@htmless/core 0.1.0

package/dist/api/cma/webhooks.js

@@ -0,0 +1,175 @@
+import { Router } from 'express';
+import { nanoid } from 'nanoid';
+import { prisma } from '../../db.js';
+import { requireScope } from '../../auth/middleware.js';
+const router = Router();
+// ─── Helpers ───
+function getSpaceId(req) {
+    return req.params.spaceId ?? req.headers['x-space-id'];
+}
+// ─── GET /webhooks ───
+router.get('/', requireScope('cma:read', 'cma:write'), async (req, res) => {
+    const spaceId = getSpaceId(req);
+    if (!spaceId) {
+        res.status(400).json({ error: 'validation_error', message: 'spaceId is required' });
+        return;
+    }
+    const webhooks = await prisma.webhook.findMany({
+        where: { spaceId },
+        orderBy: { createdAt: 'asc' },
+        select: {
+            id: true,
+            url: true,
+            events: true,
+            active: true,
+            createdAt: true,
+            updatedAt: true,
+            _count: { select: { deliveries: true } },
+        },
+    });
+    const items = webhooks.map(({ _count, ...wh }) => ({
+        ...wh,
+        deliveryCount: _count.deliveries,
+    }));
+    res.json({ items, total: items.length });
+});
+// ─── POST /webhooks ───
+router.post('/', requireScope('cma:write'), async (req, res) => {
+    const spaceId = getSpaceId(req);
+    if (!spaceId) {
+        res.status(400).json({ error: 'validation_error', message: 'spaceId is required' });
+        return;
+    }
+    const { url, events, active } = req.body;
+    if (!url || !events || !Array.isArray(events) || events.length === 0) {
+        res.status(400).json({ error: 'validation_error', message: 'url and events (non-empty array) are required' });
+        return;
+    }
+    // Generate a signing secret for this webhook
+    const signingSecret = `whsec_${nanoid(32)}`;
+    const webhook = await prisma.webhook.create({
+        data: {
+            spaceId,
+            url,
+            events,
+            signingSecret,
+            active: active ?? true,
+        },
+    });
+    res.status(201).json({
+        id: webhook.id,
+        url: webhook.url,
+        events: webhook.events,
+        signingSecret: webhook.signingSecret, // Only shown at creation
+        active: webhook.active,
+        createdAt: webhook.createdAt,
+        updatedAt: webhook.updatedAt,
+    });
+});
+// ─── GET /webhooks/:id ───
+router.get('/:id', requireScope('cma:read', 'cma:write'), async (req, res) => {
+    const spaceId = getSpaceId(req);
+    if (!spaceId) {
+        res.status(400).json({ error: 'validation_error', message: 'spaceId is required' });
+        return;
+    }
+    const webhook = await prisma.webhook.findFirst({
+        where: { id: req.params.id, spaceId },
+        select: {
+            id: true,
+            url: true,
+            events: true,
+            active: true,
+            createdAt: true,
+            updatedAt: true,
+            _count: { select: { deliveries: true } },
+        },
+    });
+    if (!webhook) {
+        res.status(404).json({ error: 'not_found', message: 'Webhook not found' });
+        return;
+    }
+    const { _count, ...rest } = webhook;
+    res.json({ ...rest, deliveryCount: _count.deliveries });
+});
+// ─── PATCH /webhooks/:id ───
+router.patch('/:id', requireScope('cma:write'), async (req, res) => {
+    const spaceId = getSpaceId(req);
+    if (!spaceId) {
+        res.status(400).json({ error: 'validation_error', message: 'spaceId is required' });
+        return;
+    }
+    const existing = await prisma.webhook.findFirst({
+        where: { id: req.params.id, spaceId },
+    });
+    if (!existing) {
+        res.status(404).json({ error: 'not_found', message: 'Webhook not found' });
+        return;
+    }
+    const { url, events, active } = req.body;
+    const webhook = await prisma.webhook.update({
+        where: { id: existing.id },
+        data: {
+            ...(url !== undefined && { url }),
+            ...(events !== undefined && { events }),
+            ...(active !== undefined && { active }),
+        },
+        select: {
+            id: true,
+            url: true,
+            events: true,
+            active: true,
+            createdAt: true,
+            updatedAt: true,
+        },
+    });
+    res.json(webhook);
+});
+// ─── DELETE /webhooks/:id ───
+router.delete('/:id', requireScope('cma:write'), async (req, res) => {
+    const spaceId = getSpaceId(req);
+    if (!spaceId) {
+        res.status(400).json({ error: 'validation_error', message: 'spaceId is required' });
+        return;
+    }
+    const existing = await prisma.webhook.findFirst({
+        where: { id: req.params.id, spaceId },
+    });
+    if (!existing) {
+        res.status(404).json({ error: 'not_found', message: 'Webhook not found' });
+        return;
+    }
+    await prisma.webhook.delete({ where: { id: existing.id } });
+    res.status(204).end();
+});
+// ─── GET /webhooks/:id/deliveries ───
+router.get('/:id/deliveries', requireScope('cma:read', 'cma:write'), async (req, res) => {
+    const spaceId = getSpaceId(req);
+    if (!spaceId) {
+        res.status(400).json({ error: 'validation_error', message: 'spaceId is required' });
+        return;
+    }
+    // Verify webhook exists and belongs to this space
+    const webhook = await prisma.webhook.findFirst({
+        where: { id: req.params.id, spaceId },
+    });
+    if (!webhook) {
+        res.status(404).json({ error: 'not_found', message: 'Webhook not found' });
+        return;
+    }
+    const { limit: limitParam, offset: offsetParam } = req.query;
+    const limit = Math.min(parseInt(limitParam ?? '25', 10), 100);
+    const offset = parseInt(offsetParam ?? '0', 10);
+    const [deliveries, total] = await Promise.all([
+        prisma.webhookDelivery.findMany({
+            where: { webhookId: webhook.id },
+            orderBy: { createdAt: 'desc' },
+            take: limit,
+            skip: offset,
+        }),
+        prisma.webhookDelivery.count({ where: { webhookId: webhook.id } }),
+    ]);
+    res.json({ items: deliveries, total, limit, offset });
+});
+export default router;
+//# sourceMappingURL=webhooks.js.map

package/dist/api/cma/webhooks.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"webhooks.js","sourceRoot":"","sources":["../../../src/api/cma/webhooks.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AAEjC,OAAO,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAChC,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AACrC,OAAO,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAC;AAExD,MAAM,MAAM,GAAY,MAAM,EAAE,CAAC;AAEjC,kBAAkB;AAElB,SAAS,UAAU,CAAC,GAA8B;IAChD,OAAQ,GAAG,CAAC,MAAiC,CAAC,OAAO,IAAK,GAAG,CAAC,OAAO,CAAC,YAAY,CAAwB,CAAC;AAC7G,CAAC;AAED,wBAAwB;AACxB,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,YAAY,CAAC,UAAU,EAAE,WAAW,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;IACxE,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC;IAChC,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,kBAAkB,EAAE,OAAO,EAAE,qBAAqB,EAAE,CAAC,CAAC;QACpF,OAAO;IACT,CAAC;IAED,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC;QAC7C,KAAK,EAAE,EAAE,OAAO,EAAE;QAClB,OAAO,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE;QAC7B,MAAM,EAAE;YACN,EAAE,EAAE,IAAI;YACR,GAAG,EAAE,IAAI;YACT,MAAM,EAAE,IAAI;YACZ,MAAM,EAAE,IAAI;YACZ,SAAS,EAAE,IAAI;YACf,SAAS,EAAE,IAAI;YACf,MAAM,EAAE,EAAE,MAAM,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,EAAE;SACzC;KACF,CAAC,CAAC;IAEH,MAAM,KAAK,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;QACjD,GAAG,EAAE;QACL,aAAa,EAAE,MAAM,CAAC,UAAU;KACjC,CAAC,CAAC,CAAC;IAEJ,GAAG,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;AAC3C,CAAC,CAAC,CAAC;AAEH,yBAAyB;AACzB,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,YAAY,CAAC,WAAW,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;IAC7D,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC;IAChC,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,kBAAkB,EAAE,OAAO,EAAE,qBAAqB,EAAE,CAAC,CAAC;QACpF,OAAO;IACT,CAAC;IAED,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,GAAG,CAAC,IAAI,CAAC;IAEzC,IAAI,CAAC,GAAG,IAAI,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACrE,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,kBAAkB,EAAE,OAAO,EAAE,+CAA+C,EAAE,CAAC,CAAC;QAC9G,OAAO;IACT,CAAC;IAED,6CAA6C;IAC7C,MAAM,aAAa,GAAG,SAAS,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC;IAE5C,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC;QAC1C,IAAI,EAAE;YACJ,OAAO;YACP,GAAG;YACH,MAAM;YACN,aAAa;YACb,MAAM,EAAE,MAAM,IAAI,IAAI;SACvB;KACF,CAAC,CAAC;IAEH,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;QACnB,EAAE,EAAE,OAAO,CAAC,EAAE;QACd,GAAG,EAAE,OAAO,CAAC,GAAG;QAChB,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,aAAa,EAAE,OAAO,CAAC,aAAa,EAAE,yBAAyB;QAC/D,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,SAAS,EAAE,OAAO,CAAC,SAAS;KAC7B,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,4BAA4B;AAC5B,MAAM,CAAC,GAAG,CAAC,MAAM,EAAE,YAAY,CAAC,UAAU,EAAE,WAAW,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;IAC3E,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC;IAChC,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,kBAAkB,EAAE,OAAO,EAAE,qBAAqB,EAAE,CAAC,CAAC;QACpF,OAAO;IACT,CAAC;IAED,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC;QAC7C,KAAK,EAAE,EAAE,EAAE,EAAE,GAAG,CAAC,MAAM,CAAC,EAAY,EAAE,OAAO,EAAE;QAC/C,MAAM,EAAE;YACN,EAAE,EAAE,IAAI;YACR,GAAG,EAAE,IAAI;YACT,MAAM,EAAE,IAAI;YACZ,MAAM,EAAE,IAAI;YACZ,SAAS,EAAE,IAAI;YACf,SAAS,EAAE,IAAI;YACf,MAAM,EAAE,EAAE,MAAM,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,EAAE;SACzC;KACF,CAAC,CAAC;IAEH,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,OAAO,EAAE,mBAAmB,EAAE,CAAC,CAAC;QAC3E,OAAO;IACT,CAAC;IAED,MAAM,EAAE,MAAM,EAAE,GAAG,IAAI,EAAE,GAAG,OAAO,CAAC;IAEpC,GAAG,CAAC,IAAI,CAAC,EAAE,GAAG,IAAI,EAAE,aAAa,EAAE,MAAM,CAAC,UAAU,EAAE,CAAC,CAAC;AAC1D,CAAC,CAAC,CAAC;AAEH,8BAA8B;AAC9B,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,YAAY,CAAC,WAAW,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;IACjE,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC;IAChC,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,kBAAkB,EAAE,OAAO,EAAE,qBAAqB,EAAE,CAAC,CAAC;QACpF,OAAO;IACT,CAAC;IAED,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC;QAC9C,KAAK,EAAE,EAAE,EAAE,EAAE,GAAG,CAAC,MAAM,CAAC,EAAY,EAAE,OAAO,EAAE;KAChD,CAAC,CAAC;IACH,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,OAAO,EAAE,mBAAmB,EAAE,CAAC,CAAC;QAC3E,OAAO;IACT,CAAC;IAED,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,GAAG,CAAC,IAAI,CAAC;IAEzC,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC;QAC1C,KAAK,EAAE,EAAE,EAAE,EAAE,QAAQ,CAAC,EAAE,EAAE;QAC1B,IAAI,EAAE;YACJ,GAAG,CAAC,GAAG,KAAK,SAAS,IAAI,EAAE,GAAG,EAAE,CAAC;YACjC,GAAG,CAAC,MAAM,KAAK,SAAS,IAAI,EAAE,MAAM,EAAE,CAAC;YACvC,GAAG,CAAC,MAAM,KAAK,SAAS,IAAI,EAAE,MAAM,EAAE,CAAC;SACxC;QACD,MAAM,EAAE;YACN,EAAE,EAAE,IAAI;YACR,GAAG,EAAE,IAAI;YACT,MAAM,EAAE,IAAI;YACZ,MAAM,EAAE,IAAI;YACZ,SAAS,EAAE,IAAI;YACf,SAAS,EAAE,IAAI;SAChB;KACF,CAAC,CAAC;IAEH,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;AACpB,CAAC,CAAC,CAAC;AAEH,+BAA+B;AAC/B,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,YAAY,CAAC,WAAW,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;IAClE,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC;IAChC,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,kBAAkB,EAAE,OAAO,EAAE,qBAAqB,EAAE,CAAC,CAAC;QACpF,OAAO;IACT,CAAC;IAED,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC;QAC9C,KAAK,EAAE,EAAE,EAAE,EAAE,GAAG,CAAC,MAAM,CAAC,EAAY,EAAE,OAAO,EAAE;KAChD,CAAC,CAAC;IACH,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,OAAO,EAAE,mBAAmB,EAAE,CAAC,CAAC;QAC3E,OAAO;IACT,CAAC;IAED,MAAM,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,QAAQ,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;IAE5D,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC;AACxB,CAAC,CAAC,CAAC;AAEH,uCAAuC;AACvC,MAAM,CAAC,GAAG,CAAC,iBAAiB,EAAE,YAAY,CAAC,UAAU,EAAE,WAAW,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;IACtF,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC;IAChC,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,kBAAkB,EAAE,OAAO,EAAE,qBAAqB,EAAE,CAAC,CAAC;QACpF,OAAO;IACT,CAAC;IAED,kDAAkD;IAClD,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC;QAC7C,KAAK,EAAE,EAAE,EAAE,EAAE,GAAG,CAAC,MAAM,CAAC,EAAY,EAAE,OAAO,EAAE;KAChD,CAAC,CAAC;IACH,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,OAAO,EAAE,mBAAmB,EAAE,CAAC,CAAC;QAC3E,OAAO;IACT,CAAC;IAED,MAAM,EAAE,KAAK,EAAE,UAAU,EAAE,MAAM,EAAE,WAAW,EAAE,GAAG,GAAG,CAAC,KAA2C,CAAC;IAEnG,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,UAAU,IAAI,IAAI,EAAE,EAAE,CAAC,EAAE,GAAG,CAAC,CAAC;IAC9D,MAAM,MAAM,GAAG,QAAQ,CAAC,WAAW,IAAI,GAAG,EAAE,EAAE,CAAC,CAAC;IAEhD,MAAM,CAAC,UAAU,EAAE,KAAK,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QAC5C,MAAM,CAAC,eAAe,CAAC,QAAQ,CAAC;YAC9B,KAAK,EAAE,EAAE,SAAS,EAAE,OAAO,CAAC,EAAE,EAAE;YAChC,OAAO,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE;YAC9B,IAAI,EAAE,KAAK;YACX,IAAI,EAAE,MAAM;SACb,CAAC;QACF,MAAM,CAAC,eAAe,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,EAAE,SAAS,EAAE,OAAO,CAAC,EAAE,EAAE,EAAE,CAAC;KACnE,CAAC,CAAC;IAEH,GAAG,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;AACxD,CAAC,CAAC,CAAC;AAEH,eAAe,MAAM,CAAC"}

package/dist/api/cma/white-label.d.ts

@@ -0,0 +1,4 @@
+import type { Router as IRouter } from 'express';
+declare const router: IRouter;
+export default router;
+//# sourceMappingURL=white-label.d.ts.map

package/dist/api/cma/white-label.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"white-label.d.ts","sourceRoot":"","sources":["../../../src/api/cma/white-label.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,MAAM,IAAI,OAAO,EAAE,MAAM,SAAS,CAAC;AAOjD,QAAA,MAAM,MAAM,EAAE,OAAkB,CAAC;AAqDjC,eAAe,MAAM,CAAC"}

package/dist/api/cma/white-label.js

@@ -0,0 +1,47 @@
+import { Router } from 'express';
+import { requireScope } from '../../auth/middleware.js';
+import { getWhiteLabelConfig, updateWhiteLabelConfig, } from '../../spaces/white-label.js';
+const router = Router();
+// ─── Helpers ───
+function getSpaceId(req) {
+    return req.params.spaceId ?? req.headers['x-space-id'];
+}
+// ─── GET /white-label ─── get current white-label config
+router.get('/', requireScope('cma:read', 'cma:write'), async (req, res) => {
+    const spaceId = getSpaceId(req);
+    if (!spaceId) {
+        res.status(400).json({ error: 'validation_error', message: 'spaceId is required' });
+        return;
+    }
+    const config = await getWhiteLabelConfig(spaceId);
+    res.json(config ?? { brandName: 'HTMLess' });
+});
+// ─── PATCH /white-label ─── update white-label config
+router.patch('/', requireScope('cma:write'), async (req, res) => {
+    const spaceId = getSpaceId(req);
+    if (!spaceId) {
+        res.status(400).json({ error: 'validation_error', message: 'spaceId is required' });
+        return;
+    }
+    const { brandName, logoUrl, primaryColor, favicon, customDomain } = req.body;
+    // Validate primaryColor format if provided
+    if (primaryColor !== undefined && primaryColor !== null) {
+        if (!/^#[0-9a-fA-F]{3,8}$/.test(primaryColor)) {
+            res.status(400).json({
+                error: 'validation_error',
+                message: 'primaryColor must be a valid hex color (e.g. #6366f1)',
+            });
+            return;
+        }
+    }
+    const config = await updateWhiteLabelConfig(spaceId, {
+        brandName,
+        logoUrl,
+        primaryColor,
+        favicon,
+        customDomain,
+    });
+    res.json(config);
+});
+export default router;
+//# sourceMappingURL=white-label.js.map

package/dist/api/cma/white-label.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"white-label.js","sourceRoot":"","sources":["../../../src/api/cma/white-label.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AAEjC,OAAO,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAC;AACxD,OAAO,EACL,mBAAmB,EACnB,sBAAsB,GACvB,MAAM,6BAA6B,CAAC;AAErC,MAAM,MAAM,GAAY,MAAM,EAAE,CAAC;AAEjC,kBAAkB;AAElB,SAAS,UAAU,CAAC,GAA8B;IAChD,OAAQ,GAAG,CAAC,MAAiC,CAAC,OAAO,IAAK,GAAG,CAAC,OAAO,CAAC,YAAY,CAAwB,CAAC;AAC7G,CAAC;AAED,0DAA0D;AAC1D,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,YAAY,CAAC,UAAU,EAAE,WAAW,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;IACxE,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC;IAChC,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,kBAAkB,EAAE,OAAO,EAAE,qBAAqB,EAAE,CAAC,CAAC;QACpF,OAAO;IACT,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,mBAAmB,CAAC,OAAO,CAAC,CAAC;IAElD,GAAG,CAAC,IAAI,CAAC,MAAM,IAAI,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC,CAAC;AAC/C,CAAC,CAAC,CAAC;AAEH,uDAAuD;AACvD,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,YAAY,CAAC,WAAW,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;IAC9D,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC;IAChC,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,kBAAkB,EAAE,OAAO,EAAE,qBAAqB,EAAE,CAAC,CAAC;QACpF,OAAO;IACT,CAAC;IAED,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,YAAY,EAAE,OAAO,EAAE,YAAY,EAAE,GAAG,GAAG,CAAC,IAAI,CAAC;IAE7E,2CAA2C;IAC3C,IAAI,YAAY,KAAK,SAAS,IAAI,YAAY,KAAK,IAAI,EAAE,CAAC;QACxD,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC,YAAY,CAAC,EAAE,CAAC;YAC9C,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;gBACnB,KAAK,EAAE,kBAAkB;gBACzB,OAAO,EAAE,uDAAuD;aACjE,CAAC,CAAC;YACH,OAAO;QACT,CAAC;IACH,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,sBAAsB,CAAC,OAAO,EAAE;QACnD,SAAS;QACT,OAAO;QACP,YAAY;QACZ,OAAO;QACP,YAAY;KACb,CAAC,CAAC;IAEH,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;AACnB,CAAC,CAAC,CAAC;AAEH,eAAe,MAAM,CAAC"}

package/dist/api/graphql/index.d.ts

@@ -0,0 +1,4 @@
+import type { Router as IRouter } from 'express';
+declare const router: IRouter;
+export default router;
+//# sourceMappingURL=index.d.ts.map

package/dist/api/graphql/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/api/graphql/index.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,MAAM,IAAI,OAAO,EAAqB,MAAM,SAAS,CAAC;AAMpE,QAAA,MAAM,MAAM,EAAE,OAAkB,CAAC;AAwDjC,eAAe,MAAM,CAAC"}

package/dist/api/graphql/index.js

@@ -0,0 +1,57 @@
+// ─── Lightweight GraphQL-like API endpoint ───
+import { Router } from 'express';
+import { authenticate } from '../../auth/middleware.js';
+import { parseQuery } from './parser.js';
+import { resolveQuery } from './resolver.js';
+import { getIntrospection } from './introspection.js';
+const router = Router();
+// Auth is optional — public or token-gated like CDA
+router.use(authenticate({ required: false }));
+// ── POST /graphql — execute a query ──
+router.post('/', async (req, res) => {
+    const spaceId = req.headers['x-space-id'];
+    if (!spaceId) {
+        res.status(400).json({ error: 'missing_space', message: 'X-Space-Id header is required' });
+        return;
+    }
+    const { query, variables } = req.body;
+    if (!query || typeof query !== 'string') {
+        res.status(400).json({ error: 'validation_error', message: 'query string is required' });
+        return;
+    }
+    try {
+        // Substitute variables into the query string if provided
+        let processedQuery = query;
+        if (variables && typeof variables === 'object') {
+            for (const [key, value] of Object.entries(variables)) {
+                const replacement = typeof value === 'string' ? `"${value}"` : String(value);
+                processedQuery = processedQuery.replace(new RegExp(`\\$${key}`, 'g'), replacement);
+            }
+        }
+        const parsed = parseQuery(processedQuery);
+        const data = await resolveQuery(spaceId, parsed.operations);
+        res.json({ data });
+    }
+    catch (err) {
+        const message = err instanceof Error ? err.message : 'Query execution failed';
+        res.status(400).json({ errors: [{ message }] });
+    }
+});
+// ── GET /graphql/schema — introspection endpoint ──
+router.get('/schema', async (req, res) => {
+    const spaceId = req.headers['x-space-id'];
+    if (!spaceId) {
+        res.status(400).json({ error: 'missing_space', message: 'X-Space-Id header is required' });
+        return;
+    }
+    try {
+        const schema = await getIntrospection(spaceId);
+        res.json({ schema });
+    }
+    catch (err) {
+        const message = err instanceof Error ? err.message : 'Introspection failed';
+        res.status(500).json({ error: 'introspection_error', message });
+    }
+});
+export default router;
+//# sourceMappingURL=index.js.map

package/dist/api/graphql/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/api/graphql/index.ts"],"names":[],"mappings":"AAAA,gDAAgD;AAEhD,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AAEjC,OAAO,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAC;AACxD,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAC7C,OAAO,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AAEtD,MAAM,MAAM,GAAY,MAAM,EAAE,CAAC;AAEjC,oDAAoD;AACpD,MAAM,CAAC,GAAG,CAAC,YAAY,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;AAE9C,wCAAwC;AACxC,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,EAAE,GAAY,EAAE,GAAa,EAAiB,EAAE;IACpE,MAAM,OAAO,GAAG,GAAG,CAAC,OAAO,CAAC,YAAY,CAAW,CAAC;IACpD,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,eAAe,EAAE,OAAO,EAAE,+BAA+B,EAAE,CAAC,CAAC;QAC3F,OAAO;IACT,CAAC;IAED,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,GAAG,GAAG,CAAC,IAA+D,CAAC;IAEjG,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QACxC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,kBAAkB,EAAE,OAAO,EAAE,0BAA0B,EAAE,CAAC,CAAC;QACzF,OAAO;IACT,CAAC;IAED,IAAI,CAAC;QACH,yDAAyD;QACzD,IAAI,cAAc,GAAG,KAAK,CAAC;QAC3B,IAAI,SAAS,IAAI,OAAO,SAAS,KAAK,QAAQ,EAAE,CAAC;YAC/C,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;gBACrD,MAAM,WAAW,GAAG,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,KAAK,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;gBAC7E,cAAc,GAAG,cAAc,CAAC,OAAO,CAAC,IAAI,MAAM,CAAC,MAAM,GAAG,EAAE,EAAE,GAAG,CAAC,EAAE,WAAW,CAAC,CAAC;YACrF,CAAC;QACH,CAAC;QAED,MAAM,MAAM,GAAG,UAAU,CAAC,cAAc,CAAC,CAAC;QAC1C,MAAM,IAAI,GAAG,MAAM,YAAY,CAAC,OAAO,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC;QAC5D,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC;IACrB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,wBAAwB,CAAC;QAC9E,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC,CAAC;IAClD,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,qDAAqD;AACrD,MAAM,CAAC,GAAG,CAAC,SAAS,EAAE,KAAK,EAAE,GAAY,EAAE,GAAa,EAAiB,EAAE;IACzE,MAAM,OAAO,GAAG,GAAG,CAAC,OAAO,CAAC,YAAY,CAAW,CAAC;IACpD,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,eAAe,EAAE,OAAO,EAAE,+BAA+B,EAAE,CAAC,CAAC;QAC3F,OAAO;IACT,CAAC;IAED,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC,OAAO,CAAC,CAAC;QAC/C,GAAG,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC;IACvB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,sBAAsB,CAAC;QAC5E,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,qBAAqB,EAAE,OAAO,EAAE,CAAC,CAAC;IAClE,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,eAAe,MAAM,CAAC"}

package/dist/api/graphql/introspection.d.ts

@@ -0,0 +1,31 @@
+interface FieldSchema {
+    name: string;
+    type: string;
+    description: string;
+}
+interface OperationSchema {
+    name: string;
+    description: string;
+    args: {
+        name: string;
+        type: string;
+        required: boolean;
+    }[];
+    returnType: string;
+    fields: FieldSchema[];
+}
+export interface IntrospectionResult {
+    queryOperations: OperationSchema[];
+    contentTypes: {
+        key: string;
+        name: string;
+        fields: {
+            key: string;
+            type: string;
+            required: boolean;
+        }[];
+    }[];
+}
+export declare function getIntrospection(spaceId: string): Promise<IntrospectionResult>;
+export {};
+//# sourceMappingURL=introspection.d.ts.map

package/dist/api/graphql/introspection.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"introspection.d.ts","sourceRoot":"","sources":["../../../src/api/graphql/introspection.ts"],"names":[],"mappings":"AAIA,UAAU,WAAW;IACnB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,UAAU,eAAe;IACvB,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,IAAI,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,OAAO,CAAA;KAAE,EAAE,CAAC;IAC1D,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,WAAW,EAAE,CAAC;CACvB;AAED,MAAM,WAAW,mBAAmB;IAClC,eAAe,EAAE,eAAe,EAAE,CAAC;IACnC,YAAY,EAAE;QACZ,GAAG,EAAE,MAAM,CAAC;QACZ,IAAI,EAAE,MAAM,CAAC;QACb,MAAM,EAAE;YAAE,GAAG,EAAE,MAAM,CAAC;YAAC,IAAI,EAAE,MAAM,CAAC;YAAC,QAAQ,EAAE,OAAO,CAAA;SAAE,EAAE,CAAC;KAC5D,EAAE,CAAC;CACL;AAwED,wBAAsB,gBAAgB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,mBAAmB,CAAC,CAkBpF"}

package/dist/api/graphql/introspection.js

@@ -0,0 +1,90 @@
+// ─── GraphQL-like schema introspection ───
+import { prisma } from '../../db.js';
+const staticOperations = [
+    {
+        name: 'entries',
+        description: 'Query published entries, optionally filtered by content type',
+        args: [
+            { name: 'type', type: 'String', required: false },
+            { name: 'limit', type: 'Int', required: false },
+            { name: 'offset', type: 'Int', required: false },
+        ],
+        returnType: '[Entry]',
+        fields: [
+            { name: 'id', type: 'String', description: 'Entry ID' },
+            { name: 'type', type: 'String', description: 'Content type key' },
+            { name: 'slug', type: 'String', description: 'URL slug' },
+            { name: 'data', type: 'JSON', description: 'Entry data object' },
+            { name: 'publishedAt', type: 'DateTime', description: 'Publication timestamp' },
+            { name: 'updatedAt', type: 'DateTime', description: 'Last update timestamp' },
+        ],
+    },
+    {
+        name: 'entry',
+        description: 'Fetch a single published entry by type+slug or id',
+        args: [
+            { name: 'type', type: 'String', required: false },
+            { name: 'slug', type: 'String', required: false },
+            { name: 'id', type: 'String', required: false },
+        ],
+        returnType: 'Entry',
+        fields: [
+            { name: 'id', type: 'String', description: 'Entry ID' },
+            { name: 'type', type: 'String', description: 'Content type key' },
+            { name: 'slug', type: 'String', description: 'URL slug' },
+            { name: 'data', type: 'JSON', description: 'Entry data object' },
+            { name: 'publishedAt', type: 'DateTime', description: 'Publication timestamp' },
+            { name: 'updatedAt', type: 'DateTime', description: 'Last update timestamp' },
+        ],
+    },
+    {
+        name: 'types',
+        description: 'List content types and their field schemas',
+        args: [],
+        returnType: '[ContentType]',
+        fields: [
+            { name: 'id', type: 'String', description: 'Content type ID' },
+            { name: 'key', type: 'String', description: 'Machine key' },
+            { name: 'name', type: 'String', description: 'Display name' },
+            { name: 'description', type: 'String', description: 'Description' },
+            { name: 'fields', type: '[Field]', description: 'Field definitions' },
+        ],
+    },
+    {
+        name: 'assets',
+        description: 'List uploaded assets',
+        args: [
+            { name: 'limit', type: 'Int', required: false },
+            { name: 'offset', type: 'Int', required: false },
+        ],
+        returnType: '[Asset]',
+        fields: [
+            { name: 'id', type: 'String', description: 'Asset ID' },
+            { name: 'filename', type: 'String', description: 'Original filename' },
+            { name: 'mimeType', type: 'String', description: 'MIME type' },
+            { name: 'bytes', type: 'Int', description: 'File size in bytes' },
+            { name: 'url', type: 'String', description: 'Public URL' },
+            { name: 'alt', type: 'String', description: 'Alt text' },
+            { name: 'createdAt', type: 'DateTime', description: 'Upload timestamp' },
+        ],
+    },
+];
+export async function getIntrospection(spaceId) {
+    const types = await prisma.contentType.findMany({
+        where: { spaceId },
+        include: { fields: { orderBy: { sortOrder: 'asc' } } },
+    });
+    return {
+        queryOperations: staticOperations,
+        contentTypes: types.map((ct) => ({
+            key: ct.key,
+            name: ct.name,
+            fields: ct.fields.map((f) => ({
+                key: f.key,
+                type: f.type,
+                required: f.required,
+            })),
+        })),
+    };
+}
+//# sourceMappingURL=introspection.js.map

package/dist/api/graphql/introspection.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"introspection.js","sourceRoot":"","sources":["../../../src/api/graphql/introspection.ts"],"names":[],"mappings":"AAAA,4CAA4C;AAE5C,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAyBrC,MAAM,gBAAgB,GAAsB;IAC1C;QACE,IAAI,EAAE,SAAS;QACf,WAAW,EAAE,8DAA8D;QAC3E,IAAI,EAAE;YACJ,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE;YACjD,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE;YAC/C,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE;SACjD;QACD,UAAU,EAAE,SAAS;QACrB,MAAM,EAAE;YACN,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,UAAU,EAAE;YACvD,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,kBAAkB,EAAE;YACjE,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,UAAU,EAAE;YACzD,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,mBAAmB,EAAE;YAChE,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE,UAAU,EAAE,WAAW,EAAE,uBAAuB,EAAE;YAC/E,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,UAAU,EAAE,WAAW,EAAE,uBAAuB,EAAE;SAC9E;KACF;IACD;QACE,IAAI,EAAE,OAAO;QACb,WAAW,EAAE,mDAAmD;QAChE,IAAI,EAAE;YACJ,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE;YACjD,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE;YACjD,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE;SAChD;QACD,UAAU,EAAE,OAAO;QACnB,MAAM,EAAE;YACN,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,UAAU,EAAE;YACvD,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,kBAAkB,EAAE;YACjE,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,UAAU,EAAE;YACzD,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,mBAAmB,EAAE;YAChE,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE,UAAU,EAAE,WAAW,EAAE,uBAAuB,EAAE;YAC/E,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,UAAU,EAAE,WAAW,EAAE,uBAAuB,EAAE;SAC9E;KACF;IACD;QACE,IAAI,EAAE,OAAO;QACb,WAAW,EAAE,4CAA4C;QACzD,IAAI,EAAE,EAAE;QACR,UAAU,EAAE,eAAe;QAC3B,MAAM,EAAE;YACN,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,iBAAiB,EAAE;YAC9D,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,aAAa,EAAE;YAC3D,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,cAAc,EAAE;YAC7D,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,aAAa,EAAE;YACnE,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE,WAAW,EAAE,mBAAmB,EAAE;SACtE;KACF;IACD;QACE,IAAI,EAAE,QAAQ;QACd,WAAW,EAAE,sBAAsB;QACnC,IAAI,EAAE;YACJ,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE;YAC/C,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE;SACjD;QACD,UAAU,EAAE,SAAS;QACrB,MAAM,EAAE;YACN,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,UAAU,EAAE;YACvD,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,mBAAmB,EAAE;YACtE,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,WAAW,EAAE;YAC9D,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,WAAW,EAAE,oBAAoB,EAAE;YACjE,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,YAAY,EAAE;YAC1D,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,UAAU,EAAE;YACxD,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,UAAU,EAAE,WAAW,EAAE,kBAAkB,EAAE;SACzE;KACF;CACF,CAAC;AAEF,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,OAAe;IACpD,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,WAAW,CAAC,QAAQ,CAAC;QAC9C,KAAK,EAAE,EAAE,OAAO,EAAE;QAClB,OAAO,EAAE,EAAE,MAAM,EAAE,EAAE,OAAO,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,EAAE,EAAE;KACvD,CAAC,CAAC;IAEH,OAAO;QACL,eAAe,EAAE,gBAAgB;QACjC,YAAY,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;YAC/B,GAAG,EAAE,EAAE,CAAC,GAAG;YACX,IAAI,EAAE,EAAE,CAAC,IAAI;YACb,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;gBAC5B,GAAG,EAAE,CAAC,CAAC,GAAG;gBACV,IAAI,EAAE,CAAC,CAAC,IAAI;gBACZ,QAAQ,EAAE,CAAC,CAAC,QAAQ;aACrB,CAAC,CAAC;SACJ,CAAC,CAAC;KACJ,CAAC;AACJ,CAAC"}

package/dist/api/graphql/parser.d.ts

@@ -0,0 +1,14 @@
+export interface ParsedField {
+    name: string;
+    subFields?: ParsedField[];
+}
+export interface ParsedOperation {
+    name: string;
+    args: Record<string, string | number | boolean>;
+    fields: ParsedField[];
+}
+export interface ParsedQuery {
+    operations: ParsedOperation[];
+}
+export declare function parseQuery(query: string): ParsedQuery;
+//# sourceMappingURL=parser.d.ts.map

package/dist/api/graphql/parser.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"parser.d.ts","sourceRoot":"","sources":["../../../src/api/graphql/parser.ts"],"names":[],"mappings":"AAQA,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,CAAC,EAAE,WAAW,EAAE,CAAC;CAC3B;AAED,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC,CAAC;IAChD,MAAM,EAAE,WAAW,EAAE,CAAC;CACvB;AAED,MAAM,WAAW,WAAW;IAC1B,UAAU,EAAE,eAAe,EAAE,CAAC;CAC/B;AA2HD,wBAAgB,UAAU,CAAC,KAAK,EAAE,MAAM,GAAG,WAAW,CAoBrD"}

package/dist/api/graphql/parser.js

@@ -0,0 +1,140 @@
+// ─── Lightweight GraphQL-subset query parser ───
+//
+// Parses queries like:
+//   { entries(type: "article", limit: 10) { id slug data } }
+//   { entry(type: "article", slug: "hello") { id slug data } }
+//   { types { key name fields { key type required } } }
+//   { assets(limit: 10) { id filename mimeType url } }
+class QueryLexer {
+    input;
+    pos = 0;
+    constructor(input) {
+        this.input = input;
+    }
+    peek() {
+        this.skipWhitespace();
+        return this.input[this.pos] ?? '';
+    }
+    advance() {
+        this.skipWhitespace();
+        return this.input[this.pos++] ?? '';
+    }
+    expect(ch) {
+        const got = this.advance();
+        if (got !== ch) {
+            throw new Error(`Expected '${ch}' but got '${got}' at position ${this.pos - 1}`);
+        }
+    }
+    readIdentifier() {
+        this.skipWhitespace();
+        const start = this.pos;
+        while (this.pos < this.input.length && /[a-zA-Z0-9_]/.test(this.input[this.pos])) {
+            this.pos++;
+        }
+        const ident = this.input.slice(start, this.pos);
+        if (!ident) {
+            throw new Error(`Expected identifier at position ${this.pos}`);
+        }
+        return ident;
+    }
+    readString() {
+        this.skipWhitespace();
+        const quote = this.advance(); // consume opening quote
+        if (quote !== '"' && quote !== "'") {
+            throw new Error(`Expected string at position ${this.pos - 1}`);
+        }
+        const start = this.pos;
+        while (this.pos < this.input.length && this.input[this.pos] !== quote) {
+            this.pos++;
+        }
+        const value = this.input.slice(start, this.pos);
+        this.pos++; // consume closing quote
+        return value;
+    }
+    readValue() {
+        this.skipWhitespace();
+        const ch = this.input[this.pos] ?? '';
+        if (ch === '"' || ch === "'") {
+            return this.readString();
+        }
+        // number or boolean
+        const start = this.pos;
+        while (this.pos < this.input.length && /[a-zA-Z0-9._-]/.test(this.input[this.pos])) {
+            this.pos++;
+        }
+        const raw = this.input.slice(start, this.pos);
+        if (raw === 'true')
+            return true;
+        if (raw === 'false')
+            return false;
+        const num = Number(raw);
+        if (!isNaN(num))
+            return num;
+        return raw;
+    }
+    eof() {
+        this.skipWhitespace();
+        return this.pos >= this.input.length;
+    }
+    skipWhitespace() {
+        while (this.pos < this.input.length && /\s/.test(this.input[this.pos])) {
+            this.pos++;
+        }
+    }
+}
+function parseArgs(lexer) {
+    const args = {};
+    lexer.expect('(');
+    while (lexer.peek() !== ')') {
+        const key = lexer.readIdentifier();
+        lexer.expect(':');
+        const value = lexer.readValue();
+        args[key] = value;
+        if (lexer.peek() === ',') {
+            lexer.advance(); // consume comma
+        }
+    }
+    lexer.expect(')');
+    return args;
+}
+function parseFields(lexer) {
+    const fields = [];
+    lexer.expect('{');
+    while (lexer.peek() !== '}') {
+        const name = lexer.readIdentifier();
+        let subFields;
+        if (lexer.peek() === '{') {
+            subFields = parseFields(lexer);
+        }
+        fields.push({ name, subFields });
+    }
+    lexer.expect('}');
+    return fields;
+}
+function parseOperation(lexer) {
+    const name = lexer.readIdentifier();
+    let args = {};
+    if (lexer.peek() === '(') {
+        args = parseArgs(lexer);
+    }
+    const fields = parseFields(lexer);
+    return { name, args, fields };
+}
+export function parseQuery(query) {
+    const trimmed = query.trim();
+    if (!trimmed) {
+        throw new Error('Empty query');
+    }
+    const lexer = new QueryLexer(trimmed);
+    lexer.expect('{');
+    const operations = [];
+    while (lexer.peek() !== '}') {
+        operations.push(parseOperation(lexer));
+    }
+    lexer.expect('}');
+    if (operations.length === 0) {
+        throw new Error('Query must contain at least one operation');
+    }
+    return { operations };
+}
+//# sourceMappingURL=parser.js.map

package/dist/api/graphql/parser.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"parser.js","sourceRoot":"","sources":["../../../src/api/graphql/parser.ts"],"names":[],"mappings":"AAAA,kDAAkD;AAClD,EAAE;AACF,uBAAuB;AACvB,6DAA6D;AAC7D,+DAA+D;AAC/D,wDAAwD;AACxD,uDAAuD;AAiBvD,MAAM,UAAU;IAEe;IADrB,GAAG,GAAG,CAAC,CAAC;IAChB,YAA6B,KAAa;QAAb,UAAK,GAAL,KAAK,CAAQ;IAAG,CAAC;IAE9C,IAAI;QACF,IAAI,CAAC,cAAc,EAAE,CAAC;QACtB,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;IACpC,CAAC;IAED,OAAO;QACL,IAAI,CAAC,cAAc,EAAE,CAAC;QACtB,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,EAAE,CAAC;IACtC,CAAC;IAED,MAAM,CAAC,EAAU;QACf,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,EAAE,CAAC;QAC3B,IAAI,GAAG,KAAK,EAAE,EAAE,CAAC;YACf,MAAM,IAAI,KAAK,CAAC,aAAa,EAAE,cAAc,GAAG,iBAAiB,IAAI,CAAC,GAAG,GAAG,CAAC,EAAE,CAAC,CAAC;QACnF,CAAC;IACH,CAAC;IAED,cAAc;QACZ,IAAI,CAAC,cAAc,EAAE,CAAC;QACtB,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC;QACvB,OAAO,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,IAAI,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAE,CAAC,EAAE,CAAC;YAClF,IAAI,CAAC,GAAG,EAAE,CAAC;QACb,CAAC;QACD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC;QAChD,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,MAAM,IAAI,KAAK,CAAC,mCAAmC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;QACjE,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,UAAU;QACR,IAAI,CAAC,cAAc,EAAE,CAAC;QACtB,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,wBAAwB;QACtD,IAAI,KAAK,KAAK,GAAG,IAAI,KAAK,KAAK,GAAG,EAAE,CAAC;YACnC,MAAM,IAAI,KAAK,CAAC,+BAA+B,IAAI,CAAC,GAAG,GAAG,CAAC,EAAE,CAAC,CAAC;QACjE,CAAC;QACD,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC;QACvB,OAAO,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,KAAK,EAAE,CAAC;YACtE,IAAI,CAAC,GAAG,EAAE,CAAC;QACb,CAAC;QACD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC;QAChD,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,wBAAwB;QACpC,OAAO,KAAK,CAAC;IACf,CAAC;IAED,SAAS;QACP,IAAI,CAAC,cAAc,EAAE,CAAC;QACtB,MAAM,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;QACtC,IAAI,EAAE,KAAK,GAAG,IAAI,EAAE,KAAK,GAAG,EAAE,CAAC;YAC7B,OAAO,IAAI,CAAC,UAAU,EAAE,CAAC;QAC3B,CAAC;QACD,oBAAoB;QACpB,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC;QACvB,OAAO,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,IAAI,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAE,CAAC,EAAE,CAAC;YACpF,IAAI,CAAC,GAAG,EAAE,CAAC;QACb,CAAC;QACD,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC;QAC9C,IAAI,GAAG,KAAK,MAAM;YAAE,OAAO,IAAI,CAAC;QAChC,IAAI,GAAG,KAAK,OAAO;YAAE,OAAO,KAAK,CAAC;QAClC,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;QACxB,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC;YAAE,OAAO,GAAG,CAAC;QAC5B,OAAO,GAAG,CAAC;IACb,CAAC;IAED,GAAG;QACD,IAAI,CAAC,cAAc,EAAE,CAAC;QACtB,OAAO,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC;IACvC,CAAC;IAEO,cAAc;QACpB,OAAO,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAE,CAAC,EAAE,CAAC;YACxE,IAAI,CAAC,GAAG,EAAE,CAAC;QACb,CAAC;IACH,CAAC;CACF;AAED,SAAS,SAAS,CAAC,KAAiB;IAClC,MAAM,IAAI,GAA8C,EAAE,CAAC;IAC3D,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IAClB,OAAO,KAAK,CAAC,IAAI,EAAE,KAAK,GAAG,EAAE,CAAC;QAC5B,MAAM,GAAG,GAAG,KAAK,CAAC,cAAc,EAAE,CAAC;QACnC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAClB,MAAM,KAAK,GAAG,KAAK,CAAC,SAAS,EAAE,CAAC;QAChC,IAAI,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;QAClB,IAAI,KAAK,CAAC,IAAI,EAAE,KAAK,GAAG,EAAE,CAAC;YACzB,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,gBAAgB;QACnC,CAAC;IACH,CAAC;IACD,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IAClB,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,WAAW,CAAC,KAAiB;IACpC,MAAM,MAAM,GAAkB,EAAE,CAAC;IACjC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IAClB,OAAO,KAAK,CAAC,IAAI,EAAE,KAAK,GAAG,EAAE,CAAC;QAC5B,MAAM,IAAI,GAAG,KAAK,CAAC,cAAc,EAAE,CAAC;QACpC,IAAI,SAAoC,CAAC;QACzC,IAAI,KAAK,CAAC,IAAI,EAAE,KAAK,GAAG,EAAE,CAAC;YACzB,SAAS,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC;QACjC,CAAC;QACD,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC;IACnC,CAAC;IACD,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IAClB,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,cAAc,CAAC,KAAiB;IACvC,MAAM,IAAI,GAAG,KAAK,CAAC,cAAc,EAAE,CAAC;IACpC,IAAI,IAAI,GAA8C,EAAE,CAAC;IACzD,IAAI,KAAK,CAAC,IAAI,EAAE,KAAK,GAAG,EAAE,CAAC;QACzB,IAAI,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC;IAC1B,CAAC;IACD,MAAM,MAAM,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC;IAClC,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;AAChC,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,KAAa;IACtC,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IAC7B,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,IAAI,KAAK,CAAC,aAAa,CAAC,CAAC;IACjC,CAAC;IAED,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,OAAO,CAAC,CAAC;IACtC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IAElB,MAAM,UAAU,GAAsB,EAAE,CAAC;IACzC,OAAO,KAAK,CAAC,IAAI,EAAE,KAAK,GAAG,EAAE,CAAC;QAC5B,UAAU,CAAC,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC,CAAC;IACzC,CAAC;IACD,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IAElB,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC5B,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;IAC/D,CAAC;IAED,OAAO,EAAE,UAAU,EAAE,CAAC;AACxB,CAAC"}

package/dist/api/graphql/resolver.d.ts

@@ -0,0 +1,3 @@
+import type { ParsedOperation } from './parser.js';
+export declare function resolveQuery(spaceId: string, operations: ParsedOperation[]): Promise<Record<string, unknown>>;
+//# sourceMappingURL=resolver.d.ts.map

package/dist/api/graphql/resolver.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"resolver.d.ts","sourceRoot":"","sources":["../../../src/api/graphql/resolver.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,eAAe,EAAe,MAAM,aAAa,CAAC;AA+JhE,wBAAsB,YAAY,CAChC,OAAO,EAAE,MAAM,EACf,UAAU,EAAE,eAAe,EAAE,GAC5B,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAYlC"}