@ampless/backend 1.0.0-alpha.26 → 1.0.0-alpha.28

package/dist/events/dispatcher.js

@@ -6,7 +6,9 @@ import {
   SQSClient,
   SendMessageBatchCommand
 } from "@aws-sdk/client-sqs";
-import { detectContentEvents } from "ampless";
+import {
+  detectContentEvents
+} from "ampless";
 function requireEnv(name) {
   const v = process.env[name];
   if (!v) throw new Error(`event-dispatcher: missing required env var ${name}`);
@@ -20,15 +22,37 @@ function tableNameFromArn(arn) {
   const match = arn.match(/:table\/([^/]+)/);
   return match ? match[1] : null;
 }
+function projectPost(raw) {
+  if (!raw || !raw.postId || !raw.slug || !raw.title) return null;
+  return {
+    postId: raw.postId,
+    slug: raw.slug,
+    title: raw.title,
+    status: raw.status ?? "draft",
+    publishedAt: raw.publishedAt,
+    tags: raw.tags
+  };
+}
 function emitContentEvents(record, timestamp) {
   const oldItem = record.dynamodb?.OldImage ? unmarshall(record.dynamodb.OldImage) : null;
   const newItem = record.dynamodb?.NewImage ? unmarshall(record.dynamodb.NewImage) : null;
+  const events = [];
+  const previous = oldItem ? projectPost(oldItem) : null;
+  const next = newItem ? projectPost(newItem) : null;
+  if (previous || next) {
+    const indexPayload = { previous, next };
+    events.push({
+      type: "post.index.refresh",
+      payload: indexPayload,
+      timestamp
+    });
+  }
   const types = detectContentEvents({
     eventName: record.eventName,
     oldStatus: oldItem?.status,
     newStatus: newItem?.status
   });
-  if (types.length === 0) return [];
+  if (types.length === 0) return events;
   const item = newItem ?? oldItem ?? {};
   const payload = {
     postId: item.postId,
@@ -38,7 +62,10 @@ function emitContentEvents(record, timestamp) {
     publishedAt: item.publishedAt,
     tags: item.tags
   };
-  return types.map((type) => ({ type, payload, timestamp }));
+  for (const type of types) {
+    events.push({ type, payload, timestamp });
+  }
+  return events;
 }
 function emitKvEvents(record, timestamp) {
   const item = record.dynamodb?.NewImage ?? record.dynamodb?.OldImage ? unmarshall(record.dynamodb.NewImage ?? record.dynamodb.OldImage) : {};

package/dist/events/processor-trusted.js

@@ -3,10 +3,44 @@ import "../chunk-BYXBJQAS.js";
 // src/events/processor-trusted.ts
 import { S3Client, PutObjectCommand } from "@aws-sdk/client-s3";
 import { DynamoDBClient } from "@aws-sdk/client-dynamodb";
-import { DynamoDBDocumentClient, QueryCommand } from "@aws-sdk/lib-dynamodb";
+import {
+  DynamoDBDocumentClient,
+  DeleteCommand,
+  PutCommand,
+  QueryCommand
+} from "@aws-sdk/lib-dynamodb";
 import {
   formatPublicAssetUrl
 } from "ampless";
+
+// src/events/posttag-sync.ts
+function computePostTagDiff(payload) {
+  const previousEntries = postTagItemsFromPost(payload.previous);
+  const nextEntries = postTagItemsFromPost(payload.next);
+  const nextKeys = new Set(nextEntries.map(itemKey));
+  const deletes = previousEntries.filter((p) => !nextKeys.has(itemKey(p))).map((p) => ({ tag: p.tag, publishedAtPostId: p.publishedAtPostId }));
+  return { deletes, puts: nextEntries };
+}
+function postTagItemsFromPost(p) {
+  if (!p) return [];
+  if (p.status !== "published") return [];
+  if (!p.publishedAt) return [];
+  const tags = Array.isArray(p.tags) ? p.tags : [];
+  return tags.filter((t) => typeof t === "string" && t.length > 0).map((tag) => ({
+    tag,
+    publishedAtPostId: `${p.publishedAt}#${p.postId}`,
+    postId: p.postId,
+    publishedAt: p.publishedAt,
+    slug: p.slug,
+    title: p.title,
+    tags
+  }));
+}
+function itemKey(item) {
+  return `${item.tag}|${item.publishedAtPostId}`;
+}
+
+// src/events/processor-trusted.ts
 function requireEnv(name) {
   const v = process.env[name];
   if (!v) throw new Error(`processor-trusted: missing required env var ${name}`);
@@ -30,6 +64,7 @@ function createProcessorTrustedHandler(opts) {
   const BUCKET = requireEnv("AMPLESS_BUCKET_NAME");
   const POST_TABLE = requireEnv("AMPLESS_POST_TABLE");
   const KV_TABLE = requireEnv("AMPLESS_KV_TABLE");
+  const POSTTAG_TABLE = requireEnv("AMPLESS_POSTTAG_TABLE");
   const REGION = requireEnv("AWS_REGION");
   async function listPublished() {
     const items = [];
@@ -82,6 +117,31 @@ function createProcessorTrustedHandler(opts) {
       }
     };
   }
+  async function rebuildPostTagsForPost(payload) {
+    const { deletes, puts } = computePostTagDiff(payload);
+    await Promise.all([
+      ...deletes.map(
+        (key) => ddb.send(
+          new DeleteCommand({
+            TableName: POSTTAG_TABLE,
+            Key: key
+          })
+        )
+      ),
+      ...puts.map(
+        (item) => ddb.send(
+          new PutCommand({
+            TableName: POSTTAG_TABLE,
+            Item: item
+          })
+        )
+      )
+    ]);
+    const postId = payload.next?.postId ?? payload.previous?.postId ?? "(unknown)";
+    console.log(
+      `[posttag-sync] postId=${postId} removed=${deletes.length} upserted=${puts.length}`
+    );
+  }
   async function rebuildSiteSettingsCache() {
     const settings = {};
     let exclusiveStartKey;
@@ -136,6 +196,14 @@ function createProcessorTrustedHandler(opts) {
           throw err;
         }
       }
+      if (parsed.type === "post.index.refresh") {
+        try {
+          await rebuildPostTagsForPost(parsed.payload);
+        } catch (err) {
+          console.error("[trusted-processor] posttag-sync failed", err);
+          throw err;
+        }
+      }
       for (const plugin of trustedPlugins) {
         const hook = plugin.hooks?.[parsed.type];
         if (!hook) continue;

package/dist/functions/mcp-handler.js

@@ -5,7 +5,7 @@ import { DynamoDBClient } from "@aws-sdk/client-dynamodb";
 import { DynamoDBDocumentClient, GetCommand } from "@aws-sdk/lib-dynamodb";
 import { createHash } from "crypto";
 
-// ../mcp-server/dist/chunk-HVSLKTKC.js
+// ../mcp-server/dist/chunk-WAP4WAMQ.js
 import {
   decodeAwsJson
 } from "ampless";
@@ -159,92 +159,6 @@ async function getPost(client, args) {
   const item = data.listPosts.items[0];
   return item ? toCorePost(item) : null;
 }
-function entries(post) {
-  if (post.status !== "published" || !post.publishedAt || !post.tags?.length) return [];
-  return post.tags.map((tag) => ({
-    tag,
-    publishedAtPostId: `${post.publishedAt}#${post.postId}`
-  }));
-}
-function entryKey(e) {
-  return `${e.tag}|${e.publishedAtPostId}`;
-}
-var CREATE_POST_TAG = (
-  /* GraphQL */
-  `
-  mutation CreatePostTag($input: CreatePostTagInput!) {
-    createPostTag(input: $input) {
-      tag
-      publishedAtPostId
-    }
-  }
-`
-);
-var UPDATE_POST_TAG = (
-  /* GraphQL */
-  `
-  mutation UpdatePostTag($input: UpdatePostTagInput!) {
-    updatePostTag(input: $input) {
-      tag
-      publishedAtPostId
-    }
-  }
-`
-);
-var DELETE_POST_TAG = (
-  /* GraphQL */
-  `
-  mutation DeletePostTag($input: DeletePostTagInput!) {
-    deletePostTag(input: $input) {
-      tag
-      publishedAtPostId
-    }
-  }
-`
-);
-async function syncPostTags(client, post, oldPost) {
-  const oldEntries = oldPost ? entries(oldPost) : [];
-  const newEntries = entries(post);
-  const oldKeys = new Set(oldEntries.map(entryKey));
-  const newKeys = new Set(newEntries.map(entryKey));
-  await Promise.all(
-    oldEntries.filter((e) => !newKeys.has(entryKey(e))).map(
-      (e) => client.query(DELETE_POST_TAG, {
-        input: { tag: e.tag, publishedAtPostId: e.publishedAtPostId }
-      })
-    )
-  );
-  await Promise.all(
-    newEntries.filter((e) => !oldKeys.has(entryKey(e))).map(
-      (e) => client.query(CREATE_POST_TAG, {
-        input: {
-          tag: e.tag,
-          publishedAtPostId: e.publishedAtPostId,
-          postId: post.postId,
-          publishedAt: post.publishedAt,
-          slug: post.slug,
-          title: post.title,
-          excerpt: post.excerpt,
-          tags: post.tags ?? []
-        }
-      })
-    )
-  );
-  await Promise.all(
-    newEntries.filter((e) => oldKeys.has(entryKey(e))).map(
-      (e) => client.query(UPDATE_POST_TAG, {
-        input: {
-          tag: e.tag,
-          publishedAtPostId: e.publishedAtPostId,
-          slug: post.slug,
-          title: post.title,
-          excerpt: post.excerpt,
-          tags: post.tags ?? []
-        }
-      })
-    )
-  );
-}
 var MUTATION = (
   /* GraphQL */
   `
@@ -312,9 +226,7 @@ async function createPost(client, args) {
       metadata: args.metadata !== void 0 ? encodeAwsJson(args.metadata) : void 0
     }
   });
-  const created = toCorePost(data.createPost);
-  await syncPostTags(client, created, null);
-  return created;
+  return toCorePost(data.createPost);
 }
 var MUTATION2 = (
   /* GraphQL */
@@ -364,7 +276,6 @@ var updatePostSchema = {
   }
 };
 async function updatePost(client, args) {
-  const oldPost = await getPost(client, { postId: args.postId });
   const input = { postId: args.postId };
   if (args.slug !== void 0) input.slug = args.slug;
   if (args.title !== void 0) input.title = args.title;
@@ -376,9 +287,7 @@ async function updatePost(client, args) {
   if (args.tags !== void 0) input.tags = args.tags;
   if (args.metadata !== void 0) input.metadata = encodeAwsJson2(args.metadata);
   const data = await client.query(MUTATION2, { input });
-  const updated = toCorePost(data.updatePost);
-  await syncPostTags(client, updated, oldPost);
-  return updated;
+  return toCorePost(data.updatePost);
 }
 var MUTATION3 = (
   /* GraphQL */
@@ -398,10 +307,6 @@ var deletePostSchema = {
   }
 };
 async function deletePost(client, args) {
-  const oldPost = await getPost(client, { postId: args.postId });
-  if (oldPost) {
-    await syncPostTags(client, { ...oldPost, status: "draft" }, oldPost);
-  }
   const data = await client.query(MUTATION3, { input: { postId: args.postId } });
   return { deleted: data.deletePost };
 }
@@ -526,11 +431,11 @@ function getSchema() {
 var DEFAULT_MAX_BYTES = 50 * 1024 * 1024;
 function extractZipFromBuffer(buffer, opts = {}) {
   const maxBytes = opts.maxBytes ?? DEFAULT_MAX_BYTES;
-  const entries2 = unzipSync(buffer);
+  const entries = unzipSync(buffer);
   const files = [];
   const issues = [];
   let totalBytes = 0;
-  for (const [name, data] of Object.entries(entries2)) {
+  for (const [name, data] of Object.entries(entries)) {
     if (name.endsWith("/")) continue;
     const reason = validateBundlePath(name);
     if (reason) {
@@ -588,7 +493,6 @@ async function upsertStaticPost(graphql, slug, body, fields) {
     }
     const data2 = await graphql.query(UPDATE_MUTATION, { input: input2 });
     const updated = toCorePost(data2.updatePost);
-    await syncPostTags(graphql, updated, existing);
     return { post: updated, created: false };
   }
   if (!fields.title) {
@@ -613,7 +517,6 @@ async function upsertStaticPost(graphql, slug, body, fields) {
   if (fields.metadata !== void 0) input.metadata = encodeAwsJson3(fields.metadata);
   const data = await graphql.query(CREATE_MUTATION, { input });
   const created = toCorePost(data.createPost);
-  await syncPostTags(graphql, created, null);
   return { post: created, created: true };
 }
 var uploadStaticBundleSchema = {

package/dist/index.js

@@ -133,25 +133,30 @@ function defineAmplessBackend(opts) {
     })
   );
   kvTable.grantReadData(trustedFn);
+  const postTagTable = backend.data.resources.tables["PostTag"];
+  postTagTable.grantWriteData(trustedFn);
   trustedFn.addToRolePolicy(
     new PolicyStatement({
       effect: Effect.ALLOW,
       actions: ["s3:PutObject", "s3:DeleteObject"],
       resources: [
         `${backend.storage.resources.bucket.bucketArn}/public/plugins/*`,
-        // Built-in cache: rebuildSiteSettingsCache writes the per-site
-        // JSON the public site reads. Without this entry the
-        // `site.settings.updated` handler S3 PutObject call fails
-        // silently (CloudWatch shows AccessDenied; the public site never
-        // sees theme.active overrides because the cache file never
-        // appears).
-        `${backend.storage.resources.bucket.bucketArn}/public/site-settings/*`
+        // Built-in cache: rebuildSiteSettingsCache writes the single
+        // JSON file the public site reads. Exact-match resource —
+        // historically this was `public/site-settings/<siteId>.json`
+        // (multi-site era) and the wildcard pattern that worked then
+        // (`public/site-settings/*`) does NOT match the current
+        // single-file key `public/site-settings.json`. Wrong pattern
+        // fails the PutObject silently with AccessDenied, so the
+        // public site never sees admin-side theme / settings changes.
+        `${backend.storage.resources.bucket.bucketArn}/public/site-settings.json`
       ]
     })
   );
   trustedFn.addEnvironment("AMPLESS_BUCKET_NAME", backend.storage.resources.bucket.bucketName);
   trustedFn.addEnvironment("AMPLESS_POST_TABLE", postTable.tableName);
   trustedFn.addEnvironment("AMPLESS_KV_TABLE", kvTable.tableName);
+  trustedFn.addEnvironment("AMPLESS_POSTTAG_TABLE", postTagTable.tableName);
   const untrustedFn = backend.processorUntrusted.resources.lambda;
   untrustedFn.addEventSource(new SqsEventSource(untrustedQueue, { batchSize: 5 }));
   const graphqlApi = backend.data.resources.cfnResources.cfnGraphqlApi;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ampless/backend",
-  "version": "1.0.0-alpha.26",
+  "version": "1.0.0-alpha.28",
   "description": "Amplify Gen 2 backend factories for ampless: auth, data, storage, event processors, API key renewer",
   "license": "MIT",
   "type": "module",
@@ -65,8 +65,8 @@
     "@smithy/protocol-http": "^5.4.4",
     "@smithy/signature-v4": "^5.4.4",
     "fflate": "^0.8.3",
-    "ampless": "1.0.0-alpha.14",
-    "@ampless/mcp-server": "1.0.0-alpha.16"
+    "ampless": "1.0.0-alpha.15",
+    "@ampless/mcp-server": "1.0.0-alpha.17"
   },
   "peerDependencies": {
     "@aws-amplify/backend": "^1",