emdash 1.2.0 → 1.3.1

package/dist/parse-6pN8Xqg5.d.mts

@@ -0,0 +1,176 @@
+import { w as BlockType } from "./types-Bgujop4S.mjs";
+import { i as ContentItem } from "./types-BqJgTL_y.mjs";
+import { z } from "zod";
+
+//#region src/api/types.d.ts
+/**
+ * List response with cursor pagination
+ */
+interface ListResponse<T> {
+  items: T[];
+  nextCursor?: string;
+  /**
+   * Total number of rows matching the filters, ignoring pagination. Used
+   * by the admin to render a stable pagination denominator. Optional so
+   * callers that don't surface a row count don't pay for the extra query.
+   */
+  total?: number;
+}
+/**
+ * Content API responses
+ */
+interface ContentListResponse extends ListResponse<ContentItem> {}
+interface ContentResponse {
+  item: ContentItem;
+  /** Opaque revision token for optimistic concurrency */
+  _rev?: string;
+}
+/**
+ * Manifest API response
+ */
+interface ManifestResponse {
+  version: string;
+  hash: string;
+  collections: ManifestCollectionMap;
+  plugins: Record<string, {
+    adminPages?: Array<{
+      path: string;
+      component: string;
+    }>;
+    widgets?: string[];
+  }>;
+}
+type ManifestCollectionMap = Record<string, ManifestCollectionDescriptor>;
+interface ManifestCollectionDescriptor {
+  label: string;
+  labelSingular: string;
+  supports: string[];
+  hasSeo: boolean;
+  urlPattern?: string;
+  routable?: boolean;
+  titleField?: string;
+  dateField?: string;
+  hidden?: boolean;
+  /** Phosphor icon name for the admin sidebar entry */
+  icon?: string;
+  /** Admin sidebar folder shared with other collections of the same group */
+  group?: string;
+  /** `false` omits the dashboard's "new entry" quick action */
+  quickCreate?: boolean;
+  listColumns?: string[];
+  fields: Record<string, ManifestFieldDescriptor>;
+}
+interface ManifestFieldDescriptor extends FieldDescriptor {
+  id?: string;
+  widget?: string;
+  validation?: Record<string, unknown>;
+  unsupportedType?: {
+    type: string;
+    path: string;
+  };
+  blockTypes?: BlockType[];
+  blockTypeFingerprint?: string;
+  /** Value a new entry starts with in the admin editor. */
+  defaultValue?: unknown;
+  /** Set on `integer` fields, which share the `number` kind. */
+  integer?: boolean;
+}
+interface FieldDescriptor {
+  kind: string;
+  label?: string;
+  required?: boolean;
+  translatable?: boolean;
+  /**
+   * For `select` / `multiSelect`: the list of enum choices.
+   * For `json` fields driven by a plugin `widget`: arbitrary widget config.
+   */
+  options?: Array<{
+    value: string;
+    label: string;
+  }> | Record<string, unknown>;
+}
+/**
+ * Discriminated union for handler results.
+ *
+ * Handlers return `ApiResult<T>` -- either `{ success: true, data: T }` or
+ * `{ success: false, error: { code, message } }`. The `success` literal
+ * enables TypeScript narrowing on `.data`.
+ *
+ * The generic `E` parameter defaults to `ErrorCode` but can be narrowed to
+ * `OAuthErrorCode` for OAuth token-endpoint handlers.
+ *
+ * Use `unwrapResult()` from `error.ts` to convert to an HTTP Response.
+ */
+type ApiResult<T, E extends string = string> = {
+  success: true;
+  data: T;
+} | {
+  success: false;
+  error: {
+    code: E;
+    message: string;
+    details?: Record<string, unknown>;
+  };
+};
+/**
+ * API request context
+ */
+interface ApiContext {
+  userId?: string;
+  userRole?: string;
+}
+//#endregion
+//#region src/api/error.d.ts
+/**
+ * Create a standardized error response.
+ *
+ * Always returns `{ success: false, error: { code, message } }` with correct
+ * Content-Type. Use this for all error responses in API routes.
+ */
+declare function apiError(code: string, message: string, status: number, details?: Record<string, unknown>): Response;
+/**
+ * Create a standardized success response.
+ *
+ * Always returns `{ success: true, data: T }` with correct status code.
+ * Use this for all success responses in API routes.
+ */
+declare function apiSuccess<T>(data: T, status?: number): Response;
+/**
+ * Handle an unknown error in a catch block.
+ *
+ * - Logs the full error server-side
+ * - Returns a generic message to the client (never leaks error.message)
+ * - Use `fallbackMessage` for the public-facing message
+ * - Use `fallbackCode` for the error code
+ */
+declare function handleError(error: unknown, fallbackMessage: string, fallbackCode: string): Response;
+//#endregion
+//#region src/api/parse.d.ts
+/**
+ * Result of parsing: either the validated data or an error Response.
+ * Routes should check `if (result instanceof Response) return result;`
+ */
+type ParseResult<T> = T | Response;
+/**
+ * Parse and validate a JSON request body against a Zod schema.
+ *
+ * Returns the validated data on success, or a 400 Response on failure.
+ * Replaces all `(await request.json()) as T` casts.
+ */
+declare function parseBody<T extends z.ZodType>(request: Request, schema: T): Promise<ParseResult<z.infer<T>>>;
+/**
+ * Parse and validate URL search params against a Zod schema.
+ *
+ * Converts searchParams to a plain object before validation.
+ * Zod coercion handles string -> number/boolean conversion.
+ * Replaces manual `url.searchParams.get()` + `parseInt()` patterns.
+ */
+declare function parseQuery<T extends z.ZodType>(url: URL, schema: T): ParseResult<z.infer<T>>;
+/**
+ * Type guard to check if a ParseResult is an error Response.
+ * Usage: `if (isParseError(result)) return result;`
+ */
+declare function isParseError<T>(result: ParseResult<T>): result is Response;
+//#endregion
+export { ManifestResponse as _, apiError as a, ApiContext as c, ContentResponse as d, FieldDescriptor as f, ManifestFieldDescriptor as g, ManifestCollectionMap as h, parseQuery as i, ApiResult as l, ManifestCollectionDescriptor as m, isParseError as n, apiSuccess as o, ListResponse as p, parseBody as r, handleError as s, ParseResult as t, ContentListResponse as u };
+//# sourceMappingURL=parse-6pN8Xqg5.d.mts.map

package/dist/parse-6pN8Xqg5.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"parse-6pN8Xqg5.d.mts","names":[],"sources":["../src/api/types.ts","../src/api/error.ts","../src/api/parse.ts"],"mappings":";;;;;;AASA;;UAAiB,YAAA;EAChB,KAAA,EAAO,CAAA;EACP,UAAA;EADA;;;;;EAOA,KAAA;AAAA;;;;UAMgB,mBAAA,SAA4B,YAAA,CAAa,WAAA;AAAA,UAEzC,eAAA;EAChB,IAAA,EAAM,WAAA;EAAW;EAEjB,IAAA;AAAA;;;;UAMgB,gBAAA;EAChB,OAAA;EACA,IAAA;EACA,WAAA,EAAa,qBAAA;EACb,OAAA,EAAS,MAAA;IAGP,UAAA,GAAa,KAAA;MAAQ,IAAA;MAAc,SAAA;IAAA;IACnC,OAAA;EAAA;AAAA;AAAA,KAKS,qBAAA,GAAwB,MAAA,SAAe,4BAAA;AAAA,UAElC,4BAAA;EAChB,KAAA;EACA,aAAA;EACA,QAAA;EACA,MAAA;EACA,UAAA;EACA,QAAA;EACA,UAAA;EACA,SAAA;EACA,MAAA;;EAEA,IAAA;EAb8E;EAe9E,KAAA;EAb4C;EAe5C,WAAA;EACA,WAAA;EACA,MAAA,EAAQ,MAAA,SAAe,uBAAA;AAAA;AAAA,UAGP,uBAAA,SAAgC,eAAA;EAChD,EAAA;EACA,MAAA;EACA,UAAA,GAAa,MAAA;EACb,eAAA;IAAoB,IAAA;IAAc,IAAA;EAAA;EAClC,UAAA,GAAa,SAAA;EACb,oBAAA;EAVA;EAYA,YAAA;EAXQ;EAaR,OAAA;AAAA;AAAA,UAGgB,eAAA;EAChB,IAAA;EACA,KAAA;EACA,QAAA;EACA,YAAA;EAZa;;;;EAiBb,OAAA,GAAU,KAAA;IAAQ,KAAA;IAAe,KAAA;EAAA,KAAmB,MAAA;AAAA;;;;;;;;;;;AATrD;;KAwBY,SAAA;EACP,OAAA;EAAe,IAAA,EAAM,CAAA;AAAA;EAEvB,OAAA;EACA,KAAA;IAAS,IAAA,EAAM,CAAA;IAAG,OAAA;IAAiB,OAAA,GAAU,MAAA;EAAA;AAAA;;;AAJhD;UAUiB,UAAA;EAChB,MAAA;EACA,QAAA;AAAA;;;;;;;;;iBCxFe,QAAA,CACf,IAAA,UACA,OAAA,UACA,MAAA,UACA,OAAA,GAAU,MAAA,oBACR,QAAA;;ADZH;;;;;iBC2BgB,UAAA,GAAA,CAAc,IAAA,EAAM,CAAA,EAAG,MAAA,YAAe,QAAA;;;;;;;;;iBAYtC,WAAA,CACf,KAAA,WACA,eAAA,UACA,YAAA,WACE,QAAA;;;;;;;KChDS,WAAA,MAAiB,CAAA,GAAI,QAAA;;;;;AFKjC;;iBEGsB,SAAA,WAAoB,CAAA,CAAE,OAAA,CAAA,CAC3C,OAAA,EAAS,OAAA,EACT,MAAA,EAAQ,CAAA,GACN,OAAA,CAAQ,WAAA,CAAY,CAAA,CAAE,KAAA,CAAM,CAAA;;;;;AFK/B;;;iBEyDgB,UAAA,WAAqB,CAAA,CAAE,OAAA,CAAA,CAAS,GAAA,EAAK,GAAA,EAAK,MAAA,EAAQ,CAAA,GAAI,WAAA,CAAY,CAAA,CAAE,KAAA,CAAM,CAAA;;;;;iBA+B1E,YAAA,GAAA,CAAgB,MAAA,EAAQ,WAAA,CAAY,CAAA,IAAK,MAAA,IAAU,QAAA"}

package/dist/passkey-config-DTTZB6EI.mjs

@@ -0,0 +1,46 @@
+//#region src/auth/passkey-config.ts
+/**
+* Get passkey configuration from request URL
+*
+* @param url The request URL (typically `new URL(Astro.request.url)` or `new URL(request.url)`)
+* @param siteName Optional site name for rpName (defaults to hostname from `url` or public origin)
+* @param siteUrl Optional browser-facing origin (see `EmDashConfig.siteUrl`).
+*        When set, the canonical **origin** and **rpId** are taken from this URL.
+* @param allowedOrigins Optional list of additional accepted origins for verification.
+*        Each must share `rpId` with the canonical origin (WebAuthn requirement).
+*        Typical use: apex + preview subdomain on the same registrable domain.
+* @throws If `siteUrl` is non-empty but not parseable by `new URL()`.
+*/
+function getPasskeyConfig(url, siteName, siteUrl, allowedOrigins) {
+	let rpName;
+	let rpId;
+	let canonicalOrigin;
+	if (siteUrl) {
+		let publicUrl;
+		try {
+			publicUrl = new URL(siteUrl);
+		} catch (e) {
+			throw new Error(`Invalid siteUrl: "${siteUrl}"`, { cause: e });
+		}
+		rpName = siteName || publicUrl.hostname;
+		rpId = publicUrl.hostname;
+		canonicalOrigin = publicUrl.origin;
+	} else {
+		rpName = siteName || url.hostname;
+		rpId = url.hostname;
+		canonicalOrigin = url.origin;
+	}
+	const origins = [canonicalOrigin];
+	if (allowedOrigins) {
+		for (const extra of allowedOrigins) if (extra && !origins.includes(extra)) origins.push(extra);
+	}
+	return {
+		rpName,
+		rpId,
+		origins
+	};
+}
+
+//#endregion
+export { getPasskeyConfig as t };
+//# sourceMappingURL=passkey-config-DTTZB6EI.mjs.map

package/dist/passkey-config-DTTZB6EI.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"passkey-config-DTTZB6EI.mjs","names":[],"sources":["../src/auth/passkey-config.ts"],"sourcesContent":["/**\n * Passkey configuration helper\n *\n * Extracts passkey configuration from the request URL.\n * This ensures the rpId and origin are correctly set for both\n * localhost development and production deployments.\n */\n\nexport interface PasskeyConfig {\n\trpName: string;\n\trpId: string;\n\t/**\n\t * Accepted client-data origins. First entry is the canonical/preferred origin;\n\t * additional entries support multi-origin deployments (e.g. apex + preview\n\t * subdomain sharing the same `rpId`). See `allowedOrigins` parameter.\n\t */\n\torigins: string[];\n}\n\n/**\n * Get passkey configuration from request URL\n *\n * @param url The request URL (typically `new URL(Astro.request.url)` or `new URL(request.url)`)\n * @param siteName Optional site name for rpName (defaults to hostname from `url` or public origin)\n * @param siteUrl Optional browser-facing origin (see `EmDashConfig.siteUrl`).\n *        When set, the canonical **origin** and **rpId** are taken from this URL.\n * @param allowedOrigins Optional list of additional accepted origins for verification.\n *        Each must share `rpId` with the canonical origin (WebAuthn requirement).\n *        Typical use: apex + preview subdomain on the same registrable domain.\n * @throws If `siteUrl` is non-empty but not parseable by `new URL()`.\n */\nexport function getPasskeyConfig(\n\turl: URL,\n\tsiteName?: string,\n\tsiteUrl?: string,\n\tallowedOrigins?: string[],\n): PasskeyConfig {\n\tlet rpName: string;\n\tlet rpId: string;\n\tlet canonicalOrigin: string;\n\n\tif (siteUrl) {\n\t\tlet publicUrl: URL;\n\t\ttry {\n\t\t\tpublicUrl = new URL(siteUrl);\n\t\t} catch (e) {\n\t\t\tthrow new Error(`Invalid siteUrl: \"${siteUrl}\"`, { cause: e });\n\t\t}\n\t\trpName = siteName || publicUrl.hostname;\n\t\trpId = publicUrl.hostname;\n\t\tcanonicalOrigin = publicUrl.origin;\n\t} else {\n\t\trpName = siteName || url.hostname;\n\t\trpId = url.hostname;\n\t\tcanonicalOrigin = url.origin;\n\t}\n\n\tconst origins = [canonicalOrigin];\n\tif (allowedOrigins) {\n\t\tfor (const extra of allowedOrigins) {\n\t\t\tif (extra && !origins.includes(extra)) origins.push(extra);\n\t\t}\n\t}\n\n\treturn { rpName, rpId, origins };\n}\n"],"mappings":";;;;;;;;;;;;;AA+BA,SAAgB,iBACf,KACA,UACA,SACA,gBACgB;CAChB,IAAI;CACJ,IAAI;CACJ,IAAI;AAEJ,KAAI,SAAS;EACZ,IAAI;AACJ,MAAI;AACH,eAAY,IAAI,IAAI,QAAQ;WACpB,GAAG;AACX,SAAM,IAAI,MAAM,qBAAqB,QAAQ,IAAI,EAAE,OAAO,GAAG,CAAC;;AAE/D,WAAS,YAAY,UAAU;AAC/B,SAAO,UAAU;AACjB,oBAAkB,UAAU;QACtB;AACN,WAAS,YAAY,IAAI;AACzB,SAAO,IAAI;AACX,oBAAkB,IAAI;;CAGvB,MAAM,UAAU,CAAC,gBAAgB;AACjC,KAAI,gBACH;OAAK,MAAM,SAAS,eACnB,KAAI,SAAS,CAAC,QAAQ,SAAS,MAAM,CAAE,SAAQ,KAAK,MAAM;;AAI5D,QAAO;EAAE;EAAQ;EAAM;EAAS"}

package/dist/paths-CQA62503.mjs

@@ -0,0 +1,77 @@
+import { p as isRecordKind } from "./kinds-DogmNB6n.mjs";
+
+//#region src/transfer/format/paths.ts
+/**
+* Package file paths.
+*
+* A package contains exactly these files, and nothing else:
+*
+* ```
+* manifest.json
+* index/<seq>.ndjson                file index chunks, listed in the manifest
+* records/<kind>/<seq>.ndjson       record chunks, listed in the index
+* media/<sha256-hex>                raw media bytes, listed in the index
+* ```
+*
+* `seq` is a zero-padded six-digit number starting at `000000` with no gaps.
+* Paths are case-sensitive, relative, and never contain `.`/`..` segments,
+* backslashes, or empty segments; anything that does not match is rejected.
+*/
+const MANIFEST_PATH = "manifest.json";
+const SEQ_DIGITS = 6;
+const MAX_SEQ = 10 ** SEQ_DIGITS - 1;
+const INDEX_PATH_PATTERN = /^index\/(\d{6})\.ndjson$/;
+const RECORD_PATH_PATTERN = /^records\/([a-z_]+)\/(\d{6})\.ndjson$/;
+const MEDIA_PATH_PATTERN = /^media\/([0-9a-f]{64})$/;
+const SHA256_HEX_PATTERN = /^[0-9a-f]{64}$/;
+function parsePackagePath(path) {
+	if (path === MANIFEST_PATH) return {
+		type: "manifest",
+		path
+	};
+	const index = INDEX_PATH_PATTERN.exec(path);
+	if (index) return {
+		type: "index",
+		path,
+		seq: Number(index[1])
+	};
+	const records = RECORD_PATH_PATTERN.exec(path);
+	if (records) {
+		const kind = records[1];
+		if (!isRecordKind(kind)) return null;
+		return {
+			type: "records",
+			path,
+			kind,
+			seq: Number(records[2])
+		};
+	}
+	const media = MEDIA_PATH_PATTERN.exec(path);
+	if (media) return {
+		type: "media",
+		path,
+		sha256: media[1]
+	};
+	return null;
+}
+function isPackagePath(path) {
+	return parsePackagePath(path) !== null;
+}
+function formatSeq(seq) {
+	if (!Number.isInteger(seq) || seq < 0 || seq > MAX_SEQ) throw new RangeError(`Invalid chunk sequence ${seq}`);
+	return String(seq).padStart(SEQ_DIGITS, "0");
+}
+function indexChunkPath(seq) {
+	return `index/${formatSeq(seq)}.ndjson`;
+}
+function recordChunkPath(kind, seq) {
+	return `records/${kind}/${formatSeq(seq)}.ndjson`;
+}
+function mediaBlobPath(sha256) {
+	if (!SHA256_HEX_PATTERN.test(sha256)) throw new TypeError("Expected a lowercase hex SHA-256");
+	return `media/${sha256}`;
+}
+
+//#endregion
+export { parsePackagePath as a, mediaBlobPath as i, indexChunkPath as n, recordChunkPath as o, isPackagePath as r, MANIFEST_PATH as t };
+//# sourceMappingURL=paths-CQA62503.mjs.map

package/dist/paths-CQA62503.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"paths-CQA62503.mjs","names":[],"sources":["../src/transfer/format/paths.ts"],"sourcesContent":["/**\n * Package file paths.\n *\n * A package contains exactly these files, and nothing else:\n *\n * ```\n * manifest.json\n * index/<seq>.ndjson                file index chunks, listed in the manifest\n * records/<kind>/<seq>.ndjson       record chunks, listed in the index\n * media/<sha256-hex>                raw media bytes, listed in the index\n * ```\n *\n * `seq` is a zero-padded six-digit number starting at `000000` with no gaps.\n * Paths are case-sensitive, relative, and never contain `.`/`..` segments,\n * backslashes, or empty segments; anything that does not match is rejected.\n */\n\nimport { isRecordKind, type RecordKind } from \"./kinds.js\";\n\nexport const MANIFEST_PATH = \"manifest.json\";\n\nconst SEQ_DIGITS = 6;\nconst MAX_SEQ = 10 ** SEQ_DIGITS - 1;\n\nconst INDEX_PATH_PATTERN = /^index\\/(\\d{6})\\.ndjson$/;\nconst RECORD_PATH_PATTERN = /^records\\/([a-z_]+)\\/(\\d{6})\\.ndjson$/;\nconst MEDIA_PATH_PATTERN = /^media\\/([0-9a-f]{64})$/;\nconst SHA256_HEX_PATTERN = /^[0-9a-f]{64}$/;\n\nexport type PackagePath =\n\t| { type: \"manifest\"; path: typeof MANIFEST_PATH }\n\t| { type: \"index\"; path: string; seq: number }\n\t| { type: \"records\"; path: string; kind: RecordKind; seq: number }\n\t| { type: \"media\"; path: string; sha256: string };\n\nexport function parsePackagePath(path: string): PackagePath | null {\n\tif (path === MANIFEST_PATH) return { type: \"manifest\", path };\n\tconst index = INDEX_PATH_PATTERN.exec(path);\n\tif (index) return { type: \"index\", path, seq: Number(index[1]) };\n\tconst records = RECORD_PATH_PATTERN.exec(path);\n\tif (records) {\n\t\tconst kind = records[1];\n\t\tif (!isRecordKind(kind)) return null;\n\t\treturn { type: \"records\", path, kind, seq: Number(records[2]) };\n\t}\n\tconst media = MEDIA_PATH_PATTERN.exec(path);\n\tif (media) return { type: \"media\", path, sha256: media[1] };\n\treturn null;\n}\n\nexport function isPackagePath(path: string): boolean {\n\treturn parsePackagePath(path) !== null;\n}\n\nfunction formatSeq(seq: number): string {\n\tif (!Number.isInteger(seq) || seq < 0 || seq > MAX_SEQ) {\n\t\tthrow new RangeError(`Invalid chunk sequence ${seq}`);\n\t}\n\treturn String(seq).padStart(SEQ_DIGITS, \"0\");\n}\n\nexport function indexChunkPath(seq: number): string {\n\treturn `index/${formatSeq(seq)}.ndjson`;\n}\n\nexport function recordChunkPath(kind: RecordKind, seq: number): string {\n\treturn `records/${kind}/${formatSeq(seq)}.ndjson`;\n}\n\nexport function mediaBlobPath(sha256: string): string {\n\tif (!SHA256_HEX_PATTERN.test(sha256)) throw new TypeError(\"Expected a lowercase hex SHA-256\");\n\treturn `media/${sha256}`;\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;AAmBA,MAAa,gBAAgB;AAE7B,MAAM,aAAa;AACnB,MAAM,UAAU,MAAM,aAAa;AAEnC,MAAM,qBAAqB;AAC3B,MAAM,sBAAsB;AAC5B,MAAM,qBAAqB;AAC3B,MAAM,qBAAqB;AAQ3B,SAAgB,iBAAiB,MAAkC;AAClE,KAAI,SAAS,cAAe,QAAO;EAAE,MAAM;EAAY;EAAM;CAC7D,MAAM,QAAQ,mBAAmB,KAAK,KAAK;AAC3C,KAAI,MAAO,QAAO;EAAE,MAAM;EAAS;EAAM,KAAK,OAAO,MAAM,GAAG;EAAE;CAChE,MAAM,UAAU,oBAAoB,KAAK,KAAK;AAC9C,KAAI,SAAS;EACZ,MAAM,OAAO,QAAQ;AACrB,MAAI,CAAC,aAAa,KAAK,CAAE,QAAO;AAChC,SAAO;GAAE,MAAM;GAAW;GAAM;GAAM,KAAK,OAAO,QAAQ,GAAG;GAAE;;CAEhE,MAAM,QAAQ,mBAAmB,KAAK,KAAK;AAC3C,KAAI,MAAO,QAAO;EAAE,MAAM;EAAS;EAAM,QAAQ,MAAM;EAAI;AAC3D,QAAO;;AAGR,SAAgB,cAAc,MAAuB;AACpD,QAAO,iBAAiB,KAAK,KAAK;;AAGnC,SAAS,UAAU,KAAqB;AACvC,KAAI,CAAC,OAAO,UAAU,IAAI,IAAI,MAAM,KAAK,MAAM,QAC9C,OAAM,IAAI,WAAW,0BAA0B,MAAM;AAEtD,QAAO,OAAO,IAAI,CAAC,SAAS,YAAY,IAAI;;AAG7C,SAAgB,eAAe,KAAqB;AACnD,QAAO,SAAS,UAAU,IAAI,CAAC;;AAGhC,SAAgB,gBAAgB,MAAkB,KAAqB;AACtE,QAAO,WAAW,KAAK,GAAG,UAAU,IAAI,CAAC;;AAG1C,SAAgB,cAAc,QAAwB;AACrD,KAAI,CAAC,mBAAmB,KAAK,OAAO,CAAE,OAAM,IAAI,UAAU,mCAAmC;AAC7F,QAAO,SAAS"}

package/dist/patterns-CryGz_EV.mjs

@@ -0,0 +1,159 @@
+//#region src/redirects/patterns.ts
+/**
+* URL pattern matching for redirects.
+*
+* Uses Astro's route syntax: [param] for named segments, [...rest] for catch-all.
+* Compiles patterns to safe regexes -- no user-supplied regex, no ReDoS risk.
+*
+* @example
+* ```ts
+* const compiled = compilePattern("/old-blog/[...path]");
+* const match = matchPattern(compiled, "/old-blog/2024/01/post");
+* // match = { path: "2024/01/post" }
+*
+* interpolateDestination("/blog/[...path]", match);
+* // "/blog/2024/01/post"
+* ```
+*/
+/** Matches [paramName] placeholders */
+const PARAM_PATTERN = /\[(\w+)\]/g;
+/** Matches [...splatName] placeholders */
+const SPLAT_PATTERN = /\[\.\.\.(\w+)\]/g;
+/** Combined pattern for validation: matches both [param] and [...splat] */
+const ANY_PLACEHOLDER = /\[(?:\.\.\.)?(\w+)\]/g;
+/** Nested brackets check: [foo[ */
+const NESTED_BRACKETS = /\[[^\]]*\[/;
+/** Empty brackets: [] */
+const EMPTY_BRACKETS = /\[\]/;
+/** Count open brackets */
+const OPEN_BRACKET = /\[/g;
+/** Count close brackets */
+const CLOSE_BRACKET = /\]/g;
+/** Escape regex-special characters in literal parts */
+const REGEX_SPECIAL_CHARS = /[.*+?^${}()|[\]\\]/g;
+/**
+* Returns true if a source string contains [param] or [...splat] placeholders.
+*/
+function isPattern(source) {
+	return source.match(ANY_PLACEHOLDER) !== null;
+}
+/**
+* Validate that a pattern string is well-formed.
+* Returns null if valid, or an error message if invalid.
+*/
+function validatePattern(source) {
+	if (!source.startsWith("/")) return "Pattern must start with /";
+	if (NESTED_BRACKETS.test(source)) return "Nested brackets are not allowed";
+	if (EMPTY_BRACKETS.test(source)) return "Empty brackets are not allowed";
+	if ((source.match(OPEN_BRACKET) ?? []).length !== (source.match(CLOSE_BRACKET) ?? []).length) return "Unmatched brackets";
+	const segments = source.split("/").filter(Boolean);
+	for (let i = 0; i < segments.length; i++) {
+		const segment = segments[i];
+		if (SPLAT_PATTERN.test(segment) && i !== segments.length - 1) {
+			SPLAT_PATTERN.lastIndex = 0;
+			return "Catch-all [...param] must be in the last segment";
+		}
+		SPLAT_PATTERN.lastIndex = 0;
+	}
+	for (const segment of segments) {
+		const placeholders = segment.match(ANY_PLACEHOLDER);
+		if (placeholders && placeholders.length > 1) return "Each segment can contain at most one placeholder";
+		if (placeholders && placeholders[0] !== segment) return "A placeholder must be the entire segment, not mixed with literal text";
+	}
+	const names = [];
+	for (const m of source.matchAll(ANY_PLACEHOLDER)) {
+		const name = m[1];
+		if (names.includes(name)) return `Duplicate parameter name: ${name}`;
+		names.push(name);
+	}
+	return null;
+}
+/**
+* Validate that all placeholders in a destination exist in the source.
+* Returns null if valid, or an error message if invalid.
+*/
+function validateDestinationParams(source, destination) {
+	const sourceNames = /* @__PURE__ */ new Set();
+	for (const m of source.matchAll(ANY_PLACEHOLDER)) sourceNames.add(m[1]);
+	for (const m of destination.matchAll(ANY_PLACEHOLDER)) {
+		const name = m[1];
+		if (!sourceNames.has(name)) return `Destination references [${name}] which is not captured in the source pattern`;
+	}
+	return null;
+}
+/**
+* Compile a URL pattern into a regex for matching.
+*
+* - `[param]` matches a single path segment (`[^/]+`)
+* - `[...rest]` matches one or more remaining segments (`.+`)
+*/
+function compilePattern(source) {
+	const paramNames = [];
+	let regexStr = "";
+	let literalStart = 0;
+	for (const match of source.matchAll(ANY_PLACEHOLDER)) {
+		regexStr += source.slice(literalStart, match.index).replace(REGEX_SPECIAL_CHARS, "\\$&");
+		paramNames.push(match[1]);
+		regexStr += match[0].startsWith("[...") ? "(.+)" : "([^/]+)";
+		literalStart = match.index + match[0].length;
+	}
+	regexStr += source.slice(literalStart).replace(REGEX_SPECIAL_CHARS, "\\$&");
+	return {
+		regex: new RegExp(`^${regexStr}$`),
+		paramNames,
+		source
+	};
+}
+function toggledTrailingSlash(path) {
+	if (path.length <= 1) return null;
+	return path.endsWith("/") ? path.slice(0, -1) : `${path}/`;
+}
+/**
+* Match a path against a compiled pattern.
+* Returns captured params or null if no match.
+*
+* Trailing slashes are ignored so `/category/arts/feed` and
+* `/category/arts/feed/` match the same rule, consistent with exact and
+* catch-all redirects.
+*/
+function matchPattern(compiled, path) {
+	const match = path.match(compiled.regex);
+	if (match) {
+		const params = {};
+		for (let i = 0; i < compiled.paramNames.length; i++) {
+			const value = match[i + 1];
+			if (value !== void 0) params[compiled.paramNames[i]] = value;
+		}
+		return params;
+	}
+	const alt = toggledTrailingSlash(path);
+	if (!alt) return null;
+	const altMatch = alt.match(compiled.regex);
+	if (!altMatch) return null;
+	const params = {};
+	for (let i = 0; i < compiled.paramNames.length; i++) {
+		const value = altMatch[i + 1];
+		if (value !== void 0) params[compiled.paramNames[i]] = value;
+	}
+	return params;
+}
+/**
+* Interpolate captured params into a destination pattern.
+*
+* @example
+* interpolateDestination("/blog/[...path]", { path: "2024/01/post" })
+* // "/blog/2024/01/post"
+*/
+function interpolateDestination(destination, params) {
+	let result = destination.replace(SPLAT_PATTERN, (_match, name) => {
+		return params[name] ?? "";
+	});
+	result = result.replace(PARAM_PATTERN, (_match, name) => {
+		return params[name] ?? "";
+	});
+	return result;
+}
+
+//#endregion
+export { validateDestinationParams as a, matchPattern as i, interpolateDestination as n, validatePattern as o, isPattern as r, compilePattern as t };
+//# sourceMappingURL=patterns-CryGz_EV.mjs.map

package/dist/patterns-CryGz_EV.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"patterns-CryGz_EV.mjs","names":[],"sources":["../src/redirects/patterns.ts"],"sourcesContent":["/**\n * URL pattern matching for redirects.\n *\n * Uses Astro's route syntax: [param] for named segments, [...rest] for catch-all.\n * Compiles patterns to safe regexes -- no user-supplied regex, no ReDoS risk.\n *\n * @example\n * ```ts\n * const compiled = compilePattern(\"/old-blog/[...path]\");\n * const match = matchPattern(compiled, \"/old-blog/2024/01/post\");\n * // match = { path: \"2024/01/post\" }\n *\n * interpolateDestination(\"/blog/[...path]\", match);\n * // \"/blog/2024/01/post\"\n * ```\n */\n\n/** Matches [paramName] placeholders */\nconst PARAM_PATTERN = /\\[(\\w+)\\]/g;\n\n/** Matches [...splatName] placeholders */\nconst SPLAT_PATTERN = /\\[\\.\\.\\.(\\w+)\\]/g;\n\n/** Combined pattern for validation: matches both [param] and [...splat] */\nconst ANY_PLACEHOLDER = /\\[(?:\\.\\.\\.)?(\\w+)\\]/g;\n\n/** Nested brackets check: [foo[ */\nconst NESTED_BRACKETS = /\\[[^\\]]*\\[/;\n\n/** Empty brackets: [] */\nconst EMPTY_BRACKETS = /\\[\\]/;\n\n/** Count open brackets */\nconst OPEN_BRACKET = /\\[/g;\n\n/** Count close brackets */\nconst CLOSE_BRACKET = /\\]/g;\n\n/** Escape regex-special characters in literal parts */\nconst REGEX_SPECIAL_CHARS = /[.*+?^${}()|[\\]\\\\]/g;\n\nexport interface CompiledPattern {\n\tregex: RegExp;\n\tparamNames: string[];\n\tsource: string;\n}\n\n/**\n * Returns true if a source string contains [param] or [...splat] placeholders.\n */\nexport function isPattern(source: string): boolean {\n\t// Use match() instead of test() to avoid lastIndex issues with the global regex\n\treturn source.match(ANY_PLACEHOLDER) !== null;\n}\n\n/**\n * Validate that a pattern string is well-formed.\n * Returns null if valid, or an error message if invalid.\n */\nexport function validatePattern(source: string): string | null {\n\tif (!source.startsWith(\"/\")) {\n\t\treturn \"Pattern must start with /\";\n\t}\n\n\t// Check for nested brackets\n\tif (NESTED_BRACKETS.test(source)) {\n\t\treturn \"Nested brackets are not allowed\";\n\t}\n\n\t// Check for empty brackets\n\tif (EMPTY_BRACKETS.test(source)) {\n\t\treturn \"Empty brackets are not allowed\";\n\t}\n\n\t// Check for unmatched brackets\n\tconst openCount = (source.match(OPEN_BRACKET) ?? []).length;\n\tconst closeCount = (source.match(CLOSE_BRACKET) ?? []).length;\n\tif (openCount !== closeCount) {\n\t\treturn \"Unmatched brackets\";\n\t}\n\n\t// Check that [...splat] is only in the last segment\n\tconst segments = source.split(\"/\").filter(Boolean);\n\tfor (let i = 0; i < segments.length; i++) {\n\t\tconst segment = segments[i];\n\t\tif (SPLAT_PATTERN.test(segment) && i !== segments.length - 1) {\n\t\t\tSPLAT_PATTERN.lastIndex = 0;\n\t\t\treturn \"Catch-all [...param] must be in the last segment\";\n\t\t}\n\t\tSPLAT_PATTERN.lastIndex = 0;\n\t}\n\n\t// Check that a segment is either all literal or a single placeholder\n\tfor (const segment of segments) {\n\t\tconst placeholders = segment.match(ANY_PLACEHOLDER);\n\t\tif (placeholders && placeholders.length > 1) {\n\t\t\treturn \"Each segment can contain at most one placeholder\";\n\t\t}\n\t\tif (placeholders && placeholders[0] !== segment) {\n\t\t\treturn \"A placeholder must be the entire segment, not mixed with literal text\";\n\t\t}\n\t}\n\n\t// Check for duplicate param names\n\tconst names: string[] = [];\n\tfor (const m of source.matchAll(ANY_PLACEHOLDER)) {\n\t\tconst name = m[1];\n\t\tif (names.includes(name)) {\n\t\t\treturn `Duplicate parameter name: ${name}`;\n\t\t}\n\t\tnames.push(name);\n\t}\n\n\treturn null;\n}\n\n/**\n * Validate that all placeholders in a destination exist in the source.\n * Returns null if valid, or an error message if invalid.\n */\nexport function validateDestinationParams(source: string, destination: string): string | null {\n\tconst sourceNames = new Set<string>();\n\tfor (const m of source.matchAll(ANY_PLACEHOLDER)) {\n\t\tsourceNames.add(m[1]);\n\t}\n\n\tfor (const m of destination.matchAll(ANY_PLACEHOLDER)) {\n\t\tconst name = m[1];\n\t\tif (!sourceNames.has(name)) {\n\t\t\treturn `Destination references [${name}] which is not captured in the source pattern`;\n\t\t}\n\t}\n\n\treturn null;\n}\n\n/**\n * Compile a URL pattern into a regex for matching.\n *\n * - `[param]` matches a single path segment (`[^/]+`)\n * - `[...rest]` matches one or more remaining segments (`.+`)\n */\nexport function compilePattern(source: string): CompiledPattern {\n\tconst paramNames: string[] = [];\n\tlet regexStr = \"\";\n\tlet literalStart = 0;\n\n\tfor (const match of source.matchAll(ANY_PLACEHOLDER)) {\n\t\tregexStr += source.slice(literalStart, match.index).replace(REGEX_SPECIAL_CHARS, \"\\\\$&\");\n\t\tparamNames.push(match[1]);\n\t\tregexStr += match[0].startsWith(\"[...\") ? \"(.+)\" : \"([^/]+)\";\n\t\tliteralStart = match.index + match[0].length;\n\t}\n\tregexStr += source.slice(literalStart).replace(REGEX_SPECIAL_CHARS, \"\\\\$&\");\n\n\treturn {\n\t\tregex: new RegExp(`^${regexStr}$`),\n\t\tparamNames,\n\t\tsource,\n\t};\n}\n\nfunction toggledTrailingSlash(path: string): string | null {\n\tif (path.length <= 1) return null;\n\treturn path.endsWith(\"/\") ? path.slice(0, -1) : `${path}/`;\n}\n\n/**\n * Match a path against a compiled pattern.\n * Returns captured params or null if no match.\n *\n * Trailing slashes are ignored so `/category/arts/feed` and\n * `/category/arts/feed/` match the same rule, consistent with exact and\n * catch-all redirects.\n */\nexport function matchPattern(\n\tcompiled: CompiledPattern,\n\tpath: string,\n): Record<string, string> | null {\n\tconst match = path.match(compiled.regex);\n\tif (match) {\n\t\tconst params: Record<string, string> = {};\n\t\tfor (let i = 0; i < compiled.paramNames.length; i++) {\n\t\t\tconst value = match[i + 1];\n\t\t\tif (value !== undefined) {\n\t\t\t\tparams[compiled.paramNames[i]] = value;\n\t\t\t}\n\t\t}\n\t\treturn params;\n\t}\n\n\tconst alt = toggledTrailingSlash(path);\n\tif (!alt) return null;\n\n\tconst altMatch = alt.match(compiled.regex);\n\tif (!altMatch) return null;\n\n\tconst params: Record<string, string> = {};\n\tfor (let i = 0; i < compiled.paramNames.length; i++) {\n\t\tconst value = altMatch[i + 1];\n\t\tif (value !== undefined) {\n\t\t\tparams[compiled.paramNames[i]] = value;\n\t\t}\n\t}\n\treturn params;\n}\n\n/**\n * Interpolate captured params into a destination pattern.\n *\n * @example\n * interpolateDestination(\"/blog/[...path]\", { path: \"2024/01/post\" })\n * // \"/blog/2024/01/post\"\n */\nexport function interpolateDestination(\n\tdestination: string,\n\tparams: Record<string, string>,\n): string {\n\t// Replace [...splat] first\n\tlet result = destination.replace(SPLAT_PATTERN, (_match, name: string) => {\n\t\treturn params[name] ?? \"\";\n\t});\n\n\t// Then [param]\n\tresult = result.replace(PARAM_PATTERN, (_match, name: string) => {\n\t\treturn params[name] ?? \"\";\n\t});\n\n\treturn result;\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;AAkBA,MAAM,gBAAgB;;AAGtB,MAAM,gBAAgB;;AAGtB,MAAM,kBAAkB;;AAGxB,MAAM,kBAAkB;;AAGxB,MAAM,iBAAiB;;AAGvB,MAAM,eAAe;;AAGrB,MAAM,gBAAgB;;AAGtB,MAAM,sBAAsB;;;;AAW5B,SAAgB,UAAU,QAAyB;AAElD,QAAO,OAAO,MAAM,gBAAgB,KAAK;;;;;;AAO1C,SAAgB,gBAAgB,QAA+B;AAC9D,KAAI,CAAC,OAAO,WAAW,IAAI,CAC1B,QAAO;AAIR,KAAI,gBAAgB,KAAK,OAAO,CAC/B,QAAO;AAIR,KAAI,eAAe,KAAK,OAAO,CAC9B,QAAO;AAMR,MAFmB,OAAO,MAAM,aAAa,IAAI,EAAE,EAAE,YACjC,OAAO,MAAM,cAAc,IAAI,EAAE,EAAE,OAEtD,QAAO;CAIR,MAAM,WAAW,OAAO,MAAM,IAAI,CAAC,OAAO,QAAQ;AAClD,MAAK,IAAI,IAAI,GAAG,IAAI,SAAS,QAAQ,KAAK;EACzC,MAAM,UAAU,SAAS;AACzB,MAAI,cAAc,KAAK,QAAQ,IAAI,MAAM,SAAS,SAAS,GAAG;AAC7D,iBAAc,YAAY;AAC1B,UAAO;;AAER,gBAAc,YAAY;;AAI3B,MAAK,MAAM,WAAW,UAAU;EAC/B,MAAM,eAAe,QAAQ,MAAM,gBAAgB;AACnD,MAAI,gBAAgB,aAAa,SAAS,EACzC,QAAO;AAER,MAAI,gBAAgB,aAAa,OAAO,QACvC,QAAO;;CAKT,MAAM,QAAkB,EAAE;AAC1B,MAAK,MAAM,KAAK,OAAO,SAAS,gBAAgB,EAAE;EACjD,MAAM,OAAO,EAAE;AACf,MAAI,MAAM,SAAS,KAAK,CACvB,QAAO,6BAA6B;AAErC,QAAM,KAAK,KAAK;;AAGjB,QAAO;;;;;;AAOR,SAAgB,0BAA0B,QAAgB,aAAoC;CAC7F,MAAM,8BAAc,IAAI,KAAa;AACrC,MAAK,MAAM,KAAK,OAAO,SAAS,gBAAgB,CAC/C,aAAY,IAAI,EAAE,GAAG;AAGtB,MAAK,MAAM,KAAK,YAAY,SAAS,gBAAgB,EAAE;EACtD,MAAM,OAAO,EAAE;AACf,MAAI,CAAC,YAAY,IAAI,KAAK,CACzB,QAAO,2BAA2B,KAAK;;AAIzC,QAAO;;;;;;;;AASR,SAAgB,eAAe,QAAiC;CAC/D,MAAM,aAAuB,EAAE;CAC/B,IAAI,WAAW;CACf,IAAI,eAAe;AAEnB,MAAK,MAAM,SAAS,OAAO,SAAS,gBAAgB,EAAE;AACrD,cAAY,OAAO,MAAM,cAAc,MAAM,MAAM,CAAC,QAAQ,qBAAqB,OAAO;AACxF,aAAW,KAAK,MAAM,GAAG;AACzB,cAAY,MAAM,GAAG,WAAW,OAAO,GAAG,SAAS;AACnD,iBAAe,MAAM,QAAQ,MAAM,GAAG;;AAEvC,aAAY,OAAO,MAAM,aAAa,CAAC,QAAQ,qBAAqB,OAAO;AAE3E,QAAO;EACN,OAAO,IAAI,OAAO,IAAI,SAAS,GAAG;EAClC;EACA;EACA;;AAGF,SAAS,qBAAqB,MAA6B;AAC1D,KAAI,KAAK,UAAU,EAAG,QAAO;AAC7B,QAAO,KAAK,SAAS,IAAI,GAAG,KAAK,MAAM,GAAG,GAAG,GAAG,GAAG,KAAK;;;;;;;;;;AAWzD,SAAgB,aACf,UACA,MACgC;CAChC,MAAM,QAAQ,KAAK,MAAM,SAAS,MAAM;AACxC,KAAI,OAAO;EACV,MAAM,SAAiC,EAAE;AACzC,OAAK,IAAI,IAAI,GAAG,IAAI,SAAS,WAAW,QAAQ,KAAK;GACpD,MAAM,QAAQ,MAAM,IAAI;AACxB,OAAI,UAAU,OACb,QAAO,SAAS,WAAW,MAAM;;AAGnC,SAAO;;CAGR,MAAM,MAAM,qBAAqB,KAAK;AACtC,KAAI,CAAC,IAAK,QAAO;CAEjB,MAAM,WAAW,IAAI,MAAM,SAAS,MAAM;AAC1C,KAAI,CAAC,SAAU,QAAO;CAEtB,MAAM,SAAiC,EAAE;AACzC,MAAK,IAAI,IAAI,GAAG,IAAI,SAAS,WAAW,QAAQ,KAAK;EACpD,MAAM,QAAQ,SAAS,IAAI;AAC3B,MAAI,UAAU,OACb,QAAO,SAAS,WAAW,MAAM;;AAGnC,QAAO;;;;;;;;;AAUR,SAAgB,uBACf,aACA,QACS;CAET,IAAI,SAAS,YAAY,QAAQ,gBAAgB,QAAQ,SAAiB;AACzE,SAAO,OAAO,SAAS;GACtB;AAGF,UAAS,OAAO,QAAQ,gBAAgB,QAAQ,SAAiB;AAChE,SAAO,OAAO,SAAS;GACtB;AAEF,QAAO"}