emdash 1.3.0 → 1.4.0

package/dist/astro/routes/robots.txt.mjs

@@ -1,20 +1,22 @@
-import "../../dialect-helpers-7_IqPdh9.mjs";
-import "../../config-CvmjJcVw.mjs";
-import "../../after-PcEvMY_6.mjs";
+import "../../dialect-helpers-B1XN2HGB.mjs";
+import "../../config-Cs_AwWXI.mjs";
+import "../../after-32yNRvd2.mjs";
 import "../../options-DhrI7eMv.mjs";
-import "../../secrets-Cc_O3Kp-.mjs";
+import "../../secrets-Dswzrz3k.mjs";
 import "../../base64-BQBZwXCx.mjs";
-import "../../object-cache-Bo6DGaC9.mjs";
-import "../../request-cache-C4CIo5ad.mjs";
-import "../../types-D2NEXtgB.mjs";
-import "../../media-Bws9f18T.mjs";
-import "../../loader-CswroUbe.mjs";
-import "../../json-recordset-BUjxhr77.mjs";
+import "../../query-BFHjCzSh.mjs";
+import "../../object-cache-DmKr09La.mjs";
+import "../../request-cache-5z2WzWmh.mjs";
+import "../../types-DwhEvIVb.mjs";
+import "../../media-DepNLhPq.mjs";
+import "../../version-DqB7LIO7.mjs";
+import "../../loader-DhnedqY4.mjs";
+import "../../json-recordset-D0WhN2UA.mjs";
 import "../../errors-B4f4It-2.mjs";
-import "../../errors-BOYNdIo3.mjs";
-import { s as getSiteSettingsWithDb } from "../../settings-CWb84sDm.mjs";
-import "../../error-CVWeIOku.mjs";
-import "../../fence-C3MUitUN.mjs";
+import "../../errors-8gJqv-XV.mjs";
+import { s as getSiteSettingsWithDb } from "../../settings-D932YP2-.mjs";
+import "../../error-BCMgPxdn.mjs";
+import "../../fence-Dagicj14.mjs";
 import { i as getPublicOrigin } from "../../public-url-Bt98vysr.mjs";
 
 //#region src/astro/routes/robots.txt.ts

package/dist/astro/routes/robots.txt.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"robots.txt.mjs","names":[],"sources":["../../../src/astro/routes/robots.txt.ts"],"sourcesContent":["/**\n * Robots.txt endpoint\n *\n * GET /robots.txt - Serves robots.txt with sitemap reference\n *\n * If a custom robots.txt is configured in SEO settings, that is returned.\n * Otherwise generates a default that allows all crawlers and references\n * the sitemap. When `seo.disallowAiTraining` is set, either version gets\n * rules asking AI training crawlers to stay away.\n */\n\nimport type { APIRoute } from \"astro\";\n\nimport { getPublicOrigin } from \"#api/public-url.js\";\nimport { getSiteSettingsWithDb } from \"#settings/index.js\";\n\nexport const prerender = false;\n\nconst TRAILING_SLASH_RE = /\\/$/;\n\n/** AI training crawlers and opt-out tokens, as listed in Cloudflare's managed robots.txt. */\nconst AI_TRAINING_CRAWLERS = [\n\t\"Amazonbot\",\n\t\"Applebot-Extended\",\n\t\"Bytespider\",\n\t\"CCBot\",\n\t\"ClaudeBot\",\n\t\"Google-Extended\",\n\t\"GPTBot\",\n\t\"meta-externalagent\",\n];\n\n/**\n * `Content-Signal` is not a rule, so the empty `Disallow:` is what closes the\n * `*` group; without a rule, crawlers merge it with the next group and apply\n * `Disallow: /` to everyone.\n */\nconst AI_TRAINING_RULES = [\n\t\"# Disallow AI training\",\n\t\"User-agent: *\",\n\t\"Content-Signal: search=yes, ai-train=no\",\n\t\"Disallow:\",\n\t...AI_TRAINING_CRAWLERS.flatMap((agent) => [\"\", `User-agent: ${agent}`, \"Disallow: /\"]),\n].join(\"\\n\");\n\nexport const GET: APIRoute = async ({ locals, url }) => {\n\tconst { emdash } = locals;\n\n\tif (!emdash?.db) {\n\t\t// Return a permissive default if CMS isn't initialized\n\t\treturn new Response(\"User-agent: *\\nAllow: /\\n\", {\n\t\t\tstatus: 200,\n\t\t\theaders: { \"Content-Type\": \"text/plain; charset=utf-8\" },\n\t\t});\n\t}\n\n\ttry {\n\t\tconst settings = await getSiteSettingsWithDb(emdash.db);\n\t\tconst siteUrl = (settings.url || getPublicOrigin(url, emdash?.config)).replace(\n\t\t\tTRAILING_SLASH_RE,\n\t\t\t\"\",\n\t\t);\n\t\tconst sitemapUrl = `${siteUrl}/sitemap.xml`;\n\t\tconst disallowAiTraining = settings.seo?.disallowAiTraining === true;\n\n\t\t// Use custom robots.txt if configured\n\t\tif (settings.seo?.robotsTxt) {\n\t\t\tlet content = settings.seo.robotsTxt;\n\t\t\tif (disallowAiTraining) {\n\t\t\t\tcontent = `${content.trimEnd()}\\n\\n${AI_TRAINING_RULES}\\n`;\n\t\t\t}\n\t\t\t// Append sitemap directive if not already present\n\t\t\tif (!content.toLowerCase().includes(\"sitemap:\")) {\n\t\t\t\tcontent = `${content.trimEnd()}\\n\\nSitemap: ${sitemapUrl}\\n`;\n\t\t\t}\n\n\t\t\treturn new Response(content, {\n\t\t\t\tstatus: 200,\n\t\t\t\theaders: {\n\t\t\t\t\t\"Content-Type\": \"text/plain; charset=utf-8\",\n\t\t\t\t\t\"Cache-Control\": \"public, max-age=86400\",\n\t\t\t\t},\n\t\t\t});\n\t\t}\n\n\t\t// Generate default robots.txt\n\t\tconst defaultRobots = [\n\t\t\t\"User-agent: *\",\n\t\t\t\"Allow: /\",\n\t\t\t\"\",\n\t\t\t\"# Disallow admin and API routes\",\n\t\t\t\"Disallow: /_emdash/\",\n\t\t\t\"\",\n\t\t\t...(disallowAiTraining ? [AI_TRAINING_RULES, \"\"] : []),\n\t\t\t`Sitemap: ${sitemapUrl}`,\n\t\t\t\"\",\n\t\t].join(\"\\n\");\n\n\t\treturn new Response(defaultRobots, {\n\t\t\tstatus: 200,\n\t\t\theaders: {\n\t\t\t\t\"Content-Type\": \"text/plain; charset=utf-8\",\n\t\t\t\t\"Cache-Control\": \"public, max-age=86400\",\n\t\t\t},\n\t\t});\n\t} catch {\n\t\treturn new Response(\"User-agent: *\\nAllow: /\\n\", {\n\t\t\tstatus: 200,\n\t\t\theaders: { \"Content-Type\": \"text/plain; charset=utf-8\" },\n\t\t});\n\t}\n};\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAgBA,MAAa,YAAY;AAEzB,MAAM,oBAAoB;;;;;;AAmB1B,MAAM,oBAAoB;CACzB;CACA;CACA;CACA;CACA,GArB4B;EAC5B;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA,CAYwB,SAAS,UAAU;EAAC;EAAI,eAAe;EAAS;EAAc,CAAC;CACvF,CAAC,KAAK,KAAK;AAEZ,MAAa,MAAgB,OAAO,EAAE,QAAQ,UAAU;CACvD,MAAM,EAAE,WAAW;AAEnB,KAAI,CAAC,QAAQ,GAEZ,QAAO,IAAI,SAAS,6BAA6B;EAChD,QAAQ;EACR,SAAS,EAAE,gBAAgB,6BAA6B;EACxD,CAAC;AAGH,KAAI;EACH,MAAM,WAAW,MAAM,sBAAsB,OAAO,GAAG;EAKvD,MAAM,aAAa,IAJF,SAAS,OAAO,gBAAgB,KAAK,QAAQ,OAAO,EAAE,QACtE,mBACA,GACA,CAC6B;EAC9B,MAAM,qBAAqB,SAAS,KAAK,uBAAuB;AAGhE,MAAI,SAAS,KAAK,WAAW;GAC5B,IAAI,UAAU,SAAS,IAAI;AAC3B,OAAI,mBACH,WAAU,GAAG,QAAQ,SAAS,CAAC,MAAM,kBAAkB;AAGxD,OAAI,CAAC,QAAQ,aAAa,CAAC,SAAS,WAAW,CAC9C,WAAU,GAAG,QAAQ,SAAS,CAAC,eAAe,WAAW;AAG1D,UAAO,IAAI,SAAS,SAAS;IAC5B,QAAQ;IACR,SAAS;KACR,gBAAgB;KAChB,iBAAiB;KACjB;IACD,CAAC;;EAIH,MAAM,gBAAgB;GACrB;GACA;GACA;GACA;GACA;GACA;GACA,GAAI,qBAAqB,CAAC,mBAAmB,GAAG,GAAG,EAAE;GACrD,YAAY;GACZ;GACA,CAAC,KAAK,KAAK;AAEZ,SAAO,IAAI,SAAS,eAAe;GAClC,QAAQ;GACR,SAAS;IACR,gBAAgB;IAChB,iBAAiB;IACjB;GACD,CAAC;SACK;AACP,SAAO,IAAI,SAAS,6BAA6B;GAChD,QAAQ;GACR,SAAS,EAAE,gBAAgB,6BAA6B;GACxD,CAAC"}
+{"version":3,"file":"robots.txt.mjs","names":[],"sources":["../../../src/astro/routes/robots.txt.ts"],"sourcesContent":["/**\n * Robots.txt endpoint\n *\n * GET /robots.txt - Serves robots.txt with sitemap reference\n *\n * If a custom robots.txt is configured in SEO settings, that is returned.\n * Otherwise generates a default that allows all crawlers and references\n * the sitemap. When `seo.disallowAiTraining` is set, either version gets\n * rules asking AI training crawlers to stay away.\n */\n\nimport type { APIRoute } from \"astro\";\n\nimport { getPublicOrigin } from \"#api/public-url.js\";\nimport { getSiteSettingsWithDb } from \"#settings/index.js\";\n\nexport const prerender = false;\n\nconst TRAILING_SLASH_RE = /\\/$/;\n\n/** AI training crawlers and opt-out tokens, as listed in Cloudflare's managed robots.txt. */\nconst AI_TRAINING_CRAWLERS = [\n\t\"Amazonbot\",\n\t\"Applebot-Extended\",\n\t\"Bytespider\",\n\t\"CCBot\",\n\t\"ClaudeBot\",\n\t\"Google-Extended\",\n\t\"GPTBot\",\n\t\"meta-externalagent\",\n];\n\n/**\n * `Content-Signal` is not a rule, so the empty `Disallow:` is what closes the\n * `*` group; without a rule, crawlers merge it with the next group and apply\n * `Disallow: /` to everyone.\n */\nconst AI_TRAINING_RULES = [\n\t\"# Disallow AI training\",\n\t\"User-agent: *\",\n\t\"Content-Signal: search=yes, ai-train=no\",\n\t\"Disallow:\",\n\t...AI_TRAINING_CRAWLERS.flatMap((agent) => [\"\", `User-agent: ${agent}`, \"Disallow: /\"]),\n].join(\"\\n\");\n\nexport const GET: APIRoute = async ({ locals, url }) => {\n\tconst { emdash } = locals;\n\n\tif (!emdash?.db) {\n\t\t// Return a permissive default if CMS isn't initialized\n\t\treturn new Response(\"User-agent: *\\nAllow: /\\n\", {\n\t\t\tstatus: 200,\n\t\t\theaders: { \"Content-Type\": \"text/plain; charset=utf-8\" },\n\t\t});\n\t}\n\n\ttry {\n\t\tconst settings = await getSiteSettingsWithDb(emdash.db);\n\t\tconst siteUrl = (settings.url || getPublicOrigin(url, emdash?.config)).replace(\n\t\t\tTRAILING_SLASH_RE,\n\t\t\t\"\",\n\t\t);\n\t\tconst sitemapUrl = `${siteUrl}/sitemap.xml`;\n\t\tconst disallowAiTraining = settings.seo?.disallowAiTraining === true;\n\n\t\t// Use custom robots.txt if configured\n\t\tif (settings.seo?.robotsTxt) {\n\t\t\tlet content = settings.seo.robotsTxt;\n\t\t\tif (disallowAiTraining) {\n\t\t\t\tcontent = `${content.trimEnd()}\\n\\n${AI_TRAINING_RULES}\\n`;\n\t\t\t}\n\t\t\t// Append sitemap directive if not already present\n\t\t\tif (!content.toLowerCase().includes(\"sitemap:\")) {\n\t\t\t\tcontent = `${content.trimEnd()}\\n\\nSitemap: ${sitemapUrl}\\n`;\n\t\t\t}\n\n\t\t\treturn new Response(content, {\n\t\t\t\tstatus: 200,\n\t\t\t\theaders: {\n\t\t\t\t\t\"Content-Type\": \"text/plain; charset=utf-8\",\n\t\t\t\t\t\"Cache-Control\": \"public, max-age=86400\",\n\t\t\t\t},\n\t\t\t});\n\t\t}\n\n\t\t// Generate default robots.txt\n\t\tconst defaultRobots = [\n\t\t\t\"User-agent: *\",\n\t\t\t\"Allow: /\",\n\t\t\t\"\",\n\t\t\t\"# Disallow admin and API routes\",\n\t\t\t\"Disallow: /_emdash/\",\n\t\t\t\"\",\n\t\t\t...(disallowAiTraining ? [AI_TRAINING_RULES, \"\"] : []),\n\t\t\t`Sitemap: ${sitemapUrl}`,\n\t\t\t\"\",\n\t\t].join(\"\\n\");\n\n\t\treturn new Response(defaultRobots, {\n\t\t\tstatus: 200,\n\t\t\theaders: {\n\t\t\t\t\"Content-Type\": \"text/plain; charset=utf-8\",\n\t\t\t\t\"Cache-Control\": \"public, max-age=86400\",\n\t\t\t},\n\t\t});\n\t} catch {\n\t\treturn new Response(\"User-agent: *\\nAllow: /\\n\", {\n\t\t\tstatus: 200,\n\t\t\theaders: { \"Content-Type\": \"text/plain; charset=utf-8\" },\n\t\t});\n\t}\n};\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;AAgBA,MAAa,YAAY;AAEzB,MAAM,oBAAoB;;;;;;AAmB1B,MAAM,oBAAoB;CACzB;CACA;CACA;CACA;CACA,GArB4B;EAC5B;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA,CAYwB,SAAS,UAAU;EAAC;EAAI,eAAe;EAAS;EAAc,CAAC;CACvF,CAAC,KAAK,KAAK;AAEZ,MAAa,MAAgB,OAAO,EAAE,QAAQ,UAAU;CACvD,MAAM,EAAE,WAAW;AAEnB,KAAI,CAAC,QAAQ,GAEZ,QAAO,IAAI,SAAS,6BAA6B;EAChD,QAAQ;EACR,SAAS,EAAE,gBAAgB,6BAA6B;EACxD,CAAC;AAGH,KAAI;EACH,MAAM,WAAW,MAAM,sBAAsB,OAAO,GAAG;EAKvD,MAAM,aAAa,IAJF,SAAS,OAAO,gBAAgB,KAAK,QAAQ,OAAO,EAAE,QACtE,mBACA,GACA,CAC6B;EAC9B,MAAM,qBAAqB,SAAS,KAAK,uBAAuB;AAGhE,MAAI,SAAS,KAAK,WAAW;GAC5B,IAAI,UAAU,SAAS,IAAI;AAC3B,OAAI,mBACH,WAAU,GAAG,QAAQ,SAAS,CAAC,MAAM,kBAAkB;AAGxD,OAAI,CAAC,QAAQ,aAAa,CAAC,SAAS,WAAW,CAC9C,WAAU,GAAG,QAAQ,SAAS,CAAC,eAAe,WAAW;AAG1D,UAAO,IAAI,SAAS,SAAS;IAC5B,QAAQ;IACR,SAAS;KACR,gBAAgB;KAChB,iBAAiB;KACjB;IACD,CAAC;;EAIH,MAAM,gBAAgB;GACrB;GACA;GACA;GACA;GACA;GACA;GACA,GAAI,qBAAqB,CAAC,mBAAmB,GAAG,GAAG,EAAE;GACrD,YAAY;GACZ;GACA,CAAC,KAAK,KAAK;AAEZ,SAAO,IAAI,SAAS,eAAe;GAClC,QAAQ;GACR,SAAS;IACR,gBAAgB;IAChB,iBAAiB;IACjB;GACD,CAAC;SACK;AACP,SAAO,IAAI,SAAS,6BAA6B;GAChD,QAAQ;GACR,SAAS,EAAE,gBAAgB,6BAA6B;GACxD,CAAC"}

package/dist/astro/routes/sitemap-_collection_.xml.mjs

@@ -1,25 +1,27 @@
-import "../../dialect-helpers-7_IqPdh9.mjs";
-import { i as isI18nEnabled, r as getI18nConfig } from "../../config-CvmjJcVw.mjs";
-import "../../after-PcEvMY_6.mjs";
+import "../../dialect-helpers-B1XN2HGB.mjs";
+import { r as getI18nConfig, s as isI18nEnabled } from "../../config-Cs_AwWXI.mjs";
+import "../../after-32yNRvd2.mjs";
 import "../../options-DhrI7eMv.mjs";
-import "../../secrets-Cc_O3Kp-.mjs";
+import "../../secrets-Dswzrz3k.mjs";
 import "../../base64-BQBZwXCx.mjs";
-import "../../object-cache-Bo6DGaC9.mjs";
-import "../../request-cache-C4CIo5ad.mjs";
-import "../../types-D2NEXtgB.mjs";
-import "../../media-Bws9f18T.mjs";
-import { a as resolveLocalizedContentRoutePath } from "../../resolve-D-kqyKns.mjs";
-import "../../loader-CswroUbe.mjs";
-import "../../json-recordset-BUjxhr77.mjs";
+import "../../query-BFHjCzSh.mjs";
+import "../../object-cache-DmKr09La.mjs";
+import "../../request-cache-5z2WzWmh.mjs";
+import "../../types-DwhEvIVb.mjs";
+import "../../media-DepNLhPq.mjs";
+import { a as resolveLocalizedContentRoutePath } from "../../resolve-DdNXBJSr.mjs";
+import "../../version-DqB7LIO7.mjs";
+import "../../loader-DhnedqY4.mjs";
+import "../../json-recordset-D0WhN2UA.mjs";
 import "../../errors-B4f4It-2.mjs";
-import "../../errors-BOYNdIo3.mjs";
+import "../../errors-8gJqv-XV.mjs";
 import { t as handleSitemapData } from "../../seo-ClB-dw9w.mjs";
-import { s as getSiteSettingsWithDb } from "../../settings-CWb84sDm.mjs";
-import "../../error-CVWeIOku.mjs";
-import "../../fence-C3MUitUN.mjs";
+import { s as getSiteSettingsWithDb } from "../../settings-D932YP2-.mjs";
+import "../../error-BCMgPxdn.mjs";
+import "../../fence-Dagicj14.mjs";
 import { t as buildSeoImageUrl } from "../../media-url-BQgKvpQ5.mjs";
 import { i as getPublicOrigin } from "../../public-url-Bt98vysr.mjs";
-import { t as parseCollectionSitemapName } from "../../sitemap-name-BTg2NJJv.mjs";
+import { t as parseCollectionSitemapName } from "../../sitemap-name-B8QP8wud.mjs";
 import virtualConfig from "virtual:emdash/config";
 
 //#region src/astro/routes/sitemap-[collection].xml.ts

package/dist/astro/routes/sitemap-_collection_.xml.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"sitemap-_collection_.xml.mjs","names":[],"sources":["../../../src/astro/routes/sitemap-[collection].xml.ts"],"sourcesContent":["/**\n * Per-collection sitemap endpoint\n *\n * GET /sitemap-{collection}.xml - First page of a single collection's sitemap.\n * GET /sitemap-{collection}-{n}.xml - Page n (2 and up) of that sitemap.\n *\n * Uses the collection's url_pattern to build URLs. Falls back to\n * /{collection}/{slug} when no pattern is configured.\n *\n * i18n behaviour: when Astro i18n is enabled, the locale prefix is\n * applied via Astro's own `getRelativeLocaleUrl` (which honours\n * `prefixDefaultLocale`, custom `path` mappings, and other `routing`\n * config). Each translation row is emitted as its own `<url>` with\n * `<xhtml:link rel=\"alternate\" hreflang=\"...\">` entries pointing to\n * its siblings (grouped by `translation_group`). The default-locale\n * variant is also linked as `hreflang=\"x-default\"`.\n */\n\nimport type { APIRoute } from \"astro\";\n// @ts-ignore - virtual module\nimport virtualConfig from \"virtual:emdash/config\";\n\nimport { handleSitemapData } from \"#api/handlers/seo.js\";\nimport { getPublicOrigin } from \"#api/public-url.js\";\nimport { getSiteSettingsWithDb } from \"#settings/index.js\";\n\nimport { getI18nConfig, isI18nEnabled } from \"../../i18n/config.js\";\nimport { resolveLocalizedContentRoutePath } from \"../../i18n/resolve.js\";\nimport { buildSeoImageUrl } from \"../../seo/media-url.js\";\nimport { parseCollectionSitemapName } from \"../../seo/sitemap-name.js\";\n\nexport const prerender = false;\n\nconst TRAILING_SLASH_RE = /\\/$/;\nconst AMP_RE = /&/g;\nconst LT_RE = /</g;\nconst GT_RE = />/g;\nconst QUOT_RE = /\"/g;\nconst APOS_RE = /'/g;\n\nexport const GET: APIRoute = async ({ params, locals, url }) => {\n\tconst { emdash } = locals;\n\n\t// The middleware skips runtime setup for names no collection can have, so\n\t// this check must run before the configuration check below.\n\tconst parsed = params.collection ? parseCollectionSitemapName(params.collection) : null;\n\tif (!parsed) {\n\t\treturn new Response(\"<!-- Sitemap not found -->\", {\n\t\t\tstatus: 404,\n\t\t\theaders: { \"Content-Type\": \"application/xml\" },\n\t\t});\n\t}\n\tconst { collection: collectionSlug, page } = parsed;\n\n\tif (!emdash?.db) {\n\t\treturn new Response(\"<!-- EmDash not configured -->\", {\n\t\t\tstatus: 500,\n\t\t\theaders: { \"Content-Type\": \"application/xml\" },\n\t\t});\n\t}\n\n\ttry {\n\t\tconst settings = await getSiteSettingsWithDb(emdash.db);\n\t\tconst siteUrl = (settings.url || getPublicOrigin(url, emdash?.config)).replace(\n\t\t\tTRAILING_SLASH_RE,\n\t\t\t\"\",\n\t\t);\n\n\t\tconst result = await handleSitemapData(emdash.db, collectionSlug, { page });\n\n\t\tif (!result.success || !result.data) {\n\t\t\treturn new Response(\"<!-- Failed to generate sitemap -->\", {\n\t\t\t\tstatus: 500,\n\t\t\t\theaders: { \"Content-Type\": \"application/xml\" },\n\t\t\t});\n\t\t}\n\n\t\tconst col = result.data.collections[0];\n\t\tif (!col) {\n\t\t\treturn new Response(\"<!-- Collection not found or empty -->\", {\n\t\t\t\tstatus: 404,\n\t\t\t\theaders: { \"Content-Type\": \"application/xml\" },\n\t\t\t});\n\t\t}\n\n\t\tconst i18nEnabled = isI18nEnabled();\n\t\tconst i18nConfig = getI18nConfig();\n\n\t\t// Group entries by `translation_group` so each <url> can advertise\n\t\t// its sibling translations via xhtml:link. Rows without a group\n\t\t// (legacy/single-locale data) are emitted individually.\n\t\ttype Entry = (typeof col.entries)[number];\n\t\tconst groups = new Map<string, Entry[]>();\n\t\tconst ungrouped: Entry[] = [];\n\t\tfor (const entry of col.entries) {\n\t\t\tif (i18nEnabled && entry.translationGroup) {\n\t\t\t\tconst list = groups.get(entry.translationGroup);\n\t\t\t\tif (list) list.push(entry);\n\t\t\t\telse groups.set(entry.translationGroup, [entry]);\n\t\t\t} else {\n\t\t\t\tungrouped.push(entry);\n\t\t\t}\n\t\t}\n\t\t// Translations listed on other pages still count as alternates here.\n\t\tconst alternatesByGroup = new Map<string, Entry[]>();\n\t\tconst all = [...col.entries, ...col.translations].toSorted((a, b) =>\n\t\t\ta.id < b.id ? -1 : a.id > b.id ? 1 : 0,\n\t\t);\n\t\tfor (const entry of all) {\n\t\t\tif (!i18nEnabled || !entry.translationGroup) continue;\n\t\t\tconst list = alternatesByGroup.get(entry.translationGroup);\n\t\t\tif (list) list.push(entry);\n\t\t\telse alternatesByGroup.set(entry.translationGroup, [entry]);\n\t\t}\n\n\t\t// Resolve every URL up-front so we can reference sibling URLs\n\t\t// while emitting hreflang alternates without re-resolving.\n\t\t// `localizePath` returns `null` when the row's locale isn't in\n\t\t// the configured `i18n.locales` list -- the site can't serve a\n\t\t// route for it, so the entry is dropped from the sitemap and\n\t\t// omitted from sibling alternates.\n\t\tconst urlByEntry = new Map<string, string | null>();\n\t\tconst resolveEntryUrl = async (entry: Entry): Promise<string | null> => {\n\t\t\tif (urlByEntry.has(entry.id)) return urlByEntry.get(entry.id) ?? null;\n\t\t\tconst absolutePath = await resolveLocalizedContentRoutePath({\n\t\t\t\tpattern: col.urlPattern,\n\t\t\t\tcollection: col.collection,\n\t\t\t\tslug: entry.slug || entry.id,\n\t\t\t\tid: entry.id,\n\t\t\t\t// Published date keeps date-token permalinks stable across edits;\n\t\t\t\t// no updatedAt fallback — tokens stay literal without a publish\n\t\t\t\t// date, consistent with the resolver's documented behavior.\n\t\t\t\tdate: entry.publishedAt,\n\t\t\t\tlocale: entry.locale,\n\t\t\t\ttrailingSlash: virtualConfig?.trailingSlash,\n\t\t\t});\n\t\t\tconst absolute = absolutePath === null ? null : `${siteUrl}${absolutePath}`;\n\t\t\turlByEntry.set(entry.id, absolute);\n\t\t\treturn absolute;\n\t\t};\n\n\t\tconst useXhtml = i18nEnabled;\n\t\tconst lines: string[] = ['<?xml version=\"1.0\" encoding=\"UTF-8\"?>'];\n\t\tlines.push(\n\t\t\tuseXhtml\n\t\t\t\t? '<urlset xmlns=\"http://www.sitemaps.org/schemas/sitemap/0.9\" xmlns:xhtml=\"http://www.w3.org/1999/xhtml\" xmlns:image=\"http://www.google.com/schemas/sitemap-image/1.1\">'\n\t\t\t\t: '<urlset xmlns=\"http://www.sitemaps.org/schemas/sitemap/0.9\" xmlns:image=\"http://www.google.com/schemas/sitemap-image/1.1\">',\n\t\t);\n\n\t\tconst writeUrl = async (entry: Entry, siblings: Entry[] | null) => {\n\t\t\tconst loc = await resolveEntryUrl(entry);\n\t\t\t// Skip rows whose locale isn't in the configured `i18n.locales`\n\t\t\t// list. Linking to a route the site can't serve is worse than\n\t\t\t// no link at all (search engines hit a 404 and downrank).\n\t\t\tif (loc === null) return;\n\n\t\t\tlines.push(\"  <url>\");\n\t\t\tlines.push(`    <loc>${escapeXml(loc)}</loc>`);\n\t\t\tlines.push(`    <lastmod>${escapeXml(entry.updatedAt)}</lastmod>`);\n\n\t\t\t// Google image sitemap extension: advertise the entry's SEO\n\t\t\t// image (the same \"preferred image\" used for og:image) so it\n\t\t\t// can be discovered and indexed for Google Images.\n\t\t\tif (entry.image) {\n\t\t\t\tconst imageLoc = buildSeoImageUrl(entry.image, siteUrl);\n\t\t\t\tlines.push(\"    <image:image>\");\n\t\t\t\tlines.push(`      <image:loc>${escapeXml(imageLoc)}</image:loc>`);\n\t\t\t\tlines.push(\"    </image:image>\");\n\t\t\t}\n\n\t\t\tconst alternateEntries = siblings ?? (useXhtml ? [entry] : null);\n\t\t\tif (useXhtml && alternateEntries) {\n\t\t\t\t// Emit one xhtml:link per sibling (including self -- Google\n\t\t\t\t// recommends including the page's own hreflang annotation).\n\t\t\t\t// Siblings with unroutable locales are skipped here too.\n\t\t\t\tfor (const sib of alternateEntries) {\n\t\t\t\t\tconst sibLoc = await resolveEntryUrl(sib);\n\t\t\t\t\tif (sibLoc === null) continue;\n\t\t\t\t\tlines.push(\n\t\t\t\t\t\t`    <xhtml:link rel=\"alternate\" hreflang=\"${escapeXml(sib.locale)}\" href=\"${escapeXml(sibLoc)}\" />`,\n\t\t\t\t\t);\n\t\t\t\t}\n\n\t\t\t\t// x-default: prefer the default-locale sibling, otherwise\n\t\t\t\t// the first sibling with a routable URL (siblings are sorted by ID).\n\t\t\t\tconst defaultSibling =\n\t\t\t\t\ti18nConfig && alternateEntries.find((s) => s.locale === i18nConfig.defaultLocale);\n\t\t\t\tlet xDefaultLoc: string | null = null;\n\t\t\t\tif (defaultSibling) {\n\t\t\t\t\txDefaultLoc = await resolveEntryUrl(defaultSibling);\n\t\t\t\t}\n\t\t\t\tif (xDefaultLoc === null) {\n\t\t\t\t\tfor (const sib of alternateEntries) {\n\t\t\t\t\t\tconst sibLoc = await resolveEntryUrl(sib);\n\t\t\t\t\t\tif (sibLoc !== null) {\n\t\t\t\t\t\t\txDefaultLoc = sibLoc;\n\t\t\t\t\t\t\tbreak;\n\t\t\t\t\t\t}\n\t\t\t\t\t}\n\t\t\t\t}\n\t\t\t\tif (xDefaultLoc !== null) {\n\t\t\t\t\tlines.push(\n\t\t\t\t\t\t`    <xhtml:link rel=\"alternate\" hreflang=\"x-default\" href=\"${escapeXml(xDefaultLoc)}\" />`,\n\t\t\t\t\t);\n\t\t\t\t}\n\t\t\t}\n\n\t\t\tlines.push(\"  </url>\");\n\t\t};\n\n\t\tfor (const [group, siblings] of groups) {\n\t\t\tconst alternates = alternatesByGroup.get(group) ?? siblings;\n\t\t\tfor (const entry of siblings) {\n\t\t\t\tawait writeUrl(entry, alternates);\n\t\t\t}\n\t\t}\n\t\tfor (const entry of ungrouped) {\n\t\t\tawait writeUrl(entry, null);\n\t\t}\n\n\t\tlines.push(\"</urlset>\");\n\n\t\treturn new Response(lines.join(\"\\n\"), {\n\t\t\tstatus: 200,\n\t\t\theaders: {\n\t\t\t\t\"Content-Type\": \"application/xml; charset=utf-8\",\n\t\t\t\t\"Cache-Control\": \"public, max-age=3600\",\n\t\t\t},\n\t\t});\n\t} catch {\n\t\treturn new Response(\"<!-- Internal error generating sitemap -->\", {\n\t\t\tstatus: 500,\n\t\t\theaders: { \"Content-Type\": \"application/xml\" },\n\t\t});\n\t}\n};\n\n/** Escape special XML characters in a string */\nfunction escapeXml(str: string): string {\n\treturn str\n\t\t.replace(AMP_RE, \"&amp;\")\n\t\t.replace(LT_RE, \"&lt;\")\n\t\t.replace(GT_RE, \"&gt;\")\n\t\t.replace(QUOT_RE, \"&quot;\")\n\t\t.replace(APOS_RE, \"&apos;\");\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;AA+BA,MAAa,YAAY;AAEzB,MAAM,oBAAoB;AAC1B,MAAM,SAAS;AACf,MAAM,QAAQ;AACd,MAAM,QAAQ;AACd,MAAM,UAAU;AAChB,MAAM,UAAU;AAEhB,MAAa,MAAgB,OAAO,EAAE,QAAQ,QAAQ,UAAU;CAC/D,MAAM,EAAE,WAAW;CAInB,MAAM,SAAS,OAAO,aAAa,2BAA2B,OAAO,WAAW,GAAG;AACnF,KAAI,CAAC,OACJ,QAAO,IAAI,SAAS,8BAA8B;EACjD,QAAQ;EACR,SAAS,EAAE,gBAAgB,mBAAmB;EAC9C,CAAC;CAEH,MAAM,EAAE,YAAY,gBAAgB,SAAS;AAE7C,KAAI,CAAC,QAAQ,GACZ,QAAO,IAAI,SAAS,kCAAkC;EACrD,QAAQ;EACR,SAAS,EAAE,gBAAgB,mBAAmB;EAC9C,CAAC;AAGH,KAAI;EAEH,MAAM,YADW,MAAM,sBAAsB,OAAO,GAAG,EAC7B,OAAO,gBAAgB,KAAK,QAAQ,OAAO,EAAE,QACtE,mBACA,GACA;EAED,MAAM,SAAS,MAAM,kBAAkB,OAAO,IAAI,gBAAgB,EAAE,MAAM,CAAC;AAE3E,MAAI,CAAC,OAAO,WAAW,CAAC,OAAO,KAC9B,QAAO,IAAI,SAAS,uCAAuC;GAC1D,QAAQ;GACR,SAAS,EAAE,gBAAgB,mBAAmB;GAC9C,CAAC;EAGH,MAAM,MAAM,OAAO,KAAK,YAAY;AACpC,MAAI,CAAC,IACJ,QAAO,IAAI,SAAS,0CAA0C;GAC7D,QAAQ;GACR,SAAS,EAAE,gBAAgB,mBAAmB;GAC9C,CAAC;EAGH,MAAM,cAAc,eAAe;EACnC,MAAM,aAAa,eAAe;EAMlC,MAAM,yBAAS,IAAI,KAAsB;EACzC,MAAM,YAAqB,EAAE;AAC7B,OAAK,MAAM,SAAS,IAAI,QACvB,KAAI,eAAe,MAAM,kBAAkB;GAC1C,MAAM,OAAO,OAAO,IAAI,MAAM,iBAAiB;AAC/C,OAAI,KAAM,MAAK,KAAK,MAAM;OACrB,QAAO,IAAI,MAAM,kBAAkB,CAAC,MAAM,CAAC;QAEhD,WAAU,KAAK,MAAM;EAIvB,MAAM,oCAAoB,IAAI,KAAsB;EACpD,MAAM,MAAM,CAAC,GAAG,IAAI,SAAS,GAAG,IAAI,aAAa,CAAC,UAAU,GAAG,MAC9D,EAAE,KAAK,EAAE,KAAK,KAAK,EAAE,KAAK,EAAE,KAAK,IAAI,EACrC;AACD,OAAK,MAAM,SAAS,KAAK;AACxB,OAAI,CAAC,eAAe,CAAC,MAAM,iBAAkB;GAC7C,MAAM,OAAO,kBAAkB,IAAI,MAAM,iBAAiB;AAC1D,OAAI,KAAM,MAAK,KAAK,MAAM;OACrB,mBAAkB,IAAI,MAAM,kBAAkB,CAAC,MAAM,CAAC;;EAS5D,MAAM,6BAAa,IAAI,KAA4B;EACnD,MAAM,kBAAkB,OAAO,UAAyC;AACvE,OAAI,WAAW,IAAI,MAAM,GAAG,CAAE,QAAO,WAAW,IAAI,MAAM,GAAG,IAAI;GACjE,MAAM,eAAe,MAAM,iCAAiC;IAC3D,SAAS,IAAI;IACb,YAAY,IAAI;IAChB,MAAM,MAAM,QAAQ,MAAM;IAC1B,IAAI,MAAM;IAIV,MAAM,MAAM;IACZ,QAAQ,MAAM;IACd,eAAe,eAAe;IAC9B,CAAC;GACF,MAAM,WAAW,iBAAiB,OAAO,OAAO,GAAG,UAAU;AAC7D,cAAW,IAAI,MAAM,IAAI,SAAS;AAClC,UAAO;;EAGR,MAAM,WAAW;EACjB,MAAM,QAAkB,CAAC,6CAAyC;AAClE,QAAM,KACL,WACG,gLACA,iIACH;EAED,MAAM,WAAW,OAAO,OAAc,aAA6B;GAClE,MAAM,MAAM,MAAM,gBAAgB,MAAM;AAIxC,OAAI,QAAQ,KAAM;AAElB,SAAM,KAAK,UAAU;AACrB,SAAM,KAAK,YAAY,UAAU,IAAI,CAAC,QAAQ;AAC9C,SAAM,KAAK,gBAAgB,UAAU,MAAM,UAAU,CAAC,YAAY;AAKlE,OAAI,MAAM,OAAO;IAChB,MAAM,WAAW,iBAAiB,MAAM,OAAO,QAAQ;AACvD,UAAM,KAAK,oBAAoB;AAC/B,UAAM,KAAK,oBAAoB,UAAU,SAAS,CAAC,cAAc;AACjE,UAAM,KAAK,qBAAqB;;GAGjC,MAAM,mBAAmB,aAAa,WAAW,CAAC,MAAM,GAAG;AAC3D,OAAI,YAAY,kBAAkB;AAIjC,SAAK,MAAM,OAAO,kBAAkB;KACnC,MAAM,SAAS,MAAM,gBAAgB,IAAI;AACzC,SAAI,WAAW,KAAM;AACrB,WAAM,KACL,6CAA6C,UAAU,IAAI,OAAO,CAAC,UAAU,UAAU,OAAO,CAAC,MAC/F;;IAKF,MAAM,iBACL,cAAc,iBAAiB,MAAM,MAAM,EAAE,WAAW,WAAW,cAAc;IAClF,IAAI,cAA6B;AACjC,QAAI,eACH,eAAc,MAAM,gBAAgB,eAAe;AAEpD,QAAI,gBAAgB,KACnB,MAAK,MAAM,OAAO,kBAAkB;KACnC,MAAM,SAAS,MAAM,gBAAgB,IAAI;AACzC,SAAI,WAAW,MAAM;AACpB,oBAAc;AACd;;;AAIH,QAAI,gBAAgB,KACnB,OAAM,KACL,8DAA8D,UAAU,YAAY,CAAC,MACrF;;AAIH,SAAM,KAAK,WAAW;;AAGvB,OAAK,MAAM,CAAC,OAAO,aAAa,QAAQ;GACvC,MAAM,aAAa,kBAAkB,IAAI,MAAM,IAAI;AACnD,QAAK,MAAM,SAAS,SACnB,OAAM,SAAS,OAAO,WAAW;;AAGnC,OAAK,MAAM,SAAS,UACnB,OAAM,SAAS,OAAO,KAAK;AAG5B,QAAM,KAAK,YAAY;AAEvB,SAAO,IAAI,SAAS,MAAM,KAAK,KAAK,EAAE;GACrC,QAAQ;GACR,SAAS;IACR,gBAAgB;IAChB,iBAAiB;IACjB;GACD,CAAC;SACK;AACP,SAAO,IAAI,SAAS,8CAA8C;GACjE,QAAQ;GACR,SAAS,EAAE,gBAAgB,mBAAmB;GAC9C,CAAC;;;;AAKJ,SAAS,UAAU,KAAqB;AACvC,QAAO,IACL,QAAQ,QAAQ,QAAQ,CACxB,QAAQ,OAAO,OAAO,CACtB,QAAQ,OAAO,OAAO,CACtB,QAAQ,SAAS,SAAS,CAC1B,QAAQ,SAAS,SAAS"}
+{"version":3,"file":"sitemap-_collection_.xml.mjs","names":[],"sources":["../../../src/astro/routes/sitemap-[collection].xml.ts"],"sourcesContent":["/**\n * Per-collection sitemap endpoint\n *\n * GET /sitemap-{collection}.xml - First page of a single collection's sitemap.\n * GET /sitemap-{collection}-{n}.xml - Page n (2 and up) of that sitemap.\n *\n * Uses the collection's url_pattern to build URLs. Falls back to\n * /{collection}/{slug} when no pattern is configured.\n *\n * i18n behaviour: when Astro i18n is enabled, the locale prefix is\n * applied via Astro's own `getRelativeLocaleUrl` (which honours\n * `prefixDefaultLocale`, custom `path` mappings, and other `routing`\n * config). Each translation row is emitted as its own `<url>` with\n * `<xhtml:link rel=\"alternate\" hreflang=\"...\">` entries pointing to\n * its siblings (grouped by `translation_group`). The default-locale\n * variant is also linked as `hreflang=\"x-default\"`.\n */\n\nimport type { APIRoute } from \"astro\";\n// @ts-ignore - virtual module\nimport virtualConfig from \"virtual:emdash/config\";\n\nimport { handleSitemapData } from \"#api/handlers/seo.js\";\nimport { getPublicOrigin } from \"#api/public-url.js\";\nimport { getSiteSettingsWithDb } from \"#settings/index.js\";\n\nimport { getI18nConfig, isI18nEnabled } from \"../../i18n/config.js\";\nimport { resolveLocalizedContentRoutePath } from \"../../i18n/resolve.js\";\nimport { buildSeoImageUrl } from \"../../seo/media-url.js\";\nimport { parseCollectionSitemapName } from \"../../seo/sitemap-name.js\";\n\nexport const prerender = false;\n\nconst TRAILING_SLASH_RE = /\\/$/;\nconst AMP_RE = /&/g;\nconst LT_RE = /</g;\nconst GT_RE = />/g;\nconst QUOT_RE = /\"/g;\nconst APOS_RE = /'/g;\n\nexport const GET: APIRoute = async ({ params, locals, url }) => {\n\tconst { emdash } = locals;\n\n\t// The middleware skips runtime setup for names no collection can have, so\n\t// this check must run before the configuration check below.\n\tconst parsed = params.collection ? parseCollectionSitemapName(params.collection) : null;\n\tif (!parsed) {\n\t\treturn new Response(\"<!-- Sitemap not found -->\", {\n\t\t\tstatus: 404,\n\t\t\theaders: { \"Content-Type\": \"application/xml\" },\n\t\t});\n\t}\n\tconst { collection: collectionSlug, page } = parsed;\n\n\tif (!emdash?.db) {\n\t\treturn new Response(\"<!-- EmDash not configured -->\", {\n\t\t\tstatus: 500,\n\t\t\theaders: { \"Content-Type\": \"application/xml\" },\n\t\t});\n\t}\n\n\ttry {\n\t\tconst settings = await getSiteSettingsWithDb(emdash.db);\n\t\tconst siteUrl = (settings.url || getPublicOrigin(url, emdash?.config)).replace(\n\t\t\tTRAILING_SLASH_RE,\n\t\t\t\"\",\n\t\t);\n\n\t\tconst result = await handleSitemapData(emdash.db, collectionSlug, { page });\n\n\t\tif (!result.success || !result.data) {\n\t\t\treturn new Response(\"<!-- Failed to generate sitemap -->\", {\n\t\t\t\tstatus: 500,\n\t\t\t\theaders: { \"Content-Type\": \"application/xml\" },\n\t\t\t});\n\t\t}\n\n\t\tconst col = result.data.collections[0];\n\t\tif (!col) {\n\t\t\treturn new Response(\"<!-- Collection not found or empty -->\", {\n\t\t\t\tstatus: 404,\n\t\t\t\theaders: { \"Content-Type\": \"application/xml\" },\n\t\t\t});\n\t\t}\n\n\t\tconst i18nEnabled = isI18nEnabled();\n\t\tconst i18nConfig = getI18nConfig();\n\n\t\t// Group entries by `translation_group` so each <url> can advertise\n\t\t// its sibling translations via xhtml:link. Rows without a group\n\t\t// (legacy/single-locale data) are emitted individually.\n\t\ttype Entry = (typeof col.entries)[number];\n\t\tconst groups = new Map<string, Entry[]>();\n\t\tconst ungrouped: Entry[] = [];\n\t\tfor (const entry of col.entries) {\n\t\t\tif (i18nEnabled && entry.translationGroup) {\n\t\t\t\tconst list = groups.get(entry.translationGroup);\n\t\t\t\tif (list) list.push(entry);\n\t\t\t\telse groups.set(entry.translationGroup, [entry]);\n\t\t\t} else {\n\t\t\t\tungrouped.push(entry);\n\t\t\t}\n\t\t}\n\t\t// Translations listed on other pages still count as alternates here.\n\t\tconst alternatesByGroup = new Map<string, Entry[]>();\n\t\tconst all = [...col.entries, ...col.translations].toSorted((a, b) =>\n\t\t\ta.id < b.id ? -1 : a.id > b.id ? 1 : 0,\n\t\t);\n\t\tfor (const entry of all) {\n\t\t\tif (!i18nEnabled || !entry.translationGroup) continue;\n\t\t\tconst list = alternatesByGroup.get(entry.translationGroup);\n\t\t\tif (list) list.push(entry);\n\t\t\telse alternatesByGroup.set(entry.translationGroup, [entry]);\n\t\t}\n\n\t\t// Resolve every URL up-front so we can reference sibling URLs\n\t\t// while emitting hreflang alternates without re-resolving.\n\t\t// `localizePath` returns `null` when the row's locale isn't in\n\t\t// the configured `i18n.locales` list -- the site can't serve a\n\t\t// route for it, so the entry is dropped from the sitemap and\n\t\t// omitted from sibling alternates.\n\t\tconst urlByEntry = new Map<string, string | null>();\n\t\tconst resolveEntryUrl = async (entry: Entry): Promise<string | null> => {\n\t\t\tif (urlByEntry.has(entry.id)) return urlByEntry.get(entry.id) ?? null;\n\t\t\tconst absolutePath = await resolveLocalizedContentRoutePath({\n\t\t\t\tpattern: col.urlPattern,\n\t\t\t\tcollection: col.collection,\n\t\t\t\tslug: entry.slug || entry.id,\n\t\t\t\tid: entry.id,\n\t\t\t\t// Published date keeps date-token permalinks stable across edits;\n\t\t\t\t// no updatedAt fallback — tokens stay literal without a publish\n\t\t\t\t// date, consistent with the resolver's documented behavior.\n\t\t\t\tdate: entry.publishedAt,\n\t\t\t\tlocale: entry.locale,\n\t\t\t\ttrailingSlash: virtualConfig?.trailingSlash,\n\t\t\t});\n\t\t\tconst absolute = absolutePath === null ? null : `${siteUrl}${absolutePath}`;\n\t\t\turlByEntry.set(entry.id, absolute);\n\t\t\treturn absolute;\n\t\t};\n\n\t\tconst useXhtml = i18nEnabled;\n\t\tconst lines: string[] = ['<?xml version=\"1.0\" encoding=\"UTF-8\"?>'];\n\t\tlines.push(\n\t\t\tuseXhtml\n\t\t\t\t? '<urlset xmlns=\"http://www.sitemaps.org/schemas/sitemap/0.9\" xmlns:xhtml=\"http://www.w3.org/1999/xhtml\" xmlns:image=\"http://www.google.com/schemas/sitemap-image/1.1\">'\n\t\t\t\t: '<urlset xmlns=\"http://www.sitemaps.org/schemas/sitemap/0.9\" xmlns:image=\"http://www.google.com/schemas/sitemap-image/1.1\">',\n\t\t);\n\n\t\tconst writeUrl = async (entry: Entry, siblings: Entry[] | null) => {\n\t\t\tconst loc = await resolveEntryUrl(entry);\n\t\t\t// Skip rows whose locale isn't in the configured `i18n.locales`\n\t\t\t// list. Linking to a route the site can't serve is worse than\n\t\t\t// no link at all (search engines hit a 404 and downrank).\n\t\t\tif (loc === null) return;\n\n\t\t\tlines.push(\"  <url>\");\n\t\t\tlines.push(`    <loc>${escapeXml(loc)}</loc>`);\n\t\t\tlines.push(`    <lastmod>${escapeXml(entry.updatedAt)}</lastmod>`);\n\n\t\t\t// Google image sitemap extension: advertise the entry's SEO\n\t\t\t// image (the same \"preferred image\" used for og:image) so it\n\t\t\t// can be discovered and indexed for Google Images.\n\t\t\tif (entry.image) {\n\t\t\t\tconst imageLoc = buildSeoImageUrl(entry.image, siteUrl);\n\t\t\t\tlines.push(\"    <image:image>\");\n\t\t\t\tlines.push(`      <image:loc>${escapeXml(imageLoc)}</image:loc>`);\n\t\t\t\tlines.push(\"    </image:image>\");\n\t\t\t}\n\n\t\t\tconst alternateEntries = siblings ?? (useXhtml ? [entry] : null);\n\t\t\tif (useXhtml && alternateEntries) {\n\t\t\t\t// Emit one xhtml:link per sibling (including self -- Google\n\t\t\t\t// recommends including the page's own hreflang annotation).\n\t\t\t\t// Siblings with unroutable locales are skipped here too.\n\t\t\t\tfor (const sib of alternateEntries) {\n\t\t\t\t\tconst sibLoc = await resolveEntryUrl(sib);\n\t\t\t\t\tif (sibLoc === null) continue;\n\t\t\t\t\tlines.push(\n\t\t\t\t\t\t`    <xhtml:link rel=\"alternate\" hreflang=\"${escapeXml(sib.locale)}\" href=\"${escapeXml(sibLoc)}\" />`,\n\t\t\t\t\t);\n\t\t\t\t}\n\n\t\t\t\t// x-default: prefer the default-locale sibling, otherwise\n\t\t\t\t// the first sibling with a routable URL (siblings are sorted by ID).\n\t\t\t\tconst defaultSibling =\n\t\t\t\t\ti18nConfig && alternateEntries.find((s) => s.locale === i18nConfig.defaultLocale);\n\t\t\t\tlet xDefaultLoc: string | null = null;\n\t\t\t\tif (defaultSibling) {\n\t\t\t\t\txDefaultLoc = await resolveEntryUrl(defaultSibling);\n\t\t\t\t}\n\t\t\t\tif (xDefaultLoc === null) {\n\t\t\t\t\tfor (const sib of alternateEntries) {\n\t\t\t\t\t\tconst sibLoc = await resolveEntryUrl(sib);\n\t\t\t\t\t\tif (sibLoc !== null) {\n\t\t\t\t\t\t\txDefaultLoc = sibLoc;\n\t\t\t\t\t\t\tbreak;\n\t\t\t\t\t\t}\n\t\t\t\t\t}\n\t\t\t\t}\n\t\t\t\tif (xDefaultLoc !== null) {\n\t\t\t\t\tlines.push(\n\t\t\t\t\t\t`    <xhtml:link rel=\"alternate\" hreflang=\"x-default\" href=\"${escapeXml(xDefaultLoc)}\" />`,\n\t\t\t\t\t);\n\t\t\t\t}\n\t\t\t}\n\n\t\t\tlines.push(\"  </url>\");\n\t\t};\n\n\t\tfor (const [group, siblings] of groups) {\n\t\t\tconst alternates = alternatesByGroup.get(group) ?? siblings;\n\t\t\tfor (const entry of siblings) {\n\t\t\t\tawait writeUrl(entry, alternates);\n\t\t\t}\n\t\t}\n\t\tfor (const entry of ungrouped) {\n\t\t\tawait writeUrl(entry, null);\n\t\t}\n\n\t\tlines.push(\"</urlset>\");\n\n\t\treturn new Response(lines.join(\"\\n\"), {\n\t\t\tstatus: 200,\n\t\t\theaders: {\n\t\t\t\t\"Content-Type\": \"application/xml; charset=utf-8\",\n\t\t\t\t\"Cache-Control\": \"public, max-age=3600\",\n\t\t\t},\n\t\t});\n\t} catch {\n\t\treturn new Response(\"<!-- Internal error generating sitemap -->\", {\n\t\t\tstatus: 500,\n\t\t\theaders: { \"Content-Type\": \"application/xml\" },\n\t\t});\n\t}\n};\n\n/** Escape special XML characters in a string */\nfunction escapeXml(str: string): string {\n\treturn str\n\t\t.replace(AMP_RE, \"&amp;\")\n\t\t.replace(LT_RE, \"&lt;\")\n\t\t.replace(GT_RE, \"&gt;\")\n\t\t.replace(QUOT_RE, \"&quot;\")\n\t\t.replace(APOS_RE, \"&apos;\");\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;AA+BA,MAAa,YAAY;AAEzB,MAAM,oBAAoB;AAC1B,MAAM,SAAS;AACf,MAAM,QAAQ;AACd,MAAM,QAAQ;AACd,MAAM,UAAU;AAChB,MAAM,UAAU;AAEhB,MAAa,MAAgB,OAAO,EAAE,QAAQ,QAAQ,UAAU;CAC/D,MAAM,EAAE,WAAW;CAInB,MAAM,SAAS,OAAO,aAAa,2BAA2B,OAAO,WAAW,GAAG;AACnF,KAAI,CAAC,OACJ,QAAO,IAAI,SAAS,8BAA8B;EACjD,QAAQ;EACR,SAAS,EAAE,gBAAgB,mBAAmB;EAC9C,CAAC;CAEH,MAAM,EAAE,YAAY,gBAAgB,SAAS;AAE7C,KAAI,CAAC,QAAQ,GACZ,QAAO,IAAI,SAAS,kCAAkC;EACrD,QAAQ;EACR,SAAS,EAAE,gBAAgB,mBAAmB;EAC9C,CAAC;AAGH,KAAI;EAEH,MAAM,YADW,MAAM,sBAAsB,OAAO,GAAG,EAC7B,OAAO,gBAAgB,KAAK,QAAQ,OAAO,EAAE,QACtE,mBACA,GACA;EAED,MAAM,SAAS,MAAM,kBAAkB,OAAO,IAAI,gBAAgB,EAAE,MAAM,CAAC;AAE3E,MAAI,CAAC,OAAO,WAAW,CAAC,OAAO,KAC9B,QAAO,IAAI,SAAS,uCAAuC;GAC1D,QAAQ;GACR,SAAS,EAAE,gBAAgB,mBAAmB;GAC9C,CAAC;EAGH,MAAM,MAAM,OAAO,KAAK,YAAY;AACpC,MAAI,CAAC,IACJ,QAAO,IAAI,SAAS,0CAA0C;GAC7D,QAAQ;GACR,SAAS,EAAE,gBAAgB,mBAAmB;GAC9C,CAAC;EAGH,MAAM,cAAc,eAAe;EACnC,MAAM,aAAa,eAAe;EAMlC,MAAM,yBAAS,IAAI,KAAsB;EACzC,MAAM,YAAqB,EAAE;AAC7B,OAAK,MAAM,SAAS,IAAI,QACvB,KAAI,eAAe,MAAM,kBAAkB;GAC1C,MAAM,OAAO,OAAO,IAAI,MAAM,iBAAiB;AAC/C,OAAI,KAAM,MAAK,KAAK,MAAM;OACrB,QAAO,IAAI,MAAM,kBAAkB,CAAC,MAAM,CAAC;QAEhD,WAAU,KAAK,MAAM;EAIvB,MAAM,oCAAoB,IAAI,KAAsB;EACpD,MAAM,MAAM,CAAC,GAAG,IAAI,SAAS,GAAG,IAAI,aAAa,CAAC,UAAU,GAAG,MAC9D,EAAE,KAAK,EAAE,KAAK,KAAK,EAAE,KAAK,EAAE,KAAK,IAAI,EACrC;AACD,OAAK,MAAM,SAAS,KAAK;AACxB,OAAI,CAAC,eAAe,CAAC,MAAM,iBAAkB;GAC7C,MAAM,OAAO,kBAAkB,IAAI,MAAM,iBAAiB;AAC1D,OAAI,KAAM,MAAK,KAAK,MAAM;OACrB,mBAAkB,IAAI,MAAM,kBAAkB,CAAC,MAAM,CAAC;;EAS5D,MAAM,6BAAa,IAAI,KAA4B;EACnD,MAAM,kBAAkB,OAAO,UAAyC;AACvE,OAAI,WAAW,IAAI,MAAM,GAAG,CAAE,QAAO,WAAW,IAAI,MAAM,GAAG,IAAI;GACjE,MAAM,eAAe,MAAM,iCAAiC;IAC3D,SAAS,IAAI;IACb,YAAY,IAAI;IAChB,MAAM,MAAM,QAAQ,MAAM;IAC1B,IAAI,MAAM;IAIV,MAAM,MAAM;IACZ,QAAQ,MAAM;IACd,eAAe,eAAe;IAC9B,CAAC;GACF,MAAM,WAAW,iBAAiB,OAAO,OAAO,GAAG,UAAU;AAC7D,cAAW,IAAI,MAAM,IAAI,SAAS;AAClC,UAAO;;EAGR,MAAM,WAAW;EACjB,MAAM,QAAkB,CAAC,6CAAyC;AAClE,QAAM,KACL,WACG,gLACA,iIACH;EAED,MAAM,WAAW,OAAO,OAAc,aAA6B;GAClE,MAAM,MAAM,MAAM,gBAAgB,MAAM;AAIxC,OAAI,QAAQ,KAAM;AAElB,SAAM,KAAK,UAAU;AACrB,SAAM,KAAK,YAAY,UAAU,IAAI,CAAC,QAAQ;AAC9C,SAAM,KAAK,gBAAgB,UAAU,MAAM,UAAU,CAAC,YAAY;AAKlE,OAAI,MAAM,OAAO;IAChB,MAAM,WAAW,iBAAiB,MAAM,OAAO,QAAQ;AACvD,UAAM,KAAK,oBAAoB;AAC/B,UAAM,KAAK,oBAAoB,UAAU,SAAS,CAAC,cAAc;AACjE,UAAM,KAAK,qBAAqB;;GAGjC,MAAM,mBAAmB,aAAa,WAAW,CAAC,MAAM,GAAG;AAC3D,OAAI,YAAY,kBAAkB;AAIjC,SAAK,MAAM,OAAO,kBAAkB;KACnC,MAAM,SAAS,MAAM,gBAAgB,IAAI;AACzC,SAAI,WAAW,KAAM;AACrB,WAAM,KACL,6CAA6C,UAAU,IAAI,OAAO,CAAC,UAAU,UAAU,OAAO,CAAC,MAC/F;;IAKF,MAAM,iBACL,cAAc,iBAAiB,MAAM,MAAM,EAAE,WAAW,WAAW,cAAc;IAClF,IAAI,cAA6B;AACjC,QAAI,eACH,eAAc,MAAM,gBAAgB,eAAe;AAEpD,QAAI,gBAAgB,KACnB,MAAK,MAAM,OAAO,kBAAkB;KACnC,MAAM,SAAS,MAAM,gBAAgB,IAAI;AACzC,SAAI,WAAW,MAAM;AACpB,oBAAc;AACd;;;AAIH,QAAI,gBAAgB,KACnB,OAAM,KACL,8DAA8D,UAAU,YAAY,CAAC,MACrF;;AAIH,SAAM,KAAK,WAAW;;AAGvB,OAAK,MAAM,CAAC,OAAO,aAAa,QAAQ;GACvC,MAAM,aAAa,kBAAkB,IAAI,MAAM,IAAI;AACnD,QAAK,MAAM,SAAS,SACnB,OAAM,SAAS,OAAO,WAAW;;AAGnC,OAAK,MAAM,SAAS,UACnB,OAAM,SAAS,OAAO,KAAK;AAG5B,QAAM,KAAK,YAAY;AAEvB,SAAO,IAAI,SAAS,MAAM,KAAK,KAAK,EAAE;GACrC,QAAQ;GACR,SAAS;IACR,gBAAgB;IAChB,iBAAiB;IACjB;GACD,CAAC;SACK;AACP,SAAO,IAAI,SAAS,8CAA8C;GACjE,QAAQ;GACR,SAAS,EAAE,gBAAgB,mBAAmB;GAC9C,CAAC;;;;AAKJ,SAAS,UAAU,KAAqB;AACvC,QAAO,IACL,QAAQ,QAAQ,QAAQ,CACxB,QAAQ,OAAO,OAAO,CACtB,QAAQ,OAAO,OAAO,CACtB,QAAQ,SAAS,SAAS,CAC1B,QAAQ,SAAS,SAAS"}

package/dist/astro/routes/sitemap.xml.mjs

@@ -1,21 +1,23 @@
-import "../../dialect-helpers-7_IqPdh9.mjs";
-import "../../config-CvmjJcVw.mjs";
-import "../../after-PcEvMY_6.mjs";
+import "../../dialect-helpers-B1XN2HGB.mjs";
+import "../../config-Cs_AwWXI.mjs";
+import "../../after-32yNRvd2.mjs";
 import "../../options-DhrI7eMv.mjs";
-import "../../secrets-Cc_O3Kp-.mjs";
+import "../../secrets-Dswzrz3k.mjs";
 import "../../base64-BQBZwXCx.mjs";
-import "../../object-cache-Bo6DGaC9.mjs";
-import "../../request-cache-C4CIo5ad.mjs";
-import "../../types-D2NEXtgB.mjs";
-import "../../media-Bws9f18T.mjs";
-import "../../loader-CswroUbe.mjs";
-import "../../json-recordset-BUjxhr77.mjs";
+import "../../query-BFHjCzSh.mjs";
+import "../../object-cache-DmKr09La.mjs";
+import "../../request-cache-5z2WzWmh.mjs";
+import "../../types-DwhEvIVb.mjs";
+import "../../media-DepNLhPq.mjs";
+import "../../version-DqB7LIO7.mjs";
+import "../../loader-DhnedqY4.mjs";
+import "../../json-recordset-D0WhN2UA.mjs";
 import "../../errors-B4f4It-2.mjs";
-import "../../errors-BOYNdIo3.mjs";
+import "../../errors-8gJqv-XV.mjs";
 import { n as handleSitemapIndexData } from "../../seo-ClB-dw9w.mjs";
-import { s as getSiteSettingsWithDb } from "../../settings-CWb84sDm.mjs";
-import "../../error-CVWeIOku.mjs";
-import "../../fence-C3MUitUN.mjs";
+import { s as getSiteSettingsWithDb } from "../../settings-D932YP2-.mjs";
+import "../../error-BCMgPxdn.mjs";
+import "../../fence-Dagicj14.mjs";
 import { i as getPublicOrigin } from "../../public-url-Bt98vysr.mjs";
 
 //#region src/astro/routes/sitemap.xml.ts

package/dist/astro/routes/sitemap.xml.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"sitemap.xml.mjs","names":[],"sources":["../../../src/astro/routes/sitemap.xml.ts"],"sourcesContent":["/**\n * Sitemap index endpoint\n *\n * GET /sitemap.xml - Sitemap index listing the child sitemaps.\n *\n * Each collection with published, indexable content gets a child sitemap\n * at /sitemap-{collection}.xml, continued at /sitemap-{collection}-{n}.xml\n * once it exceeds one page. The index includes a <lastmod> per child\n * derived from the most recently updated entry on that page.\n */\n\nimport type { APIRoute } from \"astro\";\n\nimport { handleSitemapIndexData } from \"#api/handlers/seo.js\";\nimport { getPublicOrigin } from \"#api/public-url.js\";\nimport { getSiteSettingsWithDb } from \"#settings/index.js\";\n\nexport const prerender = false;\n\nconst TRAILING_SLASH_RE = /\\/$/;\nconst AMP_RE = /&/g;\nconst LT_RE = /</g;\nconst GT_RE = />/g;\nconst QUOT_RE = /\"/g;\nconst APOS_RE = /'/g;\n\nexport const GET: APIRoute = async ({ locals, url }) => {\n\tconst { emdash } = locals;\n\n\tif (!emdash?.db) {\n\t\treturn new Response(\"<!-- EmDash not configured -->\", {\n\t\t\tstatus: 500,\n\t\t\theaders: { \"Content-Type\": \"application/xml\" },\n\t\t});\n\t}\n\n\ttry {\n\t\tconst settings = await getSiteSettingsWithDb(emdash.db);\n\t\tconst siteUrl = (settings.url || getPublicOrigin(url, emdash?.config)).replace(\n\t\t\tTRAILING_SLASH_RE,\n\t\t\t\"\",\n\t\t);\n\n\t\tconst result = await handleSitemapIndexData(emdash.db);\n\n\t\tif (!result.success || !result.data) {\n\t\t\treturn new Response(\"<!-- Failed to generate sitemap -->\", {\n\t\t\t\tstatus: 500,\n\t\t\t\theaders: { \"Content-Type\": \"application/xml\" },\n\t\t\t});\n\t\t}\n\n\t\tconst { sitemaps } = result.data;\n\n\t\tconst lines: string[] = [\n\t\t\t'<?xml version=\"1.0\" encoding=\"UTF-8\"?>',\n\t\t\t'<sitemapindex xmlns=\"http://www.sitemaps.org/schemas/sitemap/0.9\">',\n\t\t];\n\n\t\tfor (const sitemap of sitemaps) {\n\t\t\tconst suffix = sitemap.page === 1 ? \"\" : `-${sitemap.page}`;\n\t\t\tconst loc = `${siteUrl}/sitemap-${encodeURIComponent(sitemap.collection)}${suffix}.xml`;\n\t\t\tlines.push(\"  <sitemap>\");\n\t\t\tlines.push(`    <loc>${escapeXml(loc)}</loc>`);\n\t\t\tlines.push(`    <lastmod>${escapeXml(sitemap.lastmod)}</lastmod>`);\n\t\t\tlines.push(\"  </sitemap>\");\n\t\t}\n\n\t\tlines.push(\"</sitemapindex>\");\n\n\t\treturn new Response(lines.join(\"\\n\"), {\n\t\t\tstatus: 200,\n\t\t\theaders: {\n\t\t\t\t\"Content-Type\": \"application/xml; charset=utf-8\",\n\t\t\t\t\"Cache-Control\": \"public, max-age=3600\",\n\t\t\t},\n\t\t});\n\t} catch {\n\t\treturn new Response(\"<!-- Internal error generating sitemap -->\", {\n\t\t\tstatus: 500,\n\t\t\theaders: { \"Content-Type\": \"application/xml\" },\n\t\t});\n\t}\n};\n\n/** Escape special XML characters in a string */\nfunction escapeXml(str: string): string {\n\treturn str\n\t\t.replace(AMP_RE, \"&amp;\")\n\t\t.replace(LT_RE, \"&lt;\")\n\t\t.replace(GT_RE, \"&gt;\")\n\t\t.replace(QUOT_RE, \"&quot;\")\n\t\t.replace(APOS_RE, \"&apos;\");\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;AAiBA,MAAa,YAAY;AAEzB,MAAM,oBAAoB;AAC1B,MAAM,SAAS;AACf,MAAM,QAAQ;AACd,MAAM,QAAQ;AACd,MAAM,UAAU;AAChB,MAAM,UAAU;AAEhB,MAAa,MAAgB,OAAO,EAAE,QAAQ,UAAU;CACvD,MAAM,EAAE,WAAW;AAEnB,KAAI,CAAC,QAAQ,GACZ,QAAO,IAAI,SAAS,kCAAkC;EACrD,QAAQ;EACR,SAAS,EAAE,gBAAgB,mBAAmB;EAC9C,CAAC;AAGH,KAAI;EAEH,MAAM,YADW,MAAM,sBAAsB,OAAO,GAAG,EAC7B,OAAO,gBAAgB,KAAK,QAAQ,OAAO,EAAE,QACtE,mBACA,GACA;EAED,MAAM,SAAS,MAAM,uBAAuB,OAAO,GAAG;AAEtD,MAAI,CAAC,OAAO,WAAW,CAAC,OAAO,KAC9B,QAAO,IAAI,SAAS,uCAAuC;GAC1D,QAAQ;GACR,SAAS,EAAE,gBAAgB,mBAAmB;GAC9C,CAAC;EAGH,MAAM,EAAE,aAAa,OAAO;EAE5B,MAAM,QAAkB,CACvB,8CACA,uEACA;AAED,OAAK,MAAM,WAAW,UAAU;GAC/B,MAAM,SAAS,QAAQ,SAAS,IAAI,KAAK,IAAI,QAAQ;GACrD,MAAM,MAAM,GAAG,QAAQ,WAAW,mBAAmB,QAAQ,WAAW,GAAG,OAAO;AAClF,SAAM,KAAK,cAAc;AACzB,SAAM,KAAK,YAAY,UAAU,IAAI,CAAC,QAAQ;AAC9C,SAAM,KAAK,gBAAgB,UAAU,QAAQ,QAAQ,CAAC,YAAY;AAClE,SAAM,KAAK,eAAe;;AAG3B,QAAM,KAAK,kBAAkB;AAE7B,SAAO,IAAI,SAAS,MAAM,KAAK,KAAK,EAAE;GACrC,QAAQ;GACR,SAAS;IACR,gBAAgB;IAChB,iBAAiB;IACjB;GACD,CAAC;SACK;AACP,SAAO,IAAI,SAAS,8CAA8C;GACjE,QAAQ;GACR,SAAS,EAAE,gBAAgB,mBAAmB;GAC9C,CAAC;;;;AAKJ,SAAS,UAAU,KAAqB;AACvC,QAAO,IACL,QAAQ,QAAQ,QAAQ,CACxB,QAAQ,OAAO,OAAO,CACtB,QAAQ,OAAO,OAAO,CACtB,QAAQ,SAAS,SAAS,CAC1B,QAAQ,SAAS,SAAS"}
+{"version":3,"file":"sitemap.xml.mjs","names":[],"sources":["../../../src/astro/routes/sitemap.xml.ts"],"sourcesContent":["/**\n * Sitemap index endpoint\n *\n * GET /sitemap.xml - Sitemap index listing the child sitemaps.\n *\n * Each collection with published, indexable content gets a child sitemap\n * at /sitemap-{collection}.xml, continued at /sitemap-{collection}-{n}.xml\n * once it exceeds one page. The index includes a <lastmod> per child\n * derived from the most recently updated entry on that page.\n */\n\nimport type { APIRoute } from \"astro\";\n\nimport { handleSitemapIndexData } from \"#api/handlers/seo.js\";\nimport { getPublicOrigin } from \"#api/public-url.js\";\nimport { getSiteSettingsWithDb } from \"#settings/index.js\";\n\nexport const prerender = false;\n\nconst TRAILING_SLASH_RE = /\\/$/;\nconst AMP_RE = /&/g;\nconst LT_RE = /</g;\nconst GT_RE = />/g;\nconst QUOT_RE = /\"/g;\nconst APOS_RE = /'/g;\n\nexport const GET: APIRoute = async ({ locals, url }) => {\n\tconst { emdash } = locals;\n\n\tif (!emdash?.db) {\n\t\treturn new Response(\"<!-- EmDash not configured -->\", {\n\t\t\tstatus: 500,\n\t\t\theaders: { \"Content-Type\": \"application/xml\" },\n\t\t});\n\t}\n\n\ttry {\n\t\tconst settings = await getSiteSettingsWithDb(emdash.db);\n\t\tconst siteUrl = (settings.url || getPublicOrigin(url, emdash?.config)).replace(\n\t\t\tTRAILING_SLASH_RE,\n\t\t\t\"\",\n\t\t);\n\n\t\tconst result = await handleSitemapIndexData(emdash.db);\n\n\t\tif (!result.success || !result.data) {\n\t\t\treturn new Response(\"<!-- Failed to generate sitemap -->\", {\n\t\t\t\tstatus: 500,\n\t\t\t\theaders: { \"Content-Type\": \"application/xml\" },\n\t\t\t});\n\t\t}\n\n\t\tconst { sitemaps } = result.data;\n\n\t\tconst lines: string[] = [\n\t\t\t'<?xml version=\"1.0\" encoding=\"UTF-8\"?>',\n\t\t\t'<sitemapindex xmlns=\"http://www.sitemaps.org/schemas/sitemap/0.9\">',\n\t\t];\n\n\t\tfor (const sitemap of sitemaps) {\n\t\t\tconst suffix = sitemap.page === 1 ? \"\" : `-${sitemap.page}`;\n\t\t\tconst loc = `${siteUrl}/sitemap-${encodeURIComponent(sitemap.collection)}${suffix}.xml`;\n\t\t\tlines.push(\"  <sitemap>\");\n\t\t\tlines.push(`    <loc>${escapeXml(loc)}</loc>`);\n\t\t\tlines.push(`    <lastmod>${escapeXml(sitemap.lastmod)}</lastmod>`);\n\t\t\tlines.push(\"  </sitemap>\");\n\t\t}\n\n\t\tlines.push(\"</sitemapindex>\");\n\n\t\treturn new Response(lines.join(\"\\n\"), {\n\t\t\tstatus: 200,\n\t\t\theaders: {\n\t\t\t\t\"Content-Type\": \"application/xml; charset=utf-8\",\n\t\t\t\t\"Cache-Control\": \"public, max-age=3600\",\n\t\t\t},\n\t\t});\n\t} catch {\n\t\treturn new Response(\"<!-- Internal error generating sitemap -->\", {\n\t\t\tstatus: 500,\n\t\t\theaders: { \"Content-Type\": \"application/xml\" },\n\t\t});\n\t}\n};\n\n/** Escape special XML characters in a string */\nfunction escapeXml(str: string): string {\n\treturn str\n\t\t.replace(AMP_RE, \"&amp;\")\n\t\t.replace(LT_RE, \"&lt;\")\n\t\t.replace(GT_RE, \"&gt;\")\n\t\t.replace(QUOT_RE, \"&quot;\")\n\t\t.replace(APOS_RE, \"&apos;\");\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;AAiBA,MAAa,YAAY;AAEzB,MAAM,oBAAoB;AAC1B,MAAM,SAAS;AACf,MAAM,QAAQ;AACd,MAAM,QAAQ;AACd,MAAM,UAAU;AAChB,MAAM,UAAU;AAEhB,MAAa,MAAgB,OAAO,EAAE,QAAQ,UAAU;CACvD,MAAM,EAAE,WAAW;AAEnB,KAAI,CAAC,QAAQ,GACZ,QAAO,IAAI,SAAS,kCAAkC;EACrD,QAAQ;EACR,SAAS,EAAE,gBAAgB,mBAAmB;EAC9C,CAAC;AAGH,KAAI;EAEH,MAAM,YADW,MAAM,sBAAsB,OAAO,GAAG,EAC7B,OAAO,gBAAgB,KAAK,QAAQ,OAAO,EAAE,QACtE,mBACA,GACA;EAED,MAAM,SAAS,MAAM,uBAAuB,OAAO,GAAG;AAEtD,MAAI,CAAC,OAAO,WAAW,CAAC,OAAO,KAC9B,QAAO,IAAI,SAAS,uCAAuC;GAC1D,QAAQ;GACR,SAAS,EAAE,gBAAgB,mBAAmB;GAC9C,CAAC;EAGH,MAAM,EAAE,aAAa,OAAO;EAE5B,MAAM,QAAkB,CACvB,8CACA,uEACA;AAED,OAAK,MAAM,WAAW,UAAU;GAC/B,MAAM,SAAS,QAAQ,SAAS,IAAI,KAAK,IAAI,QAAQ;GACrD,MAAM,MAAM,GAAG,QAAQ,WAAW,mBAAmB,QAAQ,WAAW,GAAG,OAAO;AAClF,SAAM,KAAK,cAAc;AACzB,SAAM,KAAK,YAAY,UAAU,IAAI,CAAC,QAAQ;AAC9C,SAAM,KAAK,gBAAgB,UAAU,QAAQ,QAAQ,CAAC,YAAY;AAClE,SAAM,KAAK,eAAe;;AAG3B,QAAM,KAAK,kBAAkB;AAE7B,SAAO,IAAI,SAAS,MAAM,KAAK,KAAK,EAAE;GACrC,QAAQ;GACR,SAAS;IACR,gBAAgB;IAChB,iBAAiB;IACjB;GACD,CAAC;SACK;AACP,SAAO,IAAI,SAAS,8CAA8C;GACjE,QAAQ;GACR,SAAS,EAAE,gBAAgB,mBAAmB;GAC9C,CAAC;;;;AAKJ,SAAS,UAAU,KAAqB;AACvC,QAAO,IACL,QAAQ,QAAQ,QAAQ,CACxB,QAAQ,OAAO,OAAO,CACtB,QAAQ,OAAO,OAAO,CACtB,QAAQ,SAAS,SAAS,CAC1B,QAAQ,SAAS,SAAS"}

package/dist/astro/types.d.mts

@@ -1,20 +1,21 @@
-import { r as ContentFieldFilters } from "../content-list-query-CYKcY6Vi.mjs";
-import { a as CollectionWithFields } from "../types-RLgeIpnF.mjs";
-import { i as ContentItem, o as ContentSeoInput } from "../types-CNB-dj6F.mjs";
-import { d as ContentResponse, u as ContentListResponse } from "../parse-CWHOFc6z.mjs";
-import { t as Database } from "../types-DCFavOii.mjs";
-import { Bt as PageMetadataContribution, Cn as ResolvedPlugin, Lt as PageFragmentContribution, fn as PublicPageContext, k as ContentActionOrigin, rn as PluginEditorPanel, t as ActorInfo, tn as PluginEditorAction } from "../types-QoPHm-2w.mjs";
-import "../options-DJWaq3Ie.mjs";
-import "../entry-lock-C7VX0NGK.mjs";
-import { f as MediaProvider, p as MediaProviderCapabilities } from "../placeholder-D41vk11_.mjs";
-import { $r as MediaResponse, Ar as RouteMeta, Mr as EmDashConfig, Or as PluginContentCacheInvalidator, Qr as MediaListResponse, Sr as ResolvedPluginEditorExtension, kr as RouteCallerInput, t as ManifestRegistryConfigurationError, wr as SandboxedPluginEntry, xr as PluginEditorExtensionDispatch } from "../config-Bsm_u_oE.mjs";
-import "../runner-BObHz5FC.mjs";
-import { $ as MediaItem, J as HookPipeline, q as EmailPipeline, x as SandboxRunner } from "../storage-query-DRyu3bSU.mjs";
-import "../index-BB9sVisO.mjs";
-import { p as Storage } from "../types-Bwpzb5o6.mjs";
-import "../types-DHO7Pd25.mjs";
-import "../hreflang-CY_F5OjF.mjs";
-import "../validate-emKxGC5F.mjs";
+import { r as ContentFieldFilters } from "../content-list-query-ByP4jRpZ.mjs";
+import { a as CollectionWithFields } from "../types-BuvSwT9Y.mjs";
+import { i as ContentItem, o as ContentSeoInput } from "../types-C4KT3Md2.mjs";
+import { d as ContentResponse, u as ContentListResponse } from "../parse-Dndx1QmN.mjs";
+import { t as Database } from "../types-DKwRUA-x.mjs";
+import { Bt as PageMetadataContribution, Cn as ResolvedPlugin, Lt as PageFragmentContribution, fn as PublicPageContext, k as ContentActionOrigin, rn as PluginEditorPanel, t as ActorInfo, tn as PluginEditorAction } from "../types-CjftrmZR.mjs";
+import "../options-BUUgroHg.mjs";
+import "../entry-lock-BulbgPBX.mjs";
+import { f as MediaProvider, p as MediaProviderCapabilities } from "../placeholder-CSKu5OkD.mjs";
+import { $r as MediaListResponse, Ar as RouteCallerInput, Cr as ResolvedPluginEditorExtension, Nr as EmDashConfig, Sr as PluginEditorExtensionDispatch, Tr as SandboxedPluginEntry, ei as MediaResponse, jr as RouteMeta, kr as PluginContentCacheInvalidator, t as ManifestRegistryConfigurationError } from "../config-sDhZvkLR.mjs";
+import "../runner-Dfgp6-S_.mjs";
+import { $ as MediaItem, J as HookPipeline, q as EmailPipeline, x as SandboxRunner } from "../storage-query-BFp06Y0s.mjs";
+import "../utils-Szp4iBQB.mjs";
+import { p as Storage } from "../types-GwAyS5SH.mjs";
+import "../index-VM7Fzxwe.mjs";
+import "../types-CadaL_k8.mjs";
+import "../hreflang-8dUOJAPJ.mjs";
+import "../validate-DDvxy6qG.mjs";
 import "../index.mjs";
 import { Kysely } from "kysely";
 import * as zod from "zod";
@@ -35,9 +36,9 @@ interface ManifestCollection {
   titleField?: string;
   dateField?: string;
   /**
-   * Omit the auto-generated sidebar entry and dashboard quick action in the
-   * admin. The collection is still listed in the manifest so its routes,
-   * editor, and API keep working.
+   * Omit the auto-generated sidebar entry, dashboard quick action, and
+   * dashboard Content card row in the admin. The collection is still listed
+   * in the manifest so its routes, editor, and API keep working.
    */
   hidden?: boolean;
   /** Phosphor icon name for the sidebar entry (kebab-case, e.g. `calendar-blank`). */
@@ -235,6 +236,7 @@ interface EmDashManifest {
     siteName?: string;
     footerLabel?: string | false;
     favicon?: string;
+    hiddenNavItems?: string[];
   };
 }
 /**

package/dist/astro/types.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.mts","names":[],"sources":["../../src/astro/types.ts"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;UAwCiB,kBAAA;EAChB,KAAA;EACA,aAAA;EACA,QAAA;EACA,MAAA;EACA,UAAA;;EAEA,QAAA;EACA,UAAA;EACA,SAAA;EAkBQ;;;;;EAZR,MAAA;EAXA;EAaA,IAAA;EAVA;;;;EAeA,KAAA;EAAA;EAEA,WAAA;EAEA;EAAA,WAAA;EACA,MAAA,EAAQ,MAAA;IAGN,IAAA;IACA,KAAA;IACA,QAAA;IACA,YAAA;IACA,MAAA;IAOA;;;;;;IAAA,OAAA,GAAU,KAAA;MAAQ,KAAA;MAAe,KAAA;IAAA,KAAmB,MAAA,mBAMxC;IAJZ,EAAA,WAY4B;IAV5B,UAAA,GAAa,MAAA,mBAuBF;IArBX,YAAA;EAAA;AAAA;;;;UAQc,cAAA;EAChB,OAAA;EAgC0B;EA9B1B,OAAA;EAAA;EAEA,OAAA;EAOA;;;;;;EAAA,SAAA;EACA,UAAA,GAAa,KAAA;IACZ,IAAA;IACA,KAAA;IACA,IAAA;IACA,KAAA;EAAA;EAED,gBAAA,GAAmB,KAAA;IAClB,EAAA;IACA,KAAA;IACA,IAAA;EAAA;EAED,YAAA,GALwB,iBAAA;EAMxB,aAAA,GAD8D,kBAAA;EAE9D,YAAA,GAAe,KAAA;IACd,IAAA;IACA,KAAA;IACA,UAAA;IACA,QAAA,GAAW,OAAA;EAAA;EAKX;EAFD,kBAAA,GAAqB,KAAA;IACpB,IAAA;IACA,KAAA;IACA,IAAA;IACA,WAAA;IACA,WAAA;IACA,MAAA,GAAS,OAAA;EAAA;AAAA;;;;AAcX;;KALY,gBAAA;;;;UAKK,cAAA;EAChB,OAAA;EACA,MAAA;EACA,IAAA;EAgG+D;;;;;EA1F/D,YAAA;EAEA;EAAA,QAAA;EACA,WAAA,EAAa,MAAA,SAAe,kBAAA;EAC5B,OAAA,EAAS,MAAA,SAAe,cAAA;EAAxB;;;;;;EAOA,QAAA,EAAU,gBAAA;EAgBV;;;;;EAVA,mBAAA;EAiBC;;;;EAZD,aAAA;EAoBC;;;;EAfD,IAAA;IACC,aAAA;IACA,OAAA;IACA,mBAAA;EAAA;EAED,aAAA;IACC,aAAA;IACA,QAAA;EAAA;EAoDC;;;EA/CF,UAAA,EAAY,KAAA;IACX,EAAA;IACA,IAAA;IACA,KAAA;IACA,aAAA;IACA,YAAA;IACA,WAAA;IACA,MAAA;IACA,gBAAA;EAAA;EAsEgB;;;;;;EA9DjB,WAAA;EA4DC;EA1DD,cAAA;EA4DC;;;;AAWF;;;;;;EA5DC,QAAA;IACC,aAAA;IACA,cAAA;IACA,MAAA;MAkGA;;;;;;;;;MAxFC,wBAAA;MA+HU;;;;MA1HV,wBAAA;IAAA;EAAA;EAmJW;EA/Ib,0BAAA,GAA6B,kCAAA;EAiJqC;;;;EA5IlE,KAAA;IACC,IAAA;IACA,QAAA;IACA,WAAA;IACA,OAAA;EAAA;AAAA;;;;;;;;UAWe,eAAA;EAChB,OAAA;EACA,IAAA,GAAO,CAAA;EACP,kBAAA;EACA,KAAA;IACC,IAAA;IACA,OAAA;IACA,OAAA,GAAU,MAAA;EAAA;AAAA;;;;;;;;UAWK,cAAA;EAEhB,qBAAA,IACC,EAAA,UACA,MAAA,6CACA,SAAA;IAAa,EAAA;IAAY,IAAA;EAAA,GACzB,cAAA,8CACA,OAAA,GAAU,OAAA,KACN,OAAA;EAGL,iBAAA,GACC,UAAA,UACA,MAAA;IACC,MAAA;IACA,IAAA;IACA,KAAA;IACA,MAAA;IACA,OAAA;IACA,KAAA;IACA,MAAA;IACA,CAAA;IACA,QAAA;IACA,SAAA;IACA,QAAA;IACA,MAAA;IACA,OAAA;IACA,WAAA;IACA,sBAAA;IACA,YAAA,GAAe,mBAAA;EAAA,MAEZ,OAAA,CAAQ,eAAA;EAEb,oBAAA,GAAuB,UAAA,aAAuB,OAAA,CAAQ,eAAA;EAEtD,gBAAA,GACC,UAAA,UACA,EAAA,UACA,MAAA,WACA,gBAAA;IAAqB,aAAA;EAAA,MACjB,OAAA,CACJ,eAAA;IACC,IAAA;MACC,EAAA;MACA,QAAA;MAAA,CACC,GAAA;IAAA;IAEF,IAAA;EAAA;EAIF,mBAAA,GACC,UAAA,UACA,IAAA;IACC,IAAA,EAAM,MAAA;IACN,IAAA;IACA,MAAA;IACA,QAAA;IACA,OAAA,GAAU,KAAA;MAAQ,QAAA;MAAkB,SAAA;IAAA;IACpC,MAAA;IACA,aAAA;IACA,GAAA,GAAM,eAAA;IACN,UAAA,GAAa,MAAA;IACb,UAAA,GAAa,MAAA;IACb,SAAA;IACA,WAAA;IACA,aAAA;IACA,aAAA;IACA,KAAA;MAAU,EAAA;MAAY,IAAA;IAAA;EAAA,MAEnB,OAAA,CAAQ,eAAA;EAEb,mBAAA,GACC,UAAA,UACA,EAAA,UACA,IAAA;IACC,IAAA,GAAO,MAAA;IACP,IAAA;IACA,MAAA;IACA,QAAA;IACA,OAAA,GAAU,KAAA;MAAQ,QAAA;MAAkB,SAAA;IAAA;IACpC,MAAA;IACA,GAAA;MACC,KAAA;MACA,WAAA;MACA,KAAA;MACA,SAAA;MACA,OAAA;IAAA;IAED,UAAA,GAAa,MAAA;IACb,UAAA,GAAa,MAAA;IACb,WAAA;IACA,IAAA;IACA,aAAA;IACA,aAAA;IACA,KAAA;MAAU,EAAA;MAAY,IAAA;IAAA;EAAA,MAEnB,OAAA,CAAQ,eAAA;EAEb,mBAAA,GAAsB,UAAA,UAAoB,EAAA,aAAe,OAAA,CAAQ,eAAA;EAGjE,wBAAA,GACC,UAAA,UACA,MAAA;IAAW,MAAA;IAAiB,IAAA;IAAe,KAAA;IAAgB,MAAA;EAAA,MACvD,OAAA,CAAQ,eAAA;EAEb,oBAAA,GAAuB,UAAA,UAAoB,EAAA,aAAe,OAAA,CAAQ,eAAA;EAElE,4BAAA,GAA+B,UAAA,UAAoB,EAAA,aAAe,OAAA,CAAQ,eAAA;EAE1E,yBAAA,GACC,UAAA,UACA,MAAA;IAAW,MAAA;EAAA,MACP,OAAA,CAAQ,eAAA;EAEb,gCAAA,GAAmC,UAAA,UAAoB,EAAA,aAAe,OAAA,CAAQ,eAAA;EAE9E,sBAAA,GACC,UAAA,UACA,EAAA,UACA,QAAA,cACI,OAAA,CAAQ,eAAA;EAGb,oBAAA,GACC,UAAA,UACA,EAAA,UACA,OAAA;IACC,WAAA;IACA,mBAAA;IACA,mBAAA;IACA,IAAA;IACA,WAAA,GAAc,IAAA;IACd,KAAA,GAAQ,SAAA;IACR,MAAA,GAAS,mBAAA;EAAA,MAEN,OAAA,CAAQ,eAAA;EAEb,sBAAA,GACC,UAAA,UACA,EAAA,UACA,OAAA;IAAY,IAAA;IAAe,KAAA,GAAQ,SAAA;IAAW,MAAA,GAAS,mBAAA;EAAA,MACnD,OAAA,CAAQ,eAAA;EAEb,qBAAA,GACC,UAAA,UACA,EAAA,UACA,WAAA,UACA,OAAA;IAAY,IAAA;IAAe,KAAA,GAAQ,SAAA;IAAW,MAAA,GAAS,mBAAA;EAAA,MACnD,OAAA,CAAQ,eAAA;EAEb,uBAAA,GACC,UAAA,UACA,EAAA,UACA,OAAA;IAAY,IAAA;EAAA,MACR,OAAA,CAAQ,eAAA;EAEb,2BAAA,GAA8B,UAAA,aAAuB,OAAA,CAAQ,eAAA;EAE7D,yBAAA,GACC,UAAA,UACA,EAAA,UACA,OAAA;IAAY,IAAA;EAAA,MACR,OAAA,CAAQ,eAAA;EAEb,oBAAA,GAAuB,UAAA,UAAoB,EAAA,aAAe,OAAA,CAAQ,eAAA;EAElE,yBAAA,GAA4B,UAAA,UAAoB,EAAA,aAAe,OAAA,CAAQ,eAAA;EAGvE,eAAA,GAAkB,MAAA;IACjB,MAAA;IACA,IAAA;IACA,KAAA;IACA,QAAA;IACA,QAAA;EAAA,MACK,OAAA,CAAQ,eAAA;EAEd,cAAA,GAAiB,EAAA,aAAe,OAAA,CAAQ,eAAA;EAExC,iBAAA,GAAoB,KAAA;IACnB,QAAA;IACA,MAAA;IACA,GAAA;IACA,WAAA;IACA,GAAA;IACA,OAAA;IACA,QAAA;IACA,aAAA;EAAA,MACK,OAAA,CAAQ,eAAA;EAEd,iBAAA,GAAoB,KAAA;IACnB,QAAA;IACA,QAAA;IACA,IAAA;IACA,KAAA;IACA,MAAA;IACA,GAAA;IACA,OAAA;IACA,UAAA;IACA,WAAA;IACA,QAAA;IACA,aAAA;IACA,QAAA;IACA,QAAA;EAAA,MACK,OAAA,CAAQ,eAAA;EAEd,yBAAA,GAA4B,KAAA;IAC3B,UAAA;IACA,QAAA;EAAA,MACK,OAAA,CAAQ,eAAA;EAEd,iBAAA,GACC,EAAA,UACA,KAAA;IACC,GAAA;IACA,OAAA;IACA,KAAA;IACA,MAAA;IACA,QAAA;IACA,MAAA;IACA,MAAA;EAAA,MAEG,OAAA,CAAQ,eAAA;EAEb,0BAAA,IACC,EAAA,UACA,kBAAA,UACA,KAAA;IAAS,IAAA;IAAc,KAAA;IAAe,MAAA;IAAgB,WAAA;EAAA,MAClD,OAAA,CAAQ,eAAA;EAEb,iBAAA,GAAoB,EAAA,aAAe,OAAA,CAAQ,eAAA;EAG3C,kBAAA,GACC,UAAA,UACA,OAAA,UACA,MAAA;IAAW,KAAA;EAAA,MACP,OAAA,CAAQ,eAAA;EAEb,iBAAA,GAAoB,UAAA,aAAuB,OAAA,CAC1C,eAAA;IACC,IAAA;MACC,EAAA;MACA,UAAA;MACA,OAAA;MACA,QAAA;MAAA,CACC,GAAA;IAAA;EAAA;EAKJ,qBAAA,GAAwB,UAAA,UAAoB,YAAA,aAAyB,OAAA,CAAQ,eAAA;EAI7E,oBAAA,GACC,QAAA,UACA,MAAA,UACA,IAAA,UACA,OAAA,EAAS,OAAA,EACT,IAAA,GAAO,gBAAA,SACP,sBAAA,GAAyB,6BAAA,EACzB,cAAA,GAAiB,6BAAA,KACb,OAAA,CAAQ,eAAA;EACb,wBAAA,GACC,QAAA,UACA,IAAA,sBACA,WAAA,UACA,UAAA,aACI,6BAAA;EACL,0BAAA,GAA6B,UAAA,aAAuB,OAAA,CAAQ,oBAAA;EAG5D,0BAAA,GACC,QAAA,UACA,MAAA,UACA,IAAA,UACA,OAAA,EAAS,OAAA,KACL,OAAA,CAAQ,eAAA;EAMb,wBAAA,GAA2B,QAAA,UAAkB,IAAA,aAAiB,SAAA;EAI9D,kBAAA,GAAqB,QAAA,UAAkB,IAAA,aAAiB,SAAA;EACxD,wBAAA,QAAgC,OAAA,CAC/B,KAAA;IACC,QAAA;IACA,IAAA;IACA,WAAA;IACA,KAAA;IACA,UAAA;IACA,WAAA;IACA,WAAA,EAT+D,GAAA,CASpC,OAAA;IAC3B,YAAA,GADkC,GAAA,CACL,OAAA;EAAA;EAG/B,iBAAA,GAAoB,QAAA,cAAsB,OAAA,CACzC,KAAA;IACC,QAAA;IACA,IAAA;IACA,WAAA;IACA,KAAA;IACA,UAAA;IACA,WAAA;IACA,WAAA,EApBqC,GAAA,CAoBV,OAAA;IAC3B,YAAA,GADkC,GAAA,CACL,OAAA;EAAA;EAG/B,yBAAA,GACC,KAAA,EAAO,OAAA,CAAQ,UAAA,CAAW,cAAA,yBAC1B,QAAA;EAED,mBAAA,GACC,QAAA,UACA,QAAA,UACA,KAAA,UACA,KAAA,WACA,OAAA,UACA,OAAA,EAAS,OAAA,EACT,MAAA,GAAS,gBAAA,SACT,sBAAA,GAAyB,6BAAA,KACrB,OAAA,CAAQ,eAAA;EACb,qBAAA,GACC,QAAA,UACA,QAAA,UACA,KAAA,UACA,OAAA,UACA,OAAA,EAAS,OAAA,EACT,MAAA,aACI,OAAA;EAGL,gBAAA,GAAmB,UAAA,aAHP,aAAA;EAIZ,oBAAA,QAA4B,KAAA;IAC3B,EAAA;IACA,IAAA;IACA,IAAA;IACA,YAAA,EALkF,yBAAA;EAAA;EASnF,OAAA,EARiC,OAAA;EASjC,EAAA,EAAI,MAAA,CADkC,QAAA;EAEtC,iBAAA,IAAqB,UAAA;EAGrB,KAAA,EAJU,YAAA;EAOV,KAAA,EAHiD,aAAA;EAMjD,iBAAA,EAHkD,cAAA;EAOlD,sBAAA,EAJ+D,oBAAA;EAO/D,MAAA,EAH2E,YAAA;EAQ3E,WAAA,QAAmB,OAAA,CAAQ,cAAA;EAK3B,yBAAA;EAGA,gBAAA,QAR0B,aAAA;EAY1B,iBAAA;EAGA,sBAAA,QAA8B,OAAA;EAG9B,mBAAA,QAA2B,OAAA;EAE3B,yBAAA,GAA4B,QAAA,aAAqB,OAAA;EACjD,0BAAA,GAA6B,QAAA,aAAqB,OAAA;EAClD,2BAAA,GAA8B,QAAA,UAAkB,UAAA,cAAwB,OAAA;EAExE,8BAAA,GAAiC,QAAA,aAAqB,MAAA;EAGtD,eAAA,GAAkB,QAAA,UAAkB,MAAA,4BAAkC,OAAA;EAGtE,mBAAA,GACC,IAAA,EAJ4E,iBAAA,KAKxE,OAAA,CADiD,wBAAA;EAEtD,oBAAA,GACC,IAAA,EAFW,iBAAA,KAGP,OAAA,CADiD,wBAAA;EA1QtD;;;;;;EAmRA,mBAAA,SAA4B,OAAA;AAAA"}
+{"version":3,"file":"types.d.mts","names":[],"sources":["../../src/astro/types.ts"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;UAwCiB,kBAAA;EAChB,KAAA;EACA,aAAA;EACA,QAAA;EACA,MAAA;EACA,UAAA;EALkC;EAOlC,QAAA;EACA,UAAA;EACA,SAAA;EAoCe;;;;;EA9Bf,MAAA;EAZA;EAcA,IAAA;EAZA;;;;EAiBA,KAAA;EALA;EAOA,WAAA;EAAA;EAEA,WAAA;EACA,MAAA,EAAQ,MAAA;IAGN,IAAA;IACA,KAAA;IACA,QAAA;IACA,YAAA;IACA,MAAA;IAAA;;;;;;IAOA,OAAA,GAAU,KAAA;MAAQ,KAAA;MAAe,KAAA;IAAA,KAAmB,MAAA,mBAMxC;IAJZ,EAAA,WAYc;IAVd,UAAA,GAAa,MAAA,mBAUe;IAR5B,YAAA;EAAA;AAAA;;;;UAQc,cAAA;EAChB,OAAA;EAgC0B;EA9B1B,OAAA;EAFA;EAIA,OAAA;EAAA;;;;;;EAOA,SAAA;EACA,UAAA,GAAa,KAAA;IACZ,IAAA;IACA,KAAA;IACA,IAAA;IACA,KAAA;EAAA;EAED,gBAAA,GAAmB,KAAA;IAClB,EAAA;IACA,KAAA;IACA,IAAA;EAAA;EAED,YAAA,GALwB,iBAAA;EAMxB,aAAA,GAD8D,kBAAA;EAE9D,YAAA,GAAe,KAAA;IACd,IAAA;IACA,KAAA;IACA,UAAA;IACA,QAAA,GAAW,OAAA;EAAA;EAIX;EADD,kBAAA,GAAqB,KAAA;IACpB,IAAA;IACA,KAAA;IACA,IAAA;IACA,WAAA;IACA,WAAA;IACA,MAAA,GAAS,OAAA;EAAA;AAAA;;;;;AAcX;KALY,gBAAA;;;;UAKK,cAAA;EAChB,OAAA;EACA,MAAA;EACA,IAAA;EAgG6B;;;;;EA1F7B,YAAA;EAAA;EAEA,QAAA;EACA,WAAA,EAAa,MAAA,SAAe,kBAAA;EAC5B,OAAA,EAAS,MAAA,SAAe,cAAA;EADI;;;;;;EAQ5B,QAAA,EAAU,gBAAA;EAWV;;;;;EALA,mBAAA;EAgBC;;;;EAXD,aAAA;EAmBC;;;;EAdD,IAAA;IACC,aAAA;IACA,OAAA;IACA,mBAAA;EAAA;EAED,aAAA;IACC,aAAA;IACA,QAAA;EAAA;EA+CC;;;EA1CF,UAAA,EAAY,KAAA;IACX,EAAA;IACA,IAAA;IACA,KAAA;IACA,aAAA;IACA,YAAA;IACA,WAAA;IACA,MAAA;IACA,gBAAA;EAAA;EAgE8B;;;;;;EAxD/B,WAAA;EA2DA;EAzDA,cAAA;EA2DC;;;;;;AAaF;;;;EA7DC,QAAA;IACC,aAAA;IACA,cAAA;IACA,MAAA;MA2FqD;;;;;;;;;MAjFpD,wBAAA;MAsHG;;;;MAjHH,wBAAA;IAAA;EAAA;EA8I+D;EA1IjE,0BAAA,GAA6B,kCAAA;EAgJhB;;;;EA3Ib,KAAA;IACC,IAAA;IACA,QAAA;IACA,WAAA;IACA,OAAA;IACA,cAAA;EAAA;AAAA;;;;;;;;UAWe,eAAA;EAChB,OAAA;EACA,IAAA,GAAO,CAAA;EACP,kBAAA;EACA,KAAA;IACC,IAAA;IACA,OAAA;IACA,OAAA,GAAU,MAAA;EAAA;AAAA;;;;;;;;UAWK,cAAA;EAEhB,qBAAA,IACC,EAAA,UACA,MAAA,6CACA,SAAA;IAAa,EAAA;IAAY,IAAA;EAAA,GACzB,cAAA,8CACA,OAAA,GAAU,OAAA,KACN,OAAA;EAGL,iBAAA,GACC,UAAA,UACA,MAAA;IACC,MAAA;IACA,IAAA;IACA,KAAA;IACA,MAAA;IACA,OAAA;IACA,KAAA;IACA,MAAA;IACA,CAAA;IACA,QAAA;IACA,SAAA;IACA,QAAA;IACA,MAAA;IACA,OAAA;IACA,WAAA;IACA,sBAAA;IACA,YAAA,GAAe,mBAAA;EAAA,MAEZ,OAAA,CAAQ,eAAA;EAEb,oBAAA,GAAuB,UAAA,aAAuB,OAAA,CAAQ,eAAA;EAEtD,gBAAA,GACC,UAAA,UACA,EAAA,UACA,MAAA,WACA,gBAAA;IAAqB,aAAA;EAAA,MACjB,OAAA,CACJ,eAAA;IACC,IAAA;MACC,EAAA;MACA,QAAA;MAAA,CACC,GAAA;IAAA;IAEF,IAAA;EAAA;EAIF,mBAAA,GACC,UAAA,UACA,IAAA;IACC,IAAA,EAAM,MAAA;IACN,IAAA;IACA,MAAA;IACA,QAAA;IACA,OAAA,GAAU,KAAA;MAAQ,QAAA;MAAkB,SAAA;IAAA;IACpC,MAAA;IACA,aAAA;IACA,GAAA,GAAM,eAAA;IACN,UAAA,GAAa,MAAA;IACb,UAAA,GAAa,MAAA;IACb,SAAA;IACA,WAAA;IACA,aAAA;IACA,aAAA;IACA,KAAA;MAAU,EAAA;MAAY,IAAA;IAAA;EAAA,MAEnB,OAAA,CAAQ,eAAA;EAEb,mBAAA,GACC,UAAA,UACA,EAAA,UACA,IAAA;IACC,IAAA,GAAO,MAAA;IACP,IAAA;IACA,MAAA;IACA,QAAA;IACA,OAAA,GAAU,KAAA;MAAQ,QAAA;MAAkB,SAAA;IAAA;IACpC,MAAA;IACA,GAAA;MACC,KAAA;MACA,WAAA;MACA,KAAA;MACA,SAAA;MACA,OAAA;IAAA;IAED,UAAA,GAAa,MAAA;IACb,UAAA,GAAa,MAAA;IACb,WAAA;IACA,IAAA;IACA,aAAA;IACA,aAAA;IACA,KAAA;MAAU,EAAA;MAAY,IAAA;IAAA;EAAA,MAEnB,OAAA,CAAQ,eAAA;EAEb,mBAAA,GAAsB,UAAA,UAAoB,EAAA,aAAe,OAAA,CAAQ,eAAA;EAGjE,wBAAA,GACC,UAAA,UACA,MAAA;IAAW,MAAA;IAAiB,IAAA;IAAe,KAAA;IAAgB,MAAA;EAAA,MACvD,OAAA,CAAQ,eAAA;EAEb,oBAAA,GAAuB,UAAA,UAAoB,EAAA,aAAe,OAAA,CAAQ,eAAA;EAElE,4BAAA,GAA+B,UAAA,UAAoB,EAAA,aAAe,OAAA,CAAQ,eAAA;EAE1E,yBAAA,GACC,UAAA,UACA,MAAA;IAAW,MAAA;EAAA,MACP,OAAA,CAAQ,eAAA;EAEb,gCAAA,GAAmC,UAAA,UAAoB,EAAA,aAAe,OAAA,CAAQ,eAAA;EAE9E,sBAAA,GACC,UAAA,UACA,EAAA,UACA,QAAA,cACI,OAAA,CAAQ,eAAA;EAGb,oBAAA,GACC,UAAA,UACA,EAAA,UACA,OAAA;IACC,WAAA;IACA,mBAAA;IACA,mBAAA;IACA,IAAA;IACA,WAAA,GAAc,IAAA;IACd,KAAA,GAAQ,SAAA;IACR,MAAA,GAAS,mBAAA;EAAA,MAEN,OAAA,CAAQ,eAAA;EAEb,sBAAA,GACC,UAAA,UACA,EAAA,UACA,OAAA;IAAY,IAAA;IAAe,KAAA,GAAQ,SAAA;IAAW,MAAA,GAAS,mBAAA;EAAA,MACnD,OAAA,CAAQ,eAAA;EAEb,qBAAA,GACC,UAAA,UACA,EAAA,UACA,WAAA,UACA,OAAA;IAAY,IAAA;IAAe,KAAA,GAAQ,SAAA;IAAW,MAAA,GAAS,mBAAA;EAAA,MACnD,OAAA,CAAQ,eAAA;EAEb,uBAAA,GACC,UAAA,UACA,EAAA,UACA,OAAA;IAAY,IAAA;EAAA,MACR,OAAA,CAAQ,eAAA;EAEb,2BAAA,GAA8B,UAAA,aAAuB,OAAA,CAAQ,eAAA;EAE7D,yBAAA,GACC,UAAA,UACA,EAAA,UACA,OAAA;IAAY,IAAA;EAAA,MACR,OAAA,CAAQ,eAAA;EAEb,oBAAA,GAAuB,UAAA,UAAoB,EAAA,aAAe,OAAA,CAAQ,eAAA;EAElE,yBAAA,GAA4B,UAAA,UAAoB,EAAA,aAAe,OAAA,CAAQ,eAAA;EAGvE,eAAA,GAAkB,MAAA;IACjB,MAAA;IACA,IAAA;IACA,KAAA;IACA,QAAA;IACA,QAAA;EAAA,MACK,OAAA,CAAQ,eAAA;EAEd,cAAA,GAAiB,EAAA,aAAe,OAAA,CAAQ,eAAA;EAExC,iBAAA,GAAoB,KAAA;IACnB,QAAA;IACA,MAAA;IACA,GAAA;IACA,WAAA;IACA,GAAA;IACA,OAAA;IACA,QAAA;IACA,aAAA;EAAA,MACK,OAAA,CAAQ,eAAA;EAEd,iBAAA,GAAoB,KAAA;IACnB,QAAA;IACA,QAAA;IACA,IAAA;IACA,KAAA;IACA,MAAA;IACA,GAAA;IACA,OAAA;IACA,UAAA;IACA,WAAA;IACA,QAAA;IACA,aAAA;IACA,QAAA;IACA,QAAA;EAAA,MACK,OAAA,CAAQ,eAAA;EAEd,yBAAA,GAA4B,KAAA;IAC3B,UAAA;IACA,QAAA;EAAA,MACK,OAAA,CAAQ,eAAA;EAEd,iBAAA,GACC,EAAA,UACA,KAAA;IACC,GAAA;IACA,OAAA;IACA,KAAA;IACA,MAAA;IACA,QAAA;IACA,MAAA;IACA,MAAA;EAAA,MAEG,OAAA,CAAQ,eAAA;EAEb,0BAAA,IACC,EAAA,UACA,kBAAA,UACA,KAAA;IAAS,IAAA;IAAc,KAAA;IAAe,MAAA;IAAgB,WAAA;EAAA,MAClD,OAAA,CAAQ,eAAA;EAEb,iBAAA,GAAoB,EAAA,aAAe,OAAA,CAAQ,eAAA;EAG3C,kBAAA,GACC,UAAA,UACA,OAAA,UACA,MAAA;IAAW,KAAA;EAAA,MACP,OAAA,CAAQ,eAAA;EAEb,iBAAA,GAAoB,UAAA,aAAuB,OAAA,CAC1C,eAAA;IACC,IAAA;MACC,EAAA;MACA,UAAA;MACA,OAAA;MACA,QAAA;MAAA,CACC,GAAA;IAAA;EAAA;EAKJ,qBAAA,GAAwB,UAAA,UAAoB,YAAA,aAAyB,OAAA,CAAQ,eAAA;EAI7E,oBAAA,GACC,QAAA,UACA,MAAA,UACA,IAAA,UACA,OAAA,EAAS,OAAA,EACT,IAAA,GAAO,gBAAA,SACP,sBAAA,GAAyB,6BAAA,EACzB,cAAA,GAAiB,6BAAA,KACb,OAAA,CAAQ,eAAA;EACb,wBAAA,GACC,QAAA,UACA,IAAA,sBACA,WAAA,UACA,UAAA,aACI,6BAAA;EACL,0BAAA,GAA6B,UAAA,aAAuB,OAAA,CAAQ,oBAAA;EAG5D,0BAAA,GACC,QAAA,UACA,MAAA,UACA,IAAA,UACA,OAAA,EAAS,OAAA,KACL,OAAA,CAAQ,eAAA;EAMb,wBAAA,GAA2B,QAAA,UAAkB,IAAA,aAAiB,SAAA;EAI9D,kBAAA,GAAqB,QAAA,UAAkB,IAAA,aAAiB,SAAA;EACxD,wBAAA,QAAgC,OAAA,CAC/B,KAAA;IACC,QAAA;IACA,IAAA;IACA,WAAA;IACA,KAAA;IACA,UAAA;IACA,WAAA;IACA,WAAA,EAT+D,GAAA,CASpC,OAAA;IAC3B,YAAA,GADkC,GAAA,CACL,OAAA;EAAA;EAG/B,iBAAA,GAAoB,QAAA,cAAsB,OAAA,CACzC,KAAA;IACC,QAAA;IACA,IAAA;IACA,WAAA;IACA,KAAA;IACA,UAAA;IACA,WAAA;IACA,WAAA,EApBqC,GAAA,CAoBV,OAAA;IAC3B,YAAA,GADkC,GAAA,CACL,OAAA;EAAA;EAG/B,yBAAA,GACC,KAAA,EAAO,OAAA,CAAQ,UAAA,CAAW,cAAA,yBAC1B,QAAA;EAED,mBAAA,GACC,QAAA,UACA,QAAA,UACA,KAAA,UACA,KAAA,WACA,OAAA,UACA,OAAA,EAAS,OAAA,EACT,MAAA,GAAS,gBAAA,SACT,sBAAA,GAAyB,6BAAA,KACrB,OAAA,CAAQ,eAAA;EACb,qBAAA,GACC,QAAA,UACA,QAAA,UACA,KAAA,UACA,OAAA,UACA,OAAA,EAAS,OAAA,EACT,MAAA,aACI,OAAA;EAGL,gBAAA,GAAmB,UAAA,aAHP,aAAA;EAIZ,oBAAA,QAA4B,KAAA;IAC3B,EAAA;IACA,IAAA;IACA,IAAA;IACA,YAAA,EALkF,yBAAA;EAAA;EASnF,OAAA,EARiC,OAAA;EASjC,EAAA,EAAI,MAAA,CADkC,QAAA;EAEtC,iBAAA,IAAqB,UAAA;EAGrB,KAAA,EAJU,YAAA;EAOV,KAAA,EAHiD,aAAA;EAMjD,iBAAA,EAHkD,cAAA;EAOlD,sBAAA,EAJ+D,oBAAA;EAO/D,MAAA,EAH2E,YAAA;EAQ3E,WAAA,QAAmB,OAAA,CAAQ,cAAA;EAK3B,yBAAA;EAGA,gBAAA,QAR0B,aAAA;EAY1B,iBAAA;EAGA,sBAAA,QAA8B,OAAA;EAG9B,mBAAA,QAA2B,OAAA;EAE3B,yBAAA,GAA4B,QAAA,aAAqB,OAAA;EACjD,0BAAA,GAA6B,QAAA,aAAqB,OAAA;EAClD,2BAAA,GAA8B,QAAA,UAAkB,UAAA,cAAwB,OAAA;EAExE,8BAAA,GAAiC,QAAA,aAAqB,MAAA;EAGtD,eAAA,GAAkB,QAAA,UAAkB,MAAA,4BAAkC,OAAA;EAGtE,mBAAA,GACC,IAAA,EAJ4E,iBAAA,KAKxE,OAAA,CADiD,wBAAA;EAEtD,oBAAA,GACC,IAAA,EAFW,iBAAA,KAGP,OAAA,CADiD,wBAAA;EA5QzC;;;;;;EAqRb,mBAAA,SAA4B,OAAA;AAAA"}

package/dist/{audit-_gieLVGU.mjs → audit-B8XE-0UV.mjs}

@@ -1,4 +1,4 @@
-import { c as decodeCursor, l as encodeCursor } from "./types-D2NEXtgB.mjs";
+import { l as decodeCursor, u as encodeCursor } from "./types-DwhEvIVb.mjs";
 import { ulid } from "ulidx";
 
 //#region src/database/repositories/audit.ts
@@ -124,4 +124,4 @@ var AuditRepository = class {
 
 //#endregion
 export { AuditRepository as t };
-//# sourceMappingURL=audit-_gieLVGU.mjs.map
+//# sourceMappingURL=audit-B8XE-0UV.mjs.map

package/dist/{audit-_gieLVGU.mjs.map → audit-B8XE-0UV.mjs.map}

@@ -1 +1 @@
-{"version":3,"file":"audit-_gieLVGU.mjs","names":[],"sources":["../src/database/repositories/audit.ts"],"sourcesContent":["import type { Kysely } from \"kysely\";\nimport { ulid } from \"ulidx\";\n\nimport type { Database, AuditLogTable } from \"../types.js\";\nimport { encodeCursor, decodeCursor, type FindManyResult } from \"./types.js\";\n\nexport type AuditAction =\n\t| \"create\"\n\t| \"update\"\n\t| \"delete\"\n\t| \"publish\"\n\t| \"unpublish\"\n\t| \"login\"\n\t| \"logout\"\n\t| \"password_change\"\n\t| \"settings_update\"\n\t| \"schema_change\"\n\t| \"plugin_tool_invoke\"\n\t| \"transfer_export_create\"\n\t| \"transfer_import_create\"\n\t| \"transfer_import_execute\"\n\t| \"transfer_import_cancel\"\n\t| \"transfer_import_abandon\"\n\t| \"transfer_import_complete\"\n\t| \"transfer_import_fail\"\n\t| \"transfer_approval_approve\"\n\t| \"transfer_approval_deny\";\n\nexport type AuditStatus = \"success\" | \"failure\" | \"denied\";\n\nexport interface AuditLog {\n\tid: string;\n\ttimestamp: string;\n\tactorId: string | null;\n\tactorIp: string | null;\n\taction: AuditAction;\n\tresourceType: string | null;\n\tresourceId: string | null;\n\tdetails: Record<string, unknown> | null;\n\tstatus: AuditStatus | null;\n}\n\nexport interface CreateAuditLogInput {\n\tactorId?: string;\n\tactorIp?: string;\n\taction: AuditAction;\n\tresourceType?: string;\n\tresourceId?: string;\n\tdetails?: Record<string, unknown>;\n\tstatus?: AuditStatus;\n}\n\nexport interface AuditLogQuery {\n\tactorId?: string;\n\taction?: AuditAction;\n\tresourceType?: string;\n\tresourceId?: string;\n\tstatus?: AuditStatus;\n\tsince?: string; // ISO date\n\tuntil?: string; // ISO date\n\tlimit?: number;\n\tcursor?: string;\n}\n\n/**\n * Audit repository for logging system events\n *\n * Tracks user actions for security, debugging, and compliance.\n * All mutations should create an audit log entry.\n */\nexport class AuditRepository {\n\tconstructor(private db: Kysely<Database>) {}\n\n\t/**\n\t * Create an audit log entry\n\t */\n\tasync log(input: CreateAuditLogInput): Promise<AuditLog> {\n\t\tconst id = ulid();\n\n\t\tconst row: Omit<AuditLogTable, \"timestamp\"> = {\n\t\t\tid,\n\t\t\tactor_id: input.actorId ?? null,\n\t\t\tactor_ip: input.actorIp ?? null,\n\t\t\taction: input.action,\n\t\t\tresource_type: input.resourceType ?? null,\n\t\t\tresource_id: input.resourceId ?? null,\n\t\t\tdetails: input.details ? JSON.stringify(input.details) : null,\n\t\t\tstatus: input.status ?? null,\n\t\t};\n\n\t\tawait this.db.insertInto(\"audit_logs\").values(row).execute();\n\n\t\tconst log = await this.findById(id);\n\t\tif (!log) {\n\t\t\tthrow new Error(\"Failed to create audit log\");\n\t\t}\n\t\treturn log;\n\t}\n\n\t/**\n\t * Find audit log by ID\n\t */\n\tasync findById(id: string): Promise<AuditLog | null> {\n\t\tconst row = await this.db\n\t\t\t.selectFrom(\"audit_logs\")\n\t\t\t.selectAll()\n\t\t\t.where(\"id\", \"=\", id)\n\t\t\t.executeTakeFirst();\n\n\t\treturn row ? this.rowToAuditLog(row) : null;\n\t}\n\n\t/**\n\t * Query audit logs with filters and cursor-based pagination\n\t */\n\tasync findMany(query: AuditLogQuery = {}): Promise<FindManyResult<AuditLog>> {\n\t\tconst limit = Math.min(Math.max(1, query.limit || 50), 100);\n\n\t\tlet q = this.db\n\t\t\t.selectFrom(\"audit_logs\")\n\t\t\t.selectAll()\n\t\t\t.orderBy(\"timestamp\", \"desc\")\n\t\t\t.orderBy(\"id\", \"desc\")\n\t\t\t.limit(limit + 1);\n\n\t\tif (query.actorId) {\n\t\t\tq = q.where(\"actor_id\", \"=\", query.actorId);\n\t\t}\n\n\t\tif (query.action) {\n\t\t\tq = q.where(\"action\", \"=\", query.action);\n\t\t}\n\n\t\tif (query.resourceType) {\n\t\t\tq = q.where(\"resource_type\", \"=\", query.resourceType);\n\t\t}\n\n\t\tif (query.resourceId) {\n\t\t\tq = q.where(\"resource_id\", \"=\", query.resourceId);\n\t\t}\n\n\t\tif (query.status) {\n\t\t\tq = q.where(\"status\", \"=\", query.status);\n\t\t}\n\n\t\tif (query.since) {\n\t\t\tq = q.where(\"timestamp\", \">=\", query.since);\n\t\t}\n\n\t\tif (query.until) {\n\t\t\tq = q.where(\"timestamp\", \"<=\", query.until);\n\t\t}\n\n\t\tif (query.cursor) {\n\t\t\tconst decoded = decodeCursor(query.cursor);\n\t\t\tq = q.where((eb) =>\n\t\t\t\teb.or([\n\t\t\t\t\teb(\"timestamp\", \"<\", decoded.orderValue),\n\t\t\t\t\teb.and([eb(\"timestamp\", \"=\", decoded.orderValue), eb(\"id\", \"<\", decoded.id)]),\n\t\t\t\t]),\n\t\t\t);\n\t\t}\n\n\t\tconst rows = await q.execute();\n\t\tconst items = rows.slice(0, limit).map((row) => this.rowToAuditLog(row));\n\t\tconst result: FindManyResult<AuditLog> = { items };\n\n\t\tif (rows.length > limit && items.length > 0) {\n\t\t\tconst last = items.at(-1)!;\n\t\t\tresult.nextCursor = encodeCursor(last.timestamp, last.id);\n\t\t}\n\n\t\treturn result;\n\t}\n\n\t/**\n\t * Get all logs for a specific resource\n\t */\n\tasync findByResource(\n\t\tresourceType: string,\n\t\tresourceId: string,\n\t\toptions: { limit?: number } = {},\n\t): Promise<AuditLog[]> {\n\t\tlet query = this.db\n\t\t\t.selectFrom(\"audit_logs\")\n\t\t\t.selectAll()\n\t\t\t.where(\"resource_type\", \"=\", resourceType)\n\t\t\t.where(\"resource_id\", \"=\", resourceId)\n\t\t\t.orderBy(\"timestamp\", \"desc\");\n\n\t\tif (options.limit) {\n\t\t\tquery = query.limit(options.limit);\n\t\t}\n\n\t\tconst rows = await query.execute();\n\t\treturn rows.map((row) => this.rowToAuditLog(row));\n\t}\n\n\t/**\n\t * Get all logs for a specific user\n\t */\n\tasync findByActor(\n\t\tactorId: string,\n\t\toptions: { limit?: number; since?: string } = {},\n\t): Promise<AuditLog[]> {\n\t\tlet query = this.db\n\t\t\t.selectFrom(\"audit_logs\")\n\t\t\t.selectAll()\n\t\t\t.where(\"actor_id\", \"=\", actorId)\n\t\t\t.orderBy(\"timestamp\", \"desc\");\n\n\t\tif (options.since) {\n\t\t\tquery = query.where(\"timestamp\", \">=\", options.since);\n\t\t}\n\n\t\tif (options.limit) {\n\t\t\tquery = query.limit(options.limit);\n\t\t}\n\n\t\tconst rows = await query.execute();\n\t\treturn rows.map((row) => this.rowToAuditLog(row));\n\t}\n\n\t/**\n\t * Count logs matching a query\n\t */\n\tasync count(query: Omit<AuditLogQuery, \"limit\" | \"cursor\"> = {}): Promise<number> {\n\t\tlet q = this.db.selectFrom(\"audit_logs\").select((eb) => eb.fn.count(\"id\").as(\"count\"));\n\n\t\tif (query.actorId) {\n\t\t\tq = q.where(\"actor_id\", \"=\", query.actorId);\n\t\t}\n\n\t\tif (query.action) {\n\t\t\tq = q.where(\"action\", \"=\", query.action);\n\t\t}\n\n\t\tif (query.resourceType) {\n\t\t\tq = q.where(\"resource_type\", \"=\", query.resourceType);\n\t\t}\n\n\t\tif (query.resourceId) {\n\t\t\tq = q.where(\"resource_id\", \"=\", query.resourceId);\n\t\t}\n\n\t\tif (query.status) {\n\t\t\tq = q.where(\"status\", \"=\", query.status);\n\t\t}\n\n\t\tif (query.since) {\n\t\t\tq = q.where(\"timestamp\", \">=\", query.since);\n\t\t}\n\n\t\tif (query.until) {\n\t\t\tq = q.where(\"timestamp\", \"<=\", query.until);\n\t\t}\n\n\t\tconst result = await q.executeTakeFirst();\n\t\treturn Number(result?.count || 0);\n\t}\n\n\t/**\n\t * Delete old audit logs (for retention policy)\n\t */\n\tasync deleteOlderThan(date: string): Promise<number> {\n\t\tconst result = await this.db\n\t\t\t.deleteFrom(\"audit_logs\")\n\t\t\t.where(\"timestamp\", \"<\", date)\n\t\t\t.executeTakeFirst();\n\n\t\treturn Number(result.numDeletedRows ?? 0);\n\t}\n\n\t/**\n\t * Convert database row to AuditLog object\n\t */\n\tprivate rowToAuditLog(row: {\n\t\tid: string;\n\t\ttimestamp: string;\n\t\tactor_id: string | null;\n\t\tactor_ip: string | null;\n\t\taction: string;\n\t\tresource_type: string | null;\n\t\tresource_id: string | null;\n\t\tdetails: string | null;\n\t\tstatus: string | null;\n\t}): AuditLog {\n\t\treturn {\n\t\t\tid: row.id,\n\t\t\ttimestamp: row.timestamp,\n\t\t\tactorId: row.actor_id,\n\t\t\tactorIp: row.actor_ip,\n\t\t\t// eslint-disable-next-line typescript/no-unsafe-type-assertion -- DB stores string; validated at insert but linter can't follow\n\t\t\taction: row.action as AuditAction,\n\t\t\tresourceType: row.resource_type,\n\t\t\tresourceId: row.resource_id,\n\t\t\tdetails: row.details ? JSON.parse(row.details) : null,\n\t\t\t// eslint-disable-next-line typescript/no-unsafe-type-assertion -- DB stores string; validated at insert but linter can't follow\n\t\t\tstatus: row.status as AuditStatus | null,\n\t\t};\n\t}\n}\n"],"mappings":";;;;;;;;;;AAsEA,IAAa,kBAAb,MAA6B;CAC5B,YAAY,AAAQ,IAAsB;EAAtB;;;;;CAKpB,MAAM,IAAI,OAA+C;EACxD,MAAM,KAAK,MAAM;EAEjB,MAAM,MAAwC;GAC7C;GACA,UAAU,MAAM,WAAW;GAC3B,UAAU,MAAM,WAAW;GAC3B,QAAQ,MAAM;GACd,eAAe,MAAM,gBAAgB;GACrC,aAAa,MAAM,cAAc;GACjC,SAAS,MAAM,UAAU,KAAK,UAAU,MAAM,QAAQ,GAAG;GACzD,QAAQ,MAAM,UAAU;GACxB;AAED,QAAM,KAAK,GAAG,WAAW,aAAa,CAAC,OAAO,IAAI,CAAC,SAAS;EAE5D,MAAM,MAAM,MAAM,KAAK,SAAS,GAAG;AACnC,MAAI,CAAC,IACJ,OAAM,IAAI,MAAM,6BAA6B;AAE9C,SAAO;;;;;CAMR,MAAM,SAAS,IAAsC;EACpD,MAAM,MAAM,MAAM,KAAK,GACrB,WAAW,aAAa,CACxB,WAAW,CACX,MAAM,MAAM,KAAK,GAAG,CACpB,kBAAkB;AAEpB,SAAO,MAAM,KAAK,cAAc,IAAI,GAAG;;;;;CAMxC,MAAM,SAAS,QAAuB,EAAE,EAAqC;EAC5E,MAAM,QAAQ,KAAK,IAAI,KAAK,IAAI,GAAG,MAAM,SAAS,GAAG,EAAE,IAAI;EAE3D,IAAI,IAAI,KAAK,GACX,WAAW,aAAa,CACxB,WAAW,CACX,QAAQ,aAAa,OAAO,CAC5B,QAAQ,MAAM,OAAO,CACrB,MAAM,QAAQ,EAAE;AAElB,MAAI,MAAM,QACT,KAAI,EAAE,MAAM,YAAY,KAAK,MAAM,QAAQ;AAG5C,MAAI,MAAM,OACT,KAAI,EAAE,MAAM,UAAU,KAAK,MAAM,OAAO;AAGzC,MAAI,MAAM,aACT,KAAI,EAAE,MAAM,iBAAiB,KAAK,MAAM,aAAa;AAGtD,MAAI,MAAM,WACT,KAAI,EAAE,MAAM,eAAe,KAAK,MAAM,WAAW;AAGlD,MAAI,MAAM,OACT,KAAI,EAAE,MAAM,UAAU,KAAK,MAAM,OAAO;AAGzC,MAAI,MAAM,MACT,KAAI,EAAE,MAAM,aAAa,MAAM,MAAM,MAAM;AAG5C,MAAI,MAAM,MACT,KAAI,EAAE,MAAM,aAAa,MAAM,MAAM,MAAM;AAG5C,MAAI,MAAM,QAAQ;GACjB,MAAM,UAAU,aAAa,MAAM,OAAO;AAC1C,OAAI,EAAE,OAAO,OACZ,GAAG,GAAG,CACL,GAAG,aAAa,KAAK,QAAQ,WAAW,EACxC,GAAG,IAAI,CAAC,GAAG,aAAa,KAAK,QAAQ,WAAW,EAAE,GAAG,MAAM,KAAK,QAAQ,GAAG,CAAC,CAAC,CAC7E,CAAC,CACF;;EAGF,MAAM,OAAO,MAAM,EAAE,SAAS;EAC9B,MAAM,QAAQ,KAAK,MAAM,GAAG,MAAM,CAAC,KAAK,QAAQ,KAAK,cAAc,IAAI,CAAC;EACxE,MAAM,SAAmC,EAAE,OAAO;AAElD,MAAI,KAAK,SAAS,SAAS,MAAM,SAAS,GAAG;GAC5C,MAAM,OAAO,MAAM,GAAG,GAAG;AACzB,UAAO,aAAa,aAAa,KAAK,WAAW,KAAK,GAAG;;AAG1D,SAAO;;;;;CAMR,MAAM,eACL,cACA,YACA,UAA8B,EAAE,EACV;EACtB,IAAI,QAAQ,KAAK,GACf,WAAW,aAAa,CACxB,WAAW,CACX,MAAM,iBAAiB,KAAK,aAAa,CACzC,MAAM,eAAe,KAAK,WAAW,CACrC,QAAQ,aAAa,OAAO;AAE9B,MAAI,QAAQ,MACX,SAAQ,MAAM,MAAM,QAAQ,MAAM;AAInC,UADa,MAAM,MAAM,SAAS,EACtB,KAAK,QAAQ,KAAK,cAAc,IAAI,CAAC;;;;;CAMlD,MAAM,YACL,SACA,UAA8C,EAAE,EAC1B;EACtB,IAAI,QAAQ,KAAK,GACf,WAAW,aAAa,CACxB,WAAW,CACX,MAAM,YAAY,KAAK,QAAQ,CAC/B,QAAQ,aAAa,OAAO;AAE9B,MAAI,QAAQ,MACX,SAAQ,MAAM,MAAM,aAAa,MAAM,QAAQ,MAAM;AAGtD,MAAI,QAAQ,MACX,SAAQ,MAAM,MAAM,QAAQ,MAAM;AAInC,UADa,MAAM,MAAM,SAAS,EACtB,KAAK,QAAQ,KAAK,cAAc,IAAI,CAAC;;;;;CAMlD,MAAM,MAAM,QAAiD,EAAE,EAAmB;EACjF,IAAI,IAAI,KAAK,GAAG,WAAW,aAAa,CAAC,QAAQ,OAAO,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,QAAQ,CAAC;AAEtF,MAAI,MAAM,QACT,KAAI,EAAE,MAAM,YAAY,KAAK,MAAM,QAAQ;AAG5C,MAAI,MAAM,OACT,KAAI,EAAE,MAAM,UAAU,KAAK,MAAM,OAAO;AAGzC,MAAI,MAAM,aACT,KAAI,EAAE,MAAM,iBAAiB,KAAK,MAAM,aAAa;AAGtD,MAAI,MAAM,WACT,KAAI,EAAE,MAAM,eAAe,KAAK,MAAM,WAAW;AAGlD,MAAI,MAAM,OACT,KAAI,EAAE,MAAM,UAAU,KAAK,MAAM,OAAO;AAGzC,MAAI,MAAM,MACT,KAAI,EAAE,MAAM,aAAa,MAAM,MAAM,MAAM;AAG5C,MAAI,MAAM,MACT,KAAI,EAAE,MAAM,aAAa,MAAM,MAAM,MAAM;EAG5C,MAAM,SAAS,MAAM,EAAE,kBAAkB;AACzC,SAAO,OAAO,QAAQ,SAAS,EAAE;;;;;CAMlC,MAAM,gBAAgB,MAA+B;EACpD,MAAM,SAAS,MAAM,KAAK,GACxB,WAAW,aAAa,CACxB,MAAM,aAAa,KAAK,KAAK,CAC7B,kBAAkB;AAEpB,SAAO,OAAO,OAAO,kBAAkB,EAAE;;;;;CAM1C,AAAQ,cAAc,KAUT;AACZ,SAAO;GACN,IAAI,IAAI;GACR,WAAW,IAAI;GACf,SAAS,IAAI;GACb,SAAS,IAAI;GAEb,QAAQ,IAAI;GACZ,cAAc,IAAI;GAClB,YAAY,IAAI;GAChB,SAAS,IAAI,UAAU,KAAK,MAAM,IAAI,QAAQ,GAAG;GAEjD,QAAQ,IAAI;GACZ"}
+{"version":3,"file":"audit-B8XE-0UV.mjs","names":[],"sources":["../src/database/repositories/audit.ts"],"sourcesContent":["import type { Kysely } from \"kysely\";\nimport { ulid } from \"ulidx\";\n\nimport type { Database, AuditLogTable } from \"../types.js\";\nimport { encodeCursor, decodeCursor, type FindManyResult } from \"./types.js\";\n\nexport type AuditAction =\n\t| \"create\"\n\t| \"update\"\n\t| \"delete\"\n\t| \"publish\"\n\t| \"unpublish\"\n\t| \"login\"\n\t| \"logout\"\n\t| \"password_change\"\n\t| \"settings_update\"\n\t| \"schema_change\"\n\t| \"plugin_tool_invoke\"\n\t| \"transfer_export_create\"\n\t| \"transfer_import_create\"\n\t| \"transfer_import_execute\"\n\t| \"transfer_import_cancel\"\n\t| \"transfer_import_abandon\"\n\t| \"transfer_import_complete\"\n\t| \"transfer_import_fail\"\n\t| \"transfer_approval_approve\"\n\t| \"transfer_approval_deny\";\n\nexport type AuditStatus = \"success\" | \"failure\" | \"denied\";\n\nexport interface AuditLog {\n\tid: string;\n\ttimestamp: string;\n\tactorId: string | null;\n\tactorIp: string | null;\n\taction: AuditAction;\n\tresourceType: string | null;\n\tresourceId: string | null;\n\tdetails: Record<string, unknown> | null;\n\tstatus: AuditStatus | null;\n}\n\nexport interface CreateAuditLogInput {\n\tactorId?: string;\n\tactorIp?: string;\n\taction: AuditAction;\n\tresourceType?: string;\n\tresourceId?: string;\n\tdetails?: Record<string, unknown>;\n\tstatus?: AuditStatus;\n}\n\nexport interface AuditLogQuery {\n\tactorId?: string;\n\taction?: AuditAction;\n\tresourceType?: string;\n\tresourceId?: string;\n\tstatus?: AuditStatus;\n\tsince?: string; // ISO date\n\tuntil?: string; // ISO date\n\tlimit?: number;\n\tcursor?: string;\n}\n\n/**\n * Audit repository for logging system events\n *\n * Tracks user actions for security, debugging, and compliance.\n * All mutations should create an audit log entry.\n */\nexport class AuditRepository {\n\tconstructor(private db: Kysely<Database>) {}\n\n\t/**\n\t * Create an audit log entry\n\t */\n\tasync log(input: CreateAuditLogInput): Promise<AuditLog> {\n\t\tconst id = ulid();\n\n\t\tconst row: Omit<AuditLogTable, \"timestamp\"> = {\n\t\t\tid,\n\t\t\tactor_id: input.actorId ?? null,\n\t\t\tactor_ip: input.actorIp ?? null,\n\t\t\taction: input.action,\n\t\t\tresource_type: input.resourceType ?? null,\n\t\t\tresource_id: input.resourceId ?? null,\n\t\t\tdetails: input.details ? JSON.stringify(input.details) : null,\n\t\t\tstatus: input.status ?? null,\n\t\t};\n\n\t\tawait this.db.insertInto(\"audit_logs\").values(row).execute();\n\n\t\tconst log = await this.findById(id);\n\t\tif (!log) {\n\t\t\tthrow new Error(\"Failed to create audit log\");\n\t\t}\n\t\treturn log;\n\t}\n\n\t/**\n\t * Find audit log by ID\n\t */\n\tasync findById(id: string): Promise<AuditLog | null> {\n\t\tconst row = await this.db\n\t\t\t.selectFrom(\"audit_logs\")\n\t\t\t.selectAll()\n\t\t\t.where(\"id\", \"=\", id)\n\t\t\t.executeTakeFirst();\n\n\t\treturn row ? this.rowToAuditLog(row) : null;\n\t}\n\n\t/**\n\t * Query audit logs with filters and cursor-based pagination\n\t */\n\tasync findMany(query: AuditLogQuery = {}): Promise<FindManyResult<AuditLog>> {\n\t\tconst limit = Math.min(Math.max(1, query.limit || 50), 100);\n\n\t\tlet q = this.db\n\t\t\t.selectFrom(\"audit_logs\")\n\t\t\t.selectAll()\n\t\t\t.orderBy(\"timestamp\", \"desc\")\n\t\t\t.orderBy(\"id\", \"desc\")\n\t\t\t.limit(limit + 1);\n\n\t\tif (query.actorId) {\n\t\t\tq = q.where(\"actor_id\", \"=\", query.actorId);\n\t\t}\n\n\t\tif (query.action) {\n\t\t\tq = q.where(\"action\", \"=\", query.action);\n\t\t}\n\n\t\tif (query.resourceType) {\n\t\t\tq = q.where(\"resource_type\", \"=\", query.resourceType);\n\t\t}\n\n\t\tif (query.resourceId) {\n\t\t\tq = q.where(\"resource_id\", \"=\", query.resourceId);\n\t\t}\n\n\t\tif (query.status) {\n\t\t\tq = q.where(\"status\", \"=\", query.status);\n\t\t}\n\n\t\tif (query.since) {\n\t\t\tq = q.where(\"timestamp\", \">=\", query.since);\n\t\t}\n\n\t\tif (query.until) {\n\t\t\tq = q.where(\"timestamp\", \"<=\", query.until);\n\t\t}\n\n\t\tif (query.cursor) {\n\t\t\tconst decoded = decodeCursor(query.cursor);\n\t\t\tq = q.where((eb) =>\n\t\t\t\teb.or([\n\t\t\t\t\teb(\"timestamp\", \"<\", decoded.orderValue),\n\t\t\t\t\teb.and([eb(\"timestamp\", \"=\", decoded.orderValue), eb(\"id\", \"<\", decoded.id)]),\n\t\t\t\t]),\n\t\t\t);\n\t\t}\n\n\t\tconst rows = await q.execute();\n\t\tconst items = rows.slice(0, limit).map((row) => this.rowToAuditLog(row));\n\t\tconst result: FindManyResult<AuditLog> = { items };\n\n\t\tif (rows.length > limit && items.length > 0) {\n\t\t\tconst last = items.at(-1)!;\n\t\t\tresult.nextCursor = encodeCursor(last.timestamp, last.id);\n\t\t}\n\n\t\treturn result;\n\t}\n\n\t/**\n\t * Get all logs for a specific resource\n\t */\n\tasync findByResource(\n\t\tresourceType: string,\n\t\tresourceId: string,\n\t\toptions: { limit?: number } = {},\n\t): Promise<AuditLog[]> {\n\t\tlet query = this.db\n\t\t\t.selectFrom(\"audit_logs\")\n\t\t\t.selectAll()\n\t\t\t.where(\"resource_type\", \"=\", resourceType)\n\t\t\t.where(\"resource_id\", \"=\", resourceId)\n\t\t\t.orderBy(\"timestamp\", \"desc\");\n\n\t\tif (options.limit) {\n\t\t\tquery = query.limit(options.limit);\n\t\t}\n\n\t\tconst rows = await query.execute();\n\t\treturn rows.map((row) => this.rowToAuditLog(row));\n\t}\n\n\t/**\n\t * Get all logs for a specific user\n\t */\n\tasync findByActor(\n\t\tactorId: string,\n\t\toptions: { limit?: number; since?: string } = {},\n\t): Promise<AuditLog[]> {\n\t\tlet query = this.db\n\t\t\t.selectFrom(\"audit_logs\")\n\t\t\t.selectAll()\n\t\t\t.where(\"actor_id\", \"=\", actorId)\n\t\t\t.orderBy(\"timestamp\", \"desc\");\n\n\t\tif (options.since) {\n\t\t\tquery = query.where(\"timestamp\", \">=\", options.since);\n\t\t}\n\n\t\tif (options.limit) {\n\t\t\tquery = query.limit(options.limit);\n\t\t}\n\n\t\tconst rows = await query.execute();\n\t\treturn rows.map((row) => this.rowToAuditLog(row));\n\t}\n\n\t/**\n\t * Count logs matching a query\n\t */\n\tasync count(query: Omit<AuditLogQuery, \"limit\" | \"cursor\"> = {}): Promise<number> {\n\t\tlet q = this.db.selectFrom(\"audit_logs\").select((eb) => eb.fn.count(\"id\").as(\"count\"));\n\n\t\tif (query.actorId) {\n\t\t\tq = q.where(\"actor_id\", \"=\", query.actorId);\n\t\t}\n\n\t\tif (query.action) {\n\t\t\tq = q.where(\"action\", \"=\", query.action);\n\t\t}\n\n\t\tif (query.resourceType) {\n\t\t\tq = q.where(\"resource_type\", \"=\", query.resourceType);\n\t\t}\n\n\t\tif (query.resourceId) {\n\t\t\tq = q.where(\"resource_id\", \"=\", query.resourceId);\n\t\t}\n\n\t\tif (query.status) {\n\t\t\tq = q.where(\"status\", \"=\", query.status);\n\t\t}\n\n\t\tif (query.since) {\n\t\t\tq = q.where(\"timestamp\", \">=\", query.since);\n\t\t}\n\n\t\tif (query.until) {\n\t\t\tq = q.where(\"timestamp\", \"<=\", query.until);\n\t\t}\n\n\t\tconst result = await q.executeTakeFirst();\n\t\treturn Number(result?.count || 0);\n\t}\n\n\t/**\n\t * Delete old audit logs (for retention policy)\n\t */\n\tasync deleteOlderThan(date: string): Promise<number> {\n\t\tconst result = await this.db\n\t\t\t.deleteFrom(\"audit_logs\")\n\t\t\t.where(\"timestamp\", \"<\", date)\n\t\t\t.executeTakeFirst();\n\n\t\treturn Number(result.numDeletedRows ?? 0);\n\t}\n\n\t/**\n\t * Convert database row to AuditLog object\n\t */\n\tprivate rowToAuditLog(row: {\n\t\tid: string;\n\t\ttimestamp: string;\n\t\tactor_id: string | null;\n\t\tactor_ip: string | null;\n\t\taction: string;\n\t\tresource_type: string | null;\n\t\tresource_id: string | null;\n\t\tdetails: string | null;\n\t\tstatus: string | null;\n\t}): AuditLog {\n\t\treturn {\n\t\t\tid: row.id,\n\t\t\ttimestamp: row.timestamp,\n\t\t\tactorId: row.actor_id,\n\t\t\tactorIp: row.actor_ip,\n\t\t\t// eslint-disable-next-line typescript/no-unsafe-type-assertion -- DB stores string; validated at insert but linter can't follow\n\t\t\taction: row.action as AuditAction,\n\t\t\tresourceType: row.resource_type,\n\t\t\tresourceId: row.resource_id,\n\t\t\tdetails: row.details ? JSON.parse(row.details) : null,\n\t\t\t// eslint-disable-next-line typescript/no-unsafe-type-assertion -- DB stores string; validated at insert but linter can't follow\n\t\t\tstatus: row.status as AuditStatus | null,\n\t\t};\n\t}\n}\n"],"mappings":";;;;;;;;;;AAsEA,IAAa,kBAAb,MAA6B;CAC5B,YAAY,AAAQ,IAAsB;EAAtB;;;;;CAKpB,MAAM,IAAI,OAA+C;EACxD,MAAM,KAAK,MAAM;EAEjB,MAAM,MAAwC;GAC7C;GACA,UAAU,MAAM,WAAW;GAC3B,UAAU,MAAM,WAAW;GAC3B,QAAQ,MAAM;GACd,eAAe,MAAM,gBAAgB;GACrC,aAAa,MAAM,cAAc;GACjC,SAAS,MAAM,UAAU,KAAK,UAAU,MAAM,QAAQ,GAAG;GACzD,QAAQ,MAAM,UAAU;GACxB;AAED,QAAM,KAAK,GAAG,WAAW,aAAa,CAAC,OAAO,IAAI,CAAC,SAAS;EAE5D,MAAM,MAAM,MAAM,KAAK,SAAS,GAAG;AACnC,MAAI,CAAC,IACJ,OAAM,IAAI,MAAM,6BAA6B;AAE9C,SAAO;;;;;CAMR,MAAM,SAAS,IAAsC;EACpD,MAAM,MAAM,MAAM,KAAK,GACrB,WAAW,aAAa,CACxB,WAAW,CACX,MAAM,MAAM,KAAK,GAAG,CACpB,kBAAkB;AAEpB,SAAO,MAAM,KAAK,cAAc,IAAI,GAAG;;;;;CAMxC,MAAM,SAAS,QAAuB,EAAE,EAAqC;EAC5E,MAAM,QAAQ,KAAK,IAAI,KAAK,IAAI,GAAG,MAAM,SAAS,GAAG,EAAE,IAAI;EAE3D,IAAI,IAAI,KAAK,GACX,WAAW,aAAa,CACxB,WAAW,CACX,QAAQ,aAAa,OAAO,CAC5B,QAAQ,MAAM,OAAO,CACrB,MAAM,QAAQ,EAAE;AAElB,MAAI,MAAM,QACT,KAAI,EAAE,MAAM,YAAY,KAAK,MAAM,QAAQ;AAG5C,MAAI,MAAM,OACT,KAAI,EAAE,MAAM,UAAU,KAAK,MAAM,OAAO;AAGzC,MAAI,MAAM,aACT,KAAI,EAAE,MAAM,iBAAiB,KAAK,MAAM,aAAa;AAGtD,MAAI,MAAM,WACT,KAAI,EAAE,MAAM,eAAe,KAAK,MAAM,WAAW;AAGlD,MAAI,MAAM,OACT,KAAI,EAAE,MAAM,UAAU,KAAK,MAAM,OAAO;AAGzC,MAAI,MAAM,MACT,KAAI,EAAE,MAAM,aAAa,MAAM,MAAM,MAAM;AAG5C,MAAI,MAAM,MACT,KAAI,EAAE,MAAM,aAAa,MAAM,MAAM,MAAM;AAG5C,MAAI,MAAM,QAAQ;GACjB,MAAM,UAAU,aAAa,MAAM,OAAO;AAC1C,OAAI,EAAE,OAAO,OACZ,GAAG,GAAG,CACL,GAAG,aAAa,KAAK,QAAQ,WAAW,EACxC,GAAG,IAAI,CAAC,GAAG,aAAa,KAAK,QAAQ,WAAW,EAAE,GAAG,MAAM,KAAK,QAAQ,GAAG,CAAC,CAAC,CAC7E,CAAC,CACF;;EAGF,MAAM,OAAO,MAAM,EAAE,SAAS;EAC9B,MAAM,QAAQ,KAAK,MAAM,GAAG,MAAM,CAAC,KAAK,QAAQ,KAAK,cAAc,IAAI,CAAC;EACxE,MAAM,SAAmC,EAAE,OAAO;AAElD,MAAI,KAAK,SAAS,SAAS,MAAM,SAAS,GAAG;GAC5C,MAAM,OAAO,MAAM,GAAG,GAAG;AACzB,UAAO,aAAa,aAAa,KAAK,WAAW,KAAK,GAAG;;AAG1D,SAAO;;;;;CAMR,MAAM,eACL,cACA,YACA,UAA8B,EAAE,EACV;EACtB,IAAI,QAAQ,KAAK,GACf,WAAW,aAAa,CACxB,WAAW,CACX,MAAM,iBAAiB,KAAK,aAAa,CACzC,MAAM,eAAe,KAAK,WAAW,CACrC,QAAQ,aAAa,OAAO;AAE9B,MAAI,QAAQ,MACX,SAAQ,MAAM,MAAM,QAAQ,MAAM;AAInC,UADa,MAAM,MAAM,SAAS,EACtB,KAAK,QAAQ,KAAK,cAAc,IAAI,CAAC;;;;;CAMlD,MAAM,YACL,SACA,UAA8C,EAAE,EAC1B;EACtB,IAAI,QAAQ,KAAK,GACf,WAAW,aAAa,CACxB,WAAW,CACX,MAAM,YAAY,KAAK,QAAQ,CAC/B,QAAQ,aAAa,OAAO;AAE9B,MAAI,QAAQ,MACX,SAAQ,MAAM,MAAM,aAAa,MAAM,QAAQ,MAAM;AAGtD,MAAI,QAAQ,MACX,SAAQ,MAAM,MAAM,QAAQ,MAAM;AAInC,UADa,MAAM,MAAM,SAAS,EACtB,KAAK,QAAQ,KAAK,cAAc,IAAI,CAAC;;;;;CAMlD,MAAM,MAAM,QAAiD,EAAE,EAAmB;EACjF,IAAI,IAAI,KAAK,GAAG,WAAW,aAAa,CAAC,QAAQ,OAAO,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,QAAQ,CAAC;AAEtF,MAAI,MAAM,QACT,KAAI,EAAE,MAAM,YAAY,KAAK,MAAM,QAAQ;AAG5C,MAAI,MAAM,OACT,KAAI,EAAE,MAAM,UAAU,KAAK,MAAM,OAAO;AAGzC,MAAI,MAAM,aACT,KAAI,EAAE,MAAM,iBAAiB,KAAK,MAAM,aAAa;AAGtD,MAAI,MAAM,WACT,KAAI,EAAE,MAAM,eAAe,KAAK,MAAM,WAAW;AAGlD,MAAI,MAAM,OACT,KAAI,EAAE,MAAM,UAAU,KAAK,MAAM,OAAO;AAGzC,MAAI,MAAM,MACT,KAAI,EAAE,MAAM,aAAa,MAAM,MAAM,MAAM;AAG5C,MAAI,MAAM,MACT,KAAI,EAAE,MAAM,aAAa,MAAM,MAAM,MAAM;EAG5C,MAAM,SAAS,MAAM,EAAE,kBAAkB;AACzC,SAAO,OAAO,QAAQ,SAAS,EAAE;;;;;CAMlC,MAAM,gBAAgB,MAA+B;EACpD,MAAM,SAAS,MAAM,KAAK,GACxB,WAAW,aAAa,CACxB,MAAM,aAAa,KAAK,KAAK,CAC7B,kBAAkB;AAEpB,SAAO,OAAO,OAAO,kBAAkB,EAAE;;;;;CAM1C,AAAQ,cAAc,KAUT;AACZ,SAAO;GACN,IAAI,IAAI;GACR,WAAW,IAAI;GACf,SAAS,IAAI;GACb,SAAS,IAAI;GAEb,QAAQ,IAAI;GACZ,cAAc,IAAI;GAClB,YAAY,IAAI;GAChB,SAAS,IAAI,UAAU,KAAK,MAAM,IAAI,QAAQ,GAAG;GAEjD,QAAQ,IAAI;GACZ"}

package/dist/auth/providers/github.d.mts

@@ -1,4 +1,4 @@
-import { r as AuthProviderDescriptor } from "../../types-slSqujQL.mjs";
+import { r as AuthProviderDescriptor } from "../../types-uU2YNYSt.mjs";
 
 //#region src/auth/providers/github.d.ts
 /**

package/dist/auth/providers/google.d.mts

@@ -1,4 +1,4 @@
-import { r as AuthProviderDescriptor } from "../../types-slSqujQL.mjs";
+import { r as AuthProviderDescriptor } from "../../types-uU2YNYSt.mjs";
 
 //#region src/auth/providers/google.d.ts
 /**

package/dist/auth/providers/microsoft.d.mts

@@ -1,4 +1,4 @@
-import { r as AuthProviderDescriptor } from "../../types-slSqujQL.mjs";
+import { r as AuthProviderDescriptor } from "../../types-uU2YNYSt.mjs";
 
 //#region src/auth/providers/microsoft.d.ts
 interface MicrosoftProviderOptions {

package/dist/{authorize-DPFBGbE6.mjs → authorize-NJgp8kLI.mjs}

@@ -1,4 +1,4 @@
-import { t as apiError } from "./error-CVWeIOku.mjs";
+import { t as apiError } from "./error-BCMgPxdn.mjs";
 import { canActOnOwn, hasPermission, hasScope } from "@emdash-cms/auth";
 
 //#region src/api/authorize.ts
@@ -71,4 +71,4 @@ function requireAnyPerm(user, permissions) {
 
 //#endregion
 export { requireOwnerPerm as a, requireEntryEditPerm as i, entryEditAccess as n, requirePerm as o, requireAnyPerm as r, canReadMediaUsageCount as t };
-//# sourceMappingURL=authorize-DPFBGbE6.mjs.map
+//# sourceMappingURL=authorize-NJgp8kLI.mjs.map

package/dist/{authorize-DPFBGbE6.mjs.map → authorize-NJgp8kLI.mjs.map}

@@ -1 +1 @@
-{"version":3,"file":"authorize-DPFBGbE6.mjs","names":[],"sources":["../src/api/authorize.ts"],"sourcesContent":["/**\n * Authorization helpers for API routes\n *\n * Thin wrappers around @emdash-cms/auth RBAC that return HTTP responses.\n * Auth middleware handles authentication; these handle authorization.\n */\n\nimport type { Permission, RoleLevel } from \"@emdash-cms/auth\";\nimport { hasPermission, canActOnOwn, hasScope } from \"@emdash-cms/auth\";\n\nimport { apiError } from \"./error.js\";\n\ninterface UserLike {\n\tid: string;\n\trole: RoleLevel;\n}\n\nexport function canReadMediaUsageCount(\n\tuser: UserLike | null | undefined,\n\ttokenScopes: string[] | undefined,\n): boolean {\n\treturn (\n\t\thasPermission(user, \"content:read_drafts\") && (!tokenScopes || hasScope(tokenScopes, \"admin\"))\n\t);\n}\n\n/**\n * Check if user has a permission. Returns a 401/403 Response if not, or null if authorized.\n *\n * Usage:\n * ```ts\n * const denied = requirePerm(user, \"schema:manage\");\n * if (denied) return denied;\n * ```\n */\nexport function requirePerm(\n\tuser: UserLike | null | undefined,\n\tpermission: Permission,\n): Response | null {\n\tif (!user) {\n\t\treturn apiError(\"UNAUTHORIZED\", \"Authentication required\", 401);\n\t}\n\tif (!hasPermission(user, permission)) {\n\t\treturn apiError(\"FORBIDDEN\", \"Insufficient permissions\", 403);\n\t}\n\treturn null;\n}\n\n/**\n * Check if user can act on a resource, considering ownership.\n * Returns a 401/403 Response if not, or null if authorized.\n *\n * Usage:\n * ```ts\n * const denied = requireOwnerPerm(user, item.authorId, \"content:edit_own\", \"content:edit_any\");\n * if (denied) return denied;\n * ```\n */\nexport function requireOwnerPerm(\n\tuser: UserLike | null | undefined,\n\townerId: string,\n\townPermission: Permission,\n\tanyPermission: Permission,\n): Response | null {\n\tif (!user) {\n\t\treturn apiError(\"UNAUTHORIZED\", \"Authentication required\", 401);\n\t}\n\tif (!canActOnOwn(user, ownerId, ownPermission, anyPermission)) {\n\t\treturn apiError(\"FORBIDDEN\", \"Insufficient permissions\", 403);\n\t}\n\treturn null;\n}\n\n/**\n * How `user` may edit an entry: `\"full\"` through `content:edit_own` or\n * `content:edit_any`, `\"draft\"` through `content:edit_own_drafts` only, or\n * `null` when they can't edit it.\n *\n * A `\"draft\"` grant holds only while the entry is still a draft, so the caller\n * must make its write fail if the entry changes after this check, for example\n * by conditioning the update on the `_rev` it checked.\n */\nexport function entryEditAccess(\n\tuser: UserLike | null | undefined,\n\tentry: { authorId: string; status: unknown },\n): \"full\" | \"draft\" | null {\n\tif (canActOnOwn(user, entry.authorId, \"content:edit_own\", \"content:edit_any\")) return \"full\";\n\tif (\n\t\tentry.status === \"draft\" &&\n\t\tcanActOnOwn(user, entry.authorId, \"content:edit_own_drafts\", \"content:edit_any\")\n\t) {\n\t\treturn \"draft\";\n\t}\n\treturn null;\n}\n\n/**\n * Check if user can edit an entry, including an owner editing their own draft\n * through `content:edit_own_drafts`. Returns a 401/403 Response if not, or null\n * if authorized. See {@link entryEditAccess} for what a draft-only grant requires\n * of the caller.\n */\nexport function requireEntryEditPerm(\n\tuser: UserLike | null | undefined,\n\tentry: { authorId: string; status: unknown },\n): Response | null {\n\tif (!user) {\n\t\treturn apiError(\"UNAUTHORIZED\", \"Authentication required\", 401);\n\t}\n\tif (!entryEditAccess(user, entry)) {\n\t\treturn apiError(\"FORBIDDEN\", \"Insufficient permissions\", 403);\n\t}\n\treturn null;\n}\n\n/**\n * Like {@link requirePerm}, but authorized when the user has any of\n * `permissions`.\n */\nexport function requireAnyPerm(\n\tuser: UserLike | null | undefined,\n\tpermissions: readonly Permission[],\n): Response | null {\n\tif (!user) {\n\t\treturn apiError(\"UNAUTHORIZED\", \"Authentication required\", 401);\n\t}\n\tif (!permissions.some((permission) => hasPermission(user, permission))) {\n\t\treturn apiError(\"FORBIDDEN\", \"Insufficient permissions\", 403);\n\t}\n\treturn null;\n}\n"],"mappings":";;;;AAiBA,SAAgB,uBACf,MACA,aACU;AACV,QACC,cAAc,MAAM,sBAAsB,KAAK,CAAC,eAAe,SAAS,aAAa,QAAQ;;;;;;;;;;;AAa/F,SAAgB,YACf,MACA,YACkB;AAClB,KAAI,CAAC,KACJ,QAAO,SAAS,gBAAgB,2BAA2B,IAAI;AAEhE,KAAI,CAAC,cAAc,MAAM,WAAW,CACnC,QAAO,SAAS,aAAa,4BAA4B,IAAI;AAE9D,QAAO;;;;;;;;;;;;AAaR,SAAgB,iBACf,MACA,SACA,eACA,eACkB;AAClB,KAAI,CAAC,KACJ,QAAO,SAAS,gBAAgB,2BAA2B,IAAI;AAEhE,KAAI,CAAC,YAAY,MAAM,SAAS,eAAe,cAAc,CAC5D,QAAO,SAAS,aAAa,4BAA4B,IAAI;AAE9D,QAAO;;;;;;;;;;;AAYR,SAAgB,gBACf,MACA,OAC0B;AAC1B,KAAI,YAAY,MAAM,MAAM,UAAU,oBAAoB,mBAAmB,CAAE,QAAO;AACtF,KACC,MAAM,WAAW,WACjB,YAAY,MAAM,MAAM,UAAU,2BAA2B,mBAAmB,CAEhF,QAAO;AAER,QAAO;;;;;;;;AASR,SAAgB,qBACf,MACA,OACkB;AAClB,KAAI,CAAC,KACJ,QAAO,SAAS,gBAAgB,2BAA2B,IAAI;AAEhE,KAAI,CAAC,gBAAgB,MAAM,MAAM,CAChC,QAAO,SAAS,aAAa,4BAA4B,IAAI;AAE9D,QAAO;;;;;;AAOR,SAAgB,eACf,MACA,aACkB;AAClB,KAAI,CAAC,KACJ,QAAO,SAAS,gBAAgB,2BAA2B,IAAI;AAEhE,KAAI,CAAC,YAAY,MAAM,eAAe,cAAc,MAAM,WAAW,CAAC,CACrE,QAAO,SAAS,aAAa,4BAA4B,IAAI;AAE9D,QAAO"}
+{"version":3,"file":"authorize-NJgp8kLI.mjs","names":[],"sources":["../src/api/authorize.ts"],"sourcesContent":["/**\n * Authorization helpers for API routes\n *\n * Thin wrappers around @emdash-cms/auth RBAC that return HTTP responses.\n * Auth middleware handles authentication; these handle authorization.\n */\n\nimport type { Permission, RoleLevel } from \"@emdash-cms/auth\";\nimport { hasPermission, canActOnOwn, hasScope } from \"@emdash-cms/auth\";\n\nimport { apiError } from \"./error.js\";\n\ninterface UserLike {\n\tid: string;\n\trole: RoleLevel;\n}\n\nexport function canReadMediaUsageCount(\n\tuser: UserLike | null | undefined,\n\ttokenScopes: string[] | undefined,\n): boolean {\n\treturn (\n\t\thasPermission(user, \"content:read_drafts\") && (!tokenScopes || hasScope(tokenScopes, \"admin\"))\n\t);\n}\n\n/**\n * Check if user has a permission. Returns a 401/403 Response if not, or null if authorized.\n *\n * Usage:\n * ```ts\n * const denied = requirePerm(user, \"schema:manage\");\n * if (denied) return denied;\n * ```\n */\nexport function requirePerm(\n\tuser: UserLike | null | undefined,\n\tpermission: Permission,\n): Response | null {\n\tif (!user) {\n\t\treturn apiError(\"UNAUTHORIZED\", \"Authentication required\", 401);\n\t}\n\tif (!hasPermission(user, permission)) {\n\t\treturn apiError(\"FORBIDDEN\", \"Insufficient permissions\", 403);\n\t}\n\treturn null;\n}\n\n/**\n * Check if user can act on a resource, considering ownership.\n * Returns a 401/403 Response if not, or null if authorized.\n *\n * Usage:\n * ```ts\n * const denied = requireOwnerPerm(user, item.authorId, \"content:edit_own\", \"content:edit_any\");\n * if (denied) return denied;\n * ```\n */\nexport function requireOwnerPerm(\n\tuser: UserLike | null | undefined,\n\townerId: string,\n\townPermission: Permission,\n\tanyPermission: Permission,\n): Response | null {\n\tif (!user) {\n\t\treturn apiError(\"UNAUTHORIZED\", \"Authentication required\", 401);\n\t}\n\tif (!canActOnOwn(user, ownerId, ownPermission, anyPermission)) {\n\t\treturn apiError(\"FORBIDDEN\", \"Insufficient permissions\", 403);\n\t}\n\treturn null;\n}\n\n/**\n * How `user` may edit an entry: `\"full\"` through `content:edit_own` or\n * `content:edit_any`, `\"draft\"` through `content:edit_own_drafts` only, or\n * `null` when they can't edit it.\n *\n * A `\"draft\"` grant holds only while the entry is still a draft, so the caller\n * must make its write fail if the entry changes after this check, for example\n * by conditioning the update on the `_rev` it checked.\n */\nexport function entryEditAccess(\n\tuser: UserLike | null | undefined,\n\tentry: { authorId: string; status: unknown },\n): \"full\" | \"draft\" | null {\n\tif (canActOnOwn(user, entry.authorId, \"content:edit_own\", \"content:edit_any\")) return \"full\";\n\tif (\n\t\tentry.status === \"draft\" &&\n\t\tcanActOnOwn(user, entry.authorId, \"content:edit_own_drafts\", \"content:edit_any\")\n\t) {\n\t\treturn \"draft\";\n\t}\n\treturn null;\n}\n\n/**\n * Check if user can edit an entry, including an owner editing their own draft\n * through `content:edit_own_drafts`. Returns a 401/403 Response if not, or null\n * if authorized. See {@link entryEditAccess} for what a draft-only grant requires\n * of the caller.\n */\nexport function requireEntryEditPerm(\n\tuser: UserLike | null | undefined,\n\tentry: { authorId: string; status: unknown },\n): Response | null {\n\tif (!user) {\n\t\treturn apiError(\"UNAUTHORIZED\", \"Authentication required\", 401);\n\t}\n\tif (!entryEditAccess(user, entry)) {\n\t\treturn apiError(\"FORBIDDEN\", \"Insufficient permissions\", 403);\n\t}\n\treturn null;\n}\n\n/**\n * Like {@link requirePerm}, but authorized when the user has any of\n * `permissions`.\n */\nexport function requireAnyPerm(\n\tuser: UserLike | null | undefined,\n\tpermissions: readonly Permission[],\n): Response | null {\n\tif (!user) {\n\t\treturn apiError(\"UNAUTHORIZED\", \"Authentication required\", 401);\n\t}\n\tif (!permissions.some((permission) => hasPermission(user, permission))) {\n\t\treturn apiError(\"FORBIDDEN\", \"Insufficient permissions\", 403);\n\t}\n\treturn null;\n}\n"],"mappings":";;;;AAiBA,SAAgB,uBACf,MACA,aACU;AACV,QACC,cAAc,MAAM,sBAAsB,KAAK,CAAC,eAAe,SAAS,aAAa,QAAQ;;;;;;;;;;;AAa/F,SAAgB,YACf,MACA,YACkB;AAClB,KAAI,CAAC,KACJ,QAAO,SAAS,gBAAgB,2BAA2B,IAAI;AAEhE,KAAI,CAAC,cAAc,MAAM,WAAW,CACnC,QAAO,SAAS,aAAa,4BAA4B,IAAI;AAE9D,QAAO;;;;;;;;;;;;AAaR,SAAgB,iBACf,MACA,SACA,eACA,eACkB;AAClB,KAAI,CAAC,KACJ,QAAO,SAAS,gBAAgB,2BAA2B,IAAI;AAEhE,KAAI,CAAC,YAAY,MAAM,SAAS,eAAe,cAAc,CAC5D,QAAO,SAAS,aAAa,4BAA4B,IAAI;AAE9D,QAAO;;;;;;;;;;;AAYR,SAAgB,gBACf,MACA,OAC0B;AAC1B,KAAI,YAAY,MAAM,MAAM,UAAU,oBAAoB,mBAAmB,CAAE,QAAO;AACtF,KACC,MAAM,WAAW,WACjB,YAAY,MAAM,MAAM,UAAU,2BAA2B,mBAAmB,CAEhF,QAAO;AAER,QAAO;;;;;;;;AASR,SAAgB,qBACf,MACA,OACkB;AAClB,KAAI,CAAC,KACJ,QAAO,SAAS,gBAAgB,2BAA2B,IAAI;AAEhE,KAAI,CAAC,gBAAgB,MAAM,MAAM,CAChC,QAAO,SAAS,aAAa,4BAA4B,IAAI;AAE9D,QAAO;;;;;;AAOR,SAAgB,eACf,MACA,aACkB;AAClB,KAAI,CAAC,KACJ,QAAO,SAAS,gBAAgB,2BAA2B,IAAI;AAEhE,KAAI,CAAC,YAAY,MAAM,eAAe,cAAc,MAAM,WAAW,CAAC,CACrE,QAAO,SAAS,aAAa,4BAA4B,IAAI;AAE9D,QAAO"}

package/dist/{backup-3FgVxiDJ.mjs → backup-8rPSJ28a.mjs}

@@ -1,7 +1,7 @@
 import { t as OptionsRepository } from "./options-DhrI7eMv.mjs";
-import { n as VERSION } from "./version-DHmGpcch.mjs";
-import { t as ErrorCode } from "./errors-BOYNdIo3.mjs";
-import { t as generateSnapshot } from "./snapshot-DYsG4uOq.mjs";
+import { n as VERSION } from "./version-Bu6Nlbb5.mjs";
+import { t as ErrorCode } from "./errors-8gJqv-XV.mjs";
+import { t as generateSnapshot } from "./snapshot-BjaXDZQ5.mjs";
 
 //#region src/api/handlers/backup.ts
 /** Storage key prefix for scheduled/manual archives. */
@@ -243,4 +243,4 @@ async function maybeRunScheduledBackup(db, storage) {
 
 //#endregion
 export { deleteBackupArchive as a, isValidArchiveName as c, runBackupToStorage as d, updateBackupSettings as f, archiveNameForDate as i, listBackupArchives as l, BACKUP_RETENTION_MIN as n, generateBackupJson as o, BACKUP_STORAGE_PREFIX as r, getBackupSettings as s, BACKUP_RETENTION_MAX as t, maybeRunScheduledBackup as u };
-//# sourceMappingURL=backup-3FgVxiDJ.mjs.map
+//# sourceMappingURL=backup-8rPSJ28a.mjs.map

package/dist/{backup-3FgVxiDJ.mjs.map → backup-8rPSJ28a.mjs.map}

@@ -1 +1 @@
-{"version":3,"file":"backup-3FgVxiDJ.mjs","names":[],"sources":["../src/api/handlers/backup.ts"],"sourcesContent":["/**\n * Backup handlers — portable content backups, on demand and scheduled.\n *\n * A backup is the snapshot format (see `snapshot.ts`) wrapped in a small\n * envelope: all content (including drafts, scheduled, and trashed entries),\n * schema definitions, taxonomies, menus, widgets, revisions, media metadata,\n * and site settings.\n *\n * Deliberately NOT included:\n * - Users, sessions, credentials, API/OAuth tokens (auth data is neither\n *   portable nor safe in a user-downloadable file)\n * - Secrets (`emdash:preview_secret`, plugin config, passkey challenges)\n * - Media binaries (metadata only — the files live in the same bucket the\n *   scheduled archives are written to)\n *\n * For full point-in-time database recovery on Cloudflare, D1 Time Travel\n * covers the last 30 days out of the box; these backups complement it with\n * user-holdable, longer-lived archives.\n */\n\nimport type { Kysely } from \"kysely\";\n\nimport { OptionsRepository } from \"../../database/repositories/options.js\";\nimport type { Database } from \"../../database/types.js\";\nimport type { Storage } from \"../../storage/types.js\";\nimport { VERSION } from \"../../version.js\";\nimport { ErrorCode } from \"../errors.js\";\nimport type { ApiResult } from \"../types.js\";\nimport { generateSnapshot } from \"./snapshot.js\";\n\n// ── Constants ───────────────────────────────────────────────────\n\n/** Storage key prefix for scheduled/manual archives. */\nexport const BACKUP_STORAGE_PREFIX = \"backups/\";\n\n/**\n * Filename prefix within the backups/ folder. Included in the list() prefix\n * so LocalStorage (which matches directory + filename prefix, not flat keys\n * like S3/R2) finds the archives too.\n */\nconst BACKUP_FILE_PREFIX = \"emdash-backup-\";\n\n/** Options key holding the scheduled-backup settings. */\nexport const BACKUP_SETTINGS_KEY = \"emdash:backups\";\n\n/** Options key holding the ISO timestamp of the last scheduled run. */\nconst BACKUP_LAST_RUN_KEY = \"emdash:backups_last_run\";\n\n/** Minimum interval between scheduled backups (23h — daily with cron jitter). */\nconst SCHEDULED_BACKUP_INTERVAL_MS = 23 * 60 * 60 * 1000;\n\n/** Retention bounds for stored archives. */\nexport const BACKUP_RETENTION_MIN = 1;\nexport const BACKUP_RETENTION_MAX = 30;\nconst BACKUP_RETENTION_DEFAULT = 7;\n\n/**\n * Options-table key prefixes included in backups. Never widen this to a\n * prefix that can match secrets (`emdash:preview_secret`, `plugin:`,\n * `emdash:passkey_pending:`).\n */\nconst BACKUP_OPTION_PREFIXES = [\"site:\"];\n\n/**\n * Exact `emdash:*` keys included in backups. Do not add `emdash:site_url`: it\n * is the origin of the deployment that took the backup, not portable site data.\n */\nconst BACKUP_OPTION_KEYS = [\"emdash:site_title\", \"emdash:site_tagline\", \"emdash:locale\"];\n\n/**\n * Archive filename shape. Strict allowlist — the download/delete routes\n * interpolate this into a storage key, so it must never contain `/` or `..`.\n * The random suffix makes names unguessable (defense in depth on top of the\n * media route's backups/ deny) and avoids same-second collisions.\n */\nconst ARCHIVE_NAME_PATTERN =\n\t/^emdash-backup-\\d{4}-\\d{2}-\\d{2}T\\d{2}-\\d{2}-\\d{2}-[0-9a-f]{8}\\.json$/;\n\nexport function isValidArchiveName(name: string): boolean {\n\treturn ARCHIVE_NAME_PATTERN.test(name);\n}\n\n// ── Types ───────────────────────────────────────────────────────\n\nexport interface BackupSettings {\n\t/** Whether daily scheduled backups to storage are enabled. */\n\tenabled: boolean;\n\t/** How many archives to keep in storage (oldest pruned first). */\n\tretention: number;\n}\n\nexport interface BackupArchive {\n\t/** Filename within the backups/ prefix (no path separators). */\n\tname: string;\n\t/** Size in bytes. */\n\tsize: number;\n\t/** Last-modified timestamp (ISO). */\n\tlastModified: string;\n}\n\nconst DEFAULT_SETTINGS: BackupSettings = {\n\tenabled: false,\n\tretention: BACKUP_RETENTION_DEFAULT,\n};\n\nfunction clampRetention(value: number): number {\n\tif (!Number.isFinite(value)) return BACKUP_RETENTION_DEFAULT;\n\treturn Math.min(BACKUP_RETENTION_MAX, Math.max(BACKUP_RETENTION_MIN, Math.trunc(value)));\n}\n\n// ── Export ──────────────────────────────────────────────────────\n\n/**\n * Generate a full content backup as a JSON string.\n *\n * ponytail: the whole backup is materialized in memory. Fine for the sites\n * EmDash targets today; truly huge databases should use `wrangler d1 export`\n * (documented on the backups docs page). Upgrade path: stream table-by-table.\n */\nexport async function generateBackupJson(db: Kysely<Database>): Promise<string> {\n\tconst snapshot = await generateSnapshot(db, {\n\t\tincludeDrafts: true,\n\t\tincludeTrashed: true,\n\t\toptionPrefixes: BACKUP_OPTION_PREFIXES,\n\t\toptionKeys: BACKUP_OPTION_KEYS,\n\t});\n\n\treturn JSON.stringify({\n\t\tformat: \"emdash-backup\",\n\t\tformatVersion: 1,\n\t\temdashVersion: VERSION,\n\t\tgeneratedAt: snapshot.generatedAt,\n\t\tschema: snapshot.schema,\n\t\ttables: snapshot.tables,\n\t});\n}\n\n/** Derive the archive filename for a given date (plus a random suffix). */\nexport function archiveNameForDate(date: Date): string {\n\t// 2026-07-09T08:45:12.345Z → emdash-backup-2026-07-09T08-45-12-1a2b3c4d.json\n\tconst stamp = date.toISOString().slice(0, 19).replaceAll(\":\", \"-\");\n\tconst suffix = crypto.randomUUID().replaceAll(\"-\", \"\").slice(0, 8);\n\treturn `emdash-backup-${stamp}-${suffix}.json`;\n}\n\n// ── Settings ────────────────────────────────────────────────────\n\nexport async function getBackupSettings(db: Kysely<Database>): Promise<BackupSettings> {\n\tconst options = new OptionsRepository(db);\n\tconst stored = await options.get<Partial<BackupSettings>>(BACKUP_SETTINGS_KEY);\n\tif (!stored) return { ...DEFAULT_SETTINGS };\n\treturn {\n\t\tenabled: stored.enabled === true,\n\t\tretention: clampRetention(stored.retention ?? BACKUP_RETENTION_DEFAULT),\n\t};\n}\n\nexport async function updateBackupSettings(\n\tdb: Kysely<Database>,\n\tinput: { enabled: boolean; retention: number },\n): Promise<ApiResult<BackupSettings>> {\n\ttry {\n\t\tconst settings: BackupSettings = {\n\t\t\tenabled: input.enabled,\n\t\t\tretention: clampRetention(input.retention),\n\t\t};\n\t\tconst options = new OptionsRepository(db);\n\t\tawait options.set(BACKUP_SETTINGS_KEY, settings);\n\t\treturn { success: true, data: settings };\n\t} catch (error) {\n\t\tconsole.error(\"[backup] Failed to update settings:\", error);\n\t\treturn {\n\t\t\tsuccess: false,\n\t\t\terror: { code: ErrorCode.BACKUP_SETTINGS_ERROR, message: \"Failed to update backup settings\" },\n\t\t};\n\t}\n}\n\n// ── Archives in storage ─────────────────────────────────────────\n\n/**\n * List stored archives, newest first.\n *\n * ponytail: single unpaginated list. The retention cap (max 30) bounds the\n * archive count, so one page always suffices.\n */\nexport async function listBackupArchives(storage: Storage): Promise<ApiResult<BackupArchive[]>> {\n\ttry {\n\t\tconst result = await storage.list({\n\t\t\tprefix: `${BACKUP_STORAGE_PREFIX}${BACKUP_FILE_PREFIX}`,\n\t\t\tlimit: 100,\n\t\t});\n\t\tconst archives = result.files\n\t\t\t.map((file) => ({\n\t\t\t\tname: file.key.slice(BACKUP_STORAGE_PREFIX.length),\n\t\t\t\tsize: file.size,\n\t\t\t\tlastModified: file.lastModified.toISOString(),\n\t\t\t}))\n\t\t\t.filter((archive) => isValidArchiveName(archive.name))\n\t\t\t.toSorted((a, b) => (a.name < b.name ? 1 : -1));\n\t\treturn { success: true, data: archives };\n\t} catch (error) {\n\t\tconsole.error(\"[backup] Failed to list archives:\", error);\n\t\treturn {\n\t\t\tsuccess: false,\n\t\t\terror: { code: ErrorCode.BACKUP_LIST_ERROR, message: \"Failed to list backup archives\" },\n\t\t};\n\t}\n}\n\n/**\n * Create a backup and store it as an archive, then prune old archives\n * beyond `retention`.\n */\nexport async function runBackupToStorage(\n\tdb: Kysely<Database>,\n\tstorage: Storage,\n\tretention: number,\n): Promise<ApiResult<BackupArchive>> {\n\ttry {\n\t\tconst json = await generateBackupJson(db);\n\t\tconst name = archiveNameForDate(new Date());\n\t\tconst body = new TextEncoder().encode(json);\n\n\t\tawait storage.upload({\n\t\t\tkey: `${BACKUP_STORAGE_PREFIX}${name}`,\n\t\t\tbody,\n\t\t\tcontentType: \"application/json\",\n\t\t});\n\n\t\tawait pruneArchives(storage, clampRetention(retention));\n\n\t\treturn {\n\t\t\tsuccess: true,\n\t\t\tdata: { name, size: body.byteLength, lastModified: new Date().toISOString() },\n\t\t};\n\t} catch (error) {\n\t\tconsole.error(\"[backup] Failed to create archive:\", error);\n\t\treturn {\n\t\t\tsuccess: false,\n\t\t\terror: { code: ErrorCode.BACKUP_CREATE_ERROR, message: \"Failed to create backup archive\" },\n\t\t};\n\t}\n}\n\n/** Delete archives beyond the newest `keep`. Failures are logged, not fatal. */\nasync function pruneArchives(storage: Storage, keep: number): Promise<void> {\n\tconst listed = await listBackupArchives(storage);\n\tif (!listed.success) return;\n\n\tfor (const archive of listed.data.slice(keep)) {\n\t\ttry {\n\t\t\tawait storage.delete(`${BACKUP_STORAGE_PREFIX}${archive.name}`);\n\t\t} catch (error) {\n\t\t\tconsole.error(`[backup] Failed to prune archive ${archive.name}:`, error);\n\t\t}\n\t}\n}\n\nexport async function deleteBackupArchive(\n\tstorage: Storage,\n\tname: string,\n): Promise<ApiResult<{ deleted: true }>> {\n\tif (!isValidArchiveName(name)) {\n\t\treturn {\n\t\t\tsuccess: false,\n\t\t\terror: { code: ErrorCode.VALIDATION_ERROR, message: \"Invalid archive name\" },\n\t\t};\n\t}\n\ttry {\n\t\tawait storage.delete(`${BACKUP_STORAGE_PREFIX}${name}`);\n\t\treturn { success: true, data: { deleted: true } };\n\t} catch (error) {\n\t\tconsole.error(`[backup] Failed to delete archive ${name}:`, error);\n\t\treturn {\n\t\t\tsuccess: false,\n\t\t\terror: { code: ErrorCode.BACKUP_DELETE_ERROR, message: \"Failed to delete backup archive\" },\n\t\t};\n\t}\n}\n\n// ── Scheduled runs ──────────────────────────────────────────────\n\n/**\n * Run a scheduled backup if enabled and due. Called from the maintenance\n * tick alongside scheduled publishing and system cleanup — never from a\n * request. Never throws.\n *\n * ponytail: last-run bookkeeping is a plain read-then-write, so two isolates\n * ticking simultaneously could both back up. Worst case is a duplicate\n * archive that retention prunes; not worth a lock.\n */\nexport async function maybeRunScheduledBackup(\n\tdb: Kysely<Database>,\n\tstorage: Storage | undefined,\n): Promise<void> {\n\ttry {\n\t\tif (!storage) return;\n\n\t\tconst settings = await getBackupSettings(db);\n\t\tif (!settings.enabled) return;\n\n\t\tconst options = new OptionsRepository(db);\n\t\tconst lastRun = await options.get<string>(BACKUP_LAST_RUN_KEY);\n\t\tif (lastRun) {\n\t\t\tconst elapsed = Date.now() - Date.parse(lastRun);\n\t\t\tif (Number.isFinite(elapsed) && elapsed < SCHEDULED_BACKUP_INTERVAL_MS) return;\n\t\t}\n\n\t\tconst result = await runBackupToStorage(db, storage, settings.retention);\n\t\tif (result.success) {\n\t\t\tawait options.set(BACKUP_LAST_RUN_KEY, new Date().toISOString());\n\t\t\tconsole.log(`[backup] Scheduled backup stored: ${result.data.name}`);\n\t\t}\n\t} catch (error) {\n\t\tconsole.error(\"[backup] Scheduled backup failed:\", error);\n\t}\n}\n"],"mappings":";;;;;;;AAiCA,MAAa,wBAAwB;;;;;;AAOrC,MAAM,qBAAqB;;AAG3B,MAAa,sBAAsB;;AAGnC,MAAM,sBAAsB;;AAG5B,MAAM,+BAA+B,OAAU,KAAK;;AAGpD,MAAa,uBAAuB;AACpC,MAAa,uBAAuB;AACpC,MAAM,2BAA2B;;;;;;AAOjC,MAAM,yBAAyB,CAAC,QAAQ;;;;;AAMxC,MAAM,qBAAqB;CAAC;CAAqB;CAAuB;CAAgB;;;;;;;AAQxF,MAAM,uBACL;AAED,SAAgB,mBAAmB,MAAuB;AACzD,QAAO,qBAAqB,KAAK,KAAK;;AAqBvC,MAAM,mBAAmC;CACxC,SAAS;CACT,WAAW;CACX;AAED,SAAS,eAAe,OAAuB;AAC9C,KAAI,CAAC,OAAO,SAAS,MAAM,CAAE,QAAO;AACpC,QAAO,KAAK,IAAI,sBAAsB,KAAK,IAAI,sBAAsB,KAAK,MAAM,MAAM,CAAC,CAAC;;;;;;;;;AAYzF,eAAsB,mBAAmB,IAAuC;CAC/E,MAAM,WAAW,MAAM,iBAAiB,IAAI;EAC3C,eAAe;EACf,gBAAgB;EAChB,gBAAgB;EAChB,YAAY;EACZ,CAAC;AAEF,QAAO,KAAK,UAAU;EACrB,QAAQ;EACR,eAAe;EACf,eAAe;EACf,aAAa,SAAS;EACtB,QAAQ,SAAS;EACjB,QAAQ,SAAS;EACjB,CAAC;;;AAIH,SAAgB,mBAAmB,MAAoB;AAItD,QAAO,iBAFO,KAAK,aAAa,CAAC,MAAM,GAAG,GAAG,CAAC,WAAW,KAAK,IAAI,CAEpC,GADf,OAAO,YAAY,CAAC,WAAW,KAAK,GAAG,CAAC,MAAM,GAAG,EAAE,CAC1B;;AAKzC,eAAsB,kBAAkB,IAA+C;CAEtF,MAAM,SAAS,MADC,IAAI,kBAAkB,GAAG,CACZ,IAA6B,oBAAoB;AAC9E,KAAI,CAAC,OAAQ,QAAO,EAAE,GAAG,kBAAkB;AAC3C,QAAO;EACN,SAAS,OAAO,YAAY;EAC5B,WAAW,eAAe,OAAO,aAAa,yBAAyB;EACvE;;AAGF,eAAsB,qBACrB,IACA,OACqC;AACrC,KAAI;EACH,MAAM,WAA2B;GAChC,SAAS,MAAM;GACf,WAAW,eAAe,MAAM,UAAU;GAC1C;AAED,QADgB,IAAI,kBAAkB,GAAG,CAC3B,IAAI,qBAAqB,SAAS;AAChD,SAAO;GAAE,SAAS;GAAM,MAAM;GAAU;UAChC,OAAO;AACf,UAAQ,MAAM,uCAAuC,MAAM;AAC3D,SAAO;GACN,SAAS;GACT,OAAO;IAAE,MAAM,UAAU;IAAuB,SAAS;IAAoC;GAC7F;;;;;;;;;AAYH,eAAsB,mBAAmB,SAAuD;AAC/F,KAAI;AAaH,SAAO;GAAE,SAAS;GAAM,OAZT,MAAM,QAAQ,KAAK;IACjC,QAAQ,GAAG,wBAAwB;IACnC,OAAO;IACP,CAAC,EACsB,MACtB,KAAK,UAAU;IACf,MAAM,KAAK,IAAI,MAAM,EAA6B;IAClD,MAAM,KAAK;IACX,cAAc,KAAK,aAAa,aAAa;IAC7C,EAAE,CACF,QAAQ,YAAY,mBAAmB,QAAQ,KAAK,CAAC,CACrD,UAAU,GAAG,MAAO,EAAE,OAAO,EAAE,OAAO,IAAI,GAAI;GACR;UAChC,OAAO;AACf,UAAQ,MAAM,qCAAqC,MAAM;AACzD,SAAO;GACN,SAAS;GACT,OAAO;IAAE,MAAM,UAAU;IAAmB,SAAS;IAAkC;GACvF;;;;;;;AAQH,eAAsB,mBACrB,IACA,SACA,WACoC;AACpC,KAAI;EACH,MAAM,OAAO,MAAM,mBAAmB,GAAG;EACzC,MAAM,OAAO,mCAAmB,IAAI,MAAM,CAAC;EAC3C,MAAM,OAAO,IAAI,aAAa,CAAC,OAAO,KAAK;AAE3C,QAAM,QAAQ,OAAO;GACpB,KAAK,GAAG,wBAAwB;GAChC;GACA,aAAa;GACb,CAAC;AAEF,QAAM,cAAc,SAAS,eAAe,UAAU,CAAC;AAEvD,SAAO;GACN,SAAS;GACT,MAAM;IAAE;IAAM,MAAM,KAAK;IAAY,+BAAc,IAAI,MAAM,EAAC,aAAa;IAAE;GAC7E;UACO,OAAO;AACf,UAAQ,MAAM,sCAAsC,MAAM;AAC1D,SAAO;GACN,SAAS;GACT,OAAO;IAAE,MAAM,UAAU;IAAqB,SAAS;IAAmC;GAC1F;;;;AAKH,eAAe,cAAc,SAAkB,MAA6B;CAC3E,MAAM,SAAS,MAAM,mBAAmB,QAAQ;AAChD,KAAI,CAAC,OAAO,QAAS;AAErB,MAAK,MAAM,WAAW,OAAO,KAAK,MAAM,KAAK,CAC5C,KAAI;AACH,QAAM,QAAQ,OAAO,GAAG,wBAAwB,QAAQ,OAAO;UACvD,OAAO;AACf,UAAQ,MAAM,oCAAoC,QAAQ,KAAK,IAAI,MAAM;;;AAK5E,eAAsB,oBACrB,SACA,MACwC;AACxC,KAAI,CAAC,mBAAmB,KAAK,CAC5B,QAAO;EACN,SAAS;EACT,OAAO;GAAE,MAAM,UAAU;GAAkB,SAAS;GAAwB;EAC5E;AAEF,KAAI;AACH,QAAM,QAAQ,OAAO,GAAG,wBAAwB,OAAO;AACvD,SAAO;GAAE,SAAS;GAAM,MAAM,EAAE,SAAS,MAAM;GAAE;UACzC,OAAO;AACf,UAAQ,MAAM,qCAAqC,KAAK,IAAI,MAAM;AAClE,SAAO;GACN,SAAS;GACT,OAAO;IAAE,MAAM,UAAU;IAAqB,SAAS;IAAmC;GAC1F;;;;;;;;;;;;AAeH,eAAsB,wBACrB,IACA,SACgB;AAChB,KAAI;AACH,MAAI,CAAC,QAAS;EAEd,MAAM,WAAW,MAAM,kBAAkB,GAAG;AAC5C,MAAI,CAAC,SAAS,QAAS;EAEvB,MAAM,UAAU,IAAI,kBAAkB,GAAG;EACzC,MAAM,UAAU,MAAM,QAAQ,IAAY,oBAAoB;AAC9D,MAAI,SAAS;GACZ,MAAM,UAAU,KAAK,KAAK,GAAG,KAAK,MAAM,QAAQ;AAChD,OAAI,OAAO,SAAS,QAAQ,IAAI,UAAU,6BAA8B;;EAGzE,MAAM,SAAS,MAAM,mBAAmB,IAAI,SAAS,SAAS,UAAU;AACxE,MAAI,OAAO,SAAS;AACnB,SAAM,QAAQ,IAAI,sCAAqB,IAAI,MAAM,EAAC,aAAa,CAAC;AAChE,WAAQ,IAAI,qCAAqC,OAAO,KAAK,OAAO;;UAE7D,OAAO;AACf,UAAQ,MAAM,qCAAqC,MAAM"}
+{"version":3,"file":"backup-8rPSJ28a.mjs","names":[],"sources":["../src/api/handlers/backup.ts"],"sourcesContent":["/**\n * Backup handlers — portable content backups, on demand and scheduled.\n *\n * A backup is the snapshot format (see `snapshot.ts`) wrapped in a small\n * envelope: all content (including drafts, scheduled, and trashed entries),\n * schema definitions, taxonomies, menus, widgets, revisions, media metadata,\n * and site settings.\n *\n * Deliberately NOT included:\n * - Users, sessions, credentials, API/OAuth tokens (auth data is neither\n *   portable nor safe in a user-downloadable file)\n * - Secrets (`emdash:preview_secret`, plugin config, passkey challenges)\n * - Media binaries (metadata only — the files live in the same bucket the\n *   scheduled archives are written to)\n *\n * For full point-in-time database recovery on Cloudflare, D1 Time Travel\n * covers the last 30 days out of the box; these backups complement it with\n * user-holdable, longer-lived archives.\n */\n\nimport type { Kysely } from \"kysely\";\n\nimport { OptionsRepository } from \"../../database/repositories/options.js\";\nimport type { Database } from \"../../database/types.js\";\nimport type { Storage } from \"../../storage/types.js\";\nimport { VERSION } from \"../../version.js\";\nimport { ErrorCode } from \"../errors.js\";\nimport type { ApiResult } from \"../types.js\";\nimport { generateSnapshot } from \"./snapshot.js\";\n\n// ── Constants ───────────────────────────────────────────────────\n\n/** Storage key prefix for scheduled/manual archives. */\nexport const BACKUP_STORAGE_PREFIX = \"backups/\";\n\n/**\n * Filename prefix within the backups/ folder. Included in the list() prefix\n * so LocalStorage (which matches directory + filename prefix, not flat keys\n * like S3/R2) finds the archives too.\n */\nconst BACKUP_FILE_PREFIX = \"emdash-backup-\";\n\n/** Options key holding the scheduled-backup settings. */\nexport const BACKUP_SETTINGS_KEY = \"emdash:backups\";\n\n/** Options key holding the ISO timestamp of the last scheduled run. */\nconst BACKUP_LAST_RUN_KEY = \"emdash:backups_last_run\";\n\n/** Minimum interval between scheduled backups (23h — daily with cron jitter). */\nconst SCHEDULED_BACKUP_INTERVAL_MS = 23 * 60 * 60 * 1000;\n\n/** Retention bounds for stored archives. */\nexport const BACKUP_RETENTION_MIN = 1;\nexport const BACKUP_RETENTION_MAX = 30;\nconst BACKUP_RETENTION_DEFAULT = 7;\n\n/**\n * Options-table key prefixes included in backups. Never widen this to a\n * prefix that can match secrets (`emdash:preview_secret`, `plugin:`,\n * `emdash:passkey_pending:`).\n */\nconst BACKUP_OPTION_PREFIXES = [\"site:\"];\n\n/**\n * Exact `emdash:*` keys included in backups. Do not add `emdash:site_url`: it\n * is the origin of the deployment that took the backup, not portable site data.\n */\nconst BACKUP_OPTION_KEYS = [\"emdash:site_title\", \"emdash:site_tagline\", \"emdash:locale\"];\n\n/**\n * Archive filename shape. Strict allowlist — the download/delete routes\n * interpolate this into a storage key, so it must never contain `/` or `..`.\n * The random suffix makes names unguessable (defense in depth on top of the\n * media route's backups/ deny) and avoids same-second collisions.\n */\nconst ARCHIVE_NAME_PATTERN =\n\t/^emdash-backup-\\d{4}-\\d{2}-\\d{2}T\\d{2}-\\d{2}-\\d{2}-[0-9a-f]{8}\\.json$/;\n\nexport function isValidArchiveName(name: string): boolean {\n\treturn ARCHIVE_NAME_PATTERN.test(name);\n}\n\n// ── Types ───────────────────────────────────────────────────────\n\nexport interface BackupSettings {\n\t/** Whether daily scheduled backups to storage are enabled. */\n\tenabled: boolean;\n\t/** How many archives to keep in storage (oldest pruned first). */\n\tretention: number;\n}\n\nexport interface BackupArchive {\n\t/** Filename within the backups/ prefix (no path separators). */\n\tname: string;\n\t/** Size in bytes. */\n\tsize: number;\n\t/** Last-modified timestamp (ISO). */\n\tlastModified: string;\n}\n\nconst DEFAULT_SETTINGS: BackupSettings = {\n\tenabled: false,\n\tretention: BACKUP_RETENTION_DEFAULT,\n};\n\nfunction clampRetention(value: number): number {\n\tif (!Number.isFinite(value)) return BACKUP_RETENTION_DEFAULT;\n\treturn Math.min(BACKUP_RETENTION_MAX, Math.max(BACKUP_RETENTION_MIN, Math.trunc(value)));\n}\n\n// ── Export ──────────────────────────────────────────────────────\n\n/**\n * Generate a full content backup as a JSON string.\n *\n * ponytail: the whole backup is materialized in memory. Fine for the sites\n * EmDash targets today; truly huge databases should use `wrangler d1 export`\n * (documented on the backups docs page). Upgrade path: stream table-by-table.\n */\nexport async function generateBackupJson(db: Kysely<Database>): Promise<string> {\n\tconst snapshot = await generateSnapshot(db, {\n\t\tincludeDrafts: true,\n\t\tincludeTrashed: true,\n\t\toptionPrefixes: BACKUP_OPTION_PREFIXES,\n\t\toptionKeys: BACKUP_OPTION_KEYS,\n\t});\n\n\treturn JSON.stringify({\n\t\tformat: \"emdash-backup\",\n\t\tformatVersion: 1,\n\t\temdashVersion: VERSION,\n\t\tgeneratedAt: snapshot.generatedAt,\n\t\tschema: snapshot.schema,\n\t\ttables: snapshot.tables,\n\t});\n}\n\n/** Derive the archive filename for a given date (plus a random suffix). */\nexport function archiveNameForDate(date: Date): string {\n\t// 2026-07-09T08:45:12.345Z → emdash-backup-2026-07-09T08-45-12-1a2b3c4d.json\n\tconst stamp = date.toISOString().slice(0, 19).replaceAll(\":\", \"-\");\n\tconst suffix = crypto.randomUUID().replaceAll(\"-\", \"\").slice(0, 8);\n\treturn `emdash-backup-${stamp}-${suffix}.json`;\n}\n\n// ── Settings ────────────────────────────────────────────────────\n\nexport async function getBackupSettings(db: Kysely<Database>): Promise<BackupSettings> {\n\tconst options = new OptionsRepository(db);\n\tconst stored = await options.get<Partial<BackupSettings>>(BACKUP_SETTINGS_KEY);\n\tif (!stored) return { ...DEFAULT_SETTINGS };\n\treturn {\n\t\tenabled: stored.enabled === true,\n\t\tretention: clampRetention(stored.retention ?? BACKUP_RETENTION_DEFAULT),\n\t};\n}\n\nexport async function updateBackupSettings(\n\tdb: Kysely<Database>,\n\tinput: { enabled: boolean; retention: number },\n): Promise<ApiResult<BackupSettings>> {\n\ttry {\n\t\tconst settings: BackupSettings = {\n\t\t\tenabled: input.enabled,\n\t\t\tretention: clampRetention(input.retention),\n\t\t};\n\t\tconst options = new OptionsRepository(db);\n\t\tawait options.set(BACKUP_SETTINGS_KEY, settings);\n\t\treturn { success: true, data: settings };\n\t} catch (error) {\n\t\tconsole.error(\"[backup] Failed to update settings:\", error);\n\t\treturn {\n\t\t\tsuccess: false,\n\t\t\terror: { code: ErrorCode.BACKUP_SETTINGS_ERROR, message: \"Failed to update backup settings\" },\n\t\t};\n\t}\n}\n\n// ── Archives in storage ─────────────────────────────────────────\n\n/**\n * List stored archives, newest first.\n *\n * ponytail: single unpaginated list. The retention cap (max 30) bounds the\n * archive count, so one page always suffices.\n */\nexport async function listBackupArchives(storage: Storage): Promise<ApiResult<BackupArchive[]>> {\n\ttry {\n\t\tconst result = await storage.list({\n\t\t\tprefix: `${BACKUP_STORAGE_PREFIX}${BACKUP_FILE_PREFIX}`,\n\t\t\tlimit: 100,\n\t\t});\n\t\tconst archives = result.files\n\t\t\t.map((file) => ({\n\t\t\t\tname: file.key.slice(BACKUP_STORAGE_PREFIX.length),\n\t\t\t\tsize: file.size,\n\t\t\t\tlastModified: file.lastModified.toISOString(),\n\t\t\t}))\n\t\t\t.filter((archive) => isValidArchiveName(archive.name))\n\t\t\t.toSorted((a, b) => (a.name < b.name ? 1 : -1));\n\t\treturn { success: true, data: archives };\n\t} catch (error) {\n\t\tconsole.error(\"[backup] Failed to list archives:\", error);\n\t\treturn {\n\t\t\tsuccess: false,\n\t\t\terror: { code: ErrorCode.BACKUP_LIST_ERROR, message: \"Failed to list backup archives\" },\n\t\t};\n\t}\n}\n\n/**\n * Create a backup and store it as an archive, then prune old archives\n * beyond `retention`.\n */\nexport async function runBackupToStorage(\n\tdb: Kysely<Database>,\n\tstorage: Storage,\n\tretention: number,\n): Promise<ApiResult<BackupArchive>> {\n\ttry {\n\t\tconst json = await generateBackupJson(db);\n\t\tconst name = archiveNameForDate(new Date());\n\t\tconst body = new TextEncoder().encode(json);\n\n\t\tawait storage.upload({\n\t\t\tkey: `${BACKUP_STORAGE_PREFIX}${name}`,\n\t\t\tbody,\n\t\t\tcontentType: \"application/json\",\n\t\t});\n\n\t\tawait pruneArchives(storage, clampRetention(retention));\n\n\t\treturn {\n\t\t\tsuccess: true,\n\t\t\tdata: { name, size: body.byteLength, lastModified: new Date().toISOString() },\n\t\t};\n\t} catch (error) {\n\t\tconsole.error(\"[backup] Failed to create archive:\", error);\n\t\treturn {\n\t\t\tsuccess: false,\n\t\t\terror: { code: ErrorCode.BACKUP_CREATE_ERROR, message: \"Failed to create backup archive\" },\n\t\t};\n\t}\n}\n\n/** Delete archives beyond the newest `keep`. Failures are logged, not fatal. */\nasync function pruneArchives(storage: Storage, keep: number): Promise<void> {\n\tconst listed = await listBackupArchives(storage);\n\tif (!listed.success) return;\n\n\tfor (const archive of listed.data.slice(keep)) {\n\t\ttry {\n\t\t\tawait storage.delete(`${BACKUP_STORAGE_PREFIX}${archive.name}`);\n\t\t} catch (error) {\n\t\t\tconsole.error(`[backup] Failed to prune archive ${archive.name}:`, error);\n\t\t}\n\t}\n}\n\nexport async function deleteBackupArchive(\n\tstorage: Storage,\n\tname: string,\n): Promise<ApiResult<{ deleted: true }>> {\n\tif (!isValidArchiveName(name)) {\n\t\treturn {\n\t\t\tsuccess: false,\n\t\t\terror: { code: ErrorCode.VALIDATION_ERROR, message: \"Invalid archive name\" },\n\t\t};\n\t}\n\ttry {\n\t\tawait storage.delete(`${BACKUP_STORAGE_PREFIX}${name}`);\n\t\treturn { success: true, data: { deleted: true } };\n\t} catch (error) {\n\t\tconsole.error(`[backup] Failed to delete archive ${name}:`, error);\n\t\treturn {\n\t\t\tsuccess: false,\n\t\t\terror: { code: ErrorCode.BACKUP_DELETE_ERROR, message: \"Failed to delete backup archive\" },\n\t\t};\n\t}\n}\n\n// ── Scheduled runs ──────────────────────────────────────────────\n\n/**\n * Run a scheduled backup if enabled and due. Called from the maintenance\n * tick alongside scheduled publishing and system cleanup — never from a\n * request. Never throws.\n *\n * ponytail: last-run bookkeeping is a plain read-then-write, so two isolates\n * ticking simultaneously could both back up. Worst case is a duplicate\n * archive that retention prunes; not worth a lock.\n */\nexport async function maybeRunScheduledBackup(\n\tdb: Kysely<Database>,\n\tstorage: Storage | undefined,\n): Promise<void> {\n\ttry {\n\t\tif (!storage) return;\n\n\t\tconst settings = await getBackupSettings(db);\n\t\tif (!settings.enabled) return;\n\n\t\tconst options = new OptionsRepository(db);\n\t\tconst lastRun = await options.get<string>(BACKUP_LAST_RUN_KEY);\n\t\tif (lastRun) {\n\t\t\tconst elapsed = Date.now() - Date.parse(lastRun);\n\t\t\tif (Number.isFinite(elapsed) && elapsed < SCHEDULED_BACKUP_INTERVAL_MS) return;\n\t\t}\n\n\t\tconst result = await runBackupToStorage(db, storage, settings.retention);\n\t\tif (result.success) {\n\t\t\tawait options.set(BACKUP_LAST_RUN_KEY, new Date().toISOString());\n\t\t\tconsole.log(`[backup] Scheduled backup stored: ${result.data.name}`);\n\t\t}\n\t} catch (error) {\n\t\tconsole.error(\"[backup] Scheduled backup failed:\", error);\n\t}\n}\n"],"mappings":";;;;;;;AAiCA,MAAa,wBAAwB;;;;;;AAOrC,MAAM,qBAAqB;;AAG3B,MAAa,sBAAsB;;AAGnC,MAAM,sBAAsB;;AAG5B,MAAM,+BAA+B,OAAU,KAAK;;AAGpD,MAAa,uBAAuB;AACpC,MAAa,uBAAuB;AACpC,MAAM,2BAA2B;;;;;;AAOjC,MAAM,yBAAyB,CAAC,QAAQ;;;;;AAMxC,MAAM,qBAAqB;CAAC;CAAqB;CAAuB;CAAgB;;;;;;;AAQxF,MAAM,uBACL;AAED,SAAgB,mBAAmB,MAAuB;AACzD,QAAO,qBAAqB,KAAK,KAAK;;AAqBvC,MAAM,mBAAmC;CACxC,SAAS;CACT,WAAW;CACX;AAED,SAAS,eAAe,OAAuB;AAC9C,KAAI,CAAC,OAAO,SAAS,MAAM,CAAE,QAAO;AACpC,QAAO,KAAK,IAAI,sBAAsB,KAAK,IAAI,sBAAsB,KAAK,MAAM,MAAM,CAAC,CAAC;;;;;;;;;AAYzF,eAAsB,mBAAmB,IAAuC;CAC/E,MAAM,WAAW,MAAM,iBAAiB,IAAI;EAC3C,eAAe;EACf,gBAAgB;EAChB,gBAAgB;EAChB,YAAY;EACZ,CAAC;AAEF,QAAO,KAAK,UAAU;EACrB,QAAQ;EACR,eAAe;EACf,eAAe;EACf,aAAa,SAAS;EACtB,QAAQ,SAAS;EACjB,QAAQ,SAAS;EACjB,CAAC;;;AAIH,SAAgB,mBAAmB,MAAoB;AAItD,QAAO,iBAFO,KAAK,aAAa,CAAC,MAAM,GAAG,GAAG,CAAC,WAAW,KAAK,IAAI,CAEpC,GADf,OAAO,YAAY,CAAC,WAAW,KAAK,GAAG,CAAC,MAAM,GAAG,EAAE,CAC1B;;AAKzC,eAAsB,kBAAkB,IAA+C;CAEtF,MAAM,SAAS,MADC,IAAI,kBAAkB,GAAG,CACZ,IAA6B,oBAAoB;AAC9E,KAAI,CAAC,OAAQ,QAAO,EAAE,GAAG,kBAAkB;AAC3C,QAAO;EACN,SAAS,OAAO,YAAY;EAC5B,WAAW,eAAe,OAAO,aAAa,yBAAyB;EACvE;;AAGF,eAAsB,qBACrB,IACA,OACqC;AACrC,KAAI;EACH,MAAM,WAA2B;GAChC,SAAS,MAAM;GACf,WAAW,eAAe,MAAM,UAAU;GAC1C;AAED,QADgB,IAAI,kBAAkB,GAAG,CAC3B,IAAI,qBAAqB,SAAS;AAChD,SAAO;GAAE,SAAS;GAAM,MAAM;GAAU;UAChC,OAAO;AACf,UAAQ,MAAM,uCAAuC,MAAM;AAC3D,SAAO;GACN,SAAS;GACT,OAAO;IAAE,MAAM,UAAU;IAAuB,SAAS;IAAoC;GAC7F;;;;;;;;;AAYH,eAAsB,mBAAmB,SAAuD;AAC/F,KAAI;AAaH,SAAO;GAAE,SAAS;GAAM,OAZT,MAAM,QAAQ,KAAK;IACjC,QAAQ,GAAG,wBAAwB;IACnC,OAAO;IACP,CAAC,EACsB,MACtB,KAAK,UAAU;IACf,MAAM,KAAK,IAAI,MAAM,EAA6B;IAClD,MAAM,KAAK;IACX,cAAc,KAAK,aAAa,aAAa;IAC7C,EAAE,CACF,QAAQ,YAAY,mBAAmB,QAAQ,KAAK,CAAC,CACrD,UAAU,GAAG,MAAO,EAAE,OAAO,EAAE,OAAO,IAAI,GAAI;GACR;UAChC,OAAO;AACf,UAAQ,MAAM,qCAAqC,MAAM;AACzD,SAAO;GACN,SAAS;GACT,OAAO;IAAE,MAAM,UAAU;IAAmB,SAAS;IAAkC;GACvF;;;;;;;AAQH,eAAsB,mBACrB,IACA,SACA,WACoC;AACpC,KAAI;EACH,MAAM,OAAO,MAAM,mBAAmB,GAAG;EACzC,MAAM,OAAO,mCAAmB,IAAI,MAAM,CAAC;EAC3C,MAAM,OAAO,IAAI,aAAa,CAAC,OAAO,KAAK;AAE3C,QAAM,QAAQ,OAAO;GACpB,KAAK,GAAG,wBAAwB;GAChC;GACA,aAAa;GACb,CAAC;AAEF,QAAM,cAAc,SAAS,eAAe,UAAU,CAAC;AAEvD,SAAO;GACN,SAAS;GACT,MAAM;IAAE;IAAM,MAAM,KAAK;IAAY,+BAAc,IAAI,MAAM,EAAC,aAAa;IAAE;GAC7E;UACO,OAAO;AACf,UAAQ,MAAM,sCAAsC,MAAM;AAC1D,SAAO;GACN,SAAS;GACT,OAAO;IAAE,MAAM,UAAU;IAAqB,SAAS;IAAmC;GAC1F;;;;AAKH,eAAe,cAAc,SAAkB,MAA6B;CAC3E,MAAM,SAAS,MAAM,mBAAmB,QAAQ;AAChD,KAAI,CAAC,OAAO,QAAS;AAErB,MAAK,MAAM,WAAW,OAAO,KAAK,MAAM,KAAK,CAC5C,KAAI;AACH,QAAM,QAAQ,OAAO,GAAG,wBAAwB,QAAQ,OAAO;UACvD,OAAO;AACf,UAAQ,MAAM,oCAAoC,QAAQ,KAAK,IAAI,MAAM;;;AAK5E,eAAsB,oBACrB,SACA,MACwC;AACxC,KAAI,CAAC,mBAAmB,KAAK,CAC5B,QAAO;EACN,SAAS;EACT,OAAO;GAAE,MAAM,UAAU;GAAkB,SAAS;GAAwB;EAC5E;AAEF,KAAI;AACH,QAAM,QAAQ,OAAO,GAAG,wBAAwB,OAAO;AACvD,SAAO;GAAE,SAAS;GAAM,MAAM,EAAE,SAAS,MAAM;GAAE;UACzC,OAAO;AACf,UAAQ,MAAM,qCAAqC,KAAK,IAAI,MAAM;AAClE,SAAO;GACN,SAAS;GACT,OAAO;IAAE,MAAM,UAAU;IAAqB,SAAS;IAAmC;GAC1F;;;;;;;;;;;;AAeH,eAAsB,wBACrB,IACA,SACgB;AAChB,KAAI;AACH,MAAI,CAAC,QAAS;EAEd,MAAM,WAAW,MAAM,kBAAkB,GAAG;AAC5C,MAAI,CAAC,SAAS,QAAS;EAEvB,MAAM,UAAU,IAAI,kBAAkB,GAAG;EACzC,MAAM,UAAU,MAAM,QAAQ,IAAY,oBAAoB;AAC9D,MAAI,SAAS;GACZ,MAAM,UAAU,KAAK,KAAK,GAAG,KAAK,MAAM,QAAQ;AAChD,OAAI,OAAO,SAAS,QAAQ,IAAI,UAAU,6BAA8B;;EAGzE,MAAM,SAAS,MAAM,mBAAmB,IAAI,SAAS,SAAS,UAAU;AACxE,MAAI,OAAO,SAAS;AACnB,SAAM,QAAQ,IAAI,sCAAqB,IAAI,MAAM,EAAC,aAAa,CAAC;AAChE,WAAQ,IAAI,qCAAqC,OAAO,KAAK,OAAO;;UAE7D,OAAO;AACf,UAAQ,MAAM,qCAAqC,MAAM"}