emdash 1.0.1 → 1.2.0

package/dist/astro/routes/api/sections/_slug_.mjs

@@ -1,26 +1,26 @@
 import "../../../../dialect-helpers-7_IqPdh9.mjs";
 import "../../../../config-CvmjJcVw.mjs";
-import "../../../../base64-DvnNgP7e.mjs";
+import "../../../../base64-BQBZwXCx.mjs";
 import "../../../../request-cache-C4CIo5ad.mjs";
 import "../../../../url-Dn3IStq8.mjs";
-import "../../../../types-j6MBDjlZ.mjs";
-import "../../../../loader-D4edocWH.mjs";
-import "../../../../errors-CjXd1LgH.mjs";
-import "../../../../errors-CNvATh_7.mjs";
-import "../../../../settings-CwcrX-Ay.mjs";
-import "../../../../site-settings-B7vGFRDT.mjs";
-import { a as handleSectionUpdate, n as handleSectionDelete, r as handleSectionGet } from "../../../../sections-CIhqs3Ao.mjs";
-import { a as unwrapResult, i as requireDb, r as handleError, t as apiError } from "../../../../error-DIYXAVk4.mjs";
-import { n as parseBody, t as isParseError } from "../../../../parse-5Y0W39xR.mjs";
-import "../../../../redirects-1nhdEaTq.mjs";
-import { P as updateSectionBody } from "../../../../entry-lock-yIkBduqJ.mjs";
-import "../../../../media-Bs6qmlVl.mjs";
-import "../../../../comments-zrTgWBSg.mjs";
-import "../../../../byline-fields-BYbTptTU.mjs";
-import "../../../../menus-mC_XTxD7.mjs";
-import "../../../../status-C6IrSLMT.mjs";
+import "../../../../types-C-Xp0CcN.mjs";
+import "../../../../loader-CetY659y.mjs";
+import "../../../../errors-CjtE5aWF.mjs";
+import "../../../../errors-hskQ0C8G.mjs";
+import "../../../../settings-GaZ5sVgg.mjs";
+import "../../../../site-settings-CDdT4mVm.mjs";
+import { a as handleSectionUpdate, n as handleSectionDelete, r as handleSectionGet } from "../../../../sections-Ccq9ZgyD.mjs";
+import { a as unwrapResult, i as requireDb, r as handleError, t as apiError } from "../../../../error-DxgQdaZ_.mjs";
+import { n as parseBody, t as isParseError } from "../../../../parse-Cn5aSk1N.mjs";
+import "../../../../redirects-DFT7Wr-e.mjs";
+import { P as updateSectionBody } from "../../../../entry-lock-Cjz0h45X.mjs";
+import "../../../../media-CRKsKlfK.mjs";
+import "../../../../comments-BzmIKVb2.mjs";
+import "../../../../byline-fields-Bze3ZdAw.mjs";
+import "../../../../menus-D1HC8npj.mjs";
+import "../../../../status-Dl85BK39.mjs";
 import "../../../../api/schemas/index.mjs";
-import { i as requirePerm } from "../../../../authorize-CTGywswM.mjs";
+import { i as requirePerm } from "../../../../authorize-TdIGpRSE.mjs";
 
 //#region src/astro/routes/api/sections/[slug].ts
 const prerender = false;

package/dist/astro/routes/api/sections/index.mjs

@@ -1,26 +1,26 @@
 import "../../../../dialect-helpers-7_IqPdh9.mjs";
 import "../../../../config-CvmjJcVw.mjs";
-import "../../../../base64-DvnNgP7e.mjs";
+import "../../../../base64-BQBZwXCx.mjs";
 import "../../../../request-cache-C4CIo5ad.mjs";
 import "../../../../url-Dn3IStq8.mjs";
-import "../../../../types-j6MBDjlZ.mjs";
-import "../../../../loader-D4edocWH.mjs";
-import "../../../../errors-CjXd1LgH.mjs";
-import "../../../../errors-CNvATh_7.mjs";
-import "../../../../settings-CwcrX-Ay.mjs";
-import "../../../../site-settings-B7vGFRDT.mjs";
-import { i as handleSectionList, t as handleSectionCreate } from "../../../../sections-CIhqs3Ao.mjs";
-import { a as unwrapResult, i as requireDb, r as handleError } from "../../../../error-DIYXAVk4.mjs";
-import { i as parseQuery, n as parseBody, t as isParseError } from "../../../../parse-5Y0W39xR.mjs";
-import "../../../../redirects-1nhdEaTq.mjs";
-import { A as createSectionBody, N as sectionsListQuery } from "../../../../entry-lock-yIkBduqJ.mjs";
-import "../../../../media-Bs6qmlVl.mjs";
-import "../../../../comments-zrTgWBSg.mjs";
-import "../../../../byline-fields-BYbTptTU.mjs";
-import "../../../../menus-mC_XTxD7.mjs";
-import "../../../../status-C6IrSLMT.mjs";
+import "../../../../types-C-Xp0CcN.mjs";
+import "../../../../loader-CetY659y.mjs";
+import "../../../../errors-CjtE5aWF.mjs";
+import "../../../../errors-hskQ0C8G.mjs";
+import "../../../../settings-GaZ5sVgg.mjs";
+import "../../../../site-settings-CDdT4mVm.mjs";
+import { i as handleSectionList, t as handleSectionCreate } from "../../../../sections-Ccq9ZgyD.mjs";
+import { a as unwrapResult, i as requireDb, r as handleError } from "../../../../error-DxgQdaZ_.mjs";
+import { i as parseQuery, n as parseBody, t as isParseError } from "../../../../parse-Cn5aSk1N.mjs";
+import "../../../../redirects-DFT7Wr-e.mjs";
+import { A as createSectionBody, N as sectionsListQuery } from "../../../../entry-lock-Cjz0h45X.mjs";
+import "../../../../media-CRKsKlfK.mjs";
+import "../../../../comments-BzmIKVb2.mjs";
+import "../../../../byline-fields-Bze3ZdAw.mjs";
+import "../../../../menus-D1HC8npj.mjs";
+import "../../../../status-Dl85BK39.mjs";
 import "../../../../api/schemas/index.mjs";
-import { i as requirePerm } from "../../../../authorize-CTGywswM.mjs";
+import { i as requirePerm } from "../../../../authorize-TdIGpRSE.mjs";
 
 //#region src/astro/routes/api/sections/index.ts
 const prerender = false;

package/dist/astro/routes/api/settings/backups/archives/_name_.mjs

@@ -1,13 +1,13 @@
 import "../../../../../../dialect-helpers-7_IqPdh9.mjs";
 import "../../../../../../options-DhrI7eMv.mjs";
-import "../../../../../../base64-DvnNgP7e.mjs";
-import "../../../../../../types-j6MBDjlZ.mjs";
-import "../../../../../../errors-CjXd1LgH.mjs";
-import { t as ErrorCode } from "../../../../../../errors-CNvATh_7.mjs";
-import { a as unwrapResult, r as handleError, t as apiError } from "../../../../../../error-DIYXAVk4.mjs";
-import "../../../../../../snapshot-W36KbLmc.mjs";
-import { a as deleteBackupArchive, c as isValidArchiveName, r as BACKUP_STORAGE_PREFIX } from "../../../../../../backup-CDrPP8fI.mjs";
-import { i as requirePerm } from "../../../../../../authorize-CTGywswM.mjs";
+import "../../../../../../base64-BQBZwXCx.mjs";
+import "../../../../../../types-C-Xp0CcN.mjs";
+import "../../../../../../errors-CjtE5aWF.mjs";
+import { t as ErrorCode } from "../../../../../../errors-hskQ0C8G.mjs";
+import { a as unwrapResult, r as handleError, t as apiError } from "../../../../../../error-DxgQdaZ_.mjs";
+import "../../../../../../snapshot-BuI_2uDe.mjs";
+import { a as deleteBackupArchive, c as isValidArchiveName, r as BACKUP_STORAGE_PREFIX } from "../../../../../../backup-CZt5Mzwx.mjs";
+import { i as requirePerm } from "../../../../../../authorize-TdIGpRSE.mjs";
 
 //#region src/astro/routes/api/settings/backups/archives/[name].ts
 const prerender = false;

package/dist/astro/routes/api/settings/backups/archives/index.mjs

@@ -1,13 +1,13 @@
 import "../../../../../../dialect-helpers-7_IqPdh9.mjs";
 import "../../../../../../options-DhrI7eMv.mjs";
-import "../../../../../../base64-DvnNgP7e.mjs";
-import "../../../../../../types-j6MBDjlZ.mjs";
-import "../../../../../../errors-CjXd1LgH.mjs";
-import "../../../../../../errors-CNvATh_7.mjs";
-import { a as unwrapResult, t as apiError } from "../../../../../../error-DIYXAVk4.mjs";
-import "../../../../../../snapshot-W36KbLmc.mjs";
-import { d as runBackupToStorage, s as getBackupSettings } from "../../../../../../backup-CDrPP8fI.mjs";
-import { i as requirePerm } from "../../../../../../authorize-CTGywswM.mjs";
+import "../../../../../../base64-BQBZwXCx.mjs";
+import "../../../../../../types-C-Xp0CcN.mjs";
+import "../../../../../../errors-CjtE5aWF.mjs";
+import "../../../../../../errors-hskQ0C8G.mjs";
+import { a as unwrapResult, t as apiError } from "../../../../../../error-DxgQdaZ_.mjs";
+import "../../../../../../snapshot-BuI_2uDe.mjs";
+import { d as runBackupToStorage, s as getBackupSettings } from "../../../../../../backup-CZt5Mzwx.mjs";
+import { i as requirePerm } from "../../../../../../authorize-TdIGpRSE.mjs";
 
 //#region src/astro/routes/api/settings/backups/archives/index.ts
 const prerender = false;

package/dist/astro/routes/api/settings/backups/export.mjs

@@ -1,13 +1,13 @@
 import "../../../../../dialect-helpers-7_IqPdh9.mjs";
 import "../../../../../options-DhrI7eMv.mjs";
-import "../../../../../base64-DvnNgP7e.mjs";
-import "../../../../../types-j6MBDjlZ.mjs";
-import "../../../../../errors-CjXd1LgH.mjs";
-import { t as ErrorCode } from "../../../../../errors-CNvATh_7.mjs";
-import { r as handleError, t as apiError } from "../../../../../error-DIYXAVk4.mjs";
-import "../../../../../snapshot-W36KbLmc.mjs";
-import { i as archiveNameForDate, o as generateBackupJson } from "../../../../../backup-CDrPP8fI.mjs";
-import { i as requirePerm } from "../../../../../authorize-CTGywswM.mjs";
+import "../../../../../base64-BQBZwXCx.mjs";
+import "../../../../../types-C-Xp0CcN.mjs";
+import "../../../../../errors-CjtE5aWF.mjs";
+import { t as ErrorCode } from "../../../../../errors-hskQ0C8G.mjs";
+import { r as handleError, t as apiError } from "../../../../../error-DxgQdaZ_.mjs";
+import "../../../../../snapshot-BuI_2uDe.mjs";
+import { i as archiveNameForDate, o as generateBackupJson } from "../../../../../backup-CZt5Mzwx.mjs";
+import { i as requirePerm } from "../../../../../authorize-TdIGpRSE.mjs";
 
 //#region src/astro/routes/api/settings/backups/export.ts
 const prerender = false;

package/dist/astro/routes/api/settings/backups/index.mjs

@@ -1,14 +1,14 @@
 import "../../../../../dialect-helpers-7_IqPdh9.mjs";
 import "../../../../../options-DhrI7eMv.mjs";
-import "../../../../../base64-DvnNgP7e.mjs";
-import "../../../../../types-j6MBDjlZ.mjs";
-import "../../../../../errors-CjXd1LgH.mjs";
-import { t as ErrorCode } from "../../../../../errors-CNvATh_7.mjs";
-import { a as unwrapResult, n as apiSuccess, r as handleError, t as apiError } from "../../../../../error-DIYXAVk4.mjs";
-import { n as parseBody, t as isParseError } from "../../../../../parse-5Y0W39xR.mjs";
-import "../../../../../snapshot-W36KbLmc.mjs";
-import { f as updateBackupSettings, l as listBackupArchives, n as BACKUP_RETENTION_MIN, s as getBackupSettings, t as BACKUP_RETENTION_MAX } from "../../../../../backup-CDrPP8fI.mjs";
-import { i as requirePerm } from "../../../../../authorize-CTGywswM.mjs";
+import "../../../../../base64-BQBZwXCx.mjs";
+import "../../../../../types-C-Xp0CcN.mjs";
+import "../../../../../errors-CjtE5aWF.mjs";
+import { t as ErrorCode } from "../../../../../errors-hskQ0C8G.mjs";
+import { a as unwrapResult, n as apiSuccess, r as handleError, t as apiError } from "../../../../../error-DxgQdaZ_.mjs";
+import { n as parseBody, t as isParseError } from "../../../../../parse-Cn5aSk1N.mjs";
+import "../../../../../snapshot-BuI_2uDe.mjs";
+import { f as updateBackupSettings, l as listBackupArchives, n as BACKUP_RETENTION_MIN, s as getBackupSettings, t as BACKUP_RETENTION_MAX } from "../../../../../backup-CZt5Mzwx.mjs";
+import { i as requirePerm } from "../../../../../authorize-TdIGpRSE.mjs";
 import { z } from "zod";
 
 //#region src/astro/routes/api/settings/backups/index.ts

package/dist/astro/routes/api/settings/domain-notify.d.mts

@@ -0,0 +1,8 @@
+import { APIRoute } from "astro";
+
+//#region src/astro/routes/api/settings/domain-notify.d.ts
+declare const prerender = false;
+declare const POST: APIRoute;
+//#endregion
+export { POST, prerender };
+//# sourceMappingURL=domain-notify.d.mts.map

package/dist/astro/routes/api/settings/domain-notify.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"domain-notify.d.mts","names":[],"sources":["../../../../../src/astro/routes/api/settings/domain-notify.ts"],"mappings":";;;cAqBa,SAAA;AAAA,cAEA,IAAA,EAAM,QAAA"}

package/dist/astro/routes/api/settings/domain-notify.mjs

@@ -0,0 +1,125 @@
+import "../../../../after-PcEvMY_6.mjs";
+import { t as OptionsRepository } from "../../../../options-DhrI7eMv.mjs";
+import "../../../../base64-BQBZwXCx.mjs";
+import "../../../../types-C-Xp0CcN.mjs";
+import "../../../../errors-CjtE5aWF.mjs";
+import "../../../../errors-hskQ0C8G.mjs";
+import { a as unwrapResult, r as handleError, t as apiError } from "../../../../error-DxgQdaZ_.mjs";
+import { t as getChosenSiteOrigin } from "../../../../site-url-CrDZaAvo.mjs";
+import { t as getAuthMode } from "../../../../mode-eieqAWLe.mjs";
+import { t as checkRateLimit } from "../../../../rate-limit-Dvamvay-.mjs";
+import { i as requirePerm } from "../../../../authorize-TdIGpRSE.mjs";
+import { t as resolveEmailLocale } from "../../../../email-locale-DFdUA6UF.mjs";
+import { escapeHtml } from "@emdash-cms/auth";
+import { getDomainMoveEmailStrings } from "@emdash-cms/admin/locales/emails";
+import { getLocaleDir } from "@emdash-cms/admin/locales/config";
+
+//#region src/api/handlers/domain-move-notice.ts
+/**
+* Tell users that the site moved to a new address.
+*/
+function buildDomainMoveEmail(to, loginUrl, strings, locale) {
+	const url = escapeHtml(loginUrl);
+	return {
+		to,
+		subject: strings.subject,
+		text: `${strings.intro}\n\n${strings.instruction}\n\n${loginUrl}\n\n${strings.passkeyNote}`,
+		html: `
+<!DOCTYPE html>
+<html lang="${escapeHtml(locale)}" dir="${getLocaleDir(locale)}">
+<head>
+  <meta charset="utf-8">
+  <meta name="viewport" content="width=device-width, initial-scale=1.0">
+</head>
+<body style="font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, sans-serif; line-height: 1.5; color: #333; max-width: 600px; margin: 0 auto; padding: 20px;">
+  <h1 style="font-size: 24px; margin-bottom: 20px;">${escapeHtml(strings.subject)}</h1>
+  <p>${escapeHtml(strings.intro)}</p>
+  <p>${escapeHtml(strings.instruction)}</p>
+  <p style="margin: 30px 0;">
+    <a href="${url}" style="background-color: #0066cc; color: white; padding: 12px 24px; text-decoration: none; border-radius: 6px; display: inline-block;">${escapeHtml(strings.buttonLabel)}</a>
+  </p>
+  <p style="color: #666; font-size: 14px;">${escapeHtml(strings.passkeyNote)}</p>
+</body>
+</html>`
+	};
+}
+/**
+* Email every active user except the sender a link to the sign-in page at
+* `origin`. The email carries no sign-in token. Sends one email per user,
+* so a failed send for one address doesn't stop the others.
+*/
+async function handleDomainMoveNotice(db, options) {
+	try {
+		const users = await db.selectFrom("users").select("email").where("disabled", "=", 0).where("id", "!=", options.senderId).execute();
+		const loginUrl = new URL("/_emdash/admin/login", options.origin).toString();
+		let sent = 0;
+		let failed = 0;
+		for (const user of users) try {
+			await options.send(buildDomainMoveEmail(user.email, loginUrl, options.strings, options.locale));
+			sent++;
+		} catch (error) {
+			failed++;
+			console.error("[domain-move-notice] send failed:", error);
+		}
+		return {
+			success: true,
+			data: {
+				sent,
+				failed
+			}
+		};
+	} catch (error) {
+		console.error("[domain-move-notice] failed:", error);
+		return {
+			success: false,
+			error: {
+				code: "DOMAIN_MOVE_NOTICE_ERROR",
+				message: "Failed to email users"
+			}
+		};
+	}
+}
+
+//#endregion
+//#region src/astro/routes/api/settings/domain-notify.ts
+/**
+* POST /_emdash/api/settings/domain/notify
+*
+* Emails every active user except the sender that the site now lives at
+* its chosen address (the configured `siteUrl`, otherwise the Site URL),
+* with a link to the sign-in page there. The email carries no sign-in token.
+* Sites that sign in through an external provider are refused.
+*/
+const prerender = false;
+const POST = async ({ request, locals }) => {
+	const { emdash, user } = locals;
+	if (!emdash?.db) return apiError("NOT_CONFIGURED", "EmDash is not initialized", 500);
+	if (!user) return apiError("NOT_AUTHENTICATED", "Not authenticated", 401);
+	const denied = requirePerm(user, "users:manage");
+	if (denied) return denied;
+	if (locals.tokenScopes !== void 0) return apiError("FORBIDDEN", "Emailing users requires a signed-in session", 403);
+	if (getAuthMode(emdash.config).type !== "passkey") return apiError("NOT_SUPPORTED", "Users sign in through an external provider", 400);
+	if (!emdash.email?.isAvailable()) return apiError("EMAIL_NOT_CONFIGURED", "No email provider is configured. Install and activate an email provider plugin.", 503);
+	try {
+		const origin = await getChosenSiteOrigin(emdash.db, emdash.config);
+		if (!origin) return apiError("NO_SITE_URL", "Set a Site URL before emailing users about it", 409);
+		if (!(await checkRateLimit(emdash.db, "site", "settings/domain/notify", 3, 3600)).allowed) return apiError("RATE_LIMITED", "Users were emailed recently. Try again later.", 429);
+		const siteOptions = await new OptionsRepository(emdash.db).getMany(["emdash:site_title", "emdash:locale"]);
+		const siteName = siteOptions.get("emdash:site_title") || "EmDash";
+		const locale = resolveEmailLocale(siteOptions.get("emdash:locale"), request);
+		const email = emdash.email;
+		return unwrapResult(await handleDomainMoveNotice(emdash.db, {
+			origin,
+			strings: await getDomainMoveEmailStrings(locale, siteName, new URL(origin).host),
+			locale,
+			senderId: user.id,
+			send: (message) => email.send(message, "system")
+		}));
+	} catch (error) {
+		return handleError(error, "Failed to email users", "DOMAIN_MOVE_NOTICE_ERROR");
+	}
+};
+
+//#endregion
+export { POST, prerender };
+//# sourceMappingURL=domain-notify.mjs.map

package/dist/astro/routes/api/settings/domain-notify.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"domain-notify.mjs","names":[],"sources":["../../../../../src/api/handlers/domain-move-notice.ts","../../../../../src/astro/routes/api/settings/domain-notify.ts"],"sourcesContent":["/**\n * Tell users that the site moved to a new address.\n */\n\nimport { getLocaleDir } from \"@emdash-cms/admin/locales/config\";\nimport type { DomainMoveEmailStrings } from \"@emdash-cms/admin/locales/emails\";\nimport { escapeHtml, type EmailMessage } from \"@emdash-cms/auth\";\nimport type { Kysely } from \"kysely\";\n\nimport type { Database } from \"../../database/types.js\";\nimport type { ApiResult } from \"../types.js\";\n\nexport interface DomainMoveNoticeOptions {\n\t/** Origin users should sign in at, e.g. `https://example.com`. */\n\torigin: string;\n\tstrings: DomainMoveEmailStrings;\n\tlocale: string;\n\t/** The user sending the notice; they are not emailed. */\n\tsenderId: string;\n\tsend: (message: EmailMessage) => Promise<void>;\n}\n\nexport function buildDomainMoveEmail(\n\tto: string,\n\tloginUrl: string,\n\tstrings: DomainMoveEmailStrings,\n\tlocale: string,\n): EmailMessage {\n\tconst url = escapeHtml(loginUrl);\n\treturn {\n\t\tto,\n\t\tsubject: strings.subject,\n\t\ttext: `${strings.intro}\\n\\n${strings.instruction}\\n\\n${loginUrl}\\n\\n${strings.passkeyNote}`,\n\t\thtml: `\n<!DOCTYPE html>\n<html lang=\"${escapeHtml(locale)}\" dir=\"${getLocaleDir(locale)}\">\n<head>\n  <meta charset=\"utf-8\">\n  <meta name=\"viewport\" content=\"width=device-width, initial-scale=1.0\">\n</head>\n<body style=\"font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, sans-serif; line-height: 1.5; color: #333; max-width: 600px; margin: 0 auto; padding: 20px;\">\n  <h1 style=\"font-size: 24px; margin-bottom: 20px;\">${escapeHtml(strings.subject)}</h1>\n  <p>${escapeHtml(strings.intro)}</p>\n  <p>${escapeHtml(strings.instruction)}</p>\n  <p style=\"margin: 30px 0;\">\n    <a href=\"${url}\" style=\"background-color: #0066cc; color: white; padding: 12px 24px; text-decoration: none; border-radius: 6px; display: inline-block;\">${escapeHtml(strings.buttonLabel)}</a>\n  </p>\n  <p style=\"color: #666; font-size: 14px;\">${escapeHtml(strings.passkeyNote)}</p>\n</body>\n</html>`,\n\t};\n}\n\n/**\n * Email every active user except the sender a link to the sign-in page at\n * `origin`. The email carries no sign-in token. Sends one email per user,\n * so a failed send for one address doesn't stop the others.\n */\nexport async function handleDomainMoveNotice(\n\tdb: Kysely<Database>,\n\toptions: DomainMoveNoticeOptions,\n): Promise<ApiResult<{ sent: number; failed: number }>> {\n\ttry {\n\t\tconst users = await db\n\t\t\t.selectFrom(\"users\")\n\t\t\t.select(\"email\")\n\t\t\t.where(\"disabled\", \"=\", 0)\n\t\t\t.where(\"id\", \"!=\", options.senderId)\n\t\t\t.execute();\n\n\t\tconst loginUrl = new URL(\"/_emdash/admin/login\", options.origin).toString();\n\t\tlet sent = 0;\n\t\tlet failed = 0;\n\t\tfor (const user of users) {\n\t\t\ttry {\n\t\t\t\t// oxlint-disable-next-line no-await-in-loop -- one send at a time keeps email providers within their rate limits\n\t\t\t\tawait options.send(\n\t\t\t\t\tbuildDomainMoveEmail(user.email, loginUrl, options.strings, options.locale),\n\t\t\t\t);\n\t\t\t\tsent++;\n\t\t\t} catch (error) {\n\t\t\t\tfailed++;\n\t\t\t\tconsole.error(\"[domain-move-notice] send failed:\", error);\n\t\t\t}\n\t\t}\n\t\treturn { success: true, data: { sent, failed } };\n\t} catch (error) {\n\t\tconsole.error(\"[domain-move-notice] failed:\", error);\n\t\treturn {\n\t\t\tsuccess: false,\n\t\t\terror: { code: \"DOMAIN_MOVE_NOTICE_ERROR\", message: \"Failed to email users\" },\n\t\t};\n\t}\n}\n","/**\n * POST /_emdash/api/settings/domain/notify\n *\n * Emails every active user except the sender that the site now lives at\n * its chosen address (the configured `siteUrl`, otherwise the Site URL),\n * with a link to the sign-in page there. The email carries no sign-in token.\n * Sites that sign in through an external provider are refused.\n */\n\nimport { getDomainMoveEmailStrings } from \"@emdash-cms/admin/locales/emails\";\nimport type { APIRoute } from \"astro\";\n\nimport { requirePerm } from \"#api/authorize.js\";\nimport { resolveEmailLocale } from \"#api/email-locale.js\";\nimport { apiError, handleError, unwrapResult } from \"#api/error.js\";\nimport { handleDomainMoveNotice } from \"#api/handlers/domain-move-notice.js\";\nimport { getChosenSiteOrigin } from \"#api/site-url.js\";\nimport { getAuthMode } from \"#auth/mode.js\";\nimport { checkRateLimit } from \"#auth/rate-limit.js\";\nimport { OptionsRepository } from \"#db/repositories/options.js\";\n\nexport const prerender = false;\n\nexport const POST: APIRoute = async ({ request, locals }) => {\n\tconst { emdash, user } = locals;\n\tif (!emdash?.db) {\n\t\treturn apiError(\"NOT_CONFIGURED\", \"EmDash is not initialized\", 500);\n\t}\n\n\tif (!user) return apiError(\"NOT_AUTHENTICATED\", \"Not authenticated\", 401);\n\tconst denied = requirePerm(user, \"users:manage\");\n\tif (denied) return denied;\n\tif (locals.tokenScopes !== undefined) {\n\t\treturn apiError(\"FORBIDDEN\", \"Emailing users requires a signed-in session\", 403);\n\t}\n\tif (getAuthMode(emdash.config).type !== \"passkey\") {\n\t\treturn apiError(\"NOT_SUPPORTED\", \"Users sign in through an external provider\", 400);\n\t}\n\n\tif (!emdash.email?.isAvailable()) {\n\t\treturn apiError(\n\t\t\t\"EMAIL_NOT_CONFIGURED\",\n\t\t\t\"No email provider is configured. Install and activate an email provider plugin.\",\n\t\t\t503,\n\t\t);\n\t}\n\n\ttry {\n\t\tconst origin = await getChosenSiteOrigin(emdash.db, emdash.config);\n\t\tif (!origin) {\n\t\t\treturn apiError(\"NO_SITE_URL\", \"Set a Site URL before emailing users about it\", 409);\n\t\t}\n\n\t\tconst rateLimit = await checkRateLimit(emdash.db, \"site\", \"settings/domain/notify\", 3, 3600);\n\t\tif (!rateLimit.allowed) {\n\t\t\treturn apiError(\"RATE_LIMITED\", \"Users were emailed recently. Try again later.\", 429);\n\t\t}\n\n\t\tconst options = new OptionsRepository(emdash.db);\n\t\tconst siteOptions = await options.getMany<string>([\"emdash:site_title\", \"emdash:locale\"]);\n\t\tconst siteName = siteOptions.get(\"emdash:site_title\") || \"EmDash\";\n\t\tconst locale = resolveEmailLocale(siteOptions.get(\"emdash:locale\"), request);\n\t\tconst email = emdash.email;\n\n\t\tconst result = await handleDomainMoveNotice(emdash.db, {\n\t\t\torigin,\n\t\t\tstrings: await getDomainMoveEmailStrings(locale, siteName, new URL(origin).host),\n\t\t\tlocale,\n\t\t\tsenderId: user.id,\n\t\t\tsend: (message) => email.send(message, \"system\"),\n\t\t});\n\t\treturn unwrapResult(result);\n\t} catch (error) {\n\t\treturn handleError(error, \"Failed to email users\", \"DOMAIN_MOVE_NOTICE_ERROR\");\n\t}\n};\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAsBA,SAAgB,qBACf,IACA,UACA,SACA,QACe;CACf,MAAM,MAAM,WAAW,SAAS;AAChC,QAAO;EACN;EACA,SAAS,QAAQ;EACjB,MAAM,GAAG,QAAQ,MAAM,MAAM,QAAQ,YAAY,MAAM,SAAS,MAAM,QAAQ;EAC9E,MAAM;;cAEM,WAAW,OAAO,CAAC,SAAS,aAAa,OAAO,CAAC;;;;;;sDAMT,WAAW,QAAQ,QAAQ,CAAC;OAC3E,WAAW,QAAQ,MAAM,CAAC;OAC1B,WAAW,QAAQ,YAAY,CAAC;;eAExB,IAAI,2IAA2I,WAAW,QAAQ,YAAY,CAAC;;6CAEjJ,WAAW,QAAQ,YAAY,CAAC;;;EAG3E;;;;;;;AAQF,eAAsB,uBACrB,IACA,SACuD;AACvD,KAAI;EACH,MAAM,QAAQ,MAAM,GAClB,WAAW,QAAQ,CACnB,OAAO,QAAQ,CACf,MAAM,YAAY,KAAK,EAAE,CACzB,MAAM,MAAM,MAAM,QAAQ,SAAS,CACnC,SAAS;EAEX,MAAM,WAAW,IAAI,IAAI,wBAAwB,QAAQ,OAAO,CAAC,UAAU;EAC3E,IAAI,OAAO;EACX,IAAI,SAAS;AACb,OAAK,MAAM,QAAQ,MAClB,KAAI;AAEH,SAAM,QAAQ,KACb,qBAAqB,KAAK,OAAO,UAAU,QAAQ,SAAS,QAAQ,OAAO,CAC3E;AACD;WACQ,OAAO;AACf;AACA,WAAQ,MAAM,qCAAqC,MAAM;;AAG3D,SAAO;GAAE,SAAS;GAAM,MAAM;IAAE;IAAM;IAAQ;GAAE;UACxC,OAAO;AACf,UAAQ,MAAM,gCAAgC,MAAM;AACpD,SAAO;GACN,SAAS;GACT,OAAO;IAAE,MAAM;IAA4B,SAAS;IAAyB;GAC7E;;;;;;;;;;;;;;ACtEH,MAAa,YAAY;AAEzB,MAAa,OAAiB,OAAO,EAAE,SAAS,aAAa;CAC5D,MAAM,EAAE,QAAQ,SAAS;AACzB,KAAI,CAAC,QAAQ,GACZ,QAAO,SAAS,kBAAkB,6BAA6B,IAAI;AAGpE,KAAI,CAAC,KAAM,QAAO,SAAS,qBAAqB,qBAAqB,IAAI;CACzE,MAAM,SAAS,YAAY,MAAM,eAAe;AAChD,KAAI,OAAQ,QAAO;AACnB,KAAI,OAAO,gBAAgB,OAC1B,QAAO,SAAS,aAAa,+CAA+C,IAAI;AAEjF,KAAI,YAAY,OAAO,OAAO,CAAC,SAAS,UACvC,QAAO,SAAS,iBAAiB,8CAA8C,IAAI;AAGpF,KAAI,CAAC,OAAO,OAAO,aAAa,CAC/B,QAAO,SACN,wBACA,mFACA,IACA;AAGF,KAAI;EACH,MAAM,SAAS,MAAM,oBAAoB,OAAO,IAAI,OAAO,OAAO;AAClE,MAAI,CAAC,OACJ,QAAO,SAAS,eAAe,iDAAiD,IAAI;AAIrF,MAAI,EADc,MAAM,eAAe,OAAO,IAAI,QAAQ,0BAA0B,GAAG,KAAK,EAC7E,QACd,QAAO,SAAS,gBAAgB,iDAAiD,IAAI;EAItF,MAAM,cAAc,MADJ,IAAI,kBAAkB,OAAO,GAAG,CACd,QAAgB,CAAC,qBAAqB,gBAAgB,CAAC;EACzF,MAAM,WAAW,YAAY,IAAI,oBAAoB,IAAI;EACzD,MAAM,SAAS,mBAAmB,YAAY,IAAI,gBAAgB,EAAE,QAAQ;EAC5E,MAAM,QAAQ,OAAO;AASrB,SAAO,aAPQ,MAAM,uBAAuB,OAAO,IAAI;GACtD;GACA,SAAS,MAAM,0BAA0B,QAAQ,UAAU,IAAI,IAAI,OAAO,CAAC,KAAK;GAChF;GACA,UAAU,KAAK;GACf,OAAO,YAAY,MAAM,KAAK,SAAS,SAAS;GAChD,CAAC,CACyB;UACnB,OAAO;AACf,SAAO,YAAY,OAAO,yBAAyB,2BAA2B"}

package/dist/astro/routes/api/settings/domain.d.mts

@@ -0,0 +1,9 @@
+import { APIRoute } from "astro";
+
+//#region src/astro/routes/api/settings/domain.d.ts
+declare const prerender = false;
+declare const GET: APIRoute;
+declare const POST: APIRoute;
+//#endregion
+export { GET, POST, prerender };
+//# sourceMappingURL=domain.d.mts.map

package/dist/astro/routes/api/settings/domain.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"domain.d.mts","names":[],"sources":["../../../../../src/astro/routes/api/settings/domain.ts"],"mappings":";;;cAsBa,SAAA;AAAA,cAIA,GAAA,EAAK,QAAA;AAAA,cAiBL,IAAA,EAAM,QAAA"}

package/dist/astro/routes/api/settings/domain.mjs

@@ -0,0 +1,61 @@
+import "../../../../dialect-helpers-7_IqPdh9.mjs";
+import "../../../../config-CvmjJcVw.mjs";
+import "../../../../after-PcEvMY_6.mjs";
+import "../../../../options-DhrI7eMv.mjs";
+import "../../../../secrets-Cc_O3Kp-.mjs";
+import "../../../../base64-BQBZwXCx.mjs";
+import "../../../../object-cache-Bo6DGaC9.mjs";
+import "../../../../request-cache-C4CIo5ad.mjs";
+import "../../../../types-C-Xp0CcN.mjs";
+import "../../../../media-IT8hQleU.mjs";
+import { n as siteSettingsTag } from "../../../../chrome-tags-BIKBMZYO.mjs";
+import "../../../../loader-CetY659y.mjs";
+import "../../../../errors-CjtE5aWF.mjs";
+import "../../../../errors-hskQ0C8G.mjs";
+import "../../../../settings-B1jOxAIl.mjs";
+import "../../../../ssrf-LM_0wpGA.mjs";
+import { a as unwrapResult, n as apiSuccess, r as handleError, t as apiError } from "../../../../error-DxgQdaZ_.mjs";
+import { n as parseBody, t as isParseError } from "../../../../parse-Cn5aSk1N.mjs";
+import { t as getConfiguredOrigin } from "../../../../public-url-uT1Ok2Tu.mjs";
+import { t as getChosenSiteOrigin } from "../../../../site-url-CrDZaAvo.mjs";
+import { i as requirePerm } from "../../../../authorize-TdIGpRSE.mjs";
+import { n as handleSiteDomainChange } from "../../../../site-domain-CbI51Pc2.mjs";
+import { z } from "zod";
+
+//#region src/astro/routes/api/settings/domain.ts
+const prerender = false;
+const siteDomainBody = z.object({ domain: z.string().min(1).max(253) });
+const GET = async ({ locals }) => {
+	const { emdash, user } = locals;
+	if (!emdash?.db) return apiError("NOT_CONFIGURED", "EmDash is not initialized", 500);
+	const denied = requirePerm(user, "settings:read");
+	if (denied) return denied;
+	try {
+		const siteOrigin = await getChosenSiteOrigin(emdash.db, emdash.config) ?? null;
+		return apiSuccess({
+			configuredUrl: getConfiguredOrigin(emdash.config) ?? null,
+			siteOrigin
+		});
+	} catch (error) {
+		return handleError(error, "Failed to read the site domain", "SITE_DOMAIN_ERROR");
+	}
+};
+const POST = async ({ request, locals, cache }) => {
+	const { emdash, user } = locals;
+	if (!emdash?.db) return apiError("NOT_CONFIGURED", "EmDash is not initialized", 500);
+	const denied = requirePerm(user, "settings:manage");
+	if (denied) return denied;
+	try {
+		const body = await parseBody(request, siteDomainBody);
+		if (isParseError(body)) return body;
+		const result = await handleSiteDomainChange(emdash.db, body.domain);
+		if (result.success && cache?.enabled) await cache.invalidate({ tags: [siteSettingsTag()] });
+		return unwrapResult(result);
+	} catch (error) {
+		return handleError(error, "Failed to change the site domain", "SITE_DOMAIN_ERROR");
+	}
+};
+
+//#endregion
+export { GET, POST, prerender };
+//# sourceMappingURL=domain.mjs.map

package/dist/astro/routes/api/settings/domain.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"domain.mjs","names":[],"sources":["../../../../../src/astro/routes/api/settings/domain.ts"],"sourcesContent":["/**\n * Site domain endpoint\n *\n * GET  /_emdash/api/settings/domain - The site URL set by the deployment\n *      configuration, if any, which takes precedence over the Site URL for\n *      links in emails and plugins, and `siteOrigin`, the origin sign-in\n *      handover links to (null until a Site URL or `siteUrl` is set).\n * POST /_emdash/api/settings/domain - Verify a new domain and store it as the\n *      Site URL.\n */\n\nimport type { APIRoute } from \"astro\";\nimport { z } from \"zod\";\n\nimport { requirePerm } from \"#api/authorize.js\";\nimport { apiError, apiSuccess, handleError, unwrapResult } from \"#api/error.js\";\nimport { handleSiteDomainChange } from \"#api/handlers/site-domain.js\";\nimport { isParseError, parseBody } from \"#api/parse.js\";\nimport { getConfiguredOrigin } from \"#api/public-url.js\";\nimport { getChosenSiteOrigin } from \"#api/site-url.js\";\nimport { siteSettingsTag } from \"#cache/chrome-tags.js\";\n\nexport const prerender = false;\n\nconst siteDomainBody = z.object({ domain: z.string().min(1).max(253) });\n\nexport const GET: APIRoute = async ({ locals }) => {\n\tconst { emdash, user } = locals;\n\tif (!emdash?.db) {\n\t\treturn apiError(\"NOT_CONFIGURED\", \"EmDash is not initialized\", 500);\n\t}\n\n\tconst denied = requirePerm(user, \"settings:read\");\n\tif (denied) return denied;\n\n\ttry {\n\t\tconst siteOrigin = (await getChosenSiteOrigin(emdash.db, emdash.config)) ?? null;\n\t\treturn apiSuccess({ configuredUrl: getConfiguredOrigin(emdash.config) ?? null, siteOrigin });\n\t} catch (error) {\n\t\treturn handleError(error, \"Failed to read the site domain\", \"SITE_DOMAIN_ERROR\");\n\t}\n};\n\nexport const POST: APIRoute = async ({ request, locals, cache }) => {\n\tconst { emdash, user } = locals;\n\tif (!emdash?.db) {\n\t\treturn apiError(\"NOT_CONFIGURED\", \"EmDash is not initialized\", 500);\n\t}\n\n\tconst denied = requirePerm(user, \"settings:manage\");\n\tif (denied) return denied;\n\n\ttry {\n\t\tconst body = await parseBody(request, siteDomainBody);\n\t\tif (isParseError(body)) return body;\n\n\t\tconst result = await handleSiteDomainChange(emdash.db, body.domain);\n\t\tif (result.success && cache?.enabled) await cache.invalidate({ tags: [siteSettingsTag()] });\n\t\treturn unwrapResult(result);\n\t} catch (error) {\n\t\treturn handleError(error, \"Failed to change the site domain\", \"SITE_DOMAIN_ERROR\");\n\t}\n};\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;AAsBA,MAAa,YAAY;AAEzB,MAAM,iBAAiB,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC;AAEvE,MAAa,MAAgB,OAAO,EAAE,aAAa;CAClD,MAAM,EAAE,QAAQ,SAAS;AACzB,KAAI,CAAC,QAAQ,GACZ,QAAO,SAAS,kBAAkB,6BAA6B,IAAI;CAGpE,MAAM,SAAS,YAAY,MAAM,gBAAgB;AACjD,KAAI,OAAQ,QAAO;AAEnB,KAAI;EACH,MAAM,aAAc,MAAM,oBAAoB,OAAO,IAAI,OAAO,OAAO,IAAK;AAC5E,SAAO,WAAW;GAAE,eAAe,oBAAoB,OAAO,OAAO,IAAI;GAAM;GAAY,CAAC;UACpF,OAAO;AACf,SAAO,YAAY,OAAO,kCAAkC,oBAAoB;;;AAIlF,MAAa,OAAiB,OAAO,EAAE,SAAS,QAAQ,YAAY;CACnE,MAAM,EAAE,QAAQ,SAAS;AACzB,KAAI,CAAC,QAAQ,GACZ,QAAO,SAAS,kBAAkB,6BAA6B,IAAI;CAGpE,MAAM,SAAS,YAAY,MAAM,kBAAkB;AACnD,KAAI,OAAQ,QAAO;AAEnB,KAAI;EACH,MAAM,OAAO,MAAM,UAAU,SAAS,eAAe;AACrD,MAAI,aAAa,KAAK,CAAE,QAAO;EAE/B,MAAM,SAAS,MAAM,uBAAuB,OAAO,IAAI,KAAK,OAAO;AACnE,MAAI,OAAO,WAAW,OAAO,QAAS,OAAM,MAAM,WAAW,EAAE,MAAM,CAAC,iBAAiB,CAAC,EAAE,CAAC;AAC3F,SAAO,aAAa,OAAO;UACnB,OAAO;AACf,SAAO,YAAY,OAAO,oCAAoC,oBAAoB"}

package/dist/astro/routes/api/settings/email.mjs

@@ -1,11 +1,11 @@
 import { t as OptionsRepository } from "../../../../options-DhrI7eMv.mjs";
-import "../../../../base64-DvnNgP7e.mjs";
-import "../../../../types-j6MBDjlZ.mjs";
-import "../../../../errors-CjXd1LgH.mjs";
-import "../../../../errors-CNvATh_7.mjs";
-import { n as apiSuccess, r as handleError, t as apiError } from "../../../../error-DIYXAVk4.mjs";
-import { n as parseBody, t as isParseError } from "../../../../parse-5Y0W39xR.mjs";
-import { i as requirePerm } from "../../../../authorize-CTGywswM.mjs";
+import "../../../../base64-BQBZwXCx.mjs";
+import "../../../../types-C-Xp0CcN.mjs";
+import "../../../../errors-CjtE5aWF.mjs";
+import "../../../../errors-hskQ0C8G.mjs";
+import { n as apiSuccess, r as handleError, t as apiError } from "../../../../error-DxgQdaZ_.mjs";
+import { n as parseBody, t as isParseError } from "../../../../parse-Cn5aSk1N.mjs";
+import { i as requirePerm } from "../../../../authorize-TdIGpRSE.mjs";
 import { z } from "zod";
 import { escapeHtml } from "@emdash-cms/auth";
 

package/dist/astro/routes/api/settings.mjs

@@ -2,32 +2,32 @@ import "../../../dialect-helpers-7_IqPdh9.mjs";
 import "../../../config-CvmjJcVw.mjs";
 import "../../../after-PcEvMY_6.mjs";
 import "../../../options-DhrI7eMv.mjs";
-import "../../../base64-DvnNgP7e.mjs";
-import "../../../secrets-CIi0nFiR.mjs";
+import "../../../secrets-Cc_O3Kp-.mjs";
+import "../../../base64-BQBZwXCx.mjs";
 import "../../../object-cache-Bo6DGaC9.mjs";
 import "../../../request-cache-C4CIo5ad.mjs";
 import "../../../url-Dn3IStq8.mjs";
-import "../../../types-j6MBDjlZ.mjs";
-import "../../../media-CputjGE1.mjs";
-import { n as siteSettingsTag } from "../../../chrome-tags-CKELm-bo.mjs";
-import "../../../loader-D4edocWH.mjs";
-import "../../../errors-CjXd1LgH.mjs";
-import "../../../errors-CNvATh_7.mjs";
-import "../../../settings-CwcrX-Ay.mjs";
-import "../../../site-settings-B7vGFRDT.mjs";
-import "../../../settings-D_cJtT48.mjs";
-import { n as handleSettingsUpdate, t as handleSettingsGet } from "../../../settings-tnPQN3Z2.mjs";
-import { a as unwrapResult, r as handleError, t as apiError } from "../../../error-DIYXAVk4.mjs";
-import { n as parseBody, t as isParseError } from "../../../parse-5Y0W39xR.mjs";
-import "../../../redirects-1nhdEaTq.mjs";
-import { O as settingsUpdateBody } from "../../../entry-lock-yIkBduqJ.mjs";
-import "../../../media-Bs6qmlVl.mjs";
-import "../../../comments-zrTgWBSg.mjs";
-import "../../../byline-fields-BYbTptTU.mjs";
-import "../../../menus-mC_XTxD7.mjs";
-import "../../../status-C6IrSLMT.mjs";
+import "../../../types-C-Xp0CcN.mjs";
+import "../../../media-IT8hQleU.mjs";
+import { n as siteSettingsTag } from "../../../chrome-tags-BIKBMZYO.mjs";
+import "../../../loader-CetY659y.mjs";
+import "../../../errors-CjtE5aWF.mjs";
+import "../../../errors-hskQ0C8G.mjs";
+import "../../../settings-GaZ5sVgg.mjs";
+import "../../../site-settings-CDdT4mVm.mjs";
+import "../../../settings-B1jOxAIl.mjs";
+import { n as handleSettingsUpdate, t as handleSettingsGet } from "../../../settings-Bc1IBl1t.mjs";
+import { a as unwrapResult, r as handleError, t as apiError } from "../../../error-DxgQdaZ_.mjs";
+import { n as parseBody, t as isParseError } from "../../../parse-Cn5aSk1N.mjs";
+import "../../../redirects-DFT7Wr-e.mjs";
+import { O as settingsUpdateBody } from "../../../entry-lock-Cjz0h45X.mjs";
+import "../../../media-CRKsKlfK.mjs";
+import "../../../comments-BzmIKVb2.mjs";
+import "../../../byline-fields-Bze3ZdAw.mjs";
+import "../../../menus-D1HC8npj.mjs";
+import "../../../status-Dl85BK39.mjs";
 import "../../../api/schemas/index.mjs";
-import { i as requirePerm } from "../../../authorize-CTGywswM.mjs";
+import { i as requirePerm } from "../../../authorize-TdIGpRSE.mjs";
 
 //#region src/astro/routes/api/settings.ts
 const prerender = false;

package/dist/astro/routes/api/setup/admin-verify.mjs

@@ -1,29 +1,29 @@
 import "../../../../dialect-helpers-7_IqPdh9.mjs";
 import "../../../../config-CvmjJcVw.mjs";
 import { t as OptionsRepository } from "../../../../options-DhrI7eMv.mjs";
-import "../../../../base64-DvnNgP7e.mjs";
+import "../../../../base64-BQBZwXCx.mjs";
 import "../../../../url-Dn3IStq8.mjs";
-import "../../../../types-j6MBDjlZ.mjs";
-import "../../../../errors-CjXd1LgH.mjs";
-import "../../../../errors-CNvATh_7.mjs";
-import "../../../../settings-CwcrX-Ay.mjs";
-import "../../../../site-settings-B7vGFRDT.mjs";
-import { n as apiSuccess, r as handleError, t as apiError } from "../../../../error-DIYXAVk4.mjs";
-import { n as parseBody, t as isParseError } from "../../../../parse-5Y0W39xR.mjs";
-import "../../../../redirects-1nhdEaTq.mjs";
-import "../../../../entry-lock-yIkBduqJ.mjs";
-import "../../../../media-Bs6qmlVl.mjs";
-import "../../../../comments-zrTgWBSg.mjs";
-import { l as setupAdminVerifyBody } from "../../../../byline-fields-BYbTptTU.mjs";
-import "../../../../menus-mC_XTxD7.mjs";
-import "../../../../status-C6IrSLMT.mjs";
+import "../../../../types-C-Xp0CcN.mjs";
+import "../../../../errors-CjtE5aWF.mjs";
+import "../../../../errors-hskQ0C8G.mjs";
+import "../../../../settings-GaZ5sVgg.mjs";
+import "../../../../site-settings-CDdT4mVm.mjs";
+import { n as apiSuccess, r as handleError, t as apiError } from "../../../../error-DxgQdaZ_.mjs";
+import { n as parseBody, t as isParseError } from "../../../../parse-Cn5aSk1N.mjs";
+import "../../../../redirects-DFT7Wr-e.mjs";
+import "../../../../entry-lock-Cjz0h45X.mjs";
+import "../../../../media-CRKsKlfK.mjs";
+import "../../../../comments-BzmIKVb2.mjs";
+import { l as setupAdminVerifyBody } from "../../../../byline-fields-Bze3ZdAw.mjs";
+import "../../../../menus-D1HC8npj.mjs";
+import "../../../../status-Dl85BK39.mjs";
 import "../../../../api/schemas/index.mjs";
-import { r as getPublicOrigin } from "../../../../public-url-7j0cpCFc.mjs";
-import { n as validateAllowedOrigins, t as getConfiguredAllowedOrigins } from "../../../../allowed-origins-D78QvbTO.mjs";
-import { n as createChallengeStore } from "../../../../challenge-store-VePApay4.mjs";
-import { t as createFirstAdmin } from "../../../../setup-complete-BOrI10UY.mjs";
-import { t as getPasskeyConfig } from "../../../../passkey-config-PiQ5cBnt.mjs";
-import { t as SETUP_NONCE_COOKIE } from "../../../../setup-nonce-0XTBLTsX.mjs";
+import { i as getPublicOrigin } from "../../../../public-url-uT1Ok2Tu.mjs";
+import { n as validateAllowedOrigins, t as getConfiguredAllowedOrigins } from "../../../../allowed-origins-CLpHGGlc.mjs";
+import { n as createChallengeStore } from "../../../../challenge-store-BHgdPVze.mjs";
+import { t as createFirstAdmin } from "../../../../setup-complete-DidMAWJS.mjs";
+import { t as getPasskeyConfig } from "../../../../passkey-config-mMFRQUCj.mjs";
+import { t as SETUP_NONCE_COOKIE } from "../../../../setup-nonce-DKl4S4c6.mjs";
 import { secureCompare } from "@emdash-cms/auth";
 import { createKyselyAdapter } from "@emdash-cms/auth/adapters/kysely";
 import { registerPasskey, verifyRegistrationResponse } from "@emdash-cms/auth/passkey";