emdash 1.3.1 → 1.4.0

package/dist/settings-D932YP2-.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"settings-D932YP2-.mjs","names":[],"sources":["../src/plugins/settings.ts","../src/settings/index.ts"],"sourcesContent":["import { resolvePluginEncryptionKeys, type ParsedEncryptionKey } from \"../config/secrets.js\";\nimport type { OptionsRepository } from \"../database/repositories/options.js\";\nimport { decodeBase64url, encodeBase64url } from \"../utils/base64.js\";\nimport { assertStorageKey } from \"./conditional-storage.js\";\nexport { createPluginSecretRedactor } from \"./secret-redactor.js\";\nexport type { PluginSecretRedactor } from \"./secret-redactor.js\";\nimport type {\n\tConditionalDeleteResult,\n\tConditionalWriteResult,\n\tSettingField,\n\tSettingsAccess,\n\tVersionedValue,\n} from \"./types.js\";\n\nconst ENVELOPE_VERSION = 1;\nconst ENVELOPE_MARKER = \"plugin-setting\";\nconst IV_BYTES = 12;\nconst KEY_ID_PATTERN = /^[0-9a-f]{8}$/;\nconst BASE64URL_PATTERN = /^[A-Za-z0-9_-]+$/;\nconst textEncoder = new TextEncoder();\nconst textDecoder = new TextDecoder(\"utf-8\", { fatal: true });\n\nexport interface EncryptedPluginSetting {\n\t$emdash: \"plugin-setting\";\n\tv: 1;\n\tkid: string;\n\tiv: string;\n\tciphertext: string;\n}\n\nexport class PluginSettingEncryptionError extends Error {\n\toverride readonly name = \"PluginSettingEncryptionError\";\n\treadonly code:\n\t\t| \"PLUGIN_SETTING_ENCRYPTION_KEY_MISSING\"\n\t\t| \"PLUGIN_SETTING_ENCRYPTION_KEY_UNKNOWN\"\n\t\t| \"PLUGIN_SETTING_ENCRYPTION_FAILED\"\n\t\t| \"PLUGIN_SETTING_DECRYPTION_FAILED\";\n\n\tconstructor(code: PluginSettingEncryptionError[\"code\"], message: string) {\n\t\tsuper(message);\n\t\tthis.code = code;\n\t}\n}\n\nexport function isEncryptedPluginSetting(value: unknown): value is EncryptedPluginSetting {\n\tif (typeof value !== \"object\" || value === null || Array.isArray(value)) return false;\n\treturn (\n\t\tObject.keys(value).length === 5 &&\n\t\t\"$emdash\" in value &&\n\t\tvalue.$emdash === ENVELOPE_MARKER &&\n\t\t\"v\" in value &&\n\t\tvalue.v === ENVELOPE_VERSION &&\n\t\t\"kid\" in value &&\n\t\ttypeof value.kid === \"string\" &&\n\t\tKEY_ID_PATTERN.test(value.kid) &&\n\t\t\"iv\" in value &&\n\t\ttypeof value.iv === \"string\" &&\n\t\tBASE64URL_PATTERN.test(value.iv) &&\n\t\t\"ciphertext\" in value &&\n\t\ttypeof value.ciphertext === \"string\" &&\n\t\tBASE64URL_PATTERN.test(value.ciphertext)\n\t);\n}\n\nfunction additionalData(pluginId: string, key: string): Uint8Array {\n\treturn textEncoder.encode(\n\t\tJSON.stringify([\"emdash-plugin-setting\", ENVELOPE_VERSION, pluginId, key]),\n\t);\n}\n\nfunction exactBuffer(bytes: Uint8Array): ArrayBuffer {\n\treturn bytes.slice().buffer;\n}\n\nasync function importEncryptionKey(key: ParsedEncryptionKey, usage: KeyUsage): Promise<CryptoKey> {\n\treturn crypto.subtle.importKey(\"raw\", exactBuffer(key.key), \"AES-GCM\", false, [usage]);\n}\n\nasync function keysOrDefault(\n\tkeys: ParsedEncryptionKey[] | null | undefined,\n): Promise<ParsedEncryptionKey[] | null> {\n\treturn keys === undefined ? resolvePluginEncryptionKeys() : keys;\n}\n\nexport async function encryptPluginSetting(\n\tpluginId: string,\n\tkey: string,\n\tvalue: string,\n\tkeys?: ParsedEncryptionKey[] | null,\n): Promise<EncryptedPluginSetting> {\n\tconst resolved = await keysOrDefault(keys);\n\tconst primary = resolved?.[0];\n\tif (!primary) {\n\t\tthrow new PluginSettingEncryptionError(\n\t\t\t\"PLUGIN_SETTING_ENCRYPTION_KEY_MISSING\",\n\t\t\t\"Plugin secret settings require EMDASH_ENCRYPTION_KEY\",\n\t\t);\n\t}\n\n\ttry {\n\t\tconst iv = crypto.getRandomValues(new Uint8Array(IV_BYTES));\n\t\tconst cryptoKey = await importEncryptionKey(primary, \"encrypt\");\n\t\tconst ciphertext = await crypto.subtle.encrypt(\n\t\t\t{\n\t\t\t\tname: \"AES-GCM\",\n\t\t\t\tiv: exactBuffer(iv),\n\t\t\t\tadditionalData: exactBuffer(additionalData(pluginId, key)),\n\t\t\t},\n\t\t\tcryptoKey,\n\t\t\texactBuffer(textEncoder.encode(value)),\n\t\t);\n\t\treturn {\n\t\t\t$emdash: ENVELOPE_MARKER,\n\t\t\tv: ENVELOPE_VERSION,\n\t\t\tkid: primary.kid,\n\t\t\tiv: encodeBase64url(iv),\n\t\t\tciphertext: encodeBase64url(new Uint8Array(ciphertext)),\n\t\t};\n\t} catch (error) {\n\t\tif (error instanceof PluginSettingEncryptionError) throw error;\n\t\tthrow new PluginSettingEncryptionError(\n\t\t\t\"PLUGIN_SETTING_ENCRYPTION_FAILED\",\n\t\t\t\"Plugin secret setting could not be encrypted\",\n\t\t);\n\t}\n}\n\nexport async function decryptPluginSetting(\n\tpluginId: string,\n\tkey: string,\n\tenvelope: EncryptedPluginSetting,\n\tkeys?: ParsedEncryptionKey[] | null,\n): Promise<string> {\n\tconst resolved = await keysOrDefault(keys);\n\tif (!resolved?.length) {\n\t\tthrow new PluginSettingEncryptionError(\n\t\t\t\"PLUGIN_SETTING_ENCRYPTION_KEY_MISSING\",\n\t\t\t\"Plugin secret setting cannot be decrypted because its encryption key is unavailable\",\n\t\t);\n\t}\n\tconst matched = resolved.find((candidate) => candidate.kid === envelope.kid);\n\tif (!matched) {\n\t\tthrow new PluginSettingEncryptionError(\n\t\t\t\"PLUGIN_SETTING_ENCRYPTION_KEY_UNKNOWN\",\n\t\t\t\"Plugin secret setting was encrypted with an unavailable key\",\n\t\t);\n\t}\n\n\ttry {\n\t\tconst iv = decodeBase64url(envelope.iv);\n\t\tconst ciphertext = decodeBase64url(envelope.ciphertext);\n\t\tif (iv.byteLength !== IV_BYTES || ciphertext.byteLength < 16)\n\t\t\tthrow new Error(\"invalid envelope\");\n\t\tconst cryptoKey = await importEncryptionKey(matched, \"decrypt\");\n\t\tconst plaintext = await crypto.subtle.decrypt(\n\t\t\t{\n\t\t\t\tname: \"AES-GCM\",\n\t\t\t\tiv: exactBuffer(iv),\n\t\t\t\tadditionalData: exactBuffer(additionalData(pluginId, key)),\n\t\t\t},\n\t\t\tcryptoKey,\n\t\t\texactBuffer(ciphertext),\n\t\t);\n\t\treturn textDecoder.decode(plaintext);\n\t} catch {\n\t\tthrow new PluginSettingEncryptionError(\n\t\t\t\"PLUGIN_SETTING_DECRYPTION_FAILED\",\n\t\t\t\"Plugin secret setting could not be decrypted\",\n\t\t);\n\t}\n}\n\nfunction isSecretField(schema: Record<string, SettingField>, key: string): boolean {\n\treturn schema[key]?.type === \"secret\";\n}\n\nexport async function encodePluginSettingValue(\n\tpluginId: string,\n\tkey: string,\n\tvalue: unknown,\n\tschema: Record<string, SettingField>,\n\tkeys?: ParsedEncryptionKey[] | null,\n\tonSecret?: (key: string, value: string) => void,\n): Promise<unknown> {\n\tif (!isSecretField(schema, key)) return value;\n\tif (typeof value !== \"string\") {\n\t\tthrow new PluginSettingEncryptionError(\n\t\t\t\"PLUGIN_SETTING_ENCRYPTION_FAILED\",\n\t\t\t\"Plugin secret settings must be strings\",\n\t\t);\n\t}\n\tonSecret?.(key, value);\n\treturn encryptPluginSetting(pluginId, key, value, keys);\n}\n\nexport async function decodePluginSettingValue<T = unknown>(\n\tpluginId: string,\n\tkey: string,\n\tvalue: unknown,\n\tschema: Record<string, SettingField>,\n\tkeys?: ParsedEncryptionKey[] | null,\n\tonSecret?: (key: string, value: string) => void,\n): Promise<T> {\n\tif (!isSecretField(schema, key)) {\n\t\tif (isEncryptedPluginSetting(value)) {\n\t\t\tthrow new PluginSettingEncryptionError(\n\t\t\t\t\"PLUGIN_SETTING_DECRYPTION_FAILED\",\n\t\t\t\t\"Encrypted plugin setting is not declared as a secret\",\n\t\t\t);\n\t\t}\n\t\t// eslint-disable-next-line typescript/no-unsafe-type-assertion -- caller supplies the expected non-secret setting type\n\t\treturn value as T;\n\t}\n\tif (typeof value === \"string\") {\n\t\tonSecret?.(key, value);\n\t\t// eslint-disable-next-line typescript/no-unsafe-type-assertion -- secret schema guarantees a string and caller supplies its compatible type\n\t\treturn value as T;\n\t}\n\tif (!isEncryptedPluginSetting(value)) {\n\t\tthrow new PluginSettingEncryptionError(\n\t\t\t\"PLUGIN_SETTING_DECRYPTION_FAILED\",\n\t\t\t\"Plugin secret setting has an invalid encrypted envelope\",\n\t\t);\n\t}\n\tconst decrypted = await decryptPluginSetting(pluginId, key, value, keys);\n\tonSecret?.(key, decrypted);\n\t// eslint-disable-next-line typescript/no-unsafe-type-assertion -- secret schema guarantees a string and caller supplies its compatible type\n\treturn decrypted as T;\n}\n\nexport function createSettingsAccess(\n\toptionsRepo: OptionsRepository,\n\tpluginId: string,\n\tschema: Record<string, SettingField> = {},\n\tkeys?: ParsedEncryptionKey[] | null,\n\tonSecret?: (key: string, value: string) => void,\n): SettingsAccess {\n\tconst prefix = `plugin:${pluginId}:settings:`;\n\tconst optionKey = (key: string) => {\n\t\tassertStorageKey(key);\n\t\treturn `${prefix}${key}`;\n\t};\n\n\treturn {\n\t\tasync get<T>(key: string): Promise<T | null> {\n\t\t\tconst value = await optionsRepo.get(optionKey(key));\n\t\t\treturn value === null\n\t\t\t\t? null\n\t\t\t\t: decodePluginSettingValue<T>(pluginId, key, value, schema, keys, onSecret);\n\t\t},\n\t\tasync getVersioned<T>(key: string): Promise<VersionedValue<T> | null> {\n\t\t\tconst value = await optionsRepo.getVersioned(optionKey(key));\n\t\t\tif (!value) return null;\n\t\t\treturn {\n\t\t\t\tvalue: await decodePluginSettingValue<T>(\n\t\t\t\t\tpluginId,\n\t\t\t\t\tkey,\n\t\t\t\t\tvalue.value,\n\t\t\t\t\tschema,\n\t\t\t\t\tkeys,\n\t\t\t\t\tonSecret,\n\t\t\t\t),\n\t\t\t\trevision: value.revision,\n\t\t\t};\n\t\t},\n\t\tasync compareAndSet(\n\t\t\tkey: string,\n\t\t\texpectedRevision: string | null,\n\t\t\tvalue: unknown,\n\t\t): Promise<ConditionalWriteResult> {\n\t\t\treturn optionsRepo.compareAndSet(\n\t\t\t\toptionKey(key),\n\t\t\t\texpectedRevision,\n\t\t\t\tawait encodePluginSettingValue(pluginId, key, value, schema, keys, onSecret),\n\t\t\t);\n\t\t},\n\t\tcompareAndDelete(key: string, expectedRevision: string): Promise<ConditionalDeleteResult> {\n\t\t\treturn optionsRepo.compareAndDelete(optionKey(key), expectedRevision);\n\t\t},\n\t\tasync set(key: string, value: unknown): Promise<void> {\n\t\t\tawait optionsRepo.set(\n\t\t\t\toptionKey(key),\n\t\t\t\tawait encodePluginSettingValue(pluginId, key, value, schema, keys, onSecret),\n\t\t\t);\n\t\t},\n\t\tdelete(key: string): Promise<boolean> {\n\t\t\treturn optionsRepo.delete(optionKey(key));\n\t\t},\n\t\tasync list(keyPrefix = \"\"): Promise<Array<{ key: string; value: unknown }>> {\n\t\t\tassertStorageKey(keyPrefix || \"_\");\n\t\t\tconst values = await optionsRepo.getByPrefix(`${prefix}${keyPrefix}`);\n\t\t\tconst result: Array<{ key: string; value: unknown }> = [];\n\t\t\tfor (const [fullKey, value] of values) {\n\t\t\t\tconst key = fullKey.slice(prefix.length);\n\t\t\t\tresult.push({\n\t\t\t\t\tkey,\n\t\t\t\t\tvalue: await decodePluginSettingValue(pluginId, key, value, schema, keys, onSecret),\n\t\t\t\t});\n\t\t\t}\n\t\t\treturn result;\n\t\t},\n\t};\n}\n","/**\n * Site Settings API\n *\n * Functions for getting and setting global site configuration.\n * Settings are stored in the options table with 'site:' prefix.\n */\n\nimport type { Kysely } from \"kysely\";\n\nimport { after } from \"../after.js\";\nimport { siteSettingsTag } from \"../cache/chrome-tags.js\";\nimport { resolvePluginEncryptionKeys } from \"../config/secrets.js\";\nimport { MediaRepository } from \"../database/repositories/media.js\";\nimport { OptionsRepository } from \"../database/repositories/options.js\";\nimport { withTransaction } from \"../database/transaction.js\";\nimport type { Database } from \"../database/types.js\";\nimport { getDb } from \"../loader.js\";\nimport { cachedQuery, invalidateObjectCache } from \"../object-cache/index.js\";\nimport { isRecord } from \"../plugin-utils.js\";\nimport {\n\tPluginSettingEncryptionError,\n\tdecryptPluginSetting,\n\tisEncryptedPluginSetting,\n} from \"../plugins/settings.js\";\nimport type { CacheHint } from \"../query.js\";\nimport { peekRequestCache, requestCached } from \"../request-cache.js\";\nimport { getRequestContext } from \"../request-context.js\";\nimport { bumpRunningExportWriteEpochs } from \"../transfer/fence.js\";\nimport { isMissingTableError } from \"../utils/db-errors.js\";\n\n/** Object-cache namespace for site settings. */\nconst SETTINGS_CACHE_NAMESPACE = \"settings\";\nimport type { Storage } from \"../storage/types.js\";\nimport {\n\tcreateSingleFlightCache,\n\ttype SingleFlightCache,\n\tinvalidateSingleFlightCache,\n\tsingleFlightCached,\n} from \"../utils/single-flight-cache.js\";\nimport type {\n\tMediaReference,\n\tSeoSettings,\n\tSiteSettings,\n\tSiteSettingsUpdate,\n\tSiteSettingKey,\n} from \"./types.js\";\nimport { normalizeSiteSettingsVersion } from \"./version.js\";\n\n/** Prefix for site settings in the options table */\nconst SETTINGS_PREFIX = \"site:\";\n\n/** Settings stored as one object whose fields are updated individually. */\nconst NESTED_SETTING_KEYS = new Set([\"seo\", \"social\"]);\n\nfunction isPluginSettingEnvelopeRecord(value: unknown): value is Record<string, unknown> {\n\treturn (\n\t\ttypeof value === \"object\" &&\n\t\tvalue !== null &&\n\t\t!Array.isArray(value) &&\n\t\t\"$emdash\" in value &&\n\t\tvalue.$emdash === \"plugin-setting\"\n\t);\n}\n\nasync function decodePersistedPluginSetting(\n\tpluginId: string,\n\tkey: string,\n\tvalue: unknown,\n\tencryptionKeys?: Awaited<ReturnType<typeof resolvePluginEncryptionKeys>>,\n): Promise<unknown> {\n\tif (isEncryptedPluginSetting(value)) {\n\t\treturn decryptPluginSetting(pluginId, key, value, encryptionKeys);\n\t}\n\tif (isPluginSettingEnvelopeRecord(value)) {\n\t\tthrow new PluginSettingEncryptionError(\n\t\t\t\"PLUGIN_SETTING_DECRYPTION_FAILED\",\n\t\t\t\"Plugin secret setting has an invalid encrypted envelope\",\n\t\t);\n\t}\n\treturn value;\n}\n\n/**\n * Worker-isolate cache for the resolved `site:*` settings.\n *\n * Site settings (title, logo, SEO defaults) change rarely but are read on\n * every public request. Revalidate warm snapshots after 30 seconds in the\n * background, retaining the last good value if the reload fails.\n *\n * Backed by single-flight-cache.ts: concurrent cold reads coalesce onto one\n * query via a reclaimable single-flight lock and the resolved *value* is\n * cached — never a shared in-flight promise, so a cancelled request can't\n * poison the isolate (see that file's header). Stored on globalThis with a\n * Symbol.for key so Vite SSR chunk duplication doesn't produce two\n * independent caches (same pattern as request-context.ts).\n */\ninterface CachedSiteSettings {\n\tdata: Partial<SiteSettings>;\n\tversion: string;\n}\n\ninterface SiteSettingsCache {\n\tsnapshot: CachedSiteSettings | null;\n\texpiresAt: number;\n\tgeneration: number;\n\trevalidatingUntil: number;\n\trefresh: SingleFlightCache<CachedSiteSettings>;\n}\n\nconst SITE_SETTINGS_CACHE_TTL_MS = 30_000;\nconst SITE_SETTINGS_CACHE_KEY = Symbol.for(\"emdash:site-settings:swr\");\nconst g = globalThis as Record<symbol, unknown>;\nconst settingsCache: SiteSettingsCache =\n\t// eslint-disable-next-line typescript/no-unsafe-type-assertion -- globalThis singleton pattern (see request-context.ts)\n\t(g[SITE_SETTINGS_CACHE_KEY] as SiteSettingsCache | undefined) ??\n\t(() => {\n\t\tconst c: SiteSettingsCache = {\n\t\t\tsnapshot: null,\n\t\t\texpiresAt: 0,\n\t\t\tgeneration: 0,\n\t\t\trevalidatingUntil: 0,\n\t\t\trefresh: createSingleFlightCache<CachedSiteSettings>(),\n\t\t};\n\t\tg[SITE_SETTINGS_CACHE_KEY] = c;\n\t\treturn c;\n\t})();\n\n/** Capture the resolved snapshot before route-cache headers are finalized. @internal */\nexport function peekSiteSettingsSnapshot(): CachedSiteSettings | null {\n\treturn settingsCache.snapshot;\n}\n\n/** Discard a snapshot found stale by the route-cache freshness check. @internal */\nexport function invalidateSiteSettingsSnapshot(): void {\n\tsettingsCache.generation++;\n\tsettingsCache.snapshot = null;\n\tsettingsCache.expiresAt = 0;\n\tsettingsCache.revalidatingUntil = 0;\n\tinvalidateSingleFlightCache(settingsCache.refresh);\n}\n\n/**\n * Bump the isolate-wide site-settings cache version, forcing the next\n * `getSiteSettings()` to re-query the database.\n *\n * Called from every `site:*` write path. Other isolates still serve their\n * own cached copy while a background refresh picks up remote writes.\n */\nexport function invalidateSiteSettingsCache(): void {\n\tinvalidateSiteSettingsSnapshot();\n\t// Cross-isolate invalidation for the optional distributed object cache.\n\tinvalidateObjectCache(SETTINGS_CACHE_NAMESPACE);\n}\n\n/**\n * Type guard for MediaReference values\n */\nfunction isMediaReference(value: unknown): value is MediaReference {\n\treturn typeof value === \"object\" && value !== null && \"mediaId\" in value;\n}\n\n/**\n * Resolve a media reference to include the full URL plus content metadata.\n *\n * Pulls `mimeType` and intrinsic dimensions from the media row so callers\n * can emit correct head tags (e.g. `<link rel=\"icon\" type=\"image/svg+xml\">`,\n * which Chromium requires when the URL has no `.svg` extension) without\n * a second round-trip to the media table.\n */\nasync function resolveMediaReference(\n\tmediaRef: MediaReference | undefined,\n\tdb: Kysely<Database>,\n\t_storage: Storage | null,\n): Promise<MediaReference | undefined> {\n\tif (!mediaRef?.mediaId) {\n\t\treturn mediaRef;\n\t}\n\n\ttry {\n\t\tconst mediaRepo = new MediaRepository(db);\n\t\tconst media = await mediaRepo.findById(mediaRef.mediaId);\n\n\t\tif (media) {\n\t\t\t// Construct URL using the same pattern as API handlers\n\t\t\treturn {\n\t\t\t\t...mediaRef,\n\t\t\t\turl: `/_emdash/api/media/file/${media.storageKey}`,\n\t\t\t\tcontentType: media.mimeType,\n\t\t\t\t...(media.width !== null ? { width: media.width } : {}),\n\t\t\t\t...(media.height !== null ? { height: media.height } : {}),\n\t\t\t};\n\t\t}\n\t} catch {\n\t\t// If media not found or error, return the reference as-is\n\t}\n\n\treturn mediaRef;\n}\n\n/**\n * Get a single site setting by key\n *\n * Returns `undefined` if the setting has not been configured.\n * For media settings (logo, favicon), the URL is resolved automatically.\n *\n * @param key - The setting key (e.g., \"title\", \"logo\", \"social\")\n * @returns The setting value, or undefined if not set\n *\n * @example\n * ```ts\n * import { getSiteSetting } from \"emdash\";\n *\n * const title = await getSiteSetting(\"title\");\n * const logo = await getSiteSetting(\"logo\");\n * console.log(logo?.url); // Resolved URL\n * ```\n */\nexport async function getSiteSetting<K extends SiteSettingKey>(\n\tkey: K,\n): Promise<SiteSettings[K] | undefined> {\n\t// If `getSiteSettings()` has already been called in this request,\n\t// read from that (request-cached) batch rather than firing a second\n\t// options-table query. Common layout: a Base template pulls the\n\t// whole settings object up-front, then `EmDashHead` or a plugin\n\t// asks for one key — no reason the singular call should round-trip\n\t// again.\n\tconst primed = peekRequestCache<Partial<SiteSettings>>(\"siteSettings\");\n\tif (primed) {\n\t\tconst settings = await primed;\n\t\treturn settings[key];\n\t}\n\n\t// Otherwise cache per-key. Templates that pull several settings\n\t// independently still share the in-flight query for each one.\n\treturn requestCached(`siteSetting:${key}`, async () => {\n\t\tconst db = await getDb();\n\t\treturn getSiteSettingWithDb(key, db);\n\t});\n}\n\n/**\n * Get a single site setting by key (with explicit db)\n *\n * @internal Use `getSiteSetting()` in templates. This variant is for admin routes\n * that already have a database handle.\n */\nexport async function getSiteSettingWithDb<K extends SiteSettingKey>(\n\tkey: K,\n\tdb: Kysely<Database>,\n\tstorage: Storage | null = null,\n): Promise<SiteSettings[K] | undefined> {\n\tconst options = new OptionsRepository(db);\n\tconst value = await options.get<SiteSettings[K]>(`${SETTINGS_PREFIX}${key}`);\n\n\tif (!value) {\n\t\treturn undefined;\n\t}\n\n\t// Resolve media references if needed.\n\t// TS cannot narrow generic K from key equality checks — this is a known limitation.\n\t// We use the non-generic getSiteSettingsWithDb for media resolution instead.\n\tif ((key === \"logo\" || key === \"favicon\") && isMediaReference(value)) {\n\t\tconst resolved = await resolveMediaReference(value, db, storage);\n\t\t// eslint-disable-next-line typescript/no-unsafe-type-assertion -- TS can't narrow generic K from key equality; resolved type is correct\n\t\treturn resolved as SiteSettings[K] | undefined;\n\t}\n\n\tif (key === \"seo\" && value && typeof value === \"object\") {\n\t\t// eslint-disable-next-line typescript/no-unsafe-type-assertion -- TS can't narrow generic K from key equality\n\t\tconst seo = value as SeoSettings;\n\t\tif (seo.defaultOgImage) {\n\t\t\tconst resolved = {\n\t\t\t\t...seo,\n\t\t\t\tdefaultOgImage: await resolveMediaReference(seo.defaultOgImage, db, storage),\n\t\t\t};\n\t\t\t// eslint-disable-next-line typescript/no-unsafe-type-assertion -- TS can't narrow generic K from key equality\n\t\t\treturn resolved as SiteSettings[K] | undefined;\n\t\t}\n\t}\n\n\treturn value;\n}\n\nfunction refreshSiteSettings(): Promise<CachedSiteSettings> {\n\treturn singleFlightCached(\n\t\tsettingsCache.refresh,\n\t\t() =>\n\t\t\tcachedQuery({\n\t\t\t\tnamespace: SETTINGS_CACHE_NAMESPACE,\n\t\t\t\tkey: \"snapshot-v1\",\n\t\t\t\tload: async () => loadSiteSettingsSnapshot(await getDb()),\n\t\t\t}),\n\t\t{ anchor: (promise) => after(() => promise), ownerTimeoutMs: 30_000 },\n\t);\n}\n\nfunction installSiteSettings(snapshot: CachedSiteSettings): void {\n\tsettingsCache.snapshot = snapshot;\n\tsettingsCache.expiresAt = Date.now() + SITE_SETTINGS_CACHE_TTL_MS;\n}\n\nfunction revalidateSiteSettings(): void {\n\tconst now = Date.now();\n\tif (settingsCache.revalidatingUntil > now) return;\n\tsettingsCache.revalidatingUntil = now + SITE_SETTINGS_CACHE_TTL_MS;\n\tconst generation = ++settingsCache.generation;\n\tinvalidateSingleFlightCache(settingsCache.refresh);\n\tafter(async () => {\n\t\ttry {\n\t\t\tconst snapshot = await refreshSiteSettings();\n\t\t\tif (generation === settingsCache.generation) installSiteSettings(snapshot);\n\t\t} catch (error) {\n\t\t\tconsole.error(\"[emdash:settings] revalidating site settings failed:\", error);\n\t\t}\n\t});\n}\n\nasync function loadCachedSiteSettings(): Promise<CachedSiteSettings> {\n\tfor (let attempt = 0; attempt < 3; attempt++) {\n\t\tconst snapshot = settingsCache.snapshot;\n\t\tif (snapshot) {\n\t\t\tif (Date.now() >= settingsCache.expiresAt) revalidateSiteSettings();\n\t\t\treturn snapshot;\n\t\t}\n\t\tconst generation = settingsCache.generation;\n\t\tconst loaded = await refreshSiteSettings();\n\t\tif (generation === settingsCache.generation) {\n\t\t\tinstallSiteSettings(loaded);\n\t\t\treturn loaded;\n\t\t}\n\t\tif (attempt === 2) return loaded;\n\t}\n\tthrow new Error(\"Site settings refresh exhausted without loading settings\");\n}\n\n/**\n * Get all site settings\n *\n * Returns all configured settings. Unset values are undefined.\n * Media references (logo/favicon) are resolved to include URLs.\n *\n * @example\n * ```ts\n * import { getSiteSettings } from \"emdash\";\n *\n * const settings = await getSiteSettings();\n * console.log(settings.title); // \"My Site\"\n * console.log(settings.logo?.url); // \"/_emdash/api/media/file/abc123\"\n * ```\n */\nexport function getSiteSettings(): Promise<Partial<SiteSettings>> {\n\treturn requestCached(\"siteSettings\", async () => {\n\t\tconst snapshot = await requestCached(\"siteSettingsSnapshot\", async () => {\n\t\t\tconst ctx = getRequestContext();\n\t\t\tconst requestSettings = ctx?.siteSettings;\n\t\t\tif (ctx?.routeCacheFill) return loadSiteSettingsSnapshot(await getDb());\n\t\t\tlet loaded = requestSettings?.snapshot ?? (await loadCachedSiteSettings());\n\t\t\t// A cold streamed component may join a load started before verification.\n\t\t\t// Reload an older result instead of streaming that snapshot into a fill.\n\t\t\tif (requestSettings?.version !== undefined && loaded.version !== requestSettings.version) {\n\t\t\t\tinvalidateSiteSettingsSnapshot();\n\t\t\t\tconst generation = settingsCache.generation;\n\t\t\t\tloaded = await loadSiteSettingsSnapshot(await getDb());\n\t\t\t\tif (generation === settingsCache.generation) installSiteSettings(loaded);\n\t\t\t}\n\t\t\treturn loaded;\n\t\t});\n\t\treturn snapshot.data;\n\t}).then(async (data) => {\n\t\tconst snapshot = await peekRequestCache<CachedSiteSettings>(\"siteSettingsSnapshot\");\n\t\tif (snapshot) getRequestContext()?.siteSettings?.onRead(snapshot.version);\n\t\treturn data;\n\t});\n}\n\n/**\n * Get all site settings with a Workers edge-cache hint.\n *\n * Use the returned `cacheHint` with `Astro.cache.set()` so pages that render\n * settings can be purged automatically when site settings change.\n */\nexport async function getSiteSettingsWithCacheHint(): Promise<{\n\tdata: Partial<SiteSettings>;\n\tcacheHint: CacheHint;\n}> {\n\tconst data = await getSiteSettings();\n\treturn { data, cacheHint: { tags: [siteSettingsTag()] } };\n}\n\n/**\n * Get all site settings (with explicit db)\n *\n * @internal Use `getSiteSettings()` in templates. This variant is for admin routes\n * that already have a database handle.\n */\nexport async function getSiteSettingsWithDb(\n\tdb: Kysely<Database>,\n\tstorage: Storage | null = null,\n): Promise<Partial<SiteSettings>> {\n\treturn (await loadSiteSettingsSnapshot(db, storage)).data;\n}\n\nasync function loadSiteSettingsSnapshot(\n\tdb: Kysely<Database>,\n\tstorage: Storage | null = null,\n): Promise<CachedSiteSettings> {\n\tconst options = new OptionsRepository(db);\n\tconst allOptions = await options.getVersionedByPrefix(SETTINGS_PREFIX);\n\tconst version = normalizeSiteSettingsVersion(\n\t\tJSON.stringify(\n\t\t\t[...allOptions]\n\t\t\t\t.filter(([key]) => key.startsWith(SETTINGS_PREFIX))\n\t\t\t\t.map(([key, value]) => [key, value.revision]),\n\t\t),\n\t);\n\tconst settings: Record<string, unknown> = {};\n\n\tfor (const [key, value] of allOptions) {\n\t\tconst settingKey = key.replace(SETTINGS_PREFIX, \"\");\n\t\tsettings[settingKey] = value.value;\n\t}\n\n\tconst typedSettings = settings as Partial<SiteSettings>;\n\n\t// Resolve media references\n\tif (typedSettings.logo) {\n\t\ttypedSettings.logo = await resolveMediaReference(typedSettings.logo, db, storage);\n\t}\n\tif (typedSettings.favicon) {\n\t\ttypedSettings.favicon = await resolveMediaReference(typedSettings.favicon, db, storage);\n\t}\n\tif (typedSettings.seo?.defaultOgImage) {\n\t\ttypedSettings.seo = {\n\t\t\t...typedSettings.seo,\n\t\t\tdefaultOgImage: await resolveMediaReference(typedSettings.seo.defaultOgImage, db, storage),\n\t\t};\n\t}\n\n\treturn { data: typedSettings, version };\n}\n\n/**\n * Set site settings (internal function used by admin API)\n *\n * Merges provided settings with existing ones. Only provided fields are updated,\n * including fields inside `seo` and `social`; `seo.defaultOgImage: null` removes the default image.\n * Media references should include just the mediaId; URLs are resolved on read.\n *\n * @param settings - Partial settings object with values to update\n * @param db - Kysely database instance\n * @returns Promise that resolves when settings are saved\n *\n * @internal\n *\n * @example\n * ```ts\n * // Update multiple settings at once\n * await setSiteSettings({\n *   title: \"My Site\",\n *   tagline: \"Welcome\",\n *   logo: { mediaId: \"med_123\", alt: \"Logo\" }\n * }, db);\n * ```\n */\nexport async function setSiteSettings(\n\tsettings: SiteSettingsUpdate,\n\tdb: Kysely<Database>,\n): Promise<void> {\n\tconst updates: Record<string, unknown> = {};\n\tconst deletions: string[] = [];\n\tconst nestedPatches: [key: string, patch: Record<string, unknown>][] = [];\n\n\tfor (const [key, value] of Object.entries(settings)) {\n\t\tif (value === undefined) continue;\n\t\tif (value === null) deletions.push(`${SETTINGS_PREFIX}${key}`);\n\t\telse if (NESTED_SETTING_KEYS.has(key) && isRecord(value)) nestedPatches.push([key, value]);\n\t\telse updates[`${SETTINGS_PREFIX}${key}`] = value;\n\t}\n\n\tif (Object.keys(updates).length === 0 && deletions.length === 0 && nestedPatches.length === 0) {\n\t\treturn;\n\t}\n\n\ttry {\n\t\tawait withTransaction(db, async (trx) => {\n\t\t\tconst transactionOptions = new OptionsRepository(trx);\n\t\t\tawait transactionOptions.setMany(updates);\n\t\t\tawait transactionOptions.deleteMany(deletions);\n\n\t\t\tfor (const [key, patch] of nestedPatches) {\n\t\t\t\tconst optionName = `${SETTINGS_PREFIX}${key}`;\n\t\t\t\tconst next = { ...(await transactionOptions.get<Record<string, unknown>>(optionName)) };\n\t\t\t\tfor (const [field, fieldValue] of Object.entries(patch)) {\n\t\t\t\t\tif (fieldValue === null) delete next[field];\n\t\t\t\t\telse if (fieldValue !== undefined) next[field] = fieldValue;\n\t\t\t\t}\n\t\t\t\tif (Object.keys(next).length === 0) await transactionOptions.delete(optionName);\n\t\t\t\telse await transactionOptions.set(optionName, next);\n\t\t\t}\n\n\t\t\t// A running export detects writes to tables without updated_at via\n\t\t\t// the operation's write_epoch. Record that bump in the same\n\t\t\t// transaction so the settings update is not accepted unless the\n\t\t\t// export fence can see it. When the transfer system has not been\n\t\t\t// installed yet (pre-migration, or a minimal seed fixture), there\n\t\t\t// is no running export to notify, so the absence of its table is\n\t\t\t// not a reason to reject the settings update.\n\t\t\ttry {\n\t\t\t\tawait bumpRunningExportWriteEpochs(trx);\n\t\t\t} catch (error) {\n\t\t\t\tif (isMissingTableError(error)) return;\n\t\t\t\tthrow error;\n\t\t\t}\n\t\t});\n\t} finally {\n\t\tinvalidateSiteSettingsCache();\n\t}\n}\n\n/**\n * Get a single plugin setting by key.\n *\n * Plugin settings are stored in the options table under\n * `plugin:<pluginId>:settings:<key>`.\n */\nexport async function getPluginSetting<T = unknown>(\n\tpluginId: string,\n\tkey: string,\n): Promise<T | undefined> {\n\tconst db = await getDb();\n\treturn getPluginSettingWithDb<T>(pluginId, key, db);\n}\n\n/**\n * Get a single plugin setting by key (with explicit db).\n *\n * @internal Use `getPluginSetting()` in templates and plugin rendering code.\n */\nexport async function getPluginSettingWithDb<T = unknown>(\n\tpluginId: string,\n\tkey: string,\n\tdb: Kysely<Database>,\n): Promise<T | undefined> {\n\tconst options = new OptionsRepository(db);\n\tconst value = await options.get(`plugin:${pluginId}:settings:${key}`);\n\tif (value === null) return undefined;\n\t// eslint-disable-next-line typescript/no-unsafe-type-assertion -- caller supplies the expected plugin setting type\n\treturn (await decodePersistedPluginSetting(pluginId, key, value)) as T;\n}\n\n/**\n * Get all persisted plugin settings for a plugin.\n *\n * Defaults declared in `admin.settingsSchema` are not materialized\n * automatically; callers should apply their own fallback defaults.\n */\nexport async function getPluginSettings(pluginId: string): Promise<Record<string, unknown>> {\n\tconst db = await getDb();\n\treturn getPluginSettingsWithDb(pluginId, db);\n}\n\n/**\n * Get all persisted plugin settings for a plugin (with explicit db).\n *\n * @internal Use `getPluginSettings()` in templates and plugin rendering code.\n */\nexport async function getPluginSettingsWithDb(\n\tpluginId: string,\n\tdb: Kysely<Database>,\n): Promise<Record<string, unknown>> {\n\tconst prefix = `plugin:${pluginId}:settings:`;\n\tconst options = new OptionsRepository(db);\n\tconst allOptions = await options.getByPrefix(prefix);\n\n\tconst entries = [...allOptions].filter(([key]) => key.startsWith(prefix));\n\tconst encryptionKeys = entries.some(([, value]) => isEncryptedPluginSetting(value))\n\t\t? await resolvePluginEncryptionKeys()\n\t\t: undefined;\n\treturn Object.fromEntries(\n\t\tawait Promise.all(\n\t\t\tentries.map(async ([storedKey, value]) => {\n\t\t\t\tconst key = storedKey.slice(prefix.length);\n\t\t\t\treturn [\n\t\t\t\t\tkey,\n\t\t\t\t\tawait decodePersistedPluginSetting(pluginId, key, value, encryptionKeys),\n\t\t\t\t] as const;\n\t\t\t}),\n\t\t),\n\t);\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;AAcA,MAAM,mBAAmB;AACzB,MAAM,kBAAkB;AACxB,MAAM,WAAW;AACjB,MAAM,iBAAiB;AACvB,MAAM,oBAAoB;AAC1B,MAAM,cAAc,IAAI,aAAa;AACrC,MAAM,cAAc,IAAI,YAAY,SAAS,EAAE,OAAO,MAAM,CAAC;AAU7D,IAAa,+BAAb,cAAkD,MAAM;CACvD,AAAkB,OAAO;CACzB,AAAS;CAMT,YAAY,MAA4C,SAAiB;AACxE,QAAM,QAAQ;AACd,OAAK,OAAO;;;AAId,SAAgB,yBAAyB,OAAiD;AACzF,KAAI,OAAO,UAAU,YAAY,UAAU,QAAQ,MAAM,QAAQ,MAAM,CAAE,QAAO;AAChF,QACC,OAAO,KAAK,MAAM,CAAC,WAAW,KAC9B,aAAa,SACb,MAAM,YAAY,mBAClB,OAAO,SACP,MAAM,MAAM,oBACZ,SAAS,SACT,OAAO,MAAM,QAAQ,YACrB,eAAe,KAAK,MAAM,IAAI,IAC9B,QAAQ,SACR,OAAO,MAAM,OAAO,YACpB,kBAAkB,KAAK,MAAM,GAAG,IAChC,gBAAgB,SAChB,OAAO,MAAM,eAAe,YAC5B,kBAAkB,KAAK,MAAM,WAAW;;AAI1C,SAAS,eAAe,UAAkB,KAAyB;AAClE,QAAO,YAAY,OAClB,KAAK,UAAU;EAAC;EAAyB;EAAkB;EAAU;EAAI,CAAC,CAC1E;;AAGF,SAAS,YAAY,OAAgC;AACpD,QAAO,MAAM,OAAO,CAAC;;AAGtB,eAAe,oBAAoB,KAA0B,OAAqC;AACjG,QAAO,OAAO,OAAO,UAAU,OAAO,YAAY,IAAI,IAAI,EAAE,WAAW,OAAO,CAAC,MAAM,CAAC;;AAGvF,eAAe,cACd,MACwC;AACxC,QAAO,SAAS,SAAY,6BAA6B,GAAG;;AAG7D,eAAsB,qBACrB,UACA,KACA,OACA,MACkC;CAElC,MAAM,WADW,MAAM,cAAc,KAAK,IACf;AAC3B,KAAI,CAAC,QACJ,OAAM,IAAI,6BACT,yCACA,uDACA;AAGF,KAAI;EACH,MAAM,KAAK,OAAO,gBAAgB,IAAI,WAAW,SAAS,CAAC;EAC3D,MAAM,YAAY,MAAM,oBAAoB,SAAS,UAAU;EAC/D,MAAM,aAAa,MAAM,OAAO,OAAO,QACtC;GACC,MAAM;GACN,IAAI,YAAY,GAAG;GACnB,gBAAgB,YAAY,eAAe,UAAU,IAAI,CAAC;GAC1D,EACD,WACA,YAAY,YAAY,OAAO,MAAM,CAAC,CACtC;AACD,SAAO;GACN,SAAS;GACT,GAAG;GACH,KAAK,QAAQ;GACb,IAAI,gBAAgB,GAAG;GACvB,YAAY,gBAAgB,IAAI,WAAW,WAAW,CAAC;GACvD;UACO,OAAO;AACf,MAAI,iBAAiB,6BAA8B,OAAM;AACzD,QAAM,IAAI,6BACT,oCACA,+CACA;;;AAIH,eAAsB,qBACrB,UACA,KACA,UACA,MACkB;CAClB,MAAM,WAAW,MAAM,cAAc,KAAK;AAC1C,KAAI,CAAC,UAAU,OACd,OAAM,IAAI,6BACT,yCACA,sFACA;CAEF,MAAM,UAAU,SAAS,MAAM,cAAc,UAAU,QAAQ,SAAS,IAAI;AAC5E,KAAI,CAAC,QACJ,OAAM,IAAI,6BACT,yCACA,8DACA;AAGF,KAAI;EACH,MAAM,KAAK,gBAAgB,SAAS,GAAG;EACvC,MAAM,aAAa,gBAAgB,SAAS,WAAW;AACvD,MAAI,GAAG,eAAe,YAAY,WAAW,aAAa,GACzD,OAAM,IAAI,MAAM,mBAAmB;EACpC,MAAM,YAAY,MAAM,oBAAoB,SAAS,UAAU;EAC/D,MAAM,YAAY,MAAM,OAAO,OAAO,QACrC;GACC,MAAM;GACN,IAAI,YAAY,GAAG;GACnB,gBAAgB,YAAY,eAAe,UAAU,IAAI,CAAC;GAC1D,EACD,WACA,YAAY,WAAW,CACvB;AACD,SAAO,YAAY,OAAO,UAAU;SAC7B;AACP,QAAM,IAAI,6BACT,oCACA,+CACA;;;AAIH,SAAS,cAAc,QAAsC,KAAsB;AAClF,QAAO,OAAO,MAAM,SAAS;;AAG9B,eAAsB,yBACrB,UACA,KACA,OACA,QACA,MACA,UACmB;AACnB,KAAI,CAAC,cAAc,QAAQ,IAAI,CAAE,QAAO;AACxC,KAAI,OAAO,UAAU,SACpB,OAAM,IAAI,6BACT,oCACA,yCACA;AAEF,YAAW,KAAK,MAAM;AACtB,QAAO,qBAAqB,UAAU,KAAK,OAAO,KAAK;;AAGxD,eAAsB,yBACrB,UACA,KACA,OACA,QACA,MACA,UACa;AACb,KAAI,CAAC,cAAc,QAAQ,IAAI,EAAE;AAChC,MAAI,yBAAyB,MAAM,CAClC,OAAM,IAAI,6BACT,oCACA,uDACA;AAGF,SAAO;;AAER,KAAI,OAAO,UAAU,UAAU;AAC9B,aAAW,KAAK,MAAM;AAEtB,SAAO;;AAER,KAAI,CAAC,yBAAyB,MAAM,CACnC,OAAM,IAAI,6BACT,oCACA,0DACA;CAEF,MAAM,YAAY,MAAM,qBAAqB,UAAU,KAAK,OAAO,KAAK;AACxE,YAAW,KAAK,UAAU;AAE1B,QAAO;;AAGR,SAAgB,qBACf,aACA,UACA,SAAuC,EAAE,EACzC,MACA,UACiB;CACjB,MAAM,SAAS,UAAU,SAAS;CAClC,MAAM,aAAa,QAAgB;AAClC,mBAAiB,IAAI;AACrB,SAAO,GAAG,SAAS;;AAGpB,QAAO;EACN,MAAM,IAAO,KAAgC;GAC5C,MAAM,QAAQ,MAAM,YAAY,IAAI,UAAU,IAAI,CAAC;AACnD,UAAO,UAAU,OACd,OACA,yBAA4B,UAAU,KAAK,OAAO,QAAQ,MAAM,SAAS;;EAE7E,MAAM,aAAgB,KAAgD;GACrE,MAAM,QAAQ,MAAM,YAAY,aAAa,UAAU,IAAI,CAAC;AAC5D,OAAI,CAAC,MAAO,QAAO;AACnB,UAAO;IACN,OAAO,MAAM,yBACZ,UACA,KACA,MAAM,OACN,QACA,MACA,SACA;IACD,UAAU,MAAM;IAChB;;EAEF,MAAM,cACL,KACA,kBACA,OACkC;AAClC,UAAO,YAAY,cAClB,UAAU,IAAI,EACd,kBACA,MAAM,yBAAyB,UAAU,KAAK,OAAO,QAAQ,MAAM,SAAS,CAC5E;;EAEF,iBAAiB,KAAa,kBAA4D;AACzF,UAAO,YAAY,iBAAiB,UAAU,IAAI,EAAE,iBAAiB;;EAEtE,MAAM,IAAI,KAAa,OAA+B;AACrD,SAAM,YAAY,IACjB,UAAU,IAAI,EACd,MAAM,yBAAyB,UAAU,KAAK,OAAO,QAAQ,MAAM,SAAS,CAC5E;;EAEF,OAAO,KAA+B;AACrC,UAAO,YAAY,OAAO,UAAU,IAAI,CAAC;;EAE1C,MAAM,KAAK,YAAY,IAAqD;AAC3E,oBAAiB,aAAa,IAAI;GAClC,MAAM,SAAS,MAAM,YAAY,YAAY,GAAG,SAAS,YAAY;GACrE,MAAM,SAAiD,EAAE;AACzD,QAAK,MAAM,CAAC,SAAS,UAAU,QAAQ;IACtC,MAAM,MAAM,QAAQ,MAAM,OAAO,OAAO;AACxC,WAAO,KAAK;KACX;KACA,OAAO,MAAM,yBAAyB,UAAU,KAAK,OAAO,QAAQ,MAAM,SAAS;KACnF,CAAC;;AAEH,UAAO;;EAER;;;;;;AC9QF,MAAM,2BAA2B;;AAkBjC,MAAM,kBAAkB;;AAGxB,MAAM,sBAAsB,IAAI,IAAI,CAAC,OAAO,SAAS,CAAC;AAEtD,SAAS,8BAA8B,OAAkD;AACxF,QACC,OAAO,UAAU,YACjB,UAAU,QACV,CAAC,MAAM,QAAQ,MAAM,IACrB,aAAa,SACb,MAAM,YAAY;;AAIpB,eAAe,6BACd,UACA,KACA,OACA,gBACmB;AACnB,KAAI,yBAAyB,MAAM,CAClC,QAAO,qBAAqB,UAAU,KAAK,OAAO,eAAe;AAElE,KAAI,8BAA8B,MAAM,CACvC,OAAM,IAAI,6BACT,oCACA,0DACA;AAEF,QAAO;;AA8BR,MAAM,6BAA6B;AACnC,MAAM,0BAA0B,OAAO,IAAI,2BAA2B;AACtE,MAAM,IAAI;AACV,MAAM,gBAEJ,EAAE,mCACI;CACN,MAAM,IAAuB;EAC5B,UAAU;EACV,WAAW;EACX,YAAY;EACZ,mBAAmB;EACnB,SAAS,yBAA6C;EACtD;AACD,GAAE,2BAA2B;AAC7B,QAAO;IACJ;;AAGL,SAAgB,2BAAsD;AACrE,QAAO,cAAc;;;AAItB,SAAgB,iCAAuC;AACtD,eAAc;AACd,eAAc,WAAW;AACzB,eAAc,YAAY;AAC1B,eAAc,oBAAoB;AAClC,6BAA4B,cAAc,QAAQ;;;;;;;;;AAUnD,SAAgB,8BAAoC;AACnD,iCAAgC;AAEhC,uBAAsB,yBAAyB;;;;;AAMhD,SAAS,iBAAiB,OAAyC;AAClE,QAAO,OAAO,UAAU,YAAY,UAAU,QAAQ,aAAa;;;;;;;;;;AAWpE,eAAe,sBACd,UACA,IACA,UACsC;AACtC,KAAI,CAAC,UAAU,QACd,QAAO;AAGR,KAAI;EAEH,MAAM,QAAQ,MADI,IAAI,gBAAgB,GAAG,CACX,SAAS,SAAS,QAAQ;AAExD,MAAI,MAEH,QAAO;GACN,GAAG;GACH,KAAK,2BAA2B,MAAM;GACtC,aAAa,MAAM;GACnB,GAAI,MAAM,UAAU,OAAO,EAAE,OAAO,MAAM,OAAO,GAAG,EAAE;GACtD,GAAI,MAAM,WAAW,OAAO,EAAE,QAAQ,MAAM,QAAQ,GAAG,EAAE;GACzD;SAEK;AAIR,QAAO;;;;;;;;;;;;;;;;;;;;AAqBR,eAAsB,eACrB,KACuC;CAOvC,MAAM,SAAS,iBAAwC,eAAe;AACtE,KAAI,OAEH,SADiB,MAAM,QACP;AAKjB,QAAO,cAAc,eAAe,OAAO,YAAY;AAEtD,SAAO,qBAAqB,KADjB,MAAM,OAAO,CACY;GACnC;;;;;;;;AASH,eAAsB,qBACrB,KACA,IACA,UAA0B,MACa;CAEvC,MAAM,QAAQ,MADE,IAAI,kBAAkB,GAAG,CACb,IAAqB,GAAG,kBAAkB,MAAM;AAE5E,KAAI,CAAC,MACJ;AAMD,MAAK,QAAQ,UAAU,QAAQ,cAAc,iBAAiB,MAAM,CAGnE,QAFiB,MAAM,sBAAsB,OAAO,IAAI,QAAQ;AAKjE,KAAI,QAAQ,SAAS,SAAS,OAAO,UAAU,UAAU;EAExD,MAAM,MAAM;AACZ,MAAI,IAAI,eAMP,QALiB;GAChB,GAAG;GACH,gBAAgB,MAAM,sBAAsB,IAAI,gBAAgB,IAAI,QAAQ;GAC5E;;AAMH,QAAO;;AAGR,SAAS,sBAAmD;AAC3D,QAAO,mBACN,cAAc,eAEb,YAAY;EACX,WAAW;EACX,KAAK;EACL,MAAM,YAAY,yBAAyB,MAAM,OAAO,CAAC;EACzD,CAAC,EACH;EAAE,SAAS,YAAY,YAAY,QAAQ;EAAE,gBAAgB;EAAQ,CACrE;;AAGF,SAAS,oBAAoB,UAAoC;AAChE,eAAc,WAAW;AACzB,eAAc,YAAY,KAAK,KAAK,GAAG;;AAGxC,SAAS,yBAA+B;CACvC,MAAM,MAAM,KAAK,KAAK;AACtB,KAAI,cAAc,oBAAoB,IAAK;AAC3C,eAAc,oBAAoB,MAAM;CACxC,MAAM,aAAa,EAAE,cAAc;AACnC,6BAA4B,cAAc,QAAQ;AAClD,OAAM,YAAY;AACjB,MAAI;GACH,MAAM,WAAW,MAAM,qBAAqB;AAC5C,OAAI,eAAe,cAAc,WAAY,qBAAoB,SAAS;WAClE,OAAO;AACf,WAAQ,MAAM,wDAAwD,MAAM;;GAE5E;;AAGH,eAAe,yBAAsD;AACpE,MAAK,IAAI,UAAU,GAAG,UAAU,GAAG,WAAW;EAC7C,MAAM,WAAW,cAAc;AAC/B,MAAI,UAAU;AACb,OAAI,KAAK,KAAK,IAAI,cAAc,UAAW,yBAAwB;AACnE,UAAO;;EAER,MAAM,aAAa,cAAc;EACjC,MAAM,SAAS,MAAM,qBAAqB;AAC1C,MAAI,eAAe,cAAc,YAAY;AAC5C,uBAAoB,OAAO;AAC3B,UAAO;;AAER,MAAI,YAAY,EAAG,QAAO;;AAE3B,OAAM,IAAI,MAAM,2DAA2D;;;;;;;;;;;;;;;;;AAkB5E,SAAgB,kBAAkD;AACjE,QAAO,cAAc,gBAAgB,YAAY;AAgBhD,UAfiB,MAAM,cAAc,wBAAwB,YAAY;GACxE,MAAM,MAAM,mBAAmB;GAC/B,MAAM,kBAAkB,KAAK;AAC7B,OAAI,KAAK,eAAgB,QAAO,yBAAyB,MAAM,OAAO,CAAC;GACvE,IAAI,SAAS,iBAAiB,YAAa,MAAM,wBAAwB;AAGzE,OAAI,iBAAiB,YAAY,UAAa,OAAO,YAAY,gBAAgB,SAAS;AACzF,oCAAgC;IAChC,MAAM,aAAa,cAAc;AACjC,aAAS,MAAM,yBAAyB,MAAM,OAAO,CAAC;AACtD,QAAI,eAAe,cAAc,WAAY,qBAAoB,OAAO;;AAEzE,UAAO;IACN,EACc;GACf,CAAC,KAAK,OAAO,SAAS;EACvB,MAAM,WAAW,MAAM,iBAAqC,uBAAuB;AACnF,MAAI,SAAU,oBAAmB,EAAE,cAAc,OAAO,SAAS,QAAQ;AACzE,SAAO;GACN;;;;;;;;AASH,eAAsB,+BAGnB;AAEF,QAAO;EAAE,MADI,MAAM,iBAAiB;EACrB,WAAW,EAAE,MAAM,CAAC,iBAAiB,CAAC,EAAE;EAAE;;;;;;;;AAS1D,eAAsB,sBACrB,IACA,UAA0B,MACO;AACjC,SAAQ,MAAM,yBAAyB,IAAI,QAAQ,EAAE;;AAGtD,eAAe,yBACd,IACA,UAA0B,MACI;CAE9B,MAAM,aAAa,MADH,IAAI,kBAAkB,GAAG,CACR,qBAAqB,gBAAgB;CACtE,MAAM,UAAU,6BACf,KAAK,UACJ,CAAC,GAAG,WAAW,CACb,QAAQ,CAAC,SAAS,IAAI,WAAW,gBAAgB,CAAC,CAClD,KAAK,CAAC,KAAK,WAAW,CAAC,KAAK,MAAM,SAAS,CAAC,CAC9C,CACD;CACD,MAAM,WAAoC,EAAE;AAE5C,MAAK,MAAM,CAAC,KAAK,UAAU,YAAY;EACtC,MAAM,aAAa,IAAI,QAAQ,iBAAiB,GAAG;AACnD,WAAS,cAAc,MAAM;;CAG9B,MAAM,gBAAgB;AAGtB,KAAI,cAAc,KACjB,eAAc,OAAO,MAAM,sBAAsB,cAAc,MAAM,IAAI,QAAQ;AAElF,KAAI,cAAc,QACjB,eAAc,UAAU,MAAM,sBAAsB,cAAc,SAAS,IAAI,QAAQ;AAExF,KAAI,cAAc,KAAK,eACtB,eAAc,MAAM;EACnB,GAAG,cAAc;EACjB,gBAAgB,MAAM,sBAAsB,cAAc,IAAI,gBAAgB,IAAI,QAAQ;EAC1F;AAGF,QAAO;EAAE,MAAM;EAAe;EAAS;;;;;;;;;;;;;;;;;;;;;;;;;AA0BxC,eAAsB,gBACrB,UACA,IACgB;CAChB,MAAM,UAAmC,EAAE;CAC3C,MAAM,YAAsB,EAAE;CAC9B,MAAM,gBAAiE,EAAE;AAEzE,MAAK,MAAM,CAAC,KAAK,UAAU,OAAO,QAAQ,SAAS,EAAE;AACpD,MAAI,UAAU,OAAW;AACzB,MAAI,UAAU,KAAM,WAAU,KAAK,GAAG,kBAAkB,MAAM;WACrD,oBAAoB,IAAI,IAAI,IAAI,SAAS,MAAM,CAAE,eAAc,KAAK,CAAC,KAAK,MAAM,CAAC;MACrF,SAAQ,GAAG,kBAAkB,SAAS;;AAG5C,KAAI,OAAO,KAAK,QAAQ,CAAC,WAAW,KAAK,UAAU,WAAW,KAAK,cAAc,WAAW,EAC3F;AAGD,KAAI;AACH,QAAM,gBAAgB,IAAI,OAAO,QAAQ;GACxC,MAAM,qBAAqB,IAAI,kBAAkB,IAAI;AACrD,SAAM,mBAAmB,QAAQ,QAAQ;AACzC,SAAM,mBAAmB,WAAW,UAAU;AAE9C,QAAK,MAAM,CAAC,KAAK,UAAU,eAAe;IACzC,MAAM,aAAa,GAAG,kBAAkB;IACxC,MAAM,OAAO,EAAE,GAAI,MAAM,mBAAmB,IAA6B,WAAW,EAAG;AACvF,SAAK,MAAM,CAAC,OAAO,eAAe,OAAO,QAAQ,MAAM,CACtD,KAAI,eAAe,KAAM,QAAO,KAAK;aAC5B,eAAe,OAAW,MAAK,SAAS;AAElD,QAAI,OAAO,KAAK,KAAK,CAAC,WAAW,EAAG,OAAM,mBAAmB,OAAO,WAAW;QAC1E,OAAM,mBAAmB,IAAI,YAAY,KAAK;;AAUpD,OAAI;AACH,UAAM,6BAA6B,IAAI;YAC/B,OAAO;AACf,QAAI,oBAAoB,MAAM,CAAE;AAChC,UAAM;;IAEN;WACO;AACT,+BAA6B;;;;;;;;;AAU/B,eAAsB,iBACrB,UACA,KACyB;AAEzB,QAAO,uBAA0B,UAAU,KADhC,MAAM,OAAO,CAC2B;;;;;;;AAQpD,eAAsB,uBACrB,UACA,KACA,IACyB;CAEzB,MAAM,QAAQ,MADE,IAAI,kBAAkB,GAAG,CACb,IAAI,UAAU,SAAS,YAAY,MAAM;AACrE,KAAI,UAAU,KAAM,QAAO;AAE3B,QAAQ,MAAM,6BAA6B,UAAU,KAAK,MAAM;;;;;;;;AASjE,eAAsB,kBAAkB,UAAoD;AAE3F,QAAO,wBAAwB,UADpB,MAAM,OAAO,CACoB;;;;;;;AAQ7C,eAAsB,wBACrB,UACA,IACmC;CACnC,MAAM,SAAS,UAAU,SAAS;CAIlC,MAAM,UAAU,CAAC,GAFE,MADH,IAAI,kBAAkB,GAAG,CACR,YAAY,OAAO,CAErB,CAAC,QAAQ,CAAC,SAAS,IAAI,WAAW,OAAO,CAAC;CACzE,MAAM,iBAAiB,QAAQ,MAAM,GAAG,WAAW,yBAAyB,MAAM,CAAC,GAChF,MAAM,6BAA6B,GACnC;AACH,QAAO,OAAO,YACb,MAAM,QAAQ,IACb,QAAQ,IAAI,OAAO,CAAC,WAAW,WAAW;EACzC,MAAM,MAAM,UAAU,MAAM,OAAO,OAAO;AAC1C,SAAO,CACN,KACA,MAAM,6BAA6B,UAAU,KAAK,OAAO,eAAe,CACxE;GACA,CACF,CACD"}

package/dist/settings-Dd1uivmQ.mjs

@@ -0,0 +1,73 @@
+//#region src/transfer/format/settings.ts
+/**
+* Classification of `options` rows for site transfer.
+*
+* - `portable`: exported as `setting` records (explicit allowlist, never a
+*   prefix match).
+* - `targetLocal`: belongs to the target installation and is never exported
+*   or overwritten by an import.
+* - `excluded`: everything else (secrets, runtime state, plugin options).
+*/
+const PORTABLE_SETTING_NAMES = [
+	"emdash:locale",
+	"emdash:site_tagline",
+	"emdash:site_title",
+	"site:dateFormat",
+	"site:favicon",
+	"site:logo",
+	"site:postsPerPage",
+	"site:seo",
+	"site:social",
+	"site:tagline",
+	"site:timezone",
+	"site:title"
+];
+const PORTABLE_SETTINGS = new Set(PORTABLE_SETTING_NAMES);
+const TARGET_LOCAL_SETTING_NAMES = new Set([
+	"site:url",
+	"emdash:site_url",
+	"emdash:site_id"
+]);
+const TARGET_LOCAL_SETTING_PREFIXES = ["emdash:setup_", "emdash:backups"];
+/** Settings whose value is a plan decision rather than always taken from the package. */
+const DECIDED_SETTING_NAMES = {
+	title: ["site:title", "emdash:site_title"],
+	tagline: ["site:tagline", "emdash:site_tagline"]
+};
+/** Options the importer resets after writing settings. */
+const POST_IMPORT_OPTION_RESETS = {
+	bumpVersion: ["byline_fields_version"],
+	delete: ["_redirect_loop_ids"]
+};
+function isPortableSettingName(name) {
+	return PORTABLE_SETTINGS.has(name);
+}
+function classifySetting(name) {
+	if (PORTABLE_SETTINGS.has(name)) return "portable";
+	if (TARGET_LOCAL_SETTING_NAMES.has(name)) return "targetLocal";
+	if (TARGET_LOCAL_SETTING_PREFIXES.some((prefix) => name.startsWith(prefix))) return "targetLocal";
+	return "excluded";
+}
+/** Settings whose stored value is a `{ mediaId, alt? }` media reference, and where. */
+const SETTING_MEDIA_REFERENCE_PATHS = Object.freeze({
+	"site:logo": [["mediaId"]],
+	"site:favicon": [["mediaId"]],
+	"site:seo": [["defaultOgImage", "mediaId"]]
+});
+/** Media ids referenced by a portable setting's value. */
+function settingMediaIds(name, value) {
+	if (!isPortableSettingName(name)) return [];
+	const paths = SETTING_MEDIA_REFERENCE_PATHS[name];
+	if (!paths) return [];
+	const ids = [];
+	for (const path of paths) {
+		let current = value;
+		for (const segment of path) current = current !== null && typeof current === "object" && !Array.isArray(current) && Object.hasOwn(current, segment) ? Reflect.get(current, segment) : void 0;
+		if (typeof current === "string" && current.length > 0) ids.push(current);
+	}
+	return ids;
+}
+
+//#endregion
+export { settingMediaIds as a, classifySetting as i, PORTABLE_SETTING_NAMES as n, POST_IMPORT_OPTION_RESETS as r, DECIDED_SETTING_NAMES as t };
+//# sourceMappingURL=settings-Dd1uivmQ.mjs.map

package/dist/settings-Dd1uivmQ.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"settings-Dd1uivmQ.mjs","names":[],"sources":["../src/transfer/format/settings.ts"],"sourcesContent":["/**\n * Classification of `options` rows for site transfer.\n *\n * - `portable`: exported as `setting` records (explicit allowlist, never a\n *   prefix match).\n * - `targetLocal`: belongs to the target installation and is never exported\n *   or overwritten by an import.\n * - `excluded`: everything else (secrets, runtime state, plugin options).\n */\n\nexport const PORTABLE_SETTING_NAMES = [\n\t\"emdash:locale\",\n\t\"emdash:site_tagline\",\n\t\"emdash:site_title\",\n\t\"site:dateFormat\",\n\t\"site:favicon\",\n\t\"site:logo\",\n\t\"site:postsPerPage\",\n\t\"site:seo\",\n\t\"site:social\",\n\t\"site:tagline\",\n\t\"site:timezone\",\n\t\"site:title\",\n] as const;\n\nexport type PortableSettingName = (typeof PORTABLE_SETTING_NAMES)[number];\n\nconst PORTABLE_SETTINGS: ReadonlySet<string> = new Set(PORTABLE_SETTING_NAMES);\n\nconst TARGET_LOCAL_SETTING_NAMES: ReadonlySet<string> = new Set([\n\t\"site:url\",\n\t\"emdash:site_url\",\n\t\"emdash:site_id\",\n]);\n\nconst TARGET_LOCAL_SETTING_PREFIXES = [\"emdash:setup_\", \"emdash:backups\"] as const;\n\n/** Settings whose value is a plan decision rather than always taken from the package. */\nexport const DECIDED_SETTING_NAMES = {\n\ttitle: [\"site:title\", \"emdash:site_title\"],\n\ttagline: [\"site:tagline\", \"emdash:site_tagline\"],\n} as const satisfies Record<string, readonly PortableSettingName[]>;\n\n/** Options the importer resets after writing settings. */\nexport const POST_IMPORT_OPTION_RESETS = {\n\tbumpVersion: [\"byline_fields_version\"],\n\tdelete: [\"_redirect_loop_ids\"],\n} as const;\n\nexport type SettingClass = \"portable\" | \"targetLocal\" | \"excluded\";\n\nexport function isPortableSettingName(name: string): name is PortableSettingName {\n\treturn PORTABLE_SETTINGS.has(name);\n}\n\nexport function classifySetting(name: string): SettingClass {\n\tif (PORTABLE_SETTINGS.has(name)) return \"portable\";\n\tif (TARGET_LOCAL_SETTING_NAMES.has(name)) return \"targetLocal\";\n\tif (TARGET_LOCAL_SETTING_PREFIXES.some((prefix) => name.startsWith(prefix))) {\n\t\treturn \"targetLocal\";\n\t}\n\treturn \"excluded\";\n}\n\n/** Settings whose stored value is a `{ mediaId, alt? }` media reference, and where. */\nexport const SETTING_MEDIA_REFERENCE_PATHS: Readonly<\n\tPartial<Record<PortableSettingName, readonly (readonly string[])[]>>\n> = Object.freeze({\n\t\"site:logo\": [[\"mediaId\"]],\n\t\"site:favicon\": [[\"mediaId\"]],\n\t\"site:seo\": [[\"defaultOgImage\", \"mediaId\"]],\n});\n\n/** Media ids referenced by a portable setting's value. */\nexport function settingMediaIds(name: string, value: unknown): string[] {\n\tif (!isPortableSettingName(name)) return [];\n\tconst paths = SETTING_MEDIA_REFERENCE_PATHS[name];\n\tif (!paths) return [];\n\tconst ids: string[] = [];\n\tfor (const path of paths) {\n\t\tlet current: unknown = value;\n\t\tfor (const segment of path) {\n\t\t\tcurrent =\n\t\t\t\tcurrent !== null &&\n\t\t\t\ttypeof current === \"object\" &&\n\t\t\t\t!Array.isArray(current) &&\n\t\t\t\tObject.hasOwn(current, segment)\n\t\t\t\t\t? Reflect.get(current, segment)\n\t\t\t\t\t: undefined;\n\t\t}\n\t\tif (typeof current === \"string\" && current.length > 0) ids.push(current);\n\t}\n\treturn ids;\n}\n"],"mappings":";;;;;;;;;;AAUA,MAAa,yBAAyB;CACrC;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;AAID,MAAM,oBAAyC,IAAI,IAAI,uBAAuB;AAE9E,MAAM,6BAAkD,IAAI,IAAI;CAC/D;CACA;CACA;CACA,CAAC;AAEF,MAAM,gCAAgC,CAAC,iBAAiB,iBAAiB;;AAGzE,MAAa,wBAAwB;CACpC,OAAO,CAAC,cAAc,oBAAoB;CAC1C,SAAS,CAAC,gBAAgB,sBAAsB;CAChD;;AAGD,MAAa,4BAA4B;CACxC,aAAa,CAAC,wBAAwB;CACtC,QAAQ,CAAC,qBAAqB;CAC9B;AAID,SAAgB,sBAAsB,MAA2C;AAChF,QAAO,kBAAkB,IAAI,KAAK;;AAGnC,SAAgB,gBAAgB,MAA4B;AAC3D,KAAI,kBAAkB,IAAI,KAAK,CAAE,QAAO;AACxC,KAAI,2BAA2B,IAAI,KAAK,CAAE,QAAO;AACjD,KAAI,8BAA8B,MAAM,WAAW,KAAK,WAAW,OAAO,CAAC,CAC1E,QAAO;AAER,QAAO;;;AAIR,MAAa,gCAET,OAAO,OAAO;CACjB,aAAa,CAAC,CAAC,UAAU,CAAC;CAC1B,gBAAgB,CAAC,CAAC,UAAU,CAAC;CAC7B,YAAY,CAAC,CAAC,kBAAkB,UAAU,CAAC;CAC3C,CAAC;;AAGF,SAAgB,gBAAgB,MAAc,OAA0B;AACvE,KAAI,CAAC,sBAAsB,KAAK,CAAE,QAAO,EAAE;CAC3C,MAAM,QAAQ,8BAA8B;AAC5C,KAAI,CAAC,MAAO,QAAO,EAAE;CACrB,MAAM,MAAgB,EAAE;AACxB,MAAK,MAAM,QAAQ,OAAO;EACzB,IAAI,UAAmB;AACvB,OAAK,MAAM,WAAW,KACrB,WACC,YAAY,QACZ,OAAO,YAAY,YACnB,CAAC,MAAM,QAAQ,QAAQ,IACvB,OAAO,OAAO,SAAS,QAAQ,GAC5B,QAAQ,IAAI,SAAS,QAAQ,GAC7B;AAEL,MAAI,OAAO,YAAY,YAAY,QAAQ,SAAS,EAAG,KAAI,KAAK,QAAQ;;AAEzE,QAAO"}

package/dist/setup-complete-qsJYWutC.mjs

@@ -0,0 +1,65 @@
+import { u as isPostgres } from "./dialect-helpers-B1XN2HGB.mjs";
+import { t as OptionsRepository } from "./options-DhrI7eMv.mjs";
+import { sql } from "kysely";
+import { ulid } from "ulidx";
+import { Role } from "@emdash-cms/auth";
+
+//#region src/api/setup-complete.ts
+/**
+* Shared setup completion logic.
+*
+* Called by OAuth callbacks and the passkey verify step when the first user
+* is created during setup. Persists site title/tagline from setup state
+* and marks setup as complete.
+*/
+const FIRST_ADMIN_LOCK_KEY = 1168624764;
+/**
+* Create the first admin only while the users table is empty.
+*
+* Returns null when a user already exists, including one created by a
+* concurrent call after the caller's own zero-users check. On Postgres the
+* insert runs under an advisory lock, because `NOT EXISTS` alone doesn't see
+* another transaction's uncommitted row under READ COMMITTED.
+*/
+async function createFirstAdmin(db, input) {
+	const admin = {
+		id: ulid(),
+		email: input.email.toLowerCase(),
+		name: input.name,
+		role: Role.ADMIN
+	};
+	const now = (/* @__PURE__ */ new Date()).toISOString();
+	const insert = async (executor) => sql`
+			INSERT INTO users (id, email, name, role, email_verified, created_at, updated_at)
+			SELECT ${admin.id}, ${admin.email}, ${admin.name}, CAST(${admin.role} AS integer), 0, ${now}, ${now}
+			WHERE NOT EXISTS (SELECT 1 FROM users)
+			RETURNING id
+		`.execute(executor);
+	return (isPostgres(db) ? await db.transaction().execute(async (trx) => {
+		await sql`SELECT pg_advisory_xact_lock(${FIRST_ADMIN_LOCK_KEY})`.execute(trx);
+		return insert(trx);
+	}) : await insert(db)).rows.length > 0 ? admin : null;
+}
+/**
+* Finalize setup after the first admin user is created.
+*
+* Reads the setup_state option (written by the setup wizard's step 1),
+* persists site_title and site_tagline, then marks setup complete.
+*
+* Safe to call multiple times — checks setup_complete first and no-ops
+* if already done.
+*/
+async function finalizeSetup(db) {
+	const options = new OptionsRepository(db);
+	const setupComplete = await options.get("emdash:setup_complete");
+	if (setupComplete === true || setupComplete === "true") return;
+	const setupState = await options.get("emdash:setup_state");
+	if (setupState?.title && typeof setupState.title === "string") await options.set("emdash:site_title", setupState.title);
+	if (setupState?.tagline && typeof setupState.tagline === "string") await options.set("emdash:site_tagline", setupState.tagline);
+	await options.set("emdash:setup_complete", true);
+	await options.delete("emdash:setup_state");
+}
+
+//#endregion
+export { finalizeSetup as n, createFirstAdmin as t };
+//# sourceMappingURL=setup-complete-qsJYWutC.mjs.map

package/dist/setup-complete-qsJYWutC.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"setup-complete-qsJYWutC.mjs","names":[],"sources":["../src/api/setup-complete.ts"],"sourcesContent":["/**\n * Shared setup completion logic.\n *\n * Called by OAuth callbacks and the passkey verify step when the first user\n * is created during setup. Persists site title/tagline from setup state\n * and marks setup as complete.\n */\n\nimport { Role } from \"@emdash-cms/auth\";\nimport { sql, type Kysely } from \"kysely\";\nimport { ulid } from \"ulidx\";\n\nimport { isPostgres } from \"../database/dialect-helpers.js\";\nimport { OptionsRepository } from \"../database/repositories/options.js\";\nimport type { Database } from \"../database/types.js\";\n\nexport const FIRST_ADMIN_LOCK_KEY = 1_168_624_764;\n\nexport interface FirstAdmin {\n\tid: string;\n\temail: string;\n\tname: string | null;\n\trole: typeof Role.ADMIN;\n}\n\n/**\n * Create the first admin only while the users table is empty.\n *\n * Returns null when a user already exists, including one created by a\n * concurrent call after the caller's own zero-users check. On Postgres the\n * insert runs under an advisory lock, because `NOT EXISTS` alone doesn't see\n * another transaction's uncommitted row under READ COMMITTED.\n */\nexport async function createFirstAdmin(\n\tdb: Kysely<Database>,\n\tinput: { email: string; name: string | null },\n): Promise<FirstAdmin | null> {\n\tconst admin: FirstAdmin = {\n\t\tid: ulid(),\n\t\temail: input.email.toLowerCase(),\n\t\tname: input.name,\n\t\trole: Role.ADMIN,\n\t};\n\tconst now = new Date().toISOString();\n\tconst insert = async (executor: Kysely<Database>) =>\n\t\tsql<{ id: string }>`\n\t\t\tINSERT INTO users (id, email, name, role, email_verified, created_at, updated_at)\n\t\t\tSELECT ${admin.id}, ${admin.email}, ${admin.name}, CAST(${admin.role} AS integer), 0, ${now}, ${now}\n\t\t\tWHERE NOT EXISTS (SELECT 1 FROM users)\n\t\t\tRETURNING id\n\t\t`.execute(executor);\n\n\tconst result = isPostgres(db)\n\t\t? await db.transaction().execute(async (trx) => {\n\t\t\t\tawait sql`SELECT pg_advisory_xact_lock(${FIRST_ADMIN_LOCK_KEY})`.execute(trx);\n\t\t\t\treturn insert(trx);\n\t\t\t})\n\t\t: await insert(db);\n\treturn result.rows.length > 0 ? admin : null;\n}\n\n/**\n * Finalize setup after the first admin user is created.\n *\n * Reads the setup_state option (written by the setup wizard's step 1),\n * persists site_title and site_tagline, then marks setup complete.\n *\n * Safe to call multiple times — checks setup_complete first and no-ops\n * if already done.\n */\nexport async function finalizeSetup(db: Kysely<Database>): Promise<void> {\n\tconst options = new OptionsRepository(db);\n\n\tconst setupComplete = await options.get(\"emdash:setup_complete\");\n\tif (setupComplete === true || setupComplete === \"true\") return;\n\n\t// Persist site title/tagline from setup state (stored in step 1)\n\tconst setupState = await options.get<Record<string, unknown>>(\"emdash:setup_state\");\n\tif (setupState?.title && typeof setupState.title === \"string\") {\n\t\tawait options.set(\"emdash:site_title\", setupState.title);\n\t}\n\tif (setupState?.tagline && typeof setupState.tagline === \"string\") {\n\t\tawait options.set(\"emdash:site_tagline\", setupState.tagline);\n\t}\n\n\tawait options.set(\"emdash:setup_complete\", true);\n\tawait options.delete(\"emdash:setup_state\");\n}\n"],"mappings":";;;;;;;;;;;;;;AAgBA,MAAa,uBAAuB;;;;;;;;;AAiBpC,eAAsB,iBACrB,IACA,OAC6B;CAC7B,MAAM,QAAoB;EACzB,IAAI,MAAM;EACV,OAAO,MAAM,MAAM,aAAa;EAChC,MAAM,MAAM;EACZ,MAAM,KAAK;EACX;CACD,MAAM,uBAAM,IAAI,MAAM,EAAC,aAAa;CACpC,MAAM,SAAS,OAAO,aACrB,GAAmB;;YAET,MAAM,GAAG,IAAI,MAAM,MAAM,IAAI,MAAM,KAAK,SAAS,MAAM,KAAK,mBAAmB,IAAI,IAAI,IAAI;;;IAGnG,QAAQ,SAAS;AAQpB,SANe,WAAW,GAAG,GAC1B,MAAM,GAAG,aAAa,CAAC,QAAQ,OAAO,QAAQ;AAC9C,QAAM,GAAG,gCAAgC,qBAAqB,GAAG,QAAQ,IAAI;AAC7E,SAAO,OAAO,IAAI;GACjB,GACD,MAAM,OAAO,GAAG,EACL,KAAK,SAAS,IAAI,QAAQ;;;;;;;;;;;AAYzC,eAAsB,cAAc,IAAqC;CACxE,MAAM,UAAU,IAAI,kBAAkB,GAAG;CAEzC,MAAM,gBAAgB,MAAM,QAAQ,IAAI,wBAAwB;AAChE,KAAI,kBAAkB,QAAQ,kBAAkB,OAAQ;CAGxD,MAAM,aAAa,MAAM,QAAQ,IAA6B,qBAAqB;AACnF,KAAI,YAAY,SAAS,OAAO,WAAW,UAAU,SACpD,OAAM,QAAQ,IAAI,qBAAqB,WAAW,MAAM;AAEzD,KAAI,YAAY,WAAW,OAAO,WAAW,YAAY,SACxD,OAAM,QAAQ,IAAI,uBAAuB,WAAW,QAAQ;AAG7D,OAAM,QAAQ,IAAI,yBAAyB,KAAK;AAChD,OAAM,QAAQ,OAAO,qBAAqB"}

package/dist/setup-nonce-CBFgUFXw.mjs

@@ -0,0 +1,25 @@
+//#region src/auth/setup-nonce.ts
+/**
+* Session binding for the first-setup admin-creation flow.
+*
+* Shared constants for the nonce cookie that ties /_emdash/api/setup/admin
+* and /_emdash/api/setup/admin/verify to the same browser. Without this
+* binding, any unauthenticated caller could POST /setup/admin during the
+* setup window and substitute their own email into the stored setup state
+* before the legitimate admin completes passkey verification.
+*
+* Implementation lives in the two route handlers; this module is just
+* the name / lifetime so both ends agree.
+*/
+/** Cookie name carrying the setup-admin session nonce. */
+const SETUP_NONCE_COOKIE = "emdash_setup_nonce";
+/**
+* Cookie max-age in seconds. One hour is plenty of time to complete
+* a passkey registration; if the user lingers longer the admin step
+* can simply be retried.
+*/
+const SETUP_NONCE_MAX_AGE_SECONDS = 3600;
+
+//#endregion
+export { SETUP_NONCE_MAX_AGE_SECONDS as n, SETUP_NONCE_COOKIE as t };
+//# sourceMappingURL=setup-nonce-CBFgUFXw.mjs.map

package/dist/setup-nonce-CBFgUFXw.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"setup-nonce-CBFgUFXw.mjs","names":[],"sources":["../src/auth/setup-nonce.ts"],"sourcesContent":["/**\n * Session binding for the first-setup admin-creation flow.\n *\n * Shared constants for the nonce cookie that ties /_emdash/api/setup/admin\n * and /_emdash/api/setup/admin/verify to the same browser. Without this\n * binding, any unauthenticated caller could POST /setup/admin during the\n * setup window and substitute their own email into the stored setup state\n * before the legitimate admin completes passkey verification.\n *\n * Implementation lives in the two route handlers; this module is just\n * the name / lifetime so both ends agree.\n */\n\n/** Cookie name carrying the setup-admin session nonce. */\nexport const SETUP_NONCE_COOKIE = \"emdash_setup_nonce\";\n\n/**\n * Cookie max-age in seconds. One hour is plenty of time to complete\n * a passkey registration; if the user lingers longer the admin step\n * can simply be retried.\n */\nexport const SETUP_NONCE_MAX_AGE_SECONDS = 60 * 60;\n"],"mappings":";;;;;;;;;;;;;;AAcA,MAAa,qBAAqB;;;;;;AAOlC,MAAa,8BAA8B"}

package/dist/site-domain-oRGS_JfA.mjs

@@ -0,0 +1,131 @@
+import { t as OptionsRepository } from "./options-DhrI7eMv.mjs";
+import { a as encodeBase64url } from "./base64-BQBZwXCx.mjs";
+import { d as setSiteSettings } from "./settings-D932YP2-.mjs";
+import { r as resolveAndValidateExternalUrl } from "./ssrf-BcYjyM4M.mjs";
+
+//#region src/api/handlers/site-domain.ts
+const DOMAIN_PROOF_PATH = "/_emdash/api/site/domain-proof";
+const PROOF_OPTION = "emdash:domain_proof";
+const PROOF_TTL_MS = 6e4;
+const CHECK_TIMEOUT_MS = 1e4;
+const IPV4_RE = /^\d{1,3}(\.\d{1,3}){3}$/;
+/**
+* Parse a bare hostname or an `https://` origin into an origin. Paths,
+* ports, credentials, IP addresses, and single-label hosts are rejected.
+*/
+function parseSiteDomain(input) {
+	const trimmed = input.trim();
+	const candidate = trimmed.includes("://") ? trimmed : `https://${trimmed}`;
+	if (!URL.canParse(candidate)) return void 0;
+	const url = new URL(candidate);
+	if (url.protocol !== "https:") return void 0;
+	if (url.username || url.password || url.port || url.search || url.hash) return void 0;
+	if (url.pathname !== "/") return void 0;
+	const host = url.hostname;
+	if (!host.includes(".") || host.endsWith(".") || host.startsWith("[") || IPV4_RE.test(host)) return;
+	return url.origin;
+}
+function checkFailed(message, details) {
+	return {
+		success: false,
+		error: {
+			code: "DOMAIN_CHECK_FAILED",
+			message,
+			details
+		}
+	};
+}
+/**
+* Verify that `input` serves this site and store it as the Site URL.
+*/
+async function handleSiteDomainChange(db, input) {
+	const origin = parseSiteDomain(input);
+	if (!origin) return {
+		success: false,
+		error: {
+			code: "VALIDATION_ERROR",
+			message: "Enter a domain such as example.com, without a path or port"
+		}
+	};
+	const options = new OptionsRepository(db);
+	const token = encodeBase64url(crypto.getRandomValues(new Uint8Array(24)));
+	const proof = {
+		token,
+		expiresAt: Date.now() + PROOF_TTL_MS
+	};
+	const revision = await options.setVersioned(PROOF_OPTION, proof);
+	try {
+		const proofUrl = `${origin}${DOMAIN_PROOF_PATH}`;
+		try {
+			await resolveAndValidateExternalUrl(proofUrl);
+		} catch {
+			const host = new URL(origin).hostname;
+			return checkFailed(`${host} does not resolve to a public address`, {
+				reason: "NO_PUBLIC_ADDRESS",
+				host
+			});
+		}
+		let response;
+		try {
+			response = await fetch(proofUrl, {
+				method: "POST",
+				redirect: "manual",
+				headers: {
+					Accept: "application/json",
+					"X-EmDash-Request": "1"
+				},
+				signal: AbortSignal.timeout(CHECK_TIMEOUT_MS)
+			});
+		} catch {
+			return checkFailed(`Could not reach ${origin}`, {
+				reason: "UNREACHABLE",
+				origin
+			});
+		}
+		if (response.status >= 300 && response.status < 400) {
+			const location = response.headers.get("Location");
+			const target = location && URL.canParse(location, proofUrl) ? new URL(location, proofUrl) : null;
+			return target ? checkFailed(`${origin} redirects to ${target.origin}. Enter that address instead.`, {
+				reason: "REDIRECT",
+				origin,
+				target: target.origin
+			}) : checkFailed(`${origin} redirects elsewhere`, {
+				reason: "REDIRECT",
+				origin
+			});
+		}
+		const body = response.ok ? await response.json().catch(() => null) : null;
+		if ((body && typeof body === "object" && "data" in body && body.data && typeof body.data === "object" ? body.data.token : void 0) !== token) return checkFailed(`${origin} does not serve this site yet`, {
+			reason: "NOT_SERVING",
+			origin
+		});
+		await setSiteSettings({ url: origin }, db);
+		return {
+			success: true,
+			data: { url: origin }
+		};
+	} finally {
+		await db.deleteFrom("options").where("name", "=", PROOF_OPTION).where("revision", "=", revision).execute();
+	}
+}
+/**
+* Return the pending domain proof token, if a check is in progress.
+*/
+async function handleDomainProof(db) {
+	const proof = await new OptionsRepository(db).get(PROOF_OPTION);
+	if (!proof || typeof proof.token !== "string" || proof.expiresAt < Date.now()) return {
+		success: false,
+		error: {
+			code: "NOT_FOUND",
+			message: "No domain check in progress"
+		}
+	};
+	return {
+		success: true,
+		data: { token: proof.token }
+	};
+}
+
+//#endregion
+export { handleSiteDomainChange as n, handleDomainProof as t };
+//# sourceMappingURL=site-domain-oRGS_JfA.mjs.map

package/dist/site-domain-oRGS_JfA.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"site-domain-oRGS_JfA.mjs","names":[],"sources":["../src/api/handlers/site-domain.ts"],"sourcesContent":["/**\n * Site domain handlers\n *\n * Changing the site's domain stores the new origin as the Site URL, which\n * links in emails and plugins, sitemaps, and absolute URLs in search and\n * social metadata use. Before it is stored, EmDash fetches a one-time token\n * from the new domain to prove the domain serves this site.\n */\n\nimport type { Kysely } from \"kysely\";\n\nimport { OptionsRepository } from \"../../database/repositories/options.js\";\nimport type { Database } from \"../../database/types.js\";\nimport { resolveAndValidateExternalUrl } from \"../../security/ssrf.js\";\nimport { setSiteSettings } from \"../../settings/index.js\";\nimport { encodeBase64url } from \"../../utils/base64.js\";\nimport type { ApiResult } from \"../types.js\";\n\nexport const DOMAIN_PROOF_PATH = \"/_emdash/api/site/domain-proof\";\n\nconst PROOF_OPTION = \"emdash:domain_proof\";\nconst PROOF_TTL_MS = 60_000;\nconst CHECK_TIMEOUT_MS = 10_000;\nconst IPV4_RE = /^\\d{1,3}(\\.\\d{1,3}){3}$/;\n\ninterface DomainProof {\n\ttoken: string;\n\texpiresAt: number;\n}\n\n/**\n * Parse a bare hostname or an `https://` origin into an origin. Paths,\n * ports, credentials, IP addresses, and single-label hosts are rejected.\n */\nexport function parseSiteDomain(input: string): string | undefined {\n\tconst trimmed = input.trim();\n\tconst candidate = trimmed.includes(\"://\") ? trimmed : `https://${trimmed}`;\n\tif (!URL.canParse(candidate)) return undefined;\n\tconst url = new URL(candidate);\n\tif (url.protocol !== \"https:\") return undefined;\n\tif (url.username || url.password || url.port || url.search || url.hash) return undefined;\n\tif (url.pathname !== \"/\") return undefined;\n\tconst host = url.hostname;\n\tif (!host.includes(\".\") || host.endsWith(\".\") || host.startsWith(\"[\") || IPV4_RE.test(host)) {\n\t\treturn undefined;\n\t}\n\treturn url.origin;\n}\n\n/** Why a domain check failed, sent as `error.details` with the addresses its message names. */\ntype DomainCheckFailure =\n\t| { reason: \"NO_PUBLIC_ADDRESS\"; host: string }\n\t| { reason: \"UNREACHABLE\"; origin: string }\n\t| { reason: \"REDIRECT\"; origin: string; target?: string }\n\t| { reason: \"NOT_SERVING\"; origin: string };\n\nfunction checkFailed(message: string, details: DomainCheckFailure): ApiResult<never> {\n\treturn { success: false, error: { code: \"DOMAIN_CHECK_FAILED\", message, details } };\n}\n\n/**\n * Verify that `input` serves this site and store it as the Site URL.\n */\nexport async function handleSiteDomainChange(\n\tdb: Kysely<Database>,\n\tinput: string,\n): Promise<ApiResult<{ url: string }>> {\n\tconst origin = parseSiteDomain(input);\n\tif (!origin) {\n\t\treturn {\n\t\t\tsuccess: false,\n\t\t\terror: {\n\t\t\t\tcode: \"VALIDATION_ERROR\",\n\t\t\t\tmessage: \"Enter a domain such as example.com, without a path or port\",\n\t\t\t},\n\t\t};\n\t}\n\n\tconst options = new OptionsRepository(db);\n\tconst token = encodeBase64url(crypto.getRandomValues(new Uint8Array(24)));\n\tconst proof: DomainProof = { token, expiresAt: Date.now() + PROOF_TTL_MS };\n\tconst revision = await options.setVersioned(PROOF_OPTION, proof);\n\n\ttry {\n\t\tconst proofUrl = `${origin}${DOMAIN_PROOF_PATH}`;\n\t\ttry {\n\t\t\tawait resolveAndValidateExternalUrl(proofUrl);\n\t\t} catch {\n\t\t\tconst host = new URL(origin).hostname;\n\t\t\treturn checkFailed(`${host} does not resolve to a public address`, {\n\t\t\t\treason: \"NO_PUBLIC_ADDRESS\",\n\t\t\t\thost,\n\t\t\t});\n\t\t}\n\n\t\tlet response: Response;\n\t\ttry {\n\t\t\tresponse = await fetch(proofUrl, {\n\t\t\t\tmethod: \"POST\",\n\t\t\t\tredirect: \"manual\",\n\t\t\t\theaders: { Accept: \"application/json\", \"X-EmDash-Request\": \"1\" },\n\t\t\t\tsignal: AbortSignal.timeout(CHECK_TIMEOUT_MS),\n\t\t\t});\n\t\t} catch {\n\t\t\treturn checkFailed(`Could not reach ${origin}`, { reason: \"UNREACHABLE\", origin });\n\t\t}\n\n\t\tif (response.status >= 300 && response.status < 400) {\n\t\t\tconst location = response.headers.get(\"Location\");\n\t\t\tconst target =\n\t\t\t\tlocation && URL.canParse(location, proofUrl) ? new URL(location, proofUrl) : null;\n\t\t\treturn target\n\t\t\t\t? checkFailed(`${origin} redirects to ${target.origin}. Enter that address instead.`, {\n\t\t\t\t\t\treason: \"REDIRECT\",\n\t\t\t\t\t\torigin,\n\t\t\t\t\t\ttarget: target.origin,\n\t\t\t\t\t})\n\t\t\t\t: checkFailed(`${origin} redirects elsewhere`, { reason: \"REDIRECT\", origin });\n\t\t}\n\n\t\tconst body: unknown = response.ok ? await response.json().catch(() => null) : null;\n\t\tconst received =\n\t\t\tbody &&\n\t\t\ttypeof body === \"object\" &&\n\t\t\t\"data\" in body &&\n\t\t\tbody.data &&\n\t\t\ttypeof body.data === \"object\"\n\t\t\t\t? (body.data as { token?: unknown }).token\n\t\t\t\t: undefined;\n\t\tif (received !== token) {\n\t\t\treturn checkFailed(`${origin} does not serve this site yet`, {\n\t\t\t\treason: \"NOT_SERVING\",\n\t\t\t\torigin,\n\t\t\t});\n\t\t}\n\n\t\tawait setSiteSettings({ url: origin }, db);\n\t\treturn { success: true, data: { url: origin } };\n\t} finally {\n\t\tawait db\n\t\t\t.deleteFrom(\"options\")\n\t\t\t.where(\"name\", \"=\", PROOF_OPTION)\n\t\t\t.where(\"revision\", \"=\", revision)\n\t\t\t.execute();\n\t}\n}\n\n/**\n * Return the pending domain proof token, if a check is in progress.\n */\nexport async function handleDomainProof(\n\tdb: Kysely<Database>,\n): Promise<ApiResult<{ token: string }>> {\n\tconst proof = await new OptionsRepository(db).get<DomainProof>(PROOF_OPTION);\n\tif (!proof || typeof proof.token !== \"string\" || proof.expiresAt < Date.now()) {\n\t\treturn { success: false, error: { code: \"NOT_FOUND\", message: \"No domain check in progress\" } };\n\t}\n\treturn { success: true, data: { token: proof.token } };\n}\n"],"mappings":";;;;;;AAkBA,MAAa,oBAAoB;AAEjC,MAAM,eAAe;AACrB,MAAM,eAAe;AACrB,MAAM,mBAAmB;AACzB,MAAM,UAAU;;;;;AAWhB,SAAgB,gBAAgB,OAAmC;CAClE,MAAM,UAAU,MAAM,MAAM;CAC5B,MAAM,YAAY,QAAQ,SAAS,MAAM,GAAG,UAAU,WAAW;AACjE,KAAI,CAAC,IAAI,SAAS,UAAU,CAAE,QAAO;CACrC,MAAM,MAAM,IAAI,IAAI,UAAU;AAC9B,KAAI,IAAI,aAAa,SAAU,QAAO;AACtC,KAAI,IAAI,YAAY,IAAI,YAAY,IAAI,QAAQ,IAAI,UAAU,IAAI,KAAM,QAAO;AAC/E,KAAI,IAAI,aAAa,IAAK,QAAO;CACjC,MAAM,OAAO,IAAI;AACjB,KAAI,CAAC,KAAK,SAAS,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,KAAK,WAAW,IAAI,IAAI,QAAQ,KAAK,KAAK,CAC1F;AAED,QAAO,IAAI;;AAUZ,SAAS,YAAY,SAAiB,SAA+C;AACpF,QAAO;EAAE,SAAS;EAAO,OAAO;GAAE,MAAM;GAAuB;GAAS;GAAS;EAAE;;;;;AAMpF,eAAsB,uBACrB,IACA,OACsC;CACtC,MAAM,SAAS,gBAAgB,MAAM;AACrC,KAAI,CAAC,OACJ,QAAO;EACN,SAAS;EACT,OAAO;GACN,MAAM;GACN,SAAS;GACT;EACD;CAGF,MAAM,UAAU,IAAI,kBAAkB,GAAG;CACzC,MAAM,QAAQ,gBAAgB,OAAO,gBAAgB,IAAI,WAAW,GAAG,CAAC,CAAC;CACzE,MAAM,QAAqB;EAAE;EAAO,WAAW,KAAK,KAAK,GAAG;EAAc;CAC1E,MAAM,WAAW,MAAM,QAAQ,aAAa,cAAc,MAAM;AAEhE,KAAI;EACH,MAAM,WAAW,GAAG,SAAS;AAC7B,MAAI;AACH,SAAM,8BAA8B,SAAS;UACtC;GACP,MAAM,OAAO,IAAI,IAAI,OAAO,CAAC;AAC7B,UAAO,YAAY,GAAG,KAAK,wCAAwC;IAClE,QAAQ;IACR;IACA,CAAC;;EAGH,IAAI;AACJ,MAAI;AACH,cAAW,MAAM,MAAM,UAAU;IAChC,QAAQ;IACR,UAAU;IACV,SAAS;KAAE,QAAQ;KAAoB,oBAAoB;KAAK;IAChE,QAAQ,YAAY,QAAQ,iBAAiB;IAC7C,CAAC;UACK;AACP,UAAO,YAAY,mBAAmB,UAAU;IAAE,QAAQ;IAAe;IAAQ,CAAC;;AAGnF,MAAI,SAAS,UAAU,OAAO,SAAS,SAAS,KAAK;GACpD,MAAM,WAAW,SAAS,QAAQ,IAAI,WAAW;GACjD,MAAM,SACL,YAAY,IAAI,SAAS,UAAU,SAAS,GAAG,IAAI,IAAI,UAAU,SAAS,GAAG;AAC9E,UAAO,SACJ,YAAY,GAAG,OAAO,gBAAgB,OAAO,OAAO,gCAAgC;IACpF,QAAQ;IACR;IACA,QAAQ,OAAO;IACf,CAAC,GACD,YAAY,GAAG,OAAO,uBAAuB;IAAE,QAAQ;IAAY;IAAQ,CAAC;;EAGhF,MAAM,OAAgB,SAAS,KAAK,MAAM,SAAS,MAAM,CAAC,YAAY,KAAK,GAAG;AAS9E,OAPC,QACA,OAAO,SAAS,YAChB,UAAU,QACV,KAAK,QACL,OAAO,KAAK,SAAS,WACjB,KAAK,KAA6B,QACnC,YACa,MAChB,QAAO,YAAY,GAAG,OAAO,gCAAgC;GAC5D,QAAQ;GACR;GACA,CAAC;AAGH,QAAM,gBAAgB,EAAE,KAAK,QAAQ,EAAE,GAAG;AAC1C,SAAO;GAAE,SAAS;GAAM,MAAM,EAAE,KAAK,QAAQ;GAAE;WACtC;AACT,QAAM,GACJ,WAAW,UAAU,CACrB,MAAM,QAAQ,KAAK,aAAa,CAChC,MAAM,YAAY,KAAK,SAAS,CAChC,SAAS;;;;;;AAOb,eAAsB,kBACrB,IACwC;CACxC,MAAM,QAAQ,MAAM,IAAI,kBAAkB,GAAG,CAAC,IAAiB,aAAa;AAC5E,KAAI,CAAC,SAAS,OAAO,MAAM,UAAU,YAAY,MAAM,YAAY,KAAK,KAAK,CAC5E,QAAO;EAAE,SAAS;EAAO,OAAO;GAAE,MAAM;GAAa,SAAS;GAA+B;EAAE;AAEhG,QAAO;EAAE,SAAS;EAAM,MAAM,EAAE,OAAO,MAAM,OAAO;EAAE"}

package/dist/site-settings-DRHfX7bq.mjs

@@ -0,0 +1,50 @@
+import { a as settingMediaIds } from "./settings-Dd1uivmQ.mjs";
+
+//#region src/media/usage/site-settings.ts
+/**
+* Media references held by site settings.
+*
+* Usage reads parse these from the stored `site:*` options on every read, so
+* a change through any writer of those options shows up on the next read.
+*/
+const MEDIA_USAGE_SITE_SETTINGS = [
+	"logo",
+	"favicon",
+	"seo.defaultOgImage"
+];
+/**
+* One setting per option, which holds while each option has a single path in
+* `SETTING_MEDIA_REFERENCE_PATHS`. A second path needs a setting of its own.
+*/
+const SITE_SETTING_OPTIONS = [
+	["site:logo", "logo"],
+	["site:favicon", "favicon"],
+	["site:seo", "seo.defaultOgImage"]
+];
+const MEDIA_USAGE_SITE_SETTING_OPTIONS = SITE_SETTING_OPTIONS.map(([option]) => option);
+/**
+* Group the site settings that select each media item, in settings order.
+*
+* @param options Raw JSON option values keyed by option name.
+*/
+function groupSiteSettingMediaUsage(options) {
+	const usage = /* @__PURE__ */ new Map();
+	for (const [option, setting] of SITE_SETTING_OPTIONS) for (const mediaId of settingMediaIds(option, parseOption(options.get(option)))) {
+		const settings = usage.get(mediaId);
+		if (settings) settings.push(setting);
+		else usage.set(mediaId, [setting]);
+	}
+	return usage;
+}
+function parseOption(value) {
+	if (value == null) return void 0;
+	try {
+		return JSON.parse(value);
+	} catch {
+		return;
+	}
+}
+
+//#endregion
+export { MEDIA_USAGE_SITE_SETTING_OPTIONS as n, groupSiteSettingMediaUsage as r, MEDIA_USAGE_SITE_SETTINGS as t };
+//# sourceMappingURL=site-settings-DRHfX7bq.mjs.map

package/dist/site-settings-DRHfX7bq.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"site-settings-DRHfX7bq.mjs","names":[],"sources":["../src/media/usage/site-settings.ts"],"sourcesContent":["/**\n * Media references held by site settings.\n *\n * Usage reads parse these from the stored `site:*` options on every read, so\n * a change through any writer of those options shows up on the next read.\n */\n\nimport { settingMediaIds, type PortableSettingName } from \"../../transfer/format/settings.js\";\n\nexport const MEDIA_USAGE_SITE_SETTINGS = [\"logo\", \"favicon\", \"seo.defaultOgImage\"] as const;\n\nexport type MediaUsageSiteSetting = (typeof MEDIA_USAGE_SITE_SETTINGS)[number];\n\n/**\n * One setting per option, which holds while each option has a single path in\n * `SETTING_MEDIA_REFERENCE_PATHS`. A second path needs a setting of its own.\n */\nconst SITE_SETTING_OPTIONS = [\n\t[\"site:logo\", \"logo\"],\n\t[\"site:favicon\", \"favicon\"],\n\t[\"site:seo\", \"seo.defaultOgImage\"],\n] as const satisfies readonly (readonly [PortableSettingName, MediaUsageSiteSetting])[];\n\nexport const MEDIA_USAGE_SITE_SETTING_OPTIONS = SITE_SETTING_OPTIONS.map(([option]) => option);\n\n/**\n * Group the site settings that select each media item, in settings order.\n *\n * @param options Raw JSON option values keyed by option name.\n */\nexport function groupSiteSettingMediaUsage(\n\toptions: ReadonlyMap<string, string | null>,\n): Map<string, MediaUsageSiteSetting[]> {\n\tconst usage = new Map<string, MediaUsageSiteSetting[]>();\n\tfor (const [option, setting] of SITE_SETTING_OPTIONS) {\n\t\tfor (const mediaId of settingMediaIds(option, parseOption(options.get(option)))) {\n\t\t\tconst settings = usage.get(mediaId);\n\t\t\tif (settings) settings.push(setting);\n\t\t\telse usage.set(mediaId, [setting]);\n\t\t}\n\t}\n\treturn usage;\n}\n\nfunction parseOption(value: string | null | undefined): unknown {\n\tif (value == null) return undefined;\n\ttry {\n\t\treturn JSON.parse(value);\n\t} catch {\n\t\treturn undefined;\n\t}\n}\n"],"mappings":";;;;;;;;;AASA,MAAa,4BAA4B;CAAC;CAAQ;CAAW;CAAqB;;;;;AAQlF,MAAM,uBAAuB;CAC5B,CAAC,aAAa,OAAO;CACrB,CAAC,gBAAgB,UAAU;CAC3B,CAAC,YAAY,qBAAqB;CAClC;AAED,MAAa,mCAAmC,qBAAqB,KAAK,CAAC,YAAY,OAAO;;;;;;AAO9F,SAAgB,2BACf,SACuC;CACvC,MAAM,wBAAQ,IAAI,KAAsC;AACxD,MAAK,MAAM,CAAC,QAAQ,YAAY,qBAC/B,MAAK,MAAM,WAAW,gBAAgB,QAAQ,YAAY,QAAQ,IAAI,OAAO,CAAC,CAAC,EAAE;EAChF,MAAM,WAAW,MAAM,IAAI,QAAQ;AACnC,MAAI,SAAU,UAAS,KAAK,QAAQ;MAC/B,OAAM,IAAI,SAAS,CAAC,QAAQ,CAAC;;AAGpC,QAAO;;AAGR,SAAS,YAAY,OAA2C;AAC/D,KAAI,SAAS,KAAM,QAAO;AAC1B,KAAI;AACH,SAAO,KAAK,MAAM,MAAM;SACjB;AACP"}

package/dist/site-url-MB685I5X.mjs

@@ -0,0 +1,45 @@
+import { t as OptionsRepository } from "./options-DhrI7eMv.mjs";
+import { t as getConfiguredOrigin } from "./public-url-Bt98vysr.mjs";
+
+//#region src/api/site-url.ts
+const LOOPBACK_HOSTS = new Set([
+	"localhost",
+	"127.0.0.1",
+	"[::1]"
+]);
+/** Sign-in tokens travel in these links, so plain HTTP is only accepted for loopback hosts. */
+function siteUrlSettingOrigin(value) {
+	if (typeof value !== "string" || !URL.canParse(value)) return void 0;
+	const url = new URL(value);
+	if (url.protocol === "https:") return url.origin;
+	if (url.protocol === "http:" && LOOPBACK_HOSTS.has(url.hostname)) return url.origin;
+}
+/**
+* The site's public origin for outbound links, in the precedence order
+* described above. `siteUrlSetting` and `setupUrl` are the stored
+* `site:url` and `emdash:site_url` option values.
+*/
+function resolveSiteOrigin(config, siteUrlSetting, setupUrl) {
+	return getConfiguredOrigin(config) ?? siteUrlSettingOrigin(siteUrlSetting) ?? (typeof setupUrl === "string" && setupUrl ? setupUrl : void 0);
+}
+/**
+* The origin chosen for the site: the configured origin, then the **Site URL**.
+* Unlike `getSiteBaseUrl`, it never falls back to the origin recorded during
+* setup, which may be an address the site has since moved away from.
+*/
+async function getChosenSiteOrigin(db, config) {
+	return getConfiguredOrigin(config) ?? siteUrlSettingOrigin(await new OptionsRepository(db).get("site:url"));
+}
+async function getSiteBaseUrl(db, request, config) {
+	const configured = getConfiguredOrigin(config);
+	if (configured) return `${configured}/_emdash`;
+	const stored = await new OptionsRepository(db).getMany(["site:url", "emdash:site_url"]);
+	const storedUrl = resolveSiteOrigin(config, stored.get("site:url"), stored.get("emdash:site_url"));
+	if (storedUrl) return `${storedUrl}/_emdash`;
+	const url = new URL(request.url);
+	return `${url.protocol}//${url.host}/_emdash`;
+}
+
+//#endregion
+export { getSiteBaseUrl as n, resolveSiteOrigin as r, getChosenSiteOrigin as t };
+//# sourceMappingURL=site-url-MB685I5X.mjs.map

package/dist/site-url-MB685I5X.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"site-url-MB685I5X.mjs","names":[],"sources":["../src/api/site-url.ts"],"sourcesContent":["/**\n * Resolve the canonical site base URL for use in outbound links (emails, etc.).\n *\n * Precedence: the operator-configured origin (`config.siteUrl`, then the\n * `EMDASH_SITE_URL`/`SITE_URL` env vars), then the **Site URL** an admin set\n * in Settings > General (`site:url`, origin only), then the `emdash:site_url` option\n * written once during setup, and only before setup completes the request URL.\n * A configured or stored value always beats the request, so Host header\n * spoofing cannot redirect users to attacker-controlled domains.\n */\n\nimport type { Kysely } from \"kysely\";\n\nimport { OptionsRepository } from \"../database/repositories/options.js\";\nimport type { Database } from \"../database/types.js\";\nimport { getConfiguredOrigin, type SiteUrlConfig } from \"./public-url.js\";\n\nconst LOOPBACK_HOSTS = new Set([\"localhost\", \"127.0.0.1\", \"[::1]\"]);\n\n/** Sign-in tokens travel in these links, so plain HTTP is only accepted for loopback hosts. */\nfunction siteUrlSettingOrigin(value: unknown): string | undefined {\n\tif (typeof value !== \"string\" || !URL.canParse(value)) return undefined;\n\tconst url = new URL(value);\n\tif (url.protocol === \"https:\") return url.origin;\n\tif (url.protocol === \"http:\" && LOOPBACK_HOSTS.has(url.hostname)) return url.origin;\n\treturn undefined;\n}\n\n/**\n * The site's public origin for outbound links, in the precedence order\n * described above. `siteUrlSetting` and `setupUrl` are the stored\n * `site:url` and `emdash:site_url` option values.\n */\nexport function resolveSiteOrigin(\n\tconfig: SiteUrlConfig | undefined,\n\tsiteUrlSetting: unknown,\n\tsetupUrl: unknown,\n): string | undefined {\n\treturn (\n\t\tgetConfiguredOrigin(config) ??\n\t\tsiteUrlSettingOrigin(siteUrlSetting) ??\n\t\t(typeof setupUrl === \"string\" && setupUrl ? setupUrl : undefined)\n\t);\n}\n\n/**\n * The origin chosen for the site: the configured origin, then the **Site URL**.\n * Unlike `getSiteBaseUrl`, it never falls back to the origin recorded during\n * setup, which may be an address the site has since moved away from.\n */\nexport async function getChosenSiteOrigin(\n\tdb: Kysely<Database>,\n\tconfig?: SiteUrlConfig,\n): Promise<string | undefined> {\n\treturn (\n\t\tgetConfiguredOrigin(config) ??\n\t\tsiteUrlSettingOrigin(await new OptionsRepository(db).get(\"site:url\"))\n\t);\n}\n\nexport async function getSiteBaseUrl(\n\tdb: Kysely<Database>,\n\trequest: Request,\n\tconfig?: SiteUrlConfig,\n): Promise<string> {\n\tconst configured = getConfiguredOrigin(config);\n\tif (configured) {\n\t\treturn `${configured}/_emdash`;\n\t}\n\tconst options = new OptionsRepository(db);\n\tconst stored = await options.getMany([\"site:url\", \"emdash:site_url\"]);\n\tconst storedUrl = resolveSiteOrigin(\n\t\tconfig,\n\t\tstored.get(\"site:url\"),\n\t\tstored.get(\"emdash:site_url\"),\n\t);\n\tif (storedUrl) {\n\t\treturn `${storedUrl}/_emdash`;\n\t}\n\t// Fallback: derive from request (only reached before setup completes)\n\tconst url = new URL(request.url);\n\treturn `${url.protocol}//${url.host}/_emdash`;\n}\n"],"mappings":";;;;AAiBA,MAAM,iBAAiB,IAAI,IAAI;CAAC;CAAa;CAAa;CAAQ,CAAC;;AAGnE,SAAS,qBAAqB,OAAoC;AACjE,KAAI,OAAO,UAAU,YAAY,CAAC,IAAI,SAAS,MAAM,CAAE,QAAO;CAC9D,MAAM,MAAM,IAAI,IAAI,MAAM;AAC1B,KAAI,IAAI,aAAa,SAAU,QAAO,IAAI;AAC1C,KAAI,IAAI,aAAa,WAAW,eAAe,IAAI,IAAI,SAAS,CAAE,QAAO,IAAI;;;;;;;AAS9E,SAAgB,kBACf,QACA,gBACA,UACqB;AACrB,QACC,oBAAoB,OAAO,IAC3B,qBAAqB,eAAe,KACnC,OAAO,aAAa,YAAY,WAAW,WAAW;;;;;;;AASzD,eAAsB,oBACrB,IACA,QAC8B;AAC9B,QACC,oBAAoB,OAAO,IAC3B,qBAAqB,MAAM,IAAI,kBAAkB,GAAG,CAAC,IAAI,WAAW,CAAC;;AAIvE,eAAsB,eACrB,IACA,SACA,QACkB;CAClB,MAAM,aAAa,oBAAoB,OAAO;AAC9C,KAAI,WACH,QAAO,GAAG,WAAW;CAGtB,MAAM,SAAS,MADC,IAAI,kBAAkB,GAAG,CACZ,QAAQ,CAAC,YAAY,kBAAkB,CAAC;CACrE,MAAM,YAAY,kBACjB,QACA,OAAO,IAAI,WAAW,EACtB,OAAO,IAAI,kBAAkB,CAC7B;AACD,KAAI,UACH,QAAO,GAAG,UAAU;CAGrB,MAAM,MAAM,IAAI,IAAI,QAAQ,IAAI;AAChC,QAAO,GAAG,IAAI,SAAS,IAAI,IAAI,KAAK"}

package/dist/sitemap-name-B8QP8wud.mjs

@@ -0,0 +1,26 @@
+import { r as isValidSchemaSlug } from "./slug-aVnUV4SL.mjs";
+
+//#region src/seo/sitemap-name.ts
+/**
+* The `{name}` in a per-collection sitemap path, `/sitemap-{name}.xml`.
+*/
+/** `{collection}` for page 1, `{collection}-{n}` for page n from 2 up. */
+const SITEMAP_NAME_RE = /^([a-z][a-z0-9_]*)(?:-([2-9]|[1-9]\d{1,5}))?$/;
+/**
+* The collection and page a sitemap name refers to, or null when the name
+* can't belong to any collection (its collection part must be a valid
+* collection slug).
+*/
+function parseCollectionSitemapName(name) {
+	const match = SITEMAP_NAME_RE.exec(name);
+	const collection = match?.[1];
+	if (!match || !isValidSchemaSlug(collection)) return null;
+	return {
+		collection,
+		page: match[2] ? Number(match[2]) : 1
+	};
+}
+
+//#endregion
+export { parseCollectionSitemapName as t };
+//# sourceMappingURL=sitemap-name-B8QP8wud.mjs.map

package/dist/sitemap-name-B8QP8wud.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"sitemap-name-B8QP8wud.mjs","names":[],"sources":["../src/seo/sitemap-name.ts"],"sourcesContent":["/**\n * The `{name}` in a per-collection sitemap path, `/sitemap-{name}.xml`.\n */\n\nimport { isValidSchemaSlug } from \"../schema/slug.js\";\n\n/** `{collection}` for page 1, `{collection}-{n}` for page n from 2 up. */\nconst SITEMAP_NAME_RE = /^([a-z][a-z0-9_]*)(?:-([2-9]|[1-9]\\d{1,5}))?$/;\n\n/**\n * The collection and page a sitemap name refers to, or null when the name\n * can't belong to any collection (its collection part must be a valid\n * collection slug).\n */\nexport function parseCollectionSitemapName(\n\tname: string,\n): { collection: string; page: number } | null {\n\tconst match = SITEMAP_NAME_RE.exec(name);\n\tconst collection = match?.[1];\n\tif (!match || !isValidSchemaSlug(collection)) return null;\n\treturn { collection, page: match[2] ? Number(match[2]) : 1 };\n}\n"],"mappings":";;;;;;;AAOA,MAAM,kBAAkB;;;;;;AAOxB,SAAgB,2BACf,MAC8C;CAC9C,MAAM,QAAQ,gBAAgB,KAAK,KAAK;CACxC,MAAM,aAAa,QAAQ;AAC3B,KAAI,CAAC,SAAS,CAAC,kBAAkB,WAAW,CAAE,QAAO;AACrD,QAAO;EAAE;EAAY,MAAM,MAAM,KAAK,OAAO,MAAM,GAAG,GAAG;EAAG"}

package/dist/slug-aVnUV4SL.mjs

@@ -0,0 +1,16 @@
+//#region src/schema/slug.ts
+/**
+* The collection and field slug rule.
+*/
+/** Lowercase letter first, then lowercase letters, digits, and underscores. */
+const SCHEMA_SLUG_PATTERN = /^[a-z][a-z0-9_]*$/;
+/** Maximum length of a collection or field slug. */
+const MAX_SCHEMA_SLUG_LENGTH = 63;
+/** Whether `value` is a valid collection or field slug. */
+function isValidSchemaSlug(value) {
+	return typeof value === "string" && value.length > 0 && value.length <= MAX_SCHEMA_SLUG_LENGTH && SCHEMA_SLUG_PATTERN.test(value);
+}
+
+//#endregion
+export { SCHEMA_SLUG_PATTERN as n, isValidSchemaSlug as r, MAX_SCHEMA_SLUG_LENGTH as t };
+//# sourceMappingURL=slug-aVnUV4SL.mjs.map

package/dist/slug-aVnUV4SL.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"slug-aVnUV4SL.mjs","names":[],"sources":["../src/schema/slug.ts"],"sourcesContent":["/**\n * The collection and field slug rule.\n */\n\n/** Lowercase letter first, then lowercase letters, digits, and underscores. */\nexport const SCHEMA_SLUG_PATTERN = /^[a-z][a-z0-9_]*$/;\n\n/** Maximum length of a collection or field slug. */\nexport const MAX_SCHEMA_SLUG_LENGTH = 63;\n\n/** Whether `value` is a valid collection or field slug. */\nexport function isValidSchemaSlug(value: unknown): value is string {\n\treturn (\n\t\ttypeof value === \"string\" &&\n\t\tvalue.length > 0 &&\n\t\tvalue.length <= MAX_SCHEMA_SLUG_LENGTH &&\n\t\tSCHEMA_SLUG_PATTERN.test(value)\n\t);\n}\n"],"mappings":";;;;;AAKA,MAAa,sBAAsB;;AAGnC,MAAa,yBAAyB;;AAGtC,SAAgB,kBAAkB,OAAiC;AAClE,QACC,OAAO,UAAU,YACjB,MAAM,SAAS,KACf,MAAM,UAAU,0BAChB,oBAAoB,KAAK,MAAM"}