emdash 1.2.0 → 1.3.0

package/dist/astro/routes/api/setup/dev-bypass.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"dev-bypass.mjs","names":[],"sources":["../../../../../src/astro/routes/api/setup/dev-bypass.ts"],"sourcesContent":["/**\n * POST /_emdash/api/setup/dev-bypass\n * GET  /_emdash/api/setup/dev-bypass\n *\n * Development-only endpoint to bypass the setup wizard.\n * Creates a dev admin user and marks setup complete after runtime initialization.\n * Newly applied sample content has its Media Usage index prepared before redirecting.\n *\n * ONLY available when import.meta.env.DEV is true.\n *\n * Usage:\n * - GET with redirect: /_emdash/api/setup/dev-bypass?redirect=/_emdash/admin\n * - POST for API: Returns JSON with setup info\n * - ?content=0 (or ?content=false): apply schema/structure only, skipping\n *   sample content entries, bylines, and taxonomy terms\n *\n * For agent/browser testing, navigate to:\n *   /_emdash/api/setup/dev-bypass?redirect=/_emdash/admin\n */\n\nimport type { APIRoute } from \"astro\";\n\nexport const prerender = false;\n\nimport { ulid } from \"ulidx\";\n\nimport { apiError, apiSuccess, handleError } from \"#api/error.js\";\nimport { escapeHtml } from \"#api/escape.js\";\nimport { deleteApiTokensByName, handleApiTokenCreate } from \"#api/handlers/api-tokens.js\";\nimport { getPublicOrigin } from \"#api/public-url.js\";\nimport { isSafeRedirect } from \"#api/redirect.js\";\nimport { OptionsRepository } from \"#db/repositories/options.js\";\nimport { repairContentMediaUsageCollection } from \"#media/usage/content-repair.js\";\nimport { applySeed } from \"#seed/apply.js\";\nimport { loadSeed } from \"#seed/load.js\";\nimport { validateSeed } from \"#seed/validate.js\";\n\n// RBAC role levels (matching @emdash-cms/auth)\nconst ROLE_ADMIN = 50;\n\nconst DEV_USER_EMAIL = \"dev@emdash.local\";\nconst DEV_USER_NAME = \"Dev Admin\";\nconst DEV_SITE_TITLE = \"EmDash Dev Site\";\n\nasync function handleDevBypass(context: Parameters<APIRoute>[0]): Promise<Response> {\n\t// CRITICAL: Only allow in development mode\n\tif (!import.meta.env.DEV) {\n\t\treturn apiError(\"FORBIDDEN\", \"Dev bypass is only available in development mode\", 403);\n\t}\n\n\tconst { locals, url, session } = context;\n\tconst { emdash } = locals;\n\n\tif (!emdash?.db) {\n\t\treturn apiError(\"NOT_CONFIGURED\", \"EmDash is not initialized\", 500);\n\t}\n\n\ttry {\n\t\t// Apply seed (user seed or built-in default). `?content=0` (or `false`)\n\t\t// applies schema/structure only — no sample content, bylines, or terms.\n\t\tconst contentParam = url.searchParams.get(\"content\");\n\t\tconst includeContent = contentParam !== \"0\" && contentParam !== \"false\";\n\t\tconst seed = await loadSeed();\n\t\tconst validation = validateSeed(seed);\n\t\tif (validation.valid) {\n\t\t\tconst seedResult = await applySeed(emdash.db, seed, {\n\t\t\t\tincludeContent,\n\t\t\t\tonConflict: \"skip\",\n\t\t\t\tstorage: emdash.storage ?? undefined,\n\t\t\t});\n\t\t\tconsole.log(\n\t\t\t\t`[setup-dev-bypass] Seed applied: ${seedResult.collections.created} collections, ${seedResult.fields.created} fields`,\n\t\t\t);\n\t\t\tif (includeContent && seedResult.content.created + seedResult.content.updated > 0) {\n\t\t\t\tfor (const collectionSlug of Object.keys(seed.content ?? {})) {\n\t\t\t\t\tconst repair = await repairContentMediaUsageCollection(emdash.db, {\n\t\t\t\t\t\tcollectionSlug,\n\t\t\t\t\t});\n\t\t\t\t\tif (repair.status !== \"complete\") {\n\t\t\t\t\t\tthrow new Error(`Seeded Media Usage indexing failed for ${collectionSlug}`);\n\t\t\t\t\t}\n\t\t\t\t}\n\t\t\t}\n\t\t}\n\n\t\tconst options = new OptionsRepository(emdash.db);\n\n\t\t// Find or create dev user (direct DB access to avoid @emdash-cms/auth import issues in dev)\n\t\tconst existingUser = await emdash.db\n\t\t\t.selectFrom(\"users\")\n\t\t\t.selectAll()\n\t\t\t.where(\"email\", \"=\", DEV_USER_EMAIL)\n\t\t\t.executeTakeFirst();\n\n\t\tlet user: { id: string; email: string; name: string; role: number };\n\t\tlet userCreated = false;\n\n\t\tif (!existingUser) {\n\t\t\tconst now = new Date().toISOString();\n\t\t\tconst newUser = {\n\t\t\t\tid: ulid(),\n\t\t\t\temail: DEV_USER_EMAIL,\n\t\t\t\tname: DEV_USER_NAME,\n\t\t\t\trole: ROLE_ADMIN,\n\t\t\t\temail_verified: 1,\n\t\t\t\tcreated_at: now,\n\t\t\t\tupdated_at: now,\n\t\t\t};\n\n\t\t\tawait emdash.db.insertInto(\"users\").values(newUser).execute();\n\n\t\t\tuser = {\n\t\t\t\tid: newUser.id,\n\t\t\t\temail: newUser.email,\n\t\t\t\tname: newUser.name,\n\t\t\t\trole: newUser.role,\n\t\t\t};\n\t\t\tuserCreated = true;\n\t\t\tconsole.log(\"[setup-dev-bypass] Created dev admin user:\", user.email);\n\t\t} else {\n\t\t\tuser = {\n\t\t\t\tid: existingUser.id,\n\t\t\t\temail: existingUser.email,\n\t\t\t\tname: existingUser.name || DEV_USER_NAME,\n\t\t\t\trole: existingUser.role,\n\t\t\t};\n\t\t}\n\n\t\t// Set site title if not already set\n\t\tconst existingTitle = await options.get(\"emdash:site_title\");\n\t\tif (!existingTitle) {\n\t\t\tawait options.set(\"emdash:site_title\", DEV_SITE_TITLE);\n\t\t}\n\n\t\t// Store canonical site URL (used by magic-link/recovery emails)\n\t\tawait options.set(\"emdash:site_url\", getPublicOrigin(url, emdash?.config));\n\n\t\t// Mark setup complete\n\t\tawait options.set(\"emdash:setup_complete\", true);\n\n\t\t// Create session\n\t\tif (session) {\n\t\t\tsession.set(\"user\", { id: user.id });\n\t\t}\n\n\t\t// Optionally create a PAT token (?token=1) for headless/CLI testing.\n\t\tlet token: string | undefined;\n\t\tif (url.searchParams.has(\"token\")) {\n\t\t\t// Idempotent by name: a prior reset can leave a stale dev-bypass-token,\n\t\t\t// and the raw token is only available at creation, so drop any existing\n\t\t\t// one and mint a fresh, usable PAT rather than accumulating duplicates.\n\t\t\tawait deleteApiTokensByName(emdash.db, user.id, \"dev-bypass-token\");\n\t\t\tconst result = await handleApiTokenCreate(emdash.db, user.id, {\n\t\t\t\tname: \"dev-bypass-token\",\n\t\t\t\tscopes: [\n\t\t\t\t\t\"content:read\",\n\t\t\t\t\t\"content:write\",\n\t\t\t\t\t\"media:read\",\n\t\t\t\t\t\"media:write\",\n\t\t\t\t\t\"schema:read\",\n\t\t\t\t\t\"schema:write\",\n\t\t\t\t\t\"admin\",\n\t\t\t\t],\n\t\t\t});\n\t\t\tif (result.success) {\n\t\t\t\ttoken = result.data.token;\n\t\t\t}\n\t\t}\n\n\t\t// Check for redirect parameter\n\t\tconst redirect = url.searchParams.get(\"redirect\");\n\n\t\tif (redirect) {\n\t\t\t// Validate redirect is a safe local path (prevent open redirect via //evil.com or /\\evil.com)\n\t\t\tif (!isSafeRedirect(redirect)) {\n\t\t\t\treturn apiError(\"INVALID_REDIRECT\", \"Redirect must be a local path\", 400);\n\t\t\t}\n\n\t\t\t// Return an HTML page with meta-refresh redirect\n\t\t\t// This ensures the session is fully saved before redirect\n\t\t\tconst safeRedirect = escapeHtml(redirect);\n\t\t\tconst html = `<!DOCTYPE html>\n<html>\n<head>\n\t<meta http-equiv=\"refresh\" content=\"0;url=${safeRedirect}\">\n</head>\n<body>Redirecting...</body>\n</html>`;\n\t\t\treturn new Response(html, {\n\t\t\t\tstatus: 200,\n\t\t\t\theaders: { \"Content-Type\": \"text/html\" },\n\t\t\t});\n\t\t}\n\n\t\t// Return JSON response\n\t\treturn apiSuccess({\n\t\t\tsuccess: true,\n\t\t\tmessage: \"Dev setup complete\",\n\t\t\tmigrations: [],\n\t\t\tuserCreated,\n\t\t\tuser: {\n\t\t\t\tid: user.id,\n\t\t\t\temail: user.email,\n\t\t\t\tname: user.name,\n\t\t\t\trole: user.role,\n\t\t\t},\n\t\t\t...(token ? { token } : {}),\n\t\t});\n\t} catch (error) {\n\t\treturn handleError(error, \"Dev bypass failed\", \"DEV_BYPASS_ERROR\");\n\t}\n}\n\n// Support both GET and POST\nexport const GET: APIRoute = handleDevBypass;\nexport const POST: APIRoute = handleDevBypass;\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAsBA,MAAa,YAAY;AAgBzB,MAAM,aAAa;AAEnB,MAAM,iBAAiB;AACvB,MAAM,gBAAgB;AACtB,MAAM,iBAAiB;AAEvB,eAAe,gBAAgB,SAAqD;AAEnF,KAAI,CAAC,OAAO,KAAK,IAAI,IACpB,QAAO,SAAS,aAAa,oDAAoD,IAAI;CAGtF,MAAM,EAAE,QAAQ,KAAK,YAAY;CACjC,MAAM,EAAE,WAAW;AAEnB,KAAI,CAAC,QAAQ,GACZ,QAAO,SAAS,kBAAkB,6BAA6B,IAAI;AAGpE,KAAI;EAGH,MAAM,eAAe,IAAI,aAAa,IAAI,UAAU;EACpD,MAAM,iBAAiB,iBAAiB,OAAO,iBAAiB;EAChE,MAAM,OAAO,MAAM,UAAU;AAE7B,MADmB,aAAa,KAAK,CACtB,OAAO;GACrB,MAAM,aAAa,MAAM,UAAU,OAAO,IAAI,MAAM;IACnD;IACA,YAAY;IACZ,SAAS,OAAO,WAAW;IAC3B,CAAC;AACF,WAAQ,IACP,oCAAoC,WAAW,YAAY,QAAQ,gBAAgB,WAAW,OAAO,QAAQ,SAC7G;AACD,OAAI,kBAAkB,WAAW,QAAQ,UAAU,WAAW,QAAQ,UAAU,GAC/E;SAAK,MAAM,kBAAkB,OAAO,KAAK,KAAK,WAAW,EAAE,CAAC,CAI3D,MAHe,MAAM,kCAAkC,OAAO,IAAI,EACjE,gBACA,CAAC,EACS,WAAW,WACrB,OAAM,IAAI,MAAM,0CAA0C,iBAAiB;;;EAM/E,MAAM,UAAU,IAAI,kBAAkB,OAAO,GAAG;EAGhD,MAAM,eAAe,MAAM,OAAO,GAChC,WAAW,QAAQ,CACnB,WAAW,CACX,MAAM,SAAS,KAAK,eAAe,CACnC,kBAAkB;EAEpB,IAAI;EACJ,IAAI,cAAc;AAElB,MAAI,CAAC,cAAc;GAClB,MAAM,uBAAM,IAAI,MAAM,EAAC,aAAa;GACpC,MAAM,UAAU;IACf,IAAI,MAAM;IACV,OAAO;IACP,MAAM;IACN,MAAM;IACN,gBAAgB;IAChB,YAAY;IACZ,YAAY;IACZ;AAED,SAAM,OAAO,GAAG,WAAW,QAAQ,CAAC,OAAO,QAAQ,CAAC,SAAS;AAE7D,UAAO;IACN,IAAI,QAAQ;IACZ,OAAO,QAAQ;IACf,MAAM,QAAQ;IACd,MAAM,QAAQ;IACd;AACD,iBAAc;AACd,WAAQ,IAAI,8CAA8C,KAAK,MAAM;QAErE,QAAO;GACN,IAAI,aAAa;GACjB,OAAO,aAAa;GACpB,MAAM,aAAa,QAAQ;GAC3B,MAAM,aAAa;GACnB;AAKF,MAAI,CADkB,MAAM,QAAQ,IAAI,oBAAoB,CAE3D,OAAM,QAAQ,IAAI,qBAAqB,eAAe;AAIvD,QAAM,QAAQ,IAAI,mBAAmB,gBAAgB,KAAK,QAAQ,OAAO,CAAC;AAG1E,QAAM,QAAQ,IAAI,yBAAyB,KAAK;AAGhD,MAAI,QACH,SAAQ,IAAI,QAAQ,EAAE,IAAI,KAAK,IAAI,CAAC;EAIrC,IAAI;AACJ,MAAI,IAAI,aAAa,IAAI,QAAQ,EAAE;AAIlC,SAAM,sBAAsB,OAAO,IAAI,KAAK,IAAI,mBAAmB;GACnE,MAAM,SAAS,MAAM,qBAAqB,OAAO,IAAI,KAAK,IAAI;IAC7D,MAAM;IACN,QAAQ;KACP;KACA;KACA;KACA;KACA;KACA;KACA;KACA;IACD,CAAC;AACF,OAAI,OAAO,QACV,SAAQ,OAAO,KAAK;;EAKtB,MAAM,WAAW,IAAI,aAAa,IAAI,WAAW;AAEjD,MAAI,UAAU;AAEb,OAAI,CAAC,eAAe,SAAS,CAC5B,QAAO,SAAS,oBAAoB,iCAAiC,IAAI;GAM1E,MAAM,OAAO;;;6CADQ,WAAW,SAAS,CAIc;;;;AAIvD,UAAO,IAAI,SAAS,MAAM;IACzB,QAAQ;IACR,SAAS,EAAE,gBAAgB,aAAa;IACxC,CAAC;;AAIH,SAAO,WAAW;GACjB,SAAS;GACT,SAAS;GACT,YAAY,EAAE;GACd;GACA,MAAM;IACL,IAAI,KAAK;IACT,OAAO,KAAK;IACZ,MAAM,KAAK;IACX,MAAM,KAAK;IACX;GACD,GAAI,QAAQ,EAAE,OAAO,GAAG,EAAE;GAC1B,CAAC;UACM,OAAO;AACf,SAAO,YAAY,OAAO,qBAAqB,mBAAmB;;;AAKpE,MAAa,MAAgB;AAC7B,MAAa,OAAiB"}
+{"version":3,"file":"dev-bypass.mjs","names":[],"sources":["../../../../../src/astro/routes/api/setup/dev-bypass.ts"],"sourcesContent":["/**\n * POST /_emdash/api/setup/dev-bypass\n * GET  /_emdash/api/setup/dev-bypass\n *\n * Development-only endpoint to bypass the setup wizard.\n * Creates a dev admin user and marks setup complete after runtime initialization.\n * Newly applied sample content has its Media Usage index prepared before redirecting.\n *\n * ONLY available when import.meta.env.DEV is true.\n *\n * Usage:\n * - GET with redirect: /_emdash/api/setup/dev-bypass?redirect=/_emdash/admin\n * - POST for API: Returns JSON with setup info\n * - ?content=0 (or ?content=false): apply schema/structure only, skipping\n *   sample content entries, bylines, and taxonomy terms\n *\n * For agent/browser testing, navigate to:\n *   /_emdash/api/setup/dev-bypass?redirect=/_emdash/admin\n */\n\nimport type { APIRoute } from \"astro\";\n\nexport const prerender = false;\n\nimport { ulid } from \"ulidx\";\n\nimport { apiError, apiSuccess, handleError } from \"#api/error.js\";\nimport { escapeHtml } from \"#api/escape.js\";\nimport { deleteApiTokensByName, handleApiTokenCreate } from \"#api/handlers/api-tokens.js\";\nimport { getPublicOrigin } from \"#api/public-url.js\";\nimport { isSafeRedirect } from \"#api/redirect.js\";\nimport { OptionsRepository } from \"#db/repositories/options.js\";\nimport { repairContentMediaUsageCollection } from \"#media/usage/content-repair.js\";\nimport { applySeed } from \"#seed/apply.js\";\nimport { loadSeed } from \"#seed/load.js\";\nimport { validateSeed } from \"#seed/validate.js\";\n\n// RBAC role levels (matching @emdash-cms/auth)\nconst ROLE_ADMIN = 50;\n\nconst DEV_USER_EMAIL = \"dev@emdash.local\";\nconst DEV_USER_NAME = \"Dev Admin\";\nconst DEV_SITE_TITLE = \"EmDash Dev Site\";\n\nasync function handleDevBypass(context: Parameters<APIRoute>[0]): Promise<Response> {\n\t// CRITICAL: Only allow in development mode\n\tif (!import.meta.env.DEV) {\n\t\treturn apiError(\"FORBIDDEN\", \"Dev bypass is only available in development mode\", 403);\n\t}\n\n\tconst { locals, url, session } = context;\n\tconst { emdash } = locals;\n\n\tif (!emdash?.db) {\n\t\treturn apiError(\"NOT_CONFIGURED\", \"EmDash is not initialized\", 500);\n\t}\n\n\ttry {\n\t\t// Apply seed (user seed or built-in default). `?content=0` (or `false`)\n\t\t// applies schema/structure only — no sample content, bylines, or terms.\n\t\tconst contentParam = url.searchParams.get(\"content\");\n\t\tconst includeContent = contentParam !== \"0\" && contentParam !== \"false\";\n\t\tconst seed = await loadSeed();\n\t\tconst validation = validateSeed(seed);\n\t\tif (validation.valid) {\n\t\t\tconst seedResult = await applySeed(emdash.db, seed, {\n\t\t\t\tincludeContent,\n\t\t\t\tonConflict: \"skip\",\n\t\t\t\tstorage: emdash.storage ?? undefined,\n\t\t\t});\n\t\t\tconsole.log(\n\t\t\t\t`[setup-dev-bypass] Seed applied: ${seedResult.collections.created} collections, ${seedResult.fields.created} fields`,\n\t\t\t);\n\t\t\tif (includeContent && seedResult.content.created + seedResult.content.updated > 0) {\n\t\t\t\tfor (const collectionSlug of Object.keys(seed.content ?? {})) {\n\t\t\t\t\tconst repair = await repairContentMediaUsageCollection(emdash.db, {\n\t\t\t\t\t\tcollectionSlug,\n\t\t\t\t\t});\n\t\t\t\t\tif (repair.status !== \"complete\") {\n\t\t\t\t\t\tthrow new Error(`Seeded Media Usage indexing failed for ${collectionSlug}`);\n\t\t\t\t\t}\n\t\t\t\t}\n\t\t\t}\n\t\t}\n\n\t\tconst options = new OptionsRepository(emdash.db);\n\n\t\t// Find or create dev user (direct DB access to avoid @emdash-cms/auth import issues in dev)\n\t\tconst existingUser = await emdash.db\n\t\t\t.selectFrom(\"users\")\n\t\t\t.selectAll()\n\t\t\t.where(\"email\", \"=\", DEV_USER_EMAIL)\n\t\t\t.executeTakeFirst();\n\n\t\tlet user: { id: string; email: string; name: string; role: number };\n\t\tlet userCreated = false;\n\n\t\tif (!existingUser) {\n\t\t\tconst now = new Date().toISOString();\n\t\t\tconst newUser = {\n\t\t\t\tid: ulid(),\n\t\t\t\temail: DEV_USER_EMAIL,\n\t\t\t\tname: DEV_USER_NAME,\n\t\t\t\trole: ROLE_ADMIN,\n\t\t\t\temail_verified: 1,\n\t\t\t\tcreated_at: now,\n\t\t\t\tupdated_at: now,\n\t\t\t};\n\n\t\t\tawait emdash.db.insertInto(\"users\").values(newUser).execute();\n\n\t\t\tuser = {\n\t\t\t\tid: newUser.id,\n\t\t\t\temail: newUser.email,\n\t\t\t\tname: newUser.name,\n\t\t\t\trole: newUser.role,\n\t\t\t};\n\t\t\tuserCreated = true;\n\t\t\tconsole.log(\"[setup-dev-bypass] Created dev admin user:\", user.email);\n\t\t} else {\n\t\t\tuser = {\n\t\t\t\tid: existingUser.id,\n\t\t\t\temail: existingUser.email,\n\t\t\t\tname: existingUser.name || DEV_USER_NAME,\n\t\t\t\trole: existingUser.role,\n\t\t\t};\n\t\t}\n\n\t\t// Set site title if not already set\n\t\tconst existingTitle = await options.get(\"emdash:site_title\");\n\t\tif (!existingTitle) {\n\t\t\tawait options.set(\"emdash:site_title\", DEV_SITE_TITLE);\n\t\t}\n\n\t\t// Store canonical site URL (used by magic-link/recovery emails)\n\t\tawait options.set(\"emdash:site_url\", getPublicOrigin(url, emdash?.config));\n\n\t\t// Mark setup complete\n\t\tawait options.set(\"emdash:setup_complete\", true);\n\n\t\t// Create session\n\t\tif (session) {\n\t\t\tsession.set(\"user\", { id: user.id });\n\t\t}\n\n\t\t// Optionally create a PAT token (?token=1) for headless/CLI testing.\n\t\tlet token: string | undefined;\n\t\tif (url.searchParams.has(\"token\")) {\n\t\t\t// Idempotent by name: a prior reset can leave a stale dev-bypass-token,\n\t\t\t// and the raw token is only available at creation, so drop any existing\n\t\t\t// one and mint a fresh, usable PAT rather than accumulating duplicates.\n\t\t\tawait deleteApiTokensByName(emdash.db, user.id, \"dev-bypass-token\");\n\t\t\tconst result = await handleApiTokenCreate(emdash.db, user.id, {\n\t\t\t\tname: \"dev-bypass-token\",\n\t\t\t\tscopes: [\n\t\t\t\t\t\"content:read\",\n\t\t\t\t\t\"content:write\",\n\t\t\t\t\t\"media:read\",\n\t\t\t\t\t\"media:write\",\n\t\t\t\t\t\"schema:read\",\n\t\t\t\t\t\"schema:write\",\n\t\t\t\t\t\"admin\",\n\t\t\t\t],\n\t\t\t});\n\t\t\tif (result.success) {\n\t\t\t\ttoken = result.data.token;\n\t\t\t}\n\t\t}\n\n\t\t// Check for redirect parameter\n\t\tconst redirect = url.searchParams.get(\"redirect\");\n\n\t\tif (redirect) {\n\t\t\t// Validate redirect is a safe local path (prevent open redirect via //evil.com or /\\evil.com)\n\t\t\tif (!isSafeRedirect(redirect)) {\n\t\t\t\treturn apiError(\"INVALID_REDIRECT\", \"Redirect must be a local path\", 400);\n\t\t\t}\n\n\t\t\t// Return an HTML page with meta-refresh redirect\n\t\t\t// This ensures the session is fully saved before redirect\n\t\t\tconst safeRedirect = escapeHtml(redirect);\n\t\t\tconst html = `<!DOCTYPE html>\n<html>\n<head>\n\t<meta http-equiv=\"refresh\" content=\"0;url=${safeRedirect}\">\n</head>\n<body>Redirecting...</body>\n</html>`;\n\t\t\treturn new Response(html, {\n\t\t\t\tstatus: 200,\n\t\t\t\theaders: { \"Content-Type\": \"text/html\" },\n\t\t\t});\n\t\t}\n\n\t\t// Return JSON response\n\t\treturn apiSuccess({\n\t\t\tsuccess: true,\n\t\t\tmessage: \"Dev setup complete\",\n\t\t\tmigrations: [],\n\t\t\tuserCreated,\n\t\t\tuser: {\n\t\t\t\tid: user.id,\n\t\t\t\temail: user.email,\n\t\t\t\tname: user.name,\n\t\t\t\trole: user.role,\n\t\t\t},\n\t\t\t...(token ? { token } : {}),\n\t\t});\n\t} catch (error) {\n\t\treturn handleError(error, \"Dev bypass failed\", \"DEV_BYPASS_ERROR\");\n\t}\n}\n\n// Support both GET and POST\nexport const GET: APIRoute = handleDevBypass;\nexport const POST: APIRoute = handleDevBypass;\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAsBA,MAAa,YAAY;AAgBzB,MAAM,aAAa;AAEnB,MAAM,iBAAiB;AACvB,MAAM,gBAAgB;AACtB,MAAM,iBAAiB;AAEvB,eAAe,gBAAgB,SAAqD;AAEnF,KAAI,CAAC,OAAO,KAAK,IAAI,IACpB,QAAO,SAAS,aAAa,oDAAoD,IAAI;CAGtF,MAAM,EAAE,QAAQ,KAAK,YAAY;CACjC,MAAM,EAAE,WAAW;AAEnB,KAAI,CAAC,QAAQ,GACZ,QAAO,SAAS,kBAAkB,6BAA6B,IAAI;AAGpE,KAAI;EAGH,MAAM,eAAe,IAAI,aAAa,IAAI,UAAU;EACpD,MAAM,iBAAiB,iBAAiB,OAAO,iBAAiB;EAChE,MAAM,OAAO,MAAM,UAAU;AAE7B,MADmB,aAAa,KAAK,CACtB,OAAO;GACrB,MAAM,aAAa,MAAM,UAAU,OAAO,IAAI,MAAM;IACnD;IACA,YAAY;IACZ,SAAS,OAAO,WAAW;IAC3B,CAAC;AACF,WAAQ,IACP,oCAAoC,WAAW,YAAY,QAAQ,gBAAgB,WAAW,OAAO,QAAQ,SAC7G;AACD,OAAI,kBAAkB,WAAW,QAAQ,UAAU,WAAW,QAAQ,UAAU,GAC/E;SAAK,MAAM,kBAAkB,OAAO,KAAK,KAAK,WAAW,EAAE,CAAC,CAI3D,MAHe,MAAM,kCAAkC,OAAO,IAAI,EACjE,gBACA,CAAC,EACS,WAAW,WACrB,OAAM,IAAI,MAAM,0CAA0C,iBAAiB;;;EAM/E,MAAM,UAAU,IAAI,kBAAkB,OAAO,GAAG;EAGhD,MAAM,eAAe,MAAM,OAAO,GAChC,WAAW,QAAQ,CACnB,WAAW,CACX,MAAM,SAAS,KAAK,eAAe,CACnC,kBAAkB;EAEpB,IAAI;EACJ,IAAI,cAAc;AAElB,MAAI,CAAC,cAAc;GAClB,MAAM,uBAAM,IAAI,MAAM,EAAC,aAAa;GACpC,MAAM,UAAU;IACf,IAAI,MAAM;IACV,OAAO;IACP,MAAM;IACN,MAAM;IACN,gBAAgB;IAChB,YAAY;IACZ,YAAY;IACZ;AAED,SAAM,OAAO,GAAG,WAAW,QAAQ,CAAC,OAAO,QAAQ,CAAC,SAAS;AAE7D,UAAO;IACN,IAAI,QAAQ;IACZ,OAAO,QAAQ;IACf,MAAM,QAAQ;IACd,MAAM,QAAQ;IACd;AACD,iBAAc;AACd,WAAQ,IAAI,8CAA8C,KAAK,MAAM;QAErE,QAAO;GACN,IAAI,aAAa;GACjB,OAAO,aAAa;GACpB,MAAM,aAAa,QAAQ;GAC3B,MAAM,aAAa;GACnB;AAKF,MAAI,CADkB,MAAM,QAAQ,IAAI,oBAAoB,CAE3D,OAAM,QAAQ,IAAI,qBAAqB,eAAe;AAIvD,QAAM,QAAQ,IAAI,mBAAmB,gBAAgB,KAAK,QAAQ,OAAO,CAAC;AAG1E,QAAM,QAAQ,IAAI,yBAAyB,KAAK;AAGhD,MAAI,QACH,SAAQ,IAAI,QAAQ,EAAE,IAAI,KAAK,IAAI,CAAC;EAIrC,IAAI;AACJ,MAAI,IAAI,aAAa,IAAI,QAAQ,EAAE;AAIlC,SAAM,sBAAsB,OAAO,IAAI,KAAK,IAAI,mBAAmB;GACnE,MAAM,SAAS,MAAM,qBAAqB,OAAO,IAAI,KAAK,IAAI;IAC7D,MAAM;IACN,QAAQ;KACP;KACA;KACA;KACA;KACA;KACA;KACA;KACA;IACD,CAAC;AACF,OAAI,OAAO,QACV,SAAQ,OAAO,KAAK;;EAKtB,MAAM,WAAW,IAAI,aAAa,IAAI,WAAW;AAEjD,MAAI,UAAU;AAEb,OAAI,CAAC,eAAe,SAAS,CAC5B,QAAO,SAAS,oBAAoB,iCAAiC,IAAI;GAM1E,MAAM,OAAO;;;6CADQ,WAAW,SAAS,CAIc;;;;AAIvD,UAAO,IAAI,SAAS,MAAM;IACzB,QAAQ;IACR,SAAS,EAAE,gBAAgB,aAAa;IACxC,CAAC;;AAIH,SAAO,WAAW;GACjB,SAAS;GACT,SAAS;GACT,YAAY,EAAE;GACd;GACA,MAAM;IACL,IAAI,KAAK;IACT,OAAO,KAAK;IACZ,MAAM,KAAK;IACX,MAAM,KAAK;IACX;GACD,GAAI,QAAQ,EAAE,OAAO,GAAG,EAAE;GAC1B,CAAC;UACM,OAAO;AACf,SAAO,YAAY,OAAO,qBAAqB,mBAAmB;;;AAKpE,MAAa,MAAgB;AAC7B,MAAa,OAAiB"}

package/dist/astro/routes/api/setup/dev-reset.mjs

@@ -1,9 +1,9 @@
 import { t as OptionsRepository } from "../../../../options-DhrI7eMv.mjs";
 import "../../../../base64-BQBZwXCx.mjs";
-import "../../../../types-C-Xp0CcN.mjs";
-import "../../../../errors-CjtE5aWF.mjs";
-import "../../../../errors-hskQ0C8G.mjs";
-import { n as apiSuccess, r as handleError, t as apiError } from "../../../../error-DxgQdaZ_.mjs";
+import "../../../../types-D2NEXtgB.mjs";
+import "../../../../errors-B4f4It-2.mjs";
+import "../../../../errors-BOYNdIo3.mjs";
+import { n as apiSuccess, r as handleError, t as apiError } from "../../../../error-CVWeIOku.mjs";
 
 //#region src/astro/routes/api/setup/dev-reset.ts
 const prerender = false;

package/dist/astro/routes/api/setup/index.mjs

@@ -5,60 +5,62 @@ import "../../../../after-PcEvMY_6.mjs";
 import { t as OptionsRepository } from "../../../../options-DhrI7eMv.mjs";
 import "../../../../secrets-Cc_O3Kp-.mjs";
 import "../../../../base64-BQBZwXCx.mjs";
-import "../../../../content-CcHrqkgp.mjs";
+import "../../../../content-DQSRZTVw.mjs";
 import "../../../../object-cache-Bo6DGaC9.mjs";
 import "../../../../slugify-bu2-jKia.mjs";
 import "../../../../request-cache-C4CIo5ad.mjs";
 import "../../../../url-Dn3IStq8.mjs";
-import "../../../../types-C-Xp0CcN.mjs";
-import "../../../../revision-BWEH2qQB.mjs";
-import "../../../../media-IT8hQleU.mjs";
-import "../../../../taxonomy-QrNmTfIZ.mjs";
+import "../../../../types-D2NEXtgB.mjs";
+import "../../../../revision-BVp8S0e_.mjs";
+import "../../../../media-Bws9f18T.mjs";
+import "../../../../taxonomy-C_C_LBAU.mjs";
 import "../../../../resolve-D-kqyKns.mjs";
-import "../../../../redirect-B39kTQ_0.mjs";
+import "../../../../redirect-DiS_3mA4.mjs";
 import "../../../../byline-registry-dvt4N3xV.mjs";
-import "../../../../field-defs-cache-zoow36nz.mjs";
-import "../../../../byline-BmVKOQ8l.mjs";
-import "../../../../staged-DboEaWsV.mjs";
+import "../../../../field-defs-cache-Dez5iWJJ.mjs";
+import "../../../../byline-BR1qhyiw.mjs";
+import "../../../../staged-CD_imitH.mjs";
 import "../../../../dist-Cfu8mMBs.mjs";
-import "../../../../fts-manager-WJCN8uU6.mjs";
-import "../../../../loader-CetY659y.mjs";
-import "../../../../collection-slugs-cache-B2Gs9Jwx.mjs";
-import "../../../../capture-triggers-C9JKoIdT.mjs";
-import "../../../../activation-xomsCMJg.mjs";
-import "../../../../media-usage-work-cgDYGvrt.mjs";
-import "../../../../registry-DeZ27gVi.mjs";
-import "../../../../hash-C4DFoJ7Z.mjs";
-import "../../../../zod-generator-BQilAboC.mjs";
-import "../../../../errors-CjtE5aWF.mjs";
-import "../../../../canonical-BUcKRYpG.mjs";
-import "../../../../digest-xJmyPv2r.mjs";
-import "../../../../block-values-C4N_F2-G.mjs";
-import "../../../../query-C_CWlifp.mjs";
-import "../../../../schema-I74JwYte.mjs";
-import "../../../../relations-DBB1bRJW.mjs";
-import "../../../../errors-hskQ0C8G.mjs";
-import "../../../../settings-GaZ5sVgg.mjs";
-import "../../../../site-settings-CDdT4mVm.mjs";
-import "../../../../schema-BXIW-JHi.mjs";
-import { l as setSiteSettings } from "../../../../settings-B1jOxAIl.mjs";
-import "../../../../ssrf-LM_0wpGA.mjs";
-import { n as apiSuccess, r as handleError, t as apiError } from "../../../../error-DxgQdaZ_.mjs";
-import { n as parseBody, t as isParseError } from "../../../../parse-Cn5aSk1N.mjs";
-import "../../../../redirects-DFT7Wr-e.mjs";
-import "../../../../entry-lock-Cjz0h45X.mjs";
-import "../../../../media-CRKsKlfK.mjs";
-import "../../../../comments-BzmIKVb2.mjs";
-import { d as setupBody } from "../../../../byline-fields-Bze3ZdAw.mjs";
-import "../../../../menus-D1HC8npj.mjs";
-import "../../../../status-Dl85BK39.mjs";
+import "../../../../fts-manager-Beg3e4bI.mjs";
+import "../../../../loader-CswroUbe.mjs";
+import "../../../../json-recordset-BUjxhr77.mjs";
+import "../../../../collection-slugs-cache-e09QeJQt.mjs";
+import "../../../../media-usage-work-CkLa5-nc.mjs";
+import "../../../../capture-triggers-CT6dK9zd.mjs";
+import "../../../../activation-Dim4YMM7.mjs";
+import "../../../../registry-TUVaid9Z.mjs";
+import "../../../../hash-BJaeek87.mjs";
+import "../../../../zod-generator-D0JKy94C.mjs";
+import "../../../../errors-B4f4It-2.mjs";
+import "../../../../canonical-BudtH-Fx.mjs";
+import "../../../../digest-DJ1tHCgy.mjs";
+import "../../../../block-values-gCX4HBSl.mjs";
+import "../../../../query-haKvLAWl.mjs";
+import "../../../../schema-C4OBuv6Z.mjs";
+import "../../../../relations-CA_QuMTU.mjs";
+import "../../../../errors-BOYNdIo3.mjs";
+import "../../../../settings-Dd1uivmQ.mjs";
+import "../../../../site-settings-DRHfX7bq.mjs";
+import "../../../../schema-DJRfvM_o.mjs";
+import { l as setSiteSettings } from "../../../../settings-CWb84sDm.mjs";
+import { n as apiSuccess, r as handleError, t as apiError } from "../../../../error-CVWeIOku.mjs";
+import "../../../../fence-C3MUitUN.mjs";
+import "../../../../ssrf-BcYjyM4M.mjs";
+import { n as parseBody, t as isParseError } from "../../../../parse-DgQ2NABT.mjs";
+import "../../../../redirects-BEVSRMa2.mjs";
+import "../../../../entry-lock-Df6-XhIu.mjs";
+import "../../../../media-1WC65OCB.mjs";
+import "../../../../comments-yiRFx3w5.mjs";
+import { d as setupBody } from "../../../../byline-fields-BLXZnX7N.mjs";
+import "../../../../menus-BSzwObhV.mjs";
+import "../../../../status-BFNdxzKc.mjs";
 import "../../../../api/schemas/index.mjs";
-import { n as applySeedWithinBudget } from "../../../../apply-Cx48saFC.mjs";
-import "../../../../ssrf-BvNItdxk.mjs";
-import { n as validateSeed } from "../../../../validate-BSZbSUDk.mjs";
-import { t as loadSeed } from "../../../../load-DjUqmf3s.mjs";
-import { t as getConfiguredOrigin } from "../../../../public-url-uT1Ok2Tu.mjs";
-import { t as getAuthMode } from "../../../../mode-eieqAWLe.mjs";
+import { n as applySeedWithinBudget } from "../../../../apply-T7ATgzCh.mjs";
+import "../../../../ssrf-DM0E-D_8.mjs";
+import { n as validateSeed } from "../../../../validate-DxYhJQA-.mjs";
+import { t as loadSeed } from "../../../../load-CdAG9wz-.mjs";
+import { t as getConfiguredOrigin } from "../../../../public-url-Bt98vysr.mjs";
+import { t as getAuthMode } from "../../../../mode-C-D3qICy.mjs";
 
 //#region src/astro/routes/api/setup/index.ts
 const prerender = false;

package/dist/astro/routes/api/setup/index.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"index.mjs","names":[],"sources":["../../../../../src/astro/routes/api/setup/index.ts"],"sourcesContent":["/**\n * POST /_emdash/api/setup\n *\n * Executes the setup wizard - applies seed file and marks setup complete\n */\n\nimport type { APIRoute } from \"astro\";\n\nexport const prerender = false;\n\nimport { apiError, apiSuccess, handleError } from \"#api/error.js\";\nimport { isParseError, parseBody } from \"#api/parse.js\";\nimport { getConfiguredOrigin } from \"#api/public-url.js\";\nimport { setupBody } from \"#api/schemas.js\";\nimport { getAuthMode } from \"#auth/mode.js\";\nimport { OptionsRepository } from \"#db/repositories/options.js\";\nimport { applySeedWithinBudget, type SeedApplyBudget } from \"#seed/apply.js\";\nimport { loadSeed } from \"#seed/load.js\";\nimport { validateSeed } from \"#seed/validate.js\";\nimport { setSiteSettings } from \"#settings/index.js\";\n\n/**\n * What one setup request may spend on the seed before the rest continues in\n * the next request. Cloudflare Workers Free allows 1,000 calls to D1, KV and R2\n * and 50 external fetches per request. A `$media` download takes at least three\n * fetches (two DNS-over-HTTPS lookups in `ssrfSafeFetch`, then the file) and\n * three more per redirect. The margin covers a redirect per download, the entry\n * that crosses the budget with its images, the phases after content and the\n * object-cache writes at the end.\n */\nconst SEED_BUDGET_PER_REQUEST: SeedApplyBudget = { queries: 500, mediaDownloads: 5 };\n\nexport const POST: APIRoute = async ({ request, url, locals }) => {\n\tconst { emdash } = locals;\n\n\tif (!emdash?.db) {\n\t\treturn apiError(\"NOT_CONFIGURED\", \"EmDash is not initialized\", 500);\n\t}\n\n\ttry {\n\t\t// Guard: reject if setup has already been completed.\n\t\t// The options table may not exist on first-ever setup (pre-migration),\n\t\t// so a query failure means setup hasn't run yet — allow it to proceed.\n\t\ttry {\n\t\t\tconst options = new OptionsRepository(emdash.db);\n\t\t\tconst setupComplete = await options.get(\"emdash:setup_complete\");\n\n\t\t\tif (setupComplete === true || setupComplete === \"true\") {\n\t\t\t\treturn apiError(\"ALREADY_CONFIGURED\", \"Setup has already been completed\", 409);\n\t\t\t}\n\t\t} catch {\n\t\t\t// Options table doesn't exist yet — first-ever setup, allow it\n\t\t}\n\n\t\tconst configuredSiteUrl = getConfiguredOrigin(emdash.config);\n\t\tconst loopbackHost =\n\t\t\turl.hostname === \"localhost\" || url.hostname === \"127.0.0.1\" || url.hostname === \"[::1]\";\n\t\t// On Cloudflare's network a Worker only receives requests for hostnames bound\n\t\t// to it, each with an edge TLS certificate. `astro dev` runs in workerd\n\t\t// without that guarantee, so development keeps the loopback-only rule.\n\t\tconst onCloudflareWorkers =\n\t\t\ttypeof navigator !== \"undefined\" &&\n\t\t\ttypeof navigator.userAgent === \"string\" &&\n\t\t\tnavigator.userAgent.includes(\"Cloudflare-Workers\");\n\t\tlet requestOrigin: string | undefined;\n\t\tif (import.meta.env.DEV) {\n\t\t\tif (loopbackHost) requestOrigin = url.origin;\n\t\t} else if (onCloudflareWorkers) {\n\t\t\trequestOrigin = `https://${url.hostname}`;\n\t\t}\n\t\tconst siteUrl = configuredSiteUrl ?? requestOrigin;\n\t\tif (!siteUrl) {\n\t\t\treturn apiError(\n\t\t\t\t\"SITE_URL_REQUIRED\",\n\t\t\t\t\"Set siteUrl or EMDASH_SITE_URL before running production setup\",\n\t\t\t\t500,\n\t\t\t);\n\t\t}\n\n\t\t// Parse request body\n\t\tconst body = await parseBody(request, setupBody);\n\t\tif (isParseError(body)) return body;\n\n\t\t// Load seed file (user seed or built-in default)\n\t\tconst seed = await loadSeed();\n\n\t\t// Override seed settings with form values\n\t\tseed.settings = {\n\t\t\t...seed.settings,\n\t\t\ttitle: body.title,\n\t\t\ttagline: body.tagline,\n\t\t};\n\n\t\t// Apply seed\n\t\tconst validation = validateSeed(seed);\n\t\tif (!validation.valid) {\n\t\t\treturn apiError(\"INVALID_SEED\", `Invalid seed file: ${validation.errors.join(\", \")}`, 400);\n\t\t}\n\n\t\tlet seeded;\n\t\ttry {\n\t\t\tseeded = await applySeedWithinBudget(\n\t\t\t\temdash.db,\n\t\t\t\tseed,\n\t\t\t\t{\n\t\t\t\t\tincludeContent: body.includeContent,\n\t\t\t\t\tonConflict: \"skip\",\n\t\t\t\t\tstorage: emdash.storage ?? undefined,\n\t\t\t\t},\n\t\t\t\tSEED_BUDGET_PER_REQUEST,\n\t\t\t);\n\t\t} catch (error) {\n\t\t\treturn handleError(error, \"Failed to apply seed\", \"SEED_ERROR\");\n\t\t}\n\t\tconst { result, complete: seedComplete, progress: seedProgress } = seeded;\n\n\t\tif (seedComplete) {\n\t\t\t// The seed only fills settings that are still unset, and the runtime\n\t\t\t// has usually auto-seeded the template's title and tagline already.\n\t\t\tawait setSiteSettings({ title: body.title, tagline: body.tagline }, emdash.db);\n\t\t}\n\n\t\t// Store setup state\n\t\t// In external auth mode, mark setup complete immediately (first user to login becomes admin)\n\t\t// Otherwise, setup_complete is set after admin user is created (passkey or auth provider)\n\t\tconst authMode = getAuthMode(emdash.config);\n\t\tconst useExternalAuth = authMode.type === \"external\";\n\n\t\ttry {\n\t\t\tconst options = new OptionsRepository(emdash.db);\n\n\t\t\t// Store the canonical site URL from the setup request.\n\t\t\t// Write-once at the DB level so concurrent setup POSTs can't both\n\t\t\t// observe an empty value and race to write. A spoofed Host header\n\t\t\t// on a later call during the wizard window must not be able to\n\t\t\t// replace the first value.\n\t\t\tawait options.setIfAbsent(\"emdash:site_url\", siteUrl);\n\n\t\t\tif (seedComplete) {\n\t\t\t\tif (useExternalAuth) {\n\t\t\t\t\t// External auth mode: mark setup complete now\n\t\t\t\t\t// First user to log in via external provider will become admin\n\t\t\t\t\tawait options.set(\"emdash:setup_complete\", true);\n\t\t\t\t\tawait options.set(\"emdash:site_title\", body.title);\n\t\t\t\t\tif (body.tagline) {\n\t\t\t\t\t\tawait options.set(\"emdash:site_tagline\", body.tagline);\n\t\t\t\t\t}\n\t\t\t\t} else {\n\t\t\t\t\t// Passkey/provider mode: store state for next step (admin creation)\n\t\t\t\t\tawait options.set(\"emdash:setup_state\", {\n\t\t\t\t\t\tstep: \"site_complete\",\n\t\t\t\t\t\ttitle: body.title,\n\t\t\t\t\t\ttagline: body.tagline,\n\t\t\t\t\t});\n\t\t\t\t}\n\t\t\t}\n\t\t} catch (error) {\n\t\t\tconsole.error(\"Failed to save setup state:\", error);\n\t\t\t// Non-fatal - continue anyway\n\t\t}\n\n\t\tif (!seedComplete) {\n\t\t\t// The wizard posts again; items already created are skipped.\n\t\t\treturn apiSuccess({\n\t\t\t\tsuccess: true,\n\t\t\t\tsetupComplete: false,\n\t\t\t\tseedComplete: false,\n\t\t\t\tseedProgress,\n\t\t\t\tresult,\n\t\t\t});\n\t\t}\n\n\t\t// Return success with result\n\t\treturn apiSuccess({\n\t\t\tsuccess: true,\n\t\t\t// In external auth mode, setup is complete - redirect to admin\n\t\t\tsetupComplete: useExternalAuth,\n\t\t\tseedComplete: true,\n\t\t\tresult,\n\t\t});\n\t} catch (error) {\n\t\treturn handleError(error, \"Setup failed\", \"SETUP_ERROR\");\n\t}\n};\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAQA,MAAa,YAAY;;;;;;;;;;AAsBzB,MAAM,0BAA2C;CAAE,SAAS;CAAK,gBAAgB;CAAG;AAEpF,MAAa,OAAiB,OAAO,EAAE,SAAS,KAAK,aAAa;CACjE,MAAM,EAAE,WAAW;AAEnB,KAAI,CAAC,QAAQ,GACZ,QAAO,SAAS,kBAAkB,6BAA6B,IAAI;AAGpE,KAAI;AAIH,MAAI;GAEH,MAAM,gBAAgB,MADN,IAAI,kBAAkB,OAAO,GAAG,CACZ,IAAI,wBAAwB;AAEhE,OAAI,kBAAkB,QAAQ,kBAAkB,OAC/C,QAAO,SAAS,sBAAsB,oCAAoC,IAAI;UAExE;EAIR,MAAM,oBAAoB,oBAAoB,OAAO,OAAO;EAC5D,MAAM,eACL,IAAI,aAAa,eAAe,IAAI,aAAa,eAAe,IAAI,aAAa;EAIlF,MAAM,sBACL,OAAO,cAAc,eACrB,OAAO,UAAU,cAAc,YAC/B,UAAU,UAAU,SAAS,qBAAqB;EACnD,IAAI;AACJ,MAAI,OAAO,KAAK,IAAI,KACnB;OAAI,aAAc,iBAAgB,IAAI;aAC5B,oBACV,iBAAgB,WAAW,IAAI;EAEhC,MAAM,UAAU,qBAAqB;AACrC,MAAI,CAAC,QACJ,QAAO,SACN,qBACA,kEACA,IACA;EAIF,MAAM,OAAO,MAAM,UAAU,SAAS,UAAU;AAChD,MAAI,aAAa,KAAK,CAAE,QAAO;EAG/B,MAAM,OAAO,MAAM,UAAU;AAG7B,OAAK,WAAW;GACf,GAAG,KAAK;GACR,OAAO,KAAK;GACZ,SAAS,KAAK;GACd;EAGD,MAAM,aAAa,aAAa,KAAK;AACrC,MAAI,CAAC,WAAW,MACf,QAAO,SAAS,gBAAgB,sBAAsB,WAAW,OAAO,KAAK,KAAK,IAAI,IAAI;EAG3F,IAAI;AACJ,MAAI;AACH,YAAS,MAAM,sBACd,OAAO,IACP,MACA;IACC,gBAAgB,KAAK;IACrB,YAAY;IACZ,SAAS,OAAO,WAAW;IAC3B,EACD,wBACA;WACO,OAAO;AACf,UAAO,YAAY,OAAO,wBAAwB,aAAa;;EAEhE,MAAM,EAAE,QAAQ,UAAU,cAAc,UAAU,iBAAiB;AAEnE,MAAI,aAGH,OAAM,gBAAgB;GAAE,OAAO,KAAK;GAAO,SAAS,KAAK;GAAS,EAAE,OAAO,GAAG;EAO/E,MAAM,kBADW,YAAY,OAAO,OAAO,CACV,SAAS;AAE1C,MAAI;GACH,MAAM,UAAU,IAAI,kBAAkB,OAAO,GAAG;AAOhD,SAAM,QAAQ,YAAY,mBAAmB,QAAQ;AAErD,OAAI,aACH,KAAI,iBAAiB;AAGpB,UAAM,QAAQ,IAAI,yBAAyB,KAAK;AAChD,UAAM,QAAQ,IAAI,qBAAqB,KAAK,MAAM;AAClD,QAAI,KAAK,QACR,OAAM,QAAQ,IAAI,uBAAuB,KAAK,QAAQ;SAIvD,OAAM,QAAQ,IAAI,sBAAsB;IACvC,MAAM;IACN,OAAO,KAAK;IACZ,SAAS,KAAK;IACd,CAAC;WAGI,OAAO;AACf,WAAQ,MAAM,+BAA+B,MAAM;;AAIpD,MAAI,CAAC,aAEJ,QAAO,WAAW;GACjB,SAAS;GACT,eAAe;GACf,cAAc;GACd;GACA;GACA,CAAC;AAIH,SAAO,WAAW;GACjB,SAAS;GAET,eAAe;GACf,cAAc;GACd;GACA,CAAC;UACM,OAAO;AACf,SAAO,YAAY,OAAO,gBAAgB,cAAc"}
+{"version":3,"file":"index.mjs","names":[],"sources":["../../../../../src/astro/routes/api/setup/index.ts"],"sourcesContent":["/**\n * POST /_emdash/api/setup\n *\n * Executes the setup wizard - applies seed file and marks setup complete\n */\n\nimport type { APIRoute } from \"astro\";\n\nexport const prerender = false;\n\nimport { apiError, apiSuccess, handleError } from \"#api/error.js\";\nimport { isParseError, parseBody } from \"#api/parse.js\";\nimport { getConfiguredOrigin } from \"#api/public-url.js\";\nimport { setupBody } from \"#api/schemas.js\";\nimport { getAuthMode } from \"#auth/mode.js\";\nimport { OptionsRepository } from \"#db/repositories/options.js\";\nimport { applySeedWithinBudget, type SeedApplyBudget } from \"#seed/apply.js\";\nimport { loadSeed } from \"#seed/load.js\";\nimport { validateSeed } from \"#seed/validate.js\";\nimport { setSiteSettings } from \"#settings/index.js\";\n\n/**\n * What one setup request may spend on the seed before the rest continues in\n * the next request. Cloudflare Workers Free allows 1,000 calls to D1, KV and R2\n * and 50 external fetches per request. A `$media` download takes at least three\n * fetches (two DNS-over-HTTPS lookups in `ssrfSafeFetch`, then the file) and\n * three more per redirect. The margin covers a redirect per download, the entry\n * that crosses the budget with its images, the phases after content and the\n * object-cache writes at the end.\n */\nconst SEED_BUDGET_PER_REQUEST: SeedApplyBudget = { queries: 500, mediaDownloads: 5 };\n\nexport const POST: APIRoute = async ({ request, url, locals }) => {\n\tconst { emdash } = locals;\n\n\tif (!emdash?.db) {\n\t\treturn apiError(\"NOT_CONFIGURED\", \"EmDash is not initialized\", 500);\n\t}\n\n\ttry {\n\t\t// Guard: reject if setup has already been completed.\n\t\t// The options table may not exist on first-ever setup (pre-migration),\n\t\t// so a query failure means setup hasn't run yet — allow it to proceed.\n\t\ttry {\n\t\t\tconst options = new OptionsRepository(emdash.db);\n\t\t\tconst setupComplete = await options.get(\"emdash:setup_complete\");\n\n\t\t\tif (setupComplete === true || setupComplete === \"true\") {\n\t\t\t\treturn apiError(\"ALREADY_CONFIGURED\", \"Setup has already been completed\", 409);\n\t\t\t}\n\t\t} catch {\n\t\t\t// Options table doesn't exist yet — first-ever setup, allow it\n\t\t}\n\n\t\tconst configuredSiteUrl = getConfiguredOrigin(emdash.config);\n\t\tconst loopbackHost =\n\t\t\turl.hostname === \"localhost\" || url.hostname === \"127.0.0.1\" || url.hostname === \"[::1]\";\n\t\t// On Cloudflare's network a Worker only receives requests for hostnames bound\n\t\t// to it, each with an edge TLS certificate. `astro dev` runs in workerd\n\t\t// without that guarantee, so development keeps the loopback-only rule.\n\t\tconst onCloudflareWorkers =\n\t\t\ttypeof navigator !== \"undefined\" &&\n\t\t\ttypeof navigator.userAgent === \"string\" &&\n\t\t\tnavigator.userAgent.includes(\"Cloudflare-Workers\");\n\t\tlet requestOrigin: string | undefined;\n\t\tif (import.meta.env.DEV) {\n\t\t\tif (loopbackHost) requestOrigin = url.origin;\n\t\t} else if (onCloudflareWorkers) {\n\t\t\trequestOrigin = `https://${url.hostname}`;\n\t\t}\n\t\tconst siteUrl = configuredSiteUrl ?? requestOrigin;\n\t\tif (!siteUrl) {\n\t\t\treturn apiError(\n\t\t\t\t\"SITE_URL_REQUIRED\",\n\t\t\t\t\"Set siteUrl or EMDASH_SITE_URL before running production setup\",\n\t\t\t\t500,\n\t\t\t);\n\t\t}\n\n\t\t// Parse request body\n\t\tconst body = await parseBody(request, setupBody);\n\t\tif (isParseError(body)) return body;\n\n\t\t// Load seed file (user seed or built-in default)\n\t\tconst seed = await loadSeed();\n\n\t\t// Override seed settings with form values\n\t\tseed.settings = {\n\t\t\t...seed.settings,\n\t\t\ttitle: body.title,\n\t\t\ttagline: body.tagline,\n\t\t};\n\n\t\t// Apply seed\n\t\tconst validation = validateSeed(seed);\n\t\tif (!validation.valid) {\n\t\t\treturn apiError(\"INVALID_SEED\", `Invalid seed file: ${validation.errors.join(\", \")}`, 400);\n\t\t}\n\n\t\tlet seeded;\n\t\ttry {\n\t\t\tseeded = await applySeedWithinBudget(\n\t\t\t\temdash.db,\n\t\t\t\tseed,\n\t\t\t\t{\n\t\t\t\t\tincludeContent: body.includeContent,\n\t\t\t\t\tonConflict: \"skip\",\n\t\t\t\t\tstorage: emdash.storage ?? undefined,\n\t\t\t\t},\n\t\t\t\tSEED_BUDGET_PER_REQUEST,\n\t\t\t);\n\t\t} catch (error) {\n\t\t\treturn handleError(error, \"Failed to apply seed\", \"SEED_ERROR\");\n\t\t}\n\t\tconst { result, complete: seedComplete, progress: seedProgress } = seeded;\n\n\t\tif (seedComplete) {\n\t\t\t// The seed only fills settings that are still unset, and the runtime\n\t\t\t// has usually auto-seeded the template's title and tagline already.\n\t\t\tawait setSiteSettings({ title: body.title, tagline: body.tagline }, emdash.db);\n\t\t}\n\n\t\t// Store setup state\n\t\t// In external auth mode, mark setup complete immediately (first user to login becomes admin)\n\t\t// Otherwise, setup_complete is set after admin user is created (passkey or auth provider)\n\t\tconst authMode = getAuthMode(emdash.config);\n\t\tconst useExternalAuth = authMode.type === \"external\";\n\n\t\ttry {\n\t\t\tconst options = new OptionsRepository(emdash.db);\n\n\t\t\t// Store the canonical site URL from the setup request.\n\t\t\t// Write-once at the DB level so concurrent setup POSTs can't both\n\t\t\t// observe an empty value and race to write. A spoofed Host header\n\t\t\t// on a later call during the wizard window must not be able to\n\t\t\t// replace the first value.\n\t\t\tawait options.setIfAbsent(\"emdash:site_url\", siteUrl);\n\n\t\t\tif (seedComplete) {\n\t\t\t\tif (useExternalAuth) {\n\t\t\t\t\t// External auth mode: mark setup complete now\n\t\t\t\t\t// First user to log in via external provider will become admin\n\t\t\t\t\tawait options.set(\"emdash:setup_complete\", true);\n\t\t\t\t\tawait options.set(\"emdash:site_title\", body.title);\n\t\t\t\t\tif (body.tagline) {\n\t\t\t\t\t\tawait options.set(\"emdash:site_tagline\", body.tagline);\n\t\t\t\t\t}\n\t\t\t\t} else {\n\t\t\t\t\t// Passkey/provider mode: store state for next step (admin creation)\n\t\t\t\t\tawait options.set(\"emdash:setup_state\", {\n\t\t\t\t\t\tstep: \"site_complete\",\n\t\t\t\t\t\ttitle: body.title,\n\t\t\t\t\t\ttagline: body.tagline,\n\t\t\t\t\t});\n\t\t\t\t}\n\t\t\t}\n\t\t} catch (error) {\n\t\t\tconsole.error(\"Failed to save setup state:\", error);\n\t\t\t// Non-fatal - continue anyway\n\t\t}\n\n\t\tif (!seedComplete) {\n\t\t\t// The wizard posts again; items already created are skipped.\n\t\t\treturn apiSuccess({\n\t\t\t\tsuccess: true,\n\t\t\t\tsetupComplete: false,\n\t\t\t\tseedComplete: false,\n\t\t\t\tseedProgress,\n\t\t\t\tresult,\n\t\t\t});\n\t\t}\n\n\t\t// Return success with result\n\t\treturn apiSuccess({\n\t\t\tsuccess: true,\n\t\t\t// In external auth mode, setup is complete - redirect to admin\n\t\t\tsetupComplete: useExternalAuth,\n\t\t\tseedComplete: true,\n\t\t\tresult,\n\t\t});\n\t} catch (error) {\n\t\treturn handleError(error, \"Setup failed\", \"SETUP_ERROR\");\n\t}\n};\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAQA,MAAa,YAAY;;;;;;;;;;AAsBzB,MAAM,0BAA2C;CAAE,SAAS;CAAK,gBAAgB;CAAG;AAEpF,MAAa,OAAiB,OAAO,EAAE,SAAS,KAAK,aAAa;CACjE,MAAM,EAAE,WAAW;AAEnB,KAAI,CAAC,QAAQ,GACZ,QAAO,SAAS,kBAAkB,6BAA6B,IAAI;AAGpE,KAAI;AAIH,MAAI;GAEH,MAAM,gBAAgB,MADN,IAAI,kBAAkB,OAAO,GAAG,CACZ,IAAI,wBAAwB;AAEhE,OAAI,kBAAkB,QAAQ,kBAAkB,OAC/C,QAAO,SAAS,sBAAsB,oCAAoC,IAAI;UAExE;EAIR,MAAM,oBAAoB,oBAAoB,OAAO,OAAO;EAC5D,MAAM,eACL,IAAI,aAAa,eAAe,IAAI,aAAa,eAAe,IAAI,aAAa;EAIlF,MAAM,sBACL,OAAO,cAAc,eACrB,OAAO,UAAU,cAAc,YAC/B,UAAU,UAAU,SAAS,qBAAqB;EACnD,IAAI;AACJ,MAAI,OAAO,KAAK,IAAI,KACnB;OAAI,aAAc,iBAAgB,IAAI;aAC5B,oBACV,iBAAgB,WAAW,IAAI;EAEhC,MAAM,UAAU,qBAAqB;AACrC,MAAI,CAAC,QACJ,QAAO,SACN,qBACA,kEACA,IACA;EAIF,MAAM,OAAO,MAAM,UAAU,SAAS,UAAU;AAChD,MAAI,aAAa,KAAK,CAAE,QAAO;EAG/B,MAAM,OAAO,MAAM,UAAU;AAG7B,OAAK,WAAW;GACf,GAAG,KAAK;GACR,OAAO,KAAK;GACZ,SAAS,KAAK;GACd;EAGD,MAAM,aAAa,aAAa,KAAK;AACrC,MAAI,CAAC,WAAW,MACf,QAAO,SAAS,gBAAgB,sBAAsB,WAAW,OAAO,KAAK,KAAK,IAAI,IAAI;EAG3F,IAAI;AACJ,MAAI;AACH,YAAS,MAAM,sBACd,OAAO,IACP,MACA;IACC,gBAAgB,KAAK;IACrB,YAAY;IACZ,SAAS,OAAO,WAAW;IAC3B,EACD,wBACA;WACO,OAAO;AACf,UAAO,YAAY,OAAO,wBAAwB,aAAa;;EAEhE,MAAM,EAAE,QAAQ,UAAU,cAAc,UAAU,iBAAiB;AAEnE,MAAI,aAGH,OAAM,gBAAgB;GAAE,OAAO,KAAK;GAAO,SAAS,KAAK;GAAS,EAAE,OAAO,GAAG;EAO/E,MAAM,kBADW,YAAY,OAAO,OAAO,CACV,SAAS;AAE1C,MAAI;GACH,MAAM,UAAU,IAAI,kBAAkB,OAAO,GAAG;AAOhD,SAAM,QAAQ,YAAY,mBAAmB,QAAQ;AAErD,OAAI,aACH,KAAI,iBAAiB;AAGpB,UAAM,QAAQ,IAAI,yBAAyB,KAAK;AAChD,UAAM,QAAQ,IAAI,qBAAqB,KAAK,MAAM;AAClD,QAAI,KAAK,QACR,OAAM,QAAQ,IAAI,uBAAuB,KAAK,QAAQ;SAIvD,OAAM,QAAQ,IAAI,sBAAsB;IACvC,MAAM;IACN,OAAO,KAAK;IACZ,SAAS,KAAK;IACd,CAAC;WAGI,OAAO;AACf,WAAQ,MAAM,+BAA+B,MAAM;;AAIpD,MAAI,CAAC,aAEJ,QAAO,WAAW;GACjB,SAAS;GACT,eAAe;GACf,cAAc;GACd;GACA;GACA,CAAC;AAIH,SAAO,WAAW;GACjB,SAAS;GAET,eAAe;GACf,cAAc;GACd;GACA,CAAC;UACM,OAAO;AACf,SAAO,YAAY,OAAO,gBAAgB,cAAc"}

package/dist/astro/routes/api/setup/status.mjs

@@ -1,10 +1,10 @@
 import "../../../../base64-BQBZwXCx.mjs";
-import "../../../../types-C-Xp0CcN.mjs";
-import "../../../../errors-CjtE5aWF.mjs";
-import "../../../../errors-hskQ0C8G.mjs";
-import { n as apiSuccess, r as handleError, t as apiError } from "../../../../error-DxgQdaZ_.mjs";
-import { n as loadUserSeed } from "../../../../load-DjUqmf3s.mjs";
-import { t as getAuthMode } from "../../../../mode-eieqAWLe.mjs";
+import "../../../../types-D2NEXtgB.mjs";
+import "../../../../errors-B4f4It-2.mjs";
+import "../../../../errors-BOYNdIo3.mjs";
+import { n as apiSuccess, r as handleError, t as apiError } from "../../../../error-CVWeIOku.mjs";
+import { n as loadUserSeed } from "../../../../load-CdAG9wz-.mjs";
+import { t as getAuthMode } from "../../../../mode-C-D3qICy.mjs";
 
 //#region src/astro/routes/api/setup/status.ts
 const prerender = false;

package/dist/astro/routes/api/site/domain-proof.mjs

@@ -6,15 +6,17 @@ import "../../../../secrets-Cc_O3Kp-.mjs";
 import "../../../../base64-BQBZwXCx.mjs";
 import "../../../../object-cache-Bo6DGaC9.mjs";
 import "../../../../request-cache-C4CIo5ad.mjs";
-import "../../../../types-C-Xp0CcN.mjs";
-import "../../../../media-IT8hQleU.mjs";
-import "../../../../loader-CetY659y.mjs";
-import "../../../../errors-CjtE5aWF.mjs";
-import "../../../../errors-hskQ0C8G.mjs";
-import "../../../../settings-B1jOxAIl.mjs";
-import "../../../../ssrf-LM_0wpGA.mjs";
-import { a as unwrapResult, r as handleError, t as apiError } from "../../../../error-DxgQdaZ_.mjs";
-import { t as handleDomainProof } from "../../../../site-domain-CbI51Pc2.mjs";
+import "../../../../types-D2NEXtgB.mjs";
+import "../../../../media-Bws9f18T.mjs";
+import "../../../../loader-CswroUbe.mjs";
+import "../../../../json-recordset-BUjxhr77.mjs";
+import "../../../../errors-B4f4It-2.mjs";
+import "../../../../errors-BOYNdIo3.mjs";
+import "../../../../settings-CWb84sDm.mjs";
+import { a as unwrapResult, r as handleError, t as apiError } from "../../../../error-CVWeIOku.mjs";
+import "../../../../fence-C3MUitUN.mjs";
+import "../../../../ssrf-BcYjyM4M.mjs";
+import { t as handleDomainProof } from "../../../../site-domain-Bq5j5bVg.mjs";
 
 //#region src/astro/routes/api/site/domain-proof.ts
 const prerender = false;

package/dist/astro/routes/api/site/domain-proof.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"domain-proof.mjs","names":[],"sources":["../../../../../src/astro/routes/api/site/domain-proof.ts"],"sourcesContent":["/**\n * Domain proof endpoint\n *\n * POST /_emdash/api/site/domain-proof - Returns the token of a domain check in\n * progress, so the site can confirm that a new domain serves it. POST keeps\n * the read on the primary database, where the token was just written, rather\n * than a read replica.\n */\n\nimport type { APIRoute } from \"astro\";\n\nimport { apiError, handleError, unwrapResult } from \"#api/error.js\";\nimport { handleDomainProof } from \"#api/handlers/site-domain.js\";\n\nexport const prerender = false;\n\nexport const POST: APIRoute = async ({ locals }) => {\n\tconst { emdash } = locals;\n\tif (!emdash?.db) {\n\t\treturn apiError(\"NOT_CONFIGURED\", \"EmDash is not initialized\", 500);\n\t}\n\n\ttry {\n\t\treturn unwrapResult(await handleDomainProof(emdash.db));\n\t} catch (error) {\n\t\treturn handleError(error, \"Failed to read domain proof\", \"DOMAIN_PROOF_ERROR\");\n\t}\n};\n"],"mappings":";;;;;;;;;;;;;;;;;;;AAcA,MAAa,YAAY;AAEzB,MAAa,OAAiB,OAAO,EAAE,aAAa;CACnD,MAAM,EAAE,WAAW;AACnB,KAAI,CAAC,QAAQ,GACZ,QAAO,SAAS,kBAAkB,6BAA6B,IAAI;AAGpE,KAAI;AACH,SAAO,aAAa,MAAM,kBAAkB,OAAO,GAAG,CAAC;UAC/C,OAAO;AACf,SAAO,YAAY,OAAO,+BAA+B,qBAAqB"}
+{"version":3,"file":"domain-proof.mjs","names":[],"sources":["../../../../../src/astro/routes/api/site/domain-proof.ts"],"sourcesContent":["/**\n * Domain proof endpoint\n *\n * POST /_emdash/api/site/domain-proof - Returns the token of a domain check in\n * progress, so the site can confirm that a new domain serves it. POST keeps\n * the read on the primary database, where the token was just written, rather\n * than a read replica.\n */\n\nimport type { APIRoute } from \"astro\";\n\nimport { apiError, handleError, unwrapResult } from \"#api/error.js\";\nimport { handleDomainProof } from \"#api/handlers/site-domain.js\";\n\nexport const prerender = false;\n\nexport const POST: APIRoute = async ({ locals }) => {\n\tconst { emdash } = locals;\n\tif (!emdash?.db) {\n\t\treturn apiError(\"NOT_CONFIGURED\", \"EmDash is not initialized\", 500);\n\t}\n\n\ttry {\n\t\treturn unwrapResult(await handleDomainProof(emdash.db));\n\t} catch (error) {\n\t\treturn handleError(error, \"Failed to read domain proof\", \"DOMAIN_PROOF_ERROR\");\n\t}\n};\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;AAcA,MAAa,YAAY;AAEzB,MAAa,OAAiB,OAAO,EAAE,aAAa;CACnD,MAAM,EAAE,WAAW;AACnB,KAAI,CAAC,QAAQ,GACZ,QAAO,SAAS,kBAAkB,6BAA6B,IAAI;AAGpE,KAAI;AACH,SAAO,aAAa,MAAM,kBAAkB,OAAO,GAAG,CAAC;UAC/C,OAAO;AACf,SAAO,YAAY,OAAO,+BAA+B,qBAAqB"}

package/dist/astro/routes/api/snapshot.mjs

@@ -3,14 +3,14 @@ import "../../../after-PcEvMY_6.mjs";
 import "../../../options-DhrI7eMv.mjs";
 import { a as resolveSecretsCached } from "../../../secrets-Cc_O3Kp-.mjs";
 import "../../../base64-BQBZwXCx.mjs";
-import "../../../types-C-Xp0CcN.mjs";
-import "../../../errors-CjtE5aWF.mjs";
-import "../../../errors-hskQ0C8G.mjs";
-import { n as apiSuccess, r as handleError, t as apiError } from "../../../error-DxgQdaZ_.mjs";
-import { i as getPublicOrigin } from "../../../public-url-uT1Ok2Tu.mjs";
-import { n as parsePreviewSignatureHeader, r as verifyPreviewSignature, t as generateSnapshot } from "../../../snapshot-BuI_2uDe.mjs";
-import { n as resolveSessionUser } from "../../../session-user-1dtJc2zv.mjs";
-import { i as requirePerm } from "../../../authorize-TdIGpRSE.mjs";
+import "../../../types-D2NEXtgB.mjs";
+import "../../../errors-B4f4It-2.mjs";
+import "../../../errors-BOYNdIo3.mjs";
+import { n as apiSuccess, r as handleError, t as apiError } from "../../../error-CVWeIOku.mjs";
+import { i as getPublicOrigin } from "../../../public-url-Bt98vysr.mjs";
+import { n as parsePreviewSignatureHeader, r as verifyPreviewSignature, t as generateSnapshot } from "../../../snapshot-DYsG4uOq.mjs";
+import { n as resolveSessionUser } from "../../../session-user-DlpPdf8L.mjs";
+import { o as requirePerm } from "../../../authorize-DPFBGbE6.mjs";
 
 //#region src/astro/routes/api/snapshot.ts
 const prerender = false;

package/dist/astro/routes/api/taxonomies/_name_/reorder.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"reorder.d.mts","names":[],"sources":["../../../../../../src/astro/routes/api/taxonomies/[name]/reorder.ts"],"mappings":";;;cAmBa,SAAA;AAAA,cAEA,IAAA,EAAM,QAAA"}
+{"version":3,"file":"reorder.d.mts","names":[],"sources":["../../../../../../src/astro/routes/api/taxonomies/[name]/reorder.ts"],"mappings":";;;cAoBa,SAAA;AAAA,cAEA,IAAA,EAAM,QAAA"}

package/dist/astro/routes/api/taxonomies/_name_/reorder.mjs

@@ -6,29 +6,31 @@ import "../../../../../object-cache-Bo6DGaC9.mjs";
 import "../../../../../slugify-bu2-jKia.mjs";
 import "../../../../../request-cache-C4CIo5ad.mjs";
 import "../../../../../url-Dn3IStq8.mjs";
-import "../../../../../types-C-Xp0CcN.mjs";
-import "../../../../../taxonomy-QrNmTfIZ.mjs";
+import "../../../../../types-D2NEXtgB.mjs";
+import "../../../../../taxonomy-C_C_LBAU.mjs";
 import "../../../../../resolve-D-kqyKns.mjs";
 import { r as taxonomyTag } from "../../../../../chrome-tags-BIKBMZYO.mjs";
-import "../../../../../loader-CetY659y.mjs";
-import "../../../../../collection-slugs-cache-B2Gs9Jwx.mjs";
-import "../../../../../taxonomies-DQSywBvX.mjs";
-import "../../../../../errors-CjtE5aWF.mjs";
-import "../../../../../errors-hskQ0C8G.mjs";
-import "../../../../../settings-GaZ5sVgg.mjs";
-import "../../../../../site-settings-CDdT4mVm.mjs";
-import { d as handleTermReorder } from "../../../../../taxonomies-Dj5eaobC.mjs";
-import { a as unwrapResult, i as requireDb, r as handleError, t as apiError } from "../../../../../error-DxgQdaZ_.mjs";
-import { n as parseBody, t as isParseError } from "../../../../../parse-Cn5aSk1N.mjs";
-import "../../../../../redirects-DFT7Wr-e.mjs";
-import { R as reorderTermsBody } from "../../../../../entry-lock-Cjz0h45X.mjs";
-import "../../../../../media-CRKsKlfK.mjs";
-import "../../../../../comments-BzmIKVb2.mjs";
-import "../../../../../byline-fields-Bze3ZdAw.mjs";
-import "../../../../../menus-D1HC8npj.mjs";
-import "../../../../../status-Dl85BK39.mjs";
+import "../../../../../loader-CswroUbe.mjs";
+import "../../../../../json-recordset-BUjxhr77.mjs";
+import "../../../../../collection-slugs-cache-e09QeJQt.mjs";
+import "../../../../../taxonomies-ChnU7Mc8.mjs";
+import "../../../../../errors-B4f4It-2.mjs";
+import "../../../../../errors-BOYNdIo3.mjs";
+import "../../../../../settings-Dd1uivmQ.mjs";
+import "../../../../../site-settings-DRHfX7bq.mjs";
+import { a as unwrapResult, i as requireDb, r as handleError, t as apiError } from "../../../../../error-CVWeIOku.mjs";
+import { d as handleTermReorder } from "../../../../../taxonomies-Dd9JJv_a.mjs";
+import { n as parseBody, t as isParseError } from "../../../../../parse-DgQ2NABT.mjs";
+import "../../../../../redirects-BEVSRMa2.mjs";
+import { R as reorderTermsBody } from "../../../../../entry-lock-Df6-XhIu.mjs";
+import "../../../../../media-1WC65OCB.mjs";
+import "../../../../../comments-yiRFx3w5.mjs";
+import "../../../../../byline-fields-BLXZnX7N.mjs";
+import "../../../../../menus-BSzwObhV.mjs";
+import "../../../../../status-BFNdxzKc.mjs";
 import "../../../../../api/schemas/index.mjs";
-import { i as requirePerm } from "../../../../../authorize-TdIGpRSE.mjs";
+import { o as requirePerm } from "../../../../../authorize-DPFBGbE6.mjs";
+import { t as invalidateRouteCache } from "../../../../../route-cache-QSOyDEw0.mjs";
 
 //#region src/astro/routes/api/taxonomies/[name]/reorder.ts
 const prerender = false;
@@ -45,7 +47,7 @@ const POST = async ({ params, request, locals, cache }) => {
 		if (isParseError(body)) return body;
 		const result = await handleTermReorder(emdash.db, name, body);
 		if (!result.success) return unwrapResult(result);
-		if (cache?.enabled) await cache.invalidate({ tags: [taxonomyTag(name)] });
+		await invalidateRouteCache(cache, [taxonomyTag(name)]);
 		return unwrapResult(result);
 	} catch (error) {
 		return handleError(error, "Failed to reorder terms", "TERM_REORDER_ERROR");

package/dist/astro/routes/api/taxonomies/_name_/reorder.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"reorder.mjs","names":[],"sources":["../../../../../../src/astro/routes/api/taxonomies/[name]/reorder.ts"],"sourcesContent":["/**\n * Taxonomy term reorder endpoint\n *\n * POST /_emdash/api/taxonomies/:name/reorder\n *   body: { parentId?, ids }\n *\n * Sets the manual order of one sibling group. There is no `locale`: a term\n * holds one position across every locale it is translated into.\n */\n\nimport type { APIRoute } from \"astro\";\n\nimport { requirePerm } from \"#api/authorize.js\";\nimport { apiError, handleError, requireDb, unwrapResult } from \"#api/error.js\";\nimport { handleTermReorder } from \"#api/handlers/taxonomies.js\";\nimport { isParseError, parseBody } from \"#api/parse.js\";\nimport { reorderTermsBody } from \"#api/schemas.js\";\nimport { taxonomyTag } from \"#cache/chrome-tags.js\";\n\nexport const prerender = false;\n\nexport const POST: APIRoute = async ({ params, request, locals, cache }) => {\n\tconst { emdash, user } = locals;\n\tconst { name } = params;\n\tif (!name) return apiError(\"VALIDATION_ERROR\", \"Taxonomy name required\", 400);\n\n\tconst dbErr = requireDb(emdash?.db);\n\tif (dbErr) return dbErr;\n\n\tconst denied = requirePerm(user, \"taxonomies:manage\");\n\tif (denied) return denied;\n\n\ttry {\n\t\tconst body = await parseBody(request, reorderTermsBody);\n\t\tif (isParseError(body)) return body;\n\n\t\tconst result = await handleTermReorder(emdash.db, name, body);\n\t\tif (!result.success) return unwrapResult(result);\n\t\tif (cache?.enabled) await cache.invalidate({ tags: [taxonomyTag(name)] });\n\t\treturn unwrapResult(result);\n\t} catch (error) {\n\t\treturn handleError(error, \"Failed to reorder terms\", \"TERM_REORDER_ERROR\");\n\t}\n};\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAmBA,MAAa,YAAY;AAEzB,MAAa,OAAiB,OAAO,EAAE,QAAQ,SAAS,QAAQ,YAAY;CAC3E,MAAM,EAAE,QAAQ,SAAS;CACzB,MAAM,EAAE,SAAS;AACjB,KAAI,CAAC,KAAM,QAAO,SAAS,oBAAoB,0BAA0B,IAAI;CAE7E,MAAM,QAAQ,UAAU,QAAQ,GAAG;AACnC,KAAI,MAAO,QAAO;CAElB,MAAM,SAAS,YAAY,MAAM,oBAAoB;AACrD,KAAI,OAAQ,QAAO;AAEnB,KAAI;EACH,MAAM,OAAO,MAAM,UAAU,SAAS,iBAAiB;AACvD,MAAI,aAAa,KAAK,CAAE,QAAO;EAE/B,MAAM,SAAS,MAAM,kBAAkB,OAAO,IAAI,MAAM,KAAK;AAC7D,MAAI,CAAC,OAAO,QAAS,QAAO,aAAa,OAAO;AAChD,MAAI,OAAO,QAAS,OAAM,MAAM,WAAW,EAAE,MAAM,CAAC,YAAY,KAAK,CAAC,EAAE,CAAC;AACzE,SAAO,aAAa,OAAO;UACnB,OAAO;AACf,SAAO,YAAY,OAAO,2BAA2B,qBAAqB"}
+{"version":3,"file":"reorder.mjs","names":[],"sources":["../../../../../../src/astro/routes/api/taxonomies/[name]/reorder.ts"],"sourcesContent":["/**\n * Taxonomy term reorder endpoint\n *\n * POST /_emdash/api/taxonomies/:name/reorder\n *   body: { parentId?, ids }\n *\n * Sets the manual order of one sibling group. There is no `locale`: a term\n * holds one position across every locale it is translated into.\n */\n\nimport type { APIRoute } from \"astro\";\n\nimport { requirePerm } from \"#api/authorize.js\";\nimport { apiError, handleError, requireDb, unwrapResult } from \"#api/error.js\";\nimport { handleTermReorder } from \"#api/handlers/taxonomies.js\";\nimport { isParseError, parseBody } from \"#api/parse.js\";\nimport { reorderTermsBody } from \"#api/schemas.js\";\nimport { taxonomyTag } from \"#cache/chrome-tags.js\";\nimport { invalidateRouteCache } from \"#cache/route-cache.js\";\n\nexport const prerender = false;\n\nexport const POST: APIRoute = async ({ params, request, locals, cache }) => {\n\tconst { emdash, user } = locals;\n\tconst { name } = params;\n\tif (!name) return apiError(\"VALIDATION_ERROR\", \"Taxonomy name required\", 400);\n\n\tconst dbErr = requireDb(emdash?.db);\n\tif (dbErr) return dbErr;\n\n\tconst denied = requirePerm(user, \"taxonomies:manage\");\n\tif (denied) return denied;\n\n\ttry {\n\t\tconst body = await parseBody(request, reorderTermsBody);\n\t\tif (isParseError(body)) return body;\n\n\t\tconst result = await handleTermReorder(emdash.db, name, body);\n\t\tif (!result.success) return unwrapResult(result);\n\t\tawait invalidateRouteCache(cache, [taxonomyTag(name)]);\n\t\treturn unwrapResult(result);\n\t} catch (error) {\n\t\treturn handleError(error, \"Failed to reorder terms\", \"TERM_REORDER_ERROR\");\n\t}\n};\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAoBA,MAAa,YAAY;AAEzB,MAAa,OAAiB,OAAO,EAAE,QAAQ,SAAS,QAAQ,YAAY;CAC3E,MAAM,EAAE,QAAQ,SAAS;CACzB,MAAM,EAAE,SAAS;AACjB,KAAI,CAAC,KAAM,QAAO,SAAS,oBAAoB,0BAA0B,IAAI;CAE7E,MAAM,QAAQ,UAAU,QAAQ,GAAG;AACnC,KAAI,MAAO,QAAO;CAElB,MAAM,SAAS,YAAY,MAAM,oBAAoB;AACrD,KAAI,OAAQ,QAAO;AAEnB,KAAI;EACH,MAAM,OAAO,MAAM,UAAU,SAAS,iBAAiB;AACvD,MAAI,aAAa,KAAK,CAAE,QAAO;EAE/B,MAAM,SAAS,MAAM,kBAAkB,OAAO,IAAI,MAAM,KAAK;AAC7D,MAAI,CAAC,OAAO,QAAS,QAAO,aAAa,OAAO;AAChD,QAAM,qBAAqB,OAAO,CAAC,YAAY,KAAK,CAAC,CAAC;AACtD,SAAO,aAAa,OAAO;UACnB,OAAO;AACf,SAAO,YAAY,OAAO,2BAA2B,qBAAqB"}

package/dist/astro/routes/api/taxonomies/_name_/terms/_slug_/translations.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"translations.d.mts","names":[],"sources":["../../../../../../../../src/astro/routes/api/taxonomies/[name]/terms/[slug]/translations.ts"],"mappings":";;;cAsBa,SAAA;AAAA,cAUA,GAAA,EAAK,QAAA;AAAA,cAwBL,IAAA,EAAM,QAAA"}
+{"version":3,"file":"translations.d.mts","names":[],"sources":["../../../../../../../../src/astro/routes/api/taxonomies/[name]/terms/[slug]/translations.ts"],"mappings":";;;cAuBa,SAAA;AAAA,cAUA,GAAA,EAAK,QAAA;AAAA,cAwBL,IAAA,EAAM,QAAA"}

package/dist/astro/routes/api/taxonomies/_name_/terms/_slug_/translations.mjs

@@ -6,29 +6,31 @@ import "../../../../../../../object-cache-Bo6DGaC9.mjs";
 import "../../../../../../../slugify-bu2-jKia.mjs";
 import "../../../../../../../request-cache-C4CIo5ad.mjs";
 import "../../../../../../../url-Dn3IStq8.mjs";
-import "../../../../../../../types-C-Xp0CcN.mjs";
-import "../../../../../../../taxonomy-QrNmTfIZ.mjs";
+import "../../../../../../../types-D2NEXtgB.mjs";
+import "../../../../../../../taxonomy-C_C_LBAU.mjs";
 import "../../../../../../../resolve-D-kqyKns.mjs";
 import { r as taxonomyTag } from "../../../../../../../chrome-tags-BIKBMZYO.mjs";
-import "../../../../../../../loader-CetY659y.mjs";
-import "../../../../../../../collection-slugs-cache-B2Gs9Jwx.mjs";
-import "../../../../../../../taxonomies-DQSywBvX.mjs";
-import "../../../../../../../errors-CjtE5aWF.mjs";
-import "../../../../../../../errors-hskQ0C8G.mjs";
-import "../../../../../../../settings-GaZ5sVgg.mjs";
-import "../../../../../../../site-settings-CDdT4mVm.mjs";
-import { f as handleTermTranslations, l as handleTermGet, s as handleTermCreate } from "../../../../../../../taxonomies-Dj5eaobC.mjs";
-import { a as unwrapResult, i as requireDb, r as handleError, t as apiError } from "../../../../../../../error-DxgQdaZ_.mjs";
-import { i as parseQuery, n as parseBody, t as isParseError } from "../../../../../../../parse-Cn5aSk1N.mjs";
-import { b as localeFilterQuery } from "../../../../../../../redirects-DFT7Wr-e.mjs";
-import "../../../../../../../entry-lock-Cjz0h45X.mjs";
-import "../../../../../../../media-CRKsKlfK.mjs";
-import "../../../../../../../comments-BzmIKVb2.mjs";
-import "../../../../../../../byline-fields-Bze3ZdAw.mjs";
-import "../../../../../../../menus-D1HC8npj.mjs";
-import "../../../../../../../status-Dl85BK39.mjs";
+import "../../../../../../../loader-CswroUbe.mjs";
+import "../../../../../../../json-recordset-BUjxhr77.mjs";
+import "../../../../../../../collection-slugs-cache-e09QeJQt.mjs";
+import "../../../../../../../taxonomies-ChnU7Mc8.mjs";
+import "../../../../../../../errors-B4f4It-2.mjs";
+import "../../../../../../../errors-BOYNdIo3.mjs";
+import "../../../../../../../settings-Dd1uivmQ.mjs";
+import "../../../../../../../site-settings-DRHfX7bq.mjs";
+import { a as unwrapResult, i as requireDb, r as handleError, t as apiError } from "../../../../../../../error-CVWeIOku.mjs";
+import { f as handleTermTranslations, l as handleTermGet, s as handleTermCreate } from "../../../../../../../taxonomies-Dd9JJv_a.mjs";
+import { i as parseQuery, n as parseBody, t as isParseError } from "../../../../../../../parse-DgQ2NABT.mjs";
+import { b as localeFilterQuery } from "../../../../../../../redirects-BEVSRMa2.mjs";
+import "../../../../../../../entry-lock-Df6-XhIu.mjs";
+import "../../../../../../../media-1WC65OCB.mjs";
+import "../../../../../../../comments-yiRFx3w5.mjs";
+import "../../../../../../../byline-fields-BLXZnX7N.mjs";
+import "../../../../../../../menus-BSzwObhV.mjs";
+import "../../../../../../../status-BFNdxzKc.mjs";
 import "../../../../../../../api/schemas/index.mjs";
-import { i as requirePerm } from "../../../../../../../authorize-TdIGpRSE.mjs";
+import { o as requirePerm } from "../../../../../../../authorize-DPFBGbE6.mjs";
+import { t as invalidateRouteCache } from "../../../../../../../route-cache-QSOyDEw0.mjs";
 import { z } from "zod";
 
 //#region src/astro/routes/api/taxonomies/[name]/terms/[slug]/translations.ts
@@ -80,7 +82,7 @@ const POST = async ({ params, request, locals, cache }) => {
 			translationOf: source.data.term.id
 		});
 		if (!result.success) return unwrapResult(result, 201);
-		if (cache?.enabled) await cache.invalidate({ tags: [taxonomyTag(name)] });
+		await invalidateRouteCache(cache, [taxonomyTag(name)]);
 		return unwrapResult(result, 201);
 	} catch (error) {
 		return handleError(error, "Failed to create term translation", "TERM_TRANSLATION_CREATE_ERROR");

package/dist/astro/routes/api/taxonomies/_name_/terms/_slug_/translations.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"translations.mjs","names":[],"sources":["../../../../../../../../src/astro/routes/api/taxonomies/[name]/terms/[slug]/translations.ts"],"sourcesContent":["/**\n * Term translation endpoints\n *\n * GET  /_emdash/api/taxonomies/:name/terms/:slug/translations[?locale=xx]\n * POST /_emdash/api/taxonomies/:name/terms/:slug/translations\n *    body: { locale, label?, slug? }\n */\n\nimport type { APIRoute } from \"astro\";\nimport { z } from \"zod\";\n\nimport { requirePerm } from \"#api/authorize.js\";\nimport { apiError, handleError, requireDb, unwrapResult } from \"#api/error.js\";\nimport {\n\thandleTermCreate,\n\thandleTermGet,\n\thandleTermTranslations,\n} from \"#api/handlers/taxonomies.js\";\nimport { isParseError, parseBody, parseQuery } from \"#api/parse.js\";\nimport { localeFilterQuery } from \"#api/schemas.js\";\nimport { taxonomyTag } from \"#cache/chrome-tags.js\";\n\nexport const prerender = false;\n\nconst createTermTranslationBody = z\n\t.object({\n\t\tlocale: z.string().min(1),\n\t\tlabel: z.string().min(1).optional(),\n\t\tslug: z.string().min(1).optional(),\n\t})\n\t.meta({ id: \"CreateTermTranslationBody\" });\n\nexport const GET: APIRoute = async ({ params, request, locals }) => {\n\tconst { emdash, user } = locals;\n\tconst { name, slug } = params;\n\tif (!name || !slug) return apiError(\"VALIDATION_ERROR\", \"Taxonomy name and slug required\", 400);\n\n\tconst dbErr = requireDb(emdash?.db);\n\tif (dbErr) return dbErr;\n\n\tconst denied = requirePerm(user, \"taxonomies:read\");\n\tif (denied) return denied;\n\n\tconst query = parseQuery(new URL(request.url), localeFilterQuery);\n\tif (isParseError(query)) return query;\n\n\ttry {\n\t\tconst anchor = await handleTermGet(emdash.db, name, slug, { locale: query.locale });\n\t\tif (!anchor.success) return unwrapResult(anchor);\n\t\tconst result = await handleTermTranslations(emdash.db, anchor.data.term.id);\n\t\treturn unwrapResult(result);\n\t} catch (error) {\n\t\treturn handleError(error, \"Failed to list term translations\", \"TERM_TRANSLATIONS_ERROR\");\n\t}\n};\n\nexport const POST: APIRoute = async ({ params, request, locals, cache }) => {\n\tconst { emdash, user } = locals;\n\tconst { name, slug } = params;\n\tif (!name || !slug) return apiError(\"VALIDATION_ERROR\", \"Taxonomy name and slug required\", 400);\n\n\tconst dbErr = requireDb(emdash?.db);\n\tif (dbErr) return dbErr;\n\n\tconst denied = requirePerm(user, \"taxonomies:manage\");\n\tif (denied) return denied;\n\n\tconst query = parseQuery(new URL(request.url), localeFilterQuery);\n\tif (isParseError(query)) return query;\n\n\ttry {\n\t\tconst body = await parseBody(request, createTermTranslationBody);\n\t\tif (isParseError(body)) return body;\n\n\t\tconst source = await handleTermGet(emdash.db, name, slug, { locale: query.locale });\n\t\tif (!source.success) return unwrapResult(source);\n\n\t\tconst result = await handleTermCreate(emdash.db, name, {\n\t\t\tslug: body.slug ?? source.data.term.slug,\n\t\t\tlabel: body.label ?? source.data.term.label,\n\t\t\tparentId: source.data.term.parentId,\n\t\t\tdescription: source.data.term.description,\n\t\t\tlocale: body.locale,\n\t\t\ttranslationOf: source.data.term.id,\n\t\t});\n\t\tif (!result.success) return unwrapResult(result, 201);\n\t\tif (cache?.enabled) await cache.invalidate({ tags: [taxonomyTag(name)] });\n\t\treturn unwrapResult(result, 201);\n\t} catch (error) {\n\t\treturn handleError(error, \"Failed to create term translation\", \"TERM_TRANSLATION_CREATE_ERROR\");\n\t}\n};\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAsBA,MAAa,YAAY;AAEzB,MAAM,4BAA4B,EAChC,OAAO;CACP,QAAQ,EAAE,QAAQ,CAAC,IAAI,EAAE;CACzB,OAAO,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC,UAAU;CACnC,MAAM,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC,UAAU;CAClC,CAAC,CACD,KAAK,EAAE,IAAI,6BAA6B,CAAC;AAE3C,MAAa,MAAgB,OAAO,EAAE,QAAQ,SAAS,aAAa;CACnE,MAAM,EAAE,QAAQ,SAAS;CACzB,MAAM,EAAE,MAAM,SAAS;AACvB,KAAI,CAAC,QAAQ,CAAC,KAAM,QAAO,SAAS,oBAAoB,mCAAmC,IAAI;CAE/F,MAAM,QAAQ,UAAU,QAAQ,GAAG;AACnC,KAAI,MAAO,QAAO;CAElB,MAAM,SAAS,YAAY,MAAM,kBAAkB;AACnD,KAAI,OAAQ,QAAO;CAEnB,MAAM,QAAQ,WAAW,IAAI,IAAI,QAAQ,IAAI,EAAE,kBAAkB;AACjE,KAAI,aAAa,MAAM,CAAE,QAAO;AAEhC,KAAI;EACH,MAAM,SAAS,MAAM,cAAc,OAAO,IAAI,MAAM,MAAM,EAAE,QAAQ,MAAM,QAAQ,CAAC;AACnF,MAAI,CAAC,OAAO,QAAS,QAAO,aAAa,OAAO;AAEhD,SAAO,aADQ,MAAM,uBAAuB,OAAO,IAAI,OAAO,KAAK,KAAK,GAAG,CAChD;UACnB,OAAO;AACf,SAAO,YAAY,OAAO,oCAAoC,0BAA0B;;;AAI1F,MAAa,OAAiB,OAAO,EAAE,QAAQ,SAAS,QAAQ,YAAY;CAC3E,MAAM,EAAE,QAAQ,SAAS;CACzB,MAAM,EAAE,MAAM,SAAS;AACvB,KAAI,CAAC,QAAQ,CAAC,KAAM,QAAO,SAAS,oBAAoB,mCAAmC,IAAI;CAE/F,MAAM,QAAQ,UAAU,QAAQ,GAAG;AACnC,KAAI,MAAO,QAAO;CAElB,MAAM,SAAS,YAAY,MAAM,oBAAoB;AACrD,KAAI,OAAQ,QAAO;CAEnB,MAAM,QAAQ,WAAW,IAAI,IAAI,QAAQ,IAAI,EAAE,kBAAkB;AACjE,KAAI,aAAa,MAAM,CAAE,QAAO;AAEhC,KAAI;EACH,MAAM,OAAO,MAAM,UAAU,SAAS,0BAA0B;AAChE,MAAI,aAAa,KAAK,CAAE,QAAO;EAE/B,MAAM,SAAS,MAAM,cAAc,OAAO,IAAI,MAAM,MAAM,EAAE,QAAQ,MAAM,QAAQ,CAAC;AACnF,MAAI,CAAC,OAAO,QAAS,QAAO,aAAa,OAAO;EAEhD,MAAM,SAAS,MAAM,iBAAiB,OAAO,IAAI,MAAM;GACtD,MAAM,KAAK,QAAQ,OAAO,KAAK,KAAK;GACpC,OAAO,KAAK,SAAS,OAAO,KAAK,KAAK;GACtC,UAAU,OAAO,KAAK,KAAK;GAC3B,aAAa,OAAO,KAAK,KAAK;GAC9B,QAAQ,KAAK;GACb,eAAe,OAAO,KAAK,KAAK;GAChC,CAAC;AACF,MAAI,CAAC,OAAO,QAAS,QAAO,aAAa,QAAQ,IAAI;AACrD,MAAI,OAAO,QAAS,OAAM,MAAM,WAAW,EAAE,MAAM,CAAC,YAAY,KAAK,CAAC,EAAE,CAAC;AACzE,SAAO,aAAa,QAAQ,IAAI;UACxB,OAAO;AACf,SAAO,YAAY,OAAO,qCAAqC,gCAAgC"}
+{"version":3,"file":"translations.mjs","names":[],"sources":["../../../../../../../../src/astro/routes/api/taxonomies/[name]/terms/[slug]/translations.ts"],"sourcesContent":["/**\n * Term translation endpoints\n *\n * GET  /_emdash/api/taxonomies/:name/terms/:slug/translations[?locale=xx]\n * POST /_emdash/api/taxonomies/:name/terms/:slug/translations\n *    body: { locale, label?, slug? }\n */\n\nimport type { APIRoute } from \"astro\";\nimport { z } from \"zod\";\n\nimport { requirePerm } from \"#api/authorize.js\";\nimport { apiError, handleError, requireDb, unwrapResult } from \"#api/error.js\";\nimport {\n\thandleTermCreate,\n\thandleTermGet,\n\thandleTermTranslations,\n} from \"#api/handlers/taxonomies.js\";\nimport { isParseError, parseBody, parseQuery } from \"#api/parse.js\";\nimport { localeFilterQuery } from \"#api/schemas.js\";\nimport { taxonomyTag } from \"#cache/chrome-tags.js\";\nimport { invalidateRouteCache } from \"#cache/route-cache.js\";\n\nexport const prerender = false;\n\nconst createTermTranslationBody = z\n\t.object({\n\t\tlocale: z.string().min(1),\n\t\tlabel: z.string().min(1).optional(),\n\t\tslug: z.string().min(1).optional(),\n\t})\n\t.meta({ id: \"CreateTermTranslationBody\" });\n\nexport const GET: APIRoute = async ({ params, request, locals }) => {\n\tconst { emdash, user } = locals;\n\tconst { name, slug } = params;\n\tif (!name || !slug) return apiError(\"VALIDATION_ERROR\", \"Taxonomy name and slug required\", 400);\n\n\tconst dbErr = requireDb(emdash?.db);\n\tif (dbErr) return dbErr;\n\n\tconst denied = requirePerm(user, \"taxonomies:read\");\n\tif (denied) return denied;\n\n\tconst query = parseQuery(new URL(request.url), localeFilterQuery);\n\tif (isParseError(query)) return query;\n\n\ttry {\n\t\tconst anchor = await handleTermGet(emdash.db, name, slug, { locale: query.locale });\n\t\tif (!anchor.success) return unwrapResult(anchor);\n\t\tconst result = await handleTermTranslations(emdash.db, anchor.data.term.id);\n\t\treturn unwrapResult(result);\n\t} catch (error) {\n\t\treturn handleError(error, \"Failed to list term translations\", \"TERM_TRANSLATIONS_ERROR\");\n\t}\n};\n\nexport const POST: APIRoute = async ({ params, request, locals, cache }) => {\n\tconst { emdash, user } = locals;\n\tconst { name, slug } = params;\n\tif (!name || !slug) return apiError(\"VALIDATION_ERROR\", \"Taxonomy name and slug required\", 400);\n\n\tconst dbErr = requireDb(emdash?.db);\n\tif (dbErr) return dbErr;\n\n\tconst denied = requirePerm(user, \"taxonomies:manage\");\n\tif (denied) return denied;\n\n\tconst query = parseQuery(new URL(request.url), localeFilterQuery);\n\tif (isParseError(query)) return query;\n\n\ttry {\n\t\tconst body = await parseBody(request, createTermTranslationBody);\n\t\tif (isParseError(body)) return body;\n\n\t\tconst source = await handleTermGet(emdash.db, name, slug, { locale: query.locale });\n\t\tif (!source.success) return unwrapResult(source);\n\n\t\tconst result = await handleTermCreate(emdash.db, name, {\n\t\t\tslug: body.slug ?? source.data.term.slug,\n\t\t\tlabel: body.label ?? source.data.term.label,\n\t\t\tparentId: source.data.term.parentId,\n\t\t\tdescription: source.data.term.description,\n\t\t\tlocale: body.locale,\n\t\t\ttranslationOf: source.data.term.id,\n\t\t});\n\t\tif (!result.success) return unwrapResult(result, 201);\n\t\tawait invalidateRouteCache(cache, [taxonomyTag(name)]);\n\t\treturn unwrapResult(result, 201);\n\t} catch (error) {\n\t\treturn handleError(error, \"Failed to create term translation\", \"TERM_TRANSLATION_CREATE_ERROR\");\n\t}\n};\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAuBA,MAAa,YAAY;AAEzB,MAAM,4BAA4B,EAChC,OAAO;CACP,QAAQ,EAAE,QAAQ,CAAC,IAAI,EAAE;CACzB,OAAO,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC,UAAU;CACnC,MAAM,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC,UAAU;CAClC,CAAC,CACD,KAAK,EAAE,IAAI,6BAA6B,CAAC;AAE3C,MAAa,MAAgB,OAAO,EAAE,QAAQ,SAAS,aAAa;CACnE,MAAM,EAAE,QAAQ,SAAS;CACzB,MAAM,EAAE,MAAM,SAAS;AACvB,KAAI,CAAC,QAAQ,CAAC,KAAM,QAAO,SAAS,oBAAoB,mCAAmC,IAAI;CAE/F,MAAM,QAAQ,UAAU,QAAQ,GAAG;AACnC,KAAI,MAAO,QAAO;CAElB,MAAM,SAAS,YAAY,MAAM,kBAAkB;AACnD,KAAI,OAAQ,QAAO;CAEnB,MAAM,QAAQ,WAAW,IAAI,IAAI,QAAQ,IAAI,EAAE,kBAAkB;AACjE,KAAI,aAAa,MAAM,CAAE,QAAO;AAEhC,KAAI;EACH,MAAM,SAAS,MAAM,cAAc,OAAO,IAAI,MAAM,MAAM,EAAE,QAAQ,MAAM,QAAQ,CAAC;AACnF,MAAI,CAAC,OAAO,QAAS,QAAO,aAAa,OAAO;AAEhD,SAAO,aADQ,MAAM,uBAAuB,OAAO,IAAI,OAAO,KAAK,KAAK,GAAG,CAChD;UACnB,OAAO;AACf,SAAO,YAAY,OAAO,oCAAoC,0BAA0B;;;AAI1F,MAAa,OAAiB,OAAO,EAAE,QAAQ,SAAS,QAAQ,YAAY;CAC3E,MAAM,EAAE,QAAQ,SAAS;CACzB,MAAM,EAAE,MAAM,SAAS;AACvB,KAAI,CAAC,QAAQ,CAAC,KAAM,QAAO,SAAS,oBAAoB,mCAAmC,IAAI;CAE/F,MAAM,QAAQ,UAAU,QAAQ,GAAG;AACnC,KAAI,MAAO,QAAO;CAElB,MAAM,SAAS,YAAY,MAAM,oBAAoB;AACrD,KAAI,OAAQ,QAAO;CAEnB,MAAM,QAAQ,WAAW,IAAI,IAAI,QAAQ,IAAI,EAAE,kBAAkB;AACjE,KAAI,aAAa,MAAM,CAAE,QAAO;AAEhC,KAAI;EACH,MAAM,OAAO,MAAM,UAAU,SAAS,0BAA0B;AAChE,MAAI,aAAa,KAAK,CAAE,QAAO;EAE/B,MAAM,SAAS,MAAM,cAAc,OAAO,IAAI,MAAM,MAAM,EAAE,QAAQ,MAAM,QAAQ,CAAC;AACnF,MAAI,CAAC,OAAO,QAAS,QAAO,aAAa,OAAO;EAEhD,MAAM,SAAS,MAAM,iBAAiB,OAAO,IAAI,MAAM;GACtD,MAAM,KAAK,QAAQ,OAAO,KAAK,KAAK;GACpC,OAAO,KAAK,SAAS,OAAO,KAAK,KAAK;GACtC,UAAU,OAAO,KAAK,KAAK;GAC3B,aAAa,OAAO,KAAK,KAAK;GAC9B,QAAQ,KAAK;GACb,eAAe,OAAO,KAAK,KAAK;GAChC,CAAC;AACF,MAAI,CAAC,OAAO,QAAS,QAAO,aAAa,QAAQ,IAAI;AACrD,QAAM,qBAAqB,OAAO,CAAC,YAAY,KAAK,CAAC,CAAC;AACtD,SAAO,aAAa,QAAQ,IAAI;UACxB,OAAO;AACf,SAAO,YAAY,OAAO,qCAAqC,gCAAgC"}

package/dist/astro/routes/api/taxonomies/_name_/terms/_slug_.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"_slug_.d.mts","names":[],"sources":["../../../../../../../src/astro/routes/api/taxonomies/[name]/terms/[slug].ts"],"mappings":";;;cAiBa,SAAA;;;;cAKA,GAAA,EAAK,QAAA;AAyBlB;;;AAAA,cAAa,GAAA,EAAK,QAAA;;AA8BlB;;cAAa,MAAA,EAAQ,QAAA"}
+{"version":3,"file":"_slug_.d.mts","names":[],"sources":["../../../../../../../src/astro/routes/api/taxonomies/[name]/terms/[slug].ts"],"mappings":";;;cAkBa,SAAA;;;;cAKA,GAAA,EAAK,QAAA;AAyBlB;;;AAAA,cAAa,GAAA,EAAK,QAAA;;AA8BlB;;cAAa,MAAA,EAAQ,QAAA"}

package/dist/astro/routes/api/taxonomies/_name_/terms/_slug_.mjs

@@ -6,29 +6,31 @@ import "../../../../../../object-cache-Bo6DGaC9.mjs";
 import "../../../../../../slugify-bu2-jKia.mjs";
 import "../../../../../../request-cache-C4CIo5ad.mjs";
 import "../../../../../../url-Dn3IStq8.mjs";
-import "../../../../../../types-C-Xp0CcN.mjs";
-import "../../../../../../taxonomy-QrNmTfIZ.mjs";
+import "../../../../../../types-D2NEXtgB.mjs";
+import "../../../../../../taxonomy-C_C_LBAU.mjs";
 import "../../../../../../resolve-D-kqyKns.mjs";
 import { r as taxonomyTag } from "../../../../../../chrome-tags-BIKBMZYO.mjs";
-import "../../../../../../loader-CetY659y.mjs";
-import "../../../../../../collection-slugs-cache-B2Gs9Jwx.mjs";
-import "../../../../../../taxonomies-DQSywBvX.mjs";
-import "../../../../../../errors-CjtE5aWF.mjs";
-import "../../../../../../errors-hskQ0C8G.mjs";
-import "../../../../../../settings-GaZ5sVgg.mjs";
-import "../../../../../../site-settings-CDdT4mVm.mjs";
-import { c as handleTermDelete, l as handleTermGet, p as handleTermUpdate } from "../../../../../../taxonomies-Dj5eaobC.mjs";
-import { a as unwrapResult, i as requireDb, r as handleError, t as apiError } from "../../../../../../error-DxgQdaZ_.mjs";
-import { i as parseQuery, n as parseBody, t as isParseError } from "../../../../../../parse-Cn5aSk1N.mjs";
-import { b as localeFilterQuery } from "../../../../../../redirects-DFT7Wr-e.mjs";
-import { Q as updateTermBody } from "../../../../../../entry-lock-Cjz0h45X.mjs";
-import "../../../../../../media-CRKsKlfK.mjs";
-import "../../../../../../comments-BzmIKVb2.mjs";
-import "../../../../../../byline-fields-Bze3ZdAw.mjs";
-import "../../../../../../menus-D1HC8npj.mjs";
-import "../../../../../../status-Dl85BK39.mjs";
+import "../../../../../../loader-CswroUbe.mjs";
+import "../../../../../../json-recordset-BUjxhr77.mjs";
+import "../../../../../../collection-slugs-cache-e09QeJQt.mjs";
+import "../../../../../../taxonomies-ChnU7Mc8.mjs";
+import "../../../../../../errors-B4f4It-2.mjs";
+import "../../../../../../errors-BOYNdIo3.mjs";
+import "../../../../../../settings-Dd1uivmQ.mjs";
+import "../../../../../../site-settings-DRHfX7bq.mjs";
+import { a as unwrapResult, i as requireDb, r as handleError, t as apiError } from "../../../../../../error-CVWeIOku.mjs";
+import { c as handleTermDelete, l as handleTermGet, p as handleTermUpdate } from "../../../../../../taxonomies-Dd9JJv_a.mjs";
+import { i as parseQuery, n as parseBody, t as isParseError } from "../../../../../../parse-DgQ2NABT.mjs";
+import { b as localeFilterQuery } from "../../../../../../redirects-BEVSRMa2.mjs";
+import { Q as updateTermBody } from "../../../../../../entry-lock-Df6-XhIu.mjs";
+import "../../../../../../media-1WC65OCB.mjs";
+import "../../../../../../comments-yiRFx3w5.mjs";
+import "../../../../../../byline-fields-BLXZnX7N.mjs";
+import "../../../../../../menus-BSzwObhV.mjs";
+import "../../../../../../status-BFNdxzKc.mjs";
 import "../../../../../../api/schemas/index.mjs";
-import { i as requirePerm } from "../../../../../../authorize-TdIGpRSE.mjs";
+import { o as requirePerm } from "../../../../../../authorize-DPFBGbE6.mjs";
+import { t as invalidateRouteCache } from "../../../../../../route-cache-QSOyDEw0.mjs";
 
 //#region src/astro/routes/api/taxonomies/[name]/terms/[slug].ts
 const prerender = false;
@@ -69,7 +71,7 @@ const PUT = async ({ params, request, locals, cache }) => {
 		if (isParseError(body)) return body;
 		const result = await handleTermUpdate(emdash.db, name, slug, body, { locale: query.locale });
 		if (!result.success) return unwrapResult(result);
-		if (cache?.enabled) await cache.invalidate({ tags: [taxonomyTag(name)] });
+		await invalidateRouteCache(cache, [taxonomyTag(name)]);
 		return unwrapResult(result);
 	} catch (error) {
 		return handleError(error, "Failed to update term", "TERM_UPDATE_ERROR");
@@ -91,7 +93,7 @@ const DELETE = async ({ params, request, locals, cache }) => {
 	try {
 		const result = await handleTermDelete(emdash.db, name, slug, { locale: query.locale });
 		if (!result.success) return unwrapResult(result);
-		if (cache?.enabled) await cache.invalidate({ tags: [taxonomyTag(name)] });
+		await invalidateRouteCache(cache, [taxonomyTag(name)]);
 		return unwrapResult(result);
 	} catch (error) {
 		return handleError(error, "Failed to delete term", "TERM_DELETE_ERROR");