emdash 0.41.0 → 0.42.0

package/dist/activation-PtniBLt9.mjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"activation-PtniBLt9.mjs","names":[],"sources":["../src/media/usage/activation.ts"],"sourcesContent":["import { sql, type Kysely, type RawBuilder, type Selectable } from \"kysely\";\nimport { ulid } from \"ulidx\";\n\nimport { isPostgres, tableExists } from \"../../database/dialect-helpers.js\";\nimport type { Database, MediaUsageActivationTable } from \"../../database/types.js\";\nimport {\n\tinstallMediaUsageCaptureTriggers,\n\tverifyMediaUsageCaptureTriggers,\n} from \"./capture-triggers.js\";\n\nconst ACTIVATION_KEY = \"incremental_capture\";\nconst ACTIVATION_ERROR_CODE = \"MEDIA_USAGE_ACTIVATION_FAILED\";\nexport const MEDIA_USAGE_ACTIVATION_RUNTIME_GENERATION = 1;\n\nexport class MediaUsageActivationVersionMismatchError extends Error {}\n\nexport interface MediaUsageActivationStatus {\n\tstate: \"expanded\" | \"activating\" | \"active\";\n\tcollectionCursor: string | null;\n\tattemptCount: number;\n\tdrainConfirmedAt: string | null;\n\tlastAttemptedAt: string | null;\n\tlastErrorCode: \"MEDIA_USAGE_ACTIVATION_FAILED\" | null;\n\tleaseExpiresAt: string | null;\n\tactivatedAt: string | null;\n\tupdatedAt: string;\n}\n\nexport const MEDIA_USAGE_ACTIVATION_LIMITS = Object.freeze({\n\tcollectionsPerCall: 1,\n\tleaseDurationSeconds: 5 * 60,\n});\n\nexport type MediaUsageActivationResult =\n\t| { outcome: \"active\"; processedCollections: number }\n\t| {\n\t\t\toutcome: \"activating\";\n\t\t\tprocessedCollections: number;\n\t\t\tcollectionCursor: string | null;\n\t  }\n\t| { outcome: \"lease_active\"; leaseExpiresAt: string }\n\t| { outcome: \"conflict\"; processedCollections: number };\n\nexport type MediaUsageActivationContinuationResult =\n\t| MediaUsageActivationResult\n\t| { outcome: \"inactive\" | \"failed\" };\n\ntype MediaUsageActivationClaimMode = \"confirmed\" | \"background\";\n\nexport interface MediaUsageCollectionCapturePreparation {\n\tcaptureRequired: boolean;\n\tcollectionId: string;\n\tregistrationExists: boolean;\n\tresuming: boolean;\n}\n\nexport async function getMediaUsageActivationStatus(\n\tdb: Kysely<Database>,\n): Promise<MediaUsageActivationStatus> {\n\tconst activation = await db\n\t\t.selectFrom(\"_emdash_media_usage_activation\")\n\t\t.select([\n\t\t\t\"state\",\n\t\t\t\"runtime_generation\",\n\t\t\t\"collection_cursor\",\n\t\t\t\"drain_confirmed_at\",\n\t\t\t\"lease_expires_at\",\n\t\t\t\"attempt_count\",\n\t\t\t\"last_attempted_at\",\n\t\t\t\"last_error_code\",\n\t\t\t\"activated_at\",\n\t\t\t\"updated_at\",\n\t\t])\n\t\t.where(\"task_key\", \"=\", ACTIVATION_KEY)\n\t\t.executeTakeFirstOrThrow();\n\tassertRuntimeGeneration(activation);\n\tif (\n\t\tactivation.state !== \"expanded\" &&\n\t\tactivation.state !== \"activating\" &&\n\t\tactivation.state !== \"active\"\n\t) {\n\t\tthrow new Error(\"Invalid media usage activation state\");\n\t}\n\tif (!Number.isInteger(activation.attempt_count) || activation.attempt_count < 0) {\n\t\tthrow new Error(\"Invalid media usage activation attempt count\");\n\t}\n\n\treturn {\n\t\tstate: activation.state,\n\t\tcollectionCursor: activation.collection_cursor,\n\t\tattemptCount: activation.attempt_count,\n\t\tdrainConfirmedAt: activation.drain_confirmed_at,\n\t\tlastAttemptedAt: activation.last_attempted_at,\n\t\tlastErrorCode: activation.last_error_code === null ? null : ACTIVATION_ERROR_CODE,\n\t\tleaseExpiresAt: activation.lease_expires_at,\n\t\tactivatedAt: activation.activated_at,\n\t\tupdatedAt: activation.updated_at,\n\t};\n}\n\nexport async function canResumeMediaUsageCollectionCapture(\n\tdb: Kysely<Database>,\n\tidentity: { collectionId: string; collectionSlug: string; creationFingerprint?: string },\n): Promise<boolean> {\n\tconst activation = await findActivationIfAvailable(db);\n\tif (!activation) return false;\n\tassertRuntimeGeneration(activation);\n\tif (activation.state !== \"active\") return false;\n\n\tconst lifecycle = await db\n\t\t.selectFrom(\"_emdash_media_usage_index_status\")\n\t\t.select([\"collection_id\", \"cursor\"])\n\t\t.where(\"adapter_id\", \"=\", \"content-media\")\n\t\t.where(\"scope_type\", \"=\", \"collection\")\n\t\t.where(\"scope_key\", \"=\", identity.collectionSlug)\n\t\t.where(\"collection_id\", \"=\", identity.collectionId)\n\t\t.where(\"capture_state\", \"in\", [\"installing\", \"ready\"])\n\t\t.executeTakeFirst();\n\treturn (\n\t\tlifecycle?.collection_id === identity.collectionId &&\n\t\t(identity.creationFingerprint\n\t\t\t? lifecycle.cursor === identity.creationFingerprint\n\t\t\t: lifecycle.cursor === null)\n\t);\n}\n\nexport async function prepareMediaUsageCollectionCapture(\n\tdb: Kysely<Database>,\n\tinput: {\n\t\tcollectionId: string;\n\t\tcollectionSlug: string;\n\t\tcreationFingerprint?: string;\n\t\tregisteredCollectionId?: string;\n\t},\n): Promise<MediaUsageCollectionCapturePreparation> {\n\tconst activation = await findActivationIfAvailable(db);\n\tif (!activation) {\n\t\treturn {\n\t\t\tcaptureRequired: false,\n\t\t\tcollectionId: input.collectionId,\n\t\t\tregistrationExists: input.registeredCollectionId !== undefined,\n\t\t\tresuming: false,\n\t\t};\n\t}\n\tassertRuntimeGeneration(activation);\n\tif (activation.state !== \"active\") {\n\t\treturn {\n\t\t\tcaptureRequired: false,\n\t\t\tcollectionId: input.collectionId,\n\t\t\tregistrationExists: input.registeredCollectionId !== undefined,\n\t\t\tresuming: false,\n\t\t};\n\t}\n\n\tconst existing = await db\n\t\t.selectFrom(\"_emdash_media_usage_index_status\")\n\t\t.select([\"collection_id\", \"capture_state\", \"cursor\"])\n\t\t.where(\"adapter_id\", \"=\", \"content-media\")\n\t\t.where(\"scope_type\", \"=\", \"collection\")\n\t\t.where(\"scope_key\", \"=\", input.collectionSlug)\n\t\t.executeTakeFirst();\n\tif (existing) {\n\t\tif (\n\t\t\texisting.collection_id &&\n\t\t\t(existing.capture_state === \"installing\" || existing.capture_state === \"ready\") &&\n\t\t\t(input.creationFingerprint\n\t\t\t\t? existing.cursor === input.creationFingerprint\n\t\t\t\t: existing.cursor === null) &&\n\t\t\t(input.registeredCollectionId === undefined ||\n\t\t\t\tinput.registeredCollectionId === existing.collection_id)\n\t\t) {\n\t\t\treturn {\n\t\t\t\tcaptureRequired: true,\n\t\t\t\tcollectionId: existing.collection_id,\n\t\t\t\tregistrationExists: input.registeredCollectionId !== undefined,\n\t\t\t\tresuming: true,\n\t\t\t};\n\t\t}\n\t\tthrow new Error(\"Media usage collection lifecycle identity conflict\");\n\t}\n\tif (input.registeredCollectionId !== undefined) {\n\t\tthrow new Error(\"Media usage collection lifecycle is missing\");\n\t}\n\n\tawait db\n\t\t.insertInto(\"_emdash_media_usage_index_status\")\n\t\t.values({\n\t\t\tadapter_id: \"content-media\",\n\t\t\tscope_type: \"collection\",\n\t\t\tscope_key: input.collectionSlug,\n\t\t\tstatus: \"never\",\n\t\t\tcollection_id: input.collectionId,\n\t\t\treconciliation_required: 1,\n\t\t\tcapture_state: \"installing\",\n\t\t\tcursor: input.creationFingerprint ?? null,\n\t\t\tupdated_at: timestampOffset(db, 0),\n\t\t})\n\t\t.execute();\n\treturn {\n\t\tcaptureRequired: true,\n\t\tcollectionId: input.collectionId,\n\t\tregistrationExists: false,\n\t\tresuming: false,\n\t};\n}\n\nexport async function installPreparedMediaUsageCollectionCapture(\n\tdb: Kysely<Database>,\n\tidentity: { collectionId: string; collectionSlug: string },\n): Promise<void> {\n\tawait installMediaUsageCaptureTriggers(db, identity, { replaceExisting: false });\n\tif (!(await verifyMediaUsageCaptureTriggers(db, identity))) {\n\t\tthrow new Error(\"Media usage capture trigger verification failed\");\n\t}\n}\n\nexport async function markMediaUsageCollectionCaptureReady(\n\tdb: Kysely<Database>,\n\tidentity: { collectionId: string; collectionSlug: string },\n): Promise<void> {\n\tconst result = await db\n\t\t.updateTable(\"_emdash_media_usage_index_status\")\n\t\t.set({ capture_state: \"ready\", updated_at: timestampOffset(db, 0) })\n\t\t.where(\"adapter_id\", \"=\", \"content-media\")\n\t\t.where(\"scope_type\", \"=\", \"collection\")\n\t\t.where(\"scope_key\", \"=\", identity.collectionSlug)\n\t\t.where(\"collection_id\", \"=\", identity.collectionId)\n\t\t.where(\"capture_state\", \"in\", [\"installing\", \"ready\"])\n\t\t.where(\n\t\t\tsql<boolean>`EXISTS (\n\t\t\t\tSELECT 1 FROM _emdash_media_usage_activation AS activation\n\t\t\t\tWHERE activation.task_key = ${ACTIVATION_KEY}\n\t\t\t\t\tAND activation.state = 'active'\n\t\t\t\t\tAND activation.runtime_generation = ${MEDIA_USAGE_ACTIVATION_RUNTIME_GENERATION}\n\t\t\t)`,\n\t\t)\n\t\t.executeTakeFirst();\n\tif (Number(result.numUpdatedRows ?? 0) === 0) {\n\t\tthrow new Error(\"Media usage collection readiness lost its fence\");\n\t}\n}\n\nexport async function finalizeMediaUsageCollectionCapture(\n\tdb: Kysely<Database>,\n\tidentity: { collectionId: string; collectionSlug: string },\n): Promise<void> {\n\tconst result = await db\n\t\t.updateTable(\"_emdash_media_usage_index_status\")\n\t\t.set({ capture_state: \"active\", cursor: null, updated_at: timestampOffset(db, 0) })\n\t\t.where(\"adapter_id\", \"=\", \"content-media\")\n\t\t.where(\"scope_type\", \"=\", \"collection\")\n\t\t.where(\"scope_key\", \"=\", identity.collectionSlug)\n\t\t.where(\"collection_id\", \"=\", identity.collectionId)\n\t\t.where(\"capture_state\", \"=\", \"ready\")\n\t\t.where(\n\t\t\tsql<boolean>`EXISTS (\n\t\t\t\tSELECT 1 FROM _emdash_collections AS collection\n\t\t\t\tWHERE collection.id = ${identity.collectionId}\n\t\t\t\t\tAND collection.slug = ${identity.collectionSlug}\n\t\t\t)`,\n\t\t)\n\t\t.where(\n\t\t\tsql<boolean>`EXISTS (\n\t\t\t\tSELECT 1 FROM _emdash_media_usage_activation AS activation\n\t\t\t\tWHERE activation.task_key = ${ACTIVATION_KEY}\n\t\t\t\t\tAND activation.state = 'active'\n\t\t\t\t\tAND activation.runtime_generation = ${MEDIA_USAGE_ACTIVATION_RUNTIME_GENERATION}\n\t\t\t)`,\n\t\t)\n\t\t.executeTakeFirst();\n\tif (Number(result.numUpdatedRows ?? 0) === 0) {\n\t\tthrow new Error(\"Media usage collection activation lost its fence\");\n\t}\n}\n\nexport async function activateMediaUsageCapture(\n\tdb: Kysely<Database>,\n\tinput: { writersDrained: true },\n): Promise<MediaUsageActivationResult> {\n\tif (input.writersDrained !== true) {\n\t\tthrow new Error(\"Media usage activation requires confirmation that writers are drained\");\n\t}\n\treturn advanceMediaUsageActivation(db, \"confirmed\");\n}\n\nexport async function continueMediaUsageActivation(\n\tdb: Kysely<Database>,\n): Promise<MediaUsageActivationContinuationResult> {\n\treturn advanceMediaUsageActivation(db, \"background\");\n}\n\nasync function advanceMediaUsageActivation(\n\tdb: Kysely<Database>,\n\tmode: \"confirmed\",\n): Promise<MediaUsageActivationResult>;\nasync function advanceMediaUsageActivation(\n\tdb: Kysely<Database>,\n\tmode: \"background\",\n): Promise<MediaUsageActivationContinuationResult>;\nasync function advanceMediaUsageActivation(\n\tdb: Kysely<Database>,\n\tmode: MediaUsageActivationClaimMode,\n): Promise<MediaUsageActivationContinuationResult> {\n\tconst before = await findActivation(db);\n\tassertRuntimeGeneration(before);\n\tif (before.state === \"active\") {\n\t\treturn { outcome: \"active\", processedCollections: 0 };\n\t}\n\tif (mode === \"background\") {\n\t\tif (before.state === \"expanded\" || before.drain_confirmed_at === null) {\n\t\t\treturn { outcome: \"inactive\" };\n\t\t}\n\t\tif (before.state !== \"activating\") {\n\t\t\tthrow new Error(\"Invalid media usage activation state\");\n\t\t}\n\t\tif (before.last_error_code !== null) return { outcome: \"failed\" };\n\t}\n\n\tconst leaseToken = ulid();\n\tconst lease = await claimActivation(db, leaseToken, mode);\n\tif (!lease) return activationClaimLoss(db, mode);\n\n\tlet processedCollections = 0;\n\ttry {\n\t\tconst candidates = await findActivationCandidates(db, lease.collection_cursor);\n\t\tfor (const collection of candidates.slice(\n\t\t\t0,\n\t\t\tMEDIA_USAGE_ACTIVATION_LIMITS.collectionsPerCall,\n\t\t)) {\n\t\t\tawait requireActivationLease(db, leaseToken);\n\t\t\tawait prepareCollectionForActivation(db, collection, leaseToken);\n\t\t\tawait requireActivationLease(db, leaseToken);\n\t\t\tawait installMediaUsageCaptureTriggers(\n\t\t\t\tdb,\n\t\t\t\t{\n\t\t\t\t\tcollectionId: collection.id,\n\t\t\t\t\tcollectionSlug: collection.slug,\n\t\t\t\t},\n\t\t\t\t{ replaceExisting: false },\n\t\t\t);\n\t\t\tawait requireActivationLease(db, leaseToken);\n\t\t\tif (\n\t\t\t\t!(await verifyMediaUsageCaptureTriggers(db, {\n\t\t\t\t\tcollectionId: collection.id,\n\t\t\t\t\tcollectionSlug: collection.slug,\n\t\t\t\t}))\n\t\t\t) {\n\t\t\t\tthrow new Error(\"Media usage capture trigger verification failed\");\n\t\t\t}\n\t\t\tif (!(await activateCollectionLifecycle(db, collection, leaseToken))) {\n\t\t\t\tthrow new Error(\"Media usage collection activation lost its fence\");\n\t\t\t}\n\t\t\tprocessedCollections++;\n\t\t}\n\n\t\tconst collectionCursor =\n\t\t\tcandidates[Math.min(processedCollections, candidates.length) - 1]?.slug ??\n\t\t\tlease.collection_cursor;\n\t\tif (candidates.length > MEDIA_USAGE_ACTIVATION_LIMITS.collectionsPerCall) {\n\t\t\tif (!(await releaseActivationBatch(db, leaseToken, collectionCursor))) {\n\t\t\t\tthrow new Error(\"Media usage activation cursor lost its fence\");\n\t\t\t}\n\t\t\treturn { outcome: \"activating\", processedCollections, collectionCursor };\n\t\t}\n\n\t\tconst incomplete = await findIncompleteCollection(db);\n\t\tif (incomplete) {\n\t\t\tif (!(await releaseActivationBatch(db, leaseToken, null))) {\n\t\t\t\tthrow new Error(\"Media usage activation restart lost its fence\");\n\t\t\t}\n\t\t\treturn { outcome: \"activating\", processedCollections, collectionCursor: null };\n\t\t}\n\n\t\tif (!(await finalizeActivation(db, leaseToken, collectionCursor))) {\n\t\t\tthrow new Error(\"Media usage activation finalization lost its fence\");\n\t\t}\n\t\treturn { outcome: \"active\", processedCollections };\n\t} catch (error) {\n\t\tif (!(await activationLeaseIsLive(db, leaseToken))) {\n\t\t\treturn { outcome: \"conflict\", processedCollections };\n\t\t}\n\t\tawait recordActivationFailure(db, leaseToken);\n\t\tthrow new Error(\"Media usage activation failed\", { cause: error });\n\t}\n}\n\nasync function findActivation(\n\tdb: Kysely<Database>,\n): Promise<Selectable<MediaUsageActivationTable>> {\n\treturn db\n\t\t.selectFrom(\"_emdash_media_usage_activation\")\n\t\t.selectAll()\n\t\t.where(\"task_key\", \"=\", ACTIVATION_KEY)\n\t\t.executeTakeFirstOrThrow();\n}\n\nasync function findActivationIfAvailable(\n\tdb: Kysely<Database>,\n): Promise<Selectable<MediaUsageActivationTable> | null> {\n\tif (!(await tableExists(db, \"_emdash_media_usage_activation\"))) return null;\n\treturn findActivation(db);\n}\n\nfunction assertRuntimeGeneration(activation: { runtime_generation: number }): void {\n\tif (activation.runtime_generation !== MEDIA_USAGE_ACTIVATION_RUNTIME_GENERATION) {\n\t\tthrow new MediaUsageActivationVersionMismatchError(\n\t\t\t\"Media usage activation runtime generation mismatch\",\n\t\t);\n\t}\n}\n\nasync function claimActivation(\n\tdb: Kysely<Database>,\n\tleaseToken: string,\n\tmode: MediaUsageActivationClaimMode,\n): Promise<Selectable<MediaUsageActivationTable> | null> {\n\tconst now = timestampOffset(db, 0);\n\tconst claimValues = {\n\t\tlease_token: leaseToken,\n\t\tlease_expires_at: timestampOffset(db, MEDIA_USAGE_ACTIVATION_LIMITS.leaseDurationSeconds),\n\t\tattempt_count: sql<number>`attempt_count + 1`,\n\t\tlast_attempted_at: now,\n\t\tupdated_at: now,\n\t};\n\tlet claim = db\n\t\t.updateTable(\"_emdash_media_usage_activation\")\n\t\t.set(\n\t\t\tmode === \"confirmed\"\n\t\t\t\t? {\n\t\t\t\t\t\t...claimValues,\n\t\t\t\t\t\tstate: \"activating\",\n\t\t\t\t\t\tdrain_confirmed_at: now,\n\t\t\t\t\t\tlast_error_code: null,\n\t\t\t\t\t}\n\t\t\t\t: claimValues,\n\t\t)\n\t\t.where(\"task_key\", \"=\", ACTIVATION_KEY)\n\t\t.where(\"runtime_generation\", \"=\", MEDIA_USAGE_ACTIVATION_RUNTIME_GENERATION);\n\tif (mode === \"confirmed\") {\n\t\tclaim = claim.where((eb) =>\n\t\t\teb.or([\n\t\t\t\teb(\"state\", \"=\", \"expanded\"),\n\t\t\t\teb.and([\n\t\t\t\t\teb(\"state\", \"=\", \"activating\"),\n\t\t\t\t\teb.or([\n\t\t\t\t\t\teb(\"lease_token\", \"is\", null),\n\t\t\t\t\t\teb.and([\n\t\t\t\t\t\t\teb(\"lease_expires_at\", \"is not\", null),\n\t\t\t\t\t\t\ttimestampIsDue(db, \"lease_expires_at\"),\n\t\t\t\t\t\t]),\n\t\t\t\t\t]),\n\t\t\t\t]),\n\t\t\t]),\n\t\t);\n\t} else {\n\t\tclaim = claim\n\t\t\t.where(\"state\", \"=\", \"activating\")\n\t\t\t.where(\"drain_confirmed_at\", \"is not\", null)\n\t\t\t.where(\"last_error_code\", \"is\", null)\n\t\t\t.where((eb) =>\n\t\t\t\teb.or([\n\t\t\t\t\teb(\"lease_token\", \"is\", null),\n\t\t\t\t\teb.and([eb(\"lease_expires_at\", \"is not\", null), timestampIsDue(db, \"lease_expires_at\")]),\n\t\t\t\t]),\n\t\t\t);\n\t}\n\treturn (await claim.returningAll().executeTakeFirst()) ?? null;\n}\n\nasync function activationClaimLoss(\n\tdb: Kysely<Database>,\n\tmode: MediaUsageActivationClaimMode,\n): Promise<MediaUsageActivationContinuationResult> {\n\tconst current = await findActivation(db);\n\tassertRuntimeGeneration(current);\n\tif (current.state === \"active\") return { outcome: \"active\", processedCollections: 0 };\n\tif (mode === \"background\") {\n\t\tif (current.state === \"expanded\" || current.drain_confirmed_at === null) {\n\t\t\treturn { outcome: \"inactive\" };\n\t\t}\n\t\tif (current.state === \"activating\" && current.last_error_code !== null) {\n\t\t\treturn { outcome: \"failed\" };\n\t\t}\n\t}\n\tif (\n\t\tcurrent.state === \"activating\" &&\n\t\tcurrent.lease_token &&\n\t\tcurrent.lease_expires_at &&\n\t\t(await activationLeaseIsLive(db, current.lease_token))\n\t) {\n\t\treturn { outcome: \"lease_active\", leaseExpiresAt: current.lease_expires_at };\n\t}\n\tif (mode === \"background\" && current.state === \"activating\") {\n\t\treturn { outcome: \"conflict\", processedCollections: 0 };\n\t}\n\tthrow new Error(\"Media usage activation state is not claimable\");\n}\n\nasync function activationLeaseIsLive(db: Kysely<Database>, leaseToken: string): Promise<boolean> {\n\tconst row = await db\n\t\t.selectFrom(\"_emdash_media_usage_activation\")\n\t\t.select(\"task_key\")\n\t\t.where(\"task_key\", \"=\", ACTIVATION_KEY)\n\t\t.where(\"state\", \"=\", \"activating\")\n\t\t.where(\"runtime_generation\", \"=\", MEDIA_USAGE_ACTIVATION_RUNTIME_GENERATION)\n\t\t.where(\"lease_token\", \"=\", leaseToken)\n\t\t.where(\"lease_expires_at\", \"is not\", null)\n\t\t.where(timestampIsLive(db, \"lease_expires_at\"))\n\t\t.executeTakeFirst();\n\treturn row !== undefined;\n}\n\nasync function findActivationCandidates(\n\tdb: Kysely<Database>,\n\tcollectionCursor: string | null,\n): Promise<Array<{ id: string; slug: string }>> {\n\tlet query = db.selectFrom(\"_emdash_collections\").select([\"id\", \"slug\"]);\n\tif (collectionCursor) query = query.where(\"slug\", \">\", collectionCursor);\n\treturn query\n\t\t.orderBy(\"slug\", \"asc\")\n\t\t.limit(MEDIA_USAGE_ACTIVATION_LIMITS.collectionsPerCall + 1)\n\t\t.execute();\n}\n\nasync function prepareCollectionForActivation(\n\tdb: Kysely<Database>,\n\tcollection: { id: string; slug: string },\n\tleaseToken: string,\n): Promise<void> {\n\tconst now = timestampOffset(db, 0);\n\tconst existingStatus = sql.ref(\"_emdash_media_usage_index_status.status\");\n\tconst existingCompletedAt = sql.ref(\"_emdash_media_usage_index_status.completed_at\");\n\tconst existingCollectionId = sql.ref(\"_emdash_media_usage_index_status.collection_id\");\n\tconst existingCaptureState = sql.ref(\"_emdash_media_usage_index_status.capture_state\");\n\tconst row = await db\n\t\t.insertInto(\"_emdash_media_usage_index_status\")\n\t\t.values({\n\t\t\tadapter_id: \"content-media\",\n\t\t\tscope_type: \"collection\",\n\t\t\tscope_key: collection.slug,\n\t\t\tstatus: \"never\",\n\t\t\tcollection_id: collection.id,\n\t\t\treconciliation_required: 1,\n\t\t\tcapture_state: \"installing\",\n\t\t\tupdated_at: now,\n\t\t})\n\t\t.onConflict((conflict) =>\n\t\t\tconflict\n\t\t\t\t.columns([\"adapter_id\", \"scope_type\", \"scope_key\"])\n\t\t\t\t.doUpdateSet({\n\t\t\t\t\tstatus: sql<string>`CASE WHEN ${existingStatus} IN ('complete', 'running') THEN 'stale' ELSE ${existingStatus} END`,\n\t\t\t\t\tcompleted_at: sql<\n\t\t\t\t\t\tstring | null\n\t\t\t\t\t>`CASE WHEN ${existingStatus} IN ('complete', 'running') THEN NULL ELSE ${existingCompletedAt} END`,\n\t\t\t\t\tcursor: null,\n\t\t\t\t\tcollection_id: collection.id,\n\t\t\t\t\treconciliation_required: 1,\n\t\t\t\t\tcapture_state: \"installing\",\n\t\t\t\t\tupdated_at: now,\n\t\t\t\t})\n\t\t\t\t.where((eb) =>\n\t\t\t\t\teb.and([\n\t\t\t\t\t\teb.or([\n\t\t\t\t\t\t\teb(existingCollectionId, \"is\", null),\n\t\t\t\t\t\t\teb(existingCollectionId, \"=\", collection.id),\n\t\t\t\t\t\t]),\n\t\t\t\t\t\teb.or([\n\t\t\t\t\t\t\teb(existingCaptureState, \"is\", null),\n\t\t\t\t\t\t\teb(existingCaptureState, \"!=\", \"deleting\"),\n\t\t\t\t\t\t]),\n\t\t\t\t\t\tactiveActivationLease(db, leaseToken),\n\t\t\t\t\t]),\n\t\t\t\t),\n\t\t)\n\t\t.returning(\"collection_id\")\n\t\t.executeTakeFirst();\n\tif (row?.collection_id !== collection.id) {\n\t\tthrow new Error(\"Media usage collection lifecycle identity conflict\");\n\t}\n}\n\nasync function requireActivationLease(db: Kysely<Database>, leaseToken: string): Promise<void> {\n\tif (!(await activationLeaseIsLive(db, leaseToken))) {\n\t\tthrow new Error(\"Media usage activation lease is no longer live\");\n\t}\n}\n\nasync function activateCollectionLifecycle(\n\tdb: Kysely<Database>,\n\tcollection: { id: string; slug: string },\n\tleaseToken: string,\n): Promise<boolean> {\n\tconst result = await db\n\t\t.updateTable(\"_emdash_media_usage_index_status\")\n\t\t.set({ capture_state: \"active\", updated_at: timestampOffset(db, 0) })\n\t\t.where(\"adapter_id\", \"=\", \"content-media\")\n\t\t.where(\"scope_type\", \"=\", \"collection\")\n\t\t.where(\"scope_key\", \"=\", collection.slug)\n\t\t.where(\"collection_id\", \"=\", collection.id)\n\t\t.where(\"capture_state\", \"=\", \"installing\")\n\t\t.where(\n\t\t\tsql<boolean>`EXISTS (\n\t\t\t\tSELECT 1 FROM _emdash_collections AS collection\n\t\t\t\tWHERE collection.id = ${collection.id}\n\t\t\t\t\tAND collection.slug = ${collection.slug}\n\t\t\t)`,\n\t\t)\n\t\t.where(activeActivationLease(db, leaseToken))\n\t\t.executeTakeFirst();\n\treturn Number(result.numUpdatedRows ?? 0) > 0;\n}\n\nasync function releaseActivationBatch(\n\tdb: Kysely<Database>,\n\tleaseToken: string,\n\tcollectionCursor: string | null,\n): Promise<boolean> {\n\tconst result = await db\n\t\t.updateTable(\"_emdash_media_usage_activation\")\n\t\t.set({\n\t\t\tcollection_cursor: collectionCursor,\n\t\t\tlease_token: null,\n\t\t\tlease_expires_at: null,\n\t\t\tupdated_at: timestampOffset(db, 0),\n\t\t})\n\t\t.where(\"task_key\", \"=\", ACTIVATION_KEY)\n\t\t.where(\"state\", \"=\", \"activating\")\n\t\t.where(\"runtime_generation\", \"=\", MEDIA_USAGE_ACTIVATION_RUNTIME_GENERATION)\n\t\t.where(\"lease_token\", \"=\", leaseToken)\n\t\t.where(\"lease_expires_at\", \"is not\", null)\n\t\t.where(timestampIsLive(db, \"lease_expires_at\"))\n\t\t.executeTakeFirst();\n\treturn Number(result.numUpdatedRows ?? 0) > 0;\n}\n\nasync function findIncompleteCollection(\n\tdb: Kysely<Database>,\n): Promise<{ id: string; slug: string } | null> {\n\tconst row = await db\n\t\t.selectFrom(\"_emdash_collections as collection\")\n\t\t.select([\"collection.id\", \"collection.slug\"])\n\t\t.where((eb) =>\n\t\t\teb.not(\n\t\t\t\teb.exists(\n\t\t\t\t\teb\n\t\t\t\t\t\t.selectFrom(\"_emdash_media_usage_index_status as status\")\n\t\t\t\t\t\t.select(\"status.scope_key\")\n\t\t\t\t\t\t.where(\"status.adapter_id\", \"=\", \"content-media\")\n\t\t\t\t\t\t.where(\"status.scope_type\", \"=\", \"collection\")\n\t\t\t\t\t\t.whereRef(\"status.scope_key\", \"=\", \"collection.slug\")\n\t\t\t\t\t\t.whereRef(\"status.collection_id\", \"=\", \"collection.id\")\n\t\t\t\t\t\t.where(\"status.capture_state\", \"=\", \"active\"),\n\t\t\t\t),\n\t\t\t),\n\t\t)\n\t\t.orderBy(\"collection.slug\", \"asc\")\n\t\t.limit(1)\n\t\t.executeTakeFirst();\n\treturn row ?? null;\n}\n\nasync function finalizeActivation(\n\tdb: Kysely<Database>,\n\tleaseToken: string,\n\tcollectionCursor: string | null,\n): Promise<boolean> {\n\tconst now = timestampOffset(db, 0);\n\tconst result = await db\n\t\t.updateTable(\"_emdash_media_usage_activation\")\n\t\t.set({\n\t\t\tstate: \"active\",\n\t\t\tcollection_cursor: collectionCursor,\n\t\t\tlease_token: null,\n\t\t\tlease_expires_at: null,\n\t\t\tlast_error_code: null,\n\t\t\tactivated_at: now,\n\t\t\tupdated_at: now,\n\t\t})\n\t\t.where(\"task_key\", \"=\", ACTIVATION_KEY)\n\t\t.where(\"state\", \"=\", \"activating\")\n\t\t.where(\"runtime_generation\", \"=\", MEDIA_USAGE_ACTIVATION_RUNTIME_GENERATION)\n\t\t.where(\"lease_token\", \"=\", leaseToken)\n\t\t.where(\"lease_expires_at\", \"is not\", null)\n\t\t.where(timestampIsLive(db, \"lease_expires_at\"))\n\t\t.where(\n\t\t\tsql<boolean>`NOT EXISTS (\n\t\t\t\tSELECT 1\n\t\t\t\tFROM _emdash_collections AS collection\n\t\t\t\tWHERE NOT EXISTS (\n\t\t\t\t\tSELECT 1\n\t\t\t\t\tFROM _emdash_media_usage_index_status AS status\n\t\t\t\t\tWHERE status.adapter_id = 'content-media'\n\t\t\t\t\t\tAND status.scope_type = 'collection'\n\t\t\t\t\t\tAND status.scope_key = collection.slug\n\t\t\t\t\t\tAND status.collection_id = collection.id\n\t\t\t\t\t\tAND status.capture_state = 'active'\n\t\t\t\t)\n\t\t\t)`,\n\t\t)\n\t\t.executeTakeFirst();\n\treturn Number(result.numUpdatedRows ?? 0) > 0;\n}\n\nasync function recordActivationFailure(db: Kysely<Database>, leaseToken: string): Promise<void> {\n\tawait db\n\t\t.updateTable(\"_emdash_media_usage_activation\")\n\t\t.set({\n\t\t\tlease_token: null,\n\t\t\tlease_expires_at: null,\n\t\t\tlast_error_code: ACTIVATION_ERROR_CODE,\n\t\t\tupdated_at: timestampOffset(db, 0),\n\t\t})\n\t\t.where(\"task_key\", \"=\", ACTIVATION_KEY)\n\t\t.where(\"state\", \"=\", \"activating\")\n\t\t.where(\"runtime_generation\", \"=\", MEDIA_USAGE_ACTIVATION_RUNTIME_GENERATION)\n\t\t.where(\"lease_token\", \"=\", leaseToken)\n\t\t.execute();\n}\n\nfunction activeActivationLease(db: Kysely<Database>, leaseToken: string): RawBuilder<boolean> {\n\treturn sql<boolean>`EXISTS (\n\t\tSELECT 1\n\t\tFROM _emdash_media_usage_activation AS activation\n\t\tWHERE activation.task_key = ${ACTIVATION_KEY}\n\t\t\tAND activation.state = 'activating'\n\t\t\tAND activation.runtime_generation = ${MEDIA_USAGE_ACTIVATION_RUNTIME_GENERATION}\n\t\t\tAND activation.lease_token = ${leaseToken}\n\t\t\tAND activation.lease_expires_at IS NOT NULL\n\t\t\tAND ${timestampIsLive(db, \"activation.lease_expires_at\")}\n\t)`;\n}\n\nfunction timestampIsDue(db: Kysely<Database>, column: string): RawBuilder<boolean> {\n\treturn isPostgres(db)\n\t\t? sql<boolean>`${sql.ref(column)}::timestamptz <= clock_timestamp()`\n\t\t: sql<boolean>`${sql.ref(column)} <= strftime('%Y-%m-%dT%H:%M:%fZ', 'now')`;\n}\n\nfunction timestampIsLive(db: Kysely<Database>, column: string): RawBuilder<boolean> {\n\treturn isPostgres(db)\n\t\t? sql<boolean>`${sql.ref(column)}::timestamptz > clock_timestamp()`\n\t\t: sql<boolean>`${sql.ref(column)} > strftime('%Y-%m-%dT%H:%M:%fZ', 'now')`;\n}\n\nfunction timestampOffset(db: Kysely<Database>, seconds: number): RawBuilder<string> {\n\tif (isPostgres(db)) {\n\t\treturn sql<string>`to_char(\n\t\t\tclock_timestamp() AT TIME ZONE 'UTC' + (${seconds} * interval '1 second'),\n\t\t\t'YYYY-MM-DD\"T\"HH24:MI:SS.MS\"Z\"'\n\t\t)`;\n\t}\n\treturn sql<string>`strftime('%Y-%m-%dT%H:%M:%fZ', 'now', ${`+${seconds} seconds`})`;\n}\n"],"mappings":";;;;;;AAUA,MAAM,iBAAiB;AACvB,MAAM,wBAAwB;AAC9B,MAAa,4CAA4C;AAEzD,IAAa,2CAAb,cAA8D,MAAM;AAcpE,MAAa,gCAAgC,OAAO,OAAO;CAC1D,oBAAoB;CACpB,sBAAsB;CACtB,CAAC;AAyBF,eAAsB,8BACrB,IACsC;CACtC,MAAM,aAAa,MAAM,GACvB,WAAW,iCAAiC,CAC5C,OAAO;EACP;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA,CAAC,CACD,MAAM,YAAY,KAAK,eAAe,CACtC,yBAAyB;AAC3B,yBAAwB,WAAW;AACnC,KACC,WAAW,UAAU,cACrB,WAAW,UAAU,gBACrB,WAAW,UAAU,SAErB,OAAM,IAAI,MAAM,uCAAuC;AAExD,KAAI,CAAC,OAAO,UAAU,WAAW,cAAc,IAAI,WAAW,gBAAgB,EAC7E,OAAM,IAAI,MAAM,+CAA+C;AAGhE,QAAO;EACN,OAAO,WAAW;EAClB,kBAAkB,WAAW;EAC7B,cAAc,WAAW;EACzB,kBAAkB,WAAW;EAC7B,iBAAiB,WAAW;EAC5B,eAAe,WAAW,oBAAoB,OAAO,OAAO;EAC5D,gBAAgB,WAAW;EAC3B,aAAa,WAAW;EACxB,WAAW,WAAW;EACtB;;AAGF,eAAsB,qCACrB,IACA,UACmB;CACnB,MAAM,aAAa,MAAM,0BAA0B,GAAG;AACtD,KAAI,CAAC,WAAY,QAAO;AACxB,yBAAwB,WAAW;AACnC,KAAI,WAAW,UAAU,SAAU,QAAO;CAE1C,MAAM,YAAY,MAAM,GACtB,WAAW,mCAAmC,CAC9C,OAAO,CAAC,iBAAiB,SAAS,CAAC,CACnC,MAAM,cAAc,KAAK,gBAAgB,CACzC,MAAM,cAAc,KAAK,aAAa,CACtC,MAAM,aAAa,KAAK,SAAS,eAAe,CAChD,MAAM,iBAAiB,KAAK,SAAS,aAAa,CAClD,MAAM,iBAAiB,MAAM,CAAC,cAAc,QAAQ,CAAC,CACrD,kBAAkB;AACpB,QACC,WAAW,kBAAkB,SAAS,iBACrC,SAAS,sBACP,UAAU,WAAW,SAAS,sBAC9B,UAAU,WAAW;;AAI1B,eAAsB,mCACrB,IACA,OAMkD;CAClD,MAAM,aAAa,MAAM,0BAA0B,GAAG;AACtD,KAAI,CAAC,WACJ,QAAO;EACN,iBAAiB;EACjB,cAAc,MAAM;EACpB,oBAAoB,MAAM,2BAA2B;EACrD,UAAU;EACV;AAEF,yBAAwB,WAAW;AACnC,KAAI,WAAW,UAAU,SACxB,QAAO;EACN,iBAAiB;EACjB,cAAc,MAAM;EACpB,oBAAoB,MAAM,2BAA2B;EACrD,UAAU;EACV;CAGF,MAAM,WAAW,MAAM,GACrB,WAAW,mCAAmC,CAC9C,OAAO;EAAC;EAAiB;EAAiB;EAAS,CAAC,CACpD,MAAM,cAAc,KAAK,gBAAgB,CACzC,MAAM,cAAc,KAAK,aAAa,CACtC,MAAM,aAAa,KAAK,MAAM,eAAe,CAC7C,kBAAkB;AACpB,KAAI,UAAU;AACb,MACC,SAAS,kBACR,SAAS,kBAAkB,gBAAgB,SAAS,kBAAkB,aACtE,MAAM,sBACJ,SAAS,WAAW,MAAM,sBAC1B,SAAS,WAAW,UACtB,MAAM,2BAA2B,UACjC,MAAM,2BAA2B,SAAS,eAE3C,QAAO;GACN,iBAAiB;GACjB,cAAc,SAAS;GACvB,oBAAoB,MAAM,2BAA2B;GACrD,UAAU;GACV;AAEF,QAAM,IAAI,MAAM,qDAAqD;;AAEtE,KAAI,MAAM,2BAA2B,OACpC,OAAM,IAAI,MAAM,8CAA8C;AAG/D,OAAM,GACJ,WAAW,mCAAmC,CAC9C,OAAO;EACP,YAAY;EACZ,YAAY;EACZ,WAAW,MAAM;EACjB,QAAQ;EACR,eAAe,MAAM;EACrB,yBAAyB;EACzB,eAAe;EACf,QAAQ,MAAM,uBAAuB;EACrC,YAAY,gBAAgB,IAAI,EAAE;EAClC,CAAC,CACD,SAAS;AACX,QAAO;EACN,iBAAiB;EACjB,cAAc,MAAM;EACpB,oBAAoB;EACpB,UAAU;EACV;;AAGF,eAAsB,2CACrB,IACA,UACgB;AAChB,OAAM,iCAAiC,IAAI,UAAU,EAAE,iBAAiB,OAAO,CAAC;AAChF,KAAI,CAAE,MAAM,gCAAgC,IAAI,SAAS,CACxD,OAAM,IAAI,MAAM,kDAAkD;;AAIpE,eAAsB,qCACrB,IACA,UACgB;CAChB,MAAM,SAAS,MAAM,GACnB,YAAY,mCAAmC,CAC/C,IAAI;EAAE,eAAe;EAAS,YAAY,gBAAgB,IAAI,EAAE;EAAE,CAAC,CACnE,MAAM,cAAc,KAAK,gBAAgB,CACzC,MAAM,cAAc,KAAK,aAAa,CACtC,MAAM,aAAa,KAAK,SAAS,eAAe,CAChD,MAAM,iBAAiB,KAAK,SAAS,aAAa,CAClD,MAAM,iBAAiB,MAAM,CAAC,cAAc,QAAQ,CAAC,CACrD,MACA,GAAY;;kCAEmB,eAAe;;2CAEN,0CAA0C;MAElF,CACA,kBAAkB;AACpB,KAAI,OAAO,OAAO,kBAAkB,EAAE,KAAK,EAC1C,OAAM,IAAI,MAAM,kDAAkD;;AAIpE,eAAsB,oCACrB,IACA,UACgB;CAChB,MAAM,SAAS,MAAM,GACnB,YAAY,mCAAmC,CAC/C,IAAI;EAAE,eAAe;EAAU,QAAQ;EAAM,YAAY,gBAAgB,IAAI,EAAE;EAAE,CAAC,CAClF,MAAM,cAAc,KAAK,gBAAgB,CACzC,MAAM,cAAc,KAAK,aAAa,CACtC,MAAM,aAAa,KAAK,SAAS,eAAe,CAChD,MAAM,iBAAiB,KAAK,SAAS,aAAa,CAClD,MAAM,iBAAiB,KAAK,QAAQ,CACpC,MACA,GAAY;;4BAEa,SAAS,aAAa;6BACrB,SAAS,eAAe;MAElD,CACA,MACA,GAAY;;kCAEmB,eAAe;;2CAEN,0CAA0C;MAElF,CACA,kBAAkB;AACpB,KAAI,OAAO,OAAO,kBAAkB,EAAE,KAAK,EAC1C,OAAM,IAAI,MAAM,mDAAmD;;AAIrE,eAAsB,0BACrB,IACA,OACsC;AACtC,KAAI,MAAM,mBAAmB,KAC5B,OAAM,IAAI,MAAM,wEAAwE;AAEzF,QAAO,4BAA4B,IAAI,YAAY;;AAGpD,eAAsB,6BACrB,IACkD;AAClD,QAAO,4BAA4B,IAAI,aAAa;;AAWrD,eAAe,4BACd,IACA,MACkD;CAClD,MAAM,SAAS,MAAM,eAAe,GAAG;AACvC,yBAAwB,OAAO;AAC/B,KAAI,OAAO,UAAU,SACpB,QAAO;EAAE,SAAS;EAAU,sBAAsB;EAAG;AAEtD,KAAI,SAAS,cAAc;AAC1B,MAAI,OAAO,UAAU,cAAc,OAAO,uBAAuB,KAChE,QAAO,EAAE,SAAS,YAAY;AAE/B,MAAI,OAAO,UAAU,aACpB,OAAM,IAAI,MAAM,uCAAuC;AAExD,MAAI,OAAO,oBAAoB,KAAM,QAAO,EAAE,SAAS,UAAU;;CAGlE,MAAM,aAAa,MAAM;CACzB,MAAM,QAAQ,MAAM,gBAAgB,IAAI,YAAY,KAAK;AACzD,KAAI,CAAC,MAAO,QAAO,oBAAoB,IAAI,KAAK;CAEhD,IAAI,uBAAuB;AAC3B,KAAI;EACH,MAAM,aAAa,MAAM,yBAAyB,IAAI,MAAM,kBAAkB;AAC9E,OAAK,MAAM,cAAc,WAAW,MACnC,GACA,8BAA8B,mBAC9B,EAAE;AACF,SAAM,uBAAuB,IAAI,WAAW;AAC5C,SAAM,+BAA+B,IAAI,YAAY,WAAW;AAChE,SAAM,uBAAuB,IAAI,WAAW;AAC5C,SAAM,iCACL,IACA;IACC,cAAc,WAAW;IACzB,gBAAgB,WAAW;IAC3B,EACD,EAAE,iBAAiB,OAAO,CAC1B;AACD,SAAM,uBAAuB,IAAI,WAAW;AAC5C,OACC,CAAE,MAAM,gCAAgC,IAAI;IAC3C,cAAc,WAAW;IACzB,gBAAgB,WAAW;IAC3B,CAAC,CAEF,OAAM,IAAI,MAAM,kDAAkD;AAEnE,OAAI,CAAE,MAAM,4BAA4B,IAAI,YAAY,WAAW,CAClE,OAAM,IAAI,MAAM,mDAAmD;AAEpE;;EAGD,MAAM,mBACL,WAAW,KAAK,IAAI,sBAAsB,WAAW,OAAO,GAAG,IAAI,QACnE,MAAM;AACP,MAAI,WAAW,SAAS,8BAA8B,oBAAoB;AACzE,OAAI,CAAE,MAAM,uBAAuB,IAAI,YAAY,iBAAiB,CACnE,OAAM,IAAI,MAAM,+CAA+C;AAEhE,UAAO;IAAE,SAAS;IAAc;IAAsB;IAAkB;;AAIzE,MADmB,MAAM,yBAAyB,GAAG,EACrC;AACf,OAAI,CAAE,MAAM,uBAAuB,IAAI,YAAY,KAAK,CACvD,OAAM,IAAI,MAAM,gDAAgD;AAEjE,UAAO;IAAE,SAAS;IAAc;IAAsB,kBAAkB;IAAM;;AAG/E,MAAI,CAAE,MAAM,mBAAmB,IAAI,YAAY,iBAAiB,CAC/D,OAAM,IAAI,MAAM,qDAAqD;AAEtE,SAAO;GAAE,SAAS;GAAU;GAAsB;UAC1C,OAAO;AACf,MAAI,CAAE,MAAM,sBAAsB,IAAI,WAAW,CAChD,QAAO;GAAE,SAAS;GAAY;GAAsB;AAErD,QAAM,wBAAwB,IAAI,WAAW;AAC7C,QAAM,IAAI,MAAM,iCAAiC,EAAE,OAAO,OAAO,CAAC;;;AAIpE,eAAe,eACd,IACiD;AACjD,QAAO,GACL,WAAW,iCAAiC,CAC5C,WAAW,CACX,MAAM,YAAY,KAAK,eAAe,CACtC,yBAAyB;;AAG5B,eAAe,0BACd,IACwD;AACxD,KAAI,CAAE,MAAM,YAAY,IAAI,iCAAiC,CAAG,QAAO;AACvE,QAAO,eAAe,GAAG;;AAG1B,SAAS,wBAAwB,YAAkD;AAClF,KAAI,WAAW,uBAAuB,0CACrC,OAAM,IAAI,yCACT,qDACA;;AAIH,eAAe,gBACd,IACA,YACA,MACwD;CACxD,MAAM,MAAM,gBAAgB,IAAI,EAAE;CAClC,MAAM,cAAc;EACnB,aAAa;EACb,kBAAkB,gBAAgB,IAAI,8BAA8B,qBAAqB;EACzF,eAAe,GAAW;EAC1B,mBAAmB;EACnB,YAAY;EACZ;CACD,IAAI,QAAQ,GACV,YAAY,iCAAiC,CAC7C,IACA,SAAS,cACN;EACA,GAAG;EACH,OAAO;EACP,oBAAoB;EACpB,iBAAiB;EACjB,GACA,YACH,CACA,MAAM,YAAY,KAAK,eAAe,CACtC,MAAM,sBAAsB,KAAK,0CAA0C;AAC7E,KAAI,SAAS,YACZ,SAAQ,MAAM,OAAO,OACpB,GAAG,GAAG,CACL,GAAG,SAAS,KAAK,WAAW,EAC5B,GAAG,IAAI,CACN,GAAG,SAAS,KAAK,aAAa,EAC9B,GAAG,GAAG,CACL,GAAG,eAAe,MAAM,KAAK,EAC7B,GAAG,IAAI,CACN,GAAG,oBAAoB,UAAU,KAAK,EACtC,eAAe,IAAI,mBAAmB,CACtC,CAAC,CACF,CAAC,CACF,CAAC,CACF,CAAC,CACF;KAED,SAAQ,MACN,MAAM,SAAS,KAAK,aAAa,CACjC,MAAM,sBAAsB,UAAU,KAAK,CAC3C,MAAM,mBAAmB,MAAM,KAAK,CACpC,OAAO,OACP,GAAG,GAAG,CACL,GAAG,eAAe,MAAM,KAAK,EAC7B,GAAG,IAAI,CAAC,GAAG,oBAAoB,UAAU,KAAK,EAAE,eAAe,IAAI,mBAAmB,CAAC,CAAC,CACxF,CAAC,CACF;AAEH,QAAQ,MAAM,MAAM,cAAc,CAAC,kBAAkB,IAAK;;AAG3D,eAAe,oBACd,IACA,MACkD;CAClD,MAAM,UAAU,MAAM,eAAe,GAAG;AACxC,yBAAwB,QAAQ;AAChC,KAAI,QAAQ,UAAU,SAAU,QAAO;EAAE,SAAS;EAAU,sBAAsB;EAAG;AACrF,KAAI,SAAS,cAAc;AAC1B,MAAI,QAAQ,UAAU,cAAc,QAAQ,uBAAuB,KAClE,QAAO,EAAE,SAAS,YAAY;AAE/B,MAAI,QAAQ,UAAU,gBAAgB,QAAQ,oBAAoB,KACjE,QAAO,EAAE,SAAS,UAAU;;AAG9B,KACC,QAAQ,UAAU,gBAClB,QAAQ,eACR,QAAQ,oBACP,MAAM,sBAAsB,IAAI,QAAQ,YAAY,CAErD,QAAO;EAAE,SAAS;EAAgB,gBAAgB,QAAQ;EAAkB;AAE7E,KAAI,SAAS,gBAAgB,QAAQ,UAAU,aAC9C,QAAO;EAAE,SAAS;EAAY,sBAAsB;EAAG;AAExD,OAAM,IAAI,MAAM,gDAAgD;;AAGjE,eAAe,sBAAsB,IAAsB,YAAsC;AAWhG,QAVY,MAAM,GAChB,WAAW,iCAAiC,CAC5C,OAAO,WAAW,CAClB,MAAM,YAAY,KAAK,eAAe,CACtC,MAAM,SAAS,KAAK,aAAa,CACjC,MAAM,sBAAsB,KAAK,0CAA0C,CAC3E,MAAM,eAAe,KAAK,WAAW,CACrC,MAAM,oBAAoB,UAAU,KAAK,CACzC,MAAM,gBAAgB,IAAI,mBAAmB,CAAC,CAC9C,kBAAkB,KACL;;AAGhB,eAAe,yBACd,IACA,kBAC+C;CAC/C,IAAI,QAAQ,GAAG,WAAW,sBAAsB,CAAC,OAAO,CAAC,MAAM,OAAO,CAAC;AACvE,KAAI,iBAAkB,SAAQ,MAAM,MAAM,QAAQ,KAAK,iBAAiB;AACxE,QAAO,MACL,QAAQ,QAAQ,MAAM,CACtB,MAAM,8BAA8B,qBAAqB,EAAE,CAC3D,SAAS;;AAGZ,eAAe,+BACd,IACA,YACA,YACgB;CAChB,MAAM,MAAM,gBAAgB,IAAI,EAAE;CAClC,MAAM,iBAAiB,IAAI,IAAI,0CAA0C;CACzE,MAAM,sBAAsB,IAAI,IAAI,gDAAgD;CACpF,MAAM,uBAAuB,IAAI,IAAI,iDAAiD;CACtF,MAAM,uBAAuB,IAAI,IAAI,iDAAiD;AA2CtF,MA1CY,MAAM,GAChB,WAAW,mCAAmC,CAC9C,OAAO;EACP,YAAY;EACZ,YAAY;EACZ,WAAW,WAAW;EACtB,QAAQ;EACR,eAAe,WAAW;EAC1B,yBAAyB;EACzB,eAAe;EACf,YAAY;EACZ,CAAC,CACD,YAAY,aACZ,SACE,QAAQ;EAAC;EAAc;EAAc;EAAY,CAAC,CAClD,YAAY;EACZ,QAAQ,GAAW,aAAa,eAAe,gDAAgD,eAAe;EAC9G,cAAc,GAEb,aAAa,eAAe,6CAA6C,oBAAoB;EAC9F,QAAQ;EACR,eAAe,WAAW;EAC1B,yBAAyB;EACzB,eAAe;EACf,YAAY;EACZ,CAAC,CACD,OAAO,OACP,GAAG,IAAI;EACN,GAAG,GAAG,CACL,GAAG,sBAAsB,MAAM,KAAK,EACpC,GAAG,sBAAsB,KAAK,WAAW,GAAG,CAC5C,CAAC;EACF,GAAG,GAAG,CACL,GAAG,sBAAsB,MAAM,KAAK,EACpC,GAAG,sBAAsB,MAAM,WAAW,CAC1C,CAAC;EACF,sBAAsB,IAAI,WAAW;EACrC,CAAC,CACF,CACF,CACA,UAAU,gBAAgB,CAC1B,kBAAkB,GACX,kBAAkB,WAAW,GACrC,OAAM,IAAI,MAAM,qDAAqD;;AAIvE,eAAe,uBAAuB,IAAsB,YAAmC;AAC9F,KAAI,CAAE,MAAM,sBAAsB,IAAI,WAAW,CAChD,OAAM,IAAI,MAAM,iDAAiD;;AAInE,eAAe,4BACd,IACA,YACA,YACmB;CACnB,MAAM,SAAS,MAAM,GACnB,YAAY,mCAAmC,CAC/C,IAAI;EAAE,eAAe;EAAU,YAAY,gBAAgB,IAAI,EAAE;EAAE,CAAC,CACpE,MAAM,cAAc,KAAK,gBAAgB,CACzC,MAAM,cAAc,KAAK,aAAa,CACtC,MAAM,aAAa,KAAK,WAAW,KAAK,CACxC,MAAM,iBAAiB,KAAK,WAAW,GAAG,CAC1C,MAAM,iBAAiB,KAAK,aAAa,CACzC,MACA,GAAY;;4BAEa,WAAW,GAAG;6BACb,WAAW,KAAK;MAE1C,CACA,MAAM,sBAAsB,IAAI,WAAW,CAAC,CAC5C,kBAAkB;AACpB,QAAO,OAAO,OAAO,kBAAkB,EAAE,GAAG;;AAG7C,eAAe,uBACd,IACA,YACA,kBACmB;CACnB,MAAM,SAAS,MAAM,GACnB,YAAY,iCAAiC,CAC7C,IAAI;EACJ,mBAAmB;EACnB,aAAa;EACb,kBAAkB;EAClB,YAAY,gBAAgB,IAAI,EAAE;EAClC,CAAC,CACD,MAAM,YAAY,KAAK,eAAe,CACtC,MAAM,SAAS,KAAK,aAAa,CACjC,MAAM,sBAAsB,KAAK,0CAA0C,CAC3E,MAAM,eAAe,KAAK,WAAW,CACrC,MAAM,oBAAoB,UAAU,KAAK,CACzC,MAAM,gBAAgB,IAAI,mBAAmB,CAAC,CAC9C,kBAAkB;AACpB,QAAO,OAAO,OAAO,kBAAkB,EAAE,GAAG;;AAG7C,eAAe,yBACd,IAC+C;AAqB/C,QApBY,MAAM,GAChB,WAAW,oCAAoC,CAC/C,OAAO,CAAC,iBAAiB,kBAAkB,CAAC,CAC5C,OAAO,OACP,GAAG,IACF,GAAG,OACF,GACE,WAAW,6CAA6C,CACxD,OAAO,mBAAmB,CAC1B,MAAM,qBAAqB,KAAK,gBAAgB,CAChD,MAAM,qBAAqB,KAAK,aAAa,CAC7C,SAAS,oBAAoB,KAAK,kBAAkB,CACpD,SAAS,wBAAwB,KAAK,gBAAgB,CACtD,MAAM,wBAAwB,KAAK,SAAS,CAC9C,CACD,CACD,CACA,QAAQ,mBAAmB,MAAM,CACjC,MAAM,EAAE,CACR,kBAAkB,IACN;;AAGf,eAAe,mBACd,IACA,YACA,kBACmB;CACnB,MAAM,MAAM,gBAAgB,IAAI,EAAE;CAClC,MAAM,SAAS,MAAM,GACnB,YAAY,iCAAiC,CAC7C,IAAI;EACJ,OAAO;EACP,mBAAmB;EACnB,aAAa;EACb,kBAAkB;EAClB,iBAAiB;EACjB,cAAc;EACd,YAAY;EACZ,CAAC,CACD,MAAM,YAAY,KAAK,eAAe,CACtC,MAAM,SAAS,KAAK,aAAa,CACjC,MAAM,sBAAsB,KAAK,0CAA0C,CAC3E,MAAM,eAAe,KAAK,WAAW,CACrC,MAAM,oBAAoB,UAAU,KAAK,CACzC,MAAM,gBAAgB,IAAI,mBAAmB,CAAC,CAC9C,MACA,GAAY;;;;;;;;;;;;MAaZ,CACA,kBAAkB;AACpB,QAAO,OAAO,OAAO,kBAAkB,EAAE,GAAG;;AAG7C,eAAe,wBAAwB,IAAsB,YAAmC;AAC/F,OAAM,GACJ,YAAY,iCAAiC,CAC7C,IAAI;EACJ,aAAa;EACb,kBAAkB;EAClB,iBAAiB;EACjB,YAAY,gBAAgB,IAAI,EAAE;EAClC,CAAC,CACD,MAAM,YAAY,KAAK,eAAe,CACtC,MAAM,SAAS,KAAK,aAAa,CACjC,MAAM,sBAAsB,KAAK,0CAA0C,CAC3E,MAAM,eAAe,KAAK,WAAW,CACrC,SAAS;;AAGZ,SAAS,sBAAsB,IAAsB,YAAyC;AAC7F,QAAO,GAAY;;;gCAGY,eAAe;;yCAEN,0CAA0C;kCACjD,WAAW;;SAEpC,gBAAgB,IAAI,8BAA8B,CAAC;;;AAI5D,SAAS,eAAe,IAAsB,QAAqC;AAClF,QAAO,WAAW,GAAG,GAClB,GAAY,GAAG,IAAI,IAAI,OAAO,CAAC,sCAC/B,GAAY,GAAG,IAAI,IAAI,OAAO,CAAC;;AAGnC,SAAS,gBAAgB,IAAsB,QAAqC;AACnF,QAAO,WAAW,GAAG,GAClB,GAAY,GAAG,IAAI,IAAI,OAAO,CAAC,qCAC/B,GAAY,GAAG,IAAI,IAAI,OAAO,CAAC;;AAGnC,SAAS,gBAAgB,IAAsB,SAAqC;AACnF,KAAI,WAAW,GAAG,CACjB,QAAO,GAAW;6CACyB,QAAQ;;;AAIpD,QAAO,GAAW,yCAAyC,IAAI,QAAQ,UAAU"}

package/dist/adapters-C_Tf5x90.d.mts

@@ -1,171 +0,0 @@
-//#region src/db/adapters.d.ts
-/**
- * Database Adapter Functions
- *
- * These run at config time (astro.config.mjs) and return serializable descriptors.
- * The actual dialect is created at runtime by loading the entrypoint.
- *
- * @example
- * ```ts
- * // astro.config.mjs
- * import emdash from "emdash/astro";
- * import { sqlite } from "emdash/db";
- *
- * export default defineConfig({
- *   integrations: [
- *     emdash({
- *       database: sqlite({ url: "file:./data.db" }),
- *     }),
- *   ],
- * });
- * ```
- */
-/**
- * Dialect family identifier.
- * Used at runtime to select dialect-specific SQL fragments.
- */
-type DatabaseDialectType = "sqlite" | "postgres";
-type CollectionDeletionGuardInput = {
-  action: "fence";
-  collectionId: string;
-  collectionSlug: string;
-  leaseToken: string;
-  forceDelete: boolean;
-} | {
-  action: "drop";
-  collectionId: string;
-  collectionSlug: string;
-  leaseToken: string;
-};
-type CollectionDeletionGuardResult = {
-  outcome: "fenced";
-} | {
-  outcome: "has_content";
-} | {
-  outcome: "stale";
-} | {
-  outcome: "dropped";
-};
-type ExecuteCollectionDeletionGuard = (config: unknown, input: CollectionDeletionGuardInput) => Promise<CollectionDeletionGuardResult>;
-/**
- * Database descriptor - serializable config for virtual modules
- */
-interface DatabaseDescriptor {
-  entrypoint: string;
-  config: unknown;
-  type: DatabaseDialectType;
-  /** Deployment migration capability with configuration safe for a build artifact. */
-  migrations?: {
-    entrypoint: string;
-    manifestConfig: unknown;
-  };
-  /**
-   * When true, the adapter's runtime entrypoint MUST export a named
-   * `createRequestScopedDb` function matching the signature declared in
-   * `virtual:emdash/dialect`. The virtual-module generator re-exports it
-   * by name, so a missing export becomes a build-time bundler error.
-   *
-   * The function is called once per request and decides — based on its own
-   * runtime config (e.g. whether the user opted into D1 sessions) — whether
-   * to return a per-request Kysely or null. Use this for features like D1
-   * read-replica sessions, bookmark cookies, or any per-request DB handle.
-   *
-   * When false or absent, the generator emits a stub that returns null and
-   * the middleware takes its default (singleton) path.
-   */
-  supportsRequestScope?: boolean;
-  /**
-   * When true, request middleware resolves the last content-namespace
-   * invalidation timestamp and passes it to `createRequestScopedDb`.
-   *
-   * Keep this unset unless request routing depends on that timestamp: reading
-   * it may require an object-cache backend round trip.
-   */
-  needsLastContentWriteAt?: boolean;
-  /**
-   * When true, the adapter's runtime entrypoint MUST export a named
-   * `createCoalescingDialect` function. The runtime uses this fresh dialect
-   * only for its cold-start read batch.
-   *
-   * When false or absent, the virtual module exports `undefined` without
-   * inspecting an optional entrypoint export.
-   */
-  supportsCoalescing?: boolean;
-  /** The runtime entrypoint exports the deletion-specific atomic guard. */
-  supportsCollectionDeletionGuard?: boolean;
-}
-interface SqliteConfig {
-  /**
-   * Database URL (e.g., "file:./data.db")
-   */
-  url: string;
-}
-interface LibsqlConfig {
-  /**
-   * Database URL (e.g., "file:./data.db" or "libsql://...")
-   */
-  url: string;
-  /**
-   * Auth token for remote libSQL
-   */
-  authToken?: string;
-  migrationAuthTokenEnv?: string;
-}
-/**
- * SQLite database adapter (node:sqlite)
- *
- * For local development and Node.js deployments. Requires Node.js 22.16 or later.
- *
- * @example
- * ```ts
- * database: sqlite({ url: "file:./data.db" })
- * ```
- */
-declare function sqlite(config: SqliteConfig): DatabaseDescriptor;
-/**
- * libSQL database adapter (Turso)
- *
- * For Turso hosted databases or local libSQL.
- *
- * @example
- * ```ts
- * database: libsql({
- *   url: "libsql://my-db.turso.io",
- *   authToken: process.env.TURSO_AUTH_TOKEN,
- * })
- * ```
- */
-declare function libsql(config: LibsqlConfig): DatabaseDescriptor;
-/**
- * PostgreSQL connection configuration
- */
-interface PostgresConfig {
-  connectionString?: string;
-  host?: string;
-  port?: number;
-  database?: string;
-  user?: string;
-  password?: string;
-  ssl?: boolean;
-  pool?: {
-    min?: number;
-    max?: number; /** Maximum time to wait for a connection, in milliseconds. Uses the pg default when omitted. */
-    connectionTimeoutMillis?: number; /** Time before an idle client is closed, in milliseconds. Uses the pg default when omitted. */
-    idleTimeoutMillis?: number;
-  };
-  migrationConnectionStringEnv?: string;
-}
-/**
- * PostgreSQL database adapter
- *
- * For PostgreSQL deployments with connection pooling.
- *
- * @example
- * ```ts
- * database: postgres({ connectionString: process.env.DATABASE_URL })
- * ```
- */
-declare function postgres(config: PostgresConfig): DatabaseDescriptor;
-//#endregion
-export { ExecuteCollectionDeletionGuard as a, SqliteConfig as c, sqlite as d, DatabaseDialectType as i, libsql as l, CollectionDeletionGuardResult as n, LibsqlConfig as o, DatabaseDescriptor as r, PostgresConfig as s, CollectionDeletionGuardInput as t, postgres as u };
-//# sourceMappingURL=adapters-C_Tf5x90.d.mts.map

package/dist/adapters-C_Tf5x90.d.mts.map

@@ -1 +0,0 @@
-{"version":3,"file":"adapters-C_Tf5x90.d.mts","names":[],"sources":["../src/db/adapters.ts"],"mappings":";;AA0BA;;;;;AAEA;;;;;;;;;;;;;;;AAeA;;;;AAAA,KAjBY,mBAAA;AAAA,KAEA,4BAAA;EAET,MAAA;EACA,YAAA;EACA,cAAA;EACA,UAAA;EACA,WAAA;AAAA;EAGA,MAAA;EACA,YAAA;EACA,cAAA;EACA,UAAA;AAAA;AAAA,KAGS,6BAAA;EACP,OAAA;AAAA;EACA,OAAA;AAAA;EACA,OAAA;AAAA;EACA,OAAA;AAAA;AAAA,KAEO,8BAAA,IACX,MAAA,WACA,KAAA,EAAO,4BAAA,KACH,OAAA,CAAQ,6BAAA;;;;UAmBI,kBAAA;EAChB,UAAA;EACA,MAAA;EACA,IAAA,EAAM,mBAAA;EAGL;EADD,UAAA;IACC,UAAA;IACA,cAAA;EAAA;EAmCD;;;AAGD;;;;;AAOA;;;;;;EA7BC,oBAAA;EAsCqB;;AAatB;;;;;EA3CC,uBAAA;EA2C6C;;;AAyB9C;;;;;EA3DC,kBAAA;EA2D6C;EAzD7C,+BAAA;AAAA;AAAA,UAGgB,YAAA;EA6Ec;;;EAzE9B,GAAA;AAAA;AAAA,UAGgB,YAAA;EA0EhB;;;EAtEA,GAAA;EA0EA;;;EAtEA,SAAA;EACA,qBAAA;AAAA;;;AA0FD;;;;;;;;iBA7EgB,MAAA,CAAO,MAAA,EAAQ,YAAA,GAAe,kBAAA;;;;;;;;;;;;;;iBAyB9B,MAAA,CAAO,MAAA,EAAQ,YAAA,GAAe,kBAAA;;;;UAuB7B,cAAA;EAChB,gBAAA;EACA,IAAA;EACA,IAAA;EACA,QAAA;EACA,IAAA;EACA,QAAA;EACA,GAAA;EACA,IAAA;IACC,GAAA;IACA,GAAA;IAEA,uBAAA;IAEA,iBAAA;EAAA;EAED,4BAAA;AAAA;;;;;;;;;;;iBAae,QAAA,CAAS,MAAA,EAAQ,cAAA,GAAiB,kBAAA"}

package/dist/allowed-origins-U1z4TdEZ.mjs

@@ -1,116 +0,0 @@
-import { n as getEnvAllowedOrigins } from "./public-url-CIRe-2T6.mjs";
-
-//#region src/auth/allowed-origins.ts
-/**
-* Resolution and validation of multi-origin passkey verification.
-*
-* `allowedOrigins` lets one EmDash deployment accept passkey assertions from
-* several hostnames sharing the same `rpId` (e.g. apex + preview/staging
-* subdomains under one registrable parent). Origins come from two sources:
-*
-*   - `EmDashConfig.allowedOrigins` (declared in `astro.config.mjs`)
-*   - `EMDASH_ALLOWED_ORIGINS` (comma-separated runtime env var)
-*
-* Sources are merged (union of permissions, deduplicated). Each entry is
-* validated against `siteUrl` to fail loud on dead config the browser would
-* never honor.
-*/
-/**
-* Collect raw allowedOrigins from config and env, source-tagged.
-*
-* Returns raw values — the caller is expected to pass the result through
-* `validateAllowedOrigins()` before use in passkey verification.
-*/
-function getConfiguredAllowedOrigins(config) {
-	const tagged = [];
-	if (config?.allowedOrigins) {
-		for (const origin of config.allowedOrigins) if (origin) tagged.push({
-			origin,
-			source: "config.allowedOrigins"
-		});
-	}
-	for (const origin of getEnvAllowedOrigins()) tagged.push({
-		origin,
-		source: "EMDASH_ALLOWED_ORIGINS"
-	});
-	return tagged;
-}
-/**
-* Validate per-entry shape rules (no `siteUrl` needed):
-*   - parses as `URL`
-*   - protocol is `http:` or `https:`
-*   - hostname has no trailing dot (`example.com.` rejected)
-*   - hostname has no empty labels (`foo..example.com` rejected)
-*
-* Returns the deduplicated, normalized origin form (`URL.origin`) of every
-* input, in input order. Throws on the first violation with a source-tagged
-* error message.
-*/
-function validateOriginShape(tagged) {
-	const normalized = [];
-	const seen = /* @__PURE__ */ new Set();
-	for (const { origin, source } of tagged) {
-		let parsed;
-		try {
-			parsed = new URL(origin);
-		} catch (e) {
-			throw configError(source, `invalid URL: "${origin}"`, e);
-		}
-		if (parsed.protocol !== "http:" && parsed.protocol !== "https:") throw configError(source, `origin must be http or https: "${origin}" (got ${parsed.protocol})`);
-		if (parsed.hostname.endsWith(".")) throw configError(source, `hostname has a trailing dot: "${origin}". Remove the trailing dot — assertion origins from the browser do not include it.`);
-		if (parsed.hostname.split(".").includes("")) throw configError(source, `hostname has empty labels: "${origin}"`);
-		if (!seen.has(parsed.origin)) {
-			seen.add(parsed.origin);
-			normalized.push(parsed.origin);
-		}
-	}
-	return normalized;
-}
-/**
-* Validate the effective merged allowedOrigins set against `siteUrl`.
-*
-* Performs `validateOriginShape()` plus the siteUrl-dependent rules:
-*   - Rule A: non-empty origins ⇒ `siteUrl` is set
-*   - `siteUrl` hostname is not an IP literal (multi-origin requires a domain)
-*   - `siteUrl` hostname has no trailing dot (cannot match assertion origins)
-*   - Rule B: each origin's hostname is `siteHost` exactly or a subdomain
-*
-* Throws on first violation. Returns the deduplicated normalized origins.
-*
-* Use this at the runtime chokepoint (where config + env are merged into the
-* effective set). At Astro integration init, prefer `validateOriginShape()`
-* for shape-only checks on `config.allowedOrigins`, since `siteUrl` may be
-* supplied at runtime via `EMDASH_SITE_URL`.
-*/
-function validateAllowedOrigins(siteUrl, tagged) {
-	const normalized = validateOriginShape(tagged);
-	if (normalized.length === 0) return normalized;
-	if (!siteUrl) throw new Error(`EmDash config error: allowedOrigins is set (${normalized.length} ${normalized.length === 1 ? "entry" : "entries"}) but siteUrl is not. Without a canonical siteUrl, rpId is derived from the request hostname, defeating multi-origin passkeys. Set siteUrl in astro.config.mjs or via EMDASH_SITE_URL.`);
-	let siteHost;
-	try {
-		siteHost = new URL(siteUrl).hostname;
-	} catch (e) {
-		throw new Error(`EmDash config error: siteUrl is not a valid URL: "${siteUrl}"`, { cause: e });
-	}
-	if (siteHost.endsWith(".")) throw new Error(`EmDash config error: siteUrl "${siteUrl}" has a trailing-dot hostname, which cannot match assertion origins. Remove the trailing dot when using allowedOrigins.`);
-	if (isIPLiteralHostname(siteHost)) throw new Error(`EmDash config error: siteUrl "${siteUrl}" uses an IP-literal hostname. Multi-origin passkeys require a domain-based siteUrl — IP addresses cannot have valid subdomains for WebAuthn rpId.`);
-	for (const { origin, source } of tagged) {
-		const h = new URL(origin).hostname;
-		if (h !== siteHost && !h.endsWith("." + siteHost)) throw configError(source, `"${origin}" is not a subdomain of siteUrl "${siteUrl}". Allowed origins must be the same hostname as siteUrl or a subdomain of it.`);
-	}
-	return normalized;
-}
-function configError(source, detail, cause) {
-	const err = /* @__PURE__ */ new Error(`EmDash config error in ${source}: ${detail}`);
-	if (cause !== void 0) err.cause = cause;
-	return err;
-}
-const IPV4_DOTTED_DECIMAL_RE = /^\d+(\.\d+){3}$/;
-function isIPLiteralHostname(h) {
-	if (h.startsWith("[")) return true;
-	return IPV4_DOTTED_DECIMAL_RE.test(h);
-}
-
-//#endregion
-export { validateAllowedOrigins as n, validateOriginShape as r, getConfiguredAllowedOrigins as t };
-//# sourceMappingURL=allowed-origins-U1z4TdEZ.mjs.map

package/dist/allowed-origins-U1z4TdEZ.mjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"allowed-origins-U1z4TdEZ.mjs","names":[],"sources":["../src/auth/allowed-origins.ts"],"sourcesContent":["/**\n * Resolution and validation of multi-origin passkey verification.\n *\n * `allowedOrigins` lets one EmDash deployment accept passkey assertions from\n * several hostnames sharing the same `rpId` (e.g. apex + preview/staging\n * subdomains under one registrable parent). Origins come from two sources:\n *\n *   - `EmDashConfig.allowedOrigins` (declared in `astro.config.mjs`)\n *   - `EMDASH_ALLOWED_ORIGINS` (comma-separated runtime env var)\n *\n * Sources are merged (union of permissions, deduplicated). Each entry is\n * validated against `siteUrl` to fail loud on dead config the browser would\n * never honor.\n */\n\nimport { getEnvAllowedOrigins } from \"../api/public-url.js\";\nimport type { EmDashConfig } from \"../astro/integration/runtime.js\";\n\nexport type AllowedOriginSource = \"config.allowedOrigins\" | \"EMDASH_ALLOWED_ORIGINS\";\n\nexport interface TaggedOrigin {\n\t/** Raw entry as declared by the operator. */\n\torigin: string;\n\t/** Where the entry came from (used for source-attributed errors). */\n\tsource: AllowedOriginSource;\n}\n\n/**\n * Collect raw allowedOrigins from config and env, source-tagged.\n *\n * Returns raw values — the caller is expected to pass the result through\n * `validateAllowedOrigins()` before use in passkey verification.\n */\nexport function getConfiguredAllowedOrigins(config?: EmDashConfig): TaggedOrigin[] {\n\tconst tagged: TaggedOrigin[] = [];\n\tif (config?.allowedOrigins) {\n\t\tfor (const origin of config.allowedOrigins) {\n\t\t\tif (origin) tagged.push({ origin, source: \"config.allowedOrigins\" });\n\t\t}\n\t}\n\tfor (const origin of getEnvAllowedOrigins()) {\n\t\ttagged.push({ origin, source: \"EMDASH_ALLOWED_ORIGINS\" });\n\t}\n\treturn tagged;\n}\n\n/**\n * Validate per-entry shape rules (no `siteUrl` needed):\n *   - parses as `URL`\n *   - protocol is `http:` or `https:`\n *   - hostname has no trailing dot (`example.com.` rejected)\n *   - hostname has no empty labels (`foo..example.com` rejected)\n *\n * Returns the deduplicated, normalized origin form (`URL.origin`) of every\n * input, in input order. Throws on the first violation with a source-tagged\n * error message.\n */\nexport function validateOriginShape(tagged: TaggedOrigin[]): string[] {\n\tconst normalized: string[] = [];\n\tconst seen = new Set<string>();\n\tfor (const { origin, source } of tagged) {\n\t\tlet parsed: URL;\n\t\ttry {\n\t\t\tparsed = new URL(origin);\n\t\t} catch (e) {\n\t\t\tthrow configError(source, `invalid URL: \"${origin}\"`, e);\n\t\t}\n\t\tif (parsed.protocol !== \"http:\" && parsed.protocol !== \"https:\") {\n\t\t\tthrow configError(\n\t\t\t\tsource,\n\t\t\t\t`origin must be http or https: \"${origin}\" (got ${parsed.protocol})`,\n\t\t\t);\n\t\t}\n\t\tif (parsed.hostname.endsWith(\".\")) {\n\t\t\tthrow configError(\n\t\t\t\tsource,\n\t\t\t\t`hostname has a trailing dot: \"${origin}\". Remove the trailing dot — assertion origins from the browser do not include it.`,\n\t\t\t);\n\t\t}\n\t\tif (parsed.hostname.split(\".\").includes(\"\")) {\n\t\t\tthrow configError(source, `hostname has empty labels: \"${origin}\"`);\n\t\t}\n\t\tif (!seen.has(parsed.origin)) {\n\t\t\tseen.add(parsed.origin);\n\t\t\tnormalized.push(parsed.origin);\n\t\t}\n\t}\n\treturn normalized;\n}\n\n/**\n * Validate the effective merged allowedOrigins set against `siteUrl`.\n *\n * Performs `validateOriginShape()` plus the siteUrl-dependent rules:\n *   - Rule A: non-empty origins ⇒ `siteUrl` is set\n *   - `siteUrl` hostname is not an IP literal (multi-origin requires a domain)\n *   - `siteUrl` hostname has no trailing dot (cannot match assertion origins)\n *   - Rule B: each origin's hostname is `siteHost` exactly or a subdomain\n *\n * Throws on first violation. Returns the deduplicated normalized origins.\n *\n * Use this at the runtime chokepoint (where config + env are merged into the\n * effective set). At Astro integration init, prefer `validateOriginShape()`\n * for shape-only checks on `config.allowedOrigins`, since `siteUrl` may be\n * supplied at runtime via `EMDASH_SITE_URL`.\n */\nexport function validateAllowedOrigins(\n\tsiteUrl: string | undefined,\n\ttagged: TaggedOrigin[],\n): string[] {\n\tconst normalized = validateOriginShape(tagged);\n\tif (normalized.length === 0) return normalized;\n\n\tif (!siteUrl) {\n\t\tthrow new Error(\n\t\t\t`EmDash config error: allowedOrigins is set (${normalized.length} ${\n\t\t\t\tnormalized.length === 1 ? \"entry\" : \"entries\"\n\t\t\t}) but siteUrl is not. Without a canonical siteUrl, rpId is derived from the request hostname, defeating multi-origin passkeys. Set siteUrl in astro.config.mjs or via EMDASH_SITE_URL.`,\n\t\t);\n\t}\n\n\tlet siteHost: string;\n\ttry {\n\t\tsiteHost = new URL(siteUrl).hostname;\n\t} catch (e) {\n\t\tthrow new Error(`EmDash config error: siteUrl is not a valid URL: \"${siteUrl}\"`, {\n\t\t\tcause: e,\n\t\t});\n\t}\n\n\tif (siteHost.endsWith(\".\")) {\n\t\tthrow new Error(\n\t\t\t`EmDash config error: siteUrl \"${siteUrl}\" has a trailing-dot hostname, which cannot match assertion origins. Remove the trailing dot when using allowedOrigins.`,\n\t\t);\n\t}\n\tif (isIPLiteralHostname(siteHost)) {\n\t\tthrow new Error(\n\t\t\t`EmDash config error: siteUrl \"${siteUrl}\" uses an IP-literal hostname. Multi-origin passkeys require a domain-based siteUrl — IP addresses cannot have valid subdomains for WebAuthn rpId.`,\n\t\t);\n\t}\n\n\tfor (const { origin, source } of tagged) {\n\t\tconst h = new URL(origin).hostname;\n\t\tif (h !== siteHost && !h.endsWith(\".\" + siteHost)) {\n\t\t\tthrow configError(\n\t\t\t\tsource,\n\t\t\t\t`\"${origin}\" is not a subdomain of siteUrl \"${siteUrl}\". Allowed origins must be the same hostname as siteUrl or a subdomain of it.`,\n\t\t\t);\n\t\t}\n\t}\n\n\treturn normalized;\n}\n\nfunction configError(source: AllowedOriginSource, detail: string, cause?: unknown): Error {\n\tconst err = new Error(`EmDash config error in ${source}: ${detail}`);\n\tif (cause !== undefined) (err as Error & { cause?: unknown }).cause = cause;\n\treturn err;\n}\n\nconst IPV4_DOTTED_DECIMAL_RE = /^\\d+(\\.\\d+){3}$/;\n\nfunction isIPLiteralHostname(h: string): boolean {\n\t// IPv6 hostnames are bracketed by URL.hostname, e.g. \"[::1]\"\n\tif (h.startsWith(\"[\")) return true;\n\t// IPv4 dotted-decimal\n\treturn IPV4_DOTTED_DECIMAL_RE.test(h);\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;AAiCA,SAAgB,4BAA4B,QAAuC;CAClF,MAAM,SAAyB,EAAE;AACjC,KAAI,QAAQ,gBACX;OAAK,MAAM,UAAU,OAAO,eAC3B,KAAI,OAAQ,QAAO,KAAK;GAAE;GAAQ,QAAQ;GAAyB,CAAC;;AAGtE,MAAK,MAAM,UAAU,sBAAsB,CAC1C,QAAO,KAAK;EAAE;EAAQ,QAAQ;EAA0B,CAAC;AAE1D,QAAO;;;;;;;;;;;;;AAcR,SAAgB,oBAAoB,QAAkC;CACrE,MAAM,aAAuB,EAAE;CAC/B,MAAM,uBAAO,IAAI,KAAa;AAC9B,MAAK,MAAM,EAAE,QAAQ,YAAY,QAAQ;EACxC,IAAI;AACJ,MAAI;AACH,YAAS,IAAI,IAAI,OAAO;WAChB,GAAG;AACX,SAAM,YAAY,QAAQ,iBAAiB,OAAO,IAAI,EAAE;;AAEzD,MAAI,OAAO,aAAa,WAAW,OAAO,aAAa,SACtD,OAAM,YACL,QACA,kCAAkC,OAAO,SAAS,OAAO,SAAS,GAClE;AAEF,MAAI,OAAO,SAAS,SAAS,IAAI,CAChC,OAAM,YACL,QACA,iCAAiC,OAAO,oFACxC;AAEF,MAAI,OAAO,SAAS,MAAM,IAAI,CAAC,SAAS,GAAG,CAC1C,OAAM,YAAY,QAAQ,+BAA+B,OAAO,GAAG;AAEpE,MAAI,CAAC,KAAK,IAAI,OAAO,OAAO,EAAE;AAC7B,QAAK,IAAI,OAAO,OAAO;AACvB,cAAW,KAAK,OAAO,OAAO;;;AAGhC,QAAO;;;;;;;;;;;;;;;;;;AAmBR,SAAgB,uBACf,SACA,QACW;CACX,MAAM,aAAa,oBAAoB,OAAO;AAC9C,KAAI,WAAW,WAAW,EAAG,QAAO;AAEpC,KAAI,CAAC,QACJ,OAAM,IAAI,MACT,+CAA+C,WAAW,OAAO,GAChE,WAAW,WAAW,IAAI,UAAU,UACpC,wLACD;CAGF,IAAI;AACJ,KAAI;AACH,aAAW,IAAI,IAAI,QAAQ,CAAC;UACpB,GAAG;AACX,QAAM,IAAI,MAAM,qDAAqD,QAAQ,IAAI,EAChF,OAAO,GACP,CAAC;;AAGH,KAAI,SAAS,SAAS,IAAI,CACzB,OAAM,IAAI,MACT,iCAAiC,QAAQ,yHACzC;AAEF,KAAI,oBAAoB,SAAS,CAChC,OAAM,IAAI,MACT,iCAAiC,QAAQ,oJACzC;AAGF,MAAK,MAAM,EAAE,QAAQ,YAAY,QAAQ;EACxC,MAAM,IAAI,IAAI,IAAI,OAAO,CAAC;AAC1B,MAAI,MAAM,YAAY,CAAC,EAAE,SAAS,MAAM,SAAS,CAChD,OAAM,YACL,QACA,IAAI,OAAO,mCAAmC,QAAQ,+EACtD;;AAIH,QAAO;;AAGR,SAAS,YAAY,QAA6B,QAAgB,OAAwB;CACzF,MAAM,sBAAM,IAAI,MAAM,0BAA0B,OAAO,IAAI,SAAS;AACpE,KAAI,UAAU,OAAW,CAAC,IAAoC,QAAQ;AACtE,QAAO;;AAGR,MAAM,yBAAyB;AAE/B,SAAS,oBAAoB,GAAoB;AAEhD,KAAI,EAAE,WAAW,IAAI,CAAE,QAAO;AAE9B,QAAO,uBAAuB,KAAK,EAAE"}