@kywi-software/core 0.1.0

package/dist/api/comment-routes.js

@@ -0,0 +1,255 @@
+import { z } from 'zod';
+import { createCommentHookDispatcher } from '../hooks/dispatch.js';
+import { resolveAuth } from './auth.js';
+import { toSiteUuid } from './site-context.js';
+import { hasMinRole } from '../auth/roles.js';
+import { listComments, listSiteComments, getCommentById, createComment, updateComment, updateCommentStatus, deleteComment, flagComment, unflagComment, } from '../db/comment-queries.js';
+import { isSpam } from '../comments/spam-filter.js';
+import { getContentById } from '../db/content-queries.js';
+import { jsonOk, jsonError, notFound, unauthorized, forbidden, validationError } from './response.js';
+import { listSubscribers } from '../db/comment-subscription-queries.js';
+import { sendTemplatedEmail, COMMENT_NOTIFICATION_TEMPLATE } from '../email/index.js';
+const createCommentSchema = z.object({
+    body: z.string().min(1),
+    parentId: z.string().optional(),
+    authorName: z.string().optional(),
+    authorEmail: z.string().optional(),
+});
+const updateCommentSchema = z.object({
+    body: z.string().min(1).optional(),
+    status: z.string().optional(),
+});
+export function registerCommentRoutes(router, ctx) {
+    const { db, authSecret } = ctx;
+    const commentHooks = createCommentHookDispatcher(ctx.hookRegistry);
+    // GET /content/:type/:id/comments — list comments on content
+    router.get('/content/:type/:id/comments', async (req, params) => {
+        const auth = await resolveAuth(req.headers.get('authorization'), authSecret, db);
+        const isEditor = auth.user !== null && hasMinRole(auth.user.role, 'editor');
+        const url = new URL(req.url);
+        const statusParam = url.searchParams.get('status') ?? undefined;
+        let status;
+        if (isEditor) {
+            status = statusParam;
+        }
+        else {
+            status = 'approved';
+        }
+        const comments = await listComments(db, params.id, status);
+        return jsonOk(comments);
+    });
+    // POST /content/:type/:id/comments — create comment
+    router.post('/content/:type/:id/comments', async (req, params) => {
+        const auth = await resolveAuth(req.headers.get('authorization'), authSecret, db);
+        let body;
+        try {
+            body = await req.json();
+        }
+        catch {
+            return jsonError('BAD_REQUEST', 'Invalid JSON body', 400);
+        }
+        const parsed = createCommentSchema.safeParse(body);
+        if (!parsed.success) {
+            return validationError(parsed.error.errors.map(e => ({ path: e.path.join('.'), message: e.message })));
+        }
+        const content = await getContentById(db, null, params.id);
+        if (!content)
+            return notFound('Content not found');
+        // Enforce commentable flag on content type
+        const contentTypeName = content.contentTypeName;
+        const contentTypeConfig = ctx.config.contentTypes.find(ct => ct.name === contentTypeName);
+        if (contentTypeConfig && contentTypeConfig.commentable === false) {
+            return jsonError('FORBIDDEN', 'Comments are not allowed on this content type', 403);
+        }
+        if (isSpam(parsed.data.body)) {
+            return jsonError('SPAM_REJECTED', 'Comment rejected as spam', 400);
+        }
+        const commentData = {
+            siteId: content.siteId,
+            contentId: params.id,
+            body: parsed.data.body,
+            status: 'pending',
+        };
+        if (parsed.data.parentId !== undefined) {
+            commentData.parentId = parsed.data.parentId;
+        }
+        if (auth.user !== null) {
+            commentData.authorId = auth.user.id;
+        }
+        if (parsed.data.authorName !== undefined) {
+            commentData.authorName = parsed.data.authorName;
+        }
+        if (parsed.data.authorEmail !== undefined) {
+            commentData.authorEmail = parsed.data.authorEmail;
+        }
+        const comment = await createComment(db, commentData);
+        await commentHooks.afterCreate(comment);
+        // W6: send email notifications to subscribers
+        if (ctx.emailProvider) {
+            try {
+                const subscribers = await listSubscribers(db, params.id);
+                const authorEmail = parsed.data.authorEmail ?? (auth.user ? auth.user.id : undefined);
+                const contentTitle = content.title ?? 'Untitled';
+                const siteName = ctx.config.sites[0]?.name ?? 'Kywi';
+                const baseUrl = ctx.baseUrl ?? 'http://localhost:3000';
+                const contentUrl = `${baseUrl}/content/${params.id}`;
+                for (const sub of subscribers) {
+                    // Skip the comment author
+                    if (authorEmail && sub.email === authorEmail)
+                        continue;
+                    await sendTemplatedEmail(ctx.emailProvider, {
+                        to: sub.email,
+                        subject: `New comment on "${contentTitle}"`,
+                        template: COMMENT_NOTIFICATION_TEMPLATE,
+                        vars: {
+                            contentTitle,
+                            commentAuthor: parsed.data.authorName ?? 'Someone',
+                            commentBody: parsed.data.body,
+                            siteName,
+                            contentUrl,
+                        },
+                    });
+                }
+            }
+            catch {
+                // Email delivery failures should not block comment creation
+            }
+        }
+        return jsonOk(comment, 201);
+    });
+    // GET /comments — list all site comments (auth+editor)
+    router.get('/comments', async (req) => {
+        const auth = await resolveAuth(req.headers.get('authorization'), authSecret, db);
+        if (!auth.user)
+            return unauthorized();
+        if (!hasMinRole(auth.user.role, 'editor'))
+            return forbidden();
+        const url = new URL(req.url);
+        const statusParam = url.searchParams.get('status') ?? undefined;
+        const siteId = await toSiteUuid(db, url.searchParams.get('siteId'), ctx.config);
+        if (!siteId)
+            return jsonError('BAD_REQUEST', 'No site ID available', 400);
+        const comments = await listSiteComments(db, siteId, statusParam);
+        return jsonOk(comments);
+    });
+    // GET /comments/:id — get single comment
+    router.get('/comments/:id', async (req, params) => {
+        const auth = await resolveAuth(req.headers.get('authorization'), authSecret, db);
+        const siteId = await toSiteUuid(db, new URL(req.url).searchParams.get('siteId'), ctx.config);
+        const comment = await getCommentById(db, params.id, siteId);
+        if (!comment)
+            return notFound('Comment not found');
+        const isApproved = comment.status === 'approved';
+        if (!isApproved) {
+            if (!auth.user)
+                return unauthorized();
+            if (!hasMinRole(auth.user.role, 'editor'))
+                return forbidden();
+        }
+        return jsonOk(comment);
+    });
+    // PUT /comments/:id — update comment body/status
+    router.put('/comments/:id', async (req, params) => {
+        const auth = await resolveAuth(req.headers.get('authorization'), authSecret, db);
+        if (!auth.user)
+            return unauthorized();
+        const siteId = await toSiteUuid(db, new URL(req.url).searchParams.get('siteId'), ctx.config);
+        const comment = await getCommentById(db, params.id, siteId);
+        if (!comment)
+            return notFound('Comment not found');
+        const isOwner = comment.authorId === auth.user.id;
+        const isEditor = hasMinRole(auth.user.role, 'editor');
+        if (!isOwner && !isEditor)
+            return forbidden();
+        let body;
+        try {
+            body = await req.json();
+        }
+        catch {
+            return jsonError('BAD_REQUEST', 'Invalid JSON body', 400);
+        }
+        const parsed = updateCommentSchema.safeParse(body);
+        if (!parsed.success) {
+            return validationError(parsed.error.errors.map(e => ({ path: e.path.join('.'), message: e.message })));
+        }
+        const updateData = {};
+        if (parsed.data.body !== undefined) {
+            updateData.body = parsed.data.body;
+        }
+        if (parsed.data.status !== undefined) {
+            updateData.status = parsed.data.status;
+        }
+        const updated = await updateComment(db, params.id, updateData, siteId);
+        if (!updated)
+            return notFound('Comment not found');
+        await commentHooks.afterUpdate(updated);
+        return jsonOk(updated);
+    });
+    // POST /comments/:id/approve — approve comment (auth+editor)
+    router.post('/comments/:id/approve', async (req, params) => {
+        const auth = await resolveAuth(req.headers.get('authorization'), authSecret, db);
+        if (!auth.user)
+            return unauthorized();
+        if (!hasMinRole(auth.user.role, 'editor'))
+            return forbidden();
+        const siteId = await toSiteUuid(db, new URL(req.url).searchParams.get('siteId'), ctx.config);
+        const updated = await updateCommentStatus(db, params.id, 'approved', siteId);
+        if (!updated)
+            return notFound('Comment not found');
+        await commentHooks.afterApprove(updated);
+        return jsonOk(updated);
+    });
+    // POST /comments/:id/spam — mark as spam (auth+editor)
+    router.post('/comments/:id/spam', async (req, params) => {
+        const auth = await resolveAuth(req.headers.get('authorization'), authSecret, db);
+        if (!auth.user)
+            return unauthorized();
+        if (!hasMinRole(auth.user.role, 'editor'))
+            return forbidden();
+        const siteId = await toSiteUuid(db, new URL(req.url).searchParams.get('siteId'), ctx.config);
+        const updated = await updateCommentStatus(db, params.id, 'spam', siteId);
+        if (!updated)
+            return notFound('Comment not found');
+        await commentHooks.afterSpam(updated);
+        return jsonOk(updated);
+    });
+    // POST /comments/:id/flag — flag comment (auth required, any role)
+    router.post('/comments/:id/flag', async (req, params) => {
+        const auth = await resolveAuth(req.headers.get('authorization'), authSecret, db);
+        if (!auth.user)
+            return unauthorized();
+        const siteId = await toSiteUuid(db, new URL(req.url).searchParams.get('siteId'), ctx.config);
+        const flagged = await flagComment(db, params.id, siteId);
+        if (!flagged)
+            return notFound('Comment not found');
+        return jsonOk({ flagged: true });
+    });
+    // POST /comments/:id/unflag — unflag comment (auth + editor)
+    router.post('/comments/:id/unflag', async (req, params) => {
+        const auth = await resolveAuth(req.headers.get('authorization'), authSecret, db);
+        if (!auth.user)
+            return unauthorized();
+        if (!hasMinRole(auth.user.role, 'editor'))
+            return forbidden();
+        const siteId = await toSiteUuid(db, new URL(req.url).searchParams.get('siteId'), ctx.config);
+        const unflagged = await unflagComment(db, params.id, siteId);
+        if (!unflagged)
+            return notFound('Comment not found');
+        return jsonOk({ flagged: false });
+    });
+    // DELETE /comments/:id — soft delete (auth+editor)
+    router.delete('/comments/:id', async (req, params) => {
+        const auth = await resolveAuth(req.headers.get('authorization'), authSecret, db);
+        if (!auth.user)
+            return unauthorized();
+        if (!hasMinRole(auth.user.role, 'editor'))
+            return forbidden();
+        const siteId = await toSiteUuid(db, new URL(req.url).searchParams.get('siteId'), ctx.config);
+        const deleted = await deleteComment(db, params.id, siteId);
+        if (!deleted)
+            return notFound('Comment not found');
+        await commentHooks.afterDelete({ id: params.id });
+        return jsonOk({ deleted: true });
+    });
+}
+//# sourceMappingURL=comment-routes.js.map

package/dist/api/comment-routes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"comment-routes.js","sourceRoot":"","sources":["../../src/api/comment-routes.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AAKvB,OAAO,EAAE,2BAA2B,EAAE,MAAM,sBAAsB,CAAA;AAClE,OAAO,EAAE,WAAW,EAAE,MAAM,WAAW,CAAA;AACvC,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAA;AAC9C,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAA;AAC7C,OAAO,EACL,YAAY,EACZ,gBAAgB,EAChB,cAAc,EACd,aAAa,EACb,aAAa,EACb,mBAAmB,EACnB,aAAa,EACb,WAAW,EACX,aAAa,GACd,MAAM,0BAA0B,CAAA;AACjC,OAAO,EAAE,MAAM,EAAE,MAAM,4BAA4B,CAAA;AACnD,OAAO,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAA;AACzD,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,YAAY,EAAE,SAAS,EAAE,eAAe,EAAE,MAAM,eAAe,CAAA;AACrG,OAAO,EAAE,eAAe,EAAE,MAAM,uCAAuC,CAAA;AACvE,OAAO,EAAE,kBAAkB,EAAE,6BAA6B,EAAE,MAAM,mBAAmB,CAAA;AAYrF,MAAM,mBAAmB,GAAG,CAAC,CAAC,MAAM,CAAC;IACnC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACvB,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC/B,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACjC,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CACnC,CAAC,CAAA;AAEF,MAAM,mBAAmB,GAAG,CAAC,CAAC,MAAM,CAAC;IACnC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IAClC,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAC9B,CAAC,CAAA;AAEF,MAAM,UAAU,qBAAqB,CAAC,MAAc,EAAE,GAAwB;IAC5E,MAAM,EAAE,EAAE,EAAE,UAAU,EAAE,GAAG,GAAG,CAAA;IAC9B,MAAM,YAAY,GAAG,2BAA2B,CAAC,GAAG,CAAC,YAAY,CAAC,CAAA;IAElE,6DAA6D;IAC7D,MAAM,CAAC,GAAG,CAAC,6BAA6B,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE;QAC9D,MAAM,IAAI,GAAG,MAAM,WAAW,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,EAAE,UAAU,EAAE,EAAE,CAAC,CAAA;QAChF,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,KAAK,IAAI,IAAI,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAA;QAE3E,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;QAC5B,MAAM,WAAW,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,SAAS,CAAA;QAE/D,IAAI,MAA0B,CAAA;QAC9B,IAAI,QAAQ,EAAE,CAAC;YACb,MAAM,GAAG,WAAW,CAAA;QACtB,CAAC;aAAM,CAAC;YACN,MAAM,GAAG,UAAU,CAAA;QACrB,CAAC;QAED,MAAM,QAAQ,GAAG,MAAM,YAAY,CAAC,EAAE,EAAE,MAAM,CAAC,EAAG,EAAE,MAAM,CAAC,CAAA;QAC3D,OAAO,MAAM,CAAC,QAAQ,CAAC,CAAA;IACzB,CAAC,CAAC,CAAA;IAEF,oDAAoD;IACpD,MAAM,CAAC,IAAI,CAAC,6BAA6B,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE;QAC/D,MAAM,IAAI,GAAG,MAAM,WAAW,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,EAAE,UAAU,EAAE,EAAE,CAAC,CAAA;QAEhF,IAAI,IAAa,CAAA;QACjB,IAAI,CAAC;YACH,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAA;QACzB,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,SAAS,CAAC,aAAa,EAAE,mBAAmB,EAAE,GAAG,CAAC,CAAA;QAC3D,CAAC;QAED,MAAM,MAAM,GAAG,mBAAmB,CAAC,SAAS,CAAC,IAAI,CAAC,CAAA;QAClD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,OAAO,eAAe,CACpB,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAC/E,CAAA;QACH,CAAC;QAED,MAAM,OAAO,GAAG,MAAM,cAAc,CAAC,EAAE,EAAE,IAAI,EAAE,MAAM,CAAC,EAAG,CAAC,CAAA;QAC1D,IAAI,CAAC,OAAO;YAAE,OAAO,QAAQ,CAAC,mBAAmB,CAAC,CAAA;QAElD,2CAA2C;QAC3C,MAAM,eAAe,GAAI,OAAe,CAAC,eAAyB,CAAA;QAClE,MAAM,iBAAiB,GAAG,GAAG,CAAC,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,IAAI,KAAK,eAAe,CAAC,CAAA;QACzF,IAAI,iBAAiB,IAAI,iBAAiB,CAAC,WAAW,KAAK,KAAK,EAAE,CAAC;YACjE,OAAO,SAAS,CAAC,WAAW,EAAE,+CAA+C,EAAE,GAAG,CAAC,CAAA;QACrF,CAAC;QAED,IAAI,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YAC7B,OAAO,SAAS,CAAC,eAAe,EAAE,0BAA0B,EAAE,GAAG,CAAC,CAAA;QACpE,CAAC;QAED,MAAM,WAAW,GAAwC;YACvD,MAAM,EAAE,OAAO,CAAC,MAAgB;YAChC,SAAS,EAAE,MAAM,CAAC,EAAG;YACrB,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI;YACtB,MAAM,EAAE,SAAS;SAClB,CAAA;QAED,IAAI,MAAM,CAAC,IAAI,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;YACvC,WAAW,CAAC,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAA;QAC7C,CAAC;QACD,IAAI,IAAI,CAAC,IAAI,KAAK,IAAI,EAAE,CAAC;YACvB,WAAW,CAAC,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,CAAA;QACrC,CAAC;QACD,IAAI,MAAM,CAAC,IAAI,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;YACzC,WAAW,CAAC,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,UAAU,CAAA;QACjD,CAAC;QACD,IAAI,MAAM,CAAC,IAAI,CAAC,WAAW,KAAK,SAAS,EAAE,CAAC;YAC1C,WAAW,CAAC,WAAW,GAAG,MAAM,CAAC,IAAI,CAAC,WAAW,CAAA;QACnD,CAAC;QAED,MAAM,OAAO,GAAG,MAAM,aAAa,CAAC,EAAE,EAAE,WAAW,CAAC,CAAA;QACpD,MAAM,YAAY,CAAC,WAAW,CAAC,OAAO,CAAC,CAAA;QAEvC,8CAA8C;QAC9C,IAAI,GAAG,CAAC,aAAa,EAAE,CAAC;YACtB,IAAI,CAAC;gBACH,MAAM,WAAW,GAAG,MAAM,eAAe,CAAC,EAAE,EAAE,MAAM,CAAC,EAAG,CAAC,CAAA;gBACzD,MAAM,WAAW,GAAG,MAAM,CAAC,IAAI,CAAC,WAAW,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAA;gBACrF,MAAM,YAAY,GAAI,OAAmC,CAAC,KAAe,IAAI,UAAU,CAAA;gBACvF,MAAM,QAAQ,GAAG,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,IAAI,IAAI,MAAM,CAAA;gBACpD,MAAM,OAAO,GAAG,GAAG,CAAC,OAAO,IAAI,uBAAuB,CAAA;gBACtD,MAAM,UAAU,GAAG,GAAG,OAAO,YAAY,MAAM,CAAC,EAAG,EAAE,CAAA;gBAErD,KAAK,MAAM,GAAG,IAAI,WAAW,EAAE,CAAC;oBAC9B,0BAA0B;oBAC1B,IAAI,WAAW,IAAI,GAAG,CAAC,KAAK,KAAK,WAAW;wBAAE,SAAQ;oBAEtD,MAAM,kBAAkB,CAAC,GAAG,CAAC,aAAa,EAAE;wBAC1C,EAAE,EAAE,GAAG,CAAC,KAAK;wBACb,OAAO,EAAE,mBAAmB,YAAY,GAAG;wBAC3C,QAAQ,EAAE,6BAA6B;wBACvC,IAAI,EAAE;4BACJ,YAAY;4BACZ,aAAa,EAAE,MAAM,CAAC,IAAI,CAAC,UAAU,IAAI,SAAS;4BAClD,WAAW,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI;4BAC7B,QAAQ;4BACR,UAAU;yBACX;qBACF,CAAC,CAAA;gBACJ,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,4DAA4D;YAC9D,CAAC;QACH,CAAC;QAED,OAAO,MAAM,CAAC,OAAO,EAAE,GAAG,CAAC,CAAA;IAC7B,CAAC,CAAC,CAAA;IAEF,uDAAuD;IACvD,MAAM,CAAC,GAAG,CAAC,WAAW,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;QACpC,MAAM,IAAI,GAAG,MAAM,WAAW,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,EAAE,UAAU,EAAE,EAAE,CAAC,CAAA;QAChF,IAAI,CAAC,IAAI,CAAC,IAAI;YAAE,OAAO,YAAY,EAAE,CAAA;QACrC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC;YAAE,OAAO,SAAS,EAAE,CAAA;QAE7D,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;QAC5B,MAAM,WAAW,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,SAAS,CAAA;QAC/D,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,EAAE,EAAE,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,GAAG,CAAC,MAAM,CAAC,CAAA;QAC/E,IAAI,CAAC,MAAM;YAAE,OAAO,SAAS,CAAC,aAAa,EAAE,sBAAsB,EAAE,GAAG,CAAC,CAAA;QAEzE,MAAM,QAAQ,GAAG,MAAM,gBAAgB,CAAC,EAAE,EAAE,MAAM,EAAE,WAAW,CAAC,CAAA;QAChE,OAAO,MAAM,CAAC,QAAQ,CAAC,CAAA;IACzB,CAAC,CAAC,CAAA;IAEF,yCAAyC;IACzC,MAAM,CAAC,GAAG,CAAC,eAAe,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE;QAChD,MAAM,IAAI,GAAG,MAAM,WAAW,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,EAAE,UAAU,EAAE,EAAE,CAAC,CAAA;QAEhF,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,EAAE,EAAE,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,GAAG,CAAC,MAAM,CAAC,CAAA;QAC5F,MAAM,OAAO,GAAG,MAAM,cAAc,CAAC,EAAE,EAAE,MAAM,CAAC,EAAG,EAAE,MAAM,CAAC,CAAA;QAC5D,IAAI,CAAC,OAAO;YAAE,OAAO,QAAQ,CAAC,mBAAmB,CAAC,CAAA;QAElD,MAAM,UAAU,GAAG,OAAO,CAAC,MAAM,KAAK,UAAU,CAAA;QAChD,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,IAAI,CAAC,IAAI,CAAC,IAAI;gBAAE,OAAO,YAAY,EAAE,CAAA;YACrC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC;gBAAE,OAAO,SAAS,EAAE,CAAA;QAC/D,CAAC;QAED,OAAO,MAAM,CAAC,OAAO,CAAC,CAAA;IACxB,CAAC,CAAC,CAAA;IAEF,iDAAiD;IACjD,MAAM,CAAC,GAAG,CAAC,eAAe,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE;QAChD,MAAM,IAAI,GAAG,MAAM,WAAW,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,EAAE,UAAU,EAAE,EAAE,CAAC,CAAA;QAChF,IAAI,CAAC,IAAI,CAAC,IAAI;YAAE,OAAO,YAAY,EAAE,CAAA;QAErC,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,EAAE,EAAE,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,GAAG,CAAC,MAAM,CAAC,CAAA;QAC5F,MAAM,OAAO,GAAG,MAAM,cAAc,CAAC,EAAE,EAAE,MAAM,CAAC,EAAG,EAAE,MAAM,CAAC,CAAA;QAC5D,IAAI,CAAC,OAAO;YAAE,OAAO,QAAQ,CAAC,mBAAmB,CAAC,CAAA;QAElD,MAAM,OAAO,GAAG,OAAO,CAAC,QAAQ,KAAK,IAAI,CAAC,IAAI,CAAC,EAAE,CAAA;QACjD,MAAM,QAAQ,GAAG,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAA;QACrD,IAAI,CAAC,OAAO,IAAI,CAAC,QAAQ;YAAE,OAAO,SAAS,EAAE,CAAA;QAE7C,IAAI,IAAa,CAAA;QACjB,IAAI,CAAC;YACH,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAA;QACzB,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,SAAS,CAAC,aAAa,EAAE,mBAAmB,EAAE,GAAG,CAAC,CAAA;QAC3D,CAAC;QAED,MAAM,MAAM,GAAG,mBAAmB,CAAC,SAAS,CAAC,IAAI,CAAC,CAAA;QAClD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,OAAO,eAAe,CACpB,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAC/E,CAAA;QACH,CAAC;QAED,MAAM,UAAU,GAAwC,EAAE,CAAA;QAC1D,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YACnC,UAAU,CAAC,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAA;QACpC,CAAC;QACD,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YACrC,UAAU,CAAC,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAA;QACxC,CAAC;QAED,MAAM,OAAO,GAAG,MAAM,aAAa,CAAC,EAAE,EAAE,MAAM,CAAC,EAAG,EAAE,UAAU,EAAE,MAAM,CAAC,CAAA;QACvE,IAAI,CAAC,OAAO;YAAE,OAAO,QAAQ,CAAC,mBAAmB,CAAC,CAAA;QAElD,MAAM,YAAY,CAAC,WAAW,CAAC,OAAO,CAAC,CAAA;QACvC,OAAO,MAAM,CAAC,OAAO,CAAC,CAAA;IACxB,CAAC,CAAC,CAAA;IAEF,6DAA6D;IAC7D,MAAM,CAAC,IAAI,CAAC,uBAAuB,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE;QACzD,MAAM,IAAI,GAAG,MAAM,WAAW,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,EAAE,UAAU,EAAE,EAAE,CAAC,CAAA;QAChF,IAAI,CAAC,IAAI,CAAC,IAAI;YAAE,OAAO,YAAY,EAAE,CAAA;QACrC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC;YAAE,OAAO,SAAS,EAAE,CAAA;QAE7D,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,EAAE,EAAE,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,GAAG,CAAC,MAAM,CAAC,CAAA;QAC5F,MAAM,OAAO,GAAG,MAAM,mBAAmB,CAAC,EAAE,EAAE,MAAM,CAAC,EAAG,EAAE,UAAU,EAAE,MAAM,CAAC,CAAA;QAC7E,IAAI,CAAC,OAAO;YAAE,OAAO,QAAQ,CAAC,mBAAmB,CAAC,CAAA;QAElD,MAAM,YAAY,CAAC,YAAY,CAAC,OAAO,CAAC,CAAA;QACxC,OAAO,MAAM,CAAC,OAAO,CAAC,CAAA;IACxB,CAAC,CAAC,CAAA;IAEF,uDAAuD;IACvD,MAAM,CAAC,IAAI,CAAC,oBAAoB,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE;QACtD,MAAM,IAAI,GAAG,MAAM,WAAW,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,EAAE,UAAU,EAAE,EAAE,CAAC,CAAA;QAChF,IAAI,CAAC,IAAI,CAAC,IAAI;YAAE,OAAO,YAAY,EAAE,CAAA;QACrC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC;YAAE,OAAO,SAAS,EAAE,CAAA;QAE7D,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,EAAE,EAAE,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,GAAG,CAAC,MAAM,CAAC,CAAA;QAC5F,MAAM,OAAO,GAAG,MAAM,mBAAmB,CAAC,EAAE,EAAE,MAAM,CAAC,EAAG,EAAE,MAAM,EAAE,MAAM,CAAC,CAAA;QACzE,IAAI,CAAC,OAAO;YAAE,OAAO,QAAQ,CAAC,mBAAmB,CAAC,CAAA;QAElD,MAAM,YAAY,CAAC,SAAS,CAAC,OAAO,CAAC,CAAA;QACrC,OAAO,MAAM,CAAC,OAAO,CAAC,CAAA;IACxB,CAAC,CAAC,CAAA;IAEF,mEAAmE;IACnE,MAAM,CAAC,IAAI,CAAC,oBAAoB,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE;QACtD,MAAM,IAAI,GAAG,MAAM,WAAW,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,EAAE,UAAU,EAAE,EAAE,CAAC,CAAA;QAChF,IAAI,CAAC,IAAI,CAAC,IAAI;YAAE,OAAO,YAAY,EAAE,CAAA;QAErC,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,EAAE,EAAE,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,GAAG,CAAC,MAAM,CAAC,CAAA;QAC5F,MAAM,OAAO,GAAG,MAAM,WAAW,CAAC,EAAE,EAAE,MAAM,CAAC,EAAG,EAAE,MAAM,CAAC,CAAA;QACzD,IAAI,CAAC,OAAO;YAAE,OAAO,QAAQ,CAAC,mBAAmB,CAAC,CAAA;QAElD,OAAO,MAAM,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAA;IAClC,CAAC,CAAC,CAAA;IAEF,6DAA6D;IAC7D,MAAM,CAAC,IAAI,CAAC,sBAAsB,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE;QACxD,MAAM,IAAI,GAAG,MAAM,WAAW,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,EAAE,UAAU,EAAE,EAAE,CAAC,CAAA;QAChF,IAAI,CAAC,IAAI,CAAC,IAAI;YAAE,OAAO,YAAY,EAAE,CAAA;QACrC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC;YAAE,OAAO,SAAS,EAAE,CAAA;QAE7D,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,EAAE,EAAE,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,GAAG,CAAC,MAAM,CAAC,CAAA;QAC5F,MAAM,SAAS,GAAG,MAAM,aAAa,CAAC,EAAE,EAAE,MAAM,CAAC,EAAG,EAAE,MAAM,CAAC,CAAA;QAC7D,IAAI,CAAC,SAAS;YAAE,OAAO,QAAQ,CAAC,mBAAmB,CAAC,CAAA;QAEpD,OAAO,MAAM,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAA;IACnC,CAAC,CAAC,CAAA;IAEF,mDAAmD;IACnD,MAAM,CAAC,MAAM,CAAC,eAAe,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE;QACnD,MAAM,IAAI,GAAG,MAAM,WAAW,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,EAAE,UAAU,EAAE,EAAE,CAAC,CAAA;QAChF,IAAI,CAAC,IAAI,CAAC,IAAI;YAAE,OAAO,YAAY,EAAE,CAAA;QACrC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC;YAAE,OAAO,SAAS,EAAE,CAAA;QAE7D,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,EAAE,EAAE,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,GAAG,CAAC,MAAM,CAAC,CAAA;QAC5F,MAAM,OAAO,GAAG,MAAM,aAAa,CAAC,EAAE,EAAE,MAAM,CAAC,EAAG,EAAE,MAAM,CAAC,CAAA;QAC3D,IAAI,CAAC,OAAO;YAAE,OAAO,QAAQ,CAAC,mBAAmB,CAAC,CAAA;QAElD,MAAM,YAAY,CAAC,WAAW,CAAC,EAAE,EAAE,EAAE,MAAM,CAAC,EAAG,EAAE,CAAC,CAAA;QAClD,OAAO,MAAM,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAA;IAClC,CAAC,CAAC,CAAA;AACJ,CAAC"}

package/dist/api/component-routes.d.ts

@@ -0,0 +1,11 @@
+import type { Router } from './router.js';
+import type { KywiDb } from '../db/client.js';
+import type { KywiConfig } from '../config/types.js';
+interface ComponentRouteContext {
+    config: KywiConfig;
+    db: KywiDb;
+    authSecret: string;
+}
+export declare function registerComponentRoutes(router: Router, ctx: ComponentRouteContext): void;
+export {};
+//# sourceMappingURL=component-routes.d.ts.map

package/dist/api/component-routes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"component-routes.d.ts","sourceRoot":"","sources":["../../src/api/component-routes.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,aAAa,CAAA;AACzC,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,iBAAiB,CAAA;AAC7C,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAA;AAapD,UAAU,qBAAqB;IAC7B,MAAM,EAAE,UAAU,CAAA;IAClB,EAAE,EAAE,MAAM,CAAA;IACV,UAAU,EAAE,MAAM,CAAA;CACnB;AAkBD,wBAAgB,uBAAuB,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,qBAAqB,GAAG,IAAI,CA4GxF"}

package/dist/api/component-routes.js

@@ -0,0 +1,120 @@
+import { z } from 'zod';
+import { resolveAuth } from './auth.js';
+import { toSiteUuid } from './site-context.js';
+import { canAccessContent } from '../auth/roles.js';
+import { jsonOk, jsonError, unauthorized, forbidden, notFound, validationError } from './response.js';
+import { createComponent, updateComponent, deleteComponent, getComponentById, listComponents, } from '../db/component-queries.js';
+const createComponentSchema = z.object({
+    name: z.string().min(1),
+    description: z.string().optional(),
+    type: z.enum(['module', 'section']),
+    moduleType: z.string().optional(),
+    definition: z.record(z.unknown()),
+    siteId: z.string().uuid().optional(),
+});
+const updateComponentSchema = z.object({
+    name: z.string().min(1).optional(),
+    description: z.string().nullable().optional(),
+    moduleType: z.string().nullable().optional(),
+    definition: z.record(z.unknown()).optional(),
+});
+export function registerComponentRoutes(router, ctx) {
+    const { db, authSecret, config } = ctx;
+    // GET /components — list components for site
+    router.get('/components', async (req) => {
+        const auth = await resolveAuth(req.headers.get('authorization'), authSecret, db);
+        if (!auth.user)
+            return unauthorized();
+        if (!canAccessContent(auth.user.role, 'write'))
+            return forbidden();
+        const url = new URL(req.url);
+        const siteId = await toSiteUuid(db, url.searchParams.get('siteId'), config);
+        const type = url.searchParams.get('type') ?? undefined;
+        const components = await listComponents(db, siteId, type);
+        return jsonOk(components);
+    });
+    // GET /components/:id — get single component
+    router.get('/components/:id', async (req, params) => {
+        const auth = await resolveAuth(req.headers.get('authorization'), authSecret, db);
+        if (!auth.user)
+            return unauthorized();
+        if (!canAccessContent(auth.user.role, 'write'))
+            return forbidden();
+        const url = new URL(req.url);
+        const siteId = await toSiteUuid(db, url.searchParams.get('siteId'), config);
+        const component = await getComponentById(db, params.id, siteId);
+        if (!component)
+            return notFound('Component not found');
+        return jsonOk(component);
+    });
+    // POST /components — create component
+    router.post('/components', async (req) => {
+        const auth = await resolveAuth(req.headers.get('authorization'), authSecret, db);
+        if (!auth.user)
+            return unauthorized();
+        if (!canAccessContent(auth.user.role, 'write'))
+            return forbidden();
+        let body;
+        try {
+            body = await req.json();
+        }
+        catch {
+            return jsonError('BAD_REQUEST', 'Invalid JSON body', 400);
+        }
+        const parsed = createComponentSchema.safeParse(body);
+        if (!parsed.success) {
+            return validationError(parsed.error.errors.map(e => ({ path: e.path.join('.'), message: e.message })));
+        }
+        const siteId = await toSiteUuid(db, parsed.data.siteId, config);
+        const component = await createComponent(db, {
+            siteId,
+            name: parsed.data.name,
+            description: parsed.data.description,
+            type: parsed.data.type,
+            moduleType: parsed.data.moduleType,
+            definition: parsed.data.definition,
+            createdBy: auth.user.id,
+        });
+        return jsonOk(component, 201);
+    });
+    // PUT /components/:id — update definition/metadata
+    router.put('/components/:id', async (req, params) => {
+        const auth = await resolveAuth(req.headers.get('authorization'), authSecret, db);
+        if (!auth.user)
+            return unauthorized();
+        if (!canAccessContent(auth.user.role, 'write'))
+            return forbidden();
+        let body;
+        try {
+            body = await req.json();
+        }
+        catch {
+            return jsonError('BAD_REQUEST', 'Invalid JSON body', 400);
+        }
+        const parsed = updateComponentSchema.safeParse(body);
+        if (!parsed.success) {
+            return validationError(parsed.error.errors.map(e => ({ path: e.path.join('.'), message: e.message })));
+        }
+        const url = new URL(req.url);
+        const siteId = await toSiteUuid(db, url.searchParams.get('siteId'), config);
+        const updated = await updateComponent(db, params.id, parsed.data, siteId);
+        if (!updated)
+            return notFound('Component not found');
+        return jsonOk(updated);
+    });
+    // DELETE /components/:id — delete component
+    router.delete('/components/:id', async (req, params) => {
+        const auth = await resolveAuth(req.headers.get('authorization'), authSecret, db);
+        if (!auth.user)
+            return unauthorized();
+        if (!canAccessContent(auth.user.role, 'write'))
+            return forbidden();
+        const url = new URL(req.url);
+        const siteId = await toSiteUuid(db, url.searchParams.get('siteId'), config);
+        const deleted = await deleteComponent(db, params.id, siteId);
+        if (!deleted)
+            return notFound('Component not found');
+        return jsonOk({ deleted: true });
+    });
+}
+//# sourceMappingURL=component-routes.js.map

package/dist/api/component-routes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"component-routes.js","sourceRoot":"","sources":["../../src/api/component-routes.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AAIvB,OAAO,EAAE,WAAW,EAAE,MAAM,WAAW,CAAA;AACvC,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAA;AAC9C,OAAO,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAA;AACnD,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,YAAY,EAAE,SAAS,EAAE,QAAQ,EAAE,eAAe,EAAE,MAAM,eAAe,CAAA;AACrG,OAAO,EACL,eAAe,EACf,eAAe,EACf,eAAe,EACf,gBAAgB,EAChB,cAAc,GACf,MAAM,4BAA4B,CAAA;AAQnC,MAAM,qBAAqB,GAAG,CAAC,CAAC,MAAM,CAAC;IACrC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACvB,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAClC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;IACnC,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACjC,UAAU,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;IACjC,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE;CACrC,CAAC,CAAA;AAEF,MAAM,qBAAqB,GAAG,CAAC,CAAC,MAAM,CAAC;IACrC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IAClC,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IAC7C,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IAC5C,UAAU,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE;CAC7C,CAAC,CAAA;AAEF,MAAM,UAAU,uBAAuB,CAAC,MAAc,EAAE,GAA0B;IAChF,MAAM,EAAE,EAAE,EAAE,UAAU,EAAE,MAAM,EAAE,GAAG,GAAG,CAAA;IAEtC,6CAA6C;IAC7C,MAAM,CAAC,GAAG,CAAC,aAAa,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;QACtC,MAAM,IAAI,GAAG,MAAM,WAAW,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,EAAE,UAAU,EAAE,EAAE,CAAC,CAAA;QAChF,IAAI,CAAC,IAAI,CAAC,IAAI;YAAE,OAAO,YAAY,EAAE,CAAA;QACrC,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC;YAAE,OAAO,SAAS,EAAE,CAAA;QAElE,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;QAC5B,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,EAAE,EAAE,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC,CAAA;QAC3E,MAAM,IAAI,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,SAAS,CAAA;QAEtD,MAAM,UAAU,GAAG,MAAM,cAAc,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,CAAA;QACzD,OAAO,MAAM,CAAC,UAAU,CAAC,CAAA;IAC3B,CAAC,CAAC,CAAA;IAEF,6CAA6C;IAC7C,MAAM,CAAC,GAAG,CAAC,iBAAiB,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE;QAClD,MAAM,IAAI,GAAG,MAAM,WAAW,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,EAAE,UAAU,EAAE,EAAE,CAAC,CAAA;QAChF,IAAI,CAAC,IAAI,CAAC,IAAI;YAAE,OAAO,YAAY,EAAE,CAAA;QACrC,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC;YAAE,OAAO,SAAS,EAAE,CAAA;QAElE,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;QAC5B,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,EAAE,EAAE,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC,CAAA;QAC3E,MAAM,SAAS,GAAG,MAAM,gBAAgB,CAAC,EAAE,EAAE,MAAM,CAAC,EAAG,EAAE,MAAM,CAAC,CAAA;QAChE,IAAI,CAAC,SAAS;YAAE,OAAO,QAAQ,CAAC,qBAAqB,CAAC,CAAA;QAEtD,OAAO,MAAM,CAAC,SAAS,CAAC,CAAA;IAC1B,CAAC,CAAC,CAAA;IAEF,sCAAsC;IACtC,MAAM,CAAC,IAAI,CAAC,aAAa,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;QACvC,MAAM,IAAI,GAAG,MAAM,WAAW,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,EAAE,UAAU,EAAE,EAAE,CAAC,CAAA;QAChF,IAAI,CAAC,IAAI,CAAC,IAAI;YAAE,OAAO,YAAY,EAAE,CAAA;QACrC,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC;YAAE,OAAO,SAAS,EAAE,CAAA;QAElE,IAAI,IAAa,CAAA;QACjB,IAAI,CAAC;YACH,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAA;QACzB,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,SAAS,CAAC,aAAa,EAAE,mBAAmB,EAAE,GAAG,CAAC,CAAA;QAC3D,CAAC;QAED,MAAM,MAAM,GAAG,qBAAqB,CAAC,SAAS,CAAC,IAAI,CAAC,CAAA;QACpD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,OAAO,eAAe,CACpB,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAC/E,CAAA;QACH,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,EAAE,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;QAC/D,MAAM,SAAS,GAAG,MAAM,eAAe,CAAC,EAAE,EAAE;YAC1C,MAAM;YACN,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI;YACtB,WAAW,EAAE,MAAM,CAAC,IAAI,CAAC,WAAW;YACpC,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI;YACtB,UAAU,EAAE,MAAM,CAAC,IAAI,CAAC,UAAU;YAClC,UAAU,EAAE,MAAM,CAAC,IAAI,CAAC,UAAU;YAClC,SAAS,EAAE,IAAI,CAAC,IAAI,CAAC,EAAE;SACxB,CAAC,CAAA;QAEF,OAAO,MAAM,CAAC,SAAS,EAAE,GAAG,CAAC,CAAA;IAC/B,CAAC,CAAC,CAAA;IAEF,mDAAmD;IACnD,MAAM,CAAC,GAAG,CAAC,iBAAiB,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE;QAClD,MAAM,IAAI,GAAG,MAAM,WAAW,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,EAAE,UAAU,EAAE,EAAE,CAAC,CAAA;QAChF,IAAI,CAAC,IAAI,CAAC,IAAI;YAAE,OAAO,YAAY,EAAE,CAAA;QACrC,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC;YAAE,OAAO,SAAS,EAAE,CAAA;QAElE,IAAI,IAAa,CAAA;QACjB,IAAI,CAAC;YACH,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAA;QACzB,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,SAAS,CAAC,aAAa,EAAE,mBAAmB,EAAE,GAAG,CAAC,CAAA;QAC3D,CAAC;QAED,MAAM,MAAM,GAAG,qBAAqB,CAAC,SAAS,CAAC,IAAI,CAAC,CAAA;QACpD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,OAAO,eAAe,CACpB,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAC/E,CAAA;QACH,CAAC;QAED,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;QAC5B,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,EAAE,EAAE,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC,CAAA;QAE3E,MAAM,OAAO,GAAG,MAAM,eAAe,CAAC,EAAE,EAAE,MAAM,CAAC,EAAG,EAAE,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,CAAA;QAC1E,IAAI,CAAC,OAAO;YAAE,OAAO,QAAQ,CAAC,qBAAqB,CAAC,CAAA;QAEpD,OAAO,MAAM,CAAC,OAAO,CAAC,CAAA;IACxB,CAAC,CAAC,CAAA;IAEF,4CAA4C;IAC5C,MAAM,CAAC,MAAM,CAAC,iBAAiB,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE;QACrD,MAAM,IAAI,GAAG,MAAM,WAAW,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,EAAE,UAAU,EAAE,EAAE,CAAC,CAAA;QAChF,IAAI,CAAC,IAAI,CAAC,IAAI;YAAE,OAAO,YAAY,EAAE,CAAA;QACrC,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC;YAAE,OAAO,SAAS,EAAE,CAAA;QAElE,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;QAC5B,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,EAAE,EAAE,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC,CAAA;QAE3E,MAAM,OAAO,GAAG,MAAM,eAAe,CAAC,EAAE,EAAE,MAAM,CAAC,EAAG,EAAE,MAAM,CAAC,CAAA;QAC7D,IAAI,CAAC,OAAO;YAAE,OAAO,QAAQ,CAAC,qBAAqB,CAAC,CAAA;QAEpD,OAAO,MAAM,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAA;IAClC,CAAC,CAAC,CAAA;AACJ,CAAC"}

package/dist/api/config-routes.d.ts

@@ -0,0 +1,4 @@
+import type { Router } from './router.js';
+import type { KywiConfig } from '../config/types.js';
+export declare function registerConfigRoutes(router: Router, config: KywiConfig): void;
+//# sourceMappingURL=config-routes.d.ts.map

package/dist/api/config-routes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config-routes.d.ts","sourceRoot":"","sources":["../../src/api/config-routes.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,aAAa,CAAA;AACzC,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAA;AAMpD,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,GAAG,IAAI,CA+E7E"}

package/dist/api/config-routes.js

@@ -0,0 +1,63 @@
+import { jsonOk } from './response.js';
+import { generateOpenApiSpec } from './openapi.js';
+import { jsonToYaml } from './yaml-serializer.js';
+import { createModuleRegistry } from '../layout/registry.js';
+export function registerConfigRoutes(router, config) {
+    // The full module palette: built-ins plus config/plugin-contributed modules
+    // (config.modules already includes inline plugins' modules, folded in by
+    // defineKywiConfig). Lets the layout editor's palette surface plugin modules
+    // and their custom categories (G2).
+    router.get('/config/modules', async () => {
+        const registry = createModuleRegistry(config.modules ?? []);
+        return jsonOk(registry.list());
+    });
+    router.get('/config/content-types', async () => {
+        const types = config.contentTypes.map(ct => {
+            const entry = {
+                name: ct.name,
+                label: ct.label,
+                baseType: ct.baseType,
+                fields: ct.fields.map(f => {
+                    const field = {
+                        name: f.name,
+                        type: f.type,
+                        label: f.label,
+                        required: f.required ?? false,
+                    };
+                    if (f.options !== undefined) {
+                        field.options = f.options;
+                    }
+                    return field;
+                }),
+            };
+            if (ct.pluralLabel !== undefined) {
+                entry.pluralLabel = ct.pluralLabel;
+            }
+            return entry;
+        });
+        return jsonOk(types);
+    });
+    router.get('/config/sites', async () => {
+        return jsonOk(config.sites.map(s => ({
+            id: s.id,
+            name: s.name,
+            domain: s.domain,
+            defaultLocale: s.defaultLocale,
+        })));
+    });
+    router.get('/openapi.json', async () => {
+        const spec = generateOpenApiSpec(config);
+        return new Response(JSON.stringify(spec, null, 2), {
+            status: 200,
+            headers: { 'Content-Type': 'application/json' },
+        });
+    });
+    router.get('/openapi.yaml', async () => {
+        const spec = generateOpenApiSpec(config);
+        return new Response(jsonToYaml(spec), {
+            status: 200,
+            headers: { 'Content-Type': 'text/yaml' },
+        });
+    });
+}
+//# sourceMappingURL=config-routes.js.map

package/dist/api/config-routes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config-routes.js","sourceRoot":"","sources":["../../src/api/config-routes.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,MAAM,EAAE,MAAM,eAAe,CAAA;AACtC,OAAO,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAA;AAClD,OAAO,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAA;AACjD,OAAO,EAAE,oBAAoB,EAAE,MAAM,uBAAuB,CAAA;AAE5D,MAAM,UAAU,oBAAoB,CAAC,MAAc,EAAE,MAAkB;IACrE,4EAA4E;IAC5E,yEAAyE;IACzE,6EAA6E;IAC7E,oCAAoC;IACpC,MAAM,CAAC,GAAG,CAAC,iBAAiB,EAAE,KAAK,IAAI,EAAE;QACvC,MAAM,QAAQ,GAAG,oBAAoB,CAAC,MAAM,CAAC,OAAO,IAAI,EAAE,CAAC,CAAA;QAC3D,OAAO,MAAM,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAA;IAChC,CAAC,CAAC,CAAA;IAEF,MAAM,CAAC,GAAG,CAAC,uBAAuB,EAAE,KAAK,IAAI,EAAE;QAC7C,MAAM,KAAK,GAAG,MAAM,CAAC,YAAY,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE;YACzC,MAAM,KAAK,GAYP;gBACF,IAAI,EAAE,EAAE,CAAC,IAAI;gBACb,KAAK,EAAE,EAAE,CAAC,KAAK;gBACf,QAAQ,EAAE,EAAE,CAAC,QAAQ;gBACrB,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE;oBACxB,MAAM,KAAK,GAMP;wBACF,IAAI,EAAE,CAAC,CAAC,IAAI;wBACZ,IAAI,EAAE,CAAC,CAAC,IAAI;wBACZ,KAAK,EAAE,CAAC,CAAC,KAAK;wBACd,QAAQ,EAAE,CAAC,CAAC,QAAQ,IAAI,KAAK;qBAC9B,CAAA;oBACD,IAAI,CAAC,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;wBAC5B,KAAK,CAAC,OAAO,GAAG,CAAC,CAAC,OAAO,CAAA;oBAC3B,CAAC;oBACD,OAAO,KAAK,CAAA;gBACd,CAAC,CAAC;aACH,CAAA;YACD,IAAI,EAAE,CAAC,WAAW,KAAK,SAAS,EAAE,CAAC;gBACjC,KAAK,CAAC,WAAW,GAAG,EAAE,CAAC,WAAW,CAAA;YACpC,CAAC;YACD,OAAO,KAAK,CAAA;QACd,CAAC,CAAC,CAAA;QACF,OAAO,MAAM,CAAC,KAAK,CAAC,CAAA;IACtB,CAAC,CAAC,CAAA;IAEF,MAAM,CAAC,GAAG,CAAC,eAAe,EAAE,KAAK,IAAI,EAAE;QACrC,OAAO,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;YACnC,EAAE,EAAE,CAAC,CAAC,EAAE;YACR,IAAI,EAAE,CAAC,CAAC,IAAI;YACZ,MAAM,EAAE,CAAC,CAAC,MAAM;YAChB,aAAa,EAAE,CAAC,CAAC,aAAa;SAC/B,CAAC,CAAC,CAAC,CAAA;IACN,CAAC,CAAC,CAAA;IAEF,MAAM,CAAC,GAAG,CAAC,eAAe,EAAE,KAAK,IAAI,EAAE;QACrC,MAAM,IAAI,GAAG,mBAAmB,CAAC,MAAM,CAAC,CAAA;QACxC,OAAO,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE;YACjD,MAAM,EAAE,GAAG;YACX,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;SAChD,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;IAEF,MAAM,CAAC,GAAG,CAAC,eAAe,EAAE,KAAK,IAAI,EAAE;QACrC,MAAM,IAAI,GAAG,mBAAmB,CAAC,MAAM,CAAC,CAAA;QACxC,OAAO,IAAI,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE;YACpC,MAAM,EAAE,GAAG;YACX,OAAO,EAAE,EAAE,cAAc,EAAE,WAAW,EAAE;SACzC,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;AACJ,CAAC"}

package/dist/api/content-permission-routes.d.ts

@@ -0,0 +1,18 @@
+import type { Router } from './router.js';
+import type { KywiDb } from '../db/client.js';
+interface ContentPermissionRouteContext {
+    db: KywiDb;
+    authSecret: string;
+}
+/**
+ * CRUD for the content-level access-control list (`kywi_content_permissions`).
+ *
+ * The DB layer (grant/revoke/list) and the read-path enforcement
+ * (`checkDocumentAccess`) already existed; this exposes the ACL over HTTP so the
+ * permission-matrix screen's content-permission browser can view and edit a
+ * node's entries. All routes are siteAdmin-gated, matching how user/group
+ * management is guarded elsewhere.
+ */
+export declare function registerContentPermissionRoutes(router: Router, ctx: ContentPermissionRouteContext): void;
+export {};
+//# sourceMappingURL=content-permission-routes.d.ts.map

package/dist/api/content-permission-routes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"content-permission-routes.d.ts","sourceRoot":"","sources":["../../src/api/content-permission-routes.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,aAAa,CAAA;AACzC,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,iBAAiB,CAAA;AAa7C,UAAU,6BAA6B;IACrC,EAAE,EAAE,MAAM,CAAA;IACV,UAAU,EAAE,MAAM,CAAA;CACnB;AAqBD;;;;;;;;GAQG;AACH,wBAAgB,+BAA+B,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,6BAA6B,GAAG,IAAI,CA4DxG"}

package/dist/api/content-permission-routes.js

@@ -0,0 +1,89 @@
+import { z } from 'zod';
+import { jsonOk, jsonError, notFound, unauthorized, forbidden, validationError } from './response.js';
+import { listContentPermissions, grantContentPermission, revokeContentPermission, } from '../db/content-permission-queries.js';
+import { getContentById } from '../db/content-queries.js';
+import { resolveAuth } from './auth.js';
+import { hasMinRole } from '../auth/roles.js';
+/**
+ * The content-level ACL vocabulary. These mirror the role-based content actions
+ * (`ACTION_MIN_ROLE` in auth/roles.ts) so a per-content grant reads in the same
+ * terms as the role capability matrix. A row is a grant (presence = allow); the
+ * table has no "deny" effect, so this is intentionally grant-only.
+ */
+const CONTENT_ACTIONS = ['read', 'write', 'publish', 'delete'];
+const grantSchema = z
+    .object({
+    userId: z.string().uuid().optional(),
+    groupId: z.string().uuid().optional(),
+    action: z.enum(CONTENT_ACTIONS),
+})
+    .refine((v) => Boolean(v.userId) !== Boolean(v.groupId), { message: 'Provide exactly one of userId or groupId' });
+/**
+ * CRUD for the content-level access-control list (`kywi_content_permissions`).
+ *
+ * The DB layer (grant/revoke/list) and the read-path enforcement
+ * (`checkDocumentAccess`) already existed; this exposes the ACL over HTTP so the
+ * permission-matrix screen's content-permission browser can view and edit a
+ * node's entries. All routes are siteAdmin-gated, matching how user/group
+ * management is guarded elsewhere.
+ */
+export function registerContentPermissionRoutes(router, ctx) {
+    const { db, authSecret } = ctx;
+    async function requireSiteAdmin(req) {
+        const auth = await resolveAuth(req.headers.get('authorization'), authSecret, db);
+        if (!auth.user)
+            return unauthorized();
+        if (!hasMinRole(auth.user.role, 'siteAdmin'))
+            return forbidden();
+        return { user: auth.user };
+    }
+    // GET /content/:id/permissions — list a node's ACL entries
+    router.get('/content/:id/permissions', async (req, params) => {
+        const gate = await requireSiteAdmin(req);
+        if (gate instanceof Response)
+            return gate;
+        const content = await getContentById(db, null, params.id);
+        if (!content)
+            return notFound('Content not found');
+        const permissions = await listContentPermissions(db, params.id);
+        return jsonOk(permissions);
+    });
+    // POST /content/:id/permissions — grant a permission to a user or group
+    router.post('/content/:id/permissions', async (req, params) => {
+        const gate = await requireSiteAdmin(req);
+        if (gate instanceof Response)
+            return gate;
+        const content = await getContentById(db, null, params.id);
+        if (!content)
+            return notFound('Content not found');
+        let body;
+        try {
+            body = await req.json();
+        }
+        catch {
+            return jsonError('BAD_REQUEST', 'Invalid JSON body', 400);
+        }
+        const parsed = grantSchema.safeParse(body);
+        if (!parsed.success) {
+            return validationError(parsed.error.issues.map((i) => ({ path: i.path.join('.'), message: i.message })));
+        }
+        const created = await grantContentPermission(db, {
+            contentId: params.id,
+            userId: parsed.data.userId ?? null,
+            groupId: parsed.data.groupId ?? null,
+            action: parsed.data.action,
+        });
+        return jsonOk(created, 201);
+    });
+    // DELETE /content/:id/permissions/:permissionId — revoke a single ACL entry
+    router.delete('/content/:id/permissions/:permissionId', async (req, params) => {
+        const gate = await requireSiteAdmin(req);
+        if (gate instanceof Response)
+            return gate;
+        const removed = await revokeContentPermission(db, params.permissionId);
+        if (!removed)
+            return notFound('Permission not found');
+        return jsonOk({ deleted: true });
+    });
+}
+//# sourceMappingURL=content-permission-routes.js.map

package/dist/api/content-permission-routes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"content-permission-routes.js","sourceRoot":"","sources":["../../src/api/content-permission-routes.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AAIvB,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,YAAY,EAAE,SAAS,EAAE,eAAe,EAAE,MAAM,eAAe,CAAA;AACrG,OAAO,EACL,sBAAsB,EACtB,sBAAsB,EACtB,uBAAuB,GACxB,MAAM,qCAAqC,CAAA;AAC5C,OAAO,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAA;AACzD,OAAO,EAAE,WAAW,EAAE,MAAM,WAAW,CAAA;AACvC,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAA;AAQ7C;;;;;GAKG;AACH,MAAM,eAAe,GAAG,CAAC,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,QAAQ,CAA6C,CAAA;AAE1G,MAAM,WAAW,GAAG,CAAC;KAClB,MAAM,CAAC;IACN,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE;IACpC,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE;IACrC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC;CAChC,CAAC;KACD,MAAM,CACL,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,EAC/C,EAAE,OAAO,EAAE,0CAA0C,EAAE,CACxD,CAAA;AAEH;;;;;;;;GAQG;AACH,MAAM,UAAU,+BAA+B,CAAC,MAAc,EAAE,GAAkC;IAChG,MAAM,EAAE,EAAE,EAAE,UAAU,EAAE,GAAG,GAAG,CAAA;IAE9B,KAAK,UAAU,gBAAgB,CAAC,GAAY;QAC1C,MAAM,IAAI,GAAG,MAAM,WAAW,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,EAAE,UAAU,EAAE,EAAE,CAAC,CAAA;QAChF,IAAI,CAAC,IAAI,CAAC,IAAI;YAAE,OAAO,YAAY,EAAE,CAAA;QACrC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,WAAW,CAAC;YAAE,OAAO,SAAS,EAAE,CAAA;QAChE,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAA;IAC5B,CAAC;IAED,2DAA2D;IAC3D,MAAM,CAAC,GAAG,CAAC,0BAA0B,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE;QAC3D,MAAM,IAAI,GAAG,MAAM,gBAAgB,CAAC,GAAG,CAAC,CAAA;QACxC,IAAI,IAAI,YAAY,QAAQ;YAAE,OAAO,IAAI,CAAA;QAEzC,MAAM,OAAO,GAAG,MAAM,cAAc,CAAC,EAAE,EAAE,IAAI,EAAE,MAAM,CAAC,EAAG,CAAC,CAAA;QAC1D,IAAI,CAAC,OAAO;YAAE,OAAO,QAAQ,CAAC,mBAAmB,CAAC,CAAA;QAElD,MAAM,WAAW,GAAG,MAAM,sBAAsB,CAAC,EAAE,EAAE,MAAM,CAAC,EAAG,CAAC,CAAA;QAChE,OAAO,MAAM,CAAC,WAAW,CAAC,CAAA;IAC5B,CAAC,CAAC,CAAA;IAEF,wEAAwE;IACxE,MAAM,CAAC,IAAI,CAAC,0BAA0B,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE;QAC5D,MAAM,IAAI,GAAG,MAAM,gBAAgB,CAAC,GAAG,CAAC,CAAA;QACxC,IAAI,IAAI,YAAY,QAAQ;YAAE,OAAO,IAAI,CAAA;QAEzC,MAAM,OAAO,GAAG,MAAM,cAAc,CAAC,EAAE,EAAE,IAAI,EAAE,MAAM,CAAC,EAAG,CAAC,CAAA;QAC1D,IAAI,CAAC,OAAO;YAAE,OAAO,QAAQ,CAAC,mBAAmB,CAAC,CAAA;QAElD,IAAI,IAAa,CAAA;QACjB,IAAI,CAAC;YACH,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAA;QACzB,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,SAAS,CAAC,aAAa,EAAE,mBAAmB,EAAE,GAAG,CAAC,CAAA;QAC3D,CAAC;QAED,MAAM,MAAM,GAAG,WAAW,CAAC,SAAS,CAAC,IAAI,CAAC,CAAA;QAC1C,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,OAAO,eAAe,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAA;QAC1G,CAAC;QAED,MAAM,OAAO,GAAG,MAAM,sBAAsB,CAAC,EAAE,EAAE;YAC/C,SAAS,EAAE,MAAM,CAAC,EAAG;YACrB,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM,IAAI,IAAI;YAClC,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,OAAO,IAAI,IAAI;YACpC,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM;SAC3B,CAAC,CAAA;QACF,OAAO,MAAM,CAAC,OAAO,EAAE,GAAG,CAAC,CAAA;IAC7B,CAAC,CAAC,CAAA;IAEF,4EAA4E;IAC5E,MAAM,CAAC,MAAM,CAAC,wCAAwC,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE;QAC5E,MAAM,IAAI,GAAG,MAAM,gBAAgB,CAAC,GAAG,CAAC,CAAA;QACxC,IAAI,IAAI,YAAY,QAAQ;YAAE,OAAO,IAAI,CAAA;QAEzC,MAAM,OAAO,GAAG,MAAM,uBAAuB,CAAC,EAAE,EAAE,MAAM,CAAC,YAAa,CAAC,CAAA;QACvE,IAAI,CAAC,OAAO;YAAE,OAAO,QAAQ,CAAC,sBAAsB,CAAC,CAAA;QACrD,OAAO,MAAM,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAA;IAClC,CAAC,CAAC,CAAA;AACJ,CAAC"}