emdash 0.33.0 → 0.34.0

package/dist/astro/middleware/auth.d.mts

@@ -1,13 +1,13 @@
-import "../../options-CA4eVX6P.mjs";
-import "../../types-Dc4ntQjQ.mjs";
-import "../../types-Cz8hNch2.mjs";
-import "../../relations-G2ta7GIl.mjs";
-import "../../index-M37iz29I.mjs";
-import "../../runner-BaADli8l.mjs";
-import "../../index-MGw47uWq.mjs";
-import "../../types-C8oz_ayJ.mjs";
-import "../../hreflang-BaLCNcDx.mjs";
-import "../../validate-C3oSmA7F.mjs";
+import "../../options-DRe1pIBL.mjs";
+import "../../types-CAGdePf3.mjs";
+import "../../types-Cs-TFLNf.mjs";
+import "../../relations-DItI3MN9.mjs";
+import "../../index-C3Y-rsyN.mjs";
+import "../../runner-CgQbELYC.mjs";
+import "../../index-Cof4-Fab.mjs";
+import "../../types-DefV3OiO.mjs";
+import "../../hreflang-D3Uehfv2.mjs";
+import "../../validate-DeGtBN84.mjs";
 import { EmDashHandlers } from "../types.mjs";
 import { User } from "@emdash-cms/auth";
 import * as astro from "astro";

package/dist/astro/middleware/auth.mjs

@@ -1,12 +1,12 @@
 import "../../after-CBU2vkoO.mjs";
-import "../../base64-B-PsqheR.mjs";
-import "../../types-Cd8iuS1J.mjs";
-import { t as apiError } from "../../error-oh_9i6bR.mjs";
-import { r as getPublicOrigin } from "../../public-url-Ox9oOlgp.mjs";
-import { t as getAuthMode } from "../../mode-BWyTBe3I.mjs";
-import { t as resolveSessionUser } from "../../session-user-BvM9-zNl.mjs";
-import { i as hasScope } from "../../api-tokens-Dai9dND0.mjs";
-import { a as resolveApiToken, o as resolveOAuthToken } from "../../api-tokens-CSND0i1z.mjs";
+import "../../base64-CvLhUKQv.mjs";
+import "../../types-CQPWhPxE.mjs";
+import { t as apiError } from "../../error-DupyJZE2.mjs";
+import { r as getPublicOrigin } from "../../public-url-CWoFhQT8.mjs";
+import { t as getAuthMode } from "../../mode-Bpe-tNNy.mjs";
+import { t as resolveSessionUser } from "../../session-user-BzVemLkw.mjs";
+import { i as hasScope } from "../../api-tokens-CyTsLszZ.mjs";
+import { a as resolveApiToken, o as resolveOAuthToken } from "../../api-tokens-CFXu8F_2.mjs";
 import { ulid } from "ulidx";
 import { defineMiddleware } from "astro:middleware";
 import virtualConfig from "virtual:emdash/config";

package/dist/astro/middleware/media-usage-write-fence.d.mts

@@ -0,0 +1,7 @@
+import * as astro from "astro";
+
+//#region src/astro/middleware/media-usage-write-fence.d.ts
+declare const onRequest: astro.MiddlewareHandler;
+//#endregion
+export { onRequest as default, onRequest };
+//# sourceMappingURL=media-usage-write-fence.d.mts.map

package/dist/astro/middleware/media-usage-write-fence.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"media-usage-write-fence.d.mts","names":[],"sources":["../../../src/astro/middleware/media-usage-write-fence.ts"],"mappings":";;;cAea,SAAA,EAKX,KAAA,CALoB,iBAAA"}

package/dist/astro/middleware/media-usage-write-fence.mjs

@@ -0,0 +1,35 @@
+import "../../dialect-helpers-BSbfaO3F.mjs";
+import "../../base64-CvLhUKQv.mjs";
+import "../../types-CQPWhPxE.mjs";
+import "../../error-DupyJZE2.mjs";
+import { r as checkMediaUsageActivationWriteFence } from "../../media-usage-write-fence-aHEgN1zB.mjs";
+import { defineMiddleware } from "astro:middleware";
+
+//#region src/astro/middleware/media-usage-write-fence.ts
+const FENCED_WRITE_PATHS = [
+	"/_emdash/api/content",
+	"/_emdash/api/schema",
+	"/_emdash/api/admin/media-usage/repair",
+	"/_emdash/api/revisions",
+	"/_emdash/api/import",
+	"/_emdash/api/mcp"
+];
+const SAFE_METHODS = new Set([
+	"GET",
+	"HEAD",
+	"OPTIONS"
+]);
+const onRequest = defineMiddleware(async (context, next) => {
+	if (!isFencedWriteRequest(context.request.method, context.url.pathname)) return next();
+	const db = context.locals.emdash?.db;
+	if (!db) return next();
+	return await checkMediaUsageActivationWriteFence(db) ?? next();
+});
+function isFencedWriteRequest(method, pathname) {
+	if (SAFE_METHODS.has(method.toUpperCase())) return false;
+	return FENCED_WRITE_PATHS.some((prefix) => pathname === prefix || pathname.startsWith(`${prefix}/`));
+}
+
+//#endregion
+export { onRequest as default, onRequest };
+//# sourceMappingURL=media-usage-write-fence.mjs.map

package/dist/astro/middleware/media-usage-write-fence.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"media-usage-write-fence.mjs","names":[],"sources":["../../../src/astro/middleware/media-usage-write-fence.ts"],"sourcesContent":["import { defineMiddleware } from \"astro:middleware\";\n\nimport { checkMediaUsageActivationWriteFence } from \"#api/media-usage-write-fence.js\";\n\nconst FENCED_WRITE_PATHS = [\n\t\"/_emdash/api/content\",\n\t\"/_emdash/api/schema\",\n\t\"/_emdash/api/admin/media-usage/repair\",\n\t\"/_emdash/api/revisions\",\n\t\"/_emdash/api/import\",\n\t\"/_emdash/api/mcp\",\n] as const;\n\nconst SAFE_METHODS = new Set([\"GET\", \"HEAD\", \"OPTIONS\"]);\n\nexport const onRequest = defineMiddleware(async (context, next) => {\n\tif (!isFencedWriteRequest(context.request.method, context.url.pathname)) return next();\n\tconst db = context.locals.emdash?.db;\n\tif (!db) return next();\n\treturn (await checkMediaUsageActivationWriteFence(db)) ?? next();\n});\n\nfunction isFencedWriteRequest(method: string, pathname: string): boolean {\n\tif (SAFE_METHODS.has(method.toUpperCase())) return false;\n\treturn FENCED_WRITE_PATHS.some(\n\t\t(prefix) => pathname === prefix || pathname.startsWith(`${prefix}/`),\n\t);\n}\n\nexport default onRequest;\n"],"mappings":";;;;;;;;AAIA,MAAM,qBAAqB;CAC1B;CACA;CACA;CACA;CACA;CACA;CACA;AAED,MAAM,eAAe,IAAI,IAAI;CAAC;CAAO;CAAQ;CAAU,CAAC;AAExD,MAAa,YAAY,iBAAiB,OAAO,SAAS,SAAS;AAClE,KAAI,CAAC,qBAAqB,QAAQ,QAAQ,QAAQ,QAAQ,IAAI,SAAS,CAAE,QAAO,MAAM;CACtF,MAAM,KAAK,QAAQ,OAAO,QAAQ;AAClC,KAAI,CAAC,GAAI,QAAO,MAAM;AACtB,QAAQ,MAAM,oCAAoC,GAAG,IAAK,MAAM;EAC/D;AAEF,SAAS,qBAAqB,QAAgB,UAA2B;AACxE,KAAI,aAAa,IAAI,OAAO,aAAa,CAAC,CAAE,QAAO;AACnD,QAAO,mBAAmB,MACxB,WAAW,aAAa,UAAU,SAAS,WAAW,GAAG,OAAO,GAAG,CACpE"}

package/dist/astro/middleware/redirect.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"redirect.d.mts","names":[],"sources":["../../../src/astro/middleware/redirect.ts"],"mappings":";;;;;;AAmCA;;;;;;;;;;;;cAAa,SAAA,EAyFX,KAAA,CAzFoB,iBAAA"}
+{"version":3,"file":"redirect.d.mts","names":[],"sources":["../../../src/astro/middleware/redirect.ts"],"mappings":";;;;;;AAmCA;;;;;;;;;;;;cAAa,SAAA,EAmGX,KAAA,CAnGoB,iBAAA"}

package/dist/astro/middleware/redirect.mjs

@@ -1,11 +1,12 @@
 import "../../dialect-helpers-BSbfaO3F.mjs";
+import "../../config-C3EBstHi.mjs";
 import "../../after-CBU2vkoO.mjs";
-import "../../base64-B-PsqheR.mjs";
-import "../../types-Cd8iuS1J.mjs";
-import { t as RedirectRepository } from "../../redirect-DIJxXKOG.mjs";
-import { i as matchCachedPatterns, r as loadCachedRedirects } from "../../cache-C9FptTFR.mjs";
-import { o as getDb } from "../../loader-CGugY7Zl.mjs";
-import { n as isTerminalStatus } from "../../status-CIsmlC1E.mjs";
+import "../../base64-CvLhUKQv.mjs";
+import "../../types-CQPWhPxE.mjs";
+import { t as RedirectRepository } from "../../redirect-COsS6SWJ.mjs";
+import { i as matchCachedPatterns, r as loadCachedRedirects } from "../../cache-CBJaDy_E.mjs";
+import { s as getDb } from "../../loader-DLBqRiGP.mjs";
+import { n as isTerminalStatus } from "../../status-CWVYpbD8.mjs";
 import { defineMiddleware } from "astro:middleware";
 
 //#region src/astro/middleware/redirect.ts
@@ -73,7 +74,9 @@ const onRequest = defineMiddleware(async (context, next) => {
 			return context.redirect(destination, code);
 		}
 		const response = await next();
-		if (response.status === 404) {
+		const location = response.headers.get("location");
+		const missedByRedirect = isRedirectCode(response.status) && (location === "/404" || location === "/404/");
+		if (response.status === 404 && pathname !== "/404" && pathname !== "/404/" || missedByRedirect) {
 			const referrer = context.request.headers.get("referer") ?? null;
 			const userAgent = context.request.headers.get("user-agent") ?? null;
 			repo.log404({

package/dist/astro/middleware/redirect.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"redirect.mjs","names":[],"sources":["../../../src/astro/middleware/redirect.ts"],"sourcesContent":["/**\n * Redirect middleware\n *\n * Intercepts incoming requests and checks for matching redirect rules.\n * Runs after runtime init (needs db) but before setup/auth (should handle\n * ALL routes, including public ones, and should be fast).\n *\n * Skip paths:\n * - /_emdash/* (admin UI, API routes, auth endpoints)\n * - /_image (Astro image optimization)\n * - Static assets (files with extensions)\n *\n * 404 logging happens post-response: if next() returns 404 and the path\n * wasn't already matched by a redirect, log it.\n */\n\nimport { defineMiddleware } from \"astro:middleware\";\n\nimport { RedirectRepository } from \"../../database/repositories/redirect.js\";\nimport { getDb } from \"../../loader.js\";\nimport { loadCachedRedirects, matchCachedPatterns } from \"../../redirects/cache.js\";\nimport { isTerminalStatus } from \"../../redirects/status.js\";\n\n/** Paths that should never be intercepted by redirects */\nconst SKIP_PREFIXES = [\"/_emdash\", \"/_image\"];\n\n/** Static asset extensions -- don't redirect file requests */\nconst ASSET_EXTENSION = /\\.\\w{1,10}$/;\n\ntype RedirectCode = 301 | 302 | 303 | 307 | 308;\n\nfunction isRedirectCode(code: number): code is RedirectCode {\n\treturn code === 301 || code === 302 || code === 303 || code === 307 || code === 308;\n}\n\nexport const onRequest = defineMiddleware(async (context, next) => {\n\tconst { pathname } = context.url;\n\n\t// Skip internal paths and static assets\n\tif (SKIP_PREFIXES.some((prefix) => pathname.startsWith(prefix))) {\n\t\treturn next();\n\t}\n\tif (ASSET_EXTENSION.test(pathname)) {\n\t\treturn next();\n\t}\n\n\t// Public visitors hit the runtime's anonymous fast path, which intentionally\n\t// omits `db` from `locals.emdash` to keep the public render boundary minimal\n\t// (issue #808). Fall back to `getDb()`, which transparently returns the\n\t// per-request scoped db (set in ALS by the runtime middleware) or the\n\t// singleton — same path the loader and template helpers use.\n\tlet db = context.locals.emdash?.db;\n\tif (!db) {\n\t\ttry {\n\t\t\tdb = await getDb();\n\t\t} catch {\n\t\t\treturn next();\n\t\t}\n\t}\n\n\ttry {\n\t\tconst repo = new RedirectRepository(db);\n\n\t\t// One query loads both exact and pattern rules into the cache; warm\n\t\t// requests issue zero queries. Empty-redirect sites cache an empty\n\t\t// Map + array, so the next request returns immediately without probing.\n\t\tconst cached = await loadCachedRedirects(() => repo.findAllEnabled());\n\n\t\t// 1. Exact match (O(1) Map lookup)\n\t\tlet exact = cached.exact.get(pathname);\n\t\tif (!exact && pathname.length > 1) {\n\t\t\tconst alt = pathname.endsWith(\"/\") ? pathname.slice(0, -1) : `${pathname}/`;\n\t\t\texact = cached.exact.get(alt);\n\t\t}\n\t\tif (exact) {\n\t\t\t// Terminal statuses (410 Gone / 451): serve the status directly,\n\t\t\t// with no Location header.\n\t\t\tif (isTerminalStatus(exact.type)) {\n\t\t\t\trepo.recordHit(exact.id).catch(() => {});\n\t\t\t\treturn new Response(null, { status: exact.type });\n\t\t\t}\n\t\t\tconst dest = exact.destination;\n\t\t\tif (dest.startsWith(\"//\") || dest.startsWith(\"/\\\\\")) return next();\n\t\t\trepo.recordHit(exact.id).catch(() => {});\n\t\t\tconst code = isRedirectCode(exact.type) ? exact.type : 301;\n\t\t\treturn context.redirect(dest, code);\n\t\t}\n\n\t\t// 2. Pattern match (compile once, match every request)\n\t\tconst patternMatch = matchCachedPatterns(cached.patterns, pathname);\n\t\tif (patternMatch) {\n\t\t\tconst { redirect, destination } = patternMatch;\n\t\t\t// Terminal statuses (410 Gone / 451): serve the status directly.\n\t\t\tif (isTerminalStatus(redirect.type)) {\n\t\t\t\trepo.recordHit(redirect.id).catch(() => {});\n\t\t\t\treturn new Response(null, { status: redirect.type });\n\t\t\t}\n\t\t\tif (destination.startsWith(\"//\") || destination.startsWith(\"/\\\\\")) return next();\n\t\t\trepo.recordHit(redirect.id).catch(() => {});\n\t\t\tconst code = isRedirectCode(redirect.type) ? redirect.type : 301;\n\t\t\treturn context.redirect(destination, code);\n\t\t}\n\n\t\t// No redirect matched -- proceed and check for 404\n\t\tconst response = await next();\n\n\t\t// Log 404s for unmatched paths (fire-and-forget)\n\t\tif (response.status === 404) {\n\t\t\tconst referrer = context.request.headers.get(\"referer\") ?? null;\n\t\t\tconst userAgent = context.request.headers.get(\"user-agent\") ?? null;\n\t\t\trepo\n\t\t\t\t.log404({\n\t\t\t\t\tpath: pathname,\n\t\t\t\t\treferrer,\n\t\t\t\t\tuserAgent,\n\t\t\t\t})\n\t\t\t\t.catch(() => {});\n\t\t}\n\n\t\treturn response;\n\t} catch {\n\t\t// If the redirects table doesn't exist yet (pre-migration), skip silently\n\t\treturn next();\n\t}\n});\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;AAwBA,MAAM,gBAAgB,CAAC,YAAY,UAAU;;AAG7C,MAAM,kBAAkB;AAIxB,SAAS,eAAe,MAAoC;AAC3D,QAAO,SAAS,OAAO,SAAS,OAAO,SAAS,OAAO,SAAS,OAAO,SAAS;;AAGjF,MAAa,YAAY,iBAAiB,OAAO,SAAS,SAAS;CAClE,MAAM,EAAE,aAAa,QAAQ;AAG7B,KAAI,cAAc,MAAM,WAAW,SAAS,WAAW,OAAO,CAAC,CAC9D,QAAO,MAAM;AAEd,KAAI,gBAAgB,KAAK,SAAS,CACjC,QAAO,MAAM;CAQd,IAAI,KAAK,QAAQ,OAAO,QAAQ;AAChC,KAAI,CAAC,GACJ,KAAI;AACH,OAAK,MAAM,OAAO;SACX;AACP,SAAO,MAAM;;AAIf,KAAI;EACH,MAAM,OAAO,IAAI,mBAAmB,GAAG;EAKvC,MAAM,SAAS,MAAM,0BAA0B,KAAK,gBAAgB,CAAC;EAGrE,IAAI,QAAQ,OAAO,MAAM,IAAI,SAAS;AACtC,MAAI,CAAC,SAAS,SAAS,SAAS,GAAG;GAClC,MAAM,MAAM,SAAS,SAAS,IAAI,GAAG,SAAS,MAAM,GAAG,GAAG,GAAG,GAAG,SAAS;AACzE,WAAQ,OAAO,MAAM,IAAI,IAAI;;AAE9B,MAAI,OAAO;AAGV,OAAI,iBAAiB,MAAM,KAAK,EAAE;AACjC,SAAK,UAAU,MAAM,GAAG,CAAC,YAAY,GAAG;AACxC,WAAO,IAAI,SAAS,MAAM,EAAE,QAAQ,MAAM,MAAM,CAAC;;GAElD,MAAM,OAAO,MAAM;AACnB,OAAI,KAAK,WAAW,KAAK,IAAI,KAAK,WAAW,MAAM,CAAE,QAAO,MAAM;AAClE,QAAK,UAAU,MAAM,GAAG,CAAC,YAAY,GAAG;GACxC,MAAM,OAAO,eAAe,MAAM,KAAK,GAAG,MAAM,OAAO;AACvD,UAAO,QAAQ,SAAS,MAAM,KAAK;;EAIpC,MAAM,eAAe,oBAAoB,OAAO,UAAU,SAAS;AACnE,MAAI,cAAc;GACjB,MAAM,EAAE,UAAU,gBAAgB;AAElC,OAAI,iBAAiB,SAAS,KAAK,EAAE;AACpC,SAAK,UAAU,SAAS,GAAG,CAAC,YAAY,GAAG;AAC3C,WAAO,IAAI,SAAS,MAAM,EAAE,QAAQ,SAAS,MAAM,CAAC;;AAErD,OAAI,YAAY,WAAW,KAAK,IAAI,YAAY,WAAW,MAAM,CAAE,QAAO,MAAM;AAChF,QAAK,UAAU,SAAS,GAAG,CAAC,YAAY,GAAG;GAC3C,MAAM,OAAO,eAAe,SAAS,KAAK,GAAG,SAAS,OAAO;AAC7D,UAAO,QAAQ,SAAS,aAAa,KAAK;;EAI3C,MAAM,WAAW,MAAM,MAAM;AAG7B,MAAI,SAAS,WAAW,KAAK;GAC5B,MAAM,WAAW,QAAQ,QAAQ,QAAQ,IAAI,UAAU,IAAI;GAC3D,MAAM,YAAY,QAAQ,QAAQ,QAAQ,IAAI,aAAa,IAAI;AAC/D,QACE,OAAO;IACP,MAAM;IACN;IACA;IACA,CAAC,CACD,YAAY,GAAG;;AAGlB,SAAO;SACA;AAEP,SAAO,MAAM;;EAEb"}
+{"version":3,"file":"redirect.mjs","names":[],"sources":["../../../src/astro/middleware/redirect.ts"],"sourcesContent":["/**\n * Redirect middleware\n *\n * Intercepts incoming requests and checks for matching redirect rules.\n * Runs after runtime init (needs db) but before setup/auth (should handle\n * ALL routes, including public ones, and should be fast).\n *\n * Skip paths:\n * - /_emdash/* (admin UI, API routes, auth endpoints)\n * - /_image (Astro image optimization)\n * - Static assets (files with extensions)\n *\n * 404 logging happens post-response: if next() returns 404 and the path\n * wasn't already matched by a redirect, log it.\n */\n\nimport { defineMiddleware } from \"astro:middleware\";\n\nimport { RedirectRepository } from \"../../database/repositories/redirect.js\";\nimport { getDb } from \"../../loader.js\";\nimport { loadCachedRedirects, matchCachedPatterns } from \"../../redirects/cache.js\";\nimport { isTerminalStatus } from \"../../redirects/status.js\";\n\n/** Paths that should never be intercepted by redirects */\nconst SKIP_PREFIXES = [\"/_emdash\", \"/_image\"];\n\n/** Static asset extensions -- don't redirect file requests */\nconst ASSET_EXTENSION = /\\.\\w{1,10}$/;\n\ntype RedirectCode = 301 | 302 | 303 | 307 | 308;\n\nfunction isRedirectCode(code: number): code is RedirectCode {\n\treturn code === 301 || code === 302 || code === 303 || code === 307 || code === 308;\n}\n\nexport const onRequest = defineMiddleware(async (context, next) => {\n\tconst { pathname } = context.url;\n\n\t// Skip internal paths and static assets\n\tif (SKIP_PREFIXES.some((prefix) => pathname.startsWith(prefix))) {\n\t\treturn next();\n\t}\n\tif (ASSET_EXTENSION.test(pathname)) {\n\t\treturn next();\n\t}\n\n\t// Public visitors hit the runtime's anonymous fast path, which intentionally\n\t// omits `db` from `locals.emdash` to keep the public render boundary minimal\n\t// (issue #808). Fall back to `getDb()`, which transparently returns the\n\t// per-request scoped db (set in ALS by the runtime middleware) or the\n\t// singleton — same path the loader and template helpers use.\n\tlet db = context.locals.emdash?.db;\n\tif (!db) {\n\t\ttry {\n\t\t\tdb = await getDb();\n\t\t} catch {\n\t\t\treturn next();\n\t\t}\n\t}\n\n\ttry {\n\t\tconst repo = new RedirectRepository(db);\n\n\t\t// One query loads both exact and pattern rules into the cache; warm\n\t\t// requests issue zero queries. Empty-redirect sites cache an empty\n\t\t// Map + array, so the next request returns immediately without probing.\n\t\tconst cached = await loadCachedRedirects(() => repo.findAllEnabled());\n\n\t\t// 1. Exact match (O(1) Map lookup)\n\t\tlet exact = cached.exact.get(pathname);\n\t\tif (!exact && pathname.length > 1) {\n\t\t\tconst alt = pathname.endsWith(\"/\") ? pathname.slice(0, -1) : `${pathname}/`;\n\t\t\texact = cached.exact.get(alt);\n\t\t}\n\t\tif (exact) {\n\t\t\t// Terminal statuses (410 Gone / 451): serve the status directly,\n\t\t\t// with no Location header.\n\t\t\tif (isTerminalStatus(exact.type)) {\n\t\t\t\trepo.recordHit(exact.id).catch(() => {});\n\t\t\t\treturn new Response(null, { status: exact.type });\n\t\t\t}\n\t\t\tconst dest = exact.destination;\n\t\t\tif (dest.startsWith(\"//\") || dest.startsWith(\"/\\\\\")) return next();\n\t\t\trepo.recordHit(exact.id).catch(() => {});\n\t\t\tconst code = isRedirectCode(exact.type) ? exact.type : 301;\n\t\t\treturn context.redirect(dest, code);\n\t\t}\n\n\t\t// 2. Pattern match (compile once, match every request)\n\t\tconst patternMatch = matchCachedPatterns(cached.patterns, pathname);\n\t\tif (patternMatch) {\n\t\t\tconst { redirect, destination } = patternMatch;\n\t\t\t// Terminal statuses (410 Gone / 451): serve the status directly.\n\t\t\tif (isTerminalStatus(redirect.type)) {\n\t\t\t\trepo.recordHit(redirect.id).catch(() => {});\n\t\t\t\treturn new Response(null, { status: redirect.type });\n\t\t\t}\n\t\t\tif (destination.startsWith(\"//\") || destination.startsWith(\"/\\\\\")) return next();\n\t\t\trepo.recordHit(redirect.id).catch(() => {});\n\t\t\tconst code = isRedirectCode(redirect.type) ? redirect.type : 301;\n\t\t\treturn context.redirect(destination, code);\n\t\t}\n\n\t\t// No redirect matched -- proceed and check for 404\n\t\tconst response = await next();\n\n\t\t// Log misses (fire-and-forget) under the path the visitor requested.\n\t\t// Two shapes count as a miss: an unmatched route rendering the error\n\t\t// page with status 404, and a matched route answering a content miss\n\t\t// with a redirect to /404 (the documented template pattern) — there the\n\t\t// missed path exists only on this first pass, before the browser\n\t\t// follows the redirect. The error page itself is never logged: /404\n\t\t// answers 404 by design and carries no path information.\n\t\tconst location = response.headers.get(\"location\");\n\t\tconst missedByRedirect =\n\t\t\tisRedirectCode(response.status) && (location === \"/404\" || location === \"/404/\");\n\t\tconst missedDirectly = response.status === 404 && pathname !== \"/404\" && pathname !== \"/404/\";\n\t\tif (missedDirectly || missedByRedirect) {\n\t\t\tconst referrer = context.request.headers.get(\"referer\") ?? null;\n\t\t\tconst userAgent = context.request.headers.get(\"user-agent\") ?? null;\n\t\t\trepo\n\t\t\t\t.log404({\n\t\t\t\t\tpath: pathname,\n\t\t\t\t\treferrer,\n\t\t\t\t\tuserAgent,\n\t\t\t\t})\n\t\t\t\t.catch(() => {});\n\t\t}\n\n\t\treturn response;\n\t} catch {\n\t\t// If the redirects table doesn't exist yet (pre-migration), skip silently\n\t\treturn next();\n\t}\n});\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;AAwBA,MAAM,gBAAgB,CAAC,YAAY,UAAU;;AAG7C,MAAM,kBAAkB;AAIxB,SAAS,eAAe,MAAoC;AAC3D,QAAO,SAAS,OAAO,SAAS,OAAO,SAAS,OAAO,SAAS,OAAO,SAAS;;AAGjF,MAAa,YAAY,iBAAiB,OAAO,SAAS,SAAS;CAClE,MAAM,EAAE,aAAa,QAAQ;AAG7B,KAAI,cAAc,MAAM,WAAW,SAAS,WAAW,OAAO,CAAC,CAC9D,QAAO,MAAM;AAEd,KAAI,gBAAgB,KAAK,SAAS,CACjC,QAAO,MAAM;CAQd,IAAI,KAAK,QAAQ,OAAO,QAAQ;AAChC,KAAI,CAAC,GACJ,KAAI;AACH,OAAK,MAAM,OAAO;SACX;AACP,SAAO,MAAM;;AAIf,KAAI;EACH,MAAM,OAAO,IAAI,mBAAmB,GAAG;EAKvC,MAAM,SAAS,MAAM,0BAA0B,KAAK,gBAAgB,CAAC;EAGrE,IAAI,QAAQ,OAAO,MAAM,IAAI,SAAS;AACtC,MAAI,CAAC,SAAS,SAAS,SAAS,GAAG;GAClC,MAAM,MAAM,SAAS,SAAS,IAAI,GAAG,SAAS,MAAM,GAAG,GAAG,GAAG,GAAG,SAAS;AACzE,WAAQ,OAAO,MAAM,IAAI,IAAI;;AAE9B,MAAI,OAAO;AAGV,OAAI,iBAAiB,MAAM,KAAK,EAAE;AACjC,SAAK,UAAU,MAAM,GAAG,CAAC,YAAY,GAAG;AACxC,WAAO,IAAI,SAAS,MAAM,EAAE,QAAQ,MAAM,MAAM,CAAC;;GAElD,MAAM,OAAO,MAAM;AACnB,OAAI,KAAK,WAAW,KAAK,IAAI,KAAK,WAAW,MAAM,CAAE,QAAO,MAAM;AAClE,QAAK,UAAU,MAAM,GAAG,CAAC,YAAY,GAAG;GACxC,MAAM,OAAO,eAAe,MAAM,KAAK,GAAG,MAAM,OAAO;AACvD,UAAO,QAAQ,SAAS,MAAM,KAAK;;EAIpC,MAAM,eAAe,oBAAoB,OAAO,UAAU,SAAS;AACnE,MAAI,cAAc;GACjB,MAAM,EAAE,UAAU,gBAAgB;AAElC,OAAI,iBAAiB,SAAS,KAAK,EAAE;AACpC,SAAK,UAAU,SAAS,GAAG,CAAC,YAAY,GAAG;AAC3C,WAAO,IAAI,SAAS,MAAM,EAAE,QAAQ,SAAS,MAAM,CAAC;;AAErD,OAAI,YAAY,WAAW,KAAK,IAAI,YAAY,WAAW,MAAM,CAAE,QAAO,MAAM;AAChF,QAAK,UAAU,SAAS,GAAG,CAAC,YAAY,GAAG;GAC3C,MAAM,OAAO,eAAe,SAAS,KAAK,GAAG,SAAS,OAAO;AAC7D,UAAO,QAAQ,SAAS,aAAa,KAAK;;EAI3C,MAAM,WAAW,MAAM,MAAM;EAS7B,MAAM,WAAW,SAAS,QAAQ,IAAI,WAAW;EACjD,MAAM,mBACL,eAAe,SAAS,OAAO,KAAK,aAAa,UAAU,aAAa;AAEzE,MADuB,SAAS,WAAW,OAAO,aAAa,UAAU,aAAa,WAChE,kBAAkB;GACvC,MAAM,WAAW,QAAQ,QAAQ,QAAQ,IAAI,UAAU,IAAI;GAC3D,MAAM,YAAY,QAAQ,QAAQ,QAAQ,IAAI,aAAa,IAAI;AAC/D,QACE,OAAO;IACP,MAAM;IACN;IACA;IACA,CAAC,CACD,YAAY,GAAG;;AAGlB,SAAO;SACA;AAEP,SAAO,MAAM;;EAEb"}

package/dist/astro/middleware/request-context.mjs

@@ -1,9 +1,9 @@
 import "../../after-CBU2vkoO.mjs";
 import { getRequestContext, runWithContext } from "../../request-context.mjs";
-import "../../base64-B-PsqheR.mjs";
+import "../../base64-CvLhUKQv.mjs";
 import "../../options-CBXIHUoT.mjs";
-import { n as parseContentId, r as verifyPreviewToken } from "../../tokens-DagaJGK8.mjs";
-import { i as resolveSecretsCached } from "../../secrets-DLd8RXee.mjs";
+import { n as parseContentId, r as verifyPreviewToken } from "../../tokens-C39klX8R.mjs";
+import { i as resolveSecretsCached } from "../../secrets-dtYs2hDo.mjs";
 import { defineMiddleware } from "astro:middleware";
 import virtualConfig from "virtual:emdash/config";
 

package/dist/astro/middleware/setup.mjs

@@ -1,4 +1,4 @@
-import { t as getAuthMode } from "../../mode-BWyTBe3I.mjs";
+import { t as getAuthMode } from "../../mode-Bpe-tNNy.mjs";
 import { defineMiddleware } from "astro:middleware";
 
 //#region src/astro/middleware/setup.ts

package/dist/astro/middleware.d.mts

@@ -1,13 +1,13 @@
-import "../options-CA4eVX6P.mjs";
-import "../types-Dc4ntQjQ.mjs";
-import "../types-Cz8hNch2.mjs";
-import "../relations-G2ta7GIl.mjs";
-import { Qn as PublishedRef, Xn as EmDashRuntime } from "../index-M37iz29I.mjs";
-import "../runner-BaADli8l.mjs";
-import "../index-MGw47uWq.mjs";
-import "../types-C8oz_ayJ.mjs";
-import "../hreflang-BaLCNcDx.mjs";
-import "../validate-C3oSmA7F.mjs";
+import "../options-DRe1pIBL.mjs";
+import "../types-CAGdePf3.mjs";
+import "../types-Cs-TFLNf.mjs";
+import "../relations-DItI3MN9.mjs";
+import { Qn as MediaUsageMaintenanceResult, Zn as EmDashRuntime, er as PublishedRef } from "../index-C3Y-rsyN.mjs";
+import "../runner-CgQbELYC.mjs";
+import "../index-Cof4-Fab.mjs";
+import "../types-DefV3OiO.mjs";
+import "../hreflang-D3Uehfv2.mjs";
+import "../validate-DeGtBN84.mjs";
 import * as astro from "astro";
 
 //#region src/astro/middleware.d.ts
@@ -30,6 +30,7 @@ declare function runScheduledTasks(options?: {
 }): Promise<{
   published: PublishedRef[];
 }>;
+declare function runScheduledMediaUsageTasks(): Promise<MediaUsageMaintenanceResult>;
 /**
  * Run a callback against the EmDash runtime outside any HTTP request — from a
  * Cloudflare Queue consumer, a `scheduled()` handler, or any other
@@ -68,5 +69,5 @@ declare function runScheduledTasks(options?: {
 declare function withEmDashRuntime<T>(run: (runtime: EmDashRuntime) => T | Promise<T>): Promise<T>;
 declare const onRequest: astro.MiddlewareHandler;
 //#endregion
-export { type EmDashRuntime, onRequest as default, onRequest, runScheduledTasks, withEmDashRuntime };
+export { type EmDashRuntime, onRequest as default, onRequest, runScheduledMediaUsageTasks, runScheduledTasks, withEmDashRuntime };
 //# sourceMappingURL=middleware.d.mts.map

package/dist/astro/middleware.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"middleware.d.mts","names":[],"sources":["../../src/astro/middleware.ts"],"mappings":";;;;;;;;;;;;;;;;;AAsRA;;;;;;;;;;iBAAsB,iBAAA,CACrB,OAAA;EAAW,WAAA,IAAe,IAAA,EAAM,YAAA,OAAmB,OAAA;AAAA,IACjD,OAAA;EAAU,SAAA,EAAW,YAAA;AAAA;;;;;AAyCxB;;;;;;;;;;;;;;;;;;;;;;AA8LA;;;;;;;;;iBA9LsB,iBAAA,GAAA,CACrB,GAAA,GAAM,OAAA,EAAS,aAAA,KAAkB,CAAA,GAAI,OAAA,CAAQ,CAAA,IAC3C,OAAA,CAAQ,CAAA;AAAA,cA4LE,SAAA,EA0bX,KAAA,CA1boB,iBAAA"}
+{"version":3,"file":"middleware.d.mts","names":[],"sources":["../../src/astro/middleware.ts"],"mappings":";;;;;;;;;;;;;;;;;AA2RA;;;;;;;;;;iBAAsB,iBAAA,CACrB,OAAA;EAAW,WAAA,IAAe,IAAA,EAAM,YAAA,OAAmB,OAAA;AAAA,IACjD,OAAA;EAAU,SAAA,EAAW,YAAA;AAAA;AAAA,iBAMF,2BAAA,CAAA,GAA+B,OAAA,CAAQ,2BAAA;;;;AAA7D;;;;;AAyCA;;;;;;;;;;;;;;;;;;;;;;AAoPA;;;;;iBApPsB,iBAAA,GAAA,CACrB,GAAA,GAAM,OAAA,EAAS,aAAA,KAAkB,CAAA,GAAI,OAAA,CAAQ,CAAA,IAC3C,OAAA,CAAQ,CAAA;AAAA,cAkPE,SAAA,EA4bX,KAAA,CA5boB,iBAAA"}