emdash 1.3.0 → 1.4.0

package/dist/{policy-DLQ--Hnm.mjs → policy-BPugqmeV.mjs}

@@ -1,4 +1,4 @@
-import { a as getExactMigrationStatus, c as runMigrations } from "./runner-C5NeAkBQ.mjs";
+import { a as MigrationRowLimitError, i as MigrationLockHeldError, l as runMigrations, o as getExactMigrationStatus } from "./runner-Bkkfk4O8.mjs";
 
 //#region src/database/migrations/policy.ts
 function parseMigrationMode(value, source) {
@@ -30,10 +30,18 @@ var PendingMigrationsError = class extends Error {
 		this.pending = [...pending];
 	}
 };
-async function enforceRuntimeMigrationPolicy(db, mode) {
+/**
+* Whether a runtime init error leaves the database waiting for migrations that
+* this request cannot apply. A backed-off init carries the original error as
+* its cause.
+*/
+function isMigrationRequiredError(error) {
+	return [error, error instanceof Error ? error.cause : void 0].some((candidate) => candidate instanceof PendingMigrationsError || candidate instanceof MigrationLockHeldError || candidate instanceof MigrationRowLimitError);
+}
+async function enforceRuntimeMigrationPolicy(db, mode, options = {}) {
 	if (mode === "manual") return;
 	if (mode === "auto") {
-		await runMigrations(db);
+		await runMigrations(db, { contentRowLimit: options.contentRowLimit });
 		return;
 	}
 	const status = await getExactMigrationStatus(db);
@@ -41,5 +49,5 @@ async function enforceRuntimeMigrationPolicy(db, mode) {
 }
 
 //#endregion
-export { resolveRuntimeMigrationMode as i, enforceRuntimeMigrationPolicy as n, normalizeMigrationConfig as r, PendingMigrationsError as t };
-//# sourceMappingURL=policy-DLQ--Hnm.mjs.map
+export { resolveRuntimeMigrationMode as a, normalizeMigrationConfig as i, enforceRuntimeMigrationPolicy as n, isMigrationRequiredError as r, PendingMigrationsError as t };
+//# sourceMappingURL=policy-BPugqmeV.mjs.map

package/dist/policy-BPugqmeV.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy-BPugqmeV.mjs","names":[],"sources":["../src/database/migrations/policy.ts"],"sourcesContent":["import type { Kysely } from \"kysely\";\n\nimport type { Database } from \"../types.js\";\nimport {\n\tgetExactMigrationStatus,\n\tMigrationLockHeldError,\n\tMigrationRowLimitError,\n\trunMigrations,\n} from \"./runner.js\";\n\nexport type RuntimeMigrationMode = \"auto\" | \"check\" | \"manual\";\n\nexport interface RuntimeMigrationConfig {\n\truntime: RuntimeMigrationMode;\n\tdev?: RuntimeMigrationMode;\n}\n\nfunction parseMigrationMode(value: unknown, source: string): RuntimeMigrationMode {\n\tif (value === \"auto\" || value === \"check\" || value === \"manual\") {\n\t\treturn value;\n\t}\n\tthrow new Error(\n\t\t`Invalid ${source} value ${JSON.stringify(value)}; expected \"auto\", \"check\", or \"manual\"`,\n\t);\n}\n\nexport function normalizeMigrationConfig(value: unknown): RuntimeMigrationConfig {\n\tif (value === undefined) return { runtime: \"auto\" };\n\tif (typeof value !== \"object\" || value === null || Array.isArray(value)) {\n\t\tthrow new Error(\"Invalid migrations configuration; expected an object\");\n\t}\n\n\tconst runtimeValue = Reflect.get(value, \"runtime\");\n\tconst devValue = Reflect.get(value, \"dev\");\n\tconst runtime = parseMigrationMode(runtimeValue, \"migrations.runtime\");\n\tconst dev = devValue === undefined ? undefined : parseMigrationMode(devValue, \"migrations.dev\");\n\treturn dev === undefined ? { runtime } : { runtime, dev };\n}\n\nexport function resolveRuntimeMigrationMode(\n\tconfig: RuntimeMigrationConfig | undefined,\n\toptions: { dev: boolean; override?: unknown },\n): RuntimeMigrationMode {\n\tif (options.override !== undefined) {\n\t\treturn parseMigrationMode(options.override, \"EMDASH_MIGRATIONS_MODE\");\n\t}\n\tif (options.dev) return config?.dev ?? \"auto\";\n\treturn config?.runtime ?? \"auto\";\n}\n\nexport class PendingMigrationsError extends Error {\n\treadonly pending: string[];\n\n\tconstructor(pending: readonly string[]) {\n\t\tsuper(`Database has pending EmDash migrations: ${pending.join(\", \")}`);\n\t\tthis.name = \"PendingMigrationsError\";\n\t\tthis.pending = [...pending];\n\t}\n}\n\n/**\n * Whether a runtime init error leaves the database waiting for migrations that\n * this request cannot apply. A backed-off init carries the original error as\n * its cause.\n */\nexport function isMigrationRequiredError(error: unknown): boolean {\n\tconst cause = error instanceof Error ? error.cause : undefined;\n\treturn [error, cause].some(\n\t\t(candidate) =>\n\t\t\tcandidate instanceof PendingMigrationsError ||\n\t\t\tcandidate instanceof MigrationLockHeldError ||\n\t\t\tcandidate instanceof MigrationRowLimitError,\n\t);\n}\n\nexport interface RuntimeMigrationPolicyOptions {\n\t/** In auto mode, see `MigrationOptions.contentRowLimit`. */\n\tcontentRowLimit?: number;\n}\n\nexport async function enforceRuntimeMigrationPolicy(\n\tdb: Kysely<Database>,\n\tmode: RuntimeMigrationMode,\n\toptions: RuntimeMigrationPolicyOptions = {},\n): Promise<void> {\n\tif (mode === \"manual\") return;\n\tif (mode === \"auto\") {\n\t\tawait runMigrations(db, { contentRowLimit: options.contentRowLimit });\n\t\treturn;\n\t}\n\n\tconst status = await getExactMigrationStatus(db);\n\tif (status.pending.length > 0) {\n\t\tthrow new PendingMigrationsError(status.pending);\n\t}\n}\n"],"mappings":";;;AAiBA,SAAS,mBAAmB,OAAgB,QAAsC;AACjF,KAAI,UAAU,UAAU,UAAU,WAAW,UAAU,SACtD,QAAO;AAER,OAAM,IAAI,MACT,WAAW,OAAO,SAAS,KAAK,UAAU,MAAM,CAAC,yCACjD;;AAGF,SAAgB,yBAAyB,OAAwC;AAChF,KAAI,UAAU,OAAW,QAAO,EAAE,SAAS,QAAQ;AACnD,KAAI,OAAO,UAAU,YAAY,UAAU,QAAQ,MAAM,QAAQ,MAAM,CACtE,OAAM,IAAI,MAAM,uDAAuD;CAGxE,MAAM,eAAe,QAAQ,IAAI,OAAO,UAAU;CAClD,MAAM,WAAW,QAAQ,IAAI,OAAO,MAAM;CAC1C,MAAM,UAAU,mBAAmB,cAAc,qBAAqB;CACtE,MAAM,MAAM,aAAa,SAAY,SAAY,mBAAmB,UAAU,iBAAiB;AAC/F,QAAO,QAAQ,SAAY,EAAE,SAAS,GAAG;EAAE;EAAS;EAAK;;AAG1D,SAAgB,4BACf,QACA,SACuB;AACvB,KAAI,QAAQ,aAAa,OACxB,QAAO,mBAAmB,QAAQ,UAAU,yBAAyB;AAEtE,KAAI,QAAQ,IAAK,QAAO,QAAQ,OAAO;AACvC,QAAO,QAAQ,WAAW;;AAG3B,IAAa,yBAAb,cAA4C,MAAM;CACjD,AAAS;CAET,YAAY,SAA4B;AACvC,QAAM,2CAA2C,QAAQ,KAAK,KAAK,GAAG;AACtE,OAAK,OAAO;AACZ,OAAK,UAAU,CAAC,GAAG,QAAQ;;;;;;;;AAS7B,SAAgB,yBAAyB,OAAyB;AAEjE,QAAO,CAAC,OADM,iBAAiB,QAAQ,MAAM,QAAQ,OAChC,CAAC,MACpB,cACA,qBAAqB,0BACrB,qBAAqB,0BACrB,qBAAqB,uBACtB;;AAQF,eAAsB,8BACrB,IACA,MACA,UAAyC,EAAE,EAC3B;AAChB,KAAI,SAAS,SAAU;AACvB,KAAI,SAAS,QAAQ;AACpB,QAAM,cAAc,IAAI,EAAE,iBAAiB,QAAQ,iBAAiB,CAAC;AACrE;;CAGD,MAAM,SAAS,MAAM,wBAAwB,GAAG;AAChD,KAAI,OAAO,QAAQ,SAAS,EAC3B,OAAM,IAAI,uBAAuB,OAAO,QAAQ"}

package/dist/{protocol-79kUO7jP.d.mts → protocol-PoAfD_9W.d.mts}

@@ -1,4 +1,4 @@
-import { t as I18nConfig } from "./config-CFMojMFK.mjs";
+import { t as I18nConfig } from "./config-D44_8G9J.mjs";
 
 //#region src/migrations/protocol.d.ts
 type MigrationAction = "check" | "apply" | "release-lock" | "take-over-lock";
@@ -62,4 +62,4 @@ interface MigrationExecutorModule<ManifestConfig = unknown> {
 }
 //#endregion
 export { MigrationExecutorModule as a, MigrationRequest as c, MigrationExecutorFactoryContext as i, MigrationTarget as l, MigrationExecutor as n, MigrationLockReport as o, MigrationExecutorFactory as r, MigrationReport as s, MigrationAction as t, MigrationTargetOverrides as u };
-//# sourceMappingURL=protocol-79kUO7jP.d.mts.map
+//# sourceMappingURL=protocol-PoAfD_9W.d.mts.map

package/dist/{protocol-79kUO7jP.d.mts.map → protocol-PoAfD_9W.d.mts.map}

@@ -1 +1 @@
-{"version":3,"file":"protocol-79kUO7jP.d.mts","names":[],"sources":["../src/migrations/protocol.ts"],"mappings":";;;KAEY,eAAA;AAAA,UAEK,gBAAA;EAChB,MAAA,EAAQ,eAAA;EACR,IAAA,EAAM,UAAA;EACN,QAAA;IACC,aAAA;IACA,uBAAA;EAAA;EAL+B;;;;;EAYhC,MAAA;AAAA;AAAA,UAGgB,mBAAA;EAChB,EAAA;EAXC;EAaD,SAAA;AAAA;AAAA,UAGgB,eAAA;EAChB,IAAA;EACA,KAAA;EACA,WAAA;EACA,SAAA;EACA,WAAA;EACA,UAAA;AAAA;AAAA,UAGgB,eAAA;EAChB,MAAA,EAAQ,eAAA;EACR,YAAA;EACA,OAAA;EACA,cAAA;EACA,QAAA;EATA;EAWA,IAAA,GAAO,mBAAA;AAAA;AAAA,UAGS,iBAAA;EAChB,MAAA,EAAQ,eAAA;EACR,OAAA,CAAQ,OAAA,EAAS,gBAAA,GAAmB,OAAA,CAAQ,eAAA;EAC5C,OAAA,KAAY,OAAA;AAAA;AAAA,UAGI,wBAAA;EAChB,QAAA;EACA,cAAA;EACA,EAAA;EACA,SAAA;EACA,cAAA;EACA,WAAA;AAAA;AAAA,UAGgB,+BAAA;EAChB,WAAA;EACA,GAAA,EAAK,QAAA,CAAS,MAAA;EACd,SAAA,GAAY,QAAA,CAAS,wBAAA;AAAA;AAAA,KAGV,wBAAA,8BACX,cAAA,EAAgB,cAAA,EAChB,OAAA,EAAS,+BAAA,KACL,iBAAA,GAAoB,OAAA,CAAQ,iBAAA;AAAA,UAEhB,uBAAA;EAChB,uBAAA,EAAyB,wBAAA,CAAyB,cAAA;AAAA"}
+{"version":3,"file":"protocol-PoAfD_9W.d.mts","names":[],"sources":["../src/migrations/protocol.ts"],"mappings":";;;KAEY,eAAA;AAAA,UAEK,gBAAA;EAChB,MAAA,EAAQ,eAAA;EACR,IAAA,EAAM,UAAA;EACN,QAAA;IACC,aAAA;IACA,uBAAA;EAAA;EAL+B;;;;;EAYhC,MAAA;AAAA;AAAA,UAGgB,mBAAA;EAChB,EAAA;EAXC;EAaD,SAAA;AAAA;AAAA,UAGgB,eAAA;EAChB,IAAA;EACA,KAAA;EACA,WAAA;EACA,SAAA;EACA,WAAA;EACA,UAAA;AAAA;AAAA,UAGgB,eAAA;EAChB,MAAA,EAAQ,eAAA;EACR,YAAA;EACA,OAAA;EACA,cAAA;EACA,QAAA;EATA;EAWA,IAAA,GAAO,mBAAA;AAAA;AAAA,UAGS,iBAAA;EAChB,MAAA,EAAQ,eAAA;EACR,OAAA,CAAQ,OAAA,EAAS,gBAAA,GAAmB,OAAA,CAAQ,eAAA;EAC5C,OAAA,KAAY,OAAA;AAAA;AAAA,UAGI,wBAAA;EAChB,QAAA;EACA,cAAA;EACA,EAAA;EACA,SAAA;EACA,cAAA;EACA,WAAA;AAAA;AAAA,UAGgB,+BAAA;EAChB,WAAA;EACA,GAAA,EAAK,QAAA,CAAS,MAAA;EACd,SAAA,GAAY,QAAA,CAAS,wBAAA;AAAA;AAAA,KAGV,wBAAA,8BACX,cAAA,EAAgB,cAAA,EAChB,OAAA,EAAS,+BAAA,KACL,iBAAA,GAAoB,OAAA,CAAQ,iBAAA;AAAA,UAEhB,uBAAA;EAChB,uBAAA,EAAyB,wBAAA,CAAyB,cAAA;AAAA"}

package/dist/{public-plugin-api-routes-BuAMJ8nN.mjs → public-plugin-api-routes-CMljrTby.mjs}

@@ -1,13 +1,13 @@
-import { t as getMenu } from "./menus-Cl4kwdt7.mjs";
-import { n as createDeferredTaskTracker } from "./after-PcEvMY_6.mjs";
+import { t as getMenu } from "./menus-oypxT1pI.mjs";
+import { n as createDeferredTaskTracker } from "./after-32yNRvd2.mjs";
 import { getRequestContext } from "./request-context.mjs";
-import { n as cachedQuery, t as CacheNamespace } from "./object-cache-Bo6DGaC9.mjs";
-import { i as setRequestCacheEntry, r as requestCached } from "./request-cache-C4CIo5ad.mjs";
-import { c as getDb } from "./loader-CswroUbe.mjs";
+import { n as cachedQuery, t as CacheNamespace } from "./object-cache-DmKr09La.mjs";
+import { i as setRequestCacheEntry, r as requestCached } from "./request-cache-5z2WzWmh.mjs";
+import { u as getDb } from "./loader-DhnedqY4.mjs";
 import { flushRecorder, isInstrumentationEnabled } from "./database/instrumentation.mjs";
-import { a as getTaxonomyDefs, o as getTaxonomyTerms } from "./taxonomies-ChnU7Mc8.mjs";
-import { a as getSiteSettings } from "./settings-CWb84sDm.mjs";
-import { r as getWidgetAreas } from "./widgets-DA5XmvVC.mjs";
+import { a as getTaxonomyDefs, o as getTaxonomyTerms } from "./taxonomies-B__VmCKQ.mjs";
+import { a as getSiteSettings } from "./settings-D932YP2-.mjs";
+import { r as getWidgetAreas } from "./widgets-BUx_Mf2q.mjs";
 
 //#region src/astro/middleware/scoped-db.ts
 /**
@@ -313,4 +313,4 @@ function createPublicPluginApiRouteHandler(runtime) {
 
 //#endregion
 export { ASTRO_COOKIES_SYMBOL as a, requestEndedAuthenticated as c, wrapBodyForStreamMetrics as i, getPublicPluginRouteMeta as n, coordinateScopedDbLifecycle as o, prefetchLayoutData as r, finishScoped as s, createPublicPluginApiRouteHandler as t };
-//# sourceMappingURL=public-plugin-api-routes-BuAMJ8nN.mjs.map
+//# sourceMappingURL=public-plugin-api-routes-CMljrTby.mjs.map

package/dist/{public-plugin-api-routes-BuAMJ8nN.mjs.map → public-plugin-api-routes-CMljrTby.mjs.map}

@@ -1 +1 @@
-{"version":3,"file":"public-plugin-api-routes-BuAMJ8nN.mjs","names":[],"sources":["../src/astro/middleware/scoped-db.ts","../src/astro/middleware/stream-end-metrics.ts","../src/astro/prefetch.ts","../src/astro/public-plugin-api-routes.ts"],"sourcesContent":["/**\n * Request-scoped database lifecycle helpers.\n *\n * Extracted from middleware.ts so they can be unit-tested without pulling in\n * the virtual:emdash/* module graph. The middleware imports these to settle a\n * request-scoped db adapter's lifecycle around the response.\n */\n\nimport { createDeferredTaskTracker } from \"../../deferred-tasks.js\";\nimport type { DeferredTaskTracker } from \"../../deferred-tasks.js\";\n\n/**\n * Astro attaches AstroCookies to outgoing responses via a well-known global\n * symbol. Cloning a Response (`new Response(body, init)`) drops non-header\n * metadata, so any helper that wraps the response must explicitly forward this\n * symbol or `cookies.set()` calls will be silently dropped. `Symbol.for`\n * returns the same registry symbol everywhere, so this matches the copy in\n * middleware.ts.\n */\nexport const ASTRO_COOKIES_SYMBOL = Symbol.for(\"astro.cookies\");\n\ninterface ScopedDbLifecycle {\n\tcommit: () => void;\n\tclose?: () => void;\n}\n\n/**\n * Whether the request ended authenticated, for the db adapter's `commit()`.\n * `isAuthenticated` is captured before the route runs, so it misses\n * login/signup/invite requests that create the Astro session mid-request;\n * `session.set()` writes the `astro-session` cookie into the jar synchronously,\n * so scanning the outgoing cookies detects them. Only outgoing cookies count —\n * a stale `astro-session` cookie arriving on an anonymous render must not\n * qualify, or its replica-read bookmark would overwrite a fresher one from an\n * earlier authenticated write.\n */\nexport function requestEndedAuthenticated(\n\tisAuthenticated: boolean,\n\tcookies: { headers(): Iterable<string> },\n): boolean {\n\tif (isAuthenticated) return true;\n\tfor (const header of cookies.headers()) {\n\t\tif (header.startsWith(\"astro-session=\")) return true;\n\t}\n\treturn false;\n}\n\n/** Hold the real adapter close behind both response and deferred-task completion. */\nexport function coordinateScopedDbLifecycle(scoped: ScopedDbLifecycle): {\n\tclosed?: Promise<void>;\n\tdeferredTasks?: DeferredTaskTracker;\n\tlifecycle: ScopedDbLifecycle;\n} {\n\tif (!scoped.close) return { lifecycle: scoped };\n\n\tconst close = scoped.close;\n\tconst deferredTasks = createDeferredTaskTracker(() => {\n\t\ttry {\n\t\t\tclose();\n\t\t} catch (error) {\n\t\t\tconsole.error(\"[emdash] request-scoped db close failed:\", error);\n\t\t}\n\t});\n\treturn {\n\t\tclosed: deferredTasks.settled,\n\t\tdeferredTasks,\n\t\tlifecycle: { commit: scoped.commit, close: deferredTasks.settle },\n\t};\n}\n\n/**\n * Run a request-scoped db's `close()` once the response body has finished\n * streaming. Astro streams HTML and components issue DB queries during that\n * stream, so a connection-backed adapter (e.g. Postgres over Hyperdrive) must\n * not be torn down until the body is flushed. Bodyless responses (redirects,\n * 304s, errors) close immediately. A guard makes close idempotent and a stream\n * `cancel` (client disconnect) still triggers it so connections never leak.\n *\n * No-op for adapters without a `close` (D1): the response passes through.\n */\nexport function wrapResponseForScopedClose(response: Response, close: () => void): Response {\n\tlet closed = false;\n\tconst runClose = () => {\n\t\tif (closed) return;\n\t\tclosed = true;\n\t\ttry {\n\t\t\tclose();\n\t\t} catch (error) {\n\t\t\tconsole.error(\"[emdash] request-scoped db close failed:\", error);\n\t\t}\n\t};\n\n\tif (!response.body) {\n\t\trunClose();\n\t\treturn response;\n\t}\n\n\tconst transform = new TransformStream<Uint8Array, Uint8Array>({\n\t\tflush: runClose,\n\t\tcancel: runClose,\n\t});\n\tconst wrapped = new Response(response.body.pipeThrough(transform), response);\n\tconst astroCookies = Reflect.get(response, ASTRO_COOKIES_SYMBOL);\n\tif (astroCookies !== undefined) {\n\t\tReflect.set(wrapped, ASTRO_COOKIES_SYMBOL, astroCookies);\n\t}\n\t// Byte counts are preserved by the identity transform, but a stale\n\t// Content-Length on a reconstructed streaming Response risks truncation.\n\twrapped.headers.delete(\"Content-Length\");\n\treturn wrapped;\n}\n\n/**\n * Run the request body under a request-scoped db, then settle its lifecycle:\n * `commit()` runs before the response is returned (so per-request state like a\n * D1 bookmark cookie is persisted in the headers, even if render throws), while\n * `close()` (if any) is deferred to lifecycle settlement so a\n * connection-backed adapter isn't torn down mid-render or mid-task. On error\n * the lifecycle is settled before rethrowing so it never leaks.\n *\n * On the error path both `commit()` and `close()` are defended: a throw from\n * either is logged and swallowed so it can't replace the propagating render\n * error (which is the one the caller needs to see). On the success path\n * `commit()` is guarded too — if it throws, the connection is closed before the\n * failure is surfaced, so it never leaks. For the current adapters `commit()`\n * is a no-op (Hyperdrive) or a cookie write (D1, no `close`) and `close()` is\n * fire-and-forget, so these guards only matter for a future connection-backed\n * adapter with throwing teardown, but the helper is generic and must not leak\n * or mask.\n */\nexport async function finishScoped(\n\tscoped: ScopedDbLifecycle,\n\trun: () => Promise<Response>,\n): Promise<Response> {\n\tlet response: Response;\n\ttry {\n\t\tresponse = await run();\n\t} catch (error) {\n\t\t// A render error is already propagating; neither commit nor close may\n\t\t// mask it, and close must still run so the connection doesn't leak.\n\t\tcommitSafely(scoped.commit);\n\t\tcloseSafely(scoped.close);\n\t\tthrow error;\n\t}\n\ttry {\n\t\tscoped.commit();\n\t} catch (error) {\n\t\t// commit() failed on the success path: close the connection now (the\n\t\t// response won't be wrapped, so stream-end close would never run) and\n\t\t// surface the failure. close is swallowed so it can't mask the commit\n\t\t// error that the caller needs to see.\n\t\tcloseSafely(scoped.close);\n\t\tthrow error;\n\t}\n\treturn scoped.close ? wrapResponseForScopedClose(response, scoped.close) : response;\n}\n\n/**\n * Run commit() swallowing any error. Used where an exception is already\n * propagating (or about to be thrown) and a commit failure must neither mask it\n * nor skip the subsequent close().\n */\nfunction commitSafely(commit: () => void): void {\n\ttry {\n\t\tcommit();\n\t} catch (error) {\n\t\tconsole.error(\"[emdash] request-scoped db commit failed during error handling:\", error);\n\t}\n}\n\n/**\n * Run close() swallowing any error. Used on the error/commit-failure paths\n * where another exception is the one the caller must see; a throwing teardown\n * must not replace it.\n */\nfunction closeSafely(close: (() => void) | undefined): void {\n\tif (!close) return;\n\ttry {\n\t\tclose();\n\t} catch (error) {\n\t\tconsole.error(\"[emdash] request-scoped db close failed during error handling:\", error);\n\t}\n}\n","/**\n * Stream-end metrics\n *\n * Server-Timing db.* counters are snapshotted when middleware's next()\n * returns — but at that point only the response *headers* are final.\n * Astro streams the body afterwards, and components rendered during\n * streaming issue further DB queries that the headers can never report.\n *\n * This module wraps the response body in an identity TransformStream and\n * snapshots the request metrics in flush(), i.e. when the body actually\n * finishes streaming. The metrics object lives on the request context\n * (AsyncLocalStorage) and is mutated in-place by the Kysely log hook, so\n * a reference captured before wrapping observes every post-header query.\n * The snapshot is emitted as prefixed NDJSON on stdout (same transport as\n * [emdash-query-log] — console.log works in both Node and workerd).\n *\n * Gated on isInstrumentationEnabled() (EMDASH_QUERY_LOG=1): zero overhead\n * in normal production traffic.\n */\n\nimport { flushRecorder, isInstrumentationEnabled } from \"../../database/instrumentation.js\";\nimport { getRequestContext } from \"../../request-context.js\";\n// Reuse the single source of truth for Astro's well-known cookies symbol\n// rather than redefining `Symbol.for(\"astro.cookies\")` here — it must stay in\n// lockstep with the copy the rest of the middleware forwards.\nimport { ASTRO_COOKIES_SYMBOL } from \"./scoped-db.js\";\n\nexport const STREAM_END_PREFIX = \"[emdash-stream-end]\";\n\n/** Shape of the NDJSON snapshot emitted when the body finishes streaming. */\nexport interface StreamEndSnapshot {\n\troute?: string;\n\tmethod?: string;\n\tphase?: string;\n\t/** Total elapsed ms from middleware entry to end of body streaming. */\n\ttotalMs: number;\n\tdbCount: number;\n\tdbTotalMs: number;\n\tdbFirstOffset: number | null;\n\tdbLastOffset: number | null;\n\tcacheHits: number;\n\tcacheMisses: number;\n}\n\n/**\n * Wrap a response body so the FINAL request metrics are emitted when the\n * body finishes streaming. Returns the response unchanged when\n * instrumentation is disabled, the body is null, or no request metrics\n * are attached (e.g. outside the middleware's ALS context).\n */\nexport function wrapBodyForStreamMetrics(response: Response): Response {\n\tif (!isInstrumentationEnabled()) return response;\n\tif (!response.body) return response;\n\n\t// Capture the context's metrics object BEFORE wrapping: flush() runs\n\t// after the middleware's ALS frame may have exited, but the object\n\t// reference stays live and is mutated in-place by the Kysely log hook.\n\tconst ctx = getRequestContext();\n\tconst metrics = ctx?.metrics;\n\tif (!metrics) return response;\n\tconst recorder = ctx?.queryRecorder;\n\n\t// Claim the per-query flush: the recorder is mutated in-place by the\n\t// Kysely log hook for the whole request, including queries issued by\n\t// components while the body streams. Flushing here (rather than when\n\t// middleware returns) is what captures those streaming queries. The\n\t// flag tells the middleware's fallback flush to leave this recorder\n\t// to us.\n\tif (recorder) recorder.deferredFlush = true;\n\n\tconst transform = new TransformStream<Uint8Array, Uint8Array>({\n\t\tflush() {\n\t\t\tconst snapshot: StreamEndSnapshot = {\n\t\t\t\troute: recorder?.route,\n\t\t\t\tmethod: recorder?.method,\n\t\t\t\tphase: recorder?.phase,\n\t\t\t\ttotalMs: performance.now() - metrics.start,\n\t\t\t\tdbCount: metrics.dbCount,\n\t\t\t\tdbTotalMs: metrics.dbTotalMs,\n\t\t\t\tdbFirstOffset: metrics.dbFirstOffset,\n\t\t\t\tdbLastOffset: metrics.dbLastOffset,\n\t\t\t\tcacheHits: metrics.cacheHits,\n\t\t\t\tcacheMisses: metrics.cacheMisses,\n\t\t\t};\n\t\t\tconsole.log(`${STREAM_END_PREFIX} ${JSON.stringify(snapshot)}`);\n\t\t\t// Emit the full per-query log now that streaming is complete.\n\t\t\tif (recorder) flushRecorder(recorder);\n\t\t},\n\t});\n\n\tconst wrapped = new Response(response.body.pipeThrough(transform), response);\n\tconst astroCookies = Reflect.get(response, ASTRO_COOKIES_SYMBOL);\n\tif (astroCookies !== undefined) {\n\t\tReflect.set(wrapped, ASTRO_COOKIES_SYMBOL, astroCookies);\n\t}\n\t// The identity transform preserves byte counts today, but a stale\n\t// Content-Length on a re-constructed streaming Response risks\n\t// truncation if anything upstream changes; the header is recomputed\n\t// (or chunked encoding used) by the server layer anyway.\n\twrapped.headers.delete(\"Content-Length\");\n\treturn wrapped;\n}\n","/**\n * Eager, transparent prefetch of site-global \"chrome\" data.\n *\n * On a public page render, the shared layout pulls the same site-global data on\n * every request -- menus, widget areas, taxonomy term lists, site settings --\n * but each is awaited inside a separately-rendered Astro component, so they\n * execute as serial DB round trips. This fires them all CONCURRENTLY at the\n * very start of the request, before `next()`:\n *\n *   - On remote backends whose adapter can overlap queries the round trips\n *     overlap instead of serializing, collapsing ~N sequential RTTs into ~1\n *     wall-clock RTT. On a coalescing backend they additionally batch into a\n *     single round trip.\n *   - The results land in the per-request `requestCached` store under the exact\n *     keys the layout helpers use, so when the components render they hit a warm\n *     (in-flight or resolved) cache entry instead of issuing their own query.\n *\n * Nothing here changes what templates call -- it warms the real helpers, so the\n * cache keys and value shapes are guaranteed identical. The caller gates this to\n * the public-page path on a request-scoped (remote) backend that can overlap\n * queries; it is a no-op-ish waste on synchronous local SQLite and only delays\n * the page on a handle that runs one query at a time, so don't call it there.\n *\n * Fire-and-forget: never awaited by middleware, never throws (a prefetch failure\n * must not affect the request -- the helpers will simply run on demand).\n */\n\nimport { getDb } from \"../loader.js\";\nimport { getMenu } from \"../menus/index.js\";\nimport { cachedQuery, CacheNamespace } from \"../object-cache/index.js\";\nimport { requestCached, setRequestCacheEntry } from \"../request-cache.js\";\nimport { getSiteSettings } from \"../settings/index.js\";\nimport { getTaxonomyDefs, getTaxonomyTerms } from \"../taxonomies/index.js\";\nimport { getWidgetAreas } from \"../widgets/index.js\";\n\n/** Warm widget areas: one bulk load, primed under each per-area cache key. */\nasync function prefetchWidgetAreas(): Promise<void> {\n\tconst areas = await requestCached(\"widget-areas\", getWidgetAreas);\n\t// getWidgetArea(name) caches under `widget-area:${name}` and returns the same\n\t// WidgetArea shape getWidgetAreas yields, so priming here makes those calls hit.\n\tfor (const area of areas) {\n\t\tsetRequestCacheEntry(`widget-area:${area.name}`, area);\n\t}\n}\n\n/**\n * Warm every taxonomy's term list via the real helper (primes per-name keys).\n * Counts are left out: they cost an aggregate over the whole assignment pivot\n * per taxonomy, and only a consumer that renders one can say it's needed. A\n * consumer that does asks for it and reuses the term list warmed here.\n */\nasync function prefetchTaxonomyTerms(): Promise<void> {\n\tconst defs = await getTaxonomyDefs();\n\tawait Promise.allSettled(defs.map((def) => getTaxonomyTerms(def.name, { includeCounts: false })));\n}\n\n/** Warm every menu via the real helper (primes `menu:${name}:${locale}`). */\nasync function prefetchMenus(): Promise<void> {\n\t// The layout calls getMenu(name) with hardcoded names; we can't know them, so\n\t// discover every menu name and warm them all (small, bounded chrome table).\n\tconst names = await cachedQuery({\n\t\tnamespace: CacheNamespace.MENUS,\n\t\tkey: \"names\",\n\t\tload: async () => {\n\t\t\tconst db = await getDb();\n\t\t\tconst rows = await db.selectFrom(\"_emdash_menus\").select(\"name\").distinct().execute();\n\t\t\treturn [...new Set(rows.map((r) => r.name))];\n\t\t},\n\t});\n\tawait Promise.allSettled(names.map((name) => getMenu(name)));\n}\n\n/**\n * Concurrently warm the site-global layout data for the current request.\n * Safe to call only inside the request ALS frame that owns the (remote)\n * request-scoped db. Never throws.\n */\nexport async function prefetchLayoutData(): Promise<void> {\n\ttry {\n\t\tawait Promise.allSettled([\n\t\t\tgetSiteSettings(),\n\t\t\tprefetchMenus(),\n\t\t\tprefetchWidgetAreas(),\n\t\t\tprefetchTaxonomyTerms(),\n\t\t]);\n\t} catch (error) {\n\t\t// Defensive: Promise.allSettled shouldn't reject, but never let a prefetch\n\t\t// failure surface to the request.\n\t\tconsole.error(\"[emdash] layout prefetch failed (non-fatal):\", error);\n\t}\n}\n","import type { RouteMeta } from \"../plugins/routes.js\";\nimport type { HandlerResponse } from \"./types.js\";\n\nexport type PublicPluginApiRouteHandler = (\n\tpluginId: string,\n\tmethod: string,\n\tpath: string,\n\trequest: Request,\n) => Promise<HandlerResponse>;\n\ninterface PublicPluginApiRouteRuntime {\n\tgetPluginRouteMeta(pluginId: string, path: string): RouteMeta | null;\n\thandlePluginApiRoute(\n\t\tpluginId: string,\n\t\tmethod: string,\n\t\tpath: string,\n\t\trequest: Request,\n\t): Promise<HandlerResponse>;\n}\n\nexport function getPublicPluginRouteMeta(\n\truntime: Pick<PublicPluginApiRouteRuntime, \"getPluginRouteMeta\">,\n\tpluginId: string,\n\tpath: string,\n): RouteMeta | null {\n\tconst meta = runtime.getPluginRouteMeta(pluginId, path);\n\treturn meta?.public === true ? meta : null;\n}\n\nfunction pluginRouteNotFound(): HandlerResponse {\n\treturn {\n\t\tsuccess: false,\n\t\terror: {\n\t\t\tcode: \"NOT_FOUND\",\n\t\t\tmessage: \"Plugin route not found\",\n\t\t},\n\t};\n}\n\nexport function createPublicPluginApiRouteHandler(\n\truntime: PublicPluginApiRouteRuntime,\n): PublicPluginApiRouteHandler {\n\treturn async (pluginId, method, path, request) => {\n\t\tif (!getPublicPluginRouteMeta(runtime, pluginId, path)) {\n\t\t\treturn pluginRouteNotFound();\n\t\t}\n\n\t\treturn runtime.handlePluginApiRoute(pluginId, method, path, request);\n\t};\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;AAmBA,MAAa,uBAAuB,OAAO,IAAI,gBAAgB;;;;;;;;;;;AAiB/D,SAAgB,0BACf,iBACA,SACU;AACV,KAAI,gBAAiB,QAAO;AAC5B,MAAK,MAAM,UAAU,QAAQ,SAAS,CACrC,KAAI,OAAO,WAAW,iBAAiB,CAAE,QAAO;AAEjD,QAAO;;;AAIR,SAAgB,4BAA4B,QAI1C;AACD,KAAI,CAAC,OAAO,MAAO,QAAO,EAAE,WAAW,QAAQ;CAE/C,MAAM,QAAQ,OAAO;CACrB,MAAM,gBAAgB,gCAAgC;AACrD,MAAI;AACH,UAAO;WACC,OAAO;AACf,WAAQ,MAAM,4CAA4C,MAAM;;GAEhE;AACF,QAAO;EACN,QAAQ,cAAc;EACtB;EACA,WAAW;GAAE,QAAQ,OAAO;GAAQ,OAAO,cAAc;GAAQ;EACjE;;;;;;;;;;;;AAaF,SAAgB,2BAA2B,UAAoB,OAA6B;CAC3F,IAAI,SAAS;CACb,MAAM,iBAAiB;AACtB,MAAI,OAAQ;AACZ,WAAS;AACT,MAAI;AACH,UAAO;WACC,OAAO;AACf,WAAQ,MAAM,4CAA4C,MAAM;;;AAIlE,KAAI,CAAC,SAAS,MAAM;AACnB,YAAU;AACV,SAAO;;CAGR,MAAM,YAAY,IAAI,gBAAwC;EAC7D,OAAO;EACP,QAAQ;EACR,CAAC;CACF,MAAM,UAAU,IAAI,SAAS,SAAS,KAAK,YAAY,UAAU,EAAE,SAAS;CAC5E,MAAM,eAAe,QAAQ,IAAI,UAAU,qBAAqB;AAChE,KAAI,iBAAiB,OACpB,SAAQ,IAAI,SAAS,sBAAsB,aAAa;AAIzD,SAAQ,QAAQ,OAAO,iBAAiB;AACxC,QAAO;;;;;;;;;;;;;;;;;;;;AAqBR,eAAsB,aACrB,QACA,KACoB;CACpB,IAAI;AACJ,KAAI;AACH,aAAW,MAAM,KAAK;UACd,OAAO;AAGf,eAAa,OAAO,OAAO;AAC3B,cAAY,OAAO,MAAM;AACzB,QAAM;;AAEP,KAAI;AACH,SAAO,QAAQ;UACP,OAAO;AAKf,cAAY,OAAO,MAAM;AACzB,QAAM;;AAEP,QAAO,OAAO,QAAQ,2BAA2B,UAAU,OAAO,MAAM,GAAG;;;;;;;AAQ5E,SAAS,aAAa,QAA0B;AAC/C,KAAI;AACH,UAAQ;UACA,OAAO;AACf,UAAQ,MAAM,mEAAmE,MAAM;;;;;;;;AASzF,SAAS,YAAY,OAAuC;AAC3D,KAAI,CAAC,MAAO;AACZ,KAAI;AACH,SAAO;UACC,OAAO;AACf,UAAQ,MAAM,kEAAkE,MAAM;;;;;;;;;;;;;;;;;;;;;;;;;ACzJxF,MAAa,oBAAoB;;;;;;;AAuBjC,SAAgB,yBAAyB,UAA8B;AACtE,KAAI,CAAC,0BAA0B,CAAE,QAAO;AACxC,KAAI,CAAC,SAAS,KAAM,QAAO;CAK3B,MAAM,MAAM,mBAAmB;CAC/B,MAAM,UAAU,KAAK;AACrB,KAAI,CAAC,QAAS,QAAO;CACrB,MAAM,WAAW,KAAK;AAQtB,KAAI,SAAU,UAAS,gBAAgB;CAEvC,MAAM,YAAY,IAAI,gBAAwC,EAC7D,QAAQ;EACP,MAAM,WAA8B;GACnC,OAAO,UAAU;GACjB,QAAQ,UAAU;GAClB,OAAO,UAAU;GACjB,SAAS,YAAY,KAAK,GAAG,QAAQ;GACrC,SAAS,QAAQ;GACjB,WAAW,QAAQ;GACnB,eAAe,QAAQ;GACvB,cAAc,QAAQ;GACtB,WAAW,QAAQ;GACnB,aAAa,QAAQ;GACrB;AACD,UAAQ,IAAI,GAAG,kBAAkB,GAAG,KAAK,UAAU,SAAS,GAAG;AAE/D,MAAI,SAAU,eAAc,SAAS;IAEtC,CAAC;CAEF,MAAM,UAAU,IAAI,SAAS,SAAS,KAAK,YAAY,UAAU,EAAE,SAAS;CAC5E,MAAM,eAAe,QAAQ,IAAI,UAAU,qBAAqB;AAChE,KAAI,iBAAiB,OACpB,SAAQ,IAAI,SAAS,sBAAsB,aAAa;AAMzD,SAAQ,QAAQ,OAAO,iBAAiB;AACxC,QAAO;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AChER,eAAe,sBAAqC;CACnD,MAAM,QAAQ,MAAM,cAAc,gBAAgB,eAAe;AAGjE,MAAK,MAAM,QAAQ,MAClB,sBAAqB,eAAe,KAAK,QAAQ,KAAK;;;;;;;;AAUxD,eAAe,wBAAuC;CACrD,MAAM,OAAO,MAAM,iBAAiB;AACpC,OAAM,QAAQ,WAAW,KAAK,KAAK,QAAQ,iBAAiB,IAAI,MAAM,EAAE,eAAe,OAAO,CAAC,CAAC,CAAC;;;AAIlG,eAAe,gBAA+B;CAG7C,MAAM,QAAQ,MAAM,YAAY;EAC/B,WAAW,eAAe;EAC1B,KAAK;EACL,MAAM,YAAY;GAEjB,MAAM,OAAO,OADF,MAAM,OAAO,EACF,WAAW,gBAAgB,CAAC,OAAO,OAAO,CAAC,UAAU,CAAC,SAAS;AACrF,UAAO,CAAC,GAAG,IAAI,IAAI,KAAK,KAAK,MAAM,EAAE,KAAK,CAAC,CAAC;;EAE7C,CAAC;AACF,OAAM,QAAQ,WAAW,MAAM,KAAK,SAAS,QAAQ,KAAK,CAAC,CAAC;;;;;;;AAQ7D,eAAsB,qBAAoC;AACzD,KAAI;AACH,QAAM,QAAQ,WAAW;GACxB,iBAAiB;GACjB,eAAe;GACf,qBAAqB;GACrB,uBAAuB;GACvB,CAAC;UACM,OAAO;AAGf,UAAQ,MAAM,gDAAgD,MAAM;;;;;;ACpEtE,SAAgB,yBACf,SACA,UACA,MACmB;CACnB,MAAM,OAAO,QAAQ,mBAAmB,UAAU,KAAK;AACvD,QAAO,MAAM,WAAW,OAAO,OAAO;;AAGvC,SAAS,sBAAuC;AAC/C,QAAO;EACN,SAAS;EACT,OAAO;GACN,MAAM;GACN,SAAS;GACT;EACD;;AAGF,SAAgB,kCACf,SAC8B;AAC9B,QAAO,OAAO,UAAU,QAAQ,MAAM,YAAY;AACjD,MAAI,CAAC,yBAAyB,SAAS,UAAU,KAAK,CACrD,QAAO,qBAAqB;AAG7B,SAAO,QAAQ,qBAAqB,UAAU,QAAQ,MAAM,QAAQ"}
+{"version":3,"file":"public-plugin-api-routes-CMljrTby.mjs","names":[],"sources":["../src/astro/middleware/scoped-db.ts","../src/astro/middleware/stream-end-metrics.ts","../src/astro/prefetch.ts","../src/astro/public-plugin-api-routes.ts"],"sourcesContent":["/**\n * Request-scoped database lifecycle helpers.\n *\n * Extracted from middleware.ts so they can be unit-tested without pulling in\n * the virtual:emdash/* module graph. The middleware imports these to settle a\n * request-scoped db adapter's lifecycle around the response.\n */\n\nimport { createDeferredTaskTracker } from \"../../deferred-tasks.js\";\nimport type { DeferredTaskTracker } from \"../../deferred-tasks.js\";\n\n/**\n * Astro attaches AstroCookies to outgoing responses via a well-known global\n * symbol. Cloning a Response (`new Response(body, init)`) drops non-header\n * metadata, so any helper that wraps the response must explicitly forward this\n * symbol or `cookies.set()` calls will be silently dropped. `Symbol.for`\n * returns the same registry symbol everywhere, so this matches the copy in\n * middleware.ts.\n */\nexport const ASTRO_COOKIES_SYMBOL = Symbol.for(\"astro.cookies\");\n\ninterface ScopedDbLifecycle {\n\tcommit: () => void;\n\tclose?: () => void;\n}\n\n/**\n * Whether the request ended authenticated, for the db adapter's `commit()`.\n * `isAuthenticated` is captured before the route runs, so it misses\n * login/signup/invite requests that create the Astro session mid-request;\n * `session.set()` writes the `astro-session` cookie into the jar synchronously,\n * so scanning the outgoing cookies detects them. Only outgoing cookies count —\n * a stale `astro-session` cookie arriving on an anonymous render must not\n * qualify, or its replica-read bookmark would overwrite a fresher one from an\n * earlier authenticated write.\n */\nexport function requestEndedAuthenticated(\n\tisAuthenticated: boolean,\n\tcookies: { headers(): Iterable<string> },\n): boolean {\n\tif (isAuthenticated) return true;\n\tfor (const header of cookies.headers()) {\n\t\tif (header.startsWith(\"astro-session=\")) return true;\n\t}\n\treturn false;\n}\n\n/** Hold the real adapter close behind both response and deferred-task completion. */\nexport function coordinateScopedDbLifecycle(scoped: ScopedDbLifecycle): {\n\tclosed?: Promise<void>;\n\tdeferredTasks?: DeferredTaskTracker;\n\tlifecycle: ScopedDbLifecycle;\n} {\n\tif (!scoped.close) return { lifecycle: scoped };\n\n\tconst close = scoped.close;\n\tconst deferredTasks = createDeferredTaskTracker(() => {\n\t\ttry {\n\t\t\tclose();\n\t\t} catch (error) {\n\t\t\tconsole.error(\"[emdash] request-scoped db close failed:\", error);\n\t\t}\n\t});\n\treturn {\n\t\tclosed: deferredTasks.settled,\n\t\tdeferredTasks,\n\t\tlifecycle: { commit: scoped.commit, close: deferredTasks.settle },\n\t};\n}\n\n/**\n * Run a request-scoped db's `close()` once the response body has finished\n * streaming. Astro streams HTML and components issue DB queries during that\n * stream, so a connection-backed adapter (e.g. Postgres over Hyperdrive) must\n * not be torn down until the body is flushed. Bodyless responses (redirects,\n * 304s, errors) close immediately. A guard makes close idempotent and a stream\n * `cancel` (client disconnect) still triggers it so connections never leak.\n *\n * No-op for adapters without a `close` (D1): the response passes through.\n */\nexport function wrapResponseForScopedClose(response: Response, close: () => void): Response {\n\tlet closed = false;\n\tconst runClose = () => {\n\t\tif (closed) return;\n\t\tclosed = true;\n\t\ttry {\n\t\t\tclose();\n\t\t} catch (error) {\n\t\t\tconsole.error(\"[emdash] request-scoped db close failed:\", error);\n\t\t}\n\t};\n\n\tif (!response.body) {\n\t\trunClose();\n\t\treturn response;\n\t}\n\n\tconst transform = new TransformStream<Uint8Array, Uint8Array>({\n\t\tflush: runClose,\n\t\tcancel: runClose,\n\t});\n\tconst wrapped = new Response(response.body.pipeThrough(transform), response);\n\tconst astroCookies = Reflect.get(response, ASTRO_COOKIES_SYMBOL);\n\tif (astroCookies !== undefined) {\n\t\tReflect.set(wrapped, ASTRO_COOKIES_SYMBOL, astroCookies);\n\t}\n\t// Byte counts are preserved by the identity transform, but a stale\n\t// Content-Length on a reconstructed streaming Response risks truncation.\n\twrapped.headers.delete(\"Content-Length\");\n\treturn wrapped;\n}\n\n/**\n * Run the request body under a request-scoped db, then settle its lifecycle:\n * `commit()` runs before the response is returned (so per-request state like a\n * D1 bookmark cookie is persisted in the headers, even if render throws), while\n * `close()` (if any) is deferred to lifecycle settlement so a\n * connection-backed adapter isn't torn down mid-render or mid-task. On error\n * the lifecycle is settled before rethrowing so it never leaks.\n *\n * On the error path both `commit()` and `close()` are defended: a throw from\n * either is logged and swallowed so it can't replace the propagating render\n * error (which is the one the caller needs to see). On the success path\n * `commit()` is guarded too — if it throws, the connection is closed before the\n * failure is surfaced, so it never leaks. For the current adapters `commit()`\n * is a no-op (Hyperdrive) or a cookie write (D1, no `close`) and `close()` is\n * fire-and-forget, so these guards only matter for a future connection-backed\n * adapter with throwing teardown, but the helper is generic and must not leak\n * or mask.\n */\nexport async function finishScoped(\n\tscoped: ScopedDbLifecycle,\n\trun: () => Promise<Response>,\n): Promise<Response> {\n\tlet response: Response;\n\ttry {\n\t\tresponse = await run();\n\t} catch (error) {\n\t\t// A render error is already propagating; neither commit nor close may\n\t\t// mask it, and close must still run so the connection doesn't leak.\n\t\tcommitSafely(scoped.commit);\n\t\tcloseSafely(scoped.close);\n\t\tthrow error;\n\t}\n\ttry {\n\t\tscoped.commit();\n\t} catch (error) {\n\t\t// commit() failed on the success path: close the connection now (the\n\t\t// response won't be wrapped, so stream-end close would never run) and\n\t\t// surface the failure. close is swallowed so it can't mask the commit\n\t\t// error that the caller needs to see.\n\t\tcloseSafely(scoped.close);\n\t\tthrow error;\n\t}\n\treturn scoped.close ? wrapResponseForScopedClose(response, scoped.close) : response;\n}\n\n/**\n * Run commit() swallowing any error. Used where an exception is already\n * propagating (or about to be thrown) and a commit failure must neither mask it\n * nor skip the subsequent close().\n */\nfunction commitSafely(commit: () => void): void {\n\ttry {\n\t\tcommit();\n\t} catch (error) {\n\t\tconsole.error(\"[emdash] request-scoped db commit failed during error handling:\", error);\n\t}\n}\n\n/**\n * Run close() swallowing any error. Used on the error/commit-failure paths\n * where another exception is the one the caller must see; a throwing teardown\n * must not replace it.\n */\nfunction closeSafely(close: (() => void) | undefined): void {\n\tif (!close) return;\n\ttry {\n\t\tclose();\n\t} catch (error) {\n\t\tconsole.error(\"[emdash] request-scoped db close failed during error handling:\", error);\n\t}\n}\n","/**\n * Stream-end metrics\n *\n * Server-Timing db.* counters are snapshotted when middleware's next()\n * returns — but at that point only the response *headers* are final.\n * Astro streams the body afterwards, and components rendered during\n * streaming issue further DB queries that the headers can never report.\n *\n * This module wraps the response body in an identity TransformStream and\n * snapshots the request metrics in flush(), i.e. when the body actually\n * finishes streaming. The metrics object lives on the request context\n * (AsyncLocalStorage) and is mutated in-place by the Kysely log hook, so\n * a reference captured before wrapping observes every post-header query.\n * The snapshot is emitted as prefixed NDJSON on stdout (same transport as\n * [emdash-query-log] — console.log works in both Node and workerd).\n *\n * Gated on isInstrumentationEnabled() (EMDASH_QUERY_LOG=1): zero overhead\n * in normal production traffic.\n */\n\nimport { flushRecorder, isInstrumentationEnabled } from \"../../database/instrumentation.js\";\nimport { getRequestContext } from \"../../request-context.js\";\n// Reuse the single source of truth for Astro's well-known cookies symbol\n// rather than redefining `Symbol.for(\"astro.cookies\")` here — it must stay in\n// lockstep with the copy the rest of the middleware forwards.\nimport { ASTRO_COOKIES_SYMBOL } from \"./scoped-db.js\";\n\nexport const STREAM_END_PREFIX = \"[emdash-stream-end]\";\n\n/** Shape of the NDJSON snapshot emitted when the body finishes streaming. */\nexport interface StreamEndSnapshot {\n\troute?: string;\n\tmethod?: string;\n\tphase?: string;\n\t/** Total elapsed ms from middleware entry to end of body streaming. */\n\ttotalMs: number;\n\tdbCount: number;\n\tdbTotalMs: number;\n\tdbFirstOffset: number | null;\n\tdbLastOffset: number | null;\n\tcacheHits: number;\n\tcacheMisses: number;\n}\n\n/**\n * Wrap a response body so the FINAL request metrics are emitted when the\n * body finishes streaming. Returns the response unchanged when\n * instrumentation is disabled, the body is null, or no request metrics\n * are attached (e.g. outside the middleware's ALS context).\n */\nexport function wrapBodyForStreamMetrics(response: Response): Response {\n\tif (!isInstrumentationEnabled()) return response;\n\tif (!response.body) return response;\n\n\t// Capture the context's metrics object BEFORE wrapping: flush() runs\n\t// after the middleware's ALS frame may have exited, but the object\n\t// reference stays live and is mutated in-place by the Kysely log hook.\n\tconst ctx = getRequestContext();\n\tconst metrics = ctx?.metrics;\n\tif (!metrics) return response;\n\tconst recorder = ctx?.queryRecorder;\n\n\t// Claim the per-query flush: the recorder is mutated in-place by the\n\t// Kysely log hook for the whole request, including queries issued by\n\t// components while the body streams. Flushing here (rather than when\n\t// middleware returns) is what captures those streaming queries. The\n\t// flag tells the middleware's fallback flush to leave this recorder\n\t// to us.\n\tif (recorder) recorder.deferredFlush = true;\n\n\tconst transform = new TransformStream<Uint8Array, Uint8Array>({\n\t\tflush() {\n\t\t\tconst snapshot: StreamEndSnapshot = {\n\t\t\t\troute: recorder?.route,\n\t\t\t\tmethod: recorder?.method,\n\t\t\t\tphase: recorder?.phase,\n\t\t\t\ttotalMs: performance.now() - metrics.start,\n\t\t\t\tdbCount: metrics.dbCount,\n\t\t\t\tdbTotalMs: metrics.dbTotalMs,\n\t\t\t\tdbFirstOffset: metrics.dbFirstOffset,\n\t\t\t\tdbLastOffset: metrics.dbLastOffset,\n\t\t\t\tcacheHits: metrics.cacheHits,\n\t\t\t\tcacheMisses: metrics.cacheMisses,\n\t\t\t};\n\t\t\tconsole.log(`${STREAM_END_PREFIX} ${JSON.stringify(snapshot)}`);\n\t\t\t// Emit the full per-query log now that streaming is complete.\n\t\t\tif (recorder) flushRecorder(recorder);\n\t\t},\n\t});\n\n\tconst wrapped = new Response(response.body.pipeThrough(transform), response);\n\tconst astroCookies = Reflect.get(response, ASTRO_COOKIES_SYMBOL);\n\tif (astroCookies !== undefined) {\n\t\tReflect.set(wrapped, ASTRO_COOKIES_SYMBOL, astroCookies);\n\t}\n\t// The identity transform preserves byte counts today, but a stale\n\t// Content-Length on a re-constructed streaming Response risks\n\t// truncation if anything upstream changes; the header is recomputed\n\t// (or chunked encoding used) by the server layer anyway.\n\twrapped.headers.delete(\"Content-Length\");\n\treturn wrapped;\n}\n","/**\n * Eager, transparent prefetch of site-global \"chrome\" data.\n *\n * On a public page render, the shared layout pulls the same site-global data on\n * every request -- menus, widget areas, taxonomy term lists, site settings --\n * but each is awaited inside a separately-rendered Astro component, so they\n * execute as serial DB round trips. This fires them all CONCURRENTLY at the\n * very start of the request, before `next()`:\n *\n *   - On remote backends whose adapter can overlap queries the round trips\n *     overlap instead of serializing, collapsing ~N sequential RTTs into ~1\n *     wall-clock RTT. On a coalescing backend they additionally batch into a\n *     single round trip.\n *   - The results land in the per-request `requestCached` store under the exact\n *     keys the layout helpers use, so when the components render they hit a warm\n *     (in-flight or resolved) cache entry instead of issuing their own query.\n *\n * Nothing here changes what templates call -- it warms the real helpers, so the\n * cache keys and value shapes are guaranteed identical. The caller gates this to\n * the public-page path on a request-scoped (remote) backend that can overlap\n * queries; it is a no-op-ish waste on synchronous local SQLite and only delays\n * the page on a handle that runs one query at a time, so don't call it there.\n *\n * Fire-and-forget: never awaited by middleware, never throws (a prefetch failure\n * must not affect the request -- the helpers will simply run on demand).\n */\n\nimport { getDb } from \"../loader.js\";\nimport { getMenu } from \"../menus/index.js\";\nimport { cachedQuery, CacheNamespace } from \"../object-cache/index.js\";\nimport { requestCached, setRequestCacheEntry } from \"../request-cache.js\";\nimport { getSiteSettings } from \"../settings/index.js\";\nimport { getTaxonomyDefs, getTaxonomyTerms } from \"../taxonomies/index.js\";\nimport { getWidgetAreas } from \"../widgets/index.js\";\n\n/** Warm widget areas: one bulk load, primed under each per-area cache key. */\nasync function prefetchWidgetAreas(): Promise<void> {\n\tconst areas = await requestCached(\"widget-areas\", getWidgetAreas);\n\t// getWidgetArea(name) caches under `widget-area:${name}` and returns the same\n\t// WidgetArea shape getWidgetAreas yields, so priming here makes those calls hit.\n\tfor (const area of areas) {\n\t\tsetRequestCacheEntry(`widget-area:${area.name}`, area);\n\t}\n}\n\n/**\n * Warm every taxonomy's term list via the real helper (primes per-name keys).\n * Counts are left out: they cost an aggregate over the whole assignment pivot\n * per taxonomy, and only a consumer that renders one can say it's needed. A\n * consumer that does asks for it and reuses the term list warmed here.\n */\nasync function prefetchTaxonomyTerms(): Promise<void> {\n\tconst defs = await getTaxonomyDefs();\n\tawait Promise.allSettled(defs.map((def) => getTaxonomyTerms(def.name, { includeCounts: false })));\n}\n\n/** Warm every menu via the real helper (primes `menu:${name}:${locale}`). */\nasync function prefetchMenus(): Promise<void> {\n\t// The layout calls getMenu(name) with hardcoded names; we can't know them, so\n\t// discover every menu name and warm them all (small, bounded chrome table).\n\tconst names = await cachedQuery({\n\t\tnamespace: CacheNamespace.MENUS,\n\t\tkey: \"names\",\n\t\tload: async () => {\n\t\t\tconst db = await getDb();\n\t\t\tconst rows = await db.selectFrom(\"_emdash_menus\").select(\"name\").distinct().execute();\n\t\t\treturn [...new Set(rows.map((r) => r.name))];\n\t\t},\n\t});\n\tawait Promise.allSettled(names.map((name) => getMenu(name)));\n}\n\n/**\n * Concurrently warm the site-global layout data for the current request.\n * Safe to call only inside the request ALS frame that owns the (remote)\n * request-scoped db. Never throws.\n */\nexport async function prefetchLayoutData(): Promise<void> {\n\ttry {\n\t\tawait Promise.allSettled([\n\t\t\tgetSiteSettings(),\n\t\t\tprefetchMenus(),\n\t\t\tprefetchWidgetAreas(),\n\t\t\tprefetchTaxonomyTerms(),\n\t\t]);\n\t} catch (error) {\n\t\t// Defensive: Promise.allSettled shouldn't reject, but never let a prefetch\n\t\t// failure surface to the request.\n\t\tconsole.error(\"[emdash] layout prefetch failed (non-fatal):\", error);\n\t}\n}\n","import type { RouteMeta } from \"../plugins/routes.js\";\nimport type { HandlerResponse } from \"./types.js\";\n\nexport type PublicPluginApiRouteHandler = (\n\tpluginId: string,\n\tmethod: string,\n\tpath: string,\n\trequest: Request,\n) => Promise<HandlerResponse>;\n\ninterface PublicPluginApiRouteRuntime {\n\tgetPluginRouteMeta(pluginId: string, path: string): RouteMeta | null;\n\thandlePluginApiRoute(\n\t\tpluginId: string,\n\t\tmethod: string,\n\t\tpath: string,\n\t\trequest: Request,\n\t): Promise<HandlerResponse>;\n}\n\nexport function getPublicPluginRouteMeta(\n\truntime: Pick<PublicPluginApiRouteRuntime, \"getPluginRouteMeta\">,\n\tpluginId: string,\n\tpath: string,\n): RouteMeta | null {\n\tconst meta = runtime.getPluginRouteMeta(pluginId, path);\n\treturn meta?.public === true ? meta : null;\n}\n\nfunction pluginRouteNotFound(): HandlerResponse {\n\treturn {\n\t\tsuccess: false,\n\t\terror: {\n\t\t\tcode: \"NOT_FOUND\",\n\t\t\tmessage: \"Plugin route not found\",\n\t\t},\n\t};\n}\n\nexport function createPublicPluginApiRouteHandler(\n\truntime: PublicPluginApiRouteRuntime,\n): PublicPluginApiRouteHandler {\n\treturn async (pluginId, method, path, request) => {\n\t\tif (!getPublicPluginRouteMeta(runtime, pluginId, path)) {\n\t\t\treturn pluginRouteNotFound();\n\t\t}\n\n\t\treturn runtime.handlePluginApiRoute(pluginId, method, path, request);\n\t};\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;AAmBA,MAAa,uBAAuB,OAAO,IAAI,gBAAgB;;;;;;;;;;;AAiB/D,SAAgB,0BACf,iBACA,SACU;AACV,KAAI,gBAAiB,QAAO;AAC5B,MAAK,MAAM,UAAU,QAAQ,SAAS,CACrC,KAAI,OAAO,WAAW,iBAAiB,CAAE,QAAO;AAEjD,QAAO;;;AAIR,SAAgB,4BAA4B,QAI1C;AACD,KAAI,CAAC,OAAO,MAAO,QAAO,EAAE,WAAW,QAAQ;CAE/C,MAAM,QAAQ,OAAO;CACrB,MAAM,gBAAgB,gCAAgC;AACrD,MAAI;AACH,UAAO;WACC,OAAO;AACf,WAAQ,MAAM,4CAA4C,MAAM;;GAEhE;AACF,QAAO;EACN,QAAQ,cAAc;EACtB;EACA,WAAW;GAAE,QAAQ,OAAO;GAAQ,OAAO,cAAc;GAAQ;EACjE;;;;;;;;;;;;AAaF,SAAgB,2BAA2B,UAAoB,OAA6B;CAC3F,IAAI,SAAS;CACb,MAAM,iBAAiB;AACtB,MAAI,OAAQ;AACZ,WAAS;AACT,MAAI;AACH,UAAO;WACC,OAAO;AACf,WAAQ,MAAM,4CAA4C,MAAM;;;AAIlE,KAAI,CAAC,SAAS,MAAM;AACnB,YAAU;AACV,SAAO;;CAGR,MAAM,YAAY,IAAI,gBAAwC;EAC7D,OAAO;EACP,QAAQ;EACR,CAAC;CACF,MAAM,UAAU,IAAI,SAAS,SAAS,KAAK,YAAY,UAAU,EAAE,SAAS;CAC5E,MAAM,eAAe,QAAQ,IAAI,UAAU,qBAAqB;AAChE,KAAI,iBAAiB,OACpB,SAAQ,IAAI,SAAS,sBAAsB,aAAa;AAIzD,SAAQ,QAAQ,OAAO,iBAAiB;AACxC,QAAO;;;;;;;;;;;;;;;;;;;;AAqBR,eAAsB,aACrB,QACA,KACoB;CACpB,IAAI;AACJ,KAAI;AACH,aAAW,MAAM,KAAK;UACd,OAAO;AAGf,eAAa,OAAO,OAAO;AAC3B,cAAY,OAAO,MAAM;AACzB,QAAM;;AAEP,KAAI;AACH,SAAO,QAAQ;UACP,OAAO;AAKf,cAAY,OAAO,MAAM;AACzB,QAAM;;AAEP,QAAO,OAAO,QAAQ,2BAA2B,UAAU,OAAO,MAAM,GAAG;;;;;;;AAQ5E,SAAS,aAAa,QAA0B;AAC/C,KAAI;AACH,UAAQ;UACA,OAAO;AACf,UAAQ,MAAM,mEAAmE,MAAM;;;;;;;;AASzF,SAAS,YAAY,OAAuC;AAC3D,KAAI,CAAC,MAAO;AACZ,KAAI;AACH,SAAO;UACC,OAAO;AACf,UAAQ,MAAM,kEAAkE,MAAM;;;;;;;;;;;;;;;;;;;;;;;;;ACzJxF,MAAa,oBAAoB;;;;;;;AAuBjC,SAAgB,yBAAyB,UAA8B;AACtE,KAAI,CAAC,0BAA0B,CAAE,QAAO;AACxC,KAAI,CAAC,SAAS,KAAM,QAAO;CAK3B,MAAM,MAAM,mBAAmB;CAC/B,MAAM,UAAU,KAAK;AACrB,KAAI,CAAC,QAAS,QAAO;CACrB,MAAM,WAAW,KAAK;AAQtB,KAAI,SAAU,UAAS,gBAAgB;CAEvC,MAAM,YAAY,IAAI,gBAAwC,EAC7D,QAAQ;EACP,MAAM,WAA8B;GACnC,OAAO,UAAU;GACjB,QAAQ,UAAU;GAClB,OAAO,UAAU;GACjB,SAAS,YAAY,KAAK,GAAG,QAAQ;GACrC,SAAS,QAAQ;GACjB,WAAW,QAAQ;GACnB,eAAe,QAAQ;GACvB,cAAc,QAAQ;GACtB,WAAW,QAAQ;GACnB,aAAa,QAAQ;GACrB;AACD,UAAQ,IAAI,GAAG,kBAAkB,GAAG,KAAK,UAAU,SAAS,GAAG;AAE/D,MAAI,SAAU,eAAc,SAAS;IAEtC,CAAC;CAEF,MAAM,UAAU,IAAI,SAAS,SAAS,KAAK,YAAY,UAAU,EAAE,SAAS;CAC5E,MAAM,eAAe,QAAQ,IAAI,UAAU,qBAAqB;AAChE,KAAI,iBAAiB,OACpB,SAAQ,IAAI,SAAS,sBAAsB,aAAa;AAMzD,SAAQ,QAAQ,OAAO,iBAAiB;AACxC,QAAO;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AChER,eAAe,sBAAqC;CACnD,MAAM,QAAQ,MAAM,cAAc,gBAAgB,eAAe;AAGjE,MAAK,MAAM,QAAQ,MAClB,sBAAqB,eAAe,KAAK,QAAQ,KAAK;;;;;;;;AAUxD,eAAe,wBAAuC;CACrD,MAAM,OAAO,MAAM,iBAAiB;AACpC,OAAM,QAAQ,WAAW,KAAK,KAAK,QAAQ,iBAAiB,IAAI,MAAM,EAAE,eAAe,OAAO,CAAC,CAAC,CAAC;;;AAIlG,eAAe,gBAA+B;CAG7C,MAAM,QAAQ,MAAM,YAAY;EAC/B,WAAW,eAAe;EAC1B,KAAK;EACL,MAAM,YAAY;GAEjB,MAAM,OAAO,OADF,MAAM,OAAO,EACF,WAAW,gBAAgB,CAAC,OAAO,OAAO,CAAC,UAAU,CAAC,SAAS;AACrF,UAAO,CAAC,GAAG,IAAI,IAAI,KAAK,KAAK,MAAM,EAAE,KAAK,CAAC,CAAC;;EAE7C,CAAC;AACF,OAAM,QAAQ,WAAW,MAAM,KAAK,SAAS,QAAQ,KAAK,CAAC,CAAC;;;;;;;AAQ7D,eAAsB,qBAAoC;AACzD,KAAI;AACH,QAAM,QAAQ,WAAW;GACxB,iBAAiB;GACjB,eAAe;GACf,qBAAqB;GACrB,uBAAuB;GACvB,CAAC;UACM,OAAO;AAGf,UAAQ,MAAM,gDAAgD,MAAM;;;;;;ACpEtE,SAAgB,yBACf,SACA,UACA,MACmB;CACnB,MAAM,OAAO,QAAQ,mBAAmB,UAAU,KAAK;AACvD,QAAO,MAAM,WAAW,OAAO,OAAO;;AAGvC,SAAS,sBAAuC;AAC/C,QAAO;EACN,SAAS;EACT,OAAO;GACN,MAAM;GACN,SAAS;GACT;EACD;;AAGF,SAAgB,kCACf,SAC8B;AAC9B,QAAO,OAAO,UAAU,QAAQ,MAAM,YAAY;AACjD,MAAI,CAAC,yBAAyB,SAAS,UAAU,KAAK,CACrD,QAAO,qBAAqB;AAG7B,SAAO,QAAQ,qBAAqB,UAAU,QAAQ,MAAM,QAAQ"}

package/dist/{public-submission-Di3TsgzX.mjs → public-submission-ayqoyee4.mjs}

@@ -1,16 +1,16 @@
 import { t as validateIdentifier } from "./validate-DANX1-Qi.mjs";
-import { t as after } from "./after-PcEvMY_6.mjs";
-import { a as resolveSecretsCached } from "./secrets-Cc_O3Kp-.mjs";
-import { t as CommentRepository } from "./comment-UvIWDKcW.mjs";
-import { n as apiSuccess, r as handleError, t as apiError } from "./error-CVWeIOku.mjs";
-import { n as parseBody, t as isParseError } from "./parse-DgQ2NABT.mjs";
+import { t as after } from "./after-32yNRvd2.mjs";
+import { a as resolveSecretsCached } from "./secrets-Dswzrz3k.mjs";
+import { t as CommentRepository } from "./comment-DB74Zpa4.mjs";
+import { n as apiSuccess, r as handleError, t as apiError } from "./error-BCMgPxdn.mjs";
+import { n as parseBody, t as isParseError } from "./parse-B_b6gZxG.mjs";
 import { c as createCommentBody } from "./comments-yiRFx3w5.mjs";
 import { t as extractRequestMeta } from "./request-meta-bwZ_NsvU.mjs";
 import { n as getSiteBaseUrl } from "./site-url-MB685I5X.mjs";
 import { t as escapeHtml } from "./escape-lsNq38PP.mjs";
-import { s as hashIp } from "./comments-pej-_BUO.mjs";
-import { t as checkRateLimit } from "./rate-limit-Xp4d0NBY.mjs";
-import { n as createComment } from "./service-Bo_usgSk.mjs";
+import { s as hashIp } from "./comments-Cor_zKml.mjs";
+import { t as checkRateLimit } from "./rate-limit-C04Llsoc.mjs";
+import { n as createComment } from "./service-DpiUQVpp.mjs";
 import { sql } from "kysely";
 
 //#region src/comments/notifications.ts
@@ -143,7 +143,7 @@ async function submitPublicComment(runtime, collection, contentId, request, user
 			message: "Comment submitted for review"
 		});
 		const meta = extractRequestMeta(request, runtime.config);
-		const { getTurnstileSecretKey, verifyTurnstileToken } = await import("./turnstile-CJwvsOqw.mjs");
+		const { getTurnstileSecretKey, verifyTurnstileToken } = await import("./turnstile-Cs2wfkJG.mjs");
 		const turnstileSecretKey = getTurnstileSecretKey();
 		if (turnstileSecretKey && !await verifyTurnstileToken(body.turnstileToken, turnstileSecretKey, meta.ip)) return apiError("TURNSTILE_FAILED", "CAPTCHA verification failed", 403);
 		const { ipSalt } = await resolveSecretsCached(runtime.db);
@@ -248,4 +248,4 @@ async function submitPublicComment(runtime, collection, contentId, request, user
 
 //#endregion
 export { lookupContentAuthor as n, sendCommentNotification as r, submitPublicComment as t };
-//# sourceMappingURL=public-submission-Di3TsgzX.mjs.map
+//# sourceMappingURL=public-submission-ayqoyee4.mjs.map

package/dist/{public-submission-Di3TsgzX.mjs.map → public-submission-ayqoyee4.mjs.map}

@@ -1 +1 @@
-{"version":3,"file":"public-submission-Di3TsgzX.mjs","names":[],"sources":["../src/comments/notifications.ts","../src/comments/public-submission.ts"],"sourcesContent":["/**\n * Comment Notification Emails\n *\n * Sends email notifications to content authors when comments are\n * approved on their content. Used by:\n *   - Public comment POST route (comment:afterCreate, if auto-approved)\n *   - Admin moderation route (comment:afterModerate, when approving)\n */\n\nimport type { Kysely } from \"kysely\";\n\nimport { escapeHtml } from \"../api/escape.js\";\nimport type { Database } from \"../database/types.js\";\nimport { validateIdentifier } from \"../database/validate.js\";\nimport type { EmailPipeline } from \"../plugins/email.js\";\nimport type { EmailMessage } from \"../plugins/types.js\";\n\nconst NOTIFICATION_SOURCE = \"emdash-comments\";\nconst MAX_EXCERPT_LENGTH = 500;\nconst CRLF_RE = /[\\r\\n]/g;\n\nexport interface CommentNotificationData {\n\tcommentAuthorName: string;\n\tcommentBody: string;\n\tcontentTitle: string;\n\tcollection: string;\n\tadminBaseUrl: string;\n}\n\n/**\n * Build an email notification for a new comment.\n */\nexport function buildCommentNotificationEmail(\n\tto: string,\n\tdata: CommentNotificationData,\n): EmailMessage {\n\tconst title = data.contentTitle || `${data.collection} item`;\n\tconst subject = `New comment on \"${title}\"`.replace(CRLF_RE, \" \");\n\n\tconst excerpt =\n\t\tdata.commentBody.length > MAX_EXCERPT_LENGTH\n\t\t\t? data.commentBody.slice(0, MAX_EXCERPT_LENGTH) + \"...\"\n\t\t\t: data.commentBody;\n\n\tconst adminUrl = `${data.adminBaseUrl}/admin/comments`;\n\n\tconst text = [\n\t\t`${data.commentAuthorName} commented on \"${title}\":`,\n\t\t\"\",\n\t\texcerpt,\n\t\t\"\",\n\t\t`View in admin: ${adminUrl}`,\n\t].join(\"\\n\");\n\n\tconst html = [\n\t\t`<p><strong>${escapeHtml(data.commentAuthorName)}</strong> commented on &ldquo;${escapeHtml(title)}&rdquo;:</p>`,\n\t\t`<blockquote style=\"border-left:3px solid #ccc;padding-left:12px;margin:12px 0;color:#555\">${escapeHtml(excerpt)}</blockquote>`,\n\t\t`<p><a href=\"${escapeHtml(adminUrl)}\">View in admin</a></p>`,\n\t].join(\"\\n\");\n\n\treturn { to, subject, text, html };\n}\n\n/**\n * Send a comment notification to the content author if all conditions are met:\n * 1. Comment status is \"approved\"\n * 2. Content author exists and has an email\n * 3. Email provider is configured\n * 4. Commenter is not the content author (no self-notifications)\n *\n * Returns true if the email was sent, false if skipped.\n */\nexport async function sendCommentNotification(params: {\n\temail: EmailPipeline;\n\tcomment: {\n\t\tauthorName: string;\n\t\tauthorEmail: string;\n\t\tbody: string;\n\t\tstatus: string;\n\t\tcollection: string;\n\t};\n\tcontentTitle?: string;\n\tcontentAuthor?: { email: string; name: string | null };\n\tadminBaseUrl: string;\n}): Promise<boolean> {\n\tconst { email, comment, contentAuthor, adminBaseUrl } = params;\n\n\tif (comment.status !== \"approved\") return false;\n\tif (!contentAuthor?.email) return false;\n\tif (!email.isAvailable()) return false;\n\tif (comment.authorEmail.toLowerCase() === contentAuthor.email.toLowerCase()) return false;\n\n\tconst message = buildCommentNotificationEmail(contentAuthor.email, {\n\t\tcommentAuthorName: comment.authorName,\n\t\tcommentBody: comment.body,\n\t\tcontentTitle: params.contentTitle || \"\",\n\t\tcollection: comment.collection,\n\t\tadminBaseUrl,\n\t});\n\n\tawait email.send(message, NOTIFICATION_SOURCE);\n\treturn true;\n}\n\n/**\n * Look up a content item's author from the database.\n *\n * Used by the admin moderation route where content info isn't\n * readily available (only the comment record is at hand).\n */\nexport async function lookupContentAuthor(\n\tdb: Kysely<Database>,\n\tcollection: string,\n\tcontentId: string,\n): Promise<{\n\tslug: string;\n\tauthor?: { id: string; email: string; name: string | null };\n} | null> {\n\tvalidateIdentifier(collection, \"collection\");\n\n\tconst contentRow = await db\n\t\t.selectFrom(`ec_${collection}` as never)\n\t\t.select([\"slug\" as never, \"author_id\" as never])\n\t\t.where(\"id\" as never, \"=\", contentId as never)\n\t\t.executeTakeFirst();\n\n\tif (!contentRow) return null;\n\n\tconst typed = contentRow as { slug: string; author_id: string | null };\n\n\tlet author: { id: string; email: string; name: string | null } | undefined;\n\tif (typed.author_id) {\n\t\tconst userRow = await db\n\t\t\t.selectFrom(\"users\")\n\t\t\t.select([\"id\", \"name\", \"email\", \"email_verified\"])\n\t\t\t.where(\"id\", \"=\", typed.author_id)\n\t\t\t.executeTakeFirst();\n\t\tif (userRow && userRow.email_verified) {\n\t\t\tauthor = { id: userRow.id, email: userRow.email, name: userRow.name };\n\t\t}\n\t}\n\n\treturn { slug: typed.slug, author };\n}\n","import { sql, type Kysely } from \"kysely\";\n\nimport { after } from \"../after.js\";\nimport { apiError, apiSuccess, handleError } from \"../api/error.js\";\nimport { hashIp } from \"../api/handlers/comments.js\";\nimport { isParseError, parseBody } from \"../api/parse.js\";\nimport { createCommentBody } from \"../api/schemas/comments.js\";\nimport { getSiteBaseUrl } from \"../api/site-url.js\";\nimport type { EmDashConfig } from \"../astro/integration/runtime.js\";\nimport { checkRateLimit } from \"../auth/rate-limit.js\";\nimport { resolveSecretsCached } from \"../config/secrets.js\";\nimport { CommentRepository } from \"../database/repositories/comment.js\";\nimport type { Database } from \"../database/types.js\";\nimport { validateIdentifier } from \"../database/validate.js\";\nimport type { EmailPipeline } from \"../plugins/email.js\";\nimport type { HookPipeline } from \"../plugins/hooks.js\";\nimport { extractRequestMeta } from \"../plugins/request-meta.js\";\nimport type { CollectionCommentSettings, ModerationDecision, UserInfo } from \"../plugins/types.js\";\nimport { sendCommentNotification } from \"./notifications.js\";\nimport { createComment, type CommentHookRunner } from \"./service.js\";\n\nexport interface PublicCommentSubmissionRuntime {\n\tdb: Kysely<Database>;\n\tconfig: EmDashConfig;\n\temail: EmailPipeline | null;\n\thooks: HookPipeline;\n}\n\ninterface CommentableContentRow {\n\tid: string;\n\tslug: string;\n\tauthor_id: string | null;\n\tpublished_at: string | null;\n}\n\nfunction parseCommentModeration(value: string): CollectionCommentSettings[\"commentsModeration\"] {\n\tif (value === \"all\" || value === \"first_time\" || value === \"none\") return value;\n\treturn \"all\";\n}\n\nfunction isModerationDecision(value: unknown): value is ModerationDecision {\n\tif (typeof value !== \"object\" || value === null || !(\"status\" in value)) return false;\n\tif (value.status !== \"pending\" && value.status !== \"approved\" && value.status !== \"spam\") {\n\t\treturn false;\n\t}\n\treturn !(\"reason\" in value) || value.reason === undefined || typeof value.reason === \"string\";\n}\n\nexport async function submitPublicComment(\n\truntime: PublicCommentSubmissionRuntime,\n\tcollection: string,\n\tcontentId: string,\n\trequest: Request,\n\tuser?: UserInfo,\n): Promise<Response> {\n\ttry {\n\t\tconst body = await parseBody(request, createCommentBody);\n\t\tif (isParseError(body)) return body;\n\n\t\tconst collectionRow = await runtime.db\n\t\t\t.selectFrom(\"_emdash_collections\")\n\t\t\t.select([\n\t\t\t\t\"comments_enabled\",\n\t\t\t\t\"comments_moderation\",\n\t\t\t\t\"comments_closed_after_days\",\n\t\t\t\t\"comments_auto_approve_users\",\n\t\t\t])\n\t\t\t.where(\"slug\", \"=\", collection)\n\t\t\t.executeTakeFirst();\n\n\t\tif (!collectionRow) {\n\t\t\treturn apiError(\"NOT_FOUND\", `Collection '${collection}' not found`, 404);\n\t\t}\n\t\tif (!collectionRow.comments_enabled) {\n\t\t\treturn apiError(\"COMMENTS_DISABLED\", \"Comments are not enabled for this collection\", 403);\n\t\t}\n\n\t\tvalidateIdentifier(collection, \"collection\");\n\t\tconst contentResult = await sql<CommentableContentRow>`\n\t\t\tSELECT id, slug, author_id, published_at\n\t\t\tFROM ${sql.ref(`ec_${collection}`)}\n\t\t\tWHERE id = ${contentId}\n\t\t\tAND status = 'published'\n\t\t\tAND deleted_at IS NULL\n\t\t`.execute(runtime.db);\n\t\tconst contentRow = contentResult.rows[0];\n\n\t\tif (!contentRow) return apiError(\"NOT_FOUND\", \"Content not found\", 404);\n\n\t\tif (collectionRow.comments_closed_after_days > 0) {\n\t\t\tconst publishedAt = contentRow.published_at;\n\t\t\tif (publishedAt) {\n\t\t\t\tconst closedDate = new Date(publishedAt);\n\t\t\t\tclosedDate.setDate(closedDate.getDate() + collectionRow.comments_closed_after_days);\n\t\t\t\tif (new Date() > closedDate) {\n\t\t\t\t\treturn apiError(\"COMMENTS_CLOSED\", \"Comments are closed for this content\", 403);\n\t\t\t\t}\n\t\t\t}\n\t\t}\n\n\t\tif (body.website_url) {\n\t\t\treturn apiSuccess({ status: \"pending\", message: \"Comment submitted for review\" });\n\t\t}\n\n\t\tconst meta = extractRequestMeta(request, runtime.config);\n\n\t\tconst { getTurnstileSecretKey, verifyTurnstileToken } = await import(\"./turnstile.js\");\n\t\tconst turnstileSecretKey = getTurnstileSecretKey();\n\t\tif (\n\t\t\tturnstileSecretKey &&\n\t\t\t!(await verifyTurnstileToken(body.turnstileToken, turnstileSecretKey, meta.ip))\n\t\t) {\n\t\t\treturn apiError(\"TURNSTILE_FAILED\", \"CAPTCHA verification failed\", 403);\n\t\t}\n\n\t\t// Counted after the CAPTCHA so unverified requests can't use up the\n\t\t// shared bucket for visitors without a trusted IP.\n\t\tconst { ipSalt } = await resolveSecretsCached(runtime.db);\n\t\tconst ipHash = meta.ip ? await hashIp(meta.ip, ipSalt) : \"unknown\";\n\t\tconst rateLimit = await checkRateLimit(\n\t\t\truntime.db,\n\t\t\tipHash,\n\t\t\t\"comments/submit\",\n\t\t\tipHash === \"unknown\" ? 20 : 5,\n\t\t\t600,\n\t\t);\n\t\tif (!rateLimit.allowed) {\n\t\t\tconst response = apiError(\"RATE_LIMITED\", \"Too many comments. Please try again later.\", 429);\n\t\t\tresponse.headers.set(\"Retry-After\", \"600\");\n\t\t\treturn response;\n\t\t}\n\n\t\tconst settings: CollectionCommentSettings = {\n\t\t\tcommentsEnabled: true,\n\t\t\tcommentsModeration: parseCommentModeration(collectionRow.comments_moderation),\n\t\t\tcommentsClosedAfterDays: collectionRow.comments_closed_after_days,\n\t\t\tcommentsAutoApproveUsers: collectionRow.comments_auto_approve_users === 1,\n\t\t};\n\n\t\tconst authorName = user?.name || body.authorName;\n\t\tconst authorEmail = user?.email ?? body.authorEmail;\n\t\tlet resolvedParentId = body.parentId ?? null;\n\t\tif (body.parentId) {\n\t\t\tconst parent = await new CommentRepository(runtime.db).findById(body.parentId);\n\t\t\tif (!parent) return apiError(\"VALIDATION_ERROR\", \"Parent comment not found\", 400);\n\t\t\tif (parent.collection !== collection || parent.contentId !== contentId) {\n\t\t\t\treturn apiError(\"VALIDATION_ERROR\", \"Parent comment belongs to different content\", 400);\n\t\t\t}\n\t\t\tresolvedParentId = parent.parentId ?? parent.id;\n\t\t}\n\n\t\tlet contentAuthor: { id: string; name: string | null; email: string } | undefined;\n\t\tif (contentRow.author_id) {\n\t\t\tconst authorRow = await runtime.db\n\t\t\t\t.selectFrom(\"users\")\n\t\t\t\t.select([\"id\", \"name\", \"email\", \"email_verified\"])\n\t\t\t\t.where(\"id\", \"=\", contentRow.author_id)\n\t\t\t\t.executeTakeFirst();\n\t\t\tif (authorRow?.email_verified) {\n\t\t\t\tcontentAuthor = { id: authorRow.id, name: authorRow.name, email: authorRow.email };\n\t\t\t}\n\t\t}\n\n\t\tconst hookRunner: CommentHookRunner = {\n\t\t\trunBeforeCreate: (event) => runtime.hooks.runCommentBeforeCreate(event),\n\t\t\trunModerate: async (event) => {\n\t\t\t\tconst result = await runtime.hooks.invokeExclusiveHook(\"comment:moderate\", event);\n\t\t\t\tif (!result) return { status: \"pending\", reason: \"No moderator configured\" };\n\t\t\t\tif (result.error) {\n\t\t\t\t\tconsole.error(`[comments] Moderation error (${result.pluginId}):`, result.error.message);\n\t\t\t\t\treturn { status: \"pending\", reason: \"Moderation error\" };\n\t\t\t\t}\n\t\t\t\treturn isModerationDecision(result.result)\n\t\t\t\t\t? result.result\n\t\t\t\t\t: { status: \"pending\", reason: \"Invalid moderation result\" };\n\t\t\t},\n\t\t\tfireAfterCreate: (event) => {\n\t\t\t\t// Deferred through after() so the host's waitUntil keeps the hooks\n\t\t\t\t// alive: on Workers, work left running after the response is sent\n\t\t\t\t// can be cancelled (sandboxed plugins never got past their first\n\t\t\t\t// bridge call).\n\t\t\t\tafter(() =>\n\t\t\t\t\truntime.hooks\n\t\t\t\t\t\t.runCommentAfterCreate(event)\n\t\t\t\t\t\t.catch((error) =>\n\t\t\t\t\t\t\tconsole.error(\n\t\t\t\t\t\t\t\t\"[comments] afterCreate error:\",\n\t\t\t\t\t\t\t\terror instanceof Error ? error.message : error,\n\t\t\t\t\t\t\t),\n\t\t\t\t\t\t),\n\t\t\t\t);\n\t\t\t},\n\t\t\tfireAfterModerate: (event) => {\n\t\t\t\treturn runtime.hooks\n\t\t\t\t\t.runCommentAfterModerate(event)\n\t\t\t\t\t.catch((error) =>\n\t\t\t\t\t\tconsole.error(\n\t\t\t\t\t\t\t\"[comments] afterModerate error:\",\n\t\t\t\t\t\t\terror instanceof Error ? error.message : error,\n\t\t\t\t\t\t),\n\t\t\t\t\t);\n\t\t\t},\n\t\t};\n\n\t\tconst result = await createComment(\n\t\t\truntime.db,\n\t\t\t{\n\t\t\t\tcollection,\n\t\t\t\tcontentId,\n\t\t\t\tparentId: resolvedParentId,\n\t\t\t\tauthorName,\n\t\t\t\tauthorEmail,\n\t\t\t\tauthorUserId: user?.id ?? null,\n\t\t\t\tbody: body.body,\n\t\t\t\tipHash,\n\t\t\t\tuserAgent: meta.userAgent,\n\t\t\t},\n\t\t\tsettings,\n\t\t\thookRunner,\n\t\t\t{\n\t\t\t\tid: contentRow.id,\n\t\t\t\tcollection,\n\t\t\t\tslug: contentRow.slug,\n\t\t\t\tauthor: contentAuthor,\n\t\t\t},\n\t\t);\n\n\t\tif (!result) return apiError(\"COMMENT_REJECTED\", \"Comment was rejected\", 403);\n\n\t\tif (result.comment.status === \"approved\" && runtime.email && contentAuthor) {\n\t\t\ttry {\n\t\t\t\tconst adminBaseUrl = await getSiteBaseUrl(runtime.db, request, runtime.config);\n\t\t\t\tawait sendCommentNotification({\n\t\t\t\t\temail: runtime.email,\n\t\t\t\t\tcomment: result.comment,\n\t\t\t\t\tcontentAuthor,\n\t\t\t\t\tadminBaseUrl,\n\t\t\t\t});\n\t\t\t} catch (error) {\n\t\t\t\tconsole.error(\n\t\t\t\t\t\"[comments] notification error:\",\n\t\t\t\t\terror instanceof Error ? error.message : error,\n\t\t\t\t);\n\t\t\t}\n\t\t}\n\n\t\treturn apiSuccess(\n\t\t\t{\n\t\t\t\tid: result.comment.id,\n\t\t\t\tstatus: result.comment.status,\n\t\t\t\tmessage:\n\t\t\t\t\tresult.comment.status === \"approved\"\n\t\t\t\t\t\t? \"Comment published\"\n\t\t\t\t\t\t: \"Comment submitted for review\",\n\t\t\t},\n\t\t\t201,\n\t\t);\n\t} catch (error) {\n\t\treturn handleError(error, \"Failed to submit comment\", \"COMMENT_CREATE_ERROR\");\n\t}\n}\n"],"mappings":";;;;;;;;;;;;;;;;AAiBA,MAAM,sBAAsB;AAC5B,MAAM,qBAAqB;AAC3B,MAAM,UAAU;;;;AAahB,SAAgB,8BACf,IACA,MACe;CACf,MAAM,QAAQ,KAAK,gBAAgB,GAAG,KAAK,WAAW;CACtD,MAAM,UAAU,mBAAmB,MAAM,GAAG,QAAQ,SAAS,IAAI;CAEjE,MAAM,UACL,KAAK,YAAY,SAAS,qBACvB,KAAK,YAAY,MAAM,GAAG,mBAAmB,GAAG,QAChD,KAAK;CAET,MAAM,WAAW,GAAG,KAAK,aAAa;AAgBtC,QAAO;EAAE;EAAI;EAAS,MAdT;GACZ,GAAG,KAAK,kBAAkB,iBAAiB,MAAM;GACjD;GACA;GACA;GACA,kBAAkB;GAClB,CAAC,KAAK,KAAK;EAQgB,MANf;GACZ,cAAc,WAAW,KAAK,kBAAkB,CAAC,gCAAgC,WAAW,MAAM,CAAC;GACnG,6FAA6F,WAAW,QAAQ,CAAC;GACjH,eAAe,WAAW,SAAS,CAAC;GACpC,CAAC,KAAK,KAAK;EAEsB;;;;;;;;;;;AAYnC,eAAsB,wBAAwB,QAYzB;CACpB,MAAM,EAAE,OAAO,SAAS,eAAe,iBAAiB;AAExD,KAAI,QAAQ,WAAW,WAAY,QAAO;AAC1C,KAAI,CAAC,eAAe,MAAO,QAAO;AAClC,KAAI,CAAC,MAAM,aAAa,CAAE,QAAO;AACjC,KAAI,QAAQ,YAAY,aAAa,KAAK,cAAc,MAAM,aAAa,CAAE,QAAO;CAEpF,MAAM,UAAU,8BAA8B,cAAc,OAAO;EAClE,mBAAmB,QAAQ;EAC3B,aAAa,QAAQ;EACrB,cAAc,OAAO,gBAAgB;EACrC,YAAY,QAAQ;EACpB;EACA,CAAC;AAEF,OAAM,MAAM,KAAK,SAAS,oBAAoB;AAC9C,QAAO;;;;;;;;AASR,eAAsB,oBACrB,IACA,YACA,WAIS;AACT,oBAAmB,YAAY,aAAa;CAE5C,MAAM,aAAa,MAAM,GACvB,WAAW,MAAM,aAAsB,CACvC,OAAO,CAAC,QAAiB,YAAqB,CAAC,CAC/C,MAAM,MAAe,KAAK,UAAmB,CAC7C,kBAAkB;AAEpB,KAAI,CAAC,WAAY,QAAO;CAExB,MAAM,QAAQ;CAEd,IAAI;AACJ,KAAI,MAAM,WAAW;EACpB,MAAM,UAAU,MAAM,GACpB,WAAW,QAAQ,CACnB,OAAO;GAAC;GAAM;GAAQ;GAAS;GAAiB,CAAC,CACjD,MAAM,MAAM,KAAK,MAAM,UAAU,CACjC,kBAAkB;AACpB,MAAI,WAAW,QAAQ,eACtB,UAAS;GAAE,IAAI,QAAQ;GAAI,OAAO,QAAQ;GAAO,MAAM,QAAQ;GAAM;;AAIvE,QAAO;EAAE,MAAM,MAAM;EAAM;EAAQ;;;;;AC3GpC,SAAS,uBAAuB,OAAgE;AAC/F,KAAI,UAAU,SAAS,UAAU,gBAAgB,UAAU,OAAQ,QAAO;AAC1E,QAAO;;AAGR,SAAS,qBAAqB,OAA6C;AAC1E,KAAI,OAAO,UAAU,YAAY,UAAU,QAAQ,EAAE,YAAY,OAAQ,QAAO;AAChF,KAAI,MAAM,WAAW,aAAa,MAAM,WAAW,cAAc,MAAM,WAAW,OACjF,QAAO;AAER,QAAO,EAAE,YAAY,UAAU,MAAM,WAAW,UAAa,OAAO,MAAM,WAAW;;AAGtF,eAAsB,oBACrB,SACA,YACA,WACA,SACA,MACoB;AACpB,KAAI;EACH,MAAM,OAAO,MAAM,UAAU,SAAS,kBAAkB;AACxD,MAAI,aAAa,KAAK,CAAE,QAAO;EAE/B,MAAM,gBAAgB,MAAM,QAAQ,GAClC,WAAW,sBAAsB,CACjC,OAAO;GACP;GACA;GACA;GACA;GACA,CAAC,CACD,MAAM,QAAQ,KAAK,WAAW,CAC9B,kBAAkB;AAEpB,MAAI,CAAC,cACJ,QAAO,SAAS,aAAa,eAAe,WAAW,cAAc,IAAI;AAE1E,MAAI,CAAC,cAAc,iBAClB,QAAO,SAAS,qBAAqB,gDAAgD,IAAI;AAG1F,qBAAmB,YAAY,aAAa;EAQ5C,MAAM,cAPgB,MAAM,GAA0B;;UAE9C,IAAI,IAAI,MAAM,aAAa,CAAC;gBACtB,UAAU;;;IAGtB,QAAQ,QAAQ,GAAG,EACY,KAAK;AAEtC,MAAI,CAAC,WAAY,QAAO,SAAS,aAAa,qBAAqB,IAAI;AAEvE,MAAI,cAAc,6BAA6B,GAAG;GACjD,MAAM,cAAc,WAAW;AAC/B,OAAI,aAAa;IAChB,MAAM,aAAa,IAAI,KAAK,YAAY;AACxC,eAAW,QAAQ,WAAW,SAAS,GAAG,cAAc,2BAA2B;AACnF,wBAAI,IAAI,MAAM,GAAG,WAChB,QAAO,SAAS,mBAAmB,wCAAwC,IAAI;;;AAKlF,MAAI,KAAK,YACR,QAAO,WAAW;GAAE,QAAQ;GAAW,SAAS;GAAgC,CAAC;EAGlF,MAAM,OAAO,mBAAmB,SAAS,QAAQ,OAAO;EAExD,MAAM,EAAE,uBAAuB,yBAAyB,MAAM,OAAO;EACrE,MAAM,qBAAqB,uBAAuB;AAClD,MACC,sBACA,CAAE,MAAM,qBAAqB,KAAK,gBAAgB,oBAAoB,KAAK,GAAG,CAE9E,QAAO,SAAS,oBAAoB,+BAA+B,IAAI;EAKxE,MAAM,EAAE,WAAW,MAAM,qBAAqB,QAAQ,GAAG;EACzD,MAAM,SAAS,KAAK,KAAK,MAAM,OAAO,KAAK,IAAI,OAAO,GAAG;AAQzD,MAAI,EAPc,MAAM,eACvB,QAAQ,IACR,QACA,mBACA,WAAW,YAAY,KAAK,GAC5B,IACA,EACc,SAAS;GACvB,MAAM,WAAW,SAAS,gBAAgB,8CAA8C,IAAI;AAC5F,YAAS,QAAQ,IAAI,eAAe,MAAM;AAC1C,UAAO;;EAGR,MAAM,WAAsC;GAC3C,iBAAiB;GACjB,oBAAoB,uBAAuB,cAAc,oBAAoB;GAC7E,yBAAyB,cAAc;GACvC,0BAA0B,cAAc,gCAAgC;GACxE;EAED,MAAM,aAAa,MAAM,QAAQ,KAAK;EACtC,MAAM,cAAc,MAAM,SAAS,KAAK;EACxC,IAAI,mBAAmB,KAAK,YAAY;AACxC,MAAI,KAAK,UAAU;GAClB,MAAM,SAAS,MAAM,IAAI,kBAAkB,QAAQ,GAAG,CAAC,SAAS,KAAK,SAAS;AAC9E,OAAI,CAAC,OAAQ,QAAO,SAAS,oBAAoB,4BAA4B,IAAI;AACjF,OAAI,OAAO,eAAe,cAAc,OAAO,cAAc,UAC5D,QAAO,SAAS,oBAAoB,+CAA+C,IAAI;AAExF,sBAAmB,OAAO,YAAY,OAAO;;EAG9C,IAAI;AACJ,MAAI,WAAW,WAAW;GACzB,MAAM,YAAY,MAAM,QAAQ,GAC9B,WAAW,QAAQ,CACnB,OAAO;IAAC;IAAM;IAAQ;IAAS;IAAiB,CAAC,CACjD,MAAM,MAAM,KAAK,WAAW,UAAU,CACtC,kBAAkB;AACpB,OAAI,WAAW,eACd,iBAAgB;IAAE,IAAI,UAAU;IAAI,MAAM,UAAU;IAAM,OAAO,UAAU;IAAO;;EA6CpF,MAAM,SAAS,MAAM,cACpB,QAAQ,IACR;GACC;GACA;GACA,UAAU;GACV;GACA;GACA,cAAc,MAAM,MAAM;GAC1B,MAAM,KAAK;GACX;GACA,WAAW,KAAK;GAChB,EACD,UAtDqC;GACrC,kBAAkB,UAAU,QAAQ,MAAM,uBAAuB,MAAM;GACvE,aAAa,OAAO,UAAU;IAC7B,MAAM,SAAS,MAAM,QAAQ,MAAM,oBAAoB,oBAAoB,MAAM;AACjF,QAAI,CAAC,OAAQ,QAAO;KAAE,QAAQ;KAAW,QAAQ;KAA2B;AAC5E,QAAI,OAAO,OAAO;AACjB,aAAQ,MAAM,gCAAgC,OAAO,SAAS,KAAK,OAAO,MAAM,QAAQ;AACxF,YAAO;MAAE,QAAQ;MAAW,QAAQ;MAAoB;;AAEzD,WAAO,qBAAqB,OAAO,OAAO,GACvC,OAAO,SACP;KAAE,QAAQ;KAAW,QAAQ;KAA6B;;GAE9D,kBAAkB,UAAU;AAK3B,gBACC,QAAQ,MACN,sBAAsB,MAAM,CAC5B,OAAO,UACP,QAAQ,MACP,iCACA,iBAAiB,QAAQ,MAAM,UAAU,MACzC,CACD,CACF;;GAEF,oBAAoB,UAAU;AAC7B,WAAO,QAAQ,MACb,wBAAwB,MAAM,CAC9B,OAAO,UACP,QAAQ,MACP,mCACA,iBAAiB,QAAQ,MAAM,UAAU,MACzC,CACD;;GAEH,EAiBA;GACC,IAAI,WAAW;GACf;GACA,MAAM,WAAW;GACjB,QAAQ;GACR,CACD;AAED,MAAI,CAAC,OAAQ,QAAO,SAAS,oBAAoB,wBAAwB,IAAI;AAE7E,MAAI,OAAO,QAAQ,WAAW,cAAc,QAAQ,SAAS,cAC5D,KAAI;GACH,MAAM,eAAe,MAAM,eAAe,QAAQ,IAAI,SAAS,QAAQ,OAAO;AAC9E,SAAM,wBAAwB;IAC7B,OAAO,QAAQ;IACf,SAAS,OAAO;IAChB;IACA;IACA,CAAC;WACM,OAAO;AACf,WAAQ,MACP,kCACA,iBAAiB,QAAQ,MAAM,UAAU,MACzC;;AAIH,SAAO,WACN;GACC,IAAI,OAAO,QAAQ;GACnB,QAAQ,OAAO,QAAQ;GACvB,SACC,OAAO,QAAQ,WAAW,aACvB,sBACA;GACJ,EACD,IACA;UACO,OAAO;AACf,SAAO,YAAY,OAAO,4BAA4B,uBAAuB"}
+{"version":3,"file":"public-submission-ayqoyee4.mjs","names":[],"sources":["../src/comments/notifications.ts","../src/comments/public-submission.ts"],"sourcesContent":["/**\n * Comment Notification Emails\n *\n * Sends email notifications to content authors when comments are\n * approved on their content. Used by:\n *   - Public comment POST route (comment:afterCreate, if auto-approved)\n *   - Admin moderation route (comment:afterModerate, when approving)\n */\n\nimport type { Kysely } from \"kysely\";\n\nimport { escapeHtml } from \"../api/escape.js\";\nimport type { Database } from \"../database/types.js\";\nimport { validateIdentifier } from \"../database/validate.js\";\nimport type { EmailPipeline } from \"../plugins/email.js\";\nimport type { EmailMessage } from \"../plugins/types.js\";\n\nconst NOTIFICATION_SOURCE = \"emdash-comments\";\nconst MAX_EXCERPT_LENGTH = 500;\nconst CRLF_RE = /[\\r\\n]/g;\n\nexport interface CommentNotificationData {\n\tcommentAuthorName: string;\n\tcommentBody: string;\n\tcontentTitle: string;\n\tcollection: string;\n\tadminBaseUrl: string;\n}\n\n/**\n * Build an email notification for a new comment.\n */\nexport function buildCommentNotificationEmail(\n\tto: string,\n\tdata: CommentNotificationData,\n): EmailMessage {\n\tconst title = data.contentTitle || `${data.collection} item`;\n\tconst subject = `New comment on \"${title}\"`.replace(CRLF_RE, \" \");\n\n\tconst excerpt =\n\t\tdata.commentBody.length > MAX_EXCERPT_LENGTH\n\t\t\t? data.commentBody.slice(0, MAX_EXCERPT_LENGTH) + \"...\"\n\t\t\t: data.commentBody;\n\n\tconst adminUrl = `${data.adminBaseUrl}/admin/comments`;\n\n\tconst text = [\n\t\t`${data.commentAuthorName} commented on \"${title}\":`,\n\t\t\"\",\n\t\texcerpt,\n\t\t\"\",\n\t\t`View in admin: ${adminUrl}`,\n\t].join(\"\\n\");\n\n\tconst html = [\n\t\t`<p><strong>${escapeHtml(data.commentAuthorName)}</strong> commented on &ldquo;${escapeHtml(title)}&rdquo;:</p>`,\n\t\t`<blockquote style=\"border-left:3px solid #ccc;padding-left:12px;margin:12px 0;color:#555\">${escapeHtml(excerpt)}</blockquote>`,\n\t\t`<p><a href=\"${escapeHtml(adminUrl)}\">View in admin</a></p>`,\n\t].join(\"\\n\");\n\n\treturn { to, subject, text, html };\n}\n\n/**\n * Send a comment notification to the content author if all conditions are met:\n * 1. Comment status is \"approved\"\n * 2. Content author exists and has an email\n * 3. Email provider is configured\n * 4. Commenter is not the content author (no self-notifications)\n *\n * Returns true if the email was sent, false if skipped.\n */\nexport async function sendCommentNotification(params: {\n\temail: EmailPipeline;\n\tcomment: {\n\t\tauthorName: string;\n\t\tauthorEmail: string;\n\t\tbody: string;\n\t\tstatus: string;\n\t\tcollection: string;\n\t};\n\tcontentTitle?: string;\n\tcontentAuthor?: { email: string; name: string | null };\n\tadminBaseUrl: string;\n}): Promise<boolean> {\n\tconst { email, comment, contentAuthor, adminBaseUrl } = params;\n\n\tif (comment.status !== \"approved\") return false;\n\tif (!contentAuthor?.email) return false;\n\tif (!email.isAvailable()) return false;\n\tif (comment.authorEmail.toLowerCase() === contentAuthor.email.toLowerCase()) return false;\n\n\tconst message = buildCommentNotificationEmail(contentAuthor.email, {\n\t\tcommentAuthorName: comment.authorName,\n\t\tcommentBody: comment.body,\n\t\tcontentTitle: params.contentTitle || \"\",\n\t\tcollection: comment.collection,\n\t\tadminBaseUrl,\n\t});\n\n\tawait email.send(message, NOTIFICATION_SOURCE);\n\treturn true;\n}\n\n/**\n * Look up a content item's author from the database.\n *\n * Used by the admin moderation route where content info isn't\n * readily available (only the comment record is at hand).\n */\nexport async function lookupContentAuthor(\n\tdb: Kysely<Database>,\n\tcollection: string,\n\tcontentId: string,\n): Promise<{\n\tslug: string;\n\tauthor?: { id: string; email: string; name: string | null };\n} | null> {\n\tvalidateIdentifier(collection, \"collection\");\n\n\tconst contentRow = await db\n\t\t.selectFrom(`ec_${collection}` as never)\n\t\t.select([\"slug\" as never, \"author_id\" as never])\n\t\t.where(\"id\" as never, \"=\", contentId as never)\n\t\t.executeTakeFirst();\n\n\tif (!contentRow) return null;\n\n\tconst typed = contentRow as { slug: string; author_id: string | null };\n\n\tlet author: { id: string; email: string; name: string | null } | undefined;\n\tif (typed.author_id) {\n\t\tconst userRow = await db\n\t\t\t.selectFrom(\"users\")\n\t\t\t.select([\"id\", \"name\", \"email\", \"email_verified\"])\n\t\t\t.where(\"id\", \"=\", typed.author_id)\n\t\t\t.executeTakeFirst();\n\t\tif (userRow && userRow.email_verified) {\n\t\t\tauthor = { id: userRow.id, email: userRow.email, name: userRow.name };\n\t\t}\n\t}\n\n\treturn { slug: typed.slug, author };\n}\n","import { sql, type Kysely } from \"kysely\";\n\nimport { after } from \"../after.js\";\nimport { apiError, apiSuccess, handleError } from \"../api/error.js\";\nimport { hashIp } from \"../api/handlers/comments.js\";\nimport { isParseError, parseBody } from \"../api/parse.js\";\nimport { createCommentBody } from \"../api/schemas/comments.js\";\nimport { getSiteBaseUrl } from \"../api/site-url.js\";\nimport type { EmDashConfig } from \"../astro/integration/runtime.js\";\nimport { checkRateLimit } from \"../auth/rate-limit.js\";\nimport { resolveSecretsCached } from \"../config/secrets.js\";\nimport { CommentRepository } from \"../database/repositories/comment.js\";\nimport type { Database } from \"../database/types.js\";\nimport { validateIdentifier } from \"../database/validate.js\";\nimport type { EmailPipeline } from \"../plugins/email.js\";\nimport type { HookPipeline } from \"../plugins/hooks.js\";\nimport { extractRequestMeta } from \"../plugins/request-meta.js\";\nimport type { CollectionCommentSettings, ModerationDecision, UserInfo } from \"../plugins/types.js\";\nimport { sendCommentNotification } from \"./notifications.js\";\nimport { createComment, type CommentHookRunner } from \"./service.js\";\n\nexport interface PublicCommentSubmissionRuntime {\n\tdb: Kysely<Database>;\n\tconfig: EmDashConfig;\n\temail: EmailPipeline | null;\n\thooks: HookPipeline;\n}\n\ninterface CommentableContentRow {\n\tid: string;\n\tslug: string;\n\tauthor_id: string | null;\n\tpublished_at: string | null;\n}\n\nfunction parseCommentModeration(value: string): CollectionCommentSettings[\"commentsModeration\"] {\n\tif (value === \"all\" || value === \"first_time\" || value === \"none\") return value;\n\treturn \"all\";\n}\n\nfunction isModerationDecision(value: unknown): value is ModerationDecision {\n\tif (typeof value !== \"object\" || value === null || !(\"status\" in value)) return false;\n\tif (value.status !== \"pending\" && value.status !== \"approved\" && value.status !== \"spam\") {\n\t\treturn false;\n\t}\n\treturn !(\"reason\" in value) || value.reason === undefined || typeof value.reason === \"string\";\n}\n\nexport async function submitPublicComment(\n\truntime: PublicCommentSubmissionRuntime,\n\tcollection: string,\n\tcontentId: string,\n\trequest: Request,\n\tuser?: UserInfo,\n): Promise<Response> {\n\ttry {\n\t\tconst body = await parseBody(request, createCommentBody);\n\t\tif (isParseError(body)) return body;\n\n\t\tconst collectionRow = await runtime.db\n\t\t\t.selectFrom(\"_emdash_collections\")\n\t\t\t.select([\n\t\t\t\t\"comments_enabled\",\n\t\t\t\t\"comments_moderation\",\n\t\t\t\t\"comments_closed_after_days\",\n\t\t\t\t\"comments_auto_approve_users\",\n\t\t\t])\n\t\t\t.where(\"slug\", \"=\", collection)\n\t\t\t.executeTakeFirst();\n\n\t\tif (!collectionRow) {\n\t\t\treturn apiError(\"NOT_FOUND\", `Collection '${collection}' not found`, 404);\n\t\t}\n\t\tif (!collectionRow.comments_enabled) {\n\t\t\treturn apiError(\"COMMENTS_DISABLED\", \"Comments are not enabled for this collection\", 403);\n\t\t}\n\n\t\tvalidateIdentifier(collection, \"collection\");\n\t\tconst contentResult = await sql<CommentableContentRow>`\n\t\t\tSELECT id, slug, author_id, published_at\n\t\t\tFROM ${sql.ref(`ec_${collection}`)}\n\t\t\tWHERE id = ${contentId}\n\t\t\tAND status = 'published'\n\t\t\tAND deleted_at IS NULL\n\t\t`.execute(runtime.db);\n\t\tconst contentRow = contentResult.rows[0];\n\n\t\tif (!contentRow) return apiError(\"NOT_FOUND\", \"Content not found\", 404);\n\n\t\tif (collectionRow.comments_closed_after_days > 0) {\n\t\t\tconst publishedAt = contentRow.published_at;\n\t\t\tif (publishedAt) {\n\t\t\t\tconst closedDate = new Date(publishedAt);\n\t\t\t\tclosedDate.setDate(closedDate.getDate() + collectionRow.comments_closed_after_days);\n\t\t\t\tif (new Date() > closedDate) {\n\t\t\t\t\treturn apiError(\"COMMENTS_CLOSED\", \"Comments are closed for this content\", 403);\n\t\t\t\t}\n\t\t\t}\n\t\t}\n\n\t\tif (body.website_url) {\n\t\t\treturn apiSuccess({ status: \"pending\", message: \"Comment submitted for review\" });\n\t\t}\n\n\t\tconst meta = extractRequestMeta(request, runtime.config);\n\n\t\tconst { getTurnstileSecretKey, verifyTurnstileToken } = await import(\"./turnstile.js\");\n\t\tconst turnstileSecretKey = getTurnstileSecretKey();\n\t\tif (\n\t\t\tturnstileSecretKey &&\n\t\t\t!(await verifyTurnstileToken(body.turnstileToken, turnstileSecretKey, meta.ip))\n\t\t) {\n\t\t\treturn apiError(\"TURNSTILE_FAILED\", \"CAPTCHA verification failed\", 403);\n\t\t}\n\n\t\t// Counted after the CAPTCHA so unverified requests can't use up the\n\t\t// shared bucket for visitors without a trusted IP.\n\t\tconst { ipSalt } = await resolveSecretsCached(runtime.db);\n\t\tconst ipHash = meta.ip ? await hashIp(meta.ip, ipSalt) : \"unknown\";\n\t\tconst rateLimit = await checkRateLimit(\n\t\t\truntime.db,\n\t\t\tipHash,\n\t\t\t\"comments/submit\",\n\t\t\tipHash === \"unknown\" ? 20 : 5,\n\t\t\t600,\n\t\t);\n\t\tif (!rateLimit.allowed) {\n\t\t\tconst response = apiError(\"RATE_LIMITED\", \"Too many comments. Please try again later.\", 429);\n\t\t\tresponse.headers.set(\"Retry-After\", \"600\");\n\t\t\treturn response;\n\t\t}\n\n\t\tconst settings: CollectionCommentSettings = {\n\t\t\tcommentsEnabled: true,\n\t\t\tcommentsModeration: parseCommentModeration(collectionRow.comments_moderation),\n\t\t\tcommentsClosedAfterDays: collectionRow.comments_closed_after_days,\n\t\t\tcommentsAutoApproveUsers: collectionRow.comments_auto_approve_users === 1,\n\t\t};\n\n\t\tconst authorName = user?.name || body.authorName;\n\t\tconst authorEmail = user?.email ?? body.authorEmail;\n\t\tlet resolvedParentId = body.parentId ?? null;\n\t\tif (body.parentId) {\n\t\t\tconst parent = await new CommentRepository(runtime.db).findById(body.parentId);\n\t\t\tif (!parent) return apiError(\"VALIDATION_ERROR\", \"Parent comment not found\", 400);\n\t\t\tif (parent.collection !== collection || parent.contentId !== contentId) {\n\t\t\t\treturn apiError(\"VALIDATION_ERROR\", \"Parent comment belongs to different content\", 400);\n\t\t\t}\n\t\t\tresolvedParentId = parent.parentId ?? parent.id;\n\t\t}\n\n\t\tlet contentAuthor: { id: string; name: string | null; email: string } | undefined;\n\t\tif (contentRow.author_id) {\n\t\t\tconst authorRow = await runtime.db\n\t\t\t\t.selectFrom(\"users\")\n\t\t\t\t.select([\"id\", \"name\", \"email\", \"email_verified\"])\n\t\t\t\t.where(\"id\", \"=\", contentRow.author_id)\n\t\t\t\t.executeTakeFirst();\n\t\t\tif (authorRow?.email_verified) {\n\t\t\t\tcontentAuthor = { id: authorRow.id, name: authorRow.name, email: authorRow.email };\n\t\t\t}\n\t\t}\n\n\t\tconst hookRunner: CommentHookRunner = {\n\t\t\trunBeforeCreate: (event) => runtime.hooks.runCommentBeforeCreate(event),\n\t\t\trunModerate: async (event) => {\n\t\t\t\tconst result = await runtime.hooks.invokeExclusiveHook(\"comment:moderate\", event);\n\t\t\t\tif (!result) return { status: \"pending\", reason: \"No moderator configured\" };\n\t\t\t\tif (result.error) {\n\t\t\t\t\tconsole.error(`[comments] Moderation error (${result.pluginId}):`, result.error.message);\n\t\t\t\t\treturn { status: \"pending\", reason: \"Moderation error\" };\n\t\t\t\t}\n\t\t\t\treturn isModerationDecision(result.result)\n\t\t\t\t\t? result.result\n\t\t\t\t\t: { status: \"pending\", reason: \"Invalid moderation result\" };\n\t\t\t},\n\t\t\tfireAfterCreate: (event) => {\n\t\t\t\t// Deferred through after() so the host's waitUntil keeps the hooks\n\t\t\t\t// alive: on Workers, work left running after the response is sent\n\t\t\t\t// can be cancelled (sandboxed plugins never got past their first\n\t\t\t\t// bridge call).\n\t\t\t\tafter(() =>\n\t\t\t\t\truntime.hooks\n\t\t\t\t\t\t.runCommentAfterCreate(event)\n\t\t\t\t\t\t.catch((error) =>\n\t\t\t\t\t\t\tconsole.error(\n\t\t\t\t\t\t\t\t\"[comments] afterCreate error:\",\n\t\t\t\t\t\t\t\terror instanceof Error ? error.message : error,\n\t\t\t\t\t\t\t),\n\t\t\t\t\t\t),\n\t\t\t\t);\n\t\t\t},\n\t\t\tfireAfterModerate: (event) => {\n\t\t\t\treturn runtime.hooks\n\t\t\t\t\t.runCommentAfterModerate(event)\n\t\t\t\t\t.catch((error) =>\n\t\t\t\t\t\tconsole.error(\n\t\t\t\t\t\t\t\"[comments] afterModerate error:\",\n\t\t\t\t\t\t\terror instanceof Error ? error.message : error,\n\t\t\t\t\t\t),\n\t\t\t\t\t);\n\t\t\t},\n\t\t};\n\n\t\tconst result = await createComment(\n\t\t\truntime.db,\n\t\t\t{\n\t\t\t\tcollection,\n\t\t\t\tcontentId,\n\t\t\t\tparentId: resolvedParentId,\n\t\t\t\tauthorName,\n\t\t\t\tauthorEmail,\n\t\t\t\tauthorUserId: user?.id ?? null,\n\t\t\t\tbody: body.body,\n\t\t\t\tipHash,\n\t\t\t\tuserAgent: meta.userAgent,\n\t\t\t},\n\t\t\tsettings,\n\t\t\thookRunner,\n\t\t\t{\n\t\t\t\tid: contentRow.id,\n\t\t\t\tcollection,\n\t\t\t\tslug: contentRow.slug,\n\t\t\t\tauthor: contentAuthor,\n\t\t\t},\n\t\t);\n\n\t\tif (!result) return apiError(\"COMMENT_REJECTED\", \"Comment was rejected\", 403);\n\n\t\tif (result.comment.status === \"approved\" && runtime.email && contentAuthor) {\n\t\t\ttry {\n\t\t\t\tconst adminBaseUrl = await getSiteBaseUrl(runtime.db, request, runtime.config);\n\t\t\t\tawait sendCommentNotification({\n\t\t\t\t\temail: runtime.email,\n\t\t\t\t\tcomment: result.comment,\n\t\t\t\t\tcontentAuthor,\n\t\t\t\t\tadminBaseUrl,\n\t\t\t\t});\n\t\t\t} catch (error) {\n\t\t\t\tconsole.error(\n\t\t\t\t\t\"[comments] notification error:\",\n\t\t\t\t\terror instanceof Error ? error.message : error,\n\t\t\t\t);\n\t\t\t}\n\t\t}\n\n\t\treturn apiSuccess(\n\t\t\t{\n\t\t\t\tid: result.comment.id,\n\t\t\t\tstatus: result.comment.status,\n\t\t\t\tmessage:\n\t\t\t\t\tresult.comment.status === \"approved\"\n\t\t\t\t\t\t? \"Comment published\"\n\t\t\t\t\t\t: \"Comment submitted for review\",\n\t\t\t},\n\t\t\t201,\n\t\t);\n\t} catch (error) {\n\t\treturn handleError(error, \"Failed to submit comment\", \"COMMENT_CREATE_ERROR\");\n\t}\n}\n"],"mappings":";;;;;;;;;;;;;;;;AAiBA,MAAM,sBAAsB;AAC5B,MAAM,qBAAqB;AAC3B,MAAM,UAAU;;;;AAahB,SAAgB,8BACf,IACA,MACe;CACf,MAAM,QAAQ,KAAK,gBAAgB,GAAG,KAAK,WAAW;CACtD,MAAM,UAAU,mBAAmB,MAAM,GAAG,QAAQ,SAAS,IAAI;CAEjE,MAAM,UACL,KAAK,YAAY,SAAS,qBACvB,KAAK,YAAY,MAAM,GAAG,mBAAmB,GAAG,QAChD,KAAK;CAET,MAAM,WAAW,GAAG,KAAK,aAAa;AAgBtC,QAAO;EAAE;EAAI;EAAS,MAdT;GACZ,GAAG,KAAK,kBAAkB,iBAAiB,MAAM;GACjD;GACA;GACA;GACA,kBAAkB;GAClB,CAAC,KAAK,KAAK;EAQgB,MANf;GACZ,cAAc,WAAW,KAAK,kBAAkB,CAAC,gCAAgC,WAAW,MAAM,CAAC;GACnG,6FAA6F,WAAW,QAAQ,CAAC;GACjH,eAAe,WAAW,SAAS,CAAC;GACpC,CAAC,KAAK,KAAK;EAEsB;;;;;;;;;;;AAYnC,eAAsB,wBAAwB,QAYzB;CACpB,MAAM,EAAE,OAAO,SAAS,eAAe,iBAAiB;AAExD,KAAI,QAAQ,WAAW,WAAY,QAAO;AAC1C,KAAI,CAAC,eAAe,MAAO,QAAO;AAClC,KAAI,CAAC,MAAM,aAAa,CAAE,QAAO;AACjC,KAAI,QAAQ,YAAY,aAAa,KAAK,cAAc,MAAM,aAAa,CAAE,QAAO;CAEpF,MAAM,UAAU,8BAA8B,cAAc,OAAO;EAClE,mBAAmB,QAAQ;EAC3B,aAAa,QAAQ;EACrB,cAAc,OAAO,gBAAgB;EACrC,YAAY,QAAQ;EACpB;EACA,CAAC;AAEF,OAAM,MAAM,KAAK,SAAS,oBAAoB;AAC9C,QAAO;;;;;;;;AASR,eAAsB,oBACrB,IACA,YACA,WAIS;AACT,oBAAmB,YAAY,aAAa;CAE5C,MAAM,aAAa,MAAM,GACvB,WAAW,MAAM,aAAsB,CACvC,OAAO,CAAC,QAAiB,YAAqB,CAAC,CAC/C,MAAM,MAAe,KAAK,UAAmB,CAC7C,kBAAkB;AAEpB,KAAI,CAAC,WAAY,QAAO;CAExB,MAAM,QAAQ;CAEd,IAAI;AACJ,KAAI,MAAM,WAAW;EACpB,MAAM,UAAU,MAAM,GACpB,WAAW,QAAQ,CACnB,OAAO;GAAC;GAAM;GAAQ;GAAS;GAAiB,CAAC,CACjD,MAAM,MAAM,KAAK,MAAM,UAAU,CACjC,kBAAkB;AACpB,MAAI,WAAW,QAAQ,eACtB,UAAS;GAAE,IAAI,QAAQ;GAAI,OAAO,QAAQ;GAAO,MAAM,QAAQ;GAAM;;AAIvE,QAAO;EAAE,MAAM,MAAM;EAAM;EAAQ;;;;;AC3GpC,SAAS,uBAAuB,OAAgE;AAC/F,KAAI,UAAU,SAAS,UAAU,gBAAgB,UAAU,OAAQ,QAAO;AAC1E,QAAO;;AAGR,SAAS,qBAAqB,OAA6C;AAC1E,KAAI,OAAO,UAAU,YAAY,UAAU,QAAQ,EAAE,YAAY,OAAQ,QAAO;AAChF,KAAI,MAAM,WAAW,aAAa,MAAM,WAAW,cAAc,MAAM,WAAW,OACjF,QAAO;AAER,QAAO,EAAE,YAAY,UAAU,MAAM,WAAW,UAAa,OAAO,MAAM,WAAW;;AAGtF,eAAsB,oBACrB,SACA,YACA,WACA,SACA,MACoB;AACpB,KAAI;EACH,MAAM,OAAO,MAAM,UAAU,SAAS,kBAAkB;AACxD,MAAI,aAAa,KAAK,CAAE,QAAO;EAE/B,MAAM,gBAAgB,MAAM,QAAQ,GAClC,WAAW,sBAAsB,CACjC,OAAO;GACP;GACA;GACA;GACA;GACA,CAAC,CACD,MAAM,QAAQ,KAAK,WAAW,CAC9B,kBAAkB;AAEpB,MAAI,CAAC,cACJ,QAAO,SAAS,aAAa,eAAe,WAAW,cAAc,IAAI;AAE1E,MAAI,CAAC,cAAc,iBAClB,QAAO,SAAS,qBAAqB,gDAAgD,IAAI;AAG1F,qBAAmB,YAAY,aAAa;EAQ5C,MAAM,cAPgB,MAAM,GAA0B;;UAE9C,IAAI,IAAI,MAAM,aAAa,CAAC;gBACtB,UAAU;;;IAGtB,QAAQ,QAAQ,GAAG,EACY,KAAK;AAEtC,MAAI,CAAC,WAAY,QAAO,SAAS,aAAa,qBAAqB,IAAI;AAEvE,MAAI,cAAc,6BAA6B,GAAG;GACjD,MAAM,cAAc,WAAW;AAC/B,OAAI,aAAa;IAChB,MAAM,aAAa,IAAI,KAAK,YAAY;AACxC,eAAW,QAAQ,WAAW,SAAS,GAAG,cAAc,2BAA2B;AACnF,wBAAI,IAAI,MAAM,GAAG,WAChB,QAAO,SAAS,mBAAmB,wCAAwC,IAAI;;;AAKlF,MAAI,KAAK,YACR,QAAO,WAAW;GAAE,QAAQ;GAAW,SAAS;GAAgC,CAAC;EAGlF,MAAM,OAAO,mBAAmB,SAAS,QAAQ,OAAO;EAExD,MAAM,EAAE,uBAAuB,yBAAyB,MAAM,OAAO;EACrE,MAAM,qBAAqB,uBAAuB;AAClD,MACC,sBACA,CAAE,MAAM,qBAAqB,KAAK,gBAAgB,oBAAoB,KAAK,GAAG,CAE9E,QAAO,SAAS,oBAAoB,+BAA+B,IAAI;EAKxE,MAAM,EAAE,WAAW,MAAM,qBAAqB,QAAQ,GAAG;EACzD,MAAM,SAAS,KAAK,KAAK,MAAM,OAAO,KAAK,IAAI,OAAO,GAAG;AAQzD,MAAI,EAPc,MAAM,eACvB,QAAQ,IACR,QACA,mBACA,WAAW,YAAY,KAAK,GAC5B,IACA,EACc,SAAS;GACvB,MAAM,WAAW,SAAS,gBAAgB,8CAA8C,IAAI;AAC5F,YAAS,QAAQ,IAAI,eAAe,MAAM;AAC1C,UAAO;;EAGR,MAAM,WAAsC;GAC3C,iBAAiB;GACjB,oBAAoB,uBAAuB,cAAc,oBAAoB;GAC7E,yBAAyB,cAAc;GACvC,0BAA0B,cAAc,gCAAgC;GACxE;EAED,MAAM,aAAa,MAAM,QAAQ,KAAK;EACtC,MAAM,cAAc,MAAM,SAAS,KAAK;EACxC,IAAI,mBAAmB,KAAK,YAAY;AACxC,MAAI,KAAK,UAAU;GAClB,MAAM,SAAS,MAAM,IAAI,kBAAkB,QAAQ,GAAG,CAAC,SAAS,KAAK,SAAS;AAC9E,OAAI,CAAC,OAAQ,QAAO,SAAS,oBAAoB,4BAA4B,IAAI;AACjF,OAAI,OAAO,eAAe,cAAc,OAAO,cAAc,UAC5D,QAAO,SAAS,oBAAoB,+CAA+C,IAAI;AAExF,sBAAmB,OAAO,YAAY,OAAO;;EAG9C,IAAI;AACJ,MAAI,WAAW,WAAW;GACzB,MAAM,YAAY,MAAM,QAAQ,GAC9B,WAAW,QAAQ,CACnB,OAAO;IAAC;IAAM;IAAQ;IAAS;IAAiB,CAAC,CACjD,MAAM,MAAM,KAAK,WAAW,UAAU,CACtC,kBAAkB;AACpB,OAAI,WAAW,eACd,iBAAgB;IAAE,IAAI,UAAU;IAAI,MAAM,UAAU;IAAM,OAAO,UAAU;IAAO;;EA6CpF,MAAM,SAAS,MAAM,cACpB,QAAQ,IACR;GACC;GACA;GACA,UAAU;GACV;GACA;GACA,cAAc,MAAM,MAAM;GAC1B,MAAM,KAAK;GACX;GACA,WAAW,KAAK;GAChB,EACD,UAtDqC;GACrC,kBAAkB,UAAU,QAAQ,MAAM,uBAAuB,MAAM;GACvE,aAAa,OAAO,UAAU;IAC7B,MAAM,SAAS,MAAM,QAAQ,MAAM,oBAAoB,oBAAoB,MAAM;AACjF,QAAI,CAAC,OAAQ,QAAO;KAAE,QAAQ;KAAW,QAAQ;KAA2B;AAC5E,QAAI,OAAO,OAAO;AACjB,aAAQ,MAAM,gCAAgC,OAAO,SAAS,KAAK,OAAO,MAAM,QAAQ;AACxF,YAAO;MAAE,QAAQ;MAAW,QAAQ;MAAoB;;AAEzD,WAAO,qBAAqB,OAAO,OAAO,GACvC,OAAO,SACP;KAAE,QAAQ;KAAW,QAAQ;KAA6B;;GAE9D,kBAAkB,UAAU;AAK3B,gBACC,QAAQ,MACN,sBAAsB,MAAM,CAC5B,OAAO,UACP,QAAQ,MACP,iCACA,iBAAiB,QAAQ,MAAM,UAAU,MACzC,CACD,CACF;;GAEF,oBAAoB,UAAU;AAC7B,WAAO,QAAQ,MACb,wBAAwB,MAAM,CAC9B,OAAO,UACP,QAAQ,MACP,mCACA,iBAAiB,QAAQ,MAAM,UAAU,MACzC,CACD;;GAEH,EAiBA;GACC,IAAI,WAAW;GACf;GACA,MAAM,WAAW;GACjB,QAAQ;GACR,CACD;AAED,MAAI,CAAC,OAAQ,QAAO,SAAS,oBAAoB,wBAAwB,IAAI;AAE7E,MAAI,OAAO,QAAQ,WAAW,cAAc,QAAQ,SAAS,cAC5D,KAAI;GACH,MAAM,eAAe,MAAM,eAAe,QAAQ,IAAI,SAAS,QAAQ,OAAO;AAC9E,SAAM,wBAAwB;IAC7B,OAAO,QAAQ;IACf,SAAS,OAAO;IAChB;IACA;IACA,CAAC;WACM,OAAO;AACf,WAAQ,MACP,kCACA,iBAAiB,QAAQ,MAAM,UAAU,MACzC;;AAIH,SAAO,WACN;GACC,IAAI,OAAO,QAAQ;GACnB,QAAQ,OAAO,QAAQ;GACvB,SACC,OAAO,QAAQ,WAAW,aACvB,sBACA;GACJ,EACD,IACA;UACO,OAAO;AACf,SAAO,YAAY,OAAO,4BAA4B,uBAAuB"}

package/dist/query-BFHjCzSh.mjs

@@ -0,0 +1,37 @@
+import { i as getLocaleCandidates, r as getI18nConfig } from "./config-Cs_AwWXI.mjs";
+import { sql } from "kysely";
+
+//#region src/i18n/query.ts
+/** Match both canonical paths and code-stamped rows written by older versions. */
+function localeMatches(column, locale) {
+	const candidates = getLocaleCandidates(locale);
+	if (candidates.length === 1) return sql`${sql.ref(column)} = ${candidates[0]}`;
+	return sql`${sql.ref(column)} IN (${sql.join(candidates)})`;
+}
+/** Prefer the configured path, then its Astro codes in configuration order. */
+function localeOrder(column, locale) {
+	const candidates = getLocaleCandidates(locale);
+	return sql`CASE lower(${sql.ref(column)}) ${sql.join(candidates.map((candidate, rank) => sql`WHEN ${candidate.toLowerCase()} THEN ${sql.lit(rank)}`), sql` `)} ELSE ${sql.lit(candidates.length)} END`;
+}
+/** Compare locale columns without losing rows stored under an Astro code. */
+function canonicalLocaleColumn(column) {
+	const aliases = (getI18nConfig()?.locales ?? []).flatMap((locale) => getLocaleCandidates(locale).slice(1).map((code) => ({
+		code,
+		locale
+	})));
+	if (aliases.length === 0) return sql`${sql.ref(column)}`;
+	return sql`CASE lower(${sql.ref(column)}) ${sql.join(aliases.map(({ code, locale }) => sql`WHEN ${code.toLowerCase()} THEN ${locale.toLowerCase()}`), sql` `)} ELSE lower(${sql.ref(column)}) END`;
+}
+/** Rank a row's code within its own configured locale; paths always rank first. */
+function storedLocaleOrder(column) {
+	const aliases = (getI18nConfig()?.locales ?? []).flatMap((locale) => getLocaleCandidates(locale).slice(1).map((code, index) => ({
+		code,
+		rank: index + 1
+	})));
+	if (aliases.length === 0) return sql`0`;
+	return sql`CASE lower(${sql.ref(column)}) ${sql.join(aliases.map(({ code, rank }) => sql`WHEN ${code.toLowerCase()} THEN ${sql.lit(rank)}`), sql` `)} ELSE 0 END`;
+}
+
+//#endregion
+export { storedLocaleOrder as i, localeMatches as n, localeOrder as r, canonicalLocaleColumn as t };
+//# sourceMappingURL=query-BFHjCzSh.mjs.map

package/dist/query-BFHjCzSh.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"query-BFHjCzSh.mjs","names":[],"sources":["../src/i18n/query.ts"],"sourcesContent":["import { sql, type SqlBool } from \"kysely\";\n\nimport { getI18nConfig, getLocaleCandidates } from \"./config.js\";\n\n/** Match both canonical paths and code-stamped rows written by older versions. */\nexport function localeMatches(column: string, locale: string) {\n\tconst candidates = getLocaleCandidates(locale);\n\tif (candidates.length === 1) return sql<SqlBool>`${sql.ref(column)} = ${candidates[0]}`;\n\treturn sql<SqlBool>`${sql.ref(column)} IN (${sql.join(candidates)})`;\n}\n\n/** Prefer the configured path, then its Astro codes in configuration order. */\nexport function localeOrder(column: string, locale: string) {\n\tconst candidates = getLocaleCandidates(locale);\n\treturn sql<number>`CASE lower(${sql.ref(column)}) ${sql.join(\n\t\tcandidates.map((candidate, rank) => sql`WHEN ${candidate.toLowerCase()} THEN ${sql.lit(rank)}`),\n\t\tsql` `,\n\t)} ELSE ${sql.lit(candidates.length)} END`;\n}\n\n/** Compare locale columns without losing rows stored under an Astro code. */\nexport function canonicalLocaleColumn(column: string) {\n\tconst aliases = (getI18nConfig()?.locales ?? []).flatMap((locale) =>\n\t\tgetLocaleCandidates(locale)\n\t\t\t.slice(1)\n\t\t\t.map((code) => ({ code, locale })),\n\t);\n\tif (aliases.length === 0) return sql<string>`${sql.ref(column)}`;\n\treturn sql<string>`CASE lower(${sql.ref(column)}) ${sql.join(\n\t\taliases.map(({ code, locale }) => sql`WHEN ${code.toLowerCase()} THEN ${locale.toLowerCase()}`),\n\t\tsql` `,\n\t)} ELSE lower(${sql.ref(column)}) END`;\n}\n\n/** Rank a row's code within its own configured locale; paths always rank first. */\nexport function storedLocaleOrder(column: string) {\n\tconst aliases = (getI18nConfig()?.locales ?? []).flatMap((locale) =>\n\t\tgetLocaleCandidates(locale)\n\t\t\t.slice(1)\n\t\t\t.map((code, index) => ({ code, rank: index + 1 })),\n\t);\n\tif (aliases.length === 0) return sql<number>`0`;\n\treturn sql<number>`CASE lower(${sql.ref(column)}) ${sql.join(\n\t\taliases.map(({ code, rank }) => sql`WHEN ${code.toLowerCase()} THEN ${sql.lit(rank)}`),\n\t\tsql` `,\n\t)} ELSE 0 END`;\n}\n"],"mappings":";;;;;AAKA,SAAgB,cAAc,QAAgB,QAAgB;CAC7D,MAAM,aAAa,oBAAoB,OAAO;AAC9C,KAAI,WAAW,WAAW,EAAG,QAAO,GAAY,GAAG,IAAI,IAAI,OAAO,CAAC,KAAK,WAAW;AACnF,QAAO,GAAY,GAAG,IAAI,IAAI,OAAO,CAAC,OAAO,IAAI,KAAK,WAAW,CAAC;;;AAInE,SAAgB,YAAY,QAAgB,QAAgB;CAC3D,MAAM,aAAa,oBAAoB,OAAO;AAC9C,QAAO,GAAW,cAAc,IAAI,IAAI,OAAO,CAAC,IAAI,IAAI,KACvD,WAAW,KAAK,WAAW,SAAS,GAAG,QAAQ,UAAU,aAAa,CAAC,QAAQ,IAAI,IAAI,KAAK,GAAG,EAC/F,GAAG,IACH,CAAC,QAAQ,IAAI,IAAI,WAAW,OAAO,CAAC;;;AAItC,SAAgB,sBAAsB,QAAgB;CACrD,MAAM,WAAW,eAAe,EAAE,WAAW,EAAE,EAAE,SAAS,WACzD,oBAAoB,OAAO,CACzB,MAAM,EAAE,CACR,KAAK,UAAU;EAAE;EAAM;EAAQ,EAAE,CACnC;AACD,KAAI,QAAQ,WAAW,EAAG,QAAO,GAAW,GAAG,IAAI,IAAI,OAAO;AAC9D,QAAO,GAAW,cAAc,IAAI,IAAI,OAAO,CAAC,IAAI,IAAI,KACvD,QAAQ,KAAK,EAAE,MAAM,aAAa,GAAG,QAAQ,KAAK,aAAa,CAAC,QAAQ,OAAO,aAAa,GAAG,EAC/F,GAAG,IACH,CAAC,cAAc,IAAI,IAAI,OAAO,CAAC;;;AAIjC,SAAgB,kBAAkB,QAAgB;CACjD,MAAM,WAAW,eAAe,EAAE,WAAW,EAAE,EAAE,SAAS,WACzD,oBAAoB,OAAO,CACzB,MAAM,EAAE,CACR,KAAK,MAAM,WAAW;EAAE;EAAM,MAAM,QAAQ;EAAG,EAAE,CACnD;AACD,KAAI,QAAQ,WAAW,EAAG,QAAO,GAAW;AAC5C,QAAO,GAAW,cAAc,IAAI,IAAI,OAAO,CAAC,IAAI,IAAI,KACvD,QAAQ,KAAK,EAAE,MAAM,WAAW,GAAG,QAAQ,KAAK,aAAa,CAAC,QAAQ,IAAI,IAAI,KAAK,GAAG,EACtF,GAAG,IACH,CAAC"}