@canvas-digital/blog-sdk 2.0.0

package/dist/hooks/useAsync.d.ts

@@ -0,0 +1,23 @@
+import { type DependencyList } from "react";
+export type AsyncState<T> = {
+    status: "loading";
+    data: null;
+    error: null;
+} | {
+    status: "success";
+    data: T;
+    error: null;
+} | {
+    status: "empty";
+    data: T;
+    error: null;
+} | {
+    status: "error";
+    data: null;
+    error: string;
+    authError: boolean;
+};
+export declare function useAsync<T>(factory: () => Promise<T>, deps: DependencyList, isEmpty?: (value: T) => boolean): AsyncState<T> & {
+    reload: () => void;
+};
+//# sourceMappingURL=useAsync.d.ts.map

package/dist/hooks/useAsync.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"useAsync.d.ts","sourceRoot":"","sources":["../../app/hooks/useAsync.ts"],"names":[],"mappings":"AAAA,OAAO,EAAuB,KAAK,cAAc,EAAE,MAAM,OAAO,CAAC;AAGjE,MAAM,MAAM,UAAU,CAAC,CAAC,IACpB;IAAE,MAAM,EAAE,SAAS,CAAC;IAAC,IAAI,EAAE,IAAI,CAAC;IAAC,KAAK,EAAE,IAAI,CAAA;CAAE,GAC9C;IAAE,MAAM,EAAE,SAAS,CAAC;IAAC,IAAI,EAAE,CAAC,CAAC;IAAC,KAAK,EAAE,IAAI,CAAA;CAAE,GAC3C;IAAE,MAAM,EAAE,OAAO,CAAC;IAAC,IAAI,EAAE,CAAC,CAAC;IAAC,KAAK,EAAE,IAAI,CAAA;CAAE,GACzC;IAAE,MAAM,EAAE,OAAO,CAAC;IAAC,IAAI,EAAE,IAAI,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,OAAO,CAAA;CAAE,CAAC;AAEvE,wBAAgB,QAAQ,CAAC,CAAC,EACxB,OAAO,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,EACzB,IAAI,EAAE,cAAc,EACpB,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,CAAC,KAAK,OAAO,GAC9B,UAAU,CAAC,CAAC,CAAC,GAAG;IAAE,MAAM,EAAE,MAAM,IAAI,CAAA;CAAE,CAyCxC"}

package/dist/hooks/useAsync.js

@@ -0,0 +1,40 @@
+import { useEffect, useState } from "react";
+import { getErrorMessage, isAuthError } from "../services";
+export function useAsync(factory, deps, isEmpty) {
+    const [nonce, setNonce] = useState(0);
+    const [state, setState] = useState({
+        status: "loading",
+        data: null,
+        error: null,
+    });
+    useEffect(() => {
+        let cancelled = false;
+        setState({ status: "loading", data: null, error: null });
+        factory()
+            .then((data) => {
+            if (cancelled) {
+                return;
+            }
+            if (isEmpty?.(data)) {
+                setState({ status: "empty", data, error: null });
+                return;
+            }
+            setState({ status: "success", data, error: null });
+        })
+            .catch((error) => {
+            if (cancelled) {
+                return;
+            }
+            setState({
+                status: "error",
+                data: null,
+                error: getErrorMessage(error),
+                authError: isAuthError(error),
+            });
+        });
+        return () => {
+            cancelled = true;
+        };
+    }, [...deps, nonce]);
+    return { ...state, reload: () => setNonce((value) => value + 1) };
+}

package/dist/index.d.ts

@@ -0,0 +1,12 @@
+export * from "./services";
+export { BlogList, BlogDetail, BlogSearch, BlogCategories, BlogTags, FeaturedBlogs, RelatedBlogs, } from "./components/user";
+export { sanitizeHtml, normalizeDomain, resolveBlogApiUrl, } from "./utils";
+export { DEFAULT_THEME, formatDate, cardStyle, } from "./styles/userTheme";
+export type { BlogTheme, ThemeColors, ThemeFonts, BlogComponentProps, Branding, } from "./types/user";
+export { BlogAdmin } from "./pages/admin";
+export { PostList, PostEditor, CategoryManager, TagManager, MediaManager, } from "./components/admin";
+export { buttonStyle } from "./styles/adminTheme";
+export type { AdminTheme, Branding as AdminBranding } from "./types/admin";
+export { UserBlogPage } from "./pages/user";
+export * from "./BlogPlatform";
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../app/index.ts"],"names":[],"mappings":"AAAA,cAAc,YAAY,CAAC;AAE3B,OAAO,EACL,QAAQ,EACR,UAAU,EACV,UAAU,EACV,cAAc,EACd,QAAQ,EACR,aAAa,EACb,YAAY,GACb,MAAM,mBAAmB,CAAC;AAE3B,OAAO,EACL,YAAY,EACZ,eAAe,EACf,iBAAiB,GAClB,MAAM,SAAS,CAAC;AAEjB,OAAO,EACL,aAAa,EACb,UAAU,EACV,SAAS,GACV,MAAM,oBAAoB,CAAC;AAE5B,YAAY,EACV,SAAS,EACT,WAAW,EACX,UAAU,EACV,kBAAkB,EAClB,QAAQ,GACT,MAAM,cAAc,CAAC;AAEtB,OAAO,EAAE,SAAS,EAAE,MAAM,eAAe,CAAC;AAE1C,OAAO,EACL,QAAQ,EACR,UAAU,EACV,eAAe,EACf,UAAU,EACV,YAAY,GACb,MAAM,oBAAoB,CAAC;AAE5B,OAAO,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAElD,YAAY,EAAE,UAAU,EAAE,QAAQ,IAAI,aAAa,EAAE,MAAM,eAAe,CAAC;AAE3E,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAE5C,cAAc,gBAAgB,CAAC"}

package/dist/index.js

@@ -0,0 +1,9 @@
+export * from "./services";
+export { BlogList, BlogDetail, BlogSearch, BlogCategories, BlogTags, FeaturedBlogs, RelatedBlogs, } from "./components/user";
+export { sanitizeHtml, normalizeDomain, resolveBlogApiUrl, } from "./utils";
+export { DEFAULT_THEME, formatDate, cardStyle, } from "./styles/userTheme";
+export { BlogAdmin } from "./pages/admin";
+export { PostList, PostEditor, CategoryManager, TagManager, MediaManager, } from "./components/admin";
+export { buttonStyle } from "./styles/adminTheme";
+export { UserBlogPage } from "./pages/user";
+export * from "./BlogPlatform";

package/dist/lib/access.d.ts

@@ -0,0 +1,64 @@
+import type { Access } from 'payload';
+/**
+ * Tenant scoping lives here, in access-control functions, and nowhere else.
+ *
+ * Payload applies these to every read, write and delete — through the admin UI,
+ * the REST API and the GraphQL API alike. Scoping applied in a route handler is
+ * scoping the next developer forgets, so no query in this codebase should ever
+ * filter by tenant itself.
+ */
+export declare const TENANT_ROLES: readonly ["brand-admin", "editor", "author", "contributor"];
+export type TenantRole = (typeof TENANT_ROLES)[number];
+/** Ids are ObjectId strings on Mongo and numeric on SQL stores, so every
+ *  comparison in this file goes through String() rather than assuming either. */
+export type DocId = string | number;
+export type TenantAssignment = {
+    tenant: DocId | {
+        id: DocId;
+    };
+    role: TenantRole;
+    categories?: (DocId | {
+        id: DocId;
+    })[] | null;
+};
+export type AuthUser = {
+    id: DocId;
+    globalRole?: 'platform-admin' | 'analyst' | 'none' | null;
+    tenantRoles?: TenantAssignment[] | null;
+};
+export declare const isPlatformAdmin: (user: unknown) => boolean;
+export declare const isAnalyst: (user: unknown) => boolean;
+/** Every tenant id where the user holds at least `minRole`. */
+export declare const tenantIdsWithRole: (user: unknown, minRole: TenantRole) => string[];
+export declare const assignmentFor: (user: unknown, tenantId: string | null) => TenantAssignment | null;
+export declare const hasTenantRole: (user: unknown, tenantId: string | null, minRole: TenantRole) => boolean;
+/**
+ * Read access: platform admins and analysts see everything; everyone else is
+ * constrained to the tenants they are assigned to.
+ */
+export declare const readTenantScoped: Access;
+/**
+ * Create access must return a boolean (Payload cannot apply a Where to a row
+ * that does not exist yet), so we check the tenant on the incoming payload.
+ */
+export declare const createTenantScoped: (minRole?: TenantRole) => Access;
+/**
+ * Update access. Authors and contributors are additionally restricted to the
+ * documents they created; editors and above may edit anything in their tenants.
+ */
+export declare const updateTenantScoped: Access;
+/** Deleting published content is a brand-admin action. */
+export declare const deleteTenantScoped: Access;
+/**
+ * Publishing is gated in the Posts `beforeChange` hook rather than as field
+ * access, because `_status` is owned by Payload's drafts system and declaring it
+ * a second time collides with the generated schema. The hook has the better
+ * blast radius anyway: it covers the admin UI, REST and GraphQL identically.
+ * See collections/Posts.ts.
+ */
+/** Only platform admins manage users and tenants. */
+export declare const platformAdminOnly: Access;
+export declare const authenticated: Access;
+/** Public collections are readable by anonymous requests but only when published. */
+export declare const publishedOrAuthenticated: Access;
+//# sourceMappingURL=access.d.ts.map

package/dist/lib/access.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"access.d.ts","sourceRoot":"","sources":["../../app/lib/access.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAS,MAAM,SAAS,CAAA;AAE5C;;;;;;;GAOG;AAEH,eAAO,MAAM,YAAY,6DAA8D,CAAA;AACvF,MAAM,MAAM,UAAU,GAAG,CAAC,OAAO,YAAY,CAAC,CAAC,MAAM,CAAC,CAAA;AAUtD;iFACiF;AACjF,MAAM,MAAM,KAAK,GAAG,MAAM,GAAG,MAAM,CAAA;AAEnC,MAAM,MAAM,gBAAgB,GAAG;IAC7B,MAAM,EAAE,KAAK,GAAG;QAAE,EAAE,EAAE,KAAK,CAAA;KAAE,CAAA;IAC7B,IAAI,EAAE,UAAU,CAAA;IAChB,UAAU,CAAC,EAAE,CAAC,KAAK,GAAG;QAAE,EAAE,EAAE,KAAK,CAAA;KAAE,CAAC,EAAE,GAAG,IAAI,CAAA;CAC9C,CAAA;AAED,MAAM,MAAM,QAAQ,GAAG;IACrB,EAAE,EAAE,KAAK,CAAA;IACT,UAAU,CAAC,EAAE,gBAAgB,GAAG,SAAS,GAAG,MAAM,GAAG,IAAI,CAAA;IACzD,WAAW,CAAC,EAAE,gBAAgB,EAAE,GAAG,IAAI,CAAA;CACxC,CAAA;AAYD,eAAO,MAAM,eAAe,GAAI,MAAM,OAAO,KAAG,OACD,CAAA;AAE/C,eAAO,MAAM,SAAS,GAAI,MAAM,OAAO,KAAG,OAAiD,CAAA;AAE3F,+DAA+D;AAC/D,eAAO,MAAM,iBAAiB,GAAI,MAAM,OAAO,EAAE,SAAS,UAAU,KAAG,MAAM,EAO5E,CAAA;AAED,eAAO,MAAM,aAAa,GAAI,MAAM,OAAO,EAAE,UAAU,MAAM,GAAG,IAAI,KAAG,gBAAgB,GAAG,IAIzF,CAAA;AAED,eAAO,MAAM,aAAa,GACxB,MAAM,OAAO,EACb,UAAU,MAAM,GAAG,IAAI,EACvB,SAAS,UAAU,KAClB,OAGF,CAAA;AAED;;;GAGG;AACH,eAAO,MAAM,gBAAgB,EAAE,MAM9B,CAAA;AAED;;;GAGG;AACH,eAAO,MAAM,kBAAkB,GAC5B,UAAS,UAAqB,KAAG,MAOjC,CAAA;AAEH;;;GAGG;AACH,eAAO,MAAM,kBAAkB,EAAE,MAmBhC,CAAA;AAED,0DAA0D;AAC1D,eAAO,MAAM,kBAAkB,EAAE,MAMhC,CAAA;AAED;;;;;;GAMG;AAEH,qDAAqD;AACrD,eAAO,MAAM,iBAAiB,EAAE,MAAqD,CAAA;AAErF,eAAO,MAAM,aAAa,EAAE,MAA6C,CAAA;AAEzE,qFAAqF;AACrF,eAAO,MAAM,wBAAwB,EAAE,MAGtC,CAAA"}

package/dist/lib/access.js

@@ -0,0 +1,127 @@
+/**
+ * Tenant scoping lives here, in access-control functions, and nowhere else.
+ *
+ * Payload applies these to every read, write and delete — through the admin UI,
+ * the REST API and the GraphQL API alike. Scoping applied in a route handler is
+ * scoping the next developer forgets, so no query in this codebase should ever
+ * filter by tenant itself.
+ */
+export const TENANT_ROLES = ['brand-admin', 'editor', 'author', 'contributor'];
+/** Higher number = more capability. Used for "at least this role" checks. */
+const RANK = {
+    contributor: 1,
+    author: 2,
+    editor: 3,
+    'brand-admin': 4,
+};
+/** Relationship fields arrive either as an id or a populated doc. */
+const idOf = (v) => {
+    if (typeof v === 'string')
+        return v;
+    if (typeof v === 'number')
+        return String(v);
+    if (v && typeof v === 'object' && 'id' in v)
+        return String(v.id);
+    return null;
+};
+const asUser = (user) => user ?? null;
+export const isPlatformAdmin = (user) => asUser(user)?.globalRole === 'platform-admin';
+export const isAnalyst = (user) => asUser(user)?.globalRole === 'analyst';
+/** Every tenant id where the user holds at least `minRole`. */
+export const tenantIdsWithRole = (user, minRole) => {
+    const u = asUser(user);
+    if (!u?.tenantRoles)
+        return [];
+    return u.tenantRoles
+        .filter((a) => a.role && RANK[a.role] >= RANK[minRole])
+        .map((a) => idOf(a.tenant))
+        .filter((id) => Boolean(id));
+};
+export const assignmentFor = (user, tenantId) => {
+    const u = asUser(user);
+    if (!u?.tenantRoles || !tenantId)
+        return null;
+    return u.tenantRoles.find((a) => idOf(a.tenant) === tenantId) ?? null;
+};
+export const hasTenantRole = (user, tenantId, minRole) => {
+    const a = assignmentFor(user, tenantId);
+    return Boolean(a?.role && RANK[a.role] >= RANK[minRole]);
+};
+/**
+ * Read access: platform admins and analysts see everything; everyone else is
+ * constrained to the tenants they are assigned to.
+ */
+export const readTenantScoped = ({ req: { user } }) => {
+    if (!user)
+        return false;
+    if (isPlatformAdmin(user) || isAnalyst(user))
+        return true;
+    const ids = tenantIdsWithRole(user, 'contributor');
+    if (ids.length === 0)
+        return false;
+    return { tenant: { in: ids } };
+};
+/**
+ * Create access must return a boolean (Payload cannot apply a Where to a row
+ * that does not exist yet), so we check the tenant on the incoming payload.
+ */
+export const createTenantScoped = (minRole = 'author') => ({ req: { user }, data }) => {
+    if (!user)
+        return false;
+    if (isPlatformAdmin(user))
+        return true;
+    const tenantId = idOf(data?.tenant);
+    if (!tenantId)
+        return false;
+    return hasTenantRole(user, tenantId, minRole);
+};
+/**
+ * Update access. Authors and contributors are additionally restricted to the
+ * documents they created; editors and above may edit anything in their tenants.
+ */
+export const updateTenantScoped = ({ req: { user } }) => {
+    if (!user)
+        return false;
+    if (isPlatformAdmin(user))
+        return true;
+    const editorTenants = tenantIdsWithRole(user, 'editor');
+    const ownOnlyTenants = tenantIdsWithRole(user, 'contributor').filter((id) => !editorTenants.includes(id));
+    const clauses = [];
+    if (editorTenants.length)
+        clauses.push({ tenant: { in: editorTenants } });
+    if (ownOnlyTenants.length) {
+        clauses.push({
+            and: [{ tenant: { in: ownOnlyTenants } }, { createdBy: { equals: asUser(user)?.id } }],
+        });
+    }
+    if (clauses.length === 0)
+        return false;
+    return clauses.length === 1 ? clauses[0] : { or: clauses };
+};
+/** Deleting published content is a brand-admin action. */
+export const deleteTenantScoped = ({ req: { user } }) => {
+    if (!user)
+        return false;
+    if (isPlatformAdmin(user))
+        return true;
+    const ids = tenantIdsWithRole(user, 'brand-admin');
+    if (ids.length === 0)
+        return false;
+    return { tenant: { in: ids } };
+};
+/**
+ * Publishing is gated in the Posts `beforeChange` hook rather than as field
+ * access, because `_status` is owned by Payload's drafts system and declaring it
+ * a second time collides with the generated schema. The hook has the better
+ * blast radius anyway: it covers the admin UI, REST and GraphQL identically.
+ * See collections/Posts.ts.
+ */
+/** Only platform admins manage users and tenants. */
+export const platformAdminOnly = ({ req: { user } }) => isPlatformAdmin(user);
+export const authenticated = ({ req: { user } }) => Boolean(user);
+/** Public collections are readable by anonymous requests but only when published. */
+export const publishedOrAuthenticated = ({ req: { user } }) => {
+    if (user)
+        return readTenantScoped({ req: { user } });
+    return { _status: { equals: 'published' } };
+};

package/dist/lib/canonical.d.ts

@@ -0,0 +1,15 @@
+/**
+ * Canonical override: blank (this page is canonical) or a full https:// URL.
+ * Relative paths and plain text are refused.
+ */
+export declare const CANONICAL_HINT = "Must be a full https:// URL, or leave blank to use this page.";
+export declare const validateCanonicalOverride: (value: unknown) => true | string;
+/** Trimmed absolute https URL, or null when blank. Throws nothing — returns a result. */
+export declare const normaliseCanonicalOverride: (value: string | null | undefined) => {
+    ok: true;
+    value: string | null;
+} | {
+    ok: false;
+    message: string;
+};
+//# sourceMappingURL=canonical.d.ts.map

package/dist/lib/canonical.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"canonical.d.ts","sourceRoot":"","sources":["../../app/lib/canonical.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,eAAO,MAAM,cAAc,kEACsC,CAAA;AAEjE,eAAO,MAAM,yBAAyB,GACpC,OAAO,OAAO,KACb,IAAI,GAAG,MAgBT,CAAA;AAED,yFAAyF;AACzF,eAAO,MAAM,0BAA0B,GACrC,OAAO,MAAM,GAAG,IAAI,GAAG,SAAS,KAC/B;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,GAAG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAMnE,CAAA"}

package/dist/lib/canonical.js

@@ -0,0 +1,34 @@
+/**
+ * Canonical override: blank (this page is canonical) or a full https:// URL.
+ * Relative paths and plain text are refused.
+ */
+export const CANONICAL_HINT = 'Must be a full https:// URL, or leave blank to use this page.';
+export const validateCanonicalOverride = (value) => {
+    if (value == null)
+        return true;
+    if (typeof value !== 'string')
+        return CANONICAL_HINT;
+    const raw = value.trim();
+    if (!raw)
+        return true;
+    try {
+        const u = new URL(raw);
+        if (u.protocol !== 'https:') {
+            return 'Canonical must start with https:// (http is not allowed). Leave blank to use this page.';
+        }
+        return true;
+    }
+    catch {
+        return CANONICAL_HINT;
+    }
+};
+/** Trimmed absolute https URL, or null when blank. Throws nothing — returns a result. */
+export const normaliseCanonicalOverride = (value) => {
+    const check = validateCanonicalOverride(value ?? '');
+    if (check !== true)
+        return { ok: false, message: check };
+    const raw = (value ?? '').trim();
+    if (!raw)
+        return { ok: true, value: null };
+    return { ok: true, value: new URL(raw).toString() };
+};

package/dist/lib/comments.d.ts

@@ -0,0 +1,9 @@
+export type PublicComment = {
+    id: string;
+    authorName: string;
+    body: string;
+    createdAt: string;
+};
+export declare const commentsTag: (postId: string) => string;
+export declare const getApprovedComments: (postId: string) => any;
+//# sourceMappingURL=comments.d.ts.map

package/dist/lib/comments.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"comments.d.ts","sourceRoot":"","sources":["../../app/lib/comments.ts"],"names":[],"mappings":"AAIA,MAAM,MAAM,aAAa,GAAG;IAC1B,EAAE,EAAE,MAAM,CAAA;IACV,UAAU,EAAE,MAAM,CAAA;IAClB,IAAI,EAAE,MAAM,CAAA;IACZ,SAAS,EAAE,MAAM,CAAA;CAClB,CAAA;AAED,eAAO,MAAM,WAAW,GAAI,QAAQ,MAAM,WAAyB,CAAA;AAEnE,eAAO,MAAM,mBAAmB,GAAI,QAAQ,MAAM,QAwB/C,CAAA"}

package/dist/lib/comments.js

@@ -0,0 +1,23 @@
+import { unstable_cache } from 'next/cache';
+import { getPayloadClient } from './tenant';
+export const commentsTag = (postId) => `comments:${postId}`;
+export const getApprovedComments = (postId) => unstable_cache(async () => {
+    const payload = await getPayloadClient();
+    const result = await payload.find({
+        collection: 'comments',
+        where: {
+            and: [{ post: { equals: postId } }, { status: { equals: 'approved' } }],
+        },
+        sort: 'createdAt',
+        limit: 200,
+        depth: 0,
+        pagination: false,
+        overrideAccess: true,
+    });
+    return result.docs.map((c) => ({
+        id: String(c.id),
+        authorName: c.authorName,
+        body: c.body,
+        createdAt: c.createdAt,
+    }));
+}, ['comments', postId], { tags: [commentsTag(postId)] });

package/dist/lib/dashboard.d.ts

@@ -0,0 +1,39 @@
+import { getPayloadClient } from './tenant';
+import type { Tenant, User } from '../payload-types';
+/**
+ * The three things every dashboard screen needs before it can render: who is
+ * asking, which brands they may see, and the counts the sidebar puts on badges.
+ *
+ * Gathering them here means a new screen cannot accidentally skip the auth check
+ * or invent its own idea of what "needs attention" means — both come from one
+ * place, and the definition itself lives in lib/publishing.ts.
+ */
+export type ShellData = {
+    tenants: Tenant[];
+    activeBrand?: Tenant;
+    attentionCount: number;
+    scheduledCount: number;
+    trashCount: number;
+    canPublishHere: boolean;
+    userName: string;
+    userRole: string;
+    userAvatarUrl: string | null;
+    isAdmin: boolean;
+};
+export declare const displayUserRole: (user: User, activeBrand?: Tenant) => string;
+export declare const getOptionalUser: any;
+export declare const requireUser: (returnTo: string) => Promise<{
+    payload: any;
+    user: any;
+}>;
+export declare const loadShell: (payload: Awaited<ReturnType<typeof getPayloadClient>>, user: User, brandSlug?: string) => Promise<ShellData>;
+export declare const nf: Intl.NumberFormat;
+export declare const relative: (value?: string | null) => string;
+export declare const fmtDateTime: (value?: string | Date | null) => string;
+export declare const fmtDate: (value?: string | Date | null) => string;
+/** Relationship values arrive populated or bare depending on depth. */
+export declare const relName: (v: unknown) => string | null;
+export declare const relSlug: (v: unknown) => string | null;
+export declare const relTitle: (v: unknown) => string | null;
+export declare const relId: (v: unknown) => string | null;
+//# sourceMappingURL=dashboard.d.ts.map

package/dist/lib/dashboard.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"dashboard.d.ts","sourceRoot":"","sources":["../../app/lib/dashboard.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,gBAAgB,EAAE,MAAM,UAAU,CAAA;AAK3C,OAAO,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAA;AAEpD;;;;;;;GAOG;AAEH,MAAM,MAAM,SAAS,GAAG;IACtB,OAAO,EAAE,MAAM,EAAE,CAAA;IACjB,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,cAAc,EAAE,MAAM,CAAA;IACtB,cAAc,EAAE,MAAM,CAAA;IACtB,UAAU,EAAE,MAAM,CAAA;IAClB,cAAc,EAAE,OAAO,CAAA;IACvB,QAAQ,EAAE,MAAM,CAAA;IAChB,QAAQ,EAAE,MAAM,CAAA;IAChB,aAAa,EAAE,MAAM,GAAG,IAAI,CAAA;IAC5B,OAAO,EAAE,OAAO,CAAA;CACjB,CAAA;AAQD,eAAO,MAAM,eAAe,GAAI,MAAM,IAAI,EAAE,cAAc,MAAM,KAAG,MAmBlE,CAAA;AAQD,eAAO,MAAM,eAAe,KAG1B,CAAA;AAEF,eAAO,MAAM,WAAW,GAAU,UAAU,MAAM;;;EAIjD,CAAA;AA2CD,eAAO,MAAM,SAAS,GACpB,SAAS,OAAO,CAAC,UAAU,CAAC,OAAO,gBAAgB,CAAC,CAAC,EACrD,MAAM,IAAI,EACV,YAAY,MAAM,KACjB,OAAO,CAAC,SAAS,CA+DnB,CAAA;AAID,eAAO,MAAM,EAAE,mBAAiC,CAAA;AAEhD,eAAO,MAAM,QAAQ,GAAI,QAAQ,MAAM,GAAG,IAAI,KAAG,MAQhD,CAAA;AAED,eAAO,MAAM,WAAW,0CAAiB,CAAA;AACzC,eAAO,MAAM,OAAO,0CAAkB,CAAA;AAEtC,uEAAuE;AACvE,eAAO,MAAM,OAAO,GAAI,GAAG,OAAO,KAAG,MAAM,GAAG,IAC4C,CAAA;AAE1F,eAAO,MAAM,OAAO,GAAI,GAAG,OAAO,KAAG,MAAM,GAAG,IAC4C,CAAA;AAE1F,eAAO,MAAM,QAAQ,GAAI,GAAG,OAAO,KAAG,MAAM,GAAG,IAC8C,CAAA;AAE7F,eAAO,MAAM,KAAK,GAAI,GAAG,OAAO,KAAG,MAAM,GAAG,IAO3C,CAAA"}

package/dist/lib/dashboard.js

@@ -0,0 +1,157 @@
+import { headers as nextHeaders } from 'next/headers';
+import { redirect } from 'next/navigation';
+import { cache } from 'react';
+import { unstable_cache } from 'next/cache';
+import { getPayloadClient } from './tenant';
+import { attentionWhere } from './publishing';
+import { assignmentFor, hasTenantRole, isAnalyst, isPlatformAdmin } from './access';
+import { formatDateTime, formatShortDate } from './format';
+import { mediaUrl } from './seo';
+const formatRole = (role) => role
+    .split('-')
+    .map((w) => w[0].toUpperCase() + w.slice(1))
+    .join(' ');
+export const displayUserRole = (user, activeBrand) => {
+    if (isPlatformAdmin(user))
+        return 'Platform admin';
+    if (isAnalyst(user))
+        return 'Analyst';
+    if (activeBrand) {
+        const assignment = assignmentFor(user, String(activeBrand.id));
+        if (assignment?.role)
+            return formatRole(assignment.role);
+    }
+    if (user.globalRole && user.globalRole !== 'none')
+        return formatRole(user.globalRole);
+    const ranks = { contributor: 1, author: 2, editor: 3, 'brand-admin': 4 };
+    const roles = (user.tenantRoles ?? []).map((row) => row.role).filter(Boolean);
+    if (roles.length) {
+        const best = roles.sort((a, b) => (ranks[b] ?? 0) - (ranks[a] ?? 0))[0];
+        return formatRole(best);
+    }
+    return 'Member';
+};
+const authSession = cache(async () => {
+    const payload = await getPayloadClient();
+    const { user } = await payload.auth({ headers: await nextHeaders() });
+    return { payload, user: (user ?? null) };
+});
+export const getOptionalUser = cache(async () => {
+    const { user } = await authSession();
+    return user;
+});
+export const requireUser = async (returnTo) => {
+    const { payload, user } = await authSession();
+    if (!user)
+        redirect(`/cms/login?redirect=${encodeURIComponent(returnTo)}`);
+    return { payload, user };
+};
+const badgeCounts = async (payload, user, activeBrandId) => {
+    const scope = activeBrandId ? [{ tenant: { equals: activeBrandId } }] : [];
+    const nowIso = new Date().toISOString();
+    const count = async (where, trash = false) => (await payload.find({
+        collection: 'posts',
+        where: { and: [...scope, ...where] },
+        limit: 0,
+        depth: 0,
+        user,
+        overrideAccess: false,
+        trash,
+    })).totalDocs;
+    const [attentionCount, scheduledCount, trashCount] = await Promise.all([
+        count([attentionWhere()]),
+        count([{ _status: { equals: 'draft' } }, { scheduledFor: { greater_than: nowIso } }]),
+        count([{ deletedAt: { exists: true } }], true),
+    ]);
+    return { attentionCount, scheduledCount, trashCount };
+};
+/** Badge counts change rarely — a short cache keeps sidebar hops snappy. */
+const cachedBadgeCounts = (userId, brandId, payload, user) => unstable_cache(() => badgeCounts(payload, user, brandId), ['shell-badges', userId, brandId ?? 'all'], { revalidate: 20, tags: [`shell-badges:${userId}`] })();
+export const loadShell = async (payload, user, brandSlug) => {
+    const tenantRes = await payload.find({
+        collection: 'tenants',
+        limit: 100,
+        depth: 0,
+        sort: 'name',
+        pagination: false,
+        user,
+        overrideAccess: false,
+    });
+    const tenants = tenantRes.docs;
+    const slug = brandSlug?.trim();
+    // Default / missing / `all` → All brands. Only an explicit ?brand=slug selects one.
+    const activeBrand = !slug || slug === 'all' ? undefined : tenants.find((t) => t.slug === slug);
+    const [{ attentionCount, scheduledCount, trashCount }, userAvatarUrl] = await Promise.all([
+        cachedBadgeCounts(String(user.id), activeBrand ? String(activeBrand.id) : undefined, payload, user),
+        (async () => {
+            const authUser = user;
+            const avatarRef = authUser.avatar;
+            if (avatarRef && typeof avatarRef === 'object') {
+                return mediaUrl(avatarRef, 'thumbnail');
+            }
+            if (typeof avatarRef === 'string' || typeof avatarRef === 'number') {
+                try {
+                    const media = await payload.findByID({
+                        collection: 'media',
+                        id: avatarRef,
+                        depth: 0,
+                        user,
+                        overrideAccess: false,
+                    });
+                    return mediaUrl(media, 'thumbnail');
+                }
+                catch {
+                    return null;
+                }
+            }
+            return null;
+        })(),
+    ]);
+    const canPublishHere = activeBrand
+        ? isPlatformAdmin(user) || hasTenantRole(user, String(activeBrand.id), 'editor')
+        : isPlatformAdmin(user) || tenants.some((t) => hasTenantRole(user, String(t.id), 'editor'));
+    return {
+        tenants,
+        activeBrand,
+        attentionCount,
+        scheduledCount,
+        trashCount,
+        canPublishHere,
+        userName: user.name ?? user.email,
+        userRole: displayUserRole(user, activeBrand),
+        userAvatarUrl,
+        isAdmin: isPlatformAdmin(user),
+    };
+};
+/* ---------------- formatting, shared by every screen ---------------- */
+export const nf = new Intl.NumberFormat('en-GB');
+export const relative = (value) => {
+    if (!value)
+        return '—';
+    const days = Math.floor((Date.now() - new Date(value).getTime()) / 86400000);
+    if (days <= 0)
+        return 'today';
+    if (days === 1)
+        return 'yesterday';
+    if (days < 30)
+        return `${days}d ago`;
+    if (days < 365)
+        return `${Math.floor(days / 30)}mo ago`;
+    return `${Math.floor(days / 365)}y ago`;
+};
+export const fmtDateTime = formatDateTime;
+export const fmtDate = formatShortDate;
+/** Relationship values arrive populated or bare depending on depth. */
+export const relName = (v) => v && typeof v === 'object' && 'name' in v ? String(v.name) : null;
+export const relSlug = (v) => v && typeof v === 'object' && 'slug' in v ? String(v.slug) : null;
+export const relTitle = (v) => v && typeof v === 'object' && 'title' in v ? String(v.title) : null;
+export const relId = (v) => {
+    if (typeof v === 'string' || typeof v === 'number')
+        return String(v);
+    if (v && typeof v === 'object' && 'id' in v) {
+        const id = v.id;
+        if (typeof id === 'string' || typeof id === 'number')
+            return String(id);
+    }
+    return null;
+};

package/dist/lib/data-transfer.d.ts

@@ -0,0 +1,23 @@
+/**
+ * Shared serializers / parsers for Tools → Export / Import.
+ * Supported formats: json, xml, csv.
+ */
+export type TransferFormat = 'json' | 'xml' | 'csv';
+export type TransferBundle = {
+    format: 'blog-portal-export';
+    version: number;
+    exportedAt?: string;
+    brand?: string | null;
+    brandName?: string;
+    type?: string;
+    counts?: Record<string, number>;
+    posts?: Record<string, unknown>[];
+    media?: Record<string, unknown>[];
+    comments?: Record<string, unknown>[];
+};
+export declare const serializeTransfer: (bundle: TransferBundle, format: TransferFormat) => string;
+export declare const contentTypeFor: (format: TransferFormat) => string;
+export declare const extensionFor: (format: TransferFormat) => string;
+export declare const detectFormat: (filename: string, content: string) => TransferFormat;
+export declare const parseTransfer: (content: string, format?: TransferFormat) => TransferBundle;
+//# sourceMappingURL=data-transfer.d.ts.map

package/dist/lib/data-transfer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"data-transfer.d.ts","sourceRoot":"","sources":["../../app/lib/data-transfer.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,MAAM,MAAM,cAAc,GAAG,MAAM,GAAG,KAAK,GAAG,KAAK,CAAA;AAEnD,MAAM,MAAM,cAAc,GAAG;IAC3B,MAAM,EAAE,oBAAoB,CAAA;IAC5B,OAAO,EAAE,MAAM,CAAA;IACf,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IACrB,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IAC/B,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,CAAA;IACjC,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,CAAA;IACjC,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,CAAA;CACrC,CAAA;AAgGD,eAAO,MAAM,iBAAiB,GAAI,QAAQ,cAAc,EAAE,QAAQ,cAAc,KAAG,MAqFlF,CAAA;AAED,eAAO,MAAM,cAAc,GAAI,QAAQ,cAAc,KAAG,MAIvD,CAAA;AAED,eAAO,MAAM,YAAY,GAAI,QAAQ,cAAc,KAAG,MAAgB,CAAA;AA+MtE,eAAO,MAAM,YAAY,GAAI,UAAU,MAAM,EAAE,SAAS,MAAM,KAAG,cAShE,CAAA;AAED,eAAO,MAAM,aAAa,GAAI,SAAS,MAAM,EAAE,SAAS,cAAc,KAAG,cA6BxE,CAAA"}