@bobbykim/manguito-cms-api 0.8.4 → 0.9.0

package/dist/index.js

@@ -144,7 +144,7 @@ var init_field_keys = __esm({
 });
 
 // src/relations.ts
-function quoteIdent2(name) {
+function quoteIdent3(name) {
   if (!/^[a-z][a-z0-9_-]*$/.test(name)) throw new Error(`Unsafe identifier: ${name}`);
   return `"${name}"`;
 }
@@ -156,10 +156,10 @@ function paragraphMediaFieldNames(pType) {
 async function fetchParagraphMediaIds(db, pType, itemId, fieldName) {
   const mediaColumns = pType.fields.filter((f) => f.field_type === "image" || f.field_type === "video" || f.field_type === "file").map((f) => f.db_column.column_name);
   if (mediaColumns.length === 0) return [];
-  const tbl = import_drizzle_orm3.sql.raw(quoteIdent2(pType.db.table_name));
-  const cols = import_drizzle_orm3.sql.join(mediaColumns.map((c) => import_drizzle_orm3.sql.raw(quoteIdent2(c))), import_drizzle_orm3.sql`, `);
+  const tbl = import_drizzle_orm4.sql.raw(quoteIdent3(pType.db.table_name));
+  const cols = import_drizzle_orm4.sql.join(mediaColumns.map((c) => import_drizzle_orm4.sql.raw(quoteIdent3(c))), import_drizzle_orm4.sql`, `);
   const result = await db.execute(
-    import_drizzle_orm3.sql`SELECT ${cols} FROM ${tbl} WHERE parent_id = ${itemId} AND parent_field = ${fieldName}`
+    import_drizzle_orm4.sql`SELECT ${cols} FROM ${tbl} WHERE parent_id = ${itemId} AND parent_field = ${fieldName}`
   );
   const ids = [];
   for (const row of result.rows) {
@@ -183,9 +183,9 @@ function nestedParagraphFields(pType, registry) {
   return out;
 }
 async function fetchParagraphRowIds(db, pType, itemId, fieldName) {
-  const tbl = import_drizzle_orm3.sql.raw(quoteIdent2(pType.db.table_name));
+  const tbl = import_drizzle_orm4.sql.raw(quoteIdent3(pType.db.table_name));
   const result = await db.execute(
-    import_drizzle_orm3.sql`SELECT id FROM ${tbl} WHERE parent_id = ${itemId} AND parent_field = ${fieldName}`
+    import_drizzle_orm4.sql`SELECT id FROM ${tbl} WHERE parent_id = ${itemId} AND parent_field = ${fieldName}`
   );
   return result.rows.map((r) => r["id"]).filter((id) => typeof id === "string");
 }
@@ -201,8 +201,8 @@ async function persistParagraphField(db, itemId, parentType, fieldName, pType, i
       }
     }
   }
-  const tbl = import_drizzle_orm3.sql.raw(quoteIdent2(pType.db.table_name));
-  await db.execute(import_drizzle_orm3.sql`DELETE FROM ${tbl} WHERE parent_id = ${itemId} AND parent_field = ${fieldName}`);
+  const tbl = import_drizzle_orm4.sql.raw(quoteIdent3(pType.db.table_name));
+  await db.execute(import_drizzle_orm4.sql`DELETE FROM ${tbl} WHERE parent_id = ${itemId} AND parent_field = ${fieldName}`);
   const mediaFieldNames = paragraphMediaFieldNames(pType);
   const added = [];
   for (let i = 0; i < items.length; i++) {
@@ -221,9 +221,9 @@ async function persistParagraphField(db, itemId, parentType, fieldName, pType, i
       if (!pf.db_column || pf.db_column.junction) continue;
       data[pf.db_column.column_name] = pItem[pf.name] ?? null;
     }
-    const cols = import_drizzle_orm3.sql.join(Object.keys(data).map((k) => import_drizzle_orm3.sql.raw(quoteIdent2(k))), import_drizzle_orm3.sql`, `);
-    const vals = import_drizzle_orm3.sql.join(Object.values(data).map((v) => import_drizzle_orm3.sql`${v}`), import_drizzle_orm3.sql`, `);
-    await db.execute(import_drizzle_orm3.sql`INSERT INTO ${tbl} (${cols}) VALUES (${vals})`);
+    const cols = import_drizzle_orm4.sql.join(Object.keys(data).map((k) => import_drizzle_orm4.sql.raw(quoteIdent3(k))), import_drizzle_orm4.sql`, `);
+    const vals = import_drizzle_orm4.sql.join(Object.values(data).map((v) => import_drizzle_orm4.sql`${v}`), import_drizzle_orm4.sql`, `);
+    await db.execute(import_drizzle_orm4.sql`INSERT INTO ${tbl} (${cols}) VALUES (${vals})`);
     for (const name of mediaFieldNames) {
       const val = pItem[name];
       if (typeof val === "string" && val !== "") added.push(val);
@@ -257,24 +257,42 @@ async function deleteParagraphField(db, itemId, fieldName, pType, registry) {
       }
     }
   }
-  const tbl = import_drizzle_orm3.sql.raw(quoteIdent2(pType.db.table_name));
-  await db.execute(import_drizzle_orm3.sql`DELETE FROM ${tbl} WHERE parent_id = ${itemId} AND parent_field = ${fieldName}`);
+  const tbl = import_drizzle_orm4.sql.raw(quoteIdent3(pType.db.table_name));
+  await db.execute(import_drizzle_orm4.sql`DELETE FROM ${tbl} WHERE parent_id = ${itemId} AND parent_field = ${fieldName}`);
   return { added: [], removed };
 }
 async function persistJunctionField(db, itemId, junction, relatedIds) {
-  const tbl = import_drizzle_orm3.sql.raw(quoteIdent2(junction.table_name));
-  const left = import_drizzle_orm3.sql.raw(quoteIdent2(junction.left_column));
-  const right = import_drizzle_orm3.sql.raw(quoteIdent2(junction.right_column));
-  await db.execute(import_drizzle_orm3.sql`DELETE FROM ${tbl} WHERE ${left} = ${itemId}`);
-  for (const rid of relatedIds) {
-    await db.execute(import_drizzle_orm3.sql`INSERT INTO ${tbl} (${left}, ${right}) VALUES (${itemId}, ${rid})`);
-  }
+  const tbl = import_drizzle_orm4.sql.raw(quoteIdent3(junction.table_name));
+  const left = import_drizzle_orm4.sql.raw(quoteIdent3(junction.left_column));
+  const right = import_drizzle_orm4.sql.raw(quoteIdent3(junction.right_column));
+  const seen = /* @__PURE__ */ new Set();
+  const ids = relatedIds.filter((id) => {
+    const key = id.toLowerCase();
+    if (seen.has(key)) return false;
+    seen.add(key);
+    return true;
+  });
+  await db.execute(import_drizzle_orm4.sql`DELETE FROM ${tbl} WHERE ${left} = ${itemId}`);
+  if (ids.length === 0) return;
+  const rows = import_drizzle_orm4.sql.join(
+    ids.map(
+      (rid, position) => junction.order_column ? import_drizzle_orm4.sql`(${itemId}, ${rid}, ${position})` : import_drizzle_orm4.sql`(${itemId}, ${rid})`
+    ),
+    import_drizzle_orm4.sql`, `
+  );
+  await db.execute(
+    junction.order_column ? import_drizzle_orm4.sql`INSERT INTO ${tbl} (${left}, ${right}, "order") VALUES ${rows}` : import_drizzle_orm4.sql`INSERT INTO ${tbl} (${left}, ${right}) VALUES ${rows}`
+  );
+}
+function junctionOrderBy(junction) {
+  const right = import_drizzle_orm4.sql.raw(quoteIdent3(junction.right_column));
+  return junction.order_column ? import_drizzle_orm4.sql` ORDER BY "order" ASC, ${right} ASC` : import_drizzle_orm4.sql` ORDER BY ${right} ASC`;
 }
 function oneOrMany(cardinality, list) {
   return cardinality === "one" ? list[0] ?? null : list;
 }
 function paragraphItems(field, value) {
-  if ((0, import_manguito_cms_core2.relationCardinality)(field) === "one") {
+  if ((0, import_manguito_cms_core3.relationCardinality)(field) === "one") {
     return typeof value === "object" && value !== null && !Array.isArray(value) ? [value] : [];
   }
   return Array.isArray(value) ? value : [];
@@ -292,7 +310,7 @@ function buildRelationsMap(fields, registry) {
       relations[field.name] = {
         type: "paragraph",
         table: pType.db.table_name,
-        cardinality: (0, import_manguito_cms_core2.relationCardinality)(field) ?? "many"
+        cardinality: (0, import_manguito_cms_core3.relationCardinality)(field) ?? "many"
       };
     } else if (field.field_type === "reference") {
       if (!field.db_column) continue;
@@ -335,9 +353,9 @@ async function resolveRelationField(db, rows, fieldName, rel, cache, publishedOn
   const batch = [...new Set(rows)];
   if (rel.type === "paragraph") {
     const parentIds = batch.map((r) => r["id"]);
-    const inList = import_drizzle_orm3.sql.join(parentIds.map((id) => import_drizzle_orm3.sql`${id}`), import_drizzle_orm3.sql`, `);
+    const inList = import_drizzle_orm4.sql.join(parentIds.map((id) => import_drizzle_orm4.sql`${id}`), import_drizzle_orm4.sql`, `);
     const result = await db.execute(
-      import_drizzle_orm3.sql`SELECT * FROM ${import_drizzle_orm3.sql.raw(quoteIdent2(rel.table))} WHERE parent_id IN (${inList}) AND parent_field = ${fieldName} ORDER BY "order" ASC`
+      import_drizzle_orm4.sql`SELECT * FROM ${import_drizzle_orm4.sql.raw(quoteIdent3(rel.table))} WHERE parent_id IN (${inList}) AND parent_field = ${fieldName} ORDER BY "order" ASC`
     );
     const byParent = groupBy(result.rows, "parent_id");
     for (const row of batch) {
@@ -354,10 +372,10 @@ async function resolveRelationField(db, rows, fieldName, rel, cache, publishedOn
     const unique = [...new Set(fkValues)];
     const uncached = unique.filter((id) => !cache.has(`${rel.table}:${id}`));
     if (uncached.length > 0) {
-      const inList = import_drizzle_orm3.sql.join(uncached.map((id) => import_drizzle_orm3.sql`${id}`), import_drizzle_orm3.sql`, `);
-      const publishedCond = publishedOnly ? import_drizzle_orm3.sql` AND published = true` : import_drizzle_orm3.sql``;
+      const inList = import_drizzle_orm4.sql.join(uncached.map((id) => import_drizzle_orm4.sql`${id}`), import_drizzle_orm4.sql`, `);
+      const publishedCond = publishedOnly ? import_drizzle_orm4.sql` AND published = true` : import_drizzle_orm4.sql``;
       const result = await db.execute(
-        import_drizzle_orm3.sql`SELECT * FROM ${import_drizzle_orm3.sql.raw(quoteIdent2(rel.table))} WHERE id IN (${inList})${publishedCond}`
+        import_drizzle_orm4.sql`SELECT * FROM ${import_drizzle_orm4.sql.raw(quoteIdent3(rel.table))} WHERE id IN (${inList})${publishedCond}`
       );
       for (const item of result.rows) {
         cache.set(`${rel.table}:${item["id"]}`, item);
@@ -369,19 +387,18 @@ async function resolveRelationField(db, rows, fieldName, rel, cache, publishedOn
     }
   } else if (rel.type === "junction") {
     const parentIds = batch.map((r) => r["id"]);
-    const inList = import_drizzle_orm3.sql.join(parentIds.map((id) => import_drizzle_orm3.sql`${id}`), import_drizzle_orm3.sql`, `);
-    const orderBy = rel.order_column ? import_drizzle_orm3.sql` ORDER BY "order" ASC` : import_drizzle_orm3.sql``;
+    const inList = import_drizzle_orm4.sql.join(parentIds.map((id) => import_drizzle_orm4.sql`${id}`), import_drizzle_orm4.sql`, `);
     const junctionResult = await db.execute(
-      import_drizzle_orm3.sql`SELECT * FROM ${import_drizzle_orm3.sql.raw(quoteIdent2(rel.junction_table))} WHERE ${import_drizzle_orm3.sql.raw(quoteIdent2(rel.left_column))} IN (${inList})${orderBy}`
+      import_drizzle_orm4.sql`SELECT * FROM ${import_drizzle_orm4.sql.raw(quoteIdent3(rel.junction_table))} WHERE ${import_drizzle_orm4.sql.raw(quoteIdent3(rel.left_column))} IN (${inList})${junctionOrderBy(rel)}`
     );
     const jRows = junctionResult.rows;
     const rightIds = [...new Set(jRows.map((r) => r[rel.right_column]))];
     const uncached = rightIds.filter((id) => !cache.has(`${rel.table}:${id}`));
     if (uncached.length > 0) {
-      const rightInList = import_drizzle_orm3.sql.join(uncached.map((id) => import_drizzle_orm3.sql`${id}`), import_drizzle_orm3.sql`, `);
-      const publishedCond = publishedOnly ? import_drizzle_orm3.sql` AND published = true` : import_drizzle_orm3.sql``;
+      const rightInList = import_drizzle_orm4.sql.join(uncached.map((id) => import_drizzle_orm4.sql`${id}`), import_drizzle_orm4.sql`, `);
+      const publishedCond = publishedOnly ? import_drizzle_orm4.sql` AND published = true` : import_drizzle_orm4.sql``;
       const entitiesResult = await db.execute(
-        import_drizzle_orm3.sql`SELECT * FROM ${import_drizzle_orm3.sql.raw(quoteIdent2(rel.table))} WHERE id IN (${rightInList})${publishedCond}`
+        import_drizzle_orm4.sql`SELECT * FROM ${import_drizzle_orm4.sql.raw(quoteIdent3(rel.table))} WHERE id IN (${rightInList})${publishedCond}`
       );
       for (const item of entitiesResult.rows) {
         cache.set(`${rel.table}:${item["id"]}`, item);
@@ -403,8 +420,8 @@ async function resolveRelationField(db, rows, fieldName, rel, cache, publishedOn
     const unique = [...new Set(fkValues)];
     const uncached = unique.filter((id) => !cache.has(`media:${id}`));
     if (uncached.length > 0) {
-      const inList = import_drizzle_orm3.sql.join(uncached.map((id) => import_drizzle_orm3.sql`${id}`), import_drizzle_orm3.sql`, `);
-      const result = await db.execute(import_drizzle_orm3.sql`SELECT * FROM "media" WHERE id IN (${inList})`);
+      const inList = import_drizzle_orm4.sql.join(uncached.map((id) => import_drizzle_orm4.sql`${id}`), import_drizzle_orm4.sql`, `);
+      const result = await db.execute(import_drizzle_orm4.sql`SELECT * FROM "media" WHERE id IN (${inList})`);
       for (const item of result.rows) {
         cache.set(`media:${item["id"]}`, item);
       }
@@ -419,9 +436,9 @@ async function resolveRelationBareIds(db, rows, fieldName, rel) {
   if (rows.length === 0) return;
   if (rel.type === "paragraph") {
     const parentIds = rows.map((r) => r["id"]);
-    const inList = import_drizzle_orm3.sql.join(parentIds.map((id) => import_drizzle_orm3.sql`${id}`), import_drizzle_orm3.sql`, `);
+    const inList = import_drizzle_orm4.sql.join(parentIds.map((id) => import_drizzle_orm4.sql`${id}`), import_drizzle_orm4.sql`, `);
     const result = await db.execute(
-      import_drizzle_orm3.sql`SELECT id, parent_id FROM ${import_drizzle_orm3.sql.raw(quoteIdent2(rel.table))} WHERE parent_id IN (${inList}) AND parent_field = ${fieldName} ORDER BY "order" ASC`
+      import_drizzle_orm4.sql`SELECT id, parent_id FROM ${import_drizzle_orm4.sql.raw(quoteIdent3(rel.table))} WHERE parent_id IN (${inList}) AND parent_field = ${fieldName} ORDER BY "order" ASC`
     );
     const byParent = groupBy(result.rows, "parent_id");
     for (const row of rows) {
@@ -429,9 +446,9 @@ async function resolveRelationBareIds(db, rows, fieldName, rel) {
     }
   } else if (rel.type === "junction") {
     const parentIds = rows.map((r) => r["id"]);
-    const inList = import_drizzle_orm3.sql.join(parentIds.map((id) => import_drizzle_orm3.sql`${id}`), import_drizzle_orm3.sql`, `);
+    const inList = import_drizzle_orm4.sql.join(parentIds.map((id) => import_drizzle_orm4.sql`${id}`), import_drizzle_orm4.sql`, `);
     const result = await db.execute(
-      import_drizzle_orm3.sql`SELECT ${import_drizzle_orm3.sql.raw(quoteIdent2(rel.left_column))} AS left_id, ${import_drizzle_orm3.sql.raw(quoteIdent2(rel.right_column))} AS right_id FROM ${import_drizzle_orm3.sql.raw(quoteIdent2(rel.junction_table))} WHERE ${import_drizzle_orm3.sql.raw(quoteIdent2(rel.left_column))} IN (${inList})`
+      import_drizzle_orm4.sql`SELECT ${import_drizzle_orm4.sql.raw(quoteIdent3(rel.left_column))} AS left_id, ${import_drizzle_orm4.sql.raw(quoteIdent3(rel.right_column))} AS right_id FROM ${import_drizzle_orm4.sql.raw(quoteIdent3(rel.junction_table))} WHERE ${import_drizzle_orm4.sql.raw(quoteIdent3(rel.left_column))} IN (${inList})${junctionOrderBy(rel)}`
     );
     const byLeft = groupBy(result.rows, "left_id");
     for (const row of rows) {
@@ -439,13 +456,13 @@ async function resolveRelationBareIds(db, rows, fieldName, rel) {
     }
   }
 }
-var import_node_crypto, import_drizzle_orm3, import_manguito_cms_core2;
+var import_node_crypto, import_drizzle_orm4, import_manguito_cms_core3;
 var init_relations = __esm({
   "src/relations.ts"() {
     "use strict";
     import_node_crypto = __toESM(require("crypto"));
-    import_drizzle_orm3 = require("drizzle-orm");
-    import_manguito_cms_core2 = require("@bobbykim/manguito-cms-core");
+    import_drizzle_orm4 = require("drizzle-orm");
+    import_manguito_cms_core3 = require("@bobbykim/manguito-cms-core");
   }
 });
 
@@ -2354,12 +2371,9 @@ async function applyMediaReferenceDelta(delta, mediaRepo) {
   if (netRemove.length > 0) await mediaRepo.decrementReferenceCount(netRemove);
 }
 
-// src/routes/admin/content.ts
-init_relations();
-
 // src/relation-input.ts
-var import_drizzle_orm4 = require("drizzle-orm");
-var import_manguito_cms_core3 = require("@bobbykim/manguito-cms-core");
+var import_drizzle_orm3 = require("drizzle-orm");
+var import_manguito_cms_core2 = require("@bobbykim/manguito-cms-core");
 var UUID_RE = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
 function isUuid(v) {
   return typeof v === "string" && UUID_RE.test(v);
@@ -2371,7 +2385,7 @@ function checkRelationInput(fields, body, registry, path = "") {
   const errors = [];
   for (const field of fields) {
     if (!(field.name in body)) continue;
-    const cardinality = (0, import_manguito_cms_core3.relationCardinality)(field);
+    const cardinality = (0, import_manguito_cms_core2.relationCardinality)(field);
     if (cardinality === null) continue;
     const value = body[field.name];
     const name = `${path}${field.name}`;
@@ -2393,8 +2407,7 @@ function checkRelationInput(fields, body, registry, path = "") {
       });
       continue;
     }
-    const comp = field.ui_component;
-    const pType = comp.component === "paragraph-embed" ? registry.paragraph_types[comp.ref] : void 0;
+    const pType = paragraphTypeOf(field, registry);
     if (!pType) continue;
     items.forEach((item, i) => {
       const prefix = cardinality === "one" ? `${name}.` : `${name}[${i}].`;
@@ -2403,16 +2416,19 @@ function checkRelationInput(fields, body, registry, path = "") {
   }
   return errors;
 }
+function paragraphTypeOf(field, registry) {
+  const comp = field.ui_component;
+  return comp.component === "paragraph-embed" ? registry.paragraph_types[comp.ref] : void 0;
+}
 function paragraphItemsIn(fields, body, registry, path) {
   const out = [];
   for (const field of fields) {
     if (field.field_type !== "paragraph" || !(field.name in body)) continue;
-    const comp = field.ui_component;
-    const pType = comp.component === "paragraph-embed" ? registry.paragraph_types[comp.ref] : void 0;
+    const pType = paragraphTypeOf(field, registry);
     if (!pType) continue;
     const value = body[field.name];
     const name = `${path}${field.name}`;
-    if ((0, import_manguito_cms_core3.relationCardinality)(field) === "one") {
+    if ((0, import_manguito_cms_core2.relationCardinality)(field) === "one") {
       if (isPlainObject(value)) out.push({ item: value, fields: pType.fields, prefix: `${name}.` });
     } else if (Array.isArray(value)) {
       value.forEach((item, i) => {
@@ -2441,7 +2457,7 @@ function checkRequiredInParagraphItems(fields, body, registry, path = "") {
   }
   return errors;
 }
-function quoteIdent3(name) {
+function quoteIdent2(name) {
   if (!/^[a-z][a-z0-9_-]*$/.test(name)) throw new Error(`Unsafe identifier: ${name}`);
   return `"${name}"`;
 }
@@ -2472,7 +2488,7 @@ async function findMissingReferences(db, fields, body, registry) {
     const ids = [...new Set(uses.filter((u) => u.table === table && isUuid(u.id)).map((u) => u.id.toLowerCase()))];
     if (ids.length === 0) return [table, /* @__PURE__ */ new Set()];
     const result = await db.execute(
-      import_drizzle_orm4.sql`SELECT id FROM ${import_drizzle_orm4.sql.raw(quoteIdent3(table))} WHERE id IN (${import_drizzle_orm4.sql.join(ids.map((id) => import_drizzle_orm4.sql`${id}`), import_drizzle_orm4.sql`, `)})`
+      import_drizzle_orm3.sql`SELECT id FROM ${import_drizzle_orm3.sql.raw(quoteIdent2(table))} WHERE id IN (${import_drizzle_orm3.sql.join(ids.map((id) => import_drizzle_orm3.sql`${id}`), import_drizzle_orm3.sql`, `)})`
     );
     return [table, new Set(result.rows.map((r) => String(r.id).toLowerCase()))];
   });
@@ -2480,7 +2496,135 @@ async function findMissingReferences(db, fields, body, registry) {
   return uses.filter((u) => !found.get(u.table).has(u.id.toLowerCase())).map((u) => ({ field: u.field, message: `${u.field} refers to an item that does not exist.` }));
 }
 
+// src/field-values.ts
+var VARCHAR_DEFAULT_LIMIT = 255;
+var INTEGER_MIN = -2147483648;
+var INTEGER_MAX = 2147483647;
+var DECIMAL_LIMIT = 1e6;
+var ISO_TIMESTAMP = /^(\d{4})-(\d{2})-(\d{2})(?:[T ](\d{2}):(\d{2})(?::(\d{2})(?:\.\d+)?)?(?:Z|[+-]\d{2}:?\d{2})?)?$/;
+var DECIMAL_STRING = /^-?\d+(?:\.\d+)?$/;
+var EMPTY_MEANS_NULL = /* @__PURE__ */ new Set(["date", "integer", "float", "enum"]);
+function emptyValuesToNull(fields, body, registry) {
+  const out = { ...body };
+  for (const f of fields) {
+    if (!(f.name in out)) continue;
+    const value = out[f.name];
+    if (value === "" && EMPTY_MEANS_NULL.has(f.field_type)) {
+      out[f.name] = null;
+      continue;
+    }
+    if (f.field_type !== "paragraph") continue;
+    const pType = paragraphTypeOf(f, registry);
+    if (!pType) continue;
+    if (isPlainObject(value)) out[f.name] = emptyValuesToNull(pType.fields, value, registry);
+    else if (Array.isArray(value)) {
+      out[f.name] = value.map((item) => isPlainObject(item) ? emptyValuesToNull(pType.fields, item, registry) : item);
+    }
+  }
+  return out;
+}
+var compiled = /* @__PURE__ */ new Map();
+function patternOf(source) {
+  if (!compiled.has(source)) {
+    let re;
+    try {
+      re = new RegExp(source);
+    } catch {
+      re = null;
+    }
+    compiled.set(source, re);
+  }
+  return compiled.get(source) ?? null;
+}
+function isRealDate(value) {
+  const m = ISO_TIMESTAMP.exec(value);
+  if (!m) return false;
+  const [y, mo, d, h = 0, mi = 0, sec = 0] = m.slice(1).map((part) => part === void 0 ? void 0 : Number(part));
+  if (y === void 0 || mo === void 0 || d === void 0 || y < 1) return false;
+  const date = new Date(Date.UTC(y, mo - 1, d));
+  date.setUTCFullYear(y);
+  return date.getUTCMonth() === mo - 1 && date.getUTCDate() === d && h <= 23 && mi <= 59 && sec <= 59;
+}
+function valueError(f, value, name) {
+  const v = f.validation;
+  if (Array.isArray(value) && (f.field_type === "paragraph" || f.field_type === "reference")) {
+    if (v.max_items !== void 0 && value.length > v.max_items) {
+      return `${name} can hold at most ${v.max_items} items.`;
+    }
+    return null;
+  }
+  const col = f.db_column;
+  if (!col || col.junction || col.column_type === "uuid") return null;
+  if (value === null || value === void 0) {
+    if (col.nullable) return null;
+    return f.required ? `${name} is required.` : `${name} cannot be empty.`;
+  }
+  switch (f.field_type) {
+    case "text/plain": {
+      if (typeof value !== "string") return `${name} must be text.`;
+      if (value.includes("\0")) return `${name} contains a character that cannot be stored (U+0000).`;
+      const limit = v.limit ?? VARCHAR_DEFAULT_LIMIT;
+      if ([...value].length > limit) return `${name} can be at most ${limit} characters.`;
+      const pattern = v.pattern === void 0 ? null : patternOf(v.pattern);
+      if (value !== "" && pattern && !pattern.test(value)) return `${name} is not in the correct format.`;
+      return null;
+    }
+    case "text/rich":
+      if (typeof value !== "string") return `${name} must be text.`;
+      return value.includes("\0") ? `${name} contains a character that cannot be stored (U+0000).` : null;
+    case "integer":
+      if (typeof value !== "number" || !Number.isInteger(value)) return `${name} must be a whole number.`;
+      if (value < INTEGER_MIN || value > INTEGER_MAX) {
+        return `${name} must be between ${INTEGER_MIN} and ${INTEGER_MAX}.`;
+      }
+      return rangeError(name, value, v.min, v.max);
+    case "float": {
+      const n = typeof value === "number" ? value : typeof value === "string" && DECIMAL_STRING.test(value) ? Number(value) : NaN;
+      if (!Number.isFinite(n)) return `${name} must be a number.`;
+      if (roundedSize(typeof value === "string" ? value : String(n)) >= DECIMAL_LIMIT) {
+        return `${name} must be less than ${DECIMAL_LIMIT} in size.`;
+      }
+      return rangeError(name, n, v.min, v.max);
+    }
+    case "boolean":
+      return typeof value === "boolean" ? null : `${name} must be true or false.`;
+    case "date":
+      return typeof value === "string" && isRealDate(value) ? null : `${name} must be a date, such as 2026-10-11 or 2026-10-11T09:30:00Z.`;
+    case "enum": {
+      const allowed = v.allowed_values ?? [];
+      return typeof value === "string" && allowed.includes(value) ? null : `${name} must be one of: ${allowed.join(", ")}.`;
+    }
+    default:
+      return null;
+  }
+}
+function roundedSize(text) {
+  if (text.includes("e")) return Math.abs(Number(text));
+  const [int = "0", frac = ""] = text.replace("-", "").split(".");
+  const kept = Number(`${int}.${frac.slice(0, 4) || "0"}`);
+  return frac.length > 4 && frac.charAt(4) >= "5" ? kept + 1e-4 : kept;
+}
+function rangeError(name, value, min, max) {
+  if (min !== void 0 && value < min) return `${name} must be at least ${min}.`;
+  if (max !== void 0 && value > max) return `${name} must be at most ${max}.`;
+  return null;
+}
+function checkFieldValues(fields, body, registry, path = "") {
+  const errors = [];
+  for (const f of fields) {
+    if (!(f.name in body) || f.removed === true) continue;
+    const name = `${path}${f.name}`;
+    const message = valueError(f, body[f.name], name);
+    if (message) errors.push({ field: name, message });
+  }
+  for (const { item, fields: itemFields, prefix } of paragraphItemsIn(fields, body, registry, path)) {
+    errors.push(...checkFieldValues(itemFields, item, registry, prefix));
+  }
+  return errors;
+}
+
 // src/routes/admin/content.ts
+init_relations();
 init_field_keys();
 function quoteIdent4(name) {
   if (!/^[a-z][a-z0-9_-]*$/.test(name)) throw new Error(`Unsafe identifier: ${name}`);
@@ -2517,7 +2661,7 @@ async function loadRelationsForEdit(db, registry, fields, id, row) {
     } else if (f.db_column.junction) {
       const j = f.db_column.junction;
       const r = await db.execute(
-        import_drizzle_orm5.sql`SELECT ${import_drizzle_orm5.sql.raw(quoteIdent4(j.right_column))} FROM ${import_drizzle_orm5.sql.raw(quoteIdent4(j.table_name))} WHERE ${import_drizzle_orm5.sql.raw(quoteIdent4(j.left_column))} = ${id}`
+        import_drizzle_orm5.sql`SELECT ${import_drizzle_orm5.sql.raw(quoteIdent4(j.right_column))} FROM ${import_drizzle_orm5.sql.raw(quoteIdent4(j.table_name))} WHERE ${import_drizzle_orm5.sql.raw(quoteIdent4(j.left_column))} = ${id}${junctionOrderBy(j)}`
       );
       row[f.name] = r.rows.map((linked) => linked[j.right_column]);
     }
@@ -2560,6 +2704,8 @@ async function relationInputError(c, fields, body, registry, db) {
   const refuse = (message, details) => c.json({ ok: false, error: { code: "VALIDATION_ERROR", message, details } }, 422);
   const shape = checkRelationInput(fields, body, registry);
   if (shape.length > 0) return refuse("Relation fields have the wrong shape", shape);
+  const values = checkFieldValues(fields, body, registry);
+  if (values.length > 0) return refuse("Some values are not valid", values);
   const required = checkRequiredInParagraphItems(fields, body, registry);
   if (required.length > 0) return refuse("Required fields are missing", required);
   if (db) {
@@ -2710,7 +2856,7 @@ function registerAdminContentRoutes(app, registry, repos, projectors, mediaRepo,
       `/admin/api/${basePath}`,
       requirePermission("content:create"),
       async (c) => {
-        const body = await c.req.json();
+        const body = emptyValuesToNull(contentType.fields, await c.req.json(), registry);
         if (contentType.only_one) {
           const existing = await repo.findMany({ page: 1, per_page: 1 });
           if (existing.meta.total > 0) {
@@ -2837,7 +2983,7 @@ function registerAdminContentRoutes(app, registry, repos, projectors, mediaRepo,
       requirePermission("content:edit"),
       async (c) => {
         const id = c.req.param("id");
-        const body = await c.req.json();
+        const body = emptyValuesToNull(contentType.fields, await c.req.json(), registry);
         const existing = await repo.findOne(id);
         if (!existing) {
           return c.json(
@@ -2944,7 +3090,7 @@ function registerAdminContentRoutes(app, registry, repos, projectors, mediaRepo,
         `/admin/api/${basePath}`,
         requirePermission("content:edit"),
         async (c) => {
-          const body = await c.req.json();
+          const body = emptyValuesToNull(contentType.fields, await c.req.json(), registry);
           const existingResult = await repo.findMany({ page: 1, per_page: 1 });
           const existing = existingResult.data[0];
           if (!existing) {
@@ -3071,7 +3217,7 @@ function registerAdminContentRoutes(app, registry, repos, projectors, mediaRepo,
       `/admin/api/taxonomy/${typeName}`,
       requirePermission("content:create"),
       async (c) => {
-        const body = await c.req.json();
+        const body = emptyValuesToNull(taxonomyType.fields, await c.req.json(), registry);
         const inputError = await relationInputError(c, taxonomyType.fields, body, registry, db);
         if (inputError) return inputError;
         const storageBody = fieldKeys.toStorage(body);
@@ -3119,7 +3265,7 @@ function registerAdminContentRoutes(app, registry, repos, projectors, mediaRepo,
       requirePermission("content:edit"),
       async (c) => {
         const id = c.req.param("id");
-        const body = await c.req.json();
+        const body = emptyValuesToNull(taxonomyType.fields, await c.req.json(), registry);
         const storageBody = fieldKeys.toStorage(body);
         const existing = await repo.findOne(id);
         if (!existing) {
@@ -4176,7 +4322,7 @@ function registerUserRoutes(app, db, requirePermission, requireHierarchy) {
 var import_drizzle_orm8 = require("drizzle-orm");
 var API_VERSION = (() => {
   try {
-    return "0.8.4";
+    return "0.9.0";
   } catch {
     return "0.0.0";
   }