emdash 1.1.0 → 1.3.0

package/dist/astro/routes/api/auth/passkey/options.mjs

@@ -1,27 +1,28 @@
 import "../../../../../config-CvmjJcVw.mjs";
+import { t as after } from "../../../../../after-PcEvMY_6.mjs";
 import { t as OptionsRepository } from "../../../../../options-DhrI7eMv.mjs";
 import "../../../../../base64-BQBZwXCx.mjs";
 import "../../../../../url-Dn3IStq8.mjs";
-import "../../../../../types-C-Xp0CcN.mjs";
-import "../../../../../errors-CuHQRiBW.mjs";
-import "../../../../../errors-DTE6C3K_.mjs";
-import "../../../../../settings-WHr45II1.mjs";
-import "../../../../../site-settings-KJOqJW6W.mjs";
-import { n as apiSuccess, r as handleError, t as apiError } from "../../../../../error-B0rgPgsQ.mjs";
-import { r as parseOptionalBody, t as isParseError } from "../../../../../parse-CmFDTGzp.mjs";
-import "../../../../../redirects-D4EWeXAo.mjs";
-import "../../../../../entry-lock-sxz2PGAT.mjs";
-import "../../../../../media-aahnKHze.mjs";
-import "../../../../../comments-BRtp992B.mjs";
-import { D as passkeyOptionsBody } from "../../../../../byline-fields-DHJs0Mja.mjs";
-import "../../../../../menus-BQKqf0Up.mjs";
-import "../../../../../status-D39Fpy8R.mjs";
+import "../../../../../types-D2NEXtgB.mjs";
+import "../../../../../errors-B4f4It-2.mjs";
+import "../../../../../errors-BOYNdIo3.mjs";
+import "../../../../../settings-Dd1uivmQ.mjs";
+import "../../../../../site-settings-DRHfX7bq.mjs";
+import { n as apiSuccess, r as handleError, t as apiError } from "../../../../../error-CVWeIOku.mjs";
+import { r as parseOptionalBody, t as isParseError } from "../../../../../parse-DgQ2NABT.mjs";
+import "../../../../../redirects-BEVSRMa2.mjs";
+import "../../../../../entry-lock-Df6-XhIu.mjs";
+import "../../../../../media-1WC65OCB.mjs";
+import "../../../../../comments-yiRFx3w5.mjs";
+import { D as passkeyOptionsBody } from "../../../../../byline-fields-BLXZnX7N.mjs";
+import "../../../../../menus-BSzwObhV.mjs";
+import "../../../../../status-BFNdxzKc.mjs";
 import "../../../../../api/schemas/index.mjs";
-import { t as getTrustedProxyHeaders } from "../../../../../trusted-proxy-BqfQFs6a.mjs";
-import { r as getPublicOrigin } from "../../../../../public-url-B5a0QAh6.mjs";
-import { n as createChallengeStore, t as cleanupExpiredChallenges } from "../../../../../challenge-store-CxZxPqaw.mjs";
-import { n as getClientIp, r as rateLimitResponse, t as checkRateLimit } from "../../../../../rate-limit-iMvcu3eu.mjs";
-import { t as getPasskeyConfig } from "../../../../../passkey-config-C-MxsV22.mjs";
+import { t as getTrustedProxyHeaders } from "../../../../../trusted-proxy-BU3Nx9g1.mjs";
+import { i as getPublicOrigin } from "../../../../../public-url-Bt98vysr.mjs";
+import { n as createChallengeStore, t as cleanupExpiredChallenges } from "../../../../../challenge-store-C17BYx2-.mjs";
+import { n as getClientIp, r as rateLimitResponse, t as checkRateLimit } from "../../../../../rate-limit-Xp4d0NBY.mjs";
+import { t as getPasskeyConfig } from "../../../../../passkey-config-D0kdzEao.mjs";
 import { generateAuthenticationOptions } from "@emdash-cms/auth/passkey";
 
 //#region src/astro/routes/api/auth/passkey/options.ts
@@ -30,7 +31,13 @@ const POST = async ({ request, locals }) => {
 	const { emdash } = locals;
 	if (!emdash?.db) return apiError("NOT_CONFIGURED", "EmDash is not initialized", 500);
 	try {
-		cleanupExpiredChallenges(emdash.db).catch(() => {});
+		after(async () => {
+			try {
+				await cleanupExpiredChallenges(emdash.db);
+			} catch (error) {
+				console.error("[passkey] failed to delete expired challenges:", error);
+			}
+		});
 		const body = await parseOptionalBody(request, passkeyOptionsBody, {});
 		if (isParseError(body)) return body;
 		const ip = getClientIp(request, getTrustedProxyHeaders(emdash.config));

package/dist/astro/routes/api/auth/passkey/options.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"options.mjs","names":[],"sources":["../../../../../../src/astro/routes/api/auth/passkey/options.ts"],"sourcesContent":["/**\n * POST /_emdash/api/auth/passkey/options\n *\n * Get authentication options for passkey login.\n *\n * Rate limited: 10 requests per minute per IP.\n */\n\nimport type { APIRoute } from \"astro\";\n\nexport const prerender = false;\n\nimport { generateAuthenticationOptions } from \"@emdash-cms/auth/passkey\";\n\nimport { apiError, apiSuccess, handleError } from \"#api/error.js\";\nimport { isParseError, parseOptionalBody } from \"#api/parse.js\";\nimport { getPublicOrigin } from \"#api/public-url.js\";\nimport { passkeyOptionsBody } from \"#api/schemas.js\";\nimport { createChallengeStore, cleanupExpiredChallenges } from \"#auth/challenge-store.js\";\nimport { getPasskeyConfig } from \"#auth/passkey-config.js\";\nimport { checkRateLimit, getClientIp, rateLimitResponse } from \"#auth/rate-limit.js\";\nimport { getTrustedProxyHeaders } from \"#auth/trusted-proxy.js\";\nimport { OptionsRepository } from \"#db/repositories/options.js\";\n\nexport const POST: APIRoute = async ({ request, locals }) => {\n\tconst { emdash } = locals;\n\n\tif (!emdash?.db) {\n\t\treturn apiError(\"NOT_CONFIGURED\", \"EmDash is not initialized\", 500);\n\t}\n\n\ttry {\n\t\t// Fire-and-forget cleanup of expired challenges -- prevents accumulation\n\t\tvoid cleanupExpiredChallenges(emdash.db).catch(() => {});\n\n\t\t// Parse body before rate limiting so malformed requests don't consume slots\n\t\tconst body = await parseOptionalBody(request, passkeyOptionsBody, {});\n\t\tif (isParseError(body)) return body;\n\n\t\t// Rate limit: 10 requests per 60 seconds per IP\n\t\tconst ip = getClientIp(request, getTrustedProxyHeaders(emdash.config));\n\t\tconst rateLimit = await checkRateLimit(emdash.db, ip, \"passkey/options\", 10, 60);\n\t\tif (!rateLimit.allowed) {\n\t\t\treturn rateLimitResponse(60);\n\t\t}\n\n\t\t// Get passkey config\n\t\tconst url = new URL(request.url);\n\t\tconst options = new OptionsRepository(emdash.db);\n\t\tconst siteName = (await options.get<string>(\"emdash:site_title\")) ?? undefined;\n\t\tconst siteUrl = getPublicOrigin(url, emdash?.config);\n\t\tconst passkeyConfig = getPasskeyConfig(url, siteName, siteUrl);\n\n\t\t// Generate authentication options\n\t\tconst challengeStore = createChallengeStore(emdash.db);\n\t\t// Never scope to the submitted email: allowCredentials would reveal whether the account exists.\n\t\tconst authOptions = await generateAuthenticationOptions(passkeyConfig, [], challengeStore);\n\n\t\treturn apiSuccess({\n\t\t\tsuccess: true,\n\t\t\toptions: authOptions,\n\t\t});\n\t} catch (error) {\n\t\treturn handleError(error, \"Failed to generate passkey options\", \"PASSKEY_OPTIONS_ERROR\");\n\t}\n};\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;AAUA,MAAa,YAAY;AAczB,MAAa,OAAiB,OAAO,EAAE,SAAS,aAAa;CAC5D,MAAM,EAAE,WAAW;AAEnB,KAAI,CAAC,QAAQ,GACZ,QAAO,SAAS,kBAAkB,6BAA6B,IAAI;AAGpE,KAAI;AAEH,EAAK,yBAAyB,OAAO,GAAG,CAAC,YAAY,GAAG;EAGxD,MAAM,OAAO,MAAM,kBAAkB,SAAS,oBAAoB,EAAE,CAAC;AACrE,MAAI,aAAa,KAAK,CAAE,QAAO;EAG/B,MAAM,KAAK,YAAY,SAAS,uBAAuB,OAAO,OAAO,CAAC;AAEtE,MAAI,EADc,MAAM,eAAe,OAAO,IAAI,IAAI,mBAAmB,IAAI,GAAG,EACjE,QACd,QAAO,kBAAkB,GAAG;EAI7B,MAAM,MAAM,IAAI,IAAI,QAAQ,IAAI;AAWhC,SAAO,WAAW;GACjB,SAAS;GACT,SAJmB,MAAM,8BALJ,iBAAiB,KAFrB,MADF,IAAI,kBAAkB,OAAO,GAAG,CAChB,IAAY,oBAAoB,IAAK,QACrD,gBAAgB,KAAK,QAAQ,OAAO,CACU,EAKS,EAAE,EAFlD,qBAAqB,OAAO,GAAG,CAEoC;GAKzF,CAAC;UACM,OAAO;AACf,SAAO,YAAY,OAAO,sCAAsC,wBAAwB"}
+{"version":3,"file":"options.mjs","names":[],"sources":["../../../../../../src/astro/routes/api/auth/passkey/options.ts"],"sourcesContent":["/**\n * POST /_emdash/api/auth/passkey/options\n *\n * Get authentication options for passkey login.\n *\n * Rate limited: 10 requests per minute per IP.\n */\n\nimport type { APIRoute } from \"astro\";\n\nexport const prerender = false;\n\nimport { generateAuthenticationOptions } from \"@emdash-cms/auth/passkey\";\n\nimport { apiError, apiSuccess, handleError } from \"#api/error.js\";\nimport { isParseError, parseOptionalBody } from \"#api/parse.js\";\nimport { getPublicOrigin } from \"#api/public-url.js\";\nimport { passkeyOptionsBody } from \"#api/schemas.js\";\nimport { createChallengeStore, cleanupExpiredChallenges } from \"#auth/challenge-store.js\";\nimport { getPasskeyConfig } from \"#auth/passkey-config.js\";\nimport { checkRateLimit, getClientIp, rateLimitResponse } from \"#auth/rate-limit.js\";\nimport { getTrustedProxyHeaders } from \"#auth/trusted-proxy.js\";\nimport { OptionsRepository } from \"#db/repositories/options.js\";\n\nimport { after } from \"../../../../../after.js\";\n\nexport const POST: APIRoute = async ({ request, locals }) => {\n\tconst { emdash } = locals;\n\n\tif (!emdash?.db) {\n\t\treturn apiError(\"NOT_CONFIGURED\", \"EmDash is not initialized\", 500);\n\t}\n\n\ttry {\n\t\t// Cleanup of expired challenges -- prevents accumulation\n\t\tafter(async () => {\n\t\t\ttry {\n\t\t\t\tawait cleanupExpiredChallenges(emdash.db);\n\t\t\t} catch (error) {\n\t\t\t\tconsole.error(\"[passkey] failed to delete expired challenges:\", error);\n\t\t\t}\n\t\t});\n\n\t\t// Parse body before rate limiting so malformed requests don't consume slots\n\t\tconst body = await parseOptionalBody(request, passkeyOptionsBody, {});\n\t\tif (isParseError(body)) return body;\n\n\t\t// Rate limit: 10 requests per 60 seconds per IP\n\t\tconst ip = getClientIp(request, getTrustedProxyHeaders(emdash.config));\n\t\tconst rateLimit = await checkRateLimit(emdash.db, ip, \"passkey/options\", 10, 60);\n\t\tif (!rateLimit.allowed) {\n\t\t\treturn rateLimitResponse(60);\n\t\t}\n\n\t\t// Get passkey config\n\t\tconst url = new URL(request.url);\n\t\tconst options = new OptionsRepository(emdash.db);\n\t\tconst siteName = (await options.get<string>(\"emdash:site_title\")) ?? undefined;\n\t\tconst siteUrl = getPublicOrigin(url, emdash?.config);\n\t\tconst passkeyConfig = getPasskeyConfig(url, siteName, siteUrl);\n\n\t\t// Generate authentication options\n\t\tconst challengeStore = createChallengeStore(emdash.db);\n\t\t// Never scope to the submitted email: allowCredentials would reveal whether the account exists.\n\t\tconst authOptions = await generateAuthenticationOptions(passkeyConfig, [], challengeStore);\n\n\t\treturn apiSuccess({\n\t\t\tsuccess: true,\n\t\t\toptions: authOptions,\n\t\t});\n\t} catch (error) {\n\t\treturn handleError(error, \"Failed to generate passkey options\", \"PASSKEY_OPTIONS_ERROR\");\n\t}\n};\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;AAUA,MAAa,YAAY;AAgBzB,MAAa,OAAiB,OAAO,EAAE,SAAS,aAAa;CAC5D,MAAM,EAAE,WAAW;AAEnB,KAAI,CAAC,QAAQ,GACZ,QAAO,SAAS,kBAAkB,6BAA6B,IAAI;AAGpE,KAAI;AAEH,QAAM,YAAY;AACjB,OAAI;AACH,UAAM,yBAAyB,OAAO,GAAG;YACjC,OAAO;AACf,YAAQ,MAAM,kDAAkD,MAAM;;IAEtE;EAGF,MAAM,OAAO,MAAM,kBAAkB,SAAS,oBAAoB,EAAE,CAAC;AACrE,MAAI,aAAa,KAAK,CAAE,QAAO;EAG/B,MAAM,KAAK,YAAY,SAAS,uBAAuB,OAAO,OAAO,CAAC;AAEtE,MAAI,EADc,MAAM,eAAe,OAAO,IAAI,IAAI,mBAAmB,IAAI,GAAG,EACjE,QACd,QAAO,kBAAkB,GAAG;EAI7B,MAAM,MAAM,IAAI,IAAI,QAAQ,IAAI;AAWhC,SAAO,WAAW;GACjB,SAAS;GACT,SAJmB,MAAM,8BALJ,iBAAiB,KAFrB,MADF,IAAI,kBAAkB,OAAO,GAAG,CAChB,IAAY,oBAAoB,IAAK,QACrD,gBAAgB,KAAK,QAAQ,OAAO,CACU,EAKS,EAAE,EAFlD,qBAAqB,OAAO,GAAG,CAEoC;GAKzF,CAAC;UACM,OAAO;AACf,SAAO,YAAY,OAAO,sCAAsC,wBAAwB"}

package/dist/astro/routes/api/auth/passkey/register/options.mjs

@@ -2,24 +2,24 @@ import "../../../../../../config-CvmjJcVw.mjs";
 import { t as OptionsRepository } from "../../../../../../options-DhrI7eMv.mjs";
 import "../../../../../../base64-BQBZwXCx.mjs";
 import "../../../../../../url-Dn3IStq8.mjs";
-import "../../../../../../types-C-Xp0CcN.mjs";
-import "../../../../../../errors-CuHQRiBW.mjs";
-import "../../../../../../errors-DTE6C3K_.mjs";
-import "../../../../../../settings-WHr45II1.mjs";
-import "../../../../../../site-settings-KJOqJW6W.mjs";
-import { n as apiSuccess, r as handleError, t as apiError } from "../../../../../../error-B0rgPgsQ.mjs";
-import { r as parseOptionalBody, t as isParseError } from "../../../../../../parse-CmFDTGzp.mjs";
-import "../../../../../../redirects-D4EWeXAo.mjs";
-import "../../../../../../entry-lock-sxz2PGAT.mjs";
-import "../../../../../../media-aahnKHze.mjs";
-import "../../../../../../comments-BRtp992B.mjs";
-import { O as passkeyRegisterOptionsBody } from "../../../../../../byline-fields-DHJs0Mja.mjs";
-import "../../../../../../menus-BQKqf0Up.mjs";
-import "../../../../../../status-D39Fpy8R.mjs";
+import "../../../../../../types-D2NEXtgB.mjs";
+import "../../../../../../errors-B4f4It-2.mjs";
+import "../../../../../../errors-BOYNdIo3.mjs";
+import "../../../../../../settings-Dd1uivmQ.mjs";
+import "../../../../../../site-settings-DRHfX7bq.mjs";
+import { n as apiSuccess, r as handleError, t as apiError } from "../../../../../../error-CVWeIOku.mjs";
+import { r as parseOptionalBody, t as isParseError } from "../../../../../../parse-DgQ2NABT.mjs";
+import "../../../../../../redirects-BEVSRMa2.mjs";
+import "../../../../../../entry-lock-Df6-XhIu.mjs";
+import "../../../../../../media-1WC65OCB.mjs";
+import "../../../../../../comments-yiRFx3w5.mjs";
+import { O as passkeyRegisterOptionsBody } from "../../../../../../byline-fields-BLXZnX7N.mjs";
+import "../../../../../../menus-BSzwObhV.mjs";
+import "../../../../../../status-BFNdxzKc.mjs";
 import "../../../../../../api/schemas/index.mjs";
-import { r as getPublicOrigin } from "../../../../../../public-url-B5a0QAh6.mjs";
-import { n as createChallengeStore } from "../../../../../../challenge-store-CxZxPqaw.mjs";
-import { t as getPasskeyConfig } from "../../../../../../passkey-config-C-MxsV22.mjs";
+import { i as getPublicOrigin } from "../../../../../../public-url-Bt98vysr.mjs";
+import { n as createChallengeStore } from "../../../../../../challenge-store-C17BYx2-.mjs";
+import { t as getPasskeyConfig } from "../../../../../../passkey-config-D0kdzEao.mjs";
 import { createKyselyAdapter } from "@emdash-cms/auth/adapters/kysely";
 import { generateRegistrationOptions } from "@emdash-cms/auth/passkey";
 

package/dist/astro/routes/api/auth/passkey/register/verify.mjs

@@ -2,25 +2,25 @@ import "../../../../../../config-CvmjJcVw.mjs";
 import { t as OptionsRepository } from "../../../../../../options-DhrI7eMv.mjs";
 import "../../../../../../base64-BQBZwXCx.mjs";
 import "../../../../../../url-Dn3IStq8.mjs";
-import "../../../../../../types-C-Xp0CcN.mjs";
-import "../../../../../../errors-CuHQRiBW.mjs";
-import "../../../../../../errors-DTE6C3K_.mjs";
-import "../../../../../../settings-WHr45II1.mjs";
-import "../../../../../../site-settings-KJOqJW6W.mjs";
-import { n as apiSuccess, t as apiError } from "../../../../../../error-B0rgPgsQ.mjs";
-import { n as parseBody, t as isParseError } from "../../../../../../parse-CmFDTGzp.mjs";
-import "../../../../../../redirects-D4EWeXAo.mjs";
-import "../../../../../../entry-lock-sxz2PGAT.mjs";
-import "../../../../../../media-aahnKHze.mjs";
-import "../../../../../../comments-BRtp992B.mjs";
-import { k as passkeyRegisterVerifyBody } from "../../../../../../byline-fields-DHJs0Mja.mjs";
-import "../../../../../../menus-BQKqf0Up.mjs";
-import "../../../../../../status-D39Fpy8R.mjs";
+import "../../../../../../types-D2NEXtgB.mjs";
+import "../../../../../../errors-B4f4It-2.mjs";
+import "../../../../../../errors-BOYNdIo3.mjs";
+import "../../../../../../settings-Dd1uivmQ.mjs";
+import "../../../../../../site-settings-DRHfX7bq.mjs";
+import { n as apiSuccess, t as apiError } from "../../../../../../error-CVWeIOku.mjs";
+import { n as parseBody, t as isParseError } from "../../../../../../parse-DgQ2NABT.mjs";
+import "../../../../../../redirects-BEVSRMa2.mjs";
+import "../../../../../../entry-lock-Df6-XhIu.mjs";
+import "../../../../../../media-1WC65OCB.mjs";
+import "../../../../../../comments-yiRFx3w5.mjs";
+import { k as passkeyRegisterVerifyBody } from "../../../../../../byline-fields-BLXZnX7N.mjs";
+import "../../../../../../menus-BSzwObhV.mjs";
+import "../../../../../../status-BFNdxzKc.mjs";
 import "../../../../../../api/schemas/index.mjs";
-import { r as getPublicOrigin } from "../../../../../../public-url-B5a0QAh6.mjs";
-import { n as validateAllowedOrigins, t as getConfiguredAllowedOrigins } from "../../../../../../allowed-origins-CFtudhyw.mjs";
-import { n as createChallengeStore } from "../../../../../../challenge-store-CxZxPqaw.mjs";
-import { t as getPasskeyConfig } from "../../../../../../passkey-config-C-MxsV22.mjs";
+import { i as getPublicOrigin } from "../../../../../../public-url-Bt98vysr.mjs";
+import { n as validateAllowedOrigins, t as getConfiguredAllowedOrigins } from "../../../../../../allowed-origins-CEug-p0t.mjs";
+import { n as createChallengeStore } from "../../../../../../challenge-store-C17BYx2-.mjs";
+import { t as getPasskeyConfig } from "../../../../../../passkey-config-D0kdzEao.mjs";
 import { createKyselyAdapter } from "@emdash-cms/auth/adapters/kysely";
 import { registerPasskey, verifyRegistrationResponse } from "@emdash-cms/auth/passkey";
 

package/dist/astro/routes/api/auth/passkey/verify.mjs

@@ -3,26 +3,26 @@ import "../../../../../after-PcEvMY_6.mjs";
 import { t as OptionsRepository } from "../../../../../options-DhrI7eMv.mjs";
 import "../../../../../base64-BQBZwXCx.mjs";
 import "../../../../../url-Dn3IStq8.mjs";
-import "../../../../../types-C-Xp0CcN.mjs";
-import "../../../../../errors-CuHQRiBW.mjs";
-import "../../../../../errors-DTE6C3K_.mjs";
-import "../../../../../settings-WHr45II1.mjs";
-import "../../../../../site-settings-KJOqJW6W.mjs";
-import { n as apiSuccess, r as handleError, t as apiError } from "../../../../../error-B0rgPgsQ.mjs";
-import { n as parseBody, t as isParseError } from "../../../../../parse-CmFDTGzp.mjs";
-import "../../../../../redirects-D4EWeXAo.mjs";
-import "../../../../../entry-lock-sxz2PGAT.mjs";
-import "../../../../../media-aahnKHze.mjs";
-import "../../../../../comments-BRtp992B.mjs";
-import { j as passkeyVerifyBody } from "../../../../../byline-fields-DHJs0Mja.mjs";
-import "../../../../../menus-BQKqf0Up.mjs";
-import "../../../../../status-D39Fpy8R.mjs";
+import "../../../../../types-D2NEXtgB.mjs";
+import "../../../../../errors-B4f4It-2.mjs";
+import "../../../../../errors-BOYNdIo3.mjs";
+import "../../../../../settings-Dd1uivmQ.mjs";
+import "../../../../../site-settings-DRHfX7bq.mjs";
+import { n as apiSuccess, r as handleError, t as apiError } from "../../../../../error-CVWeIOku.mjs";
+import { n as parseBody, t as isParseError } from "../../../../../parse-DgQ2NABT.mjs";
+import "../../../../../redirects-BEVSRMa2.mjs";
+import "../../../../../entry-lock-Df6-XhIu.mjs";
+import "../../../../../media-1WC65OCB.mjs";
+import "../../../../../comments-yiRFx3w5.mjs";
+import { j as passkeyVerifyBody } from "../../../../../byline-fields-BLXZnX7N.mjs";
+import "../../../../../menus-BSzwObhV.mjs";
+import "../../../../../status-BFNdxzKc.mjs";
 import "../../../../../api/schemas/index.mjs";
-import { r as getPublicOrigin } from "../../../../../public-url-B5a0QAh6.mjs";
-import { n as validateAllowedOrigins, t as getConfiguredAllowedOrigins } from "../../../../../allowed-origins-CFtudhyw.mjs";
-import { n as createChallengeStore } from "../../../../../challenge-store-CxZxPqaw.mjs";
-import { r as sessionUnavailableError } from "../../../../../session-user-CqkPtrPL.mjs";
-import { t as getPasskeyConfig } from "../../../../../passkey-config-C-MxsV22.mjs";
+import { i as getPublicOrigin } from "../../../../../public-url-Bt98vysr.mjs";
+import { n as validateAllowedOrigins, t as getConfiguredAllowedOrigins } from "../../../../../allowed-origins-CEug-p0t.mjs";
+import { n as createChallengeStore } from "../../../../../challenge-store-C17BYx2-.mjs";
+import { r as sessionUnavailableError } from "../../../../../session-user-DlpPdf8L.mjs";
+import { t as getPasskeyConfig } from "../../../../../passkey-config-D0kdzEao.mjs";
 import { createKyselyAdapter } from "@emdash-cms/auth/adapters/kysely";
 import { PasskeyAuthenticationError, authenticateWithPasskey } from "@emdash-cms/auth/passkey";
 

package/dist/astro/routes/api/auth/signup/complete.mjs

@@ -3,26 +3,26 @@ import "../../../../../after-PcEvMY_6.mjs";
 import { t as OptionsRepository } from "../../../../../options-DhrI7eMv.mjs";
 import "../../../../../base64-BQBZwXCx.mjs";
 import "../../../../../url-Dn3IStq8.mjs";
-import "../../../../../types-C-Xp0CcN.mjs";
-import "../../../../../errors-CuHQRiBW.mjs";
-import "../../../../../errors-DTE6C3K_.mjs";
-import "../../../../../settings-WHr45II1.mjs";
-import "../../../../../site-settings-KJOqJW6W.mjs";
-import { n as apiSuccess, r as handleError, t as apiError } from "../../../../../error-B0rgPgsQ.mjs";
-import { n as parseBody, t as isParseError } from "../../../../../parse-CmFDTGzp.mjs";
-import "../../../../../redirects-D4EWeXAo.mjs";
-import "../../../../../entry-lock-sxz2PGAT.mjs";
-import "../../../../../media-aahnKHze.mjs";
-import "../../../../../comments-BRtp992B.mjs";
-import { M as signupCompleteBody } from "../../../../../byline-fields-DHJs0Mja.mjs";
-import "../../../../../menus-BQKqf0Up.mjs";
-import "../../../../../status-D39Fpy8R.mjs";
+import "../../../../../types-D2NEXtgB.mjs";
+import "../../../../../errors-B4f4It-2.mjs";
+import "../../../../../errors-BOYNdIo3.mjs";
+import "../../../../../settings-Dd1uivmQ.mjs";
+import "../../../../../site-settings-DRHfX7bq.mjs";
+import { n as apiSuccess, r as handleError, t as apiError } from "../../../../../error-CVWeIOku.mjs";
+import { n as parseBody, t as isParseError } from "../../../../../parse-DgQ2NABT.mjs";
+import "../../../../../redirects-BEVSRMa2.mjs";
+import "../../../../../entry-lock-Df6-XhIu.mjs";
+import "../../../../../media-1WC65OCB.mjs";
+import "../../../../../comments-yiRFx3w5.mjs";
+import { M as signupCompleteBody } from "../../../../../byline-fields-BLXZnX7N.mjs";
+import "../../../../../menus-BSzwObhV.mjs";
+import "../../../../../status-BFNdxzKc.mjs";
 import "../../../../../api/schemas/index.mjs";
-import { r as getPublicOrigin } from "../../../../../public-url-B5a0QAh6.mjs";
-import { n as validateAllowedOrigins, t as getConfiguredAllowedOrigins } from "../../../../../allowed-origins-CFtudhyw.mjs";
-import { n as createChallengeStore } from "../../../../../challenge-store-CxZxPqaw.mjs";
-import { r as sessionUnavailableError } from "../../../../../session-user-CqkPtrPL.mjs";
-import { t as getPasskeyConfig } from "../../../../../passkey-config-C-MxsV22.mjs";
+import { i as getPublicOrigin } from "../../../../../public-url-Bt98vysr.mjs";
+import { n as validateAllowedOrigins, t as getConfiguredAllowedOrigins } from "../../../../../allowed-origins-CEug-p0t.mjs";
+import { n as createChallengeStore } from "../../../../../challenge-store-C17BYx2-.mjs";
+import { r as sessionUnavailableError } from "../../../../../session-user-DlpPdf8L.mjs";
+import { t as getPasskeyConfig } from "../../../../../passkey-config-D0kdzEao.mjs";
 import { SignupError, completeSignup } from "@emdash-cms/auth";
 import { createKyselyAdapter } from "@emdash-cms/auth/adapters/kysely";
 import { registerPasskey, verifyRegistrationResponse } from "@emdash-cms/auth/passkey";

package/dist/astro/routes/api/auth/signup/request.mjs

@@ -1,25 +1,26 @@
 import "../../../../../config-CvmjJcVw.mjs";
+import "../../../../../after-PcEvMY_6.mjs";
 import { t as OptionsRepository } from "../../../../../options-DhrI7eMv.mjs";
 import "../../../../../base64-BQBZwXCx.mjs";
 import "../../../../../url-Dn3IStq8.mjs";
-import "../../../../../types-C-Xp0CcN.mjs";
-import "../../../../../errors-CuHQRiBW.mjs";
-import "../../../../../errors-DTE6C3K_.mjs";
-import "../../../../../settings-WHr45II1.mjs";
-import "../../../../../site-settings-KJOqJW6W.mjs";
-import { n as apiSuccess, t as apiError } from "../../../../../error-B0rgPgsQ.mjs";
-import { n as parseBody, t as isParseError } from "../../../../../parse-CmFDTGzp.mjs";
-import "../../../../../redirects-D4EWeXAo.mjs";
-import "../../../../../entry-lock-sxz2PGAT.mjs";
-import "../../../../../media-aahnKHze.mjs";
-import "../../../../../comments-BRtp992B.mjs";
-import { N as signupRequestBody } from "../../../../../byline-fields-DHJs0Mja.mjs";
-import "../../../../../menus-BQKqf0Up.mjs";
-import "../../../../../status-D39Fpy8R.mjs";
+import "../../../../../types-D2NEXtgB.mjs";
+import "../../../../../errors-B4f4It-2.mjs";
+import "../../../../../errors-BOYNdIo3.mjs";
+import "../../../../../settings-Dd1uivmQ.mjs";
+import "../../../../../site-settings-DRHfX7bq.mjs";
+import { n as apiSuccess, t as apiError } from "../../../../../error-CVWeIOku.mjs";
+import { n as parseBody, t as isParseError } from "../../../../../parse-DgQ2NABT.mjs";
+import "../../../../../redirects-BEVSRMa2.mjs";
+import "../../../../../entry-lock-Df6-XhIu.mjs";
+import "../../../../../media-1WC65OCB.mjs";
+import "../../../../../comments-yiRFx3w5.mjs";
+import { N as signupRequestBody } from "../../../../../byline-fields-BLXZnX7N.mjs";
+import "../../../../../menus-BSzwObhV.mjs";
+import "../../../../../status-BFNdxzKc.mjs";
 import "../../../../../api/schemas/index.mjs";
-import { t as getTrustedProxyHeaders } from "../../../../../trusted-proxy-BqfQFs6a.mjs";
-import { t as getSiteBaseUrl } from "../../../../../site-url-Ceq_AUK0.mjs";
-import { n as getClientIp, t as checkRateLimit } from "../../../../../rate-limit-iMvcu3eu.mjs";
+import { t as getTrustedProxyHeaders } from "../../../../../trusted-proxy-BU3Nx9g1.mjs";
+import { n as getSiteBaseUrl } from "../../../../../site-url-MB685I5X.mjs";
+import { n as getClientIp, t as checkRateLimit } from "../../../../../rate-limit-Xp4d0NBY.mjs";
 import { requestSignup } from "@emdash-cms/auth";
 import { createKyselyAdapter } from "@emdash-cms/auth/adapters/kysely";
 

package/dist/astro/routes/api/auth/signup/request.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"request.mjs","names":[],"sources":["../../../../../../src/astro/routes/api/auth/signup/request.ts"],"sourcesContent":["/**\n * POST /_emdash/api/auth/signup/request\n *\n * Request self-signup. Sends verification email if domain is allowed.\n * Always returns 200 to prevent email enumeration.\n *\n * Rate limited: 3 requests per 5 minutes per IP. Mirrors magic-link/send.\n */\n\nimport type { APIRoute } from \"astro\";\n\nexport const prerender = false;\n\nimport { requestSignup } from \"@emdash-cms/auth\";\nimport { createKyselyAdapter } from \"@emdash-cms/auth/adapters/kysely\";\n\nimport { apiError, apiSuccess } from \"#api/error.js\";\nimport { isParseError, parseBody } from \"#api/parse.js\";\nimport { signupRequestBody } from \"#api/schemas.js\";\nimport { getSiteBaseUrl } from \"#api/site-url.js\";\nimport { checkRateLimit, getClientIp } from \"#auth/rate-limit.js\";\nimport { getTrustedProxyHeaders } from \"#auth/trusted-proxy.js\";\nimport { OptionsRepository } from \"#db/repositories/options.js\";\n\n// Generic response body used for both the real success path and the\n// rate-limited / domain-disallowed paths. Keeping them identical prevents\n// the caller from distinguishing between them.\nconst GENERIC_SUCCESS = {\n\tsuccess: true,\n\tmessage: \"If your email domain is allowed, you'll receive a verification email.\",\n};\n\nexport const POST: APIRoute = async ({ request, locals }) => {\n\tconst { emdash } = locals;\n\n\tif (!emdash?.db) {\n\t\treturn apiError(\"NOT_CONFIGURED\", \"EmDash is not initialized\", 500);\n\t}\n\n\t// Check if email pipeline is available\n\tif (!emdash.email?.isAvailable()) {\n\t\treturn apiError(\n\t\t\t\"EMAIL_NOT_CONFIGURED\",\n\t\t\t\"Email not configured. Self-signup is unavailable.\",\n\t\t\t503,\n\t\t);\n\t}\n\n\ttry {\n\t\t// Parse the body first — this avoids burning a rate-limit slot on\n\t\t// malformed input and keeps the timing of the rate-limited and\n\t\t// real paths aligned.\n\t\tconst body = await parseBody(request, signupRequestBody);\n\t\tif (isParseError(body)) return body;\n\n\t\t// Rate limit: 3 requests per 300 seconds per IP. Matches magic-link/send.\n\t\tconst ip = getClientIp(request, getTrustedProxyHeaders(emdash.config));\n\t\tconst rateLimit = await checkRateLimit(emdash.db, ip, \"signup/request\", 3, 300);\n\t\tif (!rateLimit.allowed) {\n\t\t\t// Return success-shaped response to avoid revealing rate limiting\n\t\t\t// (and by extension, the fact that the caller is probing).\n\t\t\treturn apiSuccess(GENERIC_SUCCESS);\n\t\t}\n\n\t\tconst adapter = createKyselyAdapter(emdash.db);\n\n\t\t// Get site config for signup email\n\t\tconst options = new OptionsRepository(emdash.db);\n\t\tconst siteName = (await options.get<string>(\"emdash:site_title\")) || \"EmDash\";\n\n\t\t// Use the configured site URL (stored option as fallback) to prevent Host header spoofing in signup emails\n\t\tconst baseUrl = await getSiteBaseUrl(emdash.db, request, emdash.config);\n\n\t\t// Request signup - this handles all checks internally and fails silently\n\t\t// if domain not allowed or user exists (to prevent enumeration)\n\t\tawait requestSignup(\n\t\t\t{\n\t\t\t\tbaseUrl,\n\t\t\t\tsiteName,\n\t\t\t\temail: (message) => emdash.email!.send(message, \"system\"),\n\t\t\t},\n\t\t\tadapter,\n\t\t\tbody.email.toLowerCase().trim(),\n\t\t);\n\n\t\t// Always return success to prevent email enumeration\n\t\treturn apiSuccess(GENERIC_SUCCESS);\n\t} catch (error) {\n\t\tconsole.error(\"Signup request error:\", error);\n\n\t\t// Don't reveal internal errors - just return generic success\n\t\t// to prevent information leakage\n\t\treturn apiSuccess(GENERIC_SUCCESS);\n\t}\n};\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;AAWA,MAAa,YAAY;AAgBzB,MAAM,kBAAkB;CACvB,SAAS;CACT,SAAS;CACT;AAED,MAAa,OAAiB,OAAO,EAAE,SAAS,aAAa;CAC5D,MAAM,EAAE,WAAW;AAEnB,KAAI,CAAC,QAAQ,GACZ,QAAO,SAAS,kBAAkB,6BAA6B,IAAI;AAIpE,KAAI,CAAC,OAAO,OAAO,aAAa,CAC/B,QAAO,SACN,wBACA,qDACA,IACA;AAGF,KAAI;EAIH,MAAM,OAAO,MAAM,UAAU,SAAS,kBAAkB;AACxD,MAAI,aAAa,KAAK,CAAE,QAAO;EAG/B,MAAM,KAAK,YAAY,SAAS,uBAAuB,OAAO,OAAO,CAAC;AAEtE,MAAI,EADc,MAAM,eAAe,OAAO,IAAI,IAAI,kBAAkB,GAAG,IAAI,EAChE,QAGd,QAAO,WAAW,gBAAgB;EAGnC,MAAM,UAAU,oBAAoB,OAAO,GAAG;EAI9C,MAAM,WAAY,MADF,IAAI,kBAAkB,OAAO,GAAG,CAChB,IAAY,oBAAoB,IAAK;AAOrE,QAAM,cACL;GACC,SANc,MAAM,eAAe,OAAO,IAAI,SAAS,OAAO,OAAO;GAOrE;GACA,QAAQ,YAAY,OAAO,MAAO,KAAK,SAAS,SAAS;GACzD,EACD,SACA,KAAK,MAAM,aAAa,CAAC,MAAM,CAC/B;AAGD,SAAO,WAAW,gBAAgB;UAC1B,OAAO;AACf,UAAQ,MAAM,yBAAyB,MAAM;AAI7C,SAAO,WAAW,gBAAgB"}
+{"version":3,"file":"request.mjs","names":[],"sources":["../../../../../../src/astro/routes/api/auth/signup/request.ts"],"sourcesContent":["/**\n * POST /_emdash/api/auth/signup/request\n *\n * Request self-signup. Sends verification email if domain is allowed.\n * Always returns 200 to prevent email enumeration.\n *\n * Rate limited: 3 requests per 5 minutes per IP. Mirrors magic-link/send.\n */\n\nimport type { APIRoute } from \"astro\";\n\nexport const prerender = false;\n\nimport { requestSignup } from \"@emdash-cms/auth\";\nimport { createKyselyAdapter } from \"@emdash-cms/auth/adapters/kysely\";\n\nimport { apiError, apiSuccess } from \"#api/error.js\";\nimport { isParseError, parseBody } from \"#api/parse.js\";\nimport { signupRequestBody } from \"#api/schemas.js\";\nimport { getSiteBaseUrl } from \"#api/site-url.js\";\nimport { checkRateLimit, getClientIp } from \"#auth/rate-limit.js\";\nimport { getTrustedProxyHeaders } from \"#auth/trusted-proxy.js\";\nimport { OptionsRepository } from \"#db/repositories/options.js\";\n\n// Generic response body used for both the real success path and the\n// rate-limited / domain-disallowed paths. Keeping them identical prevents\n// the caller from distinguishing between them.\nconst GENERIC_SUCCESS = {\n\tsuccess: true,\n\tmessage: \"If your email domain is allowed, you'll receive a verification email.\",\n};\n\nexport const POST: APIRoute = async ({ request, locals }) => {\n\tconst { emdash } = locals;\n\n\tif (!emdash?.db) {\n\t\treturn apiError(\"NOT_CONFIGURED\", \"EmDash is not initialized\", 500);\n\t}\n\n\t// Check if email pipeline is available\n\tif (!emdash.email?.isAvailable()) {\n\t\treturn apiError(\n\t\t\t\"EMAIL_NOT_CONFIGURED\",\n\t\t\t\"Email not configured. Self-signup is unavailable.\",\n\t\t\t503,\n\t\t);\n\t}\n\n\ttry {\n\t\t// Parse the body first — this avoids burning a rate-limit slot on\n\t\t// malformed input and keeps the timing of the rate-limited and\n\t\t// real paths aligned.\n\t\tconst body = await parseBody(request, signupRequestBody);\n\t\tif (isParseError(body)) return body;\n\n\t\t// Rate limit: 3 requests per 300 seconds per IP. Matches magic-link/send.\n\t\tconst ip = getClientIp(request, getTrustedProxyHeaders(emdash.config));\n\t\tconst rateLimit = await checkRateLimit(emdash.db, ip, \"signup/request\", 3, 300);\n\t\tif (!rateLimit.allowed) {\n\t\t\t// Return success-shaped response to avoid revealing rate limiting\n\t\t\t// (and by extension, the fact that the caller is probing).\n\t\t\treturn apiSuccess(GENERIC_SUCCESS);\n\t\t}\n\n\t\tconst adapter = createKyselyAdapter(emdash.db);\n\n\t\t// Get site config for signup email\n\t\tconst options = new OptionsRepository(emdash.db);\n\t\tconst siteName = (await options.get<string>(\"emdash:site_title\")) || \"EmDash\";\n\n\t\t// Use the configured site URL (stored option as fallback) to prevent Host header spoofing in signup emails\n\t\tconst baseUrl = await getSiteBaseUrl(emdash.db, request, emdash.config);\n\n\t\t// Request signup - this handles all checks internally and fails silently\n\t\t// if domain not allowed or user exists (to prevent enumeration)\n\t\tawait requestSignup(\n\t\t\t{\n\t\t\t\tbaseUrl,\n\t\t\t\tsiteName,\n\t\t\t\temail: (message) => emdash.email!.send(message, \"system\"),\n\t\t\t},\n\t\t\tadapter,\n\t\t\tbody.email.toLowerCase().trim(),\n\t\t);\n\n\t\t// Always return success to prevent email enumeration\n\t\treturn apiSuccess(GENERIC_SUCCESS);\n\t} catch (error) {\n\t\tconsole.error(\"Signup request error:\", error);\n\n\t\t// Don't reveal internal errors - just return generic success\n\t\t// to prevent information leakage\n\t\treturn apiSuccess(GENERIC_SUCCESS);\n\t}\n};\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;AAWA,MAAa,YAAY;AAgBzB,MAAM,kBAAkB;CACvB,SAAS;CACT,SAAS;CACT;AAED,MAAa,OAAiB,OAAO,EAAE,SAAS,aAAa;CAC5D,MAAM,EAAE,WAAW;AAEnB,KAAI,CAAC,QAAQ,GACZ,QAAO,SAAS,kBAAkB,6BAA6B,IAAI;AAIpE,KAAI,CAAC,OAAO,OAAO,aAAa,CAC/B,QAAO,SACN,wBACA,qDACA,IACA;AAGF,KAAI;EAIH,MAAM,OAAO,MAAM,UAAU,SAAS,kBAAkB;AACxD,MAAI,aAAa,KAAK,CAAE,QAAO;EAG/B,MAAM,KAAK,YAAY,SAAS,uBAAuB,OAAO,OAAO,CAAC;AAEtE,MAAI,EADc,MAAM,eAAe,OAAO,IAAI,IAAI,kBAAkB,GAAG,IAAI,EAChE,QAGd,QAAO,WAAW,gBAAgB;EAGnC,MAAM,UAAU,oBAAoB,OAAO,GAAG;EAI9C,MAAM,WAAY,MADF,IAAI,kBAAkB,OAAO,GAAG,CAChB,IAAY,oBAAoB,IAAK;AAOrE,QAAM,cACL;GACC,SANc,MAAM,eAAe,OAAO,IAAI,SAAS,OAAO,OAAO;GAOrE;GACA,QAAQ,YAAY,OAAO,MAAO,KAAK,SAAS,SAAS;GACzD,EACD,SACA,KAAK,MAAM,aAAa,CAAC,MAAM,CAC/B;AAGD,SAAO,WAAW,gBAAgB;UAC1B,OAAO;AACf,UAAQ,MAAM,yBAAyB,MAAM;AAI7C,SAAO,WAAW,gBAAgB"}

package/dist/astro/routes/api/auth/signup/verify.mjs

@@ -1,8 +1,8 @@
 import "../../../../../base64-BQBZwXCx.mjs";
-import "../../../../../types-C-Xp0CcN.mjs";
-import "../../../../../errors-CuHQRiBW.mjs";
-import "../../../../../errors-DTE6C3K_.mjs";
-import { n as apiSuccess, r as handleError, t as apiError } from "../../../../../error-B0rgPgsQ.mjs";
+import "../../../../../types-D2NEXtgB.mjs";
+import "../../../../../errors-B4f4It-2.mjs";
+import "../../../../../errors-BOYNdIo3.mjs";
+import { n as apiSuccess, r as handleError, t as apiError } from "../../../../../error-CVWeIOku.mjs";
 import { SignupError, roleFromLevel, validateSignupToken } from "@emdash-cms/auth";
 import { createKyselyAdapter } from "@emdash-cms/auth/adapters/kysely";
 

package/dist/astro/routes/api/calendar.mjs

@@ -2,22 +2,22 @@ import { t as validateIdentifier } from "../../../validate-DANX1-Qi.mjs";
 import "../../../config-CvmjJcVw.mjs";
 import "../../../base64-BQBZwXCx.mjs";
 import "../../../url-Dn3IStq8.mjs";
-import { c as encodeCursor, i as InvalidCursorError, s as decodeCursor } from "../../../types-C-Xp0CcN.mjs";
-import "../../../errors-CuHQRiBW.mjs";
-import "../../../errors-DTE6C3K_.mjs";
-import "../../../settings-WHr45II1.mjs";
-import "../../../site-settings-KJOqJW6W.mjs";
-import { a as unwrapResult, r as handleError, t as apiError } from "../../../error-B0rgPgsQ.mjs";
-import { i as parseQuery, t as isParseError } from "../../../parse-CmFDTGzp.mjs";
-import "../../../redirects-D4EWeXAo.mjs";
-import { Tt as calendarQuery } from "../../../entry-lock-sxz2PGAT.mjs";
-import "../../../media-aahnKHze.mjs";
-import "../../../comments-BRtp992B.mjs";
-import "../../../byline-fields-DHJs0Mja.mjs";
-import "../../../menus-BQKqf0Up.mjs";
-import "../../../status-D39Fpy8R.mjs";
+import { c as decodeCursor, i as InvalidCursorError, l as encodeCursor } from "../../../types-D2NEXtgB.mjs";
+import "../../../errors-B4f4It-2.mjs";
+import "../../../errors-BOYNdIo3.mjs";
+import "../../../settings-Dd1uivmQ.mjs";
+import "../../../site-settings-DRHfX7bq.mjs";
+import { a as unwrapResult, r as handleError, t as apiError } from "../../../error-CVWeIOku.mjs";
+import { i as parseQuery, t as isParseError } from "../../../parse-DgQ2NABT.mjs";
+import "../../../redirects-BEVSRMa2.mjs";
+import { Tt as calendarQuery } from "../../../entry-lock-Df6-XhIu.mjs";
+import "../../../media-1WC65OCB.mjs";
+import "../../../comments-yiRFx3w5.mjs";
+import "../../../byline-fields-BLXZnX7N.mjs";
+import "../../../menus-BSzwObhV.mjs";
+import "../../../status-BFNdxzKc.mjs";
 import "../../../api/schemas/index.mjs";
-import { i as requirePerm } from "../../../authorize-DeWfk--K.mjs";
+import { o as requirePerm } from "../../../authorize-DPFBGbE6.mjs";
 import { sql } from "kysely";
 
 //#region src/api/handlers/calendar.ts

package/dist/astro/routes/api/comments/_collection_/_contentId_/index.mjs

@@ -3,18 +3,18 @@ import "../../../../../../options-DhrI7eMv.mjs";
 import "../../../../../../secrets-Cc_O3Kp-.mjs";
 import "../../../../../../base64-BQBZwXCx.mjs";
 import "../../../../../../object-cache-Bo6DGaC9.mjs";
-import "../../../../../../types-C-Xp0CcN.mjs";
-import "../../../../../../comment-Bu08Wvr3.mjs";
-import "../../../../../../errors-CuHQRiBW.mjs";
-import "../../../../../../errors-DTE6C3K_.mjs";
-import { a as unwrapResult, i as requireDb, r as handleError, t as apiError } from "../../../../../../error-B0rgPgsQ.mjs";
-import "../../../../../../parse-CmFDTGzp.mjs";
-import "../../../../../../comments-BRtp992B.mjs";
-import "../../../../../../site-url-Ceq_AUK0.mjs";
-import { t as submitPublicComment } from "../../../../../../public-submission-CkmT2SKv.mjs";
-import { o as handleCommentList } from "../../../../../../comments-DVUYqdyC.mjs";
-import "../../../../../../rate-limit-iMvcu3eu.mjs";
-import "../../../../../../service-BuRKLMxa.mjs";
+import "../../../../../../types-D2NEXtgB.mjs";
+import "../../../../../../comment-UvIWDKcW.mjs";
+import "../../../../../../errors-B4f4It-2.mjs";
+import "../../../../../../errors-BOYNdIo3.mjs";
+import { a as unwrapResult, i as requireDb, r as handleError, t as apiError } from "../../../../../../error-CVWeIOku.mjs";
+import "../../../../../../parse-DgQ2NABT.mjs";
+import "../../../../../../comments-yiRFx3w5.mjs";
+import "../../../../../../site-url-MB685I5X.mjs";
+import { t as submitPublicComment } from "../../../../../../public-submission-Di3TsgzX.mjs";
+import { o as handleCommentList } from "../../../../../../comments-pej-_BUO.mjs";
+import "../../../../../../rate-limit-Xp4d0NBY.mjs";
+import "../../../../../../service-Bo_usgSk.mjs";
 
 //#region src/astro/routes/api/comments/[collection]/[contentId]/index.ts
 const prerender = false;

package/dist/astro/routes/api/comments/_collection_/_contentId_/reactions.mjs

@@ -5,25 +5,25 @@ import { a as resolveSecretsCached } from "../../../../../../secrets-Cc_O3Kp-.mj
 import "../../../../../../base64-BQBZwXCx.mjs";
 import { u as invalidateCommentObjectCache } from "../../../../../../object-cache-Bo6DGaC9.mjs";
 import "../../../../../../url-Dn3IStq8.mjs";
-import "../../../../../../types-C-Xp0CcN.mjs";
-import "../../../../../../comment-Bu08Wvr3.mjs";
-import "../../../../../../errors-CuHQRiBW.mjs";
-import "../../../../../../errors-DTE6C3K_.mjs";
-import "../../../../../../settings-WHr45II1.mjs";
-import "../../../../../../site-settings-KJOqJW6W.mjs";
-import { a as unwrapResult, i as requireDb, n as apiSuccess, r as handleError, t as apiError } from "../../../../../../error-B0rgPgsQ.mjs";
-import { n as parseBody, t as isParseError } from "../../../../../../parse-CmFDTGzp.mjs";
-import "../../../../../../redirects-D4EWeXAo.mjs";
-import "../../../../../../entry-lock-sxz2PGAT.mjs";
-import "../../../../../../media-aahnKHze.mjs";
-import { l as createReactionBody } from "../../../../../../comments-BRtp992B.mjs";
-import "../../../../../../byline-fields-DHJs0Mja.mjs";
-import "../../../../../../menus-BQKqf0Up.mjs";
-import "../../../../../../status-D39Fpy8R.mjs";
+import "../../../../../../types-D2NEXtgB.mjs";
+import "../../../../../../comment-UvIWDKcW.mjs";
+import "../../../../../../errors-B4f4It-2.mjs";
+import "../../../../../../errors-BOYNdIo3.mjs";
+import "../../../../../../settings-Dd1uivmQ.mjs";
+import "../../../../../../site-settings-DRHfX7bq.mjs";
+import { a as unwrapResult, i as requireDb, n as apiSuccess, r as handleError, t as apiError } from "../../../../../../error-CVWeIOku.mjs";
+import { n as parseBody, t as isParseError } from "../../../../../../parse-DgQ2NABT.mjs";
+import "../../../../../../redirects-BEVSRMa2.mjs";
+import "../../../../../../entry-lock-Df6-XhIu.mjs";
+import "../../../../../../media-1WC65OCB.mjs";
+import { l as createReactionBody } from "../../../../../../comments-yiRFx3w5.mjs";
+import "../../../../../../byline-fields-BLXZnX7N.mjs";
+import "../../../../../../menus-BSzwObhV.mjs";
+import "../../../../../../status-BFNdxzKc.mjs";
 import "../../../../../../api/schemas/index.mjs";
-import { t as extractRequestMeta } from "../../../../../../request-meta-B6blULFY.mjs";
-import { t as CommentReactionRepository } from "../../../../../../comment-reaction-B8SfT-yM.mjs";
-import { s as hashIp } from "../../../../../../comments-DVUYqdyC.mjs";
+import { t as extractRequestMeta } from "../../../../../../request-meta-bwZ_NsvU.mjs";
+import { t as CommentReactionRepository } from "../../../../../../comment-reaction-dGp6_FRo.mjs";
+import { s as hashIp } from "../../../../../../comments-pej-_BUO.mjs";
 
 //#region src/api/handlers/comment-reactions.ts
 /** Max reactions a single voter may register per window before throttling. */

package/dist/astro/routes/api/content/_collection_/_id_/compare.mjs

@@ -1,9 +1,9 @@
 import "../../../../../../base64-BQBZwXCx.mjs";
-import "../../../../../../types-C-Xp0CcN.mjs";
-import "../../../../../../errors-CuHQRiBW.mjs";
-import "../../../../../../errors-DTE6C3K_.mjs";
-import { a as unwrapResult, t as apiError } from "../../../../../../error-B0rgPgsQ.mjs";
-import { i as requirePerm } from "../../../../../../authorize-DeWfk--K.mjs";
+import "../../../../../../types-D2NEXtgB.mjs";
+import "../../../../../../errors-B4f4It-2.mjs";
+import "../../../../../../errors-BOYNdIo3.mjs";
+import { a as unwrapResult, t as apiError } from "../../../../../../error-CVWeIOku.mjs";
+import { o as requirePerm } from "../../../../../../authorize-DPFBGbE6.mjs";
 
 //#region src/astro/routes/api/content/[collection]/[id]/compare.ts
 const prerender = false;

package/dist/astro/routes/api/content/_collection_/_id_/discard-draft.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"discard-draft.d.mts","names":[],"sources":["../../../../../../../src/astro/routes/api/content/[collection]/[id]/discard-draft.ts"],"mappings":";;;cAca,SAAA;AAAA,cAEA,IAAA,EAAM,QAAA"}
+{"version":3,"file":"discard-draft.d.mts","names":[],"sources":["../../../../../../../src/astro/routes/api/content/[collection]/[id]/discard-draft.ts"],"mappings":";;;cAea,SAAA;AAAA,cAEA,IAAA,EAAM,QAAA"}

package/dist/astro/routes/api/content/_collection_/_id_/discard-draft.mjs

@@ -2,24 +2,25 @@ import "../../../../../../dialect-helpers-7_IqPdh9.mjs";
 import "../../../../../../config-CvmjJcVw.mjs";
 import "../../../../../../base64-BQBZwXCx.mjs";
 import "../../../../../../url-Dn3IStq8.mjs";
-import "../../../../../../types-C-Xp0CcN.mjs";
+import "../../../../../../types-D2NEXtgB.mjs";
 import "../../../../../../entry-locks-DJAqVweV.mjs";
-import "../../../../../../errors-CuHQRiBW.mjs";
-import { n as mapErrorStatus } from "../../../../../../errors-DTE6C3K_.mjs";
-import "../../../../../../settings-WHr45II1.mjs";
-import "../../../../../../site-settings-KJOqJW6W.mjs";
-import { a as unwrapResult, t as apiError } from "../../../../../../error-B0rgPgsQ.mjs";
-import { r as parseOptionalBody, t as isParseError } from "../../../../../../parse-CmFDTGzp.mjs";
-import "../../../../../../redirects-D4EWeXAo.mjs";
-import { Rt as contentRevisionConditionBody } from "../../../../../../entry-lock-sxz2PGAT.mjs";
-import "../../../../../../media-aahnKHze.mjs";
-import "../../../../../../comments-BRtp992B.mjs";
-import "../../../../../../byline-fields-DHJs0Mja.mjs";
-import "../../../../../../menus-BQKqf0Up.mjs";
-import "../../../../../../status-D39Fpy8R.mjs";
+import "../../../../../../errors-B4f4It-2.mjs";
+import { n as mapErrorStatus } from "../../../../../../errors-BOYNdIo3.mjs";
+import "../../../../../../settings-Dd1uivmQ.mjs";
+import "../../../../../../site-settings-DRHfX7bq.mjs";
+import { a as unwrapResult, t as apiError } from "../../../../../../error-CVWeIOku.mjs";
+import { r as parseOptionalBody, t as isParseError } from "../../../../../../parse-DgQ2NABT.mjs";
+import "../../../../../../redirects-BEVSRMa2.mjs";
+import { Rt as contentRevisionConditionBody } from "../../../../../../entry-lock-Df6-XhIu.mjs";
+import "../../../../../../media-1WC65OCB.mjs";
+import "../../../../../../comments-yiRFx3w5.mjs";
+import "../../../../../../byline-fields-BLXZnX7N.mjs";
+import "../../../../../../menus-BSzwObhV.mjs";
+import "../../../../../../status-BFNdxzKc.mjs";
 import "../../../../../../api/schemas/index.mjs";
-import { r as requireOwnerPerm } from "../../../../../../authorize-DeWfk--K.mjs";
-import { t as claimEntryLockForWrite } from "../../../../../../entry-lock-De1L8qUQ.mjs";
+import { a as requireOwnerPerm } from "../../../../../../authorize-DPFBGbE6.mjs";
+import { t as claimEntryLockForWrite } from "../../../../../../entry-lock-DLxCffFW.mjs";
+import { t as invalidateRouteCache } from "../../../../../../route-cache-QSOyDEw0.mjs";
 
 //#region src/astro/routes/api/content/[collection]/[id]/discard-draft.ts
 const prerender = false;
@@ -42,7 +43,7 @@ const POST = async ({ params, request, locals, url, cache }) => {
 	if (refusal) return apiError(refusal.code, refusal.message, mapErrorStatus(refusal.code), { ...refusal.details });
 	const result = await emdash.handleContentDiscardDraft(collection, resolvedId, { _rev: body?._rev });
 	if (!result.success) return unwrapResult(result);
-	if (cache?.enabled) await cache.invalidate({ tags: [collection, resolvedId] });
+	await invalidateRouteCache(cache, [collection, resolvedId]);
 	return unwrapResult(result);
 };
 

package/dist/astro/routes/api/content/_collection_/_id_/discard-draft.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"discard-draft.mjs","names":[],"sources":["../../../../../../../src/astro/routes/api/content/[collection]/[id]/discard-draft.ts"],"sourcesContent":["/**\n * Discard draft changes - reverts to live version\n *\n * POST /_emdash/api/content/{collection}/{id}/discard-draft\n */\n\nimport type { APIRoute } from \"astro\";\n\nimport { requireOwnerPerm } from \"#api/authorize.js\";\nimport { apiError, mapErrorStatus, unwrapResult } from \"#api/error.js\";\nimport { claimEntryLockForWrite } from \"#api/handlers/entry-lock.js\";\nimport { isParseError, parseOptionalBody } from \"#api/parse.js\";\nimport { contentRevisionConditionBody } from \"#api/schemas.js\";\n\nexport const prerender = false;\n\nexport const POST: APIRoute = async ({ params, request, locals, url, cache }) => {\n\tconst { emdash, user } = locals;\n\tconst collection = params.collection!;\n\tconst id = params.id!;\n\n\tif (!emdash?.handleContentDiscardDraft || !emdash?.handleContentGet) {\n\t\treturn apiError(\"NOT_CONFIGURED\", \"EmDash is not initialized\", 500);\n\t}\n\tconst body = await parseOptionalBody(request, contentRevisionConditionBody, {});\n\tif (isParseError(body)) return body;\n\n\tconst locale = url.searchParams.get(\"locale\") || undefined;\n\n\t// Fetch item to check ownership\n\tconst existing = await emdash.handleContentGet(collection, id, locale);\n\tif (!existing.success) {\n\t\treturn apiError(\n\t\t\texisting.error?.code ?? \"UNKNOWN_ERROR\",\n\t\t\texisting.error?.message ?? \"Unknown error\",\n\t\t\tmapErrorStatus(existing.error?.code),\n\t\t);\n\t}\n\tconst existingData =\n\t\texisting.data && typeof existing.data === \"object\"\n\t\t\t? // eslint-disable-next-line typescript/no-unsafe-type-assertion -- handler returns unknown data; narrowed by typeof check above\n\t\t\t\t(existing.data as Record<string, unknown>)\n\t\t\t: undefined;\n\t// Handler returns { item, _rev } — extract the item for ownership check\n\tconst existingItem =\n\t\texistingData?.item && typeof existingData.item === \"object\"\n\t\t\t? // eslint-disable-next-line typescript/no-unsafe-type-assertion -- narrowed by typeof check above\n\t\t\t\t(existingData.item as Record<string, unknown>)\n\t\t\t: existingData;\n\tconst authorId = typeof existingItem?.authorId === \"string\" ? existingItem.authorId : \"\";\n\tconst denied = requireOwnerPerm(user, authorId, \"content:edit_own\", \"content:edit_any\");\n\tif (denied) return denied;\n\n\tconst resolvedId = typeof existingItem?.id === \"string\" ? existingItem.id : id;\n\n\tconst refusal = await claimEntryLockForWrite(emdash.db, collection, resolvedId, user!.id, {\n\t\toverride: body?.overrideLock,\n\t});\n\tif (refusal) {\n\t\treturn apiError(refusal.code, refusal.message, mapErrorStatus(refusal.code), {\n\t\t\t...refusal.details,\n\t\t});\n\t}\n\n\tconst result = await emdash.handleContentDiscardDraft(collection, resolvedId, {\n\t\t_rev: body?._rev,\n\t});\n\n\tif (!result.success) return unwrapResult(result);\n\n\tif (cache?.enabled) await cache.invalidate({ tags: [collection, resolvedId] });\n\n\treturn unwrapResult(result);\n};\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;AAcA,MAAa,YAAY;AAEzB,MAAa,OAAiB,OAAO,EAAE,QAAQ,SAAS,QAAQ,KAAK,YAAY;CAChF,MAAM,EAAE,QAAQ,SAAS;CACzB,MAAM,aAAa,OAAO;CAC1B,MAAM,KAAK,OAAO;AAElB,KAAI,CAAC,QAAQ,6BAA6B,CAAC,QAAQ,iBAClD,QAAO,SAAS,kBAAkB,6BAA6B,IAAI;CAEpE,MAAM,OAAO,MAAM,kBAAkB,SAAS,8BAA8B,EAAE,CAAC;AAC/E,KAAI,aAAa,KAAK,CAAE,QAAO;CAE/B,MAAM,SAAS,IAAI,aAAa,IAAI,SAAS,IAAI;CAGjD,MAAM,WAAW,MAAM,OAAO,iBAAiB,YAAY,IAAI,OAAO;AACtE,KAAI,CAAC,SAAS,QACb,QAAO,SACN,SAAS,OAAO,QAAQ,iBACxB,SAAS,OAAO,WAAW,iBAC3B,eAAe,SAAS,OAAO,KAAK,CACpC;CAEF,MAAM,eACL,SAAS,QAAQ,OAAO,SAAS,SAAS,WAEvC,SAAS,OACT;CAEJ,MAAM,eACL,cAAc,QAAQ,OAAO,aAAa,SAAS,WAEhD,aAAa,OACb;CAEJ,MAAM,SAAS,iBAAiB,MADf,OAAO,cAAc,aAAa,WAAW,aAAa,WAAW,IACtC,oBAAoB,mBAAmB;AACvF,KAAI,OAAQ,QAAO;CAEnB,MAAM,aAAa,OAAO,cAAc,OAAO,WAAW,aAAa,KAAK;CAE5E,MAAM,UAAU,MAAM,uBAAuB,OAAO,IAAI,YAAY,YAAY,KAAM,IAAI,EACzF,UAAU,MAAM,cAChB,CAAC;AACF,KAAI,QACH,QAAO,SAAS,QAAQ,MAAM,QAAQ,SAAS,eAAe,QAAQ,KAAK,EAAE,EAC5E,GAAG,QAAQ,SACX,CAAC;CAGH,MAAM,SAAS,MAAM,OAAO,0BAA0B,YAAY,YAAY,EAC7E,MAAM,MAAM,MACZ,CAAC;AAEF,KAAI,CAAC,OAAO,QAAS,QAAO,aAAa,OAAO;AAEhD,KAAI,OAAO,QAAS,OAAM,MAAM,WAAW,EAAE,MAAM,CAAC,YAAY,WAAW,EAAE,CAAC;AAE9E,QAAO,aAAa,OAAO"}
+{"version":3,"file":"discard-draft.mjs","names":[],"sources":["../../../../../../../src/astro/routes/api/content/[collection]/[id]/discard-draft.ts"],"sourcesContent":["/**\n * Discard draft changes - reverts to live version\n *\n * POST /_emdash/api/content/{collection}/{id}/discard-draft\n */\n\nimport type { APIRoute } from \"astro\";\n\nimport { requireOwnerPerm } from \"#api/authorize.js\";\nimport { apiError, mapErrorStatus, unwrapResult } from \"#api/error.js\";\nimport { claimEntryLockForWrite } from \"#api/handlers/entry-lock.js\";\nimport { isParseError, parseOptionalBody } from \"#api/parse.js\";\nimport { contentRevisionConditionBody } from \"#api/schemas.js\";\nimport { invalidateRouteCache } from \"#cache/route-cache.js\";\n\nexport const prerender = false;\n\nexport const POST: APIRoute = async ({ params, request, locals, url, cache }) => {\n\tconst { emdash, user } = locals;\n\tconst collection = params.collection!;\n\tconst id = params.id!;\n\n\tif (!emdash?.handleContentDiscardDraft || !emdash?.handleContentGet) {\n\t\treturn apiError(\"NOT_CONFIGURED\", \"EmDash is not initialized\", 500);\n\t}\n\tconst body = await parseOptionalBody(request, contentRevisionConditionBody, {});\n\tif (isParseError(body)) return body;\n\n\tconst locale = url.searchParams.get(\"locale\") || undefined;\n\n\t// Fetch item to check ownership\n\tconst existing = await emdash.handleContentGet(collection, id, locale);\n\tif (!existing.success) {\n\t\treturn apiError(\n\t\t\texisting.error?.code ?? \"UNKNOWN_ERROR\",\n\t\t\texisting.error?.message ?? \"Unknown error\",\n\t\t\tmapErrorStatus(existing.error?.code),\n\t\t);\n\t}\n\tconst existingData =\n\t\texisting.data && typeof existing.data === \"object\"\n\t\t\t? // eslint-disable-next-line typescript/no-unsafe-type-assertion -- handler returns unknown data; narrowed by typeof check above\n\t\t\t\t(existing.data as Record<string, unknown>)\n\t\t\t: undefined;\n\t// Handler returns { item, _rev } — extract the item for ownership check\n\tconst existingItem =\n\t\texistingData?.item && typeof existingData.item === \"object\"\n\t\t\t? // eslint-disable-next-line typescript/no-unsafe-type-assertion -- narrowed by typeof check above\n\t\t\t\t(existingData.item as Record<string, unknown>)\n\t\t\t: existingData;\n\tconst authorId = typeof existingItem?.authorId === \"string\" ? existingItem.authorId : \"\";\n\tconst denied = requireOwnerPerm(user, authorId, \"content:edit_own\", \"content:edit_any\");\n\tif (denied) return denied;\n\n\tconst resolvedId = typeof existingItem?.id === \"string\" ? existingItem.id : id;\n\n\tconst refusal = await claimEntryLockForWrite(emdash.db, collection, resolvedId, user!.id, {\n\t\toverride: body?.overrideLock,\n\t});\n\tif (refusal) {\n\t\treturn apiError(refusal.code, refusal.message, mapErrorStatus(refusal.code), {\n\t\t\t...refusal.details,\n\t\t});\n\t}\n\n\tconst result = await emdash.handleContentDiscardDraft(collection, resolvedId, {\n\t\t_rev: body?._rev,\n\t});\n\n\tif (!result.success) return unwrapResult(result);\n\n\tawait invalidateRouteCache(cache, [collection, resolvedId]);\n\n\treturn unwrapResult(result);\n};\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;AAeA,MAAa,YAAY;AAEzB,MAAa,OAAiB,OAAO,EAAE,QAAQ,SAAS,QAAQ,KAAK,YAAY;CAChF,MAAM,EAAE,QAAQ,SAAS;CACzB,MAAM,aAAa,OAAO;CAC1B,MAAM,KAAK,OAAO;AAElB,KAAI,CAAC,QAAQ,6BAA6B,CAAC,QAAQ,iBAClD,QAAO,SAAS,kBAAkB,6BAA6B,IAAI;CAEpE,MAAM,OAAO,MAAM,kBAAkB,SAAS,8BAA8B,EAAE,CAAC;AAC/E,KAAI,aAAa,KAAK,CAAE,QAAO;CAE/B,MAAM,SAAS,IAAI,aAAa,IAAI,SAAS,IAAI;CAGjD,MAAM,WAAW,MAAM,OAAO,iBAAiB,YAAY,IAAI,OAAO;AACtE,KAAI,CAAC,SAAS,QACb,QAAO,SACN,SAAS,OAAO,QAAQ,iBACxB,SAAS,OAAO,WAAW,iBAC3B,eAAe,SAAS,OAAO,KAAK,CACpC;CAEF,MAAM,eACL,SAAS,QAAQ,OAAO,SAAS,SAAS,WAEvC,SAAS,OACT;CAEJ,MAAM,eACL,cAAc,QAAQ,OAAO,aAAa,SAAS,WAEhD,aAAa,OACb;CAEJ,MAAM,SAAS,iBAAiB,MADf,OAAO,cAAc,aAAa,WAAW,aAAa,WAAW,IACtC,oBAAoB,mBAAmB;AACvF,KAAI,OAAQ,QAAO;CAEnB,MAAM,aAAa,OAAO,cAAc,OAAO,WAAW,aAAa,KAAK;CAE5E,MAAM,UAAU,MAAM,uBAAuB,OAAO,IAAI,YAAY,YAAY,KAAM,IAAI,EACzF,UAAU,MAAM,cAChB,CAAC;AACF,KAAI,QACH,QAAO,SAAS,QAAQ,MAAM,QAAQ,SAAS,eAAe,QAAQ,KAAK,EAAE,EAC5E,GAAG,QAAQ,SACX,CAAC;CAGH,MAAM,SAAS,MAAM,OAAO,0BAA0B,YAAY,YAAY,EAC7E,MAAM,MAAM,MACZ,CAAC;AAEF,KAAI,CAAC,OAAO,QAAS,QAAO,aAAa,OAAO;AAEhD,OAAM,qBAAqB,OAAO,CAAC,YAAY,WAAW,CAAC;AAE3D,QAAO,aAAa,OAAO"}