@growth-labs/cms 0.8.3 → 0.8.4

package/src/engine/publisher.ts

@@ -22,7 +22,6 @@
 import type { ContentStatus, ContentType, FrontsPublishStatus } from '../schema/types.js'
 import { type ContentMetadata, serializeContentMetadata } from './content-metadata.js'
 import type { D1Database } from './d1.js'
-import { armFrontsPublishTriggerToken } from './fronts-publish-intent.js'
 import { evaluateArticleBody, type PublishGuardOutcome } from './publish-guard.js'
 import { slugify } from './slug.js'
 import {
@@ -1319,6 +1318,7 @@ export async function updateContentItem(
             processing_state = CASE WHEN ? THEN 'pending' ELSE processing_state END,
             processing_correlation_id = CASE WHEN ? THEN NULL ELSE processing_correlation_id END,
             processing_trigger_token = CASE WHEN ? THEN NULL ELSE processing_trigger_token END,
+            processing_publication_guard = CASE WHEN ? THEN NULL ELSE processing_publication_guard END,
             processing_started_at = CASE WHEN ? THEN NULL ELSE processing_started_at END,
             processing_completed_at = CASE WHEN ? THEN NULL ELSE processing_completed_at END,
             processing_last_event_at = CASE WHEN ? THEN NULL ELSE processing_last_event_at END,
@@ -1353,6 +1353,7 @@ export async function updateContentItem(
 					videoUpdatePlan.sourceChanged ? 1 : 0,
 					videoUpdatePlan.sourceChanged ? 1 : 0,
 					videoUpdatePlan.sourceChanged ? 1 : 0,
+					videoUpdatePlan.sourceChanged ? 1 : 0,
 					id,
 					options.expectedMediaSource ? 1 : 0,
 					options.expectedMediaSource?.sourceUrl ?? null,
@@ -1374,6 +1375,8 @@ export async function updateContentItem(
 		    audio_r2_key = ?,
 		    duration_seconds = ?,
 		    processing_trigger_token = ?,
+		    processing_publication_guard = CASE WHEN ? IS processing_trigger_token THEN processing_publication_guard ELSE NULL END,
+		    processing_state = CASE WHEN ? IS processing_trigger_token THEN processing_state ELSE NULL END,
 		    processing_source_url = ?,
 		    processing_source_kind = ?
 		  WHERE content_id = ?
@@ -1385,6 +1388,8 @@ export async function updateContentItem(
 					podcastUpdatePlan.audioR2Key,
 					podcastUpdatePlan.durationSeconds,
 					podcastUpdatePlan.processingTriggerToken,
+					podcastUpdatePlan.processingTriggerToken,
+					podcastUpdatePlan.processingTriggerToken,
 					podcastUpdatePlan.sourceUrl,
 					podcastUpdatePlan.sourceKind,
 					id,
@@ -1411,16 +1416,19 @@ export async function scheduleContent(
 ): Promise<void> {
 	await db
 		.prepare(
-			`UPDATE content_items SET status = 'scheduled', publish_at = ?, publish_tz = ?, updated_at = unixepoch() WHERE id = ?`,
+			`UPDATE content_items SET status = 'scheduled', publish_at = ?, publish_tz = ?,
+			 canonical_version = canonical_version + CASE WHEN status = 'published' OR fronts_publish_status = 'live' THEN 1 ELSE 0 END,
+			 fronts_publish_status = CASE WHEN status = 'published' OR fronts_publish_status = 'live'
+			   THEN 'queued' ELSE fronts_publish_status END,
+			 fronts_publish_trigger_token = CASE WHEN status = 'published' OR fronts_publish_status = 'live'
+			   OR fronts_publish_trigger_token IS NULL THEN ? ELSE fronts_publish_trigger_token END,
+			 updated_at = unixepoch() WHERE id = ?`,
 		)
-		.bind(publishAt, publishTz, id)
+		.bind(publishAt, publishTz, crypto.randomUUID(), id)
 		.run()
-	// Arming an item for the additive Fronts publish path happens HERE — the one
-	// seam through which an item becomes `scheduled` with a `publish_at`. The mint
-	// is compare-and-set and never rotates an existing token, so an item's
-	// `trigger_token_hash` is stable across reschedules and across every poll.
-	// The raw token stays in D1; only `sha256:<hex>` is ever exposed.
-	await armFrontsPublishTriggerToken(db, id)
+	// Slot, terminal-ledger reset and token are one atomic transition. Moving an
+	// already scheduled occurrence preserves its identity; scheduling a completed
+	// publication creates a fresh occurrence without recapturing its media.
 }
 
 export async function evaluateContentBodyForPublish(

package/src/routes/content.ts

@@ -389,6 +389,24 @@ const ContentMetadataSchema = z
 	})
 	.transform((metadata) => metadata as ContentMetadata)
 
+// Known Nextcloud share pages are HTML, never ingestable media. The editor
+// must save the direct-download URL so the existing provider validates bytes.
+const MediaSourceUrlSchema = z
+	.string()
+	.url()
+	.refine(
+		(value) => {
+			let url: URL
+			try {
+				url = new URL(value)
+			} catch {
+				return false
+			}
+			return !(url.hostname === 'drive.fulcrum-portal.com' && /^\/s\/[^/]+\/?$/.test(url.pathname))
+		},
+		{ message: 'Use the Nextcloud direct-download URL ending in /download, not its share page.' },
+	)
+
 function buildSchemas(resolved: ReturnType<typeof resolveConfig>) {
 	const category = slugEnum(resolved.primaryCategorySlugs)
 	const topic = slugEnum(resolved.primaryTopicSlugs)
@@ -430,7 +448,7 @@ function buildSchemas(resolved: ReturnType<typeof resolveConfig>) {
 				videoId: z.string().min(1),
 				durationSeconds: z.number().int().positive().optional().nullable(),
 				thumbnailImageId: z.string().optional().nullable(),
-				processingSourceUrl: z.string().url().optional().nullable(),
+				processingSourceUrl: MediaSourceUrlSchema.optional().nullable(),
 				processingSourceKind: z.string().min(1).optional().nullable(),
 			}),
 		}),
@@ -450,7 +468,7 @@ function buildSchemas(resolved: ReturnType<typeof resolveConfig>) {
 				// there because a video always has a slug-derived identity up front.
 				audioR2Key: z.string().default(''),
 				durationSeconds: z.number().int().positive().optional().nullable(),
-				processingSourceUrl: z.string().url().optional().nullable(),
+				processingSourceUrl: MediaSourceUrlSchema.optional().nullable(),
 				processingSourceKind: z.string().min(1).optional().nullable(),
 			}),
 		}),
@@ -515,7 +533,7 @@ const VideoContentUpdateSchema = z.object({
 	videoId: z.string().optional(),
 	durationSeconds: z.number().int().positive().optional().nullable(),
 	thumbnailImageId: z.string().optional().nullable(),
-	processingSourceUrl: z.string().url().optional().nullable(),
+	processingSourceUrl: MediaSourceUrlSchema.optional().nullable(),
 	processingSourceKind: z.string().min(1).optional().nullable(),
 })
 
@@ -523,7 +541,7 @@ const PodcastContentUpdateSchema = z.object({
 	transcript: z.string().optional(),
 	audioR2Key: z.string().optional(),
 	durationSeconds: z.number().int().positive().optional().nullable(),
-	processingSourceUrl: z.string().url().optional().nullable(),
+	processingSourceUrl: MediaSourceUrlSchema.optional().nullable(),
 	processingSourceKind: z.string().min(1).optional().nullable(),
 })
 

package/src/schema/migrations.ts

@@ -902,6 +902,14 @@ CREATE INDEX idx_cms_foundry_articles_updated
   ON cms_foundry_articles(updated_at DESC);
 	`,
 	},
+	{
+		id: '0030_media_publication_guard',
+		sql: `
+ALTER TABLE video_content ADD COLUMN processing_publication_guard TEXT;
+ALTER TABLE podcast_content ADD COLUMN processing_publication_guard TEXT;
+ALTER TABLE podcast_content ADD COLUMN processing_state TEXT CHECK (processing_state IS NULL OR processing_state IN ('pending','queued','fetching','transcribing','transcoding','ready','failed'));
+	`,
+	},
 ]
 
 /**

package/src/schema/types.ts

@@ -187,6 +187,8 @@ export interface ArticleContentRow {
  */
 export interface VideoContentRow {
 	content_id: string
+	/** Capture-time published revision fence; null for historical/unpublished captures. */
+	processing_publication_guard?: string | null
 	script: string
 	video_id: string
 	duration_seconds: number | null
@@ -211,6 +213,10 @@ export interface VideoContentRow {
 
 export interface PodcastContentRow {
 	content_id: string
+	/** Explicit preparation lifecycle; historical captures remain unqueued. */
+	processing_state?: VideoProcessingState | null
+	/** Capture-time published revision fence; null for historical/unpublished captures. */
+	processing_publication_guard?: string | null
 	transcript: string
 	audio_r2_key: string
 	duration_seconds: number | null