emdash 0.38.0 → 0.39.0

package/dist/cron-BcR3RN4K.mjs

@@ -0,0 +1,282 @@
+import { sql } from "kysely";
+import { ulid } from "ulidx";
+import { Cron } from "croner";
+
+//#region src/plugins/cron.ts
+/**
+* Plugin Cron System
+*
+* Provides scheduled task execution for plugins:
+* - CronExecutor: claims overdue tasks, invokes per-plugin cron hook, updates next run.
+* - CronAccessImpl: per-plugin API for schedule/cancel/list.
+*
+*/
+/** Stale lock threshold in minutes */
+const STALE_LOCK_MINUTES = 10;
+const ISO_DATETIME_PATTERN = /^\d{4}-\d{2}-\d{2}T\d{2}:\d{2}(?::\d{2}(?:\.\d+)?)?(?:Z|[+-]\d{2}:?\d{2})?$/;
+/**
+* Executes overdue cron tasks.
+*
+* Called by the platform driver: the NodeCronScheduler timer on Node, or the
+* Worker's `scheduled()` handler (via runScheduledTasks) on Cloudflare.
+* Stateless — all state lives in the database.
+*/
+var CronExecutor = class {
+	/**
+	* Resolves the database connection to use for this tick. A resolver (not a
+	* captured instance) so connection-backed adapters work across events: on
+	* Cloudflare the `scheduled()` handler installs an event-scoped connection
+	* in ALS, and this resolves to it instead of the per-isolate singleton
+	* whose socket belongs to an earlier request. Accepts a plain `Kysely` too
+	* (wrapped in a constant resolver) for callers/tests that don't need ALS.
+	*/
+	resolveDb;
+	constructor(db, invokeCronHook, now = () => /* @__PURE__ */ new Date()) {
+		this.invokeCronHook = invokeCronHook;
+		this.now = now;
+		this.resolveDb = typeof db === "function" ? db : () => db;
+	}
+	get db() {
+		return this.resolveDb();
+	}
+	/**
+	* Process all overdue tasks.
+	*
+	* 1. Atomically claim tasks whose next_run_at <= now, status = idle, enabled = 1.
+	* 2. For each claimed task, invoke the plugin's cron hook.
+	* 3. On success: compute next_run_at and reset to idle, or delete one-shots.
+	* 4. On failure: reset to idle (retry on next tick).
+	*/
+	async tick() {
+		const currentTime = this.now();
+		const now = currentTime.toISOString();
+		let processed = 0;
+		const claimed = await sql`
+			UPDATE _emdash_cron_tasks
+			SET status = 'running', locked_at = ${now}
+			WHERE id IN (
+				SELECT id FROM _emdash_cron_tasks
+				WHERE next_run_at <= ${now}
+				  AND status = 'idle'
+				  AND enabled = 1
+				ORDER BY next_run_at ASC
+				LIMIT 10
+			)
+			RETURNING id, plugin_id, task_name, schedule, is_oneshot, data, next_run_at
+		`.execute(this.db);
+		for (const task of claimed.rows) {
+			let parsedData;
+			if (task.data) try {
+				parsedData = JSON.parse(task.data);
+			} catch {
+				console.error(`[cron] Invalid JSON data for ${task.plugin_id}:${task.task_name}, skipping`);
+				await sql`
+						UPDATE _emdash_cron_tasks
+						SET status = 'idle', locked_at = NULL
+						WHERE id = ${task.id}
+					`.execute(this.db);
+				continue;
+			}
+			const event = {
+				name: task.task_name,
+				data: parsedData,
+				scheduledAt: task.next_run_at
+			};
+			let hookFailed = false;
+			try {
+				await this.invokeCronHook(task.plugin_id, event);
+			} catch (error) {
+				hookFailed = true;
+				console.error(`[cron] Hook failed for ${task.plugin_id}:${task.task_name}:`, error);
+			}
+			if (task.is_oneshot) if (hookFailed) {
+				const meta = parsedData?.__emdash != null && typeof parsedData.__emdash === "object" ? parsedData.__emdash : void 0;
+				const raw = meta?.retryCount;
+				const retryCount = typeof raw === "number" && Number.isFinite(raw) && raw > 0 ? Math.floor(raw) : 0;
+				const MAX_ONESHOT_RETRIES = 5;
+				if (retryCount >= MAX_ONESHOT_RETRIES) {
+					console.error(`[cron] One-shot task ${task.plugin_id}:${task.task_name} exceeded ${MAX_ONESHOT_RETRIES} retries, removing`);
+					await sql`
+						DELETE FROM _emdash_cron_tasks WHERE id = ${task.id}
+					`.execute(this.db);
+				} else {
+					const backoffMs = 6e4 * Math.pow(2, retryCount);
+					await sql`
+						UPDATE _emdash_cron_tasks
+						SET status = 'idle', locked_at = NULL, next_run_at = ${new Date(currentTime.getTime() + backoffMs).toISOString()}, data = ${JSON.stringify({
+						...parsedData,
+						__emdash: {
+							...meta,
+							retryCount: retryCount + 1
+						}
+					})}
+						WHERE id = ${task.id}
+					`.execute(this.db);
+				}
+			} else await sql`
+						DELETE FROM _emdash_cron_tasks WHERE id = ${task.id}
+					`.execute(this.db);
+			else await sql`
+					UPDATE _emdash_cron_tasks
+					SET status = 'idle',
+						locked_at = NULL,
+						last_run_at = ${now},
+						next_run_at = ${nextCronTime(task.schedule, currentTime)}
+					WHERE id = ${task.id}
+				`.execute(this.db);
+			processed++;
+		}
+		return processed;
+	}
+	/**
+	* Recover tasks stuck in 'running' for more than STALE_LOCK_MINUTES.
+	* These likely crashed mid-execution.
+	*/
+	async recoverStaleLocks() {
+		const result = await sql`
+			UPDATE _emdash_cron_tasks
+			SET status = 'idle', locked_at = NULL
+			WHERE status = 'running'
+			  AND locked_at < ${(/* @__PURE__ */ new Date(this.now().getTime() - STALE_LOCK_MINUTES * 60 * 1e3)).toISOString()}
+		`.execute(this.db);
+		return Number(result.numAffectedRows ?? 0);
+	}
+	/**
+	* Get the next due time across all enabled tasks.
+	* Returns null if no tasks are scheduled.
+	*/
+	async getNextDueTime() {
+		return (await sql`
+			SELECT MIN(next_run_at) as next
+			FROM _emdash_cron_tasks
+			WHERE status = 'idle' AND enabled = 1
+		`.execute(this.db)).rows[0]?.next ?? null;
+	}
+};
+/**
+* Per-plugin cron API implementation.
+* Scoped to a single plugin ID — plugins cannot see or modify other plugins' tasks.
+*/
+var CronAccessImpl = class {
+	constructor(db, pluginId, reschedule, now = () => /* @__PURE__ */ new Date()) {
+		this.db = db;
+		this.pluginId = pluginId;
+		this.reschedule = reschedule;
+		this.now = now;
+	}
+	async schedule(name, opts) {
+		validateTaskName(name);
+		validateSchedule(opts.schedule);
+		const oneshot = isOneShot(opts.schedule);
+		const nextRun = oneshot ? opts.schedule : nextCronTime(opts.schedule, this.now());
+		const dataJson = opts.data ? JSON.stringify(opts.data) : null;
+		await sql`
+			INSERT INTO _emdash_cron_tasks (id, plugin_id, task_name, schedule, is_oneshot, data, next_run_at, status, enabled)
+			VALUES (${ulid()}, ${this.pluginId}, ${name}, ${opts.schedule}, ${oneshot ? 1 : 0}, ${dataJson}, ${nextRun}, 'idle', 1)
+			ON CONFLICT (plugin_id, task_name) DO UPDATE SET
+				schedule = ${opts.schedule},
+				is_oneshot = ${oneshot ? 1 : 0},
+				data = ${dataJson},
+				next_run_at = ${nextRun},
+				status = CASE WHEN _emdash_cron_tasks.status = 'running' THEN 'running' ELSE 'idle' END,
+				locked_at = CASE WHEN _emdash_cron_tasks.status = 'running' THEN _emdash_cron_tasks.locked_at ELSE NULL END,
+				enabled = 1
+		`.execute(this.db);
+		this.reschedule();
+	}
+	async cancel(name) {
+		await sql`
+			DELETE FROM _emdash_cron_tasks
+			WHERE plugin_id = ${this.pluginId} AND task_name = ${name}
+		`.execute(this.db);
+		this.reschedule();
+	}
+	async list() {
+		return (await sql`
+			SELECT task_name, schedule, next_run_at, last_run_at
+			FROM _emdash_cron_tasks
+			WHERE plugin_id = ${this.pluginId} AND enabled = 1
+			ORDER BY next_run_at ASC
+		`.execute(this.db)).rows.map((row) => ({
+			name: row.task_name,
+			schedule: row.schedule,
+			nextRunAt: row.next_run_at,
+			lastRunAt: row.last_run_at
+		}));
+	}
+};
+/**
+* Enable or disable all cron tasks for a plugin.
+* Called by admin disable/enable endpoints and PluginManager lifecycle.
+* Gracefully handles the cron table not existing yet (pre-migration).
+*/
+async function setCronTasksEnabled(db, pluginId, enabled) {
+	try {
+		await sql`
+			UPDATE _emdash_cron_tasks
+			SET enabled = ${enabled ? 1 : 0}
+			WHERE plugin_id = ${pluginId}
+		`.execute(db);
+	} catch {}
+}
+/**
+* Compute the next fire time for a cron expression.
+* Supports standard cron (5-field), extended (6-field with seconds), and
+* aliases like @daily, @weekly, @hourly, @monthly, @yearly.
+*/
+function nextCronTime(expression, currentTime = /* @__PURE__ */ new Date()) {
+	const next = new Cron(expression).nextRun(currentTime);
+	if (!next) throw new Error(`Invalid cron expression or no future run: "${expression}"`);
+	return next.toISOString();
+}
+/**
+* Check whether a string is a valid cron expression.
+*/
+function isCronExpression(schedule) {
+	try {
+		new Cron(schedule);
+		return true;
+	} catch {
+		return false;
+	}
+}
+/**
+* Check if a schedule string is a one-shot (ISO 8601 datetime) rather than
+* a recurring cron expression.
+*
+* Recognizes the supported ISO date-time shape before consulting the cron
+* parser, which also accepts ISO timestamps. Other values are parsed as cron
+* first so expressions like "1-5 * * * *" are not misclassified as dates.
+*/
+function isOneShot(schedule) {
+	if (schedule.startsWith("@")) return false;
+	if (ISO_DATETIME_PATTERN.test(schedule)) return !isNaN(Date.parse(schedule));
+	if (isCronExpression(schedule)) return false;
+	return !isNaN(Date.parse(schedule));
+}
+/** Max length for a task name */
+const MAX_TASK_NAME_LENGTH = 128;
+/** Task name pattern: alphanumeric, dashes, underscores */
+const TASK_NAME_RE = /^[a-zA-Z][a-zA-Z0-9_-]*$/;
+/**
+* Validate a cron task name.
+* Must be non-empty, ≤128 chars, alphanumeric with dashes/underscores.
+*/
+function validateTaskName(name) {
+	if (!name || name.length > MAX_TASK_NAME_LENGTH) throw new Error(`Invalid task name: must be 1-${MAX_TASK_NAME_LENGTH} characters, got ${name.length}`);
+	if (!TASK_NAME_RE.test(name)) throw new Error(`Invalid task name "${name}": must start with a letter and contain only letters, numbers, dashes, or underscores`);
+}
+/**
+* Validate a schedule string at registration time.
+* Must be a valid cron expression or a parseable ISO 8601 datetime.
+*/
+function validateSchedule(schedule) {
+	if (!schedule || schedule.length > 256) throw new Error(`Invalid schedule: must be 1-256 characters, got ${schedule.length}`);
+	if (isCronExpression(schedule)) return;
+	const parsed = Date.parse(schedule);
+	if (isNaN(parsed)) throw new Error(`Invalid schedule "${schedule}": must be a valid cron expression or ISO 8601 datetime`);
+}
+
+//#endregion
+export { CronExecutor as n, setCronTasksEnabled as r, CronAccessImpl as t };
+//# sourceMappingURL=cron-BcR3RN4K.mjs.map

package/dist/cron-BcR3RN4K.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"cron-BcR3RN4K.mjs","names":[],"sources":["../src/plugins/cron.ts"],"sourcesContent":["/**\n * Plugin Cron System\n *\n * Provides scheduled task execution for plugins:\n * - CronExecutor: claims overdue tasks, invokes per-plugin cron hook, updates next run.\n * - CronAccessImpl: per-plugin API for schedule/cancel/list.\n *\n */\n\nimport { Cron } from \"croner\";\nimport type { Kysely } from \"kysely\";\nimport { sql } from \"kysely\";\nimport { ulid } from \"ulidx\";\n\nimport type { Database } from \"../database/types.js\";\nimport type { CronAccess, CronEvent, CronTaskInfo } from \"./types.js\";\n\n/** Stale lock threshold in minutes */\nconst STALE_LOCK_MINUTES = 10;\nconst ISO_DATETIME_PATTERN =\n\t/^\\d{4}-\\d{2}-\\d{2}T\\d{2}:\\d{2}(?::\\d{2}(?:\\.\\d+)?)?(?:Z|[+-]\\d{2}:?\\d{2})?$/;\n\n/**\n * Callback to invoke a plugin's cron hook.\n * Provided by PluginManager so CronExecutor stays decoupled from the hook pipeline.\n */\nexport type InvokeCronHookFn = (pluginId: string, event: CronEvent) => Promise<void>;\n\n/**\n * Callback to notify the scheduler that the next due time may have changed.\n */\nexport type RescheduleFn = () => void;\n\n// ─── CronExecutor ──────────────────────────────────────────────────────────\n\n/**\n * Executes overdue cron tasks.\n *\n * Called by the platform driver: the NodeCronScheduler timer on Node, or the\n * Worker's `scheduled()` handler (via runScheduledTasks) on Cloudflare.\n * Stateless — all state lives in the database.\n */\nexport class CronExecutor {\n\t/**\n\t * Resolves the database connection to use for this tick. A resolver (not a\n\t * captured instance) so connection-backed adapters work across events: on\n\t * Cloudflare the `scheduled()` handler installs an event-scoped connection\n\t * in ALS, and this resolves to it instead of the per-isolate singleton\n\t * whose socket belongs to an earlier request. Accepts a plain `Kysely` too\n\t * (wrapped in a constant resolver) for callers/tests that don't need ALS.\n\t */\n\tprivate readonly resolveDb: () => Kysely<Database>;\n\n\tconstructor(\n\t\tdb: Kysely<Database> | (() => Kysely<Database>),\n\t\tprivate invokeCronHook: InvokeCronHookFn,\n\t\tprivate readonly now: () => Date = () => new Date(),\n\t) {\n\t\tthis.resolveDb = typeof db === \"function\" ? db : () => db;\n\t}\n\n\tprivate get db(): Kysely<Database> {\n\t\treturn this.resolveDb();\n\t}\n\n\t/**\n\t * Process all overdue tasks.\n\t *\n\t * 1. Atomically claim tasks whose next_run_at <= now, status = idle, enabled = 1.\n\t * 2. For each claimed task, invoke the plugin's cron hook.\n\t * 3. On success: compute next_run_at and reset to idle, or delete one-shots.\n\t * 4. On failure: reset to idle (retry on next tick).\n\t */\n\tasync tick(): Promise<number> {\n\t\tconst currentTime = this.now();\n\t\tconst now = currentTime.toISOString();\n\t\tlet processed = 0;\n\n\t\t// Claim overdue tasks atomically\n\t\tconst claimed = await sql<{\n\t\t\tid: string;\n\t\t\tplugin_id: string;\n\t\t\ttask_name: string;\n\t\t\tschedule: string;\n\t\t\tis_oneshot: number;\n\t\t\tdata: string | null;\n\t\t\tnext_run_at: string;\n\t\t}>`\n\t\t\tUPDATE _emdash_cron_tasks\n\t\t\tSET status = 'running', locked_at = ${now}\n\t\t\tWHERE id IN (\n\t\t\t\tSELECT id FROM _emdash_cron_tasks\n\t\t\t\tWHERE next_run_at <= ${now}\n\t\t\t\t  AND status = 'idle'\n\t\t\t\t  AND enabled = 1\n\t\t\t\tORDER BY next_run_at ASC\n\t\t\t\tLIMIT 10\n\t\t\t)\n\t\t\tRETURNING id, plugin_id, task_name, schedule, is_oneshot, data, next_run_at\n\t\t`.execute(this.db);\n\n\t\tfor (const task of claimed.rows) {\n\t\t\t// Parse task data safely ��� malformed JSON must not crash the entire batch\n\t\t\tlet parsedData: Record<string, unknown> | undefined;\n\t\t\tif (task.data) {\n\t\t\t\ttry {\n\t\t\t\t\tparsedData = JSON.parse(task.data) as Record<string, unknown>;\n\t\t\t\t} catch {\n\t\t\t\t\tconsole.error(\n\t\t\t\t\t\t`[cron] Invalid JSON data for ${task.plugin_id}:${task.task_name}, skipping`,\n\t\t\t\t\t);\n\t\t\t\t\tawait sql`\n\t\t\t\t\t\tUPDATE _emdash_cron_tasks\n\t\t\t\t\t\tSET status = 'idle', locked_at = NULL\n\t\t\t\t\t\tWHERE id = ${task.id}\n\t\t\t\t\t`.execute(this.db);\n\t\t\t\t\tcontinue;\n\t\t\t\t}\n\t\t\t}\n\n\t\t\tconst event: CronEvent = {\n\t\t\t\tname: task.task_name,\n\t\t\t\tdata: parsedData,\n\t\t\t\tscheduledAt: task.next_run_at,\n\t\t\t};\n\n\t\t\tlet hookFailed = false;\n\t\t\ttry {\n\t\t\t\tawait this.invokeCronHook(task.plugin_id, event);\n\t\t\t} catch (error) {\n\t\t\t\thookFailed = true;\n\t\t\t\tconsole.error(`[cron] Hook failed for ${task.plugin_id}:${task.task_name}:`, error);\n\t\t\t}\n\n\t\t\tif (task.is_oneshot) {\n\t\t\t\tif (hookFailed) {\n\t\t\t\t\t// Retry metadata is namespaced under __emdash to avoid collisions\n\t\t\t\t\t// with plugin-controlled data fields.\n\t\t\t\t\tconst meta =\n\t\t\t\t\t\tparsedData?.__emdash != null && typeof parsedData.__emdash === \"object\"\n\t\t\t\t\t\t\t? (parsedData.__emdash as Record<string, unknown>)\n\t\t\t\t\t\t\t: undefined;\n\t\t\t\t\tconst raw = meta?.retryCount;\n\t\t\t\t\tconst retryCount =\n\t\t\t\t\t\ttypeof raw === \"number\" && Number.isFinite(raw) && raw > 0 ? Math.floor(raw) : 0;\n\t\t\t\t\tconst MAX_ONESHOT_RETRIES = 5;\n\n\t\t\t\t\tif (retryCount >= MAX_ONESHOT_RETRIES) {\n\t\t\t\t\t\tconsole.error(\n\t\t\t\t\t\t\t`[cron] One-shot task ${task.plugin_id}:${task.task_name} exceeded ${MAX_ONESHOT_RETRIES} retries, removing`,\n\t\t\t\t\t\t);\n\t\t\t\t\t\tawait sql`\n\t\t\t\t\t\tDELETE FROM _emdash_cron_tasks WHERE id = ${task.id}\n\t\t\t\t\t`.execute(this.db);\n\t\t\t\t\t} else {\n\t\t\t\t\t\t// Retry with exponential backoff: 1m, 2m, 4m, 8m, 16m\n\t\t\t\t\t\tconst backoffMs = 60_000 * Math.pow(2, retryCount);\n\t\t\t\t\t\tconst retryAt = new Date(currentTime.getTime() + backoffMs).toISOString();\n\t\t\t\t\t\tconst updatedData = JSON.stringify({\n\t\t\t\t\t\t\t...parsedData,\n\t\t\t\t\t\t\t__emdash: { ...meta, retryCount: retryCount + 1 },\n\t\t\t\t\t\t});\n\t\t\t\t\t\tawait sql`\n\t\t\t\t\t\tUPDATE _emdash_cron_tasks\n\t\t\t\t\t\tSET status = 'idle', locked_at = NULL, next_run_at = ${retryAt}, data = ${updatedData}\n\t\t\t\t\t\tWHERE id = ${task.id}\n\t\t\t\t\t`.execute(this.db);\n\t\t\t\t\t}\n\t\t\t\t} else {\n\t\t\t\t\t// Success: delete the one-shot task\n\t\t\t\t\tawait sql`\n\t\t\t\t\t\tDELETE FROM _emdash_cron_tasks WHERE id = ${task.id}\n\t\t\t\t\t`.execute(this.db);\n\t\t\t\t}\n\t\t\t} else {\n\t\t\t\t// Recurring: compute next run and reset\n\t\t\t\tconst nextRun = nextCronTime(task.schedule, currentTime);\n\t\t\t\tawait sql`\n\t\t\t\t\tUPDATE _emdash_cron_tasks\n\t\t\t\t\tSET status = 'idle',\n\t\t\t\t\t\tlocked_at = NULL,\n\t\t\t\t\t\tlast_run_at = ${now},\n\t\t\t\t\t\tnext_run_at = ${nextRun}\n\t\t\t\t\tWHERE id = ${task.id}\n\t\t\t\t`.execute(this.db);\n\t\t\t}\n\n\t\t\tprocessed++;\n\t\t}\n\n\t\treturn processed;\n\t}\n\n\t/**\n\t * Recover tasks stuck in 'running' for more than STALE_LOCK_MINUTES.\n\t * These likely crashed mid-execution.\n\t */\n\tasync recoverStaleLocks(): Promise<number> {\n\t\tconst cutoff = new Date(this.now().getTime() - STALE_LOCK_MINUTES * 60 * 1000).toISOString();\n\n\t\tconst result = await sql`\n\t\t\tUPDATE _emdash_cron_tasks\n\t\t\tSET status = 'idle', locked_at = NULL\n\t\t\tWHERE status = 'running'\n\t\t\t  AND locked_at < ${cutoff}\n\t\t`.execute(this.db);\n\n\t\treturn Number(result.numAffectedRows ?? 0);\n\t}\n\n\t/**\n\t * Get the next due time across all enabled tasks.\n\t * Returns null if no tasks are scheduled.\n\t */\n\tasync getNextDueTime(): Promise<string | null> {\n\t\tconst result = await sql<{ next: string | null }>`\n\t\t\tSELECT MIN(next_run_at) as next\n\t\t\tFROM _emdash_cron_tasks\n\t\t\tWHERE status = 'idle' AND enabled = 1\n\t\t`.execute(this.db);\n\n\t\treturn result.rows[0]?.next ?? null;\n\t}\n}\n\n// ─── CronAccessImpl ────────────────────────────────────────────────────────\n\n/**\n * Per-plugin cron API implementation.\n * Scoped to a single plugin ID — plugins cannot see or modify other plugins' tasks.\n */\nexport class CronAccessImpl implements CronAccess {\n\tconstructor(\n\t\tprivate db: Kysely<Database>,\n\t\tprivate pluginId: string,\n\t\tprivate reschedule: RescheduleFn,\n\t\tprivate readonly now: () => Date = () => new Date(),\n\t) {}\n\n\tasync schedule(\n\t\tname: string,\n\t\topts: { schedule: string; data?: Record<string, unknown> },\n\t): Promise<void> {\n\t\tvalidateTaskName(name);\n\t\tvalidateSchedule(opts.schedule);\n\n\t\tconst oneshot = isOneShot(opts.schedule);\n\t\tconst nextRun = oneshot ? opts.schedule : nextCronTime(opts.schedule, this.now());\n\t\tconst dataJson = opts.data ? JSON.stringify(opts.data) : null;\n\t\tconst id = ulid();\n\n\t\t// Upsert: if task already exists for this plugin+name, update it.\n\t\t// Guard: don't clobber a task that is currently executing.\n\t\tawait sql`\n\t\t\tINSERT INTO _emdash_cron_tasks (id, plugin_id, task_name, schedule, is_oneshot, data, next_run_at, status, enabled)\n\t\t\tVALUES (${id}, ${this.pluginId}, ${name}, ${opts.schedule}, ${oneshot ? 1 : 0}, ${dataJson}, ${nextRun}, 'idle', 1)\n\t\t\tON CONFLICT (plugin_id, task_name) DO UPDATE SET\n\t\t\t\tschedule = ${opts.schedule},\n\t\t\t\tis_oneshot = ${oneshot ? 1 : 0},\n\t\t\t\tdata = ${dataJson},\n\t\t\t\tnext_run_at = ${nextRun},\n\t\t\t\tstatus = CASE WHEN _emdash_cron_tasks.status = 'running' THEN 'running' ELSE 'idle' END,\n\t\t\t\tlocked_at = CASE WHEN _emdash_cron_tasks.status = 'running' THEN _emdash_cron_tasks.locked_at ELSE NULL END,\n\t\t\t\tenabled = 1\n\t\t`.execute(this.db);\n\n\t\tthis.reschedule();\n\t}\n\n\tasync cancel(name: string): Promise<void> {\n\t\tawait sql`\n\t\t\tDELETE FROM _emdash_cron_tasks\n\t\t\tWHERE plugin_id = ${this.pluginId} AND task_name = ${name}\n\t\t`.execute(this.db);\n\n\t\tthis.reschedule();\n\t}\n\n\tasync list(): Promise<CronTaskInfo[]> {\n\t\tconst rows = await sql<{\n\t\t\ttask_name: string;\n\t\t\tschedule: string;\n\t\t\tnext_run_at: string;\n\t\t\tlast_run_at: string | null;\n\t\t}>`\n\t\t\tSELECT task_name, schedule, next_run_at, last_run_at\n\t\t\tFROM _emdash_cron_tasks\n\t\t\tWHERE plugin_id = ${this.pluginId} AND enabled = 1\n\t\t\tORDER BY next_run_at ASC\n\t\t`.execute(this.db);\n\n\t\treturn rows.rows.map((row) => ({\n\t\t\tname: row.task_name,\n\t\t\tschedule: row.schedule,\n\t\t\tnextRunAt: row.next_run_at,\n\t\t\tlastRunAt: row.last_run_at,\n\t\t}));\n\t}\n}\n\n// ─── Cron task lifecycle helpers ────────────────────────────────────────────\n\n/**\n * Enable or disable all cron tasks for a plugin.\n * Called by admin disable/enable endpoints and PluginManager lifecycle.\n * Gracefully handles the cron table not existing yet (pre-migration).\n */\nexport async function setCronTasksEnabled(\n\tdb: Kysely<Database>,\n\tpluginId: string,\n\tenabled: boolean,\n): Promise<void> {\n\ttry {\n\t\tawait sql`\n\t\t\tUPDATE _emdash_cron_tasks\n\t\t\tSET enabled = ${enabled ? 1 : 0}\n\t\t\tWHERE plugin_id = ${pluginId}\n\t\t`.execute(db);\n\t} catch {\n\t\t// Cron table may not exist yet (pre-migration). Non-fatal.\n\t}\n}\n\n// ─── Cron utilities ────────────────────────────────────────────────────────\n\n/**\n * Compute the next fire time for a cron expression.\n * Supports standard cron (5-field), extended (6-field with seconds), and\n * aliases like @daily, @weekly, @hourly, @monthly, @yearly.\n */\nexport function nextCronTime(expression: string, currentTime: Date = new Date()): string {\n\tconst job = new Cron(expression);\n\tconst next = job.nextRun(currentTime);\n\tif (!next) {\n\t\tthrow new Error(`Invalid cron expression or no future run: \"${expression}\"`);\n\t}\n\treturn next.toISOString();\n}\n\n/**\n * Check whether a string is a valid cron expression.\n */\nfunction isCronExpression(schedule: string): boolean {\n\ttry {\n\t\t// Cron constructor validates; we discard the instance immediately.\n\t\tconst _cron = new Cron(schedule);\n\t\tvoid _cron;\n\t\treturn true;\n\t} catch {\n\t\treturn false;\n\t}\n}\n\n/**\n * Check if a schedule string is a one-shot (ISO 8601 datetime) rather than\n * a recurring cron expression.\n *\n * Recognizes the supported ISO date-time shape before consulting the cron\n * parser, which also accepts ISO timestamps. Other values are parsed as cron\n * first so expressions like \"1-5 * * * *\" are not misclassified as dates.\n */\nexport function isOneShot(schedule: string): boolean {\n\tif (schedule.startsWith(\"@\")) return false;\n\tif (ISO_DATETIME_PATTERN.test(schedule)) {\n\t\treturn !isNaN(Date.parse(schedule));\n\t}\n\tif (isCronExpression(schedule)) return false;\n\treturn !isNaN(Date.parse(schedule));\n}\n\n/** Max length for a task name */\nconst MAX_TASK_NAME_LENGTH = 128;\n/** Task name pattern: alphanumeric, dashes, underscores */\nconst TASK_NAME_RE = /^[a-zA-Z][a-zA-Z0-9_-]*$/;\n\n/**\n * Validate a cron task name.\n * Must be non-empty, ≤128 chars, alphanumeric with dashes/underscores.\n */\nexport function validateTaskName(name: string): void {\n\tif (!name || name.length > MAX_TASK_NAME_LENGTH) {\n\t\tthrow new Error(\n\t\t\t`Invalid task name: must be 1-${MAX_TASK_NAME_LENGTH} characters, got ${name.length}`,\n\t\t);\n\t}\n\tif (!TASK_NAME_RE.test(name)) {\n\t\tthrow new Error(\n\t\t\t`Invalid task name \"${name}\": must start with a letter and contain only letters, numbers, dashes, or underscores`,\n\t\t);\n\t}\n}\n\n/**\n * Validate a schedule string at registration time.\n * Must be a valid cron expression or a parseable ISO 8601 datetime.\n */\nexport function validateSchedule(schedule: string): void {\n\tif (!schedule || schedule.length > 256) {\n\t\tthrow new Error(`Invalid schedule: must be 1-256 characters, got ${schedule.length}`);\n\t}\n\n\t// Try cron first\n\tif (isCronExpression(schedule)) return;\n\n\tconst parsed = Date.parse(schedule);\n\tif (isNaN(parsed)) {\n\t\tthrow new Error(\n\t\t\t`Invalid schedule \"${schedule}\": must be a valid cron expression or ISO 8601 datetime`,\n\t\t);\n\t}\n}\n"],"mappings":";;;;;;;;;;;;;;AAkBA,MAAM,qBAAqB;AAC3B,MAAM,uBACL;;;;;;;;AAsBD,IAAa,eAAb,MAA0B;;;;;;;;;CASzB,AAAiB;CAEjB,YACC,IACA,AAAQ,gBACR,AAAiB,4BAAwB,IAAI,MAAM,EAClD;EAFO;EACS;AAEjB,OAAK,YAAY,OAAO,OAAO,aAAa,WAAW;;CAGxD,IAAY,KAAuB;AAClC,SAAO,KAAK,WAAW;;;;;;;;;;CAWxB,MAAM,OAAwB;EAC7B,MAAM,cAAc,KAAK,KAAK;EAC9B,MAAM,MAAM,YAAY,aAAa;EACrC,IAAI,YAAY;EAGhB,MAAM,UAAU,MAAM,GAQpB;;yCAEqC,IAAI;;;2BAGlB,IAAI;;;;;;;IAO3B,QAAQ,KAAK,GAAG;AAElB,OAAK,MAAM,QAAQ,QAAQ,MAAM;GAEhC,IAAI;AACJ,OAAI,KAAK,KACR,KAAI;AACH,iBAAa,KAAK,MAAM,KAAK,KAAK;WAC3B;AACP,YAAQ,MACP,gCAAgC,KAAK,UAAU,GAAG,KAAK,UAAU,YACjE;AACD,UAAM,GAAG;;;mBAGK,KAAK,GAAG;OACpB,QAAQ,KAAK,GAAG;AAClB;;GAIF,MAAM,QAAmB;IACxB,MAAM,KAAK;IACX,MAAM;IACN,aAAa,KAAK;IAClB;GAED,IAAI,aAAa;AACjB,OAAI;AACH,UAAM,KAAK,eAAe,KAAK,WAAW,MAAM;YACxC,OAAO;AACf,iBAAa;AACb,YAAQ,MAAM,0BAA0B,KAAK,UAAU,GAAG,KAAK,UAAU,IAAI,MAAM;;AAGpF,OAAI,KAAK,WACR,KAAI,YAAY;IAGf,MAAM,OACL,YAAY,YAAY,QAAQ,OAAO,WAAW,aAAa,WAC3D,WAAW,WACZ;IACJ,MAAM,MAAM,MAAM;IAClB,MAAM,aACL,OAAO,QAAQ,YAAY,OAAO,SAAS,IAAI,IAAI,MAAM,IAAI,KAAK,MAAM,IAAI,GAAG;IAChF,MAAM,sBAAsB;AAE5B,QAAI,cAAc,qBAAqB;AACtC,aAAQ,MACP,wBAAwB,KAAK,UAAU,GAAG,KAAK,UAAU,YAAY,oBAAoB,oBACzF;AACD,WAAM,GAAG;kDACmC,KAAK,GAAG;OACnD,QAAQ,KAAK,GAAG;WACX;KAEN,MAAM,YAAY,MAAS,KAAK,IAAI,GAAG,WAAW;AAMlD,WAAM,GAAG;;6DALO,IAAI,KAAK,YAAY,SAAS,GAAG,UAAU,CAAC,aAAa,CAOV,WAN3C,KAAK,UAAU;MAClC,GAAG;MACH,UAAU;OAAE,GAAG;OAAM,YAAY,aAAa;OAAG;MACjD,CAAC,CAGoF;mBACzE,KAAK,GAAG;OACpB,QAAQ,KAAK,GAAG;;SAIlB,OAAM,GAAG;kDACoC,KAAK,GAAG;OACnD,QAAQ,KAAK,GAAG;OAKnB,OAAM,GAAG;;;;sBAIS,IAAI;sBALN,aAAa,KAAK,UAAU,YAAY,CAM9B;kBACZ,KAAK,GAAG;MACpB,QAAQ,KAAK,GAAG;AAGnB;;AAGD,SAAO;;;;;;CAOR,MAAM,oBAAqC;EAG1C,MAAM,SAAS,MAAM,GAAG;;;;wCAFT,IAAI,KAAK,KAAK,KAAK,CAAC,SAAS,GAAG,qBAAqB,KAAK,IAAK,EAAC,aAAa,CAMhE;IAC1B,QAAQ,KAAK,GAAG;AAElB,SAAO,OAAO,OAAO,mBAAmB,EAAE;;;;;;CAO3C,MAAM,iBAAyC;AAO9C,UANe,MAAM,GAA4B;;;;IAI/C,QAAQ,KAAK,GAAG,EAEJ,KAAK,IAAI,QAAQ;;;;;;;AAUjC,IAAa,iBAAb,MAAkD;CACjD,YACC,AAAQ,IACR,AAAQ,UACR,AAAQ,YACR,AAAiB,4BAAwB,IAAI,MAAM,EAClD;EAJO;EACA;EACA;EACS;;CAGlB,MAAM,SACL,MACA,MACgB;AAChB,mBAAiB,KAAK;AACtB,mBAAiB,KAAK,SAAS;EAE/B,MAAM,UAAU,UAAU,KAAK,SAAS;EACxC,MAAM,UAAU,UAAU,KAAK,WAAW,aAAa,KAAK,UAAU,KAAK,KAAK,CAAC;EACjF,MAAM,WAAW,KAAK,OAAO,KAAK,UAAU,KAAK,KAAK,GAAG;AAKzD,QAAM,GAAG;;aAJE,MAAM,CAMH,IAAI,KAAK,SAAS,IAAI,KAAK,IAAI,KAAK,SAAS,IAAI,UAAU,IAAI,EAAE,IAAI,SAAS,IAAI,QAAQ;;iBAEzF,KAAK,SAAS;mBACZ,UAAU,IAAI,EAAE;aACtB,SAAS;oBACF,QAAQ;;;;IAIxB,QAAQ,KAAK,GAAG;AAElB,OAAK,YAAY;;CAGlB,MAAM,OAAO,MAA6B;AACzC,QAAM,GAAG;;uBAEY,KAAK,SAAS,mBAAmB,KAAK;IACzD,QAAQ,KAAK,GAAG;AAElB,OAAK,YAAY;;CAGlB,MAAM,OAAgC;AAarC,UAZa,MAAM,GAKjB;;;uBAGmB,KAAK,SAAS;;IAEjC,QAAQ,KAAK,GAAG,EAEN,KAAK,KAAK,SAAS;GAC9B,MAAM,IAAI;GACV,UAAU,IAAI;GACd,WAAW,IAAI;GACf,WAAW,IAAI;GACf,EAAE;;;;;;;;AAWL,eAAsB,oBACrB,IACA,UACA,SACgB;AAChB,KAAI;AACH,QAAM,GAAG;;mBAEQ,UAAU,IAAI,EAAE;uBACZ,SAAS;IAC5B,QAAQ,GAAG;SACN;;;;;;;AAYT,SAAgB,aAAa,YAAoB,8BAAoB,IAAI,MAAM,EAAU;CAExF,MAAM,OADM,IAAI,KAAK,WAAW,CACf,QAAQ,YAAY;AACrC,KAAI,CAAC,KACJ,OAAM,IAAI,MAAM,8CAA8C,WAAW,GAAG;AAE7E,QAAO,KAAK,aAAa;;;;;AAM1B,SAAS,iBAAiB,UAA2B;AACpD,KAAI;AAEW,MAAI,KAAK,SAAS;AAEhC,SAAO;SACA;AACP,SAAO;;;;;;;;;;;AAYT,SAAgB,UAAU,UAA2B;AACpD,KAAI,SAAS,WAAW,IAAI,CAAE,QAAO;AACrC,KAAI,qBAAqB,KAAK,SAAS,CACtC,QAAO,CAAC,MAAM,KAAK,MAAM,SAAS,CAAC;AAEpC,KAAI,iBAAiB,SAAS,CAAE,QAAO;AACvC,QAAO,CAAC,MAAM,KAAK,MAAM,SAAS,CAAC;;;AAIpC,MAAM,uBAAuB;;AAE7B,MAAM,eAAe;;;;;AAMrB,SAAgB,iBAAiB,MAAoB;AACpD,KAAI,CAAC,QAAQ,KAAK,SAAS,qBAC1B,OAAM,IAAI,MACT,gCAAgC,qBAAqB,mBAAmB,KAAK,SAC7E;AAEF,KAAI,CAAC,aAAa,KAAK,KAAK,CAC3B,OAAM,IAAI,MACT,sBAAsB,KAAK,uFAC3B;;;;;;AAQH,SAAgB,iBAAiB,UAAwB;AACxD,KAAI,CAAC,YAAY,SAAS,SAAS,IAClC,OAAM,IAAI,MAAM,mDAAmD,SAAS,SAAS;AAItF,KAAI,iBAAiB,SAAS,CAAE;CAEhC,MAAM,SAAS,KAAK,MAAM,SAAS;AACnC,KAAI,MAAM,OAAO,CAChB,OAAM,IAAI,MACT,qBAAqB,SAAS,yDAC9B"}

package/dist/dashboard-CZD4G7k_.mjs

@@ -0,0 +1,151 @@
+import { t as validateIdentifier } from "./validate-DANX1-Qi.mjs";
+import { t as OptionsRepository } from "./options-D5WcorD5.mjs";
+import { t as ContentRepository } from "./content-DZ3B5qtA.mjs";
+import { t as MediaRepository } from "./media-TBlKCwo7.mjs";
+import { t as UserRepository } from "./user-DroRntkx.mjs";
+import { r as isScheduledPolicyRejection, t as SCHEDULED_POLICY_REJECTION_PREFIX } from "./content-policy-CM4skrNi.mjs";
+import { sql } from "kysely";
+
+//#region src/scheduler-health.ts
+const SCHEDULER_HEARTBEAT_OPTION = "system:scheduler:last_completed_at";
+const SCHEDULER_STALE_AFTER_MS = 300 * 1e3;
+async function recordSchedulerHeartbeat(db, completedAt = /* @__PURE__ */ new Date()) {
+	await new OptionsRepository(db).set(SCHEDULER_HEARTBEAT_OPTION, completedAt.toISOString());
+}
+async function recordSchedulerHeartbeatSafely(db, completedAt = /* @__PURE__ */ new Date()) {
+	try {
+		await recordSchedulerHeartbeat(db, completedAt);
+	} catch (error) {
+		console.error("[scheduler] Failed to record heartbeat:", error);
+	}
+}
+async function getSchedulerHealth(db, now = /* @__PURE__ */ new Date()) {
+	const lastCompletedAt = await new OptionsRepository(db).get(SCHEDULER_HEARTBEAT_OPTION);
+	const lastCompletedAtMs = lastCompletedAt ? Date.parse(lastCompletedAt) : NaN;
+	if (!lastCompletedAt || Number.isNaN(lastCompletedAtMs)) return {
+		status: "unknown",
+		lastCompletedAt: null
+	};
+	return {
+		status: now.getTime() - lastCompletedAtMs > SCHEDULER_STALE_AFTER_MS ? "stale" : "healthy",
+		lastCompletedAt
+	};
+}
+
+//#endregion
+//#region src/api/handlers/dashboard.ts
+/**
+* Dashboard stats handler
+*
+* Returns summary data for the admin dashboard in a single request:
+* collection content counts, media count, user count, and recent
+* content across all collections.
+*/
+const POLICY_REJECTION_PREVIEW_LIMIT = 20;
+/**
+* Fetch dashboard statistics.
+*
+* Queries are intentionally lightweight — counts use indexed columns,
+* and recent items are capped at 10.
+*/
+async function handleDashboardStats(db, now = /* @__PURE__ */ new Date()) {
+	try {
+		const collections = await db.selectFrom("_emdash_collections").select(["slug", "label"]).orderBy("slug", "asc").execute();
+		const contentRepo = new ContentRepository(db);
+		const collectionStats = await Promise.all(collections.map(async (col) => {
+			const stats = await contentRepo.getStats(col.slug, now);
+			return {
+				slug: col.slug,
+				label: col.label,
+				total: stats.total,
+				published: stats.published,
+				draft: stats.draft,
+				scheduled: stats.scheduled,
+				overdueScheduled: stats.overdueScheduled
+			};
+		}));
+		const mediaRepo = new MediaRepository(db);
+		const userRepo = new UserRepository(db);
+		const optionsRepo = new OptionsRepository(db);
+		const [mediaCount, userCount, schedulerHealth, policyRejectedScheduled, versionedPolicyRejectionOptions] = await Promise.all([
+			mediaRepo.count(),
+			userRepo.count(),
+			getSchedulerHealth(db, now),
+			optionsRepo.countByPrefix(SCHEDULED_POLICY_REJECTION_PREFIX),
+			optionsRepo.getVersionedByPrefix(SCHEDULED_POLICY_REJECTION_PREFIX, { limit: POLICY_REJECTION_PREVIEW_LIMIT })
+		]);
+		const policyRejections = [...versionedPolicyRejectionOptions.values()].filter(({ value }) => isScheduledPolicyRejection(value)).map(({ value, revision }) => ({
+			...value,
+			_rev: revision
+		}));
+		return {
+			success: true,
+			data: {
+				collections: collectionStats,
+				mediaCount,
+				userCount,
+				recentItems: await fetchRecentItems(db, collections),
+				schedulerHealth,
+				policyRejectedScheduled,
+				policyRejections
+			}
+		};
+	} catch (error) {
+		console.error("Dashboard stats error:", error);
+		return {
+			success: false,
+			error: {
+				code: "DASHBOARD_STATS_ERROR",
+				message: "Failed to load dashboard statistics"
+			}
+		};
+	}
+}
+/**
+* Fetch the 10 most recently updated items across all collections.
+*
+* Uses UNION ALL over each ec_* table. The query is safe because
+* collection slugs come from the system table and are validated.
+*
+* `title` is not a standard column — it's a user-defined field. We query
+* `_emdash_fields` to discover which collections have one and fall back
+* to `slug` (which is always present) otherwise.
+*/
+async function fetchRecentItems(db, collections) {
+	if (collections.length === 0) return [];
+	const titleFields = await db.selectFrom("_emdash_fields as f").innerJoin("_emdash_collections as c", "c.id", "f.collection_id").select(["c.slug as collection_slug"]).where("f.slug", "=", "title").execute();
+	const collectionsWithTitle = new Set(titleFields.map((r) => r.collection_slug));
+	return (await Promise.all(collections.map(async (col) => {
+		validateIdentifier(col.slug);
+		const table = `ec_${col.slug}`;
+		const titleExpr = collectionsWithTitle.has(col.slug) ? sql`COALESCE(title, slug, id)` : sql`COALESCE(slug, id)`;
+		return (await sql`
+				SELECT
+					id,
+					${sql.lit(col.slug)} AS collection,
+					${sql.lit(col.label)} AS collection_label,
+					${titleExpr} AS title,
+					slug,
+					status,
+					updated_at,
+					author_id
+				FROM ${sql.ref(table)}
+				WHERE deleted_at IS NULL
+				ORDER BY updated_at DESC
+				LIMIT 10
+			`.execute(db)).rows;
+	}))).flat().toSorted((a, b) => a.updated_at < b.updated_at ? 1 : a.updated_at > b.updated_at ? -1 : 0).slice(0, 10).map((row) => ({
+		id: row.id,
+		collection: row.collection,
+		collectionLabel: row.collection_label,
+		title: row.title,
+		slug: row.slug,
+		status: row.status,
+		updatedAt: row.updated_at,
+		authorId: row.author_id
+	}));
+}
+
+//#endregion
+export { recordSchedulerHeartbeatSafely as n, handleDashboardStats as t };
+//# sourceMappingURL=dashboard-CZD4G7k_.mjs.map

package/dist/dashboard-CZD4G7k_.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"dashboard-CZD4G7k_.mjs","names":[],"sources":["../src/scheduler-health.ts","../src/api/handlers/dashboard.ts"],"sourcesContent":["import type { Kysely } from \"kysely\";\n\nimport { OptionsRepository } from \"./database/repositories/options.js\";\nimport type { Database } from \"./database/types.js\";\n\nexport const SCHEDULER_HEARTBEAT_OPTION = \"system:scheduler:last_completed_at\";\nexport const SCHEDULER_STALE_AFTER_MS = 5 * 60 * 1000;\n\nexport interface SchedulerHealth {\n\tstatus: \"healthy\" | \"stale\" | \"unknown\";\n\tlastCompletedAt: string | null;\n}\n\nexport async function recordSchedulerHeartbeat(\n\tdb: Kysely<Database>,\n\tcompletedAt = new Date(),\n): Promise<void> {\n\tawait new OptionsRepository(db).set(SCHEDULER_HEARTBEAT_OPTION, completedAt.toISOString());\n}\n\nexport async function recordSchedulerHeartbeatSafely(\n\tdb: Kysely<Database>,\n\tcompletedAt = new Date(),\n): Promise<void> {\n\ttry {\n\t\tawait recordSchedulerHeartbeat(db, completedAt);\n\t} catch (error) {\n\t\tconsole.error(\"[scheduler] Failed to record heartbeat:\", error);\n\t}\n}\n\nexport async function getSchedulerHealth(\n\tdb: Kysely<Database>,\n\tnow = new Date(),\n): Promise<SchedulerHealth> {\n\tconst lastCompletedAt = await new OptionsRepository(db).get<string>(SCHEDULER_HEARTBEAT_OPTION);\n\tconst lastCompletedAtMs = lastCompletedAt ? Date.parse(lastCompletedAt) : Number.NaN;\n\tif (!lastCompletedAt || Number.isNaN(lastCompletedAtMs)) {\n\t\treturn { status: \"unknown\", lastCompletedAt: null };\n\t}\n\n\treturn {\n\t\tstatus: now.getTime() - lastCompletedAtMs > SCHEDULER_STALE_AFTER_MS ? \"stale\" : \"healthy\",\n\t\tlastCompletedAt,\n\t};\n}\n","/**\n * Dashboard stats handler\n *\n * Returns summary data for the admin dashboard in a single request:\n * collection content counts, media count, user count, and recent\n * content across all collections.\n */\n\nimport { sql, type Kysely } from \"kysely\";\n\nimport { ContentRepository } from \"../../database/repositories/content.js\";\nimport { MediaRepository } from \"../../database/repositories/media.js\";\nimport { OptionsRepository } from \"../../database/repositories/options.js\";\nimport { UserRepository } from \"../../database/repositories/user.js\";\nimport type { Database } from \"../../database/types.js\";\nimport { validateIdentifier } from \"../../database/validate.js\";\nimport {\n\tSCHEDULED_POLICY_REJECTION_PREFIX,\n\tisScheduledPolicyRejection,\n\ttype ScheduledPolicyRejection,\n\ttype VersionedScheduledPolicyRejection,\n} from \"../../plugins/content-policy.js\";\nimport { getSchedulerHealth, type SchedulerHealth } from \"../../scheduler-health.js\";\nimport type { ApiResult } from \"../types.js\";\n\nexport interface CollectionStats {\n\tslug: string;\n\tlabel: string;\n\ttotal: number;\n\tpublished: number;\n\tdraft: number;\n\tscheduled: number;\n\toverdueScheduled: number;\n}\n\nexport interface RecentItem {\n\tid: string;\n\tcollection: string;\n\tcollectionLabel: string;\n\ttitle: string;\n\tslug: string | null;\n\tstatus: string;\n\tupdatedAt: string;\n\tauthorId: string | null;\n}\n\nexport interface DashboardStats {\n\tcollections: CollectionStats[];\n\tmediaCount: number;\n\tuserCount: number;\n\trecentItems: RecentItem[];\n\tschedulerHealth: SchedulerHealth;\n\tpolicyRejectedScheduled: number;\n\tpolicyRejections: VersionedScheduledPolicyRejection[];\n}\n\nconst POLICY_REJECTION_PREVIEW_LIMIT = 20;\n\n/**\n * Fetch dashboard statistics.\n *\n * Queries are intentionally lightweight — counts use indexed columns,\n * and recent items are capped at 10.\n */\nexport async function handleDashboardStats(\n\tdb: Kysely<Database>,\n\tnow = new Date(),\n): Promise<ApiResult<DashboardStats>> {\n\ttry {\n\t\t// Discover collections from the system table\n\t\tconst collections = await db\n\t\t\t.selectFrom(\"_emdash_collections\")\n\t\t\t.select([\"slug\", \"label\"])\n\t\t\t.orderBy(\"slug\", \"asc\")\n\t\t\t.execute();\n\n\t\t// Gather per-collection counts in parallel\n\t\tconst contentRepo = new ContentRepository(db);\n\t\tconst collectionStats: CollectionStats[] = await Promise.all(\n\t\t\tcollections.map(async (col) => {\n\t\t\t\tconst stats = await contentRepo.getStats(col.slug, now);\n\t\t\t\treturn {\n\t\t\t\t\tslug: col.slug,\n\t\t\t\t\tlabel: col.label,\n\t\t\t\t\ttotal: stats.total,\n\t\t\t\t\tpublished: stats.published,\n\t\t\t\t\tdraft: stats.draft,\n\t\t\t\t\tscheduled: stats.scheduled,\n\t\t\t\t\toverdueScheduled: stats.overdueScheduled,\n\t\t\t\t};\n\t\t\t}),\n\t\t);\n\n\t\t// Media and user counts\n\t\tconst mediaRepo = new MediaRepository(db);\n\t\tconst userRepo = new UserRepository(db);\n\t\tconst optionsRepo = new OptionsRepository(db);\n\t\tconst [\n\t\t\tmediaCount,\n\t\t\tuserCount,\n\t\t\tschedulerHealth,\n\t\t\tpolicyRejectedScheduled,\n\t\t\tversionedPolicyRejectionOptions,\n\t\t] = await Promise.all([\n\t\t\tmediaRepo.count(),\n\t\t\tuserRepo.count(),\n\t\t\tgetSchedulerHealth(db, now),\n\t\t\toptionsRepo.countByPrefix(SCHEDULED_POLICY_REJECTION_PREFIX),\n\t\t\toptionsRepo.getVersionedByPrefix<ScheduledPolicyRejection>(\n\t\t\t\tSCHEDULED_POLICY_REJECTION_PREFIX,\n\t\t\t\t{\n\t\t\t\t\tlimit: POLICY_REJECTION_PREVIEW_LIMIT,\n\t\t\t\t},\n\t\t\t),\n\t\t]);\n\t\tconst policyRejections = [...versionedPolicyRejectionOptions.values()]\n\t\t\t.filter(({ value }) => isScheduledPolicyRejection(value))\n\t\t\t.map(({ value, revision }) => ({ ...value, _rev: revision }));\n\n\t\t// Recent items across all collections (last 10 updated, any status)\n\t\tconst recentItems = await fetchRecentItems(db, collections);\n\n\t\treturn {\n\t\t\tsuccess: true,\n\t\t\tdata: {\n\t\t\t\tcollections: collectionStats,\n\t\t\t\tmediaCount,\n\t\t\t\tuserCount,\n\t\t\t\trecentItems,\n\t\t\t\tschedulerHealth,\n\t\t\t\tpolicyRejectedScheduled,\n\t\t\t\tpolicyRejections,\n\t\t\t},\n\t\t};\n\t} catch (error) {\n\t\tconsole.error(\"Dashboard stats error:\", error);\n\t\treturn {\n\t\t\tsuccess: false,\n\t\t\terror: {\n\t\t\t\tcode: \"DASHBOARD_STATS_ERROR\",\n\t\t\t\tmessage: \"Failed to load dashboard statistics\",\n\t\t\t},\n\t\t};\n\t}\n}\n\n/** Raw row shape from the UNION ALL query — all snake_case. */\ninterface RecentItemRow {\n\tid: string;\n\tcollection: string;\n\tcollection_label: string;\n\ttitle: string;\n\tslug: string | null;\n\tstatus: string;\n\tupdated_at: string;\n\tauthor_id: string | null;\n}\n\n/**\n * Fetch the 10 most recently updated items across all collections.\n *\n * Uses UNION ALL over each ec_* table. The query is safe because\n * collection slugs come from the system table and are validated.\n *\n * `title` is not a standard column — it's a user-defined field. We query\n * `_emdash_fields` to discover which collections have one and fall back\n * to `slug` (which is always present) otherwise.\n */\nasync function fetchRecentItems(\n\tdb: Kysely<Database>,\n\tcollections: Array<{ slug: string; label: string }>,\n): Promise<RecentItem[]> {\n\tif (collections.length === 0) return [];\n\n\t// Discover which collections have a \"title\" column\n\tconst titleFields = await db\n\t\t.selectFrom(\"_emdash_fields as f\")\n\t\t.innerJoin(\"_emdash_collections as c\", \"c.id\", \"f.collection_id\")\n\t\t.select([\"c.slug as collection_slug\"])\n\t\t.where(\"f.slug\", \"=\", \"title\")\n\t\t.execute();\n\n\tconst collectionsWithTitle = new Set(titleFields.map((r) => r.collection_slug));\n\n\t// Issue one query per collection in parallel, then merge in JS.\n\t// A single UNION ALL across N collections trips D1's\n\t// SQLITE_LIMIT_COMPOUND_SELECT cap when N is large enough (#895);\n\t// per-collection queries side-step that. Each query fetches at most\n\t// 10 rows, so the merge handles at most N * 10 rows before slicing.\n\tconst perCollection = await Promise.all(\n\t\tcollections.map(async (col) => {\n\t\t\tvalidateIdentifier(col.slug);\n\t\t\tconst table = `ec_${col.slug}`;\n\t\t\tconst hasTitle = collectionsWithTitle.has(col.slug);\n\n\t\t\t// Use title column if it exists, otherwise fall back to slug, id.\n\t\t\t// All output uses snake_case to avoid SQLite quoting issues on D1.\n\t\t\tconst titleExpr = hasTitle ? sql`COALESCE(title, slug, id)` : sql`COALESCE(slug, id)`;\n\n\t\t\tconst result = await sql<RecentItemRow>`\n\t\t\t\tSELECT\n\t\t\t\t\tid,\n\t\t\t\t\t${sql.lit(col.slug)} AS collection,\n\t\t\t\t\t${sql.lit(col.label)} AS collection_label,\n\t\t\t\t\t${titleExpr} AS title,\n\t\t\t\t\tslug,\n\t\t\t\t\tstatus,\n\t\t\t\t\tupdated_at,\n\t\t\t\t\tauthor_id\n\t\t\t\tFROM ${sql.ref(table)}\n\t\t\t\tWHERE deleted_at IS NULL\n\t\t\t\tORDER BY updated_at DESC\n\t\t\t\tLIMIT 10\n\t\t\t`.execute(db);\n\t\t\treturn result.rows;\n\t\t}),\n\t);\n\n\t// Merge across collections, sort by updated_at desc, take top 10.\n\tconst merged = perCollection\n\t\t.flat()\n\t\t.toSorted((a, b) => (a.updated_at < b.updated_at ? 1 : a.updated_at > b.updated_at ? -1 : 0))\n\t\t.slice(0, 10);\n\n\t// Map snake_case DB rows to camelCase API shape\n\treturn merged.map((row) => ({\n\t\tid: row.id,\n\t\tcollection: row.collection,\n\t\tcollectionLabel: row.collection_label,\n\t\ttitle: row.title,\n\t\tslug: row.slug,\n\t\tstatus: row.status,\n\t\tupdatedAt: row.updated_at,\n\t\tauthorId: row.author_id,\n\t}));\n}\n"],"mappings":";;;;;;;;;AAKA,MAAa,6BAA6B;AAC1C,MAAa,2BAA2B,MAAS;AAOjD,eAAsB,yBACrB,IACA,8BAAc,IAAI,MAAM,EACR;AAChB,OAAM,IAAI,kBAAkB,GAAG,CAAC,IAAI,4BAA4B,YAAY,aAAa,CAAC;;AAG3F,eAAsB,+BACrB,IACA,8BAAc,IAAI,MAAM,EACR;AAChB,KAAI;AACH,QAAM,yBAAyB,IAAI,YAAY;UACvC,OAAO;AACf,UAAQ,MAAM,2CAA2C,MAAM;;;AAIjE,eAAsB,mBACrB,IACA,sBAAM,IAAI,MAAM,EACW;CAC3B,MAAM,kBAAkB,MAAM,IAAI,kBAAkB,GAAG,CAAC,IAAY,2BAA2B;CAC/F,MAAM,oBAAoB,kBAAkB,KAAK,MAAM,gBAAgB,GAAG;AAC1E,KAAI,CAAC,mBAAmB,OAAO,MAAM,kBAAkB,CACtD,QAAO;EAAE,QAAQ;EAAW,iBAAiB;EAAM;AAGpD,QAAO;EACN,QAAQ,IAAI,SAAS,GAAG,oBAAoB,2BAA2B,UAAU;EACjF;EACA;;;;;;;;;;;;ACYF,MAAM,iCAAiC;;;;;;;AAQvC,eAAsB,qBACrB,IACA,sBAAM,IAAI,MAAM,EACqB;AACrC,KAAI;EAEH,MAAM,cAAc,MAAM,GACxB,WAAW,sBAAsB,CACjC,OAAO,CAAC,QAAQ,QAAQ,CAAC,CACzB,QAAQ,QAAQ,MAAM,CACtB,SAAS;EAGX,MAAM,cAAc,IAAI,kBAAkB,GAAG;EAC7C,MAAM,kBAAqC,MAAM,QAAQ,IACxD,YAAY,IAAI,OAAO,QAAQ;GAC9B,MAAM,QAAQ,MAAM,YAAY,SAAS,IAAI,MAAM,IAAI;AACvD,UAAO;IACN,MAAM,IAAI;IACV,OAAO,IAAI;IACX,OAAO,MAAM;IACb,WAAW,MAAM;IACjB,OAAO,MAAM;IACb,WAAW,MAAM;IACjB,kBAAkB,MAAM;IACxB;IACA,CACF;EAGD,MAAM,YAAY,IAAI,gBAAgB,GAAG;EACzC,MAAM,WAAW,IAAI,eAAe,GAAG;EACvC,MAAM,cAAc,IAAI,kBAAkB,GAAG;EAC7C,MAAM,CACL,YACA,WACA,iBACA,yBACA,mCACG,MAAM,QAAQ,IAAI;GACrB,UAAU,OAAO;GACjB,SAAS,OAAO;GAChB,mBAAmB,IAAI,IAAI;GAC3B,YAAY,cAAc,kCAAkC;GAC5D,YAAY,qBACX,mCACA,EACC,OAAO,gCACP,CACD;GACD,CAAC;EACF,MAAM,mBAAmB,CAAC,GAAG,gCAAgC,QAAQ,CAAC,CACpE,QAAQ,EAAE,YAAY,2BAA2B,MAAM,CAAC,CACxD,KAAK,EAAE,OAAO,gBAAgB;GAAE,GAAG;GAAO,MAAM;GAAU,EAAE;AAK9D,SAAO;GACN,SAAS;GACT,MAAM;IACL,aAAa;IACb;IACA;IACA,aARkB,MAAM,iBAAiB,IAAI,YAAY;IASzD;IACA;IACA;IACA;GACD;UACO,OAAO;AACf,UAAQ,MAAM,0BAA0B,MAAM;AAC9C,SAAO;GACN,SAAS;GACT,OAAO;IACN,MAAM;IACN,SAAS;IACT;GACD;;;;;;;;;;;;;AA0BH,eAAe,iBACd,IACA,aACwB;AACxB,KAAI,YAAY,WAAW,EAAG,QAAO,EAAE;CAGvC,MAAM,cAAc,MAAM,GACxB,WAAW,sBAAsB,CACjC,UAAU,4BAA4B,QAAQ,kBAAkB,CAChE,OAAO,CAAC,4BAA4B,CAAC,CACrC,MAAM,UAAU,KAAK,QAAQ,CAC7B,SAAS;CAEX,MAAM,uBAAuB,IAAI,IAAI,YAAY,KAAK,MAAM,EAAE,gBAAgB,CAAC;AA2C/E,SApCsB,MAAM,QAAQ,IACnC,YAAY,IAAI,OAAO,QAAQ;AAC9B,qBAAmB,IAAI,KAAK;EAC5B,MAAM,QAAQ,MAAM,IAAI;EAKxB,MAAM,YAJW,qBAAqB,IAAI,IAAI,KAAK,GAItB,GAAG,8BAA8B,GAAG;AAiBjE,UAfe,MAAM,GAAkB;;;OAGnC,IAAI,IAAI,IAAI,KAAK,CAAC;OAClB,IAAI,IAAI,IAAI,MAAM,CAAC;OACnB,UAAU;;;;;WAKN,IAAI,IAAI,MAAM,CAAC;;;;KAIrB,QAAQ,GAAG,EACC;GACb,CACF,EAIC,MAAM,CACN,UAAU,GAAG,MAAO,EAAE,aAAa,EAAE,aAAa,IAAI,EAAE,aAAa,EAAE,aAAa,KAAK,EAAG,CAC5F,MAAM,GAAG,GAAG,CAGA,KAAK,SAAS;EAC3B,IAAI,IAAI;EACR,YAAY,IAAI;EAChB,iBAAiB,IAAI;EACrB,OAAO,IAAI;EACX,MAAM,IAAI;EACV,QAAQ,IAAI;EACZ,WAAW,IAAI;EACf,UAAU,IAAI;EACd,EAAE"}

package/dist/database/migration-lock.d.mts

@@ -0,0 +1,37 @@
+import { Kysely, MigrationLockOptions, SqliteAdapter } from "kysely";
+
+//#region src/database/migration-lock.d.ts
+declare const MIGRATION_LOCK_TABLE = "_emdash_migrations_lock";
+declare function migrationLockHeldMessage(heldSince: number): string;
+/** When the lock was taken, as carried by the busy error of `LockingSqliteAdapter`. */
+declare function busyLockHeldSince(error: unknown): number | undefined;
+/**
+ * SQLite adapter that takes the migration lock in a database row, for a
+ * database whose clients have no connection-level lock to share (D1).
+ *
+ * Kysely creates the lock table with a single row, but none of its adapters
+ * writes to it. The holder stores the time it took the lock in `is_locked`
+ * (0 means free) and clears the row only while it still holds that time. A
+ * lock whose holder never released it stays until `clearMigrationLock` runs:
+ * the holder may still be migrating, or may have stopped partway through a
+ * migration.
+ */
+declare class LockingSqliteAdapter extends SqliteAdapter {
+  #private;
+  acquireMigrationLock(db: Kysely<any>, options: MigrationLockOptions): Promise<void>;
+  releaseMigrationLock(db: Kysely<any>, options: MigrationLockOptions): Promise<void>;
+}
+/**
+ * When the migration lock was taken, in milliseconds since the epoch, or null
+ * when it is free. Only `LockingSqliteAdapter` writes the lock row.
+ */
+declare function readMigrationLock(db: Kysely<any>): Promise<number | null>;
+/**
+ * Release a lock its holder never released. The row is cleared only while it
+ * still holds `heldSince`, so a lock taken again since it was read stays
+ * unless it was taken in that same millisecond.
+ */
+declare function clearMigrationLock(db: Kysely<any>, heldSince: number): Promise<boolean>;
+//#endregion
+export { LockingSqliteAdapter, MIGRATION_LOCK_TABLE, busyLockHeldSince, clearMigrationLock, migrationLockHeldMessage, readMigrationLock };
+//# sourceMappingURL=migration-lock.d.mts.map

package/dist/database/migration-lock.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"migration-lock.d.mts","names":[],"sources":["../../src/database/migration-lock.ts"],"mappings":";;;cAOa,oBAAA;AAAA,iBAOG,wBAAA,CAAyB,SAAA;;iBASzB,iBAAA,CAAkB,KAAA;;;AATlC;;;;;AASA;;;;cAiBa,oBAAA,SAA6B,aAAA;EAAA;EAI1B,oBAAA,CAEd,EAAA,EAAI,MAAA,OACJ,OAAA,EAAS,oBAAA,GACP,OAAA;EAsBY,oBAAA,CAEd,EAAA,EAAI,MAAA,OACJ,OAAA,EAAS,oBAAA,GACP,OAAA;AAAA;;;;;iBA8BkB,iBAAA,CAErB,EAAA,EAAI,MAAA,QACF,OAAA;;;;;;iBAoBmB,kBAAA,CAErB,EAAA,EAAI,MAAA,OACJ,SAAA,WACE,OAAA"}

package/dist/database/migration-lock.mjs

@@ -0,0 +1,76 @@
+import { n as isMissingTableError } from "../db-errors-CBD5yMro.mjs";
+import { MIGRATION_LOCK_BUSY_MESSAGE } from "./pg-migration-lock.mjs";
+import { SqliteAdapter } from "kysely";
+import { MIGRATION_LOCK_ID } from "kysely/migration";
+
+//#region src/database/migration-lock.ts
+const MIGRATION_LOCK_TABLE = "_emdash_migrations_lock";
+const RELEASE_ATTEMPTS = 3;
+function migrationLockHeldMessage(heldSince) {
+	return `The migration lock has been held since ${new Date(heldSince).toISOString()} (lock ${heldSince}). A migration may still be running; if none is, check the database and release the lock: https://docs.emdashcms.com/deployment/core-migrations/#release-a-stuck-migration-lock`;
+}
+/** When the lock was taken, as carried by the busy error of `LockingSqliteAdapter`. */
+function busyLockHeldSince(error) {
+	if (typeof error !== "object" || error === null) return void 0;
+	const heldSince = Reflect.get(error, "heldSince");
+	return typeof heldSince === "number" && heldSince > 0 ? heldSince : void 0;
+}
+/**
+* SQLite adapter that takes the migration lock in a database row, for a
+* database whose clients have no connection-level lock to share (D1).
+*
+* Kysely creates the lock table with a single row, but none of its adapters
+* writes to it. The holder stores the time it took the lock in `is_locked`
+* (0 means free) and clears the row only while it still holds that time. A
+* lock whose holder never released it stays until `clearMigrationLock` runs:
+* the holder may still be migrating, or may have stopped partway through a
+* migration.
+*/
+var LockingSqliteAdapter = class extends SqliteAdapter {
+	#held = /* @__PURE__ */ new WeakMap();
+	async acquireMigrationLock(db, options) {
+		const heldSince = Date.now();
+		if ((await db.updateTable(options.lockTable).set({ is_locked: heldSince }).where("id", "=", options.lockRowId).where("is_locked", "=", 0).executeTakeFirst()).numUpdatedRows !== 1n) {
+			const row = await db.selectFrom(options.lockTable).select("is_locked").where("id", "=", options.lockRowId).executeTakeFirst().catch(() => void 0);
+			throw Object.assign(new Error(MIGRATION_LOCK_BUSY_MESSAGE), { heldSince: Number(row?.is_locked ?? 0) });
+		}
+		this.#held.set(db, heldSince);
+	}
+	async releaseMigrationLock(db, options) {
+		const heldSince = this.#held.get(db);
+		if (heldSince === void 0) return;
+		this.#held.delete(db);
+		for (let attempt = 1;; attempt++) try {
+			await db.updateTable(options.lockTable).set({ is_locked: 0 }).where("id", "=", options.lockRowId).where("is_locked", "=", heldSince).execute();
+			return;
+		} catch (error) {
+			if (attempt === RELEASE_ATTEMPTS) throw error;
+		}
+	}
+};
+/**
+* When the migration lock was taken, in milliseconds since the epoch, or null
+* when it is free. Only `LockingSqliteAdapter` writes the lock row.
+*/
+async function readMigrationLock(db) {
+	try {
+		const row = await db.selectFrom(MIGRATION_LOCK_TABLE).select("is_locked").where("id", "=", MIGRATION_LOCK_ID).executeTakeFirst();
+		const heldSince = Number(row?.is_locked ?? 0);
+		return heldSince > 0 ? heldSince : null;
+	} catch (error) {
+		if (isMissingTableError(error)) return null;
+		throw error;
+	}
+}
+/**
+* Release a lock its holder never released. The row is cleared only while it
+* still holds `heldSince`, so a lock taken again since it was read stays
+* unless it was taken in that same millisecond.
+*/
+async function clearMigrationLock(db, heldSince) {
+	return (await db.updateTable(MIGRATION_LOCK_TABLE).set({ is_locked: 0 }).where("id", "=", MIGRATION_LOCK_ID).where("is_locked", "=", heldSince).executeTakeFirst()).numUpdatedRows > 0n;
+}
+
+//#endregion
+export { LockingSqliteAdapter, MIGRATION_LOCK_TABLE, busyLockHeldSince, clearMigrationLock, migrationLockHeldMessage, readMigrationLock };
+//# sourceMappingURL=migration-lock.mjs.map

package/dist/database/migration-lock.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"migration-lock.mjs","names":["#held"],"sources":["../../src/database/migration-lock.ts"],"sourcesContent":["import type { Kysely, MigrationLockOptions } from \"kysely\";\nimport { SqliteAdapter } from \"kysely\";\nimport { MIGRATION_LOCK_ID } from \"kysely/migration\";\n\nimport { isMissingTableError } from \"../utils/db-errors.js\";\nimport { MIGRATION_LOCK_BUSY_MESSAGE } from \"./pg-migration-lock.js\";\n\nexport const MIGRATION_LOCK_TABLE = \"_emdash_migrations_lock\";\n\nconst RELEASE_ATTEMPTS = 3;\n\nconst RELEASE_LOCK_DOCS_URL =\n\t\"https://docs.emdashcms.com/deployment/core-migrations/#release-a-stuck-migration-lock\";\n\nexport function migrationLockHeldMessage(heldSince: number): string {\n\treturn (\n\t\t`The migration lock has been held since ${new Date(heldSince).toISOString()} (lock ${heldSince}). ` +\n\t\t\"A migration may still be running; if none is, check the database and release the lock: \" +\n\t\tRELEASE_LOCK_DOCS_URL\n\t);\n}\n\n/** When the lock was taken, as carried by the busy error of `LockingSqliteAdapter`. */\nexport function busyLockHeldSince(error: unknown): number | undefined {\n\tif (typeof error !== \"object\" || error === null) return undefined;\n\tconst heldSince: unknown = Reflect.get(error, \"heldSince\");\n\treturn typeof heldSince === \"number\" && heldSince > 0 ? heldSince : undefined;\n}\n\n/**\n * SQLite adapter that takes the migration lock in a database row, for a\n * database whose clients have no connection-level lock to share (D1).\n *\n * Kysely creates the lock table with a single row, but none of its adapters\n * writes to it. The holder stores the time it took the lock in `is_locked`\n * (0 means free) and clears the row only while it still holds that time. A\n * lock whose holder never released it stays until `clearMigrationLock` runs:\n * the holder may still be migrating, or may have stopped partway through a\n * migration.\n */\nexport class LockingSqliteAdapter extends SqliteAdapter {\n\t// eslint-disable-next-line typescript/no-explicit-any -- matches the DialectAdapter signature\n\treadonly #held = new WeakMap<Kysely<any>, number>();\n\n\toverride async acquireMigrationLock(\n\t\t// eslint-disable-next-line typescript/no-explicit-any -- matches the DialectAdapter signature\n\t\tdb: Kysely<any>,\n\t\toptions: MigrationLockOptions,\n\t): Promise<void> {\n\t\tconst heldSince = Date.now();\n\t\tconst result = await db\n\t\t\t.updateTable(options.lockTable)\n\t\t\t.set({ is_locked: heldSince })\n\t\t\t.where(\"id\", \"=\", options.lockRowId)\n\t\t\t.where(\"is_locked\", \"=\", 0)\n\t\t\t.executeTakeFirst();\n\t\tif (result.numUpdatedRows !== 1n) {\n\t\t\tconst row = await db\n\t\t\t\t.selectFrom(options.lockTable)\n\t\t\t\t.select(\"is_locked\")\n\t\t\t\t.where(\"id\", \"=\", options.lockRowId)\n\t\t\t\t.executeTakeFirst()\n\t\t\t\t.catch(() => undefined);\n\t\t\tthrow Object.assign(new Error(MIGRATION_LOCK_BUSY_MESSAGE), {\n\t\t\t\theldSince: Number(row?.is_locked ?? 0),\n\t\t\t});\n\t\t}\n\t\tthis.#held.set(db, heldSince);\n\t}\n\n\toverride async releaseMigrationLock(\n\t\t// eslint-disable-next-line typescript/no-explicit-any -- matches the DialectAdapter signature\n\t\tdb: Kysely<any>,\n\t\toptions: MigrationLockOptions,\n\t): Promise<void> {\n\t\t// Kysely also calls this after acquireMigrationLock threw.\n\t\tconst heldSince = this.#held.get(db);\n\t\tif (heldSince === undefined) return;\n\t\tthis.#held.delete(db);\n\t\t// A lock left behind by a successful run goes unnoticed until the next\n\t\t// pending migration, so a failed write is retried. The write is\n\t\t// conditional on this run's acquire time, so a retry after a write that\n\t\t// landed can still clear a lock another run took in the same millisecond.\n\t\tfor (let attempt = 1; ; attempt++) {\n\t\t\ttry {\n\t\t\t\t// oxlint-disable-next-line no-await-in-loop -- retries are sequential\n\t\t\t\tawait db\n\t\t\t\t\t.updateTable(options.lockTable)\n\t\t\t\t\t.set({ is_locked: 0 })\n\t\t\t\t\t.where(\"id\", \"=\", options.lockRowId)\n\t\t\t\t\t.where(\"is_locked\", \"=\", heldSince)\n\t\t\t\t\t.execute();\n\t\t\t\treturn;\n\t\t\t} catch (error) {\n\t\t\t\tif (attempt === RELEASE_ATTEMPTS) throw error;\n\t\t\t}\n\t\t}\n\t}\n}\n\n/**\n * When the migration lock was taken, in milliseconds since the epoch, or null\n * when it is free. Only `LockingSqliteAdapter` writes the lock row.\n */\nexport async function readMigrationLock(\n\t// eslint-disable-next-line typescript/no-explicit-any -- reads a table outside the Database type\n\tdb: Kysely<any>,\n): Promise<number | null> {\n\ttry {\n\t\tconst row = await db\n\t\t\t.selectFrom(MIGRATION_LOCK_TABLE)\n\t\t\t.select(\"is_locked\")\n\t\t\t.where(\"id\", \"=\", MIGRATION_LOCK_ID)\n\t\t\t.executeTakeFirst();\n\t\tconst heldSince = Number(row?.is_locked ?? 0);\n\t\treturn heldSince > 0 ? heldSince : null;\n\t} catch (error) {\n\t\tif (isMissingTableError(error)) return null;\n\t\tthrow error;\n\t}\n}\n\n/**\n * Release a lock its holder never released. The row is cleared only while it\n * still holds `heldSince`, so a lock taken again since it was read stays\n * unless it was taken in that same millisecond.\n */\nexport async function clearMigrationLock(\n\t// eslint-disable-next-line typescript/no-explicit-any -- writes a table outside the Database type\n\tdb: Kysely<any>,\n\theldSince: number,\n): Promise<boolean> {\n\tconst result = await db\n\t\t.updateTable(MIGRATION_LOCK_TABLE)\n\t\t.set({ is_locked: 0 })\n\t\t.where(\"id\", \"=\", MIGRATION_LOCK_ID)\n\t\t.where(\"is_locked\", \"=\", heldSince)\n\t\t.executeTakeFirst();\n\treturn result.numUpdatedRows > 0n;\n}\n"],"mappings":";;;;;;AAOA,MAAa,uBAAuB;AAEpC,MAAM,mBAAmB;AAKzB,SAAgB,yBAAyB,WAA2B;AACnE,QACC,0CAA0C,IAAI,KAAK,UAAU,CAAC,aAAa,CAAC,SAAS,UAAU;;;AAOjG,SAAgB,kBAAkB,OAAoC;AACrE,KAAI,OAAO,UAAU,YAAY,UAAU,KAAM,QAAO;CACxD,MAAM,YAAqB,QAAQ,IAAI,OAAO,YAAY;AAC1D,QAAO,OAAO,cAAc,YAAY,YAAY,IAAI,YAAY;;;;;;;;;;;;;AAcrE,IAAa,uBAAb,cAA0C,cAAc;CAEvD,CAASA,uBAAQ,IAAI,SAA8B;CAEnD,MAAe,qBAEd,IACA,SACgB;EAChB,MAAM,YAAY,KAAK,KAAK;AAO5B,OANe,MAAM,GACnB,YAAY,QAAQ,UAAU,CAC9B,IAAI,EAAE,WAAW,WAAW,CAAC,CAC7B,MAAM,MAAM,KAAK,QAAQ,UAAU,CACnC,MAAM,aAAa,KAAK,EAAE,CAC1B,kBAAkB,EACT,mBAAmB,IAAI;GACjC,MAAM,MAAM,MAAM,GAChB,WAAW,QAAQ,UAAU,CAC7B,OAAO,YAAY,CACnB,MAAM,MAAM,KAAK,QAAQ,UAAU,CACnC,kBAAkB,CAClB,YAAY,OAAU;AACxB,SAAM,OAAO,OAAO,IAAI,MAAM,4BAA4B,EAAE,EAC3D,WAAW,OAAO,KAAK,aAAa,EAAE,EACtC,CAAC;;AAEH,QAAKA,KAAM,IAAI,IAAI,UAAU;;CAG9B,MAAe,qBAEd,IACA,SACgB;EAEhB,MAAM,YAAY,MAAKA,KAAM,IAAI,GAAG;AACpC,MAAI,cAAc,OAAW;AAC7B,QAAKA,KAAM,OAAO,GAAG;AAKrB,OAAK,IAAI,UAAU,IAAK,UACvB,KAAI;AAEH,SAAM,GACJ,YAAY,QAAQ,UAAU,CAC9B,IAAI,EAAE,WAAW,GAAG,CAAC,CACrB,MAAM,MAAM,KAAK,QAAQ,UAAU,CACnC,MAAM,aAAa,KAAK,UAAU,CAClC,SAAS;AACX;WACQ,OAAO;AACf,OAAI,YAAY,iBAAkB,OAAM;;;;;;;;AAU5C,eAAsB,kBAErB,IACyB;AACzB,KAAI;EACH,MAAM,MAAM,MAAM,GAChB,WAAW,qBAAqB,CAChC,OAAO,YAAY,CACnB,MAAM,MAAM,KAAK,kBAAkB,CACnC,kBAAkB;EACpB,MAAM,YAAY,OAAO,KAAK,aAAa,EAAE;AAC7C,SAAO,YAAY,IAAI,YAAY;UAC3B,OAAO;AACf,MAAI,oBAAoB,MAAM,CAAE,QAAO;AACvC,QAAM;;;;;;;;AASR,eAAsB,mBAErB,IACA,WACmB;AAOnB,SANe,MAAM,GACnB,YAAY,qBAAqB,CACjC,IAAI,EAAE,WAAW,GAAG,CAAC,CACrB,MAAM,MAAM,KAAK,kBAAkB,CACnC,MAAM,aAAa,KAAK,UAAU,CAClC,kBAAkB,EACN,iBAAiB"}

package/dist/database/pg-migration-lock.d.mts

@@ -2,7 +2,7 @@ import { DialectAdapter, PostgresDialect } from "kysely";
 
 //#region src/database/pg-migration-lock.d.ts
 /**
- * Sentinel message thrown when another migrator holds the advisory lock.
+ * Sentinel message thrown when another migrator holds the migration lock.
  * `runMigrations` matches on it to route into the concurrent-migrator wait.
  */
 declare const MIGRATION_LOCK_BUSY_MESSAGE = "EMDASH_MIGRATION_LOCK_BUSY";

package/dist/database/pg-migration-lock.mjs

@@ -2,7 +2,7 @@ import { PostgresAdapter, PostgresDialect, sql } from "kysely";
 
 //#region src/database/pg-migration-lock.ts
 /**
-* Sentinel message thrown when another migrator holds the advisory lock.
+* Sentinel message thrown when another migrator holds the migration lock.
 * `runMigrations` matches on it to route into the concurrent-migrator wait.
 */
 const MIGRATION_LOCK_BUSY_MESSAGE = "EMDASH_MIGRATION_LOCK_BUSY";