emdash 0.22.0 → 0.24.0

package/dist/astro/middleware.mjs

@@ -1,81 +1,82 @@
-import { i as runMigrations, t as MIGRATION_RACE_WAIT_MS } from "../runner-DYYnW530.mjs";
+import { i as runMigrations, t as MIGRATION_RACE_WAIT_MS } from "../runner-BsquExlK.mjs";
 import { t as validateIdentifier } from "../validate-VPnKoIzW.mjs";
 import { o as isSqlite } from "../dialect-helpers-DRI5pyY3.mjs";
 import { i as setI18nConfig } from "../config-CVssduLe.mjs";
-import { _ as resolveExclusiveHooks, g as createHookPipeline, m as EmailPipeline, p as PluginRouteRegistry, t as getMenu, v as definePlugin } from "../menus-DOs1MQJg.mjs";
+import { _ as resolveExclusiveHooks, g as createHookPipeline, m as EmailPipeline, p as PluginRouteRegistry, t as getMenu, v as definePlugin } from "../menus-GvRSpgIA.mjs";
 import { t as after } from "../after-B1IIdH3Y.mjs";
 import { createRequestMetrics, getRequestContext, runWithContext } from "../request-context.mjs";
 import "../object-cache-SEb2IM4Z.mjs";
-import { r as RevisionRepository, t as ContentRepository } from "../content-2PTDNnoh.mjs";
+import { r as RevisionRepository, t as ContentRepository } from "../content-PoVGKjp0.mjs";
 import "../base64-CmWvODNW.mjs";
-import "../types-DXOIbece.mjs";
-import { t as MediaRepository } from "../media-Bw0sA6rb.mjs";
-import "../user-Db-Rti_z.mjs";
-import "../taxonomy-B2HQuVf5.mjs";
-import "../comment-80UyJJUR.mjs";
+import "../types-CmI1OyQg.mjs";
+import { t as MediaRepository } from "../media-CTjJoJTh.mjs";
+import "../user-JAuc8VUf.mjs";
+import "../taxonomy-BBUlGug5.mjs";
+import "../comment-BDx50EX5.mjs";
 import { t as OptionsRepository } from "../options-DTTML-Tx.mjs";
-import "../context-f1__jpzF.mjs";
-import "../menus-CYs0WZoL.mjs";
-import "../redirect-Bifv_yHv.mjs";
+import "../context-Dvws41_A.mjs";
+import "../menus-8O6xNcYW.mjs";
+import "../redirect-C1KVGYWe.mjs";
 import { i as setRequestCacheEntry, r as requestCached } from "../request-cache-KCNHp_RJ.mjs";
 import "../byline-registry-BOjqDOim.mjs";
 import { n as initWithLock, t as createInitLock } from "../init-lock-6b309ZrF.mjs";
-import "../byline-CC0WS4Gu.mjs";
-import { n as normalizeMediaValue } from "../normalize-Uam4_Vkr.mjs";
-import "../placeholder-CIDCpyEY.mjs";
-import "../seo-Cu47j3mJ.mjs";
-import { n as isMissingTableError } from "../db-errors-CrC5w3Jz.mjs";
-import { $ as handleContentGet, B as handleMediaUpdate, G as handleContentAuthors, H as handleRevisionList, I as handleMediaCreate, J as handleContentCountTrashed, K as handleContentCompare, L as handleMediaDelete, Q as handleContentDuplicate, R as handleMediaGet, S as PluginStateRepository, U as handleRevisionRestore, V as handleRevisionGet, X as handleContentDelete, Y as handleContentCreate, Z as handleContentDiscardDraft, _ as loadBundleFromR2, at as handleContentRestore, ct as handleContentUnpublish, dt as validateRev, et as handleContentGetIncludingTrashed, it as handleContentPublish, lt as handleContentUnschedule, nt as handleContentListTrashed, ot as handleContentSchedule, q as handleContentCountScheduled, rt as handleContentPermanentDelete, s as normalizeRegistryConfig, st as handleContentTranslations, tt as handleContentList, ut as handleContentUpdate, z as handleMediaList } from "../api-BDuM4bEy.mjs";
-import "../dashboard-BOESNcwE.mjs";
-import { n as hashString } from "../hash-BowcuPwv.mjs";
-import { t as FTSManager } from "../fts-manager-DtiWqwNJ.mjs";
-import { n as SchemaRegistry } from "../registry-CjK96fHD.mjs";
+import "../field-defs-cache-CYYx8xlG.mjs";
+import "../byline-C-YajfV7.mjs";
+import { n as normalizeMediaValue } from "../normalize-ClbNIenm.mjs";
+import "../placeholder-B0s2mWu5.mjs";
+import "../seo-3QrZ1EPT.mjs";
+import { n as isMissingTableError } from "../db-errors-UXB1CK42.mjs";
+import { $ as handleContentGet, B as handleMediaUpdate, G as handleContentAuthors, H as handleRevisionList, I as handleMediaCreate, J as handleContentCountTrashed, K as handleContentCompare, L as handleMediaDelete, Q as handleContentDuplicate, R as handleMediaGet, S as PluginStateRepository, U as handleRevisionRestore, V as handleRevisionGet, X as handleContentDelete, Y as handleContentCreate, Z as handleContentDiscardDraft, _ as loadBundleFromR2, at as handleContentRestore, ct as handleContentUnpublish, dt as validateRev, et as handleContentGetIncludingTrashed, it as handleContentPublish, lt as handleContentUnschedule, nt as handleContentListTrashed, ot as handleContentSchedule, q as handleContentCountScheduled, rt as handleContentPermanentDelete, s as normalizeRegistryConfig, st as handleContentTranslations, tt as handleContentList, ut as handleContentUpdate, z as handleMediaList } from "../api-d_0wi9fW.mjs";
+import "../dashboard-DsYU8JKS.mjs";
+import { n as hashString } from "../hash-DrvzIXcz.mjs";
+import { t as FTSManager } from "../fts-manager-DW_NR-Fs.mjs";
+import { n as SchemaRegistry } from "../registry-CJkCubOJ.mjs";
 import { createRecorder, flushRecorder, isInstrumentationEnabled, kyselyLogOption } from "../database/instrumentation.mjs";
-import { r as getDb } from "../loader-C8Z48Uof.mjs";
-import "../schema-5z2Jfnbm.mjs";
-import "../zod-generator-D481JjzD.mjs";
-import "../seo-DRnqnstF.mjs";
-import "../sections-DWYZo6HK.mjs";
-import { r as singleFlightCached, t as createSingleFlightCache } from "../single-flight-cache-B5p5cNOL.mjs";
-import { i as getSiteSettings, o as invalidateSiteSettingsCache } from "../settings-yaxu9mU-.mjs";
-import "../settings-DUrVDN0c.mjs";
-import "../resolve-CpbBglV0.mjs";
-import { a as getTaxonomyDefs, o as getTaxonomyTerms } from "../taxonomies-Be9B1jEj.mjs";
-import "../taxonomies-CJmkEpdS.mjs";
-import { r as normalizeManifestRoute } from "../manifest-schema-DDSbwkAL.mjs";
-import "../types-Bfr2Pj6z.mjs";
-import "../ssrf-B0VeRLrp.mjs";
-import "../error-BQ1pxs0L.mjs";
-import "../parse-qrHlnzTy.mjs";
-import "../redirects-DUvXgzCX.mjs";
-import "../byline-fields-53i9Et0x.mjs";
-import "../status-CB2basWJ.mjs";
-import { a as invalidateUrlPatternCache } from "../query-B1RVFUNM.mjs";
-import "../import-DqSGOlmR.mjs";
-import { t as getTrustedProxyHeaders } from "../trusted-proxy-DY1_UqHr.mjs";
-import { n as sanitizeHeadersForSandbox, t as extractRequestMeta } from "../request-meta-ei3ATilC.mjs";
-import "../ssrf-Cz1e2QPn.mjs";
-import { n as CronExecutor } from "../cron-CQPxBjYs.mjs";
-import { r as devConsoleEmailDeliver, t as DEV_CONSOLE_EMAIL_PLUGIN_ID } from "../email-console-B9VS6eN4.mjs";
-import "../utils-LbHcSRTj.mjs";
-import "../tokens-BvrJvIB6.mjs";
-import "../preview-IDye9SPQ.mjs";
-import "../comment-reaction-B6AdcpXw.mjs";
-import "../bylines-CCO1CYnH.mjs";
-import { n as getWidgetAreas } from "../widgets-8GONuRHo.mjs";
-import "../apply-wDqQoxX4.mjs";
-import "../load-Dtoo7KcJ.mjs";
-import "../search-D9FkoM-k.mjs";
+import { a as getDb } from "../loader-BR2SgfEc.mjs";
+import "../schema-DMjXuvNU.mjs";
+import "../zod-generator-xEHODMJf.mjs";
+import "../seo-DCEF-AVr.mjs";
+import "../sections-CCMic8dB.mjs";
+import { r as singleFlightCached, t as createSingleFlightCache } from "../single-flight-cache-Cdfkic3t.mjs";
+import { i as getSiteSettings, o as invalidateSiteSettingsCache } from "../settings-D9rvaLuY.mjs";
+import "../settings-C3Yi5Co3.mjs";
+import "../resolve-C7I0qiR0.mjs";
+import { a as getTaxonomyDefs, o as getTaxonomyTerms } from "../taxonomies-CurpLtNC.mjs";
+import "../taxonomies-DhLaNJji.mjs";
+import { r as normalizeManifestRoute } from "../manifest-schema-BWKnQYQF.mjs";
+import "../types-BvbeGEtr.mjs";
+import "../ssrf-BRKb343l.mjs";
+import "../error-lq_fL-RS.mjs";
+import "../parse-DHI873qU.mjs";
+import "../redirects-x9eFPeyi.mjs";
+import "../byline-fields-B-KXkg5R.mjs";
+import "../status-vUK0SA17.mjs";
+import { a as invalidateUrlPatternCache } from "../query-DZdlS6Cu.mjs";
+import "../import-Bb1T9WJS.mjs";
+import { t as getTrustedProxyHeaders } from "../trusted-proxy-DZY5WCn2.mjs";
+import { n as sanitizeHeadersForSandbox, t as extractRequestMeta } from "../request-meta-CmS1tDFf.mjs";
+import "../ssrf-CcX9zvMK.mjs";
+import { n as CronExecutor } from "../cron-C5LVoNmP.mjs";
+import { r as devConsoleEmailDeliver, t as DEV_CONSOLE_EMAIL_PLUGIN_ID } from "../email-console-DJP32ucW.mjs";
+import "../utils-B7A57fm9.mjs";
+import "../tokens-LeuXF9gG.mjs";
+import "../preview-DKGCt2_p.mjs";
+import "../comment-reaction-Gv_pgfI3.mjs";
+import "../bylines-BMtJnPnG.mjs";
+import { n as getWidgetAreas } from "../widgets-Dri0spI4.mjs";
+import "../apply-BE9UaWX0.mjs";
+import "../load-DMFi4n1p.mjs";
+import "../search-D1wKk3lc.mjs";
 import "../index.mjs";
-import { n as VERSION, t as COMMIT } from "../version-RnYXYjzD.mjs";
-import { t as getAuthMode } from "../mode-CFh8Dw8G.mjs";
-import { t as cleanupExpiredChallenges } from "../challenge-store-C6E_kWTs.mjs";
-import { a as validateEncryptionKeyAtStartup } from "../secrets-BUE5UQys.mjs";
-import { t as resolveSessionUser } from "../session-user-DmtPMNa1.mjs";
+import { n as VERSION, t as COMMIT } from "../version-B5nHxI5Y.mjs";
+import { t as getAuthMode } from "../mode-BB0F8xTC.mjs";
+import { t as cleanupExpiredChallenges } from "../challenge-store-LhiqMccz.mjs";
+import { a as validateEncryptionKeyAtStartup } from "../secrets-BSf9pRRY.mjs";
+import { t as resolveSessionUser } from "../session-user-B8aLtKAH.mjs";
 import { Kysely, sql } from "kysely";
 import { defineMiddleware } from "astro:middleware";
 import virtualConfig from "virtual:emdash/config";
-import { createDialect, createRequestScopedDb } from "virtual:emdash/dialect";
+import { createCoalescingDialect, createDialect, createRequestScopedDb } from "virtual:emdash/dialect";
 import { mediaProviders } from "virtual:emdash/media-providers";
 import { plugins } from "virtual:emdash/plugins";
 import * as virtualSandboxRunnerModule from "virtual:emdash/sandbox-runner";
@@ -373,6 +374,25 @@ function getDbHolder() {
 	}
 	return holder;
 }
+/**
+* Auto-seed runs at most once per isolate per database. Its lock + "done" set
+* live on globalThis (same bundler-duplication reasoning as the db cache) so a
+* reclaimed-and-rerun `create()` can't seed a second time concurrently. The
+* lock polls rather than sharing a promise, so it is safe to await across a
+* cancelled owner in workerd.
+*/
+const SEED_HOLDER_KEY = Symbol.for("emdash:seed-state");
+function getSeedHolder() {
+	let holder = globalSymbolStore[SEED_HOLDER_KEY];
+	if (!holder) {
+		holder = {
+			done: /* @__PURE__ */ new Set(),
+			lock: createInitLock()
+		};
+		globalSymbolStore[SEED_HOLDER_KEY] = holder;
+	}
+	return holder;
+}
 const storageCache = /* @__PURE__ */ new Map();
 const sandboxedPluginCache = /* @__PURE__ */ new Map();
 /**
@@ -406,7 +426,20 @@ var EmDashRuntime = class EmDashRuntime {
 	configuredPlugins;
 	sandboxedPlugins;
 	sandboxedPluginEntries;
-	schemaRegistry;
+	/**
+	* Schema registry bound to the current request/event-scoped connection.
+	* Built per access (SchemaRegistry just wraps a db) against `this.db`, the
+	* ALS-aware getter — never a captured snapshot of the singleton. On a
+	* connection-backed adapter (Postgres over Hyperdrive) a captured singleton
+	* would query a socket opened by an earlier event and trip workerd's
+	* cross-request I/O guard; the catch in handlers like handleContentUpdate
+	* would then silently treat a revision-enabled collection as non-revisioned
+	* and write draft edits to live columns. Same reasoning as the per-call
+	* registry in _buildManifest().
+	*/
+	get schemaRegistry() {
+		return new SchemaRegistry(this.db);
+	}
 	_hooks;
 	config;
 	mediaProviders;
@@ -454,7 +487,6 @@ var EmDashRuntime = class EmDashRuntime {
 		this.configuredPlugins = parts.configuredPlugins;
 		this.sandboxedPlugins = parts.sandboxedPlugins;
 		this.sandboxedPluginEntries = parts.sandboxedPluginEntries;
-		this.schemaRegistry = new SchemaRegistry(parts.db);
 		this._hooks = parts.hooks;
 		this.enabledPlugins = parts.enabledPlugins;
 		this.pluginStates = parts.pluginStates;
@@ -571,10 +603,7 @@ var EmDashRuntime = class EmDashRuntime {
 	async rebuildHookPipeline() {
 		const newPipeline = createHookPipeline(this.allPipelinePlugins.filter((p) => this.enabledPlugins.has(p.id)), this.pipelineFactoryOptions);
 		await EmDashRuntime.resolveExclusiveHooks(newPipeline, this.db, this.runtimeDeps);
-		if (this.email) newPipeline.setContextFactory({
-			db: this.db,
-			emailPipeline: this.email
-		});
+		if (this.email) newPipeline.setContextFactory({ emailPipeline: this.email });
 		if (this.cronScheduler) {
 			const scheduler = this.cronScheduler;
 			newPipeline.setContextFactory({ cronReschedule: () => scheduler.reschedule() });
@@ -824,29 +853,100 @@ var EmDashRuntime = class EmDashRuntime {
 			}
 		};
 		const db = await phase("rt.db", "DB init + migrations", () => EmDashRuntime.getDatabase(deps));
+		const resolveDb = () => {
+			return getRequestContext()?.db ?? db;
+		};
 		await phase("rt.secrets", "Validate encryption key", () => validateEncryptionKeyAtStartup());
 		const storage = EmDashRuntime.getStorage(deps);
 		let pluginStates = /* @__PURE__ */ new Map();
 		let siteInfo;
-		await Promise.all([phase("rt.plugins", "Plugin states", async () => {
+		let seedGate = {
+			collectionCount: 1,
+			setupDone: true
+		};
+		const reqCtx = getRequestContext();
+		const ownsConfiguredDb = !!deps.config.database && !(reqCtx?.dbIsIsolated && reqCtx.db);
+		let readDb = db;
+		let readDbDisposable;
+		if (ownsConfiguredDb && deps.createCoalescingDialect && deps.config.database) try {
+			const dialect = deps.createCoalescingDialect(deps.config.database.config);
+			if (dialect) {
+				readDb = new Kysely({
+					dialect,
+					log: kyselyLogOption()
+				});
+				readDbDisposable = readDb;
+			}
+		} catch {
+			readDb = db;
+		}
+		const optionsRepo = new OptionsRepository(readDb);
+		const readSiteInfo = async () => {
+			const siteOpts = await optionsRepo.getMany([
+				"emdash:site_title",
+				"emdash:site_url",
+				"emdash:locale"
+			]);
+			return {
+				siteName: siteOpts.get("emdash:site_title") ?? void 0,
+				siteUrl: siteOpts.get("emdash:site_url") ?? void 0,
+				locale: siteOpts.get("emdash:locale") ?? void 0
+			};
+		};
+		const coldStartReads = [phase("rt.plugins", "Plugin states", async () => {
 			try {
-				const states = await db.selectFrom("_plugin_state").select(["plugin_id", "status"]).execute();
+				const states = await readDb.selectFrom("_plugin_state").select(["plugin_id", "status"]).execute();
 				pluginStates = new Map(states.map((s) => [s.plugin_id, s.status]));
 			} catch {}
 		}), phase("rt.site", "Site info options", async () => {
 			try {
-				const siteOpts = await new OptionsRepository(db).getMany([
-					"emdash:site_title",
-					"emdash:site_url",
-					"emdash:locale"
-				]);
-				siteInfo = {
-					siteName: siteOpts.get("emdash:site_title") ?? void 0,
-					siteUrl: siteOpts.get("emdash:site_url") ?? void 0,
-					locale: siteOpts.get("emdash:locale") ?? void 0
+				siteInfo = await readSiteInfo();
+			} catch {}
+		})];
+		if (ownsConfiguredDb) coldStartReads.push(phase("rt.seedcheck", "Auto-seed gate", async () => {
+			try {
+				const [collectionCount, setupOption] = await Promise.all([readDb.selectFrom("_emdash_collections").select((eb) => eb.fn.countAll().as("count")).executeTakeFirstOrThrow(), readDb.selectFrom("options").select("value").where("name", "=", "emdash:setup_complete").executeTakeFirst()]);
+				const setupDone = (() => {
+					try {
+						return !!setupOption && JSON.parse(setupOption.value) === true;
+					} catch {
+						return false;
+					}
+				})();
+				seedGate = {
+					collectionCount: collectionCount.count,
+					setupDone
 				};
 			} catch {}
-		})]);
+		}));
+		await Promise.all(coldStartReads);
+		if (seedGate.collectionCount === 0 && !seedGate.setupDone) {
+			const seedKey = deps.config.database?.entrypoint ?? "default";
+			const seedHolder = getSeedHolder();
+			try {
+				await initWithLock(seedHolder.lock, () => seedHolder.done.has(seedKey) ? true : void 0, async () => {
+					const { applySeed } = await import("../apply-BE9UaWX0.mjs").then((n) => n.n);
+					const { loadSeed } = await import("../load-DMFi4n1p.mjs").then((n) => n.r);
+					const { validateSeed } = await import("../validate-BzXHWnkV.mjs").then((n) => n.n);
+					const seed = await loadSeed();
+					if (validateSeed(seed).valid) {
+						await applySeed(db, seed, { onConflict: "skip" });
+						console.log("Auto-seeded default collections");
+					}
+					seedHolder.done.add(seedKey);
+					return true;
+				}, {
+					deadlineMs: DB_INIT_DEADLINE_MS,
+					anchor: (promise) => after(() => promise)
+				});
+				try {
+					siteInfo = await readSiteInfo();
+				} catch {}
+			} catch {}
+		}
+		if (readDbDisposable) try {
+			await readDbDisposable.destroy();
+		} catch {}
 		const enabledPlugins = /* @__PURE__ */ new Set();
 		for (const plugin of deps.plugins) {
 			const status = pluginStates.get(plugin.id);
@@ -907,6 +1007,7 @@ var EmDashRuntime = class EmDashRuntime {
 		const enabledPluginList = allPipelinePlugins.filter((p) => enabledPlugins.has(p.id));
 		const pipelineFactoryOptions = {
 			db,
+			getDb: resolveDb,
 			storage: storage ?? void 0,
 			siteInfo
 		};
@@ -920,7 +1021,8 @@ var EmDashRuntime = class EmDashRuntime {
 		const mediaProviderEntries = deps.mediaProviderEntries ?? [];
 		const providerContext = {
 			db,
-			storage
+			storage,
+			getDb: resolveDb
 		};
 		for (const entry of mediaProviderEntries) try {
 			const provider = entry.createProvider(providerContext);
@@ -936,16 +1038,13 @@ var EmDashRuntime = class EmDashRuntime {
 			const result = await pipelineRef.current.invokeCronHook(pluginId, event);
 			if (!result.success && result.error) throw result.error;
 		};
-		pipeline.setContextFactory({
-			db,
-			emailPipeline
-		});
+		pipeline.setContextFactory({ emailPipeline });
 		let cronExecutor = null;
 		let cronScheduler = null;
 		const runtimeRef = { current: null };
 		await phase("rt.cron", "Cron init (recovery deferred post-response)", async () => {
 			try {
-				cronExecutor = new CronExecutor(db, invokeCronHook);
+				cronExecutor = new CronExecutor(resolveDb, invokeCronHook);
 				const executorForRecovery = cronExecutor;
 				after(async () => {
 					try {
@@ -1038,26 +1137,6 @@ var EmDashRuntime = class EmDashRuntime {
 				log: kyselyLogOption()
 			});
 			await runMigrations(db);
-			try {
-				const [collectionCount, setupOption] = await Promise.all([db.selectFrom("_emdash_collections").select((eb) => eb.fn.countAll().as("count")).executeTakeFirstOrThrow(), db.selectFrom("options").select("value").where("name", "=", "emdash:setup_complete").executeTakeFirst()]);
-				const setupDone = (() => {
-					try {
-						return setupOption && JSON.parse(setupOption.value) === true;
-					} catch {
-						return false;
-					}
-				})();
-				if (collectionCount.count === 0 && !setupDone) {
-					const { applySeed } = await import("../apply-wDqQoxX4.mjs").then((n) => n.n);
-					const { loadSeed } = await import("../load-Dtoo7KcJ.mjs").then((n) => n.r);
-					const { validateSeed } = await import("../validate-Bwl64sxv.mjs").then((n) => n.n);
-					const seed = await loadSeed();
-					if (validateSeed(seed).valid) {
-						await applySeed(db, seed, { onConflict: "skip" });
-						console.log("Auto-seeded default collections");
-					}
-				}
-			} catch {}
 			if (isCurrentClaim()) holder.cache.set(cacheKey, db);
 			return db;
 		}, {
@@ -1584,7 +1663,7 @@ var EmDashRuntime = class EmDashRuntime {
 		if (this.hooks.hasHooks("content:beforeSave")) processedData = (await this.hooks.runContentBeforeSave(body.data, collection, true)).content;
 		processedData = await this.runSandboxedBeforeSave(processedData, collection, true);
 		processedData = await this.normalizeMediaFields(collection, processedData);
-		const { validateContentData } = await import("../validation-C_yOvFaO.mjs");
+		const { validateContentData } = await import("../validation-CY1gk4Ar.mjs");
 		const validation = await validateContentData(this.db, collection, processedData, { partial: false });
 		if (!validation.ok) return {
 			success: false,
@@ -1600,7 +1679,7 @@ var EmDashRuntime = class EmDashRuntime {
 		return result;
 	}
 	async handleContentUpdate(collection, id, body) {
-		const { ContentRepository } = await import("../content-2PTDNnoh.mjs").then((n) => n.n);
+		const { ContentRepository } = await import("../content-PoVGKjp0.mjs").then((n) => n.n);
 		const repo = new ContentRepository(this.db);
 		const resolvedItem = await repo.findByIdOrSlug(collection, id, body.locale);
 		const resolvedId = resolvedItem?.id ?? id;
@@ -1627,7 +1706,7 @@ var EmDashRuntime = class EmDashRuntime {
 			if (this.hooks.hasHooks("content:beforeSave")) processedData = (await this.hooks.runContentBeforeSave(bodyWithoutRev.data, collection, false)).content;
 			processedData = await this.runSandboxedBeforeSave(processedData, collection, false);
 			processedData = await this.normalizeMediaFields(collection, processedData);
-			const { validateContentData } = await import("../validation-C_yOvFaO.mjs");
+			const { validateContentData } = await import("../validation-CY1gk4Ar.mjs");
 			const validation = await validateContentData(this.db, collection, processedData, { partial: true });
 			if (!validation.ok) return {
 				success: false,
@@ -1883,6 +1962,7 @@ var EmDashRuntime = class EmDashRuntime {
 		if (trustedPlugin && this.enabledPlugins.has(trustedPlugin.id)) {
 			const routeRegistry = new PluginRouteRegistry({
 				db: this.db,
+				storage: this.storage ?? void 0,
 				emailPipeline: this.email ?? void 0,
 				trustedProxyHeaders: getTrustedProxyHeaders(this.config)
 			});
@@ -2167,6 +2247,120 @@ function createPublicMediaUrlResolver(storage) {
 	return (key) => resolvePublicMediaUrl(storage, key);
 }
 
+//#endregion
+//#region src/astro/middleware/scoped-db.ts
+/**
+* Request-scoped database lifecycle helpers.
+*
+* Extracted from middleware.ts so they can be unit-tested without pulling in
+* the virtual:emdash/* module graph. The middleware imports these to settle a
+* request-scoped db adapter's lifecycle around the response.
+*/
+/**
+* Astro attaches AstroCookies to outgoing responses via a well-known global
+* symbol. Cloning a Response (`new Response(body, init)`) drops non-header
+* metadata, so any helper that wraps the response must explicitly forward this
+* symbol or `cookies.set()` calls will be silently dropped. `Symbol.for`
+* returns the same registry symbol everywhere, so this matches the copy in
+* middleware.ts.
+*/
+const ASTRO_COOKIES_SYMBOL = Symbol.for("astro.cookies");
+/**
+* Run a request-scoped db's `close()` once the response body has finished
+* streaming. Astro streams HTML and components issue DB queries during that
+* stream, so a connection-backed adapter (e.g. Postgres over Hyperdrive) must
+* not be torn down until the body is flushed. Bodyless responses (redirects,
+* 304s, errors) close immediately. A guard makes close idempotent and a stream
+* `cancel` (client disconnect) still triggers it so connections never leak.
+*
+* No-op for adapters without a `close` (D1): the response passes through.
+*/
+function wrapResponseForScopedClose(response, close) {
+	let closed = false;
+	const runClose = () => {
+		if (closed) return;
+		closed = true;
+		try {
+			close();
+		} catch (error) {
+			console.error("[emdash] request-scoped db close failed:", error);
+		}
+	};
+	if (!response.body) {
+		runClose();
+		return response;
+	}
+	const transform = new TransformStream({
+		flush: runClose,
+		cancel: runClose
+	});
+	const wrapped = new Response(response.body.pipeThrough(transform), response);
+	const astroCookies = Reflect.get(response, ASTRO_COOKIES_SYMBOL);
+	if (astroCookies !== void 0) Reflect.set(wrapped, ASTRO_COOKIES_SYMBOL, astroCookies);
+	wrapped.headers.delete("Content-Length");
+	return wrapped;
+}
+/**
+* Run the request body under a request-scoped db, then settle its lifecycle:
+* `commit()` runs before the response is returned (so per-request state like a
+* D1 bookmark cookie is persisted in the headers, even if render throws), while
+* `close()` (if any) is deferred to stream-end so a connection-backed adapter
+* isn't torn down mid-render. On error the connection is closed immediately
+* before rethrowing so it never leaks.
+*
+* On the error path both `commit()` and `close()` are defended: a throw from
+* either is logged and swallowed so it can't replace the propagating render
+* error (which is the one the caller needs to see). On the success path
+* `commit()` is guarded too — if it throws, the connection is closed before the
+* failure is surfaced, so it never leaks. For the current adapters `commit()`
+* is a no-op (Hyperdrive) or a cookie write (D1, no `close`) and `close()` is
+* fire-and-forget, so these guards only matter for a future connection-backed
+* adapter with throwing teardown, but the helper is generic and must not leak
+* or mask.
+*/
+async function finishScoped(scoped, run) {
+	let response;
+	try {
+		response = await run();
+	} catch (error) {
+		commitSafely(scoped.commit);
+		closeSafely(scoped.close);
+		throw error;
+	}
+	try {
+		scoped.commit();
+	} catch (error) {
+		closeSafely(scoped.close);
+		throw error;
+	}
+	return scoped.close ? wrapResponseForScopedClose(response, scoped.close) : response;
+}
+/**
+* Run commit() swallowing any error. Used where an exception is already
+* propagating (or about to be thrown) and a commit failure must neither mask it
+* nor skip the subsequent close().
+*/
+function commitSafely(commit) {
+	try {
+		commit();
+	} catch (error) {
+		console.error("[emdash] request-scoped db commit failed during error handling:", error);
+	}
+}
+/**
+* Run close() swallowing any error. Used on the error/commit-failure paths
+* where another exception is the one the caller must see; a throwing teardown
+* must not replace it.
+*/
+function closeSafely(close) {
+	if (!close) return;
+	try {
+		close();
+	} catch (error) {
+		console.error("[emdash] request-scoped db close failed during error handling:", error);
+	}
+}
+
 //#endregion
 //#region src/astro/middleware/stream-end-metrics.ts
 /**
@@ -2190,13 +2384,6 @@ function createPublicMediaUrlResolver(storage) {
 */
 const STREAM_END_PREFIX = "[emdash-stream-end]";
 /**
-* Astro attaches AstroCookies to outgoing responses via a well-known global
-* symbol. Constructing a new Response drops non-header metadata, so the
-* symbol must be forwarded explicitly or `cookies.set()` calls are silently
-* dropped. Same pattern as finalizeResponse in ../middleware.ts.
-*/
-const ASTRO_COOKIES_SYMBOL$1 = Symbol.for("astro.cookies");
-/**
 * Wrap a response body so the FINAL request metrics are emitted when the
 * body finishes streaming. Returns the response unchanged when
 * instrumentation is disabled, the body is null, or no request metrics
@@ -2227,8 +2414,8 @@ function wrapBodyForStreamMetrics(response) {
 		if (recorder) flushRecorder(recorder);
 	} });
 	const wrapped = new Response(response.body.pipeThrough(transform), response);
-	const astroCookies = Reflect.get(response, ASTRO_COOKIES_SYMBOL$1);
-	if (astroCookies !== void 0) Reflect.set(wrapped, ASTRO_COOKIES_SYMBOL$1, astroCookies);
+	const astroCookies = Reflect.get(response, ASTRO_COOKIES_SYMBOL);
+	if (astroCookies !== void 0) Reflect.set(wrapped, ASTRO_COOKIES_SYMBOL, astroCookies);
 	wrapped.headers.delete("Content-Length");
 	return wrapped;
 }
@@ -2401,6 +2588,7 @@ function buildDependencies(config) {
 		config,
 		plugins: getPlugins(),
 		createDialect,
+		createCoalescingDialect,
 		createStorage,
 		createScheduler,
 		sandboxEnabled: sandboxModule.sandboxEnabled,
@@ -2450,15 +2638,56 @@ async function getRuntime(config, initTimings) {
 async function runScheduledTasks(options = {}) {
 	const config = getConfig();
 	if (!config) return { published: [] };
-	return (await getRuntime(config)).runScheduledTasks(options);
+	const runtime = await getRuntime(config);
+	const scoped = createRequestScopedDb$1({
+		config: config.database?.config,
+		isAuthenticated: false,
+		isWrite: true,
+		cookies: NOOP_COOKIE_JAR,
+		url: CRON_EVENT_URL
+	});
+	if (!scoped?.close) return runtime.runScheduledTasks(options);
+	const parent = getRequestContext();
+	const ctx = parent ? {
+		...parent,
+		db: scoped.db
+	} : {
+		editMode: false,
+		db: scoped.db,
+		metrics: createRequestMetrics(performance.now())
+	};
+	try {
+		return await runWithContext(ctx, () => runtime.runScheduledTasks(options));
+	} finally {
+		try {
+			scoped.commit();
+		} catch (error) {
+			console.error("[scheduled] request-scoped db commit failed:", error);
+		}
+		try {
+			scoped.close();
+		} catch (error) {
+			console.error("[scheduled] request-scoped db close failed:", error);
+		}
+	}
 }
 /**
-* Astro attaches AstroCookies to outgoing responses via a well-known global
-* symbol. Cloning a Response (`new Response(body, init)`) drops non-header
-* metadata, so any middleware that wraps the response must explicitly forward
-* this symbol or `cookies.set()` calls will be silently dropped.
+* A cookie jar that reads nothing and writes nothing, for request-scoped db
+* adapters invoked outside an HTTP request (the Cron Trigger sweep). Connection
+* adapters like Hyperdrive ignore cookies entirely; the D1 session adapter
+* reads/writes a bookmark cookie, but cron never reaches that path (it has no
+* `close()`), so the no-ops are never observed.
 */
-const ASTRO_COOKIES_SYMBOL = Symbol.for("astro.cookies");
+const NOOP_COOKIE_JAR = {
+	get: () => void 0,
+	set: () => {}
+};
+/**
+* Synthetic URL for the cron sweep's request-scoped db opts. Only the D1
+* session adapter inspects `url` (for cookie `secure`), and cron doesn't take
+* that path, so the value is never used — it exists to satisfy the contract.
+*/
+const CRON_EVENT_URL = new URL("https://cron.emdash.internal/");
 /**
 * Baseline security headers applied to all responses.
 * Admin routes get additional headers (strict CSP) from auth middleware.
@@ -2467,9 +2696,9 @@ function finalizeResponse(response, serverTimings) {
 	const res = new Response(response.body, response);
 	const astroCookies = Reflect.get(response, ASTRO_COOKIES_SYMBOL);
 	if (astroCookies !== void 0) Reflect.set(res, ASTRO_COOKIES_SYMBOL, astroCookies);
-	res.headers.set("X-Content-Type-Options", "nosniff");
-	res.headers.set("Referrer-Policy", "strict-origin-when-cross-origin");
-	res.headers.set("Permissions-Policy", "camera=(), microphone=(), geolocation=(), payment=()");
+	if (!res.headers.has("X-Content-Type-Options")) res.headers.set("X-Content-Type-Options", "nosniff");
+	if (!res.headers.has("Referrer-Policy")) res.headers.set("Referrer-Policy", "strict-origin-when-cross-origin");
+	if (!res.headers.has("Permissions-Policy")) res.headers.set("Permissions-Policy", "camera=(), microphone=(), geolocation=(), payment=()");
 	if (!res.headers.has("Content-Security-Policy")) res.headers.set("X-Frame-Options", "SAMEORIGIN");
 	if (serverTimings && serverTimings.length > 0) res.headers.set("Server-Timing", serverTimings.map((t) => {
 		const dur = Math.round(t.dur);
@@ -2561,7 +2790,7 @@ const onRequest = defineMiddleware(async (context, next) => {
 				if (!isSetupVerified() && !context.isPrerendered) {
 					const t0 = performance.now();
 					try {
-						const { getDb } = await import("../loader-C8Z48Uof.mjs").then((n) => n.i);
+						const { getDb } = await import("../loader-BR2SgfEc.mjs").then((n) => n.o);
 						await (await getDb()).selectFrom("_emdash_migrations").selectAll().limit(1).execute();
 						markSetupVerified();
 					} catch (error) {
@@ -2632,11 +2861,7 @@ const onRequest = defineMiddleware(async (context, next) => {
 					const acceptsHtml = (request.headers.get("accept") ?? "").split(",", 1)[0].trim().startsWith("text/html");
 					return runWithContext(ctx, async () => {
 						if (acceptsHtml) after(() => prefetchLayoutData());
-						try {
-							return await runAnon();
-						} finally {
-							anonScoped.commit();
-						}
+						return finishScoped(anonScoped, runAnon);
 					});
 				}
 				return runAnon();
@@ -2698,7 +2923,9 @@ const onRequest = defineMiddleware(async (context, next) => {
 					collectPageFragments: runtime.collectPageFragments.bind(runtime),
 					ensureSearchHealthy: runtime.ensureSearchHealthy.bind(runtime),
 					storage: runtime.storage,
-					db: runtime.db,
+					get db() {
+						return runtime.db;
+					},
 					getPublicMediaUrl: createPublicMediaUrlResolver(runtime.storage),
 					hooks: runtime.hooks,
 					email: runtime.email,
@@ -2747,13 +2974,7 @@ const onRequest = defineMiddleware(async (context, next) => {
 					editMode: false,
 					db: scoped.db,
 					metrics
-				}, async () => {
-					try {
-						return await renderAndFinalize();
-					} finally {
-						scoped.commit();
-					}
-				});
+				}, () => finishScoped(scoped, renderAndFinalize));
 			}
 			return renderAndFinalize();
 		};