@bobbykim/manguito-cms-cli 0.4.0 → 0.4.3

package/dist/{chunk-UVGV7NVV.js → chunk-OAUBUE7N.js}

@@ -49,7 +49,7 @@ var init_esm_shims = __esm({
   }
 });
 
-// ../api/dist/chunk-FBS2RQI3.mjs
+// ../api/dist/chunk-TK4DNRFF.mjs
 init_esm_shims();
 import crypto from "crypto";
 
@@ -1212,7 +1212,7 @@ Subquery.prototype.getSQL = function() {
   return new SQL([this]);
 };
 
-// ../api/dist/chunk-FBS2RQI3.mjs
+// ../api/dist/chunk-TK4DNRFF.mjs
 function quoteIdent(name) {
   if (!/^[a-z][a-z0-9_-]*$/.test(name)) throw new Error(`Unsafe identifier: ${name}`);
   return `"${name}"`;
@@ -1239,16 +1239,46 @@ async function fetchParagraphMediaIds(db, pType, itemId, fieldName) {
   }
   return ids;
 }
-async function persistParagraphField(db, itemId, parentType, fieldName, pType, items) {
+function nestedParagraphFields(pType, registry) {
+  if (!registry) return [];
+  const out = [];
+  for (const f of pType.fields) {
+    if (f.db_column !== null) continue;
+    const comp = f.ui_component;
+    if (comp.component !== "paragraph-embed" || !comp.ref) continue;
+    const nType = registry.paragraph_types[comp.ref];
+    if (nType) out.push({ fieldName: f.name, nType });
+  }
+  return out;
+}
+async function fetchParagraphRowIds(db, pType, itemId, fieldName) {
+  const tbl = sql.raw(quoteIdent(pType.db.table_name));
+  const result = await db.execute(
+    sql`SELECT id FROM ${tbl} WHERE parent_id = ${itemId} AND parent_field = ${fieldName}`
+  );
+  return result.rows.map((r) => r["id"]).filter((id) => typeof id === "string");
+}
+async function persistParagraphField(db, itemId, parentType, fieldName, pType, items, registry) {
   const removed = await fetchParagraphMediaIds(db, pType, itemId, fieldName);
+  const nested = nestedParagraphFields(pType, registry);
+  if (nested.length > 0) {
+    const staleIds = await fetchParagraphRowIds(db, pType, itemId, fieldName);
+    for (const rowId of staleIds) {
+      for (const n of nested) {
+        const d = await deleteParagraphField(db, rowId, n.fieldName, n.nType, registry);
+        removed.push(...d.removed);
+      }
+    }
+  }
   const tbl = sql.raw(quoteIdent(pType.db.table_name));
   await db.execute(sql`DELETE FROM ${tbl} WHERE parent_id = ${itemId} AND parent_field = ${fieldName}`);
   const mediaFieldNames = paragraphMediaFieldNames(pType);
   const added = [];
   for (let i = 0; i < items.length; i++) {
     const pItem = items[i];
+    const rowId = crypto.randomUUID();
     const data = {
-      id: crypto.randomUUID(),
+      id: rowId,
       parent_id: itemId,
       parent_type: parentType,
       parent_field: fieldName,
@@ -1267,11 +1297,35 @@ async function persistParagraphField(db, itemId, parentType, fieldName, pType, i
       const val = pItem[name];
       if (typeof val === "string" && val !== "") added.push(val);
     }
+    for (const n of nested) {
+      const nestedItems = Array.isArray(pItem[n.fieldName]) ? pItem[n.fieldName] : [];
+      const d = await persistParagraphField(
+        db,
+        rowId,
+        pType.db.table_name,
+        n.fieldName,
+        n.nType,
+        nestedItems,
+        registry
+      );
+      added.push(...d.added);
+      removed.push(...d.removed);
+    }
   }
   return { added, removed };
 }
-async function deleteParagraphField(db, itemId, fieldName, pType) {
+async function deleteParagraphField(db, itemId, fieldName, pType, registry) {
   const removed = await fetchParagraphMediaIds(db, pType, itemId, fieldName);
+  const nested = nestedParagraphFields(pType, registry);
+  if (nested.length > 0) {
+    const rowIds = await fetchParagraphRowIds(db, pType, itemId, fieldName);
+    for (const rowId of rowIds) {
+      for (const n of nested) {
+        const d = await deleteParagraphField(db, rowId, n.fieldName, n.nType, registry);
+        removed.push(...d.removed);
+      }
+    }
+  }
   const tbl = sql.raw(quoteIdent(pType.db.table_name));
   await db.execute(sql`DELETE FROM ${tbl} WHERE parent_id = ${itemId} AND parent_field = ${fieldName}`);
   return { added: [], removed };
@@ -1334,7 +1388,7 @@ async function resolveRelationField(db, rows, fieldName, rel, cache, publishedOn
     const parentIds = rows.map((r) => r["id"]);
     const inList = sql.join(parentIds.map((id) => sql`${id}`), sql`, `);
     const result = await db.execute(
-      sql`SELECT * FROM ${sql.raw(quoteIdent(rel.table))} WHERE parent_id IN (${inList}) ORDER BY "order" ASC`
+      sql`SELECT * FROM ${sql.raw(quoteIdent(rel.table))} WHERE parent_id IN (${inList}) AND parent_field = ${fieldName} ORDER BY "order" ASC`
     );
     const byParent = groupBy(result.rows, "parent_id");
     for (const row of rows) {
@@ -1414,7 +1468,7 @@ async function resolveRelationBareIds(db, rows, fieldName, rel) {
     const parentIds = rows.map((r) => r["id"]);
     const inList = sql.join(parentIds.map((id) => sql`${id}`), sql`, `);
     const result = await db.execute(
-      sql`SELECT id, parent_id FROM ${sql.raw(quoteIdent(rel.table))} WHERE parent_id IN (${inList}) ORDER BY "order" ASC`
+      sql`SELECT id, parent_id FROM ${sql.raw(quoteIdent(rel.table))} WHERE parent_id IN (${inList}) AND parent_field = ${fieldName} ORDER BY "order" ASC`
     );
     const byParent = groupBy(result.rows, "parent_id");
     for (const row of rows) {

package/dist/{handler-GMCFYZY5-F3656HCZ.js → handler-CGHZG3J5-TCG6K3FE.js}

@@ -10,7 +10,7 @@ import {
   buildRelationsMap,
   init_esm_shims,
   resolveRelationField
-} from "./chunk-UVGV7NVV.js";
+} from "./chunk-OAUBUE7N.js";
 
 // ../../node_modules/.pnpm/@whatwg-node+fetch@0.10.13/node_modules/@whatwg-node/fetch/dist/shouldSkipPonyfill.js
 var require_shouldSkipPonyfill = __commonJS({
@@ -10785,10 +10785,13 @@ var require_parser = __commonJS({
   }
 });
 
-// ../api/dist/handler-GMCFYZY5.mjs
+// ../api/dist/handler-CGHZG3J5.mjs
 init_esm_shims();
 
-// ../api/dist/chunk-QXMW74MR.mjs
+// ../api/dist/chunk-GM55HGWA.mjs
+init_esm_shims();
+
+// ../../node_modules/.pnpm/graphql-yoga@5.21.2_graphql@16.14.2/node_modules/graphql-yoga/esm/index.js
 init_esm_shims();
 
 // ../../node_modules/.pnpm/@graphql-yoga+logger@2.0.1/node_modules/@graphql-yoga/logger/esm/index.js
@@ -30118,7 +30121,7 @@ function createYoga(options) {
   });
 }
 
-// ../api/dist/chunk-QXMW74MR.mjs
+// ../api/dist/chunk-GM55HGWA.mjs
 var import_dataloader = __toESM(require_dataloader(), 1);
 
 // ../../node_modules/.pnpm/@escape.tech+graphql-armor@3.2.0_@envelop+core@5.5.1_@escape.tech+graphql-armor-types@0.7.0/node_modules/@escape.tech/graphql-armor/dist/graphql-armor.esm.js
@@ -30876,7 +30879,7 @@ var EnvelopArmor = class {
   }
 };
 
-// ../api/dist/chunk-QXMW74MR.mjs
+// ../api/dist/chunk-GM55HGWA.mjs
 var DateTimeScalar = new GraphQLScalarType({
   name: "DateTime",
   description: "ISO-8601 date-time string",
@@ -31071,16 +31074,22 @@ function scalarFieldResolver(schemaName) {
 function relationFieldResolver(typeName, schemaFieldName) {
   return (parent, _args, ctx) => ctx.loaders.load(typeName, schemaFieldName, parent);
 }
-function programmaticFieldResolver(typeName, schemaFieldName) {
+function programmaticFieldResolver(typeName, schemaFieldName, mediaFieldNames = []) {
   return async (parent, _args, ctx) => {
     let p = ctx.programmaticMemo.get(parent);
     if (!p) {
-      p = ctx.resolver.resolveItem(typeName, parent);
+      p = resolveProgrammaticRow(typeName, parent, ctx, mediaFieldNames);
       ctx.programmaticMemo.set(parent, p);
     }
     return (await p)[schemaFieldName];
   };
 }
+async function resolveProgrammaticRow(typeName, parent, ctx, mediaFieldNames) {
+  if (mediaFieldNames.length === 0) return ctx.resolver.resolveItem(typeName, parent);
+  const enriched = { ...parent };
+  await Promise.all(mediaFieldNames.map((name) => ctx.loaders.load(typeName, name, enriched)));
+  return ctx.resolver.resolveItem(typeName, enriched);
+}
 function collectionResolver(typeName, nameMap) {
   return async (_root, args, ctx) => {
     const page = args.page ?? 1;
@@ -31206,6 +31215,7 @@ function buildGraphQLSchema(registry) {
     return GraphQLString;
   }
   function buildObjectType(machineName, type) {
+    const mediaFieldNames = type.fields.filter((f) => f.field_type === "image" || f.field_type === "video" || f.field_type === "file").map((f) => f.name);
     return new GraphQLObjectType({
       name: graphqlTypeName(machineName),
       fields: () => {
@@ -31224,7 +31234,7 @@ function buildGraphQLSchema(registry) {
           const outType = outputTypeForField(field);
           let resolve;
           if (field.field_type === "programmatic") {
-            resolve = programmaticFieldResolver(machineName, field.name);
+            resolve = programmaticFieldResolver(machineName, field.name, mediaFieldNames);
           } else if (field.field_type === "reference" || field.field_type === "paragraph" || field.field_type === "image" || field.field_type === "video" || field.field_type === "file") {
             resolve = relationFieldResolver(machineName, field.name);
           } else {
@@ -31375,6 +31385,14 @@ function introspectionPlugin(enabled) {
     }
   };
 }
+function isClientSafeGraphQLError(error) {
+  let current = error;
+  while (current != null && typeof current === "object" && current.name === "GraphQLError") {
+    if (current.originalError == null) return true;
+    current = current.originalError;
+  }
+  return false;
+}
 function createGraphQLHandler(registry, repos, resolver, db, options) {
   const schema = buildGraphQLSchema(registry);
   const { plugins } = buildArmorPlugin({
@@ -31386,6 +31404,9 @@ function createGraphQLHandler(registry, repos, resolver, db, options) {
     graphqlEndpoint: "/graphql",
     graphiql: options.graphiql,
     landingPage: false,
+    maskedErrors: {
+      maskError: (error, message, isDev2) => isClientSafeGraphQLError(error) ? error : maskError(error, message, isDev2)
+    },
     // buildArmorPlugin's return type is `unknown[]` (see security.ts) since Armor's
     // plugin shapes aren't part of its public typings; Yoga's `plugins` option only
     // accepts its own `Plugin` type, so the cast bridges the two.

package/dist/index.js

@@ -36,7 +36,7 @@ import {
   resolveRelationField,
   sql,
   tracer
-} from "./chunk-UVGV7NVV.js";
+} from "./chunk-OAUBUE7N.js";
 
 // ../../node_modules/.pnpm/yaml@2.9.0/node_modules/yaml/dist/nodes/identity.js
 var require_identity = __commonJS({
@@ -47458,6 +47458,23 @@ function quoteIdent(name) {
   if (!/^[a-z][a-z0-9_-]*$/.test(name)) throw new Error(`Unsafe identifier: ${name}`);
   return `"${name}"`;
 }
+async function loadParagraphRows(db, registry2, pType, parentId, fieldName) {
+  const result = await db.execute(
+    sql`SELECT * FROM ${sql.raw(quoteIdent(pType.db.table_name))} WHERE parent_id = ${parentId} AND parent_field = ${fieldName} ORDER BY "order" ASC`
+  );
+  const rows = result.rows;
+  for (const nf of pType.fields) {
+    if (nf.db_column !== null) continue;
+    const comp = nf.ui_component;
+    if (comp.component !== "paragraph-embed" || !comp.ref) continue;
+    const nType = registry2.paragraph_types[comp.ref];
+    if (!nType) continue;
+    for (const row of rows) {
+      row[nf.name] = await loadParagraphRows(db, registry2, nType, row["id"], nf.name);
+    }
+  }
+  return rows;
+}
 async function lookupBasePathId(db, pathOrName) {
   const r = await db.execute(
     sql`SELECT id FROM base_paths WHERE path = ${pathOrName} OR name = ${pathOrName} LIMIT 1`
@@ -47609,10 +47626,7 @@ function registerAdminContentRoutes(app, registry2, repos, mediaRepo, requirePer
               if (comp.component !== "paragraph-embed" || !comp.ref) continue;
               const pType = registry2.paragraph_types[comp.ref];
               if (!pType) continue;
-              const r = await db.execute(
-                sql`SELECT * FROM ${sql.raw(quoteIdent(pType.db.table_name))} WHERE parent_id = ${id} AND parent_field = ${f.name} ORDER BY "order" ASC`
-              );
-              row[f.name] = r.rows;
+              row[f.name] = await loadParagraphRows(db, registry2, pType, id, f.name);
             } else if (f.db_column.junction) {
               const j = f.db_column.junction;
               const r = await db.execute(
@@ -47687,82 +47701,85 @@ function registerAdminContentRoutes(app, registry2, repos, mediaRepo, requirePer
             );
           }
         }
-        const fieldErrors = checkRequiredFields(requiredFields, body);
-        if (fieldErrors.length > 0) {
+        return writeNewItem(c, body);
+      }
+    );
+    const writeNewItem = async (c, body) => {
+      const fieldErrors = checkRequiredFields(requiredFields, body);
+      if (fieldErrors.length > 0) {
+        return c.json(
+          {
+            ok: false,
+            error: {
+              code: "VALIDATION_ERROR",
+              message: "Required fields are missing",
+              details: fieldErrors
+            }
+          },
+          422
+        );
+      }
+      if (body["published"] === true) {
+        const publishDeny = await requirePermission("content:edit")(c, async () => {
+        });
+        if (publishDeny) return publishDeny;
+      }
+      const paragraphFields = contentType.fields.filter((f) => f.db_column === null);
+      const junctionFields = contentType.fields.filter(
+        (f) => f.db_column !== null && f.db_column.junction !== void 0
+      );
+      const columnFields = contentType.fields.filter(
+        (f) => f.db_column !== null && f.db_column.junction === void 0
+      );
+      const columnData = {
+        published: body["published"] ?? false
+      };
+      if (contentType.only_one) {
+        columnData["slug"] = typeName;
+      } else {
+        columnData["slug"] = body["slug"];
+      }
+      for (const f of columnFields) {
+        const val = body[f.name];
+        columnData[f.db_column.column_name] = val !== void 0 ? val : null;
+      }
+      if (db) {
+        const basePathId = await lookupBasePathId(db, contentType.default_base_path);
+        if (!basePathId) {
           return c.json(
             {
               ok: false,
               error: {
-                code: "VALIDATION_ERROR",
-                message: "Required fields are missing",
-                details: fieldErrors
+                code: "BASE_PATH_NOT_FOUND",
+                message: `Base path '${contentType.default_base_path}' not found \u2014 run manguito migrate`
               }
             },
-            422
+            500
           );
         }
-        if (body["published"] === true) {
-          const publishDeny = await requirePermission("content:edit")(c, async () => {
-          });
-          if (publishDeny) return publishDeny;
-        }
-        const paragraphFields = contentType.fields.filter((f) => f.db_column === null);
-        const junctionFields = contentType.fields.filter(
-          (f) => f.db_column !== null && f.db_column.junction !== void 0
-        );
-        const columnFields = contentType.fields.filter(
-          (f) => f.db_column !== null && f.db_column.junction === void 0
-        );
-        const columnData = {
-          published: body["published"] ?? false
-        };
-        if (contentType.only_one) {
-          columnData["slug"] = typeName;
-        } else {
-          columnData["slug"] = body["slug"];
+        columnData["base_path_id"] = basePathId;
+      }
+      const item = await repo.create(columnData);
+      const itemId = item["id"];
+      const mediaDeltas = [topLevelMediaDelta(mediaFields, null, body)];
+      if (db) {
+        for (const f of paragraphFields) {
+          const comp = f.ui_component;
+          if (comp.component !== "paragraph-embed" || !comp.ref) continue;
+          const pType = registry2.paragraph_types[comp.ref];
+          if (!pType) continue;
+          const items = Array.isArray(body[f.name]) ? body[f.name] : [];
+          mediaDeltas.push(await persistParagraphField(db, itemId, contentType.db.table_name, f.name, pType, items, registry2));
         }
-        for (const f of columnFields) {
-          const val = body[f.name];
-          columnData[f.db_column.column_name] = val !== void 0 ? val : null;
+        for (const f of junctionFields) {
+          const junction = f.db_column.junction;
+          const relatedIds = Array.isArray(body[f.name]) ? body[f.name].filter((v2) => typeof v2 === "string") : [];
+          await persistJunctionField(db, itemId, junction, relatedIds);
         }
-        if (db) {
-          const basePathId = await lookupBasePathId(db, contentType.default_base_path);
-          if (!basePathId) {
-            return c.json(
-              {
-                ok: false,
-                error: {
-                  code: "BASE_PATH_NOT_FOUND",
-                  message: `Base path '${contentType.default_base_path}' not found \u2014 run manguito migrate`
-                }
-              },
-              500
-            );
-          }
-          columnData["base_path_id"] = basePathId;
-        }
-        const item = await repo.create(columnData);
-        const itemId = item["id"];
-        const mediaDeltas = [topLevelMediaDelta(mediaFields, null, body)];
-        if (db) {
-          for (const f of paragraphFields) {
-            const comp = f.ui_component;
-            if (comp.component !== "paragraph-embed" || !comp.ref) continue;
-            const pType = registry2.paragraph_types[comp.ref];
-            if (!pType) continue;
-            const items = Array.isArray(body[f.name]) ? body[f.name] : [];
-            mediaDeltas.push(await persistParagraphField(db, itemId, contentType.db.table_name, f.name, pType, items));
-          }
-          for (const f of junctionFields) {
-            const junction = f.db_column.junction;
-            const relatedIds = Array.isArray(body[f.name]) ? body[f.name].filter((v2) => typeof v2 === "string") : [];
-            await persistJunctionField(db, itemId, junction, relatedIds);
-          }
-        }
-        await applyMediaReferenceDelta(mergeMediaDeltas(...mediaDeltas), mediaRepo);
-        return c.json({ ok: true, data: item }, 201);
       }
-    );
+      await applyMediaReferenceDelta(mergeMediaDeltas(...mediaDeltas), mediaRepo);
+      return c.json({ ok: true, data: item }, 201);
+    };
     app.patch(
       `/admin/api/${basePath}/:id`,
       requirePermission("content:edit"),
@@ -47817,71 +47834,92 @@ function registerAdminContentRoutes(app, registry2, repos, mediaRepo, requirePer
             );
           }
         }
-        if (body["published"] === true) {
-          const publishDeny = await requirePermission("content:edit")(c, async () => {
-          });
-          if (publishDeny) return publishDeny;
-          const merged = { ...existing, ...body };
-          const fieldErrors = checkRequiredFields(requiredFields, merged);
-          if (fieldErrors.length > 0) {
-            return c.json(
-              {
-                ok: false,
-                error: {
-                  code: "PUBLISH_VALIDATION_ERROR",
-                  message: "Cannot publish \u2014 required fields are missing",
-                  details: fieldErrors
-                }
-              },
-              422
-            );
-          }
-        }
-        const patchParagraphFields = contentType.fields.filter((f) => f.db_column === null);
-        const patchJunctionFields = contentType.fields.filter(
-          (f) => f.db_column !== null && f.db_column.junction !== void 0
-        );
-        const patchColumnFields = contentType.fields.filter(
-          (f) => f.db_column !== null && f.db_column.junction === void 0
-        );
-        const patchData = {};
-        if (!contentType.only_one && "slug" in body) patchData["slug"] = body["slug"];
-        if ("published" in body) patchData["published"] = body["published"];
-        for (const f of patchColumnFields) {
-          if (f.name in body) {
-            const val = body[f.name];
-            patchData[f.db_column.column_name] = val !== void 0 ? val : null;
-          }
-        }
-        const updated = await repo.update(id, patchData);
-        if (!updated) {
+        return writeExistingItem(c, id, existing, body);
+      }
+    );
+    const writeExistingItem = async (c, id, existing, body) => {
+      if (body["published"] === true) {
+        const publishDeny = await requirePermission("content:edit")(c, async () => {
+        });
+        if (publishDeny) return publishDeny;
+        const merged = { ...existing, ...body };
+        const fieldErrors = checkRequiredFields(requiredFields, merged);
+        if (fieldErrors.length > 0) {
           return c.json(
-            { ok: false, error: { code: "NOT_FOUND", message: "Not found" } },
-            404
+            {
+              ok: false,
+              error: {
+                code: "PUBLISH_VALIDATION_ERROR",
+                message: "Cannot publish \u2014 required fields are missing",
+                details: fieldErrors
+              }
+            },
+            422
           );
         }
-        const mediaDeltas = [
-          topLevelMediaDelta(mediaFields, existing, body)
-        ];
-        if (db) {
-          for (const f of patchParagraphFields) {
-            const comp = f.ui_component;
-            if (comp.component !== "paragraph-embed" || !comp.ref) continue;
-            const pType = registry2.paragraph_types[comp.ref];
-            if (!pType) continue;
-            const items = Array.isArray(body[f.name]) ? body[f.name] : [];
-            mediaDeltas.push(await persistParagraphField(db, id, contentType.db.table_name, f.name, pType, items));
-          }
-          for (const f of patchJunctionFields) {
-            const junction = f.db_column.junction;
-            const relatedIds = Array.isArray(body[f.name]) ? body[f.name].filter((v2) => typeof v2 === "string") : [];
-            await persistJunctionField(db, id, junction, relatedIds);
-          }
+      }
+      const patchParagraphFields = contentType.fields.filter((f) => f.db_column === null);
+      const patchJunctionFields = contentType.fields.filter(
+        (f) => f.db_column !== null && f.db_column.junction !== void 0
+      );
+      const patchColumnFields = contentType.fields.filter(
+        (f) => f.db_column !== null && f.db_column.junction === void 0
+      );
+      const patchData = {};
+      if (!contentType.only_one && "slug" in body) patchData["slug"] = body["slug"];
+      if ("published" in body) patchData["published"] = body["published"];
+      for (const f of patchColumnFields) {
+        if (f.name in body) {
+          const val = body[f.name];
+          patchData[f.db_column.column_name] = val !== void 0 ? val : null;
         }
-        await applyMediaReferenceDelta(mergeMediaDeltas(...mediaDeltas), mediaRepo);
-        return c.json({ ok: true, data: updated });
       }
-    );
+      const updated = await repo.update(id, patchData);
+      if (!updated) {
+        return c.json(
+          { ok: false, error: { code: "NOT_FOUND", message: "Not found" } },
+          404
+        );
+      }
+      const mediaDeltas = [
+        topLevelMediaDelta(mediaFields, existing, body)
+      ];
+      if (db) {
+        for (const f of patchParagraphFields) {
+          const comp = f.ui_component;
+          if (comp.component !== "paragraph-embed" || !comp.ref) continue;
+          const pType = registry2.paragraph_types[comp.ref];
+          if (!pType) continue;
+          const items = Array.isArray(body[f.name]) ? body[f.name] : [];
+          mediaDeltas.push(await persistParagraphField(db, id, contentType.db.table_name, f.name, pType, items, registry2));
+        }
+        for (const f of patchJunctionFields) {
+          const junction = f.db_column.junction;
+          const relatedIds = Array.isArray(body[f.name]) ? body[f.name].filter((v2) => typeof v2 === "string") : [];
+          await persistJunctionField(db, id, junction, relatedIds);
+        }
+      }
+      await applyMediaReferenceDelta(mergeMediaDeltas(...mediaDeltas), mediaRepo);
+      return c.json({ ok: true, data: updated });
+    };
+    if (contentType.only_one) {
+      app.put(
+        `/admin/api/${basePath}`,
+        requirePermission("content:edit"),
+        async (c) => {
+          const body = await c.req.json();
+          const existingResult = await repo.findMany({ page: 1, per_page: 1 });
+          const existing = existingResult.data[0];
+          if (!existing) {
+            const createDeny = await requirePermission("content:create")(c, async () => {
+            });
+            if (createDeny) return createDeny;
+            return writeNewItem(c, body);
+          }
+          return writeExistingItem(c, existing["id"], existing, body);
+        }
+      );
+    }
     app.delete(
       `/admin/api/${basePath}/:id`,
       requirePermission("content:delete"),
@@ -47903,7 +47941,7 @@ function registerAdminContentRoutes(app, registry2, repos, mediaRepo, requirePer
             if (comp.component !== "paragraph-embed" || !comp.ref) continue;
             const pType = registry2.paragraph_types[comp.ref];
             if (!pType) continue;
-            mediaDeltas.push(await deleteParagraphField(db, id, f.name, pType));
+            mediaDeltas.push(await deleteParagraphField(db, id, f.name, pType, registry2));
           }
         }
         await applyMediaReferenceDelta(mergeMediaDeltas(...mediaDeltas), mediaRepo);
@@ -48018,7 +48056,7 @@ function registerAdminContentRoutes(app, registry2, repos, mediaRepo, requirePer
             const pType = registry2.paragraph_types[comp.ref];
             if (!pType) continue;
             const items = Array.isArray(body[f.name]) ? body[f.name] : [];
-            mediaDeltas.push(await persistParagraphField(db, taxItemId, taxonomyType.db.table_name, f.name, pType, items));
+            mediaDeltas.push(await persistParagraphField(db, taxItemId, taxonomyType.db.table_name, f.name, pType, items, registry2));
           }
         }
         await applyMediaReferenceDelta(mergeMediaDeltas(...mediaDeltas), mediaRepo);
@@ -48087,7 +48125,7 @@ function registerAdminContentRoutes(app, registry2, repos, mediaRepo, requirePer
             const pType = registry2.paragraph_types[comp.ref];
             if (!pType) continue;
             const items = Array.isArray(body[f.name]) ? body[f.name] : [];
-            mediaDeltas.push(await persistParagraphField(db, id, taxonomyType.db.table_name, f.name, pType, items));
+            mediaDeltas.push(await persistParagraphField(db, id, taxonomyType.db.table_name, f.name, pType, items, registry2));
           }
         }
         await applyMediaReferenceDelta(mergeMediaDeltas(...mediaDeltas), mediaRepo);
@@ -48115,7 +48153,7 @@ function registerAdminContentRoutes(app, registry2, repos, mediaRepo, requirePer
             if (comp.component !== "paragraph-embed" || !comp.ref) continue;
             const pType = registry2.paragraph_types[comp.ref];
             if (!pType) continue;
-            mediaDeltas.push(await deleteParagraphField(db, id, f.name, pType));
+            mediaDeltas.push(await deleteParagraphField(db, id, f.name, pType, registry2));
           }
         }
         await applyMediaReferenceDelta(mergeMediaDeltas(...mediaDeltas), mediaRepo);
@@ -49064,7 +49102,7 @@ function registerUserRoutes(app, db, requirePermission, requireHierarchy) {
 }
 var API_VERSION = (() => {
   try {
-    return "0.3.0";
+    return "0.3.3";
   } catch {
     return "0.0.0";
   }
@@ -49529,6 +49567,16 @@ function createCmsApp(options) {
     ])
   );
   const publicRepos = { ...publicContentRepos, ...publicTaxonomyRepos };
+  const graphqlRepos = Object.fromEntries([
+    ...Object.entries(registry2.content_types).map(([typeName, ct2]) => [
+      typeName,
+      createDrizzleContentRepository(db, ct2.db.table_name)
+    ]),
+    ...Object.entries(registry2.taxonomy_types).map(([typeName, tt2]) => [
+      typeName,
+      createDrizzleContentRepository(db, tt2.db.table_name)
+    ])
+  ]);
   registerAuthRoutes(app, db);
   app.use("/admin/api/*", authMiddleware);
   app.use("/admin/api/*", mustChangePasswordCheck);
@@ -49569,8 +49617,8 @@ function createCmsApp(options) {
     const gqlOptions = options.graphql;
     let gqlHandler = null;
     let initError = null;
-    const ready = import("./handler-GMCFYZY5-F3656HCZ.js").then(({ createGraphQLHandler }) => {
-      gqlHandler = createGraphQLHandler(registry2, publicRepos, programmaticResolver, db, gqlOptions);
+    const ready = import("./handler-CGHZG3J5-TCG6K3FE.js").then(({ createGraphQLHandler }) => {
+      gqlHandler = createGraphQLHandler(registry2, graphqlRepos, programmaticResolver, db, gqlOptions);
     }).catch((err) => {
       initError = err;
       const message = err instanceof Error ? err.message : String(err);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bobbykim/manguito-cms-cli",
-  "version": "0.4.0",
+  "version": "0.4.3",
   "license": "MIT",
   "author": "Bobby Kim <bobby.sihun.kim@gmail.com>",
   "homepage": "https://github.com/bobbykim89/manguito-cms",
@@ -29,10 +29,10 @@
     "tsup": "^8.5.1",
     "typescript": "^6.0.3",
     "vite": "^8.1.3",
-    "@bobbykim/manguito-cms-admin": "0.3.1",
+    "@bobbykim/manguito-cms-admin": "0.4.0",
     "@bobbykim/manguito-cms-core": "0.3.0",
     "@bobbykim/manguito-cms-db": "0.1.3",
-    "@bobbykim/manguito-cms-api": "0.3.0"
+    "@bobbykim/manguito-cms-api": "0.3.3"
   },
   "devDependencies": {
     "@types/node": "^25.9.5",