@growth-labs/cms 0.1.2 → 0.2.0

package/src/engine/slug-redirects.ts

@@ -32,3 +32,45 @@ export async function recordSlugRedirect(
 		.bind(oldSlug, contentId)
 		.run()
 }
+
+/**
+ * Drop any redirect row for `slug`. Called when a rename makes `slug` live
+ * again (rename-back, or reuse of another item's retired slug): a live slug
+ * must never also be a redirect source, or a stale row could shadow it after
+ * a later unpublish — the ON CONFLICT DO NOTHING in recordSlugRedirect would
+ * otherwise preserve the stale mapping forever.
+ */
+export async function clearSlugRedirect(db: D1Database, slug: string): Promise<void> {
+	await db.prepare('DELETE FROM content_slug_redirects WHERE old_slug = ?').bind(slug).run()
+}
+
+/**
+ * Redirect bookkeeping for a slug rename, applied atomically: record
+ * `priorSlug` as a redirect to `contentId` AND drop any stale redirect row
+ * for `newSlug` (live again as of this rename). Batched so both mutations
+ * commit together or not at all — a partial failure must never leave a live
+ * slug registered as a redirect source.
+ */
+export async function applySlugRenameRedirects(
+	db: D1Database,
+	priorSlug: string,
+	newSlug: string,
+	contentId: string,
+): Promise<void> {
+	// Equal slugs would make the DELETE cancel the INSERT within the batch —
+	// silent redirect loss for any caller without the route's own guard.
+	if (priorSlug === newSlug) return
+	await db.batch([
+		// Upsert, not DO NOTHING: if a stale row for priorSlug already exists
+		// (data predating this invariant), the rename is the freshest truth
+		// about which item last owned that slug.
+		db
+			.prepare(
+				`INSERT INTO content_slug_redirects (old_slug, content_id)
+       VALUES (?, ?)
+       ON CONFLICT(old_slug) DO UPDATE SET content_id = excluded.content_id`,
+			)
+			.bind(priorSlug, contentId),
+		db.prepare('DELETE FROM content_slug_redirects WHERE old_slug = ?').bind(newSlug),
+	])
+}

package/src/index.ts

@@ -56,6 +56,9 @@ export {
 	type ContentContributorRow,
 	type ContentImportRow,
 	type ContentItemRow,
+	type ContentPublicationAttemptRow,
+	type ContentPublicationAttemptState,
+	type ContentPublicationOperation,
 	type ContentRelationRow,
 	type ContentRevisionRow,
 	type ContentSlugRedirectRow,

package/src/routes/content.ts

@@ -44,7 +44,7 @@ import {
 	listRevisions,
 	restoreRevision,
 } from '../engine/revisions.js'
-import { recordSlugRedirect } from '../engine/slug-redirects.js'
+import { applySlugRenameRedirects } from '../engine/slug-redirects.js'
 import { softDeleteContent } from '../engine/soft-delete.js'
 import type { ContentStatus } from '../schema/types.js'
 import { type ContentAction, canPerformContentAction } from './authz-matrix.js'
@@ -1123,9 +1123,11 @@ export function createContentRoutes(config: ContentRouteConfig): ContentRouteHan
 			const podcastDispatch =
 				existing.type === 'podcast' ? await maybeDispatchPodcastToFoundry(ctx, id) : null
 
-			// If the slug changed, record the old slug as a redirect (spec §8).
+			// If the slug changed, record the old slug as a redirect (spec §8)
+			// and drop any stale redirect row for the now-live slug — atomically,
+			// so a live slug is never also a redirect source (rename-back safety).
 			if (updated.slug !== priorSlug) {
-				await recordSlugRedirect(ctx.db, priorSlug, id)
+				await applySlugRenameRedirects(ctx.db, priorSlug, updated.slug, id)
 			}
 
 			return json({

package/src/schema/index.ts

@@ -25,6 +25,9 @@ export type {
 	ContentContributorRow,
 	ContentImportRow,
 	ContentItemRow,
+	ContentPublicationAttemptRow,
+	ContentPublicationAttemptState,
+	ContentPublicationOperation,
 	ContentRelationRow,
 	ContentRevisionRow,
 	ContentSlugRedirectRow,

package/src/schema/migrations.ts

@@ -713,6 +713,34 @@ CREATE INDEX IF NOT EXISTS idx_content_items_topic_status_type_published
   ON content_items(primary_topic, status, type, published_at DESC);
 CREATE INDEX IF NOT EXISTS idx_content_items_published_at ON content_items(published_at DESC);
 CREATE INDEX IF NOT EXISTS idx_content_items_deleted_at ON content_items(deleted_at);
+`,
+	},
+	{
+		id: '0018_content_publication_attempts',
+		sql: `
+CREATE TABLE content_publication_attempts (
+  id TEXT PRIMARY KEY,
+  operation TEXT NOT NULL CHECK (operation IN ('publish','rollback')),
+  content_id TEXT NOT NULL,
+  revision_id TEXT NOT NULL,
+  previous_revision_id TEXT,
+  state TEXT NOT NULL CHECK (state IN ('preparing','prepared','committing','pending_retry','committed','superseded','aborting','aborted','abort_failed')),
+  surface_names_json TEXT NOT NULL DEFAULT '[]',
+  pending_surface_names_json TEXT NOT NULL DEFAULT '[]',
+  prepared_surface_names_json TEXT NOT NULL DEFAULT '[]',
+  receipts_json TEXT NOT NULL DEFAULT '[]',
+  version INTEGER NOT NULL DEFAULT 0 CHECK (version >= 0),
+  package_version TEXT,
+  last_error TEXT,
+  created_at INTEGER NOT NULL DEFAULT (unixepoch()),
+  updated_at INTEGER NOT NULL DEFAULT (unixepoch()),
+  FOREIGN KEY (content_id) REFERENCES content_items(id) ON DELETE CASCADE,
+  FOREIGN KEY (revision_id) REFERENCES content_revisions(id) ON DELETE CASCADE
+);
+CREATE INDEX idx_content_publication_attempts_recovery
+  ON content_publication_attempts(state, updated_at);
+CREATE INDEX idx_content_publication_attempts_content
+  ON content_publication_attempts(content_id, created_at DESC);
 `,
 	},
 ]

package/src/schema/tables.ts

@@ -22,6 +22,7 @@ export const CMS_TABLES = [
 	'foundry_callback_events',
 	'content_contributors',
 	'content_slug_redirects',
+	'content_publication_attempts',
 	// Masthead platform tables (migrations 0008–0011)
 	'workspace_settings',
 	'masthead_users',

package/src/schema/types.ts

@@ -536,6 +536,37 @@ export interface ContentInsightDismissalRow {
 	dismissed_by: string | null
 }
 
+export type ContentPublicationOperation = 'publish' | 'rollback'
+export type ContentPublicationAttemptState =
+	| 'preparing'
+	| 'prepared'
+	| 'committing'
+	| 'pending_retry'
+	| 'committed'
+	| 'superseded'
+	| 'aborting'
+	| 'aborted'
+	| 'abort_failed'
+
+/** Durable publication outbox row. JSON columns are decoded by the publication engine. */
+export interface ContentPublicationAttemptRow {
+	id: string
+	operation: ContentPublicationOperation
+	content_id: string
+	revision_id: string
+	previous_revision_id: string | null
+	state: ContentPublicationAttemptState
+	surface_names_json: string
+	pending_surface_names_json: string
+	prepared_surface_names_json: string
+	receipts_json: string
+	version: number
+	package_version: string | null
+	last_error: string | null
+	created_at: number
+	updated_at: number
+}
+
 /**
  * Schema version for the intent_key derivation. Bump ONLY on a breaking change
  * to the canonical-cluster-id semantics; bumping rotates every intent_key (and