@krantho/api 0.0.0-stage → 1.0.0

package/dist/handlers/auth-me.js

@@ -0,0 +1,54 @@
+import { accessCookieName } from '../cookies.js';
+import { verifyJwt } from '../jwt.js';
+import { parseCookie } from '../validators.js';
+/** GET /api/auth/me — return current user from JWT cookie or Bearer token */
+export const authMe = async (req, ctx) => {
+    const auth = ctx.config.auth;
+    if (auth.mode === 'none') {
+        return {
+            status: 200,
+            body: { identity: 'anonymous', mode: 'none', roles: ['admin'], name: 'Anonymous' },
+        };
+    }
+    const cookieToken = parseCookie(req.headers?.['cookie'], accessCookieName(auth.session));
+    const authHeader = req.headers?.['authorization'];
+    const bearerToken = authHeader?.startsWith('Bearer ') ? authHeader.slice(7) : undefined;
+    const token = cookieToken ?? bearerToken;
+    if (!token) {
+        return { status: 401, body: { error: 'Not authenticated' } };
+    }
+    // Legacy token mode: raw shared secret. Neutral, domain-agnostic defaults
+    // (no brand domain hardcoded in a published package); a deployment sets
+    // auth.token.email / auth.token.role to override.
+    if (auth.mode === 'token' && token === auth.token.secret) {
+        return {
+            status: 200,
+            body: {
+                identity: auth.token.email,
+                mode: 'token',
+                roles: [auth.token.role],
+                name: 'Token Admin',
+            },
+        };
+    }
+    // JWT verification
+    if (!auth.jwtSecret) {
+        return { status: 500, body: { error: 'JWT secret not configured' } };
+    }
+    const result = verifyJwt(token, auth.jwtSecret);
+    if (!result.valid) {
+        return { status: 401, body: { error: result.error } };
+    }
+    return {
+        status: 200,
+        body: {
+            id: result.claims.sub,
+            identity: result.claims.email,
+            email: result.claims.email,
+            name: result.claims.name,
+            mode: auth.mode,
+            roles: result.claims.roles,
+        },
+    };
+};
+//# sourceMappingURL=auth-me.js.map

package/dist/handlers/auth-me.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth-me.js","sourceRoot":"","sources":["../../src/handlers/auth-me.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAA;AAChD,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAA;AAErC,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAA;AAE9C,6EAA6E;AAC7E,MAAM,CAAC,MAAM,MAAM,GAAe,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;IACnD,MAAM,IAAI,GAAG,GAAG,CAAC,MAAM,CAAC,IAAI,CAAA;IAE5B,IAAI,IAAI,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;QACzB,OAAO;YACL,MAAM,EAAE,GAAG;YACX,IAAI,EAAE,EAAE,QAAQ,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE;SACnF,CAAA;IACH,CAAC;IAED,MAAM,WAAW,GAAG,WAAW,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC,QAAQ,CAAC,EAAE,gBAAgB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAA;IACxF,MAAM,UAAU,GAAG,GAAG,CAAC,OAAO,EAAE,CAAC,eAAe,CAAC,CAAA;IACjD,MAAM,WAAW,GAAG,UAAU,EAAE,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;IACvF,MAAM,KAAK,GAAG,WAAW,IAAI,WAAW,CAAA;IAExC,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,mBAAmB,EAAE,EAAE,CAAA;IAC9D,CAAC;IAED,0EAA0E;IAC1E,wEAAwE;IACxE,kDAAkD;IAClD,IAAI,IAAI,CAAC,IAAI,KAAK,OAAO,IAAI,KAAK,KAAK,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;QACzD,OAAO;YACL,MAAM,EAAE,GAAG;YACX,IAAI,EAAE;gBACJ,QAAQ,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK;gBAC1B,IAAI,EAAE,OAAO;gBACb,KAAK,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC;gBACxB,IAAI,EAAE,aAAa;aACpB;SACF,CAAA;IACH,CAAC;IAED,mBAAmB;IACnB,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;QACpB,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,2BAA2B,EAAE,EAAE,CAAA;IACtE,CAAC;IAED,MAAM,MAAM,GAAG,SAAS,CAAC,KAAK,EAAE,IAAI,CAAC,SAAS,CAAC,CAAA;IAC/C,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;QAClB,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,EAAE,CAAA;IACvD,CAAC;IAED,OAAO;QACL,MAAM,EAAE,GAAG;QACX,IAAI,EAAE;YACJ,EAAE,EAAE,MAAM,CAAC,MAAM,CAAC,GAAG;YACrB,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,KAAK;YAC7B,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,KAAK;YAC1B,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI;YACxB,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,KAAK;SAC3B;KACF,CAAA;AACH,CAAC,CAAA"}

package/dist/handlers/auth-oidc-login.d.ts

@@ -0,0 +1,4 @@
+import type { ApiHandler } from '../types.js';
+/** GET /api/auth/login/oidc — initiate OIDC PKCE flow, redirect to provider */
+export declare const authOidcLogin: ApiHandler;
+//# sourceMappingURL=auth-oidc-login.d.ts.map

package/dist/handlers/auth-oidc-login.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth-oidc-login.d.ts","sourceRoot":"","sources":["../../src/handlers/auth-oidc-login.ts"],"names":[],"mappings":"AASA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AAE7C,+EAA+E;AAC/E,eAAO,MAAM,aAAa,EAAE,UAmD3B,CAAA"}

package/dist/handlers/auth-oidc-login.js

@@ -0,0 +1,51 @@
+import { computeCodeChallenge, generateCodeVerifier, generateNonce, generateState, getDiscovery, } from '../oidc.js';
+import { oidcStateCookie, sealOidcState } from '../oidc-state.js';
+import { safeReturnTo } from '../return-to.js';
+/** GET /api/auth/login/oidc — initiate OIDC PKCE flow, redirect to provider */
+export const authOidcLogin = async (req, ctx) => {
+    const auth = ctx.config.auth;
+    if (auth.mode !== 'oidc') {
+        return { status: 400, body: { error: 'OIDC mode is not enabled' } };
+    }
+    const { issuer, clientId, redirectUri, scopes } = auth.oidc;
+    const jwtSecret = auth.jwtSecret;
+    if (!issuer || !clientId || !redirectUri || !jwtSecret) {
+        return {
+            status: 500,
+            body: {
+                error: 'OIDC not configured. Set OIDC_ISSUER_URL, OIDC_CLIENT_ID, OIDC_REDIRECT_URI.',
+            },
+        };
+    }
+    try {
+        const discovery = await getDiscovery(issuer);
+        const pending = {
+            state: generateState(),
+            codeVerifier: generateCodeVerifier(),
+            nonce: generateNonce(),
+            returnTo: safeReturnTo(req.query['returnTo']),
+        };
+        const params = new URLSearchParams({
+            response_type: 'code',
+            client_id: clientId,
+            redirect_uri: redirectUri,
+            scope: scopes.join(' '),
+            code_challenge: computeCodeChallenge(pending.codeVerifier),
+            code_challenge_method: 'S256',
+            state: pending.state,
+            nonce: pending.nonce,
+        });
+        // The pending sign-in rides in a sealed cookie so the callback can land on any instance
+        return {
+            status: 302,
+            body: null,
+            headers: { Location: `${discovery.authorization_endpoint}?${params.toString()}` },
+            cookies: [oidcStateCookie(sealOidcState(pending, jwtSecret), auth, req.headers)],
+        };
+    }
+    catch (err) {
+        const message = err instanceof Error ? err.message : 'OIDC discovery failed';
+        return { status: 502, body: { error: message } };
+    }
+};
+//# sourceMappingURL=auth-oidc-login.js.map

package/dist/handlers/auth-oidc-login.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth-oidc-login.js","sourceRoot":"","sources":["../../src/handlers/auth-oidc-login.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,oBAAoB,EACpB,oBAAoB,EACpB,aAAa,EACb,aAAa,EACb,YAAY,GACb,MAAM,YAAY,CAAA;AACnB,OAAO,EAAE,eAAe,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAA;AACjE,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAA;AAG9C,+EAA+E;AAC/E,MAAM,CAAC,MAAM,aAAa,GAAe,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;IAC1D,MAAM,IAAI,GAAG,GAAG,CAAC,MAAM,CAAC,IAAI,CAAA;IAE5B,IAAI,IAAI,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;QACzB,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,0BAA0B,EAAE,EAAE,CAAA;IACrE,CAAC;IAED,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC,IAAI,CAAA;IAC3D,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,CAAA;IAEhC,IAAI,CAAC,MAAM,IAAI,CAAC,QAAQ,IAAI,CAAC,WAAW,IAAI,CAAC,SAAS,EAAE,CAAC;QACvD,OAAO;YACL,MAAM,EAAE,GAAG;YACX,IAAI,EAAE;gBACJ,KAAK,EAAE,8EAA8E;aACtF;SACF,CAAA;IACH,CAAC;IAED,IAAI,CAAC;QACH,MAAM,SAAS,GAAG,MAAM,YAAY,CAAC,MAAM,CAAC,CAAA;QAE5C,MAAM,OAAO,GAAG;YACd,KAAK,EAAE,aAAa,EAAE;YACtB,YAAY,EAAE,oBAAoB,EAAE;YACpC,KAAK,EAAE,aAAa,EAAE;YACtB,QAAQ,EAAE,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;SAC9C,CAAA;QAED,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC;YACjC,aAAa,EAAE,MAAM;YACrB,SAAS,EAAE,QAAQ;YACnB,YAAY,EAAE,WAAW;YACzB,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC;YACvB,cAAc,EAAE,oBAAoB,CAAC,OAAO,CAAC,YAAY,CAAC;YAC1D,qBAAqB,EAAE,MAAM;YAC7B,KAAK,EAAE,OAAO,CAAC,KAAK;YACpB,KAAK,EAAE,OAAO,CAAC,KAAK;SACrB,CAAC,CAAA;QAEF,wFAAwF;QACxF,OAAO;YACL,MAAM,EAAE,GAAG;YACX,IAAI,EAAE,IAAI;YACV,OAAO,EAAE,EAAE,QAAQ,EAAE,GAAG,SAAS,CAAC,sBAAsB,IAAI,MAAM,CAAC,QAAQ,EAAE,EAAE,EAAE;YACjF,OAAO,EAAE,CAAC,eAAe,CAAC,aAAa,CAAC,OAAO,EAAE,SAAS,CAAC,EAAE,IAAI,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC;SACjF,CAAA;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,uBAAuB,CAAA;QAC5E,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,CAAA;IAClD,CAAC;AACH,CAAC,CAAA"}

package/dist/handlers/auth-refresh.d.ts

@@ -0,0 +1,15 @@
+import type { ApiHandler } from '../types.js';
+/** POST /api/auth/refresh — rotate tokens, issue new JWT + refresh pair */
+export declare const authRefresh: ApiHandler;
+/**
+ * GET /api/auth/refresh?returnTo=<path> — the same rotation for a page
+ * navigation, such as the Studio gate sending a browser whose access token
+ * expired. A successful refresh returns the browser to `returnTo` with the new
+ * cookies. A failed one starts a new sign-in: the OIDC sign-in in `oidc` mode,
+ * otherwise `returnTo`, where Studio shows its own sign-in page. It leaves
+ * the cookies alone — when two tabs refresh at once, the losing request holds
+ * the token the winner just rotated, and clearing would undo the winner's new
+ * session. A completed sign-in replaces the cookies anyway.
+ */
+export declare const authRefreshRedirect: ApiHandler;
+//# sourceMappingURL=auth-refresh.d.ts.map

package/dist/handlers/auth-refresh.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth-refresh.d.ts","sourceRoot":"","sources":["../../src/handlers/auth-refresh.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAc,UAAU,EAA2B,MAAM,aAAa,CAAA;AAwDlF,2EAA2E;AAC3E,eAAO,MAAM,WAAW,EAAE,UAIzB,CAAA;AAED;;;;;;;;;GASG;AACH,eAAO,MAAM,mBAAmB,EAAE,UAWjC,CAAA"}

package/dist/handlers/auth-refresh.js

@@ -0,0 +1,82 @@
+import { issueTokenPair } from '../auth-tokens.js';
+import { refreshCookieName } from '../cookies.js';
+import { hashRefreshToken } from '../jwt.js';
+import { safeReturnTo } from '../return-to.js';
+import { parseCookie } from '../validators.js';
+/**
+ * Exchange the refresh cookie for a new access and refresh token pair. The
+ * refresh token is single-use: the stored one is deleted before the new pair
+ * is issued, and an expired token or an inactive user's token is deleted too.
+ */
+async function rotateSession(req, ctx) {
+    const auth = ctx.config.auth;
+    if (!ctx.authAdapter || !auth.jwtSecret) {
+        return { ok: false, status: 501, error: 'Session management not configured' };
+    }
+    const refreshToken = parseCookie(req.headers?.['cookie'], refreshCookieName(auth.session));
+    if (!refreshToken)
+        return { ok: false, status: 401, error: 'No refresh token' };
+    const tokenHash = hashRefreshToken(refreshToken, auth.jwtSecret);
+    const tokenRecord = await ctx.authAdapter.getRefreshTokenByHash(tokenHash);
+    if (!tokenRecord)
+        return { ok: false, status: 401, error: 'Invalid refresh token' };
+    if (new Date(tokenRecord.expiresAt) <= new Date()) {
+        await ctx.authAdapter.deleteRefreshToken(tokenRecord.id);
+        return { ok: false, status: 401, error: 'Refresh token expired' };
+    }
+    const user = await ctx.authAdapter.getUser(tokenRecord.userId);
+    if (!user || !user.isActive) {
+        await ctx.authAdapter.deleteRefreshToken(tokenRecord.id);
+        return { ok: false, status: 401, error: 'User not found or deactivated' };
+    }
+    await ctx.authAdapter.deleteRefreshToken(tokenRecord.id);
+    const tokens = await issueTokenPair({
+        user: { id: user.id, email: user.email ?? '', name: user.name ?? '', roles: user.roles },
+        jwtSecret: auth.jwtSecret,
+        auth,
+        headers: req.headers,
+        authAdapter: ctx.authAdapter,
+    });
+    return {
+        ok: true,
+        cookies: tokens.cookies,
+        user: { identity: user.email, roles: user.roles, name: user.name },
+    };
+}
+/** POST /api/auth/refresh — rotate tokens, issue new JWT + refresh pair */
+export const authRefresh = async (req, ctx) => {
+    const rotation = await rotateSession(req, ctx);
+    if (!rotation.ok)
+        return { status: rotation.status, body: { error: rotation.error } };
+    return { status: 200, body: rotation.user, cookies: rotation.cookies };
+};
+/**
+ * GET /api/auth/refresh?returnTo=<path> — the same rotation for a page
+ * navigation, such as the Studio gate sending a browser whose access token
+ * expired. A successful refresh returns the browser to `returnTo` with the new
+ * cookies. A failed one starts a new sign-in: the OIDC sign-in in `oidc` mode,
+ * otherwise `returnTo`, where Studio shows its own sign-in page. It leaves
+ * the cookies alone — when two tabs refresh at once, the losing request holds
+ * the token the winner just rotated, and clearing would undo the winner's new
+ * session. A completed sign-in replaces the cookies anyway.
+ */
+export const authRefreshRedirect = async (req, ctx) => {
+    const returnTo = safeReturnTo(req.query['returnTo']);
+    const rotation = await rotateSession(req, ctx);
+    if (rotation.ok)
+        return redirect(returnTo, rotation.cookies);
+    const auth = ctx.config.auth;
+    const signIn = auth.mode === 'oidc'
+        ? `/api/auth/login/oidc?returnTo=${encodeURIComponent(returnTo)}`
+        : returnTo;
+    return redirect(signIn, []);
+};
+function redirect(location, cookies) {
+    return {
+        status: 302,
+        body: null,
+        headers: { Location: location, 'Cache-Control': 'no-store' },
+        cookies,
+    };
+}
+//# sourceMappingURL=auth-refresh.js.map

package/dist/handlers/auth-refresh.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth-refresh.js","sourceRoot":"","sources":["../../src/handlers/auth-refresh.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAA;AAClD,OAAO,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAA;AACjD,OAAO,EAAE,gBAAgB,EAAE,MAAM,WAAW,CAAA;AAC5C,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAA;AAE9C,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAA;AAW9C;;;;GAIG;AACH,KAAK,UAAU,aAAa,CAAC,GAAe,EAAE,GAAe;IAC3D,MAAM,IAAI,GAAG,GAAG,CAAC,MAAM,CAAC,IAAI,CAAA;IAC5B,IAAI,CAAC,GAAG,CAAC,WAAW,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;QACxC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,mCAAmC,EAAE,CAAA;IAC/E,CAAC;IAED,MAAM,YAAY,GAAG,WAAW,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC,QAAQ,CAAC,EAAE,iBAAiB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAA;IAC1F,IAAI,CAAC,YAAY;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,kBAAkB,EAAE,CAAA;IAE/E,MAAM,SAAS,GAAG,gBAAgB,CAAC,YAAY,EAAE,IAAI,CAAC,SAAS,CAAC,CAAA;IAChE,MAAM,WAAW,GAAG,MAAM,GAAG,CAAC,WAAW,CAAC,qBAAqB,CAAC,SAAS,CAAC,CAAA;IAC1E,IAAI,CAAC,WAAW;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,uBAAuB,EAAE,CAAA;IAEnF,IAAI,IAAI,IAAI,CAAC,WAAW,CAAC,SAAS,CAAC,IAAI,IAAI,IAAI,EAAE,EAAE,CAAC;QAClD,MAAM,GAAG,CAAC,WAAW,CAAC,kBAAkB,CAAC,WAAW,CAAC,EAAE,CAAC,CAAA;QACxD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,uBAAuB,EAAE,CAAA;IACnE,CAAC;IAED,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,WAAW,CAAC,OAAO,CAAC,WAAW,CAAC,MAAM,CAAC,CAAA;IAC9D,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;QAC5B,MAAM,GAAG,CAAC,WAAW,CAAC,kBAAkB,CAAC,WAAW,CAAC,EAAE,CAAC,CAAA;QACxD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,+BAA+B,EAAE,CAAA;IAC3E,CAAC;IAED,MAAM,GAAG,CAAC,WAAW,CAAC,kBAAkB,CAAC,WAAW,CAAC,EAAE,CAAC,CAAA;IACxD,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC;QAClC,IAAI,EAAE,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,IAAI,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE;QACxF,SAAS,EAAE,IAAI,CAAC,SAAS;QACzB,IAAI;QACJ,OAAO,EAAE,GAAG,CAAC,OAAO;QACpB,WAAW,EAAE,GAAG,CAAC,WAAW;KAC7B,CAAC,CAAA;IACF,OAAO;QACL,EAAE,EAAE,IAAI;QACR,OAAO,EAAE,MAAM,CAAC,OAAO;QACvB,IAAI,EAAE,EAAE,QAAQ,EAAE,IAAI,CAAC,KAAK,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE;KACnE,CAAA;AACH,CAAC;AAED,2EAA2E;AAC3E,MAAM,CAAC,MAAM,WAAW,GAAe,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;IACxD,MAAM,QAAQ,GAAG,MAAM,aAAa,CAAC,GAAG,EAAE,GAAG,CAAC,CAAA;IAC9C,IAAI,CAAC,QAAQ,CAAC,EAAE;QAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,QAAQ,CAAC,KAAK,EAAE,EAAE,CAAA;IACrF,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,QAAQ,CAAC,IAAI,EAAE,OAAO,EAAE,QAAQ,CAAC,OAAO,EAAE,CAAA;AACxE,CAAC,CAAA;AAED;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAe,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;IAChE,MAAM,QAAQ,GAAG,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAA;IACpD,MAAM,QAAQ,GAAG,MAAM,aAAa,CAAC,GAAG,EAAE,GAAG,CAAC,CAAA;IAC9C,IAAI,QAAQ,CAAC,EAAE;QAAE,OAAO,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC,OAAO,CAAC,CAAA;IAE5D,MAAM,IAAI,GAAG,GAAG,CAAC,MAAM,CAAC,IAAI,CAAA;IAC5B,MAAM,MAAM,GACV,IAAI,CAAC,IAAI,KAAK,MAAM;QAClB,CAAC,CAAC,iCAAiC,kBAAkB,CAAC,QAAQ,CAAC,EAAE;QACjE,CAAC,CAAC,QAAQ,CAAA;IACd,OAAO,QAAQ,CAAC,MAAM,EAAE,EAAE,CAAC,CAAA;AAC7B,CAAC,CAAA;AAED,SAAS,QAAQ,CAAC,QAAgB,EAAE,OAAiB;IACnD,OAAO;QACL,MAAM,EAAE,GAAG;QACX,IAAI,EAAE,IAAI;QACV,OAAO,EAAE,EAAE,QAAQ,EAAE,QAAQ,EAAE,eAAe,EAAE,UAAU,EAAE;QAC5D,OAAO;KACR,CAAA;AACH,CAAC"}

package/dist/handlers/bulk-delete.d.ts

@@ -0,0 +1,8 @@
+import type { ApiHandler } from '../types.js';
+/**
+ * DELETE /api/content/:collection/bulk — delete each slug in `slugs`, in
+ * `locale` (the site's default locale when absent); one someone else is
+ * editing is left alone.
+ */
+export declare const bulkDelete: ApiHandler;
+//# sourceMappingURL=bulk-delete.d.ts.map

package/dist/handlers/bulk-delete.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"bulk-delete.d.ts","sourceRoot":"","sources":["../../src/handlers/bulk-delete.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AAG7C;;;;GAIG;AACH,eAAO,MAAM,UAAU,EAAE,UAuExB,CAAA"}

package/dist/handlers/bulk-delete.js

@@ -0,0 +1,72 @@
+import { canWriteContent } from '@krantho/persistence';
+import { announceChanges } from '../content-change.js';
+import { lockedByOther } from '../content-locks.js';
+import { requireRole } from '../permissions.js';
+import { parseLocaleParam, validateCollectionParam, validateRequestBody } from '../validators.js';
+/**
+ * DELETE /api/content/:collection/bulk — delete each slug in `slugs`, in
+ * `locale` (the site's default locale when absent); one someone else is
+ * editing is left alone.
+ */
+export const bulkDelete = async (req, ctx) => {
+    const denied = requireRole(ctx.auth, 'admin');
+    if (denied)
+        return denied;
+    const validated = validateCollectionParam(req.params['collection'], ctx);
+    if (!validated.isValid)
+        return validated.response;
+    const bodyValidated = validateRequestBody(req.body);
+    if (!bodyValidated.isValid)
+        return bodyValidated.response;
+    const slugs = bodyValidated.body['slugs'];
+    if (!Array.isArray(slugs) || slugs.length === 0) {
+        return { status: 400, body: { error: 'Request body must include a non-empty "slugs" array' } };
+    }
+    const requestedLocale = bodyValidated.body['locale'];
+    const locale = requestedLocale === undefined
+        ? ctx.config.site.defaultLocale
+        : parseLocaleParam(typeof requestedLocale === 'string' ? requestedLocale : undefined);
+    if (locale === undefined) {
+        return {
+            status: 400,
+            body: { error: '"locale" must be a locale code, such as "en" or "nb-NO"' },
+        };
+    }
+    if (!canWriteContent(ctx.adapter)) {
+        return { status: 501, body: { error: 'Adapter does not support deleteContent' } };
+    }
+    const results = [];
+    for (const slug of slugs) {
+        if (typeof slug !== 'string')
+            continue;
+        const locked = await lockedByOther(ctx, { collection: validated.collection, slug, locale });
+        if (locked) {
+            const error = locked.body.error;
+            results.push({ slug, deleted: false, error });
+            continue;
+        }
+        try {
+            await ctx.adapter.deleteContent(validated.collection, slug, locale);
+            results.push({ slug, deleted: true });
+        }
+        catch (err) {
+            console.warn(`[bulk-delete] Failed to delete ${slug}:`, err);
+            results.push({
+                slug,
+                deleted: false,
+                error: err instanceof Error ? err.message : 'Delete failed',
+            });
+        }
+    }
+    await announceChanges(ctx, results
+        .filter((r) => r.deleted)
+        .map((r) => ({
+        kind: 'document',
+        collection: validated.collection,
+        slug: r.slug,
+        locale,
+        live: true,
+    })));
+    return { status: 200, body: { results, deleted: results.filter((r) => r.deleted).length } };
+};
+//# sourceMappingURL=bulk-delete.js.map

package/dist/handlers/bulk-delete.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"bulk-delete.js","sourceRoot":"","sources":["../../src/handlers/bulk-delete.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAA;AACtD,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAA;AACtD,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAA;AACnD,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAA;AAE/C,OAAO,EAAE,gBAAgB,EAAE,uBAAuB,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAA;AAEjG;;;;GAIG;AACH,MAAM,CAAC,MAAM,UAAU,GAAe,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;IACvD,MAAM,MAAM,GAAG,WAAW,CAAC,GAAG,CAAC,IAAI,EAAE,OAAO,CAAC,CAAA;IAC7C,IAAI,MAAM;QAAE,OAAO,MAAM,CAAA;IAEzB,MAAM,SAAS,GAAG,uBAAuB,CAAC,GAAG,CAAC,MAAM,CAAC,YAAY,CAAC,EAAE,GAAG,CAAC,CAAA;IACxE,IAAI,CAAC,SAAS,CAAC,OAAO;QAAE,OAAO,SAAS,CAAC,QAAQ,CAAA;IAEjD,MAAM,aAAa,GAAG,mBAAmB,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;IACnD,IAAI,CAAC,aAAa,CAAC,OAAO;QAAE,OAAO,aAAa,CAAC,QAAQ,CAAA;IAEzD,MAAM,KAAK,GAAG,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;IACzC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAChD,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,qDAAqD,EAAE,EAAE,CAAA;IAChG,CAAC;IAED,MAAM,eAAe,GAAG,aAAa,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;IACpD,MAAM,MAAM,GACV,eAAe,KAAK,SAAS;QAC3B,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,aAAa;QAC/B,CAAC,CAAC,gBAAgB,CAAC,OAAO,eAAe,KAAK,QAAQ,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,SAAS,CAAC,CAAA;IACzF,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QACzB,OAAO;YACL,MAAM,EAAE,GAAG;YACX,IAAI,EAAE,EAAE,KAAK,EAAE,yDAAyD,EAAE;SAC3E,CAAA;IACH,CAAC;IAED,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;QAClC,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,wCAAwC,EAAE,EAAE,CAAA;IACnF,CAAC;IAED,MAAM,OAAO,GAA8D,EAAE,CAAA;IAE7E,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,OAAO,IAAI,KAAK,QAAQ;YAAE,SAAQ;QACtC,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,GAAG,EAAE,EAAE,UAAU,EAAE,SAAS,CAAC,UAAU,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAA;QAC3F,IAAI,MAAM,EAAE,CAAC;YACX,MAAM,KAAK,GAAI,MAAM,CAAC,IAA0B,CAAC,KAAK,CAAA;YACtD,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAA;YAC7C,SAAQ;QACV,CAAC;QACD,IAAI,CAAC;YACH,MAAM,GAAG,CAAC,OAAO,CAAC,aAAa,CAAC,SAAS,CAAC,UAAU,EAAE,IAAI,EAAE,MAAM,CAAC,CAAA;YACnE,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAA;QACvC,CAAC;QAAC,OAAO,GAAY,EAAE,CAAC;YACtB,OAAO,CAAC,IAAI,CAAC,kCAAkC,IAAI,GAAG,EAAE,GAAG,CAAC,CAAA;YAC5D,OAAO,CAAC,IAAI,CAAC;gBACX,IAAI;gBACJ,OAAO,EAAE,KAAK;gBACd,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe;aAC5D,CAAC,CAAA;QACJ,CAAC;IACH,CAAC;IAED,MAAM,eAAe,CACnB,GAAG,EACH,OAAO;SACJ,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC;SACxB,GAAG,CACF,CAAC,CAAC,EAAE,EAAE,CACJ,CAAC;QACC,IAAI,EAAE,UAAU;QAChB,UAAU,EAAE,SAAS,CAAC,UAAU;QAChC,IAAI,EAAE,CAAC,CAAC,IAAI;QACZ,MAAM;QACN,IAAI,EAAE,IAAI;KACX,CAAU,CACd,CACJ,CAAA;IAED,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,EAAE,CAAA;AAC7F,CAAC,CAAA"}

package/dist/handlers/bulk-publish.d.ts

@@ -0,0 +1,8 @@
+import type { ApiHandler } from '../types.js';
+/**
+ * POST /api/content/:collection/bulk-publish — publish the current version of
+ * each slug in `slugs`, in `locale` (the site's default locale when absent).
+ * Each document is published on its own; one that fails does not stop the rest.
+ */
+export declare const bulkPublish: ApiHandler;
+//# sourceMappingURL=bulk-publish.d.ts.map

package/dist/handlers/bulk-publish.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"bulk-publish.d.ts","sourceRoot":"","sources":["../../src/handlers/bulk-publish.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AAG7C;;;;GAIG;AACH,eAAO,MAAM,WAAW,EAAE,UAwCzB,CAAA"}

package/dist/handlers/bulk-publish.js

@@ -0,0 +1,48 @@
+import { changePublication } from '../document-actions.js';
+import { changedByFromAuth, requireRole } from '../permissions.js';
+import { validateCollectionParam, validateRequestBody } from '../validators.js';
+/**
+ * POST /api/content/:collection/bulk-publish — publish the current version of
+ * each slug in `slugs`, in `locale` (the site's default locale when absent).
+ * Each document is published on its own; one that fails does not stop the rest.
+ */
+export const bulkPublish = async (req, ctx) => {
+    const denied = requireRole(ctx.auth, 'editor');
+    if (denied)
+        return denied;
+    const validated = validateCollectionParam(req.params['collection'], ctx);
+    if (!validated.isValid)
+        return validated.response;
+    const bodyValidated = validateRequestBody(req.body);
+    if (!bodyValidated.isValid)
+        return bodyValidated.response;
+    const slugs = bodyValidated.body['slugs'];
+    if (!Array.isArray(slugs) || slugs.length === 0) {
+        return { status: 400, body: { error: 'Request body must include a non-empty "slugs" array' } };
+    }
+    const requestedLocale = bodyValidated.body['locale'];
+    const locale = typeof requestedLocale === 'string' ? requestedLocale : ctx.config.site.defaultLocale;
+    const changedBy = changedByFromAuth(ctx.auth);
+    const results = [];
+    for (const slug of slugs) {
+        if (typeof slug !== 'string')
+            continue;
+        const target = { collection: validated.collection, slug, locale };
+        const response = await changePublication(ctx, target, 'publish', changedBy);
+        if (response.status === 200) {
+            results.push({ slug, published: true });
+            continue;
+        }
+        const error = response.body?.error;
+        results.push({
+            slug,
+            published: false,
+            error: typeof error === 'string' ? error : 'Publish failed',
+        });
+    }
+    return {
+        status: 200,
+        body: { results, published: results.filter((r) => r.published).length },
+    };
+};
+//# sourceMappingURL=bulk-publish.js.map

package/dist/handlers/bulk-publish.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"bulk-publish.js","sourceRoot":"","sources":["../../src/handlers/bulk-publish.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAA;AAC1D,OAAO,EAAE,iBAAiB,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAA;AAElE,OAAO,EAAE,uBAAuB,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAA;AAE/E;;;;GAIG;AACH,MAAM,CAAC,MAAM,WAAW,GAAe,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;IACxD,MAAM,MAAM,GAAG,WAAW,CAAC,GAAG,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAA;IAC9C,IAAI,MAAM;QAAE,OAAO,MAAM,CAAA;IAEzB,MAAM,SAAS,GAAG,uBAAuB,CAAC,GAAG,CAAC,MAAM,CAAC,YAAY,CAAC,EAAE,GAAG,CAAC,CAAA;IACxE,IAAI,CAAC,SAAS,CAAC,OAAO;QAAE,OAAO,SAAS,CAAC,QAAQ,CAAA;IAEjD,MAAM,aAAa,GAAG,mBAAmB,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;IACnD,IAAI,CAAC,aAAa,CAAC,OAAO;QAAE,OAAO,aAAa,CAAC,QAAQ,CAAA;IAEzD,MAAM,KAAK,GAAG,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;IACzC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAChD,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,qDAAqD,EAAE,EAAE,CAAA;IAChG,CAAC;IACD,MAAM,eAAe,GAAG,aAAa,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;IACpD,MAAM,MAAM,GACV,OAAO,eAAe,KAAK,QAAQ,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,aAAa,CAAA;IACvF,MAAM,SAAS,GAAG,iBAAiB,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;IAE7C,MAAM,OAAO,GAAgE,EAAE,CAAA;IAC/E,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,OAAO,IAAI,KAAK,QAAQ;YAAE,SAAQ;QACtC,MAAM,MAAM,GAAG,EAAE,UAAU,EAAE,SAAS,CAAC,UAAU,EAAE,IAAI,EAAE,MAAM,EAAE,CAAA;QACjE,MAAM,QAAQ,GAAG,MAAM,iBAAiB,CAAC,GAAG,EAAE,MAAM,EAAE,SAAS,EAAE,SAAS,CAAC,CAAA;QAC3E,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;YAC5B,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;YACvC,SAAQ;QACV,CAAC;QACD,MAAM,KAAK,GAAI,QAAQ,CAAC,IAAwC,EAAE,KAAK,CAAA;QACvE,OAAO,CAAC,IAAI,CAAC;YACX,IAAI;YACJ,SAAS,EAAE,KAAK;YAChB,KAAK,EAAE,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,gBAAgB;SAC5D,CAAC,CAAA;IACJ,CAAC;IAED,OAAO;QACL,MAAM,EAAE,GAAG;QACX,IAAI,EAAE,EAAE,OAAO,EAAE,SAAS,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,MAAM,EAAE;KACxE,CAAA;AACH,CAAC,CAAA"}

package/dist/handlers/capabilities.d.ts

@@ -0,0 +1,4 @@
+import type { ApiHandler } from '../types.js';
+/** GET /api/capabilities — runtime feature detection */
+export declare const capabilities: ApiHandler;
+//# sourceMappingURL=capabilities.d.ts.map

package/dist/handlers/capabilities.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"capabilities.d.ts","sourceRoot":"","sources":["../../src/handlers/capabilities.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAe,MAAM,aAAa,CAAA;AAG1D,wDAAwD;AACxD,eAAO,MAAM,YAAY,EAAE,UA0C1B,CAAA"}

package/dist/handlers/capabilities.js

@@ -0,0 +1,44 @@
+import { hasVersioning } from '../types.js';
+/** GET /api/capabilities — runtime feature detection */
+export const capabilities = async (_req, ctx) => {
+    const persistence = ctx.persistenceType ?? 'filesystem';
+    // Build descriptive capabilities instead of bare booleans
+    const features = {};
+    features.write = typeof ctx.adapter.writeContent === 'function' ? 'enabled' : 'read-only';
+    features.versioning = hasVersioning(ctx.adapter) ? 'append-only' : 'disabled';
+    features.checkpoints = ctx.checkpointAdapter !== undefined ? 'enabled' : 'disabled';
+    features.contentMigration = ctx.contentMigrationAdapter !== undefined ? 'enabled' : 'disabled';
+    // The file store's provider name ('local', 'vercel-blob', 's3', 'gcs')
+    features.media =
+        ctx.mediaStorage === undefined ? 'disabled' : (ctx.config.media.provider ?? 'enabled');
+    features.mediaFolders = ctx.mediaFolderStorage !== undefined ? 'enabled' : 'disabled';
+    features.imageOptimizer = ctx.imageOptimizer !== undefined ? 'sharp' : 'disabled';
+    features.runtimeSchema =
+        typeof ctx.adapter.getRuntimeSchema === 'function' ? 'enabled' : 'disabled';
+    features.webhooks = ctx.fireWebhook !== undefined ? 'enabled' : 'disabled';
+    features.webhookDeliveries = ctx.webhookDeliveryAdapter !== undefined ? 'enabled' : 'disabled';
+    features.seo = ctx.seoConfigAdapter !== undefined ? 'enabled' : 'disabled';
+    // `GET /api/preview` exists: Studio offers Live mode and Open on site
+    features.sitePreview = ctx.sitePreview ?? 'disabled';
+    // Localization is enabled when the site declares more than one supported
+    // locale. Single-locale sites don't need translation tracking — the
+    // /api/translations/status handler already short-circuits in that case,
+    // so hiding the UI matches server behavior.
+    const supportedLocales = ctx.config.site.supportedLocales;
+    features.localization = supportedLocales.length > 1 ? 'enabled' : 'disabled';
+    // Only present when on: Studio treats a missing key as off
+    if (ctx.config.assistant.enabled)
+        features.assistant = 'enabled';
+    return {
+        status: 200,
+        body: {
+            persistence,
+            // The server package hosting the API; null when the API is created without one
+            framework: ctx.framework ?? null,
+            authMode: ctx.config.auth.mode,
+            schemaVersion: ctx.schemaVersion ?? null,
+            features,
+        },
+    };
+};
+//# sourceMappingURL=capabilities.js.map

package/dist/handlers/capabilities.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"capabilities.js","sourceRoot":"","sources":["../../src/handlers/capabilities.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAA;AAE3C,wDAAwD;AACxD,MAAM,CAAC,MAAM,YAAY,GAAe,KAAK,EAAE,IAAI,EAAE,GAAG,EAAwB,EAAE;IAChF,MAAM,WAAW,GAAG,GAAG,CAAC,eAAe,IAAI,YAAY,CAAA;IAEvD,0DAA0D;IAC1D,MAAM,QAAQ,GAA2B,EAAE,CAAA;IAE3C,QAAQ,CAAC,KAAK,GAAG,OAAO,GAAG,CAAC,OAAO,CAAC,YAAY,KAAK,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,WAAW,CAAA;IACzF,QAAQ,CAAC,UAAU,GAAG,aAAa,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,UAAU,CAAA;IAC7E,QAAQ,CAAC,WAAW,GAAG,GAAG,CAAC,iBAAiB,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU,CAAA;IACnF,QAAQ,CAAC,gBAAgB,GAAG,GAAG,CAAC,uBAAuB,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU,CAAA;IAC9F,uEAAuE;IACvE,QAAQ,CAAC,KAAK;QACZ,GAAG,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,IAAI,SAAS,CAAC,CAAA;IACxF,QAAQ,CAAC,YAAY,GAAG,GAAG,CAAC,kBAAkB,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU,CAAA;IACrF,QAAQ,CAAC,cAAc,GAAG,GAAG,CAAC,cAAc,KAAK,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,UAAU,CAAA;IACjF,QAAQ,CAAC,aAAa;QACpB,OAAO,GAAG,CAAC,OAAO,CAAC,gBAAgB,KAAK,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU,CAAA;IAC7E,QAAQ,CAAC,QAAQ,GAAG,GAAG,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU,CAAA;IAC1E,QAAQ,CAAC,iBAAiB,GAAG,GAAG,CAAC,sBAAsB,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU,CAAA;IAC9F,QAAQ,CAAC,GAAG,GAAG,GAAG,CAAC,gBAAgB,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU,CAAA;IAC1E,sEAAsE;IACtE,QAAQ,CAAC,WAAW,GAAG,GAAG,CAAC,WAAW,IAAI,UAAU,CAAA;IACpD,yEAAyE;IACzE,oEAAoE;IACpE,wEAAwE;IACxE,4CAA4C;IAC5C,MAAM,gBAAgB,GAAG,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,gBAAgB,CAAA;IACzD,QAAQ,CAAC,YAAY,GAAG,gBAAgB,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU,CAAA;IAC5E,2DAA2D;IAC3D,IAAI,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,OAAO;QAAE,QAAQ,CAAC,SAAS,GAAG,SAAS,CAAA;IAEhE,OAAO;QACL,MAAM,EAAE,GAAG;QACX,IAAI,EAAE;YACJ,WAAW;YACX,+EAA+E;YAC/E,SAAS,EAAE,GAAG,CAAC,SAAS,IAAI,IAAI;YAChC,QAAQ,EAAE,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI;YAC9B,aAAa,EAAE,GAAG,CAAC,aAAa,IAAI,IAAI;YACxC,QAAQ;SACT;KACF,CAAA;AACH,CAAC,CAAA"}

package/dist/handlers/content-changes.d.ts

@@ -0,0 +1,28 @@
+import type { ApiHandler } from '../types.js';
+/**
+ * `GET /api/changes` — what production's editors changed since the last content import, as the
+ * repository files a pull writes. Published content only: a draft stays in the database until
+ * it is published, so a pull never publishes anything.
+ *
+ * A document is a change when the checksum of its live version differs from the checksum the
+ * database took from the repository's file at the last import (`content_manifest`). Only
+ * documents whose live version was not imported from a file are read in full, so a site that
+ * few people edit reads little.
+ */
+/** One file a pull writes, changes or removes */
+export interface ContentChange {
+    action: 'add' | 'edit' | 'delete';
+    collection: string;
+    slug: string;
+    locale: string;
+    /** The file's path relative to the content directory, with forward slashes */
+    path: string;
+    /** The checksum the database took from the repository's file, null for a new document */
+    baselineChecksum: string | null;
+    /** The checksum of production's version, null for a deletion */
+    checksum: string | null;
+    /** The file to write, null for a deletion */
+    content: string | null;
+}
+export declare const contentChanges: ApiHandler;
+//# sourceMappingURL=content-changes.d.ts.map

package/dist/handlers/content-changes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"content-changes.d.ts","sourceRoot":"","sources":["../../src/handlers/content-changes.ts"],"names":[],"mappings":"AAWA,OAAO,KAAK,EAAc,UAAU,EAAE,MAAM,aAAa,CAAA;AAGzD;;;;;;;;;GASG;AAEH,iDAAiD;AACjD,MAAM,WAAW,aAAa;IAC5B,MAAM,EAAE,KAAK,GAAG,MAAM,GAAG,QAAQ,CAAA;IACjC,UAAU,EAAE,MAAM,CAAA;IAClB,IAAI,EAAE,MAAM,CAAA;IACZ,MAAM,EAAE,MAAM,CAAA;IACd,8EAA8E;IAC9E,IAAI,EAAE,MAAM,CAAA;IACZ,yFAAyF;IACzF,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAA;IAC/B,gEAAgE;IAChE,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAA;IACvB,6CAA6C;IAC7C,OAAO,EAAE,MAAM,GAAG,IAAI,CAAA;CACvB;AAoHD,eAAO,MAAM,cAAc,EAAE,UA0C5B,CAAA"}