@growth-labs/cms 0.1.0

package/dist/schema/types.d.ts

@@ -0,0 +1,476 @@
+/** content_items.type CHECK domain (includes 'newsletter' per prod 0024). */
+export type ContentType = 'article' | 'video' | 'podcast' | 'newsletter';
+/** content_items.status CHECK domain. */
+export type ContentStatus = 'draft' | 'scheduled' | 'review' | 'published' | 'archived';
+/** content_items.visibility CHECK domain. */
+export type ContentVisibility = 'free' | 'premium';
+/** video_content.processing_state CHECK domain (bead 08 state machine). */
+export type VideoProcessingState = 'pending' | 'queued' | 'fetching' | 'transcribing' | 'transcoding' | 'ready' | 'failed';
+/** A core content record. Timestamps are INTEGER unix epoch seconds. */
+export interface ContentItemRow {
+    id: string;
+    type: ContentType;
+    status: ContentStatus;
+    visibility: ContentVisibility;
+    slug: string;
+    title: string;
+    seo_title: string | null;
+    description: string | null;
+    excerpt: string | null;
+    byline: string | null;
+    /** Theme-token taxonomy (site-supplied vocabulary). */
+    channel: string | null;
+    /** Theme-token taxonomy (site-supplied vocabulary). */
+    primary_topic: string | null;
+    featured: number;
+    author_id: string | null;
+    hero_image_id: string | null;
+    hero_image_alt: string | null;
+    hero_image_caption: string | null;
+    social_image_id: string | null;
+    canonical_url: string | null;
+    publish_at: number | null;
+    published_at: number | null;
+    created_at: number;
+    updated_at: number;
+    /** Theme-token default ('Europe/Paris' in prod). */
+    publish_tz: string;
+    /** JSON-encoded string array. */
+    ai_locked_fields: string;
+    published_revision_id: string | null;
+    /** Unix epoch seconds; NULL when not soft-deleted (migration 0002). */
+    deleted_at: number | null;
+    /** Editorial board sort position (migration 0002). */
+    board_position: number | null;
+    /** SEO quality score 0–100 (migration 0004). */
+    seo_score: number | null;
+    /** SEO focus keyword for scoring/hints (migration 0004). */
+    seo_focus_keyword: string | null;
+    /** AI-generated OG image asset id (migration 0004). */
+    ai_og_image_id: string | null;
+}
+/** Standalone topic taxonomy row. Counts are derived from content_items.primary_topic. */
+export interface CmsTopicRow {
+    slug: string;
+    label: string;
+    created_at: number;
+    updated_at: number;
+}
+/** Article body + Hermes-fed takeaways/FAQ metadata (KEPT per OD-EST1). */
+export interface ArticleContentRow {
+    content_id: string;
+    body_markdown: string;
+    body_html: string | null;
+    word_count: number | null;
+    read_time_minutes: number | null;
+    subtitle: string | null;
+    ai_takeaways: string | null;
+    ai_takeaways_at: number | null;
+    ai_takeaways_model: string | null;
+    editor_takeaways: string | null;
+    ai_takeaways_correlation_id: string | null;
+    faq_correlation_id: string | null;
+    faq_generated_at: number | null;
+    faq_model: string | null;
+    /** JSON-encoded FAQ entries (migration 0004). */
+    faq_json: string | null;
+}
+/**
+ * Video body + processing state machine. NOTE the prod column is `video_id`
+ * (renamed from `stream_uid` in migration 0018) — do not reintroduce stream_uid.
+ */
+export interface VideoContentRow {
+    content_id: string;
+    script: string;
+    video_id: string;
+    duration_seconds: number | null;
+    thumbnail_image_id: string | null;
+    processing_state: VideoProcessingState;
+    processing_correlation_id: string | null;
+    processing_started_at: number | null;
+    processing_completed_at: number | null;
+    processing_last_event_at: number | null;
+    processing_error: string | null;
+    processing_source_url: string | null;
+    processing_source_kind: string | null;
+    source_fetched: number;
+    transcript_ready: number;
+    hls_ready: number;
+    transcript_url: string | null;
+    hls_manifest_url: string | null;
+    hls_poster_url: string | null;
+    /** Idempotency token for re-triggering processing (migration 0006). */
+    processing_trigger_token: string | null;
+}
+export interface PodcastContentRow {
+    content_id: string;
+    transcript: string;
+    audio_r2_key: string;
+    duration_seconds: number | null;
+    /** Idempotency token for re-triggering processing (migration 0006). */
+    processing_trigger_token: string | null;
+}
+/** A version-history snapshot. payload_json is a JSON-encoded content payload. */
+export interface ContentRevisionRow {
+    id: string;
+    content_id: string;
+    payload_json: string;
+    created_at: number;
+    created_by: string | null;
+    /** Net word additions vs prior revision (migration 0005). */
+    words_added: number | null;
+    /** Net word removals vs prior revision (migration 0005). */
+    words_removed: number | null;
+    /** Human or autosave label, e.g. 'autosave' | 'manual' | 'restore' (migration 0005). */
+    tag: string | null;
+}
+export interface ContentTagRow {
+    id: string;
+    slug: string;
+    label: string;
+}
+export interface ContentTagLinkRow {
+    content_id: string;
+    tag_id: string;
+}
+export interface ContentRelationRow {
+    content_id: string;
+    related_id: string;
+    rank: number;
+    reason: string | null;
+}
+/**
+ * A media asset. IMPORTANT: created_at/updated_at are TEXT `datetime('now')`
+ * strings here, NOT INTEGER unix seconds like the content tables. This
+ * divergence is intentional and matches prod — do not normalize.
+ */
+export interface MediaAssetRow {
+    id: string;
+    /** Theme-token default ('fronts' in prod). */
+    site_id: string;
+    asset_type: string;
+    source_type: string | null;
+    original_filename: string | null;
+    status: string;
+    object_key: string | null;
+    public_url: string | null;
+    url: string | null;
+    width: number | null;
+    height: number | null;
+    /** JSON-encoded variant map. */
+    variants_json: string | null;
+    r2_binding: string | null;
+    /** TEXT `datetime('now')` — NOT a unix epoch integer. */
+    created_at: string;
+    /** TEXT `datetime('now')` — NOT a unix epoch integer. */
+    updated_at: string;
+    pinned: number;
+}
+/** A CMS author. Timestamps are INTEGER unix seconds (strftime('%s','now')). */
+export interface AuthorRow {
+    id: string;
+    name: string;
+    slug: string;
+    bio: string | null;
+    avatar: string | null;
+    email: string | null;
+    /** JSON-encoded social links. */
+    social: string | null;
+    created_at: number;
+    updated_at: number;
+}
+/** Foundry HMAC-callback dedupe record (takeaways/faq/hls; bead 08). */
+export interface FoundryCallbackEventRow {
+    event_id: string;
+    event_kind: string;
+    correlation_id: string;
+    received_at: number;
+}
+/** Multi-byline contributor record linking authors to content with a role (migration 0003). */
+export interface ContentContributorRow {
+    content_id: string;
+    author_id: string;
+    role: string | null;
+    position: number;
+}
+/** Redirect record mapping old slugs to content items (migration 0007). */
+export interface ContentSlugRedirectRow {
+    old_slug: string;
+    content_id: string;
+    created_at: number;
+}
+/**
+ * Role union for workspace members (migration 0009).
+ * NOTE: this must stay in sync with CmsRole in src/routes/context.ts — one is
+ * re-exported from the other to keep a single source of truth.
+ */
+export type CmsRole = 'owner' | 'senior_editor' | 'editor' | 'contributor' | 'producer';
+/** Per-workspace publication settings (migration 0008). */
+export interface WorkspaceSettingsRow {
+    workspace_id: string;
+    publication_name: string | null;
+    tagline: string | null;
+    language: string;
+    timezone: string;
+    require_review: number;
+    auto_seo: number;
+    scheduled_publish: number;
+    premium_default: number;
+    accent_color: string | null;
+    display_typeface: string | null;
+    logo_r2_key: string | null;
+    created_at: number;
+    updated_at: number;
+}
+/**
+ * Mirror of the OpenAuth subject for profile/name caching (migration 0009).
+ * INTEGER timestamps per content convention (diverges from inbox's TEXT).
+ */
+export interface MastheadUserRow {
+    id: string;
+    email: string;
+    name: string | null;
+    image: string | null;
+    last_login_at: number | null;
+    created_at: number;
+    updated_at: number;
+}
+/** Workspace membership keyed on OpenAuth subject (migration 0009). */
+export interface WorkspaceMembershipRow {
+    workspace_id: string;
+    user_id: string;
+    role: CmsRole;
+    invited_by: string | null;
+    invited_at: number | null;
+    accepted_at: number | null;
+    created_at: number;
+    updated_at: number;
+}
+/** Pending workspace invitation (migration 0009). */
+export interface WorkspaceInviteRow {
+    id: string;
+    workspace_id: string;
+    email: string;
+    role: CmsRole;
+    invited_by: string;
+    token_hash: string;
+    expires_at: number;
+    accepted_at: number | null;
+    created_at: number;
+}
+/**
+ * CMS API key. key_hash is a SHA-256 hex of the raw key. The raw key is
+ * NEVER stored here — only shown once on creation (migration 0010).
+ * key_prefix stores a safe display hint (e.g. 'mk_live_••••ab12') added
+ * in migration 0014 so the masked list can show prefix + last-4 chars.
+ */
+export interface CmsApiKeyRow {
+    id: string;
+    workspace_id: string;
+    name: string;
+    key_hash: string;
+    /** JSON-encoded string array of scope identifiers. */
+    scopes: string;
+    created_at: number;
+    last_used: number | null;
+    /** Display hint: '<prefix>••••<last4>' — stored on create, never the raw key. */
+    key_prefix: string | null;
+}
+/**
+ * Outbound webhook registration. HMAC secret lives in the Secrets Store, NEVER
+ * in D1 (spec §12 + risk 7) — there is deliberately no secret column here
+ * (migration 0010).
+ */
+export interface CmsWebhookRow {
+    id: string;
+    workspace_id: string;
+    event_type: string;
+    url: string;
+    last_status: string | null;
+    last_fired_at: number | null;
+    created_at: number;
+}
+/** In-app notification for a workspace member (migration 0011). */
+export interface CmsNotificationRow {
+    id: string;
+    workspace_id: string;
+    user_id: string;
+    kind: string;
+    body: string | null;
+    read_at: number | null;
+    created_at: number;
+}
+/** Audit/activity log entry (migration 0011). */
+export interface CmsActivityLogRow {
+    id: string;
+    workspace_id: string;
+    user_id: string | null;
+    action: string;
+    target_id: string | null;
+    target_title: string | null;
+    type: string | null;
+    created_at: number;
+}
+/**
+ * Staged import record for content ingested from an external source (e.g.
+ * RSS, Ghost export, Substack). status: 'pending' | 'processing' | 'done' |
+ * 'error'. payload_json holds the raw import data before normalization.
+ */
+export interface ContentImportRow {
+    id: string;
+    workspace_id: string;
+    source: string;
+    status: string;
+    payload_json: string | null;
+    created_at: number;
+}
+/** content_insights.suggestion_type CHECK domain. */
+export type InsightSuggestionType = 'cluster' | 'tracker';
+/** content_insights.signal_type CHECK domain. */
+export type InsightSignalType = 'demand' | 'opportunity';
+/** content_insight_runs.status CHECK domain. */
+export type InsightRunStatus = 'running' | 'completed' | 'partial' | 'failed';
+/** Beat facet — secondary topical facet (geographic theater lives in desk). */
+export type InsightBeat = 'defense' | 'intelligence' | 'diplomacy' | 'analysis';
+/** Demand evidence chip (signal_type='demand'): the real GSC metric. */
+export interface InsightEvidenceDemand {
+    query: string;
+    impressions: number;
+    clicks: number;
+    /** Click-through rate, 0..1. */
+    ctr: number;
+    /** Average GSC position (lower is better; permission zone ~5..20). */
+    position: number;
+    /** Impression delta vs the prior window (signed). */
+    trend: number;
+}
+/** Opportunity evidence chip (signal_type='opportunity'): validated-research basis. */
+export interface InsightEvidenceOpportunity {
+    /** One-line statement of the validated editorial basis. */
+    basis: string;
+    /** Count of cite-or-cut validated sources backing the idea. */
+    source_count: number;
+}
+/** content_insights.evidence — JSON stored as TEXT NOT NULL, zod-validated. */
+export type InsightEvidence = InsightEvidenceDemand | InsightEvidenceOpportunity;
+/** Which open-web discovery stream produced an opportunity row (theater split). */
+export type DiscoveryKind = 'competitor' | 'audience_question';
+/** One recent competitor article — the COMPETITOR-WATCH pulse evidence. */
+export interface InsightCompetitorArticle {
+    title: string;
+    url: string;
+    outlet?: string;
+    published?: string;
+    /** true → the article's topic is already in our pipeline (flagged, NOT dropped). */
+    covered?: boolean;
+}
+/** content_insights.brief — JSON stored as TEXT NOT NULL, zod-validated. */
+export interface InsightBrief {
+    why_now: string;
+    angle: string;
+    cluster: {
+        canonical: string;
+        spokes: string[];
+    };
+    sources: Array<{
+        title: string;
+        url: string;
+    }>;
+    /**
+     * Which open-web discovery STREAM produced this opportunity row (the theater
+     * split): 'competitor' (RSS competitor-watch) vs 'audience_question' (Google
+     * PAA reader questions). Optional + back-compat (an old opportunity row renders
+     * as the legacy single Opportunity stream). Lives in the opaque brief TEXT blob
+     * — no DB migration — but the ingest zod schema MUST mirror it (Zod strips
+     * unknown brief keys), or the board never sees it.
+     */
+    discoveryKind?: DiscoveryKind;
+    /** COMPETITOR-WATCH pulse: the recent rival articles per theater (raw signal). */
+    competitor_articles?: InsightCompetitorArticle[];
+}
+/**
+ * A content_insights row (the suggestion). `evidence` and `brief` are TEXT
+ * columns in D1; this is the DECODED, in-memory shape after JSON.parse +
+ * zod validation. The wire/DB string forms are decoded at the route boundary.
+ */
+export interface ContentInsightRow {
+    id: string;
+    site_id: string;
+    run_id: string;
+    /** YYYY-MM-DD. */
+    run_date: string;
+    /** primary_topic desk slug. */
+    desk: string;
+    suggestion_type: InsightSuggestionType;
+    signal_type: InsightSignalType;
+    /** 0 | 1. */
+    is_best_bet: number;
+    /** Cross-desk Best Bets rank; NULL when not a best bet. */
+    best_bet_rank: number | null;
+    /** Within-desk display order. */
+    desk_rank: number;
+    /** The question/headline. */
+    headline: string;
+    /** Decoded evidence chip (TEXT column in D1). */
+    evidence: InsightEvidence;
+    /** Decoded mini-brief (TEXT column in D1). */
+    brief: InsightBrief;
+    /** Stable dedup/dismissal key — see deriveIntentKey. */
+    intent_key: string;
+    /** Secondary topical facet (geographic theater lives in desk). */
+    beat: InsightBeat | null;
+    /** Unix epoch seconds. */
+    created_at: number;
+}
+/** A content_insight_runs row (per-(site_id, run_date) replay guard, UNIQUE). */
+export interface ContentInsightRunRow {
+    id: string;
+    site_id: string;
+    run_date: string;
+    status: InsightRunStatus;
+    /** Dedupe key (mirrors foundry_callback_events.event_id). */
+    event_id: string;
+    /** Monotonic; the stale-replay guard rejects equal-or-lower. */
+    run_attempt: number;
+    /** Unix epoch seconds the board was generated. */
+    generated_at: number;
+    /** Content hash of the board for change detection. */
+    content_hash: string;
+    demand_count: number;
+    opportunity_count: number;
+    started_at: number | null;
+    completed_at: number | null;
+    error: string | null;
+}
+/** A content_insight_dismissals row (PK (site_id, intent_key)). */
+export interface ContentInsightDismissalRow {
+    site_id: string;
+    intent_key: string;
+    dismissed_at: number;
+    dismissed_by: string | null;
+}
+/**
+ * Schema version for the intent_key derivation. Bump ONLY on a breaking change
+ * to the canonical-cluster-id semantics; bumping rotates every intent_key (and
+ * therefore drops every existing dismissal) so treat as a migration event.
+ */
+export declare const INTENT_KEY_VERSION = 1;
+/** Stable inputs to the intent_key hash. NOT headline-based. */
+export interface IntentKeyInput {
+    /** Canonical cluster/intent id (the stable identity of the topic). */
+    canonicalClusterId: string;
+    /** primary_topic desk slug. */
+    desk: string;
+    signalType: InsightSignalType;
+    /** Defaults to INTENT_KEY_VERSION. */
+    version?: number;
+}
+/**
+ * intent_key = stable hash of (canonicalClusterId + desk + signalType +
+ * version). The canonical string is the lowercased, ''-joined tuple; the
+ * hash is lowercase hex SHA-256 (Web Crypto). BOTH sides MUST derive it
+ * identically — rephrasing a headline must not lose a dismissal, and the same
+ * headline across distinct intents must not collide.
+ */
+export declare function deriveIntentKey(input: IntentKeyInput): Promise<string>;
+//# sourceMappingURL=types.d.ts.map

package/dist/schema/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/schema/types.ts"],"names":[],"mappings":"AAWA,6EAA6E;AAC7E,MAAM,MAAM,WAAW,GAAG,SAAS,GAAG,OAAO,GAAG,SAAS,GAAG,YAAY,CAAA;AAExE,yCAAyC;AACzC,MAAM,MAAM,aAAa,GAAG,OAAO,GAAG,WAAW,GAAG,QAAQ,GAAG,WAAW,GAAG,UAAU,CAAA;AAEvF,6CAA6C;AAC7C,MAAM,MAAM,iBAAiB,GAAG,MAAM,GAAG,SAAS,CAAA;AAElD,2EAA2E;AAC3E,MAAM,MAAM,oBAAoB,GAC7B,SAAS,GACT,QAAQ,GACR,UAAU,GACV,cAAc,GACd,aAAa,GACb,OAAO,GACP,QAAQ,CAAA;AAEX,wEAAwE;AACxE,MAAM,WAAW,cAAc;IAC9B,EAAE,EAAE,MAAM,CAAA;IACV,IAAI,EAAE,WAAW,CAAA;IACjB,MAAM,EAAE,aAAa,CAAA;IACrB,UAAU,EAAE,iBAAiB,CAAA;IAC7B,IAAI,EAAE,MAAM,CAAA;IACZ,KAAK,EAAE,MAAM,CAAA;IACb,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;IACxB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAA;IAC1B,OAAO,EAAE,MAAM,GAAG,IAAI,CAAA;IACtB,MAAM,EAAE,MAAM,GAAG,IAAI,CAAA;IACrB,uDAAuD;IACvD,OAAO,EAAE,MAAM,GAAG,IAAI,CAAA;IACtB,uDAAuD;IACvD,aAAa,EAAE,MAAM,GAAG,IAAI,CAAA;IAC5B,QAAQ,EAAE,MAAM,CAAA;IAChB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;IACxB,aAAa,EAAE,MAAM,GAAG,IAAI,CAAA;IAC5B,cAAc,EAAE,MAAM,GAAG,IAAI,CAAA;IAC7B,kBAAkB,EAAE,MAAM,GAAG,IAAI,CAAA;IACjC,eAAe,EAAE,MAAM,GAAG,IAAI,CAAA;IAC9B,aAAa,EAAE,MAAM,GAAG,IAAI,CAAA;IAC5B,UAAU,EAAE,MAAM,GAAG,IAAI,CAAA;IACzB,YAAY,EAAE,MAAM,GAAG,IAAI,CAAA;IAC3B,UAAU,EAAE,MAAM,CAAA;IAClB,UAAU,EAAE,MAAM,CAAA;IAClB,oDAAoD;IACpD,UAAU,EAAE,MAAM,CAAA;IAClB,iCAAiC;IACjC,gBAAgB,EAAE,MAAM,CAAA;IACxB,qBAAqB,EAAE,MAAM,GAAG,IAAI,CAAA;IACpC,uEAAuE;IACvE,UAAU,EAAE,MAAM,GAAG,IAAI,CAAA;IACzB,sDAAsD;IACtD,cAAc,EAAE,MAAM,GAAG,IAAI,CAAA;IAC7B,gDAAgD;IAChD,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;IACxB,4DAA4D;IAC5D,iBAAiB,EAAE,MAAM,GAAG,IAAI,CAAA;IAChC,uDAAuD;IACvD,cAAc,EAAE,MAAM,GAAG,IAAI,CAAA;CAC7B;AAED,0FAA0F;AAC1F,MAAM,WAAW,WAAW;IAC3B,IAAI,EAAE,MAAM,CAAA;IACZ,KAAK,EAAE,MAAM,CAAA;IACb,UAAU,EAAE,MAAM,CAAA;IAClB,UAAU,EAAE,MAAM,CAAA;CAClB;AAED,2EAA2E;AAC3E,MAAM,WAAW,iBAAiB;IACjC,UAAU,EAAE,MAAM,CAAA;IAClB,aAAa,EAAE,MAAM,CAAA;IACrB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;IACxB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAA;IACzB,iBAAiB,EAAE,MAAM,GAAG,IAAI,CAAA;IAChC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAA;IACvB,YAAY,EAAE,MAAM,GAAG,IAAI,CAAA;IAC3B,eAAe,EAAE,MAAM,GAAG,IAAI,CAAA;IAC9B,kBAAkB,EAAE,MAAM,GAAG,IAAI,CAAA;IACjC,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAA;IAC/B,2BAA2B,EAAE,MAAM,GAAG,IAAI,CAAA;IAC1C,kBAAkB,EAAE,MAAM,GAAG,IAAI,CAAA;IACjC,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAA;IAC/B,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;IACxB,iDAAiD;IACjD,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAA;CACvB;AAED;;;GAGG;AACH,MAAM,WAAW,eAAe;IAC/B,UAAU,EAAE,MAAM,CAAA;IAClB,MAAM,EAAE,MAAM,CAAA;IACd,QAAQ,EAAE,MAAM,CAAA;IAChB,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAA;IAC/B,kBAAkB,EAAE,MAAM,GAAG,IAAI,CAAA;IACjC,gBAAgB,EAAE,oBAAoB,CAAA;IACtC,yBAAyB,EAAE,MAAM,GAAG,IAAI,CAAA;IACxC,qBAAqB,EAAE,MAAM,GAAG,IAAI,CAAA;IACpC,uBAAuB,EAAE,MAAM,GAAG,IAAI,CAAA;IACtC,wBAAwB,EAAE,MAAM,GAAG,IAAI,CAAA;IACvC,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAA;IAC/B,qBAAqB,EAAE,MAAM,GAAG,IAAI,CAAA;IACpC,sBAAsB,EAAE,MAAM,GAAG,IAAI,CAAA;IACrC,cAAc,EAAE,MAAM,CAAA;IACtB,gBAAgB,EAAE,MAAM,CAAA;IACxB,SAAS,EAAE,MAAM,CAAA;IACjB,cAAc,EAAE,MAAM,GAAG,IAAI,CAAA;IAC7B,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAA;IAC/B,cAAc,EAAE,MAAM,GAAG,IAAI,CAAA;IAC7B,uEAAuE;IACvE,wBAAwB,EAAE,MAAM,GAAG,IAAI,CAAA;CACvC;AAED,MAAM,WAAW,iBAAiB;IACjC,UAAU,EAAE,MAAM,CAAA;IAClB,UAAU,EAAE,MAAM,CAAA;IAClB,YAAY,EAAE,MAAM,CAAA;IACpB,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAA;IAC/B,uEAAuE;IACvE,wBAAwB,EAAE,MAAM,GAAG,IAAI,CAAA;CACvC;AAED,kFAAkF;AAClF,MAAM,WAAW,kBAAkB;IAClC,EAAE,EAAE,MAAM,CAAA;IACV,UAAU,EAAE,MAAM,CAAA;IAClB,YAAY,EAAE,MAAM,CAAA;IACpB,UAAU,EAAE,MAAM,CAAA;IAClB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAA;IACzB,6DAA6D;IAC7D,WAAW,EAAE,MAAM,GAAG,IAAI,CAAA;IAC1B,4DAA4D;IAC5D,aAAa,EAAE,MAAM,GAAG,IAAI,CAAA;IAC5B,wFAAwF;IACxF,GAAG,EAAE,MAAM,GAAG,IAAI,CAAA;CAClB;AAED,MAAM,WAAW,aAAa;IAC7B,EAAE,EAAE,MAAM,CAAA;IACV,IAAI,EAAE,MAAM,CAAA;IACZ,KAAK,EAAE,MAAM,CAAA;CACb;AAED,MAAM,WAAW,iBAAiB;IACjC,UAAU,EAAE,MAAM,CAAA;IAClB,MAAM,EAAE,MAAM,CAAA;CACd;AAED,MAAM,WAAW,kBAAkB;IAClC,UAAU,EAAE,MAAM,CAAA;IAClB,UAAU,EAAE,MAAM,CAAA;IAClB,IAAI,EAAE,MAAM,CAAA;IACZ,MAAM,EAAE,MAAM,GAAG,IAAI,CAAA;CACrB;AAED;;;;GAIG;AACH,MAAM,WAAW,aAAa;IAC7B,EAAE,EAAE,MAAM,CAAA;IACV,8CAA8C;IAC9C,OAAO,EAAE,MAAM,CAAA;IACf,UAAU,EAAE,MAAM,CAAA;IAClB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAA;IAC1B,iBAAiB,EAAE,MAAM,GAAG,IAAI,CAAA;IAChC,MAAM,EAAE,MAAM,CAAA;IACd,UAAU,EAAE,MAAM,GAAG,IAAI,CAAA;IACzB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAA;IACzB,GAAG,EAAE,MAAM,GAAG,IAAI,CAAA;IAClB,KAAK,EAAE,MAAM,GAAG,IAAI,CAAA;IACpB,MAAM,EAAE,MAAM,GAAG,IAAI,CAAA;IACrB,gCAAgC;IAChC,aAAa,EAAE,MAAM,GAAG,IAAI,CAAA;IAC5B,UAAU,EAAE,MAAM,GAAG,IAAI,CAAA;IACzB,yDAAyD;IACzD,UAAU,EAAE,MAAM,CAAA;IAClB,yDAAyD;IACzD,UAAU,EAAE,MAAM,CAAA;IAClB,MAAM,EAAE,MAAM,CAAA;CACd;AAED,gFAAgF;AAChF,MAAM,WAAW,SAAS;IACzB,EAAE,EAAE,MAAM,CAAA;IACV,IAAI,EAAE,MAAM,CAAA;IACZ,IAAI,EAAE,MAAM,CAAA;IACZ,GAAG,EAAE,MAAM,GAAG,IAAI,CAAA;IAClB,MAAM,EAAE,MAAM,GAAG,IAAI,CAAA;IACrB,KAAK,EAAE,MAAM,GAAG,IAAI,CAAA;IACpB,iCAAiC;IACjC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAA;IACrB,UAAU,EAAE,MAAM,CAAA;IAClB,UAAU,EAAE,MAAM,CAAA;CAClB;AAED,wEAAwE;AACxE,MAAM,WAAW,uBAAuB;IACvC,QAAQ,EAAE,MAAM,CAAA;IAChB,UAAU,EAAE,MAAM,CAAA;IAClB,cAAc,EAAE,MAAM,CAAA;IACtB,WAAW,EAAE,MAAM,CAAA;CACnB;AAED,+FAA+F;AAC/F,MAAM,WAAW,qBAAqB;IACrC,UAAU,EAAE,MAAM,CAAA;IAClB,SAAS,EAAE,MAAM,CAAA;IACjB,IAAI,EAAE,MAAM,GAAG,IAAI,CAAA;IACnB,QAAQ,EAAE,MAAM,CAAA;CAChB;AAED,2EAA2E;AAC3E,MAAM,WAAW,sBAAsB;IACtC,QAAQ,EAAE,MAAM,CAAA;IAChB,UAAU,EAAE,MAAM,CAAA;IAClB,UAAU,EAAE,MAAM,CAAA;CAClB;AAMD;;;;GAIG;AACH,MAAM,MAAM,OAAO,GAAG,OAAO,GAAG,eAAe,GAAG,QAAQ,GAAG,aAAa,GAAG,UAAU,CAAA;AAEvF,2DAA2D;AAC3D,MAAM,WAAW,oBAAoB;IACpC,YAAY,EAAE,MAAM,CAAA;IACpB,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAA;IAC/B,OAAO,EAAE,MAAM,GAAG,IAAI,CAAA;IACtB,QAAQ,EAAE,MAAM,CAAA;IAChB,QAAQ,EAAE,MAAM,CAAA;IAChB,cAAc,EAAE,MAAM,CAAA;IACtB,QAAQ,EAAE,MAAM,CAAA;IAChB,iBAAiB,EAAE,MAAM,CAAA;IACzB,eAAe,EAAE,MAAM,CAAA;IACvB,YAAY,EAAE,MAAM,GAAG,IAAI,CAAA;IAC3B,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAA;IAC/B,WAAW,EAAE,MAAM,GAAG,IAAI,CAAA;IAC1B,UAAU,EAAE,MAAM,CAAA;IAClB,UAAU,EAAE,MAAM,CAAA;CAClB;AAED;;;GAGG;AACH,MAAM,WAAW,eAAe;IAC/B,EAAE,EAAE,MAAM,CAAA;IACV,KAAK,EAAE,MAAM,CAAA;IACb,IAAI,EAAE,MAAM,GAAG,IAAI,CAAA;IACnB,KAAK,EAAE,MAAM,GAAG,IAAI,CAAA;IACpB,aAAa,EAAE,MAAM,GAAG,IAAI,CAAA;IAC5B,UAAU,EAAE,MAAM,CAAA;IAClB,UAAU,EAAE,MAAM,CAAA;CAClB;AAED,uEAAuE;AACvE,MAAM,WAAW,sBAAsB;IACtC,YAAY,EAAE,MAAM,CAAA;IACpB,OAAO,EAAE,MAAM,CAAA;IACf,IAAI,EAAE,OAAO,CAAA;IACb,UAAU,EAAE,MAAM,GAAG,IAAI,CAAA;IACzB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAA;IACzB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAA;IAC1B,UAAU,EAAE,MAAM,CAAA;IAClB,UAAU,EAAE,MAAM,CAAA;CAClB;AAED,qDAAqD;AACrD,MAAM,WAAW,kBAAkB;IAClC,EAAE,EAAE,MAAM,CAAA;IACV,YAAY,EAAE,MAAM,CAAA;IACpB,KAAK,EAAE,MAAM,CAAA;IACb,IAAI,EAAE,OAAO,CAAA;IACb,UAAU,EAAE,MAAM,CAAA;IAClB,UAAU,EAAE,MAAM,CAAA;IAClB,UAAU,EAAE,MAAM,CAAA;IAClB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAA;IAC1B,UAAU,EAAE,MAAM,CAAA;CAClB;AAED;;;;;GAKG;AACH,MAAM,WAAW,YAAY;IAC5B,EAAE,EAAE,MAAM,CAAA;IACV,YAAY,EAAE,MAAM,CAAA;IACpB,IAAI,EAAE,MAAM,CAAA;IACZ,QAAQ,EAAE,MAAM,CAAA;IAChB,sDAAsD;IACtD,MAAM,EAAE,MAAM,CAAA;IACd,UAAU,EAAE,MAAM,CAAA;IAClB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;IACxB,iFAAiF;IACjF,UAAU,EAAE,MAAM,GAAG,IAAI,CAAA;CACzB;AAED;;;;GAIG;AACH,MAAM,WAAW,aAAa;IAC7B,EAAE,EAAE,MAAM,CAAA;IACV,YAAY,EAAE,MAAM,CAAA;IACpB,UAAU,EAAE,MAAM,CAAA;IAClB,GAAG,EAAE,MAAM,CAAA;IACX,WAAW,EAAE,MAAM,GAAG,IAAI,CAAA;IAC1B,aAAa,EAAE,MAAM,GAAG,IAAI,CAAA;IAC5B,UAAU,EAAE,MAAM,CAAA;CAClB;AAED,mEAAmE;AACnE,MAAM,WAAW,kBAAkB;IAClC,EAAE,EAAE,MAAM,CAAA;IACV,YAAY,EAAE,MAAM,CAAA;IACpB,OAAO,EAAE,MAAM,CAAA;IACf,IAAI,EAAE,MAAM,CAAA;IACZ,IAAI,EAAE,MAAM,GAAG,IAAI,CAAA;IACnB,OAAO,EAAE,MAAM,GAAG,IAAI,CAAA;IACtB,UAAU,EAAE,MAAM,CAAA;CAClB;AAED,iDAAiD;AACjD,MAAM,WAAW,iBAAiB;IACjC,EAAE,EAAE,MAAM,CAAA;IACV,YAAY,EAAE,MAAM,CAAA;IACpB,OAAO,EAAE,MAAM,GAAG,IAAI,CAAA;IACtB,MAAM,EAAE,MAAM,CAAA;IACd,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;IACxB,YAAY,EAAE,MAAM,GAAG,IAAI,CAAA;IAC3B,IAAI,EAAE,MAAM,GAAG,IAAI,CAAA;IACnB,UAAU,EAAE,MAAM,CAAA;CAClB;AAMD;;;;GAIG;AACH,MAAM,WAAW,gBAAgB;IAChC,EAAE,EAAE,MAAM,CAAA;IACV,YAAY,EAAE,MAAM,CAAA;IACpB,MAAM,EAAE,MAAM,CAAA;IACd,MAAM,EAAE,MAAM,CAAA;IACd,YAAY,EAAE,MAAM,GAAG,IAAI,CAAA;IAC3B,UAAU,EAAE,MAAM,CAAA;CAClB;AAyBD,qDAAqD;AACrD,MAAM,MAAM,qBAAqB,GAAG,SAAS,GAAG,SAAS,CAAA;AAEzD,iDAAiD;AACjD,MAAM,MAAM,iBAAiB,GAAG,QAAQ,GAAG,aAAa,CAAA;AAExD,gDAAgD;AAChD,MAAM,MAAM,gBAAgB,GAAG,SAAS,GAAG,WAAW,GAAG,SAAS,GAAG,QAAQ,CAAA;AAE7E,+EAA+E;AAC/E,MAAM,MAAM,WAAW,GAAG,SAAS,GAAG,cAAc,GAAG,WAAW,GAAG,UAAU,CAAA;AAE/E,wEAAwE;AACxE,MAAM,WAAW,qBAAqB;IACrC,KAAK,EAAE,MAAM,CAAA;IACb,WAAW,EAAE,MAAM,CAAA;IACnB,MAAM,EAAE,MAAM,CAAA;IACd,gCAAgC;IAChC,GAAG,EAAE,MAAM,CAAA;IACX,sEAAsE;IACtE,QAAQ,EAAE,MAAM,CAAA;IAChB,qDAAqD;IACrD,KAAK,EAAE,MAAM,CAAA;CACb;AAED,uFAAuF;AACvF,MAAM,WAAW,0BAA0B;IAC1C,2DAA2D;IAC3D,KAAK,EAAE,MAAM,CAAA;IACb,+DAA+D;IAC/D,YAAY,EAAE,MAAM,CAAA;CACpB;AAED,+EAA+E;AAC/E,MAAM,MAAM,eAAe,GAAG,qBAAqB,GAAG,0BAA0B,CAAA;AAEhF,mFAAmF;AACnF,MAAM,MAAM,aAAa,GAAG,YAAY,GAAG,mBAAmB,CAAA;AAE9D,2EAA2E;AAC3E,MAAM,WAAW,wBAAwB;IACxC,KAAK,EAAE,MAAM,CAAA;IACb,GAAG,EAAE,MAAM,CAAA;IACX,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,oFAAoF;IACpF,OAAO,CAAC,EAAE,OAAO,CAAA;CACjB;AAED,4EAA4E;AAC5E,MAAM,WAAW,YAAY;IAC5B,OAAO,EAAE,MAAM,CAAA;IACf,KAAK,EAAE,MAAM,CAAA;IACb,OAAO,EAAE;QACR,SAAS,EAAE,MAAM,CAAA;QACjB,MAAM,EAAE,MAAM,EAAE,CAAA;KAChB,CAAA;IACD,OAAO,EAAE,KAAK,CAAC;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;IAC9C;;;;;;;OAOG;IACH,aAAa,CAAC,EAAE,aAAa,CAAA;IAC7B,kFAAkF;IAClF,mBAAmB,CAAC,EAAE,wBAAwB,EAAE,CAAA;CAChD;AAED;;;;GAIG;AACH,MAAM,WAAW,iBAAiB;IACjC,EAAE,EAAE,MAAM,CAAA;IACV,OAAO,EAAE,MAAM,CAAA;IACf,MAAM,EAAE,MAAM,CAAA;IACd,kBAAkB;IAClB,QAAQ,EAAE,MAAM,CAAA;IAChB,+BAA+B;IAC/B,IAAI,EAAE,MAAM,CAAA;IACZ,eAAe,EAAE,qBAAqB,CAAA;IACtC,WAAW,EAAE,iBAAiB,CAAA;IAC9B,aAAa;IACb,WAAW,EAAE,MAAM,CAAA;IACnB,2DAA2D;IAC3D,aAAa,EAAE,MAAM,GAAG,IAAI,CAAA;IAC5B,iCAAiC;IACjC,SAAS,EAAE,MAAM,CAAA;IACjB,6BAA6B;IAC7B,QAAQ,EAAE,MAAM,CAAA;IAChB,iDAAiD;IACjD,QAAQ,EAAE,eAAe,CAAA;IACzB,8CAA8C;IAC9C,KAAK,EAAE,YAAY,CAAA;IACnB,wDAAwD;IACxD,UAAU,EAAE,MAAM,CAAA;IAClB,kEAAkE;IAClE,IAAI,EAAE,WAAW,GAAG,IAAI,CAAA;IACxB,0BAA0B;IAC1B,UAAU,EAAE,MAAM,CAAA;CAClB;AAED,iFAAiF;AACjF,MAAM,WAAW,oBAAoB;IACpC,EAAE,EAAE,MAAM,CAAA;IACV,OAAO,EAAE,MAAM,CAAA;IACf,QAAQ,EAAE,MAAM,CAAA;IAChB,MAAM,EAAE,gBAAgB,CAAA;IACxB,6DAA6D;IAC7D,QAAQ,EAAE,MAAM,CAAA;IAChB,gEAAgE;IAChE,WAAW,EAAE,MAAM,CAAA;IACnB,kDAAkD;IAClD,YAAY,EAAE,MAAM,CAAA;IACpB,sDAAsD;IACtD,YAAY,EAAE,MAAM,CAAA;IACpB,YAAY,EAAE,MAAM,CAAA;IACpB,iBAAiB,EAAE,MAAM,CAAA;IACzB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAA;IACzB,YAAY,EAAE,MAAM,GAAG,IAAI,CAAA;IAC3B,KAAK,EAAE,MAAM,GAAG,IAAI,CAAA;CACpB;AAED,mEAAmE;AACnE,MAAM,WAAW,0BAA0B;IAC1C,OAAO,EAAE,MAAM,CAAA;IACf,UAAU,EAAE,MAAM,CAAA;IAClB,YAAY,EAAE,MAAM,CAAA;IACpB,YAAY,EAAE,MAAM,GAAG,IAAI,CAAA;CAC3B;AAED;;;;GAIG;AACH,eAAO,MAAM,kBAAkB,IAAI,CAAA;AAEnC,gEAAgE;AAChE,MAAM,WAAW,cAAc;IAC9B,sEAAsE;IACtE,kBAAkB,EAAE,MAAM,CAAA;IAC1B,+BAA+B;IAC/B,IAAI,EAAE,MAAM,CAAA;IACZ,UAAU,EAAE,iBAAiB,CAAA;IAC7B,sCAAsC;IACtC,OAAO,CAAC,EAAE,MAAM,CAAA;CAChB;AAED;;;;;;GAMG;AACH,wBAAsB,eAAe,CAAC,KAAK,EAAE,cAAc,GAAG,OAAO,CAAC,MAAM,CAAC,CAY5E"}

package/dist/schema/types.js

@@ -0,0 +1,37 @@
+// TypeScript row types for the CMS D1 contract.
+//
+// These mirror the prod-verified schema in migrations/0001_create_cms_tables.sql
+// column-for-column, including the deliberate timestamp divergence: content-side
+// tables store INTEGER unix epoch seconds; `media_assets` stores TEXT
+// `datetime('now')` strings. The types encode that divergence so callers cannot
+// silently normalize it.
+//
+// Nullability: a column declared NOT NULL maps to a required, non-nullable
+// field; a nullable column maps to `T | null` (D1 returns SQL NULL as JS null).
+/**
+ * Schema version for the intent_key derivation. Bump ONLY on a breaking change
+ * to the canonical-cluster-id semantics; bumping rotates every intent_key (and
+ * therefore drops every existing dismissal) so treat as a migration event.
+ */
+export const INTENT_KEY_VERSION = 1;
+/**
+ * intent_key = stable hash of (canonicalClusterId + desk + signalType +
+ * version). The canonical string is the lowercased, ''-joined tuple; the
+ * hash is lowercase hex SHA-256 (Web Crypto). BOTH sides MUST derive it
+ * identically — rephrasing a headline must not lose a dismissal, and the same
+ * headline across distinct intents must not collide.
+ */
+export async function deriveIntentKey(input) {
+    const version = input.version ?? INTENT_KEY_VERSION;
+    const canonical = [
+        input.canonicalClusterId.trim().toLowerCase(),
+        input.desk.trim().toLowerCase(),
+        input.signalType,
+        String(version),
+    ].join('');
+    const digest = await crypto.subtle.digest('SHA-256', new TextEncoder().encode(canonical));
+    return Array.from(new Uint8Array(digest))
+        .map((b) => b.toString(16).padStart(2, '0'))
+        .join('');
+}
+//# sourceMappingURL=types.js.map

package/dist/schema/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/schema/types.ts"],"names":[],"mappings":"AAAA,gDAAgD;AAChD,EAAE;AACF,iFAAiF;AACjF,iFAAiF;AACjF,sEAAsE;AACtE,gFAAgF;AAChF,yBAAyB;AACzB,EAAE;AACF,2EAA2E;AAC3E,gFAAgF;AAihBhF;;;;GAIG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAA;AAanC;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,KAAqB;IAC1D,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,IAAI,kBAAkB,CAAA;IACnD,MAAM,SAAS,GAAG;QACjB,KAAK,CAAC,kBAAkB,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE;QAC7C,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE;QAC/B,KAAK,CAAC,UAAU;QAChB,MAAM,CAAC,OAAO,CAAC;KACf,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;IACV,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAA;IACzF,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,UAAU,CAAC,MAAM,CAAC,CAAC;SACvC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;SAC3C,IAAI,CAAC,EAAE,CAAC,CAAA;AACX,CAAC"}

package/dist/ui/api/_authz.d.ts

@@ -0,0 +1,6 @@
+import type { APIContext } from 'astro';
+import { CAPABILITY_MATRIX } from '../../routes/authz-matrix.js';
+import type { Authz } from '../../routes/context.js';
+export declare function buildSiteAuthz(c: APIContext): Authz;
+export { CAPABILITY_MATRIX };
+//# sourceMappingURL=_authz.d.ts.map

package/dist/ui/api/_authz.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"_authz.d.ts","sourceRoot":"","sources":["../../../src/ui/api/_authz.ts"],"names":[],"mappings":"AAgBA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,OAAO,CAAA;AACvC,OAAO,EAAE,iBAAiB,EAAW,MAAM,8BAA8B,CAAA;AACzE,OAAO,KAAK,EAAE,KAAK,EAA8C,MAAM,yBAAyB,CAAA;AAoBhG,wBAAgB,cAAc,CAAC,CAAC,EAAE,UAAU,GAAG,KAAK,CAqDnD;AAQD,OAAO,EAAE,iBAAiB,EAAE,CAAA"}

package/dist/ui/api/_authz.js

@@ -0,0 +1,74 @@
+import { CAPABILITY_MATRIX, roleCan } from '../../routes/authz-matrix.js';
+// Admin-level roles — owner only for destructive/operational gates.
+const ADMIN_ROLES = new Set(['owner']);
+// Publisher-level roles — all 5 roles are workspace members and may publish (within their capability).
+const PUBLISHER_ROLES = new Set([
+    'owner',
+    'senior_editor',
+    'editor',
+    'contributor',
+    'producer',
+]);
+export function buildSiteAuthz(c) {
+    return {
+        requireAdmin(_ctx) {
+            const user = getLocalsUser(c);
+            if (!user || !ADMIN_ROLES.has(user.role ?? '')) {
+                return new Response(JSON.stringify({ error: 'Unauthorized' }), {
+                    status: 401,
+                    headers: { 'Content-Type': 'application/json' },
+                });
+            }
+            return null;
+        },
+        requirePublisher(_ctx) {
+            const user = getLocalsUser(c);
+            if (!user || !PUBLISHER_ROLES.has(user.role ?? '')) {
+                return new Response(JSON.stringify({ error: 'Unauthorized' }), {
+                    status: 401,
+                    headers: { 'Content-Type': 'application/json' },
+                });
+            }
+            return null;
+        },
+        async getUser(_ctx) {
+            const user = getLocalsUser(c);
+            if (!user?.subject)
+                return null;
+            // Only accept valid 5-role values — reject stale 'admin'/'author'/'viewer'.
+            if (!PUBLISHER_ROLES.has(user.role ?? ''))
+                return null;
+            return {
+                subject: user.subject,
+                email: user.email ?? null,
+                role: user.role,
+                name: user.name ?? null,
+            };
+        },
+        requireRole(cap, _ctx) {
+            const user = getLocalsUser(c);
+            if (!user?.subject || !PUBLISHER_ROLES.has(user.role ?? '')) {
+                return new Response(JSON.stringify({ error: 'Unauthorized' }), {
+                    status: 401,
+                    headers: { 'Content-Type': 'application/json' },
+                });
+            }
+            // Resolve via the 5-role capability matrix (supersedes the stale rank map).
+            const role = user.role;
+            if (!roleCan(role, cap)) {
+                return new Response(JSON.stringify({ error: 'Forbidden', required: cap, role }), {
+                    status: 403,
+                    headers: { 'Content-Type': 'application/json' },
+                });
+            }
+            return null;
+        },
+    };
+}
+function getLocalsUser(c) {
+    const locals = c.locals;
+    return locals.user ?? null;
+}
+// Re-export CAPABILITY_MATRIX for convenience (host glue may need it for UI hints).
+export { CAPABILITY_MATRIX };
+//# sourceMappingURL=_authz.js.map

package/dist/ui/api/_authz.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"_authz.js","sourceRoot":"","sources":["../../../src/ui/api/_authz.ts"],"names":[],"mappings":"AAiBA,OAAO,EAAE,iBAAiB,EAAE,OAAO,EAAE,MAAM,8BAA8B,CAAA;AAUzE,oEAAoE;AACpE,MAAM,WAAW,GAAwB,IAAI,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAA;AAC3D,uGAAuG;AACvG,MAAM,eAAe,GAAwB,IAAI,GAAG,CAAC;IACpD,OAAO;IACP,eAAe;IACf,QAAQ;IACR,aAAa;IACb,UAAU;CACV,CAAC,CAAA;AAEF,MAAM,UAAU,cAAc,CAAC,CAAa;IAC3C,OAAO;QACN,YAAY,CAAC,IAAkB;YAC9B,MAAM,IAAI,GAAG,aAAa,CAAC,CAAC,CAAC,CAAA;YAC7B,IAAI,CAAC,IAAI,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,IAAI,EAAE,CAAC,EAAE,CAAC;gBAChD,OAAO,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC,EAAE;oBAC9D,MAAM,EAAE,GAAG;oBACX,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;iBAC/C,CAAC,CAAA;YACH,CAAC;YACD,OAAO,IAAI,CAAA;QACZ,CAAC;QACD,gBAAgB,CAAC,IAAkB;YAClC,MAAM,IAAI,GAAG,aAAa,CAAC,CAAC,CAAC,CAAA;YAC7B,IAAI,CAAC,IAAI,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,IAAI,EAAE,CAAC,EAAE,CAAC;gBACpD,OAAO,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC,EAAE;oBAC9D,MAAM,EAAE,GAAG;oBACX,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;iBAC/C,CAAC,CAAA;YACH,CAAC;YACD,OAAO,IAAI,CAAA;QACZ,CAAC;QACD,KAAK,CAAC,OAAO,CAAC,IAAkB;YAC/B,MAAM,IAAI,GAAG,aAAa,CAAC,CAAC,CAAC,CAAA;YAC7B,IAAI,CAAC,IAAI,EAAE,OAAO;gBAAE,OAAO,IAAI,CAAA;YAC/B,4EAA4E;YAC5E,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,IAAI,EAAE,CAAC;gBAAE,OAAO,IAAI,CAAA;YACtD,OAAO;gBACN,OAAO,EAAE,IAAI,CAAC,OAAO;gBACrB,KAAK,EAAE,IAAI,CAAC,KAAK,IAAI,IAAI;gBACzB,IAAI,EAAE,IAAI,CAAC,IAAe;gBAC1B,IAAI,EAAE,IAAI,CAAC,IAAI,IAAI,IAAI;aACvB,CAAA;QACF,CAAC;QACD,WAAW,CAAC,GAAe,EAAE,IAAkB;YAC9C,MAAM,IAAI,GAAG,aAAa,CAAC,CAAC,CAAC,CAAA;YAC7B,IAAI,CAAC,IAAI,EAAE,OAAO,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,IAAI,EAAE,CAAC,EAAE,CAAC;gBAC7D,OAAO,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC,EAAE;oBAC9D,MAAM,EAAE,GAAG;oBACX,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;iBAC/C,CAAC,CAAA;YACH,CAAC;YACD,4EAA4E;YAC5E,MAAM,IAAI,GAAG,IAAI,CAAC,IAAe,CAAA;YACjC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,EAAE,CAAC;gBACzB,OAAO,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,QAAQ,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,EAAE;oBAChF,MAAM,EAAE,GAAG;oBACX,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;iBAC/C,CAAC,CAAA;YACH,CAAC;YACD,OAAO,IAAI,CAAA;QACZ,CAAC;KACD,CAAA;AACF,CAAC;AAED,SAAS,aAAa,CAAC,CAAa;IACnC,MAAM,MAAM,GAAG,CAAC,CAAC,MAA+B,CAAA;IAChD,OAAO,MAAM,CAAC,IAAI,IAAI,IAAI,CAAA;AAC3B,CAAC;AAED,oFAAoF;AACpF,OAAO,EAAE,iBAAiB,EAAE,CAAA"}

package/dist/ui/api/_content-config.d.ts

@@ -0,0 +1,22 @@
+import type { APIContext } from 'astro';
+import type { ContentRouteConfig } from '../../routes/content.js';
+import type { RouteContext } from '../../routes/context.js';
+/**
+ * Build a RouteContext from an Astro APIContext (with optional route params).
+ * The D1 binding is read from `c.locals.cmsEnv.SITE_DB`.
+ * `bucket` is populated from `cmsEnv.PUBLIC_MEDIA` or `cmsEnv.MEDIA` (R2) so
+ * media routes that need it work without a separate adapter.
+ * `userId` is resolved from the host session (`locals.user.subject`) or the
+ * env sentinel `__identitySubject`, used for `content_revisions.created_by`.
+ * `env` is the full Cloudflare env (used by the foundryCallback for HMAC secret).
+ */
+export declare function toContentCtx(c: APIContext, params?: Record<string, string>): RouteContext;
+/**
+ * Build a ContentRouteConfig from an Astro APIContext.
+ * The site may supply hooks (FoundryDispatch, LlmDispatch, ogRenderer) AND
+ * content lifecycle dispatchers (dispatchTakeaways, dispatchFaq, dispatchWebhook)
+ * via `c.locals.cmsHooks` — the host's integration glue sets these up.
+ * In the default adapter, no hooks are injected (graceful no-op / 501 responses).
+ */
+export declare function toContentConfig(c: APIContext): ContentRouteConfig;
+//# sourceMappingURL=_content-config.d.ts.map

package/dist/ui/api/_content-config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"_content-config.d.ts","sourceRoot":"","sources":["../../../src/ui/api/_content-config.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,OAAO,CAAA;AACvC,OAAO,KAAK,EACX,kBAAkB,EAKlB,MAAM,yBAAyB,CAAA;AAChC,OAAO,KAAK,EAAgB,YAAY,EAAE,MAAM,yBAAyB,CAAA;AAgBzE;;;;;;;;GAQG;AACH,wBAAgB,YAAY,CAAC,CAAC,EAAE,UAAU,EAAE,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,YAAY,CAczF;AAED;;;;;;GAMG;AACH,wBAAgB,eAAe,CAAC,CAAC,EAAE,UAAU,GAAG,kBAAkB,CAejE"}