@ketvietlab/ketsuite 0.1.2 → 0.1.3

package/dist/modules/website_search/models.js

@@ -0,0 +1,58 @@
+/**
+ * An index, so a search is a lookup rather than a scan.
+ *
+ * `website.searchPublished` reads every published entry of a site, fetches each
+ * revision and matches in JavaScript. That is correct and it does not scale: the
+ * cost of one keystroke grows with the site, and the window that bounds it is
+ * also a ceiling on what can be found.
+ *
+ * The index is derived data. It is never the answer to "what is public" — the
+ * publication is — so a stale index degrades a search rather than publishing
+ * something it should not.
+ */
+export const models = {
+    SearchDocument: {
+        scope: 'company',
+        fields: {
+            id: 'id',
+            siteId: 'ref:website.Site',
+            entryId: 'ref:website.Entry',
+            type: 'text',
+            path: 'text',
+            title: 'text',
+            excerpt: 'text?',
+            /** Lowercased title and excerpt, so a match is one comparison. */
+            haystack: 'text',
+            publishedAt: 'datetime?',
+        },
+        indexes: {
+            site_entry: { fields: ['companyId', 'siteId', 'entryId'], unique: true },
+            site_published: { fields: ['companyId', 'siteId', 'publishedAt'] },
+        },
+    },
+    /**
+     * What the index was built from, and how far a rebuild has got.
+     *
+     * `publicationId` is the whole staleness test: an index built for a
+     * publication that is no longer active describes pages that may no longer be
+     * the ones being served. `cursor` lets a rebuild stop and resume rather than
+     * having to finish inside one request.
+     */
+    SearchIndexState: {
+        scope: 'company',
+        timestamps: true,
+        fields: {
+            id: 'id',
+            siteId: 'ref:website.Site',
+            /** Null while a site has never published a set; the index then follows entries. */
+            publicationId: 'text?',
+            state: 'text',
+            cursor: 'text?',
+            documentCount: 'int',
+            startedAt: 'datetime',
+            completedAt: 'datetime?',
+        },
+        indexes: { site: { fields: ['companyId', 'siteId'], unique: true } },
+    },
+};
+//# sourceMappingURL=models.js.map

package/dist/modules/website_search/models.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"models.js","sourceRoot":"","sources":["../../../../../../../packages/ketsuite/src/modules/website_search/models.ts"],"names":[],"mappings":"AAEA;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,MAAM,MAAM,GAA6B;IAC9C,cAAc,EAAE;QACd,KAAK,EAAE,SAAS;QAChB,MAAM,EAAE;YACN,EAAE,EAAE,IAAI;YACR,MAAM,EAAE,kBAAkB;YAC1B,OAAO,EAAE,mBAAmB;YAC5B,IAAI,EAAE,MAAM;YACZ,IAAI,EAAE,MAAM;YACZ,KAAK,EAAE,MAAM;YACb,OAAO,EAAE,OAAO;YAChB,kEAAkE;YAClE,QAAQ,EAAE,MAAM;YAChB,WAAW,EAAE,WAAW;SACzB;QACD,OAAO,EAAE;YACP,UAAU,EAAE,EAAE,MAAM,EAAE,CAAC,WAAW,EAAE,QAAQ,EAAE,SAAS,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE;YACxE,cAAc,EAAE,EAAE,MAAM,EAAE,CAAC,WAAW,EAAE,QAAQ,EAAE,aAAa,CAAC,EAAE;SACnE;KACF;IAED;;;;;;;OAOG;IACH,gBAAgB,EAAE;QAChB,KAAK,EAAE,SAAS;QAChB,UAAU,EAAE,IAAI;QAChB,MAAM,EAAE;YACN,EAAE,EAAE,IAAI;YACR,MAAM,EAAE,kBAAkB;YAC1B,mFAAmF;YACnF,aAAa,EAAE,OAAO;YACtB,KAAK,EAAE,MAAM;YACb,MAAM,EAAE,OAAO;YACf,aAAa,EAAE,KAAK;YACpB,SAAS,EAAE,UAAU;YACrB,WAAW,EAAE,WAAW;SACzB;QACD,OAAO,EAAE,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,CAAC,WAAW,EAAE,QAAQ,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE;KACrE;CACF,CAAA"}

package/dist/modules/website_seo/functions.d.ts

@@ -0,0 +1,3 @@
+import type { FnSpec } from '@ketvietlab/ketjs';
+export declare const functions: Record<string, FnSpec>;
+//# sourceMappingURL=functions.d.ts.map

package/dist/modules/website_seo/functions.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"functions.d.ts","sourceRoot":"","sources":["../../../../../../packages/ketsuite/src/modules/website_seo/functions.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAO,MAAM,EAAO,MAAM,mBAAmB,CAAA;AAqBzD,eAAO,MAAM,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAuJ5C,CAAA"}

package/dist/modules/website_seo/functions.js

@@ -0,0 +1,164 @@
+import { asc, defineFn, eq, from, isNotNull, ne } from '@ketvietlab/ketjs';
+import { canAccessSite, canManageStructure } from '../website/access.js';
+import { isReservedPath, reservedPrefixes, safeOgImage, sameSiteCanonical } from './projection.js';
+const MAX_DESCRIPTION = 320;
+const MAX_SITEMAP_URLS = 5_000;
+const invalid = (field, message) => ({ ok: false, errors: [{ field, message }] });
+/** The hosts a canonical is allowed to name: this site's own domains. */
+const hostsForSite = async (ctx, siteId) => {
+    const Domain = ctx.table('website.SiteDomain');
+    const rows = await ctx.db.all(from(Domain).where(eq(Domain.siteId, siteId)));
+    return rows.map((row) => String(row.host));
+};
+const entryById = async (ctx, id) => {
+    const Entry = ctx.table('website.Entry');
+    return ctx.db.one(from(Entry).where(eq(Entry.id, id)));
+};
+export const functions = {
+    /**
+     * The write path the extended fields never had.
+     *
+     * `website_seo` adds metaDescription, canonical, noindex and ogImage to an
+     * Entry it does not own. Editing them through the owning module's saveEntry
+     * would put SEO validation in the content module, so the module that declared
+     * the fields owns writing them, and checks them on the way in.
+     *
+     * `noindex` is consumed today, by the sitemap below. The other three are
+     * stored and read back but not yet rendered: the storefront page scope in
+     * `packages/ketjs/src/server/boot.ts` hands the theme an empty `meta`, so the
+     * `website:page.head` fill has nothing to interpolate. Closing that is a
+     * framework change and belongs in its own review.
+     *
+     * Every field is a partial update. Writing all four on every call meant that
+     * setting `noindex` erased the description, and — worse — that editing a
+     * description silently cleared `noindex` and re-listed a deliberately
+     * delisted page in the sitemap.
+     */
+    saveEntrySeo: defineFn({
+        input: {
+            entryId: 'id',
+            metaDescription: 'text?',
+            canonical: 'text?',
+            noindex: 'bool?',
+            ogImage: 'text?',
+        },
+        output: { ok: 'bool', entryId: 'id?', errors: 'json?' },
+        effects: [
+            'read:website.Entry',
+            'read:website.SiteDomain',
+            'read:website.SiteMember',
+            'write:website.Entry',
+        ],
+        idempotent: true,
+        agent: true,
+        handler: async (ctx, args) => {
+            const entry = await entryById(ctx, args.entryId);
+            if (!entry)
+                return invalid('entryId', 'website_seo.error.entryNotFound');
+            if (!(await canManageStructure(ctx, entry.siteId)))
+                return invalid('entryId', 'website.error.forbidden');
+            const patch = {};
+            if (args.metaDescription !== undefined) {
+                const description = args.metaDescription == null ? '' : String(args.metaDescription).trim();
+                if (description.length > MAX_DESCRIPTION)
+                    return invalid('metaDescription', 'website_seo.error.descriptionTooLong');
+                patch.metaDescription = description || null;
+            }
+            if (args.canonical !== undefined) {
+                const raw = args.canonical == null ? '' : String(args.canonical).trim();
+                if (!raw)
+                    patch.canonical = null;
+                else {
+                    const canonical = sameSiteCanonical(raw, await hostsForSite(ctx, entry.siteId));
+                    if (!canonical)
+                        return invalid('canonical', 'website_seo.error.foreignCanonical');
+                    patch.canonical = canonical;
+                }
+            }
+            if (args.ogImage !== undefined) {
+                const raw = args.ogImage == null ? '' : String(args.ogImage).trim();
+                if (!raw)
+                    patch.ogImage = null;
+                else {
+                    const ogImage = safeOgImage(raw);
+                    if (!ogImage)
+                        return invalid('ogImage', 'website_seo.error.invalidOgImage');
+                    patch.ogImage = ogImage;
+                }
+            }
+            if (args.noindex !== undefined)
+                patch.noindex = args.noindex === true;
+            if (Object.keys(patch).length)
+                await ctx.db.update('website.Entry', { id: args.entryId }, patch);
+            return { ok: true, entryId: args.entryId };
+        },
+    }),
+    getEntrySeo: defineFn({
+        input: { entryId: 'id' },
+        output: {
+            entryId: 'id',
+            metaDescription: 'text?',
+            canonical: 'text?',
+            noindex: 'bool?',
+            ogImage: 'text?',
+        },
+        effects: ['read:website.Entry', 'read:website.SiteMember'],
+        agent: true,
+        handler: async (ctx, args) => {
+            const entry = await entryById(ctx, args.entryId);
+            if (!entry || !(await canAccessSite(ctx, entry.siteId)))
+                return null;
+            return {
+                entryId: entry.id,
+                metaDescription: entry.metaDescription ?? null,
+                canonical: entry.canonical ?? null,
+                noindex: entry.noindex === true,
+                ogImage: entry.ogImage ?? null,
+            };
+        },
+    }),
+    /**
+     * What the sitemap is allowed to contain.
+     *
+     * The filter is the publication itself: an entry appears only when its site is
+     * active, it has a published revision, it is not in trash, it is not marked
+     * noindex and it does not sit under a namespace the deployment serves.
+     * Unpublishing a page therefore removes it here without a second bookkeeping
+     * step that could disagree with the first.
+     *
+     * `exposure: 'internal'` on purpose: the two public files are the entry point,
+     * and they resolve the site from the request host. Left callable, an anonymous
+     * caller could name any siteId in the company and read the published paths of
+     * a site that is not being served yet.
+     */
+    sitemapEntries: defineFn({
+        input: { siteId: 'id' },
+        output: { path: 'text', lastModified: 'datetime?' },
+        effects: ['read:website.Site', 'read:website.Entry'],
+        exposure: 'internal',
+        handler: async (ctx, args) => {
+            const Site = ctx.table('website.Site');
+            const site = await ctx.db.one(from(Site).where(eq(Site.id, args.siteId), eq(Site.active, true)));
+            if (!site)
+                return [];
+            // The publication filter belongs in the query, not after it. Applied as a
+            // plain LIMIT over a path ordering, a site with enough drafts sorting
+            // first returned an empty sitemap while its published pages existed.
+            //
+            // The condition is "has a published revision and is not in trash", not
+            // status === 'published': scheduling a later republish moves an entry to
+            // 'scheduled' while the revision already out there stays live, and a
+            // status filter would delist a page a visitor can still open.
+            const Entry = ctx.table('website.Entry');
+            const rows = await ctx.db.all(from(Entry)
+                .where(eq(Entry.siteId, args.siteId), isNotNull(Entry.publishedRevisionId), ne(Entry.status, 'trash'))
+                .orderBy(asc(Entry.path))
+                .limit(MAX_SITEMAP_URLS));
+            const prefixes = reservedPrefixes(Object.keys(ctx.manifest.routes ?? {}));
+            return rows
+                .filter((row) => row.noindex !== true && !isReservedPath(String(row.path), prefixes))
+                .map((row) => ({ path: String(row.path), lastModified: row.publishedAt ?? null }));
+        },
+    }),
+};
+//# sourceMappingURL=functions.js.map

package/dist/modules/website_seo/functions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"functions.js","sourceRoot":"","sources":["../../../../../../../packages/ketsuite/src/modules/website_seo/functions.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,GAAG,EAAE,QAAQ,EAAE,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,MAAM,mBAAmB,CAAA;AAE1E,OAAO,EAAE,aAAa,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAA;AACxE,OAAO,EAAE,cAAc,EAAE,gBAAgB,EAAE,WAAW,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAA;AAElG,MAAM,eAAe,GAAG,GAAG,CAAA;AAC3B,MAAM,gBAAgB,GAAG,KAAK,CAAA;AAE9B,MAAM,OAAO,GAAG,CAAC,KAAa,EAAE,OAAe,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC,CAAA;AAEjG,yEAAyE;AACzE,MAAM,YAAY,GAAG,KAAK,EAAE,GAAQ,EAAE,MAAe,EAAqB,EAAE;IAC1E,MAAM,MAAM,GAAG,GAAG,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAA;IAC9C,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,CAAA;IAC5E,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAA;AAC5C,CAAC,CAAA;AAED,MAAM,SAAS,GAAG,KAAK,EAAE,GAAQ,EAAE,EAAW,EAAuB,EAAE;IACrE,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,eAAe,CAAC,CAAA;IACxC,OAAO,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,CAAA;AACxD,CAAC,CAAA;AAED,MAAM,CAAC,MAAM,SAAS,GAA2B;IAC/C;;;;;;;;;;;;;;;;;;OAkBG;IACH,YAAY,EAAE,QAAQ,CAAC;QACrB,KAAK,EAAE;YACL,OAAO,EAAE,IAAI;YACb,eAAe,EAAE,OAAO;YACxB,SAAS,EAAE,OAAO;YAClB,OAAO,EAAE,OAAO;YAChB,OAAO,EAAE,OAAO;SACjB;QACD,MAAM,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE;QACvD,OAAO,EAAE;YACP,oBAAoB;YACpB,yBAAyB;YACzB,yBAAyB;YACzB,qBAAqB;SACtB;QACD,UAAU,EAAE,IAAI;QAChB,KAAK,EAAE,IAAI;QACX,OAAO,EAAE,KAAK,EAAE,GAAQ,EAAE,IAAI,EAAE,EAAE;YAChC,MAAM,KAAK,GAAG,MAAM,SAAS,CAAC,GAAG,EAAE,IAAI,CAAC,OAAO,CAAC,CAAA;YAChD,IAAI,CAAC,KAAK;gBAAE,OAAO,OAAO,CAAC,SAAS,EAAE,iCAAiC,CAAC,CAAA;YACxE,IAAI,CAAC,CAAC,MAAM,kBAAkB,CAAC,GAAG,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;gBAAE,OAAO,OAAO,CAAC,SAAS,EAAE,yBAAyB,CAAC,CAAA;YAExG,MAAM,KAAK,GAAQ,EAAE,CAAA;YAErB,IAAI,IAAI,CAAC,eAAe,KAAK,SAAS,EAAE,CAAC;gBACvC,MAAM,WAAW,GAAG,IAAI,CAAC,eAAe,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,IAAI,EAAE,CAAA;gBAC3F,IAAI,WAAW,CAAC,MAAM,GAAG,eAAe;oBACtC,OAAO,OAAO,CAAC,iBAAiB,EAAE,sCAAsC,CAAC,CAAA;gBAC3E,KAAK,CAAC,eAAe,GAAG,WAAW,IAAI,IAAI,CAAA;YAC7C,CAAC;YAED,IAAI,IAAI,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;gBACjC,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,IAAI,EAAE,CAAA;gBACvE,IAAI,CAAC,GAAG;oBAAE,KAAK,CAAC,SAAS,GAAG,IAAI,CAAA;qBAC3B,CAAC;oBACJ,MAAM,SAAS,GAAG,iBAAiB,CAAC,GAAG,EAAE,MAAM,YAAY,CAAC,GAAG,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC,CAAA;oBAC/E,IAAI,CAAC,SAAS;wBAAE,OAAO,OAAO,CAAC,WAAW,EAAE,oCAAoC,CAAC,CAAA;oBACjF,KAAK,CAAC,SAAS,GAAG,SAAS,CAAA;gBAC7B,CAAC;YACH,CAAC;YAED,IAAI,IAAI,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;gBAC/B,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,CAAA;gBACnE,IAAI,CAAC,GAAG;oBAAE,KAAK,CAAC,OAAO,GAAG,IAAI,CAAA;qBACzB,CAAC;oBACJ,MAAM,OAAO,GAAG,WAAW,CAAC,GAAG,CAAC,CAAA;oBAChC,IAAI,CAAC,OAAO;wBAAE,OAAO,OAAO,CAAC,SAAS,EAAE,kCAAkC,CAAC,CAAA;oBAC3E,KAAK,CAAC,OAAO,GAAG,OAAO,CAAA;gBACzB,CAAC;YACH,CAAC;YAED,IAAI,IAAI,CAAC,OAAO,KAAK,SAAS;gBAAE,KAAK,CAAC,OAAO,GAAG,IAAI,CAAC,OAAO,KAAK,IAAI,CAAA;YAErE,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM;gBAAE,MAAM,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC,eAAe,EAAE,EAAE,EAAE,EAAE,IAAI,CAAC,OAAO,EAAE,EAAE,KAAK,CAAC,CAAA;YAChG,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAA;QAC5C,CAAC;KACF,CAAC;IAEF,WAAW,EAAE,QAAQ,CAAC;QACpB,KAAK,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE;QACxB,MAAM,EAAE;YACN,OAAO,EAAE,IAAI;YACb,eAAe,EAAE,OAAO;YACxB,SAAS,EAAE,OAAO;YAClB,OAAO,EAAE,OAAO;YAChB,OAAO,EAAE,OAAO;SACjB;QACD,OAAO,EAAE,CAAC,oBAAoB,EAAE,yBAAyB,CAAC;QAC1D,KAAK,EAAE,IAAI;QACX,OAAO,EAAE,KAAK,EAAE,GAAQ,EAAE,IAAI,EAAE,EAAE;YAChC,MAAM,KAAK,GAAG,MAAM,SAAS,CAAC,GAAG,EAAE,IAAI,CAAC,OAAO,CAAC,CAAA;YAChD,IAAI,CAAC,KAAK,IAAI,CAAC,CAAC,MAAM,aAAa,CAAC,GAAG,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;gBAAE,OAAO,IAAI,CAAA;YACpE,OAAO;gBACL,OAAO,EAAE,KAAK,CAAC,EAAE;gBACjB,eAAe,EAAE,KAAK,CAAC,eAAe,IAAI,IAAI;gBAC9C,SAAS,EAAE,KAAK,CAAC,SAAS,IAAI,IAAI;gBAClC,OAAO,EAAE,KAAK,CAAC,OAAO,KAAK,IAAI;gBAC/B,OAAO,EAAE,KAAK,CAAC,OAAO,IAAI,IAAI;aAC/B,CAAA;QACH,CAAC;KACF,CAAC;IAEF;;;;;;;;;;;;;OAaG;IACH,cAAc,EAAE,QAAQ,CAAC;QACvB,KAAK,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE;QACvB,MAAM,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,YAAY,EAAE,WAAW,EAAE;QACnD,OAAO,EAAE,CAAC,mBAAmB,EAAE,oBAAoB,CAAC;QACpD,QAAQ,EAAE,UAAU;QACpB,OAAO,EAAE,KAAK,EAAE,GAAQ,EAAE,IAAI,EAAE,EAAE;YAChC,MAAM,IAAI,GAAG,GAAG,CAAC,KAAK,CAAC,cAAc,CAAC,CAAA;YACtC,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,CAAC,CAAA;YAChG,IAAI,CAAC,IAAI;gBAAE,OAAO,EAAE,CAAA;YAEpB,0EAA0E;YAC1E,sEAAsE;YACtE,qEAAqE;YACrE,EAAE;YACF,uEAAuE;YACvE,yEAAyE;YACzE,qEAAqE;YACrE,8DAA8D;YAC9D,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,eAAe,CAAC,CAAA;YACxC,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,EAAE,CAAC,GAAG,CAC3B,IAAI,CAAC,KAAK,CAAC;iBACR,KAAK,CACJ,EAAE,CAAC,KAAK,CAAC,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,EAC7B,SAAS,CAAC,KAAK,CAAC,mBAAmB,CAAC,EACpC,EAAE,CAAC,KAAK,CAAC,MAAM,EAAE,OAAO,CAAC,CAC1B;iBACA,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;iBACxB,KAAK,CAAC,gBAAgB,CAAC,CAC3B,CAAA;YACD,MAAM,QAAQ,GAAG,gBAAgB,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,CAAA;YACzE,OAAO,IAAI;iBACR,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,OAAO,KAAK,IAAI,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,QAAQ,CAAC,CAAC;iBACpF,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,YAAY,EAAE,GAAG,CAAC,WAAW,IAAI,IAAI,EAAE,CAAC,CAAC,CAAA;QACtF,CAAC;KACF,CAAC;CACH,CAAA"}

package/dist/modules/website_seo/index.js

@@ -1,30 +1,40 @@
 import { defineModule } from '@ketvietlab/ketjs';
 import { extend } from './extend.js';
 import { fills } from './fills.js';
+import { functions } from './functions.js';
+import { routes } from './routes.js';
 import { views } from './views.js';
 export default defineModule({
     name: 'website_seo',
     version: '0.1.0',
-    app: true,
     title: 'SEO',
-    summary: 'Thẻ mô tả, canonical và noindex cho từng trang.',
+    summary: 'Thẻ mô tả, canonical, sitemap và robots cho từng website.',
     category: 'Website',
     messages: {
         vi: {
             'app.title': 'SEO',
-            'app.summary': 'Thẻ mô tả, canonical và noindex cho từng trang.',
+            'app.summary': 'Thẻ mô tả, canonical, sitemap và robots cho từng website.',
             'app.category': 'Website',
+            'error.entryNotFound': 'Không tìm thấy nội dung.',
+            'error.descriptionTooLong': 'Mô tả vượt quá 320 ký tự.',
+            'error.foreignCanonical': 'Canonical phải trỏ về chính website này.',
+            'error.invalidOgImage': 'Ảnh chia sẻ phải là đường dẫn nội bộ hoặc URL http(s).',
         },
         en: {
             'app.title': 'SEO',
-            'app.summary': 'Description, canonical and noindex tags per page.',
+            'app.summary': 'Description, canonical, sitemap and robots per site.',
             'app.category': 'Website',
+            'error.entryNotFound': 'Content not found.',
+            'error.descriptionTooLong': 'The description exceeds 320 characters.',
+            'error.foreignCanonical': 'A canonical must point back at this site.',
+            'error.invalidOgImage': 'The share image must be an internal path or an http(s) URL.',
         },
     },
-    autoInstall: true,
     depends: ['website'],
     extend,
     fills,
+    functions,
+    routes,
     views,
 });
 //# sourceMappingURL=index.js.map

package/dist/modules/website_seo/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../../../packages/ketsuite/src/modules/website_seo/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAA;AAChD,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAA;AACpC,OAAO,EAAE,KAAK,EAAE,MAAM,YAAY,CAAA;AAClC,OAAO,EAAE,KAAK,EAAE,MAAM,YAAY,CAAA;AAElC,eAAe,YAAY,CAAC;IAC1B,IAAI,EAAE,aAAa;IACnB,OAAO,EAAE,OAAO;IAChB,GAAG,EAAE,IAAI;IACT,KAAK,EAAE,KAAK;IACZ,OAAO,EAAE,iDAAiD;IAC1D,QAAQ,EAAE,SAAS;IACnB,QAAQ,EAAE;QACR,EAAE,EAAE;YACF,WAAW,EAAE,KAAK;YAClB,aAAa,EAAE,iDAAiD;YAChE,cAAc,EAAE,SAAS;SAC1B;QACD,EAAE,EAAE;YACF,WAAW,EAAE,KAAK;YAClB,aAAa,EAAE,mDAAmD;YAClE,cAAc,EAAE,SAAS;SAC1B;KACF;IACD,WAAW,EAAE,IAAI;IACjB,OAAO,EAAE,CAAC,SAAS,CAAC;IACpB,MAAM;IACN,KAAK;IACL,KAAK;CACN,CAAC,CAAA"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../../../packages/ketsuite/src/modules/website_seo/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAA;AAChD,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAA;AACpC,OAAO,EAAE,KAAK,EAAE,MAAM,YAAY,CAAA;AAClC,OAAO,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAA;AAC1C,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAA;AACpC,OAAO,EAAE,KAAK,EAAE,MAAM,YAAY,CAAA;AAElC,eAAe,YAAY,CAAC;IAC1B,IAAI,EAAE,aAAa;IACnB,OAAO,EAAE,OAAO;IAChB,KAAK,EAAE,KAAK;IACZ,OAAO,EAAE,2DAA2D;IACpE,QAAQ,EAAE,SAAS;IACnB,QAAQ,EAAE;QACR,EAAE,EAAE;YACF,WAAW,EAAE,KAAK;YAClB,aAAa,EAAE,2DAA2D;YAC1E,cAAc,EAAE,SAAS;YACzB,qBAAqB,EAAE,0BAA0B;YACjD,0BAA0B,EAAE,2BAA2B;YACvD,wBAAwB,EAAE,0CAA0C;YACpE,sBAAsB,EAAE,wDAAwD;SACjF;QACD,EAAE,EAAE;YACF,WAAW,EAAE,KAAK;YAClB,aAAa,EAAE,sDAAsD;YACrE,cAAc,EAAE,SAAS;YACzB,qBAAqB,EAAE,oBAAoB;YAC3C,0BAA0B,EAAE,yCAAyC;YACrE,wBAAwB,EAAE,2CAA2C;YACrE,sBAAsB,EAAE,6DAA6D;SACtF;KACF;IACD,OAAO,EAAE,CAAC,SAAS,CAAC;IACpB,MAAM;IACN,KAAK;IACL,SAAS;IACT,MAAM;IACN,KAAK;CACN,CAAC,CAAA"}

package/dist/modules/website_seo/projection.d.ts

@@ -0,0 +1,52 @@
+/**
+ * The public projection: what a crawler is allowed to be told about a site.
+ *
+ * Everything here is a pure function over already-authorised data. The database
+ * reads and the permission checks live in `functions.ts`; keeping the rendering
+ * separate is what lets a test assert the escaping and the reserved-path rules
+ * without booting an adapter.
+ */
+export { isReservedPath, reservedPrefixes } from '../website/paths.ts';
+/** Escape a value for XML text and attribute content alike. */
+export declare const escapeXml: (value: string) => string;
+/**
+ * A canonical URL may only point back at the site that declares it.
+ *
+ * A canonical pointing elsewhere hands the site's ranking to whoever owns that
+ * host, so this is a permission decision rather than a formatting preference.
+ *
+ * The relative branch is the one that needs care. A leading `/` does not make a
+ * value site-relative: a browser resolves `//other.example/x`, `/\other.example/x`
+ * and `/<TAB>/other.example/x` all to that other host, because a backslash is
+ * normalised to a slash for http(s) and because tab, CR and LF are stripped from
+ * a URL before it is parsed. So the rules here mirror `website.cleanPath`, which
+ * already refuses exactly this class, rather than testing for `//` alone.
+ *
+ * Returns the normalised canonical, or null when the value cannot be trusted.
+ */
+export declare const sameSiteCanonical: (value: unknown, hosts: readonly string[]) => string | null;
+/**
+ * An og:image may be a site-relative path or an absolute http(s) URL. The
+ * relative form is held to the same rules as a canonical, for the same reason.
+ */
+export declare const safeOgImage: (value: unknown) => string | null;
+export type SitemapEntry = {
+    path: string;
+    lastModified?: string | null;
+};
+/**
+ * Render a urlset. Entries are expected to be already filtered — this renders
+ * what it is given and does not decide what is publishable.
+ */
+export declare const sitemapXml: (origin: string, entries: readonly SitemapEntry[]) => string;
+/**
+ * Render robots.txt.
+ *
+ * A site that is not serving content publicly disallows everything: content
+ * being prepared should not be discovered while it is being prepared.
+ */
+export declare const robotsTxt: (origin: string, options: {
+    indexable: boolean;
+    prefixes: readonly string[];
+}) => string;
+//# sourceMappingURL=projection.d.ts.map

package/dist/modules/website_seo/projection.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"projection.d.ts","sourceRoot":"","sources":["../../../../../../packages/ketsuite/src/modules/website_seo/projection.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAIH,OAAO,EAAE,cAAc,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAA;AAUtE,+DAA+D;AAC/D,eAAO,MAAM,SAAS,UAAW,MAAM,KAAG,MAAoE,CAAA;AAE9G;;;;;;;;;;;;;;GAcG;AACH,eAAO,MAAM,iBAAiB,UAAW,OAAO,SAAS,SAAS,MAAM,EAAE,KAAG,MAAM,GAAG,IA8BrF,CAAA;AAED;;;GAGG;AACH,eAAO,MAAM,WAAW,UAAW,OAAO,KAAG,MAAM,GAAG,IAYrD,CAAA;AAED,MAAM,MAAM,YAAY,GAAG;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,CAAA;AAEzE;;;GAGG;AACH,eAAO,MAAM,UAAU,WAAY,MAAM,WAAW,SAAS,YAAY,EAAE,KAAG,MAU7E,CAAA;AAED;;;;;GAKG;AACH,eAAO,MAAM,SAAS,WACZ,MAAM,WACL;IAAE,SAAS,EAAE,OAAO,CAAC;IAAC,QAAQ,EAAE,SAAS,MAAM,EAAE,CAAA;CAAE,KAC3D,MAUF,CAAA"}

package/dist/modules/website_seo/projection.js

@@ -0,0 +1,129 @@
+/**
+ * The public projection: what a crawler is allowed to be told about a site.
+ *
+ * Everything here is a pure function over already-authorised data. The database
+ * reads and the permission checks live in `functions.ts`; keeping the rendering
+ * separate is what lets a test assert the escaping and the reserved-path rules
+ * without booting an adapter.
+ */
+// Reserved namespaces are a routing fact, so `website` owns them and the sitemap,
+// the site's own search and any future public listing read the same rule.
+export { isReservedPath, reservedPrefixes } from '../website/paths.js';
+const XML_ESCAPES = {
+    '&': '&',
+    '<': '&lt;',
+    '>': '&gt;',
+    '"': '&quot;',
+    "'": '&apos;',
+};
+/** Escape a value for XML text and attribute content alike. */
+export const escapeXml = (value) => value.replace(/[&<>"']/g, (c) => XML_ESCAPES[c]);
+/**
+ * A canonical URL may only point back at the site that declares it.
+ *
+ * A canonical pointing elsewhere hands the site's ranking to whoever owns that
+ * host, so this is a permission decision rather than a formatting preference.
+ *
+ * The relative branch is the one that needs care. A leading `/` does not make a
+ * value site-relative: a browser resolves `//other.example/x`, `/\other.example/x`
+ * and `/<TAB>/other.example/x` all to that other host, because a backslash is
+ * normalised to a slash for http(s) and because tab, CR and LF are stripped from
+ * a URL before it is parsed. So the rules here mirror `website.cleanPath`, which
+ * already refuses exactly this class, rather than testing for `//` alone.
+ *
+ * Returns the normalised canonical, or null when the value cannot be trusted.
+ */
+export const sameSiteCanonical = (value, hosts) => {
+    const raw = String(value ?? '').trim();
+    if (!raw || raw.length > 2048)
+        return null;
+    if (raw.startsWith('/')) {
+        if (raw.startsWith('//') || raw.includes('\\'))
+            return null;
+        // Any C0 control or DEL, anywhere — not only at the ends, which trim() covers.
+        if ([...raw].some((c) => c.charCodeAt(0) <= 31 || c.charCodeAt(0) === 127))
+            return null;
+        if (/[?#]/.test(raw))
+            return null;
+        try {
+            if (raw.split('/').some((part) => ['.', '..'].includes(decodeURIComponent(part).toLowerCase())))
+                return null;
+        }
+        catch {
+            return null;
+        }
+        return raw;
+    }
+    let url;
+    try {
+        url = new URL(raw);
+    }
+    catch {
+        return null;
+    }
+    if (url.protocol !== 'https:' && url.protocol !== 'http:')
+        return null;
+    // Credentials in a canonical are never intentional and would be published.
+    if (url.username || url.password)
+        return null;
+    const allowed = new Set(hosts.map((host) => host.toLowerCase()));
+    if (!allowed.has(url.host.toLowerCase()))
+        return null;
+    return url.toString();
+};
+/**
+ * An og:image may be a site-relative path or an absolute http(s) URL. The
+ * relative form is held to the same rules as a canonical, for the same reason.
+ */
+export const safeOgImage = (value) => {
+    const raw = String(value ?? '').trim();
+    if (!raw || raw.length > 2048)
+        return null;
+    if (raw.startsWith('/'))
+        return sameSiteCanonical(raw, []);
+    try {
+        const url = new URL(raw);
+        if (url.protocol !== 'https:' && url.protocol !== 'http:')
+            return null;
+        if (url.username || url.password)
+            return null;
+        return url.toString();
+    }
+    catch {
+        return null;
+    }
+};
+/**
+ * Render a urlset. Entries are expected to be already filtered — this renders
+ * what it is given and does not decide what is publishable.
+ */
+export const sitemapXml = (origin, entries) => {
+    const base = origin.replace(/\/$/, '');
+    const urls = entries
+        .map((entry) => {
+        const loc = escapeXml(`${base}${entry.path}`);
+        const lastmod = entry.lastModified ? `\n    <lastmod>${escapeXml(entry.lastModified)}</lastmod>` : '';
+        return `  <url>\n    <loc>${loc}</loc>${lastmod}\n  </url>`;
+    })
+        .join('\n');
+    return `<?xml version="1.0" encoding="UTF-8"?>\n<urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9">\n${urls}${urls ? '\n' : ''}</urlset>\n`;
+};
+/**
+ * Render robots.txt.
+ *
+ * A site that is not serving content publicly disallows everything: content
+ * being prepared should not be discovered while it is being prepared.
+ */
+export const robotsTxt = (origin, options) => {
+    const base = origin.replace(/\/$/, '');
+    if (!options.indexable)
+        return 'User-agent: *\nDisallow: /\n';
+    // robots.txt matches by character prefix, so a bare `Disallow: /admin` would
+    // also hide `/administrative-notes`. Each namespace is emitted as its subtree
+    // plus an anchored exact match, which is the segment rule isReservedPath uses.
+    const disallow = options.prefixes
+        .flatMap((prefix) => [`Disallow: ${prefix}/`, `Disallow: ${prefix}$`])
+        .join('\n');
+    return `User-agent: *\n${disallow}\n\nSitemap: ${base}/sitemap.xml\n`;
+};
+//# sourceMappingURL=projection.js.map

package/dist/modules/website_seo/projection.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"projection.js","sourceRoot":"","sources":["../../../../../../../packages/ketsuite/src/modules/website_seo/projection.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,kFAAkF;AAClF,0EAA0E;AAC1E,OAAO,EAAE,cAAc,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAA;AAEtE,MAAM,WAAW,GAA2B;IAC1C,GAAG,EAAE,OAAO;IACZ,GAAG,EAAE,MAAM;IACX,GAAG,EAAE,MAAM;IACX,GAAG,EAAE,QAAQ;IACb,GAAG,EAAE,QAAQ;CACd,CAAA;AAED,+DAA+D;AAC/D,MAAM,CAAC,MAAM,SAAS,GAAG,CAAC,KAAa,EAAU,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,WAAW,CAAC,CAAC,CAAW,CAAC,CAAA;AAE9G;;;;;;;;;;;;;;GAcG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,KAAc,EAAE,KAAwB,EAAiB,EAAE;IAC3F,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAA;IACtC,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,GAAG,IAAI;QAAE,OAAO,IAAI,CAAA;IAE1C,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QACxB,IAAI,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC;YAAE,OAAO,IAAI,CAAA;QAC3D,+EAA+E;QAC/E,IAAI,CAAC,GAAG,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC;YAAE,OAAO,IAAI,CAAA;QACvF,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC;YAAE,OAAO,IAAI,CAAA;QACjC,IAAI,CAAC;YACH,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,QAAQ,CAAC,kBAAkB,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC;gBAC7F,OAAO,IAAI,CAAA;QACf,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAA;QACb,CAAC;QACD,OAAO,GAAG,CAAA;IACZ,CAAC;IAED,IAAI,GAAQ,CAAA;IACZ,IAAI,CAAC;QACH,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAA;IACpB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAA;IACb,CAAC;IACD,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ,IAAI,GAAG,CAAC,QAAQ,KAAK,OAAO;QAAE,OAAO,IAAI,CAAA;IACtE,2EAA2E;IAC3E,IAAI,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,QAAQ;QAAE,OAAO,IAAI,CAAA;IAC7C,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC,CAAA;IAChE,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;QAAE,OAAO,IAAI,CAAA;IACrD,OAAO,GAAG,CAAC,QAAQ,EAAE,CAAA;AACvB,CAAC,CAAA;AAED;;;GAGG;AACH,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,KAAc,EAAiB,EAAE;IAC3D,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAA;IACtC,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,GAAG,IAAI;QAAE,OAAO,IAAI,CAAA;IAC1C,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,iBAAiB,CAAC,GAAG,EAAE,EAAE,CAAC,CAAA;IAC1D,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAA;QACxB,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ,IAAI,GAAG,CAAC,QAAQ,KAAK,OAAO;YAAE,OAAO,IAAI,CAAA;QACtE,IAAI,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,QAAQ;YAAE,OAAO,IAAI,CAAA;QAC7C,OAAO,GAAG,CAAC,QAAQ,EAAE,CAAA;IACvB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAA;IACb,CAAC;AACH,CAAC,CAAA;AAID;;;GAGG;AACH,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,MAAc,EAAE,OAAgC,EAAU,EAAE;IACrF,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAA;IACtC,MAAM,IAAI,GAAG,OAAO;SACjB,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE;QACb,MAAM,GAAG,GAAG,SAAS,CAAC,GAAG,IAAI,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,CAAA;QAC7C,MAAM,OAAO,GAAG,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,kBAAkB,SAAS,CAAC,KAAK,CAAC,YAAY,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,CAAA;QACrG,OAAO,qBAAqB,GAAG,SAAS,OAAO,YAAY,CAAA;IAC7D,CAAC,CAAC;SACD,IAAI,CAAC,IAAI,CAAC,CAAA;IACb,OAAO,yGAAyG,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,aAAa,CAAA;AACtJ,CAAC,CAAA;AAED;;;;;GAKG;AACH,MAAM,CAAC,MAAM,SAAS,GAAG,CACvB,MAAc,EACd,OAA4D,EACpD,EAAE;IACV,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAA;IACtC,IAAI,CAAC,OAAO,CAAC,SAAS;QAAE,OAAO,8BAA8B,CAAA;IAC7D,6EAA6E;IAC7E,8EAA8E;IAC9E,+EAA+E;IAC/E,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ;SAC9B,OAAO,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,aAAa,MAAM,GAAG,EAAE,aAAa,MAAM,GAAG,CAAC,CAAC;SACrE,IAAI,CAAC,IAAI,CAAC,CAAA;IACb,OAAO,kBAAkB,QAAQ,gBAAgB,IAAI,gBAAgB,CAAA;AACvE,CAAC,CAAA"}

package/dist/modules/website_seo/routes.d.ts

@@ -0,0 +1,3 @@
+import type { RouteEntry } from '@ketvietlab/ketjs';
+export declare const routes: Record<string, RouteEntry>;
+//# sourceMappingURL=routes.d.ts.map

package/dist/modules/website_seo/routes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"routes.d.ts","sourceRoot":"","sources":["../../../../../../packages/ketsuite/src/modules/website_seo/routes.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAS,UAAU,EAA6B,MAAM,mBAAmB,CAAA;AAyCrF,eAAO,MAAM,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,UAAU,CA+B7C,CAAA"}

package/dist/modules/website_seo/routes.js

@@ -0,0 +1,56 @@
+import { raw, text, withHeaders } from '@ketvietlab/ketjs';
+import { reservedPrefixes, robotsTxt, sitemapXml } from './projection.js';
+/** Both files are cheap to regenerate and stale for minutes at worst. */
+const cached = (result) => withHeaders(result, { 'cache-control': 'public, max-age=300' });
+const notAllowed = () => withHeaders(text('', { status: 405 }), { allow: 'GET, HEAD' });
+/**
+ * The origin a crawler used to reach us. Both files must speak in absolute URLs,
+ * and the only host we can honestly name is the one the request arrived on —
+ * inventing a canonical host here would contradict the domain the site answers.
+ */
+const originOf = (req) => {
+    const host = String(req.headers.host ?? '');
+    const forwarded = String(req.headers['x-forwarded-proto'] ?? '')
+        .split(',')[0]
+        ?.trim();
+    const scheme = forwarded === 'https' || forwarded === 'http' ? forwarded : 'http';
+    return `${scheme}://${host}`;
+};
+/**
+ * The site this host actually serves.
+ *
+ * `resolveSite` answers with a synthetic `__legacy__` site when a company has no
+ * active site at all, so a deployment can still render something while it is
+ * being set up. That is precisely the state these two files must not advertise,
+ * so it does not count as a site here.
+ */
+const siteFor = async (ctx, url, req) => {
+    const site = (await ctx.call('website.resolveSite', { host: String(req.headers.host ?? '') }, url, req));
+    return site?.id && site.id !== '__legacy__' ? { id: site.id } : null;
+};
+export const routes = {
+    '/robots.txt': {
+        anonymous: true,
+        handler: (ctx) => async (url, req) => {
+            if (req.method !== 'GET' && req.method !== 'HEAD')
+                return notAllowed();
+            const site = await siteFor(ctx, url, req);
+            const prefixes = reservedPrefixes(Object.keys(ctx.manifest.routes ?? {}));
+            return cached(text(robotsTxt(originOf(req), { indexable: site !== null, prefixes })));
+        },
+    },
+    '/sitemap.xml': {
+        anonymous: true,
+        handler: (ctx) => async (url, req) => {
+            if (req.method !== 'GET' && req.method !== 'HEAD')
+                return notAllowed();
+            const site = await siteFor(ctx, url, req);
+            if (!site)
+                return text('', { status: 404 });
+            const entries = (await ctx.call('website_seo.sitemapEntries', { siteId: site.id }, url, req));
+            // Every value in here went through escapeXml in the projection.
+            return cached(raw(sitemapXml(originOf(req), entries ?? []), { type: 'application/xml; charset=utf-8' }));
+        },
+    },
+};
+//# sourceMappingURL=routes.js.map

package/dist/modules/website_seo/routes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"routes.js","sourceRoot":"","sources":["../../../../../../../packages/ketsuite/src/modules/website_seo/routes.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAA;AAE1D,OAAO,EAAE,gBAAgB,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAA;AAIzE,yEAAyE;AACzE,MAAM,MAAM,GAAG,CAAC,MAAmB,EAAe,EAAE,CAClD,WAAW,CAAC,MAAM,EAAE,EAAE,eAAe,EAAE,qBAAqB,EAAE,CAAC,CAAA;AAEjE,MAAM,UAAU,GAAG,GAAgB,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,CAAA;AAEpG;;;;GAIG;AACH,MAAM,QAAQ,GAAG,CAAC,GAAQ,EAAU,EAAE;IACpC,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,IAAI,EAAE,CAAC,CAAA;IAC3C,MAAM,SAAS,GAAG,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,mBAAmB,CAAC,IAAI,EAAE,CAAC;SAC7D,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QACd,EAAE,IAAI,EAAE,CAAA;IACV,MAAM,MAAM,GAAG,SAAS,KAAK,OAAO,IAAI,SAAS,KAAK,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAA;IACjF,OAAO,GAAG,MAAM,MAAM,IAAI,EAAE,CAAA;AAC9B,CAAC,CAAA;AAED;;;;;;;GAOG;AACH,MAAM,OAAO,GAAG,KAAK,EAAE,GAAiB,EAAE,GAAQ,EAAE,GAAQ,EAAkC,EAAE;IAC9F,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,qBAAqB,EAAE,EAAE,IAAI,EAAE,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,IAAI,EAAE,CAAC,EAAE,EAAE,GAAG,EAAE,GAAG,CAAC,CAG1F,CAAA;IACb,OAAO,IAAI,EAAE,EAAE,IAAI,IAAI,CAAC,EAAE,KAAK,YAAY,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAA;AACtE,CAAC,CAAA;AAED,MAAM,CAAC,MAAM,MAAM,GAA+B;IAChD,aAAa,EAAE;QACb,SAAS,EAAE,IAAI;QACf,OAAO,EACL,CAAC,GAAiB,EAAS,EAAE,CAC7B,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;YACjB,IAAI,GAAG,CAAC,MAAM,KAAK,KAAK,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM;gBAAE,OAAO,UAAU,EAAE,CAAA;YACtE,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAA;YACzC,MAAM,QAAQ,GAAG,gBAAgB,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,CAAA;YACzE,OAAO,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,KAAK,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,CAAA;QACvF,CAAC;KACJ;IAED,cAAc,EAAE;QACd,SAAS,EAAE,IAAI;QACf,OAAO,EACL,CAAC,GAAiB,EAAS,EAAE,CAC7B,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;YACjB,IAAI,GAAG,CAAC,MAAM,KAAK,KAAK,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM;gBAAE,OAAO,UAAU,EAAE,CAAA;YACtE,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAA;YACzC,IAAI,CAAC,IAAI;gBAAE,OAAO,IAAI,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAA;YAC3C,MAAM,OAAO,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,4BAA4B,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,GAAG,CAAC,CAG/E,CAAA;YACb,gEAAgE;YAChE,OAAO,MAAM,CACX,GAAG,CAAC,UAAU,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,OAAO,IAAI,EAAE,CAAC,EAAE,EAAE,IAAI,EAAE,gCAAgC,EAAE,CAAC,CAC1F,CAAA;QACH,CAAC;KACJ;CACF,CAAA"}

package/dist/permission-catalogue.d.ts

@@ -0,0 +1,5 @@
+import type { ModulePermissionsDef } from '@ketvietlab/ketjs';
+/** Exact Wave 2 declarations for public KetSuite modules in production product deployments. */
+export declare const ketsuitePermissionModules: Record<string, ModulePermissionsDef>;
+export declare const ketsuitePermissionModuleNames: readonly string[];
+//# sourceMappingURL=permission-catalogue.d.ts.map

package/dist/permission-catalogue.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"permission-catalogue.d.ts","sourceRoot":"","sources":["../../../../packages/ketsuite/src/permission-catalogue.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,oBAAoB,EAIrB,MAAM,mBAAmB,CAAA;AAw8C1B,+FAA+F;AAC/F,eAAO,MAAM,yBAAyB,EA0CjC,MAAM,CAAC,MAAM,EAAE,oBAAoB,CAAC,CAAA;AAEzC,eAAO,MAAM,6BAA6B,mBAAsC,CAAA"}