emdash 1.2.0 → 1.3.1

package/src/astro/routes/api/redirects/[id].ts

@@ -17,6 +17,7 @@ import {
 } from "#api/handlers/redirects.js";
 import { isParseError, parseBody } from "#api/parse.js";
 import { updateRedirectBody } from "#api/schemas.js";
+import { invalidateRedirectSourcePaths } from "#cache/redirect-paths.js";
 
 export const prerender = false;
 
@@ -42,7 +43,7 @@ export const GET: APIRoute = async ({ params, locals }) => {
 	}
 };
 
-export const PUT: APIRoute = async ({ params, request, locals }) => {
+export const PUT: APIRoute = async ({ params, request, locals, cache }) => {
 	const { emdash, user } = locals;
 	const dbErr = requireDb(emdash?.db);
 	if (dbErr) return dbErr;
@@ -57,17 +58,23 @@ export const PUT: APIRoute = async ({ params, request, locals }) => {
 	}
 
 	try {
+		const before = await handleRedirectGet(db, id);
+		if (!before.success) return unwrapResult(before);
+
 		const body = await parseBody(request, updateRedirectBody);
 		if (isParseError(body)) return body;
 
 		const result = await handleRedirectUpdate(db, id, body);
+		if (result.success) {
+			await invalidateRedirectSourcePaths(cache, before.data.source, result.data.source);
+		}
 		return unwrapResult(result);
 	} catch (error) {
 		return handleError(error, "Failed to update redirect", "REDIRECT_UPDATE_ERROR");
 	}
 };
 
-export const DELETE: APIRoute = async ({ params, locals }) => {
+export const DELETE: APIRoute = async ({ params, locals, cache }) => {
 	const { emdash, user } = locals;
 	const dbErr = requireDb(emdash?.db);
 	if (dbErr) return dbErr;
@@ -82,7 +89,13 @@ export const DELETE: APIRoute = async ({ params, locals }) => {
 	}
 
 	try {
+		const before = await handleRedirectGet(db, id);
+		if (!before.success) return unwrapResult(before);
+
 		const result = await handleRedirectDelete(db, id);
+		if (result.success) {
+			await invalidateRedirectSourcePaths(cache, before.data.source);
+		}
 		return unwrapResult(result);
 	} catch (error) {
 		return handleError(error, "Failed to delete redirect", "REDIRECT_DELETE_ERROR");

package/src/astro/routes/api/redirects/index.ts

@@ -12,6 +12,7 @@ import { handleError, requireDb, unwrapResult } from "#api/error.js";
 import { handleRedirectCreate, handleRedirectList } from "#api/handlers/redirects.js";
 import { isParseError, parseBody, parseQuery } from "#api/parse.js";
 import { createRedirectBody, redirectsListQuery } from "#api/schemas.js";
+import { invalidateRedirectSourcePaths } from "#cache/redirect-paths.js";
 
 export const prerender = false;
 
@@ -35,7 +36,7 @@ export const GET: APIRoute = async ({ url, locals }) => {
 	}
 };
 
-export const POST: APIRoute = async ({ request, locals }) => {
+export const POST: APIRoute = async ({ request, locals, cache }) => {
 	const { emdash, user } = locals;
 	const dbErr = requireDb(emdash?.db);
 	if (dbErr) return dbErr;
@@ -49,6 +50,9 @@ export const POST: APIRoute = async ({ request, locals }) => {
 		if (isParseError(body)) return body;
 
 		const result = await handleRedirectCreate(db, body);
+		if (result.success) {
+			await invalidateRedirectSourcePaths(cache, result.data.source);
+		}
 		return unwrapResult(result, 201);
 	} catch (error) {
 		return handleError(error, "Failed to create redirect", "REDIRECT_CREATE_ERROR");

package/src/astro/routes/api/settings/domain.ts

@@ -19,6 +19,7 @@ import { isParseError, parseBody } from "#api/parse.js";
 import { getConfiguredOrigin } from "#api/public-url.js";
 import { getChosenSiteOrigin } from "#api/site-url.js";
 import { siteSettingsTag } from "#cache/chrome-tags.js";
+import { invalidateRouteCache } from "#cache/route-cache.js";
 
 export const prerender = false;
 
@@ -55,7 +56,7 @@ export const POST: APIRoute = async ({ request, locals, cache }) => {
 		if (isParseError(body)) return body;
 
 		const result = await handleSiteDomainChange(emdash.db, body.domain);
-		if (result.success && cache?.enabled) await cache.invalidate({ tags: [siteSettingsTag()] });
+		if (result.success) await invalidateRouteCache(cache, [siteSettingsTag()]);
 		return unwrapResult(result);
 	} catch (error) {
 		return handleError(error, "Failed to change the site domain", "SITE_DOMAIN_ERROR");

package/src/astro/routes/api/settings.ts

@@ -13,6 +13,7 @@ import { handleSettingsGet, handleSettingsUpdate } from "#api/handlers/settings.
 import { isParseError, parseBody } from "#api/parse.js";
 import { settingsUpdateBody } from "#api/schemas.js";
 import { siteSettingsTag } from "#cache/chrome-tags.js";
+import { invalidateRouteCache } from "#cache/route-cache.js";
 
 export const prerender = false;
 
@@ -62,7 +63,7 @@ export const POST: APIRoute = async ({ request, locals, cache }) => {
 
 		const result = await handleSettingsUpdate(emdash.db, emdash.storage, body);
 		if (!result.success) return unwrapResult(result);
-		if (cache?.enabled) await cache.invalidate({ tags: [siteSettingsTag()] });
+		await invalidateRouteCache(cache, [siteSettingsTag()]);
 		return unwrapResult(result);
 	} catch (error) {
 		return handleError(error, "Failed to update settings", "SETTINGS_UPDATE_ERROR");

package/src/astro/routes/api/setup/admin-verify.ts

@@ -23,12 +23,15 @@ import { getPasskeyConfig } from "#auth/passkey-config.js";
 import { SETUP_NONCE_COOKIE } from "#auth/setup-nonce.js";
 import { OptionsRepository } from "#db/repositories/options.js";
 
-export const POST: APIRoute = async ({ cookies, request, locals }) => {
+import { sessionUnavailableError } from "../../../session-user.js";
+
+export const POST: APIRoute = async ({ cookies, request, locals, session }) => {
 	const { emdash } = locals;
 
 	if (!emdash?.db) {
 		return apiError("NOT_CONFIGURED", "EmDash is not initialized", 500);
 	}
+	if (!session) return sessionUnavailableError();
 
 	try {
 		// Check if setup is already complete
@@ -118,6 +121,9 @@ export const POST: APIRoute = async ({ cookies, request, locals }) => {
 		// Mark setup as complete
 		await options.set("emdash:setup_complete", true);
 
+		// Authenticate the newly created admin so the dashboard opens immediately.
+		session.set("user", { id: user.id });
+
 		// Clean up setup state and the session nonce cookie
 		await options.delete("emdash:setup_state");
 		cookies.delete(SETUP_NONCE_COOKIE, { path: "/_emdash/" });

package/src/astro/routes/api/taxonomies/[name]/reorder.ts

@@ -16,6 +16,7 @@ import { handleTermReorder } from "#api/handlers/taxonomies.js";
 import { isParseError, parseBody } from "#api/parse.js";
 import { reorderTermsBody } from "#api/schemas.js";
 import { taxonomyTag } from "#cache/chrome-tags.js";
+import { invalidateRouteCache } from "#cache/route-cache.js";
 
 export const prerender = false;
 
@@ -36,7 +37,7 @@ export const POST: APIRoute = async ({ params, request, locals, cache }) => {
 
 		const result = await handleTermReorder(emdash.db, name, body);
 		if (!result.success) return unwrapResult(result);
-		if (cache?.enabled) await cache.invalidate({ tags: [taxonomyTag(name)] });
+		await invalidateRouteCache(cache, [taxonomyTag(name)]);
 		return unwrapResult(result);
 	} catch (error) {
 		return handleError(error, "Failed to reorder terms", "TERM_REORDER_ERROR");

package/src/astro/routes/api/taxonomies/[name]/terms/[slug]/translations.ts

@@ -19,6 +19,7 @@ import {
 import { isParseError, parseBody, parseQuery } from "#api/parse.js";
 import { localeFilterQuery } from "#api/schemas.js";
 import { taxonomyTag } from "#cache/chrome-tags.js";
+import { invalidateRouteCache } from "#cache/route-cache.js";
 
 export const prerender = false;
 
@@ -84,7 +85,7 @@ export const POST: APIRoute = async ({ params, request, locals, cache }) => {
 			translationOf: source.data.term.id,
 		});
 		if (!result.success) return unwrapResult(result, 201);
-		if (cache?.enabled) await cache.invalidate({ tags: [taxonomyTag(name)] });
+		await invalidateRouteCache(cache, [taxonomyTag(name)]);
 		return unwrapResult(result, 201);
 	} catch (error) {
 		return handleError(error, "Failed to create term translation", "TERM_TRANSLATION_CREATE_ERROR");

package/src/astro/routes/api/taxonomies/[name]/terms/[slug].ts

@@ -14,6 +14,7 @@ import { handleTermDelete, handleTermGet, handleTermUpdate } from "#api/handlers
 import { isParseError, parseBody, parseQuery } from "#api/parse.js";
 import { localeFilterQuery, updateTermBody } from "#api/schemas.js";
 import { taxonomyTag } from "#cache/chrome-tags.js";
+import { invalidateRouteCache } from "#cache/route-cache.js";
 
 export const prerender = false;
 
@@ -65,7 +66,7 @@ export const PUT: APIRoute = async ({ params, request, locals, cache }) => {
 
 		const result = await handleTermUpdate(emdash.db, name, slug, body, { locale: query.locale });
 		if (!result.success) return unwrapResult(result);
-		if (cache?.enabled) await cache.invalidate({ tags: [taxonomyTag(name)] });
+		await invalidateRouteCache(cache, [taxonomyTag(name)]);
 		return unwrapResult(result);
 	} catch (error) {
 		return handleError(error, "Failed to update term", "TERM_UPDATE_ERROR");
@@ -92,7 +93,7 @@ export const DELETE: APIRoute = async ({ params, request, locals, cache }) => {
 	try {
 		const result = await handleTermDelete(emdash.db, name, slug, { locale: query.locale });
 		if (!result.success) return unwrapResult(result);
-		if (cache?.enabled) await cache.invalidate({ tags: [taxonomyTag(name)] });
+		await invalidateRouteCache(cache, [taxonomyTag(name)]);
 		return unwrapResult(result);
 	} catch (error) {
 		return handleError(error, "Failed to delete term", "TERM_DELETE_ERROR");

package/src/astro/routes/api/taxonomies/[name]/terms/index.ts

@@ -13,6 +13,7 @@ import { handleTermCreate, handleTermList } from "#api/handlers/taxonomies.js";
 import { isParseError, parseBody, parseQuery } from "#api/parse.js";
 import { createTermBody, termListQuery } from "#api/schemas.js";
 import { taxonomyTag } from "#cache/chrome-tags.js";
+import { invalidateRouteCache } from "#cache/route-cache.js";
 
 export const prerender = false;
 
@@ -65,7 +66,7 @@ export const POST: APIRoute = async ({ params, request, locals, cache }) => {
 
 		const result = await handleTermCreate(emdash.db, name, body);
 		if (!result.success) return unwrapResult(result, 201);
-		if (cache?.enabled) await cache.invalidate({ tags: [taxonomyTag(name)] });
+		await invalidateRouteCache(cache, [taxonomyTag(name)]);
 		return unwrapResult(result, 201);
 	} catch (error) {
 		return handleError(error, "Failed to create term", "TERM_CREATE_ERROR");

package/src/astro/routes/api/taxonomies/[name].ts

@@ -21,6 +21,7 @@ import {
 import { isParseError, parseBody, parseQuery } from "#api/parse.js";
 import { localeFilterQuery, updateTaxonomyDefBody } from "#api/schemas.js";
 import { taxonomyTag } from "#cache/chrome-tags.js";
+import { invalidateRouteCache } from "#cache/route-cache.js";
 
 export const prerender = false;
 
@@ -75,7 +76,7 @@ export const PUT: APIRoute = async ({ params, request, locals, cache }) => {
 			locale: query.locale,
 		});
 		if (!result.success) return unwrapResult(result);
-		if (cache?.enabled) await cache.invalidate({ tags: [taxonomyTag(name)] });
+		await invalidateRouteCache(cache, [taxonomyTag(name)]);
 		return unwrapResult(result);
 	} catch (error) {
 		return handleError(error, "Failed to update taxonomy", "TAXONOMY_UPDATE_ERROR");
@@ -99,7 +100,7 @@ export const DELETE: APIRoute = async ({ params, locals, cache }) => {
 	try {
 		const result = await handleTaxonomyDelete(emdash.db, name);
 		if (!result.success) return unwrapResult(result);
-		if (cache?.enabled) await cache.invalidate({ tags: [taxonomyTag(name)] });
+		await invalidateRouteCache(cache, [taxonomyTag(name)]);
 		return unwrapResult(result);
 	} catch (error) {
 		return handleError(error, "Failed to delete taxonomy", "TAXONOMY_DELETE_ERROR");

package/src/astro/routes/api/taxonomies/index.ts

@@ -13,6 +13,7 @@ import { handleTaxonomyCreate, handleTaxonomyList } from "#api/handlers/taxonomi
 import { isParseError, parseBody, parseQuery } from "#api/parse.js";
 import { createTaxonomyDefBody, localeFilterQuery } from "#api/schemas.js";
 import { taxonomyTag } from "#cache/chrome-tags.js";
+import { invalidateRouteCache } from "#cache/route-cache.js";
 
 export const prerender = false;
 
@@ -57,7 +58,7 @@ export const POST: APIRoute = async ({ request, locals, cache }) => {
 
 		const result = await handleTaxonomyCreate(emdash.db, body);
 		if (!result.success) return unwrapResult(result, 201);
-		if (cache?.enabled) await cache.invalidate({ tags: [taxonomyTag(result.data.taxonomy.name)] });
+		await invalidateRouteCache(cache, [taxonomyTag(result.data.taxonomy.name)]);
 		return unwrapResult(result, 201);
 	} catch (error) {
 		return handleError(error, "Failed to create taxonomy", "TAXONOMY_CREATE_ERROR");

package/src/astro/routes/api/widget-areas/[name]/reorder.ts

@@ -11,6 +11,7 @@ import { apiError, apiSuccess, handleError } from "#api/error.js";
 import { isParseError, parseBody } from "#api/parse.js";
 import { reorderWidgetsBody } from "#api/schemas.js";
 import { widgetAreaTag } from "#cache/chrome-tags.js";
+import { invalidateRouteCache } from "#cache/route-cache.js";
 
 export const prerender = false;
 
@@ -62,7 +63,7 @@ export const POST: APIRoute = async ({ params, request, locals, cache }) => {
 			),
 		);
 
-		if (cache?.enabled) await cache.invalidate({ tags: [widgetAreaTag(name)] });
+		await invalidateRouteCache(cache, [widgetAreaTag(name)]);
 		return apiSuccess({ success: true });
 	} catch (error) {
 		return handleError(error, "Failed to reorder widgets", "WIDGET_REORDER_ERROR");

package/src/astro/routes/api/widget-areas/[name]/widgets/[id].ts

@@ -12,6 +12,7 @@ import { apiError, apiSuccess, handleError } from "#api/error.js";
 import { isParseError, parseBody } from "#api/parse.js";
 import { updateWidgetBody } from "#api/schemas.js";
 import { widgetAreaTag } from "#cache/chrome-tags.js";
+import { invalidateRouteCache } from "#cache/route-cache.js";
 import { rowToWidget } from "#widgets/index.js";
 import type { WidgetRow } from "#widgets/types.js";
 
@@ -80,7 +81,7 @@ export const PUT: APIRoute = async ({ params, request, locals, cache }) => {
 			.where("id", "=", id)
 			.executeTakeFirstOrThrow();
 
-		if (cache?.enabled) await cache.invalidate({ tags: [widgetAreaTag(name)] });
+		await invalidateRouteCache(cache, [widgetAreaTag(name)]);
 		return apiSuccess(rowToWidget(widget));
 	} catch (error) {
 		return handleError(error, "Failed to update widget", "WIDGET_UPDATE_ERROR");
@@ -125,7 +126,7 @@ export const DELETE: APIRoute = async ({ params, locals, cache }) => {
 
 		await db.deleteFrom("_emdash_widgets").where("id", "=", id).execute();
 
-		if (cache?.enabled) await cache.invalidate({ tags: [widgetAreaTag(name)] });
+		await invalidateRouteCache(cache, [widgetAreaTag(name)]);
 		return apiSuccess({ deleted: true });
 	} catch (error) {
 		return handleError(error, "Failed to delete widget", "WIDGET_DELETE_ERROR");

package/src/astro/routes/api/widget-areas/[name]/widgets.ts

@@ -12,6 +12,7 @@ import { apiError, apiSuccess, handleError } from "#api/error.js";
 import { isParseError, parseBody } from "#api/parse.js";
 import { createWidgetBody } from "#api/schemas.js";
 import { widgetAreaTag } from "#cache/chrome-tags.js";
+import { invalidateRouteCache } from "#cache/route-cache.js";
 import { rowToWidget } from "#widgets/index.js";
 import type { WidgetRow } from "#widgets/types.js";
 
@@ -77,7 +78,7 @@ export const POST: APIRoute = async ({ params, request, locals, cache }) => {
 			.where("id", "=", id)
 			.executeTakeFirstOrThrow();
 
-		if (cache?.enabled) await cache.invalidate({ tags: [widgetAreaTag(name)] });
+		await invalidateRouteCache(cache, [widgetAreaTag(name)]);
 		return apiSuccess(rowToWidget(widget), 201);
 	} catch (error) {
 		return handleError(error, "Failed to create widget", "WIDGET_CREATE_ERROR");

package/src/astro/routes/api/widget-areas/[name].ts

@@ -10,6 +10,7 @@ import type { APIRoute } from "astro";
 import { requirePerm } from "#api/authorize.js";
 import { apiError, apiSuccess, handleError } from "#api/error.js";
 import { widgetAreaTag } from "#cache/chrome-tags.js";
+import { invalidateRouteCache } from "#cache/route-cache.js";
 import { rowToWidget } from "#widgets/index.js";
 import type { WidgetRow } from "#widgets/types.js";
 
@@ -84,7 +85,7 @@ export const DELETE: APIRoute = async ({ params, locals, cache }) => {
 		// Delete area (widgets cascade)
 		await db.deleteFrom("_emdash_widget_areas").where("id", "=", area.id).execute();
 
-		if (cache?.enabled) await cache.invalidate({ tags: [widgetAreaTag(name)] });
+		await invalidateRouteCache(cache, [widgetAreaTag(name)]);
 		return apiSuccess({ deleted: true });
 	} catch (error) {
 		return handleError(error, "Failed to delete widget area", "WIDGET_AREA_DELETE_ERROR");

package/src/astro/routes/api/widget-areas/index.ts

@@ -13,6 +13,7 @@ import { apiError, apiSuccess, handleError } from "#api/error.js";
 import { isParseError, parseBody } from "#api/parse.js";
 import { createWidgetAreaBody } from "#api/schemas.js";
 import { widgetAreaTag } from "#cache/chrome-tags.js";
+import { invalidateRouteCache } from "#cache/route-cache.js";
 import { rowToWidget } from "#widgets/index.js";
 import type { WidgetRow } from "#widgets/types.js";
 
@@ -96,7 +97,7 @@ export const POST: APIRoute = async ({ request, locals, cache }) => {
 			.where("id", "=", id)
 			.executeTakeFirstOrThrow();
 
-		if (cache?.enabled) await cache.invalidate({ tags: [widgetAreaTag(area.name)] });
+		await invalidateRouteCache(cache, [widgetAreaTag(area.name)]);
 		return apiSuccess(area, 201);
 	} catch (error) {
 		return handleError(error, "Failed to create widget area", "WIDGET_AREA_CREATE_ERROR");

package/src/astro/routes/robots.txt.ts

@@ -5,7 +5,8 @@
  *
  * If a custom robots.txt is configured in SEO settings, that is returned.
  * Otherwise generates a default that allows all crawlers and references
- * the sitemap.
+ * the sitemap. When `seo.disallowAiTraining` is set, either version gets
+ * rules asking AI training crawlers to stay away.
  */
 
 import type { APIRoute } from "astro";
@@ -17,6 +18,31 @@ export const prerender = false;
 
 const TRAILING_SLASH_RE = /\/$/;
 
+/** AI training crawlers and opt-out tokens, as listed in Cloudflare's managed robots.txt. */
+const AI_TRAINING_CRAWLERS = [
+	"Amazonbot",
+	"Applebot-Extended",
+	"Bytespider",
+	"CCBot",
+	"ClaudeBot",
+	"Google-Extended",
+	"GPTBot",
+	"meta-externalagent",
+];
+
+/**
+ * `Content-Signal` is not a rule, so the empty `Disallow:` is what closes the
+ * `*` group; without a rule, crawlers merge it with the next group and apply
+ * `Disallow: /` to everyone.
+ */
+const AI_TRAINING_RULES = [
+	"# Disallow AI training",
+	"User-agent: *",
+	"Content-Signal: search=yes, ai-train=no",
+	"Disallow:",
+	...AI_TRAINING_CRAWLERS.flatMap((agent) => ["", `User-agent: ${agent}`, "Disallow: /"]),
+].join("\n");
+
 export const GET: APIRoute = async ({ locals, url }) => {
 	const { emdash } = locals;
 
@@ -35,11 +61,15 @@ export const GET: APIRoute = async ({ locals, url }) => {
 			"",
 		);
 		const sitemapUrl = `${siteUrl}/sitemap.xml`;
+		const disallowAiTraining = settings.seo?.disallowAiTraining === true;
 
 		// Use custom robots.txt if configured
 		if (settings.seo?.robotsTxt) {
-			// Append sitemap directive if not already present
 			let content = settings.seo.robotsTxt;
+			if (disallowAiTraining) {
+				content = `${content.trimEnd()}\n\n${AI_TRAINING_RULES}\n`;
+			}
+			// Append sitemap directive if not already present
 			if (!content.toLowerCase().includes("sitemap:")) {
 				content = `${content.trimEnd()}\n\nSitemap: ${sitemapUrl}\n`;
 			}
@@ -61,6 +91,7 @@ export const GET: APIRoute = async ({ locals, url }) => {
 			"# Disallow admin and API routes",
 			"Disallow: /_emdash/",
 			"",
+			...(disallowAiTraining ? [AI_TRAINING_RULES, ""] : []),
 			`Sitemap: ${sitemapUrl}`,
 			"",
 		].join("\n");

package/src/astro/types.ts

@@ -9,6 +9,7 @@ import type { Element } from "@emdash-cms/blocks";
 import type { Kysely } from "kysely";
 
 import type { ContentFieldFilters } from "../content-list-query.js";
+import type { ContentSeoInput } from "../database/repositories/types.js";
 import type {
 	PluginEditorExtensionDispatch,
 	ResolvedPluginEditorExtension,
@@ -343,6 +344,7 @@ export interface EmDashHandlers {
 			bylines?: Array<{ bylineId: string; roleLabel?: string | null }>;
 			locale?: string;
 			translationOf?: string;
+			seo?: ContentSeoInput;
 			taxonomies?: Record<string, string[]>;
 			references?: Record<string, string[]>;
 			createdAt?: string | null;
@@ -563,7 +565,14 @@ export interface EmDashHandlers {
 		request: Request,
 	) => Promise<HandlerResponse>;
 
-	// Plugin route metadata (for auth/caching decisions before dispatch)
+	// Public-only plugin route metadata for SSR page components.
+	// Public routes return their meta. Private and unknown routes return null.
+	// Present on both anonymous and signed-in locals so the result does not
+	// change when a visitor logs in.
+	getPublicPluginRouteMeta: (pluginId: string, path: string) => RouteMeta | null;
+
+	// Plugin route metadata (for auth/caching decisions before dispatch).
+	// Signed-in locals only. Private routes return `{ public: false }`.
 	getPluginRouteMeta: (pluginId: string, path: string) => RouteMeta | null;
 	getEnabledPluginMcpTools: () => Promise<
 		Array<{

package/src/auth/types.ts

@@ -19,7 +19,7 @@ export interface AuthResult {
 	email: string;
 	/** User's display name */
 	name: string;
-	/** Resolved role level (e.g., 50 for Admin, 30 for Editor) */
+	/** Resolved role level (e.g., 50 for Admin, 40 for Editor, 30 for Author) */
 	role: number;
 	/** Provider-specific subject ID */
 	subject?: string;
@@ -166,6 +166,12 @@ export interface AuthProviderAdminExports {
 	 */
 	LoginForm?: import("react").ComponentType;
 
+	/**
+	 * Optional help text shown below the provider's LoginForm. Providers can
+	 * export a string or a component; components keep text localisable.
+	 */
+	loginHelp?: string | import("react").ComponentType;
+
 	/**
 	 * Setup wizard step for creating the admin account via this provider.
 	 * When present, this provider appears as an option in the setup wizard's
@@ -186,7 +192,7 @@ export interface ExternalAuthConfig {
 
 	/**
 	 * Role level for users not matching any group in roleMapping
-	 * @default 30 (Editor)
+	 * @default 30 (Author, who can publish their own content)
 	 */
 	defaultRole?: number;
 
@@ -212,8 +218,8 @@ export interface ExternalAuthConfig {
 	 * ```ts
 	 * roleMapping: {
 	 *   "Admins": 50,        // Admin
-	 *   "Developers": 40,    // Developer
-	 *   "Content Team": 30,  // Editor
+	 *   "Editors": 40,       // Editor
+	 *   "Content Team": 30,  // Author
 	 * }
 	 * ```
 	 */

package/src/cache/redirect-paths.ts

@@ -0,0 +1,56 @@
+/**
+ * Cache invalidation specs for redirect source paths.
+ *
+ * The Cloudflare adapter tags cached pages by request pathname
+ * (`astro-path:<pathname>`). When a redirect is written, purging the source
+ * path (and its trailing-slash variant) clears any stale cached page at that
+ * location so the redirect middleware runs on the next request.
+ */
+
+export interface CachePathSpec {
+	path: string;
+}
+
+interface CacheLike {
+	enabled?: boolean;
+	invalidate(spec: CachePathSpec): Promise<unknown>;
+}
+
+function toggledTrailingSlash(path: string): string | null {
+	if (path.length <= 1) return null;
+	return path.endsWith("/") ? path.slice(0, -1) : `${path}/`;
+}
+
+/**
+ * Build cache-invalidation specs for one or more redirect source paths.
+ * Returns each path with and without a trailing slash, deduplicated.
+ */
+export function redirectSourceCachePaths(...sources: string[]): CachePathSpec[] {
+	const paths = new Set<string>();
+	for (const source of sources) {
+		if (!source) continue;
+		paths.add(source);
+		const alt = toggledTrailingSlash(source);
+		if (alt) paths.add(alt);
+	}
+	return Array.from(paths, (path) => ({ path }));
+}
+
+/**
+ * Invalidate the edge cache for one or more redirect source paths.
+ * Failures are logged but not thrown: the redirect mutation has already
+ * been committed and should still return a successful response.
+ */
+export async function invalidateRedirectSourcePaths(
+	cache: CacheLike | undefined,
+	...sources: string[]
+): Promise<void> {
+	if (!cache?.enabled) return;
+	for (const spec of redirectSourceCachePaths(...sources)) {
+		try {
+			await cache.invalidate(spec);
+		} catch (error) {
+			console.error(`[redirects] Failed to invalidate cache for ${spec.path}:`, error);
+		}
+	}
+}

package/src/cache/route-cache.ts

@@ -0,0 +1,22 @@
+import type { APIContext } from "astro";
+
+type RouteCache = Pick<APIContext["cache"], "enabled" | "invalidate">;
+
+/**
+ * Purge `tags` from Astro's route cache when a cache provider is configured.
+ *
+ * Never throws: callers run it after a committed write, and a rejected purge
+ * must not fail that write. The pages stay cached until a later purge or their
+ * `maxAge`.
+ */
+export async function invalidateRouteCache(
+	cache: RouteCache | undefined,
+	tags: string[],
+): Promise<void> {
+	if (!cache?.enabled) return;
+	try {
+		await cache.invalidate({ tags });
+	} catch (error) {
+		console.error(`[cache] Failed to invalidate route cache tags ${tags.join(", ")}:`, error);
+	}
+}

package/src/cli/commands/export-seed.ts

@@ -26,6 +26,7 @@ import type { ContentItem } from "../../database/repositories/types.js";
 import type { Database } from "../../database/types.js";
 import { validateIdentifier } from "../../database/validate.js";
 import { getI18nConfig, isI18nEnabled } from "../../i18n/config.js";
+import { getMediaCaption } from "../../media/caption.js";
 import { BlockTypeRegistry } from "../../schema/block-type-registry.js";
 import { SchemaRegistry } from "../../schema/registry.js";
 import type { FieldType } from "../../schema/types.js";
@@ -1076,7 +1077,7 @@ interface MediaInfo {
 	url: string;
 	filename: string;
 	alt?: string;
-	caption?: string;
+	caption?: string | null;
 }
 
 interface ExportedContent {
@@ -1118,7 +1119,7 @@ async function exportContent(
 					url: `${mediaUrlPrefix}${media.storageKey}`,
 					filename: media.filename,
 					alt: media.alt || undefined,
-					caption: media.caption || undefined,
+					caption: typeof media.caption === "string" ? media.caption : null,
 				});
 			}
 			cursor = result.nextCursor;
@@ -1374,7 +1375,7 @@ function toSeedMedia(
 	mediaCounter: { count: number },
 ): unknown {
 	if (!value || typeof value !== "object") return value;
-	const mediaValue = value as { id?: unknown; alt?: unknown };
+	const mediaValue = value as { id?: unknown; alt?: unknown; caption?: unknown; meta?: unknown };
 	const mediaInfo = typeof mediaValue.id === "string" ? mediaMap.get(mediaValue.id) : undefined;
 	if (!mediaInfo) return value;
 
@@ -1384,7 +1385,8 @@ function toSeedMedia(
 			url: mediaInfo.url,
 			filename: mediaInfo.filename,
 			alt: (typeof mediaValue.alt === "string" && mediaValue.alt) || mediaInfo.alt,
-			caption: mediaInfo.caption,
+			caption: getMediaCaption(mediaValue) ?? mediaInfo.caption,
+			libraryCaption: mediaInfo.caption ?? null,
 		},
 	};
 }