@bobbykim/manguito-cms-api 0.9.2 → 0.9.3

package/dist/index.js

@@ -143,8 +143,139 @@ var init_field_keys = __esm({
   }
 });
 
+// src/relation-input.ts
+function isUuid(v) {
+  return typeof v === "string" && UUID_RE.test(v);
+}
+function isPlainObject(v) {
+  return typeof v === "object" && v !== null && !Array.isArray(v);
+}
+function checkRelationInput(fields, body, registry, path = "") {
+  const errors = [];
+  for (const field of fields) {
+    if (!Object.hasOwn(body, field.name)) continue;
+    const cardinality = (0, import_manguito_cms_core.relationCardinality)(field);
+    if (cardinality === null) continue;
+    const value = body[field.name];
+    const name = `${path}${field.name}`;
+    if (field.field_type === "reference") {
+      const ok = cardinality === "one" ? value === null || isUuid(value) : Array.isArray(value) && value.every(isUuid);
+      if (!ok) {
+        errors.push({
+          field: name,
+          message: cardinality === "one" ? `${name} holds one item: send a UUID string or null.` : `${name} holds a list: send an array of UUID strings.`
+        });
+      }
+      continue;
+    }
+    const items = cardinality === "one" ? value === null ? [] : isPlainObject(value) ? [value] : void 0 : Array.isArray(value) && value.every(isPlainObject) ? value : void 0;
+    if (items === void 0) {
+      errors.push({
+        field: name,
+        message: cardinality === "one" ? `${name} holds one item: send an object or null.` : `${name} holds a list: send an array of objects.`
+      });
+      continue;
+    }
+    const pType = paragraphTypeOf(field, registry);
+    if (!pType) continue;
+    items.forEach((item, i) => {
+      const prefix = cardinality === "one" ? `${name}.` : `${name}[${i}].`;
+      errors.push(...checkRelationInput(pType.fields, item, registry, prefix));
+    });
+  }
+  return errors;
+}
+function paragraphTypeOf(field, registry) {
+  const comp = field.ui_component;
+  return comp.component === "paragraph-embed" ? registry.paragraph_types[comp.ref] : void 0;
+}
+function paragraphItemsIn(fields, body, registry, path) {
+  const out = [];
+  for (const field of fields) {
+    if (field.field_type !== "paragraph" || !Object.hasOwn(body, field.name)) continue;
+    const pType = paragraphTypeOf(field, registry);
+    if (!pType) continue;
+    const value = body[field.name];
+    const name = `${path}${field.name}`;
+    if ((0, import_manguito_cms_core.relationCardinality)(field) === "one") {
+      if (isPlainObject(value)) out.push({ item: value, fields: pType.fields, prefix: `${name}.` });
+    } else if (Array.isArray(value)) {
+      value.forEach((item, i) => {
+        if (isPlainObject(item)) out.push({ item, fields: pType.fields, prefix: `${name}[${i}].` });
+      });
+    }
+  }
+  return out;
+}
+function isMissing(value) {
+  if (value === null || value === void 0) return true;
+  if (typeof value === "string" && value.trim() === "") return true;
+  if (Array.isArray(value) && value.length === 0) return true;
+  return false;
+}
+function checkRequiredInParagraphItems(fields, body, registry, path = "") {
+  const errors = [];
+  for (const { item, fields: itemFields, prefix } of paragraphItemsIn(fields, body, registry, path)) {
+    for (const f of itemFields) {
+      if (!f.required || f.removed === true || !f.db_column || f.db_column.junction) continue;
+      if (isMissing(item[f.name])) {
+        errors.push({ field: `${prefix}${f.name}`, message: `${prefix}${f.name} is required.` });
+      }
+    }
+    errors.push(...checkRequiredInParagraphItems(itemFields, item, registry, prefix));
+  }
+  return errors;
+}
+function quoteIdent(name) {
+  if (!/^[a-z][a-z0-9_-]*$/.test(name)) throw new Error(`Unsafe identifier: ${name}`);
+  return `"${name}"`;
+}
+function collectReferences(fields, body, registry, path, out) {
+  for (const f of fields) {
+    if (!Object.hasOwn(body, f.name) || !f.db_column) continue;
+    const table = f.db_column.junction ? f.db_column.junction.right_table : f.db_column.foreign_key?.table;
+    if (!table) continue;
+    const value = body[f.name];
+    const name = `${path}${f.name}`;
+    if (typeof value === "string") {
+      out.push({ table, id: value, field: name });
+    } else if (Array.isArray(value)) {
+      value.forEach((v, i) => {
+        if (typeof v === "string") out.push({ table, id: v, field: `${name}[${i}]` });
+      });
+    }
+  }
+  for (const { item, fields: itemFields, prefix } of paragraphItemsIn(fields, body, registry, path)) {
+    collectReferences(itemFields, item, registry, prefix, out);
+  }
+}
+async function findMissingReferences(db, fields, body, registry) {
+  const uses = [];
+  collectReferences(fields, body, registry, "", uses);
+  if (uses.length === 0) return [];
+  const lookups = [...new Set(uses.map((u) => u.table))].map(async (table) => {
+    const ids = [...new Set(uses.filter((u) => u.table === table && isUuid(u.id)).map((u) => u.id.toLowerCase()))];
+    if (ids.length === 0) return [table, /* @__PURE__ */ new Set()];
+    const result = await db.execute(
+      import_drizzle_orm2.sql`SELECT id FROM ${import_drizzle_orm2.sql.raw(quoteIdent(table))} WHERE id IN (${import_drizzle_orm2.sql.join(ids.map((id) => import_drizzle_orm2.sql`${id}`), import_drizzle_orm2.sql`, `)})`
+    );
+    return [table, new Set(result.rows.map((r) => String(r.id).toLowerCase()))];
+  });
+  const found = new Map(await Promise.all(lookups));
+  return uses.filter((u) => !found.get(u.table).has(u.id.toLowerCase())).map((u) => ({ field: u.field, message: `${u.field} refers to an item that does not exist.` }));
+}
+var import_drizzle_orm2, import_manguito_cms_core, UUID_RE;
+var init_relation_input = __esm({
+  "src/relation-input.ts"() {
+    "use strict";
+    import_drizzle_orm2 = require("drizzle-orm");
+    import_manguito_cms_core = require("@bobbykim/manguito-cms-core");
+    UUID_RE = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
+  }
+});
+
 // src/relations.ts
-function quoteIdent3(name) {
+function quoteIdent2(name) {
   if (!/^[a-z][a-z0-9_-]*$/.test(name)) throw new Error(`Unsafe identifier: ${name}`);
   return `"${name}"`;
 }
@@ -156,10 +287,10 @@ function paragraphMediaFieldNames(pType) {
 async function fetchParagraphMediaIds(db, pType, itemId, fieldName) {
   const mediaColumns = pType.fields.filter((f) => f.field_type === "image" || f.field_type === "video" || f.field_type === "file").map((f) => f.db_column.column_name);
   if (mediaColumns.length === 0) return [];
-  const tbl = import_drizzle_orm4.sql.raw(quoteIdent3(pType.db.table_name));
-  const cols = import_drizzle_orm4.sql.join(mediaColumns.map((c) => import_drizzle_orm4.sql.raw(quoteIdent3(c))), import_drizzle_orm4.sql`, `);
+  const tbl = import_drizzle_orm3.sql.raw(quoteIdent2(pType.db.table_name));
+  const cols = import_drizzle_orm3.sql.join(mediaColumns.map((c) => import_drizzle_orm3.sql.raw(quoteIdent2(c))), import_drizzle_orm3.sql`, `);
   const result = await db.execute(
-    import_drizzle_orm4.sql`SELECT ${cols} FROM ${tbl} WHERE parent_id = ${itemId} AND parent_field = ${fieldName}`
+    import_drizzle_orm3.sql`SELECT ${cols} FROM ${tbl} WHERE parent_id = ${itemId} AND parent_field = ${fieldName}`
   );
   const ids = [];
   for (const row of result.rows) {
@@ -175,20 +306,37 @@ function nestedParagraphFields(pType, registry) {
   const out = [];
   for (const f of pType.fields) {
     if (f.db_column !== null) continue;
-    const comp = f.ui_component;
-    if (comp.component !== "paragraph-embed" || !comp.ref) continue;
-    const nType = registry.paragraph_types[comp.ref];
+    const nType = paragraphTypeOf(f, registry);
     if (nType) out.push({ fieldName: f.name, nType, field: f });
   }
   return out;
 }
 async function fetchParagraphRowIds(db, pType, itemId, fieldName) {
-  const tbl = import_drizzle_orm4.sql.raw(quoteIdent3(pType.db.table_name));
+  const tbl = import_drizzle_orm3.sql.raw(quoteIdent2(pType.db.table_name));
   const result = await db.execute(
-    import_drizzle_orm4.sql`SELECT id FROM ${tbl} WHERE parent_id = ${itemId} AND parent_field = ${fieldName}`
+    import_drizzle_orm3.sql`SELECT id FROM ${tbl} WHERE parent_id = ${itemId} AND parent_field = ${fieldName}`
   );
   return result.rows.map((r) => r["id"]).filter((id) => typeof id === "string");
 }
+async function ownParagraphRowIds(db, registry, fields, itemId) {
+  const ids = [];
+  for (const f of fields) {
+    const pType = paragraphTypeOf(f, registry);
+    if (!pType) continue;
+    const rowIds = await fetchParagraphRowIds(db, pType, itemId, f.name);
+    ids.push(...rowIds);
+    if (rowIds.length === 0) continue;
+    for (const n of nestedParagraphFields(pType, registry)) {
+      const result = await db.execute(
+        import_drizzle_orm3.sql`SELECT id FROM ${import_drizzle_orm3.sql.raw(quoteIdent2(n.nType.db.table_name))} WHERE parent_id = ANY(${import_drizzle_orm3.sql.param(rowIds)}::uuid[]) AND parent_field = ${n.fieldName}`
+      );
+      for (const r of result.rows) {
+        if (typeof r["id"] === "string") ids.push(r["id"]);
+      }
+    }
+  }
+  return ids;
+}
 async function persistParagraphField(db, itemId, parentType, fieldName, pType, items, registry) {
   const removed = await fetchParagraphMediaIds(db, pType, itemId, fieldName);
   const nested = nestedParagraphFields(pType, registry);
@@ -201,8 +349,8 @@ async function persistParagraphField(db, itemId, parentType, fieldName, pType, i
       }
     }
   }
-  const tbl = import_drizzle_orm4.sql.raw(quoteIdent3(pType.db.table_name));
-  await db.execute(import_drizzle_orm4.sql`DELETE FROM ${tbl} WHERE parent_id = ${itemId} AND parent_field = ${fieldName}`);
+  const tbl = import_drizzle_orm3.sql.raw(quoteIdent2(pType.db.table_name));
+  await db.execute(import_drizzle_orm3.sql`DELETE FROM ${tbl} WHERE parent_id = ${itemId} AND parent_field = ${fieldName}`);
   const mediaFieldNames = paragraphMediaFieldNames(pType);
   const added = [];
   for (let i = 0; i < items.length; i++) {
@@ -221,9 +369,9 @@ async function persistParagraphField(db, itemId, parentType, fieldName, pType, i
       if (!pf.db_column || pf.db_column.junction) continue;
       data[pf.db_column.column_name] = pItem[pf.name] ?? null;
     }
-    const cols = import_drizzle_orm4.sql.join(Object.keys(data).map((k) => import_drizzle_orm4.sql.raw(quoteIdent3(k))), import_drizzle_orm4.sql`, `);
-    const vals = import_drizzle_orm4.sql.join(Object.values(data).map((v) => import_drizzle_orm4.sql`${v}`), import_drizzle_orm4.sql`, `);
-    await db.execute(import_drizzle_orm4.sql`INSERT INTO ${tbl} (${cols}) VALUES (${vals})`);
+    const cols = import_drizzle_orm3.sql.join(Object.keys(data).map((k) => import_drizzle_orm3.sql.raw(quoteIdent2(k))), import_drizzle_orm3.sql`, `);
+    const vals = import_drizzle_orm3.sql.join(Object.values(data).map((v) => import_drizzle_orm3.sql`${v}`), import_drizzle_orm3.sql`, `);
+    await db.execute(import_drizzle_orm3.sql`INSERT INTO ${tbl} (${cols}) VALUES (${vals})`);
     for (const name of mediaFieldNames) {
       const val = pItem[name];
       if (typeof val === "string" && val !== "") added.push(val);
@@ -257,14 +405,14 @@ async function deleteParagraphField(db, itemId, fieldName, pType, registry) {
       }
     }
   }
-  const tbl = import_drizzle_orm4.sql.raw(quoteIdent3(pType.db.table_name));
-  await db.execute(import_drizzle_orm4.sql`DELETE FROM ${tbl} WHERE parent_id = ${itemId} AND parent_field = ${fieldName}`);
+  const tbl = import_drizzle_orm3.sql.raw(quoteIdent2(pType.db.table_name));
+  await db.execute(import_drizzle_orm3.sql`DELETE FROM ${tbl} WHERE parent_id = ${itemId} AND parent_field = ${fieldName}`);
   return { added: [], removed };
 }
 async function persistJunctionField(db, itemId, junction, relatedIds) {
-  const tbl = import_drizzle_orm4.sql.raw(quoteIdent3(junction.table_name));
-  const left = import_drizzle_orm4.sql.raw(quoteIdent3(junction.left_column));
-  const right = import_drizzle_orm4.sql.raw(quoteIdent3(junction.right_column));
+  const tbl = import_drizzle_orm3.sql.raw(quoteIdent2(junction.table_name));
+  const left = import_drizzle_orm3.sql.raw(quoteIdent2(junction.left_column));
+  const right = import_drizzle_orm3.sql.raw(quoteIdent2(junction.right_column));
   const seen = /* @__PURE__ */ new Set();
   const ids = relatedIds.filter((id) => {
     const key = id.toLowerCase();
@@ -272,27 +420,36 @@ async function persistJunctionField(db, itemId, junction, relatedIds) {
     seen.add(key);
     return true;
   });
-  await db.execute(import_drizzle_orm4.sql`DELETE FROM ${tbl} WHERE ${left} = ${itemId}`);
+  await db.execute(import_drizzle_orm3.sql`DELETE FROM ${tbl} WHERE ${left} = ${itemId}`);
   if (ids.length === 0) return;
-  const rows = import_drizzle_orm4.sql.join(
+  const rows = import_drizzle_orm3.sql.join(
     ids.map(
-      (rid, position) => junction.order_column ? import_drizzle_orm4.sql`(${itemId}, ${rid}, ${position})` : import_drizzle_orm4.sql`(${itemId}, ${rid})`
+      (rid, position) => junction.order_column ? import_drizzle_orm3.sql`(${itemId}, ${rid}, ${position})` : import_drizzle_orm3.sql`(${itemId}, ${rid})`
     ),
-    import_drizzle_orm4.sql`, `
+    import_drizzle_orm3.sql`, `
   );
   await db.execute(
-    junction.order_column ? import_drizzle_orm4.sql`INSERT INTO ${tbl} (${left}, ${right}, "order") VALUES ${rows}` : import_drizzle_orm4.sql`INSERT INTO ${tbl} (${left}, ${right}) VALUES ${rows}`
+    junction.order_column ? import_drizzle_orm3.sql`INSERT INTO ${tbl} (${left}, ${right}, "order") VALUES ${rows}` : import_drizzle_orm3.sql`INSERT INTO ${tbl} (${left}, ${right}) VALUES ${rows}`
   );
 }
 function junctionOrderBy(junction) {
-  const right = import_drizzle_orm4.sql.raw(quoteIdent3(junction.right_column));
-  return junction.order_column ? import_drizzle_orm4.sql` ORDER BY "order" ASC, ${right} ASC` : import_drizzle_orm4.sql` ORDER BY ${right} ASC`;
+  const right = import_drizzle_orm3.sql.raw(quoteIdent2(junction.right_column));
+  return junction.order_column ? import_drizzle_orm3.sql` ORDER BY "order" ASC, ${right} ASC` : import_drizzle_orm3.sql` ORDER BY ${right} ASC`;
+}
+function firstOfEach(items, key) {
+  const seen = /* @__PURE__ */ new Set();
+  return items.filter((item) => {
+    const k = key(item);
+    if (seen.has(k)) return false;
+    seen.add(k);
+    return true;
+  });
 }
 function oneOrMany(cardinality, list) {
   return cardinality === "one" ? list[0] ?? null : list;
 }
 function paragraphItems(field, value) {
-  if ((0, import_manguito_cms_core3.relationCardinality)(field) === "one") {
+  if ((0, import_manguito_cms_core2.relationCardinality)(field) === "one") {
     return typeof value === "object" && value !== null && !Array.isArray(value) ? [value] : [];
   }
   return Array.isArray(value) ? value : [];
@@ -310,7 +467,7 @@ function buildRelationsMap(fields, registry) {
       relations[field.name] = {
         type: "paragraph",
         table: pType.db.table_name,
-        cardinality: (0, import_manguito_cms_core3.relationCardinality)(field) ?? "many"
+        cardinality: (0, import_manguito_cms_core2.relationCardinality)(field) ?? "many"
       };
     } else if (field.field_type === "reference") {
       if (!field.db_column) continue;
@@ -353,9 +510,9 @@ async function resolveRelationField(db, rows, fieldName, rel, cache, publishedOn
   const batch = [...new Set(rows)];
   if (rel.type === "paragraph") {
     const parentIds = batch.map((r) => r["id"]);
-    const inList = import_drizzle_orm4.sql.join(parentIds.map((id) => import_drizzle_orm4.sql`${id}`), import_drizzle_orm4.sql`, `);
+    const inList = import_drizzle_orm3.sql.join(parentIds.map((id) => import_drizzle_orm3.sql`${id}`), import_drizzle_orm3.sql`, `);
     const result = await db.execute(
-      import_drizzle_orm4.sql`SELECT * FROM ${import_drizzle_orm4.sql.raw(quoteIdent3(rel.table))} WHERE parent_id IN (${inList}) AND parent_field = ${fieldName} ORDER BY "order" ASC`
+      import_drizzle_orm3.sql`SELECT * FROM ${import_drizzle_orm3.sql.raw(quoteIdent2(rel.table))} WHERE parent_id IN (${inList}) AND parent_field = ${fieldName} ORDER BY "order" ASC, id ASC`
     );
     const byParent = groupBy(result.rows, "parent_id");
     for (const row of batch) {
@@ -372,10 +529,10 @@ async function resolveRelationField(db, rows, fieldName, rel, cache, publishedOn
     const unique = [...new Set(fkValues)];
     const uncached = unique.filter((id) => !cache.has(`${rel.table}:${id}`));
     if (uncached.length > 0) {
-      const inList = import_drizzle_orm4.sql.join(uncached.map((id) => import_drizzle_orm4.sql`${id}`), import_drizzle_orm4.sql`, `);
-      const publishedCond = publishedOnly ? import_drizzle_orm4.sql` AND published = true` : import_drizzle_orm4.sql``;
+      const inList = import_drizzle_orm3.sql.join(uncached.map((id) => import_drizzle_orm3.sql`${id}`), import_drizzle_orm3.sql`, `);
+      const publishedCond = publishedOnly ? import_drizzle_orm3.sql` AND published = true` : import_drizzle_orm3.sql``;
       const result = await db.execute(
-        import_drizzle_orm4.sql`SELECT * FROM ${import_drizzle_orm4.sql.raw(quoteIdent3(rel.table))} WHERE id IN (${inList})${publishedCond}`
+        import_drizzle_orm3.sql`SELECT * FROM ${import_drizzle_orm3.sql.raw(quoteIdent2(rel.table))} WHERE id IN (${inList})${publishedCond}`
       );
       for (const item of result.rows) {
         cache.set(`${rel.table}:${item["id"]}`, item);
@@ -387,18 +544,18 @@ async function resolveRelationField(db, rows, fieldName, rel, cache, publishedOn
     }
   } else if (rel.type === "junction") {
     const parentIds = batch.map((r) => r["id"]);
-    const inList = import_drizzle_orm4.sql.join(parentIds.map((id) => import_drizzle_orm4.sql`${id}`), import_drizzle_orm4.sql`, `);
+    const inList = import_drizzle_orm3.sql.join(parentIds.map((id) => import_drizzle_orm3.sql`${id}`), import_drizzle_orm3.sql`, `);
     const junctionResult = await db.execute(
-      import_drizzle_orm4.sql`SELECT * FROM ${import_drizzle_orm4.sql.raw(quoteIdent3(rel.junction_table))} WHERE ${import_drizzle_orm4.sql.raw(quoteIdent3(rel.left_column))} IN (${inList})${junctionOrderBy(rel)}`
+      import_drizzle_orm3.sql`SELECT * FROM ${import_drizzle_orm3.sql.raw(quoteIdent2(rel.junction_table))} WHERE ${import_drizzle_orm3.sql.raw(quoteIdent2(rel.left_column))} IN (${inList})${junctionOrderBy(rel)}`
     );
     const jRows = junctionResult.rows;
     const rightIds = [...new Set(jRows.map((r) => r[rel.right_column]))];
     const uncached = rightIds.filter((id) => !cache.has(`${rel.table}:${id}`));
     if (uncached.length > 0) {
-      const rightInList = import_drizzle_orm4.sql.join(uncached.map((id) => import_drizzle_orm4.sql`${id}`), import_drizzle_orm4.sql`, `);
-      const publishedCond = publishedOnly ? import_drizzle_orm4.sql` AND published = true` : import_drizzle_orm4.sql``;
+      const rightInList = import_drizzle_orm3.sql.join(uncached.map((id) => import_drizzle_orm3.sql`${id}`), import_drizzle_orm3.sql`, `);
+      const publishedCond = publishedOnly ? import_drizzle_orm3.sql` AND published = true` : import_drizzle_orm3.sql``;
       const entitiesResult = await db.execute(
-        import_drizzle_orm4.sql`SELECT * FROM ${import_drizzle_orm4.sql.raw(quoteIdent3(rel.table))} WHERE id IN (${rightInList})${publishedCond}`
+        import_drizzle_orm3.sql`SELECT * FROM ${import_drizzle_orm3.sql.raw(quoteIdent2(rel.table))} WHERE id IN (${rightInList})${publishedCond}`
       );
       for (const item of entitiesResult.rows) {
         cache.set(`${rel.table}:${item["id"]}`, item);
@@ -406,7 +563,7 @@ async function resolveRelationField(db, rows, fieldName, rel, cache, publishedOn
     }
     const byLeft = groupBy(jRows, rel.left_column);
     for (const row of batch) {
-      const jEntries = byLeft[row["id"]] ?? [];
+      const jEntries = firstOfEach(byLeft[row["id"]] ?? [], (jr) => jr[rel.right_column]);
       row[fieldName] = jEntries.map((jr) => cache.get(`${rel.table}:${jr[rel.right_column]}`)).filter(Boolean);
     }
   } else if (rel.type === "media") {
@@ -420,8 +577,8 @@ async function resolveRelationField(db, rows, fieldName, rel, cache, publishedOn
     const unique = [...new Set(fkValues)];
     const uncached = unique.filter((id) => !cache.has(`media:${id}`));
     if (uncached.length > 0) {
-      const inList = import_drizzle_orm4.sql.join(uncached.map((id) => import_drizzle_orm4.sql`${id}`), import_drizzle_orm4.sql`, `);
-      const result = await db.execute(import_drizzle_orm4.sql`SELECT * FROM "media" WHERE id IN (${inList})`);
+      const inList = import_drizzle_orm3.sql.join(uncached.map((id) => import_drizzle_orm3.sql`${id}`), import_drizzle_orm3.sql`, `);
+      const result = await db.execute(import_drizzle_orm3.sql`SELECT * FROM "media" WHERE id IN (${inList})`);
       for (const item of result.rows) {
         cache.set(`media:${item["id"]}`, item);
       }
@@ -436,9 +593,9 @@ async function resolveRelationBareIds(db, rows, fieldName, rel) {
   if (rows.length === 0) return;
   if (rel.type === "paragraph") {
     const parentIds = rows.map((r) => r["id"]);
-    const inList = import_drizzle_orm4.sql.join(parentIds.map((id) => import_drizzle_orm4.sql`${id}`), import_drizzle_orm4.sql`, `);
+    const inList = import_drizzle_orm3.sql.join(parentIds.map((id) => import_drizzle_orm3.sql`${id}`), import_drizzle_orm3.sql`, `);
     const result = await db.execute(
-      import_drizzle_orm4.sql`SELECT id, parent_id FROM ${import_drizzle_orm4.sql.raw(quoteIdent3(rel.table))} WHERE parent_id IN (${inList}) AND parent_field = ${fieldName} ORDER BY "order" ASC`
+      import_drizzle_orm3.sql`SELECT id, parent_id FROM ${import_drizzle_orm3.sql.raw(quoteIdent2(rel.table))} WHERE parent_id IN (${inList}) AND parent_field = ${fieldName} ORDER BY "order" ASC, id ASC`
     );
     const byParent = groupBy(result.rows, "parent_id");
     for (const row of rows) {
@@ -446,23 +603,24 @@ async function resolveRelationBareIds(db, rows, fieldName, rel) {
     }
   } else if (rel.type === "junction") {
     const parentIds = rows.map((r) => r["id"]);
-    const inList = import_drizzle_orm4.sql.join(parentIds.map((id) => import_drizzle_orm4.sql`${id}`), import_drizzle_orm4.sql`, `);
+    const inList = import_drizzle_orm3.sql.join(parentIds.map((id) => import_drizzle_orm3.sql`${id}`), import_drizzle_orm3.sql`, `);
     const result = await db.execute(
-      import_drizzle_orm4.sql`SELECT ${import_drizzle_orm4.sql.raw(quoteIdent3(rel.left_column))} AS left_id, ${import_drizzle_orm4.sql.raw(quoteIdent3(rel.right_column))} AS right_id FROM ${import_drizzle_orm4.sql.raw(quoteIdent3(rel.junction_table))} WHERE ${import_drizzle_orm4.sql.raw(quoteIdent3(rel.left_column))} IN (${inList})${junctionOrderBy(rel)}`
+      import_drizzle_orm3.sql`SELECT ${import_drizzle_orm3.sql.raw(quoteIdent2(rel.left_column))} AS left_id, ${import_drizzle_orm3.sql.raw(quoteIdent2(rel.right_column))} AS right_id FROM ${import_drizzle_orm3.sql.raw(quoteIdent2(rel.junction_table))} WHERE ${import_drizzle_orm3.sql.raw(quoteIdent2(rel.left_column))} IN (${inList})${junctionOrderBy(rel)}`
     );
     const byLeft = groupBy(result.rows, "left_id");
     for (const row of rows) {
-      row[fieldName] = (byLeft[row["id"]] ?? []).map((r) => r["right_id"]);
+      row[fieldName] = firstOfEach(byLeft[row["id"]] ?? [], (r) => r["right_id"]).map((r) => r["right_id"]);
     }
   }
 }
-var import_node_crypto, import_drizzle_orm4, import_manguito_cms_core3;
+var import_node_crypto, import_drizzle_orm3, import_manguito_cms_core2;
 var init_relations = __esm({
   "src/relations.ts"() {
     "use strict";
     import_node_crypto = __toESM(require("crypto"));
-    import_drizzle_orm4 = require("drizzle-orm");
-    import_manguito_cms_core3 = require("@bobbykim/manguito-cms-core");
+    import_drizzle_orm3 = require("drizzle-orm");
+    import_manguito_cms_core2 = require("@bobbykim/manguito-cms-core");
+    init_relation_input();
   }
 });
 
@@ -1374,7 +1532,7 @@ var ERROR_STATUS_MAP = {
 var errorHandler = (err, c) => {
   console.error(err.stack ?? err.message);
   const raw = err.code;
-  const deliberate = raw !== void 0 && raw !== "INTERNAL_ERROR" && raw in ERROR_STATUS_MAP;
+  const deliberate = raw !== void 0 && raw !== "INTERNAL_ERROR" && Object.hasOwn(ERROR_STATUS_MAP, raw);
   if (!deliberate) {
     return c.json({ ok: false, error: { code: "INTERNAL_ERROR", message: "Internal server error" } }, 500);
   }
@@ -1969,16 +2127,16 @@ function parseFilters(url, validFields, columnFor) {
 }
 
 // src/routes/content.ts
+function pickProgrammatic(resolved, names) {
+  const out = {};
+  for (const name of names) if (Object.hasOwn(resolved, name)) out[name] = resolved[name];
+  return out;
+}
 function isPublished(item) {
   return item["published"] === true;
 }
 function registerPublicContentRoutes(app, registry, repos, projectors, paths, listRateLimit, resolver, resolverProjectors) {
   const forResolver = resolverProjectors ?? projectors;
-  function pickProgrammatic(resolved, names) {
-    const out = {};
-    for (const name of names) if (name in resolved) out[name] = resolved[name];
-    return out;
-  }
   async function respondItem(row, typeName, programmatic) {
     const data = projectRow(row, typeName, projectors);
     if (!resolver?.hasSchema(typeName)) return data;
@@ -2290,34 +2448,52 @@ function registerPublicMediaRoutes(app, mediaRepo, paths, listRateLimit) {
 var import_drizzle_orm5 = require("drizzle-orm");
 
 // src/references-in-use.ts
-var import_drizzle_orm2 = require("drizzle-orm");
-var import_manguito_cms_core = require("@bobbykim/manguito-cms-core");
-function quoteIdent(name) {
+var import_drizzle_orm4 = require("drizzle-orm");
+var import_manguito_cms_core3 = require("@bobbykim/manguito-cms-core");
+init_relations();
+function quoteIdent3(name) {
   if (!/^[a-z][a-z0-9_-]*$/.test(name)) throw new Error(`Unsafe identifier: ${name}`);
   return `"${name}"`;
 }
 function isRequiredSingleReferenceTo(f, targetType) {
-  return f.field_type === "reference" && f.required && (0, import_manguito_cms_core.relationCardinality)(f) === "one" && f.db_column?.foreign_key !== void 0 && f.ui_component.component === "typeahead-select" && f.ui_component.ref === targetType;
+  return f.field_type === "reference" && f.required && (0, import_manguito_cms_core3.relationCardinality)(f) === "one" && f.db_column?.foreign_key !== void 0 && f.ui_component.component === "typeahead-select" && f.ui_component.ref === targetType;
+}
+function requiredReferencesTo(owners, targetType) {
+  return owners.flatMap(
+    (owner) => owner.fields.filter((f) => isRequiredSingleReferenceTo(f, targetType)).map((f) => ({ owner, f }))
+  );
 }
 async function findRequiredReferrers(db, registry, targetType, id) {
-  const owners = [
-    ...Object.values(registry.content_types),
-    ...Object.values(registry.taxonomy_types),
-    ...Object.values(registry.paragraph_types)
-  ];
-  const out = [];
-  for (const owner of owners) {
-    for (const f of owner.fields) {
-      if (!isRequiredSingleReferenceTo(f, targetType)) continue;
-      const notSelf = owner.name === targetType ? import_drizzle_orm2.sql` AND id <> ${id}` : import_drizzle_orm2.sql``;
-      const r = await db.execute(
-        import_drizzle_orm2.sql`SELECT count(*)::int AS n FROM ${import_drizzle_orm2.sql.raw(quoteIdent(owner.db.table_name))} WHERE ${import_drizzle_orm2.sql.raw(quoteIdent(f.db_column.column_name))} = ${id}${notSelf}`
-      );
-      const n = r.rows[0].n;
-      if (n > 0) out.push({ type_label: owner.label, field_label: f.label, count: n });
-    }
+  const targetFields = registry.content_types[targetType]?.fields ?? registry.taxonomy_types[targetType]?.fields ?? [];
+  const itemOwners = [...Object.values(registry.content_types), ...Object.values(registry.taxonomy_types)];
+  const itemFields = requiredReferencesTo(itemOwners, targetType);
+  const paragraphFields = requiredReferencesTo(Object.values(registry.paragraph_types), targetType);
+  const ownIds = paragraphFields.length > 0 ? await ownParagraphRowIds(db, registry, targetFields, id) : [];
+  const [itemCounts, paragraphCounts] = await Promise.all([
+    Promise.all(
+      itemFields.map(async ({ owner, f }) => {
+        const notSelf = owner.name === targetType ? import_drizzle_orm4.sql` AND id <> ${id}` : import_drizzle_orm4.sql``;
+        const r = await db.execute(
+          import_drizzle_orm4.sql`SELECT count(*)::int AS n FROM ${import_drizzle_orm4.sql.raw(quoteIdent3(owner.db.table_name))} WHERE ${import_drizzle_orm4.sql.raw(quoteIdent3(f.db_column.column_name))} = ${id}${notSelf}`
+        );
+        return { owner, f, n: r.rows[0].n, own: 0 };
+      })
+    ),
+    Promise.all(
+      paragraphFields.map(async ({ owner, f }) => {
+        const r = await db.execute(
+          import_drizzle_orm4.sql`SELECT count(*)::int AS n, count(*) FILTER (WHERE id = ANY(${import_drizzle_orm4.sql.param(ownIds)}::uuid[]))::int AS own FROM ${import_drizzle_orm4.sql.raw(quoteIdent3(owner.db.table_name))} WHERE ${import_drizzle_orm4.sql.raw(quoteIdent3(f.db_column.column_name))} = ${id}`
+        );
+        const { n, own } = r.rows[0];
+        return { owner, f, n, own };
+      })
+    )
+  ]);
+  const others = [];
+  for (const { owner, f, n, own } of [...itemCounts, ...paragraphCounts]) {
+    if (n - own > 0) others.push({ type_label: owner.label, field_label: f.label, count: n - own });
   }
-  return out;
+  return { others, fromOwnParagraphs: paragraphCounts.some((c) => c.own > 0) };
 }
 function inUseMessage(referrers) {
   const total = referrers.reduce((sum, r) => sum + r.count, 0);
@@ -2347,7 +2523,7 @@ function topLevelMediaDelta(mediaFields, before, after) {
   for (const f of mediaFields) {
     const key = f.db_column?.column_name;
     if (key === void 0 || key === "") continue;
-    if (after !== null && !(key in after)) continue;
+    if (after !== null && !Object.hasOwn(after, key)) continue;
     const oldId = before ? extractMediaId(before[key]) : null;
     const newId = after ? extractMediaId(after[key]) : null;
     if (newId === oldId) continue;
@@ -2371,132 +2547,8 @@ async function applyMediaReferenceDelta(delta, mediaRepo) {
   if (netRemove.length > 0) await mediaRepo.decrementReferenceCount(netRemove);
 }
 
-// src/relation-input.ts
-var import_drizzle_orm3 = require("drizzle-orm");
-var import_manguito_cms_core2 = require("@bobbykim/manguito-cms-core");
-var UUID_RE = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
-function isUuid(v) {
-  return typeof v === "string" && UUID_RE.test(v);
-}
-function isPlainObject(v) {
-  return typeof v === "object" && v !== null && !Array.isArray(v);
-}
-function checkRelationInput(fields, body, registry, path = "") {
-  const errors = [];
-  for (const field of fields) {
-    if (!(field.name in body)) continue;
-    const cardinality = (0, import_manguito_cms_core2.relationCardinality)(field);
-    if (cardinality === null) continue;
-    const value = body[field.name];
-    const name = `${path}${field.name}`;
-    if (field.field_type === "reference") {
-      const ok = cardinality === "one" ? value === null || isUuid(value) : Array.isArray(value) && value.every(isUuid);
-      if (!ok) {
-        errors.push({
-          field: name,
-          message: cardinality === "one" ? `${name} holds one item: send a UUID string or null.` : `${name} holds a list: send an array of UUID strings.`
-        });
-      }
-      continue;
-    }
-    const items = cardinality === "one" ? value === null ? [] : isPlainObject(value) ? [value] : void 0 : Array.isArray(value) && value.every(isPlainObject) ? value : void 0;
-    if (items === void 0) {
-      errors.push({
-        field: name,
-        message: cardinality === "one" ? `${name} holds one item: send an object or null.` : `${name} holds a list: send an array of objects.`
-      });
-      continue;
-    }
-    const pType = paragraphTypeOf(field, registry);
-    if (!pType) continue;
-    items.forEach((item, i) => {
-      const prefix = cardinality === "one" ? `${name}.` : `${name}[${i}].`;
-      errors.push(...checkRelationInput(pType.fields, item, registry, prefix));
-    });
-  }
-  return errors;
-}
-function paragraphTypeOf(field, registry) {
-  const comp = field.ui_component;
-  return comp.component === "paragraph-embed" ? registry.paragraph_types[comp.ref] : void 0;
-}
-function paragraphItemsIn(fields, body, registry, path) {
-  const out = [];
-  for (const field of fields) {
-    if (field.field_type !== "paragraph" || !(field.name in body)) continue;
-    const pType = paragraphTypeOf(field, registry);
-    if (!pType) continue;
-    const value = body[field.name];
-    const name = `${path}${field.name}`;
-    if ((0, import_manguito_cms_core2.relationCardinality)(field) === "one") {
-      if (isPlainObject(value)) out.push({ item: value, fields: pType.fields, prefix: `${name}.` });
-    } else if (Array.isArray(value)) {
-      value.forEach((item, i) => {
-        if (isPlainObject(item)) out.push({ item, fields: pType.fields, prefix: `${name}[${i}].` });
-      });
-    }
-  }
-  return out;
-}
-function isMissing(value) {
-  if (value === null || value === void 0) return true;
-  if (typeof value === "string" && value.trim() === "") return true;
-  if (Array.isArray(value) && value.length === 0) return true;
-  return false;
-}
-function checkRequiredInParagraphItems(fields, body, registry, path = "") {
-  const errors = [];
-  for (const { item, fields: itemFields, prefix } of paragraphItemsIn(fields, body, registry, path)) {
-    for (const f of itemFields) {
-      if (!f.required || f.removed === true || !f.db_column || f.db_column.junction) continue;
-      if (isMissing(item[f.name])) {
-        errors.push({ field: `${prefix}${f.name}`, message: `${prefix}${f.name} is required.` });
-      }
-    }
-    errors.push(...checkRequiredInParagraphItems(itemFields, item, registry, prefix));
-  }
-  return errors;
-}
-function quoteIdent2(name) {
-  if (!/^[a-z][a-z0-9_-]*$/.test(name)) throw new Error(`Unsafe identifier: ${name}`);
-  return `"${name}"`;
-}
-function collectReferences(fields, body, registry, path, out) {
-  for (const f of fields) {
-    if (!(f.name in body) || !f.db_column) continue;
-    const table = f.db_column.junction ? f.db_column.junction.right_table : f.db_column.foreign_key?.table;
-    if (!table) continue;
-    const value = body[f.name];
-    const name = `${path}${f.name}`;
-    if (typeof value === "string") {
-      out.push({ table, id: value, field: name });
-    } else if (Array.isArray(value)) {
-      value.forEach((v, i) => {
-        if (typeof v === "string") out.push({ table, id: v, field: `${name}[${i}]` });
-      });
-    }
-  }
-  for (const { item, fields: itemFields, prefix } of paragraphItemsIn(fields, body, registry, path)) {
-    collectReferences(itemFields, item, registry, prefix, out);
-  }
-}
-async function findMissingReferences(db, fields, body, registry) {
-  const uses = [];
-  collectReferences(fields, body, registry, "", uses);
-  if (uses.length === 0) return [];
-  const lookups = [...new Set(uses.map((u) => u.table))].map(async (table) => {
-    const ids = [...new Set(uses.filter((u) => u.table === table && isUuid(u.id)).map((u) => u.id.toLowerCase()))];
-    if (ids.length === 0) return [table, /* @__PURE__ */ new Set()];
-    const result = await db.execute(
-      import_drizzle_orm3.sql`SELECT id FROM ${import_drizzle_orm3.sql.raw(quoteIdent2(table))} WHERE id IN (${import_drizzle_orm3.sql.join(ids.map((id) => import_drizzle_orm3.sql`${id}`), import_drizzle_orm3.sql`, `)})`
-    );
-    return [table, new Set(result.rows.map((r) => String(r.id).toLowerCase()))];
-  });
-  const found = new Map(await Promise.all(lookups));
-  return uses.filter((u) => !found.get(u.table).has(u.id.toLowerCase())).map((u) => ({ field: u.field, message: `${u.field} refers to an item that does not exist.` }));
-}
-
 // src/field-values.ts
+init_relation_input();
 var VARCHAR_DEFAULT_LIMIT = 255;
 var INTEGER_MIN = -2147483648;
 var INTEGER_MAX = 2147483647;
@@ -2507,7 +2559,7 @@ var EMPTY_MEANS_NULL = /* @__PURE__ */ new Set(["date", "integer", "float", "enu
 function emptyValuesToNull(fields, body, registry) {
   const out = { ...body };
   for (const f of fields) {
-    if (!(f.name in out)) continue;
+    if (!Object.hasOwn(out, f.name)) continue;
     const value = out[f.name];
     if (value === "" && EMPTY_MEANS_NULL.has(f.field_type)) {
       out[f.name] = null;
@@ -2612,7 +2664,7 @@ function rangeError(name, value, min, max) {
 function checkFieldValues(fields, body, registry, path = "") {
   const errors = [];
   for (const f of fields) {
-    if (!(f.name in body) || f.removed === true) continue;
+    if (!Object.hasOwn(body, f.name) || f.removed === true) continue;
     const name = `${path}${f.name}`;
     const message = valueError(f, body[f.name], name);
     if (message) errors.push({ field: name, message });
@@ -2625,6 +2677,7 @@ function checkFieldValues(fields, body, registry, path = "") {
 
 // src/routes/admin/content.ts
 init_relations();
+init_relation_input();
 init_field_keys();
 function quoteIdent4(name) {
   if (!/^[a-z][a-z0-9_-]*$/.test(name)) throw new Error(`Unsafe identifier: ${name}`);
@@ -2632,14 +2685,12 @@ function quoteIdent4(name) {
 }
 async function loadParagraphRows(db, registry, pType, parentId, fieldName) {
   const result = await db.execute(
-    import_drizzle_orm5.sql`SELECT * FROM ${import_drizzle_orm5.sql.raw(quoteIdent4(pType.db.table_name))} WHERE parent_id = ${parentId} AND parent_field = ${fieldName} ORDER BY "order" ASC`
+    import_drizzle_orm5.sql`SELECT * FROM ${import_drizzle_orm5.sql.raw(quoteIdent4(pType.db.table_name))} WHERE parent_id = ${parentId} AND parent_field = ${fieldName} ORDER BY "order" ASC, id ASC`
   );
   const rows = result.rows;
   for (const nf of pType.fields) {
     if (nf.db_column !== null) continue;
-    const comp = nf.ui_component;
-    if (comp.component !== "paragraph-embed" || !comp.ref) continue;
-    const nType = registry.paragraph_types[comp.ref];
+    const nType = paragraphTypeOf(nf, registry);
     if (!nType) continue;
     for (const row of rows) {
       row[nf.name] = oneOrMany(
@@ -2651,35 +2702,36 @@ async function loadParagraphRows(db, registry, pType, parentId, fieldName) {
   return rows;
 }
 async function loadRelationsForEdit(db, registry, fields, id, row) {
-  for (const f of fields) {
-    if (f.db_column === null) {
-      const comp = f.ui_component;
-      if (comp.component !== "paragraph-embed" || !comp.ref) continue;
-      const pType = registry.paragraph_types[comp.ref];
-      if (!pType) continue;
-      row[f.name] = oneOrMany((0, import_manguito_cms_core4.relationCardinality)(f) ?? "many", await loadParagraphRows(db, registry, pType, id, f.name));
-    } else if (f.db_column.junction) {
-      const j = f.db_column.junction;
-      const r = await db.execute(
-        import_drizzle_orm5.sql`SELECT ${import_drizzle_orm5.sql.raw(quoteIdent4(j.right_column))} FROM ${import_drizzle_orm5.sql.raw(quoteIdent4(j.table_name))} WHERE ${import_drizzle_orm5.sql.raw(quoteIdent4(j.left_column))} = ${id}${junctionOrderBy(j)}`
-      );
-      row[f.name] = r.rows.map((linked) => linked[j.right_column]);
-    }
-  }
+  const loaded = await Promise.all(
+    fields.map(async (f) => {
+      if (f.db_column === null) {
+        const pType = paragraphTypeOf(f, registry);
+        if (!pType) return null;
+        return [f.name, oneOrMany((0, import_manguito_cms_core4.relationCardinality)(f) ?? "many", await loadParagraphRows(db, registry, pType, id, f.name))];
+      }
+      if (f.db_column.junction) {
+        const j = f.db_column.junction;
+        const r = await db.execute(
+          import_drizzle_orm5.sql`SELECT ${import_drizzle_orm5.sql.raw(quoteIdent4(j.right_column))} FROM ${import_drizzle_orm5.sql.raw(quoteIdent4(j.table_name))} WHERE ${import_drizzle_orm5.sql.raw(quoteIdent4(j.left_column))} = ${id}${junctionOrderBy(j)}`
+        );
+        return [f.name, [...new Set(r.rows.map((linked) => linked[j.right_column]))]];
+      }
+      return null;
+    })
+  );
+  for (const entry of loaded) if (entry) row[entry[0]] = entry[1];
 }
 async function valuesForPublishCheck(db, registry, requiredFields, id, storedLabels, body) {
   const stored = { ...storedLabels };
-  if (db) await loadRelationsForEdit(db, registry, requiredFields.filter((f) => !(f.name in body)), id, stored);
+  if (db) await loadRelationsForEdit(db, registry, requiredFields.filter((f) => !Object.hasOwn(body, f.name)), id, stored);
   return { ...stored, ...body };
 }
 async function persistRelationFields(db, registry, fields, body, itemId, ownerTable) {
   const deltas = [];
   for (const f of fields) {
-    if (!(f.name in body)) continue;
+    if (!Object.hasOwn(body, f.name)) continue;
     if (f.db_column === null) {
-      const comp = f.ui_component;
-      if (comp.component !== "paragraph-embed" || !comp.ref) continue;
-      const pType = registry.paragraph_types[comp.ref];
+      const pType = paragraphTypeOf(f, registry);
       if (!pType) continue;
       deltas.push(await persistParagraphField(db, itemId, ownerTable, f.name, pType, paragraphItems(f, body[f.name]), registry));
     } else if (f.db_column.junction) {
@@ -2690,6 +2742,46 @@ async function persistRelationFields(db, registry, fields, body, itemId, ownerTa
   }
   return deltas;
 }
+async function deleteOwnParagraphs(db, registry, fields, itemId) {
+  const deltas = [];
+  for (const f of fields) {
+    const pType = paragraphTypeOf(f, registry);
+    if (!pType) continue;
+    deltas.push(await deleteParagraphField(db, itemId, f.name, pType, registry));
+  }
+  return deltas;
+}
+function releasedFromParagraphsOnly(paragraphDeltas, topLevel) {
+  const stillHeld = new Set(topLevel.removed);
+  return { added: [], removed: mergeMediaDeltas(...paragraphDeltas).removed.filter((mediaId) => !stillHeld.has(mediaId)) };
+}
+async function deleteItemCascade(db, registry, mediaRepo, target) {
+  const { typeName, fields, mediaFields, repo, id, row } = target;
+  const referrers = db ? await findRequiredReferrers(db, registry, typeName, id) : { others: [], fromOwnParagraphs: false };
+  if (referrers.others.length > 0) return { ok: false, message: inUseMessage(referrers.others) };
+  const topLevel = topLevelMediaDelta(mediaFields, row, null);
+  if (!db || !referrers.fromOwnParagraphs) {
+    try {
+      await repo.delete(id);
+    } catch (err) {
+      if (isForeignKeyViolation(err)) return { ok: false, message: IN_USE_RACE_MESSAGE };
+      throw err;
+    }
+    const paragraphDeltas2 = db ? await deleteOwnParagraphs(db, registry, fields, id) : [];
+    await applyMediaReferenceDelta(mergeMediaDeltas(topLevel, ...paragraphDeltas2), mediaRepo);
+    return { ok: true };
+  }
+  const paragraphDeltas = await deleteOwnParagraphs(db, registry, fields, id);
+  try {
+    await repo.delete(id);
+  } catch (err) {
+    await applyMediaReferenceDelta(releasedFromParagraphsOnly(paragraphDeltas, topLevel), mediaRepo);
+    if (isForeignKeyViolation(err)) return { ok: false, message: IN_USE_RACE_MESSAGE };
+    throw err;
+  }
+  await applyMediaReferenceDelta(mergeMediaDeltas(topLevel, ...paragraphDeltas), mediaRepo);
+  return { ok: true };
+}
 async function lookupBasePathId(db, pathOrName) {
   const r = await db.execute(
     import_drizzle_orm5.sql`SELECT id FROM base_paths WHERE path = ${pathOrName} OR name = ${pathOrName} LIMIT 1`
@@ -2799,7 +2891,6 @@ function registerAdminContentRoutes(app, registry, repos, projectors, mediaRepo,
     const mediaFields = contentType.fields.filter(
       (f) => f.field_type === "image" || f.field_type === "video" || f.field_type === "file"
     );
-    const paragraphFieldDefs = contentType.fields.filter((f) => f.db_column === null);
     const searchableColumns = [
       ...contentType.fields.filter((f) => f.field_type === "text/plain" && f.db_column !== null).map((f) => f.db_column.column_name),
       ...contentType.system_fields.some((f) => f.name === "slug") ? ["slug"] : []
@@ -2949,7 +3040,7 @@ function registerAdminContentRoutes(app, registry, repos, projectors, mediaRepo,
       }
       for (const f of columnBackedFields) {
         const key = f.db_column.column_name;
-        if (!(key in storageBody)) continue;
+        if (!Object.hasOwn(storageBody, key)) continue;
         columnData[key] = storageBody[key];
       }
       if (db) {
@@ -2991,7 +3082,7 @@ function registerAdminContentRoutes(app, registry, repos, projectors, mediaRepo,
             404
           );
         }
-        if (!contentType.only_one && "slug" in body) {
+        if (!contentType.only_one && Object.hasOwn(body, "slug")) {
           const slug = body["slug"];
           if (typeof slug !== "string" || slug.trim() === "") {
             return c.json(
@@ -3061,11 +3152,11 @@ function registerAdminContentRoutes(app, registry, repos, projectors, mediaRepo,
       }
       const patchColumnBackedFields = contentType.fields.filter(isColumnBacked);
       const patchData = {};
-      if (!contentType.only_one && "slug" in body) patchData["slug"] = body["slug"];
-      if ("published" in body) patchData["published"] = body["published"];
+      if (!contentType.only_one && Object.hasOwn(body, "slug")) patchData["slug"] = body["slug"];
+      if (Object.hasOwn(body, "published")) patchData["published"] = body["published"];
       for (const f of patchColumnBackedFields) {
         const key = f.db_column.column_name;
-        if (!(key in storageBody)) continue;
+        if (!Object.hasOwn(storageBody, key)) continue;
         patchData[key] = storageBody[key];
       }
       const updated = await repo.update(id, patchData);
@@ -3115,31 +3206,17 @@ function registerAdminContentRoutes(app, registry, repos, projectors, mediaRepo,
             404
           );
         }
-        const referrers = db ? await findRequiredReferrers(db, registry, typeName, id) : [];
-        if (referrers.length > 0) {
-          return c.json({ ok: false, error: { code: "ITEM_IN_USE", message: inUseMessage(referrers) } }, 409);
-        }
-        try {
-          await repo.delete(id);
-        } catch (err) {
-          if (isForeignKeyViolation(err)) {
-            return c.json({ ok: false, error: { code: "ITEM_IN_USE", message: IN_USE_RACE_MESSAGE } }, 409);
-          }
-          throw err;
-        }
-        const mediaDeltas = [
-          topLevelMediaDelta(mediaFields, item, null)
-        ];
-        if (db) {
-          for (const f of paragraphFieldDefs) {
-            const comp = f.ui_component;
-            if (comp.component !== "paragraph-embed" || !comp.ref) continue;
-            const pType = registry.paragraph_types[comp.ref];
-            if (!pType) continue;
-            mediaDeltas.push(await deleteParagraphField(db, id, f.name, pType, registry));
-          }
+        const outcome = await deleteItemCascade(db, registry, mediaRepo, {
+          typeName,
+          fields: contentType.fields,
+          mediaFields,
+          repo,
+          id,
+          row: item
+        });
+        if (!outcome.ok) {
+          return c.json({ ok: false, error: { code: "ITEM_IN_USE", message: outcome.message } }, 409);
         }
-        await applyMediaReferenceDelta(mergeMediaDeltas(...mediaDeltas), mediaRepo);
         return c.json({ ok: true });
       }
     );
@@ -3160,7 +3237,6 @@ function registerAdminContentRoutes(app, registry, repos, projectors, mediaRepo,
     const mediaFields = taxonomyType.fields.filter(
       (f) => f.field_type === "image" || f.field_type === "video" || f.field_type === "file"
     );
-    const paragraphFieldDefs = taxonomyType.fields.filter((f) => f.db_column === null);
     const searchableColumns = [
       ...taxonomyType.fields.filter((f) => f.field_type === "text/plain" && f.db_column !== null).map((f) => f.db_column.column_name),
       ...taxonomyType.system_fields.some((f) => f.name === "slug") ? ["slug"] : []
@@ -3246,7 +3322,7 @@ function registerAdminContentRoutes(app, registry, repos, projectors, mediaRepo,
         };
         for (const f of taxColumnBackedFields) {
           const key = f.db_column.column_name;
-          if (!(key in storageBody)) continue;
+          if (!Object.hasOwn(storageBody, key)) continue;
           taxColumnData[key] = storageBody[key];
         }
         const item = await repo.create(taxColumnData);
@@ -3298,10 +3374,10 @@ function registerAdminContentRoutes(app, registry, repos, projectors, mediaRepo,
         }
         const taxPatchColumnBackedFields = taxonomyType.fields.filter(isColumnBacked);
         const taxPatchData = {};
-        if ("published" in body) taxPatchData["published"] = body["published"];
+        if (Object.hasOwn(body, "published")) taxPatchData["published"] = body["published"];
         for (const f of taxPatchColumnBackedFields) {
           const key = f.db_column.column_name;
-          if (!(key in storageBody)) continue;
+          if (!Object.hasOwn(storageBody, key)) continue;
           taxPatchData[key] = storageBody[key];
         }
         const updated = await repo.update(id, taxPatchData);
@@ -3334,31 +3410,17 @@ function registerAdminContentRoutes(app, registry, repos, projectors, mediaRepo,
             404
           );
         }
-        const referrers = db ? await findRequiredReferrers(db, registry, typeName, id) : [];
-        if (referrers.length > 0) {
-          return c.json({ ok: false, error: { code: "ITEM_IN_USE", message: inUseMessage(referrers) } }, 409);
-        }
-        try {
-          await repo.delete(id);
-        } catch (err) {
-          if (isForeignKeyViolation(err)) {
-            return c.json({ ok: false, error: { code: "ITEM_IN_USE", message: IN_USE_RACE_MESSAGE } }, 409);
-          }
-          throw err;
-        }
-        const mediaDeltas = [
-          topLevelMediaDelta(mediaFields, item, null)
-        ];
-        if (db) {
-          for (const f of paragraphFieldDefs) {
-            const comp = f.ui_component;
-            if (comp.component !== "paragraph-embed" || !comp.ref) continue;
-            const pType = registry.paragraph_types[comp.ref];
-            if (!pType) continue;
-            mediaDeltas.push(await deleteParagraphField(db, id, f.name, pType, registry));
-          }
+        const outcome = await deleteItemCascade(db, registry, mediaRepo, {
+          typeName,
+          fields: taxonomyType.fields,
+          mediaFields,
+          repo,
+          id,
+          row: item
+        });
+        if (!outcome.ok) {
+          return c.json({ ok: false, error: { code: "ITEM_IN_USE", message: outcome.message } }, 409);
         }
-        await applyMediaReferenceDelta(mergeMediaDeltas(...mediaDeltas), mediaRepo);
         return c.json({ ok: true });
       }
     );
@@ -4322,7 +4384,7 @@ function registerUserRoutes(app, db, requirePermission, requireHierarchy) {
 var import_drizzle_orm8 = require("drizzle-orm");
 var API_VERSION = (() => {
   try {
-    return "0.9.2";
+    return "0.9.3";
   } catch {
     return "0.0.0";
   }