@growth-labs/cms 0.1.0

package/dist/routes/shell.d.ts

@@ -0,0 +1,22 @@
+import type { CmsProviders } from '../providers/types.js';
+import type { Authz, RouteContext } from './context.js';
+export interface ShellWorkspaceDescriptor {
+    id: string;
+    name: string;
+    meta: string;
+    color: string;
+}
+export interface ShellRouteConfig {
+    authz: Authz;
+    workspaces: ShellWorkspaceDescriptor[];
+    activeWorkspaceId: string;
+    providers?: Partial<CmsProviders>;
+}
+export interface ShellRouteHandlers {
+    me(ctx: RouteContext): Promise<Response>;
+    search(ctx: RouteContext): Promise<Response>;
+    notifications(ctx: RouteContext): Promise<Response>;
+    workspaceSettings(ctx: RouteContext): Promise<Response>;
+}
+export declare function createShellRoutes(config: ShellRouteConfig): ShellRouteHandlers;
+//# sourceMappingURL=shell.d.ts.map

package/dist/routes/shell.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"shell.d.ts","sourceRoot":"","sources":["../../src/routes/shell.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAA;AACzD,OAAO,KAAK,EAAE,KAAK,EAAuB,YAAY,EAAE,MAAM,cAAc,CAAA;AAG5E,MAAM,WAAW,wBAAwB;IACxC,EAAE,EAAE,MAAM,CAAA;IACV,IAAI,EAAE,MAAM,CAAA;IACZ,IAAI,EAAE,MAAM,CAAA;IACZ,KAAK,EAAE,MAAM,CAAA;CACb;AAED,MAAM,WAAW,gBAAgB;IAChC,KAAK,EAAE,KAAK,CAAA;IACZ,UAAU,EAAE,wBAAwB,EAAE,CAAA;IACtC,iBAAiB,EAAE,MAAM,CAAA;IACzB,SAAS,CAAC,EAAE,OAAO,CAAC,YAAY,CAAC,CAAA;CACjC;AAED,MAAM,WAAW,kBAAkB;IAClC,EAAE,CAAC,GAAG,EAAE,YAAY,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAA;IACxC,MAAM,CAAC,GAAG,EAAE,YAAY,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAA;IAC5C,aAAa,CAAC,GAAG,EAAE,YAAY,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAA;IACnD,iBAAiB,CAAC,GAAG,EAAE,YAAY,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAA;CACvD;AA4BD,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,gBAAgB,GAAG,kBAAkB,CAyG9E"}

package/dist/routes/shell.js

@@ -0,0 +1,123 @@
+import { nullProviders } from '../providers/null.js';
+import { json } from './context.js';
+const SETTINGS_DEFAULTS = {
+    publication_name: null,
+    tagline: null,
+    language: 'en',
+    timezone: 'Europe/Paris',
+    require_review: 0,
+    auto_seo: 1,
+    scheduled_publish: 1,
+    premium_default: 0,
+    accent_color: 'Ink blue',
+    display_typeface: 'serif',
+};
+const SETTINGS_PATCHABLE = Object.keys(SETTINGS_DEFAULTS);
+async function loadMembershipRole(db, workspaceId, subject) {
+    const row = await db
+        .prepare('SELECT role FROM workspace_memberships WHERE workspace_id = ? AND user_id = ?')
+        .bind(workspaceId, subject)
+        .first();
+    return row?.role ?? null;
+}
+export function createShellRoutes(config) {
+    const providers = { ...nullProviders, ...(config.providers ?? {}) };
+    async function resolveUser(ctx) {
+        if (!config.authz.getUser)
+            return null;
+        return await config.authz.getUser(ctx);
+    }
+    return {
+        async me(ctx) {
+            const user = await resolveUser(ctx);
+            if (!user)
+                return json({ error: 'Unauthorized' }, 401);
+            const workspace = config.workspaces.find((w) => w.id === config.activeWorkspaceId) ?? null;
+            const membershipRole = await loadMembershipRole(ctx.db, config.activeWorkspaceId, user.subject);
+            return json({ user, workspace, workspaces: config.workspaces, membershipRole });
+        },
+        async search(ctx) {
+            const user = await resolveUser(ctx);
+            if (!user)
+                return json({ error: 'Unauthorized' }, 401);
+            const q = new URL(ctx.request.url).searchParams.get('q')?.trim() ?? '';
+            if (!q)
+                return json({ status: 'empty', data: [] });
+            try {
+                const result = await providers.search.query(q);
+                if (result.status !== 'empty' && result.data.length > 0)
+                    return json(result);
+            }
+            catch {
+                // provider unavailable — fall through to D1.
+            }
+            const like = `%${q.replace(/[%_]/g, (m) => `\\${m}`)}%`;
+            const rows = await ctx.db
+                .prepare("SELECT id, title, type FROM content_items WHERE deleted_at IS NULL AND (title LIKE ?1 ESCAPE '\\' OR slug LIKE ?1 ESCAPE '\\') ORDER BY updated_at DESC LIMIT 10")
+                .bind(like)
+                .all();
+            return json({ status: 'partial', data: rows.results ?? [] });
+        },
+        async notifications(ctx) {
+            const user = await resolveUser(ctx);
+            if (!user)
+                return json({ error: 'Unauthorized' }, 401);
+            if (ctx.request.method === 'POST') {
+                const body = (await ctx.request.json().catch(() => ({})));
+                const ids = Array.isArray(body.ids)
+                    ? body.ids.filter((x) => typeof x === 'string')
+                    : [];
+                if (ids.length === 0)
+                    return json({ updated: 0 });
+                const placeholders = ids.map(() => '?').join(',');
+                await ctx.db
+                    .prepare(`UPDATE cms_notifications SET read_at = unixepoch() WHERE workspace_id = ? AND user_id = ? AND read_at IS NULL AND id IN (${placeholders})`)
+                    .bind(config.activeWorkspaceId, user.subject, ...ids)
+                    .run();
+                return json({ updated: ids.length });
+            }
+            const rows = await ctx.db
+                .prepare('SELECT id, kind, body, read_at, created_at FROM cms_notifications WHERE workspace_id = ? AND user_id = ? ORDER BY (read_at IS NOT NULL), created_at DESC LIMIT 50')
+                .bind(config.activeWorkspaceId, user.subject)
+                .all();
+            return json({ data: rows.results ?? [] });
+        },
+        async workspaceSettings(ctx) {
+            const user = await resolveUser(ctx);
+            if (!user)
+                return json({ error: 'Unauthorized' }, 401);
+            const wsId = config.activeWorkspaceId;
+            if (ctx.request.method === 'PATCH') {
+                const gate = config.authz.requireRole
+                    ? await config.authz.requireRole('manage_settings', ctx)
+                    : user.role === 'owner'
+                        ? null
+                        : new Response('forbidden', { status: 403 });
+                if (gate)
+                    return gate;
+                const body = (await ctx.request.json().catch(() => ({})));
+                const updates = SETTINGS_PATCHABLE.filter((k) => k in body);
+                await ctx.db
+                    .prepare('INSERT INTO workspace_settings (workspace_id) VALUES (?) ON CONFLICT(workspace_id) DO NOTHING')
+                    .bind(wsId)
+                    .run();
+                if (updates.length > 0) {
+                    const setClause = updates.map((k) => `${k} = ?`).join(', ');
+                    await ctx.db
+                        .prepare(`UPDATE workspace_settings SET ${setClause} WHERE workspace_id = ?`)
+                        .bind(...updates.map((k) => body[k]), wsId)
+                        .run();
+                }
+                return json({ ok: true });
+            }
+            const row = await ctx.db
+                .prepare('SELECT * FROM workspace_settings WHERE workspace_id = ?')
+                .bind(wsId)
+                .first();
+            if (!row)
+                return json({ status: 'empty', data: { ...SETTINGS_DEFAULTS } });
+            return json({ status: 'live', data: { ...SETTINGS_DEFAULTS, ...row } });
+        },
+    };
+}
+//# sourceMappingURL=shell.js.map

package/dist/routes/shell.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"shell.js","sourceRoot":"","sources":["../../src/routes/shell.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAA;AAGpD,OAAO,EAAE,IAAI,EAAE,MAAM,cAAc,CAAA;AAuBnC,MAAM,iBAAiB,GAAG;IACzB,gBAAgB,EAAE,IAAqB;IACvC,OAAO,EAAE,IAAqB;IAC9B,QAAQ,EAAE,IAAI;IACd,QAAQ,EAAE,cAAc;IACxB,cAAc,EAAE,CAAC;IACjB,QAAQ,EAAE,CAAC;IACX,iBAAiB,EAAE,CAAC;IACpB,eAAe,EAAE,CAAC;IAClB,YAAY,EAAE,UAAU;IACxB,gBAAgB,EAAE,OAAO;CACzB,CAAA;AACD,MAAM,kBAAkB,GAAG,MAAM,CAAC,IAAI,CAAC,iBAAiB,CAA0C,CAAA;AAElG,KAAK,UAAU,kBAAkB,CAChC,EAAc,EACd,WAAmB,EACnB,OAAe;IAEf,MAAM,GAAG,GAAG,MAAM,EAAE;SAClB,OAAO,CAAC,+EAA+E,CAAC;SACxF,IAAI,CAAC,WAAW,EAAE,OAAO,CAAC;SAC1B,KAAK,EAAoB,CAAA;IAC3B,OAAO,GAAG,EAAE,IAAI,IAAI,IAAI,CAAA;AACzB,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,MAAwB;IACzD,MAAM,SAAS,GAAiB,EAAE,GAAG,aAAa,EAAE,GAAG,CAAC,MAAM,CAAC,SAAS,IAAI,EAAE,CAAC,EAAE,CAAA;IAEjF,KAAK,UAAU,WAAW,CAAC,GAAiB;QAC3C,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO;YAAE,OAAO,IAAI,CAAA;QACtC,OAAO,MAAM,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAA;IACvC,CAAC;IAED,OAAO;QACN,KAAK,CAAC,EAAE,CAAC,GAAiB;YACzB,MAAM,IAAI,GAAG,MAAM,WAAW,CAAC,GAAG,CAAC,CAAA;YACnC,IAAI,CAAC,IAAI;gBAAE,OAAO,IAAI,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,EAAE,GAAG,CAAC,CAAA;YACtD,MAAM,SAAS,GAAG,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,MAAM,CAAC,iBAAiB,CAAC,IAAI,IAAI,CAAA;YAC1F,MAAM,cAAc,GAAG,MAAM,kBAAkB,CAC9C,GAAG,CAAC,EAAE,EACN,MAAM,CAAC,iBAAiB,EACxB,IAAI,CAAC,OAAO,CACZ,CAAA;YACD,OAAO,IAAI,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,CAAC,UAAU,EAAE,cAAc,EAAE,CAAC,CAAA;QAChF,CAAC;QAED,KAAK,CAAC,MAAM,CAAC,GAAiB;YAC7B,MAAM,IAAI,GAAG,MAAM,WAAW,CAAC,GAAG,CAAC,CAAA;YACnC,IAAI,CAAC,IAAI;gBAAE,OAAO,IAAI,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,EAAE,GAAG,CAAC,CAAA;YACtD,MAAM,CAAC,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAA;YACtE,IAAI,CAAC,CAAC;gBAAE,OAAO,IAAI,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAA;YAClD,IAAI,CAAC;gBACJ,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAA;gBAC9C,IAAI,MAAM,CAAC,MAAM,KAAK,OAAO,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC;oBAAE,OAAO,IAAI,CAAC,MAAM,CAAC,CAAA;YAC7E,CAAC;YAAC,MAAM,CAAC;gBACR,6CAA6C;YAC9C,CAAC;YACD,MAAM,IAAI,GAAG,IAAI,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,GAAG,CAAA;YACvD,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,EAAE;iBACvB,OAAO,CACP,kKAAkK,CAClK;iBACA,IAAI,CAAC,IAAI,CAAC;iBACV,GAAG,EAA+C,CAAA;YACpD,OAAO,IAAI,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,CAAC,OAAO,IAAI,EAAE,EAAE,CAAC,CAAA;QAC7D,CAAC;QAED,KAAK,CAAC,aAAa,CAAC,GAAiB;YACpC,MAAM,IAAI,GAAG,MAAM,WAAW,CAAC,GAAG,CAAC,CAAA;YACnC,IAAI,CAAC,IAAI;gBAAE,OAAO,IAAI,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,EAAE,GAAG,CAAC,CAAA;YACtD,IAAI,GAAG,CAAC,OAAO,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;gBACnC,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAsB,CAAA;gBAC9E,MAAM,GAAG,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC;oBAClC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC;oBAC5D,CAAC,CAAC,EAAE,CAAA;gBACL,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC;oBAAE,OAAO,IAAI,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC,CAAA;gBACjD,MAAM,YAAY,GAAG,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;gBACjD,MAAM,GAAG,CAAC,EAAE;qBACV,OAAO,CACP,4HAA4H,YAAY,GAAG,CAC3I;qBACA,IAAI,CAAC,MAAM,CAAC,iBAAiB,EAAE,IAAI,CAAC,OAAO,EAAE,GAAG,GAAG,CAAC;qBACpD,GAAG,EAAE,CAAA;gBACP,OAAO,IAAI,CAAC,EAAE,OAAO,EAAE,GAAG,CAAC,MAAM,EAAE,CAAC,CAAA;YACrC,CAAC;YACD,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,EAAE;iBACvB,OAAO,CACP,mKAAmK,CACnK;iBACA,IAAI,CAAC,MAAM,CAAC,iBAAiB,EAAE,IAAI,CAAC,OAAO,CAAC;iBAC5C,GAAG,EAAE,CAAA;YACP,OAAO,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,OAAO,IAAI,EAAE,EAAE,CAAC,CAAA;QAC1C,CAAC;QAED,KAAK,CAAC,iBAAiB,CAAC,GAAiB;YACxC,MAAM,IAAI,GAAG,MAAM,WAAW,CAAC,GAAG,CAAC,CAAA;YACnC,IAAI,CAAC,IAAI;gBAAE,OAAO,IAAI,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,EAAE,GAAG,CAAC,CAAA;YACtD,MAAM,IAAI,GAAG,MAAM,CAAC,iBAAiB,CAAA;YACrC,IAAI,GAAG,CAAC,OAAO,CAAC,MAAM,KAAK,OAAO,EAAE,CAAC;gBACpC,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,WAAW;oBACpC,CAAC,CAAC,MAAM,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,iBAAsC,EAAE,GAAG,CAAC;oBAC7E,CAAC,CAAC,IAAI,CAAC,IAAI,KAAK,OAAO;wBACtB,CAAC,CAAC,IAAI;wBACN,CAAC,CAAC,IAAI,QAAQ,CAAC,WAAW,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAA;gBAC9C,IAAI,IAAI;oBAAE,OAAO,IAAI,CAAA;gBACrB,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAA4B,CAAA;gBACpF,MAAM,OAAO,GAAG,kBAAkB,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,IAAI,CAAC,CAAA;gBAC3D,MAAM,GAAG,CAAC,EAAE;qBACV,OAAO,CACP,+FAA+F,CAC/F;qBACA,IAAI,CAAC,IAAI,CAAC;qBACV,GAAG,EAAE,CAAA;gBACP,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBACxB,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;oBAC3D,MAAM,GAAG,CAAC,EAAE;yBACV,OAAO,CAAC,iCAAiC,SAAS,yBAAyB,CAAC;yBAC5E,IAAI,CAAC,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,CAA2B,CAAC,EAAE,IAAI,CAAC;yBACpE,GAAG,EAAE,CAAA;gBACR,CAAC;gBACD,OAAO,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAA;YAC1B,CAAC;YACD,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,EAAE;iBACtB,OAAO,CAAC,yDAAyD,CAAC;iBAClE,IAAI,CAAC,IAAI,CAAC;iBACV,KAAK,EAA2B,CAAA;YAClC,IAAI,CAAC,GAAG;gBAAE,OAAO,IAAI,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,GAAG,iBAAiB,EAAE,EAAE,CAAC,CAAA;YAC1E,OAAO,IAAI,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,GAAG,iBAAiB,EAAE,GAAG,GAAG,EAAE,EAAE,CAAC,CAAA;QACxE,CAAC;KACD,CAAA;AACF,CAAC"}

package/dist/routes/subscriptions.d.ts

@@ -0,0 +1,21 @@
+import type { CmsProviders } from '../providers/types.js';
+import type { Authz, RouteContext } from './context.js';
+export interface SubscriptionsRouteConfig {
+    authz: Authz;
+    providers?: Partial<CmsProviders>;
+}
+export interface SubscriptionsRouteHandlers {
+    members(ctx: RouteContext): Promise<Response>;
+    kpis(ctx: RouteContext): Promise<Response>;
+    planMix(ctx: RouteContext): Promise<Response>;
+    exportMembers(ctx: RouteContext): Promise<Response>;
+    gift(ctx: RouteContext): Promise<Response>;
+    /** READ — duplicate-account conflict groups (billing + canonical email). */
+    detectDuplicates(ctx: RouteContext): Promise<Response>;
+    /** READ — paginated gift-order claim/delivery tracking. */
+    listGifts(ctx: RouteContext): Promise<Response>;
+    /** WRITE (privileged) — trigger the LemonSqueezy entitlement sync. */
+    importLsEntitlements(ctx: RouteContext): Promise<Response>;
+}
+export declare function createSubscriptionsRoutes(config: SubscriptionsRouteConfig): SubscriptionsRouteHandlers;
+//# sourceMappingURL=subscriptions.d.ts.map

package/dist/routes/subscriptions.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"subscriptions.d.ts","sourceRoot":"","sources":["../../src/routes/subscriptions.ts"],"names":[],"mappings":"AAiBA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAA;AACzD,OAAO,KAAK,EAAE,KAAK,EAAc,YAAY,EAAE,MAAM,cAAc,CAAA;AAGnE,MAAM,WAAW,wBAAwB;IACxC,KAAK,EAAE,KAAK,CAAA;IACZ,SAAS,CAAC,EAAE,OAAO,CAAC,YAAY,CAAC,CAAA;CACjC;AAED,MAAM,WAAW,0BAA0B;IAC1C,OAAO,CAAC,GAAG,EAAE,YAAY,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAA;IAC7C,IAAI,CAAC,GAAG,EAAE,YAAY,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAA;IAC1C,OAAO,CAAC,GAAG,EAAE,YAAY,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAA;IAC7C,aAAa,CAAC,GAAG,EAAE,YAAY,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAA;IACnD,IAAI,CAAC,GAAG,EAAE,YAAY,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAA;IAC1C,4EAA4E;IAC5E,gBAAgB,CAAC,GAAG,EAAE,YAAY,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAA;IACtD,2DAA2D;IAC3D,SAAS,CAAC,GAAG,EAAE,YAAY,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAA;IAC/C,sEAAsE;IACtE,oBAAoB,CAAC,GAAG,EAAE,YAAY,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAA;CAC1D;AAED,wBAAgB,yBAAyB,CACxC,MAAM,EAAE,wBAAwB,GAC9B,0BAA0B,CA4H5B"}

package/dist/routes/subscriptions.js

@@ -0,0 +1,127 @@
+// src/routes/subscriptions.ts — Subscriptions route factory (P5 Task 6 + admin parity).
+// All handlers are SubscriptionsProvider passthrough: member list+filters,
+// KPI cards, plan-mix, CSV/JSON export, gift subscription, plus the three
+// admin-parity tools the legacy Fronts /admin had — duplicate-account detection,
+// gift-order tracking, and the LemonSqueezy entitlement sync (a privileged WRITE).
+// Each handler returns the ProviderResult {status, data} envelope unchanged —
+// null KPI values (LTV/MRR/churn) are preserved, never zeroed.
+// No D1 subscription/member query; the provider owns those semantics.
+//
+// Authz: the read surfaces (members/kpis/planMix/gifts/duplicates) gate on
+// requirePublisher (any workspace member). exportMembers exposes subscriber PII
+// (member emails) → requireRole('export_subscribers') (owner + senior_editor,
+// NOT editor), falling back to requirePublisher when the role seam is absent.
+// importLsEntitlements is a privileged WRITE → requireRole('manage_settings')
+// (owner-only), falling back to requireAdmin when the role seam is absent.
+import { nullProviders } from '../providers/null.js';
+import { json } from './context.js';
+export function createSubscriptionsRoutes(config) {
+    const providers = { ...nullProviders, ...(config.providers ?? {}) };
+    return {
+        async members(ctx) {
+            const denied = await config.authz.requirePublisher(ctx);
+            if (denied)
+                return denied;
+            const u = new URL(ctx.request.url);
+            // Forward all query params as the filter map (filter=paid, status=active, etc.)
+            const filter = {};
+            for (const [key, value] of u.searchParams.entries()) {
+                if (key !== 'page')
+                    filter[key] = value;
+            }
+            const page = Number(u.searchParams.get('page') ?? '1') || 1;
+            return json(await providers.subscriptions.listMembers(filter, page));
+        },
+        async kpis(ctx) {
+            const denied = await config.authz.requirePublisher(ctx);
+            if (denied)
+                return denied;
+            // ProviderResult<Record<string, number | null>> passes straight through —
+            // null values (LTV/MRR/churn) are preserved for the screen to render honestly.
+            return json(await providers.subscriptions.getKpis());
+        },
+        async planMix(ctx) {
+            const denied = await config.authz.requirePublisher(ctx);
+            if (denied)
+                return denied;
+            return json(await providers.subscriptions.getPlanMix());
+        },
+        async exportMembers(ctx) {
+            // Subscriber-PII export → owner + senior_editor only (NOT editor) via
+            // requireRole('export_subscribers'); falls back to requirePublisher when
+            // the host has not wired the role seam (backwards compatible).
+            const denied = config.authz.requireRole
+                ? await config.authz.requireRole('export_subscribers', ctx)
+                : await config.authz.requirePublisher(ctx);
+            if (denied)
+                return denied;
+            const u = new URL(ctx.request.url);
+            const rawFmt = u.searchParams.get('fmt');
+            const fmt = rawFmt === 'json' ? 'json' : 'csv';
+            // Return the ProviderResult envelope so the client can branch on status.
+            // The screen may choose to trigger a file download for the data string.
+            return json(await providers.subscriptions.exportMembers(fmt));
+        },
+        async gift(ctx) {
+            const denied = await config.authz.requirePublisher(ctx);
+            if (denied)
+                return denied;
+            let body;
+            try {
+                body = await ctx.request.json();
+            }
+            catch {
+                return json({ error: 'Invalid JSON body' }, 400);
+            }
+            const { email, planVariantId } = typeof body === 'object' && body !== null ? body : {};
+            if (typeof email !== 'string' || !email) {
+                return json({ error: 'email is required' }, 400);
+            }
+            if (typeof planVariantId !== 'string' || !planVariantId) {
+                return json({ error: 'planVariantId is required' }, 400);
+            }
+            return json(await providers.subscriptions.createGift({ email, planVariantId }));
+        },
+        // READ — duplicate-account detection. Same publisher gate as the other
+        // read surfaces; the ProviderResult (conflict groups + summary) passes
+        // straight through, empty states preserved.
+        async detectDuplicates(ctx) {
+            const denied = await config.authz.requirePublisher(ctx);
+            if (denied)
+                return denied;
+            return json(await providers.subscriptions.detectDuplicates());
+        },
+        // READ — gift-order list. Forwards q/status/page/pageSize to the provider.
+        async listGifts(ctx) {
+            const denied = await config.authz.requirePublisher(ctx);
+            if (denied)
+                return denied;
+            const u = new URL(ctx.request.url);
+            const q = u.searchParams.get('q')?.trim() || undefined;
+            const status = u.searchParams.get('status')?.trim() || undefined;
+            const page = Number(u.searchParams.get('page') ?? '1') || 1;
+            const rawPageSize = Number(u.searchParams.get('pageSize') ?? '25') || 25;
+            // Clamp to a sane window; the provider may further bound this.
+            const pageSize = Math.min(Math.max(1, rawPageSize), 100);
+            return json(await providers.subscriptions.listGifts({ q, status, page, pageSize }));
+        },
+        // WRITE (privileged) — trigger the LemonSqueezy entitlement sync. This
+        // mutates host state (creates/updates users + subscriptions), so it gates
+        // on requireRole('manage_settings') (owner-only per the capability matrix)
+        // when the host supplies the role seam, falling back to requireAdmin
+        // (owner-only) otherwise. Mirrors the workspaceSettings PATCH gate in shell.ts.
+        async importLsEntitlements(ctx) {
+            const gate = config.authz.requireRole
+                ? await config.authz.requireRole('manage_settings', ctx)
+                : await config.authz.requireAdmin(ctx);
+            if (gate)
+                return gate;
+            const u = new URL(ctx.request.url);
+            const dryRun = u.searchParams.get('dryRun') === 'true';
+            const includeTest = u.searchParams.get('includeTest') === 'true';
+            const storeId = u.searchParams.get('storeId')?.trim() || undefined;
+            return json(await providers.subscriptions.importLsEntitlements({ dryRun, storeId, includeTest }));
+        },
+    };
+}
+//# sourceMappingURL=subscriptions.js.map

package/dist/routes/subscriptions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"subscriptions.js","sourceRoot":"","sources":["../../src/routes/subscriptions.ts"],"names":[],"mappings":"AAAA,wFAAwF;AACxF,2EAA2E;AAC3E,0EAA0E;AAC1E,iFAAiF;AACjF,mFAAmF;AACnF,8EAA8E;AAC9E,+DAA+D;AAC/D,sEAAsE;AACtE,EAAE;AACF,2EAA2E;AAC3E,gFAAgF;AAChF,8EAA8E;AAC9E,8EAA8E;AAC9E,8EAA8E;AAC9E,2EAA2E;AAE3E,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAA;AAGpD,OAAO,EAAE,IAAI,EAAE,MAAM,cAAc,CAAA;AAqBnC,MAAM,UAAU,yBAAyB,CACxC,MAAgC;IAEhC,MAAM,SAAS,GAAiB,EAAE,GAAG,aAAa,EAAE,GAAG,CAAC,MAAM,CAAC,SAAS,IAAI,EAAE,CAAC,EAAE,CAAA;IAEjF,OAAO;QACN,KAAK,CAAC,OAAO,CAAC,GAAiB;YAC9B,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,KAAK,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAA;YACvD,IAAI,MAAM;gBAAE,OAAO,MAAM,CAAA;YAEzB,MAAM,CAAC,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAA;YAClC,gFAAgF;YAChF,MAAM,MAAM,GAAuC,EAAE,CAAA;YACrD,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC,YAAY,CAAC,OAAO,EAAE,EAAE,CAAC;gBACrD,IAAI,GAAG,KAAK,MAAM;oBAAE,MAAM,CAAC,GAAG,CAAC,GAAG,KAAK,CAAA;YACxC,CAAC;YACD,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,GAAG,CAAC,IAAI,CAAC,CAAA;YAE3D,OAAO,IAAI,CAAC,MAAM,SAAS,CAAC,aAAa,CAAC,WAAW,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,CAAA;QACrE,CAAC;QAED,KAAK,CAAC,IAAI,CAAC,GAAiB;YAC3B,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,KAAK,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAA;YACvD,IAAI,MAAM;gBAAE,OAAO,MAAM,CAAA;YAEzB,0EAA0E;YAC1E,+EAA+E;YAC/E,OAAO,IAAI,CAAC,MAAM,SAAS,CAAC,aAAa,CAAC,OAAO,EAAE,CAAC,CAAA;QACrD,CAAC;QAED,KAAK,CAAC,OAAO,CAAC,GAAiB;YAC9B,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,KAAK,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAA;YACvD,IAAI,MAAM;gBAAE,OAAO,MAAM,CAAA;YAEzB,OAAO,IAAI,CAAC,MAAM,SAAS,CAAC,aAAa,CAAC,UAAU,EAAE,CAAC,CAAA;QACxD,CAAC;QAED,KAAK,CAAC,aAAa,CAAC,GAAiB;YACpC,sEAAsE;YACtE,yEAAyE;YACzE,+DAA+D;YAC/D,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,WAAW;gBACtC,CAAC,CAAC,MAAM,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,oBAAyC,EAAE,GAAG,CAAC;gBAChF,CAAC,CAAC,MAAM,MAAM,CAAC,KAAK,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAA;YAC3C,IAAI,MAAM;gBAAE,OAAO,MAAM,CAAA;YAEzB,MAAM,CAAC,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAA;YAClC,MAAM,MAAM,GAAG,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,CAAA;YACxC,MAAM,GAAG,GAAmB,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAA;YAE9D,yEAAyE;YACzE,wEAAwE;YACxE,OAAO,IAAI,CAAC,MAAM,SAAS,CAAC,aAAa,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,CAAA;QAC9D,CAAC;QAED,KAAK,CAAC,IAAI,CAAC,GAAiB;YAC3B,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,KAAK,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAA;YACvD,IAAI,MAAM;gBAAE,OAAO,MAAM,CAAA;YAEzB,IAAI,IAAa,CAAA;YACjB,IAAI,CAAC;gBACJ,IAAI,GAAG,MAAM,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,CAAA;YAChC,CAAC;YAAC,MAAM,CAAC;gBACR,OAAO,IAAI,CAAC,EAAE,KAAK,EAAE,mBAAmB,EAAE,EAAE,GAAG,CAAC,CAAA;YACjD,CAAC;YAED,MAAM,EAAE,KAAK,EAAE,aAAa,EAAE,GAC7B,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,IAAI,CAAC,CAAC,CAAE,IAAgC,CAAC,CAAC,CAAC,EAAE,CAAA;YAEnF,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,EAAE,CAAC;gBACzC,OAAO,IAAI,CAAC,EAAE,KAAK,EAAE,mBAAmB,EAAE,EAAE,GAAG,CAAC,CAAA;YACjD,CAAC;YACD,IAAI,OAAO,aAAa,KAAK,QAAQ,IAAI,CAAC,aAAa,EAAE,CAAC;gBACzD,OAAO,IAAI,CAAC,EAAE,KAAK,EAAE,2BAA2B,EAAE,EAAE,GAAG,CAAC,CAAA;YACzD,CAAC;YAED,OAAO,IAAI,CAAC,MAAM,SAAS,CAAC,aAAa,CAAC,UAAU,CAAC,EAAE,KAAK,EAAE,aAAa,EAAE,CAAC,CAAC,CAAA;QAChF,CAAC;QAED,uEAAuE;QACvE,uEAAuE;QACvE,4CAA4C;QAC5C,KAAK,CAAC,gBAAgB,CAAC,GAAiB;YACvC,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,KAAK,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAA;YACvD,IAAI,MAAM;gBAAE,OAAO,MAAM,CAAA;YAEzB,OAAO,IAAI,CAAC,MAAM,SAAS,CAAC,aAAa,CAAC,gBAAgB,EAAE,CAAC,CAAA;QAC9D,CAAC;QAED,2EAA2E;QAC3E,KAAK,CAAC,SAAS,CAAC,GAAiB;YAChC,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,KAAK,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAA;YACvD,IAAI,MAAM;gBAAE,OAAO,MAAM,CAAA;YAEzB,MAAM,CAAC,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAA;YAClC,MAAM,CAAC,GAAG,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,IAAI,SAAS,CAAA;YACtD,MAAM,MAAM,GAAG,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,IAAI,SAAS,CAAA;YAChE,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,GAAG,CAAC,IAAI,CAAC,CAAA;YAC3D,MAAM,WAAW,GAAG,MAAM,CAAC,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,IAAI,CAAC,IAAI,EAAE,CAAA;YACxE,+DAA+D;YAC/D,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,WAAW,CAAC,EAAE,GAAG,CAAC,CAAA;YAExD,OAAO,IAAI,CAAC,MAAM,SAAS,CAAC,aAAa,CAAC,SAAS,CAAC,EAAE,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAA;QACpF,CAAC;QAED,uEAAuE;QACvE,0EAA0E;QAC1E,2EAA2E;QAC3E,qEAAqE;QACrE,gFAAgF;QAChF,KAAK,CAAC,oBAAoB,CAAC,GAAiB;YAC3C,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,WAAW;gBACpC,CAAC,CAAC,MAAM,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,iBAAsC,EAAE,GAAG,CAAC;gBAC7E,CAAC,CAAC,MAAM,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC,GAAG,CAAC,CAAA;YACvC,IAAI,IAAI;gBAAE,OAAO,IAAI,CAAA;YAErB,MAAM,CAAC,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAA;YAClC,MAAM,MAAM,GAAG,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,QAAQ,CAAC,KAAK,MAAM,CAAA;YACtD,MAAM,WAAW,GAAG,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,aAAa,CAAC,KAAK,MAAM,CAAA;YAChE,MAAM,OAAO,GAAG,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,IAAI,SAAS,CAAA;YAElE,OAAO,IAAI,CACV,MAAM,SAAS,CAAC,aAAa,CAAC,oBAAoB,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC,CACpF,CAAA;QACF,CAAC;KACD,CAAA;AACF,CAAC"}

package/dist/routes/tags.d.ts

@@ -0,0 +1,23 @@
+import type { CmsRouteConfig } from './config.js';
+import { type RouteContext } from './context.js';
+export interface TagRouteHandlers {
+    /**
+     * GET /tags or GET /tags?q=<query>
+     * Without q: lists all tags ordered by usage count desc, label asc.
+     * With q: searches tags whose slug begins with the slugified query.
+     * Returns { tags: TagSummary[] }.
+     */
+    list(ctx: RouteContext): Promise<Response>;
+    /** POST /tags — create a standalone tag. */
+    create(ctx: RouteContext): Promise<Response>;
+    /** PATCH /tags/:id — rename a tag. */
+    update(ctx: RouteContext): Promise<Response>;
+    /**
+     * DELETE /tags/:id — removes the tag (and cascades its content_tag_links).
+     * Returns { deleted: true } when the tag was found and removed,
+     * { deleted: false } when the id was not found.
+     */
+    delete(ctx: RouteContext): Promise<Response>;
+}
+export declare function createTagRoutes(config: CmsRouteConfig): TagRouteHandlers;
+//# sourceMappingURL=tags.d.ts.map

package/dist/routes/tags.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tags.d.ts","sourceRoot":"","sources":["../../src/routes/tags.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,aAAa,CAAA;AAEjD,OAAO,EAAQ,KAAK,YAAY,EAAE,MAAM,cAAc,CAAA;AAMtD,MAAM,WAAW,gBAAgB;IAChC;;;;;OAKG;IACH,IAAI,CAAC,GAAG,EAAE,YAAY,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAA;IAC1C,4CAA4C;IAC5C,MAAM,CAAC,GAAG,EAAE,YAAY,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAA;IAC5C,sCAAsC;IACtC,MAAM,CAAC,GAAG,EAAE,YAAY,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAA;IAC5C;;;;OAIG;IACH,MAAM,CAAC,GAAG,EAAE,YAAY,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAA;CAC5C;AAED,wBAAgB,eAAe,CAAC,MAAM,EAAE,cAAc,GAAG,gBAAgB,CA0DxE"}

package/dist/routes/tags.js

@@ -0,0 +1,68 @@
+// Tag route handlers (P3 Task 9). Backs the Organize tab tag management.
+// Delegates to the engine functions (list/search/create/rename/delete)
+// from engine/tags.ts. Guarded by requirePublisher.
+import { z } from 'zod';
+import { createTag, deleteTag, getTag, listTags, renameTag, searchTags } from '../engine/tags.js';
+import { resolveConfig } from './config.js';
+import { json } from './context.js';
+const TagWriteSchema = z.object({
+    label: z.string().min(1),
+});
+export function createTagRoutes(config) {
+    const resolved = resolveConfig(config);
+    return {
+        async list(ctx) {
+            const denied = await resolved.authz.requirePublisher(ctx);
+            if (denied)
+                return denied;
+            const url = new URL(ctx.request.url);
+            const q = url.searchParams.get('q');
+            const tags = q ? await searchTags(ctx.db, q) : await listTags(ctx.db);
+            return json({ tags });
+        },
+        async create(ctx) {
+            const denied = await resolved.authz.requirePublisher(ctx);
+            if (denied)
+                return denied;
+            const parsed = TagWriteSchema.safeParse(await ctx.request.json().catch(() => null));
+            if (!parsed.success) {
+                return json({ error: 'Invalid request', details: parsed.error.flatten() }, 400);
+            }
+            const tag = await createTag(ctx.db, parsed.data.label);
+            if (!tag)
+                return json({ error: 'Tag already exists or label is invalid' }, 409);
+            return json({ tag }, 201);
+        },
+        async update(ctx) {
+            const denied = await resolved.authz.requirePublisher(ctx);
+            if (denied)
+                return denied;
+            const id = ctx.params.id;
+            if (!id)
+                return json({ error: 'id is required' }, 400);
+            const before = await getTag(ctx.db, id);
+            if (!before)
+                return json({ error: 'Not found' }, 404);
+            const parsed = TagWriteSchema.safeParse(await ctx.request.json().catch(() => null));
+            if (!parsed.success) {
+                return json({ error: 'Invalid request', details: parsed.error.flatten() }, 400);
+            }
+            const ok = await renameTag(ctx.db, id, parsed.data.label);
+            if (!ok)
+                return json({ error: 'Tag slug already exists or label is invalid' }, 409);
+            const tag = await getTag(ctx.db, id);
+            return json({ tag });
+        },
+        async delete(ctx) {
+            const denied = await resolved.authz.requirePublisher(ctx);
+            if (denied)
+                return denied;
+            const id = ctx.params.id;
+            if (!id)
+                return json({ error: 'id is required' }, 400);
+            const deleted = await deleteTag(ctx.db, id);
+            return json({ deleted });
+        },
+    };
+}
+//# sourceMappingURL=tags.js.map

package/dist/routes/tags.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tags.js","sourceRoot":"","sources":["../../src/routes/tags.ts"],"names":[],"mappings":"AAAA,yEAAyE;AACzE,uEAAuE;AACvE,oDAAoD;AAEpD,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AACvB,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAA;AAEjG,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAA;AAC3C,OAAO,EAAE,IAAI,EAAqB,MAAM,cAAc,CAAA;AAEtD,MAAM,cAAc,GAAG,CAAC,CAAC,MAAM,CAAC;IAC/B,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;CACxB,CAAC,CAAA;AAsBF,MAAM,UAAU,eAAe,CAAC,MAAsB;IACrD,MAAM,QAAQ,GAAG,aAAa,CAAC,MAAM,CAAC,CAAA;IAEtC,OAAO;QACN,KAAK,CAAC,IAAI,CAAC,GAAG;YACb,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,KAAK,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAA;YACzD,IAAI,MAAM;gBAAE,OAAO,MAAM,CAAA;YAEzB,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAA;YACpC,MAAM,CAAC,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;YAEnC,MAAM,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,UAAU,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;YACrE,OAAO,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,CAAA;QACtB,CAAC;QAED,KAAK,CAAC,MAAM,CAAC,GAAG;YACf,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,KAAK,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAA;YACzD,IAAI,MAAM;gBAAE,OAAO,MAAM,CAAA;YAEzB,MAAM,MAAM,GAAG,cAAc,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC,CAAA;YACnF,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;gBACrB,OAAO,IAAI,CAAC,EAAE,KAAK,EAAE,iBAAiB,EAAE,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,EAAE,EAAE,GAAG,CAAC,CAAA;YAChF,CAAC;YACD,MAAM,GAAG,GAAG,MAAM,SAAS,CAAC,GAAG,CAAC,EAAE,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;YACtD,IAAI,CAAC,GAAG;gBAAE,OAAO,IAAI,CAAC,EAAE,KAAK,EAAE,wCAAwC,EAAE,EAAE,GAAG,CAAC,CAAA;YAC/E,OAAO,IAAI,CAAC,EAAE,GAAG,EAAE,EAAE,GAAG,CAAC,CAAA;QAC1B,CAAC;QAED,KAAK,CAAC,MAAM,CAAC,GAAG;YACf,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,KAAK,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAA;YACzD,IAAI,MAAM;gBAAE,OAAO,MAAM,CAAA;YAEzB,MAAM,EAAE,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,CAAA;YACxB,IAAI,CAAC,EAAE;gBAAE,OAAO,IAAI,CAAC,EAAE,KAAK,EAAE,gBAAgB,EAAE,EAAE,GAAG,CAAC,CAAA;YACtD,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,CAAC,CAAA;YACvC,IAAI,CAAC,MAAM;gBAAE,OAAO,IAAI,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,EAAE,GAAG,CAAC,CAAA;YAErD,MAAM,MAAM,GAAG,cAAc,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC,CAAA;YACnF,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;gBACrB,OAAO,IAAI,CAAC,EAAE,KAAK,EAAE,iBAAiB,EAAE,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,EAAE,EAAE,GAAG,CAAC,CAAA;YAChF,CAAC;YACD,MAAM,EAAE,GAAG,MAAM,SAAS,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;YACzD,IAAI,CAAC,EAAE;gBAAE,OAAO,IAAI,CAAC,EAAE,KAAK,EAAE,6CAA6C,EAAE,EAAE,GAAG,CAAC,CAAA;YACnF,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,CAAC,CAAA;YACpC,OAAO,IAAI,CAAC,EAAE,GAAG,EAAE,CAAC,CAAA;QACrB,CAAC;QAED,KAAK,CAAC,MAAM,CAAC,GAAG;YACf,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,KAAK,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAA;YACzD,IAAI,MAAM;gBAAE,OAAO,MAAM,CAAA;YAEzB,MAAM,EAAE,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,CAAA;YACxB,IAAI,CAAC,EAAE;gBAAE,OAAO,IAAI,CAAC,EAAE,KAAK,EAAE,gBAAgB,EAAE,EAAE,GAAG,CAAC,CAAA;YAEtD,MAAM,OAAO,GAAG,MAAM,SAAS,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,CAAC,CAAA;YAC3C,OAAO,IAAI,CAAC,EAAE,OAAO,EAAE,CAAC,CAAA;QACzB,CAAC;KACD,CAAA;AACF,CAAC"}

package/dist/routes/topics.d.ts

@@ -0,0 +1,12 @@
+import type { CmsRouteConfig } from './config.js';
+import { type RouteContext } from './context.js';
+export interface TopicRouteHandlers {
+    /** GET /topics — list existing primary_topic values with usage counts. */
+    list(ctx: RouteContext): Promise<Response>;
+    /** POST /topics — create a standalone topic row with zero content assignments. */
+    create(ctx: RouteContext): Promise<Response>;
+    /** PATCH /topics/:id — rename an existing primary_topic value across content rows. */
+    update(ctx: RouteContext): Promise<Response>;
+}
+export declare function createTopicRoutes(config: CmsRouteConfig): TopicRouteHandlers;
+//# sourceMappingURL=topics.d.ts.map

package/dist/routes/topics.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"topics.d.ts","sourceRoot":"","sources":["../../src/routes/topics.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,aAAa,CAAA;AAEjD,OAAO,EAAQ,KAAK,YAAY,EAAE,MAAM,cAAc,CAAA;AAMtD,MAAM,WAAW,kBAAkB;IAClC,0EAA0E;IAC1E,IAAI,CAAC,GAAG,EAAE,YAAY,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAA;IAC1C,kFAAkF;IAClF,MAAM,CAAC,GAAG,EAAE,YAAY,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAA;IAC5C,sFAAsF;IACtF,MAAM,CAAC,GAAG,EAAE,YAAY,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAA;CAC5C;AAED,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,cAAc,GAAG,kBAAkB,CAsC5E"}

package/dist/routes/topics.js

@@ -0,0 +1,49 @@
+import { z } from 'zod';
+import { createTopic, listTopics, renameTopic } from '../engine/topics.js';
+import { resolveConfig } from './config.js';
+import { json } from './context.js';
+const TopicWriteSchema = z.object({
+    label: z.string().min(1),
+});
+export function createTopicRoutes(config) {
+    const resolved = resolveConfig(config);
+    return {
+        async list(ctx) {
+            const denied = await resolved.authz.requirePublisher(ctx);
+            if (denied)
+                return denied;
+            const topics = await listTopics(ctx.db);
+            return json({ topics });
+        },
+        async create(ctx) {
+            const denied = await resolved.authz.requirePublisher(ctx);
+            if (denied)
+                return denied;
+            const parsed = TopicWriteSchema.safeParse(await ctx.request.json().catch(() => null));
+            if (!parsed.success) {
+                return json({ error: 'Invalid request', details: parsed.error.flatten() }, 400);
+            }
+            const topic = await createTopic(ctx.db, parsed.data.label);
+            if (!topic)
+                return json({ error: 'Topic already exists, invalid, or topics table is unavailable' }, 409);
+            return json({ topic }, 201);
+        },
+        async update(ctx) {
+            const denied = await resolved.authz.requirePublisher(ctx);
+            if (denied)
+                return denied;
+            const id = ctx.params.id;
+            if (!id)
+                return json({ error: 'id is required' }, 400);
+            const parsed = TopicWriteSchema.safeParse(await ctx.request.json().catch(() => null));
+            if (!parsed.success) {
+                return json({ error: 'Invalid request', details: parsed.error.flatten() }, 400);
+            }
+            const topic = await renameTopic(ctx.db, id, parsed.data.label);
+            if (!topic)
+                return json({ error: 'Topic not found, invalid, or slug already exists' }, 409);
+            return json({ topic });
+        },
+    };
+}
+//# sourceMappingURL=topics.js.map

package/dist/routes/topics.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"topics.js","sourceRoot":"","sources":["../../src/routes/topics.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AACvB,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAA;AAE1E,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAA;AAC3C,OAAO,EAAE,IAAI,EAAqB,MAAM,cAAc,CAAA;AAEtD,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC;IACjC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;CACxB,CAAC,CAAA;AAWF,MAAM,UAAU,iBAAiB,CAAC,MAAsB;IACvD,MAAM,QAAQ,GAAG,aAAa,CAAC,MAAM,CAAC,CAAA;IAEtC,OAAO;QACN,KAAK,CAAC,IAAI,CAAC,GAAG;YACb,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,KAAK,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAA;YACzD,IAAI,MAAM;gBAAE,OAAO,MAAM,CAAA;YACzB,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;YACvC,OAAO,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC,CAAA;QACxB,CAAC;QAED,KAAK,CAAC,MAAM,CAAC,GAAG;YACf,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,KAAK,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAA;YACzD,IAAI,MAAM;gBAAE,OAAO,MAAM,CAAA;YACzB,MAAM,MAAM,GAAG,gBAAgB,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC,CAAA;YACrF,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;gBACrB,OAAO,IAAI,CAAC,EAAE,KAAK,EAAE,iBAAiB,EAAE,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,EAAE,EAAE,GAAG,CAAC,CAAA;YAChF,CAAC;YACD,MAAM,KAAK,GAAG,MAAM,WAAW,CAAC,GAAG,CAAC,EAAE,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;YAC1D,IAAI,CAAC,KAAK;gBACT,OAAO,IAAI,CAAC,EAAE,KAAK,EAAE,+DAA+D,EAAE,EAAE,GAAG,CAAC,CAAA;YAC7F,OAAO,IAAI,CAAC,EAAE,KAAK,EAAE,EAAE,GAAG,CAAC,CAAA;QAC5B,CAAC;QAED,KAAK,CAAC,MAAM,CAAC,GAAG;YACf,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,KAAK,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAA;YACzD,IAAI,MAAM;gBAAE,OAAO,MAAM,CAAA;YACzB,MAAM,EAAE,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,CAAA;YACxB,IAAI,CAAC,EAAE;gBAAE,OAAO,IAAI,CAAC,EAAE,KAAK,EAAE,gBAAgB,EAAE,EAAE,GAAG,CAAC,CAAA;YACtD,MAAM,MAAM,GAAG,gBAAgB,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC,CAAA;YACrF,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;gBACrB,OAAO,IAAI,CAAC,EAAE,KAAK,EAAE,iBAAiB,EAAE,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,EAAE,EAAE,GAAG,CAAC,CAAA;YAChF,CAAC;YACD,MAAM,KAAK,GAAG,MAAM,WAAW,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;YAC9D,IAAI,CAAC,KAAK;gBAAE,OAAO,IAAI,CAAC,EAAE,KAAK,EAAE,kDAAkD,EAAE,EAAE,GAAG,CAAC,CAAA;YAC3F,OAAO,IAAI,CAAC,EAAE,KAAK,EAAE,CAAC,CAAA;QACvB,CAAC;KACD,CAAA;AACF,CAAC"}

package/dist/routes/webhooks.d.ts

@@ -0,0 +1,31 @@
+import type { Authz, RouteContext } from './context.js';
+/**
+ * Optional injected hook to dispatch a webhook payload to registered URLs.
+ * The hook is responsible for:
+ *   1. Loading the webhook URL for the given workspaceId + eventType.
+ *   2. Signing the body with HMAC-SHA256 using the secret from ctx.env.
+ *   3. POSTing to the webhook URL.
+ *   4. Calling updateWebhookStatus to record the result.
+ *
+ * The package defines the seam; the host injects the impl at cutover.
+ * A missing hook is gracefully treated as a no-op (the route still succeeds).
+ */
+export type DispatchWebhookHook = (ctx: RouteContext, payload: {
+    eventType: string;
+    workspaceId: string;
+    data: unknown;
+}) => Promise<void>;
+export interface WebhookRouteConfig {
+    authz: Authz;
+    workspaceId: string;
+    /** Optional injected dispatch hook. Omit to disable actual dispatch. */
+    dispatchWebhook?: DispatchWebhookHook;
+}
+export interface WebhookRouteHandlers {
+    create(ctx: RouteContext): Promise<Response>;
+    list(ctx: RouteContext): Promise<Response>;
+    delete(ctx: RouteContext): Promise<Response>;
+    test(ctx: RouteContext): Promise<Response>;
+}
+export declare function createWebhookRoutes(config: WebhookRouteConfig): WebhookRouteHandlers;
+//# sourceMappingURL=webhooks.d.ts.map

package/dist/routes/webhooks.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"webhooks.d.ts","sourceRoot":"","sources":["../../src/routes/webhooks.ts"],"names":[],"mappings":"AAuBA,OAAO,KAAK,EAAE,KAAK,EAAc,YAAY,EAAE,MAAM,cAAc,CAAA;AAOnE;;;;;;;;;;GAUG;AACH,MAAM,MAAM,mBAAmB,GAAG,CACjC,GAAG,EAAE,YAAY,EACjB,OAAO,EAAE;IACR,SAAS,EAAE,MAAM,CAAA;IACjB,WAAW,EAAE,MAAM,CAAA;IACnB,IAAI,EAAE,OAAO,CAAA;CACb,KACG,OAAO,CAAC,IAAI,CAAC,CAAA;AAElB,MAAM,WAAW,kBAAkB;IAClC,KAAK,EAAE,KAAK,CAAA;IACZ,WAAW,EAAE,MAAM,CAAA;IACnB,wEAAwE;IACxE,eAAe,CAAC,EAAE,mBAAmB,CAAA;CACrC;AAED,MAAM,WAAW,oBAAoB;IACpC,MAAM,CAAC,GAAG,EAAE,YAAY,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAA;IAC5C,IAAI,CAAC,GAAG,EAAE,YAAY,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAA;IAC1C,MAAM,CAAC,GAAG,EAAE,YAAY,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAA;IAC5C,IAAI,CAAC,GAAG,EAAE,YAAY,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAA;CAC1C;AAMD,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,kBAAkB,GAAG,oBAAoB,CAoKpF"}