@beechcms/api 0.6.0-preview.1 → 0.6.0-preview.2

package/src/shared/d1-activity-logger.ts

@@ -1,67 +1,67 @@
-// SPDX-License-Identifier: BUSL-1.1
-// Copyright (c) 2024–2026 Flavio De Musso. All rights reserved.
-// See LICENSE in the repository root for license terms.
-
-/// <reference types="@cloudflare/workers-types" />
-import type { IActivityLogger, ActivityLogEntry, IClock, IIdGenerator } from '@beechcms/core'
-
-const ACTIVITY_LOG_INSERT_SQL =
-  `INSERT INTO activity_logs
-     (id, user_id, user_email, user_name, action, entity_type, entity_id, entity_slug, details)
-   VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?)`
-
-const FALLBACK_USER_EMAIL = 'unknown'
-
-type ScheduleBackgroundTask = (task: Promise<unknown>) => void
-
-/**
- * D1-backed implementation of {@link IActivityLogger}.
- *
- * When `scheduleBackgroundTask` is provided (production path, wired to
- * `c.executionCtx.waitUntil`), the INSERT runs after the response is sent so
- * audit logging never adds latency to the user-facing request. When absent
- * (tests, scripts), the INSERT runs inline and any errors are logged.
- */
-export class D1ActivityLogger implements IActivityLogger {
-  constructor(
-    private readonly database: D1Database,
-    private readonly clock: IClock,
-    private readonly idGenerator: IIdGenerator,
-    private readonly scheduleBackgroundTask?: ScheduleBackgroundTask
-  ) {}
-
-  log(entry: ActivityLogEntry): Promise<void> | void {
-    const insertPromise = this.runInsert(entry)
-
-    if (this.scheduleBackgroundTask) {
-      this.scheduleBackgroundTask(insertPromise)
-      return
-    }
-
-    return insertPromise
-  }
-
-  private async runInsert(entry: ActivityLogEntry): Promise<void> {
-    try {
-      const recordId = this.idGenerator.uuid()
-      const serializedDetails = entry.details ? JSON.stringify(entry.details) : null
-
-      await this.database
-        .prepare(ACTIVITY_LOG_INSERT_SQL)
-        .bind(
-          recordId,
-          entry.actor.id,
-          entry.actor.email || FALLBACK_USER_EMAIL,
-          entry.actor.name ?? null,
-          entry.action,
-          entry.entityType,
-          entry.entityId,
-          entry.entitySlug ?? null,
-          serializedDetails
-        )
-        .run()
-    } catch (error) {
-      console.error('D1ActivityLogger: failed to persist activity entry', error)
-    }
-  }
-}
+// SPDX-License-Identifier: BUSL-1.1
+// Copyright (c) 2024–2026 Flavio De Musso. All rights reserved.
+// See LICENSE in the repository root for license terms.
+
+/// <reference types="@cloudflare/workers-types" />
+import type { IActivityLogger, ActivityLogEntry, IClock, IIdGenerator } from '@beechcms/core'
+
+const ACTIVITY_LOG_INSERT_SQL =
+  `INSERT INTO activity_logs
+     (id, user_id, user_email, user_name, action, entity_type, entity_id, entity_slug, details)
+   VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?)`
+
+const FALLBACK_USER_EMAIL = 'unknown'
+
+type ScheduleBackgroundTask = (task: Promise<unknown>) => void
+
+/**
+ * D1-backed implementation of {@link IActivityLogger}.
+ *
+ * When `scheduleBackgroundTask` is provided (production path, wired to
+ * `c.executionCtx.waitUntil`), the INSERT runs after the response is sent so
+ * audit logging never adds latency to the user-facing request. When absent
+ * (tests, scripts), the INSERT runs inline and any errors are logged.
+ */
+export class D1ActivityLogger implements IActivityLogger {
+  constructor(
+    private readonly database: D1Database,
+    private readonly clock: IClock,
+    private readonly idGenerator: IIdGenerator,
+    private readonly scheduleBackgroundTask?: ScheduleBackgroundTask
+  ) {}
+
+  log(entry: ActivityLogEntry): Promise<void> | void {
+    const insertPromise = this.runInsert(entry)
+
+    if (this.scheduleBackgroundTask) {
+      this.scheduleBackgroundTask(insertPromise)
+      return
+    }
+
+    return insertPromise
+  }
+
+  private async runInsert(entry: ActivityLogEntry): Promise<void> {
+    try {
+      const recordId = this.idGenerator.uuid()
+      const serializedDetails = entry.details ? JSON.stringify(entry.details) : null
+
+      await this.database
+        .prepare(ACTIVITY_LOG_INSERT_SQL)
+        .bind(
+          recordId,
+          entry.actor.id,
+          entry.actor.email || FALLBACK_USER_EMAIL,
+          entry.actor.name ?? null,
+          entry.action,
+          entry.entityType,
+          entry.entityId,
+          entry.entitySlug ?? null,
+          serializedDetails
+        )
+        .run()
+    } catch (error) {
+      console.error('D1ActivityLogger: failed to persist activity entry', error)
+    }
+  }
+}

package/src/shared/d1-analytics.repository.test.ts

@@ -1,78 +1,78 @@
-// SPDX-License-Identifier: BUSL-1.1
-// Copyright (c) 2024–2026 Flavio De Musso. All rights reserved.
-// See LICENSE in the repository root for license terms.
-
-import { describe, it, expect, vi } from 'vitest'
-import { D1AnalyticsRepository } from './d1-analytics.repository'
-import { FixedClock } from './fixed-clock'
-
-const FIXED_NOW_MS = 1700000000_000
-const EXPECTED_DAY_BUCKET = Math.floor(FIXED_NOW_MS / 1000 / 86400) * 86400
-
-function makeMockDb(allResults: unknown[] = [], firstResult: unknown = null) {
-  const allMock = vi.fn().mockResolvedValue({ results: allResults })
-  const firstMock = vi.fn().mockResolvedValue(firstResult)
-  const runMock = vi.fn().mockResolvedValue({ success: true })
-  const bindMock = vi.fn(() => ({ all: allMock, first: firstMock, run: runMock }))
-  const prepareMock = vi.fn(() => ({ bind: bindMock }))
-  return { db: { prepare: prepareMock } as any, prepareMock, bindMock, allMock, firstMock, runMock }
-}
-
-describe('D1AnalyticsRepository', () => {
-  describe('recordRequest', () => {
-    it('issues an INSERT ... ON CONFLICT upsert with seed and computed day bucket', async () => {
-      const { db, prepareMock, bindMock, runMock } = makeMockDb()
-      await new D1AnalyticsRepository(db, new FixedClock(FIXED_NOW_MS)).recordRequest('posts')
-      const sql = prepareMock.mock.calls[0]![0] as string
-      expect(sql).toMatch(/INSERT INTO analytics/)
-      expect(sql).toMatch(/ON CONFLICT\(day_ts, metric, seed\) DO UPDATE SET value = value \+ 1/)
-      expect(bindMock).toHaveBeenCalledWith(EXPECTED_DAY_BUCKET, 'posts')
-      expect(runMock).toHaveBeenCalled()
-    })
-  })
-
-  describe('sumByMetric', () => {
-    it('binds requests metric, seed and since', async () => {
-      const { db, prepareMock, bindMock } = makeMockDb([], { total: 99 })
-      const total = await new D1AnalyticsRepository(db, new FixedClock(FIXED_NOW_MS)).sumByMetric('requests', 'posts', 1)
-      expect(total).toBe(99)
-      const sql = prepareMock.mock.calls[0]![0] as string
-      expect(sql).toMatch(/SELECT SUM\(value\) as total/)
-      expect(sql).toMatch(/WHERE metric = \? AND seed = \? AND day_ts >= \?/)
-      expect(bindMock).toHaveBeenCalledWith('requests', 'posts', 1)
-    })
-
-    it('returns 0 when SUM is null', async () => {
-      const { db } = makeMockDb([], { total: null })
-      const total = await new D1AnalyticsRepository(db, new FixedClock(FIXED_NOW_MS)).sumByMetric('visitors', '', 0)
-      expect(total).toBe(0)
-    })
-
-    it('returns 0 when no row matches', async () => {
-      const { db } = makeMockDb([], null)
-      const total = await new D1AnalyticsRepository(db, new FixedClock(FIXED_NOW_MS)).sumByMetric('requests', '', 0)
-      expect(total).toBe(0)
-    })
-  })
-
-  describe('groupByMetric', () => {
-    it('returns a date_label → count map filtered to metric=requests', async () => {
-      const { db, prepareMock, bindMock } = makeMockDb([
-        { date_label: '2026-01-01', daily_count: 10 },
-        { date_label: '2026-01-02', daily_count: 20 },
-      ])
-      const result = await new D1AnalyticsRepository(db, new FixedClock(FIXED_NOW_MS)).groupByMetric('posts', 1)
-      expect(result).toEqual({ '2026-01-01': 10, '2026-01-02': 20 })
-      const sql = prepareMock.mock.calls[0]![0] as string
-      expect(sql).toMatch(/strftime\('%Y-%m-%d', day_ts, 'unixepoch'\)/)
-      expect(sql).toMatch(/metric = 'requests'/)
-      expect(bindMock).toHaveBeenCalledWith('posts', 1)
-    })
-
-    it('skips rows with null date_label', async () => {
-      const { db } = makeMockDb([{ date_label: null, daily_count: 5 }])
-      const result = await new D1AnalyticsRepository(db, new FixedClock(FIXED_NOW_MS)).groupByMetric('', 0)
-      expect(result).toEqual({})
-    })
-  })
-})
+// SPDX-License-Identifier: BUSL-1.1
+// Copyright (c) 2024–2026 Flavio De Musso. All rights reserved.
+// See LICENSE in the repository root for license terms.
+
+import { describe, it, expect, vi } from 'vitest'
+import { D1AnalyticsRepository } from './d1-analytics.repository'
+import { FixedClock } from './fixed-clock'
+
+const FIXED_NOW_MS = 1700000000_000
+const EXPECTED_DAY_BUCKET = Math.floor(FIXED_NOW_MS / 1000 / 86400) * 86400
+
+function makeMockDb(allResults: unknown[] = [], firstResult: unknown = null) {
+  const allMock = vi.fn().mockResolvedValue({ results: allResults })
+  const firstMock = vi.fn().mockResolvedValue(firstResult)
+  const runMock = vi.fn().mockResolvedValue({ success: true })
+  const bindMock = vi.fn(() => ({ all: allMock, first: firstMock, run: runMock }))
+  const prepareMock = vi.fn(() => ({ bind: bindMock }))
+  return { db: { prepare: prepareMock } as any, prepareMock, bindMock, allMock, firstMock, runMock }
+}
+
+describe('D1AnalyticsRepository', () => {
+  describe('recordRequest', () => {
+    it('issues an INSERT ... ON CONFLICT upsert with seed and computed day bucket', async () => {
+      const { db, prepareMock, bindMock, runMock } = makeMockDb()
+      await new D1AnalyticsRepository(db, new FixedClock(FIXED_NOW_MS)).recordRequest('posts')
+      const sql = prepareMock.mock.calls[0]![0] as string
+      expect(sql).toMatch(/INSERT INTO analytics/)
+      expect(sql).toMatch(/ON CONFLICT\(day_ts, metric, seed\) DO UPDATE SET value = value \+ 1/)
+      expect(bindMock).toHaveBeenCalledWith(EXPECTED_DAY_BUCKET, 'posts')
+      expect(runMock).toHaveBeenCalled()
+    })
+  })
+
+  describe('sumByMetric', () => {
+    it('binds requests metric, seed and since', async () => {
+      const { db, prepareMock, bindMock } = makeMockDb([], { total: 99 })
+      const total = await new D1AnalyticsRepository(db, new FixedClock(FIXED_NOW_MS)).sumByMetric('requests', 'posts', 1)
+      expect(total).toBe(99)
+      const sql = prepareMock.mock.calls[0]![0] as string
+      expect(sql).toMatch(/SELECT SUM\(value\) as total/)
+      expect(sql).toMatch(/WHERE metric = \? AND seed = \? AND day_ts >= \?/)
+      expect(bindMock).toHaveBeenCalledWith('requests', 'posts', 1)
+    })
+
+    it('returns 0 when SUM is null', async () => {
+      const { db } = makeMockDb([], { total: null })
+      const total = await new D1AnalyticsRepository(db, new FixedClock(FIXED_NOW_MS)).sumByMetric('visitors', '', 0)
+      expect(total).toBe(0)
+    })
+
+    it('returns 0 when no row matches', async () => {
+      const { db } = makeMockDb([], null)
+      const total = await new D1AnalyticsRepository(db, new FixedClock(FIXED_NOW_MS)).sumByMetric('requests', '', 0)
+      expect(total).toBe(0)
+    })
+  })
+
+  describe('groupByMetric', () => {
+    it('returns a date_label → count map filtered to metric=requests', async () => {
+      const { db, prepareMock, bindMock } = makeMockDb([
+        { date_label: '2026-01-01', daily_count: 10 },
+        { date_label: '2026-01-02', daily_count: 20 },
+      ])
+      const result = await new D1AnalyticsRepository(db, new FixedClock(FIXED_NOW_MS)).groupByMetric('posts', 1)
+      expect(result).toEqual({ '2026-01-01': 10, '2026-01-02': 20 })
+      const sql = prepareMock.mock.calls[0]![0] as string
+      expect(sql).toMatch(/strftime\('%Y-%m-%d', day_ts, 'unixepoch'\)/)
+      expect(sql).toMatch(/metric = 'requests'/)
+      expect(bindMock).toHaveBeenCalledWith('posts', 1)
+    })
+
+    it('skips rows with null date_label', async () => {
+      const { db } = makeMockDb([{ date_label: null, daily_count: 5 }])
+      const result = await new D1AnalyticsRepository(db, new FixedClock(FIXED_NOW_MS)).groupByMetric('', 0)
+      expect(result).toEqual({})
+    })
+  })
+})

package/src/shared/d1-analytics.repository.ts

@@ -1,85 +1,85 @@
-// SPDX-License-Identifier: BUSL-1.1
-// Copyright (c) 2024–2026 Flavio De Musso. All rights reserved.
-// See LICENSE in the repository root for license terms.
-
-/// <reference types="@cloudflare/workers-types" />
-import type { IAnalyticsRepository, AnalyticsMetric, IClock } from '@beechcms/core'
-
-const SECONDS_PER_DAY = 86400
-
-/**
- * D1-backed implementation of {@link IAnalyticsRepository}.
- *
- * The underlying schema is long-format:
- * `analytics(day_ts, metric, seed, value)` with UNIQUE(day_ts, metric, seed).
- * Each row stores the counter for one (day, metric, seed) tuple. The
- * IAnalyticsRepository contract is metric-aware (the metric is selected via
- * a switch on the validated enum), and never interpolates user values into
- * SQL — the actual metric name is bound through a parameter.
- */
-export class D1AnalyticsRepository implements IAnalyticsRepository {
-  constructor(
-    private readonly database: D1Database,
-    private readonly clock: IClock,
-  ) {}
-
-  async recordRequest(seedSlug: string): Promise<void> {
-    const dayTimestamp = Math.floor(this.clock.nowSeconds() / SECONDS_PER_DAY) * SECONDS_PER_DAY
-    await this.database
-      .prepare(
-        `INSERT INTO analytics (day_ts, metric, seed, value)
-              VALUES (?, 'requests', ?, 1)
-         ON CONFLICT(day_ts, metric, seed) DO UPDATE SET value = value + 1`,
-      )
-      .bind(dayTimestamp, seedSlug)
-      .run()
-  }
-
-  async sumByMetric(
-    metric: AnalyticsMetric,
-    seedSlug: string,
-    sinceTimestamp: number,
-  ): Promise<number> {
-    const metricName = this.resolveMetricName(metric)
-    const row = await this.database
-      .prepare(
-        `SELECT SUM(value) as total
-           FROM analytics
-          WHERE metric = ? AND seed = ? AND day_ts >= ?`,
-      )
-      .bind(metricName, seedSlug, sinceTimestamp)
-      .first<{ total: number | null }>()
-    return row?.total ?? 0
-  }
-
-  async groupByMetric(
-    seedSlug: string,
-    sinceTimestamp: number,
-  ): Promise<Record<string, number>> {
-    const result = await this.database
-      .prepare(
-        `SELECT strftime('%Y-%m-%d', day_ts, 'unixepoch') as date_label,
-                SUM(value) as daily_count
-           FROM analytics
-          WHERE metric = 'requests' AND seed = ? AND day_ts >= ?
-          GROUP BY date_label
-          ORDER BY date_label ASC`,
-      )
-      .bind(seedSlug, sinceTimestamp)
-      .all<{ date_label: string | null; daily_count: number | null }>()
-
-    const grouped: Record<string, number> = {}
-    for (const row of result.results ?? []) {
-      if (row.date_label === null) continue
-      grouped[row.date_label] = row.daily_count ?? 0
-    }
-    return grouped
-  }
-
-  private resolveMetricName(metric: AnalyticsMetric): string {
-    switch (metric) {
-      case 'requests': return 'requests'
-      case 'visitors': return 'visitors'
-    }
-  }
-}
+// SPDX-License-Identifier: BUSL-1.1
+// Copyright (c) 2024–2026 Flavio De Musso. All rights reserved.
+// See LICENSE in the repository root for license terms.
+
+/// <reference types="@cloudflare/workers-types" />
+import type { IAnalyticsRepository, AnalyticsMetric, IClock } from '@beechcms/core'
+
+const SECONDS_PER_DAY = 86400
+
+/**
+ * D1-backed implementation of {@link IAnalyticsRepository}.
+ *
+ * The underlying schema is long-format:
+ * `analytics(day_ts, metric, seed, value)` with UNIQUE(day_ts, metric, seed).
+ * Each row stores the counter for one (day, metric, seed) tuple. The
+ * IAnalyticsRepository contract is metric-aware (the metric is selected via
+ * a switch on the validated enum), and never interpolates user values into
+ * SQL — the actual metric name is bound through a parameter.
+ */
+export class D1AnalyticsRepository implements IAnalyticsRepository {
+  constructor(
+    private readonly database: D1Database,
+    private readonly clock: IClock,
+  ) {}
+
+  async recordRequest(seedSlug: string): Promise<void> {
+    const dayTimestamp = Math.floor(this.clock.nowSeconds() / SECONDS_PER_DAY) * SECONDS_PER_DAY
+    await this.database
+      .prepare(
+        `INSERT INTO analytics (day_ts, metric, seed, value)
+              VALUES (?, 'requests', ?, 1)
+         ON CONFLICT(day_ts, metric, seed) DO UPDATE SET value = value + 1`,
+      )
+      .bind(dayTimestamp, seedSlug)
+      .run()
+  }
+
+  async sumByMetric(
+    metric: AnalyticsMetric,
+    seedSlug: string,
+    sinceTimestamp: number,
+  ): Promise<number> {
+    const metricName = this.resolveMetricName(metric)
+    const row = await this.database
+      .prepare(
+        `SELECT SUM(value) as total
+           FROM analytics
+          WHERE metric = ? AND seed = ? AND day_ts >= ?`,
+      )
+      .bind(metricName, seedSlug, sinceTimestamp)
+      .first<{ total: number | null }>()
+    return row?.total ?? 0
+  }
+
+  async groupByMetric(
+    seedSlug: string,
+    sinceTimestamp: number,
+  ): Promise<Record<string, number>> {
+    const result = await this.database
+      .prepare(
+        `SELECT strftime('%Y-%m-%d', day_ts, 'unixepoch') as date_label,
+                SUM(value) as daily_count
+           FROM analytics
+          WHERE metric = 'requests' AND seed = ? AND day_ts >= ?
+          GROUP BY date_label
+          ORDER BY date_label ASC`,
+      )
+      .bind(seedSlug, sinceTimestamp)
+      .all<{ date_label: string | null; daily_count: number | null }>()
+
+    const grouped: Record<string, number> = {}
+    for (const row of result.results ?? []) {
+      if (row.date_label === null) continue
+      grouped[row.date_label] = row.daily_count ?? 0
+    }
+    return grouped
+  }
+
+  private resolveMetricName(metric: AnalyticsMetric): string {
+    switch (metric) {
+      case 'requests': return 'requests'
+      case 'visitors': return 'visitors'
+    }
+  }
+}

package/src/shared/d1-content-scan.repository.test.ts

@@ -1,80 +1,80 @@
-// SPDX-License-Identifier: BUSL-1.1
-// Copyright (c) 2024–2026 Flavio De Musso. All rights reserved.
-// See LICENSE in the repository root for license terms.
-
-import { describe, it, expect, vi } from 'vitest'
-import type { Seed } from '@beechcms/core'
-import { D1ContentScanRepository } from './d1-content-scan.repository'
-
-function makeMockDb(allResults: unknown[] = []) {
-  const allMock = vi.fn().mockResolvedValue({ results: allResults })
-  const prepareMock = vi.fn(() => ({ all: allMock }))
-  return { db: { prepare: prepareMock } as any, prepareMock, allMock }
-}
-
-describe('D1ContentScanRepository', () => {
-  it('returns empty set if seeds list is empty', async () => {
-    const { db, prepareMock } = makeMockDb()
-    const repo = new D1ContentScanRepository(db)
-    const result = await repo.getReferencedMediaKeys([])
-    expect(result.size).toBe(0)
-    expect(prepareMock).not.toHaveBeenCalled()
-  })
-
-  it('skips seeds with no file branches', async () => {
-    const { db, prepareMock } = makeMockDb()
-    const repo = new D1ContentScanRepository(db)
-    const seedWithoutFile: Seed = {
-      slug: 'posts',
-      label: 'Post',
-      displayNameAlias: 'title',
-      branches: [
-        { id: 'br_01', alias: 'title', type: 'text', label: 'Title' },
-      ],
-    }
-    const result = await repo.getReferencedMediaKeys([seedWithoutFile])
-    expect(result.size).toBe(0)
-    expect(prepareMock).not.toHaveBeenCalled()
-  })
-
-  it('extracts referenced media keys from file columns', async () => {
-    const mockResults = [
-      { cover: '/api/media/image1.jpg', gallery: '/api/media/img2.png /api/media/img3%20spaced.jpg' },
-      { cover: null, gallery: 'no-media-here' },
-    ]
-    const { db, prepareMock } = makeMockDb(mockResults)
-    const repo = new D1ContentScanRepository(db)
-    const seedWithFiles: Seed = {
-      slug: 'articles',
-      label: 'Article',
-      displayNameAlias: 'title',
-      branches: [
-        { id: 'br_01', alias: 'title', type: 'text', label: 'Title' },
-        { id: 'br_02', alias: 'cover', type: 'file', label: 'Cover' },
-        { id: 'br_03', alias: 'gallery', type: 'file', label: 'Gallery' },
-      ],
-    }
-
-    const result = await repo.getReferencedMediaKeys([seedWithFiles])
-    expect(prepareMock).toHaveBeenCalledWith('SELECT cover, gallery FROM content_articles')
-    expect(result).toEqual(new Set(['image1.jpg', 'img2.png', 'img3 spaced.jpg']))
-  })
-
-  it('handles null or missing results gracefully', async () => {
-    const allMock = vi.fn().mockResolvedValue({ results: null })
-    const prepareMock = vi.fn(() => ({ all: allMock }))
-    const db = { prepare: prepareMock } as any
-    const repo = new D1ContentScanRepository(db)
-    const seedWithFiles: Seed = {
-      slug: 'articles',
-      label: 'Article',
-      displayNameAlias: 'title',
-      branches: [
-        { id: 'br_01', alias: 'cover', type: 'file', label: 'Cover' },
-      ],
-    }
-
-    const result = await repo.getReferencedMediaKeys([seedWithFiles])
-    expect(result.size).toBe(0)
-  })
-})
+// SPDX-License-Identifier: BUSL-1.1
+// Copyright (c) 2024–2026 Flavio De Musso. All rights reserved.
+// See LICENSE in the repository root for license terms.
+
+import { describe, it, expect, vi } from 'vitest'
+import type { Seed } from '@beechcms/core'
+import { D1ContentScanRepository } from './d1-content-scan.repository'
+
+function makeMockDb(allResults: unknown[] = []) {
+  const allMock = vi.fn().mockResolvedValue({ results: allResults })
+  const prepareMock = vi.fn(() => ({ all: allMock }))
+  return { db: { prepare: prepareMock } as any, prepareMock, allMock }
+}
+
+describe('D1ContentScanRepository', () => {
+  it('returns empty set if seeds list is empty', async () => {
+    const { db, prepareMock } = makeMockDb()
+    const repo = new D1ContentScanRepository(db)
+    const result = await repo.getReferencedMediaKeys([])
+    expect(result.size).toBe(0)
+    expect(prepareMock).not.toHaveBeenCalled()
+  })
+
+  it('skips seeds with no file branches', async () => {
+    const { db, prepareMock } = makeMockDb()
+    const repo = new D1ContentScanRepository(db)
+    const seedWithoutFile: Seed = {
+      slug: 'posts',
+      label: 'Post',
+      displayNameAlias: 'title',
+      branches: [
+        { id: 'br_01', alias: 'title', type: 'text', label: 'Title' },
+      ],
+    }
+    const result = await repo.getReferencedMediaKeys([seedWithoutFile])
+    expect(result.size).toBe(0)
+    expect(prepareMock).not.toHaveBeenCalled()
+  })
+
+  it('extracts referenced media keys from file columns', async () => {
+    const mockResults = [
+      { cover: '/api/media/image1.jpg', gallery: '/api/media/img2.png /api/media/img3%20spaced.jpg' },
+      { cover: null, gallery: 'no-media-here' },
+    ]
+    const { db, prepareMock } = makeMockDb(mockResults)
+    const repo = new D1ContentScanRepository(db)
+    const seedWithFiles: Seed = {
+      slug: 'articles',
+      label: 'Article',
+      displayNameAlias: 'title',
+      branches: [
+        { id: 'br_01', alias: 'title', type: 'text', label: 'Title' },
+        { id: 'br_02', alias: 'cover', type: 'file', label: 'Cover' },
+        { id: 'br_03', alias: 'gallery', type: 'file', label: 'Gallery' },
+      ],
+    }
+
+    const result = await repo.getReferencedMediaKeys([seedWithFiles])
+    expect(prepareMock).toHaveBeenCalledWith('SELECT cover, gallery FROM content_articles')
+    expect(result).toEqual(new Set(['image1.jpg', 'img2.png', 'img3 spaced.jpg']))
+  })
+
+  it('handles null or missing results gracefully', async () => {
+    const allMock = vi.fn().mockResolvedValue({ results: null })
+    const prepareMock = vi.fn(() => ({ all: allMock }))
+    const db = { prepare: prepareMock } as any
+    const repo = new D1ContentScanRepository(db)
+    const seedWithFiles: Seed = {
+      slug: 'articles',
+      label: 'Article',
+      displayNameAlias: 'title',
+      branches: [
+        { id: 'br_01', alias: 'cover', type: 'file', label: 'Cover' },
+      ],
+    }
+
+    const result = await repo.getReferencedMediaKeys([seedWithFiles])
+    expect(result.size).toBe(0)
+  })
+})