emdash 0.40.1 → 0.41.0

package/dist/redirects-BjTwDTsV.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"redirects-BjTwDTsV.mjs","names":[],"sources":["../src/api/schemas/common.ts","../src/api/schemas/redirects.ts"],"sourcesContent":["import { z } from \"zod\";\n\nimport { LOCALE_CODE_PATTERN } from \"../../i18n/config.js\";\n\n// ---------------------------------------------------------------------------\n// Role level\n// ---------------------------------------------------------------------------\n\n/** Valid role level values */\nexport const VALID_ROLE_LEVELS = new Set([10, 20, 30, 40, 50]);\n\n/** Role level — coerces string/number to valid RoleLevel (10|20|30|40|50) */\nexport const roleLevel = z.coerce\n\t.number()\n\t.int()\n\t.refine((n): n is 10 | 20 | 30 | 40 | 50 => VALID_ROLE_LEVELS.has(n), {\n\t\tmessage: \"Invalid role level. Must be 10, 20, 30, 40, or 50\",\n\t});\n\n// ---------------------------------------------------------------------------\n// Pagination\n// ---------------------------------------------------------------------------\n\n/** Pagination query params — cursor-based */\nexport const cursorPaginationQuery = z\n\t.object({\n\t\tcursor: z.string().max(2048).optional().meta({ description: \"Opaque cursor for pagination\" }),\n\t\tlimit: z.coerce.number().int().min(1).max(100).optional().default(50).meta({\n\t\t\tdescription: \"Maximum number of items to return (1-100, default 50)\",\n\t\t}),\n\t})\n\t.meta({ id: \"CursorPaginationQuery\" });\n\n/** Pagination query params — offset-based */\nexport const offsetPaginationQuery = z\n\t.object({\n\t\tlimit: z.coerce.number().int().min(1).max(100).optional().default(50),\n\t\toffset: z.coerce.number().int().min(0).optional().default(0),\n\t})\n\t.meta({ id: \"OffsetPaginationQuery\" });\n\n// ---------------------------------------------------------------------------\n// Shared primitives\n// ---------------------------------------------------------------------------\n\n/** Slug pattern: lowercase letters, digits, underscores; starts with letter */\nexport const slugPattern = /^[a-z][a-z0-9_]*$/;\n\n/** Matches http(s) scheme at start of URL */\nconst HTTP_SCHEME_RE = /^https?:\\/\\//i;\n\n/** Validates that a URL string uses http or https scheme. Rejects javascript:/data: URI XSS vectors. */\nexport const httpUrl = z\n\t.url()\n\t.refine((url) => HTTP_SCHEME_RE.test(url), \"URL must use http or https\");\n\n/**\n * BCP 47 locale code — language with optional script/region subtags (e.g. en, en-US, pt-BR, es-419, zh-Hant).\n * Validation is case-insensitive, but the value is preserved verbatim because the site config, stored\n * `locale` columns, and public query path all keep the raw BCP-47 casing.\n */\nexport const localeCode = z.string().regex(LOCALE_CODE_PATTERN, \"Invalid locale code\");\n\n/** Shared `?locale=xx` query shape for endpoints that filter by locale. */\nexport const localeFilterQuery = z\n\t.object({\n\t\tlocale: localeCode.optional(),\n\t})\n\t.meta({ id: \"LocaleFilterQuery\" });\n\n// ---------------------------------------------------------------------------\n// OpenAPI: Shared response schemas\n// ---------------------------------------------------------------------------\n\n/** Standard API error response */\nexport const apiErrorSchema = z\n\t.object({\n\t\tsuccess: z.literal(false).meta({ description: \"Discriminant: always false for errors\" }),\n\t\terror: z.object({\n\t\t\tcode: z\n\t\t\t\t.string()\n\t\t\t\t.meta({ description: \"Machine-readable error code\", examples: [\"NOT_FOUND\"] }),\n\t\t\tmessage: z.string().meta({ description: \"Human-readable error message\" }),\n\t\t}),\n\t})\n\t.meta({ id: \"ApiError\" });\n\n/** Wrap a data schema in the standard success envelope: { success: true, data: T } */\nexport function successEnvelope<T extends z.ZodType>(dataSchema: T) {\n\treturn z.object({\n\t\tsuccess: z.literal(true).meta({ description: \"Discriminant: always true for success\" }),\n\t\tdata: dataSchema,\n\t});\n}\n\n/** Standard delete response */\nexport const deleteResponseSchema = z.object({ deleted: z.literal(true) }).meta({\n\tid: \"DeleteResponse\",\n});\n\n/** Media delete response: `storageDeleted` is false when the stored file survived and is retried by cleanup */\nexport const mediaDeleteResponseSchema = deleteResponseSchema\n\t.extend({ storageDeleted: z.boolean() })\n\t.meta({ id: \"MediaDeleteResponse\" });\n\n/** Standard count response */\nexport const countResponseSchema = z\n\t.object({ count: z.number().int().min(0) })\n\t.meta({ id: \"CountResponse\" });\n","import { z } from \"zod\";\n\nimport { isTerminalStatus, REDIRECT_RULE_STATUSES } from \"../../redirects/status.js\";\nimport { cursorPaginationQuery } from \"./common.js\";\n\n// ---------------------------------------------------------------------------\n// Redirects: Input schemas\n// ---------------------------------------------------------------------------\n\nconst redirectType = z.coerce\n\t.number()\n\t.int()\n\t.refine((n) => REDIRECT_RULE_STATUSES.includes(n), {\n\t\tmessage: \"Redirect type must be 301, 302, 307, 308, 410, or 451\",\n\t});\n\n/** Matches CR or LF characters */\nconst CRLF = /[\\r\\n]/;\n\n/** Path must start with / and not be protocol-relative, contain no CRLF, and no path traversal */\nconst urlPath = z\n\t.string()\n\t.min(1)\n\t.refine((s) => s.startsWith(\"/\") && !s.startsWith(\"//\"), {\n\t\tmessage: \"Must be a path starting with / (no protocol-relative URLs)\",\n\t})\n\t.refine((s) => !CRLF.test(s), {\n\t\tmessage: \"URL must not contain newline characters\",\n\t})\n\t.refine(\n\t\t(s) => {\n\t\t\ttry {\n\t\t\t\treturn !decodeURIComponent(s).split(\"/\").includes(\"..\");\n\t\t\t} catch {\n\t\t\t\treturn false;\n\t\t\t}\n\t\t},\n\t\t{ message: \"URL must not contain path traversal segments\" },\n\t);\n\nexport const createRedirectBody = z\n\t.object({\n\t\tsource: urlPath,\n\t\t// Optional: terminal statuses (410/451) have no destination. Redirect\n\t\t// statuses require one — enforced by the refine below.\n\t\tdestination: z.union([urlPath, z.literal(\"\")]).optional(),\n\t\ttype: redirectType.optional().default(301),\n\t\tenabled: z.boolean().optional().default(true),\n\t\tgroupName: z.string().nullish(),\n\t})\n\t.refine((o) => isTerminalStatus(o.type ?? 301) || !!o.destination, {\n\t\tmessage: \"destination is required for redirect types (301, 302, 307, 308)\",\n\t\tpath: [\"destination\"],\n\t})\n\t.meta({ id: \"CreateRedirectBody\" });\n\nexport const updateRedirectBody = z\n\t.object({\n\t\tsource: urlPath.optional(),\n\t\tdestination: z.union([urlPath, z.literal(\"\")]).optional(),\n\t\ttype: redirectType.optional(),\n\t\tenabled: z.boolean().optional(),\n\t\tgroupName: z.string().nullish(),\n\t})\n\t.refine((o) => Object.values(o).some((v) => v !== undefined), {\n\t\tmessage: \"At least one field must be provided\",\n\t})\n\t.meta({ id: \"UpdateRedirectBody\" });\n\nexport const redirectsListQuery = cursorPaginationQuery\n\t.extend({\n\t\tsearch: z.string().optional(),\n\t\tgroup: z.string().optional(),\n\t\tenabled: z\n\t\t\t.enum([\"true\", \"false\"])\n\t\t\t.transform((v) => v === \"true\")\n\t\t\t.optional(),\n\t\tauto: z\n\t\t\t.enum([\"true\", \"false\"])\n\t\t\t.transform((v) => v === \"true\")\n\t\t\t.optional(),\n\t})\n\t.meta({ id: \"RedirectsListQuery\" });\n\n// ---------------------------------------------------------------------------\n// 404 Log: Input schemas\n// ---------------------------------------------------------------------------\n\nexport const notFoundListQuery = cursorPaginationQuery\n\t.extend({\n\t\tsearch: z.string().optional(),\n\t})\n\t.meta({ id: \"NotFoundListQuery\" });\n\nexport const notFoundSummaryQuery = z.object({\n\tlimit: z.coerce.number().int().min(1).max(100).optional().default(50),\n});\n\nexport const notFoundPruneBody = z\n\t.object({\n\t\tolderThan: z.iso.datetime({ message: \"olderThan must be an ISO 8601 datetime\" }).or(\n\t\t\tz.iso.datetime({\n\t\t\t\tprecision: -1,\n\t\t\t\tmessage: \"olderThan must be an ISO 8601 datetime\",\n\t\t\t}),\n\t\t),\n\t})\n\t.meta({ id: \"NotFoundPruneBody\" });\n\n// ---------------------------------------------------------------------------\n// Redirects: Response schemas\n// ---------------------------------------------------------------------------\n\nexport const redirectSchema = z\n\t.object({\n\t\tid: z.string(),\n\t\tsource: z.string(),\n\t\tdestination: z.string(),\n\t\ttype: z.number().int(),\n\t\tisPattern: z.boolean(),\n\t\tenabled: z.boolean(),\n\t\thits: z.number().int(),\n\t\tlastHitAt: z.string().nullable(),\n\t\tgroupName: z.string().nullable(),\n\t\tauto: z.boolean(),\n\t\tcreatedAt: z.string(),\n\t\tupdatedAt: z.string(),\n\t})\n\t.meta({ id: \"Redirect\" });\n\nexport const redirectListResponseSchema = z\n\t.object({\n\t\titems: z.array(redirectSchema),\n\t\tnextCursor: z.string().optional(),\n\t\tloopRedirectIds: z.array(z.string()).optional(),\n\t})\n\t.meta({ id: \"RedirectListResponse\" });\n\nexport const notFoundEntrySchema = z\n\t.object({\n\t\tid: z.string(),\n\t\tpath: z.string(),\n\t\treferrer: z.string().nullable(),\n\t\tuserAgent: z.string().nullable(),\n\t\tip: z.string().nullable(),\n\t\tcreatedAt: z.string(),\n\t})\n\t.meta({ id: \"NotFoundEntry\" });\n\nexport const notFoundListResponseSchema = z\n\t.object({\n\t\titems: z.array(notFoundEntrySchema),\n\t\tnextCursor: z.string().optional(),\n\t})\n\t.meta({ id: \"NotFoundListResponse\" });\n\nexport const notFoundSummarySchema = z\n\t.object({\n\t\tpath: z.string(),\n\t\tcount: z.number().int(),\n\t\tlastSeen: z.string(),\n\t\ttopReferrer: z.string().nullable(),\n\t})\n\t.meta({ id: \"NotFoundSummary\" });\n\nexport const notFoundSummaryResponseSchema = z\n\t.object({ items: z.array(notFoundSummarySchema) })\n\t.meta({ id: \"NotFoundSummaryResponse\" });\n"],"mappings":";;;;;;AASA,MAAa,oBAAoB,IAAI,IAAI;CAAC;CAAI;CAAI;CAAI;CAAI;CAAG,CAAC;;AAG9D,MAAa,YAAY,EAAE,OACzB,QAAQ,CACR,KAAK,CACL,QAAQ,MAAmC,kBAAkB,IAAI,EAAE,EAAE,EACrE,SAAS,qDACT,CAAC;;AAOH,MAAa,wBAAwB,EACnC,OAAO;CACP,QAAQ,EAAE,QAAQ,CAAC,IAAI,KAAK,CAAC,UAAU,CAAC,KAAK,EAAE,aAAa,gCAAgC,CAAC;CAC7F,OAAO,EAAE,OAAO,QAAQ,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,QAAQ,GAAG,CAAC,KAAK,EAC1E,aAAa,yDACb,CAAC;CACF,CAAC,CACD,KAAK,EAAE,IAAI,yBAAyB,CAAC;;AAGvC,MAAa,wBAAwB,EACnC,OAAO;CACP,OAAO,EAAE,OAAO,QAAQ,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,QAAQ,GAAG;CACrE,QAAQ,EAAE,OAAO,QAAQ,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,UAAU,CAAC,QAAQ,EAAE;CAC5D,CAAC,CACD,KAAK,EAAE,IAAI,yBAAyB,CAAC;;AAOvC,MAAa,cAAc;;AAG3B,MAAM,iBAAiB;;AAGvB,MAAa,UAAU,EACrB,KAAK,CACL,QAAQ,QAAQ,eAAe,KAAK,IAAI,EAAE,6BAA6B;;;;;;AAOzE,MAAa,aAAa,EAAE,QAAQ,CAAC,MAAM,qBAAqB,sBAAsB;;AAGtF,MAAa,oBAAoB,EAC/B,OAAO,EACP,QAAQ,WAAW,UAAU,EAC7B,CAAC,CACD,KAAK,EAAE,IAAI,qBAAqB,CAAC;;AAOnC,MAAa,iBAAiB,EAC5B,OAAO;CACP,SAAS,EAAE,QAAQ,MAAM,CAAC,KAAK,EAAE,aAAa,yCAAyC,CAAC;CACxF,OAAO,EAAE,OAAO;EACf,MAAM,EACJ,QAAQ,CACR,KAAK;GAAE,aAAa;GAA+B,UAAU,CAAC,YAAY;GAAE,CAAC;EAC/E,SAAS,EAAE,QAAQ,CAAC,KAAK,EAAE,aAAa,gCAAgC,CAAC;EACzE,CAAC;CACF,CAAC,CACD,KAAK,EAAE,IAAI,YAAY,CAAC;;AAG1B,SAAgB,gBAAqC,YAAe;AACnE,QAAO,EAAE,OAAO;EACf,SAAS,EAAE,QAAQ,KAAK,CAAC,KAAK,EAAE,aAAa,yCAAyC,CAAC;EACvF,MAAM;EACN,CAAC;;;AAIH,MAAa,uBAAuB,EAAE,OAAO,EAAE,SAAS,EAAE,QAAQ,KAAK,EAAE,CAAC,CAAC,KAAK,EAC/E,IAAI,kBACJ,CAAC;;AAGF,MAAa,4BAA4B,qBACvC,OAAO,EAAE,gBAAgB,EAAE,SAAS,EAAE,CAAC,CACvC,KAAK,EAAE,IAAI,uBAAuB,CAAC;;AAGrC,MAAa,sBAAsB,EACjC,OAAO,EAAE,OAAO,EAAE,QAAQ,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE,CAAC,CAC1C,KAAK,EAAE,IAAI,iBAAiB,CAAC;;;;ACnG/B,MAAM,eAAe,EAAE,OACrB,QAAQ,CACR,KAAK,CACL,QAAQ,MAAM,uBAAuB,SAAS,EAAE,EAAE,EAClD,SAAS,yDACT,CAAC;;AAGH,MAAM,OAAO;;AAGb,MAAM,UAAU,EACd,QAAQ,CACR,IAAI,EAAE,CACN,QAAQ,MAAM,EAAE,WAAW,IAAI,IAAI,CAAC,EAAE,WAAW,KAAK,EAAE,EACxD,SAAS,8DACT,CAAC,CACD,QAAQ,MAAM,CAAC,KAAK,KAAK,EAAE,EAAE,EAC7B,SAAS,2CACT,CAAC,CACD,QACC,MAAM;AACN,KAAI;AACH,SAAO,CAAC,mBAAmB,EAAE,CAAC,MAAM,IAAI,CAAC,SAAS,KAAK;SAChD;AACP,SAAO;;GAGT,EAAE,SAAS,gDAAgD,CAC3D;AAEF,MAAa,qBAAqB,EAChC,OAAO;CACP,QAAQ;CAGR,aAAa,EAAE,MAAM,CAAC,SAAS,EAAE,QAAQ,GAAG,CAAC,CAAC,CAAC,UAAU;CACzD,MAAM,aAAa,UAAU,CAAC,QAAQ,IAAI;CAC1C,SAAS,EAAE,SAAS,CAAC,UAAU,CAAC,QAAQ,KAAK;CAC7C,WAAW,EAAE,QAAQ,CAAC,SAAS;CAC/B,CAAC,CACD,QAAQ,MAAM,iBAAiB,EAAE,QAAQ,IAAI,IAAI,CAAC,CAAC,EAAE,aAAa;CAClE,SAAS;CACT,MAAM,CAAC,cAAc;CACrB,CAAC,CACD,KAAK,EAAE,IAAI,sBAAsB,CAAC;AAEpC,MAAa,qBAAqB,EAChC,OAAO;CACP,QAAQ,QAAQ,UAAU;CAC1B,aAAa,EAAE,MAAM,CAAC,SAAS,EAAE,QAAQ,GAAG,CAAC,CAAC,CAAC,UAAU;CACzD,MAAM,aAAa,UAAU;CAC7B,SAAS,EAAE,SAAS,CAAC,UAAU;CAC/B,WAAW,EAAE,QAAQ,CAAC,SAAS;CAC/B,CAAC,CACD,QAAQ,MAAM,OAAO,OAAO,EAAE,CAAC,MAAM,MAAM,MAAM,OAAU,EAAE,EAC7D,SAAS,uCACT,CAAC,CACD,KAAK,EAAE,IAAI,sBAAsB,CAAC;AAEpC,MAAa,qBAAqB,sBAChC,OAAO;CACP,QAAQ,EAAE,QAAQ,CAAC,UAAU;CAC7B,OAAO,EAAE,QAAQ,CAAC,UAAU;CAC5B,SAAS,EACP,KAAK,CAAC,QAAQ,QAAQ,CAAC,CACvB,WAAW,MAAM,MAAM,OAAO,CAC9B,UAAU;CACZ,MAAM,EACJ,KAAK,CAAC,QAAQ,QAAQ,CAAC,CACvB,WAAW,MAAM,MAAM,OAAO,CAC9B,UAAU;CACZ,CAAC,CACD,KAAK,EAAE,IAAI,sBAAsB,CAAC;AAMpC,MAAa,oBAAoB,sBAC/B,OAAO,EACP,QAAQ,EAAE,QAAQ,CAAC,UAAU,EAC7B,CAAC,CACD,KAAK,EAAE,IAAI,qBAAqB,CAAC;AAEnC,MAAa,uBAAuB,EAAE,OAAO,EAC5C,OAAO,EAAE,OAAO,QAAQ,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,QAAQ,GAAG,EACrE,CAAC;AAEF,MAAa,oBAAoB,EAC/B,OAAO,EACP,WAAW,EAAE,IAAI,SAAS,EAAE,SAAS,0CAA0C,CAAC,CAAC,GAChF,EAAE,IAAI,SAAS;CACd,WAAW;CACX,SAAS;CACT,CAAC,CACF,EACD,CAAC,CACD,KAAK,EAAE,IAAI,qBAAqB,CAAC;AAMnC,MAAa,iBAAiB,EAC5B,OAAO;CACP,IAAI,EAAE,QAAQ;CACd,QAAQ,EAAE,QAAQ;CAClB,aAAa,EAAE,QAAQ;CACvB,MAAM,EAAE,QAAQ,CAAC,KAAK;CACtB,WAAW,EAAE,SAAS;CACtB,SAAS,EAAE,SAAS;CACpB,MAAM,EAAE,QAAQ,CAAC,KAAK;CACtB,WAAW,EAAE,QAAQ,CAAC,UAAU;CAChC,WAAW,EAAE,QAAQ,CAAC,UAAU;CAChC,MAAM,EAAE,SAAS;CACjB,WAAW,EAAE,QAAQ;CACrB,WAAW,EAAE,QAAQ;CACrB,CAAC,CACD,KAAK,EAAE,IAAI,YAAY,CAAC;AAE1B,MAAa,6BAA6B,EACxC,OAAO;CACP,OAAO,EAAE,MAAM,eAAe;CAC9B,YAAY,EAAE,QAAQ,CAAC,UAAU;CACjC,iBAAiB,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,UAAU;CAC/C,CAAC,CACD,KAAK,EAAE,IAAI,wBAAwB,CAAC;AAEtC,MAAa,sBAAsB,EACjC,OAAO;CACP,IAAI,EAAE,QAAQ;CACd,MAAM,EAAE,QAAQ;CAChB,UAAU,EAAE,QAAQ,CAAC,UAAU;CAC/B,WAAW,EAAE,QAAQ,CAAC,UAAU;CAChC,IAAI,EAAE,QAAQ,CAAC,UAAU;CACzB,WAAW,EAAE,QAAQ;CACrB,CAAC,CACD,KAAK,EAAE,IAAI,iBAAiB,CAAC;AAE/B,MAAa,6BAA6B,EACxC,OAAO;CACP,OAAO,EAAE,MAAM,oBAAoB;CACnC,YAAY,EAAE,QAAQ,CAAC,UAAU;CACjC,CAAC,CACD,KAAK,EAAE,IAAI,wBAAwB,CAAC;AAEtC,MAAa,wBAAwB,EACnC,OAAO;CACP,MAAM,EAAE,QAAQ;CAChB,OAAO,EAAE,QAAQ,CAAC,KAAK;CACvB,UAAU,EAAE,QAAQ;CACpB,aAAa,EAAE,QAAQ,CAAC,UAAU;CAClC,CAAC,CACD,KAAK,EAAE,IAAI,mBAAmB,CAAC;AAEjC,MAAa,gCAAgC,EAC3C,OAAO,EAAE,OAAO,EAAE,MAAM,sBAAsB,EAAE,CAAC,CACjD,KAAK,EAAE,IAAI,2BAA2B,CAAC"}

package/dist/redirects-Ck50kH3n.mjs

@@ -0,0 +1,446 @@
+import { t as OptionsRepository } from "./options-DhrI7eMv.mjs";
+import { i as InvalidCursorError } from "./types-aOOxRSx6.mjs";
+import { a as validateDestinationParams, o as validatePattern, r as isPattern } from "./patterns-CoqlXUvk.mjs";
+import { n as RedirectWriteBusyError, t as RedirectRepository } from "./redirect-D1ArbO85.mjs";
+import { n as invalidateRedirectCache } from "./cache-DkvhQ8XE.mjs";
+import { n as isTerminalStatus } from "./status-lzyj4Uu7.mjs";
+import { n as wouldCreateLoop, t as detectLoops } from "./loops-DMKlygqX.mjs";
+
+//#region src/api/handlers/redirects.ts
+async function withRedirectWriteLock(repo, action) {
+	try {
+		return await repo.withWriteLock(action);
+	} catch (error) {
+		if (error instanceof RedirectWriteBusyError) return {
+			success: false,
+			error: {
+				code: "REDIRECT_BUSY",
+				message: "Another redirect change is in progress"
+			}
+		};
+		throw error;
+	}
+}
+/**
+* List redirects with cursor pagination and optional filters
+*/
+async function handleRedirectList(db, params) {
+	try {
+		const result = await new RedirectRepository(db).findMany(params);
+		const loopRedirectIds = await getLoopRedirectIds(db);
+		return {
+			success: true,
+			data: {
+				...result,
+				...loopRedirectIds.length > 0 ? { loopRedirectIds } : {}
+			}
+		};
+	} catch (error) {
+		if (error instanceof InvalidCursorError) return {
+			success: false,
+			error: {
+				code: "INVALID_CURSOR",
+				message: error.message
+			}
+		};
+		return {
+			success: false,
+			error: {
+				code: "REDIRECT_LIST_ERROR",
+				message: "Failed to fetch redirects"
+			}
+		};
+	}
+}
+/**
+* Create a redirect rule
+*/
+async function handleRedirectCreate(db, input) {
+	try {
+		const result = await withRedirectWriteLock(new RedirectRepository(db), async (fence, repo) => {
+			const type = input.type ?? 301;
+			const terminal = isTerminalStatus(type);
+			const destination = terminal ? "" : input.destination ?? "";
+			if (!terminal && input.source === destination) return {
+				success: false,
+				error: {
+					code: "VALIDATION_ERROR",
+					message: "Source and destination must be different"
+				}
+			};
+			const sourceIsPattern = isPattern(input.source);
+			if (sourceIsPattern) {
+				const patternError = validatePattern(input.source);
+				if (patternError) return {
+					success: false,
+					error: {
+						code: "VALIDATION_ERROR",
+						message: `Invalid source pattern: ${patternError}`
+					}
+				};
+				if (!terminal) {
+					const destError = validateDestinationParams(input.source, destination);
+					if (destError) return {
+						success: false,
+						error: {
+							code: "VALIDATION_ERROR",
+							message: destError
+						}
+					};
+				}
+			}
+			if (await repo.findBySource(input.source)) return {
+				success: false,
+				error: {
+					code: "CONFLICT",
+					message: `A redirect from "${input.source}" already exists`
+				}
+			};
+			if (!terminal && input.enabled !== false) {
+				const edges = toEdges(await repo.findAllEnabled());
+				const loopPath = wouldCreateLoop(input.source, destination, edges);
+				if (loopPath) return loopError(loopPath);
+			}
+			return {
+				success: true,
+				data: await repo.create({
+					source: input.source,
+					destination,
+					type,
+					isPattern: sourceIsPattern,
+					enabled: input.enabled ?? true,
+					groupName: input.groupName ?? null
+				}, fence)
+			};
+		});
+		if (result.success) invalidateRedirectCache();
+		return result;
+	} catch {
+		return {
+			success: false,
+			error: {
+				code: "REDIRECT_CREATE_ERROR",
+				message: "Failed to create redirect"
+			}
+		};
+	}
+}
+/**
+* Get a redirect by ID
+*/
+async function handleRedirectGet(db, id) {
+	try {
+		const redirect = await new RedirectRepository(db).findById(id);
+		if (!redirect) return {
+			success: false,
+			error: {
+				code: "NOT_FOUND",
+				message: `Redirect "${id}" not found`
+			}
+		};
+		return {
+			success: true,
+			data: redirect
+		};
+	} catch {
+		return {
+			success: false,
+			error: {
+				code: "REDIRECT_GET_ERROR",
+				message: "Failed to fetch redirect"
+			}
+		};
+	}
+}
+/**
+* Update a redirect by ID
+*/
+async function handleRedirectUpdate(db, id, input, options) {
+	try {
+		const result = await withRedirectWriteLock(new RedirectRepository(db), async (fence, repo) => {
+			const existing = await repo.findById(id);
+			if (!existing) return {
+				success: false,
+				error: {
+					code: "NOT_FOUND",
+					message: `Redirect "${id}" not found`
+				}
+			};
+			if (options?.expectedRevision !== void 0) {
+				if (await repo.findConfigRevision(id) !== options.expectedRevision) return {
+					success: false,
+					error: {
+						code: "CONFLICT",
+						message: "Redirect changed since it was read"
+					}
+				};
+			}
+			const newSource = input.source ?? existing.source;
+			const terminal = isTerminalStatus(input.type ?? existing.type);
+			const newDest = terminal ? "" : input.destination ?? existing.destination;
+			if (!terminal && !newDest) return {
+				success: false,
+				error: {
+					code: "VALIDATION_ERROR",
+					message: "destination is required for redirect types (301, 302, 307, 308)"
+				}
+			};
+			if (!terminal && newSource === newDest) return {
+				success: false,
+				error: {
+					code: "VALIDATION_ERROR",
+					message: "Source and destination must be different"
+				}
+			};
+			if (input.source !== void 0) {
+				if (isPattern(input.source)) {
+					const patternError = validatePattern(input.source);
+					if (patternError) return {
+						success: false,
+						error: {
+							code: "VALIDATION_ERROR",
+							message: `Invalid source pattern: ${patternError}`
+						}
+					};
+				}
+				const dup = await repo.findBySource(input.source);
+				if (dup && dup.id !== id) return {
+					success: false,
+					error: {
+						code: "CONFLICT",
+						message: `A redirect from "${input.source}" already exists`
+					}
+				};
+			}
+			if (isPattern(newSource) && !terminal) {
+				const destError = validateDestinationParams(newSource, newDest);
+				if (destError) return {
+					success: false,
+					error: {
+						code: "VALIDATION_ERROR",
+						message: destError
+					}
+				};
+			}
+			const willBeEnabled = input.enabled ?? existing.enabled;
+			if (!terminal && willBeEnabled && (input.source !== void 0 || input.destination !== void 0)) {
+				const loopPath = wouldCreateLoop(newSource, newDest, toEdges(await repo.findAllEnabled()), id);
+				if (loopPath) return loopError(loopPath);
+			}
+			const updated = await repo.update(id, {
+				source: input.source,
+				destination: terminal ? "" : input.destination,
+				type: input.type,
+				enabled: input.enabled,
+				groupName: input.groupName
+			}, options?.expectedRevision, fence);
+			if (!updated) return {
+				success: false,
+				error: options?.expectedRevision ? {
+					code: "CONFLICT",
+					message: "Redirect changed since it was read"
+				} : {
+					code: "REDIRECT_UPDATE_ERROR",
+					message: "Failed to update redirect"
+				}
+			};
+			await updateLoopCache(repo.db);
+			return {
+				success: true,
+				data: updated
+			};
+		});
+		if (result.success) invalidateRedirectCache();
+		return result;
+	} catch {
+		return {
+			success: false,
+			error: {
+				code: "REDIRECT_UPDATE_ERROR",
+				message: "Failed to update redirect"
+			}
+		};
+	}
+}
+/**
+* Delete a redirect by ID
+*/
+async function handleRedirectDelete(db, id, options) {
+	try {
+		const result = await withRedirectWriteLock(new RedirectRepository(db), async (fence, repo) => {
+			if (options?.expectedRevision !== void 0) {
+				if (!await repo.findById(id)) return {
+					success: false,
+					error: {
+						code: "NOT_FOUND",
+						message: `Redirect "${id}" not found`
+					}
+				};
+				if (await repo.findConfigRevision(id) !== options.expectedRevision) return {
+					success: false,
+					error: {
+						code: "CONFLICT",
+						message: "Redirect changed since it was read"
+					}
+				};
+			}
+			if (!await repo.delete(id, options?.expectedRevision, fence)) return {
+				success: false,
+				error: options?.expectedRevision ? {
+					code: "CONFLICT",
+					message: "Redirect changed since it was read"
+				} : {
+					code: "NOT_FOUND",
+					message: `Redirect "${id}" not found`
+				}
+			};
+			await updateLoopCache(repo.db);
+			return {
+				success: true,
+				data: { deleted: true }
+			};
+		});
+		if (result.success) invalidateRedirectCache();
+		return result;
+	} catch {
+		return {
+			success: false,
+			error: {
+				code: "REDIRECT_DELETE_ERROR",
+				message: "Failed to delete redirect"
+			}
+		};
+	}
+}
+function loopError(loopPath) {
+	return {
+		success: false,
+		error: {
+			code: "VALIDATION_ERROR",
+			message: `This redirect would create a loop:\n${loopPath.slice(0, -1).map((p, i) => `${p} \u2192 ${loopPath[i + 1]}`).join("\n")}`
+		}
+	};
+}
+function toEdges(redirects) {
+	return redirects.map((r) => ({
+		id: r.id,
+		source: r.source,
+		destination: r.destination,
+		enabled: r.enabled,
+		isPattern: r.isPattern
+	}));
+}
+const LOOP_CACHE_KEY = "_redirect_loop_ids";
+/**
+* Recompute loop redirect IDs and store in the options table.
+*/
+async function updateLoopCache(db) {
+	try {
+		const options = new OptionsRepository(db);
+		const loopRedirectIds = detectLoops(toEdges(await new RedirectRepository(db).findAllEnabled()));
+		await options.set(LOOP_CACHE_KEY, loopRedirectIds);
+	} catch (error) {
+		console.error("Failed to update redirect loop cache:", error);
+	}
+}
+/**
+* Get loop redirect IDs from cache, computing lazily on first access.
+*/
+async function getLoopRedirectIds(db) {
+	try {
+		const options = new OptionsRepository(db);
+		const cached = await options.get(LOOP_CACHE_KEY);
+		if (cached !== null) return cached;
+		await updateLoopCache(db);
+		return await options.get(LOOP_CACHE_KEY) ?? [];
+	} catch {
+		return [];
+	}
+}
+/**
+* List 404 log entries with cursor pagination
+*/
+async function handleNotFoundList(db, params) {
+	try {
+		return {
+			success: true,
+			data: await new RedirectRepository(db).find404s(params)
+		};
+	} catch (error) {
+		if (error instanceof InvalidCursorError) return {
+			success: false,
+			error: {
+				code: "INVALID_CURSOR",
+				message: error.message
+			}
+		};
+		return {
+			success: false,
+			error: {
+				code: "NOT_FOUND_LIST_ERROR",
+				message: "Failed to fetch 404 log"
+			}
+		};
+	}
+}
+/**
+* Get 404 summary (grouped by path, sorted by count)
+*/
+async function handleNotFoundSummary(db, limit) {
+	try {
+		return {
+			success: true,
+			data: { items: await new RedirectRepository(db).get404Summary(limit) }
+		};
+	} catch {
+		return {
+			success: false,
+			error: {
+				code: "NOT_FOUND_SUMMARY_ERROR",
+				message: "Failed to fetch 404 summary"
+			}
+		};
+	}
+}
+/**
+* Clear all 404 log entries
+*/
+async function handleNotFoundClear(db) {
+	try {
+		return {
+			success: true,
+			data: { deleted: await new RedirectRepository(db).clear404s() }
+		};
+	} catch {
+		return {
+			success: false,
+			error: {
+				code: "NOT_FOUND_CLEAR_ERROR",
+				message: "Failed to clear 404 log"
+			}
+		};
+	}
+}
+/**
+* Prune 404 log entries older than a given date
+*/
+async function handleNotFoundPrune(db, olderThan) {
+	try {
+		return {
+			success: true,
+			data: { deleted: await new RedirectRepository(db).prune404s(olderThan) }
+		};
+	} catch {
+		return {
+			success: false,
+			error: {
+				code: "NOT_FOUND_PRUNE_ERROR",
+				message: "Failed to prune 404 log"
+			}
+		};
+	}
+}
+
+//#endregion
+export { handleRedirectCreate as a, handleRedirectList as c, handleNotFoundSummary as i, handleRedirectUpdate as l, handleNotFoundList as n, handleRedirectDelete as o, handleNotFoundPrune as r, handleRedirectGet as s, handleNotFoundClear as t };
+//# sourceMappingURL=redirects-Ck50kH3n.mjs.map

package/dist/redirects-Ck50kH3n.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"redirects-Ck50kH3n.mjs","names":[],"sources":["../src/api/handlers/redirects.ts"],"sourcesContent":["/**\n * Redirect CRUD and 404 log handlers\n */\n\nimport type { Kysely } from \"kysely\";\n\nimport { OptionsRepository } from \"../../database/repositories/options.js\";\nimport {\n\tRedirectRepository,\n\tRedirectWriteBusyError,\n\ttype RedirectWriteFence,\n\ttype Redirect,\n\ttype NotFoundEntry,\n\ttype NotFoundSummary,\n} from \"../../database/repositories/redirect.js\";\nimport { InvalidCursorError } from \"../../database/repositories/types.js\";\nimport type { FindManyResult } from \"../../database/repositories/types.js\";\nimport type { Database } from \"../../database/types.js\";\nimport { invalidateRedirectCache } from \"../../redirects/cache.js\";\nimport { wouldCreateLoop, detectLoops, type RedirectEdge } from \"../../redirects/loops.js\";\nimport { validatePattern, validateDestinationParams, isPattern } from \"../../redirects/patterns.js\";\nimport { isTerminalStatus } from \"../../redirects/status.js\";\nimport type { ApiResult } from \"../types.js\";\n\nasync function withRedirectWriteLock<T>(\n\trepo: RedirectRepository,\n\taction: (fence: RedirectWriteFence, repository: RedirectRepository) => Promise<ApiResult<T>>,\n): Promise<ApiResult<T>> {\n\ttry {\n\t\treturn await repo.withWriteLock(action);\n\t} catch (error) {\n\t\tif (error instanceof RedirectWriteBusyError) {\n\t\t\treturn {\n\t\t\t\tsuccess: false,\n\t\t\t\terror: { code: \"REDIRECT_BUSY\", message: \"Another redirect change is in progress\" },\n\t\t\t};\n\t\t}\n\t\tthrow error;\n\t}\n}\n\n// ---------------------------------------------------------------------------\n// Redirects\n// ---------------------------------------------------------------------------\n\n/**\n * List redirects with cursor pagination and optional filters\n */\nexport async function handleRedirectList(\n\tdb: Kysely<Database>,\n\tparams: {\n\t\tcursor?: string;\n\t\tlimit?: number;\n\t\tsearch?: string;\n\t\tgroup?: string;\n\t\tenabled?: boolean;\n\t\tauto?: boolean;\n\t},\n): Promise<ApiResult<FindManyResult<Redirect> & { loopRedirectIds?: string[] }>> {\n\ttry {\n\t\tconst repo = new RedirectRepository(db);\n\t\tconst result = await repo.findMany(params);\n\n\t\tconst loopRedirectIds = await getLoopRedirectIds(db);\n\n\t\treturn {\n\t\t\tsuccess: true,\n\t\t\tdata: {\n\t\t\t\t...result,\n\t\t\t\t...(loopRedirectIds.length > 0 ? { loopRedirectIds } : {}),\n\t\t\t},\n\t\t};\n\t} catch (error) {\n\t\tif (error instanceof InvalidCursorError) {\n\t\t\treturn {\n\t\t\t\tsuccess: false,\n\t\t\t\terror: { code: \"INVALID_CURSOR\", message: error.message },\n\t\t\t};\n\t\t}\n\t\treturn {\n\t\t\tsuccess: false,\n\t\t\terror: { code: \"REDIRECT_LIST_ERROR\", message: \"Failed to fetch redirects\" },\n\t\t};\n\t}\n}\n\n/**\n * Create a redirect rule\n */\nexport async function handleRedirectCreate(\n\tdb: Kysely<Database>,\n\tinput: {\n\t\tsource: string;\n\t\tdestination?: string;\n\t\ttype?: number;\n\t\tenabled?: boolean;\n\t\tgroupName?: string | null;\n\t},\n): Promise<ApiResult<Redirect>> {\n\ttry {\n\t\tconst lockRepo = new RedirectRepository(db);\n\t\tconst result = await withRedirectWriteLock(lockRepo, async (fence, repo) => {\n\t\t\tconst type = input.type ?? 301;\n\t\t\t// Terminal statuses (410 Gone / 451) are served directly and have no\n\t\t\t// destination — skip the destination/loop checks for them.\n\t\t\tconst terminal = isTerminalStatus(type);\n\t\t\tconst destination = terminal ? \"\" : (input.destination ?? \"\");\n\n\t\t\t// Source and destination must differ\n\t\t\tif (!terminal && input.source === destination) {\n\t\t\t\treturn {\n\t\t\t\t\tsuccess: false,\n\t\t\t\t\terror: {\n\t\t\t\t\t\tcode: \"VALIDATION_ERROR\",\n\t\t\t\t\t\tmessage: \"Source and destination must be different\",\n\t\t\t\t\t},\n\t\t\t\t};\n\t\t\t}\n\n\t\t\t// If source looks like a pattern, validate it\n\t\t\tconst sourceIsPattern = isPattern(input.source);\n\t\t\tif (sourceIsPattern) {\n\t\t\t\tconst patternError = validatePattern(input.source);\n\t\t\t\tif (patternError) {\n\t\t\t\t\treturn {\n\t\t\t\t\t\tsuccess: false,\n\t\t\t\t\t\terror: { code: \"VALIDATION_ERROR\", message: `Invalid source pattern: ${patternError}` },\n\t\t\t\t\t};\n\t\t\t\t}\n\n\t\t\t\t// Validate destination params reference valid source params\n\t\t\t\t// (terminal rules have no destination to interpolate)\n\t\t\t\tif (!terminal) {\n\t\t\t\t\tconst destError = validateDestinationParams(input.source, destination);\n\t\t\t\t\tif (destError) {\n\t\t\t\t\t\treturn {\n\t\t\t\t\t\t\tsuccess: false,\n\t\t\t\t\t\t\terror: { code: \"VALIDATION_ERROR\", message: destError },\n\t\t\t\t\t\t};\n\t\t\t\t\t}\n\t\t\t\t}\n\t\t\t}\n\n\t\t\t// Check for duplicate source (exact match only for non-patterns)\n\t\t\tconst existing = await repo.findBySource(input.source);\n\t\t\tif (existing) {\n\t\t\t\treturn {\n\t\t\t\t\tsuccess: false,\n\t\t\t\t\terror: {\n\t\t\t\t\t\tcode: \"CONFLICT\",\n\t\t\t\t\t\tmessage: `A redirect from \"${input.source}\" already exists`,\n\t\t\t\t\t},\n\t\t\t\t};\n\t\t\t}\n\n\t\t\t// Check for redirect loops (skip if creating as disabled, or terminal —\n\t\t\t// a Gone rule has no destination, so it can't form a loop)\n\t\t\tif (!terminal && input.enabled !== false) {\n\t\t\t\tconst edges = toEdges(await repo.findAllEnabled());\n\t\t\t\tconst loopPath = wouldCreateLoop(input.source, destination, edges);\n\t\t\t\tif (loopPath) return loopError(loopPath);\n\t\t\t}\n\n\t\t\tconst redirect = await repo.create(\n\t\t\t\t{\n\t\t\t\t\tsource: input.source,\n\t\t\t\t\tdestination,\n\t\t\t\t\ttype,\n\t\t\t\t\tisPattern: sourceIsPattern,\n\t\t\t\t\tenabled: input.enabled ?? true,\n\t\t\t\t\tgroupName: input.groupName ?? null,\n\t\t\t\t},\n\t\t\t\tfence,\n\t\t\t);\n\t\t\treturn { success: true, data: redirect };\n\t\t});\n\t\tif (result.success) invalidateRedirectCache();\n\t\treturn result;\n\t} catch {\n\t\treturn {\n\t\t\tsuccess: false,\n\t\t\terror: { code: \"REDIRECT_CREATE_ERROR\", message: \"Failed to create redirect\" },\n\t\t};\n\t}\n}\n\n/**\n * Get a redirect by ID\n */\nexport async function handleRedirectGet(\n\tdb: Kysely<Database>,\n\tid: string,\n): Promise<ApiResult<Redirect>> {\n\ttry {\n\t\tconst repo = new RedirectRepository(db);\n\t\tconst redirect = await repo.findById(id);\n\n\t\tif (!redirect) {\n\t\t\treturn {\n\t\t\t\tsuccess: false,\n\t\t\t\terror: { code: \"NOT_FOUND\", message: `Redirect \"${id}\" not found` },\n\t\t\t};\n\t\t}\n\n\t\treturn { success: true, data: redirect };\n\t} catch {\n\t\treturn {\n\t\t\tsuccess: false,\n\t\t\terror: { code: \"REDIRECT_GET_ERROR\", message: \"Failed to fetch redirect\" },\n\t\t};\n\t}\n}\n\n/**\n * Update a redirect by ID\n */\nexport async function handleRedirectUpdate(\n\tdb: Kysely<Database>,\n\tid: string,\n\tinput: {\n\t\tsource?: string;\n\t\tdestination?: string;\n\t\ttype?: number;\n\t\tenabled?: boolean;\n\t\tgroupName?: string | null;\n\t},\n\toptions?: { expectedRevision?: string },\n): Promise<ApiResult<Redirect>> {\n\ttry {\n\t\tconst lockRepo = new RedirectRepository(db);\n\t\tconst result = await withRedirectWriteLock(lockRepo, async (fence, repo) => {\n\t\t\tconst existing = await repo.findById(id);\n\t\t\tif (!existing) {\n\t\t\t\treturn {\n\t\t\t\t\tsuccess: false,\n\t\t\t\t\terror: { code: \"NOT_FOUND\", message: `Redirect \"${id}\" not found` },\n\t\t\t\t};\n\t\t\t}\n\n\t\t\tif (options?.expectedRevision !== undefined) {\n\t\t\t\tconst currentRevision = await repo.findConfigRevision(id);\n\t\t\t\tif (currentRevision !== options.expectedRevision) {\n\t\t\t\t\treturn {\n\t\t\t\t\t\tsuccess: false,\n\t\t\t\t\t\terror: { code: \"CONFLICT\", message: \"Redirect changed since it was read\" },\n\t\t\t\t\t};\n\t\t\t\t}\n\t\t\t}\n\n\t\t\tconst newSource = input.source ?? existing.source;\n\t\t\tconst newType = input.type ?? existing.type;\n\t\t\tconst terminal = isTerminalStatus(newType);\n\t\t\tconst newDest = terminal ? \"\" : (input.destination ?? existing.destination);\n\t\t\tif (!terminal && !newDest) {\n\t\t\t\treturn {\n\t\t\t\t\tsuccess: false,\n\t\t\t\t\terror: {\n\t\t\t\t\t\tcode: \"VALIDATION_ERROR\",\n\t\t\t\t\t\tmessage: \"destination is required for redirect types (301, 302, 307, 308)\",\n\t\t\t\t\t},\n\t\t\t\t};\n\t\t\t}\n\n\t\t\t// Source and destination must differ\n\t\t\tif (!terminal && newSource === newDest) {\n\t\t\t\treturn {\n\t\t\t\t\tsuccess: false,\n\t\t\t\t\terror: {\n\t\t\t\t\t\tcode: \"VALIDATION_ERROR\",\n\t\t\t\t\t\tmessage: \"Source and destination must be different\",\n\t\t\t\t\t},\n\t\t\t\t};\n\t\t\t}\n\n\t\t\t// If source is changing, validate patterns\n\t\t\tif (input.source !== undefined) {\n\t\t\t\tconst sourceIsPattern = isPattern(input.source);\n\t\t\t\tif (sourceIsPattern) {\n\t\t\t\t\tconst patternError = validatePattern(input.source);\n\t\t\t\t\tif (patternError) {\n\t\t\t\t\t\treturn {\n\t\t\t\t\t\t\tsuccess: false,\n\t\t\t\t\t\t\terror: {\n\t\t\t\t\t\t\t\tcode: \"VALIDATION_ERROR\",\n\t\t\t\t\t\t\t\tmessage: `Invalid source pattern: ${patternError}`,\n\t\t\t\t\t\t\t},\n\t\t\t\t\t\t};\n\t\t\t\t\t}\n\t\t\t\t}\n\n\t\t\t\t// Check for duplicate source (exclude self)\n\t\t\t\tconst dup = await repo.findBySource(input.source);\n\t\t\t\tif (dup && dup.id !== id) {\n\t\t\t\t\treturn {\n\t\t\t\t\t\tsuccess: false,\n\t\t\t\t\t\terror: {\n\t\t\t\t\t\t\tcode: \"CONFLICT\",\n\t\t\t\t\t\t\tmessage: `A redirect from \"${input.source}\" already exists`,\n\t\t\t\t\t\t},\n\t\t\t\t\t};\n\t\t\t\t}\n\t\t\t}\n\n\t\t\t// Validate destination params against the (possibly updated) source\n\t\t\tconst newSourceIsPattern = isPattern(newSource);\n\t\t\tif (newSourceIsPattern && !terminal) {\n\t\t\t\tconst destError = validateDestinationParams(newSource, newDest);\n\t\t\t\tif (destError) {\n\t\t\t\t\treturn {\n\t\t\t\t\t\tsuccess: false,\n\t\t\t\t\t\terror: { code: \"VALIDATION_ERROR\", message: destError },\n\t\t\t\t\t};\n\t\t\t\t}\n\t\t\t}\n\n\t\t\t// Check for redirect loops if source or destination changed\n\t\t\tconst willBeEnabled = input.enabled ?? existing.enabled;\n\t\t\tif (\n\t\t\t\t!terminal &&\n\t\t\t\twillBeEnabled &&\n\t\t\t\t(input.source !== undefined || input.destination !== undefined)\n\t\t\t) {\n\t\t\t\tconst edges = toEdges(await repo.findAllEnabled());\n\t\t\t\tconst loopPath = wouldCreateLoop(newSource, newDest, edges, id);\n\t\t\t\tif (loopPath) return loopError(loopPath);\n\t\t\t}\n\n\t\t\tconst updated = await repo.update(\n\t\t\t\tid,\n\t\t\t\t{\n\t\t\t\t\tsource: input.source,\n\t\t\t\t\tdestination: terminal ? \"\" : input.destination,\n\t\t\t\t\ttype: input.type,\n\t\t\t\t\tenabled: input.enabled,\n\t\t\t\t\tgroupName: input.groupName,\n\t\t\t\t},\n\t\t\t\toptions?.expectedRevision,\n\t\t\t\tfence,\n\t\t\t);\n\n\t\t\tif (!updated) {\n\t\t\t\treturn {\n\t\t\t\t\tsuccess: false,\n\t\t\t\t\terror: options?.expectedRevision\n\t\t\t\t\t\t? { code: \"CONFLICT\", message: \"Redirect changed since it was read\" }\n\t\t\t\t\t\t: { code: \"REDIRECT_UPDATE_ERROR\", message: \"Failed to update redirect\" },\n\t\t\t\t};\n\t\t\t}\n\n\t\t\t// Recompute cache — redirect was modified, so re-fetch\n\t\t\tawait updateLoopCache(repo.db);\n\t\t\treturn { success: true, data: updated };\n\t\t});\n\t\tif (result.success) invalidateRedirectCache();\n\t\treturn result;\n\t} catch {\n\t\treturn {\n\t\t\tsuccess: false,\n\t\t\terror: { code: \"REDIRECT_UPDATE_ERROR\", message: \"Failed to update redirect\" },\n\t\t};\n\t}\n}\n\n/**\n * Delete a redirect by ID\n */\nexport async function handleRedirectDelete(\n\tdb: Kysely<Database>,\n\tid: string,\n\toptions?: { expectedRevision?: string },\n): Promise<ApiResult<{ deleted: true }>> {\n\ttry {\n\t\tconst lockRepo = new RedirectRepository(db);\n\t\tconst result = await withRedirectWriteLock<{ deleted: true }>(lockRepo, async (fence, repo) => {\n\t\t\tif (options?.expectedRevision !== undefined) {\n\t\t\t\tconst existing = await repo.findById(id);\n\t\t\t\tif (!existing) {\n\t\t\t\t\treturn {\n\t\t\t\t\t\tsuccess: false,\n\t\t\t\t\t\terror: { code: \"NOT_FOUND\", message: `Redirect \"${id}\" not found` },\n\t\t\t\t\t};\n\t\t\t\t}\n\t\t\t\tconst currentRevision = await repo.findConfigRevision(id);\n\t\t\t\tif (currentRevision !== options.expectedRevision) {\n\t\t\t\t\treturn {\n\t\t\t\t\t\tsuccess: false,\n\t\t\t\t\t\terror: { code: \"CONFLICT\", message: \"Redirect changed since it was read\" },\n\t\t\t\t\t};\n\t\t\t\t}\n\t\t\t}\n\t\t\tconst deleted = await repo.delete(id, options?.expectedRevision, fence);\n\n\t\t\tif (!deleted) {\n\t\t\t\treturn {\n\t\t\t\t\tsuccess: false,\n\t\t\t\t\terror: options?.expectedRevision\n\t\t\t\t\t\t? { code: \"CONFLICT\", message: \"Redirect changed since it was read\" }\n\t\t\t\t\t\t: { code: \"NOT_FOUND\", message: `Redirect \"${id}\" not found` },\n\t\t\t\t};\n\t\t\t}\n\n\t\t\tawait updateLoopCache(repo.db);\n\t\t\treturn { success: true, data: { deleted: true } };\n\t\t});\n\t\tif (result.success) invalidateRedirectCache();\n\t\treturn result;\n\t} catch {\n\t\treturn {\n\t\t\tsuccess: false,\n\t\t\terror: { code: \"REDIRECT_DELETE_ERROR\", message: \"Failed to delete redirect\" },\n\t\t};\n\t}\n}\n\n// ---------------------------------------------------------------------------\n// Loop analysis cache\n// ---------------------------------------------------------------------------\n\nfunction loopError(loopPath: string[]): ApiResult<never> {\n\tconst hops = loopPath\n\t\t.slice(0, -1)\n\t\t.map((p, i) => `${p} \\u2192 ${loopPath[i + 1]}`)\n\t\t.join(\"\\n\");\n\treturn {\n\t\tsuccess: false,\n\t\terror: {\n\t\t\tcode: \"VALIDATION_ERROR\",\n\t\t\tmessage: `This redirect would create a loop:\\n${hops}`,\n\t\t},\n\t};\n}\n\nfunction toEdges(redirects: Redirect[]): RedirectEdge[] {\n\treturn redirects.map((r) => ({\n\t\tid: r.id,\n\t\tsource: r.source,\n\t\tdestination: r.destination,\n\t\tenabled: r.enabled,\n\t\tisPattern: r.isPattern,\n\t}));\n}\n\nconst LOOP_CACHE_KEY = \"_redirect_loop_ids\";\n\n/**\n * Recompute loop redirect IDs and store in the options table.\n */\nasync function updateLoopCache(db: Kysely<Database>): Promise<void> {\n\ttry {\n\t\tconst options = new OptionsRepository(db);\n\t\tconst edges = toEdges(await new RedirectRepository(db).findAllEnabled());\n\t\tconst loopRedirectIds = detectLoops(edges);\n\t\tawait options.set(LOOP_CACHE_KEY, loopRedirectIds);\n\t} catch (error) {\n\t\tconsole.error(\"Failed to update redirect loop cache:\", error);\n\t}\n}\n\n/**\n * Get loop redirect IDs from cache, computing lazily on first access.\n */\nasync function getLoopRedirectIds(db: Kysely<Database>): Promise<string[]> {\n\ttry {\n\t\tconst options = new OptionsRepository(db);\n\t\tconst cached = await options.get<string[]>(LOOP_CACHE_KEY);\n\t\tif (cached !== null) return cached;\n\n\t\t// First access after upgrade — compute and cache\n\t\tawait updateLoopCache(db);\n\t\treturn (await options.get<string[]>(LOOP_CACHE_KEY)) ?? [];\n\t} catch {\n\t\treturn [];\n\t}\n}\n\n// ---------------------------------------------------------------------------\n// 404 Log\n// ---------------------------------------------------------------------------\n\n/**\n * List 404 log entries with cursor pagination\n */\nexport async function handleNotFoundList(\n\tdb: Kysely<Database>,\n\tparams: { cursor?: string; limit?: number; search?: string },\n): Promise<ApiResult<FindManyResult<NotFoundEntry>>> {\n\ttry {\n\t\tconst repo = new RedirectRepository(db);\n\t\tconst result = await repo.find404s(params);\n\t\treturn { success: true, data: result };\n\t} catch (error) {\n\t\tif (error instanceof InvalidCursorError) {\n\t\t\treturn {\n\t\t\t\tsuccess: false,\n\t\t\t\terror: { code: \"INVALID_CURSOR\", message: error.message },\n\t\t\t};\n\t\t}\n\t\treturn {\n\t\t\tsuccess: false,\n\t\t\terror: { code: \"NOT_FOUND_LIST_ERROR\", message: \"Failed to fetch 404 log\" },\n\t\t};\n\t}\n}\n\n/**\n * Get 404 summary (grouped by path, sorted by count)\n */\nexport async function handleNotFoundSummary(\n\tdb: Kysely<Database>,\n\tlimit?: number,\n): Promise<ApiResult<{ items: NotFoundSummary[] }>> {\n\ttry {\n\t\tconst repo = new RedirectRepository(db);\n\t\tconst items = await repo.get404Summary(limit);\n\t\treturn { success: true, data: { items } };\n\t} catch {\n\t\treturn {\n\t\t\tsuccess: false,\n\t\t\terror: { code: \"NOT_FOUND_SUMMARY_ERROR\", message: \"Failed to fetch 404 summary\" },\n\t\t};\n\t}\n}\n\n/**\n * Clear all 404 log entries\n */\nexport async function handleNotFoundClear(\n\tdb: Kysely<Database>,\n): Promise<ApiResult<{ deleted: number }>> {\n\ttry {\n\t\tconst repo = new RedirectRepository(db);\n\t\tconst deleted = await repo.clear404s();\n\t\treturn { success: true, data: { deleted } };\n\t} catch {\n\t\treturn {\n\t\t\tsuccess: false,\n\t\t\terror: { code: \"NOT_FOUND_CLEAR_ERROR\", message: \"Failed to clear 404 log\" },\n\t\t};\n\t}\n}\n\n/**\n * Prune 404 log entries older than a given date\n */\nexport async function handleNotFoundPrune(\n\tdb: Kysely<Database>,\n\tolderThan: string,\n): Promise<ApiResult<{ deleted: number }>> {\n\ttry {\n\t\tconst repo = new RedirectRepository(db);\n\t\tconst deleted = await repo.prune404s(olderThan);\n\t\treturn { success: true, data: { deleted } };\n\t} catch {\n\t\treturn {\n\t\t\tsuccess: false,\n\t\t\terror: { code: \"NOT_FOUND_PRUNE_ERROR\", message: \"Failed to prune 404 log\" },\n\t\t};\n\t}\n}\n"],"mappings":";;;;;;;;;AAwBA,eAAe,sBACd,MACA,QACwB;AACxB,KAAI;AACH,SAAO,MAAM,KAAK,cAAc,OAAO;UAC/B,OAAO;AACf,MAAI,iBAAiB,uBACpB,QAAO;GACN,SAAS;GACT,OAAO;IAAE,MAAM;IAAiB,SAAS;IAA0C;GACnF;AAEF,QAAM;;;;;;AAWR,eAAsB,mBACrB,IACA,QAQgF;AAChF,KAAI;EAEH,MAAM,SAAS,MADF,IAAI,mBAAmB,GAAG,CACb,SAAS,OAAO;EAE1C,MAAM,kBAAkB,MAAM,mBAAmB,GAAG;AAEpD,SAAO;GACN,SAAS;GACT,MAAM;IACL,GAAG;IACH,GAAI,gBAAgB,SAAS,IAAI,EAAE,iBAAiB,GAAG,EAAE;IACzD;GACD;UACO,OAAO;AACf,MAAI,iBAAiB,mBACpB,QAAO;GACN,SAAS;GACT,OAAO;IAAE,MAAM;IAAkB,SAAS,MAAM;IAAS;GACzD;AAEF,SAAO;GACN,SAAS;GACT,OAAO;IAAE,MAAM;IAAuB,SAAS;IAA6B;GAC5E;;;;;;AAOH,eAAsB,qBACrB,IACA,OAO+B;AAC/B,KAAI;EAEH,MAAM,SAAS,MAAM,sBADJ,IAAI,mBAAmB,GAAG,EACU,OAAO,OAAO,SAAS;GAC3E,MAAM,OAAO,MAAM,QAAQ;GAG3B,MAAM,WAAW,iBAAiB,KAAK;GACvC,MAAM,cAAc,WAAW,KAAM,MAAM,eAAe;AAG1D,OAAI,CAAC,YAAY,MAAM,WAAW,YACjC,QAAO;IACN,SAAS;IACT,OAAO;KACN,MAAM;KACN,SAAS;KACT;IACD;GAIF,MAAM,kBAAkB,UAAU,MAAM,OAAO;AAC/C,OAAI,iBAAiB;IACpB,MAAM,eAAe,gBAAgB,MAAM,OAAO;AAClD,QAAI,aACH,QAAO;KACN,SAAS;KACT,OAAO;MAAE,MAAM;MAAoB,SAAS,2BAA2B;MAAgB;KACvF;AAKF,QAAI,CAAC,UAAU;KACd,MAAM,YAAY,0BAA0B,MAAM,QAAQ,YAAY;AACtE,SAAI,UACH,QAAO;MACN,SAAS;MACT,OAAO;OAAE,MAAM;OAAoB,SAAS;OAAW;MACvD;;;AAOJ,OADiB,MAAM,KAAK,aAAa,MAAM,OAAO,CAErD,QAAO;IACN,SAAS;IACT,OAAO;KACN,MAAM;KACN,SAAS,oBAAoB,MAAM,OAAO;KAC1C;IACD;AAKF,OAAI,CAAC,YAAY,MAAM,YAAY,OAAO;IACzC,MAAM,QAAQ,QAAQ,MAAM,KAAK,gBAAgB,CAAC;IAClD,MAAM,WAAW,gBAAgB,MAAM,QAAQ,aAAa,MAAM;AAClE,QAAI,SAAU,QAAO,UAAU,SAAS;;AAczC,UAAO;IAAE,SAAS;IAAM,MAXP,MAAM,KAAK,OAC3B;KACC,QAAQ,MAAM;KACd;KACA;KACA,WAAW;KACX,SAAS,MAAM,WAAW;KAC1B,WAAW,MAAM,aAAa;KAC9B,EACD,MACA;IACuC;IACvC;AACF,MAAI,OAAO,QAAS,0BAAyB;AAC7C,SAAO;SACA;AACP,SAAO;GACN,SAAS;GACT,OAAO;IAAE,MAAM;IAAyB,SAAS;IAA6B;GAC9E;;;;;;AAOH,eAAsB,kBACrB,IACA,IAC+B;AAC/B,KAAI;EAEH,MAAM,WAAW,MADJ,IAAI,mBAAmB,GAAG,CACX,SAAS,GAAG;AAExC,MAAI,CAAC,SACJ,QAAO;GACN,SAAS;GACT,OAAO;IAAE,MAAM;IAAa,SAAS,aAAa,GAAG;IAAc;GACnE;AAGF,SAAO;GAAE,SAAS;GAAM,MAAM;GAAU;SACjC;AACP,SAAO;GACN,SAAS;GACT,OAAO;IAAE,MAAM;IAAsB,SAAS;IAA4B;GAC1E;;;;;;AAOH,eAAsB,qBACrB,IACA,IACA,OAOA,SAC+B;AAC/B,KAAI;EAEH,MAAM,SAAS,MAAM,sBADJ,IAAI,mBAAmB,GAAG,EACU,OAAO,OAAO,SAAS;GAC3E,MAAM,WAAW,MAAM,KAAK,SAAS,GAAG;AACxC,OAAI,CAAC,SACJ,QAAO;IACN,SAAS;IACT,OAAO;KAAE,MAAM;KAAa,SAAS,aAAa,GAAG;KAAc;IACnE;AAGF,OAAI,SAAS,qBAAqB,QAEjC;QADwB,MAAM,KAAK,mBAAmB,GAAG,KACjC,QAAQ,iBAC/B,QAAO;KACN,SAAS;KACT,OAAO;MAAE,MAAM;MAAY,SAAS;MAAsC;KAC1E;;GAIH,MAAM,YAAY,MAAM,UAAU,SAAS;GAE3C,MAAM,WAAW,iBADD,MAAM,QAAQ,SAAS,KACG;GAC1C,MAAM,UAAU,WAAW,KAAM,MAAM,eAAe,SAAS;AAC/D,OAAI,CAAC,YAAY,CAAC,QACjB,QAAO;IACN,SAAS;IACT,OAAO;KACN,MAAM;KACN,SAAS;KACT;IACD;AAIF,OAAI,CAAC,YAAY,cAAc,QAC9B,QAAO;IACN,SAAS;IACT,OAAO;KACN,MAAM;KACN,SAAS;KACT;IACD;AAIF,OAAI,MAAM,WAAW,QAAW;AAE/B,QADwB,UAAU,MAAM,OAAO,EAC1B;KACpB,MAAM,eAAe,gBAAgB,MAAM,OAAO;AAClD,SAAI,aACH,QAAO;MACN,SAAS;MACT,OAAO;OACN,MAAM;OACN,SAAS,2BAA2B;OACpC;MACD;;IAKH,MAAM,MAAM,MAAM,KAAK,aAAa,MAAM,OAAO;AACjD,QAAI,OAAO,IAAI,OAAO,GACrB,QAAO;KACN,SAAS;KACT,OAAO;MACN,MAAM;MACN,SAAS,oBAAoB,MAAM,OAAO;MAC1C;KACD;;AAMH,OAD2B,UAAU,UAAU,IACrB,CAAC,UAAU;IACpC,MAAM,YAAY,0BAA0B,WAAW,QAAQ;AAC/D,QAAI,UACH,QAAO;KACN,SAAS;KACT,OAAO;MAAE,MAAM;MAAoB,SAAS;MAAW;KACvD;;GAKH,MAAM,gBAAgB,MAAM,WAAW,SAAS;AAChD,OACC,CAAC,YACD,kBACC,MAAM,WAAW,UAAa,MAAM,gBAAgB,SACpD;IAED,MAAM,WAAW,gBAAgB,WAAW,SAD9B,QAAQ,MAAM,KAAK,gBAAgB,CAAC,EACU,GAAG;AAC/D,QAAI,SAAU,QAAO,UAAU,SAAS;;GAGzC,MAAM,UAAU,MAAM,KAAK,OAC1B,IACA;IACC,QAAQ,MAAM;IACd,aAAa,WAAW,KAAK,MAAM;IACnC,MAAM,MAAM;IACZ,SAAS,MAAM;IACf,WAAW,MAAM;IACjB,EACD,SAAS,kBACT,MACA;AAED,OAAI,CAAC,QACJ,QAAO;IACN,SAAS;IACT,OAAO,SAAS,mBACb;KAAE,MAAM;KAAY,SAAS;KAAsC,GACnE;KAAE,MAAM;KAAyB,SAAS;KAA6B;IAC1E;AAIF,SAAM,gBAAgB,KAAK,GAAG;AAC9B,UAAO;IAAE,SAAS;IAAM,MAAM;IAAS;IACtC;AACF,MAAI,OAAO,QAAS,0BAAyB;AAC7C,SAAO;SACA;AACP,SAAO;GACN,SAAS;GACT,OAAO;IAAE,MAAM;IAAyB,SAAS;IAA6B;GAC9E;;;;;;AAOH,eAAsB,qBACrB,IACA,IACA,SACwC;AACxC,KAAI;EAEH,MAAM,SAAS,MAAM,sBADJ,IAAI,mBAAmB,GAAG,EAC6B,OAAO,OAAO,SAAS;AAC9F,OAAI,SAAS,qBAAqB,QAAW;AAE5C,QAAI,CADa,MAAM,KAAK,SAAS,GAAG,CAEvC,QAAO;KACN,SAAS;KACT,OAAO;MAAE,MAAM;MAAa,SAAS,aAAa,GAAG;MAAc;KACnE;AAGF,QADwB,MAAM,KAAK,mBAAmB,GAAG,KACjC,QAAQ,iBAC/B,QAAO;KACN,SAAS;KACT,OAAO;MAAE,MAAM;MAAY,SAAS;MAAsC;KAC1E;;AAKH,OAAI,CAFY,MAAM,KAAK,OAAO,IAAI,SAAS,kBAAkB,MAAM,CAGtE,QAAO;IACN,SAAS;IACT,OAAO,SAAS,mBACb;KAAE,MAAM;KAAY,SAAS;KAAsC,GACnE;KAAE,MAAM;KAAa,SAAS,aAAa,GAAG;KAAc;IAC/D;AAGF,SAAM,gBAAgB,KAAK,GAAG;AAC9B,UAAO;IAAE,SAAS;IAAM,MAAM,EAAE,SAAS,MAAM;IAAE;IAChD;AACF,MAAI,OAAO,QAAS,0BAAyB;AAC7C,SAAO;SACA;AACP,SAAO;GACN,SAAS;GACT,OAAO;IAAE,MAAM;IAAyB,SAAS;IAA6B;GAC9E;;;AAQH,SAAS,UAAU,UAAsC;AAKxD,QAAO;EACN,SAAS;EACT,OAAO;GACN,MAAM;GACN,SAAS,uCARE,SACX,MAAM,GAAG,GAAG,CACZ,KAAK,GAAG,MAAM,GAAG,EAAE,UAAU,SAAS,IAAI,KAAK,CAC/C,KAAK,KAAK;GAMV;EACD;;AAGF,SAAS,QAAQ,WAAuC;AACvD,QAAO,UAAU,KAAK,OAAO;EAC5B,IAAI,EAAE;EACN,QAAQ,EAAE;EACV,aAAa,EAAE;EACf,SAAS,EAAE;EACX,WAAW,EAAE;EACb,EAAE;;AAGJ,MAAM,iBAAiB;;;;AAKvB,eAAe,gBAAgB,IAAqC;AACnE,KAAI;EACH,MAAM,UAAU,IAAI,kBAAkB,GAAG;EAEzC,MAAM,kBAAkB,YADV,QAAQ,MAAM,IAAI,mBAAmB,GAAG,CAAC,gBAAgB,CAAC,CAC9B;AAC1C,QAAM,QAAQ,IAAI,gBAAgB,gBAAgB;UAC1C,OAAO;AACf,UAAQ,MAAM,yCAAyC,MAAM;;;;;;AAO/D,eAAe,mBAAmB,IAAyC;AAC1E,KAAI;EACH,MAAM,UAAU,IAAI,kBAAkB,GAAG;EACzC,MAAM,SAAS,MAAM,QAAQ,IAAc,eAAe;AAC1D,MAAI,WAAW,KAAM,QAAO;AAG5B,QAAM,gBAAgB,GAAG;AACzB,SAAQ,MAAM,QAAQ,IAAc,eAAe,IAAK,EAAE;SACnD;AACP,SAAO,EAAE;;;;;;AAWX,eAAsB,mBACrB,IACA,QACoD;AACpD,KAAI;AAGH,SAAO;GAAE,SAAS;GAAM,MADT,MADF,IAAI,mBAAmB,GAAG,CACb,SAAS,OAAO;GACJ;UAC9B,OAAO;AACf,MAAI,iBAAiB,mBACpB,QAAO;GACN,SAAS;GACT,OAAO;IAAE,MAAM;IAAkB,SAAS,MAAM;IAAS;GACzD;AAEF,SAAO;GACN,SAAS;GACT,OAAO;IAAE,MAAM;IAAwB,SAAS;IAA2B;GAC3E;;;;;;AAOH,eAAsB,sBACrB,IACA,OACmD;AACnD,KAAI;AAGH,SAAO;GAAE,SAAS;GAAM,MAAM,EAAE,OADlB,MADD,IAAI,mBAAmB,GAAG,CACd,cAAc,MAAM,EACN;GAAE;SAClC;AACP,SAAO;GACN,SAAS;GACT,OAAO;IAAE,MAAM;IAA2B,SAAS;IAA+B;GAClF;;;;;;AAOH,eAAsB,oBACrB,IAC0C;AAC1C,KAAI;AAGH,SAAO;GAAE,SAAS;GAAM,MAAM,EAAE,SADhB,MADH,IAAI,mBAAmB,GAAG,CACZ,WAAW,EACG;GAAE;SACpC;AACP,SAAO;GACN,SAAS;GACT,OAAO;IAAE,MAAM;IAAyB,SAAS;IAA2B;GAC5E;;;;;;AAOH,eAAsB,oBACrB,IACA,WAC0C;AAC1C,KAAI;AAGH,SAAO;GAAE,SAAS;GAAM,MAAM,EAAE,SADhB,MADH,IAAI,mBAAmB,GAAG,CACZ,UAAU,UAAU,EACN;GAAE;SACpC;AACP,SAAO;GACN,SAAS;GACT,OAAO;IAAE,MAAM;IAAyB,SAAS;IAA2B;GAC5E"}

package/dist/registry/testing.mjs

@@ -1,6 +1,6 @@
-import { a as UNSUPPORTED_AUTH_MESSAGE, n as multihashFromBlobCid, o as unsupportedAuthDetails } from "../checksum-B2IINIlN.mjs";
-import "../ssrf-CJUnJymJ.mjs";
-import { n as setDefaultAuthoritativeRecordReaderForTesting } from "../authoritative-records-CoJvBXAD.mjs";
+import { a as UNSUPPORTED_AUTH_MESSAGE, n as multihashFromBlobCid, o as unsupportedAuthDetails } from "../checksum-CClweQzI.mjs";
+import "../ssrf-Dv0_tRpo.mjs";
+import { n as setDefaultAuthoritativeRecordReaderForTesting } from "../authoritative-records-C2YzIdbu.mjs";
 import { canonicalizeDeclaredAccess, isPluginSlug, isPluginVersion } from "@emdash-cms/plugin-types";
 import { NSID, PackageProfile, PackageProfileExtension, PackageRelease, PackageReleaseExtension } from "@emdash-cms/registry-lexicons";