emdash 1.1.0 → 1.3.0

package/dist/seo/index.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"index.mjs","names":[],"sources":["../../src/seo/index.ts"],"sourcesContent":["/**\n * SEO Helpers\n *\n * Public API functions for generating SEO meta tags in Astro templates.\n *\n * @example\n * ```astro\n * ---\n * import { getEmDashEntry } from \"emdash\";\n * import { getSeoMeta } from \"emdash/seo\";\n *\n * const post = await getEmDashEntry(\"posts\", Astro.params.slug);\n * const meta = await getSeoMeta(post, {\n *   siteTitle: \"My Blog\",\n *   siteUrl: Astro.url.origin,\n * });\n * ---\n * <html>\n *   <head>\n *     <title>{meta.title}</title>\n *     <meta name=\"description\" content={meta.description} />\n *     <meta property=\"og:title\" content={meta.ogTitle} />\n *     <meta property=\"og:description\" content={meta.ogDescription} />\n *     {meta.ogImage && <meta property=\"og:image\" content={meta.ogImage} />}\n *     <link rel=\"canonical\" href={meta.canonical} />\n *     {meta.robots && <meta name=\"robots\" content={meta.robots} />}\n *   </head>\n * </html>\n * ```\n */\n\nimport type { ContentSeo } from \"../database/repositories/types.js\";\nimport { buildSeoImageUrl, resolveSeoCanonicalUrl } from \"./media-url.js\";\n\nexport { getHreflangAlternates, getHreflangAlternatesWithDb } from \"./hreflang.js\";\nexport type { HreflangAlternate, HreflangOptions } from \"./hreflang.js\";\n\nconst TRAILING_SLASH_RE = /\\/$/;\n\n/**\n * Content input for SEO functions.\n * Accepts both ContentEntry<T> (from query functions) and ContentItem (internal).\n */\nexport interface SeoContentInput<T = Record<string, unknown>> {\n\t/** Content data object */\n\tdata: T & {\n\t\ttitle?: unknown;\n\t\texcerpt?: unknown;\n\t\tseo?: ContentSeo;\n\t};\n\t/** SEO metadata (legacy location, prefer data.seo) */\n\tseo?: ContentSeo;\n}\n\n/** Resolved SEO meta tags ready for use in templates */\nexport interface SeoMeta {\n\t/** Full <title> tag content (e.g., \"Post Title | Site Name\") */\n\ttitle: string;\n\t/** Meta description */\n\tdescription: string | null;\n\t/** OG title (same as title by default) */\n\togTitle: string;\n\t/** OG description */\n\togDescription: string | null;\n\t/** OG image URL (absolute) */\n\togImage: string | null;\n\t/** Canonical URL */\n\tcanonical: string | null;\n\t/** Robots directive (e.g., \"noindex, nofollow\") or null if default */\n\trobots: string | null;\n}\n\n/** Options for generating SEO meta from a content item */\nexport interface SeoMetaOptions {\n\t/** Site title for the suffix (e.g., \"My Blog\") */\n\tsiteTitle?: string;\n\t/** Site URL origin for building absolute URLs (e.g., \"https://example.com\") */\n\tsiteUrl?: string;\n\t/** Title separator between page title and site title */\n\ttitleSeparator?: string;\n\t/** Path to this content (e.g., \"/posts/my-post\") for canonical fallback */\n\tpath?: string;\n\t/** Default OG image URL if content has none */\n\tdefaultOgImage?: string;\n\t/**\n\t * Default page title used when the SEO panel has none. Ranks above the\n\t * `data.title` fallback, so computed titles (e.g. `` `${title} (cover of\n\t * ${artist})` ``) apply while an editor-set SEO title still wins.\n\t */\n\tdefaultTitle?: string;\n\t/**\n\t * Default description used when the SEO panel has none. Ranks above the\n\t * `data.excerpt` fallback; an editor-set SEO description still wins.\n\t */\n\tdefaultDescription?: string;\n}\n\n/**\n * Generate resolved SEO meta tags from a content item.\n *\n * Uses the content item's SEO fields, falling back to content data\n * (title from `data.title`, description from `data.excerpt`).\n *\n * @param content - The content item (from getEmDashEntry, etc.)\n * @param options - Configuration for title construction, canonical URLs, etc.\n * @returns Resolved meta tags ready for template use\n */\nexport function getSeoMeta<T>(content: SeoContentInput<T>, options: SeoMetaOptions = {}): SeoMeta {\n\tconst { siteTitle, siteUrl, path, defaultOgImage, defaultTitle, defaultDescription } = options;\n\tconst separator = options.titleSeparator || \" | \";\n\t// SEO can be in content.seo (ContentItem) or content.data.seo (ContentEntry)\n\tconst seo = content.seo ??\n\t\tcontent.data.seo ?? {\n\t\t\ttitle: null,\n\t\t\tdescription: null,\n\t\t\timage: null,\n\t\t\tcanonical: null,\n\t\t\tnoIndex: false,\n\t\t};\n\n\t// Title: SEO panel title > caller default > content title\n\tconst pageTitle =\n\t\tseo.title ||\n\t\tdefaultTitle ||\n\t\t(typeof content.data.title === \"string\" ? content.data.title : null) ||\n\t\t\"\";\n\n\tconst fullTitle = siteTitle && pageTitle ? `${pageTitle}${separator}${siteTitle}` : pageTitle;\n\n\t// Description: SEO panel description > caller default > excerpt\n\tconst description =\n\t\tseo.description ||\n\t\tdefaultDescription ||\n\t\t(typeof content.data.excerpt === \"string\" ? content.data.excerpt : null) ||\n\t\tnull;\n\n\t// OG image: SEO image > default\n\tconst ogImage = seo.image ? buildSeoImageUrl(seo.image, siteUrl) : (defaultOgImage ?? null);\n\n\t// Canonical: explicit > path-based > null. The explicit value goes\n\t// through the same resolver as the <EmDashHead> overlay, so a panel\n\t// canonical renders identically on both paths.\n\tlet canonical: string | null = null;\n\tif (seo.canonical) {\n\t\tcanonical = resolveSeoCanonicalUrl(seo.canonical, siteUrl);\n\t} else if (siteUrl && path) {\n\t\tconst safePath = path.startsWith(\"/\") ? path : `/${path}`;\n\t\tcanonical = `${siteUrl.replace(TRAILING_SLASH_RE, \"\")}${safePath}`;\n\t}\n\n\t// Robots\n\tconst robots = seo.noIndex ? \"noindex, nofollow\" : null;\n\n\treturn {\n\t\ttitle: fullTitle,\n\t\tdescription,\n\t\togTitle: pageTitle || fullTitle,\n\t\togDescription: description,\n\t\togImage,\n\t\tcanonical,\n\t\trobots,\n\t};\n}\n\n/**\n * Extract SEO data from a content item.\n *\n * Convenience accessor for the raw SEO fields without template resolution.\n *\n * @param content - The content item\n * @returns The content's SEO fields\n */\nexport function getContentSeo<T>(content: SeoContentInput<T>): ContentSeo | undefined {\n\treturn content.seo ?? content.data.seo;\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAqCA,MAAM,oBAAoB;;;;;;;;;;;AAsE1B,SAAgB,WAAc,SAA6B,UAA0B,EAAE,EAAW;CACjG,MAAM,EAAE,WAAW,SAAS,MAAM,gBAAgB,cAAc,uBAAuB;CACvF,MAAM,YAAY,QAAQ,kBAAkB;CAE5C,MAAM,MAAM,QAAQ,OACnB,QAAQ,KAAK,OAAO;EACnB,OAAO;EACP,aAAa;EACb,OAAO;EACP,WAAW;EACX,SAAS;EACT;CAGF,MAAM,YACL,IAAI,SACJ,iBACC,OAAO,QAAQ,KAAK,UAAU,WAAW,QAAQ,KAAK,QAAQ,SAC/D;CAED,MAAM,YAAY,aAAa,YAAY,GAAG,YAAY,YAAY,cAAc;CAGpF,MAAM,cACL,IAAI,eACJ,uBACC,OAAO,QAAQ,KAAK,YAAY,WAAW,QAAQ,KAAK,UAAU,SACnE;CAGD,MAAM,UAAU,IAAI,QAAQ,iBAAiB,IAAI,OAAO,QAAQ,GAAI,kBAAkB;CAKtF,IAAI,YAA2B;AAC/B,KAAI,IAAI,UACP,aAAY,uBAAuB,IAAI,WAAW,QAAQ;UAChD,WAAW,MAAM;EAC3B,MAAM,WAAW,KAAK,WAAW,IAAI,GAAG,OAAO,IAAI;AACnD,cAAY,GAAG,QAAQ,QAAQ,mBAAmB,GAAG,GAAG;;CAIzD,MAAM,SAAS,IAAI,UAAU,sBAAsB;AAEnD,QAAO;EACN,OAAO;EACP;EACA,SAAS,aAAa;EACtB,eAAe;EACf;EACA;EACA;EACA;;;;;;;;;;AAWF,SAAgB,cAAiB,SAAqD;AACrF,QAAO,QAAQ,OAAO,QAAQ,KAAK"}
+{"version":3,"file":"index.mjs","names":[],"sources":["../../src/seo/index.ts"],"sourcesContent":["/**\n * SEO Helpers\n *\n * Public API functions for generating SEO meta tags in Astro templates.\n *\n * @example\n * ```astro\n * ---\n * import { getEmDashEntry } from \"emdash\";\n * import { getSeoMeta } from \"emdash/seo\";\n *\n * const post = await getEmDashEntry(\"posts\", Astro.params.slug);\n * const meta = await getSeoMeta(post, {\n *   siteTitle: \"My Blog\",\n *   siteUrl: Astro.url.origin,\n * });\n * ---\n * <html>\n *   <head>\n *     <title>{meta.title}</title>\n *     <meta name=\"description\" content={meta.description} />\n *     <meta property=\"og:title\" content={meta.ogTitle} />\n *     <meta property=\"og:description\" content={meta.ogDescription} />\n *     {meta.ogImage && <meta property=\"og:image\" content={meta.ogImage} />}\n *     <link rel=\"canonical\" href={meta.canonical} />\n *     {meta.robots && <meta name=\"robots\" content={meta.robots} />}\n *   </head>\n * </html>\n * ```\n */\n\nimport type { ContentSeo } from \"../database/repositories/types.js\";\nimport { buildSeoImageUrl, resolveSeoCanonicalUrl } from \"./media-url.js\";\n\nexport { getHreflangAlternates, getHreflangAlternatesWithDb } from \"./hreflang.js\";\nexport type { HreflangAlternate, HreflangOptions } from \"./hreflang.js\";\n\nconst TRAILING_SLASH_RE = /\\/$/;\n\n/**\n * Content input for SEO functions.\n * Accepts both ContentEntry<T> (from query functions) and ContentItem (internal).\n */\nexport interface SeoContentInput<T = Record<string, unknown>> {\n\t/** Content data object */\n\tdata: T & {\n\t\ttitle?: unknown;\n\t\texcerpt?: unknown;\n\t\tseo?: ContentSeo;\n\t};\n\t/** SEO metadata (legacy location, prefer data.seo) */\n\tseo?: ContentSeo;\n}\n\n/** Resolved SEO meta tags ready for use in templates */\nexport interface SeoMeta {\n\t/** Full <title> tag content (e.g., \"Post Title | Site Name\") */\n\ttitle: string;\n\t/** Meta description */\n\tdescription: string | null;\n\t/** OG title (same as title by default) */\n\togTitle: string;\n\t/** OG description */\n\togDescription: string | null;\n\t/** OG image URL (absolute) */\n\togImage: string | null;\n\t/** Canonical URL */\n\tcanonical: string | null;\n\t/** Robots directive (e.g., \"noindex, nofollow\") or null if default */\n\trobots: string | null;\n}\n\n/** Options for generating SEO meta from a content item */\nexport interface SeoMetaOptions {\n\t/** Site title for the suffix (e.g., \"My Blog\") */\n\tsiteTitle?: string;\n\t/** Site URL origin for building absolute URLs (e.g., \"https://example.com\") */\n\tsiteUrl?: string;\n\t/** Title separator between page title and site title */\n\ttitleSeparator?: string;\n\t/** Path to this content (e.g., \"/posts/my-post\") for canonical fallback */\n\tpath?: string;\n\t/** Default OG image URL if content has none */\n\tdefaultOgImage?: string;\n\t/**\n\t * Default page title used when the SEO panel has none. Ranks above the\n\t * `data.title` fallback, so computed titles (e.g. `` `${title} (cover of\n\t * ${artist})` ``) apply while an editor-set SEO title still wins.\n\t */\n\tdefaultTitle?: string;\n\t/**\n\t * Default description used when the SEO panel has none. Ranks above the\n\t * `data.excerpt` fallback; an editor-set SEO description still wins.\n\t */\n\tdefaultDescription?: string;\n}\n\n/**\n * Generate resolved SEO meta tags from a content item.\n *\n * Uses the content item's SEO fields, falling back to content data\n * (title from `data.title`, description from `data.excerpt`).\n *\n * @param content - The content item (from getEmDashEntry, etc.)\n * @param options - Configuration for title construction, canonical URLs, etc.\n * @returns Resolved meta tags ready for template use\n */\nexport function getSeoMeta<T>(content: SeoContentInput<T>, options: SeoMetaOptions = {}): SeoMeta {\n\tconst { siteTitle, siteUrl, path, defaultOgImage, defaultTitle, defaultDescription } = options;\n\tconst separator = options.titleSeparator || \" | \";\n\t// SEO can be in content.seo (ContentItem) or content.data.seo (ContentEntry)\n\tconst seo = content.seo ??\n\t\tcontent.data.seo ?? {\n\t\t\ttitle: null,\n\t\t\tdescription: null,\n\t\t\timage: null,\n\t\t\tcanonical: null,\n\t\t\tnoIndex: false,\n\t\t};\n\n\t// Title: SEO panel title > caller default > content title\n\tconst pageTitle =\n\t\tseo.title ||\n\t\tdefaultTitle ||\n\t\t(typeof content.data.title === \"string\" ? content.data.title : null) ||\n\t\t\"\";\n\n\tconst fullTitle = siteTitle && pageTitle ? `${pageTitle}${separator}${siteTitle}` : pageTitle;\n\n\t// Description: SEO panel description > caller default > excerpt\n\tconst description =\n\t\tseo.description ||\n\t\tdefaultDescription ||\n\t\t(typeof content.data.excerpt === \"string\" ? content.data.excerpt : null) ||\n\t\tnull;\n\n\t// OG image: SEO image > default\n\tconst ogImage = seo.image ? buildSeoImageUrl(seo.image, siteUrl) : (defaultOgImage ?? null);\n\n\t// Canonical: explicit > path-based > null. The explicit value goes\n\t// through the same resolver as the <EmDashHead> overlay, so a panel\n\t// canonical renders identically on both paths.\n\tlet canonical: string | null = null;\n\tif (seo.canonical) {\n\t\tcanonical = resolveSeoCanonicalUrl(seo.canonical, siteUrl);\n\t} else if (siteUrl && path) {\n\t\tconst safePath = path.startsWith(\"/\") ? path : `/${path}`;\n\t\tcanonical = `${siteUrl.replace(TRAILING_SLASH_RE, \"\")}${safePath}`;\n\t}\n\n\t// Robots\n\tconst robots = seo.noIndex ? \"noindex, nofollow\" : null;\n\n\treturn {\n\t\ttitle: fullTitle,\n\t\tdescription,\n\t\togTitle: pageTitle || fullTitle,\n\t\togDescription: description,\n\t\togImage,\n\t\tcanonical,\n\t\trobots,\n\t};\n}\n\n/**\n * Extract SEO data from a content item.\n *\n * Convenience accessor for the raw SEO fields without template resolution.\n *\n * @param content - The content item\n * @returns The content's SEO fields\n */\nexport function getContentSeo<T>(content: SeoContentInput<T>): ContentSeo | undefined {\n\treturn content.seo ?? content.data.seo;\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAqCA,MAAM,oBAAoB;;;;;;;;;;;AAsE1B,SAAgB,WAAc,SAA6B,UAA0B,EAAE,EAAW;CACjG,MAAM,EAAE,WAAW,SAAS,MAAM,gBAAgB,cAAc,uBAAuB;CACvF,MAAM,YAAY,QAAQ,kBAAkB;CAE5C,MAAM,MAAM,QAAQ,OACnB,QAAQ,KAAK,OAAO;EACnB,OAAO;EACP,aAAa;EACb,OAAO;EACP,WAAW;EACX,SAAS;EACT;CAGF,MAAM,YACL,IAAI,SACJ,iBACC,OAAO,QAAQ,KAAK,UAAU,WAAW,QAAQ,KAAK,QAAQ,SAC/D;CAED,MAAM,YAAY,aAAa,YAAY,GAAG,YAAY,YAAY,cAAc;CAGpF,MAAM,cACL,IAAI,eACJ,uBACC,OAAO,QAAQ,KAAK,YAAY,WAAW,QAAQ,KAAK,UAAU,SACnE;CAGD,MAAM,UAAU,IAAI,QAAQ,iBAAiB,IAAI,OAAO,QAAQ,GAAI,kBAAkB;CAKtF,IAAI,YAA2B;AAC/B,KAAI,IAAI,UACP,aAAY,uBAAuB,IAAI,WAAW,QAAQ;UAChD,WAAW,MAAM;EAC3B,MAAM,WAAW,KAAK,WAAW,IAAI,GAAG,OAAO,IAAI;AACnD,cAAY,GAAG,QAAQ,QAAQ,mBAAmB,GAAG,GAAG;;CAIzD,MAAM,SAAS,IAAI,UAAU,sBAAsB;AAEnD,QAAO;EACN,OAAO;EACP;EACA,SAAS,aAAa;EACtB,eAAe;EACf;EACA;EACA;EACA;;;;;;;;;;AAWF,SAAgB,cAAiB,SAAqD;AACrF,QAAO,QAAQ,OAAO,QAAQ,KAAK"}

package/dist/seo-ClB-dw9w.mjs

@@ -0,0 +1,188 @@
+import { t as validateIdentifier } from "./validate-DANX1-Qi.mjs";
+import { sql } from "kysely";
+
+//#region src/api/handlers/seo.ts
+/**
+* SEO Handlers
+*
+* Business logic for sitemap generation and robots.txt.
+*/
+/**
+* Entries per child sitemap. Collections with more indexable entries continue
+* at `/sitemap-{collection}-2.xml`, `-3.xml`, and so on.
+*/
+const SITEMAP_PAGE_SIZE = 2e3;
+/** Matches a trailing timezone designator (`Z` or `±HH`, `±HHMM`, `±HH:MM`). */
+const TZ_SUFFIX_RE = /([zZ]|[+-]\d{2}(:?\d{2})?)$/;
+/**
+* Normalize a stored timestamp to W3C Datetime (ISO 8601) for sitemaps.
+*
+* `updated_at` is not guaranteed to be ISO: the column default is
+* `datetime('now')` on SQLite and `CURRENT_TIMESTAMP` on Postgres, both of
+* which store a space-separated `YYYY-MM-DD HH:MM:SS` string (and imported
+* content can carry other shapes). The sitemap `<lastmod>` field requires
+* W3C Datetime, and Google Search Console rejects the space-separated form
+* as "Invalid date". Normalize defensively, assuming UTC when no offset is
+* present (matches SQLite's `datetime('now')`). Valid date strings are
+* normalized to UTC ISO 8601; unparseable values are returned as-is.
+*/
+function toW3CDate(value) {
+	if (!value) return value;
+	let normalized = value.trim();
+	if (normalized.includes(" ") && !normalized.includes("T")) normalized = normalized.replace(" ", "T");
+	if (!TZ_SUFFIX_RE.test(normalized)) normalized += "Z";
+	const parsed = Date.parse(normalized);
+	return Number.isNaN(parsed) ? value : new Date(parsed).toISOString();
+}
+/** Routable, SEO-enabled collections with a valid slug (optionally one collection). */
+async function getSitemapCollections(db, collectionSlug) {
+	let query = db.selectFrom("_emdash_collections").select(["slug", "url_pattern"]).where("has_seo", "=", 1).where("routable", "=", 1);
+	if (collectionSlug) query = query.where("slug", "=", collectionSlug);
+	return (await query.execute()).filter((col) => {
+		try {
+			validateIdentifier(col.slug, "collection slug");
+			return true;
+		} catch {
+			console.warn(`[SITEMAP] Skipping collection with invalid slug: ${col.slug}`);
+			return false;
+		}
+	});
+}
+/**
+* Published, non-deleted rows with a slug that are not marked noindex.
+* Content without an SEO row is indexable by default.
+*/
+function indexableRows(collection) {
+	return sql`
+		FROM ${sql.ref(`ec_${collection}`)} c
+		LEFT JOIN _emdash_seo s
+			ON s.collection = ${collection}
+			AND s.content_id = c.id
+		WHERE c.status = 'published'
+		AND c.deleted_at IS NULL
+		AND c.slug IS NOT NULL
+		AND TRIM(c.slug) <> ''
+		AND (s.seo_no_index IS NULL OR s.seo_no_index = 0)
+	`;
+}
+/**
+* List the child sitemaps for the sitemap index: one per page of each
+* SEO-enabled collection that has indexable content, with the page's latest
+* update as `lastmod`.
+*/
+async function handleSitemapIndexData(db, pageSize = SITEMAP_PAGE_SIZE) {
+	try {
+		const collections = await getSitemapCollections(db);
+		const sitemaps = [];
+		for (const col of collections) try {
+			const rows = await sql`
+					SELECT p.page AS page, MAX(p.updated_at) AS lastmod
+					FROM (
+						SELECT c.updated_at,
+							(ROW_NUMBER() OVER (ORDER BY c.id) - 1) / CAST(${pageSize} AS INTEGER) AS page
+						${indexableRows(col.slug)}
+					) p
+					GROUP BY p.page
+					ORDER BY p.page
+				`.execute(db);
+			for (const row of rows.rows) sitemaps.push({
+				collection: col.slug,
+				page: Number(row.page) + 1,
+				lastmod: toW3CDate(row.lastmod)
+			});
+		} catch (err) {
+			console.warn(`[SITEMAP] Failed to query collection "${col.slug}":`, err);
+		}
+		return {
+			success: true,
+			data: { sitemaps }
+		};
+	} catch (error) {
+		console.error("[SITEMAP_ERROR]", error);
+		return {
+			success: false,
+			error: {
+				code: "SITEMAP_ERROR",
+				message: "Failed to generate sitemap index"
+			}
+		};
+	}
+}
+/**
+* Collect one page of published, indexable content per SEO-enabled
+* collection for sitemap generation, ordered by ID so editing an entry does
+* not move it to another page.
+*
+* Returns raw data grouped per collection. The caller (route) is
+* responsible for building absolute URLs — this handler does NOT
+* assume a URL structure.
+*/
+async function handleSitemapData(db, collectionSlug, options = {}) {
+	const page = options.page ?? 1;
+	const pageSize = options.pageSize ?? SITEMAP_PAGE_SIZE;
+	try {
+		const collections = await getSitemapCollections(db, collectionSlug);
+		const result = [];
+		for (const col of collections) try {
+			const from = indexableRows(col.slug);
+			const rows = await sql`
+					WITH page AS (
+						SELECT c.id, c.translation_group
+						${from}
+						ORDER BY c.id
+						LIMIT ${pageSize} OFFSET ${(page - 1) * pageSize}
+					)
+					SELECT c.slug, c.id, c.updated_at, c.published_at, c.locale, c.translation_group,
+						s.seo_image,
+						CASE WHEN c.id IN (SELECT id FROM page) THEN 1 ELSE 0 END AS on_page
+					${from}
+					AND (
+						c.id IN (SELECT id FROM page)
+						OR c.translation_group IN (SELECT translation_group FROM page)
+					)
+					ORDER BY c.id
+				`.execute(db);
+			const entries = [];
+			const translations = [];
+			for (const row of rows.rows) {
+				const entry = {
+					id: row.id,
+					slug: row.slug,
+					updatedAt: toW3CDate(row.updated_at),
+					publishedAt: row.published_at ?? null,
+					locale: row.locale,
+					translationGroup: row.translation_group,
+					image: row.seo_image ?? null
+				};
+				(Number(row.on_page) === 1 ? entries : translations).push(entry);
+			}
+			if (entries.length === 0) continue;
+			result.push({
+				collection: col.slug,
+				urlPattern: col.url_pattern,
+				entries,
+				translations
+			});
+		} catch (err) {
+			console.warn(`[SITEMAP] Failed to query collection "${col.slug}":`, err);
+			continue;
+		}
+		return {
+			success: true,
+			data: { collections: result }
+		};
+	} catch (error) {
+		console.error("[SITEMAP_ERROR]", error);
+		return {
+			success: false,
+			error: {
+				code: "SITEMAP_ERROR",
+				message: "Failed to generate sitemap data"
+			}
+		};
+	}
+}
+
+//#endregion
+export { handleSitemapIndexData as n, handleSitemapData as t };
+//# sourceMappingURL=seo-ClB-dw9w.mjs.map

package/dist/seo-ClB-dw9w.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"seo-ClB-dw9w.mjs","names":[],"sources":["../src/api/handlers/seo.ts"],"sourcesContent":["/**\n * SEO Handlers\n *\n * Business logic for sitemap generation and robots.txt.\n */\n\nimport { sql, type Kysely } from \"kysely\";\n\nimport type { Database } from \"../../database/types.js\";\nimport { validateIdentifier } from \"../../database/validate.js\";\nimport type { ApiResult } from \"../types.js\";\n\n/** Raw content data for sitemap generation — the route builds the actual URLs */\nexport interface SitemapContentEntry {\n\t/** Content ID (ULID) */\n\tid: string;\n\t/** Content slug, or null when the entry has no slug */\n\tslug: string | null;\n\t/** ISO date of last modification */\n\tupdatedAt: string;\n\t/**\n\t * ISO publish date, or null when never published. Used to resolve\n\t * date tokens (`{year}`/`{month}`/`{day}`) in the collection's\n\t * `url_pattern` — the published date keeps permalinks stable across\n\t * later edits (unlike `updatedAt`).\n\t */\n\tpublishedAt: string | null;\n\t/**\n\t * Locale of this row (e.g. `\"en\"`, `\"fr\"`). Always present — rows in\n\t * pre-i18n databases are backfilled to the configured `defaultLocale`.\n\t */\n\tlocale: string;\n\t/**\n\t * `translation_group` ULID shared across all locale variants of the\n\t * same content. Used by the sitemap route to emit `hreflang`\n\t * alternates between siblings.\n\t */\n\ttranslationGroup: string | null;\n\t/**\n\t * Stored SEO image reference (`_emdash_seo.seo_image`), or null when\n\t * the entry has no SEO image. The route resolves it to an absolute\n\t * URL and emits it as an `<image:image>` sitemap entry.\n\t */\n\timage: string | null;\n}\n\n/** Per-collection sitemap data with entries and URL pattern */\nexport interface SitemapCollectionData {\n\t/** Collection slug (e.g., \"post\", \"page\") */\n\tcollection: string;\n\t/** URL pattern with {slug} placeholder, or null for default /{collection}/{slug} */\n\turlPattern: string | null;\n\t/** Entries on the requested page */\n\tentries: SitemapContentEntry[];\n\t/**\n\t * Indexable translations of `entries` that sit on other pages. They are\n\t * not listed themselves but are needed for `hreflang` alternates.\n\t */\n\ttranslations: SitemapContentEntry[];\n}\n\nexport interface SitemapDataResponse {\n\tcollections: SitemapCollectionData[];\n}\n\n/** One child sitemap in the sitemap index */\nexport interface SitemapIndexEntry {\n\tcollection: string;\n\t/** 1-based page number */\n\tpage: number;\n\t/** Most recent updated_at across the page's entries */\n\tlastmod: string;\n}\n\n/**\n * Entries per child sitemap. Collections with more indexable entries continue\n * at `/sitemap-{collection}-2.xml`, `-3.xml`, and so on.\n */\nexport const SITEMAP_PAGE_SIZE = 2000;\n\n/** Matches a trailing timezone designator (`Z` or `±HH`, `±HHMM`, `±HH:MM`). */\nconst TZ_SUFFIX_RE = /([zZ]|[+-]\\d{2}(:?\\d{2})?)$/;\n\n/**\n * Normalize a stored timestamp to W3C Datetime (ISO 8601) for sitemaps.\n *\n * `updated_at` is not guaranteed to be ISO: the column default is\n * `datetime('now')` on SQLite and `CURRENT_TIMESTAMP` on Postgres, both of\n * which store a space-separated `YYYY-MM-DD HH:MM:SS` string (and imported\n * content can carry other shapes). The sitemap `<lastmod>` field requires\n * W3C Datetime, and Google Search Console rejects the space-separated form\n * as \"Invalid date\". Normalize defensively, assuming UTC when no offset is\n * present (matches SQLite's `datetime('now')`). Valid date strings are\n * normalized to UTC ISO 8601; unparseable values are returned as-is.\n */\nfunction toW3CDate(value: string): string {\n\tif (!value) return value;\n\tlet normalized = value.trim();\n\tif (normalized.includes(\" \") && !normalized.includes(\"T\")) {\n\t\tnormalized = normalized.replace(\" \", \"T\");\n\t}\n\tif (!TZ_SUFFIX_RE.test(normalized)) {\n\t\tnormalized += \"Z\";\n\t}\n\tconst parsed = Date.parse(normalized);\n\treturn Number.isNaN(parsed) ? value : new Date(parsed).toISOString();\n}\n\ninterface SitemapCollectionRow {\n\tslug: string;\n\turl_pattern: string | null;\n}\n\n/** Routable, SEO-enabled collections with a valid slug (optionally one collection). */\nasync function getSitemapCollections(\n\tdb: Kysely<Database>,\n\tcollectionSlug?: string,\n): Promise<SitemapCollectionRow[]> {\n\tlet query = db\n\t\t.selectFrom(\"_emdash_collections\")\n\t\t.select([\"slug\", \"url_pattern\"])\n\t\t.where(\"has_seo\", \"=\", 1)\n\t\t.where(\"routable\", \"=\", 1);\n\n\tif (collectionSlug) {\n\t\tquery = query.where(\"slug\", \"=\", collectionSlug);\n\t}\n\n\tconst collections = await query.execute();\n\treturn collections.filter((col) => {\n\t\t// Should always pass (slugs are validated on creation), but guards the\n\t\t// table-name identifier against corrupted DB data.\n\t\ttry {\n\t\t\tvalidateIdentifier(col.slug, \"collection slug\");\n\t\t\treturn true;\n\t\t} catch {\n\t\t\tconsole.warn(`[SITEMAP] Skipping collection with invalid slug: ${col.slug}`);\n\t\t\treturn false;\n\t\t}\n\t});\n}\n\n/**\n * Published, non-deleted rows with a slug that are not marked noindex.\n * Content without an SEO row is indexable by default.\n */\nfunction indexableRows(collection: string) {\n\treturn sql`\n\t\tFROM ${sql.ref(`ec_${collection}`)} c\n\t\tLEFT JOIN _emdash_seo s\n\t\t\tON s.collection = ${collection}\n\t\t\tAND s.content_id = c.id\n\t\tWHERE c.status = 'published'\n\t\tAND c.deleted_at IS NULL\n\t\tAND c.slug IS NOT NULL\n\t\tAND TRIM(c.slug) <> ''\n\t\tAND (s.seo_no_index IS NULL OR s.seo_no_index = 0)\n\t`;\n}\n\n/**\n * List the child sitemaps for the sitemap index: one per page of each\n * SEO-enabled collection that has indexable content, with the page's latest\n * update as `lastmod`.\n */\nexport async function handleSitemapIndexData(\n\tdb: Kysely<Database>,\n\tpageSize = SITEMAP_PAGE_SIZE,\n): Promise<ApiResult<{ sitemaps: SitemapIndexEntry[] }>> {\n\ttry {\n\t\tconst collections = await getSitemapCollections(db);\n\t\tconst sitemaps: SitemapIndexEntry[] = [];\n\n\t\tfor (const col of collections) {\n\t\t\t// A missing or broken table skips that collection instead of failing\n\t\t\t// the whole index.\n\t\t\ttry {\n\t\t\t\tconst rows = await sql<{ page: number | string; lastmod: string }>`\n\t\t\t\t\tSELECT p.page AS page, MAX(p.updated_at) AS lastmod\n\t\t\t\t\tFROM (\n\t\t\t\t\t\tSELECT c.updated_at,\n\t\t\t\t\t\t\t(ROW_NUMBER() OVER (ORDER BY c.id) - 1) / CAST(${pageSize} AS INTEGER) AS page\n\t\t\t\t\t\t${indexableRows(col.slug)}\n\t\t\t\t\t) p\n\t\t\t\t\tGROUP BY p.page\n\t\t\t\t\tORDER BY p.page\n\t\t\t\t`.execute(db);\n\n\t\t\t\tfor (const row of rows.rows) {\n\t\t\t\t\tsitemaps.push({\n\t\t\t\t\t\tcollection: col.slug,\n\t\t\t\t\t\tpage: Number(row.page) + 1,\n\t\t\t\t\t\tlastmod: toW3CDate(row.lastmod),\n\t\t\t\t\t});\n\t\t\t\t}\n\t\t\t} catch (err) {\n\t\t\t\tconsole.warn(`[SITEMAP] Failed to query collection \"${col.slug}\":`, err);\n\t\t\t}\n\t\t}\n\n\t\treturn { success: true, data: { sitemaps } };\n\t} catch (error) {\n\t\tconsole.error(\"[SITEMAP_ERROR]\", error);\n\t\treturn {\n\t\t\tsuccess: false,\n\t\t\terror: { code: \"SITEMAP_ERROR\", message: \"Failed to generate sitemap index\" },\n\t\t};\n\t}\n}\n\n/**\n * Collect one page of published, indexable content per SEO-enabled\n * collection for sitemap generation, ordered by ID so editing an entry does\n * not move it to another page.\n *\n * Returns raw data grouped per collection. The caller (route) is\n * responsible for building absolute URLs — this handler does NOT\n * assume a URL structure.\n */\nexport async function handleSitemapData(\n\tdb: Kysely<Database>,\n\t/** When set, only return data for this collection. */\n\tcollectionSlug?: string,\n\toptions: { page?: number; pageSize?: number } = {},\n): Promise<ApiResult<SitemapDataResponse>> {\n\tconst page = options.page ?? 1;\n\tconst pageSize = options.pageSize ?? SITEMAP_PAGE_SIZE;\n\ttry {\n\t\tconst collections = await getSitemapCollections(db, collectionSlug);\n\t\tconst result: SitemapCollectionData[] = [];\n\n\t\tfor (const col of collections) {\n\t\t\t// A missing or broken table skips that collection instead of failing\n\t\t\t// the whole sitemap.\n\t\t\ttry {\n\t\t\t\tconst from = indexableRows(col.slug);\n\t\t\t\tconst rows = await sql<{\n\t\t\t\t\tslug: string | null;\n\t\t\t\t\tid: string;\n\t\t\t\t\tupdated_at: string;\n\t\t\t\t\tpublished_at: string | null;\n\t\t\t\t\tlocale: string;\n\t\t\t\t\ttranslation_group: string | null;\n\t\t\t\t\tseo_image: string | null;\n\t\t\t\t\ton_page: number | string;\n\t\t\t\t}>`\n\t\t\t\t\tWITH page AS (\n\t\t\t\t\t\tSELECT c.id, c.translation_group\n\t\t\t\t\t\t${from}\n\t\t\t\t\t\tORDER BY c.id\n\t\t\t\t\t\tLIMIT ${pageSize} OFFSET ${(page - 1) * pageSize}\n\t\t\t\t\t)\n\t\t\t\t\tSELECT c.slug, c.id, c.updated_at, c.published_at, c.locale, c.translation_group,\n\t\t\t\t\t\ts.seo_image,\n\t\t\t\t\t\tCASE WHEN c.id IN (SELECT id FROM page) THEN 1 ELSE 0 END AS on_page\n\t\t\t\t\t${from}\n\t\t\t\t\tAND (\n\t\t\t\t\t\tc.id IN (SELECT id FROM page)\n\t\t\t\t\t\tOR c.translation_group IN (SELECT translation_group FROM page)\n\t\t\t\t\t)\n\t\t\t\t\tORDER BY c.id\n\t\t\t\t`.execute(db);\n\n\t\t\t\tconst entries: SitemapContentEntry[] = [];\n\t\t\t\tconst translations: SitemapContentEntry[] = [];\n\t\t\t\tfor (const row of rows.rows) {\n\t\t\t\t\tconst entry: SitemapContentEntry = {\n\t\t\t\t\t\tid: row.id,\n\t\t\t\t\t\tslug: row.slug,\n\t\t\t\t\t\tupdatedAt: toW3CDate(row.updated_at),\n\t\t\t\t\t\tpublishedAt: row.published_at ?? null,\n\t\t\t\t\t\tlocale: row.locale,\n\t\t\t\t\t\ttranslationGroup: row.translation_group,\n\t\t\t\t\t\timage: row.seo_image ?? null,\n\t\t\t\t\t};\n\t\t\t\t\t(Number(row.on_page) === 1 ? entries : translations).push(entry);\n\t\t\t\t}\n\n\t\t\t\tif (entries.length === 0) continue;\n\n\t\t\t\tresult.push({\n\t\t\t\t\tcollection: col.slug,\n\t\t\t\t\turlPattern: col.url_pattern,\n\t\t\t\t\tentries,\n\t\t\t\t\ttranslations,\n\t\t\t\t});\n\t\t\t} catch (err) {\n\t\t\t\tconsole.warn(`[SITEMAP] Failed to query collection \"${col.slug}\":`, err);\n\t\t\t\tcontinue;\n\t\t\t}\n\t\t}\n\n\t\treturn { success: true, data: { collections: result } };\n\t} catch (error) {\n\t\tconsole.error(\"[SITEMAP_ERROR]\", error);\n\t\treturn {\n\t\t\tsuccess: false,\n\t\t\terror: { code: \"SITEMAP_ERROR\", message: \"Failed to generate sitemap data\" },\n\t\t};\n\t}\n}\n"],"mappings":";;;;;;;;;;;;;AA8EA,MAAa,oBAAoB;;AAGjC,MAAM,eAAe;;;;;;;;;;;;;AAcrB,SAAS,UAAU,OAAuB;AACzC,KAAI,CAAC,MAAO,QAAO;CACnB,IAAI,aAAa,MAAM,MAAM;AAC7B,KAAI,WAAW,SAAS,IAAI,IAAI,CAAC,WAAW,SAAS,IAAI,CACxD,cAAa,WAAW,QAAQ,KAAK,IAAI;AAE1C,KAAI,CAAC,aAAa,KAAK,WAAW,CACjC,eAAc;CAEf,MAAM,SAAS,KAAK,MAAM,WAAW;AACrC,QAAO,OAAO,MAAM,OAAO,GAAG,QAAQ,IAAI,KAAK,OAAO,CAAC,aAAa;;;AASrE,eAAe,sBACd,IACA,gBACkC;CAClC,IAAI,QAAQ,GACV,WAAW,sBAAsB,CACjC,OAAO,CAAC,QAAQ,cAAc,CAAC,CAC/B,MAAM,WAAW,KAAK,EAAE,CACxB,MAAM,YAAY,KAAK,EAAE;AAE3B,KAAI,eACH,SAAQ,MAAM,MAAM,QAAQ,KAAK,eAAe;AAIjD,SADoB,MAAM,MAAM,SAAS,EACtB,QAAQ,QAAQ;AAGlC,MAAI;AACH,sBAAmB,IAAI,MAAM,kBAAkB;AAC/C,UAAO;UACA;AACP,WAAQ,KAAK,oDAAoD,IAAI,OAAO;AAC5E,UAAO;;GAEP;;;;;;AAOH,SAAS,cAAc,YAAoB;AAC1C,QAAO,GAAG;SACF,IAAI,IAAI,MAAM,aAAa,CAAC;;uBAEd,WAAW;;;;;;;;;;;;;;AAelC,eAAsB,uBACrB,IACA,WAAW,mBAC6C;AACxD,KAAI;EACH,MAAM,cAAc,MAAM,sBAAsB,GAAG;EACnD,MAAM,WAAgC,EAAE;AAExC,OAAK,MAAM,OAAO,YAGjB,KAAI;GACH,MAAM,OAAO,MAAM,GAA+C;;;;wDAId,SAAS;QACzD,cAAc,IAAI,KAAK,CAAC;;;;MAI1B,QAAQ,GAAG;AAEb,QAAK,MAAM,OAAO,KAAK,KACtB,UAAS,KAAK;IACb,YAAY,IAAI;IAChB,MAAM,OAAO,IAAI,KAAK,GAAG;IACzB,SAAS,UAAU,IAAI,QAAQ;IAC/B,CAAC;WAEK,KAAK;AACb,WAAQ,KAAK,yCAAyC,IAAI,KAAK,KAAK,IAAI;;AAI1E,SAAO;GAAE,SAAS;GAAM,MAAM,EAAE,UAAU;GAAE;UACpC,OAAO;AACf,UAAQ,MAAM,mBAAmB,MAAM;AACvC,SAAO;GACN,SAAS;GACT,OAAO;IAAE,MAAM;IAAiB,SAAS;IAAoC;GAC7E;;;;;;;;;;;;AAaH,eAAsB,kBACrB,IAEA,gBACA,UAAgD,EAAE,EACR;CAC1C,MAAM,OAAO,QAAQ,QAAQ;CAC7B,MAAM,WAAW,QAAQ,YAAY;AACrC,KAAI;EACH,MAAM,cAAc,MAAM,sBAAsB,IAAI,eAAe;EACnE,MAAM,SAAkC,EAAE;AAE1C,OAAK,MAAM,OAAO,YAGjB,KAAI;GACH,MAAM,OAAO,cAAc,IAAI,KAAK;GACpC,MAAM,OAAO,MAAM,GASjB;;;QAGE,KAAK;;cAEC,SAAS,WAAW,OAAO,KAAK,SAAS;;;;;OAKhD,KAAK;;;;;;MAMN,QAAQ,GAAG;GAEb,MAAM,UAAiC,EAAE;GACzC,MAAM,eAAsC,EAAE;AAC9C,QAAK,MAAM,OAAO,KAAK,MAAM;IAC5B,MAAM,QAA6B;KAClC,IAAI,IAAI;KACR,MAAM,IAAI;KACV,WAAW,UAAU,IAAI,WAAW;KACpC,aAAa,IAAI,gBAAgB;KACjC,QAAQ,IAAI;KACZ,kBAAkB,IAAI;KACtB,OAAO,IAAI,aAAa;KACxB;AACD,KAAC,OAAO,IAAI,QAAQ,KAAK,IAAI,UAAU,cAAc,KAAK,MAAM;;AAGjE,OAAI,QAAQ,WAAW,EAAG;AAE1B,UAAO,KAAK;IACX,YAAY,IAAI;IAChB,YAAY,IAAI;IAChB;IACA;IACA,CAAC;WACM,KAAK;AACb,WAAQ,KAAK,yCAAyC,IAAI,KAAK,KAAK,IAAI;AACxE;;AAIF,SAAO;GAAE,SAAS;GAAM,MAAM,EAAE,aAAa,QAAQ;GAAE;UAC/C,OAAO;AACf,UAAQ,MAAM,mBAAmB,MAAM;AACvC,SAAO;GACN,SAAS;GACT,OAAO;IAAE,MAAM;IAAiB,SAAS;IAAmC;GAC5E"}

package/dist/seo-VZYOEy8f.mjs

@@ -0,0 +1,133 @@
+import { l as invalidateCollectionCache } from "./object-cache-Bo6DGaC9.mjs";
+import { n as chunks, t as SQL_BATCH_SIZE } from "./chunks-xC4UD5-S.mjs";
+import { sql } from "kysely";
+
+//#region src/database/repositories/seo.ts
+/** Default SEO values for content without an explicit SEO row */
+const SEO_DEFAULTS = {
+	title: null,
+	description: null,
+	image: null,
+	canonical: null,
+	noIndex: false
+};
+/**
+* Returns true if the input has at least one explicitly-set SEO field.
+* Used to skip no-op upserts when callers pass `{ seo: {} }`.
+*/
+function hasAnyField(input) {
+	return input.title !== void 0 || input.description !== void 0 || input.image !== void 0 || input.canonical !== void 0 || input.noIndex !== void 0;
+}
+/**
+* Repository for SEO metadata stored in `_emdash_seo`.
+*
+* SEO data lives in a separate table keyed by (collection, content_id).
+* Only collections with `has_seo = 1` should use this — callers are
+* responsible for checking the flag before reading/writing.
+*/
+var SeoRepository = class {
+	constructor(db) {
+		this.db = db;
+	}
+	/**
+	* Check whether a collection has SEO enabled (`has_seo = 1`).
+	* Returns `false` if the collection does not exist.
+	*/
+	async isEnabled(collection) {
+		return (await this.db.selectFrom("_emdash_collections").select("has_seo").where("slug", "=", collection).executeTakeFirst())?.has_seo === 1;
+	}
+	/**
+	* Get SEO data for a content item. Returns null defaults if no row exists.
+	*/
+	async get(collection, contentId) {
+		const row = await this.db.selectFrom("_emdash_seo").selectAll().where("collection", "=", collection).where("content_id", "=", contentId).executeTakeFirst();
+		if (!row) return { ...SEO_DEFAULTS };
+		return {
+			title: row.seo_title ?? null,
+			description: row.seo_description ?? null,
+			image: row.seo_image ?? null,
+			canonical: row.seo_canonical ?? null,
+			noIndex: row.seo_no_index === 1
+		};
+	}
+	/**
+	* Get SEO data for multiple content items.
+	* Returns a Map keyed by content_id. Items without SEO rows get defaults.
+	*
+	* Chunks the `content_id IN (…)` clause so the total bound-parameter count
+	* per statement (ids + the `collection = ?` filter) stays within Cloudflare
+	* D1's 100-variable limit regardless of how many content items are passed.
+	*/
+	async getMany(collection, contentIds) {
+		const result = /* @__PURE__ */ new Map();
+		if (contentIds.length === 0) return result;
+		for (const id of contentIds) result.set(id, { ...SEO_DEFAULTS });
+		const uniqueContentIds = [...new Set(contentIds)];
+		for (const chunk of chunks(uniqueContentIds, SQL_BATCH_SIZE)) {
+			const rows = await this.db.selectFrom("_emdash_seo").selectAll().where("collection", "=", collection).where("content_id", "in", chunk).execute();
+			for (const row of rows) result.set(row.content_id, {
+				title: row.seo_title ?? null,
+				description: row.seo_description ?? null,
+				image: row.seo_image ?? null,
+				canonical: row.seo_canonical ?? null,
+				noIndex: row.seo_no_index === 1
+			});
+		}
+		return result;
+	}
+	/**
+	* Upsert SEO data for a content item using INSERT ON CONFLICT DO UPDATE
+	* for atomicity. Skips no-op writes when input has no fields set.
+	*/
+	async upsert(collection, contentId, input) {
+		if (!hasAnyField(input)) return this.get(collection, contentId);
+		const now = (/* @__PURE__ */ new Date()).toISOString();
+		await sql`
+			INSERT INTO _emdash_seo (
+				collection, content_id,
+				seo_title, seo_description, seo_image, seo_canonical, seo_no_index,
+				created_at, updated_at
+			) VALUES (
+				${collection}, ${contentId},
+				${input.title ?? null}, ${input.description ?? null},
+				${input.image ?? null}, ${input.canonical ?? null},
+				${input.noIndex ? 1 : 0},
+				${now}, ${now}
+			)
+			ON CONFLICT (collection, content_id) DO UPDATE SET
+				seo_title = ${input.title !== void 0 ? sql`${input.title}` : sql`_emdash_seo.seo_title`},
+				seo_description = ${input.description !== void 0 ? sql`${input.description}` : sql`_emdash_seo.seo_description`},
+				seo_image = ${input.image !== void 0 ? sql`${input.image}` : sql`_emdash_seo.seo_image`},
+				seo_canonical = ${input.canonical !== void 0 ? sql`${input.canonical}` : sql`_emdash_seo.seo_canonical`},
+				seo_no_index = ${input.noIndex !== void 0 ? sql`${input.noIndex ? 1 : 0}` : sql`_emdash_seo.seo_no_index`},
+				updated_at = ${now}
+		`.execute(this.db);
+		invalidateCollectionCache(collection);
+		return this.get(collection, contentId);
+	}
+	/**
+	* Delete SEO data for a content item.
+	*/
+	async delete(collection, contentId) {
+		await this.db.deleteFrom("_emdash_seo").where("collection", "=", collection).where("content_id", "=", contentId).execute();
+		invalidateCollectionCache(collection);
+	}
+	/**
+	* Copy SEO data from one content item to another.
+	* Used by duplicate. Clears canonical (it pointed to the original).
+	*/
+	async copyForDuplicate(collection, sourceId, targetId) {
+		const source = await this.get(collection, sourceId);
+		if (source.title !== null || source.description !== null || source.image !== null || source.noIndex) await this.upsert(collection, targetId, {
+			title: source.title,
+			description: source.description,
+			image: source.image,
+			canonical: null,
+			noIndex: source.noIndex
+		});
+	}
+};
+
+//#endregion
+export { SeoRepository as t };
+//# sourceMappingURL=seo-VZYOEy8f.mjs.map

package/dist/seo-VZYOEy8f.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"seo-VZYOEy8f.mjs","names":[],"sources":["../src/database/repositories/seo.ts"],"sourcesContent":["import { sql, type Kysely } from \"kysely\";\n\nimport { invalidateCollectionCache } from \"../../object-cache/index.js\";\nimport { chunks, SQL_BATCH_SIZE } from \"../../utils/chunks.js\";\nimport type { Database } from \"../types.js\";\nimport type { ContentSeo, ContentSeoInput } from \"./types.js\";\n\n/** Default SEO values for content without an explicit SEO row */\nconst SEO_DEFAULTS: ContentSeo = {\n\ttitle: null,\n\tdescription: null,\n\timage: null,\n\tcanonical: null,\n\tnoIndex: false,\n};\n\n/**\n * Returns true if the input has at least one explicitly-set SEO field.\n * Used to skip no-op upserts when callers pass `{ seo: {} }`.\n */\nfunction hasAnyField(input: ContentSeoInput): boolean {\n\treturn (\n\t\tinput.title !== undefined ||\n\t\tinput.description !== undefined ||\n\t\tinput.image !== undefined ||\n\t\tinput.canonical !== undefined ||\n\t\tinput.noIndex !== undefined\n\t);\n}\n\n/**\n * Repository for SEO metadata stored in `_emdash_seo`.\n *\n * SEO data lives in a separate table keyed by (collection, content_id).\n * Only collections with `has_seo = 1` should use this — callers are\n * responsible for checking the flag before reading/writing.\n */\nexport class SeoRepository {\n\tconstructor(private db: Kysely<Database>) {}\n\n\t/**\n\t * Check whether a collection has SEO enabled (`has_seo = 1`).\n\t * Returns `false` if the collection does not exist.\n\t */\n\tasync isEnabled(collection: string): Promise<boolean> {\n\t\tconst row = await this.db\n\t\t\t.selectFrom(\"_emdash_collections\")\n\t\t\t.select(\"has_seo\")\n\t\t\t.where(\"slug\", \"=\", collection)\n\t\t\t.executeTakeFirst();\n\t\treturn row?.has_seo === 1;\n\t}\n\n\t/**\n\t * Get SEO data for a content item. Returns null defaults if no row exists.\n\t */\n\tasync get(collection: string, contentId: string): Promise<ContentSeo> {\n\t\tconst row = await this.db\n\t\t\t.selectFrom(\"_emdash_seo\")\n\t\t\t.selectAll()\n\t\t\t.where(\"collection\", \"=\", collection)\n\t\t\t.where(\"content_id\", \"=\", contentId)\n\t\t\t.executeTakeFirst();\n\n\t\tif (!row) {\n\t\t\treturn { ...SEO_DEFAULTS };\n\t\t}\n\n\t\treturn {\n\t\t\ttitle: row.seo_title ?? null,\n\t\t\tdescription: row.seo_description ?? null,\n\t\t\timage: row.seo_image ?? null,\n\t\t\tcanonical: row.seo_canonical ?? null,\n\t\t\tnoIndex: row.seo_no_index === 1,\n\t\t};\n\t}\n\n\t/**\n\t * Get SEO data for multiple content items.\n\t * Returns a Map keyed by content_id. Items without SEO rows get defaults.\n\t *\n\t * Chunks the `content_id IN (…)` clause so the total bound-parameter count\n\t * per statement (ids + the `collection = ?` filter) stays within Cloudflare\n\t * D1's 100-variable limit regardless of how many content items are passed.\n\t */\n\tasync getMany(collection: string, contentIds: string[]): Promise<Map<string, ContentSeo>> {\n\t\tconst result = new Map<string, ContentSeo>();\n\n\t\tif (contentIds.length === 0) return result;\n\n\t\t// Pre-fill with defaults so every input id has an entry even if no row exists.\n\t\tfor (const id of contentIds) {\n\t\t\tresult.set(id, { ...SEO_DEFAULTS });\n\t\t}\n\n\t\tconst uniqueContentIds = [...new Set(contentIds)];\n\t\tfor (const chunk of chunks(uniqueContentIds, SQL_BATCH_SIZE)) {\n\t\t\tconst rows = await this.db\n\t\t\t\t.selectFrom(\"_emdash_seo\")\n\t\t\t\t.selectAll()\n\t\t\t\t.where(\"collection\", \"=\", collection)\n\t\t\t\t.where(\"content_id\", \"in\", chunk)\n\t\t\t\t.execute();\n\n\t\t\tfor (const row of rows) {\n\t\t\t\tresult.set(row.content_id, {\n\t\t\t\t\ttitle: row.seo_title ?? null,\n\t\t\t\t\tdescription: row.seo_description ?? null,\n\t\t\t\t\timage: row.seo_image ?? null,\n\t\t\t\t\tcanonical: row.seo_canonical ?? null,\n\t\t\t\t\tnoIndex: row.seo_no_index === 1,\n\t\t\t\t});\n\t\t\t}\n\t\t}\n\n\t\treturn result;\n\t}\n\n\t/**\n\t * Upsert SEO data for a content item using INSERT ON CONFLICT DO UPDATE\n\t * for atomicity. Skips no-op writes when input has no fields set.\n\t */\n\tasync upsert(collection: string, contentId: string, input: ContentSeoInput): Promise<ContentSeo> {\n\t\t// Skip no-op: empty input (e.g., `{ seo: {} }` from form libs)\n\t\tif (!hasAnyField(input)) {\n\t\t\treturn this.get(collection, contentId);\n\t\t}\n\n\t\tconst now = new Date().toISOString();\n\n\t\t// Use INSERT ON CONFLICT for atomic upsert — avoids TOCTOU race\n\t\t// where two concurrent requests both see \"no row\" and both try INSERT.\n\t\t//\n\t\t// On conflict, we use COALESCE(excluded.col, current.col) so that\n\t\t// only explicitly-provided fields overwrite existing values.\n\t\tawait sql`\n\t\t\tINSERT INTO _emdash_seo (\n\t\t\t\tcollection, content_id,\n\t\t\t\tseo_title, seo_description, seo_image, seo_canonical, seo_no_index,\n\t\t\t\tcreated_at, updated_at\n\t\t\t) VALUES (\n\t\t\t\t${collection}, ${contentId},\n\t\t\t\t${input.title ?? null}, ${input.description ?? null},\n\t\t\t\t${input.image ?? null}, ${input.canonical ?? null},\n\t\t\t\t${input.noIndex ? 1 : 0},\n\t\t\t\t${now}, ${now}\n\t\t\t)\n\t\t\tON CONFLICT (collection, content_id) DO UPDATE SET\n\t\t\t\tseo_title = ${input.title !== undefined ? sql`${input.title}` : sql`_emdash_seo.seo_title`},\n\t\t\t\tseo_description = ${input.description !== undefined ? sql`${input.description}` : sql`_emdash_seo.seo_description`},\n\t\t\t\tseo_image = ${input.image !== undefined ? sql`${input.image}` : sql`_emdash_seo.seo_image`},\n\t\t\t\tseo_canonical = ${input.canonical !== undefined ? sql`${input.canonical}` : sql`_emdash_seo.seo_canonical`},\n\t\t\t\tseo_no_index = ${input.noIndex !== undefined ? sql`${input.noIndex ? 1 : 0}` : sql`_emdash_seo.seo_no_index`},\n\t\t\t\tupdated_at = ${now}\n\t\t`.execute(this.db);\n\n\t\tinvalidateCollectionCache(collection);\n\t\treturn this.get(collection, contentId);\n\t}\n\n\t/**\n\t * Delete SEO data for a content item.\n\t */\n\tasync delete(collection: string, contentId: string): Promise<void> {\n\t\tawait this.db\n\t\t\t.deleteFrom(\"_emdash_seo\")\n\t\t\t.where(\"collection\", \"=\", collection)\n\t\t\t.where(\"content_id\", \"=\", contentId)\n\t\t\t.execute();\n\t\tinvalidateCollectionCache(collection);\n\t}\n\n\t/**\n\t * Copy SEO data from one content item to another.\n\t * Used by duplicate. Clears canonical (it pointed to the original).\n\t */\n\tasync copyForDuplicate(collection: string, sourceId: string, targetId: string): Promise<void> {\n\t\tconst source = await this.get(collection, sourceId);\n\n\t\t// Only write if there's actual SEO data worth copying\n\t\tif (\n\t\t\tsource.title !== null ||\n\t\t\tsource.description !== null ||\n\t\t\tsource.image !== null ||\n\t\t\tsource.noIndex\n\t\t) {\n\t\t\tawait this.upsert(collection, targetId, {\n\t\t\t\ttitle: source.title,\n\t\t\t\tdescription: source.description,\n\t\t\t\timage: source.image,\n\t\t\t\tcanonical: null, // Don't copy canonical — it pointed to the original\n\t\t\t\tnoIndex: source.noIndex,\n\t\t\t});\n\t\t}\n\t}\n}\n"],"mappings":";;;;;;AAQA,MAAM,eAA2B;CAChC,OAAO;CACP,aAAa;CACb,OAAO;CACP,WAAW;CACX,SAAS;CACT;;;;;AAMD,SAAS,YAAY,OAAiC;AACrD,QACC,MAAM,UAAU,UAChB,MAAM,gBAAgB,UACtB,MAAM,UAAU,UAChB,MAAM,cAAc,UACpB,MAAM,YAAY;;;;;;;;;AAWpB,IAAa,gBAAb,MAA2B;CAC1B,YAAY,AAAQ,IAAsB;EAAtB;;;;;;CAMpB,MAAM,UAAU,YAAsC;AAMrD,UALY,MAAM,KAAK,GACrB,WAAW,sBAAsB,CACjC,OAAO,UAAU,CACjB,MAAM,QAAQ,KAAK,WAAW,CAC9B,kBAAkB,GACR,YAAY;;;;;CAMzB,MAAM,IAAI,YAAoB,WAAwC;EACrE,MAAM,MAAM,MAAM,KAAK,GACrB,WAAW,cAAc,CACzB,WAAW,CACX,MAAM,cAAc,KAAK,WAAW,CACpC,MAAM,cAAc,KAAK,UAAU,CACnC,kBAAkB;AAEpB,MAAI,CAAC,IACJ,QAAO,EAAE,GAAG,cAAc;AAG3B,SAAO;GACN,OAAO,IAAI,aAAa;GACxB,aAAa,IAAI,mBAAmB;GACpC,OAAO,IAAI,aAAa;GACxB,WAAW,IAAI,iBAAiB;GAChC,SAAS,IAAI,iBAAiB;GAC9B;;;;;;;;;;CAWF,MAAM,QAAQ,YAAoB,YAAwD;EACzF,MAAM,yBAAS,IAAI,KAAyB;AAE5C,MAAI,WAAW,WAAW,EAAG,QAAO;AAGpC,OAAK,MAAM,MAAM,WAChB,QAAO,IAAI,IAAI,EAAE,GAAG,cAAc,CAAC;EAGpC,MAAM,mBAAmB,CAAC,GAAG,IAAI,IAAI,WAAW,CAAC;AACjD,OAAK,MAAM,SAAS,OAAO,kBAAkB,eAAe,EAAE;GAC7D,MAAM,OAAO,MAAM,KAAK,GACtB,WAAW,cAAc,CACzB,WAAW,CACX,MAAM,cAAc,KAAK,WAAW,CACpC,MAAM,cAAc,MAAM,MAAM,CAChC,SAAS;AAEX,QAAK,MAAM,OAAO,KACjB,QAAO,IAAI,IAAI,YAAY;IAC1B,OAAO,IAAI,aAAa;IACxB,aAAa,IAAI,mBAAmB;IACpC,OAAO,IAAI,aAAa;IACxB,WAAW,IAAI,iBAAiB;IAChC,SAAS,IAAI,iBAAiB;IAC9B,CAAC;;AAIJ,SAAO;;;;;;CAOR,MAAM,OAAO,YAAoB,WAAmB,OAA6C;AAEhG,MAAI,CAAC,YAAY,MAAM,CACtB,QAAO,KAAK,IAAI,YAAY,UAAU;EAGvC,MAAM,uBAAM,IAAI,MAAM,EAAC,aAAa;AAOpC,QAAM,GAAG;;;;;;MAML,WAAW,IAAI,UAAU;MACzB,MAAM,SAAS,KAAK,IAAI,MAAM,eAAe,KAAK;MAClD,MAAM,SAAS,KAAK,IAAI,MAAM,aAAa,KAAK;MAChD,MAAM,UAAU,IAAI,EAAE;MACtB,IAAI,IAAI,IAAI;;;kBAGA,MAAM,UAAU,SAAY,GAAG,GAAG,MAAM,UAAU,GAAG,wBAAwB;wBACvE,MAAM,gBAAgB,SAAY,GAAG,GAAG,MAAM,gBAAgB,GAAG,8BAA8B;kBACrG,MAAM,UAAU,SAAY,GAAG,GAAG,MAAM,UAAU,GAAG,wBAAwB;sBACzE,MAAM,cAAc,SAAY,GAAG,GAAG,MAAM,cAAc,GAAG,4BAA4B;qBAC1F,MAAM,YAAY,SAAY,GAAG,GAAG,MAAM,UAAU,IAAI,MAAM,GAAG,2BAA2B;mBAC9F,IAAI;IACnB,QAAQ,KAAK,GAAG;AAElB,4BAA0B,WAAW;AACrC,SAAO,KAAK,IAAI,YAAY,UAAU;;;;;CAMvC,MAAM,OAAO,YAAoB,WAAkC;AAClE,QAAM,KAAK,GACT,WAAW,cAAc,CACzB,MAAM,cAAc,KAAK,WAAW,CACpC,MAAM,cAAc,KAAK,UAAU,CACnC,SAAS;AACX,4BAA0B,WAAW;;;;;;CAOtC,MAAM,iBAAiB,YAAoB,UAAkB,UAAiC;EAC7F,MAAM,SAAS,MAAM,KAAK,IAAI,YAAY,SAAS;AAGnD,MACC,OAAO,UAAU,QACjB,OAAO,gBAAgB,QACvB,OAAO,UAAU,QACjB,OAAO,QAEP,OAAM,KAAK,OAAO,YAAY,UAAU;GACvC,OAAO,OAAO;GACd,aAAa,OAAO;GACpB,OAAO,OAAO;GACd,WAAW;GACX,SAAS,OAAO;GAChB,CAAC"}

package/dist/service-Bo_usgSk.mjs

@@ -0,0 +1,150 @@
+import { t as CommentRepository } from "./comment-UvIWDKcW.mjs";
+import { AsyncLocalStorage } from "node:async_hooks";
+
+//#region src/comments/service.ts
+/**
+* Comment Service
+*
+* Orchestrates comment creation through the hook pipeline:
+*   1. Run comment:beforeCreate pipeline (transform/reject)
+*   2. Query priorApprovedCount for first-time moderation
+*   3. Invoke comment:moderate exclusive hook (or built-in fallback)
+*   4. Save comment with determined status
+*   5. Fire comment:afterCreate (fire-and-forget)
+*
+* Also handles admin moderation (status changes) with afterModerate hooks.
+*/
+var CommentStatusConflictError = class extends Error {
+	code = "COMMENT_STATUS_CONFLICT";
+	currentStatus;
+	constructor(currentStatus) {
+		super("Comment status changed; read the current comment before retrying");
+		this.name = "CommentStatusConflictError";
+		this.currentStatus = currentStatus;
+	}
+};
+const commentModerationALS = new AsyncLocalStorage();
+/**
+* Create a comment through the full hook pipeline.
+*
+* Returns null if the comment was rejected by a beforeCreate handler.
+*/
+async function createComment(db, input, collectionSettings, hooks, contentInfo) {
+	const repo = new CommentRepository(db);
+	const beforeCreateEvent = {
+		comment: {
+			collection: input.collection,
+			contentId: input.contentId,
+			parentId: input.parentId ?? null,
+			authorName: input.authorName,
+			authorEmail: input.authorEmail,
+			authorUserId: input.authorUserId ?? null,
+			body: input.body,
+			ipHash: input.ipHash ?? null,
+			userAgent: input.userAgent ?? null
+		},
+		metadata: {}
+	};
+	const result = await hooks.runBeforeCreate(beforeCreateEvent);
+	if (result === false) return null;
+	const event = result;
+	const priorApprovedCount = await repo.countApprovedByEmail(event.comment.authorEmail);
+	const moderateEvent = {
+		comment: event.comment,
+		metadata: event.metadata,
+		collectionSettings,
+		priorApprovedCount
+	};
+	const decision = await hooks.runModerate(moderateEvent);
+	const comment = await repo.create({
+		collection: event.comment.collection,
+		contentId: event.comment.contentId,
+		parentId: event.comment.parentId,
+		authorName: event.comment.authorName,
+		authorEmail: event.comment.authorEmail,
+		authorUserId: event.comment.authorUserId,
+		body: event.comment.body,
+		status: decision.status,
+		ipHash: event.comment.ipHash,
+		userAgent: event.comment.userAgent,
+		moderationMetadata: Object.keys(event.metadata).length > 0 ? event.metadata : null
+	});
+	if (contentInfo) {
+		const afterEvent = {
+			comment: commentToStored(comment),
+			metadata: event.metadata,
+			content: {
+				id: contentInfo.id,
+				collection: contentInfo.collection,
+				slug: contentInfo.slug,
+				title: contentInfo.title
+			},
+			contentAuthor: contentInfo.author
+		};
+		hooks.fireAfterCreate(afterEvent);
+	}
+	return {
+		comment,
+		decision
+	};
+}
+/**
+* Admin moderation — change a comment's status.
+* Fires comment:afterModerate hook.
+*/
+async function moderateComment(db, id, newStatus, expectedStatus, origin, hooks, onApproved) {
+	const active = commentModerationALS.getStore();
+	if (active?.has(id)) throw new Error("Recursive comment moderation is not allowed");
+	const next = new Set(active);
+	next.add(id);
+	return commentModerationALS.run(next, () => moderateCommentWithinGuard(db, id, newStatus, expectedStatus, origin, hooks, onApproved));
+}
+async function moderateCommentWithinGuard(db, id, newStatus, expectedStatus, origin, hooks, onApproved) {
+	const result = await new CommentRepository(db).updateStatusIf(id, newStatus, expectedStatus);
+	if (result.state === "not_found") return null;
+	if (result.state === "conflict") throw new CommentStatusConflictError(result.comment.status);
+	if (result.state === "unchanged") return result.comment;
+	const updated = result.comment;
+	if (newStatus === "approved") await onApproved?.(updated);
+	const afterEvent = {
+		comment: commentToStored(updated),
+		previousStatus: expectedStatus,
+		newStatus,
+		moderator: origin.source === "admin" ? {
+			id: origin.userId,
+			name: origin.name
+		} : {
+			id: origin.pluginId,
+			name: null
+		},
+		origin: origin.source === "admin" ? {
+			source: "admin",
+			userId: origin.userId
+		} : {
+			source: "plugin",
+			pluginId: origin.pluginId
+		}
+	};
+	await hooks.fireAfterModerate(afterEvent);
+	return updated;
+}
+function commentToStored(comment) {
+	return {
+		id: comment.id,
+		collection: comment.collection,
+		contentId: comment.contentId,
+		parentId: comment.parentId,
+		authorName: comment.authorName,
+		authorEmail: comment.authorEmail,
+		authorUserId: comment.authorUserId,
+		body: comment.body,
+		status: comment.status,
+		moderationMetadata: comment.moderationMetadata,
+		createdAt: comment.createdAt,
+		updatedAt: comment.updatedAt
+	};
+}
+
+//#endregion
+export { createComment as n, moderateComment as r, CommentStatusConflictError as t };
+//# sourceMappingURL=service-Bo_usgSk.mjs.map

package/dist/service-Bo_usgSk.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"service-Bo_usgSk.mjs","names":[],"sources":["../src/comments/service.ts"],"sourcesContent":["/**\n * Comment Service\n *\n * Orchestrates comment creation through the hook pipeline:\n *   1. Run comment:beforeCreate pipeline (transform/reject)\n *   2. Query priorApprovedCount for first-time moderation\n *   3. Invoke comment:moderate exclusive hook (or built-in fallback)\n *   4. Save comment with determined status\n *   5. Fire comment:afterCreate (fire-and-forget)\n *\n * Also handles admin moderation (status changes) with afterModerate hooks.\n */\n\nimport { AsyncLocalStorage } from \"node:async_hooks\";\n\nimport type { Kysely } from \"kysely\";\n\nimport { CommentRepository } from \"../database/repositories/comment.js\";\nimport type { Comment, CommentStatus } from \"../database/repositories/comment.js\";\nimport type { Database } from \"../database/types.js\";\nimport type {\n\tCollectionCommentSettings,\n\tCommentAfterCreateEvent,\n\tCommentAfterModerateEvent,\n\tCommentBeforeCreateEvent,\n\tCommentModerateEvent,\n\tModerationDecision,\n\tStoredComment,\n} from \"../plugins/types.js\";\n\n// ---------------------------------------------------------------------------\n// Types\n// ---------------------------------------------------------------------------\n\nexport interface CommentCreateInput {\n\tcollection: string;\n\tcontentId: string;\n\tparentId?: string | null;\n\tauthorName: string;\n\tauthorEmail: string;\n\tauthorUserId?: string | null;\n\tbody: string;\n\tipHash?: string | null;\n\tuserAgent?: string | null;\n}\n\nexport interface CommentCreateResult {\n\tcomment: Comment;\n\tdecision: ModerationDecision;\n}\n\n/**\n * Hook runner interface — injected from the runtime so the service\n * doesn't need to know about the hook pipeline internals.\n */\nexport interface CommentHookRunner {\n\t/** Run comment:beforeCreate pipeline. Returns modified event or false. */\n\trunBeforeCreate(event: CommentBeforeCreateEvent): Promise<CommentBeforeCreateEvent | false>;\n\n\t/** Run comment:moderate exclusive hook. Returns moderation decision. */\n\trunModerate(event: CommentModerateEvent): Promise<ModerationDecision>;\n\n\t/** Fire comment:afterCreate (fire-and-forget). */\n\tfireAfterCreate(event: CommentAfterCreateEvent): void;\n\n\t/** Run comment:afterModerate after a successful transition. */\n\tfireAfterModerate(event: CommentAfterModerateEvent): void | Promise<void>;\n}\n\nexport type CommentModerationOrigin =\n\t| { source: \"admin\"; userId: string; name: string | null }\n\t| { source: \"plugin\"; pluginId: string };\n\nexport class CommentStatusConflictError extends Error {\n\treadonly code = \"COMMENT_STATUS_CONFLICT\";\n\treadonly currentStatus: CommentStatus;\n\n\tconstructor(currentStatus: CommentStatus) {\n\t\tsuper(\"Comment status changed; read the current comment before retrying\");\n\t\tthis.name = \"CommentStatusConflictError\";\n\t\tthis.currentStatus = currentStatus;\n\t}\n}\n\nconst commentModerationALS = new AsyncLocalStorage<ReadonlySet<string>>();\n\n// ---------------------------------------------------------------------------\n// Service\n// ---------------------------------------------------------------------------\n\n/**\n * Create a comment through the full hook pipeline.\n *\n * Returns null if the comment was rejected by a beforeCreate handler.\n */\nexport async function createComment(\n\tdb: Kysely<Database>,\n\tinput: CommentCreateInput,\n\tcollectionSettings: CollectionCommentSettings,\n\thooks: CommentHookRunner,\n\tcontentInfo?: {\n\t\tid: string;\n\t\tcollection: string;\n\t\tslug: string;\n\t\ttitle?: string;\n\t\tauthor?: { id: string; name: string | null; email: string };\n\t},\n): Promise<CommentCreateResult | null> {\n\tconst repo = new CommentRepository(db);\n\n\t// 1. Build the beforeCreate event\n\tconst beforeCreateEvent: CommentBeforeCreateEvent = {\n\t\tcomment: {\n\t\t\tcollection: input.collection,\n\t\t\tcontentId: input.contentId,\n\t\t\tparentId: input.parentId ?? null,\n\t\t\tauthorName: input.authorName,\n\t\t\tauthorEmail: input.authorEmail,\n\t\t\tauthorUserId: input.authorUserId ?? null,\n\t\t\tbody: input.body,\n\t\t\tipHash: input.ipHash ?? null,\n\t\t\tuserAgent: input.userAgent ?? null,\n\t\t},\n\t\tmetadata: {},\n\t};\n\n\t// 2. Run comment:beforeCreate pipeline\n\tconst result = await hooks.runBeforeCreate(beforeCreateEvent);\n\tif (result === false) {\n\t\treturn null; // Rejected\n\t}\n\n\tconst event = result;\n\n\t// 3. Query prior approved count for first-time moderation\n\tconst priorApprovedCount = await repo.countApprovedByEmail(event.comment.authorEmail);\n\n\t// 4. Run comment:moderate exclusive hook\n\tconst moderateEvent: CommentModerateEvent = {\n\t\tcomment: event.comment,\n\t\tmetadata: event.metadata,\n\t\tcollectionSettings,\n\t\tpriorApprovedCount,\n\t};\n\n\tconst decision = await hooks.runModerate(moderateEvent);\n\n\t// 5. Save comment with determined status\n\tconst comment = await repo.create({\n\t\tcollection: event.comment.collection,\n\t\tcontentId: event.comment.contentId,\n\t\tparentId: event.comment.parentId,\n\t\tauthorName: event.comment.authorName,\n\t\tauthorEmail: event.comment.authorEmail,\n\t\tauthorUserId: event.comment.authorUserId,\n\t\tbody: event.comment.body,\n\t\tstatus: decision.status,\n\t\tipHash: event.comment.ipHash,\n\t\tuserAgent: event.comment.userAgent,\n\t\tmoderationMetadata: Object.keys(event.metadata).length > 0 ? event.metadata : null,\n\t});\n\n\t// 6. Fire comment:afterCreate (fire-and-forget)\n\tif (contentInfo) {\n\t\tconst afterEvent: CommentAfterCreateEvent = {\n\t\t\tcomment: commentToStored(comment),\n\t\t\tmetadata: event.metadata,\n\t\t\tcontent: {\n\t\t\t\tid: contentInfo.id,\n\t\t\t\tcollection: contentInfo.collection,\n\t\t\t\tslug: contentInfo.slug,\n\t\t\t\ttitle: contentInfo.title,\n\t\t\t},\n\t\t\tcontentAuthor: contentInfo.author,\n\t\t};\n\t\thooks.fireAfterCreate(afterEvent);\n\t}\n\n\treturn { comment, decision };\n}\n\n/**\n * Admin moderation — change a comment's status.\n * Fires comment:afterModerate hook.\n */\nexport async function moderateComment(\n\tdb: Kysely<Database>,\n\tid: string,\n\tnewStatus: CommentStatus,\n\texpectedStatus: CommentStatus,\n\torigin: CommentModerationOrigin,\n\thooks: CommentHookRunner,\n\tonApproved?: (comment: Comment) => void | Promise<void>,\n): Promise<Comment | null> {\n\tconst active = commentModerationALS.getStore();\n\tif (active?.has(id)) throw new Error(\"Recursive comment moderation is not allowed\");\n\tconst next = new Set(active);\n\tnext.add(id);\n\treturn commentModerationALS.run(next, () =>\n\t\tmoderateCommentWithinGuard(db, id, newStatus, expectedStatus, origin, hooks, onApproved),\n\t);\n}\n\nasync function moderateCommentWithinGuard(\n\tdb: Kysely<Database>,\n\tid: string,\n\tnewStatus: CommentStatus,\n\texpectedStatus: CommentStatus,\n\torigin: CommentModerationOrigin,\n\thooks: CommentHookRunner,\n\tonApproved?: (comment: Comment) => void | Promise<void>,\n): Promise<Comment | null> {\n\tconst repo = new CommentRepository(db);\n\tconst result = await repo.updateStatusIf(id, newStatus, expectedStatus);\n\tif (result.state === \"not_found\") return null;\n\tif (result.state === \"conflict\") throw new CommentStatusConflictError(result.comment.status);\n\tif (result.state === \"unchanged\") return result.comment;\n\tconst updated = result.comment;\n\n\tif (newStatus === \"approved\") await onApproved?.(updated);\n\n\t// Run comment:afterModerate after a successful transition\n\tconst afterEvent: CommentAfterModerateEvent = {\n\t\tcomment: commentToStored(updated),\n\t\tpreviousStatus: expectedStatus,\n\t\tnewStatus,\n\t\tmoderator:\n\t\t\torigin.source === \"admin\"\n\t\t\t\t? { id: origin.userId, name: origin.name }\n\t\t\t\t: { id: origin.pluginId, name: null },\n\t\torigin:\n\t\t\torigin.source === \"admin\"\n\t\t\t\t? { source: \"admin\", userId: origin.userId }\n\t\t\t\t: { source: \"plugin\", pluginId: origin.pluginId },\n\t};\n\tawait hooks.fireAfterModerate(afterEvent);\n\n\treturn updated;\n}\n\n// ---------------------------------------------------------------------------\n// Helpers\n// ---------------------------------------------------------------------------\n\nfunction commentToStored(comment: Comment): StoredComment {\n\treturn {\n\t\tid: comment.id,\n\t\tcollection: comment.collection,\n\t\tcontentId: comment.contentId,\n\t\tparentId: comment.parentId,\n\t\tauthorName: comment.authorName,\n\t\tauthorEmail: comment.authorEmail,\n\t\tauthorUserId: comment.authorUserId,\n\t\tbody: comment.body,\n\t\tstatus: comment.status,\n\t\tmoderationMetadata: comment.moderationMetadata,\n\t\tcreatedAt: comment.createdAt,\n\t\tupdatedAt: comment.updatedAt,\n\t};\n}\n"],"mappings":";;;;;;;;;;;;;;;;AAyEA,IAAa,6BAAb,cAAgD,MAAM;CACrD,AAAS,OAAO;CAChB,AAAS;CAET,YAAY,eAA8B;AACzC,QAAM,mEAAmE;AACzE,OAAK,OAAO;AACZ,OAAK,gBAAgB;;;AAIvB,MAAM,uBAAuB,IAAI,mBAAwC;;;;;;AAWzE,eAAsB,cACrB,IACA,OACA,oBACA,OACA,aAOsC;CACtC,MAAM,OAAO,IAAI,kBAAkB,GAAG;CAGtC,MAAM,oBAA8C;EACnD,SAAS;GACR,YAAY,MAAM;GAClB,WAAW,MAAM;GACjB,UAAU,MAAM,YAAY;GAC5B,YAAY,MAAM;GAClB,aAAa,MAAM;GACnB,cAAc,MAAM,gBAAgB;GACpC,MAAM,MAAM;GACZ,QAAQ,MAAM,UAAU;GACxB,WAAW,MAAM,aAAa;GAC9B;EACD,UAAU,EAAE;EACZ;CAGD,MAAM,SAAS,MAAM,MAAM,gBAAgB,kBAAkB;AAC7D,KAAI,WAAW,MACd,QAAO;CAGR,MAAM,QAAQ;CAGd,MAAM,qBAAqB,MAAM,KAAK,qBAAqB,MAAM,QAAQ,YAAY;CAGrF,MAAM,gBAAsC;EAC3C,SAAS,MAAM;EACf,UAAU,MAAM;EAChB;EACA;EACA;CAED,MAAM,WAAW,MAAM,MAAM,YAAY,cAAc;CAGvD,MAAM,UAAU,MAAM,KAAK,OAAO;EACjC,YAAY,MAAM,QAAQ;EAC1B,WAAW,MAAM,QAAQ;EACzB,UAAU,MAAM,QAAQ;EACxB,YAAY,MAAM,QAAQ;EAC1B,aAAa,MAAM,QAAQ;EAC3B,cAAc,MAAM,QAAQ;EAC5B,MAAM,MAAM,QAAQ;EACpB,QAAQ,SAAS;EACjB,QAAQ,MAAM,QAAQ;EACtB,WAAW,MAAM,QAAQ;EACzB,oBAAoB,OAAO,KAAK,MAAM,SAAS,CAAC,SAAS,IAAI,MAAM,WAAW;EAC9E,CAAC;AAGF,KAAI,aAAa;EAChB,MAAM,aAAsC;GAC3C,SAAS,gBAAgB,QAAQ;GACjC,UAAU,MAAM;GAChB,SAAS;IACR,IAAI,YAAY;IAChB,YAAY,YAAY;IACxB,MAAM,YAAY;IAClB,OAAO,YAAY;IACnB;GACD,eAAe,YAAY;GAC3B;AACD,QAAM,gBAAgB,WAAW;;AAGlC,QAAO;EAAE;EAAS;EAAU;;;;;;AAO7B,eAAsB,gBACrB,IACA,IACA,WACA,gBACA,QACA,OACA,YAC0B;CAC1B,MAAM,SAAS,qBAAqB,UAAU;AAC9C,KAAI,QAAQ,IAAI,GAAG,CAAE,OAAM,IAAI,MAAM,8CAA8C;CACnF,MAAM,OAAO,IAAI,IAAI,OAAO;AAC5B,MAAK,IAAI,GAAG;AACZ,QAAO,qBAAqB,IAAI,YAC/B,2BAA2B,IAAI,IAAI,WAAW,gBAAgB,QAAQ,OAAO,WAAW,CACxF;;AAGF,eAAe,2BACd,IACA,IACA,WACA,gBACA,QACA,OACA,YAC0B;CAE1B,MAAM,SAAS,MADF,IAAI,kBAAkB,GAAG,CACZ,eAAe,IAAI,WAAW,eAAe;AACvE,KAAI,OAAO,UAAU,YAAa,QAAO;AACzC,KAAI,OAAO,UAAU,WAAY,OAAM,IAAI,2BAA2B,OAAO,QAAQ,OAAO;AAC5F,KAAI,OAAO,UAAU,YAAa,QAAO,OAAO;CAChD,MAAM,UAAU,OAAO;AAEvB,KAAI,cAAc,WAAY,OAAM,aAAa,QAAQ;CAGzD,MAAM,aAAwC;EAC7C,SAAS,gBAAgB,QAAQ;EACjC,gBAAgB;EAChB;EACA,WACC,OAAO,WAAW,UACf;GAAE,IAAI,OAAO;GAAQ,MAAM,OAAO;GAAM,GACxC;GAAE,IAAI,OAAO;GAAU,MAAM;GAAM;EACvC,QACC,OAAO,WAAW,UACf;GAAE,QAAQ;GAAS,QAAQ,OAAO;GAAQ,GAC1C;GAAE,QAAQ;GAAU,UAAU,OAAO;GAAU;EACnD;AACD,OAAM,MAAM,kBAAkB,WAAW;AAEzC,QAAO;;AAOR,SAAS,gBAAgB,SAAiC;AACzD,QAAO;EACN,IAAI,QAAQ;EACZ,YAAY,QAAQ;EACpB,WAAW,QAAQ;EACnB,UAAU,QAAQ;EAClB,YAAY,QAAQ;EACpB,aAAa,QAAQ;EACrB,cAAc,QAAQ;EACtB,MAAM,QAAQ;EACd,QAAQ,QAAQ;EAChB,oBAAoB,QAAQ;EAC5B,WAAW,QAAQ;EACnB,WAAW,QAAQ;EACnB"}

package/dist/session-user-DlpPdf8L.mjs

@@ -0,0 +1,61 @@
+import { t as after } from "./after-PcEvMY_6.mjs";
+import { t as ErrorCode } from "./errors-BOYNdIo3.mjs";
+import { t as apiError } from "./error-CVWeIOku.mjs";
+
+//#region src/astro/session-user.ts
+/**
+* Backstop timeout for resolving the session user. A live session-store read
+* settles in a few ms, so this only ever fires on a genuinely stalled read.
+*/
+const SESSION_GET_TIMEOUT_MS = 3e3;
+/**
+* Resolve the Astro session user without risking an isolate-wide hang.
+*
+* On Cloudflare Workers, a request cancelled mid-`session.get()` (client
+* disconnect, context teardown) can leave the underlying session-store read as
+* a promise that never settles — neither resolving nor rejecting. Awaiting it
+* directly hangs the request, and because the stalled promise is shared at the
+* isolate level, every later session-bearing request hangs too (observed as
+* 0-CPU, multi-minute, `canceled` responses; see #1274). A surrounding
+* try/catch cannot help: the promise never rejects.
+*
+* Two layers, mirroring the reclaimable-cache pattern used elsewhere in core:
+*  1. `after()` anchors the read so a cancelled request still drives it to
+*     completion — the promise settles and the isolate is not poisoned for
+*     subsequent requests (prevents the hang rather than merely surviving it).
+*  2. A timeout is a fail-closed backstop: a still-stalled (or rejecting) read
+*     resolves to `undefined`, and every caller treats the absence of a session
+*     user as unauthenticated (anonymous on public routes, 401/redirect on
+*     protected ones). It can only ever drop privileges for that one request,
+*     never grant them.
+*
+* Used by every session read on the request path: the main middleware (the
+* first read on a session-bearing request), the auth middleware, and the
+* preview-snapshot route (which bypasses the auth middleware).
+*/
+async function resolveSessionUser(session, timeoutMs = SESSION_GET_TIMEOUT_MS) {
+	if (!session) return void 0;
+	const read = Promise.resolve(session.get("user")).catch(() => void 0);
+	after(() => read.then(() => void 0, () => void 0));
+	let timer;
+	const timeout = new Promise((resolve) => {
+		timer = setTimeout(resolve, timeoutMs, void 0);
+	});
+	try {
+		return await Promise.race([read, timeout]);
+	} finally {
+		clearTimeout(timer);
+	}
+}
+const SESSION_UNAVAILABLE_MESSAGE = "Sign-in needs an Astro session driver. Configure session.driver in astro.config.mjs.";
+/**
+* Error for sign-in routes when Astro has no session to store the user in.
+* Check before consuming tokens so a failed sign-in can be retried.
+*/
+function sessionUnavailableError() {
+	return apiError(ErrorCode.SESSION_UNAVAILABLE, SESSION_UNAVAILABLE_MESSAGE, 500);
+}
+
+//#endregion
+export { resolveSessionUser as n, sessionUnavailableError as r, SESSION_UNAVAILABLE_MESSAGE as t };
+//# sourceMappingURL=session-user-DlpPdf8L.mjs.map

package/dist/session-user-DlpPdf8L.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-user-DlpPdf8L.mjs","names":[],"sources":["../src/astro/session-user.ts"],"sourcesContent":["import { apiError } from \"#api/error.js\";\nimport { ErrorCode } from \"#api/errors.js\";\n\nimport { after } from \"../after.js\";\n\n/**\n * Backstop timeout for resolving the session user. A live session-store read\n * settles in a few ms, so this only ever fires on a genuinely stalled read.\n */\nexport const SESSION_GET_TIMEOUT_MS = 3_000;\n\n/**\n * Resolve the Astro session user without risking an isolate-wide hang.\n *\n * On Cloudflare Workers, a request cancelled mid-`session.get()` (client\n * disconnect, context teardown) can leave the underlying session-store read as\n * a promise that never settles — neither resolving nor rejecting. Awaiting it\n * directly hangs the request, and because the stalled promise is shared at the\n * isolate level, every later session-bearing request hangs too (observed as\n * 0-CPU, multi-minute, `canceled` responses; see #1274). A surrounding\n * try/catch cannot help: the promise never rejects.\n *\n * Two layers, mirroring the reclaimable-cache pattern used elsewhere in core:\n *  1. `after()` anchors the read so a cancelled request still drives it to\n *     completion — the promise settles and the isolate is not poisoned for\n *     subsequent requests (prevents the hang rather than merely surviving it).\n *  2. A timeout is a fail-closed backstop: a still-stalled (or rejecting) read\n *     resolves to `undefined`, and every caller treats the absence of a session\n *     user as unauthenticated (anonymous on public routes, 401/redirect on\n *     protected ones). It can only ever drop privileges for that one request,\n *     never grant them.\n *\n * Used by every session read on the request path: the main middleware (the\n * first read on a session-bearing request), the auth middleware, and the\n * preview-snapshot route (which bypasses the auth middleware).\n */\nexport async function resolveSessionUser<T>(\n\tsession: { get(key: \"user\"): Promise<T> } | undefined,\n\ttimeoutMs = SESSION_GET_TIMEOUT_MS,\n): Promise<T | undefined> {\n\tif (!session) return undefined;\n\tconst read: Promise<T | undefined> = Promise.resolve(session.get(\"user\")).catch(() => undefined);\n\t// Keep the worker alive past response/cancellation so the read completes and\n\t// the shared promise settles — this is what prevents the isolate poisoning.\n\tafter(() =>\n\t\tread.then(\n\t\t\t() => undefined,\n\t\t\t() => undefined,\n\t\t),\n\t);\n\tlet timer: ReturnType<typeof setTimeout> | undefined;\n\tconst timeout = new Promise<undefined>((resolve) => {\n\t\ttimer = setTimeout(resolve, timeoutMs, undefined);\n\t});\n\ttry {\n\t\treturn await Promise.race([read, timeout]);\n\t} finally {\n\t\tclearTimeout(timer);\n\t}\n}\n\nexport const SESSION_UNAVAILABLE_MESSAGE =\n\t\"Sign-in needs an Astro session driver. Configure session.driver in astro.config.mjs.\";\n\n/**\n * Error for sign-in routes when Astro has no session to store the user in.\n * Check before consuming tokens so a failed sign-in can be retried.\n */\nexport function sessionUnavailableError(): Response {\n\treturn apiError(ErrorCode.SESSION_UNAVAILABLE, SESSION_UNAVAILABLE_MESSAGE, 500);\n}\n"],"mappings":";;;;;;;;;AASA,MAAa,yBAAyB;;;;;;;;;;;;;;;;;;;;;;;;;;AA2BtC,eAAsB,mBACrB,SACA,YAAY,wBACa;AACzB,KAAI,CAAC,QAAS,QAAO;CACrB,MAAM,OAA+B,QAAQ,QAAQ,QAAQ,IAAI,OAAO,CAAC,CAAC,YAAY,OAAU;AAGhG,aACC,KAAK,WACE,cACA,OACN,CACD;CACD,IAAI;CACJ,MAAM,UAAU,IAAI,SAAoB,YAAY;AACnD,UAAQ,WAAW,SAAS,WAAW,OAAU;GAChD;AACF,KAAI;AACH,SAAO,MAAM,QAAQ,KAAK,CAAC,MAAM,QAAQ,CAAC;WACjC;AACT,eAAa,MAAM;;;AAIrB,MAAa,8BACZ;;;;;AAMD,SAAgB,0BAAoC;AACnD,QAAO,SAAS,UAAU,qBAAqB,6BAA6B,IAAI"}