emdash 1.1.0 → 1.3.0

package/src/astro/routes/api/import/wordpress-plugin/execute.ts

@@ -24,7 +24,7 @@ import { isParseError, parseBody } from "#api/parse.js";
 import { wpPluginExecuteBody } from "#api/schemas.js";
 import { BylineRepository } from "#db/repositories/byline.js";
 import { importCommentsFromPlugin } from "#import/comments.js";
-import { getSource } from "#import/index.js";
+import { getSource, SiteChallengeError } from "#import/index.js";
 import { importMenusFromPlugin } from "#import/menus.js";
 import { importSiteSettings, parseSiteSettingsFromPlugin } from "#import/settings.js";
 import {
@@ -195,6 +195,7 @@ export const POST: APIRoute = async ({ request, locals }) => {
 			taxonomyPlan = built.plan;
 			taxonomyDefsCreated = built.defsCreated;
 		} catch (e) {
+			if (e instanceof SiteChallengeError) throw e;
 			console.warn("[WP Plugin Import] Taxonomy pre-import failed:", e);
 		}
 
@@ -240,15 +241,17 @@ export const POST: APIRoute = async ({ request, locals }) => {
 				}
 			}
 		} catch (e) {
+			if (e instanceof SiteChallengeError) throw e;
 			console.warn("[WP Plugin Import] Comment import failed:", e);
 		}
 
 		// Apply site identity (title, tagline, logo, favicon) from the source
 		// site's options, replacing the starter template's seed placeholders.
-		// Non-fatal: content is already imported at this point.
+		// Non-fatal unless bot protection challenges the request.
 		try {
 			result.siteSettings = await applySiteSettings(emdash, body.url, body.token, config);
 		} catch (e) {
+			if (e instanceof SiteChallengeError) throw e;
 			console.warn("[WP Plugin Import] Site settings import failed:", e);
 		}
 
@@ -263,6 +266,9 @@ export const POST: APIRoute = async ({ request, locals }) => {
 			result,
 		});
 	} catch (error) {
+		if (error instanceof SiteChallengeError) {
+			return apiError("WP_SITE_CHALLENGE", error.message, 502);
+		}
 		return handleError(error, "Failed to import from WordPress", "WP_PLUGIN_IMPORT_ERROR");
 	}
 };
@@ -292,6 +298,7 @@ async function importMenusInto(
 			}
 		}
 	} catch (e) {
+		if (e instanceof SiteChallengeError) throw e;
 		console.warn("[WP Plugin Import] Menu import failed:", e);
 	}
 }
@@ -351,6 +358,7 @@ async function runContentChunk(
 			taxonomyPlan = await loadTaxonomyPlanFromDb(emdash.db);
 		}
 	} catch (e) {
+		if (e instanceof SiteChallengeError) throw e;
 		console.warn("[WP Plugin Import] Taxonomy pre-import failed:", e);
 	}
 
@@ -467,6 +475,7 @@ async function runFinalizePhase(
 	try {
 		result.siteSettings = await applySiteSettings(emdash, body.url, body.token, config);
 	} catch (e) {
+		if (e instanceof SiteChallengeError) throw e;
 		console.warn("[WP Plugin Import] Site settings import failed:", e);
 	}
 
@@ -568,6 +577,27 @@ export function coerceToFieldType(value: unknown, fieldType: string): unknown {
 	}
 }
 
+/**
+ * ACF relationship, post object, user and taxonomy fields set to the object
+ * return format give WP_Post, WP_User and WP_Term objects, and a user field's
+ * default array format gives the user's email and profile. Exporters that
+ * pass them through send a related post's content and password or a user's
+ * password hash. Keep only the IDs.
+ */
+function reduceWordPressObjects(value: unknown): unknown {
+	if (Array.isArray(value)) return value.map(reduceWordPressObjects);
+	if (typeof value !== "object" || value === null) return value;
+	// eslint-disable-next-line typescript/no-unsafe-type-assertion -- narrowed to non-null object above
+	const record = value as Record<string, unknown>;
+	if ("ID" in record && ("post_type" in record || "cap_key" in record || "user_email" in record)) {
+		return record.ID;
+	}
+	if ("term_id" in record && "taxonomy" in record) return record.term_id;
+	return Object.fromEntries(
+		Object.entries(record).map(([key, entry]) => [key, reduceWordPressObjects(entry)]),
+	);
+}
+
 /**
  * Pull the per-post SEO title/description out of the Yoast / Rank Math
  * blobs the plugin source stashes in `item.meta`. Empty strings mean "not
@@ -833,9 +863,8 @@ export async function importContent(
 
 		const mapping = config.postTypeMappings[item.postType];
 
-		// Skip if not mapped or disabled
+		// Unmapped or disabled post types are not part of the import.
 		if (!mapping || !mapping.enabled) {
-			result.skipped++;
 			continue;
 		}
 
@@ -971,7 +1000,7 @@ export async function importContent(
 			const acf = item.meta?._acf;
 			if (typeof acf === "object" && acf !== null) {
 				for (const [key, value] of Object.entries(acf)) {
-					assignMetaValue(key, value);
+					assignMetaValue(key, reduceWordPressObjects(value));
 				}
 			}
 			if (item.meta) {
@@ -1068,6 +1097,21 @@ export async function importContent(
 				if (item.translationGroup && !translationGroupMap.has(item.translationGroup) && createdId) {
 					translationGroupMap.set(item.translationGroup, createdId);
 				}
+
+				if (
+					createdId &&
+					item.status === "future" &&
+					createdAt &&
+					Date.parse(createdAt) > Date.now()
+				) {
+					const scheduled = await emdash.handleContentSchedule(collection, createdId, createdAt);
+					if (!scheduled.success) {
+						result.errors.push({
+							title: item.title || "Untitled",
+							error: `Imported as draft but failed to schedule: ${scheduled.error?.message ?? "Unknown error"}`,
+						});
+					}
+				}
 			} else {
 				result.errors.push({
 					title: item.title || "Untitled",

package/src/astro/routes/api/manifest.ts

@@ -33,6 +33,14 @@ export const GET: APIRoute = async ({ locals }) => {
 
 		// Determine auth mode from config
 		const authMode = getAuthMode(emdash?.config);
+		const providerManagedName =
+			authMode.type === "external" &&
+			!(
+				typeof authMode.config === "object" &&
+				authMode.config !== null &&
+				"syncName" in authMode.config &&
+				authMode.config.syncName === false
+			);
 
 		// Read admin branding from the per-request config plumbed through middleware
 		// (same source admin.astro reads from). Reading from a build-time global
@@ -88,6 +96,7 @@ export const GET: APIRoute = async ({ locals }) => {
 					...emdashManifest,
 					timezone: siteTimezone,
 					authMode: authMode.type === "external" ? authMode.providerType : "passkey",
+					providerManagedName,
 					signupEnabled,
 					admin: adminBranding,
 				}
@@ -100,6 +109,7 @@ export const GET: APIRoute = async ({ locals }) => {
 					timezone: siteTimezone,
 					taxonomies: [],
 					authMode: "passkey",
+					providerManagedName,
 					signupEnabled,
 					admin: adminBranding,
 				};

package/src/astro/routes/api/media/[id]/confirm.ts

@@ -19,6 +19,8 @@ import { enrichImageMetadata } from "#media/enrich.js";
 import type { MediaItem } from "#types";
 import { computeContentHash, MAX_CONTENT_HASH_BYTES } from "#utils/hash.js";
 
+import { after } from "../../../../../after.js";
+
 export const prerender = false;
 
 /**
@@ -244,6 +246,23 @@ export const POST: APIRoute = async ({ params, request, locals }) => {
 		// Add URL to the response (relative URL for portability)
 		const itemWithUrl = addUrlToMedia(item);
 
+		if (emdash.hooks?.hasHooks("media:afterUpload")) {
+			after(async () => {
+				try {
+					await emdash.hooks.runMediaAfterUpload({
+						id: itemWithUrl.id,
+						filename: itemWithUrl.filename,
+						mimeType: itemWithUrl.mimeType,
+						size: itemWithUrl.size,
+						url: itemWithUrl.url,
+						createdAt: itemWithUrl.createdAt,
+					});
+				} catch (error) {
+					console.error("[media] afterUpload hook failed:", error);
+				}
+			});
+		}
+
 		return apiSuccess({ item: itemWithUrl });
 	} catch (error) {
 		return handleError(error, "Failed to confirm upload", "CONFIRM_ERROR");

package/src/astro/routes/api/media/file/[...key].ts

@@ -1,14 +1,20 @@
 /**
  * Serve uploaded media files
  *
- * GET /_emdash/api/media/file/:key - Serve file from storage
+ * GET /_emdash/api/media/file/:key - Serve file from storage, or a byte range of it
  */
 
 import type { APIRoute } from "astro";
 
 import { apiError, handleError } from "#api/error.js";
-import { IMMUTABLE_IMAGE_CACHE, MUTABLE_MEDIA_CACHE_CONTROL } from "#media/image-endpoint.js";
-
+import {
+	IMMUTABLE_IMAGE_CACHE,
+	MUTABLE_MEDIA_CACHE_CONTROL,
+	isNotModified,
+	validatorHeaders,
+} from "#media/image-endpoint.js";
+
+import { parseRangeHeader, resolveByteRange } from "../../../../../storage/range.js";
 import { isRefusedStorageKey } from "../../../../../transfer/staging/keys.js";
 
 export const prerender = false;
@@ -55,7 +61,7 @@ const SAFE_INLINE_TYPES = new Set([
 	"audio/ogg",
 ]);
 
-export const GET: APIRoute = async ({ params, locals }) => {
+export const GET: APIRoute = async ({ params, locals, request, cache }) => {
 	const { key } = params;
 	const { emdash } = locals;
 
@@ -75,24 +81,55 @@ export const GET: APIRoute = async ({ params, locals }) => {
 	}
 
 	try {
-		const result = await emdash.storage.download(key);
+		// Range requests that include If-Range are served as whole-file responses
+		// because this route does not compare If-Range validators.
+		const range = request.headers.has("If-Range")
+			? null
+			: parseRangeHeader(request.headers.get("Range"));
+		// The route cache keys entries by URL alone, so a cached partial
+		// response would be served to requests for the whole file.
+		if (range && cache?.enabled) cache.set(false);
+		const result = range
+			? await emdash.storage.download(key, { range })
+			: await emdash.storage.download(key);
+		const served = range ? result.range : undefined;
+
+		// Adapters return the whole file for a range they don't serve, including
+		// one past the end. A size of 0 may be unknown, so it rules nothing out.
+		if (range && !served && result.size > 0 && !resolveByteRange(range, result.size)) {
+			await result.body.cancel().catch(() => undefined);
+			const response = apiError("RANGE_NOT_SATISFIABLE", "Range not satisfiable", 416);
+			response.headers.set("Content-Range", `bytes */${result.size}`);
+			return response;
+		}
+
+		const cacheControl = result.contentType.startsWith("image/")
+			? MUTABLE_MEDIA_CACHE_CONTROL
+			: IMMUTABLE_IMAGE_CACHE;
+
+		if (isNotModified(request, result.size, result.lastModified)) {
+			return new Response(null, {
+				status: 304,
+				headers: {
+					"Content-Type": result.contentType,
+					"Cache-Control": cacheControl,
+					...validatorHeaders(result.size, result.lastModified),
+				},
+			});
+		}
 
 		const headers: Record<string, string> = {
 			"Content-Type": result.contentType,
-			"Cache-Control": result.contentType.startsWith("image/")
-				? MUTABLE_MEDIA_CACHE_CONTROL
-				: IMMUTABLE_IMAGE_CACHE,
+			"Cache-Control": cacheControl,
+			"Accept-Ranges": "bytes",
 			"X-Content-Type-Options": "nosniff",
 			// Sandbox CSP on all user-uploaded content — prevents script execution
 			// even for SVGs navigated to directly or content types that support scripting.
 			"Content-Security-Policy":
 				"sandbox; default-src 'none'; img-src 'self'; style-src 'unsafe-inline'",
+			...validatorHeaders(result.size, result.lastModified),
 		};
 
-		if (result.size) {
-			headers["Content-Length"] = String(result.size);
-		}
-
 		// Safe image/media types can render inline; everything else (SVG, PDF,
 		// HTML, JS, etc.) must be downloaded to prevent stored XSS.
 		if (SAFE_INLINE_TYPES.has(result.contentType)) {
@@ -101,6 +138,17 @@ export const GET: APIRoute = async ({ params, locals }) => {
 			headers["Content-Disposition"] = "attachment";
 		}
 
+		if (served) {
+			const end = served.offset + served.length - 1;
+			headers["Content-Range"] = `bytes ${served.offset}-${end}/${result.size}`;
+			headers["Content-Length"] = String(served.length);
+			return new Response(result.body, { status: 206, headers });
+		}
+
+		if (result.size) {
+			headers["Content-Length"] = String(result.size);
+		}
+
 		return new Response(result.body, { status: 200, headers });
 	} catch (error) {
 		// Check if it's a "not found" error

package/src/astro/routes/api/media/upload-url.ts

@@ -73,12 +73,36 @@ export const POST: APIRoute = async ({ request, locals }) => {
 				500,
 			);
 		}
-		const body = await parseBody(request, mediaUploadUrlBody(maxSize));
+		const uploadSchema = mediaUploadUrlBody(maxSize);
+		const body = await parseBody(request, uploadSchema);
 		if (isParseError(body)) return body;
 
+		let beforeUploadFile = {
+			name: body.filename,
+			type: body.contentType,
+			size: body.size,
+		};
+		if (emdash.hooks?.hasHooks("media:beforeUpload")) {
+			const hookResult = await emdash.hooks.runMediaBeforeUpload(beforeUploadFile);
+			const metadata = uploadSchema.safeParse({
+				filename: hookResult.file?.name,
+				contentType: hookResult.file?.type,
+				size: body.size,
+			});
+			if (!metadata.success) {
+				return apiError("VALIDATION_ERROR", "Invalid media:beforeUpload result", 400);
+			}
+			// Hooks change metadata, but the client still uploads the original bytes.
+			beforeUploadFile = {
+				name: metadata.data.filename,
+				type: metadata.data.contentType,
+				size: body.size,
+			};
+		}
+
 		// Clients that don't recognise an extension may send an empty or generic
 		// content type; fall back to the filename extension before allowlisting.
-		const mimeType = resolveUploadMimeType(body.filename, body.contentType);
+		const mimeType = resolveUploadMimeType(beforeUploadFile.name, beforeUploadFile.type);
 		const normalizedContentType = normalizeMime(mimeType);
 
 		// Validate content type (field-aware widening)
@@ -107,8 +131,8 @@ export const POST: APIRoute = async ({ request, locals }) => {
 			}
 		}
 		const filename = body.ensureUniqueFilename
-			? await repo.findAvailableFilename(body.filename)
-			: body.filename;
+			? await repo.findAvailableFilename(beforeUploadFile.name)
+			: beforeUploadFile.name;
 
 		// Generate unique storage key
 		const id = ulid();

package/src/astro/routes/api/media.ts

@@ -22,6 +22,7 @@ import {
 	mediaListQuery,
 	mediaUploadDeduplicateForm,
 	mediaUploadEnsureUniqueFilenameForm,
+	mediaUploadMetadataForm,
 } from "#api/schemas.js";
 import { MediaRepository } from "#db/repositories/media.js";
 import { enrichImageMetadata } from "#media/enrich.js";
@@ -178,6 +179,18 @@ export const POST: APIRoute = async ({ request, locals }) => {
 				folderId = folderResult.data;
 			}
 		}
+		const metadataResult = mediaUploadMetadataForm.safeParse({
+			alt: formData.get("alt") ?? undefined,
+			caption: formData.get("caption") ?? undefined,
+		});
+		if (!metadataResult.success) {
+			return apiError("VALIDATION_ERROR", "Invalid request data", 400, {
+				issues: metadataResult.error.issues.map((issue) => ({
+					path: issue.path.join("."),
+					message: issue.message,
+				})),
+			});
+		}
 
 		// Validate file type — widen the allowlist when a field-specific list is configured
 		const fieldIdEntry = formData.get("fieldId");
@@ -258,6 +271,8 @@ export const POST: APIRoute = async ({ request, locals }) => {
 			filename,
 			mimeType,
 			size: file.size,
+			alt: metadataResult.data.alt,
+			caption: metadataResult.data.caption,
 			// Client dimensions win over server header dimensions: the browser's
 			// naturalWidth/Height apply EXIF orientation, while image-size reports
 			// raw (pre-orientation) header dims — swapped for 90°/270° JPEGs.

package/src/astro/routes/api/menus/[name]/items/[id].ts

@@ -13,6 +13,7 @@ import { handleMenuItemDelete, handleMenuItemUpdate } from "#api/handlers/menus.
 import { isParseError, parseBody, parseQuery } from "#api/parse.js";
 import { localeFilterQuery, updateMenuItemBody } from "#api/schemas.js";
 import { menuTag } from "#cache/chrome-tags.js";
+import { invalidateRouteCache } from "#cache/route-cache.js";
 
 export const prerender = false;
 
@@ -39,7 +40,7 @@ export const PUT: APIRoute = async ({ params, request, locals, cache }) => {
 			locale: localeQ.locale,
 		});
 		if (!result.success) return unwrapResult(result);
-		if (cache?.enabled) await cache.invalidate({ tags: [menuTag(name)] });
+		await invalidateRouteCache(cache, [menuTag(name)]);
 		return unwrapResult(result);
 	} catch (error) {
 		return handleError(error, "Failed to update menu item", "MENU_ITEM_UPDATE_ERROR");
@@ -66,7 +67,7 @@ export const DELETE: APIRoute = async ({ params, request, locals, cache }) => {
 			locale: localeQ.locale,
 		});
 		if (!result.success) return unwrapResult(result);
-		if (cache?.enabled) await cache.invalidate({ tags: [menuTag(name)] });
+		await invalidateRouteCache(cache, [menuTag(name)]);
 		return unwrapResult(result);
 	} catch (error) {
 		return handleError(error, "Failed to delete menu item", "MENU_ITEM_DELETE_ERROR");

package/src/astro/routes/api/menus/[name]/items.ts

@@ -12,6 +12,7 @@ import { handleMenuItemCreate } from "#api/handlers/menus.js";
 import { isParseError, parseBody, parseQuery } from "#api/parse.js";
 import { createMenuItemBody, localeFilterQuery } from "#api/schemas.js";
 import { menuTag } from "#cache/chrome-tags.js";
+import { invalidateRouteCache } from "#cache/route-cache.js";
 
 export const prerender = false;
 
@@ -31,7 +32,7 @@ export const POST: APIRoute = async ({ params, request, locals, cache }) => {
 
 		const result = await handleMenuItemCreate(emdash.db, name, body, { locale: localeQ.locale });
 		if (!result.success) return unwrapResult(result, 201);
-		if (cache?.enabled) await cache.invalidate({ tags: [menuTag(name)] });
+		await invalidateRouteCache(cache, [menuTag(name)]);
 		return unwrapResult(result, 201);
 	} catch (error) {
 		return handleError(error, "Failed to create menu item", "MENU_ITEM_CREATE_ERROR");

package/src/astro/routes/api/menus/[name]/reorder.ts

@@ -12,6 +12,7 @@ import { handleMenuItemReorder } from "#api/handlers/menus.js";
 import { isParseError, parseBody, parseQuery } from "#api/parse.js";
 import { localeFilterQuery, reorderMenuItemsBody } from "#api/schemas.js";
 import { menuTag } from "#cache/chrome-tags.js";
+import { invalidateRouteCache } from "#cache/route-cache.js";
 
 export const prerender = false;
 
@@ -33,7 +34,7 @@ export const POST: APIRoute = async ({ params, request, locals, cache }) => {
 			locale: localeQ.locale,
 		});
 		if (!result.success) return unwrapResult(result);
-		if (cache?.enabled) await cache.invalidate({ tags: [menuTag(name)] });
+		await invalidateRouteCache(cache, [menuTag(name)]);
 		return unwrapResult(result);
 	} catch (error) {
 		return handleError(error, "Failed to reorder menu items", "MENU_REORDER_ERROR");

package/src/astro/routes/api/menus/[name]/translations.ts

@@ -14,6 +14,7 @@ import { handleMenuCreate, handleMenuGet, handleMenuTranslations } from "#api/ha
 import { isParseError, parseBody, parseQuery } from "#api/parse.js";
 import { localeFilterQuery } from "#api/schemas.js";
 import { menuTag } from "#cache/chrome-tags.js";
+import { invalidateRouteCache } from "#cache/route-cache.js";
 
 export const prerender = false;
 
@@ -77,7 +78,7 @@ export const POST: APIRoute = async ({ params, request, locals, cache }) => {
 			translationOf: source.data.id,
 		});
 		if (!result.success) return unwrapResult(result, 201);
-		if (cache?.enabled) await cache.invalidate({ tags: [menuTag(name)] });
+		await invalidateRouteCache(cache, [menuTag(name)]);
 		return unwrapResult(result, 201);
 	} catch (error) {
 		return handleError(error, "Failed to create menu translation", "MENU_TRANSLATION_CREATE_ERROR");

package/src/astro/routes/api/menus/[name].ts

@@ -14,6 +14,7 @@ import { handleMenuDelete, handleMenuGet, handleMenuUpdate } from "#api/handlers
 import { isParseError, parseBody, parseQuery } from "#api/parse.js";
 import { localeFilterQuery, updateMenuBody } from "#api/schemas.js";
 import { menuTag } from "#cache/chrome-tags.js";
+import { invalidateRouteCache } from "#cache/route-cache.js";
 
 export const prerender = false;
 
@@ -51,7 +52,7 @@ export const PUT: APIRoute = async ({ params, request, locals, cache }) => {
 
 		const result = await handleMenuUpdate(emdash.db, name, { ...body, locale: query.locale });
 		if (!result.success) return unwrapResult(result);
-		if (cache?.enabled) await cache.invalidate({ tags: [menuTag(name)] });
+		await invalidateRouteCache(cache, [menuTag(name)]);
 		return unwrapResult(result);
 	} catch (error) {
 		return handleError(error, "Failed to update menu", "MENU_UPDATE_ERROR");
@@ -71,7 +72,7 @@ export const DELETE: APIRoute = async ({ params, request, locals, cache }) => {
 	try {
 		const result = await handleMenuDelete(emdash.db, name, { locale: query.locale });
 		if (!result.success) return unwrapResult(result);
-		if (cache?.enabled) await cache.invalidate({ tags: [menuTag(name)] });
+		await invalidateRouteCache(cache, [menuTag(name)]);
 		return unwrapResult(result);
 	} catch (error) {
 		return handleError(error, "Failed to delete menu", "MENU_DELETE_ERROR");

package/src/astro/routes/api/menus/index.ts

@@ -13,6 +13,7 @@ import { handleMenuCreate, handleMenuList } from "#api/handlers/menus.js";
 import { isParseError, parseBody, parseQuery } from "#api/parse.js";
 import { createMenuBody, localeFilterQuery } from "#api/schemas.js";
 import { menuTag } from "#cache/chrome-tags.js";
+import { invalidateRouteCache } from "#cache/route-cache.js";
 
 export const prerender = false;
 
@@ -45,7 +46,7 @@ export const POST: APIRoute = async ({ request, locals, cache }) => {
 
 		const result = await handleMenuCreate(emdash.db, body);
 		if (!result.success) return unwrapResult(result, 201);
-		if (cache?.enabled) await cache.invalidate({ tags: [menuTag(result.data.name)] });
+		await invalidateRouteCache(cache, [menuTag(result.data.name)]);
 		return unwrapResult(result, 201);
 	} catch (error) {
 		return handleError(error, "Failed to create menu", "MENU_CREATE_ERROR");

package/src/astro/routes/api/redirects/[id].ts

@@ -17,6 +17,7 @@ import {
 } from "#api/handlers/redirects.js";
 import { isParseError, parseBody } from "#api/parse.js";
 import { updateRedirectBody } from "#api/schemas.js";
+import { invalidateRedirectSourcePaths } from "#cache/redirect-paths.js";
 
 export const prerender = false;
 
@@ -42,7 +43,7 @@ export const GET: APIRoute = async ({ params, locals }) => {
 	}
 };
 
-export const PUT: APIRoute = async ({ params, request, locals }) => {
+export const PUT: APIRoute = async ({ params, request, locals, cache }) => {
 	const { emdash, user } = locals;
 	const dbErr = requireDb(emdash?.db);
 	if (dbErr) return dbErr;
@@ -57,17 +58,23 @@ export const PUT: APIRoute = async ({ params, request, locals }) => {
 	}
 
 	try {
+		const before = await handleRedirectGet(db, id);
+		if (!before.success) return unwrapResult(before);
+
 		const body = await parseBody(request, updateRedirectBody);
 		if (isParseError(body)) return body;
 
 		const result = await handleRedirectUpdate(db, id, body);
+		if (result.success) {
+			await invalidateRedirectSourcePaths(cache, before.data.source, result.data.source);
+		}
 		return unwrapResult(result);
 	} catch (error) {
 		return handleError(error, "Failed to update redirect", "REDIRECT_UPDATE_ERROR");
 	}
 };
 
-export const DELETE: APIRoute = async ({ params, locals }) => {
+export const DELETE: APIRoute = async ({ params, locals, cache }) => {
 	const { emdash, user } = locals;
 	const dbErr = requireDb(emdash?.db);
 	if (dbErr) return dbErr;
@@ -82,7 +89,13 @@ export const DELETE: APIRoute = async ({ params, locals }) => {
 	}
 
 	try {
+		const before = await handleRedirectGet(db, id);
+		if (!before.success) return unwrapResult(before);
+
 		const result = await handleRedirectDelete(db, id);
+		if (result.success) {
+			await invalidateRedirectSourcePaths(cache, before.data.source);
+		}
 		return unwrapResult(result);
 	} catch (error) {
 		return handleError(error, "Failed to delete redirect", "REDIRECT_DELETE_ERROR");

package/src/astro/routes/api/redirects/index.ts

@@ -12,6 +12,7 @@ import { handleError, requireDb, unwrapResult } from "#api/error.js";
 import { handleRedirectCreate, handleRedirectList } from "#api/handlers/redirects.js";
 import { isParseError, parseBody, parseQuery } from "#api/parse.js";
 import { createRedirectBody, redirectsListQuery } from "#api/schemas.js";
+import { invalidateRedirectSourcePaths } from "#cache/redirect-paths.js";
 
 export const prerender = false;
 
@@ -35,7 +36,7 @@ export const GET: APIRoute = async ({ url, locals }) => {
 	}
 };
 
-export const POST: APIRoute = async ({ request, locals }) => {
+export const POST: APIRoute = async ({ request, locals, cache }) => {
 	const { emdash, user } = locals;
 	const dbErr = requireDb(emdash?.db);
 	if (dbErr) return dbErr;
@@ -49,6 +50,9 @@ export const POST: APIRoute = async ({ request, locals }) => {
 		if (isParseError(body)) return body;
 
 		const result = await handleRedirectCreate(db, body);
+		if (result.success) {
+			await invalidateRedirectSourcePaths(cache, result.data.source);
+		}
 		return unwrapResult(result, 201);
 	} catch (error) {
 		return handleError(error, "Failed to create redirect", "REDIRECT_CREATE_ERROR");

package/src/astro/routes/api/schema/index.ts

@@ -57,7 +57,7 @@ export const GET: APIRoute = async ({ request, locals }) => {
 			const header = `// Generated by EmDash CLI
 // Do not edit manually - run \`emdash types\` to regenerate
 
-import type { PortableTextBlock } from "emdash";
+import type { BylineSummary, ContentBylineCredit, TaxonomyTerm, PortableTextBlock } from "emdash";
 
 `;