emdash 1.2.0 → 1.3.1

package/src/api/handlers/taxonomies.ts

@@ -24,7 +24,8 @@ import {
 import { TaxonomyRepository, type SiblingPosition } from "../../database/repositories/taxonomy.js";
 import { withTransaction } from "../../database/transaction.js";
 import type { Database, TaxonomyDefTable } from "../../database/types.js";
-import { getI18nConfig, resolveConfiguredLocale } from "../../i18n/config.js";
+import { getI18nConfig, getLocaleChainRank, resolveConfiguredLocale } from "../../i18n/config.js";
+import { localeMatches } from "../../i18n/query.js";
 import { invalidateTaxonomyDefsCache, invalidateTermCache } from "../../taxonomies/index.js";
 import { fetchVisibleTermCounts } from "../../taxonomies/term-counts.js";
 import type { ApiResult } from "../types.js";
@@ -181,9 +182,11 @@ async function requireTaxonomyDef(
 	name: string,
 	locale?: string,
 ): Promise<TaxonomyDefLookup> {
-	let query = selectTaxonomyDefs(db).where("d.name", "=", name);
-	if (locale !== undefined) query = query.where("d.locale", "=", locale);
-	const def = await query.orderBy("d.locale", "asc").orderBy("d.id", "asc").executeTakeFirst();
+	const def = await selectTaxonomyDefs(db, locale)
+		.where("d.name", "=", name)
+		.orderBy("d.locale", "asc")
+		.orderBy("d.id", "asc")
+		.executeTakeFirst();
 	return def ? { success: true, def } : taxonomyDefNotFound(name, locale);
 }
 
@@ -196,16 +199,19 @@ async function requireTaxonomyDefWithFallback(
 	name: string,
 	locale?: string,
 ): Promise<TaxonomyDefLookup> {
-	const defs = await selectTaxonomyDefs(db)
-		.where("d.name", "=", name)
-		.orderBy("d.locale", "asc")
-		.orderBy("d.id", "asc")
-		.execute();
+	const defs = await selectTaxonomyDefs(db).where("d.name", "=", name).execute();
 	const defaultLocale = getI18nConfig()?.defaultLocale;
-	const def =
-		(locale ? defs.find((candidate) => candidate.locale === locale) : undefined) ??
-		(defaultLocale ? defs.find((candidate) => candidate.locale === defaultLocale) : undefined) ??
-		defs[0];
+	const chain = locale
+		? [locale, ...(defaultLocale && defaultLocale !== locale ? [defaultLocale] : [])]
+		: defaultLocale
+			? [defaultLocale]
+			: [];
+	const def = defs.toSorted(
+		(a, b) =>
+			getLocaleChainRank(a.locale, chain) - getLocaleChainRank(b.locale, chain) ||
+			a.locale.localeCompare(b.locale) ||
+			a.id.localeCompare(b.id),
+	)[0];
 	return def ? { success: true, def } : taxonomyDefNotFound(name, locale);
 }
 
@@ -298,8 +304,7 @@ export async function handleTaxonomyList(
 ): Promise<ApiResult<TaxonomyListResponse>> {
 	try {
 		const locale = options.locale ? resolveConfiguredLocale(options.locale) : undefined;
-		let query = selectTaxonomyDefs(db);
-		if (locale !== undefined) query = query.where("d.locale", "=", locale);
+		const query = selectTaxonomyDefs(db, locale);
 		const [rows, collectionRows] = await Promise.all([
 			query.execute(),
 			db.selectFrom("_emdash_collections").select("slug").execute(),
@@ -418,7 +423,7 @@ export async function handleTaxonomyCreate(
 			.selectFrom("_emdash_taxonomy_defs")
 			.select("id")
 			.where("name", "=", input.name)
-			.where("locale", "=", locale)
+			.where(localeMatches("locale", locale))
 			.executeTakeFirst();
 		if (existing) {
 			return {
@@ -1019,7 +1024,12 @@ export async function handleTermCreate(
 			}
 			selfGroup = source.translationGroup ?? source.id;
 			const translations = await repo.findTranslations(selfGroup);
-			if (translations.some((translation) => translation.locale === locale)) {
+			if (
+				translations.some(
+					(translation) =>
+						resolveConfiguredLocale(translation.locale) === resolveConfiguredLocale(locale),
+				)
+			) {
 				return {
 					success: false,
 					error: {

package/src/api/schemas/settings.ts

@@ -29,6 +29,7 @@ const seoSettingsInput = z.object({
 	titleSeparator: z.string().max(10).optional(),
 	defaultOgImage: mediaReferenceInput.nullable().optional(),
 	robotsTxt: z.string().max(5000).optional(),
+	disallowAiTraining: z.boolean().optional(),
 	googleVerification: z.string().max(100).optional(),
 	bingVerification: z.string().max(100).optional(),
 });
@@ -75,6 +76,7 @@ const seoSettingsResponse = z.object({
 	titleSeparator: z.string().max(10).optional(),
 	defaultOgImage: mediaReferenceResponse.optional(),
 	robotsTxt: z.string().max(5000).optional(),
+	disallowAiTraining: z.boolean().optional(),
 	googleVerification: z.string().max(100).optional(),
 	bingVerification: z.string().max(100).optional(),
 });

package/src/api/types.ts

@@ -76,6 +76,8 @@ export interface ManifestFieldDescriptor extends FieldDescriptor {
 	blockTypeFingerprint?: string;
 	/** Value a new entry starts with in the admin editor. */
 	defaultValue?: unknown;
+	/** Set on `integer` fields, which share the `number` kind. */
+	integer?: boolean;
 }
 
 export interface FieldDescriptor {

package/src/astro/image-endpoint.ts

@@ -82,15 +82,26 @@ export const GET: APIRoute = async (ctx) => {
 	const service = await getConfiguredImageService();
 	if (!("transform" in service)) return genericGET(ctx);
 
+	// An unread download retains its storage connection even for a bodyless response.
+	let unusedBody: ReadableStream<Uint8Array> | undefined;
 	try {
 		const source = await storage.download(key);
+		unusedBody = source.body;
 
 		// Only raster images are transformable; serve anything else unchanged.
 		if (!source.contentType.startsWith("image/")) {
 			if (isNotModified(ctx.request, source.size, source.lastModified)) {
 				return notModifiedResponse(source.contentType, source.size, source.lastModified);
 			}
-			return streamOriginal(source.body, source.contentType, source.size, source.lastModified);
+			const response = streamOriginal(
+				source.body,
+				source.contentType,
+				source.size,
+				source.lastModified,
+			);
+			if (ctx.request.method === "HEAD") return new Response(null, response);
+			unusedBody = undefined;
+			return response;
 		}
 
 		const transform = await service.parseURL(url, imageConfig);
@@ -98,7 +109,15 @@ export const GET: APIRoute = async (ctx) => {
 			if (isNotModified(ctx.request, source.size, source.lastModified)) {
 				return notModifiedResponse(source.contentType, source.size, source.lastModified);
 			}
-			return streamOriginal(source.body, source.contentType, source.size, source.lastModified);
+			const response = streamOriginal(
+				source.body,
+				source.contentType,
+				source.size,
+				source.lastModified,
+			);
+			if (ctx.request.method === "HEAD") return new Response(null, response);
+			unusedBody = undefined;
+			return response;
 		}
 
 		const fingerprint = getTransformFingerprint(url.searchParams);
@@ -122,5 +141,7 @@ export const GET: APIRoute = async (ctx) => {
 		if (isNotFound(error)) return new Response("Not Found", { status: 404 });
 		console.error("[emdash] image transform failed:", error);
 		return new Response("Internal Server Error", { status: 500 });
+	} finally {
+		if (unusedBody && !unusedBody.locked) await unusedBody.cancel().catch(() => undefined);
 	}
 };

package/src/astro/integration/dev-scheduler-bridge.ts

@@ -0,0 +1,91 @@
+import type { Server } from "node:http";
+import { request as requestHttps } from "node:https";
+
+import type { AstroIntegrationLogger } from "astro";
+
+const DEFAULT_INTERVAL_MS = 60_000;
+
+interface DevServer {
+	httpServer: Pick<Server, "once"> | null;
+	resolvedUrls: { local: string[]; network: string[] } | null;
+}
+
+interface SchedulerOptions {
+	intervalMs?: number;
+	fetch?: typeof fetch;
+}
+
+function postMaintenance(url: URL): Promise<{ ok: boolean; status: number }> {
+	if (url.protocol !== "https:") return fetch(url, { method: "POST" });
+	// Dev servers commonly run on self-signed or host-mismatch certificates
+	// that Node would reject by default. This request stays inside the local
+	// dev server and the route is dev-only, so accept the certificate to keep
+	// maintenance running without requiring a matching SAN/CN or trusted CA.
+	return new Promise((resolve, reject) => {
+		const request = requestHttps(
+			url,
+			{ method: "POST", rejectUnauthorized: false, agent: false },
+			(response) => {
+				const status = response.statusCode ?? 500;
+				response.once("error", reject);
+				response.once("end", () => resolve({ ok: status >= 200 && status < 300, status }));
+				response.resume();
+			},
+		);
+		request.once("error", reject);
+		request.end();
+	});
+}
+
+export function startDevSchedulerBridge(
+	server: DevServer,
+	logger: Pick<AstroIntegrationLogger, "warn">,
+	options: SchedulerOptions = {},
+): void {
+	const httpServer = server.httpServer;
+	if (!httpServer) return;
+
+	const intervalMs = options.intervalMs ?? DEFAULT_INTERVAL_MS;
+	let stopped = false;
+	let timer: ReturnType<typeof setTimeout> | undefined;
+
+	const schedule = () => {
+		if (stopped) return;
+		timer = setTimeout(() => void run(), intervalMs);
+		if (typeof timer === "object" && "unref" in timer) timer.unref();
+	};
+
+	const run = async () => {
+		try {
+			const origin = server.resolvedUrls?.local[0] ?? server.resolvedUrls?.network[0];
+			if (!origin) {
+				logger.warn("Dev scheduler bridge could not resolve the dev server origin.");
+				return;
+			}
+
+			const base = origin.endsWith("/") ? origin : `${origin}/`;
+			const url = new URL("_emdash/api/dev/scheduled-tasks", base);
+			const response = options.fetch
+				? await options.fetch(url, { method: "POST" })
+				: await postMaintenance(url);
+			if (!response.ok) {
+				logger.warn(
+					`Dev scheduler bridge request failed with status ${response.status}. ` +
+						"Verify that EmDash's dev maintenance route is available.",
+				);
+			}
+		} catch (error) {
+			logger.warn(
+				`Dev scheduler bridge request failed: ${error instanceof Error ? error.message : String(error)}`,
+			);
+		} finally {
+			schedule();
+		}
+	};
+
+	httpServer.once("listening", schedule);
+	httpServer.once("close", () => {
+		stopped = true;
+		if (timer !== undefined) clearTimeout(timer);
+	});
+}

package/src/astro/integration/index.ts

@@ -10,7 +10,9 @@
  * to avoid bundling Node.js-only code into the production build.
  */
 
+import { existsSync, readFileSync } from "node:fs";
 import { createRequire } from "node:module";
+import { dirname, join } from "node:path";
 import { fileURLToPath } from "node:url";
 
 import type { AstroIntegration, AstroIntegrationLogger, AstroIntegrationMiddleware } from "astro";
@@ -37,6 +39,7 @@ import { VERSION } from "../../version.js";
 import { local } from "../storage/adapters.js";
 import { readAdminLocaleManifest, resolveAdminLocales } from "./admin-locales.js";
 import { loadDevEnv } from "./dev-env.js";
+import { startDevSchedulerBridge } from "./dev-scheduler-bridge.js";
 import { createDebouncedTypegenRefresh, listenForDevTypegenRefresh } from "./dev-typegen.js";
 import { notoSans } from "./font-provider.js";
 import {
@@ -74,6 +77,39 @@ function resolveAstroVersion(): string | undefined {
 	}
 }
 
+/**
+ * `@emdash-cms/cloudflare` depends on the exact `emdash` version it was
+ * released with. A site that upgrades only one of the two installs a second
+ * copy of `emdash` for the adapter, so warn when the installed adapter's
+ * version differs from this one.
+ *
+ * @internal Exported for unit testing.
+ */
+export function adapterVersionMismatchWarning(
+	root: URL,
+	version: string = VERSION,
+): string | undefined {
+	if (version === "dev") return undefined;
+	for (let dir = fileURLToPath(root); dir !== dirname(dir); dir = dirname(dir)) {
+		const file = join(dir, "node_modules", "@emdash-cms", "cloudflare", "package.json");
+		if (!existsSync(file)) continue;
+		let pkg: { version?: unknown };
+		try {
+			pkg = JSON.parse(readFileSync(file, "utf8")) as { version?: unknown };
+		} catch {
+			return undefined;
+		}
+		if (typeof pkg.version !== "string" || pkg.version === version) return undefined;
+		return (
+			`@emdash-cms/cloudflare ${pkg.version} does not match emdash ${version}, ` +
+			`so the adapter runs against its own copy of emdash ${pkg.version}. ` +
+			`Install the same version of both packages, for example:\n\n` +
+			`  npm install emdash@${version} @emdash-cms/cloudflare@${version}`
+		);
+	}
+	return undefined;
+}
+
 /** Default storage: Local filesystem in .emdash directory */
 const DEFAULT_STORAGE = local({
 	directory: "./.emdash/uploads",
@@ -571,6 +607,7 @@ export function emdash(config: EmDashConfig = {}): AstroIntegration {
 	// Captured in astro:config:setup so the astro:server:setup hook can tell
 	// whether we're running `astro dev` (where the dev-bypass shortcut applies).
 	let astroCommand: "dev" | "build" | "preview" | "sync" | undefined;
+	let usesCloudflareAdapter = false;
 	let normalizedI18n: ReturnType<typeof normalizeAstroI18n> = null;
 	const migrationMetadata = createMigrationIntegrationMetadata(resolvedConfig.database);
 
@@ -586,6 +623,7 @@ export function emdash(config: EmDashConfig = {}): AstroIntegration {
 				command,
 			}) => {
 				astroCommand = command;
+				usesCloudflareAdapter = astroConfig.adapter?.name === "@astrojs/cloudflare";
 				normalizeRegistryConfig(registry, {
 					allowLocalhost: command === "dev" || command === "sync",
 				});
@@ -728,7 +766,10 @@ export function emdash(config: EmDashConfig = {}): AstroIntegration {
 					astroInjectRoute({ ...route, prerender: false });
 
 				// Inject all core routes
-				injectCoreRoutes(injectRoute, { srcDir: astroConfig.srcDir });
+				injectCoreRoutes(injectRoute, {
+					srcDir: astroConfig.srcDir,
+					cloudflareDevScheduler: command === "dev" && usesCloudflareAdapter,
+				});
 
 				// Inject routes from pluggable auth providers (authProviders config)
 				if (resolvedConfig.authProviders?.length) {
@@ -756,6 +797,8 @@ export function emdash(config: EmDashConfig = {}): AstroIntegration {
 			"astro:config:done": async ({ config: finalConfig, logger }) => {
 				const warning = missingReactIntegrationWarning(finalConfig.integrations);
 				if (warning) logger.warn(warning);
+				const adapterWarning = adapterVersionMismatchWarning(finalConfig.root);
+				if (adapterWarning) logger.warn(adapterWarning);
 				const sessionWarning = useExternalAuth
 					? undefined
 					: missingSessionDriverWarning(finalConfig.session);
@@ -784,6 +827,10 @@ export function emdash(config: EmDashConfig = {}): AstroIntegration {
 				await writeMigrationManifest(fileURLToPath(finalConfig.root), manifest);
 			},
 			"astro:server:setup": ({ server, logger }) => {
+				if (astroCommand === "dev" && usesCloudflareAdapter) {
+					startDevSchedulerBridge(server, logger);
+				}
+
 				// Print route info with absolute, clickable URLs once the server
 				// is listening. Only in `astro dev` -- the dev-bypass shortcut is
 				// dev-only and the port is unknown until now.

package/src/astro/integration/routes.ts

@@ -44,6 +44,7 @@ type InjectRoute = (route: { pattern: string; entrypoint: string }) => void;
 
 interface InjectCoreRoutesOptions {
 	srcDir?: URL;
+	cloudflareDevScheduler?: boolean;
 }
 
 const ROUTE_OVERRIDE_EXTENSIONS = [
@@ -1100,6 +1101,13 @@ export function injectCoreRoutes(
 		entrypoint: resolveRoute("api/dev/emails.ts"),
 	});
 
+	if (options.cloudflareDevScheduler) {
+		injectRoute({
+			pattern: "/_emdash/api/dev/scheduled-tasks",
+			entrypoint: resolveRoute("api/dev/scheduled-tasks.ts"),
+		});
+	}
+
 	// Current user endpoint (always available)
 	injectRoute({
 		pattern: "/_emdash/api/auth/me",

package/src/astro/integration/runtime.ts

@@ -322,7 +322,8 @@ export interface EmDashConfig {
 	 *     audience: "abc123...",
 	 *     roleMapping: {
 	 *       "Admins": 50,
-	 *       "Editors": 30,
+	 *       "Editors": 40, // Editor
+	 *       "Authors": 30, // Author
 	 *     },
 	 *   }),
 	 * })

package/src/astro/integration/virtual-modules.ts

@@ -528,30 +528,23 @@ export function generateBuildModule(buildTime: number): string {
  * Generates the scheduler virtual module.
  *
  * Decides — at build time, from the Astro adapter — whether the runtime gets a
- * long-lived timer heartbeat. A *production* Cloudflare build has no persistent
- * timers, so the Worker's `scheduled()` handler (a Cron Trigger) drives
- * `runScheduledTasks()` instead and this exports `null`. Every other case — any
- * other adapter (Node, Bun), and crucially local `astro dev` even under the
- * Cloudflare adapter (no Cron Trigger fires in dev) — gets a `NodeCronScheduler`
- * factory so plugin cron, scheduled publishing, and cleanup still run.
+ * long-lived timer heartbeat. Cloudflare Workers have no persistent timers, so
+ * the Worker's `scheduled()` handler drives `runScheduledTasks()` instead. In
+ * local dev the long-lived Vite host invokes an EmDash-owned route that runs
+ * the same maintenance inside workerd. Other adapters (Node, Bun) get a
+ * `NodeCronScheduler` factory.
  *
  * Keeping the adapter check here — rather than in core's runtime — means the
  * runtime has no Cloudflare-specific code path; it just calls `createScheduler`
  * if one was injected. Mirrors the wait-until module's approach.
  */
-export function generateSchedulerModule(
-	adapterName: string | undefined,
-	command: "build" | "serve" | undefined,
-): string {
-	// Only suppress the timer for an actual Cloudflare *build* — that artifact
-	// runs in workerd where a Cron Trigger drives scheduled work. In `serve`
-	// (local dev) nothing fires the Cron Trigger, so fall through to the timer.
-	if (adapterName === "@astrojs/cloudflare" && command !== "serve") {
-		return `// Serverless build: an external Cron Trigger drives scheduled work.
+export function generateSchedulerModule(adapterName: string | undefined): string {
+	if (adapterName === "@astrojs/cloudflare") {
+		return `// Cloudflare: an external platform event drives scheduled work.
 export const createScheduler = null;
 `;
 	}
-	return `// Long-lived runtime (or local dev): drive scheduled work from an in-process timer.
+	return `// Long-lived runtime: drive scheduled work from an in-process timer.
 import { NodeCronScheduler } from "emdash";
 
 export function createScheduler(executor) {

package/src/astro/integration/vite-config.ts

@@ -183,10 +183,7 @@ export interface VitePluginOptions {
 /**
  * Creates the EmDash virtual modules Vite plugin.
  */
-export function createVirtualModulesPlugin(
-	options: VitePluginOptions,
-	astroCommand: "dev" | "build" | "preview" | "sync",
-): Plugin {
+export function createVirtualModulesPlugin(options: VitePluginOptions): Plugin {
 	const { serializableConfig, resolvedConfig, pluginDescriptors, astroConfig } = options;
 
 	let viteCommand: "build" | "serve" | undefined;
@@ -338,17 +335,9 @@ export function createVirtualModulesPlugin(
 			}
 			// Generate scheduler module — a NodeCronScheduler factory on
 			// long-lived runtimes, or null under the Cloudflare adapter where
-			// a Cron Trigger drives scheduled work instead.
-			//
-			// Decide from Astro's command, not Vite's config.command: the
-			// Cloudflare adapter builds the worker bundle via a nested Vite
-			// *build* pass even during `astro dev`, so viteCommand reports
-			// "build" and would wrongly suppress the in-process timer (#1635).
-			// Astro's command stays "dev", which is the only case that should
-			// fall through to a NodeCronScheduler.
+			// platform events drive scheduled work.
 			if (id === RESOLVED_VIRTUAL_SCHEDULER_ID) {
-				const schedulerCommand = astroCommand === "dev" ? "serve" : "build";
-				return generateSchedulerModule(astroConfig.adapter?.name, schedulerCommand);
+				return generateSchedulerModule(astroConfig.adapter?.name);
 			}
 			// Generate env module — re-exports cloudflare:workers' env under
 			// the Cloudflare adapter, undefined otherwise (#1736).
@@ -419,6 +408,9 @@ export function createViteConfig(
 	command: "dev" | "build" | "preview" | "sync",
 ): NonNullable<AstroConfig["vite"]> {
 	const adminDistPath = resolveAdminDist();
+	const adminRequire = createRequire(resolve(adminDistPath, "index.js"));
+	const adminLinguiReactPath = dirname(adminRequire.resolve("@lingui/react/package.json"));
+	const adminLinguiCorePath = dirname(adminRequire.resolve("@lingui/core/package.json"));
 	const cloudflare = isCloudflareAdapter(options.astroConfig);
 	const isDev = command === "dev";
 	const projectRoot = fileURLToPath(options.astroConfig.root);
@@ -451,15 +443,20 @@ export function createViteConfig(
 		},
 		resolve: {
 			dedupe: ["@emdash-cms/admin", "react", "react-dom"],
-			// Array form so more-specific entries are checked first.
-			// The styles.css alias must come before the package alias, otherwise
-			// Vite's prefix matching on "@emdash-cms/admin" would resolve
-			// "@emdash-cms/admin/styles.css" through the source directory.
-			// Regex (not string) so the `?url` variant — admin.astro imports the
-			// stylesheet as `?url` to keep it out of the page CSS graph — also
-			// resolves to dist; a string `find` only matches on a `/` or end
-			// boundary, so `styles.css?url` would slip through to the source alias.
+			// Admin and auth providers must share Lingui's React context. In pnpm
+			// installs, resolving each package from its importer can otherwise load
+			// separate copies even when the versions match.
 			alias: [
+				{ find: "@lingui/react", replacement: adminLinguiReactPath },
+				{ find: "@lingui/core", replacement: adminLinguiCorePath },
+				// Array form so more-specific entries are checked first. The styles.css
+				// alias must come before the package alias, otherwise Vite's prefix
+				// matching on "@emdash-cms/admin" would resolve
+				// "@emdash-cms/admin/styles.css" through the source directory.
+				// Regex (not string) so the `?url` variant — admin.astro imports the
+				// stylesheet as `?url` to keep it out of the page CSS graph — also
+				// resolves to dist; a string `find` only matches on a `/` or end
+				// boundary, so `styles.css?url` would slip through to the source alias.
 				{ find: ADMIN_STYLES_ALIAS, replacement: resolve(adminDistPath, "styles.css") },
 				{ find: "@emdash-cms/admin", replacement: useSource ? adminSourcePath : adminDistPath },
 				// `use-sync-external-store/shim` is a React <18 polyfill that ships
@@ -495,7 +492,7 @@ export function createViteConfig(
 		},
 		// eslint-disable-next-line typescript/no-unsafe-type-assertion -- Monorepo has both vite 6 (docs) and vite 7 (core). tsgo resolves correctly.
 		plugins: [
-			createVirtualModulesPlugin(options, command),
+			createVirtualModulesPlugin(options),
 			// Must precede the Lingui macro plugin, which redirects source
 			// catalog imports to dist/ in dev.
 			...(adminLocales

package/src/astro/middleware/auth.ts

@@ -126,6 +126,8 @@ const PUBLIC_API_EXACT = new Set([
 	"/_emdash/api/search/suggest",
 ]);
 
+const DEV_PUBLIC_API_EXACT = new Set(["/_emdash/api/typegen", "/_emdash/api/dev/scheduled-tasks"]);
+
 // Build merged public routes at module load from auth provider descriptors.
 // Routes ending with "/" are treated as prefixes; all others are exact matches.
 const { exact: _providerExactRoutes, prefixes: _providerPrefixRoutes } = (() => {
@@ -171,7 +173,7 @@ function isPublicEmDashRoute(pathname: string): boolean {
 	if (PUBLIC_API_PREFIXES.some((p) => pathname.startsWith(p))) return true;
 	if (_providerExactRoutes.has(pathname)) return true;
 	if (_providerPrefixRoutes.some((p) => pathname.startsWith(p))) return true;
-	if (import.meta.env.DEV && pathname === "/_emdash/api/typegen") return true;
+	if (import.meta.env.DEV && DEV_PUBLIC_API_EXACT.has(pathname)) return true;
 	return false;
 }