@krantho/api 0.0.0-stage → 1.0.0

package/dist/assistant/confirm-handler.js

@@ -0,0 +1,39 @@
+import { z } from 'zod';
+import { requireRole } from '../permissions.js';
+import { requireAssistantUser, requireJsonBody } from './access.js';
+import { executeAction, preflightAction } from './execute-action.js';
+import { roleForKind, verifyPendingAction } from './pending-action.js';
+/**
+ * POST /api/assistant/confirm `{ token }` — verify a proposal the user
+ * confirmed (signature, expiry, user), re-authorize it for the user's current
+ * role, check that nothing changed since it was made, then execute it. A plain
+ * JSON request, so publishing and deleting run inside a request scope on every host.
+ */
+const confirmBody = z.object({ token: z.string().min(1) });
+export const assistantConfirm = async (req, ctx) => {
+    const access = requireAssistantUser(ctx);
+    if (!access.ok)
+        return access.response;
+    const notJson = requireJsonBody(req);
+    if (notJson)
+        return notJson;
+    const body = confirmBody.safeParse(req.body);
+    if (!body.success)
+        return { status: 400, body: { error: 'Missing token' } };
+    const { token } = body.data;
+    const secret = ctx.config.auth.jwtSecret;
+    if (!secret)
+        return { status: 500, body: { error: 'No signing secret configured' } };
+    const verified = verifyPendingAction(token, access.user.id, secret);
+    if (!verified.ok)
+        return { status: verified.status, body: { error: verified.error } };
+    const denied = requireRole(access.user, roleForKind(verified.action.kind));
+    if (denied)
+        return denied;
+    const refused = await preflightAction(ctx, verified.action);
+    if (refused)
+        return refused;
+    const results = await executeAction(ctx, verified.action);
+    return { status: 200, body: { ok: results.every((r) => r.status === 'done'), results } };
+};
+//# sourceMappingURL=confirm-handler.js.map

package/dist/assistant/confirm-handler.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"confirm-handler.js","sourceRoot":"","sources":["../../src/assistant/confirm-handler.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AACvB,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAA;AAE/C,OAAO,EAAE,oBAAoB,EAAE,eAAe,EAAE,MAAM,aAAa,CAAA;AACnE,OAAO,EAAE,aAAa,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAA;AACpE,OAAO,EAAE,WAAW,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAA;AAEtE;;;;;GAKG;AACH,MAAM,WAAW,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAA;AAE1D,MAAM,CAAC,MAAM,gBAAgB,GAAe,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;IAC7D,MAAM,MAAM,GAAG,oBAAoB,CAAC,GAAG,CAAC,CAAA;IACxC,IAAI,CAAC,MAAM,CAAC,EAAE;QAAE,OAAO,MAAM,CAAC,QAAQ,CAAA;IACtC,MAAM,OAAO,GAAG,eAAe,CAAC,GAAG,CAAC,CAAA;IACpC,IAAI,OAAO;QAAE,OAAO,OAAO,CAAA;IAE3B,MAAM,IAAI,GAAG,WAAW,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;IAC5C,IAAI,CAAC,IAAI,CAAC,OAAO;QAAE,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,eAAe,EAAE,EAAE,CAAA;IAC3E,MAAM,EAAE,KAAK,EAAE,GAAG,IAAI,CAAC,IAAI,CAAA;IAC3B,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAA;IACxC,IAAI,CAAC,MAAM;QAAE,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,8BAA8B,EAAE,EAAE,CAAA;IAEpF,MAAM,QAAQ,GAAG,mBAAmB,CAAC,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,EAAE,EAAE,MAAM,CAAC,CAAA;IACnE,IAAI,CAAC,QAAQ,CAAC,EAAE;QAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,QAAQ,CAAC,KAAK,EAAE,EAAE,CAAA;IACrF,MAAM,MAAM,GAAG,WAAW,CAAC,MAAM,CAAC,IAAI,EAAE,WAAW,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAA;IAC1E,IAAI,MAAM;QAAE,OAAO,MAAM,CAAA;IAEzB,MAAM,OAAO,GAAG,MAAM,eAAe,CAAC,GAAG,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAA;IAC3D,IAAI,OAAO;QAAE,OAAO,OAAO,CAAA;IAE3B,MAAM,OAAO,GAAG,MAAM,aAAa,CAAC,GAAG,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAA;IACzD,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,EAAE,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC,EAAE,OAAO,EAAE,EAAE,CAAA;AAC1F,CAAC,CAAA"}

package/dist/assistant/document-change.d.ts

@@ -0,0 +1,22 @@
+import type { DocumentChange, DocumentRef } from './protocol.js';
+/** A document's fields and body */
+export interface DocumentState {
+    fields: Record<string, unknown>;
+    body: string;
+}
+/**
+ * Every field whose value differs, and the body when it differs. The `status`
+ * field mirrors the row status a save sets; a status change is the change's
+ * `status`, which the caller fills from the row statuses.
+ */
+export declare function diffDocument(ref: DocumentRef, baseVersion: number, before: DocumentState | null, after: DocumentState): DocumentChange;
+/** True when the change replaces or removes a non-empty value */
+export declare function isOverwrite(change: DocumentChange): boolean;
+/** The `## ` headings of a body, in order */
+export declare function listSections(body: string): string[];
+/** Replace the content under each `## heading`; throws naming a heading that is not found */
+export declare function replaceSections(body: string, edits: ReadonlyArray<{
+    heading: string;
+    content: string;
+}>): string;
+//# sourceMappingURL=document-change.d.ts.map

package/dist/assistant/document-change.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"document-change.d.ts","sourceRoot":"","sources":["../../src/assistant/document-change.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,cAAc,EAAE,WAAW,EAAe,MAAM,eAAe,CAAA;AAE7E,mCAAmC;AACnC,MAAM,WAAW,aAAa;IAC5B,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IAC/B,IAAI,EAAE,MAAM,CAAA;CACb;AAED;;;;GAIG;AACH,wBAAgB,YAAY,CAC1B,GAAG,EAAE,WAAW,EAChB,WAAW,EAAE,MAAM,EACnB,MAAM,EAAE,aAAa,GAAG,IAAI,EAC5B,KAAK,EAAE,aAAa,GACnB,cAAc,CAYhB;AAWD,iEAAiE;AACjE,wBAAgB,WAAW,CAAC,MAAM,EAAE,cAAc,GAAG,OAAO,CAG3D;AAkBD,6CAA6C;AAC7C,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,EAAE,CAEnD;AAgBD,6FAA6F;AAC7F,wBAAgB,eAAe,CAC7B,IAAI,EAAE,MAAM,EACZ,KAAK,EAAE,aAAa,CAAC;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC,GACzD,MAAM,CAIR"}

package/dist/assistant/document-change.js

@@ -0,0 +1,74 @@
+import { canonicalJson } from '@krantho/core';
+/**
+ * Every field whose value differs, and the body when it differs. The `status`
+ * field mirrors the row status a save sets; a status change is the change's
+ * `status`, which the caller fills from the row statuses.
+ */
+export function diffDocument(ref, baseVersion, before, after) {
+    const beforeFields = before?.fields ?? {};
+    const names = [...new Set([...Object.keys(beforeFields), ...Object.keys(after.fields)])];
+    const fields = names
+        .filter((name) => name !== 'status')
+        .filter((name) => canonicalJson(beforeFields[name]) !== canonicalJson(after.fields[name]))
+        .map((name) => ({ name, before: beforeFields[name], after: after.fields[name] }));
+    const beforeBody = before?.body ?? '';
+    const change = { ref, baseVersion, fields };
+    if (beforeBody !== after.body)
+        change.body = { before: beforeBody, after: after.body };
+    return change;
+}
+function isEmptyValue(value) {
+    return (value === undefined ||
+        value === null ||
+        value === '' ||
+        (Array.isArray(value) && value.length === 0));
+}
+/** True when the change replaces or removes a non-empty value */
+export function isOverwrite(change) {
+    if (change.fields.some((field) => !isEmptyValue(field.before)))
+        return true;
+    return change.body !== undefined && change.body.before.trim() !== '';
+}
+const FENCE = /^\s*(```|~~~)/;
+const SECTION_HEADING = /^##\s+(.*?)\s*#*\s*$/;
+/** The heading text of each `## ` line outside code fences, with its line index */
+function sectionLines(lines) {
+    const found = [];
+    let inFence = false;
+    lines.forEach((line, index) => {
+        if (FENCE.test(line))
+            inFence = !inFence;
+        if (inFence)
+            return;
+        const match = SECTION_HEADING.exec(line);
+        if (match)
+            found.push({ index, heading: (match[1] ?? '').trim() });
+    });
+    return found;
+}
+/** The `## ` headings of a body, in order */
+export function listSections(body) {
+    return sectionLines(body.split('\n')).map((section) => section.heading);
+}
+/** Replace the content of one section, returning the new lines */
+function replaceSection(lines, heading, content) {
+    const sections = sectionLines(lines);
+    const wanted = heading.trim().toLowerCase();
+    const position = sections.findIndex((section) => section.heading.toLowerCase() === wanted);
+    const section = sections[position];
+    if (!section)
+        throw new Error(`No section "${heading}" in the body`);
+    const end = sections[position + 1]?.index ?? lines.length;
+    const replacement = ['', ...content.trim().split('\n')];
+    if (end < lines.length)
+        replacement.push('');
+    return [...lines.slice(0, section.index + 1), ...replacement, ...lines.slice(end)];
+}
+/** Replace the content under each `## heading`; throws naming a heading that is not found */
+export function replaceSections(body, edits) {
+    let lines = body.split('\n');
+    for (const edit of edits)
+        lines = replaceSection(lines, edit.heading, edit.content);
+    return lines.join('\n');
+}
+//# sourceMappingURL=document-change.js.map

package/dist/assistant/document-change.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"document-change.js","sourceRoot":"","sources":["../../src/assistant/document-change.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,eAAe,CAAA;AAS7C;;;;GAIG;AACH,MAAM,UAAU,YAAY,CAC1B,GAAgB,EAChB,WAAmB,EACnB,MAA4B,EAC5B,KAAoB;IAEpB,MAAM,YAAY,GAAG,MAAM,EAAE,MAAM,IAAI,EAAE,CAAA;IACzC,MAAM,KAAK,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAA;IACxF,MAAM,MAAM,GAAkB,KAAK;SAChC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,KAAK,QAAQ,CAAC;SACnC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,aAAa,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,KAAK,aAAa,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;SACzF,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,YAAY,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAA;IAEnF,MAAM,UAAU,GAAG,MAAM,EAAE,IAAI,IAAI,EAAE,CAAA;IACrC,MAAM,MAAM,GAAmB,EAAE,GAAG,EAAE,WAAW,EAAE,MAAM,EAAE,CAAA;IAC3D,IAAI,UAAU,KAAK,KAAK,CAAC,IAAI;QAAE,MAAM,CAAC,IAAI,GAAG,EAAE,MAAM,EAAE,UAAU,EAAE,KAAK,EAAE,KAAK,CAAC,IAAI,EAAE,CAAA;IACtF,OAAO,MAAM,CAAA;AACf,CAAC;AAED,SAAS,YAAY,CAAC,KAAc;IAClC,OAAO,CACL,KAAK,KAAK,SAAS;QACnB,KAAK,KAAK,IAAI;QACd,KAAK,KAAK,EAAE;QACZ,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,CAAC,CAC7C,CAAA;AACH,CAAC;AAED,iEAAiE;AACjE,MAAM,UAAU,WAAW,CAAC,MAAsB;IAChD,IAAI,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,YAAY,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAAE,OAAO,IAAI,CAAA;IAC3E,OAAO,MAAM,CAAC,IAAI,KAAK,SAAS,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE,CAAA;AACtE,CAAC;AAED,MAAM,KAAK,GAAG,eAAe,CAAA;AAC7B,MAAM,eAAe,GAAG,sBAAsB,CAAA;AAE9C,mFAAmF;AACnF,SAAS,YAAY,CAAC,KAAwB;IAC5C,MAAM,KAAK,GAA8C,EAAE,CAAA;IAC3D,IAAI,OAAO,GAAG,KAAK,CAAA;IACnB,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE;QAC5B,IAAI,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,OAAO,GAAG,CAAC,OAAO,CAAA;QACxC,IAAI,OAAO;YAAE,OAAM;QACnB,MAAM,KAAK,GAAG,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QACxC,IAAI,KAAK;YAAE,KAAK,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAA;IACpE,CAAC,CAAC,CAAA;IACF,OAAO,KAAK,CAAA;AACd,CAAC;AAED,6CAA6C;AAC7C,MAAM,UAAU,YAAY,CAAC,IAAY;IACvC,OAAO,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,CAAA;AACzE,CAAC;AAED,kEAAkE;AAClE,SAAS,cAAc,CAAC,KAAe,EAAE,OAAe,EAAE,OAAe;IACvE,MAAM,QAAQ,GAAG,YAAY,CAAC,KAAK,CAAC,CAAA;IACpC,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAA;IAC3C,MAAM,QAAQ,GAAG,QAAQ,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,WAAW,EAAE,KAAK,MAAM,CAAC,CAAA;IAC1F,MAAM,OAAO,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAA;IAClC,IAAI,CAAC,OAAO;QAAE,MAAM,IAAI,KAAK,CAAC,eAAe,OAAO,eAAe,CAAC,CAAA;IAEpE,MAAM,GAAG,GAAG,QAAQ,CAAC,QAAQ,GAAG,CAAC,CAAC,EAAE,KAAK,IAAI,KAAK,CAAC,MAAM,CAAA;IACzD,MAAM,WAAW,GAAG,CAAC,EAAE,EAAE,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAA;IACvD,IAAI,GAAG,GAAG,KAAK,CAAC,MAAM;QAAE,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;IAC5C,OAAO,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,OAAO,CAAC,KAAK,GAAG,CAAC,CAAC,EAAE,GAAG,WAAW,EAAE,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAA;AACpF,CAAC;AAED,6FAA6F;AAC7F,MAAM,UAAU,eAAe,CAC7B,IAAY,EACZ,KAA0D;IAE1D,IAAI,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;IAC5B,KAAK,MAAM,IAAI,IAAI,KAAK;QAAE,KAAK,GAAG,cAAc,CAAC,KAAK,EAAE,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,CAAA;IACnF,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;AACzB,CAAC"}

package/dist/assistant/document-lock.d.ts

@@ -0,0 +1,12 @@
+import type { HeldLock } from '../content-locks.js';
+/**
+ * What the assistant says about a lock — to the model and in Studio alike. It
+ * never names the holder (D16): Studio sends its conversation back to the
+ * model, so text shown to the user reaches the provider too. The editor shows
+ * who holds the lock when the user opens the document.
+ */
+export declare function lockMessage(ref: {
+    collection: string;
+    slug: string;
+}, lock: HeldLock): string;
+//# sourceMappingURL=document-lock.d.ts.map

package/dist/assistant/document-lock.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"document-lock.d.ts","sourceRoot":"","sources":["../../src/assistant/document-lock.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAA;AAOnD;;;;;GAKG;AACH,wBAAgB,WAAW,CAAC,GAAG,EAAE;IAAE,UAAU,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,EAAE,IAAI,EAAE,QAAQ,GAAG,MAAM,CAE7F"}

package/dist/assistant/document-lock.js

@@ -0,0 +1,14 @@
+/** `HH:MM UTC` of an ISO timestamp */
+function clockTime(iso) {
+    return `${new Date(iso).toISOString().slice(11, 16)} UTC`;
+}
+/**
+ * What the assistant says about a lock — to the model and in Studio alike. It
+ * never names the holder (D16): Studio sends its conversation back to the
+ * model, so text shown to the user reaches the provider too. The editor shows
+ * who holds the lock when the user opens the document.
+ */
+export function lockMessage(ref, lock) {
+    return `${ref.collection}/${ref.slug} is being edited by another user until ${clockTime(lock.expiresAt)}; try again later.`;
+}
+//# sourceMappingURL=document-lock.js.map

package/dist/assistant/document-lock.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"document-lock.js","sourceRoot":"","sources":["../../src/assistant/document-lock.ts"],"names":[],"mappings":"AAEA,sCAAsC;AACtC,SAAS,SAAS,CAAC,GAAW;IAC5B,OAAO,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,CAAC,MAAM,CAAA;AAC3D,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,WAAW,CAAC,GAAyC,EAAE,IAAc;IACnF,OAAO,GAAG,GAAG,CAAC,UAAU,IAAI,GAAG,CAAC,IAAI,0CAA0C,SAAS,CAAC,IAAI,CAAC,SAAS,CAAC,oBAAoB,CAAA;AAC7H,CAAC"}

package/dist/assistant/execute-action.d.ts

@@ -0,0 +1,19 @@
+import type { ApiContext, ApiResponse } from '../types.js';
+import { type PendingAction } from './pending-action.js';
+/** The outcome of one step of a confirmed action */
+export interface ActionResult {
+    collection?: string | undefined;
+    slug?: string | undefined;
+    status: 'done' | 'failed';
+    message: string;
+    version?: number | undefined;
+}
+/**
+ * Check every target before anything is written: documents unchanged since the
+ * proposal (version and hash) and not locked by someone else, SEO properties
+ * still unset, the llms.txt snapshot unchanged. The refusal, or null.
+ */
+export declare function preflightAction(ctx: ApiContext, action: PendingAction): Promise<ApiResponse | null>;
+/** Execute a verified, preflighted action; each step's outcome is reported */
+export declare function executeAction(ctx: ApiContext, action: PendingAction): Promise<ActionResult[]>;
+//# sourceMappingURL=execute-action.d.ts.map

package/dist/assistant/execute-action.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"execute-action.d.ts","sourceRoot":"","sources":["../../src/assistant/execute-action.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,aAAa,CAAA;AAE1D,OAAO,EAAkB,KAAK,aAAa,EAAwB,MAAM,qBAAqB,CAAA;AAG9F,oDAAoD;AACpD,MAAM,WAAW,YAAY;IAC3B,UAAU,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IAC/B,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IACzB,MAAM,EAAE,MAAM,GAAG,QAAQ,CAAA;IACzB,OAAO,EAAE,MAAM,CAAA;IACf,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;CAC7B;AAiDD;;;;GAIG;AACH,wBAAsB,eAAe,CACnC,GAAG,EAAE,UAAU,EACf,MAAM,EAAE,aAAa,GACpB,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC,CA6B7B;AAoED,8EAA8E;AAC9E,wBAAsB,aAAa,CACjC,GAAG,EAAE,UAAU,EACf,MAAM,EAAE,aAAa,GACpB,OAAO,CAAC,YAAY,EAAE,CAAC,CA2BzB"}

package/dist/assistant/execute-action.js

@@ -0,0 +1,167 @@
+import { announceChange } from '../content-change.js';
+import { lockHolder } from '../content-locks.js';
+import { changePublication, deleteDocument } from '../document-actions.js';
+import { documentSeo } from '../document-seo.js';
+import { isUnsetProperty, saveArchetypeProposal } from '../handlers/seo-enrich-archetype.js';
+import { LLMS_TXT_SETTING, loadLlmsTxtSnapshot } from '../handlers/seo-llms-txt.js';
+import { saveDocument } from '../save-document.js';
+import { isSuccess, responseError } from './call-handler.js';
+import { sha256Hex, stateHash } from './pending-action.js';
+import { assistantChangedBy, exactDocument, pathOf } from './tools/support.js';
+function conflict(conflicts) {
+    return { status: 409, body: { error: 'Changed since the proposal', conflicts } };
+}
+/** Whether a document is still in the state the proposal was computed against */
+async function unchanged(ctx, base, isNew) {
+    const current = await exactDocument(ctx, base.collection, base.slug, base.locale);
+    if (isNew)
+        return current ? current.meta.version : null;
+    if (current &&
+        current.meta.version === base.baseVersion &&
+        stateHash(current) === base.baseHash) {
+        return null;
+    }
+    return current?.meta.version ?? 0;
+}
+/** 409 when any document changed since the proposal, 423 when someone else holds a lock on one */
+async function preflightDocuments(ctx, action) {
+    const conflicts = [];
+    for (const doc of action.documents) {
+        const isNew = action.kind === 'save_documents' && doc.baseVersion === 0;
+        const currentVersion = await unchanged(ctx, doc, isNew);
+        if (currentVersion !== null)
+            conflicts.push({ collection: doc.collection, slug: doc.slug, currentVersion });
+    }
+    if (conflicts.length > 0)
+        return conflict(conflicts);
+    for (const doc of action.documents) {
+        const lock = await lockHolder(ctx, doc);
+        if (lock) {
+            // No identity: Studio puts this error into the conversation it sends back to the model
+            const error = `${pathOf(doc)} is being edited by another user`;
+            return { status: 423, body: { error, expiresAt: lock.expiresAt } };
+        }
+    }
+    return null;
+}
+/**
+ * Check every target before anything is written: documents unchanged since the
+ * proposal (version and hash) and not locked by someone else, SEO properties
+ * still unset, the llms.txt snapshot unchanged. The refusal, or null.
+ */
+export async function preflightAction(ctx, action) {
+    if (action.kind === 'save_seo_properties') {
+        if (!ctx.seoConfigAdapter)
+            return { status: 501, body: { error: 'SEO configuration is not available' } };
+        const current = await documentSeo(ctx, action.configId, action.locale);
+        if (!current || current.document.meta.version !== action.baseVersion) {
+            return { status: 409, body: { error: 'Document changed since the proposal', conflicts: [] } };
+        }
+        const lock = await lockHolder(ctx, current.document.meta);
+        if (lock)
+            return { status: 423, body: { error: 'Being edited by another user' } };
+        const props = current.config?.entities[0]?.properties ?? {};
+        const set = Object.keys(action.add).filter((key) => !isUnsetProperty(props[key]));
+        if (set.length === 0)
+            return null;
+        return {
+            status: 409,
+            body: { error: `Changed since the proposal: ${set.join(', ')} now set`, conflicts: [] },
+        };
+    }
+    if (action.kind === 'save_llms_txt') {
+        if (!ctx.siteSettingsAdapter)
+            return { status: 501, body: { error: 'Site settings are not available' } };
+        const snapshot = await loadLlmsTxtSnapshot(ctx);
+        if (sha256Hex(snapshot ?? '') === action.beforeHash)
+            return null;
+        return {
+            status: 409,
+            body: { error: 'Changed since the proposal: llms.txt was saved since', conflicts: [] },
+        };
+    }
+    return preflightDocuments(ctx, action);
+}
+/** The current version after a write, for the result line */
+async function versionAfter(ctx, doc) {
+    return (await exactDocument(ctx, doc.collection, doc.slug, doc.locale))?.meta.version;
+}
+/** Run one document's step; a failure is reported and the next step still runs */
+async function documentStep(ctx, doc, step, done, withVersion) {
+    const where = { collection: doc.collection, slug: doc.slug };
+    try {
+        const response = await step();
+        if (!isSuccess(response))
+            return { ...where, status: 'failed', message: responseError(response) };
+        const version = withVersion ? await versionAfter(ctx, doc) : undefined;
+        const suffix = version !== undefined ? ` (v${version})` : '';
+        return { ...where, status: 'done', message: `${done} ${pathOf(doc)}${suffix}`, version };
+    }
+    catch (err) {
+        return { ...where, status: 'failed', message: err instanceof Error ? err.message : 'Failed' };
+    }
+}
+/** Save one proposed draft as the user saw it */
+async function saveStep(ctx, doc, changedBy) {
+    const saved = await saveDocument(ctx, {
+        collection: doc.collection,
+        slug: doc.slug,
+        locale: doc.locale,
+        fields: doc.fields,
+        body: doc.body,
+        isNew: doc.baseVersion === 0,
+        expectedVersion: doc.baseVersion || undefined,
+        changedBy,
+    });
+    return saved.ok ? { status: 200, body: {} } : saved.response;
+}
+async function executeDocuments(ctx, action) {
+    const changedBy = assistantChangedBy(ctx.auth);
+    const results = [];
+    if (action.kind === 'save_documents') {
+        for (const doc of action.documents) {
+            results.push(await documentStep(ctx, doc, () => saveStep(ctx, doc, changedBy), 'Saved draft', true));
+        }
+        return results;
+    }
+    const publish = action.kind === 'publish';
+    for (const doc of action.documents) {
+        const target = { collection: doc.collection, slug: doc.slug, locale: doc.locale };
+        const step = publish
+            ? () => changePublication(ctx, target, 'publish', changedBy)
+            : () => deleteDocument(ctx, target, changedBy);
+        results.push(await documentStep(ctx, doc, step, publish ? 'Published' : 'Deleted', publish));
+    }
+    return results;
+}
+/** Execute a verified, preflighted action; each step's outcome is reported */
+export async function executeAction(ctx, action) {
+    if (action.kind === 'save_seo_properties') {
+        if (!ctx.seoConfigAdapter)
+            return [{ status: 'failed', message: 'SEO configuration is not available' }];
+        try {
+            await saveArchetypeProposal(ctx, action);
+        }
+        catch (error) {
+            return [
+                {
+                    status: 'failed',
+                    message: error instanceof Error ? error.message : 'Document metadata could not be saved',
+                },
+            ];
+        }
+        const count = Object.keys(action.add).length;
+        return [
+            { status: 'done', message: `Saved ${count} Schema.org properties for ${action.configId}` },
+        ];
+    }
+    if (action.kind === 'save_llms_txt') {
+        if (!ctx.siteSettingsAdapter)
+            return [{ status: 'failed', message: 'Site settings are not available' }];
+        await ctx.siteSettingsAdapter.setSetting(LLMS_TXT_SETTING, action.text);
+        await announceChange(ctx, { kind: 'seo' });
+        return [{ status: 'done', message: 'Saved llms.txt' }];
+    }
+    return executeDocuments(ctx, action);
+}
+//# sourceMappingURL=execute-action.js.map

package/dist/assistant/execute-action.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"execute-action.js","sourceRoot":"","sources":["../../src/assistant/execute-action.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAA;AACrD,OAAO,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAA;AAChD,OAAO,EAAE,iBAAiB,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAA;AAC1E,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAA;AAChD,OAAO,EAAE,eAAe,EAAE,qBAAqB,EAAE,MAAM,qCAAqC,CAAA;AAC5F,OAAO,EAAE,gBAAgB,EAAE,mBAAmB,EAAE,MAAM,6BAA6B,CAAA;AACnF,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAA;AAElD,OAAO,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAA;AAC5D,OAAO,EAAsC,SAAS,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAA;AAC9F,OAAO,EAAE,kBAAkB,EAAE,aAAa,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAA;AAa9E,SAAS,QAAQ,CACf,SAA8E;IAE9E,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,4BAA4B,EAAE,SAAS,EAAE,EAAE,CAAA;AAClF,CAAC;AAED,iFAAiF;AACjF,KAAK,UAAU,SAAS,CAAC,GAAe,EAAE,IAAe,EAAE,KAAc;IACvE,MAAM,OAAO,GAAG,MAAM,aAAa,CAAC,GAAG,EAAE,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,CAAA;IACjF,IAAI,KAAK;QAAE,OAAO,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAA;IACvD,IACE,OAAO;QACP,OAAO,CAAC,IAAI,CAAC,OAAO,KAAK,IAAI,CAAC,WAAW;QACzC,SAAS,CAAC,OAAO,CAAC,KAAK,IAAI,CAAC,QAAQ,EACpC,CAAC;QACD,OAAO,IAAI,CAAA;IACb,CAAC;IACD,OAAO,OAAO,EAAE,IAAI,CAAC,OAAO,IAAI,CAAC,CAAA;AACnC,CAAC;AAED,kGAAkG;AAClG,KAAK,UAAU,kBAAkB,CAC/B,GAAe,EACf,MAAsB;IAEtB,MAAM,SAAS,GAAwE,EAAE,CAAA;IACzF,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,SAAS,EAAE,CAAC;QACnC,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,KAAK,gBAAgB,IAAI,GAAG,CAAC,WAAW,KAAK,CAAC,CAAA;QACvE,MAAM,cAAc,GAAG,MAAM,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE,KAAK,CAAC,CAAA;QACvD,IAAI,cAAc,KAAK,IAAI;YACzB,SAAS,CAAC,IAAI,CAAC,EAAE,UAAU,EAAE,GAAG,CAAC,UAAU,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,cAAc,EAAE,CAAC,CAAA;IAClF,CAAC;IACD,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,QAAQ,CAAC,SAAS,CAAC,CAAA;IAEpD,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,SAAS,EAAE,CAAC;QACnC,MAAM,IAAI,GAAG,MAAM,UAAU,CAAC,GAAG,EAAE,GAAG,CAAC,CAAA;QACvC,IAAI,IAAI,EAAE,CAAC;YACT,uFAAuF;YACvF,MAAM,KAAK,GAAG,GAAG,MAAM,CAAC,GAAG,CAAC,kCAAkC,CAAA;YAC9D,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,EAAE,CAAA;QACpE,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAA;AACb,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,GAAe,EACf,MAAqB;IAErB,IAAI,MAAM,CAAC,IAAI,KAAK,qBAAqB,EAAE,CAAC;QAC1C,IAAI,CAAC,GAAG,CAAC,gBAAgB;YACvB,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,oCAAoC,EAAE,EAAE,CAAA;QAC/E,MAAM,OAAO,GAAG,MAAM,WAAW,CAAC,GAAG,EAAE,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,CAAA;QACtE,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,KAAK,MAAM,CAAC,WAAW,EAAE,CAAC;YACrE,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,qCAAqC,EAAE,SAAS,EAAE,EAAE,EAAE,EAAE,CAAA;QAC/F,CAAC;QACD,MAAM,IAAI,GAAG,MAAM,UAAU,CAAC,GAAG,EAAE,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAA;QACzD,IAAI,IAAI;YAAE,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,8BAA8B,EAAE,EAAE,CAAA;QACjF,MAAM,KAAK,GAAG,OAAO,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC,EAAE,UAAU,IAAI,EAAE,CAAA;QAC3D,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,eAAe,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAA;QACjF,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,IAAI,CAAA;QACjC,OAAO;YACL,MAAM,EAAE,GAAG;YACX,IAAI,EAAE,EAAE,KAAK,EAAE,+BAA+B,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,SAAS,EAAE,EAAE,EAAE;SACxF,CAAA;IACH,CAAC;IACD,IAAI,MAAM,CAAC,IAAI,KAAK,eAAe,EAAE,CAAC;QACpC,IAAI,CAAC,GAAG,CAAC,mBAAmB;YAC1B,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,iCAAiC,EAAE,EAAE,CAAA;QAC5E,MAAM,QAAQ,GAAG,MAAM,mBAAmB,CAAC,GAAG,CAAC,CAAA;QAC/C,IAAI,SAAS,CAAC,QAAQ,IAAI,EAAE,CAAC,KAAK,MAAM,CAAC,UAAU;YAAE,OAAO,IAAI,CAAA;QAChE,OAAO;YACL,MAAM,EAAE,GAAG;YACX,IAAI,EAAE,EAAE,KAAK,EAAE,sDAAsD,EAAE,SAAS,EAAE,EAAE,EAAE;SACvF,CAAA;IACH,CAAC;IACD,OAAO,kBAAkB,CAAC,GAAG,EAAE,MAAM,CAAC,CAAA;AACxC,CAAC;AAED,6DAA6D;AAC7D,KAAK,UAAU,YAAY,CAAC,GAAe,EAAE,GAAc;IACzD,OAAO,CAAC,MAAM,aAAa,CAAC,GAAG,EAAE,GAAG,CAAC,UAAU,EAAE,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,EAAE,IAAI,CAAC,OAAO,CAAA;AACvF,CAAC;AAED,kFAAkF;AAClF,KAAK,UAAU,YAAY,CACzB,GAAe,EACf,GAAc,EACd,IAAgC,EAChC,IAAY,EACZ,WAAoB;IAEpB,MAAM,KAAK,GAAG,EAAE,UAAU,EAAE,GAAG,CAAC,UAAU,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,CAAA;IAC5D,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,IAAI,EAAE,CAAA;QAC7B,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC;YACtB,OAAO,EAAE,GAAG,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,aAAa,CAAC,QAAQ,CAAC,EAAE,CAAA;QACzE,MAAM,OAAO,GAAG,WAAW,CAAC,CAAC,CAAC,MAAM,YAAY,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;QACtE,MAAM,MAAM,GAAG,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,OAAO,GAAG,CAAC,CAAC,CAAC,EAAE,CAAA;QAC5D,OAAO,EAAE,GAAG,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,IAAI,IAAI,MAAM,CAAC,GAAG,CAAC,GAAG,MAAM,EAAE,EAAE,OAAO,EAAE,CAAA;IAC1F,CAAC;IAAC,OAAO,GAAY,EAAE,CAAC;QACtB,OAAO,EAAE,GAAG,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAA;IAC/F,CAAC;AACH,CAAC;AAID,iDAAiD;AACjD,KAAK,UAAU,QAAQ,CAAC,GAAe,EAAE,GAAe,EAAE,SAAiB;IACzE,MAAM,KAAK,GAAG,MAAM,YAAY,CAAC,GAAG,EAAE;QACpC,UAAU,EAAE,GAAG,CAAC,UAAU;QAC1B,IAAI,EAAE,GAAG,CAAC,IAAI;QACd,MAAM,EAAE,GAAG,CAAC,MAAM;QAClB,MAAM,EAAE,GAAG,CAAC,MAAM;QAClB,IAAI,EAAE,GAAG,CAAC,IAAI;QACd,KAAK,EAAE,GAAG,CAAC,WAAW,KAAK,CAAC;QAC5B,eAAe,EAAE,GAAG,CAAC,WAAW,IAAI,SAAS;QAC7C,SAAS;KACV,CAAC,CAAA;IACF,OAAO,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAA;AAC9D,CAAC;AAED,KAAK,UAAU,gBAAgB,CAAC,GAAe,EAAE,MAAsB;IACrE,MAAM,SAAS,GAAG,kBAAkB,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;IAC9C,MAAM,OAAO,GAAmB,EAAE,CAAA;IAClC,IAAI,MAAM,CAAC,IAAI,KAAK,gBAAgB,EAAE,CAAC;QACrC,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,SAAS,EAAE,CAAC;YACnC,OAAO,CAAC,IAAI,CACV,MAAM,YAAY,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,SAAS,CAAC,EAAE,aAAa,EAAE,IAAI,CAAC,CACvF,CAAA;QACH,CAAC;QACD,OAAO,OAAO,CAAA;IAChB,CAAC;IAED,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,KAAK,SAAS,CAAA;IACzC,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,SAAS,EAAE,CAAC;QACnC,MAAM,MAAM,GAAG,EAAE,UAAU,EAAE,GAAG,CAAC,UAAU,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,CAAA;QACjF,MAAM,IAAI,GAAG,OAAO;YAClB,CAAC,CAAC,GAAG,EAAE,CAAC,iBAAiB,CAAC,GAAG,EAAE,MAAM,EAAE,SAAS,EAAE,SAAS,CAAC;YAC5D,CAAC,CAAC,GAAG,EAAE,CAAC,cAAc,CAAC,GAAG,EAAE,MAAM,EAAE,SAAS,CAAC,CAAA;QAChD,OAAO,CAAC,IAAI,CAAC,MAAM,YAAY,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC,CAAA;IAC9F,CAAC;IACD,OAAO,OAAO,CAAA;AAChB,CAAC;AAED,8EAA8E;AAC9E,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,GAAe,EACf,MAAqB;IAErB,IAAI,MAAM,CAAC,IAAI,KAAK,qBAAqB,EAAE,CAAC;QAC1C,IAAI,CAAC,GAAG,CAAC,gBAAgB;YACvB,OAAO,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,oCAAoC,EAAE,CAAC,CAAA;QAC9E,IAAI,CAAC;YACH,MAAM,qBAAqB,CAAC,GAAG,EAAE,MAAM,CAAC,CAAA;QAC1C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO;gBACL;oBACE,MAAM,EAAE,QAAQ;oBAChB,OAAO,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,sCAAsC;iBACzF;aACF,CAAA;QACH,CAAC;QACD,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,CAAA;QAC5C,OAAO;YACL,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,SAAS,KAAK,8BAA8B,MAAM,CAAC,QAAQ,EAAE,EAAE;SAC3F,CAAA;IACH,CAAC;IACD,IAAI,MAAM,CAAC,IAAI,KAAK,eAAe,EAAE,CAAC;QACpC,IAAI,CAAC,GAAG,CAAC,mBAAmB;YAC1B,OAAO,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,iCAAiC,EAAE,CAAC,CAAA;QAC3E,MAAM,GAAG,CAAC,mBAAmB,CAAC,UAAU,CAAC,gBAAgB,EAAE,MAAM,CAAC,IAAI,CAAC,CAAA;QACvE,MAAM,cAAc,CAAC,GAAG,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAA;QAC1C,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,gBAAgB,EAAE,CAAC,CAAA;IACxD,CAAC;IACD,OAAO,gBAAgB,CAAC,GAAG,EAAE,MAAM,CAAC,CAAA;AACtC,CAAC"}

package/dist/assistant/pending-action.d.ts

@@ -0,0 +1,86 @@
+import { z } from 'zod';
+import type { PendingActionKind } from './protocol.js';
+/**
+ * The state a proposal was computed against: the version plus the SHA-256 hex
+ * of the canonical JSON `{ status, fields, body }` ('' for a new document)
+ */
+export type BaseState = z.infer<typeof baseStateSchema>;
+/** What confirming a proposal executes — exactly what the user was shown */
+export type PendingAction = z.infer<typeof actionSchema>;
+export type VerifyResult = {
+    ok: true;
+    action: PendingAction;
+} | {
+    ok: false;
+    status: 400 | 403 | 410;
+    error: string;
+};
+declare const baseStateSchema: z.ZodObject<{
+    collection: z.ZodString;
+    slug: z.ZodString;
+    locale: z.ZodString;
+    baseVersion: z.ZodInt;
+    baseHash: z.ZodString;
+}, z.core.$strict>;
+declare const actionSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
+    kind: z.ZodLiteral<"save_documents">;
+    documents: z.ZodArray<z.ZodObject<{
+        fields: z.ZodRecord<z.ZodString, z.ZodUnknown>;
+        body: z.ZodString;
+        collection: z.ZodString;
+        slug: z.ZodString;
+        locale: z.ZodString;
+        baseVersion: z.ZodInt;
+        baseHash: z.ZodString;
+    }, z.core.$strict>>;
+}, z.core.$strict>, z.ZodObject<{
+    kind: z.ZodLiteral<"publish">;
+    documents: z.ZodArray<z.ZodObject<{
+        collection: z.ZodString;
+        slug: z.ZodString;
+        locale: z.ZodString;
+        baseVersion: z.ZodInt;
+        baseHash: z.ZodString;
+    }, z.core.$strict>>;
+}, z.core.$strict>, z.ZodObject<{
+    kind: z.ZodLiteral<"delete">;
+    documents: z.ZodArray<z.ZodObject<{
+        collection: z.ZodString;
+        slug: z.ZodString;
+        locale: z.ZodString;
+        baseVersion: z.ZodInt;
+        baseHash: z.ZodString;
+    }, z.core.$strict>>;
+}, z.core.$strict>, z.ZodObject<{
+    kind: z.ZodLiteral<"save_seo_properties">;
+    baseVersion: z.ZodNumber;
+    locale: z.ZodString;
+    configId: z.ZodString;
+    schemaTypes: z.ZodArray<z.ZodString>;
+    add: z.ZodRecord<z.ZodString, z.ZodString>;
+}, z.core.$strict>, z.ZodObject<{
+    kind: z.ZodLiteral<"save_llms_txt">;
+    beforeHash: z.ZodString;
+    text: z.ZodString;
+}, z.core.$strict>], "kind">;
+/** SHA-256 hex of a string */
+export declare function sha256Hex(text: string): string;
+/** The hash a proposal binds a document to; '' when there is no document */
+export declare function stateHash(doc: {
+    meta: {
+        status: string;
+    };
+    fields: Record<string, unknown>;
+    body: string;
+} | null): string;
+/** Studio's confirm roles: publishing and saving need an editor, the rest an admin */
+export declare function roleForKind(kind: PendingActionKind): 'editor' | 'admin';
+/** Sign an action for one user, valid for `ttlSec` seconds */
+export declare function signPendingAction(action: PendingAction, userId: string, secret: string, ttlSec: number): {
+    token: string;
+    expiresAt: string;
+};
+/** Check a token's signature, shape, expiry and user; a malformed token is rejected, never thrown on */
+export declare function verifyPendingAction(token: string, userId: string, secret: string): VerifyResult;
+export {};
+//# sourceMappingURL=pending-action.d.ts.map

package/dist/assistant/pending-action.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pending-action.d.ts","sourceRoot":"","sources":["../../src/assistant/pending-action.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AACvB,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAA;AAEtD;;;GAGG;AACH,MAAM,MAAM,SAAS,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,eAAe,CAAC,CAAA;AAEvD,4EAA4E;AAC5E,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,YAAY,CAAC,CAAA;AAExD,MAAM,MAAM,YAAY,GACpB;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,MAAM,EAAE,aAAa,CAAA;CAAE,GACnC;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,GAAG,GAAG,GAAG,GAAG,GAAG,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAA;AAazD,QAAA,MAAM,eAAe;;;;;;kBAAiC,CAAA;AAEtD,QAAA,MAAM,YAAY;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;4BAwBhB,CAAA;AASF,8BAA8B;AAC9B,wBAAgB,SAAS,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAE9C;AAED,4EAA4E;AAC5E,wBAAgB,SAAS,CACvB,GAAG,EAAE;IAAE,IAAI,EAAE;QAAE,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,GACtF,MAAM,CAGR;AAED,sFAAsF;AACtF,wBAAgB,WAAW,CAAC,IAAI,EAAE,iBAAiB,GAAG,QAAQ,GAAG,OAAO,CAEvE;AAMD,8DAA8D;AAC9D,wBAAgB,iBAAiB,CAC/B,MAAM,EAAE,aAAa,EACrB,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,MAAM,GACb;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,CAStC;AAsBD,wGAAwG;AACxG,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,YAAY,CAU/F"}

package/dist/assistant/pending-action.js

@@ -0,0 +1,104 @@
+import { createHash, createHmac, timingSafeEqual } from 'node:crypto';
+import { canonicalJson } from '@krantho/core';
+import { z } from 'zod';
+/** Separates these MACs from JWTs and preview tokens signed with the same secret */
+const DOMAIN = 'krantho-assistant-action.v1.';
+const BASE64URL = /^[A-Za-z0-9_-]+$/;
+const baseStateShape = {
+    collection: z.string().min(1),
+    slug: z.string().min(1),
+    locale: z.string().min(1),
+    baseVersion: z.int().nonnegative(),
+    baseHash: z.string(),
+};
+const baseStateSchema = z.strictObject(baseStateShape);
+const actionSchema = z.discriminatedUnion('kind', [
+    z.strictObject({
+        kind: z.literal('save_documents'),
+        documents: z
+            .array(z.strictObject({
+            ...baseStateShape,
+            fields: z.record(z.string(), z.unknown()),
+            body: z.string(),
+        }))
+            .min(1),
+    }),
+    z.strictObject({ kind: z.literal('publish'), documents: z.array(baseStateSchema).min(1) }),
+    z.strictObject({ kind: z.literal('delete'), documents: z.array(baseStateSchema).min(1) }),
+    z.strictObject({
+        kind: z.literal('save_seo_properties'),
+        baseVersion: z.number().int().positive(),
+        locale: z.string().min(2),
+        configId: z.string().min(1),
+        schemaTypes: z.array(z.string().min(1)),
+        add: z.record(z.string(), z.string()),
+    }),
+    z.strictObject({ kind: z.literal('save_llms_txt'), beforeHash: z.string(), text: z.string() }),
+]);
+const payloadSchema = z.strictObject({
+    v: z.literal(1),
+    uid: z.string().min(1),
+    exp: z.int().positive(),
+    action: actionSchema,
+});
+/** SHA-256 hex of a string */
+export function sha256Hex(text) {
+    return createHash('sha256').update(text).digest('hex');
+}
+/** The hash a proposal binds a document to; '' when there is no document */
+export function stateHash(doc) {
+    if (!doc)
+        return '';
+    return sha256Hex(canonicalJson({ status: doc.meta.status, fields: doc.fields, body: doc.body }));
+}
+/** Studio's confirm roles: publishing and saving need an editor, the rest an admin */
+export function roleForKind(kind) {
+    return kind === 'save_documents' || kind === 'publish' ? 'editor' : 'admin';
+}
+function mac(payloadPart, secret) {
+    return createHmac('sha256', secret).update(`${DOMAIN}${payloadPart}`).digest('base64url');
+}
+/** Sign an action for one user, valid for `ttlSec` seconds */
+export function signPendingAction(action, userId, secret, ttlSec) {
+    const exp = Math.floor(Date.now() / 1000) + ttlSec;
+    const payloadPart = Buffer.from(JSON.stringify({ v: 1, uid: userId, exp, action })).toString('base64url');
+    return {
+        token: `${payloadPart}.${mac(payloadPart, secret)}`,
+        expiresAt: new Date(exp * 1000).toISOString(),
+    };
+}
+const INVALID = { ok: false, status: 400, error: 'Invalid action' };
+/** The payload of a token whose MAC is valid, or null — never throws */
+function authenticPayload(token, secret) {
+    const parts = token.split('.');
+    const [payloadPart, macPart] = parts;
+    if (parts.length !== 2 || payloadPart === undefined || macPart === undefined)
+        return null;
+    if (!BASE64URL.test(payloadPart) || !BASE64URL.test(macPart))
+        return null;
+    const expected = Buffer.from(mac(payloadPart, secret));
+    const actual = Buffer.from(macPart);
+    if (actual.length !== expected.length || !timingSafeEqual(actual, expected))
+        return null;
+    try {
+        const payload = JSON.parse(Buffer.from(payloadPart, 'base64url').toString('utf-8'));
+        return payload;
+    }
+    catch {
+        return null;
+    }
+}
+/** Check a token's signature, shape, expiry and user; a malformed token is rejected, never thrown on */
+export function verifyPendingAction(token, userId, secret) {
+    const payload = payloadSchema.safeParse(authenticPayload(token, secret));
+    if (!payload.success)
+        return INVALID;
+    if (payload.data.exp <= Math.floor(Date.now() / 1000)) {
+        return { ok: false, status: 410, error: 'This proposal has expired; ask again' };
+    }
+    if (payload.data.uid !== userId) {
+        return { ok: false, status: 403, error: 'This proposal was made for another user' };
+    }
+    return { ok: true, action: payload.data.action };
+}
+//# sourceMappingURL=pending-action.js.map

package/dist/assistant/pending-action.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pending-action.js","sourceRoot":"","sources":["../../src/assistant/pending-action.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,aAAa,CAAA;AACrE,OAAO,EAAE,aAAa,EAAE,MAAM,eAAe,CAAA;AAC7C,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AAgBvB,oFAAoF;AACpF,MAAM,MAAM,GAAG,8BAA8B,CAAA;AAC7C,MAAM,SAAS,GAAG,kBAAkB,CAAA;AAEpC,MAAM,cAAc,GAAG;IACrB,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC7B,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACvB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACzB,WAAW,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;IAClC,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE;CACrB,CAAA;AACD,MAAM,eAAe,GAAG,CAAC,CAAC,YAAY,CAAC,cAAc,CAAC,CAAA;AAEtD,MAAM,YAAY,GAAG,CAAC,CAAC,kBAAkB,CAAC,MAAM,EAAE;IAChD,CAAC,CAAC,YAAY,CAAC;QACb,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,gBAAgB,CAAC;QACjC,SAAS,EAAE,CAAC;aACT,KAAK,CACJ,CAAC,CAAC,YAAY,CAAC;YACb,GAAG,cAAc;YACjB,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC;YACzC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;SACjB,CAAC,CACH;aACA,GAAG,CAAC,CAAC,CAAC;KACV,CAAC;IACF,CAAC,CAAC,YAAY,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;IAC1F,CAAC,CAAC,YAAY,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;IACzF,CAAC,CAAC,YAAY,CAAC;QACb,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,qBAAqB,CAAC;QACtC,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;QACxC,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;QACzB,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;QAC3B,WAAW,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QACvC,GAAG,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;KACtC,CAAC;IACF,CAAC,CAAC,YAAY,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,eAAe,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;CAC/F,CAAC,CAAA;AAEF,MAAM,aAAa,GAAG,CAAC,CAAC,YAAY,CAAC;IACnC,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;IACf,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACtB,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IACvB,MAAM,EAAE,YAAY;CACrB,CAAC,CAAA;AAEF,8BAA8B;AAC9B,MAAM,UAAU,SAAS,CAAC,IAAY;IACpC,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;AACxD,CAAC;AAED,4EAA4E;AAC5E,MAAM,UAAU,SAAS,CACvB,GAAuF;IAEvF,IAAI,CAAC,GAAG;QAAE,OAAO,EAAE,CAAA;IACnB,OAAO,SAAS,CAAC,aAAa,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,CAAA;AAClG,CAAC;AAED,sFAAsF;AACtF,MAAM,UAAU,WAAW,CAAC,IAAuB;IACjD,OAAO,IAAI,KAAK,gBAAgB,IAAI,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAA;AAC7E,CAAC;AAED,SAAS,GAAG,CAAC,WAAmB,EAAE,MAAc;IAC9C,OAAO,UAAU,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,GAAG,MAAM,GAAG,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,CAAA;AAC3F,CAAC;AAED,8DAA8D;AAC9D,MAAM,UAAU,iBAAiB,CAC/B,MAAqB,EACrB,MAAc,EACd,MAAc,EACd,MAAc;IAEd,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,GAAG,MAAM,CAAA;IAClD,MAAM,WAAW,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,QAAQ,CAC1F,WAAW,CACZ,CAAA;IACD,OAAO;QACL,KAAK,EAAE,GAAG,WAAW,IAAI,GAAG,CAAC,WAAW,EAAE,MAAM,CAAC,EAAE;QACnD,SAAS,EAAE,IAAI,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC,CAAC,WAAW,EAAE;KAC9C,CAAA;AACH,CAAC;AAED,MAAM,OAAO,GAAiB,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,gBAAgB,EAAE,CAAA;AAEjF,wEAAwE;AACxE,SAAS,gBAAgB,CAAC,KAAa,EAAE,MAAc;IACrD,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;IAC9B,MAAM,CAAC,WAAW,EAAE,OAAO,CAAC,GAAG,KAAK,CAAA;IACpC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,WAAW,KAAK,SAAS,IAAI,OAAO,KAAK,SAAS;QAAE,OAAO,IAAI,CAAA;IACzF,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC;QAAE,OAAO,IAAI,CAAA;IAEzE,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC,CAAA;IACtD,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;IACnC,IAAI,MAAM,CAAC,MAAM,KAAK,QAAQ,CAAC,MAAM,IAAI,CAAC,eAAe,CAAC,MAAM,EAAE,QAAQ,CAAC;QAAE,OAAO,IAAI,CAAA;IACxF,IAAI,CAAC;QACH,MAAM,OAAO,GAAY,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAA;QAC5F,OAAO,OAAO,CAAA;IAChB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAA;IACb,CAAC;AACH,CAAC;AAED,wGAAwG;AACxG,MAAM,UAAU,mBAAmB,CAAC,KAAa,EAAE,MAAc,EAAE,MAAc;IAC/E,MAAM,OAAO,GAAG,aAAa,CAAC,SAAS,CAAC,gBAAgB,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,CAAA;IACxE,IAAI,CAAC,OAAO,CAAC,OAAO;QAAE,OAAO,OAAO,CAAA;IACpC,IAAI,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,EAAE,CAAC;QACtD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,sCAAsC,EAAE,CAAA;IAClF,CAAC;IACD,IAAI,OAAO,CAAC,IAAI,CAAC,GAAG,KAAK,MAAM,EAAE,CAAC;QAChC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,yCAAyC,EAAE,CAAA;IACrF,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,CAAA;AAClD,CAAC"}