@actuate-media/cms-core 0.34.0 → 0.35.1

package/dist/__tests__/api/globals-routes.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=globals-routes.test.d.ts.map

package/dist/__tests__/api/globals-routes.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"globals-routes.test.d.ts","sourceRoot":"","sources":["../../../src/__tests__/api/globals-routes.test.ts"],"names":[],"mappings":""}

package/dist/__tests__/api/globals-routes.test.js

@@ -0,0 +1,100 @@
+import { beforeEach, describe, expect, it } from 'vitest';
+import { handleActuateAPI } from '../../api/index.js';
+import { initDB } from '../../db.js';
+import { generateApiKey } from '../../security/api-key-enhanced.js';
+/**
+ * Authenticated `GET /globals/:slug` behaviour.
+ *
+ * Globals are upsert-on-write (the first PUT creates the row). A slug that has
+ * no document yet is therefore a valid EMPTY state, not a 404 — the shipped
+ * admin Settings page reads `/globals/settings` and must load cleanly on a
+ * fresh install before anything has been saved. This regression test pins
+ * that contract so we don't reintroduce the "Global not found" banner.
+ */
+const VALID_SECRET = 'a'.repeat(48);
+function createMockDB(opts) {
+    const apiKey = opts.apiKey;
+    return {
+        apiKey: {
+            findMany: async () => (apiKey ? [apiKey] : []),
+            findUnique: async ({ where }) => {
+                if (!apiKey)
+                    return null;
+                if (apiKey.keyHash !== where.keyHash)
+                    return null;
+                return apiKey;
+            },
+            update: async () => apiKey,
+        },
+        document: {
+            findFirst: async () => opts.global ?? null,
+            findMany: async () => [],
+            count: async () => 0,
+        },
+        user: {},
+        session: {},
+        media: {},
+    };
+}
+async function makeKey(scopes) {
+    const { key, keyHash, keyPrefix } = await generateApiKey({ prefix: 'act_sk', scopes });
+    return {
+        key,
+        record: {
+            id: 'apikey-1',
+            keyHash,
+            keyPrefix,
+            userId: 'user-1',
+            scopes,
+            ipRestrictions: null,
+            expiresAt: null,
+            lastUsedAt: null,
+            revokedAt: null,
+        },
+    };
+}
+function makeHandler(db) {
+    return handleActuateAPI({ prismaClient: db, config: { collections: {} } });
+}
+describe('GET /globals/:slug (authenticated)', () => {
+    beforeEach(() => {
+        delete globalThis.__actuateConfig;
+        process.env.CMS_SECRET = VALID_SECRET;
+    });
+    it('returns 200 with empty data when the global has never been saved', async () => {
+        const { key, record } = await makeKey({ globals: ['settings'] });
+        const db = createMockDB({ apiKey: record, global: null });
+        initDB(db);
+        const handler = makeHandler(db);
+        const response = await handler(new Request('https://example.com/api/cms/globals/settings', {
+            headers: { Authorization: `Bearer ${key}` },
+        }));
+        expect(response.status).toBe(200);
+        await expect(response.json()).resolves.toEqual({ data: {} });
+    });
+    it('returns the stored data when the global document exists', async () => {
+        const { key, record } = await makeKey({ globals: ['settings'] });
+        const db = createMockDB({
+            apiKey: record,
+            global: { id: 'doc-1', collection: 'settings', data: { siteTitle: 'Actuate Media' } },
+        });
+        initDB(db);
+        const handler = makeHandler(db);
+        const response = await handler(new Request('https://example.com/api/cms/globals/settings', {
+            headers: { Authorization: `Bearer ${key}` },
+        }));
+        expect(response.status).toBe(200);
+        await expect(response.json()).resolves.toEqual({ data: { siteTitle: 'Actuate Media' } });
+    });
+    it('rejects with 403 when the API key is not scoped to the global', async () => {
+        const { key, record } = await makeKey({ collections: ['posts'], actions: ['read'] });
+        const db = createMockDB({ apiKey: record, global: null });
+        initDB(db);
+        const handler = makeHandler(db);
+        const response = await handler(new Request('https://example.com/api/cms/globals/settings', {
+            headers: { Authorization: `Bearer ${key}` },
+        }));
+        expect(response.status).toBe(403);
+    });
+});
+//# sourceMappingURL=globals-routes.test.js.map

package/dist/__tests__/api/globals-routes.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"globals-routes.test.js","sourceRoot":"","sources":["../../../src/__tests__/api/globals-routes.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAA;AAEzD,OAAO,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAA;AACrD,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAA;AACpC,OAAO,EAAE,cAAc,EAAE,MAAM,oCAAoC,CAAA;AAGnE;;;;;;;;GAQG;AACH,MAAM,YAAY,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAA;AAcnC,SAAS,YAAY,CAAC,IAAqD;IACzE,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAA;IAC1B,OAAO;QACL,MAAM,EAAE;YACN,QAAQ,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YAC9C,UAAU,EAAE,KAAK,EAAE,EAAE,KAAK,EAAkC,EAAE,EAAE;gBAC9D,IAAI,CAAC,MAAM;oBAAE,OAAO,IAAI,CAAA;gBACxB,IAAI,MAAM,CAAC,OAAO,KAAK,KAAK,CAAC,OAAO;oBAAE,OAAO,IAAI,CAAA;gBACjD,OAAO,MAAM,CAAA;YACf,CAAC;YACD,MAAM,EAAE,KAAK,IAAI,EAAE,CAAC,MAAM;SAC3B;QACD,QAAQ,EAAE;YACR,SAAS,EAAE,KAAK,IAAI,EAAE,CAAC,IAAI,CAAC,MAAM,IAAI,IAAI;YAC1C,QAAQ,EAAE,KAAK,IAAI,EAAE,CAAC,EAAE;YACxB,KAAK,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC;SACrB;QACD,IAAI,EAAE,EAAE;QACR,OAAO,EAAE,EAAE;QACX,KAAK,EAAE,EAAE;KACH,CAAA;AACV,CAAC;AAED,KAAK,UAAU,OAAO,CAAC,MAAmB;IACxC,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,SAAS,EAAE,GAAG,MAAM,cAAc,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAA;IACtF,OAAO;QACL,GAAG;QACH,MAAM,EAAE;YACN,EAAE,EAAE,UAAU;YACd,OAAO;YACP,SAAS;YACT,MAAM,EAAE,QAAQ;YAChB,MAAM;YACN,cAAc,EAAE,IAAI;YACpB,SAAS,EAAE,IAAI;YACf,UAAU,EAAE,IAAI;YAChB,SAAS,EAAE,IAAI;SAChB;KACF,CAAA;AACH,CAAC;AAED,SAAS,WAAW,CAAC,EAAW;IAC9B,OAAO,gBAAgB,CAAC,EAAE,YAAY,EAAE,EAAW,EAAE,MAAM,EAAE,EAAE,WAAW,EAAE,EAAE,EAAE,EAAE,CAAC,CAAA;AACrF,CAAC;AAED,QAAQ,CAAC,oCAAoC,EAAE,GAAG,EAAE;IAClD,UAAU,CAAC,GAAG,EAAE;QACd,OAAQ,UAAkB,CAAC,eAAe,CAAA;QAC1C,OAAO,CAAC,GAAG,CAAC,UAAU,GAAG,YAAY,CAAA;IACvC,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,kEAAkE,EAAE,KAAK,IAAI,EAAE;QAChF,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,MAAM,OAAO,CAAC,EAAE,OAAO,EAAE,CAAC,UAAU,CAAC,EAAE,CAAC,CAAA;QAChE,MAAM,EAAE,GAAG,YAAY,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAA;QACzD,MAAM,CAAC,EAAE,CAAC,CAAA;QACV,MAAM,OAAO,GAAG,WAAW,CAAC,EAAE,CAAC,CAAA;QAE/B,MAAM,QAAQ,GAAG,MAAM,OAAO,CAC5B,IAAI,OAAO,CAAC,8CAA8C,EAAE;YAC1D,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,GAAG,EAAE,EAAE;SAC5C,CAAC,CACH,CAAA;QAED,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;QACjC,MAAM,MAAM,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAA;IAC9D,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,yDAAyD,EAAE,KAAK,IAAI,EAAE;QACvE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,MAAM,OAAO,CAAC,EAAE,OAAO,EAAE,CAAC,UAAU,CAAC,EAAE,CAAC,CAAA;QAChE,MAAM,EAAE,GAAG,YAAY,CAAC;YACtB,MAAM,EAAE,MAAM;YACd,MAAM,EAAE,EAAE,EAAE,EAAE,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,IAAI,EAAE,EAAE,SAAS,EAAE,eAAe,EAAE,EAAE;SACtF,CAAC,CAAA;QACF,MAAM,CAAC,EAAE,CAAC,CAAA;QACV,MAAM,OAAO,GAAG,WAAW,CAAC,EAAE,CAAC,CAAA;QAE/B,MAAM,QAAQ,GAAG,MAAM,OAAO,CAC5B,IAAI,OAAO,CAAC,8CAA8C,EAAE;YAC1D,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,GAAG,EAAE,EAAE;SAC5C,CAAC,CACH,CAAA;QAED,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;QACjC,MAAM,MAAM,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,EAAE,SAAS,EAAE,eAAe,EAAE,EAAE,CAAC,CAAA;IAC1F,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,+DAA+D,EAAE,KAAK,IAAI,EAAE;QAC7E,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,MAAM,OAAO,CAAC,EAAE,WAAW,EAAE,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,CAAA;QACpF,MAAM,EAAE,GAAG,YAAY,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAA;QACzD,MAAM,CAAC,EAAE,CAAC,CAAA;QACV,MAAM,OAAO,GAAG,WAAW,CAAC,EAAE,CAAC,CAAA;QAE/B,MAAM,QAAQ,GAAG,MAAM,OAAO,CAC5B,IAAI,OAAO,CAAC,8CAA8C,EAAE;YAC1D,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,GAAG,EAAE,EAAE;SAC5C,CAAC,CACH,CAAA;QAED,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;IACnC,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA"}

package/dist/__tests__/seo/index-status.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=index-status.test.d.ts.map

package/dist/__tests__/seo/index-status.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index-status.test.d.ts","sourceRoot":"","sources":["../../../src/__tests__/seo/index-status.test.ts"],"names":[],"mappings":""}

package/dist/__tests__/seo/index-status.test.js

@@ -0,0 +1,140 @@
+import { afterEach, describe, expect, it } from 'vitest';
+import { computeSiteIndexStatus, getSiteIndexStatus, robotsTxtBlocksEntireSite, } from '../../seo/index-status.js';
+import { DEFAULT_SEO_MODULE_SETTINGS, SEO_CONFIG_COLLECTION } from '../../seo/config-store.js';
+import { setActuateConfig } from '../../config/runtime.js';
+/** Minimal config stub — index-status only reads `seo`. */
+function stubConfig(seo) {
+    setActuateConfig({ collections: {}, ...(seo ? { seo } : {}) });
+}
+function inputs(overrides = {}) {
+    return {
+        environment: 'production',
+        seo: { siteUrl: 'https://example.com' },
+        module: { ...DEFAULT_SEO_MODULE_SETTINGS },
+        hasSeoConfig: true,
+        lastAuditAt: null,
+        ...overrides,
+    };
+}
+describe('robotsTxtBlocksEntireSite', () => {
+    it('detects a blanket Disallow: /', () => {
+        expect(robotsTxtBlocksEntireSite('User-agent: *\nDisallow: /')).toBe(true);
+        expect(robotsTxtBlocksEntireSite('User-agent: *\nDisallow: /  # block all')).toBe(true);
+    });
+    it('does not flag scoped disallow rules', () => {
+        expect(robotsTxtBlocksEntireSite('User-agent: *\nDisallow: /admin\nDisallow: /api/')).toBe(false);
+        expect(robotsTxtBlocksEntireSite('')).toBe(false);
+    });
+});
+describe('computeSiteIndexStatus', () => {
+    it('reports indexable in production with a site URL and no blocks', () => {
+        const result = computeSiteIndexStatus(inputs());
+        expect(result.status).toBe('indexable');
+        expect(result.severity).toBe('success');
+        expect(result.label).toBe('Indexable');
+    });
+    it('reports blocked in production when global noindex is on', () => {
+        const result = computeSiteIndexStatus(inputs({ seo: { siteUrl: 'https://example.com', robots: { defaultNoIndex: true } } }));
+        expect(result.status).toBe('blocked');
+        expect(result.severity).toBe('danger');
+        expect(result.checks.find((c) => c.key === 'globalNoindex')?.status).toBe('fail');
+    });
+    it('reports blocked in production when robots.txt disallows everything', () => {
+        const result = computeSiteIndexStatus(inputs({
+            module: { ...DEFAULT_SEO_MODULE_SETTINGS, robotsTxt: 'User-agent: *\nDisallow: /' },
+        }));
+        expect(result.status).toBe('blocked');
+        expect(result.severity).toBe('danger');
+    });
+    it('reports blocked in production when the robots route is disabled', () => {
+        const result = computeSiteIndexStatus(inputs({ module: { ...DEFAULT_SEO_MODULE_SETTINGS, robotsEnabled: false } }));
+        expect(result.status).toBe('blocked');
+    });
+    it('reports protected when non-production noindex guards a preview env', () => {
+        const result = computeSiteIndexStatus(inputs({
+            environment: 'preview',
+            seo: { siteUrl: 'https://preview.example.com', robots: { noIndexNonProduction: true } },
+        }));
+        expect(result.status).toBe('protected');
+        expect(result.severity).toBe('warning');
+        expect(result.label).toBe('Protected');
+    });
+    it('warns (partially blocked) when a non-production env is NOT protected', () => {
+        const result = computeSiteIndexStatus(inputs({ environment: 'preview', seo: { siteUrl: 'https://preview.example.com' } }));
+        expect(result.status).toBe('partially_blocked');
+        expect(result.severity).toBe('warning');
+        expect(result.checks.find((c) => c.key === 'nonProdNoindex')?.status).toBe('warning');
+    });
+    it('flags a missing site URL as needs-attention', () => {
+        const result = computeSiteIndexStatus(inputs({ seo: { siteUrl: '' } }));
+        expect(result.status).toBe('unknown');
+        expect(result.severity).toBe('warning');
+        expect(result.checks.find((c) => c.key === 'siteUrl')?.status).toBe('warning');
+    });
+    it('reports partially blocked when the sitemap is disabled but the site is indexable', () => {
+        const result = computeSiteIndexStatus(inputs({ module: { ...DEFAULT_SEO_MODULE_SETTINGS, sitemapEnabled: false } }));
+        expect(result.status).toBe('partially_blocked');
+        expect(result.checks.find((c) => c.key === 'sitemap')?.status).toBe('warning');
+    });
+    it('reports unknown when no SEO config exists at all', () => {
+        const result = computeSiteIndexStatus(inputs({ hasSeoConfig: false, seo: null }));
+        expect(result.status).toBe('unknown');
+        expect(result.severity).toBe('neutral');
+    });
+    it('always exposes the three SEO actions and a full set of checks', () => {
+        const result = computeSiteIndexStatus(inputs());
+        expect(result.actions.map((a) => a.label)).toEqual([
+            'Run SEO Audit',
+            'View robots.txt',
+            'View sitemap.xml',
+        ]);
+        expect(result.checks.map((c) => c.key)).toEqual([
+            'environment',
+            'siteUrl',
+            'robotsBlockAll',
+            'globalNoindex',
+            'nonProdNoindex',
+            'sitemap',
+            'lastAudit',
+        ]);
+    });
+    it('surfaces the last audit date', () => {
+        const result = computeSiteIndexStatus(inputs({ lastAuditAt: '2026-01-02T03:04:05.000Z' }));
+        expect(result.checks.find((c) => c.key === 'lastAudit')?.value).toBe('2026-01-02');
+        expect(result.checks.find((c) => c.key === 'lastAudit')?.status).toBe('pass');
+    });
+});
+describe('getSiteIndexStatus', () => {
+    const origVercel = process.env.VERCEL_ENV;
+    const origNode = process.env.NODE_ENV;
+    afterEach(() => {
+        process.env.VERCEL_ENV = origVercel;
+        process.env.NODE_ENV = origNode;
+        stubConfig();
+    });
+    it('reads effective config + last audit from the DB', async () => {
+        process.env.VERCEL_ENV = 'production';
+        stubConfig({ siteUrl: 'https://example.com' });
+        const db = {
+            document: {
+                findFirst: async ({ where }) => where.collection === SEO_CONFIG_COLLECTION ? { data: { site: {}, module: {} } } : null,
+            },
+            seoAuditRun: {
+                findFirst: async () => ({ finishedAt: new Date('2026-02-03T00:00:00.000Z') }),
+            },
+        };
+        const result = await getSiteIndexStatus(db);
+        expect(result.status).toBe('indexable');
+        expect(result.environment).toBe('production');
+        expect(result.lastAuditAt).toBe('2026-02-03T00:00:00.000Z');
+    });
+    it('tolerates a missing audit table', async () => {
+        process.env.VERCEL_ENV = 'production';
+        stubConfig({ siteUrl: 'https://example.com' });
+        const db = { document: { findFirst: async () => null } };
+        const result = await getSiteIndexStatus(db);
+        expect(result.lastAuditAt).toBeNull();
+        expect(result.status).toBe('indexable');
+    });
+});
+//# sourceMappingURL=index-status.test.js.map

package/dist/__tests__/seo/index-status.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index-status.test.js","sourceRoot":"","sources":["../../../src/__tests__/seo/index-status.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAA;AAExD,OAAO,EACL,sBAAsB,EACtB,kBAAkB,EAClB,yBAAyB,GAE1B,MAAM,2BAA2B,CAAA;AAClC,OAAO,EAAE,2BAA2B,EAAE,qBAAqB,EAAE,MAAM,2BAA2B,CAAA;AAC9F,OAAO,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAA;AAG1D,2DAA2D;AAC3D,SAAS,UAAU,CAAC,GAAmB;IACrC,gBAAgB,CAAC,EAAE,WAAW,EAAE,EAAE,EAAE,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAiC,CAAC,CAAA;AAC/F,CAAC;AAED,SAAS,MAAM,CAAC,YAAwC,EAAE;IACxD,OAAO;QACL,WAAW,EAAE,YAAY;QACzB,GAAG,EAAE,EAAE,OAAO,EAAE,qBAAqB,EAA0B;QAC/D,MAAM,EAAE,EAAE,GAAG,2BAA2B,EAAE;QAC1C,YAAY,EAAE,IAAI;QAClB,WAAW,EAAE,IAAI;QACjB,GAAG,SAAS;KACb,CAAA;AACH,CAAC;AAED,QAAQ,CAAC,2BAA2B,EAAE,GAAG,EAAE;IACzC,EAAE,CAAC,+BAA+B,EAAE,GAAG,EAAE;QACvC,MAAM,CAAC,yBAAyB,CAAC,4BAA4B,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QAC1E,MAAM,CAAC,yBAAyB,CAAC,yCAAyC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IACzF,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,qCAAqC,EAAE,GAAG,EAAE;QAC7C,MAAM,CAAC,yBAAyB,CAAC,kDAAkD,CAAC,CAAC,CAAC,IAAI,CACxF,KAAK,CACN,CAAA;QACD,MAAM,CAAC,yBAAyB,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;IACnD,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA;AAEF,QAAQ,CAAC,wBAAwB,EAAE,GAAG,EAAE;IACtC,EAAE,CAAC,+DAA+D,EAAE,GAAG,EAAE;QACvE,MAAM,MAAM,GAAG,sBAAsB,CAAC,MAAM,EAAE,CAAC,CAAA;QAC/C,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAA;QACvC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;QACvC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAA;IACxC,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,yDAAyD,EAAE,GAAG,EAAE;QACjE,MAAM,MAAM,GAAG,sBAAsB,CACnC,MAAM,CAAC,EAAE,GAAG,EAAE,EAAE,OAAO,EAAE,qBAAqB,EAAE,MAAM,EAAE,EAAE,cAAc,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CACtF,CAAA;QACD,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;QACrC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;QACtC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,KAAK,eAAe,CAAC,EAAE,MAAM,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;IACnF,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,oEAAoE,EAAE,GAAG,EAAE;QAC5E,MAAM,MAAM,GAAG,sBAAsB,CACnC,MAAM,CAAC;YACL,MAAM,EAAE,EAAE,GAAG,2BAA2B,EAAE,SAAS,EAAE,4BAA4B,EAAE;SACpF,CAAC,CACH,CAAA;QACD,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;QACrC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;IACxC,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,iEAAiE,EAAE,GAAG,EAAE;QACzE,MAAM,MAAM,GAAG,sBAAsB,CACnC,MAAM,CAAC,EAAE,MAAM,EAAE,EAAE,GAAG,2BAA2B,EAAE,aAAa,EAAE,KAAK,EAAE,EAAE,CAAC,CAC7E,CAAA;QACD,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;IACvC,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,oEAAoE,EAAE,GAAG,EAAE;QAC5E,MAAM,MAAM,GAAG,sBAAsB,CACnC,MAAM,CAAC;YACL,WAAW,EAAE,SAAS;YACtB,GAAG,EAAE,EAAE,OAAO,EAAE,6BAA6B,EAAE,MAAM,EAAE,EAAE,oBAAoB,EAAE,IAAI,EAAE,EAAE;SACxF,CAAC,CACH,CAAA;QACD,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAA;QACvC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;QACvC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAA;IACxC,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,sEAAsE,EAAE,GAAG,EAAE;QAC9E,MAAM,MAAM,GAAG,sBAAsB,CACnC,MAAM,CAAC,EAAE,WAAW,EAAE,SAAS,EAAE,GAAG,EAAE,EAAE,OAAO,EAAE,6BAA6B,EAAE,EAAE,CAAC,CACpF,CAAA;QACD,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAA;QAC/C,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;QACvC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,KAAK,gBAAgB,CAAC,EAAE,MAAM,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;IACvF,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,6CAA6C,EAAE,GAAG,EAAE;QACrD,MAAM,MAAM,GAAG,sBAAsB,CAAC,MAAM,CAAC,EAAE,GAAG,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC,CAAA;QACvE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;QACrC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;QACvC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,KAAK,SAAS,CAAC,EAAE,MAAM,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;IAChF,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,kFAAkF,EAAE,GAAG,EAAE;QAC1F,MAAM,MAAM,GAAG,sBAAsB,CACnC,MAAM,CAAC,EAAE,MAAM,EAAE,EAAE,GAAG,2BAA2B,EAAE,cAAc,EAAE,KAAK,EAAE,EAAE,CAAC,CAC9E,CAAA;QACD,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAA;QAC/C,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,KAAK,SAAS,CAAC,EAAE,MAAM,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;IAChF,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,kDAAkD,EAAE,GAAG,EAAE;QAC1D,MAAM,MAAM,GAAG,sBAAsB,CAAC,MAAM,CAAC,EAAE,YAAY,EAAE,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,CAAA;QACjF,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;QACrC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;IACzC,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,+DAA+D,EAAE,GAAG,EAAE;QACvE,MAAM,MAAM,GAAG,sBAAsB,CAAC,MAAM,EAAE,CAAC,CAAA;QAC/C,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC;YACjD,eAAe;YACf,iBAAiB;YACjB,kBAAkB;SACnB,CAAC,CAAA;QACF,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC;YAC9C,aAAa;YACb,SAAS;YACT,gBAAgB;YAChB,eAAe;YACf,gBAAgB;YAChB,SAAS;YACT,WAAW;SACZ,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,8BAA8B,EAAE,GAAG,EAAE;QACtC,MAAM,MAAM,GAAG,sBAAsB,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,0BAA0B,EAAE,CAAC,CAAC,CAAA;QAC1F,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,KAAK,WAAW,CAAC,EAAE,KAAK,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAA;QAClF,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,KAAK,WAAW,CAAC,EAAE,MAAM,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;IAC/E,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA;AAEF,QAAQ,CAAC,oBAAoB,EAAE,GAAG,EAAE;IAClC,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC,UAAU,CAAA;IACzC,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAA;IAErC,SAAS,CAAC,GAAG,EAAE;QACb,OAAO,CAAC,GAAG,CAAC,UAAU,GAAG,UAAU,CAAA;QACnC,OAAO,CAAC,GAAG,CAAC,QAAQ,GAAG,QAAQ,CAAA;QAC/B,UAAU,EAAE,CAAA;IACd,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,iDAAiD,EAAE,KAAK,IAAI,EAAE;QAC/D,OAAO,CAAC,GAAG,CAAC,UAAU,GAAG,YAAY,CAAA;QACrC,UAAU,CAAC,EAAE,OAAO,EAAE,qBAAqB,EAAE,CAAC,CAAA;QAC9C,MAAM,EAAE,GAAG;YACT,QAAQ,EAAE;gBACR,SAAS,EAAE,KAAK,EAAE,EAAE,KAAK,EAAqC,EAAE,EAAE,CAChE,KAAK,CAAC,UAAU,KAAK,qBAAqB,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI;aACzF;YACD,WAAW,EAAE;gBACX,SAAS,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,UAAU,EAAE,IAAI,IAAI,CAAC,0BAA0B,CAAC,EAAE,CAAC;aAC9E;SACF,CAAA;QACD,MAAM,MAAM,GAAG,MAAM,kBAAkB,CAAC,EAAE,CAAC,CAAA;QAC3C,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAA;QACvC,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAA;QAC7C,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAA;IAC7D,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,iCAAiC,EAAE,KAAK,IAAI,EAAE;QAC/C,OAAO,CAAC,GAAG,CAAC,UAAU,GAAG,YAAY,CAAA;QACrC,UAAU,CAAC,EAAE,OAAO,EAAE,qBAAqB,EAAE,CAAC,CAAA;QAC9C,MAAM,EAAE,GAAG,EAAE,QAAQ,EAAE,EAAE,SAAS,EAAE,KAAK,IAAI,EAAE,CAAC,IAAI,EAAE,EAAE,CAAA;QACxD,MAAM,MAAM,GAAG,MAAM,kBAAkB,CAAC,EAAE,CAAC,CAAA;QAC3C,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,QAAQ,EAAE,CAAA;QACrC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAA;IACzC,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA"}

package/dist/api/handlers.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"handlers.d.ts","sourceRoot":"","sources":["../../src/api/handlers.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,aAAa,CAAA;AA+/B5C,iFAAiF;AACjF,wBAAgB,wBAAwB,IAAI,IAAI,CAE/C;AA8JD,wBAAgB,iBAAiB,CAAC,YAAY,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAS9E;AAkQD,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,SAAS,GAAG,IAAI,CAkrUzD"}
+{"version":3,"file":"handlers.d.ts","sourceRoot":"","sources":["../../src/api/handlers.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,aAAa,CAAA;AA+/B5C,iFAAiF;AACjF,wBAAgB,wBAAwB,IAAI,IAAI,CAE/C;AA8JD,wBAAgB,iBAAiB,CAAC,YAAY,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAS9E;AAyRD,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,SAAS,GAAG,IAAI,CA0tUzD"}

package/dist/api/handlers.js

@@ -1102,6 +1102,27 @@ async function checkRateLimitAsync(limiter, key) {
 function clientIp(request) {
     return getClientIp(request);
 }
+/**
+ * Compute a before/after diff of top-level scalar (string/number/boolean) keys
+ * between a stored record and an incoming patch. Used to audit settings changes
+ * without ever logging nested objects (which may hold secret blobs).
+ */
+function diffScalarKeys(previous, next) {
+    const isScalar = (v) => typeof v === 'string' || typeof v === 'number' || typeof v === 'boolean' || v === null;
+    const changes = [];
+    for (const key of Object.keys(next)) {
+        const to = next[key];
+        if (!isScalar(to))
+            continue;
+        const from = previous[key];
+        if (isScalar(from) && from === to)
+            continue;
+        if (!isScalar(from) && from !== undefined)
+            continue;
+        changes.push({ key, from: isScalar(from) ? from : undefined, to });
+    }
+    return changes;
+}
 const MAX_CONCURRENT_SESSIONS = 5;
 /**
  * After a successful primary-credential check, prune the user's active sessions
@@ -6886,20 +6907,18 @@ export function registerCMSRoutes(router) {
                 return accessErr;
             const { generateMetaTags } = await import('../seo/meta-tags.js');
             const { resolveRobotsDirectives } = await import('../seo/robots.js');
+            const { getSeoOverrides, applySeoOverrides } = await import('../seo/config-store.js');
             const data = doc.data || {};
-            const settingsGlobal = await db().document.findFirst({
-                where: { collection: 'settings', deletedAt: null },
-                select: { data: true },
-            });
-            const settingsData = settingsGlobal?.data && typeof settingsGlobal.data === 'object'
-                ? settingsGlobal.data
-                : {};
+            // Read robots defaults from the SAME effective SEO config the public
+            // renderer (`composePageMeta`) and General Settings use — never the
+            // legacy `settings` global — so this preview can't drift from reality.
+            const effectiveSeo = applySeoOverrides(getActuateConfig(), await getSeoOverrides(db()))?.seo;
             const robots = resolveRobotsDirectives({
                 pageData: data,
                 settings: {
-                    defaultNoIndex: settingsData.defaultNoIndex === true,
-                    defaultNoFollow: settingsData.defaultNoFollow === true,
-                    noIndexNonProduction: settingsData.noIndexNonProduction === true,
+                    defaultNoIndex: effectiveSeo?.robots?.defaultNoIndex,
+                    defaultNoFollow: effectiveSeo?.robots?.defaultNoFollow,
+                    noIndexNonProduction: effectiveSeo?.robots?.noIndexNonProduction,
                 },
                 environment: process.env.VERCEL_ENV ?? process.env.NODE_ENV,
             });
@@ -7138,6 +7157,25 @@ export function registerCMSRoutes(router) {
             return internalError(err, 'seo/config PUT');
         }
     });
+    // Effective, computed crawl/index status for the General Settings card.
+    // Reads the SAME effective SEO config the public renderer uses, so the badge
+    // shown to editors never drifts from what search engines actually see.
+    router.get('/seo/index-status', async (request) => {
+        try {
+            const auth = await requireAuth(request);
+            if (auth.error)
+                return auth.error;
+            const roleErr = requireRole(auth.session.role, ADMIN_ROLES);
+            if (roleErr)
+                return roleErr;
+            const { getSiteIndexStatus } = await import('../seo/index-status.js');
+            const status = await getSiteIndexStatus(db());
+            return json({ data: status });
+        }
+        catch (err) {
+            return internalError(err, 'seo/index-status GET');
+        }
+    });
     // ---------------------------------------------------------------------------
     // Technical SEO — sitemap status, crawl settings, robots.txt editor.
     // All backed by the `module` block of the SEO overrides document.
@@ -8874,10 +8912,13 @@ export function registerCMSRoutes(router) {
                 build: async () => {
                     const ctx = buildActionContext(auth.session, db());
                     const global = await getGlobal(params.slug, ctx);
-                    if (!global) {
-                        return errorResponse('Global not found', 404);
-                    }
-                    return { data: global };
+                    // Globals are upsert-on-write: a slug with no row yet (fresh install,
+                    // never-saved settings) is a valid EMPTY state, not an error. Return
+                    // {} so the admin editor (e.g. the Settings page) loads cleanly before
+                    // the first save, and the next PUT creates the document. The public
+                    // `/public/globals/:slug` route keeps its config-gated 404 for
+                    // genuinely undeclared globals.
+                    return { data: global ?? {} };
                 },
             });
         }
@@ -8900,7 +8941,30 @@ export function registerCMSRoutes(router) {
             }
             const body = (await request.json());
             const ctx = buildActionContext(auth.session, db());
+            const previous = await getGlobal(params.slug, ctx).catch(() => null);
             const global = await updateGlobal(params.slug, body, ctx);
+            // Audit settings changes (title/tagline/URL/locale/timezone/etc.) with a
+            // per-key before/after diff so the audit trail records what changed and
+            // who changed it. Scalar values only — we never log nested secret blobs.
+            try {
+                const changes = diffScalarKeys(previous ?? {}, body);
+                if (changes.length > 0) {
+                    void logEvent({
+                        event: 'settings_changed',
+                        userId: auth.session.userId,
+                        ipAddress: getClientIp(request),
+                        details: {
+                            global: params.slug,
+                            source: 'database',
+                            environment: process.env.VERCEL_ENV ?? process.env.NODE_ENV ?? null,
+                            changes,
+                        },
+                    });
+                }
+            }
+            catch {
+                // Audit failures must never block the write.
+            }
             return json({ data: global });
         }
         catch (err) {