@kywi-software/core 0.7.1 → 0.9.0

package/dist/api/__tests__/content-locking.test.js

@@ -1,240 +0,0 @@
-import { describe, it, expect, vi, beforeEach } from 'vitest';
-import { Router } from '../router.js';
-import { registerContentRoutes } from '../content-routes.js';
-import { buildCustomFieldTable } from '../../db/dynamic-schema.js';
-import { createHookRegistry } from '../../hooks/registry.js';
-// Mock the content-queries module
-vi.mock('../../db/content-queries.js', () => ({
-    mergeContentRow: vi.fn(),
-    splitCustomFields: vi.fn(),
-    listContent: vi.fn().mockResolvedValue({ rows: [], total: 0 }),
-    getContentById: vi.fn().mockResolvedValue({ id: '1', title: 'Test', status: 'published' }),
-    getContentBySlug: vi.fn(),
-    createContent: vi.fn().mockResolvedValue({ id: '2', title: 'New Post' }),
-    updateContent: vi.fn().mockResolvedValue({ id: '1', title: 'Updated' }),
-    deleteContent: vi.fn().mockResolvedValue(true),
-    publishContent: vi.fn().mockResolvedValue({ id: '1', status: 'published' }),
-    unpublishContent: vi.fn().mockResolvedValue({ id: '1', status: 'draft' }),
-    restoreContent: vi.fn().mockResolvedValue(true),
-    permanentDeleteContent: vi.fn().mockResolvedValue(true),
-}));
-// Mock access-control
-vi.mock('../../auth/access-control.js', () => ({
-    checkContentAccess: vi.fn().mockReturnValue(true),
-    checkDocumentAccess: vi.fn().mockResolvedValue(true),
-    checkDocumentMutationAccess: vi.fn().mockResolvedValue(true),
-}));
-// Mock the content-locking (simple boolean lock)
-vi.mock('../../db/content-locking.js', () => ({
-    isContentLocked: vi.fn().mockResolvedValue(false),
-}));
-// Mock lock-queries
-const mockAcquireLock = vi.fn();
-const mockReleaseLock = vi.fn();
-const mockGetLock = vi.fn();
-const mockIsLocked = vi.fn();
-const mockForceUnlock = vi.fn();
-const mockRenewLock = vi.fn();
-vi.mock('../../db/lock-queries.js', () => {
-    class LockConflictError extends Error {
-        lockHolder;
-        expiresAt;
-        constructor(lockHolder, expiresAt) {
-            super(`Content is locked by user ${lockHolder}`);
-            this.name = 'LockConflictError';
-            this.lockHolder = lockHolder;
-            this.expiresAt = expiresAt;
-        }
-    }
-    return {
-        acquireLock: (...args) => mockAcquireLock(...args),
-        releaseLock: (...args) => mockReleaseLock(...args),
-        getLock: (...args) => mockGetLock(...args),
-        isLocked: (...args) => mockIsLocked(...args),
-        forceUnlock: (...args) => mockForceUnlock(...args),
-        renewLock: (...args) => mockRenewLock(...args),
-        LockConflictError,
-    };
-});
-import { SignJWT } from 'jose';
-const TEST_SECRET = 'test-secret-that-is-at-least-32-chars-long!!';
-async function makeToken(payload = {}) {
-    const key = new TextEncoder().encode(TEST_SECRET);
-    return new SignJWT({ sub: 'user-1', role: 'editor', ...payload })
-        .setProtectedHeader({ alg: 'HS256' })
-        .setIssuedAt()
-        .setExpirationTime('1h')
-        .sign(key);
-}
-async function makeAdminToken() {
-    return makeToken({ sub: 'admin-1', role: 'siteAdmin' });
-}
-const blogPostConfig = {
-    name: 'blogPost',
-    label: 'Blog Post',
-    baseType: 'content',
-    fields: [
-        { name: 'excerpt', type: 'richText', label: 'Excerpt' },
-    ],
-};
-const mockConfig = {
-    mode: 'coupled',
-    db: { provider: 'postgresql', url: 'postgres://localhost/test' },
-    auth: { secret: TEST_SECRET, providers: ['credentials'] },
-    sites: [{ id: 'default', name: 'Test', domain: 'localhost', defaultLocale: 'en', theme: 'default' }],
-    contentTypes: [blogPostConfig],
-    plugins: [],
-    modules: [],
-    themes: [],
-    media: { provider: 'local' },
-    cache: { provider: 'memory' },
-};
-describe('content locking API', () => {
-    let router;
-    beforeEach(() => {
-        vi.clearAllMocks();
-        router = new Router();
-        const contentTypeMap = new Map();
-        const customTableMap = new Map();
-        for (const ct of mockConfig.contentTypes) {
-            contentTypeMap.set(ct.name, ct);
-            customTableMap.set(ct.name, buildCustomFieldTable(ct));
-        }
-        // Default: no time-based lock
-        mockGetLock.mockResolvedValue(null);
-        registerContentRoutes(router, {
-            config: mockConfig,
-            db: {},
-            authSecret: TEST_SECRET,
-            contentTypeMap,
-            customTableMap,
-            hookRegistry: createHookRegistry(),
-            kywiCtx: { cache: { invalidate: async () => { }, invalidatePattern: async () => { } }, user: null },
-        });
-    });
-    describe('POST /content/:type/:id/lock', () => {
-        it('acquires lock and returns 200', async () => {
-            const lockInfo = {
-                contentId: 'abc',
-                userId: 'user-1',
-                lockedAt: new Date(),
-                expiresAt: new Date(Date.now() + 30 * 60_000),
-            };
-            mockAcquireLock.mockResolvedValue(lockInfo);
-            const token = await makeToken();
-            const res = await router.handle(new Request('http://localhost/api/v1/content/blogPost/abc/lock', {
-                method: 'POST',
-                headers: { 'Authorization': `Bearer ${token}` },
-            }), ['content', 'blogPost', 'abc', 'lock']);
-            expect(res.status).toBe(200);
-            const body = await res.json();
-            expect(body.data.userId).toBe('user-1');
-        });
-        it('returns 409 when locked by another user', async () => {
-            const { LockConflictError } = await import('../../db/lock-queries.js');
-            mockAcquireLock.mockRejectedValue(new LockConflictError('user-other', new Date(Date.now() + 30 * 60_000)));
-            const token = await makeToken();
-            const res = await router.handle(new Request('http://localhost/api/v1/content/blogPost/abc/lock', {
-                method: 'POST',
-                headers: { 'Authorization': `Bearer ${token}` },
-            }), ['content', 'blogPost', 'abc', 'lock']);
-            expect(res.status).toBe(409);
-            const body = await res.json();
-            expect(body.error.details.lockedBy).toBe('user-other');
-        });
-    });
-    describe('PUT /content/:type/:id with lock check', () => {
-        it('returns 423 when another user holds the lock', async () => {
-            const lockInfo = {
-                contentId: 'abc',
-                userId: 'user-other',
-                lockedAt: new Date(),
-                expiresAt: new Date(Date.now() + 30 * 60_000),
-            };
-            mockGetLock.mockResolvedValue(lockInfo);
-            const token = await makeToken();
-            const res = await router.handle(new Request('http://localhost/api/v1/content/blogPost/abc', {
-                method: 'PUT',
-                body: JSON.stringify({ title: 'Updated', excerpt: 'test' }),
-                headers: {
-                    'Content-Type': 'application/json',
-                    'Authorization': `Bearer ${token}`,
-                },
-            }), ['content', 'blogPost', 'abc']);
-            expect(res.status).toBe(423);
-            const body = await res.json();
-            expect(body.error.details.lockedBy).toBe('user-other');
-        });
-        it('allows same user to edit and renews lock', async () => {
-            const lockInfo = {
-                contentId: 'abc',
-                userId: 'user-1',
-                lockedAt: new Date(),
-                expiresAt: new Date(Date.now() + 30 * 60_000),
-            };
-            mockGetLock.mockResolvedValue(lockInfo);
-            mockRenewLock.mockResolvedValue({ ...lockInfo, expiresAt: new Date(Date.now() + 60 * 60_000) });
-            const token = await makeToken();
-            const res = await router.handle(new Request('http://localhost/api/v1/content/blogPost/abc', {
-                method: 'PUT',
-                body: JSON.stringify({ title: 'Updated', excerpt: 'test' }),
-                headers: {
-                    'Content-Type': 'application/json',
-                    'Authorization': `Bearer ${token}`,
-                },
-            }), ['content', 'blogPost', 'abc']);
-            expect(res.status).toBe(200);
-            expect(mockRenewLock).toHaveBeenCalledWith(expect.anything(), 'abc', 'user-1');
-        });
-    });
-    describe('DELETE /content/:type/:id/lock', () => {
-        it('releases lock and returns 200', async () => {
-            mockReleaseLock.mockResolvedValue(true);
-            const token = await makeToken();
-            const res = await router.handle(new Request('http://localhost/api/v1/content/blogPost/abc/lock', {
-                method: 'DELETE',
-                headers: { 'Authorization': `Bearer ${token}` },
-            }), ['content', 'blogPost', 'abc', 'lock']);
-            expect(res.status).toBe(200);
-            const body = await res.json();
-            expect(body.data.unlocked).toBe(true);
-        });
-    });
-    describe('DELETE /content/:type/:id/lock/force', () => {
-        it('admin force-unlocks and returns 200', async () => {
-            mockForceUnlock.mockResolvedValue(true);
-            const token = await makeAdminToken();
-            const res = await router.handle(new Request('http://localhost/api/v1/content/blogPost/abc/lock/force', {
-                method: 'DELETE',
-                headers: { 'Authorization': `Bearer ${token}` },
-            }), ['content', 'blogPost', 'abc', 'lock', 'force']);
-            expect(res.status).toBe(200);
-            const body = await res.json();
-            expect(body.data.unlocked).toBe(true);
-        });
-        it('non-admin cannot force-unlock', async () => {
-            const token = await makeToken(); // editor role
-            const res = await router.handle(new Request('http://localhost/api/v1/content/blogPost/abc/lock/force', {
-                method: 'DELETE',
-                headers: { 'Authorization': `Bearer ${token}` },
-            }), ['content', 'blogPost', 'abc', 'lock', 'force']);
-            expect(res.status).toBe(403);
-        });
-    });
-    describe('unlock allows anyone to edit', () => {
-        it('after unlock, PUT succeeds without lock error', async () => {
-            mockGetLock.mockResolvedValue(null);
-            const token = await makeToken();
-            const res = await router.handle(new Request('http://localhost/api/v1/content/blogPost/abc', {
-                method: 'PUT',
-                body: JSON.stringify({ title: 'Updated', excerpt: 'test' }),
-                headers: {
-                    'Content-Type': 'application/json',
-                    'Authorization': `Bearer ${token}`,
-                },
-            }), ['content', 'blogPost', 'abc']);
-            expect(res.status).toBe(200);
-        });
-    });
-});
-//# sourceMappingURL=content-locking.test.js.map

package/dist/api/__tests__/content-locking.test.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"content-locking.test.js","sourceRoot":"","sources":["../../../src/api/__tests__/content-locking.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAA;AAC7D,OAAO,EAAE,MAAM,EAAE,MAAM,cAAc,CAAA;AACrC,OAAO,EAAE,qBAAqB,EAAE,MAAM,sBAAsB,CAAA;AAE5D,OAAO,EAAE,qBAAqB,EAAE,MAAM,4BAA4B,CAAA;AAClE,OAAO,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAA;AAE5D,kCAAkC;AAClC,EAAE,CAAC,IAAI,CAAC,6BAA6B,EAAE,GAAG,EAAE,CAAC,CAAC;IAC5C,eAAe,EAAE,EAAE,CAAC,EAAE,EAAE;IACxB,iBAAiB,EAAE,EAAE,CAAC,EAAE,EAAE;IAC1B,WAAW,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;IAC9D,cAAc,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC;IAC1F,gBAAgB,EAAE,EAAE,CAAC,EAAE,EAAE;IACzB,aAAa,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC;IACxE,aAAa,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC;IACvE,aAAa,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,IAAI,CAAC;IAC9C,cAAc,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC;IAC3E,gBAAgB,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;IACzE,cAAc,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,IAAI,CAAC;IAC/C,sBAAsB,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,IAAI,CAAC;CACxD,CAAC,CAAC,CAAA;AAEH,sBAAsB;AACtB,EAAE,CAAC,IAAI,CAAC,8BAA8B,EAAE,GAAG,EAAE,CAAC,CAAC;IAC7C,kBAAkB,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,eAAe,CAAC,IAAI,CAAC;IACjD,mBAAmB,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,IAAI,CAAC;IACpD,2BAA2B,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,IAAI,CAAC;CAC7D,CAAC,CAAC,CAAA;AAEH,iDAAiD;AACjD,EAAE,CAAC,IAAI,CAAC,6BAA6B,EAAE,GAAG,EAAE,CAAC,CAAC;IAC5C,eAAe,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,KAAK,CAAC;CAClD,CAAC,CAAC,CAAA;AAEH,oBAAoB;AACpB,MAAM,eAAe,GAAG,EAAE,CAAC,EAAE,EAAE,CAAA;AAC/B,MAAM,eAAe,GAAG,EAAE,CAAC,EAAE,EAAE,CAAA;AAC/B,MAAM,WAAW,GAAG,EAAE,CAAC,EAAE,EAAE,CAAA;AAC3B,MAAM,YAAY,GAAG,EAAE,CAAC,EAAE,EAAE,CAAA;AAC5B,MAAM,eAAe,GAAG,EAAE,CAAC,EAAE,EAAE,CAAA;AAC/B,MAAM,aAAa,GAAG,EAAE,CAAC,EAAE,EAAE,CAAA;AAE7B,EAAE,CAAC,IAAI,CAAC,0BAA0B,EAAE,GAAG,EAAE;IACvC,MAAM,iBAAkB,SAAQ,KAAK;QACnC,UAAU,CAAQ;QAClB,SAAS,CAAM;QACf,YAAY,UAAkB,EAAE,SAAe;YAC7C,KAAK,CAAC,6BAA6B,UAAU,EAAE,CAAC,CAAA;YAChD,IAAI,CAAC,IAAI,GAAG,mBAAmB,CAAA;YAC/B,IAAI,CAAC,UAAU,GAAG,UAAU,CAAA;YAC5B,IAAI,CAAC,SAAS,GAAG,SAAS,CAAA;QAC5B,CAAC;KACF;IAED,OAAO;QACL,WAAW,EAAE,CAAC,GAAG,IAAe,EAAE,EAAE,CAAC,eAAe,CAAC,GAAG,IAAI,CAAC;QAC7D,WAAW,EAAE,CAAC,GAAG,IAAe,EAAE,EAAE,CAAC,eAAe,CAAC,GAAG,IAAI,CAAC;QAC7D,OAAO,EAAE,CAAC,GAAG,IAAe,EAAE,EAAE,CAAC,WAAW,CAAC,GAAG,IAAI,CAAC;QACrD,QAAQ,EAAE,CAAC,GAAG,IAAe,EAAE,EAAE,CAAC,YAAY,CAAC,GAAG,IAAI,CAAC;QACvD,WAAW,EAAE,CAAC,GAAG,IAAe,EAAE,EAAE,CAAC,eAAe,CAAC,GAAG,IAAI,CAAC;QAC7D,SAAS,EAAE,CAAC,GAAG,IAAe,EAAE,EAAE,CAAC,aAAa,CAAC,GAAG,IAAI,CAAC;QACzD,iBAAiB;KAClB,CAAA;AACH,CAAC,CAAC,CAAA;AAEF,OAAO,EAAE,OAAO,EAAE,MAAM,MAAM,CAAA;AAE9B,MAAM,WAAW,GAAG,8CAA8C,CAAA;AAElE,KAAK,UAAU,SAAS,CAAC,UAAmC,EAAE;IAC5D,MAAM,GAAG,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,WAAW,CAAC,CAAA;IACjD,OAAO,IAAI,OAAO,CAAC,EAAE,GAAG,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,OAAO,EAAE,CAAC;SAC9D,kBAAkB,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC;SACpC,WAAW,EAAE;SACb,iBAAiB,CAAC,IAAI,CAAC;SACvB,IAAI,CAAC,GAAG,CAAC,CAAA;AACd,CAAC;AAED,KAAK,UAAU,cAAc;IAC3B,OAAO,SAAS,CAAC,EAAE,GAAG,EAAE,SAAS,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,CAAA;AACzD,CAAC;AAED,MAAM,cAAc,GAAsB;IACxC,IAAI,EAAE,UAAU;IAChB,KAAK,EAAE,WAAW;IAClB,QAAQ,EAAE,SAAS;IACnB,MAAM,EAAE;QACN,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,SAAS,EAAE;KACxD;CACF,CAAA;AAED,MAAM,UAAU,GAAe;IAC7B,IAAI,EAAE,SAAS;IACf,EAAE,EAAE,EAAE,QAAQ,EAAE,YAAY,EAAE,GAAG,EAAE,2BAA2B,EAAE;IAChE,IAAI,EAAE,EAAE,MAAM,EAAE,WAAW,EAAE,SAAS,EAAE,CAAC,aAAa,CAAC,EAAE;IACzD,KAAK,EAAE,CAAC,EAAE,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,aAAa,EAAE,IAAI,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC;IACpG,YAAY,EAAE,CAAC,cAAc,CAAC;IAC9B,OAAO,EAAE,EAAE;IACX,OAAO,EAAE,EAAE;IACX,MAAM,EAAE,EAAE;IACV,KAAK,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE;IAC5B,KAAK,EAAE,EAAE,QAAQ,EAAE,QAAQ,EAAE;CAC9B,CAAA;AAED,QAAQ,CAAC,qBAAqB,EAAE,GAAG,EAAE;IACnC,IAAI,MAAc,CAAA;IAElB,UAAU,CAAC,GAAG,EAAE;QACd,EAAE,CAAC,aAAa,EAAE,CAAA;QAClB,MAAM,GAAG,IAAI,MAAM,EAAE,CAAA;QACrB,MAAM,cAAc,GAAG,IAAI,GAAG,EAA6B,CAAA;QAC3D,MAAM,cAAc,GAAG,IAAI,GAAG,EAAE,CAAA;QAEhC,KAAK,MAAM,EAAE,IAAI,UAAU,CAAC,YAAY,EAAE,CAAC;YACzC,cAAc,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,CAAA;YAC/B,cAAc,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,EAAE,qBAAqB,CAAC,EAAE,CAAC,CAAC,CAAA;QACxD,CAAC;QAED,8BAA8B;QAC9B,WAAW,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAA;QAEnC,qBAAqB,CAAC,MAAM,EAAE;YAC5B,MAAM,EAAE,UAAU;YAClB,EAAE,EAAE,EAAS;YACb,UAAU,EAAE,WAAW;YACvB,cAAc;YACd,cAAc;YACd,YAAY,EAAE,kBAAkB,EAAE;YAClC,OAAO,EAAE,EAAE,KAAK,EAAE,EAAE,UAAU,EAAE,KAAK,IAAI,EAAE,GAAE,CAAC,EAAE,iBAAiB,EAAE,KAAK,IAAI,EAAE,GAAE,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE;SAClG,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;IAEF,QAAQ,CAAC,8BAA8B,EAAE,GAAG,EAAE;QAC5C,EAAE,CAAC,+BAA+B,EAAE,KAAK,IAAI,EAAE;YAC7C,MAAM,QAAQ,GAAG;gBACf,SAAS,EAAE,KAAK;gBAChB,MAAM,EAAE,QAAQ;gBAChB,QAAQ,EAAE,IAAI,IAAI,EAAE;gBACpB,SAAS,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,MAAM,CAAC;aAC9C,CAAA;YACD,eAAe,CAAC,iBAAiB,CAAC,QAAQ,CAAC,CAAA;YAE3C,MAAM,KAAK,GAAG,MAAM,SAAS,EAAE,CAAA;YAC/B,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,MAAM,CAC7B,IAAI,OAAO,CAAC,mDAAmD,EAAE;gBAC/D,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE,EAAE,eAAe,EAAE,UAAU,KAAK,EAAE,EAAE;aAChD,CAAC,EACF,CAAC,SAAS,EAAE,UAAU,EAAE,KAAK,EAAE,MAAM,CAAC,CACvC,CAAA;YAED,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;YAC5B,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAS,CAAA;YACpC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;QACzC,CAAC,CAAC,CAAA;QAEF,EAAE,CAAC,yCAAyC,EAAE,KAAK,IAAI,EAAE;YACvD,MAAM,EAAE,iBAAiB,EAAE,GAAG,MAAM,MAAM,CAAC,0BAA0B,CAAC,CAAA;YACtE,eAAe,CAAC,iBAAiB,CAC/B,IAAI,iBAAiB,CAAC,YAAY,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,MAAM,CAAC,CAAC,CACxE,CAAA;YAED,MAAM,KAAK,GAAG,MAAM,SAAS,EAAE,CAAA;YAC/B,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,MAAM,CAC7B,IAAI,OAAO,CAAC,mDAAmD,EAAE;gBAC/D,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE,EAAE,eAAe,EAAE,UAAU,KAAK,EAAE,EAAE;aAChD,CAAC,EACF,CAAC,SAAS,EAAE,UAAU,EAAE,KAAK,EAAE,MAAM,CAAC,CACvC,CAAA;YAED,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;YAC5B,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAS,CAAA;YACpC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAA;QACxD,CAAC,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;IAEF,QAAQ,CAAC,wCAAwC,EAAE,GAAG,EAAE;QACtD,EAAE,CAAC,8CAA8C,EAAE,KAAK,IAAI,EAAE;YAC5D,MAAM,QAAQ,GAAG;gBACf,SAAS,EAAE,KAAK;gBAChB,MAAM,EAAE,YAAY;gBACpB,QAAQ,EAAE,IAAI,IAAI,EAAE;gBACpB,SAAS,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,MAAM,CAAC;aAC9C,CAAA;YACD,WAAW,CAAC,iBAAiB,CAAC,QAAQ,CAAC,CAAA;YAEvC,MAAM,KAAK,GAAG,MAAM,SAAS,EAAE,CAAA;YAC/B,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,MAAM,CAC7B,IAAI,OAAO,CAAC,8CAA8C,EAAE;gBAC1D,MAAM,EAAE,KAAK;gBACb,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC;gBAC3D,OAAO,EAAE;oBACP,cAAc,EAAE,kBAAkB;oBAClC,eAAe,EAAE,UAAU,KAAK,EAAE;iBACnC;aACF,CAAC,EACF,CAAC,SAAS,EAAE,UAAU,EAAE,KAAK,CAAC,CAC/B,CAAA;YAED,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;YAC5B,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAS,CAAA;YACpC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAA;QACxD,CAAC,CAAC,CAAA;QAEF,EAAE,CAAC,0CAA0C,EAAE,KAAK,IAAI,EAAE;YACxD,MAAM,QAAQ,GAAG;gBACf,SAAS,EAAE,KAAK;gBAChB,MAAM,EAAE,QAAQ;gBAChB,QAAQ,EAAE,IAAI,IAAI,EAAE;gBACpB,SAAS,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,MAAM,CAAC;aAC9C,CAAA;YACD,WAAW,CAAC,iBAAiB,CAAC,QAAQ,CAAC,CAAA;YACvC,aAAa,CAAC,iBAAiB,CAAC,EAAE,GAAG,QAAQ,EAAE,SAAS,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,MAAM,CAAC,EAAE,CAAC,CAAA;YAE/F,MAAM,KAAK,GAAG,MAAM,SAAS,EAAE,CAAA;YAC/B,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,MAAM,CAC7B,IAAI,OAAO,CAAC,8CAA8C,EAAE;gBAC1D,MAAM,EAAE,KAAK;gBACb,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC;gBAC3D,OAAO,EAAE;oBACP,cAAc,EAAE,kBAAkB;oBAClC,eAAe,EAAE,UAAU,KAAK,EAAE;iBACnC;aACF,CAAC,EACF,CAAC,SAAS,EAAE,UAAU,EAAE,KAAK,CAAC,CAC/B,CAAA;YAED,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;YAC5B,MAAM,CAAC,aAAa,CAAC,CAAC,oBAAoB,CAAC,MAAM,CAAC,QAAQ,EAAE,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAA;QAChF,CAAC,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;IAEF,QAAQ,CAAC,gCAAgC,EAAE,GAAG,EAAE;QAC9C,EAAE,CAAC,+BAA+B,EAAE,KAAK,IAAI,EAAE;YAC7C,eAAe,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAA;YAEvC,MAAM,KAAK,GAAG,MAAM,SAAS,EAAE,CAAA;YAC/B,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,MAAM,CAC7B,IAAI,OAAO,CAAC,mDAAmD,EAAE;gBAC/D,MAAM,EAAE,QAAQ;gBAChB,OAAO,EAAE,EAAE,eAAe,EAAE,UAAU,KAAK,EAAE,EAAE;aAChD,CAAC,EACF,CAAC,SAAS,EAAE,UAAU,EAAE,KAAK,EAAE,MAAM,CAAC,CACvC,CAAA;YAED,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;YAC5B,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAS,CAAA;YACpC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QACvC,CAAC,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;IAEF,QAAQ,CAAC,sCAAsC,EAAE,GAAG,EAAE;QACpD,EAAE,CAAC,qCAAqC,EAAE,KAAK,IAAI,EAAE;YACnD,eAAe,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAA;YAEvC,MAAM,KAAK,GAAG,MAAM,cAAc,EAAE,CAAA;YACpC,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,MAAM,CAC7B,IAAI,OAAO,CAAC,yDAAyD,EAAE;gBACrE,MAAM,EAAE,QAAQ;gBAChB,OAAO,EAAE,EAAE,eAAe,EAAE,UAAU,KAAK,EAAE,EAAE;aAChD,CAAC,EACF,CAAC,SAAS,EAAE,UAAU,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,CAChD,CAAA;YAED,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;YAC5B,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAS,CAAA;YACpC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QACvC,CAAC,CAAC,CAAA;QAEF,EAAE,CAAC,+BAA+B,EAAE,KAAK,IAAI,EAAE;YAC7C,MAAM,KAAK,GAAG,MAAM,SAAS,EAAE,CAAA,CAAC,cAAc;YAC9C,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,MAAM,CAC7B,IAAI,OAAO,CAAC,yDAAyD,EAAE;gBACrE,MAAM,EAAE,QAAQ;gBAChB,OAAO,EAAE,EAAE,eAAe,EAAE,UAAU,KAAK,EAAE,EAAE;aAChD,CAAC,EACF,CAAC,SAAS,EAAE,UAAU,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,CAChD,CAAA;YAED,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;QAC9B,CAAC,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;IAEF,QAAQ,CAAC,8BAA8B,EAAE,GAAG,EAAE;QAC5C,EAAE,CAAC,+CAA+C,EAAE,KAAK,IAAI,EAAE;YAC7D,WAAW,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAA;YAEnC,MAAM,KAAK,GAAG,MAAM,SAAS,EAAE,CAAA;YAC/B,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,MAAM,CAC7B,IAAI,OAAO,CAAC,8CAA8C,EAAE;gBAC1D,MAAM,EAAE,KAAK;gBACb,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC;gBAC3D,OAAO,EAAE;oBACP,cAAc,EAAE,kBAAkB;oBAClC,eAAe,EAAE,UAAU,KAAK,EAAE;iBACnC;aACF,CAAC,EACF,CAAC,SAAS,EAAE,UAAU,EAAE,KAAK,CAAC,CAC/B,CAAA;YAED,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;QAC9B,CAAC,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA"}

package/dist/api/__tests__/content-permission-routes.test.d.ts

@@ -1,2 +0,0 @@
-export {};
-//# sourceMappingURL=content-permission-routes.test.d.ts.map

package/dist/api/__tests__/content-permission-routes.test.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"content-permission-routes.test.d.ts","sourceRoot":"","sources":["../../../src/api/__tests__/content-permission-routes.test.ts"],"names":[],"mappings":""}

package/dist/api/__tests__/content-permission-routes.test.js

@@ -1,128 +0,0 @@
-import { describe, it, expect, vi, beforeEach } from 'vitest';
-import { SignJWT } from 'jose';
-import { Router } from '../router.js';
-import { registerContentPermissionRoutes } from '../content-permission-routes.js';
-vi.mock('../../db/content-permission-queries.js', () => ({
-    listContentPermissions: vi.fn(),
-    grantContentPermission: vi.fn(),
-    revokeContentPermission: vi.fn(),
-}));
-vi.mock('../../db/content-queries.js', () => ({
-    getContentById: vi.fn(),
-}));
-// Needed by resolveAuth
-vi.mock('../../db/user-queries.js', () => ({
-    getUserById: vi.fn(),
-    getUserGroups: vi.fn().mockResolvedValue([]),
-    buildUserContext: vi.fn((user, groups) => ({ id: user.id, role: user.role, groups })),
-}));
-vi.mock('../../db/api-key-queries.js', () => ({
-    resolveApiKey: vi.fn().mockResolvedValue(null),
-}));
-import { listContentPermissions, grantContentPermission, revokeContentPermission } from '../../db/content-permission-queries.js';
-import { getContentById } from '../../db/content-queries.js';
-const TEST_SECRET = 'test-secret-that-is-at-least-32-chars-long!!';
-const CID = '11111111-1111-1111-1111-111111111111';
-const UID = '22222222-2222-2222-2222-222222222222';
-const GID = '33333333-3333-3333-3333-333333333333';
-const PID = '44444444-4444-4444-4444-444444444444';
-async function makeToken(role = 'siteAdmin') {
-    const key = new TextEncoder().encode(TEST_SECRET);
-    return new SignJWT({ sub: 'user-1', role, groups: [] })
-        .setProtectedHeader({ alg: 'HS256' }).setIssuedAt().setExpirationTime('1h').sign(key);
-}
-function auth(token) {
-    return { headers: { Authorization: `Bearer ${token}` } };
-}
-describe('content permission routes', () => {
-    let router;
-    beforeEach(() => {
-        vi.clearAllMocks();
-        router = new Router();
-        registerContentPermissionRoutes(router, { db: {}, authSecret: TEST_SECRET });
-        vi.mocked(getContentById).mockResolvedValue({ id: CID, contentTypeName: 'page' });
-    });
-    describe('GET /content/:id/permissions', () => {
-        it('401 without auth', async () => {
-            const res = await router.handle(new Request(`http://x/content/${CID}/permissions`), ['content', CID, 'permissions']);
-            expect(res.status).toBe(401);
-        });
-        it('403 for a non-siteAdmin', async () => {
-            const res = await router.handle(new Request(`http://x/content/${CID}/permissions`, auth(await makeToken('editor'))), ['content', CID, 'permissions']);
-            expect(res.status).toBe(403);
-        });
-        it('404 when the content does not exist', async () => {
-            vi.mocked(getContentById).mockResolvedValue(null);
-            const res = await router.handle(new Request(`http://x/content/${CID}/permissions`, auth(await makeToken())), ['content', CID, 'permissions']);
-            expect(res.status).toBe(404);
-        });
-        it('returns the ACL entries for a siteAdmin', async () => {
-            vi.mocked(listContentPermissions).mockResolvedValue([{ id: PID, contentId: CID, userId: UID, groupId: null, action: 'write', createdAt: new Date() }]);
-            const res = await router.handle(new Request(`http://x/content/${CID}/permissions`, auth(await makeToken())), ['content', CID, 'permissions']);
-            expect(res.status).toBe(200);
-            const json = await res.json();
-            expect(json.data).toHaveLength(1);
-            expect(vi.mocked(listContentPermissions)).toHaveBeenCalledWith({}, CID);
-        });
-    });
-    describe('POST /content/:id/permissions', () => {
-        it('grants a permission to a user', async () => {
-            vi.mocked(grantContentPermission).mockResolvedValue({ id: PID, contentId: CID, userId: UID, groupId: null, action: 'write', createdAt: new Date() });
-            const res = await router.handle(new Request(`http://x/content/${CID}/permissions`, {
-                method: 'POST', headers: { Authorization: `Bearer ${await makeToken()}`, 'content-type': 'application/json' },
-                body: JSON.stringify({ userId: UID, action: 'write' }),
-            }), ['content', CID, 'permissions']);
-            expect(res.status).toBe(201);
-            expect(vi.mocked(grantContentPermission)).toHaveBeenCalledWith({}, { contentId: CID, userId: UID, groupId: null, action: 'write' });
-        });
-        it('grants a permission to a group', async () => {
-            vi.mocked(grantContentPermission).mockResolvedValue({ id: PID, contentId: CID, userId: null, groupId: GID, action: 'read', createdAt: new Date() });
-            const res = await router.handle(new Request(`http://x/content/${CID}/permissions`, {
-                method: 'POST', headers: { Authorization: `Bearer ${await makeToken()}`, 'content-type': 'application/json' },
-                body: JSON.stringify({ groupId: GID, action: 'read' }),
-            }), ['content', CID, 'permissions']);
-            expect(res.status).toBe(201);
-            expect(vi.mocked(grantContentPermission)).toHaveBeenCalledWith({}, { contentId: CID, userId: null, groupId: GID, action: 'read' });
-        });
-        it('400 when neither userId nor groupId is given', async () => {
-            const res = await router.handle(new Request(`http://x/content/${CID}/permissions`, {
-                method: 'POST', headers: { Authorization: `Bearer ${await makeToken()}`, 'content-type': 'application/json' },
-                body: JSON.stringify({ action: 'write' }),
-            }), ['content', CID, 'permissions']);
-            expect(res.status).toBe(400);
-            expect(vi.mocked(grantContentPermission)).not.toHaveBeenCalled();
-        });
-        it('400 when both userId and groupId are given', async () => {
-            const res = await router.handle(new Request(`http://x/content/${CID}/permissions`, {
-                method: 'POST', headers: { Authorization: `Bearer ${await makeToken()}`, 'content-type': 'application/json' },
-                body: JSON.stringify({ userId: UID, groupId: GID, action: 'write' }),
-            }), ['content', CID, 'permissions']);
-            expect(res.status).toBe(400);
-        });
-        it('400 for an unknown action', async () => {
-            const res = await router.handle(new Request(`http://x/content/${CID}/permissions`, {
-                method: 'POST', headers: { Authorization: `Bearer ${await makeToken()}`, 'content-type': 'application/json' },
-                body: JSON.stringify({ userId: UID, action: 'destroy' }),
-            }), ['content', CID, 'permissions']);
-            expect(res.status).toBe(400);
-        });
-    });
-    describe('DELETE /content/:id/permissions/:permissionId', () => {
-        it('revokes an existing entry', async () => {
-            vi.mocked(revokeContentPermission).mockResolvedValue(true);
-            const res = await router.handle(new Request(`http://x/content/${CID}/permissions/${PID}`, { method: 'DELETE', ...auth(await makeToken()) }), ['content', CID, 'permissions', PID]);
-            expect(res.status).toBe(200);
-            expect(vi.mocked(revokeContentPermission)).toHaveBeenCalledWith({}, PID);
-        });
-        it('404 when the entry does not exist', async () => {
-            vi.mocked(revokeContentPermission).mockResolvedValue(false);
-            const res = await router.handle(new Request(`http://x/content/${CID}/permissions/${PID}`, { method: 'DELETE', ...auth(await makeToken()) }), ['content', CID, 'permissions', PID]);
-            expect(res.status).toBe(404);
-        });
-        it('403 for a non-siteAdmin', async () => {
-            const res = await router.handle(new Request(`http://x/content/${CID}/permissions/${PID}`, { method: 'DELETE', ...auth(await makeToken('author')) }), ['content', CID, 'permissions', PID]);
-            expect(res.status).toBe(403);
-        });
-    });
-});
-//# sourceMappingURL=content-permission-routes.test.js.map

package/dist/api/__tests__/content-permission-routes.test.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"content-permission-routes.test.js","sourceRoot":"","sources":["../../../src/api/__tests__/content-permission-routes.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAA;AAC7D,OAAO,EAAE,OAAO,EAAE,MAAM,MAAM,CAAA;AAC9B,OAAO,EAAE,MAAM,EAAE,MAAM,cAAc,CAAA;AACrC,OAAO,EAAE,+BAA+B,EAAE,MAAM,iCAAiC,CAAA;AAEjF,EAAE,CAAC,IAAI,CAAC,wCAAwC,EAAE,GAAG,EAAE,CAAC,CAAC;IACvD,sBAAsB,EAAE,EAAE,CAAC,EAAE,EAAE;IAC/B,sBAAsB,EAAE,EAAE,CAAC,EAAE,EAAE;IAC/B,uBAAuB,EAAE,EAAE,CAAC,EAAE,EAAE;CACjC,CAAC,CAAC,CAAA;AAEH,EAAE,CAAC,IAAI,CAAC,6BAA6B,EAAE,GAAG,EAAE,CAAC,CAAC;IAC5C,cAAc,EAAE,EAAE,CAAC,EAAE,EAAE;CACxB,CAAC,CAAC,CAAA;AAEH,wBAAwB;AACxB,EAAE,CAAC,IAAI,CAAC,0BAA0B,EAAE,GAAG,EAAE,CAAC,CAAC;IACzC,WAAW,EAAE,EAAE,CAAC,EAAE,EAAE;IACpB,aAAa,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,EAAE,CAAC;IAC5C,gBAAgB,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC,IAAS,EAAE,MAAgB,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;CACrG,CAAC,CAAC,CAAA;AACH,EAAE,CAAC,IAAI,CAAC,6BAA6B,EAAE,GAAG,EAAE,CAAC,CAAC;IAC5C,aAAa,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,IAAI,CAAC;CAC/C,CAAC,CAAC,CAAA;AAEH,OAAO,EAAE,sBAAsB,EAAE,sBAAsB,EAAE,uBAAuB,EAAE,MAAM,wCAAwC,CAAA;AAChI,OAAO,EAAE,cAAc,EAAE,MAAM,6BAA6B,CAAA;AAE5D,MAAM,WAAW,GAAG,8CAA8C,CAAA;AAClE,MAAM,GAAG,GAAG,sCAAsC,CAAA;AAClD,MAAM,GAAG,GAAG,sCAAsC,CAAA;AAClD,MAAM,GAAG,GAAG,sCAAsC,CAAA;AAClD,MAAM,GAAG,GAAG,sCAAsC,CAAA;AAElD,KAAK,UAAU,SAAS,CAAC,IAAI,GAAG,WAAW;IACzC,MAAM,GAAG,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,WAAW,CAAC,CAAA;IACjD,OAAO,IAAI,OAAO,CAAC,EAAE,GAAG,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;SACpD,kBAAkB,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;AACzF,CAAC;AAED,SAAS,IAAI,CAAC,KAAa;IACzB,OAAO,EAAE,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,KAAK,EAAE,EAAE,EAAE,CAAA;AAC1D,CAAC;AAED,QAAQ,CAAC,2BAA2B,EAAE,GAAG,EAAE;IACzC,IAAI,MAAc,CAAA;IAClB,UAAU,CAAC,GAAG,EAAE;QACd,EAAE,CAAC,aAAa,EAAE,CAAA;QAClB,MAAM,GAAG,IAAI,MAAM,EAAE,CAAA;QACrB,+BAA+B,CAAC,MAAM,EAAE,EAAE,EAAE,EAAE,EAAS,EAAE,UAAU,EAAE,WAAW,EAAE,CAAC,CAAA;QACnF,EAAE,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC,iBAAiB,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,eAAe,EAAE,MAAM,EAAS,CAAC,CAAA;IAC1F,CAAC,CAAC,CAAA;IAEF,QAAQ,CAAC,8BAA8B,EAAE,GAAG,EAAE;QAC5C,EAAE,CAAC,kBAAkB,EAAE,KAAK,IAAI,EAAE;YAChC,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,IAAI,OAAO,CAAC,oBAAoB,GAAG,cAAc,CAAC,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE,aAAa,CAAC,CAAC,CAAA;YACpH,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;QAC9B,CAAC,CAAC,CAAA;QAEF,EAAE,CAAC,yBAAyB,EAAE,KAAK,IAAI,EAAE;YACvC,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,IAAI,OAAO,CAAC,oBAAoB,GAAG,cAAc,EAAE,IAAI,CAAC,MAAM,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE,aAAa,CAAC,CAAC,CAAA;YACrJ,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;QAC9B,CAAC,CAAC,CAAA;QAEF,EAAE,CAAC,qCAAqC,EAAE,KAAK,IAAI,EAAE;YACnD,EAAE,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAA;YACjD,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,IAAI,OAAO,CAAC,oBAAoB,GAAG,cAAc,EAAE,IAAI,CAAC,MAAM,SAAS,EAAE,CAAC,CAAC,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE,aAAa,CAAC,CAAC,CAAA;YAC7I,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;QAC9B,CAAC,CAAC,CAAA;QAEF,EAAE,CAAC,yCAAyC,EAAE,KAAK,IAAI,EAAE;YACvD,EAAE,CAAC,MAAM,CAAC,sBAAsB,CAAC,CAAC,iBAAiB,CAAC,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,SAAS,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,EAAE,CAAC,CAAC,CAAA;YACtJ,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,IAAI,OAAO,CAAC,oBAAoB,GAAG,cAAc,EAAE,IAAI,CAAC,MAAM,SAAS,EAAE,CAAC,CAAC,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE,aAAa,CAAC,CAAC,CAAA;YAC7I,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;YAC5B,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAyB,CAAA;YACpD,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAA;YACjC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,sBAAsB,CAAC,CAAC,CAAC,oBAAoB,CAAC,EAAE,EAAE,GAAG,CAAC,CAAA;QACzE,CAAC,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;IAEF,QAAQ,CAAC,+BAA+B,EAAE,GAAG,EAAE;QAC7C,EAAE,CAAC,+BAA+B,EAAE,KAAK,IAAI,EAAE;YAC7C,EAAE,CAAC,MAAM,CAAC,sBAAsB,CAAC,CAAC,iBAAiB,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,SAAS,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,EAAE,CAAC,CAAA;YACpJ,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,IAAI,OAAO,CAAC,oBAAoB,GAAG,cAAc,EAAE;gBACjF,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,MAAM,SAAS,EAAE,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;gBAC7G,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;aACvD,CAAC,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE,aAAa,CAAC,CAAC,CAAA;YACpC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;YAC5B,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,sBAAsB,CAAC,CAAC,CAAC,oBAAoB,CAAC,EAAE,EAAE,EAAE,SAAS,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAA;QACrI,CAAC,CAAC,CAAA;QAEF,EAAE,CAAC,gCAAgC,EAAE,KAAK,IAAI,EAAE;YAC9C,EAAE,CAAC,MAAM,CAAC,sBAAsB,CAAC,CAAC,iBAAiB,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,SAAS,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,EAAE,CAAC,CAAA;YACnJ,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,IAAI,OAAO,CAAC,oBAAoB,GAAG,cAAc,EAAE;gBACjF,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,MAAM,SAAS,EAAE,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;gBAC7G,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;aACvD,CAAC,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE,aAAa,CAAC,CAAC,CAAA;YACpC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;YAC5B,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,sBAAsB,CAAC,CAAC,CAAC,oBAAoB,CAAC,EAAE,EAAE,EAAE,SAAS,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAA;QACpI,CAAC,CAAC,CAAA;QAEF,EAAE,CAAC,8CAA8C,EAAE,KAAK,IAAI,EAAE;YAC5D,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,IAAI,OAAO,CAAC,oBAAoB,GAAG,cAAc,EAAE;gBACjF,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,MAAM,SAAS,EAAE,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;gBAC7G,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;aAC1C,CAAC,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE,aAAa,CAAC,CAAC,CAAA;YACpC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;YAC5B,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,sBAAsB,CAAC,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAA;QAClE,CAAC,CAAC,CAAA;QAEF,EAAE,CAAC,4CAA4C,EAAE,KAAK,IAAI,EAAE;YAC1D,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,IAAI,OAAO,CAAC,oBAAoB,GAAG,cAAc,EAAE;gBACjF,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,MAAM,SAAS,EAAE,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;gBAC7G,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;aACrE,CAAC,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE,aAAa,CAAC,CAAC,CAAA;YACpC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;QAC9B,CAAC,CAAC,CAAA;QAEF,EAAE,CAAC,2BAA2B,EAAE,KAAK,IAAI,EAAE;YACzC,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,IAAI,OAAO,CAAC,oBAAoB,GAAG,cAAc,EAAE;gBACjF,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,MAAM,SAAS,EAAE,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;gBAC7G,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;aACzD,CAAC,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE,aAAa,CAAC,CAAC,CAAA;YACpC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;QAC9B,CAAC,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;IAEF,QAAQ,CAAC,+CAA+C,EAAE,GAAG,EAAE;QAC7D,EAAE,CAAC,2BAA2B,EAAE,KAAK,IAAI,EAAE;YACzC,EAAE,CAAC,MAAM,CAAC,uBAAuB,CAAC,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAA;YAC1D,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,IAAI,OAAO,CAAC,oBAAoB,GAAG,gBAAgB,GAAG,EAAE,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,IAAI,CAAC,MAAM,SAAS,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE,aAAa,EAAE,GAAG,CAAC,CAAC,CAAA;YAClL,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;YAC5B,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,uBAAuB,CAAC,CAAC,CAAC,oBAAoB,CAAC,EAAE,EAAE,GAAG,CAAC,CAAA;QAC1E,CAAC,CAAC,CAAA;QAEF,EAAE,CAAC,mCAAmC,EAAE,KAAK,IAAI,EAAE;YACjD,EAAE,CAAC,MAAM,CAAC,uBAAuB,CAAC,CAAC,iBAAiB,CAAC,KAAK,CAAC,CAAA;YAC3D,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,IAAI,OAAO,CAAC,oBAAoB,GAAG,gBAAgB,GAAG,EAAE,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,IAAI,CAAC,MAAM,SAAS,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE,aAAa,EAAE,GAAG,CAAC,CAAC,CAAA;YAClL,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;QAC9B,CAAC,CAAC,CAAA;QAEF,EAAE,CAAC,yBAAyB,EAAE,KAAK,IAAI,EAAE;YACvC,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,IAAI,OAAO,CAAC,oBAAoB,GAAG,gBAAgB,GAAG,EAAE,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,IAAI,CAAC,MAAM,SAAS,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE,aAAa,EAAE,GAAG,CAAC,CAAC,CAAA;YAC1L,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;QAC9B,CAAC,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA"}

package/dist/api/__tests__/content-routes-site-scope.test.d.ts

@@ -1,2 +0,0 @@
-export {};
-//# sourceMappingURL=content-routes-site-scope.test.d.ts.map

package/dist/api/__tests__/content-routes-site-scope.test.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"content-routes-site-scope.test.d.ts","sourceRoot":"","sources":["../../../src/api/__tests__/content-routes-site-scope.test.ts"],"names":[],"mappings":""}

package/dist/api/__tests__/content-routes-site-scope.test.js

@@ -1,173 +0,0 @@
-import { describe, it, expect, vi, beforeEach } from 'vitest';
-import { Router } from '../router.js';
-import { registerContentRoutes } from '../content-routes.js';
-import { buildCustomFieldTable } from '../../db/dynamic-schema.js';
-import { createHookRegistry } from '../../hooks/registry.js';
-import { SignJWT } from 'jose';
-import { publishContent, unpublishContent, deleteContent, permanentDeleteContent, } from '../../db/content-queries.js';
-import { restoreContentWithRecovery } from '../../db/content-restore.js';
-// Phase G (SECURITY): the by-id and typed content-MUTATION routes must scope by
-// the request's resolved site. Without a siteId predicate an authenticated admin
-// could address (publish / unpublish / soft-delete / restore / permanent-delete)
-// another site's content by UUID. These tests mock the query layer with a
-// siteId-AWARE implementation so a route that fails to thread the resolved siteId
-// surfaces as a cross-site leak.
-const SITE_A = 'site-a-uuid';
-const ROW_A = {
-    id: 'c-a',
-    siteId: SITE_A,
-    contentTypeName: 'blogPost',
-    slug: 'a',
-    status: 'published',
-    title: 'A',
-};
-// A row exists only in Site A; a scope for any other site resolves to null.
-const scoped = (id, siteId) => {
-    if (id !== ROW_A.id)
-        return null;
-    if (siteId !== undefined && siteId !== SITE_A)
-        return null;
-    return { ...ROW_A };
-};
-vi.mock('../../db/content-queries.js', () => ({
-    listContent: vi.fn().mockResolvedValue({ rows: [], total: 0 }),
-    getContentById: vi.fn((_db, _ct, id, siteId) => Promise.resolve(scoped(id, siteId))),
-    getContentBySlug: vi.fn().mockResolvedValue(null),
-    createContent: vi.fn(),
-    updateContent: vi.fn(),
-    deleteContent: vi.fn((_db, id, siteId) => Promise.resolve(scoped(id, siteId) !== null)),
-    publishContent: vi.fn((_db, id, siteId) => Promise.resolve(scoped(id, siteId) ? { ...ROW_A, status: 'published' } : null)),
-    unpublishContent: vi.fn((_db, id, siteId) => Promise.resolve(scoped(id, siteId) ? { ...ROW_A, status: 'draft' } : null)),
-    restoreContent: vi.fn(),
-    permanentDeleteContent: vi.fn((_db, id, siteId) => Promise.resolve(scoped(id, siteId) !== null)),
-}));
-vi.mock('../../db/content-restore.js', () => ({
-    getDeletedContentById: vi.fn().mockResolvedValue(null),
-    listDeletedContent: vi.fn().mockResolvedValue({ rows: [], total: 0 }),
-    listAllDeletedContent: vi.fn().mockResolvedValue({ rows: [], total: 0 }),
-    restoreContentWithRecovery: vi.fn((_db, id, siteId) => Promise.resolve({ restored: scoped(id, siteId) !== null, movedToRecovered: false })),
-    emptyTrashForSite: vi.fn().mockResolvedValue(0),
-    emptyTrashGlobal: vi.fn().mockResolvedValue(0),
-}));
-// Document-level ACL is orthogonal here — allow everything so the site-scope
-// predicate (not the ACL) is what any 404 proves.
-vi.mock('../../auth/access-control.js', () => ({
-    checkContentAccess: vi.fn().mockReturnValue(true),
-    checkDocumentAccess: vi.fn().mockResolvedValue(true),
-    checkDocumentMutationAccess: vi.fn().mockResolvedValue(true),
-    filterFieldsForUser: vi.fn((row) => row),
-}));
-// Content locking never blocks (siteAdmin bypasses anyway).
-vi.mock('../../db/content-locking.js', () => ({ isContentLocked: vi.fn().mockResolvedValue(false) }));
-// resolveSiteId: '?siteId=siteB' → Site B's UUID; anything else → Site A.
-vi.mock('../site-context.js', () => ({
-    resolveSiteId: vi.fn((req) => {
-        const s = new URL(req.url).searchParams.get('siteId');
-        return s === 'siteB' ? 'site-b-uuid' : SITE_A;
-    }),
-}));
-const TEST_SECRET = 'test-secret-that-is-at-least-32-chars-long!!';
-async function makeToken(role = 'siteAdmin') {
-    const key = new TextEncoder().encode(TEST_SECRET);
-    return new SignJWT({ sub: 'u1', role, groups: [] })
-        .setProtectedHeader({ alg: 'HS256' }).setIssuedAt().setExpirationTime('1h').sign(key);
-}
-const blogPost = {
-    name: 'blogPost', label: 'Blog Post', baseType: 'content',
-    fields: [{ name: 'excerpt', type: 'richText', label: 'Excerpt' }],
-};
-const config = {
-    mode: 'coupled',
-    db: { provider: 'postgresql', url: 'postgres://localhost/test' },
-    auth: { secret: TEST_SECRET, providers: ['credentials'] },
-    sites: [
-        { id: 'default', name: 'A', domain: 'a.localhost', defaultLocale: 'en', theme: 'default' },
-        { id: 'siteB', name: 'B', domain: 'b.localhost', defaultLocale: 'en', theme: 'default' },
-    ],
-    contentTypes: [blogPost], plugins: [], modules: [], themes: [],
-    media: { provider: 'local' }, cache: { provider: 'memory' },
-};
-function req(method, url) {
-    return new Request(url, { method, headers: {} });
-}
-async function authed(method, url) {
-    return new Request(url, { method, headers: { Authorization: `Bearer ${await makeToken()}` } });
-}
-describe('content mutation routes — cross-site addressing is blocked (Phase G)', () => {
-    let router;
-    beforeEach(() => {
-        vi.clearAllMocks();
-        router = new Router();
-        const contentTypeMap = new Map([[blogPost.name, blogPost]]);
-        const customTableMap = new Map([[blogPost.name, buildCustomFieldTable(blogPost)]]);
-        registerContentRoutes(router, {
-            config, db: {}, authSecret: TEST_SECRET, contentTypeMap, customTableMap,
-            hookRegistry: createHookRegistry(),
-            kywiCtx: { cache: { invalidate: async () => { }, invalidatePattern: async () => { } }, user: null },
-            siteIdMap: { default: SITE_A, siteB: 'site-b-uuid' },
-        });
-    });
-    // ── by-id publish ──────────────────────────────────────────────────────────
-    it('by-id publish in the owning site succeeds and threads the resolved siteId', async () => {
-        const res = await router.handle(await authed('POST', 'http://a.localhost/api/v1/content/by-id/c-a/publish?siteId=default'), ['content', 'by-id', 'c-a', 'publish']);
-        expect(res.status).toBe(200);
-        expect(publishContent).toHaveBeenCalledWith(expect.anything(), 'c-a', SITE_A);
-    });
-    it('by-id publish scoped to a DIFFERENT site returns 404 (no cross-site publish)', async () => {
-        const res = await router.handle(await authed('POST', 'http://a.localhost/api/v1/content/by-id/c-a/publish?siteId=siteB'), ['content', 'by-id', 'c-a', 'publish']);
-        expect(res.status).toBe(404);
-        expect(publishContent).toHaveBeenCalledWith(expect.anything(), 'c-a', 'site-b-uuid');
-    });
-    // ── typed publish ──────────────────────────────────────────────────────────
-    it('typed publish scoped to a different site returns 404', async () => {
-        const res = await router.handle(await authed('POST', 'http://a.localhost/api/v1/content/blogPost/c-a/publish?siteId=siteB'), ['content', 'blogPost', 'c-a', 'publish']);
-        expect(res.status).toBe(404);
-        expect(publishContent).toHaveBeenCalledWith(expect.anything(), 'c-a', 'site-b-uuid');
-    });
-    // ── by-id unpublish ────────────────────────────────────────────────────────
-    it('by-id unpublish scoped to a different site returns 404', async () => {
-        const res = await router.handle(await authed('POST', 'http://a.localhost/api/v1/content/by-id/c-a/unpublish?siteId=siteB'), ['content', 'by-id', 'c-a', 'unpublish']);
-        expect(res.status).toBe(404);
-        expect(unpublishContent).toHaveBeenCalledWith(expect.anything(), 'c-a', 'site-b-uuid');
-    });
-    // ── by-id soft delete ──────────────────────────────────────────────────────
-    it('by-id soft delete scoped to a different site returns 404', async () => {
-        const res = await router.handle(await authed('DELETE', 'http://a.localhost/api/v1/content/by-id/c-a?siteId=siteB'), ['content', 'by-id', 'c-a']);
-        expect(res.status).toBe(404);
-        expect(deleteContent).toHaveBeenCalledWith(expect.anything(), 'c-a', 'site-b-uuid');
-    });
-    it('by-id soft delete in the owning site succeeds', async () => {
-        const res = await router.handle(await authed('DELETE', 'http://a.localhost/api/v1/content/by-id/c-a?siteId=default'), ['content', 'by-id', 'c-a']);
-        expect(res.status).toBe(200);
-        expect(deleteContent).toHaveBeenCalledWith(expect.anything(), 'c-a', SITE_A);
-    });
-    // ── by-id restore ──────────────────────────────────────────────────────────
-    it('by-id restore scoped to a different site returns 404 (no cross-site restore)', async () => {
-        const res = await router.handle(await authed('POST', 'http://a.localhost/api/v1/content/by-id/c-a/restore?siteId=siteB'), ['content', 'by-id', 'c-a', 'restore']);
-        expect(res.status).toBe(404);
-        expect(restoreContentWithRecovery).toHaveBeenCalledWith(expect.anything(), 'c-a', 'site-b-uuid');
-    });
-    it('by-id restore in the owning site succeeds', async () => {
-        const res = await router.handle(await authed('POST', 'http://a.localhost/api/v1/content/by-id/c-a/restore?siteId=default'), ['content', 'by-id', 'c-a', 'restore']);
-        expect(res.status).toBe(200);
-        expect(restoreContentWithRecovery).toHaveBeenCalledWith(expect.anything(), 'c-a', SITE_A);
-    });
-    // ── by-id permanent delete ─────────────────────────────────────────────────
-    it('by-id permanent delete scoped to a different site returns 404 (no cross-site purge)', async () => {
-        const res = await router.handle(await authed('DELETE', 'http://a.localhost/api/v1/content/by-id/c-a/permanent?siteId=siteB'), ['content', 'by-id', 'c-a', 'permanent']);
-        expect(res.status).toBe(404);
-        expect(permanentDeleteContent).toHaveBeenCalledWith(expect.anything(), 'c-a', 'site-b-uuid');
-    });
-    it('by-id permanent delete in the owning site succeeds', async () => {
-        const res = await router.handle(await authed('DELETE', 'http://a.localhost/api/v1/content/by-id/c-a/permanent?siteId=default'), ['content', 'by-id', 'c-a', 'permanent']);
-        expect(res.status).toBe(200);
-        expect(permanentDeleteContent).toHaveBeenCalledWith(expect.anything(), 'c-a', SITE_A);
-    });
-    // Guard: an unauthenticated request is rejected before any scoping matters.
-    it('rejects unauthenticated publish with 401', async () => {
-        const res = await router.handle(req('POST', 'http://a.localhost/api/v1/content/by-id/c-a/publish?siteId=default'), ['content', 'by-id', 'c-a', 'publish']);
-        expect(res.status).toBe(401);
-        expect(publishContent).not.toHaveBeenCalled();
-    });
-});
-//# sourceMappingURL=content-routes-site-scope.test.js.map

package/dist/api/__tests__/content-routes-site-scope.test.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"content-routes-site-scope.test.js","sourceRoot":"","sources":["../../../src/api/__tests__/content-routes-site-scope.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAA;AAC7D,OAAO,EAAE,MAAM,EAAE,MAAM,cAAc,CAAA;AACrC,OAAO,EAAE,qBAAqB,EAAE,MAAM,sBAAsB,CAAA;AAE5D,OAAO,EAAE,qBAAqB,EAAE,MAAM,4BAA4B,CAAA;AAClE,OAAO,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAA;AAC5D,OAAO,EAAE,OAAO,EAAE,MAAM,MAAM,CAAA;AAC9B,OAAO,EACL,cAAc,EACd,gBAAgB,EAChB,aAAa,EACb,sBAAsB,GACvB,MAAM,6BAA6B,CAAA;AACpC,OAAO,EAAE,0BAA0B,EAAE,MAAM,6BAA6B,CAAA;AAExE,gFAAgF;AAChF,iFAAiF;AACjF,iFAAiF;AACjF,0EAA0E;AAC1E,kFAAkF;AAClF,iCAAiC;AAEjC,MAAM,MAAM,GAAG,aAAa,CAAA;AAC5B,MAAM,KAAK,GAAG;IACZ,EAAE,EAAE,KAAK;IACT,MAAM,EAAE,MAAM;IACd,eAAe,EAAE,UAAU;IAC3B,IAAI,EAAE,GAAG;IACT,MAAM,EAAE,WAAW;IACnB,KAAK,EAAE,GAAG;CACX,CAAA;AAED,4EAA4E;AAC5E,MAAM,MAAM,GAAG,CAAC,EAAU,EAAE,MAAe,EAAE,EAAE;IAC7C,IAAI,EAAE,KAAK,KAAK,CAAC,EAAE;QAAE,OAAO,IAAI,CAAA;IAChC,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,KAAK,MAAM;QAAE,OAAO,IAAI,CAAA;IAC1D,OAAO,EAAE,GAAG,KAAK,EAAE,CAAA;AACrB,CAAC,CAAA;AAED,EAAE,CAAC,IAAI,CAAC,6BAA6B,EAAE,GAAG,EAAE,CAAC,CAAC;IAC5C,WAAW,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;IAC9D,cAAc,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC,GAAQ,EAAE,GAAQ,EAAE,EAAU,EAAE,MAAe,EAAE,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC,CAAC;IAC/G,gBAAgB,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,IAAI,CAAC;IACjD,aAAa,EAAE,EAAE,CAAC,EAAE,EAAE;IACtB,aAAa,EAAE,EAAE,CAAC,EAAE,EAAE;IACtB,aAAa,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC,GAAQ,EAAE,EAAU,EAAE,MAAe,EAAE,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,EAAE,MAAM,CAAC,KAAK,IAAI,CAAC,CAAC;IAC7G,cAAc,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC,GAAQ,EAAE,EAAU,EAAE,MAAe,EAAE,EAAE,CAC9D,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IACjF,gBAAgB,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC,GAAQ,EAAE,EAAU,EAAE,MAAe,EAAE,EAAE,CAChE,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IAC7E,cAAc,EAAE,EAAE,CAAC,EAAE,EAAE;IACvB,sBAAsB,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC,GAAQ,EAAE,EAAU,EAAE,MAAe,EAAE,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,EAAE,MAAM,CAAC,KAAK,IAAI,CAAC,CAAC;CACvH,CAAC,CAAC,CAAA;AAEH,EAAE,CAAC,IAAI,CAAC,6BAA6B,EAAE,GAAG,EAAE,CAAC,CAAC;IAC5C,qBAAqB,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,IAAI,CAAC;IACtD,kBAAkB,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;IACrE,qBAAqB,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;IACxE,0BAA0B,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC,GAAQ,EAAE,EAAU,EAAE,MAAe,EAAE,EAAE,CAC1E,OAAO,CAAC,OAAO,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,EAAE,EAAE,MAAM,CAAC,KAAK,IAAI,EAAE,gBAAgB,EAAE,KAAK,EAAE,CAAC,CAAC;IACtF,iBAAiB,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,CAAC,CAAC;IAC/C,gBAAgB,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,CAAC,CAAC;CAC/C,CAAC,CAAC,CAAA;AAEH,6EAA6E;AAC7E,kDAAkD;AAClD,EAAE,CAAC,IAAI,CAAC,8BAA8B,EAAE,GAAG,EAAE,CAAC,CAAC;IAC7C,kBAAkB,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,eAAe,CAAC,IAAI,CAAC;IACjD,mBAAmB,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,IAAI,CAAC;IACpD,2BAA2B,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,IAAI,CAAC;IAC5D,mBAAmB,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC,GAAY,EAAE,EAAE,CAAC,GAAG,CAAC;CAClD,CAAC,CAAC,CAAA;AAEH,4DAA4D;AAC5D,EAAE,CAAC,IAAI,CAAC,6BAA6B,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,eAAe,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAA;AAErG,0EAA0E;AAC1E,EAAE,CAAC,IAAI,CAAC,oBAAoB,EAAE,GAAG,EAAE,CAAC,CAAC;IACnC,aAAa,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC,GAAY,EAAE,EAAE;QACpC,MAAM,CAAC,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAA;QACrD,OAAO,CAAC,KAAK,OAAO,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,MAAM,CAAA;IAC/C,CAAC,CAAC;CACH,CAAC,CAAC,CAAA;AAEH,MAAM,WAAW,GAAG,8CAA8C,CAAA;AAElE,KAAK,UAAU,SAAS,CAAC,IAAI,GAAG,WAAW;IACzC,MAAM,GAAG,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,WAAW,CAAC,CAAA;IACjD,OAAO,IAAI,OAAO,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;SAChD,kBAAkB,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;AACzF,CAAC;AAED,MAAM,QAAQ,GAAsB;IAClC,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,WAAW,EAAE,QAAQ,EAAE,SAAS;IACzD,MAAM,EAAE,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC;CAClE,CAAA;AAED,MAAM,MAAM,GAAe;IACzB,IAAI,EAAE,SAAS;IACf,EAAE,EAAE,EAAE,QAAQ,EAAE,YAAY,EAAE,GAAG,EAAE,2BAA2B,EAAE;IAChE,IAAI,EAAE,EAAE,MAAM,EAAE,WAAW,EAAE,SAAS,EAAE,CAAC,aAAa,CAAC,EAAE;IACzD,KAAK,EAAE;QACL,EAAE,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,GAAG,EAAE,MAAM,EAAE,aAAa,EAAE,aAAa,EAAE,IAAI,EAAE,KAAK,EAAE,SAAS,EAAE;QAC1F,EAAE,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,MAAM,EAAE,aAAa,EAAE,aAAa,EAAE,IAAI,EAAE,KAAK,EAAE,SAAS,EAAE;KACzF;IACD,YAAY,EAAE,CAAC,QAAQ,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE;IAC9D,KAAK,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,EAAE,KAAK,EAAE,EAAE,QAAQ,EAAE,QAAQ,EAAE;CACnC,CAAA;AAE1B,SAAS,GAAG,CAAC,MAAc,EAAE,GAAW;IACtC,OAAO,IAAI,OAAO,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,CAAA;AAClD,CAAC;AAED,KAAK,UAAU,MAAM,CAAC,MAAc,EAAE,GAAW;IAC/C,OAAO,IAAI,OAAO,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,MAAM,SAAS,EAAE,EAAE,EAAE,EAAE,CAAC,CAAA;AAChG,CAAC;AAED,QAAQ,CAAC,sEAAsE,EAAE,GAAG,EAAE;IACpF,IAAI,MAAc,CAAA;IAElB,UAAU,CAAC,GAAG,EAAE;QACd,EAAE,CAAC,aAAa,EAAE,CAAA;QAClB,MAAM,GAAG,IAAI,MAAM,EAAE,CAAA;QACrB,MAAM,cAAc,GAAG,IAAI,GAAG,CAA4B,CAAC,CAAC,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAA;QACtF,MAAM,cAAc,GAAG,IAAI,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,EAAE,qBAAqB,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAA;QAClF,qBAAqB,CAAC,MAAM,EAAE;YAC5B,MAAM,EAAE,EAAE,EAAE,EAAS,EAAE,UAAU,EAAE,WAAW,EAAE,cAAc,EAAE,cAAc;YAC9E,YAAY,EAAE,kBAAkB,EAAE;YAClC,OAAO,EAAE,EAAE,KAAK,EAAE,EAAE,UAAU,EAAE,KAAK,IAAI,EAAE,GAAE,CAAC,EAAE,iBAAiB,EAAE,KAAK,IAAI,EAAE,GAAE,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE;YACjG,SAAS,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,aAAa,EAAE;SACrD,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;IAEF,8EAA8E;IAC9E,EAAE,CAAC,2EAA2E,EAAE,KAAK,IAAI,EAAE;QACzF,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,MAAM,MAAM,CAAC,MAAM,EAAE,oEAAoE,CAAC,EACxH,CAAC,SAAS,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,CAAC,CAAC,CAAA;QACzC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;QAC5B,MAAM,CAAC,cAAc,CAAC,CAAC,oBAAoB,CAAC,MAAM,CAAC,QAAQ,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,CAAA;IAC/E,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,8EAA8E,EAAE,KAAK,IAAI,EAAE;QAC5F,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,MAAM,MAAM,CAAC,MAAM,EAAE,kEAAkE,CAAC,EACtH,CAAC,SAAS,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,CAAC,CAAC,CAAA;QACzC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;QAC5B,MAAM,CAAC,cAAc,CAAC,CAAC,oBAAoB,CAAC,MAAM,CAAC,QAAQ,EAAE,EAAE,KAAK,EAAE,aAAa,CAAC,CAAA;IACtF,CAAC,CAAC,CAAA;IAEF,8EAA8E;IAC9E,EAAE,CAAC,sDAAsD,EAAE,KAAK,IAAI,EAAE;QACpE,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,MAAM,MAAM,CAAC,MAAM,EAAE,qEAAqE,CAAC,EACzH,CAAC,SAAS,EAAE,UAAU,EAAE,KAAK,EAAE,SAAS,CAAC,CAAC,CAAA;QAC5C,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;QAC5B,MAAM,CAAC,cAAc,CAAC,CAAC,oBAAoB,CAAC,MAAM,CAAC,QAAQ,EAAE,EAAE,KAAK,EAAE,aAAa,CAAC,CAAA;IACtF,CAAC,CAAC,CAAA;IAEF,8EAA8E;IAC9E,EAAE,CAAC,wDAAwD,EAAE,KAAK,IAAI,EAAE;QACtE,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,MAAM,MAAM,CAAC,MAAM,EAAE,oEAAoE,CAAC,EACxH,CAAC,SAAS,EAAE,OAAO,EAAE,KAAK,EAAE,WAAW,CAAC,CAAC,CAAA;QAC3C,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;QAC5B,MAAM,CAAC,gBAAgB,CAAC,CAAC,oBAAoB,CAAC,MAAM,CAAC,QAAQ,EAAE,EAAE,KAAK,EAAE,aAAa,CAAC,CAAA;IACxF,CAAC,CAAC,CAAA;IAEF,8EAA8E;IAC9E,EAAE,CAAC,0DAA0D,EAAE,KAAK,IAAI,EAAE;QACxE,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,MAAM,MAAM,CAAC,QAAQ,EAAE,0DAA0D,CAAC,EAChH,CAAC,SAAS,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC,CAAA;QAC9B,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;QAC5B,MAAM,CAAC,aAAa,CAAC,CAAC,oBAAoB,CAAC,MAAM,CAAC,QAAQ,EAAE,EAAE,KAAK,EAAE,aAAa,CAAC,CAAA;IACrF,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,+CAA+C,EAAE,KAAK,IAAI,EAAE;QAC7D,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,MAAM,MAAM,CAAC,QAAQ,EAAE,4DAA4D,CAAC,EAClH,CAAC,SAAS,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC,CAAA;QAC9B,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;QAC5B,MAAM,CAAC,aAAa,CAAC,CAAC,oBAAoB,CAAC,MAAM,CAAC,QAAQ,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,CAAA;IAC9E,CAAC,CAAC,CAAA;IAEF,8EAA8E;IAC9E,EAAE,CAAC,8EAA8E,EAAE,KAAK,IAAI,EAAE;QAC5F,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,MAAM,MAAM,CAAC,MAAM,EAAE,kEAAkE,CAAC,EACtH,CAAC,SAAS,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,CAAC,CAAC,CAAA;QACzC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;QAC5B,MAAM,CAAC,0BAA0B,CAAC,CAAC,oBAAoB,CAAC,MAAM,CAAC,QAAQ,EAAE,EAAE,KAAK,EAAE,aAAa,CAAC,CAAA;IAClG,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,2CAA2C,EAAE,KAAK,IAAI,EAAE;QACzD,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,MAAM,MAAM,CAAC,MAAM,EAAE,oEAAoE,CAAC,EACxH,CAAC,SAAS,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,CAAC,CAAC,CAAA;QACzC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;QAC5B,MAAM,CAAC,0BAA0B,CAAC,CAAC,oBAAoB,CAAC,MAAM,CAAC,QAAQ,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,CAAA;IAC3F,CAAC,CAAC,CAAA;IAEF,8EAA8E;IAC9E,EAAE,CAAC,qFAAqF,EAAE,KAAK,IAAI,EAAE;QACnG,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,MAAM,MAAM,CAAC,QAAQ,EAAE,oEAAoE,CAAC,EAC1H,CAAC,SAAS,EAAE,OAAO,EAAE,KAAK,EAAE,WAAW,CAAC,CAAC,CAAA;QAC3C,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;QAC5B,MAAM,CAAC,sBAAsB,CAAC,CAAC,oBAAoB,CAAC,MAAM,CAAC,QAAQ,EAAE,EAAE,KAAK,EAAE,aAAa,CAAC,CAAA;IAC9F,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,oDAAoD,EAAE,KAAK,IAAI,EAAE;QAClE,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,MAAM,MAAM,CAAC,QAAQ,EAAE,sEAAsE,CAAC,EAC5H,CAAC,SAAS,EAAE,OAAO,EAAE,KAAK,EAAE,WAAW,CAAC,CAAC,CAAA;QAC3C,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;QAC5B,MAAM,CAAC,sBAAsB,CAAC,CAAC,oBAAoB,CAAC,MAAM,CAAC,QAAQ,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,CAAA;IACvF,CAAC,CAAC,CAAA;IAEF,4EAA4E;IAC5E,EAAE,CAAC,0CAA0C,EAAE,KAAK,IAAI,EAAE;QACxD,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,EAAE,oEAAoE,CAAC,EAC/G,CAAC,SAAS,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,CAAC,CAAC,CAAA;QACzC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;QAC5B,MAAM,CAAC,cAAc,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAA;IAC/C,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA"}

package/dist/api/__tests__/content-routes.test.d.ts

@@ -1,2 +0,0 @@
-export {};
-//# sourceMappingURL=content-routes.test.d.ts.map

package/dist/api/__tests__/content-routes.test.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"content-routes.test.d.ts","sourceRoot":"","sources":["../../../src/api/__tests__/content-routes.test.ts"],"names":[],"mappings":""}