emdash 1.0.1 → 1.2.0

package/dist/revision-BWEH2qQB.mjs

@@ -0,0 +1,368 @@
+import { t as validateIdentifier } from "./validate-DANX1-Qi.mjs";
+import { n as normalizeContentDatetimes, r as normalizeDatetime, t as DatetimeNormalizationError } from "./datetime-normalization-PeiEdcRY.mjs";
+import { m as isStoragelessFieldRow } from "./types-BGmQ0uXs.mjs";
+import { r as requestCached } from "./request-cache-C4CIo5ad.mjs";
+import { r as isSafeUrlFieldWriteValue } from "./url-Dn3IStq8.mjs";
+import { r as EmDashValidationError } from "./types-C-Xp0CcN.mjs";
+import { sql } from "kysely";
+import { monotonicFactory } from "ulidx";
+
+//#region src/database/content-datetime.ts
+function repeaterSubFieldsOfType(validation, type) {
+	if (!validation) return [];
+	let parsed;
+	try {
+		parsed = JSON.parse(validation);
+	} catch {
+		return [];
+	}
+	if (typeof parsed !== "object" || parsed === null || !("subFields" in parsed)) return [];
+	const subFields = parsed.subFields;
+	if (!Array.isArray(subFields)) return [];
+	return subFields.filter((field) => typeof field === "object" && field !== null && "type" in field && field.type === type && "slug" in field && typeof field.slug === "string").map((field) => field.slug);
+}
+var ContentDatetimeNormalizer = class {
+	constructor(db, contexts) {
+		this.db = db;
+		this.contexts = contexts;
+	}
+	context(collection) {
+		if (this.contexts) {
+			let context = this.contexts.get(collection);
+			if (!context) {
+				context = this.loadContext(collection);
+				this.contexts.set(collection, context);
+			}
+			return context;
+		}
+		return requestCached(`datetimeContext:${collection}`, () => this.loadContext(collection));
+	}
+	async loadContext(collection) {
+		const [rows, timezoneRow] = await Promise.all([this.db.selectFrom("_emdash_fields as field").innerJoin("_emdash_collections as collection", "collection.id", "field.collection_id").select([
+			"field.slug",
+			"field.type",
+			"field.validation"
+		]).where("collection.slug", "=", collection).execute(), this.db.selectFrom("options").select("value").where("name", "=", "site:timezone").executeTakeFirst()]);
+		let timezone = "UTC";
+		if (timezoneRow) try {
+			const configured = JSON.parse(timezoneRow.value);
+			if (typeof configured === "string" && configured) timezone = configured;
+		} catch {}
+		const fields = [];
+		const urlFields = [];
+		for (const row of rows) if (row.type === "datetime") fields.push({
+			slug: row.slug,
+			type: "datetime"
+		});
+		else if (row.type === "url") urlFields.push({ slug: row.slug });
+		else if (row.type === "repeater") {
+			fields.push({
+				slug: row.slug,
+				type: "repeater",
+				datetimeSubFields: repeaterSubFieldsOfType(row.validation, "datetime")
+			});
+			const urlSubFields = repeaterSubFieldsOfType(row.validation, "url");
+			if (urlSubFields.length > 0) urlFields.push({
+				slug: row.slug,
+				urlSubFields
+			});
+		}
+		const writableFieldSlugs = new Set(rows.filter((field) => !isStoragelessFieldRow(field)).map((field) => field.slug));
+		return {
+			timezone,
+			fields,
+			urlFields,
+			writableFieldSlugs
+		};
+	}
+	async writableFieldSlugs(collection) {
+		return (await this.context(collection)).writableFieldSlugs;
+	}
+	/**
+	* Normalizes datetimes in incoming field values and rejects `url` values
+	* with unsafe schemes, control characters, or off-site path forms. Values
+	* already stored are not checked, so restoring or syncing existing data
+	* goes through {@link normalizeData} instead.
+	*/
+	async normalizeInput(collection, data) {
+		const context = await this.context(collection);
+		assertSafeUrlFields(data, context.urlFields);
+		return this.normalizeWithContext(context, [data])[0] ?? data;
+	}
+	async normalizeData(collection, data) {
+		const [normalized] = await this.normalizeDataMany(collection, [data]);
+		return normalized ?? data;
+	}
+	async normalizeDataMany(collection, items) {
+		return this.normalizeWithContext(await this.context(collection), items);
+	}
+	normalizeWithContext(context, items) {
+		try {
+			return items.map((data) => normalizeContentDatetimes(data, context.fields, context.timezone).value);
+		} catch (error) {
+			if (error instanceof DatetimeNormalizationError) throw new EmDashValidationError(error.message);
+			throw error;
+		}
+	}
+	async normalizeValue(collection, value) {
+		const context = await this.context(collection);
+		try {
+			return normalizeDatetime(value, context.timezone).value;
+		} catch (error) {
+			if (error instanceof DatetimeNormalizationError) throw new EmDashValidationError(error.message);
+			throw error;
+		}
+	}
+};
+function isRecord(value) {
+	return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+function repeaterRows(value) {
+	let rows = value;
+	if (typeof rows === "string" && rows.startsWith("[")) try {
+		rows = JSON.parse(rows);
+	} catch {
+		return;
+	}
+	return Array.isArray(rows) ? rows : void 0;
+}
+function assertSafeUrl(path, value) {
+	if (typeof value === "string" && !isSafeUrlFieldWriteValue(value)) throw new EmDashValidationError(`Field "${path}" must use http, https, mailto, or tel, or be a safe relative path or fragment`, { path });
+}
+function assertSafeUrlFields(data, urlFields) {
+	for (const field of urlFields) {
+		const value = data[field.slug];
+		if (!field.urlSubFields) {
+			assertSafeUrl(field.slug, value);
+			continue;
+		}
+		const rows = repeaterRows(value);
+		if (!rows) continue;
+		for (const [index, row] of rows.entries()) {
+			if (!isRecord(row)) continue;
+			for (const subField of field.urlSubFields) assertSafeUrl(`${field.slug}.${index}.${subField}`, row[subField]);
+		}
+	}
+}
+
+//#endregion
+//#region src/database/repositories/revision.ts
+const monotonic = monotonicFactory();
+function createRevisionId() {
+	return monotonic();
+}
+function normalizeRevisionLimit(value) {
+	const numeric = Number(value);
+	if (!Number.isFinite(numeric)) return 50;
+	return Math.max(1, Math.min(Math.trunc(numeric), 100));
+}
+/**
+* Revision repository for version history
+*
+* Each revision stores a JSON snapshot of the content at a point in time.
+* Used when collection has `supports: ["revisions"]` enabled.
+*/
+var RevisionRepository = class {
+	datetimes;
+	constructor(db, datetimeContexts) {
+		this.db = db;
+		this.datetimes = new ContentDatetimeNormalizer(db, datetimeContexts);
+	}
+	/**
+	* Create a new revision
+	*/
+	async create(input) {
+		const id = createRevisionId();
+		const data = await this.datetimes.normalizeData(input.collection, input.data);
+		const row = {
+			id,
+			collection: input.collection,
+			entry_id: input.entryId,
+			data: JSON.stringify(data),
+			author_id: input.authorId ?? null
+		};
+		await this.db.insertInto("revisions").values(row).execute();
+		const revision = await this.findById(id);
+		if (!revision) throw new Error("Failed to create revision");
+		await this.queuePruning(input.collection, input.entryId, id);
+		return revision;
+	}
+	async queuePruning(collection, entryId, revisionId) {
+		try {
+			await this.db.insertInto("_emdash_revision_prune_queue").values({
+				collection,
+				entry_id: entryId,
+				revision_id: revisionId
+			}).onConflict((conflict) => conflict.columns(["collection", "entry_id"]).doUpdateSet({ revision_id: revisionId })).execute();
+		} catch (error) {
+			console.error(`[revisions] Failed to queue revision pruning for ${collection}/${entryId}:`, error);
+		}
+	}
+	/**
+	* Find revision by ID
+	*/
+	async findById(id) {
+		const row = await this.db.selectFrom("revisions").selectAll().where("id", "=", id).executeTakeFirst();
+		return row ? this.normalizeRow(row) : null;
+	}
+	/** Shallow-merge `patch` into a stored revision's data. */
+	async mergeData(id, patch) {
+		const row = await this.db.selectFrom("revisions").select("data").where("id", "=", id).executeTakeFirst();
+		if (!row) return;
+		const data = {
+			...JSON.parse(row.data),
+			...patch
+		};
+		await this.db.updateTable("revisions").set({ data: JSON.stringify(data) }).where("id", "=", id).execute();
+	}
+	/**
+	* Get all revisions for an entry (newest first)
+	*
+	* Orders by monotonic ULID (descending). The monotonic factory
+	* guarantees strictly increasing IDs even within the same millisecond.
+	*/
+	async findByEntry(collection, entryId, options = {}) {
+		let query = this.db.selectFrom("revisions").selectAll().where("collection", "=", collection).where("entry_id", "=", entryId).orderBy("id", "desc");
+		if (options.limit) query = query.limit(options.limit);
+		const rows = await query.execute();
+		const data = await this.datetimes.normalizeDataMany(collection, rows.map((row) => JSON.parse(row.data)));
+		return rows.map((row, index) => {
+			const normalized = data[index];
+			if (!normalized) throw new Error("Failed to normalize revision data");
+			return this.rowToRevision(row, normalized);
+		});
+	}
+	/** Read revisions only when the owning content row is visible in the same statement snapshot. */
+	async findVisibleByEntry(collection, entryId, options = {}) {
+		validateIdentifier(collection, "collection");
+		const tableName = `ec_${collection}`;
+		const limit = normalizeRevisionLimit(options.limit);
+		const result = await sql`
+			SELECT revisions.* FROM revisions
+			WHERE revisions.collection = ${collection}
+			AND revisions.entry_id = ${entryId}
+			AND EXISTS (
+				SELECT 1 FROM ${sql.ref(tableName)} AS content
+				WHERE content.id = ${entryId}
+				AND content.deleted_at IS NULL
+			)
+			ORDER BY revisions.id DESC
+			LIMIT ${limit}
+		`.execute(this.db);
+		const data = await this.datetimes.normalizeDataMany(collection, result.rows.map((row) => JSON.parse(row.data)));
+		return result.rows.map((row, index) => {
+			const normalized = data[index];
+			if (!normalized) throw new Error("Failed to normalize revision data");
+			return this.rowToRevision(row, normalized);
+		});
+	}
+	/** Read one revision only when its owning content row is visible in the same statement snapshot. */
+	async findVisibleById(collection, entryId, revisionId) {
+		validateIdentifier(collection, "collection");
+		const tableName = `ec_${collection}`;
+		const row = (await sql`
+			SELECT revisions.* FROM revisions
+			WHERE revisions.id = ${revisionId}
+			AND revisions.collection = ${collection}
+			AND revisions.entry_id = ${entryId}
+			AND EXISTS (
+				SELECT 1 FROM ${sql.ref(tableName)} AS content
+				WHERE content.id = ${entryId}
+				AND content.deleted_at IS NULL
+			)
+			LIMIT 1
+		`.execute(this.db)).rows[0];
+		return row ? this.normalizeRow(row) : null;
+	}
+	/**
+	* Get the most recent revision for an entry
+	*/
+	async findLatest(collection, entryId) {
+		const row = await this.db.selectFrom("revisions").selectAll().where("collection", "=", collection).where("entry_id", "=", entryId).orderBy("id", "desc").limit(1).executeTakeFirst();
+		return row ? this.normalizeRow(row) : null;
+	}
+	/**
+	* Count revisions for an entry
+	*/
+	async countByEntry(collection, entryId) {
+		const result = await this.db.selectFrom("revisions").select((eb) => eb.fn.count("id").as("count")).where("collection", "=", collection).where("entry_id", "=", entryId).executeTakeFirst();
+		return Number(result?.count || 0);
+	}
+	/**
+	* Delete all revisions for an entry (use when entry is deleted)
+	*/
+	async deleteByEntry(collection, entryId) {
+		const result = await this.db.deleteFrom("revisions").where("collection", "=", collection).where("entry_id", "=", entryId).executeTakeFirst();
+		try {
+			await this.db.deleteFrom("_emdash_revision_prune_queue").where("collection", "=", collection).where("entry_id", "=", entryId).execute();
+		} catch (error) {
+			console.error(`[revisions] Failed to clear queued revision pruning for ${collection}/${entryId}:`, error);
+		}
+		return Number(result.numDeletedRows ?? 0);
+	}
+	/**
+	* Delete old revisions, keeping the most recent N
+	*/
+	async pruneOldRevisions(collection, entryId, keepCount, throughRevisionId) {
+		validateIdentifier(collection, "collection");
+		const tableName = `ec_${collection}`;
+		let keepQuery = this.db.selectFrom("revisions").select("id").where("collection", "=", collection).where("entry_id", "=", entryId).orderBy("created_at", "desc").orderBy("id", "desc").limit(keepCount);
+		if (throughRevisionId) keepQuery = keepQuery.where("id", "<=", throughRevisionId);
+		const keepIds = (await keepQuery.execute()).map((r) => r.id);
+		if (keepIds.length === 0) return 0;
+		const result = await sql`
+			DELETE FROM revisions
+			WHERE collection = ${collection}
+			AND entry_id = ${entryId}
+			${throughRevisionId ? sql`AND id <= ${throughRevisionId}` : sql``}
+			AND id NOT IN (${sql.join(keepIds.map((id) => sql`${id}`))})
+			AND NOT EXISTS (
+				SELECT 1 FROM ${sql.ref(tableName)} AS content
+				WHERE content.live_revision_id = revisions.id
+				OR content.draft_revision_id = revisions.id
+			)
+		`.execute(this.db);
+		return Number(result.numAffectedRows ?? 0);
+	}
+	async pruneQueuedEntry(collection, entryId, queuedRevisionId, keepCount) {
+		const pruned = await this.pruneOldRevisions(collection, entryId, keepCount, queuedRevisionId);
+		await this.db.deleteFrom("_emdash_revision_prune_queue").where("collection", "=", collection).where("entry_id", "=", entryId).where("revision_id", "=", queuedRevisionId).execute();
+		return pruned;
+	}
+	async deleteIfUnreferenced(collection, entryId, revisionId) {
+		validateIdentifier(collection, "collection");
+		const tableName = `ec_${collection}`;
+		return ((await sql`
+			DELETE FROM revisions
+			WHERE id = ${revisionId}
+			AND collection = ${collection}
+			AND entry_id = ${entryId}
+			AND NOT EXISTS (
+				SELECT 1 FROM ${sql.ref(tableName)} AS content
+				WHERE content.live_revision_id = revisions.id
+				OR content.draft_revision_id = revisions.id
+			)
+		`.execute(this.db)).numAffectedRows ?? 0n) > 0n;
+	}
+	/**
+	* Convert database row to Revision object
+	*/
+	async normalizeRow(row) {
+		const data = await this.datetimes.normalizeData(row.collection, JSON.parse(row.data));
+		return this.rowToRevision(row, data);
+	}
+	rowToRevision(row, data) {
+		return {
+			id: row.id,
+			collection: row.collection,
+			entryId: row.entry_id,
+			data,
+			authorId: row.author_id,
+			createdAt: row.created_at
+		};
+	}
+};
+
+//#endregion
+export { ContentDatetimeNormalizer as i, createRevisionId as n, normalizeRevisionLimit as r, RevisionRepository as t };
+//# sourceMappingURL=revision-BWEH2qQB.mjs.map

package/dist/revision-BWEH2qQB.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"revision-BWEH2qQB.mjs","names":[],"sources":["../src/database/content-datetime.ts","../src/database/repositories/revision.ts"],"sourcesContent":["import type { Kysely } from \"kysely\";\n\nimport {\n\tDatetimeNormalizationError,\n\tnormalizeContentDatetimes,\n\tnormalizeDatetime,\n\ttype DatetimeFieldDescriptor,\n} from \"../datetime-normalization.js\";\nimport { requestCached } from \"../request-cache.js\";\nimport { isStoragelessFieldRow, type FieldType, type RepeaterSubField } from \"../schema/types.js\";\nimport { isSafeUrlFieldWriteValue } from \"../utils/url.js\";\nimport { EmDashValidationError } from \"./repositories/types.js\";\nimport type { Database } from \"./types.js\";\n\ninterface UrlFieldDescriptor {\n\tslug: string;\n\turlSubFields?: readonly string[];\n}\n\ninterface DatetimeContext {\n\ttimezone: string;\n\tfields: DatetimeFieldDescriptor[];\n\turlFields: UrlFieldDescriptor[];\n\twritableFieldSlugs: ReadonlySet<string>;\n}\n\nfunction repeaterSubFieldsOfType(validation: string | null, type: FieldType): string[] {\n\tif (!validation) return [];\n\tlet parsed: unknown;\n\ttry {\n\t\tparsed = JSON.parse(validation);\n\t} catch {\n\t\treturn [];\n\t}\n\tif (typeof parsed !== \"object\" || parsed === null || !(\"subFields\" in parsed)) return [];\n\tconst subFields = (parsed as { subFields?: unknown }).subFields;\n\tif (!Array.isArray(subFields)) return [];\n\treturn subFields\n\t\t.filter(\n\t\t\t(field): field is RepeaterSubField =>\n\t\t\t\ttypeof field === \"object\" &&\n\t\t\t\tfield !== null &&\n\t\t\t\t\"type\" in field &&\n\t\t\t\tfield.type === type &&\n\t\t\t\t\"slug\" in field &&\n\t\t\t\ttypeof field.slug === \"string\",\n\t\t)\n\t\t.map((field) => field.slug);\n}\n\n/**\n * Datetime contexts by collection slug, shared so that a bulk write reads each\n * collection's context once. A cached context doesn't see later writes to the\n * `site:timezone` setting or to field definitions, so share one only across\n * work that makes neither.\n */\nexport type DatetimeContextCache = Map<string, Promise<DatetimeContext>>;\n\nexport class ContentDatetimeNormalizer {\n\tconstructor(\n\t\tprivate readonly db: Kysely<Database>,\n\t\tprivate readonly contexts?: DatetimeContextCache,\n\t) {}\n\n\tprivate context(collection: string): Promise<DatetimeContext> {\n\t\tif (this.contexts) {\n\t\t\tlet context = this.contexts.get(collection);\n\t\t\tif (!context) {\n\t\t\t\tcontext = this.loadContext(collection);\n\t\t\t\tthis.contexts.set(collection, context);\n\t\t\t}\n\t\t\treturn context;\n\t\t}\n\t\t// Fall back to the per-request cache so repeated writes in the same\n\t\t// invocation (e.g. bulk imports) do not re-query field/timezone metadata\n\t\t// for every item.\n\t\treturn requestCached(`datetimeContext:${collection}`, () => this.loadContext(collection));\n\t}\n\n\tprivate async loadContext(collection: string): Promise<DatetimeContext> {\n\t\tconst [rows, timezoneRow] = await Promise.all([\n\t\t\tthis.db\n\t\t\t\t.selectFrom(\"_emdash_fields as field\")\n\t\t\t\t.innerJoin(\"_emdash_collections as collection\", \"collection.id\", \"field.collection_id\")\n\t\t\t\t.select([\"field.slug\", \"field.type\", \"field.validation\"])\n\t\t\t\t.where(\"collection.slug\", \"=\", collection)\n\t\t\t\t.execute(),\n\t\t\tthis.db\n\t\t\t\t.selectFrom(\"options\")\n\t\t\t\t.select(\"value\")\n\t\t\t\t.where(\"name\", \"=\", \"site:timezone\")\n\t\t\t\t.executeTakeFirst(),\n\t\t]);\n\t\tlet timezone = \"UTC\";\n\t\tif (timezoneRow) {\n\t\t\ttry {\n\t\t\t\tconst configured: unknown = JSON.parse(timezoneRow.value);\n\t\t\t\tif (typeof configured === \"string\" && configured) timezone = configured;\n\t\t\t} catch {\n\t\t\t\t// The datetime normalizer reports an invalid timezone when it encounters a value.\n\t\t\t}\n\t\t}\n\t\tconst fields: DatetimeFieldDescriptor[] = [];\n\t\tconst urlFields: UrlFieldDescriptor[] = [];\n\t\tfor (const row of rows) {\n\t\t\tif (row.type === \"datetime\") {\n\t\t\t\tfields.push({ slug: row.slug, type: \"datetime\" });\n\t\t\t} else if (row.type === \"url\") {\n\t\t\t\turlFields.push({ slug: row.slug });\n\t\t\t} else if (row.type === \"repeater\") {\n\t\t\t\tfields.push({\n\t\t\t\t\tslug: row.slug,\n\t\t\t\t\ttype: \"repeater\",\n\t\t\t\t\tdatetimeSubFields: repeaterSubFieldsOfType(row.validation, \"datetime\"),\n\t\t\t\t});\n\t\t\t\tconst urlSubFields = repeaterSubFieldsOfType(row.validation, \"url\");\n\t\t\t\tif (urlSubFields.length > 0) urlFields.push({ slug: row.slug, urlSubFields });\n\t\t\t}\n\t\t}\n\t\tconst writableFieldSlugs = new Set(\n\t\t\trows.filter((field) => !isStoragelessFieldRow(field)).map((field) => field.slug),\n\t\t);\n\t\treturn { timezone, fields, urlFields, writableFieldSlugs };\n\t}\n\n\tasync writableFieldSlugs(collection: string): Promise<ReadonlySet<string>> {\n\t\treturn (await this.context(collection)).writableFieldSlugs;\n\t}\n\n\t/**\n\t * Normalizes datetimes in incoming field values and rejects `url` values\n\t * with unsafe schemes, control characters, or off-site path forms. Values\n\t * already stored are not checked, so restoring or syncing existing data\n\t * goes through {@link normalizeData} instead.\n\t */\n\tasync normalizeInput(\n\t\tcollection: string,\n\t\tdata: Record<string, unknown>,\n\t): Promise<Record<string, unknown>> {\n\t\tconst context = await this.context(collection);\n\t\tassertSafeUrlFields(data, context.urlFields);\n\t\treturn this.normalizeWithContext(context, [data])[0] ?? data;\n\t}\n\n\tasync normalizeData(\n\t\tcollection: string,\n\t\tdata: Record<string, unknown>,\n\t): Promise<Record<string, unknown>> {\n\t\tconst [normalized] = await this.normalizeDataMany(collection, [data]);\n\t\treturn normalized ?? data;\n\t}\n\n\tasync normalizeDataMany(\n\t\tcollection: string,\n\t\titems: readonly Record<string, unknown>[],\n\t): Promise<Record<string, unknown>[]> {\n\t\treturn this.normalizeWithContext(await this.context(collection), items);\n\t}\n\n\tprivate normalizeWithContext(\n\t\tcontext: DatetimeContext,\n\t\titems: readonly Record<string, unknown>[],\n\t): Record<string, unknown>[] {\n\t\ttry {\n\t\t\treturn items.map(\n\t\t\t\t(data) => normalizeContentDatetimes(data, context.fields, context.timezone).value,\n\t\t\t);\n\t\t} catch (error) {\n\t\t\tif (error instanceof DatetimeNormalizationError) {\n\t\t\t\tthrow new EmDashValidationError(error.message);\n\t\t\t}\n\t\t\tthrow error;\n\t\t}\n\t}\n\n\tasync normalizeValue(collection: string, value: string | Date): Promise<string> {\n\t\tconst context = await this.context(collection);\n\t\ttry {\n\t\t\treturn normalizeDatetime(value, context.timezone).value;\n\t\t} catch (error) {\n\t\t\tif (error instanceof DatetimeNormalizationError) {\n\t\t\t\tthrow new EmDashValidationError(error.message);\n\t\t\t}\n\t\t\tthrow error;\n\t\t}\n\t}\n}\n\nfunction isRecord(value: unknown): value is Record<string, unknown> {\n\treturn typeof value === \"object\" && value !== null && !Array.isArray(value);\n}\n\n// Reads parse a stored string that looks like JSON, so a repeater written as a JSON string\n// comes back as rows and must be checked as rows.\nfunction repeaterRows(value: unknown): unknown[] | undefined {\n\tlet rows = value;\n\tif (typeof rows === \"string\" && rows.startsWith(\"[\")) {\n\t\ttry {\n\t\t\trows = JSON.parse(rows);\n\t\t} catch {\n\t\t\treturn undefined;\n\t\t}\n\t}\n\treturn Array.isArray(rows) ? rows : undefined;\n}\n\nfunction assertSafeUrl(path: string, value: unknown): void {\n\tif (typeof value === \"string\" && !isSafeUrlFieldWriteValue(value)) {\n\t\tthrow new EmDashValidationError(\n\t\t\t`Field \"${path}\" must use http, https, mailto, or tel, or be a safe relative path or fragment`,\n\t\t\t{ path },\n\t\t);\n\t}\n}\n\nfunction assertSafeUrlFields(\n\tdata: Record<string, unknown>,\n\turlFields: readonly UrlFieldDescriptor[],\n): void {\n\tfor (const field of urlFields) {\n\t\tconst value = data[field.slug];\n\t\tif (!field.urlSubFields) {\n\t\t\tassertSafeUrl(field.slug, value);\n\t\t\tcontinue;\n\t\t}\n\t\tconst rows = repeaterRows(value);\n\t\tif (!rows) continue;\n\t\tfor (const [index, row] of rows.entries()) {\n\t\t\tif (!isRecord(row)) continue;\n\t\t\tfor (const subField of field.urlSubFields) {\n\t\t\t\tassertSafeUrl(`${field.slug}.${index}.${subField}`, row[subField]);\n\t\t\t}\n\t\t}\n\t}\n}\n","import { sql, type Kysely, type Selectable } from \"kysely\";\nimport { monotonicFactory } from \"ulidx\";\n\nimport { ContentDatetimeNormalizer, type DatetimeContextCache } from \"../content-datetime.js\";\nimport type { Database, RevisionTable } from \"../types.js\";\nimport { validateIdentifier } from \"../validate.js\";\n\nconst monotonic = monotonicFactory();\n\nexport function createRevisionId(): string {\n\treturn monotonic();\n}\n\nexport interface Revision {\n\tid: string;\n\tcollection: string;\n\tentryId: string;\n\tdata: Record<string, unknown>;\n\tauthorId: string | null;\n\tcreatedAt: string;\n}\n\nexport interface CreateRevisionInput {\n\tcollection: string;\n\tentryId: string;\n\tdata: Record<string, unknown>;\n\tauthorId?: string;\n}\n\nexport function normalizeRevisionLimit(value: unknown): number {\n\tconst numeric = Number(value);\n\tif (!Number.isFinite(numeric)) return 50;\n\treturn Math.max(1, Math.min(Math.trunc(numeric), 100));\n}\n\n/**\n * Revision repository for version history\n *\n * Each revision stores a JSON snapshot of the content at a point in time.\n * Used when collection has `supports: [\"revisions\"]` enabled.\n */\nexport class RevisionRepository {\n\tprivate readonly datetimes: ContentDatetimeNormalizer;\n\n\tconstructor(\n\t\tprivate db: Kysely<Database>,\n\t\tdatetimeContexts?: DatetimeContextCache,\n\t) {\n\t\tthis.datetimes = new ContentDatetimeNormalizer(db, datetimeContexts);\n\t}\n\n\t/**\n\t * Create a new revision\n\t */\n\tasync create(input: CreateRevisionInput): Promise<Revision> {\n\t\tconst id = createRevisionId();\n\t\tconst data = await this.datetimes.normalizeData(input.collection, input.data);\n\n\t\tconst row: Omit<RevisionTable, \"created_at\"> = {\n\t\t\tid,\n\t\t\tcollection: input.collection,\n\t\t\tentry_id: input.entryId,\n\t\t\tdata: JSON.stringify(data),\n\t\t\tauthor_id: input.authorId ?? null,\n\t\t};\n\n\t\tawait this.db.insertInto(\"revisions\").values(row).execute();\n\n\t\tconst revision = await this.findById(id);\n\t\tif (!revision) {\n\t\t\tthrow new Error(\"Failed to create revision\");\n\t\t}\n\n\t\tawait this.queuePruning(input.collection, input.entryId, id);\n\n\t\treturn revision;\n\t}\n\n\tasync queuePruning(collection: string, entryId: string, revisionId: string): Promise<void> {\n\t\ttry {\n\t\t\tawait this.db\n\t\t\t\t.insertInto(\"_emdash_revision_prune_queue\")\n\t\t\t\t.values({\n\t\t\t\t\tcollection,\n\t\t\t\t\tentry_id: entryId,\n\t\t\t\t\trevision_id: revisionId,\n\t\t\t\t})\n\t\t\t\t.onConflict((conflict) =>\n\t\t\t\t\tconflict.columns([\"collection\", \"entry_id\"]).doUpdateSet({ revision_id: revisionId }),\n\t\t\t\t)\n\t\t\t\t.execute();\n\t\t} catch (error) {\n\t\t\tconsole.error(\n\t\t\t\t`[revisions] Failed to queue revision pruning for ${collection}/${entryId}:`,\n\t\t\t\terror,\n\t\t\t);\n\t\t}\n\t}\n\n\t/**\n\t * Find revision by ID\n\t */\n\tasync findById(id: string): Promise<Revision | null> {\n\t\tconst row = await this.db\n\t\t\t.selectFrom(\"revisions\")\n\t\t\t.selectAll()\n\t\t\t.where(\"id\", \"=\", id)\n\t\t\t.executeTakeFirst();\n\n\t\treturn row ? this.normalizeRow(row) : null;\n\t}\n\n\t/** Shallow-merge `patch` into a stored revision's data. */\n\tasync mergeData(id: string, patch: Record<string, unknown>): Promise<void> {\n\t\tconst row = await this.db\n\t\t\t.selectFrom(\"revisions\")\n\t\t\t.select(\"data\")\n\t\t\t.where(\"id\", \"=\", id)\n\t\t\t.executeTakeFirst();\n\t\tif (!row) return;\n\t\tconst data: Record<string, unknown> = { ...JSON.parse(row.data), ...patch };\n\t\tawait this.db\n\t\t\t.updateTable(\"revisions\")\n\t\t\t.set({ data: JSON.stringify(data) })\n\t\t\t.where(\"id\", \"=\", id)\n\t\t\t.execute();\n\t}\n\n\t/**\n\t * Get all revisions for an entry (newest first)\n\t *\n\t * Orders by monotonic ULID (descending). The monotonic factory\n\t * guarantees strictly increasing IDs even within the same millisecond.\n\t */\n\tasync findByEntry(\n\t\tcollection: string,\n\t\tentryId: string,\n\t\toptions: { limit?: number } = {},\n\t): Promise<Revision[]> {\n\t\tlet query = this.db\n\t\t\t.selectFrom(\"revisions\")\n\t\t\t.selectAll()\n\t\t\t.where(\"collection\", \"=\", collection)\n\t\t\t.where(\"entry_id\", \"=\", entryId)\n\t\t\t.orderBy(\"id\", \"desc\");\n\n\t\tif (options.limit) {\n\t\t\tquery = query.limit(options.limit);\n\t\t}\n\n\t\tconst rows = await query.execute();\n\t\tconst data = await this.datetimes.normalizeDataMany(\n\t\t\tcollection,\n\t\t\trows.map((row) => JSON.parse(row.data)),\n\t\t);\n\t\treturn rows.map((row, index) => {\n\t\t\tconst normalized = data[index];\n\t\t\tif (!normalized) throw new Error(\"Failed to normalize revision data\");\n\t\t\treturn this.rowToRevision(row, normalized);\n\t\t});\n\t}\n\n\t/** Read revisions only when the owning content row is visible in the same statement snapshot. */\n\tasync findVisibleByEntry(\n\t\tcollection: string,\n\t\tentryId: string,\n\t\toptions: { limit?: number } = {},\n\t): Promise<Revision[]> {\n\t\tvalidateIdentifier(collection, \"collection\");\n\t\tconst tableName = `ec_${collection}`;\n\t\tconst limit = normalizeRevisionLimit(options.limit);\n\t\tconst result = await sql<Selectable<RevisionTable>>`\n\t\t\tSELECT revisions.* FROM revisions\n\t\t\tWHERE revisions.collection = ${collection}\n\t\t\tAND revisions.entry_id = ${entryId}\n\t\t\tAND EXISTS (\n\t\t\t\tSELECT 1 FROM ${sql.ref(tableName)} AS content\n\t\t\t\tWHERE content.id = ${entryId}\n\t\t\t\tAND content.deleted_at IS NULL\n\t\t\t)\n\t\t\tORDER BY revisions.id DESC\n\t\t\tLIMIT ${limit}\n\t\t`.execute(this.db);\n\t\tconst data = await this.datetimes.normalizeDataMany(\n\t\t\tcollection,\n\t\t\tresult.rows.map((row) => JSON.parse(row.data)),\n\t\t);\n\t\treturn result.rows.map((row, index) => {\n\t\t\tconst normalized = data[index];\n\t\t\tif (!normalized) throw new Error(\"Failed to normalize revision data\");\n\t\t\treturn this.rowToRevision(row, normalized);\n\t\t});\n\t}\n\n\t/** Read one revision only when its owning content row is visible in the same statement snapshot. */\n\tasync findVisibleById(\n\t\tcollection: string,\n\t\tentryId: string,\n\t\trevisionId: string,\n\t): Promise<Revision | null> {\n\t\tvalidateIdentifier(collection, \"collection\");\n\t\tconst tableName = `ec_${collection}`;\n\t\tconst result = await sql<Selectable<RevisionTable>>`\n\t\t\tSELECT revisions.* FROM revisions\n\t\t\tWHERE revisions.id = ${revisionId}\n\t\t\tAND revisions.collection = ${collection}\n\t\t\tAND revisions.entry_id = ${entryId}\n\t\t\tAND EXISTS (\n\t\t\t\tSELECT 1 FROM ${sql.ref(tableName)} AS content\n\t\t\t\tWHERE content.id = ${entryId}\n\t\t\t\tAND content.deleted_at IS NULL\n\t\t\t)\n\t\t\tLIMIT 1\n\t\t`.execute(this.db);\n\t\tconst row = result.rows[0];\n\t\treturn row ? this.normalizeRow(row) : null;\n\t}\n\n\t/**\n\t * Get the most recent revision for an entry\n\t */\n\tasync findLatest(collection: string, entryId: string): Promise<Revision | null> {\n\t\tconst row = await this.db\n\t\t\t.selectFrom(\"revisions\")\n\t\t\t.selectAll()\n\t\t\t.where(\"collection\", \"=\", collection)\n\t\t\t.where(\"entry_id\", \"=\", entryId)\n\t\t\t.orderBy(\"id\", \"desc\")\n\t\t\t.limit(1)\n\t\t\t.executeTakeFirst();\n\n\t\treturn row ? this.normalizeRow(row) : null;\n\t}\n\n\t/**\n\t * Count revisions for an entry\n\t */\n\tasync countByEntry(collection: string, entryId: string): Promise<number> {\n\t\tconst result = await this.db\n\t\t\t.selectFrom(\"revisions\")\n\t\t\t.select((eb) => eb.fn.count(\"id\").as(\"count\"))\n\t\t\t.where(\"collection\", \"=\", collection)\n\t\t\t.where(\"entry_id\", \"=\", entryId)\n\t\t\t.executeTakeFirst();\n\n\t\treturn Number(result?.count || 0);\n\t}\n\n\t/**\n\t * Delete all revisions for an entry (use when entry is deleted)\n\t */\n\tasync deleteByEntry(collection: string, entryId: string): Promise<number> {\n\t\tconst result = await this.db\n\t\t\t.deleteFrom(\"revisions\")\n\t\t\t.where(\"collection\", \"=\", collection)\n\t\t\t.where(\"entry_id\", \"=\", entryId)\n\t\t\t.executeTakeFirst();\n\n\t\ttry {\n\t\t\tawait this.db\n\t\t\t\t.deleteFrom(\"_emdash_revision_prune_queue\")\n\t\t\t\t.where(\"collection\", \"=\", collection)\n\t\t\t\t.where(\"entry_id\", \"=\", entryId)\n\t\t\t\t.execute();\n\t\t} catch (error) {\n\t\t\tconsole.error(\n\t\t\t\t`[revisions] Failed to clear queued revision pruning for ${collection}/${entryId}:`,\n\t\t\t\terror,\n\t\t\t);\n\t\t}\n\n\t\treturn Number(result.numDeletedRows ?? 0);\n\t}\n\n\t/**\n\t * Delete old revisions, keeping the most recent N\n\t */\n\tasync pruneOldRevisions(\n\t\tcollection: string,\n\t\tentryId: string,\n\t\tkeepCount: number,\n\t\tthroughRevisionId?: string,\n\t): Promise<number> {\n\t\tvalidateIdentifier(collection, \"collection\");\n\t\tconst tableName = `ec_${collection}`;\n\t\tlet keepQuery = this.db\n\t\t\t.selectFrom(\"revisions\")\n\t\t\t.select(\"id\")\n\t\t\t.where(\"collection\", \"=\", collection)\n\t\t\t.where(\"entry_id\", \"=\", entryId)\n\t\t\t.orderBy(\"created_at\", \"desc\")\n\t\t\t.orderBy(\"id\", \"desc\") // ULID tiebreaker\n\t\t\t.limit(keepCount);\n\n\t\tif (throughRevisionId) {\n\t\t\tkeepQuery = keepQuery.where(\"id\", \"<=\", throughRevisionId);\n\t\t}\n\n\t\tconst keep = await keepQuery.execute();\n\n\t\tconst keepIds = keep.map((r) => r.id);\n\n\t\tif (keepIds.length === 0) return 0;\n\t\tconst revisionBoundary = throughRevisionId ? sql`AND id <= ${throughRevisionId}` : sql``;\n\n\t\tconst result = await sql`\n\t\t\tDELETE FROM revisions\n\t\t\tWHERE collection = ${collection}\n\t\t\tAND entry_id = ${entryId}\n\t\t\t${revisionBoundary}\n\t\t\tAND id NOT IN (${sql.join(keepIds.map((id) => sql`${id}`))})\n\t\t\tAND NOT EXISTS (\n\t\t\t\tSELECT 1 FROM ${sql.ref(tableName)} AS content\n\t\t\t\tWHERE content.live_revision_id = revisions.id\n\t\t\t\tOR content.draft_revision_id = revisions.id\n\t\t\t)\n\t\t`.execute(this.db);\n\n\t\treturn Number(result.numAffectedRows ?? 0);\n\t}\n\n\tasync pruneQueuedEntry(\n\t\tcollection: string,\n\t\tentryId: string,\n\t\tqueuedRevisionId: string,\n\t\tkeepCount: number,\n\t): Promise<number> {\n\t\tconst pruned = await this.pruneOldRevisions(collection, entryId, keepCount, queuedRevisionId);\n\t\tawait this.db\n\t\t\t.deleteFrom(\"_emdash_revision_prune_queue\")\n\t\t\t.where(\"collection\", \"=\", collection)\n\t\t\t.where(\"entry_id\", \"=\", entryId)\n\t\t\t.where(\"revision_id\", \"=\", queuedRevisionId)\n\t\t\t.execute();\n\t\treturn pruned;\n\t}\n\n\tasync deleteIfUnreferenced(\n\t\tcollection: string,\n\t\tentryId: string,\n\t\trevisionId: string,\n\t): Promise<boolean> {\n\t\tvalidateIdentifier(collection, \"collection\");\n\t\tconst tableName = `ec_${collection}`;\n\t\tconst result = await sql`\n\t\t\tDELETE FROM revisions\n\t\t\tWHERE id = ${revisionId}\n\t\t\tAND collection = ${collection}\n\t\t\tAND entry_id = ${entryId}\n\t\t\tAND NOT EXISTS (\n\t\t\t\tSELECT 1 FROM ${sql.ref(tableName)} AS content\n\t\t\t\tWHERE content.live_revision_id = revisions.id\n\t\t\t\tOR content.draft_revision_id = revisions.id\n\t\t\t)\n\t\t`.execute(this.db);\n\t\treturn (result.numAffectedRows ?? 0n) > 0n;\n\t}\n\n\t/**\n\t * Convert database row to Revision object\n\t */\n\tprivate async normalizeRow(row: {\n\t\tid: string;\n\t\tcollection: string;\n\t\tentry_id: string;\n\t\tdata: string;\n\t\tauthor_id: string | null;\n\t\tcreated_at: string;\n\t}): Promise<Revision> {\n\t\tconst data = await this.datetimes.normalizeData(row.collection, JSON.parse(row.data));\n\t\treturn this.rowToRevision(row, data);\n\t}\n\n\tprivate rowToRevision(\n\t\trow: {\n\t\t\tid: string;\n\t\t\tcollection: string;\n\t\t\tentry_id: string;\n\t\t\tdata: string;\n\t\t\tauthor_id: string | null;\n\t\t\tcreated_at: string;\n\t\t},\n\t\tdata: Record<string, unknown>,\n\t): Revision {\n\t\treturn {\n\t\t\tid: row.id,\n\t\t\tcollection: row.collection,\n\t\t\tentryId: row.entry_id,\n\t\t\tdata,\n\t\t\tauthorId: row.author_id,\n\t\t\tcreatedAt: row.created_at,\n\t\t};\n\t}\n}\n"],"mappings":";;;;;;;;;;AA0BA,SAAS,wBAAwB,YAA2B,MAA2B;AACtF,KAAI,CAAC,WAAY,QAAO,EAAE;CAC1B,IAAI;AACJ,KAAI;AACH,WAAS,KAAK,MAAM,WAAW;SACxB;AACP,SAAO,EAAE;;AAEV,KAAI,OAAO,WAAW,YAAY,WAAW,QAAQ,EAAE,eAAe,QAAS,QAAO,EAAE;CACxF,MAAM,YAAa,OAAmC;AACtD,KAAI,CAAC,MAAM,QAAQ,UAAU,CAAE,QAAO,EAAE;AACxC,QAAO,UACL,QACC,UACA,OAAO,UAAU,YACjB,UAAU,QACV,UAAU,SACV,MAAM,SAAS,QACf,UAAU,SACV,OAAO,MAAM,SAAS,SACvB,CACA,KAAK,UAAU,MAAM,KAAK;;AAW7B,IAAa,4BAAb,MAAuC;CACtC,YACC,AAAiB,IACjB,AAAiB,UAChB;EAFgB;EACA;;CAGlB,AAAQ,QAAQ,YAA8C;AAC7D,MAAI,KAAK,UAAU;GAClB,IAAI,UAAU,KAAK,SAAS,IAAI,WAAW;AAC3C,OAAI,CAAC,SAAS;AACb,cAAU,KAAK,YAAY,WAAW;AACtC,SAAK,SAAS,IAAI,YAAY,QAAQ;;AAEvC,UAAO;;AAKR,SAAO,cAAc,mBAAmB,oBAAoB,KAAK,YAAY,WAAW,CAAC;;CAG1F,MAAc,YAAY,YAA8C;EACvE,MAAM,CAAC,MAAM,eAAe,MAAM,QAAQ,IAAI,CAC7C,KAAK,GACH,WAAW,0BAA0B,CACrC,UAAU,qCAAqC,iBAAiB,sBAAsB,CACtF,OAAO;GAAC;GAAc;GAAc;GAAmB,CAAC,CACxD,MAAM,mBAAmB,KAAK,WAAW,CACzC,SAAS,EACX,KAAK,GACH,WAAW,UAAU,CACrB,OAAO,QAAQ,CACf,MAAM,QAAQ,KAAK,gBAAgB,CACnC,kBAAkB,CACpB,CAAC;EACF,IAAI,WAAW;AACf,MAAI,YACH,KAAI;GACH,MAAM,aAAsB,KAAK,MAAM,YAAY,MAAM;AACzD,OAAI,OAAO,eAAe,YAAY,WAAY,YAAW;UACtD;EAIT,MAAM,SAAoC,EAAE;EAC5C,MAAM,YAAkC,EAAE;AAC1C,OAAK,MAAM,OAAO,KACjB,KAAI,IAAI,SAAS,WAChB,QAAO,KAAK;GAAE,MAAM,IAAI;GAAM,MAAM;GAAY,CAAC;WACvC,IAAI,SAAS,MACvB,WAAU,KAAK,EAAE,MAAM,IAAI,MAAM,CAAC;WACxB,IAAI,SAAS,YAAY;AACnC,UAAO,KAAK;IACX,MAAM,IAAI;IACV,MAAM;IACN,mBAAmB,wBAAwB,IAAI,YAAY,WAAW;IACtE,CAAC;GACF,MAAM,eAAe,wBAAwB,IAAI,YAAY,MAAM;AACnE,OAAI,aAAa,SAAS,EAAG,WAAU,KAAK;IAAE,MAAM,IAAI;IAAM;IAAc,CAAC;;EAG/E,MAAM,qBAAqB,IAAI,IAC9B,KAAK,QAAQ,UAAU,CAAC,sBAAsB,MAAM,CAAC,CAAC,KAAK,UAAU,MAAM,KAAK,CAChF;AACD,SAAO;GAAE;GAAU;GAAQ;GAAW;GAAoB;;CAG3D,MAAM,mBAAmB,YAAkD;AAC1E,UAAQ,MAAM,KAAK,QAAQ,WAAW,EAAE;;;;;;;;CASzC,MAAM,eACL,YACA,MACmC;EACnC,MAAM,UAAU,MAAM,KAAK,QAAQ,WAAW;AAC9C,sBAAoB,MAAM,QAAQ,UAAU;AAC5C,SAAO,KAAK,qBAAqB,SAAS,CAAC,KAAK,CAAC,CAAC,MAAM;;CAGzD,MAAM,cACL,YACA,MACmC;EACnC,MAAM,CAAC,cAAc,MAAM,KAAK,kBAAkB,YAAY,CAAC,KAAK,CAAC;AACrE,SAAO,cAAc;;CAGtB,MAAM,kBACL,YACA,OACqC;AACrC,SAAO,KAAK,qBAAqB,MAAM,KAAK,QAAQ,WAAW,EAAE,MAAM;;CAGxE,AAAQ,qBACP,SACA,OAC4B;AAC5B,MAAI;AACH,UAAO,MAAM,KACX,SAAS,0BAA0B,MAAM,QAAQ,QAAQ,QAAQ,SAAS,CAAC,MAC5E;WACO,OAAO;AACf,OAAI,iBAAiB,2BACpB,OAAM,IAAI,sBAAsB,MAAM,QAAQ;AAE/C,SAAM;;;CAIR,MAAM,eAAe,YAAoB,OAAuC;EAC/E,MAAM,UAAU,MAAM,KAAK,QAAQ,WAAW;AAC9C,MAAI;AACH,UAAO,kBAAkB,OAAO,QAAQ,SAAS,CAAC;WAC1C,OAAO;AACf,OAAI,iBAAiB,2BACpB,OAAM,IAAI,sBAAsB,MAAM,QAAQ;AAE/C,SAAM;;;;AAKT,SAAS,SAAS,OAAkD;AACnE,QAAO,OAAO,UAAU,YAAY,UAAU,QAAQ,CAAC,MAAM,QAAQ,MAAM;;AAK5E,SAAS,aAAa,OAAuC;CAC5D,IAAI,OAAO;AACX,KAAI,OAAO,SAAS,YAAY,KAAK,WAAW,IAAI,CACnD,KAAI;AACH,SAAO,KAAK,MAAM,KAAK;SAChB;AACP;;AAGF,QAAO,MAAM,QAAQ,KAAK,GAAG,OAAO;;AAGrC,SAAS,cAAc,MAAc,OAAsB;AAC1D,KAAI,OAAO,UAAU,YAAY,CAAC,yBAAyB,MAAM,CAChE,OAAM,IAAI,sBACT,UAAU,KAAK,iFACf,EAAE,MAAM,CACR;;AAIH,SAAS,oBACR,MACA,WACO;AACP,MAAK,MAAM,SAAS,WAAW;EAC9B,MAAM,QAAQ,KAAK,MAAM;AACzB,MAAI,CAAC,MAAM,cAAc;AACxB,iBAAc,MAAM,MAAM,MAAM;AAChC;;EAED,MAAM,OAAO,aAAa,MAAM;AAChC,MAAI,CAAC,KAAM;AACX,OAAK,MAAM,CAAC,OAAO,QAAQ,KAAK,SAAS,EAAE;AAC1C,OAAI,CAAC,SAAS,IAAI,CAAE;AACpB,QAAK,MAAM,YAAY,MAAM,aAC5B,eAAc,GAAG,MAAM,KAAK,GAAG,MAAM,GAAG,YAAY,IAAI,UAAU;;;;;;;AC/NtE,MAAM,YAAY,kBAAkB;AAEpC,SAAgB,mBAA2B;AAC1C,QAAO,WAAW;;AAmBnB,SAAgB,uBAAuB,OAAwB;CAC9D,MAAM,UAAU,OAAO,MAAM;AAC7B,KAAI,CAAC,OAAO,SAAS,QAAQ,CAAE,QAAO;AACtC,QAAO,KAAK,IAAI,GAAG,KAAK,IAAI,KAAK,MAAM,QAAQ,EAAE,IAAI,CAAC;;;;;;;;AASvD,IAAa,qBAAb,MAAgC;CAC/B,AAAiB;CAEjB,YACC,AAAQ,IACR,kBACC;EAFO;AAGR,OAAK,YAAY,IAAI,0BAA0B,IAAI,iBAAiB;;;;;CAMrE,MAAM,OAAO,OAA+C;EAC3D,MAAM,KAAK,kBAAkB;EAC7B,MAAM,OAAO,MAAM,KAAK,UAAU,cAAc,MAAM,YAAY,MAAM,KAAK;EAE7E,MAAM,MAAyC;GAC9C;GACA,YAAY,MAAM;GAClB,UAAU,MAAM;GAChB,MAAM,KAAK,UAAU,KAAK;GAC1B,WAAW,MAAM,YAAY;GAC7B;AAED,QAAM,KAAK,GAAG,WAAW,YAAY,CAAC,OAAO,IAAI,CAAC,SAAS;EAE3D,MAAM,WAAW,MAAM,KAAK,SAAS,GAAG;AACxC,MAAI,CAAC,SACJ,OAAM,IAAI,MAAM,4BAA4B;AAG7C,QAAM,KAAK,aAAa,MAAM,YAAY,MAAM,SAAS,GAAG;AAE5D,SAAO;;CAGR,MAAM,aAAa,YAAoB,SAAiB,YAAmC;AAC1F,MAAI;AACH,SAAM,KAAK,GACT,WAAW,+BAA+B,CAC1C,OAAO;IACP;IACA,UAAU;IACV,aAAa;IACb,CAAC,CACD,YAAY,aACZ,SAAS,QAAQ,CAAC,cAAc,WAAW,CAAC,CAAC,YAAY,EAAE,aAAa,YAAY,CAAC,CACrF,CACA,SAAS;WACH,OAAO;AACf,WAAQ,MACP,oDAAoD,WAAW,GAAG,QAAQ,IAC1E,MACA;;;;;;CAOH,MAAM,SAAS,IAAsC;EACpD,MAAM,MAAM,MAAM,KAAK,GACrB,WAAW,YAAY,CACvB,WAAW,CACX,MAAM,MAAM,KAAK,GAAG,CACpB,kBAAkB;AAEpB,SAAO,MAAM,KAAK,aAAa,IAAI,GAAG;;;CAIvC,MAAM,UAAU,IAAY,OAA+C;EAC1E,MAAM,MAAM,MAAM,KAAK,GACrB,WAAW,YAAY,CACvB,OAAO,OAAO,CACd,MAAM,MAAM,KAAK,GAAG,CACpB,kBAAkB;AACpB,MAAI,CAAC,IAAK;EACV,MAAM,OAAgC;GAAE,GAAG,KAAK,MAAM,IAAI,KAAK;GAAE,GAAG;GAAO;AAC3E,QAAM,KAAK,GACT,YAAY,YAAY,CACxB,IAAI,EAAE,MAAM,KAAK,UAAU,KAAK,EAAE,CAAC,CACnC,MAAM,MAAM,KAAK,GAAG,CACpB,SAAS;;;;;;;;CASZ,MAAM,YACL,YACA,SACA,UAA8B,EAAE,EACV;EACtB,IAAI,QAAQ,KAAK,GACf,WAAW,YAAY,CACvB,WAAW,CACX,MAAM,cAAc,KAAK,WAAW,CACpC,MAAM,YAAY,KAAK,QAAQ,CAC/B,QAAQ,MAAM,OAAO;AAEvB,MAAI,QAAQ,MACX,SAAQ,MAAM,MAAM,QAAQ,MAAM;EAGnC,MAAM,OAAO,MAAM,MAAM,SAAS;EAClC,MAAM,OAAO,MAAM,KAAK,UAAU,kBACjC,YACA,KAAK,KAAK,QAAQ,KAAK,MAAM,IAAI,KAAK,CAAC,CACvC;AACD,SAAO,KAAK,KAAK,KAAK,UAAU;GAC/B,MAAM,aAAa,KAAK;AACxB,OAAI,CAAC,WAAY,OAAM,IAAI,MAAM,oCAAoC;AACrE,UAAO,KAAK,cAAc,KAAK,WAAW;IACzC;;;CAIH,MAAM,mBACL,YACA,SACA,UAA8B,EAAE,EACV;AACtB,qBAAmB,YAAY,aAAa;EAC5C,MAAM,YAAY,MAAM;EACxB,MAAM,QAAQ,uBAAuB,QAAQ,MAAM;EACnD,MAAM,SAAS,MAAM,GAA8B;;kCAEnB,WAAW;8BACf,QAAQ;;oBAElB,IAAI,IAAI,UAAU,CAAC;yBACd,QAAQ;;;;WAItB,MAAM;IACb,QAAQ,KAAK,GAAG;EAClB,MAAM,OAAO,MAAM,KAAK,UAAU,kBACjC,YACA,OAAO,KAAK,KAAK,QAAQ,KAAK,MAAM,IAAI,KAAK,CAAC,CAC9C;AACD,SAAO,OAAO,KAAK,KAAK,KAAK,UAAU;GACtC,MAAM,aAAa,KAAK;AACxB,OAAI,CAAC,WAAY,OAAM,IAAI,MAAM,oCAAoC;AACrE,UAAO,KAAK,cAAc,KAAK,WAAW;IACzC;;;CAIH,MAAM,gBACL,YACA,SACA,YAC2B;AAC3B,qBAAmB,YAAY,aAAa;EAC5C,MAAM,YAAY,MAAM;EAaxB,MAAM,OAZS,MAAM,GAA8B;;0BAE3B,WAAW;gCACL,WAAW;8BACb,QAAQ;;oBAElB,IAAI,IAAI,UAAU,CAAC;yBACd,QAAQ;;;;IAI7B,QAAQ,KAAK,GAAG,EACC,KAAK;AACxB,SAAO,MAAM,KAAK,aAAa,IAAI,GAAG;;;;;CAMvC,MAAM,WAAW,YAAoB,SAA2C;EAC/E,MAAM,MAAM,MAAM,KAAK,GACrB,WAAW,YAAY,CACvB,WAAW,CACX,MAAM,cAAc,KAAK,WAAW,CACpC,MAAM,YAAY,KAAK,QAAQ,CAC/B,QAAQ,MAAM,OAAO,CACrB,MAAM,EAAE,CACR,kBAAkB;AAEpB,SAAO,MAAM,KAAK,aAAa,IAAI,GAAG;;;;;CAMvC,MAAM,aAAa,YAAoB,SAAkC;EACxE,MAAM,SAAS,MAAM,KAAK,GACxB,WAAW,YAAY,CACvB,QAAQ,OAAO,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,QAAQ,CAAC,CAC7C,MAAM,cAAc,KAAK,WAAW,CACpC,MAAM,YAAY,KAAK,QAAQ,CAC/B,kBAAkB;AAEpB,SAAO,OAAO,QAAQ,SAAS,EAAE;;;;;CAMlC,MAAM,cAAc,YAAoB,SAAkC;EACzE,MAAM,SAAS,MAAM,KAAK,GACxB,WAAW,YAAY,CACvB,MAAM,cAAc,KAAK,WAAW,CACpC,MAAM,YAAY,KAAK,QAAQ,CAC/B,kBAAkB;AAEpB,MAAI;AACH,SAAM,KAAK,GACT,WAAW,+BAA+B,CAC1C,MAAM,cAAc,KAAK,WAAW,CACpC,MAAM,YAAY,KAAK,QAAQ,CAC/B,SAAS;WACH,OAAO;AACf,WAAQ,MACP,2DAA2D,WAAW,GAAG,QAAQ,IACjF,MACA;;AAGF,SAAO,OAAO,OAAO,kBAAkB,EAAE;;;;;CAM1C,MAAM,kBACL,YACA,SACA,WACA,mBACkB;AAClB,qBAAmB,YAAY,aAAa;EAC5C,MAAM,YAAY,MAAM;EACxB,IAAI,YAAY,KAAK,GACnB,WAAW,YAAY,CACvB,OAAO,KAAK,CACZ,MAAM,cAAc,KAAK,WAAW,CACpC,MAAM,YAAY,KAAK,QAAQ,CAC/B,QAAQ,cAAc,OAAO,CAC7B,QAAQ,MAAM,OAAO,CACrB,MAAM,UAAU;AAElB,MAAI,kBACH,aAAY,UAAU,MAAM,MAAM,MAAM,kBAAkB;EAK3D,MAAM,WAFO,MAAM,UAAU,SAAS,EAEjB,KAAK,MAAM,EAAE,GAAG;AAErC,MAAI,QAAQ,WAAW,EAAG,QAAO;EAGjC,MAAM,SAAS,MAAM,GAAG;;wBAEF,WAAW;oBACf,QAAQ;KALD,oBAAoB,GAAG,aAAa,sBAAsB,GAAG,GAMlE;oBACF,IAAI,KAAK,QAAQ,KAAK,OAAO,GAAG,GAAG,KAAK,CAAC,CAAC;;oBAE1C,IAAI,IAAI,UAAU,CAAC;;;;IAInC,QAAQ,KAAK,GAAG;AAElB,SAAO,OAAO,OAAO,mBAAmB,EAAE;;CAG3C,MAAM,iBACL,YACA,SACA,kBACA,WACkB;EAClB,MAAM,SAAS,MAAM,KAAK,kBAAkB,YAAY,SAAS,WAAW,iBAAiB;AAC7F,QAAM,KAAK,GACT,WAAW,+BAA+B,CAC1C,MAAM,cAAc,KAAK,WAAW,CACpC,MAAM,YAAY,KAAK,QAAQ,CAC/B,MAAM,eAAe,KAAK,iBAAiB,CAC3C,SAAS;AACX,SAAO;;CAGR,MAAM,qBACL,YACA,SACA,YACmB;AACnB,qBAAmB,YAAY,aAAa;EAC5C,MAAM,YAAY,MAAM;AAYxB,WAXe,MAAM,GAAG;;gBAEV,WAAW;sBACL,WAAW;oBACb,QAAQ;;oBAER,IAAI,IAAI,UAAU,CAAC;;;;IAInC,QAAQ,KAAK,GAAG,EACH,mBAAmB,MAAM;;;;;CAMzC,MAAc,aAAa,KAOL;EACrB,MAAM,OAAO,MAAM,KAAK,UAAU,cAAc,IAAI,YAAY,KAAK,MAAM,IAAI,KAAK,CAAC;AACrF,SAAO,KAAK,cAAc,KAAK,KAAK;;CAGrC,AAAQ,cACP,KAQA,MACW;AACX,SAAO;GACN,IAAI,IAAI;GACR,YAAY,IAAI;GAChB,SAAS,IAAI;GACb;GACA,UAAU,IAAI;GACd,WAAW,IAAI;GACf"}

package/dist/route-wire-CwbWB_6O.mjs

@@ -0,0 +1,197 @@
+import { readPluginHttpBytes } from "./plugins/http-wire.mjs";
+import { PLUGIN_ROUTE_DEFAULT_BODY_BYTES, PLUGIN_ROUTE_MAX_BODY_BYTES, PLUGIN_ROUTE_MAX_FILENAME_BYTES, PLUGIN_ROUTE_MAX_MULTIPART_PARTS, PLUGIN_ROUTE_MAX_MULTIPART_PART_BYTES } from "@emdash-cms/plugin-types";
+
+//#region src/plugins/route-wire.ts
+const UTF8 = new TextEncoder();
+const FILENAME_PATH_SEPARATOR_PATTERN = /[/\\]/;
+const SCRIPT_MEDIA_TYPE_PATTERN = /(?:java|ecma)script/;
+const ALLOWED_RESPONSE_HEADERS = new Set([
+	"accept-ranges",
+	"content-disposition",
+	"content-encoding",
+	"content-language",
+	"content-range",
+	"content-type",
+	"etag",
+	"last-modified",
+	"retry-after"
+]);
+const ACTIVE_RESPONSE_TYPES = new Set([
+	"application/ecmascript",
+	"application/javascript",
+	"application/wasm",
+	"application/xhtml+xml",
+	"application/xml",
+	"image/svg+xml",
+	"multipart/related",
+	"multipart/x-mixed-replace",
+	"text/css",
+	"text/ecmascript",
+	"text/html",
+	"text/javascript",
+	"text/jscript",
+	"text/livescript",
+	"text/xml"
+]);
+var PluginRouteRequestError = class extends Error {
+	constructor(message, status) {
+		super(message);
+		this.status = status;
+		this.name = "PluginRouteRequestError";
+	}
+};
+function parseQuery(request) {
+	const input = {};
+	const params = new URL(request.url).searchParams;
+	for (const key of new Set(params.keys())) {
+		const values = params.getAll(key);
+		input[key] = values.length > 1 ? values : values[0];
+	}
+	return input;
+}
+async function readRouteBody(request, limit) {
+	const declaredLength = request.headers.get("content-length");
+	if (declaredLength !== null) {
+		const parsed = Number(declaredLength);
+		if (Number.isFinite(parsed) && parsed > limit) throw new PluginRouteRequestError(`Plugin route request body exceeds ${limit} bytes`, 413);
+	}
+	try {
+		return await readPluginHttpBytes(request.body, limit, "request");
+	} catch (error) {
+		if (!(error instanceof Error) || !error.message.includes("exceeds")) throw new PluginRouteRequestError("Plugin route request body could not be read", 400);
+		throw new PluginRouteRequestError(`Plugin route request body exceeds ${limit} bytes`, 413);
+	}
+}
+function decodeText(bytes) {
+	try {
+		return new TextDecoder("utf-8", { fatal: true }).decode(bytes);
+	} catch {
+		throw new PluginRouteRequestError("Plugin route request body is not valid UTF-8", 400);
+	}
+}
+async function parseFormData(request, bytes) {
+	const contentType = request.headers.get("content-type") ?? "";
+	if (!contentType.toLowerCase().startsWith("multipart/form-data;") && !contentType.toLowerCase().startsWith("application/x-www-form-urlencoded")) throw new PluginRouteRequestError("Plugin route form-data requests require multipart/form-data or application/x-www-form-urlencoded", 415);
+	let parsed;
+	try {
+		parsed = await new Request(request.url, {
+			method: "POST",
+			headers: { "content-type": contentType },
+			body: new Uint8Array(bytes).buffer
+		}).formData();
+	} catch {
+		throw new PluginRouteRequestError("Plugin route form-data body is malformed", 400);
+	}
+	const entries = [];
+	for (const [name, value] of parsed.entries()) {
+		if (entries.length >= PLUGIN_ROUTE_MAX_MULTIPART_PARTS) throw new PluginRouteRequestError(`Plugin route form-data exceeds ${PLUGIN_ROUTE_MAX_MULTIPART_PARTS} parts`, 413);
+		if (typeof value === "string") {
+			if (UTF8.encode(value).byteLength > PLUGIN_ROUTE_MAX_MULTIPART_PART_BYTES) throw new PluginRouteRequestError(`Plugin route form-data part exceeds ${PLUGIN_ROUTE_MAX_MULTIPART_PART_BYTES} bytes`, 413);
+			entries.push({
+				name,
+				kind: "text",
+				value
+			});
+			continue;
+		}
+		const filename = value.name;
+		let hasControlCharacter = false;
+		for (const character of filename) {
+			const codePoint = character.codePointAt(0);
+			if (codePoint !== void 0 && (codePoint < 32 || codePoint === 127)) {
+				hasControlCharacter = true;
+				break;
+			}
+		}
+		if (UTF8.encode(filename).byteLength > PLUGIN_ROUTE_MAX_FILENAME_BYTES || hasControlCharacter || FILENAME_PATH_SEPARATOR_PATTERN.test(filename)) throw new PluginRouteRequestError("Plugin route form-data filename is invalid", 400);
+		if (value.size > PLUGIN_ROUTE_MAX_MULTIPART_PART_BYTES) throw new PluginRouteRequestError(`Plugin route form-data part exceeds ${PLUGIN_ROUTE_MAX_MULTIPART_PART_BYTES} bytes`, 413);
+		entries.push({
+			name,
+			kind: "file",
+			filename,
+			contentType: value.type || "application/octet-stream",
+			bytes: new Uint8Array(await value.arrayBuffer())
+		});
+	}
+	return { entries };
+}
+async function parseDeclaredPluginRouteInput(request, declaration) {
+	if (declaration.body === "none") {
+		await readRouteBody(request, 0);
+		return parseQuery(request);
+	}
+	const limit = declaration.maxBytes ?? PLUGIN_ROUTE_DEFAULT_BODY_BYTES;
+	const bytes = await readRouteBody(request, Math.min(limit, PLUGIN_ROUTE_MAX_BODY_BYTES));
+	switch (declaration.body) {
+		case "bytes": return bytes;
+		case "text": return decodeText(bytes);
+		case "json": try {
+			return JSON.parse(decodeText(bytes));
+		} catch (error) {
+			if (error instanceof PluginRouteRequestError) throw error;
+			throw new PluginRouteRequestError("Plugin route request body is not valid JSON", 400);
+		}
+		case "form-data": return parseFormData(request, bytes);
+	}
+}
+function isPluginResponse(value) {
+	return typeof value === "object" && value !== null && value.__emdashPluginResponse === true;
+}
+async function pluginRouteResponseToWire(value, options = {}) {
+	if (!isPluginResponse(value)) throw new TypeError("Raw plugin routes must return pluginResponse()");
+	if (!Number.isInteger(value.status) || value.status < 200 || value.status > 599) throw new TypeError("Raw plugin route status must be an integer from 200 to 599");
+	if (!Array.isArray(value.headers)) throw new TypeError("Raw plugin route headers are invalid");
+	const sourceHeaders = new Headers();
+	for (const entry of value.headers) {
+		if (!Array.isArray(entry) || entry.length !== 2 || typeof entry[0] !== "string" || typeof entry[1] !== "string") throw new TypeError("Raw plugin route headers are invalid");
+		sourceHeaders.append(entry[0], entry[1]);
+	}
+	const headers = new Headers();
+	sourceHeaders.forEach((headerValue, name) => {
+		if (ALLOWED_RESPONSE_HEADERS.has(name)) {
+			headers.set(name, headerValue);
+			return;
+		}
+		if (name !== "location") return;
+		if (options.allowExternalLocation) {
+			headers.set(name, headerValue);
+			return;
+		}
+		if (options.publicRequestUrl) try {
+			const requestUrl = new URL(options.publicRequestUrl);
+			if (new URL(headerValue, requestUrl).origin === requestUrl.origin) {
+				headers.set(name, headerValue);
+				return;
+			}
+		} catch {}
+		throw new TypeError("Public raw plugin route redirects must stay on the site origin");
+	});
+	if (!headers.has("content-type")) headers.set("content-type", "application/octet-stream");
+	const mediaType = (headers.get("content-type") ?? "application/octet-stream").split(";", 1)[0].trim().toLowerCase();
+	if (ACTIVE_RESPONSE_TYPES.has(mediaType) || SCRIPT_MEDIA_TYPE_PATTERN.test(mediaType)) throw new TypeError(`Raw plugin route content type "${mediaType}" is not allowed`);
+	headers.set("x-content-type-options", "nosniff");
+	headers.set("content-security-policy", "sandbox; default-src 'none'");
+	headers.set("referrer-policy", "no-referrer");
+	let body = new Uint8Array();
+	if (value.body !== null) if (value.body.kind === "text" && typeof value.body.value === "string") body = UTF8.encode(value.body.value);
+	else if (value.body.kind === "bytes" && value.body.value instanceof Uint8Array) body = new Uint8Array(value.body.value);
+	else throw new TypeError("Raw plugin route body is invalid");
+	if (body.byteLength > PLUGIN_ROUTE_MAX_BODY_BYTES) throw new TypeError(`Raw plugin route response body exceeds ${PLUGIN_ROUTE_MAX_BODY_BYTES} bytes`);
+	return {
+		status: value.status,
+		headers: [...headers.entries()],
+		body
+	};
+}
+function pluginRouteResponseFromWire(wire, method) {
+	const nullBodyStatus = wire.status === 204 || wire.status === 205 || wire.status === 304;
+	const body = method === "HEAD" || nullBodyStatus ? null : new Uint8Array(wire.body).buffer;
+	return new Response(body, {
+		status: wire.status,
+		headers: wire.headers
+	});
+}
+
+//#endregion
+export { pluginRouteResponseToWire as i, parseDeclaredPluginRouteInput as n, pluginRouteResponseFromWire as r, PluginRouteRequestError as t };
+//# sourceMappingURL=route-wire-CwbWB_6O.mjs.map

package/dist/route-wire-CwbWB_6O.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"route-wire-CwbWB_6O.mjs","names":[],"sources":["../src/plugins/route-wire.ts"],"sourcesContent":["import {\n\tPLUGIN_ROUTE_DEFAULT_BODY_BYTES,\n\tPLUGIN_ROUTE_MAX_BODY_BYTES,\n\tPLUGIN_ROUTE_MAX_FILENAME_BYTES,\n\tPLUGIN_ROUTE_MAX_MULTIPART_PART_BYTES,\n\tPLUGIN_ROUTE_MAX_MULTIPART_PARTS,\n\ttype PluginRouteRequest,\n} from \"@emdash-cms/plugin-types\";\n\nimport type { PluginFormData, PluginResponse } from \"../plugin-types.js\";\nimport { readPluginHttpBytes } from \"./http-wire.js\";\n\nconst UTF8 = new TextEncoder();\nconst FILENAME_PATH_SEPARATOR_PATTERN = /[/\\\\]/;\nconst SCRIPT_MEDIA_TYPE_PATTERN = /(?:java|ecma)script/;\nconst ALLOWED_RESPONSE_HEADERS = new Set([\n\t\"accept-ranges\",\n\t\"content-disposition\",\n\t\"content-encoding\",\n\t\"content-language\",\n\t\"content-range\",\n\t\"content-type\",\n\t\"etag\",\n\t\"last-modified\",\n\t\"retry-after\",\n]);\nconst ACTIVE_RESPONSE_TYPES = new Set([\n\t\"application/ecmascript\",\n\t\"application/javascript\",\n\t\"application/wasm\",\n\t\"application/xhtml+xml\",\n\t\"application/xml\",\n\t\"image/svg+xml\",\n\t\"multipart/related\",\n\t\"multipart/x-mixed-replace\",\n\t\"text/css\",\n\t\"text/ecmascript\",\n\t\"text/html\",\n\t\"text/javascript\",\n\t\"text/jscript\",\n\t\"text/livescript\",\n\t\"text/xml\",\n]);\n\nexport interface PluginRouteResponseWire {\n\tstatus: number;\n\theaders: Array<[string, string]>;\n\tbody: Uint8Array;\n}\n\nexport interface PluginRouteResponseWireOptions {\n\tallowExternalLocation?: boolean;\n\tpublicRequestUrl?: string;\n}\n\nexport class PluginRouteRequestError extends Error {\n\tconstructor(\n\t\tmessage: string,\n\t\treadonly status: 400 | 413 | 415,\n\t) {\n\t\tsuper(message);\n\t\tthis.name = \"PluginRouteRequestError\";\n\t}\n}\n\nfunction parseQuery(request: Request): Record<string, string | string[]> {\n\tconst input: Record<string, string | string[]> = {};\n\tconst params = new URL(request.url).searchParams;\n\tfor (const key of new Set(params.keys())) {\n\t\tconst values = params.getAll(key);\n\t\tinput[key] = values.length > 1 ? values : values[0];\n\t}\n\treturn input;\n}\n\nasync function readRouteBody(request: Request, limit: number): Promise<Uint8Array> {\n\tconst declaredLength = request.headers.get(\"content-length\");\n\tif (declaredLength !== null) {\n\t\tconst parsed = Number(declaredLength);\n\t\tif (Number.isFinite(parsed) && parsed > limit) {\n\t\t\tthrow new PluginRouteRequestError(`Plugin route request body exceeds ${limit} bytes`, 413);\n\t\t}\n\t}\n\ttry {\n\t\treturn await readPluginHttpBytes(request.body, limit, \"request\");\n\t} catch (error) {\n\t\tif (!(error instanceof Error) || !error.message.includes(\"exceeds\")) {\n\t\t\tthrow new PluginRouteRequestError(\"Plugin route request body could not be read\", 400);\n\t\t}\n\t\tthrow new PluginRouteRequestError(`Plugin route request body exceeds ${limit} bytes`, 413);\n\t}\n}\n\nfunction decodeText(bytes: Uint8Array): string {\n\ttry {\n\t\treturn new TextDecoder(\"utf-8\", { fatal: true }).decode(bytes);\n\t} catch {\n\t\tthrow new PluginRouteRequestError(\"Plugin route request body is not valid UTF-8\", 400);\n\t}\n}\n\nasync function parseFormData(request: Request, bytes: Uint8Array): Promise<PluginFormData> {\n\tconst contentType = request.headers.get(\"content-type\") ?? \"\";\n\tif (\n\t\t!contentType.toLowerCase().startsWith(\"multipart/form-data;\") &&\n\t\t!contentType.toLowerCase().startsWith(\"application/x-www-form-urlencoded\")\n\t) {\n\t\tthrow new PluginRouteRequestError(\n\t\t\t\"Plugin route form-data requests require multipart/form-data or application/x-www-form-urlencoded\",\n\t\t\t415,\n\t\t);\n\t}\n\n\tlet parsed: FormData;\n\ttry {\n\t\tparsed = await new Request(request.url, {\n\t\t\tmethod: \"POST\",\n\t\t\theaders: { \"content-type\": contentType },\n\t\t\tbody: new Uint8Array(bytes).buffer,\n\t\t}).formData();\n\t} catch {\n\t\tthrow new PluginRouteRequestError(\"Plugin route form-data body is malformed\", 400);\n\t}\n\n\tconst entries: PluginFormData[\"entries\"] = [];\n\tfor (const [name, value] of parsed.entries()) {\n\t\tif (entries.length >= PLUGIN_ROUTE_MAX_MULTIPART_PARTS) {\n\t\t\tthrow new PluginRouteRequestError(\n\t\t\t\t`Plugin route form-data exceeds ${PLUGIN_ROUTE_MAX_MULTIPART_PARTS} parts`,\n\t\t\t\t413,\n\t\t\t);\n\t\t}\n\t\tif (typeof value === \"string\") {\n\t\t\tif (UTF8.encode(value).byteLength > PLUGIN_ROUTE_MAX_MULTIPART_PART_BYTES) {\n\t\t\t\tthrow new PluginRouteRequestError(\n\t\t\t\t\t`Plugin route form-data part exceeds ${PLUGIN_ROUTE_MAX_MULTIPART_PART_BYTES} bytes`,\n\t\t\t\t\t413,\n\t\t\t\t);\n\t\t\t}\n\t\t\tentries.push({ name, kind: \"text\", value });\n\t\t\tcontinue;\n\t\t}\n\n\t\tconst filename = value.name;\n\t\tlet hasControlCharacter = false;\n\t\tfor (const character of filename) {\n\t\t\tconst codePoint = character.codePointAt(0);\n\t\t\tif (codePoint !== undefined && (codePoint < 32 || codePoint === 127)) {\n\t\t\t\thasControlCharacter = true;\n\t\t\t\tbreak;\n\t\t\t}\n\t\t}\n\t\tif (\n\t\t\tUTF8.encode(filename).byteLength > PLUGIN_ROUTE_MAX_FILENAME_BYTES ||\n\t\t\thasControlCharacter ||\n\t\t\tFILENAME_PATH_SEPARATOR_PATTERN.test(filename)\n\t\t) {\n\t\t\tthrow new PluginRouteRequestError(\"Plugin route form-data filename is invalid\", 400);\n\t\t}\n\t\tif (value.size > PLUGIN_ROUTE_MAX_MULTIPART_PART_BYTES) {\n\t\t\tthrow new PluginRouteRequestError(\n\t\t\t\t`Plugin route form-data part exceeds ${PLUGIN_ROUTE_MAX_MULTIPART_PART_BYTES} bytes`,\n\t\t\t\t413,\n\t\t\t);\n\t\t}\n\t\tentries.push({\n\t\t\tname,\n\t\t\tkind: \"file\",\n\t\t\tfilename,\n\t\t\tcontentType: value.type || \"application/octet-stream\",\n\t\t\tbytes: new Uint8Array(await value.arrayBuffer()),\n\t\t});\n\t}\n\treturn { entries };\n}\n\nexport async function parseDeclaredPluginRouteInput(\n\trequest: Request,\n\tdeclaration: PluginRouteRequest,\n): Promise<unknown> {\n\tif (declaration.body === \"none\") {\n\t\tawait readRouteBody(request, 0);\n\t\treturn parseQuery(request);\n\t}\n\tconst limit = declaration.maxBytes ?? PLUGIN_ROUTE_DEFAULT_BODY_BYTES;\n\tconst bytes = await readRouteBody(request, Math.min(limit, PLUGIN_ROUTE_MAX_BODY_BYTES));\n\n\tswitch (declaration.body) {\n\t\tcase \"bytes\":\n\t\t\treturn bytes;\n\t\tcase \"text\":\n\t\t\treturn decodeText(bytes);\n\t\tcase \"json\":\n\t\t\ttry {\n\t\t\t\treturn JSON.parse(decodeText(bytes));\n\t\t\t} catch (error) {\n\t\t\t\tif (error instanceof PluginRouteRequestError) throw error;\n\t\t\t\tthrow new PluginRouteRequestError(\"Plugin route request body is not valid JSON\", 400);\n\t\t\t}\n\t\tcase \"form-data\":\n\t\t\treturn parseFormData(request, bytes);\n\t}\n}\n\nexport function isPluginResponse(value: unknown): value is PluginResponse {\n\treturn (\n\t\ttypeof value === \"object\" &&\n\t\tvalue !== null &&\n\t\t(value as { __emdashPluginResponse?: unknown }).__emdashPluginResponse === true\n\t);\n}\n\nexport async function pluginRouteResponseToWire(\n\tvalue: unknown,\n\toptions: PluginRouteResponseWireOptions = {},\n): Promise<PluginRouteResponseWire> {\n\tif (!isPluginResponse(value)) {\n\t\tthrow new TypeError(\"Raw plugin routes must return pluginResponse()\");\n\t}\n\tif (!Number.isInteger(value.status) || value.status < 200 || value.status > 599) {\n\t\tthrow new TypeError(\"Raw plugin route status must be an integer from 200 to 599\");\n\t}\n\tif (!Array.isArray(value.headers)) {\n\t\tthrow new TypeError(\"Raw plugin route headers are invalid\");\n\t}\n\n\tconst sourceHeaders = new Headers();\n\tfor (const entry of value.headers) {\n\t\tif (\n\t\t\t!Array.isArray(entry) ||\n\t\t\tentry.length !== 2 ||\n\t\t\ttypeof entry[0] !== \"string\" ||\n\t\t\ttypeof entry[1] !== \"string\"\n\t\t) {\n\t\t\tthrow new TypeError(\"Raw plugin route headers are invalid\");\n\t\t}\n\t\tsourceHeaders.append(entry[0], entry[1]);\n\t}\n\n\tconst headers = new Headers();\n\tsourceHeaders.forEach((headerValue, name) => {\n\t\tif (ALLOWED_RESPONSE_HEADERS.has(name)) {\n\t\t\theaders.set(name, headerValue);\n\t\t\treturn;\n\t\t}\n\t\tif (name !== \"location\") return;\n\t\tif (options.allowExternalLocation) {\n\t\t\theaders.set(name, headerValue);\n\t\t\treturn;\n\t\t}\n\t\tif (options.publicRequestUrl) {\n\t\t\ttry {\n\t\t\t\tconst requestUrl = new URL(options.publicRequestUrl);\n\t\t\t\tif (new URL(headerValue, requestUrl).origin === requestUrl.origin) {\n\t\t\t\t\theaders.set(name, headerValue);\n\t\t\t\t\treturn;\n\t\t\t\t}\n\t\t\t} catch {}\n\t\t}\n\t\tthrow new TypeError(\"Public raw plugin route redirects must stay on the site origin\");\n\t});\n\tif (!headers.has(\"content-type\")) headers.set(\"content-type\", \"application/octet-stream\");\n\tconst mediaType = (headers.get(\"content-type\") ?? \"application/octet-stream\")\n\t\t.split(\";\", 1)[0]\n\t\t.trim()\n\t\t.toLowerCase();\n\tif (ACTIVE_RESPONSE_TYPES.has(mediaType) || SCRIPT_MEDIA_TYPE_PATTERN.test(mediaType)) {\n\t\tthrow new TypeError(`Raw plugin route content type \"${mediaType}\" is not allowed`);\n\t}\n\theaders.set(\"x-content-type-options\", \"nosniff\");\n\theaders.set(\"content-security-policy\", \"sandbox; default-src 'none'\");\n\theaders.set(\"referrer-policy\", \"no-referrer\");\n\n\tlet body = new Uint8Array();\n\tif (value.body !== null) {\n\t\tif (value.body.kind === \"text\" && typeof value.body.value === \"string\") {\n\t\t\tbody = UTF8.encode(value.body.value);\n\t\t} else if (value.body.kind === \"bytes\" && value.body.value instanceof Uint8Array) {\n\t\t\tbody = new Uint8Array(value.body.value);\n\t\t} else {\n\t\t\tthrow new TypeError(\"Raw plugin route body is invalid\");\n\t\t}\n\t}\n\tif (body.byteLength > PLUGIN_ROUTE_MAX_BODY_BYTES) {\n\t\tthrow new TypeError(\n\t\t\t`Raw plugin route response body exceeds ${PLUGIN_ROUTE_MAX_BODY_BYTES} bytes`,\n\t\t);\n\t}\n\n\treturn {\n\t\tstatus: value.status,\n\t\theaders: [...headers.entries()],\n\t\tbody,\n\t};\n}\n\nexport function pluginRouteResponseFromWire(\n\twire: PluginRouteResponseWire,\n\tmethod: string,\n): Response {\n\tconst nullBodyStatus = wire.status === 204 || wire.status === 205 || wire.status === 304;\n\tconst body = method === \"HEAD\" || nullBodyStatus ? null : new Uint8Array(wire.body).buffer;\n\treturn new Response(body, { status: wire.status, headers: wire.headers });\n}\n"],"mappings":";;;;AAYA,MAAM,OAAO,IAAI,aAAa;AAC9B,MAAM,kCAAkC;AACxC,MAAM,4BAA4B;AAClC,MAAM,2BAA2B,IAAI,IAAI;CACxC;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA,CAAC;AACF,MAAM,wBAAwB,IAAI,IAAI;CACrC;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA,CAAC;AAaF,IAAa,0BAAb,cAA6C,MAAM;CAClD,YACC,SACA,AAAS,QACR;AACD,QAAM,QAAQ;EAFL;AAGT,OAAK,OAAO;;;AAId,SAAS,WAAW,SAAqD;CACxE,MAAM,QAA2C,EAAE;CACnD,MAAM,SAAS,IAAI,IAAI,QAAQ,IAAI,CAAC;AACpC,MAAK,MAAM,OAAO,IAAI,IAAI,OAAO,MAAM,CAAC,EAAE;EACzC,MAAM,SAAS,OAAO,OAAO,IAAI;AACjC,QAAM,OAAO,OAAO,SAAS,IAAI,SAAS,OAAO;;AAElD,QAAO;;AAGR,eAAe,cAAc,SAAkB,OAAoC;CAClF,MAAM,iBAAiB,QAAQ,QAAQ,IAAI,iBAAiB;AAC5D,KAAI,mBAAmB,MAAM;EAC5B,MAAM,SAAS,OAAO,eAAe;AACrC,MAAI,OAAO,SAAS,OAAO,IAAI,SAAS,MACvC,OAAM,IAAI,wBAAwB,qCAAqC,MAAM,SAAS,IAAI;;AAG5F,KAAI;AACH,SAAO,MAAM,oBAAoB,QAAQ,MAAM,OAAO,UAAU;UACxD,OAAO;AACf,MAAI,EAAE,iBAAiB,UAAU,CAAC,MAAM,QAAQ,SAAS,UAAU,CAClE,OAAM,IAAI,wBAAwB,+CAA+C,IAAI;AAEtF,QAAM,IAAI,wBAAwB,qCAAqC,MAAM,SAAS,IAAI;;;AAI5F,SAAS,WAAW,OAA2B;AAC9C,KAAI;AACH,SAAO,IAAI,YAAY,SAAS,EAAE,OAAO,MAAM,CAAC,CAAC,OAAO,MAAM;SACvD;AACP,QAAM,IAAI,wBAAwB,gDAAgD,IAAI;;;AAIxF,eAAe,cAAc,SAAkB,OAA4C;CAC1F,MAAM,cAAc,QAAQ,QAAQ,IAAI,eAAe,IAAI;AAC3D,KACC,CAAC,YAAY,aAAa,CAAC,WAAW,uBAAuB,IAC7D,CAAC,YAAY,aAAa,CAAC,WAAW,oCAAoC,CAE1E,OAAM,IAAI,wBACT,oGACA,IACA;CAGF,IAAI;AACJ,KAAI;AACH,WAAS,MAAM,IAAI,QAAQ,QAAQ,KAAK;GACvC,QAAQ;GACR,SAAS,EAAE,gBAAgB,aAAa;GACxC,MAAM,IAAI,WAAW,MAAM,CAAC;GAC5B,CAAC,CAAC,UAAU;SACN;AACP,QAAM,IAAI,wBAAwB,4CAA4C,IAAI;;CAGnF,MAAM,UAAqC,EAAE;AAC7C,MAAK,MAAM,CAAC,MAAM,UAAU,OAAO,SAAS,EAAE;AAC7C,MAAI,QAAQ,UAAU,iCACrB,OAAM,IAAI,wBACT,kCAAkC,iCAAiC,SACnE,IACA;AAEF,MAAI,OAAO,UAAU,UAAU;AAC9B,OAAI,KAAK,OAAO,MAAM,CAAC,aAAa,sCACnC,OAAM,IAAI,wBACT,uCAAuC,sCAAsC,SAC7E,IACA;AAEF,WAAQ,KAAK;IAAE;IAAM,MAAM;IAAQ;IAAO,CAAC;AAC3C;;EAGD,MAAM,WAAW,MAAM;EACvB,IAAI,sBAAsB;AAC1B,OAAK,MAAM,aAAa,UAAU;GACjC,MAAM,YAAY,UAAU,YAAY,EAAE;AAC1C,OAAI,cAAc,WAAc,YAAY,MAAM,cAAc,MAAM;AACrE,0BAAsB;AACtB;;;AAGF,MACC,KAAK,OAAO,SAAS,CAAC,aAAa,mCACnC,uBACA,gCAAgC,KAAK,SAAS,CAE9C,OAAM,IAAI,wBAAwB,8CAA8C,IAAI;AAErF,MAAI,MAAM,OAAO,sCAChB,OAAM,IAAI,wBACT,uCAAuC,sCAAsC,SAC7E,IACA;AAEF,UAAQ,KAAK;GACZ;GACA,MAAM;GACN;GACA,aAAa,MAAM,QAAQ;GAC3B,OAAO,IAAI,WAAW,MAAM,MAAM,aAAa,CAAC;GAChD,CAAC;;AAEH,QAAO,EAAE,SAAS;;AAGnB,eAAsB,8BACrB,SACA,aACmB;AACnB,KAAI,YAAY,SAAS,QAAQ;AAChC,QAAM,cAAc,SAAS,EAAE;AAC/B,SAAO,WAAW,QAAQ;;CAE3B,MAAM,QAAQ,YAAY,YAAY;CACtC,MAAM,QAAQ,MAAM,cAAc,SAAS,KAAK,IAAI,OAAO,4BAA4B,CAAC;AAExF,SAAQ,YAAY,MAApB;EACC,KAAK,QACJ,QAAO;EACR,KAAK,OACJ,QAAO,WAAW,MAAM;EACzB,KAAK,OACJ,KAAI;AACH,UAAO,KAAK,MAAM,WAAW,MAAM,CAAC;WAC5B,OAAO;AACf,OAAI,iBAAiB,wBAAyB,OAAM;AACpD,SAAM,IAAI,wBAAwB,+CAA+C,IAAI;;EAEvF,KAAK,YACJ,QAAO,cAAc,SAAS,MAAM;;;AAIvC,SAAgB,iBAAiB,OAAyC;AACzE,QACC,OAAO,UAAU,YACjB,UAAU,QACT,MAA+C,2BAA2B;;AAI7E,eAAsB,0BACrB,OACA,UAA0C,EAAE,EACT;AACnC,KAAI,CAAC,iBAAiB,MAAM,CAC3B,OAAM,IAAI,UAAU,iDAAiD;AAEtE,KAAI,CAAC,OAAO,UAAU,MAAM,OAAO,IAAI,MAAM,SAAS,OAAO,MAAM,SAAS,IAC3E,OAAM,IAAI,UAAU,6DAA6D;AAElF,KAAI,CAAC,MAAM,QAAQ,MAAM,QAAQ,CAChC,OAAM,IAAI,UAAU,uCAAuC;CAG5D,MAAM,gBAAgB,IAAI,SAAS;AACnC,MAAK,MAAM,SAAS,MAAM,SAAS;AAClC,MACC,CAAC,MAAM,QAAQ,MAAM,IACrB,MAAM,WAAW,KACjB,OAAO,MAAM,OAAO,YACpB,OAAO,MAAM,OAAO,SAEpB,OAAM,IAAI,UAAU,uCAAuC;AAE5D,gBAAc,OAAO,MAAM,IAAI,MAAM,GAAG;;CAGzC,MAAM,UAAU,IAAI,SAAS;AAC7B,eAAc,SAAS,aAAa,SAAS;AAC5C,MAAI,yBAAyB,IAAI,KAAK,EAAE;AACvC,WAAQ,IAAI,MAAM,YAAY;AAC9B;;AAED,MAAI,SAAS,WAAY;AACzB,MAAI,QAAQ,uBAAuB;AAClC,WAAQ,IAAI,MAAM,YAAY;AAC9B;;AAED,MAAI,QAAQ,iBACX,KAAI;GACH,MAAM,aAAa,IAAI,IAAI,QAAQ,iBAAiB;AACpD,OAAI,IAAI,IAAI,aAAa,WAAW,CAAC,WAAW,WAAW,QAAQ;AAClE,YAAQ,IAAI,MAAM,YAAY;AAC9B;;UAEM;AAET,QAAM,IAAI,UAAU,iEAAiE;GACpF;AACF,KAAI,CAAC,QAAQ,IAAI,eAAe,CAAE,SAAQ,IAAI,gBAAgB,2BAA2B;CACzF,MAAM,aAAa,QAAQ,IAAI,eAAe,IAAI,4BAChD,MAAM,KAAK,EAAE,CAAC,GACd,MAAM,CACN,aAAa;AACf,KAAI,sBAAsB,IAAI,UAAU,IAAI,0BAA0B,KAAK,UAAU,CACpF,OAAM,IAAI,UAAU,kCAAkC,UAAU,kBAAkB;AAEnF,SAAQ,IAAI,0BAA0B,UAAU;AAChD,SAAQ,IAAI,2BAA2B,8BAA8B;AACrE,SAAQ,IAAI,mBAAmB,cAAc;CAE7C,IAAI,OAAO,IAAI,YAAY;AAC3B,KAAI,MAAM,SAAS,KAClB,KAAI,MAAM,KAAK,SAAS,UAAU,OAAO,MAAM,KAAK,UAAU,SAC7D,QAAO,KAAK,OAAO,MAAM,KAAK,MAAM;UAC1B,MAAM,KAAK,SAAS,WAAW,MAAM,KAAK,iBAAiB,WACrE,QAAO,IAAI,WAAW,MAAM,KAAK,MAAM;KAEvC,OAAM,IAAI,UAAU,mCAAmC;AAGzD,KAAI,KAAK,aAAa,4BACrB,OAAM,IAAI,UACT,0CAA0C,4BAA4B,QACtE;AAGF,QAAO;EACN,QAAQ,MAAM;EACd,SAAS,CAAC,GAAG,QAAQ,SAAS,CAAC;EAC/B;EACA;;AAGF,SAAgB,4BACf,MACA,QACW;CACX,MAAM,iBAAiB,KAAK,WAAW,OAAO,KAAK,WAAW,OAAO,KAAK,WAAW;CACrF,MAAM,OAAO,WAAW,UAAU,iBAAiB,OAAO,IAAI,WAAW,KAAK,KAAK,CAAC;AACpF,QAAO,IAAI,SAAS,MAAM;EAAE,QAAQ,KAAK;EAAQ,SAAS,KAAK;EAAS,CAAC"}