@growth-labs/cms 0.1.0

package/dist/routes/config.d.ts

@@ -0,0 +1,70 @@
+import type { OgImageRenderer } from '../engine/og-render.js';
+import type { CmsProviders, FoundryDispatch, LlmDispatch } from '../providers/types.js';
+import type { Authz } from './context.js';
+/**
+ * Taxonomy + theme tokens + binding names + authz the site supplies. All fields
+ * are optional except `authz`: omitting a field uses the verbatim Fronts
+ * default (inventory §7), so the routes are drop-in for Fronts and
+ * parameterized for everyone else.
+ */
+export interface CmsRouteConfig {
+    /** Injected auth/authz — the only required field. */
+    authz: Authz;
+    /**
+     * Allowed `primaryCategory` slugs (stored in `content_items.channel`).
+     * Used to validate the create/update payload. Default: any non-empty string
+     * (Fronts pins this to its `PRIMARY_CATEGORY_SLUGS`; a generic site that
+     * does not want an enum leaves it undefined). The default `'analysis'` is
+     * applied by the engine when the field is omitted on create.
+     */
+    primaryCategorySlugs?: readonly [string, ...string[]];
+    /** Default primary category for create (Fronts: 'analysis'). */
+    defaultPrimaryCategory?: string;
+    /**
+     * Allowed `primaryTopic` slugs. Default: any non-empty string (Fronts pins
+     * this to `PRIMARY_LABEL_SLUGS`).
+     */
+    primaryTopicSlugs?: readonly [string, ...string[]];
+    /** Default primary topic for create (Fronts: 'global'). */
+    defaultPrimaryTopic?: string;
+    /** R2 binding name recorded on media rows. Fronts default: 'PUBLIC_MEDIA'. */
+    mediaR2Binding?: string;
+    /** `media_assets.site_id` value. Fronts default: 'fronts'. */
+    mediaSiteId?: string;
+    /** Public media host for `publicUrlFor`. Fronts default: 'media.fronts.co'. */
+    mediaPublicDomain?: string;
+    /** Image variant names returned on upload. Fronts default below. */
+    imageVariants?: readonly string[];
+    /** Default scheduling/publish timezone. Fronts default: 'Europe/Paris'. */
+    publishTimezone?: string;
+    /** Render-but-inject providers (spec §3.3). Defaults to nullProviders. */
+    providers?: Partial<CmsProviders>;
+    /** Injected dispatch hooks (LLM, Foundry video, OG renderer, webhooks). All optional. */
+    hooks?: {
+        llm?: LlmDispatch;
+        foundryVideo?: FoundryDispatch;
+        /** OG-image renderer (P4 Task 5). The mechanism (Browser Rendering / Resvg-WASM) is
+         * supplied by the site at cutover (P8). Absent → generateOgImage returns 501. */
+        ogRenderer?: OgImageRenderer;
+    };
+}
+export interface ResolvedCmsRouteConfig {
+    authz: Authz;
+    primaryCategorySlugs: readonly string[] | null;
+    defaultPrimaryCategory: string;
+    primaryTopicSlugs: readonly string[] | null;
+    defaultPrimaryTopic: string;
+    mediaR2Binding: string;
+    mediaSiteId: string;
+    mediaPublicDomain: string;
+    imageVariants: readonly string[];
+    publishTimezone: string;
+    providers: CmsProviders;
+    hooks: {
+        llm?: LlmDispatch;
+        foundryVideo?: FoundryDispatch;
+        ogRenderer?: OgImageRenderer;
+    };
+}
+export declare function resolveConfig(config: CmsRouteConfig): ResolvedCmsRouteConfig;
+//# sourceMappingURL=config.d.ts.map

package/dist/routes/config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../../src/routes/config.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAA;AAE7D,OAAO,KAAK,EAAE,YAAY,EAAE,eAAe,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAA;AACvF,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,cAAc,CAAA;AAEzC;;;;;GAKG;AACH,MAAM,WAAW,cAAc;IAC9B,qDAAqD;IACrD,KAAK,EAAE,KAAK,CAAA;IAEZ;;;;;;OAMG;IACH,oBAAoB,CAAC,EAAE,SAAS,CAAC,MAAM,EAAE,GAAG,MAAM,EAAE,CAAC,CAAA;IACrD,gEAAgE;IAChE,sBAAsB,CAAC,EAAE,MAAM,CAAA;IAC/B;;;OAGG;IACH,iBAAiB,CAAC,EAAE,SAAS,CAAC,MAAM,EAAE,GAAG,MAAM,EAAE,CAAC,CAAA;IAClD,2DAA2D;IAC3D,mBAAmB,CAAC,EAAE,MAAM,CAAA;IAE5B,8EAA8E;IAC9E,cAAc,CAAC,EAAE,MAAM,CAAA;IACvB,8DAA8D;IAC9D,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,+EAA+E;IAC/E,iBAAiB,CAAC,EAAE,MAAM,CAAA;IAC1B,oEAAoE;IACpE,aAAa,CAAC,EAAE,SAAS,MAAM,EAAE,CAAA;IAEjC,2EAA2E;IAC3E,eAAe,CAAC,EAAE,MAAM,CAAA;IAExB,0EAA0E;IAC1E,SAAS,CAAC,EAAE,OAAO,CAAC,YAAY,CAAC,CAAA;IACjC,yFAAyF;IACzF,KAAK,CAAC,EAAE;QACP,GAAG,CAAC,EAAE,WAAW,CAAA;QACjB,YAAY,CAAC,EAAE,eAAe,CAAA;QAC9B;yFACiF;QACjF,UAAU,CAAC,EAAE,eAAe,CAAA;KAC5B,CAAA;CACD;AAED,MAAM,WAAW,sBAAsB;IACtC,KAAK,EAAE,KAAK,CAAA;IACZ,oBAAoB,EAAE,SAAS,MAAM,EAAE,GAAG,IAAI,CAAA;IAC9C,sBAAsB,EAAE,MAAM,CAAA;IAC9B,iBAAiB,EAAE,SAAS,MAAM,EAAE,GAAG,IAAI,CAAA;IAC3C,mBAAmB,EAAE,MAAM,CAAA;IAC3B,cAAc,EAAE,MAAM,CAAA;IACtB,WAAW,EAAE,MAAM,CAAA;IACnB,iBAAiB,EAAE,MAAM,CAAA;IACzB,aAAa,EAAE,SAAS,MAAM,EAAE,CAAA;IAChC,eAAe,EAAE,MAAM,CAAA;IACvB,SAAS,EAAE,YAAY,CAAA;IACvB,KAAK,EAAE;QACN,GAAG,CAAC,EAAE,WAAW,CAAA;QACjB,YAAY,CAAC,EAAE,eAAe,CAAA;QAC9B,UAAU,CAAC,EAAE,eAAe,CAAA;KAC5B,CAAA;CACD;AAID,wBAAgB,aAAa,CAAC,MAAM,EAAE,cAAc,GAAG,sBAAsB,CAe5E"}

package/dist/routes/config.js

@@ -0,0 +1,23 @@
+// Site configuration for the CMS route handlers (WS7-07). Every Fronts
+// theme-token (inventory §7) that was previously a module-level constant
+// becomes a value the site supplies here, with the documented Fronts default
+// preserved so an unconfigured site behaves exactly as Fronts did.
+import { nullProviders } from '../providers/null.js';
+const FRONTS_DEFAULT_IMAGE_VARIANTS = ['thumbnail', 'card', 'article', 'hero', 'full'];
+export function resolveConfig(config) {
+    return {
+        authz: config.authz,
+        primaryCategorySlugs: config.primaryCategorySlugs ?? null,
+        defaultPrimaryCategory: config.defaultPrimaryCategory ?? 'analysis',
+        primaryTopicSlugs: config.primaryTopicSlugs ?? null,
+        defaultPrimaryTopic: config.defaultPrimaryTopic ?? 'global',
+        mediaR2Binding: config.mediaR2Binding ?? 'PUBLIC_MEDIA',
+        mediaSiteId: config.mediaSiteId ?? 'fronts',
+        mediaPublicDomain: config.mediaPublicDomain ?? 'media.fronts.co',
+        imageVariants: config.imageVariants ?? FRONTS_DEFAULT_IMAGE_VARIANTS,
+        publishTimezone: config.publishTimezone ?? 'Europe/Paris',
+        providers: { ...nullProviders, ...(config.providers ?? {}) },
+        hooks: config.hooks ?? {},
+    };
+}
+//# sourceMappingURL=config.js.map

package/dist/routes/config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../../src/routes/config.ts"],"names":[],"mappings":"AAAA,uEAAuE;AACvE,yEAAyE;AACzE,6EAA6E;AAC7E,mEAAmE;AAGnE,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAA;AA2EpD,MAAM,6BAA6B,GAAG,CAAC,WAAW,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,CAAU,CAAA;AAE/F,MAAM,UAAU,aAAa,CAAC,MAAsB;IACnD,OAAO;QACN,KAAK,EAAE,MAAM,CAAC,KAAK;QACnB,oBAAoB,EAAE,MAAM,CAAC,oBAAoB,IAAI,IAAI;QACzD,sBAAsB,EAAE,MAAM,CAAC,sBAAsB,IAAI,UAAU;QACnE,iBAAiB,EAAE,MAAM,CAAC,iBAAiB,IAAI,IAAI;QACnD,mBAAmB,EAAE,MAAM,CAAC,mBAAmB,IAAI,QAAQ;QAC3D,cAAc,EAAE,MAAM,CAAC,cAAc,IAAI,cAAc;QACvD,WAAW,EAAE,MAAM,CAAC,WAAW,IAAI,QAAQ;QAC3C,iBAAiB,EAAE,MAAM,CAAC,iBAAiB,IAAI,iBAAiB;QAChE,aAAa,EAAE,MAAM,CAAC,aAAa,IAAI,6BAA6B;QACpE,eAAe,EAAE,MAAM,CAAC,eAAe,IAAI,cAAc;QACzD,SAAS,EAAE,EAAE,GAAG,aAAa,EAAE,GAAG,CAAC,MAAM,CAAC,SAAS,IAAI,EAAE,CAAC,EAAE;QAC5D,KAAK,EAAE,MAAM,CAAC,KAAK,IAAI,EAAE;KACzB,CAAA;AACF,CAAC"}

package/dist/routes/content-insights.d.ts

@@ -0,0 +1,18 @@
+import type { CmsRouteConfig } from './config.js';
+import { type RouteContext } from './context.js';
+export interface ContentInsightsRouteConfig extends CmsRouteConfig {
+    /** The site/workspace id whose board this surface reads. Defaults to 'default'. */
+    activeWorkspaceId?: string;
+}
+export interface ContentInsightsRouteHandlers {
+    /** GET /content/insights?runDate= — the current board, dismissed intents filtered out. */
+    board(ctx: RouteContext): Promise<Response>;
+    /** POST /content/insights/dismiss { intentKey } — persist a dismissal. */
+    dismiss(ctx: RouteContext): Promise<Response>;
+    /** POST /content/insights/undismiss { intentKey } — clear a dismissal. */
+    undismiss(ctx: RouteContext): Promise<Response>;
+    /** POST /content/insights-ingest — HMAC machine ingest (replay-safe replace). */
+    ingest(ctx: RouteContext): Promise<Response>;
+}
+export declare function createContentInsightsRoutes(config: ContentInsightsRouteConfig): ContentInsightsRouteHandlers;
+//# sourceMappingURL=content-insights.d.ts.map

package/dist/routes/content-insights.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"content-insights.d.ts","sourceRoot":"","sources":["../../src/routes/content-insights.ts"],"names":[],"mappings":"AAUA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,aAAa,CAAA;AAEjD,OAAO,EAAQ,KAAK,YAAY,EAAE,MAAM,cAAc,CAAA;AAuCtD,MAAM,WAAW,0BAA2B,SAAQ,cAAc;IACjE,mFAAmF;IACnF,iBAAiB,CAAC,EAAE,MAAM,CAAA;CAC1B;AAED,MAAM,WAAW,4BAA4B;IAC5C,0FAA0F;IAC1F,KAAK,CAAC,GAAG,EAAE,YAAY,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAA;IAC3C,0EAA0E;IAC1E,OAAO,CAAC,GAAG,EAAE,YAAY,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAA;IAC7C,0EAA0E;IAC1E,SAAS,CAAC,GAAG,EAAE,YAAY,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAA;IAC/C,iFAAiF;IACjF,MAAM,CAAC,GAAG,EAAE,YAAY,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAA;CAC5C;AAED,wBAAgB,2BAA2B,CAC1C,MAAM,EAAE,0BAA0B,GAChC,4BAA4B,CAyF9B"}

package/dist/routes/content-insights.js

@@ -0,0 +1,137 @@
+import { z } from 'zod';
+import { dismissInsight, isMissingInsightsTable, listInsightBoard, replaceInsightsBoard, undismissInsight, } from '../engine/content-insights.js';
+import { verifyHmac } from '../engine/foundry-dispatch.js';
+import { InsightsIngestPayloadSchema } from '../schema/insights-ingest.js';
+import { resolveConfig } from './config.js';
+import { json } from './context.js';
+const DismissSchema = z.object({ intentKey: z.string().min(1) });
+/** Resolve YYYY-MM-DD; defaults to the current UTC date when no ?runDate is given. */
+function resolveRunDate(ctx) {
+    const url = new URL(ctx.request.url);
+    const q = url.searchParams.get('runDate');
+    if (q && /^\d{4}-\d{2}-\d{2}$/.test(q))
+        return q;
+    return new Date().toISOString().slice(0, 10);
+}
+/**
+ * Resolve the HMAC secret from ctx.env.INSIGHTS_INGEST_HMAC_SECRET.
+ * Supports both:
+ *   - plain string (test injection: env: { INSIGHTS_INGEST_HMAC_SECRET: 'test-...' })
+ *   - Secrets Store binding object { get(): Promise<string> } (production Workers binding)
+ * Returns null → 500 "not configured".
+ */
+async function resolveIngestSecret(env) {
+    const raw = env?.INSIGHTS_INGEST_HMAC_SECRET;
+    if (typeof raw === 'string')
+        return raw;
+    if (raw !== null &&
+        typeof raw === 'object' &&
+        typeof raw.get === 'function') {
+        try {
+            const val = await raw.get();
+            if (typeof val === 'string' && val.length > 0)
+                return val;
+        }
+        catch {
+            return null;
+        }
+    }
+    return null;
+}
+export function createContentInsightsRoutes(config) {
+    const resolved = resolveConfig(config);
+    const siteId = config.activeWorkspaceId ?? 'default';
+    return {
+        async board(ctx) {
+            const denied = await resolved.authz.requirePublisher(ctx);
+            if (denied)
+                return denied;
+            const runDate = resolveRunDate(ctx);
+            try {
+                const insights = await listInsightBoard(ctx.db, siteId, runDate);
+                return json({ insights, runDate, siteId });
+            }
+            catch (error) {
+                if (isMissingInsightsTable(error))
+                    return json({ error: 'schema_not_ready' }, 409);
+                throw error;
+            }
+        },
+        async dismiss(ctx) {
+            const denied = await resolved.authz.requirePublisher(ctx);
+            if (denied)
+                return denied;
+            const parsed = DismissSchema.safeParse(await ctx.request.json().catch(() => null));
+            if (!parsed.success)
+                return json({ error: 'Invalid request', details: parsed.error.flatten() }, 400);
+            try {
+                await dismissInsight(ctx.db, siteId, parsed.data.intentKey, ctx.userId ?? null);
+                return json({ dismissed: true });
+            }
+            catch (error) {
+                if (isMissingInsightsTable(error))
+                    return json({ error: 'schema_not_ready' }, 409);
+                throw error;
+            }
+        },
+        async undismiss(ctx) {
+            const denied = await resolved.authz.requirePublisher(ctx);
+            if (denied)
+                return denied;
+            const parsed = DismissSchema.safeParse(await ctx.request.json().catch(() => null));
+            if (!parsed.success)
+                return json({ error: 'Invalid request', details: parsed.error.flatten() }, 400);
+            try {
+                await undismissInsight(ctx.db, siteId, parsed.data.intentKey);
+                return json({ undismissed: true });
+            }
+            catch (error) {
+                if (isMissingInsightsTable(error))
+                    return json({ error: 'schema_not_ready' }, 409);
+                throw error;
+            }
+        },
+        // HMAC-guarded machine ingest — NOT behind requirePublisher (sibling of foundryCallback).
+        async ingest(ctx) {
+            const hmacSecret = await resolveIngestSecret(ctx.env);
+            if (!hmacSecret)
+                return json({ error: 'INSIGHTS_INGEST_HMAC_SECRET is not configured' }, 500);
+            let rawBody;
+            try {
+                rawBody = await ctx.request.text();
+            }
+            catch {
+                return json({ error: 'Failed to read request body' }, 400);
+            }
+            const signature = ctx.request.headers.get('X-Foundry-Signature') ?? '';
+            const valid = await verifyHmac(hmacSecret, rawBody, signature);
+            if (!valid)
+                return json({ error: 'Invalid signature' }, 401);
+            let raw;
+            try {
+                raw = JSON.parse(rawBody);
+            }
+            catch {
+                return json({ error: 'Invalid JSON body' }, 400);
+            }
+            const parsed = InsightsIngestPayloadSchema.safeParse(raw);
+            if (!parsed.success) {
+                return json({ error: 'Invalid payload', details: parsed.error.flatten() }, 400);
+            }
+            try {
+                const result = await replaceInsightsBoard(ctx.db, parsed.data);
+                return json({
+                    ok: true,
+                    outcome: result.outcome,
+                    landedRunAttempt: result.landedRunAttempt,
+                });
+            }
+            catch (error) {
+                if (isMissingInsightsTable(error))
+                    return json({ error: 'schema_not_ready' }, 409);
+                throw error;
+            }
+        },
+    };
+}
+//# sourceMappingURL=content-insights.js.map

package/dist/routes/content-insights.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"content-insights.js","sourceRoot":"","sources":["../../src/routes/content-insights.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AACvB,OAAO,EACN,cAAc,EACd,sBAAsB,EACtB,gBAAgB,EAChB,oBAAoB,EACpB,gBAAgB,GAChB,MAAM,+BAA+B,CAAA;AACtC,OAAO,EAAE,UAAU,EAAE,MAAM,+BAA+B,CAAA;AAC1D,OAAO,EAAE,2BAA2B,EAAE,MAAM,8BAA8B,CAAA;AAE1E,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAA;AAC3C,OAAO,EAAE,IAAI,EAAqB,MAAM,cAAc,CAAA;AAEtD,MAAM,aAAa,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAA;AAEhE,sFAAsF;AACtF,SAAS,cAAc,CAAC,GAAiB;IACxC,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAA;IACpC,MAAM,CAAC,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,SAAS,CAAC,CAAA;IACzC,IAAI,CAAC,IAAI,qBAAqB,CAAC,IAAI,CAAC,CAAC,CAAC;QAAE,OAAO,CAAC,CAAA;IAChD,OAAO,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAA;AAC7C,CAAC;AAED;;;;;;GAMG;AACH,KAAK,UAAU,mBAAmB,CACjC,GAAwC;IAExC,MAAM,GAAG,GAAG,GAAG,EAAE,2BAA2B,CAAA;IAC5C,IAAI,OAAO,GAAG,KAAK,QAAQ;QAAE,OAAO,GAAG,CAAA;IACvC,IACC,GAAG,KAAK,IAAI;QACZ,OAAO,GAAG,KAAK,QAAQ;QACvB,OAAQ,GAAyB,CAAC,GAAG,KAAK,UAAU,EACnD,CAAC;QACF,IAAI,CAAC;YACJ,MAAM,GAAG,GAAG,MAAO,GAAkC,CAAC,GAAG,EAAE,CAAA;YAC3D,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC;gBAAE,OAAO,GAAG,CAAA;QAC1D,CAAC;QAAC,MAAM,CAAC;YACR,OAAO,IAAI,CAAA;QACZ,CAAC;IACF,CAAC;IACD,OAAO,IAAI,CAAA;AACZ,CAAC;AAkBD,MAAM,UAAU,2BAA2B,CAC1C,MAAkC;IAElC,MAAM,QAAQ,GAAG,aAAa,CAAC,MAAM,CAAC,CAAA;IACtC,MAAM,MAAM,GAAG,MAAM,CAAC,iBAAiB,IAAI,SAAS,CAAA;IAEpD,OAAO;QACN,KAAK,CAAC,KAAK,CAAC,GAAG;YACd,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,KAAK,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAA;YACzD,IAAI,MAAM;gBAAE,OAAO,MAAM,CAAA;YACzB,MAAM,OAAO,GAAG,cAAc,CAAC,GAAG,CAAC,CAAA;YACnC,IAAI,CAAC;gBACJ,MAAM,QAAQ,GAAG,MAAM,gBAAgB,CAAC,GAAG,CAAC,EAAE,EAAE,MAAM,EAAE,OAAO,CAAC,CAAA;gBAChE,OAAO,IAAI,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAA;YAC3C,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBAChB,IAAI,sBAAsB,CAAC,KAAK,CAAC;oBAAE,OAAO,IAAI,CAAC,EAAE,KAAK,EAAE,kBAAkB,EAAE,EAAE,GAAG,CAAC,CAAA;gBAClF,MAAM,KAAK,CAAA;YACZ,CAAC;QACF,CAAC;QAED,KAAK,CAAC,OAAO,CAAC,GAAG;YAChB,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,KAAK,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAA;YACzD,IAAI,MAAM;gBAAE,OAAO,MAAM,CAAA;YACzB,MAAM,MAAM,GAAG,aAAa,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC,CAAA;YAClF,IAAI,CAAC,MAAM,CAAC,OAAO;gBAClB,OAAO,IAAI,CAAC,EAAE,KAAK,EAAE,iBAAiB,EAAE,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,EAAE,EAAE,GAAG,CAAC,CAAA;YAChF,IAAI,CAAC;gBACJ,MAAM,cAAc,CAAC,GAAG,CAAC,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,GAAG,CAAC,MAAM,IAAI,IAAI,CAAC,CAAA;gBAC/E,OAAO,IAAI,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;YACjC,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBAChB,IAAI,sBAAsB,CAAC,KAAK,CAAC;oBAAE,OAAO,IAAI,CAAC,EAAE,KAAK,EAAE,kBAAkB,EAAE,EAAE,GAAG,CAAC,CAAA;gBAClF,MAAM,KAAK,CAAA;YACZ,CAAC;QACF,CAAC;QAED,KAAK,CAAC,SAAS,CAAC,GAAG;YAClB,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,KAAK,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAA;YACzD,IAAI,MAAM;gBAAE,OAAO,MAAM,CAAA;YACzB,MAAM,MAAM,GAAG,aAAa,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC,CAAA;YAClF,IAAI,CAAC,MAAM,CAAC,OAAO;gBAClB,OAAO,IAAI,CAAC,EAAE,KAAK,EAAE,iBAAiB,EAAE,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,EAAE,EAAE,GAAG,CAAC,CAAA;YAChF,IAAI,CAAC;gBACJ,MAAM,gBAAgB,CAAC,GAAG,CAAC,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;gBAC7D,OAAO,IAAI,CAAC,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAAA;YACnC,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBAChB,IAAI,sBAAsB,CAAC,KAAK,CAAC;oBAAE,OAAO,IAAI,CAAC,EAAE,KAAK,EAAE,kBAAkB,EAAE,EAAE,GAAG,CAAC,CAAA;gBAClF,MAAM,KAAK,CAAA;YACZ,CAAC;QACF,CAAC;QAED,0FAA0F;QAC1F,KAAK,CAAC,MAAM,CAAC,GAAG;YACf,MAAM,UAAU,GAAG,MAAM,mBAAmB,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;YACrD,IAAI,CAAC,UAAU;gBAAE,OAAO,IAAI,CAAC,EAAE,KAAK,EAAE,+CAA+C,EAAE,EAAE,GAAG,CAAC,CAAA;YAE7F,IAAI,OAAe,CAAA;YACnB,IAAI,CAAC;gBACJ,OAAO,GAAG,MAAM,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,CAAA;YACnC,CAAC;YAAC,MAAM,CAAC;gBACR,OAAO,IAAI,CAAC,EAAE,KAAK,EAAE,6BAA6B,EAAE,EAAE,GAAG,CAAC,CAAA;YAC3D,CAAC;YAED,MAAM,SAAS,GAAG,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAC,IAAI,EAAE,CAAA;YACtE,MAAM,KAAK,GAAG,MAAM,UAAU,CAAC,UAAU,EAAE,OAAO,EAAE,SAAS,CAAC,CAAA;YAC9D,IAAI,CAAC,KAAK;gBAAE,OAAO,IAAI,CAAC,EAAE,KAAK,EAAE,mBAAmB,EAAE,EAAE,GAAG,CAAC,CAAA;YAE5D,IAAI,GAAY,CAAA;YAChB,IAAI,CAAC;gBACJ,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAA;YAC1B,CAAC;YAAC,MAAM,CAAC;gBACR,OAAO,IAAI,CAAC,EAAE,KAAK,EAAE,mBAAmB,EAAE,EAAE,GAAG,CAAC,CAAA;YACjD,CAAC;YAED,MAAM,MAAM,GAAG,2BAA2B,CAAC,SAAS,CAAC,GAAG,CAAC,CAAA;YACzD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;gBACrB,OAAO,IAAI,CAAC,EAAE,KAAK,EAAE,iBAAiB,EAAE,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,EAAE,EAAE,GAAG,CAAC,CAAA;YAChF,CAAC;YAED,IAAI,CAAC;gBACJ,MAAM,MAAM,GAAG,MAAM,oBAAoB,CAAC,GAAG,CAAC,EAAE,EAAE,MAAM,CAAC,IAAI,CAAC,CAAA;gBAC9D,OAAO,IAAI,CAAC;oBACX,EAAE,EAAE,IAAI;oBACR,OAAO,EAAE,MAAM,CAAC,OAAO;oBACvB,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;iBACzC,CAAC,CAAA;YACH,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBAChB,IAAI,sBAAsB,CAAC,KAAK,CAAC;oBAAE,OAAO,IAAI,CAAC,EAAE,KAAK,EAAE,kBAAkB,EAAE,EAAE,GAAG,CAAC,CAAA;gBAClF,MAAM,KAAK,CAAA;YACZ,CAAC;QACF,CAAC;KACD,CAAA;AACF,CAAC"}

package/dist/routes/content.d.ts

@@ -0,0 +1,145 @@
+import type { CmsRouteConfig } from './config.js';
+import { type RouteContext } from './context.js';
+import type { DispatchWebhookHook } from './webhooks.js';
+export type { DispatchWebhookHook };
+/**
+ * Optional injected hook to dispatch article-takeaways generation to Foundry
+ * (Hermes). The package never imports the Foundry glue — the site supplies this
+ * (bead 08). `force` mirrors the Fronts dispatcher: skip when takeaways already
+ * exist unless forced.
+ */
+export type DispatchTakeawaysHook = (input: {
+    ctx: RouteContext;
+    contentId: string;
+    force: boolean;
+}) => Promise<{
+    queued: boolean;
+    correlationId?: string | null;
+    reason?: string;
+}>;
+/**
+ * Optional injected hook to dispatch article-FAQ generation (P4 Task 7).
+ * Same shape as `DispatchTakeawaysHook` — the site supplies the impl; the
+ * package defines the hook contract + calls it in the publish action.
+ */
+export type DispatchFaqHook = (input: {
+    ctx: RouteContext;
+    contentId: string;
+    force: boolean;
+}) => Promise<{
+    queued: boolean;
+    correlationId?: string | null;
+    reason?: string;
+}>;
+export interface PublishReadinessOutcome {
+    ready: boolean;
+    state?: string | null;
+    blockers?: string[];
+    message?: string;
+    etaLabel?: string;
+    checkedAt?: number;
+    status?: number;
+}
+/**
+ * Optional injected publish-readiness hook. Hosts use this to enforce
+ * site-specific prerequisites (for example video HLS/transcript/captions
+ * readiness) before the generic CMS lifecycle publishes an item.
+ */
+export type PublishReadinessHook = (input: {
+    ctx: RouteContext;
+    contentId: string;
+    type: ContentType;
+    status: string;
+}) => Promise<PublishReadinessOutcome>;
+export interface ContentRouteConfig extends CmsRouteConfig {
+    /** Optional Foundry takeaways dispatcher (bead 08). Omit to disable. */
+    dispatchTakeaways?: DispatchTakeawaysHook;
+    /** Optional FAQ enrichment dispatcher (P4 Task 7). Omit to disable. */
+    dispatchFaq?: DispatchFaqHook;
+    /** Optional host-specific readiness guard. A not-ready result blocks publish. */
+    publishReadiness?: PublishReadinessHook;
+    /**
+     * Optional webhook dispatcher hook (P7 Task 9). Fired at each content
+     * lifecycle transition (publish, unpublish, schedule, archive, create, etc.).
+     * A missing hook is silently skipped — the lifecycle action still succeeds
+     * (mirrors the dispatchTakeaways pattern). The hook reads the HMAC secret
+     * from ctx.env (Secrets Store binding) — never from D1.
+     */
+    dispatchWebhook?: DispatchWebhookHook;
+    /**
+     * Active workspace id — used to scope the activity log write on publish.
+     * Matches the ShellRouteConfig.activeWorkspaceId seam. Defaults to 'default'
+     * when absent so callers without a workspace concept still produce a scoped row.
+     */
+    activeWorkspaceId?: string;
+}
+type ContentType = 'article' | 'video' | 'podcast' | 'newsletter';
+export interface ContentRouteHandlers {
+    /** GET /content — cursor-paginated list (q, author, status, types filters; excludes deleted). */
+    list(ctx: RouteContext): Promise<Response>;
+    /** GET /content/counts — status-tab counts for the Library (excludes deleted; includes derived processing). */
+    counts(ctx: RouteContext): Promise<Response>;
+    /** POST /content/bulk — bulk ops: trash | topic | schedule. */
+    bulk(ctx: RouteContext): Promise<Response>;
+    /** POST /content — create. */
+    create(ctx: RouteContext): Promise<Response>;
+    /** GET /content/:id — read (item + content + tags + relations). */
+    get(ctx: RouteContext): Promise<Response>;
+    /** PATCH /content/:id — update (with pre-publish body lint on article bodies). */
+    update(ctx: RouteContext): Promise<Response>;
+    /**
+     * POST /content/:id?action=... — lifecycle actions: schedule | publish |
+     * regenerate-takeaways | unpublish | archive | unschedule | duplicate |
+     * set-status (draft|review only) | snapshot (autosave revision).
+     */
+    action(ctx: RouteContext): Promise<Response>;
+    /**
+     * POST /content/:id/seo-score — real-time draft SEO score (P3 SEO tab).
+     * Reads the live row + body, merges optional JSON body overrides
+     * ({ title?, seoTitle?, description?, focusKeyword?, bodyMarkdown? }),
+     * runs the injected SeoProvider and returns { score, checks }.
+     * Persists nothing (read-only scoring).
+     */
+    seoScore(ctx: RouteContext): Promise<Response>;
+    /**
+     * GET /content/:id/contributors — list co-authors ordered by position, joined
+     * to author name + avatar. Returns { contributors: [...] }.
+     */
+    contributorsList(ctx: RouteContext): Promise<Response>;
+    /**
+     * PUT /content/:id/contributors — fully replace the contributor list.
+     * Body: { contributors: [{ authorId, role?, position }] }.
+     * Returns { contributors: [...] } (the new list after replace).
+     */
+    contributorsReplace(ctx: RouteContext): Promise<Response>;
+    /**
+     * GET /content/:id/revisions — list all revisions newest-first.
+     * Returns { revisions: [{ id, createdAt, createdBy, wordsAdded, wordsRemoved, tag }] }.
+     * 404 when the content item does not exist.
+     */
+    revisionsList(ctx: RouteContext): Promise<Response>;
+    /**
+     * GET /content/:id/revisions/:rev — get a single revision's summary + full payload.
+     * Returns { summary, payload }. 404 when not found.
+     */
+    revisionGet(ctx: RouteContext): Promise<Response>;
+    /**
+     * POST /content/foundry-callback — machine-to-machine Foundry pipeline callback.
+     * Verifies the HMAC-SHA256 signature in `X-Foundry-Signature` against
+     * `ctx.env.FOUNDRY_HMAC_SECRET`, then advances the video_content processing
+     * state machine via `applyFoundryCallback`. Guarded by HMAC only (not
+     * `requirePublisher` — this is a machine callback, not a user action).
+     * Returns { ok: true } on success, { ok: false } on dedup/token mismatch,
+     * 401 on bad signature.
+     */
+    foundryCallback(ctx: RouteContext): Promise<Response>;
+    /**
+     * POST /content/:id/revisions/:rev/restore — restore the content to a revision snapshot.
+     * Returns { restored: true }. 404 when the revision is not found.
+     * IMPORTANT: restore rolls back content fields but NEVER changes publication state
+     * (status / published_at / published_revision_id).
+     */
+    revisionRestore(ctx: RouteContext): Promise<Response>;
+}
+export declare function createContentRoutes(config: ContentRouteConfig): ContentRouteHandlers;
+//# sourceMappingURL=content.d.ts.map

package/dist/routes/content.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"content.d.ts","sourceRoot":"","sources":["../../src/routes/content.ts"],"names":[],"mappings":"AAkDA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,aAAa,CAAA;AAEjD,OAAO,EAAQ,KAAK,YAAY,EAAa,MAAM,cAAc,CAAA;AACjE,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,eAAe,CAAA;AAExD,YAAY,EAAE,mBAAmB,EAAE,CAAA;AAEnC;;;;;GAKG;AACH,MAAM,MAAM,qBAAqB,GAAG,CAAC,KAAK,EAAE;IAC3C,GAAG,EAAE,YAAY,CAAA;IACjB,SAAS,EAAE,MAAM,CAAA;IACjB,KAAK,EAAE,OAAO,CAAA;CACd,KAAK,OAAO,CAAC;IAAE,MAAM,EAAE,OAAO,CAAC;IAAC,aAAa,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,CAAA;AAElF;;;;GAIG;AACH,MAAM,MAAM,eAAe,GAAG,CAAC,KAAK,EAAE;IACrC,GAAG,EAAE,YAAY,CAAA;IACjB,SAAS,EAAE,MAAM,CAAA;IACjB,KAAK,EAAE,OAAO,CAAA;CACd,KAAK,OAAO,CAAC;IAAE,MAAM,EAAE,OAAO,CAAC;IAAC,aAAa,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,CAAA;AAElF,MAAM,WAAW,uBAAuB;IACvC,KAAK,EAAE,OAAO,CAAA;IACd,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IACrB,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAA;IACnB,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,MAAM,CAAC,EAAE,MAAM,CAAA;CACf;AAED;;;;GAIG;AACH,MAAM,MAAM,oBAAoB,GAAG,CAAC,KAAK,EAAE;IAC1C,GAAG,EAAE,YAAY,CAAA;IACjB,SAAS,EAAE,MAAM,CAAA;IACjB,IAAI,EAAE,WAAW,CAAA;IACjB,MAAM,EAAE,MAAM,CAAA;CACd,KAAK,OAAO,CAAC,uBAAuB,CAAC,CAAA;AAEtC,MAAM,WAAW,kBAAmB,SAAQ,cAAc;IACzD,wEAAwE;IACxE,iBAAiB,CAAC,EAAE,qBAAqB,CAAA;IACzC,uEAAuE;IACvE,WAAW,CAAC,EAAE,eAAe,CAAA;IAC7B,iFAAiF;IACjF,gBAAgB,CAAC,EAAE,oBAAoB,CAAA;IACvC;;;;;;OAMG;IACH,eAAe,CAAC,EAAE,mBAAmB,CAAA;IACrC;;;;OAIG;IACH,iBAAiB,CAAC,EAAE,MAAM,CAAA;CAC1B;AAKD,KAAK,WAAW,GAAG,SAAS,GAAG,OAAO,GAAG,SAAS,GAAG,YAAY,CAAA;AA6cjE,MAAM,WAAW,oBAAoB;IACpC,iGAAiG;IACjG,IAAI,CAAC,GAAG,EAAE,YAAY,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAA;IAC1C,+GAA+G;IAC/G,MAAM,CAAC,GAAG,EAAE,YAAY,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAA;IAC5C,+DAA+D;IAC/D,IAAI,CAAC,GAAG,EAAE,YAAY,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAA;IAC1C,8BAA8B;IAC9B,MAAM,CAAC,GAAG,EAAE,YAAY,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAA;IAC5C,mEAAmE;IACnE,GAAG,CAAC,GAAG,EAAE,YAAY,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAA;IACzC,kFAAkF;IAClF,MAAM,CAAC,GAAG,EAAE,YAAY,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAA;IAC5C;;;;OAIG;IACH,MAAM,CAAC,GAAG,EAAE,YAAY,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAA;IAC5C;;;;;;OAMG;IACH,QAAQ,CAAC,GAAG,EAAE,YAAY,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAA;IAC9C;;;OAGG;IACH,gBAAgB,CAAC,GAAG,EAAE,YAAY,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAA;IACtD;;;;OAIG;IACH,mBAAmB,CAAC,GAAG,EAAE,YAAY,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAA;IACzD;;;;OAIG;IACH,aAAa,CAAC,GAAG,EAAE,YAAY,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAA;IACnD;;;OAGG;IACH,WAAW,CAAC,GAAG,EAAE,YAAY,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAA;IACjD;;;;;;;;OAQG;IACH,eAAe,CAAC,GAAG,EAAE,YAAY,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAA;IACrD;;;;;OAKG;IACH,eAAe,CAAC,GAAG,EAAE,YAAY,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAA;CACrD;AAED,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,kBAAkB,GAAG,oBAAoB,CAukCpF"}