@ampless/backend 1.0.0-alpha.27 → 1.0.0-alpha.29

package/dist/auth/post-confirmation.js

@@ -1,5 +1,3 @@
-import "../chunk-BYXBJQAS.js";
-
 // src/auth/post-confirmation.ts
 import {
   CognitoIdentityProviderClient,

package/dist/auth/user-admin.js

@@ -1,5 +1,3 @@
-import "../chunk-BYXBJQAS.js";
-
 // src/auth/user-admin.ts
 import {
   CognitoIdentityProviderClient,

package/dist/events/dispatcher.js

@@ -1,12 +1,12 @@
-import "../chunk-BYXBJQAS.js";
-
 // src/events/dispatcher.ts
 import { unmarshall } from "@aws-sdk/util-dynamodb";
 import {
   SQSClient,
   SendMessageBatchCommand
 } from "@aws-sdk/client-sqs";
-import { detectContentEvents } from "ampless";
+import {
+  detectContentEvents
+} from "ampless";
 function requireEnv(name) {
   const v = process.env[name];
   if (!v) throw new Error(`event-dispatcher: missing required env var ${name}`);
@@ -20,15 +20,37 @@ function tableNameFromArn(arn) {
   const match = arn.match(/:table\/([^/]+)/);
   return match ? match[1] : null;
 }
+function projectPost(raw) {
+  if (!raw || !raw.postId || !raw.slug || !raw.title) return null;
+  return {
+    postId: raw.postId,
+    slug: raw.slug,
+    title: raw.title,
+    status: raw.status ?? "draft",
+    publishedAt: raw.publishedAt,
+    tags: raw.tags
+  };
+}
 function emitContentEvents(record, timestamp) {
   const oldItem = record.dynamodb?.OldImage ? unmarshall(record.dynamodb.OldImage) : null;
   const newItem = record.dynamodb?.NewImage ? unmarshall(record.dynamodb.NewImage) : null;
+  const events = [];
+  const previous = oldItem ? projectPost(oldItem) : null;
+  const next = newItem ? projectPost(newItem) : null;
+  if (previous || next) {
+    const indexPayload = { previous, next };
+    events.push({
+      type: "post.index.refresh",
+      payload: indexPayload,
+      timestamp
+    });
+  }
   const types = detectContentEvents({
     eventName: record.eventName,
     oldStatus: oldItem?.status,
     newStatus: newItem?.status
   });
-  if (types.length === 0) return [];
+  if (types.length === 0) return events;
   const item = newItem ?? oldItem ?? {};
   const payload = {
     postId: item.postId,
@@ -38,7 +60,10 @@ function emitContentEvents(record, timestamp) {
     publishedAt: item.publishedAt,
     tags: item.tags
   };
-  return types.map((type) => ({ type, payload, timestamp }));
+  for (const type of types) {
+    events.push({ type, payload, timestamp });
+  }
+  return events;
 }
 function emitKvEvents(record, timestamp) {
   const item = record.dynamodb?.NewImage ?? record.dynamodb?.OldImage ? unmarshall(record.dynamodb.NewImage ?? record.dynamodb.OldImage) : {};

package/dist/events/processor-trusted.js

@@ -1,12 +1,44 @@
-import "../chunk-BYXBJQAS.js";
-
 // src/events/processor-trusted.ts
 import { S3Client, PutObjectCommand } from "@aws-sdk/client-s3";
 import { DynamoDBClient } from "@aws-sdk/client-dynamodb";
-import { DynamoDBDocumentClient, QueryCommand } from "@aws-sdk/lib-dynamodb";
+import {
+  DynamoDBDocumentClient,
+  DeleteCommand,
+  PutCommand,
+  QueryCommand
+} from "@aws-sdk/lib-dynamodb";
 import {
   formatPublicAssetUrl
 } from "ampless";
+
+// src/events/posttag-sync.ts
+function computePostTagDiff(payload) {
+  const previousEntries = postTagItemsFromPost(payload.previous);
+  const nextEntries = postTagItemsFromPost(payload.next);
+  const nextKeys = new Set(nextEntries.map(itemKey));
+  const deletes = previousEntries.filter((p) => !nextKeys.has(itemKey(p))).map((p) => ({ tag: p.tag, publishedAtPostId: p.publishedAtPostId }));
+  return { deletes, puts: nextEntries };
+}
+function postTagItemsFromPost(p) {
+  if (!p) return [];
+  if (p.status !== "published") return [];
+  if (!p.publishedAt) return [];
+  const tags = Array.isArray(p.tags) ? p.tags : [];
+  return tags.filter((t) => typeof t === "string" && t.length > 0).map((tag) => ({
+    tag,
+    publishedAtPostId: `${p.publishedAt}#${p.postId}`,
+    postId: p.postId,
+    publishedAt: p.publishedAt,
+    slug: p.slug,
+    title: p.title,
+    tags
+  }));
+}
+function itemKey(item) {
+  return `${item.tag}|${item.publishedAtPostId}`;
+}
+
+// src/events/processor-trusted.ts
 function requireEnv(name) {
   const v = process.env[name];
   if (!v) throw new Error(`processor-trusted: missing required env var ${name}`);
@@ -30,6 +62,7 @@ function createProcessorTrustedHandler(opts) {
   const BUCKET = requireEnv("AMPLESS_BUCKET_NAME");
   const POST_TABLE = requireEnv("AMPLESS_POST_TABLE");
   const KV_TABLE = requireEnv("AMPLESS_KV_TABLE");
+  const POSTTAG_TABLE = requireEnv("AMPLESS_POSTTAG_TABLE");
   const REGION = requireEnv("AWS_REGION");
   async function listPublished() {
     const items = [];
@@ -82,6 +115,31 @@ function createProcessorTrustedHandler(opts) {
       }
     };
   }
+  async function rebuildPostTagsForPost(payload) {
+    const { deletes, puts } = computePostTagDiff(payload);
+    await Promise.all([
+      ...deletes.map(
+        (key) => ddb.send(
+          new DeleteCommand({
+            TableName: POSTTAG_TABLE,
+            Key: key
+          })
+        )
+      ),
+      ...puts.map(
+        (item) => ddb.send(
+          new PutCommand({
+            TableName: POSTTAG_TABLE,
+            Item: item
+          })
+        )
+      )
+    ]);
+    const postId = payload.next?.postId ?? payload.previous?.postId ?? "(unknown)";
+    console.log(
+      `[posttag-sync] postId=${postId} removed=${deletes.length} upserted=${puts.length}`
+    );
+  }
   async function rebuildSiteSettingsCache() {
     const settings = {};
     let exclusiveStartKey;
@@ -136,6 +194,14 @@ function createProcessorTrustedHandler(opts) {
           throw err;
         }
       }
+      if (parsed.type === "post.index.refresh") {
+        try {
+          await rebuildPostTagsForPost(parsed.payload);
+        } catch (err) {
+          console.error("[trusted-processor] posttag-sync failed", err);
+          throw err;
+        }
+      }
       for (const plugin of trustedPlugins) {
         const hook = plugin.hooks?.[parsed.type];
         if (!hook) continue;

package/dist/events/processor-untrusted.js

@@ -1,5 +1,3 @@
-import "../chunk-BYXBJQAS.js";
-
 // src/events/processor-untrusted.ts
 function createProcessorUntrustedHandler(opts) {
   const untrustedPlugins = (opts.plugins ?? []).filter(

package/dist/functions/api-key-renewer.js

@@ -1,5 +1,3 @@
-import "../chunk-BYXBJQAS.js";
-
 // src/functions/api-key-renewer.ts
 import {
   AppSyncClient,

package/dist/functions/mcp-handler.js

@@ -1,11 +1,9 @@
-import "../chunk-BYXBJQAS.js";
-
 // src/functions/mcp-handler.ts
 import { DynamoDBClient } from "@aws-sdk/client-dynamodb";
 import { DynamoDBDocumentClient, GetCommand } from "@aws-sdk/lib-dynamodb";
 import { createHash } from "crypto";
 
-// ../mcp-server/dist/chunk-HVSLKTKC.js
+// ../mcp-server/dist/index.js
 import {
   decodeAwsJson
 } from "ampless";
@@ -21,7 +19,7 @@ import {
   pickDefaultEntrypoint,
   validateBundle
 } from "ampless";
-import { unzipSync, strFromU8 } from "fflate";
+import { createRequire } from "module";
 import {
   validateBundlePath,
   stripCommonPrefix
@@ -159,92 +157,6 @@ async function getPost(client, args) {
   const item = data.listPosts.items[0];
   return item ? toCorePost(item) : null;
 }
-function entries(post) {
-  if (post.status !== "published" || !post.publishedAt || !post.tags?.length) return [];
-  return post.tags.map((tag) => ({
-    tag,
-    publishedAtPostId: `${post.publishedAt}#${post.postId}`
-  }));
-}
-function entryKey(e) {
-  return `${e.tag}|${e.publishedAtPostId}`;
-}
-var CREATE_POST_TAG = (
-  /* GraphQL */
-  `
-  mutation CreatePostTag($input: CreatePostTagInput!) {
-    createPostTag(input: $input) {
-      tag
-      publishedAtPostId
-    }
-  }
-`
-);
-var UPDATE_POST_TAG = (
-  /* GraphQL */
-  `
-  mutation UpdatePostTag($input: UpdatePostTagInput!) {
-    updatePostTag(input: $input) {
-      tag
-      publishedAtPostId
-    }
-  }
-`
-);
-var DELETE_POST_TAG = (
-  /* GraphQL */
-  `
-  mutation DeletePostTag($input: DeletePostTagInput!) {
-    deletePostTag(input: $input) {
-      tag
-      publishedAtPostId
-    }
-  }
-`
-);
-async function syncPostTags(client, post, oldPost) {
-  const oldEntries = oldPost ? entries(oldPost) : [];
-  const newEntries = entries(post);
-  const oldKeys = new Set(oldEntries.map(entryKey));
-  const newKeys = new Set(newEntries.map(entryKey));
-  await Promise.all(
-    oldEntries.filter((e) => !newKeys.has(entryKey(e))).map(
-      (e) => client.query(DELETE_POST_TAG, {
-        input: { tag: e.tag, publishedAtPostId: e.publishedAtPostId }
-      })
-    )
-  );
-  await Promise.all(
-    newEntries.filter((e) => !oldKeys.has(entryKey(e))).map(
-      (e) => client.query(CREATE_POST_TAG, {
-        input: {
-          tag: e.tag,
-          publishedAtPostId: e.publishedAtPostId,
-          postId: post.postId,
-          publishedAt: post.publishedAt,
-          slug: post.slug,
-          title: post.title,
-          excerpt: post.excerpt,
-          tags: post.tags ?? []
-        }
-      })
-    )
-  );
-  await Promise.all(
-    newEntries.filter((e) => oldKeys.has(entryKey(e))).map(
-      (e) => client.query(UPDATE_POST_TAG, {
-        input: {
-          tag: e.tag,
-          publishedAtPostId: e.publishedAtPostId,
-          slug: post.slug,
-          title: post.title,
-          excerpt: post.excerpt,
-          tags: post.tags ?? []
-        }
-      })
-    )
-  );
-}
 var MUTATION = (
   /* GraphQL */
   `
@@ -312,9 +224,7 @@ async function createPost(client, args) {
       metadata: args.metadata !== void 0 ? encodeAwsJson(args.metadata) : void 0
     }
   });
-  const created = toCorePost(data.createPost);
-  await syncPostTags(client, created, null);
-  return created;
+  return toCorePost(data.createPost);
 }
 var MUTATION2 = (
   /* GraphQL */
@@ -364,7 +274,6 @@ var updatePostSchema = {
   }
 };
 async function updatePost(client, args) {
-  const oldPost = await getPost(client, { postId: args.postId });
   const input = { postId: args.postId };
   if (args.slug !== void 0) input.slug = args.slug;
   if (args.title !== void 0) input.title = args.title;
@@ -376,9 +285,7 @@ async function updatePost(client, args) {
   if (args.tags !== void 0) input.tags = args.tags;
   if (args.metadata !== void 0) input.metadata = encodeAwsJson2(args.metadata);
   const data = await client.query(MUTATION2, { input });
-  const updated = toCorePost(data.updatePost);
-  await syncPostTags(client, updated, oldPost);
-  return updated;
+  return toCorePost(data.updatePost);
 }
 var MUTATION3 = (
   /* GraphQL */
@@ -398,10 +305,6 @@ var deletePostSchema = {
   }
 };
 async function deletePost(client, args) {
-  const oldPost = await getPost(client, { postId: args.postId });
-  if (oldPost) {
-    await syncPostTags(client, { ...oldPost, status: "draft" }, oldPost);
-  }
   const data = await client.query(MUTATION3, { input: { postId: args.postId } });
   return { deleted: data.deletePost };
 }
@@ -523,14 +426,494 @@ function getSchema() {
     }
   };
 }
+var require2 = createRequire("/");
+var _a;
+var Worker;
+var isMarkedAsUntransferable;
+try {
+  _a = require2("worker_threads"), Worker = _a.Worker, isMarkedAsUntransferable = _a.isMarkedAsUntransferable;
+} catch (e) {
+}
+var u8 = Uint8Array;
+var u16 = Uint16Array;
+var i32 = Int32Array;
+var fleb = new u8([
+  0,
+  0,
+  0,
+  0,
+  0,
+  0,
+  0,
+  0,
+  1,
+  1,
+  1,
+  1,
+  2,
+  2,
+  2,
+  2,
+  3,
+  3,
+  3,
+  3,
+  4,
+  4,
+  4,
+  4,
+  5,
+  5,
+  5,
+  5,
+  0,
+  /* unused */
+  0,
+  0,
+  /* impossible */
+  0
+]);
+var fdeb = new u8([
+  0,
+  0,
+  0,
+  0,
+  1,
+  1,
+  2,
+  2,
+  3,
+  3,
+  4,
+  4,
+  5,
+  5,
+  6,
+  6,
+  7,
+  7,
+  8,
+  8,
+  9,
+  9,
+  10,
+  10,
+  11,
+  11,
+  12,
+  12,
+  13,
+  13,
+  /* unused */
+  0,
+  0
+]);
+var clim = new u8([16, 17, 18, 0, 8, 7, 9, 6, 10, 5, 11, 4, 12, 3, 13, 2, 14, 1, 15]);
+var freb = function(eb, start) {
+  var b = new u16(31);
+  for (var i2 = 0; i2 < 31; ++i2) {
+    b[i2] = start += 1 << eb[i2 - 1];
+  }
+  var r = new i32(b[30]);
+  for (var i2 = 1; i2 < 30; ++i2) {
+    for (var j = b[i2]; j < b[i2 + 1]; ++j) {
+      r[j] = j - b[i2] << 5 | i2;
+    }
+  }
+  return { b, r };
+};
+var _a = freb(fleb, 2);
+var fl = _a.b;
+var revfl = _a.r;
+fl[28] = 258, revfl[258] = 28;
+var _b = freb(fdeb, 0);
+var fd = _b.b;
+var revfd = _b.r;
+var rev = new u16(32768);
+for (i = 0; i < 32768; ++i) {
+  x = (i & 43690) >> 1 | (i & 21845) << 1;
+  x = (x & 52428) >> 2 | (x & 13107) << 2;
+  x = (x & 61680) >> 4 | (x & 3855) << 4;
+  rev[i] = ((x & 65280) >> 8 | (x & 255) << 8) >> 1;
+}
+var x;
+var i;
+var hMap = (function(cd, mb, r) {
+  var s = cd.length;
+  var i2 = 0;
+  var l = new u16(mb);
+  for (; i2 < s; ++i2) {
+    if (cd[i2])
+      ++l[cd[i2] - 1];
+  }
+  var le = new u16(mb);
+  for (i2 = 1; i2 < mb; ++i2) {
+    le[i2] = le[i2 - 1] + l[i2 - 1] << 1;
+  }
+  var co;
+  if (r) {
+    co = new u16(1 << mb);
+    var rvb = 15 - mb;
+    for (i2 = 0; i2 < s; ++i2) {
+      if (cd[i2]) {
+        var sv = i2 << 4 | cd[i2];
+        var r_1 = mb - cd[i2];
+        var v = le[cd[i2] - 1]++ << r_1;
+        for (var m = v | (1 << r_1) - 1; v <= m; ++v) {
+          co[rev[v] >> rvb] = sv;
+        }
+      }
+    }
+  } else {
+    co = new u16(s);
+    for (i2 = 0; i2 < s; ++i2) {
+      if (cd[i2]) {
+        co[i2] = rev[le[cd[i2] - 1]++] >> 15 - cd[i2];
+      }
+    }
+  }
+  return co;
+});
+var flt = new u8(288);
+for (i = 0; i < 144; ++i)
+  flt[i] = 8;
+var i;
+for (i = 144; i < 256; ++i)
+  flt[i] = 9;
+var i;
+for (i = 256; i < 280; ++i)
+  flt[i] = 7;
+var i;
+for (i = 280; i < 288; ++i)
+  flt[i] = 8;
+var i;
+var fdt = new u8(32);
+for (i = 0; i < 32; ++i)
+  fdt[i] = 5;
+var i;
+var flrm = /* @__PURE__ */ hMap(flt, 9, 1);
+var fdrm = /* @__PURE__ */ hMap(fdt, 5, 1);
+var max = function(a) {
+  var m = a[0];
+  for (var i2 = 1; i2 < a.length; ++i2) {
+    if (a[i2] > m)
+      m = a[i2];
+  }
+  return m;
+};
+var bits = function(d, p, m) {
+  var o = p / 8 | 0;
+  return (d[o] | d[o + 1] << 8) >> (p & 7) & m;
+};
+var bits16 = function(d, p) {
+  var o = p / 8 | 0;
+  return (d[o] | d[o + 1] << 8 | d[o + 2] << 16) >> (p & 7);
+};
+var shft = function(p) {
+  return (p + 7) / 8 | 0;
+};
+var slc = function(v, s, e) {
+  if (s == null || s < 0)
+    s = 0;
+  if (e == null || e > v.length)
+    e = v.length;
+  return new u8(v.subarray(s, e));
+};
+var ec = [
+  "unexpected EOF",
+  "invalid block type",
+  "invalid length/literal",
+  "invalid distance",
+  "stream finished",
+  "no stream handler",
+  ,
+  // determined by compression function
+  "no callback",
+  "invalid UTF-8 data",
+  "extra field too long",
+  "date not in range 1980-2099",
+  "filename too long",
+  "stream finishing",
+  "invalid zip data"
+  // determined by unknown compression method
+];
+var err = function(ind, msg, nt) {
+  var e = new Error(msg || ec[ind]);
+  e.code = ind;
+  if (Error.captureStackTrace)
+    Error.captureStackTrace(e, err);
+  if (!nt)
+    throw e;
+  return e;
+};
+var inflt = function(dat, st, buf, dict) {
+  var sl = dat.length, dl = dict ? dict.length : 0;
+  if (!sl || st.f && !st.l)
+    return buf || new u8(0);
+  var noBuf = !buf;
+  var resize = noBuf || st.i != 2;
+  var noSt = st.i;
+  if (noBuf)
+    buf = new u8(sl * 3);
+  var cbuf = function(l2) {
+    var bl = buf.length;
+    if (l2 > bl) {
+      var nbuf = new u8(Math.max(bl * 2, l2));
+      nbuf.set(buf);
+      buf = nbuf;
+    }
+  };
+  var final = st.f || 0, pos = st.p || 0, bt = st.b || 0, lm = st.l, dm = st.d, lbt = st.m, dbt = st.n;
+  var tbts = sl * 8;
+  do {
+    if (!lm) {
+      final = bits(dat, pos, 1);
+      var type = bits(dat, pos + 1, 3);
+      pos += 3;
+      if (!type) {
+        var s = shft(pos) + 4, l = dat[s - 4] | dat[s - 3] << 8, t = s + l;
+        if (t > sl) {
+          if (noSt)
+            err(0);
+          break;
+        }
+        if (resize)
+          cbuf(bt + l);
+        buf.set(dat.subarray(s, t), bt);
+        st.b = bt += l, st.p = pos = t * 8, st.f = final;
+        continue;
+      } else if (type == 1)
+        lm = flrm, dm = fdrm, lbt = 9, dbt = 5;
+      else if (type == 2) {
+        var hLit = bits(dat, pos, 31) + 257, hcLen = bits(dat, pos + 10, 15) + 4;
+        var tl = hLit + bits(dat, pos + 5, 31) + 1;
+        pos += 14;
+        var ldt = new u8(tl);
+        var clt = new u8(19);
+        for (var i2 = 0; i2 < hcLen; ++i2) {
+          clt[clim[i2]] = bits(dat, pos + i2 * 3, 7);
+        }
+        pos += hcLen * 3;
+        var clb = max(clt), clbmsk = (1 << clb) - 1;
+        var clm = hMap(clt, clb, 1);
+        for (var i2 = 0; i2 < tl; ) {
+          var r = clm[bits(dat, pos, clbmsk)];
+          pos += r & 15;
+          var s = r >> 4;
+          if (s < 16) {
+            ldt[i2++] = s;
+          } else {
+            var c = 0, n = 0;
+            if (s == 16)
+              n = 3 + bits(dat, pos, 3), pos += 2, c = ldt[i2 - 1];
+            else if (s == 17)
+              n = 3 + bits(dat, pos, 7), pos += 3;
+            else if (s == 18)
+              n = 11 + bits(dat, pos, 127), pos += 7;
+            while (n--)
+              ldt[i2++] = c;
+          }
+        }
+        var lt = ldt.subarray(0, hLit), dt = ldt.subarray(hLit);
+        lbt = max(lt);
+        dbt = max(dt);
+        lm = hMap(lt, lbt, 1);
+        dm = hMap(dt, dbt, 1);
+      } else
+        err(1);
+      if (pos > tbts) {
+        if (noSt)
+          err(0);
+        break;
+      }
+    }
+    if (resize)
+      cbuf(bt + 131072);
+    var lms = (1 << lbt) - 1, dms = (1 << dbt) - 1;
+    var lpos = pos;
+    for (; ; lpos = pos) {
+      var c = lm[bits16(dat, pos) & lms], sym = c >> 4;
+      pos += c & 15;
+      if (pos > tbts) {
+        if (noSt)
+          err(0);
+        break;
+      }
+      if (!c)
+        err(2);
+      if (sym < 256)
+        buf[bt++] = sym;
+      else if (sym == 256) {
+        lpos = pos, lm = null;
+        break;
+      } else {
+        var add = sym - 254;
+        if (sym > 264) {
+          var i2 = sym - 257, b = fleb[i2];
+          add = bits(dat, pos, (1 << b) - 1) + fl[i2];
+          pos += b;
+        }
+        var d = dm[bits16(dat, pos) & dms], dsym = d >> 4;
+        if (!d)
+          err(3);
+        pos += d & 15;
+        var dt = fd[dsym];
+        if (dsym > 3) {
+          var b = fdeb[dsym];
+          dt += bits16(dat, pos) & (1 << b) - 1, pos += b;
+        }
+        if (pos > tbts) {
+          if (noSt)
+            err(0);
+          break;
+        }
+        if (resize)
+          cbuf(bt + 131072);
+        var end = bt + add;
+        if (bt < dt) {
+          var shift = dl - dt, dend = Math.min(dt, end);
+          if (shift + bt < 0)
+            err(3);
+          for (; bt < dend; ++bt)
+            buf[bt] = dict[shift + bt];
+        }
+        for (; bt < end; ++bt)
+          buf[bt] = buf[bt - dt];
+      }
+    }
+    st.l = lm, st.p = lpos, st.b = bt, st.f = final;
+    if (lm)
+      final = 1, st.m = lbt, st.d = dm, st.n = dbt;
+  } while (!final);
+  return bt != buf.length && noBuf ? slc(buf, 0, bt) : buf.subarray(0, bt);
+};
+var et = /* @__PURE__ */ new u8(0);
+var b2 = function(d, b) {
+  return d[b] | d[b + 1] << 8;
+};
+var b4 = function(d, b) {
+  return (d[b] | d[b + 1] << 8 | d[b + 2] << 16 | d[b + 3] << 24) >>> 0;
+};
+var b8 = function(d, b) {
+  return b4(d, b) + b4(d, b + 4) * 4294967296;
+};
+function inflateSync(data, opts) {
+  return inflt(data, { i: 2 }, opts && opts.out, opts && opts.dictionary);
+}
+var td = typeof TextDecoder != "undefined" && /* @__PURE__ */ new TextDecoder();
+var tds = 0;
+try {
+  td.decode(et, { stream: true });
+  tds = 1;
+} catch (e) {
+}
+var dutf8 = function(d) {
+  for (var r = "", i2 = 0; ; ) {
+    var c = d[i2++];
+    var eb = (c > 127) + (c > 223) + (c > 239);
+    if (i2 + eb > d.length)
+      return { s: r, r: slc(d, i2 - 1) };
+    if (!eb)
+      r += String.fromCharCode(c);
+    else if (eb == 3) {
+      c = ((c & 15) << 18 | (d[i2++] & 63) << 12 | (d[i2++] & 63) << 6 | d[i2++] & 63) - 65536, r += String.fromCharCode(55296 | c >> 10, 56320 | c & 1023);
+    } else if (eb & 1)
+      r += String.fromCharCode((c & 31) << 6 | d[i2++] & 63);
+    else
+      r += String.fromCharCode((c & 15) << 12 | (d[i2++] & 63) << 6 | d[i2++] & 63);
+  }
+};
+function strFromU8(dat, latin1) {
+  if (latin1) {
+    var r = "";
+    for (var i2 = 0; i2 < dat.length; i2 += 16384)
+      r += String.fromCharCode.apply(null, dat.subarray(i2, i2 + 16384));
+    return r;
+  } else if (td) {
+    return td.decode(dat);
+  } else {
+    var _a2 = dutf8(dat), s = _a2.s, r = _a2.r;
+    if (r.length)
+      err(8);
+    return s;
+  }
+}
+var slzh = function(d, b) {
+  return b + 30 + b2(d, b + 26) + b2(d, b + 28);
+};
+var zh = function(d, b, z) {
+  var fnl = b2(d, b + 28), efl = b2(d, b + 30), fn = strFromU8(d.subarray(b + 46, b + 46 + fnl), !(b2(d, b + 8) & 2048)), es = b + 46 + fnl;
+  var _a2 = z64hs(d, es, efl, z, b4(d, b + 20), b4(d, b + 24), b4(d, b + 42)), sc = _a2[0], su = _a2[1], off = _a2[2];
+  return [b2(d, b + 10), sc, su, fn, es + efl + b2(d, b + 32), off];
+};
+var z64hs = function(d, b, l, z, sc, su, off) {
+  var nsc = sc == 4294967295, nsu = su == 4294967295, noff = off == 4294967295, e = b + l;
+  var nf = nsc + nsu + noff;
+  if (z && nf) {
+    for (; b + 4 < e; b += 4 + b2(d, b + 2)) {
+      if (b2(d, b) == 1) {
+        return [
+          nsc ? b8(d, b + 4 + 8 * nsu) : sc,
+          nsu ? b8(d, b + 4) : su,
+          noff ? b8(d, b + 4 + 8 * (nsu + nsc)) : off,
+          1
+        ];
+      }
+    }
+    if (z < 2)
+      err(13);
+  }
+  return [sc, su, off, 0];
+};
+function unzipSync(data, opts) {
+  var files = {};
+  var e = data.length - 22;
+  for (; b4(data, e) != 101010256; --e) {
+    if (!e || data.length - e > 65558)
+      err(13);
+  }
+  ;
+  var c = b2(data, e + 8);
+  if (!c)
+    return {};
+  var o = b4(data, e + 16);
+  var z = b4(data, e - 20) == 117853008;
+  if (z) {
+    var ze = b4(data, e - 12);
+    z = b4(data, ze) == 101075792;
+    if (z) {
+      c = b4(data, ze + 32);
+      o = b4(data, ze + 48);
+    }
+  }
+  var fltr = opts && opts.filter;
+  for (var i2 = 0; i2 < c; ++i2) {
+    var _a2 = zh(data, o, z), c_2 = _a2[0], sc = _a2[1], su = _a2[2], fn = _a2[3], no = _a2[4], off = _a2[5], b = slzh(data, off);
+    o = no;
+    if (!fltr || fltr({
+      name: fn,
+      size: sc,
+      originalSize: su,
+      compression: c_2
+    })) {
+      if (!c_2)
+        files[fn] = slc(data, b, b + sc);
+      else if (c_2 == 8)
+        files[fn] = inflateSync(data.subarray(b, b + sc), { out: new u8(su) });
+      else
+        err(14, "unknown compression type " + c_2);
+    }
+  }
+  return files;
+}
 var DEFAULT_MAX_BYTES = 50 * 1024 * 1024;
 function extractZipFromBuffer(buffer, opts = {}) {
   const maxBytes = opts.maxBytes ?? DEFAULT_MAX_BYTES;
-  const entries2 = unzipSync(buffer);
+  const entries = unzipSync(buffer);
   const files = [];
   const issues = [];
   let totalBytes = 0;
-  for (const [name, data] of Object.entries(entries2)) {
+  for (const [name, data] of Object.entries(entries)) {
     if (name.endsWith("/")) continue;
     const reason = validateBundlePath(name);
     if (reason) {
@@ -588,7 +971,6 @@ async function upsertStaticPost(graphql, slug, body, fields) {
     }
     const data2 = await graphql.query(UPDATE_MUTATION, { input: input2 });
     const updated = toCorePost(data2.updatePost);
-    await syncPostTags(graphql, updated, existing);
     return { post: updated, created: false };
   }
   if (!fields.title) {
@@ -613,7 +995,6 @@ async function upsertStaticPost(graphql, slug, body, fields) {
   if (fields.metadata !== void 0) input.metadata = encodeAwsJson3(fields.metadata);
   const data = await graphql.query(CREATE_MUTATION, { input });
   const created = toCorePost(data.createPost);
-  await syncPostTags(graphql, created, null);
   return { post: created, created: true };
 }
 var uploadStaticBundleSchema = {
@@ -654,7 +1035,7 @@ async function uploadStaticBundle(graphql, storage, args) {
   const { files, issues } = extractZipFromBuffer(zipBytes);
   if (issues.length > 0) {
     throw new Error(
-      `upload_static_bundle: rejected bundle path(s): ${issues.map((i) => `${i.path} (${i.reason})`).join("; ")}`
+      `upload_static_bundle: rejected bundle path(s): ${issues.map((i2) => `${i2.path} (${i2.reason})`).join("; ")}`
     );
   }
   if (files.length === 0) {
@@ -663,7 +1044,7 @@ async function uploadStaticBundle(graphql, storage, args) {
   const contentIssues = validateBundle(files);
   if (contentIssues.length > 0) {
     throw new Error(
-      `upload_static_bundle: bundle contains absolute / protocol-relative refs: ${contentIssues.map((i) => `${i.path}: ${i.reason}`).join("; ")}`
+      `upload_static_bundle: bundle contains absolute / protocol-relative refs: ${contentIssues.map((i2) => `${i2.path}: ${i2.reason}`).join("; ")}`
     );
   }
   const entrypoint = args.entrypoint ?? pickDefaultEntrypoint(files);
@@ -673,8 +1054,8 @@ async function uploadStaticBundle(graphql, storage, args) {
     );
   }
   const prefix = bundlePrefix(slug);
-  const existing = await storage.listObjects(prefix).catch((err) => {
-    console.error("[upload_static_bundle] listObjects failed (proceeding)", err);
+  const existing = await storage.listObjects(prefix).catch((err2) => {
+    console.error("[upload_static_bundle] listObjects failed (proceeding)", err2);
     return [];
   });
   for (const obj of existing) {
@@ -736,7 +1117,7 @@ async function uploadStaticFile(storage, args) {
     const issues = findAbsolutePathRefs(filename, text);
     if (issues.length > 0) {
       throw new Error(
-        `upload_static_file: ${filename} contains absolute / protocol-relative refs: ${issues.map((i) => i.reason).join("; ")}`
+        `upload_static_file: ${filename} contains absolute / protocol-relative refs: ${issues.map((i2) => i2.reason).join("; ")}`
       );
     }
   }
@@ -1130,8 +1511,8 @@ async function dispatchJsonRpc(req) {
         return jsonRpcResult(req.id, {
           content: [{ type: "text", text: JSON.stringify(result, null, 2) }]
         });
-      } catch (err) {
-        const message = err instanceof Error ? err.message : String(err);
+      } catch (err2) {
+        const message = err2 instanceof Error ? err2.message : String(err2);
         console.error("[mcp-handler] tool dispatch failed", {
           tool: params.name,
           message
@@ -1182,8 +1563,8 @@ var handler = async (event) => {
   try {
     const response = await dispatchJsonRpc(req);
     return jsonResponse(200, response);
-  } catch (err) {
-    const message = err instanceof Error ? err.message : String(err);
+  } catch (err2) {
+    const message = err2 instanceof Error ? err2.message : String(err2);
     console.error("[mcp-handler] dispatch threw", { method: req.method, message });
     return jsonResponse(
       500,

package/dist/index.js

@@ -1,5 +1,3 @@
-import "./chunk-BYXBJQAS.js";
-
 // src/backend.ts
 import { defineBackend } from "@aws-amplify/backend";
 import { Effect, PolicyStatement, AnyPrincipal } from "aws-cdk-lib/aws-iam";
@@ -133,6 +131,8 @@ function defineAmplessBackend(opts) {
     })
   );
   kvTable.grantReadData(trustedFn);
+  const postTagTable = backend.data.resources.tables["PostTag"];
+  postTagTable.grantWriteData(trustedFn);
   trustedFn.addToRolePolicy(
     new PolicyStatement({
       effect: Effect.ALLOW,
@@ -140,13 +140,12 @@ function defineAmplessBackend(opts) {
       resources: [
         `${backend.storage.resources.bucket.bucketArn}/public/plugins/*`,
         // Built-in cache: rebuildSiteSettingsCache writes the single
-        // JSON file the public site reads. Exact-match resource —
-        // historically this was `public/site-settings/<siteId>.json`
-        // (multi-site era) and the wildcard pattern that worked then
-        // (`public/site-settings/*`) does NOT match the current
-        // single-file key `public/site-settings.json`. Wrong pattern
-        // fails the PutObject silently with AccessDenied, so the
-        // public site never sees admin-side theme / settings changes.
+        // JSON file the public site reads. Exact-match resource — a
+        // wildcard like `public/site-settings/*` would NOT match the
+        // single-file key `public/site-settings.json` and the
+        // PutObject would fail silently with AccessDenied, so the
+        // public site would never see admin-side theme / settings
+        // changes.
         `${backend.storage.resources.bucket.bucketArn}/public/site-settings.json`
       ]
     })
@@ -154,6 +153,7 @@ function defineAmplessBackend(opts) {
   trustedFn.addEnvironment("AMPLESS_BUCKET_NAME", backend.storage.resources.bucket.bucketName);
   trustedFn.addEnvironment("AMPLESS_POST_TABLE", postTable.tableName);
   trustedFn.addEnvironment("AMPLESS_KV_TABLE", kvTable.tableName);
+  trustedFn.addEnvironment("AMPLESS_POSTTAG_TABLE", postTagTable.tableName);
   const untrustedFn = backend.processorUntrusted.resources.lambda;
   untrustedFn.addEventSource(new SqsEventSource(untrustedQueue, { batchSize: 5 }));
   const graphqlApi = backend.data.resources.cfnResources.cfnGraphqlApi;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ampless/backend",
-  "version": "1.0.0-alpha.27",
+  "version": "1.0.0-alpha.29",
   "description": "Amplify Gen 2 backend factories for ampless: auth, data, storage, event processors, API key renewer",
   "license": "MIT",
   "type": "module",
@@ -65,8 +65,8 @@
     "@smithy/protocol-http": "^5.4.4",
     "@smithy/signature-v4": "^5.4.4",
     "fflate": "^0.8.3",
-    "ampless": "1.0.0-alpha.14",
-    "@ampless/mcp-server": "1.0.0-alpha.16"
+    "ampless": "1.0.0-alpha.15",
+    "@ampless/mcp-server": "1.0.0-alpha.18"
   },
   "peerDependencies": {
     "@aws-amplify/backend": "^1",