npm - @monok/server - Versions diffs - 2.1.0 → 3.0.0 - Mend

@monok/server 2.1.0 → 3.0.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (9) hide show

package/AGENTS.md CHANGED Viewed

@@ -501,3 +501,15 @@ or `/postfilter`.
 - Do not claim end-to-end verification yet. The dashboard currently validates
   capture and the configured API key, not real signup or purchase; test-customer
   validation is reserved for a later implementation.
+## Fetch / Cloudflare hosts
+Version 3.0 provides `@monok/server/web` with `createMonokHandler`. Use it instead of
+Express on Fetch runtimes. It shares the documented content endpoint/metadata/
+search/acknowledgement contract. The host owns image persistence in `onArticle`;
+there is no storage callback, automatic image URL fetch, filesystem or Express
+import in this entry point. `decodeThumbImage` is an optional pure JPEG decoder.
+Its `onArticle` context
+always resolves action to draft or publish. An acknowledgement follows durable
+host persistence, never substitutes for the later publication linkback.

package/README.md CHANGED Viewed

@@ -393,3 +393,40 @@ Build the package:
 ```bash
 npm run build
 ```
+## Cloudflare Workers / Fetch content adapter (3.0)
+Use `@monok/server/web` for Workers, Astro server routes, or another Fetch-based
+runtime. This separate export does not import Express, node-fetch or a filesystem.
+Existing Express and affiliate imports keep their current behavior.
+```ts
+import { createMonokHandler } from '@monok/server/web';
+const handle = createMonokHandler({
+  apiKey: workspaceApiKey,
+  onArticle: async (article, { action }) => {
+    // Implement persistence in your application, including any image handling.
+    await persistInYourCms(article, { action });
+  },
+});
+// In your Worker/route: return handle(request)
+```
+`persistInYourCms` is your own application function, not a package export.
+The original article, including `thumbImageData`, `thumbnail` and other fields,
+is passed to it unchanged. Store, transform or ignore images as your application
+requires. No image-storage callback or image URL request is built into the handler.
+For convenience, `decodeThumbImage(article, maxImageBytes?)` is an optional export
+that validates and decodes the supplied JPEG base64 into a `Uint8Array`, or returns
+`undefined` when absent. Its default decoded-size limit is 15 MiB. It does not save
+anything, fetch a URL or change the article. You can use it inside your own image
+storage implementation or ignore it entirely.
+The default base is `/api/monok`. Auth headers, `/info`, `/push`, `/postfilter`,
+and accepted acknowledgements match the Express contract. Default action is draft.
+`getSiteInfo` and `searchArticles` are optional, as in the Express adapter.
+`maxBodyBytes` defaults to 20 MiB. Implement durable retry/idempotency and CMS
+publication callbacks in the host adapter. The web `sendMonokLinkback` uses native
+fetch and the same Monok callback wire format. This entry point is content-only.

package/dist/web.d.ts ADDED Viewed

@@ -0,0 +1,29 @@
+/** Fetch/Worker content integration. This entry point has no Node or Express imports. */
+import type { LinkbackPayload, MonokArticle, MonokArticleAction, PostFilterQuery, PostFilterResult, SiteInfoInput } from "./types.js";
+export type { LinkbackPayload, MonokArticle, PostFilterQuery, PostFilterResult, SiteInfoInput, } from "./types.js";
+export declare const MONOK_SERVER_VERSION = "3.0.0";
+export interface CreateMonokHandlerOptions {
+    apiKey: string;
+    basePath?: string;
+    maxBodyBytes?: number;
+    onArticle: (article: MonokArticle, context: {
+        action: MonokArticleAction;
+    }) => Promise<void> | void;
+    getSiteInfo?: SiteInfoInput | (() => Promise<SiteInfoInput> | SiteInfoInput);
+    searchArticles?: (query: PostFilterQuery) => Promise<PostFilterResult[]> | PostFilterResult[];
+}
+export declare class MonokRequestError extends Error {
+    status: number;
+    constructor(status: number, message: string);
+}
+/** The host supplies its established workspace key; keys never belong in generated frontend code. */
+export declare function matchesMonokKey(candidate: string | null | undefined, expected: string | undefined): Promise<boolean>;
+/** Optional JPEG convenience only. No storage, URL fetching or article mutation. */
+export declare function decodeThumbImage(article: MonokArticle, maxImageBytes?: number): Uint8Array | undefined;
+export declare function createMonokHandler(options: CreateMonokHandlerOptions): (request: Request) => Promise<Response>;
+/** Send only after durable publication and public canonical availability. */
+export declare function sendMonokLinkback(payload: LinkbackPayload, options?: {
+    monokBaseUrl?: string;
+    fetch?: typeof fetch;
+}): Promise<void>;
+//# sourceMappingURL=web.d.ts.map

package/dist/web.d.ts.map ADDED Viewed

@@ -0,0 +1 @@

+ {"version":3,"file":"web.d.ts","sourceRoot":"","sources":["../src/web.ts"],"names":[],"mappings":"AAAA,yFAAyF;AACzF,OAAO,KAAK,EACV,eAAe,EACf,YAAY,EACZ,kBAAkB,EAClB,eAAe,EACf,gBAAgB,EAChB,aAAa,EACd,MAAM,YAAY,CAAC;AACpB,YAAY,EACV,eAAe,EACf,YAAY,EACZ,eAAe,EACf,gBAAgB,EAChB,aAAa,GACd,MAAM,YAAY,CAAC;AACpB,eAAO,MAAM,oBAAoB,UAAU,CAAC;AAQ5C,MAAM,WAAW,yBAAyB;IACxC,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,SAAS,EAAE,CACT,OAAO,EAAE,YAAY,EACrB,OAAO,EAAE;QACP,MAAM,EAAE,kBAAkB,CAAC;KAC5B,KACE,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;IAC1B,WAAW,CAAC,EAAE,aAAa,GAAG,CAAC,MAAM,OAAO,CAAC,aAAa,CAAC,GAAG,aAAa,CAAC,CAAC;IAC7E,cAAc,CAAC,EAAE,CAAC,KAAK,EAAE,eAAe,KAAK,OAAO,CAAC,gBAAgB,EAAE,CAAC,GAAG,gBAAgB,EAAE,CAAC;CAC/F;AACD,qBAAa,iBAAkB,SAAQ,KAAK;IAEjC,MAAM,EAAE,MAAM;gBAAd,MAAM,EAAE,MAAM,EACrB,OAAO,EAAE,MAAM;CAIlB;AACD,qGAAqG;AACrG,wBAAsB,eAAe,CACnC,SAAS,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,EACpC,QAAQ,EAAE,MAAM,GAAG,SAAS,GAC3B,OAAO,CAAC,OAAO,CAAC,CAUlB;AA4DD,oFAAoF;AACpF,wBAAgB,gBAAgB,CAC9B,OAAO,EAAE,YAAY,EACrB,aAAa,SAAmB,GAC/B,UAAU,GAAG,SAAS,CAOxB;AACD,wBAAgB,kBAAkB,CAChC,OAAO,EAAE,yBAAyB,GACjC,CAAC,OAAO,EAAE,OAAO,KAAK,OAAO,CAAC,QAAQ,CAAC,CA8EzC;AACD,6EAA6E;AAC7E,wBAAsB,iBAAiB,CACrC,OAAO,EAAE,eAAe,EACxB,OAAO,GAAE;IAAE,YAAY,CAAC,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,OAAO,KAAK,CAAA;CAAO,GAC5D,OAAO,CAAC,IAAI,CAAC,CAiBf"}

package/dist/web.js ADDED Viewed

@@ -0,0 +1,199 @@
+export const MONOK_SERVER_VERSION = "3.0.0";
+const PRIVATE = {
+    "Content-Type": "application/json",
+    "Cache-Control": "private, no-store, no-cache, must-revalidate, max-age=0",
+    Pragma: "no-cache",
+    Expires: "0",
+    "Surrogate-Control": "no-store",
+};
+export class MonokRequestError extends Error {
+    constructor(status, message) {
+        super(message);
+        this.status = status;
+    }
+}
+/** The host supplies its established workspace key; keys never belong in generated frontend code. */
+export async function matchesMonokKey(candidate, expected) {
+    if (!candidate?.trim() || !expected?.trim())
+        return false;
+    const digest = (value) => crypto.subtle.digest("SHA-256", new TextEncoder().encode(value.trim()));
+    const [a, b] = await Promise.all([digest(candidate), digest(expected)]);
+    const aa = new Uint8Array(a), bb = new Uint8Array(b);
+    let different = 0;
+    for (let i = 0; i < aa.length; i++)
+        different |= aa[i] ^ bb[i];
+    return different === 0;
+}
+function reply(value, status = 200) {
+    return new Response(JSON.stringify(value), { status, headers: PRIVATE });
+}
+function positive(value, fallback) {
+    if (!value)
+        return fallback;
+    const n = Number(value);
+    if (!/^\d+$/.test(value) || !Number.isSafeInteger(n) || n < 1)
+        throw new MonokRequestError(400, "Pagination must be a positive integer");
+    return n;
+}
+async function readJson(request, limit) {
+    const reader = request.body?.getReader();
+    if (!reader)
+        throw new MonokRequestError(400, "Invalid payload");
+    const chunks = [];
+    let size = 0;
+    try {
+        for (;;) {
+            const part = await reader.read();
+            if (part.done)
+                break;
+            size += part.value.byteLength;
+            if (size > limit) {
+                await reader.cancel();
+                throw new MonokRequestError(413, "Request too large");
+            }
+            chunks.push(part.value);
+        }
+    }
+    finally {
+        reader.releaseLock();
+    }
+    const bytes = new Uint8Array(size);
+    let offset = 0;
+    for (const chunk of chunks) {
+        bytes.set(chunk, offset);
+        offset += chunk.length;
+    }
+    try {
+        return JSON.parse(new TextDecoder().decode(bytes));
+    }
+    catch {
+        throw new MonokRequestError(400, "Invalid JSON");
+    }
+}
+function jpeg(data, limit) {
+    const encoded = data.replace(/^data:image\/jpeg;base64,/i, "").replace(/\s/g, "");
+    if (!/^[A-Za-z0-9+/]*={0,2}$/.test(encoded) || encoded.length % 4 === 1)
+        throw new MonokRequestError(400, "Invalid JPEG base64");
+    if (encoded.length > Math.ceil(limit / 3) * 4)
+        throw new MonokRequestError(413, "Image too large");
+    let raw;
+    try {
+        raw = atob(encoded);
+    }
+    catch {
+        throw new MonokRequestError(400, "Invalid JPEG base64");
+    }
+    const bytes = Uint8Array.from(raw, (c) => c.charCodeAt(0));
+    if (bytes.length > limit)
+        throw new MonokRequestError(413, "Image too large");
+    if (bytes.length < 3 || bytes[0] !== 255 || bytes[1] !== 216 || bytes[2] !== 255)
+        throw new MonokRequestError(400, "Expected a JPEG image");
+    return bytes;
+}
+/** Optional JPEG convenience only. No storage, URL fetching or article mutation. */
+export function decodeThumbImage(article, maxImageBytes = 15 * 1024 * 1024) {
+    if (!Number.isSafeInteger(maxImageBytes) || maxImageBytes <= 0)
+        throw Error("Invalid image size limit");
+    if (!article.thumbImageData)
+        return undefined;
+    if (typeof article.thumbImageData !== "string")
+        throw new MonokRequestError(400, "Invalid thumbnail");
+    return jpeg(article.thumbImageData, maxImageBytes);
+}
+export function createMonokHandler(options) {
+    const base = (options.basePath ?? "/api/monok").replace(/\/$/, "");
+    const maxBody = options.maxBodyBytes ?? 20 * 1024 * 1024;
+    if (!Number.isSafeInteger(maxBody) || maxBody <= 0)
+        throw Error("Invalid content size limits");
+    return async (request) => {
+        try {
+            const url = new URL(request.url), path = url.pathname.slice(base.length);
+            if (!url.pathname.startsWith(base + "/") || !["/info", "/push", "/postfilter"].includes(path))
+                return reply({ error: "Not found" }, 404);
+            if (request.method !== (path === "/push" ? "POST" : "GET"))
+                return reply({ error: "Method not allowed" }, 405);
+            const key = (path === "/push" ? request.headers.get("token") : null) ??
+                request.headers.get("X-API-Key") ??
+                url.searchParams.get("apikey");
+            if (!(await matchesMonokKey(key, options.apiKey)))
+                return reply({ error: "Unauthorized" }, 401);
+            if (path === "/info") {
+                const info = typeof options.getSiteInfo === "function"
+                    ? await options.getSiteInfo()
+                    : options.getSiteInfo;
+                return reply({
+                    ...(info ?? {
+                        js_scripts: "Disabled",
+                        name: "Custom CMS",
+                        logo: "",
+                        categories: [],
+                        post_types: ["post"],
+                        tags: [],
+                        authors: [],
+                    }),
+                    version: MONOK_SERVER_VERSION,
+                });
+            }
+            if (path === "/postfilter") {
+                if (!options.searchArticles)
+                    return reply({ error: "Article search not configured" }, 404);
+                const q = url.searchParams;
+                const query = {
+                    postType: q.get("post_type")?.trim() || "post",
+                    amount: positive(q.get("amount"), 10),
+                    page: positive(q.get("page"), 1),
+                };
+                for (const [target, source] of [
+                    ["section", "section"],
+                    ["tag", "tag"],
+                    ["query", "q"],
+                ]) {
+                    const value = q.get(source)?.trim();
+                    if (value)
+                        query[target] = value;
+                }
+                const results = await options.searchArticles(query);
+                if (!Array.isArray(results))
+                    throw Error("Invalid search result");
+                return reply(results);
+            }
+            const value = await readJson(request, maxBody);
+            if (!value || typeof value !== "object" || Array.isArray(value))
+                throw new MonokRequestError(400, "Invalid payload");
+            const article = value;
+            if (!["string", "number"].includes(typeof article.id) ||
+                !String(article.id).trim() ||
+                typeof article.title !== "string" ||
+                !article.title.trim())
+                throw new MonokRequestError(400, "Invalid payload");
+            const action = url.searchParams.get("action") ?? article.action ?? "draft";
+            if (action !== "draft" && action !== "publish")
+                throw new MonokRequestError(400, "action must be either draft or publish");
+            await options.onArticle(article, { action });
+            return reply({ ok: true, status: "accepted", monokId: article.id });
+        }
+        catch (error) {
+            return error instanceof MonokRequestError
+                ? reply({ error: error.message }, error.status)
+                : reply({ error: "Content operation failed; retry later" }, 500);
+        }
+    };
+}
+/** Send only after durable publication and public canonical availability. */
+export async function sendMonokLinkback(payload, options = {}) {
+    const response = await (options.fetch ?? fetch)((options.monokBaseUrl ?? "https://app.monok.com").replace(/\/$/, "") + "/api/v1/linkback", {
+        method: "POST",
+        headers: { "Content-Type": "application/json" },
+        body: JSON.stringify({
+            id: payload.monokId,
+            puff: { title: payload.title },
+            url: payload.url,
+            source: new URL(payload.url).hostname,
+            ...(payload.externalId !== undefined ? { externalId: String(payload.externalId) } : {}),
+            ...(payload.thumbnailUrl ? { thumbnail: payload.thumbnailUrl } : {}),
+        }),
+    });
+    if (!response.ok)
+        throw Error(`Monok linkback failed (${response.status})`);
+}
+//# sourceMappingURL=web.js.map

package/dist/web.js.map ADDED Viewed

@@ -0,0 +1 @@

+ {"version":3,"file":"web.js","sourceRoot":"","sources":["../src/web.ts"],"names":[],"mappings":"AAgBA,MAAM,CAAC,MAAM,oBAAoB,GAAG,OAAO,CAAC;AAC5C,MAAM,OAAO,GAAG;IACd,cAAc,EAAE,kBAAkB;IAClC,eAAe,EAAE,yDAAyD;IAC1E,MAAM,EAAE,UAAU;IAClB,OAAO,EAAE,GAAG;IACZ,mBAAmB,EAAE,UAAU;CAChC,CAAC;AAcF,MAAM,OAAO,iBAAkB,SAAQ,KAAK;IAC1C,YACS,MAAc,EACrB,OAAe;QAEf,KAAK,CAAC,OAAO,CAAC,CAAC;QAHR,WAAM,GAAN,MAAM,CAAQ;IAIvB,CAAC;CACF;AACD,qGAAqG;AACrG,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,SAAoC,EACpC,QAA4B;IAE5B,IAAI,CAAC,SAAS,EAAE,IAAI,EAAE,IAAI,CAAC,QAAQ,EAAE,IAAI,EAAE;QAAE,OAAO,KAAK,CAAC;IAC1D,MAAM,MAAM,GAAG,CAAC,KAAa,EAAE,EAAE,CAC/B,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;IAC1E,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;IACxE,MAAM,EAAE,GAAG,IAAI,UAAU,CAAC,CAAC,CAAC,EAC1B,EAAE,GAAG,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC;IACzB,IAAI,SAAS,GAAG,CAAC,CAAC;IAClB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,CAAC,MAAM,EAAE,CAAC,EAAE;QAAE,SAAS,IAAI,EAAE,CAAC,CAAC,CAAE,GAAG,EAAE,CAAC,CAAC,CAAE,CAAC;IACjE,OAAO,SAAS,KAAK,CAAC,CAAC;AACzB,CAAC;AACD,SAAS,KAAK,CAAC,KAAc,EAAE,MAAM,GAAG,GAAG;IACzC,OAAO,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC;AAC3E,CAAC;AACD,SAAS,QAAQ,CAAC,KAAoB,EAAE,QAAgB;IACtD,IAAI,CAAC,KAAK;QAAE,OAAO,QAAQ,CAAC;IAC5B,MAAM,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IACxB,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC;QAC3D,MAAM,IAAI,iBAAiB,CAAC,GAAG,EAAE,uCAAuC,CAAC,CAAC;IAC5E,OAAO,CAAC,CAAC;AACX,CAAC;AACD,KAAK,UAAU,QAAQ,CAAC,OAAgB,EAAE,KAAa;IACrD,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,EAAE,SAAS,EAAE,CAAC;IACzC,IAAI,CAAC,MAAM;QAAE,MAAM,IAAI,iBAAiB,CAAC,GAAG,EAAE,iBAAiB,CAAC,CAAC;IACjE,MAAM,MAAM,GAAiB,EAAE,CAAC;IAChC,IAAI,IAAI,GAAG,CAAC,CAAC;IACb,IAAI,CAAC;QACH,SAAS,CAAC;YACR,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;YACjC,IAAI,IAAI,CAAC,IAAI;gBAAE,MAAM;YACrB,IAAI,IAAI,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC;YAC9B,IAAI,IAAI,GAAG,KAAK,EAAE,CAAC;gBACjB,MAAM,MAAM,CAAC,MAAM,EAAE,CAAC;gBACtB,MAAM,IAAI,iBAAiB,CAAC,GAAG,EAAE,mBAAmB,CAAC,CAAC;YACxD,CAAC;YACD,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC1B,CAAC;IACH,CAAC;YAAS,CAAC;QACT,MAAM,CAAC,WAAW,EAAE,CAAC;IACvB,CAAC;IACD,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC;IACnC,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,KAAK,CAAC,GAAG,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;QACzB,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC;IACzB,CAAC;IACD,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;IACrD,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,iBAAiB,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC;IACnD,CAAC;AACH,CAAC;AACD,SAAS,IAAI,CAAC,IAAY,EAAE,KAAa;IACvC,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,4BAA4B,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IAClF,IAAI,CAAC,wBAAwB,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,KAAK,CAAC;QACrE,MAAM,IAAI,iBAAiB,CAAC,GAAG,EAAE,qBAAqB,CAAC,CAAC;IAC1D,IAAI,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,KAAK,GAAG,CAAC,CAAC,GAAG,CAAC;QAC3C,MAAM,IAAI,iBAAiB,CAAC,GAAG,EAAE,iBAAiB,CAAC,CAAC;IACtD,IAAI,GAAW,CAAC;IAChB,IAAI,CAAC;QACH,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC;IACtB,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,iBAAiB,CAAC,GAAG,EAAE,qBAAqB,CAAC,CAAC;IAC1D,CAAC;IACD,MAAM,KAAK,GAAG,UAAU,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC;IAC3D,IAAI,KAAK,CAAC,MAAM,GAAG,KAAK;QAAE,MAAM,IAAI,iBAAiB,CAAC,GAAG,EAAE,iBAAiB,CAAC,CAAC;IAC9E,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,GAAG,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,GAAG,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,GAAG;QAC9E,MAAM,IAAI,iBAAiB,CAAC,GAAG,EAAE,uBAAuB,CAAC,CAAC;IAC5D,OAAO,KAAK,CAAC;AACf,CAAC;AACD,oFAAoF;AACpF,MAAM,UAAU,gBAAgB,CAC9B,OAAqB,EACrB,aAAa,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI;IAEhC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,aAAa,CAAC,IAAI,aAAa,IAAI,CAAC;QAC5D,MAAM,KAAK,CAAC,0BAA0B,CAAC,CAAC;IAC1C,IAAI,CAAC,OAAO,CAAC,cAAc;QAAE,OAAO,SAAS,CAAC;IAC9C,IAAI,OAAO,OAAO,CAAC,cAAc,KAAK,QAAQ;QAC5C,MAAM,IAAI,iBAAiB,CAAC,GAAG,EAAE,mBAAmB,CAAC,CAAC;IACxD,OAAO,IAAI,CAAC,OAAO,CAAC,cAAc,EAAE,aAAa,CAAC,CAAC;AACrD,CAAC;AACD,MAAM,UAAU,kBAAkB,CAChC,OAAkC;IAElC,MAAM,IAAI,GAAG,CAAC,OAAO,CAAC,QAAQ,IAAI,YAAY,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IACnE,MAAM,OAAO,GAAG,OAAO,CAAC,YAAY,IAAI,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;IACzD,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,IAAI,OAAO,IAAI,CAAC;QAAE,MAAM,KAAK,CAAC,6BAA6B,CAAC,CAAC;IAC/F,OAAO,KAAK,EAAE,OAAO,EAAE,EAAE;QACvB,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,EAC9B,IAAI,GAAG,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YACzC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,GAAG,GAAG,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,OAAO,EAAE,aAAa,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC;gBAC3F,OAAO,KAAK,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,EAAE,GAAG,CAAC,CAAC;YAC5C,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC;gBACxD,OAAO,KAAK,CAAC,EAAE,KAAK,EAAE,oBAAoB,EAAE,EAAE,GAAG,CAAC,CAAC;YACrD,MAAM,GAAG,GACP,CAAC,IAAI,KAAK,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;gBACxD,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC;gBAChC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;YACjC,IAAI,CAAC,CAAC,MAAM,eAAe,CAAC,GAAG,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;gBAC/C,OAAO,KAAK,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,EAAE,GAAG,CAAC,CAAC;YAC/C,IAAI,IAAI,KAAK,OAAO,EAAE,CAAC;gBACrB,MAAM,IAAI,GACR,OAAO,OAAO,CAAC,WAAW,KAAK,UAAU;oBACvC,CAAC,CAAC,MAAM,OAAO,CAAC,WAAW,EAAE;oBAC7B,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC;gBAC1B,OAAO,KAAK,CAAC;oBACX,GAAG,CAAC,IAAI,IAAI;wBACV,UAAU,EAAE,UAAU;wBACtB,IAAI,EAAE,YAAY;wBAClB,IAAI,EAAE,EAAE;wBACR,UAAU,EAAE,EAAE;wBACd,UAAU,EAAE,CAAC,MAAM,CAAC;wBACpB,IAAI,EAAE,EAAE;wBACR,OAAO,EAAE,EAAE;qBACZ,CAAC;oBACF,OAAO,EAAE,oBAAoB;iBAC9B,CAAC,CAAC;YACL,CAAC;YACD,IAAI,IAAI,KAAK,aAAa,EAAE,CAAC;gBAC3B,IAAI,CAAC,OAAO,CAAC,cAAc;oBAAE,OAAO,KAAK,CAAC,EAAE,KAAK,EAAE,+BAA+B,EAAE,EAAE,GAAG,CAAC,CAAC;gBAC3F,MAAM,CAAC,GAAG,GAAG,CAAC,YAAY,CAAC;gBAC3B,MAAM,KAAK,GAAoB;oBAC7B,QAAQ,EAAE,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,IAAI,EAAE,IAAI,MAAM;oBAC9C,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;oBACrC,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;iBACjC,CAAC;gBACF,KAAK,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI;oBAC7B,CAAC,SAAS,EAAE,SAAS,CAAC;oBACtB,CAAC,KAAK,EAAE,KAAK,CAAC;oBACd,CAAC,OAAO,EAAE,GAAG,CAAC;iBACN,EAAE,CAAC;oBACX,MAAM,KAAK,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC;oBACpC,IAAI,KAAK;wBAAE,KAAK,CAAC,MAAM,CAAC,GAAG,KAAK,CAAC;gBACnC,CAAC;gBACD,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;gBACpD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC;oBAAE,MAAM,KAAK,CAAC,uBAAuB,CAAC,CAAC;gBAClE,OAAO,KAAK,CAAC,OAAO,CAAC,CAAC;YACxB,CAAC;YACD,MAAM,KAAK,GAAG,MAAM,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YAC/C,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;gBAC7D,MAAM,IAAI,iBAAiB,CAAC,GAAG,EAAE,iBAAiB,CAAC,CAAC;YACtD,MAAM,OAAO,GAAG,KAAqB,CAAC;YACtC,IACE,CAAC,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,OAAO,OAAO,CAAC,EAAE,CAAC;gBACjD,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,IAAI,EAAE;gBAC1B,OAAO,OAAO,CAAC,KAAK,KAAK,QAAQ;gBACjC,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,EAAE;gBAErB,MAAM,IAAI,iBAAiB,CAAC,GAAG,EAAE,iBAAiB,CAAC,CAAC;YACtD,MAAM,MAAM,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC;YAC3E,IAAI,MAAM,KAAK,OAAO,IAAI,MAAM,KAAK,SAAS;gBAC5C,MAAM,IAAI,iBAAiB,CAAC,GAAG,EAAE,wCAAwC,CAAC,CAAC;YAC7E,MAAM,OAAO,CAAC,SAAS,CAAC,OAAO,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;YAC7C,OAAO,KAAK,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,OAAO,CAAC,EAAE,EAAE,CAAC,CAAC;QACtE,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,KAAK,YAAY,iBAAiB;gBACvC,CAAC,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,OAAO,EAAE,EAAE,KAAK,CAAC,MAAM,CAAC;gBAC/C,CAAC,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,uCAAuC,EAAE,EAAE,GAAG,CAAC,CAAC;QACrE,CAAC;IACH,CAAC,CAAC;AACJ,CAAC;AACD,6EAA6E;AAC7E,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,OAAwB,EACxB,UAA2D,EAAE;IAE7D,MAAM,QAAQ,GAAG,MAAM,CAAC,OAAO,CAAC,KAAK,IAAI,KAAK,CAAC,CAC7C,CAAC,OAAO,CAAC,YAAY,IAAI,uBAAuB,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,GAAG,kBAAkB,EACzF;QACE,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;QAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;YACnB,EAAE,EAAE,OAAO,CAAC,OAAO;YACnB,IAAI,EAAE,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE;YAC9B,GAAG,EAAE,OAAO,CAAC,GAAG;YAChB,MAAM,EAAE,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,QAAQ;YACrC,GAAG,CAAC,OAAO,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACvF,GAAG,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,OAAO,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACrE,CAAC;KACH,CACF,CAAC;IACF,IAAI,CAAC,QAAQ,CAAC,EAAE;QAAE,MAAM,KAAK,CAAC,0BAA0B,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC;AAC9E,CAAC"}

package/dist-cjs/web.js ADDED Viewed

@@ -0,0 +1,199 @@
+export const MONOK_SERVER_VERSION = "3.0.0";
+const PRIVATE = {
+    "Content-Type": "application/json",
+    "Cache-Control": "private, no-store, no-cache, must-revalidate, max-age=0",
+    Pragma: "no-cache",
+    Expires: "0",
+    "Surrogate-Control": "no-store",
+};
+export class MonokRequestError extends Error {
+    constructor(status, message) {
+        super(message);
+        this.status = status;
+    }
+}
+/** The host supplies its established workspace key; keys never belong in generated frontend code. */
+export async function matchesMonokKey(candidate, expected) {
+    if (!candidate?.trim() || !expected?.trim())
+        return false;
+    const digest = (value) => crypto.subtle.digest("SHA-256", new TextEncoder().encode(value.trim()));
+    const [a, b] = await Promise.all([digest(candidate), digest(expected)]);
+    const aa = new Uint8Array(a), bb = new Uint8Array(b);
+    let different = 0;
+    for (let i = 0; i < aa.length; i++)
+        different |= aa[i] ^ bb[i];
+    return different === 0;
+}
+function reply(value, status = 200) {
+    return new Response(JSON.stringify(value), { status, headers: PRIVATE });
+}
+function positive(value, fallback) {
+    if (!value)
+        return fallback;
+    const n = Number(value);
+    if (!/^\d+$/.test(value) || !Number.isSafeInteger(n) || n < 1)
+        throw new MonokRequestError(400, "Pagination must be a positive integer");
+    return n;
+}
+async function readJson(request, limit) {
+    const reader = request.body?.getReader();
+    if (!reader)
+        throw new MonokRequestError(400, "Invalid payload");
+    const chunks = [];
+    let size = 0;
+    try {
+        for (;;) {
+            const part = await reader.read();
+            if (part.done)
+                break;
+            size += part.value.byteLength;
+            if (size > limit) {
+                await reader.cancel();
+                throw new MonokRequestError(413, "Request too large");
+            }
+            chunks.push(part.value);
+        }
+    }
+    finally {
+        reader.releaseLock();
+    }
+    const bytes = new Uint8Array(size);
+    let offset = 0;
+    for (const chunk of chunks) {
+        bytes.set(chunk, offset);
+        offset += chunk.length;
+    }
+    try {
+        return JSON.parse(new TextDecoder().decode(bytes));
+    }
+    catch {
+        throw new MonokRequestError(400, "Invalid JSON");
+    }
+}
+function jpeg(data, limit) {
+    const encoded = data.replace(/^data:image\/jpeg;base64,/i, "").replace(/\s/g, "");
+    if (!/^[A-Za-z0-9+/]*={0,2}$/.test(encoded) || encoded.length % 4 === 1)
+        throw new MonokRequestError(400, "Invalid JPEG base64");
+    if (encoded.length > Math.ceil(limit / 3) * 4)
+        throw new MonokRequestError(413, "Image too large");
+    let raw;
+    try {
+        raw = atob(encoded);
+    }
+    catch {
+        throw new MonokRequestError(400, "Invalid JPEG base64");
+    }
+    const bytes = Uint8Array.from(raw, (c) => c.charCodeAt(0));
+    if (bytes.length > limit)
+        throw new MonokRequestError(413, "Image too large");
+    if (bytes.length < 3 || bytes[0] !== 255 || bytes[1] !== 216 || bytes[2] !== 255)
+        throw new MonokRequestError(400, "Expected a JPEG image");
+    return bytes;
+}
+/** Optional JPEG convenience only. No storage, URL fetching or article mutation. */
+export function decodeThumbImage(article, maxImageBytes = 15 * 1024 * 1024) {
+    if (!Number.isSafeInteger(maxImageBytes) || maxImageBytes <= 0)
+        throw Error("Invalid image size limit");
+    if (!article.thumbImageData)
+        return undefined;
+    if (typeof article.thumbImageData !== "string")
+        throw new MonokRequestError(400, "Invalid thumbnail");
+    return jpeg(article.thumbImageData, maxImageBytes);
+}
+export function createMonokHandler(options) {
+    const base = (options.basePath ?? "/api/monok").replace(/\/$/, "");
+    const maxBody = options.maxBodyBytes ?? 20 * 1024 * 1024;
+    if (!Number.isSafeInteger(maxBody) || maxBody <= 0)
+        throw Error("Invalid content size limits");
+    return async (request) => {
+        try {
+            const url = new URL(request.url), path = url.pathname.slice(base.length);
+            if (!url.pathname.startsWith(base + "/") || !["/info", "/push", "/postfilter"].includes(path))
+                return reply({ error: "Not found" }, 404);
+            if (request.method !== (path === "/push" ? "POST" : "GET"))
+                return reply({ error: "Method not allowed" }, 405);
+            const key = (path === "/push" ? request.headers.get("token") : null) ??
+                request.headers.get("X-API-Key") ??
+                url.searchParams.get("apikey");
+            if (!(await matchesMonokKey(key, options.apiKey)))
+                return reply({ error: "Unauthorized" }, 401);
+            if (path === "/info") {
+                const info = typeof options.getSiteInfo === "function"
+                    ? await options.getSiteInfo()
+                    : options.getSiteInfo;
+                return reply({
+                    ...(info ?? {
+                        js_scripts: "Disabled",
+                        name: "Custom CMS",
+                        logo: "",
+                        categories: [],
+                        post_types: ["post"],
+                        tags: [],
+                        authors: [],
+                    }),
+                    version: MONOK_SERVER_VERSION,
+                });
+            }
+            if (path === "/postfilter") {
+                if (!options.searchArticles)
+                    return reply({ error: "Article search not configured" }, 404);
+                const q = url.searchParams;
+                const query = {
+                    postType: q.get("post_type")?.trim() || "post",
+                    amount: positive(q.get("amount"), 10),
+                    page: positive(q.get("page"), 1),
+                };
+                for (const [target, source] of [
+                    ["section", "section"],
+                    ["tag", "tag"],
+                    ["query", "q"],
+                ]) {
+                    const value = q.get(source)?.trim();
+                    if (value)
+                        query[target] = value;
+                }
+                const results = await options.searchArticles(query);
+                if (!Array.isArray(results))
+                    throw Error("Invalid search result");
+                return reply(results);
+            }
+            const value = await readJson(request, maxBody);
+            if (!value || typeof value !== "object" || Array.isArray(value))
+                throw new MonokRequestError(400, "Invalid payload");
+            const article = value;
+            if (!["string", "number"].includes(typeof article.id) ||
+                !String(article.id).trim() ||
+                typeof article.title !== "string" ||
+                !article.title.trim())
+                throw new MonokRequestError(400, "Invalid payload");
+            const action = url.searchParams.get("action") ?? article.action ?? "draft";
+            if (action !== "draft" && action !== "publish")
+                throw new MonokRequestError(400, "action must be either draft or publish");
+            await options.onArticle(article, { action });
+            return reply({ ok: true, status: "accepted", monokId: article.id });
+        }
+        catch (error) {
+            return error instanceof MonokRequestError
+                ? reply({ error: error.message }, error.status)
+                : reply({ error: "Content operation failed; retry later" }, 500);
+        }
+    };
+}
+/** Send only after durable publication and public canonical availability. */
+export async function sendMonokLinkback(payload, options = {}) {
+    const response = await (options.fetch ?? fetch)((options.monokBaseUrl ?? "https://app.monok.com").replace(/\/$/, "") + "/api/v1/linkback", {
+        method: "POST",
+        headers: { "Content-Type": "application/json" },
+        body: JSON.stringify({
+            id: payload.monokId,
+            puff: { title: payload.title },
+            url: payload.url,
+            source: new URL(payload.url).hostname,
+            ...(payload.externalId !== undefined ? { externalId: String(payload.externalId) } : {}),
+            ...(payload.thumbnailUrl ? { thumbnail: payload.thumbnailUrl } : {}),
+        }),
+    });
+    if (!response.ok)
+        throw Error(`Monok linkback failed (${response.status})`);
+}
+//# sourceMappingURL=web.js.map

package/dist-cjs/web.js.map ADDED Viewed

@@ -0,0 +1 @@

package/package.json CHANGED Viewed

@@ -1,6 +1,6 @@
 {
   "name": "@monok/server",
-  "version": "2.1.0",
+  "version": "3.0.0",
   "description": "Monok server integration helpers for content and affiliate attribution",
   "license": "MIT",
   "type": "module",
@@ -12,6 +12,11 @@
       "import": "./dist/index.js",
       "require": "./dist-cjs/index.js",
       "types": "./dist/index.d.ts"
+    },
+    "./web": {
+      "types": "./dist/web.d.ts",
+      "import": "./dist/web.js",
+      "require": "./dist-cjs/web.js"
     }
   },
   "files": [