emdash 0.40.1 → 0.41.0

package/dist/oauth-state-store-y8mEYVq9.mjs

@@ -0,0 +1,50 @@
+//#region src/auth/oauth-state-store.ts
+const OAUTH_STATE_TTL_MS = 600 * 1e3;
+function createOAuthStateStore(db) {
+	return {
+		async set(state, data) {
+			const expiresAt = new Date(Date.now() + OAUTH_STATE_TTL_MS).toISOString();
+			await db.insertInto("auth_challenges").values({
+				challenge: state,
+				type: "oauth",
+				user_id: null,
+				data: JSON.stringify(data),
+				expires_at: expiresAt
+			}).onConflict((oc) => oc.column("challenge").doUpdateSet({
+				type: "oauth",
+				data: JSON.stringify(data),
+				expires_at: expiresAt
+			})).execute();
+		},
+		async get(state) {
+			const row = await db.selectFrom("auth_challenges").selectAll().where("challenge", "=", state).where("type", "=", "oauth").executeTakeFirst();
+			if (!row) return null;
+			if (new Date(row.expires_at).getTime() < Date.now()) {
+				await this.delete(state);
+				return null;
+			}
+			if (!row.data) return null;
+			try {
+				const parsed = JSON.parse(row.data);
+				if (typeof parsed !== "object" || parsed === null || !("provider" in parsed) || typeof parsed.provider !== "string" || !("redirectUri" in parsed) || typeof parsed.redirectUri !== "string") return null;
+				const oauthState = {
+					provider: parsed.provider,
+					redirectUri: parsed.redirectUri
+				};
+				if ("codeVerifier" in parsed && typeof parsed.codeVerifier === "string") oauthState.codeVerifier = parsed.codeVerifier;
+				if ("nonce" in parsed && typeof parsed.nonce === "string") oauthState.nonce = parsed.nonce;
+				if ("inviteToken" in parsed && typeof parsed.inviteToken === "string") oauthState.inviteToken = parsed.inviteToken;
+				return oauthState;
+			} catch {
+				return null;
+			}
+		},
+		async delete(state) {
+			await db.deleteFrom("auth_challenges").where("challenge", "=", state).where("type", "=", "oauth").execute();
+		}
+	};
+}
+
+//#endregion
+export { createOAuthStateStore as t };
+//# sourceMappingURL=oauth-state-store-y8mEYVq9.mjs.map

package/dist/oauth-state-store-y8mEYVq9.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauth-state-store-y8mEYVq9.mjs","names":[],"sources":["../src/auth/oauth-state-store.ts"],"sourcesContent":["/**\n * OAuth state store\n *\n * Stores OAuth state in the auth_challenges table with automatic expiration.\n * Uses the existing table but with type=\"oauth\" to distinguish from WebAuthn challenges.\n */\n\nimport type { StateStore, OAuthState } from \"@emdash-cms/auth\";\nimport type { Kysely } from \"kysely\";\n\nimport type { Database } from \"../database/types.js\";\n\nconst OAUTH_STATE_TTL_MS = 10 * 60 * 1000; // 10 minutes\n\nexport function createOAuthStateStore(db: Kysely<Database>): StateStore {\n\treturn {\n\t\tasync set(state: string, data: OAuthState): Promise<void> {\n\t\t\tconst expiresAt = new Date(Date.now() + OAUTH_STATE_TTL_MS).toISOString();\n\n\t\t\tawait db\n\t\t\t\t.insertInto(\"auth_challenges\")\n\t\t\t\t.values({\n\t\t\t\t\tchallenge: state,\n\t\t\t\t\ttype: \"oauth\",\n\t\t\t\t\tuser_id: null,\n\t\t\t\t\tdata: JSON.stringify(data),\n\t\t\t\t\texpires_at: expiresAt,\n\t\t\t\t})\n\t\t\t\t.onConflict((oc) =>\n\t\t\t\t\toc.column(\"challenge\").doUpdateSet({\n\t\t\t\t\t\ttype: \"oauth\",\n\t\t\t\t\t\tdata: JSON.stringify(data),\n\t\t\t\t\t\texpires_at: expiresAt,\n\t\t\t\t\t}),\n\t\t\t\t)\n\t\t\t\t.execute();\n\t\t},\n\n\t\tasync get(state: string): Promise<OAuthState | null> {\n\t\t\tconst row = await db\n\t\t\t\t.selectFrom(\"auth_challenges\")\n\t\t\t\t.selectAll()\n\t\t\t\t.where(\"challenge\", \"=\", state)\n\t\t\t\t.where(\"type\", \"=\", \"oauth\")\n\t\t\t\t.executeTakeFirst();\n\n\t\t\tif (!row) return null;\n\n\t\t\tconst expiresAt = new Date(row.expires_at).getTime();\n\n\t\t\t// Check expiration\n\t\t\tif (expiresAt < Date.now()) {\n\t\t\t\t// Expired, delete and return null\n\t\t\t\tawait this.delete(state);\n\t\t\t\treturn null;\n\t\t\t}\n\n\t\t\tif (!row.data) return null;\n\n\t\t\ttry {\n\t\t\t\tconst parsed: unknown = JSON.parse(row.data);\n\t\t\t\tif (\n\t\t\t\t\ttypeof parsed !== \"object\" ||\n\t\t\t\t\tparsed === null ||\n\t\t\t\t\t!(\"provider\" in parsed) ||\n\t\t\t\t\ttypeof parsed.provider !== \"string\" ||\n\t\t\t\t\t!(\"redirectUri\" in parsed) ||\n\t\t\t\t\ttypeof parsed.redirectUri !== \"string\"\n\t\t\t\t) {\n\t\t\t\t\treturn null;\n\t\t\t\t}\n\t\t\t\tconst oauthState: OAuthState = {\n\t\t\t\t\tprovider: parsed.provider,\n\t\t\t\t\tredirectUri: parsed.redirectUri,\n\t\t\t\t};\n\t\t\t\tif (\"codeVerifier\" in parsed && typeof parsed.codeVerifier === \"string\") {\n\t\t\t\t\toauthState.codeVerifier = parsed.codeVerifier;\n\t\t\t\t}\n\t\t\t\tif (\"nonce\" in parsed && typeof parsed.nonce === \"string\") {\n\t\t\t\t\toauthState.nonce = parsed.nonce;\n\t\t\t\t}\n\t\t\t\tif (\"inviteToken\" in parsed && typeof parsed.inviteToken === \"string\") {\n\t\t\t\t\toauthState.inviteToken = parsed.inviteToken;\n\t\t\t\t}\n\t\t\t\treturn oauthState;\n\t\t\t} catch {\n\t\t\t\treturn null;\n\t\t\t}\n\t\t},\n\n\t\tasync delete(state: string): Promise<void> {\n\t\t\tawait db\n\t\t\t\t.deleteFrom(\"auth_challenges\")\n\t\t\t\t.where(\"challenge\", \"=\", state)\n\t\t\t\t.where(\"type\", \"=\", \"oauth\")\n\t\t\t\t.execute();\n\t\t},\n\t};\n}\n"],"mappings":";AAYA,MAAM,qBAAqB,MAAU;AAErC,SAAgB,sBAAsB,IAAkC;AACvE,QAAO;EACN,MAAM,IAAI,OAAe,MAAiC;GACzD,MAAM,YAAY,IAAI,KAAK,KAAK,KAAK,GAAG,mBAAmB,CAAC,aAAa;AAEzE,SAAM,GACJ,WAAW,kBAAkB,CAC7B,OAAO;IACP,WAAW;IACX,MAAM;IACN,SAAS;IACT,MAAM,KAAK,UAAU,KAAK;IAC1B,YAAY;IACZ,CAAC,CACD,YAAY,OACZ,GAAG,OAAO,YAAY,CAAC,YAAY;IAClC,MAAM;IACN,MAAM,KAAK,UAAU,KAAK;IAC1B,YAAY;IACZ,CAAC,CACF,CACA,SAAS;;EAGZ,MAAM,IAAI,OAA2C;GACpD,MAAM,MAAM,MAAM,GAChB,WAAW,kBAAkB,CAC7B,WAAW,CACX,MAAM,aAAa,KAAK,MAAM,CAC9B,MAAM,QAAQ,KAAK,QAAQ,CAC3B,kBAAkB;AAEpB,OAAI,CAAC,IAAK,QAAO;AAKjB,OAHkB,IAAI,KAAK,IAAI,WAAW,CAAC,SAAS,GAGpC,KAAK,KAAK,EAAE;AAE3B,UAAM,KAAK,OAAO,MAAM;AACxB,WAAO;;AAGR,OAAI,CAAC,IAAI,KAAM,QAAO;AAEtB,OAAI;IACH,MAAM,SAAkB,KAAK,MAAM,IAAI,KAAK;AAC5C,QACC,OAAO,WAAW,YAClB,WAAW,QACX,EAAE,cAAc,WAChB,OAAO,OAAO,aAAa,YAC3B,EAAE,iBAAiB,WACnB,OAAO,OAAO,gBAAgB,SAE9B,QAAO;IAER,MAAM,aAAyB;KAC9B,UAAU,OAAO;KACjB,aAAa,OAAO;KACpB;AACD,QAAI,kBAAkB,UAAU,OAAO,OAAO,iBAAiB,SAC9D,YAAW,eAAe,OAAO;AAElC,QAAI,WAAW,UAAU,OAAO,OAAO,UAAU,SAChD,YAAW,QAAQ,OAAO;AAE3B,QAAI,iBAAiB,UAAU,OAAO,OAAO,gBAAgB,SAC5D,YAAW,cAAc,OAAO;AAEjC,WAAO;WACA;AACP,WAAO;;;EAIT,MAAM,OAAO,OAA8B;AAC1C,SAAM,GACJ,WAAW,kBAAkB,CAC7B,MAAM,aAAa,KAAK,MAAM,CAC9B,MAAM,QAAQ,KAAK,QAAQ,CAC3B,SAAS;;EAEZ"}

package/dist/oauth-user-lookup-CtTYAy-O.mjs

@@ -0,0 +1,26 @@
+import { toRoleLevel } from "@emdash-cms/auth";
+
+//#region src/api/handlers/oauth-user-lookup.ts
+/**
+* Shared user lookup for OAuth token operations.
+*
+* Extracts user role and disabled status from the database. Used by
+* handleTokenRefresh() to revalidate scopes against the user's current
+* role and reject disabled users.
+*/
+/**
+* Look up a user's current role and disabled status.
+* Returns null if the user doesn't exist.
+*/
+async function lookupUserRoleAndStatus(db, userId) {
+	const row = await db.selectFrom("users").select(["role", "disabled"]).where("id", "=", userId).executeTakeFirst();
+	if (!row) return null;
+	return {
+		role: toRoleLevel(row.role),
+		disabled: row.disabled === 1
+	};
+}
+
+//#endregion
+export { lookupUserRoleAndStatus as t };
+//# sourceMappingURL=oauth-user-lookup-CtTYAy-O.mjs.map

package/dist/oauth-user-lookup-CtTYAy-O.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauth-user-lookup-CtTYAy-O.mjs","names":[],"sources":["../src/api/handlers/oauth-user-lookup.ts"],"sourcesContent":["/**\n * Shared user lookup for OAuth token operations.\n *\n * Extracts user role and disabled status from the database. Used by\n * handleTokenRefresh() to revalidate scopes against the user's current\n * role and reject disabled users.\n */\n\nimport { toRoleLevel, type RoleLevel } from \"@emdash-cms/auth\";\nimport type { Kysely } from \"kysely\";\n\nimport type { Database } from \"../../database/types.js\";\n\nexport interface UserRoleAndStatus {\n\trole: RoleLevel;\n\tdisabled: boolean;\n}\n\n/**\n * Look up a user's current role and disabled status.\n * Returns null if the user doesn't exist.\n */\nexport async function lookupUserRoleAndStatus(\n\tdb: Kysely<Database>,\n\tuserId: string,\n): Promise<UserRoleAndStatus | null> {\n\tconst row = await db\n\t\t.selectFrom(\"users\")\n\t\t.select([\"role\", \"disabled\"])\n\t\t.where(\"id\", \"=\", userId)\n\t\t.executeTakeFirst();\n\n\tif (!row) return null;\n\n\treturn {\n\t\trole: toRoleLevel(row.role),\n\t\tdisabled: row.disabled === 1,\n\t};\n}\n"],"mappings":";;;;;;;;;;;;;;AAsBA,eAAsB,wBACrB,IACA,QACoC;CACpC,MAAM,MAAM,MAAM,GAChB,WAAW,QAAQ,CACnB,OAAO,CAAC,QAAQ,WAAW,CAAC,CAC5B,MAAM,MAAM,KAAK,OAAO,CACxB,kBAAkB;AAEpB,KAAI,CAAC,IAAK,QAAO;AAEjB,QAAO;EACN,MAAM,YAAY,IAAI,KAAK;EAC3B,UAAU,IAAI,aAAa;EAC3B"}

package/dist/object-cache/memory.d.mts

@@ -1,4 +1,4 @@
-import { t as CreateObjectCacheBackendFn } from "../types-CAZgq9fO.mjs";
+import { t as CreateObjectCacheBackendFn } from "../types-uxLoPBio.mjs";
 
 //#region src/object-cache/memory.d.ts
 /**

package/dist/options-BYa1FgIM.d.mts

@@ -0,0 +1,81 @@
+import { t as Database } from "./types-BQ3hwYJT.mjs";
+import { In as VersionedValue, _ as ConditionalDeleteResult, v as ConditionalWriteResult } from "./types-D0aJW2uR.mjs";
+import { Kysely } from "kysely";
+
+//#region src/database/repositories/options.d.ts
+/**
+ * Options repository for key-value settings storage
+ *
+ * Used for site settings, plugin configuration, and other arbitrary key-value data.
+ * Values are stored as JSON for flexibility.
+ */
+declare class OptionsRepository {
+  private db;
+  constructor(db: Kysely<Database>);
+  /**
+   * Get an option value
+   */
+  get<T = unknown>(name: string): Promise<T | null>;
+  /**
+   * Get an option value with a default
+   */
+  getOrDefault<T>(name: string, defaultValue: T): Promise<T>;
+  /**
+   * Set an option value (creates or updates)
+   */
+  set<T = unknown>(name: string, value: T): Promise<void>;
+  setVersioned<T = unknown>(name: string, value: T): Promise<string>;
+  /**
+   * Set an option value only if no row with that name exists. Atomic at the
+   * database level via INSERT ... ON CONFLICT DO NOTHING, so concurrent
+   * callers can't race past the check.
+   *
+   * Returns true when the row was inserted, false when a row already
+   * existed (regardless of its value — even an empty string or null).
+   */
+  setIfAbsent<T = unknown>(name: string, value: T): Promise<boolean>;
+  getVersioned<T = unknown>(name: string): Promise<VersionedValue<T> | null>;
+  compareAndSet(name: string, expectedRevision: string | null, value: unknown): Promise<ConditionalWriteResult>;
+  compareAndDelete(name: string, expectedRevision: string): Promise<ConditionalDeleteResult>;
+  /**
+   * Delete an option
+   */
+  delete(name: string): Promise<boolean>;
+  /**
+   * Delete multiple options in one statement.
+   */
+  deleteMany(names: string[]): Promise<number>;
+  /**
+   * Check if an option exists
+   */
+  exists(name: string): Promise<boolean>;
+  /**
+   * Get multiple options at once
+   */
+  getMany<T = unknown>(names: string[]): Promise<Map<string, T>>;
+  /**
+   * Set multiple options at once
+   */
+  setMany<T = unknown>(options: Record<string, T>): Promise<void>;
+  /**
+   * Get all options (use sparingly)
+   */
+  getAll(): Promise<Map<string, unknown>>;
+  /**
+   * Get all options matching a prefix
+   */
+  getByPrefix<T = unknown>(prefix: string, options?: {
+    limit?: number;
+  }): Promise<Map<string, T>>;
+  getVersionedByPrefix<T = unknown>(prefix: string, options?: {
+    limit?: number;
+  }): Promise<Map<string, VersionedValue<T>>>;
+  countByPrefix(prefix: string): Promise<number>;
+  /**
+   * Delete all options matching a prefix
+   */
+  deleteByPrefix(prefix: string): Promise<number>;
+}
+//#endregion
+export { OptionsRepository as t };
+//# sourceMappingURL=options-BYa1FgIM.d.mts.map

package/dist/options-BYa1FgIM.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"options-BYa1FgIM.d.mts","names":[],"sources":["../src/database/repositories/options.ts"],"mappings":";;;;;;;AAwBA;;;;cAAa,iBAAA;EAAA,QACQ,EAAA;cAAA,EAAA,EAAI,MAAA,CAAO,QAAA;EAoBmB;;;EAf5C,GAAA,aAAA,CAAiB,IAAA,WAAe,OAAA,CAAQ,CAAA;EAuBE;;;EAR1C,YAAA,GAAA,CAAgB,IAAA,UAAc,YAAA,EAAc,CAAA,GAAI,OAAA,CAAQ,CAAA;EAuCN;;;EA/BlD,GAAA,aAAA,CAAiB,IAAA,UAAc,KAAA,EAAO,CAAA,GAAI,OAAA;EAI1C,YAAA,aAAA,CAA0B,IAAA,UAAc,KAAA,EAAO,CAAA,GAAI,OAAA;EA4DtD;;;;;;;;EAjCG,WAAA,aAAA,CAAyB,IAAA,UAAc,KAAA,EAAO,CAAA,GAAI,OAAA;EAkBlD,YAAA,aAAA,CAA0B,IAAA,WAAe,OAAA,CAAQ,cAAA,CAAe,CAAA;EAWhE,aAAA,CACL,IAAA,UACA,gBAAA,iBACA,KAAA,YACE,OAAA,CAAQ,sBAAA;EAuBL,gBAAA,CAAiB,IAAA,UAAc,gBAAA,WAA2B,OAAA,CAAQ,uBAAA;EAiFhD;;;EAlElB,MAAA,CAAO,IAAA,WAAe,OAAA;EAkFzB;;;EAzEG,UAAA,CAAW,KAAA,aAAkB,OAAA;EA8FhC;;;EAlFG,MAAA,CAAO,IAAA,WAAe,OAAA;EAiHiB;;;EApGvC,OAAA,aAAA,CAAqB,KAAA,aAAkB,OAAA,CAAQ,GAAA,SAAY,CAAA;EApKlC;;;EAwLzB,OAAA,aAAA,CAAqB,OAAA,EAAS,MAAA,SAAe,CAAA,IAAK,OAAA;EAnLjC;;;EA+LjB,MAAA,CAAA,GAAU,OAAA,CAAQ,GAAA;EAhLL;;;EA6Lb,WAAA,aAAA,CACL,MAAA,UACA,OAAA;IAAW,KAAA;EAAA,IACT,OAAA,CAAQ,GAAA,SAAY,CAAA;EAkBjB,oBAAA,aAAA,CACL,MAAA,UACA,OAAA;IAAW,KAAA;EAAA,IACT,OAAA,CAAQ,GAAA,SAAY,cAAA,CAAe,CAAA;EAkBhC,aAAA,CAAc,MAAA,WAAiB,OAAA;EA/NA;;;EA4O/B,cAAA,CAAe,MAAA,WAAiB,OAAA;AAAA"}

package/dist/page/index.d.mts

@@ -1,5 +1,5 @@
-import { At as PageMetadataContribution, Dt as PageFragmentContribution, Nt as PageMetadataLinkRel, Pt as PagePlacement, n as BreadcrumbItem, nn as PublicPageContext } from "../types-Cr-Kg-3D.mjs";
-import { n as SeoSettings } from "../types-DnnVSl6Y.mjs";
+import { At as PageMetadataContribution, Dt as PageFragmentContribution, Nt as PageMetadataLinkRel, Pt as PagePlacement, n as BreadcrumbItem, nn as PublicPageContext } from "../types-D0aJW2uR.mjs";
+import { n as SeoSettings } from "../types-5LSo7PPx.mjs";
 
 //#region src/page/context.d.ts
 /** Fields shared by both input forms */

package/dist/page/index.mjs

@@ -5,11 +5,11 @@ import "../options-DhrI7eMv.mjs";
 import "../base64-DvnNgP7e.mjs";
 import "../secrets-CIi0nFiR.mjs";
 import "../object-cache-CqWNY5uP.mjs";
-import "../types-BkUg2yHx.mjs";
-import "../media-CPXTbb1R.mjs";
-import "../request-cache-DzLYKm_x.mjs";
-import "../loader-BzqeR1ZN.mjs";
-import "../settings-B4vDl1fK.mjs";
+import "../types-aOOxRSx6.mjs";
+import "../media-BUQePMxP.mjs";
+import "../request-cache-iHRlHx1d.mjs";
+import "../loader-CrRPfkHS.mjs";
+import "../settings-D5EHi0Tk.mjs";
 
 //#region src/page/context.ts
 function isAstroInput(input) {

package/dist/parse-CORGGhHf.mjs

@@ -0,0 +1,81 @@
+import { t as apiError } from "./error-BfsNNrIE.mjs";
+import { z } from "zod";
+
+//#region src/api/parse.ts
+/** Maximum allowed JSON request body size (10 MB). */
+const MAX_BODY_SIZE = 10 * 1024 * 1024;
+/**
+* Parse and validate a JSON request body against a Zod schema.
+*
+* Returns the validated data on success, or a 400 Response on failure.
+* Replaces all `(await request.json()) as T` casts.
+*/
+async function parseBody(request, schema) {
+	const contentLength = request.headers.get("Content-Length");
+	if (contentLength && parseInt(contentLength, 10) > MAX_BODY_SIZE) return apiError("PAYLOAD_TOO_LARGE", "Request body too large", 413);
+	let raw;
+	try {
+		raw = await request.json();
+	} catch {
+		return apiError("INVALID_JSON", "Request body must be valid JSON", 400);
+	}
+	return validate(schema, raw);
+}
+/**
+* Parse and validate an optional JSON request body.
+*
+* Returns `defaultValue` if the body is empty, or the validated data if present.
+* For endpoints where the body is optional (e.g., preview-url, confirm).
+*/
+async function parseOptionalBody(request, schema, defaultValue) {
+	const contentLength = request.headers.get("Content-Length");
+	if (contentLength && parseInt(contentLength, 10) > MAX_BODY_SIZE) return apiError("PAYLOAD_TOO_LARGE", "Request body too large", 413);
+	let text;
+	try {
+		text = await request.text();
+	} catch {
+		return defaultValue;
+	}
+	if (!text.trim()) return defaultValue;
+	let raw;
+	try {
+		raw = JSON.parse(text);
+	} catch {
+		return apiError("INVALID_JSON", "Request body must be valid JSON", 400);
+	}
+	return validate(schema, raw);
+}
+/**
+* Parse and validate URL search params against a Zod schema.
+*
+* Converts searchParams to a plain object before validation.
+* Zod coercion handles string -> number/boolean conversion.
+* Replaces manual `url.searchParams.get()` + `parseInt()` patterns.
+*/
+function parseQuery(url, schema) {
+	const raw = {};
+	for (const [key, value] of url.searchParams) raw[key] = value;
+	return validate(schema, raw);
+}
+/**
+* Validate raw data against a schema. Returns data or error Response.
+*/
+function validate(schema, data) {
+	const result = schema.safeParse(data);
+	if (result.success) return result.data;
+	return apiError("VALIDATION_ERROR", "Invalid request data", 400, { issues: result.error.issues.map((issue) => ({
+		path: issue.path.join("."),
+		message: issue.message
+	})) });
+}
+/**
+* Type guard to check if a ParseResult is an error Response.
+* Usage: `if (isParseError(result)) return result;`
+*/
+function isParseError(result) {
+	return result instanceof Response;
+}
+
+//#endregion
+export { parseQuery as i, parseBody as n, parseOptionalBody as r, isParseError as t };
+//# sourceMappingURL=parse-CORGGhHf.mjs.map

package/dist/parse-CORGGhHf.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"parse-CORGGhHf.mjs","names":[],"sources":["../src/api/parse.ts"],"sourcesContent":["/**\n * Request body and query parameter parsing with Zod validation.\n *\n * All API routes should use these utilities instead of `request.json() as T`\n * or raw `url.searchParams.get()` with manual coercion.\n */\n\nimport { z } from \"zod\";\n\nimport { apiError } from \"./error.js\";\n\n/** Maximum allowed JSON request body size (10 MB). */\nconst MAX_BODY_SIZE = 10 * 1024 * 1024;\n\n/**\n * Result of parsing: either the validated data or an error Response.\n * Routes should check `if (result instanceof Response) return result;`\n */\nexport type ParseResult<T> = T | Response;\n\n/**\n * Parse and validate a JSON request body against a Zod schema.\n *\n * Returns the validated data on success, or a 400 Response on failure.\n * Replaces all `(await request.json()) as T` casts.\n */\nexport async function parseBody<T extends z.ZodType>(\n\trequest: Request,\n\tschema: T,\n): Promise<ParseResult<z.infer<T>>> {\n\t// Best-effort size check via Content-Length (can be absent with chunked encoding)\n\tconst contentLength = request.headers.get(\"Content-Length\");\n\tif (contentLength && parseInt(contentLength, 10) > MAX_BODY_SIZE) {\n\t\treturn apiError(\"PAYLOAD_TOO_LARGE\", \"Request body too large\", 413);\n\t}\n\n\tlet raw: unknown;\n\ttry {\n\t\traw = await request.json();\n\t} catch {\n\t\treturn apiError(\"INVALID_JSON\", \"Request body must be valid JSON\", 400);\n\t}\n\n\treturn validate(schema, raw);\n}\n\n/**\n * Parse and validate an optional JSON request body.\n *\n * Returns `defaultValue` if the body is empty, or the validated data if present.\n * For endpoints where the body is optional (e.g., preview-url, confirm).\n */\nexport async function parseOptionalBody<T extends z.ZodType>(\n\trequest: Request,\n\tschema: T,\n\tdefaultValue: z.infer<T>,\n): Promise<ParseResult<z.infer<T>>> {\n\t// Best-effort size check via Content-Length (can be absent with chunked encoding)\n\tconst contentLength = request.headers.get(\"Content-Length\");\n\tif (contentLength && parseInt(contentLength, 10) > MAX_BODY_SIZE) {\n\t\treturn apiError(\"PAYLOAD_TOO_LARGE\", \"Request body too large\", 413);\n\t}\n\n\tlet text: string;\n\ttry {\n\t\ttext = await request.text();\n\t} catch {\n\t\treturn defaultValue;\n\t}\n\n\tif (!text.trim()) {\n\t\treturn defaultValue;\n\t}\n\n\tlet raw: unknown;\n\ttry {\n\t\traw = JSON.parse(text);\n\t} catch {\n\t\treturn apiError(\"INVALID_JSON\", \"Request body must be valid JSON\", 400);\n\t}\n\n\treturn validate(schema, raw);\n}\n\n/**\n * Parse and validate URL search params against a Zod schema.\n *\n * Converts searchParams to a plain object before validation.\n * Zod coercion handles string -> number/boolean conversion.\n * Replaces manual `url.searchParams.get()` + `parseInt()` patterns.\n */\nexport function parseQuery<T extends z.ZodType>(url: URL, schema: T): ParseResult<z.infer<T>> {\n\tconst raw: Record<string, string> = {};\n\tfor (const [key, value] of url.searchParams) {\n\t\traw[key] = value;\n\t}\n\treturn validate(schema, raw);\n}\n\n/**\n * Validate raw data against a schema. Returns data or error Response.\n */\nfunction validate<T extends z.ZodType>(schema: T, data: unknown): ParseResult<z.infer<T>> {\n\tconst result = schema.safeParse(data);\n\n\tif (result.success) {\n\t\treturn result.data;\n\t}\n\n\t// Format Zod errors into a readable structure\n\tconst issues = result.error.issues.map((issue: z.core.$ZodIssue) => ({\n\t\tpath: issue.path.join(\".\"),\n\t\tmessage: issue.message,\n\t}));\n\n\treturn apiError(\"VALIDATION_ERROR\", \"Invalid request data\", 400, { issues });\n}\n\n/**\n * Type guard to check if a ParseResult is an error Response.\n * Usage: `if (isParseError(result)) return result;`\n */\nexport function isParseError<T>(result: ParseResult<T>): result is Response {\n\treturn result instanceof Response;\n}\n"],"mappings":";;;;;AAYA,MAAM,gBAAgB,KAAK,OAAO;;;;;;;AAclC,eAAsB,UACrB,SACA,QACmC;CAEnC,MAAM,gBAAgB,QAAQ,QAAQ,IAAI,iBAAiB;AAC3D,KAAI,iBAAiB,SAAS,eAAe,GAAG,GAAG,cAClD,QAAO,SAAS,qBAAqB,0BAA0B,IAAI;CAGpE,IAAI;AACJ,KAAI;AACH,QAAM,MAAM,QAAQ,MAAM;SACnB;AACP,SAAO,SAAS,gBAAgB,mCAAmC,IAAI;;AAGxE,QAAO,SAAS,QAAQ,IAAI;;;;;;;;AAS7B,eAAsB,kBACrB,SACA,QACA,cACmC;CAEnC,MAAM,gBAAgB,QAAQ,QAAQ,IAAI,iBAAiB;AAC3D,KAAI,iBAAiB,SAAS,eAAe,GAAG,GAAG,cAClD,QAAO,SAAS,qBAAqB,0BAA0B,IAAI;CAGpE,IAAI;AACJ,KAAI;AACH,SAAO,MAAM,QAAQ,MAAM;SACpB;AACP,SAAO;;AAGR,KAAI,CAAC,KAAK,MAAM,CACf,QAAO;CAGR,IAAI;AACJ,KAAI;AACH,QAAM,KAAK,MAAM,KAAK;SACf;AACP,SAAO,SAAS,gBAAgB,mCAAmC,IAAI;;AAGxE,QAAO,SAAS,QAAQ,IAAI;;;;;;;;;AAU7B,SAAgB,WAAgC,KAAU,QAAoC;CAC7F,MAAM,MAA8B,EAAE;AACtC,MAAK,MAAM,CAAC,KAAK,UAAU,IAAI,aAC9B,KAAI,OAAO;AAEZ,QAAO,SAAS,QAAQ,IAAI;;;;;AAM7B,SAAS,SAA8B,QAAW,MAAwC;CACzF,MAAM,SAAS,OAAO,UAAU,KAAK;AAErC,KAAI,OAAO,QACV,QAAO,OAAO;AASf,QAAO,SAAS,oBAAoB,wBAAwB,KAAK,EAAE,QALpD,OAAO,MAAM,OAAO,KAAK,WAA6B;EACpE,MAAM,MAAM,KAAK,KAAK,IAAI;EAC1B,SAAS,MAAM;EACf,EAAE,EAEwE,CAAC;;;;;;AAO7E,SAAgB,aAAgB,QAA4C;AAC3E,QAAO,kBAAkB"}

package/dist/parse-avNM1xWV.d.mts

@@ -0,0 +1,168 @@
+import { w as BlockType } from "./types-DbpN4Qto.mjs";
+import { i as ContentItem } from "./types-we5uR-tV.mjs";
+import { z } from "zod";
+
+//#region src/api/types.d.ts
+/**
+ * List response with cursor pagination
+ */
+interface ListResponse<T> {
+  items: T[];
+  nextCursor?: string;
+  /**
+   * Total number of rows matching the filters, ignoring pagination. Used
+   * by the admin to render a stable pagination denominator. Optional so
+   * callers that don't surface a row count don't pay for the extra query.
+   */
+  total?: number;
+}
+/**
+ * Content API responses
+ */
+interface ContentListResponse extends ListResponse<ContentItem> {}
+interface ContentResponse {
+  item: ContentItem;
+  /** Opaque revision token for optimistic concurrency */
+  _rev?: string;
+}
+/**
+ * Manifest API response
+ */
+interface ManifestResponse {
+  version: string;
+  hash: string;
+  collections: ManifestCollectionMap;
+  plugins: Record<string, {
+    adminPages?: Array<{
+      path: string;
+      component: string;
+    }>;
+    widgets?: string[];
+  }>;
+}
+type ManifestCollectionMap = Record<string, ManifestCollectionDescriptor>;
+interface ManifestCollectionDescriptor {
+  label: string;
+  labelSingular: string;
+  supports: string[];
+  hasSeo: boolean;
+  urlPattern?: string;
+  routable?: boolean;
+  titleField?: string;
+  dateField?: string;
+  hidden?: boolean;
+  /** Admin sidebar folder shared with other collections of the same group */
+  group?: string;
+  listColumns?: string[];
+  fields: Record<string, ManifestFieldDescriptor>;
+}
+interface ManifestFieldDescriptor extends FieldDescriptor {
+  id?: string;
+  widget?: string;
+  validation?: Record<string, unknown>;
+  unsupportedType?: {
+    type: string;
+    path: string;
+  };
+  blockTypes?: BlockType[];
+  blockTypeFingerprint?: string;
+}
+interface FieldDescriptor {
+  kind: string;
+  label?: string;
+  required?: boolean;
+  translatable?: boolean;
+  /**
+   * For `select` / `multiSelect`: the list of enum choices.
+   * For `json` fields driven by a plugin `widget`: arbitrary widget config.
+   */
+  options?: Array<{
+    value: string;
+    label: string;
+  }> | Record<string, unknown>;
+}
+/**
+ * Discriminated union for handler results.
+ *
+ * Handlers return `ApiResult<T>` -- either `{ success: true, data: T }` or
+ * `{ success: false, error: { code, message } }`. The `success` literal
+ * enables TypeScript narrowing on `.data`.
+ *
+ * The generic `E` parameter defaults to `ErrorCode` but can be narrowed to
+ * `OAuthErrorCode` for OAuth token-endpoint handlers.
+ *
+ * Use `unwrapResult()` from `error.ts` to convert to an HTTP Response.
+ */
+type ApiResult<T, E extends string = string> = {
+  success: true;
+  data: T;
+} | {
+  success: false;
+  error: {
+    code: E;
+    message: string;
+    details?: Record<string, unknown>;
+  };
+};
+/**
+ * API request context
+ */
+interface ApiContext {
+  userId?: string;
+  userRole?: string;
+}
+//#endregion
+//#region src/api/error.d.ts
+/**
+ * Create a standardized error response.
+ *
+ * Always returns `{ success: false, error: { code, message } }` with correct
+ * Content-Type. Use this for all error responses in API routes.
+ */
+declare function apiError(code: string, message: string, status: number, details?: Record<string, unknown>): Response;
+/**
+ * Create a standardized success response.
+ *
+ * Always returns `{ success: true, data: T }` with correct status code.
+ * Use this for all success responses in API routes.
+ */
+declare function apiSuccess<T>(data: T, status?: number): Response;
+/**
+ * Handle an unknown error in a catch block.
+ *
+ * - Logs the full error server-side
+ * - Returns a generic message to the client (never leaks error.message)
+ * - Use `fallbackMessage` for the public-facing message
+ * - Use `fallbackCode` for the error code
+ */
+declare function handleError(error: unknown, fallbackMessage: string, fallbackCode: string): Response;
+//#endregion
+//#region src/api/parse.d.ts
+/**
+ * Result of parsing: either the validated data or an error Response.
+ * Routes should check `if (result instanceof Response) return result;`
+ */
+type ParseResult<T> = T | Response;
+/**
+ * Parse and validate a JSON request body against a Zod schema.
+ *
+ * Returns the validated data on success, or a 400 Response on failure.
+ * Replaces all `(await request.json()) as T` casts.
+ */
+declare function parseBody<T extends z.ZodType>(request: Request, schema: T): Promise<ParseResult<z.infer<T>>>;
+/**
+ * Parse and validate URL search params against a Zod schema.
+ *
+ * Converts searchParams to a plain object before validation.
+ * Zod coercion handles string -> number/boolean conversion.
+ * Replaces manual `url.searchParams.get()` + `parseInt()` patterns.
+ */
+declare function parseQuery<T extends z.ZodType>(url: URL, schema: T): ParseResult<z.infer<T>>;
+/**
+ * Type guard to check if a ParseResult is an error Response.
+ * Usage: `if (isParseError(result)) return result;`
+ */
+declare function isParseError<T>(result: ParseResult<T>): result is Response;
+//#endregion
+export { ManifestResponse as _, apiError as a, ApiContext as c, ContentResponse as d, FieldDescriptor as f, ManifestFieldDescriptor as g, ManifestCollectionMap as h, parseQuery as i, ApiResult as l, ManifestCollectionDescriptor as m, isParseError as n, apiSuccess as o, ListResponse as p, parseBody as r, handleError as s, ParseResult as t, ContentListResponse as u };
+//# sourceMappingURL=parse-avNM1xWV.d.mts.map

package/dist/parse-avNM1xWV.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"parse-avNM1xWV.d.mts","names":[],"sources":["../src/api/types.ts","../src/api/error.ts","../src/api/parse.ts"],"mappings":";;;;;;AASA;;UAAiB,YAAA;EAChB,KAAA,EAAO,CAAA;EACP,UAAA;EADA;;;;;EAOA,KAAA;AAAA;;;;UAMgB,mBAAA,SAA4B,YAAA,CAAa,WAAA;AAAA,UAEzC,eAAA;EAChB,IAAA,EAAM,WAAA;EAAW;EAEjB,IAAA;AAAA;;;;UAMgB,gBAAA;EAChB,OAAA;EACA,IAAA;EACA,WAAA,EAAa,qBAAA;EACb,OAAA,EAAS,MAAA;IAGP,UAAA,GAAa,KAAA;MAAQ,IAAA;MAAc,SAAA;IAAA;IACnC,OAAA;EAAA;AAAA;AAAA,KAKS,qBAAA,GAAwB,MAAA,SAAe,4BAAA;AAAA,UAElC,4BAAA;EAChB,KAAA;EACA,aAAA;EACA,QAAA;EACA,MAAA;EACA,UAAA;EACA,QAAA;EACA,UAAA;EACA,SAAA;EACA,MAAA;;EAEA,KAAA;EACA,WAAA;EACA,MAAA,EAAQ,MAAA,SAAe,uBAAA;AAAA;AAAA,UAGP,uBAAA,SAAgC,eAAA;EAChD,EAAA;EACA,MAAA;EACA,UAAA,GAAa,MAAA;EACb,eAAA;IAAoB,IAAA;IAAc,IAAA;EAAA;EAClC,UAAA,GAAa,SAAA;EACb,oBAAA;AAAA;AAAA,UAGgB,eAAA;EAChB,IAAA;EACA,KAAA;EACA,QAAA;EACA,YAAA;EAhB8C;;AAG/C;;EAkBC,OAAA,GAAU,KAAA;IAAQ,KAAA;IAAe,KAAA;EAAA,KAAmB,MAAA;AAAA;;;;;;;;;;;;;KAezC,SAAA;EACP,OAAA;EAAe,IAAA,EAAM,CAAA;AAAA;EAEvB,OAAA;EACA,KAAA;IAAS,IAAA,EAAM,CAAA;IAAG,OAAA;IAAiB,OAAA,GAAU,MAAA;EAAA;AAAA;;;;UAM/B,UAAA;EAChB,MAAA;EACA,QAAA;AAAA;;;;;;;;;iBChFe,QAAA,CACf,IAAA,UACA,OAAA,UACA,MAAA,UACA,OAAA,GAAU,MAAA,oBACR,QAAA;;ADZH;;;;;iBC2BgB,UAAA,GAAA,CAAc,IAAA,EAAM,CAAA,EAAG,MAAA,YAAe,QAAA;;;;;;;;;iBAYtC,WAAA,CACf,KAAA,WACA,eAAA,UACA,YAAA,WACE,QAAA;;;;;;;KChDS,WAAA,MAAiB,CAAA,GAAI,QAAA;;;;;AFKjC;;iBEGsB,SAAA,WAAoB,CAAA,CAAE,OAAA,CAAA,CAC3C,OAAA,EAAS,OAAA,EACT,MAAA,EAAQ,CAAA,GACN,OAAA,CAAQ,WAAA,CAAY,CAAA,CAAE,KAAA,CAAM,CAAA;;;;;AFK/B;;;iBEyDgB,UAAA,WAAqB,CAAA,CAAE,OAAA,CAAA,CAAS,GAAA,EAAK,GAAA,EAAK,MAAA,EAAQ,CAAA,GAAI,WAAA,CAAY,CAAA,CAAE,KAAA,CAAM,CAAA;;;;;iBA+B1E,YAAA,GAAA,CAAgB,MAAA,EAAQ,WAAA,CAAY,CAAA,IAAK,MAAA,IAAU,QAAA"}

package/dist/passkey-config-Dih5YeIS.mjs

@@ -0,0 +1,46 @@
+//#region src/auth/passkey-config.ts
+/**
+* Get passkey configuration from request URL
+*
+* @param url The request URL (typically `new URL(Astro.request.url)` or `new URL(request.url)`)
+* @param siteName Optional site name for rpName (defaults to hostname from `url` or public origin)
+* @param siteUrl Optional browser-facing origin (see `EmDashConfig.siteUrl`).
+*        When set, the canonical **origin** and **rpId** are taken from this URL.
+* @param allowedOrigins Optional list of additional accepted origins for verification.
+*        Each must share `rpId` with the canonical origin (WebAuthn requirement).
+*        Typical use: apex + preview subdomain on the same registrable domain.
+* @throws If `siteUrl` is non-empty but not parseable by `new URL()`.
+*/
+function getPasskeyConfig(url, siteName, siteUrl, allowedOrigins) {
+	let rpName;
+	let rpId;
+	let canonicalOrigin;
+	if (siteUrl) {
+		let publicUrl;
+		try {
+			publicUrl = new URL(siteUrl);
+		} catch (e) {
+			throw new Error(`Invalid siteUrl: "${siteUrl}"`, { cause: e });
+		}
+		rpName = siteName || publicUrl.hostname;
+		rpId = publicUrl.hostname;
+		canonicalOrigin = publicUrl.origin;
+	} else {
+		rpName = siteName || url.hostname;
+		rpId = url.hostname;
+		canonicalOrigin = url.origin;
+	}
+	const origins = [canonicalOrigin];
+	if (allowedOrigins) {
+		for (const extra of allowedOrigins) if (extra && !origins.includes(extra)) origins.push(extra);
+	}
+	return {
+		rpName,
+		rpId,
+		origins
+	};
+}
+
+//#endregion
+export { getPasskeyConfig as t };
+//# sourceMappingURL=passkey-config-Dih5YeIS.mjs.map

package/dist/passkey-config-Dih5YeIS.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"passkey-config-Dih5YeIS.mjs","names":[],"sources":["../src/auth/passkey-config.ts"],"sourcesContent":["/**\n * Passkey configuration helper\n *\n * Extracts passkey configuration from the request URL.\n * This ensures the rpId and origin are correctly set for both\n * localhost development and production deployments.\n */\n\nexport interface PasskeyConfig {\n\trpName: string;\n\trpId: string;\n\t/**\n\t * Accepted client-data origins. First entry is the canonical/preferred origin;\n\t * additional entries support multi-origin deployments (e.g. apex + preview\n\t * subdomain sharing the same `rpId`). See `allowedOrigins` parameter.\n\t */\n\torigins: string[];\n}\n\n/**\n * Get passkey configuration from request URL\n *\n * @param url The request URL (typically `new URL(Astro.request.url)` or `new URL(request.url)`)\n * @param siteName Optional site name for rpName (defaults to hostname from `url` or public origin)\n * @param siteUrl Optional browser-facing origin (see `EmDashConfig.siteUrl`).\n *        When set, the canonical **origin** and **rpId** are taken from this URL.\n * @param allowedOrigins Optional list of additional accepted origins for verification.\n *        Each must share `rpId` with the canonical origin (WebAuthn requirement).\n *        Typical use: apex + preview subdomain on the same registrable domain.\n * @throws If `siteUrl` is non-empty but not parseable by `new URL()`.\n */\nexport function getPasskeyConfig(\n\turl: URL,\n\tsiteName?: string,\n\tsiteUrl?: string,\n\tallowedOrigins?: string[],\n): PasskeyConfig {\n\tlet rpName: string;\n\tlet rpId: string;\n\tlet canonicalOrigin: string;\n\n\tif (siteUrl) {\n\t\tlet publicUrl: URL;\n\t\ttry {\n\t\t\tpublicUrl = new URL(siteUrl);\n\t\t} catch (e) {\n\t\t\tthrow new Error(`Invalid siteUrl: \"${siteUrl}\"`, { cause: e });\n\t\t}\n\t\trpName = siteName || publicUrl.hostname;\n\t\trpId = publicUrl.hostname;\n\t\tcanonicalOrigin = publicUrl.origin;\n\t} else {\n\t\trpName = siteName || url.hostname;\n\t\trpId = url.hostname;\n\t\tcanonicalOrigin = url.origin;\n\t}\n\n\tconst origins = [canonicalOrigin];\n\tif (allowedOrigins) {\n\t\tfor (const extra of allowedOrigins) {\n\t\t\tif (extra && !origins.includes(extra)) origins.push(extra);\n\t\t}\n\t}\n\n\treturn { rpName, rpId, origins };\n}\n"],"mappings":";;;;;;;;;;;;;AA+BA,SAAgB,iBACf,KACA,UACA,SACA,gBACgB;CAChB,IAAI;CACJ,IAAI;CACJ,IAAI;AAEJ,KAAI,SAAS;EACZ,IAAI;AACJ,MAAI;AACH,eAAY,IAAI,IAAI,QAAQ;WACpB,GAAG;AACX,SAAM,IAAI,MAAM,qBAAqB,QAAQ,IAAI,EAAE,OAAO,GAAG,CAAC;;AAE/D,WAAS,YAAY,UAAU;AAC/B,SAAO,UAAU;AACjB,oBAAkB,UAAU;QACtB;AACN,WAAS,YAAY,IAAI;AACzB,SAAO,IAAI;AACX,oBAAkB,IAAI;;CAGvB,MAAM,UAAU,CAAC,gBAAgB;AACjC,KAAI,gBACH;OAAK,MAAM,SAAS,eACnB,KAAI,SAAS,CAAC,QAAQ,SAAS,MAAM,CAAE,SAAQ,KAAK,MAAM;;AAI5D,QAAO;EAAE;EAAQ;EAAM;EAAS"}

package/dist/paths-d51RFm8M.mjs

@@ -0,0 +1,77 @@
+import { p as isRecordKind } from "./kinds-CYmRESWj.mjs";
+
+//#region src/transfer/format/paths.ts
+/**
+* Package file paths.
+*
+* A package contains exactly these files, and nothing else:
+*
+* ```
+* manifest.json
+* index/<seq>.ndjson                file index chunks, listed in the manifest
+* records/<kind>/<seq>.ndjson       record chunks, listed in the index
+* media/<sha256-hex>                raw media bytes, listed in the index
+* ```
+*
+* `seq` is a zero-padded six-digit number starting at `000000` with no gaps.
+* Paths are case-sensitive, relative, and never contain `.`/`..` segments,
+* backslashes, or empty segments; anything that does not match is rejected.
+*/
+const MANIFEST_PATH = "manifest.json";
+const SEQ_DIGITS = 6;
+const MAX_SEQ = 10 ** SEQ_DIGITS - 1;
+const INDEX_PATH_PATTERN = /^index\/(\d{6})\.ndjson$/;
+const RECORD_PATH_PATTERN = /^records\/([a-z_]+)\/(\d{6})\.ndjson$/;
+const MEDIA_PATH_PATTERN = /^media\/([0-9a-f]{64})$/;
+const SHA256_HEX_PATTERN = /^[0-9a-f]{64}$/;
+function parsePackagePath(path) {
+	if (path === MANIFEST_PATH) return {
+		type: "manifest",
+		path
+	};
+	const index = INDEX_PATH_PATTERN.exec(path);
+	if (index) return {
+		type: "index",
+		path,
+		seq: Number(index[1])
+	};
+	const records = RECORD_PATH_PATTERN.exec(path);
+	if (records) {
+		const kind = records[1];
+		if (!isRecordKind(kind)) return null;
+		return {
+			type: "records",
+			path,
+			kind,
+			seq: Number(records[2])
+		};
+	}
+	const media = MEDIA_PATH_PATTERN.exec(path);
+	if (media) return {
+		type: "media",
+		path,
+		sha256: media[1]
+	};
+	return null;
+}
+function isPackagePath(path) {
+	return parsePackagePath(path) !== null;
+}
+function formatSeq(seq) {
+	if (!Number.isInteger(seq) || seq < 0 || seq > MAX_SEQ) throw new RangeError(`Invalid chunk sequence ${seq}`);
+	return String(seq).padStart(SEQ_DIGITS, "0");
+}
+function indexChunkPath(seq) {
+	return `index/${formatSeq(seq)}.ndjson`;
+}
+function recordChunkPath(kind, seq) {
+	return `records/${kind}/${formatSeq(seq)}.ndjson`;
+}
+function mediaBlobPath(sha256) {
+	if (!SHA256_HEX_PATTERN.test(sha256)) throw new TypeError("Expected a lowercase hex SHA-256");
+	return `media/${sha256}`;
+}
+
+//#endregion
+export { parsePackagePath as a, mediaBlobPath as i, indexChunkPath as n, recordChunkPath as o, isPackagePath as r, MANIFEST_PATH as t };
+//# sourceMappingURL=paths-d51RFm8M.mjs.map

package/dist/paths-d51RFm8M.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"paths-d51RFm8M.mjs","names":[],"sources":["../src/transfer/format/paths.ts"],"sourcesContent":["/**\n * Package file paths.\n *\n * A package contains exactly these files, and nothing else:\n *\n * ```\n * manifest.json\n * index/<seq>.ndjson                file index chunks, listed in the manifest\n * records/<kind>/<seq>.ndjson       record chunks, listed in the index\n * media/<sha256-hex>                raw media bytes, listed in the index\n * ```\n *\n * `seq` is a zero-padded six-digit number starting at `000000` with no gaps.\n * Paths are case-sensitive, relative, and never contain `.`/`..` segments,\n * backslashes, or empty segments; anything that does not match is rejected.\n */\n\nimport { isRecordKind, type RecordKind } from \"./kinds.js\";\n\nexport const MANIFEST_PATH = \"manifest.json\";\n\nconst SEQ_DIGITS = 6;\nconst MAX_SEQ = 10 ** SEQ_DIGITS - 1;\n\nconst INDEX_PATH_PATTERN = /^index\\/(\\d{6})\\.ndjson$/;\nconst RECORD_PATH_PATTERN = /^records\\/([a-z_]+)\\/(\\d{6})\\.ndjson$/;\nconst MEDIA_PATH_PATTERN = /^media\\/([0-9a-f]{64})$/;\nconst SHA256_HEX_PATTERN = /^[0-9a-f]{64}$/;\n\nexport type PackagePath =\n\t| { type: \"manifest\"; path: typeof MANIFEST_PATH }\n\t| { type: \"index\"; path: string; seq: number }\n\t| { type: \"records\"; path: string; kind: RecordKind; seq: number }\n\t| { type: \"media\"; path: string; sha256: string };\n\nexport function parsePackagePath(path: string): PackagePath | null {\n\tif (path === MANIFEST_PATH) return { type: \"manifest\", path };\n\tconst index = INDEX_PATH_PATTERN.exec(path);\n\tif (index) return { type: \"index\", path, seq: Number(index[1]) };\n\tconst records = RECORD_PATH_PATTERN.exec(path);\n\tif (records) {\n\t\tconst kind = records[1];\n\t\tif (!isRecordKind(kind)) return null;\n\t\treturn { type: \"records\", path, kind, seq: Number(records[2]) };\n\t}\n\tconst media = MEDIA_PATH_PATTERN.exec(path);\n\tif (media) return { type: \"media\", path, sha256: media[1] };\n\treturn null;\n}\n\nexport function isPackagePath(path: string): boolean {\n\treturn parsePackagePath(path) !== null;\n}\n\nfunction formatSeq(seq: number): string {\n\tif (!Number.isInteger(seq) || seq < 0 || seq > MAX_SEQ) {\n\t\tthrow new RangeError(`Invalid chunk sequence ${seq}`);\n\t}\n\treturn String(seq).padStart(SEQ_DIGITS, \"0\");\n}\n\nexport function indexChunkPath(seq: number): string {\n\treturn `index/${formatSeq(seq)}.ndjson`;\n}\n\nexport function recordChunkPath(kind: RecordKind, seq: number): string {\n\treturn `records/${kind}/${formatSeq(seq)}.ndjson`;\n}\n\nexport function mediaBlobPath(sha256: string): string {\n\tif (!SHA256_HEX_PATTERN.test(sha256)) throw new TypeError(\"Expected a lowercase hex SHA-256\");\n\treturn `media/${sha256}`;\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;AAmBA,MAAa,gBAAgB;AAE7B,MAAM,aAAa;AACnB,MAAM,UAAU,MAAM,aAAa;AAEnC,MAAM,qBAAqB;AAC3B,MAAM,sBAAsB;AAC5B,MAAM,qBAAqB;AAC3B,MAAM,qBAAqB;AAQ3B,SAAgB,iBAAiB,MAAkC;AAClE,KAAI,SAAS,cAAe,QAAO;EAAE,MAAM;EAAY;EAAM;CAC7D,MAAM,QAAQ,mBAAmB,KAAK,KAAK;AAC3C,KAAI,MAAO,QAAO;EAAE,MAAM;EAAS;EAAM,KAAK,OAAO,MAAM,GAAG;EAAE;CAChE,MAAM,UAAU,oBAAoB,KAAK,KAAK;AAC9C,KAAI,SAAS;EACZ,MAAM,OAAO,QAAQ;AACrB,MAAI,CAAC,aAAa,KAAK,CAAE,QAAO;AAChC,SAAO;GAAE,MAAM;GAAW;GAAM;GAAM,KAAK,OAAO,QAAQ,GAAG;GAAE;;CAEhE,MAAM,QAAQ,mBAAmB,KAAK,KAAK;AAC3C,KAAI,MAAO,QAAO;EAAE,MAAM;EAAS;EAAM,QAAQ,MAAM;EAAI;AAC3D,QAAO;;AAGR,SAAgB,cAAc,MAAuB;AACpD,QAAO,iBAAiB,KAAK,KAAK;;AAGnC,SAAS,UAAU,KAAqB;AACvC,KAAI,CAAC,OAAO,UAAU,IAAI,IAAI,MAAM,KAAK,MAAM,QAC9C,OAAM,IAAI,WAAW,0BAA0B,MAAM;AAEtD,QAAO,OAAO,IAAI,CAAC,SAAS,YAAY,IAAI;;AAG7C,SAAgB,eAAe,KAAqB;AACnD,QAAO,SAAS,UAAU,IAAI,CAAC;;AAGhC,SAAgB,gBAAgB,MAAkB,KAAqB;AACtE,QAAO,WAAW,KAAK,GAAG,UAAU,IAAI,CAAC;;AAG1C,SAAgB,cAAc,QAAwB;AACrD,KAAI,CAAC,mBAAmB,KAAK,OAAO,CAAE,OAAM,IAAI,UAAU,mCAAmC;AAC7F,QAAO,SAAS"}