@kywi-software/core 0.1.0

package/dist/api/__tests__/brute-force-mfa-wiring.test.js

@@ -0,0 +1,208 @@
+import { describe, it, expect, vi, beforeEach } from 'vitest';
+import { Router } from '../router.js';
+import { registerAuthRoutes } from '../auth-routes.js';
+// Mock user-queries
+vi.mock('../../db/user-queries.js', () => ({
+    getUserByEmail: vi.fn(),
+    getUserById: vi.fn(),
+    getUserGroups: vi.fn().mockResolvedValue([]),
+    buildUserContext: vi.fn((user, groups) => ({
+        id: user.id,
+        role: user.role,
+        groups,
+    })),
+    updateLastLogin: vi.fn().mockResolvedValue(undefined),
+    createUser: vi.fn(),
+}));
+// Mock passwords
+vi.mock('../../auth/passwords.js', () => ({
+    verifyPassword: vi.fn(),
+    hashPassword: vi.fn().mockResolvedValue('hashed'),
+}));
+import { getUserByEmail, getUserById } from '../../db/user-queries.js';
+import { verifyPassword } from '../../auth/passwords.js';
+const TEST_SECRET = 'test-secret-that-is-at-least-32-chars-long!!';
+const mockConfig = {
+    mode: 'coupled',
+    db: { provider: 'postgresql', url: 'postgres://localhost/test' },
+    auth: { secret: TEST_SECRET, providers: ['credentials'] },
+    sites: [{ id: 'site-1', name: 'Test', domain: 'localhost', defaultLocale: 'en', theme: 'default' }],
+    contentTypes: [],
+    plugins: [],
+    modules: [],
+    themes: [],
+    media: { provider: 'local' },
+    cache: { provider: 'memory' },
+};
+const mockUser = {
+    id: 'user-1',
+    email: 'test@example.com',
+    passwordHash: 'hashed-password',
+    role: 'editor',
+    isActive: true,
+    firstName: 'Test',
+    lastName: 'User',
+    lastLoginAt: null,
+    createdAt: new Date(),
+    updatedAt: new Date(),
+};
+function makeBruteForceDb() {
+    return {
+        insertStrike: vi.fn().mockResolvedValue(undefined),
+        getStrikes: vi.fn().mockResolvedValue([]),
+        deleteStrikes: vi.fn().mockResolvedValue(undefined),
+    };
+}
+const bruteForceConfig = {
+    maxStrikes: 5,
+    windowMinutes: 15,
+    lockoutMinutes: 30,
+};
+describe('W2: brute-force wiring on /auth/login', () => {
+    let router;
+    let bfDb;
+    beforeEach(() => {
+        vi.clearAllMocks();
+        router = new Router();
+        bfDb = makeBruteForceDb();
+        registerAuthRoutes(router, {
+            config: mockConfig,
+            db: {},
+            authSecret: TEST_SECRET,
+            bruteForceDb: bfDb,
+            bruteForceConfig,
+        });
+    });
+    it('returns 429 when account is locked out', async () => {
+        vi.mocked(getUserByEmail).mockResolvedValue(mockUser);
+        // Return enough strikes to trigger lockout
+        vi.mocked(bfDb.getStrikes).mockResolvedValue(Array.from({ length: 5 }, (_, i) => ({
+            id: `strike-${i}`,
+            userId: 'user-1',
+            ip: 'unknown',
+            attemptedAt: new Date(Date.now() - 60_000), // 1 min ago
+        })));
+        const res = await router.handle(new Request('http://localhost/auth/login', {
+            method: 'POST',
+            body: JSON.stringify({ email: 'test@example.com', password: 'password123' }),
+            headers: { 'Content-Type': 'application/json' },
+        }), ['auth', 'login']);
+        expect(res.status).toBe(429);
+        const body = await res.json();
+        expect(body.error.code).toBe('TOO_MANY_REQUESTS');
+        expect(body.error.details.retryAfter).toBeGreaterThan(0);
+    });
+    it('records a strike on failed password', async () => {
+        vi.mocked(getUserByEmail).mockResolvedValue(mockUser);
+        vi.mocked(verifyPassword).mockResolvedValue(false);
+        vi.mocked(bfDb.getStrikes).mockResolvedValue([]); // Not locked out
+        const res = await router.handle(new Request('http://localhost/auth/login', {
+            method: 'POST',
+            body: JSON.stringify({ email: 'test@example.com', password: 'wrong' }),
+            headers: { 'Content-Type': 'application/json' },
+        }), ['auth', 'login']);
+        expect(res.status).toBe(401);
+        expect(bfDb.insertStrike).toHaveBeenCalledWith('user-1', 'unknown');
+    });
+    it('clears strikes on successful login', async () => {
+        vi.mocked(getUserByEmail).mockResolvedValue(mockUser);
+        vi.mocked(verifyPassword).mockResolvedValue(true);
+        vi.mocked(bfDb.getStrikes).mockResolvedValue([]); // Not locked out
+        const res = await router.handle(new Request('http://localhost/auth/login', {
+            method: 'POST',
+            body: JSON.stringify({ email: 'test@example.com', password: 'password123' }),
+            headers: { 'Content-Type': 'application/json' },
+        }), ['auth', 'login']);
+        expect(res.status).toBe(200);
+        expect(bfDb.deleteStrikes).toHaveBeenCalledWith('user-1', 'unknown');
+    });
+});
+describe('W3: MFA check on login', () => {
+    let router;
+    let mfaDb;
+    beforeEach(() => {
+        vi.clearAllMocks();
+        router = new Router();
+        mfaDb = {
+            storeMfaSecret: vi.fn(),
+            getMfaSecret: vi.fn(),
+            enableMfa: vi.fn(),
+            updateRecoveryCodes: vi.fn(),
+        };
+        registerAuthRoutes(router, {
+            config: mockConfig,
+            db: {},
+            authSecret: TEST_SECRET,
+            mfaDb,
+        });
+    });
+    it('returns mfaRequired when user has MFA enabled', async () => {
+        vi.mocked(getUserByEmail).mockResolvedValue(mockUser);
+        vi.mocked(verifyPassword).mockResolvedValue(true);
+        mfaDb.getMfaSecret.mockResolvedValue({
+            secret: 'JBSWY3DPEHPK3PXP',
+            recoveryCodes: [],
+            enabledAt: new Date(),
+        });
+        const res = await router.handle(new Request('http://localhost/auth/login', {
+            method: 'POST',
+            body: JSON.stringify({ email: 'test@example.com', password: 'password123' }),
+            headers: { 'Content-Type': 'application/json' },
+        }), ['auth', 'login']);
+        expect(res.status).toBe(200);
+        const body = await res.json();
+        expect(body.data.mfaRequired).toBe(true);
+        expect(body.data.mfaToken).toBeDefined();
+        // Should NOT contain full session tokens
+        expect(body.data.accessToken).toBeUndefined();
+        expect(body.data.refreshToken).toBeUndefined();
+    });
+    it('returns full tokens when user does NOT have MFA', async () => {
+        vi.mocked(getUserByEmail).mockResolvedValue(mockUser);
+        vi.mocked(verifyPassword).mockResolvedValue(true);
+        mfaDb.getMfaSecret.mockResolvedValue(null);
+        const res = await router.handle(new Request('http://localhost/auth/login', {
+            method: 'POST',
+            body: JSON.stringify({ email: 'test@example.com', password: 'password123' }),
+            headers: { 'Content-Type': 'application/json' },
+        }), ['auth', 'login']);
+        expect(res.status).toBe(200);
+        const body = await res.json();
+        expect(body.data.accessToken).toBeDefined();
+        expect(body.data.refreshToken).toBeDefined();
+        expect(body.data.mfaRequired).toBeUndefined();
+    });
+    it('/auth/mfa/verify with mfaToken issues session tokens', async () => {
+        // First, get an mfaToken from login
+        vi.mocked(getUserByEmail).mockResolvedValue(mockUser);
+        vi.mocked(verifyPassword).mockResolvedValue(true);
+        mfaDb.getMfaSecret.mockResolvedValue({
+            secret: 'JBSWY3DPEHPK3PXP',
+            recoveryCodes: [],
+            enabledAt: new Date(),
+        });
+        const loginRes = await router.handle(new Request('http://localhost/auth/login', {
+            method: 'POST',
+            body: JSON.stringify({ email: 'test@example.com', password: 'password123' }),
+            headers: { 'Content-Type': 'application/json' },
+        }), ['auth', 'login']);
+        const loginBody = await loginRes.json();
+        const mfaToken = loginBody.data.mfaToken;
+        // Now use the mfaToken — we mock verifyTotpCode via the mock of mfa.ts
+        // Since verifyTotpCode is not mocked by default, we need to mock it
+        const mfa = await import('../../auth/mfa.js');
+        const verifySpy = vi.spyOn(mfa, 'verifyTotpCode').mockReturnValue(true);
+        vi.mocked(getUserById).mockResolvedValue(mockUser);
+        const verifyRes = await router.handle(new Request('http://localhost/auth/mfa/verify', {
+            method: 'POST',
+            body: JSON.stringify({ mfaToken, code: '123456' }),
+            headers: { 'Content-Type': 'application/json' },
+        }), ['auth', 'mfa', 'verify']);
+        expect(verifyRes.status).toBe(200);
+        const verifyBody = await verifyRes.json();
+        expect(verifyBody.data.accessToken).toBeDefined();
+        expect(verifyBody.data.refreshToken).toBeDefined();
+        verifySpy.mockRestore();
+    });
+});
+//# sourceMappingURL=brute-force-mfa-wiring.test.js.map

package/dist/api/__tests__/brute-force-mfa-wiring.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"brute-force-mfa-wiring.test.js","sourceRoot":"","sources":["../../../src/api/__tests__/brute-force-mfa-wiring.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAA;AAC7D,OAAO,EAAE,MAAM,EAAE,MAAM,cAAc,CAAA;AACrC,OAAO,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAA;AAItD,oBAAoB;AACpB,EAAE,CAAC,IAAI,CAAC,0BAA0B,EAAE,GAAG,EAAE,CAAC,CAAC;IACzC,cAAc,EAAE,EAAE,CAAC,EAAE,EAAE;IACvB,WAAW,EAAE,EAAE,CAAC,EAAE,EAAE;IACpB,aAAa,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,EAAE,CAAC;IAC5C,gBAAgB,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC,IAAS,EAAE,MAAgB,EAAE,EAAE,CAAC,CAAC;QACxD,EAAE,EAAE,IAAI,CAAC,EAAE;QACX,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,MAAM;KACP,CAAC,CAAC;IACH,eAAe,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,SAAS,CAAC;IACrD,UAAU,EAAE,EAAE,CAAC,EAAE,EAAE;CACpB,CAAC,CAAC,CAAA;AAEH,iBAAiB;AACjB,EAAE,CAAC,IAAI,CAAC,yBAAyB,EAAE,GAAG,EAAE,CAAC,CAAC;IACxC,cAAc,EAAE,EAAE,CAAC,EAAE,EAAE;IACvB,YAAY,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,QAAQ,CAAC;CAClD,CAAC,CAAC,CAAA;AAEH,OAAO,EAAE,cAAc,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAA;AACtE,OAAO,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAA;AAExD,MAAM,WAAW,GAAG,8CAA8C,CAAA;AAElE,MAAM,UAAU,GAAe;IAC7B,IAAI,EAAE,SAAS;IACf,EAAE,EAAE,EAAE,QAAQ,EAAE,YAAY,EAAE,GAAG,EAAE,2BAA2B,EAAE;IAChE,IAAI,EAAE,EAAE,MAAM,EAAE,WAAW,EAAE,SAAS,EAAE,CAAC,aAAa,CAAC,EAAE;IACzD,KAAK,EAAE,CAAC,EAAE,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,aAAa,EAAE,IAAI,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC;IACnG,YAAY,EAAE,EAAE;IAChB,OAAO,EAAE,EAAE;IACX,OAAO,EAAE,EAAE;IACX,MAAM,EAAE,EAAE;IACV,KAAK,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE;IAC5B,KAAK,EAAE,EAAE,QAAQ,EAAE,QAAQ,EAAE;CAC9B,CAAA;AAED,MAAM,QAAQ,GAAG;IACf,EAAE,EAAE,QAAQ;IACZ,KAAK,EAAE,kBAAkB;IACzB,YAAY,EAAE,iBAAiB;IAC/B,IAAI,EAAE,QAAQ;IACd,QAAQ,EAAE,IAAI;IACd,SAAS,EAAE,MAAM;IACjB,QAAQ,EAAE,MAAM;IAChB,WAAW,EAAE,IAAI;IACjB,SAAS,EAAE,IAAI,IAAI,EAAE;IACrB,SAAS,EAAE,IAAI,IAAI,EAAE;CACtB,CAAA;AAED,SAAS,gBAAgB;IACvB,OAAO;QACL,YAAY,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,SAAS,CAAC;QAClD,UAAU,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,EAAE,CAAC;QACzC,aAAa,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,SAAS,CAAC;KACpD,CAAA;AACH,CAAC;AAED,MAAM,gBAAgB,GAAqB;IACzC,UAAU,EAAE,CAAC;IACb,aAAa,EAAE,EAAE;IACjB,cAAc,EAAE,EAAE;CACnB,CAAA;AAED,QAAQ,CAAC,uCAAuC,EAAE,GAAG,EAAE;IACrD,IAAI,MAAc,CAAA;IAClB,IAAI,IAAkB,CAAA;IAEtB,UAAU,CAAC,GAAG,EAAE;QACd,EAAE,CAAC,aAAa,EAAE,CAAA;QAClB,MAAM,GAAG,IAAI,MAAM,EAAE,CAAA;QACrB,IAAI,GAAG,gBAAgB,EAAE,CAAA;QACzB,kBAAkB,CAAC,MAAM,EAAE;YACzB,MAAM,EAAE,UAAU;YAClB,EAAE,EAAE,EAAS;YACb,UAAU,EAAE,WAAW;YACvB,YAAY,EAAE,IAAI;YAClB,gBAAgB;SACjB,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,wCAAwC,EAAE,KAAK,IAAI,EAAE;QACtD,EAAE,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC,iBAAiB,CAAC,QAAe,CAAC,CAAA;QAC5D,2CAA2C;QAC3C,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,iBAAiB,CAC1C,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;YACnC,EAAE,EAAE,UAAU,CAAC,EAAE;YACjB,MAAM,EAAE,QAAQ;YAChB,EAAE,EAAE,SAAS;YACb,WAAW,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC,EAAE,YAAY;SACzD,CAAC,CAAC,CACJ,CAAA;QAED,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,MAAM,CAC7B,IAAI,OAAO,CAAC,6BAA6B,EAAE;YACzC,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,kBAAkB,EAAE,QAAQ,EAAE,aAAa,EAAE,CAAC;YAC5E,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;SAChD,CAAC,EACF,CAAC,MAAM,EAAE,OAAO,CAAC,CAClB,CAAA;QAED,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;QAC5B,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAS,CAAA;QACpC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAA;QACjD,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAA;IAC1D,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,qCAAqC,EAAE,KAAK,IAAI,EAAE;QACnD,EAAE,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC,iBAAiB,CAAC,QAAe,CAAC,CAAA;QAC5D,EAAE,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC,iBAAiB,CAAC,KAAK,CAAC,CAAA;QAClD,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,iBAAiB,CAAC,EAAE,CAAC,CAAA,CAAC,iBAAiB;QAElE,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,MAAM,CAC7B,IAAI,OAAO,CAAC,6BAA6B,EAAE;YACzC,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,kBAAkB,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC;YACtE,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;SAChD,CAAC,EACF,CAAC,MAAM,EAAE,OAAO,CAAC,CAClB,CAAA;QAED,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;QAC5B,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,oBAAoB,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAA;IACrE,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,oCAAoC,EAAE,KAAK,IAAI,EAAE;QAClD,EAAE,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC,iBAAiB,CAAC,QAAe,CAAC,CAAA;QAC5D,EAAE,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAA;QACjD,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,iBAAiB,CAAC,EAAE,CAAC,CAAA,CAAC,iBAAiB;QAElE,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,MAAM,CAC7B,IAAI,OAAO,CAAC,6BAA6B,EAAE;YACzC,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,kBAAkB,EAAE,QAAQ,EAAE,aAAa,EAAE,CAAC;YAC5E,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;SAChD,CAAC,EACF,CAAC,MAAM,EAAE,OAAO,CAAC,CAClB,CAAA;QAED,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;QAC5B,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,oBAAoB,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAA;IACtE,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA;AAEF,QAAQ,CAAC,wBAAwB,EAAE,GAAG,EAAE;IACtC,IAAI,MAAc,CAAA;IAClB,IAAI,KAAU,CAAA;IAEd,UAAU,CAAC,GAAG,EAAE;QACd,EAAE,CAAC,aAAa,EAAE,CAAA;QAClB,MAAM,GAAG,IAAI,MAAM,EAAE,CAAA;QACrB,KAAK,GAAG;YACN,cAAc,EAAE,EAAE,CAAC,EAAE,EAAE;YACvB,YAAY,EAAE,EAAE,CAAC,EAAE,EAAE;YACrB,SAAS,EAAE,EAAE,CAAC,EAAE,EAAE;YAClB,mBAAmB,EAAE,EAAE,CAAC,EAAE,EAAE;SAC7B,CAAA;QACD,kBAAkB,CAAC,MAAM,EAAE;YACzB,MAAM,EAAE,UAAU;YAClB,EAAE,EAAE,EAAS;YACb,UAAU,EAAE,WAAW;YACvB,KAAK;SACN,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,+CAA+C,EAAE,KAAK,IAAI,EAAE;QAC7D,EAAE,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC,iBAAiB,CAAC,QAAe,CAAC,CAAA;QAC5D,EAAE,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAA;QACjD,KAAK,CAAC,YAAY,CAAC,iBAAiB,CAAC;YACnC,MAAM,EAAE,kBAAkB;YAC1B,aAAa,EAAE,EAAE;YACjB,SAAS,EAAE,IAAI,IAAI,EAAE;SACtB,CAAC,CAAA;QAEF,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,MAAM,CAC7B,IAAI,OAAO,CAAC,6BAA6B,EAAE;YACzC,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,kBAAkB,EAAE,QAAQ,EAAE,aAAa,EAAE,CAAC;YAC5E,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;SAChD,CAAC,EACF,CAAC,MAAM,EAAE,OAAO,CAAC,CAClB,CAAA;QAED,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;QAC5B,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAS,CAAA;QACpC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QACxC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,WAAW,EAAE,CAAA;QACxC,yCAAyC;QACzC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,aAAa,EAAE,CAAA;QAC7C,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,aAAa,EAAE,CAAA;IAChD,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,iDAAiD,EAAE,KAAK,IAAI,EAAE;QAC/D,EAAE,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC,iBAAiB,CAAC,QAAe,CAAC,CAAA;QAC5D,EAAE,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAA;QACjD,KAAK,CAAC,YAAY,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAA;QAE1C,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,MAAM,CAC7B,IAAI,OAAO,CAAC,6BAA6B,EAAE;YACzC,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,kBAAkB,EAAE,QAAQ,EAAE,aAAa,EAAE,CAAC;YAC5E,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;SAChD,CAAC,EACF,CAAC,MAAM,EAAE,OAAO,CAAC,CAClB,CAAA;QAED,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;QAC5B,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAS,CAAA;QACpC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,WAAW,EAAE,CAAA;QAC3C,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,WAAW,EAAE,CAAA;QAC5C,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,aAAa,EAAE,CAAA;IAC/C,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,sDAAsD,EAAE,KAAK,IAAI,EAAE;QACpE,oCAAoC;QACpC,EAAE,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC,iBAAiB,CAAC,QAAe,CAAC,CAAA;QAC5D,EAAE,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAA;QACjD,KAAK,CAAC,YAAY,CAAC,iBAAiB,CAAC;YACnC,MAAM,EAAE,kBAAkB;YAC1B,aAAa,EAAE,EAAE;YACjB,SAAS,EAAE,IAAI,IAAI,EAAE;SACtB,CAAC,CAAA;QAEF,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,MAAM,CAClC,IAAI,OAAO,CAAC,6BAA6B,EAAE;YACzC,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,kBAAkB,EAAE,QAAQ,EAAE,aAAa,EAAE,CAAC;YAC5E,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;SAChD,CAAC,EACF,CAAC,MAAM,EAAE,OAAO,CAAC,CAClB,CAAA;QACD,MAAM,SAAS,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAS,CAAA;QAC9C,MAAM,QAAQ,GAAG,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAA;QAExC,uEAAuE;QACvE,oEAAoE;QACpE,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,mBAAmB,CAAC,CAAA;QAC7C,MAAM,SAAS,GAAG,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,gBAAgB,CAAC,CAAC,eAAe,CAAC,IAAI,CAAC,CAAA;QAEvE,EAAE,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,iBAAiB,CAAC,QAAe,CAAC,CAAA;QAEzD,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,MAAM,CACnC,IAAI,OAAO,CAAC,kCAAkC,EAAE;YAC9C,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;YAClD,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;SAChD,CAAC,EACF,CAAC,MAAM,EAAE,KAAK,EAAE,QAAQ,CAAC,CAC1B,CAAA;QAED,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;QAClC,MAAM,UAAU,GAAG,MAAM,SAAS,CAAC,IAAI,EAAS,CAAA;QAChD,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,WAAW,EAAE,CAAA;QACjD,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,WAAW,EAAE,CAAA;QAElD,SAAS,CAAC,WAAW,EAAE,CAAA;IACzB,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA"}

package/dist/api/__tests__/bulk-routes.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=bulk-routes.test.d.ts.map

package/dist/api/__tests__/bulk-routes.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"bulk-routes.test.d.ts","sourceRoot":"","sources":["../../../src/api/__tests__/bulk-routes.test.ts"],"names":[],"mappings":""}

package/dist/api/__tests__/bulk-routes.test.js

@@ -0,0 +1,233 @@
+import { describe, it, expect, vi, beforeEach } from 'vitest';
+import { Router } from '../router.js';
+import { registerBulkRoutes } from '../bulk-routes.js';
+import { buildCustomFieldTable } from '../../db/dynamic-schema.js';
+import { createHookRegistry } from '../../hooks/registry.js';
+// bulkPublish/bulkUnpublish now RETURNING the updated rows (needed so the route
+// can dispatch a hook per row). Rows carry `contentTypeName` so the route can
+// resolve the content type for dispatch, plus siteId/slug the cache subscribers
+// key on.
+const PUBLISHED_ROWS = [
+    { id: 'id-1', contentTypeName: 'blogPost', siteId: 'default', slug: 'a', status: 'published' },
+    { id: 'id-2', contentTypeName: 'blogPost', siteId: 'default', slug: 'b', status: 'published' },
+];
+const UNPUBLISHED_ROWS = [
+    { id: 'id-1', contentTypeName: 'blogPost', siteId: 'default', slug: 'a', status: 'draft' },
+    { id: 'id-2', contentTypeName: 'blogPost', siteId: 'default', slug: 'b', status: 'draft' },
+];
+// Mock bulk-queries
+vi.mock('../../db/bulk-queries.js', () => ({
+    bulkCreate: vi.fn().mockResolvedValue({ created: 2, ids: ['id-1', 'id-2'] }),
+    bulkUpdate: vi.fn().mockResolvedValue({ updated: 2, ids: ['id-1', 'id-2'] }),
+    bulkPublish: vi.fn(),
+    bulkUnpublish: vi.fn(),
+    bulkDelete: vi.fn().mockResolvedValue(2),
+    bulkUpdateStatus: vi.fn().mockResolvedValue(2),
+}));
+import { bulkPublish, bulkUnpublish } from '../../db/bulk-queries.js';
+// Mock auth
+vi.mock('../auth.js', () => ({
+    resolveAuth: vi.fn().mockResolvedValue({
+        user: { id: 'user-1', role: 'siteAdmin', groups: [] },
+    }),
+}));
+// Mock roles
+vi.mock('../../auth/roles.js', () => ({
+    canAccessContent: vi.fn().mockReturnValue(true),
+    hasMinRole: vi.fn().mockReturnValue(true),
+}));
+// Mock the content-ACL gate (default: allow). Per-test overrides to false prove
+// the fail-closed bulk enforcement (G-J04b-01).
+vi.mock('../../auth/access-control.js', () => ({
+    checkDocumentMutationAccess: vi.fn().mockResolvedValue(true),
+}));
+import { checkDocumentMutationAccess } from '../../auth/access-control.js';
+// Mock site-context
+vi.mock('../site-context.js', () => ({
+    resolveSiteId: vi.fn().mockReturnValue('default'),
+}));
+const blogPostConfig = {
+    name: 'blogPost',
+    label: 'Blog Post',
+    baseType: 'content',
+    fields: [
+        { name: 'excerpt', type: 'richText', label: 'Excerpt' },
+    ],
+};
+const mockConfig = {
+    mode: 'coupled',
+    db: { provider: 'postgresql', url: 'postgres://localhost/test' },
+    auth: { secret: 'test-secret-that-is-at-least-32-chars-long!!', providers: ['credentials'] },
+    sites: [{ id: 'default', name: 'Test', domain: 'localhost', defaultLocale: 'en', theme: 'default' }],
+    contentTypes: [blogPostConfig],
+    plugins: [],
+    modules: [],
+    themes: [],
+    media: { provider: 'local' },
+    cache: { provider: 'memory' },
+};
+function jsonReq(method, url, body) {
+    const init = { method, headers: { 'Content-Type': 'application/json' } };
+    if (body !== undefined)
+        init.body = JSON.stringify(body);
+    return new Request(url, init);
+}
+describe('bulk routes', () => {
+    let router;
+    let hookRegistry;
+    beforeEach(() => {
+        vi.mocked(bulkPublish).mockResolvedValue([...PUBLISHED_ROWS]);
+        vi.mocked(bulkUnpublish).mockResolvedValue([...UNPUBLISHED_ROWS]);
+        router = new Router();
+        const contentTypeMap = new Map();
+        const customTableMap = new Map();
+        for (const ct of mockConfig.contentTypes) {
+            contentTypeMap.set(ct.name, ct);
+            customTableMap.set(ct.name, buildCustomFieldTable(ct));
+        }
+        hookRegistry = createHookRegistry();
+        registerBulkRoutes(router, {
+            config: mockConfig,
+            db: {},
+            authSecret: mockConfig.auth.secret,
+            contentTypeMap,
+            customTableMap,
+            hookRegistry,
+            kywiCtx: { cache: { invalidate: async () => { }, invalidatePattern: async () => { } }, user: null },
+        });
+    });
+    it('POST /content/:type/bulk creates items (status 201)', async () => {
+        const res = await router.handle(jsonReq('POST', 'http://localhost/api/v1/content/blogPost/bulk', {
+            items: [{ title: 'A' }, { title: 'B' }],
+        }), ['content', 'blogPost', 'bulk']);
+        expect(res.status).toBe(201);
+        const body = (await res.json());
+        expect(body.data.created).toBe(2);
+    });
+    it('PUT /content/:type/bulk updates items', async () => {
+        const res = await router.handle(jsonReq('PUT', 'http://localhost/api/v1/content/blogPost/bulk', {
+            items: [{ id: 'id-1', title: 'Updated A' }, { id: 'id-2', title: 'Updated B' }],
+        }), ['content', 'blogPost', 'bulk']);
+        expect(res.status).toBe(200);
+        const body = (await res.json());
+        expect(body.data.updated).toBe(2);
+    });
+    it('DELETE /content/:type/bulk deletes items', async () => {
+        const res = await router.handle(jsonReq('DELETE', 'http://localhost/api/v1/content/blogPost/bulk', {
+            ids: ['id-1', 'id-2'],
+        }), ['content', 'blogPost', 'bulk']);
+        expect(res.status).toBe(200);
+        const body = (await res.json());
+        expect(body.data.count).toBe(2);
+    });
+    it('POST /content/:type/bulk/publish publishes items', async () => {
+        const res = await router.handle(jsonReq('POST', 'http://localhost/api/v1/content/blogPost/bulk/publish', {
+            ids: ['id-1', 'id-2'],
+        }), ['content', 'blogPost', 'bulk', 'publish']);
+        expect(res.status).toBe(200);
+        const body = (await res.json());
+        expect(body.data.count).toBe(2);
+    });
+    it('POST /content/:type/bulk/unpublish unpublishes items', async () => {
+        const res = await router.handle(jsonReq('POST', 'http://localhost/api/v1/content/blogPost/bulk/unpublish', {
+            ids: ['id-1', 'id-2'],
+        }), ['content', 'blogPost', 'bulk', 'unpublish']);
+        expect(res.status).toBe(200);
+        const body = (await res.json());
+        expect(body.data.count).toBe(2);
+    });
+    it('returns 404 for unknown content type', async () => {
+        const res = await router.handle(jsonReq('POST', 'http://localhost/api/v1/content/unknown/bulk', {
+            items: [{ title: 'A' }],
+        }), ['content', 'unknown', 'bulk']);
+        expect(res.status).toBe(404);
+    });
+    it('old paths without :type segment return 404', async () => {
+        // Old path: POST /content/bulk/publish (missing :type)
+        const res = await router.handle(jsonReq('POST', 'http://localhost/api/v1/content/bulk/publish', {
+            ids: ['id-1'],
+        }), ['content', 'bulk', 'publish']);
+        // Should not match any route since 'bulk' is not a valid content type
+        // (bulk routes now require /content/:type/bulk/...)
+        // This tests that the old route format no longer works
+        expect(res.status).toBe(404);
+    });
+    // ── Hook dispatch on bulk publish/unpublish (Phase G) ─────────────────────────
+    // The admin content-list "bulk publish/unpublish" runs through these routes, so
+    // they must fire the content lifecycle hooks that drive cache/feed/nav + AX
+    // invalidation and webhooks — otherwise the public site serves stale cache.
+    describe('hook dispatch', () => {
+        it('bulk publish emits content:afterPublish once per published row', async () => {
+            const handler = vi.fn().mockResolvedValue(undefined);
+            const typedHandler = vi.fn().mockResolvedValue(undefined);
+            hookRegistry.on('content:afterPublish', handler);
+            hookRegistry.on('content:blogPost:afterPublish', typedHandler);
+            const res = await router.handle(jsonReq('POST', 'http://localhost/api/v1/content/blogPost/bulk/publish', {
+                ids: ['id-1', 'id-2'],
+            }), ['content', 'blogPost', 'bulk', 'publish']);
+            expect(res.status).toBe(200);
+            expect(handler).toHaveBeenCalledTimes(2);
+            expect(typedHandler).toHaveBeenCalledTimes(2);
+            const [payload] = handler.mock.calls[0];
+            expect(payload.contentType).toBe('blogPost');
+            expect(payload.content.id).toBe('id-1');
+        });
+        it('bulk unpublish emits content:afterUpdate once per row (cache invalidation)', async () => {
+            const updateHandler = vi.fn().mockResolvedValue(undefined);
+            const publishHandler = vi.fn().mockResolvedValue(undefined);
+            hookRegistry.on('content:afterUpdate', updateHandler);
+            hookRegistry.on('content:afterPublish', publishHandler);
+            const res = await router.handle(jsonReq('POST', 'http://localhost/api/v1/content/blogPost/bulk/unpublish', {
+                ids: ['id-1', 'id-2'],
+            }), ['content', 'blogPost', 'bulk', 'unpublish']);
+            expect(res.status).toBe(200);
+            // afterUpdate carries the invalidation; afterPublish must NOT fire on unpublish.
+            expect(updateHandler).toHaveBeenCalledTimes(2);
+            expect(publishHandler).not.toHaveBeenCalled();
+        });
+        it('bulk publish skips dispatch for a row whose content type is orphaned', async () => {
+            vi.mocked(bulkPublish).mockResolvedValueOnce([
+                { id: 'id-1', contentTypeName: 'blogPost', siteId: 'default', slug: 'a' },
+                { id: 'id-9', contentTypeName: 'ghostType', siteId: 'default', slug: 'z' },
+            ]);
+            const handler = vi.fn().mockResolvedValue(undefined);
+            hookRegistry.on('content:afterPublish', handler);
+            const res = await router.handle(jsonReq('POST', 'http://localhost/api/v1/content/blogPost/bulk/publish', {
+                ids: ['id-1', 'id-9'],
+            }), ['content', 'blogPost', 'bulk', 'publish']);
+            expect(res.status).toBe(200);
+            const body = (await res.json());
+            // Count reflects both updated rows; only the registered type dispatched.
+            expect(body.data.count).toBe(2);
+            expect(handler).toHaveBeenCalledTimes(1);
+        });
+    });
+    // ── Fail-closed content-ACL enforcement (G-J04b-01) ───────────────────────────
+    // A bulk endpoint must never be a bypass for the per-node ACL. If any targeted
+    // node is denied, the whole batch is rejected with 403.
+    describe('document-ACL enforcement', () => {
+        it('PUT bulk update rejects the batch (403) when one node is denied', async () => {
+            vi.mocked(checkDocumentMutationAccess).mockResolvedValueOnce(false);
+            const res = await router.handle(jsonReq('PUT', 'http://localhost/api/v1/content/blogPost/bulk', {
+                items: [{ id: 'id-1', title: 'A' }, { id: 'id-2', title: 'B' }],
+            }), ['content', 'blogPost', 'bulk']);
+            expect(res.status).toBe(403);
+        });
+        it('DELETE bulk rejects the batch (403) when one node is denied', async () => {
+            vi.mocked(checkDocumentMutationAccess).mockResolvedValueOnce(false);
+            const res = await router.handle(jsonReq('DELETE', 'http://localhost/api/v1/content/blogPost/bulk', { ids: ['id-1', 'id-2'] }), ['content', 'blogPost', 'bulk']);
+            expect(res.status).toBe(403);
+        });
+        it('POST bulk publish rejects the batch (403) when one node is denied', async () => {
+            vi.mocked(checkDocumentMutationAccess).mockResolvedValueOnce(false);
+            const res = await router.handle(jsonReq('POST', 'http://localhost/api/v1/content/blogPost/bulk/publish', { ids: ['id-1'] }), ['content', 'blogPost', 'bulk', 'publish']);
+            expect(res.status).toBe(403);
+        });
+        it('POST bulk unpublish rejects the batch (403) when one node is denied', async () => {
+            vi.mocked(checkDocumentMutationAccess).mockResolvedValueOnce(false);
+            const res = await router.handle(jsonReq('POST', 'http://localhost/api/v1/content/blogPost/bulk/unpublish', { ids: ['id-1'] }), ['content', 'blogPost', 'bulk', 'unpublish']);
+            expect(res.status).toBe(403);
+        });
+    });
+});
+//# sourceMappingURL=bulk-routes.test.js.map

package/dist/api/__tests__/bulk-routes.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"bulk-routes.test.js","sourceRoot":"","sources":["../../../src/api/__tests__/bulk-routes.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAA;AAC7D,OAAO,EAAE,MAAM,EAAE,MAAM,cAAc,CAAA;AACrC,OAAO,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAA;AAEtD,OAAO,EAAE,qBAAqB,EAAE,MAAM,4BAA4B,CAAA;AAClE,OAAO,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAA;AAG5D,gFAAgF;AAChF,8EAA8E;AAC9E,gFAAgF;AAChF,UAAU;AACV,MAAM,cAAc,GAAG;IACrB,EAAE,EAAE,EAAE,MAAM,EAAE,eAAe,EAAE,UAAU,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,GAAG,EAAE,MAAM,EAAE,WAAW,EAAE;IAC9F,EAAE,EAAE,EAAE,MAAM,EAAE,eAAe,EAAE,UAAU,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,GAAG,EAAE,MAAM,EAAE,WAAW,EAAE;CAC/F,CAAA;AACD,MAAM,gBAAgB,GAAG;IACvB,EAAE,EAAE,EAAE,MAAM,EAAE,eAAe,EAAE,UAAU,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE;IAC1F,EAAE,EAAE,EAAE,MAAM,EAAE,eAAe,EAAE,UAAU,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE;CAC3F,CAAA;AAED,oBAAoB;AACpB,EAAE,CAAC,IAAI,CAAC,0BAA0B,EAAE,GAAG,EAAE,CAAC,CAAC;IACzC,UAAU,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,GAAG,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC;IAC5E,UAAU,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,GAAG,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC;IAC5E,WAAW,EAAE,EAAE,CAAC,EAAE,EAAE;IACpB,aAAa,EAAE,EAAE,CAAC,EAAE,EAAE;IACtB,UAAU,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,CAAC,CAAC;IACxC,gBAAgB,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,CAAC,CAAC;CAC/C,CAAC,CAAC,CAAA;AACH,OAAO,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAA;AAErE,YAAY;AACZ,EAAE,CAAC,IAAI,CAAC,YAAY,EAAE,GAAG,EAAE,CAAC,CAAC;IAC3B,WAAW,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC;QACrC,IAAI,EAAE,EAAE,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,WAAW,EAAE,MAAM,EAAE,EAAE,EAAE;KACtD,CAAC;CACH,CAAC,CAAC,CAAA;AAEH,aAAa;AACb,EAAE,CAAC,IAAI,CAAC,qBAAqB,EAAE,GAAG,EAAE,CAAC,CAAC;IACpC,gBAAgB,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,eAAe,CAAC,IAAI,CAAC;IAC/C,UAAU,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,eAAe,CAAC,IAAI,CAAC;CAC1C,CAAC,CAAC,CAAA;AAEH,gFAAgF;AAChF,gDAAgD;AAChD,EAAE,CAAC,IAAI,CAAC,8BAA8B,EAAE,GAAG,EAAE,CAAC,CAAC;IAC7C,2BAA2B,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,IAAI,CAAC;CAC7D,CAAC,CAAC,CAAA;AACH,OAAO,EAAE,2BAA2B,EAAE,MAAM,8BAA8B,CAAA;AAE1E,oBAAoB;AACpB,EAAE,CAAC,IAAI,CAAC,oBAAoB,EAAE,GAAG,EAAE,CAAC,CAAC;IACnC,aAAa,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,eAAe,CAAC,SAAS,CAAC;CAClD,CAAC,CAAC,CAAA;AAEH,MAAM,cAAc,GAAsB;IACxC,IAAI,EAAE,UAAU;IAChB,KAAK,EAAE,WAAW;IAClB,QAAQ,EAAE,SAAS;IACnB,MAAM,EAAE;QACN,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,SAAS,EAAE;KACxD;CACF,CAAA;AAED,MAAM,UAAU,GAAe;IAC7B,IAAI,EAAE,SAAS;IACf,EAAE,EAAE,EAAE,QAAQ,EAAE,YAAY,EAAE,GAAG,EAAE,2BAA2B,EAAE;IAChE,IAAI,EAAE,EAAE,MAAM,EAAE,8CAA8C,EAAE,SAAS,EAAE,CAAC,aAAa,CAAC,EAAE;IAC5F,KAAK,EAAE,CAAC,EAAE,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,aAAa,EAAE,IAAI,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC;IACpG,YAAY,EAAE,CAAC,cAAc,CAAC;IAC9B,OAAO,EAAE,EAAE;IACX,OAAO,EAAE,EAAE;IACX,MAAM,EAAE,EAAE;IACV,KAAK,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE;IAC5B,KAAK,EAAE,EAAE,QAAQ,EAAE,QAAQ,EAAE;CAC9B,CAAA;AAED,SAAS,OAAO,CAAC,MAAc,EAAE,GAAW,EAAE,IAAc;IAC1D,MAAM,IAAI,GAAgB,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,EAAE,CAAA;IACrF,IAAI,IAAI,KAAK,SAAS;QAAE,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAA;IACxD,OAAO,IAAI,OAAO,CAAC,GAAG,EAAE,IAAI,CAAC,CAAA;AAC/B,CAAC;AAED,QAAQ,CAAC,aAAa,EAAE,GAAG,EAAE;IAC3B,IAAI,MAAc,CAAA;IAClB,IAAI,YAA0B,CAAA;IAE9B,UAAU,CAAC,GAAG,EAAE;QACd,EAAE,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,iBAAiB,CAAC,CAAC,GAAG,cAAc,CAAC,CAAC,CAAA;QAC7D,EAAE,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,iBAAiB,CAAC,CAAC,GAAG,gBAAgB,CAAC,CAAC,CAAA;QAEjE,MAAM,GAAG,IAAI,MAAM,EAAE,CAAA;QACrB,MAAM,cAAc,GAAG,IAAI,GAAG,EAA6B,CAAA;QAC3D,MAAM,cAAc,GAAG,IAAI,GAAG,EAAE,CAAA;QAEhC,KAAK,MAAM,EAAE,IAAI,UAAU,CAAC,YAAY,EAAE,CAAC;YACzC,cAAc,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,CAAA;YAC/B,cAAc,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,EAAE,qBAAqB,CAAC,EAAE,CAAC,CAAC,CAAA;QACxD,CAAC;QAED,YAAY,GAAG,kBAAkB,EAAE,CAAA;QAEnC,kBAAkB,CAAC,MAAM,EAAE;YACzB,MAAM,EAAE,UAAU;YAClB,EAAE,EAAE,EAAS;YACb,UAAU,EAAE,UAAU,CAAC,IAAI,CAAC,MAAM;YAClC,cAAc;YACd,cAAc;YACd,YAAY;YACZ,OAAO,EAAE,EAAE,KAAK,EAAE,EAAE,UAAU,EAAE,KAAK,IAAI,EAAE,GAAE,CAAC,EAAE,iBAAiB,EAAE,KAAK,IAAI,EAAE,GAAE,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE;SAClG,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,qDAAqD,EAAE,KAAK,IAAI,EAAE;QACnE,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,MAAM,CAC7B,OAAO,CAAC,MAAM,EAAE,+CAA+C,EAAE;YAC/D,KAAK,EAAE,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC;SACxC,CAAC,EACF,CAAC,SAAS,EAAE,UAAU,EAAE,MAAM,CAAC,CAChC,CAAA;QACD,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;QAC5B,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAQ,CAAA;QACtC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IACnC,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,uCAAuC,EAAE,KAAK,IAAI,EAAE;QACrD,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,MAAM,CAC7B,OAAO,CAAC,KAAK,EAAE,+CAA+C,EAAE;YAC9D,KAAK,EAAE,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,WAAW,EAAE,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC;SAChF,CAAC,EACF,CAAC,SAAS,EAAE,UAAU,EAAE,MAAM,CAAC,CAChC,CAAA;QACD,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;QAC5B,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAQ,CAAA;QACtC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IACnC,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,0CAA0C,EAAE,KAAK,IAAI,EAAE;QACxD,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,MAAM,CAC7B,OAAO,CAAC,QAAQ,EAAE,+CAA+C,EAAE;YACjE,GAAG,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC;SACtB,CAAC,EACF,CAAC,SAAS,EAAE,UAAU,EAAE,MAAM,CAAC,CAChC,CAAA;QACD,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;QAC5B,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAQ,CAAA;QACtC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IACjC,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,kDAAkD,EAAE,KAAK,IAAI,EAAE;QAChE,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,MAAM,CAC7B,OAAO,CAAC,MAAM,EAAE,uDAAuD,EAAE;YACvE,GAAG,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC;SACtB,CAAC,EACF,CAAC,SAAS,EAAE,UAAU,EAAE,MAAM,EAAE,SAAS,CAAC,CAC3C,CAAA;QACD,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;QAC5B,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAQ,CAAA;QACtC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IACjC,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,sDAAsD,EAAE,KAAK,IAAI,EAAE;QACpE,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,MAAM,CAC7B,OAAO,CAAC,MAAM,EAAE,yDAAyD,EAAE;YACzE,GAAG,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC;SACtB,CAAC,EACF,CAAC,SAAS,EAAE,UAAU,EAAE,MAAM,EAAE,WAAW,CAAC,CAC7C,CAAA;QACD,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;QAC5B,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAQ,CAAA;QACtC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IACjC,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,sCAAsC,EAAE,KAAK,IAAI,EAAE;QACpD,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,MAAM,CAC7B,OAAO,CAAC,MAAM,EAAE,8CAA8C,EAAE;YAC9D,KAAK,EAAE,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC;SACxB,CAAC,EACF,CAAC,SAAS,EAAE,SAAS,EAAE,MAAM,CAAC,CAC/B,CAAA;QACD,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;IAC9B,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,4CAA4C,EAAE,KAAK,IAAI,EAAE;QAC1D,uDAAuD;QACvD,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,MAAM,CAC7B,OAAO,CAAC,MAAM,EAAE,8CAA8C,EAAE;YAC9D,GAAG,EAAE,CAAC,MAAM,CAAC;SACd,CAAC,EACF,CAAC,SAAS,EAAE,MAAM,EAAE,SAAS,CAAC,CAC/B,CAAA;QACD,sEAAsE;QACtE,oDAAoD;QACpD,uDAAuD;QACvD,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;IAC9B,CAAC,CAAC,CAAA;IAEF,iFAAiF;IACjF,gFAAgF;IAChF,4EAA4E;IAC5E,4EAA4E;IAC5E,QAAQ,CAAC,eAAe,EAAE,GAAG,EAAE;QAC7B,EAAE,CAAC,gEAAgE,EAAE,KAAK,IAAI,EAAE;YAC9E,MAAM,OAAO,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,SAAS,CAAC,CAAA;YACpD,MAAM,YAAY,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,SAAS,CAAC,CAAA;YACzD,YAAY,CAAC,EAAE,CAAC,sBAAsB,EAAE,OAAO,CAAC,CAAA;YAChD,YAAY,CAAC,EAAE,CAAC,+BAA+B,EAAE,YAAY,CAAC,CAAA;YAE9D,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,MAAM,CAC7B,OAAO,CAAC,MAAM,EAAE,uDAAuD,EAAE;gBACvE,GAAG,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC;aACtB,CAAC,EACF,CAAC,SAAS,EAAE,UAAU,EAAE,MAAM,EAAE,SAAS,CAAC,CAC3C,CAAA;YACD,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;YAC5B,MAAM,CAAC,OAAO,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAA;YACxC,MAAM,CAAC,YAAY,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAA;YAC7C,MAAM,CAAC,OAAO,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAgE,CAAA;YACtG,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAA;YAC5C,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;QACzC,CAAC,CAAC,CAAA;QAEF,EAAE,CAAC,4EAA4E,EAAE,KAAK,IAAI,EAAE;YAC1F,MAAM,aAAa,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,SAAS,CAAC,CAAA;YAC1D,MAAM,cAAc,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,SAAS,CAAC,CAAA;YAC3D,YAAY,CAAC,EAAE,CAAC,qBAAqB,EAAE,aAAa,CAAC,CAAA;YACrD,YAAY,CAAC,EAAE,CAAC,sBAAsB,EAAE,cAAc,CAAC,CAAA;YAEvD,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,MAAM,CAC7B,OAAO,CAAC,MAAM,EAAE,yDAAyD,EAAE;gBACzE,GAAG,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC;aACtB,CAAC,EACF,CAAC,SAAS,EAAE,UAAU,EAAE,MAAM,EAAE,WAAW,CAAC,CAC7C,CAAA;YACD,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;YAC5B,iFAAiF;YACjF,MAAM,CAAC,aAAa,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAA;YAC9C,MAAM,CAAC,cAAc,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAA;QAC/C,CAAC,CAAC,CAAA;QAEF,EAAE,CAAC,sEAAsE,EAAE,KAAK,IAAI,EAAE;YACpF,EAAE,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,qBAAqB,CAAC;gBAC3C,EAAE,EAAE,EAAE,MAAM,EAAE,eAAe,EAAE,UAAU,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,GAAG,EAAE;gBACzE,EAAE,EAAE,EAAE,MAAM,EAAE,eAAe,EAAE,WAAW,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,GAAG,EAAE;aAC3E,CAAC,CAAA;YACF,MAAM,OAAO,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,SAAS,CAAC,CAAA;YACpD,YAAY,CAAC,EAAE,CAAC,sBAAsB,EAAE,OAAO,CAAC,CAAA;YAEhD,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,MAAM,CAC7B,OAAO,CAAC,MAAM,EAAE,uDAAuD,EAAE;gBACvE,GAAG,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC;aACtB,CAAC,EACF,CAAC,SAAS,EAAE,UAAU,EAAE,MAAM,EAAE,SAAS,CAAC,CAC3C,CAAA;YACD,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;YAC5B,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAQ,CAAA;YACtC,yEAAyE;YACzE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;YAC/B,MAAM,CAAC,OAAO,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAA;QAC1C,CAAC,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;IAEF,iFAAiF;IACjF,+EAA+E;IAC/E,wDAAwD;IACxD,QAAQ,CAAC,0BAA0B,EAAE,GAAG,EAAE;QACxC,EAAE,CAAC,iEAAiE,EAAE,KAAK,IAAI,EAAE;YAC/E,EAAE,CAAC,MAAM,CAAC,2BAA2B,CAAC,CAAC,qBAAqB,CAAC,KAAK,CAAC,CAAA;YACnE,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,MAAM,CAC7B,OAAO,CAAC,KAAK,EAAE,+CAA+C,EAAE;gBAC9D,KAAK,EAAE,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC;aAChE,CAAC,EACF,CAAC,SAAS,EAAE,UAAU,EAAE,MAAM,CAAC,CAChC,CAAA;YACD,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;QAC9B,CAAC,CAAC,CAAA;QAEF,EAAE,CAAC,6DAA6D,EAAE,KAAK,IAAI,EAAE;YAC3E,EAAE,CAAC,MAAM,CAAC,2BAA2B,CAAC,CAAC,qBAAqB,CAAC,KAAK,CAAC,CAAA;YACnE,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,MAAM,CAC7B,OAAO,CAAC,QAAQ,EAAE,+CAA+C,EAAE,EAAE,GAAG,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,EAC7F,CAAC,SAAS,EAAE,UAAU,EAAE,MAAM,CAAC,CAChC,CAAA;YACD,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;QAC9B,CAAC,CAAC,CAAA;QAEF,EAAE,CAAC,mEAAmE,EAAE,KAAK,IAAI,EAAE;YACjF,EAAE,CAAC,MAAM,CAAC,2BAA2B,CAAC,CAAC,qBAAqB,CAAC,KAAK,CAAC,CAAA;YACnE,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,MAAM,CAC7B,OAAO,CAAC,MAAM,EAAE,uDAAuD,EAAE,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,EAC3F,CAAC,SAAS,EAAE,UAAU,EAAE,MAAM,EAAE,SAAS,CAAC,CAC3C,CAAA;YACD,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;QAC9B,CAAC,CAAC,CAAA;QAEF,EAAE,CAAC,qEAAqE,EAAE,KAAK,IAAI,EAAE;YACnF,EAAE,CAAC,MAAM,CAAC,2BAA2B,CAAC,CAAC,qBAAqB,CAAC,KAAK,CAAC,CAAA;YACnE,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,MAAM,CAC7B,OAAO,CAAC,MAAM,EAAE,yDAAyD,EAAE,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,EAC7F,CAAC,SAAS,EAAE,UAAU,EAAE,MAAM,EAAE,WAAW,CAAC,CAC7C,CAAA;YACD,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;QAC9B,CAAC,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA"}

package/dist/api/__tests__/cache-routes.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=cache-routes.test.d.ts.map

package/dist/api/__tests__/cache-routes.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cache-routes.test.d.ts","sourceRoot":"","sources":["../../../src/api/__tests__/cache-routes.test.ts"],"names":[],"mappings":""}

package/dist/api/__tests__/cache-routes.test.js

@@ -0,0 +1,86 @@
+import { describe, it, expect, vi, beforeEach } from 'vitest';
+import { Router } from '../router.js';
+import { registerCacheRoutes } from '../cache-routes.js';
+vi.mock('../auth.js', () => ({ resolveAuth: vi.fn() }));
+import { resolveAuth } from '../auth.js';
+const cacheConfig = { provider: 'memory', defaultTtl: 300, feedTtl: 60 };
+function makeProvider() {
+    return {
+        get: vi.fn(),
+        set: vi.fn(),
+        delete: vi.fn(),
+        invalidatePattern: vi.fn().mockResolvedValue(undefined),
+        size: vi.fn().mockResolvedValue(7),
+    };
+}
+function req(method, path, role = 'siteAdmin') {
+    vi.mocked(resolveAuth).mockResolvedValue({ user: { id: 'u1', role, groups: [] } });
+    return new Request(`https://x.com${path}`, {
+        method,
+        headers: { authorization: 'Bearer valid' },
+    });
+}
+describe('cache routes', () => {
+    let router;
+    let provider;
+    beforeEach(() => {
+        vi.clearAllMocks();
+        router = new Router();
+        provider = makeProvider();
+        registerCacheRoutes(router, {
+            db: {},
+            authSecret: 'secret',
+            cacheConfig,
+            cacheProvider: provider,
+        });
+    });
+    describe('GET /cache/status', () => {
+        it('returns provider, ttl config, and a live entry count', async () => {
+            const res = await router.handle(req('GET', '/cache/status'), ['cache', 'status']);
+            expect(res.status).toBe(200);
+            const body = await res.json();
+            expect(body.data.provider).toBe('memory');
+            expect(body.data.ttl).toEqual({ default: 300, content: null, feed: 60, nav: null });
+            expect(body.data.entries).toBe(7);
+        });
+        it('reports entries: null when the provider cannot count', async () => {
+            const noSize = makeProvider();
+            delete noSize.size;
+            const r = new Router();
+            registerCacheRoutes(r, { db: {}, authSecret: 's', cacheConfig, cacheProvider: noSize });
+            const res = await r.handle(req('GET', '/cache/status'), ['cache', 'status']);
+            const body = await res.json();
+            expect(body.data.entries).toBeNull();
+        });
+        it('401 without auth', async () => {
+            vi.mocked(resolveAuth).mockResolvedValue({ user: null });
+            const res = await router.handle(new Request('https://x.com/cache/status', { headers: { authorization: 'Bearer bad' } }), ['cache', 'status']);
+            expect(res.status).toBe(401);
+        });
+        it('403 for non-admin', async () => {
+            const res = await router.handle(req('GET', '/cache/status', 'editor'), ['cache', 'status']);
+            expect(res.status).toBe(403);
+        });
+    });
+    describe('POST /cache/clear', () => {
+        it('invalidates all entries and returns cleared:true', async () => {
+            const res = await router.handle(req('POST', '/cache/clear'), ['cache', 'clear']);
+            expect(res.status).toBe(200);
+            expect(provider.invalidatePattern).toHaveBeenCalledWith('*');
+            const body = await res.json();
+            expect(body.data.cleared).toBe(true);
+        });
+        it('401 without auth', async () => {
+            vi.mocked(resolveAuth).mockResolvedValue({ user: null });
+            const res = await router.handle(new Request('https://x.com/cache/clear', { method: 'POST', headers: { authorization: 'Bearer bad' } }), ['cache', 'clear']);
+            expect(res.status).toBe(401);
+            expect(provider.invalidatePattern).not.toHaveBeenCalled();
+        });
+        it('403 for non-admin', async () => {
+            const res = await router.handle(req('POST', '/cache/clear', 'author'), ['cache', 'clear']);
+            expect(res.status).toBe(403);
+            expect(provider.invalidatePattern).not.toHaveBeenCalled();
+        });
+    });
+});
+//# sourceMappingURL=cache-routes.test.js.map

package/dist/api/__tests__/cache-routes.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cache-routes.test.js","sourceRoot":"","sources":["../../../src/api/__tests__/cache-routes.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAA;AAC7D,OAAO,EAAE,MAAM,EAAE,MAAM,cAAc,CAAA;AACrC,OAAO,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAA;AAGxD,EAAE,CAAC,IAAI,CAAC,YAAY,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,WAAW,EAAE,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAA;AACvD,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAA;AAExC,MAAM,WAAW,GAAgB,EAAE,QAAQ,EAAE,QAAQ,EAAE,UAAU,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,EAAE,CAAA;AAErF,SAAS,YAAY;IACnB,OAAO;QACL,GAAG,EAAE,EAAE,CAAC,EAAE,EAAE;QACZ,GAAG,EAAE,EAAE,CAAC,EAAE,EAAE;QACZ,MAAM,EAAE,EAAE,CAAC,EAAE,EAAE;QACf,iBAAiB,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,SAAS,CAAC;QACvD,IAAI,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,CAAC,CAAC;KACnC,CAAA;AACH,CAAC;AAED,SAAS,GAAG,CAAC,MAAc,EAAE,IAAY,EAAE,IAAI,GAAG,WAAW;IAC3D,EAAE,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,iBAAiB,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,EAAS,CAAC,CAAA;IACzF,OAAO,IAAI,OAAO,CAAC,gBAAgB,IAAI,EAAE,EAAE;QACzC,MAAM;QACN,OAAO,EAAE,EAAE,aAAa,EAAE,cAAc,EAAE;KAC3C,CAAC,CAAA;AACJ,CAAC;AAED,QAAQ,CAAC,cAAc,EAAE,GAAG,EAAE;IAC5B,IAAI,MAAc,CAAA;IAClB,IAAI,QAAyC,CAAA;IAE7C,UAAU,CAAC,GAAG,EAAE;QACd,EAAE,CAAC,aAAa,EAAE,CAAA;QAClB,MAAM,GAAG,IAAI,MAAM,EAAE,CAAA;QACrB,QAAQ,GAAG,YAAY,EAAE,CAAA;QACzB,mBAAmB,CAAC,MAAM,EAAE;YAC1B,EAAE,EAAE,EAAS;YACb,UAAU,EAAE,QAAQ;YACpB,WAAW;YACX,aAAa,EAAE,QAAe;SAC/B,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;IAEF,QAAQ,CAAC,mBAAmB,EAAE,GAAG,EAAE;QACjC,EAAE,CAAC,sDAAsD,EAAE,KAAK,IAAI,EAAE;YACpE,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,EAAE,eAAe,CAAC,EAAE,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAA;YACjF,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;YAC5B,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAmB,CAAA;YAC9C,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;YACzC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,CAAA;YACnF,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;QACnC,CAAC,CAAC,CAAA;QAEF,EAAE,CAAC,sDAAsD,EAAE,KAAK,IAAI,EAAE;YACpE,MAAM,MAAM,GAAG,YAAY,EAAS,CAAA;YACpC,OAAO,MAAM,CAAC,IAAI,CAAA;YAClB,MAAM,CAAC,GAAG,IAAI,MAAM,EAAE,CAAA;YACtB,mBAAmB,CAAC,CAAC,EAAE,EAAE,EAAE,EAAE,EAAS,EAAE,UAAU,EAAE,GAAG,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,EAAE,CAAC,CAAA;YAC9F,MAAM,GAAG,GAAG,MAAM,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,EAAE,eAAe,CAAC,EAAE,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAA;YAC5E,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAmB,CAAA;YAC9C,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,QAAQ,EAAE,CAAA;QACtC,CAAC,CAAC,CAAA;QAEF,EAAE,CAAC,kBAAkB,EAAE,KAAK,IAAI,EAAE;YAChC,EAAE,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,iBAAiB,CAAC,EAAE,IAAI,EAAE,IAAI,EAAS,CAAC,CAAA;YAC/D,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,MAAM,CAC7B,IAAI,OAAO,CAAC,4BAA4B,EAAE,EAAE,OAAO,EAAE,EAAE,aAAa,EAAE,YAAY,EAAE,EAAE,CAAC,EACvF,CAAC,OAAO,EAAE,QAAQ,CAAC,CACpB,CAAA;YACD,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;QAC9B,CAAC,CAAC,CAAA;QAEF,EAAE,CAAC,mBAAmB,EAAE,KAAK,IAAI,EAAE;YACjC,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,EAAE,eAAe,EAAE,QAAQ,CAAC,EAAE,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAA;YAC3F,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;QAC9B,CAAC,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;IAEF,QAAQ,CAAC,mBAAmB,EAAE,GAAG,EAAE;QACjC,EAAE,CAAC,kDAAkD,EAAE,KAAK,IAAI,EAAE;YAChE,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,EAAE,cAAc,CAAC,EAAE,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAA;YAChF,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;YAC5B,MAAM,CAAC,QAAQ,CAAC,iBAAiB,CAAC,CAAC,oBAAoB,CAAC,GAAG,CAAC,CAAA;YAC5D,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAmB,CAAA;YAC9C,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QACtC,CAAC,CAAC,CAAA;QAEF,EAAE,CAAC,kBAAkB,EAAE,KAAK,IAAI,EAAE;YAChC,EAAE,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,iBAAiB,CAAC,EAAE,IAAI,EAAE,IAAI,EAAS,CAAC,CAAA;YAC/D,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,MAAM,CAC7B,IAAI,OAAO,CAAC,2BAA2B,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,aAAa,EAAE,YAAY,EAAE,EAAE,CAAC,EACtG,CAAC,OAAO,EAAE,OAAO,CAAC,CACnB,CAAA;YACD,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;YAC5B,MAAM,CAAC,QAAQ,CAAC,iBAAiB,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAA;QAC3D,CAAC,CAAC,CAAA;QAEF,EAAE,CAAC,mBAAmB,EAAE,KAAK,IAAI,EAAE;YACjC,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,EAAE,cAAc,EAAE,QAAQ,CAAC,EAAE,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAA;YAC1F,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;YAC5B,MAAM,CAAC,QAAQ,CAAC,iBAAiB,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAA;QAC3D,CAAC,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA"}

package/dist/api/__tests__/cached-content-getters.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=cached-content-getters.test.d.ts.map

package/dist/api/__tests__/cached-content-getters.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cached-content-getters.test.d.ts","sourceRoot":"","sources":["../../../src/api/__tests__/cached-content-getters.test.ts"],"names":[],"mappings":""}