emdash 0.40.1 → 0.42.0

package/dist/validation-D-ICq_tY.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"validation-D-ICq_tY.mjs","names":[],"sources":["../src/api/handlers/validation.ts"],"sourcesContent":["/**\n * Field-level validation for content create / update.\n *\n * Wires the existing `generateZodSchema()` pipeline (`schema/zod-generator.ts`)\n * into the handler boundary so REST and MCP both get the same enforcement:\n *\n *  - required fields must be present and non-empty\n *  - select / multiSelect values must match the configured options\n *  - reference fields must resolve to a real, non-trashed target\n *\n * Errors surface as `{ code: \"VALIDATION_ERROR\", message, details: { issues } }`.\n * The message lists every offending field so callers can fix everything in a\n * single round trip; `issues` carries the same failures one by one, with a\n * code and any bound that failed, so the admin can word them for editors.\n */\n\nimport { sql, type Kysely } from \"kysely\";\nimport type { z } from \"zod\";\n\nimport type { Database } from \"../../database/types.js\";\nimport { validateIdentifier } from \"../../database/validate.js\";\nimport { SchemaRegistry } from \"../../schema/registry.js\";\nimport type { Field } from \"../../schema/types.js\";\nimport { generateZodSchema } from \"../../schema/zod-generator.js\";\nimport { chunks, SQL_BATCH_SIZE } from \"../../utils/chunks.js\";\nimport { isMissingTableError } from \"../../utils/db-errors.js\";\n\n/**\n * One rejected value. `code` is `required`, `unknown_field`,\n * `reference_not_found` or `invalid_reference_target`, or else the Zod issue\n * code. Length, range and item-count failures carry `origin` and the bound,\n * format failures carry `format`.\n */\nexport interface ContentValidationIssue {\n\tpath: string;\n\tcode: string;\n\tmessage: string;\n\torigin?: string;\n\tminimum?: number;\n\tmaximum?: number;\n\tformat?: string;\n}\n\ntype ValidationResult =\n\t| { ok: true }\n\t| {\n\t\t\tok: false;\n\t\t\terror: {\n\t\t\t\tcode: \"VALIDATION_ERROR\" | \"COLLECTION_NOT_FOUND\" | \"UNSUPPORTED_FIELD_TYPE\";\n\t\t\t\tmessage: string;\n\t\t\t\tdetails?: { issues: ContentValidationIssue[] };\n\t\t\t};\n\t  };\n\n/** Treat `undefined`, `null`, and `\"\"` as \"not set\". */\nfunction isMissing(value: unknown): boolean {\n\treturn value === undefined || value === null || value === \"\";\n}\n\n/**\n * Resolve the target collection slug for a reference field.\n *\n * Schema-defined reference fields (the static `reference()` factory in\n * `fields/reference.ts`) put the target in `options.collection`. The MCP\n * `schema_create_field` tool also puts it there. Tests and some admin paths\n * stash it inside `validation.collection` directly; we accept both.\n */\nfunction getReferenceTargetCollection(field: Field): string | undefined {\n\tconst fromOptions = field.options?.collection;\n\tif (typeof fromOptions === \"string\" && fromOptions.length > 0) return fromOptions;\n\tconst validation = field.validation;\n\tif (validation && \"collection\" in validation) {\n\t\tconst fromValidation: unknown = (validation as { collection?: unknown }).collection;\n\t\tif (typeof fromValidation === \"string\" && fromValidation.length > 0) return fromValidation;\n\t}\n\treturn undefined;\n}\n\n/**\n * Format a Zod issue path into a human-readable field reference, e.g.\n * `tags`, `tags.1`, `image.alt`.\n */\nfunction formatIssuePath(path: ReadonlyArray<PropertyKey>): string {\n\tif (path.length === 0) return \"(root)\";\n\treturn path.map((seg) => String(seg)).join(\".\");\n}\n\nfunction isSubFieldPath(\n\tpath: ReadonlyArray<PropertyKey>,\n\tfieldTypes: ReadonlyMap<string, string>,\n): boolean {\n\treturn path.length === 3 && fieldTypes.get(String(path[0])) === \"repeater\";\n}\n\nfunction isFieldOrSubFieldPath(\n\tpath: ReadonlyArray<PropertyKey>,\n\tfieldTypes: ReadonlyMap<string, string>,\n): boolean {\n\treturn path.length === 1 || isSubFieldPath(path, fieldTypes);\n}\n\nfunction fromZodIssue(\n\tissue: z.core.$ZodIssue,\n\tfieldTypes: ReadonlyMap<string, string>,\n): ContentValidationIssue {\n\tconst result: ContentValidationIssue = {\n\t\tpath: formatIssuePath(issue.path),\n\t\tcode: issue.code,\n\t\tmessage: issue.message,\n\t};\n\tswitch (issue.code) {\n\t\tcase \"invalid_type\":\n\t\tcase \"invalid_union\":\n\t\tcase \"invalid_value\":\n\t\t\t// Zod reports a missing or null value as a type, union or option\n\t\t\t// mismatch. A key missing inside a value, such as a Portable Text\n\t\t\t// block's `_type`, leaves the value malformed rather than the field empty.\n\t\t\tif (issue.input == null && isFieldOrSubFieldPath(issue.path, fieldTypes)) {\n\t\t\t\tresult.code = \"required\";\n\t\t\t}\n\t\t\tbreak;\n\t\tcase \"too_small\":\n\t\t\tresult.origin = issue.origin;\n\t\t\tif (typeof issue.minimum === \"number\") result.minimum = issue.minimum;\n\t\t\t// A required repeater sub-field rejects \"\" as a one-character minimum.\n\t\t\tif (issue.input === \"\" && isSubFieldPath(issue.path, fieldTypes)) {\n\t\t\t\tresult.code = \"required\";\n\t\t\t}\n\t\t\tbreak;\n\t\tcase \"too_big\":\n\t\t\tresult.origin = issue.origin;\n\t\t\tif (typeof issue.maximum === \"number\") result.maximum = issue.maximum;\n\t\t\tbreak;\n\t\tcase \"invalid_format\":\n\t\t\tresult.format = issue.format;\n\t\t\tbreak;\n\t}\n\treturn result;\n}\n\n/**\n * Validate `data` against the collection's field definitions.\n *\n * `partial: true` switches Zod into partial mode so updates can include\n * only the fields being changed without tripping required-field errors on\n * fields the caller didn't touch. Required fields that ARE present in\n * partial-mode data still get the empty-string check below.\n */\nexport async function validateContentData(\n\tdb: Kysely<Database>,\n\tcollection: string,\n\tdata: Record<string, unknown>,\n\toptions: { partial?: boolean } = {},\n): Promise<ValidationResult> {\n\tconst registry = new SchemaRegistry(db);\n\tconst collectionWithFields = await registry.getCollectionWithFields(collection);\n\tif (!collectionWithFields) {\n\t\treturn {\n\t\t\tok: false,\n\t\t\terror: {\n\t\t\t\tcode: \"COLLECTION_NOT_FOUND\",\n\t\t\t\tmessage: `Collection '${collection}' not found`,\n\t\t\t},\n\t\t};\n\t}\n\n\tconst issues: ContentValidationIssue[] = [];\n\tconst unsupportedField = collectionWithFields.fields.find((field) => field.unsupportedType);\n\tif (unsupportedField?.unsupportedType) {\n\t\tconst { type, path } = unsupportedField.unsupportedType;\n\t\treturn {\n\t\t\tok: false,\n\t\t\terror: {\n\t\t\t\tcode: \"UNSUPPORTED_FIELD_TYPE\",\n\t\t\t\tmessage: `Collection '${collection}' field '${unsupportedField.slug}' uses unsupported field type '${type}' at '${path}'`,\n\t\t\t},\n\t\t};\n\t}\n\n\t// Detect unknown keys explicitly so callers get a useful error rather\n\t// than silently dropped data. Leading-underscore keys (e.g. `_slug`,\n\t// `_rev`) are reserved for internal handler/runtime use and aren't real\n\t// fields; skip them.\n\tconst knownFields = new Set(collectionWithFields.fields.map((f) => f.slug));\n\tfor (const key of Object.keys(data)) {\n\t\tif (key.startsWith(\"_\")) continue;\n\t\tif (!knownFields.has(key)) {\n\t\t\tissues.push({\n\t\t\t\tpath: key,\n\t\t\t\tcode: \"unknown_field\",\n\t\t\t\tmessage: `unknown field on collection '${collection}'`,\n\t\t\t});\n\t\t}\n\t}\n\n\t// Zod handles type, enum, length and missing-required (in non-partial\n\t// mode) checks. Empty-string handling for required string fields is\n\t// done as a separate pass below since Zod's `z.string()` accepts \"\".\n\tconst baseSchema = generateZodSchema(collectionWithFields);\n\tconst schema = options.partial ? baseSchema.partial() : baseSchema;\n\tconst parsed = schema.safeParse(data, { reportInput: true });\n\tif (!parsed.success) {\n\t\tconst fieldTypes = new Map(collectionWithFields.fields.map((f) => [f.slug, f.type]));\n\t\tfor (const issue of parsed.error.issues) {\n\t\t\tissues.push(fromZodIssue(issue, fieldTypes));\n\t\t}\n\t}\n\n\t// Empty-string-on-required check. In create mode (partial=false) Zod\n\t// already catches missing/null for required fields, but `z.string()`\n\t// happily accepts \"\". In update mode (partial=true) the field is only\n\t// checked if it's present in `data`.\n\tfor (const field of collectionWithFields.fields) {\n\t\tif (!field.required) continue;\n\t\tconst present = Object.hasOwn(data, field.slug);\n\t\tif (options.partial && !present) continue;\n\t\tif (data[field.slug] === \"\") {\n\t\t\tissues.push({\n\t\t\t\tpath: field.slug,\n\t\t\t\tcode: \"required\",\n\t\t\t\tmessage: \"required (empty value not allowed)\",\n\t\t\t});\n\t\t}\n\t}\n\n\t// Reference target existence. Only check fields that:\n\t//   - have a value (non-missing) in `data`\n\t//   - have a resolvable target collection\n\t//   - in partial mode: are present in `data`\n\t// Batch one IN-query per target collection to keep round-trips low.\n\tconst refsByTarget = new Map<string, { field: string; id: string }[]>();\n\tfor (const field of collectionWithFields.fields) {\n\t\tif (field.type !== \"reference\") continue;\n\t\tif (options.partial && !Object.hasOwn(data, field.slug)) continue;\n\t\tconst value = data[field.slug];\n\t\tif (isMissing(value)) continue;\n\t\tif (typeof value !== \"string\") continue; // Zod will have flagged this already\n\t\tconst target = getReferenceTargetCollection(field);\n\t\tif (!target) continue;\n\t\tconst list = refsByTarget.get(target) ?? [];\n\t\tlist.push({ field: field.slug, id: value });\n\t\trefsByTarget.set(target, list);\n\t}\n\n\tfor (const [target, refs] of refsByTarget) {\n\t\t// Validate the target collection slug before interpolating into raw\n\t\t// SQL — defense-in-depth even though slugs are already validated at\n\t\t// schema-create time.\n\t\ttry {\n\t\t\tvalidateIdentifier(target, \"reference target collection\");\n\t\t} catch {\n\t\t\tfor (const ref of refs) {\n\t\t\t\tissues.push({\n\t\t\t\t\tpath: ref.field,\n\t\t\t\t\tcode: \"invalid_reference_target\",\n\t\t\t\t\tmessage: `invalid reference target collection '${target}'`,\n\t\t\t\t});\n\t\t\t}\n\t\t\tcontinue;\n\t\t}\n\n\t\tconst ids = [...new Set(refs.map((r) => r.id))];\n\t\tconst tableName = `ec_${target}`;\n\n\t\t// Chunk the IN clause to stay below D1's bind-parameter limit. One\n\t\t// reference per request is the common case today; chunking makes the\n\t\t// helper safe if a future multiSelect-of-references is added.\n\t\tconst found = new Set<string>();\n\t\tlet targetTableMissing = false;\n\t\tfor (const idChunk of chunks(ids, SQL_BATCH_SIZE)) {\n\t\t\ttry {\n\t\t\t\tconst rows = await sql<{ id: string }>`\n\t\t\t\t\tSELECT id FROM ${sql.ref(tableName)}\n\t\t\t\t\tWHERE id IN (${sql.join(idChunk)})\n\t\t\t\t\tAND deleted_at IS NULL\n\t\t\t\t`.execute(db);\n\t\t\t\tfor (const row of rows.rows) {\n\t\t\t\t\tfound.add(row.id);\n\t\t\t\t}\n\t\t\t} catch (error) {\n\t\t\t\t// Missing table = the target collection table doesn't exist\n\t\t\t\t// (orphan reference). Treat all those references as missing.\n\t\t\t\t// Any other DB error (permissions, connection, syntax) must\n\t\t\t\t// propagate — silently dropping data integrity errors as\n\t\t\t\t// \"not found\" is exactly the bug F5 fixes.\n\t\t\t\tif (isMissingTableError(error)) {\n\t\t\t\t\ttargetTableMissing = true;\n\t\t\t\t\tbreak;\n\t\t\t\t}\n\t\t\t\tthrow error;\n\t\t\t}\n\t\t}\n\t\tfor (const ref of refs) {\n\t\t\tif (targetTableMissing || !found.has(ref.id)) {\n\t\t\t\tissues.push({\n\t\t\t\t\tpath: ref.field,\n\t\t\t\t\tcode: \"reference_not_found\",\n\t\t\t\t\tmessage: `target '${ref.id}' not found in collection '${target}'`,\n\t\t\t\t});\n\t\t\t}\n\t\t}\n\t}\n\n\tif (issues.length === 0) return { ok: true };\n\treturn {\n\t\tok: false,\n\t\terror: {\n\t\t\tcode: \"VALIDATION_ERROR\",\n\t\t\tmessage: issues.map((issue) => `${issue.path}: ${issue.message}`).join(\"; \"),\n\t\t\tdetails: { issues },\n\t\t},\n\t};\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAuDA,SAAS,UAAU,OAAyB;AAC3C,QAAO,UAAU,UAAa,UAAU,QAAQ,UAAU;;;;;;;;;;AAW3D,SAAS,6BAA6B,OAAkC;CACvE,MAAM,cAAc,MAAM,SAAS;AACnC,KAAI,OAAO,gBAAgB,YAAY,YAAY,SAAS,EAAG,QAAO;CACtE,MAAM,aAAa,MAAM;AACzB,KAAI,cAAc,gBAAgB,YAAY;EAC7C,MAAM,iBAA2B,WAAwC;AACzE,MAAI,OAAO,mBAAmB,YAAY,eAAe,SAAS,EAAG,QAAO;;;;;;;AAS9E,SAAS,gBAAgB,MAA0C;AAClE,KAAI,KAAK,WAAW,EAAG,QAAO;AAC9B,QAAO,KAAK,KAAK,QAAQ,OAAO,IAAI,CAAC,CAAC,KAAK,IAAI;;AAGhD,SAAS,eACR,MACA,YACU;AACV,QAAO,KAAK,WAAW,KAAK,WAAW,IAAI,OAAO,KAAK,GAAG,CAAC,KAAK;;AAGjE,SAAS,sBACR,MACA,YACU;AACV,QAAO,KAAK,WAAW,KAAK,eAAe,MAAM,WAAW;;AAG7D,SAAS,aACR,OACA,YACyB;CACzB,MAAM,SAAiC;EACtC,MAAM,gBAAgB,MAAM,KAAK;EACjC,MAAM,MAAM;EACZ,SAAS,MAAM;EACf;AACD,SAAQ,MAAM,MAAd;EACC,KAAK;EACL,KAAK;EACL,KAAK;AAIJ,OAAI,MAAM,SAAS,QAAQ,sBAAsB,MAAM,MAAM,WAAW,CACvE,QAAO,OAAO;AAEf;EACD,KAAK;AACJ,UAAO,SAAS,MAAM;AACtB,OAAI,OAAO,MAAM,YAAY,SAAU,QAAO,UAAU,MAAM;AAE9D,OAAI,MAAM,UAAU,MAAM,eAAe,MAAM,MAAM,WAAW,CAC/D,QAAO,OAAO;AAEf;EACD,KAAK;AACJ,UAAO,SAAS,MAAM;AACtB,OAAI,OAAO,MAAM,YAAY,SAAU,QAAO,UAAU,MAAM;AAC9D;EACD,KAAK;AACJ,UAAO,SAAS,MAAM;AACtB;;AAEF,QAAO;;;;;;;;;;AAWR,eAAsB,oBACrB,IACA,YACA,MACA,UAAiC,EAAE,EACP;CAE5B,MAAM,uBAAuB,MADZ,IAAI,eAAe,GAAG,CACK,wBAAwB,WAAW;AAC/E,KAAI,CAAC,qBACJ,QAAO;EACN,IAAI;EACJ,OAAO;GACN,MAAM;GACN,SAAS,eAAe,WAAW;GACnC;EACD;CAGF,MAAM,SAAmC,EAAE;CAC3C,MAAM,mBAAmB,qBAAqB,OAAO,MAAM,UAAU,MAAM,gBAAgB;AAC3F,KAAI,kBAAkB,iBAAiB;EACtC,MAAM,EAAE,MAAM,SAAS,iBAAiB;AACxC,SAAO;GACN,IAAI;GACJ,OAAO;IACN,MAAM;IACN,SAAS,eAAe,WAAW,WAAW,iBAAiB,KAAK,iCAAiC,KAAK,QAAQ,KAAK;IACvH;GACD;;CAOF,MAAM,cAAc,IAAI,IAAI,qBAAqB,OAAO,KAAK,MAAM,EAAE,KAAK,CAAC;AAC3E,MAAK,MAAM,OAAO,OAAO,KAAK,KAAK,EAAE;AACpC,MAAI,IAAI,WAAW,IAAI,CAAE;AACzB,MAAI,CAAC,YAAY,IAAI,IAAI,CACxB,QAAO,KAAK;GACX,MAAM;GACN,MAAM;GACN,SAAS,gCAAgC,WAAW;GACpD,CAAC;;CAOJ,MAAM,aAAa,kBAAkB,qBAAqB;CAE1D,MAAM,UADS,QAAQ,UAAU,WAAW,SAAS,GAAG,YAClC,UAAU,MAAM,EAAE,aAAa,MAAM,CAAC;AAC5D,KAAI,CAAC,OAAO,SAAS;EACpB,MAAM,aAAa,IAAI,IAAI,qBAAqB,OAAO,KAAK,MAAM,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC;AACpF,OAAK,MAAM,SAAS,OAAO,MAAM,OAChC,QAAO,KAAK,aAAa,OAAO,WAAW,CAAC;;AAQ9C,MAAK,MAAM,SAAS,qBAAqB,QAAQ;AAChD,MAAI,CAAC,MAAM,SAAU;EACrB,MAAM,UAAU,OAAO,OAAO,MAAM,MAAM,KAAK;AAC/C,MAAI,QAAQ,WAAW,CAAC,QAAS;AACjC,MAAI,KAAK,MAAM,UAAU,GACxB,QAAO,KAAK;GACX,MAAM,MAAM;GACZ,MAAM;GACN,SAAS;GACT,CAAC;;CASJ,MAAM,+BAAe,IAAI,KAA8C;AACvE,MAAK,MAAM,SAAS,qBAAqB,QAAQ;AAChD,MAAI,MAAM,SAAS,YAAa;AAChC,MAAI,QAAQ,WAAW,CAAC,OAAO,OAAO,MAAM,MAAM,KAAK,CAAE;EACzD,MAAM,QAAQ,KAAK,MAAM;AACzB,MAAI,UAAU,MAAM,CAAE;AACtB,MAAI,OAAO,UAAU,SAAU;EAC/B,MAAM,SAAS,6BAA6B,MAAM;AAClD,MAAI,CAAC,OAAQ;EACb,MAAM,OAAO,aAAa,IAAI,OAAO,IAAI,EAAE;AAC3C,OAAK,KAAK;GAAE,OAAO,MAAM;GAAM,IAAI;GAAO,CAAC;AAC3C,eAAa,IAAI,QAAQ,KAAK;;AAG/B,MAAK,MAAM,CAAC,QAAQ,SAAS,cAAc;AAI1C,MAAI;AACH,sBAAmB,QAAQ,8BAA8B;UAClD;AACP,QAAK,MAAM,OAAO,KACjB,QAAO,KAAK;IACX,MAAM,IAAI;IACV,MAAM;IACN,SAAS,wCAAwC,OAAO;IACxD,CAAC;AAEH;;EAGD,MAAM,MAAM,CAAC,GAAG,IAAI,IAAI,KAAK,KAAK,MAAM,EAAE,GAAG,CAAC,CAAC;EAC/C,MAAM,YAAY,MAAM;EAKxB,MAAM,wBAAQ,IAAI,KAAa;EAC/B,IAAI,qBAAqB;AACzB,OAAK,MAAM,WAAW,OAAO,KAAK,eAAe,CAChD,KAAI;GACH,MAAM,OAAO,MAAM,GAAmB;sBACpB,IAAI,IAAI,UAAU,CAAC;oBACrB,IAAI,KAAK,QAAQ,CAAC;;MAEhC,QAAQ,GAAG;AACb,QAAK,MAAM,OAAO,KAAK,KACtB,OAAM,IAAI,IAAI,GAAG;WAEV,OAAO;AAMf,OAAI,oBAAoB,MAAM,EAAE;AAC/B,yBAAqB;AACrB;;AAED,SAAM;;AAGR,OAAK,MAAM,OAAO,KACjB,KAAI,sBAAsB,CAAC,MAAM,IAAI,IAAI,GAAG,CAC3C,QAAO,KAAK;GACX,MAAM,IAAI;GACV,MAAM;GACN,SAAS,WAAW,IAAI,GAAG,6BAA6B,OAAO;GAC/D,CAAC;;AAKL,KAAI,OAAO,WAAW,EAAG,QAAO,EAAE,IAAI,MAAM;AAC5C,QAAO;EACN,IAAI;EACJ,OAAO;GACN,MAAM;GACN,SAAS,OAAO,KAAK,UAAU,GAAG,MAAM,KAAK,IAAI,MAAM,UAAU,CAAC,KAAK,KAAK;GAC5E,SAAS,EAAE,QAAQ;GACnB;EACD"}

package/dist/version-DbT04wbH.mjs

@@ -0,0 +1,9 @@
+//#region src/transfer/format/version.ts
+const SITE_PACKAGE_FORMAT = "emdash-site-package";
+const SITE_PACKAGE_FORMAT_VERSION = "1";
+const SITE_PACKAGE_PROFILE = "full-transfer";
+const SUPPORTED_FORMAT_VERSIONS = Object.freeze([SITE_PACKAGE_FORMAT_VERSION]);
+
+//#endregion
+export { SUPPORTED_FORMAT_VERSIONS as i, SITE_PACKAGE_FORMAT_VERSION as n, SITE_PACKAGE_PROFILE as r, SITE_PACKAGE_FORMAT as t };
+//# sourceMappingURL=version-DbT04wbH.mjs.map

package/dist/version-DbT04wbH.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"version-DbT04wbH.mjs","names":[],"sources":["../src/transfer/format/version.ts"],"sourcesContent":["export const SITE_PACKAGE_FORMAT = \"emdash-site-package\";\nexport const SITE_PACKAGE_FORMAT_VERSION = \"1\";\nexport const SITE_PACKAGE_PROFILE = \"full-transfer\";\n\nexport const SUPPORTED_FORMAT_VERSIONS: readonly string[] = Object.freeze([\n\tSITE_PACKAGE_FORMAT_VERSION,\n]);\n\nexport type SitePackageFormatVersion = typeof SITE_PACKAGE_FORMAT_VERSION;\n"],"mappings":";AAAA,MAAa,sBAAsB;AACnC,MAAa,8BAA8B;AAC3C,MAAa,uBAAuB;AAEpC,MAAa,4BAA+C,OAAO,OAAO,CACzE,4BACA,CAAC"}

package/dist/version-IneBU54o.mjs

@@ -0,0 +1,7 @@
+//#region src/version.ts
+const VERSION = "0.42.0";
+const COMMIT = "67ff36273";
+
+//#endregion
+export { VERSION as n, COMMIT as t };
+//# sourceMappingURL=version-IneBU54o.mjs.map

package/dist/version-IneBU54o.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"version-IneBU54o.mjs","names":[],"sources":["../src/version.ts"],"sourcesContent":["/**\n * Build-time version constants, replaced by tsdown/Vite `define`.\n * Falls back to \"dev\" when running uncompiled (tests, dev).\n */\n\ndeclare const __EMDASH_VERSION__: string;\ndeclare const __EMDASH_COMMIT__: string;\n\nexport const VERSION: string =\n\ttypeof __EMDASH_VERSION__ !== \"undefined\" ? __EMDASH_VERSION__ : \"dev\";\n\nexport const COMMIT: string = typeof __EMDASH_COMMIT__ !== \"undefined\" ? __EMDASH_COMMIT__ : \"dev\";\n"],"mappings":";AAQA,MAAa;AAGb,MAAa"}

package/dist/virtual-modules-Brh6mRVe.mjs

@@ -0,0 +1,516 @@
+import { t as defaultSeed } from "./default-DaoYyFRS.mjs";
+import { createRequire } from "node:module";
+import { resolve } from "node:path";
+import { readFileSync } from "node:fs";
+
+//#region src/astro/integration/virtual-modules.ts
+/**
+* Virtual Module Generators
+*
+* Functions that generate virtual module content for Vite.
+* These modules statically import configured dependencies
+* so Vite can properly resolve and bundle them.
+*/
+const TS_SOURCE_EXT_RE = /^\.(ts|tsx|mts|cts|jsx)$/;
+/** Pattern to remove scoped package prefix from plugin ID */
+const SCOPED_PREFIX_PATTERN = /^@[^/]+\/plugin-/;
+/** Pattern to remove emdash-plugin- prefix from plugin ID */
+const EMDASH_PREFIX_PATTERN = /^emdash-plugin-/;
+const VIRTUAL_CONFIG_ID = "virtual:emdash/config";
+const RESOLVED_VIRTUAL_CONFIG_ID = "\0" + VIRTUAL_CONFIG_ID;
+const VIRTUAL_DIALECT_ID = "virtual:emdash/dialect";
+const RESOLVED_VIRTUAL_DIALECT_ID = "\0" + VIRTUAL_DIALECT_ID;
+const VIRTUAL_STORAGE_ID = "virtual:emdash/storage";
+const RESOLVED_VIRTUAL_STORAGE_ID = "\0" + VIRTUAL_STORAGE_ID;
+const VIRTUAL_OBJECT_CACHE_ID = "virtual:emdash/object-cache";
+const RESOLVED_VIRTUAL_OBJECT_CACHE_ID = "\0" + VIRTUAL_OBJECT_CACHE_ID;
+const VIRTUAL_ADMIN_REGISTRY_ID = "virtual:emdash/admin-registry";
+const RESOLVED_VIRTUAL_ADMIN_REGISTRY_ID = "\0" + VIRTUAL_ADMIN_REGISTRY_ID;
+const VIRTUAL_PLUGINS_ID = "virtual:emdash/plugins";
+const RESOLVED_VIRTUAL_PLUGINS_ID = "\0" + VIRTUAL_PLUGINS_ID;
+const VIRTUAL_SANDBOX_RUNNER_ID = "virtual:emdash/sandbox-runner";
+const RESOLVED_VIRTUAL_SANDBOX_RUNNER_ID = "\0" + VIRTUAL_SANDBOX_RUNNER_ID;
+const VIRTUAL_SANDBOXED_PLUGINS_ID = "virtual:emdash/sandboxed-plugins";
+const RESOLVED_VIRTUAL_SANDBOXED_PLUGINS_ID = "\0" + VIRTUAL_SANDBOXED_PLUGINS_ID;
+const VIRTUAL_AUTH_ID = "virtual:emdash/auth";
+const RESOLVED_VIRTUAL_AUTH_ID = "\0" + VIRTUAL_AUTH_ID;
+const VIRTUAL_AUTH_PROVIDERS_ID = "virtual:emdash/auth-providers";
+const RESOLVED_VIRTUAL_AUTH_PROVIDERS_ID = "\0" + VIRTUAL_AUTH_PROVIDERS_ID;
+const VIRTUAL_MEDIA_PROVIDERS_ID = "virtual:emdash/media-providers";
+const RESOLVED_VIRTUAL_MEDIA_PROVIDERS_ID = "\0" + VIRTUAL_MEDIA_PROVIDERS_ID;
+const VIRTUAL_BLOCK_COMPONENTS_ID = "virtual:emdash/block-components";
+const RESOLVED_VIRTUAL_BLOCK_COMPONENTS_ID = "\0" + VIRTUAL_BLOCK_COMPONENTS_ID;
+const VIRTUAL_SEED_ID = "virtual:emdash/seed";
+const RESOLVED_VIRTUAL_SEED_ID = "\0" + VIRTUAL_SEED_ID;
+const VIRTUAL_WAIT_UNTIL_ID = "virtual:emdash/wait-until";
+const RESOLVED_VIRTUAL_WAIT_UNTIL_ID = "\0" + VIRTUAL_WAIT_UNTIL_ID;
+const VIRTUAL_SCHEDULER_ID = "virtual:emdash/scheduler";
+const RESOLVED_VIRTUAL_SCHEDULER_ID = "\0" + VIRTUAL_SCHEDULER_ID;
+const VIRTUAL_ENV_ID = "virtual:emdash/env";
+const RESOLVED_VIRTUAL_ENV_ID = "\0" + VIRTUAL_ENV_ID;
+const VIRTUAL_BUILD_ID = "virtual:emdash/build";
+const RESOLVED_VIRTUAL_BUILD_ID = "\0" + VIRTUAL_BUILD_ID;
+/**
+* Generates the config virtual module.
+*/
+function generateConfigModule(serializableConfig) {
+	return `export default ${JSON.stringify(serializableConfig)};`;
+}
+/**
+* Generates the dialect virtual module.
+*
+* Adapters that set `supportsRequestScope: true` on their descriptor are
+* expected to export `createRequestScopedDb` from their runtime entrypoint;
+* the generator re-exports it so middleware can ask for a per-request Kysely
+* (used for D1 Sessions API, bookmark cookies, read-replica routing). Other
+* adapters get a stub that returns null.
+*
+* Adapters independently opt into the cold-start coalescing dialect. Keeping
+* this capability explicit prevents bundlers from probing exports that do not
+* exist on SQLite, libSQL, PostgreSQL, or other adapters.
+*/
+function generateDialectModule(opts) {
+	const { entrypoint, supportsRequestScope, supportsCoalescing, supportsCollectionDeletionGuard } = opts;
+	if (!entrypoint) return [
+		`export const createDialect = undefined;`,
+		`export const dialectType = "sqlite";`,
+		`export const createRequestScopedDb = (_opts) => null;`,
+		`export const createCoalescingDialect = undefined;`,
+		`export const executeCollectionDeletionGuard = undefined;`
+	].join("\n");
+	const type = opts.type ?? "sqlite";
+	const coalescingExport = supportsCoalescing ? `import { createCoalescingDialect as _createCoalescingDialect } from "${entrypoint}";
+export const createCoalescingDialect = _createCoalescingDialect;` : `export const createCoalescingDialect = undefined;`;
+	const collectionDeletionExport = supportsCollectionDeletionGuard ? `export { executeCollectionDeletionGuard } from "${entrypoint}";` : `export const executeCollectionDeletionGuard = undefined;`;
+	if (supportsRequestScope) return `
+import { createDialect as _createDialect } from "${entrypoint}";
+export { createRequestScopedDb } from "${entrypoint}";
+${coalescingExport}
+${collectionDeletionExport}
+export const createDialect = _createDialect;
+export const dialectType = ${JSON.stringify(type)};
+`;
+	return `
+import { createDialect as _createDialect } from "${entrypoint}";
+${coalescingExport}
+${collectionDeletionExport}
+export const createDialect = _createDialect;
+export const dialectType = ${JSON.stringify(type)};
+export const createRequestScopedDb = (_opts) => null;
+`;
+}
+/**
+* Generates the storage virtual module.
+* Statically imports the configured storage adapter.
+*/
+function generateStorageModule(storageEntrypoint) {
+	if (!storageEntrypoint) return `export const createStorage = undefined;`;
+	return `
+import { createStorage as _createStorage } from "${storageEntrypoint}";
+export const createStorage = _createStorage;
+`;
+}
+/**
+* Generates the object-cache virtual module.
+*
+* Statically imports the configured object-cache backend's `createObjectCache`
+* factory and embeds its serializable config. When no object cache is
+* configured, exports `undefined` so the runtime read-through layer becomes a
+* transparent passthrough (cache off by default).
+*/
+function generateObjectCacheModule(entrypoint, config) {
+	if (!entrypoint) return [`export const createObjectCache = undefined;`, `export const objectCacheConfig = undefined;`].join("\n");
+	return `
+import { createObjectCache as _createObjectCache } from "${entrypoint}";
+export const createObjectCache = _createObjectCache;
+export const objectCacheConfig = ${JSON.stringify(config ?? {})};
+`;
+}
+/**
+* Generates the auth virtual module.
+* Statically imports the configured auth provider.
+*/
+function generateAuthModule(authEntrypoint) {
+	if (!authEntrypoint) return `export const authenticate = undefined;`;
+	return `
+import { authenticate as _authenticate } from "${authEntrypoint}";
+export const authenticate = _authenticate;
+`;
+}
+/**
+* Generates the auth providers module.
+*
+* Statically imports each auth provider's `adminEntry` module and exports
+* a registry keyed by provider ID. The admin UI uses this to render
+* provider-specific login buttons/forms and setup steps.
+*
+* Follows the same pattern as `generateAdminRegistryModule()` for plugins.
+*/
+function generateAuthProvidersModule(descriptors) {
+	const withAdmin = descriptors.filter((d) => d.adminEntry);
+	if (withAdmin.length === 0) return `export const authProviders = {};`;
+	const imports = [];
+	const entries = [];
+	withAdmin.forEach((descriptor, index) => {
+		const varName = `authProvider${index}`;
+		imports.push(`import * as ${varName} from ${JSON.stringify(descriptor.adminEntry)};`);
+		entries.push(`  ${JSON.stringify(descriptor.id)}: { ...${varName}, id: ${JSON.stringify(descriptor.id)}, label: ${JSON.stringify(descriptor.label)} },`);
+	});
+	return `
+// Auto-generated auth provider registry
+${imports.join("\n")}
+
+export const authProviders = {
+${entries.join("\n")}
+};
+`;
+}
+/**
+* Generates the plugins module.
+* Imports and instantiates all plugins at runtime.
+*
+* Handles two plugin formats:
+* - **Native**: imports `createPlugin` and calls it with options
+* - **Standard**: imports the default export and wraps it with `adaptSandboxEntry`
+*
+* The format is determined by `descriptor.format`:
+* - `"standard"` -- uses adaptSandboxEntry
+* - `"native"` or undefined -- uses createPlugin
+*
+* This is critical for Cloudflare Workers where globals don't persist
+* between build time and runtime.
+*/
+function generatePluginsModule(descriptors) {
+	if (descriptors.length === 0) return `export const plugins = [];`;
+	const imports = [];
+	const instantiations = [];
+	let needsAdapter = false;
+	descriptors.forEach((descriptor, index) => {
+		if (!descriptor.entrypoint) throw new Error(`[emdash] Plugin "${descriptor.id}" has no \`entrypoint\`. The astro integration's \`plugins: []\` requires plugins that resolve to a file/package entrypoint so they can be bundled at build time; an in-process \`definePlugin({...})\` result passed directly is not supported. Move the plugin into its own module and reference it via a factory that returns a descriptor with an \`entrypoint\` (e.g. \`plugins: [myPlugin()]\`).`);
+		if (descriptor.format === "standard") {
+			needsAdapter = true;
+			const varName = `pluginDef${index}`;
+			imports.push(`import ${varName} from "${descriptor.entrypoint}";`);
+			instantiations.push(`adaptSandboxEntry(${varName}, ${JSON.stringify({
+				id: descriptor.id,
+				version: descriptor.version,
+				capabilities: descriptor.capabilities,
+				allowedHosts: descriptor.allowedHosts,
+				storage: descriptor.storage,
+				adminPages: descriptor.adminPages,
+				adminWidgets: descriptor.adminWidgets,
+				editorPanels: descriptor.editorPanels,
+				editorActions: descriptor.editorActions,
+				settingsSchema: descriptor.settingsSchema,
+				portableTextBlocks: descriptor.portableTextBlocks,
+				fieldWidgets: descriptor.fieldWidgets,
+				mcp: descriptor.mcp
+			})})`);
+		} else {
+			const varName = `createPlugin${index}`;
+			imports.push(`import { createPlugin as ${varName} } from "${descriptor.entrypoint}";`);
+			instantiations.push(`${varName}(${JSON.stringify(descriptor.options ?? {})})`);
+		}
+	});
+	return `
+// Auto-generated plugins module
+// Imports and instantiates all configured plugins at runtime
+
+${needsAdapter ? `import { adaptSandboxEntry } from "emdash/plugins/adapt-sandbox-entry";\n` : ""}${imports.join("\n")}
+
+/** Resolved plugins array */
+export const plugins = [
+  ${instantiations.join(",\n  ")}
+];
+`;
+}
+/**
+* Generates the admin registry module.
+* Uses adminEntry from plugin descriptors to statically import admin modules.
+*/
+function generateAdminRegistryModule(descriptors) {
+	const adminDescriptors = descriptors.filter((d) => d.adminEntry);
+	if (adminDescriptors.length === 0) return `export const pluginAdmins = {};`;
+	const imports = [];
+	const entries = [];
+	adminDescriptors.forEach((descriptor, index) => {
+		const varName = `admin${index}`;
+		const pluginId = descriptor.id ?? descriptor.entrypoint.replace(SCOPED_PREFIX_PATTERN, "").replace(EMDASH_PREFIX_PATTERN, "");
+		imports.push(`import * as ${varName} from "${descriptor.adminEntry}";`);
+		entries.push(`  "${pluginId}": ${varName},`);
+	});
+	return `
+// Auto-generated plugin admin registry
+${imports.join("\n")}
+
+export const pluginAdmins = {
+${entries.join("\n")}
+};
+`;
+}
+/**
+* Generates the sandbox runner module.
+* Imports the configured sandbox runner factory or provides a noop default.
+*
+* When sandbox is explicitly false (debugging escape hatch), we still mark
+* sandboxEnabled = true so sandboxed plugin entries are loaded, but we use
+* the noop runner which falls through to in-process loading via adaptSandboxEntry.
+*/
+function generateSandboxRunnerModule(sandboxRunner, sandbox) {
+	if (!sandboxRunner) return `
+// No sandbox runner configured - sandboxed plugins disabled
+import { createNoopSandboxRunner } from "emdash";
+
+export const createSandboxRunner = createNoopSandboxRunner;
+export const sandboxEnabled = false;
+`;
+	if (sandbox === false) return `
+// Sandbox explicitly disabled (sandbox: false) - plugins run in-process
+import { createNoopSandboxRunner } from "emdash";
+
+export const createSandboxRunner = createNoopSandboxRunner;
+export const sandboxEnabled = true;
+export const sandboxBypassed = true;
+`;
+	return `
+// Auto-generated sandbox runner module
+import { createSandboxRunner as _createSandboxRunner } from "${sandboxRunner}";
+
+export const createSandboxRunner = _createSandboxRunner;
+export const sandboxEnabled = true;
+`;
+}
+/**
+* Generates the media providers module.
+* Imports and instantiates configured media providers at runtime.
+*/
+function generateMediaProvidersModule(descriptors) {
+	const localDisabled = descriptors.some((d) => d.id === "local" && d.config.enabled === false);
+	const imports = [];
+	const entries = [];
+	if (!localDisabled) {
+		imports.push(`import { createMediaProvider as createLocalProvider } from "emdash/media/local-runtime";`);
+		entries.push(`{
+	id: "local",
+	name: "Library",
+	icon: "folder",
+	capabilities: { browse: true, search: false, upload: true, delete: true },
+	createProvider: (ctx) => createLocalProvider({ ...ctx, enabled: true }),
+}`);
+	}
+	descriptors.filter((d) => d.id !== "local" || d.config.enabled !== false).filter((d) => d.id !== "local").forEach((descriptor, index) => {
+		const varName = `createProvider${index}`;
+		imports.push(`import { createMediaProvider as ${varName} } from "${descriptor.entrypoint}";`);
+		entries.push(`{
+	id: ${JSON.stringify(descriptor.id)},
+	name: ${JSON.stringify(descriptor.name)},
+	icon: ${JSON.stringify(descriptor.icon)},
+	capabilities: ${JSON.stringify(descriptor.capabilities)},
+	createProvider: (ctx) => ${varName}({ ...${JSON.stringify(descriptor.config)}, ...ctx }),
+}`);
+	});
+	return `
+// Auto-generated media providers module
+${imports.join("\n")}
+
+/** Media provider descriptors with factory functions */
+export const mediaProviders = [
+  ${entries.join(",\n  ")}
+];
+`;
+}
+/**
+* Generates the block components module.
+* Collects and merges `blockComponents` exports from plugin component entries.
+*/
+function generateBlockComponentsModule(descriptors) {
+	const withComponents = descriptors.filter((d) => d.componentsEntry);
+	if (withComponents.length === 0) return `export const pluginBlockComponents = {};`;
+	const imports = [];
+	const spreads = [];
+	withComponents.forEach((d, i) => {
+		imports.push(`import { blockComponents as bc${i} } from "${d.componentsEntry}";`);
+		spreads.push(`...bc${i}`);
+	});
+	return `${imports.join("\n")}\nexport const pluginBlockComponents = { ${spreads.join(", ")} };`;
+}
+/**
+* Generates the wait-until virtual module.
+*
+* Under @astrojs/cloudflare, re-exports `waitUntil` from `cloudflare:workers`
+* so `after(fn)` in core can extend the worker's lifetime past the response
+* for deferred bookkeeping. For any other adapter, exports `undefined` —
+* Node's long-lived event loop keeps deferred promises running without a
+* lifetime extender.
+*
+* Keeping the adapter check here — rather than in core — means core itself
+* has no Cloudflare-specific imports or code paths.
+*/
+function generateWaitUntilModule(adapterName) {
+	if (adapterName === "@astrojs/cloudflare") return `export { waitUntil } from "cloudflare:workers";`;
+	return `export const waitUntil = undefined;`;
+}
+/**
+* Generates the env virtual module.
+*
+* Under @astrojs/cloudflare, re-exports `env` from `cloudflare:workers` so
+* routes can read Worker bindings/secrets without touching
+* `Astro.locals.runtime.env`, which Astro 6+ removed (accessing it throws
+* rather than returning undefined, so `locals.runtime?.env` optional-chaining
+* doesn't help -- see #1736). For any other adapter, exports `undefined` so
+* callers fall back to `import.meta.env`. Mirrors generateWaitUntilModule:
+* core stays adapter-agnostic, with no direct `cloudflare:workers` import
+* that would fail to resolve under a Node build.
+*/
+function generateEnvModule(adapterName) {
+	if (adapterName === "@astrojs/cloudflare") return `export { env } from "cloudflare:workers";`;
+	return `export const env = undefined;`;
+}
+/**
+* Generates the build virtual module.
+*
+* Content-hashed `/_astro/*` names make the response depend on the build, not
+* only on the content. Exposing the build timestamp lets the middleware fold
+* that dimension into the cache validator, so a code-only deploy stops
+* answering conditional requests with 304 while the assets the cached HTML
+* references are already gone.
+*/
+function generateBuildModule(buildTime) {
+	return `export const buildTime = ${buildTime};`;
+}
+/**
+* Generates the scheduler virtual module.
+*
+* Decides — at build time, from the Astro adapter — whether the runtime gets a
+* long-lived timer heartbeat. A *production* Cloudflare build has no persistent
+* timers, so the Worker's `scheduled()` handler (a Cron Trigger) drives
+* `runScheduledTasks()` instead and this exports `null`. Every other case — any
+* other adapter (Node, Bun), and crucially local `astro dev` even under the
+* Cloudflare adapter (no Cron Trigger fires in dev) — gets a `NodeCronScheduler`
+* factory so plugin cron, scheduled publishing, and cleanup still run.
+*
+* Keeping the adapter check here — rather than in core's runtime — means the
+* runtime has no Cloudflare-specific code path; it just calls `createScheduler`
+* if one was injected. Mirrors the wait-until module's approach.
+*/
+function generateSchedulerModule(adapterName, command) {
+	if (adapterName === "@astrojs/cloudflare" && command !== "serve") return `// Serverless build: an external Cron Trigger drives scheduled work.
+export const createScheduler = null;
+`;
+	return `// Long-lived runtime (or local dev): drive scheduled work from an in-process timer.
+import { NodeCronScheduler } from "emdash";
+
+export function createScheduler(executor) {
+	return new NodeCronScheduler(executor);
+}
+`;
+}
+/**
+* Generates the seed virtual module.
+* Reads the user's seed file at build time (in Node context) and embeds it,
+* so the runtime doesn't need filesystem access (required for workerd).
+*
+* Search order:
+*   1. `.emdash/seed.json`
+*   2. `package.json` → `emdash.seed` reference
+*   3. `seed/seed.json` (conventional template path)
+*
+* Exports `userSeed` (user's seed or null) and `seed` (user's seed or default).
+*
+* When no user seed is found, falls back to the built-in default seed and
+* (if `warnOnFallback` is true) logs a warning so misconfiguration is visible
+* during `astro dev`. Build/preview/sync stay silent so sites that
+* intentionally use the default seed (e.g. the blank template) don't
+* generate noisy logs.
+*/
+function generateSeedModule(projectRoot, warnOnFallback = false) {
+	let userSeedJson = null;
+	try {
+		const content = readFileSync(resolve(projectRoot, ".emdash", "seed.json"), "utf-8");
+		JSON.parse(content);
+		userSeedJson = content;
+	} catch {}
+	if (!userSeedJson) try {
+		const pkgContent = readFileSync(resolve(projectRoot, "package.json"), "utf-8");
+		const pkg = JSON.parse(pkgContent);
+		if (pkg.emdash?.seed) {
+			const content = readFileSync(resolve(projectRoot, pkg.emdash.seed), "utf-8");
+			JSON.parse(content);
+			userSeedJson = content;
+		}
+	} catch {}
+	if (!userSeedJson) try {
+		const content = readFileSync(resolve(projectRoot, "seed", "seed.json"), "utf-8");
+		JSON.parse(content);
+		userSeedJson = content;
+	} catch {}
+	if (userSeedJson) return [`export const userSeed = ${userSeedJson};`, `export const seed = userSeed;`].join("\n");
+	if (warnOnFallback) console.warn("[emdash] No user seed found at .emdash/seed.json, package.json#emdash.seed, or seed/seed.json. Falling back to the built-in default seed; the setup wizard will not offer demo content for this site.");
+	return [`export const userSeed = null;`, `export const seed = ${JSON.stringify(defaultSeed)};`].join("\n");
+}
+/**
+* Resolve a module specifier from the project's context.
+* Uses Node.js require.resolve with the project root as base.
+*/
+function resolveModulePathFromProject(specifier, projectRoot) {
+	return createRequire(resolve(projectRoot, "package.json")).resolve(specifier);
+}
+/**
+* Generates the sandboxed plugins module.
+* Resolves plugin entrypoints to files, reads them, and embeds the code.
+* Notifies the caller about each resolved entry so build tools can watch it.
+*
+* At runtime, middleware uses SandboxRunner to load these into isolates.
+*/
+function generateSandboxedPluginsModule(sandboxed, projectRoot, onEntryResolved) {
+	if (sandboxed.length === 0) return `
+// No sandboxed plugins configured
+export const sandboxedPlugins = [];
+`;
+	const pluginEntries = [];
+	for (const descriptor of sandboxed) {
+		const bundleSpecifier = descriptor.entrypoint;
+		const filePath = resolveModulePathFromProject(bundleSpecifier, projectRoot);
+		const ext = filePath.slice(filePath.lastIndexOf("."));
+		if (TS_SOURCE_EXT_RE.test(ext)) throw new Error(`Sandboxed plugin "${descriptor.id}" entrypoint "${bundleSpecifier}" resolves to unbuilt source (${filePath}). Sandbox entries must be pre-built JavaScript. Ensure the plugin's package.json exports point to built files (e.g. dist/*.mjs) and run the plugin's build step before building the site.`);
+		onEntryResolved?.(filePath);
+		const code = readFileSync(filePath, "utf-8");
+		pluginEntries.push(`{
+    id: ${JSON.stringify(descriptor.id)},
+    version: ${JSON.stringify(descriptor.version)},
+    options: ${JSON.stringify(descriptor.options ?? {})},
+    capabilities: ${JSON.stringify(descriptor.capabilities ?? [])},
+    allowedHosts: ${JSON.stringify(descriptor.allowedHosts ?? [])},
+    storage: ${JSON.stringify(descriptor.storage ?? {})},
+    mcp: ${JSON.stringify(descriptor.mcp)},
+    routes: ${JSON.stringify(descriptor.routes ?? [])},
+    hooks: ${JSON.stringify(descriptor.hooks ?? [])},
+    adminPages: ${JSON.stringify(descriptor.adminPages ?? [])},
+    adminWidgets: ${JSON.stringify(descriptor.adminWidgets ?? [])},
+    editorPanels: ${JSON.stringify(descriptor.editorPanels ?? [])},
+    editorActions: ${JSON.stringify(descriptor.editorActions ?? [])},
+    settingsSchema: ${JSON.stringify(descriptor.settingsSchema)},
+    portableTextBlocks: ${JSON.stringify(descriptor.portableTextBlocks ?? [])},
+    fieldWidgets: ${JSON.stringify(descriptor.fieldWidgets ?? [])},
+    adminEntry: ${JSON.stringify(descriptor.adminEntry)},
+    // Code read from: ${filePath}
+    code: ${JSON.stringify(code)},
+  }`);
+	}
+	return `
+// Auto-generated sandboxed plugins module
+// Plugin code is embedded at build time
+
+/**
+ * Sandboxed plugin entries with embedded code.
+ * Loaded at runtime via SandboxRunner.
+ */
+export const sandboxedPlugins = [
+  ${pluginEntries.join(",\n  ")}
+];
+`;
+}
+
+//#endregion
+export { VIRTUAL_SANDBOX_RUNNER_ID as A, generateConfigModule as B, VIRTUAL_CONFIG_ID as C, VIRTUAL_OBJECT_CACHE_ID as D, VIRTUAL_MEDIA_PROVIDERS_ID as E, generateAdminRegistryModule as F, generatePluginsModule as G, generateEnvModule as H, generateAuthModule as I, generateSchedulerModule as J, generateSandboxRunnerModule as K, generateAuthProvidersModule as L, VIRTUAL_SEED_ID as M, VIRTUAL_STORAGE_ID as N, VIRTUAL_PLUGINS_ID as O, VIRTUAL_WAIT_UNTIL_ID as P, generateBlockComponentsModule as R, VIRTUAL_BUILD_ID as S, VIRTUAL_ENV_ID as T, generateMediaProvidersModule as U, generateDialectModule as V, generateObjectCacheModule as W, generateStorageModule as X, generateSeedModule as Y, generateWaitUntilModule as Z, RESOLVED_VIRTUAL_WAIT_UNTIL_ID as _, RESOLVED_VIRTUAL_BUILD_ID as a, VIRTUAL_AUTH_PROVIDERS_ID as b, RESOLVED_VIRTUAL_ENV_ID as c, RESOLVED_VIRTUAL_PLUGINS_ID as d, RESOLVED_VIRTUAL_SANDBOXED_PLUGINS_ID as f, RESOLVED_VIRTUAL_STORAGE_ID as g, RESOLVED_VIRTUAL_SEED_ID as h, RESOLVED_VIRTUAL_BLOCK_COMPONENTS_ID as i, VIRTUAL_SCHEDULER_ID as j, VIRTUAL_SANDBOXED_PLUGINS_ID as k, RESOLVED_VIRTUAL_MEDIA_PROVIDERS_ID as l, RESOLVED_VIRTUAL_SCHEDULER_ID as m, RESOLVED_VIRTUAL_AUTH_ID as n, RESOLVED_VIRTUAL_CONFIG_ID as o, RESOLVED_VIRTUAL_SANDBOX_RUNNER_ID as p, generateSandboxedPluginsModule as q, RESOLVED_VIRTUAL_AUTH_PROVIDERS_ID as r, RESOLVED_VIRTUAL_DIALECT_ID as s, RESOLVED_VIRTUAL_ADMIN_REGISTRY_ID as t, RESOLVED_VIRTUAL_OBJECT_CACHE_ID as u, VIRTUAL_ADMIN_REGISTRY_ID as v, VIRTUAL_DIALECT_ID as w, VIRTUAL_BLOCK_COMPONENTS_ID as x, VIRTUAL_AUTH_ID as y, generateBuildModule as z };
+//# sourceMappingURL=virtual-modules-Brh6mRVe.mjs.map