@sonicjs-cms/core 3.0.0-beta.25 → 3.0.0-beta.26

package/dist/{chunk-7P5OCUPS.js → chunk-OJFIQGZB.js}

@@ -1,18 +1,19 @@
-import { isFirstUserRegistration, isRegistrationEnabled, authValidationService } from './chunk-VVYVFCML.js';
 import { renderDocumentFormPage, renderAlert } from './chunk-E3TQG7AA.js';
-import { getCacheService, CACHE_CONFIGS, SettingsService, getLogger, getAppInstance, buildRouteList, CATEGORY_INFO } from './chunk-2XAQTPAE.js';
-import { DocumentTypeRegistry, requireAuth, requireRole, optionalAuth, isPluginActive, rateLimit, AuthManager, getJwtExpirySecondsFromDb, getJwtRefreshGraceSecondsFromDb, logActivity, generateCsrfToken } from './chunk-2OXFMMA3.js';
-import { DocumentsService, documentSecondsToMs, RbacService } from './chunk-BDQ55MWV.js';
+import { recordCatalogRequest, scheduleKvWrite } from './chunk-F6BTBE4S.js';
+import { isFirstUserRegistration, isRegistrationEnabled, authValidationService } from './chunk-VVYVFCML.js';
+import { getCacheService, CACHE_CONFIGS, SettingsService, getLogger, getAppInstance, buildRouteList, CATEGORY_INFO } from './chunk-6X22VFEV.js';
+import { DocumentTypeRegistry, requireAuth, requireRole, optionalAuth, rateLimit, AuthManager, getJwtExpirySecondsFromDb, getJwtRefreshGraceSecondsFromDb, logActivity, generateCsrfToken } from './chunk-EEA476CJ.js';
+import { DocumentsService, documentSecondsToMs, RbacService } from './chunk-RXLI3ADU.js';
 import { nanoid } from './chunk-UWUP2VMT.js';
-import { getCollectionRegistry, collectionRecordToRow, loadCollectionConfigs, getVisibleCollections, PluginService, PLUGIN_REGISTRY, findPluginByCodeName, isCodeCollectionInternal, isDbDocTypeInternal, invalidateTenantCache } from './chunk-2D3A4X52.js';
-import { MigrationService } from './chunk-D7RLBBHE.js';
+import { getCollectionRegistry, isPluginActive, collectionRecordToRow, loadCollectionConfigs, getVisibleCollections, PluginService, PLUGIN_REGISTRY, findPluginByCodeName, isCodeCollectionInternal, isDbDocTypeInternal, invalidateTenantCache } from './chunk-RVOX2WH2.js';
+import { MigrationService } from './chunk-5YSFQO7X.js';
 import { renderCheckboxPage, renderAlert as renderAlert$1, renderTable, renderPagination, renderConfirmationDialog, getConfirmationDialogScript, renderAdminLayout, adminLayoutV2, renderForm } from './chunk-HSDJDWLV.js';
 import { init_admin_layout_catalyst_template, renderAdminLayoutCatalyst } from './chunk-SXC4HPK6.js';
-import { createServiceSingleton, definePlugin, getPluginDefinition, applySchemaDefaults, renderSchemaFields, parseFormDataToSettings, getPluginMenu } from './chunk-C54MH5UI.js';
+import { createServiceSingleton, definePlugin, getPluginDefinition, applySchemaDefaults, renderSchemaFields, parseFormDataToSettings, getPluginMenu } from './chunk-JD7BZU3A.js';
 import { hasHookSystem, getTypedHooks } from './chunk-RNZFGN4R.js';
-import { QueryFilterBuilder, getBlocksFieldConfig, parseBlocksValue } from './chunk-FVAK4C6L.js';
+import { QueryFilterBuilder, getBlocksFieldConfig, parseBlocksValue } from './chunk-AMP4BSJE.js';
 import { metricsTracker } from './chunk-FICTAGD4.js';
-import { getCoreVersion } from './chunk-CWIGQYRR.js';
+import { getCoreVersion } from './chunk-UB5QSRO7.js';
 import { escapeHtml, sanitizeRichText, sanitizeInput } from './chunk-TQABQWOP.js';
 import { Hono } from 'hono';
 import { z } from 'zod';
@@ -843,6 +844,34 @@ async function dispatchHookEvent(c, event, payload, mode = "fire-and-forget") {
   return hooks.dispatch(event, payload);
 }
 
+// src/plugins/cache/services/swr.ts
+var STALE_TTL_MS = 3e4;
+var staleMap = /* @__PURE__ */ new Map();
+function markStale(cacheKey, data, collection) {
+  staleMap.set(cacheKey, {
+    data,
+    collection,
+    expiresAt: Date.now() + STALE_TTL_MS
+  });
+}
+function getAndConsumeStale(cacheKey) {
+  const entry = staleMap.get(cacheKey);
+  if (!entry) return null;
+  if (Date.now() > entry.expiresAt) {
+    staleMap.delete(cacheKey);
+    return null;
+  }
+  staleMap.delete(cacheKey);
+  return entry.data;
+}
+function swrStats() {
+  const now = Date.now();
+  for (const [key, entry] of staleMap.entries()) {
+    if (now > entry.expiresAt) staleMap.delete(key);
+  }
+  return { count: staleMap.size };
+}
+
 // src/plugins/core-plugins/global-variables-plugin/variable-resolver.ts
 var TOKEN_PATTERN = /\{([a-z0-9_]+)\}/g;
 function resolveVariables(text, variables) {
@@ -1340,7 +1369,8 @@ apiRoutes.use("*", async (c, next) => {
   c.header("X-Response-Time", `${totalTime}ms`);
 });
 apiRoutes.use("*", async (c, next) => {
-  const cacheEnabled = await isPluginActive(c.env.DB, "core-cache");
+  const bypass = c.req.header("Cache-Control") === "no-cache";
+  const cacheEnabled = !bypass && await isPluginActive(c.env.DB, "core-cache");
   c.set("cacheEnabled", cacheEnabled);
   await next();
 });
@@ -1871,7 +1901,7 @@ apiRoutes.get("/content", optionalAuth(), async (c) => {
         details: queryResult.errors
       }, 400);
     }
-    const cacheEnabled = c.get("cacheEnabled") && cAnon;
+    const cacheEnabled = c.get("cacheEnabled") && !cNeedsAcl;
     const cache = getCacheService(CACHE_CONFIGS.api);
     const cacheKey = cache.generateKey("content-filtered", JSON.stringify({ filter: normalizedFilter, query: queryResult.sql }));
     if (cacheEnabled) {
@@ -1893,8 +1923,20 @@ apiRoutes.get("/content", optionalAuth(), async (c) => {
             }
           }, executionStart)
         };
+        recordCatalogRequest({ cacheKey, collection: typeId ?? null, path: c.req.path, queryString: c.req.raw.url.split("?")[1] ?? "", source: cacheResult.source });
+        scheduleKvWrite(cacheKey, c.executionCtx);
         return c.json(dataWithMeta);
       }
+      const swrData = getAndConsumeStale(cacheKey);
+      if (swrData) {
+        c.header("X-Cache-Status", "STALE");
+        c.header("X-Cache-Source", "swr");
+        recordCatalogRequest({ cacheKey, collection: typeId ?? null, path: c.req.path, queryString: c.req.raw.url.split("?")[1] ?? "", source: "swr" });
+        scheduleKvWrite(cacheKey, c.executionCtx);
+        return c.json({ ...swrData, meta: addTimingMeta(c, { ...swrData.meta, cache: { hit: true, source: "swr", stale: true } }, executionStart) });
+      }
+      recordCatalogRequest({ cacheKey, collection: typeId ?? null, path: c.req.path, queryString: c.req.raw.url.split("?")[1] ?? "", source: "miss" });
+      scheduleKvWrite(cacheKey, c.executionCtx);
     }
     c.header("X-Cache-Status", "MISS");
     c.header("X-Cache-Source", "database");
@@ -1995,7 +2037,7 @@ apiRoutes.get("/collections/:collection/content", optionalAuth(), async (c) => {
         details: queryResult.errors
       }, 400);
     }
-    const cacheEnabled = c.get("cacheEnabled") && ccAnon;
+    const cacheEnabled = c.get("cacheEnabled") && !ccNeedsAcl;
     const cache = getCacheService(CACHE_CONFIGS.api);
     const includeCollection = queryParams.include?.split(",").map((s) => s.trim()).includes("collection");
     const cacheKey = cache.generateKey("collection-content-filtered", `${collection}:${JSON.stringify({ filter: normalizedFilter, query: queryResult.sql, includeCollection })}`);
@@ -2018,8 +2060,20 @@ apiRoutes.get("/collections/:collection/content", optionalAuth(), async (c) => {
             }
           }, executionStart)
         };
+        recordCatalogRequest({ cacheKey, collection: collection ?? null, path: c.req.path, queryString: c.req.raw.url.split("?")[1] ?? "", source: cacheResult.source });
+        scheduleKvWrite(cacheKey, c.executionCtx);
         return c.json(dataWithMeta);
       }
+      const swrData = getAndConsumeStale(cacheKey);
+      if (swrData) {
+        c.header("X-Cache-Status", "STALE");
+        c.header("X-Cache-Source", "swr");
+        recordCatalogRequest({ cacheKey, collection: collection ?? null, path: c.req.path, queryString: c.req.raw.url.split("?")[1] ?? "", source: "swr" });
+        scheduleKvWrite(cacheKey, c.executionCtx);
+        return c.json({ ...swrData, meta: addTimingMeta(c, { ...swrData.meta, cache: { hit: true, source: "swr", stale: true } }, executionStart) });
+      }
+      recordCatalogRequest({ cacheKey, collection: collection ?? null, path: c.req.path, queryString: c.req.raw.url.split("?")[1] ?? "", source: "miss" });
+      scheduleKvWrite(cacheKey, c.executionCtx);
     }
     c.header("X-Cache-Status", "MISS");
     c.header("X-Cache-Source", "database");
@@ -2103,7 +2157,7 @@ apiRoutes.get("/:collection", optionalAuth(), async (c) => {
     }
     const collectionCache = record.cache;
     const collectionCacheDisabled = collectionCache?.enabled === false;
-    const cacheEnabled = c.get("cacheEnabled") && !collectionCacheDisabled && projFields.length === 0 && anon;
+    const cacheEnabled = c.get("cacheEnabled") && !collectionCacheDisabled && projFields.length === 0 && !needsAcl;
     const cache = getCacheService(CACHE_CONFIGS.api);
     const includeCollection = queryParams.include?.split(",").map((s) => s.trim()).includes("collection");
     const cacheKey = cache.generateKey("collection-content-filtered", `${collection}:${JSON.stringify({ filter: normalizedFilter, query: queryResult.sql, includeCollection })}`);
@@ -2113,8 +2167,20 @@ apiRoutes.get("/:collection", optionalAuth(), async (c) => {
         c.header("X-Cache-Status", "HIT");
         c.header("X-Cache-Source", cacheResult.source);
         if (cacheResult.ttl) c.header("X-Cache-TTL", Math.floor(cacheResult.ttl).toString());
+        recordCatalogRequest({ cacheKey, collection: collection ?? null, path: c.req.path, queryString: c.req.raw.url.split("?")[1] ?? "", source: cacheResult.source });
+        scheduleKvWrite(cacheKey, c.executionCtx);
         return c.json({ ...cacheResult.data, meta: addTimingMeta(c, { ...cacheResult.data.meta, cache: { hit: true, source: cacheResult.source, ttl: cacheResult.ttl ? Math.floor(cacheResult.ttl) : void 0 } }, executionStart) });
       }
+      const swrData = getAndConsumeStale(cacheKey);
+      if (swrData) {
+        c.header("X-Cache-Status", "STALE");
+        c.header("X-Cache-Source", "swr");
+        recordCatalogRequest({ cacheKey, collection: collection ?? null, path: c.req.path, queryString: c.req.raw.url.split("?")[1] ?? "", source: "swr" });
+        scheduleKvWrite(cacheKey, c.executionCtx);
+        return c.json({ ...swrData, meta: addTimingMeta(c, { ...swrData.meta, cache: { hit: true, source: "swr", stale: true } }, executionStart) });
+      }
+      recordCatalogRequest({ cacheKey, collection: collection ?? null, path: c.req.path, queryString: c.req.raw.url.split("?")[1] ?? "", source: "miss" });
+      scheduleKvWrite(cacheKey, c.executionCtx);
     }
     c.header("X-Cache-Status", "MISS");
     c.header("X-Cache-Source", "database");
@@ -2229,6 +2295,9 @@ apiRoutes.post("/:collection", requireAuth(), requireRole(["admin", "editor", "a
     const svc = new DocumentsService(db, { queryableFields: backing.docType.queryableFields ?? [], typeSchemaVersion: backing.docType.schemaVersion ?? 1, maxVersionsPerRoot: backing.docType.settings?.maxVersionsPerRoot ?? 50, tenantId: "default", versioning: backing.docType.settings?.versioning ?? false });
     const doc = await svc.create(createDocumentSchema.parse({ typeId: backing.coll.name, tenantId: "default", locale: "default", title, slug: finalSlug, data: hookData, publishOnCreate: (status || "draft") === "published" }), user?.userId);
     const cache = getCacheService(CACHE_CONFIGS.api);
+    const createAffectedKeys = (await cache.listKeys()).map((k) => k.key).filter((k) => k.startsWith("api:content-filtered:") || k.startsWith(`api:collection-content-filtered:${backing.coll.name}:`));
+    const createStaleValues = await cache.getMany(createAffectedKeys);
+    for (const [key, val] of createStaleValues) markStale(key, val, backing.coll.name);
     await cache.invalidate("api:content-filtered:*");
     await cache.invalidate(`api:collection-content-filtered:${backing.coll.name}:*`);
     dispatchHookEvent(c, "content:after:create", { collection: backing.coll.name, id: doc.rootId, data: doc.data ?? {}, user: actor }, "fire-and-forget");
@@ -2272,6 +2341,9 @@ apiRoutes.put("/:collection/:id", requireAuth(), requireRole(["admin", "editor",
       await svc.unpublish(pub.id);
     }
     const cache = getCacheService(CACHE_CONFIGS.api);
+    const updateAffectedKeys = (await cache.listKeys()).map((k) => k.key).filter((k) => k.startsWith("api:content-filtered:") || k.startsWith(`api:collection-content-filtered:${docRow.type_id}:`));
+    const updateStaleValues = await cache.getMany(updateAffectedKeys);
+    for (const [key, val] of updateStaleValues) markStale(key, val, docRow.type_id);
     await cache.invalidate("api:content-filtered:*");
     await cache.invalidate(`api:collection-content-filtered:${docRow.type_id}:*`);
     const coll = getCollectionRegistry().getByName(docRow.type_id);
@@ -2305,6 +2377,9 @@ apiRoutes.delete("/:collection/:id", requireAuth(), requireRole(["admin", "edito
     const now = Math.floor(Date.now() / 1e3);
     await db.prepare("UPDATE documents SET deleted_at = ?, updated_at = ? WHERE root_id = ? AND tenant_id = 'default'").bind(now, now, id).run();
     const cache = getCacheService(CACHE_CONFIGS.api);
+    const deleteAffectedKeys = (await cache.listKeys()).map((k) => k.key).filter((k) => k.startsWith("api:content-filtered:") || k.startsWith(`api:collection-content-filtered:${docRow.type_id}:`));
+    const deleteStaleValues = await cache.getMany(deleteAffectedKeys);
+    for (const [key, val] of deleteStaleValues) markStale(key, val, docRow.type_id);
     await cache.invalidate("api:content-filtered:*");
     await cache.invalidate(`api:collection-content-filtered:${docRow.type_id}:*`);
     dispatchHookEvent(c, "content:after:delete", { collection: docRow.type_id, id, data: {}, user: actor }, "fire-and-forget");
@@ -3584,7 +3659,7 @@ adminApiRoutes.patch("/collections/:id", collectionsReadOnly);
 adminApiRoutes.delete("/collections/:id", collectionsReadOnly);
 adminApiRoutes.get("/migrations/status", async (c) => {
   try {
-    const { MigrationService: MigrationService2 } = await import('./migrations-JAHMI5MK.js');
+    const { MigrationService: MigrationService2 } = await import('./migrations-GZ2HIB4I.js');
     const db = c.env.DB;
     const migrationService = new MigrationService2(db);
     const status = await migrationService.getMigrationStatus();
@@ -3627,7 +3702,7 @@ adminApiRoutes.post("/migrations/run", async (c) => {
 });
 adminApiRoutes.get("/migrations/validate", async (c) => {
   try {
-    const { MigrationService: MigrationService2 } = await import('./migrations-JAHMI5MK.js');
+    const { MigrationService: MigrationService2 } = await import('./migrations-GZ2HIB4I.js');
     const db = c.env.DB;
     const migrationService = new MigrationService2(db);
     const validation = await migrationService.validateSchema();
@@ -7278,6 +7353,15 @@ function createUserProfilesPlugin() {
   return userProfilesPlugin;
 }
 
+// src/services/demo-mode.ts
+var _demoModeActive = false;
+function setDemoModeActive() {
+  _demoModeActive = true;
+}
+function isDemoModeActive() {
+  return _demoModeActive;
+}
+
 // src/routes/auth.ts
 var JWT_SECRET_FALLBACK = "your-super-secret-jwt-key-change-in-production";
 var DEMO_EMAIL = "admin@sonicjs.com";
@@ -7344,13 +7428,7 @@ authRoutes.get("/login", async (c) => {
     version: c.get("appVersion"),
     redirect: redirect && redirect.startsWith("/") ? redirect : void 0
   };
-  const db = c.env.DB;
-  let demoLoginActive = false;
-  try {
-    const plugin = await db.prepare("SELECT * FROM plugins WHERE id = ? AND status = ?").bind("demo-login-prefill", "active").first();
-    demoLoginActive = !!plugin;
-  } catch (error2) {
-  }
+  const demoLoginActive = isDemoModeActive();
   return c.html(renderLoginPage(pageData, demoLoginActive));
 });
 authRoutes.get("/register", async (c) => {
@@ -7486,7 +7564,7 @@ authRoutes.post(
       }
       const { email, password } = validation.data;
       const normalizedEmail = email.toLowerCase();
-      const { createAuth } = await import('./config-4TIHSNW6.js');
+      const { createAuth } = await import('./config-DOAWXZBG.js');
       const auth = createAuth(c.env, void 0, new URL(c.req.url).origin);
       const baReq = new Request(new URL("/auth/sign-in/email", c.req.url).href, {
         method: "POST",
@@ -7545,7 +7623,7 @@ authRoutes.post(
 );
 authRoutes.post("/logout", async (c) => {
   try {
-    const { createAuth } = await import('./config-4TIHSNW6.js');
+    const { createAuth } = await import('./config-DOAWXZBG.js');
     const auth = createAuth(c.env, void 0, new URL(c.req.url).origin);
     const baReq = new Request(new URL("/auth/sign-out", c.req.url).href, {
       method: "POST",
@@ -7562,7 +7640,7 @@ authRoutes.post("/logout", async (c) => {
 });
 authRoutes.get("/logout", async (c) => {
   try {
-    const { createAuth } = await import('./config-4TIHSNW6.js');
+    const { createAuth } = await import('./config-DOAWXZBG.js');
     const auth = createAuth(c.env, void 0, new URL(c.req.url).origin);
     const baReq = new Request(new URL("/auth/sign-out", c.req.url).href, {
       method: "POST",
@@ -7770,7 +7848,7 @@ authRoutes.post(
         </div>
       `);
       }
-      const { createAuth } = await import('./config-4TIHSNW6.js');
+      const { createAuth } = await import('./config-DOAWXZBG.js');
       const auth = createAuth(c.env, void 0, new URL(c.req.url).origin);
       const baReq = new Request(new URL("/auth/sign-in/email", c.req.url).href, {
         method: "POST",
@@ -27402,6 +27480,6 @@ var ROUTES_INFO = {
   reference: "https://github.com/sonicjs/sonicjs"
 };
 
-export { DocumentRepository, ROUTES_INFO, TenantService, VALID_MEMBER_ROLES, adminCheckboxRoutes, adminCollectionsRoutes, adminDocumentsRoutes, adminLogsRoutes, adminMediaRoutes, adminPluginRoutes, adminSettingsRoutes, admin_api_default, admin_content_default, apiDocumentsRoutes, api_content_crud_default, api_default, api_media_default, api_system_default, auth_default, createDocumentSchema, createUserProfilesPlugin, defineUserProfile, denyIfNotAllowed, dispatchHookEvent, effectiveTenantForType, getConfirmationDialogScript2 as getConfirmationDialogScript, getCustomData, getDocumentRequestContext, getEmailService, getUserProfileConfig, getVariablesCached, hasEmailService, invalidateVariablesCache, isValidMemberRole, lexicalEditorPlugin, reconcileMenuFromPlugins, renderConfirmationDialog2 as renderConfirmationDialog, renderTable2 as renderTable, resolveDocScope, resolveVariablesInObject, router, router2, setEmailService, setVariablesCache, test_cleanup_default, updateDocumentSchema, userProfilesPlugin, userRoutes };
-//# sourceMappingURL=chunk-7P5OCUPS.js.map
-//# sourceMappingURL=chunk-7P5OCUPS.js.map
+export { DocumentRepository, ROUTES_INFO, TenantService, VALID_MEMBER_ROLES, adminCheckboxRoutes, adminCollectionsRoutes, adminDocumentsRoutes, adminLogsRoutes, adminMediaRoutes, adminPluginRoutes, adminSettingsRoutes, admin_api_default, admin_content_default, apiDocumentsRoutes, api_content_crud_default, api_default, api_media_default, api_system_default, auth_default, createDocumentSchema, createUserProfilesPlugin, defineUserProfile, denyIfNotAllowed, dispatchHookEvent, effectiveTenantForType, getConfirmationDialogScript2 as getConfirmationDialogScript, getCustomData, getDocumentRequestContext, getEmailService, getUserProfileConfig, getVariablesCached, hasEmailService, invalidateVariablesCache, isValidMemberRole, lexicalEditorPlugin, reconcileMenuFromPlugins, renderConfirmationDialog2 as renderConfirmationDialog, renderTable2 as renderTable, resolveDocScope, resolveVariablesInObject, router, router2, setDemoModeActive, setEmailService, setVariablesCache, swrStats, test_cleanup_default, updateDocumentSchema, userProfilesPlugin, userRoutes };
+//# sourceMappingURL=chunk-OJFIQGZB.js.map
+//# sourceMappingURL=chunk-OJFIQGZB.js.map