import { dK as defineContentEventHandler, c as createError, r as requireAuth, bT as requirePermission, eg as getRevision, G as createContentManager } from '../../../../../../../nitro/nitro.mjs';
import { m as mapContentApiError } from '../../../../../../../_/api-helpers.mjs';
import { g as getAuditActorFromEvent } from '../../../../../../../_/audit-log-actor.mjs';
import 'node:crypto';
import 'jsonwebtoken';
import 'node:fs';
import 'node:module';
import 'node:path';
import 'node:url';
import 'node:http';
import 'node:https';
import 'node:events';
import 'node:buffer';
import 'pino';
import 'drizzle-orm/better-sqlite3';
import 'drizzle-orm/node-postgres';
import 'drizzle-orm/mysql2';
import 'better-sqlite3';
import 'pg';
import 'mysql2/promise';
import 'drizzle-orm';
import 'fs';
import 'path';
import 'prom-client';
import 'bcryptjs';
import '@node-rs/argon2';
import 'node:async_hooks';
import 'crypto';
import 'node:dns';
import 'node:util';
import 'node:net';
import 'fs/promises';
import 'url';
import 'semver';
import '../../../../../../../_/delivery-metrics.mjs';

const restore_post = defineContentEventHandler("update", async (event) => {
  var _a, _b, _c, _d, _e, _f, _g, _h;
  try {
    const contentType = (_a = event.context.params) == null ? void 0 : _a.contentType;
    const id = (_b = event.context.params) == null ? void 0 : _b.id;
    const revisionId = (_c = event.context.params) == null ? void 0 : _c.revisionId;
    if (!contentType || !id || !revisionId) {
      throw createError({
        statusCode: 400,
        statusMessage: "Bad Request",
        message: "Content type, ID and revision ID are required"
      });
    }
    await requireAuth(event);
    if (!event.context.adminUser) {
      throw createError({
        statusCode: 403,
        statusMessage: "Forbidden",
        message: "Only administrators can restore content revisions"
      });
    }
    await requirePermission(
      event.context.user,
      contentType,
      "update",
      event.context.adminUser,
      event.context.apiToken
    );
    const numericId = parseInt(id);
    const numericRevisionId = parseInt(revisionId);
    if (isNaN(numericId) || isNaN(numericRevisionId)) {
      throw createError({
        statusCode: 400,
        statusMessage: "Bad Request",
        message: "ID and revision ID must be valid numbers"
      });
    }
    const revision = await getRevision(numericRevisionId);
    if (!revision) {
      throw createError({
        statusCode: 404,
        statusMessage: "Not Found",
        message: `Revision with id ${revisionId} not found`
      });
    }
    if (revision.contentType !== contentType || revision.contentId !== numericId) {
      throw createError({
        statusCode: 404,
        statusMessage: "Not Found",
        message: `Revision does not belong to ${contentType} with id ${id}`
      });
    }
    const contentManager = createContentManager(contentType);
    const result = await contentManager.restoreRevisionSnapshot(revision.data, {
      actor: getAuditActorFromEvent(event),
      adminUserId: (_e = (_d = event.context.adminUser) == null ? void 0 : _d.id) != null ? _e : null
    });
    return {
      success: true,
      message: `${contentType} restored to revision ${revision.revisionNumber}`,
      data: result
    };
  } catch (error) {
    mapContentApiError(error, {
      routeLabel: `POST /api/content/${(_f = event.context.params) == null ? void 0 : _f.contentType}/${(_g = event.context.params) == null ? void 0 : _g.id}/revisions/${(_h = event.context.params) == null ? void 0 : _h.revisionId}/restore`
    });
  }
});

export { restore_post as default };
//# sourceMappingURL=restore.post.mjs.map
