@growth-labs/cms 0.8.30 → 0.8.32

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@growth-labs/cms",
-  "version": "0.8.30",
+  "version": "0.8.32",
   "type": "module",
   "bin": {
     "growth-labs-cms-migrations": "./dist/cli/migrations.js",

package/src/engine/content-metadata.ts

@@ -1,3 +1,5 @@
+import { z } from 'zod'
+
 export type ContentMetadataPrimitive = string | number | boolean | null
 export type ContentMetadataValue =
 	| ContentMetadataPrimitive
@@ -120,3 +122,18 @@ export function parseContentMetadata(raw: unknown): ContentMetadata {
 	serializeContentMetadata(parsed as ContentMetadata)
 	return parsed as ContentMetadata
 }
+
+export const ContentMetadataSchema = z
+	.record(z.string(), z.unknown())
+	.superRefine((metadata, ctx) => {
+		try {
+			serializeContentMetadata(metadata as ContentMetadata)
+		} catch (error) {
+			ctx.addIssue({
+				code: 'custom',
+				message:
+					error instanceof ContentMetadataError ? error.message : 'content metadata is invalid',
+			})
+		}
+	})
+	.transform((metadata) => metadata as ContentMetadata)

package/src/engine/publication.ts

@@ -33,6 +33,7 @@ import {
 	getContentSnapshot,
 	PUBLISH_METADATA_STAMP_SQL,
 	PublishContentValidationError,
+	publicationMetadataForSnapshot,
 	publishMetadataStampBinds,
 } from './publisher.js'
 import { getRevision } from './revisions.js'
@@ -812,6 +813,20 @@ async function createRevisionAndPublicationAttempt(
 		}
 	}
 	assertPublicationSnapshotBodyValid(snapshot, input.contentId)
+	if (!input.mediaReplacement) {
+		const item = snapshotRecord(snapshot.item)
+		// The native route binds/adopts article source_id under this namespace.
+		// Preserve generic and archive-import snapshot metadata verbatim; their
+		// historical published_at remains the read model's publication date.
+		if (
+			item.type === 'article' &&
+			typeof item.source_id === 'string' &&
+			item.source_id.startsWith('foundry:')
+		) {
+			item.metadata_json = await publicationMetadataForSnapshot(db, item, input.now)
+			snapshot.publication_metadata_stamp = 'native-article-v1'
+		}
+	}
 	const revisionId = input.mediaReplacement
 		? `media:${input.mediaReplacement.identity}`
 		: crypto.randomUUID()
@@ -1713,6 +1728,15 @@ async function movePointerAndBeginCommit(
 	now: number,
 ): Promise<void> {
 	const targetRevision = await getRevision(db, attempt.contentId, attempt.revisionId)
+	const targetSnapshot = snapshotRecord(targetRevision?.payload)
+	const stampedMetadata = snapshotRecord(targetSnapshot.item).metadata_json
+	const copyStampedMetadata =
+		targetSnapshot.publication_metadata_stamp === 'native-article-v1' &&
+		typeof stampedMetadata === 'string'
+	const metadataStampSql = copyStampedMetadata ? 'metadata_json = ?' : PUBLISH_METADATA_STAMP_SQL
+	const metadataStampBinds = copyStampedMetadata
+		? [stampedMetadata]
+		: publishMetadataStampBinds(now)
 	const mediaReplacement =
 		snapshotRecord(targetRevision?.payload).publication_guard === CURRENT_MEDIA_PUBLICATION_GUARD
 	if (
@@ -1770,7 +1794,7 @@ async function movePointerAndBeginCommit(
 							`UPDATE content_items
 						 SET status = 'published', published_at = ?, publish_at = NULL,
 						     published_revision_id = ?, updated_at = unixepoch(),
-						     ${PUBLISH_METADATA_STAMP_SQL}
+						     ${metadataStampSql}
 						 WHERE id = ?
 						   AND COALESCE(published_revision_id, '') = ?
 						   AND EXISTS (
@@ -1784,7 +1808,7 @@ async function movePointerAndBeginCommit(
 							attempt.revisionId,
 							// Wall clock, NOT targetPublishedAt — the latter is routinely backdated
 							// to the source video's date on the channel sites.
-							...publishMetadataStampBinds(now),
+							...metadataStampBinds,
 							attempt.contentId,
 							attempt.previousRevisionId ?? '',
 							attempt.id,

package/src/engine/publisher.ts

@@ -1665,13 +1665,58 @@ END`
  * the second disjunct keeps unpublish→republish correct, since `unpublishContent`
  * clears `published_at` but the article did go live once.
  */
-export const PUBLISH_METADATA_STAMP_SQL = `metadata_json = CASE
+const PUBLISH_METADATA_STAMP_EXPRESSION = `CASE
 	WHEN published_at IS NOT NULL
 		OR json_extract(${METADATA_OBJECT_SQL}, '$.adaptedAt') IS NOT NULL
 	THEN json_set(${METADATA_WITH_ADAPTED_AT_SQL}, '$.updatedAt', date(?, 'unixepoch'))
 	ELSE ${METADATA_WITH_ADAPTED_AT_SQL}
 END`
 
+export const PUBLISH_METADATA_STAMP_SQL = `metadata_json = ${PUBLISH_METADATA_STAMP_EXPRESSION}`
+
+/** Project the same publish stamp onto the immutable snapshot's captured row. */
+export async function publicationMetadataForSnapshot(
+	db: D1Database,
+	item: {
+		id?: unknown
+		published_revision_id?: unknown
+		metadata_json?: unknown
+		published_at?: unknown
+		created_at?: unknown
+	},
+	now: number,
+): Promise<string> {
+	// A draft metadata edit can remove adaptedAt. The previous immutable native
+	// revision retains the actual first publication day; creation time may be
+	// earlier and published_at may be the source video's historical date.
+	let priorAdaptedAt: string | null = null
+	if (typeof item.id === 'string' && typeof item.published_revision_id === 'string') {
+		const prior = await db
+			.prepare(`SELECT
+			json_extract(json_extract(payload_json, '$.item.metadata_json'), '$.adaptedAt') AS adapted_at
+			FROM content_revisions WHERE id = ? AND content_id = ?`)
+			.bind(item.published_revision_id, item.id)
+			.first<{ adapted_at: string | null }>()
+		priorAdaptedAt = prior?.adapted_at ?? null
+	}
+	const projected = await db
+		.prepare(`SELECT ${PUBLISH_METADATA_STAMP_EXPRESSION} AS metadata_json
+	 FROM (SELECT CASE WHEN ? IS NOT NULL THEN json_set(COALESCE(?, '{}'), '$.adaptedAt', ?)
+	 ELSE ? END AS metadata_json, ? AS published_at, ? AS created_at)`)
+		.bind(
+			...publishMetadataStampBinds(now),
+			priorAdaptedAt,
+			item.metadata_json ?? null,
+			priorAdaptedAt,
+			item.metadata_json ?? null,
+			item.published_at ?? null,
+			item.created_at ?? null,
+		)
+		.first<{ metadata_json: string }>()
+	if (!projected) throw new Error('publication metadata projection failed')
+	return projected.metadata_json
+}
+
 /** Placeholder count in {@link PUBLISH_METADATA_STAMP_SQL}, derived so it cannot drift. */
 const PUBLISH_METADATA_STAMP_PLACEHOLDERS = (PUBLISH_METADATA_STAMP_SQL.match(/\?/g) ?? []).length
 

package/src/foundry-emit.ts

@@ -9,6 +9,7 @@
 
 import { sha256Hex } from '@growth-labs/foundry-signing'
 import { z } from 'zod'
+import { ContentMetadataSchema } from './engine/content-metadata.js'
 import type { ContentArchiveItem } from './engine/publication.js'
 import { slugify } from './engine/slug.js'
 
@@ -58,6 +59,7 @@ export const FoundryArticleV2Schema = z
 		tags: z.array(z.string().trim().min(1).max(100)).max(50).optional(),
 		description: z.string().trim().min(1).optional(),
 		visibility: z.enum(['free', 'premium']).optional(),
+		metadata: ContentMetadataSchema.optional(),
 		adoptSourceId: z
 			.string()
 			.min(1)
@@ -147,6 +149,7 @@ export function toFoundryArticleV2(
 		...(item.tags && item.tags.length > 0 ? { tags: [...item.tags] } : {}),
 		...(description ? { description } : {}),
 		...(item.visibility ? { visibility: item.visibility } : {}),
+		...(item.metadata != null ? { metadata: item.metadata } : {}),
 		...(present(item.sourceId) ? { adoptSourceId: item.sourceId } : {}),
 	}
 	return FoundryArticleV2Schema.parse(body)

package/src/routes/content.ts

@@ -18,11 +18,7 @@ import { z } from 'zod'
 import { logActivity } from '../engine/activity-log.js'
 import { generateContentDek } from '../engine/ai-dek.js'
 import { createDekFailureNotifications } from '../engine/ai-dek-notifications.js'
-import {
-	type ContentMetadata,
-	ContentMetadataError,
-	serializeContentMetadata,
-} from '../engine/content-metadata.js'
+import { ContentMetadataSchema } from '../engine/content-metadata.js'
 import { listContributors, setContributors } from '../engine/contributors.js'
 import type { D1Database } from '../engine/d1.js'
 import {
@@ -410,21 +406,6 @@ const BodyContentCreateSchema = z.object({
 	editorTakeaways: z.array(z.string().min(1)).max(4).optional().nullable(),
 })
 
-const ContentMetadataSchema = z
-	.record(z.string(), z.unknown())
-	.superRefine((metadata, ctx) => {
-		try {
-			serializeContentMetadata(metadata as ContentMetadata)
-		} catch (error) {
-			ctx.addIssue({
-				code: 'custom',
-				message:
-					error instanceof ContentMetadataError ? error.message : 'content metadata is invalid',
-			})
-		}
-	})
-	.transform((metadata) => metadata as ContentMetadata)
-
 // A Nextcloud share PAGE is HTML, never ingestable media, so the stored source
 // must be the direct-download URL. Editors paste the share link -- that is what
 // Nextcloud's "Copy link" button yields -- so normalise it here instead of

package/src/routes/foundry-publish.ts

@@ -671,6 +671,7 @@ async function putV2(
 		...(body.desk !== undefined ? { primaryCategory: body.desk } : {}),
 		...(body.tags !== undefined ? { tags: body.tags } : {}),
 		...(body.visibility !== undefined ? { visibility: body.visibility } : {}),
+		...(body.metadata !== undefined ? { metadata: body.metadata } : {}),
 		content: { bodyMarkdown: body.body_html, bodyHtml: body.body_html },
 	}
 

package/src/ui/api/content/insights-ingest.ts

@@ -2,19 +2,26 @@
 // POST /admin/api/content/insights-ingest — machine ingest (replay-safe replace).
 // HMAC-SHA256 (X-Foundry-Signature vs env.INSIGHTS_INGEST_HMAC_SECRET) only —
 // NOT behind requirePublisher. Sibling of foundry-callback under /content/.
+import { env as cloudflareEnv } from 'cloudflare:workers'
+import { config } from 'virtual:growth-labs/cms/config'
 import type { APIContext } from 'astro'
 import { createContentInsightsRoutes } from '../../../routes/content-insights.js'
 import type { RouteContext } from '../../../routes/context.js'
 import { buildSiteAuthz } from '../_authz.js'
+import { toContentConfig } from '../_content-config.js'
 
 function toCtx(c: APIContext): RouteContext {
-	const env = (c.locals as { cmsEnv?: Record<string, unknown> }).cmsEnv ?? {}
+	const env = cloudflareEnv as Record<string, unknown>
 	return { request: c.request, params: {}, db: env.SITE_DB as RouteContext['db'], env }
 }
 
 function siteId(c: APIContext): string {
-	const env = (c.locals as { cmsEnv?: Record<string, unknown> }).cmsEnv ?? {}
-	return (env.ACTIVE_WORKSPACE_ID as string | undefined) ?? 'default'
+	const env = cloudflareEnv as Record<string, unknown>
+	return (
+		toContentConfig(c).activeWorkspaceId ??
+		(env.ACTIVE_WORKSPACE_ID as string | undefined) ??
+		(config.workspaces?.length === 1 ? config.workspaces[0]!.id : 'default')
+	)
 }
 
 export const POST = (c: APIContext) =>

package/src/ui/api/content/insights-inputs.ts

@@ -5,6 +5,7 @@
 // foundryd's sitebrain.insights.run schedule (W1-07 PR 6). NOT behind
 // requirePublisher. Sibling of insights-ingest under /content/.
 
+import { env as cloudflareEnv } from 'cloudflare:workers'
 import { config } from 'virtual:growth-labs/cms/config'
 import type { APIContext } from 'astro'
 import { createContentInsightsRoutes } from '../../../routes/content-insights.js'
@@ -13,12 +14,12 @@ import { buildSiteAuthz } from '../_authz.js'
 import { toContentConfig } from '../_content-config.js'
 
 function toCtx(c: APIContext): RouteContext {
-	const env = (c.locals as { cmsEnv?: Record<string, unknown> }).cmsEnv ?? {}
+	const env = cloudflareEnv as Record<string, unknown>
 	return { request: c.request, params: {}, db: env.SITE_DB as RouteContext['db'], env }
 }
 
 function siteId(c: APIContext): string {
-	const env = (c.locals as { cmsEnv?: Record<string, unknown> }).cmsEnv ?? {}
+	const env = cloudflareEnv as Record<string, unknown>
 	return (
 		toContentConfig(c).activeWorkspaceId ??
 		(env.ACTIVE_WORKSPACE_ID as string | undefined) ??