@growth-labs/cms 0.5.11 → 0.5.13

package/dist/engine/taxonomy.js

@@ -0,0 +1,125 @@
+import { slugify } from './slug.js';
+/** Maximum number of tags per content item. Covers the measured fleet max (16) with headroom. */
+export const MAX_ITEM_TAG_COUNT = 32;
+/** Maximum UTF-8 byte length for a single declared tag display label. */
+export const MAX_TAG_LABEL_BYTES = 128;
+/** Maximum total UTF-8 bytes across all declared tag labels for one content item. */
+export const MAX_ITEM_TAGS_TOTAL_BYTES = 2_048;
+export class TagInputError extends Error {
+    code;
+    limit;
+    actual;
+    index;
+    constructor(code, message, limit, actual, index = null) {
+        super(message);
+        this.code = code;
+        this.limit = limit;
+        this.actual = actual;
+        this.index = index;
+        this.name = 'TagInputError';
+    }
+}
+export function utf8ByteLength(value) {
+    return new TextEncoder().encode(value).byteLength;
+}
+function fail(code, message, limit, actual, index = null) {
+    throw new TagInputError(code, message, limit, actual, index);
+}
+function assertTagCount(tags) {
+    if (tags.length > MAX_ITEM_TAG_COUNT) {
+        fail('tag_count_exceeded', `tag count exceeds the ${MAX_ITEM_TAG_COUNT}-item limit`, MAX_ITEM_TAG_COUNT, tags.length);
+    }
+}
+function validateDeclaredLabel(value, index) {
+    if (typeof value !== 'string') {
+        fail('tag_not_string', 'each tag must be a string', MAX_ITEM_TAG_COUNT, -1, index);
+    }
+    if (!value.trim()) {
+        fail('tag_blank', 'tag must not be blank or whitespace-only', MAX_ITEM_TAG_COUNT, -1, index);
+    }
+    if (value !== value.trim()) {
+        fail('tag_untrimmed', 'tag must not contain surrounding whitespace', MAX_ITEM_TAG_COUNT, -1, index);
+    }
+    if (value !== value.normalize('NFC')) {
+        fail('tag_not_nfc', 'tag must be NFC-normalized', MAX_ITEM_TAG_COUNT, -1, index);
+    }
+    const labelBytes = utf8ByteLength(value);
+    if (labelBytes > MAX_TAG_LABEL_BYTES) {
+        fail('tag_label_too_long', `tag label exceeds the ${MAX_TAG_LABEL_BYTES}-byte limit`, MAX_TAG_LABEL_BYTES, labelBytes, index);
+    }
+    const slug = slugify(value);
+    if (!slug) {
+        fail('tag_non_slugifiable', 'tag label must produce a non-empty slug after canonicalization', MAX_ITEM_TAG_COUNT, -1, index);
+    }
+    return { slug, label: value };
+}
+function validateCanonicalSlug(value, index) {
+    if (typeof value !== 'string') {
+        fail('tag_not_string', 'each canonical tag must be a string', MAX_ITEM_TAG_COUNT, -1, index);
+    }
+    if (!value ||
+        value !== value.trim() ||
+        value !== value.normalize('NFC') ||
+        slugify(value) !== value) {
+        fail('tag_canonical_invalid', 'canonical tag must be a normalized slug', MAX_ITEM_TAG_COUNT, -1, index);
+    }
+    const slugBytes = utf8ByteLength(value);
+    if (slugBytes > MAX_TAG_LABEL_BYTES) {
+        fail('tag_label_too_long', `canonical tag exceeds the ${MAX_TAG_LABEL_BYTES}-byte limit`, MAX_TAG_LABEL_BYTES, slugBytes, index);
+    }
+    return value;
+}
+function validatePairs(pairs) {
+    const seen = new Set();
+    let totalBytes = 0;
+    for (let index = 0; index < pairs.length; index += 1) {
+        const pair = pairs[index];
+        if (seen.has(pair.slug)) {
+            fail('tag_duplicate', `duplicate tag after canonicalization: slug "${pair.slug}"`, MAX_ITEM_TAG_COUNT, -1, index);
+        }
+        seen.add(pair.slug);
+        totalBytes += utf8ByteLength(pair.label);
+        if (totalBytes > MAX_ITEM_TAGS_TOTAL_BYTES) {
+            fail('tags_total_bytes_exceeded', `total tag bytes exceed the ${MAX_ITEM_TAGS_TOTAL_BYTES}-byte limit`, MAX_ITEM_TAGS_TOTAL_BYTES, totalBytes, index);
+        }
+    }
+    return pairs;
+}
+export function validateDeclaredTagList(tags) {
+    if (!Array.isArray(tags)) {
+        fail('tags_not_array', 'tags must be an array', MAX_ITEM_TAG_COUNT, -1);
+    }
+    assertTagCount(tags);
+    return validatePairs(tags.map((tag, index) => validateDeclaredLabel(tag, index)));
+}
+export function validateSingleDeclaredTag(label) {
+    return validateDeclaredTagList([label])[0];
+}
+export function validateRevisionTaxonomy(input) {
+    const tags = input.tags;
+    if (!Array.isArray(tags)) {
+        fail('tags_not_array', 'revision tags must be an array', MAX_ITEM_TAG_COUNT, -1);
+    }
+    assertTagCount(tags);
+    const labels = input.tagLabels === undefined && input.allowLegacyLabels ? tags : input.tagLabels;
+    if (!Array.isArray(labels) || labels.length !== tags.length) {
+        fail('tag_labels_mismatch', 'revision tagLabels must be parallel to tags', tags.length, Array.isArray(labels) ? labels.length : -1);
+    }
+    const pairs = tags.map((tag, index) => {
+        const slug = validateCanonicalSlug(tag, index);
+        const label = validateDeclaredLabel(labels[index], index);
+        if (label.slug !== slug) {
+            fail('tag_label_mismatch', 'revision tag label does not canonicalize to its parallel tag', MAX_ITEM_TAG_COUNT, -1, index);
+        }
+        return { slug, label: label.label };
+    });
+    return validatePairs(pairs);
+}
+export function validateStoredTaxonomyRows(rows) {
+    return validateRevisionTaxonomy({
+        tags: rows.map((row) => row.slug),
+        tagLabels: rows.map((row) => row.label),
+        allowLegacyLabels: false,
+    });
+}
+//# sourceMappingURL=taxonomy.js.map

package/dist/engine/taxonomy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"taxonomy.js","sourceRoot":"","sources":["../../src/engine/taxonomy.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAA;AAEnC,iGAAiG;AACjG,MAAM,CAAC,MAAM,kBAAkB,GAAG,EAAE,CAAA;AACpC,yEAAyE;AACzE,MAAM,CAAC,MAAM,mBAAmB,GAAG,GAAG,CAAA;AACtC,qFAAqF;AACrF,MAAM,CAAC,MAAM,yBAAyB,GAAG,KAAK,CAAA;AAsB9C,MAAM,OAAO,aAAc,SAAQ,KAAK;IAE7B;IAEA;IACA;IACA;IALV,YACU,IAAuB,EAChC,OAAe,EACN,KAAa,EACb,MAAc,EACd,QAAuB,IAAI;QAEpC,KAAK,CAAC,OAAO,CAAC,CAAA;QANL,SAAI,GAAJ,IAAI,CAAmB;QAEvB,UAAK,GAAL,KAAK,CAAQ;QACb,WAAM,GAAN,MAAM,CAAQ;QACd,UAAK,GAAL,KAAK,CAAsB;QAGpC,IAAI,CAAC,IAAI,GAAG,eAAe,CAAA;IAC5B,CAAC;CACD;AAED,MAAM,UAAU,cAAc,CAAC,KAAa;IAC3C,OAAO,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,UAAU,CAAA;AAClD,CAAC;AAED,SAAS,IAAI,CACZ,IAAuB,EACvB,OAAe,EACf,KAAa,EACb,MAAc,EACd,QAAuB,IAAI;IAE3B,MAAM,IAAI,aAAa,CAAC,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,CAAC,CAAA;AAC7D,CAAC;AAED,SAAS,cAAc,CAAC,IAAwB;IAC/C,IAAI,IAAI,CAAC,MAAM,GAAG,kBAAkB,EAAE,CAAC;QACtC,IAAI,CACH,oBAAoB,EACpB,yBAAyB,kBAAkB,aAAa,EACxD,kBAAkB,EAClB,IAAI,CAAC,MAAM,CACX,CAAA;IACF,CAAC;AACF,CAAC;AAED,SAAS,qBAAqB,CAAC,KAAc,EAAE,KAAa;IAC3D,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC/B,IAAI,CAAC,gBAAgB,EAAE,2BAA2B,EAAE,kBAAkB,EAAE,CAAC,CAAC,EAAE,KAAK,CAAC,CAAA;IACnF,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE,CAAC;QACnB,IAAI,CAAC,WAAW,EAAE,0CAA0C,EAAE,kBAAkB,EAAE,CAAC,CAAC,EAAE,KAAK,CAAC,CAAA;IAC7F,CAAC;IACD,IAAI,KAAK,KAAK,KAAK,CAAC,IAAI,EAAE,EAAE,CAAC;QAC5B,IAAI,CACH,eAAe,EACf,6CAA6C,EAC7C,kBAAkB,EAClB,CAAC,CAAC,EACF,KAAK,CACL,CAAA;IACF,CAAC;IACD,IAAI,KAAK,KAAK,KAAK,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC;QACtC,IAAI,CAAC,aAAa,EAAE,4BAA4B,EAAE,kBAAkB,EAAE,CAAC,CAAC,EAAE,KAAK,CAAC,CAAA;IACjF,CAAC;IACD,MAAM,UAAU,GAAG,cAAc,CAAC,KAAK,CAAC,CAAA;IACxC,IAAI,UAAU,GAAG,mBAAmB,EAAE,CAAC;QACtC,IAAI,CACH,oBAAoB,EACpB,yBAAyB,mBAAmB,aAAa,EACzD,mBAAmB,EACnB,UAAU,EACV,KAAK,CACL,CAAA;IACF,CAAC;IACD,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,CAAC,CAAA;IAC3B,IAAI,CAAC,IAAI,EAAE,CAAC;QACX,IAAI,CACH,qBAAqB,EACrB,gEAAgE,EAChE,kBAAkB,EAClB,CAAC,CAAC,EACF,KAAK,CACL,CAAA;IACF,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,CAAA;AAC9B,CAAC;AAED,SAAS,qBAAqB,CAAC,KAAc,EAAE,KAAa;IAC3D,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC/B,IAAI,CAAC,gBAAgB,EAAE,qCAAqC,EAAE,kBAAkB,EAAE,CAAC,CAAC,EAAE,KAAK,CAAC,CAAA;IAC7F,CAAC;IACD,IACC,CAAC,KAAK;QACN,KAAK,KAAK,KAAK,CAAC,IAAI,EAAE;QACtB,KAAK,KAAK,KAAK,CAAC,SAAS,CAAC,KAAK,CAAC;QAChC,OAAO,CAAC,KAAK,CAAC,KAAK,KAAK,EACvB,CAAC;QACF,IAAI,CACH,uBAAuB,EACvB,yCAAyC,EACzC,kBAAkB,EAClB,CAAC,CAAC,EACF,KAAK,CACL,CAAA;IACF,CAAC;IACD,MAAM,SAAS,GAAG,cAAc,CAAC,KAAK,CAAC,CAAA;IACvC,IAAI,SAAS,GAAG,mBAAmB,EAAE,CAAC;QACrC,IAAI,CACH,oBAAoB,EACpB,6BAA6B,mBAAmB,aAAa,EAC7D,mBAAmB,EACnB,SAAS,EACT,KAAK,CACL,CAAA;IACF,CAAC;IACD,OAAO,KAAK,CAAA;AACb,CAAC;AAED,SAAS,aAAa,CAAC,KAAoB;IAC1C,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAA;IAC9B,IAAI,UAAU,GAAG,CAAC,CAAA;IAClB,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,KAAK,CAAC,MAAM,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QACtD,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAgB,CAAA;QACxC,IAAI,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YACzB,IAAI,CACH,eAAe,EACf,+CAA+C,IAAI,CAAC,IAAI,GAAG,EAC3D,kBAAkB,EAClB,CAAC,CAAC,EACF,KAAK,CACL,CAAA;QACF,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QACnB,UAAU,IAAI,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QACxC,IAAI,UAAU,GAAG,yBAAyB,EAAE,CAAC;YAC5C,IAAI,CACH,2BAA2B,EAC3B,8BAA8B,yBAAyB,aAAa,EACpE,yBAAyB,EACzB,UAAU,EACV,KAAK,CACL,CAAA;QACF,CAAC;IACF,CAAC;IACD,OAAO,KAAK,CAAA;AACb,CAAC;AAED,MAAM,UAAU,uBAAuB,CAAC,IAAa;IACpD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;QAC1B,IAAI,CAAC,gBAAgB,EAAE,uBAAuB,EAAE,kBAAkB,EAAE,CAAC,CAAC,CAAC,CAAA;IACxE,CAAC;IACD,cAAc,CAAC,IAAI,CAAC,CAAA;IACpB,OAAO,aAAa,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE,CAAC,qBAAqB,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC,CAAC,CAAA;AAClF,CAAC;AAED,MAAM,UAAU,yBAAyB,CAAC,KAAc;IACvD,OAAO,uBAAuB,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAgB,CAAA;AAC1D,CAAC;AAED,MAAM,UAAU,wBAAwB,CAAC,KAIxC;IACA,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAA;IACvB,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;QAC1B,IAAI,CAAC,gBAAgB,EAAE,gCAAgC,EAAE,kBAAkB,EAAE,CAAC,CAAC,CAAC,CAAA;IACjF,CAAC;IACD,cAAc,CAAC,IAAI,CAAC,CAAA;IACpB,MAAM,MAAM,GAAG,KAAK,CAAC,SAAS,KAAK,SAAS,IAAI,KAAK,CAAC,iBAAiB,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,CAAA;IAChG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,MAAM,KAAK,IAAI,CAAC,MAAM,EAAE,CAAC;QAC7D,IAAI,CACH,qBAAqB,EACrB,6CAA6C,EAC7C,IAAI,CAAC,MAAM,EACX,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAC1C,CAAA;IACF,CAAC;IACD,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE;QACrC,MAAM,IAAI,GAAG,qBAAqB,CAAC,GAAG,EAAE,KAAK,CAAC,CAAA;QAC9C,MAAM,KAAK,GAAG,qBAAqB,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,KAAK,CAAC,CAAA;QACzD,IAAI,KAAK,CAAC,IAAI,KAAK,IAAI,EAAE,CAAC;YACzB,IAAI,CACH,oBAAoB,EACpB,8DAA8D,EAC9D,kBAAkB,EAClB,CAAC,CAAC,EACF,KAAK,CACL,CAAA;QACF,CAAC;QACD,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,CAAA;IACpC,CAAC,CAAC,CAAA;IACF,OAAO,aAAa,CAAC,KAAK,CAAC,CAAA;AAC5B,CAAC;AAED,MAAM,UAAU,0BAA0B,CACzC,IAAkD;IAElD,OAAO,wBAAwB,CAAC;QAC/B,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC;QACjC,SAAS,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC;QACvC,iBAAiB,EAAE,KAAK;KACxB,CAAC,CAAA;AACH,CAAC"}

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAgCA,cAAc,mBAAmB,CAAA;AAGjC,cAAc,sBAAsB,CAAA;AAEpC,YAAY,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAA;AAClD,OAAO,EACN,KAAK,iBAAiB,EACtB,KAAK,SAAS,EACd,eAAe,EAEf,iBAAiB,EACjB,wBAAwB,EAExB,UAAU,EACV,KAAK,iBAAiB,EACtB,KAAK,YAAY,EACjB,KAAK,kBAAkB,EACvB,KAAK,iBAAiB,EACtB,KAAK,OAAO,EACZ,KAAK,YAAY,EACjB,KAAK,aAAa,EAClB,KAAK,qBAAqB,EAC1B,KAAK,gBAAgB,EACrB,KAAK,cAAc,EACnB,KAAK,4BAA4B,EACjC,KAAK,8BAA8B,EACnC,KAAK,2BAA2B,EAChC,KAAK,kBAAkB,EACvB,KAAK,kBAAkB,EACvB,KAAK,sBAAsB,EAC3B,KAAK,aAAa,EAClB,KAAK,iBAAiB,EACtB,KAAK,aAAa,EAElB,KAAK,WAAW,EAChB,KAAK,iBAAiB,EACtB,KAAK,uBAAuB,EAC5B,KAAK,0BAA0B,EAC/B,gCAAgC,EAChC,KAAK,eAAe,EACpB,KAAK,aAAa,EAClB,cAAc,EACd,KAAK,iBAAiB,EACtB,KAAK,qBAAqB,EAC1B,eAAe,EACf,KAAK,eAAe,EACpB,KAAK,oBAAoB,EACzB,KAAK,kBAAkB,EACvB,KAAK,sBAAsB,EAC3B,KAAK,oBAAoB,GACzB,MAAM,mBAAmB,CAAA;AAC1B,cAAc,qBAAqB,CAAA;AACnC,cAAc,qBAAqB,CAAA"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAkCA,cAAc,mBAAmB,CAAA;AAGjC,cAAc,sBAAsB,CAAA;AAEpC,YAAY,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAA;AAClD,OAAO,EACN,KAAK,iBAAiB,EACtB,KAAK,SAAS,EACd,eAAe,EAEf,iBAAiB,EACjB,wBAAwB,EAExB,UAAU,EACV,KAAK,iBAAiB,EACtB,KAAK,YAAY,EACjB,KAAK,kBAAkB,EACvB,KAAK,iBAAiB,EACtB,KAAK,OAAO,EACZ,KAAK,YAAY,EACjB,KAAK,aAAa,EAClB,KAAK,qBAAqB,EAC1B,KAAK,gBAAgB,EACrB,KAAK,cAAc,EACnB,KAAK,4BAA4B,EACjC,KAAK,8BAA8B,EACnC,KAAK,2BAA2B,EAChC,KAAK,kBAAkB,EACvB,KAAK,kBAAkB,EACvB,KAAK,sBAAsB,EAC3B,KAAK,aAAa,EAClB,KAAK,iBAAiB,EACtB,KAAK,aAAa,EAElB,KAAK,WAAW,EAChB,KAAK,iBAAiB,EACtB,KAAK,uBAAuB,EAC5B,KAAK,0BAA0B,EAC/B,gCAAgC,EAChC,KAAK,eAAe,EACpB,KAAK,aAAa,EAClB,cAAc,EACd,KAAK,iBAAiB,EACtB,KAAK,qBAAqB,EAC1B,eAAe,EACf,KAAK,eAAe,EACpB,KAAK,oBAAoB,EACzB,KAAK,kBAAkB,EACvB,KAAK,sBAAsB,EAC3B,KAAK,oBAAoB,GACzB,MAAM,mBAAmB,CAAA;AAC1B,cAAc,qBAAqB,CAAA;AACnC,cAAc,qBAAqB,CAAA"}

package/dist/index.js

@@ -29,6 +29,8 @@
 //            carries no Foundry/Hermes coupling.
 // The publishing engine — the content data-access core (WS7-05). Also
 // available at the `@growth-labs/cms/engine` subpath.
+// Tag taxonomy bounds (MAX_ITEM_TAG_COUNT, MAX_TAG_LABEL_BYTES, MAX_ITEM_TAGS_TOTAL_BYTES)
+// and TagInputError are re-exported via engine/index.js.
 export * from './engine/index.js';
 // Injected-provider interfaces + null implementations (spec §3.3).
 export * from './providers/index.js';

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,8EAA8E;AAC9E,2EAA2E;AAC3E,EAAE;AACF,mEAAmE;AACnE,qGAAqG;AACrG,uEAAuE;AACvE,6BAA6B;AAC7B,EAAE;AACF,qEAAqE;AACrE,iEAAiE;AACjE,qEAAqE;AACrE,iDAAiD;AACjD,+EAA+E;AAC/E,gFAAgF;AAChF,6EAA6E;AAC7E,+EAA+E;AAC/E,oEAAoE;AACpE,2EAA2E;AAC3E,+EAA+E;AAC/E,qBAAqB;AACrB,oEAAoE;AACpE,wEAAwE;AACxE,4EAA4E;AAC5E,yEAAyE;AACzE,8EAA8E;AAC9E,gFAAgF;AAChF,0EAA0E;AAC1E,6EAA6E;AAC7E,iDAAiD;AAEjD,sEAAsE;AACtE,sDAAsD;AACtD,cAAc,mBAAmB,CAAA;AAEjC,mEAAmE;AACnE,cAAc,sBAAsB,CAAA;AAGpC,OAAO,EAGN,eAAe;AACf,qBAAqB;AACrB,iBAAiB,EACjB,wBAAwB;AACxB,iBAAiB;AACjB,UAAU,EAyBV,gCAAgC,EAGhC,cAAc,EAGd,eAAe,GAMf,MAAM,mBAAmB,CAAA;AAC1B,cAAc,qBAAqB,CAAA;AACnC,cAAc,qBAAqB,CAAA"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,8EAA8E;AAC9E,2EAA2E;AAC3E,EAAE;AACF,mEAAmE;AACnE,qGAAqG;AACrG,uEAAuE;AACvE,6BAA6B;AAC7B,EAAE;AACF,qEAAqE;AACrE,iEAAiE;AACjE,qEAAqE;AACrE,iDAAiD;AACjD,+EAA+E;AAC/E,gFAAgF;AAChF,6EAA6E;AAC7E,+EAA+E;AAC/E,oEAAoE;AACpE,2EAA2E;AAC3E,+EAA+E;AAC/E,qBAAqB;AACrB,oEAAoE;AACpE,wEAAwE;AACxE,4EAA4E;AAC5E,yEAAyE;AACzE,8EAA8E;AAC9E,gFAAgF;AAChF,0EAA0E;AAC1E,6EAA6E;AAC7E,iDAAiD;AAEjD,sEAAsE;AACtE,sDAAsD;AACtD,2FAA2F;AAC3F,yDAAyD;AACzD,cAAc,mBAAmB,CAAA;AAEjC,mEAAmE;AACnE,cAAc,sBAAsB,CAAA;AAGpC,OAAO,EAGN,eAAe;AACf,qBAAqB;AACrB,iBAAiB,EACjB,wBAAwB;AACxB,iBAAiB;AACjB,UAAU,EAyBV,gCAAgC,EAGhC,cAAc,EAGd,eAAe,GAMf,MAAM,mBAAmB,CAAA;AAC1B,cAAc,qBAAqB,CAAA;AACnC,cAAc,qBAAqB,CAAA"}

package/dist/routes/content.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"content.d.ts","sourceRoot":"","sources":["../../src/routes/content.ts"],"names":[],"mappings":"AAsDA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,aAAa,CAAA;AAEjD,OAAO,EAAQ,KAAK,YAAY,EAAa,MAAM,cAAc,CAAA;AACjE,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,eAAe,CAAA;AAExD,YAAY,EAAE,mBAAmB,EAAE,CAAA;AAoBnC;;;;;GAKG;AACH,MAAM,MAAM,qBAAqB,GAAG,CAAC,KAAK,EAAE;IAC3C,GAAG,EAAE,YAAY,CAAA;IACjB,SAAS,EAAE,MAAM,CAAA;IACjB,KAAK,EAAE,OAAO,CAAA;CACd,KAAK,OAAO,CAAC;IAAE,MAAM,EAAE,OAAO,CAAC;IAAC,aAAa,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,CAAA;AAElF;;;;GAIG;AACH,MAAM,MAAM,eAAe,GAAG,CAAC,KAAK,EAAE;IACrC,GAAG,EAAE,YAAY,CAAA;IACjB,SAAS,EAAE,MAAM,CAAA;IACjB,KAAK,EAAE,OAAO,CAAA;CACd,KAAK,OAAO,CAAC;IAAE,MAAM,EAAE,OAAO,CAAC;IAAC,aAAa,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,CAAA;AAElF,MAAM,WAAW,uBAAuB;IACvC,KAAK,EAAE,OAAO,CAAA;IACd,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IACrB,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAA;IACnB,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,MAAM,CAAC,EAAE,MAAM,CAAA;CACf;AAED;;;;GAIG;AACH,MAAM,MAAM,oBAAoB,GAAG,CAAC,KAAK,EAAE;IAC1C,GAAG,EAAE,YAAY,CAAA;IACjB,SAAS,EAAE,MAAM,CAAA;IACjB,IAAI,EAAE,WAAW,CAAA;IACjB,MAAM,EAAE,MAAM,CAAA;CACd,KAAK,OAAO,CAAC,uBAAuB,CAAC,CAAA;AAEtC,MAAM,WAAW,kBAAmB,SAAQ,cAAc;IACzD,wEAAwE;IACxE,iBAAiB,CAAC,EAAE,qBAAqB,CAAA;IACzC,uEAAuE;IACvE,WAAW,CAAC,EAAE,eAAe,CAAA;IAC7B,iFAAiF;IACjF,gBAAgB,CAAC,EAAE,oBAAoB,CAAA;IACvC;;;;;;OAMG;IACH,eAAe,CAAC,EAAE,mBAAmB,CAAA;IACrC;;;;OAIG;IACH,iBAAiB,CAAC,EAAE,MAAM,CAAA;CAC1B;AAKD,KAAK,WAAW,GAAG,SAAS,GAAG,OAAO,GAAG,SAAS,GAAG,YAAY,GAAG,MAAM,CAAA;AAgd1E,MAAM,WAAW,oBAAoB;IACpC,iGAAiG;IACjG,IAAI,CAAC,GAAG,EAAE,YAAY,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAA;IAC1C,+GAA+G;IAC/G,MAAM,CAAC,GAAG,EAAE,YAAY,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAA;IAC5C,+DAA+D;IAC/D,IAAI,CAAC,GAAG,EAAE,YAAY,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAA;IAC1C,8BAA8B;IAC9B,MAAM,CAAC,GAAG,EAAE,YAAY,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAA;IAC5C,mEAAmE;IACnE,GAAG,CAAC,GAAG,EAAE,YAAY,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAA;IACzC,kFAAkF;IAClF,MAAM,CAAC,GAAG,EAAE,YAAY,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAA;IAC5C;;;;OAIG;IACH,MAAM,CAAC,GAAG,EAAE,YAAY,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAA;IAC5C;;;;;;OAMG;IACH,QAAQ,CAAC,GAAG,EAAE,YAAY,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAA;IAC9C;;;OAGG;IACH,gBAAgB,CAAC,GAAG,EAAE,YAAY,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAA;IACtD;;;;OAIG;IACH,mBAAmB,CAAC,GAAG,EAAE,YAAY,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAA;IACzD;;;;OAIG;IACH,aAAa,CAAC,GAAG,EAAE,YAAY,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAA;IACnD;;;OAGG;IACH,WAAW,CAAC,GAAG,EAAE,YAAY,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAA;IACjD;;;;;;;;OAQG;IACH,eAAe,CAAC,GAAG,EAAE,YAAY,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAA;IACrD;;;;;OAKG;IACH,eAAe,CAAC,GAAG,EAAE,YAAY,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAA;CACrD;AAED,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,kBAAkB,GAAG,oBAAoB,CA2rCpF"}
+{"version":3,"file":"content.d.ts","sourceRoot":"","sources":["../../src/routes/content.ts"],"names":[],"mappings":"AAwDA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,aAAa,CAAA;AAEjD,OAAO,EAAQ,KAAK,YAAY,EAAa,MAAM,cAAc,CAAA;AACjE,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,eAAe,CAAA;AAExD,YAAY,EAAE,mBAAmB,EAAE,CAAA;AAoBnC;;;;;GAKG;AACH,MAAM,MAAM,qBAAqB,GAAG,CAAC,KAAK,EAAE;IAC3C,GAAG,EAAE,YAAY,CAAA;IACjB,SAAS,EAAE,MAAM,CAAA;IACjB,KAAK,EAAE,OAAO,CAAA;CACd,KAAK,OAAO,CAAC;IAAE,MAAM,EAAE,OAAO,CAAC;IAAC,aAAa,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,CAAA;AAElF;;;;GAIG;AACH,MAAM,MAAM,eAAe,GAAG,CAAC,KAAK,EAAE;IACrC,GAAG,EAAE,YAAY,CAAA;IACjB,SAAS,EAAE,MAAM,CAAA;IACjB,KAAK,EAAE,OAAO,CAAA;CACd,KAAK,OAAO,CAAC;IAAE,MAAM,EAAE,OAAO,CAAC;IAAC,aAAa,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,CAAA;AAElF,MAAM,WAAW,uBAAuB;IACvC,KAAK,EAAE,OAAO,CAAA;IACd,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IACrB,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAA;IACnB,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,MAAM,CAAC,EAAE,MAAM,CAAA;CACf;AAED;;;;GAIG;AACH,MAAM,MAAM,oBAAoB,GAAG,CAAC,KAAK,EAAE;IAC1C,GAAG,EAAE,YAAY,CAAA;IACjB,SAAS,EAAE,MAAM,CAAA;IACjB,IAAI,EAAE,WAAW,CAAA;IACjB,MAAM,EAAE,MAAM,CAAA;CACd,KAAK,OAAO,CAAC,uBAAuB,CAAC,CAAA;AAEtC,MAAM,WAAW,kBAAmB,SAAQ,cAAc;IACzD,wEAAwE;IACxE,iBAAiB,CAAC,EAAE,qBAAqB,CAAA;IACzC,uEAAuE;IACvE,WAAW,CAAC,EAAE,eAAe,CAAA;IAC7B,iFAAiF;IACjF,gBAAgB,CAAC,EAAE,oBAAoB,CAAA;IACvC;;;;;;OAMG;IACH,eAAe,CAAC,EAAE,mBAAmB,CAAA;IACrC;;;;OAIG;IACH,iBAAiB,CAAC,EAAE,MAAM,CAAA;CAC1B;AAKD,KAAK,WAAW,GAAG,SAAS,GAAG,OAAO,GAAG,SAAS,GAAG,YAAY,GAAG,MAAM,CAAA;AAud1E,MAAM,WAAW,oBAAoB;IACpC,iGAAiG;IACjG,IAAI,CAAC,GAAG,EAAE,YAAY,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAA;IAC1C,+GAA+G;IAC/G,MAAM,CAAC,GAAG,EAAE,YAAY,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAA;IAC5C,+DAA+D;IAC/D,IAAI,CAAC,GAAG,EAAE,YAAY,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAA;IAC1C,8BAA8B;IAC9B,MAAM,CAAC,GAAG,EAAE,YAAY,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAA;IAC5C,mEAAmE;IACnE,GAAG,CAAC,GAAG,EAAE,YAAY,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAA;IACzC,kFAAkF;IAClF,MAAM,CAAC,GAAG,EAAE,YAAY,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAA;IAC5C;;;;OAIG;IACH,MAAM,CAAC,GAAG,EAAE,YAAY,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAA;IAC5C;;;;;;OAMG;IACH,QAAQ,CAAC,GAAG,EAAE,YAAY,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAA;IAC9C;;;OAGG;IACH,gBAAgB,CAAC,GAAG,EAAE,YAAY,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAA;IACtD;;;;OAIG;IACH,mBAAmB,CAAC,GAAG,EAAE,YAAY,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAA;IACzD;;;;OAIG;IACH,aAAa,CAAC,GAAG,EAAE,YAAY,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAA;IACnD;;;OAGG;IACH,WAAW,CAAC,GAAG,EAAE,YAAY,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAA;IACjD;;;;;;;;OAQG;IACH,eAAe,CAAC,GAAG,EAAE,YAAY,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAA;IACrD;;;;;OAKG;IACH,eAAe,CAAC,GAAG,EAAE,YAAY,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAA;CACrD;AAED,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,kBAAkB,GAAG,oBAAoB,CA+uCpF"}

package/dist/routes/content.js

@@ -20,10 +20,11 @@ import { createDekFailureNotifications } from '../engine/ai-dek-notifications.js
 import { listContributors, setContributors } from '../engine/contributors.js';
 import { applyFoundryCallback, dispatchToFoundry, FoundryDispatchPrerequisiteError, verifyHmac, } from '../engine/foundry-dispatch.js';
 import { evaluateArticleBody } from '../engine/publish-guard.js';
-import { createContent, createRevision, duplicateContentItem, evaluateContentBodyForPublish, getContentItem, getContentRelations, publishContent, scheduleContent, unpublishContent, updateContentItem, VerifiedMediaDurationConflictError, } from '../engine/publisher.js';
+import { createContent, createRevision, duplicateContentItem, evaluateContentBodyForPublish, getContentItem, getContentRelations, getContentTagPairs, publishContent, scheduleContent, unpublishContent, updateContentItem, VerifiedMediaDurationConflictError, } from '../engine/publisher.js';
 import { createRevisionWithDelta, getRevision, listRevisions, restoreRevision, } from '../engine/revisions.js';
 import { applySlugRenameRedirects } from '../engine/slug-redirects.js';
 import { softDeleteContent } from '../engine/soft-delete.js';
+import { TagInputError } from '../engine/taxonomy.js';
 import { canPerformContentAction } from './authz-matrix.js';
 import { resolveConfig } from './config.js';
 import { json, requireId } from './context.js';
@@ -432,11 +433,7 @@ async function getContentPayload(ctx, type, id) {
     return null;
 }
 async function getContentTags(ctx, id) {
-    const result = await ctx.db
-        .prepare('SELECT t.slug FROM content_tag_links l JOIN content_tags t ON t.id = l.tag_id WHERE l.content_id = ? ORDER BY t.label ASC')
-        .bind(id)
-        .all();
-    return (result.results || []).map((row) => row.slug);
+    return (await getContentTagPairs(ctx.db, id)).map((row) => row.slug);
 }
 async function getMediaAssetUrls(db, ids) {
     const uniqueIds = Array.from(new Set(ids.filter(Boolean)));
@@ -458,6 +455,15 @@ async function getMediaAssetUrls(db, ids) {
 async function readJson(ctx) {
     return ctx.request.json().catch(() => null);
 }
+function tagInputErrorResponse(error) {
+    return json({
+        error: 'Invalid tags',
+        code: error.code,
+        limit: error.limit,
+        actual: error.actual,
+        index: error.index,
+    }, 400);
+}
 export function createContentRoutes(config) {
     const resolved = resolveConfig(config);
     const { CreateSchema, UpdateSchema } = buildSchemas(resolved);
@@ -741,6 +747,8 @@ export function createContentRoutes(config) {
                 created = await createContent(ctx.db, parsed.data);
             }
             catch (error) {
+                if (error instanceof TagInputError)
+                    return tagInputErrorResponse(error);
                 const conflict = verifiedMediaDurationConflictResponse(error);
                 if (conflict)
                     return conflict;
@@ -774,17 +782,32 @@ export function createContentRoutes(config) {
             const item = await getContentItem(ctx.db, id);
             if (!item)
                 return json({ error: 'Not found' }, 404);
-            const [content, tags, relations, author] = await Promise.all([
-                getContentPayload(ctx, item.type, id),
-                getContentTags(ctx, id),
-                getContentRelations(ctx.db, id),
-                item.author_id
-                    ? ctx.db
-                        .prepare('SELECT name, slug FROM authors WHERE id = ? LIMIT 1')
-                        .bind(item.author_id)
-                        .first()
-                    : Promise.resolve(null),
-            ]);
+            let content;
+            let tags;
+            let relations;
+            let author;
+            try {
+                const resolvedContent = await Promise.all([
+                    getContentPayload(ctx, item.type, id),
+                    getContentTags(ctx, id),
+                    getContentRelations(ctx.db, id),
+                    item.author_id
+                        ? ctx.db
+                            .prepare('SELECT name, slug FROM authors WHERE id = ? LIMIT 1')
+                            .bind(item.author_id)
+                            .first()
+                        : Promise.resolve(null),
+                ]);
+                content = resolvedContent[0];
+                tags = resolvedContent[1];
+                relations = resolvedContent[2];
+                author = resolvedContent[3];
+            }
+            catch (error) {
+                if (error instanceof TagInputError)
+                    return tagInputErrorResponse(error);
+                throw error;
+            }
             const contentRecord = content;
             const thumbnailImageId = typeof contentRecord?.thumbnail_image_id === 'string'
                 ? contentRecord.thumbnail_image_id
@@ -871,6 +894,8 @@ export function createContentRoutes(config) {
                 updated = await updateContentItem(ctx.db, id, parsed.data);
             }
             catch (error) {
+                if (error instanceof TagInputError)
+                    return tagInputErrorResponse(error);
                 const conflict = verifiedMediaDurationConflictResponse(error);
                 if (conflict)
                     return conflict;
@@ -1035,8 +1060,23 @@ export function createContentRoutes(config) {
                         }
                     }
                 }
-                await publishContent(ctx.db, id, now);
-                await createRevision(ctx.db, id, ctx.userId || null);
+                try {
+                    await getContentTagPairs(ctx.db, id);
+                }
+                catch (error) {
+                    if (error instanceof TagInputError)
+                        return tagInputErrorResponse(error);
+                    throw error;
+                }
+                try {
+                    await publishContent(ctx.db, id, now);
+                    await createRevision(ctx.db, id, ctx.userId || null);
+                }
+                catch (error) {
+                    if (error instanceof TagInputError)
+                        return tagInputErrorResponse(error);
+                    throw error;
+                }
                 // Write first-party activity log row (cms_activity_log, P5 Task 3).
                 // Wrapped so a logging failure never breaks the publish response.
                 try {
@@ -1197,10 +1237,18 @@ export function createContentRoutes(config) {
                 return json({ status });
             }
             if (action === 'snapshot') {
-                const revision = await createRevisionWithDelta(ctx.db, id, {
-                    createdBy: ctx.userId ?? null,
-                    tag: 'autosave',
-                });
+                let revision;
+                try {
+                    revision = await createRevisionWithDelta(ctx.db, id, {
+                        createdBy: ctx.userId ?? null,
+                        tag: 'autosave',
+                    });
+                }
+                catch (error) {
+                    if (error instanceof TagInputError)
+                        return tagInputErrorResponse(error);
+                    throw error;
+                }
                 if (!revision)
                     return json({ error: 'Not found' }, 404);
                 return json({ status: 'snapshot', revisionId: revision.id });
@@ -1265,9 +1313,24 @@ export function createContentRoutes(config) {
         },
         async foundryCallback(ctx) {
             // HMAC-guarded machine callback — NOT behind requirePublisher.
-            // The HMAC secret is read from ctx.env (Secrets Store binding on the
-            // Workers side; `env.FOUNDRY_HMAC_SECRET`). Never a value in code/D1.
-            const hmacSecret = typeof ctx.env?.FOUNDRY_HMAC_SECRET === 'string' ? ctx.env.FOUNDRY_HMAC_SECRET : null;
+            // The HMAC secret arrives from ctx.env as either a plain per-Worker
+            // secret string or a Secrets Store binding object (`{ get() }`) —
+            // consumers bind it both ways. Never a value in code/D1. The old
+            // string-only check silently nulled the binding shape and 500ed
+            // every callback on Store-bound consumers.
+            const rawHmac = ctx.env?.FOUNDRY_HMAC_SECRET;
+            let hmacSecret = null;
+            if (typeof rawHmac === 'string') {
+                hmacSecret = rawHmac;
+            }
+            else if (rawHmac && typeof rawHmac.get === 'function') {
+                try {
+                    hmacSecret = (await rawHmac.get()) || null;
+                }
+                catch {
+                    hmacSecret = null;
+                }
+            }
             if (!hmacSecret) {
                 // No secret configured — refuse with 500 (misconfiguration).
                 return json({ error: 'FOUNDRY_HMAC_SECRET is not configured' }, 500);
@@ -1480,7 +1543,15 @@ export function createContentRoutes(config) {
             const rev = ctx.params.rev;
             if (!rev)
                 return json({ error: 'Missing rev' }, 400);
-            const ok = await restoreRevision(ctx.db, id, rev, { createdBy: ctx.userId ?? null });
+            let ok;
+            try {
+                ok = await restoreRevision(ctx.db, id, rev, { createdBy: ctx.userId ?? null });
+            }
+            catch (error) {
+                if (error instanceof TagInputError)
+                    return tagInputErrorResponse(error);
+                throw error;
+            }
             if (!ok)
                 return json({ error: 'Not found' }, 404);
             return json({ restored: true });