emdash 1.3.0 → 1.3.1

package/dist/astro/middleware/auth.d.mts

@@ -1,15 +1,15 @@
-import "../../parse-CWHOFc6z.mjs";
-import "../../types-DCFavOii.mjs";
-import "../../types-QoPHm-2w.mjs";
-import "../../options-DJWaq3Ie.mjs";
-import "../../entry-lock-C7VX0NGK.mjs";
-import "../../config-Bsm_u_oE.mjs";
-import "../../runner-BObHz5FC.mjs";
-import "../../storage-query-DRyu3bSU.mjs";
-import "../../index-BB9sVisO.mjs";
-import "../../types-DHO7Pd25.mjs";
-import "../../hreflang-CY_F5OjF.mjs";
-import "../../validate-emKxGC5F.mjs";
+import "../../parse-6pN8Xqg5.mjs";
+import "../../types-CCEHAhOv.mjs";
+import "../../types-mQGTpP-4.mjs";
+import "../../options-CmUpkyKW.mjs";
+import "../../entry-lock-CY7XpdSw.mjs";
+import "../../config-9IzA83_U.mjs";
+import "../../runner-g1A9P-wD.mjs";
+import "../../storage-query-Cy0SZ8iG.mjs";
+import "../../index-C37Ty40w.mjs";
+import "../../types-CadaL_k8.mjs";
+import "../../hreflang-D07R-RbI.mjs";
+import "../../validate-mnoVfASU.mjs";
 import { EmDashHandlers } from "../types.mjs";
 import { User } from "@emdash-cms/auth";
 import * as astro from "astro";

package/dist/astro/middleware/auth.mjs

@@ -1,15 +1,15 @@
 import "../../after-PcEvMY_6.mjs";
 import "../../base64-BQBZwXCx.mjs";
-import "../../types-D2NEXtgB.mjs";
-import "../../errors-B4f4It-2.mjs";
-import { r as getRegistryConfigInput } from "../../config-DBU6iUQB.mjs";
-import "../../errors-BOYNdIo3.mjs";
-import { t as apiError } from "../../error-CVWeIOku.mjs";
-import { i as getPublicOrigin } from "../../public-url-Bt98vysr.mjs";
-import { t as getAuthMode } from "../../mode-C-D3qICy.mjs";
-import { n as resolveSessionUser } from "../../session-user-DlpPdf8L.mjs";
-import { a as hasScope, n as TRANSFER_SCOPES } from "../../api-tokens-CdP49zVF.mjs";
-import { a as resolveApiToken, o as resolveOAuthToken } from "../../api-tokens-Bx38ZCQp.mjs";
+import "../../types-DwhEvIVb.mjs";
+import "../../errors-DlJwot7q.mjs";
+import { r as getRegistryConfigInput } from "../../config-BdQzFtmR.mjs";
+import "../../errors-BMaCpLeS.mjs";
+import { t as apiError } from "../../error-CT2SsX5S.mjs";
+import { i as getPublicOrigin } from "../../public-url-CQwzRljH.mjs";
+import { t as getAuthMode } from "../../mode-DIDSUwuN.mjs";
+import { n as resolveSessionUser } from "../../session-user-2DpQDMKw.mjs";
+import { a as hasScope, n as TRANSFER_SCOPES } from "../../api-tokens-C7l0GUAF.mjs";
+import { a as resolveApiToken, o as resolveOAuthToken } from "../../api-tokens-DQ9Ee-vP.mjs";
 import { ulid } from "ulidx";
 import { defineMiddleware } from "astro:middleware";
 import virtualConfig from "virtual:emdash/config";

package/dist/astro/middleware/media-usage-write-fence.mjs

@@ -1,10 +1,10 @@
 import "../../dialect-helpers-7_IqPdh9.mjs";
 import "../../base64-BQBZwXCx.mjs";
-import "../../types-D2NEXtgB.mjs";
-import "../../errors-B4f4It-2.mjs";
-import "../../errors-BOYNdIo3.mjs";
-import { t as apiError } from "../../error-CVWeIOku.mjs";
-import { a as readSiteWriteFence, o as recordSiteWrite } from "../../fence-C3MUitUN.mjs";
+import "../../types-DwhEvIVb.mjs";
+import "../../errors-DlJwot7q.mjs";
+import "../../errors-BMaCpLeS.mjs";
+import { t as apiError } from "../../error-CT2SsX5S.mjs";
+import { a as readSiteWriteFence, o as recordSiteWrite } from "../../fence-BOD3SxZG.mjs";
 import { defineMiddleware } from "astro:middleware";
 
 //#region src/astro/middleware/media-usage-write-fence.ts

package/dist/astro/middleware/redirect.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"redirect.d.mts","names":[],"sources":["../../../src/astro/middleware/redirect.ts"],"mappings":";;;;;;AAoGA;;;;;;;;;;;;cAAa,SAAA,EAsGX,KAAA,CAtGoB,iBAAA"}
+{"version":3,"file":"redirect.d.mts","names":[],"sources":["../../../src/astro/middleware/redirect.ts"],"mappings":";;;;;;AA2GA;;;;;;;;;;;;cAAa,SAAA,EA8LX,KAAA,CA9LoB,iBAAA"}

package/dist/astro/middleware/redirect.mjs

@@ -1,17 +1,29 @@
 import "../../dialect-helpers-7_IqPdh9.mjs";
-import "../../config-CvmjJcVw.mjs";
+import "../../config-Cs_AwWXI.mjs";
 import { t as after } from "../../after-PcEvMY_6.mjs";
+import { getRequestContext, runWithContext } from "../../request-context.mjs";
+import "../../options-DhrI7eMv.mjs";
+import "../../secrets-Cc_O3Kp-.mjs";
 import "../../base64-BQBZwXCx.mjs";
-import "../../request-cache-C4CIo5ad.mjs";
-import "../../types-D2NEXtgB.mjs";
-import "../../resolve-D-kqyKns.mjs";
-import { t as isSiteRelativeDestination } from "../../destination-r2zIAZ2S.mjs";
-import { t as RedirectRepository } from "../../redirect-DiS_3mA4.mjs";
-import { i as matchCachedPatterns, r as loadCachedRedirects } from "../../cache-CEU9wo_h.mjs";
-import { n as createRedirectSource } from "../../artifacts-htGyfCSt.mjs";
-import { c as getDb } from "../../loader-CswroUbe.mjs";
-import "../../json-recordset-BUjxhr77.mjs";
-import { n as isTerminalStatus } from "../../status-BFNdxzKc.mjs";
+import "../../query-BFHjCzSh.mjs";
+import "../../object-cache-EjasjtoQ.mjs";
+import { n as peekRequestCache } from "../../request-cache-5z2WzWmh.mjs";
+import "../../types-DwhEvIVb.mjs";
+import "../../media-B_x5B9EA.mjs";
+import "../../resolve-DdNXBJSr.mjs";
+import { t as isSiteRelativeDestination } from "../../destination-DR3IHjmy.mjs";
+import { t as RedirectRepository } from "../../redirect-DcmNMvOs.mjs";
+import "../../version-BOFfLiVT.mjs";
+import { i as matchCachedPatterns, r as loadCachedRedirects } from "../../cache-BWzswWB-.mjs";
+import { n as createRedirectSource } from "../../artifacts-DwOYYBQm.mjs";
+import { c as getDb } from "../../loader-D4w4XE7q.mjs";
+import "../../json-recordset-BjYIWFkV.mjs";
+import "../../errors-DlJwot7q.mjs";
+import "../../errors-BMaCpLeS.mjs";
+import { l as invalidateSiteSettingsSnapshot, u as peekSiteSettingsSnapshot } from "../../settings-yIqoN-Ok.mjs";
+import "../../error-CT2SsX5S.mjs";
+import "../../fence-BOD3SxZG.mjs";
+import { n as isTerminalStatus } from "../../status-DSURZwKS.mjs";
 import { defineMiddleware } from "astro:middleware";
 
 //#region src/astro/middleware/redirect.ts
@@ -77,52 +89,120 @@ const onRequest = defineMiddleware(async (context, next) => {
 	} catch {
 		return next();
 	}
-	try {
-		const repo = new RedirectRepository(db);
-		const source = createRedirectSource(db);
-		const routeCache = context.cache;
-		let cached = await loadCachedRedirects(source);
-		let match = matchRedirect(cached, pathname);
+	const routeCache = context.cache;
+	const renderedSettings = /* @__PURE__ */ new Set();
+	let currentSettingsVersion;
+	const checkSettings = () => {
+		if (currentSettingsVersion === void 0 || renderedSettings.size === 0) return;
+		if (currentSettingsVersion === null) routeCache?.set(false);
+		else if ([...renderedSettings].some((v) => v !== currentSettingsVersion)) {
+			routeCache?.set(false);
+			invalidateSiteSettingsSnapshot();
+		}
+	};
+	const requestSettings = { onRead(version) {
+		renderedSettings.add(version);
+		checkSettings();
+	} };
+	const finalizeSettings = async () => {
+		if (!routeCacheStores(routeCache)) return;
+		if (requestSettings.live) {
+			if (currentSettingsVersion == null) routeCache?.set(false);
+			return;
+		}
+		const prefetched = await peekRequestCache("siteSettingsSnapshot");
+		if (prefetched) requestSettings.onRead(prefetched.version);
+		const snapshot = peekSiteSettingsSnapshot();
+		if (currentSettingsVersion == null) routeCache?.set(false);
+		else if (!snapshot) requestSettings.version = currentSettingsVersion;
+		else if (snapshot.version !== currentSettingsVersion) {
+			routeCache?.set(false);
+			invalidateSiteSettingsSnapshot();
+		} else requestSettings.snapshot = snapshot;
+	};
+	const run = async () => {
+		let repo;
+		let source;
+		let cached;
+		let match = null;
 		let verified = false;
-		if (match && routeCacheStores(routeCache)) {
-			cached = await loadCachedRedirects(source, { verify: true });
-			verified = true;
+		try {
+			repo = new RedirectRepository(db);
+			source = createRedirectSource(db, routeCache?.enabled ? (version) => {
+				currentSettingsVersion = version;
+				checkSettings();
+			} : void 0);
+			cached = await loadCachedRedirects(source);
 			match = matchRedirect(cached, pathname);
+			if (match && routeCacheStores(routeCache)) {
+				cached = await loadCachedRedirects(source, { verify: true });
+				verified = true;
+				match = matchRedirect(cached, pathname);
+			}
+		} catch {
+			currentSettingsVersion = null;
+			routeCache?.set(false);
+			return next();
+		}
+		if (match) {
+			const redirected = redirectResponse(context, repo, match);
+			if (redirected) return redirected;
 		}
-		if (match) return redirectResponse(context, repo, match) ?? next();
 		const response = await next();
-		if (response.status === 404) routeCache?.set(false);
-		if (!verified && routeCacheStores(routeCache)) {
-			const current = await loadCachedRedirects(source, { verify: true }).catch(() => cached);
-			const late = current === cached ? null : matchRedirect(current, pathname);
-			const redirected = late && redirectResponse(context, repo, late);
-			if (redirected) {
+		try {
+			if (response.status === 404) routeCache?.set(false);
+			if (!verified && routeCacheStores(routeCache) && source && cached) {
+				currentSettingsVersion = void 0;
+				const current = await loadCachedRedirects(source, { verify: true }).catch(() => cached);
+				if (currentSettingsVersion === void 0) {
+					currentSettingsVersion = null;
+					checkSettings();
+				}
+				const late = current === cached ? null : matchRedirect(current, pathname);
+				const redirected = late && redirectResponse(context, repo, late);
+				if (redirected) {
+					routeCache?.set(false);
+					after(() => response.body?.pipeTo(new WritableStream()));
+					return redirected;
+				}
+			}
+			try {
+				await finalizeSettings();
+			} catch {
 				routeCache?.set(false);
-				after(() => response.body?.pipeTo(new WritableStream()));
-				return redirected;
 			}
-		}
-		const location = response.headers.get("location");
-		const missedByRedirect = isRedirectCode(response.status) && (location === "/404" || location === "/404/");
-		if (response.status === 404 && pathname !== "/404" && pathname !== "/404/" || missedByRedirect) {
-			const referrer = context.request.headers.get("referer") ?? null;
-			const userAgent = context.request.headers.get("user-agent") ?? null;
-			after(async () => {
-				try {
-					await repo.log404({
-						path: pathname,
-						referrer,
-						userAgent
-					});
-				} catch (error) {
-					console.error("[emdash:redirects] failed to log 404:", error);
-				}
-			});
+			const location = response.headers.get("location");
+			const missedByRedirect = isRedirectCode(response.status) && (location === "/404" || location === "/404/");
+			if (response.status === 404 && pathname !== "/404" && pathname !== "/404/" || missedByRedirect) {
+				const referrer = context.request.headers.get("referer") ?? null;
+				const userAgent = context.request.headers.get("user-agent") ?? null;
+				after(async () => {
+					try {
+						await repo.log404({
+							path: pathname,
+							referrer,
+							userAgent
+						});
+					} catch (error) {
+						console.error("[emdash:redirects] failed to log 404:", error);
+					}
+				});
+			}
+		} catch (error) {
+			console.error("[emdash:redirects] post-response step failed:", error);
 		}
 		return response;
-	} catch {
-		return next();
+	};
+	if (!routeCache?.enabled) return run();
+	const parent = getRequestContext();
+	if (parent) {
+		parent.siteSettings = requestSettings;
+		return run();
 	}
+	return runWithContext({
+		editMode: false,
+		siteSettings: requestSettings
+	}, run);
 });
 
 //#endregion

package/dist/astro/middleware/redirect.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"redirect.mjs","names":[],"sources":["../../../src/astro/middleware/redirect.ts"],"sourcesContent":["/**\n * Redirect middleware\n *\n * Intercepts incoming requests and checks for matching redirect rules.\n * Runs after runtime init (needs db) but before setup/auth (should handle\n * ALL routes, including public ones, and should be fast).\n *\n * Skip paths:\n * - /_emdash/* (admin UI, API routes, auth endpoints)\n * - /_image (Astro image optimization)\n * - Static assets (files with extensions)\n *\n * 404 logging happens post-response: if next() returns 404 and the path\n * wasn't already matched by a redirect, log it.\n */\n\nimport type { APIContext } from \"astro\";\nimport { defineMiddleware } from \"astro:middleware\";\n\nimport { after } from \"../../after.js\";\nimport { RedirectRepository } from \"../../database/repositories/redirect.js\";\nimport { getDb } from \"../../loader.js\";\nimport { createRedirectSource } from \"../../redirects/artifacts.js\";\nimport type { CachedRedirects, RedirectRule } from \"../../redirects/cache.js\";\nimport { loadCachedRedirects, matchCachedPatterns } from \"../../redirects/cache.js\";\nimport { isSiteRelativeDestination } from \"../../redirects/destination.js\";\nimport { isTerminalStatus } from \"../../redirects/status.js\";\n\n/** Paths that should never be intercepted by redirects */\nconst SKIP_PREFIXES = [\"/_emdash\", \"/_image\"];\n\n/** Static asset extensions -- don't redirect file requests */\nconst ASSET_EXTENSION = /\\.\\w{1,10}$/;\n\ntype RedirectCode = 301 | 302 | 303 | 307 | 308;\n\nfunction isRedirectCode(code: number): code is RedirectCode {\n\treturn code === 301 || code === 302 || code === 303 || code === 307 || code === 308;\n}\n\nfunction warnUnsafeDestination(id: string): void {\n\tconsole.warn(\n\t\t`[emdash:redirects] Skipping redirect ${id}: destination is not a site-relative path`,\n\t);\n}\n\nfunction recordHitInBackground(repo: RedirectRepository, id: string): void {\n\tafter(async () => {\n\t\ttry {\n\t\t\tawait repo.recordHit(id);\n\t\t} catch (error) {\n\t\t\tconsole.error(\"[emdash:redirects] failed to record redirect hit:\", error);\n\t\t}\n\t});\n}\n\ninterface RedirectMatch {\n\tredirect: RedirectRule;\n\tdestination: string;\n}\n\n/** Exact rules first, with or without a trailing slash, then patterns in precedence order. */\nfunction matchRedirect(cached: CachedRedirects, pathname: string): RedirectMatch | null {\n\tlet exact = cached.exact.get(pathname);\n\tif (!exact && pathname.length > 1) {\n\t\tconst alt = pathname.endsWith(\"/\") ? pathname.slice(0, -1) : `${pathname}/`;\n\t\texact = cached.exact.get(alt);\n\t}\n\tif (exact) return { redirect: exact, destination: exact.destination };\n\treturn matchCachedPatterns(cached.patterns, pathname);\n}\n\n/** The response for a matched rule, or null when its destination is not safe to send. */\nfunction redirectResponse(\n\tcontext: APIContext,\n\trepo: RedirectRepository,\n\t{ redirect, destination }: RedirectMatch,\n): Response | null {\n\t// Terminal statuses (410 Gone / 451): serve the status directly,\n\t// with no Location header.\n\tif (isTerminalStatus(redirect.type)) {\n\t\trecordHitInBackground(repo, redirect.id);\n\t\treturn new Response(null, { status: redirect.type });\n\t}\n\tif (!isSiteRelativeDestination(destination)) {\n\t\twarnUnsafeDestination(redirect.id);\n\t\treturn null;\n\t}\n\trecordHitInBackground(repo, redirect.id);\n\tconst code = isRedirectCode(redirect.type) ? redirect.type : 301;\n\treturn context.redirect(destination, code);\n}\n\n/** Whether Astro's route cache will store the response: it does once a max age or a tag is set. */\nfunction routeCacheStores(cache: APIContext[\"cache\"] | undefined): boolean {\n\tif (!cache?.enabled) return false;\n\tconst { maxAge, tags } = cache.options;\n\treturn maxAge !== undefined || (tags?.length ?? 0) > 0;\n}\n\nexport const onRequest = defineMiddleware(async (context, next) => {\n\tconst { pathname } = context.url;\n\n\t// Skip internal paths and static assets\n\tif (SKIP_PREFIXES.some((prefix) => pathname.startsWith(prefix))) {\n\t\treturn next();\n\t}\n\tif (ASSET_EXTENSION.test(pathname)) {\n\t\treturn next();\n\t}\n\n\t// Public visitors hit the runtime's anonymous fast path, which intentionally\n\t// omits `db` from `locals.emdash` to keep the public render boundary minimal\n\t// (issue #808). Fall back to `getDb()`, which transparently returns the\n\t// per-request scoped db (set in ALS by the runtime middleware) or the\n\t// singleton — same path the loader and template helpers use.\n\tlet db = context.locals.emdash?.db;\n\tif (!db) {\n\t\ttry {\n\t\t\tdb = await getDb();\n\t\t} catch {\n\t\t\treturn next();\n\t\t}\n\t}\n\n\ttry {\n\t\tconst repo = new RedirectRepository(db);\n\t\tconst source = createRedirectSource(db);\n\t\tconst routeCache: APIContext[\"cache\"] | undefined = context.cache;\n\n\t\t// One query loads the published rules into the cache; warm requests\n\t\t// issue zero queries, and an expired cache checks the published version\n\t\t// in the background. Empty-redirect sites cache an empty Map + array.\n\t\t// A response the route cache stores is served to every visitor until it\n\t\t// is purged, so before one is returned the rules are verified current.\n\t\tlet cached = await loadCachedRedirects(source);\n\t\tlet match = matchRedirect(cached, pathname);\n\t\tlet verified = false;\n\t\tif (match && routeCacheStores(routeCache)) {\n\t\t\tcached = await loadCachedRedirects(source, { verify: true });\n\t\t\tverified = true;\n\t\t\tmatch = matchRedirect(cached, pathname);\n\t\t}\n\t\tif (match) return redirectResponse(context, repo, match) ?? next();\n\n\t\t// No redirect matched -- proceed and check for 404\n\t\tconst response = await next();\n\n\t\t// Keep a 404 out of the route cache: publishing the missing entry later\n\t\t// purges content tags, not the missed path, so a cached 404 would outlive\n\t\t// the fix. Astro has no cache handle for URLs that match no route, but a\n\t\t// page answering a content miss with Astro.rewrite(\"/404\") has one.\n\t\tif (response.status === 404) {\n\t\t\trouteCache?.set(false);\n\t\t}\n\n\t\tif (!verified && routeCacheStores(routeCache)) {\n\t\t\tconst current = await loadCachedRedirects(source, { verify: true }).catch(() => cached);\n\t\t\tconst late = current === cached ? null : matchRedirect(current, pathname);\n\t\t\tconst redirected = late && redirectResponse(context, repo, late);\n\t\t\tif (redirected) {\n\t\t\t\trouteCache?.set(false);\n\t\t\t\t// Finish the discarded render instead of cancelling it: a render cut off\n\t\t\t\t// with its request never settles an isolate-wide fetch it started, and\n\t\t\t\t// every later render awaiting that fetch hangs.\n\t\t\t\tafter(() => response.body?.pipeTo(new WritableStream()));\n\t\t\t\treturn redirected;\n\t\t\t}\n\t\t}\n\n\t\t// Log misses under the path the visitor requested.\n\t\t// Two shapes count as a miss: a 404 response (an unmatched route, or a\n\t\t// page answering a content miss with Astro.rewrite(\"/404\")), and a\n\t\t// matched route answering a content miss with a redirect to /404 —\n\t\t// there the missed path exists only on this first pass, before the\n\t\t// browser follows the redirect. The error page itself is never logged: /404\n\t\t// answers 404 by design and carries no path information.\n\t\tconst location = response.headers.get(\"location\");\n\t\tconst missedByRedirect =\n\t\t\tisRedirectCode(response.status) && (location === \"/404\" || location === \"/404/\");\n\t\tconst missedDirectly = response.status === 404 && pathname !== \"/404\" && pathname !== \"/404/\";\n\t\tif (missedDirectly || missedByRedirect) {\n\t\t\tconst referrer = context.request.headers.get(\"referer\") ?? null;\n\t\t\tconst userAgent = context.request.headers.get(\"user-agent\") ?? null;\n\t\t\tafter(async () => {\n\t\t\t\ttry {\n\t\t\t\t\tawait repo.log404({\n\t\t\t\t\t\tpath: pathname,\n\t\t\t\t\t\treferrer,\n\t\t\t\t\t\tuserAgent,\n\t\t\t\t\t});\n\t\t\t\t} catch (error) {\n\t\t\t\t\tconsole.error(\"[emdash:redirects] failed to log 404:\", error);\n\t\t\t\t}\n\t\t\t});\n\t\t}\n\n\t\treturn response;\n\t} catch {\n\t\t// If the redirects table doesn't exist yet (pre-migration), skip silently\n\t\treturn next();\n\t}\n});\n"],"mappings":";;;;;;;;;;;;;;;;;;AA6BA,MAAM,gBAAgB,CAAC,YAAY,UAAU;;AAG7C,MAAM,kBAAkB;AAIxB,SAAS,eAAe,MAAoC;AAC3D,QAAO,SAAS,OAAO,SAAS,OAAO,SAAS,OAAO,SAAS,OAAO,SAAS;;AAGjF,SAAS,sBAAsB,IAAkB;AAChD,SAAQ,KACP,wCAAwC,GAAG,2CAC3C;;AAGF,SAAS,sBAAsB,MAA0B,IAAkB;AAC1E,OAAM,YAAY;AACjB,MAAI;AACH,SAAM,KAAK,UAAU,GAAG;WAChB,OAAO;AACf,WAAQ,MAAM,qDAAqD,MAAM;;GAEzE;;;AASH,SAAS,cAAc,QAAyB,UAAwC;CACvF,IAAI,QAAQ,OAAO,MAAM,IAAI,SAAS;AACtC,KAAI,CAAC,SAAS,SAAS,SAAS,GAAG;EAClC,MAAM,MAAM,SAAS,SAAS,IAAI,GAAG,SAAS,MAAM,GAAG,GAAG,GAAG,GAAG,SAAS;AACzE,UAAQ,OAAO,MAAM,IAAI,IAAI;;AAE9B,KAAI,MAAO,QAAO;EAAE,UAAU;EAAO,aAAa,MAAM;EAAa;AACrE,QAAO,oBAAoB,OAAO,UAAU,SAAS;;;AAItD,SAAS,iBACR,SACA,MACA,EAAE,UAAU,eACM;AAGlB,KAAI,iBAAiB,SAAS,KAAK,EAAE;AACpC,wBAAsB,MAAM,SAAS,GAAG;AACxC,SAAO,IAAI,SAAS,MAAM,EAAE,QAAQ,SAAS,MAAM,CAAC;;AAErD,KAAI,CAAC,0BAA0B,YAAY,EAAE;AAC5C,wBAAsB,SAAS,GAAG;AAClC,SAAO;;AAER,uBAAsB,MAAM,SAAS,GAAG;CACxC,MAAM,OAAO,eAAe,SAAS,KAAK,GAAG,SAAS,OAAO;AAC7D,QAAO,QAAQ,SAAS,aAAa,KAAK;;;AAI3C,SAAS,iBAAiB,OAAiD;AAC1E,KAAI,CAAC,OAAO,QAAS,QAAO;CAC5B,MAAM,EAAE,QAAQ,SAAS,MAAM;AAC/B,QAAO,WAAW,WAAc,MAAM,UAAU,KAAK;;AAGtD,MAAa,YAAY,iBAAiB,OAAO,SAAS,SAAS;CAClE,MAAM,EAAE,aAAa,QAAQ;AAG7B,KAAI,cAAc,MAAM,WAAW,SAAS,WAAW,OAAO,CAAC,CAC9D,QAAO,MAAM;AAEd,KAAI,gBAAgB,KAAK,SAAS,CACjC,QAAO,MAAM;CAQd,IAAI,KAAK,QAAQ,OAAO,QAAQ;AAChC,KAAI,CAAC,GACJ,KAAI;AACH,OAAK,MAAM,OAAO;SACX;AACP,SAAO,MAAM;;AAIf,KAAI;EACH,MAAM,OAAO,IAAI,mBAAmB,GAAG;EACvC,MAAM,SAAS,qBAAqB,GAAG;EACvC,MAAM,aAA8C,QAAQ;EAO5D,IAAI,SAAS,MAAM,oBAAoB,OAAO;EAC9C,IAAI,QAAQ,cAAc,QAAQ,SAAS;EAC3C,IAAI,WAAW;AACf,MAAI,SAAS,iBAAiB,WAAW,EAAE;AAC1C,YAAS,MAAM,oBAAoB,QAAQ,EAAE,QAAQ,MAAM,CAAC;AAC5D,cAAW;AACX,WAAQ,cAAc,QAAQ,SAAS;;AAExC,MAAI,MAAO,QAAO,iBAAiB,SAAS,MAAM,MAAM,IAAI,MAAM;EAGlE,MAAM,WAAW,MAAM,MAAM;AAM7B,MAAI,SAAS,WAAW,IACvB,aAAY,IAAI,MAAM;AAGvB,MAAI,CAAC,YAAY,iBAAiB,WAAW,EAAE;GAC9C,MAAM,UAAU,MAAM,oBAAoB,QAAQ,EAAE,QAAQ,MAAM,CAAC,CAAC,YAAY,OAAO;GACvF,MAAM,OAAO,YAAY,SAAS,OAAO,cAAc,SAAS,SAAS;GACzE,MAAM,aAAa,QAAQ,iBAAiB,SAAS,MAAM,KAAK;AAChE,OAAI,YAAY;AACf,gBAAY,IAAI,MAAM;AAItB,gBAAY,SAAS,MAAM,OAAO,IAAI,gBAAgB,CAAC,CAAC;AACxD,WAAO;;;EAWT,MAAM,WAAW,SAAS,QAAQ,IAAI,WAAW;EACjD,MAAM,mBACL,eAAe,SAAS,OAAO,KAAK,aAAa,UAAU,aAAa;AAEzE,MADuB,SAAS,WAAW,OAAO,aAAa,UAAU,aAAa,WAChE,kBAAkB;GACvC,MAAM,WAAW,QAAQ,QAAQ,QAAQ,IAAI,UAAU,IAAI;GAC3D,MAAM,YAAY,QAAQ,QAAQ,QAAQ,IAAI,aAAa,IAAI;AAC/D,SAAM,YAAY;AACjB,QAAI;AACH,WAAM,KAAK,OAAO;MACjB,MAAM;MACN;MACA;MACA,CAAC;aACM,OAAO;AACf,aAAQ,MAAM,yCAAyC,MAAM;;KAE7D;;AAGH,SAAO;SACA;AAEP,SAAO,MAAM;;EAEb"}
+{"version":3,"file":"redirect.mjs","names":[],"sources":["../../../src/astro/middleware/redirect.ts"],"sourcesContent":["/**\n * Redirect middleware\n *\n * Intercepts incoming requests and checks for matching redirect rules.\n * Runs after runtime init (needs db) but before setup/auth (should handle\n * ALL routes, including public ones, and should be fast).\n *\n * Skip paths:\n * - /_emdash/* (admin UI, API routes, auth endpoints)\n * - /_image (Astro image optimization)\n * - Static assets (files with extensions)\n *\n * 404 logging happens post-response: if next() returns 404 and the path\n * wasn't already matched by a redirect, log it.\n */\n\nimport type { APIContext } from \"astro\";\nimport { defineMiddleware } from \"astro:middleware\";\n\nimport { after } from \"../../after.js\";\nimport { RedirectRepository } from \"../../database/repositories/redirect.js\";\nimport { getDb } from \"../../loader.js\";\nimport { createRedirectSource } from \"../../redirects/artifacts.js\";\nimport type { CachedRedirects, RedirectRule } from \"../../redirects/cache.js\";\nimport { loadCachedRedirects, matchCachedPatterns } from \"../../redirects/cache.js\";\nimport { isSiteRelativeDestination } from \"../../redirects/destination.js\";\nimport { isTerminalStatus } from \"../../redirects/status.js\";\nimport { peekRequestCache } from \"../../request-cache.js\";\nimport {\n\tgetRequestContext,\n\trunWithContext,\n\ttype EmDashRequestContext,\n} from \"../../request-context.js\";\nimport { invalidateSiteSettingsSnapshot, peekSiteSettingsSnapshot } from \"../../settings/index.js\";\n\n/** Paths that should never be intercepted by redirects */\nconst SKIP_PREFIXES = [\"/_emdash\", \"/_image\"];\n\n/** Static asset extensions -- don't redirect file requests */\nconst ASSET_EXTENSION = /\\.\\w{1,10}$/;\n\ntype RedirectCode = 301 | 302 | 303 | 307 | 308;\n\nfunction isRedirectCode(code: number): code is RedirectCode {\n\treturn code === 301 || code === 302 || code === 303 || code === 307 || code === 308;\n}\n\nfunction warnUnsafeDestination(id: string): void {\n\tconsole.warn(\n\t\t`[emdash:redirects] Skipping redirect ${id}: destination is not a site-relative path`,\n\t);\n}\n\nfunction recordHitInBackground(repo: RedirectRepository, id: string): void {\n\tafter(async () => {\n\t\ttry {\n\t\t\tawait repo.recordHit(id);\n\t\t} catch (error) {\n\t\t\tconsole.error(\"[emdash:redirects] failed to record redirect hit:\", error);\n\t\t}\n\t});\n}\n\ninterface RedirectMatch {\n\tredirect: RedirectRule;\n\tdestination: string;\n}\n\n/** Exact rules first, with or without a trailing slash, then patterns in precedence order. */\nfunction matchRedirect(cached: CachedRedirects, pathname: string): RedirectMatch | null {\n\tlet exact = cached.exact.get(pathname);\n\tif (!exact && pathname.length > 1) {\n\t\tconst alt = pathname.endsWith(\"/\") ? pathname.slice(0, -1) : `${pathname}/`;\n\t\texact = cached.exact.get(alt);\n\t}\n\tif (exact) return { redirect: exact, destination: exact.destination };\n\treturn matchCachedPatterns(cached.patterns, pathname);\n}\n\n/** The response for a matched rule, or null when its destination is not safe to send. */\nfunction redirectResponse(\n\tcontext: APIContext,\n\trepo: RedirectRepository,\n\t{ redirect, destination }: RedirectMatch,\n): Response | null {\n\t// Terminal statuses (410 Gone / 451): serve the status directly,\n\t// with no Location header.\n\tif (isTerminalStatus(redirect.type)) {\n\t\trecordHitInBackground(repo, redirect.id);\n\t\treturn new Response(null, { status: redirect.type });\n\t}\n\tif (!isSiteRelativeDestination(destination)) {\n\t\twarnUnsafeDestination(redirect.id);\n\t\treturn null;\n\t}\n\trecordHitInBackground(repo, redirect.id);\n\tconst code = isRedirectCode(redirect.type) ? redirect.type : 301;\n\treturn context.redirect(destination, code);\n}\n\n/** Whether Astro's route cache will store the response: it does once a max age or a tag is set. */\nfunction routeCacheStores(cache: APIContext[\"cache\"] | undefined): boolean {\n\tif (!cache?.enabled) return false;\n\tconst { maxAge, tags } = cache.options;\n\treturn maxAge !== undefined || (tags?.length ?? 0) > 0;\n}\n\nexport const onRequest = defineMiddleware(async (context, next) => {\n\tconst { pathname } = context.url;\n\n\t// Skip internal paths and static assets\n\tif (SKIP_PREFIXES.some((prefix) => pathname.startsWith(prefix))) {\n\t\treturn next();\n\t}\n\tif (ASSET_EXTENSION.test(pathname)) {\n\t\treturn next();\n\t}\n\n\t// Public visitors hit the runtime's anonymous fast path, which intentionally\n\t// omits `db` from `locals.emdash` to keep the public render boundary minimal\n\t// (issue #808). Fall back to `getDb()`, which transparently returns the\n\t// per-request scoped db (set in ALS by the runtime middleware) or the\n\t// singleton — same path the loader and template helpers use.\n\tlet db = context.locals.emdash?.db;\n\tif (!db) {\n\t\ttry {\n\t\t\tdb = await getDb();\n\t\t} catch {\n\t\t\treturn next();\n\t\t}\n\t}\n\n\tconst routeCache: APIContext[\"cache\"] | undefined = context.cache;\n\tconst renderedSettings = new Set<string>();\n\tlet currentSettingsVersion: string | null | undefined;\n\tconst checkSettings = () => {\n\t\tif (currentSettingsVersion === undefined || renderedSettings.size === 0) return;\n\t\tif (currentSettingsVersion === null) {\n\t\t\trouteCache?.set(false);\n\t\t} else if ([...renderedSettings].some((v) => v !== currentSettingsVersion)) {\n\t\t\trouteCache?.set(false);\n\t\t\tinvalidateSiteSettingsSnapshot();\n\t\t}\n\t};\n\tconst requestSettings: NonNullable<EmDashRequestContext[\"siteSettings\"]> = {\n\t\tonRead(version) {\n\t\t\trenderedSettings.add(version);\n\t\t\tcheckSettings();\n\t\t},\n\t};\n\tconst finalizeSettings = async () => {\n\t\tif (!routeCacheStores(routeCache)) return;\n\t\tif (requestSettings.live) {\n\t\t\tif (currentSettingsVersion == null) routeCache?.set(false);\n\t\t\treturn;\n\t\t}\n\t\tconst prefetched =\n\t\t\tawait peekRequestCache<NonNullable<ReturnType<typeof peekSiteSettingsSnapshot>>>(\n\t\t\t\t\"siteSettingsSnapshot\",\n\t\t\t);\n\t\tif (prefetched) requestSettings.onRead(prefetched.version);\n\t\tconst snapshot = peekSiteSettingsSnapshot();\n\t\t// Layouts and head components can first read settings after cache headers\n\t\t// are sent. Pin the verified snapshot before handing off the stream.\n\t\tif (currentSettingsVersion == null) {\n\t\t\trouteCache?.set(false);\n\t\t} else if (!snapshot) {\n\t\t\trequestSettings.version = currentSettingsVersion;\n\t\t} else if (snapshot.version !== currentSettingsVersion) {\n\t\t\trouteCache?.set(false);\n\t\t\tinvalidateSiteSettingsSnapshot();\n\t\t} else {\n\t\t\trequestSettings.snapshot = snapshot;\n\t\t}\n\t};\n\tconst run = async () => {\n\t\tlet repo: RedirectRepository | undefined;\n\t\tlet source: ReturnType<typeof createRedirectSource> | undefined;\n\t\tlet cached: CachedRedirects | undefined;\n\t\tlet match: RedirectMatch | null = null;\n\t\tlet verified = false;\n\n\t\ttry {\n\t\t\trepo = new RedirectRepository(db);\n\t\t\tsource = createRedirectSource(\n\t\t\t\tdb,\n\t\t\t\trouteCache?.enabled\n\t\t\t\t\t? (version) => {\n\t\t\t\t\t\t\tcurrentSettingsVersion = version;\n\t\t\t\t\t\t\tcheckSettings();\n\t\t\t\t\t\t}\n\t\t\t\t\t: undefined,\n\t\t\t);\n\n\t\t\t// One query loads the published rules into the cache; warm requests\n\t\t\t// issue zero queries, and an expired cache checks the published version\n\t\t\t// in the background. Empty-redirect sites cache an empty Map + array.\n\t\t\t// A response the route cache stores is served to every visitor until it\n\t\t\t// is purged, so before one is returned the rules are verified current.\n\t\t\tcached = await loadCachedRedirects(source);\n\t\t\tmatch = matchRedirect(cached, pathname);\n\t\t\tif (match && routeCacheStores(routeCache)) {\n\t\t\t\tcached = await loadCachedRedirects(source, { verify: true });\n\t\t\t\tverified = true;\n\t\t\t\tmatch = matchRedirect(cached, pathname);\n\t\t\t}\n\t\t} catch {\n\t\t\t// If the redirects table doesn't exist yet (pre-migration), skip silently.\n\t\t\t// Without a freshness check, a settings snapshot must not be edge-cached.\n\t\t\tcurrentSettingsVersion = null;\n\t\t\trouteCache?.set(false);\n\t\t\treturn next();\n\t\t}\n\n\t\tif (match) {\n\t\t\tconst redirected = redirectResponse(context, repo, match);\n\t\t\tif (redirected) return redirected;\n\t\t}\n\n\t\t// No redirect matched -- proceed and check for 404.\n\t\tconst response = await next();\n\n\t\t// Post-response work must not re-run the route either. Swallow errors here\n\t\t// and return the response the route already produced.\n\t\ttry {\n\t\t\t// Keep a 404 out of the route cache: publishing the missing entry later\n\t\t\t// purges content tags, not the missed path, so a cached 404 would outlive\n\t\t\t// the fix. Astro has no cache handle for URLs that match no route, but a\n\t\t\t// page answering a content miss with Astro.rewrite(\"/404\") has one.\n\t\t\tif (response.status === 404) {\n\t\t\t\trouteCache?.set(false);\n\t\t\t}\n\n\t\t\tif (!verified && routeCacheStores(routeCache) && source && cached) {\n\t\t\t\tcurrentSettingsVersion = undefined;\n\t\t\t\tconst current = await loadCachedRedirects(source, { verify: true }).catch(() => cached);\n\t\t\t\tif (currentSettingsVersion === undefined) {\n\t\t\t\t\tcurrentSettingsVersion = null;\n\t\t\t\t\tcheckSettings();\n\t\t\t\t}\n\t\t\t\tconst late = current === cached ? null : matchRedirect(current, pathname);\n\t\t\t\tconst redirected = late && redirectResponse(context, repo, late);\n\t\t\t\tif (redirected) {\n\t\t\t\t\trouteCache?.set(false);\n\t\t\t\t\t// Finish the discarded render instead of cancelling it: a render cut off\n\t\t\t\t\t// with its request never settles an isolate-wide fetch it started, and\n\t\t\t\t\t// every later render awaiting that fetch hangs.\n\t\t\t\t\tafter(() => response.body?.pipeTo(new WritableStream()));\n\t\t\t\t\treturn redirected;\n\t\t\t\t}\n\t\t\t}\n\n\t\t\ttry {\n\t\t\t\tawait finalizeSettings();\n\t\t\t} catch {\n\t\t\t\trouteCache?.set(false);\n\t\t\t}\n\n\t\t\t// Log misses under the path the visitor requested.\n\t\t\t// Two shapes count as a miss: a 404 response (an unmatched route, or a\n\t\t\t// page answering a content miss with Astro.rewrite(\"/404\")), and a\n\t\t\t// matched route answering a content miss with a redirect to /404 —\n\t\t\t// there the missed path exists only on this first pass, before the\n\t\t\t// browser follows the redirect. The error page itself is never logged: /404\n\t\t\t// answers 404 by design and carries no path information.\n\t\t\tconst location = response.headers.get(\"location\");\n\t\t\tconst missedByRedirect =\n\t\t\t\tisRedirectCode(response.status) && (location === \"/404\" || location === \"/404/\");\n\t\t\tconst missedDirectly = response.status === 404 && pathname !== \"/404\" && pathname !== \"/404/\";\n\t\t\tif (missedDirectly || missedByRedirect) {\n\t\t\t\tconst referrer = context.request.headers.get(\"referer\") ?? null;\n\t\t\t\tconst userAgent = context.request.headers.get(\"user-agent\") ?? null;\n\t\t\t\tafter(async () => {\n\t\t\t\t\ttry {\n\t\t\t\t\t\tawait repo.log404({\n\t\t\t\t\t\t\tpath: pathname,\n\t\t\t\t\t\t\treferrer,\n\t\t\t\t\t\t\tuserAgent,\n\t\t\t\t\t\t});\n\t\t\t\t\t} catch (error) {\n\t\t\t\t\t\tconsole.error(\"[emdash:redirects] failed to log 404:\", error);\n\t\t\t\t\t}\n\t\t\t\t});\n\t\t\t}\n\t\t} catch (error) {\n\t\t\tconsole.error(\"[emdash:redirects] post-response step failed:\", error);\n\t\t}\n\n\t\treturn response;\n\t};\n\tif (!routeCache?.enabled) return run();\n\tconst parent = getRequestContext();\n\tif (parent) {\n\t\tparent.siteSettings = requestSettings;\n\t\treturn run();\n\t}\n\treturn runWithContext({ editMode: false, siteSettings: requestSettings }, run);\n});\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAoCA,MAAM,gBAAgB,CAAC,YAAY,UAAU;;AAG7C,MAAM,kBAAkB;AAIxB,SAAS,eAAe,MAAoC;AAC3D,QAAO,SAAS,OAAO,SAAS,OAAO,SAAS,OAAO,SAAS,OAAO,SAAS;;AAGjF,SAAS,sBAAsB,IAAkB;AAChD,SAAQ,KACP,wCAAwC,GAAG,2CAC3C;;AAGF,SAAS,sBAAsB,MAA0B,IAAkB;AAC1E,OAAM,YAAY;AACjB,MAAI;AACH,SAAM,KAAK,UAAU,GAAG;WAChB,OAAO;AACf,WAAQ,MAAM,qDAAqD,MAAM;;GAEzE;;;AASH,SAAS,cAAc,QAAyB,UAAwC;CACvF,IAAI,QAAQ,OAAO,MAAM,IAAI,SAAS;AACtC,KAAI,CAAC,SAAS,SAAS,SAAS,GAAG;EAClC,MAAM,MAAM,SAAS,SAAS,IAAI,GAAG,SAAS,MAAM,GAAG,GAAG,GAAG,GAAG,SAAS;AACzE,UAAQ,OAAO,MAAM,IAAI,IAAI;;AAE9B,KAAI,MAAO,QAAO;EAAE,UAAU;EAAO,aAAa,MAAM;EAAa;AACrE,QAAO,oBAAoB,OAAO,UAAU,SAAS;;;AAItD,SAAS,iBACR,SACA,MACA,EAAE,UAAU,eACM;AAGlB,KAAI,iBAAiB,SAAS,KAAK,EAAE;AACpC,wBAAsB,MAAM,SAAS,GAAG;AACxC,SAAO,IAAI,SAAS,MAAM,EAAE,QAAQ,SAAS,MAAM,CAAC;;AAErD,KAAI,CAAC,0BAA0B,YAAY,EAAE;AAC5C,wBAAsB,SAAS,GAAG;AAClC,SAAO;;AAER,uBAAsB,MAAM,SAAS,GAAG;CACxC,MAAM,OAAO,eAAe,SAAS,KAAK,GAAG,SAAS,OAAO;AAC7D,QAAO,QAAQ,SAAS,aAAa,KAAK;;;AAI3C,SAAS,iBAAiB,OAAiD;AAC1E,KAAI,CAAC,OAAO,QAAS,QAAO;CAC5B,MAAM,EAAE,QAAQ,SAAS,MAAM;AAC/B,QAAO,WAAW,WAAc,MAAM,UAAU,KAAK;;AAGtD,MAAa,YAAY,iBAAiB,OAAO,SAAS,SAAS;CAClE,MAAM,EAAE,aAAa,QAAQ;AAG7B,KAAI,cAAc,MAAM,WAAW,SAAS,WAAW,OAAO,CAAC,CAC9D,QAAO,MAAM;AAEd,KAAI,gBAAgB,KAAK,SAAS,CACjC,QAAO,MAAM;CAQd,IAAI,KAAK,QAAQ,OAAO,QAAQ;AAChC,KAAI,CAAC,GACJ,KAAI;AACH,OAAK,MAAM,OAAO;SACX;AACP,SAAO,MAAM;;CAIf,MAAM,aAA8C,QAAQ;CAC5D,MAAM,mCAAmB,IAAI,KAAa;CAC1C,IAAI;CACJ,MAAM,sBAAsB;AAC3B,MAAI,2BAA2B,UAAa,iBAAiB,SAAS,EAAG;AACzE,MAAI,2BAA2B,KAC9B,aAAY,IAAI,MAAM;WACZ,CAAC,GAAG,iBAAiB,CAAC,MAAM,MAAM,MAAM,uBAAuB,EAAE;AAC3E,eAAY,IAAI,MAAM;AACtB,mCAAgC;;;CAGlC,MAAM,kBAAqE,EAC1E,OAAO,SAAS;AACf,mBAAiB,IAAI,QAAQ;AAC7B,iBAAe;IAEhB;CACD,MAAM,mBAAmB,YAAY;AACpC,MAAI,CAAC,iBAAiB,WAAW,CAAE;AACnC,MAAI,gBAAgB,MAAM;AACzB,OAAI,0BAA0B,KAAM,aAAY,IAAI,MAAM;AAC1D;;EAED,MAAM,aACL,MAAM,iBACL,uBACA;AACF,MAAI,WAAY,iBAAgB,OAAO,WAAW,QAAQ;EAC1D,MAAM,WAAW,0BAA0B;AAG3C,MAAI,0BAA0B,KAC7B,aAAY,IAAI,MAAM;WACZ,CAAC,SACX,iBAAgB,UAAU;WAChB,SAAS,YAAY,wBAAwB;AACvD,eAAY,IAAI,MAAM;AACtB,mCAAgC;QAEhC,iBAAgB,WAAW;;CAG7B,MAAM,MAAM,YAAY;EACvB,IAAI;EACJ,IAAI;EACJ,IAAI;EACJ,IAAI,QAA8B;EAClC,IAAI,WAAW;AAEf,MAAI;AACH,UAAO,IAAI,mBAAmB,GAAG;AACjC,YAAS,qBACR,IACA,YAAY,WACR,YAAY;AACb,6BAAyB;AACzB,mBAAe;OAEf,OACH;AAOD,YAAS,MAAM,oBAAoB,OAAO;AAC1C,WAAQ,cAAc,QAAQ,SAAS;AACvC,OAAI,SAAS,iBAAiB,WAAW,EAAE;AAC1C,aAAS,MAAM,oBAAoB,QAAQ,EAAE,QAAQ,MAAM,CAAC;AAC5D,eAAW;AACX,YAAQ,cAAc,QAAQ,SAAS;;UAEjC;AAGP,4BAAyB;AACzB,eAAY,IAAI,MAAM;AACtB,UAAO,MAAM;;AAGd,MAAI,OAAO;GACV,MAAM,aAAa,iBAAiB,SAAS,MAAM,MAAM;AACzD,OAAI,WAAY,QAAO;;EAIxB,MAAM,WAAW,MAAM,MAAM;AAI7B,MAAI;AAKH,OAAI,SAAS,WAAW,IACvB,aAAY,IAAI,MAAM;AAGvB,OAAI,CAAC,YAAY,iBAAiB,WAAW,IAAI,UAAU,QAAQ;AAClE,6BAAyB;IACzB,MAAM,UAAU,MAAM,oBAAoB,QAAQ,EAAE,QAAQ,MAAM,CAAC,CAAC,YAAY,OAAO;AACvF,QAAI,2BAA2B,QAAW;AACzC,8BAAyB;AACzB,oBAAe;;IAEhB,MAAM,OAAO,YAAY,SAAS,OAAO,cAAc,SAAS,SAAS;IACzE,MAAM,aAAa,QAAQ,iBAAiB,SAAS,MAAM,KAAK;AAChE,QAAI,YAAY;AACf,iBAAY,IAAI,MAAM;AAItB,iBAAY,SAAS,MAAM,OAAO,IAAI,gBAAgB,CAAC,CAAC;AACxD,YAAO;;;AAIT,OAAI;AACH,UAAM,kBAAkB;WACjB;AACP,gBAAY,IAAI,MAAM;;GAUvB,MAAM,WAAW,SAAS,QAAQ,IAAI,WAAW;GACjD,MAAM,mBACL,eAAe,SAAS,OAAO,KAAK,aAAa,UAAU,aAAa;AAEzE,OADuB,SAAS,WAAW,OAAO,aAAa,UAAU,aAAa,WAChE,kBAAkB;IACvC,MAAM,WAAW,QAAQ,QAAQ,QAAQ,IAAI,UAAU,IAAI;IAC3D,MAAM,YAAY,QAAQ,QAAQ,QAAQ,IAAI,aAAa,IAAI;AAC/D,UAAM,YAAY;AACjB,SAAI;AACH,YAAM,KAAK,OAAO;OACjB,MAAM;OACN;OACA;OACA,CAAC;cACM,OAAO;AACf,cAAQ,MAAM,yCAAyC,MAAM;;MAE7D;;WAEK,OAAO;AACf,WAAQ,MAAM,iDAAiD,MAAM;;AAGtE,SAAO;;AAER,KAAI,CAAC,YAAY,QAAS,QAAO,KAAK;CACtC,MAAM,SAAS,mBAAmB;AAClC,KAAI,QAAQ;AACX,SAAO,eAAe;AACtB,SAAO,KAAK;;AAEb,QAAO,eAAe;EAAE,UAAU;EAAO,cAAc;EAAiB,EAAE,IAAI;EAC7E"}

package/dist/astro/middleware/request-context.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"request-context.d.mts","names":[],"sources":["../../../src/astro/middleware/request-context.ts"],"mappings":";;;;;;AAiLA;;;;;;;;;;;;cAAa,SAAA,EA8LX,KAAA,CA9LoB,iBAAA"}
+{"version":3,"file":"request-context.d.mts","names":[],"sources":["../../../src/astro/middleware/request-context.ts"],"mappings":";;;;;;AAiLA;;;;;;;;;;;;cAAa,SAAA,EA+LX,KAAA,CA/LoB,iBAAA"}

package/dist/astro/middleware/request-context.mjs

@@ -3,9 +3,9 @@ import { getRequestContext, runWithContext } from "../../request-context.mjs";
 import "../../options-DhrI7eMv.mjs";
 import { a as resolveSecretsCached } from "../../secrets-Cc_O3Kp-.mjs";
 import "../../base64-BQBZwXCx.mjs";
-import { n as parseContentId, r as verifyPreviewToken } from "../../tokens-BnhSnGwJ.mjs";
-import { t as escapeHtml } from "../../escape-lsNq38PP.mjs";
-import { n as generateVisualEditingActionToken, t as VISUAL_ACTION_TOKEN_INVALID } from "../../action-token-SK8zyN7w.mjs";
+import { n as parseContentId, r as verifyPreviewToken } from "../../tokens-U5vzgSrM.mjs";
+import { t as escapeHtml } from "../../escape-BfbDyuQ-.mjs";
+import { n as generateVisualEditingActionToken, t as VISUAL_ACTION_TOKEN_INVALID } from "../../action-token-B1ds4laA.mjs";
 import { defineMiddleware } from "astro:middleware";
 import virtualConfig from "virtual:emdash/config";
 import { loadVisualEditingToolbarLabels } from "@emdash-cms/admin/locales/server";
@@ -1865,11 +1865,15 @@ const onRequest = defineMiddleware(async (context, next) => {
 			const response = await next();
 			return toolbarMode === "client" ? injectBootstrap(response) : response;
 		};
-		if (virtualConfig?.objectCacheEnabled && context.cache?.enabled) return runWithContext({
-			...getRequestContext(),
-			editMode: false,
-			routeCacheFill: true
-		}, render);
+		if (virtualConfig?.objectCacheEnabled && context.cache?.enabled) {
+			const parent = getRequestContext();
+			if (parent?.siteSettings) parent.siteSettings.live = true;
+			return runWithContext({
+				...parent,
+				editMode: false,
+				routeCacheFill: true
+			}, render);
+		}
 		return render();
 	}
 	const editMode = hasEditCookie && isEditor;