emdash 1.2.0 → 1.3.0

package/dist/hook-result-BrdLyOdI.d.mts

@@ -0,0 +1,31 @@
+//#region src/plugins/sandbox/hook-result.d.ts
+/** Current wire-format version for sandbox hook result envelopes. */
+declare const SANDBOX_HOOK_RESULT_VERSION: 1;
+/** Maximum editor-facing rejection reason accepted from a sandboxed plugin. */
+declare const MAX_SANDBOX_SAVE_REJECTION_REASON_LENGTH = 500;
+interface SandboxSaveRejectedError {
+  code: "SAVE_REJECTED";
+  reason: string;
+}
+/**
+ * Returned from a sandboxed `content:beforeSave` hook to reject the save.
+ * The host validates every field before exposing the reason to an editor.
+ */
+interface SandboxHookErrorEnvelope {
+  __emdashSandboxHookResult: true;
+  version: typeof SANDBOX_HOOK_RESULT_VERSION;
+  error: SandboxSaveRejectedError;
+}
+type SandboxHookResultInspection = {
+  kind: "value";
+} | {
+  kind: "malformed";
+} | {
+  kind: "error";
+  error: SandboxSaveRejectedError;
+};
+/** Validate and normalize an untrusted value returned across the sandbox boundary. */
+declare function inspectSandboxHookResult(value: unknown): SandboxHookResultInspection;
+//#endregion
+export { SandboxSaveRejectedError as a, SandboxHookResultInspection as i, SANDBOX_HOOK_RESULT_VERSION as n, inspectSandboxHookResult as o, SandboxHookErrorEnvelope as r, MAX_SANDBOX_SAVE_REJECTION_REASON_LENGTH as t };
+//# sourceMappingURL=hook-result-BrdLyOdI.d.mts.map

package/dist/hook-result-BrdLyOdI.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"hook-result-BrdLyOdI.d.mts","names":[],"sources":["../src/plugins/sandbox/hook-result.ts"],"mappings":";;cACa,2BAAA;;cAGA,wCAAA;AAAA,UAEI,wBAAA;EAChB,IAAA;EACA,MAAA;AAAA;;;;AAFD;UASiB,wBAAA;EAChB,yBAAA;EACA,OAAA,SAAgB,2BAAA;EAChB,KAAA,EAAO,wBAAA;AAAA;AAAA,KAGI,2BAAA;EACP,IAAA;AAAA;EACA,IAAA;AAAA;EACA,IAAA;EAAe,KAAA,EAAO,wBAAA;AAAA;;iBAOX,wBAAA,CAAyB,KAAA,YAAiB,2BAAA"}

package/dist/hreflang-C8Jb-hrf.mjs

@@ -0,0 +1,105 @@
+import { i as isI18nEnabled, r as getI18nConfig } from "./config-CvmjJcVw.mjs";
+import { t as ContentRepository } from "./content-DQSRZTVw.mjs";
+import { r as requestCached } from "./request-cache-C4CIo5ad.mjs";
+import { a as resolveLocalizedContentRoutePath } from "./resolve-D-kqyKns.mjs";
+import { n as getCollectionInfoWithDb } from "./query-haKvLAWl.mjs";
+import { s as getSiteSettingsWithDb } from "./settings-CWb84sDm.mjs";
+
+//#region src/seo/hreflang.ts
+const TRAILING_SLASH_RE = /\/$/;
+const ABSOLUTE_URL_RE = /^https?:\/\//i;
+/**
+* IDs of variants flagged `noindex` in the SEO panel. Entries without
+* an `_emdash_seo` row are indexable by default (same as the sitemap).
+* The id list is bounded by the number of configured locales, so no
+* chunking is needed.
+*/
+async function findNoindexIds(db, collection, ids) {
+	if (ids.length === 0) return /* @__PURE__ */ new Set();
+	const rows = await db.selectFrom("_emdash_seo").select("content_id").where("collection", "=", collection).where("content_id", "in", ids).where("seo_no_index", "=", 1).execute();
+	return new Set(rows.map((r) => r.content_id));
+}
+/**
+* Resolve hreflang alternates for a content entry.
+*
+* @example
+* ```astro
+* ---
+* import { getHreflangAlternates } from "emdash";
+*
+* const alternates = await getHreflangAlternates("posts", entry.data.id, {
+*   siteUrl: Astro.url.origin,
+* });
+* ---
+* <head>
+*   {alternates.map((a) => <link rel="alternate" hreflang={a.hreflang} href={a.href} />)}
+* </head>
+* ```
+*/
+async function getHreflangAlternates(collection, entryId, options = {}) {
+	if (!isI18nEnabled()) return [];
+	return requestCached(`hreflang:${collection}:${entryId}:${options.siteUrl ?? ""}:${options.trailingSlash ?? "ignore"}`, async () => {
+		const { getDb } = await import("./loader-CswroUbe.mjs").then((n) => n.u);
+		return getHreflangAlternatesWithDb(await getDb(), collection, entryId, options);
+	});
+}
+/**
+* Resolve hreflang alternates with an explicit db handle.
+*
+* @internal Use `getHreflangAlternates()` in templates. This variant is
+* for routes/components that already have a database handle.
+*/
+async function getHreflangAlternatesWithDb(db, collection, entryId, options = {}) {
+	if (!isI18nEnabled()) return [];
+	let siteUrl = options.siteUrl;
+	if (!siteUrl) siteUrl = (await getSiteSettingsWithDb(db)).url;
+	if (!siteUrl || !ABSOLUTE_URL_RE.test(siteUrl)) return [];
+	siteUrl = siteUrl.replace(TRAILING_SLASH_RE, "");
+	const repo = new ContentRepository(db);
+	const item = await repo.findByIdOrSlug(collection, entryId);
+	if (!item) return [];
+	const group = item.translationGroup || item.id;
+	let variants = await repo.findTranslations(collection, group);
+	if (variants.length === 0) variants = [item];
+	let published = variants.filter((v) => v.status === "published");
+	if (published.length === 0) return [];
+	const noindexIds = await findNoindexIds(db, collection, published.map((v) => v.id));
+	if (noindexIds.has(item.id)) return [];
+	published = published.filter((v) => !noindexIds.has(v.id));
+	const urlPattern = (await getCollectionInfoWithDb(db, collection))?.urlPattern ?? null;
+	const resolved = [];
+	for (const variant of published) {
+		const locale = variant.locale || "en";
+		const path = await resolveLocalizedContentRoutePath({
+			pattern: urlPattern,
+			collection,
+			slug: variant.slug || variant.id,
+			id: variant.id,
+			date: variant.publishedAt,
+			locale,
+			trailingSlash: options.trailingSlash
+		});
+		if (path === null) continue;
+		resolved.push({
+			locale,
+			href: `${siteUrl}${path}`
+		});
+	}
+	if (resolved.length === 0) return [];
+	resolved.sort((a, b) => a.locale.localeCompare(b.locale));
+	const alternates = resolved.map((r) => ({
+		hreflang: r.locale,
+		href: r.href
+	}));
+	const defaultLocale = getI18nConfig()?.defaultLocale;
+	const xDefault = resolved.find((r) => r.locale === defaultLocale) ?? resolved[0];
+	if (xDefault) alternates.push({
+		hreflang: "x-default",
+		href: xDefault.href
+	});
+	return alternates;
+}
+
+//#endregion
+export { getHreflangAlternatesWithDb as n, getHreflangAlternates as t };
+//# sourceMappingURL=hreflang-C8Jb-hrf.mjs.map

package/dist/hreflang-C8Jb-hrf.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"hreflang-C8Jb-hrf.mjs","names":[],"sources":["../src/seo/hreflang.ts"],"sourcesContent":["/**\n * hreflang alternate resolution for translated content (#1690).\n *\n * Mirrors the sitemap route's semantics so the render path and the\n * sitemap always agree:\n *\n * - Alternates are emitted per published locale variant of a\n *   translation group, including a self-referencing entry (Google\n *   recommends the page annotate itself).\n * - `x-default` points at the default-locale variant, falling back to\n *   the first routable variant when the default locale has no\n *   translation.\n * - Variants whose locale isn't in the configured `i18n.locales` list\n *   are dropped: linking to a route the site can't serve is worse than\n *   no link at all.\n * - Variants flagged `noindex` in the SEO panel are excluded — the\n *   sitemap doesn't list them, and pointing search engines at a page\n *   that asks not to be indexed is a contradictory signal. When the\n *   entry itself is noindex the result is empty: a page opting out of\n *   indexing shouldn't announce an hreflang set at all.\n * - When i18n is disabled (or no absolute site URL can be resolved,\n *   which hreflang requires) the result is empty and no queries run.\n */\n\nimport type { Kysely } from \"kysely\";\n\nimport { ContentRepository } from \"../database/repositories/content.js\";\nimport type { Database } from \"../database/types.js\";\nimport { getI18nConfig, isI18nEnabled } from \"../i18n/config.js\";\nimport { resolveLocalizedContentRoutePath } from \"../i18n/resolve.js\";\nimport { requestCached } from \"../request-cache.js\";\nimport { getCollectionInfoWithDb } from \"../schema/query.js\";\nimport { getSiteSettingsWithDb } from \"../settings/index.js\";\n\nconst TRAILING_SLASH_RE = /\\/$/;\nconst ABSOLUTE_URL_RE = /^https?:\\/\\//i;\n\n/**\n * IDs of variants flagged `noindex` in the SEO panel. Entries without\n * an `_emdash_seo` row are indexable by default (same as the sitemap).\n * The id list is bounded by the number of configured locales, so no\n * chunking is needed.\n */\nasync function findNoindexIds(\n\tdb: Kysely<Database>,\n\tcollection: string,\n\tids: string[],\n): Promise<Set<string>> {\n\tif (ids.length === 0) return new Set();\n\tconst rows = await db\n\t\t.selectFrom(\"_emdash_seo\")\n\t\t.select(\"content_id\")\n\t\t.where(\"collection\", \"=\", collection)\n\t\t.where(\"content_id\", \"in\", ids)\n\t\t.where(\"seo_no_index\", \"=\", 1)\n\t\t.execute();\n\treturn new Set(rows.map((r) => r.content_id));\n}\n\n/** A single alternate link, ready to render as `<link rel=\"alternate\">`. */\nexport interface HreflangAlternate {\n\t/** Locale code, or `\"x-default\"` for the default variant */\n\threflang: string;\n\t/** Absolute URL of the variant */\n\thref: string;\n}\n\nexport interface HreflangOptions {\n\t/**\n\t * Absolute site origin (e.g. `https://example.com`) used to build\n\t * the alternate URLs. Falls back to the site settings URL; when\n\t * neither is available the result is empty, since hreflang\n\t * requires fully-qualified URLs.\n\t */\n\tsiteUrl?: string;\n\t/** Astro's route trailing-slash policy. */\n\ttrailingSlash?: \"always\" | \"never\" | \"ignore\";\n}\n\n/**\n * Resolve hreflang alternates for a content entry.\n *\n * @example\n * ```astro\n * ---\n * import { getHreflangAlternates } from \"emdash\";\n *\n * const alternates = await getHreflangAlternates(\"posts\", entry.data.id, {\n *   siteUrl: Astro.url.origin,\n * });\n * ---\n * <head>\n *   {alternates.map((a) => <link rel=\"alternate\" hreflang={a.hreflang} href={a.href} />)}\n * </head>\n * ```\n */\nexport async function getHreflangAlternates(\n\tcollection: string,\n\tentryId: string,\n\toptions: HreflangOptions = {},\n): Promise<HreflangAlternate[]> {\n\tif (!isI18nEnabled()) return [];\n\tconst key = `hreflang:${collection}:${entryId}:${options.siteUrl ?? \"\"}:${options.trailingSlash ?? \"ignore\"}`;\n\treturn requestCached(key, async () => {\n\t\tconst { getDb } = await import(\"../loader.js\");\n\t\tconst db = await getDb();\n\t\treturn getHreflangAlternatesWithDb(db, collection, entryId, options);\n\t});\n}\n\n/**\n * Resolve hreflang alternates with an explicit db handle.\n *\n * @internal Use `getHreflangAlternates()` in templates. This variant is\n * for routes/components that already have a database handle.\n */\nexport async function getHreflangAlternatesWithDb(\n\tdb: Kysely<Database>,\n\tcollection: string,\n\tentryId: string,\n\toptions: HreflangOptions = {},\n): Promise<HreflangAlternate[]> {\n\tif (!isI18nEnabled()) return [];\n\n\tlet siteUrl = options.siteUrl;\n\tif (!siteUrl) {\n\t\tconst settings = await getSiteSettingsWithDb(db);\n\t\tsiteUrl = settings.url;\n\t}\n\t// hreflang requires fully-qualified URLs; a relative site URL would\n\t// produce invalid output (and EmDashHead's isSafeHref would drop it).\n\tif (!siteUrl || !ABSOLUTE_URL_RE.test(siteUrl)) return [];\n\tsiteUrl = siteUrl.replace(TRAILING_SLASH_RE, \"\");\n\n\tconst repo = new ContentRepository(db);\n\tconst item = await repo.findByIdOrSlug(collection, entryId);\n\tif (!item) return [];\n\n\t// Legacy rows imported before i18n may have no translation_group;\n\t// treat them as a single-variant group.\n\tconst group = item.translationGroup || item.id;\n\tlet variants = await repo.findTranslations(collection, group);\n\tif (variants.length === 0) variants = [item];\n\n\tlet published = variants.filter((v) => v.status === \"published\");\n\tif (published.length === 0) return [];\n\n\t// Exclude noindex variants, matching the sitemap's `_emdash_seo`\n\t// filter so head and sitemap agree on which variants are\n\t// discoverable. When the requested entry itself is noindex, emit\n\t// nothing: a page opting out of indexing shouldn't announce an\n\t// hreflang set.\n\tconst noindexIds = await findNoindexIds(\n\t\tdb,\n\t\tcollection,\n\t\tpublished.map((v) => v.id),\n\t);\n\tif (noindexIds.has(item.id)) return [];\n\tpublished = published.filter((v) => !noindexIds.has(v.id));\n\n\tconst info = await getCollectionInfoWithDb(db, collection);\n\tconst urlPattern = info?.urlPattern ?? null;\n\n\tconst resolved: Array<{ locale: string; href: string }> = [];\n\tfor (const variant of published) {\n\t\tconst locale = variant.locale || \"en\";\n\t\tconst path = await resolveLocalizedContentRoutePath({\n\t\t\tpattern: urlPattern,\n\t\t\tcollection,\n\t\t\tslug: variant.slug || variant.id,\n\t\t\tid: variant.id,\n\t\t\tdate: variant.publishedAt,\n\t\t\tlocale,\n\t\t\ttrailingSlash: options.trailingSlash,\n\t\t});\n\t\tif (path === null) continue;\n\t\tresolved.push({ locale, href: `${siteUrl}${path}` });\n\t}\n\tif (resolved.length === 0) return [];\n\n\tresolved.sort((a, b) => a.locale.localeCompare(b.locale));\n\tconst alternates: HreflangAlternate[] = resolved.map((r) => ({\n\t\threflang: r.locale,\n\t\thref: r.href,\n\t}));\n\n\t// x-default: default-locale variant, else the first routable one.\n\t// Same fallback the sitemap route uses.\n\tconst defaultLocale = getI18nConfig()?.defaultLocale;\n\tconst xDefault = resolved.find((r) => r.locale === defaultLocale) ?? resolved[0];\n\tif (xDefault) {\n\t\talternates.push({ hreflang: \"x-default\", href: xDefault.href });\n\t}\n\n\treturn alternates;\n}\n"],"mappings":";;;;;;;;AAkCA,MAAM,oBAAoB;AAC1B,MAAM,kBAAkB;;;;;;;AAQxB,eAAe,eACd,IACA,YACA,KACuB;AACvB,KAAI,IAAI,WAAW,EAAG,wBAAO,IAAI,KAAK;CACtC,MAAM,OAAO,MAAM,GACjB,WAAW,cAAc,CACzB,OAAO,aAAa,CACpB,MAAM,cAAc,KAAK,WAAW,CACpC,MAAM,cAAc,MAAM,IAAI,CAC9B,MAAM,gBAAgB,KAAK,EAAE,CAC7B,SAAS;AACX,QAAO,IAAI,IAAI,KAAK,KAAK,MAAM,EAAE,WAAW,CAAC;;;;;;;;;;;;;;;;;;;AAwC9C,eAAsB,sBACrB,YACA,SACA,UAA2B,EAAE,EACE;AAC/B,KAAI,CAAC,eAAe,CAAE,QAAO,EAAE;AAE/B,QAAO,cADK,YAAY,WAAW,GAAG,QAAQ,GAAG,QAAQ,WAAW,GAAG,GAAG,QAAQ,iBAAiB,YACzE,YAAY;EACrC,MAAM,EAAE,UAAU,MAAM,OAAO;AAE/B,SAAO,4BADI,MAAM,OAAO,EACe,YAAY,SAAS,QAAQ;GACnE;;;;;;;;AASH,eAAsB,4BACrB,IACA,YACA,SACA,UAA2B,EAAE,EACE;AAC/B,KAAI,CAAC,eAAe,CAAE,QAAO,EAAE;CAE/B,IAAI,UAAU,QAAQ;AACtB,KAAI,CAAC,QAEJ,YADiB,MAAM,sBAAsB,GAAG,EAC7B;AAIpB,KAAI,CAAC,WAAW,CAAC,gBAAgB,KAAK,QAAQ,CAAE,QAAO,EAAE;AACzD,WAAU,QAAQ,QAAQ,mBAAmB,GAAG;CAEhD,MAAM,OAAO,IAAI,kBAAkB,GAAG;CACtC,MAAM,OAAO,MAAM,KAAK,eAAe,YAAY,QAAQ;AAC3D,KAAI,CAAC,KAAM,QAAO,EAAE;CAIpB,MAAM,QAAQ,KAAK,oBAAoB,KAAK;CAC5C,IAAI,WAAW,MAAM,KAAK,iBAAiB,YAAY,MAAM;AAC7D,KAAI,SAAS,WAAW,EAAG,YAAW,CAAC,KAAK;CAE5C,IAAI,YAAY,SAAS,QAAQ,MAAM,EAAE,WAAW,YAAY;AAChE,KAAI,UAAU,WAAW,EAAG,QAAO,EAAE;CAOrC,MAAM,aAAa,MAAM,eACxB,IACA,YACA,UAAU,KAAK,MAAM,EAAE,GAAG,CAC1B;AACD,KAAI,WAAW,IAAI,KAAK,GAAG,CAAE,QAAO,EAAE;AACtC,aAAY,UAAU,QAAQ,MAAM,CAAC,WAAW,IAAI,EAAE,GAAG,CAAC;CAG1D,MAAM,cADO,MAAM,wBAAwB,IAAI,WAAW,GACjC,cAAc;CAEvC,MAAM,WAAoD,EAAE;AAC5D,MAAK,MAAM,WAAW,WAAW;EAChC,MAAM,SAAS,QAAQ,UAAU;EACjC,MAAM,OAAO,MAAM,iCAAiC;GACnD,SAAS;GACT;GACA,MAAM,QAAQ,QAAQ,QAAQ;GAC9B,IAAI,QAAQ;GACZ,MAAM,QAAQ;GACd;GACA,eAAe,QAAQ;GACvB,CAAC;AACF,MAAI,SAAS,KAAM;AACnB,WAAS,KAAK;GAAE;GAAQ,MAAM,GAAG,UAAU;GAAQ,CAAC;;AAErD,KAAI,SAAS,WAAW,EAAG,QAAO,EAAE;AAEpC,UAAS,MAAM,GAAG,MAAM,EAAE,OAAO,cAAc,EAAE,OAAO,CAAC;CACzD,MAAM,aAAkC,SAAS,KAAK,OAAO;EAC5D,UAAU,EAAE;EACZ,MAAM,EAAE;EACR,EAAE;CAIH,MAAM,gBAAgB,eAAe,EAAE;CACvC,MAAM,WAAW,SAAS,MAAM,MAAM,EAAE,WAAW,cAAc,IAAI,SAAS;AAC9E,KAAI,SACH,YAAW,KAAK;EAAE,UAAU;EAAa,MAAM,SAAS;EAAM,CAAC;AAGhE,QAAO"}

package/dist/hreflang-CY_F5OjF.d.mts

@@ -0,0 +1,50 @@
+import { t as Database } from "./types-DCFavOii.mjs";
+import { Kysely } from "kysely";
+
+//#region src/seo/hreflang.d.ts
+/** A single alternate link, ready to render as `<link rel="alternate">`. */
+interface HreflangAlternate {
+  /** Locale code, or `"x-default"` for the default variant */
+  hreflang: string;
+  /** Absolute URL of the variant */
+  href: string;
+}
+interface HreflangOptions {
+  /**
+   * Absolute site origin (e.g. `https://example.com`) used to build
+   * the alternate URLs. Falls back to the site settings URL; when
+   * neither is available the result is empty, since hreflang
+   * requires fully-qualified URLs.
+   */
+  siteUrl?: string;
+  /** Astro's route trailing-slash policy. */
+  trailingSlash?: "always" | "never" | "ignore";
+}
+/**
+ * Resolve hreflang alternates for a content entry.
+ *
+ * @example
+ * ```astro
+ * ---
+ * import { getHreflangAlternates } from "emdash";
+ *
+ * const alternates = await getHreflangAlternates("posts", entry.data.id, {
+ *   siteUrl: Astro.url.origin,
+ * });
+ * ---
+ * <head>
+ *   {alternates.map((a) => <link rel="alternate" hreflang={a.hreflang} href={a.href} />)}
+ * </head>
+ * ```
+ */
+declare function getHreflangAlternates(collection: string, entryId: string, options?: HreflangOptions): Promise<HreflangAlternate[]>;
+/**
+ * Resolve hreflang alternates with an explicit db handle.
+ *
+ * @internal Use `getHreflangAlternates()` in templates. This variant is
+ * for routes/components that already have a database handle.
+ */
+declare function getHreflangAlternatesWithDb(db: Kysely<Database>, collection: string, entryId: string, options?: HreflangOptions): Promise<HreflangAlternate[]>;
+//#endregion
+export { getHreflangAlternatesWithDb as i, HreflangOptions as n, getHreflangAlternates as r, HreflangAlternate as t };
+//# sourceMappingURL=hreflang-CY_F5OjF.d.mts.map

package/dist/hreflang-CY_F5OjF.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"hreflang-CY_F5OjF.d.mts","names":[],"sources":["../src/seo/hreflang.ts"],"mappings":";;;;;UA4DiB,iBAAA;EAwCN;EAtCV,QAAA;EAsC2B;EApC3B,IAAA;AAAA;AAAA,UAGgB,eAAA;EAkDL;;;;;;EA3CX,OAAA;EA2CI;EAzCJ,aAAA;AAAA;;;;;;;;;;;;;;;;;;iBAoBqB,qBAAA,CACrB,UAAA,UACA,OAAA,UACA,OAAA,GAAS,eAAA,GACP,OAAA,CAAQ,iBAAA;;;;;;;iBAgBW,2BAAA,CACrB,EAAA,EAAI,MAAA,CAAO,QAAA,GACX,UAAA,UACA,OAAA,UACA,OAAA,GAAS,eAAA,GACP,OAAA,CAAQ,iBAAA"}

package/dist/http-route-dispatch-CyeW6iPv.mjs

@@ -0,0 +1,342 @@
+import { n as generateFieldSchema } from "./zod-generator-D0JKy94C.mjs";
+import { n as apiSuccess, t as apiError } from "./error-CVWeIOku.mjs";
+import { i as pluginRouteResponseToWire, n as parseDeclaredPluginRouteInput, r as pluginRouteResponseFromWire, t as PluginRouteRequestError } from "./route-wire-Ca_HWCZ5.mjs";
+import { a as requireOwnerPerm, o as requirePerm } from "./authorize-DPFBGbE6.mjs";
+import { n as requireScope } from "./scopes-BU03K7Uo.mjs";
+import { Permissions } from "@emdash-cms/auth";
+import { getLocaleDir, resolveLocale } from "@emdash-cms/admin/locales";
+import { isEditorDraftPatchEffect, validateContentEditorPanelInteraction, validateEditorDraftPatchEffect } from "@emdash-cms/blocks/server";
+
+//#region src/plugins/editor-draft.ts
+const EDITOR_DRAFT_LIMITS = {
+	maxFields: 32,
+	maxSnapshotBytes: 192 * 1024,
+	maxFieldBytes: 64 * 1024
+};
+const ENCODER = new TextEncoder();
+const INVOCATION_PATTERN = /^[A-Za-z0-9_-]{16,128}$/;
+function isRecord$1(value) {
+	return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+function isBrowserDraftRequest(value) {
+	return isRecord$1(value) && typeof value.collection === "string" && typeof value.entryId === "string" && (value.locale === null || typeof value.locale === "string") && typeof value.baseRevision === "string" && typeof value.generation === "number" && typeof value.invocationId === "string" && isRecord$1(value.fields);
+}
+function jsonBytes(value) {
+	try {
+		return ENCODER.encode(JSON.stringify(value)).byteLength;
+	} catch {
+		return null;
+	}
+}
+function selectedFields(collection, selector) {
+	const selected = new Set(selector?.fields ?? []);
+	if (selector?.translatable) {
+		for (const field of collection.fields) if (field.translatable) selected.add(field.slug);
+	}
+	return selected;
+}
+function sanitizeField(field) {
+	return {
+		slug: field.slug,
+		label: field.label,
+		type: field.type,
+		required: field.required,
+		translatable: field.translatable,
+		...field.validation ? { validation: { ...field.validation } } : {}
+	};
+}
+function fail(code, message) {
+	return {
+		code,
+		message
+	};
+}
+function validateEditorDraftRequest(input) {
+	if (!isBrowserDraftRequest(input.request)) return fail("EDITOR_DRAFT_INVALID", "Invalid editor draft snapshot");
+	const request = input.request;
+	if (request.collection !== input.collection.slug || request.entryId !== input.entry.id || request.locale !== input.entry.locale) return fail("EDITOR_DRAFT_STALE", "Editor draft identity is stale");
+	if (request.baseRevision !== input.entry.revision) return fail("EDITOR_DRAFT_STALE", "Editor draft base revision is stale");
+	if (!Number.isSafeInteger(request.generation) || request.generation < 0 || typeof request.invocationId !== "string" || !INVOCATION_PATTERN.test(request.invocationId)) return fail("EDITOR_DRAFT_INVALID", "Invalid editor draft invocation identity");
+	const size = jsonBytes(request);
+	if (size === null) return fail("EDITOR_DRAFT_INVALID", "Editor draft snapshot must be JSON serializable");
+	if (size > EDITOR_DRAFT_LIMITS.maxSnapshotBytes) return fail("EDITOR_DRAFT_TOO_LARGE", "Editor draft snapshot exceeds the size limit");
+	const readFields = selectedFields(input.collection, input.readSelector);
+	const patchFields = selectedFields(input.collection, input.patchSelector);
+	if (readFields.size > EDITOR_DRAFT_LIMITS.maxFields || patchFields.size > EDITOR_DRAFT_LIMITS.maxFields) return fail("EDITOR_DRAFT_TOO_LARGE", "Editor draft selector exceeds the field limit");
+	const supplied = Object.keys(request.fields);
+	if (supplied.length > EDITOR_DRAFT_LIMITS.maxFields) return fail("EDITOR_DRAFT_TOO_LARGE", "Editor draft snapshot exceeds the field limit");
+	if (supplied.length > 0 && !input.canRead) return fail("EDITOR_DRAFT_CAPABILITY_REQUIRED", "Plugin cannot read unsaved editor content");
+	const bySlug = new Map(input.collection.fields.map((field) => [field.slug, field]));
+	const patchFieldDefinitions = Array.from(patchFields, (slug) => bySlug.get(slug)).filter((field) => Boolean(field && !field.unsupportedType)).map(sanitizeField);
+	const fields = {};
+	const fieldDefinitions = [];
+	for (const slug of supplied) {
+		if (!readFields.has(slug)) return fail("EDITOR_DRAFT_FIELD_FORBIDDEN", `Editor draft field '${slug}' is not allowed`);
+		const field = bySlug.get(slug);
+		if (!field || field.unsupportedType) return fail("EDITOR_DRAFT_UNSUPPORTED_FIELD_TYPE", `Editor draft field '${slug}' has an unsupported type`);
+		const fieldSize = jsonBytes(request.fields[slug]);
+		if (fieldSize === null) return fail("EDITOR_DRAFT_INVALID", `Editor draft field '${slug}' is invalid`);
+		if (fieldSize > EDITOR_DRAFT_LIMITS.maxFieldBytes) return fail("EDITOR_DRAFT_TOO_LARGE", `Editor draft field '${slug}' exceeds the size limit`);
+		if (!generateFieldSchema(field).safeParse(request.fields[slug]).success) return fail("EDITOR_DRAFT_INVALID", `Editor draft field '${slug}' is invalid`);
+		fields[slug] = request.fields[slug];
+		fieldDefinitions.push(sanitizeField(field));
+	}
+	if (input.readSelector && !input.canRead) return fail("EDITOR_DRAFT_CAPABILITY_REQUIRED", "Plugin cannot read unsaved editor content");
+	if (input.patchSelector && !input.canPatch) return fail("EDITOR_DRAFT_CAPABILITY_REQUIRED", "Plugin cannot propose unsaved editor changes");
+	return {
+		snapshot: {
+			collection: input.collection.slug,
+			entryId: input.entry.id,
+			locale: input.entry.locale,
+			baseRevision: input.entry.revision,
+			invocationId: request.invocationId,
+			fields,
+			fieldDefinitions
+		},
+		receipt: {
+			entryId: input.entry.id,
+			locale: input.entry.locale,
+			baseRevision: input.entry.revision,
+			generation: request.generation,
+			invocationId: request.invocationId,
+			fieldDefinitions: patchFieldDefinitions
+		},
+		readFields,
+		patchFields
+	};
+}
+function validateEditorDraftPatch(input) {
+	if (!validateEditorDraftPatchEffect(input.patch).valid || !isEditorDraftPatchEffect(input.patch)) return fail("EDITOR_DRAFT_INVALID", "Plugin returned an invalid editor draft patch");
+	const patch = input.patch;
+	const bySlug = new Map(input.collection.fields.map((field) => [field.slug, field]));
+	for (const operation of patch.operations) {
+		if (!input.allowedFields.has(operation.field)) return fail("EDITOR_DRAFT_FIELD_FORBIDDEN", `Editor draft field '${operation.field}' is not allowed`);
+		const field = bySlug.get(operation.field);
+		if (!field || field.unsupportedType) return fail("EDITOR_DRAFT_UNSUPPORTED_FIELD_TYPE", `Editor draft field '${operation.field}' has an unsupported type`);
+		const value = operation.op === "clear" ? null : operation.value;
+		if (!generateFieldSchema(field).safeParse(value).success) return fail("EDITOR_DRAFT_INVALID", `Editor draft field '${operation.field}' is invalid`);
+		const fieldSize = jsonBytes(value);
+		if (fieldSize === null || fieldSize > EDITOR_DRAFT_LIMITS.maxFieldBytes) return fail("EDITOR_DRAFT_TOO_LARGE", `Editor draft field '${operation.field}' exceeds the size limit`);
+	}
+	return patch;
+}
+
+//#endregion
+//#region src/plugins/http-route-dispatch.ts
+function editorDraftErrorResponse(error) {
+	const status = error.code === "EDITOR_DRAFT_STALE" ? 409 : error.code === "EDITOR_DRAFT_FIELD_FORBIDDEN" || error.code === "EDITOR_DRAFT_CAPABILITY_REQUIRED" ? 403 : error.code === "EDITOR_DRAFT_TOO_LARGE" ? 413 : error.code === "EDITOR_DRAFT_UNSUPPORTED_FIELD_TYPE" ? 422 : 400;
+	return apiError(error.code, error.message, status);
+}
+function toRoleLevel$1(value) {
+	if (value === 10 || value === 20 || value === 30 || value === 40 || value === 50) return value;
+	return null;
+}
+function isRecord(value) {
+	return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+function isPermission(value) {
+	return Object.hasOwn(Permissions, value);
+}
+function authorizePrivatePluginRouteRequest(routeMeta, request, user, tokenScopes) {
+	const permission = routeMeta.permission ?? "plugins:manage";
+	if (!isPermission(permission)) return apiError("INVALID_PLUGIN_ROUTE", "Plugin route declares an invalid permission", 500);
+	let permissionUser;
+	if (user) {
+		const role = toRoleLevel$1(user.role);
+		if (role === null) return apiError("INVALID_USER", "Authenticated user has an invalid role", 500);
+		permissionUser = {
+			id: user.id,
+			role
+		};
+	} else permissionUser = user;
+	const denied = requirePerm(permissionUser, permission);
+	if (denied) return denied;
+	const scopeError = requireScope({ tokenScopes }, "admin");
+	if (scopeError) return scopeError;
+	if (!tokenScopes && request.headers.get("X-EmDash-Request") !== "1") return apiError("CSRF_REJECTED", "Missing required header", 403);
+	return null;
+}
+/** Dispatch a request through the production plugin-route policy boundary. */
+async function dispatchPluginApiRequest({ runtime, pluginId, path, request, user, tokenScopes, invalidateContentCache, editorDispatch }) {
+	const method = request.method.toUpperCase();
+	const routeMeta = runtime.getPluginRouteMeta(pluginId, path);
+	if (!routeMeta) return apiError("NOT_FOUND", "Plugin route not found", 404);
+	if (!routeMeta.public) {
+		const denied = authorizePrivatePluginRouteRequest(routeMeta, request, user, tokenScopes);
+		if (denied) return denied;
+	}
+	if (routeMeta.methods && !routeMeta.methods.some((allowed) => allowed === method)) {
+		const response = apiError("METHOD_NOT_ALLOWED", "Method not allowed", 405);
+		response.headers.set("Allow", routeMeta.methods.join(", "));
+		return response;
+	}
+	const caller = routeMeta.public ? void 0 : user ?? void 0;
+	const result = await runtime.handlePluginApiRoute(pluginId, method, path, request, caller, invalidateContentCache, editorDispatch);
+	if (!result.success) {
+		const code = result.error?.code ?? "PLUGIN_ERROR";
+		const message = code === "INTERNAL_ERROR" ? "Plugin route error" : result.error?.message ?? "Plugin route error";
+		const status = result.status ?? (code === "NOT_FOUND" ? 404 : 400);
+		const details = code !== "INTERNAL_ERROR" && result.error && "details" in result.error ? result.error.details : void 0;
+		return apiError(code, message, status, isRecord(details) ? details : void 0);
+	}
+	let response;
+	if (routeMeta.response === "raw") try {
+		response = pluginRouteResponseFromWire(await pluginRouteResponseToWire(result.data, routeMeta.public ? { publicRequestUrl: request.url } : { allowExternalLocation: true }), method);
+	} catch (error) {
+		console.error(`[plugin:${pluginId}] Invalid raw route response:`, error);
+		return apiError("INVALID_PLUGIN_RESPONSE", "Plugin returned an invalid response", 500);
+	}
+	else response = apiSuccess(result.data);
+	if (response.ok && routeMeta.public && routeMeta.cacheControl && (method === "GET" || method === "HEAD")) response.headers.set("Cache-Control", routeMeta.cacheControl);
+	else response.headers.set("Cache-Control", "private, no-store");
+	return response;
+}
+const EDITOR_EXTENSION_REQUEST_MAX_BYTES = 256 * 1024;
+/** Dispatch a saved-entry extension through ownership, route, and isolate policy. */
+async function dispatchPluginEditorExtensionApiRequest({ runtime, pluginId, kind, extensionId, collection, entryId, request, user, tokenScopes, invalidateContentCache }) {
+	const definition = runtime.getPluginEditorExtension(pluginId, kind, extensionId, collection);
+	if (!definition) return apiError("NOT_FOUND", "Plugin editor extension not found", 404);
+	const routeMeta = runtime.getPluginRouteMeta(pluginId, definition.extension.route);
+	if (!routeMeta || routeMeta.public) return apiError("INVALID_PLUGIN_EDITOR_EXTENSION", "Plugin editor extension must reference a private route", 500);
+	const denied = authorizePrivatePluginRouteRequest(routeMeta, request, user, tokenScopes);
+	if (denied) return denied;
+	const requestedLocale = new URL(request.url).searchParams.get("locale") || void 0;
+	const contentResult = await runtime.handleContentGet(collection, entryId, requestedLocale);
+	if (!contentResult.success) return contentResult.error?.code === "NOT_FOUND" ? apiError("NOT_FOUND", "Content item not found", 404) : apiError("CONTENT_GET_ERROR", "Failed to load content item", 500);
+	const contentData = contentResult.data;
+	const item = typeof contentData === "object" && contentData !== null && "item" in contentData ? contentData.item : null;
+	if (typeof item !== "object" || item === null) return apiError("CONTENT_GET_ERROR", "Failed to load content item", 500);
+	const authorId = "authorId" in item && typeof item.authorId === "string" ? item.authorId : "";
+	let ownershipUser = user == null ? user : void 0;
+	if (user) {
+		const ownerRole = toRoleLevel$1(user.role);
+		if (ownerRole === null) return apiError("INVALID_USER", "Authenticated user has an invalid role", 500);
+		ownershipUser = {
+			id: user.id,
+			role: ownerRole
+		};
+	}
+	const ownershipDenied = requireOwnerPerm(ownershipUser, authorId, "content:edit_own", "content:edit_any");
+	if (ownershipDenied) return ownershipDenied;
+	const canonicalId = "id" in item && typeof item.id === "string" ? item.id : null;
+	const canonicalLocale = "locale" in item && typeof item.locale === "string" ? item.locale : null;
+	const version = "version" in item && typeof item.version === "number" ? item.version : null;
+	const baseRevision = typeof contentData === "object" && contentData !== null && "_rev" in contentData && typeof contentData._rev === "string" ? contentData._rev : null;
+	if (!canonicalId || version === null) return apiError("CONTENT_GET_ERROR", "Content item has invalid identity", 500);
+	let input;
+	let editorBody;
+	try {
+		editorBody = await parseDeclaredPluginRouteInput(request, {
+			body: "json",
+			maxBytes: EDITOR_EXTENSION_REQUEST_MAX_BYTES
+		});
+	} catch (error) {
+		if (error instanceof PluginRouteRequestError) return apiError(error.status === 413 ? "EDITOR_DRAFT_TOO_LARGE" : "INVALID_REQUEST", error.status === 413 ? "Editor interaction exceeds the size limit" : "Invalid editor interaction", error.status);
+		return apiError("INVALID_REQUEST", "Editor interaction could not be read", 400);
+	}
+	if (kind === "panel") {
+		if (!isRecord(editorBody)) return apiError("INVALID_REQUEST", "Editor panel interaction must be an object", 400);
+		input = editorBody;
+		if (!validateContentEditorPanelInteraction(input).valid) return apiError("INVALID_PLUGIN_UI_CONTEXT", "Invalid editor panel interaction", 400);
+	} else {
+		if (!isRecord(editorBody)) return apiError("INVALID_REQUEST", "Invalid editor action interaction", 400);
+		input = {
+			type: "editor_action",
+			...Object.hasOwn(editorBody, "draft") ? { draft: editorBody.draft } : {}
+		};
+	}
+	let validatedDraft = null;
+	if (input.draft !== void 0) {
+		if (!baseRevision) return apiError("EDITOR_DRAFT_INVALID", "Content item has no draft revision identity", 409);
+		const collectionSchema = await runtime.getPluginEditorDraftSchema(collection);
+		if (!collectionSchema) return apiError("NOT_FOUND", "Collection not found", 404);
+		const draft = validateEditorDraftRequest({
+			request: input.draft,
+			collection: collectionSchema,
+			entry: {
+				id: canonicalId,
+				locale: canonicalLocale,
+				revision: baseRevision
+			},
+			readSelector: definition.extension.draft?.read,
+			patchSelector: definition.extension.draft?.patch,
+			canRead: definition.capabilities.includes("admin.editor-draft:read"),
+			canPatch: definition.capabilities.includes("admin.editor-draft:patch")
+		});
+		if ("code" in draft) {
+			console.warn(`[plugin:${pluginId}] Editor draft ${kind}/${extensionId} rejected: ${draft.code}`);
+			return editorDraftErrorResponse(draft);
+		}
+		validatedDraft = draft;
+		input = {
+			...input,
+			draft: draft.snapshot
+		};
+	}
+	const headers = new Headers(request.headers);
+	headers.delete("content-length");
+	headers.delete("content-encoding");
+	headers.set("Content-Type", "application/json");
+	const pluginRequest = new Request(request.url, {
+		method: "POST",
+		headers,
+		body: JSON.stringify(input)
+	});
+	const locale = resolveLocale(request);
+	const response = await dispatchPluginApiRequest({
+		runtime,
+		pluginId,
+		path: definition.extension.route,
+		request: pluginRequest,
+		user,
+		tokenScopes,
+		invalidateContentCache,
+		editorDispatch: {
+			kind,
+			policy: definition.policy,
+			ui: {
+				surface: kind === "panel" ? "content-editor-panel" : "content-editor-action",
+				locale,
+				direction: getLocaleDir(locale),
+				contentLocale: canonicalLocale ?? void 0,
+				extensionId,
+				entry: {
+					collection,
+					id: canonicalId,
+					locale: canonicalLocale,
+					version
+				}
+			}
+		}
+	});
+	if (!response.ok) return response;
+	const envelope = await response.clone().json();
+	if (!isRecord(envelope) || !isRecord(envelope.data)) return apiError("INVALID_PLUGIN_RESPONSE", "Plugin returned an invalid response", 502);
+	const data = envelope.data;
+	if (data.patch === void 0 && !validatedDraft) return response;
+	if (data.patch !== void 0 && !validatedDraft) return apiError("EDITOR_DRAFT_INVALID", "Plugin returned an editor draft patch without a draft invocation", 400);
+	if (data.patch !== void 0) {
+		const collectionSchema = await runtime.getPluginEditorDraftSchema(collection);
+		if (!collectionSchema) return apiError("NOT_FOUND", "Collection not found", 404);
+		const patch = validateEditorDraftPatch({
+			patch: data.patch,
+			collection: collectionSchema,
+			allowedFields: validatedDraft?.patchFields ?? /* @__PURE__ */ new Set()
+		});
+		if ("code" in patch) {
+			console.warn(`[plugin:${pluginId}] Editor draft ${kind}/${extensionId} rejected: ${patch.code}`);
+			return editorDraftErrorResponse(patch);
+		}
+		data.patch = patch;
+	}
+	const finalResponse = apiSuccess({
+		...data,
+		editorInvocation: validatedDraft?.receipt
+	});
+	finalResponse.headers.set("Cache-Control", "private, no-store");
+	return finalResponse;
+}
+
+//#endregion
+export { validateEditorDraftRequest as i, dispatchPluginEditorExtensionApiRequest as n, validateEditorDraftPatch as r, dispatchPluginApiRequest as t };
+//# sourceMappingURL=http-route-dispatch-CyeW6iPv.mjs.map

package/dist/http-route-dispatch-CyeW6iPv.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"http-route-dispatch-CyeW6iPv.mjs","names":["isRecord","toRoleLevel"],"sources":["../src/plugins/editor-draft.ts","../src/plugins/http-route-dispatch.ts"],"sourcesContent":["import type {\n\tEditorDraftFieldDefinition,\n\tEditorDraftInvocationReceipt,\n\tEditorDraftPatchEffect,\n\tEditorDraftSnapshot,\n} from \"@emdash-cms/blocks\";\nimport {\n\tisEditorDraftPatchEffect,\n\tvalidateEditorDraftPatchEffect,\n} from \"@emdash-cms/blocks/server\";\n\nimport type { CollectionWithFields, Field } from \"../schema/types.js\";\nimport { generateFieldSchema } from \"../schema/zod-generator.js\";\nimport type { PluginEditorDraftFieldSelector } from \"./types.js\";\n\nexport const EDITOR_DRAFT_LIMITS = {\n\tmaxFields: 32,\n\tmaxSnapshotBytes: 192 * 1024,\n\tmaxFieldBytes: 64 * 1024,\n} as const;\n\nexport type EditorDraftErrorCode =\n\t| \"EDITOR_DRAFT_STALE\"\n\t| \"EDITOR_DRAFT_FIELD_FORBIDDEN\"\n\t| \"EDITOR_DRAFT_INVALID\"\n\t| \"EDITOR_DRAFT_UNSUPPORTED_FIELD_TYPE\"\n\t| \"EDITOR_DRAFT_TOO_LARGE\"\n\t| \"EDITOR_DRAFT_CAPABILITY_REQUIRED\";\n\nexport interface EditorDraftValidationError {\n\tcode: EditorDraftErrorCode;\n\tmessage: string;\n}\n\ninterface BrowserDraftRequest {\n\tcollection: string;\n\tentryId: string;\n\tlocale: string | null;\n\tbaseRevision: string;\n\tgeneration: number;\n\tinvocationId: string;\n\tfields: Record<string, unknown>;\n}\n\nexport interface ValidatedEditorDraftRequest {\n\tsnapshot: EditorDraftSnapshot;\n\treceipt: EditorDraftInvocationReceipt;\n\treadFields: ReadonlySet<string>;\n\tpatchFields: ReadonlySet<string>;\n}\n\nconst ENCODER = new TextEncoder();\nconst INVOCATION_PATTERN = /^[A-Za-z0-9_-]{16,128}$/;\n\nfunction isRecord(value: unknown): value is Record<string, unknown> {\n\treturn typeof value === \"object\" && value !== null && !Array.isArray(value);\n}\n\nfunction isBrowserDraftRequest(value: unknown): value is BrowserDraftRequest {\n\treturn (\n\t\tisRecord(value) &&\n\t\ttypeof value.collection === \"string\" &&\n\t\ttypeof value.entryId === \"string\" &&\n\t\t(value.locale === null || typeof value.locale === \"string\") &&\n\t\ttypeof value.baseRevision === \"string\" &&\n\t\ttypeof value.generation === \"number\" &&\n\t\ttypeof value.invocationId === \"string\" &&\n\t\tisRecord(value.fields)\n\t);\n}\n\nfunction jsonBytes(value: unknown): number | null {\n\ttry {\n\t\treturn ENCODER.encode(JSON.stringify(value)).byteLength;\n\t} catch {\n\t\treturn null;\n\t}\n}\n\nfunction selectedFields(\n\tcollection: CollectionWithFields,\n\tselector: PluginEditorDraftFieldSelector | undefined,\n): Set<string> {\n\tconst selected = new Set(selector?.fields ?? []);\n\tif (selector?.translatable) {\n\t\tfor (const field of collection.fields) {\n\t\t\tif (field.translatable) selected.add(field.slug);\n\t\t}\n\t}\n\treturn selected;\n}\n\nfunction sanitizeField(field: Field): EditorDraftFieldDefinition {\n\treturn {\n\t\tslug: field.slug,\n\t\tlabel: field.label,\n\t\ttype: field.type,\n\t\trequired: field.required,\n\t\ttranslatable: field.translatable,\n\t\t...(field.validation ? { validation: { ...field.validation } } : {}),\n\t};\n}\n\nfunction fail(code: EditorDraftErrorCode, message: string): EditorDraftValidationError {\n\treturn { code, message };\n}\n\nexport function validateEditorDraftRequest(input: {\n\trequest: unknown;\n\tcollection: CollectionWithFields;\n\tentry: { id: string; locale: string | null; revision: string };\n\treadSelector?: PluginEditorDraftFieldSelector;\n\tpatchSelector?: PluginEditorDraftFieldSelector;\n\tcanRead: boolean;\n\tcanPatch: boolean;\n}): ValidatedEditorDraftRequest | EditorDraftValidationError {\n\tif (!isBrowserDraftRequest(input.request)) {\n\t\treturn fail(\"EDITOR_DRAFT_INVALID\", \"Invalid editor draft snapshot\");\n\t}\n\tconst request = input.request;\n\tif (\n\t\trequest.collection !== input.collection.slug ||\n\t\trequest.entryId !== input.entry.id ||\n\t\trequest.locale !== input.entry.locale\n\t) {\n\t\treturn fail(\"EDITOR_DRAFT_STALE\", \"Editor draft identity is stale\");\n\t}\n\tif (request.baseRevision !== input.entry.revision) {\n\t\treturn fail(\"EDITOR_DRAFT_STALE\", \"Editor draft base revision is stale\");\n\t}\n\tif (\n\t\t!Number.isSafeInteger(request.generation) ||\n\t\trequest.generation < 0 ||\n\t\ttypeof request.invocationId !== \"string\" ||\n\t\t!INVOCATION_PATTERN.test(request.invocationId)\n\t) {\n\t\treturn fail(\"EDITOR_DRAFT_INVALID\", \"Invalid editor draft invocation identity\");\n\t}\n\tconst size = jsonBytes(request);\n\tif (size === null)\n\t\treturn fail(\"EDITOR_DRAFT_INVALID\", \"Editor draft snapshot must be JSON serializable\");\n\tif (size > EDITOR_DRAFT_LIMITS.maxSnapshotBytes) {\n\t\treturn fail(\"EDITOR_DRAFT_TOO_LARGE\", \"Editor draft snapshot exceeds the size limit\");\n\t}\n\n\tconst readFields = selectedFields(input.collection, input.readSelector);\n\tconst patchFields = selectedFields(input.collection, input.patchSelector);\n\tif (\n\t\treadFields.size > EDITOR_DRAFT_LIMITS.maxFields ||\n\t\tpatchFields.size > EDITOR_DRAFT_LIMITS.maxFields\n\t) {\n\t\treturn fail(\"EDITOR_DRAFT_TOO_LARGE\", \"Editor draft selector exceeds the field limit\");\n\t}\n\tconst supplied = Object.keys(request.fields);\n\tif (supplied.length > EDITOR_DRAFT_LIMITS.maxFields) {\n\t\treturn fail(\"EDITOR_DRAFT_TOO_LARGE\", \"Editor draft snapshot exceeds the field limit\");\n\t}\n\tif (supplied.length > 0 && !input.canRead) {\n\t\treturn fail(\"EDITOR_DRAFT_CAPABILITY_REQUIRED\", \"Plugin cannot read unsaved editor content\");\n\t}\n\tconst bySlug = new Map(input.collection.fields.map((field) => [field.slug, field]));\n\tconst patchFieldDefinitions = Array.from(patchFields, (slug) => bySlug.get(slug))\n\t\t.filter((field): field is Field => Boolean(field && !field.unsupportedType))\n\t\t.map(sanitizeField);\n\tconst fields: Record<string, unknown> = {};\n\tconst fieldDefinitions: EditorDraftFieldDefinition[] = [];\n\tfor (const slug of supplied) {\n\t\tif (!readFields.has(slug)) {\n\t\t\treturn fail(\"EDITOR_DRAFT_FIELD_FORBIDDEN\", `Editor draft field '${slug}' is not allowed`);\n\t\t}\n\t\tconst field = bySlug.get(slug);\n\t\tif (!field || field.unsupportedType) {\n\t\t\treturn fail(\n\t\t\t\t\"EDITOR_DRAFT_UNSUPPORTED_FIELD_TYPE\",\n\t\t\t\t`Editor draft field '${slug}' has an unsupported type`,\n\t\t\t);\n\t\t}\n\t\tconst fieldSize = jsonBytes(request.fields[slug]);\n\t\tif (fieldSize === null)\n\t\t\treturn fail(\"EDITOR_DRAFT_INVALID\", `Editor draft field '${slug}' is invalid`);\n\t\tif (fieldSize > EDITOR_DRAFT_LIMITS.maxFieldBytes) {\n\t\t\treturn fail(\"EDITOR_DRAFT_TOO_LARGE\", `Editor draft field '${slug}' exceeds the size limit`);\n\t\t}\n\t\tif (!generateFieldSchema(field).safeParse(request.fields[slug]).success) {\n\t\t\treturn fail(\"EDITOR_DRAFT_INVALID\", `Editor draft field '${slug}' is invalid`);\n\t\t}\n\t\tfields[slug] = request.fields[slug];\n\t\tfieldDefinitions.push(sanitizeField(field));\n\t}\n\tif (input.readSelector && !input.canRead) {\n\t\treturn fail(\"EDITOR_DRAFT_CAPABILITY_REQUIRED\", \"Plugin cannot read unsaved editor content\");\n\t}\n\tif (input.patchSelector && !input.canPatch) {\n\t\treturn fail(\"EDITOR_DRAFT_CAPABILITY_REQUIRED\", \"Plugin cannot propose unsaved editor changes\");\n\t}\n\n\treturn {\n\t\tsnapshot: {\n\t\t\tcollection: input.collection.slug,\n\t\t\tentryId: input.entry.id,\n\t\t\tlocale: input.entry.locale,\n\t\t\tbaseRevision: input.entry.revision,\n\t\t\tinvocationId: request.invocationId,\n\t\t\tfields,\n\t\t\tfieldDefinitions,\n\t\t},\n\t\treceipt: {\n\t\t\tentryId: input.entry.id,\n\t\t\tlocale: input.entry.locale,\n\t\t\tbaseRevision: input.entry.revision,\n\t\t\tgeneration: request.generation,\n\t\t\tinvocationId: request.invocationId,\n\t\t\tfieldDefinitions: patchFieldDefinitions,\n\t\t},\n\t\treadFields,\n\t\tpatchFields,\n\t};\n}\n\nexport function validateEditorDraftPatch(input: {\n\tpatch: unknown;\n\tcollection: CollectionWithFields;\n\tallowedFields: ReadonlySet<string>;\n}): EditorDraftPatchEffect | EditorDraftValidationError {\n\tconst structural = validateEditorDraftPatchEffect(input.patch);\n\tif (!structural.valid || !isEditorDraftPatchEffect(input.patch))\n\t\treturn fail(\"EDITOR_DRAFT_INVALID\", \"Plugin returned an invalid editor draft patch\");\n\tconst patch = input.patch;\n\tconst bySlug = new Map(input.collection.fields.map((field) => [field.slug, field]));\n\tfor (const operation of patch.operations) {\n\t\tif (!input.allowedFields.has(operation.field)) {\n\t\t\treturn fail(\n\t\t\t\t\"EDITOR_DRAFT_FIELD_FORBIDDEN\",\n\t\t\t\t`Editor draft field '${operation.field}' is not allowed`,\n\t\t\t);\n\t\t}\n\t\tconst field = bySlug.get(operation.field);\n\t\tif (!field || field.unsupportedType) {\n\t\t\treturn fail(\n\t\t\t\t\"EDITOR_DRAFT_UNSUPPORTED_FIELD_TYPE\",\n\t\t\t\t`Editor draft field '${operation.field}' has an unsupported type`,\n\t\t\t);\n\t\t}\n\t\tconst value = operation.op === \"clear\" ? null : operation.value;\n\t\tif (!generateFieldSchema(field).safeParse(value).success) {\n\t\t\treturn fail(\"EDITOR_DRAFT_INVALID\", `Editor draft field '${operation.field}' is invalid`);\n\t\t}\n\t\tconst fieldSize = jsonBytes(value);\n\t\tif (fieldSize === null || fieldSize > EDITOR_DRAFT_LIMITS.maxFieldBytes) {\n\t\t\treturn fail(\n\t\t\t\t\"EDITOR_DRAFT_TOO_LARGE\",\n\t\t\t\t`Editor draft field '${operation.field}' exceeds the size limit`,\n\t\t\t);\n\t\t}\n\t}\n\treturn patch;\n}\n","import { getLocaleDir, resolveLocale } from \"@emdash-cms/admin/locales\";\nimport { Permissions, type Permission, type RoleLevel } from \"@emdash-cms/auth\";\nimport { validateContentEditorPanelInteraction } from \"@emdash-cms/blocks/server\";\n\nimport { requirePerm, requireOwnerPerm } from \"../api/authorize.js\";\nimport { apiError, apiSuccess } from \"../api/error.js\";\nimport { requireScope } from \"../auth/scopes.js\";\nimport type { EmDashRuntime, PluginEditorExtensionDispatch } from \"../emdash-runtime.js\";\nimport {\n\tvalidateEditorDraftPatch,\n\tvalidateEditorDraftRequest,\n\ttype ValidatedEditorDraftRequest,\n} from \"./editor-draft.js\";\nimport { pluginRouteResponseFromWire, pluginRouteResponseToWire } from \"./route-wire.js\";\nimport { parseDeclaredPluginRouteInput, PluginRouteRequestError } from \"./route-wire.js\";\nimport type { PluginContentCacheInvalidator, RouteMeta } from \"./routes.js\";\nimport type { UserInfo } from \"./types.js\";\n\nfunction editorDraftErrorResponse(error: { code: string; message: string }): Response {\n\tconst status =\n\t\terror.code === \"EDITOR_DRAFT_STALE\"\n\t\t\t? 409\n\t\t\t: error.code === \"EDITOR_DRAFT_FIELD_FORBIDDEN\" ||\n\t\t\t\t  error.code === \"EDITOR_DRAFT_CAPABILITY_REQUIRED\"\n\t\t\t\t? 403\n\t\t\t\t: error.code === \"EDITOR_DRAFT_TOO_LARGE\"\n\t\t\t\t\t? 413\n\t\t\t\t\t: error.code === \"EDITOR_DRAFT_UNSUPPORTED_FIELD_TYPE\"\n\t\t\t\t\t\t? 422\n\t\t\t\t\t\t: 400;\n\treturn apiError(error.code, error.message, status);\n}\n\nfunction toRoleLevel(value: number): RoleLevel | null {\n\tif (value === 10 || value === 20 || value === 30 || value === 40 || value === 50) {\n\t\treturn value;\n\t}\n\treturn null;\n}\n\nfunction isRecord(value: unknown): value is Record<string, unknown> {\n\treturn typeof value === \"object\" && value !== null && !Array.isArray(value);\n}\n\nfunction isPermission(value: string): value is Permission {\n\treturn Object.hasOwn(Permissions, value);\n}\n\nfunction authorizePrivatePluginRouteRequest(\n\trouteMeta: RouteMeta,\n\trequest: Request,\n\tuser?: UserInfo | null,\n\ttokenScopes?: string[],\n): Response | null {\n\tconst permission = routeMeta.permission ?? \"plugins:manage\";\n\tif (!isPermission(permission)) {\n\t\treturn apiError(\"INVALID_PLUGIN_ROUTE\", \"Plugin route declares an invalid permission\", 500);\n\t}\n\n\tlet permissionUser: { id: string; role: RoleLevel } | null | undefined;\n\tif (user) {\n\t\tconst role = toRoleLevel(user.role);\n\t\tif (role === null) {\n\t\t\treturn apiError(\"INVALID_USER\", \"Authenticated user has an invalid role\", 500);\n\t\t}\n\t\tpermissionUser = { id: user.id, role };\n\t} else {\n\t\tpermissionUser = user;\n\t}\n\n\tconst denied = requirePerm(permissionUser, permission);\n\tif (denied) return denied;\n\tconst scopeError = requireScope({ tokenScopes }, \"admin\");\n\tif (scopeError) return scopeError;\n\tif (!tokenScopes && request.headers.get(\"X-EmDash-Request\") !== \"1\") {\n\t\treturn apiError(\"CSRF_REJECTED\", \"Missing required header\", 403);\n\t}\n\treturn null;\n}\n\nexport interface PluginApiRequestContext {\n\truntime: EmDashRuntime;\n\tpluginId: string;\n\tpath: string;\n\trequest: Request;\n\tuser?: UserInfo | null;\n\ttokenScopes?: string[];\n\tinvalidateContentCache?: PluginContentCacheInvalidator;\n\teditorDispatch?: PluginEditorExtensionDispatch;\n}\n\n/** Dispatch a request through the production plugin-route policy boundary. */\nexport async function dispatchPluginApiRequest({\n\truntime,\n\tpluginId,\n\tpath,\n\trequest,\n\tuser,\n\ttokenScopes,\n\tinvalidateContentCache,\n\teditorDispatch,\n}: PluginApiRequestContext): Promise<Response> {\n\tconst method = request.method.toUpperCase();\n\tconst routeMeta = runtime.getPluginRouteMeta(pluginId, path);\n\tif (!routeMeta) return apiError(\"NOT_FOUND\", \"Plugin route not found\", 404);\n\n\tif (!routeMeta.public) {\n\t\tconst denied = authorizePrivatePluginRouteRequest(routeMeta, request, user, tokenScopes);\n\t\tif (denied) return denied;\n\t}\n\tif (routeMeta.methods && !routeMeta.methods.some((allowed) => allowed === method)) {\n\t\tconst response = apiError(\"METHOD_NOT_ALLOWED\", \"Method not allowed\", 405);\n\t\tresponse.headers.set(\"Allow\", routeMeta.methods.join(\", \"));\n\t\treturn response;\n\t}\n\n\tconst caller = routeMeta.public ? undefined : (user ?? undefined);\n\tconst result = await runtime.handlePluginApiRoute(\n\t\tpluginId,\n\t\tmethod,\n\t\tpath,\n\t\trequest,\n\t\tcaller,\n\t\tinvalidateContentCache,\n\t\teditorDispatch,\n\t);\n\tif (!result.success) {\n\t\tconst code = result.error?.code ?? \"PLUGIN_ERROR\";\n\t\tconst message =\n\t\t\tcode === \"INTERNAL_ERROR\"\n\t\t\t\t? \"Plugin route error\"\n\t\t\t\t: (result.error?.message ?? \"Plugin route error\");\n\t\tconst status = (result as { status?: number }).status ?? (code === \"NOT_FOUND\" ? 404 : 400);\n\t\tconst details =\n\t\t\tcode !== \"INTERNAL_ERROR\" && result.error && \"details\" in result.error\n\t\t\t\t? result.error.details\n\t\t\t\t: undefined;\n\t\treturn apiError(code, message, status, isRecord(details) ? details : undefined);\n\t}\n\n\tlet response: Response;\n\tif (routeMeta.response === \"raw\") {\n\t\ttry {\n\t\t\tresponse = pluginRouteResponseFromWire(\n\t\t\t\tawait pluginRouteResponseToWire(\n\t\t\t\t\tresult.data,\n\t\t\t\t\trouteMeta.public ? { publicRequestUrl: request.url } : { allowExternalLocation: true },\n\t\t\t\t),\n\t\t\t\tmethod,\n\t\t\t);\n\t\t} catch (error) {\n\t\t\tconsole.error(`[plugin:${pluginId}] Invalid raw route response:`, error);\n\t\t\treturn apiError(\"INVALID_PLUGIN_RESPONSE\", \"Plugin returned an invalid response\", 500);\n\t\t}\n\t} else {\n\t\tresponse = apiSuccess(result.data);\n\t}\n\tif (\n\t\tresponse.ok &&\n\t\trouteMeta.public &&\n\t\trouteMeta.cacheControl &&\n\t\t(method === \"GET\" || method === \"HEAD\")\n\t) {\n\t\tresponse.headers.set(\"Cache-Control\", routeMeta.cacheControl);\n\t} else {\n\t\tresponse.headers.set(\"Cache-Control\", \"private, no-store\");\n\t}\n\treturn response;\n}\n\nexport interface PluginEditorExtensionApiRequestContext {\n\truntime: EmDashRuntime;\n\tpluginId: string;\n\tkind: \"panel\" | \"action\";\n\textensionId: string;\n\tcollection: string;\n\tentryId: string;\n\trequest: Request;\n\tuser?: UserInfo | null;\n\ttokenScopes?: string[];\n\tinvalidateContentCache?: PluginContentCacheInvalidator;\n}\n\nconst EDITOR_EXTENSION_REQUEST_MAX_BYTES = 256 * 1024;\n\n/** Dispatch a saved-entry extension through ownership, route, and isolate policy. */\nexport async function dispatchPluginEditorExtensionApiRequest({\n\truntime,\n\tpluginId,\n\tkind,\n\textensionId,\n\tcollection,\n\tentryId,\n\trequest,\n\tuser,\n\ttokenScopes,\n\tinvalidateContentCache,\n}: PluginEditorExtensionApiRequestContext): Promise<Response> {\n\tconst definition = runtime.getPluginEditorExtension(pluginId, kind, extensionId, collection);\n\tif (!definition) return apiError(\"NOT_FOUND\", \"Plugin editor extension not found\", 404);\n\n\tconst routeMeta = runtime.getPluginRouteMeta(pluginId, definition.extension.route);\n\tif (!routeMeta || routeMeta.public) {\n\t\treturn apiError(\n\t\t\t\"INVALID_PLUGIN_EDITOR_EXTENSION\",\n\t\t\t\"Plugin editor extension must reference a private route\",\n\t\t\t500,\n\t\t);\n\t}\n\tconst denied = authorizePrivatePluginRouteRequest(routeMeta, request, user, tokenScopes);\n\tif (denied) return denied;\n\n\tconst requestedLocale = new URL(request.url).searchParams.get(\"locale\") || undefined;\n\tconst contentResult = await runtime.handleContentGet(collection, entryId, requestedLocale);\n\tif (!contentResult.success) {\n\t\treturn contentResult.error?.code === \"NOT_FOUND\"\n\t\t\t? apiError(\"NOT_FOUND\", \"Content item not found\", 404)\n\t\t\t: apiError(\"CONTENT_GET_ERROR\", \"Failed to load content item\", 500);\n\t}\n\tconst contentData = contentResult.data;\n\tconst item =\n\t\ttypeof contentData === \"object\" && contentData !== null && \"item\" in contentData\n\t\t\t? contentData.item\n\t\t\t: null;\n\tif (typeof item !== \"object\" || item === null) {\n\t\treturn apiError(\"CONTENT_GET_ERROR\", \"Failed to load content item\", 500);\n\t}\n\tconst authorId = \"authorId\" in item && typeof item.authorId === \"string\" ? item.authorId : \"\";\n\tlet ownershipUser: { id: string; role: RoleLevel } | null | undefined =\n\t\tuser == null ? user : undefined;\n\tif (user) {\n\t\tconst ownerRole = toRoleLevel(user.role);\n\t\tif (ownerRole === null) {\n\t\t\treturn apiError(\"INVALID_USER\", \"Authenticated user has an invalid role\", 500);\n\t\t}\n\t\townershipUser = { id: user.id, role: ownerRole };\n\t}\n\tconst ownershipDenied = requireOwnerPerm(\n\t\townershipUser,\n\t\tauthorId,\n\t\t\"content:edit_own\",\n\t\t\"content:edit_any\",\n\t);\n\tif (ownershipDenied) return ownershipDenied;\n\n\tconst canonicalId = \"id\" in item && typeof item.id === \"string\" ? item.id : null;\n\tconst canonicalLocale = \"locale\" in item && typeof item.locale === \"string\" ? item.locale : null;\n\tconst version = \"version\" in item && typeof item.version === \"number\" ? item.version : null;\n\tconst baseRevision =\n\t\ttypeof contentData === \"object\" &&\n\t\tcontentData !== null &&\n\t\t\"_rev\" in contentData &&\n\t\ttypeof contentData._rev === \"string\"\n\t\t\t? contentData._rev\n\t\t\t: null;\n\tif (!canonicalId || version === null) {\n\t\treturn apiError(\"CONTENT_GET_ERROR\", \"Content item has invalid identity\", 500);\n\t}\n\n\tlet input: Record<string, unknown>;\n\tlet editorBody: unknown;\n\ttry {\n\t\teditorBody = await parseDeclaredPluginRouteInput(request, {\n\t\t\tbody: \"json\",\n\t\t\tmaxBytes: EDITOR_EXTENSION_REQUEST_MAX_BYTES,\n\t\t});\n\t} catch (error) {\n\t\tif (error instanceof PluginRouteRequestError) {\n\t\t\treturn apiError(\n\t\t\t\terror.status === 413 ? \"EDITOR_DRAFT_TOO_LARGE\" : \"INVALID_REQUEST\",\n\t\t\t\terror.status === 413\n\t\t\t\t\t? \"Editor interaction exceeds the size limit\"\n\t\t\t\t\t: \"Invalid editor interaction\",\n\t\t\t\terror.status,\n\t\t\t);\n\t\t}\n\t\treturn apiError(\"INVALID_REQUEST\", \"Editor interaction could not be read\", 400);\n\t}\n\tif (kind === \"panel\") {\n\t\tif (!isRecord(editorBody)) {\n\t\t\treturn apiError(\"INVALID_REQUEST\", \"Editor panel interaction must be an object\", 400);\n\t\t}\n\t\tinput = editorBody;\n\t\tconst validation = validateContentEditorPanelInteraction(input);\n\t\tif (!validation.valid) {\n\t\t\treturn apiError(\"INVALID_PLUGIN_UI_CONTEXT\", \"Invalid editor panel interaction\", 400);\n\t\t}\n\t} else {\n\t\tif (!isRecord(editorBody)) {\n\t\t\treturn apiError(\"INVALID_REQUEST\", \"Invalid editor action interaction\", 400);\n\t\t}\n\t\tinput = {\n\t\t\ttype: \"editor_action\",\n\t\t\t...(Object.hasOwn(editorBody, \"draft\") ? { draft: editorBody.draft } : {}),\n\t\t};\n\t}\n\n\tlet validatedDraft: ValidatedEditorDraftRequest | null = null;\n\tif (input.draft !== undefined) {\n\t\tif (!baseRevision) {\n\t\t\treturn apiError(\"EDITOR_DRAFT_INVALID\", \"Content item has no draft revision identity\", 409);\n\t\t}\n\t\tconst collectionSchema = await runtime.getPluginEditorDraftSchema(collection);\n\t\tif (!collectionSchema) return apiError(\"NOT_FOUND\", \"Collection not found\", 404);\n\t\tconst draft = validateEditorDraftRequest({\n\t\t\trequest: input.draft,\n\t\t\tcollection: collectionSchema,\n\t\t\tentry: { id: canonicalId, locale: canonicalLocale, revision: baseRevision },\n\t\t\treadSelector: definition.extension.draft?.read,\n\t\t\tpatchSelector: definition.extension.draft?.patch,\n\t\t\tcanRead: definition.capabilities.includes(\"admin.editor-draft:read\"),\n\t\t\tcanPatch: definition.capabilities.includes(\"admin.editor-draft:patch\"),\n\t\t});\n\t\tif (\"code\" in draft) {\n\t\t\tconsole.warn(\n\t\t\t\t`[plugin:${pluginId}] Editor draft ${kind}/${extensionId} rejected: ${draft.code}`,\n\t\t\t);\n\t\t\treturn editorDraftErrorResponse(draft);\n\t\t}\n\t\tvalidatedDraft = draft;\n\t\tinput = { ...input, draft: draft.snapshot };\n\t}\n\n\tconst headers = new Headers(request.headers);\n\theaders.delete(\"content-length\");\n\theaders.delete(\"content-encoding\");\n\theaders.set(\"Content-Type\", \"application/json\");\n\tconst pluginRequest = new Request(request.url, {\n\t\tmethod: \"POST\",\n\t\theaders,\n\t\tbody: JSON.stringify(input),\n\t});\n\tconst locale = resolveLocale(request);\n\tconst response = await dispatchPluginApiRequest({\n\t\truntime,\n\t\tpluginId,\n\t\tpath: definition.extension.route,\n\t\trequest: pluginRequest,\n\t\tuser,\n\t\ttokenScopes,\n\t\tinvalidateContentCache,\n\t\teditorDispatch: {\n\t\t\tkind,\n\t\t\tpolicy: definition.policy,\n\t\t\tui: {\n\t\t\t\tsurface: kind === \"panel\" ? \"content-editor-panel\" : \"content-editor-action\",\n\t\t\t\tlocale,\n\t\t\t\tdirection: getLocaleDir(locale),\n\t\t\t\tcontentLocale: canonicalLocale ?? undefined,\n\t\t\t\textensionId,\n\t\t\t\tentry: {\n\t\t\t\t\tcollection,\n\t\t\t\t\tid: canonicalId,\n\t\t\t\t\tlocale: canonicalLocale,\n\t\t\t\t\tversion,\n\t\t\t\t},\n\t\t\t},\n\t\t},\n\t});\n\tif (!response.ok) return response;\n\tconst envelope: unknown = await response.clone().json();\n\tif (!isRecord(envelope) || !isRecord(envelope.data)) {\n\t\treturn apiError(\"INVALID_PLUGIN_RESPONSE\", \"Plugin returned an invalid response\", 502);\n\t}\n\tconst data = envelope.data;\n\tif (data.patch === undefined && !validatedDraft) return response;\n\tif (data.patch !== undefined && !validatedDraft) {\n\t\treturn apiError(\n\t\t\t\"EDITOR_DRAFT_INVALID\",\n\t\t\t\"Plugin returned an editor draft patch without a draft invocation\",\n\t\t\t400,\n\t\t);\n\t}\n\tif (data.patch !== undefined) {\n\t\tconst collectionSchema = await runtime.getPluginEditorDraftSchema(collection);\n\t\tif (!collectionSchema) return apiError(\"NOT_FOUND\", \"Collection not found\", 404);\n\t\tconst patch = validateEditorDraftPatch({\n\t\t\tpatch: data.patch,\n\t\t\tcollection: collectionSchema,\n\t\t\tallowedFields: validatedDraft?.patchFields ?? new Set(),\n\t\t});\n\t\tif (\"code\" in patch) {\n\t\t\tconsole.warn(\n\t\t\t\t`[plugin:${pluginId}] Editor draft ${kind}/${extensionId} rejected: ${patch.code}`,\n\t\t\t);\n\t\t\treturn editorDraftErrorResponse(patch);\n\t\t}\n\t\tdata.patch = patch;\n\t}\n\tconst finalResponse = apiSuccess({ ...data, editorInvocation: validatedDraft?.receipt });\n\tfinalResponse.headers.set(\"Cache-Control\", \"private, no-store\");\n\treturn finalResponse;\n}\n"],"mappings":";;;;;;;;;;AAeA,MAAa,sBAAsB;CAClC,WAAW;CACX,kBAAkB,MAAM;CACxB,eAAe,KAAK;CACpB;AAgCD,MAAM,UAAU,IAAI,aAAa;AACjC,MAAM,qBAAqB;AAE3B,SAASA,WAAS,OAAkD;AACnE,QAAO,OAAO,UAAU,YAAY,UAAU,QAAQ,CAAC,MAAM,QAAQ,MAAM;;AAG5E,SAAS,sBAAsB,OAA8C;AAC5E,QACCA,WAAS,MAAM,IACf,OAAO,MAAM,eAAe,YAC5B,OAAO,MAAM,YAAY,aACxB,MAAM,WAAW,QAAQ,OAAO,MAAM,WAAW,aAClD,OAAO,MAAM,iBAAiB,YAC9B,OAAO,MAAM,eAAe,YAC5B,OAAO,MAAM,iBAAiB,YAC9BA,WAAS,MAAM,OAAO;;AAIxB,SAAS,UAAU,OAA+B;AACjD,KAAI;AACH,SAAO,QAAQ,OAAO,KAAK,UAAU,MAAM,CAAC,CAAC;SACtC;AACP,SAAO;;;AAIT,SAAS,eACR,YACA,UACc;CACd,MAAM,WAAW,IAAI,IAAI,UAAU,UAAU,EAAE,CAAC;AAChD,KAAI,UAAU,cACb;OAAK,MAAM,SAAS,WAAW,OAC9B,KAAI,MAAM,aAAc,UAAS,IAAI,MAAM,KAAK;;AAGlD,QAAO;;AAGR,SAAS,cAAc,OAA0C;AAChE,QAAO;EACN,MAAM,MAAM;EACZ,OAAO,MAAM;EACb,MAAM,MAAM;EACZ,UAAU,MAAM;EAChB,cAAc,MAAM;EACpB,GAAI,MAAM,aAAa,EAAE,YAAY,EAAE,GAAG,MAAM,YAAY,EAAE,GAAG,EAAE;EACnE;;AAGF,SAAS,KAAK,MAA4B,SAA6C;AACtF,QAAO;EAAE;EAAM;EAAS;;AAGzB,SAAgB,2BAA2B,OAQkB;AAC5D,KAAI,CAAC,sBAAsB,MAAM,QAAQ,CACxC,QAAO,KAAK,wBAAwB,gCAAgC;CAErE,MAAM,UAAU,MAAM;AACtB,KACC,QAAQ,eAAe,MAAM,WAAW,QACxC,QAAQ,YAAY,MAAM,MAAM,MAChC,QAAQ,WAAW,MAAM,MAAM,OAE/B,QAAO,KAAK,sBAAsB,iCAAiC;AAEpE,KAAI,QAAQ,iBAAiB,MAAM,MAAM,SACxC,QAAO,KAAK,sBAAsB,sCAAsC;AAEzE,KACC,CAAC,OAAO,cAAc,QAAQ,WAAW,IACzC,QAAQ,aAAa,KACrB,OAAO,QAAQ,iBAAiB,YAChC,CAAC,mBAAmB,KAAK,QAAQ,aAAa,CAE9C,QAAO,KAAK,wBAAwB,2CAA2C;CAEhF,MAAM,OAAO,UAAU,QAAQ;AAC/B,KAAI,SAAS,KACZ,QAAO,KAAK,wBAAwB,kDAAkD;AACvF,KAAI,OAAO,oBAAoB,iBAC9B,QAAO,KAAK,0BAA0B,+CAA+C;CAGtF,MAAM,aAAa,eAAe,MAAM,YAAY,MAAM,aAAa;CACvE,MAAM,cAAc,eAAe,MAAM,YAAY,MAAM,cAAc;AACzE,KACC,WAAW,OAAO,oBAAoB,aACtC,YAAY,OAAO,oBAAoB,UAEvC,QAAO,KAAK,0BAA0B,gDAAgD;CAEvF,MAAM,WAAW,OAAO,KAAK,QAAQ,OAAO;AAC5C,KAAI,SAAS,SAAS,oBAAoB,UACzC,QAAO,KAAK,0BAA0B,gDAAgD;AAEvF,KAAI,SAAS,SAAS,KAAK,CAAC,MAAM,QACjC,QAAO,KAAK,oCAAoC,4CAA4C;CAE7F,MAAM,SAAS,IAAI,IAAI,MAAM,WAAW,OAAO,KAAK,UAAU,CAAC,MAAM,MAAM,MAAM,CAAC,CAAC;CACnF,MAAM,wBAAwB,MAAM,KAAK,cAAc,SAAS,OAAO,IAAI,KAAK,CAAC,CAC/E,QAAQ,UAA0B,QAAQ,SAAS,CAAC,MAAM,gBAAgB,CAAC,CAC3E,IAAI,cAAc;CACpB,MAAM,SAAkC,EAAE;CAC1C,MAAM,mBAAiD,EAAE;AACzD,MAAK,MAAM,QAAQ,UAAU;AAC5B,MAAI,CAAC,WAAW,IAAI,KAAK,CACxB,QAAO,KAAK,gCAAgC,uBAAuB,KAAK,kBAAkB;EAE3F,MAAM,QAAQ,OAAO,IAAI,KAAK;AAC9B,MAAI,CAAC,SAAS,MAAM,gBACnB,QAAO,KACN,uCACA,uBAAuB,KAAK,2BAC5B;EAEF,MAAM,YAAY,UAAU,QAAQ,OAAO,MAAM;AACjD,MAAI,cAAc,KACjB,QAAO,KAAK,wBAAwB,uBAAuB,KAAK,cAAc;AAC/E,MAAI,YAAY,oBAAoB,cACnC,QAAO,KAAK,0BAA0B,uBAAuB,KAAK,0BAA0B;AAE7F,MAAI,CAAC,oBAAoB,MAAM,CAAC,UAAU,QAAQ,OAAO,MAAM,CAAC,QAC/D,QAAO,KAAK,wBAAwB,uBAAuB,KAAK,cAAc;AAE/E,SAAO,QAAQ,QAAQ,OAAO;AAC9B,mBAAiB,KAAK,cAAc,MAAM,CAAC;;AAE5C,KAAI,MAAM,gBAAgB,CAAC,MAAM,QAChC,QAAO,KAAK,oCAAoC,4CAA4C;AAE7F,KAAI,MAAM,iBAAiB,CAAC,MAAM,SACjC,QAAO,KAAK,oCAAoC,+CAA+C;AAGhG,QAAO;EACN,UAAU;GACT,YAAY,MAAM,WAAW;GAC7B,SAAS,MAAM,MAAM;GACrB,QAAQ,MAAM,MAAM;GACpB,cAAc,MAAM,MAAM;GAC1B,cAAc,QAAQ;GACtB;GACA;GACA;EACD,SAAS;GACR,SAAS,MAAM,MAAM;GACrB,QAAQ,MAAM,MAAM;GACpB,cAAc,MAAM,MAAM;GAC1B,YAAY,QAAQ;GACpB,cAAc,QAAQ;GACtB,kBAAkB;GAClB;EACD;EACA;EACA;;AAGF,SAAgB,yBAAyB,OAIe;AAEvD,KAAI,CADe,+BAA+B,MAAM,MAAM,CAC9C,SAAS,CAAC,yBAAyB,MAAM,MAAM,CAC9D,QAAO,KAAK,wBAAwB,gDAAgD;CACrF,MAAM,QAAQ,MAAM;CACpB,MAAM,SAAS,IAAI,IAAI,MAAM,WAAW,OAAO,KAAK,UAAU,CAAC,MAAM,MAAM,MAAM,CAAC,CAAC;AACnF,MAAK,MAAM,aAAa,MAAM,YAAY;AACzC,MAAI,CAAC,MAAM,cAAc,IAAI,UAAU,MAAM,CAC5C,QAAO,KACN,gCACA,uBAAuB,UAAU,MAAM,kBACvC;EAEF,MAAM,QAAQ,OAAO,IAAI,UAAU,MAAM;AACzC,MAAI,CAAC,SAAS,MAAM,gBACnB,QAAO,KACN,uCACA,uBAAuB,UAAU,MAAM,2BACvC;EAEF,MAAM,QAAQ,UAAU,OAAO,UAAU,OAAO,UAAU;AAC1D,MAAI,CAAC,oBAAoB,MAAM,CAAC,UAAU,MAAM,CAAC,QAChD,QAAO,KAAK,wBAAwB,uBAAuB,UAAU,MAAM,cAAc;EAE1F,MAAM,YAAY,UAAU,MAAM;AAClC,MAAI,cAAc,QAAQ,YAAY,oBAAoB,cACzD,QAAO,KACN,0BACA,uBAAuB,UAAU,MAAM,0BACvC;;AAGH,QAAO;;;;;AC7OR,SAAS,yBAAyB,OAAoD;CACrF,MAAM,SACL,MAAM,SAAS,uBACZ,MACA,MAAM,SAAS,kCACd,MAAM,SAAS,qCACf,MACA,MAAM,SAAS,2BACd,MACA,MAAM,SAAS,wCACd,MACA;AACP,QAAO,SAAS,MAAM,MAAM,MAAM,SAAS,OAAO;;AAGnD,SAASC,cAAY,OAAiC;AACrD,KAAI,UAAU,MAAM,UAAU,MAAM,UAAU,MAAM,UAAU,MAAM,UAAU,GAC7E,QAAO;AAER,QAAO;;AAGR,SAAS,SAAS,OAAkD;AACnE,QAAO,OAAO,UAAU,YAAY,UAAU,QAAQ,CAAC,MAAM,QAAQ,MAAM;;AAG5E,SAAS,aAAa,OAAoC;AACzD,QAAO,OAAO,OAAO,aAAa,MAAM;;AAGzC,SAAS,mCACR,WACA,SACA,MACA,aACkB;CAClB,MAAM,aAAa,UAAU,cAAc;AAC3C,KAAI,CAAC,aAAa,WAAW,CAC5B,QAAO,SAAS,wBAAwB,+CAA+C,IAAI;CAG5F,IAAI;AACJ,KAAI,MAAM;EACT,MAAM,OAAOA,cAAY,KAAK,KAAK;AACnC,MAAI,SAAS,KACZ,QAAO,SAAS,gBAAgB,0CAA0C,IAAI;AAE/E,mBAAiB;GAAE,IAAI,KAAK;GAAI;GAAM;OAEtC,kBAAiB;CAGlB,MAAM,SAAS,YAAY,gBAAgB,WAAW;AACtD,KAAI,OAAQ,QAAO;CACnB,MAAM,aAAa,aAAa,EAAE,aAAa,EAAE,QAAQ;AACzD,KAAI,WAAY,QAAO;AACvB,KAAI,CAAC,eAAe,QAAQ,QAAQ,IAAI,mBAAmB,KAAK,IAC/D,QAAO,SAAS,iBAAiB,2BAA2B,IAAI;AAEjE,QAAO;;;AAeR,eAAsB,yBAAyB,EAC9C,SACA,UACA,MACA,SACA,MACA,aACA,wBACA,kBAC8C;CAC9C,MAAM,SAAS,QAAQ,OAAO,aAAa;CAC3C,MAAM,YAAY,QAAQ,mBAAmB,UAAU,KAAK;AAC5D,KAAI,CAAC,UAAW,QAAO,SAAS,aAAa,0BAA0B,IAAI;AAE3E,KAAI,CAAC,UAAU,QAAQ;EACtB,MAAM,SAAS,mCAAmC,WAAW,SAAS,MAAM,YAAY;AACxF,MAAI,OAAQ,QAAO;;AAEpB,KAAI,UAAU,WAAW,CAAC,UAAU,QAAQ,MAAM,YAAY,YAAY,OAAO,EAAE;EAClF,MAAM,WAAW,SAAS,sBAAsB,sBAAsB,IAAI;AAC1E,WAAS,QAAQ,IAAI,SAAS,UAAU,QAAQ,KAAK,KAAK,CAAC;AAC3D,SAAO;;CAGR,MAAM,SAAS,UAAU,SAAS,SAAa,QAAQ;CACvD,MAAM,SAAS,MAAM,QAAQ,qBAC5B,UACA,QACA,MACA,SACA,QACA,wBACA,eACA;AACD,KAAI,CAAC,OAAO,SAAS;EACpB,MAAM,OAAO,OAAO,OAAO,QAAQ;EACnC,MAAM,UACL,SAAS,mBACN,uBACC,OAAO,OAAO,WAAW;EAC9B,MAAM,SAAU,OAA+B,WAAW,SAAS,cAAc,MAAM;EACvF,MAAM,UACL,SAAS,oBAAoB,OAAO,SAAS,aAAa,OAAO,QAC9D,OAAO,MAAM,UACb;AACJ,SAAO,SAAS,MAAM,SAAS,QAAQ,SAAS,QAAQ,GAAG,UAAU,OAAU;;CAGhF,IAAI;AACJ,KAAI,UAAU,aAAa,MAC1B,KAAI;AACH,aAAW,4BACV,MAAM,0BACL,OAAO,MACP,UAAU,SAAS,EAAE,kBAAkB,QAAQ,KAAK,GAAG,EAAE,uBAAuB,MAAM,CACtF,EACD,OACA;UACO,OAAO;AACf,UAAQ,MAAM,WAAW,SAAS,gCAAgC,MAAM;AACxE,SAAO,SAAS,2BAA2B,uCAAuC,IAAI;;KAGvF,YAAW,WAAW,OAAO,KAAK;AAEnC,KACC,SAAS,MACT,UAAU,UACV,UAAU,iBACT,WAAW,SAAS,WAAW,QAEhC,UAAS,QAAQ,IAAI,iBAAiB,UAAU,aAAa;KAE7D,UAAS,QAAQ,IAAI,iBAAiB,oBAAoB;AAE3D,QAAO;;AAgBR,MAAM,qCAAqC,MAAM;;AAGjD,eAAsB,wCAAwC,EAC7D,SACA,UACA,MACA,aACA,YACA,SACA,SACA,MACA,aACA,0BAC6D;CAC7D,MAAM,aAAa,QAAQ,yBAAyB,UAAU,MAAM,aAAa,WAAW;AAC5F,KAAI,CAAC,WAAY,QAAO,SAAS,aAAa,qCAAqC,IAAI;CAEvF,MAAM,YAAY,QAAQ,mBAAmB,UAAU,WAAW,UAAU,MAAM;AAClF,KAAI,CAAC,aAAa,UAAU,OAC3B,QAAO,SACN,mCACA,0DACA,IACA;CAEF,MAAM,SAAS,mCAAmC,WAAW,SAAS,MAAM,YAAY;AACxF,KAAI,OAAQ,QAAO;CAEnB,MAAM,kBAAkB,IAAI,IAAI,QAAQ,IAAI,CAAC,aAAa,IAAI,SAAS,IAAI;CAC3E,MAAM,gBAAgB,MAAM,QAAQ,iBAAiB,YAAY,SAAS,gBAAgB;AAC1F,KAAI,CAAC,cAAc,QAClB,QAAO,cAAc,OAAO,SAAS,cAClC,SAAS,aAAa,0BAA0B,IAAI,GACpD,SAAS,qBAAqB,+BAA+B,IAAI;CAErE,MAAM,cAAc,cAAc;CAClC,MAAM,OACL,OAAO,gBAAgB,YAAY,gBAAgB,QAAQ,UAAU,cAClE,YAAY,OACZ;AACJ,KAAI,OAAO,SAAS,YAAY,SAAS,KACxC,QAAO,SAAS,qBAAqB,+BAA+B,IAAI;CAEzE,MAAM,WAAW,cAAc,QAAQ,OAAO,KAAK,aAAa,WAAW,KAAK,WAAW;CAC3F,IAAI,gBACH,QAAQ,OAAO,OAAO;AACvB,KAAI,MAAM;EACT,MAAM,YAAYA,cAAY,KAAK,KAAK;AACxC,MAAI,cAAc,KACjB,QAAO,SAAS,gBAAgB,0CAA0C,IAAI;AAE/E,kBAAgB;GAAE,IAAI,KAAK;GAAI,MAAM;GAAW;;CAEjD,MAAM,kBAAkB,iBACvB,eACA,UACA,oBACA,mBACA;AACD,KAAI,gBAAiB,QAAO;CAE5B,MAAM,cAAc,QAAQ,QAAQ,OAAO,KAAK,OAAO,WAAW,KAAK,KAAK;CAC5E,MAAM,kBAAkB,YAAY,QAAQ,OAAO,KAAK,WAAW,WAAW,KAAK,SAAS;CAC5F,MAAM,UAAU,aAAa,QAAQ,OAAO,KAAK,YAAY,WAAW,KAAK,UAAU;CACvF,MAAM,eACL,OAAO,gBAAgB,YACvB,gBAAgB,QAChB,UAAU,eACV,OAAO,YAAY,SAAS,WACzB,YAAY,OACZ;AACJ,KAAI,CAAC,eAAe,YAAY,KAC/B,QAAO,SAAS,qBAAqB,qCAAqC,IAAI;CAG/E,IAAI;CACJ,IAAI;AACJ,KAAI;AACH,eAAa,MAAM,8BAA8B,SAAS;GACzD,MAAM;GACN,UAAU;GACV,CAAC;UACM,OAAO;AACf,MAAI,iBAAiB,wBACpB,QAAO,SACN,MAAM,WAAW,MAAM,2BAA2B,mBAClD,MAAM,WAAW,MACd,8CACA,8BACH,MAAM,OACN;AAEF,SAAO,SAAS,mBAAmB,wCAAwC,IAAI;;AAEhF,KAAI,SAAS,SAAS;AACrB,MAAI,CAAC,SAAS,WAAW,CACxB,QAAO,SAAS,mBAAmB,8CAA8C,IAAI;AAEtF,UAAQ;AAER,MAAI,CADe,sCAAsC,MAAM,CAC/C,MACf,QAAO,SAAS,6BAA6B,oCAAoC,IAAI;QAEhF;AACN,MAAI,CAAC,SAAS,WAAW,CACxB,QAAO,SAAS,mBAAmB,qCAAqC,IAAI;AAE7E,UAAQ;GACP,MAAM;GACN,GAAI,OAAO,OAAO,YAAY,QAAQ,GAAG,EAAE,OAAO,WAAW,OAAO,GAAG,EAAE;GACzE;;CAGF,IAAI,iBAAqD;AACzD,KAAI,MAAM,UAAU,QAAW;AAC9B,MAAI,CAAC,aACJ,QAAO,SAAS,wBAAwB,+CAA+C,IAAI;EAE5F,MAAM,mBAAmB,MAAM,QAAQ,2BAA2B,WAAW;AAC7E,MAAI,CAAC,iBAAkB,QAAO,SAAS,aAAa,wBAAwB,IAAI;EAChF,MAAM,QAAQ,2BAA2B;GACxC,SAAS,MAAM;GACf,YAAY;GACZ,OAAO;IAAE,IAAI;IAAa,QAAQ;IAAiB,UAAU;IAAc;GAC3E,cAAc,WAAW,UAAU,OAAO;GAC1C,eAAe,WAAW,UAAU,OAAO;GAC3C,SAAS,WAAW,aAAa,SAAS,0BAA0B;GACpE,UAAU,WAAW,aAAa,SAAS,2BAA2B;GACtE,CAAC;AACF,MAAI,UAAU,OAAO;AACpB,WAAQ,KACP,WAAW,SAAS,iBAAiB,KAAK,GAAG,YAAY,aAAa,MAAM,OAC5E;AACD,UAAO,yBAAyB,MAAM;;AAEvC,mBAAiB;AACjB,UAAQ;GAAE,GAAG;GAAO,OAAO,MAAM;GAAU;;CAG5C,MAAM,UAAU,IAAI,QAAQ,QAAQ,QAAQ;AAC5C,SAAQ,OAAO,iBAAiB;AAChC,SAAQ,OAAO,mBAAmB;AAClC,SAAQ,IAAI,gBAAgB,mBAAmB;CAC/C,MAAM,gBAAgB,IAAI,QAAQ,QAAQ,KAAK;EAC9C,QAAQ;EACR;EACA,MAAM,KAAK,UAAU,MAAM;EAC3B,CAAC;CACF,MAAM,SAAS,cAAc,QAAQ;CACrC,MAAM,WAAW,MAAM,yBAAyB;EAC/C;EACA;EACA,MAAM,WAAW,UAAU;EAC3B,SAAS;EACT;EACA;EACA;EACA,gBAAgB;GACf;GACA,QAAQ,WAAW;GACnB,IAAI;IACH,SAAS,SAAS,UAAU,yBAAyB;IACrD;IACA,WAAW,aAAa,OAAO;IAC/B,eAAe,mBAAmB;IAClC;IACA,OAAO;KACN;KACA,IAAI;KACJ,QAAQ;KACR;KACA;IACD;GACD;EACD,CAAC;AACF,KAAI,CAAC,SAAS,GAAI,QAAO;CACzB,MAAM,WAAoB,MAAM,SAAS,OAAO,CAAC,MAAM;AACvD,KAAI,CAAC,SAAS,SAAS,IAAI,CAAC,SAAS,SAAS,KAAK,CAClD,QAAO,SAAS,2BAA2B,uCAAuC,IAAI;CAEvF,MAAM,OAAO,SAAS;AACtB,KAAI,KAAK,UAAU,UAAa,CAAC,eAAgB,QAAO;AACxD,KAAI,KAAK,UAAU,UAAa,CAAC,eAChC,QAAO,SACN,wBACA,oEACA,IACA;AAEF,KAAI,KAAK,UAAU,QAAW;EAC7B,MAAM,mBAAmB,MAAM,QAAQ,2BAA2B,WAAW;AAC7E,MAAI,CAAC,iBAAkB,QAAO,SAAS,aAAa,wBAAwB,IAAI;EAChF,MAAM,QAAQ,yBAAyB;GACtC,OAAO,KAAK;GACZ,YAAY;GACZ,eAAe,gBAAgB,+BAAe,IAAI,KAAK;GACvD,CAAC;AACF,MAAI,UAAU,OAAO;AACpB,WAAQ,KACP,WAAW,SAAS,iBAAiB,KAAK,GAAG,YAAY,aAAa,MAAM,OAC5E;AACD,UAAO,yBAAyB,MAAM;;AAEvC,OAAK,QAAQ;;CAEd,MAAM,gBAAgB,WAAW;EAAE,GAAG;EAAM,kBAAkB,gBAAgB;EAAS,CAAC;AACxF,eAAc,QAAQ,IAAI,iBAAiB,oBAAoB;AAC/D,QAAO"}