emdash 0.40.1 → 0.42.0

package/dist/astro/routes/api/admin/transfer/imports/_id_/plan.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"plan.mjs","names":[],"sources":["../../../../../../../../src/astro/routes/api/admin/transfer/imports/[id]/plan.ts"],"sourcesContent":["/**\n * GET /_emdash/api/admin/transfer/imports/:id/plan — the analyzed plan and its digest.\n */\n\nimport type { APIRoute } from \"astro\";\n\nimport { requirePerm } from \"#api/authorize.js\";\nimport { apiError, requireDb, unwrapResult } from \"#api/error.js\";\nimport { handleImportPlan } from \"#api/handlers/transfer.js\";\nimport { requireAnyScope } from \"#auth/scopes.js\";\n\nexport const prerender = false;\n\nexport const GET: APIRoute = async ({ params, locals }) => {\n\tconst { emdash, user } = locals;\n\tconst dbErr = requireDb(emdash?.db);\n\tif (dbErr) return dbErr;\n\n\tconst denied = requirePerm(user, \"transfer:import\");\n\tif (denied) return denied;\n\tconst scopeDenied = requireAnyScope(locals, [\"transfer:analyze\", \"transfer:execute\"]);\n\tif (scopeDenied) return scopeDenied;\n\n\tif (!emdash.storage) {\n\t\treturn apiError(\"STORAGE_NOT_CONFIGURED\", \"No storage backend is configured\", 503);\n\t}\n\n\treturn unwrapResult(await handleImportPlan(emdash.db, emdash.storage, params.id ?? \"\"));\n};\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAWA,MAAa,YAAY;AAEzB,MAAa,MAAgB,OAAO,EAAE,QAAQ,aAAa;CAC1D,MAAM,EAAE,QAAQ,SAAS;CACzB,MAAM,QAAQ,UAAU,QAAQ,GAAG;AACnC,KAAI,MAAO,QAAO;CAElB,MAAM,SAAS,YAAY,MAAM,kBAAkB;AACnD,KAAI,OAAQ,QAAO;CACnB,MAAM,cAAc,gBAAgB,QAAQ,CAAC,oBAAoB,mBAAmB,CAAC;AACrF,KAAI,YAAa,QAAO;AAExB,KAAI,CAAC,OAAO,QACX,QAAO,SAAS,0BAA0B,oCAAoC,IAAI;AAGnF,QAAO,aAAa,MAAM,iBAAiB,OAAO,IAAI,OAAO,SAAS,OAAO,MAAM,GAAG,CAAC"}
+{"version":3,"file":"plan.mjs","names":[],"sources":["../../../../../../../../src/astro/routes/api/admin/transfer/imports/[id]/plan.ts"],"sourcesContent":["/**\n * GET /_emdash/api/admin/transfer/imports/:id/plan — the analyzed plan and its digest.\n */\n\nimport type { APIRoute } from \"astro\";\n\nimport { requirePerm } from \"#api/authorize.js\";\nimport { apiError, requireDb, unwrapResult } from \"#api/error.js\";\nimport { handleImportPlan } from \"#api/handlers/transfer.js\";\nimport { requireAnyScope } from \"#auth/scopes.js\";\n\nexport const prerender = false;\n\nexport const GET: APIRoute = async ({ params, locals }) => {\n\tconst { emdash, user } = locals;\n\tconst dbErr = requireDb(emdash?.db);\n\tif (dbErr) return dbErr;\n\n\tconst denied = requirePerm(user, \"transfer:import\");\n\tif (denied) return denied;\n\tconst scopeDenied = requireAnyScope(locals, [\"transfer:analyze\", \"transfer:execute\"]);\n\tif (scopeDenied) return scopeDenied;\n\n\tif (!emdash.storage) {\n\t\treturn apiError(\"STORAGE_NOT_CONFIGURED\", \"No storage backend is configured\", 503);\n\t}\n\n\treturn unwrapResult(await handleImportPlan(emdash.db, emdash.storage, params.id ?? \"\"));\n};\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAWA,MAAa,YAAY;AAEzB,MAAa,MAAgB,OAAO,EAAE,QAAQ,aAAa;CAC1D,MAAM,EAAE,QAAQ,SAAS;CACzB,MAAM,QAAQ,UAAU,QAAQ,GAAG;AACnC,KAAI,MAAO,QAAO;CAElB,MAAM,SAAS,YAAY,MAAM,kBAAkB;AACnD,KAAI,OAAQ,QAAO;CACnB,MAAM,cAAc,gBAAgB,QAAQ,CAAC,oBAAoB,mBAAmB,CAAC;AACrF,KAAI,YAAa,QAAO;AAExB,KAAI,CAAC,OAAO,QACX,QAAO,SAAS,0BAA0B,oCAAoC,IAAI;AAGnF,QAAO,aAAa,MAAM,iBAAiB,OAAO,IAAI,OAAO,SAAS,OAAO,MAAM,GAAG,CAAC"}

package/dist/astro/routes/api/admin/transfer/imports/_id_/receipt.mjs

@@ -4,49 +4,50 @@ import "../../../../../../../after-PcEvMY_6.mjs";
 import "../../../../../../../options-DhrI7eMv.mjs";
 import "../../../../../../../base64-DvnNgP7e.mjs";
 import "../../../../../../../secrets-CIi0nFiR.mjs";
-import "../../../../../../../object-cache-CqWNY5uP.mjs";
-import "../../../../../../../types-BkUg2yHx.mjs";
-import "../../../../../../../media-CPXTbb1R.mjs";
-import "../../../../../../../audit-RfCugiSB.mjs";
-import "../../../../../../../request-cache-DzLYKm_x.mjs";
-import "../../../../../../../byline-registry-gnKscbQX.mjs";
-import "../../../../../../../field-defs-cache-HIgBbqZZ.mjs";
-import "../../../../../../../byline-DYmkXqvo.mjs";
-import "../../../../../../../fts-manager-S-K0laoS.mjs";
-import "../../../../../../../loader-BzqeR1ZN.mjs";
-import "../../../../../../../collection-slugs-cache-CjGk__zp.mjs";
-import "../../../../../../../capture-triggers-kJyl_yyM.mjs";
-import "../../../../../../../activation-LOkDM5WT.mjs";
-import "../../../../../../../block-type-registry-DUI_3KxT.mjs";
-import "../../../../../../../collection-deletion-BIm28mo3.mjs";
-import "../../../../../../../errors-DgE1zJGG.mjs";
-import "../../../../../../../canonical-YhEQezjg.mjs";
-import "../../../../../../../digest-BarSh-pN.mjs";
-import "../../../../../../../hash-SDAW6zC-.mjs";
-import "../../../../../../../zod-generator-D6uE4WiS.mjs";
-import "../../../../../../../collection-deletion-processor-Br6rxs3u.mjs";
-import "../../../../../../../settings-DYidIB26.mjs";
-import "../../../../../../../errors-BF0_LFhW.mjs";
-import "../../../../../../../settings-B4vDl1fK.mjs";
-import { a as unwrapResult, i as requireDb } from "../../../../../../../error-CfvOHP0M.mjs";
-import "../../../../../../../redirects-Cv9apQKj.mjs";
-import "../../../../../../../menus-BM7BPLOb.mjs";
-import "../../../../../../../status-DZKIG4a9.mjs";
-import "../../../../../../../fence-CMDXJYc_.mjs";
-import "../../../../../../../api-tokens-CE1ECIg0.mjs";
-import "../../../../../../../tar-_1AgTYFu.mjs";
-import "../../../../../../../kinds-CRu_T5T5.mjs";
-import "../../../../../../../paths-JxokKIbr.mjs";
-import "../../../../../../../transformations-9gfpwY65.mjs";
-import "../../../../../../../version-BRZXVifl.mjs";
-import "../../../../../../../receipt-B4wJj5Jq.mjs";
-import { i as requirePerm } from "../../../../../../../authorize-seCifOMJ.mjs";
-import { t as requireAnyScope } from "../../../../../../../scopes-Dbk-ElhT.mjs";
-import "../../../../../../../approvals-CqMfNxak.mjs";
-import "../../../../../../../plan-xjcWrAah.mjs";
-import "../../../../../../../stage-DgrBz_du.mjs";
-import { x as handleImportReceipt } from "../../../../../../../transfer-DgeCvHnj.mjs";
-import "../../../../../../../keys-yxLm5l35.mjs";
+import "../../../../../../../object-cache-Bo6DGaC9.mjs";
+import "../../../../../../../request-cache-C4CIo5ad.mjs";
+import "../../../../../../../url-Dn3IStq8.mjs";
+import "../../../../../../../types-j6MBDjlZ.mjs";
+import "../../../../../../../media-CputjGE1.mjs";
+import "../../../../../../../audit-BszbE_BP.mjs";
+import "../../../../../../../byline-registry-dvt4N3xV.mjs";
+import "../../../../../../../field-defs-cache-DEkFYCDE.mjs";
+import "../../../../../../../byline-02tu_Uc-.mjs";
+import "../../../../../../../fts-manager-DU03MxWu.mjs";
+import "../../../../../../../loader-B_bcoE1h.mjs";
+import "../../../../../../../collection-slugs-cache-BNRAPNiu.mjs";
+import "../../../../../../../capture-triggers-CdZfvHtF.mjs";
+import "../../../../../../../activation-DDuqAat2.mjs";
+import "../../../../../../../collection-deletion-JecE26cS.mjs";
+import "../../../../../../../registry-CtHRqVe-.mjs";
+import "../../../../../../../hash-CY4QdeMJ.mjs";
+import "../../../../../../../zod-generator-DnfG5sGQ.mjs";
+import "../../../../../../../errors-CjXd1LgH.mjs";
+import "../../../../../../../canonical-CAecl1UQ.mjs";
+import "../../../../../../../digest-DiYAoZpf.mjs";
+import "../../../../../../../errors-CNvATh_7.mjs";
+import "../../../../../../../collection-deletion-processor-DgCfF3a1.mjs";
+import "../../../../../../../settings-B0zQj_Tj.mjs";
+import "../../../../../../../settings-BbVRRGDp.mjs";
+import { a as unwrapResult, i as requireDb } from "../../../../../../../error-CEdm_AWU.mjs";
+import "../../../../../../../redirects-D4EWeXAo.mjs";
+import "../../../../../../../menus-BQKqf0Up.mjs";
+import "../../../../../../../status-D39Fpy8R.mjs";
+import "../../../../../../../fence-BrnQffdY.mjs";
+import "../../../../../../../api-tokens-BLz2MtQs.mjs";
+import "../../../../../../../tar-lDI_fzLD.mjs";
+import "../../../../../../../kinds-CXY-fwQ6.mjs";
+import "../../../../../../../paths-DiENGBx5.mjs";
+import "../../../../../../../transformations-DdnpSdeC.mjs";
+import "../../../../../../../version-DbT04wbH.mjs";
+import "../../../../../../../receipt-q1VK9jhj.mjs";
+import { i as requirePerm } from "../../../../../../../authorize-soZXK7U0.mjs";
+import { t as requireAnyScope } from "../../../../../../../scopes-C1HJaIyf.mjs";
+import "../../../../../../../approvals-l9sGqPmL.mjs";
+import "../../../../../../../plan-BxCS1tl5.mjs";
+import "../../../../../../../stage-Cf9PqdUB.mjs";
+import { x as handleImportReceipt } from "../../../../../../../transfer-DLu_6AXL.mjs";
+import "../../../../../../../keys-r08WvAng.mjs";
 
 //#region src/astro/routes/api/admin/transfer/imports/[id]/receipt.ts
 const prerender = false;

package/dist/astro/routes/api/admin/transfer/imports/_id_/receipt.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"receipt.mjs","names":[],"sources":["../../../../../../../../src/astro/routes/api/admin/transfer/imports/[id]/receipt.ts"],"sourcesContent":["/**\n * GET /_emdash/api/admin/transfer/imports/:id/receipt — the verified receipt of a complete import.\n */\n\nimport type { APIRoute } from \"astro\";\n\nimport { requirePerm } from \"#api/authorize.js\";\nimport { requireDb, unwrapResult } from \"#api/error.js\";\nimport { handleImportReceipt } from \"#api/handlers/transfer.js\";\nimport { requireAnyScope } from \"#auth/scopes.js\";\n\nexport const prerender = false;\n\nexport const GET: APIRoute = async ({ params, locals }) => {\n\tconst { emdash, user } = locals;\n\tconst dbErr = requireDb(emdash?.db);\n\tif (dbErr) return dbErr;\n\n\tconst denied = requirePerm(user, \"transfer:import\");\n\tif (denied) return denied;\n\tconst scopeDenied = requireAnyScope(locals, [\"transfer:analyze\", \"transfer:execute\"]);\n\tif (scopeDenied) return scopeDenied;\n\n\treturn unwrapResult(await handleImportReceipt(emdash.db, params.id ?? \"\"));\n};\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAWA,MAAa,YAAY;AAEzB,MAAa,MAAgB,OAAO,EAAE,QAAQ,aAAa;CAC1D,MAAM,EAAE,QAAQ,SAAS;CACzB,MAAM,QAAQ,UAAU,QAAQ,GAAG;AACnC,KAAI,MAAO,QAAO;CAElB,MAAM,SAAS,YAAY,MAAM,kBAAkB;AACnD,KAAI,OAAQ,QAAO;CACnB,MAAM,cAAc,gBAAgB,QAAQ,CAAC,oBAAoB,mBAAmB,CAAC;AACrF,KAAI,YAAa,QAAO;AAExB,QAAO,aAAa,MAAM,oBAAoB,OAAO,IAAI,OAAO,MAAM,GAAG,CAAC"}
+{"version":3,"file":"receipt.mjs","names":[],"sources":["../../../../../../../../src/astro/routes/api/admin/transfer/imports/[id]/receipt.ts"],"sourcesContent":["/**\n * GET /_emdash/api/admin/transfer/imports/:id/receipt — the verified receipt of a complete import.\n */\n\nimport type { APIRoute } from \"astro\";\n\nimport { requirePerm } from \"#api/authorize.js\";\nimport { requireDb, unwrapResult } from \"#api/error.js\";\nimport { handleImportReceipt } from \"#api/handlers/transfer.js\";\nimport { requireAnyScope } from \"#auth/scopes.js\";\n\nexport const prerender = false;\n\nexport const GET: APIRoute = async ({ params, locals }) => {\n\tconst { emdash, user } = locals;\n\tconst dbErr = requireDb(emdash?.db);\n\tif (dbErr) return dbErr;\n\n\tconst denied = requirePerm(user, \"transfer:import\");\n\tif (denied) return denied;\n\tconst scopeDenied = requireAnyScope(locals, [\"transfer:analyze\", \"transfer:execute\"]);\n\tif (scopeDenied) return scopeDenied;\n\n\treturn unwrapResult(await handleImportReceipt(emdash.db, params.id ?? \"\"));\n};\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAWA,MAAa,YAAY;AAEzB,MAAa,MAAgB,OAAO,EAAE,QAAQ,aAAa;CAC1D,MAAM,EAAE,QAAQ,SAAS;CACzB,MAAM,QAAQ,UAAU,QAAQ,GAAG;AACnC,KAAI,MAAO,QAAO;CAElB,MAAM,SAAS,YAAY,MAAM,kBAAkB;AACnD,KAAI,OAAQ,QAAO;CACnB,MAAM,cAAc,gBAAgB,QAAQ,CAAC,oBAAoB,mBAAmB,CAAC;AACrF,KAAI,YAAa,QAAO;AAExB,QAAO,aAAa,MAAM,oBAAoB,OAAO,IAAI,OAAO,MAAM,GAAG,CAAC"}

package/dist/astro/routes/api/admin/transfer/imports/index.mjs

@@ -4,51 +4,52 @@ import "../../../../../../after-PcEvMY_6.mjs";
 import "../../../../../../options-DhrI7eMv.mjs";
 import "../../../../../../base64-DvnNgP7e.mjs";
 import "../../../../../../secrets-CIi0nFiR.mjs";
-import "../../../../../../object-cache-CqWNY5uP.mjs";
-import "../../../../../../types-BkUg2yHx.mjs";
-import "../../../../../../media-CPXTbb1R.mjs";
-import "../../../../../../audit-RfCugiSB.mjs";
-import "../../../../../../request-cache-DzLYKm_x.mjs";
-import "../../../../../../byline-registry-gnKscbQX.mjs";
-import "../../../../../../field-defs-cache-HIgBbqZZ.mjs";
-import "../../../../../../byline-DYmkXqvo.mjs";
-import "../../../../../../fts-manager-S-K0laoS.mjs";
-import "../../../../../../loader-BzqeR1ZN.mjs";
-import "../../../../../../collection-slugs-cache-CjGk__zp.mjs";
-import "../../../../../../capture-triggers-kJyl_yyM.mjs";
-import "../../../../../../activation-LOkDM5WT.mjs";
-import "../../../../../../block-type-registry-DUI_3KxT.mjs";
-import "../../../../../../collection-deletion-BIm28mo3.mjs";
-import { r as isTransferError } from "../../../../../../errors-DgE1zJGG.mjs";
-import { o as TRANSFER_LIMITS } from "../../../../../../canonical-YhEQezjg.mjs";
-import "../../../../../../digest-BarSh-pN.mjs";
-import "../../../../../../hash-SDAW6zC-.mjs";
-import "../../../../../../zod-generator-D6uE4WiS.mjs";
-import "../../../../../../collection-deletion-processor-Br6rxs3u.mjs";
-import "../../../../../../settings-DYidIB26.mjs";
-import "../../../../../../errors-BF0_LFhW.mjs";
-import "../../../../../../settings-B4vDl1fK.mjs";
-import { a as unwrapResult, i as requireDb, t as apiError } from "../../../../../../error-CfvOHP0M.mjs";
-import { i as parseQuery, t as isParseError } from "../../../../../../parse-DY6OD1j_.mjs";
-import "../../../../../../redirects-Cv9apQKj.mjs";
-import "../../../../../../menus-BM7BPLOb.mjs";
-import "../../../../../../status-DZKIG4a9.mjs";
-import "../../../../../../fence-CMDXJYc_.mjs";
-import "../../../../../../api-tokens-CE1ECIg0.mjs";
-import "../../../../../../tar-_1AgTYFu.mjs";
-import "../../../../../../kinds-CRu_T5T5.mjs";
-import "../../../../../../paths-JxokKIbr.mjs";
-import "../../../../../../transformations-9gfpwY65.mjs";
-import "../../../../../../version-BRZXVifl.mjs";
-import "../../../../../../receipt-B4wJj5Jq.mjs";
-import { i as requirePerm } from "../../../../../../authorize-seCifOMJ.mjs";
-import { n as requireScope, t as requireAnyScope } from "../../../../../../scopes-Dbk-ElhT.mjs";
-import "../../../../../../approvals-CqMfNxak.mjs";
-import "../../../../../../plan-xjcWrAah.mjs";
-import { r as readStreamBytes } from "../../../../../../stage-DgrBz_du.mjs";
-import { m as handleImportCreate, v as handleImportList } from "../../../../../../transfer-DgeCvHnj.mjs";
-import "../../../../../../keys-yxLm5l35.mjs";
-import { y as transferPaginationQuery } from "../../../../../../transfer-DIGvR9Af.mjs";
+import "../../../../../../object-cache-Bo6DGaC9.mjs";
+import "../../../../../../request-cache-C4CIo5ad.mjs";
+import "../../../../../../url-Dn3IStq8.mjs";
+import "../../../../../../types-j6MBDjlZ.mjs";
+import "../../../../../../media-CputjGE1.mjs";
+import "../../../../../../audit-BszbE_BP.mjs";
+import "../../../../../../byline-registry-dvt4N3xV.mjs";
+import "../../../../../../field-defs-cache-DEkFYCDE.mjs";
+import "../../../../../../byline-02tu_Uc-.mjs";
+import "../../../../../../fts-manager-DU03MxWu.mjs";
+import "../../../../../../loader-B_bcoE1h.mjs";
+import "../../../../../../collection-slugs-cache-BNRAPNiu.mjs";
+import "../../../../../../capture-triggers-CdZfvHtF.mjs";
+import "../../../../../../activation-DDuqAat2.mjs";
+import "../../../../../../collection-deletion-JecE26cS.mjs";
+import "../../../../../../registry-CtHRqVe-.mjs";
+import "../../../../../../hash-CY4QdeMJ.mjs";
+import "../../../../../../zod-generator-DnfG5sGQ.mjs";
+import { r as isTransferError } from "../../../../../../errors-CjXd1LgH.mjs";
+import { o as TRANSFER_LIMITS } from "../../../../../../canonical-CAecl1UQ.mjs";
+import "../../../../../../digest-DiYAoZpf.mjs";
+import "../../../../../../errors-CNvATh_7.mjs";
+import "../../../../../../collection-deletion-processor-DgCfF3a1.mjs";
+import "../../../../../../settings-B0zQj_Tj.mjs";
+import "../../../../../../settings-BbVRRGDp.mjs";
+import { a as unwrapResult, i as requireDb, t as apiError } from "../../../../../../error-CEdm_AWU.mjs";
+import { i as parseQuery, t as isParseError } from "../../../../../../parse-Gt2l4Sld.mjs";
+import "../../../../../../redirects-D4EWeXAo.mjs";
+import "../../../../../../menus-BQKqf0Up.mjs";
+import "../../../../../../status-D39Fpy8R.mjs";
+import "../../../../../../fence-BrnQffdY.mjs";
+import "../../../../../../api-tokens-BLz2MtQs.mjs";
+import "../../../../../../tar-lDI_fzLD.mjs";
+import "../../../../../../kinds-CXY-fwQ6.mjs";
+import "../../../../../../paths-DiENGBx5.mjs";
+import "../../../../../../transformations-DdnpSdeC.mjs";
+import "../../../../../../version-DbT04wbH.mjs";
+import "../../../../../../receipt-q1VK9jhj.mjs";
+import { i as requirePerm } from "../../../../../../authorize-soZXK7U0.mjs";
+import { n as requireScope, t as requireAnyScope } from "../../../../../../scopes-C1HJaIyf.mjs";
+import "../../../../../../approvals-l9sGqPmL.mjs";
+import "../../../../../../plan-BxCS1tl5.mjs";
+import { r as readStreamBytes } from "../../../../../../stage-Cf9PqdUB.mjs";
+import { m as handleImportCreate, v as handleImportList } from "../../../../../../transfer-DLu_6AXL.mjs";
+import "../../../../../../keys-r08WvAng.mjs";
+import { y as transferPaginationQuery } from "../../../../../../transfer-BtzoaXLk.mjs";
 
 //#region src/astro/routes/api/admin/transfer/imports/index.ts
 const prerender = false;

package/dist/astro/routes/api/admin/transfer/imports/index.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"index.mjs","names":[],"sources":["../../../../../../../src/astro/routes/api/admin/transfer/imports/index.ts"],"sourcesContent":["/**\n * Site imports\n *\n * GET  /_emdash/api/admin/transfer/imports — list imports, newest first.\n * POST /_emdash/api/admin/transfer/imports — create an import. The body is the\n *      package's `manifest.json` bytes, unchanged. An optional\n *      `Idempotency-Key` header makes retries return the same operation.\n */\n\nimport type { APIRoute } from \"astro\";\n\nimport { requirePerm } from \"#api/authorize.js\";\nimport { apiError, requireDb, unwrapResult } from \"#api/error.js\";\nimport { handleImportCreate, handleImportList } from \"#api/handlers/transfer.js\";\nimport { isParseError, parseQuery } from \"#api/parse.js\";\nimport { transferPaginationQuery } from \"#api/schemas/transfer.js\";\nimport { requireAnyScope, requireScope } from \"#auth/scopes.js\";\n\nimport { isTransferError } from \"../../../../../../transfer/errors.js\";\nimport { TRANSFER_LIMITS } from \"../../../../../../transfer/format/limits.js\";\nimport { readStreamBytes } from \"../../../../../../transfer/staging/stage.js\";\n\nexport const prerender = false;\n\nconst IDEMPOTENCY_KEY_PATTERN = /^[\\x21-\\x7e]{1,255}$/;\n\nexport const GET: APIRoute = async ({ url, locals }) => {\n\tconst { emdash, user } = locals;\n\tconst dbErr = requireDb(emdash?.db);\n\tif (dbErr) return dbErr;\n\n\tconst denied = requirePerm(user, \"transfer:import\");\n\tif (denied) return denied;\n\tconst scopeDenied = requireAnyScope(locals, [\"transfer:analyze\", \"transfer:execute\"]);\n\tif (scopeDenied) return scopeDenied;\n\n\tconst query = parseQuery(url, transferPaginationQuery);\n\tif (isParseError(query)) return query;\n\n\treturn unwrapResult(await handleImportList(emdash.db, query));\n};\n\nexport const POST: APIRoute = async ({ request, locals }) => {\n\tconst { emdash, user } = locals;\n\tconst dbErr = requireDb(emdash?.db);\n\tif (dbErr) return dbErr;\n\n\tif (!user) return apiError(\"UNAUTHORIZED\", \"Authentication required\", 401);\n\tconst denied = requirePerm(user, \"transfer:import\");\n\tif (denied) return denied;\n\tconst scopeDenied = requireScope(locals, \"transfer:analyze\");\n\tif (scopeDenied) return scopeDenied;\n\n\tif (!emdash.storage) {\n\t\treturn apiError(\"STORAGE_NOT_CONFIGURED\", \"No storage backend is configured\", 503);\n\t}\n\n\tconst idempotencyKey = request.headers.get(\"Idempotency-Key\") ?? undefined;\n\tif (idempotencyKey !== undefined && !IDEMPOTENCY_KEY_PATTERN.test(idempotencyKey)) {\n\t\treturn apiError(\"VALIDATION_ERROR\", \"Invalid Idempotency-Key header\", 400);\n\t}\n\n\tconst declaredLength = Number(request.headers.get(\"Content-Length\") ?? \"0\");\n\tif (declaredLength > TRANSFER_LIMITS.manifestBytes) {\n\t\treturn apiError(\"TRANSFER_LIMIT_EXCEEDED\", \"Manifest is too large\", 413);\n\t}\n\tif (!request.body) {\n\t\treturn apiError(\"TRANSFER_MANIFEST_INVALID\", \"Request body must be the package manifest\", 422);\n\t}\n\n\tlet manifest: Uint8Array;\n\ttry {\n\t\tmanifest = await readStreamBytes(request.body, TRANSFER_LIMITS.manifestBytes);\n\t} catch (error) {\n\t\tif (isTransferError(error)) return apiError(error.code, error.message, error.status);\n\t\treturn apiError(\"TRANSFER_MANIFEST_INVALID\", \"Failed to read the manifest\", 400);\n\t}\n\n\tconst result = await handleImportCreate(emdash.db, emdash.storage, {\n\t\tuserId: user.id,\n\t\tmanifest,\n\t\tidempotencyKey,\n\t});\n\treturn unwrapResult(result, result.success && result.data.created ? 201 : 200);\n};\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAsBA,MAAa,YAAY;AAEzB,MAAM,0BAA0B;AAEhC,MAAa,MAAgB,OAAO,EAAE,KAAK,aAAa;CACvD,MAAM,EAAE,QAAQ,SAAS;CACzB,MAAM,QAAQ,UAAU,QAAQ,GAAG;AACnC,KAAI,MAAO,QAAO;CAElB,MAAM,SAAS,YAAY,MAAM,kBAAkB;AACnD,KAAI,OAAQ,QAAO;CACnB,MAAM,cAAc,gBAAgB,QAAQ,CAAC,oBAAoB,mBAAmB,CAAC;AACrF,KAAI,YAAa,QAAO;CAExB,MAAM,QAAQ,WAAW,KAAK,wBAAwB;AACtD,KAAI,aAAa,MAAM,CAAE,QAAO;AAEhC,QAAO,aAAa,MAAM,iBAAiB,OAAO,IAAI,MAAM,CAAC;;AAG9D,MAAa,OAAiB,OAAO,EAAE,SAAS,aAAa;CAC5D,MAAM,EAAE,QAAQ,SAAS;CACzB,MAAM,QAAQ,UAAU,QAAQ,GAAG;AACnC,KAAI,MAAO,QAAO;AAElB,KAAI,CAAC,KAAM,QAAO,SAAS,gBAAgB,2BAA2B,IAAI;CAC1E,MAAM,SAAS,YAAY,MAAM,kBAAkB;AACnD,KAAI,OAAQ,QAAO;CACnB,MAAM,cAAc,aAAa,QAAQ,mBAAmB;AAC5D,KAAI,YAAa,QAAO;AAExB,KAAI,CAAC,OAAO,QACX,QAAO,SAAS,0BAA0B,oCAAoC,IAAI;CAGnF,MAAM,iBAAiB,QAAQ,QAAQ,IAAI,kBAAkB,IAAI;AACjE,KAAI,mBAAmB,UAAa,CAAC,wBAAwB,KAAK,eAAe,CAChF,QAAO,SAAS,oBAAoB,kCAAkC,IAAI;AAI3E,KADuB,OAAO,QAAQ,QAAQ,IAAI,iBAAiB,IAAI,IAAI,GACtD,gBAAgB,cACpC,QAAO,SAAS,2BAA2B,yBAAyB,IAAI;AAEzE,KAAI,CAAC,QAAQ,KACZ,QAAO,SAAS,6BAA6B,6CAA6C,IAAI;CAG/F,IAAI;AACJ,KAAI;AACH,aAAW,MAAM,gBAAgB,QAAQ,MAAM,gBAAgB,cAAc;UACrE,OAAO;AACf,MAAI,gBAAgB,MAAM,CAAE,QAAO,SAAS,MAAM,MAAM,MAAM,SAAS,MAAM,OAAO;AACpF,SAAO,SAAS,6BAA6B,+BAA+B,IAAI;;CAGjF,MAAM,SAAS,MAAM,mBAAmB,OAAO,IAAI,OAAO,SAAS;EAClE,QAAQ,KAAK;EACb;EACA;EACA,CAAC;AACF,QAAO,aAAa,QAAQ,OAAO,WAAW,OAAO,KAAK,UAAU,MAAM,IAAI"}
+{"version":3,"file":"index.mjs","names":[],"sources":["../../../../../../../src/astro/routes/api/admin/transfer/imports/index.ts"],"sourcesContent":["/**\n * Site imports\n *\n * GET  /_emdash/api/admin/transfer/imports — list imports, newest first.\n * POST /_emdash/api/admin/transfer/imports — create an import. The body is the\n *      package's `manifest.json` bytes, unchanged. An optional\n *      `Idempotency-Key` header makes retries return the same operation.\n */\n\nimport type { APIRoute } from \"astro\";\n\nimport { requirePerm } from \"#api/authorize.js\";\nimport { apiError, requireDb, unwrapResult } from \"#api/error.js\";\nimport { handleImportCreate, handleImportList } from \"#api/handlers/transfer.js\";\nimport { isParseError, parseQuery } from \"#api/parse.js\";\nimport { transferPaginationQuery } from \"#api/schemas/transfer.js\";\nimport { requireAnyScope, requireScope } from \"#auth/scopes.js\";\n\nimport { isTransferError } from \"../../../../../../transfer/errors.js\";\nimport { TRANSFER_LIMITS } from \"../../../../../../transfer/format/limits.js\";\nimport { readStreamBytes } from \"../../../../../../transfer/staging/stage.js\";\n\nexport const prerender = false;\n\nconst IDEMPOTENCY_KEY_PATTERN = /^[\\x21-\\x7e]{1,255}$/;\n\nexport const GET: APIRoute = async ({ url, locals }) => {\n\tconst { emdash, user } = locals;\n\tconst dbErr = requireDb(emdash?.db);\n\tif (dbErr) return dbErr;\n\n\tconst denied = requirePerm(user, \"transfer:import\");\n\tif (denied) return denied;\n\tconst scopeDenied = requireAnyScope(locals, [\"transfer:analyze\", \"transfer:execute\"]);\n\tif (scopeDenied) return scopeDenied;\n\n\tconst query = parseQuery(url, transferPaginationQuery);\n\tif (isParseError(query)) return query;\n\n\treturn unwrapResult(await handleImportList(emdash.db, query));\n};\n\nexport const POST: APIRoute = async ({ request, locals }) => {\n\tconst { emdash, user } = locals;\n\tconst dbErr = requireDb(emdash?.db);\n\tif (dbErr) return dbErr;\n\n\tif (!user) return apiError(\"UNAUTHORIZED\", \"Authentication required\", 401);\n\tconst denied = requirePerm(user, \"transfer:import\");\n\tif (denied) return denied;\n\tconst scopeDenied = requireScope(locals, \"transfer:analyze\");\n\tif (scopeDenied) return scopeDenied;\n\n\tif (!emdash.storage) {\n\t\treturn apiError(\"STORAGE_NOT_CONFIGURED\", \"No storage backend is configured\", 503);\n\t}\n\n\tconst idempotencyKey = request.headers.get(\"Idempotency-Key\") ?? undefined;\n\tif (idempotencyKey !== undefined && !IDEMPOTENCY_KEY_PATTERN.test(idempotencyKey)) {\n\t\treturn apiError(\"VALIDATION_ERROR\", \"Invalid Idempotency-Key header\", 400);\n\t}\n\n\tconst declaredLength = Number(request.headers.get(\"Content-Length\") ?? \"0\");\n\tif (declaredLength > TRANSFER_LIMITS.manifestBytes) {\n\t\treturn apiError(\"TRANSFER_LIMIT_EXCEEDED\", \"Manifest is too large\", 413);\n\t}\n\tif (!request.body) {\n\t\treturn apiError(\"TRANSFER_MANIFEST_INVALID\", \"Request body must be the package manifest\", 422);\n\t}\n\n\tlet manifest: Uint8Array;\n\ttry {\n\t\tmanifest = await readStreamBytes(request.body, TRANSFER_LIMITS.manifestBytes);\n\t} catch (error) {\n\t\tif (isTransferError(error)) return apiError(error.code, error.message, error.status);\n\t\treturn apiError(\"TRANSFER_MANIFEST_INVALID\", \"Failed to read the manifest\", 400);\n\t}\n\n\tconst result = await handleImportCreate(emdash.db, emdash.storage, {\n\t\tuserId: user.id,\n\t\tmanifest,\n\t\tidempotencyKey,\n\t});\n\treturn unwrapResult(result, result.success && result.data.created ? 201 : 200);\n};\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAsBA,MAAa,YAAY;AAEzB,MAAM,0BAA0B;AAEhC,MAAa,MAAgB,OAAO,EAAE,KAAK,aAAa;CACvD,MAAM,EAAE,QAAQ,SAAS;CACzB,MAAM,QAAQ,UAAU,QAAQ,GAAG;AACnC,KAAI,MAAO,QAAO;CAElB,MAAM,SAAS,YAAY,MAAM,kBAAkB;AACnD,KAAI,OAAQ,QAAO;CACnB,MAAM,cAAc,gBAAgB,QAAQ,CAAC,oBAAoB,mBAAmB,CAAC;AACrF,KAAI,YAAa,QAAO;CAExB,MAAM,QAAQ,WAAW,KAAK,wBAAwB;AACtD,KAAI,aAAa,MAAM,CAAE,QAAO;AAEhC,QAAO,aAAa,MAAM,iBAAiB,OAAO,IAAI,MAAM,CAAC;;AAG9D,MAAa,OAAiB,OAAO,EAAE,SAAS,aAAa;CAC5D,MAAM,EAAE,QAAQ,SAAS;CACzB,MAAM,QAAQ,UAAU,QAAQ,GAAG;AACnC,KAAI,MAAO,QAAO;AAElB,KAAI,CAAC,KAAM,QAAO,SAAS,gBAAgB,2BAA2B,IAAI;CAC1E,MAAM,SAAS,YAAY,MAAM,kBAAkB;AACnD,KAAI,OAAQ,QAAO;CACnB,MAAM,cAAc,aAAa,QAAQ,mBAAmB;AAC5D,KAAI,YAAa,QAAO;AAExB,KAAI,CAAC,OAAO,QACX,QAAO,SAAS,0BAA0B,oCAAoC,IAAI;CAGnF,MAAM,iBAAiB,QAAQ,QAAQ,IAAI,kBAAkB,IAAI;AACjE,KAAI,mBAAmB,UAAa,CAAC,wBAAwB,KAAK,eAAe,CAChF,QAAO,SAAS,oBAAoB,kCAAkC,IAAI;AAI3E,KADuB,OAAO,QAAQ,QAAQ,IAAI,iBAAiB,IAAI,IAAI,GACtD,gBAAgB,cACpC,QAAO,SAAS,2BAA2B,yBAAyB,IAAI;AAEzE,KAAI,CAAC,QAAQ,KACZ,QAAO,SAAS,6BAA6B,6CAA6C,IAAI;CAG/F,IAAI;AACJ,KAAI;AACH,aAAW,MAAM,gBAAgB,QAAQ,MAAM,gBAAgB,cAAc;UACrE,OAAO;AACf,MAAI,gBAAgB,MAAM,CAAE,QAAO,SAAS,MAAM,MAAM,MAAM,SAAS,MAAM,OAAO;AACpF,SAAO,SAAS,6BAA6B,+BAA+B,IAAI;;CAGjF,MAAM,SAAS,MAAM,mBAAmB,OAAO,IAAI,OAAO,SAAS;EAClE,QAAQ,KAAK;EACb;EACA;EACA,CAAC;AACF,QAAO,aAAa,QAAQ,OAAO,WAAW,OAAO,KAAK,UAAU,MAAM,IAAI"}

package/dist/astro/routes/api/admin/users/_id_/disable.mjs

@@ -1,9 +1,9 @@
 import "../../../../../../base64-DvnNgP7e.mjs";
-import "../../../../../../types-BkUg2yHx.mjs";
-import { t as withTransaction } from "../../../../../../transaction-BcJO4Tmc.mjs";
-import "../../../../../../errors-DgE1zJGG.mjs";
-import "../../../../../../errors-BF0_LFhW.mjs";
-import { n as apiSuccess, r as handleError, t as apiError } from "../../../../../../error-CfvOHP0M.mjs";
+import "../../../../../../types-j6MBDjlZ.mjs";
+import { t as withTransaction } from "../../../../../../transaction-BVYIo_yu.mjs";
+import "../../../../../../errors-CjXd1LgH.mjs";
+import "../../../../../../errors-CNvATh_7.mjs";
+import { n as apiSuccess, r as handleError, t as apiError } from "../../../../../../error-CEdm_AWU.mjs";
 import { Role } from "@emdash-cms/auth";
 import { createKyselyAdapter } from "@emdash-cms/auth/adapters/kysely";
 

package/dist/astro/routes/api/admin/users/_id_/enable.mjs

@@ -1,8 +1,8 @@
 import "../../../../../../base64-DvnNgP7e.mjs";
-import "../../../../../../types-BkUg2yHx.mjs";
-import "../../../../../../errors-DgE1zJGG.mjs";
-import "../../../../../../errors-BF0_LFhW.mjs";
-import { n as apiSuccess, r as handleError, t as apiError } from "../../../../../../error-CfvOHP0M.mjs";
+import "../../../../../../types-j6MBDjlZ.mjs";
+import "../../../../../../errors-CjXd1LgH.mjs";
+import "../../../../../../errors-CNvATh_7.mjs";
+import { n as apiSuccess, r as handleError, t as apiError } from "../../../../../../error-CEdm_AWU.mjs";
 import { Role } from "@emdash-cms/auth";
 import { createKyselyAdapter } from "@emdash-cms/auth/adapters/kysely";
 

package/dist/astro/routes/api/admin/users/_id_/index.mjs

@@ -1,20 +1,21 @@
 import "../../../../../../config-CvmjJcVw.mjs";
 import "../../../../../../base64-DvnNgP7e.mjs";
-import "../../../../../../types-BkUg2yHx.mjs";
-import { t as withTransaction } from "../../../../../../transaction-BcJO4Tmc.mjs";
-import "../../../../../../errors-DgE1zJGG.mjs";
-import "../../../../../../settings-DYidIB26.mjs";
-import "../../../../../../site-settings-DOgRUoFX.mjs";
-import "../../../../../../errors-BF0_LFhW.mjs";
-import { n as apiSuccess, r as handleError, t as apiError } from "../../../../../../error-CfvOHP0M.mjs";
-import { n as parseBody, t as isParseError } from "../../../../../../parse-DY6OD1j_.mjs";
-import "../../../../../../redirects-Cv9apQKj.mjs";
-import { b as userUpdateBody } from "../../../../../../entry-lock-BJYdBfXb.mjs";
-import "../../../../../../media-Pu1L6xir.mjs";
-import "../../../../../../comments-fHZ8ON9O.mjs";
-import "../../../../../../relations-CK9CYUyr.mjs";
-import "../../../../../../menus-BM7BPLOb.mjs";
-import "../../../../../../status-DZKIG4a9.mjs";
+import "../../../../../../url-Dn3IStq8.mjs";
+import "../../../../../../types-j6MBDjlZ.mjs";
+import { t as withTransaction } from "../../../../../../transaction-BVYIo_yu.mjs";
+import "../../../../../../errors-CjXd1LgH.mjs";
+import "../../../../../../errors-CNvATh_7.mjs";
+import "../../../../../../settings-B0zQj_Tj.mjs";
+import "../../../../../../site-settings-AYFvhwQn.mjs";
+import { n as apiSuccess, r as handleError, t as apiError } from "../../../../../../error-CEdm_AWU.mjs";
+import { n as parseBody, t as isParseError } from "../../../../../../parse-Gt2l4Sld.mjs";
+import "../../../../../../redirects-D4EWeXAo.mjs";
+import { b as userUpdateBody } from "../../../../../../entry-lock-PP1JCXBB.mjs";
+import "../../../../../../media-D1z_jisb.mjs";
+import "../../../../../../comments-BRtp992B.mjs";
+import "../../../../../../byline-fields-DHJs0Mja.mjs";
+import "../../../../../../menus-BQKqf0Up.mjs";
+import "../../../../../../status-D39Fpy8R.mjs";
 import "../../../../../../api/schemas/index.mjs";
 import { Role } from "@emdash-cms/auth";
 import { createKyselyAdapter } from "@emdash-cms/auth/adapters/kysely";

package/dist/astro/routes/api/admin/users/_id_/index.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"index.mjs","names":[],"sources":["../../../../../../../src/astro/routes/api/admin/users/[id]/index.ts"],"sourcesContent":["/**\n * User management detail endpoint\n *\n * GET /_emdash/api/admin/users/:id - Get user details\n * PUT /_emdash/api/admin/users/:id - Update user\n */\n\nimport { Role } from \"@emdash-cms/auth\";\nimport { createKyselyAdapter } from \"@emdash-cms/auth/adapters/kysely\";\nimport type { APIRoute } from \"astro\";\n\nimport { apiError, apiSuccess, handleError } from \"#api/error.js\";\nimport { isParseError, parseBody } from \"#api/parse.js\";\nimport { userUpdateBody } from \"#api/schemas.js\";\nimport { withTransaction } from \"#db/transaction.js\";\n\nexport const prerender = false;\n\nexport const GET: APIRoute = async ({ params, locals }) => {\n\tconst { emdash, user: currentUser } = locals;\n\n\tif (!emdash?.db) {\n\t\treturn apiError(\"NOT_CONFIGURED\", \"EmDash is not initialized\", 500);\n\t}\n\n\tif (!currentUser || currentUser.role < Role.ADMIN) {\n\t\treturn apiError(\"FORBIDDEN\", \"Admin privileges required\", 403);\n\t}\n\n\tconst adapter = createKyselyAdapter(emdash.db);\n\n\tconst { id } = params;\n\n\tif (!id) {\n\t\treturn apiError(\"MISSING_PARAM\", \"User ID required\", 400);\n\t}\n\n\ttry {\n\t\tconst result = await adapter.getUserWithDetails(id);\n\n\t\tif (!result) {\n\t\t\treturn apiError(\"NOT_FOUND\", \"User not found\", 404);\n\t\t}\n\n\t\t// Transform for JSON serialization\n\t\tconst item = {\n\t\t\tid: result.user.id,\n\t\t\temail: result.user.email,\n\t\t\tname: result.user.name,\n\t\t\tavatarUrl: result.user.avatarUrl,\n\t\t\trole: result.user.role,\n\t\t\temailVerified: result.user.emailVerified,\n\t\t\tdisabled: result.user.disabled,\n\t\t\tcreatedAt: result.user.createdAt.toISOString(),\n\t\t\tupdatedAt: result.user.updatedAt.toISOString(),\n\t\t\tlastLogin: result.lastLogin?.toISOString() ?? null,\n\t\t\tcredentials: result.credentials.map((c) => ({\n\t\t\t\tid: c.id,\n\t\t\t\tname: c.name,\n\t\t\t\tdeviceType: c.deviceType,\n\t\t\t\tcreatedAt: c.createdAt.toISOString(),\n\t\t\t\tlastUsedAt: c.lastUsedAt.toISOString(),\n\t\t\t})),\n\t\t\toauthAccounts: result.oauthAccounts.map((a) => ({\n\t\t\t\tprovider: a.provider,\n\t\t\t\tcreatedAt: a.createdAt.toISOString(),\n\t\t\t})),\n\t\t};\n\n\t\treturn apiSuccess({ item });\n\t} catch (error) {\n\t\treturn handleError(error, \"Failed to get user details\", \"USER_DETAIL_ERROR\");\n\t}\n};\n\nexport const PUT: APIRoute = async ({ params, request, locals }) => {\n\tconst { emdash, user: currentUser } = locals;\n\n\tif (!emdash?.db) {\n\t\treturn apiError(\"NOT_CONFIGURED\", \"EmDash is not initialized\", 500);\n\t}\n\n\tif (!currentUser || currentUser.role < Role.ADMIN) {\n\t\treturn apiError(\"FORBIDDEN\", \"Admin privileges required\", 403);\n\t}\n\n\tconst adapter = createKyselyAdapter(emdash.db);\n\n\tconst { id } = params;\n\n\tif (!id) {\n\t\treturn apiError(\"MISSING_PARAM\", \"User ID required\", 400);\n\t}\n\n\ttry {\n\t\t// Get target user\n\t\tconst targetUser = await adapter.getUserById(id);\n\t\tif (!targetUser) {\n\t\t\treturn apiError(\"NOT_FOUND\", \"User not found\", 404);\n\t\t}\n\n\t\tconst body = await parseBody(request, userUpdateBody);\n\t\tif (isParseError(body)) return body;\n\n\t\t// Role is already validated as RoleLevel by Zod schema\n\t\tconst role = body.role;\n\n\t\t// Prevent editing own role (security: prevents self-demotion/lockout)\n\t\tif (role !== undefined && id === currentUser.id) {\n\t\t\treturn apiError(\"SELF_ROLE_CHANGE\", \"Cannot change your own role\", 400);\n\t\t}\n\n\t\t// Check email uniqueness if changing email\n\t\tif (body.email && body.email !== targetUser.email) {\n\t\t\tconst existing = await adapter.getUserByEmail(body.email);\n\t\t\tif (existing) {\n\t\t\t\treturn apiError(\"EMAIL_IN_USE\", \"Email already in use\", 409);\n\t\t\t}\n\t\t}\n\n\t\t// Wrap admin demotion guard + update in a transaction to prevent\n\t\t// two concurrent demotions from both passing the count check.\n\t\tconst isDemotingAdmin =\n\t\t\trole !== undefined && role < Role.ADMIN && targetUser.role === Role.ADMIN;\n\n\t\tconst lastAdminBlocked = await withTransaction(emdash.db, async (trx) => {\n\t\t\tconst trxAdapter = createKyselyAdapter(trx);\n\t\t\tif (isDemotingAdmin) {\n\t\t\t\tconst adminCount = await trxAdapter.countAdmins();\n\t\t\t\tif (adminCount <= 1) return true;\n\t\t\t}\n\t\t\tawait trxAdapter.updateUser(id, {\n\t\t\t\tname: body.name,\n\t\t\t\temail: body.email,\n\t\t\t\trole,\n\t\t\t});\n\t\t\treturn false;\n\t\t});\n\n\t\tif (lastAdminBlocked) {\n\t\t\treturn apiError(\n\t\t\t\t\"LAST_ADMIN\",\n\t\t\t\t\"Cannot demote the last admin. Promote another user first.\",\n\t\t\t\t400,\n\t\t\t);\n\t\t}\n\n\t\t// Fetch updated user\n\t\tconst updated = await adapter.getUserById(id);\n\n\t\treturn apiSuccess({\n\t\t\titem: {\n\t\t\t\tid: updated!.id,\n\t\t\t\temail: updated!.email,\n\t\t\t\tname: updated!.name,\n\t\t\t\tavatarUrl: updated!.avatarUrl,\n\t\t\t\trole: updated!.role,\n\t\t\t\temailVerified: updated!.emailVerified,\n\t\t\t\tdisabled: updated!.disabled,\n\t\t\t\tcreatedAt: updated!.createdAt.toISOString(),\n\t\t\t\tupdatedAt: updated!.updatedAt.toISOString(),\n\t\t\t},\n\t\t});\n\t} catch (error) {\n\t\treturn handleError(error, \"Failed to update user\", \"USER_UPDATE_ERROR\");\n\t}\n};\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;AAgBA,MAAa,YAAY;AAEzB,MAAa,MAAgB,OAAO,EAAE,QAAQ,aAAa;CAC1D,MAAM,EAAE,QAAQ,MAAM,gBAAgB;AAEtC,KAAI,CAAC,QAAQ,GACZ,QAAO,SAAS,kBAAkB,6BAA6B,IAAI;AAGpE,KAAI,CAAC,eAAe,YAAY,OAAO,KAAK,MAC3C,QAAO,SAAS,aAAa,6BAA6B,IAAI;CAG/D,MAAM,UAAU,oBAAoB,OAAO,GAAG;CAE9C,MAAM,EAAE,OAAO;AAEf,KAAI,CAAC,GACJ,QAAO,SAAS,iBAAiB,oBAAoB,IAAI;AAG1D,KAAI;EACH,MAAM,SAAS,MAAM,QAAQ,mBAAmB,GAAG;AAEnD,MAAI,CAAC,OACJ,QAAO,SAAS,aAAa,kBAAkB,IAAI;AA4BpD,SAAO,WAAW,EAAE,MAxBP;GACZ,IAAI,OAAO,KAAK;GAChB,OAAO,OAAO,KAAK;GACnB,MAAM,OAAO,KAAK;GAClB,WAAW,OAAO,KAAK;GACvB,MAAM,OAAO,KAAK;GAClB,eAAe,OAAO,KAAK;GAC3B,UAAU,OAAO,KAAK;GACtB,WAAW,OAAO,KAAK,UAAU,aAAa;GAC9C,WAAW,OAAO,KAAK,UAAU,aAAa;GAC9C,WAAW,OAAO,WAAW,aAAa,IAAI;GAC9C,aAAa,OAAO,YAAY,KAAK,OAAO;IAC3C,IAAI,EAAE;IACN,MAAM,EAAE;IACR,YAAY,EAAE;IACd,WAAW,EAAE,UAAU,aAAa;IACpC,YAAY,EAAE,WAAW,aAAa;IACtC,EAAE;GACH,eAAe,OAAO,cAAc,KAAK,OAAO;IAC/C,UAAU,EAAE;IACZ,WAAW,EAAE,UAAU,aAAa;IACpC,EAAE;GACH,EAEyB,CAAC;UACnB,OAAO;AACf,SAAO,YAAY,OAAO,8BAA8B,oBAAoB;;;AAI9E,MAAa,MAAgB,OAAO,EAAE,QAAQ,SAAS,aAAa;CACnE,MAAM,EAAE,QAAQ,MAAM,gBAAgB;AAEtC,KAAI,CAAC,QAAQ,GACZ,QAAO,SAAS,kBAAkB,6BAA6B,IAAI;AAGpE,KAAI,CAAC,eAAe,YAAY,OAAO,KAAK,MAC3C,QAAO,SAAS,aAAa,6BAA6B,IAAI;CAG/D,MAAM,UAAU,oBAAoB,OAAO,GAAG;CAE9C,MAAM,EAAE,OAAO;AAEf,KAAI,CAAC,GACJ,QAAO,SAAS,iBAAiB,oBAAoB,IAAI;AAG1D,KAAI;EAEH,MAAM,aAAa,MAAM,QAAQ,YAAY,GAAG;AAChD,MAAI,CAAC,WACJ,QAAO,SAAS,aAAa,kBAAkB,IAAI;EAGpD,MAAM,OAAO,MAAM,UAAU,SAAS,eAAe;AACrD,MAAI,aAAa,KAAK,CAAE,QAAO;EAG/B,MAAM,OAAO,KAAK;AAGlB,MAAI,SAAS,UAAa,OAAO,YAAY,GAC5C,QAAO,SAAS,oBAAoB,+BAA+B,IAAI;AAIxE,MAAI,KAAK,SAAS,KAAK,UAAU,WAAW,OAE3C;OADiB,MAAM,QAAQ,eAAe,KAAK,MAAM,CAExD,QAAO,SAAS,gBAAgB,wBAAwB,IAAI;;EAM9D,MAAM,kBACL,SAAS,UAAa,OAAO,KAAK,SAAS,WAAW,SAAS,KAAK;AAgBrE,MAdyB,MAAM,gBAAgB,OAAO,IAAI,OAAO,QAAQ;GACxE,MAAM,aAAa,oBAAoB,IAAI;AAC3C,OAAI,iBAEH;QADmB,MAAM,WAAW,aAAa,IAC/B,EAAG,QAAO;;AAE7B,SAAM,WAAW,WAAW,IAAI;IAC/B,MAAM,KAAK;IACX,OAAO,KAAK;IACZ;IACA,CAAC;AACF,UAAO;IACN,CAGD,QAAO,SACN,cACA,6DACA,IACA;EAIF,MAAM,UAAU,MAAM,QAAQ,YAAY,GAAG;AAE7C,SAAO,WAAW,EACjB,MAAM;GACL,IAAI,QAAS;GACb,OAAO,QAAS;GAChB,MAAM,QAAS;GACf,WAAW,QAAS;GACpB,MAAM,QAAS;GACf,eAAe,QAAS;GACxB,UAAU,QAAS;GACnB,WAAW,QAAS,UAAU,aAAa;GAC3C,WAAW,QAAS,UAAU,aAAa;GAC3C,EACD,CAAC;UACM,OAAO;AACf,SAAO,YAAY,OAAO,yBAAyB,oBAAoB"}
+{"version":3,"file":"index.mjs","names":[],"sources":["../../../../../../../src/astro/routes/api/admin/users/[id]/index.ts"],"sourcesContent":["/**\n * User management detail endpoint\n *\n * GET /_emdash/api/admin/users/:id - Get user details\n * PUT /_emdash/api/admin/users/:id - Update user\n */\n\nimport { Role } from \"@emdash-cms/auth\";\nimport { createKyselyAdapter } from \"@emdash-cms/auth/adapters/kysely\";\nimport type { APIRoute } from \"astro\";\n\nimport { apiError, apiSuccess, handleError } from \"#api/error.js\";\nimport { isParseError, parseBody } from \"#api/parse.js\";\nimport { userUpdateBody } from \"#api/schemas.js\";\nimport { withTransaction } from \"#db/transaction.js\";\n\nexport const prerender = false;\n\nexport const GET: APIRoute = async ({ params, locals }) => {\n\tconst { emdash, user: currentUser } = locals;\n\n\tif (!emdash?.db) {\n\t\treturn apiError(\"NOT_CONFIGURED\", \"EmDash is not initialized\", 500);\n\t}\n\n\tif (!currentUser || currentUser.role < Role.ADMIN) {\n\t\treturn apiError(\"FORBIDDEN\", \"Admin privileges required\", 403);\n\t}\n\n\tconst adapter = createKyselyAdapter(emdash.db);\n\n\tconst { id } = params;\n\n\tif (!id) {\n\t\treturn apiError(\"MISSING_PARAM\", \"User ID required\", 400);\n\t}\n\n\ttry {\n\t\tconst result = await adapter.getUserWithDetails(id);\n\n\t\tif (!result) {\n\t\t\treturn apiError(\"NOT_FOUND\", \"User not found\", 404);\n\t\t}\n\n\t\t// Transform for JSON serialization\n\t\tconst item = {\n\t\t\tid: result.user.id,\n\t\t\temail: result.user.email,\n\t\t\tname: result.user.name,\n\t\t\tavatarUrl: result.user.avatarUrl,\n\t\t\trole: result.user.role,\n\t\t\temailVerified: result.user.emailVerified,\n\t\t\tdisabled: result.user.disabled,\n\t\t\tcreatedAt: result.user.createdAt.toISOString(),\n\t\t\tupdatedAt: result.user.updatedAt.toISOString(),\n\t\t\tlastLogin: result.lastLogin?.toISOString() ?? null,\n\t\t\tcredentials: result.credentials.map((c) => ({\n\t\t\t\tid: c.id,\n\t\t\t\tname: c.name,\n\t\t\t\tdeviceType: c.deviceType,\n\t\t\t\tcreatedAt: c.createdAt.toISOString(),\n\t\t\t\tlastUsedAt: c.lastUsedAt.toISOString(),\n\t\t\t})),\n\t\t\toauthAccounts: result.oauthAccounts.map((a) => ({\n\t\t\t\tprovider: a.provider,\n\t\t\t\tcreatedAt: a.createdAt.toISOString(),\n\t\t\t})),\n\t\t};\n\n\t\treturn apiSuccess({ item });\n\t} catch (error) {\n\t\treturn handleError(error, \"Failed to get user details\", \"USER_DETAIL_ERROR\");\n\t}\n};\n\nexport const PUT: APIRoute = async ({ params, request, locals }) => {\n\tconst { emdash, user: currentUser } = locals;\n\n\tif (!emdash?.db) {\n\t\treturn apiError(\"NOT_CONFIGURED\", \"EmDash is not initialized\", 500);\n\t}\n\n\tif (!currentUser || currentUser.role < Role.ADMIN) {\n\t\treturn apiError(\"FORBIDDEN\", \"Admin privileges required\", 403);\n\t}\n\n\tconst adapter = createKyselyAdapter(emdash.db);\n\n\tconst { id } = params;\n\n\tif (!id) {\n\t\treturn apiError(\"MISSING_PARAM\", \"User ID required\", 400);\n\t}\n\n\ttry {\n\t\t// Get target user\n\t\tconst targetUser = await adapter.getUserById(id);\n\t\tif (!targetUser) {\n\t\t\treturn apiError(\"NOT_FOUND\", \"User not found\", 404);\n\t\t}\n\n\t\tconst body = await parseBody(request, userUpdateBody);\n\t\tif (isParseError(body)) return body;\n\n\t\t// Role is already validated as RoleLevel by Zod schema\n\t\tconst role = body.role;\n\n\t\t// Prevent editing own role (security: prevents self-demotion/lockout)\n\t\tif (role !== undefined && id === currentUser.id) {\n\t\t\treturn apiError(\"SELF_ROLE_CHANGE\", \"Cannot change your own role\", 400);\n\t\t}\n\n\t\t// Check email uniqueness if changing email\n\t\tif (body.email && body.email !== targetUser.email) {\n\t\t\tconst existing = await adapter.getUserByEmail(body.email);\n\t\t\tif (existing) {\n\t\t\t\treturn apiError(\"EMAIL_IN_USE\", \"Email already in use\", 409);\n\t\t\t}\n\t\t}\n\n\t\t// Wrap admin demotion guard + update in a transaction to prevent\n\t\t// two concurrent demotions from both passing the count check.\n\t\tconst isDemotingAdmin =\n\t\t\trole !== undefined && role < Role.ADMIN && targetUser.role === Role.ADMIN;\n\n\t\tconst lastAdminBlocked = await withTransaction(emdash.db, async (trx) => {\n\t\t\tconst trxAdapter = createKyselyAdapter(trx);\n\t\t\tif (isDemotingAdmin) {\n\t\t\t\tconst adminCount = await trxAdapter.countAdmins();\n\t\t\t\tif (adminCount <= 1) return true;\n\t\t\t}\n\t\t\tawait trxAdapter.updateUser(id, {\n\t\t\t\tname: body.name,\n\t\t\t\temail: body.email,\n\t\t\t\trole,\n\t\t\t});\n\t\t\treturn false;\n\t\t});\n\n\t\tif (lastAdminBlocked) {\n\t\t\treturn apiError(\n\t\t\t\t\"LAST_ADMIN\",\n\t\t\t\t\"Cannot demote the last admin. Promote another user first.\",\n\t\t\t\t400,\n\t\t\t);\n\t\t}\n\n\t\t// Fetch updated user\n\t\tconst updated = await adapter.getUserById(id);\n\n\t\treturn apiSuccess({\n\t\t\titem: {\n\t\t\t\tid: updated!.id,\n\t\t\t\temail: updated!.email,\n\t\t\t\tname: updated!.name,\n\t\t\t\tavatarUrl: updated!.avatarUrl,\n\t\t\t\trole: updated!.role,\n\t\t\t\temailVerified: updated!.emailVerified,\n\t\t\t\tdisabled: updated!.disabled,\n\t\t\t\tcreatedAt: updated!.createdAt.toISOString(),\n\t\t\t\tupdatedAt: updated!.updatedAt.toISOString(),\n\t\t\t},\n\t\t});\n\t} catch (error) {\n\t\treturn handleError(error, \"Failed to update user\", \"USER_UPDATE_ERROR\");\n\t}\n};\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAgBA,MAAa,YAAY;AAEzB,MAAa,MAAgB,OAAO,EAAE,QAAQ,aAAa;CAC1D,MAAM,EAAE,QAAQ,MAAM,gBAAgB;AAEtC,KAAI,CAAC,QAAQ,GACZ,QAAO,SAAS,kBAAkB,6BAA6B,IAAI;AAGpE,KAAI,CAAC,eAAe,YAAY,OAAO,KAAK,MAC3C,QAAO,SAAS,aAAa,6BAA6B,IAAI;CAG/D,MAAM,UAAU,oBAAoB,OAAO,GAAG;CAE9C,MAAM,EAAE,OAAO;AAEf,KAAI,CAAC,GACJ,QAAO,SAAS,iBAAiB,oBAAoB,IAAI;AAG1D,KAAI;EACH,MAAM,SAAS,MAAM,QAAQ,mBAAmB,GAAG;AAEnD,MAAI,CAAC,OACJ,QAAO,SAAS,aAAa,kBAAkB,IAAI;AA4BpD,SAAO,WAAW,EAAE,MAxBP;GACZ,IAAI,OAAO,KAAK;GAChB,OAAO,OAAO,KAAK;GACnB,MAAM,OAAO,KAAK;GAClB,WAAW,OAAO,KAAK;GACvB,MAAM,OAAO,KAAK;GAClB,eAAe,OAAO,KAAK;GAC3B,UAAU,OAAO,KAAK;GACtB,WAAW,OAAO,KAAK,UAAU,aAAa;GAC9C,WAAW,OAAO,KAAK,UAAU,aAAa;GAC9C,WAAW,OAAO,WAAW,aAAa,IAAI;GAC9C,aAAa,OAAO,YAAY,KAAK,OAAO;IAC3C,IAAI,EAAE;IACN,MAAM,EAAE;IACR,YAAY,EAAE;IACd,WAAW,EAAE,UAAU,aAAa;IACpC,YAAY,EAAE,WAAW,aAAa;IACtC,EAAE;GACH,eAAe,OAAO,cAAc,KAAK,OAAO;IAC/C,UAAU,EAAE;IACZ,WAAW,EAAE,UAAU,aAAa;IACpC,EAAE;GACH,EAEyB,CAAC;UACnB,OAAO;AACf,SAAO,YAAY,OAAO,8BAA8B,oBAAoB;;;AAI9E,MAAa,MAAgB,OAAO,EAAE,QAAQ,SAAS,aAAa;CACnE,MAAM,EAAE,QAAQ,MAAM,gBAAgB;AAEtC,KAAI,CAAC,QAAQ,GACZ,QAAO,SAAS,kBAAkB,6BAA6B,IAAI;AAGpE,KAAI,CAAC,eAAe,YAAY,OAAO,KAAK,MAC3C,QAAO,SAAS,aAAa,6BAA6B,IAAI;CAG/D,MAAM,UAAU,oBAAoB,OAAO,GAAG;CAE9C,MAAM,EAAE,OAAO;AAEf,KAAI,CAAC,GACJ,QAAO,SAAS,iBAAiB,oBAAoB,IAAI;AAG1D,KAAI;EAEH,MAAM,aAAa,MAAM,QAAQ,YAAY,GAAG;AAChD,MAAI,CAAC,WACJ,QAAO,SAAS,aAAa,kBAAkB,IAAI;EAGpD,MAAM,OAAO,MAAM,UAAU,SAAS,eAAe;AACrD,MAAI,aAAa,KAAK,CAAE,QAAO;EAG/B,MAAM,OAAO,KAAK;AAGlB,MAAI,SAAS,UAAa,OAAO,YAAY,GAC5C,QAAO,SAAS,oBAAoB,+BAA+B,IAAI;AAIxE,MAAI,KAAK,SAAS,KAAK,UAAU,WAAW,OAE3C;OADiB,MAAM,QAAQ,eAAe,KAAK,MAAM,CAExD,QAAO,SAAS,gBAAgB,wBAAwB,IAAI;;EAM9D,MAAM,kBACL,SAAS,UAAa,OAAO,KAAK,SAAS,WAAW,SAAS,KAAK;AAgBrE,MAdyB,MAAM,gBAAgB,OAAO,IAAI,OAAO,QAAQ;GACxE,MAAM,aAAa,oBAAoB,IAAI;AAC3C,OAAI,iBAEH;QADmB,MAAM,WAAW,aAAa,IAC/B,EAAG,QAAO;;AAE7B,SAAM,WAAW,WAAW,IAAI;IAC/B,MAAM,KAAK;IACX,OAAO,KAAK;IACZ;IACA,CAAC;AACF,UAAO;IACN,CAGD,QAAO,SACN,cACA,6DACA,IACA;EAIF,MAAM,UAAU,MAAM,QAAQ,YAAY,GAAG;AAE7C,SAAO,WAAW,EACjB,MAAM;GACL,IAAI,QAAS;GACb,OAAO,QAAS;GAChB,MAAM,QAAS;GACf,WAAW,QAAS;GACpB,MAAM,QAAS;GACf,eAAe,QAAS;GACxB,UAAU,QAAS;GACnB,WAAW,QAAS,UAAU,aAAa;GAC3C,WAAW,QAAS,UAAU,aAAa;GAC3C,EACD,CAAC;UACM,OAAO;AACf,SAAO,YAAY,OAAO,yBAAyB,oBAAoB"}

package/dist/astro/routes/api/admin/users/_id_/send-recovery.mjs

@@ -1,11 +1,11 @@
 import { t as OptionsRepository } from "../../../../../../options-DhrI7eMv.mjs";
 import "../../../../../../base64-DvnNgP7e.mjs";
-import "../../../../../../types-BkUg2yHx.mjs";
-import "../../../../../../errors-DgE1zJGG.mjs";
-import "../../../../../../errors-BF0_LFhW.mjs";
-import { n as apiSuccess, r as handleError, t as apiError } from "../../../../../../error-CfvOHP0M.mjs";
-import { t as getSiteBaseUrl } from "../../../../../../site-url-BU_bbxwj.mjs";
-import { t as resolveEmailLocale } from "../../../../../../email-locale-CN6WAMx0.mjs";
+import "../../../../../../types-j6MBDjlZ.mjs";
+import "../../../../../../errors-CjXd1LgH.mjs";
+import "../../../../../../errors-CNvATh_7.mjs";
+import { n as apiSuccess, r as handleError, t as apiError } from "../../../../../../error-CEdm_AWU.mjs";
+import { t as getSiteBaseUrl } from "../../../../../../site-url-Ceq_AUK0.mjs";
+import { t as resolveEmailLocale } from "../../../../../../email-locale-B5OjmAj_.mjs";
 import { Role, sendMagicLink } from "@emdash-cms/auth";
 import { createKyselyAdapter } from "@emdash-cms/auth/adapters/kysely";
 import { getMagicLinkEmailStrings } from "@emdash-cms/admin/locales/emails";

package/dist/astro/routes/api/admin/users/index.mjs

@@ -1,19 +1,20 @@
 import "../../../../../config-CvmjJcVw.mjs";
 import "../../../../../base64-DvnNgP7e.mjs";
-import "../../../../../types-BkUg2yHx.mjs";
-import "../../../../../errors-DgE1zJGG.mjs";
-import "../../../../../settings-DYidIB26.mjs";
-import "../../../../../site-settings-DOgRUoFX.mjs";
-import "../../../../../errors-BF0_LFhW.mjs";
-import { n as apiSuccess, r as handleError, t as apiError } from "../../../../../error-CfvOHP0M.mjs";
-import { i as parseQuery, t as isParseError } from "../../../../../parse-DY6OD1j_.mjs";
-import "../../../../../redirects-Cv9apQKj.mjs";
-import { x as usersListQuery } from "../../../../../entry-lock-BJYdBfXb.mjs";
-import "../../../../../media-Pu1L6xir.mjs";
-import "../../../../../comments-fHZ8ON9O.mjs";
-import "../../../../../relations-CK9CYUyr.mjs";
-import "../../../../../menus-BM7BPLOb.mjs";
-import "../../../../../status-DZKIG4a9.mjs";
+import "../../../../../url-Dn3IStq8.mjs";
+import "../../../../../types-j6MBDjlZ.mjs";
+import "../../../../../errors-CjXd1LgH.mjs";
+import "../../../../../errors-CNvATh_7.mjs";
+import "../../../../../settings-B0zQj_Tj.mjs";
+import "../../../../../site-settings-AYFvhwQn.mjs";
+import { n as apiSuccess, r as handleError, t as apiError } from "../../../../../error-CEdm_AWU.mjs";
+import { i as parseQuery, t as isParseError } from "../../../../../parse-Gt2l4Sld.mjs";
+import "../../../../../redirects-D4EWeXAo.mjs";
+import { x as usersListQuery } from "../../../../../entry-lock-PP1JCXBB.mjs";
+import "../../../../../media-D1z_jisb.mjs";
+import "../../../../../comments-BRtp992B.mjs";
+import "../../../../../byline-fields-DHJs0Mja.mjs";
+import "../../../../../menus-BQKqf0Up.mjs";
+import "../../../../../status-D39Fpy8R.mjs";
 import "../../../../../api/schemas/index.mjs";
 import { Role } from "@emdash-cms/auth";
 import { createKyselyAdapter } from "@emdash-cms/auth/adapters/kysely";

package/dist/astro/routes/api/admin/users/index.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"index.mjs","names":[],"sources":["../../../../../../src/astro/routes/api/admin/users/index.ts"],"sourcesContent":["/**\n * User management list endpoint\n *\n * GET /_emdash/api/admin/users - List users with search, filter, pagination\n */\n\nimport { Role } from \"@emdash-cms/auth\";\nimport { createKyselyAdapter } from \"@emdash-cms/auth/adapters/kysely\";\nimport type { APIRoute } from \"astro\";\n\nimport { apiError, apiSuccess, handleError } from \"#api/error.js\";\nimport { isParseError, parseQuery } from \"#api/parse.js\";\nimport { usersListQuery } from \"#api/schemas.js\";\n\nexport const prerender = false;\n\nexport const GET: APIRoute = async ({ url, locals }) => {\n\tconst { emdash, user } = locals;\n\n\tif (!emdash?.db) {\n\t\treturn apiError(\"NOT_CONFIGURED\", \"EmDash is not initialized\", 500);\n\t}\n\n\tif (!user || user.role < Role.ADMIN) {\n\t\treturn apiError(\"FORBIDDEN\", \"Admin privileges required\", 403);\n\t}\n\n\tconst adapter = createKyselyAdapter(emdash.db);\n\n\ttry {\n\t\t// Parse query parameters\n\t\tconst query = parseQuery(url, usersListQuery);\n\t\tif (isParseError(query)) return query;\n\n\t\t// Fetch users\n\t\tconst result = await adapter.getUsers({\n\t\t\tsearch: query.search,\n\t\t\trole: query.role ? parseInt(query.role, 10) : undefined,\n\t\t\tcursor: query.cursor,\n\t\t\tlimit: query.limit,\n\t\t});\n\n\t\t// Transform dates to ISO strings for JSON serialization\n\t\tconst items = result.items.map((u) => ({\n\t\t\tid: u.id,\n\t\t\temail: u.email,\n\t\t\tname: u.name,\n\t\t\tavatarUrl: u.avatarUrl,\n\t\t\trole: u.role,\n\t\t\temailVerified: u.emailVerified,\n\t\t\tdisabled: u.disabled,\n\t\t\tcreatedAt: u.createdAt.toISOString(),\n\t\t\tupdatedAt: u.updatedAt.toISOString(),\n\t\t\tlastLogin: u.lastLogin?.toISOString() ?? null,\n\t\t\tcredentialCount: u.credentialCount,\n\t\t\toauthProviders: u.oauthProviders,\n\t\t}));\n\n\t\treturn apiSuccess({\n\t\t\titems,\n\t\t\tnextCursor: result.nextCursor,\n\t\t});\n\t} catch (error) {\n\t\treturn handleError(error, \"Failed to list users\", \"USER_LIST_ERROR\");\n\t}\n};\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;AAcA,MAAa,YAAY;AAEzB,MAAa,MAAgB,OAAO,EAAE,KAAK,aAAa;CACvD,MAAM,EAAE,QAAQ,SAAS;AAEzB,KAAI,CAAC,QAAQ,GACZ,QAAO,SAAS,kBAAkB,6BAA6B,IAAI;AAGpE,KAAI,CAAC,QAAQ,KAAK,OAAO,KAAK,MAC7B,QAAO,SAAS,aAAa,6BAA6B,IAAI;CAG/D,MAAM,UAAU,oBAAoB,OAAO,GAAG;AAE9C,KAAI;EAEH,MAAM,QAAQ,WAAW,KAAK,eAAe;AAC7C,MAAI,aAAa,MAAM,CAAE,QAAO;EAGhC,MAAM,SAAS,MAAM,QAAQ,SAAS;GACrC,QAAQ,MAAM;GACd,MAAM,MAAM,OAAO,SAAS,MAAM,MAAM,GAAG,GAAG;GAC9C,QAAQ,MAAM;GACd,OAAO,MAAM;GACb,CAAC;AAkBF,SAAO,WAAW;GACjB,OAhBa,OAAO,MAAM,KAAK,OAAO;IACtC,IAAI,EAAE;IACN,OAAO,EAAE;IACT,MAAM,EAAE;IACR,WAAW,EAAE;IACb,MAAM,EAAE;IACR,eAAe,EAAE;IACjB,UAAU,EAAE;IACZ,WAAW,EAAE,UAAU,aAAa;IACpC,WAAW,EAAE,UAAU,aAAa;IACpC,WAAW,EAAE,WAAW,aAAa,IAAI;IACzC,iBAAiB,EAAE;IACnB,gBAAgB,EAAE;IAClB,EAAE;GAIF,YAAY,OAAO;GACnB,CAAC;UACM,OAAO;AACf,SAAO,YAAY,OAAO,wBAAwB,kBAAkB"}
+{"version":3,"file":"index.mjs","names":[],"sources":["../../../../../../src/astro/routes/api/admin/users/index.ts"],"sourcesContent":["/**\n * User management list endpoint\n *\n * GET /_emdash/api/admin/users - List users with search, filter, pagination\n */\n\nimport { Role } from \"@emdash-cms/auth\";\nimport { createKyselyAdapter } from \"@emdash-cms/auth/adapters/kysely\";\nimport type { APIRoute } from \"astro\";\n\nimport { apiError, apiSuccess, handleError } from \"#api/error.js\";\nimport { isParseError, parseQuery } from \"#api/parse.js\";\nimport { usersListQuery } from \"#api/schemas.js\";\n\nexport const prerender = false;\n\nexport const GET: APIRoute = async ({ url, locals }) => {\n\tconst { emdash, user } = locals;\n\n\tif (!emdash?.db) {\n\t\treturn apiError(\"NOT_CONFIGURED\", \"EmDash is not initialized\", 500);\n\t}\n\n\tif (!user || user.role < Role.ADMIN) {\n\t\treturn apiError(\"FORBIDDEN\", \"Admin privileges required\", 403);\n\t}\n\n\tconst adapter = createKyselyAdapter(emdash.db);\n\n\ttry {\n\t\t// Parse query parameters\n\t\tconst query = parseQuery(url, usersListQuery);\n\t\tif (isParseError(query)) return query;\n\n\t\t// Fetch users\n\t\tconst result = await adapter.getUsers({\n\t\t\tsearch: query.search,\n\t\t\trole: query.role ? parseInt(query.role, 10) : undefined,\n\t\t\tcursor: query.cursor,\n\t\t\tlimit: query.limit,\n\t\t});\n\n\t\t// Transform dates to ISO strings for JSON serialization\n\t\tconst items = result.items.map((u) => ({\n\t\t\tid: u.id,\n\t\t\temail: u.email,\n\t\t\tname: u.name,\n\t\t\tavatarUrl: u.avatarUrl,\n\t\t\trole: u.role,\n\t\t\temailVerified: u.emailVerified,\n\t\t\tdisabled: u.disabled,\n\t\t\tcreatedAt: u.createdAt.toISOString(),\n\t\t\tupdatedAt: u.updatedAt.toISOString(),\n\t\t\tlastLogin: u.lastLogin?.toISOString() ?? null,\n\t\t\tcredentialCount: u.credentialCount,\n\t\t\toauthProviders: u.oauthProviders,\n\t\t}));\n\n\t\treturn apiSuccess({\n\t\t\titems,\n\t\t\tnextCursor: result.nextCursor,\n\t\t});\n\t} catch (error) {\n\t\treturn handleError(error, \"Failed to list users\", \"USER_LIST_ERROR\");\n\t}\n};\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;AAcA,MAAa,YAAY;AAEzB,MAAa,MAAgB,OAAO,EAAE,KAAK,aAAa;CACvD,MAAM,EAAE,QAAQ,SAAS;AAEzB,KAAI,CAAC,QAAQ,GACZ,QAAO,SAAS,kBAAkB,6BAA6B,IAAI;AAGpE,KAAI,CAAC,QAAQ,KAAK,OAAO,KAAK,MAC7B,QAAO,SAAS,aAAa,6BAA6B,IAAI;CAG/D,MAAM,UAAU,oBAAoB,OAAO,GAAG;AAE9C,KAAI;EAEH,MAAM,QAAQ,WAAW,KAAK,eAAe;AAC7C,MAAI,aAAa,MAAM,CAAE,QAAO;EAGhC,MAAM,SAAS,MAAM,QAAQ,SAAS;GACrC,QAAQ,MAAM;GACd,MAAM,MAAM,OAAO,SAAS,MAAM,MAAM,GAAG,GAAG;GAC9C,QAAQ,MAAM;GACd,OAAO,MAAM;GACb,CAAC;AAkBF,SAAO,WAAW;GACjB,OAhBa,OAAO,MAAM,KAAK,OAAO;IACtC,IAAI,EAAE;IACN,OAAO,EAAE;IACT,MAAM,EAAE;IACR,WAAW,EAAE;IACb,MAAM,EAAE;IACR,eAAe,EAAE;IACjB,UAAU,EAAE;IACZ,WAAW,EAAE,UAAU,aAAa;IACpC,WAAW,EAAE,UAAU,aAAa;IACpC,WAAW,EAAE,WAAW,aAAa,IAAI;IACzC,iBAAiB,EAAE;IACnB,gBAAgB,EAAE;IAClB,EAAE;GAIF,YAAY,OAAO;GACnB,CAAC;UACM,OAAO;AACf,SAAO,YAAY,OAAO,wBAAwB,kBAAkB"}

package/dist/astro/routes/api/auth/dev-bypass.mjs

@@ -1,10 +1,10 @@
 import "../../../../base64-DvnNgP7e.mjs";
-import "../../../../types-BkUg2yHx.mjs";
-import "../../../../errors-DgE1zJGG.mjs";
-import "../../../../errors-BF0_LFhW.mjs";
-import { n as apiSuccess, r as handleError, t as apiError } from "../../../../error-CfvOHP0M.mjs";
-import { t as escapeHtml } from "../../../../escape-CuaZhZvL.mjs";
-import { t as isSafeRedirect } from "../../../../redirect-Cd1E7VUt.mjs";
+import "../../../../types-j6MBDjlZ.mjs";
+import "../../../../errors-CjXd1LgH.mjs";
+import "../../../../errors-CNvATh_7.mjs";
+import { n as apiSuccess, r as handleError, t as apiError } from "../../../../error-CEdm_AWU.mjs";
+import { t as escapeHtml } from "../../../../escape-nJW7dR0s.mjs";
+import { t as isSafeRedirect } from "../../../../redirect-D1AmADlk.mjs";
 import { ulid } from "ulidx";
 
 //#region src/astro/routes/api/auth/dev-bypass.ts

package/dist/astro/routes/api/auth/invite/accept.mjs

@@ -1,8 +1,8 @@
 import "../../../../../base64-DvnNgP7e.mjs";
-import "../../../../../types-BkUg2yHx.mjs";
-import "../../../../../errors-DgE1zJGG.mjs";
-import "../../../../../errors-BF0_LFhW.mjs";
-import { n as apiSuccess, r as handleError, t as apiError } from "../../../../../error-CfvOHP0M.mjs";
+import "../../../../../types-j6MBDjlZ.mjs";
+import "../../../../../errors-CjXd1LgH.mjs";
+import "../../../../../errors-CNvATh_7.mjs";
+import { n as apiSuccess, r as handleError, t as apiError } from "../../../../../error-CEdm_AWU.mjs";
 import { InviteError, roleFromLevel, validateInvite } from "@emdash-cms/auth";
 import { createKyselyAdapter } from "@emdash-cms/auth/adapters/kysely";
 

package/dist/astro/routes/api/auth/invite/complete.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"complete.d.mts","names":[],"sources":["../../../../../../src/astro/routes/api/auth/invite/complete.ts"],"mappings":";;;cASa,SAAA;AAAA,cAeA,IAAA,EAAM,QAAA"}
+{"version":3,"file":"complete.d.mts","names":[],"sources":["../../../../../../src/astro/routes/api/auth/invite/complete.ts"],"mappings":";;;cASa,SAAA;AAAA,cAiBA,IAAA,EAAM,QAAA"}

package/dist/astro/routes/api/auth/invite/complete.mjs

@@ -1,25 +1,28 @@
 import "../../../../../config-CvmjJcVw.mjs";
+import "../../../../../after-PcEvMY_6.mjs";
 import { t as OptionsRepository } from "../../../../../options-DhrI7eMv.mjs";
 import "../../../../../base64-DvnNgP7e.mjs";
-import "../../../../../types-BkUg2yHx.mjs";
-import "../../../../../errors-DgE1zJGG.mjs";
-import "../../../../../settings-DYidIB26.mjs";
-import "../../../../../site-settings-DOgRUoFX.mjs";
-import "../../../../../errors-BF0_LFhW.mjs";
-import { n as apiSuccess, r as handleError, t as apiError } from "../../../../../error-CfvOHP0M.mjs";
-import { n as parseBody, t as isParseError } from "../../../../../parse-DY6OD1j_.mjs";
-import "../../../../../redirects-Cv9apQKj.mjs";
-import "../../../../../entry-lock-BJYdBfXb.mjs";
-import "../../../../../media-Pu1L6xir.mjs";
-import "../../../../../comments-fHZ8ON9O.mjs";
-import { k as inviteCompleteBody } from "../../../../../relations-CK9CYUyr.mjs";
-import "../../../../../menus-BM7BPLOb.mjs";
-import "../../../../../status-DZKIG4a9.mjs";
+import "../../../../../url-Dn3IStq8.mjs";
+import "../../../../../types-j6MBDjlZ.mjs";
+import "../../../../../errors-CjXd1LgH.mjs";
+import "../../../../../errors-CNvATh_7.mjs";
+import "../../../../../settings-B0zQj_Tj.mjs";
+import "../../../../../site-settings-AYFvhwQn.mjs";
+import { n as apiSuccess, r as handleError, t as apiError } from "../../../../../error-CEdm_AWU.mjs";
+import { n as parseBody, t as isParseError } from "../../../../../parse-Gt2l4Sld.mjs";
+import "../../../../../redirects-D4EWeXAo.mjs";
+import "../../../../../entry-lock-PP1JCXBB.mjs";
+import "../../../../../media-D1z_jisb.mjs";
+import "../../../../../comments-BRtp992B.mjs";
+import { S as inviteCompleteBody } from "../../../../../byline-fields-DHJs0Mja.mjs";
+import "../../../../../menus-BQKqf0Up.mjs";
+import "../../../../../status-D39Fpy8R.mjs";
 import "../../../../../api/schemas/index.mjs";
-import { r as getPublicOrigin } from "../../../../../public-url-Bn7U0D7-.mjs";
-import { n as validateAllowedOrigins, t as getConfiguredAllowedOrigins } from "../../../../../allowed-origins-CHB8oZNM.mjs";
-import { n as createChallengeStore } from "../../../../../challenge-store-ppU6Uv13.mjs";
-import { t as getPasskeyConfig } from "../../../../../passkey-config-X_H8128a.mjs";
+import { r as getPublicOrigin } from "../../../../../public-url-B5a0QAh6.mjs";
+import { n as validateAllowedOrigins, t as getConfiguredAllowedOrigins } from "../../../../../allowed-origins-CFtudhyw.mjs";
+import { n as createChallengeStore } from "../../../../../challenge-store-CxZxPqaw.mjs";
+import { r as sessionUnavailableError } from "../../../../../session-user-DVcHsFD5.mjs";
+import { t as getPasskeyConfig } from "../../../../../passkey-config-CkQsrcU-.mjs";
 import { InviteError, completeInvite } from "@emdash-cms/auth";
 import { createKyselyAdapter } from "@emdash-cms/auth/adapters/kysely";
 import { registerPasskey, verifyRegistrationResponse } from "@emdash-cms/auth/passkey";
@@ -29,6 +32,7 @@ const prerender = false;
 const POST = async ({ request, locals, session }) => {
 	const { emdash } = locals;
 	if (!emdash?.db) return apiError("NOT_CONFIGURED", "EmDash is not initialized", 500);
+	if (!session) return sessionUnavailableError();
 	try {
 		const body = await parseBody(request, inviteCompleteBody);
 		if (isParseError(body)) return body;
@@ -41,7 +45,7 @@ const POST = async ({ request, locals, session }) => {
 		const verified = await verifyRegistrationResponse(passkeyConfig, body.credential, challengeStore);
 		const user = await completeInvite(adapter, body.token, { name: body.name });
 		await registerPasskey(adapter, user.id, verified, "Initial passkey");
-		if (session) session.set("user", { id: user.id });
+		session.set("user", { id: user.id });
 		return apiSuccess({
 			success: true,
 			user: {

package/dist/astro/routes/api/auth/invite/complete.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"complete.mjs","names":[],"sources":["../../../../../../src/astro/routes/api/auth/invite/complete.ts"],"sourcesContent":["/**\n * POST /_emdash/api/auth/invite/complete\n *\n * Complete the invite by registering a passkey for the new user.\n * This creates the user account and establishes a session.\n */\n\nimport type { APIRoute } from \"astro\";\n\nexport const prerender = false;\n\nimport { completeInvite, InviteError } from \"@emdash-cms/auth\";\nimport { createKyselyAdapter } from \"@emdash-cms/auth/adapters/kysely\";\nimport { verifyRegistrationResponse, registerPasskey } from \"@emdash-cms/auth/passkey\";\n\nimport { apiError, apiSuccess, handleError } from \"#api/error.js\";\nimport { isParseError, parseBody } from \"#api/parse.js\";\nimport { getPublicOrigin } from \"#api/public-url.js\";\nimport { inviteCompleteBody } from \"#api/schemas.js\";\nimport { getConfiguredAllowedOrigins, validateAllowedOrigins } from \"#auth/allowed-origins.js\";\nimport { createChallengeStore } from \"#auth/challenge-store.js\";\nimport { getPasskeyConfig } from \"#auth/passkey-config.js\";\nimport { OptionsRepository } from \"#db/repositories/options.js\";\n\nexport const POST: APIRoute = async ({ request, locals, session }) => {\n\tconst { emdash } = locals;\n\n\tif (!emdash?.db) {\n\t\treturn apiError(\"NOT_CONFIGURED\", \"EmDash is not initialized\", 500);\n\t}\n\n\ttry {\n\t\tconst body = await parseBody(request, inviteCompleteBody);\n\t\tif (isParseError(body)) return body;\n\n\t\tconst adapter = createKyselyAdapter(emdash.db);\n\n\t\t// Get passkey config\n\t\tconst url = new URL(request.url);\n\t\tconst options = new OptionsRepository(emdash.db);\n\t\tconst siteName = (await options.get<string>(\"emdash:site_title\")) ?? undefined;\n\t\tconst siteUrl = getPublicOrigin(url, emdash?.config);\n\t\tconst allowedOrigins = validateAllowedOrigins(\n\t\t\tsiteUrl,\n\t\t\tgetConfiguredAllowedOrigins(emdash?.config),\n\t\t);\n\t\tconst passkeyConfig = getPasskeyConfig(url, siteName, siteUrl, allowedOrigins);\n\n\t\t// Verify the passkey registration response\n\t\tconst challengeStore = createChallengeStore(emdash.db);\n\t\tconst verified = await verifyRegistrationResponse(\n\t\t\tpasskeyConfig,\n\t\t\tbody.credential,\n\t\t\tchallengeStore,\n\t\t);\n\n\t\t// Complete the invite - creates the user\n\t\tconst user = await completeInvite(adapter, body.token, {\n\t\t\tname: body.name,\n\t\t});\n\n\t\t// Register the passkey for the new user\n\t\tawait registerPasskey(adapter, user.id, verified, \"Initial passkey\");\n\n\t\t// Create session\n\t\tif (session) {\n\t\t\tsession.set(\"user\", { id: user.id });\n\t\t}\n\n\t\treturn apiSuccess({\n\t\t\tsuccess: true,\n\t\t\tuser: {\n\t\t\t\tid: user.id,\n\t\t\t\temail: user.email,\n\t\t\t\tname: user.name,\n\t\t\t\trole: user.role,\n\t\t\t},\n\t\t});\n\t} catch (error) {\n\t\tif (error instanceof InviteError) {\n\t\t\tconst statusMap: Record<string, number> = {\n\t\t\t\tinvalid_token: 404,\n\t\t\t\ttoken_expired: 410,\n\t\t\t\tuser_exists: 409,\n\t\t\t};\n\t\t\treturn apiError(error.code.toUpperCase(), error.message, statusMap[error.code] ?? 400);\n\t\t}\n\n\t\treturn handleError(error, \"Failed to complete invite\", \"INVITE_COMPLETE_ERROR\");\n\t}\n};\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;AASA,MAAa,YAAY;AAezB,MAAa,OAAiB,OAAO,EAAE,SAAS,QAAQ,cAAc;CACrE,MAAM,EAAE,WAAW;AAEnB,KAAI,CAAC,QAAQ,GACZ,QAAO,SAAS,kBAAkB,6BAA6B,IAAI;AAGpE,KAAI;EACH,MAAM,OAAO,MAAM,UAAU,SAAS,mBAAmB;AACzD,MAAI,aAAa,KAAK,CAAE,QAAO;EAE/B,MAAM,UAAU,oBAAoB,OAAO,GAAG;EAG9C,MAAM,MAAM,IAAI,IAAI,QAAQ,IAAI;EAEhC,MAAM,WAAY,MADF,IAAI,kBAAkB,OAAO,GAAG,CAChB,IAAY,oBAAoB,IAAK;EACrE,MAAM,UAAU,gBAAgB,KAAK,QAAQ,OAAO;EAKpD,MAAM,gBAAgB,iBAAiB,KAAK,UAAU,SAJ/B,uBACtB,SACA,4BAA4B,QAAQ,OAAO,CAC3C,CAC6E;EAG9E,MAAM,iBAAiB,qBAAqB,OAAO,GAAG;EACtD,MAAM,WAAW,MAAM,2BACtB,eACA,KAAK,YACL,eACA;EAGD,MAAM,OAAO,MAAM,eAAe,SAAS,KAAK,OAAO,EACtD,MAAM,KAAK,MACX,CAAC;AAGF,QAAM,gBAAgB,SAAS,KAAK,IAAI,UAAU,kBAAkB;AAGpE,MAAI,QACH,SAAQ,IAAI,QAAQ,EAAE,IAAI,KAAK,IAAI,CAAC;AAGrC,SAAO,WAAW;GACjB,SAAS;GACT,MAAM;IACL,IAAI,KAAK;IACT,OAAO,KAAK;IACZ,MAAM,KAAK;IACX,MAAM,KAAK;IACX;GACD,CAAC;UACM,OAAO;AACf,MAAI,iBAAiB,YAMpB,QAAO,SAAS,MAAM,KAAK,aAAa,EAAE,MAAM,SALN;GACzC,eAAe;GACf,eAAe;GACf,aAAa;GACb,CACkE,MAAM,SAAS,IAAI;AAGvF,SAAO,YAAY,OAAO,6BAA6B,wBAAwB"}
+{"version":3,"file":"complete.mjs","names":[],"sources":["../../../../../../src/astro/routes/api/auth/invite/complete.ts"],"sourcesContent":["/**\n * POST /_emdash/api/auth/invite/complete\n *\n * Complete the invite by registering a passkey for the new user.\n * This creates the user account and establishes a session.\n */\n\nimport type { APIRoute } from \"astro\";\n\nexport const prerender = false;\n\nimport { completeInvite, InviteError } from \"@emdash-cms/auth\";\nimport { createKyselyAdapter } from \"@emdash-cms/auth/adapters/kysely\";\nimport { verifyRegistrationResponse, registerPasskey } from \"@emdash-cms/auth/passkey\";\n\nimport { apiError, apiSuccess, handleError } from \"#api/error.js\";\nimport { isParseError, parseBody } from \"#api/parse.js\";\nimport { getPublicOrigin } from \"#api/public-url.js\";\nimport { inviteCompleteBody } from \"#api/schemas.js\";\nimport { getConfiguredAllowedOrigins, validateAllowedOrigins } from \"#auth/allowed-origins.js\";\nimport { createChallengeStore } from \"#auth/challenge-store.js\";\nimport { getPasskeyConfig } from \"#auth/passkey-config.js\";\nimport { OptionsRepository } from \"#db/repositories/options.js\";\n\nimport { sessionUnavailableError } from \"../../../../session-user.js\";\n\nexport const POST: APIRoute = async ({ request, locals, session }) => {\n\tconst { emdash } = locals;\n\n\tif (!emdash?.db) {\n\t\treturn apiError(\"NOT_CONFIGURED\", \"EmDash is not initialized\", 500);\n\t}\n\tif (!session) return sessionUnavailableError();\n\n\ttry {\n\t\tconst body = await parseBody(request, inviteCompleteBody);\n\t\tif (isParseError(body)) return body;\n\n\t\tconst adapter = createKyselyAdapter(emdash.db);\n\n\t\t// Get passkey config\n\t\tconst url = new URL(request.url);\n\t\tconst options = new OptionsRepository(emdash.db);\n\t\tconst siteName = (await options.get<string>(\"emdash:site_title\")) ?? undefined;\n\t\tconst siteUrl = getPublicOrigin(url, emdash?.config);\n\t\tconst allowedOrigins = validateAllowedOrigins(\n\t\t\tsiteUrl,\n\t\t\tgetConfiguredAllowedOrigins(emdash?.config),\n\t\t);\n\t\tconst passkeyConfig = getPasskeyConfig(url, siteName, siteUrl, allowedOrigins);\n\n\t\t// Verify the passkey registration response\n\t\tconst challengeStore = createChallengeStore(emdash.db);\n\t\tconst verified = await verifyRegistrationResponse(\n\t\t\tpasskeyConfig,\n\t\t\tbody.credential,\n\t\t\tchallengeStore,\n\t\t);\n\n\t\t// Complete the invite - creates the user\n\t\tconst user = await completeInvite(adapter, body.token, {\n\t\t\tname: body.name,\n\t\t});\n\n\t\t// Register the passkey for the new user\n\t\tawait registerPasskey(adapter, user.id, verified, \"Initial passkey\");\n\n\t\tsession.set(\"user\", { id: user.id });\n\n\t\treturn apiSuccess({\n\t\t\tsuccess: true,\n\t\t\tuser: {\n\t\t\t\tid: user.id,\n\t\t\t\temail: user.email,\n\t\t\t\tname: user.name,\n\t\t\t\trole: user.role,\n\t\t\t},\n\t\t});\n\t} catch (error) {\n\t\tif (error instanceof InviteError) {\n\t\t\tconst statusMap: Record<string, number> = {\n\t\t\t\tinvalid_token: 404,\n\t\t\t\ttoken_expired: 410,\n\t\t\t\tuser_exists: 409,\n\t\t\t};\n\t\t\treturn apiError(error.code.toUpperCase(), error.message, statusMap[error.code] ?? 400);\n\t\t}\n\n\t\treturn handleError(error, \"Failed to complete invite\", \"INVITE_COMPLETE_ERROR\");\n\t}\n};\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AASA,MAAa,YAAY;AAiBzB,MAAa,OAAiB,OAAO,EAAE,SAAS,QAAQ,cAAc;CACrE,MAAM,EAAE,WAAW;AAEnB,KAAI,CAAC,QAAQ,GACZ,QAAO,SAAS,kBAAkB,6BAA6B,IAAI;AAEpE,KAAI,CAAC,QAAS,QAAO,yBAAyB;AAE9C,KAAI;EACH,MAAM,OAAO,MAAM,UAAU,SAAS,mBAAmB;AACzD,MAAI,aAAa,KAAK,CAAE,QAAO;EAE/B,MAAM,UAAU,oBAAoB,OAAO,GAAG;EAG9C,MAAM,MAAM,IAAI,IAAI,QAAQ,IAAI;EAEhC,MAAM,WAAY,MADF,IAAI,kBAAkB,OAAO,GAAG,CAChB,IAAY,oBAAoB,IAAK;EACrE,MAAM,UAAU,gBAAgB,KAAK,QAAQ,OAAO;EAKpD,MAAM,gBAAgB,iBAAiB,KAAK,UAAU,SAJ/B,uBACtB,SACA,4BAA4B,QAAQ,OAAO,CAC3C,CAC6E;EAG9E,MAAM,iBAAiB,qBAAqB,OAAO,GAAG;EACtD,MAAM,WAAW,MAAM,2BACtB,eACA,KAAK,YACL,eACA;EAGD,MAAM,OAAO,MAAM,eAAe,SAAS,KAAK,OAAO,EACtD,MAAM,KAAK,MACX,CAAC;AAGF,QAAM,gBAAgB,SAAS,KAAK,IAAI,UAAU,kBAAkB;AAEpE,UAAQ,IAAI,QAAQ,EAAE,IAAI,KAAK,IAAI,CAAC;AAEpC,SAAO,WAAW;GACjB,SAAS;GACT,MAAM;IACL,IAAI,KAAK;IACT,OAAO,KAAK;IACZ,MAAM,KAAK;IACX,MAAM,KAAK;IACX;GACD,CAAC;UACM,OAAO;AACf,MAAI,iBAAiB,YAMpB,QAAO,SAAS,MAAM,KAAK,aAAa,EAAE,MAAM,SALN;GACzC,eAAe;GACf,eAAe;GACf,aAAa;GACb,CACkE,MAAM,SAAS,IAAI;AAGvF,SAAO,YAAY,OAAO,6BAA6B,wBAAwB"}