@beechcms/api 0.6.6 → 0.7.0

package/dist/index.js

@@ -2249,25 +2249,25 @@ setupApp.post("/auth/setup", async (context) => {
               id: "sec-0",
               hideLabel: true,
               columns: [
-                { id: "c0", widgets: [{ id: "w0", type: "core/text", config: { content: "# Acme SaaS Analytics\nBenvenuto nella dashboard di produzione. Qui puoi monitorare le metriche in tempo reale." } }] }
+                { id: "c0", widgets: [{ id: "w0", type: "core/text", config: { content: "# Acme SaaS Analytics\nWelcome to your production dashboard. Monitor real-time metrics and KPIs here." } }] }
               ]
             },
             {
               id: "sec-1",
               hideLabel: true,
               columns: [
-                { id: "c1", widgets: [{ id: "w1", type: "core/stat", config: { seedSlug: "clienti", formula: { op: "sum", column: "mrr" }, window: "all" }, title: "Totale MRR" }] },
-                { id: "c2", widgets: [{ id: "w2", type: "core/stat", config: { seedSlug: "clienti", formula: { op: "count" }, window: "all" }, title: "Clienti Attivi" }] },
-                { id: "c3", widgets: [{ id: "w3", type: "core/stat", config: { seedSlug: "abbonamenti", formula: { op: "count" }, window: "all" }, title: "Abbonamenti" }] },
-                { id: "c4", widgets: [{ id: "w4", type: "core/stat", config: { seedSlug: "ticket", formula: { op: "countWhere", column: "ticket_status", value: "open" }, window: "all" }, title: "Ticket Aperti" }] }
+                { id: "c1", widgets: [{ id: "w1", type: "core/stat", config: { seedSlug: "clienti", formula: { op: "sum", column: "mrr" }, window: "all" }, title: "Total MRR" }] },
+                { id: "c2", widgets: [{ id: "w2", type: "core/stat", config: { seedSlug: "clienti", formula: { op: "count" }, window: "all" }, title: "Active Customers" }] },
+                { id: "c3", widgets: [{ id: "w3", type: "core/stat", config: { seedSlug: "abbonamenti", formula: { op: "count" }, window: "all" }, title: "Subscriptions" }] },
+                { id: "c4", widgets: [{ id: "w4", type: "core/stat", config: { seedSlug: "ticket", formula: { op: "countWhere", column: "ticket_status", value: "open" }, window: "all" }, title: "Open Tickets" }] }
               ]
             },
             {
               id: "sec-2",
               hideLabel: true,
               columns: [
-                { id: "c5", widgets: [{ id: "w5", type: "core/area-chart", config: { seedSlug: "clienti", groupColumn: "created_at", window: "all" }, title: "Andamento Iscrizioni" }] },
-                { id: "c6", widgets: [{ id: "w6", type: "core/pie-chart", config: { seedSlug: "clienti", column: "tier", window: "all" }, title: "Distribuzione Piani" }] }
+                { id: "c5", widgets: [{ id: "w5", type: "core/area-chart", config: { seedSlug: "clienti", groupColumn: "created_at", window: "all" }, title: "Signups Trend" }] },
+                { id: "c6", widgets: [{ id: "w6", type: "core/pie-chart", config: { seedSlug: "clienti", column: "tier", window: "all" }, title: "Plan Distribution" }] }
               ],
               columnSpans: [8, 4]
             },
@@ -2275,8 +2275,8 @@ setupApp.post("/auth/setup", async (context) => {
               id: "sec-3",
               hideLabel: true,
               columns: [
-                { id: "c7", widgets: [{ id: "w7", type: "core/data-table", config: { seedSlug: "clienti", pageSize: 5 }, title: "Ultimi Iscritti" }] },
-                { id: "c8", widgets: [{ id: "w8", type: "core/data-table", config: { seedSlug: "changelog", pageSize: 5 }, title: "Ultime Release" }] }
+                { id: "c7", widgets: [{ id: "w7", type: "core/data-table", config: { seedSlug: "clienti", pageSize: 5 }, title: "Recent Signups" }] },
+                { id: "c8", widgets: [{ id: "w8", type: "core/data-table", config: { seedSlug: "changelog", pageSize: 5 }, title: "Latest Releases" }] }
               ],
               columnSpans: [6, 6]
             }
@@ -2292,17 +2292,17 @@ setupApp.post("/auth/setup", async (context) => {
               id: "sec-4",
               hideLabel: true,
               columns: [
-                { id: "c9", widgets: [{ id: "w9", type: "core/stat", config: { seedSlug: "ticket", formula: { op: "countWhere", column: "priority", value: "high" }, window: "all" }, title: "Ticket Alta Priorit\xE0" }] },
-                { id: "c10", widgets: [{ id: "w10", type: "core/stat", config: { seedSlug: "ticket", formula: { op: "countWhere", column: "ticket_status", value: "closed" }, window: "all" }, title: "Ticket Chiusi" }] },
-                { id: "c11", widgets: [{ id: "w11", type: "core/stat", config: { seedSlug: "changelog", formula: { op: "count" }, window: "all" }, title: "Update Rilasciati" }] }
+                { id: "c9", widgets: [{ id: "w9", type: "core/stat", config: { seedSlug: "ticket", formula: { op: "countWhere", column: "priority", value: "high" }, window: "all" }, title: "High Priority Tickets" }] },
+                { id: "c10", widgets: [{ id: "w10", type: "core/stat", config: { seedSlug: "ticket", formula: { op: "countWhere", column: "ticket_status", value: "closed" }, window: "all" }, title: "Closed Tickets" }] },
+                { id: "c11", widgets: [{ id: "w11", type: "core/stat", config: { seedSlug: "changelog", formula: { op: "count" }, window: "all" }, title: "Released Updates" }] }
               ]
             },
             {
               id: "sec-5",
               hideLabel: true,
               columns: [
-                { id: "c12", widgets: [{ id: "w12", type: "core/bar-chart", config: { seedSlug: "ticket", groupColumn: "created_at", window: "all" }, title: "Ticket nel tempo" }] },
-                { id: "c13", widgets: [{ id: "w13", type: "core/line-chart", config: { seedSlug: "abbonamenti", groupColumn: "created_at", window: "all" }, title: "Nuovi Abbonamenti" }] }
+                { id: "c12", widgets: [{ id: "w12", type: "core/bar-chart", config: { seedSlug: "ticket", groupColumn: "created_at", window: "all" }, title: "Tickets Over Time" }] },
+                { id: "c13", widgets: [{ id: "w13", type: "core/line-chart", config: { seedSlug: "abbonamenti", groupColumn: "created_at", window: "all" }, title: "New Subscriptions" }] }
               ],
               columnSpans: [6, 6]
             },
@@ -2310,7 +2310,7 @@ setupApp.post("/auth/setup", async (context) => {
               id: "sec-6",
               hideLabel: true,
               columns: [
-                { id: "c14", widgets: [{ id: "w14", type: "core/data-table", config: { seedSlug: "ticket", pageSize: 10 }, title: "Ticket in lavorazione" }] }
+                { id: "c14", widgets: [{ id: "w14", type: "core/data-table", config: { seedSlug: "ticket", pageSize: 10 }, title: "Active Tickets" }] }
               ]
             }
           ]
@@ -2342,6 +2342,7 @@ import { Hono as Hono6 } from "hono";
 import {
   validateAndSanitizeSeedPayload as validateAndSanitizeSeedPayload5,
   resolvePolicies as resolvePolicies5,
+  EntryNotFoundError as EntryNotFoundError6,
   RelationTargetNotFoundError
 } from "@beechcms/core";
 
@@ -2503,18 +2504,17 @@ draftApp.post("/:slug/:id/draft/publish", draftGuard, async (context) => {
   const id = context.req.param("id");
   const seed = context.get("getSeed")(slug);
   const repository = context.get("repository");
-  const draft = await repository.getDraft(seed, id);
-  if (!draft) {
-    return publicProblem(context, {
-      type: "draft-not-found",
-      title: "Not Found",
-      status: 404,
-      detail: "No pending draft to publish"
-    });
-  }
   try {
     await repository.publishDraft(seed, id);
   } catch (err) {
+    if (err instanceof EntryNotFoundError6) {
+      return publicProblem(context, {
+        type: "draft-not-found",
+        title: "Not Found",
+        status: 404,
+        detail: "No pending draft to publish"
+      });
+    }
     if (err instanceof RelationTargetNotFoundError) {
       return publicProblem(context, {
         type: "relation-target-not-found",
@@ -2525,9 +2525,7 @@ draftApp.post("/:slug/:id/draft/publish", draftGuard, async (context) => {
     }
     throw err;
   }
-  const displayValue = draft[seed.displayNameAlias];
-  const displayStr = typeof displayValue === "string" ? displayValue : id;
-  logDraftActivity(context, id, slug, displayStr, "draft published");
+  logDraftActivity(context, id, slug, id, "draft published");
   return context.json({ success: true });
 });
 draftApp.delete("/:slug/:id/draft", draftGuard, async (context) => {
@@ -4736,7 +4734,7 @@ function withCachedResponse(edgeCache, cacheKey, response) {
 }
 
 // src/public/read-single.ts
-import { EntryNotFoundError as EntryNotFoundError6 } from "@beechcms/core";
+import { EntryNotFoundError as EntryNotFoundError7 } from "@beechcms/core";
 
 // src/public/entry-projection.ts
 import { filterEntryForActor as filterEntryForActor2 } from "@beechcms/core";
@@ -4787,7 +4785,7 @@ async function readSingleEntry(input) {
       meta: buildPublicSingleMeta(seedSlug)
     };
   } catch (error) {
-    if (error instanceof EntryNotFoundError6) {
+    if (error instanceof EntryNotFoundError7) {
       return { ok: false, detail: `Entry '${label}' not found for content type '${seedSlug}'.` };
     }
     throw error;
@@ -5171,7 +5169,7 @@ async function publicAddHandler(context) {
 }
 
 // src/public/public-edit.ts
-import { isValidContentStatus as isValidContentStatus4, resolvePolicies as resolvePolicies9, EntryNotFoundError as EntryNotFoundError7 } from "@beechcms/core";
+import { isValidContentStatus as isValidContentStatus4, resolvePolicies as resolvePolicies9, EntryNotFoundError as EntryNotFoundError8 } from "@beechcms/core";
 var UUID_REGEX = /^[0-9a-f]{8}-[0-9a-f]{4}-[1-5][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/i;
 function errorMessage(context, error) {
   if (context.env.ENV !== "production" && error instanceof Error) return error.message;
@@ -5298,7 +5296,7 @@ async function publicEditHandler(context) {
     );
     return context.json({ success: true, id, slug: slugResult.value.nextSlug }, 200);
   } catch (error) {
-    if (error instanceof EntryNotFoundError7) {
+    if (error instanceof EntryNotFoundError8) {
       return publicProblem(context, { type: "entry-not-found", title: "Not Found", status: 404, detail: `Entry '${id}' not found for content type '${seedSlug}'.` });
     }
     console.error("Public edit error:", error);
@@ -5604,7 +5602,7 @@ import { createMiddleware as createMiddleware2 } from "hono/factory";
 
 // src/shared/db/repositories/content.repository.d1.ts
 import {
-  EntryNotFoundError as EntryNotFoundError8,
+  EntryNotFoundError as EntryNotFoundError9,
   RepositoryError as RepositoryError2,
   SlugConflictError as SlugConflictError4,
   RelationTargetNotFoundError as RelationTargetNotFoundError2,
@@ -5862,13 +5860,13 @@ var D1ContentRepository = class extends BaseD1Repository {
       const tableName = this.getTableName(seed.slug);
       const entryRow = await this.database.prepare(`SELECT * FROM ${tableName} WHERE id = ? LIMIT 1`).bind(id).first();
       if (!entryRow) {
-        throw new EntryNotFoundError8(`Entry ${id} not found in ${seed.slug}`);
+        throw new EntryNotFoundError9(`Entry ${id} not found in ${seed.slug}`);
       }
       const data = await this.rowToData(seed, entryRow);
       await this.attachMultiRelations(seed, id, data);
       return data;
     } catch (error) {
-      if (error instanceof EntryNotFoundError8) throw error;
+      if (error instanceof EntryNotFoundError9) throw error;
       throw this.mapError(error, `findById(${seed.slug}, ${id})`);
     }
   }
@@ -5882,13 +5880,13 @@ var D1ContentRepository = class extends BaseD1Repository {
       const tableName = this.getTableName(seed.slug);
       const entryRow = await this.database.prepare(`SELECT * FROM ${tableName} WHERE slug = ? LIMIT 1`).bind(slug).first();
       if (!entryRow) {
-        throw new EntryNotFoundError8(`Entry with slug "${slug}" not found in ${seed.slug}`);
+        throw new EntryNotFoundError9(`Entry with slug "${slug}" not found in ${seed.slug}`);
       }
       const data = await this.rowToData(seed, entryRow);
       await this.attachMultiRelations(seed, entryRow.id, data);
       return data;
     } catch (error) {
-      if (error instanceof EntryNotFoundError8) throw error;
+      if (error instanceof EntryNotFoundError9) throw error;
       throw this.mapError(error, `findBySlug(${seed.slug}, ${slug})`);
     }
   }
@@ -6265,16 +6263,16 @@ var D1ContentRepository = class extends BaseD1Repository {
       if (batchStmts.length === 1) {
         const updateResult = await batchStmts[0].run();
         if (updateResult.meta.changes === 0) {
-          throw new EntryNotFoundError8(`Entry ${id} not found in ${seed.slug}`);
+          throw new EntryNotFoundError9(`Entry ${id} not found in ${seed.slug}`);
         }
       } else if (batchStmts.length > 1) {
         const results = await this.database.batch(batchStmts);
         if (stmt && (results[0].meta?.changes ?? 0) === 0) {
-          throw new EntryNotFoundError8(`Entry ${id} not found in ${seed.slug}`);
+          throw new EntryNotFoundError9(`Entry ${id} not found in ${seed.slug}`);
         }
       }
     } catch (error) {
-      if (error instanceof EntryNotFoundError8) throw error;
+      if (error instanceof EntryNotFoundError9) throw error;
       throw this.mapError(error, `update(${seed.slug}, ${id})`);
     }
     if (this.hooks?.afterUpdate) {
@@ -6299,12 +6297,12 @@ var D1ContentRepository = class extends BaseD1Repository {
       const tableName = this.getTableName(seed.slug);
       const entryRow = await this.database.prepare(`SELECT * FROM ${tableName} WHERE id = ?`).bind(id).first();
       if (!entryRow) {
-        throw new EntryNotFoundError8(`Entry ${id} not found in ${seed.slug}`);
+        throw new EntryNotFoundError9(`Entry ${id} not found in ${seed.slug}`);
       }
       await this.database.prepare(`DELETE FROM ${tableName} WHERE id = ?`).bind(id).run();
       row = await this.rowToData(seed, entryRow);
     } catch (error) {
-      if (error instanceof EntryNotFoundError8) throw error;
+      if (error instanceof EntryNotFoundError9) throw error;
       throw this.mapError(error, `delete(${seed.slug}, ${id})`);
     }
     if (this.hooks?.afterDelete) {
@@ -6560,7 +6558,8 @@ var D1ContentRepository = class extends BaseD1Repository {
     try {
       if (!seed.allowDrafts) return false;
       const draftTableName = this.getTableName(seed.slug, true);
-      const draftExistsResult = await this.database.prepare(`SELECT 1 FROM ${draftTableName} WHERE entry_id = ? LIMIT 1`).bind(entryId).first();
+      const liveTableName = this.getTableName(seed.slug);
+      const draftExistsResult = await this.database.prepare(`SELECT 1 FROM ${draftTableName} WHERE entry_id = ? UNION SELECT 1 FROM ${liveTableName} WHERE id = ? AND status = 'draft' LIMIT 1`).bind(entryId, entryId).first();
       return draftExistsResult !== null;
     } catch (error) {
       throw this.mapError(error, `hasDraft(${seed.slug}, ${entryId})`);
@@ -6569,7 +6568,8 @@ var D1ContentRepository = class extends BaseD1Repository {
   /**
    * Promotes a draft to the live entry: validates all relation targets referenced by the
    * draft still exist, copies the draft's scalar fields into the live row, replaces the
-   * live junction rows with the draft's, and deletes the draft — all as one batch.
+   * live junction rows with the draft's, sets status to 'published', and deletes the draft — all as one batch.
+   * If no mirror draft row exists but the live entry has status = 'draft', updates status to 'published'.
    * A no-op if `seed.allowDrafts` is false.
    *
    * @throws EntryNotFoundError if no draft row exists for `entryId`.
@@ -6582,7 +6582,12 @@ var D1ContentRepository = class extends BaseD1Repository {
       const liveTableName = this.getTableName(seed.slug);
       const draftRow = await this.database.prepare(`SELECT * FROM ${draftTableName} WHERE entry_id = ?`).bind(entryId).first();
       if (!draftRow) {
-        throw new EntryNotFoundError8(`No draft found for ${entryId} in ${seed.slug}`);
+        const liveRow = await this.database.prepare(`SELECT 1 FROM ${liveTableName} WHERE id = ? AND status = 'draft'`).bind(entryId).first();
+        if (!liveRow) {
+          throw new EntryNotFoundError9(`No draft found for ${entryId} in ${seed.slug}`);
+        }
+        await this.database.prepare(`UPDATE ${liveTableName} SET status = 'published', updated_at = (unixepoch()) WHERE id = ?`).bind(entryId).run();
+        return;
       }
       let touchedFields = [];
       if (draftRow && typeof draftRow["_touched_fields"] === "string") {
@@ -6606,15 +6611,9 @@ var D1ContentRepository = class extends BaseD1Repository {
           queryBindings.push(draftRow[branch.alias]);
         }
       }
-      let updateSql = "";
-      if (updateClauses.length > 0) {
-        updateClauses.push("updated_at = (unixepoch())");
-        updateSql = `UPDATE ${liveTableName} SET ${updateClauses.join(", ")} WHERE id = ?`;
-        queryBindings.push(entryId);
-      } else {
-        updateSql = `UPDATE ${liveTableName} SET updated_at = (unixepoch()) WHERE id = ?`;
-        queryBindings.push(entryId);
-      }
+      updateClauses.push("status = 'published'", "updated_at = (unixepoch())");
+      const updateSql = `UPDATE ${liveTableName} SET ${updateClauses.join(", ")} WHERE id = ?`;
+      queryBindings.push(entryId);
       const batchStmts = [
         this.database.prepare(updateSql).bind(...queryBindings),
         this.database.prepare(`DELETE FROM ${draftTableName} WHERE entry_id = ?`).bind(entryId)
@@ -6637,7 +6636,7 @@ var D1ContentRepository = class extends BaseD1Repository {
       }
       await this.database.batch(batchStmts);
     } catch (error) {
-      if (error instanceof EntryNotFoundError8) throw error;
+      if (error instanceof EntryNotFoundError9) throw error;
       if (error instanceof RelationTargetNotFoundError2) throw error;
       throw this.mapError(error, `publishDraft(${seed.slug}, ${entryId})`);
     }
@@ -6665,15 +6664,28 @@ var D1ContentRepository = class extends BaseD1Repository {
     try {
       if (!seed.allowDrafts) return;
       const draftTableName = this.getTableName(seed.slug, true);
-      await this.database.prepare(`DELETE FROM ${draftTableName} WHERE entry_id = ?`).bind(entryId).run();
+      const liveTableName = this.getTableName(seed.slug);
+      const hasMirror = await this.database.prepare(`SELECT 1 FROM ${draftTableName} WHERE entry_id = ? LIMIT 1`).bind(entryId).first();
+      if (hasMirror) {
+        const batchStmts = [
+          this.database.prepare(`DELETE FROM ${draftTableName} WHERE entry_id = ?`).bind(entryId)
+        ];
+        for (const branch of multiRelBranches(seed)) {
+          const jdt = jDraftTable(seed.slug, branch.alias);
+          batchStmts.push(this.database.prepare(`DELETE FROM ${jdt} WHERE entry_id = ?`).bind(entryId));
+        }
+        await this.database.batch(batchStmts);
+      } else {
+        await this.database.prepare(`DELETE FROM ${liveTableName} WHERE id = ? AND status = 'draft'`).bind(entryId).run();
+      }
     } catch (error) {
       throw this.mapError(error, `deleteDraft(${seed.slug}, ${entryId})`);
     }
   }
   /**
    * Finds every pending draft across the given seeds, `UNION ALL`-ing one query per seed
-   * so results span heterogeneous `content_{slug}_drafts` tables, then left-joins each
-   * against `activity_logs` to attribute the most recent "draft saved" action.
+   * so results span heterogeneous `content_{slug}_drafts` tables and live draft entries,
+   * then left-joins each against `activity_logs` to attribute the most recent action.
    *
    * @param seeds Seeds to search; drafts are looked up per-seed since draft tables aren't unified.
    * @returns Draft summaries ordered by most-recently-updated first. `title` falls back to the
@@ -6689,17 +6701,18 @@ var D1ContentRepository = class extends BaseD1Repository {
         const liveTable = `content_${seed.slug}`;
         const titleCol = seed.displayNameAlias;
         const isScalar = seed.branches.some((b) => b.alias === titleCol && !(b.type === "relation" && b.multiple === true));
-        const titleExpr = isScalar ? `COALESCE(d.${titleCol}, l.${titleCol})` : `COALESCE(l.slug, d.entry_id)`;
+        const titleExpr = isScalar ? `COALESCE(d.${titleCol}, l.${titleCol}, l.slug, d.entry_id, l.id)` : `COALESCE(l.slug, d.entry_id, l.id)`;
         const seedLabel = seed.labelPlural ?? seed.label;
         unionSelects.push(`
           SELECT
             ? AS seed_slug,
             ? AS seed_label,
-            d.entry_id AS id,
-            d.updated_at AS updated_at,
+            COALESCE(d.entry_id, l.id) AS id,
+            COALESCE(d.updated_at, l.updated_at) AS updated_at,
             ${titleExpr} AS title
-          FROM ${draftTable} d
-          LEFT JOIN ${liveTable} l ON l.id = d.entry_id
+          FROM ${liveTable} l
+          LEFT JOIN ${draftTable} d ON d.entry_id = l.id
+          WHERE l.status = 'draft' OR d.entry_id IS NOT NULL
         `);
         bindings.push(seed.slug, seedLabel);
       }
@@ -6721,8 +6734,7 @@ var D1ContentRepository = class extends BaseD1Repository {
             SELECT id FROM activity_logs
             WHERE entity_id = ad.id
               AND entity_slug = ad.seed_slug
-              AND action = 'update'
-              AND json_extract(details, '$.note') = 'draft saved'
+              AND action IN ('create', 'update')
             ORDER BY created_at DESC
             LIMIT 1
           )
@@ -7196,10 +7208,13 @@ var D1NotificationRepository = class {
   }
   async create(record) {
     const generatedId = this.idGenerator.uuid();
+    const safeType = Object.hasOwn(record, "type") && record.type ? record.type : "info";
+    const safeTitle = Object.hasOwn(record, "title") && typeof record.title === "string" ? record.title : "";
+    const safeMessage = Object.hasOwn(record, "message") && typeof record.message === "string" ? record.message : "";
     await this.database.prepare(
       `INSERT INTO notifications (id, title, message, type)
          VALUES (?, ?, ?, ?)`
-    ).bind(generatedId, record.title, record.message, record.type).run();
+    ).bind(generatedId, safeTitle, safeMessage, safeType).run();
     return generatedId;
   }
   async markRead(notificationId) {
@@ -7216,13 +7231,14 @@ var D1NotificationRepository = class {
   }
 };
 function mapRowToRecord2(row) {
+  const safeType = Object.hasOwn(row, "type") && row.type ? row.type : "info";
   return {
-    id: row.id,
-    title: row.title,
-    message: row.message,
-    type: row.type,
-    isRead: row.is_read === 1,
-    createdAt: row.created_at
+    id: Object.hasOwn(row, "id") ? row.id : "",
+    title: Object.hasOwn(row, "title") ? row.title : "",
+    message: Object.hasOwn(row, "message") ? row.message : "",
+    type: safeType,
+    isRead: Object.hasOwn(row, "is_read") ? row.is_read === 1 : false,
+    createdAt: Object.hasOwn(row, "created_at") ? row.created_at : 0
   };
 }
 
@@ -7256,12 +7272,12 @@ var D1WidgetRepository = class {
   database;
   async aggregate(seed, formula, window) {
     const aggregateExpression = this.buildAggregateExpression(seed, formula);
-    const { sql: timeWindowFilter, bindings } = this.buildTimeWindowFilter(window);
+    const { sql: timeWindowFilter, bindings: timeBindings } = this.buildTimeWindowFilter(window);
     const tableName = `content_${seed.slug}`;
-    const sql = `SELECT ${aggregateExpression} as computed_value
+    const sql = `SELECT ${aggregateExpression.sql} as computed_value
          FROM ${tableName}
         WHERE ${timeWindowFilter}`;
-    const row = await this.database.prepare(sql).bind(...bindings).first();
+    const row = await this.database.prepare(sql).bind(...aggregateExpression.bindings, ...timeBindings).first();
     return row?.computed_value ?? 0;
   }
   async growth(seed, formula, window) {
@@ -7269,8 +7285,8 @@ var D1WidgetRepository = class {
     const { currentFilter, previousFilter } = this.buildPreviousWindowFilter(window);
     const tableName = `content_${seed.slug}`;
     const [currentRow, previousRow] = await Promise.all([
-      this.database.prepare(`SELECT ${aggregateExpression} as computed_value FROM ${tableName} WHERE ${currentFilter.sql}`).bind(...currentFilter.bindings).first(),
-      this.database.prepare(`SELECT ${aggregateExpression} as computed_value FROM ${tableName} WHERE ${previousFilter.sql}`).bind(...previousFilter.bindings).first()
+      this.database.prepare(`SELECT ${aggregateExpression.sql} as computed_value FROM ${tableName} WHERE ${currentFilter.sql}`).bind(...aggregateExpression.bindings, ...currentFilter.bindings).first(),
+      this.database.prepare(`SELECT ${aggregateExpression.sql} as computed_value FROM ${tableName} WHERE ${previousFilter.sql}`).bind(...aggregateExpression.bindings, ...previousFilter.bindings).first()
     ]);
     return {
       currentValue: currentRow?.computed_value ?? 0,
@@ -7330,16 +7346,16 @@ var D1WidgetRepository = class {
   async timeseries(seed, formula, window, groupColumn) {
     const groupColumnExpression = this.resolveColumnExpression(seed, groupColumn);
     const aggregateExpression = this.buildAggregateExpression(seed, formula);
-    const { sql: timeWindowFilter, bindings } = this.buildTimeWindowFilter(window);
+    const { sql: timeWindowFilter, bindings: timeBindings } = this.buildTimeWindowFilter(window);
     const tableName = `content_${seed.slug}`;
     const dateBucketExpression = groupColumnExpression === "created_at" ? `strftime('%Y-%m-%d', created_at, 'unixepoch')` : `strftime('%Y-%m-%d', CAST(${groupColumnExpression} AS INTEGER), 'unixepoch')`;
     const sql = `SELECT ${dateBucketExpression} as bucket_label,
-              ${aggregateExpression} as bucket_value
+              ${aggregateExpression.sql} as bucket_value
          FROM ${tableName}
         WHERE ${timeWindowFilter}
         GROUP BY bucket_label
         ORDER BY bucket_label ASC`;
-    const rows = await this.database.prepare(sql).bind(...bindings).all();
+    const rows = await this.database.prepare(sql).bind(...aggregateExpression.bindings, ...timeBindings).all();
     return (rows.results ?? []).map((row) => ({
       label: row.bucket_label ?? "",
       value: row.bucket_value ?? 0
@@ -7374,44 +7390,46 @@ var D1WidgetRepository = class {
   buildAggregateExpression(seed, formula) {
     switch (formula.op) {
       case "count":
-        return "COUNT(*)";
+        return { sql: "COUNT(*)", bindings: [] };
       case "sum": {
         const column = this.resolveColumnExpression(seed, formula.column);
-        return `SUM(CAST(${column} AS REAL))`;
+        return { sql: `SUM(CAST(${column} AS REAL))`, bindings: [] };
       }
       case "avg": {
         const column = this.resolveColumnExpression(seed, formula.column);
-        return `AVG(CAST(${column} AS REAL))`;
+        return { sql: `AVG(CAST(${column} AS REAL))`, bindings: [] };
       }
       case "min": {
         const column = this.resolveColumnExpression(seed, formula.column);
-        return `MIN(CAST(${column} AS REAL))`;
+        return { sql: `MIN(CAST(${column} AS REAL))`, bindings: [] };
       }
       case "max": {
         const column = this.resolveColumnExpression(seed, formula.column);
-        return `MAX(CAST(${column} AS REAL))`;
+        return { sql: `MAX(CAST(${column} AS REAL))`, bindings: [] };
       }
       case "countWhere":
         return this.buildCountWhereExpression(seed, formula.column, formula.value);
       case "percentageOf": {
         const numerator = this.resolveColumnExpression(seed, formula.numeratorColumn);
         const denominator = this.resolveColumnExpression(seed, formula.denominatorColumn);
-        return `CASE WHEN SUM(CAST(${denominator} AS REAL)) = 0 THEN 0 ELSE (SUM(CAST(${numerator} AS REAL)) * 100.0 / SUM(CAST(${denominator} AS REAL))) END`;
+        return {
+          sql: `CASE WHEN SUM(CAST(${denominator} AS REAL)) = 0 THEN 0 ELSE (SUM(CAST(${numerator} AS REAL)) * 100.0 / SUM(CAST(${denominator} AS REAL))) END`,
+          bindings: []
+        };
       }
     }
   }
   buildCountWhereExpression(seed, alias, value) {
     const column = this.resolveColumnExpression(seed, alias);
-    if (value === null) return `COUNT(CASE WHEN ${column} IS NULL THEN 1 END)`;
+    if (value === null) return { sql: `COUNT(CASE WHEN ${column} IS NULL THEN 1 END)`, bindings: [] };
     if (typeof value === "boolean") {
       const numericValue = value ? 1 : 0;
-      return `COUNT(CASE WHEN ${column} = ${numericValue} THEN 1 END)`;
+      return { sql: `COUNT(CASE WHEN ${column} = ? THEN 1 END)`, bindings: [numericValue] };
     }
     if (typeof value === "number" && Number.isFinite(value)) {
-      return `COUNT(CASE WHEN CAST(${column} AS REAL) = ${value} THEN 1 END)`;
+      return { sql: `COUNT(CASE WHEN CAST(${column} AS REAL) = ? THEN 1 END)`, bindings: [value] };
     }
-    const escaped = String(value).replace(/'/g, "''");
-    return `COUNT(CASE WHEN ${column} = '${escaped}' THEN 1 END)`;
+    return { sql: `COUNT(CASE WHEN ${column} = ? THEN 1 END)`, bindings: [value] };
   }
   buildTimeWindowFilter(window) {
     if (isDateRange(window)) {
@@ -7689,10 +7707,10 @@ var D1SiteSettingsRepository = class {
 var nowSec = Math.floor(Date.now() / 1e3);
 var DAY = 86400;
 var t_c01 = nowSec - 25 * DAY;
-var t_c02 = nowSec - 20 * DAY;
-var t_c03 = nowSec - 15 * DAY;
-var t_c04 = nowSec - 10 * DAY;
-var t_c05 = nowSec - 3 * DAY;
+var t_c02 = nowSec - 18 * DAY;
+var t_c03 = nowSec - 12 * DAY;
+var t_c04 = nowSec - 6 * DAY;
+var t_c05 = nowSec - 1 * DAY;
 function toIsoDate(sec) {
   return new Date(sec * 1e3).toISOString().split("T")[0];
 }
@@ -7723,11 +7741,11 @@ var DEMO_CLIENTI_FIXTURES = [
   },
   {
     id: "c0200000-0000-4000-8000-000000000002",
-    slug: "davide-ferrari",
+    slug: "david-ferrari",
     status: "published",
     data: {
-      name: "Davide Ferrari",
-      email: "davide.ferrari@innovasolutions.it",
+      name: "David Ferrari",
+      email: "david.ferrari@innovasolutions.io",
       company: "Innova Solutions",
       tier: "pro",
       account_status: "active",
@@ -7736,11 +7754,11 @@ var DEMO_CLIENTI_FIXTURES = [
   },
   {
     id: "c0300000-0000-4000-8000-000000000003",
-    slug: "filippo-lombardi",
+    slug: "philip-lombardi",
     status: "published",
     data: {
-      name: "Filippo Lombardi",
-      email: "filippo.lombardi@novalabs.dev",
+      name: "Philip Lombardi",
+      email: "philip.lombardi@novalabs.dev",
       company: "Nova Labs",
       tier: "free",
       account_status: "churned",
@@ -7749,11 +7767,11 @@ var DEMO_CLIENTI_FIXTURES = [
   },
   {
     id: "c0400000-0000-4000-8000-000000000004",
-    slug: "elisa-gallo",
+    slug: "sarah-gallo",
     status: "published",
     data: {
-      name: "Elisa Gallo",
-      email: "elisa.gallo@alphadynamics.io",
+      name: "Sarah Gallo",
+      email: "sarah.gallo@alphadynamics.io",
       company: "Alpha Dynamics",
       tier: "enterprise",
       account_status: "active",
@@ -7762,11 +7780,11 @@ var DEMO_CLIENTI_FIXTURES = [
   },
   {
     id: "c0500000-0000-4000-8000-000000000005",
-    slug: "matteo-conti",
+    slug: "matthew-conti",
     status: "published",
     data: {
-      name: "Matteo Conti",
-      email: "matteo.conti@cloudbase.app",
+      name: "Matthew Conti",
+      email: "matthew.conti@cloudbase.app",
       company: "CloudBase",
       tier: "free",
       account_status: "active",
@@ -7777,7 +7795,7 @@ var DEMO_CLIENTI_FIXTURES = [
 var DEMO_ABBONAMENTI_FIXTURES = [
   {
     id: "a0100000-0000-4000-8000-000000000001",
-    slug: "abbonamento-vertex-digital",
+    slug: "subscription-vertex-digital",
     status: "published",
     data: {
       customer_id: "c0100000-0000-4000-8000-000000000001",
@@ -7788,7 +7806,7 @@ var DEMO_ABBONAMENTI_FIXTURES = [
   },
   {
     id: "a0200000-0000-4000-8000-000000000002",
-    slug: "abbonamento-innova-solutions",
+    slug: "subscription-innova-solutions",
     status: "published",
     data: {
       customer_id: "c0200000-0000-4000-8000-000000000002",
@@ -7799,7 +7817,7 @@ var DEMO_ABBONAMENTI_FIXTURES = [
   },
   {
     id: "a0300000-0000-4000-8000-000000000003",
-    slug: "abbonamento-alpha-dynamics",
+    slug: "subscription-alpha-dynamics",
     status: "published",
     data: {
       customer_id: "c0400000-0000-4000-8000-000000000004",
@@ -7812,10 +7830,10 @@ var DEMO_ABBONAMENTI_FIXTURES = [
 var DEMO_TICKET_FIXTURES = [
   {
     id: "t0100000-0000-4000-8000-000000000001",
-    slug: "integrazione-webhook-fallita",
+    slug: "webhook-integration-failure",
     status: "published",
     data: {
-      title: "Integrazione webhook fallita su eventi invoice.paid",
+      title: "Webhook integration failure on invoice.paid event",
       customer_id: "c0100000-0000-4000-8000-000000000001",
       priority: "high",
       category: "technical",
@@ -7824,10 +7842,10 @@ var DEMO_TICKET_FIXTURES = [
   },
   {
     id: "t0200000-0000-4000-8000-000000000002",
-    slug: "richiesta-fattura-elettronica",
+    slug: "annual-billing-vat-invoicing",
     status: "published",
     data: {
-      title: "Richiesta variazione codice SDI per fatturazione annuale",
+      title: "Annual billing VAT invoice code update request",
       customer_id: "c0400000-0000-4000-8000-000000000004",
       priority: "medium",
       category: "billing",
@@ -7843,7 +7861,7 @@ var DEMO_CHANGELOG_FIXTURES = [
     data: {
       version: "v2.4.0",
       release_date: toIsoDate(nowSec - 22 * DAY),
-      features: toRichtextDoc("Introdotto il supporto per la privacy nativa a 4 livelli, cifratura AES-256-GCM e Blind Indexing per la ricerca sicura.")
+      features: toRichtextDoc("Introduced 4-tier native privacy support, AES-256-GCM encryption, and Blind Indexing for secure search.")
     }
   },
   {
@@ -7853,31 +7871,31 @@ var DEMO_CHANGELOG_FIXTURES = [
     data: {
       version: "v2.3.0",
       release_date: toIsoDate(nowSec - 8 * DAY),
-      features: toRichtextDoc("Aggiunto l engine di automazioni avanzate e il posizionamento dinamico delle schede Kanban.")
+      features: toRichtextDoc("Added advanced automation engine and dynamic Kanban card positioning.")
     }
   }
 ];
 var DEMO_ARTICOLI_FIXTURES = [
   {
     id: "ar100000-0000-4000-8000-000000000001",
-    slug: "guida-alla-privacy-application-level-encryption",
+    slug: "guide-to-application-level-encryption",
     status: "published",
     data: {
-      title: "Guida all Application-Level Encryption in BeechCMS",
+      title: "Guide to Application-Level Encryption in BeechCMS",
       author: "Flavio De Musso",
       cover_image: "https://images.unsplash.com/photo-1551288049-bebda4e38f71.jpg?w=800&q=80",
-      body: toRichtextDoc("Scopri come proteggere i dati riservati dei tuoi clienti direttamente nell engine senza sacrificare le performance edge di Cloudflare Workers.")
+      body: toRichtextDoc("Learn how to protect confidential customer data directly inside the engine without sacrificing Cloudflare Workers edge performance.")
     }
   },
   {
     id: "ar200000-0000-4000-8000-000000000002",
-    slug: "architettura-botanical-engine-e-d1",
+    slug: "botanical-engine-and-cloudflare-d1",
     status: "published",
     data: {
-      title: "Architettura Botanical Engine & Cloudflare D1",
+      title: "Botanical Engine Architecture & Cloudflare D1",
       author: "Beech Core Team",
       cover_image: "https://images.unsplash.com/photo-1460925895917-afdab827c52f.jpg?w=800&q=80",
-      body: toRichtextDoc("Una panoramica approfondita sulla separazione tra i contratti di dominio di @beechcms/core e la persistenza SQLite edge.")
+      body: toRichtextDoc("An in-depth overview of the separation between @beechcms/core domain contracts and edge SQLite persistence.")
     }
   }
 ];
@@ -7978,9 +7996,13 @@ var D1SeedLayoutRepository = class {
     await this.db.prepare("DELETE FROM seed_layouts WHERE slug = ?").bind(slug).run();
   }
   async getViewConfig(slug) {
-    const row = await this.db.prepare("SELECT view_config FROM seed_layouts WHERE slug = ?").bind(slug).first();
-    if (!row?.view_config) return null;
-    return seedViewConfigSchema2.parse(JSON.parse(row.view_config));
+    try {
+      const row = await this.db.prepare("SELECT view_config FROM seed_layouts WHERE slug = ?").bind(slug).first();
+      if (!row?.view_config) return null;
+      return seedViewConfigSchema2.parse(JSON.parse(row.view_config));
+    } catch {
+      return null;
+    }
   }
   async setViewConfig(slug, config, updatedBy) {
     const json = JSON.stringify(config);
@@ -9939,6 +9961,9 @@ function createBeechApp(config) {
   apiPublic.use("*", publicRateLimitMiddleware());
   apiPublic.use("*", apiKeyMiddleware());
   apiPublic.route("/", publicRoutes);
+  apiPublic.all("*", (c) => {
+    return c.json({ error: "Not Found", message: `Public endpoint ${c.req.method} ${c.req.path} does not exist.` }, 404);
+  });
   app.route("/api/v1/public", apiPublic);
   app.route("/api/webhooks", webhooksApp);
   app.get("/api/media/:key{.+}", (context) => serveMediaHandler(context));
@@ -9967,7 +9992,7 @@ function createBeechApp(config) {
     const headers = new Headers(assetResponse.headers);
     headers.set(
       "Content-Security-Policy",
-      "default-src 'self'; script-src 'self'; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; connect-src 'self'; frame-ancestors 'none'"
+      "default-src 'self'; script-src 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: http: https:; connect-src 'self' http: https:; frame-ancestors 'none'"
     );
     headers.set("X-Frame-Options", "DENY");
     headers.set("X-Content-Type-Options", "nosniff");