@growth-labs/cms 0.1.0

package/dist/engine/revisions.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"revisions.d.ts","sourceRoot":"","sources":["../../src/engine/revisions.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,SAAS,CAAA;AAGzC,oFAAoF;AACpF,MAAM,WAAW,sBAAsB;IACtC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IAC7B,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAA;IACvC,IAAI,EAAE,MAAM,EAAE,CAAA;IACd,OAAO,EAAE,KAAK,CAAC;QAAE,UAAU,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,CAAC,CAAA;CAC3E;AAED,MAAM,WAAW,eAAe;IAC/B,EAAE,EAAE,MAAM,CAAA;IACV,SAAS,EAAE,MAAM,CAAA;IACjB,SAAS,EAAE,MAAM,CAAA;IACjB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;IACxB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAA;IACzB,YAAY,EAAE,MAAM,GAAG,IAAI,CAAA;IAC3B,GAAG,EAAE,MAAM,GAAG,IAAI,CAAA;CAClB;AA4BD,6EAA6E;AAC7E,wBAAsB,uBAAuB,CAC5C,EAAE,EAAE,UAAU,EACd,SAAS,EAAE,MAAM,EACjB,IAAI,GAAE;IAAE,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,GAAG,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;CAAO,GAC3D,OAAO,CAAC,eAAe,GAAG,IAAI,CAAC,CAyCjC;AAED,wBAAsB,aAAa,CAAC,EAAE,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,EAAE,CAAC,CAwBjG;AAED,wBAAsB,WAAW,CAChC,EAAE,EAAE,UAAU,EACd,SAAS,EAAE,MAAM,EACjB,UAAU,EAAE,MAAM,GAChB,OAAO,CAAC;IAAE,OAAO,EAAE,eAAe,CAAC;IAAC,OAAO,EAAE,sBAAsB,CAAA;CAAE,GAAG,IAAI,CAAC,CAmC/E;AAED;;;GAGG;AACH,wBAAsB,eAAe,CACpC,EAAE,EAAE,UAAU,EACd,SAAS,EAAE,MAAM,EACjB,UAAU,EAAE,MAAM,EAClB,IAAI,GAAE;IAAE,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;CAAO,GACtC,OAAO,CAAC,OAAO,CAAC,CAiHlB"}

package/dist/engine/revisions.js

@@ -0,0 +1,203 @@
+// Revision engine — createRevisionWithDelta / listRevisions / getRevision / restoreRevision.
+//
+// Backs the History tab (spec §4 "ContentRevisionPayload"). Builds on the
+// existing content_revisions table (0001 baseline) + the 0005 delta columns
+// (words_added, words_removed, tag). Snapshot shape is formalized as
+// ContentRevisionPayload, aligned to getContentSnapshot's output.
+import { countWords, getContentItem, getContentSnapshot, updateContentItem } from './publisher.js';
+function bodyWordCount(payload) {
+    const md = payload?.content && typeof payload.content.body_markdown === 'string'
+        ? payload.content.body_markdown
+        : '';
+    return countWords(md);
+}
+async function latestRevisionPayload(db, contentId) {
+    const row = await db
+        .prepare('SELECT payload_json FROM content_revisions WHERE content_id = ? ORDER BY created_at DESC, rowid DESC LIMIT 1')
+        .bind(contentId)
+        .first();
+    if (!row)
+        return null;
+    try {
+        return JSON.parse(row.payload_json);
+    }
+    catch {
+        return null;
+    }
+}
+/** Snapshot the item now, computing word deltas vs the previous revision. */
+export async function createRevisionWithDelta(db, contentId, opts = {}) {
+    const snapshot = (await getContentSnapshot(db, contentId));
+    if (!snapshot)
+        return null;
+    const prev = await latestRevisionPayload(db, contentId);
+    const prevWc = bodyWordCount(prev);
+    const nextWc = bodyWordCount(snapshot);
+    const wordsAdded = Math.max(0, nextWc - prevWc);
+    const wordsRemoved = Math.max(0, prevWc - nextWc);
+    const id = crypto.randomUUID();
+    await db
+        .prepare('INSERT INTO content_revisions (id, content_id, payload_json, created_at, created_by, words_added, words_removed, tag) VALUES (?, ?, ?, unixepoch(), ?, ?, ?, ?)')
+        .bind(id, contentId, JSON.stringify(snapshot), opts.createdBy ?? null, wordsAdded, wordsRemoved, opts.tag ?? null)
+        .run();
+    // NOTE: this is the autosave/History trigger (fired on a debounce while
+    // editing a draft, and by restoreRevision). It must NOT move
+    // content_items.published_revision_id — that pointer tracks the PUBLISHED
+    // snapshot and is only advanced by the publish path (createRevision in
+    // publisher.ts).
+    const row = await db
+        .prepare('SELECT created_at FROM content_revisions WHERE id = ?')
+        .bind(id)
+        .first();
+    return {
+        id,
+        contentId,
+        createdAt: row?.created_at ?? 0,
+        createdBy: opts.createdBy ?? null,
+        wordsAdded,
+        wordsRemoved,
+        tag: opts.tag ?? null,
+    };
+}
+export async function listRevisions(db, contentId) {
+    const result = await db
+        .prepare('SELECT id, content_id, created_at, created_by, words_added, words_removed, tag FROM content_revisions WHERE content_id = ? ORDER BY created_at DESC, rowid DESC')
+        .bind(contentId)
+        .all();
+    return (result.results || []).map((r) => ({
+        id: r.id,
+        contentId: r.content_id,
+        createdAt: r.created_at,
+        createdBy: r.created_by,
+        wordsAdded: r.words_added,
+        wordsRemoved: r.words_removed,
+        tag: r.tag,
+    }));
+}
+export async function getRevision(db, contentId, revisionId) {
+    const row = await db
+        .prepare('SELECT id, content_id, payload_json, created_at, created_by, words_added, words_removed, tag FROM content_revisions WHERE id = ? AND content_id = ? LIMIT 1')
+        .bind(revisionId, contentId)
+        .first();
+    if (!row)
+        return null;
+    let payload;
+    try {
+        payload = JSON.parse(row.payload_json);
+    }
+    catch {
+        return null;
+    }
+    return {
+        summary: {
+            id: row.id,
+            contentId: row.content_id,
+            createdAt: row.created_at,
+            createdBy: row.created_by,
+            wordsAdded: row.words_added,
+            wordsRemoved: row.words_removed,
+            tag: row.tag,
+        },
+        payload,
+    };
+}
+/**
+ * Restore: replay the revision's item+body+tags+relations through updateContentItem,
+ * then snapshot the restore as a new revision tagged 'restore'.
+ */
+export async function restoreRevision(db, contentId, revisionId, opts = {}) {
+    const target = await getRevision(db, contentId, revisionId);
+    if (!target)
+        return false;
+    const existing = await getContentItem(db, contentId);
+    if (!existing)
+        return false;
+    const item = target.payload.item;
+    const content = target.payload.content;
+    // Map the snapshot's snake_case row back onto the updateContentItem camelCase input.
+    const body = content;
+    // Editor takeaways are stored as a JSON-encoded string array on article_content.
+    // updateContentItem takes them as a string[] via content.editorTakeaways, so
+    // parse the snapshot's stored JSON back into an array for a faithful restore.
+    function parseTakeaways(raw) {
+        if (!raw)
+            return null;
+        try {
+            const parsed = JSON.parse(raw);
+            return Array.isArray(parsed) ? parsed : null;
+        }
+        catch {
+            return null;
+        }
+    }
+    const restoredTakeaways = parseTakeaways(body?.editor_takeaways);
+    // Restore intentionally rolls back CONTENT fields (title/body/tags/relations/
+    // featured/seo/hero/etc.) to the snapshot, but NOT publication state
+    // (status / publish_at / published_at / published_revision_id) — that is by
+    // design: restoring an old draft must not silently re-publish or un-publish.
+    await updateContentItem(db, contentId, {
+        title: item.title ?? existing.title,
+        featured: Boolean(item.featured),
+        seoTitle: item.seo_title ?? null,
+        description: item.description ?? null,
+        excerpt: item.excerpt ?? null,
+        byline: item.byline ?? null,
+        primaryCategory: item.channel ?? null,
+        primaryTopic: item.primary_topic ?? null,
+        visibility: item.visibility ?? existing.visibility,
+        authorId: item.author_id ?? null,
+        heroImageId: item.hero_image_id ?? null,
+        heroImageAlt: item.hero_image_alt ?? null,
+        heroImageCaption: item.hero_image_caption ?? null,
+        socialImageId: item.social_image_id ?? null,
+        canonicalUrl: item.canonical_url ?? null,
+        // SEO focus keyword is part of the snapshot — restore it too.
+        seoFocusKeyword: item.seo_focus_keyword ?? null,
+        tags: target.payload.tags,
+        relations: target.payload.related.map((r) => ({
+            relatedId: r.related_id,
+            rank: r.rank,
+            reason: r.reason,
+        })),
+        content: existing.type === 'article' || existing.type === 'newsletter'
+            ? {
+                bodyMarkdown: body?.body_markdown ?? '',
+                bodyHtml: body?.body_html ?? null,
+                subtitle: body?.subtitle ?? null,
+                // Editor takeaways were captured in the snapshot — roll them back.
+                editorTakeaways: restoredTakeaways,
+            }
+            : existing.type === 'video'
+                ? {
+                    script: body?.script ?? '',
+                    videoId: body?.video_id ?? '',
+                    durationSeconds: body?.duration_seconds ?? null,
+                    thumbnailImageId: body?.thumbnail_image_id ?? null,
+                }
+                : {
+                    transcript: body?.transcript ?? '',
+                    audioR2Key: body?.audio_r2_key ?? '',
+                    durationSeconds: body?.duration_seconds ?? null,
+                },
+    });
+    // updateContentItem does not carry seo_score / ai_og_image_id (these are set
+    // by SEO scoring + AI-OG generation, not the editor form) or faq_json. They
+    // ARE captured in the snapshot, so restore them directly for fidelity — a
+    // restore must reproduce the snapshot, not silently drop SEO/AI metadata.
+    await db
+        .prepare('UPDATE content_items SET seo_score = ?, ai_og_image_id = ?, updated_at = unixepoch() WHERE id = ?')
+        .bind(item.seo_score ?? null, item.ai_og_image_id ?? null, contentId)
+        .run();
+    if (existing.type === 'article' || existing.type === 'newsletter') {
+        await db
+            .prepare('UPDATE article_content SET faq_json = ? WHERE content_id = ?')
+            .bind(body?.faq_json ?? null, contentId)
+            .run();
+    }
+    await createRevisionWithDelta(db, contentId, {
+        createdBy: opts.createdBy ?? null,
+        tag: 'restore',
+    });
+    return true;
+}
+//# sourceMappingURL=revisions.js.map

package/dist/engine/revisions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"revisions.js","sourceRoot":"","sources":["../../src/engine/revisions.ts"],"names":[],"mappings":"AAAA,6FAA6F;AAC7F,EAAE;AACF,0EAA0E;AAC1E,4EAA4E;AAC5E,qEAAqE;AACrE,kEAAkE;AAGlE,OAAO,EAAE,UAAU,EAAE,cAAc,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAA;AAoBlG,SAAS,aAAa,CAAC,OAAsC;IAC5D,MAAM,EAAE,GACP,OAAO,EAAE,OAAO,IAAI,OAAO,OAAO,CAAC,OAAO,CAAC,aAAa,KAAK,QAAQ;QACpE,CAAC,CAAE,OAAO,CAAC,OAAO,CAAC,aAAwB;QAC3C,CAAC,CAAC,EAAE,CAAA;IACN,OAAO,UAAU,CAAC,EAAE,CAAC,CAAA;AACtB,CAAC;AAED,KAAK,UAAU,qBAAqB,CACnC,EAAc,EACd,SAAiB;IAEjB,MAAM,GAAG,GAAG,MAAM,EAAE;SAClB,OAAO,CACP,8GAA8G,CAC9G;SACA,IAAI,CAAC,SAAS,CAAC;SACf,KAAK,EAA4B,CAAA;IACnC,IAAI,CAAC,GAAG;QAAE,OAAO,IAAI,CAAA;IACrB,IAAI,CAAC;QACJ,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,YAAY,CAA2B,CAAA;IAC9D,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,IAAI,CAAA;IACZ,CAAC;AACF,CAAC;AAED,6EAA6E;AAC7E,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC5C,EAAc,EACd,SAAiB,EACjB,OAA2D,EAAE;IAE7D,MAAM,QAAQ,GAAG,CAAC,MAAM,kBAAkB,CAAC,EAAE,EAAE,SAAS,CAAC,CAAkC,CAAA;IAC3F,IAAI,CAAC,QAAQ;QAAE,OAAO,IAAI,CAAA;IAC1B,MAAM,IAAI,GAAG,MAAM,qBAAqB,CAAC,EAAE,EAAE,SAAS,CAAC,CAAA;IACvD,MAAM,MAAM,GAAG,aAAa,CAAC,IAAI,CAAC,CAAA;IAClC,MAAM,MAAM,GAAG,aAAa,CAAC,QAAQ,CAAC,CAAA;IACtC,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC,CAAA;IAC/C,MAAM,YAAY,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC,CAAA;IACjD,MAAM,EAAE,GAAG,MAAM,CAAC,UAAU,EAAE,CAAA;IAC9B,MAAM,EAAE;SACN,OAAO,CACP,iKAAiK,CACjK;SACA,IAAI,CACJ,EAAE,EACF,SAAS,EACT,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,EACxB,IAAI,CAAC,SAAS,IAAI,IAAI,EACtB,UAAU,EACV,YAAY,EACZ,IAAI,CAAC,GAAG,IAAI,IAAI,CAChB;SACA,GAAG,EAAE,CAAA;IACP,wEAAwE;IACxE,6DAA6D;IAC7D,0EAA0E;IAC1E,uEAAuE;IACvE,iBAAiB;IACjB,MAAM,GAAG,GAAG,MAAM,EAAE;SAClB,OAAO,CAAC,uDAAuD,CAAC;SAChE,IAAI,CAAC,EAAE,CAAC;SACR,KAAK,EAA0B,CAAA;IACjC,OAAO;QACN,EAAE;QACF,SAAS;QACT,SAAS,EAAE,GAAG,EAAE,UAAU,IAAI,CAAC;QAC/B,SAAS,EAAE,IAAI,CAAC,SAAS,IAAI,IAAI;QACjC,UAAU;QACV,YAAY;QACZ,GAAG,EAAE,IAAI,CAAC,GAAG,IAAI,IAAI;KACrB,CAAA;AACF,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,EAAc,EAAE,SAAiB;IACpE,MAAM,MAAM,GAAG,MAAM,EAAE;SACrB,OAAO,CACP,iKAAiK,CACjK;SACA,IAAI,CAAC,SAAS,CAAC;SACf,GAAG,EAQA,CAAA;IACL,OAAO,CAAC,MAAM,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACzC,EAAE,EAAE,CAAC,CAAC,EAAE;QACR,SAAS,EAAE,CAAC,CAAC,UAAU;QACvB,SAAS,EAAE,CAAC,CAAC,UAAU;QACvB,SAAS,EAAE,CAAC,CAAC,UAAU;QACvB,UAAU,EAAE,CAAC,CAAC,WAAW;QACzB,YAAY,EAAE,CAAC,CAAC,aAAa;QAC7B,GAAG,EAAE,CAAC,CAAC,GAAG;KACV,CAAC,CAAC,CAAA;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,WAAW,CAChC,EAAc,EACd,SAAiB,EACjB,UAAkB;IAElB,MAAM,GAAG,GAAG,MAAM,EAAE;SAClB,OAAO,CACP,6JAA6J,CAC7J;SACA,IAAI,CAAC,UAAU,EAAE,SAAS,CAAC;SAC3B,KAAK,EASF,CAAA;IACL,IAAI,CAAC,GAAG;QAAE,OAAO,IAAI,CAAA;IACrB,IAAI,OAA+B,CAAA;IACnC,IAAI,CAAC;QACJ,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,YAAY,CAA2B,CAAA;IACjE,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,IAAI,CAAA;IACZ,CAAC;IACD,OAAO;QACN,OAAO,EAAE;YACR,EAAE,EAAE,GAAG,CAAC,EAAE;YACV,SAAS,EAAE,GAAG,CAAC,UAAU;YACzB,SAAS,EAAE,GAAG,CAAC,UAAU;YACzB,SAAS,EAAE,GAAG,CAAC,UAAU;YACzB,UAAU,EAAE,GAAG,CAAC,WAAW;YAC3B,YAAY,EAAE,GAAG,CAAC,aAAa;YAC/B,GAAG,EAAE,GAAG,CAAC,GAAG;SACZ;QACD,OAAO;KACP,CAAA;AACF,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CACpC,EAAc,EACd,SAAiB,EACjB,UAAkB,EAClB,OAAsC,EAAE;IAExC,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,EAAE,EAAE,SAAS,EAAE,UAAU,CAAC,CAAA;IAC3D,IAAI,CAAC,MAAM;QAAE,OAAO,KAAK,CAAA;IACzB,MAAM,QAAQ,GAAG,MAAM,cAAc,CAAC,EAAE,EAAE,SAAS,CAAC,CAAA;IACpD,IAAI,CAAC,QAAQ;QAAE,OAAO,KAAK,CAAA;IAC3B,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,CAAC,IAA+B,CAAA;IAC3D,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,OAAyC,CAAA;IACxE,qFAAqF;IACrF,MAAM,IAAI,GAAG,OAYL,CAAA;IAER,iFAAiF;IACjF,6EAA6E;IAC7E,8EAA8E;IAC9E,SAAS,cAAc,CAAC,GAA8B;QACrD,IAAI,CAAC,GAAG;YAAE,OAAO,IAAI,CAAA;QACrB,IAAI,CAAC;YACJ,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;YAC9B,OAAO,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAE,MAAmB,CAAC,CAAC,CAAC,IAAI,CAAA;QAC3D,CAAC;QAAC,MAAM,CAAC;YACR,OAAO,IAAI,CAAA;QACZ,CAAC;IACF,CAAC;IACD,MAAM,iBAAiB,GAAG,cAAc,CAAC,IAAI,EAAE,gBAAgB,CAAC,CAAA;IAChE,8EAA8E;IAC9E,qEAAqE;IACrE,4EAA4E;IAC5E,6EAA6E;IAC7E,MAAM,iBAAiB,CAAC,EAAE,EAAE,SAAS,EAAE;QACtC,KAAK,EAAG,IAAI,CAAC,KAAgB,IAAI,QAAQ,CAAC,KAAK;QAC/C,QAAQ,EAAE,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC;QAChC,QAAQ,EAAG,IAAI,CAAC,SAA2B,IAAI,IAAI;QACnD,WAAW,EAAG,IAAI,CAAC,WAA6B,IAAI,IAAI;QACxD,OAAO,EAAG,IAAI,CAAC,OAAyB,IAAI,IAAI;QAChD,MAAM,EAAG,IAAI,CAAC,MAAwB,IAAI,IAAI;QAC9C,eAAe,EAAG,IAAI,CAAC,OAAyB,IAAI,IAAI;QACxD,YAAY,EAAG,IAAI,CAAC,aAA+B,IAAI,IAAI;QAC3D,UAAU,EAAG,IAAI,CAAC,UAAiC,IAAI,QAAQ,CAAC,UAAU;QAC1E,QAAQ,EAAG,IAAI,CAAC,SAA2B,IAAI,IAAI;QACnD,WAAW,EAAG,IAAI,CAAC,aAA+B,IAAI,IAAI;QAC1D,YAAY,EAAG,IAAI,CAAC,cAAgC,IAAI,IAAI;QAC5D,gBAAgB,EAAG,IAAI,CAAC,kBAAoC,IAAI,IAAI;QACpE,aAAa,EAAG,IAAI,CAAC,eAAiC,IAAI,IAAI;QAC9D,YAAY,EAAG,IAAI,CAAC,aAA+B,IAAI,IAAI;QAC3D,8DAA8D;QAC9D,eAAe,EAAG,IAAI,CAAC,iBAAmC,IAAI,IAAI;QAClE,IAAI,EAAE,MAAM,CAAC,OAAO,CAAC,IAAI;QACzB,SAAS,EAAE,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YAC7C,SAAS,EAAE,CAAC,CAAC,UAAU;YACvB,IAAI,EAAE,CAAC,CAAC,IAAI;YACZ,MAAM,EAAE,CAAC,CAAC,MAAM;SAChB,CAAC,CAAC;QACH,OAAO,EACN,QAAQ,CAAC,IAAI,KAAK,SAAS,IAAI,QAAQ,CAAC,IAAI,KAAK,YAAY;YAC5D,CAAC,CAAC;gBACA,YAAY,EAAE,IAAI,EAAE,aAAa,IAAI,EAAE;gBACvC,QAAQ,EAAE,IAAI,EAAE,SAAS,IAAI,IAAI;gBACjC,QAAQ,EAAE,IAAI,EAAE,QAAQ,IAAI,IAAI;gBAChC,mEAAmE;gBACnE,eAAe,EAAE,iBAAiB;aAClC;YACF,CAAC,CAAC,QAAQ,CAAC,IAAI,KAAK,OAAO;gBAC1B,CAAC,CAAC;oBACA,MAAM,EAAE,IAAI,EAAE,MAAM,IAAI,EAAE;oBAC1B,OAAO,EAAE,IAAI,EAAE,QAAQ,IAAI,EAAE;oBAC7B,eAAe,EAAE,IAAI,EAAE,gBAAgB,IAAI,IAAI;oBAC/C,gBAAgB,EAAE,IAAI,EAAE,kBAAkB,IAAI,IAAI;iBAClD;gBACF,CAAC,CAAC;oBACA,UAAU,EAAE,IAAI,EAAE,UAAU,IAAI,EAAE;oBAClC,UAAU,EAAE,IAAI,EAAE,YAAY,IAAI,EAAE;oBACpC,eAAe,EAAE,IAAI,EAAE,gBAAgB,IAAI,IAAI;iBAC/C;KACL,CAAC,CAAA;IAEF,6EAA6E;IAC7E,4EAA4E;IAC5E,0EAA0E;IAC1E,0EAA0E;IAC1E,MAAM,EAAE;SACN,OAAO,CACP,mGAAmG,CACnG;SACA,IAAI,CACH,IAAI,CAAC,SAA2B,IAAI,IAAI,EACxC,IAAI,CAAC,cAAgC,IAAI,IAAI,EAC9C,SAAS,CACT;SACA,GAAG,EAAE,CAAA;IAEP,IAAI,QAAQ,CAAC,IAAI,KAAK,SAAS,IAAI,QAAQ,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;QACnE,MAAM,EAAE;aACN,OAAO,CAAC,8DAA8D,CAAC;aACvE,IAAI,CAAC,IAAI,EAAE,QAAQ,IAAI,IAAI,EAAE,SAAS,CAAC;aACvC,GAAG,EAAE,CAAA;IACR,CAAC;IAED,MAAM,uBAAuB,CAAC,EAAE,EAAE,SAAS,EAAE;QAC5C,SAAS,EAAE,IAAI,CAAC,SAAS,IAAI,IAAI;QACjC,GAAG,EAAE,SAAS;KACd,CAAC,CAAA;IACF,OAAO,IAAI,CAAA;AACZ,CAAC"}

package/dist/engine/sanitize.d.ts

@@ -0,0 +1,52 @@
+/**
+ * Phase 1 strip: drop the leading backslash before any character that
+ * is not a legitimate markdown escape. Mirror of
+ * {@link checkBackslashOverEscape}'s detector.
+ *
+ * Also drops HTML-entity-encoded backslashes (`\`, `\`,
+ * `\`) that bypass the literal-backslash strip.
+ */
+export declare function stripOverEscapes(value: string): string;
+/**
+ * Phase 1 strip (heading-scoped): decode HTML entities only inside
+ * heading lines. Entities inside paragraph prose are intentionally
+ * left alone — they're sometimes part of legitimate publication
+ * names (`Tools & Trade`).
+ */
+export declare function decodeHeadingEntities(value: string): string;
+export interface SanitizeOptions {
+    /**
+     * When true, the speaker-aware passes leave podcast/video speaker
+     * prefixes alone. Default true (the safe option for all callers).
+     */
+    preserveSpeakerPrefixes: boolean;
+}
+export declare const DEFAULT_SANITIZE_OPTIONS: SanitizeOptions;
+/**
+ * Phase 2 strip composition. Order matters in a few places — see the
+ * inline comments. The composition is idempotent.
+ *
+ * Order:
+ *   1. Word/Gdocs paste artifacts (strip BEFORE we look for HTML
+ *      comments, because Word paste residue is itself a comment).
+ *   2. HTML comment leak (whitelisted-only).
+ *   3. Paywall marker leak (defensive — even though the splitter
+ *      should have eaten these already).
+ *   4. Double-encoded entities (`"` → `"` — must run
+ *      BEFORE the heading entity decode so it sees the decoded form).
+ *   5. Backslash over-escape (Phase 1 strip). CODE-AWARE: fenced and
+ *      inline code regions are protected.
+ *   6. Heading-entity decode (Phase 1 strip).
+ *   7. Broken footnote label `[[N]](#a)` → `[N](#a)`.
+ *   8. Invisible control chars (last — they're invisible in raw text
+ *      so order vs other passes doesn't matter, but doing it last
+ *      means subsequent regex passes can't get tripped up by them).
+ *   9. `<br>` lines → blank line (raw-block-html repair).
+ */
+export declare function sanitizeBody(value: string, _options?: SanitizeOptions): string;
+/**
+ * Convenience export — the renderer side of the same module. Returns
+ * the input cleaned via every pass once.
+ */
+export declare const sanitize: typeof sanitizeBody;
+//# sourceMappingURL=sanitize.d.ts.map

package/dist/engine/sanitize.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sanitize.d.ts","sourceRoot":"","sources":["../../src/engine/sanitize.ts"],"names":[],"mappings":"AAwCA;;;;;;;GAOG;AACH,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAOtD;AAED;;;;;GAKG;AACH,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAmB3D;AAMD,MAAM,WAAW,eAAe;IAC/B;;;OAGG;IACH,uBAAuB,EAAE,OAAO,CAAA;CAChC;AAED,eAAO,MAAM,wBAAwB,EAAE,eAEtC,CAAA;AAED;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,wBAAgB,YAAY,CAC3B,KAAK,EAAE,MAAM,EACb,QAAQ,GAAE,eAA0C,GAClD,MAAM,CAYR;AA0CD;;;GAGG;AACH,eAAO,MAAM,QAAQ,qBAAe,CAAA"}

package/dist/engine/sanitize.js

@@ -0,0 +1,155 @@
+/**
+ * sanitize.ts
+ *
+ * Shared L2 sanitization passes that run AFTER the validator has emitted
+ * its report. A site's renderers (article, podcast, video) consume these
+ * so they never drift on what counts as "safe stored body".
+ *
+ * Ported verbatim from fulcrum-labs/fronts src/lib/content-sanitize.ts
+ * (inventory §1: extract — the sanitize helper). Each pass is pure and
+ * composable; the default {@link sanitizeBody} orchestration is
+ * idempotent. It reuses the validator checks' `repair` functions so the
+ * detector and the fixer can never diverge.
+ *
+ * Negative invariants:
+ *  - Fenced code blocks are preserved unchanged.
+ *  - Inline code spans are preserved unchanged.
+ *  - URLs inside `[label](url)` are preserved unchanged.
+ *  - Podcast/video speaker prefixes (`Alice:`, `[00:01:23] Bob:`) are
+ *    preserved unchanged — no pass strips the colon or numeric label.
+ *  - Legitimate markdown escapes (`\*emphasis\*`, `\[brackets\]`) are
+ *    preserved unchanged.
+ */
+import { repair as repairBrokenFootnoteLabel } from './validator/checks/broken-footnote-label.js';
+import { repair as repairDoubleEncodedEntities } from './validator/checks/double-encoded-entities.js';
+import { repair as repairHtmlCommentLeak } from './validator/checks/html-comment-leak.js';
+import { repair as repairInvisibleControl } from './validator/checks/invisible-control-chars.js';
+import { repair as repairPaywallMarker } from './validator/checks/paywall-marker-leak.js';
+import { repair as repairRawBlockHtml } from './validator/checks/raw-block-html.js';
+import { repair as repairWordGdocs } from './validator/checks/word-gdocs-paste-artifacts.js';
+/* -------------------------------------------------------------------------- */
+/*                              Mirror with validator                         */
+/* -------------------------------------------------------------------------- */
+/**
+ * Mirror of the legit-escape set in `./validator/index.ts`. If you
+ * change one, change the other.
+ */
+const LEGIT_ESCAPE_CHARS = '*_[]{}|`#+!>\\-';
+/**
+ * Phase 1 strip: drop the leading backslash before any character that
+ * is not a legitimate markdown escape. Mirror of
+ * {@link checkBackslashOverEscape}'s detector.
+ *
+ * Also drops HTML-entity-encoded backslashes (`\`, `\`,
+ * `\`) that bypass the literal-backslash strip.
+ */
+export function stripOverEscapes(value) {
+    const literal = value.replace(/\\(.)/g, (match, ch) => LEGIT_ESCAPE_CHARS.includes(ch) ? match : ch);
+    return literal.replace(/(?:\|&#x5[Cc];|\)(.)/g, (match, ch) => LEGIT_ESCAPE_CHARS.includes(ch) ? match : ch);
+}
+/**
+ * Phase 1 strip (heading-scoped): decode HTML entities only inside
+ * heading lines. Entities inside paragraph prose are intentionally
+ * left alone — they're sometimes part of legitimate publication
+ * names (`Tools & Trade`).
+ */
+export function decodeHeadingEntities(value) {
+    const ENTITY_MAP = {
+        '"': '"',
+        ''': "'",
+        ''': "'",
+        '&': '&',
+        '&lt;': '<',
+        '&gt;': '>',
+    };
+    return value
+        .split('\n')
+        .map((line) => {
+        if (!/^\s*#{1,6}\s+/.test(line))
+            return line;
+        return line.replace(/&(?:quot|apos|amp|lt|gt|#\d+);/g, (entity) => ENTITY_MAP[entity] ?? entity);
+    })
+        .join('\n');
+}
+export const DEFAULT_SANITIZE_OPTIONS = {
+    preserveSpeakerPrefixes: true,
+};
+/**
+ * Phase 2 strip composition. Order matters in a few places — see the
+ * inline comments. The composition is idempotent.
+ *
+ * Order:
+ *   1. Word/Gdocs paste artifacts (strip BEFORE we look for HTML
+ *      comments, because Word paste residue is itself a comment).
+ *   2. HTML comment leak (whitelisted-only).
+ *   3. Paywall marker leak (defensive — even though the splitter
+ *      should have eaten these already).
+ *   4. Double-encoded entities (`&amp;quot;` → `&quot;` — must run
+ *      BEFORE the heading entity decode so it sees the decoded form).
+ *   5. Backslash over-escape (Phase 1 strip). CODE-AWARE: fenced and
+ *      inline code regions are protected.
+ *   6. Heading-entity decode (Phase 1 strip).
+ *   7. Broken footnote label `[[N]](#a)` → `[N](#a)`.
+ *   8. Invisible control chars (last — they're invisible in raw text
+ *      so order vs other passes doesn't matter, but doing it last
+ *      means subsequent regex passes can't get tripped up by them).
+ *   9. `<br>` lines → blank line (raw-block-html repair).
+ */
+export function sanitizeBody(value, _options = DEFAULT_SANITIZE_OPTIONS) {
+    let out = value;
+    out = repairWordGdocs(out);
+    out = repairHtmlCommentLeak(out);
+    out = repairPaywallMarker(out);
+    out = repairDoubleEncodedEntities(out);
+    out = stripOverEscapesPreservingCode(out);
+    out = decodeHeadingEntities(out);
+    out = repairBrokenFootnoteLabel(out);
+    out = repairInvisibleControl(out);
+    out = repairRawBlockHtml(out);
+    return out;
+}
+/**
+ * Code-aware variant of {@link stripOverEscapes}. Fenced (` ``` `) and
+ * inline (` ` `) code regions are extracted, the strip runs on the
+ * surrounding prose, and the code regions are spliced back in
+ * verbatim. This preserves intentional escape sequences in code
+ * examples (`'\, \.'` etc.) while still cleaning prose.
+ */
+function stripOverEscapesPreservingCode(value) {
+    const segments = [];
+    const fenceRe = /(^|\n)([ \t]*)(`{3,}|~{3,})[^\n]*\n[\s\S]*?\n\2\3/g;
+    const inlineRe = /`[^`\n]+`/g;
+    const protectedSpans = [];
+    for (const m of value.matchAll(fenceRe)) {
+        protectedSpans.push({
+            start: m.index ?? 0,
+            end: (m.index ?? 0) + m[0].length,
+        });
+    }
+    for (const m of value.matchAll(inlineRe)) {
+        const start = m.index ?? 0;
+        const end = start + m[0].length;
+        if (protectedSpans.some((s) => start >= s.start && end <= s.end))
+            continue;
+        protectedSpans.push({ start, end });
+    }
+    protectedSpans.sort((a, b) => a.start - b.start);
+    let cursor = 0;
+    for (const span of protectedSpans) {
+        if (span.start > cursor) {
+            segments.push({ kind: 'prose', text: value.slice(cursor, span.start) });
+        }
+        segments.push({ kind: 'code', text: value.slice(span.start, span.end) });
+        cursor = span.end;
+    }
+    if (cursor < value.length) {
+        segments.push({ kind: 'prose', text: value.slice(cursor) });
+    }
+    return segments.map((s) => (s.kind === 'prose' ? stripOverEscapes(s.text) : s.text)).join('');
+}
+/**
+ * Convenience export — the renderer side of the same module. Returns
+ * the input cleaned via every pass once.
+ */
+export const sanitize = sanitizeBody;
+//# sourceMappingURL=sanitize.js.map

package/dist/engine/sanitize.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sanitize.js","sourceRoot":"","sources":["../../src/engine/sanitize.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,OAAO,EAAE,MAAM,IAAI,yBAAyB,EAAE,MAAM,6CAA6C,CAAA;AACjG,OAAO,EAAE,MAAM,IAAI,2BAA2B,EAAE,MAAM,+CAA+C,CAAA;AACrG,OAAO,EAAE,MAAM,IAAI,qBAAqB,EAAE,MAAM,yCAAyC,CAAA;AACzF,OAAO,EAAE,MAAM,IAAI,sBAAsB,EAAE,MAAM,+CAA+C,CAAA;AAChG,OAAO,EAAE,MAAM,IAAI,mBAAmB,EAAE,MAAM,2CAA2C,CAAA;AACzF,OAAO,EAAE,MAAM,IAAI,kBAAkB,EAAE,MAAM,sCAAsC,CAAA;AACnF,OAAO,EAAE,MAAM,IAAI,eAAe,EAAE,MAAM,kDAAkD,CAAA;AAE5F,gFAAgF;AAChF,gFAAgF;AAChF,gFAAgF;AAEhF;;;GAGG;AACH,MAAM,kBAAkB,GAAG,iBAAiB,CAAA;AAE5C;;;;;;;GAOG;AACH,MAAM,UAAU,gBAAgB,CAAC,KAAa;IAC7C,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,KAAK,EAAE,EAAU,EAAE,EAAE,CAC7D,kBAAkB,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAC5C,CAAA;IACD,OAAO,OAAO,CAAC,OAAO,CAAC,gCAAgC,EAAE,CAAC,KAAK,EAAE,EAAU,EAAE,EAAE,CAC9E,kBAAkB,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAC5C,CAAA;AACF,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,qBAAqB,CAAC,KAAa;IAClD,MAAM,UAAU,GAA2B;QAC1C,QAAQ,EAAE,GAAG;QACb,QAAQ,EAAE,GAAG;QACb,OAAO,EAAE,GAAG;QACZ,OAAO,EAAE,GAAG;QACZ,MAAM,EAAE,GAAG;QACX,MAAM,EAAE,GAAG;KACX,CAAA;IACD,OAAO,KAAK;SACV,KAAK,CAAC,IAAI,CAAC;SACX,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;QACb,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,OAAO,IAAI,CAAA;QAC5C,OAAO,IAAI,CAAC,OAAO,CAClB,iCAAiC,EACjC,CAAC,MAAM,EAAE,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,MAAM,CACxC,CAAA;IACF,CAAC,CAAC;SACD,IAAI,CAAC,IAAI,CAAC,CAAA;AACb,CAAC;AAcD,MAAM,CAAC,MAAM,wBAAwB,GAAoB;IACxD,uBAAuB,EAAE,IAAI;CAC7B,CAAA;AAED;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,UAAU,YAAY,CAC3B,KAAa,EACb,WAA4B,wBAAwB;IAEpD,IAAI,GAAG,GAAG,KAAK,CAAA;IACf,GAAG,GAAG,eAAe,CAAC,GAAG,CAAC,CAAA;IAC1B,GAAG,GAAG,qBAAqB,CAAC,GAAG,CAAC,CAAA;IAChC,GAAG,GAAG,mBAAmB,CAAC,GAAG,CAAC,CAAA;IAC9B,GAAG,GAAG,2BAA2B,CAAC,GAAG,CAAC,CAAA;IACtC,GAAG,GAAG,8BAA8B,CAAC,GAAG,CAAC,CAAA;IACzC,GAAG,GAAG,qBAAqB,CAAC,GAAG,CAAC,CAAA;IAChC,GAAG,GAAG,yBAAyB,CAAC,GAAG,CAAC,CAAA;IACpC,GAAG,GAAG,sBAAsB,CAAC,GAAG,CAAC,CAAA;IACjC,GAAG,GAAG,kBAAkB,CAAC,GAAG,CAAC,CAAA;IAC7B,OAAO,GAAG,CAAA;AACX,CAAC;AAED;;;;;;GAMG;AACH,SAAS,8BAA8B,CAAC,KAAa;IACpD,MAAM,QAAQ,GAAoD,EAAE,CAAA;IACpE,MAAM,OAAO,GAAG,oDAAoD,CAAA;IACpE,MAAM,QAAQ,GAAG,YAAY,CAAA;IAE7B,MAAM,cAAc,GAAW,EAAE,CAAA;IACjC,KAAK,MAAM,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;QACzC,cAAc,CAAC,IAAI,CAAC;YACnB,KAAK,EAAE,CAAC,CAAC,KAAK,IAAI,CAAC;YACnB,GAAG,EAAE,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM;SACjC,CAAC,CAAA;IACH,CAAC;IACD,KAAK,MAAM,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC1C,MAAM,KAAK,GAAG,CAAC,CAAC,KAAK,IAAI,CAAC,CAAA;QAC1B,MAAM,GAAG,GAAG,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAA;QAC/B,IAAI,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,IAAI,CAAC,CAAC,KAAK,IAAI,GAAG,IAAI,CAAC,CAAC,GAAG,CAAC;YAAE,SAAQ;QAC1E,cAAc,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAA;IACpC,CAAC;IACD,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,CAAA;IAChD,IAAI,MAAM,GAAG,CAAC,CAAA;IACd,KAAK,MAAM,IAAI,IAAI,cAAc,EAAE,CAAC;QACnC,IAAI,IAAI,CAAC,KAAK,GAAG,MAAM,EAAE,CAAC;YACzB,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,CAAC,KAAK,CAAC,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAA;QACxE,CAAC;QACD,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;QACxE,MAAM,GAAG,IAAI,CAAC,GAAG,CAAA;IAClB,CAAC;IACD,IAAI,MAAM,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC;QAC3B,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,CAAA;IAC5D,CAAC;IACD,OAAO,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,KAAK,OAAO,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;AAC9F,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,MAAM,QAAQ,GAAG,YAAY,CAAA"}

package/dist/engine/seed-membership.d.ts

@@ -0,0 +1,29 @@
+import type { CmsRole } from '../schema/types.js';
+import type { D1Database } from './d1.js';
+export interface SeedMembershipInput {
+    workspaceId: string;
+    /**
+     * The REAL OpenAuth subject from the Fulcrum issuer — MUST start with
+     * 'user:'. Never pass a locally-minted or placeholder id here.
+     */
+    subject: string;
+    email: string;
+    name: string | null;
+    role: CmsRole;
+}
+/**
+ * Seed a workspace membership from a known real OpenAuth subject.
+ *
+ * Validates that the subject starts with 'user:' (rejects placeholder ids).
+ * Upserts `masthead_users` (id = subject) and `workspace_memberships` with
+ * `accepted_at` set — a seeded member is pre-accepted (no invite required).
+ *
+ * Idempotent: safe to run multiple times; the second call updates in place.
+ *
+ * Throws if:
+ *   - subject does not start with 'user:' (placeholder guard)
+ *   - a different id already holds the same email (UNIQUE collision on
+ *     masthead_users.email — surfaces as an error, never a silent 500)
+ */
+export declare function seedMembership(db: D1Database, input: SeedMembershipInput): Promise<void>;
+//# sourceMappingURL=seed-membership.d.ts.map

package/dist/engine/seed-membership.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"seed-membership.d.ts","sourceRoot":"","sources":["../../src/engine/seed-membership.ts"],"names":[],"mappings":"AAoBA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,oBAAoB,CAAA;AACjD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,SAAS,CAAA;AAOzC,MAAM,WAAW,mBAAmB;IACnC,WAAW,EAAE,MAAM,CAAA;IACnB;;;OAGG;IACH,OAAO,EAAE,MAAM,CAAA;IACf,KAAK,EAAE,MAAM,CAAA;IACb,IAAI,EAAE,MAAM,GAAG,IAAI,CAAA;IACnB,IAAI,EAAE,OAAO,CAAA;CACb;AAMD;;;;;;;;;;;;;GAaG;AACH,wBAAsB,cAAc,CAAC,EAAE,EAAE,UAAU,EAAE,KAAK,EAAE,mBAAmB,GAAG,OAAO,CAAC,IAAI,CAAC,CAiC9F"}

package/dist/engine/seed-membership.js

@@ -0,0 +1,65 @@
+// seed-membership.ts — Parameterized membership pre-seed helper (P7 Task 6).
+//
+// PRE-SEED IS AN OPERATOR/CUTOVER STEP.
+//
+// Look up each person's REAL subject in the Fulcrum issuer D1 by email —
+// subjects are minted + stable in the issuer before first login. NEVER
+// hardcode subjects or emails; pass them at call time.
+//
+//   A placeholder id → no membership match → 403 on every request.
+//   A placeholder email on the UNIQUE masthead_users.email column → 500 on the
+//   real person's first login (the exact inbox-platform bug, §16 risk 10).
+//
+// Usage (at cutover, after looking up real subjects in the issuer D1):
+//
+//   await seedMembership(db, { workspaceId: 'ws-prod', subject: 'user:<real-uuid>', email, name, role: 'owner' })
+//
+// This helper is idempotent: calling it twice with the same (workspaceId,
+// subject) pair updates the membership and user profile in place — it does NOT
+// insert a duplicate or fail silently.
+import { upsertMastheadUser } from './members.js';
+// ---------------------------------------------------------------------------
+// seedMembership
+// ---------------------------------------------------------------------------
+/**
+ * Seed a workspace membership from a known real OpenAuth subject.
+ *
+ * Validates that the subject starts with 'user:' (rejects placeholder ids).
+ * Upserts `masthead_users` (id = subject) and `workspace_memberships` with
+ * `accepted_at` set — a seeded member is pre-accepted (no invite required).
+ *
+ * Idempotent: safe to run multiple times; the second call updates in place.
+ *
+ * Throws if:
+ *   - subject does not start with 'user:' (placeholder guard)
+ *   - a different id already holds the same email (UNIQUE collision on
+ *     masthead_users.email — surfaces as an error, never a silent 500)
+ */
+export async function seedMembership(db, input) {
+    if (!input.subject?.startsWith('user:')) {
+        throw new Error(`seedMembership: subject must start with 'user:' — received: ${JSON.stringify(input.subject)}. ` +
+            'Look up the real subject in the Fulcrum issuer D1 by email before seeding. ' +
+            'A placeholder id causes 403 on every request (§16 risk 10).');
+    }
+    const now = Math.floor(Date.now() / 1000);
+    // Upsert masthead_users — will throw a UNIQUE constraint error if a
+    // DIFFERENT id already holds this email (the §16 risk-10 collision surface).
+    // We deliberately do NOT silence that error here.
+    await upsertMastheadUser(db, {
+        id: input.subject,
+        email: input.email,
+        name: input.name,
+        image: null,
+    });
+    // Upsert the membership row with accepted_at set (pre-accepted seed).
+    await db
+        .prepare(`INSERT INTO workspace_memberships (workspace_id, user_id, role, invited_by, accepted_at, created_at, updated_at)
+			 VALUES (?, ?, ?, NULL, ?, ?, ?)
+			 ON CONFLICT(workspace_id, user_id) DO UPDATE SET
+			   role = excluded.role,
+			   accepted_at = COALESCE(workspace_memberships.accepted_at, excluded.accepted_at),
+			   updated_at = excluded.updated_at`)
+        .bind(input.workspaceId, input.subject, input.role, now, now, now)
+        .run();
+}
+//# sourceMappingURL=seed-membership.js.map

package/dist/engine/seed-membership.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"seed-membership.js","sourceRoot":"","sources":["../../src/engine/seed-membership.ts"],"names":[],"mappings":"AAAA,6EAA6E;AAC7E,EAAE;AACF,wCAAwC;AACxC,EAAE;AACF,yEAAyE;AACzE,uEAAuE;AACvE,uDAAuD;AACvD,EAAE;AACF,mEAAmE;AACnE,+EAA+E;AAC/E,2EAA2E;AAC3E,EAAE;AACF,uEAAuE;AACvE,EAAE;AACF,kHAAkH;AAClH,EAAE;AACF,0EAA0E;AAC1E,+EAA+E;AAC/E,uCAAuC;AAIvC,OAAO,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAA;AAkBjD,8EAA8E;AAC9E,iBAAiB;AACjB,8EAA8E;AAE9E;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,EAAc,EAAE,KAA0B;IAC9E,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;QACzC,MAAM,IAAI,KAAK,CACd,+DAA+D,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI;YAC/F,6EAA6E;YAC7E,6DAA6D,CAC9D,CAAA;IACF,CAAC;IAED,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAA;IAEzC,oEAAoE;IACpE,6EAA6E;IAC7E,kDAAkD;IAClD,MAAM,kBAAkB,CAAC,EAAE,EAAE;QAC5B,EAAE,EAAE,KAAK,CAAC,OAAO;QACjB,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,KAAK,EAAE,IAAI;KACX,CAAC,CAAA;IAEF,sEAAsE;IACtE,MAAM,EAAE;SACN,OAAO,CACP;;;;;uCAKoC,CACpC;SACA,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,IAAI,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC;SACjE,GAAG,EAAE,CAAA;AACR,CAAC"}

package/dist/engine/seo.d.ts

@@ -0,0 +1,20 @@
+export interface SeoScoreInput {
+    title: string;
+    seoTitle?: string | null;
+    description?: string | null;
+    focusKeyword?: string | null;
+    bodyMarkdown?: string | null;
+}
+export interface SeoCheck {
+    id: string;
+    label: string;
+    pass: boolean;
+    hint: string;
+}
+export interface SeoScoreResult {
+    score: number;
+    checks: SeoCheck[];
+}
+/** The in-package default SeoProvider scorer: 5 checks × 20 pts (spec §8). */
+export declare function scoreDraft(input: SeoScoreInput): SeoScoreResult;
+//# sourceMappingURL=seo.d.ts.map

package/dist/engine/seo.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"seo.d.ts","sourceRoot":"","sources":["../../src/engine/seo.ts"],"names":[],"mappings":"AAEA,MAAM,WAAW,aAAa;IAC7B,KAAK,EAAE,MAAM,CAAA;IACb,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IACxB,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IAC3B,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IAC5B,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;CAC5B;AAED,MAAM,WAAW,QAAQ;IACxB,EAAE,EAAE,MAAM,CAAA;IACV,KAAK,EAAE,MAAM,CAAA;IACb,IAAI,EAAE,OAAO,CAAA;IACb,IAAI,EAAE,MAAM,CAAA;CACZ;AAED,MAAM,WAAW,cAAc;IAC9B,KAAK,EAAE,MAAM,CAAA;IACb,MAAM,EAAE,QAAQ,EAAE,CAAA;CAClB;AAQD,8EAA8E;AAC9E,wBAAgB,UAAU,CAAC,KAAK,EAAE,aAAa,GAAG,cAAc,CA0C/D"}

package/dist/engine/seo.js

@@ -0,0 +1,50 @@
+import { countWords } from './publisher.js';
+const MIN_DESC = 50;
+const MAX_DESC = 160;
+const MIN_TITLE = 15;
+const MAX_TITLE = 60;
+const MIN_BODY_WORDS = 300;
+/** The in-package default SeoProvider scorer: 5 checks × 20 pts (spec §8). */
+export function scoreDraft(input) {
+    const title = (input.seoTitle || input.title || '').trim();
+    const description = (input.description || '').trim();
+    const keyword = (input.focusKeyword || '').trim().toLowerCase();
+    const bodyWords = countWords(input.bodyMarkdown || '');
+    const lcTitle = title.toLowerCase();
+    const lcBody = (input.bodyMarkdown || '').toLowerCase();
+    const checks = [
+        {
+            id: 'title-length',
+            label: 'Title length',
+            pass: title.length >= MIN_TITLE && title.length <= MAX_TITLE,
+            hint: `Keep the title between ${MIN_TITLE} and ${MAX_TITLE} characters.`,
+        },
+        {
+            id: 'meta-description',
+            label: 'Meta description',
+            pass: description.length >= MIN_DESC && description.length <= MAX_DESC,
+            hint: `Write a meta description ${MIN_DESC}–${MAX_DESC} characters long.`,
+        },
+        {
+            id: 'keyword-in-title',
+            label: 'Focus keyword in title',
+            pass: keyword.length > 0 && lcTitle.includes(keyword),
+            hint: 'Include the focus keyword in the title.',
+        },
+        {
+            id: 'keyword-in-body',
+            label: 'Focus keyword in body',
+            pass: keyword.length > 0 && lcBody.includes(keyword),
+            hint: 'Mention the focus keyword in the body.',
+        },
+        {
+            id: 'body-length',
+            label: 'Body length',
+            pass: bodyWords >= MIN_BODY_WORDS,
+            hint: `Write at least ${MIN_BODY_WORDS} words (currently ${bodyWords}).`,
+        },
+    ];
+    const score = checks.reduce((sum, c) => sum + (c.pass ? 20 : 0), 0);
+    return { score, checks };
+}
+//# sourceMappingURL=seo.js.map

package/dist/engine/seo.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"seo.js","sourceRoot":"","sources":["../../src/engine/seo.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAA;AAsB3C,MAAM,QAAQ,GAAG,EAAE,CAAA;AACnB,MAAM,QAAQ,GAAG,GAAG,CAAA;AACpB,MAAM,SAAS,GAAG,EAAE,CAAA;AACpB,MAAM,SAAS,GAAG,EAAE,CAAA;AACpB,MAAM,cAAc,GAAG,GAAG,CAAA;AAE1B,8EAA8E;AAC9E,MAAM,UAAU,UAAU,CAAC,KAAoB;IAC9C,MAAM,KAAK,GAAG,CAAC,KAAK,CAAC,QAAQ,IAAI,KAAK,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAA;IAC1D,MAAM,WAAW,GAAG,CAAC,KAAK,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAA;IACpD,MAAM,OAAO,GAAG,CAAC,KAAK,CAAC,YAAY,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAA;IAC/D,MAAM,SAAS,GAAG,UAAU,CAAC,KAAK,CAAC,YAAY,IAAI,EAAE,CAAC,CAAA;IACtD,MAAM,OAAO,GAAG,KAAK,CAAC,WAAW,EAAE,CAAA;IACnC,MAAM,MAAM,GAAG,CAAC,KAAK,CAAC,YAAY,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAA;IAEvD,MAAM,MAAM,GAAe;QAC1B;YACC,EAAE,EAAE,cAAc;YAClB,KAAK,EAAE,cAAc;YACrB,IAAI,EAAE,KAAK,CAAC,MAAM,IAAI,SAAS,IAAI,KAAK,CAAC,MAAM,IAAI,SAAS;YAC5D,IAAI,EAAE,0BAA0B,SAAS,QAAQ,SAAS,cAAc;SACxE;QACD;YACC,EAAE,EAAE,kBAAkB;YACtB,KAAK,EAAE,kBAAkB;YACzB,IAAI,EAAE,WAAW,CAAC,MAAM,IAAI,QAAQ,IAAI,WAAW,CAAC,MAAM,IAAI,QAAQ;YACtE,IAAI,EAAE,4BAA4B,QAAQ,IAAI,QAAQ,mBAAmB;SACzE;QACD;YACC,EAAE,EAAE,kBAAkB;YACtB,KAAK,EAAE,wBAAwB;YAC/B,IAAI,EAAE,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC;YACrD,IAAI,EAAE,yCAAyC;SAC/C;QACD;YACC,EAAE,EAAE,iBAAiB;YACrB,KAAK,EAAE,uBAAuB;YAC9B,IAAI,EAAE,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC;YACpD,IAAI,EAAE,wCAAwC;SAC9C;QACD;YACC,EAAE,EAAE,aAAa;YACjB,KAAK,EAAE,aAAa;YACpB,IAAI,EAAE,SAAS,IAAI,cAAc;YACjC,IAAI,EAAE,kBAAkB,cAAc,qBAAqB,SAAS,IAAI;SACxE;KACD,CAAA;IACD,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA;IACnE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,CAAA;AACzB,CAAC"}

package/dist/engine/slug-redirects.d.ts

@@ -0,0 +1,8 @@
+import type { D1Database } from './d1.js';
+/**
+ * Record `oldSlug` as a redirect pointing at `contentId`.
+ * Idempotent: if `old_slug` is already in the table the row is silently kept
+ * as-is (INSERT … ON CONFLICT(old_slug) DO NOTHING).
+ */
+export declare function recordSlugRedirect(db: D1Database, oldSlug: string, contentId: string): Promise<void>;
+//# sourceMappingURL=slug-redirects.d.ts.map

package/dist/engine/slug-redirects.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"slug-redirects.d.ts","sourceRoot":"","sources":["../../src/engine/slug-redirects.ts"],"names":[],"mappings":"AAaA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,SAAS,CAAA;AAEzC;;;;GAIG;AACH,wBAAsB,kBAAkB,CACvC,EAAE,EAAE,UAAU,EACd,OAAO,EAAE,MAAM,EACf,SAAS,EAAE,MAAM,GACf,OAAO,CAAC,IAAI,CAAC,CASf"}