kempo 4.2.14 → 4.2.16

package/app-public/account/split2.template.html

@@ -3,6 +3,7 @@
   author: Copilot Admin
   created: 2026-04-16T20:40:58.376Z
   updated: 2026-04-19T20:43:06.103Z
+	locked: true
 -->
 <!DOCTYPE html>
 <html lang="en">

package/app-public/test.page.html

@@ -6,6 +6,7 @@
   updated: 2026-04-16T21:13:12.153Z
   title: test
   description: 
+  locked: true
 -->
 <page template="split" title="test">
 <content location="left">

package/bin/cli.js

@@ -31,7 +31,7 @@ const projectName = basename(projectDir);
 */
 
 const generatePassword = () => {
-  const chars = 'ABCDEFGHJKLMNPQRSTUVWXYZabcdefghjkmnpqrstuvwxyz23456789!@#$%&*';
+  const chars = 'ABCDEFGHJKLMNPQRSTUVWXYZabcdefghjkmnpqrstuvwxyz23456789-_';
   return Array.from(
     { length: 16 },
     () => chars[crypto.randomInt(chars.length)]
@@ -404,6 +404,21 @@ execSync('npm install kempo', { cwd: projectDir, stdio: 'inherit' });
 console.log('\n--- Starting database ---\n');
 
 if(containerMode === 'new'){
+  const volumeName = `${dbName}_postgres_data`;
+  
+  try {
+    execSync(`docker stop ${containerName}`, { stdio: 'ignore' });
+    execSync(`docker rm ${containerName}`, { stdio: 'ignore' });
+  } catch {
+    // Container doesn't exist, that's fine
+  }
+  
+  try {
+    execSync(`docker volume rm ${volumeName}`, { stdio: 'ignore' });
+  } catch {
+    // Volume doesn't exist, that's fine
+  }
+  
   const compose = spawnSync('docker', ['compose', 'up', '-d'], {
     cwd: projectDir,
     stdio: 'inherit',
@@ -429,8 +444,8 @@ if(containerMode === 'new'){
 
 console.log('\n--- Initializing database ---\n');
 
-// Give database a moment to initialize
-await new Promise(r => setTimeout(r, 2000));
+// Give database plenty of time to fully initialize
+await new Promise(r => setTimeout(r, 30000));
 
 // Clear migration snapshots so drizzle-kit push compares against the live DB only
 const migrationDir = join(projectDir, 'server', 'db', 'migrations');
@@ -438,8 +453,15 @@ if(existsSync(migrationDir)){
   rmSync(migrationDir, { recursive: true, force: true });
 }
 
-execSync('npx drizzle-kit push --force', { cwd: projectDir, stdio: 'inherit' });
-execSync('node node_modules/kempo/scripts/init-db.js', { cwd: projectDir, stdio: 'inherit' });
+const drizzleResult = spawnSync('npx', ['drizzle-kit', 'push', '--force'], { cwd: projectDir, stdio: 'inherit', env: { ...process.env, DATABASE_URL: databaseUrl }, shell: true });
+if(drizzleResult.status !== 0){
+  console.error('\n❌ Drizzle push failed. DATABASE_URL: ' + databaseUrl);
+  console.error('Container: ' + containerName);
+  console.error('Check: docker logs ' + containerName + '\n');
+  process.exit(1);
+}
+
+execSync('node node_modules/kempo/scripts/init-db.js', { cwd: projectDir, stdio: 'inherit', env: { ...process.env, DATABASE_URL: databaseUrl } });
 
 /*
   Step 8: Create admin user

package/dist/kempo/api/fragments/lock/PUT.js

@@ -0,0 +1,2 @@
+import{resolve}from"path";import currentUserHasPermission from"../../../../../server/utils/permissions/currentUserHasPermission.js";import setFragmentLocked from"../../../../../server/utils/fragments/setFragmentLocked.js";const rootDir=resolve(import.meta.dirname,"../../../../../app-public");export default async(r,e)=>{const s=r.cookies.session_token,[o,t]=await currentUserHasPermission(s,"system:fragments:update");if(o)return e.status(o.code).json({error:o.msg});if(!t)return e.status(403).json({error:"Insufficient permissions"});const{file:i,locked:n}=r.body;if(!i)return e.status(400).json({error:"File path is required"});if("boolean"!=typeof n)return e.status(400).json({error:"locked must be a boolean"});const[a,m]=await setFragmentLocked({rootDir:rootDir,file:i,locked:n});if(a)return e.status(a.code).json({error:a.msg});e.json(m)};
+//# sourceMappingURL=PUT.js.map

package/dist/kempo/api/fragments/lock/PUT.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"src/kempo/api/fragments/lock/PUT.js","names":["resolve","currentUserHasPermission","setFragmentLocked","rootDir","dirname","async","request","response","token","cookies","session_token","permError","hasPermission","status","code","json","error","msg","file","locked","body","data"],"sources":["0"],"sourcesContent":["import { resolve } from 'path';\nimport currentUserHasPermission from '../../../../../server/utils/permissions/currentUserHasPermission.js';\nimport setFragmentLocked from '../../../../../server/utils/fragments/setFragmentLocked.js';\n\nconst rootDir = resolve(import.meta.dirname, '../../../../../app-public');\n\nexport default async (request, response) => {\n\tconst token = request.cookies.session_token;\n\tconst [permError, hasPermission] = await currentUserHasPermission(token, 'system:fragments:update');\n\n\tif(permError){\n\t\treturn response.status(permError.code).json({ error: permError.msg });\n\t}\n\n\tif(!hasPermission){\n\t\treturn response.status(403).json({ error: 'Insufficient permissions' });\n\t}\n\n\tconst { file, locked } = request.body;\n\n\tif(!file){\n\t\treturn response.status(400).json({ error: 'File path is required' });\n\t}\n\n\tif(typeof locked !== 'boolean'){\n\t\treturn response.status(400).json({ error: 'locked must be a boolean' });\n\t}\n\n\tconst [error, data] = await setFragmentLocked({ rootDir, file, locked });\n\n\tif(error){\n\t\treturn response.status(error.code).json({ error: error.msg });\n\t}\n\n\tresponse.json(data);\n};\n"],"mappings":"OAASA,YAAe,cACjBC,6BAA8B,6EAC9BC,sBAAuB,6DAE9B,MAAMC,QAAUH,oBAAoBI,QAAS,4CAE9BC,MAAOC,EAASC,KAC9B,MAAMC,EAAQF,EAAQG,QAAQC,eACvBC,EAAWC,SAAuBX,yBAAyBO,EAAO,2BAEzE,GAAGG,EACF,OAAOJ,EAASM,OAAOF,EAAUG,MAAMC,KAAK,CAAEC,MAAOL,EAAUM,MAGhE,IAAIL,EACH,OAAOL,EAASM,OAAO,KAAKE,KAAK,CAAEC,MAAO,6BAG3C,MAAME,KAAEA,EAAIC,OAAEA,GAAWb,EAAQc,KAEjC,IAAIF,EACH,OAAOX,EAASM,OAAO,KAAKE,KAAK,CAAEC,MAAO,0BAG3C,GAAqB,kBAAXG,EACT,OAAOZ,EAASM,OAAO,KAAKE,KAAK,CAAEC,MAAO,6BAG3C,MAAOA,EAAOK,SAAcnB,kBAAkB,CAAEC,gBAASe,OAAMC,WAE/D,GAAGH,EACF,OAAOT,EAASM,OAAOG,EAAMF,MAAMC,KAAK,CAAEC,MAAOA,EAAMC,MAGxDV,EAASQ,KAAKM","ignoreList":[]}

package/dist/kempo/api/globals/lock/PUT.js

@@ -0,0 +1,2 @@
+import{resolve}from"path";import currentUserHasPermission from"../../../../../server/utils/permissions/currentUserHasPermission.js";import setGlobalContentLocked from"../../../../../server/utils/global-content/setGlobalContentLocked.js";const rootDir=resolve(import.meta.dirname,"../../../../../app-public");export default async(o,r)=>{const s=o.cookies.session_token,[e,t]=await currentUserHasPermission(s,"system:globals:update");if(e)return r.status(e.code).json({error:e.msg});if(!t)return r.status(403).json({error:"Insufficient permissions"});const{id:n,locked:i}=o.body;if(!n)return r.status(400).json({error:"Global content ID is required"});if("boolean"!=typeof i)return r.status(400).json({error:"locked must be a boolean"});const[a,l]=await setGlobalContentLocked({rootDir:rootDir,id:n,locked:i});if(a)return r.status(a.code).json({error:a.msg});r.json(l)};
+//# sourceMappingURL=PUT.js.map

package/dist/kempo/api/globals/lock/PUT.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"src/kempo/api/globals/lock/PUT.js","names":["resolve","currentUserHasPermission","setGlobalContentLocked","rootDir","dirname","async","request","response","token","cookies","session_token","permError","hasPermission","status","code","json","error","msg","id","locked","body","data"],"sources":["0"],"sourcesContent":["import { resolve } from 'path';\nimport currentUserHasPermission from '../../../../../server/utils/permissions/currentUserHasPermission.js';\nimport setGlobalContentLocked from '../../../../../server/utils/global-content/setGlobalContentLocked.js';\n\nconst rootDir = resolve(import.meta.dirname, '../../../../../app-public');\n\nexport default async (request, response) => {\n\tconst token = request.cookies.session_token;\n\tconst [permError, hasPermission] = await currentUserHasPermission(token, 'system:globals:update');\n\n\tif(permError){\n\t\treturn response.status(permError.code).json({ error: permError.msg });\n\t}\n\n\tif(!hasPermission){\n\t\treturn response.status(403).json({ error: 'Insufficient permissions' });\n\t}\n\n\tconst { id, locked } = request.body;\n\n\tif(!id){\n\t\treturn response.status(400).json({ error: 'Global content ID is required' });\n\t}\n\n\tif(typeof locked !== 'boolean'){\n\t\treturn response.status(400).json({ error: 'locked must be a boolean' });\n\t}\n\n\tconst [error, data] = await setGlobalContentLocked({ rootDir, id, locked });\n\n\tif(error){\n\t\treturn response.status(error.code).json({ error: error.msg });\n\t}\n\n\tresponse.json(data);\n};\n"],"mappings":"OAASA,YAAe,cACjBC,6BAA8B,6EAC9BC,2BAA4B,uEAEnC,MAAMC,QAAUH,oBAAoBI,QAAS,4CAE9BC,MAAOC,EAASC,KAC9B,MAAMC,EAAQF,EAAQG,QAAQC,eACvBC,EAAWC,SAAuBX,yBAAyBO,EAAO,yBAEzE,GAAGG,EACF,OAAOJ,EAASM,OAAOF,EAAUG,MAAMC,KAAK,CAAEC,MAAOL,EAAUM,MAGhE,IAAIL,EACH,OAAOL,EAASM,OAAO,KAAKE,KAAK,CAAEC,MAAO,6BAG3C,MAAME,GAAEA,EAAEC,OAAEA,GAAWb,EAAQc,KAE/B,IAAIF,EACH,OAAOX,EAASM,OAAO,KAAKE,KAAK,CAAEC,MAAO,kCAG3C,GAAqB,kBAAXG,EACT,OAAOZ,EAASM,OAAO,KAAKE,KAAK,CAAEC,MAAO,6BAG3C,MAAOA,EAAOK,SAAcnB,uBAAuB,CAAEC,gBAASe,KAAIC,WAElE,GAAGH,EACF,OAAOT,EAASM,OAAOG,EAAMF,MAAMC,KAAK,CAAEC,MAAOA,EAAMC,MAGxDV,EAASQ,KAAKM","ignoreList":[]}

package/dist/kempo/api/pages/lock/PUT.js

@@ -0,0 +1,2 @@
+import{resolve}from"path";import currentUserHasPermission from"../../../../../server/utils/permissions/currentUserHasPermission.js";import setPageLocked from"../../../../../server/utils/pages/setPageLocked.js";const rootDir=resolve(import.meta.dirname,"../../../../../app-public");export default async(e,s)=>{const r=e.cookies.session_token,[o,t]=await currentUserHasPermission(r,"system:pages:update");if(o)return s.status(o.code).json({error:o.msg});if(!t)return s.status(403).json({error:"Insufficient permissions"});const{file:i,locked:n}=e.body;if(!i)return s.status(400).json({error:"File path is required"});if("boolean"!=typeof n)return s.status(400).json({error:"locked must be a boolean"});const[a,u]=await setPageLocked({rootDir:rootDir,file:i,locked:n});if(a)return s.status(a.code).json({error:a.msg});s.json(u)};
+//# sourceMappingURL=PUT.js.map

package/dist/kempo/api/pages/lock/PUT.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"src/kempo/api/pages/lock/PUT.js","names":["resolve","currentUserHasPermission","setPageLocked","rootDir","dirname","async","request","response","token","cookies","session_token","permError","hasPermission","status","code","json","error","msg","file","locked","body","data"],"sources":["0"],"sourcesContent":["import { resolve } from 'path';\nimport currentUserHasPermission from '../../../../../server/utils/permissions/currentUserHasPermission.js';\nimport setPageLocked from '../../../../../server/utils/pages/setPageLocked.js';\n\nconst rootDir = resolve(import.meta.dirname, '../../../../../app-public');\n\nexport default async (request, response) => {\n\tconst token = request.cookies.session_token;\n\tconst [permError, hasPermission] = await currentUserHasPermission(token, 'system:pages:update');\n\n\tif(permError){\n\t\treturn response.status(permError.code).json({ error: permError.msg });\n\t}\n\n\tif(!hasPermission){\n\t\treturn response.status(403).json({ error: 'Insufficient permissions' });\n\t}\n\n\tconst { file, locked } = request.body;\n\n\tif(!file){\n\t\treturn response.status(400).json({ error: 'File path is required' });\n\t}\n\n\tif(typeof locked !== 'boolean'){\n\t\treturn response.status(400).json({ error: 'locked must be a boolean' });\n\t}\n\n\tconst [error, data] = await setPageLocked({ rootDir, file, locked });\n\n\tif(error){\n\t\treturn response.status(error.code).json({ error: error.msg });\n\t}\n\n\tresponse.json(data);\n};\n"],"mappings":"OAASA,YAAe,cACjBC,6BAA8B,6EAC9BC,kBAAmB,qDAE1B,MAAMC,QAAUH,oBAAoBI,QAAS,4CAE9BC,MAAOC,EAASC,KAC9B,MAAMC,EAAQF,EAAQG,QAAQC,eACvBC,EAAWC,SAAuBX,yBAAyBO,EAAO,uBAEzE,GAAGG,EACF,OAAOJ,EAASM,OAAOF,EAAUG,MAAMC,KAAK,CAAEC,MAAOL,EAAUM,MAGhE,IAAIL,EACH,OAAOL,EAASM,OAAO,KAAKE,KAAK,CAAEC,MAAO,6BAG3C,MAAME,KAAEA,EAAIC,OAAEA,GAAWb,EAAQc,KAEjC,IAAIF,EACH,OAAOX,EAASM,OAAO,KAAKE,KAAK,CAAEC,MAAO,0BAG3C,GAAqB,kBAAXG,EACT,OAAOZ,EAASM,OAAO,KAAKE,KAAK,CAAEC,MAAO,6BAG3C,MAAOA,EAAOK,SAAcnB,cAAc,CAAEC,gBAASe,OAAMC,WAE3D,GAAGH,EACF,OAAOT,EAASM,OAAOG,EAAMF,MAAMC,KAAK,CAAEC,MAAOA,EAAMC,MAGxDV,EAASQ,KAAKM","ignoreList":[]}

package/dist/kempo/api/pages/search/GET.js

@@ -0,0 +1,2 @@
+import{resolve}from"path";import currentUserHasPermission from"../../../../server/utils/permissions/currentUserHasPermission.js";import searchByMetadata from"../../../../server/utils/pages/searchByMetadata.js";const rootDir=resolve(import.meta.dirname,"../../../../app-public");export default async(r,s)=>{const e=r.cookies.session_token,[t,o]=await currentUserHasPermission(e,"system:pages:read");if(t)return s.status(t.code).json({error:t.msg});if(!o)return s.status(403).json({error:"Insufficient permissions"});const{query:a}=r.query;if(!a)return s.status(400).json({error:"query parameter is required"});let i;try{i=JSON.parse(a)}catch{return s.status(400).json({error:"query must be valid JSON"})}if("object"!=typeof i||Array.isArray(i)||!i)return s.status(400).json({error:"query must be a JSON object"});const[n,u]=await searchByMetadata({rootDir:rootDir,query:i});if(n)return s.status(n.code).json({error:n.msg});s.json(u)};
+//# sourceMappingURL=GET.js.map

package/dist/kempo/api/pages/search/GET.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"src/kempo/api/pages/search/GET.js","names":["resolve","currentUserHasPermission","searchByMetadata","rootDir","dirname","async","request","response","token","cookies","session_token","permError","hasPermission","status","code","json","error","msg","query","parsedQuery","JSON","parse","Array","isArray","data"],"sources":["0"],"sourcesContent":["import { resolve } from 'path';\nimport currentUserHasPermission from '../../../../server/utils/permissions/currentUserHasPermission.js';\nimport searchByMetadata from '../../../../server/utils/pages/searchByMetadata.js';\n\nconst rootDir = resolve(import.meta.dirname, '../../../../app-public');\n\nexport default async (request, response) => {\n\tconst token = request.cookies.session_token;\n\tconst [permError, hasPermission] = await currentUserHasPermission(token, 'system:pages:read');\n\n\tif(permError){\n\t\treturn response.status(permError.code).json({ error: permError.msg });\n\t}\n\n\tif(!hasPermission){\n\t\treturn response.status(403).json({ error: 'Insufficient permissions' });\n\t}\n\n\tconst { query } = request.query;\n\n\tif(!query){\n\t\treturn response.status(400).json({ error: 'query parameter is required' });\n\t}\n\n\tlet parsedQuery;\n\ttry {\n\t\tparsedQuery = JSON.parse(query);\n\t} catch {\n\t\treturn response.status(400).json({ error: 'query must be valid JSON' });\n\t}\n\n\tif(typeof parsedQuery !== 'object' || Array.isArray(parsedQuery) || !parsedQuery){\n\t\treturn response.status(400).json({ error: 'query must be a JSON object' });\n\t}\n\n\tconst [error, data] = await searchByMetadata({ rootDir, query: parsedQuery });\n\n\tif(error){\n\t\treturn response.status(error.code).json({ error: error.msg });\n\t}\n\n\tresponse.json(data);\n};\n"],"mappings":"OAASA,YAAe,cACjBC,6BAA8B,0EAC9BC,qBAAsB,qDAE7B,MAAMC,QAAUH,oBAAoBI,QAAS,yCAE9BC,MAAOC,EAASC,KAC9B,MAAMC,EAAQF,EAAQG,QAAQC,eACvBC,EAAWC,SAAuBX,yBAAyBO,EAAO,qBAEzE,GAAGG,EACF,OAAOJ,EAASM,OAAOF,EAAUG,MAAMC,KAAK,CAAEC,MAAOL,EAAUM,MAGhE,IAAIL,EACH,OAAOL,EAASM,OAAO,KAAKE,KAAK,CAAEC,MAAO,6BAG3C,MAAME,MAAEA,GAAUZ,EAAQY,MAE1B,IAAIA,EACH,OAAOX,EAASM,OAAO,KAAKE,KAAK,CAAEC,MAAO,gCAG3C,IAAIG,EACJ,IACCA,EAAcC,KAAKC,MAAMH,EAC1B,CAAE,MACD,OAAOX,EAASM,OAAO,KAAKE,KAAK,CAAEC,MAAO,4BAC3C,CAEA,GAA0B,iBAAhBG,GAA4BG,MAAMC,QAAQJ,KAAiBA,EACpE,OAAOZ,EAASM,OAAO,KAAKE,KAAK,CAAEC,MAAO,gCAG3C,MAAOA,EAAOQ,SAActB,iBAAiB,CAAEC,gBAASe,MAAOC,IAE/D,GAAGH,EACF,OAAOT,EAASM,OAAOG,EAAMF,MAAMC,KAAK,CAAEC,MAAOA,EAAMC,MAGxDV,EAASQ,KAAKS","ignoreList":[]}

package/dist/kempo/api/templates/lock/PUT.js

@@ -0,0 +1,2 @@
+import{resolve}from"path";import currentUserHasPermission from"../../../../../server/utils/permissions/currentUserHasPermission.js";import setTemplateLocked from"../../../../../server/utils/templates/setTemplateLocked.js";const rootDir=resolve(import.meta.dirname,"../../../../../app-public");export default async(e,s)=>{const r=e.cookies.session_token,[o,t]=await currentUserHasPermission(r,"system:pages:update");if(o)return s.status(o.code).json({error:o.msg});if(!t)return s.status(403).json({error:"Insufficient permissions"});const{file:i,locked:n}=e.body;if(!i)return s.status(400).json({error:"File path is required"});if("boolean"!=typeof n)return s.status(400).json({error:"locked must be a boolean"});const[a,m]=await setTemplateLocked({rootDir:rootDir,file:i,locked:n});if(a)return s.status(a.code).json({error:a.msg});s.json(m)};
+//# sourceMappingURL=PUT.js.map

package/dist/kempo/api/templates/lock/PUT.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"src/kempo/api/templates/lock/PUT.js","names":["resolve","currentUserHasPermission","setTemplateLocked","rootDir","dirname","async","request","response","token","cookies","session_token","permError","hasPermission","status","code","json","error","msg","file","locked","body","data"],"sources":["0"],"sourcesContent":["import { resolve } from 'path';\nimport currentUserHasPermission from '../../../../../server/utils/permissions/currentUserHasPermission.js';\nimport setTemplateLocked from '../../../../../server/utils/templates/setTemplateLocked.js';\n\nconst rootDir = resolve(import.meta.dirname, '../../../../../app-public');\n\nexport default async (request, response) => {\n\tconst token = request.cookies.session_token;\n\tconst [permError, hasPermission] = await currentUserHasPermission(token, 'system:pages:update');\n\n\tif(permError){\n\t\treturn response.status(permError.code).json({ error: permError.msg });\n\t}\n\n\tif(!hasPermission){\n\t\treturn response.status(403).json({ error: 'Insufficient permissions' });\n\t}\n\n\tconst { file, locked } = request.body;\n\n\tif(!file){\n\t\treturn response.status(400).json({ error: 'File path is required' });\n\t}\n\n\tif(typeof locked !== 'boolean'){\n\t\treturn response.status(400).json({ error: 'locked must be a boolean' });\n\t}\n\n\tconst [error, data] = await setTemplateLocked({ rootDir, file, locked });\n\n\tif(error){\n\t\treturn response.status(error.code).json({ error: error.msg });\n\t}\n\n\tresponse.json(data);\n};\n"],"mappings":"OAASA,YAAe,cACjBC,6BAA8B,6EAC9BC,sBAAuB,6DAE9B,MAAMC,QAAUH,oBAAoBI,QAAS,4CAE9BC,MAAOC,EAASC,KAC9B,MAAMC,EAAQF,EAAQG,QAAQC,eACvBC,EAAWC,SAAuBX,yBAAyBO,EAAO,uBAEzE,GAAGG,EACF,OAAOJ,EAASM,OAAOF,EAAUG,MAAMC,KAAK,CAAEC,MAAOL,EAAUM,MAGhE,IAAIL,EACH,OAAOL,EAASM,OAAO,KAAKE,KAAK,CAAEC,MAAO,6BAG3C,MAAME,KAAEA,EAAIC,OAAEA,GAAWb,EAAQc,KAEjC,IAAIF,EACH,OAAOX,EAASM,OAAO,KAAKE,KAAK,CAAEC,MAAO,0BAG3C,GAAqB,kBAAXG,EACT,OAAOZ,EAASM,OAAO,KAAKE,KAAK,CAAEC,MAAO,6BAG3C,MAAOA,EAAOK,SAAcnB,kBAAkB,CAAEC,gBAASe,OAAMC,WAE/D,GAAGH,EACF,OAAOT,EAASM,OAAOG,EAAMF,MAAMC,KAAK,CAAEC,MAAOA,EAAMC,MAGxDV,EAASQ,KAAKM","ignoreList":[]}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "kempo",
-  "version": "4.2.14",
+  "version": "4.2.16",
   "type": "module",
   "description": "A fullstack CMS framework for creating websites with user authentication",
   "scripts": {
@@ -49,7 +49,7 @@
     "kempo": "^4.2.4",
     "kempo-server": "^3.1.0",
     "kempo-testing-framework": "^1.4.6",
-    "kempo-ui": "^0.3.17",
+    "kempo-ui": "^0.4.6",
     "lexical": "^0.42.0",
     "monaco-editor": "^0.55.1",
     "postgres": "^3.4.7",

package/server/sdk.js

@@ -103,6 +103,8 @@ export { default as listDirectories } from './utils/pages/listDirectories.js';
 export { default as listPages } from './utils/pages/listPages.js';
 export { default as listTemplates } from './utils/pages/listTemplates.js';
 export { default as movePage } from './utils/pages/movePage.js';
+export { default as searchByMetadata } from './utils/pages/searchByMetadata.js';
+export { default as setPageLocked } from './utils/pages/setPageLocked.js';
 export { default as updatePage } from './utils/pages/updatePage.js';
 
 /*
@@ -114,6 +116,7 @@ export { default as deleteTemplate } from './utils/templates/deleteTemplate.js';
 export { default as disableTemplate } from './utils/templates/disableTemplate.js';
 export { default as enableTemplate } from './utils/templates/enableTemplate.js';
 export { default as getTemplate } from './utils/templates/getTemplate.js';
+export { default as setTemplateLocked } from './utils/templates/setTemplateLocked.js';
 export { default as updateTemplate } from './utils/templates/updateTemplate.js';
 
 /*
@@ -126,6 +129,7 @@ export { default as disableFragment } from './utils/fragments/disableFragment.js
 export { default as enableFragment } from './utils/fragments/enableFragment.js';
 export { default as getFragment } from './utils/fragments/getFragment.js';
 export { default as listFragments } from './utils/fragments/listFragments.js';
+export { default as setFragmentLocked } from './utils/fragments/setFragmentLocked.js';
 export { default as updateFragment } from './utils/fragments/updateFragment.js';
 
 /*
@@ -138,6 +142,7 @@ export { default as disableGlobalContent } from './utils/global-content/disableG
 export { default as enableGlobalContent } from './utils/global-content/enableGlobalContent.js';
 export { default as getGlobalContent } from './utils/global-content/getGlobalContent.js';
 export { default as listGlobalContent } from './utils/global-content/listGlobalContent.js';
+export { default as setGlobalContentLocked } from './utils/global-content/setGlobalContentLocked.js';
 export { default as updateGlobalContent } from './utils/global-content/updateGlobalContent.js';
 
 /*

package/server/utils/fragments/createFragment.js

@@ -1,6 +1,7 @@
 import { writeFile, mkdir } from 'fs/promises';
 import { join, dirname } from 'path';
 import { existsSync } from 'fs';
+import triggerHook from '../hooks/triggerHook.js';
 
 const slugify = name => name
   .toLowerCase()
@@ -10,7 +11,7 @@ const slugify = name => name
   .replace(/-+/g, '-')
   .replace(/^-|-$/g, '');
 
-export default async ({ rootDir, directory, name, author }) => {
+export default async ({ rootDir, directory, name, author, locked = false }) => {
   if(!rootDir){
     return [{ code: 400, msg: 'Root directory is required' }, null];
   }
@@ -42,6 +43,7 @@ export default async ({ rootDir, directory, name, author }) => {
     `  author: ${author || ''}`,
     `  created: ${now}`,
     `  updated: ${now}`,
+    ...(locked ? ['  locked: true'] : []),
     '-->'
   ].join('\n');
 
@@ -53,5 +55,7 @@ export default async ({ rootDir, directory, name, author }) => {
 
   const relPath = dir ? `${dir}/${slug}` : slug;
 
+  await triggerHook('fragment:created', { file: `${relPath}.fragment.html`, name, slug });
+
   return [null, { file: `${relPath}.fragment.html`, name, slug }];
 };

package/server/utils/fragments/deleteFragment.js

@@ -1,6 +1,7 @@
 import { readFile, unlink } from 'fs/promises';
 import { join, normalize, sep } from 'path';
 import parseFrontmatter from '../fs/parseFrontmatter.js';
+import triggerHook from '../hooks/triggerHook.js';
 
 export default async ({ rootDir, files }) => {
   if(!rootDir) return [{ code: 400, msg: 'Root directory is required' }, null];
@@ -21,14 +22,12 @@ export default async ({ rootDir, files }) => {
     }
 
     const meta = parseFrontmatter(content);
-    if(meta.locked === 'true'){
-      return [{ code: 403, msg: `Cannot delete locked fragment: ${file}` }, null];
-    }
     if(meta.owner && meta.owner !== 'custom'){
       return [{ code: 403, msg: `Cannot delete fragment: ${file}` }, null];
     }
 
     await unlink(fullPath);
+    await triggerHook('fragment:deleted', { file });
   }
 
   return [null, { deleted: files.length }];

package/server/utils/fragments/disableFragment.js

@@ -23,9 +23,6 @@ export default async ({ rootDir, file }) => {
 
   const content = await readFile(fullPath, 'utf-8');
   const meta = parseFrontmatter(content);
-  if(meta.locked === 'true'){
-    return [{ code: 403, msg: 'Cannot disable a locked fragment' }, null];
-  }
 
   const disabledPath = fullPath.replace(/\.fragment\.html$/, '.fragment-disabled.html');
   if(existsSync(disabledPath)){

package/server/utils/fragments/getFragmentMetadata.js

@@ -0,0 +1,32 @@
+import { readFile } from 'fs/promises';
+import { join } from 'path';
+import { existsSync } from 'fs';
+import parseFrontmatter from '../fs/parseFrontmatter.js';
+
+export default async ({ rootDir, file }) => {
+  if(!rootDir){
+    return [{ code: 400, msg: 'Root directory is required' }, null];
+  }
+  if(!file){
+    return [{ code: 400, msg: 'File path is required' }, null];
+  }
+
+  const safePath = file.replace(/\.\./g, '').replace(/^\//, '');
+  const fullPath = join(rootDir, safePath);
+
+  if(!existsSync(fullPath)){
+    return [{ code: 404, msg: 'Fragment not found' }, null];
+  }
+
+  const raw = await readFile(fullPath, 'utf-8');
+  const meta = parseFrontmatter(raw);
+
+  return [null, {
+    name: meta.name,
+    owner: meta.owner,
+    locked: meta.locked === 'true',
+    author: meta.author,
+    created: meta.created,
+    updated: meta.updated
+  }];
+};

package/server/utils/fragments/moveFragment.js

@@ -28,9 +28,6 @@ export default async ({ rootDir, file, newFile }) => {
   }
 
   const meta = parseFrontmatter(content);
-  if(meta.locked === 'true'){
-    return [{ code: 403, msg: 'Cannot move a locked fragment' }, null];
-  }
   if(meta.owner && meta.owner !== 'custom'){
     return [{ code: 403, msg: 'Cannot move system fragments' }, null];
   }

package/server/utils/fragments/setFragmentLocked.js

@@ -0,0 +1,48 @@
+import { readFile, writeFile } from 'fs/promises';
+import { join, normalize, sep } from 'path';
+import { existsSync } from 'fs';
+
+export default async ({ rootDir, file, locked }) => {
+  if(!rootDir) return [{ code: 400, msg: 'Root directory is required' }, null];
+  if(!file) return [{ code: 400, msg: 'File path is required' }, null];
+  if(typeof locked !== 'boolean') return [{ code: 400, msg: 'locked must be a boolean' }, null];
+
+  const normalized = normalize(file);
+  if(normalized.startsWith('..') || normalized.includes('..' + sep)){
+    return [{ code: 400, msg: 'Invalid file path' }, null];
+  }
+
+  const fullPath = join(rootDir, normalized);
+  if(!existsSync(fullPath)){
+    return [{ code: 404, msg: 'Fragment not found' }, null];
+  }
+
+  const raw = await readFile(fullPath, 'utf-8');
+  const frontmatterMatch = raw.match(/^<!--\s*\n([\s\S]*?)\n\s*-->/);
+  const existingMeta = {};
+
+  if(frontmatterMatch){
+    for(const line of frontmatterMatch[1].split('\n')){
+      const idx = line.indexOf(':');
+      if(idx === -1) continue;
+      const key = line.slice(0, idx).trim();
+      const value = line.slice(idx + 1).trim();
+      if(key) existingMeta[key] = value;
+    }
+  }
+
+  if(locked){
+    existingMeta.locked = 'true';
+  } else {
+    delete existingMeta.locked;
+  }
+
+  const frontmatter = '<!--\n' +
+    Object.entries(existingMeta).map(([k, v]) => `  ${k}: ${v}`).join('\n') +
+    '\n-->';
+
+  const body = frontmatterMatch ? raw.slice(frontmatterMatch[0].length) : '\n' + raw;
+  await writeFile(fullPath, frontmatter + body, 'utf-8');
+
+  return [null, { file: normalized, locked }];
+};

package/server/utils/fragments/updateFragment.js

@@ -1,6 +1,7 @@
 import { readFile, writeFile } from 'fs/promises';
 import { join } from 'path';
 import { existsSync } from 'fs';
+import triggerHook from '../hooks/triggerHook.js';
 
 export default async ({ rootDir, file, author, markup }) => {
   if(!rootDir){
@@ -19,9 +20,6 @@ export default async ({ rootDir, file, author, markup }) => {
 
   const raw = await readFile(fullPath, 'utf-8');
 
-  const lockedMatch = raw.match(/^<!--[\s\S]*?locked:\s*true[\s\S]*?-->/);
-  if(lockedMatch) return [{ code: 403, msg: 'This fragment is locked and cannot be edited' }, null];
-
   const frontmatterMatch = raw.match(/^<!--\s*\n([\s\S]*?)\n\s*-->/);
   const existingMeta = {};
   if(frontmatterMatch){
@@ -54,5 +52,7 @@ export default async ({ rootDir, file, author, markup }) => {
 
   await writeFile(fullPath, newContent, 'utf-8');
 
+  await triggerHook('fragment:updated', { file: safePath, updatedAt: now });
+
   return [null, { file: safePath, updatedAt: now }];
 };

package/server/utils/fs/isResourceLocked.js

@@ -0,0 +1,22 @@
+import { readFile } from 'fs/promises';
+import { join } from 'path';
+import { existsSync } from 'fs';
+import parseFrontmatter from './parseFrontmatter.js';
+
+export default async ({ rootDir, file, resourceType = 'file' }) => {
+  if(!rootDir || !file){
+    return [{ code: 400, msg: 'Root directory and file path are required' }, null];
+  }
+
+  const safePath = file.replace(/\.\./g, '').replace(/^\//, '');
+  const fullPath = join(rootDir, safePath);
+
+  if(!existsSync(fullPath)){
+    return [{ code: 404, msg: `${resourceType} not found` }, null];
+  }
+
+  const raw = await readFile(fullPath, 'utf-8');
+  const meta = parseFrontmatter(raw);
+
+  return [null, meta.locked === 'true'];
+};

package/server/utils/global-content/createGlobalContent.js

@@ -3,6 +3,7 @@ import { join } from 'path';
 import { existsSync } from 'fs';
 import crypto from 'crypto';
 import { GLOBAL_FILE, parseEntries } from './helpers.js';
+import triggerHook from '../hooks/triggerHook.js';
 
 const serializeEntries = entries => entries.map(e => {
   const attrs = [
@@ -54,5 +55,7 @@ export default async ({ rootDir, name, location, priority, author }) => {
   entries.push(entry);
   await writeFile(filePath, serializeEntries(entries) + '\n', 'utf-8');
 
+  await triggerHook('globalContent:created', { id: entry.id, name, location });
+
   return [null, entry];
 };

package/server/utils/global-content/deleteGlobalContent.js

@@ -2,6 +2,7 @@ import { readFile, writeFile } from 'fs/promises';
 import { join } from 'path';
 import { existsSync } from 'fs';
 import { GLOBAL_FILE, parseEntries } from './helpers.js';
+import triggerHook from '../hooks/triggerHook.js';
 
 const serializeEntries = entries => entries.map(e => {
   const attrs = [
@@ -37,9 +38,6 @@ export default async ({ rootDir, ids }) => {
 
   for(const entry of entries){
     if(!idSet.has(entry.id)) continue;
-    if(entry.locked){
-      return [{ code: 403, msg: `Cannot delete locked global content: ${entry.name}` }, null];
-    }
     if(entry.owner && entry.owner !== 'custom'){
       return [{ code: 403, msg: `Cannot delete global content: ${entry.name}` }, null];
     }
@@ -48,5 +46,7 @@ export default async ({ rootDir, ids }) => {
   const remaining = entries.filter(e => !idSet.has(e.id));
   await writeFile(filePath, remaining.length ? serializeEntries(remaining) + '\n' : '', 'utf-8');
 
+  for(const id of ids) await triggerHook('globalContent:deleted', { id });
+
   return [null, { deleted: ids.length }];
 };

package/server/utils/global-content/getGlobalContentMetadata.js

@@ -0,0 +1,37 @@
+import { readFile } from 'fs/promises';
+import { join } from 'path';
+import { existsSync } from 'fs';
+import { GLOBAL_FILE, parseEntries } from './helpers.js';
+
+export default async ({ rootDir, id }) => {
+  if(!rootDir){
+    return [{ code: 400, msg: 'Root directory is required' }, null];
+  }
+  if(!id){
+    return [{ code: 400, msg: 'Global content ID is required' }, null];
+  }
+
+  const filePath = join(rootDir, GLOBAL_FILE);
+  if(!existsSync(filePath)){
+    return [{ code: 404, msg: 'Global content not found' }, null];
+  }
+
+  const raw = await readFile(filePath, 'utf-8');
+  const entries = parseEntries(raw);
+  const entry = entries.find(e => e.id === id);
+
+  if(!entry){
+    return [{ code: 404, msg: 'Global content not found' }, null];
+  }
+
+  return [null, {
+    name: entry.name,
+    owner: entry.owner,
+    locked: entry.locked,
+    author: entry.author,
+    createdAt: entry.createdAt,
+    updatedAt: entry.updatedAt,
+    location: entry.location,
+    priority: entry.priority
+  }];
+};

package/server/utils/global-content/setGlobalContentLocked.js

@@ -0,0 +1,44 @@
+import { readFile, writeFile } from 'fs/promises';
+import { join } from 'path';
+import { existsSync } from 'fs';
+import { GLOBAL_FILE, parseEntries } from './helpers.js';
+
+const serializeEntries = entries => entries.map(e => {
+  const attrs = [
+    `id="${e.id}"`,
+    `name="${e.name}"`,
+    `owner="${e.owner}"`,
+    `author="${e.author}"`,
+    `created="${e.createdAt}"`,
+    `updated="${e.updatedAt}"`,
+    `locked="${e.locked}"`,
+    `location="${e.location}"`,
+    `priority="${e.priority}"`
+  ].join(' ');
+  return `<content ${attrs}>\n${e.markup}\n</content>`;
+}).join('\n');
+
+export default async ({ rootDir, id, locked }) => {
+  if(!rootDir) return [{ code: 400, msg: 'Root directory is required' }, null];
+  if(!id) return [{ code: 400, msg: 'Global content ID is required' }, null];
+  if(typeof locked !== 'boolean') return [{ code: 400, msg: 'locked must be a boolean' }, null];
+
+  const filePath = join(rootDir, GLOBAL_FILE);
+  if(!existsSync(filePath)){
+    return [{ code: 404, msg: 'Global content not found' }, null];
+  }
+
+  const raw = await readFile(filePath, 'utf-8');
+  const entries = parseEntries(raw);
+  const idx = entries.findIndex(e => e.id === id);
+
+  if(idx === -1){
+    return [{ code: 404, msg: 'Global content not found' }, null];
+  }
+
+  entries[idx].locked = locked;
+
+  await writeFile(filePath, serializeEntries(entries) + '\n', 'utf-8');
+
+  return [null, { id, locked }];
+};

package/server/utils/global-content/updateGlobalContent.js

@@ -2,6 +2,7 @@ import { readFile, writeFile } from 'fs/promises';
 import { join } from 'path';
 import { existsSync } from 'fs';
 import { GLOBAL_FILE, parseEntries } from './helpers.js';
+import triggerHook from '../hooks/triggerHook.js';
 
 const serializeEntries = entries => entries.map(e => {
   const attrs = [
@@ -39,10 +40,6 @@ export default async ({ rootDir, id, name, location, priority, markup }) => {
     return [{ code: 404, msg: 'Global content not found' }, null];
   }
 
-  if(entries[idx].locked){
-    return [{ code: 403, msg: 'This global content is locked and cannot be edited' }, null];
-  }
-
   const now = new Date().toISOString();
   if(name !== undefined) entries[idx].name = name;
   if(location !== undefined) entries[idx].location = location;
@@ -52,5 +49,7 @@ export default async ({ rootDir, id, name, location, priority, markup }) => {
 
   await writeFile(filePath, serializeEntries(entries) + '\n', 'utf-8');
 
+  await triggerHook('globalContent:updated', { id, updatedAt: now });
+
   return [null, { id, updatedAt: now }];
 };

package/server/utils/pages/createPage.js

@@ -1,6 +1,9 @@
 import { writeFile, mkdir } from 'fs/promises';
 import { join, dirname } from 'path';
 import { existsSync } from 'fs';
+import triggerHook from '../hooks/triggerHook.js';
+
+const RESERVED_KEYS = new Set(['owner', 'name', 'author', 'created', 'updated', 'locked', 'title', 'description']);
 
 const slugify = name => name
   .toLowerCase()
@@ -10,7 +13,7 @@ const slugify = name => name
   .replace(/-+/g, '-')
   .replace(/^-|-$/g, '');
 
-export default async ({ rootDir, directory, name, template, author }) => {
+export default async ({ rootDir, directory, name, template, author, locked = false, extraMetadata = {} }) => {
   if(!rootDir){
     return [{ code: 400, msg: 'Root directory is required' }, null];
   }
@@ -34,18 +37,24 @@ export default async ({ rootDir, directory, name, template, author }) => {
     return [{ code: 409, msg: 'A page with this name already exists in this location' }, null];
   }
 
+  const conflictingKeys = Object.keys(extraMetadata).filter(k => RESERVED_KEYS.has(k));
+  if(conflictingKeys.length){
+    return [{ code: 400, msg: `Cannot use reserved metadata keys: ${conflictingKeys.join(', ')}` }, null];
+  }
+
   const templateName = template || 'default';
 
   const now = new Date().toISOString();
-  const frontmatter = [
-    '<!--',
+  const defaultLines = [
     `  owner: custom`,
     `  name: ${name}`,
     `  author: ${author || ''}`,
     `  created: ${now}`,
-    `  updated: ${now}`,
-    '-->'
-  ].join('\n');
+    `  updated: ${now}`
+  ];
+  if(locked) defaultLines.push(`  locked: true`);
+  const extraLines = Object.entries(extraMetadata).map(([k, v]) => `  ${k}: ${v}`);
+  const frontmatter = ['<!--', ...defaultLines, ...extraLines, '-->'].join('\n');
 
   const pageContent = `${frontmatter}\n<page template="${templateName}" title="${name}">\n</page>\n`;
 
@@ -55,6 +64,9 @@ export default async ({ rootDir, directory, name, template, author }) => {
 
   const relPath = (dir ? `${dir}/${slug}` : slug);
   const url = '/' + relPath;
+  const result = { file: `${relPath}.page.html`, url, title: name, slug };
+
+  await triggerHook('page:created', { file: result.file, url, name, author, extraMetadata });
 
-  return [null, { file: `${relPath}.page.html`, url, title: name, slug }];
+  return [null, result];
 };

package/server/utils/pages/deletePage.js

@@ -1,6 +1,7 @@
 import { readFile, unlink } from 'fs/promises';
 import { join, normalize, sep } from 'path';
 import parseFrontmatter from '../fs/parseFrontmatter.js';
+import triggerHook from '../hooks/triggerHook.js';
 
 export default async ({ rootDir, files }) => {
   if(!rootDir) return [{ code: 400, msg: 'Root directory is required' }, null];
@@ -21,14 +22,12 @@ export default async ({ rootDir, files }) => {
     }
 
     const meta = parseFrontmatter(content);
-    if(meta.locked === 'true'){
-      return [{ code: 403, msg: `Cannot delete locked page: ${file}` }, null];
-    }
     if(meta.owner && meta.owner !== 'custom'){
       return [{ code: 403, msg: `Cannot delete page: ${file}` }, null];
     }
 
     await unlink(fullPath);
+    await triggerHook('page:deleted', { file });
   }
 
   return [null, { deleted: files.length }];

package/server/utils/pages/disablePage.js

@@ -23,9 +23,6 @@ export default async ({ rootDir, file }) => {
 
   const content = await readFile(fullPath, 'utf-8');
   const meta = parseFrontmatter(content);
-  if(meta.locked === 'true'){
-    return [{ code: 403, msg: 'Cannot disable a locked page' }, null];
-  }
 
   const disabledPath = fullPath.replace(/\.page\.html$/, '.page-disabled.html');
   if(existsSync(disabledPath)){

package/server/utils/pages/getPage.js

@@ -3,6 +3,8 @@ import { join } from 'path';
 import { existsSync } from 'fs';
 import parseFrontmatter from '../fs/parseFrontmatter.js';
 
+const RESERVED_KEYS = new Set(['owner', 'name', 'author', 'created', 'updated', 'locked', 'title', 'description']);
+
 const parseContents = content => {
   const blocks = [];
   const regex = /<content(?:\s+location="([^"]*)")?\s*>([\s\S]*?)<\/content>/g;
@@ -37,6 +39,10 @@ export default async ({ rootDir, file }) => {
   const templateMatch = raw.match(/<page\s[^>]*template="([^"]*)"/);
   const contents = parseContents(raw);
 
+  const extraMetadata = Object.fromEntries(
+    Object.entries(meta).filter(([k]) => !RESERVED_KEYS.has(k))
+  );
+
   return [null, {
     file: safePath,
     name: meta.name || '',
@@ -48,6 +54,7 @@ export default async ({ rootDir, file }) => {
     description: meta.description || '',
     createdAt: meta.created || '',
     updatedAt: meta.updated || '',
+    extraMetadata,
     contents
   }];
 };

package/server/utils/pages/getPageMetadata.js

@@ -0,0 +1,32 @@
+import { readFile } from 'fs/promises';
+import { join } from 'path';
+import { existsSync } from 'fs';
+import parseFrontmatter from '../fs/parseFrontmatter.js';
+
+export default async ({ rootDir, file }) => {
+  if(!rootDir){
+    return [{ code: 400, msg: 'Root directory is required' }, null];
+  }
+  if(!file){
+    return [{ code: 400, msg: 'File path is required' }, null];
+  }
+
+  const safePath = file.replace(/\.\./g, '').replace(/^\//, '');
+  const fullPath = join(rootDir, safePath);
+
+  if(!existsSync(fullPath)){
+    return [{ code: 404, msg: 'Page not found' }, null];
+  }
+
+  const raw = await readFile(fullPath, 'utf-8');
+  const meta = parseFrontmatter(raw);
+
+  return [null, {
+    name: meta.name,
+    owner: meta.owner,
+    locked: meta.locked === 'true',
+    author: meta.author,
+    created: meta.created,
+    updated: meta.updated
+  }];
+};

package/server/utils/pages/listPages.js

@@ -3,7 +3,9 @@ import { relative } from 'path';
 import scanDir from '../fs/scanDir.js';
 import parseFrontmatter from '../fs/parseFrontmatter.js';
 
-export default async ({ rootDir }) => {
+const RESERVED_KEYS = new Set(['owner', 'name', 'author', 'created', 'updated', 'locked', 'title', 'description']);
+
+export default async ({ rootDir, owner }) => {
   if(!rootDir){
     return [{ code: 400, msg: 'Root directory is required' }, null];
   }
@@ -20,6 +22,9 @@ export default async ({ rootDir }) => {
       .replace(/\.page-disabled\.html$/, '')
       .replace(/\.page\.html$/, '')
       .replace(/(^|\/)index$/, '$1');
+    const extraMetadata = Object.fromEntries(
+      Object.entries(meta).filter(([k]) => !RESERVED_KEYS.has(k))
+    );
     return {
       file: relPath,
       url: urlPath || '/',
@@ -31,10 +36,13 @@ export default async ({ rootDir }) => {
       author: meta.author || '',
       description: meta.description || '',
       createdAt: meta.created || '',
-      updatedAt: meta.updated || ''
+      updatedAt: meta.updated || '',
+      extraMetadata
     };
   });
 
-  return [null, { pages, total: pages.length }];
+  const filtered = owner ? pages.filter(page => page.owner === owner) : pages;
+
+  return [null, { pages: filtered, total: filtered.length }];
 };
 

package/server/utils/pages/movePage.js

@@ -28,9 +28,6 @@ export default async ({ rootDir, file, newFile }) => {
   }
 
   const meta = parseFrontmatter(content);
-  if(meta.locked === 'true'){
-    return [{ code: 403, msg: 'Cannot move a locked page' }, null];
-  }
   if(meta.owner && meta.owner !== 'custom'){
     return [{ code: 403, msg: 'Cannot move system pages' }, null];
   }

package/server/utils/pages/searchByMetadata.js

@@ -0,0 +1,61 @@
+import { readFile } from 'fs/promises';
+import { relative } from 'path';
+import scanDir from '../fs/scanDir.js';
+import parseFrontmatter from '../fs/parseFrontmatter.js';
+
+const RESERVED_KEYS = new Set(['owner', 'name', 'author', 'created', 'updated', 'locked', 'title', 'description']);
+
+export default async ({ rootDir, query = {} }) => {
+  if(!rootDir){
+    return [{ code: 400, msg: 'Root directory is required' }, null];
+  }
+  if(!Object.keys(query).length){
+    return [{ code: 400, msg: 'Search query must have at least one key' }, null];
+  }
+
+  const queryKeys = Object.keys(query);
+  const reservedConflicts = queryKeys.filter(k => RESERVED_KEYS.has(k));
+  if(reservedConflicts.length){
+    return [{ code: 400, msg: `Cannot search reserved metadata keys: ${reservedConflicts.join(', ')}` }, null];
+  }
+
+  const pages = await scanDir(rootDir, rootDir, async (fullPath, entry, root) => {
+    if(entry.isDirectory() || !entry.name.endsWith('.page.html')) return null;
+    const content = await readFile(fullPath, 'utf-8');
+    const meta = parseFrontmatter(content);
+
+    const matches = queryKeys.every(k => {
+      const val = meta[k];
+      if(val === undefined) return false;
+      const expected = String(query[k]);
+      return val === expected;
+    });
+
+    if(!matches) return null;
+
+    const relPath = relative(root, fullPath).replace(/\\/g, '/');
+    const urlPath = '/' + relPath
+      .replace(/\.page\.html$/, '')
+      .replace(/(^|\/)index$/, '$1');
+
+    const extraMetadata = Object.fromEntries(
+      Object.entries(meta).filter(([k]) => !RESERVED_KEYS.has(k))
+    );
+
+    return {
+      file: relPath,
+      url: urlPath || '/',
+      name: meta.name || meta.title || '',
+      title: meta.title || '',
+      owner: meta.owner || 'custom',
+      locked: meta.locked === 'true',
+      author: meta.author || '',
+      description: meta.description || '',
+      createdAt: meta.created || '',
+      updatedAt: meta.updated || '',
+      extraMetadata
+    };
+  });
+
+  return [null, { pages, total: pages.length }];
+};

package/server/utils/pages/setPageLocked.js

@@ -0,0 +1,48 @@
+import { readFile, writeFile } from 'fs/promises';
+import { join, normalize, sep } from 'path';
+import { existsSync } from 'fs';
+
+export default async ({ rootDir, file, locked }) => {
+  if(!rootDir) return [{ code: 400, msg: 'Root directory is required' }, null];
+  if(!file) return [{ code: 400, msg: 'File path is required' }, null];
+  if(typeof locked !== 'boolean') return [{ code: 400, msg: 'locked must be a boolean' }, null];
+
+  const normalized = normalize(file);
+  if(normalized.startsWith('..') || normalized.includes('..' + sep)){
+    return [{ code: 400, msg: 'Invalid file path' }, null];
+  }
+
+  const fullPath = join(rootDir, normalized);
+  if(!existsSync(fullPath)){
+    return [{ code: 404, msg: 'Page not found' }, null];
+  }
+
+  const raw = await readFile(fullPath, 'utf-8');
+  const frontmatterMatch = raw.match(/^<!--\s*\n([\s\S]*?)\n\s*-->/);
+  const existingMeta = {};
+
+  if(frontmatterMatch){
+    for(const line of frontmatterMatch[1].split('\n')){
+      const idx = line.indexOf(':');
+      if(idx === -1) continue;
+      const key = line.slice(0, idx).trim();
+      const value = line.slice(idx + 1).trim();
+      if(key) existingMeta[key] = value;
+    }
+  }
+
+  if(locked){
+    existingMeta.locked = 'true';
+  } else {
+    delete existingMeta.locked;
+  }
+
+  const frontmatter = '<!--\n' +
+    Object.entries(existingMeta).map(([k, v]) => `  ${k}: ${v}`).join('\n') +
+    '\n-->';
+
+  const body = frontmatterMatch ? raw.slice(frontmatterMatch[0].length) : '\n' + raw;
+  await writeFile(fullPath, frontmatter + body, 'utf-8');
+
+  return [null, { file: normalized, locked }];
+};

package/server/utils/pages/updatePage.js

@@ -1,8 +1,11 @@
 import { readFile, writeFile } from 'fs/promises';
 import { join } from 'path';
 import { existsSync } from 'fs';
+import triggerHook from '../hooks/triggerHook.js';
 
-export default async ({ rootDir, file, name, title, description, author, template, contents }) => {
+const RESERVED_KEYS = new Set(['owner', 'name', 'author', 'created', 'updated', 'locked', 'title', 'description']);
+
+export default async ({ rootDir, file, name, title, description, author, template, contents, extraMetadata, force = false }) => {
   if(!rootDir){
     return [{ code: 400, msg: 'Root directory is required' }, null];
   }
@@ -20,8 +23,7 @@ export default async ({ rootDir, file, name, title, description, author, templat
   const raw = await readFile(fullPath, 'utf-8');
 
   const frontmatterMatch = raw.match(/^<!--\s*\n([\s\S]*?)\n\s*-->/);
-  const lockedMatch = raw.match(/^<!--[\s\S]*?locked:\s*true[\s\S]*?-->/);
-  if(lockedMatch) return [{ code: 403, msg: 'This page is locked and cannot be edited' }, null];
+
   const existingMeta = {};
   if(frontmatterMatch){
     for(const line of frontmatterMatch[1].split('\n')){
@@ -33,6 +35,13 @@ export default async ({ rootDir, file, name, title, description, author, templat
     }
   }
 
+  if(extraMetadata !== undefined){
+    const conflictingKeys = Object.keys(extraMetadata).filter(k => RESERVED_KEYS.has(k));
+    if(conflictingKeys.length){
+      return [{ code: 400, msg: `Cannot use reserved metadata keys: ${conflictingKeys.join(', ')}` }, null];
+    }
+  }
+
   const now = new Date().toISOString();
   const newMeta = {
     ...existingMeta,
@@ -42,6 +51,11 @@ export default async ({ rootDir, file, name, title, description, author, templat
   if(title !== undefined) newMeta.title = title;
   if(description !== undefined) newMeta.description = description;
   if(author !== undefined) newMeta.author = author;
+  if(extraMetadata !== undefined){
+    for(const [k, v] of Object.entries(extraMetadata)){
+      newMeta[k] = v;
+    }
+  }
 
   const templateMatch = raw.match(/<page\s[^>]*template="([^"]*)"/)
   const resolvedTemplate = template !== undefined ? template : (templateMatch ? templateMatch[1] : 'default');
@@ -70,5 +84,7 @@ export default async ({ rootDir, file, name, title, description, author, templat
 
   await writeFile(fullPath, newPageContent, 'utf-8');
 
+  await triggerHook('page:updated', { file: safePath, updatedAt: now });
+
   return [null, { file: safePath, updatedAt: now }];
 };

package/server/utils/templates/createTemplate.js

@@ -1,6 +1,7 @@
 import { readFile, writeFile, mkdir } from 'fs/promises';
 import { join, dirname } from 'path';
 import { existsSync } from 'fs';
+import triggerHook from '../hooks/triggerHook.js';
 
 const slugify = name => name
   .toLowerCase()
@@ -10,7 +11,7 @@ const slugify = name => name
   .replace(/-+/g, '-')
   .replace(/^-|-$/g, '');
 
-export default async ({ rootDir, directory, name, author, copyFrom }) => {
+export default async ({ rootDir, directory, name, author, copyFrom, locked = false }) => {
   if(!rootDir) return [{ code: 400, msg: 'Root directory is required' }, null];
   if(!name) return [{ code: 400, msg: 'Template name is required' }, null];
 
@@ -33,6 +34,7 @@ export default async ({ rootDir, directory, name, author, copyFrom }) => {
     `  author: ${author || ''}`,
     `  created: ${now}`,
     `  updated: ${now}`,
+    ...(locked ? ['  locked: true'] : []),
     '-->'
   ].join('\n');
 
@@ -67,5 +69,7 @@ export default async ({ rootDir, directory, name, author, copyFrom }) => {
 
   const relPath = dir ? `${dir}/${slug}.template.html` : `${slug}.template.html`;
 
+  await triggerHook('template:created', { file: relPath, name, slug });
+
   return [null, { file: relPath, name, slug }];
 };

package/server/utils/templates/deleteTemplate.js

@@ -1,6 +1,7 @@
 import { readFile, unlink } from 'fs/promises';
 import { join, normalize, sep } from 'path';
 import parseFrontmatter from '../fs/parseFrontmatter.js';
+import triggerHook from '../hooks/triggerHook.js';
 
 export default async ({ rootDir, files }) => {
   if(!rootDir) return [{ code: 400, msg: 'Root directory is required' }, null];
@@ -21,14 +22,12 @@ export default async ({ rootDir, files }) => {
     }
 
     const meta = parseFrontmatter(content);
-    if(meta.locked === 'true'){
-      return [{ code: 403, msg: `Cannot delete locked template: ${file}` }, null];
-    }
     if(meta.owner && meta.owner !== 'custom'){
       return [{ code: 403, msg: `Cannot delete template: ${file}` }, null];
     }
 
     await unlink(fullPath);
+    await triggerHook('template:deleted', { file });
   }
 
   return [null, { deleted: files.length }];

package/server/utils/templates/disableTemplate.js

@@ -23,9 +23,6 @@ export default async ({ rootDir, file }) => {
 
   const content = await readFile(fullPath, 'utf-8');
   const meta = parseFrontmatter(content);
-  if(meta.locked === 'true'){
-    return [{ code: 403, msg: 'Cannot disable a locked template' }, null];
-  }
 
   const disabledPath = fullPath.replace(/\.template\.html$/, '.template-disabled.html');
   if(existsSync(disabledPath)){

package/server/utils/templates/getTemplateMetadata.js

@@ -0,0 +1,32 @@
+import { readFile } from 'fs/promises';
+import { join } from 'path';
+import { existsSync } from 'fs';
+import parseFrontmatter from '../fs/parseFrontmatter.js';
+
+export default async ({ rootDir, file }) => {
+  if(!rootDir){
+    return [{ code: 400, msg: 'Root directory is required' }, null];
+  }
+  if(!file){
+    return [{ code: 400, msg: 'File path is required' }, null];
+  }
+
+  const safePath = file.replace(/\.\./g, '').replace(/^\//, '');
+  const fullPath = join(rootDir, safePath);
+
+  if(!existsSync(fullPath)){
+    return [{ code: 404, msg: 'Template not found' }, null];
+  }
+
+  const raw = await readFile(fullPath, 'utf-8');
+  const meta = parseFrontmatter(raw);
+
+  return [null, {
+    name: meta.name,
+    owner: meta.owner,
+    locked: meta.locked === 'true',
+    author: meta.author,
+    created: meta.created,
+    updated: meta.updated
+  }];
+};

package/server/utils/templates/moveTemplate.js

@@ -28,9 +28,6 @@ export default async ({ rootDir, file, newFile }) => {
   }
 
   const meta = parseFrontmatter(content);
-  if(meta.locked === 'true'){
-    return [{ code: 403, msg: 'Cannot move a locked template' }, null];
-  }
   if(meta.owner && meta.owner !== 'custom'){
     return [{ code: 403, msg: 'Cannot move system templates' }, null];
   }

package/server/utils/templates/setTemplateLocked.js

@@ -0,0 +1,48 @@
+import { readFile, writeFile } from 'fs/promises';
+import { join, normalize, sep } from 'path';
+import { existsSync } from 'fs';
+
+export default async ({ rootDir, file, locked }) => {
+  if(!rootDir) return [{ code: 400, msg: 'Root directory is required' }, null];
+  if(!file) return [{ code: 400, msg: 'File path is required' }, null];
+  if(typeof locked !== 'boolean') return [{ code: 400, msg: 'locked must be a boolean' }, null];
+
+  const normalized = normalize(file);
+  if(normalized.startsWith('..') || normalized.includes('..' + sep)){
+    return [{ code: 400, msg: 'Invalid file path' }, null];
+  }
+
+  const fullPath = join(rootDir, normalized);
+  if(!existsSync(fullPath)){
+    return [{ code: 404, msg: 'Template not found' }, null];
+  }
+
+  const raw = await readFile(fullPath, 'utf-8');
+  const frontmatterMatch = raw.match(/^<!--\s*\n([\s\S]*?)\n\s*-->/);
+  const existingMeta = {};
+
+  if(frontmatterMatch){
+    for(const line of frontmatterMatch[1].split('\n')){
+      const idx = line.indexOf(':');
+      if(idx === -1) continue;
+      const key = line.slice(0, idx).trim();
+      const value = line.slice(idx + 1).trim();
+      if(key) existingMeta[key] = value;
+    }
+  }
+
+  if(locked){
+    existingMeta.locked = 'true';
+  } else {
+    delete existingMeta.locked;
+  }
+
+  const frontmatter = '<!--\n' +
+    Object.entries(existingMeta).map(([k, v]) => `  ${k}: ${v}`).join('\n') +
+    '\n-->';
+
+  const body = frontmatterMatch ? raw.slice(frontmatterMatch[0].length) : '\n' + raw;
+  await writeFile(fullPath, frontmatter + body, 'utf-8');
+
+  return [null, { file: normalized, locked }];
+};

package/server/utils/templates/updateTemplate.js

@@ -1,6 +1,7 @@
 import { readFile, writeFile } from 'fs/promises';
 import { join } from 'path';
 import { existsSync } from 'fs';
+import triggerHook from '../hooks/triggerHook.js';
 
 export default async ({ rootDir, file, author, markup }) => {
   if(!rootDir) return [{ code: 400, msg: 'Root directory is required' }, null];
@@ -13,9 +14,6 @@ export default async ({ rootDir, file, author, markup }) => {
 
   const raw = await readFile(fullPath, 'utf-8');
 
-  const lockedMatch = raw.match(/^<!--[\s\S]*?locked:\s*true[\s\S]*?-->/);
-  if(lockedMatch) return [{ code: 403, msg: 'This template is locked and cannot be edited' }, null];
-
   const frontmatterMatch = raw.match(/^<!--\s*\n([\s\S]*?)\n\s*-->/);
   const existingMeta = {};
   if(frontmatterMatch){
@@ -42,5 +40,7 @@ export default async ({ rootDir, file, author, markup }) => {
 
   await writeFile(fullPath, newContent, 'utf-8');
 
+  await triggerHook('template:updated', { file: safePath, updatedAt: now });
+
   return [null, { file: safePath, updatedAt: now }];
 };