@krantho/api 0.0.0-stage → 1.0.0

package/dist/handlers/content-changes.js

@@ -0,0 +1,160 @@
+import { posix, relative, sep } from 'node:path';
+import { canGetContent, canReadPublished, repositoryFile, } from '@krantho/persistence';
+import { documentChecksum } from '@krantho/schema';
+import { requireRole } from '../permissions.js';
+import { parsePositiveInt } from '../validators.js';
+const DEFAULT_LIMIT = 100;
+const MAX_LIMIT = 200;
+/** A collection's directory relative to the content directory, with forward slashes */
+function directoryKey(contentDir, collection) {
+    return relative(contentDir, collection.directory ?? '')
+        .split(sep)
+        .join('/');
+}
+/** The path of a collection's file for a slug, as the content migration keys it */
+function fileKey(contentDir, collection, slug) {
+    return posix.join(directoryKey(contentDir, collection), `${slug}.md`);
+}
+/**
+ * A cursor names the collection and the work item to continue from. The work is read again
+ * for every page, so an edit between two pages can make one item repeat or be skipped; the
+ * next pull lists it.
+ */
+function parseCursor(value) {
+    const match = /^(\d+)\.(\d+)$/.exec(value ?? '');
+    return match
+        ? { collection: Number(match[1]), item: Number(match[2]) }
+        : { collection: 0, item: 0 };
+}
+function fieldOrder(collection) {
+    return Object.keys(collection.schema.shape);
+}
+/** The work for one collection: edited live documents, and baseline files with nothing live */
+async function collectionWork(ctx, collection, manifest) {
+    const adapter = ctx.adapter;
+    if (!canReadPublished(adapter))
+        return [];
+    const locale = ctx.config.site.defaultLocale;
+    const { items: live } = await adapter.query({
+        state: 'published',
+        projection: 'summary',
+        collections: [collection.name],
+        locale,
+    });
+    const work = live
+        .filter((summary) => summary.meta.source !== 'filesystem')
+        .map((summary) => ({ kind: 'live', summary }));
+    const liveSlugs = new Set(live.map((summary) => summary.meta.slug));
+    const prefix = `${directoryKey(ctx.config.paths.contentDir, collection)}/`;
+    for (const key of Object.keys(manifest.fileChecksums)) {
+        const name = key.startsWith(prefix) ? key.slice(prefix.length) : '';
+        if (!name.endsWith('.md') || name.includes('/'))
+            continue;
+        const slug = name.slice(0, -3);
+        if (!liveSlugs.has(slug))
+            work.push({ kind: 'missing', slug });
+    }
+    return work;
+}
+function fileOf(collection, document) {
+    return repositoryFile({
+        fields: document.fields,
+        body: document.body,
+        metadata: document.metadata,
+        defaults: document.defaults,
+        status: 'published',
+        fieldOrder: fieldOrder(collection),
+    });
+}
+/** The change for one work item, or null when production agrees with the repository */
+async function changeOf(ctx, collection, manifest, work) {
+    const adapter = ctx.adapter;
+    if (!canGetContent(adapter) || !canReadPublished(adapter))
+        return null;
+    const locale = ctx.config.site.defaultLocale;
+    const slug = work.kind === 'live' ? work.summary.meta.slug : work.slug;
+    const path = fileKey(ctx.config.paths.contentDir, collection, slug);
+    const baseline = manifest.fileChecksums[path] ?? null;
+    const base = { collection: collection.name, slug, locale, path, baselineChecksum: baseline };
+    const document = work.kind === 'live'
+        ? await adapter.getPublished(collection.name, slug, locale)
+        : await adapter.getContent(collection.name, slug, locale);
+    if (!document || document.meta.status === 'deleted') {
+        return baseline === null ? null : { ...base, action: 'delete', checksum: null, content: null };
+    }
+    // A document that is not live (unpublished, or a draft) stays in the database: its text is
+    // never read out, and the repository keeps the file it has
+    if (work.kind === 'missing')
+        return null;
+    const checksum = documentChecksum(document);
+    if (checksum === baseline)
+        return null;
+    return {
+        ...base,
+        action: baseline === null ? 'add' : 'edit',
+        checksum,
+        content: fileOf(collection, document),
+    };
+}
+function pageLimit(value) {
+    return Math.min(parsePositiveInt(value) ?? DEFAULT_LIMIT, MAX_LIMIT);
+}
+export const contentChanges = async (req, ctx) => {
+    const denied = requireRole(ctx.auth, 'editor');
+    if (denied)
+        return denied;
+    const migration = ctx.contentMigrationAdapter;
+    if (!migration || !canReadPublished(ctx.adapter) || !canGetContent(ctx.adapter)) {
+        return {
+            status: 501,
+            body: { error: 'This site cannot compare its content with a repository' },
+        };
+    }
+    const manifest = await migration.getContentManifest();
+    if (!manifest) {
+        return { status: 409, body: { error: 'The database has no content import to compare with' } };
+    }
+    const only = req.query['collection'];
+    const collections = [...ctx.contentConfig.collections.values()].filter((collection) => collection.directory && (only === undefined || collection.name === only));
+    if (only !== undefined && collections.length === 0) {
+        return { status: 400, body: { error: `No collection ${only} is kept in files` } };
+    }
+    const limit = pageLimit(req.query['limit']);
+    const cursor = parseCursor(req.query['cursor']);
+    const changes = [];
+    let looked = 0;
+    for (let c = cursor.collection; c < collections.length; c++) {
+        const collection = collections[c];
+        if (!collection)
+            break;
+        const work = await collectionWork(ctx, collection, manifest);
+        for (let i = c === cursor.collection ? cursor.item : 0; i < work.length; i++) {
+            if (looked >= limit) {
+                return respond(manifest, ctx, changes, `${c}.${i}`);
+            }
+            looked++;
+            const item = work[i];
+            const change = item ? await changeOf(ctx, collection, manifest, item) : null;
+            if (change)
+                changes.push(change);
+        }
+    }
+    return respond(manifest, ctx, changes, null);
+};
+function respond(manifest, ctx, changes, next) {
+    return {
+        status: 200,
+        headers: { 'cache-control': 'no-store' },
+        body: {
+            baseline: {
+                commit: manifest.repoCommit,
+                repoVersion: manifest.repoVersion,
+                importedAt: manifest.importedAt,
+            },
+            defaultLocale: ctx.config.site.defaultLocale,
+            changes,
+            next,
+        },
+    };
+}
+//# sourceMappingURL=content-changes.js.map

package/dist/handlers/content-changes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"content-changes.js","sourceRoot":"","sources":["../../src/handlers/content-changes.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,GAAG,EAAE,MAAM,WAAW,CAAA;AAChD,OAAO,EAIL,aAAa,EACb,gBAAgB,EAChB,cAAc,GACf,MAAM,sBAAsB,CAAA;AAC7B,OAAO,EAAmB,gBAAgB,EAAE,MAAM,iBAAiB,CAAA;AACnE,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAA;AAE/C,OAAO,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAA;AA6BnD,MAAM,aAAa,GAAG,GAAG,CAAA;AACzB,MAAM,SAAS,GAAG,GAAG,CAAA;AAKrB,uFAAuF;AACvF,SAAS,YAAY,CAAC,UAAkB,EAAE,UAAsB;IAC9D,OAAO,QAAQ,CAAC,UAAU,EAAE,UAAU,CAAC,SAAS,IAAI,EAAE,CAAC;SACpD,KAAK,CAAC,GAAG,CAAC;SACV,IAAI,CAAC,GAAG,CAAC,CAAA;AACd,CAAC;AAED,mFAAmF;AACnF,SAAS,OAAO,CAAC,UAAkB,EAAE,UAAsB,EAAE,IAAY;IACvE,OAAO,KAAK,CAAC,IAAI,CAAC,YAAY,CAAC,UAAU,EAAE,UAAU,CAAC,EAAE,GAAG,IAAI,KAAK,CAAC,CAAA;AACvE,CAAC;AAED;;;;GAIG;AACH,SAAS,WAAW,CAAC,KAAyB;IAC5C,MAAM,KAAK,GAAG,gBAAgB,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC,CAAA;IAChD,OAAO,KAAK;QACV,CAAC,CAAC,EAAE,UAAU,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE;QAC1D,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,CAAA;AAChC,CAAC;AAED,SAAS,UAAU,CAAC,UAAsB;IACxC,OAAO,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;AAC7C,CAAC;AAED,+FAA+F;AAC/F,KAAK,UAAU,cAAc,CAC3B,GAAe,EACf,UAAsB,EACtB,QAA+B;IAE/B,MAAM,OAAO,GAAG,GAAG,CAAC,OAAO,CAAA;IAC3B,IAAI,CAAC,gBAAgB,CAAC,OAAO,CAAC;QAAE,OAAO,EAAE,CAAA;IACzC,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,aAAa,CAAA;IAC5C,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,MAAM,OAAO,CAAC,KAAK,CAAC;QAC1C,KAAK,EAAE,WAAW;QAClB,UAAU,EAAE,SAAS;QACrB,WAAW,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC;QAC9B,MAAM;KACP,CAAC,CAAA;IACF,MAAM,IAAI,GAAW,IAAI;SACtB,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,KAAK,YAAY,CAAC;SACzD,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC,CAAA;IAEhD,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAA;IACnE,MAAM,MAAM,GAAG,GAAG,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,UAAU,EAAE,UAAU,CAAC,GAAG,CAAA;IAC1E,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,aAAa,CAAC,EAAE,CAAC;QACtD,MAAM,IAAI,GAAG,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAA;QACnE,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC;YAAE,SAAQ;QACzD,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAA;QAC9B,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;IAChE,CAAC;IACD,OAAO,IAAI,CAAA;AACb,CAAC;AAED,SAAS,MAAM,CAAC,UAAsB,EAAE,QAAyB;IAC/D,OAAO,cAAc,CAAC;QACpB,MAAM,EAAE,QAAQ,CAAC,MAAM;QACvB,IAAI,EAAE,QAAQ,CAAC,IAAI;QACnB,QAAQ,EAAE,QAAQ,CAAC,QAAQ;QAC3B,QAAQ,EAAE,QAAQ,CAAC,QAAQ;QAC3B,MAAM,EAAE,WAAW;QACnB,UAAU,EAAE,UAAU,CAAC,UAAU,CAAC;KACnC,CAAC,CAAA;AACJ,CAAC;AAED,uFAAuF;AACvF,KAAK,UAAU,QAAQ,CACrB,GAAe,EACf,UAAsB,EACtB,QAA+B,EAC/B,IAAU;IAEV,MAAM,OAAO,GAAG,GAAG,CAAC,OAAO,CAAA;IAC3B,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,IAAI,CAAC,gBAAgB,CAAC,OAAO,CAAC;QAAE,OAAO,IAAI,CAAA;IACtE,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,aAAa,CAAA;IAC5C,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAA;IACtE,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,UAAU,EAAE,UAAU,EAAE,IAAI,CAAC,CAAA;IACnE,MAAM,QAAQ,GAAG,QAAQ,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,IAAI,CAAA;IACrD,MAAM,IAAI,GAAG,EAAE,UAAU,EAAE,UAAU,CAAC,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,gBAAgB,EAAE,QAAQ,EAAE,CAAA;IAE5F,MAAM,QAAQ,GACZ,IAAI,CAAC,IAAI,KAAK,MAAM;QAClB,CAAC,CAAC,MAAM,OAAO,CAAC,YAAY,CAAC,UAAU,CAAC,IAAI,EAAE,IAAI,EAAE,MAAM,CAAC;QAC3D,CAAC,CAAC,MAAM,OAAO,CAAC,UAAU,CAAC,UAAU,CAAC,IAAI,EAAE,IAAI,EAAE,MAAM,CAAC,CAAA;IAC7D,IAAI,CAAC,QAAQ,IAAI,QAAQ,CAAC,IAAI,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QACpD,OAAO,QAAQ,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,CAAA;IAChG,CAAC;IACD,2FAA2F;IAC3F,2DAA2D;IAC3D,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS;QAAE,OAAO,IAAI,CAAA;IACxC,MAAM,QAAQ,GAAG,gBAAgB,CAAC,QAAQ,CAAC,CAAA;IAC3C,IAAI,QAAQ,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAA;IACtC,OAAO;QACL,GAAG,IAAI;QACP,MAAM,EAAE,QAAQ,KAAK,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM;QAC1C,QAAQ;QACR,OAAO,EAAE,MAAM,CAAC,UAAU,EAAE,QAAQ,CAAC;KACtC,CAAA;AACH,CAAC;AAED,SAAS,SAAS,CAAC,KAAyB;IAC1C,OAAO,IAAI,CAAC,GAAG,CAAC,gBAAgB,CAAC,KAAK,CAAC,IAAI,aAAa,EAAE,SAAS,CAAC,CAAA;AACtE,CAAC;AAED,MAAM,CAAC,MAAM,cAAc,GAAe,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;IAC3D,MAAM,MAAM,GAAG,WAAW,CAAC,GAAG,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAA;IAC9C,IAAI,MAAM;QAAE,OAAO,MAAM,CAAA;IACzB,MAAM,SAAS,GAAG,GAAG,CAAC,uBAAuB,CAAA;IAC7C,IAAI,CAAC,SAAS,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;QAChF,OAAO;YACL,MAAM,EAAE,GAAG;YACX,IAAI,EAAE,EAAE,KAAK,EAAE,wDAAwD,EAAE;SAC1E,CAAA;IACH,CAAC;IACD,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,kBAAkB,EAAE,CAAA;IACrD,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,oDAAoD,EAAE,EAAE,CAAA;IAC/F,CAAC;IAED,MAAM,IAAI,GAAG,GAAG,CAAC,KAAK,CAAC,YAAY,CAAC,CAAA;IACpC,MAAM,WAAW,GAAG,CAAC,GAAG,GAAG,CAAC,aAAa,CAAC,WAAW,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CACpE,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,SAAS,IAAI,CAAC,IAAI,KAAK,SAAS,IAAI,UAAU,CAAC,IAAI,KAAK,IAAI,CAAC,CACzF,CAAA;IACD,IAAI,IAAI,KAAK,SAAS,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACnD,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,iBAAiB,IAAI,mBAAmB,EAAE,EAAE,CAAA;IACnF,CAAC;IAED,MAAM,KAAK,GAAG,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAA;IAC3C,MAAM,MAAM,GAAG,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAA;IAC/C,MAAM,OAAO,GAAoB,EAAE,CAAA;IACnC,IAAI,MAAM,GAAG,CAAC,CAAA;IACd,KAAK,IAAI,CAAC,GAAG,MAAM,CAAC,UAAU,EAAE,CAAC,GAAG,WAAW,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QAC5D,MAAM,UAAU,GAAG,WAAW,CAAC,CAAC,CAAC,CAAA;QACjC,IAAI,CAAC,UAAU;YAAE,MAAK;QACtB,MAAM,IAAI,GAAG,MAAM,cAAc,CAAC,GAAG,EAAE,UAAU,EAAE,QAAQ,CAAC,CAAA;QAC5D,KAAK,IAAI,CAAC,GAAG,CAAC,KAAK,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YAC7E,IAAI,MAAM,IAAI,KAAK,EAAE,CAAC;gBACpB,OAAO,OAAO,CAAC,QAAQ,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;YACrD,CAAC;YACD,MAAM,EAAE,CAAA;YACR,MAAM,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,CAAA;YACpB,MAAM,MAAM,GAAG,IAAI,CAAC,CAAC,CAAC,MAAM,QAAQ,CAAC,GAAG,EAAE,UAAU,EAAE,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;YAC5E,IAAI,MAAM;gBAAE,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;QAClC,CAAC;IACH,CAAC;IACD,OAAO,OAAO,CAAC,QAAQ,EAAE,GAAG,EAAE,OAAO,EAAE,IAAI,CAAC,CAAA;AAC9C,CAAC,CAAA;AAED,SAAS,OAAO,CACd,QAA+B,EAC/B,GAAe,EACf,OAAwB,EACxB,IAAmB;IAEnB,OAAO;QACL,MAAM,EAAE,GAAG;QACX,OAAO,EAAE,EAAE,eAAe,EAAE,UAAU,EAAE;QACxC,IAAI,EAAE;YACJ,QAAQ,EAAE;gBACR,MAAM,EAAE,QAAQ,CAAC,UAAU;gBAC3B,WAAW,EAAE,QAAQ,CAAC,WAAW;gBACjC,UAAU,EAAE,QAAQ,CAAC,UAAU;aAChC;YACD,aAAa,EAAE,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,aAAa;YAC5C,OAAO;YACP,IAAI;SACL;KACF,CAAA;AACH,CAAC"}

package/dist/handlers/content-lock.d.ts

@@ -0,0 +1,13 @@
+import type { ApiHandler } from '../types.js';
+/** POST /api/content/:collection/:slug/lock — acquire advisory lock */
+export declare const acquireLock: ApiHandler;
+/**
+ * DELETE /api/content/:collection/:slug/lock — release a lock (editor): your
+ * own, or anyone's as an admin (a stale lock someone left behind)
+ */
+export declare const releaseLock: ApiHandler;
+/** GET /api/locks — every edit lock currently held (viewer) */
+export declare const listLocks: ApiHandler;
+/** GET /api/content/:collection/:slug/lock — check lock status */
+export declare const checkLock: ApiHandler;
+//# sourceMappingURL=content-lock.d.ts.map

package/dist/handlers/content-lock.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"content-lock.d.ts","sourceRoot":"","sources":["../../src/handlers/content-lock.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,UAAU,EAAe,MAAM,aAAa,CAAA;AAO1D,uEAAuE;AACvE,eAAO,MAAM,WAAW,EAAE,UA6CzB,CAAA;AAED;;;GAGG;AACH,eAAO,MAAM,WAAW,EAAE,UA4BzB,CAAA;AAED,+DAA+D;AAC/D,eAAO,MAAM,SAAS,EAAE,UAKvB,CAAA;AAED,kEAAkE;AAClE,eAAO,MAAM,SAAS,EAAE,UAuBvB,CAAA"}

package/dist/handlers/content-lock.js

@@ -0,0 +1,109 @@
+import { lockOwner } from '../content-locks.js';
+import { changedByFromAuth, hasRole, requireRole } from '../permissions.js';
+import { parseLocaleParam, requireParam, validateCollectionParam } from '../validators.js';
+function lockNotAvailable() {
+    return { status: 501, body: { error: 'Advisory locking requires a database adapter' } };
+}
+/** POST /api/content/:collection/:slug/lock — acquire advisory lock */
+export const acquireLock = async (req, ctx) => {
+    const denied = requireRole(ctx.auth, 'editor');
+    if (denied)
+        return denied;
+    const validated = validateCollectionParam(req.params['collection'], ctx);
+    if (!validated.isValid)
+        return validated.response;
+    const slugResult = requireParam(req.params, 'slug');
+    if (!slugResult.isValid)
+        return slugResult.response;
+    const slug = slugResult.value;
+    const locale = parseLocaleParam(req.query['locale']) ?? ctx.config.site.defaultLocale;
+    const lockedBy = changedByFromAuth(ctx.auth) ?? 'anonymous';
+    if (!ctx.lockAdapter)
+        return lockNotAvailable();
+    const now = new Date();
+    const expiresAt = new Date(now.getTime() + ctx.config.content.lock.leaseMs);
+    const existing = await ctx.lockAdapter.getLock(validated.collection, slug, locale);
+    if (existing) {
+        if (new Date(existing.expiresAt) > now && existing.lockedBy !== lockedBy) {
+            return {
+                status: 423,
+                body: {
+                    error: 'Content is locked by another user',
+                    lockedBy: existing.lockedBy,
+                    expiresAt: existing.expiresAt,
+                },
+            };
+        }
+    }
+    await ctx.lockAdapter.acquireLock(validated.collection, slug, locale, lockedBy, expiresAt.toISOString());
+    return {
+        status: 200,
+        body: { locked: true, lockedBy, expiresAt: expiresAt.toISOString() },
+    };
+};
+/**
+ * DELETE /api/content/:collection/:slug/lock — release a lock (editor): your
+ * own, or anyone's as an admin (a stale lock someone left behind)
+ */
+export const releaseLock = async (req, ctx) => {
+    const denied = requireRole(ctx.auth, 'editor');
+    if (denied)
+        return denied;
+    const validated = validateCollectionParam(req.params['collection'], ctx);
+    if (!validated.isValid)
+        return validated.response;
+    const slugResult = requireParam(req.params, 'slug');
+    if (!slugResult.isValid)
+        return slugResult.response;
+    const slug = slugResult.value;
+    const locale = parseLocaleParam(req.query['locale']) ?? ctx.config.site.defaultLocale;
+    if (!ctx.lockAdapter)
+        return lockNotAvailable();
+    const lock = await ctx.lockAdapter.getLock(validated.collection, slug, locale);
+    const isAdmin = ctx.auth !== undefined && hasRole(ctx.auth, 'admin');
+    if (lock && lock.lockedBy !== lockOwner(ctx) && !isAdmin) {
+        return {
+            status: 403,
+            body: {
+                error: 'Only the lock holder or an admin can release this lock',
+                lockedBy: lock.lockedBy,
+            },
+        };
+    }
+    await ctx.lockAdapter.releaseLock(validated.collection, slug, locale);
+    return { status: 200, body: { locked: false } };
+};
+/** GET /api/locks — every edit lock currently held (viewer) */
+export const listLocks = async (_req, ctx) => {
+    const denied = requireRole(ctx.auth, 'viewer');
+    if (denied)
+        return denied;
+    const locks = (await ctx.lockAdapter?.listLocks()) ?? [];
+    return { status: 200, body: { locks } };
+};
+/** GET /api/content/:collection/:slug/lock — check lock status */
+export const checkLock = async (req, ctx) => {
+    const validated = validateCollectionParam(req.params['collection'], ctx);
+    if (!validated.isValid)
+        return validated.response;
+    const slugResult = requireParam(req.params, 'slug');
+    if (!slugResult.isValid)
+        return slugResult.response;
+    const slug = slugResult.value;
+    const locale = parseLocaleParam(req.query['locale']) ?? ctx.config.site.defaultLocale;
+    if (!ctx.lockAdapter)
+        return { status: 200, body: { locked: false } };
+    const lock = await ctx.lockAdapter.getLock(validated.collection, slug, locale);
+    if (!lock)
+        return { status: 200, body: { locked: false } };
+    return {
+        status: 200,
+        body: {
+            locked: true,
+            lockedBy: lock.lockedBy,
+            lockedAt: lock.lockedAt,
+            expiresAt: lock.expiresAt,
+        },
+    };
+};
+//# sourceMappingURL=content-lock.js.map

package/dist/handlers/content-lock.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"content-lock.js","sourceRoot":"","sources":["../../src/handlers/content-lock.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAA;AAC/C,OAAO,EAAE,iBAAiB,EAAE,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAA;AAE3E,OAAO,EAAE,gBAAgB,EAAE,YAAY,EAAE,uBAAuB,EAAE,MAAM,kBAAkB,CAAA;AAE1F,SAAS,gBAAgB;IACvB,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,8CAA8C,EAAE,EAAE,CAAA;AACzF,CAAC;AAED,uEAAuE;AACvE,MAAM,CAAC,MAAM,WAAW,GAAe,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;IACxD,MAAM,MAAM,GAAG,WAAW,CAAC,GAAG,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAA;IAC9C,IAAI,MAAM;QAAE,OAAO,MAAM,CAAA;IAEzB,MAAM,SAAS,GAAG,uBAAuB,CAAC,GAAG,CAAC,MAAM,CAAC,YAAY,CAAC,EAAE,GAAG,CAAC,CAAA;IACxE,IAAI,CAAC,SAAS,CAAC,OAAO;QAAE,OAAO,SAAS,CAAC,QAAQ,CAAA;IAEjD,MAAM,UAAU,GAAG,YAAY,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IACnD,IAAI,CAAC,UAAU,CAAC,OAAO;QAAE,OAAO,UAAU,CAAC,QAAQ,CAAA;IACnD,MAAM,IAAI,GAAG,UAAU,CAAC,KAAK,CAAA;IAC7B,MAAM,MAAM,GAAG,gBAAgB,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,IAAI,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,aAAa,CAAA;IACrF,MAAM,QAAQ,GAAG,iBAAiB,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,WAAW,CAAA;IAE3D,IAAI,CAAC,GAAG,CAAC,WAAW;QAAE,OAAO,gBAAgB,EAAE,CAAA;IAE/C,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAA;IACtB,MAAM,SAAS,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;IAE3E,MAAM,QAAQ,GAAG,MAAM,GAAG,CAAC,WAAW,CAAC,OAAO,CAAC,SAAS,CAAC,UAAU,EAAE,IAAI,EAAE,MAAM,CAAC,CAAA;IAElF,IAAI,QAAQ,EAAE,CAAC;QACb,IAAI,IAAI,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,GAAG,GAAG,IAAI,QAAQ,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;YACzE,OAAO;gBACL,MAAM,EAAE,GAAG;gBACX,IAAI,EAAE;oBACJ,KAAK,EAAE,mCAAmC;oBAC1C,QAAQ,EAAE,QAAQ,CAAC,QAAQ;oBAC3B,SAAS,EAAE,QAAQ,CAAC,SAAS;iBAC9B;aACF,CAAA;QACH,CAAC;IACH,CAAC;IAED,MAAM,GAAG,CAAC,WAAW,CAAC,WAAW,CAC/B,SAAS,CAAC,UAAU,EACpB,IAAI,EACJ,MAAM,EACN,QAAQ,EACR,SAAS,CAAC,WAAW,EAAE,CACxB,CAAA;IAED,OAAO;QACL,MAAM,EAAE,GAAG;QACX,IAAI,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,SAAS,CAAC,WAAW,EAAE,EAAE;KACrE,CAAA;AACH,CAAC,CAAA;AAED;;;GAGG;AACH,MAAM,CAAC,MAAM,WAAW,GAAe,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;IACxD,MAAM,MAAM,GAAG,WAAW,CAAC,GAAG,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAA;IAC9C,IAAI,MAAM;QAAE,OAAO,MAAM,CAAA;IAEzB,MAAM,SAAS,GAAG,uBAAuB,CAAC,GAAG,CAAC,MAAM,CAAC,YAAY,CAAC,EAAE,GAAG,CAAC,CAAA;IACxE,IAAI,CAAC,SAAS,CAAC,OAAO;QAAE,OAAO,SAAS,CAAC,QAAQ,CAAA;IAEjD,MAAM,UAAU,GAAG,YAAY,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IACnD,IAAI,CAAC,UAAU,CAAC,OAAO;QAAE,OAAO,UAAU,CAAC,QAAQ,CAAA;IACnD,MAAM,IAAI,GAAG,UAAU,CAAC,KAAK,CAAA;IAC7B,MAAM,MAAM,GAAG,gBAAgB,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,IAAI,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,aAAa,CAAA;IAErF,IAAI,CAAC,GAAG,CAAC,WAAW;QAAE,OAAO,gBAAgB,EAAE,CAAA;IAE/C,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,WAAW,CAAC,OAAO,CAAC,SAAS,CAAC,UAAU,EAAE,IAAI,EAAE,MAAM,CAAC,CAAA;IAC9E,MAAM,OAAO,GAAG,GAAG,CAAC,IAAI,KAAK,SAAS,IAAI,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,OAAO,CAAC,CAAA;IACpE,IAAI,IAAI,IAAI,IAAI,CAAC,QAAQ,KAAK,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;QACzD,OAAO;YACL,MAAM,EAAE,GAAG;YACX,IAAI,EAAE;gBACJ,KAAK,EAAE,wDAAwD;gBAC/D,QAAQ,EAAE,IAAI,CAAC,QAAQ;aACxB;SACF,CAAA;IACH,CAAC;IAED,MAAM,GAAG,CAAC,WAAW,CAAC,WAAW,CAAC,SAAS,CAAC,UAAU,EAAE,IAAI,EAAE,MAAM,CAAC,CAAA;IACrE,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,CAAA;AACjD,CAAC,CAAA;AAED,+DAA+D;AAC/D,MAAM,CAAC,MAAM,SAAS,GAAe,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE;IACvD,MAAM,MAAM,GAAG,WAAW,CAAC,GAAG,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAA;IAC9C,IAAI,MAAM;QAAE,OAAO,MAAM,CAAA;IACzB,MAAM,KAAK,GAAG,CAAC,MAAM,GAAG,CAAC,WAAW,EAAE,SAAS,EAAE,CAAC,IAAI,EAAE,CAAA;IACxD,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,EAAE,CAAA;AACzC,CAAC,CAAA;AAED,kEAAkE;AAClE,MAAM,CAAC,MAAM,SAAS,GAAe,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;IACtD,MAAM,SAAS,GAAG,uBAAuB,CAAC,GAAG,CAAC,MAAM,CAAC,YAAY,CAAC,EAAE,GAAG,CAAC,CAAA;IACxE,IAAI,CAAC,SAAS,CAAC,OAAO;QAAE,OAAO,SAAS,CAAC,QAAQ,CAAA;IAEjD,MAAM,UAAU,GAAG,YAAY,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IACnD,IAAI,CAAC,UAAU,CAAC,OAAO;QAAE,OAAO,UAAU,CAAC,QAAQ,CAAA;IACnD,MAAM,IAAI,GAAG,UAAU,CAAC,KAAK,CAAA;IAC7B,MAAM,MAAM,GAAG,gBAAgB,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,IAAI,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,aAAa,CAAA;IAErF,IAAI,CAAC,GAAG,CAAC,WAAW;QAAE,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,CAAA;IAErE,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,WAAW,CAAC,OAAO,CAAC,SAAS,CAAC,UAAU,EAAE,IAAI,EAAE,MAAM,CAAC,CAAA;IAC9E,IAAI,CAAC,IAAI;QAAE,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,CAAA;IAE1D,OAAO;QACL,MAAM,EAAE,GAAG;QACX,IAAI,EAAE;YACJ,MAAM,EAAE,IAAI;YACZ,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,SAAS,EAAE,IAAI,CAAC,SAAS;SAC1B;KACF,CAAA;AACH,CAAC,CAAA"}

package/dist/handlers/content-tree.d.ts

@@ -0,0 +1,11 @@
+import type { ApiHandler } from '../types.js';
+/**
+ * GET /api/content-tree — the current version of every document of every collection, by
+ * collection in the order they are defined (`?locale=`, every locale when absent): which
+ * documents there are, in what state. Studio's site tree reads it. It carries no content —
+ * no body, rendered HTML or fields — so it weighs a few hundred bytes a document and can be
+ * read often; `GET /api/content/:collection` carries all of it. One adapter `query` serves
+ * every collection.
+ */
+export declare const listContentTree: ApiHandler;
+//# sourceMappingURL=content-tree.d.ts.map

package/dist/handlers/content-tree.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"content-tree.d.ts","sourceRoot":"","sources":["../../src/handlers/content-tree.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AAG7C;;;;;;;GAOG;AACH,eAAO,MAAM,eAAe,EAAE,UAgB7B,CAAA"}

package/dist/handlers/content-tree.js

@@ -0,0 +1,28 @@
+import { canQuery } from '@krantho/persistence';
+import { groupByCollection } from '../group-by-collection.js';
+import { parseLocaleParam } from '../validators.js';
+/**
+ * GET /api/content-tree — the current version of every document of every collection, by
+ * collection in the order they are defined (`?locale=`, every locale when absent): which
+ * documents there are, in what state. Studio's site tree reads it. It carries no content —
+ * no body, rendered HTML or fields — so it weighs a few hundred bytes a document and can be
+ * read often; `GET /api/content/:collection` carries all of it. One adapter `query` serves
+ * every collection.
+ */
+export const listContentTree = async (req, ctx) => {
+    if (!canQuery(ctx.adapter)) {
+        return { status: 501, body: { error: 'Adapter does not support query' } };
+    }
+    const names = [...ctx.contentConfig.collections.keys()];
+    const { items } = await ctx.adapter.query({
+        state: 'current',
+        projection: 'meta',
+        collections: names,
+        sort: 'slug',
+        locale: parseLocaleParam(req.query['locale']),
+    });
+    const documents = groupByCollection(items, names, (meta) => meta.collection);
+    const collections = names.map((name) => ({ name, documents: documents.get(name) ?? [] }));
+    return { status: 200, body: { collections } };
+};
+//# sourceMappingURL=content-tree.js.map

package/dist/handlers/content-tree.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"content-tree.js","sourceRoot":"","sources":["../../src/handlers/content-tree.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAA;AAC/C,OAAO,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAA;AAE7D,OAAO,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAA;AAEnD;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,eAAe,GAAe,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;IAC5D,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;QAC3B,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,gCAAgC,EAAE,EAAE,CAAA;IAC3E,CAAC;IACD,MAAM,KAAK,GAAG,CAAC,GAAG,GAAG,CAAC,aAAa,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC,CAAA;IACvD,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC;QACxC,KAAK,EAAE,SAAS;QAChB,UAAU,EAAE,MAAM;QAClB,WAAW,EAAE,KAAK;QAClB,IAAI,EAAE,MAAM;QACZ,MAAM,EAAE,gBAAgB,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;KAC9C,CAAC,CAAA;IACF,MAAM,SAAS,GAAG,iBAAiB,CAAC,KAAK,EAAE,KAAK,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,CAAA;IAC5E,MAAM,WAAW,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAA;IAEzF,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,WAAW,EAAE,EAAE,CAAA;AAC/C,CAAC,CAAA"}

package/dist/handlers/create-content.d.ts

@@ -0,0 +1,4 @@
+import type { ApiHandler } from '../types.js';
+/** POST /api/content/:collection — create + validate (editor+) */
+export declare const createContent: ApiHandler;
+//# sourceMappingURL=create-content.d.ts.map

package/dist/handlers/create-content.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"create-content.d.ts","sourceRoot":"","sources":["../../src/handlers/create-content.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AAG7C,kEAAkE;AAClE,eAAO,MAAM,aAAa,EAAE,UA6C3B,CAAA"}

package/dist/handlers/create-content.js

@@ -0,0 +1,49 @@
+import { canWriteContent } from '@krantho/persistence';
+import { changedByFromAuth, requireRole } from '../permissions.js';
+import { saveDocument } from '../save-document.js';
+import { validateCollectionParam, validateRequestBody } from '../validators.js';
+/** POST /api/content/:collection — create + validate (editor+) */
+export const createContent = async (req, ctx) => {
+    const denied = requireRole(ctx.auth, 'editor');
+    if (denied)
+        return denied;
+    const validated = validateCollectionParam(req.params['collection'], ctx);
+    if (!validated.isValid)
+        return validated.response;
+    if (!canWriteContent(ctx.adapter)) {
+        return { status: 501, body: { error: 'Adapter does not support writeContent' } };
+    }
+    const bodyCheck = validateRequestBody(req.body);
+    if (!bodyCheck.isValid)
+        return bodyCheck.response;
+    const slug = typeof bodyCheck.body['slug'] === 'string' ? bodyCheck.body['slug'] : undefined;
+    const fields = (bodyCheck.body['fields'] ?? {});
+    const content = typeof bodyCheck.body['body'] === 'string' ? bodyCheck.body['body'] : '';
+    const locale = typeof bodyCheck.body['locale'] === 'string' ? bodyCheck.body['locale'] : undefined;
+    if (!slug) {
+        return { status: 400, body: { error: 'Missing "slug" in request body' } };
+    }
+    const saved = await saveDocument(ctx, {
+        collection: validated.collection,
+        slug,
+        fields,
+        body: content,
+        locale,
+        isNew: true,
+        changedBy: changedByFromAuth(ctx.auth),
+        metadata: bodyCheck.body['metadata'],
+    });
+    if (!saved.ok)
+        return saved.response;
+    return {
+        status: 201,
+        body: {
+            slug: saved.slug,
+            collection: validated.collection,
+            version: saved.version,
+            liveVersion: saved.liveVersion,
+            message: 'Created',
+        },
+    };
+};
+//# sourceMappingURL=create-content.js.map

package/dist/handlers/create-content.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"create-content.js","sourceRoot":"","sources":["../../src/handlers/create-content.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAA;AACtD,OAAO,EAAE,iBAAiB,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAA;AAClE,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAA;AAElD,OAAO,EAAE,uBAAuB,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAA;AAE/E,kEAAkE;AAClE,MAAM,CAAC,MAAM,aAAa,GAAe,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;IAC1D,MAAM,MAAM,GAAG,WAAW,CAAC,GAAG,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAA;IAC9C,IAAI,MAAM;QAAE,OAAO,MAAM,CAAA;IAEzB,MAAM,SAAS,GAAG,uBAAuB,CAAC,GAAG,CAAC,MAAM,CAAC,YAAY,CAAC,EAAE,GAAG,CAAC,CAAA;IACxE,IAAI,CAAC,SAAS,CAAC,OAAO;QAAE,OAAO,SAAS,CAAC,QAAQ,CAAA;IAEjD,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;QAClC,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,uCAAuC,EAAE,EAAE,CAAA;IAClF,CAAC;IAED,MAAM,SAAS,GAAG,mBAAmB,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;IAC/C,IAAI,CAAC,SAAS,CAAC,OAAO;QAAE,OAAO,SAAS,CAAC,QAAQ,CAAA;IAEjD,MAAM,IAAI,GAAG,OAAO,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;IAC5F,MAAM,MAAM,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,CAA4B,CAAA;IAC1E,MAAM,OAAO,GAAG,OAAO,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAA;IACxF,MAAM,MAAM,GAAG,OAAO,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;IAElG,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,gCAAgC,EAAE,EAAE,CAAA;IAC3E,CAAC;IAED,MAAM,KAAK,GAAG,MAAM,YAAY,CAAC,GAAG,EAAE;QACpC,UAAU,EAAE,SAAS,CAAC,UAAU;QAChC,IAAI;QACJ,MAAM;QACN,IAAI,EAAE,OAAO;QACb,MAAM;QACN,KAAK,EAAE,IAAI;QACX,SAAS,EAAE,iBAAiB,CAAC,GAAG,CAAC,IAAI,CAAC;QACtC,QAAQ,EAAE,SAAS,CAAC,IAAI,CAAC,UAAU,CAAC;KACrC,CAAC,CAAA;IACF,IAAI,CAAC,KAAK,CAAC,EAAE;QAAE,OAAO,KAAK,CAAC,QAAQ,CAAA;IAEpC,OAAO;QACL,MAAM,EAAE,GAAG;QACX,IAAI,EAAE;YACJ,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,UAAU,EAAE,SAAS,CAAC,UAAU;YAChC,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,OAAO,EAAE,SAAS;SACnB;KACF,CAAA;AACH,CAAC,CAAA"}

package/dist/handlers/delete-content.d.ts

@@ -0,0 +1,4 @@
+import type { ApiHandler } from '../types.js';
+/** DELETE /api/content/:collection/:slug */
+export declare const deleteContent: ApiHandler;
+//# sourceMappingURL=delete-content.d.ts.map

package/dist/handlers/delete-content.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"delete-content.d.ts","sourceRoot":"","sources":["../../src/handlers/delete-content.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AAG7C,4CAA4C;AAC5C,eAAO,MAAM,aAAa,EAAE,UAe3B,CAAA"}

package/dist/handlers/delete-content.js

@@ -0,0 +1,17 @@
+import { deleteDocument } from '../document-actions.js';
+import { requireRole } from '../permissions.js';
+import { requireParam, validateCollectionParam } from '../validators.js';
+/** DELETE /api/content/:collection/:slug */
+export const deleteContent = async (req, ctx) => {
+    const denied = requireRole(ctx.auth, 'admin');
+    if (denied)
+        return denied;
+    const validated = validateCollectionParam(req.params['collection'], ctx);
+    if (!validated.isValid)
+        return validated.response;
+    const slugResult = requireParam(req.params, 'slug');
+    if (!slugResult.isValid)
+        return slugResult.response;
+    return deleteDocument(ctx, { collection: validated.collection, slug: slugResult.value, locale: undefined }, undefined);
+};
+//# sourceMappingURL=delete-content.js.map

package/dist/handlers/delete-content.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"delete-content.js","sourceRoot":"","sources":["../../src/handlers/delete-content.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAA;AACvD,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAA;AAE/C,OAAO,EAAE,YAAY,EAAE,uBAAuB,EAAE,MAAM,kBAAkB,CAAA;AAExE,4CAA4C;AAC5C,MAAM,CAAC,MAAM,aAAa,GAAe,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;IAC1D,MAAM,MAAM,GAAG,WAAW,CAAC,GAAG,CAAC,IAAI,EAAE,OAAO,CAAC,CAAA;IAC7C,IAAI,MAAM;QAAE,OAAO,MAAM,CAAA;IAEzB,MAAM,SAAS,GAAG,uBAAuB,CAAC,GAAG,CAAC,MAAM,CAAC,YAAY,CAAC,EAAE,GAAG,CAAC,CAAA;IACxE,IAAI,CAAC,SAAS,CAAC,OAAO;QAAE,OAAO,SAAS,CAAC,QAAQ,CAAA;IAEjD,MAAM,UAAU,GAAG,YAAY,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IACnD,IAAI,CAAC,UAAU,CAAC,OAAO;QAAE,OAAO,UAAU,CAAC,QAAQ,CAAA;IAEnD,OAAO,cAAc,CACnB,GAAG,EACH,EAAE,UAAU,EAAE,SAAS,CAAC,UAAU,EAAE,IAAI,EAAE,UAAU,CAAC,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,EAC/E,SAAS,CACV,CAAA;AACH,CAAC,CAAA"}

package/dist/handlers/delete-runtime-field.d.ts

@@ -0,0 +1,4 @@
+import type { ApiHandler } from '../types.js';
+/** DELETE /api/schema/:collection/fields/:field — remove a runtime field */
+export declare const deleteRuntimeField: ApiHandler;
+//# sourceMappingURL=delete-runtime-field.d.ts.map

package/dist/handlers/delete-runtime-field.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"delete-runtime-field.d.ts","sourceRoot":"","sources":["../../src/handlers/delete-runtime-field.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AAG7C,4EAA4E;AAC5E,eAAO,MAAM,kBAAkB,EAAE,UA2ChC,CAAA"}

package/dist/handlers/delete-runtime-field.js

@@ -0,0 +1,43 @@
+import { hasRuntimeSchema } from '@krantho/persistence';
+import { requireRole } from '../permissions.js';
+import { validateCollectionParam } from '../validators.js';
+/** DELETE /api/schema/:collection/fields/:field — remove a runtime field */
+export const deleteRuntimeField = async (req, ctx) => {
+    const denied = requireRole(ctx.auth, 'admin');
+    if (denied)
+        return denied;
+    const validated = validateCollectionParam(req.params['collection'], ctx);
+    if (!validated.isValid)
+        return validated.response;
+    if (!hasRuntimeSchema(ctx.adapter)) {
+        return { status: 501, body: { error: 'Adapter does not support runtime schemas' } };
+    }
+    const fieldName = req.params['field'];
+    if (!fieldName) {
+        return { status: 400, body: { error: 'Missing field name' } };
+    }
+    // Don't allow deleting code-defined fields
+    const codeFieldNames = new Set(Object.keys(validated.collectionDef.schema.shape));
+    if (codeFieldNames.has(fieldName)) {
+        return {
+            status: 409,
+            body: { error: `Field "${fieldName}" is defined in code and cannot be deleted` },
+        };
+    }
+    const existing = await ctx.adapter.getRuntimeSchema(validated.collection);
+    if (!existing) {
+        return { status: 404, body: { error: `Runtime field "${fieldName}" not found` } };
+    }
+    const filtered = existing.fields.filter((f) => f.name !== fieldName);
+    if (filtered.length === existing.fields.length) {
+        return { status: 404, body: { error: `Runtime field "${fieldName}" not found` } };
+    }
+    await ctx.adapter.saveRuntimeSchema(validated.collection, {
+        collection: validated.collection,
+        metadata: existing?.metadata ?? [],
+        fields: filtered,
+        updatedAt: new Date().toISOString(),
+    });
+    return { status: 200, body: { message: 'Field deleted', field: fieldName } };
+};
+//# sourceMappingURL=delete-runtime-field.js.map

package/dist/handlers/delete-runtime-field.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"delete-runtime-field.js","sourceRoot":"","sources":["../../src/handlers/delete-runtime-field.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAA;AACvD,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAA;AAE/C,OAAO,EAAE,uBAAuB,EAAE,MAAM,kBAAkB,CAAA;AAE1D,4EAA4E;AAC5E,MAAM,CAAC,MAAM,kBAAkB,GAAe,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;IAC/D,MAAM,MAAM,GAAG,WAAW,CAAC,GAAG,CAAC,IAAI,EAAE,OAAO,CAAC,CAAA;IAC7C,IAAI,MAAM;QAAE,OAAO,MAAM,CAAA;IAEzB,MAAM,SAAS,GAAG,uBAAuB,CAAC,GAAG,CAAC,MAAM,CAAC,YAAY,CAAC,EAAE,GAAG,CAAC,CAAA;IACxE,IAAI,CAAC,SAAS,CAAC,OAAO;QAAE,OAAO,SAAS,CAAC,QAAQ,CAAA;IAEjD,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;QACnC,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,0CAA0C,EAAE,EAAE,CAAA;IACrF,CAAC;IAED,MAAM,SAAS,GAAG,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,CAAA;IACrC,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,oBAAoB,EAAE,EAAE,CAAA;IAC/D,CAAC;IAED,2CAA2C;IAC3C,MAAM,cAAc,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAA;IACjF,IAAI,cAAc,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;QAClC,OAAO;YACL,MAAM,EAAE,GAAG;YACX,IAAI,EAAE,EAAE,KAAK,EAAE,UAAU,SAAS,4CAA4C,EAAE;SACjF,CAAA;IACH,CAAC;IAED,MAAM,QAAQ,GAAG,MAAM,GAAG,CAAC,OAAO,CAAC,gBAAgB,CAAC,SAAS,CAAC,UAAU,CAAC,CAAA;IACzE,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,kBAAkB,SAAS,aAAa,EAAE,EAAE,CAAA;IACnF,CAAC;IAED,MAAM,QAAQ,GAAG,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,SAAS,CAAC,CAAA;IACpE,IAAI,QAAQ,CAAC,MAAM,KAAK,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;QAC/C,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,kBAAkB,SAAS,aAAa,EAAE,EAAE,CAAA;IACnF,CAAC;IAED,MAAM,GAAG,CAAC,OAAO,CAAC,iBAAiB,CAAC,SAAS,CAAC,UAAU,EAAE;QACxD,UAAU,EAAE,SAAS,CAAC,UAAU;QAChC,QAAQ,EAAE,QAAQ,EAAE,QAAQ,IAAI,EAAE;QAClC,MAAM,EAAE,QAAQ;QAChB,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;KACpC,CAAC,CAAA;IAEF,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,OAAO,EAAE,eAAe,EAAE,KAAK,EAAE,SAAS,EAAE,EAAE,CAAA;AAC9E,CAAC,CAAA"}

package/dist/handlers/export-bundle.d.ts

@@ -0,0 +1,13 @@
+import type { ApiHandler } from '../types.js';
+/**
+ * GET /api/export/bundle — full-site export as JSON bundle.
+ *
+ * Returns all collections, media metadata, and schemas as a single JSON response.
+ * The client (Studio or CLI) can convert this to a tar.gz/zip with .md files.
+ *
+ * Content is an array of portable documents per collection, with locale-qualified
+ * checksums and runtime definitions for review. Media file bytes and history
+ * archives are not included. State selects current drafts or published snapshots.
+ */
+export declare const exportBundle: ApiHandler;
+//# sourceMappingURL=export-bundle.d.ts.map

package/dist/handlers/export-bundle.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"export-bundle.d.ts","sourceRoot":"","sources":["../../src/handlers/export-bundle.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EAAE,UAAU,EAAe,MAAM,aAAa,CAAA;AAE1D;;;;;;;;;GASG;AACH,eAAO,MAAM,YAAY,EAAE,UAwF1B,CAAA"}

package/dist/handlers/export-bundle.js

@@ -0,0 +1,99 @@
+import { canQuery, hasRuntimeSchema, repositoryDocument, } from '@krantho/persistence';
+import { documentChecksum } from '@krantho/schema';
+import { requireRole } from '../permissions.js';
+/**
+ * GET /api/export/bundle — full-site export as JSON bundle.
+ *
+ * Returns all collections, media metadata, and schemas as a single JSON response.
+ * The client (Studio or CLI) can convert this to a tar.gz/zip with .md files.
+ *
+ * Content is an array of portable documents per collection, with locale-qualified
+ * checksums and runtime definitions for review. Media file bytes and history
+ * archives are not included. State selects current drafts or published snapshots.
+ */
+export const exportBundle = async (req, ctx) => {
+    const denied = requireRole(ctx.auth, 'admin');
+    if (denied)
+        return denied;
+    const state = req.query['state'] ?? 'current';
+    if (state !== 'current' && state !== 'published')
+        return { status: 400, body: { error: 'State must be current or published' } };
+    if (!canQuery(ctx.adapter))
+        return { status: 501, body: { error: 'Adapter does not support query' } };
+    const now = new Date().toISOString();
+    const content = {};
+    const checksums = {};
+    const schemas = {};
+    const warnings = [];
+    // Export all collections
+    for (const [, collectionDef] of ctx.contentConfig.collections) {
+        try {
+            const { items } = await ctx.adapter.query({
+                state,
+                projection: 'full',
+                collections: [collectionDef.name],
+            });
+            content[collectionDef.name] = items.map((item) => {
+                const checksum = documentChecksum(item);
+                checksums[`${collectionDef.name}/${item.meta.locale}/${item.meta.slug}`] = checksum;
+                return repositoryDocument(item, checksum);
+            });
+            // Export runtime schema if available
+            if (hasRuntimeSchema(ctx.adapter)) {
+                const schema = await ctx.adapter.getRuntimeSchema(collectionDef.name);
+                if (schema) {
+                    schemas[collectionDef.name] = schema;
+                }
+            }
+        }
+        catch (err) {
+            return {
+                status: 500,
+                body: {
+                    error: `Failed to export collection "${collectionDef.name}": ${err instanceof Error ? err.message : 'Unknown error'}`,
+                },
+            };
+        }
+    }
+    // Export media metadata with download URLs for each item.
+    // Actual file bytes are not included in the JSON bundle — the client
+    // downloads them separately using the provided URLs.
+    const MEDIA_EXPORT_LIMIT = 10000;
+    let media = { items: [], total: 0 };
+    if (ctx.mediaStorage) {
+        try {
+            media = await ctx.mediaStorage.list({ limit: MEDIA_EXPORT_LIMIT });
+            if (media.total > MEDIA_EXPORT_LIMIT) {
+                warnings.push({
+                    collection: '_media',
+                    slug: '_all',
+                    field: '_count',
+                    message: `Media export truncated: ${media.total} items, only ${MEDIA_EXPORT_LIMIT} exported`,
+                });
+            }
+        }
+        catch {
+            // Media export is non-critical — continue with empty media
+        }
+    }
+    // Compute manifest version (increment from current DB version)
+    let manifestVersion = 1;
+    if (ctx.contentMigrationAdapter) {
+        const dbVersion = await ctx.contentMigrationAdapter.getContentManifestVersion();
+        manifestVersion = (dbVersion ?? 0) + 1;
+    }
+    return {
+        status: 200,
+        body: {
+            version: manifestVersion,
+            state,
+            timestamp: now,
+            content,
+            media: { items: media.items },
+            schemas,
+            checksums,
+            warnings: warnings.length > 0 ? warnings : undefined,
+        },
+    };
+};
+//# sourceMappingURL=export-bundle.js.map