@plumix/core 0.1.0

package/dist/rpc/procedures/entry/delete-permanent.js

@@ -0,0 +1,28 @@
+import { and, eq, like, or } from "../../../db/index.js";
+import { entries } from "../../../db/schema/entries.js";
+import { AUTOSAVE_TYPE, REVISION_TYPE } from "../../../revisions/slug-codec.js";
+import { authenticated } from "../../authenticated.js";
+import { base } from "../../base.js";
+import { entryDeletableGuards, fireEntryDeleted, loadDeletableEntry, } from "./lifecycle.js";
+import { entryDeletePermanentInputSchema } from "./schemas.js";
+export const deletePermanent = base
+    .use(authenticated)
+    .input(entryDeletePermanentInputSchema)
+    .handler(async ({ input, context, errors }) => {
+    const filtered = await context.hooks.applyFilter("rpc:entry.deletePermanent:input", input);
+    const existing = await loadDeletableEntry(context, filtered.id, entryDeletableGuards(errors));
+    if (existing.status !== "trash") {
+        throw errors.CONFLICT({ data: { reason: "not_trashed" } });
+    }
+    // Revisions and autosaves are separate entry rows linked to the live
+    // entry only through their encoded slugs, so they need explicit
+    // cleanup — entry_term rows cascade via FK, children re-root via
+    // `ON DELETE SET NULL`.
+    await context.db
+        .delete(entries)
+        .where(or(and(eq(entries.type, REVISION_TYPE), like(entries.slug, `revision:${String(existing.id)}:%`)), and(eq(entries.type, AUTOSAVE_TYPE), like(entries.slug, `autosave:${String(existing.id)}:%`))));
+    await context.db.delete(entries).where(eq(entries.id, existing.id));
+    await fireEntryDeleted(context, existing);
+    return context.hooks.applyFilter("rpc:entry.deletePermanent:output", existing);
+});
+//# sourceMappingURL=delete-permanent.js.map

package/dist/rpc/procedures/entry/delete-permanent.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"delete-permanent.js","sourceRoot":"","sources":["../../../../src/rpc/procedures/entry/delete-permanent.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,GAAG,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,MAAM,sBAAsB,CAAC;AACzD,OAAO,EAAE,OAAO,EAAE,MAAM,+BAA+B,CAAC;AACxD,OAAO,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,kCAAkC,CAAC;AAChF,OAAO,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAC;AACvD,OAAO,EAAE,IAAI,EAAE,MAAM,eAAe,CAAC;AACrC,OAAO,EACL,oBAAoB,EACpB,gBAAgB,EAChB,kBAAkB,GACnB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,+BAA+B,EAAE,MAAM,cAAc,CAAC;AAE/D,MAAM,CAAC,MAAM,eAAe,GAAG,IAAI;KAChC,GAAG,CAAC,aAAa,CAAC;KAClB,KAAK,CAAC,+BAA+B,CAAC;KACtC,OAAO,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE;IAC5C,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,KAAK,CAAC,WAAW,CAC9C,iCAAiC,EACjC,KAAK,CACN,CAAC;IAEF,MAAM,QAAQ,GAAG,MAAM,kBAAkB,CACvC,OAAO,EACP,QAAQ,CAAC,EAAE,EACX,oBAAoB,CAAC,MAAM,CAAC,CAC7B,CAAC;IAEF,IAAI,QAAQ,CAAC,MAAM,KAAK,OAAO,EAAE,CAAC;QAChC,MAAM,MAAM,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,aAAa,EAAE,EAAE,CAAC,CAAC;IAC7D,CAAC;IAED,qEAAqE;IACrE,gEAAgE;IAChE,iEAAiE;IACjE,wBAAwB;IACxB,MAAM,OAAO,CAAC,EAAE;SACb,MAAM,CAAC,OAAO,CAAC;SACf,KAAK,CACJ,EAAE,CACA,GAAG,CACD,EAAE,CAAC,OAAO,CAAC,IAAI,EAAE,aAAa,CAAC,EAC/B,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,YAAY,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,IAAI,CAAC,CACxD,EACD,GAAG,CACD,EAAE,CAAC,OAAO,CAAC,IAAI,EAAE,aAAa,CAAC,EAC/B,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,YAAY,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,IAAI,CAAC,CACxD,CACF,CACF,CAAC;IACJ,MAAM,OAAO,CAAC,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,OAAO,CAAC,EAAE,EAAE,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC;IAEpE,MAAM,gBAAgB,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;IAC1C,OAAO,OAAO,CAAC,KAAK,CAAC,WAAW,CAC9B,kCAAkC,EAClC,QAAQ,CACT,CAAC;AACJ,CAAC,CAAC,CAAC"}

package/dist/rpc/procedures/entry/discard-draft.d.ts

@@ -0,0 +1,65 @@
+import * as v from "valibot";
+export declare const discardDraft: import("@orpc/server").DecoratedProcedure<import("@orpc/server").MergedInitialContext<import("../../../index.js").AppContextBase<typeof import("../../../db/schema/index.js")> & import("../../../index.js").AppContextExtensions & Record<never, never>, import("../../../index.js").AppContextBase<typeof import("../../../db/schema/index.js")> & import("../../../index.js").AppContextExtensions & Record<never, never>, import("../../../index.js").AppContext>, import("@orpc/server").MergedCurrentContext<import("../../../index.js").AppContext, import("../../../index.js").AuthenticatedAppContext<typeof import("../../../db/schema/index.js")>>, v.ObjectSchema<{
+    readonly id: v.SchemaWithPipe<readonly [v.NumberSchema<undefined>, v.IntegerAction<number, undefined>, v.MinValueAction<number, 1, undefined>, v.MaxValueAction<number, number, undefined>]>;
+}, undefined>, import("@orpc/server").Schema<{
+    discarded: boolean;
+}, {
+    discarded: boolean;
+}>, import("@orpc/server").MergedErrorMap<Record<never, never>, {
+    readonly UNAUTHORIZED: {
+        readonly message: "Authentication required";
+    };
+    readonly BAD_REQUEST: {
+        readonly message: "Invalid input";
+        readonly data: v.ObjectSchema<{
+            readonly reason: v.StringSchema<undefined>;
+        }, undefined>;
+    };
+    readonly FORBIDDEN: {
+        readonly message: "Permission denied";
+        readonly data: v.ObjectSchema<{
+            readonly capability: v.StringSchema<undefined>;
+        }, undefined>;
+    };
+    readonly NOT_FOUND: {
+        readonly message: "Resource not found";
+        readonly data: v.ObjectSchema<{
+            readonly kind: v.StringSchema<undefined>;
+            readonly id: v.UnionSchema<[v.StringSchema<undefined>, v.NumberSchema<undefined>], undefined>;
+        }, undefined>;
+    };
+    readonly CONFLICT: {
+        readonly message: "Resource conflict";
+        readonly data: v.ObjectSchema<{
+            readonly reason: v.StringSchema<undefined>;
+            readonly key: v.OptionalSchema<v.StringSchema<undefined>, undefined>;
+        }, undefined>;
+    };
+    readonly PAYLOAD_TOO_LARGE: {
+        readonly message: "Payload too large";
+        readonly data: v.ObjectSchema<{
+            readonly limit: v.NumberSchema<undefined>;
+            readonly received: v.OptionalSchema<v.NumberSchema<undefined>, undefined>;
+        }, undefined>;
+    };
+    readonly UNSUPPORTED_MEDIA_TYPE: {
+        readonly message: "Unsupported media type";
+        readonly data: v.ObjectSchema<{
+            readonly mime: v.StringSchema<undefined>;
+        }, undefined>;
+    };
+    readonly INVALID_BLOCK_CONTENT: {
+        readonly message: "Block content failed registry validation";
+        readonly data: v.ObjectSchema<{
+            readonly issues: v.ArraySchema<v.ObjectSchema<{
+                readonly code: v.StringSchema<undefined>;
+                readonly message: v.StringSchema<undefined>;
+                readonly path: v.StringSchema<undefined>;
+                readonly nodeName: v.OptionalSchema<v.StringSchema<undefined>, undefined>;
+                readonly attributeName: v.OptionalSchema<v.StringSchema<undefined>, undefined>;
+                readonly markName: v.OptionalSchema<v.StringSchema<undefined>, undefined>;
+            }, undefined>, undefined>;
+        }, undefined>;
+    };
+}>, Record<never, never>>;
+//# sourceMappingURL=discard-draft.d.ts.map

package/dist/rpc/procedures/entry/discard-draft.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"discard-draft.d.ts","sourceRoot":"","sources":["../../../../src/rpc/procedures/entry/discard-draft.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,SAAS,CAAC;AAkB7B,eAAO,MAAM,YAAY;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;yBA2BrB,CAAC"}

package/dist/rpc/procedures/entry/discard-draft.js

@@ -0,0 +1,43 @@
+import * as v from "valibot";
+import { eq } from "../../../db/index.js";
+import { entries } from "../../../db/schema/entries.js";
+import { deleteAutosave } from "../../../revisions/repository.js";
+import { isReservedType } from "../../../revisions/slug-codec.js";
+import { authenticated } from "../../authenticated.js";
+import { base } from "../../base.js";
+import { idParam } from "../../validation.js";
+import { entryCapability, fireEntryAutosaveDiscarded } from "./lifecycle.js";
+const discardDraftInput = v.object({ id: idParam });
+// Removes the caller's own pending autosave for an entry. Gated by
+// edit_own (for the entry's author) OR edit_any (for editors+).
+// Returns `{ discarded }` so the client can distinguish "we cleaned
+// up your row" from "there was nothing to clean up" — both happy
+// paths, neither an error.
+export const discardDraft = base
+    .use(authenticated)
+    .input(discardDraftInput)
+    .handler(async ({ input, context, errors }) => {
+    const live = await context.db.query.entries.findFirst({
+        where: eq(entries.id, input.id),
+    });
+    if (!live || isReservedType(live.type)) {
+        throw errors.NOT_FOUND({ data: { kind: "entry", id: input.id } });
+    }
+    const isAuthor = live.authorId === context.user.id;
+    const editOwnCapability = entryCapability(live.type, "edit_own");
+    const editAnyCapability = entryCapability(live.type, "edit_any");
+    const canEdit = (isAuthor && context.auth.can(editOwnCapability)) ||
+        context.auth.can(editAnyCapability);
+    if (!canEdit) {
+        throw errors.FORBIDDEN({ data: { capability: editAnyCapability } });
+    }
+    const discarded = await deleteAutosave(context.db, {
+        entryId: live.id,
+        authorId: context.user.id,
+    });
+    if (discarded) {
+        await fireEntryAutosaveDiscarded(context, live, context.user.id);
+    }
+    return { discarded };
+});
+//# sourceMappingURL=discard-draft.js.map

package/dist/rpc/procedures/entry/discard-draft.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"discard-draft.js","sourceRoot":"","sources":["../../../../src/rpc/procedures/entry/discard-draft.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,SAAS,CAAC;AAE7B,OAAO,EAAE,EAAE,EAAE,MAAM,sBAAsB,CAAC;AAC1C,OAAO,EAAE,OAAO,EAAE,MAAM,+BAA+B,CAAC;AACxD,OAAO,EAAE,cAAc,EAAE,MAAM,kCAAkC,CAAC;AAClE,OAAO,EAAE,cAAc,EAAE,MAAM,kCAAkC,CAAC;AAClE,OAAO,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAC;AACvD,OAAO,EAAE,IAAI,EAAE,MAAM,eAAe,CAAC;AACrC,OAAO,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAC;AAC9C,OAAO,EAAE,eAAe,EAAE,0BAA0B,EAAE,MAAM,gBAAgB,CAAC;AAE7E,MAAM,iBAAiB,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC;AAEpD,mEAAmE;AACnE,gEAAgE;AAChE,oEAAoE;AACpE,iEAAiE;AACjE,2BAA2B;AAC3B,MAAM,CAAC,MAAM,YAAY,GAAG,IAAI;KAC7B,GAAG,CAAC,aAAa,CAAC;KAClB,KAAK,CAAC,iBAAiB,CAAC;KACxB,OAAO,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE;IAC5C,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC;QACpD,KAAK,EAAE,EAAE,CAAC,OAAO,CAAC,EAAE,EAAE,KAAK,CAAC,EAAE,CAAC;KAChC,CAAC,CAAC;IACH,IAAI,CAAC,IAAI,IAAI,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QACvC,MAAM,MAAM,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,KAAK,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;IACpE,CAAC;IACD,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,KAAK,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;IACnD,MAAM,iBAAiB,GAAG,eAAe,CAAC,IAAI,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;IACjE,MAAM,iBAAiB,GAAG,eAAe,CAAC,IAAI,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;IACjE,MAAM,OAAO,GACX,CAAC,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC;QACjD,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC;IACtC,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,MAAM,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,EAAE,UAAU,EAAE,iBAAiB,EAAE,EAAE,CAAC,CAAC;IACtE,CAAC;IACD,MAAM,SAAS,GAAG,MAAM,cAAc,CAAC,OAAO,CAAC,EAAE,EAAE;QACjD,OAAO,EAAE,IAAI,CAAC,EAAE;QAChB,QAAQ,EAAE,OAAO,CAAC,IAAI,CAAC,EAAE;KAC1B,CAAC,CAAC;IACH,IAAI,SAAS,EAAE,CAAC;QACd,MAAM,0BAA0B,CAAC,OAAO,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACnE,CAAC;IACD,OAAO,EAAE,SAAS,EAAE,CAAC;AACvB,CAAC,CAAC,CAAC"}

package/dist/rpc/procedures/entry/duplicate.d.ts

@@ -0,0 +1,90 @@
+export declare const duplicate: import("@orpc/server").DecoratedProcedure<import("@orpc/server").MergedInitialContext<import("../../../index.js").AppContextBase<typeof import("../../../db/schema/index.js")> & import("../../../index.js").AppContextExtensions & Record<never, never>, import("../../../index.js").AppContextBase<typeof import("../../../db/schema/index.js")> & import("../../../index.js").AppContextExtensions & Record<never, never>, import("../../../index.js").AppContext>, import("@orpc/server").MergedCurrentContext<import("../../../index.js").AppContext, import("../../../index.js").AuthenticatedAppContext<typeof import("../../../db/schema/index.js")>>, import("valibot").ObjectSchema<{
+    readonly id: import("valibot").SchemaWithPipe<readonly [import("valibot").NumberSchema<undefined>, import("valibot").IntegerAction<number, undefined>, import("valibot").MinValueAction<number, 1, undefined>, import("valibot").MaxValueAction<number, number, undefined>]>;
+}, undefined>, import("@orpc/server").Schema<{
+    id: number;
+    meta: Record<string, unknown>;
+    createdAt: Date;
+    updatedAt: Date;
+    type: string;
+    parentId: number | null;
+    title: string;
+    slug: string;
+    content: import("../../../index.js").EntryContent | null;
+    excerpt: string | null;
+    status: "draft" | "published" | "scheduled" | "trash";
+    authorId: number;
+    sortOrder: number;
+    publishedAt: Date | null;
+}, {
+    id: number;
+    meta: Record<string, unknown>;
+    createdAt: Date;
+    updatedAt: Date;
+    type: string;
+    parentId: number | null;
+    title: string;
+    slug: string;
+    content: import("../../../index.js").EntryContent | null;
+    excerpt: string | null;
+    status: "draft" | "published" | "scheduled" | "trash";
+    authorId: number;
+    sortOrder: number;
+    publishedAt: Date | null;
+}>, import("@orpc/server").MergedErrorMap<Record<never, never>, {
+    readonly UNAUTHORIZED: {
+        readonly message: "Authentication required";
+    };
+    readonly BAD_REQUEST: {
+        readonly message: "Invalid input";
+        readonly data: import("valibot").ObjectSchema<{
+            readonly reason: import("valibot").StringSchema<undefined>;
+        }, undefined>;
+    };
+    readonly FORBIDDEN: {
+        readonly message: "Permission denied";
+        readonly data: import("valibot").ObjectSchema<{
+            readonly capability: import("valibot").StringSchema<undefined>;
+        }, undefined>;
+    };
+    readonly NOT_FOUND: {
+        readonly message: "Resource not found";
+        readonly data: import("valibot").ObjectSchema<{
+            readonly kind: import("valibot").StringSchema<undefined>;
+            readonly id: import("valibot").UnionSchema<[import("valibot").StringSchema<undefined>, import("valibot").NumberSchema<undefined>], undefined>;
+        }, undefined>;
+    };
+    readonly CONFLICT: {
+        readonly message: "Resource conflict";
+        readonly data: import("valibot").ObjectSchema<{
+            readonly reason: import("valibot").StringSchema<undefined>;
+            readonly key: import("valibot").OptionalSchema<import("valibot").StringSchema<undefined>, undefined>;
+        }, undefined>;
+    };
+    readonly PAYLOAD_TOO_LARGE: {
+        readonly message: "Payload too large";
+        readonly data: import("valibot").ObjectSchema<{
+            readonly limit: import("valibot").NumberSchema<undefined>;
+            readonly received: import("valibot").OptionalSchema<import("valibot").NumberSchema<undefined>, undefined>;
+        }, undefined>;
+    };
+    readonly UNSUPPORTED_MEDIA_TYPE: {
+        readonly message: "Unsupported media type";
+        readonly data: import("valibot").ObjectSchema<{
+            readonly mime: import("valibot").StringSchema<undefined>;
+        }, undefined>;
+    };
+    readonly INVALID_BLOCK_CONTENT: {
+        readonly message: "Block content failed registry validation";
+        readonly data: import("valibot").ObjectSchema<{
+            readonly issues: import("valibot").ArraySchema<import("valibot").ObjectSchema<{
+                readonly code: import("valibot").StringSchema<undefined>;
+                readonly message: import("valibot").StringSchema<undefined>;
+                readonly path: import("valibot").StringSchema<undefined>;
+                readonly nodeName: import("valibot").OptionalSchema<import("valibot").StringSchema<undefined>, undefined>;
+                readonly attributeName: import("valibot").OptionalSchema<import("valibot").StringSchema<undefined>, undefined>;
+                readonly markName: import("valibot").OptionalSchema<import("valibot").StringSchema<undefined>, undefined>;
+            }, undefined>, undefined>;
+        }, undefined>;
+    };
+}>, Record<never, never>>;
+//# sourceMappingURL=duplicate.d.ts.map

package/dist/rpc/procedures/entry/duplicate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"duplicate.d.ts","sourceRoot":"","sources":["../../../../src/rpc/procedures/entry/duplicate.ts"],"names":[],"mappings":"AAeA,eAAO,MAAM,SAAS;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;yBAmFlB,CAAC"}

package/dist/rpc/procedures/entry/duplicate.js

@@ -0,0 +1,86 @@
+import { eq } from "../../../db/index.js";
+import { entries } from "../../../db/schema/entries.js";
+import { isReservedType } from "../../../revisions/slug-codec.js";
+import { authenticated } from "../../authenticated.js";
+import { base } from "../../base.js";
+import { canReadEntry, entryCapability } from "./lifecycle.js";
+import { decodeMetaBag } from "./meta.js";
+import { entryDuplicateInputSchema } from "./schemas.js";
+import { applyTermPatch, loadEntryTerms } from "./terms.js";
+// Bounded retry so two duplicates of the same source don't collide on
+// the `(type, slug)` unique index: "original-copy", "original-copy-2", …
+const MAX_SLUG_ATTEMPTS = 50;
+export const duplicate = base
+    .use(authenticated)
+    .input(entryDuplicateInputSchema)
+    .handler(async ({ input, context, errors }) => {
+    const filtered = await context.hooks.applyFilter("rpc:entry.duplicate:input", input);
+    const source = await context.db.query.entries.findFirst({
+        where: eq(entries.id, filtered.id),
+    });
+    // Reserved internal rows (revision/autosave) aren't first-class
+    // entries — 404 them so duplicate can't smuggle a reserved-type row
+    // into the table or leak a snapshot's content. `canReadEntry` would
+    // also reject these (no read cap on reserved types), but the explicit
+    // guard mirrors `entry.create` / `entry.get`.
+    if (!source || isReservedType(source.type)) {
+        throw errors.NOT_FOUND({ data: { kind: "entry", id: filtered.id } });
+    }
+    // The copy reads the source's content, so gate on readability first —
+    // a create cap alone would let a caller harvest a draft they can't
+    // see. 404 (not 403) to avoid leaking the row's existence, matching
+    // `entry.get`.
+    if (!canReadEntry(context, source)) {
+        throw errors.NOT_FOUND({ data: { kind: "entry", id: filtered.id } });
+    }
+    // Duplicating is also a create on the source's type — gate on the same
+    // capability `entry.create` uses, not the source's delete/edit caps.
+    const createCapability = entryCapability(source.type, "create");
+    if (!context.auth.can(createCapability)) {
+        throw errors.FORBIDDEN({ data: { capability: createCapability } });
+    }
+    const candidate = {
+        type: source.type,
+        title: `${source.title} (copy)`,
+        slug: source.slug,
+        content: source.content,
+        excerpt: source.excerpt,
+        status: "draft",
+        // Keep the source's parent — the copy stays a sibling. A deleted
+        // parent already nulled this via the FK's ON DELETE SET NULL, so
+        // there's no dangling reference to revalidate.
+        parentId: source.parentId,
+        sortOrder: source.sortOrder,
+        authorId: context.user.id,
+        publishedAt: null,
+        // Copy the raw meta JSON verbatim — it was already sanitized on
+        // the source, so no decode/re-validate round trip is needed.
+        meta: source.meta,
+    };
+    let created;
+    for (let attempt = 1; attempt <= MAX_SLUG_ATTEMPTS; attempt++) {
+        const slug = attempt === 1
+            ? `${source.slug}-copy`
+            : `${source.slug}-copy-${String(attempt)}`;
+        [created] = await context.db
+            .insert(entries)
+            .values({ ...candidate, slug })
+            .onConflictDoNothing({ target: [entries.type, entries.slug] })
+            .returning();
+        if (created)
+            break;
+    }
+    if (!created) {
+        throw errors.CONFLICT({ data: { reason: "slug_taken" } });
+    }
+    const sourceTerms = await loadEntryTerms(context, source.id);
+    if (Object.keys(sourceTerms).length > 0) {
+        await applyTermPatch(context, created.id, sourceTerms);
+    }
+    const meta = decodeMetaBag(context.plugins, created, created.meta);
+    return context.hooks.applyFilter("rpc:entry.duplicate:output", {
+        ...created,
+        meta,
+    });
+});
+//# sourceMappingURL=duplicate.js.map

package/dist/rpc/procedures/entry/duplicate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"duplicate.js","sourceRoot":"","sources":["../../../../src/rpc/procedures/entry/duplicate.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,EAAE,EAAE,MAAM,sBAAsB,CAAC;AAC1C,OAAO,EAAE,OAAO,EAAE,MAAM,+BAA+B,CAAC;AACxD,OAAO,EAAE,cAAc,EAAE,MAAM,kCAAkC,CAAC;AAClE,OAAO,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAC;AACvD,OAAO,EAAE,IAAI,EAAE,MAAM,eAAe,CAAC;AACrC,OAAO,EAAE,YAAY,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AAC/D,OAAO,EAAE,aAAa,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,yBAAyB,EAAE,MAAM,cAAc,CAAC;AACzD,OAAO,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAE5D,sEAAsE;AACtE,yEAAyE;AACzE,MAAM,iBAAiB,GAAG,EAAE,CAAC;AAE7B,MAAM,CAAC,MAAM,SAAS,GAAG,IAAI;KAC1B,GAAG,CAAC,aAAa,CAAC;KAClB,KAAK,CAAC,yBAAyB,CAAC;KAChC,OAAO,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE;IAC5C,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,KAAK,CAAC,WAAW,CAC9C,2BAA2B,EAC3B,KAAK,CACN,CAAC;IAEF,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC;QACtD,KAAK,EAAE,EAAE,CAAC,OAAO,CAAC,EAAE,EAAE,QAAQ,CAAC,EAAE,CAAC;KACnC,CAAC,CAAC;IACH,gEAAgE;IAChE,oEAAoE;IACpE,oEAAoE;IACpE,sEAAsE;IACtE,8CAA8C;IAC9C,IAAI,CAAC,MAAM,IAAI,cAAc,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;QAC3C,MAAM,MAAM,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,QAAQ,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;IACvE,CAAC;IAED,sEAAsE;IACtE,mEAAmE;IACnE,oEAAoE;IACpE,eAAe;IACf,IAAI,CAAC,YAAY,CAAC,OAAO,EAAE,MAAM,CAAC,EAAE,CAAC;QACnC,MAAM,MAAM,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,QAAQ,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;IACvE,CAAC;IAED,uEAAuE;IACvE,qEAAqE;IACrE,MAAM,gBAAgB,GAAG,eAAe,CAAC,MAAM,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;IAChE,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,gBAAgB,CAAC,EAAE,CAAC;QACxC,MAAM,MAAM,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,EAAE,UAAU,EAAE,gBAAgB,EAAE,EAAE,CAAC,CAAC;IACrE,CAAC;IAED,MAAM,SAAS,GAAa;QAC1B,IAAI,EAAE,MAAM,CAAC,IAAI;QACjB,KAAK,EAAE,GAAG,MAAM,CAAC,KAAK,SAAS;QAC/B,IAAI,EAAE,MAAM,CAAC,IAAI;QACjB,OAAO,EAAE,MAAM,CAAC,OAAO;QACvB,OAAO,EAAE,MAAM,CAAC,OAAO;QACvB,MAAM,EAAE,OAAO;QACf,iEAAiE;QACjE,iEAAiE;QACjE,+CAA+C;QAC/C,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,SAAS,EAAE,MAAM,CAAC,SAAS;QAC3B,QAAQ,EAAE,OAAO,CAAC,IAAI,CAAC,EAAE;QACzB,WAAW,EAAE,IAAI;QACjB,gEAAgE;QAChE,6DAA6D;QAC7D,IAAI,EAAE,MAAM,CAAC,IAAI;KAClB,CAAC;IAEF,IAAI,OAAgD,CAAC;IACrD,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,IAAI,iBAAiB,EAAE,OAAO,EAAE,EAAE,CAAC;QAC9D,MAAM,IAAI,GACR,OAAO,KAAK,CAAC;YACX,CAAC,CAAC,GAAG,MAAM,CAAC,IAAI,OAAO;YACvB,CAAC,CAAC,GAAG,MAAM,CAAC,IAAI,SAAS,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;QAC/C,CAAC,OAAO,CAAC,GAAG,MAAM,OAAO,CAAC,EAAE;aACzB,MAAM,CAAC,OAAO,CAAC;aACf,MAAM,CAAC,EAAE,GAAG,SAAS,EAAE,IAAI,EAAE,CAAC;aAC9B,mBAAmB,CAAC,EAAE,MAAM,EAAE,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;aAC7D,SAAS,EAAE,CAAC;QACf,IAAI,OAAO;YAAE,MAAM;IACrB,CAAC;IACD,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,MAAM,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,YAAY,EAAE,EAAE,CAAC,CAAC;IAC5D,CAAC;IAED,MAAM,WAAW,GAAG,MAAM,cAAc,CAAC,OAAO,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC;IAC7D,IAAI,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxC,MAAM,cAAc,CAAC,OAAO,EAAE,OAAO,CAAC,EAAE,EAAE,WAAW,CAAC,CAAC;IACzD,CAAC;IAED,MAAM,IAAI,GAAG,aAAa,CAAC,OAAO,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;IAEnE,OAAO,OAAO,CAAC,KAAK,CAAC,WAAW,CAAC,4BAA4B,EAAE;QAC7D,GAAG,OAAO;QACV,IAAI;KACL,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/rpc/procedures/entry/get.d.ts

@@ -0,0 +1,105 @@
+export declare const get: import("@orpc/server").DecoratedProcedure<import("@orpc/server").MergedInitialContext<import("../../../index.js").AppContextBase<typeof import("../../../db/schema/index.js")> & import("../../../index.js").AppContextExtensions & Record<never, never>, import("../../../index.js").AppContextBase<typeof import("../../../db/schema/index.js")> & import("../../../index.js").AppContextExtensions & Record<never, never>, import("../../../index.js").AppContext>, import("@orpc/server").MergedCurrentContext<import("../../../index.js").AppContext, import("../../../index.js").AuthenticatedAppContext<typeof import("../../../db/schema/index.js")>>, import("valibot").ObjectSchema<{
+    readonly id: import("valibot").SchemaWithPipe<readonly [import("valibot").NumberSchema<undefined>, import("valibot").IntegerAction<number, undefined>, import("valibot").MinValueAction<number, 1, undefined>, import("valibot").MaxValueAction<number, number, undefined>]>;
+    readonly preview: import("valibot").OptionalSchema<import("valibot").BooleanSchema<undefined>, undefined>;
+}, undefined>, import("@orpc/server").Schema<{
+    id: number;
+    meta: Record<string, unknown>;
+    createdAt: Date;
+    updatedAt: Date;
+    type: string;
+    parentId: number | null;
+    title: string;
+    slug: string;
+    content: import("../../../index.js").EntryContent | null;
+    excerpt: string | null;
+    status: "draft" | "published" | "scheduled" | "trash";
+    authorId: number;
+    sortOrder: number;
+    publishedAt: Date | null;
+} & {
+    readonly terms: Record<string, readonly number[]>;
+    readonly _preview?: {
+        readonly source: "live" | "autosave";
+        readonly autosaveUpdatedAt: Date | null;
+        readonly liveUpdatedAt: Date;
+    };
+}, {
+    id: number;
+    meta: Record<string, unknown>;
+    createdAt: Date;
+    updatedAt: Date;
+    type: string;
+    parentId: number | null;
+    title: string;
+    slug: string;
+    content: import("../../../index.js").EntryContent | null;
+    excerpt: string | null;
+    status: "draft" | "published" | "scheduled" | "trash";
+    authorId: number;
+    sortOrder: number;
+    publishedAt: Date | null;
+} & {
+    readonly terms: Record<string, readonly number[]>;
+    readonly _preview?: {
+        readonly source: "live" | "autosave";
+        readonly autosaveUpdatedAt: Date | null;
+        readonly liveUpdatedAt: Date;
+    };
+}>, import("@orpc/server").MergedErrorMap<Record<never, never>, {
+    readonly UNAUTHORIZED: {
+        readonly message: "Authentication required";
+    };
+    readonly BAD_REQUEST: {
+        readonly message: "Invalid input";
+        readonly data: import("valibot").ObjectSchema<{
+            readonly reason: import("valibot").StringSchema<undefined>;
+        }, undefined>;
+    };
+    readonly FORBIDDEN: {
+        readonly message: "Permission denied";
+        readonly data: import("valibot").ObjectSchema<{
+            readonly capability: import("valibot").StringSchema<undefined>;
+        }, undefined>;
+    };
+    readonly NOT_FOUND: {
+        readonly message: "Resource not found";
+        readonly data: import("valibot").ObjectSchema<{
+            readonly kind: import("valibot").StringSchema<undefined>;
+            readonly id: import("valibot").UnionSchema<[import("valibot").StringSchema<undefined>, import("valibot").NumberSchema<undefined>], undefined>;
+        }, undefined>;
+    };
+    readonly CONFLICT: {
+        readonly message: "Resource conflict";
+        readonly data: import("valibot").ObjectSchema<{
+            readonly reason: import("valibot").StringSchema<undefined>;
+            readonly key: import("valibot").OptionalSchema<import("valibot").StringSchema<undefined>, undefined>;
+        }, undefined>;
+    };
+    readonly PAYLOAD_TOO_LARGE: {
+        readonly message: "Payload too large";
+        readonly data: import("valibot").ObjectSchema<{
+            readonly limit: import("valibot").NumberSchema<undefined>;
+            readonly received: import("valibot").OptionalSchema<import("valibot").NumberSchema<undefined>, undefined>;
+        }, undefined>;
+    };
+    readonly UNSUPPORTED_MEDIA_TYPE: {
+        readonly message: "Unsupported media type";
+        readonly data: import("valibot").ObjectSchema<{
+            readonly mime: import("valibot").StringSchema<undefined>;
+        }, undefined>;
+    };
+    readonly INVALID_BLOCK_CONTENT: {
+        readonly message: "Block content failed registry validation";
+        readonly data: import("valibot").ObjectSchema<{
+            readonly issues: import("valibot").ArraySchema<import("valibot").ObjectSchema<{
+                readonly code: import("valibot").StringSchema<undefined>;
+                readonly message: import("valibot").StringSchema<undefined>;
+                readonly path: import("valibot").StringSchema<undefined>;
+                readonly nodeName: import("valibot").OptionalSchema<import("valibot").StringSchema<undefined>, undefined>;
+                readonly attributeName: import("valibot").OptionalSchema<import("valibot").StringSchema<undefined>, undefined>;
+                readonly markName: import("valibot").OptionalSchema<import("valibot").StringSchema<undefined>, undefined>;
+            }, undefined>, undefined>;
+        }, undefined>;
+    };
+}>, Record<never, never>>;
+//# sourceMappingURL=get.d.ts.map

package/dist/rpc/procedures/entry/get.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"get.d.ts","sourceRoot":"","sources":["../../../../src/rpc/procedures/entry/get.ts"],"names":[],"mappings":"AASA,eAAO,MAAM,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;yBAsDZ,CAAC"}

package/dist/rpc/procedures/entry/get.js

@@ -0,0 +1,56 @@
+import { getEntry } from "../../../entries/read-service.js";
+import { getAutosave } from "../../../revisions/repository.js";
+import { authenticated } from "../../authenticated.js";
+import { base } from "../../base.js";
+import { entryCapability } from "./lifecycle.js";
+import { decodeMetaBag } from "./meta.js";
+import { toRpcEntryReadError } from "./read-errors.js";
+import { entryGetInputSchema } from "./schemas.js";
+export const get = base
+    .use(authenticated)
+    .input(entryGetInputSchema)
+    .handler(async ({ input, context, errors }) => {
+    const filtered = await context.hooks.applyFilter("rpc:entry.get:input", input);
+    try {
+        const live = await getEntry(context, filtered);
+        if (!filtered.preview) {
+            return await context.hooks.applyFilter("rpc:entry.get:output", live);
+        }
+        // Preview mode: overlay the caller's autosave (if any) onto the live
+        // row's read fields. Gated by edit_own / edit_any because previewing a
+        // pending draft is an editor concern.
+        const canSeeAny = context.auth.can(entryCapability(live.type, "edit_any"));
+        const ownsAndCanEdit = live.authorId === context.user.id &&
+            context.auth.can(entryCapability(live.type, "edit_own"));
+        if (!canSeeAny && !ownsAndCanEdit) {
+            throw errors.FORBIDDEN({
+                data: { capability: entryCapability(live.type, "edit_own") },
+            });
+        }
+        const autosave = await getAutosave(context.db, {
+            entryId: live.id,
+            authorId: context.user.id,
+        });
+        const overlaid = autosave
+            ? {
+                ...live,
+                title: autosave.title,
+                content: autosave.content,
+                excerpt: autosave.excerpt,
+                meta: decodeMetaBag(context.plugins, live, autosave.meta),
+            }
+            : live;
+        return await context.hooks.applyFilter("rpc:entry.get:output", {
+            ...overlaid,
+            _preview: {
+                source: autosave ? "autosave" : "live",
+                autosaveUpdatedAt: autosave?.updatedAt ?? null,
+                liveUpdatedAt: live.updatedAt,
+            },
+        });
+    }
+    catch (error) {
+        throw toRpcEntryReadError(error, errors);
+    }
+});
+//# sourceMappingURL=get.js.map

package/dist/rpc/procedures/entry/get.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"get.js","sourceRoot":"","sources":["../../../../src/rpc/procedures/entry/get.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,kCAAkC,CAAC;AAC5D,OAAO,EAAE,WAAW,EAAE,MAAM,kCAAkC,CAAC;AAC/D,OAAO,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAC;AACvD,OAAO,EAAE,IAAI,EAAE,MAAM,eAAe,CAAC;AACrC,OAAO,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AACjD,OAAO,EAAE,aAAa,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAC;AACvD,OAAO,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAC;AAEnD,MAAM,CAAC,MAAM,GAAG,GAAG,IAAI;KACpB,GAAG,CAAC,aAAa,CAAC;KAClB,KAAK,CAAC,mBAAmB,CAAC;KAC1B,OAAO,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE;IAC5C,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,KAAK,CAAC,WAAW,CAC9C,qBAAqB,EACrB,KAAK,CACN,CAAC;IAEF,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;QAC/C,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC;YACtB,OAAO,MAAM,OAAO,CAAC,KAAK,CAAC,WAAW,CAAC,sBAAsB,EAAE,IAAI,CAAC,CAAC;QACvE,CAAC;QAED,qEAAqE;QACrE,uEAAuE;QACvE,sCAAsC;QACtC,MAAM,SAAS,GAAG,OAAO,CAAC,IAAI,CAAC,GAAG,CAChC,eAAe,CAAC,IAAI,CAAC,IAAI,EAAE,UAAU,CAAC,CACvC,CAAC;QACF,MAAM,cAAc,GAClB,IAAI,CAAC,QAAQ,KAAK,OAAO,CAAC,IAAI,CAAC,EAAE;YACjC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,eAAe,CAAC,IAAI,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC,CAAC;QAC3D,IAAI,CAAC,SAAS,IAAI,CAAC,cAAc,EAAE,CAAC;YAClC,MAAM,MAAM,CAAC,SAAS,CAAC;gBACrB,IAAI,EAAE,EAAE,UAAU,EAAE,eAAe,CAAC,IAAI,CAAC,IAAI,EAAE,UAAU,CAAC,EAAE;aAC7D,CAAC,CAAC;QACL,CAAC;QAED,MAAM,QAAQ,GAAG,MAAM,WAAW,CAAC,OAAO,CAAC,EAAE,EAAE;YAC7C,OAAO,EAAE,IAAI,CAAC,EAAE;YAChB,QAAQ,EAAE,OAAO,CAAC,IAAI,CAAC,EAAE;SAC1B,CAAC,CAAC;QACH,MAAM,QAAQ,GAAG,QAAQ;YACvB,CAAC,CAAC;gBACE,GAAG,IAAI;gBACP,KAAK,EAAE,QAAQ,CAAC,KAAK;gBACrB,OAAO,EAAE,QAAQ,CAAC,OAAO;gBACzB,OAAO,EAAE,QAAQ,CAAC,OAAO;gBACzB,IAAI,EAAE,aAAa,CAAC,OAAO,CAAC,OAAO,EAAE,IAAI,EAAE,QAAQ,CAAC,IAAI,CAAC;aAC1D;YACH,CAAC,CAAC,IAAI,CAAC;QACT,OAAO,MAAM,OAAO,CAAC,KAAK,CAAC,WAAW,CAAC,sBAAsB,EAAE;YAC7D,GAAG,QAAQ;YACX,QAAQ,EAAE;gBACR,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAE,UAAoB,CAAC,CAAC,CAAE,MAAgB;gBAC5D,iBAAiB,EAAE,QAAQ,EAAE,SAAS,IAAI,IAAI;gBAC9C,aAAa,EAAE,IAAI,CAAC,SAAS;aAC9B;SACF,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,mBAAmB,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;IAC3C,CAAC;AACH,CAAC,CAAC,CAAC"}

package/dist/rpc/procedures/entry/helpers.d.ts

@@ -0,0 +1,2 @@
+export declare function stripUndefined<T extends Record<string, unknown>>(source: T): Partial<T>;
+//# sourceMappingURL=helpers.d.ts.map

package/dist/rpc/procedures/entry/helpers.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"helpers.d.ts","sourceRoot":"","sources":["../../../../src/rpc/procedures/entry/helpers.ts"],"names":[],"mappings":"AAAA,wBAAgB,cAAc,CAAC,CAAC,SAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC9D,MAAM,EAAE,CAAC,GACR,OAAO,CAAC,CAAC,CAAC,CAOZ"}

package/dist/rpc/procedures/entry/helpers.js

@@ -0,0 +1,10 @@
+export function stripUndefined(source) {
+    const out = {};
+    for (const key of Object.keys(source)) {
+        const value = source[key];
+        if (value !== undefined)
+            out[key] = value;
+    }
+    return out;
+}
+//# sourceMappingURL=helpers.js.map

package/dist/rpc/procedures/entry/helpers.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"helpers.js","sourceRoot":"","sources":["../../../../src/rpc/procedures/entry/helpers.ts"],"names":[],"mappings":"AAAA,MAAM,UAAU,cAAc,CAC5B,MAAS;IAET,MAAM,GAAG,GAAe,EAAE,CAAC;IAC3B,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAgB,EAAE,CAAC;QACrD,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;QAC1B,IAAI,KAAK,KAAK,SAAS;YAAE,GAAG,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;IAC5C,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC"}