@kywi-software/core 0.7.1 → 0.9.0

package/dist/api/__tests__/brute-force-mfa-wiring.test.js

@@ -1,208 +0,0 @@
-import { describe, it, expect, vi, beforeEach } from 'vitest';
-import { Router } from '../router.js';
-import { registerAuthRoutes } from '../auth-routes.js';
-// Mock user-queries
-vi.mock('../../db/user-queries.js', () => ({
-    getUserByEmail: vi.fn(),
-    getUserById: vi.fn(),
-    getUserGroups: vi.fn().mockResolvedValue([]),
-    buildUserContext: vi.fn((user, groups) => ({
-        id: user.id,
-        role: user.role,
-        groups,
-    })),
-    updateLastLogin: vi.fn().mockResolvedValue(undefined),
-    createUser: vi.fn(),
-}));
-// Mock passwords
-vi.mock('../../auth/passwords.js', () => ({
-    verifyPassword: vi.fn(),
-    hashPassword: vi.fn().mockResolvedValue('hashed'),
-}));
-import { getUserByEmail, getUserById } from '../../db/user-queries.js';
-import { verifyPassword } from '../../auth/passwords.js';
-const TEST_SECRET = 'test-secret-that-is-at-least-32-chars-long!!';
-const mockConfig = {
-    mode: 'coupled',
-    db: { provider: 'postgresql', url: 'postgres://localhost/test' },
-    auth: { secret: TEST_SECRET, providers: ['credentials'] },
-    sites: [{ id: 'site-1', name: 'Test', domain: 'localhost', defaultLocale: 'en', theme: 'default' }],
-    contentTypes: [],
-    plugins: [],
-    modules: [],
-    themes: [],
-    media: { provider: 'local' },
-    cache: { provider: 'memory' },
-};
-const mockUser = {
-    id: 'user-1',
-    email: 'test@example.com',
-    passwordHash: 'hashed-password',
-    role: 'editor',
-    isActive: true,
-    firstName: 'Test',
-    lastName: 'User',
-    lastLoginAt: null,
-    createdAt: new Date(),
-    updatedAt: new Date(),
-};
-function makeBruteForceDb() {
-    return {
-        insertStrike: vi.fn().mockResolvedValue(undefined),
-        getStrikes: vi.fn().mockResolvedValue([]),
-        deleteStrikes: vi.fn().mockResolvedValue(undefined),
-    };
-}
-const bruteForceConfig = {
-    maxStrikes: 5,
-    windowMinutes: 15,
-    lockoutMinutes: 30,
-};
-describe('W2: brute-force wiring on /auth/login', () => {
-    let router;
-    let bfDb;
-    beforeEach(() => {
-        vi.clearAllMocks();
-        router = new Router();
-        bfDb = makeBruteForceDb();
-        registerAuthRoutes(router, {
-            config: mockConfig,
-            db: {},
-            authSecret: TEST_SECRET,
-            bruteForceDb: bfDb,
-            bruteForceConfig,
-        });
-    });
-    it('returns 429 when account is locked out', async () => {
-        vi.mocked(getUserByEmail).mockResolvedValue(mockUser);
-        // Return enough strikes to trigger lockout
-        vi.mocked(bfDb.getStrikes).mockResolvedValue(Array.from({ length: 5 }, (_, i) => ({
-            id: `strike-${i}`,
-            userId: 'user-1',
-            ip: 'unknown',
-            attemptedAt: new Date(Date.now() - 60_000), // 1 min ago
-        })));
-        const res = await router.handle(new Request('http://localhost/auth/login', {
-            method: 'POST',
-            body: JSON.stringify({ email: 'test@example.com', password: 'password123' }),
-            headers: { 'Content-Type': 'application/json' },
-        }), ['auth', 'login']);
-        expect(res.status).toBe(429);
-        const body = await res.json();
-        expect(body.error.code).toBe('TOO_MANY_REQUESTS');
-        expect(body.error.details.retryAfter).toBeGreaterThan(0);
-    });
-    it('records a strike on failed password', async () => {
-        vi.mocked(getUserByEmail).mockResolvedValue(mockUser);
-        vi.mocked(verifyPassword).mockResolvedValue(false);
-        vi.mocked(bfDb.getStrikes).mockResolvedValue([]); // Not locked out
-        const res = await router.handle(new Request('http://localhost/auth/login', {
-            method: 'POST',
-            body: JSON.stringify({ email: 'test@example.com', password: 'wrong' }),
-            headers: { 'Content-Type': 'application/json' },
-        }), ['auth', 'login']);
-        expect(res.status).toBe(401);
-        expect(bfDb.insertStrike).toHaveBeenCalledWith('user-1', 'unknown');
-    });
-    it('clears strikes on successful login', async () => {
-        vi.mocked(getUserByEmail).mockResolvedValue(mockUser);
-        vi.mocked(verifyPassword).mockResolvedValue(true);
-        vi.mocked(bfDb.getStrikes).mockResolvedValue([]); // Not locked out
-        const res = await router.handle(new Request('http://localhost/auth/login', {
-            method: 'POST',
-            body: JSON.stringify({ email: 'test@example.com', password: 'password123' }),
-            headers: { 'Content-Type': 'application/json' },
-        }), ['auth', 'login']);
-        expect(res.status).toBe(200);
-        expect(bfDb.deleteStrikes).toHaveBeenCalledWith('user-1', 'unknown');
-    });
-});
-describe('W3: MFA check on login', () => {
-    let router;
-    let mfaDb;
-    beforeEach(() => {
-        vi.clearAllMocks();
-        router = new Router();
-        mfaDb = {
-            storeMfaSecret: vi.fn(),
-            getMfaSecret: vi.fn(),
-            enableMfa: vi.fn(),
-            updateRecoveryCodes: vi.fn(),
-        };
-        registerAuthRoutes(router, {
-            config: mockConfig,
-            db: {},
-            authSecret: TEST_SECRET,
-            mfaDb,
-        });
-    });
-    it('returns mfaRequired when user has MFA enabled', async () => {
-        vi.mocked(getUserByEmail).mockResolvedValue(mockUser);
-        vi.mocked(verifyPassword).mockResolvedValue(true);
-        mfaDb.getMfaSecret.mockResolvedValue({
-            secret: 'JBSWY3DPEHPK3PXP',
-            recoveryCodes: [],
-            enabledAt: new Date(),
-        });
-        const res = await router.handle(new Request('http://localhost/auth/login', {
-            method: 'POST',
-            body: JSON.stringify({ email: 'test@example.com', password: 'password123' }),
-            headers: { 'Content-Type': 'application/json' },
-        }), ['auth', 'login']);
-        expect(res.status).toBe(200);
-        const body = await res.json();
-        expect(body.data.mfaRequired).toBe(true);
-        expect(body.data.mfaToken).toBeDefined();
-        // Should NOT contain full session tokens
-        expect(body.data.accessToken).toBeUndefined();
-        expect(body.data.refreshToken).toBeUndefined();
-    });
-    it('returns full tokens when user does NOT have MFA', async () => {
-        vi.mocked(getUserByEmail).mockResolvedValue(mockUser);
-        vi.mocked(verifyPassword).mockResolvedValue(true);
-        mfaDb.getMfaSecret.mockResolvedValue(null);
-        const res = await router.handle(new Request('http://localhost/auth/login', {
-            method: 'POST',
-            body: JSON.stringify({ email: 'test@example.com', password: 'password123' }),
-            headers: { 'Content-Type': 'application/json' },
-        }), ['auth', 'login']);
-        expect(res.status).toBe(200);
-        const body = await res.json();
-        expect(body.data.accessToken).toBeDefined();
-        expect(body.data.refreshToken).toBeDefined();
-        expect(body.data.mfaRequired).toBeUndefined();
-    });
-    it('/auth/mfa/verify with mfaToken issues session tokens', async () => {
-        // First, get an mfaToken from login
-        vi.mocked(getUserByEmail).mockResolvedValue(mockUser);
-        vi.mocked(verifyPassword).mockResolvedValue(true);
-        mfaDb.getMfaSecret.mockResolvedValue({
-            secret: 'JBSWY3DPEHPK3PXP',
-            recoveryCodes: [],
-            enabledAt: new Date(),
-        });
-        const loginRes = await router.handle(new Request('http://localhost/auth/login', {
-            method: 'POST',
-            body: JSON.stringify({ email: 'test@example.com', password: 'password123' }),
-            headers: { 'Content-Type': 'application/json' },
-        }), ['auth', 'login']);
-        const loginBody = await loginRes.json();
-        const mfaToken = loginBody.data.mfaToken;
-        // Now use the mfaToken — we mock verifyTotpCode via the mock of mfa.ts
-        // Since verifyTotpCode is not mocked by default, we need to mock it
-        const mfa = await import('../../auth/mfa.js');
-        const verifySpy = vi.spyOn(mfa, 'verifyTotpCode').mockReturnValue(true);
-        vi.mocked(getUserById).mockResolvedValue(mockUser);
-        const verifyRes = await router.handle(new Request('http://localhost/auth/mfa/verify', {
-            method: 'POST',
-            body: JSON.stringify({ mfaToken, code: '123456' }),
-            headers: { 'Content-Type': 'application/json' },
-        }), ['auth', 'mfa', 'verify']);
-        expect(verifyRes.status).toBe(200);
-        const verifyBody = await verifyRes.json();
-        expect(verifyBody.data.accessToken).toBeDefined();
-        expect(verifyBody.data.refreshToken).toBeDefined();
-        verifySpy.mockRestore();
-    });
-});
-//# sourceMappingURL=brute-force-mfa-wiring.test.js.map

package/dist/api/__tests__/brute-force-mfa-wiring.test.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"brute-force-mfa-wiring.test.js","sourceRoot":"","sources":["../../../src/api/__tests__/brute-force-mfa-wiring.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAA;AAC7D,OAAO,EAAE,MAAM,EAAE,MAAM,cAAc,CAAA;AACrC,OAAO,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAA;AAItD,oBAAoB;AACpB,EAAE,CAAC,IAAI,CAAC,0BAA0B,EAAE,GAAG,EAAE,CAAC,CAAC;IACzC,cAAc,EAAE,EAAE,CAAC,EAAE,EAAE;IACvB,WAAW,EAAE,EAAE,CAAC,EAAE,EAAE;IACpB,aAAa,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,EAAE,CAAC;IAC5C,gBAAgB,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC,IAAS,EAAE,MAAgB,EAAE,EAAE,CAAC,CAAC;QACxD,EAAE,EAAE,IAAI,CAAC,EAAE;QACX,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,MAAM;KACP,CAAC,CAAC;IACH,eAAe,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,SAAS,CAAC;IACrD,UAAU,EAAE,EAAE,CAAC,EAAE,EAAE;CACpB,CAAC,CAAC,CAAA;AAEH,iBAAiB;AACjB,EAAE,CAAC,IAAI,CAAC,yBAAyB,EAAE,GAAG,EAAE,CAAC,CAAC;IACxC,cAAc,EAAE,EAAE,CAAC,EAAE,EAAE;IACvB,YAAY,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,QAAQ,CAAC;CAClD,CAAC,CAAC,CAAA;AAEH,OAAO,EAAE,cAAc,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAA;AACtE,OAAO,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAA;AAExD,MAAM,WAAW,GAAG,8CAA8C,CAAA;AAElE,MAAM,UAAU,GAAe;IAC7B,IAAI,EAAE,SAAS;IACf,EAAE,EAAE,EAAE,QAAQ,EAAE,YAAY,EAAE,GAAG,EAAE,2BAA2B,EAAE;IAChE,IAAI,EAAE,EAAE,MAAM,EAAE,WAAW,EAAE,SAAS,EAAE,CAAC,aAAa,CAAC,EAAE;IACzD,KAAK,EAAE,CAAC,EAAE,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,aAAa,EAAE,IAAI,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC;IACnG,YAAY,EAAE,EAAE;IAChB,OAAO,EAAE,EAAE;IACX,OAAO,EAAE,EAAE;IACX,MAAM,EAAE,EAAE;IACV,KAAK,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE;IAC5B,KAAK,EAAE,EAAE,QAAQ,EAAE,QAAQ,EAAE;CAC9B,CAAA;AAED,MAAM,QAAQ,GAAG;IACf,EAAE,EAAE,QAAQ;IACZ,KAAK,EAAE,kBAAkB;IACzB,YAAY,EAAE,iBAAiB;IAC/B,IAAI,EAAE,QAAQ;IACd,QAAQ,EAAE,IAAI;IACd,SAAS,EAAE,MAAM;IACjB,QAAQ,EAAE,MAAM;IAChB,WAAW,EAAE,IAAI;IACjB,SAAS,EAAE,IAAI,IAAI,EAAE;IACrB,SAAS,EAAE,IAAI,IAAI,EAAE;CACtB,CAAA;AAED,SAAS,gBAAgB;IACvB,OAAO;QACL,YAAY,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,SAAS,CAAC;QAClD,UAAU,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,EAAE,CAAC;QACzC,aAAa,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,SAAS,CAAC;KACpD,CAAA;AACH,CAAC;AAED,MAAM,gBAAgB,GAAqB;IACzC,UAAU,EAAE,CAAC;IACb,aAAa,EAAE,EAAE;IACjB,cAAc,EAAE,EAAE;CACnB,CAAA;AAED,QAAQ,CAAC,uCAAuC,EAAE,GAAG,EAAE;IACrD,IAAI,MAAc,CAAA;IAClB,IAAI,IAAkB,CAAA;IAEtB,UAAU,CAAC,GAAG,EAAE;QACd,EAAE,CAAC,aAAa,EAAE,CAAA;QAClB,MAAM,GAAG,IAAI,MAAM,EAAE,CAAA;QACrB,IAAI,GAAG,gBAAgB,EAAE,CAAA;QACzB,kBAAkB,CAAC,MAAM,EAAE;YACzB,MAAM,EAAE,UAAU;YAClB,EAAE,EAAE,EAAS;YACb,UAAU,EAAE,WAAW;YACvB,YAAY,EAAE,IAAI;YAClB,gBAAgB;SACjB,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,wCAAwC,EAAE,KAAK,IAAI,EAAE;QACtD,EAAE,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC,iBAAiB,CAAC,QAAe,CAAC,CAAA;QAC5D,2CAA2C;QAC3C,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,iBAAiB,CAC1C,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;YACnC,EAAE,EAAE,UAAU,CAAC,EAAE;YACjB,MAAM,EAAE,QAAQ;YAChB,EAAE,EAAE,SAAS;YACb,WAAW,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC,EAAE,YAAY;SACzD,CAAC,CAAC,CACJ,CAAA;QAED,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,MAAM,CAC7B,IAAI,OAAO,CAAC,6BAA6B,EAAE;YACzC,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,kBAAkB,EAAE,QAAQ,EAAE,aAAa,EAAE,CAAC;YAC5E,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;SAChD,CAAC,EACF,CAAC,MAAM,EAAE,OAAO,CAAC,CAClB,CAAA;QAED,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;QAC5B,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAS,CAAA;QACpC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAA;QACjD,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAA;IAC1D,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,qCAAqC,EAAE,KAAK,IAAI,EAAE;QACnD,EAAE,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC,iBAAiB,CAAC,QAAe,CAAC,CAAA;QAC5D,EAAE,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC,iBAAiB,CAAC,KAAK,CAAC,CAAA;QAClD,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,iBAAiB,CAAC,EAAE,CAAC,CAAA,CAAC,iBAAiB;QAElE,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,MAAM,CAC7B,IAAI,OAAO,CAAC,6BAA6B,EAAE;YACzC,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,kBAAkB,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC;YACtE,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;SAChD,CAAC,EACF,CAAC,MAAM,EAAE,OAAO,CAAC,CAClB,CAAA;QAED,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;QAC5B,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,oBAAoB,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAA;IACrE,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,oCAAoC,EAAE,KAAK,IAAI,EAAE;QAClD,EAAE,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC,iBAAiB,CAAC,QAAe,CAAC,CAAA;QAC5D,EAAE,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAA;QACjD,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,iBAAiB,CAAC,EAAE,CAAC,CAAA,CAAC,iBAAiB;QAElE,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,MAAM,CAC7B,IAAI,OAAO,CAAC,6BAA6B,EAAE;YACzC,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,kBAAkB,EAAE,QAAQ,EAAE,aAAa,EAAE,CAAC;YAC5E,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;SAChD,CAAC,EACF,CAAC,MAAM,EAAE,OAAO,CAAC,CAClB,CAAA;QAED,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;QAC5B,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,oBAAoB,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAA;IACtE,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA;AAEF,QAAQ,CAAC,wBAAwB,EAAE,GAAG,EAAE;IACtC,IAAI,MAAc,CAAA;IAClB,IAAI,KAAU,CAAA;IAEd,UAAU,CAAC,GAAG,EAAE;QACd,EAAE,CAAC,aAAa,EAAE,CAAA;QAClB,MAAM,GAAG,IAAI,MAAM,EAAE,CAAA;QACrB,KAAK,GAAG;YACN,cAAc,EAAE,EAAE,CAAC,EAAE,EAAE;YACvB,YAAY,EAAE,EAAE,CAAC,EAAE,EAAE;YACrB,SAAS,EAAE,EAAE,CAAC,EAAE,EAAE;YAClB,mBAAmB,EAAE,EAAE,CAAC,EAAE,EAAE;SAC7B,CAAA;QACD,kBAAkB,CAAC,MAAM,EAAE;YACzB,MAAM,EAAE,UAAU;YAClB,EAAE,EAAE,EAAS;YACb,UAAU,EAAE,WAAW;YACvB,KAAK;SACN,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,+CAA+C,EAAE,KAAK,IAAI,EAAE;QAC7D,EAAE,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC,iBAAiB,CAAC,QAAe,CAAC,CAAA;QAC5D,EAAE,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAA;QACjD,KAAK,CAAC,YAAY,CAAC,iBAAiB,CAAC;YACnC,MAAM,EAAE,kBAAkB;YAC1B,aAAa,EAAE,EAAE;YACjB,SAAS,EAAE,IAAI,IAAI,EAAE;SACtB,CAAC,CAAA;QAEF,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,MAAM,CAC7B,IAAI,OAAO,CAAC,6BAA6B,EAAE;YACzC,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,kBAAkB,EAAE,QAAQ,EAAE,aAAa,EAAE,CAAC;YAC5E,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;SAChD,CAAC,EACF,CAAC,MAAM,EAAE,OAAO,CAAC,CAClB,CAAA;QAED,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;QAC5B,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAS,CAAA;QACpC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QACxC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,WAAW,EAAE,CAAA;QACxC,yCAAyC;QACzC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,aAAa,EAAE,CAAA;QAC7C,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,aAAa,EAAE,CAAA;IAChD,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,iDAAiD,EAAE,KAAK,IAAI,EAAE;QAC/D,EAAE,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC,iBAAiB,CAAC,QAAe,CAAC,CAAA;QAC5D,EAAE,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAA;QACjD,KAAK,CAAC,YAAY,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAA;QAE1C,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,MAAM,CAC7B,IAAI,OAAO,CAAC,6BAA6B,EAAE;YACzC,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,kBAAkB,EAAE,QAAQ,EAAE,aAAa,EAAE,CAAC;YAC5E,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;SAChD,CAAC,EACF,CAAC,MAAM,EAAE,OAAO,CAAC,CAClB,CAAA;QAED,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;QAC5B,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAS,CAAA;QACpC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,WAAW,EAAE,CAAA;QAC3C,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,WAAW,EAAE,CAAA;QAC5C,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,aAAa,EAAE,CAAA;IAC/C,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,sDAAsD,EAAE,KAAK,IAAI,EAAE;QACpE,oCAAoC;QACpC,EAAE,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC,iBAAiB,CAAC,QAAe,CAAC,CAAA;QAC5D,EAAE,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAA;QACjD,KAAK,CAAC,YAAY,CAAC,iBAAiB,CAAC;YACnC,MAAM,EAAE,kBAAkB;YAC1B,aAAa,EAAE,EAAE;YACjB,SAAS,EAAE,IAAI,IAAI,EAAE;SACtB,CAAC,CAAA;QAEF,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,MAAM,CAClC,IAAI,OAAO,CAAC,6BAA6B,EAAE;YACzC,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,kBAAkB,EAAE,QAAQ,EAAE,aAAa,EAAE,CAAC;YAC5E,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;SAChD,CAAC,EACF,CAAC,MAAM,EAAE,OAAO,CAAC,CAClB,CAAA;QACD,MAAM,SAAS,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAS,CAAA;QAC9C,MAAM,QAAQ,GAAG,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAA;QAExC,uEAAuE;QACvE,oEAAoE;QACpE,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,mBAAmB,CAAC,CAAA;QAC7C,MAAM,SAAS,GAAG,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,gBAAgB,CAAC,CAAC,eAAe,CAAC,IAAI,CAAC,CAAA;QAEvE,EAAE,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,iBAAiB,CAAC,QAAe,CAAC,CAAA;QAEzD,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,MAAM,CACnC,IAAI,OAAO,CAAC,kCAAkC,EAAE;YAC9C,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;YAClD,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;SAChD,CAAC,EACF,CAAC,MAAM,EAAE,KAAK,EAAE,QAAQ,CAAC,CAC1B,CAAA;QAED,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;QAClC,MAAM,UAAU,GAAG,MAAM,SAAS,CAAC,IAAI,EAAS,CAAA;QAChD,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,WAAW,EAAE,CAAA;QACjD,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,WAAW,EAAE,CAAA;QAElD,SAAS,CAAC,WAAW,EAAE,CAAA;IACzB,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA"}

package/dist/api/__tests__/bulk-routes.test.d.ts

@@ -1,2 +0,0 @@
-export {};
-//# sourceMappingURL=bulk-routes.test.d.ts.map

package/dist/api/__tests__/bulk-routes.test.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"bulk-routes.test.d.ts","sourceRoot":"","sources":["../../../src/api/__tests__/bulk-routes.test.ts"],"names":[],"mappings":""}

package/dist/api/__tests__/bulk-routes.test.js

@@ -1,233 +0,0 @@
-import { describe, it, expect, vi, beforeEach } from 'vitest';
-import { Router } from '../router.js';
-import { registerBulkRoutes } from '../bulk-routes.js';
-import { buildCustomFieldTable } from '../../db/dynamic-schema.js';
-import { createHookRegistry } from '../../hooks/registry.js';
-// bulkPublish/bulkUnpublish now RETURNING the updated rows (needed so the route
-// can dispatch a hook per row). Rows carry `contentTypeName` so the route can
-// resolve the content type for dispatch, plus siteId/slug the cache subscribers
-// key on.
-const PUBLISHED_ROWS = [
-    { id: 'id-1', contentTypeName: 'blogPost', siteId: 'default', slug: 'a', status: 'published' },
-    { id: 'id-2', contentTypeName: 'blogPost', siteId: 'default', slug: 'b', status: 'published' },
-];
-const UNPUBLISHED_ROWS = [
-    { id: 'id-1', contentTypeName: 'blogPost', siteId: 'default', slug: 'a', status: 'draft' },
-    { id: 'id-2', contentTypeName: 'blogPost', siteId: 'default', slug: 'b', status: 'draft' },
-];
-// Mock bulk-queries
-vi.mock('../../db/bulk-queries.js', () => ({
-    bulkCreate: vi.fn().mockResolvedValue({ created: 2, ids: ['id-1', 'id-2'] }),
-    bulkUpdate: vi.fn().mockResolvedValue({ updated: 2, ids: ['id-1', 'id-2'] }),
-    bulkPublish: vi.fn(),
-    bulkUnpublish: vi.fn(),
-    bulkDelete: vi.fn().mockResolvedValue(2),
-    bulkUpdateStatus: vi.fn().mockResolvedValue(2),
-}));
-import { bulkPublish, bulkUnpublish } from '../../db/bulk-queries.js';
-// Mock auth
-vi.mock('../auth.js', () => ({
-    resolveAuth: vi.fn().mockResolvedValue({
-        user: { id: 'user-1', role: 'siteAdmin', groups: [] },
-    }),
-}));
-// Mock roles
-vi.mock('../../auth/roles.js', () => ({
-    canAccessContent: vi.fn().mockReturnValue(true),
-    hasMinRole: vi.fn().mockReturnValue(true),
-}));
-// Mock the content-ACL gate (default: allow). Per-test overrides to false prove
-// the fail-closed bulk enforcement (G-J04b-01).
-vi.mock('../../auth/access-control.js', () => ({
-    checkDocumentMutationAccess: vi.fn().mockResolvedValue(true),
-}));
-import { checkDocumentMutationAccess } from '../../auth/access-control.js';
-// Mock site-context
-vi.mock('../site-context.js', () => ({
-    resolveSiteId: vi.fn().mockReturnValue('default'),
-}));
-const blogPostConfig = {
-    name: 'blogPost',
-    label: 'Blog Post',
-    baseType: 'content',
-    fields: [
-        { name: 'excerpt', type: 'richText', label: 'Excerpt' },
-    ],
-};
-const mockConfig = {
-    mode: 'coupled',
-    db: { provider: 'postgresql', url: 'postgres://localhost/test' },
-    auth: { secret: 'test-secret-that-is-at-least-32-chars-long!!', providers: ['credentials'] },
-    sites: [{ id: 'default', name: 'Test', domain: 'localhost', defaultLocale: 'en', theme: 'default' }],
-    contentTypes: [blogPostConfig],
-    plugins: [],
-    modules: [],
-    themes: [],
-    media: { provider: 'local' },
-    cache: { provider: 'memory' },
-};
-function jsonReq(method, url, body) {
-    const init = { method, headers: { 'Content-Type': 'application/json' } };
-    if (body !== undefined)
-        init.body = JSON.stringify(body);
-    return new Request(url, init);
-}
-describe('bulk routes', () => {
-    let router;
-    let hookRegistry;
-    beforeEach(() => {
-        vi.mocked(bulkPublish).mockResolvedValue([...PUBLISHED_ROWS]);
-        vi.mocked(bulkUnpublish).mockResolvedValue([...UNPUBLISHED_ROWS]);
-        router = new Router();
-        const contentTypeMap = new Map();
-        const customTableMap = new Map();
-        for (const ct of mockConfig.contentTypes) {
-            contentTypeMap.set(ct.name, ct);
-            customTableMap.set(ct.name, buildCustomFieldTable(ct));
-        }
-        hookRegistry = createHookRegistry();
-        registerBulkRoutes(router, {
-            config: mockConfig,
-            db: {},
-            authSecret: mockConfig.auth.secret,
-            contentTypeMap,
-            customTableMap,
-            hookRegistry,
-            kywiCtx: { cache: { invalidate: async () => { }, invalidatePattern: async () => { } }, user: null },
-        });
-    });
-    it('POST /content/:type/bulk creates items (status 201)', async () => {
-        const res = await router.handle(jsonReq('POST', 'http://localhost/api/v1/content/blogPost/bulk', {
-            items: [{ title: 'A' }, { title: 'B' }],
-        }), ['content', 'blogPost', 'bulk']);
-        expect(res.status).toBe(201);
-        const body = (await res.json());
-        expect(body.data.created).toBe(2);
-    });
-    it('PUT /content/:type/bulk updates items', async () => {
-        const res = await router.handle(jsonReq('PUT', 'http://localhost/api/v1/content/blogPost/bulk', {
-            items: [{ id: 'id-1', title: 'Updated A' }, { id: 'id-2', title: 'Updated B' }],
-        }), ['content', 'blogPost', 'bulk']);
-        expect(res.status).toBe(200);
-        const body = (await res.json());
-        expect(body.data.updated).toBe(2);
-    });
-    it('DELETE /content/:type/bulk deletes items', async () => {
-        const res = await router.handle(jsonReq('DELETE', 'http://localhost/api/v1/content/blogPost/bulk', {
-            ids: ['id-1', 'id-2'],
-        }), ['content', 'blogPost', 'bulk']);
-        expect(res.status).toBe(200);
-        const body = (await res.json());
-        expect(body.data.count).toBe(2);
-    });
-    it('POST /content/:type/bulk/publish publishes items', async () => {
-        const res = await router.handle(jsonReq('POST', 'http://localhost/api/v1/content/blogPost/bulk/publish', {
-            ids: ['id-1', 'id-2'],
-        }), ['content', 'blogPost', 'bulk', 'publish']);
-        expect(res.status).toBe(200);
-        const body = (await res.json());
-        expect(body.data.count).toBe(2);
-    });
-    it('POST /content/:type/bulk/unpublish unpublishes items', async () => {
-        const res = await router.handle(jsonReq('POST', 'http://localhost/api/v1/content/blogPost/bulk/unpublish', {
-            ids: ['id-1', 'id-2'],
-        }), ['content', 'blogPost', 'bulk', 'unpublish']);
-        expect(res.status).toBe(200);
-        const body = (await res.json());
-        expect(body.data.count).toBe(2);
-    });
-    it('returns 404 for unknown content type', async () => {
-        const res = await router.handle(jsonReq('POST', 'http://localhost/api/v1/content/unknown/bulk', {
-            items: [{ title: 'A' }],
-        }), ['content', 'unknown', 'bulk']);
-        expect(res.status).toBe(404);
-    });
-    it('old paths without :type segment return 404', async () => {
-        // Old path: POST /content/bulk/publish (missing :type)
-        const res = await router.handle(jsonReq('POST', 'http://localhost/api/v1/content/bulk/publish', {
-            ids: ['id-1'],
-        }), ['content', 'bulk', 'publish']);
-        // Should not match any route since 'bulk' is not a valid content type
-        // (bulk routes now require /content/:type/bulk/...)
-        // This tests that the old route format no longer works
-        expect(res.status).toBe(404);
-    });
-    // ── Hook dispatch on bulk publish/unpublish (Phase G) ─────────────────────────
-    // The admin content-list "bulk publish/unpublish" runs through these routes, so
-    // they must fire the content lifecycle hooks that drive cache/feed/nav + AX
-    // invalidation and webhooks — otherwise the public site serves stale cache.
-    describe('hook dispatch', () => {
-        it('bulk publish emits content:afterPublish once per published row', async () => {
-            const handler = vi.fn().mockResolvedValue(undefined);
-            const typedHandler = vi.fn().mockResolvedValue(undefined);
-            hookRegistry.on('content:afterPublish', handler);
-            hookRegistry.on('content:blogPost:afterPublish', typedHandler);
-            const res = await router.handle(jsonReq('POST', 'http://localhost/api/v1/content/blogPost/bulk/publish', {
-                ids: ['id-1', 'id-2'],
-            }), ['content', 'blogPost', 'bulk', 'publish']);
-            expect(res.status).toBe(200);
-            expect(handler).toHaveBeenCalledTimes(2);
-            expect(typedHandler).toHaveBeenCalledTimes(2);
-            const [payload] = handler.mock.calls[0];
-            expect(payload.contentType).toBe('blogPost');
-            expect(payload.content.id).toBe('id-1');
-        });
-        it('bulk unpublish emits content:afterUpdate once per row (cache invalidation)', async () => {
-            const updateHandler = vi.fn().mockResolvedValue(undefined);
-            const publishHandler = vi.fn().mockResolvedValue(undefined);
-            hookRegistry.on('content:afterUpdate', updateHandler);
-            hookRegistry.on('content:afterPublish', publishHandler);
-            const res = await router.handle(jsonReq('POST', 'http://localhost/api/v1/content/blogPost/bulk/unpublish', {
-                ids: ['id-1', 'id-2'],
-            }), ['content', 'blogPost', 'bulk', 'unpublish']);
-            expect(res.status).toBe(200);
-            // afterUpdate carries the invalidation; afterPublish must NOT fire on unpublish.
-            expect(updateHandler).toHaveBeenCalledTimes(2);
-            expect(publishHandler).not.toHaveBeenCalled();
-        });
-        it('bulk publish skips dispatch for a row whose content type is orphaned', async () => {
-            vi.mocked(bulkPublish).mockResolvedValueOnce([
-                { id: 'id-1', contentTypeName: 'blogPost', siteId: 'default', slug: 'a' },
-                { id: 'id-9', contentTypeName: 'ghostType', siteId: 'default', slug: 'z' },
-            ]);
-            const handler = vi.fn().mockResolvedValue(undefined);
-            hookRegistry.on('content:afterPublish', handler);
-            const res = await router.handle(jsonReq('POST', 'http://localhost/api/v1/content/blogPost/bulk/publish', {
-                ids: ['id-1', 'id-9'],
-            }), ['content', 'blogPost', 'bulk', 'publish']);
-            expect(res.status).toBe(200);
-            const body = (await res.json());
-            // Count reflects both updated rows; only the registered type dispatched.
-            expect(body.data.count).toBe(2);
-            expect(handler).toHaveBeenCalledTimes(1);
-        });
-    });
-    // ── Fail-closed content-ACL enforcement (G-J04b-01) ───────────────────────────
-    // A bulk endpoint must never be a bypass for the per-node ACL. If any targeted
-    // node is denied, the whole batch is rejected with 403.
-    describe('document-ACL enforcement', () => {
-        it('PUT bulk update rejects the batch (403) when one node is denied', async () => {
-            vi.mocked(checkDocumentMutationAccess).mockResolvedValueOnce(false);
-            const res = await router.handle(jsonReq('PUT', 'http://localhost/api/v1/content/blogPost/bulk', {
-                items: [{ id: 'id-1', title: 'A' }, { id: 'id-2', title: 'B' }],
-            }), ['content', 'blogPost', 'bulk']);
-            expect(res.status).toBe(403);
-        });
-        it('DELETE bulk rejects the batch (403) when one node is denied', async () => {
-            vi.mocked(checkDocumentMutationAccess).mockResolvedValueOnce(false);
-            const res = await router.handle(jsonReq('DELETE', 'http://localhost/api/v1/content/blogPost/bulk', { ids: ['id-1', 'id-2'] }), ['content', 'blogPost', 'bulk']);
-            expect(res.status).toBe(403);
-        });
-        it('POST bulk publish rejects the batch (403) when one node is denied', async () => {
-            vi.mocked(checkDocumentMutationAccess).mockResolvedValueOnce(false);
-            const res = await router.handle(jsonReq('POST', 'http://localhost/api/v1/content/blogPost/bulk/publish', { ids: ['id-1'] }), ['content', 'blogPost', 'bulk', 'publish']);
-            expect(res.status).toBe(403);
-        });
-        it('POST bulk unpublish rejects the batch (403) when one node is denied', async () => {
-            vi.mocked(checkDocumentMutationAccess).mockResolvedValueOnce(false);
-            const res = await router.handle(jsonReq('POST', 'http://localhost/api/v1/content/blogPost/bulk/unpublish', { ids: ['id-1'] }), ['content', 'blogPost', 'bulk', 'unpublish']);
-            expect(res.status).toBe(403);
-        });
-    });
-});
-//# sourceMappingURL=bulk-routes.test.js.map

package/dist/api/__tests__/bulk-routes.test.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"bulk-routes.test.js","sourceRoot":"","sources":["../../../src/api/__tests__/bulk-routes.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAA;AAC7D,OAAO,EAAE,MAAM,EAAE,MAAM,cAAc,CAAA;AACrC,OAAO,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAA;AAEtD,OAAO,EAAE,qBAAqB,EAAE,MAAM,4BAA4B,CAAA;AAClE,OAAO,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAA;AAG5D,gFAAgF;AAChF,8EAA8E;AAC9E,gFAAgF;AAChF,UAAU;AACV,MAAM,cAAc,GAAG;IACrB,EAAE,EAAE,EAAE,MAAM,EAAE,eAAe,EAAE,UAAU,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,GAAG,EAAE,MAAM,EAAE,WAAW,EAAE;IAC9F,EAAE,EAAE,EAAE,MAAM,EAAE,eAAe,EAAE,UAAU,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,GAAG,EAAE,MAAM,EAAE,WAAW,EAAE;CAC/F,CAAA;AACD,MAAM,gBAAgB,GAAG;IACvB,EAAE,EAAE,EAAE,MAAM,EAAE,eAAe,EAAE,UAAU,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE;IAC1F,EAAE,EAAE,EAAE,MAAM,EAAE,eAAe,EAAE,UAAU,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE;CAC3F,CAAA;AAED,oBAAoB;AACpB,EAAE,CAAC,IAAI,CAAC,0BAA0B,EAAE,GAAG,EAAE,CAAC,CAAC;IACzC,UAAU,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,GAAG,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC;IAC5E,UAAU,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,GAAG,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC;IAC5E,WAAW,EAAE,EAAE,CAAC,EAAE,EAAE;IACpB,aAAa,EAAE,EAAE,CAAC,EAAE,EAAE;IACtB,UAAU,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,CAAC,CAAC;IACxC,gBAAgB,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,CAAC,CAAC;CAC/C,CAAC,CAAC,CAAA;AACH,OAAO,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAA;AAErE,YAAY;AACZ,EAAE,CAAC,IAAI,CAAC,YAAY,EAAE,GAAG,EAAE,CAAC,CAAC;IAC3B,WAAW,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC;QACrC,IAAI,EAAE,EAAE,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,WAAW,EAAE,MAAM,EAAE,EAAE,EAAE;KACtD,CAAC;CACH,CAAC,CAAC,CAAA;AAEH,aAAa;AACb,EAAE,CAAC,IAAI,CAAC,qBAAqB,EAAE,GAAG,EAAE,CAAC,CAAC;IACpC,gBAAgB,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,eAAe,CAAC,IAAI,CAAC;IAC/C,UAAU,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,eAAe,CAAC,IAAI,CAAC;CAC1C,CAAC,CAAC,CAAA;AAEH,gFAAgF;AAChF,gDAAgD;AAChD,EAAE,CAAC,IAAI,CAAC,8BAA8B,EAAE,GAAG,EAAE,CAAC,CAAC;IAC7C,2BAA2B,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,IAAI,CAAC;CAC7D,CAAC,CAAC,CAAA;AACH,OAAO,EAAE,2BAA2B,EAAE,MAAM,8BAA8B,CAAA;AAE1E,oBAAoB;AACpB,EAAE,CAAC,IAAI,CAAC,oBAAoB,EAAE,GAAG,EAAE,CAAC,CAAC;IACnC,aAAa,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,eAAe,CAAC,SAAS,CAAC;CAClD,CAAC,CAAC,CAAA;AAEH,MAAM,cAAc,GAAsB;IACxC,IAAI,EAAE,UAAU;IAChB,KAAK,EAAE,WAAW;IAClB,QAAQ,EAAE,SAAS;IACnB,MAAM,EAAE;QACN,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,SAAS,EAAE;KACxD;CACF,CAAA;AAED,MAAM,UAAU,GAAe;IAC7B,IAAI,EAAE,SAAS;IACf,EAAE,EAAE,EAAE,QAAQ,EAAE,YAAY,EAAE,GAAG,EAAE,2BAA2B,EAAE;IAChE,IAAI,EAAE,EAAE,MAAM,EAAE,8CAA8C,EAAE,SAAS,EAAE,CAAC,aAAa,CAAC,EAAE;IAC5F,KAAK,EAAE,CAAC,EAAE,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,aAAa,EAAE,IAAI,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC;IACpG,YAAY,EAAE,CAAC,cAAc,CAAC;IAC9B,OAAO,EAAE,EAAE;IACX,OAAO,EAAE,EAAE;IACX,MAAM,EAAE,EAAE;IACV,KAAK,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE;IAC5B,KAAK,EAAE,EAAE,QAAQ,EAAE,QAAQ,EAAE;CAC9B,CAAA;AAED,SAAS,OAAO,CAAC,MAAc,EAAE,GAAW,EAAE,IAAc;IAC1D,MAAM,IAAI,GAAgB,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,EAAE,CAAA;IACrF,IAAI,IAAI,KAAK,SAAS;QAAE,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAA;IACxD,OAAO,IAAI,OAAO,CAAC,GAAG,EAAE,IAAI,CAAC,CAAA;AAC/B,CAAC;AAED,QAAQ,CAAC,aAAa,EAAE,GAAG,EAAE;IAC3B,IAAI,MAAc,CAAA;IAClB,IAAI,YAA0B,CAAA;IAE9B,UAAU,CAAC,GAAG,EAAE;QACd,EAAE,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,iBAAiB,CAAC,CAAC,GAAG,cAAc,CAAC,CAAC,CAAA;QAC7D,EAAE,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,iBAAiB,CAAC,CAAC,GAAG,gBAAgB,CAAC,CAAC,CAAA;QAEjE,MAAM,GAAG,IAAI,MAAM,EAAE,CAAA;QACrB,MAAM,cAAc,GAAG,IAAI,GAAG,EAA6B,CAAA;QAC3D,MAAM,cAAc,GAAG,IAAI,GAAG,EAAE,CAAA;QAEhC,KAAK,MAAM,EAAE,IAAI,UAAU,CAAC,YAAY,EAAE,CAAC;YACzC,cAAc,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,CAAA;YAC/B,cAAc,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,EAAE,qBAAqB,CAAC,EAAE,CAAC,CAAC,CAAA;QACxD,CAAC;QAED,YAAY,GAAG,kBAAkB,EAAE,CAAA;QAEnC,kBAAkB,CAAC,MAAM,EAAE;YACzB,MAAM,EAAE,UAAU;YAClB,EAAE,EAAE,EAAS;YACb,UAAU,EAAE,UAAU,CAAC,IAAI,CAAC,MAAM;YAClC,cAAc;YACd,cAAc;YACd,YAAY;YACZ,OAAO,EAAE,EAAE,KAAK,EAAE,EAAE,UAAU,EAAE,KAAK,IAAI,EAAE,GAAE,CAAC,EAAE,iBAAiB,EAAE,KAAK,IAAI,EAAE,GAAE,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE;SAClG,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,qDAAqD,EAAE,KAAK,IAAI,EAAE;QACnE,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,MAAM,CAC7B,OAAO,CAAC,MAAM,EAAE,+CAA+C,EAAE;YAC/D,KAAK,EAAE,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC;SACxC,CAAC,EACF,CAAC,SAAS,EAAE,UAAU,EAAE,MAAM,CAAC,CAChC,CAAA;QACD,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;QAC5B,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAQ,CAAA;QACtC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IACnC,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,uCAAuC,EAAE,KAAK,IAAI,EAAE;QACrD,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,MAAM,CAC7B,OAAO,CAAC,KAAK,EAAE,+CAA+C,EAAE;YAC9D,KAAK,EAAE,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,WAAW,EAAE,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC;SAChF,CAAC,EACF,CAAC,SAAS,EAAE,UAAU,EAAE,MAAM,CAAC,CAChC,CAAA;QACD,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;QAC5B,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAQ,CAAA;QACtC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IACnC,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,0CAA0C,EAAE,KAAK,IAAI,EAAE;QACxD,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,MAAM,CAC7B,OAAO,CAAC,QAAQ,EAAE,+CAA+C,EAAE;YACjE,GAAG,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC;SACtB,CAAC,EACF,CAAC,SAAS,EAAE,UAAU,EAAE,MAAM,CAAC,CAChC,CAAA;QACD,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;QAC5B,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAQ,CAAA;QACtC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IACjC,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,kDAAkD,EAAE,KAAK,IAAI,EAAE;QAChE,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,MAAM,CAC7B,OAAO,CAAC,MAAM,EAAE,uDAAuD,EAAE;YACvE,GAAG,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC;SACtB,CAAC,EACF,CAAC,SAAS,EAAE,UAAU,EAAE,MAAM,EAAE,SAAS,CAAC,CAC3C,CAAA;QACD,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;QAC5B,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAQ,CAAA;QACtC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IACjC,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,sDAAsD,EAAE,KAAK,IAAI,EAAE;QACpE,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,MAAM,CAC7B,OAAO,CAAC,MAAM,EAAE,yDAAyD,EAAE;YACzE,GAAG,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC;SACtB,CAAC,EACF,CAAC,SAAS,EAAE,UAAU,EAAE,MAAM,EAAE,WAAW,CAAC,CAC7C,CAAA;QACD,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;QAC5B,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAQ,CAAA;QACtC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IACjC,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,sCAAsC,EAAE,KAAK,IAAI,EAAE;QACpD,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,MAAM,CAC7B,OAAO,CAAC,MAAM,EAAE,8CAA8C,EAAE;YAC9D,KAAK,EAAE,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC;SACxB,CAAC,EACF,CAAC,SAAS,EAAE,SAAS,EAAE,MAAM,CAAC,CAC/B,CAAA;QACD,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;IAC9B,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,4CAA4C,EAAE,KAAK,IAAI,EAAE;QAC1D,uDAAuD;QACvD,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,MAAM,CAC7B,OAAO,CAAC,MAAM,EAAE,8CAA8C,EAAE;YAC9D,GAAG,EAAE,CAAC,MAAM,CAAC;SACd,CAAC,EACF,CAAC,SAAS,EAAE,MAAM,EAAE,SAAS,CAAC,CAC/B,CAAA;QACD,sEAAsE;QACtE,oDAAoD;QACpD,uDAAuD;QACvD,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;IAC9B,CAAC,CAAC,CAAA;IAEF,iFAAiF;IACjF,gFAAgF;IAChF,4EAA4E;IAC5E,4EAA4E;IAC5E,QAAQ,CAAC,eAAe,EAAE,GAAG,EAAE;QAC7B,EAAE,CAAC,gEAAgE,EAAE,KAAK,IAAI,EAAE;YAC9E,MAAM,OAAO,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,SAAS,CAAC,CAAA;YACpD,MAAM,YAAY,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,SAAS,CAAC,CAAA;YACzD,YAAY,CAAC,EAAE,CAAC,sBAAsB,EAAE,OAAO,CAAC,CAAA;YAChD,YAAY,CAAC,EAAE,CAAC,+BAA+B,EAAE,YAAY,CAAC,CAAA;YAE9D,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,MAAM,CAC7B,OAAO,CAAC,MAAM,EAAE,uDAAuD,EAAE;gBACvE,GAAG,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC;aACtB,CAAC,EACF,CAAC,SAAS,EAAE,UAAU,EAAE,MAAM,EAAE,SAAS,CAAC,CAC3C,CAAA;YACD,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;YAC5B,MAAM,CAAC,OAAO,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAA;YACxC,MAAM,CAAC,YAAY,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAA;YAC7C,MAAM,CAAC,OAAO,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAgE,CAAA;YACtG,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAA;YAC5C,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;QACzC,CAAC,CAAC,CAAA;QAEF,EAAE,CAAC,4EAA4E,EAAE,KAAK,IAAI,EAAE;YAC1F,MAAM,aAAa,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,SAAS,CAAC,CAAA;YAC1D,MAAM,cAAc,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,SAAS,CAAC,CAAA;YAC3D,YAAY,CAAC,EAAE,CAAC,qBAAqB,EAAE,aAAa,CAAC,CAAA;YACrD,YAAY,CAAC,EAAE,CAAC,sBAAsB,EAAE,cAAc,CAAC,CAAA;YAEvD,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,MAAM,CAC7B,OAAO,CAAC,MAAM,EAAE,yDAAyD,EAAE;gBACzE,GAAG,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC;aACtB,CAAC,EACF,CAAC,SAAS,EAAE,UAAU,EAAE,MAAM,EAAE,WAAW,CAAC,CAC7C,CAAA;YACD,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;YAC5B,iFAAiF;YACjF,MAAM,CAAC,aAAa,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAA;YAC9C,MAAM,CAAC,cAAc,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAA;QAC/C,CAAC,CAAC,CAAA;QAEF,EAAE,CAAC,sEAAsE,EAAE,KAAK,IAAI,EAAE;YACpF,EAAE,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,qBAAqB,CAAC;gBAC3C,EAAE,EAAE,EAAE,MAAM,EAAE,eAAe,EAAE,UAAU,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,GAAG,EAAE;gBACzE,EAAE,EAAE,EAAE,MAAM,EAAE,eAAe,EAAE,WAAW,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,GAAG,EAAE;aAC3E,CAAC,CAAA;YACF,MAAM,OAAO,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,SAAS,CAAC,CAAA;YACpD,YAAY,CAAC,EAAE,CAAC,sBAAsB,EAAE,OAAO,CAAC,CAAA;YAEhD,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,MAAM,CAC7B,OAAO,CAAC,MAAM,EAAE,uDAAuD,EAAE;gBACvE,GAAG,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC;aACtB,CAAC,EACF,CAAC,SAAS,EAAE,UAAU,EAAE,MAAM,EAAE,SAAS,CAAC,CAC3C,CAAA;YACD,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;YAC5B,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAQ,CAAA;YACtC,yEAAyE;YACzE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;YAC/B,MAAM,CAAC,OAAO,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAA;QAC1C,CAAC,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;IAEF,iFAAiF;IACjF,+EAA+E;IAC/E,wDAAwD;IACxD,QAAQ,CAAC,0BAA0B,EAAE,GAAG,EAAE;QACxC,EAAE,CAAC,iEAAiE,EAAE,KAAK,IAAI,EAAE;YAC/E,EAAE,CAAC,MAAM,CAAC,2BAA2B,CAAC,CAAC,qBAAqB,CAAC,KAAK,CAAC,CAAA;YACnE,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,MAAM,CAC7B,OAAO,CAAC,KAAK,EAAE,+CAA+C,EAAE;gBAC9D,KAAK,EAAE,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC;aAChE,CAAC,EACF,CAAC,SAAS,EAAE,UAAU,EAAE,MAAM,CAAC,CAChC,CAAA;YACD,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;QAC9B,CAAC,CAAC,CAAA;QAEF,EAAE,CAAC,6DAA6D,EAAE,KAAK,IAAI,EAAE;YAC3E,EAAE,CAAC,MAAM,CAAC,2BAA2B,CAAC,CAAC,qBAAqB,CAAC,KAAK,CAAC,CAAA;YACnE,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,MAAM,CAC7B,OAAO,CAAC,QAAQ,EAAE,+CAA+C,EAAE,EAAE,GAAG,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,EAC7F,CAAC,SAAS,EAAE,UAAU,EAAE,MAAM,CAAC,CAChC,CAAA;YACD,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;QAC9B,CAAC,CAAC,CAAA;QAEF,EAAE,CAAC,mEAAmE,EAAE,KAAK,IAAI,EAAE;YACjF,EAAE,CAAC,MAAM,CAAC,2BAA2B,CAAC,CAAC,qBAAqB,CAAC,KAAK,CAAC,CAAA;YACnE,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,MAAM,CAC7B,OAAO,CAAC,MAAM,EAAE,uDAAuD,EAAE,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,EAC3F,CAAC,SAAS,EAAE,UAAU,EAAE,MAAM,EAAE,SAAS,CAAC,CAC3C,CAAA;YACD,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;QAC9B,CAAC,CAAC,CAAA;QAEF,EAAE,CAAC,qEAAqE,EAAE,KAAK,IAAI,EAAE;YACnF,EAAE,CAAC,MAAM,CAAC,2BAA2B,CAAC,CAAC,qBAAqB,CAAC,KAAK,CAAC,CAAA;YACnE,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,MAAM,CAC7B,OAAO,CAAC,MAAM,EAAE,yDAAyD,EAAE,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,EAC7F,CAAC,SAAS,EAAE,UAAU,EAAE,MAAM,EAAE,WAAW,CAAC,CAC7C,CAAA;YACD,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;QAC9B,CAAC,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA"}

package/dist/api/__tests__/cache-routes.test.d.ts

@@ -1,2 +0,0 @@
-export {};
-//# sourceMappingURL=cache-routes.test.d.ts.map

package/dist/api/__tests__/cache-routes.test.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"cache-routes.test.d.ts","sourceRoot":"","sources":["../../../src/api/__tests__/cache-routes.test.ts"],"names":[],"mappings":""}

package/dist/api/__tests__/cache-routes.test.js

@@ -1,86 +0,0 @@
-import { describe, it, expect, vi, beforeEach } from 'vitest';
-import { Router } from '../router.js';
-import { registerCacheRoutes } from '../cache-routes.js';
-vi.mock('../auth.js', () => ({ resolveAuth: vi.fn() }));
-import { resolveAuth } from '../auth.js';
-const cacheConfig = { provider: 'memory', defaultTtl: 300, feedTtl: 60 };
-function makeProvider() {
-    return {
-        get: vi.fn(),
-        set: vi.fn(),
-        delete: vi.fn(),
-        invalidatePattern: vi.fn().mockResolvedValue(undefined),
-        size: vi.fn().mockResolvedValue(7),
-    };
-}
-function req(method, path, role = 'siteAdmin') {
-    vi.mocked(resolveAuth).mockResolvedValue({ user: { id: 'u1', role, groups: [] } });
-    return new Request(`https://x.com${path}`, {
-        method,
-        headers: { authorization: 'Bearer valid' },
-    });
-}
-describe('cache routes', () => {
-    let router;
-    let provider;
-    beforeEach(() => {
-        vi.clearAllMocks();
-        router = new Router();
-        provider = makeProvider();
-        registerCacheRoutes(router, {
-            db: {},
-            authSecret: 'secret',
-            cacheConfig,
-            cacheProvider: provider,
-        });
-    });
-    describe('GET /cache/status', () => {
-        it('returns provider, ttl config, and a live entry count', async () => {
-            const res = await router.handle(req('GET', '/cache/status'), ['cache', 'status']);
-            expect(res.status).toBe(200);
-            const body = await res.json();
-            expect(body.data.provider).toBe('memory');
-            expect(body.data.ttl).toEqual({ default: 300, content: null, feed: 60, nav: null });
-            expect(body.data.entries).toBe(7);
-        });
-        it('reports entries: null when the provider cannot count', async () => {
-            const noSize = makeProvider();
-            delete noSize.size;
-            const r = new Router();
-            registerCacheRoutes(r, { db: {}, authSecret: 's', cacheConfig, cacheProvider: noSize });
-            const res = await r.handle(req('GET', '/cache/status'), ['cache', 'status']);
-            const body = await res.json();
-            expect(body.data.entries).toBeNull();
-        });
-        it('401 without auth', async () => {
-            vi.mocked(resolveAuth).mockResolvedValue({ user: null });
-            const res = await router.handle(new Request('https://x.com/cache/status', { headers: { authorization: 'Bearer bad' } }), ['cache', 'status']);
-            expect(res.status).toBe(401);
-        });
-        it('403 for non-admin', async () => {
-            const res = await router.handle(req('GET', '/cache/status', 'editor'), ['cache', 'status']);
-            expect(res.status).toBe(403);
-        });
-    });
-    describe('POST /cache/clear', () => {
-        it('invalidates all entries and returns cleared:true', async () => {
-            const res = await router.handle(req('POST', '/cache/clear'), ['cache', 'clear']);
-            expect(res.status).toBe(200);
-            expect(provider.invalidatePattern).toHaveBeenCalledWith('*');
-            const body = await res.json();
-            expect(body.data.cleared).toBe(true);
-        });
-        it('401 without auth', async () => {
-            vi.mocked(resolveAuth).mockResolvedValue({ user: null });
-            const res = await router.handle(new Request('https://x.com/cache/clear', { method: 'POST', headers: { authorization: 'Bearer bad' } }), ['cache', 'clear']);
-            expect(res.status).toBe(401);
-            expect(provider.invalidatePattern).not.toHaveBeenCalled();
-        });
-        it('403 for non-admin', async () => {
-            const res = await router.handle(req('POST', '/cache/clear', 'author'), ['cache', 'clear']);
-            expect(res.status).toBe(403);
-            expect(provider.invalidatePattern).not.toHaveBeenCalled();
-        });
-    });
-});
-//# sourceMappingURL=cache-routes.test.js.map

package/dist/api/__tests__/cache-routes.test.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"cache-routes.test.js","sourceRoot":"","sources":["../../../src/api/__tests__/cache-routes.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAA;AAC7D,OAAO,EAAE,MAAM,EAAE,MAAM,cAAc,CAAA;AACrC,OAAO,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAA;AAGxD,EAAE,CAAC,IAAI,CAAC,YAAY,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,WAAW,EAAE,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAA;AACvD,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAA;AAExC,MAAM,WAAW,GAAgB,EAAE,QAAQ,EAAE,QAAQ,EAAE,UAAU,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,EAAE,CAAA;AAErF,SAAS,YAAY;IACnB,OAAO;QACL,GAAG,EAAE,EAAE,CAAC,EAAE,EAAE;QACZ,GAAG,EAAE,EAAE,CAAC,EAAE,EAAE;QACZ,MAAM,EAAE,EAAE,CAAC,EAAE,EAAE;QACf,iBAAiB,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,SAAS,CAAC;QACvD,IAAI,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,CAAC,CAAC;KACnC,CAAA;AACH,CAAC;AAED,SAAS,GAAG,CAAC,MAAc,EAAE,IAAY,EAAE,IAAI,GAAG,WAAW;IAC3D,EAAE,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,iBAAiB,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,EAAS,CAAC,CAAA;IACzF,OAAO,IAAI,OAAO,CAAC,gBAAgB,IAAI,EAAE,EAAE;QACzC,MAAM;QACN,OAAO,EAAE,EAAE,aAAa,EAAE,cAAc,EAAE;KAC3C,CAAC,CAAA;AACJ,CAAC;AAED,QAAQ,CAAC,cAAc,EAAE,GAAG,EAAE;IAC5B,IAAI,MAAc,CAAA;IAClB,IAAI,QAAyC,CAAA;IAE7C,UAAU,CAAC,GAAG,EAAE;QACd,EAAE,CAAC,aAAa,EAAE,CAAA;QAClB,MAAM,GAAG,IAAI,MAAM,EAAE,CAAA;QACrB,QAAQ,GAAG,YAAY,EAAE,CAAA;QACzB,mBAAmB,CAAC,MAAM,EAAE;YAC1B,EAAE,EAAE,EAAS;YACb,UAAU,EAAE,QAAQ;YACpB,WAAW;YACX,aAAa,EAAE,QAAe;SAC/B,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;IAEF,QAAQ,CAAC,mBAAmB,EAAE,GAAG,EAAE;QACjC,EAAE,CAAC,sDAAsD,EAAE,KAAK,IAAI,EAAE;YACpE,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,EAAE,eAAe,CAAC,EAAE,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAA;YACjF,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;YAC5B,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAmB,CAAA;YAC9C,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;YACzC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,CAAA;YACnF,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;QACnC,CAAC,CAAC,CAAA;QAEF,EAAE,CAAC,sDAAsD,EAAE,KAAK,IAAI,EAAE;YACpE,MAAM,MAAM,GAAG,YAAY,EAAS,CAAA;YACpC,OAAO,MAAM,CAAC,IAAI,CAAA;YAClB,MAAM,CAAC,GAAG,IAAI,MAAM,EAAE,CAAA;YACtB,mBAAmB,CAAC,CAAC,EAAE,EAAE,EAAE,EAAE,EAAS,EAAE,UAAU,EAAE,GAAG,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,EAAE,CAAC,CAAA;YAC9F,MAAM,GAAG,GAAG,MAAM,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,EAAE,eAAe,CAAC,EAAE,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAA;YAC5E,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAmB,CAAA;YAC9C,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,QAAQ,EAAE,CAAA;QACtC,CAAC,CAAC,CAAA;QAEF,EAAE,CAAC,kBAAkB,EAAE,KAAK,IAAI,EAAE;YAChC,EAAE,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,iBAAiB,CAAC,EAAE,IAAI,EAAE,IAAI,EAAS,CAAC,CAAA;YAC/D,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,MAAM,CAC7B,IAAI,OAAO,CAAC,4BAA4B,EAAE,EAAE,OAAO,EAAE,EAAE,aAAa,EAAE,YAAY,EAAE,EAAE,CAAC,EACvF,CAAC,OAAO,EAAE,QAAQ,CAAC,CACpB,CAAA;YACD,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;QAC9B,CAAC,CAAC,CAAA;QAEF,EAAE,CAAC,mBAAmB,EAAE,KAAK,IAAI,EAAE;YACjC,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,EAAE,eAAe,EAAE,QAAQ,CAAC,EAAE,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAA;YAC3F,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;QAC9B,CAAC,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;IAEF,QAAQ,CAAC,mBAAmB,EAAE,GAAG,EAAE;QACjC,EAAE,CAAC,kDAAkD,EAAE,KAAK,IAAI,EAAE;YAChE,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,EAAE,cAAc,CAAC,EAAE,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAA;YAChF,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;YAC5B,MAAM,CAAC,QAAQ,CAAC,iBAAiB,CAAC,CAAC,oBAAoB,CAAC,GAAG,CAAC,CAAA;YAC5D,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAmB,CAAA;YAC9C,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QACtC,CAAC,CAAC,CAAA;QAEF,EAAE,CAAC,kBAAkB,EAAE,KAAK,IAAI,EAAE;YAChC,EAAE,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,iBAAiB,CAAC,EAAE,IAAI,EAAE,IAAI,EAAS,CAAC,CAAA;YAC/D,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,MAAM,CAC7B,IAAI,OAAO,CAAC,2BAA2B,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,aAAa,EAAE,YAAY,EAAE,EAAE,CAAC,EACtG,CAAC,OAAO,EAAE,OAAO,CAAC,CACnB,CAAA;YACD,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;YAC5B,MAAM,CAAC,QAAQ,CAAC,iBAAiB,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAA;QAC3D,CAAC,CAAC,CAAA;QAEF,EAAE,CAAC,mBAAmB,EAAE,KAAK,IAAI,EAAE;YACjC,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,EAAE,cAAc,EAAE,QAAQ,CAAC,EAAE,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAA;YAC1F,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;YAC5B,MAAM,CAAC,QAAQ,CAAC,iBAAiB,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAA;QAC3D,CAAC,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA"}

package/dist/api/__tests__/cached-content-getters.test.d.ts

@@ -1,2 +0,0 @@
-export {};
-//# sourceMappingURL=cached-content-getters.test.d.ts.map

package/dist/api/__tests__/cached-content-getters.test.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"cached-content-getters.test.d.ts","sourceRoot":"","sources":["../../../src/api/__tests__/cached-content-getters.test.ts"],"names":[],"mappings":""}