@prenta/core 0.118.0

package/dist/cron/index.js

@@ -0,0 +1,299 @@
+/**
+ * Cron handlers for scheduled platform jobs.
+ *
+ * The endpoints in `api/handlers.ts` validate `Authorization: Bearer ${CRON_SECRET}`
+ * before invoking these — Vercel Cron sends that header automatically when
+ * `CRON_SECRET` is defined in the project's environment. See:
+ * https://vercel.com/docs/cron-jobs/manage-cron-jobs#securing-cron-jobs
+ *
+ * Each handler is **idempotent** and **bounded** — safe to invoke from any
+ * scheduler (Vercel Cron, GitHub Actions, EventBridge, k8s CronJob, etc.) and
+ * safe to invoke twice in the same window.
+ */
+import { createHmac, randomBytes, timingSafeEqual } from 'node:crypto';
+import { schedulingCronHandler } from '../scheduling/index.js';
+import { getPrentaConfig } from '../config/runtime.js';
+import { applySeoOverrides, getSeoOverrides } from '../seo/config-store.js';
+import { resolveEffectiveMeta } from '../seo/page-meta.js';
+import { createLogger } from '../diagnostics/logger.js';
+const cronLogger = createLogger('cron');
+const DAY = 24 * 60 * 60 * 1000;
+const DEFAULT_CLEANUP = {
+    sessionRetentionMs: 7 * DAY,
+    auditLogRetentionMs: 90 * DAY,
+    trashRetentionMs: 30 * DAY,
+    passwordResetRetentionMs: 1 * DAY,
+    formSubmissionRetentionMs: 0,
+    versionRetentionMs: 90 * DAY,
+    webhookDeliveryRetentionMs: 30 * DAY,
+    apiRequestMetricRetentionMs: 30 * DAY,
+};
+function modelExists(db, name) {
+    if (db == null || typeof db !== 'object' || !(name in db))
+        return false;
+    // Deliberate dynamic access: this guard exists to probe consumer schemas
+    // that may not include every model cms-core knows about.
+    const delegate = db[name];
+    // `typeof null === 'object'` in JavaScript, so we have to check `!== null`
+    // explicitly. Without this guard, `{ session: null }` would pass the check
+    // and `db.session.deleteMany(...)` would throw a TypeError that the outer
+    // try/catch only papers over.
+    return delegate !== null && typeof delegate === 'object';
+}
+/**
+ * Delete stale rows from session, audit log, trash, and password-reset tables.
+ *
+ * Each deletion is wrapped in its own try/catch so a missing model (e.g. an
+ * older Prisma schema without `passwordResetToken`) doesn't fail the entire
+ * job — partial cleanup is still useful and the caller logs the count.
+ */
+export async function processCleanup(db, options = {}) {
+    const opts = { ...DEFAULT_CLEANUP, ...options };
+    const now = Date.now();
+    const result = {
+        sessionsDeleted: 0,
+        auditLogsDeleted: 0,
+        documentsDeleted: 0,
+        passwordResetTokensDeleted: 0,
+        formSubmissionsDeleted: 0,
+        versionsDeleted: 0,
+        webhookDeliveriesDeleted: 0,
+        apiRequestMetricsDeleted: 0,
+    };
+    if (modelExists(db, 'session')) {
+        try {
+            const cutoff = new Date(now - opts.sessionRetentionMs);
+            const r = await db.session.deleteMany({
+                where: {
+                    OR: [{ revokedAt: { lt: cutoff } }, { expiresAt: { lt: cutoff } }],
+                },
+            });
+            result.sessionsDeleted = r?.count ?? 0;
+        }
+        catch (err) {
+            cronLogger.warn('session cleanup failed', { error: errMsg(err) });
+        }
+    }
+    if (modelExists(db, 'auditLog')) {
+        try {
+            const cutoff = new Date(now - opts.auditLogRetentionMs);
+            const r = await db.auditLog.deleteMany({ where: { timestamp: { lt: cutoff } } });
+            result.auditLogsDeleted = r?.count ?? 0;
+        }
+        catch (err) {
+            cronLogger.warn('audit log cleanup failed', { error: errMsg(err) });
+        }
+    }
+    if (modelExists(db, 'document')) {
+        try {
+            const cutoff = new Date(now - opts.trashRetentionMs);
+            const r = await db.document.deleteMany({ where: { deletedAt: { lt: cutoff } } });
+            result.documentsDeleted = r?.count ?? 0;
+        }
+        catch (err) {
+            cronLogger.warn('trash cleanup failed', { error: errMsg(err) });
+        }
+    }
+    if (modelExists(db, 'passwordResetToken')) {
+        try {
+            const cutoff = new Date(now - opts.passwordResetRetentionMs);
+            const r = await db.passwordResetToken.deleteMany({
+                where: {
+                    OR: [{ usedAt: { lt: cutoff } }, { expiresAt: { lt: cutoff } }],
+                },
+            });
+            result.passwordResetTokensDeleted = r?.count ?? 0;
+        }
+        catch (err) {
+            cronLogger.warn('password reset token cleanup failed', { error: errMsg(err) });
+        }
+    }
+    // PII retention: hard-delete old form submissions when configured. Cascades
+    // to `FormSubmissionFile` rows (onDelete: Cascade). Disabled when the
+    // retention window is 0 so a misconfigured/default install never purges data.
+    if (opts.formSubmissionRetentionMs > 0 && modelExists(db, 'formSubmission')) {
+        try {
+            const cutoff = new Date(now - opts.formSubmissionRetentionMs);
+            const r = await db.formSubmission.deleteMany({ where: { submittedAt: { lt: cutoff } } });
+            result.formSubmissionsDeleted = r?.count ?? 0;
+        }
+        catch (err) {
+            cronLogger.warn('form submission retention failed', { error: errMsg(err) });
+        }
+    }
+    if (opts.versionRetentionMs > 0 && modelExists(db, 'version')) {
+        try {
+            const cutoff = new Date(now - opts.versionRetentionMs);
+            const r = await db.version.deleteMany({ where: { createdAt: { lt: cutoff } } });
+            result.versionsDeleted = r?.count ?? 0;
+        }
+        catch (err) {
+            cronLogger.warn('version retention failed', { error: errMsg(err) });
+        }
+    }
+    if (opts.webhookDeliveryRetentionMs > 0 && modelExists(db, 'webhookDeliveryLog')) {
+        try {
+            const cutoff = new Date(now - opts.webhookDeliveryRetentionMs);
+            const r = await db.webhookDeliveryLog.deleteMany({ where: { createdAt: { lt: cutoff } } });
+            result.webhookDeliveriesDeleted = r?.count ?? 0;
+        }
+        catch (err) {
+            cronLogger.warn('webhook delivery log retention failed', { error: errMsg(err) });
+        }
+    }
+    if (opts.apiRequestMetricRetentionMs > 0 && modelExists(db, 'apiRequestMetric')) {
+        try {
+            const cutoff = new Date(now - opts.apiRequestMetricRetentionMs);
+            const r = await db.apiRequestMetric.deleteMany({ where: { bucketStart: { lt: cutoff } } });
+            result.apiRequestMetricsDeleted = r?.count ?? 0;
+        }
+        catch (err) {
+            cronLogger.warn('API request metric retention failed', { error: errMsg(err) });
+        }
+    }
+    return result;
+}
+/**
+ * Run the same SEO checks as `POST /seo/scan`, but headlessly so a cron
+ * (or a CLI / external scheduler) can invoke it without an admin session.
+ *
+ * Bounded by `maxDocuments` to avoid OOM / timeout on large catalogs —
+ * defaults to 5000, which is well above the typical Vercel function memory
+ * envelope while staying safely under the 60s cron execution limit.
+ */
+export async function processSeoScan(db, options = {}) {
+    const maxDocuments = options.maxDocuments ?? 5000;
+    if (!modelExists(db, 'document')) {
+        return { total: 0, pagesWithIssues: 0, totalProblems: 0, issues: [] };
+    }
+    // Scope to front-end content collections when the caller provides them, so the
+    // scan never flags structural (navigation/footer) or benchmark documents.
+    const where = { status: 'PUBLISHED', deletedAt: null };
+    if (options.allowedCollections) {
+        if (options.allowedCollections.length === 0) {
+            return { total: 0, pagesWithIssues: 0, totalProblems: 0, issues: [] };
+        }
+        where.collection = { in: options.allowedCollections };
+    }
+    const documents = await db.document.findMany({
+        where,
+        select: {
+            id: true,
+            title: true,
+            slug: true,
+            collection: true,
+            data: true,
+            plainText: true,
+            publishedAt: true,
+        },
+        take: maxDocuments,
+    });
+    const seoOverrides = await getSeoOverrides(db).catch(() => null);
+    const mergedConfig = applySeoOverrides(getPrentaConfig(), seoOverrides);
+    const siteSeo = mergedConfig?.seo;
+    const issues = [];
+    for (const doc of documents) {
+        const data = (doc.data ?? {});
+        const problems = [];
+        const collectionDef = mergedConfig?.collections?.[doc.collection];
+        const effective = resolveEffectiveMeta({
+            data,
+            docTitle: doc.title,
+            publishedAt: doc.publishedAt,
+            collection: collectionDef,
+            collectionSlug: doc.collection,
+            site: siteSeo,
+            siteUrl: siteSeo?.siteUrl,
+        });
+        if (!effective.metaTitle)
+            problems.push('Missing meta title');
+        if (!effective.metaDescription)
+            problems.push('Missing meta description');
+        const plainText = (doc.plainText ?? '');
+        if (plainText.length > 0 && plainText.length < 300) {
+            problems.push('Content is too short (< 300 characters)');
+        }
+        const content = typeof data.body === 'string'
+            ? data.body
+            : typeof data.content === 'string'
+                ? data.content
+                : '';
+        if (content) {
+            const imgMatches = content.match(/<img\b[^>]*>/gi) ?? [];
+            // Case-insensitive: `<IMG ALT="text">` is valid HTML and should not be
+            // flagged as missing. Tests the literal attribute name with `\balt\s*=`
+            // to avoid matching unrelated tokens that happen to contain `alt=`.
+            const missingAlt = imgMatches.filter((img) => !/\balt\s*=/i.test(img)).length;
+            if (missingAlt > 0)
+                problems.push(`${missingAlt} image(s) missing alt text`);
+            // Case-insensitive to match the HTML spec — `<H1>`, `<h1>`, `<h1 class="...">`
+            // and `<h1\n>` all count.
+            if (!/<h1\b/i.test(content)) {
+                problems.push('No H1 heading found in content');
+            }
+        }
+        if (problems.length > 0) {
+            issues.push({
+                documentId: doc.id,
+                title: doc.title ?? 'Untitled',
+                slug: doc.slug ?? '',
+                problems,
+            });
+        }
+    }
+    return {
+        total: documents.length,
+        pagesWithIssues: issues.length,
+        totalProblems: issues.reduce((sum, i) => sum + i.problems.length, 0),
+        issues,
+    };
+}
+/** Re-export for convenience so the route handler can import everything from one module. */
+export { schedulingCronHandler };
+/**
+ * Validate a Vercel-style cron Authorization header against `CRON_SECRET`.
+ *
+ * Returns `false` if the env var is missing — that's deliberately fail-closed
+ * so a misconfigured deploy can't silently expose cron endpoints to the public
+ * internet. Comparison is constant-time to defeat byte-by-byte timing attacks.
+ */
+export function isAuthorizedCronRequest(authHeader) {
+    const secret = process.env.CRON_SECRET;
+    if (!secret || secret.length === 0)
+        return false;
+    if (!authHeader)
+        return false;
+    // Vercel sends `Authorization: Bearer <CRON_SECRET>`. Some self-hosted
+    // schedulers send the bare value; accept both.
+    const trimmed = authHeader.startsWith('Bearer ') ? authHeader.slice(7) : authHeader;
+    return constantTimeEqual(trimmed, secret);
+}
+/**
+ * Per-process random HMAC key. Using a per-process key (not a fixed string)
+ * means an attacker can't precompute HMACs offline to compare against — the
+ * comparison is between two HMACs they cannot directly observe.
+ */
+const HMAC_COMPARE_KEY = randomBytes(32);
+/**
+ * Compare two strings in constant time, including across length differences.
+ *
+ * The naive approach — early-return on length mismatch then per-character
+ * XOR — leaks the secret length: an attacker can probe `Authorization`
+ * header values of varying lengths and time the response to learn how many
+ * bytes `CRON_SECRET` actually has, reducing the brute-force search space.
+ *
+ * Instead, HMAC-SHA256 both inputs (yielding fixed 32-byte digests
+ * regardless of input length) and compare those with `timingSafeEqual`.
+ * `timingSafeEqual` requires equal-length buffers, which the HMAC step
+ * guarantees, and it's the only constant-time comparison primitive in
+ * `node:crypto` that's safe across all V8 optimisations.
+ */
+function constantTimeEqual(a, b) {
+    const hmacA = createHmac('sha256', HMAC_COMPARE_KEY).update(a).digest();
+    const hmacB = createHmac('sha256', HMAC_COMPARE_KEY).update(b).digest();
+    return timingSafeEqual(hmacA, hmacB);
+}
+function errMsg(err) {
+    return err instanceof Error ? err.message : String(err);
+}
+//# sourceMappingURL=index.js.map

package/dist/cron/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/cron/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,aAAa,CAAA;AACtE,OAAO,EAAE,qBAAqB,EAAE,MAAM,wBAAwB,CAAA;AAE9D,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAA;AACtD,OAAO,EAAE,iBAAiB,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAA;AAC3E,OAAO,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAA;AAC1D,OAAO,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAA;AAEvD,MAAM,UAAU,GAAG,YAAY,CAAC,MAAM,CAAC,CAAA;AA2BvC,MAAM,GAAG,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAA;AAE/B,MAAM,eAAe,GAA6B;IAChD,kBAAkB,EAAE,CAAC,GAAG,GAAG;IAC3B,mBAAmB,EAAE,EAAE,GAAG,GAAG;IAC7B,gBAAgB,EAAE,EAAE,GAAG,GAAG;IAC1B,wBAAwB,EAAE,CAAC,GAAG,GAAG;IACjC,yBAAyB,EAAE,CAAC;IAC5B,kBAAkB,EAAE,EAAE,GAAG,GAAG;IAC5B,0BAA0B,EAAE,EAAE,GAAG,GAAG;IACpC,2BAA2B,EAAE,EAAE,GAAG,GAAG;CACtC,CAAA;AAaD,SAAS,WAAW,CAAC,EAAY,EAAE,IAAY;IAC7C,IAAI,EAAE,IAAI,IAAI,IAAI,OAAO,EAAE,KAAK,QAAQ,IAAI,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC;QAAE,OAAO,KAAK,CAAA;IACvE,yEAAyE;IACzE,yDAAyD;IACzD,MAAM,QAAQ,GAAI,EAAyC,CAAC,IAAI,CAAC,CAAA;IACjE,2EAA2E;IAC3E,2EAA2E;IAC3E,0EAA0E;IAC1E,8BAA8B;IAC9B,OAAO,QAAQ,KAAK,IAAI,IAAI,OAAO,QAAQ,KAAK,QAAQ,CAAA;AAC1D,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,EAAY,EACZ,UAA0B,EAAE;IAE5B,MAAM,IAAI,GAAG,EAAE,GAAG,eAAe,EAAE,GAAG,OAAO,EAAE,CAAA;IAC/C,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;IAEtB,MAAM,MAAM,GAAkB;QAC5B,eAAe,EAAE,CAAC;QAClB,gBAAgB,EAAE,CAAC;QACnB,gBAAgB,EAAE,CAAC;QACnB,0BAA0B,EAAE,CAAC;QAC7B,sBAAsB,EAAE,CAAC;QACzB,eAAe,EAAE,CAAC;QAClB,wBAAwB,EAAE,CAAC;QAC3B,wBAAwB,EAAE,CAAC;KAC5B,CAAA;IAED,IAAI,WAAW,CAAC,EAAE,EAAE,SAAS,CAAC,EAAE,CAAC;QAC/B,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,IAAI,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC,kBAAkB,CAAC,CAAA;YACtD,MAAM,CAAC,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,UAAU,CAAC;gBACpC,KAAK,EAAE;oBACL,EAAE,EAAE,CAAC,EAAE,SAAS,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,CAAC;iBACnE;aACF,CAAC,CAAA;YACF,MAAM,CAAC,eAAe,GAAG,CAAC,EAAE,KAAK,IAAI,CAAC,CAAA;QACxC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,UAAU,CAAC,IAAI,CAAC,wBAAwB,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;QACnE,CAAC;IACH,CAAC;IAED,IAAI,WAAW,CAAC,EAAE,EAAE,UAAU,CAAC,EAAE,CAAC;QAChC,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,IAAI,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC,mBAAmB,CAAC,CAAA;YACvD,MAAM,CAAC,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,KAAK,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,CAAA;YAChF,MAAM,CAAC,gBAAgB,GAAG,CAAC,EAAE,KAAK,IAAI,CAAC,CAAA;QACzC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,UAAU,CAAC,IAAI,CAAC,0BAA0B,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;QACrE,CAAC;IACH,CAAC;IAED,IAAI,WAAW,CAAC,EAAE,EAAE,UAAU,CAAC,EAAE,CAAC;QAChC,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,IAAI,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC,gBAAgB,CAAC,CAAA;YACpD,MAAM,CAAC,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,KAAK,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,CAAA;YAChF,MAAM,CAAC,gBAAgB,GAAG,CAAC,EAAE,KAAK,IAAI,CAAC,CAAA;QACzC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,UAAU,CAAC,IAAI,CAAC,sBAAsB,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;QACjE,CAAC;IACH,CAAC;IAED,IAAI,WAAW,CAAC,EAAE,EAAE,oBAAoB,CAAC,EAAE,CAAC;QAC1C,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,IAAI,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC,wBAAwB,CAAC,CAAA;YAC5D,MAAM,CAAC,GAAG,MAAM,EAAE,CAAC,kBAAkB,CAAC,UAAU,CAAC;gBAC/C,KAAK,EAAE;oBACL,EAAE,EAAE,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,CAAC;iBAChE;aACF,CAAC,CAAA;YACF,MAAM,CAAC,0BAA0B,GAAG,CAAC,EAAE,KAAK,IAAI,CAAC,CAAA;QACnD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,UAAU,CAAC,IAAI,CAAC,qCAAqC,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;QAChF,CAAC;IACH,CAAC;IAED,4EAA4E;IAC5E,sEAAsE;IACtE,8EAA8E;IAC9E,IAAI,IAAI,CAAC,yBAAyB,GAAG,CAAC,IAAI,WAAW,CAAC,EAAE,EAAE,gBAAgB,CAAC,EAAE,CAAC;QAC5E,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,IAAI,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC,yBAAyB,CAAC,CAAA;YAC7D,MAAM,CAAC,GAAG,MAAM,EAAE,CAAC,cAAc,CAAC,UAAU,CAAC,EAAE,KAAK,EAAE,EAAE,WAAW,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,CAAA;YACxF,MAAM,CAAC,sBAAsB,GAAG,CAAC,EAAE,KAAK,IAAI,CAAC,CAAA;QAC/C,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,UAAU,CAAC,IAAI,CAAC,kCAAkC,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;QAC7E,CAAC;IACH,CAAC;IAED,IAAI,IAAI,CAAC,kBAAkB,GAAG,CAAC,IAAI,WAAW,CAAC,EAAE,EAAE,SAAS,CAAC,EAAE,CAAC;QAC9D,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,IAAI,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC,kBAAkB,CAAC,CAAA;YACtD,MAAM,CAAC,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,KAAK,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,CAAA;YAC/E,MAAM,CAAC,eAAe,GAAG,CAAC,EAAE,KAAK,IAAI,CAAC,CAAA;QACxC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,UAAU,CAAC,IAAI,CAAC,0BAA0B,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;QACrE,CAAC;IACH,CAAC;IAED,IAAI,IAAI,CAAC,0BAA0B,GAAG,CAAC,IAAI,WAAW,CAAC,EAAE,EAAE,oBAAoB,CAAC,EAAE,CAAC;QACjF,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,IAAI,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC,0BAA0B,CAAC,CAAA;YAC9D,MAAM,CAAC,GAAG,MAAM,EAAE,CAAC,kBAAkB,CAAC,UAAU,CAAC,EAAE,KAAK,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,CAAA;YAC1F,MAAM,CAAC,wBAAwB,GAAG,CAAC,EAAE,KAAK,IAAI,CAAC,CAAA;QACjD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,UAAU,CAAC,IAAI,CAAC,uCAAuC,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;QAClF,CAAC;IACH,CAAC;IAED,IAAI,IAAI,CAAC,2BAA2B,GAAG,CAAC,IAAI,WAAW,CAAC,EAAE,EAAE,kBAAkB,CAAC,EAAE,CAAC;QAChF,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,IAAI,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC,2BAA2B,CAAC,CAAA;YAC/D,MAAM,CAAC,GAAG,MAAM,EAAE,CAAC,gBAAgB,CAAC,UAAU,CAAC,EAAE,KAAK,EAAE,EAAE,WAAW,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,CAAA;YAC1F,MAAM,CAAC,wBAAwB,GAAG,CAAC,EAAE,KAAK,IAAI,CAAC,CAAA;QACjD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,UAAU,CAAC,IAAI,CAAC,qCAAqC,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;QAChF,CAAC;IACH,CAAC;IAED,OAAO,MAAM,CAAA;AACf,CAAC;AAgBD;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,EAAY,EACZ,UAAoE,EAAE;IAEtE,MAAM,YAAY,GAAG,OAAO,CAAC,YAAY,IAAI,IAAI,CAAA;IAEjD,IAAI,CAAC,WAAW,CAAC,EAAE,EAAE,UAAU,CAAC,EAAE,CAAC;QACjC,OAAO,EAAE,KAAK,EAAE,CAAC,EAAE,eAAe,EAAE,CAAC,EAAE,aAAa,EAAE,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,CAAA;IACvE,CAAC;IAED,+EAA+E;IAC/E,0EAA0E;IAC1E,MAAM,KAAK,GAA4B,EAAE,MAAM,EAAE,WAAW,EAAE,SAAS,EAAE,IAAI,EAAE,CAAA;IAC/E,IAAI,OAAO,CAAC,kBAAkB,EAAE,CAAC;QAC/B,IAAI,OAAO,CAAC,kBAAkB,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC5C,OAAO,EAAE,KAAK,EAAE,CAAC,EAAE,eAAe,EAAE,CAAC,EAAE,aAAa,EAAE,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,CAAA;QACvE,CAAC;QACD,KAAK,CAAC,UAAU,GAAG,EAAE,EAAE,EAAE,OAAO,CAAC,kBAAkB,EAAE,CAAA;IACvD,CAAC;IAED,MAAM,SAAS,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC;QAC3C,KAAK;QACL,MAAM,EAAE;YACN,EAAE,EAAE,IAAI;YACR,KAAK,EAAE,IAAI;YACX,IAAI,EAAE,IAAI;YACV,UAAU,EAAE,IAAI;YAChB,IAAI,EAAE,IAAI;YACV,SAAS,EAAE,IAAI;YACf,WAAW,EAAE,IAAI;SAClB;QACD,IAAI,EAAE,YAAY;KACnB,CAAC,CAAA;IAEF,MAAM,YAAY,GAAG,MAAM,eAAe,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAA;IAChE,MAAM,YAAY,GAAG,iBAAiB,CAAC,eAAe,EAAE,EAAE,YAAY,CAAC,CAAA;IACvE,MAAM,OAAO,GAAG,YAAY,EAAE,GAAG,CAAA;IAEjC,MAAM,MAAM,GAAmB,EAAE,CAAA;IAEjC,KAAK,MAAM,GAAG,IAAI,SAAS,EAAE,CAAC;QAC5B,MAAM,IAAI,GAAG,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAA4B,CAAA;QACxD,MAAM,QAAQ,GAAa,EAAE,CAAA;QAE7B,MAAM,aAAa,GAAG,YAAY,EAAE,WAAW,EAAE,CAAC,GAAG,CAAC,UAAoB,CAAC,CAAA;QAC3E,MAAM,SAAS,GAAG,oBAAoB,CAAC;YACrC,IAAI;YACJ,QAAQ,EAAE,GAAG,CAAC,KAAK;YACnB,WAAW,EAAG,GAAqC,CAAC,WAAW;YAC/D,UAAU,EAAE,aAAa;YACzB,cAAc,EAAE,GAAG,CAAC,UAAoB;YACxC,IAAI,EAAE,OAAO;YACb,OAAO,EAAE,OAAO,EAAE,OAAO;SAC1B,CAAC,CAAA;QAEF,IAAI,CAAC,SAAS,CAAC,SAAS;YAAE,QAAQ,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAA;QAC7D,IAAI,CAAC,SAAS,CAAC,eAAe;YAAE,QAAQ,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAA;QAEzE,MAAM,SAAS,GAAG,CAAC,GAAG,CAAC,SAAS,IAAI,EAAE,CAAW,CAAA;QACjD,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,IAAI,SAAS,CAAC,MAAM,GAAG,GAAG,EAAE,CAAC;YACnD,QAAQ,CAAC,IAAI,CAAC,yCAAyC,CAAC,CAAA;QAC1D,CAAC;QAED,MAAM,OAAO,GACX,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ;YAC3B,CAAC,CAAC,IAAI,CAAC,IAAI;YACX,CAAC,CAAC,OAAO,IAAI,CAAC,OAAO,KAAK,QAAQ;gBAChC,CAAC,CAAC,IAAI,CAAC,OAAO;gBACd,CAAC,CAAC,EAAE,CAAA;QACV,IAAI,OAAO,EAAE,CAAC;YACZ,MAAM,UAAU,GAAG,OAAO,CAAC,KAAK,CAAC,gBAAgB,CAAC,IAAI,EAAE,CAAA;YACxD,uEAAuE;YACvE,wEAAwE;YACxE,oEAAoE;YACpE,MAAM,UAAU,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,GAAW,EAAE,EAAE,CAAC,CAAC,YAAY,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAA;YACrF,IAAI,UAAU,GAAG,CAAC;gBAAE,QAAQ,CAAC,IAAI,CAAC,GAAG,UAAU,4BAA4B,CAAC,CAAA;YAC5E,+EAA+E;YAC/E,0BAA0B;YAC1B,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;gBAC5B,QAAQ,CAAC,IAAI,CAAC,gCAAgC,CAAC,CAAA;YACjD,CAAC;QACH,CAAC;QAED,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACxB,MAAM,CAAC,IAAI,CAAC;gBACV,UAAU,EAAE,GAAG,CAAC,EAAE;gBAClB,KAAK,EAAE,GAAG,CAAC,KAAK,IAAI,UAAU;gBAC9B,IAAI,EAAE,GAAG,CAAC,IAAI,IAAI,EAAE;gBACpB,QAAQ;aACT,CAAC,CAAA;QACJ,CAAC;IACH,CAAC;IAED,OAAO;QACL,KAAK,EAAE,SAAS,CAAC,MAAM;QACvB,eAAe,EAAE,MAAM,CAAC,MAAM;QAC9B,aAAa,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,CAAC,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;QACpE,MAAM;KACP,CAAA;AACH,CAAC;AAED,4FAA4F;AAC5F,OAAO,EAAE,qBAAqB,EAAE,CAAA;AAEhC;;;;;;GAMG;AACH,MAAM,UAAU,uBAAuB,CAAC,UAAqC;IAC3E,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,WAAW,CAAA;IACtC,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,KAAK,CAAA;IAChD,IAAI,CAAC,UAAU;QAAE,OAAO,KAAK,CAAA;IAE7B,uEAAuE;IACvE,+CAA+C;IAC/C,MAAM,OAAO,GAAG,UAAU,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,CAAA;IACnF,OAAO,iBAAiB,CAAC,OAAO,EAAE,MAAM,CAAC,CAAA;AAC3C,CAAC;AAED;;;;GAIG;AACH,MAAM,gBAAgB,GAAG,WAAW,CAAC,EAAE,CAAC,CAAA;AAExC;;;;;;;;;;;;;GAaG;AACH,SAAS,iBAAiB,CAAC,CAAS,EAAE,CAAS;IAC7C,MAAM,KAAK,GAAG,UAAU,CAAC,QAAQ,EAAE,gBAAgB,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,CAAA;IACvE,MAAM,KAAK,GAAG,UAAU,CAAC,QAAQ,EAAE,gBAAgB,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,CAAA;IACvE,OAAO,eAAe,CAAC,KAAK,EAAE,KAAK,CAAC,CAAA;AACtC,CAAC;AAED,SAAS,MAAM,CAAC,GAAY;IAC1B,OAAO,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAA;AACzD,CAAC"}

package/dist/db/adapters/mysql.d.ts

@@ -0,0 +1,5 @@
+export interface MySQLAdapterOptions {
+    url: string;
+}
+export declare function createMySQLAdapter(options: MySQLAdapterOptions): Promise<unknown>;
+//# sourceMappingURL=mysql.d.ts.map

package/dist/db/adapters/mysql.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mysql.d.ts","sourceRoot":"","sources":["../../../src/db/adapters/mysql.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,mBAAmB;IAClC,GAAG,EAAE,MAAM,CAAA;CACZ;AAED,wBAAsB,kBAAkB,CAAC,OAAO,EAAE,mBAAmB,GAAG,OAAO,CAAC,OAAO,CAAC,CA6BvF"}

package/dist/db/adapters/mysql.js

@@ -0,0 +1,26 @@
+export async function createMySQLAdapter(options) {
+    try {
+        // Optional peer deps resolved lazily at runtime only when MySQL is selected.
+        // The ignore comments stop webpack/Turbopack from statically resolving (and
+        // warning about) drivers a Postgres project never installs. Each `@ts-ignore`
+        // sits directly above the specifier line because, for a multi-line dynamic
+        // import, that is the line tsc reports the unresolved-module error on.
+        const { PrismaMySQL } = await import(
+        // @ts-ignore — optional dependency, installed by consumer
+        /* webpackIgnore: true */ /* turbopackIgnore: true */ '@prisma/adapter-mysql2');
+        const mysql2 = await import(
+        // @ts-ignore — optional dependency, installed by consumer
+        /* webpackIgnore: true */ /* turbopackIgnore: true */ 'mysql2/promise');
+        const { PrismaClient } = await import(
+        // @ts-ignore — generated at build time, resolved outside the bundle graph
+        /* webpackIgnore: true */ /* turbopackIgnore: true */ '../../generated/client.js');
+        const connection = await mysql2.createConnection(options.url);
+        const adapter = new PrismaMySQL(connection);
+        return new PrismaClient({ adapter });
+    }
+    catch {
+        throw new Error('MySQL support requires mysql2 and @prisma/adapter-mysql2. ' +
+            'Install them with: pnpm add mysql2 @prisma/adapter-mysql2');
+    }
+}
+//# sourceMappingURL=mysql.js.map

package/dist/db/adapters/mysql.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mysql.js","sourceRoot":"","sources":["../../../src/db/adapters/mysql.ts"],"names":[],"mappings":"AAIA,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,OAA4B;IACnE,IAAI,CAAC;QACH,6EAA6E;QAC7E,4EAA4E;QAC5E,8EAA8E;QAC9E,2EAA2E;QAC3E,uEAAuE;QACvE,MAAM,EAAE,WAAW,EAAE,GAAG,MAAM,MAAM;QAClC,0DAA0D;QAC1D,yBAAyB,CAAC,2BAA2B,CAAC,wBAAwB,CAC/E,CAAA;QACD,MAAM,MAAM,GAAG,MAAM,MAAM;QACzB,0DAA0D;QAC1D,yBAAyB,CAAC,2BAA2B,CAAC,gBAAgB,CACvE,CAAA;QACD,MAAM,EAAE,YAAY,EAAE,GAAG,MAAM,MAAM;QACnC,0EAA0E;QAC1E,yBAAyB,CAAC,2BAA2B,CAAC,2BAA2B,CAClF,CAAA;QAED,MAAM,UAAU,GAAG,MAAM,MAAM,CAAC,gBAAgB,CAAC,OAAO,CAAC,GAAG,CAAC,CAAA;QAC7D,MAAM,OAAO,GAAG,IAAI,WAAW,CAAC,UAAU,CAAC,CAAA;QAC3C,OAAO,IAAI,YAAY,CAAC,EAAE,OAAO,EAAS,CAAC,CAAA;IAC7C,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CACb,4DAA4D;YAC1D,2DAA2D,CAC9D,CAAA;IACH,CAAC;AACH,CAAC"}

package/dist/db/adapters/postgres.d.ts

@@ -0,0 +1,7 @@
+export interface PostgresAdapterOptions {
+    url: string;
+    directUrl?: string;
+    poolSize?: number;
+}
+export declare function createPostgresAdapter(options: PostgresAdapterOptions): Promise<unknown>;
+//# sourceMappingURL=postgres.d.ts.map

package/dist/db/adapters/postgres.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"postgres.d.ts","sourceRoot":"","sources":["../../../src/db/adapters/postgres.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,sBAAsB;IACrC,GAAG,EAAE,MAAM,CAAA;IACX,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAA;CAClB;AAED,wBAAsB,qBAAqB,CAAC,OAAO,EAAE,sBAAsB,GAAG,OAAO,CAAC,OAAO,CAAC,CA2B7F"}

package/dist/db/adapters/postgres.js

@@ -0,0 +1,25 @@
+export async function createPostgresAdapter(options) {
+    try {
+        // @ts-ignore — pg types may not be available
+        const pg = await import('pg');
+        const { PrismaPg } = await import('@prisma/adapter-pg');
+        // Generated client lives outside the bundle graph (emitted at build time);
+        // ignore it so the bundler doesn't warn about an unresolved relative import.
+        // The `@ts-ignore` sits directly above the specifier line because, for a
+        // multi-line dynamic import, that is the line tsc reports the error on.
+        const { PrismaClient } = await import(
+        // @ts-ignore — generated at build time, resolved outside the bundle graph
+        /* webpackIgnore: true */ /* turbopackIgnore: true */ '../../generated/client.js');
+        const pool = new pg.default.Pool({
+            connectionString: options.url,
+            max: options.poolSize ?? 10,
+        });
+        const adapter = new PrismaPg(pool);
+        return new PrismaClient({ adapter });
+    }
+    catch {
+        throw new Error('PostgreSQL support requires pg and @prisma/adapter-pg. ' +
+            'Install them with: pnpm add pg @prisma/adapter-pg');
+    }
+}
+//# sourceMappingURL=postgres.js.map

package/dist/db/adapters/postgres.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"postgres.js","sourceRoot":"","sources":["../../../src/db/adapters/postgres.ts"],"names":[],"mappings":"AAMA,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,OAA+B;IACzE,IAAI,CAAC;QACH,6CAA6C;QAC7C,MAAM,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,CAAA;QAC7B,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,MAAM,CAAC,oBAAoB,CAAC,CAAA;QACvD,2EAA2E;QAC3E,6EAA6E;QAC7E,yEAAyE;QACzE,wEAAwE;QACxE,MAAM,EAAE,YAAY,EAAE,GAAG,MAAM,MAAM;QACnC,0EAA0E;QAC1E,yBAAyB,CAAC,2BAA2B,CAAC,2BAA2B,CAClF,CAAA;QAED,MAAM,IAAI,GAAG,IAAI,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;YAC/B,gBAAgB,EAAE,OAAO,CAAC,GAAG;YAC7B,GAAG,EAAE,OAAO,CAAC,QAAQ,IAAI,EAAE;SAC5B,CAAC,CAAA;QAEF,MAAM,OAAO,GAAG,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAA;QAClC,OAAO,IAAI,YAAY,CAAC,EAAE,OAAO,EAAS,CAAC,CAAA;IAC7C,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CACb,yDAAyD;YACvD,mDAAmD,CACtD,CAAA;IACH,CAAC;AACH,CAAC"}

package/dist/db/adapters/sqlite.d.ts

@@ -0,0 +1,5 @@
+export interface SQLiteAdapterOptions {
+    filename?: string;
+}
+export declare function createSQLiteAdapter(options?: SQLiteAdapterOptions): Promise<unknown>;
+//# sourceMappingURL=sqlite.d.ts.map

package/dist/db/adapters/sqlite.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sqlite.d.ts","sourceRoot":"","sources":["../../../src/db/adapters/sqlite.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,EAAE,MAAM,CAAA;CAClB;AAED,wBAAsB,mBAAmB,CAAC,OAAO,GAAE,oBAAyB,GAAG,OAAO,CAAC,OAAO,CAAC,CA+B9F"}

package/dist/db/adapters/sqlite.js

@@ -0,0 +1,27 @@
+export async function createSQLiteAdapter(options = {}) {
+    const filename = options.filename ?? ':memory:';
+    try {
+        // Optional peer deps resolved lazily at runtime only when SQLite is selected.
+        // The ignore comments stop webpack/Turbopack from statically resolving (and
+        // warning about) drivers a Postgres project never installs. Each `@ts-ignore`
+        // sits directly above the specifier line because, for a multi-line dynamic
+        // import, that is the line tsc reports the unresolved-module error on.
+        const { PrismaLibSQL } = await import(
+        // @ts-ignore — optional dependency, installed by consumer
+        /* webpackIgnore: true */ /* turbopackIgnore: true */ '@prisma/adapter-libsql');
+        const { createClient } = await import(
+        // @ts-ignore — optional dependency, installed by consumer
+        /* webpackIgnore: true */ /* turbopackIgnore: true */ '@libsql/client');
+        const { PrismaClient } = await import(
+        // @ts-ignore — generated at build time, resolved outside the bundle graph
+        /* webpackIgnore: true */ /* turbopackIgnore: true */ '../../generated/client.js');
+        const client = createClient({ url: `file:${filename}` });
+        const adapter = new PrismaLibSQL(client);
+        return new PrismaClient({ adapter });
+    }
+    catch {
+        throw new Error('SQLite support requires @libsql/client and @prisma/adapter-libsql. ' +
+            'Install them with: pnpm add @libsql/client @prisma/adapter-libsql');
+    }
+}
+//# sourceMappingURL=sqlite.js.map

package/dist/db/adapters/sqlite.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sqlite.js","sourceRoot":"","sources":["../../../src/db/adapters/sqlite.ts"],"names":[],"mappings":"AAIA,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,UAAgC,EAAE;IAC1E,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,UAAU,CAAA;IAE/C,IAAI,CAAC;QACH,8EAA8E;QAC9E,4EAA4E;QAC5E,8EAA8E;QAC9E,2EAA2E;QAC3E,uEAAuE;QACvE,MAAM,EAAE,YAAY,EAAE,GAAG,MAAM,MAAM;QACnC,0DAA0D;QAC1D,yBAAyB,CAAC,2BAA2B,CAAC,wBAAwB,CAC/E,CAAA;QACD,MAAM,EAAE,YAAY,EAAE,GAAG,MAAM,MAAM;QACnC,0DAA0D;QAC1D,yBAAyB,CAAC,2BAA2B,CAAC,gBAAgB,CACvE,CAAA;QACD,MAAM,EAAE,YAAY,EAAE,GAAG,MAAM,MAAM;QACnC,0EAA0E;QAC1E,yBAAyB,CAAC,2BAA2B,CAAC,2BAA2B,CAClF,CAAA;QAED,MAAM,MAAM,GAAG,YAAY,CAAC,EAAE,GAAG,EAAE,QAAQ,QAAQ,EAAE,EAAE,CAAC,CAAA;QACxD,MAAM,OAAO,GAAG,IAAI,YAAY,CAAC,MAAM,CAAC,CAAA;QACxC,OAAO,IAAI,YAAY,CAAC,EAAE,OAAO,EAAS,CAAC,CAAA;IAC7C,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CACb,qEAAqE;YACnE,mEAAmE,CACtE,CAAA;IACH,CAAC;AACH,CAAC"}

package/dist/db/client-types.d.ts

@@ -0,0 +1,75 @@
+/**
+ * Structural Prisma client surface for the models cms-core ships.
+ *
+ * cms-core never imports a generated PrismaClient — consumers generate their
+ * own client (from a schema that is a superset of cms-core's) and hand it to
+ * `initDB()`. These types describe the subset of that client cms-core relies
+ * on, so internal code gets real model/delegate checking without coupling the
+ * package build to `prisma generate`.
+ *
+ * Two deliberate design points:
+ *
+ * 1. Query ARGUMENTS stay loose (`QueryArgs`). Reproducing Prisma's generic
+ *    where/select/include inference by hand is not maintainable; the win we
+ *    are buying is typed delegate names, method names, and row shapes.
+ * 2. Everything here must stay NARROWER than the real generated client. The
+ *    e2e suite generates the actual client from the canonical schema and
+ *    asserts `PrismaClient` is assignable to `PrentaDB`, so any drift
+ *    (renamed model, wrong delegate name, bogus row field) fails CI.
+ */
+import type { PrentaModelMap } from './model-types.js';
+/**
+ * Prisma query arguments (where/select/include/orderBy/...).
+ *
+ * Deliberately `any`: the real generated delegates take strictly-typed,
+ * generic argument interfaces, and TypeScript checks parameters
+ * contravariantly — any narrower type here would make the real PrismaClient
+ * NOT assignable to `PrentaDB` and break the e2e assignability guard. The
+ * type-safety this surface buys is delegate names, method names, and row
+ * result shapes, not argument shapes.
+ */
+export type QueryArgs = any;
+/** The per-model CRUD surface cms-core uses. Methods (not function properties)
+ * so parameter bivariance lets the strictly-generic real client satisfy it. */
+export interface ModelDelegate<Row> {
+    findMany(args?: QueryArgs): Promise<Row[]>;
+    findFirst(args?: QueryArgs): Promise<Row | null>;
+    findUnique(args: QueryArgs): Promise<Row | null>;
+    findFirstOrThrow(args?: QueryArgs): Promise<Row>;
+    findUniqueOrThrow(args: QueryArgs): Promise<Row>;
+    create(args: QueryArgs): Promise<Row>;
+    createMany(args: QueryArgs): Promise<{
+        count: number;
+    }>;
+    update(args: QueryArgs): Promise<Row>;
+    updateMany(args: QueryArgs): Promise<{
+        count: number;
+    }>;
+    upsert(args: QueryArgs): Promise<Row>;
+    delete(args: QueryArgs): Promise<Row>;
+    deleteMany(args?: QueryArgs): Promise<{
+        count: number;
+    }>;
+    count(args?: QueryArgs): Promise<number>;
+    aggregate(args: QueryArgs): Promise<any>;
+    groupBy(args: QueryArgs): Promise<any[]>;
+}
+/** Client-level methods cms-core uses ($transaction, raw SQL, lifecycle). */
+export interface ClientMethods {
+    $transaction(arg: any, options?: any): Promise<any>;
+    $queryRaw(...args: any[]): Promise<any>;
+    $queryRawUnsafe(query: string, ...params: any[]): Promise<any>;
+    $executeRaw(...args: any[]): Promise<number>;
+    $executeRawUnsafe(query: string, ...params: any[]): Promise<number>;
+    $connect(): Promise<void>;
+    $disconnect(): Promise<void>;
+}
+/**
+ * The structural database client cms-core codes against: one typed delegate
+ * per shipped model plus the client-level `$` methods. Any consumer-generated
+ * PrismaClient whose schema includes cms-core's models satisfies this type.
+ */
+export type PrentaDB = {
+    [K in keyof PrentaModelMap]: ModelDelegate<PrentaModelMap[K]>;
+} & ClientMethods;
+//# sourceMappingURL=client-types.d.ts.map

package/dist/db/client-types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"client-types.d.ts","sourceRoot":"","sources":["../../src/db/client-types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AACH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAA;AAMtD;;;;;;;;;GASG;AAEH,MAAM,MAAM,SAAS,GAAG,GAAG,CAAA;AAE3B;+EAC+E;AAC/E,MAAM,WAAW,aAAa,CAAC,GAAG;IAChC,QAAQ,CAAC,IAAI,CAAC,EAAE,SAAS,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC,CAAA;IAC1C,SAAS,CAAC,IAAI,CAAC,EAAE,SAAS,GAAG,OAAO,CAAC,GAAG,GAAG,IAAI,CAAC,CAAA;IAChD,UAAU,CAAC,IAAI,EAAE,SAAS,GAAG,OAAO,CAAC,GAAG,GAAG,IAAI,CAAC,CAAA;IAChD,gBAAgB,CAAC,IAAI,CAAC,EAAE,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,CAAA;IAChD,iBAAiB,CAAC,IAAI,EAAE,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,CAAA;IAChD,MAAM,CAAC,IAAI,EAAE,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,CAAA;IACrC,UAAU,CAAC,IAAI,EAAE,SAAS,GAAG,OAAO,CAAC;QAAE,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;IACvD,MAAM,CAAC,IAAI,EAAE,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,CAAA;IACrC,UAAU,CAAC,IAAI,EAAE,SAAS,GAAG,OAAO,CAAC;QAAE,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;IACvD,MAAM,CAAC,IAAI,EAAE,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,CAAA;IACrC,MAAM,CAAC,IAAI,EAAE,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,CAAA;IACrC,UAAU,CAAC,IAAI,CAAC,EAAE,SAAS,GAAG,OAAO,CAAC;QAAE,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;IACxD,KAAK,CAAC,IAAI,CAAC,EAAE,SAAS,GAAG,OAAO,CAAC,MAAM,CAAC,CAAA;IACxC,SAAS,CAAC,IAAI,EAAE,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,CAAA;IACxC,OAAO,CAAC,IAAI,EAAE,SAAS,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC,CAAA;CACzC;AAED,6EAA6E;AAC7E,MAAM,WAAW,aAAa;IAC5B,YAAY,CAAC,GAAG,EAAE,GAAG,EAAE,OAAO,CAAC,EAAE,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,CAAA;IACnD,SAAS,CAAC,GAAG,IAAI,EAAE,GAAG,EAAE,GAAG,OAAO,CAAC,GAAG,CAAC,CAAA;IACvC,eAAe,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,MAAM,EAAE,GAAG,EAAE,GAAG,OAAO,CAAC,GAAG,CAAC,CAAA;IAC9D,WAAW,CAAC,GAAG,IAAI,EAAE,GAAG,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC,CAAA;IAC5C,iBAAiB,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,MAAM,EAAE,GAAG,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC,CAAA;IACnE,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC,CAAA;IACzB,WAAW,IAAI,OAAO,CAAC,IAAI,CAAC,CAAA;CAC7B;AAED;;;;GAIG;AACH,MAAM,MAAM,QAAQ,GAAG;KACpB,CAAC,IAAI,MAAM,cAAc,GAAG,aAAa,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC;CAC9D,GAAG,aAAa,CAAA"}

package/dist/db/client-types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=client-types.js.map

package/dist/db/client-types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"client-types.js","sourceRoot":"","sources":["../../src/db/client-types.ts"],"names":[],"mappings":""}

package/dist/db/create-adapter.d.ts

@@ -0,0 +1,11 @@
+export type DatabaseProvider = 'postgresql' | 'sqlite' | 'mysql';
+export interface DatabaseConfig {
+    provider: DatabaseProvider;
+    url: string;
+    directUrl?: string;
+    poolSize?: number;
+}
+export declare function detectProvider(url: string): DatabaseProvider;
+export declare function createDatabaseClient(config: DatabaseConfig): Promise<unknown>;
+export declare function createDatabaseClientFromEnv(): Promise<unknown>;
+//# sourceMappingURL=create-adapter.d.ts.map

package/dist/db/create-adapter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"create-adapter.d.ts","sourceRoot":"","sources":["../../src/db/create-adapter.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,gBAAgB,GAAG,YAAY,GAAG,QAAQ,GAAG,OAAO,CAAA;AAEhE,MAAM,WAAW,cAAc;IAC7B,QAAQ,EAAE,gBAAgB,CAAA;IAC1B,GAAG,EAAE,MAAM,CAAA;IACX,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAA;CAClB;AAED,wBAAgB,cAAc,CAAC,GAAG,EAAE,MAAM,GAAG,gBAAgB,CAI5D;AAED,wBAAsB,oBAAoB,CAAC,MAAM,EAAE,cAAc,GAAG,OAAO,CAAC,OAAO,CAAC,CAuBnF;AAED,wBAAsB,2BAA2B,IAAI,OAAO,CAAC,OAAO,CAAC,CAUpE"}

package/dist/db/create-adapter.js

@@ -0,0 +1,43 @@
+export function detectProvider(url) {
+    if (url.startsWith('file:') || url.startsWith('sqlite:') || url === ':memory:')
+        return 'sqlite';
+    if (url.startsWith('mysql://'))
+        return 'mysql';
+    return 'postgresql';
+}
+export async function createDatabaseClient(config) {
+    switch (config.provider) {
+        case 'postgresql': {
+            const { createPostgresAdapter } = await import('./adapters/postgres.js');
+            return createPostgresAdapter({
+                url: config.url,
+                directUrl: config.directUrl,
+                poolSize: config.poolSize,
+            });
+        }
+        case 'sqlite': {
+            const { createSQLiteAdapter } = await import('./adapters/sqlite.js');
+            return createSQLiteAdapter({
+                filename: config.url.replace(/^file:|^sqlite:/i, ''),
+            });
+        }
+        case 'mysql': {
+            const { createMySQLAdapter } = await import('./adapters/mysql.js');
+            return createMySQLAdapter({ url: config.url });
+        }
+        default:
+            throw new Error(`Unsupported database provider: ${config.provider}`);
+    }
+}
+export async function createDatabaseClientFromEnv() {
+    const url = process.env.DATABASE_URL;
+    if (!url)
+        throw new Error('DATABASE_URL environment variable is required');
+    const provider = detectProvider(url);
+    return createDatabaseClient({
+        provider,
+        url,
+        directUrl: process.env.DIRECT_DATABASE_URL,
+    });
+}
+//# sourceMappingURL=create-adapter.js.map

package/dist/db/create-adapter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"create-adapter.js","sourceRoot":"","sources":["../../src/db/create-adapter.ts"],"names":[],"mappings":"AASA,MAAM,UAAU,cAAc,CAAC,GAAW;IACxC,IAAI,GAAG,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,GAAG,CAAC,UAAU,CAAC,SAAS,CAAC,IAAI,GAAG,KAAK,UAAU;QAAE,OAAO,QAAQ,CAAA;IAC/F,IAAI,GAAG,CAAC,UAAU,CAAC,UAAU,CAAC;QAAE,OAAO,OAAO,CAAA;IAC9C,OAAO,YAAY,CAAA;AACrB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,MAAsB;IAC/D,QAAQ,MAAM,CAAC,QAAQ,EAAE,CAAC;QACxB,KAAK,YAAY,CAAC,CAAC,CAAC;YAClB,MAAM,EAAE,qBAAqB,EAAE,GAAG,MAAM,MAAM,CAAC,wBAAwB,CAAC,CAAA;YACxE,OAAO,qBAAqB,CAAC;gBAC3B,GAAG,EAAE,MAAM,CAAC,GAAG;gBACf,SAAS,EAAE,MAAM,CAAC,SAAS;gBAC3B,QAAQ,EAAE,MAAM,CAAC,QAAQ;aAC1B,CAAC,CAAA;QACJ,CAAC;QACD,KAAK,QAAQ,CAAC,CAAC,CAAC;YACd,MAAM,EAAE,mBAAmB,EAAE,GAAG,MAAM,MAAM,CAAC,sBAAsB,CAAC,CAAA;YACpE,OAAO,mBAAmB,CAAC;gBACzB,QAAQ,EAAE,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,kBAAkB,EAAE,EAAE,CAAC;aACrD,CAAC,CAAA;QACJ,CAAC;QACD,KAAK,OAAO,CAAC,CAAC,CAAC;YACb,MAAM,EAAE,kBAAkB,EAAE,GAAG,MAAM,MAAM,CAAC,qBAAqB,CAAC,CAAA;YAClE,OAAO,kBAAkB,CAAC,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE,CAAC,CAAA;QAChD,CAAC;QACD;YACE,MAAM,IAAI,KAAK,CAAC,kCAAkC,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAA;IACxE,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,2BAA2B;IAC/C,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,YAAY,CAAA;IACpC,IAAI,CAAC,GAAG;QAAE,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAA;IAE1E,MAAM,QAAQ,GAAG,cAAc,CAAC,GAAG,CAAC,CAAA;IACpC,OAAO,oBAAoB,CAAC;QAC1B,QAAQ;QACR,GAAG;QACH,SAAS,EAAE,OAAO,CAAC,GAAG,CAAC,mBAAmB;KAC3C,CAAC,CAAA;AACJ,CAAC"}

package/dist/db/find-in-batches.d.ts

@@ -0,0 +1,12 @@
+/**
+ * Load an entire table slice in fixed-size batches. Used on admin/cron paths
+ * that need a full snapshot (redirect planning, SEO issue upserts) without a
+ * single unbounded `findMany`.
+ */
+export declare function findInBatches<T extends {
+    id: string;
+}>(fetch: (args: {
+    take: number;
+    cursor?: string;
+}) => Promise<T[]>, batchSize?: number): Promise<T[]>;
+//# sourceMappingURL=find-in-batches.d.ts.map

package/dist/db/find-in-batches.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"find-in-batches.d.ts","sourceRoot":"","sources":["../../src/db/find-in-batches.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,wBAAsB,aAAa,CAAC,CAAC,SAAS;IAAE,EAAE,EAAE,MAAM,CAAA;CAAE,EAC1D,KAAK,EAAE,CAAC,IAAI,EAAE;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,KAAK,OAAO,CAAC,CAAC,EAAE,CAAC,EAChE,SAAS,SAAM,GACd,OAAO,CAAC,CAAC,EAAE,CAAC,CAad"}

package/dist/db/find-in-batches.js

@@ -0,0 +1,20 @@
+/**
+ * Load an entire table slice in fixed-size batches. Used on admin/cron paths
+ * that need a full snapshot (redirect planning, SEO issue upserts) without a
+ * single unbounded `findMany`.
+ */
+export async function findInBatches(fetch, batchSize = 500) {
+    const out = [];
+    let cursor;
+    for (;;) {
+        const batch = await fetch({ take: batchSize, cursor });
+        if (batch.length === 0)
+            break;
+        out.push(...batch);
+        if (batch.length < batchSize)
+            break;
+        cursor = batch[batch.length - 1].id;
+    }
+    return out;
+}
+//# sourceMappingURL=find-in-batches.js.map