emdash 1.1.0 → 1.2.0

package/dist/astro/routes/api/media.mjs

@@ -4,38 +4,38 @@ import "../../../base64-BQBZwXCx.mjs";
 import "../../../request-cache-C4CIo5ad.mjs";
 import "../../../url-Dn3IStq8.mjs";
 import "../../../types-C-Xp0CcN.mjs";
-import { t as MediaRepository } from "../../../media-BzUDu7nl.mjs";
+import { t as MediaRepository } from "../../../media-IT8hQleU.mjs";
 import "../../../dist-Cfu8mMBs.mjs";
 import { i as resolveUploadMimeType, t as matchesMimeAllowlist } from "../../../mime-B5M9R53H.mjs";
 import { t as enrichImageMetadata } from "../../../enrich-Duu4sV3a.mjs";
-import "../../../fts-manager-DacCYIe4.mjs";
+import "../../../fts-manager-WJCN8uU6.mjs";
 import "../../../collection-slugs-cache-B2Gs9Jwx.mjs";
 import "../../../capture-triggers-C9JKoIdT.mjs";
 import "../../../activation-xomsCMJg.mjs";
-import "../../../media-usage-work-C734aq6s.mjs";
-import "../../../registry-DaXmUsD4.mjs";
+import "../../../media-usage-work-cgDYGvrt.mjs";
+import "../../../registry-DeZ27gVi.mjs";
 import { n as computeContentHash } from "../../../hash-C4DFoJ7Z.mjs";
 import "../../../zod-generator-BQilAboC.mjs";
-import "../../../errors-CuHQRiBW.mjs";
-import "../../../canonical-Y1dpjCnp.mjs";
-import "../../../digest-xIpR3o64.mjs";
-import "../../../errors-DTE6C3K_.mjs";
-import "../../../content-repair-B7wnbzhN.mjs";
-import "../../../settings-WHr45II1.mjs";
-import "../../../site-settings-KJOqJW6W.mjs";
-import { a as handleMediaUsageSummaries } from "../../../media-usage-CHHpV7ee.mjs";
-import { a as unwrapResult, n as apiSuccess, r as handleError, t as apiError } from "../../../error-B0rgPgsQ.mjs";
-import { i as parseQuery, t as isParseError } from "../../../parse-CmFDTGzp.mjs";
-import "../../../redirects-D4EWeXAo.mjs";
-import "../../../entry-lock-sxz2PGAT.mjs";
-import { A as mediaUploadEnsureUniqueFilenameForm, g as mediaListQuery, k as mediaUploadDeduplicateForm, l as mediaFolderIdSchema, n as DEFAULT_MAX_UPLOAD_SIZE, r as formatFileSize } from "../../../media-aahnKHze.mjs";
-import "../../../comments-BRtp992B.mjs";
-import "../../../byline-fields-DHJs0Mja.mjs";
-import "../../../menus-BQKqf0Up.mjs";
-import "../../../status-D39Fpy8R.mjs";
+import "../../../errors-CjtE5aWF.mjs";
+import "../../../canonical-BUcKRYpG.mjs";
+import "../../../digest-xJmyPv2r.mjs";
+import "../../../errors-hskQ0C8G.mjs";
+import "../../../content-repair-havk1F0-.mjs";
+import "../../../settings-GaZ5sVgg.mjs";
+import "../../../site-settings-CDdT4mVm.mjs";
+import { a as handleMediaUsageSummaries } from "../../../media-usage-DEPHZZ9X.mjs";
+import { a as unwrapResult, n as apiSuccess, r as handleError, t as apiError } from "../../../error-DxgQdaZ_.mjs";
+import { i as parseQuery, t as isParseError } from "../../../parse-Cn5aSk1N.mjs";
+import "../../../redirects-DFT7Wr-e.mjs";
+import "../../../entry-lock-Cjz0h45X.mjs";
+import { A as mediaUploadEnsureUniqueFilenameForm, g as mediaListQuery, j as mediaUploadMetadataForm, k as mediaUploadDeduplicateForm, l as mediaFolderIdSchema, n as DEFAULT_MAX_UPLOAD_SIZE, r as formatFileSize } from "../../../media-CRKsKlfK.mjs";
+import "../../../comments-BzmIKVb2.mjs";
+import "../../../byline-fields-Bze3ZdAw.mjs";
+import "../../../menus-D1HC8npj.mjs";
+import "../../../status-Dl85BK39.mjs";
 import "../../../api/schemas/index.mjs";
-import { n as resolveFieldAllowlist, t as GLOBAL_UPLOAD_ALLOWLIST } from "../../../media-allowlist-RMrjo8TU.mjs";
-import { i as requirePerm, t as canReadMediaUsageCount } from "../../../authorize-DeWfk--K.mjs";
+import { n as resolveFieldAllowlist, t as GLOBAL_UPLOAD_ALLOWLIST } from "../../../media-allowlist-Ct6wvnT2.mjs";
+import { i as requirePerm, t as canReadMediaUsageCount } from "../../../authorize-TdIGpRSE.mjs";
 import { ulid } from "ulidx";
 import * as path from "node:path";
 
@@ -139,6 +139,14 @@ const POST = async ({ request, locals }) => {
 				folderId = folderResult.data;
 			}
 		}
+		const metadataResult = mediaUploadMetadataForm.safeParse({
+			alt: formData.get("alt") ?? void 0,
+			caption: formData.get("caption") ?? void 0
+		});
+		if (!metadataResult.success) return apiError("VALIDATION_ERROR", "Invalid request data", 400, { issues: metadataResult.error.issues.map((issue) => ({
+			path: issue.path.join("."),
+			message: issue.message
+		})) });
 		const fieldIdEntry = formData.get("fieldId");
 		const fieldId = typeof fieldIdEntry === "string" && fieldIdEntry.length > 0 ? fieldIdEntry : null;
 		const allowlist = (fieldId ? await resolveFieldAllowlist(emdash.db, fieldId) : null) ?? [...GLOBAL_UPLOAD_ALLOWLIST];
@@ -184,6 +192,8 @@ const POST = async ({ request, locals }) => {
 			filename,
 			mimeType,
 			size: file.size,
+			alt: metadataResult.data.alt,
+			caption: metadataResult.data.caption,
 			width: width ?? enriched.width,
 			height: height ?? enriched.height,
 			storageKey,

package/dist/astro/routes/api/media.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"media.mjs","names":[],"sources":["../../../../src/astro/routes/api/media.ts"],"sourcesContent":["/**\n * Media list and upload endpoint\n *\n * GET /_emdash/api/media - List all media\n * POST /_emdash/api/media - Upload new media (via configured storage adapter)\n */\n\nimport * as path from \"node:path\";\n\nimport type { APIRoute } from \"astro\";\nimport { ulid } from \"ulidx\";\n\nimport { canReadMediaUsageCount, requirePerm } from \"#api/authorize.js\";\nimport { apiError, apiSuccess, handleError, unwrapResult } from \"#api/error.js\";\nimport { GLOBAL_UPLOAD_ALLOWLIST, resolveFieldAllowlist } from \"#api/handlers/media-allowlist.js\";\nimport { handleMediaUsageSummaries } from \"#api/handlers/media-usage.js\";\nimport { isParseError, parseQuery } from \"#api/parse.js\";\nimport {\n\tDEFAULT_MAX_UPLOAD_SIZE,\n\tformatFileSize,\n\tmediaFolderIdSchema,\n\tmediaListQuery,\n\tmediaUploadDeduplicateForm,\n\tmediaUploadEnsureUniqueFilenameForm,\n} from \"#api/schemas.js\";\nimport { MediaRepository } from \"#db/repositories/media.js\";\nimport { enrichImageMetadata } from \"#media/enrich.js\";\nimport { matchesMimeAllowlist, resolveUploadMimeType } from \"#media/mime.js\";\nimport { computeContentHash } from \"#utils/hash.js\";\n\nimport type { MediaItem } from \"../../types.js\";\n\nexport const prerender = false;\n\n/**\n * Add URL to media items\n * Uses relative URLs to ensure portability across deployments\n */\nfunction addUrlToMedia(item: MediaItem): MediaItem & { url: string } {\n\treturn {\n\t\t...item,\n\t\turl: `/_emdash/api/media/file/${item.storageKey}`,\n\t};\n}\n\n/**\n * List media items\n */\nexport const GET: APIRoute = async ({ request, locals }) => {\n\tconst { emdash, user } = locals;\n\n\tconst denied = requirePerm(user, \"media:read\");\n\tif (denied) return denied;\n\n\tif (!emdash?.handleMediaList) {\n\t\treturn apiError(\"NOT_CONFIGURED\", \"EmDash is not initialized\", 500);\n\t}\n\n\tconst url = new URL(request.url);\n\tconst query = parseQuery(url, mediaListQuery);\n\tif (isParseError(query)) return query;\n\n\tconst result = await emdash.handleMediaList({\n\t\tcursor: query.cursor,\n\t\tpage: query.page,\n\t\tlimit: query.limit,\n\t\tmimeType: query.mimeType,\n\t\tq: query.q,\n\t\tfolderId: query.folderId === \"unfiled\" ? null : query.folderId,\n\t});\n\n\tif (!result.success) {\n\t\treturn unwrapResult(result);\n\t}\n\n\t// Add URL to each media item (relative URLs for portability)\n\tconst itemsWithUrl = result.data.items.map((item) => addUrlToMedia(item));\n\tif (query.includeUsage !== \"1\") {\n\t\treturn apiSuccess({\n\t\t\titems: itemsWithUrl,\n\t\t\tnextCursor: result.data.nextCursor,\n\t\t\ttotalCount: result.data.totalCount,\n\t\t});\n\t}\n\n\tconst includeCount = canReadMediaUsageCount(user, locals.tokenScopes);\n\tconst usageResult = await handleMediaUsageSummaries(\n\t\temdash.db,\n\t\titemsWithUrl.map((item) => item.id),\n\t\t{ includeCount },\n\t);\n\tif (!usageResult.success) return unwrapResult(usageResult);\n\n\tconst itemsWithUsage = [];\n\tfor (const item of itemsWithUrl) {\n\t\tconst usage = usageResult.data[item.id];\n\t\tif (!usage) return apiError(\"MEDIA_USAGE_READ_ERROR\", \"Failed to read media usage\", 500);\n\t\titemsWithUsage.push({ ...item, usage });\n\t}\n\n\treturn apiSuccess({\n\t\titems: itemsWithUsage,\n\t\tnextCursor: result.data.nextCursor,\n\t\ttotalCount: result.data.totalCount,\n\t});\n};\n\n/**\n * Upload media file\n *\n * Uses the configured storage adapter to store the file.\n */\nexport const POST: APIRoute = async ({ request, locals }) => {\n\tconst { emdash, user } = locals;\n\n\tconst denied = requirePerm(user, \"media:upload\");\n\tif (denied) return denied;\n\n\tif (!emdash?.handleMediaCreate) {\n\t\treturn apiError(\"NOT_CONFIGURED\", \"EmDash is not initialized\", 500);\n\t}\n\n\tif (!emdash?.storage) {\n\t\treturn apiError(\"NO_STORAGE\", \"Storage not configured\", 500);\n\t}\n\n\ttry {\n\t\tconst rawMax = emdash.config.maxUploadSize ?? DEFAULT_MAX_UPLOAD_SIZE;\n\t\tif (!Number.isFinite(rawMax) || rawMax <= 0) {\n\t\t\treturn apiError(\"CONFIGURATION_ERROR\", \"Invalid maxUploadSize configuration\", 500);\n\t\t}\n\t\tconst maxUploadSize = rawMax;\n\n\t\t// Best-effort size check before buffering the full multipart body\n\t\tconst contentLength = request.headers.get(\"Content-Length\");\n\t\tif (contentLength && parseInt(contentLength, 10) > maxUploadSize) {\n\t\t\treturn apiError(\"PAYLOAD_TOO_LARGE\", \"Upload too large\", 413);\n\t\t}\n\n\t\tconst formData = await request.formData();\n\t\tconst fileEntry = formData.get(\"file\");\n\t\tconst file = fileEntry instanceof File ? fileEntry : null;\n\n\t\tif (!file) {\n\t\t\treturn apiError(\"NO_FILE\", \"No file provided\", 400);\n\t\t}\n\n\t\tconst deduplicateResult = mediaUploadDeduplicateForm.safeParse(\n\t\t\tformData.get(\"deduplicate\") ?? undefined,\n\t\t);\n\t\tif (!deduplicateResult.success) {\n\t\t\treturn apiError(\"VALIDATION_ERROR\", \"Invalid request data\", 400, {\n\t\t\t\tissues: deduplicateResult.error.issues.map((issue) => ({\n\t\t\t\t\tpath: \"deduplicate\",\n\t\t\t\t\tmessage: issue.message,\n\t\t\t\t})),\n\t\t\t});\n\t\t}\n\t\tconst ensureUniqueFilenameResult = mediaUploadEnsureUniqueFilenameForm.safeParse(\n\t\t\tformData.get(\"ensureUniqueFilename\") ?? undefined,\n\t\t);\n\t\tif (!ensureUniqueFilenameResult.success) {\n\t\t\treturn apiError(\"VALIDATION_ERROR\", \"Invalid request data\", 400);\n\t\t}\n\t\tconst folderEntry = formData.get(\"folderId\");\n\t\tlet folderId: string | null | undefined;\n\t\tif (folderEntry !== null) {\n\t\t\tif (typeof folderEntry !== \"string\") {\n\t\t\t\treturn apiError(\"VALIDATION_ERROR\", \"Invalid request data\", 400);\n\t\t\t}\n\t\t\tif (folderEntry === \"unfiled\") {\n\t\t\t\tfolderId = null;\n\t\t\t} else {\n\t\t\t\tconst folderResult = mediaFolderIdSchema.safeParse(folderEntry);\n\t\t\t\tif (!folderResult.success) {\n\t\t\t\t\treturn apiError(\"VALIDATION_ERROR\", \"Invalid request data\", 400);\n\t\t\t\t}\n\t\t\t\tfolderId = folderResult.data;\n\t\t\t}\n\t\t}\n\n\t\t// Validate file type — widen the allowlist when a field-specific list is configured\n\t\tconst fieldIdEntry = formData.get(\"fieldId\");\n\t\tconst fieldId =\n\t\t\ttypeof fieldIdEntry === \"string\" && fieldIdEntry.length > 0 ? fieldIdEntry : null;\n\n\t\tconst fieldAllowlist = fieldId ? await resolveFieldAllowlist(emdash.db, fieldId) : null;\n\t\tconst allowlist = fieldAllowlist ?? [...GLOBAL_UPLOAD_ALLOWLIST];\n\n\t\t// Browsers that don't know a format (e.g. `.jxl`) may send an empty or\n\t\t// generic type; fall back to the extension map so allowed uploads aren't\n\t\t// rejected just because the client can't identify them.\n\t\tconst mimeType = resolveUploadMimeType(file.name, file.type);\n\t\tif (!mimeType || !matchesMimeAllowlist(mimeType, allowlist)) {\n\t\t\treturn apiError(\"INVALID_TYPE\", \"File type not allowed\", 400);\n\t\t}\n\n\t\t// Check file size before buffering\n\t\tif (file.size > maxUploadSize) {\n\t\t\treturn apiError(\n\t\t\t\t\"PAYLOAD_TOO_LARGE\",\n\t\t\t\t`File exceeds maximum size of ${formatFileSize(maxUploadSize)}`,\n\t\t\t\t413,\n\t\t\t);\n\t\t}\n\n\t\t// Get file content and compute hash\n\t\tconst buffer = new Uint8Array(await file.arrayBuffer());\n\t\tconst contentHash = await computeContentHash(buffer);\n\n\t\t// Check for existing media with same content hash (deduplication)\n\t\tconst repo = new MediaRepository(emdash.db);\n\t\tif (deduplicateResult.data) {\n\t\t\tconst existing = await repo.findByContentHash(contentHash);\n\t\t\tif (existing) {\n\t\t\t\tconst itemWithUrl = addUrlToMedia(existing);\n\t\t\t\treturn apiSuccess({ item: itemWithUrl, deduplicated: true });\n\t\t\t}\n\t\t}\n\t\tconst filename = ensureUniqueFilenameResult.data\n\t\t\t? await repo.findAvailableFilename(file.name)\n\t\t\t: file.name;\n\n\t\t// Generate unique storage key\n\t\tconst id = ulid();\n\t\tconst ext = path.extname(filename) || \"\";\n\t\tconst storageKey = `${id}${ext}`;\n\n\t\t// Upload to storage using the configured adapter\n\t\tawait emdash.storage.upload({\n\t\t\tkey: storageKey,\n\t\t\tbody: buffer,\n\t\t\tcontentType: mimeType,\n\t\t});\n\n\t\t// Get image dimensions from form data (sent by client)\n\t\tconst widthEntry = formData.get(\"width\");\n\t\tconst widthStr = typeof widthEntry === \"string\" ? widthEntry : null;\n\t\tconst heightEntry = formData.get(\"height\");\n\t\tconst heightStr = typeof heightEntry === \"string\" ? heightEntry : null;\n\t\tconst width = widthStr ? parseInt(widthStr, 10) : undefined;\n\t\tconst height = heightStr ? parseInt(heightStr, 10) : undefined;\n\n\t\t// Derive dimensions + LQIP placeholders via the shared helper.\n\t\t// If the client sent a downscaled thumbnail, decode that for the blurhash\n\t\t// (avoids OOM on large originals on memory-constrained runtimes).\n\t\tconst thumbnailEntry = formData.get(\"thumbnail\");\n\t\tconst thumbnail = thumbnailEntry instanceof File ? thumbnailEntry : null;\n\t\tconst enriched = await enrichImageMetadata(buffer, mimeType, {\n\t\t\tknownDimensions: width != null && height != null ? { width, height } : undefined,\n\t\t\tplaceholder: thumbnail\n\t\t\t\t? { bytes: new Uint8Array(await thumbnail.arrayBuffer()), contentType: thumbnail.type }\n\t\t\t\t: undefined,\n\t\t});\n\n\t\t// Create media record\n\t\tconst result = await emdash.handleMediaCreate({\n\t\t\tfilename,\n\t\t\tmimeType,\n\t\t\tsize: file.size,\n\t\t\t// Client dimensions win over server header dimensions: the browser's\n\t\t\t// naturalWidth/Height apply EXIF orientation, while image-size reports\n\t\t\t// raw (pre-orientation) header dims — swapped for 90°/270° JPEGs.\n\t\t\twidth: width ?? enriched.width,\n\t\t\theight: height ?? enriched.height,\n\t\t\tstorageKey,\n\t\t\tcontentHash,\n\t\t\tblurhash: enriched.blurhash,\n\t\t\tdominantColor: enriched.dominantColor,\n\t\t\tauthorId: user?.id,\n\t\t\tfolderId,\n\t\t});\n\n\t\tif (!result.success) {\n\t\t\t// Clean up the uploaded file on failure\n\t\t\ttry {\n\t\t\t\tawait emdash.storage.delete(storageKey);\n\t\t\t} catch {\n\t\t\t\t// Ignore cleanup errors\n\t\t\t}\n\t\t\treturn unwrapResult(result);\n\t\t}\n\n\t\t// Add URL to the response (relative URL for portability)\n\t\tconst itemWithUrl = addUrlToMedia(result.data.item);\n\n\t\treturn apiSuccess({ item: itemWithUrl }, 201);\n\t} catch (error) {\n\t\treturn handleError(error, \"Upload failed\", \"UPLOAD_ERROR\");\n\t}\n};\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAgCA,MAAa,YAAY;;;;;AAMzB,SAAS,cAAc,MAA8C;AACpE,QAAO;EACN,GAAG;EACH,KAAK,2BAA2B,KAAK;EACrC;;;;;AAMF,MAAa,MAAgB,OAAO,EAAE,SAAS,aAAa;CAC3D,MAAM,EAAE,QAAQ,SAAS;CAEzB,MAAM,SAAS,YAAY,MAAM,aAAa;AAC9C,KAAI,OAAQ,QAAO;AAEnB,KAAI,CAAC,QAAQ,gBACZ,QAAO,SAAS,kBAAkB,6BAA6B,IAAI;CAIpE,MAAM,QAAQ,WADF,IAAI,IAAI,QAAQ,IAAI,EACF,eAAe;AAC7C,KAAI,aAAa,MAAM,CAAE,QAAO;CAEhC,MAAM,SAAS,MAAM,OAAO,gBAAgB;EAC3C,QAAQ,MAAM;EACd,MAAM,MAAM;EACZ,OAAO,MAAM;EACb,UAAU,MAAM;EAChB,GAAG,MAAM;EACT,UAAU,MAAM,aAAa,YAAY,OAAO,MAAM;EACtD,CAAC;AAEF,KAAI,CAAC,OAAO,QACX,QAAO,aAAa,OAAO;CAI5B,MAAM,eAAe,OAAO,KAAK,MAAM,KAAK,SAAS,cAAc,KAAK,CAAC;AACzE,KAAI,MAAM,iBAAiB,IAC1B,QAAO,WAAW;EACjB,OAAO;EACP,YAAY,OAAO,KAAK;EACxB,YAAY,OAAO,KAAK;EACxB,CAAC;CAGH,MAAM,eAAe,uBAAuB,MAAM,OAAO,YAAY;CACrE,MAAM,cAAc,MAAM,0BACzB,OAAO,IACP,aAAa,KAAK,SAAS,KAAK,GAAG,EACnC,EAAE,cAAc,CAChB;AACD,KAAI,CAAC,YAAY,QAAS,QAAO,aAAa,YAAY;CAE1D,MAAM,iBAAiB,EAAE;AACzB,MAAK,MAAM,QAAQ,cAAc;EAChC,MAAM,QAAQ,YAAY,KAAK,KAAK;AACpC,MAAI,CAAC,MAAO,QAAO,SAAS,0BAA0B,8BAA8B,IAAI;AACxF,iBAAe,KAAK;GAAE,GAAG;GAAM;GAAO,CAAC;;AAGxC,QAAO,WAAW;EACjB,OAAO;EACP,YAAY,OAAO,KAAK;EACxB,YAAY,OAAO,KAAK;EACxB,CAAC;;;;;;;AAQH,MAAa,OAAiB,OAAO,EAAE,SAAS,aAAa;CAC5D,MAAM,EAAE,QAAQ,SAAS;CAEzB,MAAM,SAAS,YAAY,MAAM,eAAe;AAChD,KAAI,OAAQ,QAAO;AAEnB,KAAI,CAAC,QAAQ,kBACZ,QAAO,SAAS,kBAAkB,6BAA6B,IAAI;AAGpE,KAAI,CAAC,QAAQ,QACZ,QAAO,SAAS,cAAc,0BAA0B,IAAI;AAG7D,KAAI;EACH,MAAM,SAAS,OAAO,OAAO,iBAAiB;AAC9C,MAAI,CAAC,OAAO,SAAS,OAAO,IAAI,UAAU,EACzC,QAAO,SAAS,uBAAuB,uCAAuC,IAAI;EAEnF,MAAM,gBAAgB;EAGtB,MAAM,gBAAgB,QAAQ,QAAQ,IAAI,iBAAiB;AAC3D,MAAI,iBAAiB,SAAS,eAAe,GAAG,GAAG,cAClD,QAAO,SAAS,qBAAqB,oBAAoB,IAAI;EAG9D,MAAM,WAAW,MAAM,QAAQ,UAAU;EACzC,MAAM,YAAY,SAAS,IAAI,OAAO;EACtC,MAAM,OAAO,qBAAqB,OAAO,YAAY;AAErD,MAAI,CAAC,KACJ,QAAO,SAAS,WAAW,oBAAoB,IAAI;EAGpD,MAAM,oBAAoB,2BAA2B,UACpD,SAAS,IAAI,cAAc,IAAI,OAC/B;AACD,MAAI,CAAC,kBAAkB,QACtB,QAAO,SAAS,oBAAoB,wBAAwB,KAAK,EAChE,QAAQ,kBAAkB,MAAM,OAAO,KAAK,WAAW;GACtD,MAAM;GACN,SAAS,MAAM;GACf,EAAE,EACH,CAAC;EAEH,MAAM,6BAA6B,oCAAoC,UACtE,SAAS,IAAI,uBAAuB,IAAI,OACxC;AACD,MAAI,CAAC,2BAA2B,QAC/B,QAAO,SAAS,oBAAoB,wBAAwB,IAAI;EAEjE,MAAM,cAAc,SAAS,IAAI,WAAW;EAC5C,IAAI;AACJ,MAAI,gBAAgB,MAAM;AACzB,OAAI,OAAO,gBAAgB,SAC1B,QAAO,SAAS,oBAAoB,wBAAwB,IAAI;AAEjE,OAAI,gBAAgB,UACnB,YAAW;QACL;IACN,MAAM,eAAe,oBAAoB,UAAU,YAAY;AAC/D,QAAI,CAAC,aAAa,QACjB,QAAO,SAAS,oBAAoB,wBAAwB,IAAI;AAEjE,eAAW,aAAa;;;EAK1B,MAAM,eAAe,SAAS,IAAI,UAAU;EAC5C,MAAM,UACL,OAAO,iBAAiB,YAAY,aAAa,SAAS,IAAI,eAAe;EAG9E,MAAM,aADiB,UAAU,MAAM,sBAAsB,OAAO,IAAI,QAAQ,GAAG,SAC/C,CAAC,GAAG,wBAAwB;EAKhE,MAAM,WAAW,sBAAsB,KAAK,MAAM,KAAK,KAAK;AAC5D,MAAI,CAAC,YAAY,CAAC,qBAAqB,UAAU,UAAU,CAC1D,QAAO,SAAS,gBAAgB,yBAAyB,IAAI;AAI9D,MAAI,KAAK,OAAO,cACf,QAAO,SACN,qBACA,gCAAgC,eAAe,cAAc,IAC7D,IACA;EAIF,MAAM,SAAS,IAAI,WAAW,MAAM,KAAK,aAAa,CAAC;EACvD,MAAM,cAAc,MAAM,mBAAmB,OAAO;EAGpD,MAAM,OAAO,IAAI,gBAAgB,OAAO,GAAG;AAC3C,MAAI,kBAAkB,MAAM;GAC3B,MAAM,WAAW,MAAM,KAAK,kBAAkB,YAAY;AAC1D,OAAI,SAEH,QAAO,WAAW;IAAE,MADA,cAAc,SAAS;IACJ,cAAc;IAAM,CAAC;;EAG9D,MAAM,WAAW,2BAA2B,OACzC,MAAM,KAAK,sBAAsB,KAAK,KAAK,GAC3C,KAAK;EAKR,MAAM,aAAa,GAFR,MAAM,GACL,KAAK,QAAQ,SAAS,IAAI;AAItC,QAAM,OAAO,QAAQ,OAAO;GAC3B,KAAK;GACL,MAAM;GACN,aAAa;GACb,CAAC;EAGF,MAAM,aAAa,SAAS,IAAI,QAAQ;EACxC,MAAM,WAAW,OAAO,eAAe,WAAW,aAAa;EAC/D,MAAM,cAAc,SAAS,IAAI,SAAS;EAC1C,MAAM,YAAY,OAAO,gBAAgB,WAAW,cAAc;EAClE,MAAM,QAAQ,WAAW,SAAS,UAAU,GAAG,GAAG;EAClD,MAAM,SAAS,YAAY,SAAS,WAAW,GAAG,GAAG;EAKrD,MAAM,iBAAiB,SAAS,IAAI,YAAY;EAChD,MAAM,YAAY,0BAA0B,OAAO,iBAAiB;EACpE,MAAM,WAAW,MAAM,oBAAoB,QAAQ,UAAU;GAC5D,iBAAiB,SAAS,QAAQ,UAAU,OAAO;IAAE;IAAO;IAAQ,GAAG;GACvE,aAAa,YACV;IAAE,OAAO,IAAI,WAAW,MAAM,UAAU,aAAa,CAAC;IAAE,aAAa,UAAU;IAAM,GACrF;GACH,CAAC;EAGF,MAAM,SAAS,MAAM,OAAO,kBAAkB;GAC7C;GACA;GACA,MAAM,KAAK;GAIX,OAAO,SAAS,SAAS;GACzB,QAAQ,UAAU,SAAS;GAC3B;GACA;GACA,UAAU,SAAS;GACnB,eAAe,SAAS;GACxB,UAAU,MAAM;GAChB;GACA,CAAC;AAEF,MAAI,CAAC,OAAO,SAAS;AAEpB,OAAI;AACH,UAAM,OAAO,QAAQ,OAAO,WAAW;WAChC;AAGR,UAAO,aAAa,OAAO;;AAM5B,SAAO,WAAW,EAAE,MAFA,cAAc,OAAO,KAAK,KAAK,EAEZ,EAAE,IAAI;UACrC,OAAO;AACf,SAAO,YAAY,OAAO,iBAAiB,eAAe"}
+{"version":3,"file":"media.mjs","names":[],"sources":["../../../../src/astro/routes/api/media.ts"],"sourcesContent":["/**\n * Media list and upload endpoint\n *\n * GET /_emdash/api/media - List all media\n * POST /_emdash/api/media - Upload new media (via configured storage adapter)\n */\n\nimport * as path from \"node:path\";\n\nimport type { APIRoute } from \"astro\";\nimport { ulid } from \"ulidx\";\n\nimport { canReadMediaUsageCount, requirePerm } from \"#api/authorize.js\";\nimport { apiError, apiSuccess, handleError, unwrapResult } from \"#api/error.js\";\nimport { GLOBAL_UPLOAD_ALLOWLIST, resolveFieldAllowlist } from \"#api/handlers/media-allowlist.js\";\nimport { handleMediaUsageSummaries } from \"#api/handlers/media-usage.js\";\nimport { isParseError, parseQuery } from \"#api/parse.js\";\nimport {\n\tDEFAULT_MAX_UPLOAD_SIZE,\n\tformatFileSize,\n\tmediaFolderIdSchema,\n\tmediaListQuery,\n\tmediaUploadDeduplicateForm,\n\tmediaUploadEnsureUniqueFilenameForm,\n\tmediaUploadMetadataForm,\n} from \"#api/schemas.js\";\nimport { MediaRepository } from \"#db/repositories/media.js\";\nimport { enrichImageMetadata } from \"#media/enrich.js\";\nimport { matchesMimeAllowlist, resolveUploadMimeType } from \"#media/mime.js\";\nimport { computeContentHash } from \"#utils/hash.js\";\n\nimport type { MediaItem } from \"../../types.js\";\n\nexport const prerender = false;\n\n/**\n * Add URL to media items\n * Uses relative URLs to ensure portability across deployments\n */\nfunction addUrlToMedia(item: MediaItem): MediaItem & { url: string } {\n\treturn {\n\t\t...item,\n\t\turl: `/_emdash/api/media/file/${item.storageKey}`,\n\t};\n}\n\n/**\n * List media items\n */\nexport const GET: APIRoute = async ({ request, locals }) => {\n\tconst { emdash, user } = locals;\n\n\tconst denied = requirePerm(user, \"media:read\");\n\tif (denied) return denied;\n\n\tif (!emdash?.handleMediaList) {\n\t\treturn apiError(\"NOT_CONFIGURED\", \"EmDash is not initialized\", 500);\n\t}\n\n\tconst url = new URL(request.url);\n\tconst query = parseQuery(url, mediaListQuery);\n\tif (isParseError(query)) return query;\n\n\tconst result = await emdash.handleMediaList({\n\t\tcursor: query.cursor,\n\t\tpage: query.page,\n\t\tlimit: query.limit,\n\t\tmimeType: query.mimeType,\n\t\tq: query.q,\n\t\tfolderId: query.folderId === \"unfiled\" ? null : query.folderId,\n\t});\n\n\tif (!result.success) {\n\t\treturn unwrapResult(result);\n\t}\n\n\t// Add URL to each media item (relative URLs for portability)\n\tconst itemsWithUrl = result.data.items.map((item) => addUrlToMedia(item));\n\tif (query.includeUsage !== \"1\") {\n\t\treturn apiSuccess({\n\t\t\titems: itemsWithUrl,\n\t\t\tnextCursor: result.data.nextCursor,\n\t\t\ttotalCount: result.data.totalCount,\n\t\t});\n\t}\n\n\tconst includeCount = canReadMediaUsageCount(user, locals.tokenScopes);\n\tconst usageResult = await handleMediaUsageSummaries(\n\t\temdash.db,\n\t\titemsWithUrl.map((item) => item.id),\n\t\t{ includeCount },\n\t);\n\tif (!usageResult.success) return unwrapResult(usageResult);\n\n\tconst itemsWithUsage = [];\n\tfor (const item of itemsWithUrl) {\n\t\tconst usage = usageResult.data[item.id];\n\t\tif (!usage) return apiError(\"MEDIA_USAGE_READ_ERROR\", \"Failed to read media usage\", 500);\n\t\titemsWithUsage.push({ ...item, usage });\n\t}\n\n\treturn apiSuccess({\n\t\titems: itemsWithUsage,\n\t\tnextCursor: result.data.nextCursor,\n\t\ttotalCount: result.data.totalCount,\n\t});\n};\n\n/**\n * Upload media file\n *\n * Uses the configured storage adapter to store the file.\n */\nexport const POST: APIRoute = async ({ request, locals }) => {\n\tconst { emdash, user } = locals;\n\n\tconst denied = requirePerm(user, \"media:upload\");\n\tif (denied) return denied;\n\n\tif (!emdash?.handleMediaCreate) {\n\t\treturn apiError(\"NOT_CONFIGURED\", \"EmDash is not initialized\", 500);\n\t}\n\n\tif (!emdash?.storage) {\n\t\treturn apiError(\"NO_STORAGE\", \"Storage not configured\", 500);\n\t}\n\n\ttry {\n\t\tconst rawMax = emdash.config.maxUploadSize ?? DEFAULT_MAX_UPLOAD_SIZE;\n\t\tif (!Number.isFinite(rawMax) || rawMax <= 0) {\n\t\t\treturn apiError(\"CONFIGURATION_ERROR\", \"Invalid maxUploadSize configuration\", 500);\n\t\t}\n\t\tconst maxUploadSize = rawMax;\n\n\t\t// Best-effort size check before buffering the full multipart body\n\t\tconst contentLength = request.headers.get(\"Content-Length\");\n\t\tif (contentLength && parseInt(contentLength, 10) > maxUploadSize) {\n\t\t\treturn apiError(\"PAYLOAD_TOO_LARGE\", \"Upload too large\", 413);\n\t\t}\n\n\t\tconst formData = await request.formData();\n\t\tconst fileEntry = formData.get(\"file\");\n\t\tconst file = fileEntry instanceof File ? fileEntry : null;\n\n\t\tif (!file) {\n\t\t\treturn apiError(\"NO_FILE\", \"No file provided\", 400);\n\t\t}\n\n\t\tconst deduplicateResult = mediaUploadDeduplicateForm.safeParse(\n\t\t\tformData.get(\"deduplicate\") ?? undefined,\n\t\t);\n\t\tif (!deduplicateResult.success) {\n\t\t\treturn apiError(\"VALIDATION_ERROR\", \"Invalid request data\", 400, {\n\t\t\t\tissues: deduplicateResult.error.issues.map((issue) => ({\n\t\t\t\t\tpath: \"deduplicate\",\n\t\t\t\t\tmessage: issue.message,\n\t\t\t\t})),\n\t\t\t});\n\t\t}\n\t\tconst ensureUniqueFilenameResult = mediaUploadEnsureUniqueFilenameForm.safeParse(\n\t\t\tformData.get(\"ensureUniqueFilename\") ?? undefined,\n\t\t);\n\t\tif (!ensureUniqueFilenameResult.success) {\n\t\t\treturn apiError(\"VALIDATION_ERROR\", \"Invalid request data\", 400);\n\t\t}\n\t\tconst folderEntry = formData.get(\"folderId\");\n\t\tlet folderId: string | null | undefined;\n\t\tif (folderEntry !== null) {\n\t\t\tif (typeof folderEntry !== \"string\") {\n\t\t\t\treturn apiError(\"VALIDATION_ERROR\", \"Invalid request data\", 400);\n\t\t\t}\n\t\t\tif (folderEntry === \"unfiled\") {\n\t\t\t\tfolderId = null;\n\t\t\t} else {\n\t\t\t\tconst folderResult = mediaFolderIdSchema.safeParse(folderEntry);\n\t\t\t\tif (!folderResult.success) {\n\t\t\t\t\treturn apiError(\"VALIDATION_ERROR\", \"Invalid request data\", 400);\n\t\t\t\t}\n\t\t\t\tfolderId = folderResult.data;\n\t\t\t}\n\t\t}\n\t\tconst metadataResult = mediaUploadMetadataForm.safeParse({\n\t\t\talt: formData.get(\"alt\") ?? undefined,\n\t\t\tcaption: formData.get(\"caption\") ?? undefined,\n\t\t});\n\t\tif (!metadataResult.success) {\n\t\t\treturn apiError(\"VALIDATION_ERROR\", \"Invalid request data\", 400, {\n\t\t\t\tissues: metadataResult.error.issues.map((issue) => ({\n\t\t\t\t\tpath: issue.path.join(\".\"),\n\t\t\t\t\tmessage: issue.message,\n\t\t\t\t})),\n\t\t\t});\n\t\t}\n\n\t\t// Validate file type — widen the allowlist when a field-specific list is configured\n\t\tconst fieldIdEntry = formData.get(\"fieldId\");\n\t\tconst fieldId =\n\t\t\ttypeof fieldIdEntry === \"string\" && fieldIdEntry.length > 0 ? fieldIdEntry : null;\n\n\t\tconst fieldAllowlist = fieldId ? await resolveFieldAllowlist(emdash.db, fieldId) : null;\n\t\tconst allowlist = fieldAllowlist ?? [...GLOBAL_UPLOAD_ALLOWLIST];\n\n\t\t// Browsers that don't know a format (e.g. `.jxl`) may send an empty or\n\t\t// generic type; fall back to the extension map so allowed uploads aren't\n\t\t// rejected just because the client can't identify them.\n\t\tconst mimeType = resolveUploadMimeType(file.name, file.type);\n\t\tif (!mimeType || !matchesMimeAllowlist(mimeType, allowlist)) {\n\t\t\treturn apiError(\"INVALID_TYPE\", \"File type not allowed\", 400);\n\t\t}\n\n\t\t// Check file size before buffering\n\t\tif (file.size > maxUploadSize) {\n\t\t\treturn apiError(\n\t\t\t\t\"PAYLOAD_TOO_LARGE\",\n\t\t\t\t`File exceeds maximum size of ${formatFileSize(maxUploadSize)}`,\n\t\t\t\t413,\n\t\t\t);\n\t\t}\n\n\t\t// Get file content and compute hash\n\t\tconst buffer = new Uint8Array(await file.arrayBuffer());\n\t\tconst contentHash = await computeContentHash(buffer);\n\n\t\t// Check for existing media with same content hash (deduplication)\n\t\tconst repo = new MediaRepository(emdash.db);\n\t\tif (deduplicateResult.data) {\n\t\t\tconst existing = await repo.findByContentHash(contentHash);\n\t\t\tif (existing) {\n\t\t\t\tconst itemWithUrl = addUrlToMedia(existing);\n\t\t\t\treturn apiSuccess({ item: itemWithUrl, deduplicated: true });\n\t\t\t}\n\t\t}\n\t\tconst filename = ensureUniqueFilenameResult.data\n\t\t\t? await repo.findAvailableFilename(file.name)\n\t\t\t: file.name;\n\n\t\t// Generate unique storage key\n\t\tconst id = ulid();\n\t\tconst ext = path.extname(filename) || \"\";\n\t\tconst storageKey = `${id}${ext}`;\n\n\t\t// Upload to storage using the configured adapter\n\t\tawait emdash.storage.upload({\n\t\t\tkey: storageKey,\n\t\t\tbody: buffer,\n\t\t\tcontentType: mimeType,\n\t\t});\n\n\t\t// Get image dimensions from form data (sent by client)\n\t\tconst widthEntry = formData.get(\"width\");\n\t\tconst widthStr = typeof widthEntry === \"string\" ? widthEntry : null;\n\t\tconst heightEntry = formData.get(\"height\");\n\t\tconst heightStr = typeof heightEntry === \"string\" ? heightEntry : null;\n\t\tconst width = widthStr ? parseInt(widthStr, 10) : undefined;\n\t\tconst height = heightStr ? parseInt(heightStr, 10) : undefined;\n\n\t\t// Derive dimensions + LQIP placeholders via the shared helper.\n\t\t// If the client sent a downscaled thumbnail, decode that for the blurhash\n\t\t// (avoids OOM on large originals on memory-constrained runtimes).\n\t\tconst thumbnailEntry = formData.get(\"thumbnail\");\n\t\tconst thumbnail = thumbnailEntry instanceof File ? thumbnailEntry : null;\n\t\tconst enriched = await enrichImageMetadata(buffer, mimeType, {\n\t\t\tknownDimensions: width != null && height != null ? { width, height } : undefined,\n\t\t\tplaceholder: thumbnail\n\t\t\t\t? { bytes: new Uint8Array(await thumbnail.arrayBuffer()), contentType: thumbnail.type }\n\t\t\t\t: undefined,\n\t\t});\n\n\t\t// Create media record\n\t\tconst result = await emdash.handleMediaCreate({\n\t\t\tfilename,\n\t\t\tmimeType,\n\t\t\tsize: file.size,\n\t\t\talt: metadataResult.data.alt,\n\t\t\tcaption: metadataResult.data.caption,\n\t\t\t// Client dimensions win over server header dimensions: the browser's\n\t\t\t// naturalWidth/Height apply EXIF orientation, while image-size reports\n\t\t\t// raw (pre-orientation) header dims — swapped for 90°/270° JPEGs.\n\t\t\twidth: width ?? enriched.width,\n\t\t\theight: height ?? enriched.height,\n\t\t\tstorageKey,\n\t\t\tcontentHash,\n\t\t\tblurhash: enriched.blurhash,\n\t\t\tdominantColor: enriched.dominantColor,\n\t\t\tauthorId: user?.id,\n\t\t\tfolderId,\n\t\t});\n\n\t\tif (!result.success) {\n\t\t\t// Clean up the uploaded file on failure\n\t\t\ttry {\n\t\t\t\tawait emdash.storage.delete(storageKey);\n\t\t\t} catch {\n\t\t\t\t// Ignore cleanup errors\n\t\t\t}\n\t\t\treturn unwrapResult(result);\n\t\t}\n\n\t\t// Add URL to the response (relative URL for portability)\n\t\tconst itemWithUrl = addUrlToMedia(result.data.item);\n\n\t\treturn apiSuccess({ item: itemWithUrl }, 201);\n\t} catch (error) {\n\t\treturn handleError(error, \"Upload failed\", \"UPLOAD_ERROR\");\n\t}\n};\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAiCA,MAAa,YAAY;;;;;AAMzB,SAAS,cAAc,MAA8C;AACpE,QAAO;EACN,GAAG;EACH,KAAK,2BAA2B,KAAK;EACrC;;;;;AAMF,MAAa,MAAgB,OAAO,EAAE,SAAS,aAAa;CAC3D,MAAM,EAAE,QAAQ,SAAS;CAEzB,MAAM,SAAS,YAAY,MAAM,aAAa;AAC9C,KAAI,OAAQ,QAAO;AAEnB,KAAI,CAAC,QAAQ,gBACZ,QAAO,SAAS,kBAAkB,6BAA6B,IAAI;CAIpE,MAAM,QAAQ,WADF,IAAI,IAAI,QAAQ,IAAI,EACF,eAAe;AAC7C,KAAI,aAAa,MAAM,CAAE,QAAO;CAEhC,MAAM,SAAS,MAAM,OAAO,gBAAgB;EAC3C,QAAQ,MAAM;EACd,MAAM,MAAM;EACZ,OAAO,MAAM;EACb,UAAU,MAAM;EAChB,GAAG,MAAM;EACT,UAAU,MAAM,aAAa,YAAY,OAAO,MAAM;EACtD,CAAC;AAEF,KAAI,CAAC,OAAO,QACX,QAAO,aAAa,OAAO;CAI5B,MAAM,eAAe,OAAO,KAAK,MAAM,KAAK,SAAS,cAAc,KAAK,CAAC;AACzE,KAAI,MAAM,iBAAiB,IAC1B,QAAO,WAAW;EACjB,OAAO;EACP,YAAY,OAAO,KAAK;EACxB,YAAY,OAAO,KAAK;EACxB,CAAC;CAGH,MAAM,eAAe,uBAAuB,MAAM,OAAO,YAAY;CACrE,MAAM,cAAc,MAAM,0BACzB,OAAO,IACP,aAAa,KAAK,SAAS,KAAK,GAAG,EACnC,EAAE,cAAc,CAChB;AACD,KAAI,CAAC,YAAY,QAAS,QAAO,aAAa,YAAY;CAE1D,MAAM,iBAAiB,EAAE;AACzB,MAAK,MAAM,QAAQ,cAAc;EAChC,MAAM,QAAQ,YAAY,KAAK,KAAK;AACpC,MAAI,CAAC,MAAO,QAAO,SAAS,0BAA0B,8BAA8B,IAAI;AACxF,iBAAe,KAAK;GAAE,GAAG;GAAM;GAAO,CAAC;;AAGxC,QAAO,WAAW;EACjB,OAAO;EACP,YAAY,OAAO,KAAK;EACxB,YAAY,OAAO,KAAK;EACxB,CAAC;;;;;;;AAQH,MAAa,OAAiB,OAAO,EAAE,SAAS,aAAa;CAC5D,MAAM,EAAE,QAAQ,SAAS;CAEzB,MAAM,SAAS,YAAY,MAAM,eAAe;AAChD,KAAI,OAAQ,QAAO;AAEnB,KAAI,CAAC,QAAQ,kBACZ,QAAO,SAAS,kBAAkB,6BAA6B,IAAI;AAGpE,KAAI,CAAC,QAAQ,QACZ,QAAO,SAAS,cAAc,0BAA0B,IAAI;AAG7D,KAAI;EACH,MAAM,SAAS,OAAO,OAAO,iBAAiB;AAC9C,MAAI,CAAC,OAAO,SAAS,OAAO,IAAI,UAAU,EACzC,QAAO,SAAS,uBAAuB,uCAAuC,IAAI;EAEnF,MAAM,gBAAgB;EAGtB,MAAM,gBAAgB,QAAQ,QAAQ,IAAI,iBAAiB;AAC3D,MAAI,iBAAiB,SAAS,eAAe,GAAG,GAAG,cAClD,QAAO,SAAS,qBAAqB,oBAAoB,IAAI;EAG9D,MAAM,WAAW,MAAM,QAAQ,UAAU;EACzC,MAAM,YAAY,SAAS,IAAI,OAAO;EACtC,MAAM,OAAO,qBAAqB,OAAO,YAAY;AAErD,MAAI,CAAC,KACJ,QAAO,SAAS,WAAW,oBAAoB,IAAI;EAGpD,MAAM,oBAAoB,2BAA2B,UACpD,SAAS,IAAI,cAAc,IAAI,OAC/B;AACD,MAAI,CAAC,kBAAkB,QACtB,QAAO,SAAS,oBAAoB,wBAAwB,KAAK,EAChE,QAAQ,kBAAkB,MAAM,OAAO,KAAK,WAAW;GACtD,MAAM;GACN,SAAS,MAAM;GACf,EAAE,EACH,CAAC;EAEH,MAAM,6BAA6B,oCAAoC,UACtE,SAAS,IAAI,uBAAuB,IAAI,OACxC;AACD,MAAI,CAAC,2BAA2B,QAC/B,QAAO,SAAS,oBAAoB,wBAAwB,IAAI;EAEjE,MAAM,cAAc,SAAS,IAAI,WAAW;EAC5C,IAAI;AACJ,MAAI,gBAAgB,MAAM;AACzB,OAAI,OAAO,gBAAgB,SAC1B,QAAO,SAAS,oBAAoB,wBAAwB,IAAI;AAEjE,OAAI,gBAAgB,UACnB,YAAW;QACL;IACN,MAAM,eAAe,oBAAoB,UAAU,YAAY;AAC/D,QAAI,CAAC,aAAa,QACjB,QAAO,SAAS,oBAAoB,wBAAwB,IAAI;AAEjE,eAAW,aAAa;;;EAG1B,MAAM,iBAAiB,wBAAwB,UAAU;GACxD,KAAK,SAAS,IAAI,MAAM,IAAI;GAC5B,SAAS,SAAS,IAAI,UAAU,IAAI;GACpC,CAAC;AACF,MAAI,CAAC,eAAe,QACnB,QAAO,SAAS,oBAAoB,wBAAwB,KAAK,EAChE,QAAQ,eAAe,MAAM,OAAO,KAAK,WAAW;GACnD,MAAM,MAAM,KAAK,KAAK,IAAI;GAC1B,SAAS,MAAM;GACf,EAAE,EACH,CAAC;EAIH,MAAM,eAAe,SAAS,IAAI,UAAU;EAC5C,MAAM,UACL,OAAO,iBAAiB,YAAY,aAAa,SAAS,IAAI,eAAe;EAG9E,MAAM,aADiB,UAAU,MAAM,sBAAsB,OAAO,IAAI,QAAQ,GAAG,SAC/C,CAAC,GAAG,wBAAwB;EAKhE,MAAM,WAAW,sBAAsB,KAAK,MAAM,KAAK,KAAK;AAC5D,MAAI,CAAC,YAAY,CAAC,qBAAqB,UAAU,UAAU,CAC1D,QAAO,SAAS,gBAAgB,yBAAyB,IAAI;AAI9D,MAAI,KAAK,OAAO,cACf,QAAO,SACN,qBACA,gCAAgC,eAAe,cAAc,IAC7D,IACA;EAIF,MAAM,SAAS,IAAI,WAAW,MAAM,KAAK,aAAa,CAAC;EACvD,MAAM,cAAc,MAAM,mBAAmB,OAAO;EAGpD,MAAM,OAAO,IAAI,gBAAgB,OAAO,GAAG;AAC3C,MAAI,kBAAkB,MAAM;GAC3B,MAAM,WAAW,MAAM,KAAK,kBAAkB,YAAY;AAC1D,OAAI,SAEH,QAAO,WAAW;IAAE,MADA,cAAc,SAAS;IACJ,cAAc;IAAM,CAAC;;EAG9D,MAAM,WAAW,2BAA2B,OACzC,MAAM,KAAK,sBAAsB,KAAK,KAAK,GAC3C,KAAK;EAKR,MAAM,aAAa,GAFR,MAAM,GACL,KAAK,QAAQ,SAAS,IAAI;AAItC,QAAM,OAAO,QAAQ,OAAO;GAC3B,KAAK;GACL,MAAM;GACN,aAAa;GACb,CAAC;EAGF,MAAM,aAAa,SAAS,IAAI,QAAQ;EACxC,MAAM,WAAW,OAAO,eAAe,WAAW,aAAa;EAC/D,MAAM,cAAc,SAAS,IAAI,SAAS;EAC1C,MAAM,YAAY,OAAO,gBAAgB,WAAW,cAAc;EAClE,MAAM,QAAQ,WAAW,SAAS,UAAU,GAAG,GAAG;EAClD,MAAM,SAAS,YAAY,SAAS,WAAW,GAAG,GAAG;EAKrD,MAAM,iBAAiB,SAAS,IAAI,YAAY;EAChD,MAAM,YAAY,0BAA0B,OAAO,iBAAiB;EACpE,MAAM,WAAW,MAAM,oBAAoB,QAAQ,UAAU;GAC5D,iBAAiB,SAAS,QAAQ,UAAU,OAAO;IAAE;IAAO;IAAQ,GAAG;GACvE,aAAa,YACV;IAAE,OAAO,IAAI,WAAW,MAAM,UAAU,aAAa,CAAC;IAAE,aAAa,UAAU;IAAM,GACrF;GACH,CAAC;EAGF,MAAM,SAAS,MAAM,OAAO,kBAAkB;GAC7C;GACA;GACA,MAAM,KAAK;GACX,KAAK,eAAe,KAAK;GACzB,SAAS,eAAe,KAAK;GAI7B,OAAO,SAAS,SAAS;GACzB,QAAQ,UAAU,SAAS;GAC3B;GACA;GACA,UAAU,SAAS;GACnB,eAAe,SAAS;GACxB,UAAU,MAAM;GAChB;GACA,CAAC;AAEF,MAAI,CAAC,OAAO,SAAS;AAEpB,OAAI;AACH,UAAM,OAAO,QAAQ,OAAO,WAAW;WAChC;AAGR,UAAO,aAAa,OAAO;;AAM5B,SAAO,WAAW,EAAE,MAFA,cAAc,OAAO,KAAK,KAAK,EAEZ,EAAE,IAAI;UACrC,OAAO;AACf,SAAO,YAAY,OAAO,iBAAiB,eAAe"}

package/dist/astro/routes/api/menus/_name_/items/_id_.mjs

@@ -4,23 +4,23 @@ import "../../../../../../base64-BQBZwXCx.mjs";
 import "../../../../../../object-cache-Bo6DGaC9.mjs";
 import "../../../../../../url-Dn3IStq8.mjs";
 import "../../../../../../types-C-Xp0CcN.mjs";
-import { a as handleMenuItemDelete, s as handleMenuItemUpdate } from "../../../../../../menus-6RHNq4ZK.mjs";
+import { a as handleMenuItemDelete, s as handleMenuItemUpdate } from "../../../../../../menus-CvVYfsuk.mjs";
 import { t as menuTag } from "../../../../../../chrome-tags-BIKBMZYO.mjs";
-import "../../../../../../errors-CuHQRiBW.mjs";
-import "../../../../../../errors-DTE6C3K_.mjs";
-import "../../../../../../settings-WHr45II1.mjs";
-import "../../../../../../site-settings-KJOqJW6W.mjs";
-import { a as unwrapResult, r as handleError, t as apiError } from "../../../../../../error-B0rgPgsQ.mjs";
-import { i as parseQuery, n as parseBody, t as isParseError } from "../../../../../../parse-CmFDTGzp.mjs";
-import { b as localeFilterQuery } from "../../../../../../redirects-D4EWeXAo.mjs";
-import "../../../../../../entry-lock-sxz2PGAT.mjs";
-import "../../../../../../media-aahnKHze.mjs";
-import "../../../../../../comments-BRtp992B.mjs";
-import "../../../../../../byline-fields-DHJs0Mja.mjs";
-import { f as updateMenuItemBody } from "../../../../../../menus-BQKqf0Up.mjs";
-import "../../../../../../status-D39Fpy8R.mjs";
+import "../../../../../../errors-CjtE5aWF.mjs";
+import "../../../../../../errors-hskQ0C8G.mjs";
+import "../../../../../../settings-GaZ5sVgg.mjs";
+import "../../../../../../site-settings-CDdT4mVm.mjs";
+import { a as unwrapResult, r as handleError, t as apiError } from "../../../../../../error-DxgQdaZ_.mjs";
+import { i as parseQuery, n as parseBody, t as isParseError } from "../../../../../../parse-Cn5aSk1N.mjs";
+import { b as localeFilterQuery } from "../../../../../../redirects-DFT7Wr-e.mjs";
+import "../../../../../../entry-lock-Cjz0h45X.mjs";
+import "../../../../../../media-CRKsKlfK.mjs";
+import "../../../../../../comments-BzmIKVb2.mjs";
+import "../../../../../../byline-fields-Bze3ZdAw.mjs";
+import { f as updateMenuItemBody } from "../../../../../../menus-D1HC8npj.mjs";
+import "../../../../../../status-Dl85BK39.mjs";
 import "../../../../../../api/schemas/index.mjs";
-import { i as requirePerm } from "../../../../../../authorize-DeWfk--K.mjs";
+import { i as requirePerm } from "../../../../../../authorize-TdIGpRSE.mjs";
 
 //#region src/astro/routes/api/menus/[name]/items/[id].ts
 const prerender = false;

package/dist/astro/routes/api/menus/_name_/items.mjs

@@ -4,23 +4,23 @@ import "../../../../../base64-BQBZwXCx.mjs";
 import "../../../../../object-cache-Bo6DGaC9.mjs";
 import "../../../../../url-Dn3IStq8.mjs";
 import "../../../../../types-C-Xp0CcN.mjs";
-import { i as handleMenuItemCreate } from "../../../../../menus-6RHNq4ZK.mjs";
+import { i as handleMenuItemCreate } from "../../../../../menus-CvVYfsuk.mjs";
 import { t as menuTag } from "../../../../../chrome-tags-BIKBMZYO.mjs";
-import "../../../../../errors-CuHQRiBW.mjs";
-import "../../../../../errors-DTE6C3K_.mjs";
-import "../../../../../settings-WHr45II1.mjs";
-import "../../../../../site-settings-KJOqJW6W.mjs";
-import { a as unwrapResult, r as handleError } from "../../../../../error-B0rgPgsQ.mjs";
-import { i as parseQuery, n as parseBody, t as isParseError } from "../../../../../parse-CmFDTGzp.mjs";
-import { b as localeFilterQuery } from "../../../../../redirects-D4EWeXAo.mjs";
-import "../../../../../entry-lock-sxz2PGAT.mjs";
-import "../../../../../media-aahnKHze.mjs";
-import "../../../../../comments-BRtp992B.mjs";
-import "../../../../../byline-fields-DHJs0Mja.mjs";
-import { n as createMenuItemBody } from "../../../../../menus-BQKqf0Up.mjs";
-import "../../../../../status-D39Fpy8R.mjs";
+import "../../../../../errors-CjtE5aWF.mjs";
+import "../../../../../errors-hskQ0C8G.mjs";
+import "../../../../../settings-GaZ5sVgg.mjs";
+import "../../../../../site-settings-CDdT4mVm.mjs";
+import { a as unwrapResult, r as handleError } from "../../../../../error-DxgQdaZ_.mjs";
+import { i as parseQuery, n as parseBody, t as isParseError } from "../../../../../parse-Cn5aSk1N.mjs";
+import { b as localeFilterQuery } from "../../../../../redirects-DFT7Wr-e.mjs";
+import "../../../../../entry-lock-Cjz0h45X.mjs";
+import "../../../../../media-CRKsKlfK.mjs";
+import "../../../../../comments-BzmIKVb2.mjs";
+import "../../../../../byline-fields-Bze3ZdAw.mjs";
+import { n as createMenuItemBody } from "../../../../../menus-D1HC8npj.mjs";
+import "../../../../../status-Dl85BK39.mjs";
 import "../../../../../api/schemas/index.mjs";
-import { i as requirePerm } from "../../../../../authorize-DeWfk--K.mjs";
+import { i as requirePerm } from "../../../../../authorize-TdIGpRSE.mjs";
 
 //#region src/astro/routes/api/menus/[name]/items.ts
 const prerender = false;

package/dist/astro/routes/api/menus/_name_/reorder.mjs

@@ -4,23 +4,23 @@ import "../../../../../base64-BQBZwXCx.mjs";
 import "../../../../../object-cache-Bo6DGaC9.mjs";
 import "../../../../../url-Dn3IStq8.mjs";
 import "../../../../../types-C-Xp0CcN.mjs";
-import { o as handleMenuItemReorder } from "../../../../../menus-6RHNq4ZK.mjs";
+import { o as handleMenuItemReorder } from "../../../../../menus-CvVYfsuk.mjs";
 import { t as menuTag } from "../../../../../chrome-tags-BIKBMZYO.mjs";
-import "../../../../../errors-CuHQRiBW.mjs";
-import "../../../../../errors-DTE6C3K_.mjs";
-import "../../../../../settings-WHr45II1.mjs";
-import "../../../../../site-settings-KJOqJW6W.mjs";
-import { a as unwrapResult, r as handleError } from "../../../../../error-B0rgPgsQ.mjs";
-import { i as parseQuery, n as parseBody, t as isParseError } from "../../../../../parse-CmFDTGzp.mjs";
-import { b as localeFilterQuery } from "../../../../../redirects-D4EWeXAo.mjs";
-import "../../../../../entry-lock-sxz2PGAT.mjs";
-import "../../../../../media-aahnKHze.mjs";
-import "../../../../../comments-BRtp992B.mjs";
-import "../../../../../byline-fields-DHJs0Mja.mjs";
-import { l as reorderMenuItemsBody } from "../../../../../menus-BQKqf0Up.mjs";
-import "../../../../../status-D39Fpy8R.mjs";
+import "../../../../../errors-CjtE5aWF.mjs";
+import "../../../../../errors-hskQ0C8G.mjs";
+import "../../../../../settings-GaZ5sVgg.mjs";
+import "../../../../../site-settings-CDdT4mVm.mjs";
+import { a as unwrapResult, r as handleError } from "../../../../../error-DxgQdaZ_.mjs";
+import { i as parseQuery, n as parseBody, t as isParseError } from "../../../../../parse-Cn5aSk1N.mjs";
+import { b as localeFilterQuery } from "../../../../../redirects-DFT7Wr-e.mjs";
+import "../../../../../entry-lock-Cjz0h45X.mjs";
+import "../../../../../media-CRKsKlfK.mjs";
+import "../../../../../comments-BzmIKVb2.mjs";
+import "../../../../../byline-fields-Bze3ZdAw.mjs";
+import { l as reorderMenuItemsBody } from "../../../../../menus-D1HC8npj.mjs";
+import "../../../../../status-Dl85BK39.mjs";
 import "../../../../../api/schemas/index.mjs";
-import { i as requirePerm } from "../../../../../authorize-DeWfk--K.mjs";
+import { i as requirePerm } from "../../../../../authorize-TdIGpRSE.mjs";
 
 //#region src/astro/routes/api/menus/[name]/reorder.ts
 const prerender = false;

package/dist/astro/routes/api/menus/_name_/translations.mjs

@@ -4,23 +4,23 @@ import "../../../../../base64-BQBZwXCx.mjs";
 import "../../../../../object-cache-Bo6DGaC9.mjs";
 import "../../../../../url-Dn3IStq8.mjs";
 import "../../../../../types-C-Xp0CcN.mjs";
-import { l as handleMenuTranslations, r as handleMenuGet, t as handleMenuCreate } from "../../../../../menus-6RHNq4ZK.mjs";
+import { l as handleMenuTranslations, r as handleMenuGet, t as handleMenuCreate } from "../../../../../menus-CvVYfsuk.mjs";
 import { t as menuTag } from "../../../../../chrome-tags-BIKBMZYO.mjs";
-import "../../../../../errors-CuHQRiBW.mjs";
-import "../../../../../errors-DTE6C3K_.mjs";
-import "../../../../../settings-WHr45II1.mjs";
-import "../../../../../site-settings-KJOqJW6W.mjs";
-import { a as unwrapResult, i as requireDb, r as handleError } from "../../../../../error-B0rgPgsQ.mjs";
-import { i as parseQuery, n as parseBody, t as isParseError } from "../../../../../parse-CmFDTGzp.mjs";
-import { b as localeFilterQuery } from "../../../../../redirects-D4EWeXAo.mjs";
-import "../../../../../entry-lock-sxz2PGAT.mjs";
-import "../../../../../media-aahnKHze.mjs";
-import "../../../../../comments-BRtp992B.mjs";
-import "../../../../../byline-fields-DHJs0Mja.mjs";
-import "../../../../../menus-BQKqf0Up.mjs";
-import "../../../../../status-D39Fpy8R.mjs";
+import "../../../../../errors-CjtE5aWF.mjs";
+import "../../../../../errors-hskQ0C8G.mjs";
+import "../../../../../settings-GaZ5sVgg.mjs";
+import "../../../../../site-settings-CDdT4mVm.mjs";
+import { a as unwrapResult, i as requireDb, r as handleError } from "../../../../../error-DxgQdaZ_.mjs";
+import { i as parseQuery, n as parseBody, t as isParseError } from "../../../../../parse-Cn5aSk1N.mjs";
+import { b as localeFilterQuery } from "../../../../../redirects-DFT7Wr-e.mjs";
+import "../../../../../entry-lock-Cjz0h45X.mjs";
+import "../../../../../media-CRKsKlfK.mjs";
+import "../../../../../comments-BzmIKVb2.mjs";
+import "../../../../../byline-fields-Bze3ZdAw.mjs";
+import "../../../../../menus-D1HC8npj.mjs";
+import "../../../../../status-Dl85BK39.mjs";
 import "../../../../../api/schemas/index.mjs";
-import { i as requirePerm } from "../../../../../authorize-DeWfk--K.mjs";
+import { i as requirePerm } from "../../../../../authorize-TdIGpRSE.mjs";
 import { z } from "zod";
 
 //#region src/astro/routes/api/menus/[name]/translations.ts

package/dist/astro/routes/api/menus/_name_.mjs

@@ -4,23 +4,23 @@ import "../../../../base64-BQBZwXCx.mjs";
 import "../../../../object-cache-Bo6DGaC9.mjs";
 import "../../../../url-Dn3IStq8.mjs";
 import "../../../../types-C-Xp0CcN.mjs";
-import { n as handleMenuDelete, r as handleMenuGet, u as handleMenuUpdate } from "../../../../menus-6RHNq4ZK.mjs";
+import { n as handleMenuDelete, r as handleMenuGet, u as handleMenuUpdate } from "../../../../menus-CvVYfsuk.mjs";
 import { t as menuTag } from "../../../../chrome-tags-BIKBMZYO.mjs";
-import "../../../../errors-CuHQRiBW.mjs";
-import "../../../../errors-DTE6C3K_.mjs";
-import "../../../../settings-WHr45II1.mjs";
-import "../../../../site-settings-KJOqJW6W.mjs";
-import { a as unwrapResult, r as handleError } from "../../../../error-B0rgPgsQ.mjs";
-import { i as parseQuery, n as parseBody, t as isParseError } from "../../../../parse-CmFDTGzp.mjs";
-import { b as localeFilterQuery } from "../../../../redirects-D4EWeXAo.mjs";
-import "../../../../entry-lock-sxz2PGAT.mjs";
-import "../../../../media-aahnKHze.mjs";
-import "../../../../comments-BRtp992B.mjs";
-import "../../../../byline-fields-DHJs0Mja.mjs";
-import { d as updateMenuBody } from "../../../../menus-BQKqf0Up.mjs";
-import "../../../../status-D39Fpy8R.mjs";
+import "../../../../errors-CjtE5aWF.mjs";
+import "../../../../errors-hskQ0C8G.mjs";
+import "../../../../settings-GaZ5sVgg.mjs";
+import "../../../../site-settings-CDdT4mVm.mjs";
+import { a as unwrapResult, r as handleError } from "../../../../error-DxgQdaZ_.mjs";
+import { i as parseQuery, n as parseBody, t as isParseError } from "../../../../parse-Cn5aSk1N.mjs";
+import { b as localeFilterQuery } from "../../../../redirects-DFT7Wr-e.mjs";
+import "../../../../entry-lock-Cjz0h45X.mjs";
+import "../../../../media-CRKsKlfK.mjs";
+import "../../../../comments-BzmIKVb2.mjs";
+import "../../../../byline-fields-Bze3ZdAw.mjs";
+import { d as updateMenuBody } from "../../../../menus-D1HC8npj.mjs";
+import "../../../../status-Dl85BK39.mjs";
 import "../../../../api/schemas/index.mjs";
-import { i as requirePerm } from "../../../../authorize-DeWfk--K.mjs";
+import { i as requirePerm } from "../../../../authorize-TdIGpRSE.mjs";
 
 //#region src/astro/routes/api/menus/[name].ts
 const prerender = false;

package/dist/astro/routes/api/menus/index.mjs

@@ -4,23 +4,23 @@ import "../../../../base64-BQBZwXCx.mjs";
 import "../../../../object-cache-Bo6DGaC9.mjs";
 import "../../../../url-Dn3IStq8.mjs";
 import "../../../../types-C-Xp0CcN.mjs";
-import { c as handleMenuList, t as handleMenuCreate } from "../../../../menus-6RHNq4ZK.mjs";
+import { c as handleMenuList, t as handleMenuCreate } from "../../../../menus-CvVYfsuk.mjs";
 import { t as menuTag } from "../../../../chrome-tags-BIKBMZYO.mjs";
-import "../../../../errors-CuHQRiBW.mjs";
-import "../../../../errors-DTE6C3K_.mjs";
-import "../../../../settings-WHr45II1.mjs";
-import "../../../../site-settings-KJOqJW6W.mjs";
-import { a as unwrapResult, r as handleError } from "../../../../error-B0rgPgsQ.mjs";
-import { i as parseQuery, n as parseBody, t as isParseError } from "../../../../parse-CmFDTGzp.mjs";
-import { b as localeFilterQuery } from "../../../../redirects-D4EWeXAo.mjs";
-import "../../../../entry-lock-sxz2PGAT.mjs";
-import "../../../../media-aahnKHze.mjs";
-import "../../../../comments-BRtp992B.mjs";
-import "../../../../byline-fields-DHJs0Mja.mjs";
-import { t as createMenuBody } from "../../../../menus-BQKqf0Up.mjs";
-import "../../../../status-D39Fpy8R.mjs";
+import "../../../../errors-CjtE5aWF.mjs";
+import "../../../../errors-hskQ0C8G.mjs";
+import "../../../../settings-GaZ5sVgg.mjs";
+import "../../../../site-settings-CDdT4mVm.mjs";
+import { a as unwrapResult, r as handleError } from "../../../../error-DxgQdaZ_.mjs";
+import { i as parseQuery, n as parseBody, t as isParseError } from "../../../../parse-Cn5aSk1N.mjs";
+import { b as localeFilterQuery } from "../../../../redirects-DFT7Wr-e.mjs";
+import "../../../../entry-lock-Cjz0h45X.mjs";
+import "../../../../media-CRKsKlfK.mjs";
+import "../../../../comments-BzmIKVb2.mjs";
+import "../../../../byline-fields-Bze3ZdAw.mjs";
+import { t as createMenuBody } from "../../../../menus-D1HC8npj.mjs";
+import "../../../../status-Dl85BK39.mjs";
 import "../../../../api/schemas/index.mjs";
-import { i as requirePerm } from "../../../../authorize-DeWfk--K.mjs";
+import { i as requirePerm } from "../../../../authorize-TdIGpRSE.mjs";
 
 //#region src/astro/routes/api/menus/index.ts
 const prerender = false;

package/dist/astro/routes/api/oauth/authorize.mjs

@@ -1,9 +1,9 @@
-import { r as getPublicOrigin } from "../../../../public-url-B5a0QAh6.mjs";
-import { t as escapeHtml } from "../../../../escape-nJW7dR0s.mjs";
-import { s as isValidScope } from "../../../../api-tokens-BLz2MtQs.mjs";
-import { c as validateRedirectUri, o as lookupOAuthClient, s as validateClientRedirectUri } from "../../../../oauth-clients-C1S4NQHh.mjs";
-import "../../../../oauth-user-lookup-BNp1aFAr.mjs";
-import { n as handleAuthorizationApproval, t as buildDeniedRedirect } from "../../../../oauth-authorization-BtYQ80uU.mjs";
+import { i as getPublicOrigin } from "../../../../public-url-uT1Ok2Tu.mjs";
+import { t as escapeHtml } from "../../../../escape-ESFhYzwG.mjs";
+import { s as isValidScope } from "../../../../api-tokens-D2zgAIEt.mjs";
+import { c as validateRedirectUri, o as lookupOAuthClient, s as validateClientRedirectUri } from "../../../../oauth-clients-DVjRc9v3.mjs";
+import "../../../../oauth-user-lookup-Dz1_R5vT.mjs";
+import { n as handleAuthorizationApproval, t as buildDeniedRedirect } from "../../../../oauth-authorization-B6ZJbMd2.mjs";
 
 //#region src/astro/routes/api/oauth/authorize.ts
 const prerender = false;

package/dist/astro/routes/api/oauth/device/authorize.mjs

@@ -1,12 +1,12 @@
 import "../../../../../base64-BQBZwXCx.mjs";
 import "../../../../../types-C-Xp0CcN.mjs";
-import "../../../../../errors-CuHQRiBW.mjs";
-import "../../../../../errors-DTE6C3K_.mjs";
-import { a as unwrapResult, r as handleError, t as apiError } from "../../../../../error-B0rgPgsQ.mjs";
-import { i as parseQuery, n as parseBody, t as isParseError } from "../../../../../parse-CmFDTGzp.mjs";
-import "../../../../../api-tokens-BLz2MtQs.mjs";
-import "../../../../../oauth-user-lookup-BNp1aFAr.mjs";
-import { n as handleDeviceCodeLookup, t as handleDeviceAuthorize } from "../../../../../device-flow-Ma5P5d2e.mjs";
+import "../../../../../errors-CjtE5aWF.mjs";
+import "../../../../../errors-hskQ0C8G.mjs";
+import { a as unwrapResult, r as handleError, t as apiError } from "../../../../../error-DxgQdaZ_.mjs";
+import { i as parseQuery, n as parseBody, t as isParseError } from "../../../../../parse-Cn5aSk1N.mjs";
+import "../../../../../api-tokens-D2zgAIEt.mjs";
+import "../../../../../oauth-user-lookup-Dz1_R5vT.mjs";
+import { n as handleDeviceCodeLookup, t as handleDeviceAuthorize } from "../../../../../device-flow-CzDJmQ1q.mjs";
 import { z } from "zod";
 
 //#region src/astro/routes/api/oauth/device/authorize.ts

package/dist/astro/routes/api/oauth/device/code.mjs

@@ -1,15 +1,16 @@
+import "../../../../../after-PcEvMY_6.mjs";
 import "../../../../../base64-BQBZwXCx.mjs";
 import "../../../../../types-C-Xp0CcN.mjs";
-import "../../../../../errors-CuHQRiBW.mjs";
-import "../../../../../errors-DTE6C3K_.mjs";
-import { a as unwrapResult, r as handleError, t as apiError } from "../../../../../error-B0rgPgsQ.mjs";
-import { n as parseBody, t as isParseError } from "../../../../../parse-CmFDTGzp.mjs";
-import { t as getTrustedProxyHeaders } from "../../../../../trusted-proxy-BqfQFs6a.mjs";
-import { r as getPublicOrigin } from "../../../../../public-url-B5a0QAh6.mjs";
-import { n as getClientIp, r as rateLimitResponse, t as checkRateLimit } from "../../../../../rate-limit-iMvcu3eu.mjs";
-import "../../../../../api-tokens-BLz2MtQs.mjs";
-import "../../../../../oauth-user-lookup-BNp1aFAr.mjs";
-import { r as handleDeviceCodeRequest } from "../../../../../device-flow-Ma5P5d2e.mjs";
+import "../../../../../errors-CjtE5aWF.mjs";
+import "../../../../../errors-hskQ0C8G.mjs";
+import { a as unwrapResult, r as handleError, t as apiError } from "../../../../../error-DxgQdaZ_.mjs";
+import { n as parseBody, t as isParseError } from "../../../../../parse-Cn5aSk1N.mjs";
+import { t as getTrustedProxyHeaders } from "../../../../../trusted-proxy-d4Tk6biT.mjs";
+import { i as getPublicOrigin } from "../../../../../public-url-uT1Ok2Tu.mjs";
+import { n as getClientIp, r as rateLimitResponse, t as checkRateLimit } from "../../../../../rate-limit-Dvamvay-.mjs";
+import "../../../../../api-tokens-D2zgAIEt.mjs";
+import "../../../../../oauth-user-lookup-Dz1_R5vT.mjs";
+import { r as handleDeviceCodeRequest } from "../../../../../device-flow-CzDJmQ1q.mjs";
 import { z } from "zod";
 
 //#region src/astro/routes/api/oauth/device/code.ts

package/dist/astro/routes/api/oauth/device/code.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"code.mjs","names":[],"sources":["../../../../../../src/astro/routes/api/oauth/device/code.ts"],"sourcesContent":["/**\n * POST /_emdash/api/oauth/device/code\n *\n * Issue a device code + user code for the OAuth Device Flow.\n * This is an unauthenticated endpoint (the CLI doesn't have a token yet).\n *\n * Rate limited: 10 requests per minute per IP.\n */\n\nimport type { APIRoute } from \"astro\";\nimport { z } from \"zod\";\n\nimport { apiError, handleError, unwrapResult } from \"#api/error.js\";\nimport { handleDeviceCodeRequest } from \"#api/handlers/device-flow.js\";\nimport { isParseError, parseBody } from \"#api/parse.js\";\nimport { getPublicOrigin } from \"#api/public-url.js\";\nimport { checkRateLimit, getClientIp, rateLimitResponse } from \"#auth/rate-limit.js\";\nimport { getTrustedProxyHeaders } from \"#auth/trusted-proxy.js\";\n\nexport const prerender = false;\n\nconst deviceCodeSchema = z.object({\n\tclient_id: z.string().optional(),\n\tscope: z.string().optional(),\n});\n\nexport const POST: APIRoute = async ({ request, locals, url }) => {\n\tconst { emdash } = locals;\n\n\tif (!emdash?.db) {\n\t\treturn apiError(\"NOT_CONFIGURED\", \"EmDash is not initialized\", 500);\n\t}\n\n\ttry {\n\t\tconst body = await parseBody(request, deviceCodeSchema);\n\t\tif (isParseError(body)) return body;\n\n\t\t// Rate limit: 10 requests per 60 seconds per IP\n\t\tconst ip = getClientIp(request, getTrustedProxyHeaders(emdash.config));\n\t\tconst rateLimit = await checkRateLimit(emdash.db, ip, \"device/code\", 10, 60);\n\t\tif (!rateLimit.allowed) {\n\t\t\treturn rateLimitResponse(60);\n\t\t}\n\n\t\t// Build the verification URI — device page lives inside the admin SPA\n\t\tconst verificationUri = new URL(\n\t\t\t\"/_emdash/admin/device\",\n\t\t\tgetPublicOrigin(url, emdash?.config),\n\t\t).toString();\n\n\t\tconst result = await handleDeviceCodeRequest(emdash.db, body, verificationUri);\n\t\treturn unwrapResult(result);\n\t} catch (error) {\n\t\treturn handleError(error, \"Failed to create device code\", \"DEVICE_CODE_ERROR\");\n\t}\n};\n"],"mappings":";;;;;;;;;;;;;;;AAmBA,MAAa,YAAY;AAEzB,MAAM,mBAAmB,EAAE,OAAO;CACjC,WAAW,EAAE,QAAQ,CAAC,UAAU;CAChC,OAAO,EAAE,QAAQ,CAAC,UAAU;CAC5B,CAAC;AAEF,MAAa,OAAiB,OAAO,EAAE,SAAS,QAAQ,UAAU;CACjE,MAAM,EAAE,WAAW;AAEnB,KAAI,CAAC,QAAQ,GACZ,QAAO,SAAS,kBAAkB,6BAA6B,IAAI;AAGpE,KAAI;EACH,MAAM,OAAO,MAAM,UAAU,SAAS,iBAAiB;AACvD,MAAI,aAAa,KAAK,CAAE,QAAO;EAG/B,MAAM,KAAK,YAAY,SAAS,uBAAuB,OAAO,OAAO,CAAC;AAEtE,MAAI,EADc,MAAM,eAAe,OAAO,IAAI,IAAI,eAAe,IAAI,GAAG,EAC7D,QACd,QAAO,kBAAkB,GAAG;EAI7B,MAAM,kBAAkB,IAAI,IAC3B,yBACA,gBAAgB,KAAK,QAAQ,OAAO,CACpC,CAAC,UAAU;AAGZ,SAAO,aADQ,MAAM,wBAAwB,OAAO,IAAI,MAAM,gBAAgB,CACnD;UACnB,OAAO;AACf,SAAO,YAAY,OAAO,gCAAgC,oBAAoB"}
+{"version":3,"file":"code.mjs","names":[],"sources":["../../../../../../src/astro/routes/api/oauth/device/code.ts"],"sourcesContent":["/**\n * POST /_emdash/api/oauth/device/code\n *\n * Issue a device code + user code for the OAuth Device Flow.\n * This is an unauthenticated endpoint (the CLI doesn't have a token yet).\n *\n * Rate limited: 10 requests per minute per IP.\n */\n\nimport type { APIRoute } from \"astro\";\nimport { z } from \"zod\";\n\nimport { apiError, handleError, unwrapResult } from \"#api/error.js\";\nimport { handleDeviceCodeRequest } from \"#api/handlers/device-flow.js\";\nimport { isParseError, parseBody } from \"#api/parse.js\";\nimport { getPublicOrigin } from \"#api/public-url.js\";\nimport { checkRateLimit, getClientIp, rateLimitResponse } from \"#auth/rate-limit.js\";\nimport { getTrustedProxyHeaders } from \"#auth/trusted-proxy.js\";\n\nexport const prerender = false;\n\nconst deviceCodeSchema = z.object({\n\tclient_id: z.string().optional(),\n\tscope: z.string().optional(),\n});\n\nexport const POST: APIRoute = async ({ request, locals, url }) => {\n\tconst { emdash } = locals;\n\n\tif (!emdash?.db) {\n\t\treturn apiError(\"NOT_CONFIGURED\", \"EmDash is not initialized\", 500);\n\t}\n\n\ttry {\n\t\tconst body = await parseBody(request, deviceCodeSchema);\n\t\tif (isParseError(body)) return body;\n\n\t\t// Rate limit: 10 requests per 60 seconds per IP\n\t\tconst ip = getClientIp(request, getTrustedProxyHeaders(emdash.config));\n\t\tconst rateLimit = await checkRateLimit(emdash.db, ip, \"device/code\", 10, 60);\n\t\tif (!rateLimit.allowed) {\n\t\t\treturn rateLimitResponse(60);\n\t\t}\n\n\t\t// Build the verification URI — device page lives inside the admin SPA\n\t\tconst verificationUri = new URL(\n\t\t\t\"/_emdash/admin/device\",\n\t\t\tgetPublicOrigin(url, emdash?.config),\n\t\t).toString();\n\n\t\tconst result = await handleDeviceCodeRequest(emdash.db, body, verificationUri);\n\t\treturn unwrapResult(result);\n\t} catch (error) {\n\t\treturn handleError(error, \"Failed to create device code\", \"DEVICE_CODE_ERROR\");\n\t}\n};\n"],"mappings":";;;;;;;;;;;;;;;;AAmBA,MAAa,YAAY;AAEzB,MAAM,mBAAmB,EAAE,OAAO;CACjC,WAAW,EAAE,QAAQ,CAAC,UAAU;CAChC,OAAO,EAAE,QAAQ,CAAC,UAAU;CAC5B,CAAC;AAEF,MAAa,OAAiB,OAAO,EAAE,SAAS,QAAQ,UAAU;CACjE,MAAM,EAAE,WAAW;AAEnB,KAAI,CAAC,QAAQ,GACZ,QAAO,SAAS,kBAAkB,6BAA6B,IAAI;AAGpE,KAAI;EACH,MAAM,OAAO,MAAM,UAAU,SAAS,iBAAiB;AACvD,MAAI,aAAa,KAAK,CAAE,QAAO;EAG/B,MAAM,KAAK,YAAY,SAAS,uBAAuB,OAAO,OAAO,CAAC;AAEtE,MAAI,EADc,MAAM,eAAe,OAAO,IAAI,IAAI,eAAe,IAAI,GAAG,EAC7D,QACd,QAAO,kBAAkB,GAAG;EAI7B,MAAM,kBAAkB,IAAI,IAC3B,yBACA,gBAAgB,KAAK,QAAQ,OAAO,CACpC,CAAC,UAAU;AAGZ,SAAO,aADQ,MAAM,wBAAwB,OAAO,IAAI,MAAM,gBAAgB,CACnD;UACnB,OAAO;AACf,SAAO,YAAY,OAAO,gCAAgC,oBAAoB"}

package/dist/astro/routes/api/oauth/device/token.mjs

@@ -1,14 +1,15 @@
+import "../../../../../after-PcEvMY_6.mjs";
 import "../../../../../base64-BQBZwXCx.mjs";
 import "../../../../../types-C-Xp0CcN.mjs";
-import "../../../../../errors-CuHQRiBW.mjs";
-import "../../../../../errors-DTE6C3K_.mjs";
-import { a as unwrapResult, r as handleError, t as apiError } from "../../../../../error-B0rgPgsQ.mjs";
-import { n as parseBody, t as isParseError } from "../../../../../parse-CmFDTGzp.mjs";
-import { t as getTrustedProxyHeaders } from "../../../../../trusted-proxy-BqfQFs6a.mjs";
-import { n as getClientIp, r as rateLimitResponse, t as checkRateLimit } from "../../../../../rate-limit-iMvcu3eu.mjs";
-import "../../../../../api-tokens-BLz2MtQs.mjs";
-import "../../../../../oauth-user-lookup-BNp1aFAr.mjs";
-import { i as handleDeviceTokenExchange } from "../../../../../device-flow-Ma5P5d2e.mjs";
+import "../../../../../errors-CjtE5aWF.mjs";
+import "../../../../../errors-hskQ0C8G.mjs";
+import { a as unwrapResult, r as handleError, t as apiError } from "../../../../../error-DxgQdaZ_.mjs";
+import { n as parseBody, t as isParseError } from "../../../../../parse-Cn5aSk1N.mjs";
+import { t as getTrustedProxyHeaders } from "../../../../../trusted-proxy-d4Tk6biT.mjs";
+import { n as getClientIp, r as rateLimitResponse, t as checkRateLimit } from "../../../../../rate-limit-Dvamvay-.mjs";
+import "../../../../../api-tokens-D2zgAIEt.mjs";
+import "../../../../../oauth-user-lookup-Dz1_R5vT.mjs";
+import { i as handleDeviceTokenExchange } from "../../../../../device-flow-CzDJmQ1q.mjs";
 import { z } from "zod";
 
 //#region src/astro/routes/api/oauth/device/token.ts

package/dist/astro/routes/api/oauth/device/token.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"token.mjs","names":[],"sources":["../../../../../../src/astro/routes/api/oauth/device/token.ts"],"sourcesContent":["/**\n * POST /_emdash/api/oauth/device/token\n *\n * CLI polls this endpoint to exchange a device code for tokens.\n * Returns RFC 8628 error codes during the polling phase.\n * This is an unauthenticated endpoint.\n *\n * Rate limited: 12 requests per minute per IP.\n * Also enforces RFC 8628 slow_down: if polled faster than the interval,\n * responds with { error: \"slow_down\", interval: N } and increases the interval by 5s.\n */\n\nimport type { APIRoute } from \"astro\";\nimport { z } from \"zod\";\n\nimport { apiError, handleError, unwrapResult } from \"#api/error.js\";\nimport { handleDeviceTokenExchange } from \"#api/handlers/device-flow.js\";\nimport { isParseError, parseBody } from \"#api/parse.js\";\nimport { checkRateLimit, getClientIp, rateLimitResponse } from \"#auth/rate-limit.js\";\nimport { getTrustedProxyHeaders } from \"#auth/trusted-proxy.js\";\n\nexport const prerender = false;\n\nconst deviceTokenSchema = z.object({\n\tdevice_code: z.string().min(1),\n\tgrant_type: z.string().min(1),\n});\n\nexport const POST: APIRoute = async ({ request, locals }) => {\n\tconst { emdash } = locals;\n\n\tif (!emdash?.db) {\n\t\treturn apiError(\"NOT_CONFIGURED\", \"EmDash is not initialized\", 500);\n\t}\n\n\ttry {\n\t\tconst body = await parseBody(request, deviceTokenSchema);\n\t\tif (isParseError(body)) return body;\n\n\t\t// Rate limit: 12 requests per 60 seconds per IP\n\t\tconst ip = getClientIp(request, getTrustedProxyHeaders(emdash.config));\n\t\tconst rateLimit = await checkRateLimit(emdash.db, ip, \"device/token\", 12, 60);\n\t\tif (!rateLimit.allowed) {\n\t\t\treturn rateLimitResponse(60);\n\t\t}\n\n\t\tconst result = await handleDeviceTokenExchange(emdash.db, body);\n\n\t\t// RFC 8628 requires specific error format for device flow errors\n\t\t// RFC 6749 §5.1 requires Cache-Control: no-store + Pragma: no-cache on token responses\n\t\tif (!result.success && result.deviceFlowError) {\n\t\t\tconst errorBody: { error: string; interval?: number } = { error: result.deviceFlowError };\n\t\t\tif (result.deviceFlowInterval !== undefined) {\n\t\t\t\terrorBody.interval = result.deviceFlowInterval;\n\t\t\t}\n\t\t\treturn Response.json(errorBody, {\n\t\t\t\tstatus: 400,\n\t\t\t\theaders: {\n\t\t\t\t\t\"Content-Type\": \"application/json\",\n\t\t\t\t\t\"Cache-Control\": \"no-store\",\n\t\t\t\t\tPragma: \"no-cache\",\n\t\t\t\t},\n\t\t\t});\n\t\t}\n\n\t\treturn unwrapResult(result);\n\t} catch (error) {\n\t\treturn handleError(error, \"Failed to exchange device code\", \"TOKEN_EXCHANGE_ERROR\");\n\t}\n};\n"],"mappings":";;;;;;;;;;;;;;AAqBA,MAAa,YAAY;AAEzB,MAAM,oBAAoB,EAAE,OAAO;CAClC,aAAa,EAAE,QAAQ,CAAC,IAAI,EAAE;CAC9B,YAAY,EAAE,QAAQ,CAAC,IAAI,EAAE;CAC7B,CAAC;AAEF,MAAa,OAAiB,OAAO,EAAE,SAAS,aAAa;CAC5D,MAAM,EAAE,WAAW;AAEnB,KAAI,CAAC,QAAQ,GACZ,QAAO,SAAS,kBAAkB,6BAA6B,IAAI;AAGpE,KAAI;EACH,MAAM,OAAO,MAAM,UAAU,SAAS,kBAAkB;AACxD,MAAI,aAAa,KAAK,CAAE,QAAO;EAG/B,MAAM,KAAK,YAAY,SAAS,uBAAuB,OAAO,OAAO,CAAC;AAEtE,MAAI,EADc,MAAM,eAAe,OAAO,IAAI,IAAI,gBAAgB,IAAI,GAAG,EAC9D,QACd,QAAO,kBAAkB,GAAG;EAG7B,MAAM,SAAS,MAAM,0BAA0B,OAAO,IAAI,KAAK;AAI/D,MAAI,CAAC,OAAO,WAAW,OAAO,iBAAiB;GAC9C,MAAM,YAAkD,EAAE,OAAO,OAAO,iBAAiB;AACzF,OAAI,OAAO,uBAAuB,OACjC,WAAU,WAAW,OAAO;AAE7B,UAAO,SAAS,KAAK,WAAW;IAC/B,QAAQ;IACR,SAAS;KACR,gBAAgB;KAChB,iBAAiB;KACjB,QAAQ;KACR;IACD,CAAC;;AAGH,SAAO,aAAa,OAAO;UACnB,OAAO;AACf,SAAO,YAAY,OAAO,kCAAkC,uBAAuB"}
+{"version":3,"file":"token.mjs","names":[],"sources":["../../../../../../src/astro/routes/api/oauth/device/token.ts"],"sourcesContent":["/**\n * POST /_emdash/api/oauth/device/token\n *\n * CLI polls this endpoint to exchange a device code for tokens.\n * Returns RFC 8628 error codes during the polling phase.\n * This is an unauthenticated endpoint.\n *\n * Rate limited: 12 requests per minute per IP.\n * Also enforces RFC 8628 slow_down: if polled faster than the interval,\n * responds with { error: \"slow_down\", interval: N } and increases the interval by 5s.\n */\n\nimport type { APIRoute } from \"astro\";\nimport { z } from \"zod\";\n\nimport { apiError, handleError, unwrapResult } from \"#api/error.js\";\nimport { handleDeviceTokenExchange } from \"#api/handlers/device-flow.js\";\nimport { isParseError, parseBody } from \"#api/parse.js\";\nimport { checkRateLimit, getClientIp, rateLimitResponse } from \"#auth/rate-limit.js\";\nimport { getTrustedProxyHeaders } from \"#auth/trusted-proxy.js\";\n\nexport const prerender = false;\n\nconst deviceTokenSchema = z.object({\n\tdevice_code: z.string().min(1),\n\tgrant_type: z.string().min(1),\n});\n\nexport const POST: APIRoute = async ({ request, locals }) => {\n\tconst { emdash } = locals;\n\n\tif (!emdash?.db) {\n\t\treturn apiError(\"NOT_CONFIGURED\", \"EmDash is not initialized\", 500);\n\t}\n\n\ttry {\n\t\tconst body = await parseBody(request, deviceTokenSchema);\n\t\tif (isParseError(body)) return body;\n\n\t\t// Rate limit: 12 requests per 60 seconds per IP\n\t\tconst ip = getClientIp(request, getTrustedProxyHeaders(emdash.config));\n\t\tconst rateLimit = await checkRateLimit(emdash.db, ip, \"device/token\", 12, 60);\n\t\tif (!rateLimit.allowed) {\n\t\t\treturn rateLimitResponse(60);\n\t\t}\n\n\t\tconst result = await handleDeviceTokenExchange(emdash.db, body);\n\n\t\t// RFC 8628 requires specific error format for device flow errors\n\t\t// RFC 6749 §5.1 requires Cache-Control: no-store + Pragma: no-cache on token responses\n\t\tif (!result.success && result.deviceFlowError) {\n\t\t\tconst errorBody: { error: string; interval?: number } = { error: result.deviceFlowError };\n\t\t\tif (result.deviceFlowInterval !== undefined) {\n\t\t\t\terrorBody.interval = result.deviceFlowInterval;\n\t\t\t}\n\t\t\treturn Response.json(errorBody, {\n\t\t\t\tstatus: 400,\n\t\t\t\theaders: {\n\t\t\t\t\t\"Content-Type\": \"application/json\",\n\t\t\t\t\t\"Cache-Control\": \"no-store\",\n\t\t\t\t\tPragma: \"no-cache\",\n\t\t\t\t},\n\t\t\t});\n\t\t}\n\n\t\treturn unwrapResult(result);\n\t} catch (error) {\n\t\treturn handleError(error, \"Failed to exchange device code\", \"TOKEN_EXCHANGE_ERROR\");\n\t}\n};\n"],"mappings":";;;;;;;;;;;;;;;AAqBA,MAAa,YAAY;AAEzB,MAAM,oBAAoB,EAAE,OAAO;CAClC,aAAa,EAAE,QAAQ,CAAC,IAAI,EAAE;CAC9B,YAAY,EAAE,QAAQ,CAAC,IAAI,EAAE;CAC7B,CAAC;AAEF,MAAa,OAAiB,OAAO,EAAE,SAAS,aAAa;CAC5D,MAAM,EAAE,WAAW;AAEnB,KAAI,CAAC,QAAQ,GACZ,QAAO,SAAS,kBAAkB,6BAA6B,IAAI;AAGpE,KAAI;EACH,MAAM,OAAO,MAAM,UAAU,SAAS,kBAAkB;AACxD,MAAI,aAAa,KAAK,CAAE,QAAO;EAG/B,MAAM,KAAK,YAAY,SAAS,uBAAuB,OAAO,OAAO,CAAC;AAEtE,MAAI,EADc,MAAM,eAAe,OAAO,IAAI,IAAI,gBAAgB,IAAI,GAAG,EAC9D,QACd,QAAO,kBAAkB,GAAG;EAG7B,MAAM,SAAS,MAAM,0BAA0B,OAAO,IAAI,KAAK;AAI/D,MAAI,CAAC,OAAO,WAAW,OAAO,iBAAiB;GAC9C,MAAM,YAAkD,EAAE,OAAO,OAAO,iBAAiB;AACzF,OAAI,OAAO,uBAAuB,OACjC,WAAU,WAAW,OAAO;AAE7B,UAAO,SAAS,KAAK,WAAW;IAC/B,QAAQ;IACR,SAAS;KACR,gBAAgB;KAChB,iBAAiB;KACjB,QAAQ;KACR;IACD,CAAC;;AAGH,SAAO,aAAa,OAAO;UACnB,OAAO;AACf,SAAO,YAAY,OAAO,kCAAkC,uBAAuB"}

package/dist/astro/routes/api/oauth/register.mjs

@@ -1,11 +1,12 @@
+import "../../../../after-PcEvMY_6.mjs";
 import "../../../../base64-BQBZwXCx.mjs";
 import "../../../../types-C-Xp0CcN.mjs";
-import "../../../../errors-CuHQRiBW.mjs";
-import "../../../../errors-DTE6C3K_.mjs";
-import { r as handleError, t as apiError } from "../../../../error-B0rgPgsQ.mjs";
-import { t as getTrustedProxyHeaders } from "../../../../trusted-proxy-BqfQFs6a.mjs";
-import { n as getClientIp, t as checkRateLimit } from "../../../../rate-limit-iMvcu3eu.mjs";
-import { t as handleOAuthClientCreate } from "../../../../oauth-clients-C1S4NQHh.mjs";
+import "../../../../errors-CjtE5aWF.mjs";
+import "../../../../errors-hskQ0C8G.mjs";
+import { r as handleError, t as apiError } from "../../../../error-DxgQdaZ_.mjs";
+import { t as getTrustedProxyHeaders } from "../../../../trusted-proxy-d4Tk6biT.mjs";
+import { n as getClientIp, t as checkRateLimit } from "../../../../rate-limit-Dvamvay-.mjs";
+import { t as handleOAuthClientCreate } from "../../../../oauth-clients-DVjRc9v3.mjs";
 
 //#region src/astro/routes/api/oauth/register.ts
 const prerender = false;