From 1fbd9bc609bb36a47bbb07ab843faf6ef6832be3 Mon Sep 17 00:00:00 2001
From: Jean-Luc Makiola <business@jeanlucmakiola.de>
Date: Mon, 13 Apr 2026 20:01:48 +0200
Subject: [PATCH] fix: inject db context for /s/* short share URL route

The /s/:token route was registered outside the /api/* db middleware
scope, causing db to be undefined and a 500 error on share link access.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
---
 src/server/index.ts | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/src/server/index.ts b/src/server/index.ts
index 3e860e8..96c594a 100644
--- a/src/server/index.ts
+++ b/src/server/index.ts
@@ -135,6 +135,10 @@ app.use("/api/*", async (c, next) => {
 	c.set("db", prodDb);
 	return next();
 });
+app.use("/s/*", async (c, next) => {
+	c.set("db", prodDb);
+	return next();
+});
 
 // Rate limiting for public endpoints (per D-07, D-08)
 const browseTier = createRateLimit(120, 60_000);