emdash 1.0.1 → 1.2.0

package/dist/astro/index.mjs

@@ -1,23 +1,24 @@
-import "../runner-CLpxmhl8.mjs";
+import "../runner-wqt4BrIW.mjs";
 import "../dialect-helpers-7_IqPdh9.mjs";
 import "../config-CvmjJcVw.mjs";
 import "../datetime-normalization-PeiEdcRY.mjs";
 import { t as INTERNAL_MEDIA_PREFIX } from "../normalize-BuWa0lvd.mjs";
-import { n as DEV_TYPEGEN_REFRESH_GLOBAL, t as DEV_TYPEGEN_REFRESH_EVENT } from "../dev-typegen-8JlYYFno.mjs";
-import { a as parseDurationSeconds, c as resolveRegistryConfigForSandbox, i as normalizeRegistryConfig } from "../config-CXPcy2iY.mjs";
-import { n as VERSION, t as COMMIT } from "../version-BbygH8CT.mjs";
-import { n as validateAllowedOrigins, r as validateOriginShape } from "../allowed-origins-D78QvbTO.mjs";
-import { r as normalizeMigrationConfig } from "../policy-DMRiMdLn.mjs";
-import { c as normalizeAstroI18n, n as MIGRATION_CONFIG_SYMBOL, o as serializeMigrationManifest, r as createMigrationIntegrationMetadata, s as validateMigrationManifest, t as buildMigrationManifest } from "../manifest-builder-8jsSLR7s.mjs";
-import { r as getCoreMigrationIdentity } from "../identity-DJ-5AcdG.mjs";
-import { A as VIRTUAL_SANDBOX_RUNNER_ID, B as generateConfigModule, C as VIRTUAL_CONFIG_ID, D as VIRTUAL_OBJECT_CACHE_ID, E as VIRTUAL_MEDIA_PROVIDERS_ID, F as generateAdminRegistryModule, G as generatePluginsModule, H as generateEnvModule, I as generateAuthModule, J as generateSchedulerModule, K as generateSandboxRunnerModule, L as generateAuthProvidersModule, M as VIRTUAL_SEED_ID, N as VIRTUAL_STORAGE_ID, O as VIRTUAL_PLUGINS_ID, P as VIRTUAL_WAIT_UNTIL_ID, R as generateBlockComponentsModule, S as VIRTUAL_BUILD_ID, T as VIRTUAL_ENV_ID, U as generateMediaProvidersModule, V as generateDialectModule, W as generateObjectCacheModule, X as generateStorageModule, Y as generateSeedModule, Z as generateWaitUntilModule, _ as RESOLVED_VIRTUAL_WAIT_UNTIL_ID, a as RESOLVED_VIRTUAL_BUILD_ID, b as VIRTUAL_AUTH_PROVIDERS_ID, c as RESOLVED_VIRTUAL_ENV_ID, d as RESOLVED_VIRTUAL_PLUGINS_ID, f as RESOLVED_VIRTUAL_SANDBOXED_PLUGINS_ID, g as RESOLVED_VIRTUAL_STORAGE_ID, h as RESOLVED_VIRTUAL_SEED_ID, i as RESOLVED_VIRTUAL_BLOCK_COMPONENTS_ID, j as VIRTUAL_SCHEDULER_ID, k as VIRTUAL_SANDBOXED_PLUGINS_ID, l as RESOLVED_VIRTUAL_MEDIA_PROVIDERS_ID, m as RESOLVED_VIRTUAL_SCHEDULER_ID, n as RESOLVED_VIRTUAL_AUTH_ID, o as RESOLVED_VIRTUAL_CONFIG_ID, p as RESOLVED_VIRTUAL_SANDBOX_RUNNER_ID, q as generateSandboxedPluginsModule, r as RESOLVED_VIRTUAL_AUTH_PROVIDERS_ID, s as RESOLVED_VIRTUAL_DIALECT_ID, t as RESOLVED_VIRTUAL_ADMIN_REGISTRY_ID, u as RESOLVED_VIRTUAL_OBJECT_CACHE_ID, v as VIRTUAL_ADMIN_REGISTRY_ID, w as VIRTUAL_DIALECT_ID, x as VIRTUAL_BLOCK_COMPONENTS_ID, y as VIRTUAL_AUTH_ID, z as generateBuildModule } from "../virtual-modules-82GlnQyG.mjs";
+import { n as DEV_TYPEGEN_REFRESH_GLOBAL, t as DEV_TYPEGEN_REFRESH_EVENT } from "../dev-typegen-Dtl8AfS6.mjs";
+import { a as parseDurationSeconds, c as resolveRegistryConfigForSandbox, i as normalizeRegistryConfig } from "../config-Bo4eOOdV.mjs";
+import { n as VERSION, t as COMMIT } from "../version-C4kz0PcO.mjs";
+import { r as getEnvSiteUrl } from "../public-url-uT1Ok2Tu.mjs";
+import { n as validateAllowedOrigins, r as validateOriginShape } from "../allowed-origins-CLpHGGlc.mjs";
+import { r as normalizeMigrationConfig } from "../policy-B_2qnHSy.mjs";
+import { c as normalizeAstroI18n, n as MIGRATION_CONFIG_SYMBOL, o as serializeMigrationManifest, r as createMigrationIntegrationMetadata, s as validateMigrationManifest, t as buildMigrationManifest } from "../manifest-builder-BOFCd9rX.mjs";
+import { r as getCoreMigrationIdentity } from "../identity-BwBKM1fH.mjs";
+import { A as VIRTUAL_SANDBOX_RUNNER_ID, B as generateConfigModule, C as VIRTUAL_CONFIG_ID, D as VIRTUAL_OBJECT_CACHE_ID, E as VIRTUAL_MEDIA_PROVIDERS_ID, F as generateAdminRegistryModule, G as generatePluginsModule, H as generateEnvModule, I as generateAuthModule, J as generateSchedulerModule, K as generateSandboxRunnerModule, L as generateAuthProvidersModule, M as VIRTUAL_SEED_ID, N as VIRTUAL_STORAGE_ID, O as VIRTUAL_PLUGINS_ID, P as VIRTUAL_WAIT_UNTIL_ID, R as generateBlockComponentsModule, S as VIRTUAL_BUILD_ID, T as VIRTUAL_ENV_ID, U as generateMediaProvidersModule, V as generateDialectModule, W as generateObjectCacheModule, X as generateStorageModule, Y as generateSeedModule, Z as generateWaitUntilModule, _ as RESOLVED_VIRTUAL_WAIT_UNTIL_ID, a as RESOLVED_VIRTUAL_BUILD_ID, b as VIRTUAL_AUTH_PROVIDERS_ID, c as RESOLVED_VIRTUAL_ENV_ID, d as RESOLVED_VIRTUAL_PLUGINS_ID, f as RESOLVED_VIRTUAL_SANDBOXED_PLUGINS_ID, g as RESOLVED_VIRTUAL_STORAGE_ID, h as RESOLVED_VIRTUAL_SEED_ID, i as RESOLVED_VIRTUAL_BLOCK_COMPONENTS_ID, j as VIRTUAL_SCHEDULER_ID, k as VIRTUAL_SANDBOXED_PLUGINS_ID, l as RESOLVED_VIRTUAL_MEDIA_PROVIDERS_ID, m as RESOLVED_VIRTUAL_SCHEDULER_ID, n as RESOLVED_VIRTUAL_AUTH_ID, o as RESOLVED_VIRTUAL_CONFIG_ID, p as RESOLVED_VIRTUAL_SANDBOX_RUNNER_ID, q as generateSandboxedPluginsModule, r as RESOLVED_VIRTUAL_AUTH_PROVIDERS_ID, s as RESOLVED_VIRTUAL_DIALECT_ID, t as RESOLVED_VIRTUAL_ADMIN_REGISTRY_ID, u as RESOLVED_VIRTUAL_OBJECT_CACHE_ID, v as VIRTUAL_ADMIN_REGISTRY_ID, w as VIRTUAL_DIALECT_ID, x as VIRTUAL_BLOCK_COMPONENTS_ID, y as VIRTUAL_AUTH_ID, z as generateBuildModule } from "../virtual-modules-D0e6VbEv.mjs";
 import { createRequire } from "node:module";
+import { dirname, isAbsolute, join, posix, relative, resolve, win32 } from "node:path";
 import { fileURLToPath, pathToFileURL } from "node:url";
 import { randomUUID } from "node:crypto";
 import { mkdir, rename, unlink, writeFile } from "node:fs/promises";
-import { dirname, isAbsolute, join, relative, resolve, win32 } from "node:path";
+import { existsSync, readFileSync } from "node:fs";
 import { fontProviders } from "astro/config";
-import { existsSync } from "node:fs";
 
 //#region src/astro/storage/adapters.ts
 /**
@@ -130,6 +131,165 @@ async function writeMigrationManifest(projectRoot, manifest, fileSystem = nodeFi
 	}
 }
 
+//#endregion
+//#region src/astro/integration/admin-locales.ts
+/**
+* Build-time support for the `admin.locales` allowlist: validates it against
+* the catalogs the installed admin package ships, and keeps excluded catalogs
+* out of the bundle by resolving their imports to the source-locale catalog.
+*/
+const SOURCE_LOCALE = "en";
+const MANIFEST_FILE = "locales-manifest.json";
+const QUERY_RE = /[?#].*$/;
+function isStringRecord(value) {
+	return typeof value === "object" && value !== null && !Array.isArray(value) && Object.values(value).every((entry) => typeof entry === "string");
+}
+/**
+* Read the locale manifest emitted by the `@emdash-cms/admin` build. Throws if
+* it is missing, malformed, lacks the source locale, or names a chunk that is
+* not in the dist directory.
+*/
+function readAdminLocaleManifest(adminDistPath) {
+	const manifestPath = resolve(adminDistPath, MANIFEST_FILE);
+	let parsed;
+	try {
+		parsed = JSON.parse(readFileSync(manifestPath, "utf8"));
+	} catch (error) {
+		throw new Error(`\`admin.locales\` needs the admin locale manifest at ${manifestPath}, but it could not be read. Reinstall or rebuild @emdash-cms/admin.`, { cause: error });
+	}
+	const locales = typeof parsed === "object" && parsed !== null && "locales" in parsed ? parsed.locales : void 0;
+	if (!isStringRecord(locales) || !Object.hasOwn(locales, SOURCE_LOCALE)) throw new Error(`The admin locale manifest at ${manifestPath} is invalid: expected a "locales" object mapping locale codes to chunk files, including "${SOURCE_LOCALE}". Reinstall or rebuild @emdash-cms/admin.`);
+	for (const [code, chunk] of Object.entries(locales)) if (!existsSync(resolve(adminDistPath, chunk))) throw new Error(`The admin locale manifest at ${manifestPath} lists "${chunk}" for "${code}", but that file does not exist. Reinstall or rebuild @emdash-cms/admin.`);
+	return locales;
+}
+function canonicalizeLocale(code) {
+	try {
+		return new Intl.Locale(code.trim()).baseName;
+	} catch {
+		return;
+	}
+}
+/**
+* Resolve a user-supplied `admin.locales` list to the admin's own locale
+* codes. Matching ignores case and surrounding whitespace, the source locale
+* is always included first, and duplicates are dropped. Throws, naming every
+* unrecognized entry and listing the available codes, if any entry does not
+* match an available locale.
+*/
+function resolveAdminLocales(requested, available) {
+	if (!Array.isArray(requested)) throw new Error("`admin.locales` must be an array of locale codes.");
+	const entries = requested;
+	const byCanonical = /* @__PURE__ */ new Map();
+	for (const code of available) byCanonical.set(canonicalizeLocale(code) ?? code, code);
+	const resolved = new Set([SOURCE_LOCALE]);
+	const unknownEntries = [];
+	for (const entry of entries) {
+		const canonical = typeof entry === "string" ? canonicalizeLocale(entry) : void 0;
+		const code = canonical === void 0 ? void 0 : byCanonical.get(canonical);
+		if (code === void 0) unknownEntries.push(String(JSON.stringify(entry)));
+		else resolved.add(code);
+	}
+	if (unknownEntries.length > 0) {
+		const availableCodes = [...byCanonical.values()].toSorted().join(", ");
+		throw new Error(`Unknown admin locale${unknownEntries.length === 1 ? "" : "s"} in \`admin.locales\`: ${unknownEntries.join(", ")}. Available locales: ${availableCodes}.`);
+	}
+	return [...resolved];
+}
+function toVitePath(path) {
+	return path.replaceAll("\\", "/");
+}
+/**
+* Vite plugin that resolves imports of excluded admin catalogs to the source
+* locale's catalog, so the excluded catalogs are never bundled. Covers both
+* the built admin package (hashed chunks listed in the manifest) and, in dev,
+* the admin source (`./<code>/messages.mjs`).
+*/
+function createAdminLocaleResolverPlugin(options) {
+	const { manifest } = options;
+	const sourceLocaleChunk = manifest[SOURCE_LOCALE];
+	if (sourceLocaleChunk === void 0) throw new Error(`The admin locale manifest has no "${SOURCE_LOCALE}" catalog.`);
+	const allowed = new Set(options.locales);
+	const distDir = toVitePath(options.adminDistPath);
+	const sourceDir = options.adminSourcePath ? toVitePath(options.adminSourcePath) : void 0;
+	const redirects = /* @__PURE__ */ new Map();
+	for (const [code, chunk] of Object.entries(manifest)) {
+		if (code === SOURCE_LOCALE || allowed.has(code)) continue;
+		redirects.set(posix.join(distDir, chunk), posix.join(distDir, sourceLocaleChunk));
+		if (sourceDir) redirects.set(posix.join(sourceDir, "locales", code, "messages.mjs"), posix.join(distDir, "locales", SOURCE_LOCALE, "messages.mjs"));
+	}
+	return {
+		name: "emdash-admin-locales",
+		enforce: "pre",
+		resolveId(source, importer) {
+			if (!importer || !source.startsWith(".")) return;
+			const importerDir = posix.dirname(toVitePath(importer).replace(QUERY_RE, ""));
+			return redirects.get(posix.join(importerDir, source.replace(QUERY_RE, "")));
+		}
+	};
+}
+
+//#endregion
+//#region src/astro/integration/dev-env.ts
+const DEV_ENV_SECRET_VAR_NAMES = new Set(["EMDASH_ENCRYPTION_KEY"]);
+const NEWLINE_RE = /\r?\n/;
+/**
+* Parse a minimal subset of dotenv syntax, enough for the local secrets
+* scaffolder and common user edits. Inline comments, blank lines, and
+* lines without an `=` are ignored; leading/trailing whitespace is trimmed.
+* Single and double quotes are stripped; no variable expansion is performed.
+*/
+function parseDotenv(content) {
+	const result = {};
+	for (const rawLine of content.split(NEWLINE_RE)) {
+		const line = stripInlineComment(rawLine).trim();
+		if (line === "" || line.startsWith("#")) continue;
+		const eq = line.indexOf("=");
+		if (eq === -1) continue;
+		const key = line.slice(0, eq).trim();
+		let value = line.slice(eq + 1).trim();
+		if (value.length >= 2) {
+			const first = value[0];
+			const last = value.at(-1);
+			if ((first === "\"" || first === "'") && first === last) value = value.slice(1, -1).replaceAll(`\\${first}`, first);
+		}
+		result[key] = value;
+	}
+	return result;
+}
+/**
+* Remove an inline `#` comment only if it is not inside a quoted value. This
+* keeps values like `FOO="a # b"` intact while stripping trailing comments.
+*/
+function stripInlineComment(line) {
+	let inSingleQuote = false;
+	let inDoubleQuote = false;
+	for (let i = 0; i < line.length; i++) {
+		const char = line[i];
+		if (char === "'" && !inDoubleQuote) inSingleQuote = !inSingleQuote;
+		else if (char === "\"" && !inSingleQuote) inDoubleQuote = !inDoubleQuote;
+		else if (char === "#" && !inSingleQuote && !inDoubleQuote) return line.slice(0, i);
+	}
+	return line;
+}
+/**
+* Load the plugin-secret encryption key from the project's `.env` into
+* `process.env` during `astro dev`. Existing environment variables (e.g.
+* already exported in the shell, or set by the host platform) are honored and
+* never overwritten.
+*
+* This keeps the deliberate `process.env`-only rule in the secrets module
+* while letting freshly scaffolded Node sites use the generated encryption key
+* without a manual `export` step. Other EmDash variables are intentionally not
+* copied, so `.env` values intended for production do not accidentally replace
+* generated dev values (for example `SITE_URL`).
+*/
+function loadDevEnv(root) {
+	const envPath = join(typeof root === "string" ? root : fileURLToPath(root), ".env");
+	if (!existsSync(envPath)) return;
+	const parsed = parseDotenv(readFileSync(envPath, "utf-8"));
+	for (const [key, value] of Object.entries(parsed)) if (DEV_ENV_SECRET_VAR_NAMES.has(key) && !process.env[key]) process.env[key] = value;
+}
+
 //#endregion
 //#region src/astro/integration/dev-typegen.ts
 /**
@@ -441,6 +601,10 @@ function injectCoreRoutes(injectRoute, options = {}) {
 		pattern: "/_emdash/api/dashboard",
 		entrypoint: resolveRoute("api/dashboard.ts")
 	});
+	injectRoute({
+		pattern: "/_emdash/api/calendar",
+		entrypoint: resolveRoute("api/calendar.ts")
+	});
 	injectRoute({
 		pattern: "/_emdash/api/admin/scheduled-policy-rejections/[collection]/[id]",
 		entrypoint: resolveRoute("api/admin/scheduled-policy-rejections/[collection]/[id].ts")
@@ -709,6 +873,18 @@ function injectCoreRoutes(injectRoute, options = {}) {
 		pattern: "/_emdash/api/settings/email",
 		entrypoint: resolveRoute("api/settings/email.ts")
 	});
+	injectRoute({
+		pattern: "/_emdash/api/settings/domain",
+		entrypoint: resolveRoute("api/settings/domain.ts")
+	});
+	injectRoute({
+		pattern: "/_emdash/api/settings/domain/notify",
+		entrypoint: resolveRoute("api/settings/domain-notify.ts")
+	});
+	injectRoute({
+		pattern: "/_emdash/api/site/domain-proof",
+		entrypoint: resolveRoute("api/site/domain-proof.ts")
+	});
 	injectRoute({
 		pattern: "/_emdash/api/settings/backups",
 		entrypoint: resolveRoute("api/settings/backups/index.ts")
@@ -1241,6 +1417,10 @@ function injectBuiltinAuthRoutes(injectRoute) {
 		pattern: "/_emdash/api/auth/magic-link/verify",
 		entrypoint: resolveRoute("api/auth/magic-link/verify.ts")
 	});
+	injectRoute({
+		pattern: "/_emdash/api/auth/handover",
+		entrypoint: resolveRoute("api/auth/handover.ts")
+	});
 	injectRoute({
 		pattern: "/_emdash/api/auth/oauth/[provider]",
 		entrypoint: resolveRoute("api/auth/oauth/[provider].ts")
@@ -1473,6 +1653,7 @@ function createViteConfig(options, command) {
 	const hasAstroConsoleLogger = canResolveProjectDependency(projectRoot, "astro/logger/console");
 	const adminSourcePath = isDev ? resolveAdminSource(projectRoot) : void 0;
 	const useSource = adminSourcePath !== void 0;
+	const adminLocales = options.resolvedConfig.admin?.locales;
 	const useSyncExternalStoreShimPath = resolveIntegrationShim("use-sync-external-store.js");
 	const useSyncExternalStoreWithSelectorShimPath = resolveIntegrationShim("use-sync-external-store-with-selector.js");
 	const configuredWatchIgnored = options.astroConfig.vite?.server?.watch?.ignored;
@@ -1481,7 +1662,8 @@ function createViteConfig(options, command) {
 		define: {
 			__EMDASH_VERSION__: JSON.stringify(VERSION),
 			__EMDASH_COMMIT__: JSON.stringify(COMMIT),
-			__EMDASH_PSEUDO_LOCALE__: JSON.stringify(isDev && process.env["EMDASH_PSEUDO_LOCALE"] === "1")
+			__EMDASH_PSEUDO_LOCALE__: JSON.stringify(isDev && process.env["EMDASH_PSEUDO_LOCALE"] === "1"),
+			__EMDASH_ADMIN_LOCALES__: JSON.stringify(adminLocales ?? null)
 		},
 		resolve: {
 			dedupe: [
@@ -1518,6 +1700,12 @@ function createViteConfig(options, command) {
 		},
 		plugins: [
 			createVirtualModulesPlugin(options, command),
+			...adminLocales ? [createAdminLocaleResolverPlugin({
+				adminDistPath,
+				adminSourcePath,
+				locales: adminLocales,
+				manifest: readAdminLocaleManifest(adminDistPath)
+			})] : [],
 			...cloudflare ? [] : [createWorkersBuiltinsExternalPlugin()],
 			...useSource ? [linguiMacroPlugin(adminSourcePath, adminDistPath)] : []
 		],
@@ -1613,7 +1801,17 @@ function createViteConfig(options, command) {
 				"@astrojs/react/client.js",
 				"emdash > lowlight",
 				"emdash > highlight.js",
-				"emdash > highlight.js/lib/core"
+				"emdash > highlight.js/lib/core",
+				"emdash > @emdash-cms/admin > @codemirror/autocomplete",
+				"emdash > @emdash-cms/admin > @codemirror/commands",
+				"emdash > @emdash-cms/admin > @codemirror/lang-css",
+				"emdash > @emdash-cms/admin > @codemirror/lang-html",
+				"emdash > @emdash-cms/admin > @codemirror/lang-javascript",
+				"emdash > @emdash-cms/admin > @codemirror/language",
+				"emdash > @emdash-cms/admin > @codemirror/state",
+				"emdash > @emdash-cms/admin > @codemirror/view",
+				"emdash > @emdash-cms/admin > @lezer/highlight",
+				"emdash > @emdash-cms/admin > react-day-picker/locale/*"
 			] : [
 				"@emdash-cms/admin",
 				"@astrojs/react/client.js",
@@ -1672,6 +1870,18 @@ const DEFAULT_STORAGE = local({
 	baseUrl: "/_emdash/api/media/file"
 });
 /**
+* Resolve the site origin for `image.remotePatterns`: the configured `siteUrl`,
+* then `EMDASH_SITE_URL` / `SITE_URL`. Astro bakes `remotePatterns` into the
+* build output, so the env vars only take effect if they are set when
+* `astro build` runs.
+*
+* @internal Exported for unit testing.
+*/
+function resolveBuildTimeSiteUrl(configuredSiteUrl) {
+	if (configuredSiteUrl) return configuredSiteUrl;
+	return getEnvSiteUrl();
+}
+/**
 * Build `image.remotePatterns` entries so Astro will optimize EmDash media.
 *
 * Astro's image services only build a transform URL for sources allowed via
@@ -1709,8 +1919,9 @@ function buildImageRemotePatterns(storage, siteUrl, command) {
 		}
 	} catch {}
 	if (siteUrl) try {
-		patterns.push({
-			hostname: new URL(siteUrl).hostname,
+		const { hostname } = new URL(siteUrl);
+		if (!hostname.includes("*")) patterns.push({
+			hostname,
 			pathname: `${INTERNAL_MEDIA_PREFIX}**`
 		});
 	} catch {}
@@ -1778,6 +1989,16 @@ function resolveImageEndpoint(opts) {
 	if (PASSTHROUGH_IMAGE_ENDPOINTS.has(current)) return {};
 	return { warn: `A custom image.endpoint (${current}) is configured; EmDash will not wrap it, so storage-backed media may render unoptimized.` };
 }
+const EDGE_SLASHES = /^\/+|\/+$/g;
+/**
+* The `routePattern` Astro reports for requests to the image endpoint. It drops
+* the trailing slash `image.endpoint.route` carries under `trailingSlash: "always"`.
+*
+* @internal
+*/
+function imageEndpointRoutePattern(route) {
+	return `/${(route ?? "/_image").replace(EDGE_SLASHES, "")}`;
+}
 /**
 * Warn when `@astrojs/react` is not registered in the host's `integrations`.
 *
@@ -1928,6 +2149,13 @@ function emdash(config = {}) {
 		if (descriptor.componentsEntry) throw new Error(`Plugin "${descriptor.id}" is standard format but declares componentsEntry. Portable Text block components require native format. Remove componentsEntry or change format to "native".`);
 	}
 	for (const descriptor of sandboxedDescriptors) if (descriptor.format !== "standard") throw new Error(`Plugin "${descriptor.id}" uses the native format and cannot be placed in \`sandboxed: []\`. Native plugins can only run in \`plugins: []\`. To sandbox this plugin, convert it to the standard format.`);
+	if (config.admin?.locales !== void 0) {
+		const manifest = readAdminLocaleManifest(resolveAdminDist());
+		resolvedConfig.admin = {
+			...config.admin,
+			locales: resolveAdminLocales(config.admin.locales, Object.keys(manifest))
+		};
+	}
 	const serializableConfig = buildSerializableConfig(resolvedConfig);
 	const useExternalAuth = !!(resolvedConfig.auth && "entrypoint" in resolvedConfig.auth);
 	let astroCommand;
@@ -1940,6 +2168,11 @@ function emdash(config = {}) {
 				astroCommand = command;
 				normalizeRegistryConfig(registry, { allowLocalhost: command === "dev" || command === "sync" });
 				printBanner(logger);
+				if (command === "dev") try {
+					loadDevEnv(astroConfig.root);
+				} catch (error) {
+					logger.warn(`Failed to load EMDASH_ENCRYPTION_KEY from .env: ${String(error)}`);
+				}
 				const astroVersion = resolveAstroVersion();
 				if (astroVersion !== void 0) serializableConfig.astroVersion = astroVersion;
 				serializableConfig.astroCspEnabled = Boolean(astroConfig.security.csp);
@@ -1973,7 +2206,7 @@ function emdash(config = {}) {
 						"sans-serif"
 					]
 				}];
-				const imageRemotePatterns = buildImageRemotePatterns(resolvedConfig.storage, resolvedConfig.siteUrl, command);
+				const imageRemotePatterns = buildImageRemotePatterns(resolvedConfig.storage, resolveBuildTimeSiteUrl(resolvedConfig.siteUrl), command);
 				const { entrypoint: imageEndpoint, warn: imageEndpointWarning } = resolveImageEndpoint({
 					imagesDisabled: resolvedConfig.images === false,
 					currentEntrypoint: astroConfig.image?.endpoint?.entrypoint,
@@ -1982,7 +2215,10 @@ function emdash(config = {}) {
 				if (imageEndpointWarning) logger.warn(imageEndpointWarning);
 				const imageConfig = {};
 				if (imageRemotePatterns.length) imageConfig.remotePatterns = imageRemotePatterns;
-				if (imageEndpoint) imageConfig.endpoint = { entrypoint: imageEndpoint };
+				if (imageEndpoint) {
+					imageConfig.endpoint = { entrypoint: imageEndpoint };
+					serializableConfig.imageEndpointRoute = imageEndpointRoutePattern(astroConfig.image?.endpoint?.route);
+				}
 				updateConfig({
 					security: securityConfig,
 					...Object.keys(imageConfig).length ? { image: imageConfig } : {},