npm - emdash - Versions diffs - 1.3.0 → 1.4.0 - Mend

emdash 1.3.0 → 1.4.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (970) hide show

package/dist/{revision-BVp8S0e_.mjs.map → revision-Dx7Uth1X.mjs.map} RENAMED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"revision-BVp8S0e_.mjs","names":[],"sources":["../src/database/content-datetime.ts","../src/database/repositories/revision.ts"],"sourcesContent":["import type { Kysely } from \"kysely\";\n\nimport {\n\tDatetimeNormalizationError,\n\tnormalizeContentDatetimes,\n\tnormalizeDatetime,\n\ttype DatetimeFieldDescriptor,\n} from \"../datetime-normalization.js\";\nimport { requestCached } from \"../request-cache.js\";\nimport { isStoragelessFieldRow, type FieldType, type RepeaterSubField } from \"../schema/types.js\";\nimport { isSafeUrlFieldWriteValue } from \"../utils/url.js\";\nimport { EmDashValidationError } from \"./repositories/types.js\";\nimport type { Database } from \"./types.js\";\n\ninterface UrlFieldDescriptor {\n\tslug: string;\n\turlSubFields?: readonly string[];\n}\n\ninterface DatetimeContext {\n\ttimezone: string;\n\tfields: DatetimeFieldDescriptor[];\n\turlFields: UrlFieldDescriptor[];\n\twritableFieldSlugs: ReadonlySet<string>;\n}\n\nfunction repeaterSubFieldsOfType(validation: string \| null, type: FieldType): string[] {\n\tif (!validation) return [];\n\tlet parsed: unknown;\n\ttry {\n\t\tparsed = JSON.parse(validation);\n\t} catch {\n\t\treturn [];\n\t}\n\tif (typeof parsed !== \"object\" \|\| parsed === null \|\| !(\"subFields\" in parsed)) return [];\n\tconst subFields = (parsed as { subFields?: unknown }).subFields;\n\tif (!Array.isArray(subFields)) return [];\n\treturn subFields\n\t\t.filter(\n\t\t\t(field): field is RepeaterSubField =>\n\t\t\t\ttypeof field === \"object\" &&\n\t\t\t\tfield !== null &&\n\t\t\t\t\"type\" in field &&\n\t\t\t\tfield.type === type &&\n\t\t\t\t\"slug\" in field &&\n\t\t\t\ttypeof field.slug === \"string\",\n\t\t)\n\t\t.map((field) => field.slug);\n}\n\n/*\n Datetime contexts by collection slug, shared so that a bulk write reads each\n * collection's context once. A cached context doesn't see later writes to the\n * `site:timezone` setting or to field definitions, so share one only across\n * work that makes neither.\n /\nexport type DatetimeContextCache = Map<string, Promise<DatetimeContext>>;\n\nexport class ContentDatetimeNormalizer {\n\tconstructor(\n\t\tprivate readonly db: Kysely<Database>,\n\t\tprivate readonly contexts?: DatetimeContextCache,\n\t) {}\n\n\tprivate context(collection: string): Promise<DatetimeContext> {\n\t\tif (this.contexts) {\n\t\t\tlet context = this.contexts.get(collection);\n\t\t\tif (!context) {\n\t\t\t\tcontext = this.loadContext(collection);\n\t\t\t\tthis.contexts.set(collection, context);\n\t\t\t}\n\t\t\treturn context;\n\t\t}\n\t\t// Fall back to the per-request cache so repeated writes in the same\n\t\t// invocation (e.g. bulk imports) do not re-query field/timezone metadata\n\t\t// for every item.\n\t\treturn requestCached(`datetimeContext:${collection}`, () => this.loadContext(collection));\n\t}\n\n\tprivate async loadContext(collection: string): Promise<DatetimeContext> {\n\t\tconst [rows, timezoneRow] = await Promise.all([\n\t\t\tthis.db\n\t\t\t\t.selectFrom(\"_emdash_fields as field\")\n\t\t\t\t.innerJoin(\"_emdash_collections as collection\", \"collection.id\", \"field.collection_id\")\n\t\t\t\t.select([\"field.slug\", \"field.type\", \"field.validation\"])\n\t\t\t\t.where(\"collection.slug\", \"=\", collection)\n\t\t\t\t.execute(),\n\t\t\tthis.db\n\t\t\t\t.selectFrom(\"options\")\n\t\t\t\t.select(\"value\")\n\t\t\t\t.where(\"name\", \"=\", \"site:timezone\")\n\t\t\t\t.executeTakeFirst(),\n\t\t]);\n\t\tlet timezone = \"UTC\";\n\t\tif (timezoneRow) {\n\t\t\ttry {\n\t\t\t\tconst configured: unknown = JSON.parse(timezoneRow.value);\n\t\t\t\tif (typeof configured === \"string\" && configured) timezone = configured;\n\t\t\t} catch {\n\t\t\t\t// The datetime normalizer reports an invalid timezone when it encounters a value.\n\t\t\t}\n\t\t}\n\t\tconst fields: DatetimeFieldDescriptor[] = [];\n\t\tconst urlFields: UrlFieldDescriptor[] = [];\n\t\tfor (const row of rows) {\n\t\t\tif (row.type === \"datetime\") {\n\t\t\t\tfields.push({ slug: row.slug, type: \"datetime\" });\n\t\t\t} else if (row.type === \"url\") {\n\t\t\t\turlFields.push({ slug: row.slug });\n\t\t\t} else if (row.type === \"repeater\") {\n\t\t\t\tfields.push({\n\t\t\t\t\tslug: row.slug,\n\t\t\t\t\ttype: \"repeater\",\n\t\t\t\t\tdatetimeSubFields: repeaterSubFieldsOfType(row.validation, \"datetime\"),\n\t\t\t\t});\n\t\t\t\tconst urlSubFields = repeaterSubFieldsOfType(row.validation, \"url\");\n\t\t\t\tif (urlSubFields.length > 0) urlFields.push({ slug: row.slug, urlSubFields });\n\t\t\t}\n\t\t}\n\t\tconst writableFieldSlugs = new Set(\n\t\t\trows.filter((field) => !isStoragelessFieldRow(field)).map((field) => field.slug),\n\t\t);\n\t\treturn { timezone, fields, urlFields, writableFieldSlugs };\n\t}\n\n\tasync writableFieldSlugs(collection: string): Promise<ReadonlySet<string>> {\n\t\treturn (await this.context(collection)).writableFieldSlugs;\n\t}\n\n\t/\n\t Normalizes datetimes in incoming field values and rejects `url` values\n\t * with unsafe schemes, control characters, or off-site path forms. Values\n\t * already stored are not checked, so restoring or syncing existing data\n\t * goes through {@link normalizeData} instead.\n\t /\n\tasync normalizeInput(\n\t\tcollection: string,\n\t\tdata: Record<string, unknown>,\n\t): Promise<Record<string, unknown>> {\n\t\tconst context = await this.context(collection);\n\t\tassertSafeUrlFields(data, context.urlFields);\n\t\treturn this.normalizeWithContext(context, [data])[0] ?? data;\n\t}\n\n\tasync normalizeData(\n\t\tcollection: string,\n\t\tdata: Record<string, unknown>,\n\t): Promise<Record<string, unknown>> {\n\t\tconst [normalized] = await this.normalizeDataMany(collection, [data]);\n\t\treturn normalized ?? data;\n\t}\n\n\tasync normalizeDataMany(\n\t\tcollection: string,\n\t\titems: readonly Record<string, unknown>[],\n\t): Promise<Record<string, unknown>[]> {\n\t\treturn this.normalizeWithContext(await this.context(collection), items);\n\t}\n\n\tprivate normalizeWithContext(\n\t\tcontext: DatetimeContext,\n\t\titems: readonly Record<string, unknown>[],\n\t): Record<string, unknown>[] {\n\t\ttry {\n\t\t\treturn items.map(\n\t\t\t\t(data) => normalizeContentDatetimes(data, context.fields, context.timezone).value,\n\t\t\t);\n\t\t} catch (error) {\n\t\t\tif (error instanceof DatetimeNormalizationError) {\n\t\t\t\tthrow new EmDashValidationError(error.message);\n\t\t\t}\n\t\t\tthrow error;\n\t\t}\n\t}\n\n\tasync normalizeValue(collection: string, value: string \| Date): Promise<string> {\n\t\tconst context = await this.context(collection);\n\t\ttry {\n\t\t\treturn normalizeDatetime(value, context.timezone).value;\n\t\t} catch (error) {\n\t\t\tif (error instanceof DatetimeNormalizationError) {\n\t\t\t\tthrow new EmDashValidationError(error.message);\n\t\t\t}\n\t\t\tthrow error;\n\t\t}\n\t}\n}\n\nfunction isRecord(value: unknown): value is Record<string, unknown> {\n\treturn typeof value === \"object\" && value !== null && !Array.isArray(value);\n}\n\n// Reads parse a stored string that looks like JSON, so a repeater written as a JSON string\n// comes back as rows and must be checked as rows.\nfunction repeaterRows(value: unknown): unknown[] \| undefined {\n\tlet rows = value;\n\tif (typeof rows === \"string\" && rows.startsWith(\"[\")) {\n\t\ttry {\n\t\t\trows = JSON.parse(rows);\n\t\t} catch {\n\t\t\treturn undefined;\n\t\t}\n\t}\n\treturn Array.isArray(rows) ? rows : undefined;\n}\n\nfunction assertSafeUrl(path: string, value: unknown): void {\n\tif (typeof value === \"string\" && !isSafeUrlFieldWriteValue(value)) {\n\t\tthrow new EmDashValidationError(\n\t\t\t`Field \"${path}\" must use http, https, mailto, or tel, or be a safe relative path or fragment`,\n\t\t\t{ path },\n\t\t);\n\t}\n}\n\nfunction assertSafeUrlFields(\n\tdata: Record<string, unknown>,\n\turlFields: readonly UrlFieldDescriptor[],\n): void {\n\tfor (const field of urlFields) {\n\t\tconst value = data[field.slug];\n\t\tif (!field.urlSubFields) {\n\t\t\tassertSafeUrl(field.slug, value);\n\t\t\tcontinue;\n\t\t}\n\t\tconst rows = repeaterRows(value);\n\t\tif (!rows) continue;\n\t\tfor (const [index, row] of rows.entries()) {\n\t\t\tif (!isRecord(row)) continue;\n\t\t\tfor (const subField of field.urlSubFields) {\n\t\t\t\tassertSafeUrl(`${field.slug}.${index}.${subField}`, row[subField]);\n\t\t\t}\n\t\t}\n\t}\n}\n","import { sql, type Kysely, type Selectable } from \"kysely\";\nimport { monotonicFactory } from \"ulidx\";\n\nimport { ContentDatetimeNormalizer, type DatetimeContextCache } from \"../content-datetime.js\";\nimport type { Database, RevisionTable } from \"../types.js\";\nimport { validateIdentifier } from \"../validate.js\";\n\nconst monotonic = monotonicFactory();\n\nexport function createRevisionId(): string {\n\treturn monotonic();\n}\n\nexport interface Revision {\n\tid: string;\n\tcollection: string;\n\tentryId: string;\n\tdata: Record<string, unknown>;\n\tauthorId: string \| null;\n\tcreatedAt: string;\n}\n\nexport interface RevisionAuthor {\n\tid: string;\n\t/* `null` when the account has no display name. /\n\tname: string \| null;\n}\n\nexport interface RevisionWithAuthor extends Revision {\n\t/* `null` when no author was recorded or the account no longer exists. /\n\tauthor: RevisionAuthor \| null;\n}\n\nexport interface CreateRevisionInput {\n\tcollection: string;\n\tentryId: string;\n\tdata: Record<string, unknown>;\n\tauthorId?: string;\n}\n\nexport function normalizeRevisionLimit(value: unknown): number {\n\tconst numeric = Number(value);\n\tif (!Number.isFinite(numeric)) return 50;\n\treturn Math.max(1, Math.min(Math.trunc(numeric), 100));\n}\n\n/\n Revision repository for version history\n \n Each revision stores a JSON snapshot of the content at a point in time.\n * Used when collection has `supports: [\"revisions\"]` enabled.\n /\nexport class RevisionRepository {\n\tprivate readonly datetimes: ContentDatetimeNormalizer;\n\n\tconstructor(\n\t\tprivate db: Kysely<Database>,\n\t\tdatetimeContexts?: DatetimeContextCache,\n\t) {\n\t\tthis.datetimes = new ContentDatetimeNormalizer(db, datetimeContexts);\n\t}\n\n\t/\n\t Create a new revision\n\t /\n\tasync create(input: CreateRevisionInput): Promise<Revision> {\n\t\tconst id = createRevisionId();\n\t\tconst data = await this.datetimes.normalizeData(input.collection, input.data);\n\n\t\tconst row: Omit<RevisionTable, \"created_at\"> = {\n\t\t\tid,\n\t\t\tcollection: input.collection,\n\t\t\tentry_id: input.entryId,\n\t\t\tdata: JSON.stringify(data),\n\t\t\tauthor_id: input.authorId ?? null,\n\t\t};\n\n\t\tawait this.db.insertInto(\"revisions\").values(row).execute();\n\n\t\tconst revision = await this.findById(id);\n\t\tif (!revision) {\n\t\t\tthrow new Error(\"Failed to create revision\");\n\t\t}\n\n\t\tawait this.queuePruning(input.collection, input.entryId, id);\n\n\t\treturn revision;\n\t}\n\n\tasync queuePruning(collection: string, entryId: string, revisionId: string): Promise<void> {\n\t\ttry {\n\t\t\tawait this.db\n\t\t\t\t.insertInto(\"_emdash_revision_prune_queue\")\n\t\t\t\t.values({\n\t\t\t\t\tcollection,\n\t\t\t\t\tentry_id: entryId,\n\t\t\t\t\trevision_id: revisionId,\n\t\t\t\t})\n\t\t\t\t.onConflict((conflict) =>\n\t\t\t\t\tconflict.columns([\"collection\", \"entry_id\"]).doUpdateSet({ revision_id: revisionId }),\n\t\t\t\t)\n\t\t\t\t.execute();\n\t\t} catch (error) {\n\t\t\tconsole.error(\n\t\t\t\t`[revisions] Failed to queue revision pruning for ${collection}/${entryId}:`,\n\t\t\t\terror,\n\t\t\t);\n\t\t}\n\t}\n\n\t/\n\t Find revision by ID\n\t /\n\tasync findById(id: string): Promise<Revision \| null> {\n\t\tconst row = await this.db\n\t\t\t.selectFrom(\"revisions\")\n\t\t\t.selectAll()\n\t\t\t.where(\"id\", \"=\", id)\n\t\t\t.executeTakeFirst();\n\n\t\treturn row ? this.normalizeRow(row) : null;\n\t}\n\n\t/* Shallow-merge `patch` into a stored revision's data. /\n\tasync mergeData(id: string, patch: Record<string, unknown>): Promise<void> {\n\t\tconst row = await this.db\n\t\t\t.selectFrom(\"revisions\")\n\t\t\t.select(\"data\")\n\t\t\t.where(\"id\", \"=\", id)\n\t\t\t.executeTakeFirst();\n\t\tif (!row) return;\n\t\tconst data: Record<string, unknown> = { ...JSON.parse(row.data), ...patch };\n\t\tawait this.db\n\t\t\t.updateTable(\"revisions\")\n\t\t\t.set({ data: JSON.stringify(data) })\n\t\t\t.where(\"id\", \"=\", id)\n\t\t\t.execute();\n\t}\n\n\t/\n\t Get all revisions for an entry (newest first)\n\t \n\t Orders by monotonic ULID (descending). The monotonic factory\n\t * guarantees strictly increasing IDs even within the same millisecond.\n\t /\n\tasync findByEntry(\n\t\tcollection: string,\n\t\tentryId: string,\n\t\toptions: { limit?: number } = {},\n\t): Promise<RevisionWithAuthor[]> {\n\t\tlet query = this.db\n\t\t\t.selectFrom(\"revisions\")\n\t\t\t.leftJoin(\"users\", \"users.id\", \"revisions.author_id\")\n\t\t\t.selectAll(\"revisions\")\n\t\t\t.select([\"users.id as author_user_id\", \"users.name as author_name\"])\n\t\t\t.where(\"revisions.collection\", \"=\", collection)\n\t\t\t.where(\"revisions.entry_id\", \"=\", entryId)\n\t\t\t.orderBy(\"revisions.id\", \"desc\");\n\n\t\tif (options.limit) {\n\t\t\tquery = query.limit(options.limit);\n\t\t}\n\n\t\tconst rows = await query.execute();\n\t\tconst data = await this.datetimes.normalizeDataMany(\n\t\t\tcollection,\n\t\t\trows.map((row) => JSON.parse(row.data)),\n\t\t);\n\t\treturn rows.map((row, index) => {\n\t\t\tconst normalized = data[index];\n\t\t\tif (!normalized) throw new Error(\"Failed to normalize revision data\");\n\t\t\treturn {\n\t\t\t\t...this.rowToRevision(row, normalized),\n\t\t\t\tauthor: row.author_user_id\n\t\t\t\t\t? { id: row.author_user_id, name: row.author_name?.trim() \|\| null }\n\t\t\t\t\t: null,\n\t\t\t};\n\t\t});\n\t}\n\n\t/* Read revisions only when the owning content row is visible in the same statement snapshot. /\n\tasync findVisibleByEntry(\n\t\tcollection: string,\n\t\tentryId: string,\n\t\toptions: { limit?: number } = {},\n\t): Promise<Revision[]> {\n\t\tvalidateIdentifier(collection, \"collection\");\n\t\tconst tableName = `ec_${collection}`;\n\t\tconst limit = normalizeRevisionLimit(options.limit);\n\t\tconst result = await sql<Selectable<RevisionTable>>`\n\t\t\tSELECT revisions. FROM revisions\n\t\t\tWHERE revisions.collection = ${collection}\n\t\t\tAND revisions.entry_id = ${entryId}\n\t\t\tAND EXISTS (\n\t\t\t\tSELECT 1 FROM ${sql.ref(tableName)} AS content\n\t\t\t\tWHERE content.id = ${entryId}\n\t\t\t\tAND content.deleted_at IS NULL\n\t\t\t)\n\t\t\tORDER BY revisions.id DESC\n\t\t\tLIMIT ${limit}\n\t\t`.execute(this.db);\n\t\tconst data = await this.datetimes.normalizeDataMany(\n\t\t\tcollection,\n\t\t\tresult.rows.map((row) => JSON.parse(row.data)),\n\t\t);\n\t\treturn result.rows.map((row, index) => {\n\t\t\tconst normalized = data[index];\n\t\t\tif (!normalized) throw new Error(\"Failed to normalize revision data\");\n\t\t\treturn this.rowToRevision(row, normalized);\n\t\t});\n\t}\n\n\t/** Read one revision only when its owning content row is visible in the same statement snapshot. /\n\tasync findVisibleById(\n\t\tcollection: string,\n\t\tentryId: string,\n\t\trevisionId: string,\n\t): Promise<Revision \| null> {\n\t\tvalidateIdentifier(collection, \"collection\");\n\t\tconst tableName = `ec_${collection}`;\n\t\tconst result = await sql<Selectable<RevisionTable>>`\n\t\t\tSELECT revisions. FROM revisions\n\t\t\tWHERE revisions.id = ${revisionId}\n\t\t\tAND revisions.collection = ${collection}\n\t\t\tAND revisions.entry_id = ${entryId}\n\t\t\tAND EXISTS (\n\t\t\t\tSELECT 1 FROM ${sql.ref(tableName)} AS content\n\t\t\t\tWHERE content.id = ${entryId}\n\t\t\t\tAND content.deleted_at IS NULL\n\t\t\t)\n\t\t\tLIMIT 1\n\t\t`.execute(this.db);\n\t\tconst row = result.rows[0];\n\t\treturn row ? this.normalizeRow(row) : null;\n\t}\n\n\t/*\n\t Get the most recent revision for an entry\n\t /\n\tasync findLatest(collection: string, entryId: string): Promise<Revision \| null> {\n\t\tconst row = await this.db\n\t\t\t.selectFrom(\"revisions\")\n\t\t\t.selectAll()\n\t\t\t.where(\"collection\", \"=\", collection)\n\t\t\t.where(\"entry_id\", \"=\", entryId)\n\t\t\t.orderBy(\"id\", \"desc\")\n\t\t\t.limit(1)\n\t\t\t.executeTakeFirst();\n\n\t\treturn row ? this.normalizeRow(row) : null;\n\t}\n\n\t/\n\t Count revisions for an entry\n\t /\n\tasync countByEntry(collection: string, entryId: string): Promise<number> {\n\t\tconst result = await this.db\n\t\t\t.selectFrom(\"revisions\")\n\t\t\t.select((eb) => eb.fn.count(\"id\").as(\"count\"))\n\t\t\t.where(\"collection\", \"=\", collection)\n\t\t\t.where(\"entry_id\", \"=\", entryId)\n\t\t\t.executeTakeFirst();\n\n\t\treturn Number(result?.count \|\| 0);\n\t}\n\n\t/\n\t Delete all revisions for an entry (use when entry is deleted)\n\t /\n\tasync deleteByEntry(collection: string, entryId: string): Promise<number> {\n\t\tconst result = await this.db\n\t\t\t.deleteFrom(\"revisions\")\n\t\t\t.where(\"collection\", \"=\", collection)\n\t\t\t.where(\"entry_id\", \"=\", entryId)\n\t\t\t.executeTakeFirst();\n\n\t\ttry {\n\t\t\tawait this.db\n\t\t\t\t.deleteFrom(\"_emdash_revision_prune_queue\")\n\t\t\t\t.where(\"collection\", \"=\", collection)\n\t\t\t\t.where(\"entry_id\", \"=\", entryId)\n\t\t\t\t.execute();\n\t\t} catch (error) {\n\t\t\tconsole.error(\n\t\t\t\t`[revisions] Failed to clear queued revision pruning for ${collection}/${entryId}:`,\n\t\t\t\terror,\n\t\t\t);\n\t\t}\n\n\t\treturn Number(result.numDeletedRows ?? 0);\n\t}\n\n\t/\n\t Delete old revisions, keeping the most recent N\n\t /\n\tasync pruneOldRevisions(\n\t\tcollection: string,\n\t\tentryId: string,\n\t\tkeepCount: number,\n\t\tthroughRevisionId?: string,\n\t): Promise<number> {\n\t\tvalidateIdentifier(collection, \"collection\");\n\t\tconst tableName = `ec_${collection}`;\n\t\tlet keepQuery = this.db\n\t\t\t.selectFrom(\"revisions\")\n\t\t\t.select(\"id\")\n\t\t\t.where(\"collection\", \"=\", collection)\n\t\t\t.where(\"entry_id\", \"=\", entryId)\n\t\t\t.orderBy(\"created_at\", \"desc\")\n\t\t\t.orderBy(\"id\", \"desc\") // ULID tiebreaker\n\t\t\t.limit(keepCount);\n\n\t\tif (throughRevisionId) {\n\t\t\tkeepQuery = keepQuery.where(\"id\", \"<=\", throughRevisionId);\n\t\t}\n\n\t\tconst keep = await keepQuery.execute();\n\n\t\tconst keepIds = keep.map((r) => r.id);\n\n\t\tif (keepIds.length === 0) return 0;\n\t\tconst revisionBoundary = throughRevisionId ? sql`AND id <= ${throughRevisionId}` : sql``;\n\n\t\tconst result = await sql`\n\t\t\tDELETE FROM revisions\n\t\t\tWHERE collection = ${collection}\n\t\t\tAND entry_id = ${entryId}\n\t\t\t${revisionBoundary}\n\t\t\tAND id NOT IN (${sql.join(keepIds.map((id) => sql`${id}`))})\n\t\t\tAND NOT EXISTS (\n\t\t\t\tSELECT 1 FROM ${sql.ref(tableName)} AS content\n\t\t\t\tWHERE content.live_revision_id = revisions.id\n\t\t\t\tOR content.draft_revision_id = revisions.id\n\t\t\t)\n\t\t`.execute(this.db);\n\n\t\treturn Number(result.numAffectedRows ?? 0);\n\t}\n\n\tasync pruneQueuedEntry(\n\t\tcollection: string,\n\t\tentryId: string,\n\t\tqueuedRevisionId: string,\n\t\tkeepCount: number,\n\t): Promise<number> {\n\t\tconst pruned = await this.pruneOldRevisions(collection, entryId, keepCount, queuedRevisionId);\n\t\tawait this.db\n\t\t\t.deleteFrom(\"_emdash_revision_prune_queue\")\n\t\t\t.where(\"collection\", \"=\", collection)\n\t\t\t.where(\"entry_id\", \"=\", entryId)\n\t\t\t.where(\"revision_id\", \"=\", queuedRevisionId)\n\t\t\t.execute();\n\t\treturn pruned;\n\t}\n\n\tasync deleteIfUnreferenced(\n\t\tcollection: string,\n\t\tentryId: string,\n\t\trevisionId: string,\n\t): Promise<boolean> {\n\t\tvalidateIdentifier(collection, \"collection\");\n\t\tconst tableName = `ec_${collection}`;\n\t\tconst result = await sql`\n\t\t\tDELETE FROM revisions\n\t\t\tWHERE id = ${revisionId}\n\t\t\tAND collection = ${collection}\n\t\t\tAND entry_id = ${entryId}\n\t\t\tAND NOT EXISTS (\n\t\t\t\tSELECT 1 FROM ${sql.ref(tableName)} AS content\n\t\t\t\tWHERE content.live_revision_id = revisions.id\n\t\t\t\tOR content.draft_revision_id = revisions.id\n\t\t\t)\n\t\t`.execute(this.db);\n\t\treturn (result.numAffectedRows ?? 0n) > 0n;\n\t}\n\n\t/\n\t Convert database row to Revision object\n\t */\n\tprivate async normalizeRow(row: {\n\t\tid: string;\n\t\tcollection: string;\n\t\tentry_id: string;\n\t\tdata: string;\n\t\tauthor_id: string \| null;\n\t\tcreated_at: string;\n\t}): Promise<Revision> {\n\t\tconst data = await this.datetimes.normalizeData(row.collection, JSON.parse(row.data));\n\t\treturn this.rowToRevision(row, data);\n\t}\n\n\tprivate rowToRevision(\n\t\trow: {\n\t\t\tid: string;\n\t\t\tcollection: string;\n\t\t\tentry_id: string;\n\t\t\tdata: string;\n\t\t\tauthor_id: string \| null;\n\t\t\tcreated_at: string;\n\t\t},\n\t\tdata: Record<string, unknown>,\n\t): Revision {\n\t\treturn {\n\t\t\tid: row.id,\n\t\t\tcollection: row.collection,\n\t\t\tentryId: row.entry_id,\n\t\t\tdata,\n\t\t\tauthorId: row.author_id,\n\t\t\tcreatedAt: row.created_at,\n\t\t};\n\t}\n}\n"],"mappings":";;;;;;;;;;AA0BA,SAAS,wBAAwB,YAA2B,MAA2B;AACtF,KAAI,CAAC,WAAY,QAAO,EAAE;CAC1B,IAAI;AACJ,KAAI;AACH,WAAS,KAAK,MAAM,WAAW;SACxB;AACP,SAAO,EAAE;;AAEV,KAAI,OAAO,WAAW,YAAY,WAAW,QAAQ,EAAE,eAAe,QAAS,QAAO,EAAE;CACxF,MAAM,YAAa,OAAmC;AACtD,KAAI,CAAC,MAAM,QAAQ,UAAU,CAAE,QAAO,EAAE;AACxC,QAAO,UACL,QACC,UACA,OAAO,UAAU,YACjB,UAAU,QACV,UAAU,SACV,MAAM,SAAS,QACf,UAAU,SACV,OAAO,MAAM,SAAS,SACvB,CACA,KAAK,UAAU,MAAM,KAAK;;AAW7B,IAAa,4BAAb,MAAuC;CACtC,YACC,AAAiB,IACjB,AAAiB,UAChB;EAFgB;EACA;;CAGlB,AAAQ,QAAQ,YAA8C;AAC7D,MAAI,KAAK,UAAU;GAClB,IAAI,UAAU,KAAK,SAAS,IAAI,WAAW;AAC3C,OAAI,CAAC,SAAS;AACb,cAAU,KAAK,YAAY,WAAW;AACtC,SAAK,SAAS,IAAI,YAAY,QAAQ;;AAEvC,UAAO;;AAKR,SAAO,cAAc,mBAAmB,oBAAoB,KAAK,YAAY,WAAW,CAAC;;CAG1F,MAAc,YAAY,YAA8C;EACvE,MAAM,CAAC,MAAM,eAAe,MAAM,QAAQ,IAAI,CAC7C,KAAK,GACH,WAAW,0BAA0B,CACrC,UAAU,qCAAqC,iBAAiB,sBAAsB,CACtF,OAAO;GAAC;GAAc;GAAc;GAAmB,CAAC,CACxD,MAAM,mBAAmB,KAAK,WAAW,CACzC,SAAS,EACX,KAAK,GACH,WAAW,UAAU,CACrB,OAAO,QAAQ,CACf,MAAM,QAAQ,KAAK,gBAAgB,CACnC,kBAAkB,CACpB,CAAC;EACF,IAAI,WAAW;AACf,MAAI,YACH,KAAI;GACH,MAAM,aAAsB,KAAK,MAAM,YAAY,MAAM;AACzD,OAAI,OAAO,eAAe,YAAY,WAAY,YAAW;UACtD;EAIT,MAAM,SAAoC,EAAE;EAC5C,MAAM,YAAkC,EAAE;AAC1C,OAAK,MAAM,OAAO,KACjB,KAAI,IAAI,SAAS,WAChB,QAAO,KAAK;GAAE,MAAM,IAAI;GAAM,MAAM;GAAY,CAAC;WACvC,IAAI,SAAS,MACvB,WAAU,KAAK,EAAE,MAAM,IAAI,MAAM,CAAC;WACxB,IAAI,SAAS,YAAY;AACnC,UAAO,KAAK;IACX,MAAM,IAAI;IACV,MAAM;IACN,mBAAmB,wBAAwB,IAAI,YAAY,WAAW;IACtE,CAAC;GACF,MAAM,eAAe,wBAAwB,IAAI,YAAY,MAAM;AACnE,OAAI,aAAa,SAAS,EAAG,WAAU,KAAK;IAAE,MAAM,IAAI;IAAM;IAAc,CAAC;;EAG/E,MAAM,qBAAqB,IAAI,IAC9B,KAAK,QAAQ,UAAU,CAAC,sBAAsB,MAAM,CAAC,CAAC,KAAK,UAAU,MAAM,KAAK,CAChF;AACD,SAAO;GAAE;GAAU;GAAQ;GAAW;GAAoB;;CAG3D,MAAM,mBAAmB,YAAkD;AAC1E,UAAQ,MAAM,KAAK,QAAQ,WAAW,EAAE;;;;;;;;CASzC,MAAM,eACL,YACA,MACmC;EACnC,MAAM,UAAU,MAAM,KAAK,QAAQ,WAAW;AAC9C,sBAAoB,MAAM,QAAQ,UAAU;AAC5C,SAAO,KAAK,qBAAqB,SAAS,CAAC,KAAK,CAAC,CAAC,MAAM;;CAGzD,MAAM,cACL,YACA,MACmC;EACnC,MAAM,CAAC,cAAc,MAAM,KAAK,kBAAkB,YAAY,CAAC,KAAK,CAAC;AACrE,SAAO,cAAc;;CAGtB,MAAM,kBACL,YACA,OACqC;AACrC,SAAO,KAAK,qBAAqB,MAAM,KAAK,QAAQ,WAAW,EAAE,MAAM;;CAGxE,AAAQ,qBACP,SACA,OAC4B;AAC5B,MAAI;AACH,UAAO,MAAM,KACX,SAAS,0BAA0B,MAAM,QAAQ,QAAQ,QAAQ,SAAS,CAAC,MAC5E;WACO,OAAO;AACf,OAAI,iBAAiB,2BACpB,OAAM,IAAI,sBAAsB,MAAM,QAAQ;AAE/C,SAAM;;;CAIR,MAAM,eAAe,YAAoB,OAAuC;EAC/E,MAAM,UAAU,MAAM,KAAK,QAAQ,WAAW;AAC9C,MAAI;AACH,UAAO,kBAAkB,OAAO,QAAQ,SAAS,CAAC;WAC1C,OAAO;AACf,OAAI,iBAAiB,2BACpB,OAAM,IAAI,sBAAsB,MAAM,QAAQ;AAE/C,SAAM;;;;AAKT,SAAS,SAAS,OAAkD;AACnE,QAAO,OAAO,UAAU,YAAY,UAAU,QAAQ,CAAC,MAAM,QAAQ,MAAM;;AAK5E,SAAS,aAAa,OAAuC;CAC5D,IAAI,OAAO;AACX,KAAI,OAAO,SAAS,YAAY,KAAK,WAAW,IAAI,CACnD,KAAI;AACH,SAAO,KAAK,MAAM,KAAK;SAChB;AACP;;AAGF,QAAO,MAAM,QAAQ,KAAK,GAAG,OAAO;;AAGrC,SAAS,cAAc,MAAc,OAAsB;AAC1D,KAAI,OAAO,UAAU,YAAY,CAAC,yBAAyB,MAAM,CAChE,OAAM,IAAI,sBACT,UAAU,KAAK,iFACf,EAAE,MAAM,CACR;;AAIH,SAAS,oBACR,MACA,WACO;AACP,MAAK,MAAM,SAAS,WAAW;EAC9B,MAAM,QAAQ,KAAK,MAAM;AACzB,MAAI,CAAC,MAAM,cAAc;AACxB,iBAAc,MAAM,MAAM,MAAM;AAChC;;EAED,MAAM,OAAO,aAAa,MAAM;AAChC,MAAI,CAAC,KAAM;AACX,OAAK,MAAM,CAAC,OAAO,QAAQ,KAAK,SAAS,EAAE;AAC1C,OAAI,CAAC,SAAS,IAAI,CAAE;AACpB,QAAK,MAAM,YAAY,MAAM,aAC5B,eAAc,GAAG,MAAM,KAAK,GAAG,MAAM,GAAG,YAAY,IAAI,UAAU;;;;;;;AC/NtE,MAAM,YAAY,kBAAkB;AAEpC,SAAgB,mBAA2B;AAC1C,QAAO,WAAW;;AA8BnB,SAAgB,uBAAuB,OAAwB;CAC9D,MAAM,UAAU,OAAO,MAAM;AAC7B,KAAI,CAAC,OAAO,SAAS,QAAQ,CAAE,QAAO;AACtC,QAAO,KAAK,IAAI,GAAG,KAAK,IAAI,KAAK,MAAM,QAAQ,EAAE,IAAI,CAAC;;;;;;;;AASvD,IAAa,qBAAb,MAAgC;CAC/B,AAAiB;CAEjB,YACC,AAAQ,IACR,kBACC;EAFO;AAGR,OAAK,YAAY,IAAI,0BAA0B,IAAI,iBAAiB;;;;;CAMrE,MAAM,OAAO,OAA+C;EAC3D,MAAM,KAAK,kBAAkB;EAC7B,MAAM,OAAO,MAAM,KAAK,UAAU,cAAc,MAAM,YAAY,MAAM,KAAK;EAE7E,MAAM,MAAyC;GAC9C;GACA,YAAY,MAAM;GAClB,UAAU,MAAM;GAChB,MAAM,KAAK,UAAU,KAAK;GAC1B,WAAW,MAAM,YAAY;GAC7B;AAED,QAAM,KAAK,GAAG,WAAW,YAAY,CAAC,OAAO,IAAI,CAAC,SAAS;EAE3D,MAAM,WAAW,MAAM,KAAK,SAAS,GAAG;AACxC,MAAI,CAAC,SACJ,OAAM,IAAI,MAAM,4BAA4B;AAG7C,QAAM,KAAK,aAAa,MAAM,YAAY,MAAM,SAAS,GAAG;AAE5D,SAAO;;CAGR,MAAM,aAAa,YAAoB,SAAiB,YAAmC;AAC1F,MAAI;AACH,SAAM,KAAK,GACT,WAAW,+BAA+B,CAC1C,OAAO;IACP;IACA,UAAU;IACV,aAAa;IACb,CAAC,CACD,YAAY,aACZ,SAAS,QAAQ,CAAC,cAAc,WAAW,CAAC,CAAC,YAAY,EAAE,aAAa,YAAY,CAAC,CACrF,CACA,SAAS;WACH,OAAO;AACf,WAAQ,MACP,oDAAoD,WAAW,GAAG,QAAQ,IAC1E,MACA;;;;;;CAOH,MAAM,SAAS,IAAsC;EACpD,MAAM,MAAM,MAAM,KAAK,GACrB,WAAW,YAAY,CACvB,WAAW,CACX,MAAM,MAAM,KAAK,GAAG,CACpB,kBAAkB;AAEpB,SAAO,MAAM,KAAK,aAAa,IAAI,GAAG;;;CAIvC,MAAM,UAAU,IAAY,OAA+C;EAC1E,MAAM,MAAM,MAAM,KAAK,GACrB,WAAW,YAAY,CACvB,OAAO,OAAO,CACd,MAAM,MAAM,KAAK,GAAG,CACpB,kBAAkB;AACpB,MAAI,CAAC,IAAK;EACV,MAAM,OAAgC;GAAE,GAAG,KAAK,MAAM,IAAI,KAAK;GAAE,GAAG;GAAO;AAC3E,QAAM,KAAK,GACT,YAAY,YAAY,CACxB,IAAI,EAAE,MAAM,KAAK,UAAU,KAAK,EAAE,CAAC,CACnC,MAAM,MAAM,KAAK,GAAG,CACpB,SAAS;;;;;;;;CASZ,MAAM,YACL,YACA,SACA,UAA8B,EAAE,EACA;EAChC,IAAI,QAAQ,KAAK,GACf,WAAW,YAAY,CACvB,SAAS,SAAS,YAAY,sBAAsB,CACpD,UAAU,YAAY,CACtB,OAAO,CAAC,8BAA8B,4BAA4B,CAAC,CACnE,MAAM,wBAAwB,KAAK,WAAW,CAC9C,MAAM,sBAAsB,KAAK,QAAQ,CACzC,QAAQ,gBAAgB,OAAO;AAEjC,MAAI,QAAQ,MACX,SAAQ,MAAM,MAAM,QAAQ,MAAM;EAGnC,MAAM,OAAO,MAAM,MAAM,SAAS;EAClC,MAAM,OAAO,MAAM,KAAK,UAAU,kBACjC,YACA,KAAK,KAAK,QAAQ,KAAK,MAAM,IAAI,KAAK,CAAC,CACvC;AACD,SAAO,KAAK,KAAK,KAAK,UAAU;GAC/B,MAAM,aAAa,KAAK;AACxB,OAAI,CAAC,WAAY,OAAM,IAAI,MAAM,oCAAoC;AACrE,UAAO;IACN,GAAG,KAAK,cAAc,KAAK,WAAW;IACtC,QAAQ,IAAI,iBACT;KAAE,IAAI,IAAI;KAAgB,MAAM,IAAI,aAAa,MAAM,IAAI;KAAM,GACjE;IACH;IACA;;;CAIH,MAAM,mBACL,YACA,SACA,UAA8B,EAAE,EACV;AACtB,qBAAmB,YAAY,aAAa;EAC5C,MAAM,YAAY,MAAM;EACxB,MAAM,QAAQ,uBAAuB,QAAQ,MAAM;EACnD,MAAM,SAAS,MAAM,GAA8B;;kCAEnB,WAAW;8BACf,QAAQ;;oBAElB,IAAI,IAAI,UAAU,CAAC;yBACd,QAAQ;;;;WAItB,MAAM;IACb,QAAQ,KAAK,GAAG;EAClB,MAAM,OAAO,MAAM,KAAK,UAAU,kBACjC,YACA,OAAO,KAAK,KAAK,QAAQ,KAAK,MAAM,IAAI,KAAK,CAAC,CAC9C;AACD,SAAO,OAAO,KAAK,KAAK,KAAK,UAAU;GACtC,MAAM,aAAa,KAAK;AACxB,OAAI,CAAC,WAAY,OAAM,IAAI,MAAM,oCAAoC;AACrE,UAAO,KAAK,cAAc,KAAK,WAAW;IACzC;;;CAIH,MAAM,gBACL,YACA,SACA,YAC2B;AAC3B,qBAAmB,YAAY,aAAa;EAC5C,MAAM,YAAY,MAAM;EAaxB,MAAM,OAZS,MAAM,GAA8B;;0BAE3B,WAAW;gCACL,WAAW;8BACb,QAAQ;;oBAElB,IAAI,IAAI,UAAU,CAAC;yBACd,QAAQ;;;;IAI7B,QAAQ,KAAK,GAAG,EACC,KAAK;AACxB,SAAO,MAAM,KAAK,aAAa,IAAI,GAAG;;;;;CAMvC,MAAM,WAAW,YAAoB,SAA2C;EAC/E,MAAM,MAAM,MAAM,KAAK,GACrB,WAAW,YAAY,CACvB,WAAW,CACX,MAAM,cAAc,KAAK,WAAW,CACpC,MAAM,YAAY,KAAK,QAAQ,CAC/B,QAAQ,MAAM,OAAO,CACrB,MAAM,EAAE,CACR,kBAAkB;AAEpB,SAAO,MAAM,KAAK,aAAa,IAAI,GAAG;;;;;CAMvC,MAAM,aAAa,YAAoB,SAAkC;EACxE,MAAM,SAAS,MAAM,KAAK,GACxB,WAAW,YAAY,CACvB,QAAQ,OAAO,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,QAAQ,CAAC,CAC7C,MAAM,cAAc,KAAK,WAAW,CACpC,MAAM,YAAY,KAAK,QAAQ,CAC/B,kBAAkB;AAEpB,SAAO,OAAO,QAAQ,SAAS,EAAE;;;;;CAMlC,MAAM,cAAc,YAAoB,SAAkC;EACzE,MAAM,SAAS,MAAM,KAAK,GACxB,WAAW,YAAY,CACvB,MAAM,cAAc,KAAK,WAAW,CACpC,MAAM,YAAY,KAAK,QAAQ,CAC/B,kBAAkB;AAEpB,MAAI;AACH,SAAM,KAAK,GACT,WAAW,+BAA+B,CAC1C,MAAM,cAAc,KAAK,WAAW,CACpC,MAAM,YAAY,KAAK,QAAQ,CAC/B,SAAS;WACH,OAAO;AACf,WAAQ,MACP,2DAA2D,WAAW,GAAG,QAAQ,IACjF,MACA;;AAGF,SAAO,OAAO,OAAO,kBAAkB,EAAE;;;;;CAM1C,MAAM,kBACL,YACA,SACA,WACA,mBACkB;AAClB,qBAAmB,YAAY,aAAa;EAC5C,MAAM,YAAY,MAAM;EACxB,IAAI,YAAY,KAAK,GACnB,WAAW,YAAY,CACvB,OAAO,KAAK,CACZ,MAAM,cAAc,KAAK,WAAW,CACpC,MAAM,YAAY,KAAK,QAAQ,CAC/B,QAAQ,cAAc,OAAO,CAC7B,QAAQ,MAAM,OAAO,CACrB,MAAM,UAAU;AAElB,MAAI,kBACH,aAAY,UAAU,MAAM,MAAM,MAAM,kBAAkB;EAK3D,MAAM,WAFO,MAAM,UAAU,SAAS,EAEjB,KAAK,MAAM,EAAE,GAAG;AAErC,MAAI,QAAQ,WAAW,EAAG,QAAO;EAGjC,MAAM,SAAS,MAAM,GAAG;;wBAEF,WAAW;oBACf,QAAQ;KALD,oBAAoB,GAAG,aAAa,sBAAsB,GAAG,GAMlE;oBACF,IAAI,KAAK,QAAQ,KAAK,OAAO,GAAG,GAAG,KAAK,CAAC,CAAC;;oBAE1C,IAAI,IAAI,UAAU,CAAC;;;;IAInC,QAAQ,KAAK,GAAG;AAElB,SAAO,OAAO,OAAO,mBAAmB,EAAE;;CAG3C,MAAM,iBACL,YACA,SACA,kBACA,WACkB;EAClB,MAAM,SAAS,MAAM,KAAK,kBAAkB,YAAY,SAAS,WAAW,iBAAiB;AAC7F,QAAM,KAAK,GACT,WAAW,+BAA+B,CAC1C,MAAM,cAAc,KAAK,WAAW,CACpC,MAAM,YAAY,KAAK,QAAQ,CAC/B,MAAM,eAAe,KAAK,iBAAiB,CAC3C,SAAS;AACX,SAAO;;CAGR,MAAM,qBACL,YACA,SACA,YACmB;AACnB,qBAAmB,YAAY,aAAa;EAC5C,MAAM,YAAY,MAAM;AAYxB,WAXe,MAAM,GAAG;;gBAEV,WAAW;sBACL,WAAW;oBACb,QAAQ;;oBAER,IAAI,IAAI,UAAU,CAAC;;;;IAInC,QAAQ,KAAK,GAAG,EACH,mBAAmB,MAAM;;;;;CAMzC,MAAc,aAAa,KAOL;EACrB,MAAM,OAAO,MAAM,KAAK,UAAU,cAAc,IAAI,YAAY,KAAK,MAAM,IAAI,KAAK,CAAC;AACrF,SAAO,KAAK,cAAc,KAAK,KAAK;;CAGrC,AAAQ,cACP,KAQA,MACW;AACX,SAAO;GACN,IAAI,IAAI;GACR,YAAY,IAAI;GAChB,SAAS,IAAI;GACb;GACA,UAAU,IAAI;GACd,WAAW,IAAI;GACf"}
1	+ {"version":3,"file":"revision-Dx7Uth1X.mjs","names":[],"sources":["../src/database/content-datetime.ts","../src/database/repositories/revision.ts"],"sourcesContent":["import type { Kysely } from \"kysely\";\n\nimport {\n\tDatetimeNormalizationError,\n\tnormalizeContentDatetimes,\n\tnormalizeDatetime,\n\ttype DatetimeFieldDescriptor,\n} from \"../datetime-normalization.js\";\nimport { requestCached } from \"../request-cache.js\";\nimport { isStoragelessFieldRow, type FieldType, type RepeaterSubField } from \"../schema/types.js\";\nimport { isSafeUrlFieldWriteValue } from \"../utils/url.js\";\nimport { EmDashValidationError } from \"./repositories/types.js\";\nimport type { Database } from \"./types.js\";\n\ninterface UrlFieldDescriptor {\n\tslug: string;\n\turlSubFields?: readonly string[];\n}\n\ninterface DatetimeContext {\n\ttimezone: string;\n\tfields: DatetimeFieldDescriptor[];\n\turlFields: UrlFieldDescriptor[];\n\twritableFieldSlugs: ReadonlySet<string>;\n}\n\nfunction repeaterSubFieldsOfType(validation: string \| null, type: FieldType): string[] {\n\tif (!validation) return [];\n\tlet parsed: unknown;\n\ttry {\n\t\tparsed = JSON.parse(validation);\n\t} catch {\n\t\treturn [];\n\t}\n\tif (typeof parsed !== \"object\" \|\| parsed === null \|\| !(\"subFields\" in parsed)) return [];\n\tconst subFields = (parsed as { subFields?: unknown }).subFields;\n\tif (!Array.isArray(subFields)) return [];\n\treturn subFields\n\t\t.filter(\n\t\t\t(field): field is RepeaterSubField =>\n\t\t\t\ttypeof field === \"object\" &&\n\t\t\t\tfield !== null &&\n\t\t\t\t\"type\" in field &&\n\t\t\t\tfield.type === type &&\n\t\t\t\t\"slug\" in field &&\n\t\t\t\ttypeof field.slug === \"string\",\n\t\t)\n\t\t.map((field) => field.slug);\n}\n\n/*\n Datetime contexts by collection slug, shared so that a bulk write reads each\n * collection's context once. A cached context doesn't see later writes to the\n * `site:timezone` setting or to field definitions, so share one only across\n * work that makes neither.\n /\nexport type DatetimeContextCache = Map<string, Promise<DatetimeContext>>;\n\nexport class ContentDatetimeNormalizer {\n\tconstructor(\n\t\tprivate readonly db: Kysely<Database>,\n\t\tprivate readonly contexts?: DatetimeContextCache,\n\t) {}\n\n\tprivate context(collection: string): Promise<DatetimeContext> {\n\t\tif (this.contexts) {\n\t\t\tlet context = this.contexts.get(collection);\n\t\t\tif (!context) {\n\t\t\t\tcontext = this.loadContext(collection);\n\t\t\t\tthis.contexts.set(collection, context);\n\t\t\t}\n\t\t\treturn context;\n\t\t}\n\t\t// Fall back to the per-request cache so repeated writes in the same\n\t\t// invocation (e.g. bulk imports) do not re-query field/timezone metadata\n\t\t// for every item.\n\t\treturn requestCached(`datetimeContext:${collection}`, () => this.loadContext(collection));\n\t}\n\n\tprivate async loadContext(collection: string): Promise<DatetimeContext> {\n\t\tconst [rows, timezoneRow] = await Promise.all([\n\t\t\tthis.db\n\t\t\t\t.selectFrom(\"_emdash_fields as field\")\n\t\t\t\t.innerJoin(\"_emdash_collections as collection\", \"collection.id\", \"field.collection_id\")\n\t\t\t\t.select([\"field.slug\", \"field.type\", \"field.validation\"])\n\t\t\t\t.where(\"collection.slug\", \"=\", collection)\n\t\t\t\t.execute(),\n\t\t\tthis.db\n\t\t\t\t.selectFrom(\"options\")\n\t\t\t\t.select(\"value\")\n\t\t\t\t.where(\"name\", \"=\", \"site:timezone\")\n\t\t\t\t.executeTakeFirst(),\n\t\t]);\n\t\tlet timezone = \"UTC\";\n\t\tif (timezoneRow) {\n\t\t\ttry {\n\t\t\t\tconst configured: unknown = JSON.parse(timezoneRow.value);\n\t\t\t\tif (typeof configured === \"string\" && configured) timezone = configured;\n\t\t\t} catch {\n\t\t\t\t// The datetime normalizer reports an invalid timezone when it encounters a value.\n\t\t\t}\n\t\t}\n\t\tconst fields: DatetimeFieldDescriptor[] = [];\n\t\tconst urlFields: UrlFieldDescriptor[] = [];\n\t\tfor (const row of rows) {\n\t\t\tif (row.type === \"datetime\") {\n\t\t\t\tfields.push({ slug: row.slug, type: \"datetime\" });\n\t\t\t} else if (row.type === \"url\") {\n\t\t\t\turlFields.push({ slug: row.slug });\n\t\t\t} else if (row.type === \"repeater\") {\n\t\t\t\tfields.push({\n\t\t\t\t\tslug: row.slug,\n\t\t\t\t\ttype: \"repeater\",\n\t\t\t\t\tdatetimeSubFields: repeaterSubFieldsOfType(row.validation, \"datetime\"),\n\t\t\t\t});\n\t\t\t\tconst urlSubFields = repeaterSubFieldsOfType(row.validation, \"url\");\n\t\t\t\tif (urlSubFields.length > 0) urlFields.push({ slug: row.slug, urlSubFields });\n\t\t\t}\n\t\t}\n\t\tconst writableFieldSlugs = new Set(\n\t\t\trows.filter((field) => !isStoragelessFieldRow(field)).map((field) => field.slug),\n\t\t);\n\t\treturn { timezone, fields, urlFields, writableFieldSlugs };\n\t}\n\n\tasync writableFieldSlugs(collection: string): Promise<ReadonlySet<string>> {\n\t\treturn (await this.context(collection)).writableFieldSlugs;\n\t}\n\n\t/\n\t Normalizes datetimes in incoming field values and rejects `url` values\n\t * with unsafe schemes, control characters, or off-site path forms. Values\n\t * already stored are not checked, so restoring or syncing existing data\n\t * goes through {@link normalizeData} instead.\n\t /\n\tasync normalizeInput(\n\t\tcollection: string,\n\t\tdata: Record<string, unknown>,\n\t): Promise<Record<string, unknown>> {\n\t\tconst context = await this.context(collection);\n\t\tassertSafeUrlFields(data, context.urlFields);\n\t\treturn this.normalizeWithContext(context, [data])[0] ?? data;\n\t}\n\n\tasync normalizeData(\n\t\tcollection: string,\n\t\tdata: Record<string, unknown>,\n\t): Promise<Record<string, unknown>> {\n\t\tconst [normalized] = await this.normalizeDataMany(collection, [data]);\n\t\treturn normalized ?? data;\n\t}\n\n\tasync normalizeDataMany(\n\t\tcollection: string,\n\t\titems: readonly Record<string, unknown>[],\n\t): Promise<Record<string, unknown>[]> {\n\t\treturn this.normalizeWithContext(await this.context(collection), items);\n\t}\n\n\tprivate normalizeWithContext(\n\t\tcontext: DatetimeContext,\n\t\titems: readonly Record<string, unknown>[],\n\t): Record<string, unknown>[] {\n\t\ttry {\n\t\t\treturn items.map(\n\t\t\t\t(data) => normalizeContentDatetimes(data, context.fields, context.timezone).value,\n\t\t\t);\n\t\t} catch (error) {\n\t\t\tif (error instanceof DatetimeNormalizationError) {\n\t\t\t\tthrow new EmDashValidationError(error.message);\n\t\t\t}\n\t\t\tthrow error;\n\t\t}\n\t}\n\n\tasync normalizeValue(collection: string, value: string \| Date): Promise<string> {\n\t\tconst context = await this.context(collection);\n\t\ttry {\n\t\t\treturn normalizeDatetime(value, context.timezone).value;\n\t\t} catch (error) {\n\t\t\tif (error instanceof DatetimeNormalizationError) {\n\t\t\t\tthrow new EmDashValidationError(error.message);\n\t\t\t}\n\t\t\tthrow error;\n\t\t}\n\t}\n}\n\nfunction isRecord(value: unknown): value is Record<string, unknown> {\n\treturn typeof value === \"object\" && value !== null && !Array.isArray(value);\n}\n\n// Reads parse a stored string that looks like JSON, so a repeater written as a JSON string\n// comes back as rows and must be checked as rows.\nfunction repeaterRows(value: unknown): unknown[] \| undefined {\n\tlet rows = value;\n\tif (typeof rows === \"string\" && rows.startsWith(\"[\")) {\n\t\ttry {\n\t\t\trows = JSON.parse(rows);\n\t\t} catch {\n\t\t\treturn undefined;\n\t\t}\n\t}\n\treturn Array.isArray(rows) ? rows : undefined;\n}\n\nfunction assertSafeUrl(path: string, value: unknown): void {\n\tif (typeof value === \"string\" && !isSafeUrlFieldWriteValue(value)) {\n\t\tthrow new EmDashValidationError(\n\t\t\t`Field \"${path}\" must use http, https, mailto, or tel, or be a safe relative path or fragment`,\n\t\t\t{ path },\n\t\t);\n\t}\n}\n\nfunction assertSafeUrlFields(\n\tdata: Record<string, unknown>,\n\turlFields: readonly UrlFieldDescriptor[],\n): void {\n\tfor (const field of urlFields) {\n\t\tconst value = data[field.slug];\n\t\tif (!field.urlSubFields) {\n\t\t\tassertSafeUrl(field.slug, value);\n\t\t\tcontinue;\n\t\t}\n\t\tconst rows = repeaterRows(value);\n\t\tif (!rows) continue;\n\t\tfor (const [index, row] of rows.entries()) {\n\t\t\tif (!isRecord(row)) continue;\n\t\t\tfor (const subField of field.urlSubFields) {\n\t\t\t\tassertSafeUrl(`${field.slug}.${index}.${subField}`, row[subField]);\n\t\t\t}\n\t\t}\n\t}\n}\n","import { sql, type Kysely, type Selectable } from \"kysely\";\nimport { monotonicFactory } from \"ulidx\";\n\nimport { ContentDatetimeNormalizer, type DatetimeContextCache } from \"../content-datetime.js\";\nimport type { Database, RevisionTable } from \"../types.js\";\nimport { validateIdentifier } from \"../validate.js\";\n\nconst monotonic = monotonicFactory();\n\nexport function createRevisionId(): string {\n\treturn monotonic();\n}\n\nexport interface Revision {\n\tid: string;\n\tcollection: string;\n\tentryId: string;\n\tdata: Record<string, unknown>;\n\tauthorId: string \| null;\n\tcreatedAt: string;\n}\n\nexport interface RevisionAuthor {\n\tid: string;\n\t/* `null` when the account has no display name. /\n\tname: string \| null;\n}\n\nexport interface RevisionWithAuthor extends Revision {\n\t/* `null` when no author was recorded or the account no longer exists. /\n\tauthor: RevisionAuthor \| null;\n}\n\nexport interface CreateRevisionInput {\n\tcollection: string;\n\tentryId: string;\n\tdata: Record<string, unknown>;\n\tauthorId?: string;\n}\n\nexport function normalizeRevisionLimit(value: unknown): number {\n\tconst numeric = Number(value);\n\tif (!Number.isFinite(numeric)) return 50;\n\treturn Math.max(1, Math.min(Math.trunc(numeric), 100));\n}\n\n/\n Revision repository for version history\n \n Each revision stores a JSON snapshot of the content at a point in time.\n * Used when collection has `supports: [\"revisions\"]` enabled.\n /\nexport class RevisionRepository {\n\tprivate readonly datetimes: ContentDatetimeNormalizer;\n\n\tconstructor(\n\t\tprivate db: Kysely<Database>,\n\t\tdatetimeContexts?: DatetimeContextCache,\n\t) {\n\t\tthis.datetimes = new ContentDatetimeNormalizer(db, datetimeContexts);\n\t}\n\n\t/\n\t Create a new revision\n\t /\n\tasync create(input: CreateRevisionInput): Promise<Revision> {\n\t\tconst id = createRevisionId();\n\t\tconst data = await this.datetimes.normalizeData(input.collection, input.data);\n\n\t\tconst row: Omit<RevisionTable, \"created_at\"> = {\n\t\t\tid,\n\t\t\tcollection: input.collection,\n\t\t\tentry_id: input.entryId,\n\t\t\tdata: JSON.stringify(data),\n\t\t\tauthor_id: input.authorId ?? null,\n\t\t};\n\n\t\tawait this.db.insertInto(\"revisions\").values(row).execute();\n\n\t\tconst revision = await this.findById(id);\n\t\tif (!revision) {\n\t\t\tthrow new Error(\"Failed to create revision\");\n\t\t}\n\n\t\tawait this.queuePruning(input.collection, input.entryId, id);\n\n\t\treturn revision;\n\t}\n\n\tasync queuePruning(collection: string, entryId: string, revisionId: string): Promise<void> {\n\t\ttry {\n\t\t\tawait this.db\n\t\t\t\t.insertInto(\"_emdash_revision_prune_queue\")\n\t\t\t\t.values({\n\t\t\t\t\tcollection,\n\t\t\t\t\tentry_id: entryId,\n\t\t\t\t\trevision_id: revisionId,\n\t\t\t\t})\n\t\t\t\t.onConflict((conflict) =>\n\t\t\t\t\tconflict.columns([\"collection\", \"entry_id\"]).doUpdateSet({ revision_id: revisionId }),\n\t\t\t\t)\n\t\t\t\t.execute();\n\t\t} catch (error) {\n\t\t\tconsole.error(\n\t\t\t\t`[revisions] Failed to queue revision pruning for ${collection}/${entryId}:`,\n\t\t\t\terror,\n\t\t\t);\n\t\t}\n\t}\n\n\t/\n\t Find revision by ID\n\t /\n\tasync findById(id: string): Promise<Revision \| null> {\n\t\tconst row = await this.db\n\t\t\t.selectFrom(\"revisions\")\n\t\t\t.selectAll()\n\t\t\t.where(\"id\", \"=\", id)\n\t\t\t.executeTakeFirst();\n\n\t\treturn row ? this.normalizeRow(row) : null;\n\t}\n\n\t/* Shallow-merge `patch` into a stored revision's data. /\n\tasync mergeData(id: string, patch: Record<string, unknown>): Promise<void> {\n\t\tconst row = await this.db\n\t\t\t.selectFrom(\"revisions\")\n\t\t\t.select(\"data\")\n\t\t\t.where(\"id\", \"=\", id)\n\t\t\t.executeTakeFirst();\n\t\tif (!row) return;\n\t\tconst data: Record<string, unknown> = { ...JSON.parse(row.data), ...patch };\n\t\tawait this.db\n\t\t\t.updateTable(\"revisions\")\n\t\t\t.set({ data: JSON.stringify(data) })\n\t\t\t.where(\"id\", \"=\", id)\n\t\t\t.execute();\n\t}\n\n\t/\n\t Get all revisions for an entry (newest first)\n\t \n\t Orders by monotonic ULID (descending). The monotonic factory\n\t * guarantees strictly increasing IDs even within the same millisecond.\n\t /\n\tasync findByEntry(\n\t\tcollection: string,\n\t\tentryId: string,\n\t\toptions: { limit?: number } = {},\n\t): Promise<RevisionWithAuthor[]> {\n\t\tlet query = this.db\n\t\t\t.selectFrom(\"revisions\")\n\t\t\t.leftJoin(\"users\", \"users.id\", \"revisions.author_id\")\n\t\t\t.selectAll(\"revisions\")\n\t\t\t.select([\"users.id as author_user_id\", \"users.name as author_name\"])\n\t\t\t.where(\"revisions.collection\", \"=\", collection)\n\t\t\t.where(\"revisions.entry_id\", \"=\", entryId)\n\t\t\t.orderBy(\"revisions.id\", \"desc\");\n\n\t\tif (options.limit) {\n\t\t\tquery = query.limit(options.limit);\n\t\t}\n\n\t\tconst rows = await query.execute();\n\t\tconst data = await this.datetimes.normalizeDataMany(\n\t\t\tcollection,\n\t\t\trows.map((row) => JSON.parse(row.data)),\n\t\t);\n\t\treturn rows.map((row, index) => {\n\t\t\tconst normalized = data[index];\n\t\t\tif (!normalized) throw new Error(\"Failed to normalize revision data\");\n\t\t\treturn {\n\t\t\t\t...this.rowToRevision(row, normalized),\n\t\t\t\tauthor: row.author_user_id\n\t\t\t\t\t? { id: row.author_user_id, name: row.author_name?.trim() \|\| null }\n\t\t\t\t\t: null,\n\t\t\t};\n\t\t});\n\t}\n\n\t/* Read revisions only when the owning content row is visible in the same statement snapshot. /\n\tasync findVisibleByEntry(\n\t\tcollection: string,\n\t\tentryId: string,\n\t\toptions: { limit?: number } = {},\n\t): Promise<Revision[]> {\n\t\tvalidateIdentifier(collection, \"collection\");\n\t\tconst tableName = `ec_${collection}`;\n\t\tconst limit = normalizeRevisionLimit(options.limit);\n\t\tconst result = await sql<Selectable<RevisionTable>>`\n\t\t\tSELECT revisions. FROM revisions\n\t\t\tWHERE revisions.collection = ${collection}\n\t\t\tAND revisions.entry_id = ${entryId}\n\t\t\tAND EXISTS (\n\t\t\t\tSELECT 1 FROM ${sql.ref(tableName)} AS content\n\t\t\t\tWHERE content.id = ${entryId}\n\t\t\t\tAND content.deleted_at IS NULL\n\t\t\t)\n\t\t\tORDER BY revisions.id DESC\n\t\t\tLIMIT ${limit}\n\t\t`.execute(this.db);\n\t\tconst data = await this.datetimes.normalizeDataMany(\n\t\t\tcollection,\n\t\t\tresult.rows.map((row) => JSON.parse(row.data)),\n\t\t);\n\t\treturn result.rows.map((row, index) => {\n\t\t\tconst normalized = data[index];\n\t\t\tif (!normalized) throw new Error(\"Failed to normalize revision data\");\n\t\t\treturn this.rowToRevision(row, normalized);\n\t\t});\n\t}\n\n\t/** Read one revision only when its owning content row is visible in the same statement snapshot. /\n\tasync findVisibleById(\n\t\tcollection: string,\n\t\tentryId: string,\n\t\trevisionId: string,\n\t): Promise<Revision \| null> {\n\t\tvalidateIdentifier(collection, \"collection\");\n\t\tconst tableName = `ec_${collection}`;\n\t\tconst result = await sql<Selectable<RevisionTable>>`\n\t\t\tSELECT revisions. FROM revisions\n\t\t\tWHERE revisions.id = ${revisionId}\n\t\t\tAND revisions.collection = ${collection}\n\t\t\tAND revisions.entry_id = ${entryId}\n\t\t\tAND EXISTS (\n\t\t\t\tSELECT 1 FROM ${sql.ref(tableName)} AS content\n\t\t\t\tWHERE content.id = ${entryId}\n\t\t\t\tAND content.deleted_at IS NULL\n\t\t\t)\n\t\t\tLIMIT 1\n\t\t`.execute(this.db);\n\t\tconst row = result.rows[0];\n\t\treturn row ? this.normalizeRow(row) : null;\n\t}\n\n\t/*\n\t Get the most recent revision for an entry\n\t /\n\tasync findLatest(collection: string, entryId: string): Promise<Revision \| null> {\n\t\tconst row = await this.db\n\t\t\t.selectFrom(\"revisions\")\n\t\t\t.selectAll()\n\t\t\t.where(\"collection\", \"=\", collection)\n\t\t\t.where(\"entry_id\", \"=\", entryId)\n\t\t\t.orderBy(\"id\", \"desc\")\n\t\t\t.limit(1)\n\t\t\t.executeTakeFirst();\n\n\t\treturn row ? this.normalizeRow(row) : null;\n\t}\n\n\t/\n\t Count revisions for an entry\n\t /\n\tasync countByEntry(collection: string, entryId: string): Promise<number> {\n\t\tconst result = await this.db\n\t\t\t.selectFrom(\"revisions\")\n\t\t\t.select((eb) => eb.fn.count(\"id\").as(\"count\"))\n\t\t\t.where(\"collection\", \"=\", collection)\n\t\t\t.where(\"entry_id\", \"=\", entryId)\n\t\t\t.executeTakeFirst();\n\n\t\treturn Number(result?.count \|\| 0);\n\t}\n\n\t/\n\t Delete all revisions for an entry (use when entry is deleted)\n\t /\n\tasync deleteByEntry(collection: string, entryId: string): Promise<number> {\n\t\tconst result = await this.db\n\t\t\t.deleteFrom(\"revisions\")\n\t\t\t.where(\"collection\", \"=\", collection)\n\t\t\t.where(\"entry_id\", \"=\", entryId)\n\t\t\t.executeTakeFirst();\n\n\t\ttry {\n\t\t\tawait this.db\n\t\t\t\t.deleteFrom(\"_emdash_revision_prune_queue\")\n\t\t\t\t.where(\"collection\", \"=\", collection)\n\t\t\t\t.where(\"entry_id\", \"=\", entryId)\n\t\t\t\t.execute();\n\t\t} catch (error) {\n\t\t\tconsole.error(\n\t\t\t\t`[revisions] Failed to clear queued revision pruning for ${collection}/${entryId}:`,\n\t\t\t\terror,\n\t\t\t);\n\t\t}\n\n\t\treturn Number(result.numDeletedRows ?? 0);\n\t}\n\n\t/\n\t Delete old revisions, keeping the most recent N\n\t /\n\tasync pruneOldRevisions(\n\t\tcollection: string,\n\t\tentryId: string,\n\t\tkeepCount: number,\n\t\tthroughRevisionId?: string,\n\t): Promise<number> {\n\t\tvalidateIdentifier(collection, \"collection\");\n\t\tconst tableName = `ec_${collection}`;\n\t\tlet keepQuery = this.db\n\t\t\t.selectFrom(\"revisions\")\n\t\t\t.select(\"id\")\n\t\t\t.where(\"collection\", \"=\", collection)\n\t\t\t.where(\"entry_id\", \"=\", entryId)\n\t\t\t.orderBy(\"created_at\", \"desc\")\n\t\t\t.orderBy(\"id\", \"desc\") // ULID tiebreaker\n\t\t\t.limit(keepCount);\n\n\t\tif (throughRevisionId) {\n\t\t\tkeepQuery = keepQuery.where(\"id\", \"<=\", throughRevisionId);\n\t\t}\n\n\t\tconst keep = await keepQuery.execute();\n\n\t\tconst keepIds = keep.map((r) => r.id);\n\n\t\tif (keepIds.length === 0) return 0;\n\t\tconst revisionBoundary = throughRevisionId ? sql`AND id <= ${throughRevisionId}` : sql``;\n\n\t\tconst result = await sql`\n\t\t\tDELETE FROM revisions\n\t\t\tWHERE collection = ${collection}\n\t\t\tAND entry_id = ${entryId}\n\t\t\t${revisionBoundary}\n\t\t\tAND id NOT IN (${sql.join(keepIds.map((id) => sql`${id}`))})\n\t\t\tAND NOT EXISTS (\n\t\t\t\tSELECT 1 FROM ${sql.ref(tableName)} AS content\n\t\t\t\tWHERE content.live_revision_id = revisions.id\n\t\t\t\tOR content.draft_revision_id = revisions.id\n\t\t\t)\n\t\t`.execute(this.db);\n\n\t\treturn Number(result.numAffectedRows ?? 0);\n\t}\n\n\tasync pruneQueuedEntry(\n\t\tcollection: string,\n\t\tentryId: string,\n\t\tqueuedRevisionId: string,\n\t\tkeepCount: number,\n\t): Promise<number> {\n\t\tconst pruned = await this.pruneOldRevisions(collection, entryId, keepCount, queuedRevisionId);\n\t\tawait this.db\n\t\t\t.deleteFrom(\"_emdash_revision_prune_queue\")\n\t\t\t.where(\"collection\", \"=\", collection)\n\t\t\t.where(\"entry_id\", \"=\", entryId)\n\t\t\t.where(\"revision_id\", \"=\", queuedRevisionId)\n\t\t\t.execute();\n\t\treturn pruned;\n\t}\n\n\tasync deleteIfUnreferenced(\n\t\tcollection: string,\n\t\tentryId: string,\n\t\trevisionId: string,\n\t): Promise<boolean> {\n\t\tvalidateIdentifier(collection, \"collection\");\n\t\tconst tableName = `ec_${collection}`;\n\t\tconst result = await sql`\n\t\t\tDELETE FROM revisions\n\t\t\tWHERE id = ${revisionId}\n\t\t\tAND collection = ${collection}\n\t\t\tAND entry_id = ${entryId}\n\t\t\tAND NOT EXISTS (\n\t\t\t\tSELECT 1 FROM ${sql.ref(tableName)} AS content\n\t\t\t\tWHERE content.live_revision_id = revisions.id\n\t\t\t\tOR content.draft_revision_id = revisions.id\n\t\t\t)\n\t\t`.execute(this.db);\n\t\treturn (result.numAffectedRows ?? 0n) > 0n;\n\t}\n\n\t/\n\t Convert database row to Revision object\n\t */\n\tprivate async normalizeRow(row: {\n\t\tid: string;\n\t\tcollection: string;\n\t\tentry_id: string;\n\t\tdata: string;\n\t\tauthor_id: string \| null;\n\t\tcreated_at: string;\n\t}): Promise<Revision> {\n\t\tconst data = await this.datetimes.normalizeData(row.collection, JSON.parse(row.data));\n\t\treturn this.rowToRevision(row, data);\n\t}\n\n\tprivate rowToRevision(\n\t\trow: {\n\t\t\tid: string;\n\t\t\tcollection: string;\n\t\t\tentry_id: string;\n\t\t\tdata: string;\n\t\t\tauthor_id: string \| null;\n\t\t\tcreated_at: string;\n\t\t},\n\t\tdata: Record<string, unknown>,\n\t): Revision {\n\t\treturn {\n\t\t\tid: row.id,\n\t\t\tcollection: row.collection,\n\t\t\tentryId: row.entry_id,\n\t\t\tdata,\n\t\t\tauthorId: row.author_id,\n\t\t\tcreatedAt: row.created_at,\n\t\t};\n\t}\n}\n"],"mappings":";;;;;;;;;;AA0BA,SAAS,wBAAwB,YAA2B,MAA2B;AACtF,KAAI,CAAC,WAAY,QAAO,EAAE;CAC1B,IAAI;AACJ,KAAI;AACH,WAAS,KAAK,MAAM,WAAW;SACxB;AACP,SAAO,EAAE;;AAEV,KAAI,OAAO,WAAW,YAAY,WAAW,QAAQ,EAAE,eAAe,QAAS,QAAO,EAAE;CACxF,MAAM,YAAa,OAAmC;AACtD,KAAI,CAAC,MAAM,QAAQ,UAAU,CAAE,QAAO,EAAE;AACxC,QAAO,UACL,QACC,UACA,OAAO,UAAU,YACjB,UAAU,QACV,UAAU,SACV,MAAM,SAAS,QACf,UAAU,SACV,OAAO,MAAM,SAAS,SACvB,CACA,KAAK,UAAU,MAAM,KAAK;;AAW7B,IAAa,4BAAb,MAAuC;CACtC,YACC,AAAiB,IACjB,AAAiB,UAChB;EAFgB;EACA;;CAGlB,AAAQ,QAAQ,YAA8C;AAC7D,MAAI,KAAK,UAAU;GAClB,IAAI,UAAU,KAAK,SAAS,IAAI,WAAW;AAC3C,OAAI,CAAC,SAAS;AACb,cAAU,KAAK,YAAY,WAAW;AACtC,SAAK,SAAS,IAAI,YAAY,QAAQ;;AAEvC,UAAO;;AAKR,SAAO,cAAc,mBAAmB,oBAAoB,KAAK,YAAY,WAAW,CAAC;;CAG1F,MAAc,YAAY,YAA8C;EACvE,MAAM,CAAC,MAAM,eAAe,MAAM,QAAQ,IAAI,CAC7C,KAAK,GACH,WAAW,0BAA0B,CACrC,UAAU,qCAAqC,iBAAiB,sBAAsB,CACtF,OAAO;GAAC;GAAc;GAAc;GAAmB,CAAC,CACxD,MAAM,mBAAmB,KAAK,WAAW,CACzC,SAAS,EACX,KAAK,GACH,WAAW,UAAU,CACrB,OAAO,QAAQ,CACf,MAAM,QAAQ,KAAK,gBAAgB,CACnC,kBAAkB,CACpB,CAAC;EACF,IAAI,WAAW;AACf,MAAI,YACH,KAAI;GACH,MAAM,aAAsB,KAAK,MAAM,YAAY,MAAM;AACzD,OAAI,OAAO,eAAe,YAAY,WAAY,YAAW;UACtD;EAIT,MAAM,SAAoC,EAAE;EAC5C,MAAM,YAAkC,EAAE;AAC1C,OAAK,MAAM,OAAO,KACjB,KAAI,IAAI,SAAS,WAChB,QAAO,KAAK;GAAE,MAAM,IAAI;GAAM,MAAM;GAAY,CAAC;WACvC,IAAI,SAAS,MACvB,WAAU,KAAK,EAAE,MAAM,IAAI,MAAM,CAAC;WACxB,IAAI,SAAS,YAAY;AACnC,UAAO,KAAK;IACX,MAAM,IAAI;IACV,MAAM;IACN,mBAAmB,wBAAwB,IAAI,YAAY,WAAW;IACtE,CAAC;GACF,MAAM,eAAe,wBAAwB,IAAI,YAAY,MAAM;AACnE,OAAI,aAAa,SAAS,EAAG,WAAU,KAAK;IAAE,MAAM,IAAI;IAAM;IAAc,CAAC;;EAG/E,MAAM,qBAAqB,IAAI,IAC9B,KAAK,QAAQ,UAAU,CAAC,sBAAsB,MAAM,CAAC,CAAC,KAAK,UAAU,MAAM,KAAK,CAChF;AACD,SAAO;GAAE;GAAU;GAAQ;GAAW;GAAoB;;CAG3D,MAAM,mBAAmB,YAAkD;AAC1E,UAAQ,MAAM,KAAK,QAAQ,WAAW,EAAE;;;;;;;;CASzC,MAAM,eACL,YACA,MACmC;EACnC,MAAM,UAAU,MAAM,KAAK,QAAQ,WAAW;AAC9C,sBAAoB,MAAM,QAAQ,UAAU;AAC5C,SAAO,KAAK,qBAAqB,SAAS,CAAC,KAAK,CAAC,CAAC,MAAM;;CAGzD,MAAM,cACL,YACA,MACmC;EACnC,MAAM,CAAC,cAAc,MAAM,KAAK,kBAAkB,YAAY,CAAC,KAAK,CAAC;AACrE,SAAO,cAAc;;CAGtB,MAAM,kBACL,YACA,OACqC;AACrC,SAAO,KAAK,qBAAqB,MAAM,KAAK,QAAQ,WAAW,EAAE,MAAM;;CAGxE,AAAQ,qBACP,SACA,OAC4B;AAC5B,MAAI;AACH,UAAO,MAAM,KACX,SAAS,0BAA0B,MAAM,QAAQ,QAAQ,QAAQ,SAAS,CAAC,MAC5E;WACO,OAAO;AACf,OAAI,iBAAiB,2BACpB,OAAM,IAAI,sBAAsB,MAAM,QAAQ;AAE/C,SAAM;;;CAIR,MAAM,eAAe,YAAoB,OAAuC;EAC/E,MAAM,UAAU,MAAM,KAAK,QAAQ,WAAW;AAC9C,MAAI;AACH,UAAO,kBAAkB,OAAO,QAAQ,SAAS,CAAC;WAC1C,OAAO;AACf,OAAI,iBAAiB,2BACpB,OAAM,IAAI,sBAAsB,MAAM,QAAQ;AAE/C,SAAM;;;;AAKT,SAAS,SAAS,OAAkD;AACnE,QAAO,OAAO,UAAU,YAAY,UAAU,QAAQ,CAAC,MAAM,QAAQ,MAAM;;AAK5E,SAAS,aAAa,OAAuC;CAC5D,IAAI,OAAO;AACX,KAAI,OAAO,SAAS,YAAY,KAAK,WAAW,IAAI,CACnD,KAAI;AACH,SAAO,KAAK,MAAM,KAAK;SAChB;AACP;;AAGF,QAAO,MAAM,QAAQ,KAAK,GAAG,OAAO;;AAGrC,SAAS,cAAc,MAAc,OAAsB;AAC1D,KAAI,OAAO,UAAU,YAAY,CAAC,yBAAyB,MAAM,CAChE,OAAM,IAAI,sBACT,UAAU,KAAK,iFACf,EAAE,MAAM,CACR;;AAIH,SAAS,oBACR,MACA,WACO;AACP,MAAK,MAAM,SAAS,WAAW;EAC9B,MAAM,QAAQ,KAAK,MAAM;AACzB,MAAI,CAAC,MAAM,cAAc;AACxB,iBAAc,MAAM,MAAM,MAAM;AAChC;;EAED,MAAM,OAAO,aAAa,MAAM;AAChC,MAAI,CAAC,KAAM;AACX,OAAK,MAAM,CAAC,OAAO,QAAQ,KAAK,SAAS,EAAE;AAC1C,OAAI,CAAC,SAAS,IAAI,CAAE;AACpB,QAAK,MAAM,YAAY,MAAM,aAC5B,eAAc,GAAG,MAAM,KAAK,GAAG,MAAM,GAAG,YAAY,IAAI,UAAU;;;;;;;AC/NtE,MAAM,YAAY,kBAAkB;AAEpC,SAAgB,mBAA2B;AAC1C,QAAO,WAAW;;AA8BnB,SAAgB,uBAAuB,OAAwB;CAC9D,MAAM,UAAU,OAAO,MAAM;AAC7B,KAAI,CAAC,OAAO,SAAS,QAAQ,CAAE,QAAO;AACtC,QAAO,KAAK,IAAI,GAAG,KAAK,IAAI,KAAK,MAAM,QAAQ,EAAE,IAAI,CAAC;;;;;;;;AASvD,IAAa,qBAAb,MAAgC;CAC/B,AAAiB;CAEjB,YACC,AAAQ,IACR,kBACC;EAFO;AAGR,OAAK,YAAY,IAAI,0BAA0B,IAAI,iBAAiB;;;;;CAMrE,MAAM,OAAO,OAA+C;EAC3D,MAAM,KAAK,kBAAkB;EAC7B,MAAM,OAAO,MAAM,KAAK,UAAU,cAAc,MAAM,YAAY,MAAM,KAAK;EAE7E,MAAM,MAAyC;GAC9C;GACA,YAAY,MAAM;GAClB,UAAU,MAAM;GAChB,MAAM,KAAK,UAAU,KAAK;GAC1B,WAAW,MAAM,YAAY;GAC7B;AAED,QAAM,KAAK,GAAG,WAAW,YAAY,CAAC,OAAO,IAAI,CAAC,SAAS;EAE3D,MAAM,WAAW,MAAM,KAAK,SAAS,GAAG;AACxC,MAAI,CAAC,SACJ,OAAM,IAAI,MAAM,4BAA4B;AAG7C,QAAM,KAAK,aAAa,MAAM,YAAY,MAAM,SAAS,GAAG;AAE5D,SAAO;;CAGR,MAAM,aAAa,YAAoB,SAAiB,YAAmC;AAC1F,MAAI;AACH,SAAM,KAAK,GACT,WAAW,+BAA+B,CAC1C,OAAO;IACP;IACA,UAAU;IACV,aAAa;IACb,CAAC,CACD,YAAY,aACZ,SAAS,QAAQ,CAAC,cAAc,WAAW,CAAC,CAAC,YAAY,EAAE,aAAa,YAAY,CAAC,CACrF,CACA,SAAS;WACH,OAAO;AACf,WAAQ,MACP,oDAAoD,WAAW,GAAG,QAAQ,IAC1E,MACA;;;;;;CAOH,MAAM,SAAS,IAAsC;EACpD,MAAM,MAAM,MAAM,KAAK,GACrB,WAAW,YAAY,CACvB,WAAW,CACX,MAAM,MAAM,KAAK,GAAG,CACpB,kBAAkB;AAEpB,SAAO,MAAM,KAAK,aAAa,IAAI,GAAG;;;CAIvC,MAAM,UAAU,IAAY,OAA+C;EAC1E,MAAM,MAAM,MAAM,KAAK,GACrB,WAAW,YAAY,CACvB,OAAO,OAAO,CACd,MAAM,MAAM,KAAK,GAAG,CACpB,kBAAkB;AACpB,MAAI,CAAC,IAAK;EACV,MAAM,OAAgC;GAAE,GAAG,KAAK,MAAM,IAAI,KAAK;GAAE,GAAG;GAAO;AAC3E,QAAM,KAAK,GACT,YAAY,YAAY,CACxB,IAAI,EAAE,MAAM,KAAK,UAAU,KAAK,EAAE,CAAC,CACnC,MAAM,MAAM,KAAK,GAAG,CACpB,SAAS;;;;;;;;CASZ,MAAM,YACL,YACA,SACA,UAA8B,EAAE,EACA;EAChC,IAAI,QAAQ,KAAK,GACf,WAAW,YAAY,CACvB,SAAS,SAAS,YAAY,sBAAsB,CACpD,UAAU,YAAY,CACtB,OAAO,CAAC,8BAA8B,4BAA4B,CAAC,CACnE,MAAM,wBAAwB,KAAK,WAAW,CAC9C,MAAM,sBAAsB,KAAK,QAAQ,CACzC,QAAQ,gBAAgB,OAAO;AAEjC,MAAI,QAAQ,MACX,SAAQ,MAAM,MAAM,QAAQ,MAAM;EAGnC,MAAM,OAAO,MAAM,MAAM,SAAS;EAClC,MAAM,OAAO,MAAM,KAAK,UAAU,kBACjC,YACA,KAAK,KAAK,QAAQ,KAAK,MAAM,IAAI,KAAK,CAAC,CACvC;AACD,SAAO,KAAK,KAAK,KAAK,UAAU;GAC/B,MAAM,aAAa,KAAK;AACxB,OAAI,CAAC,WAAY,OAAM,IAAI,MAAM,oCAAoC;AACrE,UAAO;IACN,GAAG,KAAK,cAAc,KAAK,WAAW;IACtC,QAAQ,IAAI,iBACT;KAAE,IAAI,IAAI;KAAgB,MAAM,IAAI,aAAa,MAAM,IAAI;KAAM,GACjE;IACH;IACA;;;CAIH,MAAM,mBACL,YACA,SACA,UAA8B,EAAE,EACV;AACtB,qBAAmB,YAAY,aAAa;EAC5C,MAAM,YAAY,MAAM;EACxB,MAAM,QAAQ,uBAAuB,QAAQ,MAAM;EACnD,MAAM,SAAS,MAAM,GAA8B;;kCAEnB,WAAW;8BACf,QAAQ;;oBAElB,IAAI,IAAI,UAAU,CAAC;yBACd,QAAQ;;;;WAItB,MAAM;IACb,QAAQ,KAAK,GAAG;EAClB,MAAM,OAAO,MAAM,KAAK,UAAU,kBACjC,YACA,OAAO,KAAK,KAAK,QAAQ,KAAK,MAAM,IAAI,KAAK,CAAC,CAC9C;AACD,SAAO,OAAO,KAAK,KAAK,KAAK,UAAU;GACtC,MAAM,aAAa,KAAK;AACxB,OAAI,CAAC,WAAY,OAAM,IAAI,MAAM,oCAAoC;AACrE,UAAO,KAAK,cAAc,KAAK,WAAW;IACzC;;;CAIH,MAAM,gBACL,YACA,SACA,YAC2B;AAC3B,qBAAmB,YAAY,aAAa;EAC5C,MAAM,YAAY,MAAM;EAaxB,MAAM,OAZS,MAAM,GAA8B;;0BAE3B,WAAW;gCACL,WAAW;8BACb,QAAQ;;oBAElB,IAAI,IAAI,UAAU,CAAC;yBACd,QAAQ;;;;IAI7B,QAAQ,KAAK,GAAG,EACC,KAAK;AACxB,SAAO,MAAM,KAAK,aAAa,IAAI,GAAG;;;;;CAMvC,MAAM,WAAW,YAAoB,SAA2C;EAC/E,MAAM,MAAM,MAAM,KAAK,GACrB,WAAW,YAAY,CACvB,WAAW,CACX,MAAM,cAAc,KAAK,WAAW,CACpC,MAAM,YAAY,KAAK,QAAQ,CAC/B,QAAQ,MAAM,OAAO,CACrB,MAAM,EAAE,CACR,kBAAkB;AAEpB,SAAO,MAAM,KAAK,aAAa,IAAI,GAAG;;;;;CAMvC,MAAM,aAAa,YAAoB,SAAkC;EACxE,MAAM,SAAS,MAAM,KAAK,GACxB,WAAW,YAAY,CACvB,QAAQ,OAAO,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,QAAQ,CAAC,CAC7C,MAAM,cAAc,KAAK,WAAW,CACpC,MAAM,YAAY,KAAK,QAAQ,CAC/B,kBAAkB;AAEpB,SAAO,OAAO,QAAQ,SAAS,EAAE;;;;;CAMlC,MAAM,cAAc,YAAoB,SAAkC;EACzE,MAAM,SAAS,MAAM,KAAK,GACxB,WAAW,YAAY,CACvB,MAAM,cAAc,KAAK,WAAW,CACpC,MAAM,YAAY,KAAK,QAAQ,CAC/B,kBAAkB;AAEpB,MAAI;AACH,SAAM,KAAK,GACT,WAAW,+BAA+B,CAC1C,MAAM,cAAc,KAAK,WAAW,CACpC,MAAM,YAAY,KAAK,QAAQ,CAC/B,SAAS;WACH,OAAO;AACf,WAAQ,MACP,2DAA2D,WAAW,GAAG,QAAQ,IACjF,MACA;;AAGF,SAAO,OAAO,OAAO,kBAAkB,EAAE;;;;;CAM1C,MAAM,kBACL,YACA,SACA,WACA,mBACkB;AAClB,qBAAmB,YAAY,aAAa;EAC5C,MAAM,YAAY,MAAM;EACxB,IAAI,YAAY,KAAK,GACnB,WAAW,YAAY,CACvB,OAAO,KAAK,CACZ,MAAM,cAAc,KAAK,WAAW,CACpC,MAAM,YAAY,KAAK,QAAQ,CAC/B,QAAQ,cAAc,OAAO,CAC7B,QAAQ,MAAM,OAAO,CACrB,MAAM,UAAU;AAElB,MAAI,kBACH,aAAY,UAAU,MAAM,MAAM,MAAM,kBAAkB;EAK3D,MAAM,WAFO,MAAM,UAAU,SAAS,EAEjB,KAAK,MAAM,EAAE,GAAG;AAErC,MAAI,QAAQ,WAAW,EAAG,QAAO;EAGjC,MAAM,SAAS,MAAM,GAAG;;wBAEF,WAAW;oBACf,QAAQ;KALD,oBAAoB,GAAG,aAAa,sBAAsB,GAAG,GAMlE;oBACF,IAAI,KAAK,QAAQ,KAAK,OAAO,GAAG,GAAG,KAAK,CAAC,CAAC;;oBAE1C,IAAI,IAAI,UAAU,CAAC;;;;IAInC,QAAQ,KAAK,GAAG;AAElB,SAAO,OAAO,OAAO,mBAAmB,EAAE;;CAG3C,MAAM,iBACL,YACA,SACA,kBACA,WACkB;EAClB,MAAM,SAAS,MAAM,KAAK,kBAAkB,YAAY,SAAS,WAAW,iBAAiB;AAC7F,QAAM,KAAK,GACT,WAAW,+BAA+B,CAC1C,MAAM,cAAc,KAAK,WAAW,CACpC,MAAM,YAAY,KAAK,QAAQ,CAC/B,MAAM,eAAe,KAAK,iBAAiB,CAC3C,SAAS;AACX,SAAO;;CAGR,MAAM,qBACL,YACA,SACA,YACmB;AACnB,qBAAmB,YAAY,aAAa;EAC5C,MAAM,YAAY,MAAM;AAYxB,WAXe,MAAM,GAAG;;gBAEV,WAAW;sBACL,WAAW;oBACb,QAAQ;;oBAER,IAAI,IAAI,UAAU,CAAC;;;;IAInC,QAAQ,KAAK,GAAG,EACH,mBAAmB,MAAM;;;;;CAMzC,MAAc,aAAa,KAOL;EACrB,MAAM,OAAO,MAAM,KAAK,UAAU,cAAc,IAAI,YAAY,KAAK,MAAM,IAAI,KAAK,CAAC;AACrF,SAAO,KAAK,cAAc,KAAK,KAAK;;CAGrC,AAAQ,cACP,KAQA,MACW;AACX,SAAO;GACN,IAAI,IAAI;GACR,YAAY,IAAI;GAChB,SAAS,IAAI;GACb;GACA,UAAU,IAAI;GACd,WAAW,IAAI;GACf"}

package/dist/{routes-BerZFrvV.mjs → routes-avqgc-8r.mjs} RENAMED Viewed

@@ -1,5 +1,5 @@
-import { m as isPluginRouteError, t as PluginContextFactory } from "./context-BYptmCN0.mjs";
-import { t as SiteWriteBlockedError } from "./fence-C3MUitUN.mjs";
+import { m as isPluginRouteError, t as PluginContextFactory } from "./context-CzjejcsE.mjs";
+import { t as SiteWriteBlockedError } from "./fence-Dagicj14.mjs";
 import { t as extractRequestMeta } from "./request-meta-bwZ_NsvU.mjs";
 import { n as parseDeclaredPluginRouteInput } from "./route-wire-Ca_HWCZ5.mjs";
 import { z } from "zod";
@@ -269,4 +269,4 @@ var PluginRouteRegistry = class {
 //#endregion
 export { toRouteCallerInfo as a, pluginPublicRouteAcknowledgementSchema as i, buildRouteMeta as n, parseRouteInput as r, PluginRouteRegistry as t };
-//# sourceMappingURL=routes-BerZFrvV.mjs.map
+//# sourceMappingURL=routes-avqgc-8r.mjs.map

package/dist/{routes-BerZFrvV.mjs.map → routes-avqgc-8r.mjs.map} RENAMED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"routes-BerZFrvV.mjs","names":[],"sources":["../src/plugins/routes.ts"],"sourcesContent":["/*\n Plugin Routes v2\n \n Handles plugin API route invocation with:\n * - Input validation via Zod schemas\n * - Route context creation\n * - Error handling\n \n /\n\nimport type { PluginUiContext } from \"@emdash-cms/blocks/server\";\nimport type {\n\tPluginRouteMethod,\n\tPluginRouteRequest,\n\tPluginRouteResponseMode,\n} from \"@emdash-cms/plugin-types\";\nimport { routeNameSchema } from \"@emdash-cms/plugin-types\";\nimport { z } from \"zod\";\n\nimport { SiteWriteBlockedError } from \"../transfer/fence.js\";\nimport { PluginContextFactory, type PluginContextFactoryOptions } from \"./context.js\";\nimport { extractRequestMeta } from \"./request-meta.js\";\nimport { isPluginRouteError, PluginRouteError } from \"./route-error.js\";\nimport { parseDeclaredPluginRouteInput } from \"./route-wire.js\";\nimport type { ResolvedPlugin, RouteContext, PluginRoute, UserInfo } from \"./types.js\";\n\nexport { PluginRouteError };\n\n/*\n Body-reading methods on `Request`. EmDash parses the request body once before\n * the handler runs and exposes the result as `ctx.input`, leaving the underlying\n * stream consumed. Calling any of these on `ctx.request` would re-read a spent\n * stream and throw an opaque platform error (\"Body is unusable: Body has already\n * been read\") with no hint about `ctx.input` — so the guard replaces them with an\n * actionable message instead.\n /\nconst CONSUMED_BODY_METHODS = new Set([\"json\", \"text\", \"arrayBuffer\", \"blob\", \"formData\", \"bytes\"]);\n\n/\n Wrap the request handed to a plugin route handler so an accidental\n * `ctx.request.json()` (or `.text()`, `.formData()`, …) fails with a message\n * pointing at `ctx.input` rather than the runtime's cryptic \"body already read\"\n * error. Every non-body member passes through unchanged; function members are\n * bound to the underlying request so methods like `clone()` don't throw an\n * \"Illegal invocation\" when called on the proxy.\n /\nfunction guardConsumedRequestBody(request: Request): Request {\n\treturn new Proxy(request, {\n\t\tget(target, prop) {\n\t\t\tif (typeof prop === \"string\" && CONSUMED_BODY_METHODS.has(prop)) {\n\t\t\t\treturn () => {\n\t\t\t\t\tthrow new Error(\n\t\t\t\t\t\t`[emdash] ctx.request.${prop}() is not available inside a plugin route handler: ` +\n\t\t\t\t\t\t\t`EmDash has already parsed the request body and exposes it as ctx.input. ` +\n\t\t\t\t\t\t\t`Read ctx.input instead of ctx.request.${prop}().`,\n\t\t\t\t\t);\n\t\t\t\t};\n\t\t\t}\n\t\t\tconst value = Reflect.get(target, prop, target);\n\t\t\treturn typeof value === \"function\" ? value.bind(target) : value;\n\t\t},\n\t});\n}\n\n/\n Route metadata (public flag) without the handler.\n * Used by the catch-all route to decide auth before dispatch.\n /\nexport interface RouteMeta {\n\tpublic: boolean;\n\tpermission?: string;\n\t/\n\t Cache-Control value for successful GET responses. Only ever set for\n\t * public routes — authenticated responses must stay `private, no-store`.\n\t /\n\tcacheControl?: string;\n\tmethods?: PluginRouteMethod[];\n\trequest?: PluginRouteRequest;\n\tresponse?: PluginRouteResponseMode;\n}\n\nexport const pluginPublicRouteAcknowledgementSchema = z.array(routeNameSchema);\n\nexport type PluginContentCacheInvalidator = (tags: string[]) => Promise<void>;\n\n/\n Build RouteMeta from a route's `public`/`cacheControl` flags. Single source\n * of truth for the \"cacheControl is only ever exposed on public routes\"\n * invariant — used for trusted routes and manifest-declared sandboxed routes.\n /\nexport function buildRouteMeta(route: {\n\tpublic?: boolean;\n\tpermission?: string;\n\tcacheControl?: string;\n\tmethods?: PluginRouteMethod[];\n\trequest?: PluginRouteRequest;\n\tresponse?: PluginRouteResponseMode;\n}): RouteMeta {\n\tconst meta: RouteMeta = { public: route.public === true };\n\tif (route.permission !== undefined) meta.permission = route.permission;\n\tif (route.methods !== undefined) meta.methods = [...route.methods];\n\tif (route.request !== undefined) {\n\t\tmeta.request = {\n\t\t\t...route.request,\n\t\t\t...(route.request.headers ? { headers: [...route.request.headers] } : {}),\n\t\t};\n\t}\n\tif (route.response !== undefined) meta.response = route.response;\n\t// Private responses are per-user and must never become cacheable, even if\n\t// a route sets both flags.\n\tif (meta.public && typeof route.cacheControl === \"string\" && route.cacheControl.length > 0) {\n\t\tmeta.cacheControl = route.cacheControl;\n\t}\n\treturn meta;\n}\n\n/\n HTTP methods that carry a request body. Everything else (GET, HEAD, DELETE)\n * takes its route input from the URL query string.\n /\nconst BODY_METHODS = new Set([\"POST\", \"PUT\", \"PATCH\"]);\n\n/\n Parse a plugin route's input from the request, by method.\n \n Body methods (POST/PUT/PATCH) parse the JSON body as before. Bodyless\n * methods (GET/HEAD/DELETE) have no body, so `request.json()` resolves to\n * undefined and fails schema validation, so parse the query string into\n * an object instead. Repeated keys (`?tag=a&tag=b`) become an array so array\n * schemas work; a single key stays a scalar.\n /\nexport async function parseRouteInput(\n\trequest: Request,\n\tdeclaration?: PluginRouteRequest,\n): Promise<unknown> {\n\tif (declaration) return parseDeclaredPluginRouteInput(request, declaration);\n\tif (BODY_METHODS.has(request.method.toUpperCase())) {\n\t\ttry {\n\t\t\treturn await request.json();\n\t\t} catch {\n\t\t\t// No body or not JSON\n\t\t\treturn undefined;\n\t\t}\n\t}\n\n\tconst params = new URL(request.url).searchParams;\n\tconst input: Record<string, string \| string[]> = {};\n\tfor (const key of new Set(params.keys())) {\n\t\tconst values = params.getAll(key);\n\t\tinput[key] = values.length > 1 ? values : values[0];\n\t}\n\treturn input;\n}\n\n/\n Result from a route invocation\n /\nexport interface RouteResult<T = unknown> {\n\tsuccess: boolean;\n\tdata?: T;\n\terror?: {\n\t\tcode: string;\n\t\tmessage: string;\n\t\tdetails?: unknown;\n\t};\n\tstatus: number;\n}\n\n/\n Host-side user shape accepted when dispatching a plugin route. Structurally\n * matches `User` from `@emdash-cms/auth` so hosts can pass `locals.user`\n * directly without the plugin layer depending on the auth package.\n /\nexport interface RouteCallerInput {\n\tid: string;\n\temail: string;\n\tname: string \| null;\n\trole: number;\n\tcreatedAt: Date \| string;\n}\n\n/\n Convert the host's authenticated user into the read-only `UserInfo` shape\n * exposed to plugins as `ctx.user`. Strips sensitive/irrelevant fields and\n * keeps the value structured-clone-safe for sandboxed plugins.\n /\nexport function toRouteCallerInfo(user: RouteCallerInput): UserInfo {\n\treturn {\n\t\tid: user.id,\n\t\temail: user.email,\n\t\tname: user.name,\n\t\trole: user.role,\n\t\tcreatedAt: typeof user.createdAt === \"string\" ? user.createdAt : user.createdAt.toISOString(),\n\t};\n}\n\n/\n Route invocation options\n /\nexport interface InvokeRouteOptions {\n\t/* The original request /\n\trequest: Request;\n\t/* Request body (already parsed) /\n\tbody?: unknown;\n\t/\n\t Authenticated caller resolved by the host, exposed to the handler as\n\t * `ctx.user`. Undefined for public routes and unbound machine tokens.\n\t /\n\tuser?: UserInfo;\n\t/* Host-attested context for a validated Block Kit request. /\n\tui?: PluginUiContext;\n}\n\n/\n Route handler for a plugin\n /\nexport class PluginRouteHandler {\n\tprivate contextFactory: PluginContextFactory;\n\tprivate plugin: ResolvedPlugin;\n\tprivate trustedProxyHeaders: string[];\n\n\tconstructor(plugin: ResolvedPlugin, factoryOptions: PluginContextFactoryOptions) {\n\t\tthis.plugin = plugin;\n\t\tthis.contextFactory = new PluginContextFactory(factoryOptions);\n\t\tthis.trustedProxyHeaders = factoryOptions.trustedProxyHeaders ?? [];\n\t}\n\n\t/\n\t Invoke a route by name\n\t /\n\tasync invoke(routeName: string, options: InvokeRouteOptions): Promise<RouteResult> {\n\t\tconst route = this.plugin.routes[routeName];\n\n\t\tif (!route) {\n\t\t\treturn {\n\t\t\t\tsuccess: false,\n\t\t\t\terror: {\n\t\t\t\t\tcode: \"ROUTE_NOT_FOUND\",\n\t\t\t\t\tmessage: `Route \"${routeName}\" not found in plugin \"${this.plugin.id}\"`,\n\t\t\t\t},\n\t\t\t\tstatus: 404,\n\t\t\t};\n\t\t}\n\n\t\t// Validate input if schema is provided\n\t\tlet validatedInput: unknown;\n\t\tif (route.input) {\n\t\t\tconst parseResult = route.input.safeParse(options.body);\n\t\t\tif (!parseResult.success) {\n\t\t\t\treturn {\n\t\t\t\t\tsuccess: false,\n\t\t\t\t\terror: {\n\t\t\t\t\t\tcode: \"VALIDATION_ERROR\",\n\t\t\t\t\t\tmessage: \"Invalid request body\",\n\t\t\t\t\t\tdetails: z.formatError(parseResult.error),\n\t\t\t\t\t},\n\t\t\t\t\tstatus: 400,\n\t\t\t\t};\n\t\t\t}\n\t\t\tvalidatedInput = parseResult.data;\n\t\t} else {\n\t\t\tvalidatedInput = options.body;\n\t\t}\n\n\t\t// Create route context\n\t\tconst baseContext = this.contextFactory.createContext(this.plugin);\n\t\tconst routeContext: RouteContext = {\n\t\t\t...baseContext,\n\t\t\tinput: validatedInput,\n\t\t\t// The body is already parsed into `input`; guard `ctx.request`'s\n\t\t\t// body-reading methods so a re-read fails with an actionable message.\n\t\t\t// Metadata extraction uses the original request (headers only).\n\t\t\trequest: guardConsumedRequestBody(options.request),\n\t\t\trequestMeta: extractRequestMeta(options.request, this.trustedProxyHeaders),\n\t\t\tuser: options.user,\n\t\t\tui: options.ui,\n\t\t};\n\n\t\t// Execute handler\n\t\ttry {\n\t\t\tconst result = await route.handler(routeContext);\n\t\t\treturn {\n\t\t\t\tsuccess: true,\n\t\t\t\tdata: result,\n\t\t\t\tstatus: 200,\n\t\t\t};\n\t\t} catch (error) {\n\t\t\tif (error instanceof SiteWriteBlockedError) {\n\t\t\t\treturn {\n\t\t\t\t\tsuccess: false,\n\t\t\t\t\terror: { code: error.code, message: error.message },\n\t\t\t\t\tstatus: error.status,\n\t\t\t\t};\n\t\t\t}\n\t\t\t// Handle known error types\n\t\t\tif (isPluginRouteError(error)) {\n\t\t\t\treturn {\n\t\t\t\t\tsuccess: false,\n\t\t\t\t\terror: {\n\t\t\t\t\t\tcode: error.code,\n\t\t\t\t\t\tmessage: error.message,\n\t\t\t\t\t\tdetails: error.details,\n\t\t\t\t\t},\n\t\t\t\t\tstatus: error.status,\n\t\t\t\t};\n\t\t\t}\n\n\t\t\t// Unknown error -- log internally, return generic message\n\t\t\tconsole.error(`[plugin:${this.plugin.id}] Route handler failed:`, error);\n\t\t\treturn {\n\t\t\t\tsuccess: false,\n\t\t\t\terror: {\n\t\t\t\t\tcode: \"INTERNAL_ERROR\",\n\t\t\t\t\tmessage: \"An internal error occurred\",\n\t\t\t\t},\n\t\t\t\tstatus: 500,\n\t\t\t};\n\t\t}\n\t}\n\n\t/\n\t Get all route names\n\t /\n\tgetRouteNames(): string[] {\n\t\treturn Object.keys(this.plugin.routes);\n\t}\n\n\t/\n\t Check if a route exists\n\t /\n\thasRoute(name: string): boolean {\n\t\treturn name in this.plugin.routes;\n\t}\n\n\t/\n\t Get route metadata without invoking the handler.\n\t * Returns null if the route doesn't exist.\n\t /\n\tgetRouteMeta(name: string): RouteMeta \| null {\n\t\tconst route: PluginRoute \| undefined = this.plugin.routes[name];\n\t\tif (!route) return null;\n\t\treturn buildRouteMeta(route);\n\t}\n}\n\n/\n Registry for all plugin route handlers\n /\nexport class PluginRouteRegistry {\n\tprivate handlers: Map<string, PluginRouteHandler> = new Map();\n\n\tconstructor(private factoryOptions: PluginContextFactoryOptions) {}\n\n\t/\n\t Register a plugin's routes\n\t /\n\tregister(plugin: ResolvedPlugin): void {\n\t\tconst handler = new PluginRouteHandler(plugin, this.factoryOptions);\n\t\tthis.handlers.set(plugin.id, handler);\n\t}\n\n\t/\n\t Unregister a plugin's routes\n\t /\n\tunregister(pluginId: string): void {\n\t\tthis.handlers.delete(pluginId);\n\t}\n\n\t/\n\t Invoke a plugin route\n\t /\n\tasync invoke(\n\t\tpluginId: string,\n\t\trouteName: string,\n\t\toptions: InvokeRouteOptions,\n\t): Promise<RouteResult> {\n\t\tconst handler = this.handlers.get(pluginId);\n\n\t\tif (!handler) {\n\t\t\treturn {\n\t\t\t\tsuccess: false,\n\t\t\t\terror: {\n\t\t\t\t\tcode: \"PLUGIN_NOT_FOUND\",\n\t\t\t\t\tmessage: `Plugin \"${pluginId}\" not found`,\n\t\t\t\t},\n\t\t\t\tstatus: 404,\n\t\t\t};\n\t\t}\n\n\t\treturn handler.invoke(routeName, options);\n\t}\n\n\t/\n\t Get all registered plugin IDs\n\t /\n\tgetPluginIds(): string[] {\n\t\treturn [...this.handlers.keys()];\n\t}\n\n\t/\n\t Get routes for a plugin\n\t /\n\tgetRoutes(pluginId: string): string[] {\n\t\treturn this.handlers.get(pluginId)?.getRouteNames() ?? [];\n\t}\n\n\t/\n\t Get route metadata for a specific plugin route.\n\t * Returns null if the plugin or route doesn't exist.\n\t /\n\tgetRouteMeta(pluginId: string, routeName: string): RouteMeta \| null {\n\t\tconst handler = this.handlers.get(pluginId);\n\t\tif (!handler) return null;\n\t\treturn handler.getRouteMeta(routeName);\n\t}\n}\n\n/\n Create a route registry\n */\nexport function createRouteRegistry(\n\tfactoryOptions: PluginContextFactoryOptions,\n): PluginRouteRegistry {\n\treturn new PluginRouteRegistry(factoryOptions);\n}\n"],"mappings":";;;;;;;;;;;;;;;;AAoCA,MAAM,wBAAwB,IAAI,IAAI;CAAC;CAAQ;CAAQ;CAAe;CAAQ;CAAY;CAAQ,CAAC;;;;;;;;;AAUnG,SAAS,yBAAyB,SAA2B;AAC5D,QAAO,IAAI,MAAM,SAAS,EACzB,IAAI,QAAQ,MAAM;AACjB,MAAI,OAAO,SAAS,YAAY,sBAAsB,IAAI,KAAK,CAC9D,cAAa;AACZ,SAAM,IAAI,MACT,wBAAwB,KAAK,mKAEa,KAAK,KAC/C;;EAGH,MAAM,QAAQ,QAAQ,IAAI,QAAQ,MAAM,OAAO;AAC/C,SAAO,OAAO,UAAU,aAAa,MAAM,KAAK,OAAO,GAAG;IAE3D,CAAC;;AAoBH,MAAa,yCAAyC,EAAE,MAAM,gBAAgB;;;;;;AAS9E,SAAgB,eAAe,OAOjB;CACb,MAAM,OAAkB,EAAE,QAAQ,MAAM,WAAW,MAAM;AACzD,KAAI,MAAM,eAAe,OAAW,MAAK,aAAa,MAAM;AAC5D,KAAI,MAAM,YAAY,OAAW,MAAK,UAAU,CAAC,GAAG,MAAM,QAAQ;AAClE,KAAI,MAAM,YAAY,OACrB,MAAK,UAAU;EACd,GAAG,MAAM;EACT,GAAI,MAAM,QAAQ,UAAU,EAAE,SAAS,CAAC,GAAG,MAAM,QAAQ,QAAQ,EAAE,GAAG,EAAE;EACxE;AAEF,KAAI,MAAM,aAAa,OAAW,MAAK,WAAW,MAAM;AAGxD,KAAI,KAAK,UAAU,OAAO,MAAM,iBAAiB,YAAY,MAAM,aAAa,SAAS,EACxF,MAAK,eAAe,MAAM;AAE3B,QAAO;;;;;;AAOR,MAAM,eAAe,IAAI,IAAI;CAAC;CAAQ;CAAO;CAAQ,CAAC;;;;;;;;;;AAWtD,eAAsB,gBACrB,SACA,aACmB;AACnB,KAAI,YAAa,QAAO,8BAA8B,SAAS,YAAY;AAC3E,KAAI,aAAa,IAAI,QAAQ,OAAO,aAAa,CAAC,CACjD,KAAI;AACH,SAAO,MAAM,QAAQ,MAAM;SACpB;AAEP;;CAIF,MAAM,SAAS,IAAI,IAAI,QAAQ,IAAI,CAAC;CACpC,MAAM,QAA2C,EAAE;AACnD,MAAK,MAAM,OAAO,IAAI,IAAI,OAAO,MAAM,CAAC,EAAE;EACzC,MAAM,SAAS,OAAO,OAAO,IAAI;AACjC,QAAM,OAAO,OAAO,SAAS,IAAI,SAAS,OAAO;;AAElD,QAAO;;;;;;;AAmCR,SAAgB,kBAAkB,MAAkC;AACnE,QAAO;EACN,IAAI,KAAK;EACT,OAAO,KAAK;EACZ,MAAM,KAAK;EACX,MAAM,KAAK;EACX,WAAW,OAAO,KAAK,cAAc,WAAW,KAAK,YAAY,KAAK,UAAU,aAAa;EAC7F;;;;;AAuBF,IAAa,qBAAb,MAAgC;CAC/B,AAAQ;CACR,AAAQ;CACR,AAAQ;CAER,YAAY,QAAwB,gBAA6C;AAChF,OAAK,SAAS;AACd,OAAK,iBAAiB,IAAI,qBAAqB,eAAe;AAC9D,OAAK,sBAAsB,eAAe,uBAAuB,EAAE;;;;;CAMpE,MAAM,OAAO,WAAmB,SAAmD;EAClF,MAAM,QAAQ,KAAK,OAAO,OAAO;AAEjC,MAAI,CAAC,MACJ,QAAO;GACN,SAAS;GACT,OAAO;IACN,MAAM;IACN,SAAS,UAAU,UAAU,yBAAyB,KAAK,OAAO,GAAG;IACrE;GACD,QAAQ;GACR;EAIF,IAAI;AACJ,MAAI,MAAM,OAAO;GAChB,MAAM,cAAc,MAAM,MAAM,UAAU,QAAQ,KAAK;AACvD,OAAI,CAAC,YAAY,QAChB,QAAO;IACN,SAAS;IACT,OAAO;KACN,MAAM;KACN,SAAS;KACT,SAAS,EAAE,YAAY,YAAY,MAAM;KACzC;IACD,QAAQ;IACR;AAEF,oBAAiB,YAAY;QAE7B,kBAAiB,QAAQ;EAK1B,MAAM,eAA6B;GAClC,GAFmB,KAAK,eAAe,cAAc,KAAK,OAAO;GAGjE,OAAO;GAIP,SAAS,yBAAyB,QAAQ,QAAQ;GAClD,aAAa,mBAAmB,QAAQ,SAAS,KAAK,oBAAoB;GAC1E,MAAM,QAAQ;GACd,IAAI,QAAQ;GACZ;AAGD,MAAI;AAEH,UAAO;IACN,SAAS;IACT,MAHc,MAAM,MAAM,QAAQ,aAAa;IAI/C,QAAQ;IACR;WACO,OAAO;AACf,OAAI,iBAAiB,sBACpB,QAAO;IACN,SAAS;IACT,OAAO;KAAE,MAAM,MAAM;KAAM,SAAS,MAAM;KAAS;IACnD,QAAQ,MAAM;IACd;AAGF,OAAI,mBAAmB,MAAM,CAC5B,QAAO;IACN,SAAS;IACT,OAAO;KACN,MAAM,MAAM;KACZ,SAAS,MAAM;KACf,SAAS,MAAM;KACf;IACD,QAAQ,MAAM;IACd;AAIF,WAAQ,MAAM,WAAW,KAAK,OAAO,GAAG,0BAA0B,MAAM;AACxE,UAAO;IACN,SAAS;IACT,OAAO;KACN,MAAM;KACN,SAAS;KACT;IACD,QAAQ;IACR;;;;;;CAOH,gBAA0B;AACzB,SAAO,OAAO,KAAK,KAAK,OAAO,OAAO;;;;;CAMvC,SAAS,MAAuB;AAC/B,SAAO,QAAQ,KAAK,OAAO;;;;;;CAO5B,aAAa,MAAgC;EAC5C,MAAM,QAAiC,KAAK,OAAO,OAAO;AAC1D,MAAI,CAAC,MAAO,QAAO;AACnB,SAAO,eAAe,MAAM;;;;;;AAO9B,IAAa,sBAAb,MAAiC;CAChC,AAAQ,2BAA4C,IAAI,KAAK;CAE7D,YAAY,AAAQ,gBAA6C;EAA7C;;;;;CAKpB,SAAS,QAA8B;EACtC,MAAM,UAAU,IAAI,mBAAmB,QAAQ,KAAK,eAAe;AACnE,OAAK,SAAS,IAAI,OAAO,IAAI,QAAQ;;;;;CAMtC,WAAW,UAAwB;AAClC,OAAK,SAAS,OAAO,SAAS;;;;;CAM/B,MAAM,OACL,UACA,WACA,SACuB;EACvB,MAAM,UAAU,KAAK,SAAS,IAAI,SAAS;AAE3C,MAAI,CAAC,QACJ,QAAO;GACN,SAAS;GACT,OAAO;IACN,MAAM;IACN,SAAS,WAAW,SAAS;IAC7B;GACD,QAAQ;GACR;AAGF,SAAO,QAAQ,OAAO,WAAW,QAAQ;;;;;CAM1C,eAAyB;AACxB,SAAO,CAAC,GAAG,KAAK,SAAS,MAAM,CAAC;;;;;CAMjC,UAAU,UAA4B;AACrC,SAAO,KAAK,SAAS,IAAI,SAAS,EAAE,eAAe,IAAI,EAAE;;;;;;CAO1D,aAAa,UAAkB,WAAqC;EACnE,MAAM,UAAU,KAAK,SAAS,IAAI,SAAS;AAC3C,MAAI,CAAC,QAAS,QAAO;AACrB,SAAO,QAAQ,aAAa,UAAU"}
1	+ {"version":3,"file":"routes-avqgc-8r.mjs","names":[],"sources":["../src/plugins/routes.ts"],"sourcesContent":["/*\n Plugin Routes v2\n \n Handles plugin API route invocation with:\n * - Input validation via Zod schemas\n * - Route context creation\n * - Error handling\n \n /\n\nimport type { PluginUiContext } from \"@emdash-cms/blocks/server\";\nimport type {\n\tPluginRouteMethod,\n\tPluginRouteRequest,\n\tPluginRouteResponseMode,\n} from \"@emdash-cms/plugin-types\";\nimport { routeNameSchema } from \"@emdash-cms/plugin-types\";\nimport { z } from \"zod\";\n\nimport { SiteWriteBlockedError } from \"../transfer/fence.js\";\nimport { PluginContextFactory, type PluginContextFactoryOptions } from \"./context.js\";\nimport { extractRequestMeta } from \"./request-meta.js\";\nimport { isPluginRouteError, PluginRouteError } from \"./route-error.js\";\nimport { parseDeclaredPluginRouteInput } from \"./route-wire.js\";\nimport type { ResolvedPlugin, RouteContext, PluginRoute, UserInfo } from \"./types.js\";\n\nexport { PluginRouteError };\n\n/*\n Body-reading methods on `Request`. EmDash parses the request body once before\n * the handler runs and exposes the result as `ctx.input`, leaving the underlying\n * stream consumed. Calling any of these on `ctx.request` would re-read a spent\n * stream and throw an opaque platform error (\"Body is unusable: Body has already\n * been read\") with no hint about `ctx.input` — so the guard replaces them with an\n * actionable message instead.\n /\nconst CONSUMED_BODY_METHODS = new Set([\"json\", \"text\", \"arrayBuffer\", \"blob\", \"formData\", \"bytes\"]);\n\n/\n Wrap the request handed to a plugin route handler so an accidental\n * `ctx.request.json()` (or `.text()`, `.formData()`, …) fails with a message\n * pointing at `ctx.input` rather than the runtime's cryptic \"body already read\"\n * error. Every non-body member passes through unchanged; function members are\n * bound to the underlying request so methods like `clone()` don't throw an\n * \"Illegal invocation\" when called on the proxy.\n /\nfunction guardConsumedRequestBody(request: Request): Request {\n\treturn new Proxy(request, {\n\t\tget(target, prop) {\n\t\t\tif (typeof prop === \"string\" && CONSUMED_BODY_METHODS.has(prop)) {\n\t\t\t\treturn () => {\n\t\t\t\t\tthrow new Error(\n\t\t\t\t\t\t`[emdash] ctx.request.${prop}() is not available inside a plugin route handler: ` +\n\t\t\t\t\t\t\t`EmDash has already parsed the request body and exposes it as ctx.input. ` +\n\t\t\t\t\t\t\t`Read ctx.input instead of ctx.request.${prop}().`,\n\t\t\t\t\t);\n\t\t\t\t};\n\t\t\t}\n\t\t\tconst value = Reflect.get(target, prop, target);\n\t\t\treturn typeof value === \"function\" ? value.bind(target) : value;\n\t\t},\n\t});\n}\n\n/\n Route metadata (public flag) without the handler.\n * Used by the catch-all route to decide auth before dispatch.\n /\nexport interface RouteMeta {\n\tpublic: boolean;\n\tpermission?: string;\n\t/\n\t Cache-Control value for successful GET responses. Only ever set for\n\t * public routes — authenticated responses must stay `private, no-store`.\n\t /\n\tcacheControl?: string;\n\tmethods?: PluginRouteMethod[];\n\trequest?: PluginRouteRequest;\n\tresponse?: PluginRouteResponseMode;\n}\n\nexport const pluginPublicRouteAcknowledgementSchema = z.array(routeNameSchema);\n\nexport type PluginContentCacheInvalidator = (tags: string[]) => Promise<void>;\n\n/\n Build RouteMeta from a route's `public`/`cacheControl` flags. Single source\n * of truth for the \"cacheControl is only ever exposed on public routes\"\n * invariant — used for trusted routes and manifest-declared sandboxed routes.\n /\nexport function buildRouteMeta(route: {\n\tpublic?: boolean;\n\tpermission?: string;\n\tcacheControl?: string;\n\tmethods?: PluginRouteMethod[];\n\trequest?: PluginRouteRequest;\n\tresponse?: PluginRouteResponseMode;\n}): RouteMeta {\n\tconst meta: RouteMeta = { public: route.public === true };\n\tif (route.permission !== undefined) meta.permission = route.permission;\n\tif (route.methods !== undefined) meta.methods = [...route.methods];\n\tif (route.request !== undefined) {\n\t\tmeta.request = {\n\t\t\t...route.request,\n\t\t\t...(route.request.headers ? { headers: [...route.request.headers] } : {}),\n\t\t};\n\t}\n\tif (route.response !== undefined) meta.response = route.response;\n\t// Private responses are per-user and must never become cacheable, even if\n\t// a route sets both flags.\n\tif (meta.public && typeof route.cacheControl === \"string\" && route.cacheControl.length > 0) {\n\t\tmeta.cacheControl = route.cacheControl;\n\t}\n\treturn meta;\n}\n\n/\n HTTP methods that carry a request body. Everything else (GET, HEAD, DELETE)\n * takes its route input from the URL query string.\n /\nconst BODY_METHODS = new Set([\"POST\", \"PUT\", \"PATCH\"]);\n\n/\n Parse a plugin route's input from the request, by method.\n \n Body methods (POST/PUT/PATCH) parse the JSON body as before. Bodyless\n * methods (GET/HEAD/DELETE) have no body, so `request.json()` resolves to\n * undefined and fails schema validation, so parse the query string into\n * an object instead. Repeated keys (`?tag=a&tag=b`) become an array so array\n * schemas work; a single key stays a scalar.\n /\nexport async function parseRouteInput(\n\trequest: Request,\n\tdeclaration?: PluginRouteRequest,\n): Promise<unknown> {\n\tif (declaration) return parseDeclaredPluginRouteInput(request, declaration);\n\tif (BODY_METHODS.has(request.method.toUpperCase())) {\n\t\ttry {\n\t\t\treturn await request.json();\n\t\t} catch {\n\t\t\t// No body or not JSON\n\t\t\treturn undefined;\n\t\t}\n\t}\n\n\tconst params = new URL(request.url).searchParams;\n\tconst input: Record<string, string \| string[]> = {};\n\tfor (const key of new Set(params.keys())) {\n\t\tconst values = params.getAll(key);\n\t\tinput[key] = values.length > 1 ? values : values[0];\n\t}\n\treturn input;\n}\n\n/\n Result from a route invocation\n /\nexport interface RouteResult<T = unknown> {\n\tsuccess: boolean;\n\tdata?: T;\n\terror?: {\n\t\tcode: string;\n\t\tmessage: string;\n\t\tdetails?: unknown;\n\t};\n\tstatus: number;\n}\n\n/\n Host-side user shape accepted when dispatching a plugin route. Structurally\n * matches `User` from `@emdash-cms/auth` so hosts can pass `locals.user`\n * directly without the plugin layer depending on the auth package.\n /\nexport interface RouteCallerInput {\n\tid: string;\n\temail: string;\n\tname: string \| null;\n\trole: number;\n\tcreatedAt: Date \| string;\n}\n\n/\n Convert the host's authenticated user into the read-only `UserInfo` shape\n * exposed to plugins as `ctx.user`. Strips sensitive/irrelevant fields and\n * keeps the value structured-clone-safe for sandboxed plugins.\n /\nexport function toRouteCallerInfo(user: RouteCallerInput): UserInfo {\n\treturn {\n\t\tid: user.id,\n\t\temail: user.email,\n\t\tname: user.name,\n\t\trole: user.role,\n\t\tcreatedAt: typeof user.createdAt === \"string\" ? user.createdAt : user.createdAt.toISOString(),\n\t};\n}\n\n/\n Route invocation options\n /\nexport interface InvokeRouteOptions {\n\t/* The original request /\n\trequest: Request;\n\t/* Request body (already parsed) /\n\tbody?: unknown;\n\t/\n\t Authenticated caller resolved by the host, exposed to the handler as\n\t * `ctx.user`. Undefined for public routes and unbound machine tokens.\n\t /\n\tuser?: UserInfo;\n\t/* Host-attested context for a validated Block Kit request. /\n\tui?: PluginUiContext;\n}\n\n/\n Route handler for a plugin\n /\nexport class PluginRouteHandler {\n\tprivate contextFactory: PluginContextFactory;\n\tprivate plugin: ResolvedPlugin;\n\tprivate trustedProxyHeaders: string[];\n\n\tconstructor(plugin: ResolvedPlugin, factoryOptions: PluginContextFactoryOptions) {\n\t\tthis.plugin = plugin;\n\t\tthis.contextFactory = new PluginContextFactory(factoryOptions);\n\t\tthis.trustedProxyHeaders = factoryOptions.trustedProxyHeaders ?? [];\n\t}\n\n\t/\n\t Invoke a route by name\n\t /\n\tasync invoke(routeName: string, options: InvokeRouteOptions): Promise<RouteResult> {\n\t\tconst route = this.plugin.routes[routeName];\n\n\t\tif (!route) {\n\t\t\treturn {\n\t\t\t\tsuccess: false,\n\t\t\t\terror: {\n\t\t\t\t\tcode: \"ROUTE_NOT_FOUND\",\n\t\t\t\t\tmessage: `Route \"${routeName}\" not found in plugin \"${this.plugin.id}\"`,\n\t\t\t\t},\n\t\t\t\tstatus: 404,\n\t\t\t};\n\t\t}\n\n\t\t// Validate input if schema is provided\n\t\tlet validatedInput: unknown;\n\t\tif (route.input) {\n\t\t\tconst parseResult = route.input.safeParse(options.body);\n\t\t\tif (!parseResult.success) {\n\t\t\t\treturn {\n\t\t\t\t\tsuccess: false,\n\t\t\t\t\terror: {\n\t\t\t\t\t\tcode: \"VALIDATION_ERROR\",\n\t\t\t\t\t\tmessage: \"Invalid request body\",\n\t\t\t\t\t\tdetails: z.formatError(parseResult.error),\n\t\t\t\t\t},\n\t\t\t\t\tstatus: 400,\n\t\t\t\t};\n\t\t\t}\n\t\t\tvalidatedInput = parseResult.data;\n\t\t} else {\n\t\t\tvalidatedInput = options.body;\n\t\t}\n\n\t\t// Create route context\n\t\tconst baseContext = this.contextFactory.createContext(this.plugin);\n\t\tconst routeContext: RouteContext = {\n\t\t\t...baseContext,\n\t\t\tinput: validatedInput,\n\t\t\t// The body is already parsed into `input`; guard `ctx.request`'s\n\t\t\t// body-reading methods so a re-read fails with an actionable message.\n\t\t\t// Metadata extraction uses the original request (headers only).\n\t\t\trequest: guardConsumedRequestBody(options.request),\n\t\t\trequestMeta: extractRequestMeta(options.request, this.trustedProxyHeaders),\n\t\t\tuser: options.user,\n\t\t\tui: options.ui,\n\t\t};\n\n\t\t// Execute handler\n\t\ttry {\n\t\t\tconst result = await route.handler(routeContext);\n\t\t\treturn {\n\t\t\t\tsuccess: true,\n\t\t\t\tdata: result,\n\t\t\t\tstatus: 200,\n\t\t\t};\n\t\t} catch (error) {\n\t\t\tif (error instanceof SiteWriteBlockedError) {\n\t\t\t\treturn {\n\t\t\t\t\tsuccess: false,\n\t\t\t\t\terror: { code: error.code, message: error.message },\n\t\t\t\t\tstatus: error.status,\n\t\t\t\t};\n\t\t\t}\n\t\t\t// Handle known error types\n\t\t\tif (isPluginRouteError(error)) {\n\t\t\t\treturn {\n\t\t\t\t\tsuccess: false,\n\t\t\t\t\terror: {\n\t\t\t\t\t\tcode: error.code,\n\t\t\t\t\t\tmessage: error.message,\n\t\t\t\t\t\tdetails: error.details,\n\t\t\t\t\t},\n\t\t\t\t\tstatus: error.status,\n\t\t\t\t};\n\t\t\t}\n\n\t\t\t// Unknown error -- log internally, return generic message\n\t\t\tconsole.error(`[plugin:${this.plugin.id}] Route handler failed:`, error);\n\t\t\treturn {\n\t\t\t\tsuccess: false,\n\t\t\t\terror: {\n\t\t\t\t\tcode: \"INTERNAL_ERROR\",\n\t\t\t\t\tmessage: \"An internal error occurred\",\n\t\t\t\t},\n\t\t\t\tstatus: 500,\n\t\t\t};\n\t\t}\n\t}\n\n\t/\n\t Get all route names\n\t /\n\tgetRouteNames(): string[] {\n\t\treturn Object.keys(this.plugin.routes);\n\t}\n\n\t/\n\t Check if a route exists\n\t /\n\thasRoute(name: string): boolean {\n\t\treturn name in this.plugin.routes;\n\t}\n\n\t/\n\t Get route metadata without invoking the handler.\n\t * Returns null if the route doesn't exist.\n\t /\n\tgetRouteMeta(name: string): RouteMeta \| null {\n\t\tconst route: PluginRoute \| undefined = this.plugin.routes[name];\n\t\tif (!route) return null;\n\t\treturn buildRouteMeta(route);\n\t}\n}\n\n/\n Registry for all plugin route handlers\n /\nexport class PluginRouteRegistry {\n\tprivate handlers: Map<string, PluginRouteHandler> = new Map();\n\n\tconstructor(private factoryOptions: PluginContextFactoryOptions) {}\n\n\t/\n\t Register a plugin's routes\n\t /\n\tregister(plugin: ResolvedPlugin): void {\n\t\tconst handler = new PluginRouteHandler(plugin, this.factoryOptions);\n\t\tthis.handlers.set(plugin.id, handler);\n\t}\n\n\t/\n\t Unregister a plugin's routes\n\t /\n\tunregister(pluginId: string): void {\n\t\tthis.handlers.delete(pluginId);\n\t}\n\n\t/\n\t Invoke a plugin route\n\t /\n\tasync invoke(\n\t\tpluginId: string,\n\t\trouteName: string,\n\t\toptions: InvokeRouteOptions,\n\t): Promise<RouteResult> {\n\t\tconst handler = this.handlers.get(pluginId);\n\n\t\tif (!handler) {\n\t\t\treturn {\n\t\t\t\tsuccess: false,\n\t\t\t\terror: {\n\t\t\t\t\tcode: \"PLUGIN_NOT_FOUND\",\n\t\t\t\t\tmessage: `Plugin \"${pluginId}\" not found`,\n\t\t\t\t},\n\t\t\t\tstatus: 404,\n\t\t\t};\n\t\t}\n\n\t\treturn handler.invoke(routeName, options);\n\t}\n\n\t/\n\t Get all registered plugin IDs\n\t /\n\tgetPluginIds(): string[] {\n\t\treturn [...this.handlers.keys()];\n\t}\n\n\t/\n\t Get routes for a plugin\n\t /\n\tgetRoutes(pluginId: string): string[] {\n\t\treturn this.handlers.get(pluginId)?.getRouteNames() ?? [];\n\t}\n\n\t/\n\t Get route metadata for a specific plugin route.\n\t * Returns null if the plugin or route doesn't exist.\n\t /\n\tgetRouteMeta(pluginId: string, routeName: string): RouteMeta \| null {\n\t\tconst handler = this.handlers.get(pluginId);\n\t\tif (!handler) return null;\n\t\treturn handler.getRouteMeta(routeName);\n\t}\n}\n\n/\n Create a route registry\n */\nexport function createRouteRegistry(\n\tfactoryOptions: PluginContextFactoryOptions,\n): PluginRouteRegistry {\n\treturn new PluginRouteRegistry(factoryOptions);\n}\n"],"mappings":";;;;;;;;;;;;;;;;AAoCA,MAAM,wBAAwB,IAAI,IAAI;CAAC;CAAQ;CAAQ;CAAe;CAAQ;CAAY;CAAQ,CAAC;;;;;;;;;AAUnG,SAAS,yBAAyB,SAA2B;AAC5D,QAAO,IAAI,MAAM,SAAS,EACzB,IAAI,QAAQ,MAAM;AACjB,MAAI,OAAO,SAAS,YAAY,sBAAsB,IAAI,KAAK,CAC9D,cAAa;AACZ,SAAM,IAAI,MACT,wBAAwB,KAAK,mKAEa,KAAK,KAC/C;;EAGH,MAAM,QAAQ,QAAQ,IAAI,QAAQ,MAAM,OAAO;AAC/C,SAAO,OAAO,UAAU,aAAa,MAAM,KAAK,OAAO,GAAG;IAE3D,CAAC;;AAoBH,MAAa,yCAAyC,EAAE,MAAM,gBAAgB;;;;;;AAS9E,SAAgB,eAAe,OAOjB;CACb,MAAM,OAAkB,EAAE,QAAQ,MAAM,WAAW,MAAM;AACzD,KAAI,MAAM,eAAe,OAAW,MAAK,aAAa,MAAM;AAC5D,KAAI,MAAM,YAAY,OAAW,MAAK,UAAU,CAAC,GAAG,MAAM,QAAQ;AAClE,KAAI,MAAM,YAAY,OACrB,MAAK,UAAU;EACd,GAAG,MAAM;EACT,GAAI,MAAM,QAAQ,UAAU,EAAE,SAAS,CAAC,GAAG,MAAM,QAAQ,QAAQ,EAAE,GAAG,EAAE;EACxE;AAEF,KAAI,MAAM,aAAa,OAAW,MAAK,WAAW,MAAM;AAGxD,KAAI,KAAK,UAAU,OAAO,MAAM,iBAAiB,YAAY,MAAM,aAAa,SAAS,EACxF,MAAK,eAAe,MAAM;AAE3B,QAAO;;;;;;AAOR,MAAM,eAAe,IAAI,IAAI;CAAC;CAAQ;CAAO;CAAQ,CAAC;;;;;;;;;;AAWtD,eAAsB,gBACrB,SACA,aACmB;AACnB,KAAI,YAAa,QAAO,8BAA8B,SAAS,YAAY;AAC3E,KAAI,aAAa,IAAI,QAAQ,OAAO,aAAa,CAAC,CACjD,KAAI;AACH,SAAO,MAAM,QAAQ,MAAM;SACpB;AAEP;;CAIF,MAAM,SAAS,IAAI,IAAI,QAAQ,IAAI,CAAC;CACpC,MAAM,QAA2C,EAAE;AACnD,MAAK,MAAM,OAAO,IAAI,IAAI,OAAO,MAAM,CAAC,EAAE;EACzC,MAAM,SAAS,OAAO,OAAO,IAAI;AACjC,QAAM,OAAO,OAAO,SAAS,IAAI,SAAS,OAAO;;AAElD,QAAO;;;;;;;AAmCR,SAAgB,kBAAkB,MAAkC;AACnE,QAAO;EACN,IAAI,KAAK;EACT,OAAO,KAAK;EACZ,MAAM,KAAK;EACX,MAAM,KAAK;EACX,WAAW,OAAO,KAAK,cAAc,WAAW,KAAK,YAAY,KAAK,UAAU,aAAa;EAC7F;;;;;AAuBF,IAAa,qBAAb,MAAgC;CAC/B,AAAQ;CACR,AAAQ;CACR,AAAQ;CAER,YAAY,QAAwB,gBAA6C;AAChF,OAAK,SAAS;AACd,OAAK,iBAAiB,IAAI,qBAAqB,eAAe;AAC9D,OAAK,sBAAsB,eAAe,uBAAuB,EAAE;;;;;CAMpE,MAAM,OAAO,WAAmB,SAAmD;EAClF,MAAM,QAAQ,KAAK,OAAO,OAAO;AAEjC,MAAI,CAAC,MACJ,QAAO;GACN,SAAS;GACT,OAAO;IACN,MAAM;IACN,SAAS,UAAU,UAAU,yBAAyB,KAAK,OAAO,GAAG;IACrE;GACD,QAAQ;GACR;EAIF,IAAI;AACJ,MAAI,MAAM,OAAO;GAChB,MAAM,cAAc,MAAM,MAAM,UAAU,QAAQ,KAAK;AACvD,OAAI,CAAC,YAAY,QAChB,QAAO;IACN,SAAS;IACT,OAAO;KACN,MAAM;KACN,SAAS;KACT,SAAS,EAAE,YAAY,YAAY,MAAM;KACzC;IACD,QAAQ;IACR;AAEF,oBAAiB,YAAY;QAE7B,kBAAiB,QAAQ;EAK1B,MAAM,eAA6B;GAClC,GAFmB,KAAK,eAAe,cAAc,KAAK,OAAO;GAGjE,OAAO;GAIP,SAAS,yBAAyB,QAAQ,QAAQ;GAClD,aAAa,mBAAmB,QAAQ,SAAS,KAAK,oBAAoB;GAC1E,MAAM,QAAQ;GACd,IAAI,QAAQ;GACZ;AAGD,MAAI;AAEH,UAAO;IACN,SAAS;IACT,MAHc,MAAM,MAAM,QAAQ,aAAa;IAI/C,QAAQ;IACR;WACO,OAAO;AACf,OAAI,iBAAiB,sBACpB,QAAO;IACN,SAAS;IACT,OAAO;KAAE,MAAM,MAAM;KAAM,SAAS,MAAM;KAAS;IACnD,QAAQ,MAAM;IACd;AAGF,OAAI,mBAAmB,MAAM,CAC5B,QAAO;IACN,SAAS;IACT,OAAO;KACN,MAAM,MAAM;KACZ,SAAS,MAAM;KACf,SAAS,MAAM;KACf;IACD,QAAQ,MAAM;IACd;AAIF,WAAQ,MAAM,WAAW,KAAK,OAAO,GAAG,0BAA0B,MAAM;AACxE,UAAO;IACN,SAAS;IACT,OAAO;KACN,MAAM;KACN,SAAS;KACT;IACD,QAAQ;IACR;;;;;;CAOH,gBAA0B;AACzB,SAAO,OAAO,KAAK,KAAK,OAAO,OAAO;;;;;CAMvC,SAAS,MAAuB;AAC/B,SAAO,QAAQ,KAAK,OAAO;;;;;;CAO5B,aAAa,MAAgC;EAC5C,MAAM,QAAiC,KAAK,OAAO,OAAO;AAC1D,MAAI,CAAC,MAAO,QAAO;AACnB,SAAO,eAAe,MAAM;;;;;;AAO9B,IAAa,sBAAb,MAAiC;CAChC,AAAQ,2BAA4C,IAAI,KAAK;CAE7D,YAAY,AAAQ,gBAA6C;EAA7C;;;;;CAKpB,SAAS,QAA8B;EACtC,MAAM,UAAU,IAAI,mBAAmB,QAAQ,KAAK,eAAe;AACnE,OAAK,SAAS,IAAI,OAAO,IAAI,QAAQ;;;;;CAMtC,WAAW,UAAwB;AAClC,OAAK,SAAS,OAAO,SAAS;;;;;CAM/B,MAAM,OACL,UACA,WACA,SACuB;EACvB,MAAM,UAAU,KAAK,SAAS,IAAI,SAAS;AAE3C,MAAI,CAAC,QACJ,QAAO;GACN,SAAS;GACT,OAAO;IACN,MAAM;IACN,SAAS,WAAW,SAAS;IAC7B;GACD,QAAQ;GACR;AAGF,SAAO,QAAQ,OAAO,WAAW,QAAQ;;;;;CAM1C,eAAyB;AACxB,SAAO,CAAC,GAAG,KAAK,SAAS,MAAM,CAAC;;;;;CAMjC,UAAU,UAA4B;AACrC,SAAO,KAAK,SAAS,IAAI,SAAS,EAAE,eAAe,IAAI,EAAE;;;;;;CAO1D,aAAa,UAAkB,WAAqC;EACnE,MAAM,UAAU,KAAK,SAAS,IAAI,SAAS;AAC3C,MAAI,CAAC,QAAS,QAAO;AACrB,SAAO,QAAQ,aAAa,UAAU"}

package/dist/{runner-C5NeAkBQ.mjs → runner-Bkkfk4O8.mjs} RENAMED Viewed

@@ -1,8 +1,9 @@
+import { r as isMissingTableError } from "./db-errors-unnO6yiZ.mjs";
 import { MIGRATION_LOCK_BUSY_MESSAGE } from "./database/pg-migration-lock.mjs";
 import { MIGRATION_LOCK_TABLE, busyLockHeldSince, migrationLockHeldMessage } from "./database/migration-lock.mjs";
 import { t as validateIdentifier } from "./validate-DANX1-Qi.mjs";
-import { a as currentTimestamp, d as isSqlite, l as indexExists, m as listTablesLike, o as currentTimestampValue, r as columnExists, t as binaryType, u as isPostgres, y as tableExists } from "./dialect-helpers-7_IqPdh9.mjs";
-import { r as getI18nConfig } from "./config-CvmjJcVw.mjs";
+import { a as currentTimestamp, b as tableExists, d as isSqlite, l as indexExists, m as listTablesLike, o as currentTimestampValue, r as columnExists, t as binaryType, u as isPostgres } from "./dialect-helpers-B1XN2HGB.mjs";
+import { r as getI18nConfig } from "./config-Cs_AwWXI.mjs";
 import { n as normalizeContentDatetimes, r as normalizeDatetime, t as DatetimeNormalizationError } from "./datetime-normalization-PeiEdcRY.mjs";
 import { createRequire } from "node:module";
 import { PostgresAdapter, sql } from "kysely";
@@ -6223,6 +6224,52 @@ async function up(db) {
 }
 async function down(_db) {}
+//#endregion
+//#region src/database/migrations/content-sized.ts
+async function countCapped(db, rows, cap) {
+	try {
+		const result = await sql`
+			SELECT COUNT(*) AS count FROM (${rows} LIMIT ${cap}) AS capped
+		`.execute(db);
+		return Number(result.rows[0]?.count ?? 0);
+	} catch (error) {
+		if (isMissingTableError(error)) return 0;
+		throw error;
+	}
+}
+const DATETIME_COLLECTIONS = sql`
+	SELECT collection.slug FROM _emdash_collections AS collection
+	INNER JOIN _emdash_fields AS field ON field.collection_id = collection.id
+	WHERE field.type IN ('datetime', 'repeater')
+`;
+/**
+* 079 can update every content entry, and every revision of a collection with
+* datetime or repeater fields, one statement each. It only reads the other
+* revisions, 50 per statement in each of its three passes, so about 16 of them
+* cost what one written row does.
+*/
+const READ_ONLY_REVISIONS_PER_ROW = 16;
+async function countDatetimeNormalizationRows(db, cap) {
+	let slugs;
+	try {
+		slugs = (await db.selectFrom("_emdash_collections").select("slug").execute()).map((collection) => collection.slug);
+	} catch (error) {
+		if (isMissingTableError(error)) return 0;
+		throw error;
+	}
+	let rows = await countCapped(db, sql`SELECT 1 FROM revisions WHERE collection IN (${DATETIME_COLLECTIONS})`, cap);
+	for (const slug of slugs) {
+		if (rows >= cap) return rows;
+		validateIdentifier(slug, "collection slug");
+		rows += await countCapped(db, sql`SELECT 1 FROM ${sql.ref(`ec_${slug}`)}`, cap - rows);
+	}
+	if (rows >= cap) return rows;
+	const readOnly = await countCapped(db, sql`SELECT 1 FROM revisions WHERE collection NOT IN (${DATETIME_COLLECTIONS})`, (cap - rows) * READ_ONLY_REVISIONS_PER_ROW);
+	return rows + Math.ceil(readOnly / READ_ONLY_REVISIONS_PER_ROW);
+}
+/** Keyed by migration name, since a published migration's module must not change. */
+const CONTENT_SIZED_MIGRATIONS = new Map([["079_datetime_normalization", { countRows: countDatetimeNormalizationRows }]]);
 //#endregion
 //#region src/database/migrations/runner.ts
 const MIGRATIONS = Object.freeze({
@@ -6368,6 +6415,21 @@ var MigrationFailedError = class extends Error {
 		this.name = "MigrationFailedError";
 	}
 };
+/**
+* Thrown before the migration lock is taken when the pending content-sized
+* migrations process more rows than the caller's `contentRowLimit`. Nothing
+* has been applied; `emdash migrate` applies them outside a request.
+*/
+var MigrationRowLimitError = class extends Error {
+	migrations;
+	rowLimit;
+	constructor(migrations, rowLimit) {
+		super(`Pending migration ${migrations.join(", ")} processes more than ${rowLimit} content rows, too many to apply while serving a request. Apply it with \`emdash migrate\`: https://docs.emdashcms.com/deployment/core-migrations/#apply-large-content-migrations-from-the-cli`);
+		this.name = "MigrationRowLimitError";
+		this.migrations = [...migrations];
+		this.rowLimit = rowLimit;
+	}
+};
 /** Custom migration table name */
 const MIGRATION_TABLE = "_emdash_migrations";
 function createMigrator(db, options) {
@@ -6534,6 +6596,17 @@ async function getExactMigrationStatus(db, options) {
 		unknownApplied: [...appliedNames].filter((name) => !knownNames.has(name)).toSorted()
 	};
 }
+async function assertWithinContentRowLimit(db, rowLimit, options) {
+	const { pending } = await getExactMigrationStatus(db, options);
+	const sized = pending.filter((name) => CONTENT_SIZED_MIGRATIONS.has(name));
+	let rows = 0;
+	for (const name of sized) {
+		const migration = CONTENT_SIZED_MIGRATIONS.get(name);
+		if (!migration) continue;
+		rows += await migration.countRows(db, rowLimit + 1 - rows);
+		if (rows > rowLimit) throw new MigrationRowLimitError(sized, rowLimit);
+	}
+}
 /**
 * Run all pending migrations.
 *
@@ -6560,6 +6633,7 @@ async function runMigrations(db, options) {
 		const initialCount = await getAppliedMigrationCount(db);
 		if (initialCount !== null && initialCount >= MIGRATION_COUNT) return { applied: [] };
 	}
+	if (options?.contentRowLimit !== void 0) await assertWithinContentRowLimit(db, options.contentRowLimit, options);
 	const { error, results } = await createMigrator(db, options).migrateToLatest();
 	const applied = results?.filter((r) => r.status === "Success").map((r) => r.migrationName) ?? [];
 	if (error) {
@@ -6591,5 +6665,5 @@ async function rollbackMigration(db, options) {
 }
 //#endregion
-export { getExactMigrationStatus as a, runMigrations as c, __exportAll as d, MigrationLockHeldError as i, formatDatetimeStorageReport as l, MIGRATION_RACE_WAIT_MS as n, getMigrationStatus as o, MigrationFailedError as r, rollbackMigration as s, MIGRATION_NAMES as t, scanDatetimeStorage as u };
-//# sourceMappingURL=runner-C5NeAkBQ.mjs.map
+export { MigrationRowLimitError as a, rollbackMigration as c, scanDatetimeStorage as d, __exportAll as f, MigrationLockHeldError as i, runMigrations as l, MIGRATION_RACE_WAIT_MS as n, getExactMigrationStatus as o, MigrationFailedError as r, getMigrationStatus as s, MIGRATION_NAMES as t, formatDatetimeStorageReport as u };
+//# sourceMappingURL=runner-Bkkfk4O8.mjs.map