emdash 1.3.0 → 1.4.0

package/dist/{redirect-DiS_3mA4.mjs → redirect-DjLdw427.mjs}

@@ -1,8 +1,8 @@
-import { o as currentTimestampValue, u as isPostgres } from "./dialect-helpers-7_IqPdh9.mjs";
-import { c as decodeCursor, l as encodeCursor } from "./types-D2NEXtgB.mjs";
-import { t as interpolateUrlPattern } from "./resolve-D-kqyKns.mjs";
-import { t as isSiteRelativeDestination } from "./destination-r2zIAZ2S.mjs";
-import { i as matchPattern, n as interpolateDestination, o as validatePattern, r as isPattern, t as compilePattern } from "./patterns-CMNnYCgf.mjs";
+import { o as currentTimestampValue, u as isPostgres } from "./dialect-helpers-B1XN2HGB.mjs";
+import { l as decodeCursor, u as encodeCursor } from "./types-DwhEvIVb.mjs";
+import { t as interpolateUrlPattern } from "./resolve-DdNXBJSr.mjs";
+import { t as isSiteRelativeDestination } from "./destination-DR3IHjmy.mjs";
+import { i as matchPattern, n as interpolateDestination, o as validatePattern, r as isPattern, t as compilePattern } from "./patterns-CryGz_EV.mjs";
 import { sql } from "kysely";
 import { ulid } from "ulidx";
 
@@ -420,4 +420,4 @@ var RedirectRepository = class RedirectRepository {
 
 //#endregion
 export { RedirectWriteBusyError as n, RedirectRepository as t };
-//# sourceMappingURL=redirect-DiS_3mA4.mjs.map
+//# sourceMappingURL=redirect-DjLdw427.mjs.map

package/dist/{redirect-DiS_3mA4.mjs.map → redirect-DjLdw427.mjs.map}

@@ -1 +1 @@
-{"version":3,"file":"redirect-DiS_3mA4.mjs","names":[],"sources":["../src/database/repositories/redirect.ts"],"sourcesContent":["import { sql, type Kysely } from \"kysely\";\nimport { ulid } from \"ulidx\";\n\nimport { interpolateUrlPattern } from \"../../i18n/resolve.js\";\nimport { isSiteRelativeDestination } from \"../../redirects/destination.js\";\nimport {\n\tcompilePattern,\n\tmatchPattern,\n\tinterpolateDestination,\n\tisPattern,\n\tvalidatePattern,\n} from \"../../redirects/patterns.js\";\nimport { currentTimestampValue, isPostgres } from \"../dialect-helpers.js\";\nimport type { Database, RedirectTable } from \"../types.js\";\nimport { encodeCursor, decodeCursor, type FindManyResult } from \"./types.js\";\n\n// ---------------------------------------------------------------------------\n// Bounded 404 logging\n// ---------------------------------------------------------------------------\n\n/**\n * Hard cap on rows stored in `_emdash_404_log`. Scheduled maintenance evicts\n * the oldest rows by `last_seen_at` without adding a read-amplifying count to\n * the anonymous request path.\n */\nexport const MAX_404_LOG_ROWS = 10_000;\n\n/** Max stored length for the `Referer` header — truncated on insert. */\nexport const REFERRER_MAX_LENGTH = 512;\n\n/** Max stored length for the `User-Agent` header — truncated on insert. */\nexport const USER_AGENT_MAX_LENGTH = 256;\n\n/** Pattern to escape LIKE wildcards: %, _, and backslash */\nconst LIKE_ESCAPE_RE = /[\\\\%_]/g;\n\n/**\n * Truncate a header-derived string to `max` chars, preserving `null`/`undefined`\n * as `null`. Empty strings stay empty (the caller decides whether to coerce).\n */\nfunction truncateOrNull(value: string | null | undefined, max: number): string | null {\n\tif (value === null || value === undefined) return null;\n\treturn value.length > max ? value.slice(0, max) : value;\n}\n\n// ---------------------------------------------------------------------------\n// Types\n// ---------------------------------------------------------------------------\n\nexport interface Redirect {\n\tid: string;\n\tsource: string;\n\tdestination: string;\n\ttype: number;\n\tisPattern: boolean;\n\tenabled: boolean;\n\thits: number;\n\tlastHitAt: string | null;\n\tgroupName: string | null;\n\tauto: boolean;\n\tcreatedAt: string;\n\tupdatedAt: string;\n}\n\nexport interface CreateRedirectInput {\n\tsource: string;\n\tdestination: string;\n\ttype?: number;\n\tisPattern?: boolean;\n\tenabled?: boolean;\n\tgroupName?: string | null;\n\tauto?: boolean;\n}\n\nexport interface UpdateRedirectInput {\n\tsource?: string;\n\tdestination?: string;\n\ttype?: number;\n\tisPattern?: boolean;\n\tenabled?: boolean;\n\tgroupName?: string | null;\n}\n\nexport interface NotFoundEntry {\n\tid: string;\n\tpath: string;\n\treferrer: string | null;\n\tuserAgent: string | null;\n\tip: string | null;\n\tcreatedAt: string;\n}\n\nexport interface NotFoundSummary {\n\tpath: string;\n\tcount: number;\n\tlastSeen: string;\n\ttopReferrer: string | null;\n}\n\nexport interface RedirectMatch {\n\tredirect: Redirect;\n\tresolvedDestination: string;\n}\n\nexport interface VersionedRedirectRecord {\n\tredirect: Redirect;\n\tconfigRevision: string;\n}\n\nexport class RedirectWriteBusyError extends Error {\n\toverride readonly name = \"RedirectWriteBusyError\";\n}\n\nexport interface RedirectWriteFence {\n\ttoken: string;\n\tgeneration: number;\n}\n\nconst REDIRECT_WRITE_LOCK_ID = 1;\nconst REDIRECT_WRITE_LEASE_MS = 30_000;\nconst REDIRECT_WRITE_LOCK_ATTEMPTS = 5;\nconst POSTGRES_REDIRECT_LOCK_KEY = 1_168_624_763;\n\n// ---------------------------------------------------------------------------\n// Row mapping\n// ---------------------------------------------------------------------------\n\nfunction rowToRedirect(row: RedirectTable): Redirect {\n\treturn {\n\t\tid: row.id,\n\t\tsource: row.source,\n\t\tdestination: row.destination,\n\t\ttype: row.type,\n\t\tisPattern: row.is_pattern === 1,\n\t\tenabled: row.enabled === 1,\n\t\thits: row.hits,\n\t\tlastHitAt: row.last_hit_at,\n\t\tgroupName: row.group_name,\n\t\tauto: row.auto === 1,\n\t\tcreatedAt: row.created_at,\n\t\tupdatedAt: row.updated_at,\n\t};\n}\n\n// ---------------------------------------------------------------------------\n// Repository\n// ---------------------------------------------------------------------------\n\nexport class RedirectRepository {\n\tconstructor(readonly db: Kysely<Database>) {}\n\n\t// --- CRUD ---------------------------------------------------------------\n\n\tasync findById(id: string): Promise<Redirect | null> {\n\t\treturn (await this.findVersionedById(id))?.redirect ?? null;\n\t}\n\n\tasync findVersionedById(id: string): Promise<VersionedRedirectRecord | null> {\n\t\tconst row = await this.db\n\t\t\t.selectFrom(\"_emdash_redirects\")\n\t\t\t.selectAll()\n\t\t\t.where(\"id\", \"=\", id)\n\t\t\t.executeTakeFirst();\n\t\treturn row ? { redirect: rowToRedirect(row), configRevision: row.config_revision } : null;\n\t}\n\n\tasync findBySource(source: string): Promise<Redirect | null> {\n\t\tconst row = await this.db\n\t\t\t.selectFrom(\"_emdash_redirects\")\n\t\t\t.selectAll()\n\t\t\t.where(\"source\", \"=\", source)\n\t\t\t.executeTakeFirst();\n\t\treturn row ? rowToRedirect(row) : null;\n\t}\n\n\tasync findConfigRevision(id: string): Promise<string | null> {\n\t\tconst row = await this.db\n\t\t\t.selectFrom(\"_emdash_redirects\")\n\t\t\t.select(\"config_revision\")\n\t\t\t.where(\"id\", \"=\", id)\n\t\t\t.executeTakeFirst();\n\t\treturn row?.config_revision ?? null;\n\t}\n\n\tasync withWriteLock<T>(\n\t\taction: (fence: RedirectWriteFence, repository: RedirectRepository) => Promise<T>,\n\t): Promise<T> {\n\t\tif (isPostgres(this.db)) {\n\t\t\tif (this.db.isTransaction) {\n\t\t\t\tawait sql`SELECT pg_advisory_xact_lock(${POSTGRES_REDIRECT_LOCK_KEY})`.execute(this.db);\n\t\t\t\treturn this.withLease(action);\n\t\t\t}\n\t\t\treturn this.db.transaction().execute(async (transaction) => {\n\t\t\t\tawait sql`SELECT pg_advisory_xact_lock(${POSTGRES_REDIRECT_LOCK_KEY})`.execute(transaction);\n\t\t\t\tconst repository = new RedirectRepository(transaction);\n\t\t\t\treturn repository.withLease(action);\n\t\t\t});\n\t\t}\n\t\treturn this.withLease(action);\n\t}\n\n\tprivate async withLease<T>(\n\t\taction: (fence: RedirectWriteFence, repository: RedirectRepository) => Promise<T>,\n\t): Promise<T> {\n\t\tconst token = ulid();\n\t\tlet fence: RedirectWriteFence | undefined;\n\t\tfor (let attempt = 0; attempt < REDIRECT_WRITE_LOCK_ATTEMPTS; attempt++) {\n\t\t\tconst now = Date.now();\n\t\t\tconst result = await this.db\n\t\t\t\t.updateTable(\"_emdash_redirect_write_lock\")\n\t\t\t\t.set({\n\t\t\t\t\ttoken,\n\t\t\t\t\texpires_at: now + REDIRECT_WRITE_LEASE_MS,\n\t\t\t\t\tgeneration: sql`generation + 1`,\n\t\t\t\t})\n\t\t\t\t.where(\"id\", \"=\", REDIRECT_WRITE_LOCK_ID)\n\t\t\t\t.where((eb) => eb.or([eb(\"token\", \"=\", \"\"), eb(\"expires_at\", \"<\", now)]))\n\t\t\t\t.returning(\"generation\")\n\t\t\t\t.executeTakeFirst();\n\t\t\tif (result) {\n\t\t\t\tfence = { token, generation: result.generation };\n\t\t\t\tbreak;\n\t\t\t}\n\t\t\tawait new Promise((resolve) => setTimeout(resolve, 10 * 2 ** attempt));\n\t\t}\n\t\tif (!fence) {\n\t\t\tthrow new RedirectWriteBusyError(\"Another redirect change is in progress\");\n\t\t}\n\t\ttry {\n\t\t\treturn await action(fence, this);\n\t\t} finally {\n\t\t\ttry {\n\t\t\t\tawait this.db\n\t\t\t\t\t.updateTable(\"_emdash_redirect_write_lock\")\n\t\t\t\t\t.set({ token: \"\", expires_at: 0 })\n\t\t\t\t\t.where(\"id\", \"=\", REDIRECT_WRITE_LOCK_ID)\n\t\t\t\t\t.where(\"token\", \"=\", token)\n\t\t\t\t\t.execute();\n\t\t\t} catch (error) {\n\t\t\t\tconsole.error(\"Failed to release redirect write lock:\", error);\n\t\t\t}\n\t\t}\n\t}\n\n\tasync findMany(opts: {\n\t\tcursor?: string;\n\t\tlimit?: number;\n\t\tsearch?: string;\n\t\tgroup?: string;\n\t\tenabled?: boolean;\n\t\tauto?: boolean;\n\t}): Promise<FindManyResult<Redirect>> {\n\t\tconst limit = Math.min(Math.max(opts.limit ?? 50, 1), 100);\n\n\t\tlet query = this.db\n\t\t\t.selectFrom(\"_emdash_redirects\")\n\t\t\t.selectAll()\n\t\t\t.orderBy(\"created_at\", \"desc\")\n\t\t\t.orderBy(\"id\", \"desc\")\n\t\t\t.limit(limit + 1);\n\n\t\tif (opts.search) {\n\t\t\t// Escape LIKE wildcards in the search term to prevent injection.\n\t\t\t// Must include ESCAPE clause for SQLite to recognize backslash as escape char.\n\t\t\tconst escaped = opts.search.replace(LIKE_ESCAPE_RE, (c) => `\\\\${c}`);\n\t\t\tconst term = `%${escaped}%`;\n\t\t\tquery = query.where((eb) =>\n\t\t\t\teb.or([\n\t\t\t\t\tsql<boolean>`source LIKE ${term} ESCAPE '\\\\'`,\n\t\t\t\t\tsql<boolean>`destination LIKE ${term} ESCAPE '\\\\'`,\n\t\t\t\t]),\n\t\t\t);\n\t\t}\n\n\t\tif (opts.group !== undefined) {\n\t\t\tquery = query.where(\"group_name\", \"=\", opts.group);\n\t\t}\n\n\t\tif (opts.enabled !== undefined) {\n\t\t\tquery = query.where(\"enabled\", \"=\", opts.enabled ? 1 : 0);\n\t\t}\n\n\t\tif (opts.auto !== undefined) {\n\t\t\tquery = query.where(\"auto\", \"=\", opts.auto ? 1 : 0);\n\t\t}\n\n\t\tif (opts.cursor) {\n\t\t\tconst decoded = decodeCursor(opts.cursor);\n\t\t\tquery = query.where((eb) =>\n\t\t\t\teb.or([\n\t\t\t\t\teb(\"created_at\", \"<\", decoded.orderValue),\n\t\t\t\t\teb.and([eb(\"created_at\", \"=\", decoded.orderValue), eb(\"id\", \"<\", decoded.id)]),\n\t\t\t\t]),\n\t\t\t);\n\t\t}\n\n\t\tconst rows = await query.execute();\n\t\tconst items = rows.slice(0, limit).map(rowToRedirect);\n\t\tconst result: FindManyResult<Redirect> = { items };\n\n\t\tif (rows.length > limit) {\n\t\t\tconst last = items.at(-1)!;\n\t\t\tresult.nextCursor = encodeCursor(last.createdAt, last.id);\n\t\t}\n\n\t\treturn result;\n\t}\n\n\tasync create(input: CreateRedirectInput, fence?: RedirectWriteFence): Promise<Redirect> {\n\t\tif (!fence) {\n\t\t\treturn this.withWriteLock((currentFence, repository) =>\n\t\t\t\trepository.create(input, currentFence),\n\t\t\t);\n\t\t}\n\t\tconst id = ulid();\n\t\tconst now = new Date().toISOString();\n\t\tconst patternFlag = input.isPattern ?? isPattern(input.source);\n\n\t\tawait this.db\n\t\t\t.insertInto(\"_emdash_redirects\")\n\t\t\t.values({\n\t\t\t\tid,\n\t\t\t\tsource: input.source,\n\t\t\t\tdestination: input.destination,\n\t\t\t\ttype: input.type ?? 301,\n\t\t\t\tis_pattern: patternFlag ? 1 : 0,\n\t\t\t\tenabled: input.enabled !== false ? 1 : 0,\n\t\t\t\thits: 0,\n\t\t\t\tlast_hit_at: null,\n\t\t\t\tgroup_name: input.groupName ?? null,\n\t\t\t\tauto: input.auto ? 1 : 0,\n\t\t\t\tconfig_revision: ulid(),\n\t\t\t\tsource_guard: 1,\n\t\t\t\twrite_generation: fence?.generation ?? 0,\n\t\t\t\tcreated_at: now,\n\t\t\t\tupdated_at: now,\n\t\t\t})\n\t\t\t.execute();\n\n\t\treturn (await this.findById(id))!;\n\t}\n\n\tasync update(\n\t\tid: string,\n\t\tinput: UpdateRedirectInput,\n\t\texpectedRevision?: string,\n\t\tfence?: RedirectWriteFence,\n\t): Promise<Redirect | null> {\n\t\tif (!fence) {\n\t\t\treturn this.withWriteLock((currentFence, repository) =>\n\t\t\t\trepository.update(id, input, expectedRevision, currentFence),\n\t\t\t);\n\t\t}\n\t\tconst existing = await this.findById(id);\n\t\tif (!existing) return null;\n\n\t\tconst now = new Date(\n\t\t\tMath.max(Date.now(), new Date(existing.updatedAt).getTime() + 1),\n\t\t).toISOString();\n\t\tconst values: Record<string, unknown> = { updated_at: now, config_revision: ulid() };\n\t\tif (fence) values.write_generation = fence.generation;\n\n\t\tif (input.source !== undefined) {\n\t\t\tvalues.source = input.source;\n\t\t\tvalues.source_guard = 1;\n\t\t\tvalues.is_pattern =\n\t\t\t\tinput.isPattern !== undefined ? (input.isPattern ? 1 : 0) : isPattern(input.source) ? 1 : 0;\n\t\t} else if (input.isPattern !== undefined) {\n\t\t\tvalues.is_pattern = input.isPattern ? 1 : 0;\n\t\t}\n\n\t\tif (input.destination !== undefined) values.destination = input.destination;\n\t\tif (input.type !== undefined) values.type = input.type;\n\t\tif (input.enabled !== undefined) values.enabled = input.enabled ? 1 : 0;\n\t\tif (input.groupName !== undefined) values.group_name = input.groupName;\n\n\t\tlet query = this.db.updateTable(\"_emdash_redirects\").set(values).where(\"id\", \"=\", id);\n\t\tif (expectedRevision !== undefined) {\n\t\t\tquery = query.where(\"config_revision\", \"=\", expectedRevision);\n\t\t}\n\t\tif (fence) {\n\t\t\tquery = query.where((eb) =>\n\t\t\t\teb.exists(\n\t\t\t\t\teb\n\t\t\t\t\t\t.selectFrom(\"_emdash_redirect_write_lock\")\n\t\t\t\t\t\t.select(\"id\")\n\t\t\t\t\t\t.where(\"id\", \"=\", REDIRECT_WRITE_LOCK_ID)\n\t\t\t\t\t\t.where(\"token\", \"=\", fence.token)\n\t\t\t\t\t\t.where(\"generation\", \"=\", fence.generation),\n\t\t\t\t),\n\t\t\t);\n\t\t}\n\t\tconst result = await query.executeTakeFirst();\n\t\tif (BigInt(result.numUpdatedRows) === 0n) return null;\n\n\t\treturn (await this.findById(id))!;\n\t}\n\n\tasync delete(\n\t\tid: string,\n\t\texpectedRevision?: string,\n\t\tfence?: RedirectWriteFence,\n\t): Promise<boolean> {\n\t\tif (!fence) {\n\t\t\treturn this.withWriteLock((currentFence, repository) =>\n\t\t\t\trepository.delete(id, expectedRevision, currentFence),\n\t\t\t);\n\t\t}\n\t\tlet query = this.db.deleteFrom(\"_emdash_redirects\").where(\"id\", \"=\", id);\n\t\tif (expectedRevision !== undefined) {\n\t\t\tquery = query.where(\"config_revision\", \"=\", expectedRevision);\n\t\t}\n\t\tif (fence) {\n\t\t\tquery = query.where((eb) =>\n\t\t\t\teb.exists(\n\t\t\t\t\teb\n\t\t\t\t\t\t.selectFrom(\"_emdash_redirect_write_lock\")\n\t\t\t\t\t\t.select(\"id\")\n\t\t\t\t\t\t.where(\"id\", \"=\", REDIRECT_WRITE_LOCK_ID)\n\t\t\t\t\t\t.where(\"token\", \"=\", fence.token)\n\t\t\t\t\t\t.where(\"generation\", \"=\", fence.generation),\n\t\t\t\t),\n\t\t\t);\n\t\t}\n\t\tconst result = await query.executeTakeFirst();\n\t\treturn BigInt(result.numDeletedRows) > 0n;\n\t}\n\n\t/**\n\t * Fetch all enabled redirects (for loop detection graph building).\n\t * Not paginated — returns the full set. Ordered oldest first: the earliest\n\t * matching pattern rule wins, so this order is match precedence.\n\t */\n\tasync findAllEnabled(): Promise<Redirect[]> {\n\t\tconst rows = await this.db\n\t\t\t.selectFrom(\"_emdash_redirects\")\n\t\t\t.selectAll()\n\t\t\t.where(\"enabled\", \"=\", 1)\n\t\t\t.orderBy(\"created_at\", (order) => order.asc().nullsFirst())\n\t\t\t.orderBy(\"id\", \"asc\")\n\t\t\t.execute();\n\t\treturn rows.map(rowToRedirect);\n\t}\n\n\t// --- Matching -----------------------------------------------------------\n\n\tasync findExactMatch(path: string): Promise<Redirect | null> {\n\t\tconst row = await this.db\n\t\t\t.selectFrom(\"_emdash_redirects\")\n\t\t\t.selectAll()\n\t\t\t.where(\"source\", \"=\", path)\n\t\t\t.where(\"enabled\", \"=\", 1)\n\t\t\t.where(\"is_pattern\", \"=\", 0)\n\t\t\t.executeTakeFirst();\n\t\treturn row ? rowToRedirect(row) : null;\n\t}\n\n\tasync findEnabledPatternRules(): Promise<Redirect[]> {\n\t\tconst rows = await this.db\n\t\t\t.selectFrom(\"_emdash_redirects\")\n\t\t\t.selectAll()\n\t\t\t.where(\"enabled\", \"=\", 1)\n\t\t\t.where(\"is_pattern\", \"=\", 1)\n\t\t\t.orderBy(\"created_at\", (order) => order.asc().nullsFirst())\n\t\t\t.orderBy(\"id\", \"asc\")\n\t\t\t.execute();\n\t\treturn rows.map(rowToRedirect);\n\t}\n\n\t/**\n\t * Match a request path against all enabled redirect rules.\n\t * Checks exact matches first (indexed), then pattern rules.\n\t * Returns the matched redirect and the resolved destination URL.\n\t */\n\tasync matchPath(path: string): Promise<RedirectMatch | null> {\n\t\t// 1. Exact match (fast, indexed)\n\t\tlet exact = await this.findExactMatch(path);\n\t\tif (!exact && path.length > 1) {\n\t\t\tconst alt = path.endsWith(\"/\") ? path.slice(0, -1) : `${path}/`;\n\t\t\texact = await this.findExactMatch(alt);\n\t\t}\n\t\tif (exact && isSiteRelativeDestination(exact.destination)) {\n\t\t\treturn { redirect: exact, resolvedDestination: exact.destination };\n\t\t}\n\n\t\t// 2. Pattern match\n\t\tconst patterns = await this.findEnabledPatternRules();\n\t\tfor (const redirect of patterns) {\n\t\t\tif (validatePattern(redirect.source)) continue;\n\t\t\tconst compiled = compilePattern(redirect.source);\n\t\t\tconst params = matchPattern(compiled, path);\n\t\t\tif (params) {\n\t\t\t\tconst resolved = interpolateDestination(redirect.destination, params);\n\t\t\t\tif (isSiteRelativeDestination(resolved)) {\n\t\t\t\t\treturn { redirect, resolvedDestination: resolved };\n\t\t\t\t}\n\t\t\t}\n\t\t}\n\n\t\treturn null;\n\t}\n\n\t// --- Hit tracking -------------------------------------------------------\n\n\tasync recordHit(id: string): Promise<void> {\n\t\tawait sql`\n\t\t\tUPDATE _emdash_redirects\n\t\t\tSET hits = hits + 1, last_hit_at = ${currentTimestampValue(this.db)}, updated_at = ${currentTimestampValue(this.db)}\n\t\t\tWHERE id = ${id}\n\t\t`.execute(this.db);\n\t}\n\n\t// --- Auto-redirects (slug change) ---------------------------------------\n\n\t/**\n\t * Create an auto-redirect when a content slug changes.\n\t * Uses the collection's URL pattern to compute old/new URLs.\n\t * Collapses existing redirect chains pointing to the old URL and\n\t * removes redirects that would shadow the now-live new URL, so a\n\t * rename that is later reverted cannot form a loop (#1986).\n\t *\n\t * Returns null when old and new URL are identical (nothing to redirect).\n\t */\n\tasync createAutoRedirect(\n\t\tcollection: string,\n\t\toldSlug: string,\n\t\tnewSlug: string,\n\t\tcontentId: string,\n\t\turlPattern: string | null,\n\t\toldPublishedAt?: string | null,\n\t\tnewPublishedAt?: string | null,\n\t): Promise<Redirect | null> {\n\t\treturn this.withWriteLock(async (fence, repository) => {\n\t\t\tconst oldUrl = interpolateUrlPattern({\n\t\t\t\tpattern: urlPattern,\n\t\t\t\tcollection,\n\t\t\t\tslug: oldSlug,\n\t\t\t\tid: contentId,\n\t\t\t\tdate: oldPublishedAt,\n\t\t\t});\n\t\t\tconst newUrl = interpolateUrlPattern({\n\t\t\t\tpattern: urlPattern,\n\t\t\t\tcollection,\n\t\t\t\tslug: newSlug,\n\t\t\t\tid: contentId,\n\t\t\t\tdate: newPublishedAt,\n\t\t\t});\n\n\t\t\t// A redirect from a URL to itself would make the page unreachable\n\t\t\tif (oldUrl === newUrl) return null;\n\n\t\t\t// The new URL serves live content again — any redirect from it would\n\t\t\tawait repository.db\n\t\t\t\t.deleteFrom(\"_emdash_redirects\")\n\t\t\t\t.where(\"source\", \"=\", newUrl)\n\t\t\t\t.where((eb) =>\n\t\t\t\t\teb.exists(\n\t\t\t\t\t\teb\n\t\t\t\t\t\t\t.selectFrom(\"_emdash_redirect_write_lock\")\n\t\t\t\t\t\t\t.select(\"id\")\n\t\t\t\t\t\t\t.where(\"id\", \"=\", REDIRECT_WRITE_LOCK_ID)\n\t\t\t\t\t\t\t.where(\"token\", \"=\", fence.token)\n\t\t\t\t\t\t\t.where(\"generation\", \"=\", fence.generation),\n\t\t\t\t\t),\n\t\t\t\t)\n\t\t\t\t.execute();\n\n\t\t\t// Collapse chains: update any existing redirects pointing to the old URL\n\t\t\tawait repository.collapseChains(oldUrl, newUrl, fence);\n\n\t\t\t// Check if a redirect from this source already exists\n\t\t\tconst existing = await repository.findBySource(oldUrl);\n\t\t\tif (existing) {\n\t\t\t\t// Update the existing redirect to point to the new URL\n\t\t\t\treturn (await repository.update(existing.id, { destination: newUrl }, undefined, fence))!;\n\t\t\t}\n\n\t\t\treturn repository.create(\n\t\t\t\t{\n\t\t\t\t\tsource: oldUrl,\n\t\t\t\t\tdestination: newUrl,\n\t\t\t\t\ttype: 301,\n\t\t\t\t\tisPattern: false,\n\t\t\t\t\tauto: true,\n\t\t\t\t\tgroupName: \"Auto: slug change\",\n\t\t\t\t},\n\t\t\t\tfence,\n\t\t\t);\n\t\t});\n\t}\n\n\t/**\n\t * Update all redirects whose destination matches oldDestination\n\t * to point to newDestination instead. Prevents redirect chains.\n\t * Returns the number of updated rows.\n\t */\n\tasync collapseChains(\n\t\toldDestination: string,\n\t\tnewDestination: string,\n\t\tfence?: RedirectWriteFence,\n\t): Promise<number> {\n\t\tif (!fence) {\n\t\t\treturn this.withWriteLock((currentFence, repository) =>\n\t\t\t\trepository.collapseChains(oldDestination, newDestination, currentFence),\n\t\t\t);\n\t\t}\n\t\tlet query = this.db\n\t\t\t.updateTable(\"_emdash_redirects\")\n\t\t\t.set({\n\t\t\t\tdestination: newDestination,\n\t\t\t\tupdated_at: new Date().toISOString(),\n\t\t\t\tconfig_revision: ulid(),\n\t\t\t\t...(fence ? { write_generation: fence.generation } : {}),\n\t\t\t})\n\t\t\t.where(\"destination\", \"=\", oldDestination);\n\t\tif (fence) {\n\t\t\tquery = query.where((eb) =>\n\t\t\t\teb.exists(\n\t\t\t\t\teb\n\t\t\t\t\t\t.selectFrom(\"_emdash_redirect_write_lock\")\n\t\t\t\t\t\t.select(\"id\")\n\t\t\t\t\t\t.where(\"id\", \"=\", REDIRECT_WRITE_LOCK_ID)\n\t\t\t\t\t\t.where(\"token\", \"=\", fence.token)\n\t\t\t\t\t\t.where(\"generation\", \"=\", fence.generation),\n\t\t\t\t),\n\t\t\t);\n\t\t}\n\t\tconst result = await query.executeTakeFirst();\n\t\treturn Number(result.numUpdatedRows);\n\t}\n\n\t// --- 404 log ------------------------------------------------------------\n\n\t/**\n\t * Record a 404 hit for `entry.path`.\n\t *\n\t * Dedups by path: repeat hits increment `hits` and refresh `last_seen_at`\n\t * on the existing row instead of inserting a new one. Referrer and\n\t * user-agent are truncated to bounded lengths so a malicious client can't\n\t * blow up storage with huge headers. When the table would exceed\n\t * MAX_404_LOG_ROWS, the oldest entries (by `last_seen_at`) are evicted.\n\t *\n\t * This is called from the public redirect middleware on every 404 and\n\t * must never throw for an unauthenticated caller — failures bubble up to\n\t * the middleware, which catches and logs them.\n\t */\n\tasync log404(entry: {\n\t\tpath: string;\n\t\treferrer?: string | null;\n\t\tuserAgent?: string | null;\n\t\tip?: string | null;\n\t}): Promise<void> {\n\t\tconst now = new Date().toISOString();\n\t\tconst referrer = truncateOrNull(entry.referrer, REFERRER_MAX_LENGTH);\n\t\tconst userAgent = truncateOrNull(entry.userAgent, USER_AGENT_MAX_LENGTH);\n\t\tconst ip = entry.ip ?? null;\n\t\tconst id = ulid();\n\n\t\t// Atomic upsert by path. The UNIQUE index on `path` makes this safe\n\t\t// under concurrency: two requests for the same new path can't both\n\t\t// insert — the second one hits the conflict branch and increments\n\t\t// hits instead of failing with a uniqueness error.\n\t\tawait this.db\n\t\t\t.insertInto(\"_emdash_404_log\")\n\t\t\t.values({\n\t\t\t\tid,\n\t\t\t\tpath: entry.path,\n\t\t\t\treferrer,\n\t\t\t\tuser_agent: userAgent,\n\t\t\t\tip,\n\t\t\t\thits: 1,\n\t\t\t\tlast_seen_at: now,\n\t\t\t\tcreated_at: now,\n\t\t\t})\n\t\t\t.onConflict((oc) =>\n\t\t\t\toc.column(\"path\").doUpdateSet({\n\t\t\t\t\thits: sql`${sql.ref(\"_emdash_404_log.hits\")} + 1`,\n\t\t\t\t\tlast_seen_at: now,\n\t\t\t\t\treferrer,\n\t\t\t\t\tuser_agent: userAgent,\n\t\t\t\t\tip,\n\t\t\t\t}),\n\t\t\t)\n\t\t\t.execute();\n\t}\n\n\t/**\n\t * Delete the oldest rows from `_emdash_404_log` if the row count exceeds\n\t * MAX_404_LOG_ROWS. \"Oldest\" is by `last_seen_at`, so a path that keeps\n\t * getting hit stays in the table even if it was first seen long ago.\n\t *\n\t * Called by scheduled system cleanup, never by the anonymous request path.\n\t */\n\tasync cleanup404Log(): Promise<number> {\n\t\t// Cheap precheck: the expensive DELETE is only needed once the table\n\t\t// has grown past MAX_404_LOG_ROWS. Counting a bounded sample avoids\n\t\t// the full-table ORDER BY/NOT IN scan on the overwhelming majority\n\t\t// of cron ticks when there is nothing to evict.\n\t\tconst probe = await this.db\n\t\t\t.selectFrom(\n\t\t\t\tthis.db\n\t\t\t\t\t.selectFrom(\"_emdash_404_log\")\n\t\t\t\t\t.select(sql`1`.as(\"one\"))\n\t\t\t\t\t.limit(MAX_404_LOG_ROWS + 1)\n\t\t\t\t\t.as(\"sample\"),\n\t\t\t)\n\t\t\t.select(({ fn }) => fn.countAll<number>().as(\"count\"))\n\t\t\t.executeTakeFirstOrThrow();\n\t\tif (Number(probe.count) <= MAX_404_LOG_ROWS) {\n\t\t\treturn 0;\n\t\t}\n\n\t\t// Keep the newest rows in one statement. Deriving the victims inside the\n\t\t// DELETE makes overlapping cleanup runs idempotent: each statement\n\t\t// evaluates the current newest set instead of acting on a stale count.\n\t\tconst result = await this.db\n\t\t\t.deleteFrom(\"_emdash_404_log\")\n\t\t\t.where(\n\t\t\t\t\"id\",\n\t\t\t\t\"not in\",\n\t\t\t\tthis.db\n\t\t\t\t\t.selectFrom(\"_emdash_404_log\")\n\t\t\t\t\t.select(\"id\")\n\t\t\t\t\t.orderBy(\"last_seen_at\", \"desc\")\n\t\t\t\t\t.orderBy(\"id\", \"desc\")\n\t\t\t\t\t.limit(MAX_404_LOG_ROWS),\n\t\t\t)\n\t\t\t.executeTakeFirst();\n\t\treturn Number(result.numDeletedRows);\n\t}\n\n\tasync find404s(opts: {\n\t\tcursor?: string;\n\t\tlimit?: number;\n\t\tsearch?: string;\n\t}): Promise<FindManyResult<NotFoundEntry>> {\n\t\tconst limit = Math.min(Math.max(opts.limit ?? 50, 1), 100);\n\n\t\tlet query = this.db\n\t\t\t.selectFrom(\"_emdash_404_log\")\n\t\t\t.selectAll()\n\t\t\t.orderBy(\"created_at\", \"desc\")\n\t\t\t.orderBy(\"id\", \"desc\")\n\t\t\t.limit(limit + 1);\n\n\t\tif (opts.search) {\n\t\t\tconst escaped = opts.search.replace(LIKE_ESCAPE_RE, (c) => `\\\\${c}`);\n\t\t\tconst term = `%${escaped}%`;\n\t\t\tquery = query.where(sql<boolean>`path LIKE ${term} ESCAPE '\\\\'`);\n\t\t}\n\n\t\tif (opts.cursor) {\n\t\t\tconst decoded = decodeCursor(opts.cursor);\n\t\t\tquery = query.where((eb) =>\n\t\t\t\teb.or([\n\t\t\t\t\teb(\"created_at\", \"<\", decoded.orderValue),\n\t\t\t\t\teb.and([eb(\"created_at\", \"=\", decoded.orderValue), eb(\"id\", \"<\", decoded.id)]),\n\t\t\t\t]),\n\t\t\t);\n\t\t}\n\n\t\tconst rows = await query.execute();\n\t\tconst items: NotFoundEntry[] = rows.slice(0, limit).map((row) => ({\n\t\t\tid: row.id,\n\t\t\tpath: row.path,\n\t\t\treferrer: row.referrer,\n\t\t\tuserAgent: row.user_agent,\n\t\t\tip: row.ip,\n\t\t\tcreatedAt: row.created_at,\n\t\t}));\n\n\t\tconst result: FindManyResult<NotFoundEntry> = { items };\n\t\tif (rows.length > limit) {\n\t\t\tconst last = items.at(-1)!;\n\t\t\tresult.nextCursor = encodeCursor(last.createdAt, last.id);\n\t\t}\n\n\t\treturn result;\n\t}\n\n\tasync get404Summary(limit = 50): Promise<NotFoundSummary[]> {\n\t\t// Since rows are now deduped by path, each path has exactly one row\n\t\t// with `hits` as the running count and `last_seen_at` as the latest\n\t\t// timestamp. The subquery for `top_referrer` collapses to a simple\n\t\t// pick of the row's stored referrer (the most recent one seen).\n\t\tconst rows = await sql<{\n\t\t\tpath: string;\n\t\t\tcount: number;\n\t\t\tlast_seen: string;\n\t\t\ttop_referrer: string | null;\n\t\t}>`\n\t\t\tSELECT\n\t\t\t\tpath,\n\t\t\t\tSUM(hits) as count,\n\t\t\t\tMAX(last_seen_at) as last_seen,\n\t\t\t\t(\n\t\t\t\t\tSELECT referrer FROM _emdash_404_log AS inner_log\n\t\t\t\t\tWHERE inner_log.path = _emdash_404_log.path\n\t\t\t\t\t\tAND referrer IS NOT NULL AND referrer != ''\n\t\t\t\t\tLIMIT 1\n\t\t\t\t) as top_referrer\n\t\t\tFROM _emdash_404_log\n\t\t\tGROUP BY path\n\t\t\tORDER BY count DESC\n\t\t\tLIMIT ${limit}\n\t\t`.execute(this.db);\n\n\t\treturn rows.rows.map((row) => ({\n\t\t\tpath: row.path,\n\t\t\tcount: Number(row.count),\n\t\t\tlastSeen: row.last_seen,\n\t\t\ttopReferrer: row.top_referrer,\n\t\t}));\n\t}\n\n\tasync delete404(id: string): Promise<boolean> {\n\t\tconst result = await this.db\n\t\t\t.deleteFrom(\"_emdash_404_log\")\n\t\t\t.where(\"id\", \"=\", id)\n\t\t\t.executeTakeFirst();\n\t\treturn BigInt(result.numDeletedRows) > 0n;\n\t}\n\n\tasync clear404s(): Promise<number> {\n\t\tconst result = await this.db.deleteFrom(\"_emdash_404_log\").executeTakeFirst();\n\t\treturn Number(result.numDeletedRows);\n\t}\n\n\tasync prune404s(olderThan: string): Promise<number> {\n\t\tconst result = await this.db\n\t\t\t.deleteFrom(\"_emdash_404_log\")\n\t\t\t.where(\"created_at\", \"<\", olderThan)\n\t\t\t.executeTakeFirst();\n\t\treturn Number(result.numDeletedRows);\n\t}\n}\n"],"mappings":";;;;;;;;;;;;;;AAyBA,MAAa,mBAAmB;;AAGhC,MAAa,sBAAsB;;AAGnC,MAAa,wBAAwB;;AAGrC,MAAM,iBAAiB;;;;;AAMvB,SAAS,eAAe,OAAkC,KAA4B;AACrF,KAAI,UAAU,QAAQ,UAAU,OAAW,QAAO;AAClD,QAAO,MAAM,SAAS,MAAM,MAAM,MAAM,GAAG,IAAI,GAAG;;AAmEnD,IAAa,yBAAb,cAA4C,MAAM;CACjD,AAAkB,OAAO;;AAQ1B,MAAM,yBAAyB;AAC/B,MAAM,0BAA0B;AAChC,MAAM,+BAA+B;AACrC,MAAM,6BAA6B;AAMnC,SAAS,cAAc,KAA8B;AACpD,QAAO;EACN,IAAI,IAAI;EACR,QAAQ,IAAI;EACZ,aAAa,IAAI;EACjB,MAAM,IAAI;EACV,WAAW,IAAI,eAAe;EAC9B,SAAS,IAAI,YAAY;EACzB,MAAM,IAAI;EACV,WAAW,IAAI;EACf,WAAW,IAAI;EACf,MAAM,IAAI,SAAS;EACnB,WAAW,IAAI;EACf,WAAW,IAAI;EACf;;AAOF,IAAa,qBAAb,MAAa,mBAAmB;CAC/B,YAAY,AAAS,IAAsB;EAAtB;;CAIrB,MAAM,SAAS,IAAsC;AACpD,UAAQ,MAAM,KAAK,kBAAkB,GAAG,GAAG,YAAY;;CAGxD,MAAM,kBAAkB,IAAqD;EAC5E,MAAM,MAAM,MAAM,KAAK,GACrB,WAAW,oBAAoB,CAC/B,WAAW,CACX,MAAM,MAAM,KAAK,GAAG,CACpB,kBAAkB;AACpB,SAAO,MAAM;GAAE,UAAU,cAAc,IAAI;GAAE,gBAAgB,IAAI;GAAiB,GAAG;;CAGtF,MAAM,aAAa,QAA0C;EAC5D,MAAM,MAAM,MAAM,KAAK,GACrB,WAAW,oBAAoB,CAC/B,WAAW,CACX,MAAM,UAAU,KAAK,OAAO,CAC5B,kBAAkB;AACpB,SAAO,MAAM,cAAc,IAAI,GAAG;;CAGnC,MAAM,mBAAmB,IAAoC;AAM5D,UALY,MAAM,KAAK,GACrB,WAAW,oBAAoB,CAC/B,OAAO,kBAAkB,CACzB,MAAM,MAAM,KAAK,GAAG,CACpB,kBAAkB,GACR,mBAAmB;;CAGhC,MAAM,cACL,QACa;AACb,MAAI,WAAW,KAAK,GAAG,EAAE;AACxB,OAAI,KAAK,GAAG,eAAe;AAC1B,UAAM,GAAG,gCAAgC,2BAA2B,GAAG,QAAQ,KAAK,GAAG;AACvF,WAAO,KAAK,UAAU,OAAO;;AAE9B,UAAO,KAAK,GAAG,aAAa,CAAC,QAAQ,OAAO,gBAAgB;AAC3D,UAAM,GAAG,gCAAgC,2BAA2B,GAAG,QAAQ,YAAY;AAE3F,WADmB,IAAI,mBAAmB,YAAY,CACpC,UAAU,OAAO;KAClC;;AAEH,SAAO,KAAK,UAAU,OAAO;;CAG9B,MAAc,UACb,QACa;EACb,MAAM,QAAQ,MAAM;EACpB,IAAI;AACJ,OAAK,IAAI,UAAU,GAAG,UAAU,8BAA8B,WAAW;GACxE,MAAM,MAAM,KAAK,KAAK;GACtB,MAAM,SAAS,MAAM,KAAK,GACxB,YAAY,8BAA8B,CAC1C,IAAI;IACJ;IACA,YAAY,MAAM;IAClB,YAAY,GAAG;IACf,CAAC,CACD,MAAM,MAAM,KAAK,uBAAuB,CACxC,OAAO,OAAO,GAAG,GAAG,CAAC,GAAG,SAAS,KAAK,GAAG,EAAE,GAAG,cAAc,KAAK,IAAI,CAAC,CAAC,CAAC,CACxE,UAAU,aAAa,CACvB,kBAAkB;AACpB,OAAI,QAAQ;AACX,YAAQ;KAAE;KAAO,YAAY,OAAO;KAAY;AAChD;;AAED,SAAM,IAAI,SAAS,YAAY,WAAW,SAAS,KAAK,KAAK,QAAQ,CAAC;;AAEvE,MAAI,CAAC,MACJ,OAAM,IAAI,uBAAuB,yCAAyC;AAE3E,MAAI;AACH,UAAO,MAAM,OAAO,OAAO,KAAK;YACvB;AACT,OAAI;AACH,UAAM,KAAK,GACT,YAAY,8BAA8B,CAC1C,IAAI;KAAE,OAAO;KAAI,YAAY;KAAG,CAAC,CACjC,MAAM,MAAM,KAAK,uBAAuB,CACxC,MAAM,SAAS,KAAK,MAAM,CAC1B,SAAS;YACH,OAAO;AACf,YAAQ,MAAM,0CAA0C,MAAM;;;;CAKjE,MAAM,SAAS,MAOuB;EACrC,MAAM,QAAQ,KAAK,IAAI,KAAK,IAAI,KAAK,SAAS,IAAI,EAAE,EAAE,IAAI;EAE1D,IAAI,QAAQ,KAAK,GACf,WAAW,oBAAoB,CAC/B,WAAW,CACX,QAAQ,cAAc,OAAO,CAC7B,QAAQ,MAAM,OAAO,CACrB,MAAM,QAAQ,EAAE;AAElB,MAAI,KAAK,QAAQ;GAIhB,MAAM,OAAO,IADG,KAAK,OAAO,QAAQ,iBAAiB,MAAM,KAAK,IAAI,CAC3C;AACzB,WAAQ,MAAM,OAAO,OACpB,GAAG,GAAG,CACL,GAAY,eAAe,KAAK,eAChC,GAAY,oBAAoB,KAAK,cACrC,CAAC,CACF;;AAGF,MAAI,KAAK,UAAU,OAClB,SAAQ,MAAM,MAAM,cAAc,KAAK,KAAK,MAAM;AAGnD,MAAI,KAAK,YAAY,OACpB,SAAQ,MAAM,MAAM,WAAW,KAAK,KAAK,UAAU,IAAI,EAAE;AAG1D,MAAI,KAAK,SAAS,OACjB,SAAQ,MAAM,MAAM,QAAQ,KAAK,KAAK,OAAO,IAAI,EAAE;AAGpD,MAAI,KAAK,QAAQ;GAChB,MAAM,UAAU,aAAa,KAAK,OAAO;AACzC,WAAQ,MAAM,OAAO,OACpB,GAAG,GAAG,CACL,GAAG,cAAc,KAAK,QAAQ,WAAW,EACzC,GAAG,IAAI,CAAC,GAAG,cAAc,KAAK,QAAQ,WAAW,EAAE,GAAG,MAAM,KAAK,QAAQ,GAAG,CAAC,CAAC,CAC9E,CAAC,CACF;;EAGF,MAAM,OAAO,MAAM,MAAM,SAAS;EAClC,MAAM,QAAQ,KAAK,MAAM,GAAG,MAAM,CAAC,IAAI,cAAc;EACrD,MAAM,SAAmC,EAAE,OAAO;AAElD,MAAI,KAAK,SAAS,OAAO;GACxB,MAAM,OAAO,MAAM,GAAG,GAAG;AACzB,UAAO,aAAa,aAAa,KAAK,WAAW,KAAK,GAAG;;AAG1D,SAAO;;CAGR,MAAM,OAAO,OAA4B,OAA+C;AACvF,MAAI,CAAC,MACJ,QAAO,KAAK,eAAe,cAAc,eACxC,WAAW,OAAO,OAAO,aAAa,CACtC;EAEF,MAAM,KAAK,MAAM;EACjB,MAAM,uBAAM,IAAI,MAAM,EAAC,aAAa;EACpC,MAAM,cAAc,MAAM,aAAa,UAAU,MAAM,OAAO;AAE9D,QAAM,KAAK,GACT,WAAW,oBAAoB,CAC/B,OAAO;GACP;GACA,QAAQ,MAAM;GACd,aAAa,MAAM;GACnB,MAAM,MAAM,QAAQ;GACpB,YAAY,cAAc,IAAI;GAC9B,SAAS,MAAM,YAAY,QAAQ,IAAI;GACvC,MAAM;GACN,aAAa;GACb,YAAY,MAAM,aAAa;GAC/B,MAAM,MAAM,OAAO,IAAI;GACvB,iBAAiB,MAAM;GACvB,cAAc;GACd,kBAAkB,OAAO,cAAc;GACvC,YAAY;GACZ,YAAY;GACZ,CAAC,CACD,SAAS;AAEX,SAAQ,MAAM,KAAK,SAAS,GAAG;;CAGhC,MAAM,OACL,IACA,OACA,kBACA,OAC2B;AAC3B,MAAI,CAAC,MACJ,QAAO,KAAK,eAAe,cAAc,eACxC,WAAW,OAAO,IAAI,OAAO,kBAAkB,aAAa,CAC5D;EAEF,MAAM,WAAW,MAAM,KAAK,SAAS,GAAG;AACxC,MAAI,CAAC,SAAU,QAAO;EAKtB,MAAM,SAAkC;GAAE,YAH9B,IAAI,KACf,KAAK,IAAI,KAAK,KAAK,EAAE,IAAI,KAAK,SAAS,UAAU,CAAC,SAAS,GAAG,EAAE,CAChE,CAAC,aAAa;GAC4C,iBAAiB,MAAM;GAAE;AACpF,MAAI,MAAO,QAAO,mBAAmB,MAAM;AAE3C,MAAI,MAAM,WAAW,QAAW;AAC/B,UAAO,SAAS,MAAM;AACtB,UAAO,eAAe;AACtB,UAAO,aACN,MAAM,cAAc,SAAa,MAAM,YAAY,IAAI,IAAK,UAAU,MAAM,OAAO,GAAG,IAAI;aACjF,MAAM,cAAc,OAC9B,QAAO,aAAa,MAAM,YAAY,IAAI;AAG3C,MAAI,MAAM,gBAAgB,OAAW,QAAO,cAAc,MAAM;AAChE,MAAI,MAAM,SAAS,OAAW,QAAO,OAAO,MAAM;AAClD,MAAI,MAAM,YAAY,OAAW,QAAO,UAAU,MAAM,UAAU,IAAI;AACtE,MAAI,MAAM,cAAc,OAAW,QAAO,aAAa,MAAM;EAE7D,IAAI,QAAQ,KAAK,GAAG,YAAY,oBAAoB,CAAC,IAAI,OAAO,CAAC,MAAM,MAAM,KAAK,GAAG;AACrF,MAAI,qBAAqB,OACxB,SAAQ,MAAM,MAAM,mBAAmB,KAAK,iBAAiB;AAE9D,MAAI,MACH,SAAQ,MAAM,OAAO,OACpB,GAAG,OACF,GACE,WAAW,8BAA8B,CACzC,OAAO,KAAK,CACZ,MAAM,MAAM,KAAK,uBAAuB,CACxC,MAAM,SAAS,KAAK,MAAM,MAAM,CAChC,MAAM,cAAc,KAAK,MAAM,WAAW,CAC5C,CACD;EAEF,MAAM,SAAS,MAAM,MAAM,kBAAkB;AAC7C,MAAI,OAAO,OAAO,eAAe,KAAK,GAAI,QAAO;AAEjD,SAAQ,MAAM,KAAK,SAAS,GAAG;;CAGhC,MAAM,OACL,IACA,kBACA,OACmB;AACnB,MAAI,CAAC,MACJ,QAAO,KAAK,eAAe,cAAc,eACxC,WAAW,OAAO,IAAI,kBAAkB,aAAa,CACrD;EAEF,IAAI,QAAQ,KAAK,GAAG,WAAW,oBAAoB,CAAC,MAAM,MAAM,KAAK,GAAG;AACxE,MAAI,qBAAqB,OACxB,SAAQ,MAAM,MAAM,mBAAmB,KAAK,iBAAiB;AAE9D,MAAI,MACH,SAAQ,MAAM,OAAO,OACpB,GAAG,OACF,GACE,WAAW,8BAA8B,CACzC,OAAO,KAAK,CACZ,MAAM,MAAM,KAAK,uBAAuB,CACxC,MAAM,SAAS,KAAK,MAAM,MAAM,CAChC,MAAM,cAAc,KAAK,MAAM,WAAW,CAC5C,CACD;EAEF,MAAM,SAAS,MAAM,MAAM,kBAAkB;AAC7C,SAAO,OAAO,OAAO,eAAe,GAAG;;;;;;;CAQxC,MAAM,iBAAsC;AAQ3C,UAPa,MAAM,KAAK,GACtB,WAAW,oBAAoB,CAC/B,WAAW,CACX,MAAM,WAAW,KAAK,EAAE,CACxB,QAAQ,eAAe,UAAU,MAAM,KAAK,CAAC,YAAY,CAAC,CAC1D,QAAQ,MAAM,MAAM,CACpB,SAAS,EACC,IAAI,cAAc;;CAK/B,MAAM,eAAe,MAAwC;EAC5D,MAAM,MAAM,MAAM,KAAK,GACrB,WAAW,oBAAoB,CAC/B,WAAW,CACX,MAAM,UAAU,KAAK,KAAK,CAC1B,MAAM,WAAW,KAAK,EAAE,CACxB,MAAM,cAAc,KAAK,EAAE,CAC3B,kBAAkB;AACpB,SAAO,MAAM,cAAc,IAAI,GAAG;;CAGnC,MAAM,0BAA+C;AASpD,UARa,MAAM,KAAK,GACtB,WAAW,oBAAoB,CAC/B,WAAW,CACX,MAAM,WAAW,KAAK,EAAE,CACxB,MAAM,cAAc,KAAK,EAAE,CAC3B,QAAQ,eAAe,UAAU,MAAM,KAAK,CAAC,YAAY,CAAC,CAC1D,QAAQ,MAAM,MAAM,CACpB,SAAS,EACC,IAAI,cAAc;;;;;;;CAQ/B,MAAM,UAAU,MAA6C;EAE5D,IAAI,QAAQ,MAAM,KAAK,eAAe,KAAK;AAC3C,MAAI,CAAC,SAAS,KAAK,SAAS,GAAG;GAC9B,MAAM,MAAM,KAAK,SAAS,IAAI,GAAG,KAAK,MAAM,GAAG,GAAG,GAAG,GAAG,KAAK;AAC7D,WAAQ,MAAM,KAAK,eAAe,IAAI;;AAEvC,MAAI,SAAS,0BAA0B,MAAM,YAAY,CACxD,QAAO;GAAE,UAAU;GAAO,qBAAqB,MAAM;GAAa;EAInE,MAAM,WAAW,MAAM,KAAK,yBAAyB;AACrD,OAAK,MAAM,YAAY,UAAU;AAChC,OAAI,gBAAgB,SAAS,OAAO,CAAE;GAEtC,MAAM,SAAS,aADE,eAAe,SAAS,OAAO,EACV,KAAK;AAC3C,OAAI,QAAQ;IACX,MAAM,WAAW,uBAAuB,SAAS,aAAa,OAAO;AACrE,QAAI,0BAA0B,SAAS,CACtC,QAAO;KAAE;KAAU,qBAAqB;KAAU;;;AAKrD,SAAO;;CAKR,MAAM,UAAU,IAA2B;AAC1C,QAAM,GAAG;;wCAE6B,sBAAsB,KAAK,GAAG,CAAC,iBAAiB,sBAAsB,KAAK,GAAG,CAAC;gBACvG,GAAG;IACf,QAAQ,KAAK,GAAG;;;;;;;;;;;CAcnB,MAAM,mBACL,YACA,SACA,SACA,WACA,YACA,gBACA,gBAC2B;AAC3B,SAAO,KAAK,cAAc,OAAO,OAAO,eAAe;GACtD,MAAM,SAAS,sBAAsB;IACpC,SAAS;IACT;IACA,MAAM;IACN,IAAI;IACJ,MAAM;IACN,CAAC;GACF,MAAM,SAAS,sBAAsB;IACpC,SAAS;IACT;IACA,MAAM;IACN,IAAI;IACJ,MAAM;IACN,CAAC;AAGF,OAAI,WAAW,OAAQ,QAAO;AAG9B,SAAM,WAAW,GACf,WAAW,oBAAoB,CAC/B,MAAM,UAAU,KAAK,OAAO,CAC5B,OAAO,OACP,GAAG,OACF,GACE,WAAW,8BAA8B,CACzC,OAAO,KAAK,CACZ,MAAM,MAAM,KAAK,uBAAuB,CACxC,MAAM,SAAS,KAAK,MAAM,MAAM,CAChC,MAAM,cAAc,KAAK,MAAM,WAAW,CAC5C,CACD,CACA,SAAS;AAGX,SAAM,WAAW,eAAe,QAAQ,QAAQ,MAAM;GAGtD,MAAM,WAAW,MAAM,WAAW,aAAa,OAAO;AACtD,OAAI,SAEH,QAAQ,MAAM,WAAW,OAAO,SAAS,IAAI,EAAE,aAAa,QAAQ,EAAE,QAAW,MAAM;AAGxF,UAAO,WAAW,OACjB;IACC,QAAQ;IACR,aAAa;IACb,MAAM;IACN,WAAW;IACX,MAAM;IACN,WAAW;IACX,EACD,MACA;IACA;;;;;;;CAQH,MAAM,eACL,gBACA,gBACA,OACkB;AAClB,MAAI,CAAC,MACJ,QAAO,KAAK,eAAe,cAAc,eACxC,WAAW,eAAe,gBAAgB,gBAAgB,aAAa,CACvE;EAEF,IAAI,QAAQ,KAAK,GACf,YAAY,oBAAoB,CAChC,IAAI;GACJ,aAAa;GACb,6BAAY,IAAI,MAAM,EAAC,aAAa;GACpC,iBAAiB,MAAM;GACvB,GAAI,QAAQ,EAAE,kBAAkB,MAAM,YAAY,GAAG,EAAE;GACvD,CAAC,CACD,MAAM,eAAe,KAAK,eAAe;AAC3C,MAAI,MACH,SAAQ,MAAM,OAAO,OACpB,GAAG,OACF,GACE,WAAW,8BAA8B,CACzC,OAAO,KAAK,CACZ,MAAM,MAAM,KAAK,uBAAuB,CACxC,MAAM,SAAS,KAAK,MAAM,MAAM,CAChC,MAAM,cAAc,KAAK,MAAM,WAAW,CAC5C,CACD;EAEF,MAAM,SAAS,MAAM,MAAM,kBAAkB;AAC7C,SAAO,OAAO,OAAO,eAAe;;;;;;;;;;;;;;;CAkBrC,MAAM,OAAO,OAKK;EACjB,MAAM,uBAAM,IAAI,MAAM,EAAC,aAAa;EACpC,MAAM,WAAW,eAAe,MAAM,UAAU,oBAAoB;EACpE,MAAM,YAAY,eAAe,MAAM,WAAW,sBAAsB;EACxE,MAAM,KAAK,MAAM,MAAM;EACvB,MAAM,KAAK,MAAM;AAMjB,QAAM,KAAK,GACT,WAAW,kBAAkB,CAC7B,OAAO;GACP;GACA,MAAM,MAAM;GACZ;GACA,YAAY;GACZ;GACA,MAAM;GACN,cAAc;GACd,YAAY;GACZ,CAAC,CACD,YAAY,OACZ,GAAG,OAAO,OAAO,CAAC,YAAY;GAC7B,MAAM,GAAG,GAAG,IAAI,IAAI,uBAAuB,CAAC;GAC5C,cAAc;GACd;GACA,YAAY;GACZ;GACA,CAAC,CACF,CACA,SAAS;;;;;;;;;CAUZ,MAAM,gBAAiC;EAKtC,MAAM,QAAQ,MAAM,KAAK,GACvB,WACA,KAAK,GACH,WAAW,kBAAkB,CAC7B,OAAO,GAAG,IAAI,GAAG,MAAM,CAAC,CACxB,MAAM,mBAAmB,EAAE,CAC3B,GAAG,SAAS,CACd,CACA,QAAQ,EAAE,SAAS,GAAG,UAAkB,CAAC,GAAG,QAAQ,CAAC,CACrD,yBAAyB;AAC3B,MAAI,OAAO,MAAM,MAAM,IAAI,iBAC1B,QAAO;EAMR,MAAM,SAAS,MAAM,KAAK,GACxB,WAAW,kBAAkB,CAC7B,MACA,MACA,UACA,KAAK,GACH,WAAW,kBAAkB,CAC7B,OAAO,KAAK,CACZ,QAAQ,gBAAgB,OAAO,CAC/B,QAAQ,MAAM,OAAO,CACrB,MAAM,iBAAiB,CACzB,CACA,kBAAkB;AACpB,SAAO,OAAO,OAAO,eAAe;;CAGrC,MAAM,SAAS,MAI4B;EAC1C,MAAM,QAAQ,KAAK,IAAI,KAAK,IAAI,KAAK,SAAS,IAAI,EAAE,EAAE,IAAI;EAE1D,IAAI,QAAQ,KAAK,GACf,WAAW,kBAAkB,CAC7B,WAAW,CACX,QAAQ,cAAc,OAAO,CAC7B,QAAQ,MAAM,OAAO,CACrB,MAAM,QAAQ,EAAE;AAElB,MAAI,KAAK,QAAQ;GAEhB,MAAM,OAAO,IADG,KAAK,OAAO,QAAQ,iBAAiB,MAAM,KAAK,IAAI,CAC3C;AACzB,WAAQ,MAAM,MAAM,GAAY,aAAa,KAAK,cAAc;;AAGjE,MAAI,KAAK,QAAQ;GAChB,MAAM,UAAU,aAAa,KAAK,OAAO;AACzC,WAAQ,MAAM,OAAO,OACpB,GAAG,GAAG,CACL,GAAG,cAAc,KAAK,QAAQ,WAAW,EACzC,GAAG,IAAI,CAAC,GAAG,cAAc,KAAK,QAAQ,WAAW,EAAE,GAAG,MAAM,KAAK,QAAQ,GAAG,CAAC,CAAC,CAC9E,CAAC,CACF;;EAGF,MAAM,OAAO,MAAM,MAAM,SAAS;EAClC,MAAM,QAAyB,KAAK,MAAM,GAAG,MAAM,CAAC,KAAK,SAAS;GACjE,IAAI,IAAI;GACR,MAAM,IAAI;GACV,UAAU,IAAI;GACd,WAAW,IAAI;GACf,IAAI,IAAI;GACR,WAAW,IAAI;GACf,EAAE;EAEH,MAAM,SAAwC,EAAE,OAAO;AACvD,MAAI,KAAK,SAAS,OAAO;GACxB,MAAM,OAAO,MAAM,GAAG,GAAG;AACzB,UAAO,aAAa,aAAa,KAAK,WAAW,KAAK,GAAG;;AAG1D,SAAO;;CAGR,MAAM,cAAc,QAAQ,IAAgC;AA2B3D,UAtBa,MAAM,GAKjB;;;;;;;;;;;;;;WAcO,MAAM;IACb,QAAQ,KAAK,GAAG,EAEN,KAAK,KAAK,SAAS;GAC9B,MAAM,IAAI;GACV,OAAO,OAAO,IAAI,MAAM;GACxB,UAAU,IAAI;GACd,aAAa,IAAI;GACjB,EAAE;;CAGJ,MAAM,UAAU,IAA8B;EAC7C,MAAM,SAAS,MAAM,KAAK,GACxB,WAAW,kBAAkB,CAC7B,MAAM,MAAM,KAAK,GAAG,CACpB,kBAAkB;AACpB,SAAO,OAAO,OAAO,eAAe,GAAG;;CAGxC,MAAM,YAA6B;EAClC,MAAM,SAAS,MAAM,KAAK,GAAG,WAAW,kBAAkB,CAAC,kBAAkB;AAC7E,SAAO,OAAO,OAAO,eAAe;;CAGrC,MAAM,UAAU,WAAoC;EACnD,MAAM,SAAS,MAAM,KAAK,GACxB,WAAW,kBAAkB,CAC7B,MAAM,cAAc,KAAK,UAAU,CACnC,kBAAkB;AACpB,SAAO,OAAO,OAAO,eAAe"}
+{"version":3,"file":"redirect-DjLdw427.mjs","names":[],"sources":["../src/database/repositories/redirect.ts"],"sourcesContent":["import { sql, type Kysely } from \"kysely\";\nimport { ulid } from \"ulidx\";\n\nimport { interpolateUrlPattern } from \"../../i18n/resolve.js\";\nimport { isSiteRelativeDestination } from \"../../redirects/destination.js\";\nimport {\n\tcompilePattern,\n\tmatchPattern,\n\tinterpolateDestination,\n\tisPattern,\n\tvalidatePattern,\n} from \"../../redirects/patterns.js\";\nimport { currentTimestampValue, isPostgres } from \"../dialect-helpers.js\";\nimport type { Database, RedirectTable } from \"../types.js\";\nimport { encodeCursor, decodeCursor, type FindManyResult } from \"./types.js\";\n\n// ---------------------------------------------------------------------------\n// Bounded 404 logging\n// ---------------------------------------------------------------------------\n\n/**\n * Hard cap on rows stored in `_emdash_404_log`. Scheduled maintenance evicts\n * the oldest rows by `last_seen_at` without adding a read-amplifying count to\n * the anonymous request path.\n */\nexport const MAX_404_LOG_ROWS = 10_000;\n\n/** Max stored length for the `Referer` header — truncated on insert. */\nexport const REFERRER_MAX_LENGTH = 512;\n\n/** Max stored length for the `User-Agent` header — truncated on insert. */\nexport const USER_AGENT_MAX_LENGTH = 256;\n\n/** Pattern to escape LIKE wildcards: %, _, and backslash */\nconst LIKE_ESCAPE_RE = /[\\\\%_]/g;\n\n/**\n * Truncate a header-derived string to `max` chars, preserving `null`/`undefined`\n * as `null`. Empty strings stay empty (the caller decides whether to coerce).\n */\nfunction truncateOrNull(value: string | null | undefined, max: number): string | null {\n\tif (value === null || value === undefined) return null;\n\treturn value.length > max ? value.slice(0, max) : value;\n}\n\n// ---------------------------------------------------------------------------\n// Types\n// ---------------------------------------------------------------------------\n\nexport interface Redirect {\n\tid: string;\n\tsource: string;\n\tdestination: string;\n\ttype: number;\n\tisPattern: boolean;\n\tenabled: boolean;\n\thits: number;\n\tlastHitAt: string | null;\n\tgroupName: string | null;\n\tauto: boolean;\n\tcreatedAt: string;\n\tupdatedAt: string;\n}\n\nexport interface CreateRedirectInput {\n\tsource: string;\n\tdestination: string;\n\ttype?: number;\n\tisPattern?: boolean;\n\tenabled?: boolean;\n\tgroupName?: string | null;\n\tauto?: boolean;\n}\n\nexport interface UpdateRedirectInput {\n\tsource?: string;\n\tdestination?: string;\n\ttype?: number;\n\tisPattern?: boolean;\n\tenabled?: boolean;\n\tgroupName?: string | null;\n}\n\nexport interface NotFoundEntry {\n\tid: string;\n\tpath: string;\n\treferrer: string | null;\n\tuserAgent: string | null;\n\tip: string | null;\n\tcreatedAt: string;\n}\n\nexport interface NotFoundSummary {\n\tpath: string;\n\tcount: number;\n\tlastSeen: string;\n\ttopReferrer: string | null;\n}\n\nexport interface RedirectMatch {\n\tredirect: Redirect;\n\tresolvedDestination: string;\n}\n\nexport interface VersionedRedirectRecord {\n\tredirect: Redirect;\n\tconfigRevision: string;\n}\n\nexport class RedirectWriteBusyError extends Error {\n\toverride readonly name = \"RedirectWriteBusyError\";\n}\n\nexport interface RedirectWriteFence {\n\ttoken: string;\n\tgeneration: number;\n}\n\nconst REDIRECT_WRITE_LOCK_ID = 1;\nconst REDIRECT_WRITE_LEASE_MS = 30_000;\nconst REDIRECT_WRITE_LOCK_ATTEMPTS = 5;\nconst POSTGRES_REDIRECT_LOCK_KEY = 1_168_624_763;\n\n// ---------------------------------------------------------------------------\n// Row mapping\n// ---------------------------------------------------------------------------\n\nfunction rowToRedirect(row: RedirectTable): Redirect {\n\treturn {\n\t\tid: row.id,\n\t\tsource: row.source,\n\t\tdestination: row.destination,\n\t\ttype: row.type,\n\t\tisPattern: row.is_pattern === 1,\n\t\tenabled: row.enabled === 1,\n\t\thits: row.hits,\n\t\tlastHitAt: row.last_hit_at,\n\t\tgroupName: row.group_name,\n\t\tauto: row.auto === 1,\n\t\tcreatedAt: row.created_at,\n\t\tupdatedAt: row.updated_at,\n\t};\n}\n\n// ---------------------------------------------------------------------------\n// Repository\n// ---------------------------------------------------------------------------\n\nexport class RedirectRepository {\n\tconstructor(readonly db: Kysely<Database>) {}\n\n\t// --- CRUD ---------------------------------------------------------------\n\n\tasync findById(id: string): Promise<Redirect | null> {\n\t\treturn (await this.findVersionedById(id))?.redirect ?? null;\n\t}\n\n\tasync findVersionedById(id: string): Promise<VersionedRedirectRecord | null> {\n\t\tconst row = await this.db\n\t\t\t.selectFrom(\"_emdash_redirects\")\n\t\t\t.selectAll()\n\t\t\t.where(\"id\", \"=\", id)\n\t\t\t.executeTakeFirst();\n\t\treturn row ? { redirect: rowToRedirect(row), configRevision: row.config_revision } : null;\n\t}\n\n\tasync findBySource(source: string): Promise<Redirect | null> {\n\t\tconst row = await this.db\n\t\t\t.selectFrom(\"_emdash_redirects\")\n\t\t\t.selectAll()\n\t\t\t.where(\"source\", \"=\", source)\n\t\t\t.executeTakeFirst();\n\t\treturn row ? rowToRedirect(row) : null;\n\t}\n\n\tasync findConfigRevision(id: string): Promise<string | null> {\n\t\tconst row = await this.db\n\t\t\t.selectFrom(\"_emdash_redirects\")\n\t\t\t.select(\"config_revision\")\n\t\t\t.where(\"id\", \"=\", id)\n\t\t\t.executeTakeFirst();\n\t\treturn row?.config_revision ?? null;\n\t}\n\n\tasync withWriteLock<T>(\n\t\taction: (fence: RedirectWriteFence, repository: RedirectRepository) => Promise<T>,\n\t): Promise<T> {\n\t\tif (isPostgres(this.db)) {\n\t\t\tif (this.db.isTransaction) {\n\t\t\t\tawait sql`SELECT pg_advisory_xact_lock(${POSTGRES_REDIRECT_LOCK_KEY})`.execute(this.db);\n\t\t\t\treturn this.withLease(action);\n\t\t\t}\n\t\t\treturn this.db.transaction().execute(async (transaction) => {\n\t\t\t\tawait sql`SELECT pg_advisory_xact_lock(${POSTGRES_REDIRECT_LOCK_KEY})`.execute(transaction);\n\t\t\t\tconst repository = new RedirectRepository(transaction);\n\t\t\t\treturn repository.withLease(action);\n\t\t\t});\n\t\t}\n\t\treturn this.withLease(action);\n\t}\n\n\tprivate async withLease<T>(\n\t\taction: (fence: RedirectWriteFence, repository: RedirectRepository) => Promise<T>,\n\t): Promise<T> {\n\t\tconst token = ulid();\n\t\tlet fence: RedirectWriteFence | undefined;\n\t\tfor (let attempt = 0; attempt < REDIRECT_WRITE_LOCK_ATTEMPTS; attempt++) {\n\t\t\tconst now = Date.now();\n\t\t\tconst result = await this.db\n\t\t\t\t.updateTable(\"_emdash_redirect_write_lock\")\n\t\t\t\t.set({\n\t\t\t\t\ttoken,\n\t\t\t\t\texpires_at: now + REDIRECT_WRITE_LEASE_MS,\n\t\t\t\t\tgeneration: sql`generation + 1`,\n\t\t\t\t})\n\t\t\t\t.where(\"id\", \"=\", REDIRECT_WRITE_LOCK_ID)\n\t\t\t\t.where((eb) => eb.or([eb(\"token\", \"=\", \"\"), eb(\"expires_at\", \"<\", now)]))\n\t\t\t\t.returning(\"generation\")\n\t\t\t\t.executeTakeFirst();\n\t\t\tif (result) {\n\t\t\t\tfence = { token, generation: result.generation };\n\t\t\t\tbreak;\n\t\t\t}\n\t\t\tawait new Promise((resolve) => setTimeout(resolve, 10 * 2 ** attempt));\n\t\t}\n\t\tif (!fence) {\n\t\t\tthrow new RedirectWriteBusyError(\"Another redirect change is in progress\");\n\t\t}\n\t\ttry {\n\t\t\treturn await action(fence, this);\n\t\t} finally {\n\t\t\ttry {\n\t\t\t\tawait this.db\n\t\t\t\t\t.updateTable(\"_emdash_redirect_write_lock\")\n\t\t\t\t\t.set({ token: \"\", expires_at: 0 })\n\t\t\t\t\t.where(\"id\", \"=\", REDIRECT_WRITE_LOCK_ID)\n\t\t\t\t\t.where(\"token\", \"=\", token)\n\t\t\t\t\t.execute();\n\t\t\t} catch (error) {\n\t\t\t\tconsole.error(\"Failed to release redirect write lock:\", error);\n\t\t\t}\n\t\t}\n\t}\n\n\tasync findMany(opts: {\n\t\tcursor?: string;\n\t\tlimit?: number;\n\t\tsearch?: string;\n\t\tgroup?: string;\n\t\tenabled?: boolean;\n\t\tauto?: boolean;\n\t}): Promise<FindManyResult<Redirect>> {\n\t\tconst limit = Math.min(Math.max(opts.limit ?? 50, 1), 100);\n\n\t\tlet query = this.db\n\t\t\t.selectFrom(\"_emdash_redirects\")\n\t\t\t.selectAll()\n\t\t\t.orderBy(\"created_at\", \"desc\")\n\t\t\t.orderBy(\"id\", \"desc\")\n\t\t\t.limit(limit + 1);\n\n\t\tif (opts.search) {\n\t\t\t// Escape LIKE wildcards in the search term to prevent injection.\n\t\t\t// Must include ESCAPE clause for SQLite to recognize backslash as escape char.\n\t\t\tconst escaped = opts.search.replace(LIKE_ESCAPE_RE, (c) => `\\\\${c}`);\n\t\t\tconst term = `%${escaped}%`;\n\t\t\tquery = query.where((eb) =>\n\t\t\t\teb.or([\n\t\t\t\t\tsql<boolean>`source LIKE ${term} ESCAPE '\\\\'`,\n\t\t\t\t\tsql<boolean>`destination LIKE ${term} ESCAPE '\\\\'`,\n\t\t\t\t]),\n\t\t\t);\n\t\t}\n\n\t\tif (opts.group !== undefined) {\n\t\t\tquery = query.where(\"group_name\", \"=\", opts.group);\n\t\t}\n\n\t\tif (opts.enabled !== undefined) {\n\t\t\tquery = query.where(\"enabled\", \"=\", opts.enabled ? 1 : 0);\n\t\t}\n\n\t\tif (opts.auto !== undefined) {\n\t\t\tquery = query.where(\"auto\", \"=\", opts.auto ? 1 : 0);\n\t\t}\n\n\t\tif (opts.cursor) {\n\t\t\tconst decoded = decodeCursor(opts.cursor);\n\t\t\tquery = query.where((eb) =>\n\t\t\t\teb.or([\n\t\t\t\t\teb(\"created_at\", \"<\", decoded.orderValue),\n\t\t\t\t\teb.and([eb(\"created_at\", \"=\", decoded.orderValue), eb(\"id\", \"<\", decoded.id)]),\n\t\t\t\t]),\n\t\t\t);\n\t\t}\n\n\t\tconst rows = await query.execute();\n\t\tconst items = rows.slice(0, limit).map(rowToRedirect);\n\t\tconst result: FindManyResult<Redirect> = { items };\n\n\t\tif (rows.length > limit) {\n\t\t\tconst last = items.at(-1)!;\n\t\t\tresult.nextCursor = encodeCursor(last.createdAt, last.id);\n\t\t}\n\n\t\treturn result;\n\t}\n\n\tasync create(input: CreateRedirectInput, fence?: RedirectWriteFence): Promise<Redirect> {\n\t\tif (!fence) {\n\t\t\treturn this.withWriteLock((currentFence, repository) =>\n\t\t\t\trepository.create(input, currentFence),\n\t\t\t);\n\t\t}\n\t\tconst id = ulid();\n\t\tconst now = new Date().toISOString();\n\t\tconst patternFlag = input.isPattern ?? isPattern(input.source);\n\n\t\tawait this.db\n\t\t\t.insertInto(\"_emdash_redirects\")\n\t\t\t.values({\n\t\t\t\tid,\n\t\t\t\tsource: input.source,\n\t\t\t\tdestination: input.destination,\n\t\t\t\ttype: input.type ?? 301,\n\t\t\t\tis_pattern: patternFlag ? 1 : 0,\n\t\t\t\tenabled: input.enabled !== false ? 1 : 0,\n\t\t\t\thits: 0,\n\t\t\t\tlast_hit_at: null,\n\t\t\t\tgroup_name: input.groupName ?? null,\n\t\t\t\tauto: input.auto ? 1 : 0,\n\t\t\t\tconfig_revision: ulid(),\n\t\t\t\tsource_guard: 1,\n\t\t\t\twrite_generation: fence?.generation ?? 0,\n\t\t\t\tcreated_at: now,\n\t\t\t\tupdated_at: now,\n\t\t\t})\n\t\t\t.execute();\n\n\t\treturn (await this.findById(id))!;\n\t}\n\n\tasync update(\n\t\tid: string,\n\t\tinput: UpdateRedirectInput,\n\t\texpectedRevision?: string,\n\t\tfence?: RedirectWriteFence,\n\t): Promise<Redirect | null> {\n\t\tif (!fence) {\n\t\t\treturn this.withWriteLock((currentFence, repository) =>\n\t\t\t\trepository.update(id, input, expectedRevision, currentFence),\n\t\t\t);\n\t\t}\n\t\tconst existing = await this.findById(id);\n\t\tif (!existing) return null;\n\n\t\tconst now = new Date(\n\t\t\tMath.max(Date.now(), new Date(existing.updatedAt).getTime() + 1),\n\t\t).toISOString();\n\t\tconst values: Record<string, unknown> = { updated_at: now, config_revision: ulid() };\n\t\tif (fence) values.write_generation = fence.generation;\n\n\t\tif (input.source !== undefined) {\n\t\t\tvalues.source = input.source;\n\t\t\tvalues.source_guard = 1;\n\t\t\tvalues.is_pattern =\n\t\t\t\tinput.isPattern !== undefined ? (input.isPattern ? 1 : 0) : isPattern(input.source) ? 1 : 0;\n\t\t} else if (input.isPattern !== undefined) {\n\t\t\tvalues.is_pattern = input.isPattern ? 1 : 0;\n\t\t}\n\n\t\tif (input.destination !== undefined) values.destination = input.destination;\n\t\tif (input.type !== undefined) values.type = input.type;\n\t\tif (input.enabled !== undefined) values.enabled = input.enabled ? 1 : 0;\n\t\tif (input.groupName !== undefined) values.group_name = input.groupName;\n\n\t\tlet query = this.db.updateTable(\"_emdash_redirects\").set(values).where(\"id\", \"=\", id);\n\t\tif (expectedRevision !== undefined) {\n\t\t\tquery = query.where(\"config_revision\", \"=\", expectedRevision);\n\t\t}\n\t\tif (fence) {\n\t\t\tquery = query.where((eb) =>\n\t\t\t\teb.exists(\n\t\t\t\t\teb\n\t\t\t\t\t\t.selectFrom(\"_emdash_redirect_write_lock\")\n\t\t\t\t\t\t.select(\"id\")\n\t\t\t\t\t\t.where(\"id\", \"=\", REDIRECT_WRITE_LOCK_ID)\n\t\t\t\t\t\t.where(\"token\", \"=\", fence.token)\n\t\t\t\t\t\t.where(\"generation\", \"=\", fence.generation),\n\t\t\t\t),\n\t\t\t);\n\t\t}\n\t\tconst result = await query.executeTakeFirst();\n\t\tif (BigInt(result.numUpdatedRows) === 0n) return null;\n\n\t\treturn (await this.findById(id))!;\n\t}\n\n\tasync delete(\n\t\tid: string,\n\t\texpectedRevision?: string,\n\t\tfence?: RedirectWriteFence,\n\t): Promise<boolean> {\n\t\tif (!fence) {\n\t\t\treturn this.withWriteLock((currentFence, repository) =>\n\t\t\t\trepository.delete(id, expectedRevision, currentFence),\n\t\t\t);\n\t\t}\n\t\tlet query = this.db.deleteFrom(\"_emdash_redirects\").where(\"id\", \"=\", id);\n\t\tif (expectedRevision !== undefined) {\n\t\t\tquery = query.where(\"config_revision\", \"=\", expectedRevision);\n\t\t}\n\t\tif (fence) {\n\t\t\tquery = query.where((eb) =>\n\t\t\t\teb.exists(\n\t\t\t\t\teb\n\t\t\t\t\t\t.selectFrom(\"_emdash_redirect_write_lock\")\n\t\t\t\t\t\t.select(\"id\")\n\t\t\t\t\t\t.where(\"id\", \"=\", REDIRECT_WRITE_LOCK_ID)\n\t\t\t\t\t\t.where(\"token\", \"=\", fence.token)\n\t\t\t\t\t\t.where(\"generation\", \"=\", fence.generation),\n\t\t\t\t),\n\t\t\t);\n\t\t}\n\t\tconst result = await query.executeTakeFirst();\n\t\treturn BigInt(result.numDeletedRows) > 0n;\n\t}\n\n\t/**\n\t * Fetch all enabled redirects (for loop detection graph building).\n\t * Not paginated — returns the full set. Ordered oldest first: the earliest\n\t * matching pattern rule wins, so this order is match precedence.\n\t */\n\tasync findAllEnabled(): Promise<Redirect[]> {\n\t\tconst rows = await this.db\n\t\t\t.selectFrom(\"_emdash_redirects\")\n\t\t\t.selectAll()\n\t\t\t.where(\"enabled\", \"=\", 1)\n\t\t\t.orderBy(\"created_at\", (order) => order.asc().nullsFirst())\n\t\t\t.orderBy(\"id\", \"asc\")\n\t\t\t.execute();\n\t\treturn rows.map(rowToRedirect);\n\t}\n\n\t// --- Matching -----------------------------------------------------------\n\n\tasync findExactMatch(path: string): Promise<Redirect | null> {\n\t\tconst row = await this.db\n\t\t\t.selectFrom(\"_emdash_redirects\")\n\t\t\t.selectAll()\n\t\t\t.where(\"source\", \"=\", path)\n\t\t\t.where(\"enabled\", \"=\", 1)\n\t\t\t.where(\"is_pattern\", \"=\", 0)\n\t\t\t.executeTakeFirst();\n\t\treturn row ? rowToRedirect(row) : null;\n\t}\n\n\tasync findEnabledPatternRules(): Promise<Redirect[]> {\n\t\tconst rows = await this.db\n\t\t\t.selectFrom(\"_emdash_redirects\")\n\t\t\t.selectAll()\n\t\t\t.where(\"enabled\", \"=\", 1)\n\t\t\t.where(\"is_pattern\", \"=\", 1)\n\t\t\t.orderBy(\"created_at\", (order) => order.asc().nullsFirst())\n\t\t\t.orderBy(\"id\", \"asc\")\n\t\t\t.execute();\n\t\treturn rows.map(rowToRedirect);\n\t}\n\n\t/**\n\t * Match a request path against all enabled redirect rules.\n\t * Checks exact matches first (indexed), then pattern rules.\n\t * Returns the matched redirect and the resolved destination URL.\n\t */\n\tasync matchPath(path: string): Promise<RedirectMatch | null> {\n\t\t// 1. Exact match (fast, indexed)\n\t\tlet exact = await this.findExactMatch(path);\n\t\tif (!exact && path.length > 1) {\n\t\t\tconst alt = path.endsWith(\"/\") ? path.slice(0, -1) : `${path}/`;\n\t\t\texact = await this.findExactMatch(alt);\n\t\t}\n\t\tif (exact && isSiteRelativeDestination(exact.destination)) {\n\t\t\treturn { redirect: exact, resolvedDestination: exact.destination };\n\t\t}\n\n\t\t// 2. Pattern match\n\t\tconst patterns = await this.findEnabledPatternRules();\n\t\tfor (const redirect of patterns) {\n\t\t\tif (validatePattern(redirect.source)) continue;\n\t\t\tconst compiled = compilePattern(redirect.source);\n\t\t\tconst params = matchPattern(compiled, path);\n\t\t\tif (params) {\n\t\t\t\tconst resolved = interpolateDestination(redirect.destination, params);\n\t\t\t\tif (isSiteRelativeDestination(resolved)) {\n\t\t\t\t\treturn { redirect, resolvedDestination: resolved };\n\t\t\t\t}\n\t\t\t}\n\t\t}\n\n\t\treturn null;\n\t}\n\n\t// --- Hit tracking -------------------------------------------------------\n\n\tasync recordHit(id: string): Promise<void> {\n\t\tawait sql`\n\t\t\tUPDATE _emdash_redirects\n\t\t\tSET hits = hits + 1, last_hit_at = ${currentTimestampValue(this.db)}, updated_at = ${currentTimestampValue(this.db)}\n\t\t\tWHERE id = ${id}\n\t\t`.execute(this.db);\n\t}\n\n\t// --- Auto-redirects (slug change) ---------------------------------------\n\n\t/**\n\t * Create an auto-redirect when a content slug changes.\n\t * Uses the collection's URL pattern to compute old/new URLs.\n\t * Collapses existing redirect chains pointing to the old URL and\n\t * removes redirects that would shadow the now-live new URL, so a\n\t * rename that is later reverted cannot form a loop (#1986).\n\t *\n\t * Returns null when old and new URL are identical (nothing to redirect).\n\t */\n\tasync createAutoRedirect(\n\t\tcollection: string,\n\t\toldSlug: string,\n\t\tnewSlug: string,\n\t\tcontentId: string,\n\t\turlPattern: string | null,\n\t\toldPublishedAt?: string | null,\n\t\tnewPublishedAt?: string | null,\n\t): Promise<Redirect | null> {\n\t\treturn this.withWriteLock(async (fence, repository) => {\n\t\t\tconst oldUrl = interpolateUrlPattern({\n\t\t\t\tpattern: urlPattern,\n\t\t\t\tcollection,\n\t\t\t\tslug: oldSlug,\n\t\t\t\tid: contentId,\n\t\t\t\tdate: oldPublishedAt,\n\t\t\t});\n\t\t\tconst newUrl = interpolateUrlPattern({\n\t\t\t\tpattern: urlPattern,\n\t\t\t\tcollection,\n\t\t\t\tslug: newSlug,\n\t\t\t\tid: contentId,\n\t\t\t\tdate: newPublishedAt,\n\t\t\t});\n\n\t\t\t// A redirect from a URL to itself would make the page unreachable\n\t\t\tif (oldUrl === newUrl) return null;\n\n\t\t\t// The new URL serves live content again — any redirect from it would\n\t\t\tawait repository.db\n\t\t\t\t.deleteFrom(\"_emdash_redirects\")\n\t\t\t\t.where(\"source\", \"=\", newUrl)\n\t\t\t\t.where((eb) =>\n\t\t\t\t\teb.exists(\n\t\t\t\t\t\teb\n\t\t\t\t\t\t\t.selectFrom(\"_emdash_redirect_write_lock\")\n\t\t\t\t\t\t\t.select(\"id\")\n\t\t\t\t\t\t\t.where(\"id\", \"=\", REDIRECT_WRITE_LOCK_ID)\n\t\t\t\t\t\t\t.where(\"token\", \"=\", fence.token)\n\t\t\t\t\t\t\t.where(\"generation\", \"=\", fence.generation),\n\t\t\t\t\t),\n\t\t\t\t)\n\t\t\t\t.execute();\n\n\t\t\t// Collapse chains: update any existing redirects pointing to the old URL\n\t\t\tawait repository.collapseChains(oldUrl, newUrl, fence);\n\n\t\t\t// Check if a redirect from this source already exists\n\t\t\tconst existing = await repository.findBySource(oldUrl);\n\t\t\tif (existing) {\n\t\t\t\t// Update the existing redirect to point to the new URL\n\t\t\t\treturn (await repository.update(existing.id, { destination: newUrl }, undefined, fence))!;\n\t\t\t}\n\n\t\t\treturn repository.create(\n\t\t\t\t{\n\t\t\t\t\tsource: oldUrl,\n\t\t\t\t\tdestination: newUrl,\n\t\t\t\t\ttype: 301,\n\t\t\t\t\tisPattern: false,\n\t\t\t\t\tauto: true,\n\t\t\t\t\tgroupName: \"Auto: slug change\",\n\t\t\t\t},\n\t\t\t\tfence,\n\t\t\t);\n\t\t});\n\t}\n\n\t/**\n\t * Update all redirects whose destination matches oldDestination\n\t * to point to newDestination instead. Prevents redirect chains.\n\t * Returns the number of updated rows.\n\t */\n\tasync collapseChains(\n\t\toldDestination: string,\n\t\tnewDestination: string,\n\t\tfence?: RedirectWriteFence,\n\t): Promise<number> {\n\t\tif (!fence) {\n\t\t\treturn this.withWriteLock((currentFence, repository) =>\n\t\t\t\trepository.collapseChains(oldDestination, newDestination, currentFence),\n\t\t\t);\n\t\t}\n\t\tlet query = this.db\n\t\t\t.updateTable(\"_emdash_redirects\")\n\t\t\t.set({\n\t\t\t\tdestination: newDestination,\n\t\t\t\tupdated_at: new Date().toISOString(),\n\t\t\t\tconfig_revision: ulid(),\n\t\t\t\t...(fence ? { write_generation: fence.generation } : {}),\n\t\t\t})\n\t\t\t.where(\"destination\", \"=\", oldDestination);\n\t\tif (fence) {\n\t\t\tquery = query.where((eb) =>\n\t\t\t\teb.exists(\n\t\t\t\t\teb\n\t\t\t\t\t\t.selectFrom(\"_emdash_redirect_write_lock\")\n\t\t\t\t\t\t.select(\"id\")\n\t\t\t\t\t\t.where(\"id\", \"=\", REDIRECT_WRITE_LOCK_ID)\n\t\t\t\t\t\t.where(\"token\", \"=\", fence.token)\n\t\t\t\t\t\t.where(\"generation\", \"=\", fence.generation),\n\t\t\t\t),\n\t\t\t);\n\t\t}\n\t\tconst result = await query.executeTakeFirst();\n\t\treturn Number(result.numUpdatedRows);\n\t}\n\n\t// --- 404 log ------------------------------------------------------------\n\n\t/**\n\t * Record a 404 hit for `entry.path`.\n\t *\n\t * Dedups by path: repeat hits increment `hits` and refresh `last_seen_at`\n\t * on the existing row instead of inserting a new one. Referrer and\n\t * user-agent are truncated to bounded lengths so a malicious client can't\n\t * blow up storage with huge headers. When the table would exceed\n\t * MAX_404_LOG_ROWS, the oldest entries (by `last_seen_at`) are evicted.\n\t *\n\t * This is called from the public redirect middleware on every 404 and\n\t * must never throw for an unauthenticated caller — failures bubble up to\n\t * the middleware, which catches and logs them.\n\t */\n\tasync log404(entry: {\n\t\tpath: string;\n\t\treferrer?: string | null;\n\t\tuserAgent?: string | null;\n\t\tip?: string | null;\n\t}): Promise<void> {\n\t\tconst now = new Date().toISOString();\n\t\tconst referrer = truncateOrNull(entry.referrer, REFERRER_MAX_LENGTH);\n\t\tconst userAgent = truncateOrNull(entry.userAgent, USER_AGENT_MAX_LENGTH);\n\t\tconst ip = entry.ip ?? null;\n\t\tconst id = ulid();\n\n\t\t// Atomic upsert by path. The UNIQUE index on `path` makes this safe\n\t\t// under concurrency: two requests for the same new path can't both\n\t\t// insert — the second one hits the conflict branch and increments\n\t\t// hits instead of failing with a uniqueness error.\n\t\tawait this.db\n\t\t\t.insertInto(\"_emdash_404_log\")\n\t\t\t.values({\n\t\t\t\tid,\n\t\t\t\tpath: entry.path,\n\t\t\t\treferrer,\n\t\t\t\tuser_agent: userAgent,\n\t\t\t\tip,\n\t\t\t\thits: 1,\n\t\t\t\tlast_seen_at: now,\n\t\t\t\tcreated_at: now,\n\t\t\t})\n\t\t\t.onConflict((oc) =>\n\t\t\t\toc.column(\"path\").doUpdateSet({\n\t\t\t\t\thits: sql`${sql.ref(\"_emdash_404_log.hits\")} + 1`,\n\t\t\t\t\tlast_seen_at: now,\n\t\t\t\t\treferrer,\n\t\t\t\t\tuser_agent: userAgent,\n\t\t\t\t\tip,\n\t\t\t\t}),\n\t\t\t)\n\t\t\t.execute();\n\t}\n\n\t/**\n\t * Delete the oldest rows from `_emdash_404_log` if the row count exceeds\n\t * MAX_404_LOG_ROWS. \"Oldest\" is by `last_seen_at`, so a path that keeps\n\t * getting hit stays in the table even if it was first seen long ago.\n\t *\n\t * Called by scheduled system cleanup, never by the anonymous request path.\n\t */\n\tasync cleanup404Log(): Promise<number> {\n\t\t// Cheap precheck: the expensive DELETE is only needed once the table\n\t\t// has grown past MAX_404_LOG_ROWS. Counting a bounded sample avoids\n\t\t// the full-table ORDER BY/NOT IN scan on the overwhelming majority\n\t\t// of cron ticks when there is nothing to evict.\n\t\tconst probe = await this.db\n\t\t\t.selectFrom(\n\t\t\t\tthis.db\n\t\t\t\t\t.selectFrom(\"_emdash_404_log\")\n\t\t\t\t\t.select(sql`1`.as(\"one\"))\n\t\t\t\t\t.limit(MAX_404_LOG_ROWS + 1)\n\t\t\t\t\t.as(\"sample\"),\n\t\t\t)\n\t\t\t.select(({ fn }) => fn.countAll<number>().as(\"count\"))\n\t\t\t.executeTakeFirstOrThrow();\n\t\tif (Number(probe.count) <= MAX_404_LOG_ROWS) {\n\t\t\treturn 0;\n\t\t}\n\n\t\t// Keep the newest rows in one statement. Deriving the victims inside the\n\t\t// DELETE makes overlapping cleanup runs idempotent: each statement\n\t\t// evaluates the current newest set instead of acting on a stale count.\n\t\tconst result = await this.db\n\t\t\t.deleteFrom(\"_emdash_404_log\")\n\t\t\t.where(\n\t\t\t\t\"id\",\n\t\t\t\t\"not in\",\n\t\t\t\tthis.db\n\t\t\t\t\t.selectFrom(\"_emdash_404_log\")\n\t\t\t\t\t.select(\"id\")\n\t\t\t\t\t.orderBy(\"last_seen_at\", \"desc\")\n\t\t\t\t\t.orderBy(\"id\", \"desc\")\n\t\t\t\t\t.limit(MAX_404_LOG_ROWS),\n\t\t\t)\n\t\t\t.executeTakeFirst();\n\t\treturn Number(result.numDeletedRows);\n\t}\n\n\tasync find404s(opts: {\n\t\tcursor?: string;\n\t\tlimit?: number;\n\t\tsearch?: string;\n\t}): Promise<FindManyResult<NotFoundEntry>> {\n\t\tconst limit = Math.min(Math.max(opts.limit ?? 50, 1), 100);\n\n\t\tlet query = this.db\n\t\t\t.selectFrom(\"_emdash_404_log\")\n\t\t\t.selectAll()\n\t\t\t.orderBy(\"created_at\", \"desc\")\n\t\t\t.orderBy(\"id\", \"desc\")\n\t\t\t.limit(limit + 1);\n\n\t\tif (opts.search) {\n\t\t\tconst escaped = opts.search.replace(LIKE_ESCAPE_RE, (c) => `\\\\${c}`);\n\t\t\tconst term = `%${escaped}%`;\n\t\t\tquery = query.where(sql<boolean>`path LIKE ${term} ESCAPE '\\\\'`);\n\t\t}\n\n\t\tif (opts.cursor) {\n\t\t\tconst decoded = decodeCursor(opts.cursor);\n\t\t\tquery = query.where((eb) =>\n\t\t\t\teb.or([\n\t\t\t\t\teb(\"created_at\", \"<\", decoded.orderValue),\n\t\t\t\t\teb.and([eb(\"created_at\", \"=\", decoded.orderValue), eb(\"id\", \"<\", decoded.id)]),\n\t\t\t\t]),\n\t\t\t);\n\t\t}\n\n\t\tconst rows = await query.execute();\n\t\tconst items: NotFoundEntry[] = rows.slice(0, limit).map((row) => ({\n\t\t\tid: row.id,\n\t\t\tpath: row.path,\n\t\t\treferrer: row.referrer,\n\t\t\tuserAgent: row.user_agent,\n\t\t\tip: row.ip,\n\t\t\tcreatedAt: row.created_at,\n\t\t}));\n\n\t\tconst result: FindManyResult<NotFoundEntry> = { items };\n\t\tif (rows.length > limit) {\n\t\t\tconst last = items.at(-1)!;\n\t\t\tresult.nextCursor = encodeCursor(last.createdAt, last.id);\n\t\t}\n\n\t\treturn result;\n\t}\n\n\tasync get404Summary(limit = 50): Promise<NotFoundSummary[]> {\n\t\t// Since rows are now deduped by path, each path has exactly one row\n\t\t// with `hits` as the running count and `last_seen_at` as the latest\n\t\t// timestamp. The subquery for `top_referrer` collapses to a simple\n\t\t// pick of the row's stored referrer (the most recent one seen).\n\t\tconst rows = await sql<{\n\t\t\tpath: string;\n\t\t\tcount: number;\n\t\t\tlast_seen: string;\n\t\t\ttop_referrer: string | null;\n\t\t}>`\n\t\t\tSELECT\n\t\t\t\tpath,\n\t\t\t\tSUM(hits) as count,\n\t\t\t\tMAX(last_seen_at) as last_seen,\n\t\t\t\t(\n\t\t\t\t\tSELECT referrer FROM _emdash_404_log AS inner_log\n\t\t\t\t\tWHERE inner_log.path = _emdash_404_log.path\n\t\t\t\t\t\tAND referrer IS NOT NULL AND referrer != ''\n\t\t\t\t\tLIMIT 1\n\t\t\t\t) as top_referrer\n\t\t\tFROM _emdash_404_log\n\t\t\tGROUP BY path\n\t\t\tORDER BY count DESC\n\t\t\tLIMIT ${limit}\n\t\t`.execute(this.db);\n\n\t\treturn rows.rows.map((row) => ({\n\t\t\tpath: row.path,\n\t\t\tcount: Number(row.count),\n\t\t\tlastSeen: row.last_seen,\n\t\t\ttopReferrer: row.top_referrer,\n\t\t}));\n\t}\n\n\tasync delete404(id: string): Promise<boolean> {\n\t\tconst result = await this.db\n\t\t\t.deleteFrom(\"_emdash_404_log\")\n\t\t\t.where(\"id\", \"=\", id)\n\t\t\t.executeTakeFirst();\n\t\treturn BigInt(result.numDeletedRows) > 0n;\n\t}\n\n\tasync clear404s(): Promise<number> {\n\t\tconst result = await this.db.deleteFrom(\"_emdash_404_log\").executeTakeFirst();\n\t\treturn Number(result.numDeletedRows);\n\t}\n\n\tasync prune404s(olderThan: string): Promise<number> {\n\t\tconst result = await this.db\n\t\t\t.deleteFrom(\"_emdash_404_log\")\n\t\t\t.where(\"created_at\", \"<\", olderThan)\n\t\t\t.executeTakeFirst();\n\t\treturn Number(result.numDeletedRows);\n\t}\n}\n"],"mappings":";;;;;;;;;;;;;;AAyBA,MAAa,mBAAmB;;AAGhC,MAAa,sBAAsB;;AAGnC,MAAa,wBAAwB;;AAGrC,MAAM,iBAAiB;;;;;AAMvB,SAAS,eAAe,OAAkC,KAA4B;AACrF,KAAI,UAAU,QAAQ,UAAU,OAAW,QAAO;AAClD,QAAO,MAAM,SAAS,MAAM,MAAM,MAAM,GAAG,IAAI,GAAG;;AAmEnD,IAAa,yBAAb,cAA4C,MAAM;CACjD,AAAkB,OAAO;;AAQ1B,MAAM,yBAAyB;AAC/B,MAAM,0BAA0B;AAChC,MAAM,+BAA+B;AACrC,MAAM,6BAA6B;AAMnC,SAAS,cAAc,KAA8B;AACpD,QAAO;EACN,IAAI,IAAI;EACR,QAAQ,IAAI;EACZ,aAAa,IAAI;EACjB,MAAM,IAAI;EACV,WAAW,IAAI,eAAe;EAC9B,SAAS,IAAI,YAAY;EACzB,MAAM,IAAI;EACV,WAAW,IAAI;EACf,WAAW,IAAI;EACf,MAAM,IAAI,SAAS;EACnB,WAAW,IAAI;EACf,WAAW,IAAI;EACf;;AAOF,IAAa,qBAAb,MAAa,mBAAmB;CAC/B,YAAY,AAAS,IAAsB;EAAtB;;CAIrB,MAAM,SAAS,IAAsC;AACpD,UAAQ,MAAM,KAAK,kBAAkB,GAAG,GAAG,YAAY;;CAGxD,MAAM,kBAAkB,IAAqD;EAC5E,MAAM,MAAM,MAAM,KAAK,GACrB,WAAW,oBAAoB,CAC/B,WAAW,CACX,MAAM,MAAM,KAAK,GAAG,CACpB,kBAAkB;AACpB,SAAO,MAAM;GAAE,UAAU,cAAc,IAAI;GAAE,gBAAgB,IAAI;GAAiB,GAAG;;CAGtF,MAAM,aAAa,QAA0C;EAC5D,MAAM,MAAM,MAAM,KAAK,GACrB,WAAW,oBAAoB,CAC/B,WAAW,CACX,MAAM,UAAU,KAAK,OAAO,CAC5B,kBAAkB;AACpB,SAAO,MAAM,cAAc,IAAI,GAAG;;CAGnC,MAAM,mBAAmB,IAAoC;AAM5D,UALY,MAAM,KAAK,GACrB,WAAW,oBAAoB,CAC/B,OAAO,kBAAkB,CACzB,MAAM,MAAM,KAAK,GAAG,CACpB,kBAAkB,GACR,mBAAmB;;CAGhC,MAAM,cACL,QACa;AACb,MAAI,WAAW,KAAK,GAAG,EAAE;AACxB,OAAI,KAAK,GAAG,eAAe;AAC1B,UAAM,GAAG,gCAAgC,2BAA2B,GAAG,QAAQ,KAAK,GAAG;AACvF,WAAO,KAAK,UAAU,OAAO;;AAE9B,UAAO,KAAK,GAAG,aAAa,CAAC,QAAQ,OAAO,gBAAgB;AAC3D,UAAM,GAAG,gCAAgC,2BAA2B,GAAG,QAAQ,YAAY;AAE3F,WADmB,IAAI,mBAAmB,YAAY,CACpC,UAAU,OAAO;KAClC;;AAEH,SAAO,KAAK,UAAU,OAAO;;CAG9B,MAAc,UACb,QACa;EACb,MAAM,QAAQ,MAAM;EACpB,IAAI;AACJ,OAAK,IAAI,UAAU,GAAG,UAAU,8BAA8B,WAAW;GACxE,MAAM,MAAM,KAAK,KAAK;GACtB,MAAM,SAAS,MAAM,KAAK,GACxB,YAAY,8BAA8B,CAC1C,IAAI;IACJ;IACA,YAAY,MAAM;IAClB,YAAY,GAAG;IACf,CAAC,CACD,MAAM,MAAM,KAAK,uBAAuB,CACxC,OAAO,OAAO,GAAG,GAAG,CAAC,GAAG,SAAS,KAAK,GAAG,EAAE,GAAG,cAAc,KAAK,IAAI,CAAC,CAAC,CAAC,CACxE,UAAU,aAAa,CACvB,kBAAkB;AACpB,OAAI,QAAQ;AACX,YAAQ;KAAE;KAAO,YAAY,OAAO;KAAY;AAChD;;AAED,SAAM,IAAI,SAAS,YAAY,WAAW,SAAS,KAAK,KAAK,QAAQ,CAAC;;AAEvE,MAAI,CAAC,MACJ,OAAM,IAAI,uBAAuB,yCAAyC;AAE3E,MAAI;AACH,UAAO,MAAM,OAAO,OAAO,KAAK;YACvB;AACT,OAAI;AACH,UAAM,KAAK,GACT,YAAY,8BAA8B,CAC1C,IAAI;KAAE,OAAO;KAAI,YAAY;KAAG,CAAC,CACjC,MAAM,MAAM,KAAK,uBAAuB,CACxC,MAAM,SAAS,KAAK,MAAM,CAC1B,SAAS;YACH,OAAO;AACf,YAAQ,MAAM,0CAA0C,MAAM;;;;CAKjE,MAAM,SAAS,MAOuB;EACrC,MAAM,QAAQ,KAAK,IAAI,KAAK,IAAI,KAAK,SAAS,IAAI,EAAE,EAAE,IAAI;EAE1D,IAAI,QAAQ,KAAK,GACf,WAAW,oBAAoB,CAC/B,WAAW,CACX,QAAQ,cAAc,OAAO,CAC7B,QAAQ,MAAM,OAAO,CACrB,MAAM,QAAQ,EAAE;AAElB,MAAI,KAAK,QAAQ;GAIhB,MAAM,OAAO,IADG,KAAK,OAAO,QAAQ,iBAAiB,MAAM,KAAK,IAAI,CAC3C;AACzB,WAAQ,MAAM,OAAO,OACpB,GAAG,GAAG,CACL,GAAY,eAAe,KAAK,eAChC,GAAY,oBAAoB,KAAK,cACrC,CAAC,CACF;;AAGF,MAAI,KAAK,UAAU,OAClB,SAAQ,MAAM,MAAM,cAAc,KAAK,KAAK,MAAM;AAGnD,MAAI,KAAK,YAAY,OACpB,SAAQ,MAAM,MAAM,WAAW,KAAK,KAAK,UAAU,IAAI,EAAE;AAG1D,MAAI,KAAK,SAAS,OACjB,SAAQ,MAAM,MAAM,QAAQ,KAAK,KAAK,OAAO,IAAI,EAAE;AAGpD,MAAI,KAAK,QAAQ;GAChB,MAAM,UAAU,aAAa,KAAK,OAAO;AACzC,WAAQ,MAAM,OAAO,OACpB,GAAG,GAAG,CACL,GAAG,cAAc,KAAK,QAAQ,WAAW,EACzC,GAAG,IAAI,CAAC,GAAG,cAAc,KAAK,QAAQ,WAAW,EAAE,GAAG,MAAM,KAAK,QAAQ,GAAG,CAAC,CAAC,CAC9E,CAAC,CACF;;EAGF,MAAM,OAAO,MAAM,MAAM,SAAS;EAClC,MAAM,QAAQ,KAAK,MAAM,GAAG,MAAM,CAAC,IAAI,cAAc;EACrD,MAAM,SAAmC,EAAE,OAAO;AAElD,MAAI,KAAK,SAAS,OAAO;GACxB,MAAM,OAAO,MAAM,GAAG,GAAG;AACzB,UAAO,aAAa,aAAa,KAAK,WAAW,KAAK,GAAG;;AAG1D,SAAO;;CAGR,MAAM,OAAO,OAA4B,OAA+C;AACvF,MAAI,CAAC,MACJ,QAAO,KAAK,eAAe,cAAc,eACxC,WAAW,OAAO,OAAO,aAAa,CACtC;EAEF,MAAM,KAAK,MAAM;EACjB,MAAM,uBAAM,IAAI,MAAM,EAAC,aAAa;EACpC,MAAM,cAAc,MAAM,aAAa,UAAU,MAAM,OAAO;AAE9D,QAAM,KAAK,GACT,WAAW,oBAAoB,CAC/B,OAAO;GACP;GACA,QAAQ,MAAM;GACd,aAAa,MAAM;GACnB,MAAM,MAAM,QAAQ;GACpB,YAAY,cAAc,IAAI;GAC9B,SAAS,MAAM,YAAY,QAAQ,IAAI;GACvC,MAAM;GACN,aAAa;GACb,YAAY,MAAM,aAAa;GAC/B,MAAM,MAAM,OAAO,IAAI;GACvB,iBAAiB,MAAM;GACvB,cAAc;GACd,kBAAkB,OAAO,cAAc;GACvC,YAAY;GACZ,YAAY;GACZ,CAAC,CACD,SAAS;AAEX,SAAQ,MAAM,KAAK,SAAS,GAAG;;CAGhC,MAAM,OACL,IACA,OACA,kBACA,OAC2B;AAC3B,MAAI,CAAC,MACJ,QAAO,KAAK,eAAe,cAAc,eACxC,WAAW,OAAO,IAAI,OAAO,kBAAkB,aAAa,CAC5D;EAEF,MAAM,WAAW,MAAM,KAAK,SAAS,GAAG;AACxC,MAAI,CAAC,SAAU,QAAO;EAKtB,MAAM,SAAkC;GAAE,YAH9B,IAAI,KACf,KAAK,IAAI,KAAK,KAAK,EAAE,IAAI,KAAK,SAAS,UAAU,CAAC,SAAS,GAAG,EAAE,CAChE,CAAC,aAAa;GAC4C,iBAAiB,MAAM;GAAE;AACpF,MAAI,MAAO,QAAO,mBAAmB,MAAM;AAE3C,MAAI,MAAM,WAAW,QAAW;AAC/B,UAAO,SAAS,MAAM;AACtB,UAAO,eAAe;AACtB,UAAO,aACN,MAAM,cAAc,SAAa,MAAM,YAAY,IAAI,IAAK,UAAU,MAAM,OAAO,GAAG,IAAI;aACjF,MAAM,cAAc,OAC9B,QAAO,aAAa,MAAM,YAAY,IAAI;AAG3C,MAAI,MAAM,gBAAgB,OAAW,QAAO,cAAc,MAAM;AAChE,MAAI,MAAM,SAAS,OAAW,QAAO,OAAO,MAAM;AAClD,MAAI,MAAM,YAAY,OAAW,QAAO,UAAU,MAAM,UAAU,IAAI;AACtE,MAAI,MAAM,cAAc,OAAW,QAAO,aAAa,MAAM;EAE7D,IAAI,QAAQ,KAAK,GAAG,YAAY,oBAAoB,CAAC,IAAI,OAAO,CAAC,MAAM,MAAM,KAAK,GAAG;AACrF,MAAI,qBAAqB,OACxB,SAAQ,MAAM,MAAM,mBAAmB,KAAK,iBAAiB;AAE9D,MAAI,MACH,SAAQ,MAAM,OAAO,OACpB,GAAG,OACF,GACE,WAAW,8BAA8B,CACzC,OAAO,KAAK,CACZ,MAAM,MAAM,KAAK,uBAAuB,CACxC,MAAM,SAAS,KAAK,MAAM,MAAM,CAChC,MAAM,cAAc,KAAK,MAAM,WAAW,CAC5C,CACD;EAEF,MAAM,SAAS,MAAM,MAAM,kBAAkB;AAC7C,MAAI,OAAO,OAAO,eAAe,KAAK,GAAI,QAAO;AAEjD,SAAQ,MAAM,KAAK,SAAS,GAAG;;CAGhC,MAAM,OACL,IACA,kBACA,OACmB;AACnB,MAAI,CAAC,MACJ,QAAO,KAAK,eAAe,cAAc,eACxC,WAAW,OAAO,IAAI,kBAAkB,aAAa,CACrD;EAEF,IAAI,QAAQ,KAAK,GAAG,WAAW,oBAAoB,CAAC,MAAM,MAAM,KAAK,GAAG;AACxE,MAAI,qBAAqB,OACxB,SAAQ,MAAM,MAAM,mBAAmB,KAAK,iBAAiB;AAE9D,MAAI,MACH,SAAQ,MAAM,OAAO,OACpB,GAAG,OACF,GACE,WAAW,8BAA8B,CACzC,OAAO,KAAK,CACZ,MAAM,MAAM,KAAK,uBAAuB,CACxC,MAAM,SAAS,KAAK,MAAM,MAAM,CAChC,MAAM,cAAc,KAAK,MAAM,WAAW,CAC5C,CACD;EAEF,MAAM,SAAS,MAAM,MAAM,kBAAkB;AAC7C,SAAO,OAAO,OAAO,eAAe,GAAG;;;;;;;CAQxC,MAAM,iBAAsC;AAQ3C,UAPa,MAAM,KAAK,GACtB,WAAW,oBAAoB,CAC/B,WAAW,CACX,MAAM,WAAW,KAAK,EAAE,CACxB,QAAQ,eAAe,UAAU,MAAM,KAAK,CAAC,YAAY,CAAC,CAC1D,QAAQ,MAAM,MAAM,CACpB,SAAS,EACC,IAAI,cAAc;;CAK/B,MAAM,eAAe,MAAwC;EAC5D,MAAM,MAAM,MAAM,KAAK,GACrB,WAAW,oBAAoB,CAC/B,WAAW,CACX,MAAM,UAAU,KAAK,KAAK,CAC1B,MAAM,WAAW,KAAK,EAAE,CACxB,MAAM,cAAc,KAAK,EAAE,CAC3B,kBAAkB;AACpB,SAAO,MAAM,cAAc,IAAI,GAAG;;CAGnC,MAAM,0BAA+C;AASpD,UARa,MAAM,KAAK,GACtB,WAAW,oBAAoB,CAC/B,WAAW,CACX,MAAM,WAAW,KAAK,EAAE,CACxB,MAAM,cAAc,KAAK,EAAE,CAC3B,QAAQ,eAAe,UAAU,MAAM,KAAK,CAAC,YAAY,CAAC,CAC1D,QAAQ,MAAM,MAAM,CACpB,SAAS,EACC,IAAI,cAAc;;;;;;;CAQ/B,MAAM,UAAU,MAA6C;EAE5D,IAAI,QAAQ,MAAM,KAAK,eAAe,KAAK;AAC3C,MAAI,CAAC,SAAS,KAAK,SAAS,GAAG;GAC9B,MAAM,MAAM,KAAK,SAAS,IAAI,GAAG,KAAK,MAAM,GAAG,GAAG,GAAG,GAAG,KAAK;AAC7D,WAAQ,MAAM,KAAK,eAAe,IAAI;;AAEvC,MAAI,SAAS,0BAA0B,MAAM,YAAY,CACxD,QAAO;GAAE,UAAU;GAAO,qBAAqB,MAAM;GAAa;EAInE,MAAM,WAAW,MAAM,KAAK,yBAAyB;AACrD,OAAK,MAAM,YAAY,UAAU;AAChC,OAAI,gBAAgB,SAAS,OAAO,CAAE;GAEtC,MAAM,SAAS,aADE,eAAe,SAAS,OAAO,EACV,KAAK;AAC3C,OAAI,QAAQ;IACX,MAAM,WAAW,uBAAuB,SAAS,aAAa,OAAO;AACrE,QAAI,0BAA0B,SAAS,CACtC,QAAO;KAAE;KAAU,qBAAqB;KAAU;;;AAKrD,SAAO;;CAKR,MAAM,UAAU,IAA2B;AAC1C,QAAM,GAAG;;wCAE6B,sBAAsB,KAAK,GAAG,CAAC,iBAAiB,sBAAsB,KAAK,GAAG,CAAC;gBACvG,GAAG;IACf,QAAQ,KAAK,GAAG;;;;;;;;;;;CAcnB,MAAM,mBACL,YACA,SACA,SACA,WACA,YACA,gBACA,gBAC2B;AAC3B,SAAO,KAAK,cAAc,OAAO,OAAO,eAAe;GACtD,MAAM,SAAS,sBAAsB;IACpC,SAAS;IACT;IACA,MAAM;IACN,IAAI;IACJ,MAAM;IACN,CAAC;GACF,MAAM,SAAS,sBAAsB;IACpC,SAAS;IACT;IACA,MAAM;IACN,IAAI;IACJ,MAAM;IACN,CAAC;AAGF,OAAI,WAAW,OAAQ,QAAO;AAG9B,SAAM,WAAW,GACf,WAAW,oBAAoB,CAC/B,MAAM,UAAU,KAAK,OAAO,CAC5B,OAAO,OACP,GAAG,OACF,GACE,WAAW,8BAA8B,CACzC,OAAO,KAAK,CACZ,MAAM,MAAM,KAAK,uBAAuB,CACxC,MAAM,SAAS,KAAK,MAAM,MAAM,CAChC,MAAM,cAAc,KAAK,MAAM,WAAW,CAC5C,CACD,CACA,SAAS;AAGX,SAAM,WAAW,eAAe,QAAQ,QAAQ,MAAM;GAGtD,MAAM,WAAW,MAAM,WAAW,aAAa,OAAO;AACtD,OAAI,SAEH,QAAQ,MAAM,WAAW,OAAO,SAAS,IAAI,EAAE,aAAa,QAAQ,EAAE,QAAW,MAAM;AAGxF,UAAO,WAAW,OACjB;IACC,QAAQ;IACR,aAAa;IACb,MAAM;IACN,WAAW;IACX,MAAM;IACN,WAAW;IACX,EACD,MACA;IACA;;;;;;;CAQH,MAAM,eACL,gBACA,gBACA,OACkB;AAClB,MAAI,CAAC,MACJ,QAAO,KAAK,eAAe,cAAc,eACxC,WAAW,eAAe,gBAAgB,gBAAgB,aAAa,CACvE;EAEF,IAAI,QAAQ,KAAK,GACf,YAAY,oBAAoB,CAChC,IAAI;GACJ,aAAa;GACb,6BAAY,IAAI,MAAM,EAAC,aAAa;GACpC,iBAAiB,MAAM;GACvB,GAAI,QAAQ,EAAE,kBAAkB,MAAM,YAAY,GAAG,EAAE;GACvD,CAAC,CACD,MAAM,eAAe,KAAK,eAAe;AAC3C,MAAI,MACH,SAAQ,MAAM,OAAO,OACpB,GAAG,OACF,GACE,WAAW,8BAA8B,CACzC,OAAO,KAAK,CACZ,MAAM,MAAM,KAAK,uBAAuB,CACxC,MAAM,SAAS,KAAK,MAAM,MAAM,CAChC,MAAM,cAAc,KAAK,MAAM,WAAW,CAC5C,CACD;EAEF,MAAM,SAAS,MAAM,MAAM,kBAAkB;AAC7C,SAAO,OAAO,OAAO,eAAe;;;;;;;;;;;;;;;CAkBrC,MAAM,OAAO,OAKK;EACjB,MAAM,uBAAM,IAAI,MAAM,EAAC,aAAa;EACpC,MAAM,WAAW,eAAe,MAAM,UAAU,oBAAoB;EACpE,MAAM,YAAY,eAAe,MAAM,WAAW,sBAAsB;EACxE,MAAM,KAAK,MAAM,MAAM;EACvB,MAAM,KAAK,MAAM;AAMjB,QAAM,KAAK,GACT,WAAW,kBAAkB,CAC7B,OAAO;GACP;GACA,MAAM,MAAM;GACZ;GACA,YAAY;GACZ;GACA,MAAM;GACN,cAAc;GACd,YAAY;GACZ,CAAC,CACD,YAAY,OACZ,GAAG,OAAO,OAAO,CAAC,YAAY;GAC7B,MAAM,GAAG,GAAG,IAAI,IAAI,uBAAuB,CAAC;GAC5C,cAAc;GACd;GACA,YAAY;GACZ;GACA,CAAC,CACF,CACA,SAAS;;;;;;;;;CAUZ,MAAM,gBAAiC;EAKtC,MAAM,QAAQ,MAAM,KAAK,GACvB,WACA,KAAK,GACH,WAAW,kBAAkB,CAC7B,OAAO,GAAG,IAAI,GAAG,MAAM,CAAC,CACxB,MAAM,mBAAmB,EAAE,CAC3B,GAAG,SAAS,CACd,CACA,QAAQ,EAAE,SAAS,GAAG,UAAkB,CAAC,GAAG,QAAQ,CAAC,CACrD,yBAAyB;AAC3B,MAAI,OAAO,MAAM,MAAM,IAAI,iBAC1B,QAAO;EAMR,MAAM,SAAS,MAAM,KAAK,GACxB,WAAW,kBAAkB,CAC7B,MACA,MACA,UACA,KAAK,GACH,WAAW,kBAAkB,CAC7B,OAAO,KAAK,CACZ,QAAQ,gBAAgB,OAAO,CAC/B,QAAQ,MAAM,OAAO,CACrB,MAAM,iBAAiB,CACzB,CACA,kBAAkB;AACpB,SAAO,OAAO,OAAO,eAAe;;CAGrC,MAAM,SAAS,MAI4B;EAC1C,MAAM,QAAQ,KAAK,IAAI,KAAK,IAAI,KAAK,SAAS,IAAI,EAAE,EAAE,IAAI;EAE1D,IAAI,QAAQ,KAAK,GACf,WAAW,kBAAkB,CAC7B,WAAW,CACX,QAAQ,cAAc,OAAO,CAC7B,QAAQ,MAAM,OAAO,CACrB,MAAM,QAAQ,EAAE;AAElB,MAAI,KAAK,QAAQ;GAEhB,MAAM,OAAO,IADG,KAAK,OAAO,QAAQ,iBAAiB,MAAM,KAAK,IAAI,CAC3C;AACzB,WAAQ,MAAM,MAAM,GAAY,aAAa,KAAK,cAAc;;AAGjE,MAAI,KAAK,QAAQ;GAChB,MAAM,UAAU,aAAa,KAAK,OAAO;AACzC,WAAQ,MAAM,OAAO,OACpB,GAAG,GAAG,CACL,GAAG,cAAc,KAAK,QAAQ,WAAW,EACzC,GAAG,IAAI,CAAC,GAAG,cAAc,KAAK,QAAQ,WAAW,EAAE,GAAG,MAAM,KAAK,QAAQ,GAAG,CAAC,CAAC,CAC9E,CAAC,CACF;;EAGF,MAAM,OAAO,MAAM,MAAM,SAAS;EAClC,MAAM,QAAyB,KAAK,MAAM,GAAG,MAAM,CAAC,KAAK,SAAS;GACjE,IAAI,IAAI;GACR,MAAM,IAAI;GACV,UAAU,IAAI;GACd,WAAW,IAAI;GACf,IAAI,IAAI;GACR,WAAW,IAAI;GACf,EAAE;EAEH,MAAM,SAAwC,EAAE,OAAO;AACvD,MAAI,KAAK,SAAS,OAAO;GACxB,MAAM,OAAO,MAAM,GAAG,GAAG;AACzB,UAAO,aAAa,aAAa,KAAK,WAAW,KAAK,GAAG;;AAG1D,SAAO;;CAGR,MAAM,cAAc,QAAQ,IAAgC;AA2B3D,UAtBa,MAAM,GAKjB;;;;;;;;;;;;;;WAcO,MAAM;IACb,QAAQ,KAAK,GAAG,EAEN,KAAK,KAAK,SAAS;GAC9B,MAAM,IAAI;GACV,OAAO,OAAO,IAAI,MAAM;GACxB,UAAU,IAAI;GACd,aAAa,IAAI;GACjB,EAAE;;CAGJ,MAAM,UAAU,IAA8B;EAC7C,MAAM,SAAS,MAAM,KAAK,GACxB,WAAW,kBAAkB,CAC7B,MAAM,MAAM,KAAK,GAAG,CACpB,kBAAkB;AACpB,SAAO,OAAO,OAAO,eAAe,GAAG;;CAGxC,MAAM,YAA6B;EAClC,MAAM,SAAS,MAAM,KAAK,GAAG,WAAW,kBAAkB,CAAC,kBAAkB;AAC7E,SAAO,OAAO,OAAO,eAAe;;CAGrC,MAAM,UAAU,WAAoC;EACnD,MAAM,SAAS,MAAM,KAAK,GACxB,WAAW,kBAAkB,CAC7B,MAAM,cAAc,KAAK,UAAU,CACnC,kBAAkB;AACpB,SAAO,OAAO,OAAO,eAAe"}

package/dist/{redirect-paths-CNYq7w80.mjs → redirect-paths-DOaVBp6E.mjs}

@@ -33,4 +33,4 @@ async function invalidateRedirectSourcePaths(cache, ...sources) {
 
 //#endregion
 export { invalidateRedirectSourcePaths as t };
-//# sourceMappingURL=redirect-paths-CNYq7w80.mjs.map
+//# sourceMappingURL=redirect-paths-DOaVBp6E.mjs.map

package/dist/{redirect-paths-CNYq7w80.mjs.map → redirect-paths-DOaVBp6E.mjs.map}

@@ -1 +1 @@
-{"version":3,"file":"redirect-paths-CNYq7w80.mjs","names":[],"sources":["../src/cache/redirect-paths.ts"],"sourcesContent":["/**\n * Cache invalidation specs for redirect source paths.\n *\n * The Cloudflare adapter tags cached pages by request pathname\n * (`astro-path:<pathname>`). When a redirect is written, purging the source\n * path (and its trailing-slash variant) clears any stale cached page at that\n * location so the redirect middleware runs on the next request.\n */\n\nexport interface CachePathSpec {\n\tpath: string;\n}\n\ninterface CacheLike {\n\tenabled?: boolean;\n\tinvalidate(spec: CachePathSpec): Promise<unknown>;\n}\n\nfunction toggledTrailingSlash(path: string): string | null {\n\tif (path.length <= 1) return null;\n\treturn path.endsWith(\"/\") ? path.slice(0, -1) : `${path}/`;\n}\n\n/**\n * Build cache-invalidation specs for one or more redirect source paths.\n * Returns each path with and without a trailing slash, deduplicated.\n */\nexport function redirectSourceCachePaths(...sources: string[]): CachePathSpec[] {\n\tconst paths = new Set<string>();\n\tfor (const source of sources) {\n\t\tif (!source) continue;\n\t\tpaths.add(source);\n\t\tconst alt = toggledTrailingSlash(source);\n\t\tif (alt) paths.add(alt);\n\t}\n\treturn Array.from(paths, (path) => ({ path }));\n}\n\n/**\n * Invalidate the edge cache for one or more redirect source paths.\n * Failures are logged but not thrown: the redirect mutation has already\n * been committed and should still return a successful response.\n */\nexport async function invalidateRedirectSourcePaths(\n\tcache: CacheLike | undefined,\n\t...sources: string[]\n): Promise<void> {\n\tif (!cache?.enabled) return;\n\tfor (const spec of redirectSourceCachePaths(...sources)) {\n\t\ttry {\n\t\t\tawait cache.invalidate(spec);\n\t\t} catch (error) {\n\t\t\tconsole.error(`[redirects] Failed to invalidate cache for ${spec.path}:`, error);\n\t\t}\n\t}\n}\n"],"mappings":";AAkBA,SAAS,qBAAqB,MAA6B;AAC1D,KAAI,KAAK,UAAU,EAAG,QAAO;AAC7B,QAAO,KAAK,SAAS,IAAI,GAAG,KAAK,MAAM,GAAG,GAAG,GAAG,GAAG,KAAK;;;;;;AAOzD,SAAgB,yBAAyB,GAAG,SAAoC;CAC/E,MAAM,wBAAQ,IAAI,KAAa;AAC/B,MAAK,MAAM,UAAU,SAAS;AAC7B,MAAI,CAAC,OAAQ;AACb,QAAM,IAAI,OAAO;EACjB,MAAM,MAAM,qBAAqB,OAAO;AACxC,MAAI,IAAK,OAAM,IAAI,IAAI;;AAExB,QAAO,MAAM,KAAK,QAAQ,UAAU,EAAE,MAAM,EAAE;;;;;;;AAQ/C,eAAsB,8BACrB,OACA,GAAG,SACa;AAChB,KAAI,CAAC,OAAO,QAAS;AACrB,MAAK,MAAM,QAAQ,yBAAyB,GAAG,QAAQ,CACtD,KAAI;AACH,QAAM,MAAM,WAAW,KAAK;UACpB,OAAO;AACf,UAAQ,MAAM,8CAA8C,KAAK,KAAK,IAAI,MAAM"}
+{"version":3,"file":"redirect-paths-DOaVBp6E.mjs","names":[],"sources":["../src/cache/redirect-paths.ts"],"sourcesContent":["/**\n * Cache invalidation specs for redirect source paths.\n *\n * The Cloudflare adapter tags cached pages by request pathname\n * (`astro-path:<pathname>`). When a redirect is written, purging the source\n * path (and its trailing-slash variant) clears any stale cached page at that\n * location so the redirect middleware runs on the next request.\n */\n\nexport interface CachePathSpec {\n\tpath: string;\n}\n\ninterface CacheLike {\n\tenabled?: boolean;\n\tinvalidate(spec: CachePathSpec): Promise<unknown>;\n}\n\nfunction toggledTrailingSlash(path: string): string | null {\n\tif (path.length <= 1) return null;\n\treturn path.endsWith(\"/\") ? path.slice(0, -1) : `${path}/`;\n}\n\n/**\n * Build cache-invalidation specs for one or more redirect source paths.\n * Returns each path with and without a trailing slash, deduplicated.\n */\nexport function redirectSourceCachePaths(...sources: string[]): CachePathSpec[] {\n\tconst paths = new Set<string>();\n\tfor (const source of sources) {\n\t\tif (!source) continue;\n\t\tpaths.add(source);\n\t\tconst alt = toggledTrailingSlash(source);\n\t\tif (alt) paths.add(alt);\n\t}\n\treturn Array.from(paths, (path) => ({ path }));\n}\n\n/**\n * Invalidate the edge cache for one or more redirect source paths.\n * Failures are logged but not thrown: the redirect mutation has already\n * been committed and should still return a successful response.\n */\nexport async function invalidateRedirectSourcePaths(\n\tcache: CacheLike | undefined,\n\t...sources: string[]\n): Promise<void> {\n\tif (!cache?.enabled) return;\n\tfor (const spec of redirectSourceCachePaths(...sources)) {\n\t\ttry {\n\t\t\tawait cache.invalidate(spec);\n\t\t} catch (error) {\n\t\t\tconsole.error(`[redirects] Failed to invalidate cache for ${spec.path}:`, error);\n\t\t}\n\t}\n}\n"],"mappings":";AAkBA,SAAS,qBAAqB,MAA6B;AAC1D,KAAI,KAAK,UAAU,EAAG,QAAO;AAC7B,QAAO,KAAK,SAAS,IAAI,GAAG,KAAK,MAAM,GAAG,GAAG,GAAG,GAAG,KAAK;;;;;;AAOzD,SAAgB,yBAAyB,GAAG,SAAoC;CAC/E,MAAM,wBAAQ,IAAI,KAAa;AAC/B,MAAK,MAAM,UAAU,SAAS;AAC7B,MAAI,CAAC,OAAQ;AACb,QAAM,IAAI,OAAO;EACjB,MAAM,MAAM,qBAAqB,OAAO;AACxC,MAAI,IAAK,OAAM,IAAI,IAAI;;AAExB,QAAO,MAAM,KAAK,QAAQ,UAAU,EAAE,MAAM,EAAE;;;;;;;AAQ/C,eAAsB,8BACrB,OACA,GAAG,SACa;AAChB,KAAI,CAAC,OAAO,QAAS;AACrB,MAAK,MAAM,QAAQ,yBAAyB,GAAG,QAAQ,CACtD,KAAI;AACH,QAAM,MAAM,WAAW,KAAK;UACpB,OAAO;AACf,UAAQ,MAAM,8CAA8C,KAAK,KAAK,IAAI,MAAM"}

package/dist/{redirects-BHpy-VsZ.mjs → redirects-Cpq1catN.mjs}

@@ -1,10 +1,10 @@
 import { t as OptionsRepository } from "./options-DhrI7eMv.mjs";
-import { i as InvalidCursorError } from "./types-D2NEXtgB.mjs";
-import { a as validateDestinationParams, o as validatePattern, r as isPattern } from "./patterns-CMNnYCgf.mjs";
-import { n as RedirectWriteBusyError, t as RedirectRepository } from "./redirect-DiS_3mA4.mjs";
-import { r as publishRedirectChanges } from "./artifacts-htGyfCSt.mjs";
+import { a as InvalidCursorError } from "./types-DwhEvIVb.mjs";
+import { a as validateDestinationParams, o as validatePattern, r as isPattern } from "./patterns-CryGz_EV.mjs";
+import { n as RedirectWriteBusyError, t as RedirectRepository } from "./redirect-DjLdw427.mjs";
+import { r as publishRedirectChanges } from "./artifacts-Dvdp2KK-.mjs";
 import { n as isTerminalStatus } from "./status-BFNdxzKc.mjs";
-import { n as wouldCreateLoop, t as detectLoops } from "./loops-uA4iTOzd.mjs";
+import { n as wouldCreateLoop, t as detectLoops } from "./loops-B2YS-Zzr.mjs";
 
 //#region src/api/handlers/redirects.ts
 async function withRedirectWriteLock(repo, action) {
@@ -443,4 +443,4 @@ async function handleNotFoundPrune(db, olderThan) {
 
 //#endregion
 export { handleRedirectCreate as a, handleRedirectList as c, handleNotFoundSummary as i, handleRedirectUpdate as l, handleNotFoundList as n, handleRedirectDelete as o, handleNotFoundPrune as r, handleRedirectGet as s, handleNotFoundClear as t };
-//# sourceMappingURL=redirects-BHpy-VsZ.mjs.map
+//# sourceMappingURL=redirects-Cpq1catN.mjs.map

package/dist/{redirects-BHpy-VsZ.mjs.map → redirects-Cpq1catN.mjs.map}

@@ -1 +1 @@
-{"version":3,"file":"redirects-BHpy-VsZ.mjs","names":[],"sources":["../src/api/handlers/redirects.ts"],"sourcesContent":["/**\n * Redirect CRUD and 404 log handlers\n */\n\nimport type { Kysely } from \"kysely\";\n\nimport { OptionsRepository } from \"../../database/repositories/options.js\";\nimport {\n\tRedirectRepository,\n\tRedirectWriteBusyError,\n\ttype RedirectWriteFence,\n\ttype Redirect,\n\ttype NotFoundEntry,\n\ttype NotFoundSummary,\n} from \"../../database/repositories/redirect.js\";\nimport { InvalidCursorError } from \"../../database/repositories/types.js\";\nimport type { FindManyResult } from \"../../database/repositories/types.js\";\nimport type { Database } from \"../../database/types.js\";\nimport { publishRedirectChanges } from \"../../redirects/artifacts.js\";\nimport { wouldCreateLoop, detectLoops, type RedirectEdge } from \"../../redirects/loops.js\";\nimport { validatePattern, validateDestinationParams, isPattern } from \"../../redirects/patterns.js\";\nimport { isTerminalStatus } from \"../../redirects/status.js\";\nimport type { ApiResult } from \"../types.js\";\n\nasync function withRedirectWriteLock<T>(\n\trepo: RedirectRepository,\n\taction: (fence: RedirectWriteFence, repository: RedirectRepository) => Promise<ApiResult<T>>,\n): Promise<ApiResult<T>> {\n\ttry {\n\t\treturn await repo.withWriteLock(action);\n\t} catch (error) {\n\t\tif (error instanceof RedirectWriteBusyError) {\n\t\t\treturn {\n\t\t\t\tsuccess: false,\n\t\t\t\terror: { code: \"REDIRECT_BUSY\", message: \"Another redirect change is in progress\" },\n\t\t\t};\n\t\t}\n\t\tthrow error;\n\t}\n}\n\n// ---------------------------------------------------------------------------\n// Redirects\n// ---------------------------------------------------------------------------\n\n/**\n * List redirects with cursor pagination and optional filters\n */\nexport async function handleRedirectList(\n\tdb: Kysely<Database>,\n\tparams: {\n\t\tcursor?: string;\n\t\tlimit?: number;\n\t\tsearch?: string;\n\t\tgroup?: string;\n\t\tenabled?: boolean;\n\t\tauto?: boolean;\n\t},\n): Promise<ApiResult<FindManyResult<Redirect> & { loopRedirectIds?: string[] }>> {\n\ttry {\n\t\tconst repo = new RedirectRepository(db);\n\t\tconst result = await repo.findMany(params);\n\n\t\tconst loopRedirectIds = await getLoopRedirectIds(db);\n\n\t\treturn {\n\t\t\tsuccess: true,\n\t\t\tdata: {\n\t\t\t\t...result,\n\t\t\t\t...(loopRedirectIds.length > 0 ? { loopRedirectIds } : {}),\n\t\t\t},\n\t\t};\n\t} catch (error) {\n\t\tif (error instanceof InvalidCursorError) {\n\t\t\treturn {\n\t\t\t\tsuccess: false,\n\t\t\t\terror: { code: \"INVALID_CURSOR\", message: error.message },\n\t\t\t};\n\t\t}\n\t\treturn {\n\t\t\tsuccess: false,\n\t\t\terror: { code: \"REDIRECT_LIST_ERROR\", message: \"Failed to fetch redirects\" },\n\t\t};\n\t}\n}\n\n/**\n * Create a redirect rule\n */\nexport async function handleRedirectCreate(\n\tdb: Kysely<Database>,\n\tinput: {\n\t\tsource: string;\n\t\tdestination?: string;\n\t\ttype?: number;\n\t\tenabled?: boolean;\n\t\tgroupName?: string | null;\n\t},\n): Promise<ApiResult<Redirect>> {\n\ttry {\n\t\tconst lockRepo = new RedirectRepository(db);\n\t\tconst result = await withRedirectWriteLock(lockRepo, async (fence, repo) => {\n\t\t\tconst type = input.type ?? 301;\n\t\t\t// Terminal statuses (410 Gone / 451) are served directly and have no\n\t\t\t// destination — skip the destination/loop checks for them.\n\t\t\tconst terminal = isTerminalStatus(type);\n\t\t\tconst destination = terminal ? \"\" : (input.destination ?? \"\");\n\n\t\t\t// Source and destination must differ\n\t\t\tif (!terminal && input.source === destination) {\n\t\t\t\treturn {\n\t\t\t\t\tsuccess: false,\n\t\t\t\t\terror: {\n\t\t\t\t\t\tcode: \"VALIDATION_ERROR\",\n\t\t\t\t\t\tmessage: \"Source and destination must be different\",\n\t\t\t\t\t},\n\t\t\t\t};\n\t\t\t}\n\n\t\t\t// If source looks like a pattern, validate it\n\t\t\tconst sourceIsPattern = isPattern(input.source);\n\t\t\tif (sourceIsPattern) {\n\t\t\t\tconst patternError = validatePattern(input.source);\n\t\t\t\tif (patternError) {\n\t\t\t\t\treturn {\n\t\t\t\t\t\tsuccess: false,\n\t\t\t\t\t\terror: { code: \"VALIDATION_ERROR\", message: `Invalid source pattern: ${patternError}` },\n\t\t\t\t\t};\n\t\t\t\t}\n\n\t\t\t\t// Validate destination params reference valid source params\n\t\t\t\t// (terminal rules have no destination to interpolate)\n\t\t\t\tif (!terminal) {\n\t\t\t\t\tconst destError = validateDestinationParams(input.source, destination);\n\t\t\t\t\tif (destError) {\n\t\t\t\t\t\treturn {\n\t\t\t\t\t\t\tsuccess: false,\n\t\t\t\t\t\t\terror: { code: \"VALIDATION_ERROR\", message: destError },\n\t\t\t\t\t\t};\n\t\t\t\t\t}\n\t\t\t\t}\n\t\t\t}\n\n\t\t\t// Check for duplicate source (exact match only for non-patterns)\n\t\t\tconst existing = await repo.findBySource(input.source);\n\t\t\tif (existing) {\n\t\t\t\treturn {\n\t\t\t\t\tsuccess: false,\n\t\t\t\t\terror: {\n\t\t\t\t\t\tcode: \"CONFLICT\",\n\t\t\t\t\t\tmessage: `A redirect from \"${input.source}\" already exists`,\n\t\t\t\t\t},\n\t\t\t\t};\n\t\t\t}\n\n\t\t\t// Check for redirect loops (skip if creating as disabled, or terminal —\n\t\t\t// a Gone rule has no destination, so it can't form a loop)\n\t\t\tif (!terminal && input.enabled !== false) {\n\t\t\t\tconst edges = toEdges(await repo.findAllEnabled());\n\t\t\t\tconst loopPath = wouldCreateLoop(input.source, destination, edges);\n\t\t\t\tif (loopPath) return loopError(loopPath);\n\t\t\t}\n\n\t\t\tconst redirect = await repo.create(\n\t\t\t\t{\n\t\t\t\t\tsource: input.source,\n\t\t\t\t\tdestination,\n\t\t\t\t\ttype,\n\t\t\t\t\tisPattern: sourceIsPattern,\n\t\t\t\t\tenabled: input.enabled ?? true,\n\t\t\t\t\tgroupName: input.groupName ?? null,\n\t\t\t\t},\n\t\t\t\tfence,\n\t\t\t);\n\t\t\treturn { success: true, data: redirect };\n\t\t});\n\t\tif (result.success) await publishRedirectChanges(db);\n\t\treturn result;\n\t} catch {\n\t\treturn {\n\t\t\tsuccess: false,\n\t\t\terror: { code: \"REDIRECT_CREATE_ERROR\", message: \"Failed to create redirect\" },\n\t\t};\n\t}\n}\n\n/**\n * Get a redirect by ID\n */\nexport async function handleRedirectGet(\n\tdb: Kysely<Database>,\n\tid: string,\n): Promise<ApiResult<Redirect>> {\n\ttry {\n\t\tconst repo = new RedirectRepository(db);\n\t\tconst redirect = await repo.findById(id);\n\n\t\tif (!redirect) {\n\t\t\treturn {\n\t\t\t\tsuccess: false,\n\t\t\t\terror: { code: \"NOT_FOUND\", message: `Redirect \"${id}\" not found` },\n\t\t\t};\n\t\t}\n\n\t\treturn { success: true, data: redirect };\n\t} catch {\n\t\treturn {\n\t\t\tsuccess: false,\n\t\t\terror: { code: \"REDIRECT_GET_ERROR\", message: \"Failed to fetch redirect\" },\n\t\t};\n\t}\n}\n\n/**\n * Update a redirect by ID\n */\nexport async function handleRedirectUpdate(\n\tdb: Kysely<Database>,\n\tid: string,\n\tinput: {\n\t\tsource?: string;\n\t\tdestination?: string;\n\t\ttype?: number;\n\t\tenabled?: boolean;\n\t\tgroupName?: string | null;\n\t},\n\toptions?: { expectedRevision?: string },\n): Promise<ApiResult<Redirect>> {\n\ttry {\n\t\tconst lockRepo = new RedirectRepository(db);\n\t\tconst result = await withRedirectWriteLock(lockRepo, async (fence, repo) => {\n\t\t\tconst existing = await repo.findById(id);\n\t\t\tif (!existing) {\n\t\t\t\treturn {\n\t\t\t\t\tsuccess: false,\n\t\t\t\t\terror: { code: \"NOT_FOUND\", message: `Redirect \"${id}\" not found` },\n\t\t\t\t};\n\t\t\t}\n\n\t\t\tif (options?.expectedRevision !== undefined) {\n\t\t\t\tconst currentRevision = await repo.findConfigRevision(id);\n\t\t\t\tif (currentRevision !== options.expectedRevision) {\n\t\t\t\t\treturn {\n\t\t\t\t\t\tsuccess: false,\n\t\t\t\t\t\terror: { code: \"CONFLICT\", message: \"Redirect changed since it was read\" },\n\t\t\t\t\t};\n\t\t\t\t}\n\t\t\t}\n\n\t\t\tconst newSource = input.source ?? existing.source;\n\t\t\tconst newType = input.type ?? existing.type;\n\t\t\tconst terminal = isTerminalStatus(newType);\n\t\t\tconst newDest = terminal ? \"\" : (input.destination ?? existing.destination);\n\t\t\tif (!terminal && !newDest) {\n\t\t\t\treturn {\n\t\t\t\t\tsuccess: false,\n\t\t\t\t\terror: {\n\t\t\t\t\t\tcode: \"VALIDATION_ERROR\",\n\t\t\t\t\t\tmessage: \"destination is required for redirect types (301, 302, 307, 308)\",\n\t\t\t\t\t},\n\t\t\t\t};\n\t\t\t}\n\n\t\t\t// Source and destination must differ\n\t\t\tif (!terminal && newSource === newDest) {\n\t\t\t\treturn {\n\t\t\t\t\tsuccess: false,\n\t\t\t\t\terror: {\n\t\t\t\t\t\tcode: \"VALIDATION_ERROR\",\n\t\t\t\t\t\tmessage: \"Source and destination must be different\",\n\t\t\t\t\t},\n\t\t\t\t};\n\t\t\t}\n\n\t\t\t// If source is changing, validate patterns\n\t\t\tif (input.source !== undefined) {\n\t\t\t\tconst sourceIsPattern = isPattern(input.source);\n\t\t\t\tif (sourceIsPattern) {\n\t\t\t\t\tconst patternError = validatePattern(input.source);\n\t\t\t\t\tif (patternError) {\n\t\t\t\t\t\treturn {\n\t\t\t\t\t\t\tsuccess: false,\n\t\t\t\t\t\t\terror: {\n\t\t\t\t\t\t\t\tcode: \"VALIDATION_ERROR\",\n\t\t\t\t\t\t\t\tmessage: `Invalid source pattern: ${patternError}`,\n\t\t\t\t\t\t\t},\n\t\t\t\t\t\t};\n\t\t\t\t\t}\n\t\t\t\t}\n\n\t\t\t\t// Check for duplicate source (exclude self)\n\t\t\t\tconst dup = await repo.findBySource(input.source);\n\t\t\t\tif (dup && dup.id !== id) {\n\t\t\t\t\treturn {\n\t\t\t\t\t\tsuccess: false,\n\t\t\t\t\t\terror: {\n\t\t\t\t\t\t\tcode: \"CONFLICT\",\n\t\t\t\t\t\t\tmessage: `A redirect from \"${input.source}\" already exists`,\n\t\t\t\t\t\t},\n\t\t\t\t\t};\n\t\t\t\t}\n\t\t\t}\n\n\t\t\t// Validate destination params against the (possibly updated) source\n\t\t\tconst newSourceIsPattern = isPattern(newSource);\n\t\t\tif (newSourceIsPattern && !terminal) {\n\t\t\t\tconst destError = validateDestinationParams(newSource, newDest);\n\t\t\t\tif (destError) {\n\t\t\t\t\treturn {\n\t\t\t\t\t\tsuccess: false,\n\t\t\t\t\t\terror: { code: \"VALIDATION_ERROR\", message: destError },\n\t\t\t\t\t};\n\t\t\t\t}\n\t\t\t}\n\n\t\t\t// Check for redirect loops if the rule's edge changes or it becomes active\n\t\t\tconst willBeEnabled = input.enabled ?? existing.enabled;\n\t\t\tif (\n\t\t\t\t!terminal &&\n\t\t\t\twillBeEnabled &&\n\t\t\t\t(input.source !== undefined || input.destination !== undefined || !existing.enabled)\n\t\t\t) {\n\t\t\t\tconst edges = toEdges(await repo.findAllEnabled());\n\t\t\t\tconst loopPath = wouldCreateLoop(newSource, newDest, edges, id);\n\t\t\t\tif (loopPath) return loopError(loopPath);\n\t\t\t}\n\n\t\t\tconst updated = await repo.update(\n\t\t\t\tid,\n\t\t\t\t{\n\t\t\t\t\tsource: input.source,\n\t\t\t\t\tdestination: terminal ? \"\" : input.destination,\n\t\t\t\t\ttype: input.type,\n\t\t\t\t\tenabled: input.enabled,\n\t\t\t\t\tgroupName: input.groupName,\n\t\t\t\t},\n\t\t\t\toptions?.expectedRevision,\n\t\t\t\tfence,\n\t\t\t);\n\n\t\t\tif (!updated) {\n\t\t\t\treturn {\n\t\t\t\t\tsuccess: false,\n\t\t\t\t\terror: options?.expectedRevision\n\t\t\t\t\t\t? { code: \"CONFLICT\", message: \"Redirect changed since it was read\" }\n\t\t\t\t\t\t: { code: \"REDIRECT_UPDATE_ERROR\", message: \"Failed to update redirect\" },\n\t\t\t\t};\n\t\t\t}\n\n\t\t\t// Recompute cache — redirect was modified, so re-fetch\n\t\t\tawait updateLoopCache(repo.db);\n\t\t\treturn { success: true, data: updated };\n\t\t});\n\t\tif (result.success) await publishRedirectChanges(db);\n\t\treturn result;\n\t} catch {\n\t\treturn {\n\t\t\tsuccess: false,\n\t\t\terror: { code: \"REDIRECT_UPDATE_ERROR\", message: \"Failed to update redirect\" },\n\t\t};\n\t}\n}\n\n/**\n * Delete a redirect by ID\n */\nexport async function handleRedirectDelete(\n\tdb: Kysely<Database>,\n\tid: string,\n\toptions?: { expectedRevision?: string },\n): Promise<ApiResult<{ deleted: true }>> {\n\ttry {\n\t\tconst lockRepo = new RedirectRepository(db);\n\t\tconst result = await withRedirectWriteLock<{ deleted: true }>(lockRepo, async (fence, repo) => {\n\t\t\tif (options?.expectedRevision !== undefined) {\n\t\t\t\tconst existing = await repo.findById(id);\n\t\t\t\tif (!existing) {\n\t\t\t\t\treturn {\n\t\t\t\t\t\tsuccess: false,\n\t\t\t\t\t\terror: { code: \"NOT_FOUND\", message: `Redirect \"${id}\" not found` },\n\t\t\t\t\t};\n\t\t\t\t}\n\t\t\t\tconst currentRevision = await repo.findConfigRevision(id);\n\t\t\t\tif (currentRevision !== options.expectedRevision) {\n\t\t\t\t\treturn {\n\t\t\t\t\t\tsuccess: false,\n\t\t\t\t\t\terror: { code: \"CONFLICT\", message: \"Redirect changed since it was read\" },\n\t\t\t\t\t};\n\t\t\t\t}\n\t\t\t}\n\t\t\tconst deleted = await repo.delete(id, options?.expectedRevision, fence);\n\n\t\t\tif (!deleted) {\n\t\t\t\treturn {\n\t\t\t\t\tsuccess: false,\n\t\t\t\t\terror: options?.expectedRevision\n\t\t\t\t\t\t? { code: \"CONFLICT\", message: \"Redirect changed since it was read\" }\n\t\t\t\t\t\t: { code: \"NOT_FOUND\", message: `Redirect \"${id}\" not found` },\n\t\t\t\t};\n\t\t\t}\n\n\t\t\tawait updateLoopCache(repo.db);\n\t\t\treturn { success: true, data: { deleted: true } };\n\t\t});\n\t\tif (result.success) await publishRedirectChanges(db);\n\t\treturn result;\n\t} catch {\n\t\treturn {\n\t\t\tsuccess: false,\n\t\t\terror: { code: \"REDIRECT_DELETE_ERROR\", message: \"Failed to delete redirect\" },\n\t\t};\n\t}\n}\n\n// ---------------------------------------------------------------------------\n// Loop analysis cache\n// ---------------------------------------------------------------------------\n\nfunction loopError(loopPath: string[]): ApiResult<never> {\n\tconst hops = loopPath\n\t\t.slice(0, -1)\n\t\t.map((p, i) => `${p} \\u2192 ${loopPath[i + 1]}`)\n\t\t.join(\"\\n\");\n\treturn {\n\t\tsuccess: false,\n\t\terror: {\n\t\t\tcode: \"VALIDATION_ERROR\",\n\t\t\tmessage: `This redirect would create a loop:\\n${hops}`,\n\t\t},\n\t};\n}\n\nfunction toEdges(redirects: Redirect[]): RedirectEdge[] {\n\treturn redirects.map((r) => ({\n\t\tid: r.id,\n\t\tsource: r.source,\n\t\tdestination: r.destination,\n\t\tenabled: r.enabled,\n\t\tisPattern: r.isPattern,\n\t}));\n}\n\nconst LOOP_CACHE_KEY = \"_redirect_loop_ids\";\n\n/**\n * Recompute loop redirect IDs and store in the options table.\n */\nasync function updateLoopCache(db: Kysely<Database>): Promise<void> {\n\ttry {\n\t\tconst options = new OptionsRepository(db);\n\t\tconst edges = toEdges(await new RedirectRepository(db).findAllEnabled());\n\t\tconst loopRedirectIds = detectLoops(edges);\n\t\tawait options.set(LOOP_CACHE_KEY, loopRedirectIds);\n\t} catch (error) {\n\t\tconsole.error(\"Failed to update redirect loop cache:\", error);\n\t}\n}\n\n/**\n * Get loop redirect IDs from cache, computing lazily on first access.\n */\nasync function getLoopRedirectIds(db: Kysely<Database>): Promise<string[]> {\n\ttry {\n\t\tconst options = new OptionsRepository(db);\n\t\tconst cached = await options.get<string[]>(LOOP_CACHE_KEY);\n\t\tif (cached !== null) return cached;\n\n\t\t// First access after upgrade — compute and cache\n\t\tawait updateLoopCache(db);\n\t\treturn (await options.get<string[]>(LOOP_CACHE_KEY)) ?? [];\n\t} catch {\n\t\treturn [];\n\t}\n}\n\n// ---------------------------------------------------------------------------\n// 404 Log\n// ---------------------------------------------------------------------------\n\n/**\n * List 404 log entries with cursor pagination\n */\nexport async function handleNotFoundList(\n\tdb: Kysely<Database>,\n\tparams: { cursor?: string; limit?: number; search?: string },\n): Promise<ApiResult<FindManyResult<NotFoundEntry>>> {\n\ttry {\n\t\tconst repo = new RedirectRepository(db);\n\t\tconst result = await repo.find404s(params);\n\t\treturn { success: true, data: result };\n\t} catch (error) {\n\t\tif (error instanceof InvalidCursorError) {\n\t\t\treturn {\n\t\t\t\tsuccess: false,\n\t\t\t\terror: { code: \"INVALID_CURSOR\", message: error.message },\n\t\t\t};\n\t\t}\n\t\treturn {\n\t\t\tsuccess: false,\n\t\t\terror: { code: \"NOT_FOUND_LIST_ERROR\", message: \"Failed to fetch 404 log\" },\n\t\t};\n\t}\n}\n\n/**\n * Get 404 summary (grouped by path, sorted by count)\n */\nexport async function handleNotFoundSummary(\n\tdb: Kysely<Database>,\n\tlimit?: number,\n): Promise<ApiResult<{ items: NotFoundSummary[] }>> {\n\ttry {\n\t\tconst repo = new RedirectRepository(db);\n\t\tconst items = await repo.get404Summary(limit);\n\t\treturn { success: true, data: { items } };\n\t} catch {\n\t\treturn {\n\t\t\tsuccess: false,\n\t\t\terror: { code: \"NOT_FOUND_SUMMARY_ERROR\", message: \"Failed to fetch 404 summary\" },\n\t\t};\n\t}\n}\n\n/**\n * Clear all 404 log entries\n */\nexport async function handleNotFoundClear(\n\tdb: Kysely<Database>,\n): Promise<ApiResult<{ deleted: number }>> {\n\ttry {\n\t\tconst repo = new RedirectRepository(db);\n\t\tconst deleted = await repo.clear404s();\n\t\treturn { success: true, data: { deleted } };\n\t} catch {\n\t\treturn {\n\t\t\tsuccess: false,\n\t\t\terror: { code: \"NOT_FOUND_CLEAR_ERROR\", message: \"Failed to clear 404 log\" },\n\t\t};\n\t}\n}\n\n/**\n * Prune 404 log entries older than a given date\n */\nexport async function handleNotFoundPrune(\n\tdb: Kysely<Database>,\n\tolderThan: string,\n): Promise<ApiResult<{ deleted: number }>> {\n\ttry {\n\t\tconst repo = new RedirectRepository(db);\n\t\tconst deleted = await repo.prune404s(olderThan);\n\t\treturn { success: true, data: { deleted } };\n\t} catch {\n\t\treturn {\n\t\t\tsuccess: false,\n\t\t\terror: { code: \"NOT_FOUND_PRUNE_ERROR\", message: \"Failed to prune 404 log\" },\n\t\t};\n\t}\n}\n"],"mappings":";;;;;;;;;AAwBA,eAAe,sBACd,MACA,QACwB;AACxB,KAAI;AACH,SAAO,MAAM,KAAK,cAAc,OAAO;UAC/B,OAAO;AACf,MAAI,iBAAiB,uBACpB,QAAO;GACN,SAAS;GACT,OAAO;IAAE,MAAM;IAAiB,SAAS;IAA0C;GACnF;AAEF,QAAM;;;;;;AAWR,eAAsB,mBACrB,IACA,QAQgF;AAChF,KAAI;EAEH,MAAM,SAAS,MADF,IAAI,mBAAmB,GAAG,CACb,SAAS,OAAO;EAE1C,MAAM,kBAAkB,MAAM,mBAAmB,GAAG;AAEpD,SAAO;GACN,SAAS;GACT,MAAM;IACL,GAAG;IACH,GAAI,gBAAgB,SAAS,IAAI,EAAE,iBAAiB,GAAG,EAAE;IACzD;GACD;UACO,OAAO;AACf,MAAI,iBAAiB,mBACpB,QAAO;GACN,SAAS;GACT,OAAO;IAAE,MAAM;IAAkB,SAAS,MAAM;IAAS;GACzD;AAEF,SAAO;GACN,SAAS;GACT,OAAO;IAAE,MAAM;IAAuB,SAAS;IAA6B;GAC5E;;;;;;AAOH,eAAsB,qBACrB,IACA,OAO+B;AAC/B,KAAI;EAEH,MAAM,SAAS,MAAM,sBADJ,IAAI,mBAAmB,GAAG,EACU,OAAO,OAAO,SAAS;GAC3E,MAAM,OAAO,MAAM,QAAQ;GAG3B,MAAM,WAAW,iBAAiB,KAAK;GACvC,MAAM,cAAc,WAAW,KAAM,MAAM,eAAe;AAG1D,OAAI,CAAC,YAAY,MAAM,WAAW,YACjC,QAAO;IACN,SAAS;IACT,OAAO;KACN,MAAM;KACN,SAAS;KACT;IACD;GAIF,MAAM,kBAAkB,UAAU,MAAM,OAAO;AAC/C,OAAI,iBAAiB;IACpB,MAAM,eAAe,gBAAgB,MAAM,OAAO;AAClD,QAAI,aACH,QAAO;KACN,SAAS;KACT,OAAO;MAAE,MAAM;MAAoB,SAAS,2BAA2B;MAAgB;KACvF;AAKF,QAAI,CAAC,UAAU;KACd,MAAM,YAAY,0BAA0B,MAAM,QAAQ,YAAY;AACtE,SAAI,UACH,QAAO;MACN,SAAS;MACT,OAAO;OAAE,MAAM;OAAoB,SAAS;OAAW;MACvD;;;AAOJ,OADiB,MAAM,KAAK,aAAa,MAAM,OAAO,CAErD,QAAO;IACN,SAAS;IACT,OAAO;KACN,MAAM;KACN,SAAS,oBAAoB,MAAM,OAAO;KAC1C;IACD;AAKF,OAAI,CAAC,YAAY,MAAM,YAAY,OAAO;IACzC,MAAM,QAAQ,QAAQ,MAAM,KAAK,gBAAgB,CAAC;IAClD,MAAM,WAAW,gBAAgB,MAAM,QAAQ,aAAa,MAAM;AAClE,QAAI,SAAU,QAAO,UAAU,SAAS;;AAczC,UAAO;IAAE,SAAS;IAAM,MAXP,MAAM,KAAK,OAC3B;KACC,QAAQ,MAAM;KACd;KACA;KACA,WAAW;KACX,SAAS,MAAM,WAAW;KAC1B,WAAW,MAAM,aAAa;KAC9B,EACD,MACA;IACuC;IACvC;AACF,MAAI,OAAO,QAAS,OAAM,uBAAuB,GAAG;AACpD,SAAO;SACA;AACP,SAAO;GACN,SAAS;GACT,OAAO;IAAE,MAAM;IAAyB,SAAS;IAA6B;GAC9E;;;;;;AAOH,eAAsB,kBACrB,IACA,IAC+B;AAC/B,KAAI;EAEH,MAAM,WAAW,MADJ,IAAI,mBAAmB,GAAG,CACX,SAAS,GAAG;AAExC,MAAI,CAAC,SACJ,QAAO;GACN,SAAS;GACT,OAAO;IAAE,MAAM;IAAa,SAAS,aAAa,GAAG;IAAc;GACnE;AAGF,SAAO;GAAE,SAAS;GAAM,MAAM;GAAU;SACjC;AACP,SAAO;GACN,SAAS;GACT,OAAO;IAAE,MAAM;IAAsB,SAAS;IAA4B;GAC1E;;;;;;AAOH,eAAsB,qBACrB,IACA,IACA,OAOA,SAC+B;AAC/B,KAAI;EAEH,MAAM,SAAS,MAAM,sBADJ,IAAI,mBAAmB,GAAG,EACU,OAAO,OAAO,SAAS;GAC3E,MAAM,WAAW,MAAM,KAAK,SAAS,GAAG;AACxC,OAAI,CAAC,SACJ,QAAO;IACN,SAAS;IACT,OAAO;KAAE,MAAM;KAAa,SAAS,aAAa,GAAG;KAAc;IACnE;AAGF,OAAI,SAAS,qBAAqB,QAEjC;QADwB,MAAM,KAAK,mBAAmB,GAAG,KACjC,QAAQ,iBAC/B,QAAO;KACN,SAAS;KACT,OAAO;MAAE,MAAM;MAAY,SAAS;MAAsC;KAC1E;;GAIH,MAAM,YAAY,MAAM,UAAU,SAAS;GAE3C,MAAM,WAAW,iBADD,MAAM,QAAQ,SAAS,KACG;GAC1C,MAAM,UAAU,WAAW,KAAM,MAAM,eAAe,SAAS;AAC/D,OAAI,CAAC,YAAY,CAAC,QACjB,QAAO;IACN,SAAS;IACT,OAAO;KACN,MAAM;KACN,SAAS;KACT;IACD;AAIF,OAAI,CAAC,YAAY,cAAc,QAC9B,QAAO;IACN,SAAS;IACT,OAAO;KACN,MAAM;KACN,SAAS;KACT;IACD;AAIF,OAAI,MAAM,WAAW,QAAW;AAE/B,QADwB,UAAU,MAAM,OAAO,EAC1B;KACpB,MAAM,eAAe,gBAAgB,MAAM,OAAO;AAClD,SAAI,aACH,QAAO;MACN,SAAS;MACT,OAAO;OACN,MAAM;OACN,SAAS,2BAA2B;OACpC;MACD;;IAKH,MAAM,MAAM,MAAM,KAAK,aAAa,MAAM,OAAO;AACjD,QAAI,OAAO,IAAI,OAAO,GACrB,QAAO;KACN,SAAS;KACT,OAAO;MACN,MAAM;MACN,SAAS,oBAAoB,MAAM,OAAO;MAC1C;KACD;;AAMH,OAD2B,UAAU,UAAU,IACrB,CAAC,UAAU;IACpC,MAAM,YAAY,0BAA0B,WAAW,QAAQ;AAC/D,QAAI,UACH,QAAO;KACN,SAAS;KACT,OAAO;MAAE,MAAM;MAAoB,SAAS;MAAW;KACvD;;GAKH,MAAM,gBAAgB,MAAM,WAAW,SAAS;AAChD,OACC,CAAC,YACD,kBACC,MAAM,WAAW,UAAa,MAAM,gBAAgB,UAAa,CAAC,SAAS,UAC3E;IAED,MAAM,WAAW,gBAAgB,WAAW,SAD9B,QAAQ,MAAM,KAAK,gBAAgB,CAAC,EACU,GAAG;AAC/D,QAAI,SAAU,QAAO,UAAU,SAAS;;GAGzC,MAAM,UAAU,MAAM,KAAK,OAC1B,IACA;IACC,QAAQ,MAAM;IACd,aAAa,WAAW,KAAK,MAAM;IACnC,MAAM,MAAM;IACZ,SAAS,MAAM;IACf,WAAW,MAAM;IACjB,EACD,SAAS,kBACT,MACA;AAED,OAAI,CAAC,QACJ,QAAO;IACN,SAAS;IACT,OAAO,SAAS,mBACb;KAAE,MAAM;KAAY,SAAS;KAAsC,GACnE;KAAE,MAAM;KAAyB,SAAS;KAA6B;IAC1E;AAIF,SAAM,gBAAgB,KAAK,GAAG;AAC9B,UAAO;IAAE,SAAS;IAAM,MAAM;IAAS;IACtC;AACF,MAAI,OAAO,QAAS,OAAM,uBAAuB,GAAG;AACpD,SAAO;SACA;AACP,SAAO;GACN,SAAS;GACT,OAAO;IAAE,MAAM;IAAyB,SAAS;IAA6B;GAC9E;;;;;;AAOH,eAAsB,qBACrB,IACA,IACA,SACwC;AACxC,KAAI;EAEH,MAAM,SAAS,MAAM,sBADJ,IAAI,mBAAmB,GAAG,EAC6B,OAAO,OAAO,SAAS;AAC9F,OAAI,SAAS,qBAAqB,QAAW;AAE5C,QAAI,CADa,MAAM,KAAK,SAAS,GAAG,CAEvC,QAAO;KACN,SAAS;KACT,OAAO;MAAE,MAAM;MAAa,SAAS,aAAa,GAAG;MAAc;KACnE;AAGF,QADwB,MAAM,KAAK,mBAAmB,GAAG,KACjC,QAAQ,iBAC/B,QAAO;KACN,SAAS;KACT,OAAO;MAAE,MAAM;MAAY,SAAS;MAAsC;KAC1E;;AAKH,OAAI,CAFY,MAAM,KAAK,OAAO,IAAI,SAAS,kBAAkB,MAAM,CAGtE,QAAO;IACN,SAAS;IACT,OAAO,SAAS,mBACb;KAAE,MAAM;KAAY,SAAS;KAAsC,GACnE;KAAE,MAAM;KAAa,SAAS,aAAa,GAAG;KAAc;IAC/D;AAGF,SAAM,gBAAgB,KAAK,GAAG;AAC9B,UAAO;IAAE,SAAS;IAAM,MAAM,EAAE,SAAS,MAAM;IAAE;IAChD;AACF,MAAI,OAAO,QAAS,OAAM,uBAAuB,GAAG;AACpD,SAAO;SACA;AACP,SAAO;GACN,SAAS;GACT,OAAO;IAAE,MAAM;IAAyB,SAAS;IAA6B;GAC9E;;;AAQH,SAAS,UAAU,UAAsC;AAKxD,QAAO;EACN,SAAS;EACT,OAAO;GACN,MAAM;GACN,SAAS,uCARE,SACX,MAAM,GAAG,GAAG,CACZ,KAAK,GAAG,MAAM,GAAG,EAAE,UAAU,SAAS,IAAI,KAAK,CAC/C,KAAK,KAAK;GAMV;EACD;;AAGF,SAAS,QAAQ,WAAuC;AACvD,QAAO,UAAU,KAAK,OAAO;EAC5B,IAAI,EAAE;EACN,QAAQ,EAAE;EACV,aAAa,EAAE;EACf,SAAS,EAAE;EACX,WAAW,EAAE;EACb,EAAE;;AAGJ,MAAM,iBAAiB;;;;AAKvB,eAAe,gBAAgB,IAAqC;AACnE,KAAI;EACH,MAAM,UAAU,IAAI,kBAAkB,GAAG;EAEzC,MAAM,kBAAkB,YADV,QAAQ,MAAM,IAAI,mBAAmB,GAAG,CAAC,gBAAgB,CAAC,CAC9B;AAC1C,QAAM,QAAQ,IAAI,gBAAgB,gBAAgB;UAC1C,OAAO;AACf,UAAQ,MAAM,yCAAyC,MAAM;;;;;;AAO/D,eAAe,mBAAmB,IAAyC;AAC1E,KAAI;EACH,MAAM,UAAU,IAAI,kBAAkB,GAAG;EACzC,MAAM,SAAS,MAAM,QAAQ,IAAc,eAAe;AAC1D,MAAI,WAAW,KAAM,QAAO;AAG5B,QAAM,gBAAgB,GAAG;AACzB,SAAQ,MAAM,QAAQ,IAAc,eAAe,IAAK,EAAE;SACnD;AACP,SAAO,EAAE;;;;;;AAWX,eAAsB,mBACrB,IACA,QACoD;AACpD,KAAI;AAGH,SAAO;GAAE,SAAS;GAAM,MADT,MADF,IAAI,mBAAmB,GAAG,CACb,SAAS,OAAO;GACJ;UAC9B,OAAO;AACf,MAAI,iBAAiB,mBACpB,QAAO;GACN,SAAS;GACT,OAAO;IAAE,MAAM;IAAkB,SAAS,MAAM;IAAS;GACzD;AAEF,SAAO;GACN,SAAS;GACT,OAAO;IAAE,MAAM;IAAwB,SAAS;IAA2B;GAC3E;;;;;;AAOH,eAAsB,sBACrB,IACA,OACmD;AACnD,KAAI;AAGH,SAAO;GAAE,SAAS;GAAM,MAAM,EAAE,OADlB,MADD,IAAI,mBAAmB,GAAG,CACd,cAAc,MAAM,EACN;GAAE;SAClC;AACP,SAAO;GACN,SAAS;GACT,OAAO;IAAE,MAAM;IAA2B,SAAS;IAA+B;GAClF;;;;;;AAOH,eAAsB,oBACrB,IAC0C;AAC1C,KAAI;AAGH,SAAO;GAAE,SAAS;GAAM,MAAM,EAAE,SADhB,MADH,IAAI,mBAAmB,GAAG,CACZ,WAAW,EACG;GAAE;SACpC;AACP,SAAO;GACN,SAAS;GACT,OAAO;IAAE,MAAM;IAAyB,SAAS;IAA2B;GAC5E;;;;;;AAOH,eAAsB,oBACrB,IACA,WAC0C;AAC1C,KAAI;AAGH,SAAO;GAAE,SAAS;GAAM,MAAM,EAAE,SADhB,MADH,IAAI,mBAAmB,GAAG,CACZ,UAAU,UAAU,EACN;GAAE;SACpC;AACP,SAAO;GACN,SAAS;GACT,OAAO;IAAE,MAAM;IAAyB,SAAS;IAA2B;GAC5E"}
+{"version":3,"file":"redirects-Cpq1catN.mjs","names":[],"sources":["../src/api/handlers/redirects.ts"],"sourcesContent":["/**\n * Redirect CRUD and 404 log handlers\n */\n\nimport type { Kysely } from \"kysely\";\n\nimport { OptionsRepository } from \"../../database/repositories/options.js\";\nimport {\n\tRedirectRepository,\n\tRedirectWriteBusyError,\n\ttype RedirectWriteFence,\n\ttype Redirect,\n\ttype NotFoundEntry,\n\ttype NotFoundSummary,\n} from \"../../database/repositories/redirect.js\";\nimport { InvalidCursorError } from \"../../database/repositories/types.js\";\nimport type { FindManyResult } from \"../../database/repositories/types.js\";\nimport type { Database } from \"../../database/types.js\";\nimport { publishRedirectChanges } from \"../../redirects/artifacts.js\";\nimport { wouldCreateLoop, detectLoops, type RedirectEdge } from \"../../redirects/loops.js\";\nimport { validatePattern, validateDestinationParams, isPattern } from \"../../redirects/patterns.js\";\nimport { isTerminalStatus } from \"../../redirects/status.js\";\nimport type { ApiResult } from \"../types.js\";\n\nasync function withRedirectWriteLock<T>(\n\trepo: RedirectRepository,\n\taction: (fence: RedirectWriteFence, repository: RedirectRepository) => Promise<ApiResult<T>>,\n): Promise<ApiResult<T>> {\n\ttry {\n\t\treturn await repo.withWriteLock(action);\n\t} catch (error) {\n\t\tif (error instanceof RedirectWriteBusyError) {\n\t\t\treturn {\n\t\t\t\tsuccess: false,\n\t\t\t\terror: { code: \"REDIRECT_BUSY\", message: \"Another redirect change is in progress\" },\n\t\t\t};\n\t\t}\n\t\tthrow error;\n\t}\n}\n\n// ---------------------------------------------------------------------------\n// Redirects\n// ---------------------------------------------------------------------------\n\n/**\n * List redirects with cursor pagination and optional filters\n */\nexport async function handleRedirectList(\n\tdb: Kysely<Database>,\n\tparams: {\n\t\tcursor?: string;\n\t\tlimit?: number;\n\t\tsearch?: string;\n\t\tgroup?: string;\n\t\tenabled?: boolean;\n\t\tauto?: boolean;\n\t},\n): Promise<ApiResult<FindManyResult<Redirect> & { loopRedirectIds?: string[] }>> {\n\ttry {\n\t\tconst repo = new RedirectRepository(db);\n\t\tconst result = await repo.findMany(params);\n\n\t\tconst loopRedirectIds = await getLoopRedirectIds(db);\n\n\t\treturn {\n\t\t\tsuccess: true,\n\t\t\tdata: {\n\t\t\t\t...result,\n\t\t\t\t...(loopRedirectIds.length > 0 ? { loopRedirectIds } : {}),\n\t\t\t},\n\t\t};\n\t} catch (error) {\n\t\tif (error instanceof InvalidCursorError) {\n\t\t\treturn {\n\t\t\t\tsuccess: false,\n\t\t\t\terror: { code: \"INVALID_CURSOR\", message: error.message },\n\t\t\t};\n\t\t}\n\t\treturn {\n\t\t\tsuccess: false,\n\t\t\terror: { code: \"REDIRECT_LIST_ERROR\", message: \"Failed to fetch redirects\" },\n\t\t};\n\t}\n}\n\n/**\n * Create a redirect rule\n */\nexport async function handleRedirectCreate(\n\tdb: Kysely<Database>,\n\tinput: {\n\t\tsource: string;\n\t\tdestination?: string;\n\t\ttype?: number;\n\t\tenabled?: boolean;\n\t\tgroupName?: string | null;\n\t},\n): Promise<ApiResult<Redirect>> {\n\ttry {\n\t\tconst lockRepo = new RedirectRepository(db);\n\t\tconst result = await withRedirectWriteLock(lockRepo, async (fence, repo) => {\n\t\t\tconst type = input.type ?? 301;\n\t\t\t// Terminal statuses (410 Gone / 451) are served directly and have no\n\t\t\t// destination — skip the destination/loop checks for them.\n\t\t\tconst terminal = isTerminalStatus(type);\n\t\t\tconst destination = terminal ? \"\" : (input.destination ?? \"\");\n\n\t\t\t// Source and destination must differ\n\t\t\tif (!terminal && input.source === destination) {\n\t\t\t\treturn {\n\t\t\t\t\tsuccess: false,\n\t\t\t\t\terror: {\n\t\t\t\t\t\tcode: \"VALIDATION_ERROR\",\n\t\t\t\t\t\tmessage: \"Source and destination must be different\",\n\t\t\t\t\t},\n\t\t\t\t};\n\t\t\t}\n\n\t\t\t// If source looks like a pattern, validate it\n\t\t\tconst sourceIsPattern = isPattern(input.source);\n\t\t\tif (sourceIsPattern) {\n\t\t\t\tconst patternError = validatePattern(input.source);\n\t\t\t\tif (patternError) {\n\t\t\t\t\treturn {\n\t\t\t\t\t\tsuccess: false,\n\t\t\t\t\t\terror: { code: \"VALIDATION_ERROR\", message: `Invalid source pattern: ${patternError}` },\n\t\t\t\t\t};\n\t\t\t\t}\n\n\t\t\t\t// Validate destination params reference valid source params\n\t\t\t\t// (terminal rules have no destination to interpolate)\n\t\t\t\tif (!terminal) {\n\t\t\t\t\tconst destError = validateDestinationParams(input.source, destination);\n\t\t\t\t\tif (destError) {\n\t\t\t\t\t\treturn {\n\t\t\t\t\t\t\tsuccess: false,\n\t\t\t\t\t\t\terror: { code: \"VALIDATION_ERROR\", message: destError },\n\t\t\t\t\t\t};\n\t\t\t\t\t}\n\t\t\t\t}\n\t\t\t}\n\n\t\t\t// Check for duplicate source (exact match only for non-patterns)\n\t\t\tconst existing = await repo.findBySource(input.source);\n\t\t\tif (existing) {\n\t\t\t\treturn {\n\t\t\t\t\tsuccess: false,\n\t\t\t\t\terror: {\n\t\t\t\t\t\tcode: \"CONFLICT\",\n\t\t\t\t\t\tmessage: `A redirect from \"${input.source}\" already exists`,\n\t\t\t\t\t},\n\t\t\t\t};\n\t\t\t}\n\n\t\t\t// Check for redirect loops (skip if creating as disabled, or terminal —\n\t\t\t// a Gone rule has no destination, so it can't form a loop)\n\t\t\tif (!terminal && input.enabled !== false) {\n\t\t\t\tconst edges = toEdges(await repo.findAllEnabled());\n\t\t\t\tconst loopPath = wouldCreateLoop(input.source, destination, edges);\n\t\t\t\tif (loopPath) return loopError(loopPath);\n\t\t\t}\n\n\t\t\tconst redirect = await repo.create(\n\t\t\t\t{\n\t\t\t\t\tsource: input.source,\n\t\t\t\t\tdestination,\n\t\t\t\t\ttype,\n\t\t\t\t\tisPattern: sourceIsPattern,\n\t\t\t\t\tenabled: input.enabled ?? true,\n\t\t\t\t\tgroupName: input.groupName ?? null,\n\t\t\t\t},\n\t\t\t\tfence,\n\t\t\t);\n\t\t\treturn { success: true, data: redirect };\n\t\t});\n\t\tif (result.success) await publishRedirectChanges(db);\n\t\treturn result;\n\t} catch {\n\t\treturn {\n\t\t\tsuccess: false,\n\t\t\terror: { code: \"REDIRECT_CREATE_ERROR\", message: \"Failed to create redirect\" },\n\t\t};\n\t}\n}\n\n/**\n * Get a redirect by ID\n */\nexport async function handleRedirectGet(\n\tdb: Kysely<Database>,\n\tid: string,\n): Promise<ApiResult<Redirect>> {\n\ttry {\n\t\tconst repo = new RedirectRepository(db);\n\t\tconst redirect = await repo.findById(id);\n\n\t\tif (!redirect) {\n\t\t\treturn {\n\t\t\t\tsuccess: false,\n\t\t\t\terror: { code: \"NOT_FOUND\", message: `Redirect \"${id}\" not found` },\n\t\t\t};\n\t\t}\n\n\t\treturn { success: true, data: redirect };\n\t} catch {\n\t\treturn {\n\t\t\tsuccess: false,\n\t\t\terror: { code: \"REDIRECT_GET_ERROR\", message: \"Failed to fetch redirect\" },\n\t\t};\n\t}\n}\n\n/**\n * Update a redirect by ID\n */\nexport async function handleRedirectUpdate(\n\tdb: Kysely<Database>,\n\tid: string,\n\tinput: {\n\t\tsource?: string;\n\t\tdestination?: string;\n\t\ttype?: number;\n\t\tenabled?: boolean;\n\t\tgroupName?: string | null;\n\t},\n\toptions?: { expectedRevision?: string },\n): Promise<ApiResult<Redirect>> {\n\ttry {\n\t\tconst lockRepo = new RedirectRepository(db);\n\t\tconst result = await withRedirectWriteLock(lockRepo, async (fence, repo) => {\n\t\t\tconst existing = await repo.findById(id);\n\t\t\tif (!existing) {\n\t\t\t\treturn {\n\t\t\t\t\tsuccess: false,\n\t\t\t\t\terror: { code: \"NOT_FOUND\", message: `Redirect \"${id}\" not found` },\n\t\t\t\t};\n\t\t\t}\n\n\t\t\tif (options?.expectedRevision !== undefined) {\n\t\t\t\tconst currentRevision = await repo.findConfigRevision(id);\n\t\t\t\tif (currentRevision !== options.expectedRevision) {\n\t\t\t\t\treturn {\n\t\t\t\t\t\tsuccess: false,\n\t\t\t\t\t\terror: { code: \"CONFLICT\", message: \"Redirect changed since it was read\" },\n\t\t\t\t\t};\n\t\t\t\t}\n\t\t\t}\n\n\t\t\tconst newSource = input.source ?? existing.source;\n\t\t\tconst newType = input.type ?? existing.type;\n\t\t\tconst terminal = isTerminalStatus(newType);\n\t\t\tconst newDest = terminal ? \"\" : (input.destination ?? existing.destination);\n\t\t\tif (!terminal && !newDest) {\n\t\t\t\treturn {\n\t\t\t\t\tsuccess: false,\n\t\t\t\t\terror: {\n\t\t\t\t\t\tcode: \"VALIDATION_ERROR\",\n\t\t\t\t\t\tmessage: \"destination is required for redirect types (301, 302, 307, 308)\",\n\t\t\t\t\t},\n\t\t\t\t};\n\t\t\t}\n\n\t\t\t// Source and destination must differ\n\t\t\tif (!terminal && newSource === newDest) {\n\t\t\t\treturn {\n\t\t\t\t\tsuccess: false,\n\t\t\t\t\terror: {\n\t\t\t\t\t\tcode: \"VALIDATION_ERROR\",\n\t\t\t\t\t\tmessage: \"Source and destination must be different\",\n\t\t\t\t\t},\n\t\t\t\t};\n\t\t\t}\n\n\t\t\t// If source is changing, validate patterns\n\t\t\tif (input.source !== undefined) {\n\t\t\t\tconst sourceIsPattern = isPattern(input.source);\n\t\t\t\tif (sourceIsPattern) {\n\t\t\t\t\tconst patternError = validatePattern(input.source);\n\t\t\t\t\tif (patternError) {\n\t\t\t\t\t\treturn {\n\t\t\t\t\t\t\tsuccess: false,\n\t\t\t\t\t\t\terror: {\n\t\t\t\t\t\t\t\tcode: \"VALIDATION_ERROR\",\n\t\t\t\t\t\t\t\tmessage: `Invalid source pattern: ${patternError}`,\n\t\t\t\t\t\t\t},\n\t\t\t\t\t\t};\n\t\t\t\t\t}\n\t\t\t\t}\n\n\t\t\t\t// Check for duplicate source (exclude self)\n\t\t\t\tconst dup = await repo.findBySource(input.source);\n\t\t\t\tif (dup && dup.id !== id) {\n\t\t\t\t\treturn {\n\t\t\t\t\t\tsuccess: false,\n\t\t\t\t\t\terror: {\n\t\t\t\t\t\t\tcode: \"CONFLICT\",\n\t\t\t\t\t\t\tmessage: `A redirect from \"${input.source}\" already exists`,\n\t\t\t\t\t\t},\n\t\t\t\t\t};\n\t\t\t\t}\n\t\t\t}\n\n\t\t\t// Validate destination params against the (possibly updated) source\n\t\t\tconst newSourceIsPattern = isPattern(newSource);\n\t\t\tif (newSourceIsPattern && !terminal) {\n\t\t\t\tconst destError = validateDestinationParams(newSource, newDest);\n\t\t\t\tif (destError) {\n\t\t\t\t\treturn {\n\t\t\t\t\t\tsuccess: false,\n\t\t\t\t\t\terror: { code: \"VALIDATION_ERROR\", message: destError },\n\t\t\t\t\t};\n\t\t\t\t}\n\t\t\t}\n\n\t\t\t// Check for redirect loops if the rule's edge changes or it becomes active\n\t\t\tconst willBeEnabled = input.enabled ?? existing.enabled;\n\t\t\tif (\n\t\t\t\t!terminal &&\n\t\t\t\twillBeEnabled &&\n\t\t\t\t(input.source !== undefined || input.destination !== undefined || !existing.enabled)\n\t\t\t) {\n\t\t\t\tconst edges = toEdges(await repo.findAllEnabled());\n\t\t\t\tconst loopPath = wouldCreateLoop(newSource, newDest, edges, id);\n\t\t\t\tif (loopPath) return loopError(loopPath);\n\t\t\t}\n\n\t\t\tconst updated = await repo.update(\n\t\t\t\tid,\n\t\t\t\t{\n\t\t\t\t\tsource: input.source,\n\t\t\t\t\tdestination: terminal ? \"\" : input.destination,\n\t\t\t\t\ttype: input.type,\n\t\t\t\t\tenabled: input.enabled,\n\t\t\t\t\tgroupName: input.groupName,\n\t\t\t\t},\n\t\t\t\toptions?.expectedRevision,\n\t\t\t\tfence,\n\t\t\t);\n\n\t\t\tif (!updated) {\n\t\t\t\treturn {\n\t\t\t\t\tsuccess: false,\n\t\t\t\t\terror: options?.expectedRevision\n\t\t\t\t\t\t? { code: \"CONFLICT\", message: \"Redirect changed since it was read\" }\n\t\t\t\t\t\t: { code: \"REDIRECT_UPDATE_ERROR\", message: \"Failed to update redirect\" },\n\t\t\t\t};\n\t\t\t}\n\n\t\t\t// Recompute cache — redirect was modified, so re-fetch\n\t\t\tawait updateLoopCache(repo.db);\n\t\t\treturn { success: true, data: updated };\n\t\t});\n\t\tif (result.success) await publishRedirectChanges(db);\n\t\treturn result;\n\t} catch {\n\t\treturn {\n\t\t\tsuccess: false,\n\t\t\terror: { code: \"REDIRECT_UPDATE_ERROR\", message: \"Failed to update redirect\" },\n\t\t};\n\t}\n}\n\n/**\n * Delete a redirect by ID\n */\nexport async function handleRedirectDelete(\n\tdb: Kysely<Database>,\n\tid: string,\n\toptions?: { expectedRevision?: string },\n): Promise<ApiResult<{ deleted: true }>> {\n\ttry {\n\t\tconst lockRepo = new RedirectRepository(db);\n\t\tconst result = await withRedirectWriteLock<{ deleted: true }>(lockRepo, async (fence, repo) => {\n\t\t\tif (options?.expectedRevision !== undefined) {\n\t\t\t\tconst existing = await repo.findById(id);\n\t\t\t\tif (!existing) {\n\t\t\t\t\treturn {\n\t\t\t\t\t\tsuccess: false,\n\t\t\t\t\t\terror: { code: \"NOT_FOUND\", message: `Redirect \"${id}\" not found` },\n\t\t\t\t\t};\n\t\t\t\t}\n\t\t\t\tconst currentRevision = await repo.findConfigRevision(id);\n\t\t\t\tif (currentRevision !== options.expectedRevision) {\n\t\t\t\t\treturn {\n\t\t\t\t\t\tsuccess: false,\n\t\t\t\t\t\terror: { code: \"CONFLICT\", message: \"Redirect changed since it was read\" },\n\t\t\t\t\t};\n\t\t\t\t}\n\t\t\t}\n\t\t\tconst deleted = await repo.delete(id, options?.expectedRevision, fence);\n\n\t\t\tif (!deleted) {\n\t\t\t\treturn {\n\t\t\t\t\tsuccess: false,\n\t\t\t\t\terror: options?.expectedRevision\n\t\t\t\t\t\t? { code: \"CONFLICT\", message: \"Redirect changed since it was read\" }\n\t\t\t\t\t\t: { code: \"NOT_FOUND\", message: `Redirect \"${id}\" not found` },\n\t\t\t\t};\n\t\t\t}\n\n\t\t\tawait updateLoopCache(repo.db);\n\t\t\treturn { success: true, data: { deleted: true } };\n\t\t});\n\t\tif (result.success) await publishRedirectChanges(db);\n\t\treturn result;\n\t} catch {\n\t\treturn {\n\t\t\tsuccess: false,\n\t\t\terror: { code: \"REDIRECT_DELETE_ERROR\", message: \"Failed to delete redirect\" },\n\t\t};\n\t}\n}\n\n// ---------------------------------------------------------------------------\n// Loop analysis cache\n// ---------------------------------------------------------------------------\n\nfunction loopError(loopPath: string[]): ApiResult<never> {\n\tconst hops = loopPath\n\t\t.slice(0, -1)\n\t\t.map((p, i) => `${p} \\u2192 ${loopPath[i + 1]}`)\n\t\t.join(\"\\n\");\n\treturn {\n\t\tsuccess: false,\n\t\terror: {\n\t\t\tcode: \"VALIDATION_ERROR\",\n\t\t\tmessage: `This redirect would create a loop:\\n${hops}`,\n\t\t},\n\t};\n}\n\nfunction toEdges(redirects: Redirect[]): RedirectEdge[] {\n\treturn redirects.map((r) => ({\n\t\tid: r.id,\n\t\tsource: r.source,\n\t\tdestination: r.destination,\n\t\tenabled: r.enabled,\n\t\tisPattern: r.isPattern,\n\t}));\n}\n\nconst LOOP_CACHE_KEY = \"_redirect_loop_ids\";\n\n/**\n * Recompute loop redirect IDs and store in the options table.\n */\nasync function updateLoopCache(db: Kysely<Database>): Promise<void> {\n\ttry {\n\t\tconst options = new OptionsRepository(db);\n\t\tconst edges = toEdges(await new RedirectRepository(db).findAllEnabled());\n\t\tconst loopRedirectIds = detectLoops(edges);\n\t\tawait options.set(LOOP_CACHE_KEY, loopRedirectIds);\n\t} catch (error) {\n\t\tconsole.error(\"Failed to update redirect loop cache:\", error);\n\t}\n}\n\n/**\n * Get loop redirect IDs from cache, computing lazily on first access.\n */\nasync function getLoopRedirectIds(db: Kysely<Database>): Promise<string[]> {\n\ttry {\n\t\tconst options = new OptionsRepository(db);\n\t\tconst cached = await options.get<string[]>(LOOP_CACHE_KEY);\n\t\tif (cached !== null) return cached;\n\n\t\t// First access after upgrade — compute and cache\n\t\tawait updateLoopCache(db);\n\t\treturn (await options.get<string[]>(LOOP_CACHE_KEY)) ?? [];\n\t} catch {\n\t\treturn [];\n\t}\n}\n\n// ---------------------------------------------------------------------------\n// 404 Log\n// ---------------------------------------------------------------------------\n\n/**\n * List 404 log entries with cursor pagination\n */\nexport async function handleNotFoundList(\n\tdb: Kysely<Database>,\n\tparams: { cursor?: string; limit?: number; search?: string },\n): Promise<ApiResult<FindManyResult<NotFoundEntry>>> {\n\ttry {\n\t\tconst repo = new RedirectRepository(db);\n\t\tconst result = await repo.find404s(params);\n\t\treturn { success: true, data: result };\n\t} catch (error) {\n\t\tif (error instanceof InvalidCursorError) {\n\t\t\treturn {\n\t\t\t\tsuccess: false,\n\t\t\t\terror: { code: \"INVALID_CURSOR\", message: error.message },\n\t\t\t};\n\t\t}\n\t\treturn {\n\t\t\tsuccess: false,\n\t\t\terror: { code: \"NOT_FOUND_LIST_ERROR\", message: \"Failed to fetch 404 log\" },\n\t\t};\n\t}\n}\n\n/**\n * Get 404 summary (grouped by path, sorted by count)\n */\nexport async function handleNotFoundSummary(\n\tdb: Kysely<Database>,\n\tlimit?: number,\n): Promise<ApiResult<{ items: NotFoundSummary[] }>> {\n\ttry {\n\t\tconst repo = new RedirectRepository(db);\n\t\tconst items = await repo.get404Summary(limit);\n\t\treturn { success: true, data: { items } };\n\t} catch {\n\t\treturn {\n\t\t\tsuccess: false,\n\t\t\terror: { code: \"NOT_FOUND_SUMMARY_ERROR\", message: \"Failed to fetch 404 summary\" },\n\t\t};\n\t}\n}\n\n/**\n * Clear all 404 log entries\n */\nexport async function handleNotFoundClear(\n\tdb: Kysely<Database>,\n): Promise<ApiResult<{ deleted: number }>> {\n\ttry {\n\t\tconst repo = new RedirectRepository(db);\n\t\tconst deleted = await repo.clear404s();\n\t\treturn { success: true, data: { deleted } };\n\t} catch {\n\t\treturn {\n\t\t\tsuccess: false,\n\t\t\terror: { code: \"NOT_FOUND_CLEAR_ERROR\", message: \"Failed to clear 404 log\" },\n\t\t};\n\t}\n}\n\n/**\n * Prune 404 log entries older than a given date\n */\nexport async function handleNotFoundPrune(\n\tdb: Kysely<Database>,\n\tolderThan: string,\n): Promise<ApiResult<{ deleted: number }>> {\n\ttry {\n\t\tconst repo = new RedirectRepository(db);\n\t\tconst deleted = await repo.prune404s(olderThan);\n\t\treturn { success: true, data: { deleted } };\n\t} catch {\n\t\treturn {\n\t\t\tsuccess: false,\n\t\t\terror: { code: \"NOT_FOUND_PRUNE_ERROR\", message: \"Failed to prune 404 log\" },\n\t\t};\n\t}\n}\n"],"mappings":";;;;;;;;;AAwBA,eAAe,sBACd,MACA,QACwB;AACxB,KAAI;AACH,SAAO,MAAM,KAAK,cAAc,OAAO;UAC/B,OAAO;AACf,MAAI,iBAAiB,uBACpB,QAAO;GACN,SAAS;GACT,OAAO;IAAE,MAAM;IAAiB,SAAS;IAA0C;GACnF;AAEF,QAAM;;;;;;AAWR,eAAsB,mBACrB,IACA,QAQgF;AAChF,KAAI;EAEH,MAAM,SAAS,MADF,IAAI,mBAAmB,GAAG,CACb,SAAS,OAAO;EAE1C,MAAM,kBAAkB,MAAM,mBAAmB,GAAG;AAEpD,SAAO;GACN,SAAS;GACT,MAAM;IACL,GAAG;IACH,GAAI,gBAAgB,SAAS,IAAI,EAAE,iBAAiB,GAAG,EAAE;IACzD;GACD;UACO,OAAO;AACf,MAAI,iBAAiB,mBACpB,QAAO;GACN,SAAS;GACT,OAAO;IAAE,MAAM;IAAkB,SAAS,MAAM;IAAS;GACzD;AAEF,SAAO;GACN,SAAS;GACT,OAAO;IAAE,MAAM;IAAuB,SAAS;IAA6B;GAC5E;;;;;;AAOH,eAAsB,qBACrB,IACA,OAO+B;AAC/B,KAAI;EAEH,MAAM,SAAS,MAAM,sBADJ,IAAI,mBAAmB,GAAG,EACU,OAAO,OAAO,SAAS;GAC3E,MAAM,OAAO,MAAM,QAAQ;GAG3B,MAAM,WAAW,iBAAiB,KAAK;GACvC,MAAM,cAAc,WAAW,KAAM,MAAM,eAAe;AAG1D,OAAI,CAAC,YAAY,MAAM,WAAW,YACjC,QAAO;IACN,SAAS;IACT,OAAO;KACN,MAAM;KACN,SAAS;KACT;IACD;GAIF,MAAM,kBAAkB,UAAU,MAAM,OAAO;AAC/C,OAAI,iBAAiB;IACpB,MAAM,eAAe,gBAAgB,MAAM,OAAO;AAClD,QAAI,aACH,QAAO;KACN,SAAS;KACT,OAAO;MAAE,MAAM;MAAoB,SAAS,2BAA2B;MAAgB;KACvF;AAKF,QAAI,CAAC,UAAU;KACd,MAAM,YAAY,0BAA0B,MAAM,QAAQ,YAAY;AACtE,SAAI,UACH,QAAO;MACN,SAAS;MACT,OAAO;OAAE,MAAM;OAAoB,SAAS;OAAW;MACvD;;;AAOJ,OADiB,MAAM,KAAK,aAAa,MAAM,OAAO,CAErD,QAAO;IACN,SAAS;IACT,OAAO;KACN,MAAM;KACN,SAAS,oBAAoB,MAAM,OAAO;KAC1C;IACD;AAKF,OAAI,CAAC,YAAY,MAAM,YAAY,OAAO;IACzC,MAAM,QAAQ,QAAQ,MAAM,KAAK,gBAAgB,CAAC;IAClD,MAAM,WAAW,gBAAgB,MAAM,QAAQ,aAAa,MAAM;AAClE,QAAI,SAAU,QAAO,UAAU,SAAS;;AAczC,UAAO;IAAE,SAAS;IAAM,MAXP,MAAM,KAAK,OAC3B;KACC,QAAQ,MAAM;KACd;KACA;KACA,WAAW;KACX,SAAS,MAAM,WAAW;KAC1B,WAAW,MAAM,aAAa;KAC9B,EACD,MACA;IACuC;IACvC;AACF,MAAI,OAAO,QAAS,OAAM,uBAAuB,GAAG;AACpD,SAAO;SACA;AACP,SAAO;GACN,SAAS;GACT,OAAO;IAAE,MAAM;IAAyB,SAAS;IAA6B;GAC9E;;;;;;AAOH,eAAsB,kBACrB,IACA,IAC+B;AAC/B,KAAI;EAEH,MAAM,WAAW,MADJ,IAAI,mBAAmB,GAAG,CACX,SAAS,GAAG;AAExC,MAAI,CAAC,SACJ,QAAO;GACN,SAAS;GACT,OAAO;IAAE,MAAM;IAAa,SAAS,aAAa,GAAG;IAAc;GACnE;AAGF,SAAO;GAAE,SAAS;GAAM,MAAM;GAAU;SACjC;AACP,SAAO;GACN,SAAS;GACT,OAAO;IAAE,MAAM;IAAsB,SAAS;IAA4B;GAC1E;;;;;;AAOH,eAAsB,qBACrB,IACA,IACA,OAOA,SAC+B;AAC/B,KAAI;EAEH,MAAM,SAAS,MAAM,sBADJ,IAAI,mBAAmB,GAAG,EACU,OAAO,OAAO,SAAS;GAC3E,MAAM,WAAW,MAAM,KAAK,SAAS,GAAG;AACxC,OAAI,CAAC,SACJ,QAAO;IACN,SAAS;IACT,OAAO;KAAE,MAAM;KAAa,SAAS,aAAa,GAAG;KAAc;IACnE;AAGF,OAAI,SAAS,qBAAqB,QAEjC;QADwB,MAAM,KAAK,mBAAmB,GAAG,KACjC,QAAQ,iBAC/B,QAAO;KACN,SAAS;KACT,OAAO;MAAE,MAAM;MAAY,SAAS;MAAsC;KAC1E;;GAIH,MAAM,YAAY,MAAM,UAAU,SAAS;GAE3C,MAAM,WAAW,iBADD,MAAM,QAAQ,SAAS,KACG;GAC1C,MAAM,UAAU,WAAW,KAAM,MAAM,eAAe,SAAS;AAC/D,OAAI,CAAC,YAAY,CAAC,QACjB,QAAO;IACN,SAAS;IACT,OAAO;KACN,MAAM;KACN,SAAS;KACT;IACD;AAIF,OAAI,CAAC,YAAY,cAAc,QAC9B,QAAO;IACN,SAAS;IACT,OAAO;KACN,MAAM;KACN,SAAS;KACT;IACD;AAIF,OAAI,MAAM,WAAW,QAAW;AAE/B,QADwB,UAAU,MAAM,OAAO,EAC1B;KACpB,MAAM,eAAe,gBAAgB,MAAM,OAAO;AAClD,SAAI,aACH,QAAO;MACN,SAAS;MACT,OAAO;OACN,MAAM;OACN,SAAS,2BAA2B;OACpC;MACD;;IAKH,MAAM,MAAM,MAAM,KAAK,aAAa,MAAM,OAAO;AACjD,QAAI,OAAO,IAAI,OAAO,GACrB,QAAO;KACN,SAAS;KACT,OAAO;MACN,MAAM;MACN,SAAS,oBAAoB,MAAM,OAAO;MAC1C;KACD;;AAMH,OAD2B,UAAU,UAAU,IACrB,CAAC,UAAU;IACpC,MAAM,YAAY,0BAA0B,WAAW,QAAQ;AAC/D,QAAI,UACH,QAAO;KACN,SAAS;KACT,OAAO;MAAE,MAAM;MAAoB,SAAS;MAAW;KACvD;;GAKH,MAAM,gBAAgB,MAAM,WAAW,SAAS;AAChD,OACC,CAAC,YACD,kBACC,MAAM,WAAW,UAAa,MAAM,gBAAgB,UAAa,CAAC,SAAS,UAC3E;IAED,MAAM,WAAW,gBAAgB,WAAW,SAD9B,QAAQ,MAAM,KAAK,gBAAgB,CAAC,EACU,GAAG;AAC/D,QAAI,SAAU,QAAO,UAAU,SAAS;;GAGzC,MAAM,UAAU,MAAM,KAAK,OAC1B,IACA;IACC,QAAQ,MAAM;IACd,aAAa,WAAW,KAAK,MAAM;IACnC,MAAM,MAAM;IACZ,SAAS,MAAM;IACf,WAAW,MAAM;IACjB,EACD,SAAS,kBACT,MACA;AAED,OAAI,CAAC,QACJ,QAAO;IACN,SAAS;IACT,OAAO,SAAS,mBACb;KAAE,MAAM;KAAY,SAAS;KAAsC,GACnE;KAAE,MAAM;KAAyB,SAAS;KAA6B;IAC1E;AAIF,SAAM,gBAAgB,KAAK,GAAG;AAC9B,UAAO;IAAE,SAAS;IAAM,MAAM;IAAS;IACtC;AACF,MAAI,OAAO,QAAS,OAAM,uBAAuB,GAAG;AACpD,SAAO;SACA;AACP,SAAO;GACN,SAAS;GACT,OAAO;IAAE,MAAM;IAAyB,SAAS;IAA6B;GAC9E;;;;;;AAOH,eAAsB,qBACrB,IACA,IACA,SACwC;AACxC,KAAI;EAEH,MAAM,SAAS,MAAM,sBADJ,IAAI,mBAAmB,GAAG,EAC6B,OAAO,OAAO,SAAS;AAC9F,OAAI,SAAS,qBAAqB,QAAW;AAE5C,QAAI,CADa,MAAM,KAAK,SAAS,GAAG,CAEvC,QAAO;KACN,SAAS;KACT,OAAO;MAAE,MAAM;MAAa,SAAS,aAAa,GAAG;MAAc;KACnE;AAGF,QADwB,MAAM,KAAK,mBAAmB,GAAG,KACjC,QAAQ,iBAC/B,QAAO;KACN,SAAS;KACT,OAAO;MAAE,MAAM;MAAY,SAAS;MAAsC;KAC1E;;AAKH,OAAI,CAFY,MAAM,KAAK,OAAO,IAAI,SAAS,kBAAkB,MAAM,CAGtE,QAAO;IACN,SAAS;IACT,OAAO,SAAS,mBACb;KAAE,MAAM;KAAY,SAAS;KAAsC,GACnE;KAAE,MAAM;KAAa,SAAS,aAAa,GAAG;KAAc;IAC/D;AAGF,SAAM,gBAAgB,KAAK,GAAG;AAC9B,UAAO;IAAE,SAAS;IAAM,MAAM,EAAE,SAAS,MAAM;IAAE;IAChD;AACF,MAAI,OAAO,QAAS,OAAM,uBAAuB,GAAG;AACpD,SAAO;SACA;AACP,SAAO;GACN,SAAS;GACT,OAAO;IAAE,MAAM;IAAyB,SAAS;IAA6B;GAC9E;;;AAQH,SAAS,UAAU,UAAsC;AAKxD,QAAO;EACN,SAAS;EACT,OAAO;GACN,MAAM;GACN,SAAS,uCARE,SACX,MAAM,GAAG,GAAG,CACZ,KAAK,GAAG,MAAM,GAAG,EAAE,UAAU,SAAS,IAAI,KAAK,CAC/C,KAAK,KAAK;GAMV;EACD;;AAGF,SAAS,QAAQ,WAAuC;AACvD,QAAO,UAAU,KAAK,OAAO;EAC5B,IAAI,EAAE;EACN,QAAQ,EAAE;EACV,aAAa,EAAE;EACf,SAAS,EAAE;EACX,WAAW,EAAE;EACb,EAAE;;AAGJ,MAAM,iBAAiB;;;;AAKvB,eAAe,gBAAgB,IAAqC;AACnE,KAAI;EACH,MAAM,UAAU,IAAI,kBAAkB,GAAG;EAEzC,MAAM,kBAAkB,YADV,QAAQ,MAAM,IAAI,mBAAmB,GAAG,CAAC,gBAAgB,CAAC,CAC9B;AAC1C,QAAM,QAAQ,IAAI,gBAAgB,gBAAgB;UAC1C,OAAO;AACf,UAAQ,MAAM,yCAAyC,MAAM;;;;;;AAO/D,eAAe,mBAAmB,IAAyC;AAC1E,KAAI;EACH,MAAM,UAAU,IAAI,kBAAkB,GAAG;EACzC,MAAM,SAAS,MAAM,QAAQ,IAAc,eAAe;AAC1D,MAAI,WAAW,KAAM,QAAO;AAG5B,QAAM,gBAAgB,GAAG;AACzB,SAAQ,MAAM,QAAQ,IAAc,eAAe,IAAK,EAAE;SACnD;AACP,SAAO,EAAE;;;;;;AAWX,eAAsB,mBACrB,IACA,QACoD;AACpD,KAAI;AAGH,SAAO;GAAE,SAAS;GAAM,MADT,MADF,IAAI,mBAAmB,GAAG,CACb,SAAS,OAAO;GACJ;UAC9B,OAAO;AACf,MAAI,iBAAiB,mBACpB,QAAO;GACN,SAAS;GACT,OAAO;IAAE,MAAM;IAAkB,SAAS,MAAM;IAAS;GACzD;AAEF,SAAO;GACN,SAAS;GACT,OAAO;IAAE,MAAM;IAAwB,SAAS;IAA2B;GAC3E;;;;;;AAOH,eAAsB,sBACrB,IACA,OACmD;AACnD,KAAI;AAGH,SAAO;GAAE,SAAS;GAAM,MAAM,EAAE,OADlB,MADD,IAAI,mBAAmB,GAAG,CACd,cAAc,MAAM,EACN;GAAE;SAClC;AACP,SAAO;GACN,SAAS;GACT,OAAO;IAAE,MAAM;IAA2B,SAAS;IAA+B;GAClF;;;;;;AAOH,eAAsB,oBACrB,IAC0C;AAC1C,KAAI;AAGH,SAAO;GAAE,SAAS;GAAM,MAAM,EAAE,SADhB,MADH,IAAI,mBAAmB,GAAG,CACZ,WAAW,EACG;GAAE;SACpC;AACP,SAAO;GACN,SAAS;GACT,OAAO;IAAE,MAAM;IAAyB,SAAS;IAA2B;GAC5E;;;;;;AAOH,eAAsB,oBACrB,IACA,WAC0C;AAC1C,KAAI;AAGH,SAAO;GAAE,SAAS;GAAM,MAAM,EAAE,SADhB,MADH,IAAI,mBAAmB,GAAG,CACZ,UAAU,UAAU,EACN;GAAE;SACpC;AACP,SAAO;GACN,SAAS;GACT,OAAO;IAAE,MAAM;IAAyB,SAAS;IAA2B;GAC5E"}

package/dist/{redirects-BEVSRMa2.mjs → redirects-CyvvZrCJ.mjs}

@@ -1,4 +1,4 @@
-import { t as LOCALE_CODE_PATTERN } from "./config-CvmjJcVw.mjs";
+import { t as LOCALE_CODE_PATTERN } from "./config-Cs_AwWXI.mjs";
 import { n as isTerminalStatus, t as REDIRECT_RULE_STATUSES } from "./status-BFNdxzKc.mjs";
 import { z } from "zod";
 
@@ -145,4 +145,4 @@ const notFoundSummaryResponseSchema = z.object({ items: z.array(notFoundSummaryS
 
 //#endregion
 export { roleLevel as C, offsetPaginationQuery as S, successEnvelope as T, deleteResponseSchema as _, notFoundPruneBody as a, localeFilterQuery as b, notFoundSummarySchema as c, redirectsListQuery as d, updateRedirectBody as f, cursorPaginationQuery as g, countResponseSchema as h, notFoundListResponseSchema as i, redirectListResponseSchema as l, apiErrorSchema as m, notFoundEntrySchema as n, notFoundSummaryQuery as o, VALID_ROLE_LEVELS as p, notFoundListQuery as r, notFoundSummaryResponseSchema as s, createRedirectBody as t, redirectSchema as u, httpUrl as v, slugPattern as w, mediaDeleteResponseSchema as x, localeCode as y };
-//# sourceMappingURL=redirects-BEVSRMa2.mjs.map
+//# sourceMappingURL=redirects-CyvvZrCJ.mjs.map

package/dist/{redirects-BEVSRMa2.mjs.map → redirects-CyvvZrCJ.mjs.map}

@@ -1 +1 @@
-{"version":3,"file":"redirects-BEVSRMa2.mjs","names":[],"sources":["../src/api/schemas/common.ts","../src/api/schemas/redirects.ts"],"sourcesContent":["import { z } from \"zod\";\n\nimport { LOCALE_CODE_PATTERN } from \"../../i18n/config.js\";\n\n// ---------------------------------------------------------------------------\n// Role level\n// ---------------------------------------------------------------------------\n\n/** Valid role level values */\nexport const VALID_ROLE_LEVELS = new Set([10, 20, 30, 40, 50]);\n\n/** Role level — coerces string/number to valid RoleLevel (10|20|30|40|50) */\nexport const roleLevel = z.coerce\n\t.number()\n\t.int()\n\t.refine((n): n is 10 | 20 | 30 | 40 | 50 => VALID_ROLE_LEVELS.has(n), {\n\t\tmessage: \"Invalid role level. Must be 10, 20, 30, 40, or 50\",\n\t});\n\n// ---------------------------------------------------------------------------\n// Pagination\n// ---------------------------------------------------------------------------\n\n/** Pagination query params — cursor-based */\nexport const cursorPaginationQuery = z\n\t.object({\n\t\tcursor: z.string().max(2048).optional().meta({ description: \"Opaque cursor for pagination\" }),\n\t\tlimit: z.coerce.number().int().min(1).max(100).optional().default(50).meta({\n\t\t\tdescription: \"Maximum number of items to return (1-100, default 50)\",\n\t\t}),\n\t})\n\t.meta({ id: \"CursorPaginationQuery\" });\n\n/** Pagination query params — offset-based */\nexport const offsetPaginationQuery = z\n\t.object({\n\t\tlimit: z.coerce.number().int().min(1).max(100).optional().default(50),\n\t\toffset: z.coerce.number().int().min(0).optional().default(0),\n\t})\n\t.meta({ id: \"OffsetPaginationQuery\" });\n\n// ---------------------------------------------------------------------------\n// Shared primitives\n// ---------------------------------------------------------------------------\n\n/** Slug pattern: lowercase letters, digits, underscores; starts with letter */\nexport const slugPattern = /^[a-z][a-z0-9_]*$/;\n\n/** Matches http(s) scheme at start of URL */\nconst HTTP_SCHEME_RE = /^https?:\\/\\//i;\n\n/** Validates that a URL string uses http or https scheme. Rejects javascript:/data: URI XSS vectors. */\nexport const httpUrl = z\n\t.url()\n\t.refine((url) => HTTP_SCHEME_RE.test(url), \"URL must use http or https\");\n\n/**\n * BCP 47 locale code — language with optional script/region subtags (e.g. en, en-US, pt-BR, es-419, zh-Hant).\n * Validation is case-insensitive, but the value is preserved verbatim because the site config, stored\n * `locale` columns, and public query path all keep the raw BCP-47 casing.\n */\nexport const localeCode = z.string().regex(LOCALE_CODE_PATTERN, \"Invalid locale code\");\n\n/** Shared `?locale=xx` query shape for endpoints that filter by locale. */\nexport const localeFilterQuery = z\n\t.object({\n\t\tlocale: localeCode.optional(),\n\t})\n\t.meta({ id: \"LocaleFilterQuery\" });\n\n// ---------------------------------------------------------------------------\n// OpenAPI: Shared response schemas\n// ---------------------------------------------------------------------------\n\n/** Standard API error response */\nexport const apiErrorSchema = z\n\t.object({\n\t\tsuccess: z.literal(false).meta({ description: \"Discriminant: always false for errors\" }),\n\t\terror: z.object({\n\t\t\tcode: z\n\t\t\t\t.string()\n\t\t\t\t.meta({ description: \"Machine-readable error code\", examples: [\"NOT_FOUND\"] }),\n\t\t\tmessage: z.string().meta({ description: \"Human-readable error message\" }),\n\t\t}),\n\t})\n\t.meta({ id: \"ApiError\" });\n\n/** Wrap a data schema in the standard success envelope: { success: true, data: T } */\nexport function successEnvelope<T extends z.ZodType>(dataSchema: T) {\n\treturn z.object({\n\t\tsuccess: z.literal(true).meta({ description: \"Discriminant: always true for success\" }),\n\t\tdata: dataSchema,\n\t});\n}\n\n/** Standard delete response */\nexport const deleteResponseSchema = z.object({ deleted: z.literal(true) }).meta({\n\tid: \"DeleteResponse\",\n});\n\n/** Media delete response: `storageDeleted` is false when the stored file survived and is retried by cleanup */\nexport const mediaDeleteResponseSchema = deleteResponseSchema\n\t.extend({ storageDeleted: z.boolean() })\n\t.meta({ id: \"MediaDeleteResponse\" });\n\n/** Standard count response */\nexport const countResponseSchema = z\n\t.object({ count: z.number().int().min(0) })\n\t.meta({ id: \"CountResponse\" });\n","import { z } from \"zod\";\n\nimport { isTerminalStatus, REDIRECT_RULE_STATUSES } from \"../../redirects/status.js\";\nimport { cursorPaginationQuery } from \"./common.js\";\n\n// ---------------------------------------------------------------------------\n// Redirects: Input schemas\n// ---------------------------------------------------------------------------\n\nconst redirectType = z.coerce\n\t.number()\n\t.int()\n\t.refine((n) => REDIRECT_RULE_STATUSES.includes(n), {\n\t\tmessage: \"Redirect type must be 301, 302, 307, 308, 410, or 451\",\n\t});\n\n/** Matches CR or LF characters */\nconst CRLF = /[\\r\\n]/;\n\n/** Path must start with / and not be protocol-relative, contain no CRLF, and no path traversal */\nconst urlPath = z\n\t.string()\n\t.min(1)\n\t.refine((s) => s.startsWith(\"/\") && !s.startsWith(\"//\"), {\n\t\tmessage: \"Must be a path starting with / (no protocol-relative URLs)\",\n\t})\n\t.refine((s) => !CRLF.test(s), {\n\t\tmessage: \"URL must not contain newline characters\",\n\t})\n\t.refine(\n\t\t(s) => {\n\t\t\ttry {\n\t\t\t\treturn !decodeURIComponent(s).split(\"/\").includes(\"..\");\n\t\t\t} catch {\n\t\t\t\treturn false;\n\t\t\t}\n\t\t},\n\t\t{ message: \"URL must not contain path traversal segments\" },\n\t);\n\nexport const createRedirectBody = z\n\t.object({\n\t\tsource: urlPath,\n\t\t// Optional: terminal statuses (410/451) have no destination. Redirect\n\t\t// statuses require one — enforced by the refine below.\n\t\tdestination: z.union([urlPath, z.literal(\"\")]).optional(),\n\t\ttype: redirectType.optional().default(301),\n\t\tenabled: z.boolean().optional().default(true),\n\t\tgroupName: z.string().nullish(),\n\t})\n\t.refine((o) => isTerminalStatus(o.type ?? 301) || !!o.destination, {\n\t\tmessage: \"destination is required for redirect types (301, 302, 307, 308)\",\n\t\tpath: [\"destination\"],\n\t})\n\t.meta({ id: \"CreateRedirectBody\" });\n\nexport const updateRedirectBody = z\n\t.object({\n\t\tsource: urlPath.optional(),\n\t\tdestination: z.union([urlPath, z.literal(\"\")]).optional(),\n\t\ttype: redirectType.optional(),\n\t\tenabled: z.boolean().optional(),\n\t\tgroupName: z.string().nullish(),\n\t})\n\t.refine((o) => Object.values(o).some((v) => v !== undefined), {\n\t\tmessage: \"At least one field must be provided\",\n\t})\n\t.meta({ id: \"UpdateRedirectBody\" });\n\nexport const redirectsListQuery = cursorPaginationQuery\n\t.extend({\n\t\tsearch: z.string().optional(),\n\t\tgroup: z.string().optional(),\n\t\tenabled: z\n\t\t\t.enum([\"true\", \"false\"])\n\t\t\t.transform((v) => v === \"true\")\n\t\t\t.optional(),\n\t\tauto: z\n\t\t\t.enum([\"true\", \"false\"])\n\t\t\t.transform((v) => v === \"true\")\n\t\t\t.optional(),\n\t})\n\t.meta({ id: \"RedirectsListQuery\" });\n\n// ---------------------------------------------------------------------------\n// 404 Log: Input schemas\n// ---------------------------------------------------------------------------\n\nexport const notFoundListQuery = cursorPaginationQuery\n\t.extend({\n\t\tsearch: z.string().optional(),\n\t})\n\t.meta({ id: \"NotFoundListQuery\" });\n\nexport const notFoundSummaryQuery = z.object({\n\tlimit: z.coerce.number().int().min(1).max(100).optional().default(50),\n});\n\nexport const notFoundPruneBody = z\n\t.object({\n\t\tolderThan: z.iso.datetime({ message: \"olderThan must be an ISO 8601 datetime\" }).or(\n\t\t\tz.iso.datetime({\n\t\t\t\tprecision: -1,\n\t\t\t\tmessage: \"olderThan must be an ISO 8601 datetime\",\n\t\t\t}),\n\t\t),\n\t})\n\t.meta({ id: \"NotFoundPruneBody\" });\n\n// ---------------------------------------------------------------------------\n// Redirects: Response schemas\n// ---------------------------------------------------------------------------\n\nexport const redirectSchema = z\n\t.object({\n\t\tid: z.string(),\n\t\tsource: z.string(),\n\t\tdestination: z.string(),\n\t\ttype: z.number().int(),\n\t\tisPattern: z.boolean(),\n\t\tenabled: z.boolean(),\n\t\thits: z.number().int(),\n\t\tlastHitAt: z.string().nullable(),\n\t\tgroupName: z.string().nullable(),\n\t\tauto: z.boolean(),\n\t\tcreatedAt: z.string(),\n\t\tupdatedAt: z.string(),\n\t})\n\t.meta({ id: \"Redirect\" });\n\nexport const redirectListResponseSchema = z\n\t.object({\n\t\titems: z.array(redirectSchema),\n\t\tnextCursor: z.string().optional(),\n\t\tloopRedirectIds: z.array(z.string()).optional(),\n\t})\n\t.meta({ id: \"RedirectListResponse\" });\n\nexport const notFoundEntrySchema = z\n\t.object({\n\t\tid: z.string(),\n\t\tpath: z.string(),\n\t\treferrer: z.string().nullable(),\n\t\tuserAgent: z.string().nullable(),\n\t\tip: z.string().nullable(),\n\t\tcreatedAt: z.string(),\n\t})\n\t.meta({ id: \"NotFoundEntry\" });\n\nexport const notFoundListResponseSchema = z\n\t.object({\n\t\titems: z.array(notFoundEntrySchema),\n\t\tnextCursor: z.string().optional(),\n\t})\n\t.meta({ id: \"NotFoundListResponse\" });\n\nexport const notFoundSummarySchema = z\n\t.object({\n\t\tpath: z.string(),\n\t\tcount: z.number().int(),\n\t\tlastSeen: z.string(),\n\t\ttopReferrer: z.string().nullable(),\n\t})\n\t.meta({ id: \"NotFoundSummary\" });\n\nexport const notFoundSummaryResponseSchema = z\n\t.object({ items: z.array(notFoundSummarySchema) })\n\t.meta({ id: \"NotFoundSummaryResponse\" });\n"],"mappings":";;;;;;AASA,MAAa,oBAAoB,IAAI,IAAI;CAAC;CAAI;CAAI;CAAI;CAAI;CAAG,CAAC;;AAG9D,MAAa,YAAY,EAAE,OACzB,QAAQ,CACR,KAAK,CACL,QAAQ,MAAmC,kBAAkB,IAAI,EAAE,EAAE,EACrE,SAAS,qDACT,CAAC;;AAOH,MAAa,wBAAwB,EACnC,OAAO;CACP,QAAQ,EAAE,QAAQ,CAAC,IAAI,KAAK,CAAC,UAAU,CAAC,KAAK,EAAE,aAAa,gCAAgC,CAAC;CAC7F,OAAO,EAAE,OAAO,QAAQ,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,QAAQ,GAAG,CAAC,KAAK,EAC1E,aAAa,yDACb,CAAC;CACF,CAAC,CACD,KAAK,EAAE,IAAI,yBAAyB,CAAC;;AAGvC,MAAa,wBAAwB,EACnC,OAAO;CACP,OAAO,EAAE,OAAO,QAAQ,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,QAAQ,GAAG;CACrE,QAAQ,EAAE,OAAO,QAAQ,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,UAAU,CAAC,QAAQ,EAAE;CAC5D,CAAC,CACD,KAAK,EAAE,IAAI,yBAAyB,CAAC;;AAOvC,MAAa,cAAc;;AAG3B,MAAM,iBAAiB;;AAGvB,MAAa,UAAU,EACrB,KAAK,CACL,QAAQ,QAAQ,eAAe,KAAK,IAAI,EAAE,6BAA6B;;;;;;AAOzE,MAAa,aAAa,EAAE,QAAQ,CAAC,MAAM,qBAAqB,sBAAsB;;AAGtF,MAAa,oBAAoB,EAC/B,OAAO,EACP,QAAQ,WAAW,UAAU,EAC7B,CAAC,CACD,KAAK,EAAE,IAAI,qBAAqB,CAAC;;AAOnC,MAAa,iBAAiB,EAC5B,OAAO;CACP,SAAS,EAAE,QAAQ,MAAM,CAAC,KAAK,EAAE,aAAa,yCAAyC,CAAC;CACxF,OAAO,EAAE,OAAO;EACf,MAAM,EACJ,QAAQ,CACR,KAAK;GAAE,aAAa;GAA+B,UAAU,CAAC,YAAY;GAAE,CAAC;EAC/E,SAAS,EAAE,QAAQ,CAAC,KAAK,EAAE,aAAa,gCAAgC,CAAC;EACzE,CAAC;CACF,CAAC,CACD,KAAK,EAAE,IAAI,YAAY,CAAC;;AAG1B,SAAgB,gBAAqC,YAAe;AACnE,QAAO,EAAE,OAAO;EACf,SAAS,EAAE,QAAQ,KAAK,CAAC,KAAK,EAAE,aAAa,yCAAyC,CAAC;EACvF,MAAM;EACN,CAAC;;;AAIH,MAAa,uBAAuB,EAAE,OAAO,EAAE,SAAS,EAAE,QAAQ,KAAK,EAAE,CAAC,CAAC,KAAK,EAC/E,IAAI,kBACJ,CAAC;;AAGF,MAAa,4BAA4B,qBACvC,OAAO,EAAE,gBAAgB,EAAE,SAAS,EAAE,CAAC,CACvC,KAAK,EAAE,IAAI,uBAAuB,CAAC;;AAGrC,MAAa,sBAAsB,EACjC,OAAO,EAAE,OAAO,EAAE,QAAQ,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE,CAAC,CAC1C,KAAK,EAAE,IAAI,iBAAiB,CAAC;;;;ACnG/B,MAAM,eAAe,EAAE,OACrB,QAAQ,CACR,KAAK,CACL,QAAQ,MAAM,uBAAuB,SAAS,EAAE,EAAE,EAClD,SAAS,yDACT,CAAC;;AAGH,MAAM,OAAO;;AAGb,MAAM,UAAU,EACd,QAAQ,CACR,IAAI,EAAE,CACN,QAAQ,MAAM,EAAE,WAAW,IAAI,IAAI,CAAC,EAAE,WAAW,KAAK,EAAE,EACxD,SAAS,8DACT,CAAC,CACD,QAAQ,MAAM,CAAC,KAAK,KAAK,EAAE,EAAE,EAC7B,SAAS,2CACT,CAAC,CACD,QACC,MAAM;AACN,KAAI;AACH,SAAO,CAAC,mBAAmB,EAAE,CAAC,MAAM,IAAI,CAAC,SAAS,KAAK;SAChD;AACP,SAAO;;GAGT,EAAE,SAAS,gDAAgD,CAC3D;AAEF,MAAa,qBAAqB,EAChC,OAAO;CACP,QAAQ;CAGR,aAAa,EAAE,MAAM,CAAC,SAAS,EAAE,QAAQ,GAAG,CAAC,CAAC,CAAC,UAAU;CACzD,MAAM,aAAa,UAAU,CAAC,QAAQ,IAAI;CAC1C,SAAS,EAAE,SAAS,CAAC,UAAU,CAAC,QAAQ,KAAK;CAC7C,WAAW,EAAE,QAAQ,CAAC,SAAS;CAC/B,CAAC,CACD,QAAQ,MAAM,iBAAiB,EAAE,QAAQ,IAAI,IAAI,CAAC,CAAC,EAAE,aAAa;CAClE,SAAS;CACT,MAAM,CAAC,cAAc;CACrB,CAAC,CACD,KAAK,EAAE,IAAI,sBAAsB,CAAC;AAEpC,MAAa,qBAAqB,EAChC,OAAO;CACP,QAAQ,QAAQ,UAAU;CAC1B,aAAa,EAAE,MAAM,CAAC,SAAS,EAAE,QAAQ,GAAG,CAAC,CAAC,CAAC,UAAU;CACzD,MAAM,aAAa,UAAU;CAC7B,SAAS,EAAE,SAAS,CAAC,UAAU;CAC/B,WAAW,EAAE,QAAQ,CAAC,SAAS;CAC/B,CAAC,CACD,QAAQ,MAAM,OAAO,OAAO,EAAE,CAAC,MAAM,MAAM,MAAM,OAAU,EAAE,EAC7D,SAAS,uCACT,CAAC,CACD,KAAK,EAAE,IAAI,sBAAsB,CAAC;AAEpC,MAAa,qBAAqB,sBAChC,OAAO;CACP,QAAQ,EAAE,QAAQ,CAAC,UAAU;CAC7B,OAAO,EAAE,QAAQ,CAAC,UAAU;CAC5B,SAAS,EACP,KAAK,CAAC,QAAQ,QAAQ,CAAC,CACvB,WAAW,MAAM,MAAM,OAAO,CAC9B,UAAU;CACZ,MAAM,EACJ,KAAK,CAAC,QAAQ,QAAQ,CAAC,CACvB,WAAW,MAAM,MAAM,OAAO,CAC9B,UAAU;CACZ,CAAC,CACD,KAAK,EAAE,IAAI,sBAAsB,CAAC;AAMpC,MAAa,oBAAoB,sBAC/B,OAAO,EACP,QAAQ,EAAE,QAAQ,CAAC,UAAU,EAC7B,CAAC,CACD,KAAK,EAAE,IAAI,qBAAqB,CAAC;AAEnC,MAAa,uBAAuB,EAAE,OAAO,EAC5C,OAAO,EAAE,OAAO,QAAQ,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,QAAQ,GAAG,EACrE,CAAC;AAEF,MAAa,oBAAoB,EAC/B,OAAO,EACP,WAAW,EAAE,IAAI,SAAS,EAAE,SAAS,0CAA0C,CAAC,CAAC,GAChF,EAAE,IAAI,SAAS;CACd,WAAW;CACX,SAAS;CACT,CAAC,CACF,EACD,CAAC,CACD,KAAK,EAAE,IAAI,qBAAqB,CAAC;AAMnC,MAAa,iBAAiB,EAC5B,OAAO;CACP,IAAI,EAAE,QAAQ;CACd,QAAQ,EAAE,QAAQ;CAClB,aAAa,EAAE,QAAQ;CACvB,MAAM,EAAE,QAAQ,CAAC,KAAK;CACtB,WAAW,EAAE,SAAS;CACtB,SAAS,EAAE,SAAS;CACpB,MAAM,EAAE,QAAQ,CAAC,KAAK;CACtB,WAAW,EAAE,QAAQ,CAAC,UAAU;CAChC,WAAW,EAAE,QAAQ,CAAC,UAAU;CAChC,MAAM,EAAE,SAAS;CACjB,WAAW,EAAE,QAAQ;CACrB,WAAW,EAAE,QAAQ;CACrB,CAAC,CACD,KAAK,EAAE,IAAI,YAAY,CAAC;AAE1B,MAAa,6BAA6B,EACxC,OAAO;CACP,OAAO,EAAE,MAAM,eAAe;CAC9B,YAAY,EAAE,QAAQ,CAAC,UAAU;CACjC,iBAAiB,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,UAAU;CAC/C,CAAC,CACD,KAAK,EAAE,IAAI,wBAAwB,CAAC;AAEtC,MAAa,sBAAsB,EACjC,OAAO;CACP,IAAI,EAAE,QAAQ;CACd,MAAM,EAAE,QAAQ;CAChB,UAAU,EAAE,QAAQ,CAAC,UAAU;CAC/B,WAAW,EAAE,QAAQ,CAAC,UAAU;CAChC,IAAI,EAAE,QAAQ,CAAC,UAAU;CACzB,WAAW,EAAE,QAAQ;CACrB,CAAC,CACD,KAAK,EAAE,IAAI,iBAAiB,CAAC;AAE/B,MAAa,6BAA6B,EACxC,OAAO;CACP,OAAO,EAAE,MAAM,oBAAoB;CACnC,YAAY,EAAE,QAAQ,CAAC,UAAU;CACjC,CAAC,CACD,KAAK,EAAE,IAAI,wBAAwB,CAAC;AAEtC,MAAa,wBAAwB,EACnC,OAAO;CACP,MAAM,EAAE,QAAQ;CAChB,OAAO,EAAE,QAAQ,CAAC,KAAK;CACvB,UAAU,EAAE,QAAQ;CACpB,aAAa,EAAE,QAAQ,CAAC,UAAU;CAClC,CAAC,CACD,KAAK,EAAE,IAAI,mBAAmB,CAAC;AAEjC,MAAa,gCAAgC,EAC3C,OAAO,EAAE,OAAO,EAAE,MAAM,sBAAsB,EAAE,CAAC,CACjD,KAAK,EAAE,IAAI,2BAA2B,CAAC"}
+{"version":3,"file":"redirects-CyvvZrCJ.mjs","names":[],"sources":["../src/api/schemas/common.ts","../src/api/schemas/redirects.ts"],"sourcesContent":["import { z } from \"zod\";\n\nimport { LOCALE_CODE_PATTERN } from \"../../i18n/config.js\";\n\n// ---------------------------------------------------------------------------\n// Role level\n// ---------------------------------------------------------------------------\n\n/** Valid role level values */\nexport const VALID_ROLE_LEVELS = new Set([10, 20, 30, 40, 50]);\n\n/** Role level — coerces string/number to valid RoleLevel (10|20|30|40|50) */\nexport const roleLevel = z.coerce\n\t.number()\n\t.int()\n\t.refine((n): n is 10 | 20 | 30 | 40 | 50 => VALID_ROLE_LEVELS.has(n), {\n\t\tmessage: \"Invalid role level. Must be 10, 20, 30, 40, or 50\",\n\t});\n\n// ---------------------------------------------------------------------------\n// Pagination\n// ---------------------------------------------------------------------------\n\n/** Pagination query params — cursor-based */\nexport const cursorPaginationQuery = z\n\t.object({\n\t\tcursor: z.string().max(2048).optional().meta({ description: \"Opaque cursor for pagination\" }),\n\t\tlimit: z.coerce.number().int().min(1).max(100).optional().default(50).meta({\n\t\t\tdescription: \"Maximum number of items to return (1-100, default 50)\",\n\t\t}),\n\t})\n\t.meta({ id: \"CursorPaginationQuery\" });\n\n/** Pagination query params — offset-based */\nexport const offsetPaginationQuery = z\n\t.object({\n\t\tlimit: z.coerce.number().int().min(1).max(100).optional().default(50),\n\t\toffset: z.coerce.number().int().min(0).optional().default(0),\n\t})\n\t.meta({ id: \"OffsetPaginationQuery\" });\n\n// ---------------------------------------------------------------------------\n// Shared primitives\n// ---------------------------------------------------------------------------\n\n/** Slug pattern: lowercase letters, digits, underscores; starts with letter */\nexport const slugPattern = /^[a-z][a-z0-9_]*$/;\n\n/** Matches http(s) scheme at start of URL */\nconst HTTP_SCHEME_RE = /^https?:\\/\\//i;\n\n/** Validates that a URL string uses http or https scheme. Rejects javascript:/data: URI XSS vectors. */\nexport const httpUrl = z\n\t.url()\n\t.refine((url) => HTTP_SCHEME_RE.test(url), \"URL must use http or https\");\n\n/**\n * BCP 47 locale code — language with optional script/region subtags (e.g. en, en-US, pt-BR, es-419, zh-Hant).\n * Validation is case-insensitive, but the value is preserved verbatim because the site config, stored\n * `locale` columns, and public query path all keep the raw BCP-47 casing.\n */\nexport const localeCode = z.string().regex(LOCALE_CODE_PATTERN, \"Invalid locale code\");\n\n/** Shared `?locale=xx` query shape for endpoints that filter by locale. */\nexport const localeFilterQuery = z\n\t.object({\n\t\tlocale: localeCode.optional(),\n\t})\n\t.meta({ id: \"LocaleFilterQuery\" });\n\n// ---------------------------------------------------------------------------\n// OpenAPI: Shared response schemas\n// ---------------------------------------------------------------------------\n\n/** Standard API error response */\nexport const apiErrorSchema = z\n\t.object({\n\t\tsuccess: z.literal(false).meta({ description: \"Discriminant: always false for errors\" }),\n\t\terror: z.object({\n\t\t\tcode: z\n\t\t\t\t.string()\n\t\t\t\t.meta({ description: \"Machine-readable error code\", examples: [\"NOT_FOUND\"] }),\n\t\t\tmessage: z.string().meta({ description: \"Human-readable error message\" }),\n\t\t}),\n\t})\n\t.meta({ id: \"ApiError\" });\n\n/** Wrap a data schema in the standard success envelope: { success: true, data: T } */\nexport function successEnvelope<T extends z.ZodType>(dataSchema: T) {\n\treturn z.object({\n\t\tsuccess: z.literal(true).meta({ description: \"Discriminant: always true for success\" }),\n\t\tdata: dataSchema,\n\t});\n}\n\n/** Standard delete response */\nexport const deleteResponseSchema = z.object({ deleted: z.literal(true) }).meta({\n\tid: \"DeleteResponse\",\n});\n\n/** Media delete response: `storageDeleted` is false when the stored file survived and is retried by cleanup */\nexport const mediaDeleteResponseSchema = deleteResponseSchema\n\t.extend({ storageDeleted: z.boolean() })\n\t.meta({ id: \"MediaDeleteResponse\" });\n\n/** Standard count response */\nexport const countResponseSchema = z\n\t.object({ count: z.number().int().min(0) })\n\t.meta({ id: \"CountResponse\" });\n","import { z } from \"zod\";\n\nimport { isTerminalStatus, REDIRECT_RULE_STATUSES } from \"../../redirects/status.js\";\nimport { cursorPaginationQuery } from \"./common.js\";\n\n// ---------------------------------------------------------------------------\n// Redirects: Input schemas\n// ---------------------------------------------------------------------------\n\nconst redirectType = z.coerce\n\t.number()\n\t.int()\n\t.refine((n) => REDIRECT_RULE_STATUSES.includes(n), {\n\t\tmessage: \"Redirect type must be 301, 302, 307, 308, 410, or 451\",\n\t});\n\n/** Matches CR or LF characters */\nconst CRLF = /[\\r\\n]/;\n\n/** Path must start with / and not be protocol-relative, contain no CRLF, and no path traversal */\nconst urlPath = z\n\t.string()\n\t.min(1)\n\t.refine((s) => s.startsWith(\"/\") && !s.startsWith(\"//\"), {\n\t\tmessage: \"Must be a path starting with / (no protocol-relative URLs)\",\n\t})\n\t.refine((s) => !CRLF.test(s), {\n\t\tmessage: \"URL must not contain newline characters\",\n\t})\n\t.refine(\n\t\t(s) => {\n\t\t\ttry {\n\t\t\t\treturn !decodeURIComponent(s).split(\"/\").includes(\"..\");\n\t\t\t} catch {\n\t\t\t\treturn false;\n\t\t\t}\n\t\t},\n\t\t{ message: \"URL must not contain path traversal segments\" },\n\t);\n\nexport const createRedirectBody = z\n\t.object({\n\t\tsource: urlPath,\n\t\t// Optional: terminal statuses (410/451) have no destination. Redirect\n\t\t// statuses require one — enforced by the refine below.\n\t\tdestination: z.union([urlPath, z.literal(\"\")]).optional(),\n\t\ttype: redirectType.optional().default(301),\n\t\tenabled: z.boolean().optional().default(true),\n\t\tgroupName: z.string().nullish(),\n\t})\n\t.refine((o) => isTerminalStatus(o.type ?? 301) || !!o.destination, {\n\t\tmessage: \"destination is required for redirect types (301, 302, 307, 308)\",\n\t\tpath: [\"destination\"],\n\t})\n\t.meta({ id: \"CreateRedirectBody\" });\n\nexport const updateRedirectBody = z\n\t.object({\n\t\tsource: urlPath.optional(),\n\t\tdestination: z.union([urlPath, z.literal(\"\")]).optional(),\n\t\ttype: redirectType.optional(),\n\t\tenabled: z.boolean().optional(),\n\t\tgroupName: z.string().nullish(),\n\t})\n\t.refine((o) => Object.values(o).some((v) => v !== undefined), {\n\t\tmessage: \"At least one field must be provided\",\n\t})\n\t.meta({ id: \"UpdateRedirectBody\" });\n\nexport const redirectsListQuery = cursorPaginationQuery\n\t.extend({\n\t\tsearch: z.string().optional(),\n\t\tgroup: z.string().optional(),\n\t\tenabled: z\n\t\t\t.enum([\"true\", \"false\"])\n\t\t\t.transform((v) => v === \"true\")\n\t\t\t.optional(),\n\t\tauto: z\n\t\t\t.enum([\"true\", \"false\"])\n\t\t\t.transform((v) => v === \"true\")\n\t\t\t.optional(),\n\t})\n\t.meta({ id: \"RedirectsListQuery\" });\n\n// ---------------------------------------------------------------------------\n// 404 Log: Input schemas\n// ---------------------------------------------------------------------------\n\nexport const notFoundListQuery = cursorPaginationQuery\n\t.extend({\n\t\tsearch: z.string().optional(),\n\t})\n\t.meta({ id: \"NotFoundListQuery\" });\n\nexport const notFoundSummaryQuery = z.object({\n\tlimit: z.coerce.number().int().min(1).max(100).optional().default(50),\n});\n\nexport const notFoundPruneBody = z\n\t.object({\n\t\tolderThan: z.iso.datetime({ message: \"olderThan must be an ISO 8601 datetime\" }).or(\n\t\t\tz.iso.datetime({\n\t\t\t\tprecision: -1,\n\t\t\t\tmessage: \"olderThan must be an ISO 8601 datetime\",\n\t\t\t}),\n\t\t),\n\t})\n\t.meta({ id: \"NotFoundPruneBody\" });\n\n// ---------------------------------------------------------------------------\n// Redirects: Response schemas\n// ---------------------------------------------------------------------------\n\nexport const redirectSchema = z\n\t.object({\n\t\tid: z.string(),\n\t\tsource: z.string(),\n\t\tdestination: z.string(),\n\t\ttype: z.number().int(),\n\t\tisPattern: z.boolean(),\n\t\tenabled: z.boolean(),\n\t\thits: z.number().int(),\n\t\tlastHitAt: z.string().nullable(),\n\t\tgroupName: z.string().nullable(),\n\t\tauto: z.boolean(),\n\t\tcreatedAt: z.string(),\n\t\tupdatedAt: z.string(),\n\t})\n\t.meta({ id: \"Redirect\" });\n\nexport const redirectListResponseSchema = z\n\t.object({\n\t\titems: z.array(redirectSchema),\n\t\tnextCursor: z.string().optional(),\n\t\tloopRedirectIds: z.array(z.string()).optional(),\n\t})\n\t.meta({ id: \"RedirectListResponse\" });\n\nexport const notFoundEntrySchema = z\n\t.object({\n\t\tid: z.string(),\n\t\tpath: z.string(),\n\t\treferrer: z.string().nullable(),\n\t\tuserAgent: z.string().nullable(),\n\t\tip: z.string().nullable(),\n\t\tcreatedAt: z.string(),\n\t})\n\t.meta({ id: \"NotFoundEntry\" });\n\nexport const notFoundListResponseSchema = z\n\t.object({\n\t\titems: z.array(notFoundEntrySchema),\n\t\tnextCursor: z.string().optional(),\n\t})\n\t.meta({ id: \"NotFoundListResponse\" });\n\nexport const notFoundSummarySchema = z\n\t.object({\n\t\tpath: z.string(),\n\t\tcount: z.number().int(),\n\t\tlastSeen: z.string(),\n\t\ttopReferrer: z.string().nullable(),\n\t})\n\t.meta({ id: \"NotFoundSummary\" });\n\nexport const notFoundSummaryResponseSchema = z\n\t.object({ items: z.array(notFoundSummarySchema) })\n\t.meta({ id: \"NotFoundSummaryResponse\" });\n"],"mappings":";;;;;;AASA,MAAa,oBAAoB,IAAI,IAAI;CAAC;CAAI;CAAI;CAAI;CAAI;CAAG,CAAC;;AAG9D,MAAa,YAAY,EAAE,OACzB,QAAQ,CACR,KAAK,CACL,QAAQ,MAAmC,kBAAkB,IAAI,EAAE,EAAE,EACrE,SAAS,qDACT,CAAC;;AAOH,MAAa,wBAAwB,EACnC,OAAO;CACP,QAAQ,EAAE,QAAQ,CAAC,IAAI,KAAK,CAAC,UAAU,CAAC,KAAK,EAAE,aAAa,gCAAgC,CAAC;CAC7F,OAAO,EAAE,OAAO,QAAQ,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,QAAQ,GAAG,CAAC,KAAK,EAC1E,aAAa,yDACb,CAAC;CACF,CAAC,CACD,KAAK,EAAE,IAAI,yBAAyB,CAAC;;AAGvC,MAAa,wBAAwB,EACnC,OAAO;CACP,OAAO,EAAE,OAAO,QAAQ,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,QAAQ,GAAG;CACrE,QAAQ,EAAE,OAAO,QAAQ,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,UAAU,CAAC,QAAQ,EAAE;CAC5D,CAAC,CACD,KAAK,EAAE,IAAI,yBAAyB,CAAC;;AAOvC,MAAa,cAAc;;AAG3B,MAAM,iBAAiB;;AAGvB,MAAa,UAAU,EACrB,KAAK,CACL,QAAQ,QAAQ,eAAe,KAAK,IAAI,EAAE,6BAA6B;;;;;;AAOzE,MAAa,aAAa,EAAE,QAAQ,CAAC,MAAM,qBAAqB,sBAAsB;;AAGtF,MAAa,oBAAoB,EAC/B,OAAO,EACP,QAAQ,WAAW,UAAU,EAC7B,CAAC,CACD,KAAK,EAAE,IAAI,qBAAqB,CAAC;;AAOnC,MAAa,iBAAiB,EAC5B,OAAO;CACP,SAAS,EAAE,QAAQ,MAAM,CAAC,KAAK,EAAE,aAAa,yCAAyC,CAAC;CACxF,OAAO,EAAE,OAAO;EACf,MAAM,EACJ,QAAQ,CACR,KAAK;GAAE,aAAa;GAA+B,UAAU,CAAC,YAAY;GAAE,CAAC;EAC/E,SAAS,EAAE,QAAQ,CAAC,KAAK,EAAE,aAAa,gCAAgC,CAAC;EACzE,CAAC;CACF,CAAC,CACD,KAAK,EAAE,IAAI,YAAY,CAAC;;AAG1B,SAAgB,gBAAqC,YAAe;AACnE,QAAO,EAAE,OAAO;EACf,SAAS,EAAE,QAAQ,KAAK,CAAC,KAAK,EAAE,aAAa,yCAAyC,CAAC;EACvF,MAAM;EACN,CAAC;;;AAIH,MAAa,uBAAuB,EAAE,OAAO,EAAE,SAAS,EAAE,QAAQ,KAAK,EAAE,CAAC,CAAC,KAAK,EAC/E,IAAI,kBACJ,CAAC;;AAGF,MAAa,4BAA4B,qBACvC,OAAO,EAAE,gBAAgB,EAAE,SAAS,EAAE,CAAC,CACvC,KAAK,EAAE,IAAI,uBAAuB,CAAC;;AAGrC,MAAa,sBAAsB,EACjC,OAAO,EAAE,OAAO,EAAE,QAAQ,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE,CAAC,CAC1C,KAAK,EAAE,IAAI,iBAAiB,CAAC;;;;ACnG/B,MAAM,eAAe,EAAE,OACrB,QAAQ,CACR,KAAK,CACL,QAAQ,MAAM,uBAAuB,SAAS,EAAE,EAAE,EAClD,SAAS,yDACT,CAAC;;AAGH,MAAM,OAAO;;AAGb,MAAM,UAAU,EACd,QAAQ,CACR,IAAI,EAAE,CACN,QAAQ,MAAM,EAAE,WAAW,IAAI,IAAI,CAAC,EAAE,WAAW,KAAK,EAAE,EACxD,SAAS,8DACT,CAAC,CACD,QAAQ,MAAM,CAAC,KAAK,KAAK,EAAE,EAAE,EAC7B,SAAS,2CACT,CAAC,CACD,QACC,MAAM;AACN,KAAI;AACH,SAAO,CAAC,mBAAmB,EAAE,CAAC,MAAM,IAAI,CAAC,SAAS,KAAK;SAChD;AACP,SAAO;;GAGT,EAAE,SAAS,gDAAgD,CAC3D;AAEF,MAAa,qBAAqB,EAChC,OAAO;CACP,QAAQ;CAGR,aAAa,EAAE,MAAM,CAAC,SAAS,EAAE,QAAQ,GAAG,CAAC,CAAC,CAAC,UAAU;CACzD,MAAM,aAAa,UAAU,CAAC,QAAQ,IAAI;CAC1C,SAAS,EAAE,SAAS,CAAC,UAAU,CAAC,QAAQ,KAAK;CAC7C,WAAW,EAAE,QAAQ,CAAC,SAAS;CAC/B,CAAC,CACD,QAAQ,MAAM,iBAAiB,EAAE,QAAQ,IAAI,IAAI,CAAC,CAAC,EAAE,aAAa;CAClE,SAAS;CACT,MAAM,CAAC,cAAc;CACrB,CAAC,CACD,KAAK,EAAE,IAAI,sBAAsB,CAAC;AAEpC,MAAa,qBAAqB,EAChC,OAAO;CACP,QAAQ,QAAQ,UAAU;CAC1B,aAAa,EAAE,MAAM,CAAC,SAAS,EAAE,QAAQ,GAAG,CAAC,CAAC,CAAC,UAAU;CACzD,MAAM,aAAa,UAAU;CAC7B,SAAS,EAAE,SAAS,CAAC,UAAU;CAC/B,WAAW,EAAE,QAAQ,CAAC,SAAS;CAC/B,CAAC,CACD,QAAQ,MAAM,OAAO,OAAO,EAAE,CAAC,MAAM,MAAM,MAAM,OAAU,EAAE,EAC7D,SAAS,uCACT,CAAC,CACD,KAAK,EAAE,IAAI,sBAAsB,CAAC;AAEpC,MAAa,qBAAqB,sBAChC,OAAO;CACP,QAAQ,EAAE,QAAQ,CAAC,UAAU;CAC7B,OAAO,EAAE,QAAQ,CAAC,UAAU;CAC5B,SAAS,EACP,KAAK,CAAC,QAAQ,QAAQ,CAAC,CACvB,WAAW,MAAM,MAAM,OAAO,CAC9B,UAAU;CACZ,MAAM,EACJ,KAAK,CAAC,QAAQ,QAAQ,CAAC,CACvB,WAAW,MAAM,MAAM,OAAO,CAC9B,UAAU;CACZ,CAAC,CACD,KAAK,EAAE,IAAI,sBAAsB,CAAC;AAMpC,MAAa,oBAAoB,sBAC/B,OAAO,EACP,QAAQ,EAAE,QAAQ,CAAC,UAAU,EAC7B,CAAC,CACD,KAAK,EAAE,IAAI,qBAAqB,CAAC;AAEnC,MAAa,uBAAuB,EAAE,OAAO,EAC5C,OAAO,EAAE,OAAO,QAAQ,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,QAAQ,GAAG,EACrE,CAAC;AAEF,MAAa,oBAAoB,EAC/B,OAAO,EACP,WAAW,EAAE,IAAI,SAAS,EAAE,SAAS,0CAA0C,CAAC,CAAC,GAChF,EAAE,IAAI,SAAS;CACd,WAAW;CACX,SAAS;CACT,CAAC,CACF,EACD,CAAC,CACD,KAAK,EAAE,IAAI,qBAAqB,CAAC;AAMnC,MAAa,iBAAiB,EAC5B,OAAO;CACP,IAAI,EAAE,QAAQ;CACd,QAAQ,EAAE,QAAQ;CAClB,aAAa,EAAE,QAAQ;CACvB,MAAM,EAAE,QAAQ,CAAC,KAAK;CACtB,WAAW,EAAE,SAAS;CACtB,SAAS,EAAE,SAAS;CACpB,MAAM,EAAE,QAAQ,CAAC,KAAK;CACtB,WAAW,EAAE,QAAQ,CAAC,UAAU;CAChC,WAAW,EAAE,QAAQ,CAAC,UAAU;CAChC,MAAM,EAAE,SAAS;CACjB,WAAW,EAAE,QAAQ;CACrB,WAAW,EAAE,QAAQ;CACrB,CAAC,CACD,KAAK,EAAE,IAAI,YAAY,CAAC;AAE1B,MAAa,6BAA6B,EACxC,OAAO;CACP,OAAO,EAAE,MAAM,eAAe;CAC9B,YAAY,EAAE,QAAQ,CAAC,UAAU;CACjC,iBAAiB,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,UAAU;CAC/C,CAAC,CACD,KAAK,EAAE,IAAI,wBAAwB,CAAC;AAEtC,MAAa,sBAAsB,EACjC,OAAO;CACP,IAAI,EAAE,QAAQ;CACd,MAAM,EAAE,QAAQ;CAChB,UAAU,EAAE,QAAQ,CAAC,UAAU;CAC/B,WAAW,EAAE,QAAQ,CAAC,UAAU;CAChC,IAAI,EAAE,QAAQ,CAAC,UAAU;CACzB,WAAW,EAAE,QAAQ;CACrB,CAAC,CACD,KAAK,EAAE,IAAI,iBAAiB,CAAC;AAE/B,MAAa,6BAA6B,EACxC,OAAO;CACP,OAAO,EAAE,MAAM,oBAAoB;CACnC,YAAY,EAAE,QAAQ,CAAC,UAAU;CACjC,CAAC,CACD,KAAK,EAAE,IAAI,wBAAwB,CAAC;AAEtC,MAAa,wBAAwB,EACnC,OAAO;CACP,MAAM,EAAE,QAAQ;CAChB,OAAO,EAAE,QAAQ,CAAC,KAAK;CACvB,UAAU,EAAE,QAAQ;CACpB,aAAa,EAAE,QAAQ,CAAC,UAAU;CAClC,CAAC,CACD,KAAK,EAAE,IAAI,mBAAmB,CAAC;AAEjC,MAAa,gCAAgC,EAC3C,OAAO,EAAE,OAAO,EAAE,MAAM,sBAAsB,EAAE,CAAC,CACjD,KAAK,EAAE,IAAI,2BAA2B,CAAC"}

package/dist/{registry-TUVaid9Z.mjs → registry-B0-O575m.mjs}

@@ -1,21 +1,21 @@
-import { d as __exportAll } from "./runner-C5NeAkBQ.mjs";
+import { f as __exportAll } from "./runner-Bkkfk4O8.mjs";
 import { t as validateIdentifier } from "./validate-DANX1-Qi.mjs";
-import { a as currentTimestamp, c as executeAtomicBatchIfSupported, m as listTablesLike, o as currentTimestampValue, p as listTableColumns, r as columnExists, s as detectDialect, u as isPostgres, y as tableExists } from "./dialect-helpers-7_IqPdh9.mjs";
-import { i as isI18nEnabled } from "./config-CvmjJcVw.mjs";
+import { a as currentTimestamp, b as tableExists, c as executeAtomicBatchIfSupported, m as listTablesLike, o as currentTimestampValue, p as listTableColumns, r as columnExists, s as detectDialect, u as isPostgres } from "./dialect-helpers-B1XN2HGB.mjs";
+import { s as isI18nEnabled } from "./config-Cs_AwWXI.mjs";
 import { getRequestContext } from "./request-context.mjs";
-import { c as REPEATER_SUB_FIELD_TYPES, d as RESERVED_FIELD_SLUGS, f as isIndexableFieldType, i as MAX_BLOCKS_ITEMS, m as isStoragelessFieldRow, p as isStoragelessField, r as FIELD_TYPE_TO_COLUMN, u as RESERVED_COLLECTION_SLUGS } from "./types-BGmQ0uXs.mjs";
-import { n as chunks, t as SQL_BATCH_SIZE } from "./chunks-xC4UD5-S.mjs";
-import { c as decodeCursor, i as InvalidCursorError, l as encodeCursor } from "./types-D2NEXtgB.mjs";
-import { t as withTransaction } from "./transaction-BVYIo_yu.mjs";
-import { t as INTERNAL_MEDIA_PREFIX } from "./normalize-BuWa0lvd.mjs";
-import { n as normalizeMime } from "./mime-B5M9R53H.mjs";
-import { t as FTSManager } from "./fts-manager-Beg3e4bI.mjs";
-import { t as jsonTextValues } from "./json-recordset-BUjxhr77.mjs";
-import { i as resetRegisteredCollectionsCache } from "./collection-slugs-cache-e09QeJQt.mjs";
+import { c as REPEATER_SUB_FIELD_TYPES, d as RESERVED_FIELD_SLUGS, f as isIndexableFieldType, i as MAX_BLOCKS_ITEMS, m as isStoragelessFieldRow, p as isStoragelessField, r as FIELD_TYPE_TO_COLUMN, u as RESERVED_COLLECTION_SLUGS } from "./types-C_asjp1J.mjs";
+import { n as chunks, t as SQL_BATCH_SIZE } from "./chunks-DiW8VMwz.mjs";
+import { a as InvalidCursorError, l as decodeCursor, u as encodeCursor } from "./types-DwhEvIVb.mjs";
+import { t as withTransaction } from "./transaction-CkoQ5wqQ.mjs";
+import { t as INTERNAL_MEDIA_PREFIX } from "./normalize-Cx-bNwhP.mjs";
+import { n as normalizeMime } from "./mime-D1We9jUx.mjs";
+import { t as FTSManager } from "./fts-manager-6861qcwk.mjs";
+import { t as jsonTextValues } from "./json-recordset-D0WhN2UA.mjs";
+import { i as resetRegisteredCollectionsCache } from "./collection-slugs-cache-DIrLjqH-.mjs";
 import { r as refreshDevTypes } from "./dev-typegen-EBni_pOQ.mjs";
-import { a as isMediaUsageCollectionSlugDeleting, i as deleteActivatedMediaUsageCollection, n as MediaUsageCollectionDeletionRepository, o as deleteSharedCollectionRecords, r as collectionDeletionCurrentTimestamp, t as MediaUsageWorkRepository } from "./media-usage-work-CkLa5-nc.mjs";
-import { a as continueMediaUsageActivation, d as prepareMediaUsageCollectionCapture, i as canResumeMediaUsageCollectionCapture, l as installPreparedMediaUsageCollectionCapture, n as MediaUsageActivationVersionMismatchError, o as finalizeMediaUsageCollectionCapture, s as findResumableMediaUsageCollectionCaptureId, t as MEDIA_USAGE_ACTIVATION_RUNTIME_GENERATION, u as markMediaUsageCollectionCaptureReady } from "./activation-Dim4YMM7.mjs";
-import { s as invalidateSchemaCache } from "./zod-generator-D0JKy94C.mjs";
+import { a as isMediaUsageCollectionSlugDeleting, i as deleteActivatedMediaUsageCollection, n as MediaUsageCollectionDeletionRepository, o as deleteSharedCollectionRecords, r as collectionDeletionCurrentTimestamp, t as MediaUsageWorkRepository } from "./media-usage-work-BCK2J-v_.mjs";
+import { a as continueMediaUsageActivation, d as prepareMediaUsageCollectionCapture, i as canResumeMediaUsageCollectionCapture, l as installPreparedMediaUsageCollectionCapture, n as MediaUsageActivationVersionMismatchError, o as finalizeMediaUsageCollectionCapture, s as findResumableMediaUsageCollectionCaptureId, t as MEDIA_USAGE_ACTIVATION_RUNTIME_GENERATION, u as markMediaUsageCollectionCaptureReady } from "./activation-CGlyigmg.mjs";
+import { s as invalidateSchemaCache } from "./zod-generator--nlM0930.mjs";
 import { t as isPortableTextVideoBlock } from "./video-DytCnw3L.mjs";
 import { r as isTransferError, t as TransferError } from "./errors-B4f4It-2.mjs";
 import { n as canonicalJson$1, o as TRANSFER_LIMITS, s as rowsPerInsert } from "./canonical-BudtH-Fx.mjs";
@@ -3194,7 +3194,7 @@ async function loadContentMediaUsageFields(db, collectionSlug, collectionId) {
 		"_emdash_fields.validation"
 	]).where("_emdash_collections.slug", "=", collectionSlug);
 	if (collectionId !== void 0) query = query.where("_emdash_collections.id", "=", collectionId);
-	const rows = await query.execute();
+	const rows = (await query.execute()).filter((row) => !isStoragelessFieldRow(row));
 	const extractionFields = [];
 	const rowBySlug = /* @__PURE__ */ new Map();
 	const allBlockTypes = rows.some((row) => row.type === "blocks") ? await new BlockTypeRegistry(db).listBlockTypes() : [];
@@ -7669,6 +7669,7 @@ var SchemaRegistry = class {
 		const sortOrder = input.sortOrder ?? (maxSort?.max ?? -1) + 1;
 		const activeCoverageInvalidated = await invalidateContentMediaUsageSchemaChange(this.db, collectionSlug);
 		let schemaMutated = false;
+		let fieldStorageReady = false;
 		try {
 			const created = await withTransaction(this.db, async (trx) => {
 				await trx.insertInto("_emdash_fields").values({
@@ -7694,6 +7695,7 @@ var SchemaRegistry = class {
 					required: input.required,
 					defaultValue: input.defaultValue
 				}, trx);
+				fieldStorageReady = true;
 				if (input.indexed) await this.createFieldIndex(collectionSlug, id, input.slug, trx);
 				const fieldRow = await trx.selectFrom("_emdash_fields").where("collection_id", "=", collection.id).where("slug", "=", input.slug).selectAll().executeTakeFirst();
 				if (!fieldRow) throw new SchemaError("Failed to create field", "CREATE_FAILED");
@@ -7706,8 +7708,11 @@ var SchemaRegistry = class {
 			this.notifyTypegen();
 			return created;
 		} catch (error) {
-			if (schemaMutated) if (activeCoverageInvalidated) await invalidateContentMediaUsageSchemaChange(this.db, collectionSlug);
-			else await markContentMediaUsageCollectionStaleSafely(this.db, collectionSlug, "CONTENT_USAGE_STALE");
+			if (schemaMutated) {
+				if (!fieldStorageReady) await this.db.deleteFrom("_emdash_fields").where("id", "=", id).execute();
+				if (activeCoverageInvalidated) await invalidateContentMediaUsageSchemaChange(this.db, collectionSlug);
+				else await markContentMediaUsageCollectionStaleSafely(this.db, collectionSlug, "CONTENT_USAGE_STALE");
+			}
 			throw error;
 		}
 	}
@@ -8365,5 +8370,5 @@ var SchemaRegistry = class {
 };
 
 //#endregion
-export { withContentUsageCollectionLock as A, CONTENT_MEDIA_USAGE_ADAPTER_ID as B, getPortableTableSpecForKind as C, deleteContentMediaUsage as D, processDueMediaUsageCollectionDeletions as E, MediaUsageFieldDiscoveryError as F, CONTENT_SOURCE_SCHEMA_VERSION as G, markContentMediaUsageCollectionStale as H, loadContentMediaUsageFields as I, BlockTypeRegistry as L, MEDIA_USAGE_CONTENT_SOURCE_VARIANTS as M, buildContentMediaUsageSourceKey as N, findNonTranslatableSiblingContentIds as O, MediaUsageBlockResolutionError as P, fingerprintBlockFields as R, contentColumnSpecs as S, processMediaUsageWorkAfterWrite as T, markContentMediaUsageCollectionStaleSafely as U, CONTENT_MEDIA_USAGE_COLLECTION_SCOPE as V, MediaUsageRepository as W, CONTENT_TABLE_PREFIX as _, insertRows as a, assertLoadedColumnCoverage as b, encodeRecord as c, recordCodecs as d, decodeContentRow as f, CONTENT_TABLE_COLUMNS as g, selectExportedColumns as h, estimateStatements as i, loadContentMediaUsageSnapshots as j, refreshContentMediaUsageAfterWrite as k, encodeValue as l, encodeColumn as m, SchemaRegistry as n, selectByKeys as o, decodeRow as p, registry_exports as r, updateColumns as s, SchemaError as t, firstDifference as u, PORTABLE_TABLES as v, runMediaUsageMaintenanceStep as w, codecForColumnType as x, assertColumnCoverage as y, validateBlockFields as z };
-//# sourceMappingURL=registry-TUVaid9Z.mjs.map
+export { refreshContentMediaUsageAfterWrite as A, validateBlockFields as B, getPortableTableSpecForKind as C, processMediaUsageCollectionDeletion as D, processDueMediaUsageCollectionDeletions as E, MediaUsageBlockResolutionError as F, MediaUsageRepository as G, CONTENT_MEDIA_USAGE_COLLECTION_SCOPE as H, MediaUsageFieldDiscoveryError as I, CONTENT_SOURCE_SCHEMA_VERSION as K, loadContentMediaUsageFields as L, loadContentMediaUsageSnapshots as M, MEDIA_USAGE_CONTENT_SOURCE_VARIANTS as N, deleteContentMediaUsage as O, buildContentMediaUsageSourceKey as P, BlockTypeRegistry as R, contentColumnSpecs as S, processMediaUsageWorkAfterWrite as T, markContentMediaUsageCollectionStale as U, CONTENT_MEDIA_USAGE_ADAPTER_ID as V, markContentMediaUsageCollectionStaleSafely as W, CONTENT_TABLE_PREFIX as _, insertRows as a, assertLoadedColumnCoverage as b, encodeRecord as c, recordCodecs as d, decodeContentRow as f, CONTENT_TABLE_COLUMNS as g, selectExportedColumns as h, estimateStatements as i, withContentUsageCollectionLock as j, findNonTranslatableSiblingContentIds as k, encodeValue as l, encodeColumn as m, SchemaRegistry as n, selectByKeys as o, decodeRow as p, registry_exports as r, updateColumns as s, SchemaError as t, firstDifference as u, PORTABLE_TABLES as v, runMediaUsageMaintenanceStep as w, codecForColumnType as x, assertColumnCoverage as y, fingerprintBlockFields as z };
+//# sourceMappingURL=registry-B0-O575m.mjs.map