@aeptus/aexeo-emdash 0.8.16 → 0.8.18

package/CHANGELOG.md

@@ -6,6 +6,80 @@ and the project follows [Semantic Versioning](https://semver.org/).
 
 ## [Unreleased]
 
+## [0.8.18] - 2026-09-27
+
+Updates the EmDash integration to the current plugin and content APIs.
+
+**Compatibility target:** EmDash `>=0.41.0 <0.42.0`.
+
+### Fixed
+
+- **Sandbox access declaration:** replace obsolete capability strings with
+  `content:read` and conditional `network:request`, scoped to the configured
+  evaluator host. Remove unused schema, artifact, KV, and IndexNow host grants.
+- **Typed `blocks` content:** distinguish EmDash block compositions from
+  Portable Text and adapt their editorial strings into the evaluator's text
+  format instead of discarding them.
+- **Routes and translations:** use EmDash's `getPublicUrl()` and
+  `getTranslations()` APIs for collection patterns, locale paths, trailing
+  slash policy, and hreflang alternates. Keep draft and unroutable entries
+  under stable collection/ID keys, and link only to URLs the host resolves.
+- **Sandbox save evaluation:** `content:afterSave` now persists and evaluates
+  the saved item through the configured sidecar, matching configured mode.
+- **Route migrations:** remove obsolete document and finding entries when a
+  document's resolved route changes or a successful refresh no longer finds
+  an entry in the selected collections.
+
+### Changed
+
+- Bump the EmDash peer and development ranges to `0.41.x`; update the README
+  and install guide to name the supported range and sandbox save behavior.
+- Add Vitest coverage using EmDash's official plugin runtime test host for
+  sandbox hooks, blocks extraction, resolved URLs, and translation alternates.
+
+## [0.8.17] - 2026-05-29
+
+Hotfix release. Closes the production admin-route regression
+Aeptus reported on 0.8.16 + emdash@0.17.2.
+
+### Fixed
+
+- **`TypeError: Cannot read properties of undefined (reading 'type')`
+  at `/_emdash/api/plugins/aexeo-emdash/admin`.** The legacy
+  Block Kit admin route assumed `ctx.input` is always a complete
+  `BlockInteraction`. EmDash 0.17 reaches the endpoint with
+  empty / partial bodies on admin and widget hydration paths;
+  the first `body.type === "page_load"` read crashed on
+  undefined.
+  Fix: added `normalizeInteraction(input: unknown): BlockInteraction`
+  at the top of dispatch in both `configured.ts` (production-hit
+  path) and `sandbox-entry.ts` (same bug shape in the sandbox-
+  bundled flavor). Defaults follow Aeptus's hardening
+  suggestion:
+  - Missing / non-object input → `page_load /findings`.
+  - `page_load` with missing or empty `page` → `/findings`.
+  - `block_action` with missing `action_id` → `""` (falls
+    through to `notFound("")` rather than throwing).
+  - `form_submit` with missing `values` → `{}` (downstream
+    code already guards "no route picked").
+  Verified against 10 edge-case inputs (undefined, null, empty
+  object, missing/empty page, missing action_id, missing
+  values, unknown type, string input, valid payload) — all
+  produce the expected default without throwing.
+- **`RouteContext` / `RouteInput` types loosened.** `input`
+  goes from `BlockInteraction` to `unknown` because the
+  upstream guarantee from emdash 0.17 is genuinely weaker. The
+  compile-time shape now lives inside the normalizer's return
+  type, where it can be enforced uniformly across both
+  handlers.
+
+### Bundle deltas
+
+- `configured.js` +985 bytes
+- `sandbox-entry.js` +940 bytes
+- `admin.js` unchanged (React admin pages don't include the
+  Block Kit admin route)
+
 ## [0.8.16] - 2026-05-29
 
 Plugin-only release confirming source-level compatibility with

package/INSTALL.md

@@ -31,7 +31,8 @@ when it's actually needed.
   (`@astrojs/cloudflare` + `@emdash-cms/cloudflare`'s `sandbox()`
   runner is fine — sandboxed plugins use Worker Loader, configured
   plugins don't, but both adapters import cleanly).
-- emdash 0.7.0 or later as a peer dependency.
+- EmDash `>=0.41.0 <0.42.0` as a peer dependency. The integration
+  coverage targets `0.41.0` with EmDash's official plugin test host.
 
 ### Install
 
@@ -106,9 +107,8 @@ no sidecar to deploy.
    — toast says "Refreshed N routes (M findings across K documents)"
    and the table populates.
 
-4. Save a document: the `content:afterSave` hook auto-evaluates that
-   one document; refresh the findings page and that route's findings
-   are updated. (The dashboard widget also picks up the new score.)
+4. Save a document: `content:afterSave` evaluates that document. Reload
+   the findings page to see the updated row and dashboard score.
 
 ### Production deploy
 
@@ -171,8 +171,8 @@ Pre-flight before bumping:
 
 1. Look up the plugin version's tested emdash range in our
    [CHANGELOG](./CHANGELOG.md). The latest plugin version's
-   `Compatibility` line says e.g. "tested against emdash 0.7.0
-   through 0.8.0." If the emdash version you want is **inside that
+   `Compatibility` line names the supported EmDash range and test-host
+   target. If the EmDash version you want is **inside that
    range**, the bump is safe. If it's **above the range**, treat it
    as untested.
 2. If untested, scan the emdash release notes for breaking changes
@@ -181,7 +181,7 @@ Pre-flight before bumping:
    - Hook signatures (`content:afterSave`, etc.)
    - Block Kit element schemas (banner variants, button styles,
      table column formats)
-   - Capability validation strings (`read:content`, `network:fetch`)
+   - Capability names (`content:read`, `network:request`)
    - The `definePlugin` API
    - The `createPlugin` / configured-plugin descriptor contract
    If any of those changed, expect to bump the plugin too.
@@ -240,9 +240,8 @@ Trade-offs vs. configured mode:
   prevents the plugin from ever reading host state directly.
 - **Con**: separate sidecar Worker to deploy and maintain; an
   EVAL_TOKEN to rotate; a Setup admin page to configure. The
-  `content:afterSave` hook is also non-functional in emdash 0.7.x's
-  sandbox (post-response bridge invalidation — known upstream issue);
-  evaluation is manual-Refresh-only.
+  `content:afterSave` hook evaluates through the sidecar after you save
+  its URL and token on the Setup page. Refresh still runs a full-site sweep.
 
 ```js
 // astro.config.mjs (sandboxed mode)

package/README.md

@@ -47,12 +47,15 @@ troubleshooting list, see [INSTALL.md](./INSTALL.md).
   answer-pack, external-trust dimensions). Banner appears below 60.
 - **Refresh button**: re-evaluate every document in the configured
   collections (`posts`, `pages` by default).
-- **Auto-evaluate on save**: emdash's `content:afterSave` hook fires,
-  re-evaluates the saved document, updates the findings table.
+- **Auto-evaluate on save**: EmDash's `content:afterSave` hook evaluates
+  the saved document and updates its findings. Sandboxed installs need a
+  configured evaluator sidecar; configured installs run evaluation in-process.
 
 ## Compatibility
 
-- emdash `>= 0.7.0` (peer dep)
+- EmDash `>= 0.41.0 < 0.42.0` (peer dependency; current supported range)
+- Runtime integration coverage targets EmDash `0.41.0` via the official
+  `@emdash-cms/plugin-test` host.
 - Cloudflare Workers via `@astrojs/cloudflare`. The plugin uses
   Cloudflare-specific APIs and silently no-ops on the Node adapter.
 - WASM eval ships with the package; the consumer's Vite/Wrangler

package/dist/adapter.d.ts

@@ -5,6 +5,7 @@ export interface EmdashContentItem {
     slug: string | null;
     status: string;
     locale: string | null;
+    translationGroup?: string | null;
     data: Record<string, unknown>;
     seo?: {
         title?: string | null;
@@ -18,11 +19,41 @@ export interface EmdashContentMeta {
     slug: string | null;
     status: string;
     title: string;
+    /** Exact URL returned by EmDash, or null when this entry has no public route. */
+    publicUrl: string | null;
+}
+export interface ContentUrlApi {
+    getPublicUrl(collection: string, id: string): Promise<string | null>;
+    getTranslations(collection: string, id: string): Promise<{
+        translationGroup: string;
+        translations: Array<{
+            id: string;
+            locale: string | null;
+            slug: string | null;
+            status: string;
+            updatedAt: string;
+        }>;
+    }>;
 }
 export interface AdaptedContent {
     document: EmdashDocument;
     meta: EmdashContentMeta;
 }
+/**
+ * Adapt a stored content row using EmDash's route resolver. The host API
+ * accounts for collection URL patterns, locale prefixes, and slash policy;
+ * slug-derived paths are not equivalent to the site's actual public URLs.
+ */
+export declare function adaptContentItemWithContext(content: EmdashContentItem, contentApi: ContentUrlApi, defaultLocale?: string): Promise<AdaptedContent>;
+/**
+ * Synchronous adapter for callers that do not have a host content API.
+ * It deliberately uses a stable identity route; callers should use
+ * adaptContentItemWithContext whenever EmDash can resolve the public URL.
+ */
 export declare function contentItemToEmdashDocument(content: EmdashContentItem): EmdashDocument;
-export declare function adaptContentItem(content: EmdashContentItem): AdaptedContent;
+export declare function adaptContentItem(content: EmdashContentItem, options?: {
+    route?: string;
+    publicUrl?: string | null;
+    defaultLocale?: string;
+}): AdaptedContent;
 //# sourceMappingURL=adapter.d.ts.map

package/dist/adapter.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"adapter.d.ts","sourceRoot":"","sources":["../src/adapter.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAqB,MAAM,YAAY,CAAC;AAmBpE,MAAM,WAAW,iBAAiB;IAChC,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC9B,GAAG,CAAC,EAAE;QACJ,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QACtB,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QAC5B,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;KAC3B,CAAC;CACH;AAOD,MAAM,WAAW,iBAAiB;IAChC,EAAE,EAAE,MAAM,CAAC;IACX,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,MAAM,EAAE,MAAM,CAAC;IAIf,KAAK,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,cAAc;IAC7B,QAAQ,EAAE,cAAc,CAAC;IACzB,IAAI,EAAE,iBAAiB,CAAC;CACzB;AAED,wBAAgB,2BAA2B,CACzC,OAAO,EAAE,iBAAiB,GACzB,cAAc,CAEhB;AAED,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,iBAAiB,GAAG,cAAc,CAkC3E"}
+{"version":3,"file":"adapter.d.ts","sourceRoot":"","sources":["../src/adapter.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAqB,MAAM,YAAY,CAAC;AAEpE,MAAM,WAAW,iBAAiB;IAChC,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,gBAAgB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC9B,GAAG,CAAC,EAAE;QACJ,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QACtB,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QAC5B,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;KAC3B,CAAC;CACH;AAED,MAAM,WAAW,iBAAiB;IAChC,EAAE,EAAE,MAAM,CAAC;IACX,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,iFAAiF;IACjF,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;CAC1B;AAED,MAAM,WAAW,aAAa;IAC5B,YAAY,CAAC,UAAU,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IACrE,eAAe,CACb,UAAU,EAAE,MAAM,EAClB,EAAE,EAAE,MAAM,GACT,OAAO,CAAC;QACT,gBAAgB,EAAE,MAAM,CAAC;QACzB,YAAY,EAAE,KAAK,CAAC;YAClB,EAAE,EAAE,MAAM,CAAC;YACX,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;YACtB,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;YACpB,MAAM,EAAE,MAAM,CAAC;YACf,SAAS,EAAE,MAAM,CAAC;SACnB,CAAC,CAAC;KACJ,CAAC,CAAC;CACJ;AAED,MAAM,WAAW,cAAc;IAC7B,QAAQ,EAAE,cAAc,CAAC;IACzB,IAAI,EAAE,iBAAiB,CAAC;CACzB;AAED;;;;GAIG;AACH,wBAAsB,2BAA2B,CAC/C,OAAO,EAAE,iBAAiB,EAC1B,UAAU,EAAE,aAAa,EACzB,aAAa,CAAC,EAAE,MAAM,GACrB,OAAO,CAAC,cAAc,CAAC,CA2CzB;AAED;;;;GAIG;AACH,wBAAgB,2BAA2B,CACzC,OAAO,EAAE,iBAAiB,GACzB,cAAc,CAEhB;AAED,wBAAgB,gBAAgB,CAC9B,OAAO,EAAE,iBAAiB,EAC1B,OAAO,GAAE;IACP,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,aAAa,CAAC,EAAE,MAAM,CAAC;CACnB,GACL,cAAc,CAgChB"}

package/dist/configured.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"configured.d.ts","sourceRoot":"","sources":["../src/configured.ts"],"names":[],"mappings":"AAgCA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AA0HrD,MAAM,WAAW,uBAAuB;IACtC;;;OAGG;IACH,WAAW,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAEhC;;;OAGG;IACH,kBAAkB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAEvC;;;OAGG;IACH,kBAAkB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAEvC;;;;;OAKG;IACH,YAAY,CAAC,EAAE,SAAS,WAAW,EAAE,CAAC;CACvC;AAED,wBAAgB,YAAY,CAAC,OAAO,GAAE,uBAA4B,GAAG,OAAO,CA4H3E;AAID,eAAe,YAAY,CAAC"}
+{"version":3,"file":"configured.d.ts","sourceRoot":"","sources":["../src/configured.ts"],"names":[],"mappings":"AAgCA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AA0HrD,MAAM,WAAW,uBAAuB;IACtC;;;OAGG;IACH,WAAW,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAEhC;;;OAGG;IACH,kBAAkB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAEvC;;;OAGG;IACH,kBAAkB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAEvC;;;;;OAKG;IACH,YAAY,CAAC,EAAE,SAAS,WAAW,EAAE,CAAC;CACvC;AAED,wBAAgB,YAAY,CAAC,OAAO,GAAE,uBAA4B,GAAG,OAAO,CA0H3E;AAID,eAAe,YAAY,CAAC"}