next-blogpanel 1.0.0

package/dist/api/media.d.ts

@@ -0,0 +1,22 @@
+import * as next_server from 'next/server';
+import { A as ApiErrorResponse } from '../types-CgrBuig-.js';
+import 'zod';
+import 'mongodb';
+
+declare function GET(request: Request): Promise<next_server.NextResponse<ApiErrorResponse> | next_server.NextResponse<{
+    success: boolean;
+    data: unknown;
+    meta: Record<string, unknown> | undefined;
+}>>;
+declare function POST(request: Request): Promise<next_server.NextResponse<ApiErrorResponse> | next_server.NextResponse<{
+    success: boolean;
+    data: unknown;
+    meta: Record<string, unknown> | undefined;
+}>>;
+declare function DELETE(request: Request): Promise<next_server.NextResponse<ApiErrorResponse> | next_server.NextResponse<{
+    success: boolean;
+    data: unknown;
+    meta: Record<string, unknown> | undefined;
+}>>;
+
+export { DELETE, GET, POST };

package/dist/api/media.js

@@ -0,0 +1,176 @@
+import { processImage, ImageTooLargeError } from '../chunk-LIZOVA4W.js';
+import { getStorageProvider, rollbackUploads, StorageProviderNotRegisteredError, getStorageProviderByName } from '../chunk-JDP4DIHI.js';
+import { requireAuth, getSearchParams, parseIntParam, jsonSuccess, jsonError } from '../chunk-JBP3G4QJ.js';
+import { listMedia, getConfig, createMedia, ConfigNotInstalledError, getMediaById, deleteMedia } from '../chunk-6PZ772NQ.js';
+
+// src/api/media.ts
+async function GET(request) {
+  try {
+    const authError = await requireAuth(request);
+    if (authError) return authError;
+    const params = getSearchParams(request);
+    const result = await listMedia({
+      page: parseIntParam(params.page, 1),
+      limit: parseIntParam(params.limit, 20),
+      mimeType: params.mimeType
+    });
+    const page = parseIntParam(params.page, 1);
+    const limit = parseIntParam(params.limit, 20);
+    return jsonSuccess(result.media, {
+      page,
+      limit,
+      total: result.total,
+      totalPages: Math.ceil(result.total / limit)
+    });
+  } catch (error) {
+    console.error("[blogpanel] GET /media error:", error);
+    return jsonError("INTERNAL_ERROR", "Failed to fetch media", 500);
+  }
+}
+async function POST(request) {
+  try {
+    const authError = await requireAuth(request);
+    if (authError) return authError;
+    const formData = await request.formData();
+    const file = formData.get("file");
+    if (!file) {
+      return jsonError("MISSING_FILE", "File is required");
+    }
+    const config = getConfig();
+    const { maxUploadSize, maxImageSize } = config.editor;
+    if (file.size > maxUploadSize) {
+      return jsonError(
+        "FILE_TOO_LARGE",
+        `File must be under ${Math.round(maxUploadSize / 1024 / 1024)}MB`,
+        413
+      );
+    }
+    const allowedTypes = [
+      "image/jpeg",
+      "image/png",
+      "image/gif",
+      "image/webp",
+      "image/svg+xml",
+      "image/avif"
+    ];
+    if (!allowedTypes.includes(file.type)) {
+      return jsonError("INVALID_TYPE", `Allowed types: ${allowedTypes.join(", ")}`);
+    }
+    if (file.type === "image/svg+xml" && file.size > maxImageSize) {
+      return jsonError(
+        "FILE_TOO_LARGE",
+        `SVG must be under ${Math.round(maxImageSize / 1024 / 1024)}MB`,
+        413
+      );
+    }
+    const buffer = Buffer.from(await file.arrayBuffer());
+    const storage = getStorageProvider();
+    const isImage = file.type.startsWith("image/") && file.type !== "image/svg+xml";
+    let uploadResult;
+    let width;
+    let height;
+    let uploadedKeys;
+    if (isImage) {
+      try {
+        const processed = await processImage(buffer, file.name, storage);
+        uploadResult = processed.original;
+        width = processed.width;
+        height = processed.height;
+        uploadedKeys = processed.uploadedKeys;
+      } catch (error) {
+        if (error instanceof ImageTooLargeError) {
+          return jsonError(
+            "IMAGE_TOO_LARGE",
+            `Could not compress this image below ${Math.round(error.limitBytes / 1024 / 1024)}MB (best achieved ${Math.round(error.achievedBytes / 1024)}KB). Try a smaller image.`,
+            422
+          );
+        }
+        throw error;
+      }
+    } else {
+      uploadResult = await storage.upload(buffer, file.name, file.type);
+      uploadedKeys = [uploadResult.key];
+    }
+    let media;
+    try {
+      media = await createMedia({
+        filename: uploadResult.key.split("/").pop() || file.name,
+        originalName: file.name,
+        mimeType: uploadResult.contentType,
+        size: uploadResult.size,
+        width,
+        height,
+        storageKey: uploadResult.key,
+        provider: storage.name,
+        url: uploadResult.url,
+        alt: formData.get("alt") || "",
+        caption: formData.get("caption") || "",
+        createdAt: /* @__PURE__ */ new Date()
+      });
+    } catch (error) {
+      await rollbackUploads(storage, uploadedKeys, "createMedia failed after upload");
+      throw error;
+    }
+    return jsonSuccess(media, void 0, 201);
+  } catch (error) {
+    console.error("[blogpanel] POST /media error:", error);
+    if (error instanceof ConfigNotInstalledError) {
+      return jsonError("CONFIG_NOT_INSTALLED", error.message, 500);
+    }
+    if (error instanceof StorageProviderNotRegisteredError) {
+      return jsonError("STORAGE_PROVIDER_NOT_REGISTERED", error.message, 500);
+    }
+    return jsonError("INTERNAL_ERROR", "Failed to upload media", 500);
+  }
+}
+async function DELETE(request) {
+  try {
+    const authError = await requireAuth(request);
+    if (authError) return authError;
+    const params = getSearchParams(request);
+    const id = params.id;
+    if (!id) return jsonError("MISSING_ID", "Media ID is required");
+    const existing = await getMediaById(id);
+    if (!existing) return jsonError("NOT_FOUND", "Media not found", 404);
+    let storage;
+    try {
+      storage = existing.provider ? getStorageProviderByName(existing.provider) : getStorageProvider();
+    } catch (error) {
+      if (error instanceof StorageProviderNotRegisteredError) {
+        const source = existing.provider ? `media ${id} records provider='${error.providerName}'` : `media ${id} predates the provider field, so the backend came from BLOGPANEL_STORAGE, which names '${error.providerName}'`;
+        console.error(
+          `[blogpanel] DELETE /media refused: ${source}, which is not registered in this runtime (key=${existing.storageKey}). The database record was left intact.`,
+          error
+        );
+        return jsonError("STORAGE_PROVIDER_NOT_REGISTERED", error.message, 500);
+      }
+      throw error;
+    }
+    const media = await deleteMedia(id);
+    if (!media) return jsonError("NOT_FOUND", "Media not found", 404);
+    let storageDeleted = true;
+    await storage.delete(media.storageKey).catch((err) => {
+      storageDeleted = false;
+      console.error(
+        `[blogpanel] Failed to delete stored object (provider=${storage.name}, key=${media.storageKey}):`,
+        err
+      );
+    });
+    return jsonSuccess({
+      deleted: true,
+      storageDeleted,
+      storageKey: media.storageKey,
+      provider: storage.name,
+      ...storageDeleted ? {} : {
+        warning: `The database record was removed, but the stored file could not be deleted from ${storage.name} and may require manual cleanup.`
+      }
+    });
+  } catch (error) {
+    console.error("[blogpanel] DELETE /media error:", error);
+    return jsonError("INTERNAL_ERROR", "Failed to delete media", 500);
+  }
+}
+
+export { DELETE, GET, POST };
+//# sourceMappingURL=media.js.map
+//# sourceMappingURL=media.js.map

package/dist/api/media.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/api/media.ts"],"names":[],"mappings":";;;;;;AAkBA,eAAsB,IAAI,OAAA,EAAkB;AAC1C,EAAA,IAAI;AACF,IAAA,MAAM,SAAA,GAAY,MAAM,WAAA,CAAY,OAAO,CAAA;AAC3C,IAAA,IAAI,WAAW,OAAO,SAAA;AAEtB,IAAA,MAAM,MAAA,GAAS,gBAAgB,OAAO,CAAA;AACtC,IAAA,MAAM,MAAA,GAAS,MAAM,SAAA,CAAU;AAAA,MAC7B,IAAA,EAAM,aAAA,CAAc,MAAA,CAAO,IAAA,EAAM,CAAC,CAAA;AAAA,MAClC,KAAA,EAAO,aAAA,CAAc,MAAA,CAAO,KAAA,EAAO,EAAE,CAAA;AAAA,MACrC,UAAU,MAAA,CAAO;AAAA,KAClB,CAAA;AAED,IAAA,MAAM,IAAA,GAAO,aAAA,CAAc,MAAA,CAAO,IAAA,EAAM,CAAC,CAAA;AACzC,IAAA,MAAM,KAAA,GAAQ,aAAA,CAAc,MAAA,CAAO,KAAA,EAAO,EAAE,CAAA;AAE5C,IAAA,OAAO,WAAA,CAAY,OAAO,KAAA,EAAO;AAAA,MAC/B,IAAA;AAAA,MACA,KAAA;AAAA,MACA,OAAO,MAAA,CAAO,KAAA;AAAA,MACd,UAAA,EAAY,IAAA,CAAK,IAAA,CAAK,MAAA,CAAO,QAAQ,KAAK;AAAA,KAC3C,CAAA;AAAA,EACH,SAAS,KAAA,EAAO;AACd,IAAA,OAAA,CAAQ,KAAA,CAAM,iCAAiC,KAAK,CAAA;AACpD,IAAA,OAAO,SAAA,CAAU,gBAAA,EAAkB,uBAAA,EAAyB,GAAG,CAAA;AAAA,EACjE;AACF;AAEA,eAAsB,KAAK,OAAA,EAAkB;AAC3C,EAAA,IAAI;AACF,IAAA,MAAM,SAAA,GAAY,MAAM,WAAA,CAAY,OAAO,CAAA;AAC3C,IAAA,IAAI,WAAW,OAAO,SAAA;AAEtB,IAAA,MAAM,QAAA,GAAW,MAAM,OAAA,CAAQ,QAAA,EAAS;AACxC,IAAA,MAAM,IAAA,GAAO,QAAA,CAAS,GAAA,CAAI,MAAM,CAAA;AAEhC,IAAA,IAAI,CAAC,IAAA,EAAM;AACT,MAAA,OAAO,SAAA,CAAU,gBAAgB,kBAAkB,CAAA;AAAA,IACrD;AAEA,IAAA,MAAM,SAAS,SAAA,EAAU;AACzB,IAAA,MAAM,EAAE,aAAA,EAAe,YAAA,EAAa,GAAI,MAAA,CAAO,MAAA;AAE/C,IAAA,IAAI,IAAA,CAAK,OAAO,aAAA,EAAe;AAC7B,MAAA,OAAO,SAAA;AAAA,QACL,gBAAA;AAAA,QACA,sBAAsB,IAAA,CAAK,KAAA,CAAM,aAAA,GAAgB,IAAA,GAAO,IAAI,CAAC,CAAA,EAAA,CAAA;AAAA,QAC7D;AAAA,OACF;AAAA,IACF;AAEA,IAAA,MAAM,YAAA,GAAe;AAAA,MACnB,YAAA;AAAA,MACA,WAAA;AAAA,MACA,WAAA;AAAA,MACA,YAAA;AAAA,MACA,eAAA;AAAA,MACA;AAAA,KACF;AACA,IAAA,IAAI,CAAC,YAAA,CAAa,QAAA,CAAS,IAAA,CAAK,IAAI,CAAA,EAAG;AACrC,MAAA,OAAO,UAAU,cAAA,EAAgB,CAAA,eAAA,EAAkB,aAAa,IAAA,CAAK,IAAI,CAAC,CAAA,CAAE,CAAA;AAAA,IAC9E;AAGA,IAAA,IAAI,IAAA,CAAK,IAAA,KAAS,eAAA,IAAmB,IAAA,CAAK,OAAO,YAAA,EAAc;AAC7D,MAAA,OAAO,SAAA;AAAA,QACL,gBAAA;AAAA,QACA,qBAAqB,IAAA,CAAK,KAAA,CAAM,YAAA,GAAe,IAAA,GAAO,IAAI,CAAC,CAAA,EAAA,CAAA;AAAA,QAC3D;AAAA,OACF;AAAA,IACF;AAEA,IAAA,MAAM,SAAS,MAAA,CAAO,IAAA,CAAK,MAAM,IAAA,CAAK,aAAa,CAAA;AACnD,IAAA,MAAM,UAAU,kBAAA,EAAmB;AAEnC,IAAA,MAAM,UAAU,IAAA,CAAK,IAAA,CAAK,WAAW,QAAQ,CAAA,IAAK,KAAK,IAAA,KAAS,eAAA;AAChE,IAAA,IAAI,YAAA;AACJ,IAAA,IAAI,KAAA;AACJ,IAAA,IAAI,MAAA;AACJ,IAAA,IAAI,YAAA;AAEJ,IAAA,IAAI,OAAA,EAAS;AACX,MAAA,IAAI;AACF,QAAA,MAAM,YAAY,MAAM,YAAA,CAAa,MAAA,EAAQ,IAAA,CAAK,MAAM,OAAO,CAAA;AAC/D,QAAA,YAAA,GAAe,SAAA,CAAU,QAAA;AACzB,QAAA,KAAA,GAAQ,SAAA,CAAU,KAAA;AAClB,QAAA,MAAA,GAAS,SAAA,CAAU,MAAA;AACnB,QAAA,YAAA,GAAe,SAAA,CAAU,YAAA;AAAA,MAC3B,SAAS,KAAA,EAAO;AACd,QAAA,IAAI,iBAAiB,kBAAA,EAAoB;AACvC,UAAA,OAAO,SAAA;AAAA,YACL,iBAAA;AAAA,YACA,CAAA,oCAAA,EAAuC,IAAA,CAAK,KAAA,CAAM,KAAA,CAAM,aAAa,IAAA,GAAO,IAAI,CAAC,CAAA,kBAAA,EAC7D,IAAA,CAAK,KAAA,CAAM,KAAA,CAAM,aAAA,GAAgB,IAAI,CAAC,CAAA,yBAAA,CAAA;AAAA,YAC1D;AAAA,WACF;AAAA,QACF;AACA,QAAA,MAAM,KAAA;AAAA,MACR;AAAA,IACF,CAAA,MAAO;AACL,MAAA,YAAA,GAAe,MAAM,OAAA,CAAQ,MAAA,CAAO,QAAQ,IAAA,CAAK,IAAA,EAAM,KAAK,IAAI,CAAA;AAChE,MAAA,YAAA,GAAe,CAAC,aAAa,GAAG,CAAA;AAAA,IAClC;AAEA,IAAA,IAAI,KAAA;AACJ,IAAA,IAAI;AACF,MAAA,KAAA,GAAQ,MAAM,WAAA,CAAY;AAAA,QACxB,QAAA,EAAU,aAAa,GAAA,CAAI,KAAA,CAAM,GAAG,CAAA,CAAE,GAAA,MAAS,IAAA,CAAK,IAAA;AAAA,QACpD,cAAc,IAAA,CAAK,IAAA;AAAA,QACnB,UAAU,YAAA,CAAa,WAAA;AAAA,QACvB,MAAM,YAAA,CAAa,IAAA;AAAA,QACnB,KAAA;AAAA,QACA,MAAA;AAAA,QACA,YAAY,YAAA,CAAa,GAAA;AAAA,QACzB,UAAU,OAAA,CAAQ,IAAA;AAAA,QAClB,KAAK,YAAA,CAAa,GAAA;AAAA,QAClB,GAAA,EAAM,QAAA,CAAS,GAAA,CAAI,KAAK,CAAA,IAAgB,EAAA;AAAA,QACxC,OAAA,EAAU,QAAA,CAAS,GAAA,CAAI,SAAS,CAAA,IAAgB,EAAA;AAAA,QAChD,SAAA,sBAAe,IAAA;AAAK,OACrB,CAAA;AAAA,IACH,SAAS,KAAA,EAAO;AAId,MAAA,MAAM,eAAA,CAAgB,OAAA,EAAS,YAAA,EAAc,iCAAiC,CAAA;AAC9E,MAAA,MAAM,KAAA;AAAA,IACR;AAEA,IAAA,OAAO,WAAA,CAAY,KAAA,EAAO,KAAA,CAAA,EAAW,GAAG,CAAA;AAAA,EAC1C,SAAS,KAAA,EAAO;AACd,IAAA,OAAA,CAAQ,KAAA,CAAM,kCAAkC,KAAK,CAAA;AAQrD,IAAA,IAAI,iBAAiB,uBAAA,EAAyB;AAC5C,MAAA,OAAO,SAAA,CAAU,sBAAA,EAAwB,KAAA,CAAM,OAAA,EAAS,GAAG,CAAA;AAAA,IAC7D;AAMA,IAAA,IAAI,iBAAiB,iCAAA,EAAmC;AACtD,MAAA,OAAO,SAAA,CAAU,iCAAA,EAAmC,KAAA,CAAM,OAAA,EAAS,GAAG,CAAA;AAAA,IACxE;AAEA,IAAA,OAAO,SAAA,CAAU,gBAAA,EAAkB,wBAAA,EAA0B,GAAG,CAAA;AAAA,EAClE;AACF;AAEA,eAAsB,OAAO,OAAA,EAAkB;AAC7C,EAAA,IAAI;AACF,IAAA,MAAM,SAAA,GAAY,MAAM,WAAA,CAAY,OAAO,CAAA;AAC3C,IAAA,IAAI,WAAW,OAAO,SAAA;AAEtB,IAAA,MAAM,MAAA,GAAS,gBAAgB,OAAO,CAAA;AACtC,IAAA,MAAM,KAAK,MAAA,CAAO,EAAA;AAClB,IAAA,IAAI,CAAC,EAAA,EAAI,OAAO,SAAA,CAAU,cAAc,sBAAsB,CAAA;AAmB9D,IAAA,MAAM,QAAA,GAAW,MAAM,YAAA,CAAa,EAAE,CAAA;AACtC,IAAA,IAAI,CAAC,QAAA,EAAU,OAAO,SAAA,CAAU,WAAA,EAAa,mBAAmB,GAAG,CAAA;AAEnE,IAAA,IAAI,OAAA;AACJ,IAAA,IAAI;AACF,MAAA,OAAA,GAAU,SAAS,QAAA,GACf,wBAAA,CAAyB,QAAA,CAAS,QAAQ,IAC1C,kBAAA,EAAmB;AAAA,IACzB,SAAS,KAAA,EAAO;AACd,MAAA,IAAI,iBAAiB,iCAAA,EAAmC;AAMtD,QAAA,MAAM,MAAA,GAAS,QAAA,CAAS,QAAA,GACpB,CAAA,MAAA,EAAS,EAAE,CAAA,mBAAA,EAAsB,KAAA,CAAM,YAAY,CAAA,CAAA,CAAA,GACnD,CAAA,MAAA,EAAS,EAAE,CAAA,uFAAA,EACwB,MAAM,YAAY,CAAA,CAAA,CAAA;AAEzD,QAAA,OAAA,CAAQ,KAAA;AAAA,UACN,CAAA,mCAAA,EAAsC,MAAM,CAAA,+CAAA,EACrB,QAAA,CAAS,UAAU,CAAA,uCAAA,CAAA;AAAA,UAC1C;AAAA,SACF;AACA,QAAA,OAAO,SAAA,CAAU,iCAAA,EAAmC,KAAA,CAAM,OAAA,EAAS,GAAG,CAAA;AAAA,MACxE;AACA,MAAA,MAAM,KAAA;AAAA,IACR;AAEA,IAAA,MAAM,KAAA,GAAQ,MAAM,WAAA,CAAY,EAAE,CAAA;AAClC,IAAA,IAAI,CAAC,KAAA,EAAO,OAAO,SAAA,CAAU,WAAA,EAAa,mBAAmB,GAAG,CAAA;AAEhE,IAAA,IAAI,cAAA,GAAiB,IAAA;AACrB,IAAA,MAAM,QAAQ,MAAA,CAAO,KAAA,CAAM,UAAU,CAAA,CAAE,KAAA,CAAM,CAAC,GAAA,KAAQ;AACpD,MAAA,cAAA,GAAiB,KAAA;AAQjB,MAAA,OAAA,CAAQ,KAAA;AAAA,QACN,CAAA,qDAAA,EAAwD,OAAA,CAAQ,IAAI,CAAA,MAAA,EAC3D,MAAM,UAAU,CAAA,EAAA,CAAA;AAAA,QACzB;AAAA,OACF;AAAA,IACF,CAAC,CAAA;AAWD,IAAA,OAAO,WAAA,CAAY;AAAA,MACjB,OAAA,EAAS,IAAA;AAAA,MACT,cAAA;AAAA,MACA,YAAY,KAAA,CAAM,UAAA;AAAA,MAClB,UAAU,OAAA,CAAQ,IAAA;AAAA,MAClB,GAAI,cAAA,GACA,EAAC,GACD;AAAA,QACE,OAAA,EACE,CAAA,+EAAA,EACQ,OAAA,CAAQ,IAAI,CAAA,gCAAA;AAAA;AACxB,KACL,CAAA;AAAA,EACH,SAAS,KAAA,EAAO;AACd,IAAA,OAAA,CAAQ,KAAA,CAAM,oCAAoC,KAAK,CAAA;AACvD,IAAA,OAAO,SAAA,CAAU,gBAAA,EAAkB,wBAAA,EAA0B,GAAG,CAAA;AAAA,EAClE;AACF","file":"media.js","sourcesContent":["import { createMedia, deleteMedia, getMediaById, listMedia } from '../lib/db';\nimport {\n  getStorageProvider,\n  getStorageProviderByName,\n  rollbackUploads,\n  StorageProviderNotRegisteredError,\n} from '../lib/storage';\nimport type { StorageProvider } from '../lib/storage';\nimport { processImage, ImageTooLargeError } from '../lib/image';\nimport { getConfig, ConfigNotInstalledError } from '../lib/config';\nimport {\n  jsonSuccess,\n  jsonError,\n  requireAuth,\n  getSearchParams,\n  parseIntParam,\n} from './middleware';\n\nexport async function GET(request: Request) {\n  try {\n    const authError = await requireAuth(request);\n    if (authError) return authError;\n\n    const params = getSearchParams(request);\n    const result = await listMedia({\n      page: parseIntParam(params.page, 1),\n      limit: parseIntParam(params.limit, 20),\n      mimeType: params.mimeType,\n    });\n\n    const page = parseIntParam(params.page, 1);\n    const limit = parseIntParam(params.limit, 20);\n\n    return jsonSuccess(result.media, {\n      page,\n      limit,\n      total: result.total,\n      totalPages: Math.ceil(result.total / limit),\n    });\n  } catch (error) {\n    console.error('[blogpanel] GET /media error:', error);\n    return jsonError('INTERNAL_ERROR', 'Failed to fetch media', 500);\n  }\n}\n\nexport async function POST(request: Request) {\n  try {\n    const authError = await requireAuth(request);\n    if (authError) return authError;\n\n    const formData = await request.formData();\n    const file = formData.get('file') as File | null;\n\n    if (!file) {\n      return jsonError('MISSING_FILE', 'File is required');\n    }\n\n    const config = getConfig();\n    const { maxUploadSize, maxImageSize } = config.editor;\n\n    if (file.size > maxUploadSize) {\n      return jsonError(\n        'FILE_TOO_LARGE',\n        `File must be under ${Math.round(maxUploadSize / 1024 / 1024)}MB`,\n        413\n      );\n    }\n\n    const allowedTypes = [\n      'image/jpeg',\n      'image/png',\n      'image/gif',\n      'image/webp',\n      'image/svg+xml',\n      'image/avif',\n    ];\n    if (!allowedTypes.includes(file.type)) {\n      return jsonError('INVALID_TYPE', `Allowed types: ${allowedTypes.join(', ')}`);\n    }\n\n    // SVG bypasses the compression ladder — sharp cannot usefully shrink it.\n    if (file.type === 'image/svg+xml' && file.size > maxImageSize) {\n      return jsonError(\n        'FILE_TOO_LARGE',\n        `SVG must be under ${Math.round(maxImageSize / 1024 / 1024)}MB`,\n        413\n      );\n    }\n\n    const buffer = Buffer.from(await file.arrayBuffer());\n    const storage = getStorageProvider();\n\n    const isImage = file.type.startsWith('image/') && file.type !== 'image/svg+xml';\n    let uploadResult;\n    let width: number | undefined;\n    let height: number | undefined;\n    let uploadedKeys: string[];\n\n    if (isImage) {\n      try {\n        const processed = await processImage(buffer, file.name, storage);\n        uploadResult = processed.original;\n        width = processed.width;\n        height = processed.height;\n        uploadedKeys = processed.uploadedKeys;\n      } catch (error) {\n        if (error instanceof ImageTooLargeError) {\n          return jsonError(\n            'IMAGE_TOO_LARGE',\n            `Could not compress this image below ${Math.round(error.limitBytes / 1024 / 1024)}MB ` +\n              `(best achieved ${Math.round(error.achievedBytes / 1024)}KB). Try a smaller image.`,\n            422\n          );\n        }\n        throw error;\n      }\n    } else {\n      uploadResult = await storage.upload(buffer, file.name, file.type);\n      uploadedKeys = [uploadResult.key];\n    }\n\n    let media;\n    try {\n      media = await createMedia({\n        filename: uploadResult.key.split('/').pop() || file.name,\n        originalName: file.name,\n        mimeType: uploadResult.contentType,\n        size: uploadResult.size,\n        width,\n        height,\n        storageKey: uploadResult.key,\n        provider: storage.name,\n        url: uploadResult.url,\n        alt: (formData.get('alt') as string) || '',\n        caption: (formData.get('caption') as string) || '',\n        createdAt: new Date(),\n      });\n    } catch (error) {\n      // Every object above already landed in storage; without this, a failed\n      // DB write leaves them orphaned exactly like an unhandled derivative\n      // failure would — nothing will ever reference them again.\n      await rollbackUploads(storage, uploadedKeys, 'createMedia failed after upload');\n      throw error;\n    }\n\n    return jsonSuccess(media, undefined, 201);\n  } catch (error) {\n    console.error('[blogpanel] POST /media error:', error);\n\n    // A missing runtime config is an installation mistake with an exact fix,\n    // and this endpoint is authenticated, so pass the message through instead\n    // of flattening it to \"Failed to upload media\" — otherwise the developer\n    // has to go digging in the server log to find out what to do. Matched by\n    // class, not by a message-prefix check: a prefix check silently stops\n    // working the moment the message wording changes for any reason.\n    if (error instanceof ConfigNotInstalledError) {\n      return jsonError('CONFIG_NOT_INSTALLED', error.message, 500);\n    }\n\n    // Same treatment, same reasoning: BLOGPANEL_STORAGE naming a provider this\n    // runtime never registered is an installation mistake with an exact fix,\n    // and nothing was written, so say what to do rather than \"Failed to upload\n    // media\".\n    if (error instanceof StorageProviderNotRegisteredError) {\n      return jsonError('STORAGE_PROVIDER_NOT_REGISTERED', error.message, 500);\n    }\n\n    return jsonError('INTERNAL_ERROR', 'Failed to upload media', 500);\n  }\n}\n\nexport async function DELETE(request: Request) {\n  try {\n    const authError = await requireAuth(request);\n    if (authError) return authError;\n\n    const params = getSearchParams(request);\n    const id = params.id;\n    if (!id) return jsonError('MISSING_ID', 'Media ID is required');\n\n    // Resolve the backend BEFORE the row is removed.\n    //\n    // Delete from whichever backend actually holds it — not whichever backend\n    // is currently configured. Those can diverge after a storage migration\n    // (e.g. GridFS -> R2), and generateKey() produces identically-shaped keys\n    // on every provider, so asking the wrong one to delete a key \"succeeds\"\n    // by silently finding nothing. `provider` is absent only on documents\n    // that predate the field and somehow escaped migration.\n    //\n    // Resolution can now fail — `provider` is a free-form string naming a\n    // registered custom backend, and this process may not have registered it\n    // (a provider removed from the setup module, a rename, a typo). Doing the\n    // lookup first means that failure is fully recoverable: the row is still\n    // there, the request 500s with an actionable message, and retrying after\n    // registering the provider deletes the object properly. Resolving after\n    // the delete would destroy the only record of which backend held the\n    // object and what its key was.\n    const existing = await getMediaById(id);\n    if (!existing) return jsonError('NOT_FOUND', 'Media not found', 404);\n\n    let storage: StorageProvider;\n    try {\n      storage = existing.provider\n        ? getStorageProviderByName(existing.provider)\n        : getStorageProvider();\n    } catch (error) {\n      if (error instanceof StorageProviderNotRegisteredError) {\n        // Attribute the unresolvable name to where it actually came from. On\n        // the legacy path the document has no `provider`, so the throw\n        // originates in getStorageProvider() reading BLOGPANEL_STORAGE — not\n        // from the document — and saying \"the document records it\" would send\n        // an operator looking for a field that is not there.\n        const source = existing.provider\n          ? `media ${id} records provider='${error.providerName}'`\n          : `media ${id} predates the provider field, so the backend came from ` +\n            `BLOGPANEL_STORAGE, which names '${error.providerName}'`;\n\n        console.error(\n          `[blogpanel] DELETE /media refused: ${source}, which is not registered in ` +\n            `this runtime (key=${existing.storageKey}). The database record was left intact.`,\n          error\n        );\n        return jsonError('STORAGE_PROVIDER_NOT_REGISTERED', error.message, 500);\n      }\n      throw error;\n    }\n\n    const media = await deleteMedia(id);\n    if (!media) return jsonError('NOT_FOUND', 'Media not found', 404);\n\n    let storageDeleted = true;\n    await storage.delete(media.storageKey).catch((err) => {\n      storageDeleted = false;\n      // The DB row is already gone by this point, so a failure here leaves\n      // the object permanently unreachable through the UI — log enough detail\n      // for an operator to clean it up by hand rather than letting this\n      // disappear into a generic message. Uses storage.name (the provider\n      // actually resolved and attempted), not media.provider directly — when\n      // `provider` is absent and the fallback itself fails, media.provider\n      // would print as \"unknown\" even though a concrete provider was tried.\n      console.error(\n        `[blogpanel] Failed to delete stored object (provider=${storage.name}, ` +\n          `key=${media.storageKey}):`,\n        err\n      );\n    });\n\n    // The DB half of this operation genuinely succeeded — the row is gone,\n    // the item will never appear in the media library again — so this stays\n    // HTTP 200 rather than a false 500 even when storageDeleted is false.\n    // But collapsing that into a flat `{ deleted: true }` would tell the\n    // caller the object was fully removed when it is, in fact, still sitting\n    // in storage: unreferenced by any row, invisible to every UI path that\n    // could otherwise clean it up, and still counted against quota. The\n    // response has to be able to say that out loud rather than let a caller\n    // assume full success from a 200.\n    return jsonSuccess({\n      deleted: true,\n      storageDeleted,\n      storageKey: media.storageKey,\n      provider: storage.name,\n      ...(storageDeleted\n        ? {}\n        : {\n            warning:\n              `The database record was removed, but the stored file could not be deleted ` +\n              `from ${storage.name} and may require manual cleanup.`,\n          }),\n    });\n  } catch (error) {\n    console.error('[blogpanel] DELETE /media error:', error);\n    return jsonError('INTERNAL_ERROR', 'Failed to delete media', 500);\n  }\n}\n"]}

package/dist/api/posts.cjs

@@ -0,0 +1,103 @@
+'use strict';
+
+var chunkV7QPRX4A_cjs = require('../chunk-V7QPRX4A.cjs');
+var chunkDWNMHQ4I_cjs = require('../chunk-DWNMHQ4I.cjs');
+var chunkXLYTATRQ_cjs = require('../chunk-XLYTATRQ.cjs');
+
+// src/api/posts.ts
+async function GET(request) {
+  try {
+    const params = chunkDWNMHQ4I_cjs.getSearchParams(request);
+    if (params.slug) {
+      const post = await chunkXLYTATRQ_cjs.getPostBySlug(params.slug);
+      if (!post) return chunkDWNMHQ4I_cjs.jsonError("NOT_FOUND", "Post not found", 404);
+      return chunkDWNMHQ4I_cjs.jsonSuccess(post);
+    }
+    if (params.id) {
+      const post = await chunkXLYTATRQ_cjs.getPostById(params.id);
+      if (!post) return chunkDWNMHQ4I_cjs.jsonError("NOT_FOUND", "Post not found", 404);
+      return chunkDWNMHQ4I_cjs.jsonSuccess(post);
+    }
+    const result = await chunkXLYTATRQ_cjs.listPosts({
+      page: chunkDWNMHQ4I_cjs.parseIntParam(params.page, 1),
+      limit: chunkDWNMHQ4I_cjs.parseIntParam(params.limit, 10),
+      category: params.category,
+      tag: params.tag,
+      status: params.status,
+      search: params.q || params.search,
+      sortBy: params.sortBy || "publishedAt",
+      sortOrder: params.sortOrder || "desc"
+    });
+    const page = chunkDWNMHQ4I_cjs.parseIntParam(params.page, 1);
+    const limit = chunkDWNMHQ4I_cjs.parseIntParam(params.limit, 10);
+    return chunkDWNMHQ4I_cjs.jsonSuccess(result.posts, {
+      page,
+      limit,
+      total: result.total,
+      totalPages: Math.ceil(result.total / limit)
+    });
+  } catch (error) {
+    console.error("[blogpanel] GET /posts error:", error);
+    return chunkDWNMHQ4I_cjs.jsonError("INTERNAL_ERROR", "Failed to fetch posts", 500);
+  }
+}
+async function POST(request) {
+  try {
+    const authError = await chunkDWNMHQ4I_cjs.requireAuth(request);
+    if (authError) return authError;
+    const body = await request.json();
+    const parsed = chunkV7QPRX4A_cjs.CreatePostSchema.safeParse(body);
+    if (!parsed.success) {
+      const errors = parsed.error.issues.map((i) => `${i.path.join(".")}: ${i.message}`);
+      return chunkDWNMHQ4I_cjs.jsonError("VALIDATION_ERROR", errors.join("; "));
+    }
+    const post = await chunkXLYTATRQ_cjs.createPost(parsed.data);
+    return chunkDWNMHQ4I_cjs.jsonSuccess(post, void 0, 201);
+  } catch (error) {
+    console.error("[blogpanel] POST /posts error:", error);
+    return chunkDWNMHQ4I_cjs.jsonError("INTERNAL_ERROR", "Failed to create post", 500);
+  }
+}
+async function PUT(request) {
+  try {
+    const authError = await chunkDWNMHQ4I_cjs.requireAuth(request);
+    if (authError) return authError;
+    const params = chunkDWNMHQ4I_cjs.getSearchParams(request);
+    const id = params.id;
+    if (!id) return chunkDWNMHQ4I_cjs.jsonError("MISSING_ID", "Post ID is required");
+    const body = await request.json();
+    const parsed = chunkV7QPRX4A_cjs.UpdatePostSchema.safeParse(body);
+    if (!parsed.success) {
+      const errors = parsed.error.issues.map((i) => `${i.path.join(".")}: ${i.message}`);
+      return chunkDWNMHQ4I_cjs.jsonError("VALIDATION_ERROR", errors.join("; "));
+    }
+    const post = await chunkXLYTATRQ_cjs.updatePost(id, parsed.data);
+    if (!post) return chunkDWNMHQ4I_cjs.jsonError("NOT_FOUND", "Post not found", 404);
+    return chunkDWNMHQ4I_cjs.jsonSuccess(post);
+  } catch (error) {
+    console.error("[blogpanel] PUT /posts error:", error);
+    return chunkDWNMHQ4I_cjs.jsonError("INTERNAL_ERROR", "Failed to update post", 500);
+  }
+}
+async function DELETE(request) {
+  try {
+    const authError = await chunkDWNMHQ4I_cjs.requireAuth(request);
+    if (authError) return authError;
+    const params = chunkDWNMHQ4I_cjs.getSearchParams(request);
+    const id = params.id;
+    if (!id) return chunkDWNMHQ4I_cjs.jsonError("MISSING_ID", "Post ID is required");
+    const deleted = await chunkXLYTATRQ_cjs.deletePost(id);
+    if (!deleted) return chunkDWNMHQ4I_cjs.jsonError("NOT_FOUND", "Post not found", 404);
+    return chunkDWNMHQ4I_cjs.jsonSuccess({ deleted: true });
+  } catch (error) {
+    console.error("[blogpanel] DELETE /posts error:", error);
+    return chunkDWNMHQ4I_cjs.jsonError("INTERNAL_ERROR", "Failed to delete post", 500);
+  }
+}
+
+exports.DELETE = DELETE;
+exports.GET = GET;
+exports.POST = POST;
+exports.PUT = PUT;
+//# sourceMappingURL=posts.cjs.map
+//# sourceMappingURL=posts.cjs.map

package/dist/api/posts.cjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/api/posts.ts"],"names":["getSearchParams","getPostBySlug","jsonError","jsonSuccess","getPostById","listPosts","parseIntParam","requireAuth","CreatePostSchema","createPost","UpdatePostSchema","updatePost","deletePost"],"mappings":";;;;;;;AAiBA,eAAsB,IAAI,OAAA,EAAkB;AAC1C,EAAA,IAAI;AACF,IAAA,MAAM,MAAA,GAASA,kCAAgB,OAAO,CAAA;AAGtC,IAAA,IAAI,OAAO,IAAA,EAAM;AACf,MAAA,MAAM,IAAA,GAAO,MAAMC,+BAAA,CAAc,MAAA,CAAO,IAAI,CAAA;AAC5C,MAAA,IAAI,CAAC,IAAA,EAAM,OAAOC,2BAAA,CAAU,WAAA,EAAa,kBAAkB,GAAG,CAAA;AAC9D,MAAA,OAAOC,8BAAY,IAAI,CAAA;AAAA,IACzB;AAGA,IAAA,IAAI,OAAO,EAAA,EAAI;AACb,MAAA,MAAM,IAAA,GAAO,MAAMC,6BAAA,CAAY,MAAA,CAAO,EAAE,CAAA;AACxC,MAAA,IAAI,CAAC,IAAA,EAAM,OAAOF,2BAAA,CAAU,WAAA,EAAa,kBAAkB,GAAG,CAAA;AAC9D,MAAA,OAAOC,8BAAY,IAAI,CAAA;AAAA,IACzB;AAGA,IAAA,MAAM,MAAA,GAAS,MAAME,2BAAA,CAAU;AAAA,MAC7B,IAAA,EAAMC,+BAAA,CAAc,MAAA,CAAO,IAAA,EAAM,CAAC,CAAA;AAAA,MAClC,KAAA,EAAOA,+BAAA,CAAc,MAAA,CAAO,KAAA,EAAO,EAAE,CAAA;AAAA,MACrC,UAAU,MAAA,CAAO,QAAA;AAAA,MACjB,KAAK,MAAA,CAAO,GAAA;AAAA,MACZ,QAAQ,MAAA,CAAO,MAAA;AAAA,MACf,MAAA,EAAQ,MAAA,CAAO,CAAA,IAAK,MAAA,CAAO,MAAA;AAAA,MAC3B,MAAA,EAAS,OAAO,MAAA,IAAoD,aAAA;AAAA,MACpE,SAAA,EAAY,OAAO,SAAA,IAAgC;AAAA,KACpD,CAAA;AAED,IAAA,MAAM,IAAA,GAAOA,+BAAA,CAAc,MAAA,CAAO,IAAA,EAAM,CAAC,CAAA;AACzC,IAAA,MAAM,KAAA,GAAQA,+BAAA,CAAc,MAAA,CAAO,KAAA,EAAO,EAAE,CAAA;AAE5C,IAAA,OAAOH,6BAAA,CAAY,OAAO,KAAA,EAAO;AAAA,MAC/B,IAAA;AAAA,MACA,KAAA;AAAA,MACA,OAAO,MAAA,CAAO,KAAA;AAAA,MACd,UAAA,EAAY,IAAA,CAAK,IAAA,CAAK,MAAA,CAAO,QAAQ,KAAK;AAAA,KAC3C,CAAA;AAAA,EACH,SAAS,KAAA,EAAO;AACd,IAAA,OAAA,CAAQ,KAAA,CAAM,iCAAiC,KAAK,CAAA;AACpD,IAAA,OAAOD,2BAAA,CAAU,gBAAA,EAAkB,uBAAA,EAAyB,GAAG,CAAA;AAAA,EACjE;AACF;AAEA,eAAsB,KAAK,OAAA,EAAkB;AAC3C,EAAA,IAAI;AACF,IAAA,MAAM,SAAA,GAAY,MAAMK,6BAAA,CAAY,OAAO,CAAA;AAC3C,IAAA,IAAI,WAAW,OAAO,SAAA;AAEtB,IAAA,MAAM,IAAA,GAAO,MAAM,OAAA,CAAQ,IAAA,EAAK;AAChC,IAAA,MAAM,MAAA,GAASC,kCAAA,CAAiB,SAAA,CAAU,IAAI,CAAA;AAE9C,IAAA,IAAI,CAAC,OAAO,OAAA,EAAS;AACnB,MAAA,MAAM,SAAS,MAAA,CAAO,KAAA,CAAM,MAAA,CAAO,GAAA,CAAI,CAAC,CAAA,KAAM,CAAA,EAAG,CAAA,CAAE,IAAA,CAAK,KAAK,GAAG,CAAC,CAAA,EAAA,EAAK,CAAA,CAAE,OAAO,CAAA,CAAE,CAAA;AACjF,MAAA,OAAON,2BAAA,CAAU,kBAAA,EAAoB,MAAA,CAAO,IAAA,CAAK,IAAI,CAAC,CAAA;AAAA,IACxD;AAEA,IAAA,MAAM,IAAA,GAAO,MAAMO,4BAAA,CAAW,MAAA,CAAO,IAAI,CAAA;AACzC,IAAA,OAAON,6BAAA,CAAY,IAAA,EAAM,KAAA,CAAA,EAAW,GAAG,CAAA;AAAA,EACzC,SAAS,KAAA,EAAO;AACd,IAAA,OAAA,CAAQ,KAAA,CAAM,kCAAkC,KAAK,CAAA;AACrD,IAAA,OAAOD,2BAAA,CAAU,gBAAA,EAAkB,uBAAA,EAAyB,GAAG,CAAA;AAAA,EACjE;AACF;AAEA,eAAsB,IAAI,OAAA,EAAkB;AAC1C,EAAA,IAAI;AACF,IAAA,MAAM,SAAA,GAAY,MAAMK,6BAAA,CAAY,OAAO,CAAA;AAC3C,IAAA,IAAI,WAAW,OAAO,SAAA;AAEtB,IAAA,MAAM,MAAA,GAASP,kCAAgB,OAAO,CAAA;AACtC,IAAA,MAAM,KAAK,MAAA,CAAO,EAAA;AAClB,IAAA,IAAI,CAAC,EAAA,EAAI,OAAOE,2BAAA,CAAU,cAAc,qBAAqB,CAAA;AAE7D,IAAA,MAAM,IAAA,GAAO,MAAM,OAAA,CAAQ,IAAA,EAAK;AAChC,IAAA,MAAM,MAAA,GAASQ,kCAAA,CAAiB,SAAA,CAAU,IAAI,CAAA;AAE9C,IAAA,IAAI,CAAC,OAAO,OAAA,EAAS;AACnB,MAAA,MAAM,SAAS,MAAA,CAAO,KAAA,CAAM,MAAA,CAAO,GAAA,CAAI,CAAC,CAAA,KAAM,CAAA,EAAG,CAAA,CAAE,IAAA,CAAK,KAAK,GAAG,CAAC,CAAA,EAAA,EAAK,CAAA,CAAE,OAAO,CAAA,CAAE,CAAA;AACjF,MAAA,OAAOR,2BAAA,CAAU,kBAAA,EAAoB,MAAA,CAAO,IAAA,CAAK,IAAI,CAAC,CAAA;AAAA,IACxD;AAEA,IAAA,MAAM,IAAA,GAAO,MAAMS,4BAAA,CAAW,EAAA,EAAI,OAAO,IAAI,CAAA;AAC7C,IAAA,IAAI,CAAC,IAAA,EAAM,OAAOT,2BAAA,CAAU,WAAA,EAAa,kBAAkB,GAAG,CAAA;AAE9D,IAAA,OAAOC,8BAAY,IAAI,CAAA;AAAA,EACzB,SAAS,KAAA,EAAO;AACd,IAAA,OAAA,CAAQ,KAAA,CAAM,iCAAiC,KAAK,CAAA;AACpD,IAAA,OAAOD,2BAAA,CAAU,gBAAA,EAAkB,uBAAA,EAAyB,GAAG,CAAA;AAAA,EACjE;AACF;AAEA,eAAsB,OAAO,OAAA,EAAkB;AAC7C,EAAA,IAAI;AACF,IAAA,MAAM,SAAA,GAAY,MAAMK,6BAAA,CAAY,OAAO,CAAA;AAC3C,IAAA,IAAI,WAAW,OAAO,SAAA;AAEtB,IAAA,MAAM,MAAA,GAASP,kCAAgB,OAAO,CAAA;AACtC,IAAA,MAAM,KAAK,MAAA,CAAO,EAAA;AAClB,IAAA,IAAI,CAAC,EAAA,EAAI,OAAOE,2BAAA,CAAU,cAAc,qBAAqB,CAAA;AAE7D,IAAA,MAAM,OAAA,GAAU,MAAMU,4BAAA,CAAW,EAAE,CAAA;AACnC,IAAA,IAAI,CAAC,OAAA,EAAS,OAAOV,2BAAA,CAAU,WAAA,EAAa,kBAAkB,GAAG,CAAA;AAEjE,IAAA,OAAOC,6BAAA,CAAY,EAAE,OAAA,EAAS,IAAA,EAAM,CAAA;AAAA,EACtC,SAAS,KAAA,EAAO;AACd,IAAA,OAAA,CAAQ,KAAA,CAAM,oCAAoC,KAAK,CAAA;AACvD,IAAA,OAAOD,2BAAA,CAAU,gBAAA,EAAkB,uBAAA,EAAyB,GAAG,CAAA;AAAA,EACjE;AACF","file":"posts.cjs","sourcesContent":["import {\n  listPosts,\n  getPostBySlug,\n  getPostById,\n  createPost,\n  updatePost,\n  deletePost,\n} from '../lib/db';\nimport { CreatePostSchema, UpdatePostSchema, type PostStatus } from '../lib/types';\nimport {\n  jsonSuccess,\n  jsonError,\n  requireAuth,\n  getSearchParams,\n  parseIntParam,\n} from './middleware';\n\nexport async function GET(request: Request) {\n  try {\n    const params = getSearchParams(request);\n\n    // Single post by slug\n    if (params.slug) {\n      const post = await getPostBySlug(params.slug);\n      if (!post) return jsonError('NOT_FOUND', 'Post not found', 404);\n      return jsonSuccess(post);\n    }\n\n    // Single post by id\n    if (params.id) {\n      const post = await getPostById(params.id);\n      if (!post) return jsonError('NOT_FOUND', 'Post not found', 404);\n      return jsonSuccess(post);\n    }\n\n    // List posts\n    const result = await listPosts({\n      page: parseIntParam(params.page, 1),\n      limit: parseIntParam(params.limit, 10),\n      category: params.category,\n      tag: params.tag,\n      status: params.status as PostStatus | undefined,\n      search: params.q || params.search,\n      sortBy: (params.sortBy as 'publishedAt' | 'createdAt' | 'title') || 'publishedAt',\n      sortOrder: (params.sortOrder as 'asc' | 'desc') || 'desc',\n    });\n\n    const page = parseIntParam(params.page, 1);\n    const limit = parseIntParam(params.limit, 10);\n\n    return jsonSuccess(result.posts, {\n      page,\n      limit,\n      total: result.total,\n      totalPages: Math.ceil(result.total / limit),\n    });\n  } catch (error) {\n    console.error('[blogpanel] GET /posts error:', error);\n    return jsonError('INTERNAL_ERROR', 'Failed to fetch posts', 500);\n  }\n}\n\nexport async function POST(request: Request) {\n  try {\n    const authError = await requireAuth(request);\n    if (authError) return authError;\n\n    const body = await request.json();\n    const parsed = CreatePostSchema.safeParse(body);\n\n    if (!parsed.success) {\n      const errors = parsed.error.issues.map((i) => `${i.path.join('.')}: ${i.message}`);\n      return jsonError('VALIDATION_ERROR', errors.join('; '));\n    }\n\n    const post = await createPost(parsed.data);\n    return jsonSuccess(post, undefined, 201);\n  } catch (error) {\n    console.error('[blogpanel] POST /posts error:', error);\n    return jsonError('INTERNAL_ERROR', 'Failed to create post', 500);\n  }\n}\n\nexport async function PUT(request: Request) {\n  try {\n    const authError = await requireAuth(request);\n    if (authError) return authError;\n\n    const params = getSearchParams(request);\n    const id = params.id;\n    if (!id) return jsonError('MISSING_ID', 'Post ID is required');\n\n    const body = await request.json();\n    const parsed = UpdatePostSchema.safeParse(body);\n\n    if (!parsed.success) {\n      const errors = parsed.error.issues.map((i) => `${i.path.join('.')}: ${i.message}`);\n      return jsonError('VALIDATION_ERROR', errors.join('; '));\n    }\n\n    const post = await updatePost(id, parsed.data);\n    if (!post) return jsonError('NOT_FOUND', 'Post not found', 404);\n\n    return jsonSuccess(post);\n  } catch (error) {\n    console.error('[blogpanel] PUT /posts error:', error);\n    return jsonError('INTERNAL_ERROR', 'Failed to update post', 500);\n  }\n}\n\nexport async function DELETE(request: Request) {\n  try {\n    const authError = await requireAuth(request);\n    if (authError) return authError;\n\n    const params = getSearchParams(request);\n    const id = params.id;\n    if (!id) return jsonError('MISSING_ID', 'Post ID is required');\n\n    const deleted = await deletePost(id);\n    if (!deleted) return jsonError('NOT_FOUND', 'Post not found', 404);\n\n    return jsonSuccess({ deleted: true });\n  } catch (error) {\n    console.error('[blogpanel] DELETE /posts error:', error);\n    return jsonError('INTERNAL_ERROR', 'Failed to delete post', 500);\n  }\n}\n"]}

package/dist/api/posts.d.cts

@@ -0,0 +1,27 @@
+import * as next_server from 'next/server';
+import { A as ApiErrorResponse } from '../types-CgrBuig-.cjs';
+import 'zod';
+import 'mongodb';
+
+declare function GET(request: Request): Promise<next_server.NextResponse<ApiErrorResponse> | next_server.NextResponse<{
+    success: boolean;
+    data: unknown;
+    meta: Record<string, unknown> | undefined;
+}>>;
+declare function POST(request: Request): Promise<next_server.NextResponse<ApiErrorResponse> | next_server.NextResponse<{
+    success: boolean;
+    data: unknown;
+    meta: Record<string, unknown> | undefined;
+}>>;
+declare function PUT(request: Request): Promise<next_server.NextResponse<ApiErrorResponse> | next_server.NextResponse<{
+    success: boolean;
+    data: unknown;
+    meta: Record<string, unknown> | undefined;
+}>>;
+declare function DELETE(request: Request): Promise<next_server.NextResponse<ApiErrorResponse> | next_server.NextResponse<{
+    success: boolean;
+    data: unknown;
+    meta: Record<string, unknown> | undefined;
+}>>;
+
+export { DELETE, GET, POST, PUT };

package/dist/api/posts.d.ts

@@ -0,0 +1,27 @@
+import * as next_server from 'next/server';
+import { A as ApiErrorResponse } from '../types-CgrBuig-.js';
+import 'zod';
+import 'mongodb';
+
+declare function GET(request: Request): Promise<next_server.NextResponse<ApiErrorResponse> | next_server.NextResponse<{
+    success: boolean;
+    data: unknown;
+    meta: Record<string, unknown> | undefined;
+}>>;
+declare function POST(request: Request): Promise<next_server.NextResponse<ApiErrorResponse> | next_server.NextResponse<{
+    success: boolean;
+    data: unknown;
+    meta: Record<string, unknown> | undefined;
+}>>;
+declare function PUT(request: Request): Promise<next_server.NextResponse<ApiErrorResponse> | next_server.NextResponse<{
+    success: boolean;
+    data: unknown;
+    meta: Record<string, unknown> | undefined;
+}>>;
+declare function DELETE(request: Request): Promise<next_server.NextResponse<ApiErrorResponse> | next_server.NextResponse<{
+    success: boolean;
+    data: unknown;
+    meta: Record<string, unknown> | undefined;
+}>>;
+
+export { DELETE, GET, POST, PUT };

package/dist/api/posts.js

@@ -0,0 +1,98 @@
+import { CreatePostSchema, UpdatePostSchema } from '../chunk-QLBTOCT3.js';
+import { getSearchParams, jsonError, jsonSuccess, parseIntParam, requireAuth } from '../chunk-JBP3G4QJ.js';
+import { getPostBySlug, getPostById, listPosts, createPost, updatePost, deletePost } from '../chunk-6PZ772NQ.js';
+
+// src/api/posts.ts
+async function GET(request) {
+  try {
+    const params = getSearchParams(request);
+    if (params.slug) {
+      const post = await getPostBySlug(params.slug);
+      if (!post) return jsonError("NOT_FOUND", "Post not found", 404);
+      return jsonSuccess(post);
+    }
+    if (params.id) {
+      const post = await getPostById(params.id);
+      if (!post) return jsonError("NOT_FOUND", "Post not found", 404);
+      return jsonSuccess(post);
+    }
+    const result = await listPosts({
+      page: parseIntParam(params.page, 1),
+      limit: parseIntParam(params.limit, 10),
+      category: params.category,
+      tag: params.tag,
+      status: params.status,
+      search: params.q || params.search,
+      sortBy: params.sortBy || "publishedAt",
+      sortOrder: params.sortOrder || "desc"
+    });
+    const page = parseIntParam(params.page, 1);
+    const limit = parseIntParam(params.limit, 10);
+    return jsonSuccess(result.posts, {
+      page,
+      limit,
+      total: result.total,
+      totalPages: Math.ceil(result.total / limit)
+    });
+  } catch (error) {
+    console.error("[blogpanel] GET /posts error:", error);
+    return jsonError("INTERNAL_ERROR", "Failed to fetch posts", 500);
+  }
+}
+async function POST(request) {
+  try {
+    const authError = await requireAuth(request);
+    if (authError) return authError;
+    const body = await request.json();
+    const parsed = CreatePostSchema.safeParse(body);
+    if (!parsed.success) {
+      const errors = parsed.error.issues.map((i) => `${i.path.join(".")}: ${i.message}`);
+      return jsonError("VALIDATION_ERROR", errors.join("; "));
+    }
+    const post = await createPost(parsed.data);
+    return jsonSuccess(post, void 0, 201);
+  } catch (error) {
+    console.error("[blogpanel] POST /posts error:", error);
+    return jsonError("INTERNAL_ERROR", "Failed to create post", 500);
+  }
+}
+async function PUT(request) {
+  try {
+    const authError = await requireAuth(request);
+    if (authError) return authError;
+    const params = getSearchParams(request);
+    const id = params.id;
+    if (!id) return jsonError("MISSING_ID", "Post ID is required");
+    const body = await request.json();
+    const parsed = UpdatePostSchema.safeParse(body);
+    if (!parsed.success) {
+      const errors = parsed.error.issues.map((i) => `${i.path.join(".")}: ${i.message}`);
+      return jsonError("VALIDATION_ERROR", errors.join("; "));
+    }
+    const post = await updatePost(id, parsed.data);
+    if (!post) return jsonError("NOT_FOUND", "Post not found", 404);
+    return jsonSuccess(post);
+  } catch (error) {
+    console.error("[blogpanel] PUT /posts error:", error);
+    return jsonError("INTERNAL_ERROR", "Failed to update post", 500);
+  }
+}
+async function DELETE(request) {
+  try {
+    const authError = await requireAuth(request);
+    if (authError) return authError;
+    const params = getSearchParams(request);
+    const id = params.id;
+    if (!id) return jsonError("MISSING_ID", "Post ID is required");
+    const deleted = await deletePost(id);
+    if (!deleted) return jsonError("NOT_FOUND", "Post not found", 404);
+    return jsonSuccess({ deleted: true });
+  } catch (error) {
+    console.error("[blogpanel] DELETE /posts error:", error);
+    return jsonError("INTERNAL_ERROR", "Failed to delete post", 500);
+  }
+}
+
+export { DELETE, GET, POST, PUT };
+//# sourceMappingURL=posts.js.map
+//# sourceMappingURL=posts.js.map

package/dist/api/posts.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/api/posts.ts"],"names":[],"mappings":";;;;;AAiBA,eAAsB,IAAI,OAAA,EAAkB;AAC1C,EAAA,IAAI;AACF,IAAA,MAAM,MAAA,GAAS,gBAAgB,OAAO,CAAA;AAGtC,IAAA,IAAI,OAAO,IAAA,EAAM;AACf,MAAA,MAAM,IAAA,GAAO,MAAM,aAAA,CAAc,MAAA,CAAO,IAAI,CAAA;AAC5C,MAAA,IAAI,CAAC,IAAA,EAAM,OAAO,SAAA,CAAU,WAAA,EAAa,kBAAkB,GAAG,CAAA;AAC9D,MAAA,OAAO,YAAY,IAAI,CAAA;AAAA,IACzB;AAGA,IAAA,IAAI,OAAO,EAAA,EAAI;AACb,MAAA,MAAM,IAAA,GAAO,MAAM,WAAA,CAAY,MAAA,CAAO,EAAE,CAAA;AACxC,MAAA,IAAI,CAAC,IAAA,EAAM,OAAO,SAAA,CAAU,WAAA,EAAa,kBAAkB,GAAG,CAAA;AAC9D,MAAA,OAAO,YAAY,IAAI,CAAA;AAAA,IACzB;AAGA,IAAA,MAAM,MAAA,GAAS,MAAM,SAAA,CAAU;AAAA,MAC7B,IAAA,EAAM,aAAA,CAAc,MAAA,CAAO,IAAA,EAAM,CAAC,CAAA;AAAA,MAClC,KAAA,EAAO,aAAA,CAAc,MAAA,CAAO,KAAA,EAAO,EAAE,CAAA;AAAA,MACrC,UAAU,MAAA,CAAO,QAAA;AAAA,MACjB,KAAK,MAAA,CAAO,GAAA;AAAA,MACZ,QAAQ,MAAA,CAAO,MAAA;AAAA,MACf,MAAA,EAAQ,MAAA,CAAO,CAAA,IAAK,MAAA,CAAO,MAAA;AAAA,MAC3B,MAAA,EAAS,OAAO,MAAA,IAAoD,aAAA;AAAA,MACpE,SAAA,EAAY,OAAO,SAAA,IAAgC;AAAA,KACpD,CAAA;AAED,IAAA,MAAM,IAAA,GAAO,aAAA,CAAc,MAAA,CAAO,IAAA,EAAM,CAAC,CAAA;AACzC,IAAA,MAAM,KAAA,GAAQ,aAAA,CAAc,MAAA,CAAO,KAAA,EAAO,EAAE,CAAA;AAE5C,IAAA,OAAO,WAAA,CAAY,OAAO,KAAA,EAAO;AAAA,MAC/B,IAAA;AAAA,MACA,KAAA;AAAA,MACA,OAAO,MAAA,CAAO,KAAA;AAAA,MACd,UAAA,EAAY,IAAA,CAAK,IAAA,CAAK,MAAA,CAAO,QAAQ,KAAK;AAAA,KAC3C,CAAA;AAAA,EACH,SAAS,KAAA,EAAO;AACd,IAAA,OAAA,CAAQ,KAAA,CAAM,iCAAiC,KAAK,CAAA;AACpD,IAAA,OAAO,SAAA,CAAU,gBAAA,EAAkB,uBAAA,EAAyB,GAAG,CAAA;AAAA,EACjE;AACF;AAEA,eAAsB,KAAK,OAAA,EAAkB;AAC3C,EAAA,IAAI;AACF,IAAA,MAAM,SAAA,GAAY,MAAM,WAAA,CAAY,OAAO,CAAA;AAC3C,IAAA,IAAI,WAAW,OAAO,SAAA;AAEtB,IAAA,MAAM,IAAA,GAAO,MAAM,OAAA,CAAQ,IAAA,EAAK;AAChC,IAAA,MAAM,MAAA,GAAS,gBAAA,CAAiB,SAAA,CAAU,IAAI,CAAA;AAE9C,IAAA,IAAI,CAAC,OAAO,OAAA,EAAS;AACnB,MAAA,MAAM,SAAS,MAAA,CAAO,KAAA,CAAM,MAAA,CAAO,GAAA,CAAI,CAAC,CAAA,KAAM,CAAA,EAAG,CAAA,CAAE,IAAA,CAAK,KAAK,GAAG,CAAC,CAAA,EAAA,EAAK,CAAA,CAAE,OAAO,CAAA,CAAE,CAAA;AACjF,MAAA,OAAO,SAAA,CAAU,kBAAA,EAAoB,MAAA,CAAO,IAAA,CAAK,IAAI,CAAC,CAAA;AAAA,IACxD;AAEA,IAAA,MAAM,IAAA,GAAO,MAAM,UAAA,CAAW,MAAA,CAAO,IAAI,CAAA;AACzC,IAAA,OAAO,WAAA,CAAY,IAAA,EAAM,KAAA,CAAA,EAAW,GAAG,CAAA;AAAA,EACzC,SAAS,KAAA,EAAO;AACd,IAAA,OAAA,CAAQ,KAAA,CAAM,kCAAkC,KAAK,CAAA;AACrD,IAAA,OAAO,SAAA,CAAU,gBAAA,EAAkB,uBAAA,EAAyB,GAAG,CAAA;AAAA,EACjE;AACF;AAEA,eAAsB,IAAI,OAAA,EAAkB;AAC1C,EAAA,IAAI;AACF,IAAA,MAAM,SAAA,GAAY,MAAM,WAAA,CAAY,OAAO,CAAA;AAC3C,IAAA,IAAI,WAAW,OAAO,SAAA;AAEtB,IAAA,MAAM,MAAA,GAAS,gBAAgB,OAAO,CAAA;AACtC,IAAA,MAAM,KAAK,MAAA,CAAO,EAAA;AAClB,IAAA,IAAI,CAAC,EAAA,EAAI,OAAO,SAAA,CAAU,cAAc,qBAAqB,CAAA;AAE7D,IAAA,MAAM,IAAA,GAAO,MAAM,OAAA,CAAQ,IAAA,EAAK;AAChC,IAAA,MAAM,MAAA,GAAS,gBAAA,CAAiB,SAAA,CAAU,IAAI,CAAA;AAE9C,IAAA,IAAI,CAAC,OAAO,OAAA,EAAS;AACnB,MAAA,MAAM,SAAS,MAAA,CAAO,KAAA,CAAM,MAAA,CAAO,GAAA,CAAI,CAAC,CAAA,KAAM,CAAA,EAAG,CAAA,CAAE,IAAA,CAAK,KAAK,GAAG,CAAC,CAAA,EAAA,EAAK,CAAA,CAAE,OAAO,CAAA,CAAE,CAAA;AACjF,MAAA,OAAO,SAAA,CAAU,kBAAA,EAAoB,MAAA,CAAO,IAAA,CAAK,IAAI,CAAC,CAAA;AAAA,IACxD;AAEA,IAAA,MAAM,IAAA,GAAO,MAAM,UAAA,CAAW,EAAA,EAAI,OAAO,IAAI,CAAA;AAC7C,IAAA,IAAI,CAAC,IAAA,EAAM,OAAO,SAAA,CAAU,WAAA,EAAa,kBAAkB,GAAG,CAAA;AAE9D,IAAA,OAAO,YAAY,IAAI,CAAA;AAAA,EACzB,SAAS,KAAA,EAAO;AACd,IAAA,OAAA,CAAQ,KAAA,CAAM,iCAAiC,KAAK,CAAA;AACpD,IAAA,OAAO,SAAA,CAAU,gBAAA,EAAkB,uBAAA,EAAyB,GAAG,CAAA;AAAA,EACjE;AACF;AAEA,eAAsB,OAAO,OAAA,EAAkB;AAC7C,EAAA,IAAI;AACF,IAAA,MAAM,SAAA,GAAY,MAAM,WAAA,CAAY,OAAO,CAAA;AAC3C,IAAA,IAAI,WAAW,OAAO,SAAA;AAEtB,IAAA,MAAM,MAAA,GAAS,gBAAgB,OAAO,CAAA;AACtC,IAAA,MAAM,KAAK,MAAA,CAAO,EAAA;AAClB,IAAA,IAAI,CAAC,EAAA,EAAI,OAAO,SAAA,CAAU,cAAc,qBAAqB,CAAA;AAE7D,IAAA,MAAM,OAAA,GAAU,MAAM,UAAA,CAAW,EAAE,CAAA;AACnC,IAAA,IAAI,CAAC,OAAA,EAAS,OAAO,SAAA,CAAU,WAAA,EAAa,kBAAkB,GAAG,CAAA;AAEjE,IAAA,OAAO,WAAA,CAAY,EAAE,OAAA,EAAS,IAAA,EAAM,CAAA;AAAA,EACtC,SAAS,KAAA,EAAO;AACd,IAAA,OAAA,CAAQ,KAAA,CAAM,oCAAoC,KAAK,CAAA;AACvD,IAAA,OAAO,SAAA,CAAU,gBAAA,EAAkB,uBAAA,EAAyB,GAAG,CAAA;AAAA,EACjE;AACF","file":"posts.js","sourcesContent":["import {\n  listPosts,\n  getPostBySlug,\n  getPostById,\n  createPost,\n  updatePost,\n  deletePost,\n} from '../lib/db';\nimport { CreatePostSchema, UpdatePostSchema, type PostStatus } from '../lib/types';\nimport {\n  jsonSuccess,\n  jsonError,\n  requireAuth,\n  getSearchParams,\n  parseIntParam,\n} from './middleware';\n\nexport async function GET(request: Request) {\n  try {\n    const params = getSearchParams(request);\n\n    // Single post by slug\n    if (params.slug) {\n      const post = await getPostBySlug(params.slug);\n      if (!post) return jsonError('NOT_FOUND', 'Post not found', 404);\n      return jsonSuccess(post);\n    }\n\n    // Single post by id\n    if (params.id) {\n      const post = await getPostById(params.id);\n      if (!post) return jsonError('NOT_FOUND', 'Post not found', 404);\n      return jsonSuccess(post);\n    }\n\n    // List posts\n    const result = await listPosts({\n      page: parseIntParam(params.page, 1),\n      limit: parseIntParam(params.limit, 10),\n      category: params.category,\n      tag: params.tag,\n      status: params.status as PostStatus | undefined,\n      search: params.q || params.search,\n      sortBy: (params.sortBy as 'publishedAt' | 'createdAt' | 'title') || 'publishedAt',\n      sortOrder: (params.sortOrder as 'asc' | 'desc') || 'desc',\n    });\n\n    const page = parseIntParam(params.page, 1);\n    const limit = parseIntParam(params.limit, 10);\n\n    return jsonSuccess(result.posts, {\n      page,\n      limit,\n      total: result.total,\n      totalPages: Math.ceil(result.total / limit),\n    });\n  } catch (error) {\n    console.error('[blogpanel] GET /posts error:', error);\n    return jsonError('INTERNAL_ERROR', 'Failed to fetch posts', 500);\n  }\n}\n\nexport async function POST(request: Request) {\n  try {\n    const authError = await requireAuth(request);\n    if (authError) return authError;\n\n    const body = await request.json();\n    const parsed = CreatePostSchema.safeParse(body);\n\n    if (!parsed.success) {\n      const errors = parsed.error.issues.map((i) => `${i.path.join('.')}: ${i.message}`);\n      return jsonError('VALIDATION_ERROR', errors.join('; '));\n    }\n\n    const post = await createPost(parsed.data);\n    return jsonSuccess(post, undefined, 201);\n  } catch (error) {\n    console.error('[blogpanel] POST /posts error:', error);\n    return jsonError('INTERNAL_ERROR', 'Failed to create post', 500);\n  }\n}\n\nexport async function PUT(request: Request) {\n  try {\n    const authError = await requireAuth(request);\n    if (authError) return authError;\n\n    const params = getSearchParams(request);\n    const id = params.id;\n    if (!id) return jsonError('MISSING_ID', 'Post ID is required');\n\n    const body = await request.json();\n    const parsed = UpdatePostSchema.safeParse(body);\n\n    if (!parsed.success) {\n      const errors = parsed.error.issues.map((i) => `${i.path.join('.')}: ${i.message}`);\n      return jsonError('VALIDATION_ERROR', errors.join('; '));\n    }\n\n    const post = await updatePost(id, parsed.data);\n    if (!post) return jsonError('NOT_FOUND', 'Post not found', 404);\n\n    return jsonSuccess(post);\n  } catch (error) {\n    console.error('[blogpanel] PUT /posts error:', error);\n    return jsonError('INTERNAL_ERROR', 'Failed to update post', 500);\n  }\n}\n\nexport async function DELETE(request: Request) {\n  try {\n    const authError = await requireAuth(request);\n    if (authError) return authError;\n\n    const params = getSearchParams(request);\n    const id = params.id;\n    if (!id) return jsonError('MISSING_ID', 'Post ID is required');\n\n    const deleted = await deletePost(id);\n    if (!deleted) return jsonError('NOT_FOUND', 'Post not found', 404);\n\n    return jsonSuccess({ deleted: true });\n  } catch (error) {\n    console.error('[blogpanel] DELETE /posts error:', error);\n    return jsonError('INTERNAL_ERROR', 'Failed to delete post', 500);\n  }\n}\n"]}

package/dist/api/rss.cjs

@@ -0,0 +1,25 @@
+'use strict';
+
+var chunkDAX5C6SC_cjs = require('../chunk-DAX5C6SC.cjs');
+require('../chunk-XLYTATRQ.cjs');
+var server = require('next/server');
+
+async function GET() {
+  try {
+    const xml = await chunkDAX5C6SC_cjs.generateRSSFeed();
+    return new server.NextResponse(xml, {
+      status: 200,
+      headers: {
+        "Content-Type": "application/rss+xml",
+        "Cache-Control": "public, max-age=3600, s-maxage=3600"
+      }
+    });
+  } catch (error) {
+    console.error("[blogpanel] RSS generation error:", error);
+    return new server.NextResponse("RSS generation failed", { status: 500 });
+  }
+}
+
+exports.GET = GET;
+//# sourceMappingURL=rss.cjs.map
+//# sourceMappingURL=rss.cjs.map

package/dist/api/rss.cjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/api/rss.ts"],"names":["generateRSSFeed","NextResponse"],"mappings":";;;;;;AAGA,eAAsB,GAAA,GAAM;AAC1B,EAAA,IAAI;AACF,IAAA,MAAM,GAAA,GAAM,MAAMA,iCAAA,EAAgB;AAClC,IAAA,OAAO,IAAIC,oBAAa,GAAA,EAAK;AAAA,MAC3B,MAAA,EAAQ,GAAA;AAAA,MACR,OAAA,EAAS;AAAA,QACP,cAAA,EAAgB,qBAAA;AAAA,QAChB,eAAA,EAAiB;AAAA;AACnB,KACD,CAAA;AAAA,EACH,SAAS,KAAA,EAAO;AACd,IAAA,OAAA,CAAQ,KAAA,CAAM,qCAAqC,KAAK,CAAA;AACxD,IAAA,OAAO,IAAIA,mBAAA,CAAa,uBAAA,EAAyB,EAAE,MAAA,EAAQ,KAAK,CAAA;AAAA,EAClE;AACF","file":"rss.cjs","sourcesContent":["import { NextResponse } from 'next/server';\nimport { generateRSSFeed } from '../lib/rss';\n\nexport async function GET() {\n  try {\n    const xml = await generateRSSFeed();\n    return new NextResponse(xml, {\n      status: 200,\n      headers: {\n        'Content-Type': 'application/rss+xml',\n        'Cache-Control': 'public, max-age=3600, s-maxage=3600',\n      },\n    });\n  } catch (error) {\n    console.error('[blogpanel] RSS generation error:', error);\n    return new NextResponse('RSS generation failed', { status: 500 });\n  }\n}\n"]}

package/dist/api/rss.d.cts

@@ -0,0 +1,5 @@
+import { NextResponse } from 'next/server';
+
+declare function GET(): Promise<NextResponse<unknown>>;
+
+export { GET };

package/dist/api/rss.d.ts

@@ -0,0 +1,5 @@
+import { NextResponse } from 'next/server';
+
+declare function GET(): Promise<NextResponse<unknown>>;
+
+export { GET };

package/dist/api/rss.js

@@ -0,0 +1,23 @@
+import { generateRSSFeed } from '../chunk-VEJFN65Y.js';
+import '../chunk-6PZ772NQ.js';
+import { NextResponse } from 'next/server';
+
+async function GET() {
+  try {
+    const xml = await generateRSSFeed();
+    return new NextResponse(xml, {
+      status: 200,
+      headers: {
+        "Content-Type": "application/rss+xml",
+        "Cache-Control": "public, max-age=3600, s-maxage=3600"
+      }
+    });
+  } catch (error) {
+    console.error("[blogpanel] RSS generation error:", error);
+    return new NextResponse("RSS generation failed", { status: 500 });
+  }
+}
+
+export { GET };
+//# sourceMappingURL=rss.js.map
+//# sourceMappingURL=rss.js.map

package/dist/api/rss.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/api/rss.ts"],"names":[],"mappings":";;;;AAGA,eAAsB,GAAA,GAAM;AAC1B,EAAA,IAAI;AACF,IAAA,MAAM,GAAA,GAAM,MAAM,eAAA,EAAgB;AAClC,IAAA,OAAO,IAAI,aAAa,GAAA,EAAK;AAAA,MAC3B,MAAA,EAAQ,GAAA;AAAA,MACR,OAAA,EAAS;AAAA,QACP,cAAA,EAAgB,qBAAA;AAAA,QAChB,eAAA,EAAiB;AAAA;AACnB,KACD,CAAA;AAAA,EACH,SAAS,KAAA,EAAO;AACd,IAAA,OAAA,CAAQ,KAAA,CAAM,qCAAqC,KAAK,CAAA;AACxD,IAAA,OAAO,IAAI,YAAA,CAAa,uBAAA,EAAyB,EAAE,MAAA,EAAQ,KAAK,CAAA;AAAA,EAClE;AACF","file":"rss.js","sourcesContent":["import { NextResponse } from 'next/server';\nimport { generateRSSFeed } from '../lib/rss';\n\nexport async function GET() {\n  try {\n    const xml = await generateRSSFeed();\n    return new NextResponse(xml, {\n      status: 200,\n      headers: {\n        'Content-Type': 'application/rss+xml',\n        'Cache-Control': 'public, max-age=3600, s-maxage=3600',\n      },\n    });\n  } catch (error) {\n    console.error('[blogpanel] RSS generation error:', error);\n    return new NextResponse('RSS generation failed', { status: 500 });\n  }\n}\n"]}

package/dist/api/settings.cjs

@@ -0,0 +1,40 @@
+'use strict';
+
+var chunkV7QPRX4A_cjs = require('../chunk-V7QPRX4A.cjs');
+var chunkDWNMHQ4I_cjs = require('../chunk-DWNMHQ4I.cjs');
+var chunkXLYTATRQ_cjs = require('../chunk-XLYTATRQ.cjs');
+
+// src/api/settings.ts
+async function GET(request) {
+  try {
+    const authError = await chunkDWNMHQ4I_cjs.requireAuth(request);
+    if (authError) return authError;
+    const settings = await chunkXLYTATRQ_cjs.getSettings();
+    return chunkDWNMHQ4I_cjs.jsonSuccess(settings);
+  } catch (error) {
+    console.error("[blogpanel] GET /settings error:", error);
+    return chunkDWNMHQ4I_cjs.jsonError("INTERNAL_ERROR", "Failed to fetch settings", 500);
+  }
+}
+async function PUT(request) {
+  try {
+    const authError = await chunkDWNMHQ4I_cjs.requireAuth(request);
+    if (authError) return authError;
+    const body = await request.json();
+    const parsed = chunkV7QPRX4A_cjs.BlogSettingsSchema.partial().safeParse(body);
+    if (!parsed.success) {
+      const errors = parsed.error.issues.map((i) => `${i.path.join(".")}: ${i.message}`);
+      return chunkDWNMHQ4I_cjs.jsonError("VALIDATION_ERROR", errors.join("; "));
+    }
+    const settings = await chunkXLYTATRQ_cjs.updateSettings(parsed.data);
+    return chunkDWNMHQ4I_cjs.jsonSuccess(settings);
+  } catch (error) {
+    console.error("[blogpanel] PUT /settings error:", error);
+    return chunkDWNMHQ4I_cjs.jsonError("INTERNAL_ERROR", "Failed to update settings", 500);
+  }
+}
+
+exports.GET = GET;
+exports.PUT = PUT;
+//# sourceMappingURL=settings.cjs.map
+//# sourceMappingURL=settings.cjs.map