@growth-labs/cms 0.1.0

package/dist/routes/webhooks.js

@@ -0,0 +1,173 @@
+// webhooks.ts — Webhook route factories (P7 Task 8).
+//
+// Routes:
+//   POST   /settings/webhooks           create (validate event type, no secret stored)
+//   GET    /settings/webhooks           list
+//   DELETE /settings/webhooks/:id       delete
+//   POST   /settings/webhooks/:id/test  test (fires webhook.test envelope via dispatchWebhook hook)
+//
+// All routes gated on requireRole('manage_webhooks') — owner + senior_editor only.
+//
+// Security: the HMAC signing secret is NEVER stored in D1. It is read from
+// ctx.env (a Cloudflare Secrets Store binding) by the injected dispatchWebhook
+// hook. This file and the engine have no access to the secret.
+import { validateWebhookUrl } from '../engine/url-guard.js';
+import { buildWebhookEnvelope, createWebhook, deleteWebhook, listWebhooks, updateWebhookStatus, } from '../engine/webhooks.js';
+import { json } from './context.js';
+// ---------------------------------------------------------------------------
+// Factory
+// ---------------------------------------------------------------------------
+export function createWebhookRoutes(config) {
+    function requireWorkspace() {
+        if (!config.workspaceId) {
+            return json({ error: 'Configuration error: workspaceId is required for webhook routes.' }, 500);
+        }
+        return null;
+    }
+    async function gate(ctx) {
+        if (config.authz.requireRole) {
+            return config.authz.requireRole('manage_webhooks', ctx);
+        }
+        return null;
+    }
+    return {
+        // -----------------------------------------------------------------------
+        // POST /settings/webhooks
+        // Registers a new webhook. Validates the eventType against the 12-event
+        // enum. The row has NO secret column — the HMAC secret lives in ctx.env.
+        // -----------------------------------------------------------------------
+        async create(ctx) {
+            const wsErr = requireWorkspace();
+            if (wsErr)
+                return wsErr;
+            const denied = await gate(ctx);
+            if (denied)
+                return denied;
+            let body;
+            try {
+                body = await ctx.request.json();
+            }
+            catch {
+                return json({ error: 'Invalid JSON' }, 400);
+            }
+            const b = body;
+            const eventType = b?.eventType;
+            const url = b?.url;
+            if (!eventType || typeof eventType !== 'string' || !eventType.trim()) {
+                return json({ error: 'eventType is required' }, 400);
+            }
+            if (!url || typeof url !== 'string' || !url.trim()) {
+                return json({ error: 'url is required' }, 400);
+            }
+            // SSRF guard — reject loopback/link-local/metadata/private/internal targets
+            // and non-https schemes BEFORE persisting (defense-in-depth re-checked at
+            // fire time). See engine/url-guard.ts for the policy.
+            const urlCheck = validateWebhookUrl(url.trim());
+            if (!urlCheck.ok) {
+                return json({ error: `Invalid webhook url: ${urlCheck.reason}` }, 400);
+            }
+            let webhook;
+            try {
+                webhook = await createWebhook(ctx.db, {
+                    workspaceId: config.workspaceId,
+                    eventType: eventType.trim(),
+                    url: url.trim(),
+                });
+            }
+            catch (err) {
+                const message = err instanceof Error ? err.message : String(err);
+                if (message.toLowerCase().includes('invalid event')) {
+                    return json({ error: message }, 400);
+                }
+                throw err;
+            }
+            return json({
+                id: webhook.id,
+                workspaceId: webhook.workspaceId,
+                eventType: webhook.eventType,
+                url: webhook.url,
+                lastStatus: webhook.lastStatus,
+                lastFiredAt: webhook.lastFiredAt,
+                createdAt: webhook.createdAt,
+            }, 201);
+        },
+        // -----------------------------------------------------------------------
+        // GET /settings/webhooks
+        // Returns the list of registered webhooks for the workspace.
+        // -----------------------------------------------------------------------
+        async list(ctx) {
+            const wsErr = requireWorkspace();
+            if (wsErr)
+                return wsErr;
+            const denied = await gate(ctx);
+            if (denied)
+                return denied;
+            const webhooks = await listWebhooks(ctx.db, config.workspaceId);
+            return json({ webhooks });
+        },
+        // -----------------------------------------------------------------------
+        // DELETE /settings/webhooks/:id
+        // Deletes a webhook registration.
+        // -----------------------------------------------------------------------
+        async delete(ctx) {
+            const wsErr = requireWorkspace();
+            if (wsErr)
+                return wsErr;
+            const denied = await gate(ctx);
+            if (denied)
+                return denied;
+            const id = ctx.params.id;
+            if (!id)
+                return json({ error: 'Missing id' }, 400);
+            // Scope the delete to the authenticated caller's workspace (resolved
+            // from config, never the client) — closes a cross-workspace IDOR.
+            await deleteWebhook(ctx.db, id, config.workspaceId);
+            return json({ ok: true, id });
+        },
+        // -----------------------------------------------------------------------
+        // POST /settings/webhooks/:id/test
+        // Fires a webhook.test envelope through the injected dispatchWebhook hook.
+        // Records last_status = 'test'. Returns 200 even when no hook is injected
+        // (graceful no-op — mirrors the dispatchTakeaways pattern).
+        // -----------------------------------------------------------------------
+        async test(ctx) {
+            const wsErr = requireWorkspace();
+            if (wsErr)
+                return wsErr;
+            const denied = await gate(ctx);
+            if (denied)
+                return denied;
+            const id = ctx.params.id;
+            if (!id)
+                return json({ error: 'Missing id' }, 400);
+            // Verify the webhook exists before dispatching
+            const rows = await listWebhooks(ctx.db, config.workspaceId);
+            const webhook = rows.find((w) => w.id === id);
+            if (!webhook)
+                return json({ error: 'Webhook not found' }, 404);
+            const envelope = buildWebhookEnvelope({
+                eventType: 'webhook.test',
+                workspaceId: config.workspaceId,
+                data: { webhookId: id, url: webhook.url },
+            });
+            // Fire the hook if injected; gracefully skip if absent (no 501).
+            if (config.dispatchWebhook) {
+                try {
+                    await config.dispatchWebhook(ctx, {
+                        eventType: envelope.event,
+                        workspaceId: envelope.workspaceId,
+                        data: envelope.data,
+                    });
+                }
+                catch (err) {
+                    // Dispatch failure must NOT fail the route — same pattern as dispatchTakeaways.
+                    console.error('[cms] dispatchWebhook test error:', err);
+                }
+            }
+            // Record the test attempt
+            await updateWebhookStatus(ctx.db, id, 'test');
+            return json({ ok: true, id, envelopeId: envelope.id });
+        },
+    };
+}
+//# sourceMappingURL=webhooks.js.map

package/dist/routes/webhooks.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"webhooks.js","sourceRoot":"","sources":["../../src/routes/webhooks.ts"],"names":[],"mappings":"AAAA,qDAAqD;AACrD,EAAE;AACF,UAAU;AACV,uFAAuF;AACvF,6CAA6C;AAC7C,+CAA+C;AAC/C,oGAAoG;AACpG,EAAE;AACF,mFAAmF;AACnF,EAAE;AACF,2EAA2E;AAC3E,+EAA+E;AAC/E,+DAA+D;AAE/D,OAAO,EAAE,kBAAkB,EAAE,MAAM,wBAAwB,CAAA;AAC3D,OAAO,EACN,oBAAoB,EACpB,aAAa,EACb,aAAa,EACb,YAAY,EACZ,mBAAmB,GAEnB,MAAM,uBAAuB,CAAA;AAE9B,OAAO,EAAE,IAAI,EAAE,MAAM,cAAc,CAAA;AAwCnC,8EAA8E;AAC9E,UAAU;AACV,8EAA8E;AAE9E,MAAM,UAAU,mBAAmB,CAAC,MAA0B;IAC7D,SAAS,gBAAgB;QACxB,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC;YACzB,OAAO,IAAI,CACV,EAAE,KAAK,EAAE,kEAAkE,EAAE,EAC7E,GAAG,CACH,CAAA;QACF,CAAC;QACD,OAAO,IAAI,CAAA;IACZ,CAAC;IAED,KAAK,UAAU,IAAI,CAAC,GAAiB;QACpC,IAAI,MAAM,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC;YAC9B,OAAO,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,iBAAsC,EAAE,GAAG,CAAC,CAAA;QAC7E,CAAC;QACD,OAAO,IAAI,CAAA;IACZ,CAAC;IAED,OAAO;QACN,0EAA0E;QAC1E,0BAA0B;QAC1B,wEAAwE;QACxE,yEAAyE;QACzE,0EAA0E;QAC1E,KAAK,CAAC,MAAM,CAAC,GAAiB;YAC7B,MAAM,KAAK,GAAG,gBAAgB,EAAE,CAAA;YAChC,IAAI,KAAK;gBAAE,OAAO,KAAK,CAAA;YACvB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,CAAA;YAC9B,IAAI,MAAM;gBAAE,OAAO,MAAM,CAAA;YAEzB,IAAI,IAAa,CAAA;YACjB,IAAI,CAAC;gBACJ,IAAI,GAAG,MAAM,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,CAAA;YAChC,CAAC;YAAC,MAAM,CAAC;gBACR,OAAO,IAAI,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,EAAE,GAAG,CAAC,CAAA;YAC5C,CAAC;YAED,MAAM,CAAC,GAAG,IAA+B,CAAA;YACzC,MAAM,SAAS,GAAG,CAAC,EAAE,SAAS,CAAA;YAC9B,MAAM,GAAG,GAAG,CAAC,EAAE,GAAG,CAAA;YAElB,IAAI,CAAC,SAAS,IAAI,OAAO,SAAS,KAAK,QAAQ,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,EAAE,CAAC;gBACtE,OAAO,IAAI,CAAC,EAAE,KAAK,EAAE,uBAAuB,EAAE,EAAE,GAAG,CAAC,CAAA;YACrD,CAAC;YACD,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,CAAC;gBACpD,OAAO,IAAI,CAAC,EAAE,KAAK,EAAE,iBAAiB,EAAE,EAAE,GAAG,CAAC,CAAA;YAC/C,CAAC;YAED,4EAA4E;YAC5E,0EAA0E;YAC1E,sDAAsD;YACtD,MAAM,QAAQ,GAAG,kBAAkB,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAA;YAC/C,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;gBAClB,OAAO,IAAI,CAAC,EAAE,KAAK,EAAE,wBAAwB,QAAQ,CAAC,MAAM,EAAE,EAAE,EAAE,GAAG,CAAC,CAAA;YACvE,CAAC;YAED,IAAI,OAAsB,CAAA;YAC1B,IAAI,CAAC;gBACJ,OAAO,GAAG,MAAM,aAAa,CAAC,GAAG,CAAC,EAAE,EAAE;oBACrC,WAAW,EAAE,MAAM,CAAC,WAAW;oBAC/B,SAAS,EAAE,SAAS,CAAC,IAAI,EAAE;oBAC3B,GAAG,EAAE,GAAG,CAAC,IAAI,EAAE;iBACf,CAAC,CAAA;YACH,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACd,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAA;gBAChE,IAAI,OAAO,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,eAAe,CAAC,EAAE,CAAC;oBACrD,OAAO,IAAI,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,GAAG,CAAC,CAAA;gBACrC,CAAC;gBACD,MAAM,GAAG,CAAA;YACV,CAAC;YAED,OAAO,IAAI,CACV;gBACC,EAAE,EAAE,OAAO,CAAC,EAAE;gBACd,WAAW,EAAE,OAAO,CAAC,WAAW;gBAChC,SAAS,EAAE,OAAO,CAAC,SAAS;gBAC5B,GAAG,EAAE,OAAO,CAAC,GAAG;gBAChB,UAAU,EAAE,OAAO,CAAC,UAAU;gBAC9B,WAAW,EAAE,OAAO,CAAC,WAAW;gBAChC,SAAS,EAAE,OAAO,CAAC,SAAS;aAC5B,EACD,GAAG,CACH,CAAA;QACF,CAAC;QAED,0EAA0E;QAC1E,yBAAyB;QACzB,6DAA6D;QAC7D,0EAA0E;QAC1E,KAAK,CAAC,IAAI,CAAC,GAAiB;YAC3B,MAAM,KAAK,GAAG,gBAAgB,EAAE,CAAA;YAChC,IAAI,KAAK;gBAAE,OAAO,KAAK,CAAA;YACvB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,CAAA;YAC9B,IAAI,MAAM;gBAAE,OAAO,MAAM,CAAA;YAEzB,MAAM,QAAQ,GAAG,MAAM,YAAY,CAAC,GAAG,CAAC,EAAE,EAAE,MAAM,CAAC,WAAW,CAAC,CAAA;YAC/D,OAAO,IAAI,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAA;QAC1B,CAAC;QAED,0EAA0E;QAC1E,gCAAgC;QAChC,kCAAkC;QAClC,0EAA0E;QAC1E,KAAK,CAAC,MAAM,CAAC,GAAiB;YAC7B,MAAM,KAAK,GAAG,gBAAgB,EAAE,CAAA;YAChC,IAAI,KAAK;gBAAE,OAAO,KAAK,CAAA;YACvB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,CAAA;YAC9B,IAAI,MAAM;gBAAE,OAAO,MAAM,CAAA;YAEzB,MAAM,EAAE,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,CAAA;YACxB,IAAI,CAAC,EAAE;gBAAE,OAAO,IAAI,CAAC,EAAE,KAAK,EAAE,YAAY,EAAE,EAAE,GAAG,CAAC,CAAA;YAElD,qEAAqE;YACrE,kEAAkE;YAClE,MAAM,aAAa,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,EAAE,MAAM,CAAC,WAAW,CAAC,CAAA;YACnD,OAAO,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAA;QAC9B,CAAC;QAED,0EAA0E;QAC1E,mCAAmC;QACnC,2EAA2E;QAC3E,0EAA0E;QAC1E,4DAA4D;QAC5D,0EAA0E;QAC1E,KAAK,CAAC,IAAI,CAAC,GAAiB;YAC3B,MAAM,KAAK,GAAG,gBAAgB,EAAE,CAAA;YAChC,IAAI,KAAK;gBAAE,OAAO,KAAK,CAAA;YACvB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,CAAA;YAC9B,IAAI,MAAM;gBAAE,OAAO,MAAM,CAAA;YAEzB,MAAM,EAAE,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,CAAA;YACxB,IAAI,CAAC,EAAE;gBAAE,OAAO,IAAI,CAAC,EAAE,KAAK,EAAE,YAAY,EAAE,EAAE,GAAG,CAAC,CAAA;YAElD,+CAA+C;YAC/C,MAAM,IAAI,GAAG,MAAM,YAAY,CAAC,GAAG,CAAC,EAAE,EAAE,MAAM,CAAC,WAAW,CAAC,CAAA;YAC3D,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAA;YAC7C,IAAI,CAAC,OAAO;gBAAE,OAAO,IAAI,CAAC,EAAE,KAAK,EAAE,mBAAmB,EAAE,EAAE,GAAG,CAAC,CAAA;YAE9D,MAAM,QAAQ,GAAG,oBAAoB,CAAC;gBACrC,SAAS,EAAE,cAAc;gBACzB,WAAW,EAAE,MAAM,CAAC,WAAW;gBAC/B,IAAI,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE;aACzC,CAAC,CAAA;YAEF,iEAAiE;YACjE,IAAI,MAAM,CAAC,eAAe,EAAE,CAAC;gBAC5B,IAAI,CAAC;oBACJ,MAAM,MAAM,CAAC,eAAe,CAAC,GAAG,EAAE;wBACjC,SAAS,EAAE,QAAQ,CAAC,KAAK;wBACzB,WAAW,EAAE,QAAQ,CAAC,WAAW;wBACjC,IAAI,EAAE,QAAQ,CAAC,IAAI;qBACnB,CAAC,CAAA;gBACH,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACd,gFAAgF;oBAChF,OAAO,CAAC,KAAK,CAAC,mCAAmC,EAAE,GAAG,CAAC,CAAA;gBACxD,CAAC;YACF,CAAC;YAED,0BAA0B;YAC1B,MAAM,mBAAmB,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,EAAE,MAAM,CAAC,CAAA;YAE7C,OAAO,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,UAAU,EAAE,QAAQ,CAAC,EAAE,EAAE,CAAC,CAAA;QACvD,CAAC;KACD,CAAA;AACF,CAAC"}

package/dist/schema/index.d.ts

@@ -0,0 +1,4 @@
+export { applyMigrations, CMS_MIGRATION_SQL, CMS_MIGRATIONS_0002_PLUS, splitStatements, } from './migrations.js';
+export { CMS_TABLES, type CmsTableName, NON_CMS_TABLES, } from './tables.js';
+export type { ArticleContentRow, AuthorRow, CmsActivityLogRow, CmsApiKeyRow, CmsNotificationRow, CmsRole, CmsWebhookRow, ContentContributorRow, ContentImportRow, ContentItemRow, ContentRelationRow, ContentRevisionRow, ContentSlugRedirectRow, ContentStatus, ContentTagLinkRow, ContentTagRow, ContentType, ContentVisibility, FoundryCallbackEventRow, MastheadUserRow, MediaAssetRow, PodcastContentRow, VideoContentRow, VideoProcessingState, WorkspaceInviteRow, WorkspaceMembershipRow, WorkspaceSettingsRow, } from './types.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/schema/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/schema/index.ts"],"names":[],"mappings":"AAIA,OAAO,EACN,eAAe,EACf,iBAAiB,EACjB,wBAAwB,EACxB,eAAe,GACf,MAAM,iBAAiB,CAAA;AACxB,OAAO,EACN,UAAU,EACV,KAAK,YAAY,EACjB,cAAc,GACd,MAAM,aAAa,CAAA;AAEpB,YAAY,EACX,iBAAiB,EACjB,SAAS,EACT,iBAAiB,EACjB,YAAY,EACZ,kBAAkB,EAClB,OAAO,EACP,aAAa,EACb,qBAAqB,EACrB,gBAAgB,EAChB,cAAc,EACd,kBAAkB,EAClB,kBAAkB,EAClB,sBAAsB,EACtB,aAAa,EACb,iBAAiB,EACjB,aAAa,EACb,WAAW,EACX,iBAAiB,EACjB,uBAAuB,EACvB,eAAe,EACf,aAAa,EACb,iBAAiB,EACjB,eAAe,EACf,oBAAoB,EACpB,kBAAkB,EAClB,sBAAsB,EACtB,oBAAoB,GACpB,MAAM,YAAY,CAAA"}

package/dist/schema/index.js

@@ -0,0 +1,6 @@
+// Public surface of the CMS schema contract: the table list, the row types, and
+// the migration SQL + apply helper. The publishing engine (publisher.ts) is
+// ported in WS7-05 and will build on these types.
+export { applyMigrations, CMS_MIGRATION_SQL, CMS_MIGRATIONS_0002_PLUS, splitStatements, } from './migrations.js';
+export { CMS_TABLES, NON_CMS_TABLES, } from './tables.js';
+//# sourceMappingURL=index.js.map

package/dist/schema/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/schema/index.ts"],"names":[],"mappings":"AAAA,gFAAgF;AAChF,4EAA4E;AAC5E,kDAAkD;AAElD,OAAO,EACN,eAAe,EACf,iBAAiB,EACjB,wBAAwB,EACxB,eAAe,GACf,MAAM,iBAAiB,CAAA;AACxB,OAAO,EACN,UAAU,EAEV,cAAc,GACd,MAAM,aAAa,CAAA"}