emdash 1.3.1 → 1.4.0

package/dist/adapters-D9a1PfqH.d.mts

@@ -0,0 +1,173 @@
+//#region src/db/adapters.d.ts
+/**
+ * Database Adapter Functions
+ *
+ * These run at config time (astro.config.mjs) and return serializable descriptors.
+ * The actual dialect is created at runtime by loading the entrypoint.
+ *
+ * @example
+ * ```ts
+ * // astro.config.mjs
+ * import emdash from "emdash/astro";
+ * import { sqlite } from "emdash/db";
+ *
+ * export default defineConfig({
+ *   integrations: [
+ *     emdash({
+ *       database: sqlite({ url: "file:./data.db" }),
+ *     }),
+ *   ],
+ * });
+ * ```
+ */
+/**
+ * Dialect family identifier.
+ * Used at runtime to select dialect-specific SQL fragments.
+ */
+type DatabaseDialectType = "sqlite" | "postgres";
+type CollectionDeletionGuardInput = {
+  action: "fence";
+  collectionId: string;
+  collectionSlug: string;
+  leaseToken: string;
+  forceDelete: boolean;
+} | {
+  action: "drop";
+  collectionId: string;
+  collectionSlug: string;
+  leaseToken: string;
+};
+type CollectionDeletionGuardResult = {
+  outcome: "fenced";
+} | {
+  outcome: "has_content";
+} | {
+  outcome: "stale";
+} | {
+  outcome: "dropped";
+};
+type ExecuteCollectionDeletionGuard = (config: unknown, input: CollectionDeletionGuardInput) => Promise<CollectionDeletionGuardResult>;
+/**
+ * Database descriptor - serializable config for virtual modules
+ */
+interface DatabaseDescriptor {
+  entrypoint: string;
+  config: unknown;
+  type: DatabaseDialectType;
+  /** Deployment migration capability with configuration safe for a build artifact. */
+  migrations?: {
+    entrypoint: string;
+    manifestConfig: unknown;
+  };
+  /**
+   * When true, the adapter's runtime entrypoint MUST export a named
+   * `createRequestScopedDb` function matching the signature declared in
+   * `virtual:emdash/dialect`. The virtual-module generator re-exports it
+   * by name, so a missing export becomes a build-time bundler error.
+   *
+   * The function is called once per request and decides — based on its own
+   * runtime config (e.g. whether the user opted into D1 sessions) — whether
+   * to return a per-request Kysely or null. Use this for features like D1
+   * read-replica sessions, bookmark cookies, or any per-request DB handle.
+   * The handle must address the configured database: core shares values it
+   * caches from one handle, such as the preview secret, with later requests.
+   *
+   * When false or absent, the generator emits a stub that returns null and
+   * the middleware takes its default (singleton) path.
+   */
+  supportsRequestScope?: boolean;
+  /**
+   * When true, request middleware resolves the last content-namespace
+   * invalidation timestamp and passes it to `createRequestScopedDb`.
+   *
+   * Keep this unset unless request routing depends on that timestamp: reading
+   * it may require an object-cache backend round trip.
+   */
+  needsLastContentWriteAt?: boolean;
+  /**
+   * When true, the adapter's runtime entrypoint MUST export a named
+   * `createCoalescingDialect` function. The runtime uses this fresh dialect
+   * only for its cold-start read batch.
+   *
+   * When false or absent, the virtual module exports `undefined` without
+   * inspecting an optional entrypoint export.
+   */
+  supportsCoalescing?: boolean;
+  /** The runtime entrypoint exports the deletion-specific atomic guard. */
+  supportsCollectionDeletionGuard?: boolean;
+}
+interface SqliteConfig {
+  /**
+   * Database URL (e.g., "file:./data.db")
+   */
+  url: string;
+}
+interface LibsqlConfig {
+  /**
+   * Database URL (e.g., "file:./data.db" or "libsql://...")
+   */
+  url: string;
+  /**
+   * Auth token for remote libSQL
+   */
+  authToken?: string;
+  migrationAuthTokenEnv?: string;
+}
+/**
+ * SQLite database adapter (node:sqlite)
+ *
+ * For local development and Node.js deployments. Requires Node.js 22.16 or later.
+ *
+ * @example
+ * ```ts
+ * database: sqlite({ url: "file:./data.db" })
+ * ```
+ */
+declare function sqlite(config: SqliteConfig): DatabaseDescriptor;
+/**
+ * libSQL database adapter (Turso)
+ *
+ * For Turso hosted databases or local libSQL.
+ *
+ * @example
+ * ```ts
+ * database: libsql({
+ *   url: "libsql://my-db.turso.io",
+ *   authToken: process.env.TURSO_AUTH_TOKEN,
+ * })
+ * ```
+ */
+declare function libsql(config: LibsqlConfig): DatabaseDescriptor;
+/**
+ * PostgreSQL connection configuration
+ */
+interface PostgresConfig {
+  connectionString?: string;
+  host?: string;
+  port?: number;
+  database?: string;
+  user?: string;
+  password?: string;
+  ssl?: boolean;
+  pool?: {
+    min?: number;
+    max?: number; /** Maximum time to wait for a connection, in milliseconds. Uses the pg default when omitted. */
+    connectionTimeoutMillis?: number; /** Time before an idle client is closed, in milliseconds. Uses the pg default when omitted. */
+    idleTimeoutMillis?: number;
+  };
+  migrationConnectionStringEnv?: string;
+}
+/**
+ * PostgreSQL database adapter
+ *
+ * For PostgreSQL deployments with connection pooling.
+ *
+ * @example
+ * ```ts
+ * database: postgres({ connectionString: process.env.DATABASE_URL })
+ * ```
+ */
+declare function postgres(config: PostgresConfig): DatabaseDescriptor;
+//#endregion
+export { ExecuteCollectionDeletionGuard as a, SqliteConfig as c, sqlite as d, DatabaseDialectType as i, libsql as l, CollectionDeletionGuardResult as n, LibsqlConfig as o, DatabaseDescriptor as r, PostgresConfig as s, CollectionDeletionGuardInput as t, postgres as u };
+//# sourceMappingURL=adapters-D9a1PfqH.d.mts.map

package/dist/adapters-D9a1PfqH.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"adapters-D9a1PfqH.d.mts","names":[],"sources":["../src/db/adapters.ts"],"mappings":";;AA0BA;;;;;AAEA;;;;;;;;;;;;;;;AAeA;;;;AAAA,KAjBY,mBAAA;AAAA,KAEA,4BAAA;EAET,MAAA;EACA,YAAA;EACA,cAAA;EACA,UAAA;EACA,WAAA;AAAA;EAGA,MAAA;EACA,YAAA;EACA,cAAA;EACA,UAAA;AAAA;AAAA,KAGS,6BAAA;EACP,OAAA;AAAA;EACA,OAAA;AAAA;EACA,OAAA;AAAA;EACA,OAAA;AAAA;AAAA,KAEO,8BAAA,IACX,MAAA,WACA,KAAA,EAAO,4BAAA,KACH,OAAA,CAAQ,6BAAA;;;;UAmBI,kBAAA;EAChB,UAAA;EACA,MAAA;EACA,IAAA,EAAM,mBAAA;EAGL;EADD,UAAA;IACC,UAAA;IACA,cAAA;EAAA;EAqCD;;;AAGD;;;;;AAOA;;;;;;;;EA7BC,oBAAA;EAmDe;;;;;;;EA3Cf,uBAAA;EA2C+D;AAyBhE;;;;;;;EA3DC,kBAAA;EA2D+D;EAzD/D,+BAAA;AAAA;AAAA,UAGgB,YAAA;EA6Ec;;;EAzE9B,GAAA;AAAA;AAAA,UAGgB,YAAA;EA4EhB;;;EAxEA,GAAA;EA4EC;;;EAxED,SAAA;EACA,qBAAA;AAAA;AA0FD;;;;;;;;;;AAAA,iBA7EgB,MAAA,CAAO,MAAA,EAAQ,YAAA,GAAe,kBAAA;;;;;;;;;;;;;;iBAyB9B,MAAA,CAAO,MAAA,EAAQ,YAAA,GAAe,kBAAA;;;;UAuB7B,cAAA;EAChB,gBAAA;EACA,IAAA;EACA,IAAA;EACA,QAAA;EACA,IAAA;EACA,QAAA;EACA,GAAA;EACA,IAAA;IACC,GAAA;IACA,GAAA;IAEA,uBAAA;IAEA,iBAAA;EAAA;EAED,4BAAA;AAAA;;;;;;;;;;;iBAae,QAAA,CAAS,MAAA,EAAQ,cAAA,GAAiB,kBAAA"}

package/dist/after-32yNRvd2.mjs

@@ -0,0 +1,99 @@
+import { getRequestContext } from "./request-context.mjs";
+
+//#region src/deferred-tasks.ts
+const DEFERRED_TASKS_KEY = Symbol.for("emdash:deferred-tasks");
+const deferredTasks = globalThis[DEFERRED_TASKS_KEY] ?? (() => {
+	const tasks = /* @__PURE__ */ new Set();
+	globalThis[DEFERRED_TASKS_KEY] = tasks;
+	return tasks;
+})();
+function trackDeferredTask(promise) {
+	let tracked;
+	tracked = promise.finally(() => deferredTasks.delete(tracked));
+	deferredTasks.add(tracked);
+	return tracked;
+}
+async function waitForDeferredTasks() {
+	while (deferredTasks.size > 0) await Promise.allSettled(deferredTasks);
+}
+function createDeferredTaskTracker(onSettled) {
+	let pending = 0;
+	let responseSettled = false;
+	let completed = false;
+	let resolveSettled;
+	const settled = new Promise((resolve) => {
+		resolveSettled = resolve;
+	});
+	const completeIfSettled = () => {
+		if (completed || !responseSettled || pending > 0) return;
+		completed = true;
+		try {
+			onSettled();
+		} finally {
+			resolveSettled();
+		}
+	};
+	return {
+		settled,
+		track(promise) {
+			pending++;
+			return promise.finally(() => {
+				pending--;
+				completeIfSettled();
+			});
+		},
+		settle() {
+			responseSettled = true;
+			completeIfSettled();
+		}
+	};
+}
+
+//#endregion
+//#region src/after.ts
+/**
+* Defer work past the HTTP response.
+*
+* Use for bookkeeping that doesn't need to complete before the client
+* gets bytes — writes that record state, maintenance queries, cache
+* refreshes. `after()` hands the promise to the host's lifetime
+* extender when one is available (Cloudflare's `waitUntil` under
+* workerd), or fires-and-forgets on Node (the process lives for the
+* next request anyway).
+*
+* Host binding is resolved lazily via a dynamic import of the
+* `virtual:emdash/wait-until` virtual module. Lazy — rather than a
+* static top-level import — so tools that walk the dist in a plain
+* Node loader (`astro check`, Vitest, etc.) don't trip over the
+* `virtual:` scheme: they'd only fail if they actually called
+* `after()`, which they don't during type-checking.
+*/
+const waitUntilReady = (async () => {
+	try {
+		return (await import("virtual:emdash/wait-until")).waitUntil ?? null;
+	} catch {
+		return null;
+	}
+})();
+waitUntilReady.catch(() => {});
+/**
+* Schedule `fn` to run without blocking the response.
+*
+* Errors are caught and logged — a deferred task should never surface
+* as an unhandled rejection because the response is long gone. Callers
+* that care about errors should handle them inside `fn`.
+*/
+function after(fn) {
+	const task = Promise.resolve().then(fn).catch((error) => {
+		console.error("[emdash] deferred task failed:", error);
+	});
+	const promise = trackDeferredTask(getRequestContext()?.deferredTasks?.track(task) ?? task);
+	waitUntilReady.then((waitUntil) => {
+		if (waitUntil) waitUntil(promise);
+		return null;
+	});
+}
+
+//#endregion
+export { createDeferredTaskTracker as n, waitForDeferredTasks as r, after as t };
+//# sourceMappingURL=after-32yNRvd2.mjs.map

package/dist/after-32yNRvd2.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"after-32yNRvd2.mjs","names":[],"sources":["../src/deferred-tasks.ts","../src/after.ts"],"sourcesContent":["export interface DeferredTaskTracker {\n\tsettled: Promise<void>;\n\ttrack<T>(promise: Promise<T>): Promise<T>;\n\tsettle(): void;\n}\n\n// Test database teardown uses this process-local registry to drain tasks that\n// run without request middleware. Keep it on globalThis so duplicated SSR\n// chunks and their test helpers observe the same task set.\nconst DEFERRED_TASKS_KEY = Symbol.for(\"emdash:deferred-tasks\");\n\nconst deferredTasks: Set<Promise<unknown>> =\n\t// eslint-disable-next-line typescript/no-unsafe-type-assertion -- globalThis singleton pattern\n\t((globalThis as Record<symbol, unknown>)[DEFERRED_TASKS_KEY] as\n\t\t| Set<Promise<unknown>>\n\t\t| undefined) ??\n\t(() => {\n\t\tconst tasks = new Set<Promise<unknown>>();\n\t\t(globalThis as Record<symbol, unknown>)[DEFERRED_TASKS_KEY] = tasks;\n\t\treturn tasks;\n\t})();\n\nexport function trackDeferredTask<T>(promise: Promise<T>): Promise<T> {\n\tlet tracked!: Promise<T>;\n\ttracked = promise.finally(() => deferredTasks.delete(tracked));\n\tdeferredTasks.add(tracked);\n\treturn tracked;\n}\n\nexport async function waitForDeferredTasks(): Promise<void> {\n\twhile (deferredTasks.size > 0) {\n\t\tawait Promise.allSettled(deferredTasks);\n\t}\n}\n\nexport function createDeferredTaskTracker(onSettled: () => void): DeferredTaskTracker {\n\tlet pending = 0;\n\tlet responseSettled = false;\n\tlet completed = false;\n\tlet resolveSettled!: () => void;\n\tconst settled = new Promise<void>((resolve) => {\n\t\tresolveSettled = resolve;\n\t});\n\n\tconst completeIfSettled = () => {\n\t\tif (completed || !responseSettled || pending > 0) return;\n\t\tcompleted = true;\n\t\ttry {\n\t\t\tonSettled();\n\t\t} finally {\n\t\t\tresolveSettled();\n\t\t}\n\t};\n\n\treturn {\n\t\tsettled,\n\t\ttrack<T>(promise: Promise<T>): Promise<T> {\n\t\t\tpending++;\n\t\t\treturn promise.finally(() => {\n\t\t\t\t// A task may register another after() call before it settles. The\n\t\t\t\t// counter therefore reaches zero only after the full task chain ends.\n\t\t\t\tpending--;\n\t\t\t\tcompleteIfSettled();\n\t\t\t});\n\t\t},\n\t\tsettle(): void {\n\t\t\tresponseSettled = true;\n\t\t\tcompleteIfSettled();\n\t\t},\n\t};\n}\n","/**\n * Defer work past the HTTP response.\n *\n * Use for bookkeeping that doesn't need to complete before the client\n * gets bytes — writes that record state, maintenance queries, cache\n * refreshes. `after()` hands the promise to the host's lifetime\n * extender when one is available (Cloudflare's `waitUntil` under\n * workerd), or fires-and-forgets on Node (the process lives for the\n * next request anyway).\n *\n * Host binding is resolved lazily via a dynamic import of the\n * `virtual:emdash/wait-until` virtual module. Lazy — rather than a\n * static top-level import — so tools that walk the dist in a plain\n * Node loader (`astro check`, Vitest, etc.) don't trip over the\n * `virtual:` scheme: they'd only fail if they actually called\n * `after()`, which they don't during type-checking.\n */\n\nimport { trackDeferredTask } from \"./deferred-tasks.js\";\nimport { getRequestContext } from \"./request-context.js\";\n\nexport type WaitUntilFn = (promise: Promise<unknown>) => void;\n\n// Resolves to the host's waitUntil if the adapter provided one, or\n// null otherwise. Kicked off once at module load; subsequent `after()`\n// calls see the cached result without re-importing.\nconst waitUntilReady: Promise<WaitUntilFn | null> = (async () => {\n\ttry {\n\t\t// @ts-ignore - virtual module, generated by the Astro integration\n\t\tconst mod = (await import(\"virtual:emdash/wait-until\")) as {\n\t\t\twaitUntil?: WaitUntilFn;\n\t\t};\n\t\treturn mod.waitUntil ?? null;\n\t} catch {\n\t\t// No virtual module available (Node-side tooling, tests without the\n\t\t// integration in scope). Fire-and-forget is the safe fallback.\n\t\treturn null;\n\t}\n})();\n// Surface rejections without making the module-load fail.\nwaitUntilReady.catch(() => {});\n\n/**\n * Schedule `fn` to run without blocking the response.\n *\n * Errors are caught and logged — a deferred task should never surface\n * as an unhandled rejection because the response is long gone. Callers\n * that care about errors should handle them inside `fn`.\n */\nexport function after(fn: () => void | Promise<void>): void {\n\tconst task = Promise.resolve()\n\t\t.then(fn)\n\t\t.catch((error) => {\n\t\t\tconsole.error(\"[emdash] deferred task failed:\", error);\n\t\t});\n\tconst requestTask = getRequestContext()?.deferredTasks?.track(task) ?? task;\n\tconst promise = trackDeferredTask(requestTask);\n\n\t// Defer the lifetime-extender handoff to the microtask that resolves\n\t// waitUntilReady. On workerd this is effectively instant (the virtual\n\t// module is already loaded in the bundle); on Node the promise\n\t// resolves to null, so this is just one extra microtask and no-op.\n\tvoid waitUntilReady.then((waitUntil) => {\n\t\tif (waitUntil) waitUntil(promise);\n\t\treturn null;\n\t});\n}\n"],"mappings":";;;AASA,MAAM,qBAAqB,OAAO,IAAI,wBAAwB;AAE9D,MAAM,gBAEH,WAAuC,8BAGlC;CACN,MAAM,wBAAQ,IAAI,KAAuB;AACzC,CAAC,WAAuC,sBAAsB;AAC9D,QAAO;IACJ;AAEL,SAAgB,kBAAqB,SAAiC;CACrE,IAAI;AACJ,WAAU,QAAQ,cAAc,cAAc,OAAO,QAAQ,CAAC;AAC9D,eAAc,IAAI,QAAQ;AAC1B,QAAO;;AAGR,eAAsB,uBAAsC;AAC3D,QAAO,cAAc,OAAO,EAC3B,OAAM,QAAQ,WAAW,cAAc;;AAIzC,SAAgB,0BAA0B,WAA4C;CACrF,IAAI,UAAU;CACd,IAAI,kBAAkB;CACtB,IAAI,YAAY;CAChB,IAAI;CACJ,MAAM,UAAU,IAAI,SAAe,YAAY;AAC9C,mBAAiB;GAChB;CAEF,MAAM,0BAA0B;AAC/B,MAAI,aAAa,CAAC,mBAAmB,UAAU,EAAG;AAClD,cAAY;AACZ,MAAI;AACH,cAAW;YACF;AACT,mBAAgB;;;AAIlB,QAAO;EACN;EACA,MAAS,SAAiC;AACzC;AACA,UAAO,QAAQ,cAAc;AAG5B;AACA,uBAAmB;KAClB;;EAEH,SAAe;AACd,qBAAkB;AAClB,sBAAmB;;EAEpB;;;;;;;;;;;;;;;;;;;;;;AC3CF,MAAM,kBAA+C,YAAY;AAChE,KAAI;AAKH,UAHa,MAAM,OAAO,8BAGf,aAAa;SACjB;AAGP,SAAO;;IAEL;AAEJ,eAAe,YAAY,GAAG;;;;;;;;AAS9B,SAAgB,MAAM,IAAsC;CAC3D,MAAM,OAAO,QAAQ,SAAS,CAC5B,KAAK,GAAG,CACR,OAAO,UAAU;AACjB,UAAQ,MAAM,kCAAkC,MAAM;GACrD;CAEH,MAAM,UAAU,kBADI,mBAAmB,EAAE,eAAe,MAAM,KAAK,IAAI,KACzB;AAM9C,CAAK,eAAe,MAAM,cAAc;AACvC,MAAI,UAAW,WAAU,QAAQ;AACjC,SAAO;GACN"}

package/dist/allowed-origins-CEug-p0t.mjs

@@ -0,0 +1,116 @@
+import { n as getEnvAllowedOrigins } from "./public-url-Bt98vysr.mjs";
+
+//#region src/auth/allowed-origins.ts
+/**
+* Resolution and validation of multi-origin passkey verification.
+*
+* `allowedOrigins` lets one EmDash deployment accept passkey assertions from
+* several hostnames sharing the same `rpId` (e.g. apex + preview/staging
+* subdomains under one registrable parent). Origins come from two sources:
+*
+*   - `EmDashConfig.allowedOrigins` (declared in `astro.config.mjs`)
+*   - `EMDASH_ALLOWED_ORIGINS` (comma-separated runtime env var)
+*
+* Sources are merged (union of permissions, deduplicated). Each entry is
+* validated against `siteUrl` to fail loud on dead config the browser would
+* never honor.
+*/
+/**
+* Collect raw allowedOrigins from config and env, source-tagged.
+*
+* Returns raw values — the caller is expected to pass the result through
+* `validateAllowedOrigins()` before use in passkey verification.
+*/
+function getConfiguredAllowedOrigins(config) {
+	const tagged = [];
+	if (config?.allowedOrigins) {
+		for (const origin of config.allowedOrigins) if (origin) tagged.push({
+			origin,
+			source: "config.allowedOrigins"
+		});
+	}
+	for (const origin of getEnvAllowedOrigins()) tagged.push({
+		origin,
+		source: "EMDASH_ALLOWED_ORIGINS"
+	});
+	return tagged;
+}
+/**
+* Validate per-entry shape rules (no `siteUrl` needed):
+*   - parses as `URL`
+*   - protocol is `http:` or `https:`
+*   - hostname has no trailing dot (`example.com.` rejected)
+*   - hostname has no empty labels (`foo..example.com` rejected)
+*
+* Returns the deduplicated, normalized origin form (`URL.origin`) of every
+* input, in input order. Throws on the first violation with a source-tagged
+* error message.
+*/
+function validateOriginShape(tagged) {
+	const normalized = [];
+	const seen = /* @__PURE__ */ new Set();
+	for (const { origin, source } of tagged) {
+		let parsed;
+		try {
+			parsed = new URL(origin);
+		} catch (e) {
+			throw configError(source, `invalid URL: "${origin}"`, e);
+		}
+		if (parsed.protocol !== "http:" && parsed.protocol !== "https:") throw configError(source, `origin must be http or https: "${origin}" (got ${parsed.protocol})`);
+		if (parsed.hostname.endsWith(".")) throw configError(source, `hostname has a trailing dot: "${origin}". Remove the trailing dot — assertion origins from the browser do not include it.`);
+		if (parsed.hostname.split(".").includes("")) throw configError(source, `hostname has empty labels: "${origin}"`);
+		if (!seen.has(parsed.origin)) {
+			seen.add(parsed.origin);
+			normalized.push(parsed.origin);
+		}
+	}
+	return normalized;
+}
+/**
+* Validate the effective merged allowedOrigins set against `siteUrl`.
+*
+* Performs `validateOriginShape()` plus the siteUrl-dependent rules:
+*   - Rule A: non-empty origins ⇒ `siteUrl` is set
+*   - `siteUrl` hostname is not an IP literal (multi-origin requires a domain)
+*   - `siteUrl` hostname has no trailing dot (cannot match assertion origins)
+*   - Rule B: each origin's hostname is `siteHost` exactly or a subdomain
+*
+* Throws on first violation. Returns the deduplicated normalized origins.
+*
+* Use this at the runtime chokepoint (where config + env are merged into the
+* effective set). At Astro integration init, prefer `validateOriginShape()`
+* for shape-only checks on `config.allowedOrigins`, since `siteUrl` may be
+* supplied at runtime via `EMDASH_SITE_URL`.
+*/
+function validateAllowedOrigins(siteUrl, tagged) {
+	const normalized = validateOriginShape(tagged);
+	if (normalized.length === 0) return normalized;
+	if (!siteUrl) throw new Error(`EmDash config error: allowedOrigins is set (${normalized.length} ${normalized.length === 1 ? "entry" : "entries"}) but siteUrl is not. Without a canonical siteUrl, rpId is derived from the request hostname, defeating multi-origin passkeys. Set siteUrl in astro.config.mjs or via EMDASH_SITE_URL.`);
+	let siteHost;
+	try {
+		siteHost = new URL(siteUrl).hostname;
+	} catch (e) {
+		throw new Error(`EmDash config error: siteUrl is not a valid URL: "${siteUrl}"`, { cause: e });
+	}
+	if (siteHost.endsWith(".")) throw new Error(`EmDash config error: siteUrl "${siteUrl}" has a trailing-dot hostname, which cannot match assertion origins. Remove the trailing dot when using allowedOrigins.`);
+	if (isIPLiteralHostname(siteHost)) throw new Error(`EmDash config error: siteUrl "${siteUrl}" uses an IP-literal hostname. Multi-origin passkeys require a domain-based siteUrl — IP addresses cannot have valid subdomains for WebAuthn rpId.`);
+	for (const { origin, source } of tagged) {
+		const h = new URL(origin).hostname;
+		if (h !== siteHost && !h.endsWith("." + siteHost)) throw configError(source, `"${origin}" is not a subdomain of siteUrl "${siteUrl}". Allowed origins must be the same hostname as siteUrl or a subdomain of it.`);
+	}
+	return normalized;
+}
+function configError(source, detail, cause) {
+	const err = /* @__PURE__ */ new Error(`EmDash config error in ${source}: ${detail}`);
+	if (cause !== void 0) err.cause = cause;
+	return err;
+}
+const IPV4_DOTTED_DECIMAL_RE = /^\d+(\.\d+){3}$/;
+function isIPLiteralHostname(h) {
+	if (h.startsWith("[")) return true;
+	return IPV4_DOTTED_DECIMAL_RE.test(h);
+}
+
+//#endregion
+export { validateAllowedOrigins as n, validateOriginShape as r, getConfiguredAllowedOrigins as t };
+//# sourceMappingURL=allowed-origins-CEug-p0t.mjs.map

package/dist/allowed-origins-CEug-p0t.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"allowed-origins-CEug-p0t.mjs","names":[],"sources":["../src/auth/allowed-origins.ts"],"sourcesContent":["/**\n * Resolution and validation of multi-origin passkey verification.\n *\n * `allowedOrigins` lets one EmDash deployment accept passkey assertions from\n * several hostnames sharing the same `rpId` (e.g. apex + preview/staging\n * subdomains under one registrable parent). Origins come from two sources:\n *\n *   - `EmDashConfig.allowedOrigins` (declared in `astro.config.mjs`)\n *   - `EMDASH_ALLOWED_ORIGINS` (comma-separated runtime env var)\n *\n * Sources are merged (union of permissions, deduplicated). Each entry is\n * validated against `siteUrl` to fail loud on dead config the browser would\n * never honor.\n */\n\nimport { getEnvAllowedOrigins } from \"../api/public-url.js\";\nimport type { EmDashConfig } from \"../astro/integration/runtime.js\";\n\nexport type AllowedOriginSource = \"config.allowedOrigins\" | \"EMDASH_ALLOWED_ORIGINS\";\n\nexport interface TaggedOrigin {\n\t/** Raw entry as declared by the operator. */\n\torigin: string;\n\t/** Where the entry came from (used for source-attributed errors). */\n\tsource: AllowedOriginSource;\n}\n\n/**\n * Collect raw allowedOrigins from config and env, source-tagged.\n *\n * Returns raw values — the caller is expected to pass the result through\n * `validateAllowedOrigins()` before use in passkey verification.\n */\nexport function getConfiguredAllowedOrigins(config?: EmDashConfig): TaggedOrigin[] {\n\tconst tagged: TaggedOrigin[] = [];\n\tif (config?.allowedOrigins) {\n\t\tfor (const origin of config.allowedOrigins) {\n\t\t\tif (origin) tagged.push({ origin, source: \"config.allowedOrigins\" });\n\t\t}\n\t}\n\tfor (const origin of getEnvAllowedOrigins()) {\n\t\ttagged.push({ origin, source: \"EMDASH_ALLOWED_ORIGINS\" });\n\t}\n\treturn tagged;\n}\n\n/**\n * Validate per-entry shape rules (no `siteUrl` needed):\n *   - parses as `URL`\n *   - protocol is `http:` or `https:`\n *   - hostname has no trailing dot (`example.com.` rejected)\n *   - hostname has no empty labels (`foo..example.com` rejected)\n *\n * Returns the deduplicated, normalized origin form (`URL.origin`) of every\n * input, in input order. Throws on the first violation with a source-tagged\n * error message.\n */\nexport function validateOriginShape(tagged: TaggedOrigin[]): string[] {\n\tconst normalized: string[] = [];\n\tconst seen = new Set<string>();\n\tfor (const { origin, source } of tagged) {\n\t\tlet parsed: URL;\n\t\ttry {\n\t\t\tparsed = new URL(origin);\n\t\t} catch (e) {\n\t\t\tthrow configError(source, `invalid URL: \"${origin}\"`, e);\n\t\t}\n\t\tif (parsed.protocol !== \"http:\" && parsed.protocol !== \"https:\") {\n\t\t\tthrow configError(\n\t\t\t\tsource,\n\t\t\t\t`origin must be http or https: \"${origin}\" (got ${parsed.protocol})`,\n\t\t\t);\n\t\t}\n\t\tif (parsed.hostname.endsWith(\".\")) {\n\t\t\tthrow configError(\n\t\t\t\tsource,\n\t\t\t\t`hostname has a trailing dot: \"${origin}\". Remove the trailing dot — assertion origins from the browser do not include it.`,\n\t\t\t);\n\t\t}\n\t\tif (parsed.hostname.split(\".\").includes(\"\")) {\n\t\t\tthrow configError(source, `hostname has empty labels: \"${origin}\"`);\n\t\t}\n\t\tif (!seen.has(parsed.origin)) {\n\t\t\tseen.add(parsed.origin);\n\t\t\tnormalized.push(parsed.origin);\n\t\t}\n\t}\n\treturn normalized;\n}\n\n/**\n * Validate the effective merged allowedOrigins set against `siteUrl`.\n *\n * Performs `validateOriginShape()` plus the siteUrl-dependent rules:\n *   - Rule A: non-empty origins ⇒ `siteUrl` is set\n *   - `siteUrl` hostname is not an IP literal (multi-origin requires a domain)\n *   - `siteUrl` hostname has no trailing dot (cannot match assertion origins)\n *   - Rule B: each origin's hostname is `siteHost` exactly or a subdomain\n *\n * Throws on first violation. Returns the deduplicated normalized origins.\n *\n * Use this at the runtime chokepoint (where config + env are merged into the\n * effective set). At Astro integration init, prefer `validateOriginShape()`\n * for shape-only checks on `config.allowedOrigins`, since `siteUrl` may be\n * supplied at runtime via `EMDASH_SITE_URL`.\n */\nexport function validateAllowedOrigins(\n\tsiteUrl: string | undefined,\n\ttagged: TaggedOrigin[],\n): string[] {\n\tconst normalized = validateOriginShape(tagged);\n\tif (normalized.length === 0) return normalized;\n\n\tif (!siteUrl) {\n\t\tthrow new Error(\n\t\t\t`EmDash config error: allowedOrigins is set (${normalized.length} ${\n\t\t\t\tnormalized.length === 1 ? \"entry\" : \"entries\"\n\t\t\t}) but siteUrl is not. Without a canonical siteUrl, rpId is derived from the request hostname, defeating multi-origin passkeys. Set siteUrl in astro.config.mjs or via EMDASH_SITE_URL.`,\n\t\t);\n\t}\n\n\tlet siteHost: string;\n\ttry {\n\t\tsiteHost = new URL(siteUrl).hostname;\n\t} catch (e) {\n\t\tthrow new Error(`EmDash config error: siteUrl is not a valid URL: \"${siteUrl}\"`, {\n\t\t\tcause: e,\n\t\t});\n\t}\n\n\tif (siteHost.endsWith(\".\")) {\n\t\tthrow new Error(\n\t\t\t`EmDash config error: siteUrl \"${siteUrl}\" has a trailing-dot hostname, which cannot match assertion origins. Remove the trailing dot when using allowedOrigins.`,\n\t\t);\n\t}\n\tif (isIPLiteralHostname(siteHost)) {\n\t\tthrow new Error(\n\t\t\t`EmDash config error: siteUrl \"${siteUrl}\" uses an IP-literal hostname. Multi-origin passkeys require a domain-based siteUrl — IP addresses cannot have valid subdomains for WebAuthn rpId.`,\n\t\t);\n\t}\n\n\tfor (const { origin, source } of tagged) {\n\t\tconst h = new URL(origin).hostname;\n\t\tif (h !== siteHost && !h.endsWith(\".\" + siteHost)) {\n\t\t\tthrow configError(\n\t\t\t\tsource,\n\t\t\t\t`\"${origin}\" is not a subdomain of siteUrl \"${siteUrl}\". Allowed origins must be the same hostname as siteUrl or a subdomain of it.`,\n\t\t\t);\n\t\t}\n\t}\n\n\treturn normalized;\n}\n\nfunction configError(source: AllowedOriginSource, detail: string, cause?: unknown): Error {\n\tconst err = new Error(`EmDash config error in ${source}: ${detail}`);\n\tif (cause !== undefined) (err as Error & { cause?: unknown }).cause = cause;\n\treturn err;\n}\n\nconst IPV4_DOTTED_DECIMAL_RE = /^\\d+(\\.\\d+){3}$/;\n\nfunction isIPLiteralHostname(h: string): boolean {\n\t// IPv6 hostnames are bracketed by URL.hostname, e.g. \"[::1]\"\n\tif (h.startsWith(\"[\")) return true;\n\t// IPv4 dotted-decimal\n\treturn IPV4_DOTTED_DECIMAL_RE.test(h);\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;AAiCA,SAAgB,4BAA4B,QAAuC;CAClF,MAAM,SAAyB,EAAE;AACjC,KAAI,QAAQ,gBACX;OAAK,MAAM,UAAU,OAAO,eAC3B,KAAI,OAAQ,QAAO,KAAK;GAAE;GAAQ,QAAQ;GAAyB,CAAC;;AAGtE,MAAK,MAAM,UAAU,sBAAsB,CAC1C,QAAO,KAAK;EAAE;EAAQ,QAAQ;EAA0B,CAAC;AAE1D,QAAO;;;;;;;;;;;;;AAcR,SAAgB,oBAAoB,QAAkC;CACrE,MAAM,aAAuB,EAAE;CAC/B,MAAM,uBAAO,IAAI,KAAa;AAC9B,MAAK,MAAM,EAAE,QAAQ,YAAY,QAAQ;EACxC,IAAI;AACJ,MAAI;AACH,YAAS,IAAI,IAAI,OAAO;WAChB,GAAG;AACX,SAAM,YAAY,QAAQ,iBAAiB,OAAO,IAAI,EAAE;;AAEzD,MAAI,OAAO,aAAa,WAAW,OAAO,aAAa,SACtD,OAAM,YACL,QACA,kCAAkC,OAAO,SAAS,OAAO,SAAS,GAClE;AAEF,MAAI,OAAO,SAAS,SAAS,IAAI,CAChC,OAAM,YACL,QACA,iCAAiC,OAAO,oFACxC;AAEF,MAAI,OAAO,SAAS,MAAM,IAAI,CAAC,SAAS,GAAG,CAC1C,OAAM,YAAY,QAAQ,+BAA+B,OAAO,GAAG;AAEpE,MAAI,CAAC,KAAK,IAAI,OAAO,OAAO,EAAE;AAC7B,QAAK,IAAI,OAAO,OAAO;AACvB,cAAW,KAAK,OAAO,OAAO;;;AAGhC,QAAO;;;;;;;;;;;;;;;;;;AAmBR,SAAgB,uBACf,SACA,QACW;CACX,MAAM,aAAa,oBAAoB,OAAO;AAC9C,KAAI,WAAW,WAAW,EAAG,QAAO;AAEpC,KAAI,CAAC,QACJ,OAAM,IAAI,MACT,+CAA+C,WAAW,OAAO,GAChE,WAAW,WAAW,IAAI,UAAU,UACpC,wLACD;CAGF,IAAI;AACJ,KAAI;AACH,aAAW,IAAI,IAAI,QAAQ,CAAC;UACpB,GAAG;AACX,QAAM,IAAI,MAAM,qDAAqD,QAAQ,IAAI,EAChF,OAAO,GACP,CAAC;;AAGH,KAAI,SAAS,SAAS,IAAI,CACzB,OAAM,IAAI,MACT,iCAAiC,QAAQ,yHACzC;AAEF,KAAI,oBAAoB,SAAS,CAChC,OAAM,IAAI,MACT,iCAAiC,QAAQ,oJACzC;AAGF,MAAK,MAAM,EAAE,QAAQ,YAAY,QAAQ;EACxC,MAAM,IAAI,IAAI,IAAI,OAAO,CAAC;AAC1B,MAAI,MAAM,YAAY,CAAC,EAAE,SAAS,MAAM,SAAS,CAChD,OAAM,YACL,QACA,IAAI,OAAO,mCAAmC,QAAQ,+EACtD;;AAIH,QAAO;;AAGR,SAAS,YAAY,QAA6B,QAAgB,OAAwB;CACzF,MAAM,sBAAM,IAAI,MAAM,0BAA0B,OAAO,IAAI,SAAS;AACpE,KAAI,UAAU,OAAW,CAAC,IAAoC,QAAQ;AACtE,QAAO;;AAGR,MAAM,yBAAyB;AAE/B,SAAS,oBAAoB,GAAoB;AAEhD,KAAI,EAAE,WAAW,IAAI,CAAE,QAAO;AAE9B,QAAO,uBAAuB,KAAK,EAAE"}

package/dist/api/route-utils.d.mts

@@ -1,7 +1,7 @@
-import { a as apiError, i as parseQuery, n as isParseError, o as apiSuccess, r as parseBody, s as handleError, t as ParseResult } from "../parse-6pN8Xqg5.mjs";
-import { t as Database } from "../types-CCEHAhOv.mjs";
-import { An as StorageCollection, jn as StorageCollectionConfig } from "../types-mQGTpP-4.mjs";
-import { t as OptionsRepository } from "../options-CmUpkyKW.mjs";
+import { a as apiError, i as parseQuery, n as isParseError, o as apiSuccess, r as parseBody, s as handleError, t as ParseResult } from "../parse-Dndx1QmN.mjs";
+import { t as Database } from "../types-DKwRUA-x.mjs";
+import { An as StorageCollection, jn as StorageCollectionConfig } from "../types-CjftrmZR.mjs";
+import { t as OptionsRepository } from "../options-BUUgroHg.mjs";
 import { Kysely } from "kysely";
 import { Role } from "@emdash-cms/auth";
 

package/dist/api/route-utils.mjs

@@ -1,68 +1,67 @@
-import "../dialect-helpers-7_IqPdh9.mjs";
+import "../dialect-helpers-B1XN2HGB.mjs";
 import "../config-Cs_AwWXI.mjs";
 import "../datetime-normalization-PeiEdcRY.mjs";
-import "../after-PcEvMY_6.mjs";
+import "../after-32yNRvd2.mjs";
 import { t as OptionsRepository } from "../options-DhrI7eMv.mjs";
-import "../secrets-Cc_O3Kp-.mjs";
+import "../secrets-Dswzrz3k.mjs";
 import "../base64-BQBZwXCx.mjs";
-import "../content-Dt0Os_WQ.mjs";
+import "../content-BKHUVsE5.mjs";
 import "../query-BFHjCzSh.mjs";
-import "../object-cache-EjasjtoQ.mjs";
+import "../object-cache-DmKr09La.mjs";
 import "../slugify-BDEG9pLk.mjs";
 import "../request-cache-5z2WzWmh.mjs";
 import "../url-DTfGDJhI.mjs";
 import "../types-DwhEvIVb.mjs";
 import "../revision-Dx7Uth1X.mjs";
-import "../media-B_x5B9EA.mjs";
-import "../user-nQInBZbE.mjs";
-import "../taxonomy-BG_xu2Qf.mjs";
-import "../comment-DV7dybcs.mjs";
-import { u as createStorageAccess } from "../context-ErV7UdQY.mjs";
+import "../media-DepNLhPq.mjs";
+import "../user-By8SzQxS.mjs";
+import "../taxonomy-CMI5fczd.mjs";
+import "../comment-DB74Zpa4.mjs";
+import { u as createStorageAccess } from "../context-CzjejcsE.mjs";
 import "../resolve-DdNXBJSr.mjs";
-import "../redirect-DcmNMvOs.mjs";
+import "../redirect-DjLdw427.mjs";
 import "../byline-registry-BhzpO41z.mjs";
-import "../field-defs-cache-C7sR7ZeU.mjs";
-import "../byline-CzGZC2Zs.mjs";
-import "../dist-DY0aOmAP.mjs";
-import "../enrich-C3XIJi0O.mjs";
-import "../entry-locks-Cp8_BcQQ.mjs";
-import "../seo-DaMYIQY8.mjs";
-import "../version-BOFfLiVT.mjs";
-import "../cache-BWzswWB-.mjs";
-import "../artifacts-DwOYYBQm.mjs";
-import "../fts-manager-BzFo0xx6.mjs";
-import "../loader-D4w4XE7q.mjs";
-import "../json-recordset-BjYIWFkV.mjs";
-import "../collection-slugs-cache-B2J5aESO.mjs";
-import "../taxonomies-By2aGvq2.mjs";
-import "../media-usage-work-L8-Au4j-.mjs";
-import "../capture-triggers-D7g3fOZj.mjs";
-import "../activation-sGF9br3X.mjs";
-import "../registry-DymfZkAN.mjs";
-import "../hash-A-o2ZX8O.mjs";
-import "../zod-generator-VxCPVDpo.mjs";
-import "../errors-DlJwot7q.mjs";
-import "../canonical-DjF_z6GI.mjs";
-import "../digest-DlBa7kJl.mjs";
-import "../errors-BMaCpLeS.mjs";
-import "../media-BL9MRrSG.mjs";
-import "../settings-B3ZmPF_8.mjs";
-import "../site-settings-uPkW0e6o.mjs";
-import "../settings-yIqoN-Ok.mjs";
-import { n as apiSuccess, r as handleError, t as apiError } from "../error-CT2SsX5S.mjs";
-import "../fence-BOD3SxZG.mjs";
-import "../taxonomies-CVRd_jz0.mjs";
-import "../ssrf-mcCKMH6B.mjs";
-import { i as parseQuery, n as parseBody, t as isParseError } from "../parse-2W-E2f7w.mjs";
-import "../redirects-BA_TvtuH.mjs";
-import "../media-qTTHVkls.mjs";
-import "../status-DSURZwKS.mjs";
-import "../redirects-BIrRvgn4.mjs";
-import "../ssrf-BBXcxG-f.mjs";
-import "../credits-BRyjafiF.mjs";
-import "../cron-Bm5xa7tv.mjs";
-import { i as getPublicOrigin } from "../public-url-CQwzRljH.mjs";
-import { n as finalizeSetup } from "../setup-complete-eu6MUQnt.mjs";
+import "../byline-DHJS-GGb.mjs";
+import "../dist-BUmWMTbN.mjs";
+import "../enrich-DFlfnd3u.mjs";
+import "../entry-locks-CJ9uhqg1.mjs";
+import "../seo-B_H_pqOd.mjs";
+import "../version-DqB7LIO7.mjs";
+import "../cache-5DHbpEWu.mjs";
+import "../artifacts-Dvdp2KK-.mjs";
+import "../fts-manager-6861qcwk.mjs";
+import "../loader-DhnedqY4.mjs";
+import "../json-recordset-D0WhN2UA.mjs";
+import "../collection-slugs-cache-DIrLjqH-.mjs";
+import "../taxonomies-B__VmCKQ.mjs";
+import "../media-usage-work-BCK2J-v_.mjs";
+import "../capture-triggers-BezAvWcB.mjs";
+import "../activation-CGlyigmg.mjs";
+import "../registry-B0-O575m.mjs";
+import "../hash-BJaeek87.mjs";
+import "../zod-generator--nlM0930.mjs";
+import "../errors-B4f4It-2.mjs";
+import "../canonical-BudtH-Fx.mjs";
+import "../digest-DJ1tHCgy.mjs";
+import "../errors-8gJqv-XV.mjs";
+import "../media-CikS-q6E.mjs";
+import "../settings-Dd1uivmQ.mjs";
+import "../site-settings-DRHfX7bq.mjs";
+import "../settings-D932YP2-.mjs";
+import { n as apiSuccess, r as handleError, t as apiError } from "../error-BCMgPxdn.mjs";
+import "../fence-Dagicj14.mjs";
+import "../taxonomies-5SR76j11.mjs";
+import "../ssrf-BcYjyM4M.mjs";
+import { i as parseQuery, n as parseBody, t as isParseError } from "../parse-B_b6gZxG.mjs";
+import "../redirects-CyvvZrCJ.mjs";
+import "../media-BR4_t-Wd.mjs";
+import "../status-BFNdxzKc.mjs";
+import "../redirects-Cpq1catN.mjs";
+import "../ssrf-DM0E-D_8.mjs";
+import "../credits-BKREepht.mjs";
+import "../cron-D7obTIfk.mjs";
+import { i as getPublicOrigin } from "../public-url-Bt98vysr.mjs";
+import { n as finalizeSetup } from "../setup-complete-qsJYWutC.mjs";
 
 //#region src/api/auth-storage.ts
 /**

package/dist/api/route-utils.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"route-utils.mjs","names":[],"sources":["../../src/api/auth-storage.ts"],"sourcesContent":["/**\n * Auth provider storage helper.\n *\n * Gives auth provider routes access to plugin-style storage collections\n * namespaced under `auth:<providerId>`. Reuses the existing `_plugin_storage`\n * table and `PluginStorageRepository` infrastructure.\n */\n\nimport type { Kysely } from \"kysely\";\n\nimport type { Database } from \"../database/types.js\";\nimport { createStorageAccess } from \"../plugins/context.js\";\nimport type { StorageCollection, StorageCollectionConfig } from \"../plugins/types.js\";\n\n/**\n * Get storage collections for an auth provider.\n *\n * Returns a record of `StorageCollection` instances, one per declared\n * collection in the provider's `storage` config. Data is stored in the\n * shared `_plugin_storage` table under the namespace `auth:<providerId>`.\n *\n * @example\n * ```ts\n * const storage = getAuthProviderStorage(emdash.db, \"atproto\", {\n *   states: { indexes: [] },\n *   sessions: { indexes: [] },\n * });\n * const session = await storage.sessions.get(sessionId);\n * ```\n */\nexport function getAuthProviderStorage(\n\tdb: Kysely<Database>,\n\tproviderId: string,\n\tstorageConfig: Record<string, StorageCollectionConfig>,\n): Record<string, StorageCollection> {\n\treturn createStorageAccess(db, `auth:${providerId}`, storageConfig);\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA8BA,SAAgB,uBACf,IACA,YACA,eACoC;AACpC,QAAO,oBAAoB,IAAI,QAAQ,cAAc,cAAc"}
+{"version":3,"file":"route-utils.mjs","names":[],"sources":["../../src/api/auth-storage.ts"],"sourcesContent":["/**\n * Auth provider storage helper.\n *\n * Gives auth provider routes access to plugin-style storage collections\n * namespaced under `auth:<providerId>`. Reuses the existing `_plugin_storage`\n * table and `PluginStorageRepository` infrastructure.\n */\n\nimport type { Kysely } from \"kysely\";\n\nimport type { Database } from \"../database/types.js\";\nimport { createStorageAccess } from \"../plugins/context.js\";\nimport type { StorageCollection, StorageCollectionConfig } from \"../plugins/types.js\";\n\n/**\n * Get storage collections for an auth provider.\n *\n * Returns a record of `StorageCollection` instances, one per declared\n * collection in the provider's `storage` config. Data is stored in the\n * shared `_plugin_storage` table under the namespace `auth:<providerId>`.\n *\n * @example\n * ```ts\n * const storage = getAuthProviderStorage(emdash.db, \"atproto\", {\n *   states: { indexes: [] },\n *   sessions: { indexes: [] },\n * });\n * const session = await storage.sessions.get(sessionId);\n * ```\n */\nexport function getAuthProviderStorage(\n\tdb: Kysely<Database>,\n\tproviderId: string,\n\tstorageConfig: Record<string, StorageCollectionConfig>,\n): Record<string, StorageCollection> {\n\treturn createStorageAccess(db, `auth:${providerId}`, storageConfig);\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA8BA,SAAgB,uBACf,IACA,YACA,eACoC;AACpC,QAAO,oBAAoB,IAAI,QAAQ,cAAc,cAAc"}

package/dist/api/schemas/index.d.mts

@@ -1,2 +1,2 @@
-import { $ as allowedDomainCreateBody, $i as contentPublishBody, $n as orphanedTableListResponseSchema, $r as mediaUsageSiteSettingDetailSchema, $t as menuItemSchema, A as bylineUpdateBody, Ai as mediaReadResponseSchema, An as createReactionBody, Ar as mediaUsageActivationAdvanceResponseSchema, At as sectionSchema, B as notFoundSummarySchema, Bi as mediaUploadResponseSchema, Bn as collectionListResponseSchema, Br as mediaUsageCollectionDeletionStateSchema, Bt as taxonomyResponseSchema, C as bylineFieldUsageResponseSchema, Ca as mediaDeleteResponseSchema, Ci as mediaItemSchema, Cn as commentBulkBody, Cr as MediaUsageSummary, Ct as searchResponseSchema, D as bylineSummarySchema, Da as successEnvelope, Di as mediaListResponseSchema, Dn as commentSchema, Dr as MediaUsageWorkRetryRequest, Dt as siteSettingsSchema, E as bylineListResponseSchema, Ea as slugPattern, Ei as mediaListReadResponseSchema, En as commentListQuery, Er as MediaUsageWorkListResponse, Et as settingsUpdateBody, F as notFoundListQuery, Fi as mediaStreamUploadResponseSchema, Fn as blockTypeListResponseSchema, Fr as mediaUsageCollectionDeletionListQuery, Ft as createTermBody, G as createWidgetAreaBody, Gi as contentAuthorsResponseSchema, Gn as createBlockTypeBody, Gr as mediaUsageEntryDetailSchema, Gt as termResponseSchema, H as redirectSchema, Hi as mediaUploadUrlResponseSchema, Hn as collectionResponseSchema, Hr as mediaUsageCoverageStatusSchema, Ht as termListQuery, I as notFoundListResponseSchema, Ii as mediaUpdateBody, In as blockTypeResponseSchema, Ir as mediaUsageCollectionDeletionListResponseSchema, It as reorderTermsBody, J as updateWidgetBody, Ji as contentFieldFiltersSchema, Jn as fieldListResponseSchema, Jr as mediaUsageProgressSchema, Jt as termWithCountSchema, K as createWidgetBody, Ki as contentCompareResponseSchema, Kn as createCollectionBody, Kr as mediaUsageOccurrenceDetailSchema, Kt as termSchema, L as notFoundPruneBody, Li as mediaUploadDeduplicateForm, Ln as blockTypeSchema, Lr as mediaUsageCollectionDeletionPhaseSchema, Lt as taxonomyDefSchema, M as contentBylineInputSchema, Mi as mediaReplaceMetadataForm, Mn as publicCommentSchema, Mr as mediaUsageActivationStateSchema, Mt as updateSectionBody, N as createRedirectBody, Ni as mediaReplaceResponseSchema, Nn as activateBlockTypeVersionBody, Nr as mediaUsageActivationStatusSchema, Nt as bulkTagBody, O as bylineTranslationCreateBody, Oi as mediaProviderListQuery, On as commentStatusBody, Or as MediaUsageWorkRetryResponse, Ot as createSectionBody, P as notFoundEntrySchema, Pi as mediaResponseSchema, Pn as blockFieldDefinitionSchema, Pr as mediaUsageCollectionDeletionItemSchema, Pt as createTaxonomyDefBody, Q as widgetSchema, Qi as contentPreviewUrlBody, Qn as orphanRegisterBody, Qr as mediaUsageRepairStatusSchema, Qt as createMenuItemBody, R as notFoundSummaryQuery, Ri as mediaUploadEnsureUniqueFilenameForm, Rn as blockTypeVersionSchema, Rr as mediaUsageCollectionDeletionRetryBody, Rt as taxonomyDefTranslationsSchema, S as bylineFieldUpdateBody, Sa as localeFilterQuery, Si as mediaGetQuery, Sn as adminCommentListResponseSchema, Sr as MediaUsageSourceDetail, St as searchRebuildBody, T as bylineCreditSchema, Ta as roleLevel, Ti as mediaListReadItemSchema, Tn as commentCountsResponseSchema, Tr as MediaUsageWorkListQuery, Tt as searchSuggestQuery, U as redirectsListQuery, Ui as calendarQuery, Un as collectionSchema, Ur as mediaUsageDetailsQuery, Ut as termListResponseSchema, V as redirectListResponseSchema, Vi as mediaUploadUrlBody, Vn as collectionReorderBody, Vr as mediaUsageCoverageSchema, Vt as termGetResponseSchema, W as updateRedirectBody, Wi as contentAuthorSchema, Wn as collectionWithFieldsResponseSchema, Wr as mediaUsageDetailsResponseSchema, Wt as termReorderResponseSchema, X as widgetAreaWithWidgetsAndCountSchema, Xi as contentListQuery, Xn as fieldResponseSchema, Xr as mediaUsageRepairCollectionSummarySchema, Xt as updateTermBody, Y as widgetAreaSchema, Yi as contentItemSchema, Yn as fieldReorderBody, Yr as mediaUsageRepairBody, Yt as updateTaxonomyDefBody, Z as widgetAreaWithWidgetsSchema, Zi as contentListResponseSchema, Zn as fieldSchema, Zr as mediaUsageRepairResponseSchema, Zt as createMenuBody, _ as updateRelationBody, _a as countResponseSchema, _i as mediaFolderIdSchema, _n as passkeyRegisterVerifyBody, _r as MediaUsageProgress, _t as wxrChunkCursor, a as entryLockReleaseResponseSchema, aa as contentSeoSchema, ai as mediaUsageWorkRetryBody, an as reorderMenuItemsBody, ar as MediaUsageActivationAdvanceRequest, at as usersListQuery, b as bylineFieldListResponseSchema, ba as httpUrl, bi as mediaFolderResponseSchema, bn as signupCompleteBody, br as MediaUsageRepairResponse, bt as searchEnableBody, c as createRelationBody, ca as contentTranslationSchema, ci as mediaUsageWorkStateSchema, cn as updateMenuItemBody, cr as MediaUsageCollectionDeletionListQuery, ct as setupAdminVerifyBody, d as referenceParentsResponseSchema, da as contentUpdateBody, di as formatFileSize, dn as inviteCreateBody, dr as MediaUsageCollectionDeletionRetryResponse, dt as importProbeBody, ea as contentResponseSchema, ei as mediaUsageSourceDetailSchema, en as menuItemTypeEnum, er as orphanedTableSchema, et as allowedDomainUpdateBody, f as relationDefSchema, fa as revisionRestoreBody, fi as mediaConfirmBody, fn as inviteRegisterOptionsBody, fr as MediaUsageCoverage, ft as wpMediaImportBody, g as relationWithUsageSchema, ga as apiErrorSchema, gi as mediaFolderBody, gn as passkeyRegisterOptionsBody, gr as MediaUsageOccurrenceDetail, gt as wpRewriteUrlsBody, h as relationResponseSchema, ha as VALID_ROLE_LEVELS, hi as mediaExistingResponseSchema, hn as passkeyOptionsBody, hr as MediaUsageEntryDetail, ht as wpPrepareBody, i as entryLockHolderSchema, ia as contentSeoInput, ii as mediaUsageWorkListResponseSchema, in as menuWithItemsSchema, ir as updateFieldBody, it as userUpdateBody, j as bylinesListQuery, ji as mediaReplaceBody, jn as publicCommentListResponseSchema, jr as mediaUsageActivationConflictSchema, jt as sectionsListQuery, k as bylineTranslationsResponseSchema, ki as mediaReadItemSchema, kn as createCommentBody, kr as mediaUsageActivationAdvanceBody, kt as sectionListResponseSchema, l as entryRefSchema, la as contentTranslationsResponseSchema, li as CONTENT_TYPE_RE, ln as authMeActionBody, lr as MediaUsageCollectionDeletionListResponse, lt as setupAtprotoAdminBody, m as relationListResponseSchema, ma as trashedContentListResponseSchema, mi as mediaDirectUploadBody, mn as magicLinkVerifyBody, mr as MediaUsageDetailsResponse, mt as wpPluginExecuteBody, n as entryLockAcquireBody, na as contentRevisionConditionBody, ni as mediaUsageWorkItemSchema, nn as menuSchema, nr as updateBlockTypeBody, nt as userListResponseSchema, o as entryLockStatusSchema, oa as contentTermsBody, oi as mediaUsageWorkRetryConflictSchema, on as safeHref, or as MediaUsageActivationAdvanceResponse, ot as atprotoLoginBody, p as relationListQuery, pa as trashedContentItemSchema, pi as mediaConfirmResponseSchema, pn as magicLinkSendBody, pr as MediaUsageCoverageStatus, pt as wpPluginAnalyzeBody, q as reorderWidgetsBody, qi as contentCreateBody, qn as createFieldBody, qr as mediaUsageProgressAdvanceResponseSchema, qt as termTranslationsSchema, r as entryLockConflictSchema, ra as contentScheduleBody, ri as mediaUsageWorkListQuery, rn as menuTranslationsSchema, rr as updateCollectionBody, rt as userSchema, s as entryMutationConflictSchema, sa as contentTermsResponseSchema, si as mediaUsageWorkRetryResponseSchema, sn as updateMenuBody, sr as MediaUsageActivationStatus, st as setupAdminBody, t as EntryLockAcquireBody, ta as contentRestoreResponseSchema, ti as mediaUsageSummarySchema, tn as menuListItemSchema, tr as schemaExportQuery, tt as userDetailSchema, u as referenceChildrenResponseSchema, ua as contentTrashQuery, ui as DEFAULT_MAX_UPLOAD_SIZE, un as inviteCompleteBody, ur as MediaUsageCollectionDeletionRetryRequest, ut as setupBody, v as bylineFieldCreateBody, va as cursorPaginationQuery, vi as mediaFolderListQuery, vn as passkeyRenameBody, vr as MediaUsageProgressAdvanceResponse, vt as wxrChunkState, w as bylineCreateBody, wa as offsetPaginationQuery, wi as mediaListQuery, wn as commentBulkResponseSchema, wr as MediaUsageWorkItem, wt as searchResultSchema, x as bylineFieldReorderBody, xa as localeCode, xi as mediaFolderSchema, xn as signupRequestBody, xr as MediaUsageSiteSettingDetail, xt as searchQuery, y as bylineFieldDefinitionSchema, ya as deleteResponseSchema, yi as mediaFolderListResponseSchema, yn as passkeyVerifyBody, yr as MediaUsageRepairRequest, yt as wxrImportConfig, z as notFoundSummaryResponseSchema, zi as mediaUploadMetadataForm, zn as collectionGetQuery, zr as mediaUsageCollectionDeletionRetryResponseSchema, zt as taxonomyListResponseSchema } from "../../entry-lock-CY7XpdSw.mjs";
+import { $ as allowedDomainCreateBody, $i as contentPublishBody, $n as orphanedTableListResponseSchema, $r as mediaUsageSiteSettingDetailSchema, $t as menuItemSchema, A as bylineUpdateBody, Ai as mediaReadResponseSchema, An as createReactionBody, Ar as mediaUsageActivationAdvanceResponseSchema, At as sectionSchema, B as notFoundSummarySchema, Bi as mediaUploadResponseSchema, Bn as collectionListResponseSchema, Br as mediaUsageCollectionDeletionStateSchema, Bt as taxonomyResponseSchema, C as bylineFieldUsageResponseSchema, Ca as mediaDeleteResponseSchema, Ci as mediaItemSchema, Cn as commentBulkBody, Cr as MediaUsageSummary, Ct as searchResponseSchema, D as bylineSummarySchema, Da as successEnvelope, Di as mediaListResponseSchema, Dn as commentSchema, Dr as MediaUsageWorkRetryRequest, Dt as siteSettingsSchema, E as bylineListResponseSchema, Ea as slugPattern, Ei as mediaListReadResponseSchema, En as commentListQuery, Er as MediaUsageWorkListResponse, Et as settingsUpdateBody, F as notFoundListQuery, Fi as mediaStreamUploadResponseSchema, Fn as blockTypeListResponseSchema, Fr as mediaUsageCollectionDeletionListQuery, Ft as createTermBody, G as createWidgetAreaBody, Gi as contentAuthorsResponseSchema, Gn as createBlockTypeBody, Gr as mediaUsageEntryDetailSchema, Gt as termResponseSchema, H as redirectSchema, Hi as mediaUploadUrlResponseSchema, Hn as collectionResponseSchema, Hr as mediaUsageCoverageStatusSchema, Ht as termListQuery, I as notFoundListResponseSchema, Ii as mediaUpdateBody, In as blockTypeResponseSchema, Ir as mediaUsageCollectionDeletionListResponseSchema, It as reorderTermsBody, J as updateWidgetBody, Ji as contentFieldFiltersSchema, Jn as fieldListResponseSchema, Jr as mediaUsageProgressSchema, Jt as termWithCountSchema, K as createWidgetBody, Ki as contentCompareResponseSchema, Kn as createCollectionBody, Kr as mediaUsageOccurrenceDetailSchema, Kt as termSchema, L as notFoundPruneBody, Li as mediaUploadDeduplicateForm, Ln as blockTypeSchema, Lr as mediaUsageCollectionDeletionPhaseSchema, Lt as taxonomyDefSchema, M as contentBylineInputSchema, Mi as mediaReplaceMetadataForm, Mn as publicCommentSchema, Mr as mediaUsageActivationStateSchema, Mt as updateSectionBody, N as createRedirectBody, Ni as mediaReplaceResponseSchema, Nn as activateBlockTypeVersionBody, Nr as mediaUsageActivationStatusSchema, Nt as bulkTagBody, O as bylineTranslationCreateBody, Oi as mediaProviderListQuery, On as commentStatusBody, Or as MediaUsageWorkRetryResponse, Ot as createSectionBody, P as notFoundEntrySchema, Pi as mediaResponseSchema, Pn as blockFieldDefinitionSchema, Pr as mediaUsageCollectionDeletionItemSchema, Pt as createTaxonomyDefBody, Q as widgetSchema, Qi as contentPreviewUrlBody, Qn as orphanRegisterBody, Qr as mediaUsageRepairStatusSchema, Qt as createMenuItemBody, R as notFoundSummaryQuery, Ri as mediaUploadEnsureUniqueFilenameForm, Rn as blockTypeVersionSchema, Rr as mediaUsageCollectionDeletionRetryBody, Rt as taxonomyDefTranslationsSchema, S as bylineFieldUpdateBody, Sa as localeFilterQuery, Si as mediaGetQuery, Sn as adminCommentListResponseSchema, Sr as MediaUsageSourceDetail, St as searchRebuildBody, T as bylineCreditSchema, Ta as roleLevel, Ti as mediaListReadItemSchema, Tn as commentCountsResponseSchema, Tr as MediaUsageWorkListQuery, Tt as searchSuggestQuery, U as redirectsListQuery, Ui as calendarQuery, Un as collectionSchema, Ur as mediaUsageDetailsQuery, Ut as termListResponseSchema, V as redirectListResponseSchema, Vi as mediaUploadUrlBody, Vn as collectionReorderBody, Vr as mediaUsageCoverageSchema, Vt as termGetResponseSchema, W as updateRedirectBody, Wi as contentAuthorSchema, Wn as collectionWithFieldsResponseSchema, Wr as mediaUsageDetailsResponseSchema, Wt as termReorderResponseSchema, X as widgetAreaWithWidgetsAndCountSchema, Xi as contentListQuery, Xn as fieldResponseSchema, Xr as mediaUsageRepairCollectionSummarySchema, Xt as updateTermBody, Y as widgetAreaSchema, Yi as contentItemSchema, Yn as fieldReorderBody, Yr as mediaUsageRepairBody, Yt as updateTaxonomyDefBody, Z as widgetAreaWithWidgetsSchema, Zi as contentListResponseSchema, Zn as fieldSchema, Zr as mediaUsageRepairResponseSchema, Zt as createMenuBody, _ as updateRelationBody, _a as countResponseSchema, _i as mediaFolderIdSchema, _n as passkeyRegisterVerifyBody, _r as MediaUsageProgress, _t as wxrChunkCursor, a as entryLockReleaseResponseSchema, aa as contentSeoSchema, ai as mediaUsageWorkRetryBody, an as reorderMenuItemsBody, ar as MediaUsageActivationAdvanceRequest, at as usersListQuery, b as bylineFieldListResponseSchema, ba as httpUrl, bi as mediaFolderResponseSchema, bn as signupCompleteBody, br as MediaUsageRepairResponse, bt as searchEnableBody, c as createRelationBody, ca as contentTranslationSchema, ci as mediaUsageWorkStateSchema, cn as updateMenuItemBody, cr as MediaUsageCollectionDeletionListQuery, ct as setupAdminVerifyBody, d as referenceParentsResponseSchema, da as contentUpdateBody, di as formatFileSize, dn as inviteCreateBody, dr as MediaUsageCollectionDeletionRetryResponse, dt as importProbeBody, ea as contentResponseSchema, ei as mediaUsageSourceDetailSchema, en as menuItemTypeEnum, er as orphanedTableSchema, et as allowedDomainUpdateBody, f as relationDefSchema, fa as revisionRestoreBody, fi as mediaConfirmBody, fn as inviteRegisterOptionsBody, fr as MediaUsageCoverage, ft as wpMediaImportBody, g as relationWithUsageSchema, ga as apiErrorSchema, gi as mediaFolderBody, gn as passkeyRegisterOptionsBody, gr as MediaUsageOccurrenceDetail, gt as wpRewriteUrlsBody, h as relationResponseSchema, ha as VALID_ROLE_LEVELS, hi as mediaExistingResponseSchema, hn as passkeyOptionsBody, hr as MediaUsageEntryDetail, ht as wpPrepareBody, i as entryLockHolderSchema, ia as contentSeoInput, ii as mediaUsageWorkListResponseSchema, in as menuWithItemsSchema, ir as updateFieldBody, it as userUpdateBody, j as bylinesListQuery, ji as mediaReplaceBody, jn as publicCommentListResponseSchema, jr as mediaUsageActivationConflictSchema, jt as sectionsListQuery, k as bylineTranslationsResponseSchema, ki as mediaReadItemSchema, kn as createCommentBody, kr as mediaUsageActivationAdvanceBody, kt as sectionListResponseSchema, l as entryRefSchema, la as contentTranslationsResponseSchema, li as CONTENT_TYPE_RE, ln as authMeActionBody, lr as MediaUsageCollectionDeletionListResponse, lt as setupAtprotoAdminBody, m as relationListResponseSchema, ma as trashedContentListResponseSchema, mi as mediaDirectUploadBody, mn as magicLinkVerifyBody, mr as MediaUsageDetailsResponse, mt as wpPluginExecuteBody, n as entryLockAcquireBody, na as contentRevisionConditionBody, ni as mediaUsageWorkItemSchema, nn as menuSchema, nr as updateBlockTypeBody, nt as userListResponseSchema, o as entryLockStatusSchema, oa as contentTermsBody, oi as mediaUsageWorkRetryConflictSchema, on as safeHref, or as MediaUsageActivationAdvanceResponse, ot as atprotoLoginBody, p as relationListQuery, pa as trashedContentItemSchema, pi as mediaConfirmResponseSchema, pn as magicLinkSendBody, pr as MediaUsageCoverageStatus, pt as wpPluginAnalyzeBody, q as reorderWidgetsBody, qi as contentCreateBody, qn as createFieldBody, qr as mediaUsageProgressAdvanceResponseSchema, qt as termTranslationsSchema, r as entryLockConflictSchema, ra as contentScheduleBody, ri as mediaUsageWorkListQuery, rn as menuTranslationsSchema, rr as updateCollectionBody, rt as userSchema, s as entryMutationConflictSchema, sa as contentTermsResponseSchema, si as mediaUsageWorkRetryResponseSchema, sn as updateMenuBody, sr as MediaUsageActivationStatus, st as setupAdminBody, t as EntryLockAcquireBody, ta as contentRestoreResponseSchema, ti as mediaUsageSummarySchema, tn as menuListItemSchema, tr as schemaExportQuery, tt as userDetailSchema, u as referenceChildrenResponseSchema, ua as contentTrashQuery, ui as DEFAULT_MAX_UPLOAD_SIZE, un as inviteCompleteBody, ur as MediaUsageCollectionDeletionRetryRequest, ut as setupBody, v as bylineFieldCreateBody, va as cursorPaginationQuery, vi as mediaFolderListQuery, vn as passkeyRenameBody, vr as MediaUsageProgressAdvanceResponse, vt as wxrChunkState, w as bylineCreateBody, wa as offsetPaginationQuery, wi as mediaListQuery, wn as commentBulkResponseSchema, wr as MediaUsageWorkItem, wt as searchResultSchema, x as bylineFieldReorderBody, xa as localeCode, xi as mediaFolderSchema, xn as signupRequestBody, xr as MediaUsageSiteSettingDetail, xt as searchQuery, y as bylineFieldDefinitionSchema, ya as deleteResponseSchema, yi as mediaFolderListResponseSchema, yn as passkeyVerifyBody, yr as MediaUsageRepairRequest, yt as wxrImportConfig, z as notFoundSummaryResponseSchema, zi as mediaUploadMetadataForm, zn as collectionGetQuery, zr as mediaUsageCollectionDeletionRetryResponseSchema, zt as taxonomyListResponseSchema } from "../../entry-lock-BulbgPBX.mjs";
 export { CONTENT_TYPE_RE, DEFAULT_MAX_UPLOAD_SIZE, EntryLockAcquireBody, MediaUsageActivationAdvanceRequest, MediaUsageActivationAdvanceResponse, MediaUsageActivationStatus, MediaUsageCollectionDeletionListQuery, MediaUsageCollectionDeletionListResponse, MediaUsageCollectionDeletionRetryRequest, MediaUsageCollectionDeletionRetryResponse, MediaUsageCoverage, MediaUsageCoverageStatus, MediaUsageDetailsResponse, MediaUsageEntryDetail, MediaUsageOccurrenceDetail, MediaUsageProgress, MediaUsageProgressAdvanceResponse, MediaUsageRepairRequest, MediaUsageRepairResponse, MediaUsageSiteSettingDetail, MediaUsageSourceDetail, MediaUsageSummary, MediaUsageWorkItem, MediaUsageWorkListQuery, MediaUsageWorkListResponse, MediaUsageWorkRetryRequest, MediaUsageWorkRetryResponse, VALID_ROLE_LEVELS, activateBlockTypeVersionBody, adminCommentListResponseSchema, allowedDomainCreateBody, allowedDomainUpdateBody, apiErrorSchema, atprotoLoginBody, authMeActionBody, blockFieldDefinitionSchema, blockTypeListResponseSchema, blockTypeResponseSchema, blockTypeSchema, blockTypeVersionSchema, bulkTagBody, bylineCreateBody, bylineCreditSchema, bylineFieldCreateBody, bylineFieldDefinitionSchema, bylineFieldListResponseSchema, bylineFieldReorderBody, bylineFieldUpdateBody, bylineFieldUsageResponseSchema, bylineListResponseSchema, bylineSummarySchema, bylineTranslationCreateBody, bylineTranslationsResponseSchema, bylineUpdateBody, bylinesListQuery, calendarQuery, collectionGetQuery, collectionListResponseSchema, collectionReorderBody, collectionResponseSchema, collectionSchema, collectionWithFieldsResponseSchema, commentBulkBody, commentBulkResponseSchema, commentCountsResponseSchema, commentListQuery, commentSchema, commentStatusBody, contentAuthorSchema, contentAuthorsResponseSchema, contentBylineInputSchema, contentCompareResponseSchema, contentCreateBody, contentFieldFiltersSchema, contentItemSchema, contentListQuery, contentListResponseSchema, contentPreviewUrlBody, contentPublishBody, contentResponseSchema, contentRestoreResponseSchema, contentRevisionConditionBody, contentScheduleBody, contentSeoInput, contentSeoSchema, contentTermsBody, contentTermsResponseSchema, contentTranslationSchema, contentTranslationsResponseSchema, contentTrashQuery, contentUpdateBody, countResponseSchema, createBlockTypeBody, createCollectionBody, createCommentBody, createFieldBody, createMenuBody, createMenuItemBody, createReactionBody, createRedirectBody, createRelationBody, createSectionBody, createTaxonomyDefBody, createTermBody, createWidgetAreaBody, createWidgetBody, cursorPaginationQuery, deleteResponseSchema, entryLockAcquireBody, entryLockConflictSchema, entryLockHolderSchema, entryLockReleaseResponseSchema, entryLockStatusSchema, entryMutationConflictSchema, entryRefSchema, fieldListResponseSchema, fieldReorderBody, fieldResponseSchema, fieldSchema, formatFileSize, httpUrl, importProbeBody, inviteCompleteBody, inviteCreateBody, inviteRegisterOptionsBody, localeCode, localeFilterQuery, magicLinkSendBody, magicLinkVerifyBody, mediaConfirmBody, mediaConfirmResponseSchema, mediaDeleteResponseSchema, mediaDirectUploadBody, mediaExistingResponseSchema, mediaFolderBody, mediaFolderIdSchema, mediaFolderListQuery, mediaFolderListResponseSchema, mediaFolderResponseSchema, mediaFolderSchema, mediaGetQuery, mediaItemSchema, mediaListQuery, mediaListReadItemSchema, mediaListReadResponseSchema, mediaListResponseSchema, mediaProviderListQuery, mediaReadItemSchema, mediaReadResponseSchema, mediaReplaceBody, mediaReplaceMetadataForm, mediaReplaceResponseSchema, mediaResponseSchema, mediaStreamUploadResponseSchema, mediaUpdateBody, mediaUploadDeduplicateForm, mediaUploadEnsureUniqueFilenameForm, mediaUploadMetadataForm, mediaUploadResponseSchema, mediaUploadUrlBody, mediaUploadUrlResponseSchema, mediaUsageActivationAdvanceBody, mediaUsageActivationAdvanceResponseSchema, mediaUsageActivationConflictSchema, mediaUsageActivationStateSchema, mediaUsageActivationStatusSchema, mediaUsageCollectionDeletionItemSchema, mediaUsageCollectionDeletionListQuery, mediaUsageCollectionDeletionListResponseSchema, mediaUsageCollectionDeletionPhaseSchema, mediaUsageCollectionDeletionRetryBody, mediaUsageCollectionDeletionRetryResponseSchema, mediaUsageCollectionDeletionStateSchema, mediaUsageCoverageSchema, mediaUsageCoverageStatusSchema, mediaUsageDetailsQuery, mediaUsageDetailsResponseSchema, mediaUsageEntryDetailSchema, mediaUsageOccurrenceDetailSchema, mediaUsageProgressAdvanceResponseSchema, mediaUsageProgressSchema, mediaUsageRepairBody, mediaUsageRepairCollectionSummarySchema, mediaUsageRepairResponseSchema, mediaUsageRepairStatusSchema, mediaUsageSiteSettingDetailSchema, mediaUsageSourceDetailSchema, mediaUsageSummarySchema, mediaUsageWorkItemSchema, mediaUsageWorkListQuery, mediaUsageWorkListResponseSchema, mediaUsageWorkRetryBody, mediaUsageWorkRetryConflictSchema, mediaUsageWorkRetryResponseSchema, mediaUsageWorkStateSchema, menuItemSchema, menuItemTypeEnum, menuListItemSchema, menuSchema, menuTranslationsSchema, menuWithItemsSchema, notFoundEntrySchema, notFoundListQuery, notFoundListResponseSchema, notFoundPruneBody, notFoundSummaryQuery, notFoundSummaryResponseSchema, notFoundSummarySchema, offsetPaginationQuery, orphanRegisterBody, orphanedTableListResponseSchema, orphanedTableSchema, passkeyOptionsBody, passkeyRegisterOptionsBody, passkeyRegisterVerifyBody, passkeyRenameBody, passkeyVerifyBody, publicCommentListResponseSchema, publicCommentSchema, redirectListResponseSchema, redirectSchema, redirectsListQuery, referenceChildrenResponseSchema, referenceParentsResponseSchema, relationDefSchema, relationListQuery, relationListResponseSchema, relationResponseSchema, relationWithUsageSchema, reorderMenuItemsBody, reorderTermsBody, reorderWidgetsBody, revisionRestoreBody, roleLevel, safeHref, schemaExportQuery, searchEnableBody, searchQuery, searchRebuildBody, searchResponseSchema, searchResultSchema, searchSuggestQuery, sectionListResponseSchema, sectionSchema, sectionsListQuery, settingsUpdateBody, setupAdminBody, setupAdminVerifyBody, setupAtprotoAdminBody, setupBody, signupCompleteBody, signupRequestBody, siteSettingsSchema, slugPattern, successEnvelope, taxonomyDefSchema, taxonomyDefTranslationsSchema, taxonomyListResponseSchema, taxonomyResponseSchema, termGetResponseSchema, termListQuery, termListResponseSchema, termReorderResponseSchema, termResponseSchema, termSchema, termTranslationsSchema, termWithCountSchema, trashedContentItemSchema, trashedContentListResponseSchema, updateBlockTypeBody, updateCollectionBody, updateFieldBody, updateMenuBody, updateMenuItemBody, updateRedirectBody, updateRelationBody, updateSectionBody, updateTaxonomyDefBody, updateTermBody, updateWidgetBody, userDetailSchema, userListResponseSchema, userSchema, userUpdateBody, usersListQuery, widgetAreaSchema, widgetAreaWithWidgetsAndCountSchema, widgetAreaWithWidgetsSchema, widgetSchema, wpMediaImportBody, wpPluginAnalyzeBody, wpPluginExecuteBody, wpPrepareBody, wpRewriteUrlsBody, wxrChunkCursor, wxrChunkState, wxrImportConfig };