@commonpub/server 2.80.0 → 2.82.0

package/dist/publicApi/cors.d.ts

@@ -0,0 +1,51 @@
+/**
+ * CORS origin-pattern matching for the public API.
+ *
+ * The public API authenticates with `Authorization: Bearer <token>`, NOT
+ * cookies. There are no ambient credentials, and we never send
+ * `Access-Control-Allow-Credentials: true`. That makes
+ * `Access-Control-Allow-Origin: *` SAFE here: a cross-origin page still
+ * cannot obtain a key it does not already possess, so reflecting (or
+ * wildcarding) the origin only ENABLES legitimate browser clients. The
+ * Bearer token is what protects the data.
+ *
+ * Pattern grammar (the only metacharacter is `*`):
+ *   *                        any origin (wildcard-all)
+ *   localhost                shorthand, expands to http(s)://localhost on any port
+ *   https://app.example.com  exact origin
+ *   http://localhost:*       any port on a host
+ *   https://*.example.com    any subdomain
+ *   *://localhost:*          any scheme + any port
+ */
+export interface CorsDecision {
+    /** Whether the request's origin is permitted. */
+    allowed: boolean;
+    /** Value for `Access-Control-Allow-Origin`, or null when not allowed. */
+    headerValue: string | null;
+    /** True when `headerValue` is the literal `*` (cacheable, no `Vary` needed). */
+    wildcard: boolean;
+}
+/**
+ * True when `origin` is a syntactically valid, reflectable web origin. Used as
+ * a gate before reflecting an Origin header — both here (the actual request)
+ * and in the preflight echo, which is unauthenticated.
+ */
+export declare function isWellFormedOrigin(origin: string): boolean;
+/**
+ * Expand shorthand patterns. `localhost` (case-insensitive) becomes both http
+ * and https on any port; everything else passes through unchanged (including
+ * the bare `*`). Trims each entry and drops empties so a stray comma can't
+ * widen the policy.
+ */
+export declare function expandOriginPatterns(patterns: readonly string[]): string[];
+/**
+ * Decide CORS for an incoming `Origin` against a key's allow-list. Returns a
+ * literal `*` when the list permits all origins; otherwise reflects the exact
+ * origin (the caller then adds `Vary: Origin`). Returns a deny decision when
+ * the list is empty, the origin is missing or malformed, or no pattern matches.
+ *
+ * The returned shape intentionally has no "credentials" concept — the public
+ * API must never pair these headers with `Access-Control-Allow-Credentials`.
+ */
+export declare function matchOrigin(patterns: readonly string[] | null | undefined, origin: string | null | undefined): CorsDecision;
+//# sourceMappingURL=cors.d.ts.map

package/dist/publicApi/cors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cors.d.ts","sourceRoot":"","sources":["../../src/publicApi/cors.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,MAAM,WAAW,YAAY;IAC3B,iDAAiD;IACjD,OAAO,EAAE,OAAO,CAAC;IACjB,yEAAyE;IACzE,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,gFAAgF;IAChF,QAAQ,EAAE,OAAO,CAAC;CACnB;AAkBD;;;;GAIG;AACH,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAO1D;AAED;;;;;GAKG;AACH,wBAAgB,oBAAoB,CAAC,QAAQ,EAAE,SAAS,MAAM,EAAE,GAAG,MAAM,EAAE,CAqB1E;AAqBD;;;;;;;;GAQG;AACH,wBAAgB,WAAW,CACzB,QAAQ,EAAE,SAAS,MAAM,EAAE,GAAG,IAAI,GAAG,SAAS,EAC9C,MAAM,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAChC,YAAY,CAiBd"}

package/dist/publicApi/cors.js

@@ -0,0 +1,121 @@
+/**
+ * CORS origin-pattern matching for the public API.
+ *
+ * The public API authenticates with `Authorization: Bearer <token>`, NOT
+ * cookies. There are no ambient credentials, and we never send
+ * `Access-Control-Allow-Credentials: true`. That makes
+ * `Access-Control-Allow-Origin: *` SAFE here: a cross-origin page still
+ * cannot obtain a key it does not already possess, so reflecting (or
+ * wildcarding) the origin only ENABLES legitimate browser clients. The
+ * Bearer token is what protects the data.
+ *
+ * Pattern grammar (the only metacharacter is `*`):
+ *   *                        any origin (wildcard-all)
+ *   localhost                shorthand, expands to http(s)://localhost on any port
+ *   https://app.example.com  exact origin
+ *   http://localhost:*       any port on a host
+ *   https://*.example.com    any subdomain
+ *   *://localhost:*          any scheme + any port
+ */
+const DENY = { allowed: false, headerValue: null, wildcard: false };
+// A syntactically valid web origin: scheme://host[:port], with no path, query,
+// fragment, credentials, whitespace, or control characters. The INCOMING
+// Origin header is validated against this before it is ever reflected into an
+// `Access-Control-Allow-Origin` response header — reflecting an unvalidated
+// header value is a CRLF / response-splitting sink. We validate the value's
+// domain (is this actually an origin?), not just its shape. IPv6-literal and
+// `null` origins are intentionally unsupported: they can't match a pattern
+// anyway, and bracketed/`null` hosts are not worth the reflection risk.
+const WELL_FORMED_ORIGIN = /^[a-z][a-z0-9+.-]*:\/\/[a-z0-9.-]+(?::\d{1,5})?$/i;
+// Control characters (C0 range + DEL), including CR, LF, and TAB. The control
+// characters in this class are the whole point of the check (reject them).
+// eslint-disable-next-line no-control-regex
+const CONTROL_CHARS = /[\x00-\x1f\x7f]/;
+/**
+ * True when `origin` is a syntactically valid, reflectable web origin. Used as
+ * a gate before reflecting an Origin header — both here (the actual request)
+ * and in the preflight echo, which is unauthenticated.
+ */
+export function isWellFormedOrigin(origin) {
+    if (origin.length > 2000)
+        return false;
+    // Reject every control character explicitly: a bare `$` (no `m` flag) matches
+    // just before a trailing newline, so an anchored test alone would let
+    // `https://app.example.com\n` slip through and be reflected into a header.
+    if (CONTROL_CHARS.test(origin))
+        return false;
+    return WELL_FORMED_ORIGIN.test(origin);
+}
+/**
+ * Expand shorthand patterns. `localhost` (case-insensitive) becomes both http
+ * and https on any port; everything else passes through unchanged (including
+ * the bare `*`). Trims each entry and drops empties so a stray comma can't
+ * widen the policy.
+ */
+export function expandOriginPatterns(patterns) {
+    const out = [];
+    for (const raw of patterns) {
+        const p = raw.trim();
+        if (p === '')
+            continue;
+        if (p.toLowerCase() === 'localhost') {
+            // Cover both the default-port origin (`http://localhost`, no colon) and
+            // any explicit port (`http://localhost:5173`), over http and https. The
+            // validator accepts `localhost` case-insensitively, so normalize here
+            // too — otherwise `LOCALHOST` would compile to a dead literal pattern.
+            out.push('http://localhost', 'http://localhost:*', 'https://localhost', 'https://localhost:*');
+        }
+        else {
+            out.push(p);
+        }
+    }
+    return out;
+}
+// Compiled-pattern cache. Pattern sets are tiny (<=50 per key) and the
+// compiled regex uses only `[^/\s]*` (no nested quantifiers), so there is no
+// ReDoS surface — the cache just avoids recompiling on every request.
+const compiledCache = new Map();
+function compilePattern(pattern) {
+    const cached = compiledCache.get(pattern);
+    if (cached)
+        return cached;
+    // Escape every regex metacharacter, THEN turn the escaped `*` back into
+    // `[^/\s]*`. Excluding `/` keeps a subdomain wildcard from crossing into a
+    // path, and excluding `\s` keeps it from matching newlines/tabs (defense in
+    // depth behind `isWellFormedOrigin`). Every `.` stays literal.
+    const escaped = pattern.replace(/[.*+?^${}()|[\]\\]/g, '\\$&');
+    const withWildcard = escaped.replace(/\\\*/g, '[^/\\s]*');
+    const re = new RegExp(`^${withWildcard}$`, 'i');
+    compiledCache.set(pattern, re);
+    return re;
+}
+/**
+ * Decide CORS for an incoming `Origin` against a key's allow-list. Returns a
+ * literal `*` when the list permits all origins; otherwise reflects the exact
+ * origin (the caller then adds `Vary: Origin`). Returns a deny decision when
+ * the list is empty, the origin is missing or malformed, or no pattern matches.
+ *
+ * The returned shape intentionally has no "credentials" concept — the public
+ * API must never pair these headers with `Access-Control-Allow-Credentials`.
+ */
+export function matchOrigin(patterns, origin) {
+    if (!patterns || patterns.length === 0)
+        return DENY;
+    const expanded = expandOriginPatterns(patterns);
+    if (expanded.includes('*')) {
+        // Wildcard-all responds with the literal `*` and never reflects the raw
+        // header, so a malformed origin here is harmless.
+        return { allowed: true, headerValue: '*', wildcard: true };
+    }
+    // Reflecting path: the origin will be echoed verbatim into a response header,
+    // so it MUST be a well-formed origin first (no CRLF / header injection).
+    if (!origin || !isWellFormedOrigin(origin))
+        return DENY;
+    for (const p of expanded) {
+        if (compilePattern(p).test(origin)) {
+            return { allowed: true, headerValue: origin, wildcard: false };
+        }
+    }
+    return DENY;
+}
+//# sourceMappingURL=cors.js.map

package/dist/publicApi/cors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cors.js","sourceRoot":"","sources":["../../src/publicApi/cors.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAWH,MAAM,IAAI,GAAiB,EAAE,OAAO,EAAE,KAAK,EAAE,WAAW,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;AAElF,+EAA+E;AAC/E,yEAAyE;AACzE,8EAA8E;AAC9E,4EAA4E;AAC5E,4EAA4E;AAC5E,6EAA6E;AAC7E,2EAA2E;AAC3E,wEAAwE;AACxE,MAAM,kBAAkB,GAAG,mDAAmD,CAAC;AAC/E,8EAA8E;AAC9E,2EAA2E;AAC3E,4CAA4C;AAC5C,MAAM,aAAa,GAAG,iBAAiB,CAAC;AAExC;;;;GAIG;AACH,MAAM,UAAU,kBAAkB,CAAC,MAAc;IAC/C,IAAI,MAAM,CAAC,MAAM,GAAG,IAAI;QAAE,OAAO,KAAK,CAAC;IACvC,8EAA8E;IAC9E,sEAAsE;IACtE,2EAA2E;IAC3E,IAAI,aAAa,CAAC,IAAI,CAAC,MAAM,CAAC;QAAE,OAAO,KAAK,CAAC;IAC7C,OAAO,kBAAkB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;AACzC,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,oBAAoB,CAAC,QAA2B;IAC9D,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,KAAK,MAAM,GAAG,IAAI,QAAQ,EAAE,CAAC;QAC3B,MAAM,CAAC,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;QACrB,IAAI,CAAC,KAAK,EAAE;YAAE,SAAS;QACvB,IAAI,CAAC,CAAC,WAAW,EAAE,KAAK,WAAW,EAAE,CAAC;YACpC,wEAAwE;YACxE,wEAAwE;YACxE,sEAAsE;YACtE,uEAAuE;YACvE,GAAG,CAAC,IAAI,CACN,kBAAkB,EAClB,oBAAoB,EACpB,mBAAmB,EACnB,qBAAqB,CACtB,CAAC;QACJ,CAAC;aAAM,CAAC;YACN,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACd,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,uEAAuE;AACvE,6EAA6E;AAC7E,sEAAsE;AACtE,MAAM,aAAa,GAAG,IAAI,GAAG,EAAkB,CAAC;AAEhD,SAAS,cAAc,CAAC,OAAe;IACrC,MAAM,MAAM,GAAG,aAAa,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IAC1C,IAAI,MAAM;QAAE,OAAO,MAAM,CAAC;IAC1B,wEAAwE;IACxE,2EAA2E;IAC3E,4EAA4E;IAC5E,+DAA+D;IAC/D,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,qBAAqB,EAAE,MAAM,CAAC,CAAC;IAC/D,MAAM,YAAY,GAAG,OAAO,CAAC,OAAO,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;IAC1D,MAAM,EAAE,GAAG,IAAI,MAAM,CAAC,IAAI,YAAY,GAAG,EAAE,GAAG,CAAC,CAAC;IAChD,aAAa,CAAC,GAAG,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;IAC/B,OAAO,EAAE,CAAC;AACZ,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,WAAW,CACzB,QAA8C,EAC9C,MAAiC;IAEjC,IAAI,CAAC,QAAQ,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACpD,MAAM,QAAQ,GAAG,oBAAoB,CAAC,QAAQ,CAAC,CAAC;IAChD,IAAI,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QAC3B,wEAAwE;QACxE,kDAAkD;QAClD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,GAAG,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;IAC7D,CAAC;IACD,8EAA8E;IAC9E,yEAAyE;IACzE,IAAI,CAAC,MAAM,IAAI,CAAC,kBAAkB,CAAC,MAAM,CAAC;QAAE,OAAO,IAAI,CAAC;IACxD,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;QACzB,IAAI,cAAc,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;YACnC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;QACjE,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/publicApi/index.d.ts

@@ -4,12 +4,18 @@ export type { GeneratedKey } from './keys.js';
 export type { ApiKey } from '@commonpub/schema';
 export { apiKeyRateLimit, ApiKeyRateLimit } from './rateLimit.js';
 export type { RateLimitResult } from './rateLimit.js';
+export { matchOrigin, expandOriginPatterns, isWellFormedOrigin } from './cors.js';
+export type { CorsDecision } from './cors.js';
 export { authenticateApiKey } from './auth.js';
 export type { AuthResult, AuthSuccess, AuthRejected, AuthFailure } from './auth.js';
 export { createApiKey, listApiKeys, revokeApiKey, getApiKeyById, logApiKeyUsage, touchLastUsed, } from './adminOps.js';
 export type { CreateApiKeyResult } from './adminOps.js';
 export { getApiKeyUsageStats } from './usage.js';
 export type { ApiKeyUsageStats } from './usage.js';
+export { METRICS_MIN_BUCKET, getMetricsOverview, getTopContent, getTrendingTags, getTopContributors, getEngagementMetrics, getFederationReach, } from './metrics.js';
+export type { MetricsOverview, ContentMetric, MetricsTopContributor, MetricsEngagement, MetricsFederationReach, } from './metrics.js';
+export { TIMESERIES_METRICS, runDailyRollup, backfillMetricsDaily, getMetricsTimeseries, } from './metricsRollup.js';
+export type { MetricKind, TimeseriesInterval, TimeseriesPoint, MetricsTimeseries, } from './metricsRollup.js';
 export { toPublicUser, isPublicUser, toPublicContentSummary, toPublicContentDetail, isPublicContent, toPublicHub, isPublicHub, toAdminApiKeyView, toPublicLearningPath, isPublicLearningPath, toPublicEvent, isPublicEvent, toPublicContest, isPublicContest, toPublicVideo, isPublicVideo, toPublicDocSite, isPublicDocSite, toPublicTag, } from './serializers.js';
 export type { PublicUser, PublicUserRow, PublicContentSummary, PublicContentDetail, PublicContentRow, PublicHub, PublicHubRow, PublicInstance, AdminApiKeyView, PublicLearningPath, PublicLearningPathRow, PublicEvent, PublicEventRow, PublicContest, PublicContestRow, PublicVideo, PublicVideoRow, PublicDocSite, PublicDocSiteRow, PublicTag, PublicTagRow, } from './serializers.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/publicApi/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/publicApi/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAC1D,OAAO,EAAE,cAAc,EAAE,UAAU,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,WAAW,CAAC;AACtF,YAAY,EAAE,YAAY,EAAE,MAAM,WAAW,CAAC;AAC9C,YAAY,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAC;AAChD,OAAO,EAAE,eAAe,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AAClE,YAAY,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AACtD,OAAO,EAAE,kBAAkB,EAAE,MAAM,WAAW,CAAC;AAC/C,YAAY,EAAE,UAAU,EAAE,WAAW,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AACpF,OAAO,EACL,YAAY,EACZ,WAAW,EACX,YAAY,EACZ,aAAa,EACb,cAAc,EACd,aAAa,GACd,MAAM,eAAe,CAAC;AACvB,YAAY,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AACxD,OAAO,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAC;AACjD,YAAY,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AACnD,OAAO,EACL,YAAY,EACZ,YAAY,EACZ,sBAAsB,EACtB,qBAAqB,EACrB,eAAe,EACf,WAAW,EACX,WAAW,EACX,iBAAiB,EACjB,oBAAoB,EACpB,oBAAoB,EACpB,aAAa,EACb,aAAa,EACb,eAAe,EACf,eAAe,EACf,aAAa,EACb,aAAa,EACb,eAAe,EACf,eAAe,EACf,WAAW,GACZ,MAAM,kBAAkB,CAAC;AAC1B,YAAY,EACV,UAAU,EACV,aAAa,EACb,oBAAoB,EACpB,mBAAmB,EACnB,gBAAgB,EAChB,SAAS,EACT,YAAY,EACZ,cAAc,EACd,eAAe,EACf,kBAAkB,EAClB,qBAAqB,EACrB,WAAW,EACX,cAAc,EACd,aAAa,EACb,gBAAgB,EAChB,WAAW,EACX,cAAc,EACd,aAAa,EACb,gBAAgB,EAChB,SAAS,EACT,YAAY,GACb,MAAM,kBAAkB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/publicApi/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAC1D,OAAO,EAAE,cAAc,EAAE,UAAU,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,WAAW,CAAC;AACtF,YAAY,EAAE,YAAY,EAAE,MAAM,WAAW,CAAC;AAC9C,YAAY,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAC;AAChD,OAAO,EAAE,eAAe,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AAClE,YAAY,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AACtD,OAAO,EAAE,WAAW,EAAE,oBAAoB,EAAE,kBAAkB,EAAE,MAAM,WAAW,CAAC;AAClF,YAAY,EAAE,YAAY,EAAE,MAAM,WAAW,CAAC;AAC9C,OAAO,EAAE,kBAAkB,EAAE,MAAM,WAAW,CAAC;AAC/C,YAAY,EAAE,UAAU,EAAE,WAAW,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AACpF,OAAO,EACL,YAAY,EACZ,WAAW,EACX,YAAY,EACZ,aAAa,EACb,cAAc,EACd,aAAa,GACd,MAAM,eAAe,CAAC;AACvB,YAAY,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AACxD,OAAO,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAC;AACjD,YAAY,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AACnD,OAAO,EACL,kBAAkB,EAClB,kBAAkB,EAClB,aAAa,EACb,eAAe,EACf,kBAAkB,EAClB,oBAAoB,EACpB,kBAAkB,GACnB,MAAM,cAAc,CAAC;AACtB,YAAY,EACV,eAAe,EACf,aAAa,EACb,qBAAqB,EACrB,iBAAiB,EACjB,sBAAsB,GACvB,MAAM,cAAc,CAAC;AACtB,OAAO,EACL,kBAAkB,EAClB,cAAc,EACd,oBAAoB,EACpB,oBAAoB,GACrB,MAAM,oBAAoB,CAAC;AAC5B,YAAY,EACV,UAAU,EACV,kBAAkB,EAClB,eAAe,EACf,iBAAiB,GAClB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EACL,YAAY,EACZ,YAAY,EACZ,sBAAsB,EACtB,qBAAqB,EACrB,eAAe,EACf,WAAW,EACX,WAAW,EACX,iBAAiB,EACjB,oBAAoB,EACpB,oBAAoB,EACpB,aAAa,EACb,aAAa,EACb,eAAe,EACf,eAAe,EACf,aAAa,EACb,aAAa,EACb,eAAe,EACf,eAAe,EACf,WAAW,GACZ,MAAM,kBAAkB,CAAC;AAC1B,YAAY,EACV,UAAU,EACV,aAAa,EACb,oBAAoB,EACpB,mBAAmB,EACnB,gBAAgB,EAChB,SAAS,EACT,YAAY,EACZ,cAAc,EACd,eAAe,EACf,kBAAkB,EAClB,qBAAqB,EACrB,WAAW,EACX,cAAc,EACd,aAAa,EACb,gBAAgB,EAChB,WAAW,EACX,cAAc,EACd,aAAa,EACb,gBAAgB,EAChB,SAAS,EACT,YAAY,GACb,MAAM,kBAAkB,CAAC"}

package/dist/publicApi/index.js

@@ -1,8 +1,11 @@
 export { hasScope, filterKnownScopes } from './scopes.js';
 export { generateApiKey, hashApiKey, compareKeyHash, extractPrefix } from './keys.js';
 export { apiKeyRateLimit, ApiKeyRateLimit } from './rateLimit.js';
+export { matchOrigin, expandOriginPatterns, isWellFormedOrigin } from './cors.js';
 export { authenticateApiKey } from './auth.js';
 export { createApiKey, listApiKeys, revokeApiKey, getApiKeyById, logApiKeyUsage, touchLastUsed, } from './adminOps.js';
 export { getApiKeyUsageStats } from './usage.js';
+export { METRICS_MIN_BUCKET, getMetricsOverview, getTopContent, getTrendingTags, getTopContributors, getEngagementMetrics, getFederationReach, } from './metrics.js';
+export { TIMESERIES_METRICS, runDailyRollup, backfillMetricsDaily, getMetricsTimeseries, } from './metricsRollup.js';
 export { toPublicUser, isPublicUser, toPublicContentSummary, toPublicContentDetail, isPublicContent, toPublicHub, isPublicHub, toAdminApiKeyView, toPublicLearningPath, isPublicLearningPath, toPublicEvent, isPublicEvent, toPublicContest, isPublicContest, toPublicVideo, isPublicVideo, toPublicDocSite, isPublicDocSite, toPublicTag, } from './serializers.js';
 //# sourceMappingURL=index.js.map

package/dist/publicApi/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/publicApi/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAC1D,OAAO,EAAE,cAAc,EAAE,UAAU,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,WAAW,CAAC;AAGtF,OAAO,EAAE,eAAe,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AAElE,OAAO,EAAE,kBAAkB,EAAE,MAAM,WAAW,CAAC;AAE/C,OAAO,EACL,YAAY,EACZ,WAAW,EACX,YAAY,EACZ,aAAa,EACb,cAAc,EACd,aAAa,GACd,MAAM,eAAe,CAAC;AAEvB,OAAO,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAC;AAEjD,OAAO,EACL,YAAY,EACZ,YAAY,EACZ,sBAAsB,EACtB,qBAAqB,EACrB,eAAe,EACf,WAAW,EACX,WAAW,EACX,iBAAiB,EACjB,oBAAoB,EACpB,oBAAoB,EACpB,aAAa,EACb,aAAa,EACb,eAAe,EACf,eAAe,EACf,aAAa,EACb,aAAa,EACb,eAAe,EACf,eAAe,EACf,WAAW,GACZ,MAAM,kBAAkB,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/publicApi/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAC1D,OAAO,EAAE,cAAc,EAAE,UAAU,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,WAAW,CAAC;AAGtF,OAAO,EAAE,eAAe,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AAElE,OAAO,EAAE,WAAW,EAAE,oBAAoB,EAAE,kBAAkB,EAAE,MAAM,WAAW,CAAC;AAElF,OAAO,EAAE,kBAAkB,EAAE,MAAM,WAAW,CAAC;AAE/C,OAAO,EACL,YAAY,EACZ,WAAW,EACX,YAAY,EACZ,aAAa,EACb,cAAc,EACd,aAAa,GACd,MAAM,eAAe,CAAC;AAEvB,OAAO,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAC;AAEjD,OAAO,EACL,kBAAkB,EAClB,kBAAkB,EAClB,aAAa,EACb,eAAe,EACf,kBAAkB,EAClB,oBAAoB,EACpB,kBAAkB,GACnB,MAAM,cAAc,CAAC;AAQtB,OAAO,EACL,kBAAkB,EAClB,cAAc,EACd,oBAAoB,EACpB,oBAAoB,GACrB,MAAM,oBAAoB,CAAC;AAO5B,OAAO,EACL,YAAY,EACZ,YAAY,EACZ,sBAAsB,EACtB,qBAAqB,EACrB,eAAe,EACf,WAAW,EACX,WAAW,EACX,iBAAiB,EACjB,oBAAoB,EACpB,oBAAoB,EACpB,aAAa,EACb,aAAa,EACb,eAAe,EACf,eAAe,EACf,aAAa,EACb,aAAa,EACb,eAAe,EACf,eAAe,EACf,WAAW,GACZ,MAAM,kBAAkB,CAAC"}

package/dist/publicApi/metrics.d.ts

@@ -0,0 +1,117 @@
+import type { DB } from '../types.js';
+import { type PublicContentSummary, type PublicTag } from './serializers.js';
+/**
+ * DevRel / company analytics metrics for the public API. Phase 2: instantaneous
+ * aggregates read straight from denormalized counters and timestamps — no
+ * per-event tracking, no new PII. Time-series (Phase 3) comes from daily rollups.
+ *
+ * Privacy contract (enforced here):
+ * - Aggregates and intentional public leaderboards only; never per-user activity.
+ * - Only published + public + non-deleted content and public-profile active users
+ *   are counted, at the SQL WHERE level (so the indexes are actually used).
+ * - No IP / user-agent / email / referrer is read or returned.
+ * - k-anonymity (`METRICS_MIN_BUCKET`) guards any future user-pivotable breakdown
+ *   (Phase 3 rollups). Phase 2 exposes only non-pivotable aggregates and the
+ *   contributor leaderboard, which is intentional public attribution.
+ */
+/** Suppression threshold for dimensioned breakdowns over users (Phase 3 use). */
+export declare const METRICS_MIN_BUCKET = 5;
+export interface MetricsOverview {
+    domain: string;
+    generatedAt: string;
+    totals: {
+        users: number;
+        contributors: number;
+        content: {
+            total: number;
+            byType: Record<string, number>;
+        };
+        hubs: number;
+        tags: number;
+        engagement: {
+            views: number;
+            likes: number;
+            comments: number;
+        };
+    };
+    recent: {
+        newUsers: {
+            last7d: number;
+            last30d: number;
+        };
+        newContent: {
+            last7d: number;
+            last30d: number;
+        };
+        activeContributors: {
+            last7d: number;
+            last30d: number;
+        };
+    };
+    notes: string[];
+}
+export declare function getMetricsOverview(db: DB, domain: string): Promise<MetricsOverview>;
+export type ContentMetric = 'views' | 'likes' | 'comments';
+export declare function getTopContent(db: DB, domain: string, opts: {
+    metric: ContentMetric;
+    type?: 'project' | 'article' | 'blog' | 'explainer';
+    limit: number;
+}): Promise<PublicContentSummary[]>;
+export declare function getTrendingTags(db: DB, domain: string, limit: number): Promise<PublicTag[]>;
+export interface MetricsTopContributor {
+    user: {
+        id: string;
+        username: string;
+        displayName: string | null;
+        avatarUrl: string | null;
+    };
+    publishedContent: number;
+    totalViews: number;
+    totalLikes: number;
+    canonicalUrl: string;
+}
+export declare function getTopContributors(db: DB, domain: string, limit: number): Promise<MetricsTopContributor[]>;
+export interface MetricsEngagement {
+    content: {
+        published: number;
+        views: number;
+        likes: number;
+        comments: number;
+        avgViewsPerItem: number;
+        likesPerView: number;
+        commentsPerView: number;
+    };
+    learning?: {
+        paths: number;
+        enrollments: number;
+        completions: number;
+        completionRate: number;
+    };
+    events?: {
+        events: number;
+        capacity: number;
+        attendees: number;
+        fillRate: number;
+    };
+    contests?: {
+        contests: number;
+        entries: number;
+    };
+}
+export declare function getEngagementMetrics(db: DB, features: {
+    learning?: boolean;
+    events?: boolean;
+    contests?: boolean;
+}): Promise<MetricsEngagement>;
+export interface MetricsFederationReach {
+    knownInstances: number;
+    activeMirrors: number;
+    followers: number;
+    inboundContent: number;
+    inboundByDomain: Array<{
+        domain: string;
+        count: number;
+    }>;
+}
+export declare function getFederationReach(db: DB, limit: number): Promise<MetricsFederationReach>;
+//# sourceMappingURL=metrics.d.ts.map

package/dist/publicApi/metrics.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"metrics.d.ts","sourceRoot":"","sources":["../../src/publicApi/metrics.ts"],"names":[],"mappings":"AAeA,OAAO,KAAK,EAAE,EAAE,EAAE,MAAM,aAAa,CAAC;AACtC,OAAO,EAIL,KAAK,oBAAoB,EACzB,KAAK,SAAS,EACf,MAAM,kBAAkB,CAAC;AAE1B;;;;;;;;;;;;;GAaG;AAEH,iFAAiF;AACjF,eAAO,MAAM,kBAAkB,IAAI,CAAC;AAoCpC,MAAM,WAAW,eAAe;IAC9B,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE;QACN,KAAK,EAAE,MAAM,CAAC;QACd,YAAY,EAAE,MAAM,CAAC;QACrB,OAAO,EAAE;YAAE,KAAK,EAAE,MAAM,CAAC;YAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;SAAE,CAAC;QAC3D,IAAI,EAAE,MAAM,CAAC;QACb,IAAI,EAAE,MAAM,CAAC;QACb,UAAU,EAAE;YAAE,KAAK,EAAE,MAAM,CAAC;YAAC,KAAK,EAAE,MAAM,CAAC;YAAC,QAAQ,EAAE,MAAM,CAAA;SAAE,CAAC;KAChE,CAAC;IACF,MAAM,EAAE;QACN,QAAQ,EAAE;YAAE,MAAM,EAAE,MAAM,CAAC;YAAC,OAAO,EAAE,MAAM,CAAA;SAAE,CAAC;QAC9C,UAAU,EAAE;YAAE,MAAM,EAAE,MAAM,CAAC;YAAC,OAAO,EAAE,MAAM,CAAA;SAAE,CAAC;QAChD,kBAAkB,EAAE;YAAE,MAAM,EAAE,MAAM,CAAC;YAAC,OAAO,EAAE,MAAM,CAAA;SAAE,CAAC;KACzD,CAAC;IACF,KAAK,EAAE,MAAM,EAAE,CAAC;CACjB;AAED,wBAAsB,kBAAkB,CAAC,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,CAAC,CAkEzF;AAID,MAAM,MAAM,aAAa,GAAG,OAAO,GAAG,OAAO,GAAG,UAAU,CAAC;AAE3D,wBAAsB,aAAa,CACjC,EAAE,EAAE,EAAE,EACN,MAAM,EAAE,MAAM,EACd,IAAI,EAAE;IAAE,MAAM,EAAE,aAAa,CAAC;IAAC,IAAI,CAAC,EAAE,SAAS,GAAG,SAAS,GAAG,MAAM,GAAG,WAAW,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GAClG,OAAO,CAAC,oBAAoB,EAAE,CAAC,CAsEjC;AAID,wBAAsB,eAAe,CAAC,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,EAAE,CAAC,CAQjG;AAID,MAAM,WAAW,qBAAqB;IACpC,IAAI,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,CAAC;IAC7F,gBAAgB,EAAE,MAAM,CAAC;IACzB,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,EAAE,MAAM,CAAC;CACtB;AAED,wBAAsB,kBAAkB,CACtC,EAAE,EAAE,EAAE,EACN,MAAM,EAAE,MAAM,EACd,KAAK,EAAE,MAAM,GACZ,OAAO,CAAC,qBAAqB,EAAE,CAAC,CA2BlC;AAID,MAAM,WAAW,iBAAiB;IAChC,OAAO,EAAE;QACP,SAAS,EAAE,MAAM,CAAC;QAClB,KAAK,EAAE,MAAM,CAAC;QACd,KAAK,EAAE,MAAM,CAAC;QACd,QAAQ,EAAE,MAAM,CAAC;QACjB,eAAe,EAAE,MAAM,CAAC;QACxB,YAAY,EAAE,MAAM,CAAC;QACrB,eAAe,EAAE,MAAM,CAAC;KACzB,CAAC;IACF,QAAQ,CAAC,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,CAAC;QAAC,cAAc,EAAE,MAAM,CAAA;KAAE,CAAC;IAC/F,MAAM,CAAC,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAA;KAAE,CAAC;IACnF,QAAQ,CAAC,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;CAClD;AAQD,wBAAsB,oBAAoB,CACxC,EAAE,EAAE,EAAE,EACN,QAAQ,EAAE;IAAE,QAAQ,CAAC,EAAE,OAAO,CAAC;IAAC,MAAM,CAAC,EAAE,OAAO,CAAC;IAAC,QAAQ,CAAC,EAAE,OAAO,CAAA;CAAE,GACrE,OAAO,CAAC,iBAAiB,CAAC,CA0E5B;AAID,MAAM,WAAW,sBAAsB;IACrC,cAAc,EAAE,MAAM,CAAC;IACvB,aAAa,EAAE,MAAM,CAAC;IACtB,SAAS,EAAE,MAAM,CAAC;IAClB,cAAc,EAAE,MAAM,CAAC;IACvB,eAAe,EAAE,KAAK,CAAC;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CAC3D;AAED,wBAAsB,kBAAkB,CAAC,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,sBAAsB,CAAC,CAmC/F"}

package/dist/publicApi/metrics.js

@@ -0,0 +1,317 @@
+import { contentItems, users, hubs, tags, learningPaths, events, contests, federatedContent, instanceMirrors, registryInstances, followRelationships, hubFollowers, } from '@commonpub/schema';
+import { and, desc, eq, gt, inArray, isNull, sql } from 'drizzle-orm';
+import { toPublicContentSummary, toPublicTag, } from './serializers.js';
+/**
+ * DevRel / company analytics metrics for the public API. Phase 2: instantaneous
+ * aggregates read straight from denormalized counters and timestamps — no
+ * per-event tracking, no new PII. Time-series (Phase 3) comes from daily rollups.
+ *
+ * Privacy contract (enforced here):
+ * - Aggregates and intentional public leaderboards only; never per-user activity.
+ * - Only published + public + non-deleted content and public-profile active users
+ *   are counted, at the SQL WHERE level (so the indexes are actually used).
+ * - No IP / user-agent / email / referrer is read or returned.
+ * - k-anonymity (`METRICS_MIN_BUCKET`) guards any future user-pivotable breakdown
+ *   (Phase 3 rollups). Phase 2 exposes only non-pivotable aggregates and the
+ *   contributor leaderboard, which is intentional public attribution.
+ */
+/** Suppression threshold for dimensioned breakdowns over users (Phase 3 use). */
+export const METRICS_MIN_BUCKET = 5;
+const DAY_MS = 86_400_000;
+// Counter SUMs cast to float8, not int4: a cumulative `sum(view_count)` can
+// exceed int4's 2.1B ceiling on a busy instance, where `::int` would throw
+// "integer out of range" and 500 the endpoint. float8 holds integer sums
+// exactly up to 2^53 and the pg driver returns it as a JS number (no string
+// coercion). count(*) / count(distinct) stay ::int — row counts won't overflow.
+/** Published + public + non-deleted content — the only content any metric counts. */
+function publicContentWhere() {
+    return and(eq(contentItems.status, 'published'), eq(contentItems.visibility, 'public'), isNull(contentItems.deletedAt));
+}
+// Only DB-valid, publicly-visible statuses. The events status enum is
+// active|draft|published|completed|cancelled (no 'upcoming'/'past' — those are
+// presentation-only labels), so the public set is published/active/completed.
+const PUBLIC_EVENT_STATUSES = [
+    'published',
+    'active',
+    'completed',
+];
+const PUBLIC_CONTEST_STATUSES = [
+    'upcoming',
+    'active',
+    'judging',
+    'completed',
+];
+export async function getMetricsOverview(db, domain) {
+    const now = Date.now();
+    const since7 = new Date(now - 7 * DAY_MS);
+    const since30 = new Date(now - 30 * DAY_MS);
+    const pub = publicContentWhere();
+    const [[contentAgg], byType, [userAgg], [hubAgg], [tagAgg]] = await Promise.all([
+        db
+            .select({
+            total: sql `count(*)::int`,
+            views: sql `coalesce(sum(${contentItems.viewCount}), 0)::float8`,
+            likes: sql `coalesce(sum(${contentItems.likeCount}), 0)::float8`,
+            comments: sql `coalesce(sum(${contentItems.commentCount}), 0)::float8`,
+            contributors: sql `count(distinct ${contentItems.authorId})::int`,
+            new7: sql `count(*) FILTER (WHERE ${contentItems.publishedAt} > ${since7})::int`,
+            new30: sql `count(*) FILTER (WHERE ${contentItems.publishedAt} > ${since30})::int`,
+            active7: sql `count(distinct ${contentItems.authorId}) FILTER (WHERE ${contentItems.publishedAt} > ${since7})::int`,
+            active30: sql `count(distinct ${contentItems.authorId}) FILTER (WHERE ${contentItems.publishedAt} > ${since30})::int`,
+        })
+            .from(contentItems)
+            .where(pub),
+        db
+            .select({ type: contentItems.type, count: sql `count(*)::int` })
+            .from(contentItems)
+            .where(pub)
+            .groupBy(contentItems.type),
+        db
+            .select({
+            total: sql `count(*)::int`,
+            new7: sql `count(*) FILTER (WHERE ${users.createdAt} > ${since7})::int`,
+            new30: sql `count(*) FILTER (WHERE ${users.createdAt} > ${since30})::int`,
+        })
+            .from(users)
+            .where(and(isNull(users.deletedAt), eq(users.status, 'active'))),
+        db.select({ total: sql `count(*)::int` }).from(hubs).where(isNull(hubs.deletedAt)),
+        db.select({ total: sql `count(*)::int` }).from(tags),
+    ]);
+    const byTypeRecord = {};
+    for (const r of byType)
+        byTypeRecord[r.type] = r.count;
+    return {
+        domain,
+        generatedAt: new Date(now).toISOString(),
+        totals: {
+            users: userAgg?.total ?? 0,
+            contributors: contentAgg?.contributors ?? 0,
+            content: { total: contentAgg?.total ?? 0, byType: byTypeRecord },
+            hubs: hubAgg?.total ?? 0,
+            tags: tagAgg?.total ?? 0,
+            engagement: {
+                views: contentAgg?.views ?? 0,
+                likes: contentAgg?.likes ?? 0,
+                comments: contentAgg?.comments ?? 0,
+            },
+        },
+        recent: {
+            newUsers: { last7d: userAgg?.new7 ?? 0, last30d: userAgg?.new30 ?? 0 },
+            newContent: { last7d: contentAgg?.new7 ?? 0, last30d: contentAgg?.new30 ?? 0 },
+            activeContributors: { last7d: contentAgg?.active7 ?? 0, last30d: contentAgg?.active30 ?? 0 },
+        },
+        notes: [
+            'Counts cover published, public, non-deleted content and active public-profile users only.',
+            'Engagement totals are cumulative; per-day engagement time-series arrives with Phase 3 rollups.',
+        ],
+    };
+}
+export async function getTopContent(db, domain, opts) {
+    const orderCol = opts.metric === 'likes'
+        ? contentItems.likeCount
+        : opts.metric === 'comments'
+            ? contentItems.commentCount
+            : contentItems.viewCount;
+    const where = opts.type
+        ? and(publicContentWhere(), eq(contentItems.type, opts.type))
+        : publicContentWhere();
+    const rows = await db
+        .select({
+        id: contentItems.id,
+        type: contentItems.type,
+        title: contentItems.title,
+        slug: contentItems.slug,
+        description: contentItems.description,
+        coverImageUrl: contentItems.coverImageUrl,
+        difficulty: contentItems.difficulty,
+        status: contentItems.status,
+        visibility: contentItems.visibility,
+        publishedAt: contentItems.publishedAt,
+        updatedAt: contentItems.updatedAt,
+        createdAt: contentItems.createdAt,
+        viewCount: contentItems.viewCount,
+        likeCount: contentItems.likeCount,
+        commentCount: contentItems.commentCount,
+        authorId: users.id,
+        authorUsername: users.username,
+        authorDisplayName: users.displayName,
+        authorAvatarUrl: users.avatarUrl,
+    })
+        .from(contentItems)
+        .innerJoin(users, eq(contentItems.authorId, users.id))
+        // Unique id tiebreaker keeps the ordering deterministic across equal counts.
+        .where(where)
+        .orderBy(desc(orderCol), desc(contentItems.id))
+        .limit(opts.limit);
+    return rows.map((r) => toPublicContentSummary({
+        id: r.id,
+        type: r.type,
+        title: r.title,
+        slug: r.slug,
+        description: r.description,
+        coverImageUrl: r.coverImageUrl,
+        difficulty: r.difficulty,
+        status: r.status,
+        visibility: r.visibility,
+        publishedAt: r.publishedAt,
+        updatedAt: r.updatedAt ?? undefined,
+        createdAt: r.createdAt ?? undefined,
+        deletedAt: null,
+        viewCount: r.viewCount,
+        likeCount: r.likeCount,
+        commentCount: r.commentCount,
+        author: {
+            id: r.authorId,
+            username: r.authorUsername,
+            displayName: r.authorDisplayName,
+            avatarUrl: r.authorAvatarUrl,
+        },
+    }, domain));
+}
+// --- Trending tags ---
+export async function getTrendingTags(db, domain, limit) {
+    const rows = await db
+        .select({ id: tags.id, name: tags.name, slug: tags.slug, usageCount: tags.usageCount })
+        .from(tags)
+        .where(gt(tags.usageCount, 0))
+        .orderBy(desc(tags.usageCount), desc(tags.id))
+        .limit(limit);
+    return rows.map((r) => toPublicTag(r, domain));
+}
+export async function getTopContributors(db, domain, limit) {
+    const rows = await db
+        .select({
+        id: users.id,
+        username: users.username,
+        displayName: users.displayName,
+        avatarUrl: users.avatarUrl,
+        publishedContent: sql `count(${contentItems.id})::int`,
+        totalViews: sql `coalesce(sum(${contentItems.viewCount}), 0)::float8`,
+        totalLikes: sql `coalesce(sum(${contentItems.likeCount}), 0)::float8`,
+    })
+        .from(users)
+        // INNER JOIN on the public-content predicate: users with zero public content
+        // are excluded (they are not contributors), and only public content counts.
+        .innerJoin(contentItems, and(eq(contentItems.authorId, users.id), publicContentWhere()))
+        .where(and(eq(users.profileVisibility, 'public'), eq(users.status, 'active'), isNull(users.deletedAt)))
+        .groupBy(users.id, users.username, users.displayName, users.avatarUrl)
+        .orderBy(desc(sql `count(${contentItems.id})`), desc(users.id))
+        .limit(limit);
+    return rows.map((r) => ({
+        user: { id: r.id, username: r.username, displayName: r.displayName, avatarUrl: r.avatarUrl },
+        publishedContent: r.publishedContent,
+        totalViews: r.totalViews,
+        totalLikes: r.totalLikes,
+        canonicalUrl: `https://${domain}/u/${r.username}`,
+    }));
+}
+function ratio(numerator, denominator, digits = 3) {
+    if (denominator <= 0)
+        return 0;
+    const factor = 10 ** digits;
+    return Math.round((numerator / denominator) * factor) / factor;
+}
+export async function getEngagementMetrics(db, features) {
+    const [contentAgg] = await db
+        .select({
+        published: sql `count(*)::int`,
+        views: sql `coalesce(sum(${contentItems.viewCount}), 0)::float8`,
+        likes: sql `coalesce(sum(${contentItems.likeCount}), 0)::float8`,
+        comments: sql `coalesce(sum(${contentItems.commentCount}), 0)::float8`,
+    })
+        .from(contentItems)
+        .where(publicContentWhere());
+    const published = contentAgg?.published ?? 0;
+    const views = contentAgg?.views ?? 0;
+    const likes = contentAgg?.likes ?? 0;
+    const comments = contentAgg?.comments ?? 0;
+    const result = {
+        content: {
+            published,
+            views,
+            likes,
+            comments,
+            avgViewsPerItem: ratio(views, published, 2),
+            likesPerView: ratio(likes, views),
+            commentsPerView: ratio(comments, views),
+        },
+    };
+    if (features.learning) {
+        const [l] = await db
+            .select({
+            paths: sql `count(*)::int`,
+            enrollments: sql `coalesce(sum(${learningPaths.enrollmentCount}), 0)::float8`,
+            completions: sql `coalesce(sum(${learningPaths.completionCount}), 0)::float8`,
+        })
+            .from(learningPaths)
+            .where(eq(learningPaths.status, 'published'));
+        result.learning = {
+            paths: l?.paths ?? 0,
+            enrollments: l?.enrollments ?? 0,
+            completions: l?.completions ?? 0,
+            completionRate: ratio(l?.completions ?? 0, l?.enrollments ?? 0),
+        };
+    }
+    if (features.events) {
+        const [e] = await db
+            .select({
+            events: sql `count(*)::int`,
+            capacity: sql `coalesce(sum(${events.capacity}), 0)::float8`,
+            attendees: sql `coalesce(sum(${events.attendeeCount}), 0)::float8`,
+        })
+            .from(events)
+            .where(inArray(events.status, PUBLIC_EVENT_STATUSES));
+        result.events = {
+            events: e?.events ?? 0,
+            capacity: e?.capacity ?? 0,
+            attendees: e?.attendees ?? 0,
+            fillRate: ratio(e?.attendees ?? 0, e?.capacity ?? 0),
+        };
+    }
+    if (features.contests) {
+        const [c] = await db
+            .select({
+            contests: sql `count(*)::int`,
+            entries: sql `coalesce(sum(${contests.entryCount}), 0)::float8`,
+        })
+            .from(contests)
+            .where(and(inArray(contests.status, PUBLIC_CONTEST_STATUSES), eq(contests.visibility, 'public')));
+        result.contests = { contests: c?.contests ?? 0, entries: c?.entries ?? 0 };
+    }
+    return result;
+}
+export async function getFederationReach(db, limit) {
+    const [[instAgg], [mirrorAgg], [userFollowers], [hubFollowerAgg], [inboundAgg], byDomain] = await Promise.all([
+        db
+            .select({ total: sql `count(*)::int` })
+            .from(registryInstances)
+            .where(eq(registryInstances.status, 'active')),
+        db
+            .select({ total: sql `count(*)::int` })
+            .from(instanceMirrors)
+            .where(eq(instanceMirrors.status, 'active')),
+        db
+            .select({ total: sql `count(*)::int` })
+            .from(followRelationships)
+            .where(eq(followRelationships.status, 'accepted')),
+        db
+            .select({ total: sql `count(*)::int` })
+            .from(hubFollowers)
+            .where(eq(hubFollowers.status, 'accepted')),
+        db.select({ total: sql `count(*)::int` }).from(federatedContent),
+        db
+            .select({ domain: federatedContent.originDomain, count: sql `count(*)::int` })
+            .from(federatedContent)
+            .groupBy(federatedContent.originDomain)
+            .orderBy(desc(sql `count(*)`), desc(federatedContent.originDomain))
+            .limit(limit),
+    ]);
+    return {
+        knownInstances: instAgg?.total ?? 0,
+        activeMirrors: mirrorAgg?.total ?? 0,
+        followers: (userFollowers?.total ?? 0) + (hubFollowerAgg?.total ?? 0),
+        inboundContent: inboundAgg?.total ?? 0,
+        inboundByDomain: byDomain.map((r) => ({ domain: r.domain, count: r.count })),
+    };
+}
+//# sourceMappingURL=metrics.js.map

package/dist/publicApi/metrics.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"metrics.js","sourceRoot":"","sources":["../../src/publicApi/metrics.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,YAAY,EACZ,KAAK,EACL,IAAI,EACJ,IAAI,EACJ,aAAa,EACb,MAAM,EACN,QAAQ,EACR,gBAAgB,EAChB,eAAe,EACf,iBAAiB,EACjB,mBAAmB,EACnB,YAAY,GACb,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,EAAE,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,aAAa,CAAC;AAEtE,OAAO,EACL,sBAAsB,EACtB,WAAW,GAIZ,MAAM,kBAAkB,CAAC;AAE1B;;;;;;;;;;;;;GAaG;AAEH,iFAAiF;AACjF,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC;AAEpC,MAAM,MAAM,GAAG,UAAU,CAAC;AAE1B,4EAA4E;AAC5E,2EAA2E;AAC3E,yEAAyE;AACzE,4EAA4E;AAC5E,gFAAgF;AAEhF,qFAAqF;AACrF,SAAS,kBAAkB;IACzB,OAAO,GAAG,CACR,EAAE,CAAC,YAAY,CAAC,MAAM,EAAE,WAAW,CAAC,EACpC,EAAE,CAAC,YAAY,CAAC,UAAU,EAAE,QAAQ,CAAC,EACrC,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,CAC/B,CAAC;AACJ,CAAC;AAED,sEAAsE;AACtE,+EAA+E;AAC/E,8EAA8E;AAC9E,MAAM,qBAAqB,GAAgD;IACzE,WAAW;IACX,QAAQ;IACR,WAAW;CACZ,CAAC;AACF,MAAM,uBAAuB,GAA2D;IACtF,UAAU;IACV,QAAQ;IACR,SAAS;IACT,WAAW;CACZ,CAAC;AAuBF,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,EAAM,EAAE,MAAc;IAC7D,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvB,MAAM,MAAM,GAAG,IAAI,IAAI,CAAC,GAAG,GAAG,CAAC,GAAG,MAAM,CAAC,CAAC;IAC1C,MAAM,OAAO,GAAG,IAAI,IAAI,CAAC,GAAG,GAAG,EAAE,GAAG,MAAM,CAAC,CAAC;IAC5C,MAAM,GAAG,GAAG,kBAAkB,EAAE,CAAC;IAEjC,MAAM,CAAC,CAAC,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QAC9E,EAAE;aACC,MAAM,CAAC;YACN,KAAK,EAAE,GAAG,CAAQ,eAAe;YACjC,KAAK,EAAE,GAAG,CAAQ,gBAAgB,YAAY,CAAC,SAAS,eAAe;YACvE,KAAK,EAAE,GAAG,CAAQ,gBAAgB,YAAY,CAAC,SAAS,eAAe;YACvE,QAAQ,EAAE,GAAG,CAAQ,gBAAgB,YAAY,CAAC,YAAY,eAAe;YAC7E,YAAY,EAAE,GAAG,CAAQ,kBAAkB,YAAY,CAAC,QAAQ,QAAQ;YACxE,IAAI,EAAE,GAAG,CAAQ,0BAA0B,YAAY,CAAC,WAAW,MAAM,MAAM,QAAQ;YACvF,KAAK,EAAE,GAAG,CAAQ,0BAA0B,YAAY,CAAC,WAAW,MAAM,OAAO,QAAQ;YACzF,OAAO,EAAE,GAAG,CAAQ,kBAAkB,YAAY,CAAC,QAAQ,mBAAmB,YAAY,CAAC,WAAW,MAAM,MAAM,QAAQ;YAC1H,QAAQ,EAAE,GAAG,CAAQ,kBAAkB,YAAY,CAAC,QAAQ,mBAAmB,YAAY,CAAC,WAAW,MAAM,OAAO,QAAQ;SAC7H,CAAC;aACD,IAAI,CAAC,YAAY,CAAC;aAClB,KAAK,CAAC,GAAG,CAAC;QACb,EAAE;aACC,MAAM,CAAC,EAAE,IAAI,EAAE,YAAY,CAAC,IAAI,EAAE,KAAK,EAAE,GAAG,CAAQ,eAAe,EAAE,CAAC;aACtE,IAAI,CAAC,YAAY,CAAC;aAClB,KAAK,CAAC,GAAG,CAAC;aACV,OAAO,CAAC,YAAY,CAAC,IAAI,CAAC;QAC7B,EAAE;aACC,MAAM,CAAC;YACN,KAAK,EAAE,GAAG,CAAQ,eAAe;YACjC,IAAI,EAAE,GAAG,CAAQ,0BAA0B,KAAK,CAAC,SAAS,MAAM,MAAM,QAAQ;YAC9E,KAAK,EAAE,GAAG,CAAQ,0BAA0B,KAAK,CAAC,SAAS,MAAM,OAAO,QAAQ;SACjF,CAAC;aACD,IAAI,CAAC,KAAK,CAAC;aACX,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC;QAClE,EAAE,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,GAAG,CAAQ,eAAe,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACzF,EAAE,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,GAAG,CAAQ,eAAe,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;KAC5D,CAAC,CAAC;IAEH,MAAM,YAAY,GAA2B,EAAE,CAAC;IAChD,KAAK,MAAM,CAAC,IAAI,MAAM;QAAE,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC;IAEvD,OAAO;QACL,MAAM;QACN,WAAW,EAAE,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE;QACxC,MAAM,EAAE;YACN,KAAK,EAAE,OAAO,EAAE,KAAK,IAAI,CAAC;YAC1B,YAAY,EAAE,UAAU,EAAE,YAAY,IAAI,CAAC;YAC3C,OAAO,EAAE,EAAE,KAAK,EAAE,UAAU,EAAE,KAAK,IAAI,CAAC,EAAE,MAAM,EAAE,YAAY,EAAE;YAChE,IAAI,EAAE,MAAM,EAAE,KAAK,IAAI,CAAC;YACxB,IAAI,EAAE,MAAM,EAAE,KAAK,IAAI,CAAC;YACxB,UAAU,EAAE;gBACV,KAAK,EAAE,UAAU,EAAE,KAAK,IAAI,CAAC;gBAC7B,KAAK,EAAE,UAAU,EAAE,KAAK,IAAI,CAAC;gBAC7B,QAAQ,EAAE,UAAU,EAAE,QAAQ,IAAI,CAAC;aACpC;SACF;QACD,MAAM,EAAE;YACN,QAAQ,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,IAAI,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,IAAI,CAAC,EAAE;YACtE,UAAU,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,IAAI,IAAI,CAAC,EAAE,OAAO,EAAE,UAAU,EAAE,KAAK,IAAI,CAAC,EAAE;YAC9E,kBAAkB,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,OAAO,IAAI,CAAC,EAAE,OAAO,EAAE,UAAU,EAAE,QAAQ,IAAI,CAAC,EAAE;SAC7F;QACD,KAAK,EAAE;YACL,2FAA2F;YAC3F,gGAAgG;SACjG;KACF,CAAC;AACJ,CAAC;AAMD,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,EAAM,EACN,MAAc,EACd,IAAmG;IAEnG,MAAM,QAAQ,GACZ,IAAI,CAAC,MAAM,KAAK,OAAO;QACrB,CAAC,CAAC,YAAY,CAAC,SAAS;QACxB,CAAC,CAAC,IAAI,CAAC,MAAM,KAAK,UAAU;YAC1B,CAAC,CAAC,YAAY,CAAC,YAAY;YAC3B,CAAC,CAAC,YAAY,CAAC,SAAS,CAAC;IAE/B,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI;QACrB,CAAC,CAAC,GAAG,CAAC,kBAAkB,EAAE,EAAE,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;QAC7D,CAAC,CAAC,kBAAkB,EAAE,CAAC;IAEzB,MAAM,IAAI,GAAG,MAAM,EAAE;SAClB,MAAM,CAAC;QACN,EAAE,EAAE,YAAY,CAAC,EAAE;QACnB,IAAI,EAAE,YAAY,CAAC,IAAI;QACvB,KAAK,EAAE,YAAY,CAAC,KAAK;QACzB,IAAI,EAAE,YAAY,CAAC,IAAI;QACvB,WAAW,EAAE,YAAY,CAAC,WAAW;QACrC,aAAa,EAAE,YAAY,CAAC,aAAa;QACzC,UAAU,EAAE,YAAY,CAAC,UAAU;QACnC,MAAM,EAAE,YAAY,CAAC,MAAM;QAC3B,UAAU,EAAE,YAAY,CAAC,UAAU;QACnC,WAAW,EAAE,YAAY,CAAC,WAAW;QACrC,SAAS,EAAE,YAAY,CAAC,SAAS;QACjC,SAAS,EAAE,YAAY,CAAC,SAAS;QACjC,SAAS,EAAE,YAAY,CAAC,SAAS;QACjC,SAAS,EAAE,YAAY,CAAC,SAAS;QACjC,YAAY,EAAE,YAAY,CAAC,YAAY;QACvC,QAAQ,EAAE,KAAK,CAAC,EAAE;QAClB,cAAc,EAAE,KAAK,CAAC,QAAQ;QAC9B,iBAAiB,EAAE,KAAK,CAAC,WAAW;QACpC,eAAe,EAAE,KAAK,CAAC,SAAS;KACjC,CAAC;SACD,IAAI,CAAC,YAAY,CAAC;SAClB,SAAS,CAAC,KAAK,EAAE,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,KAAK,CAAC,EAAE,CAAC,CAAC;QACtD,6EAA6E;SAC5E,KAAK,CAAC,KAAK,CAAC;SACZ,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,IAAI,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC;SAC9C,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAErB,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CACpB,sBAAsB,CACpB;QACE,EAAE,EAAE,CAAC,CAAC,EAAE;QACR,IAAI,EAAE,CAAC,CAAC,IAAI;QACZ,KAAK,EAAE,CAAC,CAAC,KAAK;QACd,IAAI,EAAE,CAAC,CAAC,IAAI;QACZ,WAAW,EAAE,CAAC,CAAC,WAAW;QAC1B,aAAa,EAAE,CAAC,CAAC,aAAa;QAC9B,UAAU,EAAE,CAAC,CAAC,UAAU;QACxB,MAAM,EAAE,CAAC,CAAC,MAAM;QAChB,UAAU,EAAE,CAAC,CAAC,UAAU;QACxB,WAAW,EAAE,CAAC,CAAC,WAAW;QAC1B,SAAS,EAAE,CAAC,CAAC,SAAS,IAAI,SAAS;QACnC,SAAS,EAAE,CAAC,CAAC,SAAS,IAAI,SAAS;QACnC,SAAS,EAAE,IAAI;QACf,SAAS,EAAE,CAAC,CAAC,SAAS;QACtB,SAAS,EAAE,CAAC,CAAC,SAAS;QACtB,YAAY,EAAE,CAAC,CAAC,YAAY;QAC5B,MAAM,EAAE;YACN,EAAE,EAAE,CAAC,CAAC,QAAQ;YACd,QAAQ,EAAE,CAAC,CAAC,cAAc;YAC1B,WAAW,EAAE,CAAC,CAAC,iBAAiB;YAChC,SAAS,EAAE,CAAC,CAAC,eAAe;SAC7B;KACyB,EAC5B,MAAM,CACP,CACF,CAAC;AACJ,CAAC;AAED,wBAAwB;AAExB,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,EAAM,EAAE,MAAc,EAAE,KAAa;IACzE,MAAM,IAAI,GAAG,MAAM,EAAE;SAClB,MAAM,CAAC,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE,CAAC;SACtF,IAAI,CAAC,IAAI,CAAC;SACV,KAAK,CAAC,EAAE,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC;SAC7B,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;SAC7C,KAAK,CAAC,KAAK,CAAC,CAAC;IAChB,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,WAAW,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC;AACjD,CAAC;AAYD,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,EAAM,EACN,MAAc,EACd,KAAa;IAEb,MAAM,IAAI,GAAG,MAAM,EAAE;SAClB,MAAM,CAAC;QACN,EAAE,EAAE,KAAK,CAAC,EAAE;QACZ,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,gBAAgB,EAAE,GAAG,CAAQ,SAAS,YAAY,CAAC,EAAE,QAAQ;QAC7D,UAAU,EAAE,GAAG,CAAQ,gBAAgB,YAAY,CAAC,SAAS,eAAe;QAC5E,UAAU,EAAE,GAAG,CAAQ,gBAAgB,YAAY,CAAC,SAAS,eAAe;KAC7E,CAAC;SACD,IAAI,CAAC,KAAK,CAAC;QACZ,6EAA6E;QAC7E,4EAA4E;SAC3E,SAAS,CAAC,YAAY,EAAE,GAAG,CAAC,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,KAAK,CAAC,EAAE,CAAC,EAAE,kBAAkB,EAAE,CAAC,CAAC;SACvF,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,KAAK,CAAC,iBAAiB,EAAE,QAAQ,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,EAAE,QAAQ,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC;SACtG,OAAO,CAAC,KAAK,CAAC,EAAE,EAAE,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,WAAW,EAAE,KAAK,CAAC,SAAS,CAAC;SACrE,OAAO,CAAC,IAAI,CAAC,GAAG,CAAA,SAAS,YAAY,CAAC,EAAE,GAAG,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;SAC7D,KAAK,CAAC,KAAK,CAAC,CAAC;IAEhB,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACtB,IAAI,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,WAAW,EAAE,CAAC,CAAC,WAAW,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS,EAAE;QAC5F,gBAAgB,EAAE,CAAC,CAAC,gBAAgB;QACpC,UAAU,EAAE,CAAC,CAAC,UAAU;QACxB,UAAU,EAAE,CAAC,CAAC,UAAU;QACxB,YAAY,EAAE,WAAW,MAAM,MAAM,CAAC,CAAC,QAAQ,EAAE;KAClD,CAAC,CAAC,CAAC;AACN,CAAC;AAmBD,SAAS,KAAK,CAAC,SAAiB,EAAE,WAAmB,EAAE,MAAM,GAAG,CAAC;IAC/D,IAAI,WAAW,IAAI,CAAC;QAAE,OAAO,CAAC,CAAC;IAC/B,MAAM,MAAM,GAAG,EAAE,IAAI,MAAM,CAAC;IAC5B,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC,SAAS,GAAG,WAAW,CAAC,GAAG,MAAM,CAAC,GAAG,MAAM,CAAC;AACjE,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,EAAM,EACN,QAAsE;IAEtE,MAAM,CAAC,UAAU,CAAC,GAAG,MAAM,EAAE;SAC1B,MAAM,CAAC;QACN,SAAS,EAAE,GAAG,CAAQ,eAAe;QACrC,KAAK,EAAE,GAAG,CAAQ,gBAAgB,YAAY,CAAC,SAAS,eAAe;QACvE,KAAK,EAAE,GAAG,CAAQ,gBAAgB,YAAY,CAAC,SAAS,eAAe;QACvE,QAAQ,EAAE,GAAG,CAAQ,gBAAgB,YAAY,CAAC,YAAY,eAAe;KAC9E,CAAC;SACD,IAAI,CAAC,YAAY,CAAC;SAClB,KAAK,CAAC,kBAAkB,EAAE,CAAC,CAAC;IAE/B,MAAM,SAAS,GAAG,UAAU,EAAE,SAAS,IAAI,CAAC,CAAC;IAC7C,MAAM,KAAK,GAAG,UAAU,EAAE,KAAK,IAAI,CAAC,CAAC;IACrC,MAAM,KAAK,GAAG,UAAU,EAAE,KAAK,IAAI,CAAC,CAAC;IACrC,MAAM,QAAQ,GAAG,UAAU,EAAE,QAAQ,IAAI,CAAC,CAAC;IAE3C,MAAM,MAAM,GAAsB;QAChC,OAAO,EAAE;YACP,SAAS;YACT,KAAK;YACL,KAAK;YACL,QAAQ;YACR,eAAe,EAAE,KAAK,CAAC,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC;YAC3C,YAAY,EAAE,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC;YACjC,eAAe,EAAE,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC;SACxC;KACF,CAAC;IAEF,IAAI,QAAQ,CAAC,QAAQ,EAAE,CAAC;QACtB,MAAM,CAAC,CAAC,CAAC,GAAG,MAAM,EAAE;aACjB,MAAM,CAAC;YACN,KAAK,EAAE,GAAG,CAAQ,eAAe;YACjC,WAAW,EAAE,GAAG,CAAQ,gBAAgB,aAAa,CAAC,eAAe,eAAe;YACpF,WAAW,EAAE,GAAG,CAAQ,gBAAgB,aAAa,CAAC,eAAe,eAAe;SACrF,CAAC;aACD,IAAI,CAAC,aAAa,CAAC;aACnB,KAAK,CAAC,EAAE,CAAC,aAAa,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC,CAAC;QAChD,MAAM,CAAC,QAAQ,GAAG;YAChB,KAAK,EAAE,CAAC,EAAE,KAAK,IAAI,CAAC;YACpB,WAAW,EAAE,CAAC,EAAE,WAAW,IAAI,CAAC;YAChC,WAAW,EAAE,CAAC,EAAE,WAAW,IAAI,CAAC;YAChC,cAAc,EAAE,KAAK,CAAC,CAAC,EAAE,WAAW,IAAI,CAAC,EAAE,CAAC,EAAE,WAAW,IAAI,CAAC,CAAC;SAChE,CAAC;IACJ,CAAC;IAED,IAAI,QAAQ,CAAC,MAAM,EAAE,CAAC;QACpB,MAAM,CAAC,CAAC,CAAC,GAAG,MAAM,EAAE;aACjB,MAAM,CAAC;YACN,MAAM,EAAE,GAAG,CAAQ,eAAe;YAClC,QAAQ,EAAE,GAAG,CAAQ,gBAAgB,MAAM,CAAC,QAAQ,eAAe;YACnE,SAAS,EAAE,GAAG,CAAQ,gBAAgB,MAAM,CAAC,aAAa,eAAe;SAC1E,CAAC;aACD,IAAI,CAAC,MAAM,CAAC;aACZ,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,qBAAqB,CAAC,CAAC,CAAC;QACxD,MAAM,CAAC,MAAM,GAAG;YACd,MAAM,EAAE,CAAC,EAAE,MAAM,IAAI,CAAC;YACtB,QAAQ,EAAE,CAAC,EAAE,QAAQ,IAAI,CAAC;YAC1B,SAAS,EAAE,CAAC,EAAE,SAAS,IAAI,CAAC;YAC5B,QAAQ,EAAE,KAAK,CAAC,CAAC,EAAE,SAAS,IAAI,CAAC,EAAE,CAAC,EAAE,QAAQ,IAAI,CAAC,CAAC;SACrD,CAAC;IACJ,CAAC;IAED,IAAI,QAAQ,CAAC,QAAQ,EAAE,CAAC;QACtB,MAAM,CAAC,CAAC,CAAC,GAAG,MAAM,EAAE;aACjB,MAAM,CAAC;YACN,QAAQ,EAAE,GAAG,CAAQ,eAAe;YACpC,OAAO,EAAE,GAAG,CAAQ,gBAAgB,QAAQ,CAAC,UAAU,eAAe;SACvE,CAAC;aACD,IAAI,CAAC,QAAQ,CAAC;aACd,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,EAAE,uBAAuB,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC;QACpG,MAAM,CAAC,QAAQ,GAAG,EAAE,QAAQ,EAAE,CAAC,EAAE,QAAQ,IAAI,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,OAAO,IAAI,CAAC,EAAE,CAAC;IAC7E,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAYD,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,EAAM,EAAE,KAAa;IAC5D,MAAM,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC,aAAa,CAAC,EAAE,CAAC,cAAc,CAAC,EAAE,CAAC,UAAU,CAAC,EAAE,QAAQ,CAAC,GACvF,MAAM,OAAO,CAAC,GAAG,CAAC;QAChB,EAAE;aACC,MAAM,CAAC,EAAE,KAAK,EAAE,GAAG,CAAQ,eAAe,EAAE,CAAC;aAC7C,IAAI,CAAC,iBAAiB,CAAC;aACvB,KAAK,CAAC,EAAE,CAAC,iBAAiB,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;QAChD,EAAE;aACC,MAAM,CAAC,EAAE,KAAK,EAAE,GAAG,CAAQ,eAAe,EAAE,CAAC;aAC7C,IAAI,CAAC,eAAe,CAAC;aACrB,KAAK,CAAC,EAAE,CAAC,eAAe,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;QAC9C,EAAE;aACC,MAAM,CAAC,EAAE,KAAK,EAAE,GAAG,CAAQ,eAAe,EAAE,CAAC;aAC7C,IAAI,CAAC,mBAAmB,CAAC;aACzB,KAAK,CAAC,EAAE,CAAC,mBAAmB,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;QACpD,EAAE;aACC,MAAM,CAAC,EAAE,KAAK,EAAE,GAAG,CAAQ,eAAe,EAAE,CAAC;aAC7C,IAAI,CAAC,YAAY,CAAC;aAClB,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;QAC7C,EAAE,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,GAAG,CAAQ,eAAe,EAAE,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC;QACvE,EAAE;aACC,MAAM,CAAC,EAAE,MAAM,EAAE,gBAAgB,CAAC,YAAY,EAAE,KAAK,EAAE,GAAG,CAAQ,eAAe,EAAE,CAAC;aACpF,IAAI,CAAC,gBAAgB,CAAC;aACtB,OAAO,CAAC,gBAAgB,CAAC,YAAY,CAAC;aACtC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAA,UAAU,CAAC,EAAE,IAAI,CAAC,gBAAgB,CAAC,YAAY,CAAC,CAAC;aACjE,KAAK,CAAC,KAAK,CAAC;KAChB,CAAC,CAAC;IAEL,OAAO;QACL,cAAc,EAAE,OAAO,EAAE,KAAK,IAAI,CAAC;QACnC,aAAa,EAAE,SAAS,EAAE,KAAK,IAAI,CAAC;QACpC,SAAS,EAAE,CAAC,aAAa,EAAE,KAAK,IAAI,CAAC,CAAC,GAAG,CAAC,cAAc,EAAE,KAAK,IAAI,CAAC,CAAC;QACrE,cAAc,EAAE,UAAU,EAAE,KAAK,IAAI,CAAC;QACtC,eAAe,EAAE,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;KAC7E,CAAC;AACJ,CAAC"}

package/dist/publicApi/metricsRollup.d.ts

@@ -0,0 +1,55 @@
+import type { DB } from '../types.js';
+/**
+ * Daily analytics rollups (Phase 3). Aggregate snapshots only — no per-user
+ * data, no new PII. Written by the `metrics-rollup` Nitro plugin into
+ * `metrics_daily`; read by `getMetricsTimeseries`.
+ *
+ * Two metric kinds:
+ * - `flow` (e.g. `users.new`): that day's count. Deterministic from timestamps,
+ *   so fully backfillable and idempotent on re-run.
+ * - `cumulative` (e.g. `users.total`, `content.views`): running total as of a
+ *   day. Count-based cumulatives are backfilled as the survivorship curve
+ *   (currently-live rows by their creation/publish date). Sum-based engagement
+ *   cumulatives (views/likes/comments) have no per-day history, so they are
+ *   snapshot forward from the first rollup only (never backfilled).
+ */
+export type MetricKind = 'flow' | 'cumulative';
+/** Every metric the timeseries endpoint will serve, with its aggregation kind. */
+export declare const TIMESERIES_METRICS: Record<string, MetricKind>;
+/**
+ * Snapshot today's metrics. Count-based + flow metrics are deterministic
+ * (`users.total` = currently-live users; `users.new` = created today). Sum-based
+ * engagement cumulatives capture the current running total under `today`.
+ * Idempotent: re-running for the same day overwrites that day's rows.
+ */
+export declare function runDailyRollup(db: DB, today: string): Promise<void>;
+/**
+ * Backfill the deterministic count-based series for ALL of history from
+ * timestamps: `users.new`/`content.new` (daily flow) and `users.total`/
+ * `content.total` (cumulative window-sum = survivorship curve). Sum-based
+ * engagement metrics are NOT backfilled (no per-day history exists). Idempotent.
+ * Returns the number of rows written.
+ */
+export declare function backfillMetricsDaily(db: DB): Promise<number>;
+export type TimeseriesInterval = 'day' | 'week' | 'month';
+export interface TimeseriesPoint {
+    date: string;
+    value: number;
+    delta: number;
+}
+export interface MetricsTimeseries {
+    metric: string;
+    kind: MetricKind;
+    interval: TimeseriesInterval;
+    from: string;
+    to: string;
+    since: string | null;
+    points: TimeseriesPoint[];
+}
+export declare function getMetricsTimeseries(db: DB, opts: {
+    metric: string;
+    interval: TimeseriesInterval;
+    from: string;
+    to: string;
+}): Promise<MetricsTimeseries>;
+//# sourceMappingURL=metricsRollup.d.ts.map

package/dist/publicApi/metricsRollup.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"metricsRollup.d.ts","sourceRoot":"","sources":["../../src/publicApi/metricsRollup.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,EAAE,EAAE,MAAM,aAAa,CAAC;AAEtC;;;;;;;;;;;;;GAaG;AAEH,MAAM,MAAM,UAAU,GAAG,MAAM,GAAG,YAAY,CAAC;AAE/C,kFAAkF;AAClF,eAAO,MAAM,kBAAkB,EAAE,MAAM,CAAC,MAAM,EAAE,UAAU,CAQzD,CAAC;AA6BF;;;;;GAKG;AACH,wBAAsB,cAAc,CAAC,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CA8BzE;AAED;;;;;;GAMG;AACH,wBAAsB,oBAAoB,CAAC,EAAE,EAAE,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC,CAmClE;AAID,MAAM,MAAM,kBAAkB,GAAG,KAAK,GAAG,MAAM,GAAG,OAAO,CAAC;AAE1D,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,iBAAiB;IAChC,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,UAAU,CAAC;IACjB,QAAQ,EAAE,kBAAkB,CAAC;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,MAAM,EAAE,eAAe,EAAE,CAAC;CAC3B;AAaD,wBAAsB,oBAAoB,CACxC,EAAE,EAAE,EAAE,EACN,IAAI,EAAE;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,kBAAkB,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,EAAE,EAAE,MAAM,CAAA;CAAE,GAC/E,OAAO,CAAC,iBAAiB,CAAC,CA4C5B"}

package/dist/publicApi/metricsRollup.js

@@ -0,0 +1,158 @@
+import { metricsDaily, contentItems, users } from '@commonpub/schema';
+import { and, asc, eq, gte, isNull, lte, sql } from 'drizzle-orm';
+/** Every metric the timeseries endpoint will serve, with its aggregation kind. */
+export const TIMESERIES_METRICS = {
+    'users.total': 'cumulative',
+    'users.new': 'flow',
+    'content.total': 'cumulative',
+    'content.new': 'flow',
+    'content.views': 'cumulative',
+    'content.likes': 'cumulative',
+    'content.comments': 'cumulative',
+};
+const DIM = ''; // global series sentinel (see metrics_daily schema note)
+function activeUsersWhere() {
+    return and(isNull(users.deletedAt), eq(users.status, 'active'));
+}
+function publicContentWhere() {
+    return and(eq(contentItems.status, 'published'), eq(contentItems.visibility, 'public'), isNull(contentItems.deletedAt));
+}
+async function upsertRows(db, rows) {
+    if (rows.length === 0)
+        return;
+    await db
+        .insert(metricsDaily)
+        .values(rows.map((r) => ({ day: r.day, metric: r.metric, dimension: DIM, value: r.value })))
+        .onConflictDoUpdate({
+        target: [metricsDaily.day, metricsDaily.metric, metricsDaily.dimension],
+        set: { value: sql `excluded.value` },
+    });
+}
+/**
+ * Snapshot today's metrics. Count-based + flow metrics are deterministic
+ * (`users.total` = currently-live users; `users.new` = created today). Sum-based
+ * engagement cumulatives capture the current running total under `today`.
+ * Idempotent: re-running for the same day overwrites that day's rows.
+ */
+export async function runDailyRollup(db, today) {
+    const [[u], [c]] = await Promise.all([
+        db
+            .select({
+            total: sql `count(*)::int`,
+            newToday: sql `count(*) FILTER (WHERE ${users.createdAt}::date = ${today})::int`,
+        })
+            .from(users)
+            .where(activeUsersWhere()),
+        db
+            .select({
+            total: sql `count(*)::int`,
+            newToday: sql `count(*) FILTER (WHERE ${contentItems.publishedAt}::date = ${today})::int`,
+            views: sql `coalesce(sum(${contentItems.viewCount}), 0)::float8`,
+            likes: sql `coalesce(sum(${contentItems.likeCount}), 0)::float8`,
+            comments: sql `coalesce(sum(${contentItems.commentCount}), 0)::float8`,
+        })
+            .from(contentItems)
+            .where(publicContentWhere()),
+    ]);
+    await upsertRows(db, [
+        { day: today, metric: 'users.total', value: u?.total ?? 0 },
+        { day: today, metric: 'users.new', value: u?.newToday ?? 0 },
+        { day: today, metric: 'content.total', value: c?.total ?? 0 },
+        { day: today, metric: 'content.new', value: c?.newToday ?? 0 },
+        { day: today, metric: 'content.views', value: c?.views ?? 0 },
+        { day: today, metric: 'content.likes', value: c?.likes ?? 0 },
+        { day: today, metric: 'content.comments', value: c?.comments ?? 0 },
+    ]);
+}
+/**
+ * Backfill the deterministic count-based series for ALL of history from
+ * timestamps: `users.new`/`content.new` (daily flow) and `users.total`/
+ * `content.total` (cumulative window-sum = survivorship curve). Sum-based
+ * engagement metrics are NOT backfilled (no per-day history exists). Idempotent.
+ * Returns the number of rows written.
+ */
+export async function backfillMetricsDaily(db) {
+    const [userDays, contentDays] = await Promise.all([
+        db
+            .select({
+            day: sql `to_char(${users.createdAt}::date, 'YYYY-MM-DD')`,
+            flow: sql `count(*)::int`,
+            cumulative: sql `sum(count(*)) OVER (ORDER BY ${users.createdAt}::date)::int`,
+        })
+            .from(users)
+            .where(activeUsersWhere())
+            .groupBy(sql `${users.createdAt}::date`)
+            .orderBy(sql `${users.createdAt}::date`),
+        db
+            .select({
+            day: sql `to_char(${contentItems.publishedAt}::date, 'YYYY-MM-DD')`,
+            flow: sql `count(*)::int`,
+            cumulative: sql `sum(count(*)) OVER (ORDER BY ${contentItems.publishedAt}::date)::int`,
+        })
+            .from(contentItems)
+            .where(and(publicContentWhere(), sql `${contentItems.publishedAt} IS NOT NULL`))
+            .groupBy(sql `${contentItems.publishedAt}::date`)
+            .orderBy(sql `${contentItems.publishedAt}::date`),
+    ]);
+    const rows = [];
+    for (const r of userDays) {
+        rows.push({ day: r.day, metric: 'users.new', value: r.flow });
+        rows.push({ day: r.day, metric: 'users.total', value: r.cumulative });
+    }
+    for (const r of contentDays) {
+        rows.push({ day: r.day, metric: 'content.new', value: r.flow });
+        rows.push({ day: r.day, metric: 'content.total', value: r.cumulative });
+    }
+    await upsertRows(db, rows);
+    return rows.length;
+}
+/** UTC bucket-start key for a YYYY-MM-DD day under the given interval. */
+function bucketKey(day, interval) {
+    if (interval === 'day')
+        return day;
+    if (interval === 'month')
+        return `${day.slice(0, 7)}-01`;
+    // week: Monday of the ISO week (UTC).
+    const d = new Date(`${day}T00:00:00Z`);
+    const dow = (d.getUTCDay() + 6) % 7; // 0 = Monday
+    d.setUTCDate(d.getUTCDate() - dow);
+    return d.toISOString().slice(0, 10);
+}
+export async function getMetricsTimeseries(db, opts) {
+    const kind = TIMESERIES_METRICS[opts.metric];
+    if (!kind)
+        throw new Error(`Unknown metric: ${opts.metric}`);
+    const rows = await db
+        .select({ day: metricsDaily.day, value: metricsDaily.value })
+        .from(metricsDaily)
+        .where(and(eq(metricsDaily.metric, opts.metric), eq(metricsDaily.dimension, DIM), gte(metricsDaily.day, opts.from), lte(metricsDaily.day, opts.to)))
+        .orderBy(asc(metricsDaily.day));
+    // Bucket in JS (range is bounded by the caller). flow -> sum within bucket;
+    // cumulative -> last value within bucket (the running total at bucket end).
+    const buckets = new Map();
+    for (const r of rows) {
+        const key = bucketKey(r.day, opts.interval);
+        const prev = buckets.get(key);
+        if (kind === 'flow')
+            buckets.set(key, (prev ?? 0) + r.value);
+        else
+            buckets.set(key, r.value); // ordered asc, so last write wins = bucket-end value
+    }
+    const ordered = [...buckets.entries()].sort(([a], [b]) => (a < b ? -1 : a > b ? 1 : 0));
+    const points = [];
+    let prevValue = null;
+    for (const [date, value] of ordered) {
+        points.push({ date, value, delta: prevValue === null ? 0 : value - prevValue });
+        prevValue = value;
+    }
+    return {
+        metric: opts.metric,
+        kind,
+        interval: opts.interval,
+        from: opts.from,
+        to: opts.to,
+        since: rows[0]?.day ?? null,
+        points,
+    };
+}
+//# sourceMappingURL=metricsRollup.js.map

package/dist/publicApi/metricsRollup.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"metricsRollup.js","sourceRoot":"","sources":["../../src/publicApi/metricsRollup.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,YAAY,EAAE,KAAK,EAAE,MAAM,mBAAmB,CAAC;AACtE,OAAO,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,MAAM,aAAa,CAAC;AAoBlE,kFAAkF;AAClF,MAAM,CAAC,MAAM,kBAAkB,GAA+B;IAC5D,aAAa,EAAE,YAAY;IAC3B,WAAW,EAAE,MAAM;IACnB,eAAe,EAAE,YAAY;IAC7B,aAAa,EAAE,MAAM;IACrB,eAAe,EAAE,YAAY;IAC7B,eAAe,EAAE,YAAY;IAC7B,kBAAkB,EAAE,YAAY;CACjC,CAAC;AAEF,MAAM,GAAG,GAAG,EAAE,CAAC,CAAC,yDAAyD;AAEzE,SAAS,gBAAgB;IACvB,OAAO,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC;AAClE,CAAC;AACD,SAAS,kBAAkB;IACzB,OAAO,GAAG,CACR,EAAE,CAAC,YAAY,CAAC,MAAM,EAAE,WAAW,CAAC,EACpC,EAAE,CAAC,YAAY,CAAC,UAAU,EAAE,QAAQ,CAAC,EACrC,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,CAC/B,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,UAAU,CACvB,EAAM,EACN,IAA2D;IAE3D,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO;IAC9B,MAAM,EAAE;SACL,MAAM,CAAC,YAAY,CAAC;SACpB,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,SAAS,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;SAC3F,kBAAkB,CAAC;QAClB,MAAM,EAAE,CAAC,YAAY,CAAC,GAAG,EAAE,YAAY,CAAC,MAAM,EAAE,YAAY,CAAC,SAAS,CAAC;QACvE,GAAG,EAAE,EAAE,KAAK,EAAE,GAAG,CAAA,gBAAgB,EAAE;KACpC,CAAC,CAAC;AACP,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,EAAM,EAAE,KAAa;IACxD,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QACnC,EAAE;aACC,MAAM,CAAC;YACN,KAAK,EAAE,GAAG,CAAQ,eAAe;YACjC,QAAQ,EAAE,GAAG,CAAQ,0BAA0B,KAAK,CAAC,SAAS,YAAY,KAAK,QAAQ;SACxF,CAAC;aACD,IAAI,CAAC,KAAK,CAAC;aACX,KAAK,CAAC,gBAAgB,EAAE,CAAC;QAC5B,EAAE;aACC,MAAM,CAAC;YACN,KAAK,EAAE,GAAG,CAAQ,eAAe;YACjC,QAAQ,EAAE,GAAG,CAAQ,0BAA0B,YAAY,CAAC,WAAW,YAAY,KAAK,QAAQ;YAChG,KAAK,EAAE,GAAG,CAAQ,gBAAgB,YAAY,CAAC,SAAS,eAAe;YACvE,KAAK,EAAE,GAAG,CAAQ,gBAAgB,YAAY,CAAC,SAAS,eAAe;YACvE,QAAQ,EAAE,GAAG,CAAQ,gBAAgB,YAAY,CAAC,YAAY,eAAe;SAC9E,CAAC;aACD,IAAI,CAAC,YAAY,CAAC;aAClB,KAAK,CAAC,kBAAkB,EAAE,CAAC;KAC/B,CAAC,CAAC;IAEH,MAAM,UAAU,CAAC,EAAE,EAAE;QACnB,EAAE,GAAG,EAAE,KAAK,EAAE,MAAM,EAAE,aAAa,EAAE,KAAK,EAAE,CAAC,EAAE,KAAK,IAAI,CAAC,EAAE;QAC3D,EAAE,GAAG,EAAE,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC,EAAE,QAAQ,IAAI,CAAC,EAAE;QAC5D,EAAE,GAAG,EAAE,KAAK,EAAE,MAAM,EAAE,eAAe,EAAE,KAAK,EAAE,CAAC,EAAE,KAAK,IAAI,CAAC,EAAE;QAC7D,EAAE,GAAG,EAAE,KAAK,EAAE,MAAM,EAAE,aAAa,EAAE,KAAK,EAAE,CAAC,EAAE,QAAQ,IAAI,CAAC,EAAE;QAC9D,EAAE,GAAG,EAAE,KAAK,EAAE,MAAM,EAAE,eAAe,EAAE,KAAK,EAAE,CAAC,EAAE,KAAK,IAAI,CAAC,EAAE;QAC7D,EAAE,GAAG,EAAE,KAAK,EAAE,MAAM,EAAE,eAAe,EAAE,KAAK,EAAE,CAAC,EAAE,KAAK,IAAI,CAAC,EAAE;QAC7D,EAAE,GAAG,EAAE,KAAK,EAAE,MAAM,EAAE,kBAAkB,EAAE,KAAK,EAAE,CAAC,EAAE,QAAQ,IAAI,CAAC,EAAE;KACpE,CAAC,CAAC;AACL,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,EAAM;IAC/C,MAAM,CAAC,QAAQ,EAAE,WAAW,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QAChD,EAAE;aACC,MAAM,CAAC;YACN,GAAG,EAAE,GAAG,CAAQ,WAAW,KAAK,CAAC,SAAS,uBAAuB;YACjE,IAAI,EAAE,GAAG,CAAQ,eAAe;YAChC,UAAU,EAAE,GAAG,CAAQ,gCAAgC,KAAK,CAAC,SAAS,cAAc;SACrF,CAAC;aACD,IAAI,CAAC,KAAK,CAAC;aACX,KAAK,CAAC,gBAAgB,EAAE,CAAC;aACzB,OAAO,CAAC,GAAG,CAAA,GAAG,KAAK,CAAC,SAAS,QAAQ,CAAC;aACtC,OAAO,CAAC,GAAG,CAAA,GAAG,KAAK,CAAC,SAAS,QAAQ,CAAC;QACzC,EAAE;aACC,MAAM,CAAC;YACN,GAAG,EAAE,GAAG,CAAQ,WAAW,YAAY,CAAC,WAAW,uBAAuB;YAC1E,IAAI,EAAE,GAAG,CAAQ,eAAe;YAChC,UAAU,EAAE,GAAG,CAAQ,gCAAgC,YAAY,CAAC,WAAW,cAAc;SAC9F,CAAC;aACD,IAAI,CAAC,YAAY,CAAC;aAClB,KAAK,CAAC,GAAG,CAAC,kBAAkB,EAAE,EAAE,GAAG,CAAA,GAAG,YAAY,CAAC,WAAW,cAAc,CAAC,CAAC;aAC9E,OAAO,CAAC,GAAG,CAAA,GAAG,YAAY,CAAC,WAAW,QAAQ,CAAC;aAC/C,OAAO,CAAC,GAAG,CAAA,GAAG,YAAY,CAAC,WAAW,QAAQ,CAAC;KACnD,CAAC,CAAC;IAEH,MAAM,IAAI,GAA0D,EAAE,CAAC;IACvE,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;QACzB,IAAI,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,MAAM,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;QAC9D,IAAI,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,MAAM,EAAE,aAAa,EAAE,KAAK,EAAE,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC;IACxE,CAAC;IACD,KAAK,MAAM,CAAC,IAAI,WAAW,EAAE,CAAC;QAC5B,IAAI,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,MAAM,EAAE,aAAa,EAAE,KAAK,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;QAChE,IAAI,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,MAAM,EAAE,eAAe,EAAE,KAAK,EAAE,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC;IAC1E,CAAC;IACD,MAAM,UAAU,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;IAC3B,OAAO,IAAI,CAAC,MAAM,CAAC;AACrB,CAAC;AAsBD,0EAA0E;AAC1E,SAAS,SAAS,CAAC,GAAW,EAAE,QAA4B;IAC1D,IAAI,QAAQ,KAAK,KAAK;QAAE,OAAO,GAAG,CAAC;IACnC,IAAI,QAAQ,KAAK,OAAO;QAAE,OAAO,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC;IACzD,sCAAsC;IACtC,MAAM,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,GAAG,YAAY,CAAC,CAAC;IACvC,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,aAAa;IAClD,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,UAAU,EAAE,GAAG,GAAG,CAAC,CAAC;IACnC,OAAO,CAAC,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;AACtC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,EAAM,EACN,IAAgF;IAEhF,MAAM,IAAI,GAAG,kBAAkB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAC7C,IAAI,CAAC,IAAI;QAAE,MAAM,IAAI,KAAK,CAAC,mBAAmB,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;IAE7D,MAAM,IAAI,GAAG,MAAM,EAAE;SAClB,MAAM,CAAC,EAAE,GAAG,EAAE,YAAY,CAAC,GAAG,EAAE,KAAK,EAAE,YAAY,CAAC,KAAK,EAAE,CAAC;SAC5D,IAAI,CAAC,YAAY,CAAC;SAClB,KAAK,CACJ,GAAG,CACD,EAAE,CAAC,YAAY,CAAC,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,EACpC,EAAE,CAAC,YAAY,CAAC,SAAS,EAAE,GAAG,CAAC,EAC/B,GAAG,CAAC,YAAY,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,CAAC,EAChC,GAAG,CAAC,YAAY,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,CAAC,CAC/B,CACF;SACA,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC;IAElC,4EAA4E;IAC5E,4EAA4E;IAC5E,MAAM,OAAO,GAAG,IAAI,GAAG,EAAkB,CAAC;IAC1C,KAAK,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;QACrB,MAAM,GAAG,GAAG,SAAS,CAAC,CAAC,CAAC,GAAG,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC5C,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAC9B,IAAI,IAAI,KAAK,MAAM;YAAE,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC;;YACxD,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,qDAAqD;IACvF,CAAC;IAED,MAAM,OAAO,GAAG,CAAC,GAAG,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACxF,MAAM,MAAM,GAAsB,EAAE,CAAC;IACrC,IAAI,SAAS,GAAkB,IAAI,CAAC;IACpC,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,OAAO,EAAE,CAAC;QACpC,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,SAAS,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,GAAG,SAAS,EAAE,CAAC,CAAC;QAChF,SAAS,GAAG,KAAK,CAAC;IACpB,CAAC;IAED,OAAO;QACL,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,IAAI;QACJ,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,EAAE,EAAE,IAAI,CAAC,EAAE;QACX,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,GAAG,IAAI,IAAI;QAC3B,MAAM;KACP,CAAC;AACJ,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@commonpub/server",
-  "version": "2.80.0",
+  "version": "2.82.0",
   "type": "module",
   "description": "Framework-agnostic business logic for CommonPub instances",
   "license": "AGPL-3.0-or-later",
@@ -114,14 +114,14 @@
     "linkedom": "^0.18.12",
     "megalodon": "^10.3.0",
     "turndown": "^7.2.4",
-    "@commonpub/docs": "0.6.3",
-    "@commonpub/schema": "0.33.0",
-    "@commonpub/protocol": "0.13.0",
-    "@commonpub/editor": "0.7.11",
     "@commonpub/auth": "0.8.0",
-    "@commonpub/config": "0.18.0",
+    "@commonpub/config": "0.19.0",
+    "@commonpub/learning": "0.5.2",
+    "@commonpub/protocol": "0.13.0",
+    "@commonpub/schema": "0.35.0",
     "@commonpub/infra": "0.8.0",
-    "@commonpub/learning": "0.5.2"
+    "@commonpub/docs": "0.6.3",
+    "@commonpub/editor": "0.7.11"
   },
   "peerDependencies": {
     "drizzle-orm": "^0.45.1"