@momentumcms/server-express 0.5.4 → 0.5.5

package/CHANGELOG.md

@@ -1,3 +1,47 @@
+## 0.5.5 (2026-03-09)
+
+### 🚀 Features
+
+- extract syncDatabaseSchema + fix findById breaking change ([#52](https://github.com/DonaldMurillo/momentum-cms/pull/52))
+- swappable admin pages & layout slots with security hardening ([#51](https://github.com/DonaldMurillo/momentum-cms/pull/51))
+- Versioning & drafts with draft/publish workflow ([#50](https://github.com/DonaldMurillo/momentum-cms/pull/50))
+- NestJS server adapter + E2E stabilization (0.5.2) ([#48](https://github.com/DonaldMurillo/momentum-cms/pull/48))
+- S3, auth plugin wiring, redirects, and E2E tooling ([#41](https://github.com/DonaldMurillo/momentum-cms/pull/41))
+- client-side page view tracking and content performance improvements ([#39](https://github.com/DonaldMurillo/momentum-cms/pull/39))
+- SEO plugin recovery, E2E fixes, and CLI templates ([#37](https://github.com/DonaldMurillo/momentum-cms/pull/37), [#33](https://github.com/DonaldMurillo/momentum-cms/issues/33))
+- blocks showcase with articles, pages, and UI fixes ([#36](https://github.com/DonaldMurillo/momentum-cms/pull/36))
+- add named tabs support with nested data grouping and UI improvements ([#30](https://github.com/DonaldMurillo/momentum-cms/pull/30))
+- implement soft deletes with full stack support ([#22](https://github.com/DonaldMurillo/momentum-cms/pull/22))
+- implement globals (singleton collections) with full stack support ([#20](https://github.com/DonaldMurillo/momentum-cms/pull/20))
+- visual block editor & auth-gated admin mode ([#18](https://github.com/DonaldMurillo/momentum-cms/pull/18))
+- Add document versioning and drafts system ([#5](https://github.com/DonaldMurillo/momentum-cms/pull/5))
+- **ui:** enhance command palette with autofocus, filtering, and keyboard nav ([#2](https://github.com/DonaldMurillo/momentum-cms/pull/2))
+- Add seeding feature with idempotent data initialization ([#1](https://github.com/DonaldMurillo/momentum-cms/pull/1))
+- Add role-based access control system ([ebadbbef](https://github.com/DonaldMurillo/momentum-cms/commit/ebadbbef))
+- Add authentication, UI library, and theme system ([0d387205](https://github.com/DonaldMurillo/momentum-cms/commit/0d387205))
+- Add Tailwind design system and fix SQLite reliability ([6dd79b11](https://github.com/DonaldMurillo/momentum-cms/commit/6dd79b11))
+- Implement admin UI with API integration and SSR hydration ([9ed7b2bd](https://github.com/DonaldMurillo/momentum-cms/commit/9ed7b2bd))
+- Initialize Momentum CMS foundation ([f64f5817](https://github.com/DonaldMurillo/momentum-cms/commit/f64f5817))
+
+### 🩹 Fixes
+
+- add public access to form-builder npm publish config ([#46](https://github.com/DonaldMurillo/momentum-cms/pull/46))
+- Resolve non-null assertion bugs and CLAUDE.md violations ([#44](https://github.com/DonaldMurillo/momentum-cms/pull/44))
+- add auth guard and MIME validation to PATCH upload route; fix pagination with client-side filtering ([#32](https://github.com/DonaldMurillo/momentum-cms/pull/32))
+- **create-momentum-app:** add shell option to execFileSync for Windows ([#28](https://github.com/DonaldMurillo/momentum-cms/pull/28))
+- correct repository URLs and add GitHub link to CLI ([#26](https://github.com/DonaldMurillo/momentum-cms/pull/26))
+- resolve CUD toast interceptor issues ([#17](https://github.com/DonaldMurillo/momentum-cms/pull/17), [#1](https://github.com/DonaldMurillo/momentum-cms/issues/1), [#2](https://github.com/DonaldMurillo/momentum-cms/issues/2), [#3](https://github.com/DonaldMurillo/momentum-cms/issues/3), [#4](https://github.com/DonaldMurillo/momentum-cms/issues/4))
+- address 7 critical and high-severity security and validation bugs ([#12](https://github.com/DonaldMurillo/momentum-cms/pull/12))
+- address security vulnerabilities from code review ([#9](https://github.com/DonaldMurillo/momentum-cms/pull/9))
+- address security and reliability issues from code review ([#7](https://github.com/DonaldMurillo/momentum-cms/pull/7))
+
+### ❤️ Thank You
+
+- Claude Haiku 4.5
+- Claude Opus 4.5
+- Claude Opus 4.6
+- Donald Murillo @DonaldMurillo
+
 ## 0.5.4 (2026-03-07)
 
 ### 🚀 Features

package/index.cjs

@@ -569,14 +569,14 @@ var init_strip_artifacts = __esm({
 
 // libs/email/src/lib/render/render-types.ts
 function injectEmailData() {
-  return (0, import_core11.inject)(EMAIL_DATA);
+  return (0, import_core12.inject)(EMAIL_DATA);
 }
-var import_core11, EMAIL_DATA;
+var import_core12, EMAIL_DATA;
 var init_render_types = __esm({
   "libs/email/src/lib/render/render-types.ts"() {
     "use strict";
-    import_core11 = require("@angular/core");
-    EMAIL_DATA = new import_core11.InjectionToken("EMAIL_DATA");
+    import_core12 = require("@angular/core");
+    EMAIL_DATA = new import_core12.InjectionToken("EMAIL_DATA");
   }
 });
 
@@ -588,7 +588,7 @@ async function renderEmail(component, data, options) {
   const shouldInlineCss = options?.inlineCss ?? true;
   const shouldStripArtifacts = options?.stripArtifacts ?? true;
   const extraProviders = options?.providers ?? [];
-  const mirror = (0, import_core12.reflectComponentType)(component);
+  const mirror = (0, import_core13.reflectComponentType)(component);
   if (!mirror) {
     throw new Error(
       `Cannot reflect component type: ${component.name}. Ensure it has a @Component decorator.`
@@ -610,12 +610,12 @@ async function renderEmail(component, data, options) {
   }
   return html;
 }
-var import_compiler, import_core12, import_platform_server, import_platform_browser;
+var import_compiler, import_core13, import_platform_server, import_platform_browser;
 var init_render_email = __esm({
   "libs/email/src/lib/render/render-email.ts"() {
     "use strict";
     import_compiler = require("@angular/compiler");
-    import_core12 = require("@angular/core");
+    import_core13 = require("@angular/core");
     import_platform_server = require("@angular/platform-server");
     import_platform_browser = require("@angular/platform-browser");
     init_css_inliner();
@@ -1048,26 +1048,26 @@ var init_default_templates = __esm({
 });
 
 // libs/email/src/lib/components/eml-body.component.ts
-var import_core13, EmlBody;
+var import_core14, EmlBody;
 var init_eml_body_component = __esm({
   "libs/email/src/lib/components/eml-body.component.ts"() {
     "use strict";
-    import_core13 = require("@angular/core");
+    import_core14 = require("@angular/core");
     EmlBody = class {
       constructor() {
-        this.backgroundColor = (0, import_core13.input)("#f4f4f5");
-        this.fontFamily = (0, import_core13.input)(
+        this.backgroundColor = (0, import_core14.input)("#f4f4f5");
+        this.fontFamily = (0, import_core14.input)(
           "-apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, 'Helvetica Neue', Arial, sans-serif"
         );
-        this.padding = (0, import_core13.input)("40px 20px");
-        this.tableStyle = (0, import_core13.computed)(
+        this.padding = (0, import_core14.input)("40px 20px");
+        this.tableStyle = (0, import_core14.computed)(
           () => `background-color: ${this.backgroundColor()}; font-family: ${this.fontFamily()}; line-height: 1.6; margin: 0; padding: 0;`
         );
-        this.cellStyle = (0, import_core13.computed)(() => `padding: ${this.padding()};`);
+        this.cellStyle = (0, import_core14.computed)(() => `padding: ${this.padding()};`);
       }
     };
     EmlBody = __decorateClass([
-      (0, import_core13.Component)({
+      (0, import_core14.Component)({
         selector: "eml-body",
         template: `
 		<table
@@ -1084,33 +1084,33 @@ var init_eml_body_component = __esm({
 			</tr>
 		</table>
 	`,
-        changeDetection: import_core13.ChangeDetectionStrategy.OnPush
+        changeDetection: import_core14.ChangeDetectionStrategy.OnPush
       })
     ], EmlBody);
   }
 });
 
 // libs/email/src/lib/components/eml-container.component.ts
-var import_core14, EmlContainer;
+var import_core15, EmlContainer;
 var init_eml_container_component = __esm({
   "libs/email/src/lib/components/eml-container.component.ts"() {
     "use strict";
-    import_core14 = require("@angular/core");
+    import_core15 = require("@angular/core");
     EmlContainer = class {
       constructor() {
-        this.maxWidth = (0, import_core14.input)("480px");
-        this.backgroundColor = (0, import_core14.input)("#ffffff");
-        this.borderRadius = (0, import_core14.input)("8px");
-        this.padding = (0, import_core14.input)("40px");
-        this.shadow = (0, import_core14.input)("0 1px 3px rgba(0,0,0,0.1)");
-        this.tableStyle = (0, import_core14.computed)(
+        this.maxWidth = (0, import_core15.input)("480px");
+        this.backgroundColor = (0, import_core15.input)("#ffffff");
+        this.borderRadius = (0, import_core15.input)("8px");
+        this.padding = (0, import_core15.input)("40px");
+        this.shadow = (0, import_core15.input)("0 1px 3px rgba(0,0,0,0.1)");
+        this.tableStyle = (0, import_core15.computed)(
           () => `max-width: ${this.maxWidth()}; margin: 0 auto; background-color: ${this.backgroundColor()}; border-radius: ${this.borderRadius()}; box-shadow: ${this.shadow()};`
         );
-        this.cellStyle = (0, import_core14.computed)(() => `padding: ${this.padding()};`);
+        this.cellStyle = (0, import_core15.computed)(() => `padding: ${this.padding()};`);
       }
     };
     EmlContainer = __decorateClass([
-      (0, import_core14.Component)({
+      (0, import_core15.Component)({
         selector: "eml-container",
         template: `
 		<table
@@ -1127,26 +1127,26 @@ var init_eml_container_component = __esm({
 			</tr>
 		</table>
 	`,
-        changeDetection: import_core14.ChangeDetectionStrategy.OnPush
+        changeDetection: import_core15.ChangeDetectionStrategy.OnPush
       })
     ], EmlContainer);
   }
 });
 
 // libs/email/src/lib/components/eml-section.component.ts
-var import_core15, EmlSection;
+var import_core16, EmlSection;
 var init_eml_section_component = __esm({
   "libs/email/src/lib/components/eml-section.component.ts"() {
     "use strict";
-    import_core15 = require("@angular/core");
+    import_core16 = require("@angular/core");
     EmlSection = class {
       constructor() {
-        this.padding = (0, import_core15.input)("0");
-        this.cellStyle = (0, import_core15.computed)(() => `padding: ${this.padding()};`);
+        this.padding = (0, import_core16.input)("0");
+        this.cellStyle = (0, import_core16.computed)(() => `padding: ${this.padding()};`);
       }
     };
     EmlSection = __decorateClass([
-      (0, import_core15.Component)({
+      (0, import_core16.Component)({
         selector: "eml-section",
         template: `
 		<table role="presentation" width="100%" cellspacing="0" cellpadding="0">
@@ -1157,22 +1157,22 @@ var init_eml_section_component = __esm({
 			</tr>
 		</table>
 	`,
-        changeDetection: import_core15.ChangeDetectionStrategy.OnPush
+        changeDetection: import_core16.ChangeDetectionStrategy.OnPush
       })
     ], EmlSection);
   }
 });
 
 // libs/email/src/lib/components/eml-row.component.ts
-var import_core16, EmlRow;
+var import_core17, EmlRow;
 var init_eml_row_component = __esm({
   "libs/email/src/lib/components/eml-row.component.ts"() {
     "use strict";
-    import_core16 = require("@angular/core");
+    import_core17 = require("@angular/core");
     EmlRow = class {
     };
     EmlRow = __decorateClass([
-      (0, import_core16.Component)({
+      (0, import_core17.Component)({
         selector: "eml-row",
         template: `
 		<table role="presentation" width="100%" cellspacing="0" cellpadding="0">
@@ -1181,130 +1181,130 @@ var init_eml_row_component = __esm({
 			</tr>
 		</table>
 	`,
-        changeDetection: import_core16.ChangeDetectionStrategy.OnPush
+        changeDetection: import_core17.ChangeDetectionStrategy.OnPush
       })
     ], EmlRow);
   }
 });
 
 // libs/email/src/lib/components/eml-column.component.ts
-var import_core17, EmlColumn;
+var import_core18, EmlColumn;
 var init_eml_column_component = __esm({
   "libs/email/src/lib/components/eml-column.component.ts"() {
     "use strict";
-    import_core17 = require("@angular/core");
+    import_core18 = require("@angular/core");
     EmlColumn = class {
       constructor() {
-        this.width = (0, import_core17.input)(void 0);
-        this.padding = (0, import_core17.input)("0");
-        this.verticalAlign = (0, import_core17.input)("top");
-        this.cellStyle = (0, import_core17.computed)(
+        this.width = (0, import_core18.input)(void 0);
+        this.padding = (0, import_core18.input)("0");
+        this.verticalAlign = (0, import_core18.input)("top");
+        this.cellStyle = (0, import_core18.computed)(
           () => `padding: ${this.padding()}; vertical-align: ${this.verticalAlign()};`
         );
       }
     };
     EmlColumn = __decorateClass([
-      (0, import_core17.Component)({
+      (0, import_core18.Component)({
         selector: "eml-column",
         template: `
 		<td [attr.style]="cellStyle()" [attr.width]="width()" valign="top">
 			<ng-content />
 		</td>
 	`,
-        changeDetection: import_core17.ChangeDetectionStrategy.OnPush
+        changeDetection: import_core18.ChangeDetectionStrategy.OnPush
       })
     ], EmlColumn);
   }
 });
 
 // libs/email/src/lib/components/eml-text.component.ts
-var import_core18, EmlText;
+var import_core19, EmlText;
 var init_eml_text_component = __esm({
   "libs/email/src/lib/components/eml-text.component.ts"() {
     "use strict";
-    import_core18 = require("@angular/core");
+    import_core19 = require("@angular/core");
     EmlText = class {
       constructor() {
-        this.color = (0, import_core18.input)("#3f3f46");
-        this.fontSize = (0, import_core18.input)("16px");
-        this.lineHeight = (0, import_core18.input)("1.6");
-        this.margin = (0, import_core18.input)("0 0 16px");
-        this.textAlign = (0, import_core18.input)("left");
-        this.pStyle = (0, import_core18.computed)(
+        this.color = (0, import_core19.input)("#3f3f46");
+        this.fontSize = (0, import_core19.input)("16px");
+        this.lineHeight = (0, import_core19.input)("1.6");
+        this.margin = (0, import_core19.input)("0 0 16px");
+        this.textAlign = (0, import_core19.input)("left");
+        this.pStyle = (0, import_core19.computed)(
           () => `margin: ${this.margin()}; color: ${this.color()}; font-size: ${this.fontSize()}; line-height: ${this.lineHeight()}; text-align: ${this.textAlign()};`
         );
       }
     };
     EmlText = __decorateClass([
-      (0, import_core18.Component)({
+      (0, import_core19.Component)({
         selector: "eml-text",
         template: `
 		<p [attr.style]="pStyle()">
 			<ng-content />
 		</p>
 	`,
-        changeDetection: import_core18.ChangeDetectionStrategy.OnPush
+        changeDetection: import_core19.ChangeDetectionStrategy.OnPush
       })
     ], EmlText);
   }
 });
 
 // libs/email/src/lib/components/eml-heading.component.ts
-var import_core19, EmlHeading;
+var import_core20, EmlHeading;
 var init_eml_heading_component = __esm({
   "libs/email/src/lib/components/eml-heading.component.ts"() {
     "use strict";
-    import_core19 = require("@angular/core");
+    import_core20 = require("@angular/core");
     EmlHeading = class {
       constructor() {
-        this.level = (0, import_core19.input)(1);
-        this.color = (0, import_core19.input)("#18181b");
-        this.margin = (0, import_core19.input)("0 0 24px");
-        this.textAlign = (0, import_core19.input)("left");
+        this.level = (0, import_core20.input)(1);
+        this.color = (0, import_core20.input)("#18181b");
+        this.margin = (0, import_core20.input)("0 0 24px");
+        this.textAlign = (0, import_core20.input)("left");
         this.fontSizeMap = {
           1: "24px",
           2: "20px",
           3: "16px"
         };
-        this.headingStyle = (0, import_core19.computed)(
+        this.headingStyle = (0, import_core20.computed)(
           () => `margin: ${this.margin()}; font-size: ${this.fontSizeMap[this.level()] ?? "24px"}; font-weight: 600; color: ${this.color()}; text-align: ${this.textAlign()};`
         );
       }
     };
     EmlHeading = __decorateClass([
-      (0, import_core19.Component)({
+      (0, import_core20.Component)({
         selector: "eml-heading",
         template: `<div [attr.style]="headingStyle()" [attr.role]="'heading'" [attr.aria-level]="level()">
 		<ng-content />
 	</div>`,
-        changeDetection: import_core19.ChangeDetectionStrategy.OnPush
+        changeDetection: import_core20.ChangeDetectionStrategy.OnPush
       })
     ], EmlHeading);
   }
 });
 
 // libs/email/src/lib/components/eml-button.component.ts
-var import_core20, EmlButton;
+var import_core21, EmlButton;
 var init_eml_button_component = __esm({
   "libs/email/src/lib/components/eml-button.component.ts"() {
     "use strict";
-    import_core20 = require("@angular/core");
+    import_core21 = require("@angular/core");
     EmlButton = class {
       constructor() {
-        this.href = (0, import_core20.input)("");
-        this.backgroundColor = (0, import_core20.input)("#18181b");
-        this.color = (0, import_core20.input)("#ffffff");
-        this.borderRadius = (0, import_core20.input)("6px");
-        this.padding = (0, import_core20.input)("12px 24px");
-        this.textAlign = (0, import_core20.input)("left");
-        this.alignStyle = (0, import_core20.computed)(() => `padding: 0; text-align: ${this.textAlign()};`);
-        this.linkStyle = (0, import_core20.computed)(
+        this.href = (0, import_core21.input)("");
+        this.backgroundColor = (0, import_core21.input)("#18181b");
+        this.color = (0, import_core21.input)("#ffffff");
+        this.borderRadius = (0, import_core21.input)("6px");
+        this.padding = (0, import_core21.input)("12px 24px");
+        this.textAlign = (0, import_core21.input)("left");
+        this.alignStyle = (0, import_core21.computed)(() => `padding: 0; text-align: ${this.textAlign()};`);
+        this.linkStyle = (0, import_core21.computed)(
           () => `display: inline-block; padding: ${this.padding()}; background-color: ${this.backgroundColor()}; color: ${this.color()}; text-decoration: none; border-radius: ${this.borderRadius()}; font-weight: 500;`
         );
       }
     };
     EmlButton = __decorateClass([
-      (0, import_core20.Component)({
+      (0, import_core21.Component)({
         selector: "eml-button",
         template: `
 		<table role="presentation" width="100%" cellspacing="0" cellpadding="0">
@@ -1317,62 +1317,62 @@ var init_eml_button_component = __esm({
 			</tr>
 		</table>
 	`,
-        changeDetection: import_core20.ChangeDetectionStrategy.OnPush
+        changeDetection: import_core21.ChangeDetectionStrategy.OnPush
       })
     ], EmlButton);
   }
 });
 
 // libs/email/src/lib/components/eml-link.component.ts
-var import_core21, EmlLink;
+var import_core22, EmlLink;
 var init_eml_link_component = __esm({
   "libs/email/src/lib/components/eml-link.component.ts"() {
     "use strict";
-    import_core21 = require("@angular/core");
+    import_core22 = require("@angular/core");
     EmlLink = class {
       constructor() {
-        this.href = (0, import_core21.input)("");
-        this.color = (0, import_core21.input)("#18181b");
-        this.textDecoration = (0, import_core21.input)("underline");
-        this.linkStyle = (0, import_core21.computed)(
+        this.href = (0, import_core22.input)("");
+        this.color = (0, import_core22.input)("#18181b");
+        this.textDecoration = (0, import_core22.input)("underline");
+        this.linkStyle = (0, import_core22.computed)(
           () => `color: ${this.color()}; text-decoration: ${this.textDecoration()};`
         );
       }
     };
     EmlLink = __decorateClass([
-      (0, import_core21.Component)({
+      (0, import_core22.Component)({
         selector: "eml-link",
         template: `
 		<a [attr.href]="href()" [attr.style]="linkStyle()" target="_blank">
 			<ng-content />
 		</a>
 	`,
-        changeDetection: import_core21.ChangeDetectionStrategy.OnPush
+        changeDetection: import_core22.ChangeDetectionStrategy.OnPush
       })
     ], EmlLink);
   }
 });
 
 // libs/email/src/lib/components/eml-image.component.ts
-var import_core22, EmlImage;
+var import_core23, EmlImage;
 var init_eml_image_component = __esm({
   "libs/email/src/lib/components/eml-image.component.ts"() {
     "use strict";
-    import_core22 = require("@angular/core");
+    import_core23 = require("@angular/core");
     EmlImage = class {
       constructor() {
-        this.src = (0, import_core22.input)("");
-        this.alt = (0, import_core22.input)("");
-        this.width = (0, import_core22.input)(void 0);
-        this.height = (0, import_core22.input)(void 0);
-        this.borderRadius = (0, import_core22.input)("0");
-        this.imgStyle = (0, import_core22.computed)(
+        this.src = (0, import_core23.input)("");
+        this.alt = (0, import_core23.input)("");
+        this.width = (0, import_core23.input)(void 0);
+        this.height = (0, import_core23.input)(void 0);
+        this.borderRadius = (0, import_core23.input)("0");
+        this.imgStyle = (0, import_core23.computed)(
           () => `display: block; max-width: 100%; border: 0; outline: none; border-radius: ${this.borderRadius()};`
         );
       }
     };
     EmlImage = __decorateClass([
-      (0, import_core22.Component)({
+      (0, import_core23.Component)({
         selector: "eml-image",
         template: `
 		<img
@@ -1383,104 +1383,104 @@ var init_eml_image_component = __esm({
 			[attr.style]="imgStyle()"
 		/>
 	`,
-        changeDetection: import_core22.ChangeDetectionStrategy.OnPush
+        changeDetection: import_core23.ChangeDetectionStrategy.OnPush
       })
     ], EmlImage);
   }
 });
 
 // libs/email/src/lib/components/eml-divider.component.ts
-var import_core23, EmlDivider;
+var import_core24, EmlDivider;
 var init_eml_divider_component = __esm({
   "libs/email/src/lib/components/eml-divider.component.ts"() {
     "use strict";
-    import_core23 = require("@angular/core");
+    import_core24 = require("@angular/core");
     EmlDivider = class {
       constructor() {
-        this.color = (0, import_core23.input)("#e4e4e7");
-        this.margin = (0, import_core23.input)("24px 0");
-        this.hrStyle = (0, import_core23.computed)(
+        this.color = (0, import_core24.input)("#e4e4e7");
+        this.margin = (0, import_core24.input)("24px 0");
+        this.hrStyle = (0, import_core24.computed)(
           () => `border: none; border-top: 1px solid ${this.color()}; margin: ${this.margin()};`
         );
       }
     };
     EmlDivider = __decorateClass([
-      (0, import_core23.Component)({
+      (0, import_core24.Component)({
         selector: "eml-divider",
         template: `<hr [attr.style]="hrStyle()" />`,
-        changeDetection: import_core23.ChangeDetectionStrategy.OnPush
+        changeDetection: import_core24.ChangeDetectionStrategy.OnPush
       })
     ], EmlDivider);
   }
 });
 
 // libs/email/src/lib/components/eml-preview.component.ts
-var import_core24, EmlPreview;
+var import_core25, EmlPreview;
 var init_eml_preview_component = __esm({
   "libs/email/src/lib/components/eml-preview.component.ts"() {
     "use strict";
-    import_core24 = require("@angular/core");
+    import_core25 = require("@angular/core");
     EmlPreview = class {
     };
     EmlPreview = __decorateClass([
-      (0, import_core24.Component)({
+      (0, import_core25.Component)({
         selector: "eml-preview",
         template: `
 		<div style="display: none; max-height: 0; overflow: hidden; mso-hide: all;">
 			<ng-content />
 		</div>
 	`,
-        changeDetection: import_core24.ChangeDetectionStrategy.OnPush
+        changeDetection: import_core25.ChangeDetectionStrategy.OnPush
       })
     ], EmlPreview);
   }
 });
 
 // libs/email/src/lib/components/eml-spacer.component.ts
-var import_core25, EmlSpacer;
+var import_core26, EmlSpacer;
 var init_eml_spacer_component = __esm({
   "libs/email/src/lib/components/eml-spacer.component.ts"() {
     "use strict";
-    import_core25 = require("@angular/core");
+    import_core26 = require("@angular/core");
     EmlSpacer = class {
       constructor() {
-        this.height = (0, import_core25.input)("24px");
-        this.spacerStyle = (0, import_core25.computed)(
+        this.height = (0, import_core26.input)("24px");
+        this.spacerStyle = (0, import_core26.computed)(
           () => `height: ${this.height()}; line-height: ${this.height()}; font-size: 1px;`
         );
       }
     };
     EmlSpacer = __decorateClass([
-      (0, import_core25.Component)({
+      (0, import_core26.Component)({
         selector: "eml-spacer",
         template: `<div [attr.style]="spacerStyle()"></div>`,
-        changeDetection: import_core25.ChangeDetectionStrategy.OnPush
+        changeDetection: import_core26.ChangeDetectionStrategy.OnPush
       })
     ], EmlSpacer);
   }
 });
 
 // libs/email/src/lib/components/eml-footer.component.ts
-var import_core26, EmlFooter;
+var import_core27, EmlFooter;
 var init_eml_footer_component = __esm({
   "libs/email/src/lib/components/eml-footer.component.ts"() {
     "use strict";
-    import_core26 = require("@angular/core");
+    import_core27 = require("@angular/core");
     EmlFooter = class {
       constructor() {
-        this.maxWidth = (0, import_core26.input)("480px");
-        this.color = (0, import_core26.input)("#71717a");
-        this.fontSize = (0, import_core26.input)("12px");
-        this.textAlign = (0, import_core26.input)("center");
-        this.padding = (0, import_core26.input)("20px 0 0");
-        this.tableStyle = (0, import_core26.computed)(() => `max-width: ${this.maxWidth()}; margin: 0 auto;`);
-        this.cellStyle = (0, import_core26.computed)(
+        this.maxWidth = (0, import_core27.input)("480px");
+        this.color = (0, import_core27.input)("#71717a");
+        this.fontSize = (0, import_core27.input)("12px");
+        this.textAlign = (0, import_core27.input)("center");
+        this.padding = (0, import_core27.input)("20px 0 0");
+        this.tableStyle = (0, import_core27.computed)(() => `max-width: ${this.maxWidth()}; margin: 0 auto;`);
+        this.cellStyle = (0, import_core27.computed)(
           () => `text-align: ${this.textAlign()}; color: ${this.color()}; font-size: ${this.fontSize()}; padding: ${this.padding()};`
         );
       }
     };
     EmlFooter = __decorateClass([
-      (0, import_core26.Component)({
+      (0, import_core27.Component)({
         selector: "eml-footer",
         template: `
 		<table
@@ -1497,7 +1497,7 @@ var init_eml_footer_component = __esm({
 			</tr>
 		</table>
 	`,
-        changeDetection: import_core26.ChangeDetectionStrategy.OnPush
+        changeDetection: import_core27.ChangeDetectionStrategy.OnPush
       })
     ], EmlFooter);
   }
@@ -2246,8 +2246,27 @@ var MediaCollection = defineCollection({
   }
 });
 
+// libs/core/src/lib/migrations.ts
+function resolveMigrationMode(mode) {
+  if (mode === "push" || mode === "migrate")
+    return mode;
+  const env = globalThis["process"]?.env?.["NODE_ENV"];
+  if (env === "production")
+    return "migrate";
+  return "push";
+}
+
 // libs/core/src/lib/config.ts
 var MIN_PASSWORD_LENGTH = 8;
+function shouldSyncSchema(config) {
+  const explicit = config.db.syncSchema ?? "auto";
+  if (typeof explicit === "boolean")
+    return explicit;
+  if (!config.migrations)
+    return true;
+  const mode = resolveMigrationMode(config.migrations.mode);
+  return mode !== "migrate";
+}
 
 // libs/core/src/lib/seeding/seeding.types.ts
 var SEED_TRACKING_COLLECTION_SLUG = "_momentum_seeds";
@@ -2697,6 +2716,12 @@ var DocumentNotFoundError = class extends Error {
     this.name = "DocumentNotFoundError";
   }
 };
+var DraftNotVisibleError = class extends Error {
+  constructor(collection, id) {
+    super(`Draft "${id}" in collection "${collection}" is not visible to the current user`);
+    this.name = "DraftNotVisibleError";
+  }
+};
 var AccessDeniedError = class extends Error {
   constructor(operation, collection) {
     super(`Access denied for ${operation} on collection "${collection}"`);
@@ -3114,13 +3139,31 @@ function stripTransientKeys(data) {
   }
   return result;
 }
+var COMPARISON_OPS = ["gt", "gte", "lt", "lte"];
 function flattenWhereClause(where) {
   if (!where)
     return {};
   const result = {};
   for (const [field, condition] of Object.entries(where)) {
-    if (typeof condition === "object" && condition !== null && "equals" in condition) {
-      result[field] = condition["equals"];
+    if (typeof condition !== "object" || condition === null) {
+      result[field] = condition;
+      continue;
+    }
+    const condObj = condition;
+    if ("equals" in condObj) {
+      result[field] = condObj["equals"];
+      continue;
+    }
+    const ops = {};
+    let hasComparisonOp = false;
+    for (const op of COMPARISON_OPS) {
+      if (op in condObj) {
+        ops[`$${op}`] = condObj[op];
+        hasComparisonOp = true;
+      }
+    }
+    if (hasComparisonOp) {
+      result[field] = ops;
     } else {
       result[field] = condition;
     }
@@ -3215,24 +3258,24 @@ var CollectionOperationsImpl = class _CollectionOperationsImpl {
     await this.runBeforeReadHooks();
     const doc = await this.adapter.findById(this.slug, id);
     if (!doc) {
-      return null;
+      throw new DocumentNotFoundError(this.slug, id);
     }
     const softDeleteField = getSoftDeleteField(this.collectionConfig);
     if (softDeleteField && !options?.withDeleted && // eslint-disable-next-line @typescript-eslint/consistent-type-assertions -- T is compatible with Record<string, unknown>
     doc[softDeleteField]) {
-      return null;
+      throw new DocumentNotFoundError(this.slug, id);
     }
     if (hasVersionDrafts(this.collectionConfig) && !this.context.overrideAccess) {
       const canSeeDrafts = await this.canReadDrafts();
       if (!canSeeDrafts) {
         const record = doc;
         if (record["_status"] !== "published") {
-          return null;
+          throw new DraftNotVisibleError(this.slug, id);
         }
       }
     }
     if (!this.matchesDefaultWhereConstraints(doc)) {
-      return null;
+      throw new DocumentNotFoundError(this.slug, id);
     }
     const [processed] = await this.processAfterReadHooks([doc]);
     const MAX_RELATIONSHIP_DEPTH = 10;
@@ -4103,9 +4146,6 @@ function createMomentumHandlers(config) {
       const depth = typeof request.query?.["depth"] === "number" ? request.query["depth"] : void 0;
       const withDeleted = request.query?.["withDeleted"] === true;
       const doc = await api.collection(request.collectionSlug).findById(request.id, { depth, withDeleted });
-      if (!doc) {
-        return { error: "Document not found", status: 404 };
-      }
       return { doc };
     } catch (error) {
       return handleError(error);
@@ -4222,6 +4262,9 @@ function handleError(error) {
   if (error instanceof DocumentNotFoundError) {
     return { error: error.message, status: 404 };
   }
+  if (error instanceof DraftNotVisibleError) {
+    return { doc: null };
+  }
   if (error instanceof AccessDeniedError) {
     return { error: error.message, status: 403 };
   }
@@ -4674,7 +4717,10 @@ async function sendWebhook(webhook, payload, attempt = 0) {
     webhookLogger.warn(`Blocked request to disallowed URL: ${webhook.url}`);
     return;
   }
-  const body = JSON.stringify(payload);
+  const body = JSON.stringify(
+    payload,
+    (_key, value) => typeof value === "bigint" ? Number(value) : value
+  );
   const maxRetries = webhook.retries ?? 0;
   const headers = {
     "Content-Type": "application/json",
@@ -5182,7 +5228,14 @@ function buildGraphQLSchema(collections) {
           const api = getMomentumAPI();
           const ctx = buildAPIContext(context);
           const contextApi = Object.keys(ctx).length > 0 ? api.setContext(ctx) : api;
-          return contextApi.collection(col.slug).findById(args.id);
+          try {
+            return await contextApi.collection(col.slug).findById(args.id);
+          } catch (err) {
+            if (err instanceof Error && err.name === "DocumentNotFoundError") {
+              return null;
+            }
+            throw err;
+          }
         }
       };
       queryFields[plural.charAt(0).toLowerCase() + plural.slice(1)] = {
@@ -6473,6 +6526,22 @@ var RateLimiter = class _RateLimiter {
   }
 };
 
+// libs/server-core/src/lib/schema-sync.ts
+async function syncDatabaseSchema(config, log) {
+  if (shouldSyncSchema(config)) {
+    if (config.db.adapter.initialize) {
+      log.info("Initializing database schema...");
+      await config.db.adapter.initialize(config.collections);
+    }
+    if (config.db.adapter.initializeGlobals && config.globals && config.globals.length > 0) {
+      log.info(`Initializing globals table for ${config.globals.length} global(s)...`);
+      await config.db.adapter.initializeGlobals(config.globals);
+    }
+  } else {
+    log.info("Skipping automatic schema sync (migration mode). Run migrations separately.");
+  }
+}
+
 // libs/server-core/src/lib/shared-server-utils.ts
 function sanitizeErrorMessage(error, fallback) {
   if (!(error instanceof Error))
@@ -7188,12 +7257,7 @@ function momentumApiMiddleware(config) {
       } else {
         const api = getMomentumAPI();
         const contextApi = user ? api.setContext({ user }) : api;
-        const dbDoc = await contextApi.collection(slug2).findById(id);
-        if (!dbDoc) {
-          res.status(404).json({ error: "Document not found" });
-          return;
-        }
-        doc = dbDoc;
+        doc = await contextApi.collection(slug2).findById(id);
       }
       const emailField = getEmailBuilderFieldName(collectionConfig);
       const html = emailField ? await renderEmailPreviewHTML(doc, emailField) : renderPreviewHTML({ doc, collection: collectionConfig });
@@ -7386,7 +7450,13 @@ function momentumApiMiddleware(config) {
               return { docs: r.docs, totalDocs: r.totalDocs };
             },
             findById: async (slug2, id) => {
-              return await ctxApi.collection(slug2).findById(id);
+              try {
+                return await ctxApi.collection(slug2).findById(id);
+              } catch (err) {
+                if (err instanceof Error && err.name === "DocumentNotFoundError")
+                  return null;
+                throw err;
+              }
             },
             count: (slug2) => ctxApi.collection(slug2).count(),
             create: async (slug2, data) => {
@@ -8784,14 +8854,7 @@ function initializeMomentum(config, options = {}) {
       }
     }
     setPluginMiddleware(pluginMiddleware2);
-    if (config.db.adapter.initialize) {
-      log.info("Initializing database schema...");
-      await config.db.adapter.initialize(config.collections);
-    }
-    if (config.db.adapter.initializeGlobals && config.globals && config.globals.length > 0) {
-      log.info(`Initializing globals table for ${config.globals.length} global(s)...`);
-      await config.db.adapter.initializeGlobals(config.globals);
-    }
+    await syncDatabaseSchema(config, log);
     log.info("Initializing API...");
     const api = initializeMomentumAPI(config);
     const runOnStart = config.seeding?.options?.runOnStart ?? "development";

package/index.js

@@ -2202,8 +2202,27 @@ var MediaCollection = defineCollection({
   }
 });
 
+// libs/core/src/lib/migrations.ts
+function resolveMigrationMode(mode) {
+  if (mode === "push" || mode === "migrate")
+    return mode;
+  const env = globalThis["process"]?.env?.["NODE_ENV"];
+  if (env === "production")
+    return "migrate";
+  return "push";
+}
+
 // libs/core/src/lib/config.ts
 var MIN_PASSWORD_LENGTH = 8;
+function shouldSyncSchema(config) {
+  const explicit = config.db.syncSchema ?? "auto";
+  if (typeof explicit === "boolean")
+    return explicit;
+  if (!config.migrations)
+    return true;
+  const mode = resolveMigrationMode(config.migrations.mode);
+  return mode !== "migrate";
+}
 
 // libs/core/src/lib/seeding/seeding.types.ts
 var SEED_TRACKING_COLLECTION_SLUG = "_momentum_seeds";
@@ -2653,6 +2672,12 @@ var DocumentNotFoundError = class extends Error {
     this.name = "DocumentNotFoundError";
   }
 };
+var DraftNotVisibleError = class extends Error {
+  constructor(collection, id) {
+    super(`Draft "${id}" in collection "${collection}" is not visible to the current user`);
+    this.name = "DraftNotVisibleError";
+  }
+};
 var AccessDeniedError = class extends Error {
   constructor(operation, collection) {
     super(`Access denied for ${operation} on collection "${collection}"`);
@@ -3070,13 +3095,31 @@ function stripTransientKeys(data) {
   }
   return result;
 }
+var COMPARISON_OPS = ["gt", "gte", "lt", "lte"];
 function flattenWhereClause(where) {
   if (!where)
     return {};
   const result = {};
   for (const [field, condition] of Object.entries(where)) {
-    if (typeof condition === "object" && condition !== null && "equals" in condition) {
-      result[field] = condition["equals"];
+    if (typeof condition !== "object" || condition === null) {
+      result[field] = condition;
+      continue;
+    }
+    const condObj = condition;
+    if ("equals" in condObj) {
+      result[field] = condObj["equals"];
+      continue;
+    }
+    const ops = {};
+    let hasComparisonOp = false;
+    for (const op of COMPARISON_OPS) {
+      if (op in condObj) {
+        ops[`$${op}`] = condObj[op];
+        hasComparisonOp = true;
+      }
+    }
+    if (hasComparisonOp) {
+      result[field] = ops;
     } else {
       result[field] = condition;
     }
@@ -3171,24 +3214,24 @@ var CollectionOperationsImpl = class _CollectionOperationsImpl {
     await this.runBeforeReadHooks();
     const doc = await this.adapter.findById(this.slug, id);
     if (!doc) {
-      return null;
+      throw new DocumentNotFoundError(this.slug, id);
     }
     const softDeleteField = getSoftDeleteField(this.collectionConfig);
     if (softDeleteField && !options?.withDeleted && // eslint-disable-next-line @typescript-eslint/consistent-type-assertions -- T is compatible with Record<string, unknown>
     doc[softDeleteField]) {
-      return null;
+      throw new DocumentNotFoundError(this.slug, id);
     }
     if (hasVersionDrafts(this.collectionConfig) && !this.context.overrideAccess) {
       const canSeeDrafts = await this.canReadDrafts();
       if (!canSeeDrafts) {
         const record = doc;
         if (record["_status"] !== "published") {
-          return null;
+          throw new DraftNotVisibleError(this.slug, id);
         }
       }
     }
     if (!this.matchesDefaultWhereConstraints(doc)) {
-      return null;
+      throw new DocumentNotFoundError(this.slug, id);
     }
     const [processed] = await this.processAfterReadHooks([doc]);
     const MAX_RELATIONSHIP_DEPTH = 10;
@@ -4059,9 +4102,6 @@ function createMomentumHandlers(config) {
       const depth = typeof request.query?.["depth"] === "number" ? request.query["depth"] : void 0;
       const withDeleted = request.query?.["withDeleted"] === true;
       const doc = await api.collection(request.collectionSlug).findById(request.id, { depth, withDeleted });
-      if (!doc) {
-        return { error: "Document not found", status: 404 };
-      }
       return { doc };
     } catch (error) {
       return handleError(error);
@@ -4178,6 +4218,9 @@ function handleError(error) {
   if (error instanceof DocumentNotFoundError) {
     return { error: error.message, status: 404 };
   }
+  if (error instanceof DraftNotVisibleError) {
+    return { doc: null };
+  }
   if (error instanceof AccessDeniedError) {
     return { error: error.message, status: 403 };
   }
@@ -4630,7 +4673,10 @@ async function sendWebhook(webhook, payload, attempt = 0) {
     webhookLogger.warn(`Blocked request to disallowed URL: ${webhook.url}`);
     return;
   }
-  const body = JSON.stringify(payload);
+  const body = JSON.stringify(
+    payload,
+    (_key, value) => typeof value === "bigint" ? Number(value) : value
+  );
   const maxRetries = webhook.retries ?? 0;
   const headers = {
     "Content-Type": "application/json",
@@ -5151,7 +5197,14 @@ function buildGraphQLSchema(collections) {
           const api = getMomentumAPI();
           const ctx = buildAPIContext(context);
           const contextApi = Object.keys(ctx).length > 0 ? api.setContext(ctx) : api;
-          return contextApi.collection(col.slug).findById(args.id);
+          try {
+            return await contextApi.collection(col.slug).findById(args.id);
+          } catch (err) {
+            if (err instanceof Error && err.name === "DocumentNotFoundError") {
+              return null;
+            }
+            throw err;
+          }
         }
       };
       queryFields[plural.charAt(0).toLowerCase() + plural.slice(1)] = {
@@ -6442,6 +6495,22 @@ var RateLimiter = class _RateLimiter {
   }
 };
 
+// libs/server-core/src/lib/schema-sync.ts
+async function syncDatabaseSchema(config, log) {
+  if (shouldSyncSchema(config)) {
+    if (config.db.adapter.initialize) {
+      log.info("Initializing database schema...");
+      await config.db.adapter.initialize(config.collections);
+    }
+    if (config.db.adapter.initializeGlobals && config.globals && config.globals.length > 0) {
+      log.info(`Initializing globals table for ${config.globals.length} global(s)...`);
+      await config.db.adapter.initializeGlobals(config.globals);
+    }
+  } else {
+    log.info("Skipping automatic schema sync (migration mode). Run migrations separately.");
+  }
+}
+
 // libs/server-core/src/lib/shared-server-utils.ts
 function sanitizeErrorMessage(error, fallback) {
   if (!(error instanceof Error))
@@ -7157,12 +7226,7 @@ function momentumApiMiddleware(config) {
       } else {
         const api = getMomentumAPI();
         const contextApi = user ? api.setContext({ user }) : api;
-        const dbDoc = await contextApi.collection(slug2).findById(id);
-        if (!dbDoc) {
-          res.status(404).json({ error: "Document not found" });
-          return;
-        }
-        doc = dbDoc;
+        doc = await contextApi.collection(slug2).findById(id);
       }
       const emailField = getEmailBuilderFieldName(collectionConfig);
       const html = emailField ? await renderEmailPreviewHTML(doc, emailField) : renderPreviewHTML({ doc, collection: collectionConfig });
@@ -7355,7 +7419,13 @@ function momentumApiMiddleware(config) {
               return { docs: r.docs, totalDocs: r.totalDocs };
             },
             findById: async (slug2, id) => {
-              return await ctxApi.collection(slug2).findById(id);
+              try {
+                return await ctxApi.collection(slug2).findById(id);
+              } catch (err) {
+                if (err instanceof Error && err.name === "DocumentNotFoundError")
+                  return null;
+                throw err;
+              }
             },
             count: (slug2) => ctxApi.collection(slug2).count(),
             create: async (slug2, data) => {
@@ -8753,14 +8823,7 @@ function initializeMomentum(config, options = {}) {
       }
     }
     setPluginMiddleware(pluginMiddleware2);
-    if (config.db.adapter.initialize) {
-      log.info("Initializing database schema...");
-      await config.db.adapter.initialize(config.collections);
-    }
-    if (config.db.adapter.initializeGlobals && config.globals && config.globals.length > 0) {
-      log.info(`Initializing globals table for ${config.globals.length} global(s)...`);
-      await config.db.adapter.initializeGlobals(config.globals);
-    }
+    await syncDatabaseSchema(config, log);
     log.info("Initializing API...");
     const api = initializeMomentumAPI(config);
     const runOnStart = config.seeding?.options?.runOnStart ?? "development";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@momentumcms/server-express",
-  "version": "0.5.4",
+  "version": "0.5.5",
   "description": "Express adapter for Momentum CMS with Angular SSR support",
   "license": "MIT",
   "author": "Momentum CMS Contributors",