@cogenta/schema 0.2.0 → 0.4.1

package/dist/store/scheduled-publish-enqueue.d.ts

@@ -0,0 +1,37 @@
+import type { QueueDriver } from '@cogenta/core';
+import type { CollectionDefinition } from '../types.js';
+import type { ContentStore } from './store.js';
+import type { ContentValues } from './types.js';
+/**
+ * Queues the real publication of an entry saved with `status: 'scheduled'`.
+ *
+ * `../scheduling/publish.ts` was complete and tested from L1 —
+ * `schedulePublication`, `registerScheduledPublishing`, the whole
+ * `QueueDriver`-based mechanism — but nothing anywhere in the repository ever
+ * called `schedulePublication`. An editor could set an entry to "scheduled"
+ * with a future date and nothing would ever happen: the admin showed a
+ * read-only badge, honest about not being wired to anything (L10 audit
+ * follow-up).
+ *
+ * Wrapping the *store* rather than a route is the same choice
+ * `withSearchIndexing`/`withLifecycleEvents` already make, for the same
+ * reason: REST and GraphQL are handed the same store instances by
+ * `serve.ts`, so one wrap covers both transports.
+ *
+ * This module only ever *enqueues*. The actual state change — moving the
+ * entry to `published` — happens in the handler `serve.ts` registers with
+ * `registerScheduledPublishing`, which re-reads the entry before publishing
+ * it: an entry edited back to `draft` before its hour comes must not publish
+ * just because an older job is still sitting in the queue. That re-check is
+ * what makes it safe to enqueue again on every save rather than tracking
+ * (and cancelling) a previous job id here — two jobs racing to publish the
+ * same already-published entry is a no-op, not a bug.
+ */
+export interface ScheduledPublishEnqueueOptions {
+    readonly collection: CollectionDefinition;
+    readonly queue: QueueDriver;
+    /** Called when the enqueue itself fails. Defaults to swallowing it. */
+    readonly onError?: (error: unknown) => void;
+}
+export declare function withScheduledPublishEnqueue<TValues extends ContentValues = ContentValues>(store: ContentStore<TValues>, options: ScheduledPublishEnqueueOptions): ContentStore<TValues>;
+//# sourceMappingURL=scheduled-publish-enqueue.d.ts.map

package/dist/store/scheduled-publish-enqueue.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"scheduled-publish-enqueue.d.ts","sourceRoot":"","sources":["../../src/store/scheduled-publish-enqueue.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,eAAe,CAAA;AAEhD,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,aAAa,CAAA;AACvD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,YAAY,CAAA;AAC9C,OAAO,KAAK,EAAgB,aAAa,EAAE,MAAM,YAAY,CAAA;AAE7D;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,MAAM,WAAW,8BAA8B;IAC7C,QAAQ,CAAC,UAAU,EAAE,oBAAoB,CAAA;IACzC,QAAQ,CAAC,KAAK,EAAE,WAAW,CAAA;IAC3B,uEAAuE;IACvE,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,IAAI,CAAA;CAC5C;AAwBD,wBAAgB,2BAA2B,CAAC,OAAO,SAAS,aAAa,GAAG,aAAa,EACvF,KAAK,EAAE,YAAY,CAAC,OAAO,CAAC,EAC5B,OAAO,EAAE,8BAA8B,GACtC,YAAY,CAAC,OAAO,CAAC,CA4BvB"}

package/dist/store/scheduled-publish-enqueue.js

@@ -0,0 +1,51 @@
+import { schedulePublication } from '../scheduling/publish.js';
+async function enqueueIfScheduled(entry, options) {
+    if (entry.status !== 'scheduled')
+        return;
+    if (entry.publishedAt === null)
+        return;
+    const publishAt = Date.parse(entry.publishedAt);
+    if (!Number.isFinite(publishAt))
+        return;
+    try {
+        await schedulePublication(options.queue, {
+            collection: options.collection.name,
+            entryId: entry.id,
+            locale: entry.locale,
+            publishAt,
+        });
+    }
+    catch (error) {
+        options.onError?.(error);
+    }
+}
+export function withScheduledPublishEnqueue(store, options) {
+    return {
+        ...store,
+        create: async (input) => {
+            const created = await store.create(input);
+            await enqueueIfScheduled(created, options);
+            return created;
+        },
+        update: async (id, input) => {
+            const updated = await store.update(id, input);
+            await enqueueIfScheduled(updated, options);
+            return updated;
+        },
+        // The one route that actually moves an *existing* entry into
+        // `scheduled`: `update()` never changes `status` (contract A keeps that
+        // to `publish`/`unpublish`), so `unpublish(id, { status: 'scheduled',
+        // publishedAt })` is where a schedule set from the admin really lands.
+        unpublish: async (id, input) => {
+            const unpublished = await store.unpublish(id, input);
+            await enqueueIfScheduled(unpublished, options);
+            return unpublished;
+        },
+        restore: async (id, version, input) => {
+            const restored = await store.restore(id, version, input);
+            await enqueueIfScheduled(restored, options);
+            return restored;
+        },
+    };
+}
+//# sourceMappingURL=scheduled-publish-enqueue.js.map

package/dist/store/scheduled-publish-enqueue.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"scheduled-publish-enqueue.js","sourceRoot":"","sources":["../../src/store/scheduled-publish-enqueue.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAA;AAqC9D,KAAK,UAAU,kBAAkB,CAC/B,KAA4B,EAC5B,OAAuC;IAEvC,IAAI,KAAK,CAAC,MAAM,KAAK,WAAW;QAAE,OAAM;IACxC,IAAI,KAAK,CAAC,WAAW,KAAK,IAAI;QAAE,OAAM;IAEtC,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,WAAW,CAAC,CAAA;IAC/C,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC;QAAE,OAAM;IAEvC,IAAI,CAAC;QACH,MAAM,mBAAmB,CAAC,OAAO,CAAC,KAAK,EAAE;YACvC,UAAU,EAAE,OAAO,CAAC,UAAU,CAAC,IAAI;YACnC,OAAO,EAAE,KAAK,CAAC,EAAE;YACjB,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,SAAS;SACV,CAAC,CAAA;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,OAAO,EAAE,CAAC,KAAK,CAAC,CAAA;IAC1B,CAAC;AACH,CAAC;AAED,MAAM,UAAU,2BAA2B,CACzC,KAA4B,EAC5B,OAAuC;IAEvC,OAAO;QACL,GAAG,KAAK;QACR,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE;YACtB,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;YACzC,MAAM,kBAAkB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAA;YAC1C,OAAO,OAAO,CAAA;QAChB,CAAC;QACD,MAAM,EAAE,KAAK,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE;YAC1B,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,MAAM,CAAC,EAAE,EAAE,KAAK,CAAC,CAAA;YAC7C,MAAM,kBAAkB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAA;YAC1C,OAAO,OAAO,CAAA;QAChB,CAAC;QACD,6DAA6D;QAC7D,wEAAwE;QACxE,sEAAsE;QACtE,uEAAuE;QACvE,SAAS,EAAE,KAAK,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE;YAC7B,MAAM,WAAW,GAAG,MAAM,KAAK,CAAC,SAAS,CAAC,EAAE,EAAE,KAAK,CAAC,CAAA;YACpD,MAAM,kBAAkB,CAAC,WAAW,EAAE,OAAO,CAAC,CAAA;YAC9C,OAAO,WAAW,CAAA;QACpB,CAAC;QACD,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;YACpC,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,OAAO,CAAC,EAAE,EAAE,OAAO,EAAE,KAAK,CAAC,CAAA;YACxD,MAAM,kBAAkB,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAA;YAC3C,OAAO,QAAQ,CAAA;QACjB,CAAC;KACF,CAAA;AACH,CAAC"}

package/dist/store/scheduled-publish-failures.d.ts

@@ -0,0 +1,36 @@
+import { type DatabaseHandle } from '@cogenta/core';
+/**
+ * "Contenu programmé dont la publication a échoué" — fiche 38 task 1's last
+ * named source. `registerScheduledPublishing`'s handler (wired by
+ * `cogenta serve`) can throw — the target collection's own validation refuses
+ * the entry, a `restrict` foreign key blocks it, a driver hiccups — and until
+ * now nothing surfaced that anywhere: the queue's own row silently sits in
+ * `status: 'failed'` after its retries are exhausted, and the only way to
+ * notice was to already suspect something and go look at the table by hand.
+ *
+ * Deliberately its own tiny table rather than a query against the queue
+ * driver's internal job table: the queue interface (`@cogenta/core`) has no
+ * "list jobs of this name past their retries" method, and reaching past it
+ * into one specific driver's schema would tie this notice to whichever queue
+ * driver a site happens to run — the opposite of R1. `record`/`clear` are
+ * called from the same handler that already knows collection/entry/locale,
+ * so nothing here has to guess.
+ */
+export declare const SCHEDULED_PUBLISH_FAILURES_TABLE = "cogenta_scheduled_publish_failures";
+export interface ScheduledPublishFailure {
+    readonly collection: string;
+    readonly entryId: string;
+    readonly locale: string;
+    readonly error: string;
+    readonly failedAt: string;
+}
+export interface ScheduledPublishFailureStore {
+    ensureTable(): Promise<void>;
+    /** Idempotent: a second failed attempt on the same entry replaces the first, it does not pile up. */
+    record(failure: Omit<ScheduledPublishFailure, 'failedAt'>): Promise<void>;
+    /** Called once a later attempt (or a fresh schedule) actually publishes the entry. */
+    clear(collection: string, entryId: string, locale: string): Promise<void>;
+    list(): Promise<readonly ScheduledPublishFailure[]>;
+}
+export declare function createScheduledPublishFailureStore(db: DatabaseHandle, now?: () => number): ScheduledPublishFailureStore;
+//# sourceMappingURL=scheduled-publish-failures.d.ts.map

package/dist/store/scheduled-publish-failures.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"scheduled-publish-failures.d.ts","sourceRoot":"","sources":["../../src/store/scheduled-publish-failures.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,cAAc,EAA0B,MAAM,eAAe,CAAA;AAI3E;;;;;;;;;;;;;;;;GAgBG;AACH,eAAO,MAAM,gCAAgC,uCAAuC,CAAA;AAEpF,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;IACxB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;IACvB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;CAC1B;AAED,MAAM,WAAW,4BAA4B;IAC3C,WAAW,IAAI,OAAO,CAAC,IAAI,CAAC,CAAA;IAC5B,qGAAqG;IACrG,MAAM,CAAC,OAAO,EAAE,IAAI,CAAC,uBAAuB,EAAE,UAAU,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IACzE,sFAAsF;IACtF,KAAK,CAAC,UAAU,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IACzE,IAAI,IAAI,OAAO,CAAC,SAAS,uBAAuB,EAAE,CAAC,CAAA;CACpD;AAUD,wBAAgB,kCAAkC,CAChD,EAAE,EAAE,cAAc,EAClB,GAAG,GAAE,MAAM,MAAiB,GAC3B,4BAA4B,CAgD9B"}

package/dist/store/scheduled-publish-failures.js

@@ -0,0 +1,67 @@
+import { identifier, newId, sql } from '@cogenta/core';
+import { textColumn, timestampColumn, uuidColumn } from './columns.js';
+import { indexName } from './naming.js';
+/**
+ * "Contenu programmé dont la publication a échoué" — fiche 38 task 1's last
+ * named source. `registerScheduledPublishing`'s handler (wired by
+ * `cogenta serve`) can throw — the target collection's own validation refuses
+ * the entry, a `restrict` foreign key blocks it, a driver hiccups — and until
+ * now nothing surfaced that anywhere: the queue's own row silently sits in
+ * `status: 'failed'` after its retries are exhausted, and the only way to
+ * notice was to already suspect something and go look at the table by hand.
+ *
+ * Deliberately its own tiny table rather than a query against the queue
+ * driver's internal job table: the queue interface (`@cogenta/core`) has no
+ * "list jobs of this name past their retries" method, and reaching past it
+ * into one specific driver's schema would tie this notice to whichever queue
+ * driver a site happens to run — the opposite of R1. `record`/`clear` are
+ * called from the same handler that already knows collection/entry/locale,
+ * so nothing here has to guess.
+ */
+export const SCHEDULED_PUBLISH_FAILURES_TABLE = 'cogenta_scheduled_publish_failures';
+export function createScheduledPublishFailureStore(db, now = Date.now) {
+    const table = identifier(SCHEDULED_PUBLISH_FAILURES_TABLE, db.dialect);
+    const d = db.dialect;
+    return {
+        async ensureTable() {
+            await db.query(sql `
+        create table if not exists ${table} (
+          id ${uuidColumn(d)} not null primary key,
+          collection ${textColumn(d, 128)} not null,
+          entry_id ${uuidColumn(d)} not null,
+          locale ${textColumn(d, 16)} not null,
+          error ${textColumn(d, 2048)} not null,
+          failed_at ${timestampColumn(d)} not null
+        )`);
+            await db
+                .query(sql `
+          create unique index ${identifier(indexName(SCHEDULED_PUBLISH_FAILURES_TABLE, 'entry'), d)}
+          on ${table} (collection, entry_id, locale)`)
+                .catch(() => undefined); // already there — no portable "if not exists" for indexes
+        },
+        async record(failure) {
+            await db.query(sql `
+        delete from ${table}
+        where collection = ${failure.collection} and entry_id = ${failure.entryId} and locale = ${failure.locale}`);
+            await db.query(sql `
+        insert into ${table} (id, collection, entry_id, locale, error, failed_at)
+        values (${newId(now)}, ${failure.collection}, ${failure.entryId}, ${failure.locale}, ${failure.error}, ${new Date(now()).toISOString()})`);
+        },
+        async clear(collection, entryId, locale) {
+            await db.query(sql `
+        delete from ${table}
+        where collection = ${collection} and entry_id = ${entryId} and locale = ${locale}`);
+        },
+        async list() {
+            const result = await db.query(sql `select * from ${table} order by failed_at desc`);
+            return result.rows.map((row) => ({
+                collection: row.collection,
+                entryId: row.entry_id,
+                locale: row.locale,
+                error: row.error,
+                failedAt: row.failed_at,
+            }));
+        },
+    };
+}
+//# sourceMappingURL=scheduled-publish-failures.js.map

package/dist/store/scheduled-publish-failures.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"scheduled-publish-failures.js","sourceRoot":"","sources":["../../src/store/scheduled-publish-failures.ts"],"names":[],"mappings":"AAAA,OAAO,EAAuB,UAAU,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,eAAe,CAAA;AAC3E,OAAO,EAAE,UAAU,EAAE,eAAe,EAAE,UAAU,EAAE,MAAM,cAAc,CAAA;AACtE,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAA;AAEvC;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,CAAC,MAAM,gCAAgC,GAAG,oCAAoC,CAAA;AA2BpF,MAAM,UAAU,kCAAkC,CAChD,EAAkB,EAClB,GAAG,GAAiB,IAAI,CAAC,GAAG;IAE5B,MAAM,KAAK,GAAG,UAAU,CAAC,gCAAgC,EAAE,EAAE,CAAC,OAAO,CAAC,CAAA;IACtE,MAAM,CAAC,GAAG,EAAE,CAAC,OAAO,CAAA;IAEpB,OAAO;QACL,KAAK,CAAC,WAAW;YACf,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,CAAA;qCACa,KAAK;eAC3B,UAAU,CAAC,CAAC,CAAC;uBACL,UAAU,CAAC,CAAC,EAAE,GAAG,CAAC;qBACpB,UAAU,CAAC,CAAC,CAAC;mBACf,UAAU,CAAC,CAAC,EAAE,EAAE,CAAC;kBAClB,UAAU,CAAC,CAAC,EAAE,IAAI,CAAC;sBACf,eAAe,CAAC,CAAC,CAAC;UAC9B,CAAC,CAAA;YACL,MAAM,EAAE;iBACL,KAAK,CAAC,GAAG,CAAA;gCACc,UAAU,CAAC,SAAS,CAAC,gCAAgC,EAAE,OAAO,CAAC,EAAE,CAAC,CAAC;eACpF,KAAK,iCAAiC,CAAC;iBAC7C,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAA,CAAC,0DAA0D;QACtF,CAAC;QAED,KAAK,CAAC,MAAM,CAAC,OAAO;YAClB,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,CAAA;sBACF,KAAK;6BACE,OAAO,CAAC,UAAU,mBAAmB,OAAO,CAAC,OAAO,iBAAiB,OAAO,CAAC,MAAM,EAAE,CAAC,CAAA;YAC7G,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,CAAA;sBACF,KAAK;kBACT,KAAK,CAAC,GAAG,CAAC,KAAK,OAAO,CAAC,UAAU,KAAK,OAAO,CAAC,OAAO,KAAK,OAAO,CAAC,MAAM,KAAK,OAAO,CAAC,KAAK,KAAK,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,WAAW,EAAE,GAAG,CAAC,CAAA;QAC9I,CAAC;QAED,KAAK,CAAC,KAAK,CAAC,UAAU,EAAE,OAAO,EAAE,MAAM;YACrC,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,CAAA;sBACF,KAAK;6BACE,UAAU,mBAAmB,OAAO,iBAAiB,MAAM,EAAE,CAAC,CAAA;QACvF,CAAC;QAED,KAAK,CAAC,IAAI;YACR,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,KAAK,CAAa,GAAG,CAAA,iBAAiB,KAAK,0BAA0B,CAAC,CAAA;YAC9F,OAAO,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;gBAC/B,UAAU,EAAE,GAAG,CAAC,UAAU;gBAC1B,OAAO,EAAE,GAAG,CAAC,QAAQ;gBACrB,MAAM,EAAE,GAAG,CAAC,MAAM;gBAClB,KAAK,EAAE,GAAG,CAAC,KAAK;gBAChB,QAAQ,EAAE,GAAG,CAAC,SAAS;aACxB,CAAC,CAAC,CAAA;QACL,CAAC;KACF,CAAA;AACH,CAAC"}

package/dist/store/schema-2-1-migration.d.ts

@@ -0,0 +1,29 @@
+import { type Migration } from '@cogenta/core';
+import type { CollectionDefinition } from '../types.js';
+/**
+ * The `schema@2.0 → 2.1` migration (ADR-0027).
+ *
+ * Adds the editorial workflow's two columns to every collection's entry
+ * table — `review_state` (`schema@2.1`'s `reviewState`, orthogonal to
+ * `status` exactly as `deleted_at` is) and `assigned_reviewer`. Both are
+ * additive and reversible:
+ *
+ * - `review_state` is `not null default 'none'`, so every existing row reads
+ *   `'none'` the instant the column exists — a client that reads `status`
+ *   and ignores everything else gets exactly the values it always did.
+ * - `assigned_reviewer` is nullable, defaulting to unassigned.
+ *
+ * **Not marked `destructive`.** Unlike `schema@1.0 → 2.0`, whose rollback
+ * discarded the trash and every classification, rolling this one back only
+ * drops two columns nothing yet depends on the day it ships — there is no
+ * site in production, so no real workflow state exists to lose. A future
+ * migration that adds this to a live site with real review history should
+ * reconsider that if the down path would then discard something real.
+ */
+export interface Schema21MigrationOptions {
+    readonly collections: readonly CollectionDefinition[];
+    /** Overridable so a site can slot this into its own numbering. */
+    readonly id?: string;
+}
+export declare function schema21Migration(options: Schema21MigrationOptions): Migration;
+//# sourceMappingURL=schema-2-1-migration.d.ts.map

package/dist/store/schema-2-1-migration.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema-2-1-migration.d.ts","sourceRoot":"","sources":["../../src/store/schema-2-1-migration.ts"],"names":[],"mappings":"AAAA,OAAO,EAGL,KAAK,SAAS,EAKf,MAAM,eAAe,CAAA;AACtB,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,aAAa,CAAA;AAIvD;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,WAAW,EAAE,SAAS,oBAAoB,EAAE,CAAA;IACrD,kEAAkE;IAClE,QAAQ,CAAC,EAAE,CAAC,EAAE,MAAM,CAAA;CACrB;AAwDD,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,wBAAwB,GAAG,SAAS,CAsC9E"}

package/dist/store/schema-2-1-migration.js

@@ -0,0 +1,71 @@
+import { identifier, sql, unsafeRaw, } from '@cogenta/core';
+import { textColumn } from './columns.js';
+import { entriesTable, indexName } from './naming.js';
+const DEFAULT_ID = '0003_schema_2_1_editorial_workflow';
+function addReviewState(collection, dialect) {
+    const table = identifier(entriesTable(collection.name), dialect);
+    return sql `alter table ${table}
+             add column ${identifier('review_state', dialect)} ${textColumn(dialect, 24)}
+             not null default ${unsafeRaw("'none'")}`;
+}
+function addAssignedReviewer(collection, dialect) {
+    const table = identifier(entriesTable(collection.name), dialect);
+    return sql `alter table ${table}
+             add column ${identifier('assigned_reviewer', dialect)} ${textColumn(dialect, 64)}`;
+}
+function dropReviewState(collection, dialect) {
+    const table = identifier(entriesTable(collection.name), dialect);
+    return sql `alter table ${table} drop column ${identifier('review_state', dialect)}`;
+}
+function dropAssignedReviewer(collection, dialect) {
+    const table = identifier(entriesTable(collection.name), dialect);
+    return sql `alter table ${table} drop column ${identifier('assigned_reviewer', dialect)}`;
+}
+function reviewIndex(collection, dialect) {
+    const name = entriesTable(collection.name);
+    return sql `create index ${identifier(indexName(name, 'review'), dialect)}
+             on ${identifier(name, dialect)}
+             (${identifier('review_state', dialect)}, ${identifier('assigned_reviewer', dialect)})`;
+}
+/** MySQL needs the table named to drop an index; SQLite (and Postgres) name it directly. */
+function dropReviewIndexOnTable(collection, dialect) {
+    return sql `drop index ${identifier(indexName(entriesTable(collection.name), 'review'), dialect)}
+             on ${identifier(entriesTable(collection.name), dialect)}`;
+}
+function dropReviewIndexStandalone(collection, dialect) {
+    return sql `drop index ${identifier(indexName(entriesTable(collection.name), 'review'), dialect)}`;
+}
+export function schema21Migration(options) {
+    const { collections } = options;
+    return {
+        id: options.id ?? DEFAULT_ID,
+        name: 'schema@2.1 — editorial workflow and owner permission',
+        destructive: false,
+        impact: "Adds review_state (not null, default 'none') and a nullable assigned_reviewer column " +
+            'to every collection. Moves no existing row and changes no existing value: a client ' +
+            'that reads status and ignores the rest sees exactly what it always did. The rollback ' +
+            'drops both columns, which is safe today because no site in production carries real ' +
+            'review history yet.',
+        estimatedDurationMs: 300 * Math.max(1, collections.length),
+        up: async (tx) => {
+            const dialect = tx.dialect;
+            for (const collection of collections) {
+                await tx.query(addReviewState(collection, dialect));
+                await tx.query(addAssignedReviewer(collection, dialect));
+                // `create index` has no portable `if not exists`; a failure here means
+                // it is already there, which is the state we wanted anyway.
+                await tx.query(reviewIndex(collection, dialect)).catch(() => undefined);
+            }
+        },
+        down: async (tx) => {
+            const dialect = tx.dialect;
+            for (const collection of [...collections].reverse()) {
+                const drop = dialect === 'mysql' ? dropReviewIndexOnTable : dropReviewIndexStandalone;
+                await tx.query(drop(collection, dialect)).catch(() => undefined);
+                await tx.query(dropAssignedReviewer(collection, dialect));
+                await tx.query(dropReviewState(collection, dialect));
+            }
+        },
+    };
+}
+//# sourceMappingURL=schema-2-1-migration.js.map

package/dist/store/schema-2-1-migration.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema-2-1-migration.js","sourceRoot":"","sources":["../../src/store/schema-2-1-migration.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,UAAU,EAIV,GAAG,EACH,SAAS,GACV,MAAM,eAAe,CAAA;AAEtB,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAA;AACzC,OAAO,EAAE,YAAY,EAAE,SAAS,EAAE,MAAM,aAAa,CAAA;AA6BrD,MAAM,UAAU,GAAG,oCAAoC,CAAA;AAEvD,SAAS,cAAc,CAAC,UAAgC,EAAE,OAAwB;IAChF,MAAM,KAAK,GAAG,UAAU,CAAC,YAAY,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,OAAO,CAAC,CAAA;IAChE,OAAO,GAAG,CAAA,eAAe,KAAK;0BACN,UAAU,CAAC,cAAc,EAAE,OAAO,CAAC,IAAI,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC;gCACxD,SAAS,CAAC,QAAQ,CAAC,EAAE,CAAA;AACrD,CAAC;AAED,SAAS,mBAAmB,CAC1B,UAAgC,EAChC,OAAwB;IAExB,MAAM,KAAK,GAAG,UAAU,CAAC,YAAY,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,OAAO,CAAC,CAAA;IAChE,OAAO,GAAG,CAAA,eAAe,KAAK;0BACN,UAAU,CAAC,mBAAmB,EAAE,OAAO,CAAC,IAAI,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,EAAE,CAAA;AAC/F,CAAC;AAED,SAAS,eAAe,CAAC,UAAgC,EAAE,OAAwB;IACjF,MAAM,KAAK,GAAG,UAAU,CAAC,YAAY,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,OAAO,CAAC,CAAA;IAChE,OAAO,GAAG,CAAA,eAAe,KAAK,gBAAgB,UAAU,CAAC,cAAc,EAAE,OAAO,CAAC,EAAE,CAAA;AACrF,CAAC;AAED,SAAS,oBAAoB,CAC3B,UAAgC,EAChC,OAAwB;IAExB,MAAM,KAAK,GAAG,UAAU,CAAC,YAAY,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,OAAO,CAAC,CAAA;IAChE,OAAO,GAAG,CAAA,eAAe,KAAK,gBAAgB,UAAU,CAAC,mBAAmB,EAAE,OAAO,CAAC,EAAE,CAAA;AAC1F,CAAC;AAED,SAAS,WAAW,CAAC,UAAgC,EAAE,OAAwB;IAC7E,MAAM,IAAI,GAAG,YAAY,CAAC,UAAU,CAAC,IAAI,CAAC,CAAA;IAC1C,OAAO,GAAG,CAAA,gBAAgB,UAAU,CAAC,SAAS,CAAC,IAAI,EAAE,QAAQ,CAAC,EAAE,OAAO,CAAC;kBACxD,UAAU,CAAC,IAAI,EAAE,OAAO,CAAC;gBAC3B,UAAU,CAAC,cAAc,EAAE,OAAO,CAAC,KAAK,UAAU,CAAC,mBAAmB,EAAE,OAAO,CAAC,GAAG,CAAA;AACnG,CAAC;AAED,4FAA4F;AAC5F,SAAS,sBAAsB,CAC7B,UAAgC,EAChC,OAAwB;IAExB,OAAO,GAAG,CAAA,cAAc,UAAU,CAAC,SAAS,CAAC,YAAY,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,QAAQ,CAAC,EAAE,OAAO,CAAC;kBAC/E,UAAU,CAAC,YAAY,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,OAAO,CAAC,EAAE,CAAA;AACtE,CAAC;AAED,SAAS,yBAAyB,CAChC,UAAgC,EAChC,OAAwB;IAExB,OAAO,GAAG,CAAA,cAAc,UAAU,CAAC,SAAS,CAAC,YAAY,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,QAAQ,CAAC,EAAE,OAAO,CAAC,EAAE,CAAA;AACnG,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,OAAiC;IACjE,MAAM,EAAE,WAAW,EAAE,GAAG,OAAO,CAAA;IAE/B,OAAO;QACL,EAAE,EAAE,OAAO,CAAC,EAAE,IAAI,UAAU;QAC5B,IAAI,EAAE,sDAAsD;QAC5D,WAAW,EAAE,KAAK;QAClB,MAAM,EACJ,uFAAuF;YACvF,qFAAqF;YACrF,uFAAuF;YACvF,qFAAqF;YACrF,qBAAqB;QACvB,mBAAmB,EAAE,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,WAAW,CAAC,MAAM,CAAC;QAE1D,EAAE,EAAE,KAAK,EAAE,EAAe,EAAiB,EAAE;YAC3C,MAAM,OAAO,GAAG,EAAE,CAAC,OAAO,CAAA;YAE1B,KAAK,MAAM,UAAU,IAAI,WAAW,EAAE,CAAC;gBACrC,MAAM,EAAE,CAAC,KAAK,CAAC,cAAc,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC,CAAA;gBACnD,MAAM,EAAE,CAAC,KAAK,CAAC,mBAAmB,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC,CAAA;gBACxD,uEAAuE;gBACvE,4DAA4D;gBAC5D,MAAM,EAAE,CAAC,KAAK,CAAC,WAAW,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAA;YACzE,CAAC;QACH,CAAC;QAED,IAAI,EAAE,KAAK,EAAE,EAAe,EAAiB,EAAE;YAC7C,MAAM,OAAO,GAAG,EAAE,CAAC,OAAO,CAAA;YAE1B,KAAK,MAAM,UAAU,IAAI,CAAC,GAAG,WAAW,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC;gBACpD,MAAM,IAAI,GAAG,OAAO,KAAK,OAAO,CAAC,CAAC,CAAC,sBAAsB,CAAC,CAAC,CAAC,yBAAyB,CAAA;gBACrF,MAAM,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAA;gBAChE,MAAM,EAAE,CAAC,KAAK,CAAC,oBAAoB,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC,CAAA;gBACzD,MAAM,EAAE,CAAC,KAAK,CAAC,eAAe,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC,CAAA;YACtD,CAAC;QACH,CAAC;KACF,CAAA;AACH,CAAC"}

package/dist/store/search-console-store.d.ts

@@ -0,0 +1,44 @@
+import { type DatabaseHandle } from '@cogenta/core';
+/**
+ * The one Google Search Console connection a site can have (fiche 70 task
+ * 4, ADR-0032). Same encryption discipline as `@cogenta/agents`'
+ * `ProviderConfigStore` and `@cogenta/mcp`'s connection store — AES-256-GCM
+ * via `node:crypto`, key derived from `COGENTA_AUTH_SIGNING_KEY` with a
+ * purpose-specific salt so the derived key is never the literal signing key
+ * reused across purposes (R7: no second secret to generate, rotate or
+ * lose). The refresh token is the only thing encrypted; `siteUrl` is not a
+ * secret (it is the property URL, already public knowledge to anyone who
+ * knows the site's own domain).
+ *
+ * Real database table (`ensureSearchConsoleConnectionTable`), not a file
+ * store: a Search Console connection is exactly the kind of "fixed row, not
+ * schema-declared content" `menu-tables.ts`/`pattern-tables.ts` already
+ * established a home for in this package, and it gets the same
+ * SQLite/Postgres/MySQL portability their tables already have for free.
+ */
+export interface SearchConsoleConnectionSummary {
+    readonly siteUrl: string;
+    readonly connectedAt: string;
+    readonly updatedAt: string;
+}
+export interface ConnectSearchConsoleInput {
+    readonly siteUrl: string;
+    readonly refreshToken: string;
+}
+export interface SearchConsoleConnectionStore {
+    /** `null` when no site has ever completed the OAuth flow. */
+    read(): Promise<SearchConsoleConnectionSummary | null>;
+    /** Encrypts and persists `refreshToken`; replaces any existing connection (a site connects to at most one GSC property at a time). */
+    connect(input: ConnectSearchConsoleInput): Promise<SearchConsoleConnectionSummary>;
+    disconnect(): Promise<void>;
+    /** The one place the real refresh token is ever decrypted. Throws `SEARCH_CONSOLE_NOT_CONNECTED` if there is none. */
+    decryptRefreshToken(): Promise<string>;
+}
+export interface SearchConsoleConnectionStoreOptions {
+    readonly db: DatabaseHandle;
+    /** `COGENTA_AUTH_SIGNING_KEY` — the encryption key is derived from it, never stored itself. */
+    readonly signingKey: string;
+    readonly now?: () => Date;
+}
+export declare function createSearchConsoleConnectionStore(options: SearchConsoleConnectionStoreOptions): SearchConsoleConnectionStore;
+//# sourceMappingURL=search-console-store.d.ts.map

package/dist/store/search-console-store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"search-console-store.d.ts","sourceRoot":"","sources":["../../src/store/search-console-store.ts"],"names":[],"mappings":"AACA,OAAO,EAAgB,KAAK,cAAc,EAAmB,MAAM,eAAe,CAAA;AAMlF;;;;;;;;;;;;;;;;GAgBG;AAEH,MAAM,WAAW,8BAA8B;IAC7C,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;IACxB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAA;IAC5B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;CAC3B;AAED,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;IACxB,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAA;CAC9B;AAED,MAAM,WAAW,4BAA4B;IAC3C,6DAA6D;IAC7D,IAAI,IAAI,OAAO,CAAC,8BAA8B,GAAG,IAAI,CAAC,CAAA;IACtD,sIAAsI;IACtI,OAAO,CAAC,KAAK,EAAE,yBAAyB,GAAG,OAAO,CAAC,8BAA8B,CAAC,CAAA;IAClF,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC,CAAA;IAC3B,sHAAsH;IACtH,mBAAmB,IAAI,OAAO,CAAC,MAAM,CAAC,CAAA;CACvC;AA+BD,MAAM,WAAW,mCAAmC;IAClD,QAAQ,CAAC,EAAE,EAAE,cAAc,CAAA;IAC3B,+FAA+F;IAC/F,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,IAAI,CAAA;CAC1B;AAED,wBAAgB,kCAAkC,CAChD,OAAO,EAAE,mCAAmC,GAC3C,4BAA4B,CA+E9B"}

package/dist/store/search-console-store.js

@@ -0,0 +1,90 @@
+import { createCipheriv, createDecipheriv, randomBytes, scryptSync } from 'node:crypto';
+import { CogentaError, identifier, sql } from '@cogenta/core';
+import { SEARCH_CONSOLE_CONNECTION_ID, SEARCH_CONSOLE_CONNECTION_TABLE, } from './search-console-tables.js';
+const KEY_DERIVATION_SALT = 'cogenta-search-console-secrets-v1';
+const ALGORITHM = 'aes-256-gcm';
+function deriveKey(signingKey) {
+    return scryptSync(signingKey, KEY_DERIVATION_SALT, 32);
+}
+function notConnected() {
+    return new CogentaError({
+        code: 'SEARCH_CONSOLE_NOT_CONNECTED',
+        message: 'No site has connected a Google Search Console property yet.',
+        hint: "Connect one from the SEO screen's Diagnostics tab first.",
+    });
+}
+function toSummary(row) {
+    return { siteUrl: row.site_url, connectedAt: row.connected_at, updatedAt: row.updated_at };
+}
+export function createSearchConsoleConnectionStore(options) {
+    const { db } = options;
+    const now = options.now ?? (() => new Date());
+    const key = deriveKey(options.signingKey);
+    const table = identifier(SEARCH_CONSOLE_CONNECTION_TABLE, db.dialect);
+    function encrypt(plaintext) {
+        const iv = randomBytes(12);
+        const cipher = createCipheriv(ALGORITHM, key, iv);
+        const ciphertext = Buffer.concat([cipher.update(plaintext, 'utf8'), cipher.final()]);
+        return {
+            iv: iv.toString('base64'),
+            authTag: cipher.getAuthTag().toString('base64'),
+            ciphertext: ciphertext.toString('base64'),
+        };
+    }
+    function decrypt(row) {
+        const decipher = createDecipheriv(ALGORITHM, key, Buffer.from(row.refresh_token_iv, 'base64'));
+        decipher.setAuthTag(Buffer.from(row.refresh_token_auth_tag, 'base64'));
+        const plaintext = Buffer.concat([
+            decipher.update(Buffer.from(row.refresh_token_ciphertext, 'base64')),
+            decipher.final(),
+        ]);
+        return plaintext.toString('utf8');
+    }
+    async function findRow() {
+        const found = await db.query(sql `select * from ${table} where id = ${SEARCH_CONSOLE_CONNECTION_ID}`);
+        return found.rows[0] ?? null;
+    }
+    return {
+        async read() {
+            const row = await findRow();
+            return row === null ? null : toSummary(row);
+        },
+        async connect(input) {
+            const { iv, authTag, ciphertext } = encrypt(input.refreshToken);
+            const existing = await findRow();
+            const nowIso = now().toISOString();
+            const connectedAt = existing?.connected_at ?? nowIso;
+            if (existing === null) {
+                await db.query(sql `
+          insert into ${table} (
+            id, site_url, refresh_token_iv, refresh_token_auth_tag,
+            refresh_token_ciphertext, connected_at, updated_at
+          ) values (
+            ${SEARCH_CONSOLE_CONNECTION_ID}, ${input.siteUrl}, ${iv}, ${authTag},
+            ${ciphertext}, ${connectedAt}, ${nowIso}
+          )`);
+            }
+            else {
+                await db.query(sql `
+          update ${table} set
+            site_url = ${input.siteUrl},
+            refresh_token_iv = ${iv},
+            refresh_token_auth_tag = ${authTag},
+            refresh_token_ciphertext = ${ciphertext},
+            updated_at = ${nowIso}
+          where id = ${SEARCH_CONSOLE_CONNECTION_ID}`);
+            }
+            return { siteUrl: input.siteUrl, connectedAt, updatedAt: nowIso };
+        },
+        async disconnect() {
+            await db.query(sql `delete from ${table} where id = ${SEARCH_CONSOLE_CONNECTION_ID}`);
+        },
+        async decryptRefreshToken() {
+            const row = await findRow();
+            if (row === null)
+                throw notConnected();
+            return decrypt(row);
+        },
+    };
+}
+//# sourceMappingURL=search-console-store.js.map

package/dist/store/search-console-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"search-console-store.js","sourceRoot":"","sources":["../../src/store/search-console-store.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,gBAAgB,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AACvF,OAAO,EAAE,YAAY,EAAuB,UAAU,EAAE,GAAG,EAAE,MAAM,eAAe,CAAA;AAClF,OAAO,EACL,4BAA4B,EAC5B,+BAA+B,GAChC,MAAM,4BAA4B,CAAA;AAmDnC,MAAM,mBAAmB,GAAG,mCAAmC,CAAA;AAC/D,MAAM,SAAS,GAAG,aAAa,CAAA;AAE/B,SAAS,SAAS,CAAC,UAAkB;IACnC,OAAO,UAAU,CAAC,UAAU,EAAE,mBAAmB,EAAE,EAAE,CAAC,CAAA;AACxD,CAAC;AAED,SAAS,YAAY;IACnB,OAAO,IAAI,YAAY,CAAC;QACtB,IAAI,EAAE,8BAA8B;QACpC,OAAO,EAAE,6DAA6D;QACtE,IAAI,EAAE,0DAA0D;KACjE,CAAC,CAAA;AACJ,CAAC;AAED,SAAS,SAAS,CAAC,GAAkB;IACnC,OAAO,EAAE,OAAO,EAAE,GAAG,CAAC,QAAQ,EAAE,WAAW,EAAE,GAAG,CAAC,YAAY,EAAE,SAAS,EAAE,GAAG,CAAC,UAAU,EAAE,CAAA;AAC5F,CAAC;AASD,MAAM,UAAU,kCAAkC,CAChD,OAA4C;IAE5C,MAAM,EAAE,EAAE,EAAE,GAAG,OAAO,CAAA;IACtB,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,CAAC,GAAS,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,CAAA;IACnD,MAAM,GAAG,GAAG,SAAS,CAAC,OAAO,CAAC,UAAU,CAAC,CAAA;IACzC,MAAM,KAAK,GAAG,UAAU,CAAC,+BAA+B,EAAE,EAAE,CAAC,OAAO,CAAC,CAAA;IAErE,SAAS,OAAO,CAAC,SAAiB;QAChC,MAAM,EAAE,GAAG,WAAW,CAAC,EAAE,CAAC,CAAA;QAC1B,MAAM,MAAM,GAAG,cAAc,CAAC,SAAS,EAAE,GAAG,EAAE,EAAE,CAAC,CAAA;QACjD,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAA;QACpF,OAAO;YACL,EAAE,EAAE,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC;YACzB,OAAO,EAAE,MAAM,CAAC,UAAU,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC;YAC/C,UAAU,EAAE,UAAU,CAAC,QAAQ,CAAC,QAAQ,CAAC;SAC1C,CAAA;IACH,CAAC;IAED,SAAS,OAAO,CAAC,GAAkB;QACjC,MAAM,QAAQ,GAAG,gBAAgB,CAAC,SAAS,EAAE,GAAG,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,gBAAgB,EAAE,QAAQ,CAAC,CAAC,CAAA;QAC9F,QAAQ,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,sBAAsB,EAAE,QAAQ,CAAC,CAAC,CAAA;QACtE,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC;YAC9B,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,wBAAwB,EAAE,QAAQ,CAAC,CAAC;YACpE,QAAQ,CAAC,KAAK,EAAE;SACjB,CAAC,CAAA;QACF,OAAO,SAAS,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAA;IACnC,CAAC;IAED,KAAK,UAAU,OAAO;QACpB,MAAM,KAAK,GAAG,MAAM,EAAE,CAAC,KAAK,CAC1B,GAAG,CAAA,iBAAiB,KAAK,eAAe,4BAA4B,EAAE,CACvE,CAAA;QACD,OAAO,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,CAAA;IAC9B,CAAC;IAED,OAAO;QACL,KAAK,CAAC,IAAI;YACR,MAAM,GAAG,GAAG,MAAM,OAAO,EAAE,CAAA;YAC3B,OAAO,GAAG,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,CAAA;QAC7C,CAAC;QAED,KAAK,CAAC,OAAO,CAAC,KAAK;YACjB,MAAM,EAAE,EAAE,EAAE,OAAO,EAAE,UAAU,EAAE,GAAG,OAAO,CAAC,KAAK,CAAC,YAAY,CAAC,CAAA;YAC/D,MAAM,QAAQ,GAAG,MAAM,OAAO,EAAE,CAAA;YAChC,MAAM,MAAM,GAAG,GAAG,EAAE,CAAC,WAAW,EAAE,CAAA;YAClC,MAAM,WAAW,GAAG,QAAQ,EAAE,YAAY,IAAI,MAAM,CAAA;YAEpD,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;gBACtB,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,CAAA;wBACF,KAAK;;;;cAIf,4BAA4B,KAAK,KAAK,CAAC,OAAO,KAAK,EAAE,KAAK,OAAO;cACjE,UAAU,KAAK,WAAW,KAAK,MAAM;YACvC,CAAC,CAAA;YACP,CAAC;iBAAM,CAAC;gBACN,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,CAAA;mBACP,KAAK;yBACC,KAAK,CAAC,OAAO;iCACL,EAAE;uCACI,OAAO;yCACL,UAAU;2BACxB,MAAM;uBACV,4BAA4B,EAAE,CAAC,CAAA;YAChD,CAAC;YAED,OAAO,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,WAAW,EAAE,SAAS,EAAE,MAAM,EAAE,CAAA;QACnE,CAAC;QAED,KAAK,CAAC,UAAU;YACd,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,CAAA,eAAe,KAAK,eAAe,4BAA4B,EAAE,CAAC,CAAA;QACtF,CAAC;QAED,KAAK,CAAC,mBAAmB;YACvB,MAAM,GAAG,GAAG,MAAM,OAAO,EAAE,CAAA;YAC3B,IAAI,GAAG,KAAK,IAAI;gBAAE,MAAM,YAAY,EAAE,CAAA;YACtC,OAAO,OAAO,CAAC,GAAG,CAAC,CAAA;QACrB,CAAC;KACF,CAAA;AACH,CAAC"}

package/dist/store/search-console-tables.d.ts

@@ -0,0 +1,14 @@
+import { type DatabaseHandle } from '@cogenta/core';
+/**
+ * Google Search Console connector (fiche 70 task 4, ADR-0032) — same
+ * one-fixed-table treatment as `menu-tables.ts`/`pattern-tables.ts`: this is
+ * not schema-declared content, it is one site-wide connection record. At
+ * most one row ever exists (`id` is always `'default'`), because a Cogenta
+ * install is one site with one Search Console property, not a multi-tenant
+ * registry.
+ */
+export declare const SEARCH_CONSOLE_CONNECTION_TABLE = "cogenta_seo_search_console_connection";
+/** The table's one and only possible row id. */
+export declare const SEARCH_CONSOLE_CONNECTION_ID = "default";
+export declare function ensureSearchConsoleConnectionTable(db: DatabaseHandle): Promise<void>;
+//# sourceMappingURL=search-console-tables.d.ts.map

package/dist/store/search-console-tables.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"search-console-tables.d.ts","sourceRoot":"","sources":["../../src/store/search-console-tables.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,cAAc,EAA8B,MAAM,eAAe,CAAA;AAG/E;;;;;;;GAOG;AACH,eAAO,MAAM,+BAA+B,0CAA0C,CAAA;AAEtF,gDAAgD;AAChD,eAAO,MAAM,4BAA4B,YAAY,CAAA;AAKrD,wBAAsB,kCAAkC,CAAC,EAAE,EAAE,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC,CAa1F"}

package/dist/store/search-console-tables.js

@@ -0,0 +1,29 @@
+import { identifier, sql, unsafeRaw } from '@cogenta/core';
+import { textColumn, timestampColumn } from './columns.js';
+/**
+ * Google Search Console connector (fiche 70 task 4, ADR-0032) — same
+ * one-fixed-table treatment as `menu-tables.ts`/`pattern-tables.ts`: this is
+ * not schema-declared content, it is one site-wide connection record. At
+ * most one row ever exists (`id` is always `'default'`), because a Cogenta
+ * install is one site with one Search Console property, not a multi-tenant
+ * registry.
+ */
+export const SEARCH_CONSOLE_CONNECTION_TABLE = 'cogenta_seo_search_console_connection';
+/** The table's one and only possible row id. */
+export const SEARCH_CONSOLE_CONNECTION_ID = 'default';
+/** How long a GSC `siteUrl` (`https://example.com/` or `sc-domain:example.com`) may be. */
+const SITE_URL_LENGTH = 255;
+export async function ensureSearchConsoleConnectionTable(db) {
+    const dialect = db.dialect;
+    const table = identifier(SEARCH_CONSOLE_CONNECTION_TABLE, dialect);
+    await db.query(sql `create table if not exists ${table} (
+    ${identifier('id', dialect)} ${textColumn(dialect, 16)} not null primary key,
+    ${identifier('site_url', dialect)} ${textColumn(dialect, SITE_URL_LENGTH)} not null,
+    ${identifier('refresh_token_iv', dialect)} ${textColumn(dialect, 64)} not null,
+    ${identifier('refresh_token_auth_tag', dialect)} ${textColumn(dialect, 64)} not null,
+    ${identifier('refresh_token_ciphertext', dialect)} ${unsafeRaw('text')} not null,
+    ${identifier('connected_at', dialect)} ${timestampColumn(dialect)} not null,
+    ${identifier('updated_at', dialect)} ${timestampColumn(dialect)} not null
+  )`);
+}
+//# sourceMappingURL=search-console-tables.js.map

package/dist/store/search-console-tables.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"search-console-tables.js","sourceRoot":"","sources":["../../src/store/search-console-tables.ts"],"names":[],"mappings":"AAAA,OAAO,EAAuB,UAAU,EAAE,GAAG,EAAE,SAAS,EAAE,MAAM,eAAe,CAAA;AAC/E,OAAO,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,cAAc,CAAA;AAE1D;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,+BAA+B,GAAG,uCAAuC,CAAA;AAEtF,gDAAgD;AAChD,MAAM,CAAC,MAAM,4BAA4B,GAAG,SAAS,CAAA;AAErD,2FAA2F;AAC3F,MAAM,eAAe,GAAG,GAAG,CAAA;AAE3B,MAAM,CAAC,KAAK,UAAU,kCAAkC,CAAC,EAAkB;IACzE,MAAM,OAAO,GAAG,EAAE,CAAC,OAAO,CAAA;IAC1B,MAAM,KAAK,GAAG,UAAU,CAAC,+BAA+B,EAAE,OAAO,CAAC,CAAA;IAElE,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,CAAA,8BAA8B,KAAK;MACjD,UAAU,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC;MACpD,UAAU,CAAC,UAAU,EAAE,OAAO,CAAC,IAAI,UAAU,CAAC,OAAO,EAAE,eAAe,CAAC;MACvE,UAAU,CAAC,kBAAkB,EAAE,OAAO,CAAC,IAAI,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC;MAClE,UAAU,CAAC,wBAAwB,EAAE,OAAO,CAAC,IAAI,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC;MACxE,UAAU,CAAC,0BAA0B,EAAE,OAAO,CAAC,IAAI,SAAS,CAAC,MAAM,CAAC;MACpE,UAAU,CAAC,cAAc,EAAE,OAAO,CAAC,IAAI,eAAe,CAAC,OAAO,CAAC;MAC/D,UAAU,CAAC,YAAY,EAAE,OAAO,CAAC,IAAI,eAAe,CAAC,OAAO,CAAC;IAC/D,CAAC,CAAA;AACL,CAAC"}

package/dist/store/search-indexing.d.ts

@@ -30,5 +30,41 @@ export interface SearchIndexingOptions {
      */
     readonly onError?: (error: unknown) => void;
 }
+/**
+ * Re-derives the indexed document for one entry.
+ *
+ * The published face is asked for **first**, and it is the one indexed
+ * whenever it exists. That ordering is the whole safety property: with drafts
+ * enabled, `update()` returns the working face of an entry whose `status` is
+ * still `published`, and indexing *that* would file unreviewed text under a
+ * status a public search is allowed to reach. Reading back through
+ * `state: 'published'` makes it structurally impossible — the store only
+ * returns a row there when its status really is `published`.
+ *
+ * When there is no published face, the working one is indexed under its real
+ * status (`draft`, `scheduled`, `archived`), which is what lets the admin
+ * find a draft while `SearchQuery`'s `published` default keeps it away from
+ * anyone who did not explicitly ask for it and hold the permission to.
+ */
+declare function reindex<TValues extends ContentValues>(store: ContentStore<TValues>, options: SearchIndexingOptions, id: string): Promise<void>;
+/**
+ * Re-derives the indexed document for one entry — exported so a full rebuild
+ * (`reindexAll`, and `cogenta`'s "Reindex search" tool, fiche 24 task 3) uses
+ * the exact same per-entry logic as the write path, rather than a second
+ * copy that could drift from what `withSearchIndexing` actually does on save.
+ */
+export declare const reindexEntry: typeof reindex;
+/**
+ * Walks every entry of a collection — trashed included, since a trashed entry
+ * can still be `published` (ADR-0022: trash is orthogonal to status) and a
+ * stale search hit for it is exactly the kind of thing a full rebuild exists
+ * to fix — and re-derives its indexed document.
+ *
+ * This is the "Reindexer la recherche" tool (fiche 24 task 3): after an
+ * import, or after `SearchDriver.clear()`, nothing else ever repopulates the
+ * index for content that already existed before the write path saw it.
+ */
+export declare function reindexAll<TValues extends ContentValues = ContentValues>(store: ContentStore<TValues>, options: SearchIndexingOptions, onProgress?: (count: number) => void): Promise<number>;
 export declare function withSearchIndexing<TValues extends ContentValues = ContentValues>(store: ContentStore<TValues>, options: SearchIndexingOptions): ContentStore<TValues>;
+export {};
 //# sourceMappingURL=search-indexing.d.ts.map

package/dist/store/search-indexing.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"search-indexing.d.ts","sourceRoot":"","sources":["../../src/store/search-indexing.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAA;AACtD,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,aAAa,CAAA;AACvD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,YAAY,CAAA;AAC9C,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,YAAY,CAAA;AAE/C;;;;;;;;;;;;;GAaG;AAEH,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,UAAU,EAAE,oBAAoB,CAAA;IACzC,QAAQ,CAAC,KAAK,EAAE,YAAY,CAAA;IAC5B;;;;;;;;OAQG;IACH,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,IAAI,CAAA;CAC5C;AA0CD,wBAAgB,kBAAkB,CAAC,OAAO,SAAS,aAAa,GAAG,aAAa,EAC9E,KAAK,EAAE,YAAY,CAAC,OAAO,CAAC,EAC5B,OAAO,EAAE,qBAAqB,GAC7B,YAAY,CAAC,OAAO,CAAC,CA2BvB"}
+{"version":3,"file":"search-indexing.d.ts","sourceRoot":"","sources":["../../src/store/search-indexing.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAA;AACtD,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,aAAa,CAAA;AACvD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,YAAY,CAAA;AAC9C,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,YAAY,CAAA;AAE/C;;;;;;;;;;;;;GAaG;AAEH,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,UAAU,EAAE,oBAAoB,CAAA;IACzC,QAAQ,CAAC,KAAK,EAAE,YAAY,CAAA;IAC5B;;;;;;;;OAQG;IACH,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,IAAI,CAAA;CAC5C;AAED;;;;;;;;;;;;;;;GAeG;AACH,iBAAe,OAAO,CAAC,OAAO,SAAS,aAAa,EAClD,KAAK,EAAE,YAAY,CAAC,OAAO,CAAC,EAC5B,OAAO,EAAE,qBAAqB,EAC9B,EAAE,EAAE,MAAM,GACT,OAAO,CAAC,IAAI,CAAC,CAkBf;AAED;;;;;GAKG;AACH,eAAO,MAAM,YAAY,gBAAU,CAAA;AAEnC;;;;;;;;;GASG;AACH,wBAAsB,UAAU,CAAC,OAAO,SAAS,aAAa,GAAG,aAAa,EAC5E,KAAK,EAAE,YAAY,CAAC,OAAO,CAAC,EAC5B,OAAO,EAAE,qBAAqB,EAC9B,UAAU,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,IAAI,GACnC,OAAO,CAAC,MAAM,CAAC,CAcjB;AAED,wBAAgB,kBAAkB,CAAC,OAAO,SAAS,aAAa,GAAG,aAAa,EAC9E,KAAK,EAAE,YAAY,CAAC,OAAO,CAAC,EAC5B,OAAO,EAAE,qBAAqB,GAC7B,YAAY,CAAC,OAAO,CAAC,CA2BvB"}

package/dist/store/search-indexing.js

@@ -34,6 +34,39 @@ async function reindex(store, options, id) {
         options.onError?.(error);
     }
 }
+/**
+ * Re-derives the indexed document for one entry — exported so a full rebuild
+ * (`reindexAll`, and `cogenta`'s "Reindex search" tool, fiche 24 task 3) uses
+ * the exact same per-entry logic as the write path, rather than a second
+ * copy that could drift from what `withSearchIndexing` actually does on save.
+ */
+export const reindexEntry = reindex;
+/**
+ * Walks every entry of a collection — trashed included, since a trashed entry
+ * can still be `published` (ADR-0022: trash is orthogonal to status) and a
+ * stale search hit for it is exactly the kind of thing a full rebuild exists
+ * to fix — and re-derives its indexed document.
+ *
+ * This is the "Reindexer la recherche" tool (fiche 24 task 3): after an
+ * import, or after `SearchDriver.clear()`, nothing else ever repopulates the
+ * index for content that already existed before the write path saw it.
+ */
+export async function reindexAll(store, options, onProgress) {
+    let cursor;
+    let count = 0;
+    for (;;) {
+        const page = await store.list({ trashed: 'include', limit: 100, ...(cursor ? { cursor } : {}) });
+        for (const entry of page.items) {
+            await reindex(store, options, entry.id);
+            count += 1;
+            onProgress?.(count);
+        }
+        if (!page.hasMore || page.nextCursor === null)
+            break;
+        cursor = page.nextCursor;
+    }
+    return count;
+}
 export function withSearchIndexing(store, options) {
     async function after(entry) {
         await reindex(store, options, entry.id);