@kywi-software/core 0.1.0

package/dist/api/tag-usage-wiring.js

@@ -0,0 +1,30 @@
+import { assignTagToContent, removeTagFromContent, listTagsForContent } from '../db/content-tag-queries.js';
+/**
+ * Sync the content_tags join table with the requested tagIds.
+ * Computes the diff between current tags and new tags, then
+ * assigns new ones (incrementing usageCount) and removes old
+ * ones (decrementing usageCount).
+ *
+ * If tagIds is undefined, no sync is performed (the caller
+ * did not include tagIds in the request body).
+ */
+export async function syncContentTags(db, contentId, tagIds) {
+    if (tagIds === undefined)
+        return;
+    const existingTags = await listTagsForContent(db, contentId);
+    const existingIds = new Set(existingTags.map(t => t.id));
+    const newIds = new Set(tagIds);
+    // Tags to remove: in existing but not in new
+    for (const id of existingIds) {
+        if (!newIds.has(id)) {
+            await removeTagFromContent(db, contentId, id);
+        }
+    }
+    // Tags to add: in new but not in existing
+    for (const id of newIds) {
+        if (!existingIds.has(id)) {
+            await assignTagToContent(db, contentId, id);
+        }
+    }
+}
+//# sourceMappingURL=tag-usage-wiring.js.map

package/dist/api/tag-usage-wiring.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tag-usage-wiring.js","sourceRoot":"","sources":["../../src/api/tag-usage-wiring.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,kBAAkB,EAAE,oBAAoB,EAAE,kBAAkB,EAAE,MAAM,8BAA8B,CAAA;AAE3G;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,EAAU,EACV,SAAiB,EACjB,MAA4B;IAE5B,IAAI,MAAM,KAAK,SAAS;QAAE,OAAM;IAEhC,MAAM,YAAY,GAAG,MAAM,kBAAkB,CAAC,EAAE,EAAE,SAAS,CAAC,CAAA;IAC5D,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA;IACxD,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,CAAA;IAE9B,6CAA6C;IAC7C,KAAK,MAAM,EAAE,IAAI,WAAW,EAAE,CAAC;QAC7B,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC;YACpB,MAAM,oBAAoB,CAAC,EAAE,EAAE,SAAS,EAAE,EAAE,CAAC,CAAA;QAC/C,CAAC;IACH,CAAC;IAED,0CAA0C;IAC1C,KAAK,MAAM,EAAE,IAAI,MAAM,EAAE,CAAC;QACxB,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC;YACzB,MAAM,kBAAkB,CAAC,EAAE,EAAE,SAAS,EAAE,EAAE,CAAC,CAAA;QAC7C,CAAC;IACH,CAAC;AACH,CAAC"}

package/dist/api/translation-routes.d.ts

@@ -0,0 +1,25 @@
+import type { Router } from './router.js';
+import type { KywiDb } from '../db/client.js';
+import type { KywiConfig, ContentTypeConfig } from '../config/types.js';
+import type { PgTableWithColumns } from 'drizzle-orm/pg-core';
+import type { ResourceBundles } from '../i18n/types.js';
+/**
+ * Translation-management routes.
+ *
+ * Model (i18n plan + journey-11): a content translation is a sibling node —
+ * same slug + parentId, different `locale`, linked by convention. String
+ * resource bundles are config-as-code JSON files, so the /strings endpoint is
+ * read-only. Configured locales come from the site config (also read-only).
+ */
+export interface TranslationRouteContext {
+    config: KywiConfig;
+    db: KywiDb;
+    authSecret: string;
+    siteIdMap: Record<string, string>;
+    /** Resource bundles the handler was created with — served read-only. */
+    resourceBundles?: ResourceBundles;
+    getContentTypeMap: () => Map<string, ContentTypeConfig>;
+    getCustomTableMap: () => Map<string, PgTableWithColumns<any>>;
+}
+export declare function registerTranslationRoutes(router: Router, ctx: TranslationRouteContext): void;
+//# sourceMappingURL=translation-routes.d.ts.map

package/dist/api/translation-routes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"translation-routes.d.ts","sourceRoot":"","sources":["../../src/api/translation-routes.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,aAAa,CAAA;AACzC,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,iBAAiB,CAAA;AAC7C,OAAO,KAAK,EAAE,UAAU,EAAE,iBAAiB,EAAc,MAAM,oBAAoB,CAAA;AACnF,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAA;AAC7D,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAA;AAYvD;;;;;;;GAOG;AACH,MAAM,WAAW,uBAAuB;IACtC,MAAM,EAAE,UAAU,CAAA;IAClB,EAAE,EAAE,MAAM,CAAA;IACV,UAAU,EAAE,MAAM,CAAA;IAClB,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IACjC,wEAAwE;IACxE,eAAe,CAAC,EAAE,eAAe,CAAA;IACjC,iBAAiB,EAAE,MAAM,GAAG,CAAC,MAAM,EAAE,iBAAiB,CAAC,CAAA;IACvD,iBAAiB,EAAE,MAAM,GAAG,CAAC,MAAM,EAAE,kBAAkB,CAAC,GAAG,CAAC,CAAC,CAAA;CAC9D;AAqBD,wBAAgB,yBAAyB,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,uBAAuB,GAAG,IAAI,CAiH5F"}

package/dist/api/translation-routes.js

@@ -0,0 +1,133 @@
+import { z } from 'zod';
+import { resolveAuth } from './auth.js';
+import { hasMinRole } from '../auth/roles.js';
+import { resolveSiteId } from './site-context.js';
+import { jsonOk, jsonError, notFound, unauthorized } from './response.js';
+import { getTranslationCoverage, getLocaleVariants, buildTranslationData, } from '../db/locale-queries.js';
+import { getContentById, createContent } from '../db/content-queries.js';
+const createTranslationSchema = z.object({
+    sourceId: z.string().uuid(),
+    locale: z.string().min(2),
+});
+/** Translation management requires at least editor. */
+async function requireEditor(req, authSecret, db) {
+    const auth = await resolveAuth(req.headers.get('authorization'), authSecret, db);
+    if (!auth.user)
+        return null;
+    if (!hasMinRole(auth.user.role, 'editor'))
+        return null;
+    return auth.user;
+}
+/** Locales a site is configured for (default always included). */
+function configuredLocales(site) {
+    const list = site.locales && site.locales.length > 0 ? site.locales : [site.defaultLocale];
+    return list.includes(site.defaultLocale) ? list : [site.defaultLocale, ...list];
+}
+export function registerTranslationRoutes(router, ctx) {
+    const { config, db, authSecret, siteIdMap } = ctx;
+    /** Resolve both the DB site UUID (lint-approved) and the config site object. */
+    function resolveSite(req) {
+        const siteUuid = resolveSiteId(req, config, siteIdMap);
+        const site = config.sites.find((s) => (siteIdMap[s.id] ?? s.id) === siteUuid) ?? config.sites[0];
+        return { site, siteUuid };
+    }
+    // GET /translations/locales — configured locales for the active site (read-only)
+    router.get('/translations/locales', async (req) => {
+        const user = await requireEditor(req, authSecret, db);
+        if (!user)
+            return unauthorized();
+        const { site } = resolveSite(req);
+        return jsonOk({
+            defaultLocale: site.defaultLocale,
+            locales: configuredLocales(site),
+            // config-as-code: the admin surfaces these read-only
+            readOnly: true,
+        });
+    });
+    // GET /translations/coverage — which published content lacks a variant per locale
+    router.get('/translations/coverage', async (req) => {
+        const user = await requireEditor(req, authSecret, db);
+        if (!user)
+            return unauthorized();
+        const { site, siteUuid } = resolveSite(req);
+        const locales = configuredLocales(site);
+        const coverage = await getTranslationCoverage(db, siteUuid, site.defaultLocale, locales);
+        return jsonOk({ defaultLocale: site.defaultLocale, locales: coverage });
+    });
+    // GET /translations/strings — read-only view of the string resource bundles
+    router.get('/translations/strings', async (req) => {
+        const user = await requireEditor(req, authSecret, db);
+        if (!user)
+            return unauthorized();
+        const { site } = resolveSite(req);
+        const bundles = {};
+        if (ctx.resourceBundles) {
+            for (const [locale, entries] of ctx.resourceBundles) {
+                bundles[locale] = Object.fromEntries(entries);
+            }
+        }
+        return jsonOk({
+            defaultLocale: site.defaultLocale,
+            locales: configuredLocales(site),
+            bundles,
+            // Bundles are JSON files loaded at startup (config-as-code); they cannot
+            // be edited through the admin — they live in the app's /i18n directory.
+            readOnly: true,
+            source: 'config-as-code',
+        });
+    });
+    // GET /translations/content/:id/variants — locale variants of one node
+    router.get('/translations/content/:id/variants', async (req, params) => {
+        const user = await requireEditor(req, authSecret, db);
+        if (!user)
+            return unauthorized();
+        const { site } = resolveSite(req);
+        const variants = await getLocaleVariants(db, params.id);
+        const present = new Set(variants.map((v) => v.locale));
+        const missingLocales = configuredLocales(site).filter((l) => !present.has(l));
+        return jsonOk({ defaultLocale: site.defaultLocale, variants, missingLocales });
+    });
+    // POST /translations — create a translation sibling from a source node
+    router.post('/translations', async (req) => {
+        const user = await requireEditor(req, authSecret, db);
+        if (!user)
+            return unauthorized();
+        let body;
+        try {
+            body = await req.json();
+        }
+        catch {
+            return jsonError('BAD_REQUEST', 'Invalid JSON body', 400);
+        }
+        const parsed = createTranslationSchema.safeParse(body);
+        if (!parsed.success) {
+            return jsonError('VALIDATION_ERROR', 'Validation failed', 400, parsed.error.flatten());
+        }
+        const { sourceId, locale } = parsed.data;
+        const { site, siteUuid } = resolveSite(req);
+        if (!configuredLocales(site).includes(locale)) {
+            return jsonError('VALIDATION_ERROR', `Locale '${locale}' is not configured for this site`, 400);
+        }
+        // Resolve the source node's type first, then re-fetch with its custom table.
+        const base = await getContentById(db, null, sourceId);
+        if (!base)
+            return notFound('Source content not found');
+        const contentTypeName = base.contentTypeName;
+        const contentType = ctx.getContentTypeMap().get(contentTypeName);
+        if (!contentType)
+            return jsonError('BAD_REQUEST', `Unknown content type '${contentTypeName}'`, 400);
+        const customTable = ctx.getCustomTableMap().get(contentTypeName) ?? null;
+        const source = await getContentById(db, customTable, sourceId);
+        if (!source)
+            return notFound('Source content not found');
+        // Refuse to create a second variant in the same locale.
+        const existing = await getLocaleVariants(db, sourceId);
+        if (existing.some((v) => v.locale === locale)) {
+            return jsonError('CONFLICT', `A '${locale}' translation already exists for this content`, 409);
+        }
+        const data = buildTranslationData(source, locale);
+        const created = await createContent(db, contentType, customTable, siteUuid, data, user.id);
+        return jsonOk({ id: created.id, locale, contentTypeName }, 201);
+    });
+}
+//# sourceMappingURL=translation-routes.js.map

package/dist/api/translation-routes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"translation-routes.js","sourceRoot":"","sources":["../../src/api/translation-routes.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AAMvB,OAAO,EAAE,WAAW,EAAE,MAAM,WAAW,CAAA;AACvC,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAA;AAC7C,OAAO,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAA;AACjD,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,YAAY,EAAE,MAAM,eAAe,CAAA;AACzE,OAAO,EACL,sBAAsB,EACtB,iBAAiB,EACjB,oBAAoB,GACrB,MAAM,yBAAyB,CAAA;AAChC,OAAO,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAA;AAqBxE,MAAM,uBAAuB,GAAG,CAAC,CAAC,MAAM,CAAC;IACvC,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE;IAC3B,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;CAC1B,CAAC,CAAA;AAEF,uDAAuD;AACvD,KAAK,UAAU,aAAa,CAAC,GAAY,EAAE,UAAkB,EAAE,EAAU;IACvE,MAAM,IAAI,GAAG,MAAM,WAAW,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,EAAE,UAAU,EAAE,EAAE,CAAC,CAAA;IAChF,IAAI,CAAC,IAAI,CAAC,IAAI;QAAE,OAAO,IAAI,CAAA;IAC3B,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC;QAAE,OAAO,IAAI,CAAA;IACtD,OAAO,IAAI,CAAC,IAAI,CAAA;AAClB,CAAC;AAED,kEAAkE;AAClE,SAAS,iBAAiB,CAAC,IAAgB;IACzC,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAA;IAC1F,OAAO,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,EAAE,GAAG,IAAI,CAAC,CAAA;AACjF,CAAC;AAED,MAAM,UAAU,yBAAyB,CAAC,MAAc,EAAE,GAA4B;IACpF,MAAM,EAAE,MAAM,EAAE,EAAE,EAAE,UAAU,EAAE,SAAS,EAAE,GAAG,GAAG,CAAA;IAEjD,gFAAgF;IAChF,SAAS,WAAW,CAAC,GAAY;QAC/B,MAAM,QAAQ,GAAG,aAAa,CAAC,GAAG,EAAE,MAAM,EAAE,SAAS,CAAC,CAAA;QACtD,MAAM,IAAI,GACR,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,KAAK,QAAQ,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC,CAAE,CAAA;QACtF,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAA;IAC3B,CAAC;IAED,iFAAiF;IACjF,MAAM,CAAC,GAAG,CAAC,uBAAuB,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;QAChD,MAAM,IAAI,GAAG,MAAM,aAAa,CAAC,GAAG,EAAE,UAAU,EAAE,EAAE,CAAC,CAAA;QACrD,IAAI,CAAC,IAAI;YAAE,OAAO,YAAY,EAAE,CAAA;QAEhC,MAAM,EAAE,IAAI,EAAE,GAAG,WAAW,CAAC,GAAG,CAAC,CAAA;QACjC,OAAO,MAAM,CAAC;YACZ,aAAa,EAAE,IAAI,CAAC,aAAa;YACjC,OAAO,EAAE,iBAAiB,CAAC,IAAI,CAAC;YAChC,qDAAqD;YACrD,QAAQ,EAAE,IAAI;SACf,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;IAEF,kFAAkF;IAClF,MAAM,CAAC,GAAG,CAAC,wBAAwB,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;QACjD,MAAM,IAAI,GAAG,MAAM,aAAa,CAAC,GAAG,EAAE,UAAU,EAAE,EAAE,CAAC,CAAA;QACrD,IAAI,CAAC,IAAI;YAAE,OAAO,YAAY,EAAE,CAAA;QAEhC,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,WAAW,CAAC,GAAG,CAAC,CAAA;QAC3C,MAAM,OAAO,GAAG,iBAAiB,CAAC,IAAI,CAAC,CAAA;QACvC,MAAM,QAAQ,GAAG,MAAM,sBAAsB,CAAC,EAAE,EAAE,QAAQ,EAAE,IAAI,CAAC,aAAa,EAAE,OAAO,CAAC,CAAA;QACxF,OAAO,MAAM,CAAC,EAAE,aAAa,EAAE,IAAI,CAAC,aAAa,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC,CAAA;IACzE,CAAC,CAAC,CAAA;IAEF,4EAA4E;IAC5E,MAAM,CAAC,GAAG,CAAC,uBAAuB,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;QAChD,MAAM,IAAI,GAAG,MAAM,aAAa,CAAC,GAAG,EAAE,UAAU,EAAE,EAAE,CAAC,CAAA;QACrD,IAAI,CAAC,IAAI;YAAE,OAAO,YAAY,EAAE,CAAA;QAEhC,MAAM,EAAE,IAAI,EAAE,GAAG,WAAW,CAAC,GAAG,CAAC,CAAA;QACjC,MAAM,OAAO,GAA2C,EAAE,CAAA;QAC1D,IAAI,GAAG,CAAC,eAAe,EAAE,CAAC;YACxB,KAAK,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,IAAI,GAAG,CAAC,eAAe,EAAE,CAAC;gBACpD,OAAO,CAAC,MAAM,CAAC,GAAG,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC,CAAA;YAC/C,CAAC;QACH,CAAC;QACD,OAAO,MAAM,CAAC;YACZ,aAAa,EAAE,IAAI,CAAC,aAAa;YACjC,OAAO,EAAE,iBAAiB,CAAC,IAAI,CAAC;YAChC,OAAO;YACP,yEAAyE;YACzE,wEAAwE;YACxE,QAAQ,EAAE,IAAI;YACd,MAAM,EAAE,gBAAgB;SACzB,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;IAEF,uEAAuE;IACvE,MAAM,CAAC,GAAG,CAAC,oCAAoC,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE;QACrE,MAAM,IAAI,GAAG,MAAM,aAAa,CAAC,GAAG,EAAE,UAAU,EAAE,EAAE,CAAC,CAAA;QACrD,IAAI,CAAC,IAAI;YAAE,OAAO,YAAY,EAAE,CAAA;QAEhC,MAAM,EAAE,IAAI,EAAE,GAAG,WAAW,CAAC,GAAG,CAAC,CAAA;QACjC,MAAM,QAAQ,GAAG,MAAM,iBAAiB,CAAC,EAAE,EAAE,MAAM,CAAC,EAAG,CAAC,CAAA;QACxD,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAA;QACtD,MAAM,cAAc,GAAG,iBAAiB,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAA;QAC7E,OAAO,MAAM,CAAC,EAAE,aAAa,EAAE,IAAI,CAAC,aAAa,EAAE,QAAQ,EAAE,cAAc,EAAE,CAAC,CAAA;IAChF,CAAC,CAAC,CAAA;IAEF,uEAAuE;IACvE,MAAM,CAAC,IAAI,CAAC,eAAe,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;QACzC,MAAM,IAAI,GAAG,MAAM,aAAa,CAAC,GAAG,EAAE,UAAU,EAAE,EAAE,CAAC,CAAA;QACrD,IAAI,CAAC,IAAI;YAAE,OAAO,YAAY,EAAE,CAAA;QAEhC,IAAI,IAAa,CAAA;QACjB,IAAI,CAAC;YAAC,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAA;QAAC,CAAC;QAAC,MAAM,CAAC;YAAC,OAAO,SAAS,CAAC,aAAa,EAAE,mBAAmB,EAAE,GAAG,CAAC,CAAA;QAAC,CAAC;QAEnG,MAAM,MAAM,GAAG,uBAAuB,CAAC,SAAS,CAAC,IAAI,CAAC,CAAA;QACtD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,OAAO,SAAS,CAAC,kBAAkB,EAAE,mBAAmB,EAAE,GAAG,EAAE,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAA;QACxF,CAAC;QACD,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,MAAM,CAAC,IAAI,CAAA;QAExC,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,WAAW,CAAC,GAAG,CAAC,CAAA;QAC3C,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;YAC9C,OAAO,SAAS,CAAC,kBAAkB,EAAE,WAAW,MAAM,mCAAmC,EAAE,GAAG,CAAC,CAAA;QACjG,CAAC;QAED,6EAA6E;QAC7E,MAAM,IAAI,GAAG,MAAM,cAAc,CAAC,EAAE,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAA;QACrD,IAAI,CAAC,IAAI;YAAE,OAAO,QAAQ,CAAC,0BAA0B,CAAC,CAAA;QAEtD,MAAM,eAAe,GAAG,IAAI,CAAC,eAAyB,CAAA;QACtD,MAAM,WAAW,GAAG,GAAG,CAAC,iBAAiB,EAAE,CAAC,GAAG,CAAC,eAAe,CAAC,CAAA;QAChE,IAAI,CAAC,WAAW;YAAE,OAAO,SAAS,CAAC,aAAa,EAAE,yBAAyB,eAAe,GAAG,EAAE,GAAG,CAAC,CAAA;QACnG,MAAM,WAAW,GAAG,GAAG,CAAC,iBAAiB,EAAE,CAAC,GAAG,CAAC,eAAe,CAAC,IAAI,IAAI,CAAA;QAExE,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,EAAE,EAAE,WAAW,EAAE,QAAQ,CAAC,CAAA;QAC9D,IAAI,CAAC,MAAM;YAAE,OAAO,QAAQ,CAAC,0BAA0B,CAAC,CAAA;QAExD,wDAAwD;QACxD,MAAM,QAAQ,GAAG,MAAM,iBAAiB,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAA;QACtD,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC,EAAE,CAAC;YAC9C,OAAO,SAAS,CAAC,UAAU,EAAE,MAAM,MAAM,+CAA+C,EAAE,GAAG,CAAC,CAAA;QAChG,CAAC;QAED,MAAM,IAAI,GAAG,oBAAoB,CAAC,MAAiC,EAAE,MAAM,CAAC,CAAA;QAC5E,MAAM,OAAO,GAAG,MAAM,aAAa,CAAC,EAAE,EAAE,WAAW,EAAE,WAAW,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,CAAC,CAAA;QAE1F,OAAO,MAAM,CAAC,EAAE,EAAE,EAAE,OAAO,CAAC,EAAE,EAAE,MAAM,EAAE,eAAe,EAAE,EAAE,GAAG,CAAC,CAAA;IACjE,CAAC,CAAC,CAAA;AACJ,CAAC"}

package/dist/api/tree-routes.d.ts

@@ -0,0 +1,4 @@
+import type { Router } from './router.js';
+import type { KywiDb } from '../db/client.js';
+export declare function registerTreeRoutes(router: Router, db: KywiDb, authSecret: string, defaultSiteId?: string): void;
+//# sourceMappingURL=tree-routes.d.ts.map

package/dist/api/tree-routes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tree-routes.d.ts","sourceRoot":"","sources":["../../src/api/tree-routes.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,aAAa,CAAA;AACzC,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,iBAAiB,CAAA;AA2B7C,wBAAgB,kBAAkB,CAChC,MAAM,EAAE,MAAM,EACd,EAAE,EAAE,MAAM,EACV,UAAU,EAAE,MAAM,EAClB,aAAa,CAAC,EAAE,MAAM,GACrB,IAAI,CA8IN"}

package/dist/api/tree-routes.js

@@ -0,0 +1,149 @@
+import { z } from 'zod';
+import { jsonOk, jsonError, unauthorized, forbidden, validationError } from './response.js';
+import { resolveAuth } from './auth.js';
+import { canAccessContent } from '../auth/roles.js';
+import { checkDocumentAccess, checkDocumentMutationAccess } from '../auth/access-control.js';
+import { moveContent, copyContent, reorderSiblings, getAllContentForSite, buildAdminTree } from '../db/tree-queries.js';
+import { getLock } from '../db/lock-queries.js';
+import { getContentById } from '../db/content-queries.js';
+import { archivePath } from '../db/filename-archive-queries.js';
+const moveSchema = z.object({
+    parentId: z.string().uuid(),
+    sortOrder: z.number().int().optional(),
+});
+const copySchema = z.object({
+    parentId: z.string().uuid(),
+    deep: z.boolean().optional(),
+});
+const sortSchema = z.array(z.object({
+    id: z.string().uuid(),
+    sortOrder: z.number().int(),
+}));
+export function registerTreeRoutes(router, db, authSecret, defaultSiteId) {
+    // GET /tree — full admin site tree (all content, no isNav filter)
+    router.get('/tree', async (req) => {
+        const auth = await resolveAuth(req.headers.get('authorization'), authSecret, db);
+        if (!auth.user)
+            return unauthorized();
+        if (!canAccessContent(auth.user.role, 'write'))
+            return forbidden();
+        // The caller supplies an already-resolved site id — a `?siteId=` override
+        // or the resolved default configured at registration — matching the
+        // sibling nav routes, which also pass the site id straight to their query.
+        const url = new URL(req.url);
+        const siteId = url.searchParams.get('siteId') ?? defaultSiteId ?? '';
+        if (!siteId)
+            return jsonError('BAD_REQUEST', 'siteId is required', 400);
+        const rows = await getAllContentForSite(db, siteId);
+        const tree = buildAdminTree(rows);
+        return jsonOk(tree);
+    });
+    // POST /content/:type/:id/move
+    router.post('/content/:type/:id/move', async (req, params) => {
+        const auth = await resolveAuth(req.headers.get('authorization'), authSecret, db);
+        if (!auth.user)
+            return unauthorized();
+        if (!canAccessContent(auth.user.role, 'write'))
+            return forbidden();
+        // Content-ACL: block moving a node the caller cannot read/write (G-J04b-01).
+        if (!(await checkDocumentMutationAccess(db, params.id, auth.user, 'write')))
+            return forbidden();
+        let body;
+        try {
+            body = await req.json();
+        }
+        catch {
+            return jsonError('BAD_REQUEST', 'Invalid JSON body', 400);
+        }
+        const parsed = moveSchema.safeParse(body);
+        if (!parsed.success) {
+            return validationError(parsed.error.errors.map(e => ({ path: e.path.join('.'), message: e.message })));
+        }
+        // Check lock on source content
+        const sourceLock = await getLock(db, params.id);
+        if (sourceLock && sourceLock.userId !== auth.user.id) {
+            return jsonError('LOCKED', 'Source content is locked', 423, {
+                lockedBy: sourceLock.userId,
+                expiresAt: sourceLock.expiresAt.toISOString(),
+            });
+        }
+        // Check lock on target parent
+        const targetLock = await getLock(db, parsed.data.parentId);
+        if (targetLock && targetLock.userId !== auth.user.id) {
+            return jsonError('LOCKED', 'Target parent is locked', 423, {
+                lockedBy: targetLock.userId,
+                expiresAt: targetLock.expiresAt.toISOString(),
+            });
+        }
+        // W8: capture old path before move for redirect archive
+        const beforeMove = await getContentById(db, null, params.id);
+        const oldPath = beforeMove ? beforeMove.path : undefined;
+        const siteId = beforeMove ? beforeMove.siteId : undefined;
+        await moveContent(db, params.id, parsed.data.parentId, parsed.data.sortOrder);
+        // W8: archive old path after move if path changed
+        if (oldPath && siteId) {
+            const afterMove = await getContentById(db, null, params.id);
+            const newPath = afterMove ? afterMove.path : undefined;
+            if (newPath && oldPath !== newPath) {
+                await archivePath(db, siteId, oldPath, newPath, params.id);
+            }
+        }
+        return jsonOk({ moved: true });
+    });
+    // POST /content/:type/:id/copy
+    router.post('/content/:type/:id/copy', async (req, params) => {
+        const auth = await resolveAuth(req.headers.get('authorization'), authSecret, db);
+        if (!auth.user)
+            return unauthorized();
+        if (!canAccessContent(auth.user.role, 'write'))
+            return forbidden();
+        // Content-ACL: block copying (duplicating the content of) a node the caller
+        // cannot read (G-J04b-01). Copy leaves the source unchanged, so a read grant
+        // — not a write grant — is the correct boundary for the source node.
+        if (!(await checkDocumentAccess(db, params.id, auth.user, 'read')))
+            return forbidden();
+        let body;
+        try {
+            body = await req.json();
+        }
+        catch {
+            return jsonError('BAD_REQUEST', 'Invalid JSON body', 400);
+        }
+        const parsed = copySchema.safeParse(body);
+        if (!parsed.success) {
+            return validationError(parsed.error.errors.map(e => ({ path: e.path.join('.'), message: e.message })));
+        }
+        // Check lock on target parent for copy
+        const copyTargetLock = await getLock(db, parsed.data.parentId);
+        if (copyTargetLock && copyTargetLock.userId !== auth.user.id) {
+            return jsonError('LOCKED', 'Target parent is locked', 423, {
+                lockedBy: copyTargetLock.userId,
+                expiresAt: copyTargetLock.expiresAt.toISOString(),
+            });
+        }
+        const newId = await copyContent(db, params.id, parsed.data.parentId, parsed.data.deep);
+        return jsonOk({ id: newId }, 201);
+    });
+    // PUT /content/sort
+    router.put('/content/sort', async (req) => {
+        const auth = await resolveAuth(req.headers.get('authorization'), authSecret, db);
+        if (!auth.user)
+            return unauthorized();
+        if (!canAccessContent(auth.user.role, 'write'))
+            return forbidden();
+        let body;
+        try {
+            body = await req.json();
+        }
+        catch {
+            return jsonError('BAD_REQUEST', 'Invalid JSON body', 400);
+        }
+        const parsed = sortSchema.safeParse(body);
+        if (!parsed.success) {
+            return validationError(parsed.error.errors.map(e => ({ path: e.path.join('.'), message: e.message })));
+        }
+        await reorderSiblings(db, parsed.data);
+        return jsonOk({ sorted: true });
+    });
+}
+//# sourceMappingURL=tree-routes.js.map

package/dist/api/tree-routes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tree-routes.js","sourceRoot":"","sources":["../../src/api/tree-routes.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AAGvB,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,YAAY,EAAE,SAAS,EAAE,eAAe,EAAE,MAAM,eAAe,CAAA;AAC3F,OAAO,EAAE,WAAW,EAAE,MAAM,WAAW,CAAA;AACvC,OAAO,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAA;AACnD,OAAO,EAAE,mBAAmB,EAAE,2BAA2B,EAAE,MAAM,2BAA2B,CAAA;AAC5F,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,eAAe,EAAE,oBAAoB,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAA;AACvH,OAAO,EAAE,OAAO,EAAE,MAAM,uBAAuB,CAAA;AAC/C,OAAO,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAA;AACzD,OAAO,EAAE,WAAW,EAAE,MAAM,mCAAmC,CAAA;AAE/D,MAAM,UAAU,GAAG,CAAC,CAAC,MAAM,CAAC;IAC1B,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE;IAC3B,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;CACvC,CAAC,CAAA;AAEF,MAAM,UAAU,GAAG,CAAC,CAAC,MAAM,CAAC;IAC1B,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE;IAC3B,IAAI,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;CAC7B,CAAC,CAAA;AAEF,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,CACxB,CAAC,CAAC,MAAM,CAAC;IACP,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE;IACrB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE;CAC5B,CAAC,CACH,CAAA;AAED,MAAM,UAAU,kBAAkB,CAChC,MAAc,EACd,EAAU,EACV,UAAkB,EAClB,aAAsB;IAEtB,kEAAkE;IAClE,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;QAChC,MAAM,IAAI,GAAG,MAAM,WAAW,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,EAAE,UAAU,EAAE,EAAE,CAAC,CAAA;QAChF,IAAI,CAAC,IAAI,CAAC,IAAI;YAAE,OAAO,YAAY,EAAE,CAAA;QACrC,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC;YAAE,OAAO,SAAS,EAAE,CAAA;QAElE,0EAA0E;QAC1E,oEAAoE;QACpE,2EAA2E;QAC3E,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;QAC5B,MAAM,MAAM,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,aAAa,IAAI,EAAE,CAAA;QAEpE,IAAI,CAAC,MAAM;YAAE,OAAO,SAAS,CAAC,aAAa,EAAE,oBAAoB,EAAE,GAAG,CAAC,CAAA;QAEvE,MAAM,IAAI,GAAG,MAAM,oBAAoB,CAAC,EAAE,EAAE,MAAM,CAAC,CAAA;QACnD,MAAM,IAAI,GAAG,cAAc,CAAC,IAAI,CAAC,CAAA;QAEjC,OAAO,MAAM,CAAC,IAAI,CAAC,CAAA;IACrB,CAAC,CAAC,CAAA;IAEF,+BAA+B;IAC/B,MAAM,CAAC,IAAI,CAAC,yBAAyB,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE;QAC3D,MAAM,IAAI,GAAG,MAAM,WAAW,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,EAAE,UAAU,EAAE,EAAE,CAAC,CAAA;QAChF,IAAI,CAAC,IAAI,CAAC,IAAI;YAAE,OAAO,YAAY,EAAE,CAAA;QACrC,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC;YAAE,OAAO,SAAS,EAAE,CAAA;QAClE,6EAA6E;QAC7E,IAAI,CAAC,CAAC,MAAM,2BAA2B,CAAC,EAAE,EAAE,MAAM,CAAC,EAAG,EAAE,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;YAAE,OAAO,SAAS,EAAE,CAAA;QAEhG,IAAI,IAAa,CAAA;QACjB,IAAI,CAAC;YACH,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAA;QACzB,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,SAAS,CAAC,aAAa,EAAE,mBAAmB,EAAE,GAAG,CAAC,CAAA;QAC3D,CAAC;QAED,MAAM,MAAM,GAAG,UAAU,CAAC,SAAS,CAAC,IAAI,CAAC,CAAA;QACzC,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,OAAO,eAAe,CACpB,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAC/E,CAAA;QACH,CAAC;QAED,+BAA+B;QAC/B,MAAM,UAAU,GAAG,MAAM,OAAO,CAAC,EAAE,EAAE,MAAM,CAAC,EAAG,CAAC,CAAA;QAChD,IAAI,UAAU,IAAI,UAAU,CAAC,MAAM,KAAK,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;YACrD,OAAO,SAAS,CAAC,QAAQ,EAAE,0BAA0B,EAAE,GAAG,EAAE;gBAC1D,QAAQ,EAAE,UAAU,CAAC,MAAM;gBAC3B,SAAS,EAAE,UAAU,CAAC,SAAS,CAAC,WAAW,EAAE;aAC9C,CAAC,CAAA;QACJ,CAAC;QAED,8BAA8B;QAC9B,MAAM,UAAU,GAAG,MAAM,OAAO,CAAC,EAAE,EAAE,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;QAC1D,IAAI,UAAU,IAAI,UAAU,CAAC,MAAM,KAAK,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;YACrD,OAAO,SAAS,CAAC,QAAQ,EAAE,yBAAyB,EAAE,GAAG,EAAE;gBACzD,QAAQ,EAAE,UAAU,CAAC,MAAM;gBAC3B,SAAS,EAAE,UAAU,CAAC,SAAS,CAAC,WAAW,EAAE;aAC9C,CAAC,CAAA;QACJ,CAAC;QAED,wDAAwD;QACxD,MAAM,UAAU,GAAG,MAAM,cAAc,CAAC,EAAE,EAAE,IAAI,EAAE,MAAM,CAAC,EAAG,CAAC,CAAA;QAC7D,MAAM,OAAO,GAAG,UAAU,CAAC,CAAC,CAAE,UAAsC,CAAC,IAAc,CAAC,CAAC,CAAC,SAAS,CAAA;QAC/F,MAAM,MAAM,GAAG,UAAU,CAAC,CAAC,CAAE,UAAsC,CAAC,MAAgB,CAAC,CAAC,CAAC,SAAS,CAAA;QAEhG,MAAM,WAAW,CAAC,EAAE,EAAE,MAAM,CAAC,EAAG,EAAE,MAAM,CAAC,IAAI,CAAC,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;QAE9E,kDAAkD;QAClD,IAAI,OAAO,IAAI,MAAM,EAAE,CAAC;YACtB,MAAM,SAAS,GAAG,MAAM,cAAc,CAAC,EAAE,EAAE,IAAI,EAAE,MAAM,CAAC,EAAG,CAAC,CAAA;YAC5D,MAAM,OAAO,GAAG,SAAS,CAAC,CAAC,CAAE,SAAqC,CAAC,IAAc,CAAC,CAAC,CAAC,SAAS,CAAA;YAC7F,IAAI,OAAO,IAAI,OAAO,KAAK,OAAO,EAAE,CAAC;gBACnC,MAAM,WAAW,CAAC,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC,EAAG,CAAC,CAAA;YAC7D,CAAC;QACH,CAAC;QAED,OAAO,MAAM,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;IAChC,CAAC,CAAC,CAAA;IAEF,+BAA+B;IAC/B,MAAM,CAAC,IAAI,CAAC,yBAAyB,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE;QAC3D,MAAM,IAAI,GAAG,MAAM,WAAW,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,EAAE,UAAU,EAAE,EAAE,CAAC,CAAA;QAChF,IAAI,CAAC,IAAI,CAAC,IAAI;YAAE,OAAO,YAAY,EAAE,CAAA;QACrC,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC;YAAE,OAAO,SAAS,EAAE,CAAA;QAClE,4EAA4E;QAC5E,6EAA6E;QAC7E,qEAAqE;QACrE,IAAI,CAAC,CAAC,MAAM,mBAAmB,CAAC,EAAE,EAAE,MAAM,CAAC,EAAG,EAAE,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;YAAE,OAAO,SAAS,EAAE,CAAA;QAEvF,IAAI,IAAa,CAAA;QACjB,IAAI,CAAC;YACH,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAA;QACzB,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,SAAS,CAAC,aAAa,EAAE,mBAAmB,EAAE,GAAG,CAAC,CAAA;QAC3D,CAAC;QAED,MAAM,MAAM,GAAG,UAAU,CAAC,SAAS,CAAC,IAAI,CAAC,CAAA;QACzC,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,OAAO,eAAe,CACpB,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAC/E,CAAA;QACH,CAAC;QAED,uCAAuC;QACvC,MAAM,cAAc,GAAG,MAAM,OAAO,CAAC,EAAE,EAAE,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;QAC9D,IAAI,cAAc,IAAI,cAAc,CAAC,MAAM,KAAK,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;YAC7D,OAAO,SAAS,CAAC,QAAQ,EAAE,yBAAyB,EAAE,GAAG,EAAE;gBACzD,QAAQ,EAAE,cAAc,CAAC,MAAM;gBAC/B,SAAS,EAAE,cAAc,CAAC,SAAS,CAAC,WAAW,EAAE;aAClD,CAAC,CAAA;QACJ,CAAC;QAED,MAAM,KAAK,GAAG,MAAM,WAAW,CAAC,EAAE,EAAE,MAAM,CAAC,EAAG,EAAE,MAAM,CAAC,IAAI,CAAC,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QAEvF,OAAO,MAAM,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,GAAG,CAAC,CAAA;IACnC,CAAC,CAAC,CAAA;IAEF,oBAAoB;IACpB,MAAM,CAAC,GAAG,CAAC,eAAe,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;QACxC,MAAM,IAAI,GAAG,MAAM,WAAW,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,EAAE,UAAU,EAAE,EAAE,CAAC,CAAA;QAChF,IAAI,CAAC,IAAI,CAAC,IAAI;YAAE,OAAO,YAAY,EAAE,CAAA;QACrC,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC;YAAE,OAAO,SAAS,EAAE,CAAA;QAElE,IAAI,IAAa,CAAA;QACjB,IAAI,CAAC;YACH,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAA;QACzB,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,SAAS,CAAC,aAAa,EAAE,mBAAmB,EAAE,GAAG,CAAC,CAAA;QAC3D,CAAC;QAED,MAAM,MAAM,GAAG,UAAU,CAAC,SAAS,CAAC,IAAI,CAAC,CAAA;QACzC,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,OAAO,eAAe,CACpB,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAC/E,CAAA;QACH,CAAC;QAED,MAAM,eAAe,CAAC,EAAE,EAAE,MAAM,CAAC,IAAI,CAAC,CAAA;QAEtC,OAAO,MAAM,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAA;IACjC,CAAC,CAAC,CAAA;AACJ,CAAC"}

package/dist/api/user-routes.d.ts

@@ -0,0 +1,11 @@
+import type { Router } from './router.js';
+import type { KywiDb } from '../db/client.js';
+import type { KywiConfig } from '../config/types.js';
+interface UserRouteContext {
+    config: KywiConfig;
+    db: KywiDb;
+    authSecret: string;
+}
+export declare function registerUserRoutes(router: Router, ctx: UserRouteContext): void;
+export {};
+//# sourceMappingURL=user-routes.d.ts.map

package/dist/api/user-routes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"user-routes.d.ts","sourceRoot":"","sources":["../../src/api/user-routes.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,aAAa,CAAA;AACzC,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,iBAAiB,CAAA;AAC7C,OAAO,KAAK,EAAE,UAAU,EAAe,MAAM,oBAAoB,CAAA;AAoBjE,UAAU,gBAAgB;IACxB,MAAM,EAAE,UAAU,CAAA;IAClB,EAAE,EAAE,MAAM,CAAA;IACV,UAAU,EAAE,MAAM,CAAA;CACnB;AAwBD,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,gBAAgB,GAAG,IAAI,CAkM9E"}

package/dist/api/user-routes.js

@@ -0,0 +1,202 @@
+import { z } from 'zod';
+import { jsonOk, jsonError, notFound, unauthorized, forbidden, validationError } from './response.js';
+import { getUserById, listUsers, createUser, updateUser, deleteUser, } from '../db/user-queries.js';
+import { resolveAuth } from './auth.js';
+import { hasMinRole } from '../auth/roles.js';
+import { resolveSiteId } from '../db/site-queries.js';
+import { getUserSiteMemberships, addUserToSite, removeUserFromSite, } from '../db/site-membership-queries.js';
+function stripPasswordHash(user) {
+    const { passwordHash, ...rest } = user;
+    return rest;
+}
+const createUserSchema = z.object({
+    email: z.string().email(),
+    password: z.string().min(8, 'Password must be at least 8 characters'),
+    firstName: z.string().optional(),
+    lastName: z.string().optional(),
+    role: z.string().optional(),
+    siteId: z.string().optional(),
+});
+const updateUserSchema = z.object({
+    email: z.string().email().optional(),
+    firstName: z.string().optional(),
+    lastName: z.string().optional(),
+    role: z.string().optional(),
+    isActive: z.boolean().optional(),
+});
+export function registerUserRoutes(router, ctx) {
+    const { config, db, authSecret } = ctx;
+    async function authenticate(req) {
+        return resolveAuth(req.headers.get('authorization'), authSecret, db);
+    }
+    // GET /users/me
+    router.get('/users/me', async (req) => {
+        const auth = await authenticate(req);
+        if (!auth.user)
+            return unauthorized();
+        const user = await getUserById(db, auth.user.id);
+        if (!user)
+            return notFound('User not found');
+        return jsonOk(stripPasswordHash(user));
+    });
+    // GET /users — requires siteAdmin
+    router.get('/users', async (req) => {
+        const auth = await authenticate(req);
+        if (!auth.user)
+            return unauthorized();
+        if (!hasMinRole(auth.user.role, 'siteAdmin'))
+            return forbidden();
+        const url = new URL(req.url);
+        const requestedSiteId = url.searchParams.get('siteId') ?? config.sites[0].id;
+        // The config `sites[0].id` is a human-readable slug (e.g. "default"), while
+        // site-membership rows store the site's DB UUID. Resolve so seeded users
+        // (who are joined to a site by membership) are actually returned.
+        const siteId = (await resolveSiteId(db, requestedSiteId)) ?? requestedSiteId;
+        const users = await listUsers(db, siteId);
+        return jsonOk(users.map(u => stripPasswordHash(u)));
+    });
+    // GET /users/:id — requires siteAdmin OR self
+    router.get('/users/:id', async (req, params) => {
+        const auth = await authenticate(req);
+        if (!auth.user)
+            return unauthorized();
+        const isSelf = auth.user.id === params.id;
+        const isAdmin = hasMinRole(auth.user.role, 'siteAdmin');
+        if (!isSelf && !isAdmin)
+            return forbidden();
+        const user = await getUserById(db, params.id);
+        if (!user)
+            return notFound('User not found');
+        return jsonOk(stripPasswordHash(user));
+    });
+    // POST /users — requires siteAdmin
+    router.post('/users', async (req) => {
+        const auth = await authenticate(req);
+        if (!auth.user)
+            return unauthorized();
+        if (!hasMinRole(auth.user.role, 'siteAdmin'))
+            return forbidden();
+        let body;
+        try {
+            body = await req.json();
+        }
+        catch {
+            return jsonError('BAD_REQUEST', 'Invalid JSON body', 400);
+        }
+        const parsed = createUserSchema.safeParse(body);
+        if (!parsed.success) {
+            return validationError(parsed.error.errors.map(e => ({ path: e.path.join('.'), message: e.message })));
+        }
+        const { email, password, firstName, lastName, role, siteId } = parsed.data;
+        const requestedSiteId = siteId ?? config.sites[0].id;
+        // Resolve slug → UUID so the created membership matches how memberships are
+        // stored (and so the new user shows up in the site-scoped GET /users list).
+        const resolvedSiteId = (await resolveSiteId(db, requestedSiteId)) ?? requestedSiteId;
+        const user = await createUser(db, {
+            email,
+            password,
+            firstName: firstName ?? '',
+            lastName: lastName ?? '',
+            role: role ?? 'reader',
+            siteId: resolvedSiteId,
+        });
+        return jsonOk(stripPasswordHash(user), 201);
+    });
+    // PUT /users/:id — requires auth (self or siteAdmin)
+    router.put('/users/:id', async (req, params) => {
+        const auth = await authenticate(req);
+        if (!auth.user)
+            return unauthorized();
+        const isSelf = auth.user.id === params.id;
+        const isAdmin = hasMinRole(auth.user.role, 'siteAdmin');
+        if (!isSelf && !isAdmin)
+            return forbidden();
+        let body;
+        try {
+            body = await req.json();
+        }
+        catch {
+            return jsonError('BAD_REQUEST', 'Invalid JSON body', 400);
+        }
+        const parsed = updateUserSchema.safeParse(body);
+        if (!parsed.success) {
+            return validationError(parsed.error.errors.map(e => ({ path: e.path.join('.'), message: e.message })));
+        }
+        // Non-admins cannot change roles
+        const rawUpdate = { ...parsed.data };
+        if (!isAdmin) {
+            delete rawUpdate.role;
+        }
+        // Safety rail: an admin cannot lock themselves out. Block self-demotion
+        // (changing your own role) and self-deactivation. The token's role is the
+        // source of truth for "current" role, so no extra DB read is needed.
+        if (isSelf) {
+            if (rawUpdate.role !== undefined && rawUpdate.role !== auth.user.role) {
+                return forbidden('You cannot change your own role');
+            }
+            if (rawUpdate.isActive === false) {
+                return forbidden('You cannot deactivate your own account');
+            }
+        }
+        // Strip undefined values to satisfy exactOptionalPropertyTypes
+        const updateData = Object.fromEntries(Object.entries(rawUpdate).filter(([, v]) => v !== undefined));
+        const updated = await updateUser(db, params.id, updateData);
+        if (!updated)
+            return notFound('User not found');
+        return jsonOk(stripPasswordHash(updated));
+    });
+    // DELETE /users/:id — requires siteAdmin
+    router.delete('/users/:id', async (req, params) => {
+        const auth = await authenticate(req);
+        if (!auth.user)
+            return unauthorized();
+        if (!hasMinRole(auth.user.role, 'siteAdmin'))
+            return forbidden();
+        // Safety rail: you cannot delete your own account.
+        if (params.id === auth.user.id) {
+            return forbidden('You cannot delete your own account');
+        }
+        const deleted = await deleteUser(db, params.id);
+        if (!deleted)
+            return notFound('User not found');
+        return jsonOk({ deleted: true });
+    });
+    // GET /users/:id/sites — site memberships for a user (siteAdmin or self)
+    router.get('/users/:id/sites', async (req, params) => {
+        const auth = await authenticate(req);
+        if (!auth.user)
+            return unauthorized();
+        const isSelf = auth.user.id === params.id;
+        const isAdmin = hasMinRole(auth.user.role, 'siteAdmin');
+        if (!isSelf && !isAdmin)
+            return forbidden();
+        const memberships = await getUserSiteMemberships(db, params.id);
+        return jsonOk(memberships);
+    });
+    // POST /users/:id/sites/:siteId — grant a site membership (siteAdmin)
+    router.post('/users/:id/sites/:siteId', async (req, params) => {
+        const auth = await authenticate(req);
+        if (!auth.user)
+            return unauthorized();
+        if (!hasMinRole(auth.user.role, 'siteAdmin'))
+            return forbidden();
+        const user = await getUserById(db, params.id);
+        if (!user)
+            return notFound('User not found');
+        const resolvedSiteId = (await resolveSiteId(db, params.siteId)) ?? params.siteId;
+        await addUserToSite(db, params.id, resolvedSiteId);
+        return jsonOk({ added: true });
+    });
+    // DELETE /users/:id/sites/:siteId — revoke a site membership (siteAdmin)
+    router.delete('/users/:id/sites/:siteId', async (req, params) => {
+        const auth = await authenticate(req);
+        if (!auth.user)
+            return unauthorized();
+        if (!hasMinRole(auth.user.role, 'siteAdmin'))
+            return forbidden();
+        const resolvedSiteId = (await resolveSiteId(db, params.siteId)) ?? params.siteId;
+        await removeUserFromSite(db, params.id, resolvedSiteId);
+        return jsonOk({ removed: true });
+    });
+}
+//# sourceMappingURL=user-routes.js.map

package/dist/api/user-routes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"user-routes.js","sourceRoot":"","sources":["../../src/api/user-routes.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AAIvB,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,YAAY,EAAE,SAAS,EAAE,eAAe,EAAE,MAAM,eAAe,CAAA;AACrG,OAAO,EACL,WAAW,EAGX,SAAS,EACT,UAAU,EACV,UAAU,EACV,UAAU,GACX,MAAM,uBAAuB,CAAA;AAC9B,OAAO,EAAE,WAAW,EAAE,MAAM,WAAW,CAAA;AACvC,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAA;AAC7C,OAAO,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAA;AACrD,OAAO,EACL,sBAAsB,EACtB,aAAa,EACb,kBAAkB,GACnB,MAAM,kCAAkC,CAAA;AAQzC,SAAS,iBAAiB,CAAC,IAA6B;IACtD,MAAM,EAAE,YAAY,EAAE,GAAG,IAAI,EAAE,GAAG,IAAI,CAAA;IACtC,OAAO,IAAI,CAAA;AACb,CAAC;AAED,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC;IAChC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE;IACzB,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,wCAAwC,CAAC;IACrE,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAChC,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC/B,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC3B,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAC9B,CAAC,CAAA;AAEF,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC;IAChC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,CAAC,QAAQ,EAAE;IACpC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAChC,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC/B,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC3B,QAAQ,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;CACjC,CAAC,CAAA;AAEF,MAAM,UAAU,kBAAkB,CAAC,MAAc,EAAE,GAAqB;IACtE,MAAM,EAAE,MAAM,EAAE,EAAE,EAAE,UAAU,EAAE,GAAG,GAAG,CAAA;IAEtC,KAAK,UAAU,YAAY,CAAC,GAAY;QACtC,OAAO,WAAW,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,EAAE,UAAU,EAAE,EAAE,CAAC,CAAA;IACtE,CAAC;IAED,gBAAgB;IAChB,MAAM,CAAC,GAAG,CAAC,WAAW,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;QACpC,MAAM,IAAI,GAAG,MAAM,YAAY,CAAC,GAAG,CAAC,CAAA;QACpC,IAAI,CAAC,IAAI,CAAC,IAAI;YAAE,OAAO,YAAY,EAAE,CAAA;QAErC,MAAM,IAAI,GAAG,MAAM,WAAW,CAAC,EAAE,EAAE,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;QAChD,IAAI,CAAC,IAAI;YAAE,OAAO,QAAQ,CAAC,gBAAgB,CAAC,CAAA;QAE5C,OAAO,MAAM,CAAC,iBAAiB,CAAC,IAA0C,CAAC,CAAC,CAAA;IAC9E,CAAC,CAAC,CAAA;IAEF,kCAAkC;IAClC,MAAM,CAAC,GAAG,CAAC,QAAQ,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;QACjC,MAAM,IAAI,GAAG,MAAM,YAAY,CAAC,GAAG,CAAC,CAAA;QACpC,IAAI,CAAC,IAAI,CAAC,IAAI;YAAE,OAAO,YAAY,EAAE,CAAA;QACrC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,WAAW,CAAC;YAAE,OAAO,SAAS,EAAE,CAAA;QAEhE,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;QAC5B,MAAM,eAAe,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC,EAAE,CAAA;QAC7E,4EAA4E;QAC5E,yEAAyE;QACzE,kEAAkE;QAClE,MAAM,MAAM,GAAG,CAAC,MAAM,aAAa,CAAC,EAAE,EAAE,eAAe,CAAC,CAAC,IAAI,eAAe,CAAA;QAC5E,MAAM,KAAK,GAAG,MAAM,SAAS,CAAC,EAAE,EAAE,MAAM,CAAC,CAAA;QAEzC,OAAO,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,iBAAiB,CAAC,CAAuC,CAAC,CAAC,CAAC,CAAA;IAC3F,CAAC,CAAC,CAAA;IAEF,8CAA8C;IAC9C,MAAM,CAAC,GAAG,CAAC,YAAY,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE;QAC7C,MAAM,IAAI,GAAG,MAAM,YAAY,CAAC,GAAG,CAAC,CAAA;QACpC,IAAI,CAAC,IAAI,CAAC,IAAI;YAAE,OAAO,YAAY,EAAE,CAAA;QAErC,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,KAAK,MAAM,CAAC,EAAE,CAAA;QACzC,MAAM,OAAO,GAAG,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,WAAW,CAAC,CAAA;QACvD,IAAI,CAAC,MAAM,IAAI,CAAC,OAAO;YAAE,OAAO,SAAS,EAAE,CAAA;QAE3C,MAAM,IAAI,GAAG,MAAM,WAAW,CAAC,EAAE,EAAE,MAAM,CAAC,EAAG,CAAC,CAAA;QAC9C,IAAI,CAAC,IAAI;YAAE,OAAO,QAAQ,CAAC,gBAAgB,CAAC,CAAA;QAE5C,OAAO,MAAM,CAAC,iBAAiB,CAAC,IAA0C,CAAC,CAAC,CAAA;IAC9E,CAAC,CAAC,CAAA;IAEF,mCAAmC;IACnC,MAAM,CAAC,IAAI,CAAC,QAAQ,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;QAClC,MAAM,IAAI,GAAG,MAAM,YAAY,CAAC,GAAG,CAAC,CAAA;QACpC,IAAI,CAAC,IAAI,CAAC,IAAI;YAAE,OAAO,YAAY,EAAE,CAAA;QACrC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,WAAW,CAAC;YAAE,OAAO,SAAS,EAAE,CAAA;QAEhE,IAAI,IAAa,CAAA;QACjB,IAAI,CAAC;YACH,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAA;QACzB,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,SAAS,CAAC,aAAa,EAAE,mBAAmB,EAAE,GAAG,CAAC,CAAA;QAC3D,CAAC;QAED,MAAM,MAAM,GAAG,gBAAgB,CAAC,SAAS,CAAC,IAAI,CAAC,CAAA;QAC/C,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,OAAO,eAAe,CACpB,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAC/E,CAAA;QACH,CAAC;QAED,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,SAAS,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,MAAM,CAAC,IAAI,CAAA;QAC1E,MAAM,eAAe,GAAG,MAAM,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC,EAAE,CAAA;QACrD,4EAA4E;QAC5E,4EAA4E;QAC5E,MAAM,cAAc,GAAG,CAAC,MAAM,aAAa,CAAC,EAAE,EAAE,eAAe,CAAC,CAAC,IAAI,eAAe,CAAA;QAEpF,MAAM,IAAI,GAAG,MAAM,UAAU,CAAC,EAAE,EAAE;YAChC,KAAK;YACL,QAAQ;YACR,SAAS,EAAE,SAAS,IAAI,EAAE;YAC1B,QAAQ,EAAE,QAAQ,IAAI,EAAE;YACxB,IAAI,EAAE,IAAI,IAAI,QAAQ;YACtB,MAAM,EAAE,cAAc;SACvB,CAAC,CAAA;QAEF,OAAO,MAAM,CAAC,iBAAiB,CAAC,IAA0C,CAAC,EAAE,GAAG,CAAC,CAAA;IACnF,CAAC,CAAC,CAAA;IAEF,qDAAqD;IACrD,MAAM,CAAC,GAAG,CAAC,YAAY,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE;QAC7C,MAAM,IAAI,GAAG,MAAM,YAAY,CAAC,GAAG,CAAC,CAAA;QACpC,IAAI,CAAC,IAAI,CAAC,IAAI;YAAE,OAAO,YAAY,EAAE,CAAA;QAErC,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,KAAK,MAAM,CAAC,EAAE,CAAA;QACzC,MAAM,OAAO,GAAG,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,WAAW,CAAC,CAAA;QACvD,IAAI,CAAC,MAAM,IAAI,CAAC,OAAO;YAAE,OAAO,SAAS,EAAE,CAAA;QAE3C,IAAI,IAAa,CAAA;QACjB,IAAI,CAAC;YACH,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAA;QACzB,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,SAAS,CAAC,aAAa,EAAE,mBAAmB,EAAE,GAAG,CAAC,CAAA;QAC3D,CAAC;QAED,MAAM,MAAM,GAAG,gBAAgB,CAAC,SAAS,CAAC,IAAI,CAAC,CAAA;QAC/C,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,OAAO,eAAe,CACpB,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAC/E,CAAA;QACH,CAAC;QAED,iCAAiC;QACjC,MAAM,SAAS,GAAG,EAAE,GAAG,MAAM,CAAC,IAAI,EAAE,CAAA;QACpC,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,OAAO,SAAS,CAAC,IAAI,CAAA;QACvB,CAAC;QAED,wEAAwE;QACxE,0EAA0E;QAC1E,qEAAqE;QACrE,IAAI,MAAM,EAAE,CAAC;YACX,IAAI,SAAS,CAAC,IAAI,KAAK,SAAS,IAAI,SAAS,CAAC,IAAI,KAAK,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;gBACtE,OAAO,SAAS,CAAC,iCAAiC,CAAC,CAAA;YACrD,CAAC;YACD,IAAI,SAAS,CAAC,QAAQ,KAAK,KAAK,EAAE,CAAC;gBACjC,OAAO,SAAS,CAAC,wCAAwC,CAAC,CAAA;YAC5D,CAAC;QACH,CAAC;QAED,+DAA+D;QAC/D,MAAM,UAAU,GAAG,MAAM,CAAC,WAAW,CACnC,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,SAAS,CAAC,CACzB,CAAA;QAErC,MAAM,OAAO,GAAG,MAAM,UAAU,CAAC,EAAE,EAAE,MAAM,CAAC,EAAG,EAAE,UAAU,CAAC,CAAA;QAC5D,IAAI,CAAC,OAAO;YAAE,OAAO,QAAQ,CAAC,gBAAgB,CAAC,CAAA;QAE/C,OAAO,MAAM,CAAC,iBAAiB,CAAC,OAA6C,CAAC,CAAC,CAAA;IACjF,CAAC,CAAC,CAAA;IAEF,yCAAyC;IACzC,MAAM,CAAC,MAAM,CAAC,YAAY,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE;QAChD,MAAM,IAAI,GAAG,MAAM,YAAY,CAAC,GAAG,CAAC,CAAA;QACpC,IAAI,CAAC,IAAI,CAAC,IAAI;YAAE,OAAO,YAAY,EAAE,CAAA;QACrC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,WAAW,CAAC;YAAE,OAAO,SAAS,EAAE,CAAA;QAEhE,mDAAmD;QACnD,IAAI,MAAM,CAAC,EAAE,KAAK,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;YAC/B,OAAO,SAAS,CAAC,oCAAoC,CAAC,CAAA;QACxD,CAAC;QAED,MAAM,OAAO,GAAG,MAAM,UAAU,CAAC,EAAE,EAAE,MAAM,CAAC,EAAG,CAAC,CAAA;QAChD,IAAI,CAAC,OAAO;YAAE,OAAO,QAAQ,CAAC,gBAAgB,CAAC,CAAA;QAE/C,OAAO,MAAM,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAA;IAClC,CAAC,CAAC,CAAA;IAEF,yEAAyE;IACzE,MAAM,CAAC,GAAG,CAAC,kBAAkB,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE;QACnD,MAAM,IAAI,GAAG,MAAM,YAAY,CAAC,GAAG,CAAC,CAAA;QACpC,IAAI,CAAC,IAAI,CAAC,IAAI;YAAE,OAAO,YAAY,EAAE,CAAA;QAErC,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,KAAK,MAAM,CAAC,EAAE,CAAA;QACzC,MAAM,OAAO,GAAG,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,WAAW,CAAC,CAAA;QACvD,IAAI,CAAC,MAAM,IAAI,CAAC,OAAO;YAAE,OAAO,SAAS,EAAE,CAAA;QAE3C,MAAM,WAAW,GAAG,MAAM,sBAAsB,CAAC,EAAE,EAAE,MAAM,CAAC,EAAG,CAAC,CAAA;QAChE,OAAO,MAAM,CAAC,WAAW,CAAC,CAAA;IAC5B,CAAC,CAAC,CAAA;IAEF,sEAAsE;IACtE,MAAM,CAAC,IAAI,CAAC,0BAA0B,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE;QAC5D,MAAM,IAAI,GAAG,MAAM,YAAY,CAAC,GAAG,CAAC,CAAA;QACpC,IAAI,CAAC,IAAI,CAAC,IAAI;YAAE,OAAO,YAAY,EAAE,CAAA;QACrC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,WAAW,CAAC;YAAE,OAAO,SAAS,EAAE,CAAA;QAEhE,MAAM,IAAI,GAAG,MAAM,WAAW,CAAC,EAAE,EAAE,MAAM,CAAC,EAAG,CAAC,CAAA;QAC9C,IAAI,CAAC,IAAI;YAAE,OAAO,QAAQ,CAAC,gBAAgB,CAAC,CAAA;QAE5C,MAAM,cAAc,GAAG,CAAC,MAAM,aAAa,CAAC,EAAE,EAAE,MAAM,CAAC,MAAO,CAAC,CAAC,IAAI,MAAM,CAAC,MAAO,CAAA;QAClF,MAAM,aAAa,CAAC,EAAE,EAAE,MAAM,CAAC,EAAG,EAAE,cAAc,CAAC,CAAA;QACnD,OAAO,MAAM,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;IAChC,CAAC,CAAC,CAAA;IAEF,yEAAyE;IACzE,MAAM,CAAC,MAAM,CAAC,0BAA0B,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE;QAC9D,MAAM,IAAI,GAAG,MAAM,YAAY,CAAC,GAAG,CAAC,CAAA;QACpC,IAAI,CAAC,IAAI,CAAC,IAAI;YAAE,OAAO,YAAY,EAAE,CAAA;QACrC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,WAAW,CAAC;YAAE,OAAO,SAAS,EAAE,CAAA;QAEhE,MAAM,cAAc,GAAG,CAAC,MAAM,aAAa,CAAC,EAAE,EAAE,MAAM,CAAC,MAAO,CAAC,CAAC,IAAI,MAAM,CAAC,MAAO,CAAA;QAClF,MAAM,kBAAkB,CAAC,EAAE,EAAE,MAAM,CAAC,EAAG,EAAE,cAAc,CAAC,CAAA;QACxD,OAAO,MAAM,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAA;IAClC,CAAC,CAAC,CAAA;AACJ,CAAC"}

package/dist/api/version-routes.d.ts

@@ -0,0 +1,15 @@
+import type { Router } from './router.js';
+import type { KywiDb } from '../db/client.js';
+import type { KywiConfig, ContentTypeConfig } from '../config/types.js';
+import type { PgTableWithColumns } from 'drizzle-orm/pg-core';
+interface VersionRouteContext {
+    config: KywiConfig;
+    db: KywiDb;
+    authSecret: string;
+    contentTypeMap: Map<string, ContentTypeConfig>;
+    customTableMap: Map<string, PgTableWithColumns<any>>;
+    invalidateContent?: (siteId?: string, id?: string, slug?: string) => Promise<void>;
+}
+export declare function registerVersionRoutes(router: Router, ctx: VersionRouteContext): void;
+export {};
+//# sourceMappingURL=version-routes.d.ts.map

package/dist/api/version-routes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"version-routes.d.ts","sourceRoot":"","sources":["../../src/api/version-routes.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,aAAa,CAAA;AACzC,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,iBAAiB,CAAA;AAC7C,OAAO,KAAK,EAAE,UAAU,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAA;AACvE,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAA;AAU7D,UAAU,mBAAmB;IAC3B,MAAM,EAAE,UAAU,CAAA;IAClB,EAAE,EAAE,MAAM,CAAA;IACV,UAAU,EAAE,MAAM,CAAA;IAClB,cAAc,EAAE,GAAG,CAAC,MAAM,EAAE,iBAAiB,CAAC,CAAA;IAC9C,cAAc,EAAE,GAAG,CAAC,MAAM,EAAE,kBAAkB,CAAC,GAAG,CAAC,CAAC,CAAA;IACpD,iBAAiB,CAAC,EAAE,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,EAAE,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAA;CACnF;AAED,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,mBAAmB,GAAG,IAAI,CA8FpF"}