emdash 1.2.0 → 1.3.1

package/dist/transport-Ds5pVX7p.mjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"transport-Ds5pVX7p.mjs","names":[],"sources":["../src/client/transport.ts"],"sourcesContent":["/**\n * Transport layer for the EmDash client.\n *\n * Implements a composable interceptor pipeline that modifies requests\n * and responses. The client calls `transport.fetch(request)` — everything\n * else (auth, CSRF, retry) is handled by interceptors.\n */\n\n// Regex patterns for transport utilities\nconst COOKIE_NAME_VALUE_PATTERN = /^([^;]+)/;\n\n/**\n * An interceptor can modify the request, call next(), inspect\n * the response, and optionally retry.\n */\nexport type Interceptor = (\n\trequest: Request,\n\tnext: (request: Request) => Promise<Response>,\n) => Promise<Response>;\n\nexport interface TransportOptions {\n\tinterceptors?: Interceptor[];\n}\n\nfunction baseFetch(request: Request): Promise<Response> {\n\treturn globalThis.fetch(request);\n}\n\n/**\n * Creates a fetch function that runs requests through an interceptor pipeline.\n */\nexport function createTransport(options: TransportOptions = {}): {\n\tfetch: (request: Request) => Promise<Response>;\n} {\n\tconst interceptors = options.interceptors ?? [];\n\n\t// Build the chain once — interceptors don't change after construction\n\tlet chain: (request: Request) => Promise<Response> = baseFetch;\n\tfor (let i = interceptors.length - 1; i >= 0; i--) {\n\t\tconst interceptor = interceptors[i];\n\t\tconst next = chain;\n\t\tchain = (req) => interceptor(req, next);\n\t}\n\n\treturn { fetch: chain };\n}\n\n// ---------------------------------------------------------------------------\n// Built-in interceptors\n// ---------------------------------------------------------------------------\n\n/**\n * Adds X-EmDash-Request: 1 and Origin headers to mutation requests\n * (POST, PUT, DELETE). The custom header satisfies EmDash's CSRF check;\n * the Origin header satisfies Astro's built-in origin verification which\n * rejects server-side POST requests that lack a matching Origin.\n */\nexport function csrfInterceptor(): Interceptor {\n\tconst MUTATION_METHODS = new Set([\"POST\", \"PUT\", \"DELETE\", \"PATCH\"]);\n\n\treturn (request, next) => {\n\t\tif (MUTATION_METHODS.has(request.method)) {\n\t\t\tconst headers = new Headers(request.headers);\n\t\t\theaders.set(\"X-EmDash-Request\", \"1\");\n\t\t\tif (!headers.has(\"Origin\")) {\n\t\t\t\tconst url = new URL(request.url);\n\t\t\t\theaders.set(\"Origin\", url.origin);\n\t\t\t}\n\t\t\treturn next(new Request(request, { headers }));\n\t\t}\n\t\treturn next(request);\n\t};\n}\n\n/**\n * Adds Authorization: Bearer header from a static token.\n */\nexport function tokenInterceptor(token: string): Interceptor {\n\treturn (request, next) => {\n\t\tconst headers = new Headers(request.headers);\n\t\theaders.set(\"Authorization\", `Bearer ${token}`);\n\t\treturn next(new Request(request, { headers }));\n\t};\n}\n\n/**\n * Dev bypass interceptor. Calls the dev-bypass endpoint on first request\n * to establish a session, then forwards the session cookie on subsequent\n * requests.\n */\nexport function devBypassInterceptor(baseUrl: string): Interceptor {\n\tlet sessionCookie: string | null = null;\n\tlet initializing: Promise<void> | null = null;\n\n\tasync function init(): Promise<void> {\n\t\tconst bypassUrl = new URL(\"/_emdash/api/auth/dev-bypass\", baseUrl);\n\t\tconst res = await globalThis.fetch(bypassUrl, { redirect: \"manual\" });\n\n\t\t// Extract session cookie from Set-Cookie header\n\t\tconst setCookie = res.headers.get(\"set-cookie\");\n\t\tif (setCookie) {\n\t\t\t// Extract just the cookie name=value part\n\t\t\tconst match = setCookie.match(COOKIE_NAME_VALUE_PATTERN);\n\t\t\tif (match) {\n\t\t\t\tsessionCookie = match[1]!;\n\t\t\t}\n\t\t}\n\n\t\t// Consume the response body\n\t\tif (res.body) {\n\t\t\tawait res.text().catch(() => {});\n\t\t}\n\t}\n\n\treturn async (request, next) => {\n\t\t// Ensure we've initialized (only once, even with concurrent requests)\n\t\tif (!sessionCookie) {\n\t\t\tif (!initializing) {\n\t\t\t\tinitializing = init();\n\t\t\t}\n\t\t\tawait initializing;\n\t\t}\n\n\t\tif (sessionCookie) {\n\t\t\tconst headers = new Headers(request.headers);\n\t\t\tconst existing = headers.get(\"cookie\");\n\t\t\theaders.set(\"cookie\", existing ? `${existing}; ${sessionCookie}` : sessionCookie);\n\t\t\treturn next(new Request(request, { headers }));\n\t\t}\n\n\t\treturn next(request);\n\t};\n}\n\n/**\n * Auto-refreshes expired OAuth tokens on 401 responses.\n * Requires a refresh token and the token endpoint URL.\n */\nexport function refreshInterceptor(options: {\n\trefreshToken: string;\n\ttokenEndpoint: string;\n\tonTokenRefreshed?: (accessToken: string, refreshToken: string, expiresAt: string) => void;\n}): Interceptor {\n\tlet refreshing: Promise<string | null> | null = null;\n\n\tasync function refresh(): Promise<string | null> {\n\t\tconst res = await globalThis.fetch(options.tokenEndpoint, {\n\t\t\tmethod: \"POST\",\n\t\t\theaders: { \"Content-Type\": \"application/json\" },\n\t\t\tbody: JSON.stringify({\n\t\t\t\tgrant_type: \"refresh_token\",\n\t\t\t\trefresh_token: options.refreshToken,\n\t\t\t}),\n\t\t});\n\n\t\tif (!res.ok) return null;\n\n\t\tinterface TokenFields {\n\t\t\taccess_token: string;\n\t\t\trefresh_token?: string;\n\t\t\texpires_in?: number;\n\t\t}\n\n\t\tconst json = (await res.json()) as Record<string, unknown>;\n\n\t\t// The token endpoint wraps the response in { success, data: ... } via apiSuccess.\n\t\t// Handle both wrapped and bare shapes for robustness.\n\t\tconst tokenData: TokenFields =\n\t\t\tjson.data && typeof json.data === \"object\" && \"access_token\" in json.data\n\t\t\t\t? (json.data as TokenFields)\n\t\t\t\t: (json as unknown as TokenFields);\n\n\t\tconst expiresAt = tokenData.expires_in\n\t\t\t? new Date(Date.now() + tokenData.expires_in * 1000).toISOString()\n\t\t\t: new Date(Date.now() + 3600_000).toISOString();\n\n\t\tif (options.onTokenRefreshed) {\n\t\t\toptions.onTokenRefreshed(\n\t\t\t\ttokenData.access_token,\n\t\t\t\ttokenData.refresh_token ?? options.refreshToken,\n\t\t\t\texpiresAt,\n\t\t\t);\n\t\t}\n\n\t\treturn tokenData.access_token;\n\t}\n\n\treturn async (request, next) => {\n\t\t// A request body can only be read once; clone before sending so the\n\t\t// 401 retry has an unconsumed request to rebuild from.\n\t\tconst retryTemplate = request.body ? request.clone() : request;\n\n\t\tconst response = await next(request);\n\n\t\tif (response.status === 401) {\n\t\t\t// Try to refresh\n\t\t\tif (!refreshing) {\n\t\t\t\trefreshing = refresh().finally(() => {\n\t\t\t\t\trefreshing = null;\n\t\t\t\t});\n\t\t\t}\n\n\t\t\tconst newToken = await refreshing;\n\t\t\tif (newToken) {\n\t\t\t\t// Retry with new token\n\t\t\t\tconst headers = new Headers(retryTemplate.headers);\n\t\t\t\theaders.set(\"Authorization\", `Bearer ${newToken}`);\n\t\t\t\treturn next(new Request(retryTemplate, { headers }));\n\t\t\t}\n\t\t}\n\n\t\treturn response;\n\t};\n}\n"],"mappings":";;;;;;;;AASA,MAAM,4BAA4B;AAelC,SAAS,UAAU,SAAqC;AACvD,QAAO,WAAW,MAAM,QAAQ;;;;;AAMjC,SAAgB,gBAAgB,UAA4B,EAAE,EAE5D;CACD,MAAM,eAAe,QAAQ,gBAAgB,EAAE;CAG/C,IAAI,QAAiD;AACrD,MAAK,IAAI,IAAI,aAAa,SAAS,GAAG,KAAK,GAAG,KAAK;EAClD,MAAM,cAAc,aAAa;EACjC,MAAM,OAAO;AACb,WAAS,QAAQ,YAAY,KAAK,KAAK;;AAGxC,QAAO,EAAE,OAAO,OAAO;;;;;;;;AAaxB,SAAgB,kBAA+B;CAC9C,MAAM,mBAAmB,IAAI,IAAI;EAAC;EAAQ;EAAO;EAAU;EAAQ,CAAC;AAEpE,SAAQ,SAAS,SAAS;AACzB,MAAI,iBAAiB,IAAI,QAAQ,OAAO,EAAE;GACzC,MAAM,UAAU,IAAI,QAAQ,QAAQ,QAAQ;AAC5C,WAAQ,IAAI,oBAAoB,IAAI;AACpC,OAAI,CAAC,QAAQ,IAAI,SAAS,EAAE;IAC3B,MAAM,MAAM,IAAI,IAAI,QAAQ,IAAI;AAChC,YAAQ,IAAI,UAAU,IAAI,OAAO;;AAElC,UAAO,KAAK,IAAI,QAAQ,SAAS,EAAE,SAAS,CAAC,CAAC;;AAE/C,SAAO,KAAK,QAAQ;;;;;;AAOtB,SAAgB,iBAAiB,OAA4B;AAC5D,SAAQ,SAAS,SAAS;EACzB,MAAM,UAAU,IAAI,QAAQ,QAAQ,QAAQ;AAC5C,UAAQ,IAAI,iBAAiB,UAAU,QAAQ;AAC/C,SAAO,KAAK,IAAI,QAAQ,SAAS,EAAE,SAAS,CAAC,CAAC;;;;;;;;AAShD,SAAgB,qBAAqB,SAA8B;CAClE,IAAI,gBAA+B;CACnC,IAAI,eAAqC;CAEzC,eAAe,OAAsB;EACpC,MAAM,YAAY,IAAI,IAAI,gCAAgC,QAAQ;EAClE,MAAM,MAAM,MAAM,WAAW,MAAM,WAAW,EAAE,UAAU,UAAU,CAAC;EAGrE,MAAM,YAAY,IAAI,QAAQ,IAAI,aAAa;AAC/C,MAAI,WAAW;GAEd,MAAM,QAAQ,UAAU,MAAM,0BAA0B;AACxD,OAAI,MACH,iBAAgB,MAAM;;AAKxB,MAAI,IAAI,KACP,OAAM,IAAI,MAAM,CAAC,YAAY,GAAG;;AAIlC,QAAO,OAAO,SAAS,SAAS;AAE/B,MAAI,CAAC,eAAe;AACnB,OAAI,CAAC,aACJ,gBAAe,MAAM;AAEtB,SAAM;;AAGP,MAAI,eAAe;GAClB,MAAM,UAAU,IAAI,QAAQ,QAAQ,QAAQ;GAC5C,MAAM,WAAW,QAAQ,IAAI,SAAS;AACtC,WAAQ,IAAI,UAAU,WAAW,GAAG,SAAS,IAAI,kBAAkB,cAAc;AACjF,UAAO,KAAK,IAAI,QAAQ,SAAS,EAAE,SAAS,CAAC,CAAC;;AAG/C,SAAO,KAAK,QAAQ;;;;;;;AAQtB,SAAgB,mBAAmB,SAInB;CACf,IAAI,aAA4C;CAEhD,eAAe,UAAkC;EAChD,MAAM,MAAM,MAAM,WAAW,MAAM,QAAQ,eAAe;GACzD,QAAQ;GACR,SAAS,EAAE,gBAAgB,oBAAoB;GAC/C,MAAM,KAAK,UAAU;IACpB,YAAY;IACZ,eAAe,QAAQ;IACvB,CAAC;GACF,CAAC;AAEF,MAAI,CAAC,IAAI,GAAI,QAAO;EAQpB,MAAM,OAAQ,MAAM,IAAI,MAAM;EAI9B,MAAM,YACL,KAAK,QAAQ,OAAO,KAAK,SAAS,YAAY,kBAAkB,KAAK,OACjE,KAAK,OACL;EAEL,MAAM,YAAY,UAAU,aACzB,IAAI,KAAK,KAAK,KAAK,GAAG,UAAU,aAAa,IAAK,CAAC,aAAa,GAChE,IAAI,KAAK,KAAK,KAAK,GAAG,KAAS,CAAC,aAAa;AAEhD,MAAI,QAAQ,iBACX,SAAQ,iBACP,UAAU,cACV,UAAU,iBAAiB,QAAQ,cACnC,UACA;AAGF,SAAO,UAAU;;AAGlB,QAAO,OAAO,SAAS,SAAS;EAG/B,MAAM,gBAAgB,QAAQ,OAAO,QAAQ,OAAO,GAAG;EAEvD,MAAM,WAAW,MAAM,KAAK,QAAQ;AAEpC,MAAI,SAAS,WAAW,KAAK;AAE5B,OAAI,CAAC,WACJ,cAAa,SAAS,CAAC,cAAc;AACpC,iBAAa;KACZ;GAGH,MAAM,WAAW,MAAM;AACvB,OAAI,UAAU;IAEb,MAAM,UAAU,IAAI,QAAQ,cAAc,QAAQ;AAClD,YAAQ,IAAI,iBAAiB,UAAU,WAAW;AAClD,WAAO,KAAK,IAAI,QAAQ,eAAe,EAAE,SAAS,CAAC,CAAC;;;AAItD,SAAO"}

package/dist/trusted-proxy-d4Tk6biT.mjs

@@ -1,51 +0,0 @@
-//#region src/auth/trusted-proxy.ts
-/**
-* RFC 7230 token — valid characters for an HTTP header name. Invalid names
-* passed to `Headers.get()` throw a TypeError at runtime, which would
-* otherwise surface as a 500 from every auth route.
-*/
-const HEADER_NAME_PATTERN = /^[!#$%&'*+\-.^_`|~0-9a-z]+$/;
-/**
-* Normalise a list of header names the way both the config path and any
-* caller passing a pre-resolved list should do: trim, lowercase, drop
-* empty, drop anything that isn't a valid RFC 7230 token. Invalid names
-* would crash `Headers.get()` at runtime.
-*/
-function normalizeTrustedHeaders(names) {
-	return names.map((h) => h.trim().toLowerCase()).filter((h) => h.length > 0 && HEADER_NAME_PATTERN.test(h));
-}
-function isValidHeaderName(name) {
-	return HEADER_NAME_PATTERN.test(name);
-}
-/** Cache for the env-derived value. `null` means "not yet parsed". */
-let _envCache = null;
-function getEnvTrustedHeaders() {
-	if (_envCache !== null) return _envCache;
-	let raw;
-	try {
-		const importMetaEnv = import.meta.env;
-		raw = (typeof process !== "undefined" ? process.env?.EMDASH_TRUSTED_PROXY_HEADERS : void 0) || importMetaEnv?.EMDASH_TRUSTED_PROXY_HEADERS;
-	} catch {
-		raw = void 0;
-	}
-	if (!raw) {
-		_envCache = [];
-		return _envCache;
-	}
-	_envCache = raw.split(",").map((s) => s.trim().toLowerCase()).filter((s) => s.length > 0 && isValidHeaderName(s));
-	return _envCache;
-}
-/**
-* Return the lowercased list of headers to trust for client-IP resolution.
-*
-* When `config?.trustedProxyHeaders` is explicitly set (even to `[]`), it
-* wins. Otherwise fall through to the env var, then to `[]`.
-*/
-function getTrustedProxyHeaders(config) {
-	if (config && config.trustedProxyHeaders !== void 0) return config.trustedProxyHeaders.map((h) => h.trim().toLowerCase()).filter((h) => h.length > 0 && isValidHeaderName(h));
-	return getEnvTrustedHeaders();
-}
-
-//#endregion
-export { normalizeTrustedHeaders as n, getTrustedProxyHeaders as t };
-//# sourceMappingURL=trusted-proxy-d4Tk6biT.mjs.map

package/dist/trusted-proxy-d4Tk6biT.mjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"trusted-proxy-d4Tk6biT.mjs","names":[],"sources":["../src/auth/trusted-proxy.ts"],"sourcesContent":["/**\n * Resolve the list of client-IP headers the operator trusts.\n *\n * Resolution order:\n *   1. `config.trustedProxyHeaders` — explicit opt-in via astro.config.mjs.\n *      An empty array is respected (means \"trust nothing, ignore env\").\n *   2. `EMDASH_TRUSTED_PROXY_HEADERS` env var — comma-separated header names.\n *   3. `[]` — default, no trusted headers.\n *\n * Operators must only set this when they control the reverse proxy.\n * Untrusted clients can set any header they like; trusting headers from\n * an open network defeats rate limiting.\n *\n * Header names are returned lowercased because HTTP header lookups are\n * case-insensitive.\n */\n\nimport type { EmDashConfig } from \"../astro/integration/runtime.js\";\n\n/**\n * RFC 7230 token — valid characters for an HTTP header name. Invalid names\n * passed to `Headers.get()` throw a TypeError at runtime, which would\n * otherwise surface as a 500 from every auth route.\n */\nconst HEADER_NAME_PATTERN = /^[!#$%&'*+\\-.^_`|~0-9a-z]+$/;\n\n/**\n * Normalise a list of header names the way both the config path and any\n * caller passing a pre-resolved list should do: trim, lowercase, drop\n * empty, drop anything that isn't a valid RFC 7230 token. Invalid names\n * would crash `Headers.get()` at runtime.\n */\nexport function normalizeTrustedHeaders(names: readonly string[]): string[] {\n\treturn names\n\t\t.map((h) => h.trim().toLowerCase())\n\t\t.filter((h) => h.length > 0 && HEADER_NAME_PATTERN.test(h));\n}\n\nfunction isValidHeaderName(name: string): boolean {\n\treturn HEADER_NAME_PATTERN.test(name);\n}\n\n/** Cache for the env-derived value. `null` means \"not yet parsed\". */\nlet _envCache: string[] | null = null;\n\n/** Test-only: clear the env cache so a fresh value is read on next call. */\nexport function _resetTrustedProxyHeadersCache(): void {\n\t_envCache = null;\n}\n\nfunction getEnvTrustedHeaders(): string[] {\n\tif (_envCache !== null) return _envCache;\n\tlet raw: string | undefined;\n\ttry {\n\t\t// Prefer process.env so SSR/container deployments can override this\n\t\t// value at runtime (Vite/Astro inline import.meta.env at build time,\n\t\t// which locks the value into the bundle). Fall back to import.meta.env\n\t\t// for bundler-managed environments where process.env isn't populated.\n\t\t// eslint-disable-next-line typescript/no-unsafe-type-assertion -- import.meta.env shape varies by bundler\n\t\tconst importMetaEnv = (import.meta as unknown as { env?: Record<string, string | undefined> })\n\t\t\t.env;\n\t\traw =\n\t\t\t(typeof process !== \"undefined\" ? process.env?.EMDASH_TRUSTED_PROXY_HEADERS : undefined) ||\n\t\t\timportMetaEnv?.EMDASH_TRUSTED_PROXY_HEADERS;\n\t} catch {\n\t\traw = undefined;\n\t}\n\tif (!raw) {\n\t\t_envCache = [];\n\t\treturn _envCache;\n\t}\n\t_envCache = raw\n\t\t.split(\",\")\n\t\t.map((s) => s.trim().toLowerCase())\n\t\t.filter((s) => s.length > 0 && isValidHeaderName(s));\n\treturn _envCache;\n}\n\n/**\n * Return the lowercased list of headers to trust for client-IP resolution.\n *\n * When `config?.trustedProxyHeaders` is explicitly set (even to `[]`), it\n * wins. Otherwise fall through to the env var, then to `[]`.\n */\nexport function getTrustedProxyHeaders(config: EmDashConfig | null | undefined): string[] {\n\tif (config && config.trustedProxyHeaders !== undefined) {\n\t\treturn config.trustedProxyHeaders\n\t\t\t.map((h) => h.trim().toLowerCase())\n\t\t\t.filter((h) => h.length > 0 && isValidHeaderName(h));\n\t}\n\treturn getEnvTrustedHeaders();\n}\n"],"mappings":";;;;;;AAwBA,MAAM,sBAAsB;;;;;;;AAQ5B,SAAgB,wBAAwB,OAAoC;AAC3E,QAAO,MACL,KAAK,MAAM,EAAE,MAAM,CAAC,aAAa,CAAC,CAClC,QAAQ,MAAM,EAAE,SAAS,KAAK,oBAAoB,KAAK,EAAE,CAAC;;AAG7D,SAAS,kBAAkB,MAAuB;AACjD,QAAO,oBAAoB,KAAK,KAAK;;;AAItC,IAAI,YAA6B;AAOjC,SAAS,uBAAiC;AACzC,KAAI,cAAc,KAAM,QAAO;CAC/B,IAAI;AACJ,KAAI;EAMH,MAAM,gBAAiB,OAAO,KAC5B;AACF,SACE,OAAO,YAAY,cAAc,QAAQ,KAAK,+BAA+B,WAC9E,eAAe;SACT;AACP,QAAM;;AAEP,KAAI,CAAC,KAAK;AACT,cAAY,EAAE;AACd,SAAO;;AAER,aAAY,IACV,MAAM,IAAI,CACV,KAAK,MAAM,EAAE,MAAM,CAAC,aAAa,CAAC,CAClC,QAAQ,MAAM,EAAE,SAAS,KAAK,kBAAkB,EAAE,CAAC;AACrD,QAAO;;;;;;;;AASR,SAAgB,uBAAuB,QAAmD;AACzF,KAAI,UAAU,OAAO,wBAAwB,OAC5C,QAAO,OAAO,oBACZ,KAAK,MAAM,EAAE,MAAM,CAAC,aAAa,CAAC,CAClC,QAAQ,MAAM,EAAE,SAAS,KAAK,kBAAkB,EAAE,CAAC;AAEtD,QAAO,sBAAsB"}

package/dist/turnstile-DaFLtyrs.mjs

@@ -1,58 +0,0 @@
-//#region src/comments/turnstile.ts
-/**
-* Server-side Turnstile verification for public comment submissions.
-*
-* The comment form widget (`CommentForm.astro`) submits a `turnstileToken`;
-* this verifies it against Cloudflare's siteverify API. Enforcement is
-* opt-in: it only runs when the operator configures the Turnstile secret
-* key (`EMDASH_TURNSTILE_SECRET_KEY` or `TURNSTILE_SECRET_KEY`), so
-* existing non-Turnstile sites are unaffected.
-*
-* Mirrors `verifyTurnstile` in `@emdash-cms/plugin-forms` (not imported —
-* core doesn't depend on plugin packages).
-*/
-const SITEVERIFY_URL = "https://challenges.cloudflare.com/turnstile/v0/siteverify";
-/**
-* Resolve the configured Turnstile secret key, or `""` when Turnstile
-* enforcement is not configured.
-*
-* Reads `process.env` only: Vite replaces `import.meta.env` at build time,
-* which would bake a build-machine secret into the bundle and hide a secret
-* set on the deployment platform.
-*/
-function getTurnstileSecretKey() {
-	const env = typeof process !== "undefined" && process.env ? process.env : {};
-	return env.EMDASH_TURNSTILE_SECRET_KEY || env.TURNSTILE_SECRET_KEY || "";
-}
-/**
-* Verify a Turnstile response token via siteverify.
-*
-* Fails closed: a missing token, a failed verification, and a siteverify
-* transport error all return `false` — when the operator has configured a
-* secret, an unverifiable submission must not be persisted.
-*/
-async function verifyTurnstileToken(token, secretKey, remoteIp) {
-	if (!token) return false;
-	const body = {
-		secret: secretKey,
-		response: token
-	};
-	if (remoteIp) body.remoteip = remoteIp;
-	try {
-		const data = await (await fetch(SITEVERIFY_URL, {
-			method: "POST",
-			headers: { "Content-Type": "application/json" },
-			body: JSON.stringify(body),
-			signal: AbortSignal.timeout(1e4)
-		})).json();
-		if (!data.success) console.warn("[comments] Turnstile verification failed:", data["error-codes"] ?? []);
-		return data.success === true;
-	} catch (error) {
-		console.error("[comments] Turnstile siteverify request failed:", error instanceof Error ? error.message : error);
-		return false;
-	}
-}
-
-//#endregion
-export { getTurnstileSecretKey, verifyTurnstileToken };
-//# sourceMappingURL=turnstile-DaFLtyrs.mjs.map

package/dist/turnstile-DaFLtyrs.mjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"turnstile-DaFLtyrs.mjs","names":[],"sources":["../src/comments/turnstile.ts"],"sourcesContent":["/**\n * Server-side Turnstile verification for public comment submissions.\n *\n * The comment form widget (`CommentForm.astro`) submits a `turnstileToken`;\n * this verifies it against Cloudflare's siteverify API. Enforcement is\n * opt-in: it only runs when the operator configures the Turnstile secret\n * key (`EMDASH_TURNSTILE_SECRET_KEY` or `TURNSTILE_SECRET_KEY`), so\n * existing non-Turnstile sites are unaffected.\n *\n * Mirrors `verifyTurnstile` in `@emdash-cms/plugin-forms` (not imported —\n * core doesn't depend on plugin packages).\n */\n\nconst SITEVERIFY_URL = \"https://challenges.cloudflare.com/turnstile/v0/siteverify\";\n\n/**\n * Resolve the configured Turnstile secret key, or `\"\"` when Turnstile\n * enforcement is not configured.\n *\n * Reads `process.env` only: Vite replaces `import.meta.env` at build time,\n * which would bake a build-machine secret into the bundle and hide a secret\n * set on the deployment platform.\n */\nexport function getTurnstileSecretKey(): string {\n\tconst env = typeof process !== \"undefined\" && process.env ? process.env : {};\n\treturn env.EMDASH_TURNSTILE_SECRET_KEY || env.TURNSTILE_SECRET_KEY || \"\";\n}\n\n/**\n * Verify a Turnstile response token via siteverify.\n *\n * Fails closed: a missing token, a failed verification, and a siteverify\n * transport error all return `false` — when the operator has configured a\n * secret, an unverifiable submission must not be persisted.\n */\nexport async function verifyTurnstileToken(\n\ttoken: string | undefined,\n\tsecretKey: string,\n\tremoteIp?: string | null,\n): Promise<boolean> {\n\tif (!token) return false;\n\n\tconst body: Record<string, string> = { secret: secretKey, response: token };\n\tif (remoteIp) {\n\t\tbody.remoteip = remoteIp;\n\t}\n\n\ttry {\n\t\tconst res = await fetch(SITEVERIFY_URL, {\n\t\t\tmethod: \"POST\",\n\t\t\theaders: { \"Content-Type\": \"application/json\" },\n\t\t\tbody: JSON.stringify(body),\n\t\t\t// Fail closed *quickly* if siteverify is slow — without a timeout\n\t\t\t// the comment POST would hang until the runtime kills it\n\t\t\tsignal: AbortSignal.timeout(10_000),\n\t\t});\n\t\tconst data: { success?: boolean; \"error-codes\"?: string[] } = await res.json();\n\t\tif (!data.success) {\n\t\t\tconsole.warn(\"[comments] Turnstile verification failed:\", data[\"error-codes\"] ?? []);\n\t\t}\n\t\treturn data.success === true;\n\t} catch (error) {\n\t\tconsole.error(\n\t\t\t\"[comments] Turnstile siteverify request failed:\",\n\t\t\terror instanceof Error ? error.message : error,\n\t\t);\n\t\treturn false;\n\t}\n}\n"],"mappings":";;;;;;;;;;;;;AAaA,MAAM,iBAAiB;;;;;;;;;AAUvB,SAAgB,wBAAgC;CAC/C,MAAM,MAAM,OAAO,YAAY,eAAe,QAAQ,MAAM,QAAQ,MAAM,EAAE;AAC5E,QAAO,IAAI,+BAA+B,IAAI,wBAAwB;;;;;;;;;AAUvE,eAAsB,qBACrB,OACA,WACA,UACmB;AACnB,KAAI,CAAC,MAAO,QAAO;CAEnB,MAAM,OAA+B;EAAE,QAAQ;EAAW,UAAU;EAAO;AAC3E,KAAI,SACH,MAAK,WAAW;AAGjB,KAAI;EASH,MAAM,OAAwD,OARlD,MAAM,MAAM,gBAAgB;GACvC,QAAQ;GACR,SAAS,EAAE,gBAAgB,oBAAoB;GAC/C,MAAM,KAAK,UAAU,KAAK;GAG1B,QAAQ,YAAY,QAAQ,IAAO;GACnC,CAAC,EACsE,MAAM;AAC9E,MAAI,CAAC,KAAK,QACT,SAAQ,KAAK,6CAA6C,KAAK,kBAAkB,EAAE,CAAC;AAErF,SAAO,KAAK,YAAY;UAChB,OAAO;AACf,UAAQ,MACP,mDACA,iBAAiB,QAAQ,MAAM,UAAU,MACzC;AACD,SAAO"}

package/dist/types-B4-1P2DK.d.mts

@@ -1,227 +0,0 @@
-//#region src/storage/types.d.ts
-/**
- * Storage Layer Types
- *
- * Defines the interface for S3-compatible storage backends.
- * Works with R2, AWS S3, Minio, and other S3-compatible services.
- */
-/**
- * Storage configuration for S3-compatible backends
- */
-interface S3StorageConfig {
-  /** S3 endpoint URL (e.g., "https://xxx.r2.cloudflarestorage.com") */
-  endpoint: string;
-  /** Bucket name */
-  bucket: string;
-  /**
-   * AWS access key ID.
-   * May be resolved from the `S3_ACCESS_KEY_ID` env var at runtime on Node.
-   * Must be provided together with `secretAccessKey`, or both omitted.
-   */
-  accessKeyId?: string;
-  /**
-   * AWS secret access key.
-   * May be resolved from the `S3_SECRET_ACCESS_KEY` env var at runtime on Node.
-   * Must be provided together with `accessKeyId`, or both omitted.
-   */
-  secretAccessKey?: string;
-  /** Optional region (defaults to "auto") */
-  region?: string;
-  /** Optional public URL prefix for generated URLs (e.g., CDN URL) */
-  publicUrl?: string;
-}
-/**
- * Local filesystem storage for development
- */
-interface LocalStorageConfig {
-  /** Directory path for storing files */
-  directory: string;
-  /** Base URL for serving files */
-  baseUrl: string;
-}
-/**
- * Storage adapter descriptor (serializable config)
- */
-interface StorageDescriptor {
-  /** Module path exporting createStorage function */
-  entrypoint: string;
-  /** Serializable config passed to createStorage at runtime */
-  config: Record<string, unknown>;
-}
-/**
- * Factory function signature for storage adapters
- *
- * Each adapter accesses its own bindings directly:
- * - R2: imports from cloudflare:workers
- * - S3: uses credentials from config
- * - Local: uses filesystem path from config
- */
-type CreateStorageFn = (config: Record<string, unknown>) => Storage;
-/**
- * Upload result
- */
-interface UploadResult {
-  /** Storage key (path within bucket) */
-  key: string;
-  /** Public URL to access the file */
-  url: string;
-  /** File size in bytes */
-  size: number;
-}
-/**
- * A single byte range of a file, as requested by an HTTP `Range` header
- */
-type ByteRange = /** `length` bytes from `offset`, or every byte from `offset` when `length` is omitted */{
-  offset: number;
-  length?: number;
-} /** The last `suffix` bytes */ | {
-  suffix: number;
-};
-/**
- * Options for downloading a file
- */
-interface DownloadOptions {
-  /**
-   * Download only this part of the file. Adapters that can't serve it,
-   * including when it starts past the end of the file, return the whole file.
-   */
-  range?: ByteRange;
-}
-/**
- * Download result
- */
-interface DownloadResult {
-  /** File content as readable stream */
-  body: ReadableStream<Uint8Array>;
-  /** MIME type */
-  contentType: string;
-  /** Size of the whole file in bytes, even when `body` holds only part of it */
-  size: number;
-  /**
-   * The part of the file `body` holds, when the adapter served
-   * `DownloadOptions.range`. Absent when `body` is the whole file.
-   */
-  range?: {
-    offset: number;
-    length: number;
-  };
-  /** Last modification time of the stored object, when the backend can provide it. */
-  lastModified?: Date;
-}
-/**
- * Signed URL for direct upload
- */
-interface SignedUploadUrl {
-  /** Signed URL for PUT request */
-  url: string;
-  /** HTTP method (always PUT) */
-  method: "PUT";
-  /** Headers to include in the upload request */
-  headers: Record<string, string>;
-  /** URL expiration time (ISO string) */
-  expiresAt: string;
-}
-/**
- * Options for generating signed upload URL
- */
-interface SignedUploadOptions {
-  /** Storage key (path within bucket) */
-  key: string;
-  /** MIME type of the file */
-  contentType: string;
-  /** File size in bytes (for content-length validation) */
-  size?: number;
-  /** URL expiration in seconds (default: 3600) */
-  expiresIn?: number;
-}
-/**
- * File listing result
- */
-interface ListResult {
-  /** List of files */
-  files: FileInfo[];
-  /** Cursor for next page (if more results) */
-  nextCursor?: string;
-}
-/**
- * File info from listing
- */
-interface FileInfo {
-  /** Storage key */
-  key: string;
-  /** File size in bytes */
-  size: number;
-  /** Last modified date */
-  lastModified: Date;
-  /** ETag (content hash) */
-  etag?: string;
-}
-/**
- * Options for listing files
- */
-interface ListOptions {
-  /** Filter by key prefix */
-  prefix?: string;
-  /** Maximum results per page */
-  limit?: number;
-  /** Cursor from previous list call */
-  cursor?: string;
-}
-/**
- * Storage interface
- *
- * All storage backends must implement this interface.
- */
-interface Storage {
-  /**
-   * Upload a file to storage
-   */
-  upload(options: {
-    key: string;
-    body: Buffer | Uint8Array | ReadableStream<Uint8Array>;
-    contentType: string; /** Optional HTTP cache policy stored with publicly served objects. */
-    cacheControl?: string;
-  }): Promise<UploadResult>;
-  /**
-   * Download a file from storage, or part of it with `options.range`
-   */
-  download(key: string, options?: DownloadOptions): Promise<DownloadResult>;
-  /**
-   * Delete a file from storage
-   * Idempotent - does not throw if file doesn't exist
-   */
-  delete(key: string): Promise<void>;
-  /**
-   * Check if a file exists
-   */
-  exists(key: string): Promise<boolean>;
-  /**
-   * List files in storage
-   */
-  list(options?: ListOptions): Promise<ListResult>;
-  /**
-   * Generate a signed URL for direct upload
-   * Client uploads directly to storage, bypassing the server
-   */
-  getSignedUploadUrl(options: SignedUploadOptions): Promise<SignedUploadUrl>;
-  /**
-   * Get public URL for a file
-   */
-  getPublicUrl(key: string): string;
-  /**
-   * Get the origin the browser connects to for direct client uploads.
-   * Used by the admin CSP when the storage descriptor has no static endpoint.
-   */
-  getClientUploadOrigin?(): string;
-}
-/**
- * Storage error with additional context
- */
-declare class EmDashStorageError extends Error {
-  code: string;
-  cause?: unknown | undefined;
-  constructor(message: string, code: string, cause?: unknown | undefined);
-}
-//#endregion
-export { EmDashStorageError as a, ListResult as c, SignedUploadOptions as d, SignedUploadUrl as f, UploadResult as h, DownloadResult as i, LocalStorageConfig as l, StorageDescriptor as m, CreateStorageFn as n, FileInfo as o, Storage as p, DownloadOptions as r, ListOptions as s, ByteRange as t, S3StorageConfig as u };
-//# sourceMappingURL=types-B4-1P2DK.d.mts.map

package/dist/types-B4-1P2DK.d.mts.map

@@ -1 +0,0 @@
-{"version":3,"file":"types-B4-1P2DK.d.mts","names":[],"sources":["../src/storage/types.ts"],"mappings":";;AAUA;;;;;;;;UAAiB,eAAA;EAoBhB;EAlBA,QAAA;EAkBS;EAhBT,MAAA;EAsBkC;;;;AAUnC;EA1BC,WAAA;;;;;;EAMA,eAAA;EAwBc;EAtBd,MAAA;EAiC0B;EA/B1B,SAAA;AAAA;;;;UAMgB,kBAAA;EAyByD;EAvBzE,SAAA;EA4B4B;EA1B5B,OAAA;AAAA;;;;UAMgB,iBAAA;EA0BZ;EAxBJ,UAAA;EA8BoB;EA5BpB,MAAA,EAAQ,MAAA;AAAA;;;;;;AAqCT;;;KA1BY,eAAA,IAAmB,MAAA,EAAQ,MAAA,sBAA4B,OAAA;;AAqCnE;;UAhCiB,YAAA;EAkCK;EAhCrB,GAAA;EA2Ce;EAzCf,GAAA;EAyCmB;EAvCnB,IAAA;AAAA;;;;KAMW,SAAA;EAEP,MAAA;EAAgB,MAAA;AAAA;EAEhB,MAAA;AAAA;;;;UAKY,eAAA;EAoCP;;;;EA/BT,KAAA,GAAQ,SAAA;AAAA;;;;UAMQ,cAAA;EAuChB;EArCA,IAAA,EAAM,cAAA,CAAe,UAAA;EAuCZ;EArCT,WAAA;EA2CgB;EAzChB,IAAA;;;;;EAKA,KAAA;IAAU,MAAA;IAAgB,MAAA;EAAA;EA8CF;EA5CxB,YAAA,GAAe,IAAA;AAAA;;;;UAMC,eAAA;EA8ChB;EA5CA,GAAA;EA4CI;EA1CJ,MAAA;EAgD2B;EA9C3B,OAAA,EAAS,MAAA;EA8CkB;EA5C3B,SAAA;AAAA;;;;UAMgB,mBAAA;EAoDO;EAlDvB,GAAA;EAwDO;EAtDP,WAAA;EAsD4C;EApD5C,IAAA;EAwDY;EAtDZ,SAAA;AAAA;;;;UAMgB,UAAA;EAqED;EAnEf,KAAA,EAAO,QAAA;EAmEsB;EAjE7B,UAAA;AAAA;;;;UAMgB,QAAA;EAiCf;EA/BD,GAAA;EAgCO;EA9BP,IAAA;EA8B6B;EA5B7B,YAAA,EAAc,IAAA;EA6Bb;EA3BD,IAAA;AAAA;;;;UAMgB,WAAA;EA6BgB;EA3BhC,MAAA;EA2BkD;EAzBlD,KAAA;EA+BA;EA7BA,MAAA;AAAA;;;;;;UAQgB,OAAA;EA+Ba;;;EA3B7B,MAAA,CAAO,OAAA;IACN,GAAA;IACA,IAAA,EAAM,MAAA,GAAS,UAAA,GAAa,cAAA,CAAe,UAAA;IAC3C,WAAA,UAmCD;IAjCC,YAAA;EAAA,IACG,OAAA,CAAQ,YAAA;EAsCS;;AAMtB;EAvCC,QAAA,CAAS,GAAA,UAAa,OAAA,GAAU,eAAA,GAAkB,OAAA,CAAQ,cAAA;;;;;EAM1D,MAAA,CAAO,GAAA,WAAc,OAAA;;;;EAKrB,MAAA,CAAO,GAAA,WAAc,OAAA;EAgCW;;;EA3BhC,IAAA,CAAK,OAAA,GAAU,WAAA,GAAc,OAAA,CAAQ,UAAA;;;;;EAMrC,kBAAA,CAAmB,OAAA,EAAS,mBAAA,GAAsB,OAAA,CAAQ,eAAA;;;;EAK1D,YAAA,CAAa,GAAA;;;;;EAMb,qBAAA;AAAA;;;;cAMY,kBAAA,SAA2B,KAAA;EAG/B,IAAA;EACS,KAAA;cAFhB,OAAA,UACO,IAAA,UACS,KAAA;AAAA"}

package/dist/types-BGmQ0uXs.mjs

@@ -1,201 +0,0 @@
-//#region src/schema/types.ts
-/**
-* Array of all field types for validation
-*/
-const FIELD_TYPES = [
-	"string",
-	"text",
-	"url",
-	"number",
-	"integer",
-	"boolean",
-	"datetime",
-	"select",
-	"multiSelect",
-	"portableText",
-	"image",
-	"file",
-	"reference",
-	"json",
-	"slug",
-	"repeater",
-	"blocks"
-];
-/** Scalar field types that can be backed by a content-list query index. */
-const INDEXABLE_FIELD_TYPES = new Set([
-	"string",
-	"url",
-	"number",
-	"integer",
-	"boolean",
-	"datetime",
-	"select",
-	"reference",
-	"slug"
-]);
-function isIndexableFieldType(type) {
-	return INDEXABLE_FIELD_TYPES.has(type);
-}
-/**
-* Map field types to their SQLite column types
-*/
-const FIELD_TYPE_TO_COLUMN = {
-	string: "TEXT",
-	text: "TEXT",
-	number: "REAL",
-	integer: "INTEGER",
-	boolean: "INTEGER",
-	datetime: "TEXT",
-	select: "TEXT",
-	multiSelect: "JSON",
-	portableText: "JSON",
-	image: "TEXT",
-	file: "TEXT",
-	reference: "TEXT",
-	json: "JSON",
-	slug: "TEXT",
-	url: "TEXT",
-	repeater: "JSON",
-	blocks: "JSON"
-};
-const MAX_BLOCKS_ITEMS = 100;
-/**
-* Field types that *can* persist no `ec_*` column — see `isStoragelessField`
-* for whether a given row actually does. The `FIELD_TYPE_TO_COLUMN` entry above
-* is retained deliberately: it doubles as the `isFieldType` guard.
-*/
-const STORAGELESS_FIELD_TYPES = new Set(["reference"]);
-/**
-* Whether a field row keeps its values outside the content table.
-*
-* Storage-less is a property of the row, not of the type. A `reference` field
-* is storage-less once it is bound to a relation: the selection lives as edges
-* in `_emdash_content_references`. A reference field created before relations
-* existed — or one whose target collection could not be resolved — still owns a
-* TEXT column holding an entry id, and behaves like a string field until
-* something wires it.
-*/
-function isStoragelessField(field) {
-	if (!STORAGELESS_FIELD_TYPES.has(field.type)) return false;
-	return typeof field.validation?.relation === "string" && field.validation.relation.length > 0;
-}
-/**
-* `isStoragelessField` for a raw `_emdash_fields` row, whose `validation` is
-* unparsed JSON. Malformed JSON reads as unwired: a field nothing can resolve a
-* relation for keeps its column.
-*/
-function isStoragelessFieldRow(row) {
-	if (!STORAGELESS_FIELD_TYPES.has(row.type) || !row.validation) return false;
-	let parsed;
-	try {
-		parsed = JSON.parse(row.validation);
-	} catch {
-		return false;
-	}
-	if (typeof parsed !== "object" || parsed === null) return false;
-	return isStoragelessField({
-		type: row.type,
-		validation: parsed
-	});
-}
-/** Allowed types for repeater sub-fields (no nesting, no complex types) */
-const REPEATER_SUB_FIELD_TYPES = [
-	"string",
-	"text",
-	"url",
-	"number",
-	"integer",
-	"boolean",
-	"datetime",
-	"select",
-	"image"
-];
-const MAX_COLLECTION_LIST_COLUMNS = 4;
-/** Longest admin sidebar folder label a collection may declare. */
-const MAX_COLLECTION_GROUP_LENGTH = 100;
-/** Longest Phosphor icon name a collection may declare. */
-const MAX_COLLECTION_ICON_LENGTH = 64;
-/**
-* Reserved field slugs that cannot be used.
-*
-* Includes names reserved for runtime hydration (`terms`, `bylines`, `byline`)
-* so user-defined fields never shadow the auto-hydrated values on entry.data.
-*/
-const RESERVED_FIELD_SLUGS = [
-	"id",
-	"slug",
-	"status",
-	"author_id",
-	"primary_byline_id",
-	"created_at",
-	"updated_at",
-	"published_at",
-	"scheduled_at",
-	"deleted_at",
-	"version",
-	"live_revision_id",
-	"draft_revision_id",
-	"terms",
-	"bylines",
-	"byline"
-];
-/**
-* Reserved collection slugs that cannot be used
-*/
-const RESERVED_COLLECTION_SLUGS = [
-	"content",
-	"media",
-	"users",
-	"revisions",
-	"taxonomies",
-	"options",
-	"audit_logs",
-	"reorder",
-	"relations"
-];
-const BYLINE_FIELD_TYPES = [
-	"string",
-	"text",
-	"url",
-	"boolean",
-	"select"
-];
-/**
-* Reserved byline-field slugs. Two reasons a slug ends up here:
-*
-* 1. **Column collision.** Slugs that match a fixed column on
-*    `_emdash_bylines` (migrations 031 + 040) would shadow that column
-*    on hydration. The first 12 entries cover this.
-* 2. **Route collision.** Static file routes under
-*    `/_emdash/api/admin/byline-fields/` take precedence over the
-*    `[slug].ts` dynamic route in Astro, so a custom field whose slug
-*    matches a sibling static file (e.g. `reorder.ts`) is unreachable
-*    via single-field CRUD — the static route handles only its own
-*    method (POST for `reorder`) and 405s everything else.
-*    `reorder` is the only such sibling today; new sibling routes
-*    (e.g. a hypothetical `import.ts`) must be added here.
-*    `[slug]/usage.ts` lives a level deeper so a slug of `usage` does
-*    not collide — it resolves cleanly to `[slug].ts`.
-*
-* Enforced at the registry layer (Phase 2) and the admin API zod layer
-* (Phase 4) so non-HTTP callers (seeds, scripts) get the same guarantee.
-*/
-const RESERVED_BYLINE_FIELD_SLUGS = [
-	"id",
-	"slug",
-	"display_name",
-	"bio",
-	"avatar_media_id",
-	"website_url",
-	"user_id",
-	"is_guest",
-	"locale",
-	"translation_group",
-	"created_at",
-	"updated_at",
-	"reorder"
-];
-
-//#endregion
-export { MAX_COLLECTION_GROUP_LENGTH as a, REPEATER_SUB_FIELD_TYPES as c, RESERVED_FIELD_SLUGS as d, isIndexableFieldType as f, MAX_BLOCKS_ITEMS as i, RESERVED_BYLINE_FIELD_SLUGS as l, isStoragelessFieldRow as m, FIELD_TYPES as n, MAX_COLLECTION_ICON_LENGTH as o, isStoragelessField as p, FIELD_TYPE_TO_COLUMN as r, MAX_COLLECTION_LIST_COLUMNS as s, BYLINE_FIELD_TYPES as t, RESERVED_COLLECTION_SLUGS as u };
-//# sourceMappingURL=types-BGmQ0uXs.mjs.map

package/dist/types-BGmQ0uXs.mjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"types-BGmQ0uXs.mjs","names":[],"sources":["../src/schema/types.ts"],"sourcesContent":["/**\n * Schema Registry Types\n *\n * These types represent the schema definitions stored in D1.\n * They are the source of truth for all collections and fields.\n */\n\nimport type { BlockType } from \"./block-types.js\";\n\n/**\n * Supported field types\n */\nexport type FieldType =\n\t| \"string\"\n\t| \"text\"\n\t| \"url\"\n\t| \"number\"\n\t| \"integer\"\n\t| \"boolean\"\n\t| \"datetime\"\n\t| \"select\"\n\t| \"multiSelect\"\n\t| \"portableText\"\n\t| \"image\"\n\t| \"file\"\n\t| \"reference\"\n\t| \"json\"\n\t| \"slug\"\n\t| \"repeater\"\n\t| \"blocks\";\n\n/**\n * Array of all field types for validation\n */\nexport const FIELD_TYPES: readonly FieldType[] = [\n\t\"string\",\n\t\"text\",\n\t\"url\",\n\t\"number\",\n\t\"integer\",\n\t\"boolean\",\n\t\"datetime\",\n\t\"select\",\n\t\"multiSelect\",\n\t\"portableText\",\n\t\"image\",\n\t\"file\",\n\t\"reference\",\n\t\"json\",\n\t\"slug\",\n\t\"repeater\",\n\t\"blocks\",\n] as const;\n\n/** Scalar field types that can be backed by a content-list query index. */\nexport const INDEXABLE_FIELD_TYPES: ReadonlySet<FieldType> = new Set([\n\t\"string\",\n\t\"url\",\n\t\"number\",\n\t\"integer\",\n\t\"boolean\",\n\t\"datetime\",\n\t\"select\",\n\t\"reference\",\n\t\"slug\",\n]);\n\nexport function isIndexableFieldType(type: FieldType): boolean {\n\treturn INDEXABLE_FIELD_TYPES.has(type);\n}\n\n/**\n * SQLite column types that map from field types\n */\nexport type ColumnType = \"TEXT\" | \"REAL\" | \"INTEGER\" | \"JSON\";\n\n/**\n * Map field types to their SQLite column types\n */\nexport const FIELD_TYPE_TO_COLUMN: Record<FieldType, ColumnType> = {\n\tstring: \"TEXT\",\n\ttext: \"TEXT\",\n\tnumber: \"REAL\",\n\tinteger: \"INTEGER\",\n\tboolean: \"INTEGER\",\n\tdatetime: \"TEXT\",\n\tselect: \"TEXT\",\n\tmultiSelect: \"JSON\",\n\tportableText: \"JSON\",\n\timage: \"TEXT\",\n\tfile: \"TEXT\",\n\treference: \"TEXT\",\n\tjson: \"JSON\",\n\tslug: \"TEXT\",\n\turl: \"TEXT\",\n\trepeater: \"JSON\",\n\tblocks: \"JSON\",\n};\n\nexport const MAX_BLOCKS_ITEMS = 100;\n\n/**\n * Field types that *can* persist no `ec_*` column — see `isStoragelessField`\n * for whether a given row actually does. The `FIELD_TYPE_TO_COLUMN` entry above\n * is retained deliberately: it doubles as the `isFieldType` guard.\n */\nexport const STORAGELESS_FIELD_TYPES: ReadonlySet<string> = new Set<FieldType>([\"reference\"]);\n\n/**\n * Whether a field row keeps its values outside the content table.\n *\n * Storage-less is a property of the row, not of the type. A `reference` field\n * is storage-less once it is bound to a relation: the selection lives as edges\n * in `_emdash_content_references`. A reference field created before relations\n * existed — or one whose target collection could not be resolved — still owns a\n * TEXT column holding an entry id, and behaves like a string field until\n * something wires it.\n */\nexport function isStoragelessField(field: {\n\ttype: string;\n\tvalidation?: FieldValidation | null;\n}): boolean {\n\tif (!STORAGELESS_FIELD_TYPES.has(field.type)) return false;\n\treturn typeof field.validation?.relation === \"string\" && field.validation.relation.length > 0;\n}\n\n/**\n * `isStoragelessField` for a raw `_emdash_fields` row, whose `validation` is\n * unparsed JSON. Malformed JSON reads as unwired: a field nothing can resolve a\n * relation for keeps its column.\n */\nexport function isStoragelessFieldRow(row: { type: string; validation: string | null }): boolean {\n\tif (!STORAGELESS_FIELD_TYPES.has(row.type) || !row.validation) return false;\n\tlet parsed: unknown;\n\ttry {\n\t\tparsed = JSON.parse(row.validation);\n\t} catch {\n\t\treturn false;\n\t}\n\tif (typeof parsed !== \"object\" || parsed === null) return false;\n\treturn isStoragelessField({ type: row.type, validation: parsed });\n}\n\n/**\n * Features a collection can support\n */\nexport type CollectionSupport =\n\t| \"drafts\"\n\t| \"revisions\"\n\t| \"preview\"\n\t| \"scheduling\"\n\t| \"search\"\n\t| \"seo\";\n\n/**\n * Sources for how a collection was created\n */\nexport type CollectionSource =\n\t| `template:${string}`\n\t| `import:${string}`\n\t| \"manual\"\n\t| \"discovered\"\n\t| \"seed\";\n\n/**\n * Validation rules for a field\n */\n/** Sub-field definition for repeater fields */\nexport interface RepeaterSubField {\n\tslug: string;\n\ttype:\n\t\t| \"string\"\n\t\t| \"text\"\n\t\t| \"url\"\n\t\t| \"number\"\n\t\t| \"integer\"\n\t\t| \"boolean\"\n\t\t| \"datetime\"\n\t\t| \"select\"\n\t\t| \"image\";\n\tlabel: string;\n\trequired?: boolean;\n\toptions?: string[]; // For select sub-fields\n}\n\n/** Allowed types for repeater sub-fields (no nesting, no complex types) */\nexport const REPEATER_SUB_FIELD_TYPES = [\n\t\"string\",\n\t\"text\",\n\t\"url\",\n\t\"number\",\n\t\"integer\",\n\t\"boolean\",\n\t\"datetime\",\n\t\"select\",\n\t\"image\",\n] as const;\n\nexport interface FieldValidation {\n\trequired?: boolean;\n\tmin?: number;\n\tmax?: number;\n\tminLength?: number;\n\tmaxLength?: number;\n\tpattern?: string;\n\toptions?: string[]; // For select/multiSelect\n\tsubFields?: RepeaterSubField[]; // For repeater fields\n\tminItems?: number; // For repeater fields\n\tmaxItems?: number; // For repeater fields\n\tallowedMimeTypes?: string[];\n\t/** Reference fields: the relation's slug. */\n\trelation?: string;\n\t/**\n\t * Reference fields: which end of the relation this collection sits on.\n\t * `parent` picks children and controls their order; `child` picks parents\n\t * and is unordered, since `sort_order` is scoped to a parent.\n\t */\n\trelationSide?: \"parent\" | \"child\";\n\t/** Reference fields: the collection on the *other* end (derived from the\n\t * relation and the side, denormalized here). */\n\ttargetCollection?: string;\n\t/** Reference fields: allow selecting more than one entry (UI constraint). */\n\tmultiple?: boolean;\n\tallowedTypes?: string[]; // For blocks fields\n\tretiredTypes?: string[]; // Server-owned retained types for blocks fields\n}\n\n/**\n * Widget options for field rendering\n */\nexport interface FieldWidgetOptions {\n\trows?: number; // For textarea\n\tshowPreview?: boolean; // For image/file\n\tdarkVariant?: boolean; // For image: offer a second slot for a dark-color-scheme counterpart\n\tcollection?: string; // For reference - which collection to reference\n\tallowMultiple?: boolean; // For reference\n\t[key: string]: unknown;\n}\n\nexport interface UnsupportedFieldType {\n\ttype: string;\n\tpath: string;\n}\n\nexport const MAX_COLLECTION_LIST_COLUMNS = 4;\n\n/** Longest admin sidebar folder label a collection may declare. */\nexport const MAX_COLLECTION_GROUP_LENGTH = 100;\n\n/** Longest Phosphor icon name a collection may declare. */\nexport const MAX_COLLECTION_ICON_LENGTH = 64;\n\n/** Collection-level admin presentation options. */\nexport interface CollectionAdminConfig {\n\t/** Custom field slugs to show in the content list. */\n\tlistColumns?: string[];\n\t/** Show a \"new entry\" quick action on the dashboard. Defaults to true. */\n\tquickCreate?: boolean;\n}\n\n/**\n * A collection definition\n */\nexport interface Collection {\n\tid: string;\n\tslug: string;\n\tlabel: string;\n\tlabelSingular?: string;\n\tdescription?: string;\n\ticon?: string;\n\tadmin?: CollectionAdminConfig;\n\tsupports: CollectionSupport[];\n\tsource?: CollectionSource;\n\t/** Whether this collection has SEO metadata fields enabled */\n\thasSeo: boolean;\n\t/** Field slug powering the admin list Title column. Defaults to the standard title display. */\n\ttitleField?: string;\n\t/** Field slug powering the admin list Date column. Must be a `datetime` field. Defaults to last-updated. */\n\tdateField?: string;\n\t/** URL pattern with {slug} placeholder (e.g. \"/{slug}\", \"/blog/{slug}\") */\n\turlPattern?: string;\n\t/** Whether published entries require a public slug. Defaults to true. */\n\troutable?: boolean;\n\t/**\n\t * Omit this collection's auto-generated sidebar entry and dashboard quick\n\t * action. The collection stays fully functional everywhere else (API, MCP,\n\t * hooks, direct `/content/:collection` URLs), so a plugin that owns the\n\t * collection can point editors at its own admin UI.\n\t */\n\thidden: boolean;\n\t/**\n\t * Explicit position in the admin sidebar. Collections with a `sortOrder`\n\t * come first, in ascending order; the rest keep the alphabetical-by-slug\n\t * order and follow. `undefined` means \"no explicit position\".\n\t */\n\tsortOrder?: number;\n\t/**\n\t * Admin sidebar folder. Collections sharing a group render under one\n\t * collapsible entry labelled with the group; `undefined` keeps the\n\t * collection inline.\n\t */\n\tgroup?: string;\n\t/** Whether comments are enabled for this collection */\n\tcommentsEnabled: boolean;\n\t/** Moderation strategy: \"all\" | \"first_time\" | \"none\" */\n\tcommentsModeration: \"all\" | \"first_time\" | \"none\";\n\t/** Auto-close comments after N days. 0 = never close. */\n\tcommentsClosedAfterDays: number;\n\t/** Auto-approve comments from authenticated CMS users */\n\tcommentsAutoApproveUsers: boolean;\n\t/** Whether opening an entry takes an edit lock. Defaults to true. */\n\teditLocking: boolean;\n\tcreatedAt: string;\n\tupdatedAt: string;\n}\n\n/**\n * A field definition\n */\nexport interface Field {\n\tid: string;\n\tcollectionId: string;\n\tslug: string;\n\tlabel: string;\n\ttype: FieldType;\n\t/** Raw stored type metadata that this runtime cannot safely interpret. */\n\tunsupportedType?: UnsupportedFieldType;\n\tblockTypes?: BlockType[];\n\tblockTypeFingerprint?: string;\n\tcolumnType: ColumnType;\n\trequired: boolean;\n\tunique: boolean;\n\tdefaultValue?: unknown;\n\tvalidation?: FieldValidation;\n\twidget?: string;\n\toptions?: FieldWidgetOptions;\n\tsortOrder: number;\n\tsearchable: boolean;\n\t/** Whether this field has a physical index for structured list queries. */\n\tindexed: boolean;\n\t/** Whether this field is translatable (default true). Non-translatable fields are synced across locales. */\n\ttranslatable: boolean;\n\tcreatedAt: string;\n}\n\n/**\n * Input for creating a collection\n */\nexport interface CreateCollectionInput {\n\tslug: string;\n\tlabel: string;\n\tlabelSingular?: string;\n\tdescription?: string;\n\ticon?: string;\n\tadmin?: CollectionAdminConfig;\n\tsupports?: CollectionSupport[];\n\tsource?: CollectionSource;\n\turlPattern?: string;\n\troutable?: boolean;\n\thasSeo?: boolean;\n\t/** Omit the auto-generated sidebar entry and dashboard quick action (defaults to false) */\n\thidden?: boolean;\n\t/** Explicit admin sidebar position (omit for the alphabetical fallback) */\n\tsortOrder?: number | null;\n\t/** Admin sidebar folder shared with other collections of the same group */\n\tgroup?: string | null;\n\tcommentsEnabled?: boolean;\n\t/** Take an edit lock when an entry is opened (defaults to true) */\n\teditLocking?: boolean;\n}\n\n/**\n * Input for updating a collection\n */\nexport interface UpdateCollectionInput {\n\tlabel?: string;\n\tlabelSingular?: string;\n\tdescription?: string;\n\ticon?: string;\n\tadmin?: CollectionAdminConfig;\n\tsupports?: CollectionSupport[];\n\turlPattern?: string | null;\n\troutable?: boolean;\n\thasSeo?: boolean;\n\t/** Omit the auto-generated sidebar entry and dashboard quick action */\n\thidden?: boolean;\n\t/** Explicit admin sidebar position; `null` clears it back to alphabetical */\n\tsortOrder?: number | null;\n\t/** Admin sidebar folder; `null` moves the collection back inline */\n\tgroup?: string | null;\n\tcommentsEnabled?: boolean;\n\tcommentsModeration?: \"all\" | \"first_time\" | \"none\";\n\tcommentsClosedAfterDays?: number;\n\tcommentsAutoApproveUsers?: boolean;\n\t/** Take an edit lock when an entry is opened */\n\teditLocking?: boolean;\n\t/** Field slug for the Title column; `null`/`\"\"` clears back to the default. */\n\ttitleField?: string | null;\n\t/** Datetime field slug for the Date column; `null`/`\"\"` clears back to the default. */\n\tdateField?: string | null;\n}\n\n/**\n * Input for creating a field\n */\nexport interface CreateFieldInput {\n\tslug: string;\n\tlabel: string;\n\ttype: FieldType;\n\trequired?: boolean;\n\tunique?: boolean;\n\tdefaultValue?: unknown;\n\tvalidation?: FieldValidation | null;\n\twidget?: string;\n\toptions?: FieldWidgetOptions;\n\tsortOrder?: number;\n\t/** Whether this field should be indexed for search */\n\tsearchable?: boolean;\n\t/** Create a physical index for structured sorting. */\n\tindexed?: boolean;\n\t/** Whether this field is translatable (default true). Non-translatable fields are synced across locales. */\n\ttranslatable?: boolean;\n}\n\n/**\n * Input for updating a field\n */\nexport interface UpdateFieldInput {\n\tlabel?: string;\n\t/**\n\t * Change the field's type. Only storage-compatible text aliases (`string`,\n\t * `text`, and `slug`) can be changed in place. Other changes require an\n\t * explicit content migration. Omit to keep the current type.\n\t */\n\ttype?: FieldType;\n\trequired?: boolean;\n\tunique?: boolean;\n\tdefaultValue?: unknown;\n\tvalidation?: FieldValidation | null;\n\twidget?: string;\n\toptions?: FieldWidgetOptions;\n\tsortOrder?: number;\n\t/** Whether this field should be indexed for search */\n\tsearchable?: boolean;\n\t/** Create or remove the physical index used by structured sorting. */\n\tindexed?: boolean;\n\t/** Whether this field is translatable (default true). Non-translatable fields are synced across locales. */\n\ttranslatable?: boolean;\n}\n\n/**\n * A collection with its fields\n */\nexport interface CollectionWithFields extends Collection {\n\tfields: Field[];\n}\n\n/**\n * Reserved field slugs that cannot be used.\n *\n * Includes names reserved for runtime hydration (`terms`, `bylines`, `byline`)\n * so user-defined fields never shadow the auto-hydrated values on entry.data.\n */\nexport const RESERVED_FIELD_SLUGS = [\n\t\"id\",\n\t\"slug\",\n\t\"status\",\n\t\"author_id\",\n\t\"primary_byline_id\",\n\t\"created_at\",\n\t\"updated_at\",\n\t\"published_at\",\n\t\"scheduled_at\",\n\t\"deleted_at\",\n\t\"version\",\n\t\"live_revision_id\",\n\t\"draft_revision_id\",\n\t// Runtime-hydrated fields\n\t\"terms\",\n\t\"bylines\",\n\t\"byline\",\n];\n\n/**\n * Reserved collection slugs that cannot be used\n */\nexport const RESERVED_COLLECTION_SLUGS = [\n\t\"content\",\n\t\"media\",\n\t\"users\",\n\t\"revisions\",\n\t\"taxonomies\",\n\t\"options\",\n\t\"audit_logs\",\n\t// Shadowed by the static POST /schema/collections/reorder route: a\n\t// collection with this slug could never be addressed at its own URL.\n\t\"reorder\",\n\t// Shadowed by the static /content-types/relations admin route, for the same\n\t// reason: a collection with this slug would be unreachable in the admin.\n\t\"relations\",\n];\n\n/**\n * Byline custom fields (Discussion #1174).\n *\n * Sites declare site-specific byline metadata (`job_title`, `pronouns`,\n * `twitter_handle`, `company`, …) without touching emdash core. Definitions\n * live in `_emdash_byline_fields`; values in either\n * `_emdash_byline_field_values` (translatable, keyed by `byline_id`) or\n * `_emdash_byline_field_group_values` (non-translatable, keyed by\n * `translation_group`). The per-field `translatable` flag decides which\n * value table is used. See migration 041.\n */\n\n/**\n * The five v1 field types supported on byline custom fields. Deliberately\n * narrower than the content `FieldType` union — bylines don't need\n * `portableText`, `reference`, `image`, etc. v2 may extend this; v1 keeps\n * the storage and UI surfaces small.\n */\nexport type BylineFieldType = \"string\" | \"text\" | \"url\" | \"boolean\" | \"select\";\n\nexport const BYLINE_FIELD_TYPES: readonly BylineFieldType[] = [\n\t\"string\",\n\t\"text\",\n\t\"url\",\n\t\"boolean\",\n\t\"select\",\n] as const;\n\n/**\n * Validation rules for a byline custom field. v1 only exposes `options`\n * (the choice list for `select` fields). The shape mirrors the content-\n * field convention so the admin UI patterns transfer.\n */\nexport interface BylineFieldValidation {\n\t/** Choices for `select`-type fields. Ignored for other types. */\n\toptions?: string[];\n}\n\n/**\n * Runtime shape of a registered byline custom field. Stored in\n * `_emdash_byline_fields` (see migration 041).\n */\nexport interface BylineFieldDefinition {\n\tid: string;\n\tslug: string;\n\tlabel: string;\n\ttype: BylineFieldType;\n\trequired: boolean;\n\t/**\n\t * Whether values are stored per-locale (`true`, in\n\t * `_emdash_byline_field_values` keyed by `byline_id`) or shared across\n\t * every locale variant of the same byline identity (`false`, in\n\t * `_emdash_byline_field_group_values` keyed by `translation_group`).\n\t * Defaults to `true` at the DB level.\n\t */\n\ttranslatable: boolean;\n\tvalidation: BylineFieldValidation | null;\n\tsortOrder: number;\n\tcreatedAt: string;\n\tupdatedAt: string;\n}\n\n/**\n * Input for creating a byline custom field. `slug` and `type` are not\n * updatable post-create — changing either would invalidate stored values.\n */\nexport interface CreateBylineFieldInput {\n\tslug: string;\n\tlabel: string;\n\ttype: BylineFieldType;\n\trequired?: boolean;\n\ttranslatable?: boolean;\n\tvalidation?: BylineFieldValidation | null;\n\tsortOrder?: number;\n}\n\n/**\n * Input for updating a byline custom field. `slug` and `type` are\n * intentionally not present — see `CreateBylineFieldInput`.\n */\nexport interface UpdateBylineFieldInput {\n\tlabel?: string;\n\trequired?: boolean;\n\ttranslatable?: boolean;\n\tvalidation?: BylineFieldValidation | null;\n\tsortOrder?: number;\n}\n\n/**\n * Runtime value type for a byline custom field. The narrow union mirrors\n * what the five v1 field types can produce: `string`/`text`/`url`/`select`\n * → string, `boolean` → boolean, plus `null` for cleared values.\n */\nexport type CustomFieldValue = string | boolean | null;\n\n/**\n * Reserved byline-field slugs. Two reasons a slug ends up here:\n *\n * 1. **Column collision.** Slugs that match a fixed column on\n *    `_emdash_bylines` (migrations 031 + 040) would shadow that column\n *    on hydration. The first 12 entries cover this.\n * 2. **Route collision.** Static file routes under\n *    `/_emdash/api/admin/byline-fields/` take precedence over the\n *    `[slug].ts` dynamic route in Astro, so a custom field whose slug\n *    matches a sibling static file (e.g. `reorder.ts`) is unreachable\n *    via single-field CRUD — the static route handles only its own\n *    method (POST for `reorder`) and 405s everything else.\n *    `reorder` is the only such sibling today; new sibling routes\n *    (e.g. a hypothetical `import.ts`) must be added here.\n *    `[slug]/usage.ts` lives a level deeper so a slug of `usage` does\n *    not collide — it resolves cleanly to `[slug].ts`.\n *\n * Enforced at the registry layer (Phase 2) and the admin API zod layer\n * (Phase 4) so non-HTTP callers (seeds, scripts) get the same guarantee.\n */\nexport const RESERVED_BYLINE_FIELD_SLUGS = [\n\t// 1. Column-collision slugs (matches `_emdash_bylines` fixed columns).\n\t\"id\",\n\t\"slug\",\n\t\"display_name\",\n\t\"bio\",\n\t\"avatar_media_id\",\n\t\"website_url\",\n\t\"user_id\",\n\t\"is_guest\",\n\t\"locale\",\n\t\"translation_group\",\n\t\"created_at\",\n\t\"updated_at\",\n\t// 2. Route-collision slugs (matches static sibling files of `[slug].ts`).\n\t\"reorder\",\n] as const;\n"],"mappings":";;;;AAkCA,MAAa,cAAoC;CAChD;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;;AAGD,MAAa,wBAAgD,IAAI,IAAI;CACpE;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA,CAAC;AAEF,SAAgB,qBAAqB,MAA0B;AAC9D,QAAO,sBAAsB,IAAI,KAAK;;;;;AAWvC,MAAa,uBAAsD;CAClE,QAAQ;CACR,MAAM;CACN,QAAQ;CACR,SAAS;CACT,SAAS;CACT,UAAU;CACV,QAAQ;CACR,aAAa;CACb,cAAc;CACd,OAAO;CACP,MAAM;CACN,WAAW;CACX,MAAM;CACN,MAAM;CACN,KAAK;CACL,UAAU;CACV,QAAQ;CACR;AAED,MAAa,mBAAmB;;;;;;AAOhC,MAAa,0BAA+C,IAAI,IAAe,CAAC,YAAY,CAAC;;;;;;;;;;;AAY7F,SAAgB,mBAAmB,OAGvB;AACX,KAAI,CAAC,wBAAwB,IAAI,MAAM,KAAK,CAAE,QAAO;AACrD,QAAO,OAAO,MAAM,YAAY,aAAa,YAAY,MAAM,WAAW,SAAS,SAAS;;;;;;;AAQ7F,SAAgB,sBAAsB,KAA2D;AAChG,KAAI,CAAC,wBAAwB,IAAI,IAAI,KAAK,IAAI,CAAC,IAAI,WAAY,QAAO;CACtE,IAAI;AACJ,KAAI;AACH,WAAS,KAAK,MAAM,IAAI,WAAW;SAC5B;AACP,SAAO;;AAER,KAAI,OAAO,WAAW,YAAY,WAAW,KAAM,QAAO;AAC1D,QAAO,mBAAmB;EAAE,MAAM,IAAI;EAAM,YAAY;EAAQ,CAAC;;;AA8ClE,MAAa,2BAA2B;CACvC;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;AAgDD,MAAa,8BAA8B;;AAG3C,MAAa,8BAA8B;;AAG3C,MAAa,6BAA6B;;;;;;;AAqN1C,MAAa,uBAAuB;CACnC;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CAEA;CACA;CACA;CACA;;;;AAKD,MAAa,4BAA4B;CACxC;CACA;CACA;CACA;CACA;CACA;CACA;CAGA;CAGA;CACA;AAsBD,MAAa,qBAAiD;CAC7D;CACA;CACA;CACA;CACA;CACA;;;;;;;;;;;;;;;;;;;;;AAyFD,MAAa,8BAA8B;CAE1C;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CAEA;CACA"}

package/dist/types-BKXA0f-c.mjs

@@ -1,16 +0,0 @@
-//#region src/storage/types.ts
-/**
-* Storage error with additional context
-*/
-var EmDashStorageError = class extends Error {
-	constructor(message, code, cause) {
-		super(message);
-		this.code = code;
-		this.cause = cause;
-		this.name = "EmDashStorageError";
-	}
-};
-
-//#endregion
-export { EmDashStorageError as t };
-//# sourceMappingURL=types-BKXA0f-c.mjs.map