@airdraft/next 0.1.0

package/CHANGELOG.md

@@ -0,0 +1,5 @@
+# Changelog
+
+All notable changes to `@airdraft/next` will be documented here.
+
+See [Conventional Commits](https://conventionalcommits.org) for commit guidelines.

package/dist/client.d.ts

@@ -0,0 +1,18 @@
+import { type CmsConfig, type ListOptions, type Entry } from '@airdraft/core';
+/**
+ * Creates a server-side CMS client that reads content directly via the adapter,
+ * bypassing HTTP. Use in Server Components, generateStaticParams, and other
+ * server-side Next.js patterns.
+ *
+ * ```ts
+ * const cms = createCmsClient(airdraft)
+ * const posts = await cms.listEntries('posts', { status: 'published' })
+ * ```
+ */
+export declare function createCmsClient(config: CmsConfig): {
+    listEntries: (collection: string, options?: ListOptions) => Promise<Entry[]>;
+    getEntry: (collection: string, slug: string) => Promise<Entry | null>;
+    getSchema: () => import("@airdraft/core").CmsSchema;
+    getCollection: (name: string) => import("@airdraft/core").CollectionConfig | null;
+};
+//# sourceMappingURL=client.d.ts.map

package/dist/client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../src/client.ts"],"names":[],"mappings":"AAAA,OAAO,EAAa,KAAK,SAAS,EAAE,KAAK,WAAW,EAAE,KAAK,KAAK,EAAE,MAAM,gBAAgB,CAAA;AAExF;;;;;;;;;GASG;AACH,wBAAgB,eAAe,CAAC,MAAM,EAAE,SAAS;8BAInB,MAAM,YAAY,WAAW,KAAG,OAAO,CAAC,KAAK,EAAE,CAAC;2BAGnD,MAAM,QAAQ,MAAM,KAAG,OAAO,CAAC,KAAK,GAAG,IAAI,CAAC;;0BAK7C,MAAM;EAE/B"}

package/dist/client.js

@@ -0,0 +1,21 @@
+import { CmsEngine } from '@airdraft/core';
+/**
+ * Creates a server-side CMS client that reads content directly via the adapter,
+ * bypassing HTTP. Use in Server Components, generateStaticParams, and other
+ * server-side Next.js patterns.
+ *
+ * ```ts
+ * const cms = createCmsClient(airdraft)
+ * const posts = await cms.listEntries('posts', { status: 'published' })
+ * ```
+ */
+export function createCmsClient(config) {
+    const engine = new CmsEngine(config);
+    return {
+        listEntries: (collection, options) => engine.listEntries(collection, options),
+        getEntry: (collection, slug) => engine.getEntry(collection, slug),
+        getSchema: () => engine.getSchema(),
+        getCollection: (name) => engine.getCollection(name),
+    };
+}
+//# sourceMappingURL=client.js.map

package/dist/client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.js","sourceRoot":"","sources":["../src/client.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAgD,MAAM,gBAAgB,CAAA;AAExF;;;;;;;;;GASG;AACH,MAAM,UAAU,eAAe,CAAC,MAAiB;IAC/C,MAAM,MAAM,GAAG,IAAI,SAAS,CAAC,MAAM,CAAC,CAAA;IAEpC,OAAO;QACL,WAAW,EAAE,CAAC,UAAkB,EAAE,OAAqB,EAAoB,EAAE,CAC3E,MAAM,CAAC,WAAW,CAAC,UAAU,EAAE,OAAO,CAAC;QAEzC,QAAQ,EAAE,CAAC,UAAkB,EAAE,IAAY,EAAyB,EAAE,CACpE,MAAM,CAAC,QAAQ,CAAC,UAAU,EAAE,IAAI,CAAC;QAEnC,SAAS,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,SAAS,EAAE;QAEnC,aAAa,EAAE,CAAC,IAAY,EAAE,EAAE,CAAC,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC;KAC5D,CAAA;AACH,CAAC"}

package/dist/forwarder.d.ts

@@ -0,0 +1,32 @@
+/**
+ * Cloud forwarder — re-exports all HTTP method handlers that forward requests to
+ * the Airdraft Cloud CMS runtime.
+ *
+ * Mount in `app/api/cms/[...route]/route.ts` of a Next.js project:
+ *
+ * ```ts
+ * export { GET, POST, PUT, PATCH, DELETE } from '@airdraft/next/forwarder'
+ * ```
+ *
+ * Reads `AIRDRAFT_CMS_URL` from environment variables to locate the cloud
+ * CMS runtime (e.g. `https://cms.airdraft.space/my-project`).
+ *
+ * The proxy transparently forwards headers (Authorization, Content-Type, etc.)
+ * and the request body, then streams the response back to the client.
+ */
+type NextRequest = Request & {
+    nextUrl?: URL;
+};
+interface RouteContext {
+    params: Promise<{
+        route?: string[];
+    }>;
+}
+declare function proxyRequest(req: NextRequest, ctx: RouteContext): Promise<Response>;
+export declare const GET: typeof proxyRequest;
+export declare const POST: typeof proxyRequest;
+export declare const PUT: typeof proxyRequest;
+export declare const PATCH: typeof proxyRequest;
+export declare const DELETE: typeof proxyRequest;
+export {};
+//# sourceMappingURL=forwarder.d.ts.map

package/dist/forwarder.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"forwarder.d.ts","sourceRoot":"","sources":["../src/forwarder.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,KAAK,WAAW,GAAG,OAAO,GAAG;IAAE,OAAO,CAAC,EAAE,GAAG,CAAA;CAAE,CAAA;AAC9C,UAAU,YAAY;IACpB,MAAM,EAAE,OAAO,CAAC;QAAE,KAAK,CAAC,EAAE,MAAM,EAAE,CAAA;KAAE,CAAC,CAAA;CACtC;AAED,iBAAe,YAAY,CAAC,GAAG,EAAE,WAAW,EAAE,GAAG,EAAE,YAAY,GAAG,OAAO,CAAC,QAAQ,CAAC,CA2BlF;AAED,eAAO,MAAM,GAAG,qBAAe,CAAA;AAC/B,eAAO,MAAM,IAAI,qBAAe,CAAA;AAChC,eAAO,MAAM,GAAG,qBAAe,CAAA;AAC/B,eAAO,MAAM,KAAK,qBAAe,CAAA;AACjC,eAAO,MAAM,MAAM,qBAAe,CAAA"}

package/dist/forwarder.js

@@ -0,0 +1,44 @@
+/**
+ * Cloud forwarder — re-exports all HTTP method handlers that forward requests to
+ * the Airdraft Cloud CMS runtime.
+ *
+ * Mount in `app/api/cms/[...route]/route.ts` of a Next.js project:
+ *
+ * ```ts
+ * export { GET, POST, PUT, PATCH, DELETE } from '@airdraft/next/forwarder'
+ * ```
+ *
+ * Reads `AIRDRAFT_CMS_URL` from environment variables to locate the cloud
+ * CMS runtime (e.g. `https://cms.airdraft.space/my-project`).
+ *
+ * The proxy transparently forwards headers (Authorization, Content-Type, etc.)
+ * and the request body, then streams the response back to the client.
+ */
+async function proxyRequest(req, ctx) {
+    const cmsBase = process.env.AIRDRAFT_CMS_URL;
+    if (!cmsBase) {
+        return new Response(JSON.stringify({ error: { code: 'MISSING_CMS_URL', message: 'AIRDRAFT_CMS_URL is not set' } }), { status: 500, headers: { 'Content-Type': 'application/json' } });
+    }
+    const { route } = await ctx.params;
+    const routePath = route ? `/${route.join('/')}` : '';
+    const url = new URL(req.nextUrl ?? req.url);
+    const targetUrl = `${cmsBase.replace(/\/$/, '')}/api/cms${routePath}${url.search}`;
+    // Forward request with original headers + body
+    const init = {
+        method: req.method,
+        headers: req.headers,
+        // Body only for non-GET/HEAD
+        ...(req.method !== 'GET' && req.method !== 'HEAD' ? { body: req.body, duplex: 'half' } : {}),
+    };
+    const upstream = await fetch(targetUrl, init);
+    return new Response(upstream.body, {
+        status: upstream.status,
+        headers: upstream.headers,
+    });
+}
+export const GET = proxyRequest;
+export const POST = proxyRequest;
+export const PUT = proxyRequest;
+export const PATCH = proxyRequest;
+export const DELETE = proxyRequest;
+//# sourceMappingURL=forwarder.js.map

package/dist/forwarder.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"forwarder.js","sourceRoot":"","sources":["../src/forwarder.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAOH,KAAK,UAAU,YAAY,CAAC,GAAgB,EAAE,GAAiB;IAC7D,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAA;IAC5C,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO,IAAI,QAAQ,CACjB,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,iBAAiB,EAAE,OAAO,EAAE,6BAA6B,EAAE,EAAE,CAAC,EAC9F,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,EAAE,CACjE,CAAA;IACH,CAAC;IAED,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,GAAG,CAAC,MAAM,CAAA;IAClC,MAAM,SAAS,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAA;IACpD,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,OAAO,IAAI,GAAG,CAAC,GAAG,CAAC,CAAA;IAC3C,MAAM,SAAS,GAAG,GAAG,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,WAAW,SAAS,GAAG,GAAG,CAAC,MAAM,EAAE,CAAA;IAElF,+CAA+C;IAC/C,MAAM,IAAI,GAAgB;QACxB,MAAM,EAAE,GAAG,CAAC,MAAM;QAClB,OAAO,EAAE,GAAG,CAAC,OAAO;QACpB,6BAA6B;QAC7B,GAAG,CAAC,GAAG,CAAC,MAAM,KAAK,KAAK,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC7F,CAAA;IAED,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,SAAS,EAAE,IAAmB,CAAC,CAAA;IAC5D,OAAO,IAAI,QAAQ,CAAC,QAAQ,CAAC,IAAI,EAAE;QACjC,MAAM,EAAE,QAAQ,CAAC,MAAM;QACvB,OAAO,EAAE,QAAQ,CAAC,OAAO;KAC1B,CAAC,CAAA;AACJ,CAAC;AAED,MAAM,CAAC,MAAM,GAAG,GAAG,YAAY,CAAA;AAC/B,MAAM,CAAC,MAAM,IAAI,GAAG,YAAY,CAAA;AAChC,MAAM,CAAC,MAAM,GAAG,GAAG,YAAY,CAAA;AAC/B,MAAM,CAAC,MAAM,KAAK,GAAG,YAAY,CAAA;AACjC,MAAM,CAAC,MAAM,MAAM,GAAG,YAAY,CAAA"}

package/dist/handler.d.ts

@@ -0,0 +1,28 @@
+import { type CmsConfig } from '@airdraft/core';
+type NextRequest = Request & {
+    nextUrl?: URL;
+};
+interface RouteContext {
+    params: Promise<{
+        route?: string[];
+    }>;
+}
+interface HandlerExports {
+    GET: (req: NextRequest, ctx: RouteContext) => Promise<Response>;
+    POST: (req: NextRequest, ctx: RouteContext) => Promise<Response>;
+    PATCH: (req: NextRequest, ctx: RouteContext) => Promise<Response>;
+    PUT: (req: NextRequest, ctx: RouteContext) => Promise<Response>;
+    DELETE: (req: NextRequest, ctx: RouteContext) => Promise<Response>;
+}
+/**
+ * Produces App Router route handler exports from a CmsConfig.
+ *
+ * Place in `app/api/cms/[...route]/route.ts`:
+ *
+ * ```ts
+ * export const { GET, POST, PUT, DELETE } = createCmsHandler(airdraft)
+ * ```
+ */
+export declare function createCmsHandler(config: CmsConfig): HandlerExports;
+export {};
+//# sourceMappingURL=handler.d.ts.map

package/dist/handler.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"handler.d.ts","sourceRoot":"","sources":["../src/handler.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,KAAK,SAAS,EAQf,MAAM,gBAAgB,CAAA;AAMvB,KAAK,WAAW,GAAG,OAAO,GAAG;IAAE,OAAO,CAAC,EAAE,GAAG,CAAA;CAAE,CAAA;AAE9C,UAAU,YAAY;IACpB,MAAM,EAAE,OAAO,CAAC;QAAE,KAAK,CAAC,EAAE,MAAM,EAAE,CAAA;KAAE,CAAC,CAAA;CACtC;AAED,UAAU,cAAc;IACtB,GAAG,EAAE,CAAC,GAAG,EAAE,WAAW,EAAE,GAAG,EAAE,YAAY,KAAK,OAAO,CAAC,QAAQ,CAAC,CAAA;IAC/D,IAAI,EAAE,CAAC,GAAG,EAAE,WAAW,EAAE,GAAG,EAAE,YAAY,KAAK,OAAO,CAAC,QAAQ,CAAC,CAAA;IAChE,KAAK,EAAE,CAAC,GAAG,EAAE,WAAW,EAAE,GAAG,EAAE,YAAY,KAAK,OAAO,CAAC,QAAQ,CAAC,CAAA;IACjE,GAAG,EAAE,CAAC,GAAG,EAAE,WAAW,EAAE,GAAG,EAAE,YAAY,KAAK,OAAO,CAAC,QAAQ,CAAC,CAAA;IAC/D,MAAM,EAAE,CAAC,GAAG,EAAE,WAAW,EAAE,GAAG,EAAE,YAAY,KAAK,OAAO,CAAC,QAAQ,CAAC,CAAA;CACnE;AAmGD;;;;;;;;GAQG;AACH,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,SAAS,GAAG,cAAc,CAuZlE"}

package/dist/handler.js

@@ -0,0 +1,468 @@
+import { CmsEngine, AirdraftError, ValidationError, EntryNotFoundError, } from '@airdraft/core';
+// ---------------------------------------------------------------------------
+// JSON helpers
+// ---------------------------------------------------------------------------
+function json(body, status = 200) {
+    return new Response(JSON.stringify(body), {
+        status,
+        headers: { 'Content-Type': 'application/json' },
+    });
+}
+function errorResponse(err) {
+    if (err instanceof AirdraftError) {
+        const body = {
+            error: {
+                code: err.code,
+                message: err.message,
+                details: err instanceof ValidationError ? err.details : {},
+            },
+        };
+        return json(body, err.statusHint);
+    }
+    // Unhandled — log server-side, return opaque 500
+    console.error('[airdraft]', err);
+    return json({ error: { code: 'INTERNAL_ERROR', message: 'Internal server error', details: {} } }, 500);
+}
+// ---------------------------------------------------------------------------
+// Route parsing
+// ---------------------------------------------------------------------------
+function parseRoute(segments) {
+    if (!segments || segments.length === 0)
+        return null;
+    const [collection, slug] = segments;
+    return { collection, slug };
+}
+// ---------------------------------------------------------------------------
+// List query string parsing
+// ---------------------------------------------------------------------------
+function parseListOptions(url) {
+    const u = typeof url === 'string' ? new URL(url) : url;
+    const opts = {};
+    const limit = u.searchParams.get('limit');
+    if (limit)
+        opts.limit = Math.min(parseInt(limit, 10), 100);
+    const offset = u.searchParams.get('offset');
+    if (offset)
+        opts.offset = parseInt(offset, 10);
+    const sort = u.searchParams.get('sort');
+    const order = u.searchParams.get('order') ?? 'desc';
+    if (sort)
+        opts.sort = { field: sort, order };
+    const status = u.searchParams.get('status');
+    if (status)
+        opts.status = status;
+    const filter = {};
+    for (const [key, value] of u.searchParams.entries()) {
+        const match = key.match(/^filter\[(.+)\]$/);
+        if (match)
+            filter[match[1]] = value;
+    }
+    if (Object.keys(filter).length > 0)
+        opts.filter = filter;
+    const expandParam = u.searchParams.get('expand');
+    if (expandParam)
+        opts.expand = expandParam.split(',').map((s) => s.trim()).filter(Boolean);
+    return opts;
+}
+// ---------------------------------------------------------------------------
+// Production warning for missing auth
+// ---------------------------------------------------------------------------
+let authWarned = false;
+function warnIfNoAuth(config) {
+    if (authWarned)
+        return;
+    if (process.env.NODE_ENV === 'production') {
+        const hasAuth = config.plugins.some((p) => p.name === 'auth');
+        if (!hasAuth) {
+            console.warn('[airdraft] WARNING: No auth plugin detected. The CMS API is publicly accessible. ' +
+                'Install @airdraft/plugin-auth to protect it.');
+            authWarned = true;
+        }
+    }
+}
+// ---------------------------------------------------------------------------
+// createCmsHandler
+// ---------------------------------------------------------------------------
+/**
+ * Produces App Router route handler exports from a CmsConfig.
+ *
+ * Place in `app/api/cms/[...route]/route.ts`:
+ *
+ * ```ts
+ * export const { GET, POST, PUT, DELETE } = createCmsHandler(airdraft)
+ * ```
+ */
+export function createCmsHandler(config) {
+    const engine = new CmsEngine(config);
+    warnIfNoAuth(config);
+    async function runMiddleware(req) {
+        try {
+            for (const plugin of config.plugins) {
+                await plugin.middleware?.(req);
+            }
+            return null;
+        }
+        catch (err) {
+            return errorResponse(err);
+        }
+    }
+    /** Dispatch a request to a plugin-defined route. Returns null if no match. */
+    async function dispatchPluginRoute(req, route) {
+        const routeKey = '/' + route.join('/');
+        // Build a sorted list of all plugin routes (most literal segments first so
+        // `/media/:key/url` is tried before `/media/:key`).
+        const candidates = [];
+        for (const plugin of config.plugins) {
+            if (!plugin.routes)
+                continue;
+            for (const pattern of Object.keys(plugin.routes)) {
+                candidates.push({ plugin, pattern });
+            }
+        }
+        candidates.sort((a, b) => {
+            const literalCount = (p) => p.split('/').filter((s) => !s.startsWith(':')).length;
+            return literalCount(b.pattern) - literalCount(a.pattern);
+        });
+        for (const { plugin, pattern } of candidates) {
+            // Exact match
+            if (pattern === routeKey) {
+                return plugin.routes[pattern](req, { adapter: config.adapter, config });
+            }
+            // Pattern match: :param segments match one or more path characters (greedy).
+            // This allows keys that contain slashes, e.g. /media/:key matching
+            // /media/uploads/2026/05/hero.jpg
+            if (pattern.includes(':')) {
+                const regexStr = pattern
+                    .split('/')
+                    .map((seg) => (seg.startsWith(':') ? '(.+?)' : seg.replace(/[.*+?^${}()|[\]\\]/g, '\\$&')))
+                    .join('\\/');
+                const match = new RegExp(`^${regexStr}$`).test(routeKey);
+                if (match) {
+                    return plugin.routes[pattern](req, { adapter: config.adapter, config });
+                }
+            }
+        }
+        return null;
+    }
+    /** Run all plugin transformEntry hooks in order on a single entry. */
+    async function runTransformEntry(entry, collection) {
+        const collectionConfig = config.collections[collection];
+        if (!collectionConfig)
+            return entry;
+        let result = entry;
+        for (const plugin of config.plugins) {
+            if (plugin.hooks?.transformEntry) {
+                result = await plugin.hooks.transformEntry(result, collectionConfig);
+            }
+        }
+        return result;
+    }
+    // -------------------------------------------------------------------------
+    // GET
+    // -------------------------------------------------------------------------
+    async function GET(req, ctx) {
+        const authErr = await runMiddleware(req);
+        if (authErr)
+            return authErr;
+        try {
+            const { route = [] } = await ctx.params;
+            // Plugin-defined GET routes
+            const pluginRes = await dispatchPluginRoute(req, route);
+            if (pluginRes)
+                return pluginRes;
+            // GET /schema
+            if (route[0] === 'schema' && route.length === 1) {
+                return json({ data: engine.getSchema() });
+            }
+            // GET /docs  →  redirect to Scalar (placeholder until openapi is wired)
+            if (route[0] === 'docs' && route.length === 1) {
+                return json({ message: 'OpenAPI docs coming in Phase 3' });
+            }
+            // GET /openapi.json
+            if (route[0] === 'openapi.json' && route.length === 1) {
+                return json({ message: 'OpenAPI spec coming in Phase 3' });
+            }
+            const parsed = parseRoute(route);
+            if (!parsed)
+                return json({ error: { code: 'NOT_FOUND', message: 'Not found', details: {} } }, 404);
+            const { collection, slug } = parsed;
+            if (slug) {
+                // GET /{collection}/{slug}
+                const url = req.nextUrl ?? new URL(req.url);
+                const expandParam = url.searchParams.get('expand');
+                const getOptions = expandParam
+                    ? { expand: expandParam.split(',').map((s) => s.trim()).filter(Boolean) }
+                    : {};
+                const raw = await engine.getEntry(collection, slug, getOptions);
+                if (!raw)
+                    throw new EntryNotFoundError(collection, slug);
+                const entry = await runTransformEntry(raw, collection);
+                return json({ data: { slug: entry.slug, ...entry.data, ...(entry.published !== undefined ? { published: entry.published, publishedAt: entry.publishedAt } : {}) }, meta: { sha: entry.meta.sha } });
+            }
+            else {
+                // GET /{collection}
+                const url = req.nextUrl ?? new URL(req.url);
+                const opts = parseListOptions(url);
+                const rawEntries = await engine.listEntries(collection, opts);
+                const entries = await Promise.all(rawEntries.map((e) => runTransformEntry(e, collection)));
+                const data = entries.map((e) => ({
+                    slug: e.slug,
+                    ...e.data,
+                    ...(e.published !== undefined ? { published: e.published, publishedAt: e.publishedAt } : {}),
+                    _sha: e.meta.sha,
+                }));
+                return json({
+                    data,
+                    meta: { total: data.length, offset: opts.offset ?? 0, limit: opts.limit ?? 20 },
+                });
+            }
+        }
+        catch (err) {
+            return errorResponse(err);
+        }
+    }
+    // -------------------------------------------------------------------------
+    // POST
+    // -------------------------------------------------------------------------
+    async function POST(req, ctx) {
+        const authErr = await runMiddleware(req);
+        if (authErr)
+            return authErr;
+        try {
+            const { route = [] } = await ctx.params;
+            // Plugin-defined POST routes (e.g. /media/upload)
+            const pluginRes = await dispatchPluginRoute(req, route);
+            if (pluginRes)
+                return pluginRes;
+            const parsed = parseRoute(route);
+            if (!parsed || parsed.slug) {
+                return json({ error: { code: 'NOT_FOUND', message: 'Not found', details: {} } }, 404);
+            }
+            const body = await req.json();
+            const payload = body.data ?? {};
+            const slug = body.slug ?? payload['slug'];
+            const entry = await engine.createEntry(parsed.collection, slug, payload);
+            return json({
+                data: { slug: entry.slug, ...entry.data, ...(entry.published !== undefined ? { published: entry.published, publishedAt: entry.publishedAt } : {}) },
+                meta: { sha: entry.meta.sha },
+            }, 201);
+        }
+        catch (err) {
+            return errorResponse(err);
+        }
+    }
+    // -------------------------------------------------------------------------
+    // PATCH — plugin-defined routes only (e.g. PATCH /media/:key)
+    // -------------------------------------------------------------------------
+    async function PATCH(req, ctx) {
+        const authErr = await runMiddleware(req);
+        if (authErr)
+            return authErr;
+        try {
+            const { route = [] } = await ctx.params;
+            const pluginRes = await dispatchPluginRoute(req, route);
+            if (pluginRes)
+                return pluginRes;
+            return json({ error: { code: 'NOT_FOUND', message: 'Not found', details: {} } }, 404);
+        }
+        catch (err) {
+            return errorResponse(err);
+        }
+    }
+    // -------------------------------------------------------------------------
+    // PUT
+    // -------------------------------------------------------------------------
+    async function PUT(req, ctx) {
+        const authErr = await runMiddleware(req);
+        if (authErr)
+            return authErr;
+        try {
+            const { route = [] } = await ctx.params;
+            // Plugin-defined PUT routes (e.g. PUT /schema/collections/:name)
+            const pluginRes = await dispatchPluginRoute(req, route);
+            if (pluginRes)
+                return pluginRes;
+            const parsed = parseRoute(route);
+            if (!parsed || !parsed.slug) {
+                return json({ error: { code: 'NOT_FOUND', message: 'Not found', details: {} } }, 404);
+            }
+            const body = await req.json();
+            const sha = body.meta?.sha;
+            if (!sha) {
+                return json({ error: { code: 'CONFLICT', message: 'meta.sha is required for update operations', details: {} } }, 409);
+            }
+            const payload = { ...(body.data ?? {}), 'meta.sha': sha };
+            const entry = await engine.updateEntry(parsed.collection, parsed.slug, payload);
+            return json({
+                data: { slug: entry.slug, ...entry.data, ...(entry.published !== undefined ? { published: entry.published, publishedAt: entry.publishedAt } : {}) },
+                meta: { sha: entry.meta.sha },
+            });
+        }
+        catch (err) {
+            return errorResponse(err);
+        }
+    }
+    // -------------------------------------------------------------------------
+    // DELETE
+    // -------------------------------------------------------------------------
+    async function DELETE(req, ctx) {
+        const authErr = await runMiddleware(req);
+        if (authErr)
+            return authErr;
+        try {
+            const { route = [] } = await ctx.params;
+            // Plugin-defined DELETE routes (e.g. DELETE /schema/collections/:name)
+            const pluginRes = await dispatchPluginRoute(req, route);
+            if (pluginRes)
+                return pluginRes;
+            const parsed = parseRoute(route);
+            if (!parsed || !parsed.slug) {
+                return json({ error: { code: 'NOT_FOUND', message: 'Not found', details: {} } }, 404);
+            }
+            const body = await req.json().catch(() => ({}));
+            const sha = body.meta?.sha;
+            if (!sha) {
+                return json({ error: { code: 'CONFLICT', message: 'meta.sha is required for delete operations', details: {} } }, 409);
+            }
+            await engine.deleteEntry(parsed.collection, parsed.slug, sha);
+            return new Response(null, { status: 204 });
+        }
+        catch (err) {
+            return errorResponse(err);
+        }
+    }
+    // -------------------------------------------------------------------------
+    // Audit helpers
+    // -------------------------------------------------------------------------
+    /** Test a route key against a parameterised pattern like /media/:key/url. */
+    function matchesPattern(pattern, routeKey) {
+        const regexStr = pattern
+            .split('/')
+            .map((seg) => seg.startsWith(':') ? '(.+?)' : seg.replace(/[.*+?^${}()|[\]\\]/g, '\\$&'))
+            .join('\\/');
+        return new RegExp(`^${regexStr}$`).test(routeKey);
+    }
+    /** Classify method + route segments into a human-readable action string. */
+    function classifyAction(method, route) {
+        const routeKey = '/' + route.join('/');
+        // Build sorted plugin route candidates (same logic as dispatchPluginRoute)
+        const candidates = [];
+        for (const plugin of config.plugins) {
+            if (!plugin.routes)
+                continue;
+            for (const pattern of Object.keys(plugin.routes))
+                candidates.push(pattern);
+        }
+        candidates.sort((a, b) => {
+            const literalCount = (p) => p.split('/').filter((s) => !s.startsWith(':')).length;
+            return literalCount(b) - literalCount(a);
+        });
+        for (const pattern of candidates) {
+            if (pattern === routeKey || (pattern.includes(':') && matchesPattern(pattern, routeKey))) {
+                // e.g. /media/:key/url  →  plugin.media.*.url
+                const action = 'plugin' + pattern.replace(/:[^/]+/g, '*');
+                return { action };
+            }
+        }
+        if (route.length === 0)
+            return { action: 'unknown' };
+        if (route[0] === 'schema')
+            return { action: 'schema.get' };
+        if (route[0] === 'docs')
+            return { action: 'docs.get' };
+        if (route[0] === 'openapi.json')
+            return { action: 'openapi.get' };
+        const collection = route[0];
+        const slug = route[1];
+        const hasSingle = !!slug;
+        const actionMap = {
+            GET: ['collection.list', 'collection.get'],
+            POST: ['collection.create', 'unknown'],
+            PATCH: ['unknown', 'unknown'],
+            PUT: ['unknown', 'collection.update'],
+            DELETE: ['unknown', 'collection.delete'],
+        };
+        const pair = actionMap[method] ?? ['unknown', 'unknown'];
+        return { action: pair[hasSingle ? 1 : 0], collection, slug };
+    }
+    /** Emit an audit event to all plugins that registered the onAuditEvent hook. */
+    async function emitAuditEvent(event) {
+        for (const plugin of config.plugins) {
+            if (plugin.hooks?.onAuditEvent) {
+                try {
+                    await plugin.hooks.onAuditEvent(event);
+                }
+                catch (e) {
+                    console.error('[airdraft] audit event emit error:', e);
+                }
+            }
+        }
+    }
+    /** Wrap a handler function so it automatically emits a wide audit event on completion. */
+    function auditWrap(method, fn) {
+        return async (req, ctx) => {
+            const startMs = Date.now();
+            const url = new URL(req.url);
+            const { route = [] } = await ctx.params;
+            const { action, collection, slug } = classifyAction(method, route);
+            const actor = req.headers.get('x-api-key') ??
+                req.headers.get('authorization')?.replace(/^Bearer\s+/i, '') ??
+                undefined;
+            const query = Object.fromEntries(url.searchParams);
+            const event = {
+                requestId: crypto.randomUUID(),
+                timestamp: new Date(startMs).toISOString(),
+                method,
+                path: url.pathname,
+                action,
+                ...(collection !== undefined && { collection }),
+                ...(slug !== undefined && { slug }),
+                statusCode: 0,
+                durationMs: 0,
+                ...(actor !== undefined && { actor }),
+                ...(Object.keys(query).length > 0 && { request: { query } }),
+            };
+            try {
+                const response = await fn(req, ctx);
+                event.statusCode = response.status;
+                // Extract error details from 4xx/5xx responses
+                if (response.status >= 400) {
+                    try {
+                        const body = (await response.clone().json());
+                        if (body?.error) {
+                            event.error = {
+                                message: body.error.message ?? 'Unknown error',
+                                ...(body.error.code ? { code: body.error.code } : {}),
+                            };
+                        }
+                    }
+                    catch {
+                        /* body parse failed — not JSON */
+                    }
+                }
+                return response;
+            }
+            catch (err) {
+                event.statusCode = 500;
+                event.error = { message: err instanceof Error ? err.message : String(err) };
+                throw err;
+            }
+            finally {
+                event.durationMs = Date.now() - startMs;
+                await emitAuditEvent(event);
+            }
+        };
+    }
+    // Only wrap when at least one plugin listens for audit events (zero overhead otherwise)
+    const hasAuditPlugins = config.plugins.some((p) => p.hooks?.onAuditEvent);
+    if (!hasAuditPlugins)
+        return { GET, POST, PATCH, PUT, DELETE };
+    return {
+        GET: auditWrap('GET', GET),
+        POST: auditWrap('POST', POST),
+        PATCH: auditWrap('PATCH', PATCH),
+        PUT: auditWrap('PUT', PUT),
+        DELETE: auditWrap('DELETE', DELETE),
+    };
+}
+//# sourceMappingURL=handler.js.map

package/dist/handler.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"handler.js","sourceRoot":"","sources":["../src/handler.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,SAAS,EAKT,aAAa,EACb,eAAe,EAEf,kBAAkB,GACnB,MAAM,gBAAgB,CAAA;AAoBvB,8EAA8E;AAC9E,eAAe;AACf,8EAA8E;AAE9E,SAAS,IAAI,CAAC,IAAa,EAAE,MAAM,GAAG,GAAG;IACvC,OAAO,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE;QACxC,MAAM;QACN,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;KAChD,CAAC,CAAA;AACJ,CAAC;AAED,SAAS,aAAa,CAAC,GAAY;IACjC,IAAI,GAAG,YAAY,aAAa,EAAE,CAAC;QACjC,MAAM,IAAI,GAAG;YACX,KAAK,EAAE;gBACL,IAAI,EAAE,GAAG,CAAC,IAAI;gBACd,OAAO,EAAE,GAAG,CAAC,OAAO;gBACpB,OAAO,EAAE,GAAG,YAAY,eAAe,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE;aAC3D;SACF,CAAA;QACD,OAAO,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,UAAU,CAAC,CAAA;IACnC,CAAC;IACD,iDAAiD;IACjD,OAAO,CAAC,KAAK,CAAC,YAAY,EAAE,GAAG,CAAC,CAAA;IAChC,OAAO,IAAI,CACT,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,gBAAgB,EAAE,OAAO,EAAE,uBAAuB,EAAE,OAAO,EAAE,EAAE,EAAE,EAAE,EACpF,GAAG,CACJ,CAAA;AACH,CAAC;AAED,8EAA8E;AAC9E,gBAAgB;AAChB,8EAA8E;AAE9E,SAAS,UAAU,CAAC,QAA8B;IAChD,IAAI,CAAC,QAAQ,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAA;IACnD,MAAM,CAAC,UAAU,EAAE,IAAI,CAAC,GAAG,QAAQ,CAAA;IACnC,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,CAAA;AAC7B,CAAC;AAED,8EAA8E;AAC9E,4BAA4B;AAC5B,8EAA8E;AAE9E,SAAS,gBAAgB,CAAC,GAAiB;IACzC,MAAM,CAAC,GAAG,OAAO,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAA;IACtD,MAAM,IAAI,GAAgB,EAAE,CAAA;IAE5B,MAAM,KAAK,GAAG,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,CAAA;IACzC,IAAI,KAAK;QAAE,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,KAAK,EAAE,EAAE,CAAC,EAAE,GAAG,CAAC,CAAA;IAE1D,MAAM,MAAM,GAAG,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAA;IAC3C,IAAI,MAAM;QAAE,IAAI,CAAC,MAAM,GAAG,QAAQ,CAAC,MAAM,EAAE,EAAE,CAAC,CAAA;IAE9C,MAAM,IAAI,GAAG,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,CAAA;IACvC,MAAM,KAAK,GAAI,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAoB,IAAI,MAAM,CAAA;IACvE,IAAI,IAAI;QAAE,IAAI,CAAC,IAAI,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,CAAA;IAE5C,MAAM,MAAM,GAAG,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,QAAQ,CAA0B,CAAA;IACpE,IAAI,MAAM;QAAE,IAAI,CAAC,MAAM,GAAG,MAAM,CAAA;IAEhC,MAAM,MAAM,GAA4B,EAAE,CAAA;IAC1C,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC,YAAY,CAAC,OAAO,EAAE,EAAE,CAAC;QACpD,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAA;QAC3C,IAAI,KAAK;YAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,KAAK,CAAA;IACrC,CAAC;IACD,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,MAAM,GAAG,CAAC;QAAE,IAAI,CAAC,MAAM,GAAG,MAAM,CAAA;IAExD,MAAM,WAAW,GAAG,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAA;IAChD,IAAI,WAAW;QAAE,IAAI,CAAC,MAAM,GAAG,WAAW,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAA;IAE1F,OAAO,IAAI,CAAA;AACb,CAAC;AAED,8EAA8E;AAC9E,sCAAsC;AACtC,8EAA8E;AAE9E,IAAI,UAAU,GAAG,KAAK,CAAA;AACtB,SAAS,YAAY,CAAC,MAAiB;IACrC,IAAI,UAAU;QAAE,OAAM;IACtB,IAAI,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,YAAY,EAAE,CAAC;QAC1C,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC,CAAA;QAC7D,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,OAAO,CAAC,IAAI,CACV,mFAAmF;gBACjF,8CAA8C,CACjD,CAAA;YACD,UAAU,GAAG,IAAI,CAAA;QACnB,CAAC;IACH,CAAC;AACH,CAAC;AAED,8EAA8E;AAC9E,mBAAmB;AACnB,8EAA8E;AAE9E;;;;;;;;GAQG;AACH,MAAM,UAAU,gBAAgB,CAAC,MAAiB;IAChD,MAAM,MAAM,GAAG,IAAI,SAAS,CAAC,MAAM,CAAC,CAAA;IACpC,YAAY,CAAC,MAAM,CAAC,CAAA;IAEpB,KAAK,UAAU,aAAa,CAAC,GAAgB;QAC3C,IAAI,CAAC;YACH,KAAK,MAAM,MAAM,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;gBACpC,MAAM,MAAM,CAAC,UAAU,EAAE,CAAC,GAAG,CAAC,CAAA;YAChC,CAAC;YACD,OAAO,IAAI,CAAA;QACb,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,aAAa,CAAC,GAAG,CAAC,CAAA;QAC3B,CAAC;IACH,CAAC;IAED,8EAA8E;IAC9E,KAAK,UAAU,mBAAmB,CAAC,GAAgB,EAAE,KAAe;QAClE,MAAM,QAAQ,GAAG,GAAG,GAAG,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;QAEtC,2EAA2E;QAC3E,oDAAoD;QACpD,MAAM,UAAU,GAAsE,EAAE,CAAA;QACxF,KAAK,MAAM,MAAM,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;YACpC,IAAI,CAAC,MAAM,CAAC,MAAM;gBAAE,SAAQ;YAC5B,KAAK,MAAM,OAAO,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;gBACjD,UAAU,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAA;YACtC,CAAC;QACH,CAAC;QACD,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;YACvB,MAAM,YAAY,GAAG,CAAC,CAAS,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAA;YACzF,OAAO,YAAY,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,YAAY,CAAC,CAAC,CAAC,OAAO,CAAC,CAAA;QAC1D,CAAC,CAAC,CAAA;QAEF,KAAK,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,UAAU,EAAE,CAAC;YAC7C,cAAc;YACd,IAAI,OAAO,KAAK,QAAQ,EAAE,CAAC;gBACzB,OAAO,MAAM,CAAC,MAAO,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,MAAM,EAAE,CAAC,CAAA;YAC1E,CAAC;YAED,6EAA6E;YAC7E,mEAAmE;YACnE,kCAAkC;YAClC,IAAI,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC1B,MAAM,QAAQ,GAAG,OAAO;qBACrB,KAAK,CAAC,GAAG,CAAC;qBACV,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,qBAAqB,EAAE,MAAM,CAAC,CAAC,CAAC;qBAC1F,IAAI,CAAC,KAAK,CAAC,CAAA;gBACd,MAAM,KAAK,GAAG,IAAI,MAAM,CAAC,IAAI,QAAQ,GAAG,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;gBACxD,IAAI,KAAK,EAAE,CAAC;oBACV,OAAO,MAAM,CAAC,MAAO,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,MAAM,EAAE,CAAC,CAAA;gBAC1E,CAAC;YACH,CAAC;QACH,CAAC;QAED,OAAO,IAAI,CAAA;IACb,CAAC;IAED,sEAAsE;IACtE,KAAK,UAAU,iBAAiB,CAAC,KAAY,EAAE,UAAkB;QAC/D,MAAM,gBAAgB,GAAG,MAAM,CAAC,WAAW,CAAC,UAAU,CAAC,CAAA;QACvD,IAAI,CAAC,gBAAgB;YAAE,OAAO,KAAK,CAAA;QACnC,IAAI,MAAM,GAAG,KAAK,CAAA;QAClB,KAAK,MAAM,MAAM,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;YACpC,IAAI,MAAM,CAAC,KAAK,EAAE,cAAc,EAAE,CAAC;gBACjC,MAAM,GAAG,MAAM,MAAM,CAAC,KAAK,CAAC,cAAc,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAA;YACtE,CAAC;QACH,CAAC;QACD,OAAO,MAAM,CAAA;IACf,CAAC;IAED,4EAA4E;IAC5E,MAAM;IACN,4EAA4E;IAC5E,KAAK,UAAU,GAAG,CAAC,GAAgB,EAAE,GAAiB;QACpD,MAAM,OAAO,GAAG,MAAM,aAAa,CAAC,GAAG,CAAC,CAAA;QACxC,IAAI,OAAO;YAAE,OAAO,OAAO,CAAA;QAC3B,IAAI,CAAC;YACH,MAAM,EAAE,KAAK,GAAG,EAAE,EAAE,GAAG,MAAM,GAAG,CAAC,MAAM,CAAA;YAEvC,4BAA4B;YAC5B,MAAM,SAAS,GAAG,MAAM,mBAAmB,CAAC,GAAG,EAAE,KAAK,CAAC,CAAA;YACvD,IAAI,SAAS;gBAAE,OAAO,SAAS,CAAA;YAE/B,cAAc;YACd,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAChD,OAAO,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,SAAS,EAAE,EAAE,CAAC,CAAA;YAC3C,CAAC;YAED,wEAAwE;YACxE,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,MAAM,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAC9C,OAAO,IAAI,CAAC,EAAE,OAAO,EAAE,gCAAgC,EAAE,CAAC,CAAA;YAC5D,CAAC;YAED,oBAAoB;YACpB,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,cAAc,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACtD,OAAO,IAAI,CAAC,EAAE,OAAO,EAAE,gCAAgC,EAAE,CAAC,CAAA;YAC5D,CAAC;YAED,MAAM,MAAM,GAAG,UAAU,CAAC,KAAK,CAAC,CAAA;YAChC,IAAI,CAAC,MAAM;gBAAE,OAAO,IAAI,CAAC,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,WAAW,EAAE,OAAO,EAAE,EAAE,EAAE,EAAE,EAAE,GAAG,CAAC,CAAA;YAElG,MAAM,EAAE,UAAU,EAAE,IAAI,EAAE,GAAG,MAAM,CAAA;YAEnC,IAAI,IAAI,EAAE,CAAC;gBACT,2BAA2B;gBAC3B,MAAM,GAAG,GAAG,GAAG,CAAC,OAAO,IAAI,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;gBAC3C,MAAM,WAAW,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAA;gBAClD,MAAM,UAAU,GAAG,WAAW;oBAC5B,CAAC,CAAC,EAAE,MAAM,EAAE,WAAW,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE;oBACzE,CAAC,CAAC,EAAE,CAAA;gBACN,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,QAAQ,CAAC,UAAU,EAAE,IAAI,EAAE,UAAU,CAAC,CAAA;gBAC/D,IAAI,CAAC,GAAG;oBAAE,MAAM,IAAI,kBAAkB,CAAC,UAAU,EAAE,IAAI,CAAC,CAAA;gBACxD,MAAM,KAAK,GAAG,MAAM,iBAAiB,CAAC,GAAG,EAAE,UAAU,CAAC,CAAA;gBACtD,OAAO,IAAI,CAAC,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,GAAG,KAAK,CAAC,IAAI,EAAE,GAAG,CAAC,KAAK,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,IAAI,EAAE,EAAE,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,CAAA;YACrM,CAAC;iBAAM,CAAC;gBACN,oBAAoB;gBACpB,MAAM,GAAG,GAAG,GAAG,CAAC,OAAO,IAAI,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;gBAC3C,MAAM,IAAI,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAA;gBAClC,MAAM,UAAU,GAAG,MAAM,MAAM,CAAC,WAAW,CAAC,UAAU,EAAE,IAAI,CAAC,CAAA;gBAC7D,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC,CAAC,CAAA;gBAC1F,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;oBAC/B,IAAI,EAAE,CAAC,CAAC,IAAI;oBACZ,GAAG,CAAC,CAAC,IAAI;oBACT,GAAG,CAAC,CAAC,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS,EAAE,WAAW,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBAC5F,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG;iBACjB,CAAC,CAAC,CAAA;gBACH,OAAO,IAAI,CAAC;oBACV,IAAI;oBACJ,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,IAAI,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,IAAI,EAAE,EAAE;iBAChF,CAAC,CAAA;YACJ,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,aAAa,CAAC,GAAG,CAAC,CAAA;QAC3B,CAAC;IACH,CAAC;IAED,4EAA4E;IAC5E,OAAO;IACP,4EAA4E;IAC5E,KAAK,UAAU,IAAI,CAAC,GAAgB,EAAE,GAAiB;QACrD,MAAM,OAAO,GAAG,MAAM,aAAa,CAAC,GAAG,CAAC,CAAA;QACxC,IAAI,OAAO;YAAE,OAAO,OAAO,CAAA;QAC3B,IAAI,CAAC;YACH,MAAM,EAAE,KAAK,GAAG,EAAE,EAAE,GAAG,MAAM,GAAG,CAAC,MAAM,CAAA;YAEvC,kDAAkD;YAClD,MAAM,SAAS,GAAG,MAAM,mBAAmB,CAAC,GAAG,EAAE,KAAK,CAAC,CAAA;YACvD,IAAI,SAAS;gBAAE,OAAO,SAAS,CAAA;YAE/B,MAAM,MAAM,GAAG,UAAU,CAAC,KAAK,CAAC,CAAA;YAChC,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC;gBAC3B,OAAO,IAAI,CAAC,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,WAAW,EAAE,OAAO,EAAE,EAAE,EAAE,EAAE,EAAE,GAAG,CAAC,CAAA;YACvF,CAAC;YAED,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAuD,CAAA;YAClF,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,IAAI,EAAE,CAAA;YAC/B,MAAM,IAAI,GAAuB,IAAI,CAAC,IAAI,IAAK,OAAO,CAAC,MAAM,CAAwB,CAAA;YAErF,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,UAAU,EAAE,IAAI,EAAE,OAAO,CAAC,CAAA;YACxE,OAAO,IAAI,CACT;gBACE,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,GAAG,KAAK,CAAC,IAAI,EAAE,GAAG,CAAC,KAAK,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE;gBACnJ,IAAI,EAAE,EAAE,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE;aAC9B,EACD,GAAG,CACJ,CAAA;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,aAAa,CAAC,GAAG,CAAC,CAAA;QAC3B,CAAC;IACH,CAAC;IAED,4EAA4E;IAC5E,8DAA8D;IAC9D,4EAA4E;IAC5E,KAAK,UAAU,KAAK,CAAC,GAAgB,EAAE,GAAiB;QACtD,MAAM,OAAO,GAAG,MAAM,aAAa,CAAC,GAAG,CAAC,CAAA;QACxC,IAAI,OAAO;YAAE,OAAO,OAAO,CAAA;QAC3B,IAAI,CAAC;YACH,MAAM,EAAE,KAAK,GAAG,EAAE,EAAE,GAAG,MAAM,GAAG,CAAC,MAAM,CAAA;YACvC,MAAM,SAAS,GAAG,MAAM,mBAAmB,CAAC,GAAG,EAAE,KAAK,CAAC,CAAA;YACvD,IAAI,SAAS;gBAAE,OAAO,SAAS,CAAA;YAC/B,OAAO,IAAI,CAAC,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,WAAW,EAAE,OAAO,EAAE,EAAE,EAAE,EAAE,EAAE,GAAG,CAAC,CAAA;QACvF,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,aAAa,CAAC,GAAG,CAAC,CAAA;QAC3B,CAAC;IACH,CAAC;IAED,4EAA4E;IAC5E,MAAM;IACN,4EAA4E;IAC5E,KAAK,UAAU,GAAG,CAAC,GAAgB,EAAE,GAAiB;QACpD,MAAM,OAAO,GAAG,MAAM,aAAa,CAAC,GAAG,CAAC,CAAA;QACxC,IAAI,OAAO;YAAE,OAAO,OAAO,CAAA;QAC3B,IAAI,CAAC;YACH,MAAM,EAAE,KAAK,GAAG,EAAE,EAAE,GAAG,MAAM,GAAG,CAAC,MAAM,CAAA;YAEvC,iEAAiE;YACjE,MAAM,SAAS,GAAG,MAAM,mBAAmB,CAAC,GAAG,EAAE,KAAK,CAAC,CAAA;YACvD,IAAI,SAAS;gBAAE,OAAO,SAAS,CAAA;YAE/B,MAAM,MAAM,GAAG,UAAU,CAAC,KAAK,CAAC,CAAA;YAChC,IAAI,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;gBAC5B,OAAO,IAAI,CAAC,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,WAAW,EAAE,OAAO,EAAE,EAAE,EAAE,EAAE,EAAE,GAAG,CAAC,CAAA;YACvF,CAAC;YAED,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAiE,CAAA;YAC5F,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,EAAE,GAAG,CAAA;YAC1B,IAAI,CAAC,GAAG,EAAE,CAAC;gBACT,OAAO,IAAI,CACT,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,4CAA4C,EAAE,OAAO,EAAE,EAAE,EAAE,EAAE,EACnG,GAAG,CACJ,CAAA;YACH,CAAC;YAED,MAAM,OAAO,GAAG,EAAE,GAAG,CAAC,IAAI,CAAC,IAAI,IAAI,EAAE,CAAC,EAAE,UAAU,EAAE,GAAG,EAAE,CAAA;YACzD,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,UAAU,EAAE,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,CAAA;YAC/E,OAAO,IAAI,CAAC;gBACV,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,GAAG,KAAK,CAAC,IAAI,EAAE,GAAG,CAAC,KAAK,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE;gBACnJ,IAAI,EAAE,EAAE,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE;aAC9B,CAAC,CAAA;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,aAAa,CAAC,GAAG,CAAC,CAAA;QAC3B,CAAC;IACH,CAAC;IAED,4EAA4E;IAC5E,SAAS;IACT,4EAA4E;IAC5E,KAAK,UAAU,MAAM,CAAC,GAAgB,EAAE,GAAiB;QACvD,MAAM,OAAO,GAAG,MAAM,aAAa,CAAC,GAAG,CAAC,CAAA;QACxC,IAAI,OAAO;YAAE,OAAO,OAAO,CAAA;QAC3B,IAAI,CAAC;YACH,MAAM,EAAE,KAAK,GAAG,EAAE,EAAE,GAAG,MAAM,GAAG,CAAC,MAAM,CAAA;YAEvC,uEAAuE;YACvE,MAAM,SAAS,GAAG,MAAM,mBAAmB,CAAC,GAAG,EAAE,KAAK,CAAC,CAAA;YACvD,IAAI,SAAS;gBAAE,OAAO,SAAS,CAAA;YAE/B,MAAM,MAAM,GAAG,UAAU,CAAC,KAAK,CAAC,CAAA;YAChC,IAAI,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;gBAC5B,OAAO,IAAI,CAAC,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,WAAW,EAAE,OAAO,EAAE,EAAE,EAAE,EAAE,EAAE,GAAG,CAAC,CAAA;YACvF,CAAC;YAED,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAgC,CAAA;YAC9E,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,EAAE,GAAG,CAAA;YAC1B,IAAI,CAAC,GAAG,EAAE,CAAC;gBACT,OAAO,IAAI,CACT,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,4CAA4C,EAAE,OAAO,EAAE,EAAE,EAAE,EAAE,EACnG,GAAG,CACJ,CAAA;YACH,CAAC;YAED,MAAM,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,UAAU,EAAE,MAAM,CAAC,IAAI,EAAE,GAAG,CAAC,CAAA;YAC7D,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAA;QAC5C,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,aAAa,CAAC,GAAG,CAAC,CAAA;QAC3B,CAAC;IACH,CAAC;IAED,4EAA4E;IAC5E,gBAAgB;IAChB,4EAA4E;IAE5E,6EAA6E;IAC7E,SAAS,cAAc,CAAC,OAAe,EAAE,QAAgB;QACvD,MAAM,QAAQ,GAAG,OAAO;aACrB,KAAK,CAAC,GAAG,CAAC;aACV,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CACX,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,qBAAqB,EAAE,MAAM,CAAC,CAC3E;aACA,IAAI,CAAC,KAAK,CAAC,CAAA;QACd,OAAO,IAAI,MAAM,CAAC,IAAI,QAAQ,GAAG,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;IACnD,CAAC;IAED,4EAA4E;IAC5E,SAAS,cAAc,CACrB,MAAc,EACd,KAAe;QAEf,MAAM,QAAQ,GAAG,GAAG,GAAG,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;QAEtC,2EAA2E;QAC3E,MAAM,UAAU,GAAa,EAAE,CAAA;QAC/B,KAAK,MAAM,MAAM,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;YACpC,IAAI,CAAC,MAAM,CAAC,MAAM;gBAAE,SAAQ;YAC5B,KAAK,MAAM,OAAO,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC;gBAAE,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;QAC5E,CAAC;QACD,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;YACvB,MAAM,YAAY,GAAG,CAAC,CAAS,EAAE,EAAE,CACjC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAA;YACvD,OAAO,YAAY,CAAC,CAAC,CAAC,GAAG,YAAY,CAAC,CAAC,CAAC,CAAA;QAC1C,CAAC,CAAC,CAAA;QAEF,KAAK,MAAM,OAAO,IAAI,UAAU,EAAE,CAAC;YACjC,IAAI,OAAO,KAAK,QAAQ,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,cAAc,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,EAAE,CAAC;gBACzF,8CAA8C;gBAC9C,MAAM,MAAM,GAAG,QAAQ,GAAG,OAAO,CAAC,OAAO,CAAC,SAAS,EAAE,GAAG,CAAC,CAAA;gBACzD,OAAO,EAAE,MAAM,EAAE,CAAA;YACnB,CAAC;QACH,CAAC;QAED,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,CAAA;QACpD,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,QAAQ;YAAE,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,CAAA;QAC1D,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,MAAM;YAAE,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,CAAA;QACtD,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,cAAc;YAAE,OAAO,EAAE,MAAM,EAAE,aAAa,EAAE,CAAA;QAEjE,MAAM,UAAU,GAAG,KAAK,CAAC,CAAC,CAAC,CAAA;QAC3B,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAA;QACrB,MAAM,SAAS,GAAG,CAAC,CAAC,IAAI,CAAA;QACxB,MAAM,SAAS,GAAqC;YAClD,GAAG,EAAK,CAAC,iBAAiB,EAAE,gBAAgB,CAAC;YAC7C,IAAI,EAAI,CAAC,mBAAmB,EAAE,SAAS,CAAC;YACxC,KAAK,EAAG,CAAC,SAAS,EAAE,SAAS,CAAC;YAC9B,GAAG,EAAK,CAAC,SAAS,EAAE,mBAAmB,CAAC;YACxC,MAAM,EAAE,CAAC,SAAS,EAAE,mBAAmB,CAAC;SACzC,CAAA;QACD,MAAM,IAAI,GAAG,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,SAAS,CAAC,CAAA;QACxD,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,IAAI,EAAE,CAAA;IAC9D,CAAC;IAED,gFAAgF;IAChF,KAAK,UAAU,cAAc,CAAC,KAAiB;QAC7C,KAAK,MAAM,MAAM,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;YACpC,IAAI,MAAM,CAAC,KAAK,EAAE,YAAY,EAAE,CAAC;gBAC/B,IAAI,CAAC;oBACH,MAAM,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC,KAAK,CAAC,CAAA;gBACxC,CAAC;gBAAC,OAAO,CAAC,EAAE,CAAC;oBACX,OAAO,CAAC,KAAK,CAAC,oCAAoC,EAAE,CAAC,CAAC,CAAA;gBACxD,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAED,0FAA0F;IAC1F,SAAS,SAAS,CAChB,MAAc,EACd,EAA8D;QAE9D,OAAO,KAAK,EAAE,GAAgB,EAAE,GAAiB,EAAqB,EAAE;YACtE,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;YAC1B,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;YAC5B,MAAM,EAAE,KAAK,GAAG,EAAE,EAAE,GAAG,MAAM,GAAG,CAAC,MAAM,CAAA;YACvC,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,IAAI,EAAE,GAAG,cAAc,CAAC,MAAM,EAAE,KAAK,CAAC,CAAA;YAElE,MAAM,KAAK,GACT,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC;gBAC5B,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,EAAE,OAAO,CAAC,aAAa,EAAE,EAAE,CAAC;gBAC5D,SAAS,CAAA;YAEX,MAAM,KAAK,GAAG,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,YAAY,CAAC,CAAA;YAElD,MAAM,KAAK,GAAe;gBACxB,SAAS,EAAE,MAAM,CAAC,UAAU,EAAE;gBAC9B,SAAS,EAAE,IAAI,IAAI,CAAC,OAAO,CAAC,CAAC,WAAW,EAAE;gBAC1C,MAAM;gBACN,IAAI,EAAE,GAAG,CAAC,QAAQ;gBAClB,MAAM;gBACN,GAAG,CAAC,UAAU,KAAK,SAAS,IAAI,EAAE,UAAU,EAAE,CAAC;gBAC/C,GAAG,CAAC,IAAI,KAAK,SAAS,IAAI,EAAE,IAAI,EAAE,CAAC;gBACnC,UAAU,EAAE,CAAC;gBACb,UAAU,EAAE,CAAC;gBACb,GAAG,CAAC,KAAK,KAAK,SAAS,IAAI,EAAE,KAAK,EAAE,CAAC;gBACrC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,OAAO,EAAE,EAAE,KAAK,EAAE,EAAE,CAAC;aAC7D,CAAA;YAED,IAAI,CAAC;gBACH,MAAM,QAAQ,GAAG,MAAM,EAAE,CAAC,GAAG,EAAE,GAAG,CAAC,CAAA;gBACnC,KAAK,CAAC,UAAU,GAAG,QAAQ,CAAC,MAAM,CAAA;gBAClC,+CAA+C;gBAC/C,IAAI,QAAQ,CAAC,MAAM,IAAI,GAAG,EAAE,CAAC;oBAC3B,IAAI,CAAC;wBACH,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,CAE1C,CAAA;wBACD,IAAI,IAAI,EAAE,KAAK,EAAE,CAAC;4BAChB,KAAK,CAAC,KAAK,GAAG;gCACZ,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,OAAO,IAAI,eAAe;gCAC9C,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;6BACtD,CAAA;wBACH,CAAC;oBACH,CAAC;oBAAC,MAAM,CAAC;wBACP,kCAAkC;oBACpC,CAAC;gBACH,CAAC;gBACD,OAAO,QAAQ,CAAA;YACjB,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,KAAK,CAAC,UAAU,GAAG,GAAG,CAAA;gBACtB,KAAK,CAAC,KAAK,GAAG,EAAE,OAAO,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAA;gBAC3E,MAAM,GAAG,CAAA;YACX,CAAC;oBAAS,CAAC;gBACT,KAAK,CAAC,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,CAAA;gBACvC,MAAM,cAAc,CAAC,KAAK,CAAC,CAAA;YAC7B,CAAC;QACH,CAAC,CAAA;IACH,CAAC;IAED,wFAAwF;IACxF,MAAM,eAAe,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,EAAE,YAAY,CAAC,CAAA;IACzE,IAAI,CAAC,eAAe;QAAE,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,CAAA;IAE9D,OAAO;QACL,GAAG,EAAE,SAAS,CAAC,KAAK,EAAE,GAAG,CAAC;QAC1B,IAAI,EAAE,SAAS,CAAC,MAAM,EAAE,IAAI,CAAC;QAC7B,KAAK,EAAE,SAAS,CAAC,OAAO,EAAE,KAAK,CAAC;QAChC,GAAG,EAAE,SAAS,CAAC,KAAK,EAAE,GAAG,CAAC;QAC1B,MAAM,EAAE,SAAS,CAAC,QAAQ,EAAE,MAAM,CAAC;KACpC,CAAA;AACH,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,6 @@
+export * from './handler.js';
+export * from './client.js';
+export * from './revalidation.js';
+export * from './middleware.js';
+export * from './tokenProvider.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AACA,cAAc,cAAc,CAAA;AAC5B,cAAc,aAAa,CAAA;AAC3B,cAAc,mBAAmB,CAAA;AACjC,cAAc,iBAAiB,CAAA;AAC/B,cAAc,oBAAoB,CAAA"}

package/dist/index.js

@@ -0,0 +1,7 @@
+// @airdraft/next — public surface
+export * from './handler.js';
+export * from './client.js';
+export * from './revalidation.js';
+export * from './middleware.js';
+export * from './tokenProvider.js';
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,kCAAkC;AAClC,cAAc,cAAc,CAAA;AAC5B,cAAc,aAAa,CAAA;AAC3B,cAAc,mBAAmB,CAAA;AACjC,cAAc,iBAAiB,CAAA;AAC/B,cAAc,oBAAoB,CAAA"}

package/dist/middleware.d.ts

@@ -0,0 +1,39 @@
+export interface CmsProxyOptions {
+    /**
+     * Base path of the CMS API. Requests to paths under this prefix will be
+     * gated by the middleware. Default: `/api/cms`.
+     */
+    basePath?: string;
+    /**
+     * CORS origins to allow. Defaults to same-origin only (no CORS header added).
+     * Pass `'*'` to allow any origin (not recommended for write routes).
+     */
+    corsOrigins?: string | string[];
+    /**
+     * When `true`, the middleware checks for the presence of any recognized
+     * credential (Bearer, X-API-Key, X-Embed-Token, cookie, or ?embedToken)
+     * and returns 401 if none are found. Full verification still happens in
+     * the route handler — this is a first-pass edge gate only.
+     * Default: `false`.
+     */
+    requireCredentials?: boolean;
+}
+type NextMiddlewareRequest = Request & {
+    nextUrl?: URL;
+};
+type NextMiddlewareResponse = Response;
+/**
+ * Returns a Next.js-compatible Proxy function that applies CORS headers
+ * and an optional credential presence check to all CMS routes.
+ *
+ * Place in your project's `proxy.ts` (Next.js 16+) or `middleware.ts`:
+ *
+ * ```ts
+ * import { withCmsProxy } from '@airdraft/next'
+ * export default withCmsProxy({ basePath: '/api/cms', requireCredentials: true })
+ * export const config = { matcher: ['/api/cms/:path*'] }
+ * ```
+ */
+export declare function withCmsProxy(options?: CmsProxyOptions): (request: NextMiddlewareRequest) => NextMiddlewareResponse;
+export {};
+//# sourceMappingURL=middleware.d.ts.map

package/dist/middleware.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"middleware.d.ts","sourceRoot":"","sources":["../src/middleware.ts"],"names":[],"mappings":"AAIA,MAAM,WAAW,eAAe;IAC9B;;;OAGG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAA;IAEjB;;;OAGG;IACH,WAAW,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAAA;IAE/B;;;;;;OAMG;IACH,kBAAkB,CAAC,EAAE,OAAO,CAAA;CAC7B;AAED,KAAK,qBAAqB,GAAG,OAAO,GAAG;IAAE,OAAO,CAAC,EAAE,GAAG,CAAA;CAAE,CAAA;AACxD,KAAK,sBAAsB,GAAG,QAAQ,CAAA;AAEtC;;;;;;;;;;;GAWG;AACH,wBAAgB,YAAY,CAAC,OAAO,GAAE,eAAoB,IAI/B,SAAS,qBAAqB,KAAG,sBAAsB,CAiDjF"}

package/dist/middleware.js

@@ -0,0 +1,89 @@
+// ---------------------------------------------------------------------------
+// withCmsProxy — Next.js Proxy (edge) handler for CMS route protection
+// ---------------------------------------------------------------------------
+/**
+ * Returns a Next.js-compatible Proxy function that applies CORS headers
+ * and an optional credential presence check to all CMS routes.
+ *
+ * Place in your project's `proxy.ts` (Next.js 16+) or `middleware.ts`:
+ *
+ * ```ts
+ * import { withCmsProxy } from '@airdraft/next'
+ * export default withCmsProxy({ basePath: '/api/cms', requireCredentials: true })
+ * export const config = { matcher: ['/api/cms/:path*'] }
+ * ```
+ */
+export function withCmsProxy(options = {}) {
+    const basePath = options.basePath ?? '/api/cms';
+    const { corsOrigins, requireCredentials = false } = options;
+    return function cmsProxy(request) {
+        const url = request.nextUrl ?? new URL(request.url);
+        const pathname = url.pathname;
+        // Only act on CMS routes
+        if (!pathname.startsWith(basePath)) {
+            return new Response(null, { status: 200 });
+        }
+        // OPTIONS preflight
+        if (request.method === 'OPTIONS') {
+            return buildCorsResponse(request, corsOrigins);
+        }
+        // Credential presence check (edge gate — not full verification)
+        if (requireCredentials) {
+            const hasCredential = request.headers.has('authorization') ||
+                request.headers.has('x-api-key') ||
+                request.headers.has('x-embed-token') ||
+                hasCmsSessionCookie(request.headers.get('cookie')) ||
+                url.searchParams.has('embedToken');
+            if (!hasCredential) {
+                return new Response(JSON.stringify({
+                    error: { code: 'UNAUTHORIZED', message: 'Authentication required', details: {} },
+                }), {
+                    status: 401,
+                    headers: {
+                        'Content-Type': 'application/json',
+                        ...corsHeaders(request, corsOrigins),
+                    },
+                });
+            }
+        }
+        // Pass through — add CORS headers to response
+        const response = new Response(null, { status: 200 });
+        if (corsOrigins) {
+            const h = corsHeaders(request, corsOrigins);
+            for (const [k, v] of Object.entries(h)) {
+                response.headers.set(k, v);
+            }
+        }
+        return response;
+    };
+}
+// ---------------------------------------------------------------------------
+// Helpers
+// ---------------------------------------------------------------------------
+function hasCmsSessionCookie(cookieHeader) {
+    if (!cookieHeader)
+        return false;
+    return cookieHeader.split(';').some((c) => c.trim().startsWith('airdraft_session='));
+}
+function corsHeaders(request, origins) {
+    if (!origins)
+        return {};
+    const requestOrigin = request.headers.get('origin') ?? '';
+    const allowed = origins === '*' ||
+        (Array.isArray(origins) ? origins.includes(requestOrigin) : origins === requestOrigin);
+    if (!allowed)
+        return {};
+    return {
+        'Access-Control-Allow-Origin': requestOrigin || '*',
+        'Access-Control-Allow-Methods': 'GET, POST, PUT, DELETE, OPTIONS',
+        'Access-Control-Allow-Headers': 'Content-Type, Authorization, X-API-Key, X-Embed-Token',
+        'Access-Control-Max-Age': '86400',
+    };
+}
+function buildCorsResponse(request, origins) {
+    return new Response(null, {
+        status: 204,
+        headers: corsHeaders(request, origins),
+    });
+}
+//# sourceMappingURL=middleware.js.map

package/dist/middleware.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"middleware.js","sourceRoot":"","sources":["../src/middleware.ts"],"names":[],"mappings":"AAAA,8EAA8E;AAC9E,uEAAuE;AACvE,8EAA8E;AA4B9E;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,YAAY,CAAC,UAA2B,EAAE;IACxD,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,UAAU,CAAA;IAC/C,MAAM,EAAE,WAAW,EAAE,kBAAkB,GAAG,KAAK,EAAE,GAAG,OAAO,CAAA;IAE3D,OAAO,SAAS,QAAQ,CAAC,OAA8B;QACrD,MAAM,GAAG,GAAG,OAAO,CAAC,OAAO,IAAI,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAA;QACnD,MAAM,QAAQ,GAAG,GAAG,CAAC,QAAQ,CAAA;QAE7B,yBAAyB;QACzB,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;YACnC,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAA;QAC5C,CAAC;QAED,oBAAoB;QACpB,IAAI,OAAO,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YACjC,OAAO,iBAAiB,CAAC,OAAO,EAAE,WAAW,CAAC,CAAA;QAChD,CAAC;QAED,gEAAgE;QAChE,IAAI,kBAAkB,EAAE,CAAC;YACvB,MAAM,aAAa,GACjB,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC;gBACpC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC;gBAChC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC;gBACpC,mBAAmB,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;gBAClD,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,YAAY,CAAC,CAAA;YAEpC,IAAI,CAAC,aAAa,EAAE,CAAC;gBACnB,OAAO,IAAI,QAAQ,CACjB,IAAI,CAAC,SAAS,CAAC;oBACb,KAAK,EAAE,EAAE,IAAI,EAAE,cAAc,EAAE,OAAO,EAAE,yBAAyB,EAAE,OAAO,EAAE,EAAE,EAAE;iBACjF,CAAC,EACF;oBACE,MAAM,EAAE,GAAG;oBACX,OAAO,EAAE;wBACP,cAAc,EAAE,kBAAkB;wBAClC,GAAG,WAAW,CAAC,OAAO,EAAE,WAAW,CAAC;qBACrC;iBACF,CACF,CAAA;YACH,CAAC;QACH,CAAC;QAED,8CAA8C;QAC9C,MAAM,QAAQ,GAAG,IAAI,QAAQ,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAA;QACpD,IAAI,WAAW,EAAE,CAAC;YAChB,MAAM,CAAC,GAAG,WAAW,CAAC,OAAO,EAAE,WAAW,CAAC,CAAA;YAC3C,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;gBACvC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA;YAC5B,CAAC;QACH,CAAC;QACD,OAAO,QAAQ,CAAA;IACjB,CAAC,CAAA;AACH,CAAC;AAED,8EAA8E;AAC9E,UAAU;AACV,8EAA8E;AAE9E,SAAS,mBAAmB,CAAC,YAA2B;IACtD,IAAI,CAAC,YAAY;QAAE,OAAO,KAAK,CAAA;IAC/B,OAAO,YAAY,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,UAAU,CAAC,mBAAmB,CAAC,CAAC,CAAA;AACtF,CAAC;AAED,SAAS,WAAW,CAClB,OAA8B,EAC9B,OAAsC;IAEtC,IAAI,CAAC,OAAO;QAAE,OAAO,EAAE,CAAA;IACvB,MAAM,aAAa,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAA;IACzD,MAAM,OAAO,GACX,OAAO,KAAK,GAAG;QACf,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,OAAO,KAAK,aAAa,CAAC,CAAA;IAExF,IAAI,CAAC,OAAO;QAAE,OAAO,EAAE,CAAA;IAEvB,OAAO;QACL,6BAA6B,EAAE,aAAa,IAAI,GAAG;QACnD,8BAA8B,EAAE,iCAAiC;QACjE,8BAA8B,EAAE,uDAAuD;QACvF,wBAAwB,EAAE,OAAO;KAClC,CAAA;AACH,CAAC;AAED,SAAS,iBAAiB,CACxB,OAA8B,EAC9B,OAAsC;IAEtC,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAE;QACxB,MAAM,EAAE,GAAG;QACX,OAAO,EAAE,WAAW,CAAC,OAAO,EAAE,OAAO,CAAC;KACvC,CAAC,CAAA;AACJ,CAAC"}

package/dist/revalidation.d.ts

@@ -0,0 +1,29 @@
+export interface RevalidationWebhookOptions {
+    secret: string;
+    onRevalidate?: (paths: string[], payload: WebhookPayload) => Promise<void>;
+}
+export interface WebhookPayload {
+    action: 'entry.created' | 'entry.updated' | 'entry.deleted';
+    collection: string;
+    slug: string;
+    paths: string[];
+    timestamp: string;
+}
+/**
+ * Creates a Next.js App Router POST handler for the Airdraft revalidation webhook.
+ *
+ * Verifies `X-Webhook-Signature: sha256=<hex>` using HMAC-SHA256 over the raw body,
+ * then calls `revalidatePath` (or `onRevalidate`) for each path in the payload.
+ *
+ * Usage in `app/api/cms/revalidate/route.ts`:
+ *
+ * ```ts
+ * export const { POST } = createRevalidationHandler({
+ *   secret: process.env.AIRDRAFT_REVALIDATE_SECRET!,
+ * })
+ * ```
+ */
+export declare function createRevalidationHandler(opts: RevalidationWebhookOptions): {
+    POST: (req: Request) => Promise<Response>;
+};
+//# sourceMappingURL=revalidation.d.ts.map

package/dist/revalidation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"revalidation.d.ts","sourceRoot":"","sources":["../src/revalidation.ts"],"names":[],"mappings":"AAEA,MAAM,WAAW,0BAA0B;IACzC,MAAM,EAAE,MAAM,CAAA;IACd,YAAY,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE,OAAO,EAAE,cAAc,KAAK,OAAO,CAAC,IAAI,CAAC,CAAA;CAC3E;AAED,MAAM,WAAW,cAAc;IAC7B,MAAM,EAAE,eAAe,GAAG,eAAe,GAAG,eAAe,CAAA;IAC3D,UAAU,EAAE,MAAM,CAAA;IAClB,IAAI,EAAE,MAAM,CAAA;IACZ,KAAK,EAAE,MAAM,EAAE,CAAA;IACf,SAAS,EAAE,MAAM,CAAA;CAClB;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,yBAAyB,CAAC,IAAI,EAAE,0BAA0B;gBAC/C,OAAO,KAAG,OAAO,CAAC,QAAQ,CAAC;EAoDrD"}

package/dist/revalidation.js

@@ -0,0 +1,69 @@
+import { createHmac, timingSafeEqual } from 'node:crypto';
+/**
+ * Creates a Next.js App Router POST handler for the Airdraft revalidation webhook.
+ *
+ * Verifies `X-Webhook-Signature: sha256=<hex>` using HMAC-SHA256 over the raw body,
+ * then calls `revalidatePath` (or `onRevalidate`) for each path in the payload.
+ *
+ * Usage in `app/api/cms/revalidate/route.ts`:
+ *
+ * ```ts
+ * export const { POST } = createRevalidationHandler({
+ *   secret: process.env.AIRDRAFT_REVALIDATE_SECRET!,
+ * })
+ * ```
+ */
+export function createRevalidationHandler(opts) {
+    async function POST(req) {
+        const signature = req.headers.get('x-webhook-signature');
+        if (!signature) {
+            return errorJson(401, 'UNAUTHORIZED', 'Missing X-Webhook-Signature header');
+        }
+        const rawBody = await req.text();
+        // Verify HMAC-SHA256 signature
+        const expected = `sha256=${createHmac('sha256', opts.secret).update(rawBody).digest('hex')}`;
+        const expectedBuf = Buffer.from(expected);
+        const actualBuf = Buffer.from(signature);
+        if (expectedBuf.length !== actualBuf.length ||
+            !timingSafeEqual(expectedBuf, actualBuf)) {
+            return errorJson(401, 'UNAUTHORIZED', 'Invalid webhook signature');
+        }
+        let payload;
+        try {
+            payload = JSON.parse(rawBody);
+        }
+        catch {
+            return errorJson(400, 'VALIDATION_ERROR', 'Invalid JSON payload');
+        }
+        if (!Array.isArray(payload.paths)) {
+            return errorJson(400, 'VALIDATION_ERROR', '"paths" must be an array');
+        }
+        if (opts.onRevalidate) {
+            await opts.onRevalidate(payload.paths, payload);
+        }
+        else {
+            // Default: attempt Next.js revalidatePath if available (edge-safe dynamic import)
+            try {
+                const { revalidatePath } = await import('next/cache');
+                for (const p of payload.paths) {
+                    revalidatePath(p);
+                }
+            }
+            catch {
+                // Not running in a Next.js context — caller should use onRevalidate instead
+            }
+        }
+        return new Response(JSON.stringify({ ok: true, revalidated: payload.paths }), {
+            status: 200,
+            headers: { 'Content-Type': 'application/json' },
+        });
+    }
+    return { POST };
+}
+function errorJson(status, code, message) {
+    return new Response(JSON.stringify({ error: { code, message, details: {} } }), {
+        status,
+        headers: { 'Content-Type': 'application/json' },
+    });
+}
+//# sourceMappingURL=revalidation.js.map

package/dist/revalidation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"revalidation.js","sourceRoot":"","sources":["../src/revalidation.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,aAAa,CAAA;AAezD;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,yBAAyB,CAAC,IAAgC;IACxE,KAAK,UAAU,IAAI,CAAC,GAAY;QAC9B,MAAM,SAAS,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAC,CAAA;QACxD,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,OAAO,SAAS,CAAC,GAAG,EAAE,cAAc,EAAE,oCAAoC,CAAC,CAAA;QAC7E,CAAC;QAED,MAAM,OAAO,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAA;QAEhC,+BAA+B;QAC/B,MAAM,QAAQ,GAAG,UAAU,UAAU,CAAC,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAA;QAC5F,MAAM,WAAW,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;QACzC,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;QAExC,IACE,WAAW,CAAC,MAAM,KAAK,SAAS,CAAC,MAAM;YACvC,CAAC,eAAe,CAAC,WAAW,EAAE,SAAS,CAAC,EACxC,CAAC;YACD,OAAO,SAAS,CAAC,GAAG,EAAE,cAAc,EAAE,2BAA2B,CAAC,CAAA;QACpE,CAAC;QAED,IAAI,OAAuB,CAAA;QAC3B,IAAI,CAAC;YACH,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAmB,CAAA;QACjD,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,SAAS,CAAC,GAAG,EAAE,kBAAkB,EAAE,sBAAsB,CAAC,CAAA;QACnE,CAAC;QAED,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YAClC,OAAO,SAAS,CAAC,GAAG,EAAE,kBAAkB,EAAE,0BAA0B,CAAC,CAAA;QACvE,CAAC;QAED,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;YACtB,MAAM,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,KAAK,EAAE,OAAO,CAAC,CAAA;QACjD,CAAC;aAAM,CAAC;YACN,kFAAkF;YAClF,IAAI,CAAC;gBACH,MAAM,EAAE,cAAc,EAAE,GAAG,MAAM,MAAM,CAAC,YAAY,CAAC,CAAA;gBACrD,KAAK,MAAM,CAAC,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;oBAC9B,cAAc,CAAC,CAAC,CAAC,CAAA;gBACnB,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,4EAA4E;YAC9E,CAAC;QACH,CAAC;QAED,OAAO,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC,EAAE;YAC5E,MAAM,EAAE,GAAG;YACX,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;SAChD,CAAC,CAAA;IACJ,CAAC;IAED,OAAO,EAAE,IAAI,EAAE,CAAA;AACjB,CAAC;AAED,SAAS,SAAS,CAAC,MAAc,EAAE,IAAY,EAAE,OAAe;IAC9D,OAAO,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE,EAAE,CAAC,EAAE;QAC7E,MAAM;QACN,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;KAChD,CAAC,CAAA;AACJ,CAAC"}

package/dist/tokenProvider.d.ts

@@ -0,0 +1,33 @@
+export interface AirdraftTokenProviderOptions {
+    /**
+     * Airdraft project API key (`ntk_*`). Typically from
+     * `process.env.AIRDRAFT_PROJECT_KEY`.
+     */
+    projectKey: string;
+    /**
+     * Override the relay base URL. Reads `AIRDRAFT_API_URL` env var when omitted.
+     * Default: `https://api.airdraft.space`.
+     */
+    relayUrl?: string;
+}
+/**
+ * Returns a `tokenProvider` function for use with `GitHubAdapter` in mode 2
+ * (self-hosted + Airdraft shared GitHub App).
+ *
+ * Exchanges the project API key for a GitHub installation access token via the
+ * Airdraft token relay API. Tokens are cached in-memory for the lifetime of
+ * the process and refreshed 5 minutes before expiry.
+ *
+ * ```ts
+ * import { createAirdraftTokenProvider } from '@airdraft/next'
+ *
+ * new GitHubAdapter({
+ *   tokenProvider: createAirdraftTokenProvider({
+ *     projectKey: process.env.AIRDRAFT_PROJECT_KEY!,
+ *   }),
+ *   repo: process.env.GITCMS_REPO!,
+ * })
+ * ```
+ */
+export declare function createAirdraftTokenProvider(options: AirdraftTokenProviderOptions): () => Promise<string>;
+//# sourceMappingURL=tokenProvider.d.ts.map

package/dist/tokenProvider.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tokenProvider.d.ts","sourceRoot":"","sources":["../src/tokenProvider.ts"],"names":[],"mappings":"AAMA,MAAM,WAAW,4BAA4B;IAC3C;;;OAGG;IACH,UAAU,EAAE,MAAM,CAAA;IAClB;;;OAGG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAA;CAClB;AAeD;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAgB,2BAA2B,CACzC,OAAO,EAAE,4BAA4B,GACpC,MAAM,OAAO,CAAC,MAAM,CAAC,CAkDvB"}

package/dist/tokenProvider.js

@@ -0,0 +1,68 @@
+import { AdapterError } from '@airdraft/core';
+// ---------------------------------------------------------------------------
+// createAirdraftTokenProvider
+// ---------------------------------------------------------------------------
+const RELAY_PATH = '/v1/github/token';
+const EXPIRY_BUFFER_MS = 5 * 60 * 1000; // refresh 5 minutes before expiry
+/**
+ * Returns a `tokenProvider` function for use with `GitHubAdapter` in mode 2
+ * (self-hosted + Airdraft shared GitHub App).
+ *
+ * Exchanges the project API key for a GitHub installation access token via the
+ * Airdraft token relay API. Tokens are cached in-memory for the lifetime of
+ * the process and refreshed 5 minutes before expiry.
+ *
+ * ```ts
+ * import { createAirdraftTokenProvider } from '@airdraft/next'
+ *
+ * new GitHubAdapter({
+ *   tokenProvider: createAirdraftTokenProvider({
+ *     projectKey: process.env.AIRDRAFT_PROJECT_KEY!,
+ *   }),
+ *   repo: process.env.GITCMS_REPO!,
+ * })
+ * ```
+ */
+export function createAirdraftTokenProvider(options) {
+    const { projectKey } = options;
+    const baseUrl = options.relayUrl ??
+        (typeof process !== 'undefined' ? process.env['AIRDRAFT_API_URL'] : undefined) ??
+        'https://api.airdraft.space';
+    if (!projectKey || !projectKey.startsWith('ntk_')) {
+        throw new AdapterError('createAirdraftTokenProvider: projectKey must be a valid ntk_ API key');
+    }
+    const relayUrl = `${baseUrl.replace(/\/$/, '')}${RELAY_PATH}`;
+    let cached = null;
+    return async function tokenProvider() {
+        // Return cached token if still fresh
+        if (cached && cached.expiresAt - Date.now() > EXPIRY_BUFFER_MS) {
+            return cached.token;
+        }
+        const res = await fetch(relayUrl, {
+            method: 'POST',
+            headers: {
+                Authorization: `Bearer ${projectKey}`,
+                Accept: 'application/json',
+            },
+        });
+        if (res.status === 401) {
+            throw new AdapterError('Airdraft token relay: invalid or revoked project API key (INVALID_KEY)');
+        }
+        if (res.status === 404) {
+            throw new AdapterError('Airdraft token relay: project has no GitHub connection (GITHUB_NOT_CONNECTED)');
+        }
+        if (res.status === 503) {
+            throw new AdapterError('Airdraft token relay: GitHub token API unavailable (GITHUB_UNAVAILABLE)');
+        }
+        if (!res.ok) {
+            throw new AdapterError(`Airdraft token relay: unexpected status ${res.status}`);
+        }
+        const body = await res.json();
+        cached = {
+            token: body.token,
+            expiresAt: new Date(body.expiresAt).getTime(),
+        };
+        return cached.token;
+    };
+}
+//# sourceMappingURL=tokenProvider.js.map

package/dist/tokenProvider.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tokenProvider.js","sourceRoot":"","sources":["../src/tokenProvider.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAA;AAyB7C,8EAA8E;AAC9E,8BAA8B;AAC9B,8EAA8E;AAE9E,MAAM,UAAU,GAAG,kBAAkB,CAAA;AACrC,MAAM,gBAAgB,GAAG,CAAC,GAAG,EAAE,GAAG,IAAI,CAAA,CAAC,kCAAkC;AAEzE;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,UAAU,2BAA2B,CACzC,OAAqC;IAErC,MAAM,EAAE,UAAU,EAAE,GAAG,OAAO,CAAA;IAC9B,MAAM,OAAO,GACX,OAAO,CAAC,QAAQ;QAChB,CAAC,OAAO,OAAO,KAAK,WAAW,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAC9E,4BAA4B,CAAA;IAE9B,IAAI,CAAC,UAAU,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;QAClD,MAAM,IAAI,YAAY,CACpB,sEAAsE,CACvE,CAAA;IACH,CAAC;IAED,MAAM,QAAQ,GAAG,GAAG,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,GAAG,UAAU,EAAE,CAAA;IAC7D,IAAI,MAAM,GAAuB,IAAI,CAAA;IAErC,OAAO,KAAK,UAAU,aAAa;QACjC,qCAAqC;QACrC,IAAI,MAAM,IAAI,MAAM,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,gBAAgB,EAAE,CAAC;YAC/D,OAAO,MAAM,CAAC,KAAK,CAAA;QACrB,CAAC;QAED,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,QAAQ,EAAE;YAChC,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,aAAa,EAAE,UAAU,UAAU,EAAE;gBACrC,MAAM,EAAE,kBAAkB;aAC3B;SACF,CAAC,CAAA;QAEF,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;YACvB,MAAM,IAAI,YAAY,CAAC,wEAAwE,CAAC,CAAA;QAClG,CAAC;QACD,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;YACvB,MAAM,IAAI,YAAY,CAAC,+EAA+E,CAAC,CAAA;QACzG,CAAC;QACD,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;YACvB,MAAM,IAAI,YAAY,CAAC,yEAAyE,CAAC,CAAA;QACnG,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YACZ,MAAM,IAAI,YAAY,CAAC,2CAA2C,GAAG,CAAC,MAAM,EAAE,CAAC,CAAA;QACjF,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAA0C,CAAA;QACrE,MAAM,GAAG;YACP,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,SAAS,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE;SAC9C,CAAA;QACD,OAAO,MAAM,CAAC,KAAK,CAAA;IACrB,CAAC,CAAA;AACH,CAAC"}

package/package.json

@@ -0,0 +1,50 @@
+{
+  "name": "@airdraft/next",
+  "version": "0.1.0",
+  "description": "Airdraft Next.js App Router integration — route handlers, OpenAPI, revalidation",
+  "type": "module",
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "import": "./dist/index.js",
+      "types": "./dist/index.d.ts"
+    },
+    "./forwarder": {
+      "import": "./dist/forwarder.js",
+      "types": "./dist/forwarder.d.ts"
+    }
+  },
+  "files": ["dist", "README.md", "CHANGELOG.md"],
+  "scripts": {
+    "build": "tsc",
+    "dev": "tsc --watch",
+    "clean": "rm -rf dist",
+    "test": "vitest run",
+    "test:watch": "vitest",
+    "typecheck": "tsc --noEmit",
+    "prepublishOnly": "npm run build",
+    "release": "standard-version",
+    "release:patch": "standard-version --release-as patch",
+    "release:minor": "standard-version --release-as minor",
+    "release:major": "standard-version --release-as major"
+  },
+  "publishConfig": { "access": "public" },
+  "license": "MIT",
+  "peerDependencies": {
+    "next": ">=14.0.0"
+  },
+  "devDependencies": {
+    "@types/node": "^20.0.0",
+    "next": "^14.0.0",
+    "standard-version": "^9.5.0",
+    "tsx": "^4.7.0",
+    "typescript": "^5.4.0",
+    "vitest": "^1.5.0"
+  },
+  "dependencies": {
+    "@airdraft/core": "*",
+    "zod": "^3.23.0"
+  },
+  "engines": { "node": ">=18.0.0" }
+}