccess as P, MediaItem as Q, createUnrestrictedHttpAccess as R, SandboxUnavailableError as S, createSandboxRouteError as T, decodePluginSettingValue as U, PluginSettingEncryptionError as V, encryptPluginSetting as W, PluginStorageRepository as X, createHookPipeline as Y, CreateMediaInput as Z, SandboxRouteErrorCode as _, readPluginMediaBytes as a, SandboxRunner as b, CronAccessImpl as c, SandboxContentCreateCallback as d, FocalPointUpdate as et, SandboxEmailMessage as f, SandboxOptions as g, SandboxInvocationOptions as h, parsePluginMediaMetadataPatch as i, RedirectAccessError as j, ContentActionCallbacks as k, CronExecutor as l, SandboxHttpFetchCallback as m, DEFAULT_PLUGIN_MEDIA_READ_BYTES as n, DatetimeContextCache as nt, toPluginMediaItem as o, SandboxEmailSendCallback as p, HookPipeline as q, MAX_PLUGIN_MEDIA_READ_BYTES as r, resolvePluginEncryptionKeys as rt, updatePluginMediaMetadata as s, StorageSerializationError as t, ContentRepository as tt, SandboxCommentModerateCallback as u, SandboxRouteErrorDetails as v, SerializedRequest as w, SandboxRunnerFactory as x, SandboxRouteErrorEnvelope as y, createContentAccess as z };
-//# sourceMappingURL=storage-query-Bdv7A62k.d.mts.map
+//# sourceMappingURL=storage-query-FXJH5pI8.d.mts.map