@commonpub/layer 0.8.9 → 0.9.1

package/components/blocks/BlockCheckpointView.vue

@@ -18,7 +18,7 @@ onMounted(() => {
 </script>
 
 <template>
-  <div class="cpub-block-checkpoint" :class="{ visible: completed }">
+  <div class="cpub-block-checkpoint" :class="{ visible: completed }" role="status" aria-live="polite" aria-atomic="true">
     <i class="fa-solid fa-circle-check"></i>
     <span class="cpub-checkpoint-text">{{ label }}</span>
   </div>

package/components/blocks/BlockQuizView.vue

@@ -77,7 +77,7 @@ function optionClass(idx: number): string {
         </button>
       </div>
 
-      <div v-if="answered" class="cpub-quiz-feedback" :class="isCorrect ? 'correct' : 'wrong'">
+      <div v-if="answered" class="cpub-quiz-feedback" :class="isCorrect ? 'correct' : 'wrong'" role="status" aria-live="polite" aria-atomic="true">
         <i :class="isCorrect ? 'fa-solid fa-circle-check' : 'fa-solid fa-circle-xmark'"></i>
         <span>{{ isCorrect ? 'Correct!' : 'Not quite — the correct answer is highlighted above.' }}</span>
       </div>

package/components/hub/HubProducts.vue

@@ -1,10 +1,70 @@
 <script setup lang="ts">
-defineProps<{
+import { createProductSchema } from '@commonpub/schema';
+
+const props = defineProps<{
   products: { items: Array<{ id: string; name: string; description: string | null; imageUrl: string | null; category: string | null; status: string }>; total: number } | null;
+  currentUserRole?: string | null;
+  hubSlug?: string;
 }>();
+
+const emit = defineEmits<{ 'product-created': [] }>();
+
+const canManage = computed(() => ['owner', 'admin', 'moderator'].includes(props.currentUserRole ?? ''));
+const showForm = ref(false);
+const formName = ref('');
+const formDescription = ref('');
+const formCategory = ref('other');
+const formPurchaseUrl = ref('');
+const creating = ref(false);
+
+async function handleCreate(): Promise<void> {
+  if (!formName.value.trim() || !props.hubSlug) return;
+  creating.value = true;
+  try {
+    await $fetch(`/api/hubs/${props.hubSlug}/products`, {
+      method: 'POST',
+      body: { name: formName.value, description: formDescription.value || undefined, category: formCategory.value, purchaseUrl: formPurchaseUrl.value || undefined },
+    });
+    formName.value = '';
+    formDescription.value = '';
+    formCategory.value = 'other';
+    formPurchaseUrl.value = '';
+    showForm.value = false;
+    emit('product-created');
+  } catch { /* toast error */ }
+  finally { creating.value = false; }
+}
 </script>
 
 <template>
+  <div>
+    <div v-if="canManage && hubSlug" class="cpub-products-header">
+      <button class="cpub-btn cpub-btn-sm" @click="showForm = !showForm">
+        <i :class="showForm ? 'fa-solid fa-times' : 'fa-solid fa-plus'"></i>
+        {{ showForm ? 'Cancel' : 'Add Product' }}
+      </button>
+    </div>
+
+    <form v-if="showForm" class="cpub-resource-form" @submit.prevent="handleCreate">
+      <input v-model="formName" type="text" placeholder="Product name" class="cpub-input" required />
+      <input v-model="formDescription" type="text" placeholder="Short description (optional)" class="cpub-input" />
+      <select v-model="formCategory" class="cpub-input">
+        <option value="microcontroller">Microcontroller</option>
+        <option value="sbc">SBC</option>
+        <option value="sensor">Sensor</option>
+        <option value="display">Display</option>
+        <option value="communication">Communication</option>
+        <option value="power">Power</option>
+        <option value="software">Software</option>
+        <option value="tool">Tool</option>
+        <option value="other">Other</option>
+      </select>
+      <input v-model="formPurchaseUrl" type="url" placeholder="Purchase URL (optional)" class="cpub-input" />
+      <button type="submit" class="cpub-btn cpub-btn-primary cpub-btn-sm" :disabled="creating || !formName.trim()">
+        {{ creating ? 'Adding...' : 'Add Product' }}
+      </button>
+    </form>
+
   <div v-if="products?.items?.length" class="cpub-products-grid">
     <div v-for="product in products.items" :key="product.id" class="cpub-product-card">
       <div class="cpub-product-card-icon">
@@ -25,6 +85,7 @@ defineProps<{
     <div class="cpub-empty-state-icon"><i class="fa-solid fa-microchip"></i></div>
     <p class="cpub-empty-state-title">No products listed yet</p>
   </div>
+  </div>
 </template>
 
 <style scoped>

package/components/hub/HubResources.vue

@@ -0,0 +1,264 @@
+<script setup lang="ts">
+const props = defineProps<{
+  resources: { items: Array<{ id: string; title: string; url: string; description: string | null; category: string; sortOrder: number; addedBy: { id: string; username: string; displayName: string | null; avatarUrl: string | null }; createdAt: string; updatedAt: string }>; total: number } | null;
+  currentUserRole?: string | null;
+  hubSlug?: string;
+  isAuthenticated?: boolean;
+  authUserId?: string | null;
+}>();
+
+const emit = defineEmits<{ 'resource-changed': [] }>();
+
+const canManage = computed(() => ['owner', 'admin', 'moderator'].includes(props.currentUserRole ?? ''));
+const isMember = computed(() => !!props.currentUserRole);
+
+const showForm = ref(false);
+const formTitle = ref('');
+const formUrl = ref('');
+const formDescription = ref('');
+const formCategory = ref('other');
+const creating = ref(false);
+
+const categoryLabels: Record<string, string> = {
+  documentation: 'Documentation',
+  tools: 'Tools',
+  tutorials: 'Tutorials',
+  community: 'Community',
+  hardware: 'Hardware',
+  software: 'Software',
+  other: 'Other',
+};
+
+type ResourceItem = NonNullable<typeof props.resources>['items'][number];
+
+const groupedResources = computed(() => {
+  const groups: Record<string, ResourceItem[]> = {};
+  for (const item of props.resources?.items ?? []) {
+    if (!groups[item.category]) groups[item.category] = [];
+    groups[item.category]!.push(item);
+  }
+  const order = ['documentation', 'tools', 'tutorials', 'community', 'hardware', 'software', 'other'];
+  const sorted: Array<{ category: string; label: string; items: ResourceItem[] }> = [];
+  for (const cat of order) {
+    if (groups[cat]?.length) {
+      sorted.push({ category: cat, label: categoryLabels[cat] ?? cat, items: groups[cat]! });
+    }
+  }
+  return sorted;
+});
+
+async function handleCreate(): Promise<void> {
+  if (!formTitle.value.trim() || !formUrl.value.trim() || !props.hubSlug) return;
+  creating.value = true;
+  try {
+    await $fetch(`/api/hubs/${props.hubSlug}/resources`, {
+      method: 'POST',
+      body: {
+        title: formTitle.value,
+        url: formUrl.value,
+        description: formDescription.value || undefined,
+        category: formCategory.value,
+      },
+    });
+    formTitle.value = '';
+    formUrl.value = '';
+    formDescription.value = '';
+    formCategory.value = 'other';
+    showForm.value = false;
+    emit('resource-changed');
+  } catch { /* toast error */ }
+  finally { creating.value = false; }
+}
+
+async function handleDelete(id: string): Promise<void> {
+  if (!props.hubSlug) return;
+  try {
+    await $fetch(`/api/hubs/${props.hubSlug}/resources/${id}`, { method: 'DELETE' });
+    emit('resource-changed');
+  } catch { /* toast error */ }
+}
+</script>
+
+<template>
+  <div class="cpub-resources">
+    <div v-if="isMember && hubSlug" class="cpub-resources-header">
+      <button class="cpub-btn cpub-btn-sm" @click="showForm = !showForm">
+        <i :class="showForm ? 'fa-solid fa-times' : 'fa-solid fa-plus'"></i>
+        {{ showForm ? 'Cancel' : 'Add Resource' }}
+      </button>
+    </div>
+
+    <form v-if="showForm" class="cpub-resource-form" @submit.prevent="handleCreate">
+      <input v-model="formTitle" type="text" placeholder="Resource title" class="cpub-input" required maxlength="255" />
+      <input v-model="formUrl" type="url" placeholder="https://..." class="cpub-input" required />
+      <input v-model="formDescription" type="text" placeholder="Short description (optional)" class="cpub-input" maxlength="2000" />
+      <select v-model="formCategory" class="cpub-input" aria-label="Resource category">
+        <option v-for="(label, key) in categoryLabels" :key="key" :value="key">{{ label }}</option>
+      </select>
+      <button type="submit" class="cpub-btn cpub-btn-primary cpub-btn-sm" :disabled="creating || !formTitle.trim() || !formUrl.trim()">
+        {{ creating ? 'Adding...' : 'Add Resource' }}
+      </button>
+    </form>
+
+    <template v-if="groupedResources.length">
+      <div v-for="group in groupedResources" :key="group.category" class="cpub-resources-group">
+        <h4 class="cpub-resources-category">
+          <i class="fa-solid" :class="{
+            'fa-book': group.category === 'documentation',
+            'fa-wrench': group.category === 'tools',
+            'fa-graduation-cap': group.category === 'tutorials',
+            'fa-users': group.category === 'community',
+            'fa-microchip': group.category === 'hardware',
+            'fa-code': group.category === 'software',
+            'fa-link': group.category === 'other',
+          }"></i>
+          {{ group.label }}
+        </h4>
+        <div class="cpub-resources-list">
+          <a
+            v-for="item in group.items"
+            :key="item.id"
+            :href="item.url"
+            target="_blank"
+            rel="noopener noreferrer"
+            class="cpub-resource-item"
+          >
+            <div class="cpub-resource-item-main">
+              <span class="cpub-resource-item-title">{{ item.title }}</span>
+              <i class="fa-solid fa-arrow-up-right-from-square cpub-resource-item-ext"></i>
+              <p v-if="item.description" class="cpub-resource-item-desc">{{ item.description }}</p>
+            </div>
+            <div class="cpub-resource-item-meta">
+              <span>{{ item.addedBy.displayName || item.addedBy.username }}</span>
+              <button
+                v-if="canManage || authUserId === item.addedBy.id"
+                class="cpub-resource-delete"
+                aria-label="Delete resource"
+                @click.prevent.stop="handleDelete(item.id)"
+              >
+                <i class="fa-solid fa-trash"></i>
+              </button>
+            </div>
+          </a>
+        </div>
+      </div>
+    </template>
+    <div v-else class="cpub-empty-state">
+      <div class="cpub-empty-state-icon"><i class="fa-solid fa-link"></i></div>
+      <p class="cpub-empty-state-title">No resources added yet</p>
+      <p class="cpub-empty-state-desc">Add links to documentation, tools, and tutorials for this community.</p>
+    </div>
+  </div>
+</template>
+
+<style scoped>
+.cpub-resources-header {
+  margin-bottom: 16px;
+}
+
+.cpub-resource-form {
+  display: flex;
+  flex-direction: column;
+  gap: 10px;
+  padding: 16px;
+  background: var(--surface);
+  border: var(--border-width-default) solid var(--border);
+  margin-bottom: 20px;
+}
+
+.cpub-resources-group {
+  margin-bottom: 24px;
+}
+
+.cpub-resources-category {
+  font-size: 11px;
+  font-family: var(--font-mono);
+  text-transform: uppercase;
+  letter-spacing: 0.1em;
+  color: var(--text-faint);
+  margin-bottom: 8px;
+  display: flex;
+  align-items: center;
+  gap: 6px;
+}
+
+.cpub-resources-list {
+  display: flex;
+  flex-direction: column;
+  gap: 4px;
+}
+
+.cpub-resource-item {
+  display: flex;
+  align-items: center;
+  justify-content: space-between;
+  gap: 12px;
+  padding: 10px 14px;
+  background: var(--surface);
+  border: var(--border-width-default) solid var(--border);
+  text-decoration: none;
+  color: inherit;
+  transition: box-shadow var(--transition-fast);
+}
+
+.cpub-resource-item:hover {
+  box-shadow: var(--shadow-sm);
+}
+
+.cpub-resource-item-main {
+  flex: 1;
+  min-width: 0;
+}
+
+.cpub-resource-item-title {
+  font-size: 13px;
+  font-weight: 600;
+  color: var(--text);
+}
+
+.cpub-resource-item-ext {
+  font-size: 9px;
+  color: var(--text-faint);
+  margin-left: 4px;
+}
+
+.cpub-resource-item-desc {
+  font-size: 11px;
+  color: var(--text-dim);
+  margin-top: 2px;
+  white-space: nowrap;
+  overflow: hidden;
+  text-overflow: ellipsis;
+}
+
+.cpub-resource-item-meta {
+  font-size: 10px;
+  color: var(--text-faint);
+  font-family: var(--font-mono);
+  display: flex;
+  align-items: center;
+  gap: 8px;
+  flex-shrink: 0;
+}
+
+.cpub-resource-delete {
+  background: none;
+  border: none;
+  cursor: pointer;
+  color: var(--text-faint);
+  padding: 4px;
+  font-size: 11px;
+}
+
+.cpub-resource-delete:hover {
+  color: var(--red, #ef4444);
+}
+
+@media (max-width: 640px) {
+  .cpub-resource-item {
+    flex-direction: column;
+    align-items: flex-start;
+    gap: 6px;
+  }
+}
+</style>

package/components/views/ExplainerView.vue

@@ -147,6 +147,14 @@ watch(activeSection, () => {
   // Scroll section viewport to top on section change
   const viewport = document.querySelector('.cpub-section-viewport');
   if (viewport) viewport.scrollTop = 0;
+  // Focus section heading for screen reader announcement
+  nextTick(() => {
+    const heading = viewport?.querySelector('h1, h2, h3') as HTMLElement | null;
+    if (heading) {
+      heading.setAttribute('tabindex', '-1');
+      heading.focus();
+    }
+  });
 });
 
 // Current section data

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@commonpub/layer",
-  "version": "0.8.9",
+  "version": "0.9.1",
   "type": "module",
   "main": "./nuxt.config.ts",
   "files": [
@@ -53,13 +53,13 @@
     "vue": "^3.4.0",
     "vue-router": "^4.3.0",
     "zod": "^4.3.6",
-    "@commonpub/config": "0.9.1",
     "@commonpub/auth": "0.5.1",
     "@commonpub/docs": "0.6.2",
+    "@commonpub/config": "0.9.1",
     "@commonpub/editor": "0.7.9",
-    "@commonpub/ui": "0.8.5",
+    "@commonpub/learning": "0.5.0",
     "@commonpub/protocol": "0.9.9",
-    "@commonpub/learning": "0.5.0"
+    "@commonpub/ui": "0.8.5"
   },
   "devDependencies": {
     "@testing-library/jest-dom": "^6.9.1",

package/pages/hubs/[slug]/index.vue

@@ -21,9 +21,14 @@ const hubType = computed(() => hub.value?.hubType ?? 'community');
 const isProductHub = computed(() => hubType.value === 'product');
 const isCompanyHub = computed(() => hubType.value === 'company');
 
-const { data: products } = useLazyFetch<{ items: Array<{ id: string; name: string; description: string | null; imageUrl: string | null; category: string | null; status: string }>; total: number }>(
+const { data: products, refresh: refreshProducts } = useLazyFetch<{ items: Array<{ id: string; name: string; description: string | null; imageUrl: string | null; category: string | null; status: string }>; total: number }>(
   () => `/api/hubs/${slug.value}/products`,
-  { default: () => ({ items: [], total: 0 }), immediate: isCompanyHub.value },
+  { default: () => ({ items: [], total: 0 }) },
+);
+
+const { data: resources, refresh: refreshResources } = useLazyFetch<{ items: Array<{ id: string; title: string; url: string; description: string | null; category: string; sortOrder: number; addedBy: { id: string; username: string; displayName: string | null; avatarUrl: string | null }; createdAt: string; updatedAt: string }>; total: number }>(
+  () => `/api/hubs/${slug.value}/resources`,
+  { default: () => ({ items: [], total: 0 }) },
 );
 
 useSeoMeta({
@@ -126,6 +131,7 @@ const tabDefs = computed<HubTabDef[]>(() => {
       { value: 'overview', label: 'Overview', icon: 'fa-solid fa-info-circle' },
       { value: 'projects', label: 'Projects Using This', icon: 'fa-solid fa-folder-open', count: gallery.value?.total },
       { value: 'discussions', label: 'Discussions', icon: 'fa-solid fa-comments' },
+      { value: 'resources', label: 'Resources', icon: 'fa-solid fa-link', count: resources.value?.total },
     ];
   }
   if (isCompanyHub.value) {
@@ -134,12 +140,15 @@ const tabDefs = computed<HubTabDef[]>(() => {
       { value: 'products', label: 'Products', icon: 'fa-solid fa-microchip', count: products.value?.total },
       { value: 'projects', label: 'Projects', icon: 'fa-solid fa-folder-open', count: gallery.value?.total },
       { value: 'discussions', label: 'Discussions', icon: 'fa-solid fa-comments' },
+      { value: 'resources', label: 'Resources', icon: 'fa-solid fa-link', count: resources.value?.total },
     ];
   }
   return [
     { value: 'feed', label: 'Feed', icon: 'fa-solid fa-rss', count: hub.value?.postCount },
     { value: 'projects', label: 'Projects', icon: 'fa-solid fa-folder-open', count: gallery.value?.total },
+    { value: 'products', label: 'Products', icon: 'fa-solid fa-microchip', count: products.value?.total },
     { value: 'discussions', label: 'Discussions', icon: 'fa-solid fa-comments' },
+    { value: 'resources', label: 'Resources', icon: 'fa-solid fa-link', count: resources.value?.total },
     { value: 'members', label: 'Members', icon: 'fa-solid fa-users', count: hub.value?.memberCount },
   ];
 });
@@ -377,7 +386,10 @@ async function onRefreshGallery(): Promise<void> {
     />
 
     <!-- Products tab -->
-    <HubProducts v-else-if="activeTab === 'products'" :products="products" />
+    <HubProducts v-else-if="activeTab === 'products'" :products="products" :current-user-role="hub?.currentUserRole ?? null" :hub-slug="slug" @product-created="refreshProducts" />
+
+    <!-- Resources tab -->
+    <HubResources v-else-if="activeTab === 'resources'" :resources="resources" :current-user-role="hub?.currentUserRole ?? null" :hub-slug="slug" :is-authenticated="isAuthenticated" :auth-user-id="authUser?.id ?? null" @resource-changed="refreshResources" />
 
     <!-- Sidebar -->
     <template #sidebar>

package/pages/settings/notifications.vue

@@ -4,41 +4,39 @@ definePageMeta({ middleware: 'auth' });
 const { show: toast } = useToast();
 const saving = ref(false);
 
-const prefs = ref({
-  emailLikes: true,
-  emailComments: true,
-  emailFollows: true,
-  emailMentions: true,
-  emailDigest: false,
-});
+const likes = ref(true);
+const comments = ref(true);
+const follows = ref(true);
+const mentions = ref(true);
+const digest = ref<'none' | 'daily' | 'weekly'>('none');
 
 // Load current preferences from profile
 import type { Serialized, UserProfile } from '@commonpub/server';
 
-const { data: profile, pending } = await useFetch<Serialized<UserProfile> & { notificationPrefs?: Record<string, boolean> }>('/api/profile');
-if (profile.value?.notificationPrefs) {
-  const saved = profile.value.notificationPrefs;
-  for (const key of Object.keys(prefs.value)) {
-    if (key in saved) {
-      (prefs.value as Record<string, boolean>)[key] = saved[key];
-    }
-  }
+const { data: profile, pending } = await useFetch<Serialized<UserProfile> & { emailNotifications?: { digest?: string; likes?: boolean; comments?: boolean; follows?: boolean; mentions?: boolean } }>('/api/profile');
+if (profile.value?.emailNotifications) {
+  const saved = profile.value.emailNotifications;
+  if (saved.likes !== undefined) likes.value = saved.likes;
+  if (saved.comments !== undefined) comments.value = saved.comments;
+  if (saved.follows !== undefined) follows.value = saved.follows;
+  if (saved.mentions !== undefined) mentions.value = saved.mentions;
+  if (saved.digest) digest.value = saved.digest as 'none' | 'daily' | 'weekly';
 }
 
-const labels: Record<string, string> = {
-  emailLikes: 'Email when someone likes your content',
-  emailComments: 'Email when someone comments on your content',
-  emailFollows: 'Email when someone follows you',
-  emailMentions: 'Email when someone mentions you',
-  emailDigest: 'Weekly digest email',
-};
-
 async function handleSave(): Promise<void> {
   saving.value = true;
   try {
     await $fetch('/api/profile', {
       method: 'PUT',
-      body: { notificationPrefs: prefs.value },
+      body: {
+        emailNotifications: {
+          likes: likes.value,
+          comments: comments.value,
+          follows: follows.value,
+          mentions: mentions.value,
+          digest: digest.value,
+        },
+      },
     });
     toast('Preferences saved', 'success');
   } catch (err: unknown) {
@@ -59,11 +57,32 @@ async function handleSave(): Promise<void> {
     </div>
 
     <template v-else>
-    <div v-for="(val, key) in prefs" :key="key" style="margin-bottom: 12px">
-      <label class="cpub-checkbox">
-        <input type="checkbox" v-model="prefs[key as keyof typeof prefs]" />
-        {{ labels[key] || key }}
-      </label>
+    <div class="cpub-prefs-section">
+      <h3 class="cpub-section-subtitle">Email Notifications</h3>
+      <div class="cpub-pref-row">
+        <label class="cpub-checkbox"><input type="checkbox" v-model="likes" /> Email when someone likes your content</label>
+      </div>
+      <div class="cpub-pref-row">
+        <label class="cpub-checkbox"><input type="checkbox" v-model="comments" /> Email when someone comments on your content</label>
+      </div>
+      <div class="cpub-pref-row">
+        <label class="cpub-checkbox"><input type="checkbox" v-model="follows" /> Email when someone follows you</label>
+      </div>
+      <div class="cpub-pref-row">
+        <label class="cpub-checkbox"><input type="checkbox" v-model="mentions" /> Email when someone mentions you</label>
+      </div>
+    </div>
+
+    <div class="cpub-prefs-section">
+      <h3 class="cpub-section-subtitle">Digest</h3>
+      <div class="cpub-pref-row">
+        <label for="digest-select">Summary email frequency</label>
+        <select id="digest-select" v-model="digest" class="cpub-input" style="max-width: 200px;">
+          <option value="none">None</option>
+          <option value="daily">Daily (8am UTC)</option>
+          <option value="weekly">Weekly (Monday 8am UTC)</option>
+        </select>
+      </div>
     </div>
 
     <button class="cpub-btn cpub-btn-primary cpub-btn-sm" style="margin-top: 16px" :disabled="saving" @click="handleSave">
@@ -72,3 +91,9 @@ async function handleSave(): Promise<void> {
     </template>
   </div>
 </template>
+
+<style scoped>
+.cpub-prefs-section { margin-bottom: 24px; }
+.cpub-section-subtitle { font-size: 13px; font-weight: 700; margin-bottom: 12px; color: var(--text); }
+.cpub-pref-row { margin-bottom: 10px; }
+</style>

package/server/api/admin/search/reindex.post.ts

@@ -0,0 +1,56 @@
+import { indexContent, configureContentIndex } from '@commonpub/server';
+import { contentItems } from '@commonpub/schema';
+import { eq } from 'drizzle-orm';
+import type { MeiliClient } from '@commonpub/server';
+
+/**
+ * Rebuild the entire Meilisearch content index.
+ * Iterates all published content and re-indexes each item.
+ * Requires admin role. Rate-limited to prevent abuse.
+ */
+export default defineEventHandler(async (event) => {
+  const user = requireAuth(event);
+  requireAdmin(event);
+
+  const meiliUrl = process.env.MEILI_URL;
+  const meiliKey = process.env.MEILI_MASTER_KEY;
+  if (!meiliUrl) {
+    throw createError({ statusCode: 400, statusMessage: 'Meilisearch not configured' });
+  }
+
+  const db = useDB();
+
+  let client: MeiliClient;
+  try {
+    const { MeiliSearch } = await import('meilisearch');
+    client = new MeiliSearch({ host: meiliUrl, apiKey: meiliKey }) as unknown as MeiliClient;
+    await configureContentIndex(client);
+  } catch (err) {
+    throw createError({ statusCode: 503, statusMessage: 'Failed to connect to Meilisearch' });
+  }
+
+  // Fetch all published content IDs
+  const published = await db
+    .select({ id: contentItems.id })
+    .from(contentItems)
+    .where(eq(contentItems.status, 'published'));
+
+  let indexed = 0;
+  let errors = 0;
+
+  for (const item of published) {
+    try {
+      await indexContent(db, item.id, client);
+      indexed++;
+    } catch {
+      errors++;
+    }
+  }
+
+  return {
+    success: true,
+    indexed,
+    errors,
+    total: published.length,
+  };
+});

package/server/api/hubs/[slug]/resources/[id].delete.ts

@@ -0,0 +1,16 @@
+import { deleteHubResource } from '@commonpub/server';
+
+export default defineEventHandler(async (event) => {
+  const db = useDB();
+  const user = requireAuth(event);
+  const id = getRouterParam(event, 'id');
+  if (!id) throw createError({ statusCode: 400, statusMessage: 'Missing resource ID' });
+
+  const result = await deleteHubResource(db, id, user.id);
+  if (!result.success) {
+    const status = result.error?.includes('not found') ? 404 : 403;
+    throw createError({ statusCode: status, statusMessage: result.error ?? 'Delete failed' });
+  }
+
+  return { success: true };
+});

package/server/api/hubs/[slug]/resources/[id].put.ts

@@ -0,0 +1,20 @@
+import { updateHubResource } from '@commonpub/server';
+import { updateHubResourceSchema } from '@commonpub/schema';
+
+export default defineEventHandler(async (event) => {
+  const db = useDB();
+  const user = requireAuth(event);
+  const id = getRouterParam(event, 'id');
+  if (!id) throw createError({ statusCode: 400, statusMessage: 'Missing resource ID' });
+
+  const input = await parseBody(event, updateHubResourceSchema);
+
+  try {
+    return await updateHubResource(db, id, user.id, input);
+  } catch (err) {
+    const message = err instanceof Error ? err.message : 'Update failed';
+    if (message.includes('not found')) throw createError({ statusCode: 404, statusMessage: message });
+    if (message.includes('permissions')) throw createError({ statusCode: 403, statusMessage: message });
+    throw createError({ statusCode: 500, statusMessage: message });
+  }
+});

package/server/api/hubs/[slug]/resources/index.get.ts

@@ -0,0 +1,13 @@
+import { getHubBySlug, listHubResources } from '@commonpub/server';
+
+export default defineEventHandler(async (event) => {
+  const db = useDB();
+  const { slug } = parseParams(event, { slug: 'string' });
+
+  const hub = await getHubBySlug(db, slug);
+  if (!hub) {
+    throw createError({ statusCode: 404, statusMessage: 'Hub not found' });
+  }
+
+  return listHubResources(db, hub.id);
+});

package/server/api/hubs/[slug]/resources/index.post.ts

@@ -0,0 +1,16 @@
+import { getHubBySlug, createHubResource } from '@commonpub/server';
+import { createHubResourceSchema } from '@commonpub/schema';
+
+export default defineEventHandler(async (event) => {
+  const db = useDB();
+  const user = requireAuth(event);
+  const { slug } = parseParams(event, { slug: 'string' });
+
+  const hub = await getHubBySlug(db, slug, user.id);
+  if (!hub) {
+    throw createError({ statusCode: 404, statusMessage: 'Hub not found' });
+  }
+
+  const input = await parseBody(event, createHubResourceSchema);
+  return createHubResource(db, hub.id, user.id, input);
+});

package/server/api/hubs/[slug]/resources/reorder.post.ts

@@ -0,0 +1,22 @@
+import { getHubBySlug, reorderHubResources } from '@commonpub/server';
+import { reorderHubResourcesSchema } from '@commonpub/schema';
+
+export default defineEventHandler(async (event) => {
+  const db = useDB();
+  const user = requireAuth(event);
+  const { slug } = parseParams(event, { slug: 'string' });
+
+  const hub = await getHubBySlug(db, slug, user.id);
+  if (!hub) {
+    throw createError({ statusCode: 404, statusMessage: 'Hub not found' });
+  }
+
+  const input = await parseBody(event, reorderHubResourcesSchema);
+  const result = await reorderHubResources(db, hub.id, user.id, input.ids);
+
+  if (!result.success) {
+    throw createError({ statusCode: 403, statusMessage: result.error ?? 'Reorder failed' });
+  }
+
+  return { success: true };
+});

package/server/routes/hubs/[slug]/products.ts

@@ -0,0 +1,47 @@
+import { getHubBySlug, listHubProducts } from '@commonpub/server';
+import { AP_CONTEXT } from '@commonpub/protocol';
+
+/**
+ * Hub products collection endpoint. Returns AP OrderedCollection for federation.
+ * Only responds to ActivityPub clients (Accept: application/activity+json).
+ */
+export default defineEventHandler(async (event) => {
+  const accept = getRequestHeader(event, 'accept') ?? '';
+  const isAPRequest =
+    accept.includes('application/activity+json') ||
+    accept.includes('application/ld+json');
+
+  if (!isAPRequest) return;
+
+  const config = useConfig();
+  if (!config.features.federation || !config.features.federateHubs) return;
+
+  const slug = getRouterParam(event, 'slug');
+  if (!slug) return;
+
+  const db = useDB();
+  const hub = await getHubBySlug(db, slug);
+  if (!hub) return;
+
+  const { items } = await listHubProducts(db, hub.id);
+  const domain = config.instance.domain;
+  const collectionUri = `https://${domain}/hubs/${slug}/products`;
+
+  setResponseHeader(event, 'content-type', 'application/activity+json');
+  return {
+    '@context': AP_CONTEXT,
+    type: 'OrderedCollection',
+    id: collectionUri,
+    totalItems: items.length,
+    orderedItems: items.map((item) => ({
+      type: 'cpub:Product',
+      id: `https://${domain}/products/${item.slug}`,
+      name: item.name,
+      summary: item.description ?? undefined,
+      url: item.purchaseUrl ?? `https://${domain}/products/${item.slug}`,
+      ...(item.imageUrl ? { image: { type: 'Image', url: item.imageUrl } } : {}),
+      'cpub:category': item.category ?? undefined,
+      'cpub:status': item.status,
+    })),
+  };
+});

package/server/routes/hubs/[slug]/resources.ts

@@ -0,0 +1,46 @@
+import { getHubBySlug, listHubResources } from '@commonpub/server';
+import { AP_CONTEXT } from '@commonpub/protocol';
+
+/**
+ * Hub resources collection endpoint. Returns AP OrderedCollection for federation.
+ * Only responds to ActivityPub clients (Accept: application/activity+json).
+ */
+export default defineEventHandler(async (event) => {
+  const accept = getRequestHeader(event, 'accept') ?? '';
+  const isAPRequest =
+    accept.includes('application/activity+json') ||
+    accept.includes('application/ld+json');
+
+  if (!isAPRequest) return;
+
+  const config = useConfig();
+  if (!config.features.federation || !config.features.federateHubs) return;
+
+  const slug = getRouterParam(event, 'slug');
+  if (!slug) return;
+
+  const db = useDB();
+  const hub = await getHubBySlug(db, slug);
+  if (!hub) return;
+
+  const { items } = await listHubResources(db, hub.id);
+  const domain = config.instance.domain;
+  const collectionUri = `https://${domain}/hubs/${slug}/resources`;
+
+  setResponseHeader(event, 'content-type', 'application/activity+json');
+  return {
+    '@context': AP_CONTEXT,
+    type: 'OrderedCollection',
+    id: collectionUri,
+    totalItems: items.length,
+    orderedItems: items.map((item) => ({
+      type: 'cpub:Resource',
+      id: `${collectionUri}/${item.id}`,
+      name: item.title,
+      url: item.url,
+      summary: item.description ?? undefined,
+      'cpub:category': item.category,
+      'cpub:sortOrder': item.sortOrder,
+    })),
+  };
+});