@murumets-ee/content-api 0.23.2 → 0.24.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (6) hide show
  1. package/dist/index.mjs.map +1 -1
  2. package/dist/query-params.d.mts +78 -0
  3. package/dist/query-params.d.mts.map +1 -0
  4. package/dist/query-params.mjs +2 -0
  5. package/dist/query-params.mjs.map +1 -0
  6. package/package.json +8 -4
package/dist/index.mjs.map CHANGED
@@ -1 +1 @@
1
- {"version":3,"file":"index.mjs","names":[],"sources":["../src/cache.ts","../src/cors.ts","../src/query-params.ts","../src/response.ts","../src/schema-endpoint.ts","../src/handler.ts"],"sourcesContent":["/**\n * Cache-Control header builder.\n *\n * Defaults: public, max-age=60, stale-while-revalidate=300.\n * Per-entity overrides for hot content (low TTL) vs static pages (high TTL).\n *\n * Role-aware short-circuit: when the resolved role is NOT the configured\n * `publicRole`, we force `Cache-Control: no-store`. Authenticated/preview\n * responses must never reach a shared CDN cache — the URL is the same for\n * public and editor callers, but the body is role-specific. Without this,\n * a CloudFront/Fastly/Cloudflare edge with the default URL-only cache key\n * would serve an editor's response to subsequent anonymous visitors.\n */\n\nimport type { CacheConfig } from './types.js'\n\nexport function buildCacheHeaders(\n entityName: string,\n config: CacheConfig | undefined,\n): Record<string, string> {\n const entityConfig = config?.entities?.[entityName]\n\n if (entityConfig?.cacheable === false) {\n return { 'Cache-Control': 'no-store' }\n }\n\n const maxAge = entityConfig?.maxAge ?? config?.defaultMaxAge ?? 60\n const swr = entityConfig?.staleWhileRevalidate ?? config?.defaultStaleWhileRevalidate ?? 300\n\n return {\n 'Cache-Control': `public, max-age=${maxAge}, stale-while-revalidate=${swr}`,\n }\n}\n\n/**\n * Combined response headers: CORS + Cache-Control.\n *\n * When `role !== publicRole`, returns `Cache-Control: no-store` regardless\n * of the per-entity cache config — see file-level comment. We also append\n * `Cookie` and `Authorization` to `Vary` since hosts may resolve role from\n * either; `no-store` already prevents shared-cache reuse, but the Vary\n * header keeps semantics correct for any down-stream policy that respects\n * it without requiring `no-store`.\n */\nexport function buildResponseHeaders(\n entityName: string,\n corsHeaders: Record<string, string>,\n role: string,\n publicRole: string,\n cacheConfig: CacheConfig | undefined,\n): Record<string, string> {\n if (role !== publicRole) {\n const existingVary = corsHeaders.Vary\n const authVary = 'Cookie, Authorization'\n return {\n ...corsHeaders,\n 'Cache-Control': 'no-store',\n Vary: existingVary ? `${existingVary}, ${authVary}` : authVary,\n }\n }\n return {\n ...corsHeaders,\n ...buildCacheHeaders(entityName, cacheConfig),\n }\n}\n","/**\n * CORS — Origin allowlist with exact match.\n *\n * No wildcards, no regex. This is a CMS content API — you know which\n * frontends consume it. Vary: Origin ensures CDNs cache per-origin.\n */\n\nimport type { CorsConfig } from './types.js'\n\nexport function buildCorsHeaders(\n req: Request,\n config: CorsConfig | undefined,\n): Record<string, string> {\n if (!config) return {}\n\n const origin = req.headers.get('Origin')\n if (!origin) return {}\n\n // Exact match only\n if (!config.allowedOrigins.includes(origin)) return {}\n\n return {\n 'Access-Control-Allow-Origin': origin,\n 'Access-Control-Allow-Methods': 'GET, OPTIONS',\n 'Access-Control-Allow-Headers': 'Content-Type, Accept, Authorization',\n 'Access-Control-Max-Age': String(config.maxAge ?? 3600),\n Vary: 'Origin',\n }\n}\n\nexport function corsPreflightResponse(req: Request, config: CorsConfig | undefined): Response {\n const headers = buildCorsHeaders(req, config)\n return new Response(null, { status: 204, headers })\n}\n","/**\n * Query parameter validation — Zod schemas for all content API endpoints.\n *\n * All user input is validated before it touches QueryClient.\n * Pagination hard-capped at MAX_LIMIT. Sort/filter restricted to queryable columns.\n */\n\nimport { escapeLikePattern, LOCALE_PATTERN } from '@murumets-ee/core'\nimport type { FieldConfig } from '@murumets-ee/entity'\nimport { z } from 'zod'\n\nexport const MAX_LIMIT = 100\nconst MAX_FILTER_TEXT_LENGTH = 200\n\n/** List endpoint query params. */\nexport const listParamsSchema = z.object({\n limit: z.coerce.number().int().min(1).max(MAX_LIMIT).default(20),\n offset: z.coerce.number().int().min(0).default(0),\n sort: z\n .string()\n .regex(/^-?[a-zA-Z_]+$/)\n .optional(),\n locale: z.string().regex(LOCALE_PATTERN).optional(),\n fields: z.string().optional(),\n search: z.string().max(200).optional(),\n /** Opaque cursor for keyset pagination (base64-encoded JSON). */\n cursor: z.string().max(500).optional(),\n})\n\n/** Single entity query params. */\nexport const singleParamsSchema = z.object({\n locale: z.string().regex(LOCALE_PATTERN).optional(),\n fields: z.string().optional(),\n})\n\n/** Count endpoint query params. */\nexport const countParamsSchema = z.object({\n locale: z.string().regex(LOCALE_PATTERN).optional(),\n})\n\n// Re-export from core so existing imports from this module continue to work\nexport { escapeLikePattern }\n\nconst UUID_RE = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i\n\n/**\n * ISO-8601 calendar date or full timestamp.\n * Accepts: 2024-01-31, 2024-01-31T12:34:56Z, 2024-01-31T12:34:56.789+02:00.\n * Note: shape only — calendar validity (e.g. month 1–12, valid day-of-month)\n * is enforced separately by `isValidIsoDate` so impossible-date values cannot\n * reach Postgres and trigger a 500 cast error.\n */\nconst ISO_DATE_RE =\n /^\\d{4}-\\d{2}-\\d{2}(?:[Tt ]\\d{2}:\\d{2}(?::\\d{2}(?:\\.\\d+)?)?(?:[Zz]|[+-]\\d{2}:?\\d{2})?)?$/\n\n/**\n * Validate ISO-8601 shape AND calendar validity.\n * `Date.parse('2024-13-01')` returns NaN; `Date.parse('2024-02-30')` rolls over\n * to 2024-03-01 in some hosts but produces a different YYYY-MM-DD prefix from\n * the input — comparing the round-tripped date prefix catches both cases.\n */\nfunction isValidIsoDate(raw: string): boolean {\n if (!ISO_DATE_RE.test(raw)) return false\n const ms = Date.parse(raw)\n if (Number.isNaN(ms)) return false\n // For bare YYYY-MM-DD, confirm the parsed date round-trips to the same prefix.\n if (raw.length === 10) {\n return new Date(ms).toISOString().slice(0, 10) === raw\n }\n return true\n}\n\n/** True if `s` parses as a finite number with no trailing junk. */\nfunction isNumericLiteral(s: string): boolean {\n if (s.trim() === '') return false\n const n = Number(s)\n return Number.isFinite(n)\n}\n\n/** True if `id` matches the canonical UUID format used by entity primary keys. */\nexport function isUuid(id: string): boolean {\n return UUID_RE.test(id)\n}\n\n/**\n * Validate a filter value against the field type.\n * Returns the validated value (possibly coerced) or null if invalid.\n *\n * For `date`, accepts a `gte:` / `lte:` prefix; the prefix itself is preserved\n * so the caller can route to the right comparison operator. The bare value\n * (with prefix stripped) must match ISO-8601.\n */\nexport function validateFilterValue(fieldConfig: FieldConfig, raw: string): unknown {\n switch (fieldConfig.type) {\n case 'boolean':\n if (raw === 'true') return true\n if (raw === 'false') return false\n return null\n\n case 'reference':\n case 'media':\n return UUID_RE.test(raw) ? raw : null\n\n case 'select':\n return fieldConfig.options.includes(raw) ? raw : null\n\n case 'date': {\n const bare = raw.startsWith('gte:') || raw.startsWith('lte:') ? raw.slice(4) : raw\n return isValidIsoDate(bare) ? raw : null\n }\n\n case 'number':\n return isNumericLiteral(raw) ? Number(raw) : null\n\n case 'text':\n return raw.length <= MAX_FILTER_TEXT_LENGTH ? raw : null\n\n default:\n return null\n }\n}\n\n/**\n * Parse field selection string into validated field names.\n * Unknown/internal field names are silently dropped (no info leakage).\n */\nexport function parseFieldSelection(\n fieldsParam: string | undefined,\n allFields: Record<string, FieldConfig>,\n): string[] | undefined {\n if (!fieldsParam) return undefined\n\n const requested = fieldsParam.split(',').map((f) => f.trim())\n const valid = requested.filter((name) => {\n const config = allFields[name]\n return config !== undefined && !name.startsWith('_') && config.type !== 'blocks'\n })\n\n // Always include id\n if (valid.length > 0 && !valid.includes('id')) {\n valid.unshift('id')\n }\n\n return valid.length > 0 ? valid : undefined\n}\n","/**\n * Response helpers — JSON envelope builders.\n */\n\nexport function jsonResponse(\n data: unknown,\n status = 200,\n extraHeaders?: Record<string, string>,\n): Response {\n return new Response(JSON.stringify(data), {\n status,\n headers: {\n 'Content-Type': 'application/json',\n ...extraHeaders,\n },\n })\n}\n\nexport function errorResponse(\n message: string,\n code: string,\n status: number,\n extraHeaders?: Record<string, string>,\n): Response {\n return jsonResponse({ error: { status, message, code } }, status, extraHeaders)\n}\n\nexport function notFoundResponse(extraHeaders?: Record<string, string>): Response {\n return errorResponse('Not found', 'NOT_FOUND', 404, extraHeaders)\n}\n","/**\n * Schema introspection endpoint — GET /_schema\n *\n * Returns public-safe entity metadata for SDK generation.\n * Only exposes: type, required, options (select), cardinality (reference).\n * Internal fields (_version, _scopeId) excluded.\n * No hooks, behaviors, access rules, or implementation details.\n *\n * Response is filtered by the caller's role permissions — only entities\n * the role can 'view' are included.\n */\n\nimport type { Entity, FieldConfig } from '@murumets-ee/entity'\nimport type { SchemaEntity, SchemaField, SchemaResponse } from './types.js'\n\n/** Convert a FieldConfig to the public-safe SchemaField subset. */\nfunction toSchemaField(config: FieldConfig): SchemaField {\n const field: SchemaField = { type: config.type }\n\n if (config.required) {\n field.required = true\n }\n\n if (config.type === 'select') {\n field.options = config.options\n }\n\n if (config.type === 'reference') {\n field.cardinality = config.cardinality\n }\n\n return field\n}\n\n/** Convert an Entity to public-safe schema metadata. */\nexport function toSchemaEntity(entity: Entity): SchemaEntity {\n const allFields = entity.allFields as Record<string, FieldConfig>\n const fields: Record<string, SchemaField> = {}\n\n for (const [name, config] of Object.entries(allFields)) {\n // Skip internal fields\n if (name.startsWith('_')) continue\n fields[name] = toSchemaField(config)\n }\n\n return {\n name: entity.name,\n pluralName: `${entity.name}s`,\n fields,\n }\n}\n\n/**\n * Build the full /_schema response.\n * Only includes entities that pass the permission check.\n */\nexport function buildSchemaResponse(\n entities: Entity[],\n checkPermission: (entityName: string) => boolean,\n): SchemaResponse {\n const visible = entities.filter((e) => checkPermission(e.name))\n return {\n entities: visible.map(toSchemaEntity),\n }\n}\n","/**\n * Content API handler factory\n *\n * Creates a read-only catch-all route handler for public content delivery.\n * Mirrors the `createAdminApiHandler` pattern but with:\n * - No mutations (GET + OPTIONS only)\n * - Permission-gated (public role starts with 0 permissions)\n * - Published content only (QueryClient auto-filters)\n * - CORS + Cache-Control headers\n *\n * @example\n * ```typescript\n * // app/api/content/[...path]/route.ts\n * import { createContentApiHandler } from '@murumets-ee/content-api'\n * import { Article, Page } from '@/entities'\n *\n * const handler = createContentApiHandler({\n * entities: [Article, Page],\n * loadPermissions: async () => {\n * const roles = await loadRoles(getApp())\n * return buildPermissionChecker(roles)\n * },\n * cors: { allowedOrigins: ['https://www.example.com'] },\n * })\n *\n * export const { GET, OPTIONS } = handler\n * ```\n */\n\nimport type { PermissionChecker, RequestContext, RouteContext } from '@murumets-ee/core'\nimport { getApp, getContext, runWithContextAsync } from '@murumets-ee/core'\nimport { schemaRegistry } from '@murumets-ee/db'\nimport type { CursorInput, Entity, FieldConfig, SlugField } from '@murumets-ee/entity'\nimport { CountCache, decodeCursor, encodeCursor, getSearchableConfig } from '@murumets-ee/entity'\nimport { QueryClient } from '@murumets-ee/entity/query'\nimport {\n and,\n asc,\n desc,\n eq,\n getTableColumns,\n gte,\n ilike,\n inArray,\n lte,\n or,\n type SQL,\n sql,\n} from 'drizzle-orm'\nimport type { PgColumn, PgTable } from 'drizzle-orm/pg-core'\nimport { buildResponseHeaders } from './cache.js'\nimport { buildCorsHeaders, corsPreflightResponse } from './cors.js'\nimport {\n countParamsSchema,\n escapeLikePattern,\n isUuid,\n listParamsSchema,\n MAX_LIMIT,\n parseFieldSelection,\n singleParamsSchema,\n validateFilterValue,\n} from './query-params.js'\nimport { errorResponse, jsonResponse, notFoundResponse } from './response.js'\nimport { buildSchemaResponse } from './schema-endpoint.js'\nimport type { ContentApiConfig } from './types.js'\n\n// ---------------------------------------------------------------------------\n// Entity resolution (whitelist-based, same pattern as admin handler)\n// ---------------------------------------------------------------------------\n\nfunction buildEntityMap(entities: Entity[]): Map<string, Entity> {\n const map = new Map<string, Entity>()\n for (const entity of entities) {\n map.set(entity.name, entity)\n map.set(`${entity.name}s`, entity)\n }\n return map\n}\n\n// ---------------------------------------------------------------------------\n// Table-column helpers (typed via drizzle's getTableColumns)\n// ---------------------------------------------------------------------------\n\n/**\n * Resolve the registered Drizzle table + its column map for an entity by name.\n * Returns undefined if the entity isn't registered (caller decides whether\n * that's a 404 or a no-op).\n */\nfunction resolveTableCols(\n name: string,\n): { table: PgTable; cols: Record<string, PgColumn> } | undefined {\n const table = schemaRegistry.get(name)\n if (!table) return undefined\n return { table, cols: getTableColumns(table) as Record<string, PgColumn> }\n}\n\n// ---------------------------------------------------------------------------\n// Query helpers\n// ---------------------------------------------------------------------------\n\n/**\n * Build WHERE condition for `?search=q` against a public entity.\n *\n * Reads `searchable()` declaration (when present):\n * - `fts: {...}` → `_search_tsv @@ websearch_to_tsquery(language, q)`\n * - no fts → OR-combined ILIKE across `searchable().fields`\n *\n * Returns `undefined` when the entity has no `searchable()` (search\n * param ignored — public consumers won't get filtered results without\n * the entity opting in).\n *\n * **Differences from admin-ui's `buildSearchableWhere`:**\n * - This helper does NOT apply `searchable().defaultFilters`. Defaults\n * are an admin-side UX feature (\"hide closed tickets from the\n * inbox by default\"); public consumers already get publish-status\n * filtering from `publishable()` and don't need a second-layer\n * default-filter mechanism.\n * - This helper does NOT honour `searchable().includes`. Public\n * cross-entity OR-search would expose join structure that the\n * public API contract doesn't promise. Admin path supports it.\n */\nfunction buildSearchCondition(entity: Entity, search: string): SQL | undefined {\n const config = getSearchableConfig(entity)\n if (!config) return undefined\n const trimmed = search.trim()\n if (trimmed.length === 0) return undefined\n\n const resolved = resolveTableCols(entity.name)\n if (!resolved) return undefined\n const { cols } = resolved\n\n if (config.fts) {\n const tsvCol = cols._search_tsv\n if (tsvCol) {\n const language = config.fts.language ?? 'simple'\n return sql`${tsvCol} @@ websearch_to_tsquery(${language}, ${trimmed})`\n }\n // Translatable-only FTS — fall through to ILIKE.\n }\n\n const pattern = `%${escapeLikePattern(trimmed)}%`\n const pieces: SQL[] = []\n for (const fieldName of config.fields) {\n const column = cols[fieldName]\n if (!column) continue\n pieces.push(ilike(column, pattern))\n }\n if (pieces.length === 0) return undefined\n const first = pieces[0]\n if (!first) return undefined\n if (pieces.length === 1) return first\n const tail = pieces.slice(1)\n return or(first, ...tail)\n}\n\nfunction buildOrderBy(\n entityName: string,\n sortParam: string | undefined,\n allFields: Record<string, FieldConfig>,\n): SQL | undefined {\n if (!sortParam) return undefined\n\n const descending = sortParam.startsWith('-')\n const fieldName = descending ? sortParam.slice(1) : sortParam\n\n const fieldConfig = allFields[fieldName]\n if (!fieldConfig || fieldConfig.type === 'blocks') return undefined\n\n const resolved = resolveTableCols(entityName)\n if (!resolved) return undefined\n const column = resolved.cols[fieldName]\n if (!column) return undefined\n\n return descending ? desc(column) : asc(column)\n}\n\nfunction buildFilterConditions(\n entityName: string,\n url: URL,\n allFields: Record<string, FieldConfig>,\n): SQL[] {\n const resolved = resolveTableCols(entityName)\n if (!resolved) return []\n const { cols } = resolved\n\n const conditions: SQL[] = []\n\n for (const [key, raw] of url.searchParams.entries()) {\n const match = key.match(/^filter\\[([a-zA-Z_]+)\\]$/)\n if (!match) continue\n\n const fieldName = match[1]\n if (fieldName === undefined) continue\n // Reject internal fields (`_scopeId`, `_versionId`, …) — match the\n // underscore-prefix rule used by `parseFieldSelection`.\n if (fieldName.startsWith('_')) continue\n // Reject prototype-chain keys (`constructor`, `toString`, …).\n if (!Object.hasOwn(allFields, fieldName)) continue\n\n const fieldConfig = allFields[fieldName]\n if (!fieldConfig || fieldConfig.type === 'blocks') continue\n\n const column = cols[fieldName]\n if (!column) continue\n\n const validated = validateFilterValue(fieldConfig, raw)\n if (validated === null) continue\n\n // Date range filters: gte: / lte: prefix is preserved by validateFilterValue.\n if (fieldConfig.type === 'date' && typeof validated === 'string') {\n if (validated.startsWith('gte:')) {\n conditions.push(gte(column, validated.slice(4)))\n continue\n }\n if (validated.startsWith('lte:')) {\n conditions.push(lte(column, validated.slice(4)))\n continue\n }\n }\n conditions.push(eq(column, validated))\n }\n\n return conditions\n}\n\n// ---------------------------------------------------------------------------\n// Handler factory\n// ---------------------------------------------------------------------------\n\nexport function createContentApiHandler(config: ContentApiConfig) {\n const {\n entities,\n defaultLocale,\n publicRole = 'public',\n cors: corsConfig,\n cache: cacheConfig,\n onError,\n } = config\n const maxLimit = Math.min(config.maxLimit ?? MAX_LIMIT, MAX_LIMIT)\n const entityMap = buildEntityMap(entities)\n\n // Shared count cache — reduces COUNT(*) queries on paginated list pages.\n const countCache = new CountCache(5000)\n\n // Lazy-loaded permission checker — cached with 30s TTL.\n // Hosts that mutate roles at runtime should call invalidatePermissionCache()\n // immediately after the change so the next request reloads.\n const PERMISSION_CACHE_TTL_MS = 30_000\n let permissionChecker: PermissionChecker | null = null\n let permissionCacheTime = 0\n\n async function getChecker(): Promise<PermissionChecker> {\n const now = Date.now()\n if (!permissionChecker || now - permissionCacheTime > PERMISSION_CACHE_TTL_MS) {\n permissionChecker = await config.loadPermissions()\n permissionCacheTime = now\n }\n return permissionChecker\n }\n\n function invalidatePermissionCache(): void {\n permissionChecker = null\n permissionCacheTime = 0\n }\n\n // -- Role resolution -------------------------------------------------------\n\n async function resolveRole(req: Request): Promise<string> {\n if (!config.authenticate) return publicRole\n try {\n const result = await config.authenticate(req)\n return result?.role ?? publicRole\n } catch {\n return publicRole\n }\n }\n\n // -- Permission check (returns 404 on deny to avoid info leakage) ----------\n\n function hasViewPermission(\n checker: PermissionChecker,\n role: string,\n entityName: string,\n ): boolean {\n return checker(role, entityName, 'view')\n }\n\n // -- Create QueryClient from entity ----------------------------------------\n\n function createClient(entity: Entity): QueryClient {\n const app = getApp()\n return new QueryClient({\n entity,\n db: app.db.readOnly,\n logger: app.logger.child({ entity: entity.name }),\n countCache,\n contextResolver: () => {\n const ctx = getContext()\n if (!ctx?.user || !ctx?.checker) return undefined\n return {\n user: ctx.user,\n checker: ctx.checker,\n ...(ctx.scope !== undefined && { scope: ctx.scope }),\n }\n },\n })\n }\n\n // -- Endpoint handlers -----------------------------------------------------\n\n async function handleList(\n req: Request,\n entity: Entity,\n role: string,\n corsHeaders: Record<string, string>,\n ): Promise<Response> {\n const url = new URL(req.url)\n const params = listParamsSchema.safeParse(Object.fromEntries(url.searchParams))\n if (!params.success) {\n return errorResponse('Invalid query parameters', 'VALIDATION_ERROR', 400, corsHeaders)\n }\n\n const {\n limit: rawLimit,\n offset,\n sort,\n locale,\n fields,\n search,\n cursor: cursorParam,\n } = params.data\n const limit = Math.min(rawLimit, maxLimit)\n const allFields = entity.allFields as Record<string, FieldConfig>\n\n // Cursor-based pagination (opt-in, replaces OFFSET when provided)\n let cursor: CursorInput | undefined\n if (cursorParam) {\n const decoded = decodeCursor(cursorParam)\n if (!decoded) {\n return errorResponse('Invalid cursor', 'VALIDATION_ERROR', 400, corsHeaders)\n }\n // Whitelist via `Object.hasOwn` so prototype-chain keys (`__proto__`,\n // `constructor`, …) cannot pass.\n if (!Object.hasOwn(allFields, decoded.field) && decoded.field !== 'id') {\n return errorResponse('Invalid cursor field', 'VALIDATION_ERROR', 400, corsHeaders)\n }\n cursor = decoded\n }\n\n const where: SQL[] = []\n if (search) {\n const searchCondition = buildSearchCondition(entity, search)\n if (searchCondition) where.push(searchCondition)\n }\n\n const filterConditions = buildFilterConditions(entity.name, url, allFields)\n where.push(...filterConditions)\n\n const orderBy = buildOrderBy(entity.name, sort, allFields)\n const select = parseFieldSelection(fields, allFields)\n\n const client = createClient(entity)\n const resolvedLocale = locale ?? defaultLocale\n const queryOpts = {\n where: where.length > 0 ? and(...where) : undefined,\n limit,\n offset,\n orderBy,\n select,\n locale: resolvedLocale,\n defaultLocale,\n cursor,\n }\n\n const [items, total] = await Promise.all([\n client.findMany(queryOpts),\n client.count({ where: where.length > 0 ? and(...where) : undefined }),\n ])\n\n // Build nextCursor from last item for keyset pagination\n let nextCursor: string | undefined\n if (items.length > 0 && items.length === limit) {\n const lastItem = items[items.length - 1] as Record<string, unknown>\n // Derive sort field and direction from cursor or sort param\n const cursorField =\n cursor?.field ?? (sort ? (sort.startsWith('-') ? sort.slice(1) : sort) : undefined)\n const cursorDirection: 'asc' | 'desc' =\n cursor?.direction ?? (sort?.startsWith('-') ? 'desc' : 'asc')\n if (cursorField && lastItem[cursorField] !== undefined) {\n nextCursor = encodeCursor(lastItem, cursorField, cursorDirection)\n }\n }\n\n return jsonResponse(\n {\n data: items,\n meta: { total, limit, offset, hasMore: offset + limit < total, nextCursor },\n },\n 200,\n buildResponseHeaders(entity.name, corsHeaders, role, publicRole, cacheConfig),\n )\n }\n\n async function handleCount(\n req: Request,\n entity: Entity,\n role: string,\n corsHeaders: Record<string, string>,\n ): Promise<Response> {\n const url = new URL(req.url)\n const params = countParamsSchema.safeParse(Object.fromEntries(url.searchParams))\n if (!params.success) {\n return errorResponse('Invalid query parameters', 'VALIDATION_ERROR', 400, corsHeaders)\n }\n\n // ?countMode=estimate is only safe for entities that don't apply\n // publish/scope filters at query time — otherwise the pg_class row count\n // leaks unpublished or out-of-scope rows. For publishable entities we\n // always run the filtered count instead.\n //\n // We fall through to the filtered count even when the public client asked\n // for an estimate; the response shape stays compatible (`{count}`).\n const client = createClient(entity)\n const count = await client.count()\n\n return jsonResponse(\n { data: { count } },\n 200,\n buildResponseHeaders(entity.name, corsHeaders, role, publicRole, cacheConfig),\n )\n }\n\n async function handleById(\n req: Request,\n entity: Entity,\n id: string,\n role: string,\n corsHeaders: Record<string, string>,\n ): Promise<Response> {\n // Entity primary keys are UUID-typed throughout the toolkit. Reject\n // non-UUID inputs as 404 rather than letting Postgres throw a cast error\n // that would surface as a 500 (and side-channel \"valid format but missing\"\n // vs \"bogus format\").\n if (!isUuid(id)) return notFoundResponse(corsHeaders)\n\n const url = new URL(req.url)\n const params = singleParamsSchema.safeParse(Object.fromEntries(url.searchParams))\n if (!params.success) {\n return errorResponse('Invalid query parameters', 'VALIDATION_ERROR', 400, corsHeaders)\n }\n\n const { locale, fields } = params.data\n const allFields = entity.allFields as Record<string, FieldConfig>\n const select = parseFieldSelection(fields, allFields)\n const resolvedLocale = locale ?? defaultLocale\n\n const client = createClient(entity)\n const item = await client.findById(id, {\n ...(select !== undefined && { select }),\n ...(resolvedLocale !== undefined && { locale: resolvedLocale }),\n defaultLocale,\n })\n if (!item) return notFoundResponse(corsHeaders)\n\n return jsonResponse(\n { data: item },\n 200,\n buildResponseHeaders(entity.name, corsHeaders, role, publicRole, cacheConfig),\n )\n }\n\n async function handleBySlug(\n req: Request,\n entity: Entity,\n slug: string,\n role: string,\n corsHeaders: Record<string, string>,\n ): Promise<Response> {\n const url = new URL(req.url)\n const params = singleParamsSchema.safeParse(Object.fromEntries(url.searchParams))\n if (!params.success) {\n return errorResponse('Invalid query parameters', 'VALIDATION_ERROR', 400, corsHeaders)\n }\n\n // Check entity has a slug field\n const allFields = entity.allFields as Record<string, FieldConfig>\n if (!allFields.slug) return notFoundResponse(corsHeaders)\n\n const { locale, fields } = params.data\n const select = parseFieldSelection(fields, allFields)\n const resolvedLocale = locale ?? defaultLocale\n\n const resolved = resolveTableCols(entity.name)\n if (!resolved) return notFoundResponse(corsHeaders)\n const tableSlug = resolved.cols.slug\n const tableId = resolved.cols.id\n if (!tableSlug || !tableId) return notFoundResponse(corsHeaders)\n\n const client = createClient(entity)\n const slugConfig = allFields.slug as SlugField\n\n // For translatable slugs, also search the translation table.\n // A non-default locale's slug may live in {entity}_translations, not the main table.\n let whereClause: SQL = eq(tableSlug, slug)\n\n if (slugConfig.translatable && resolvedLocale) {\n const translationTableName = `${entity.name}_translations`\n const translationResolved = resolveTableCols(translationTableName)\n if (translationResolved) {\n const translationSlug = translationResolved.cols.slug\n const translationLocale = translationResolved.cols.locale\n const translationEntityId = translationResolved.cols.entityId\n if (translationSlug && translationLocale && translationEntityId) {\n // Find entity IDs whose translated slug matches (for the requested locale).\n // QueryClient applies publish + scope filters on the follow-up findMany,\n // so unpublished/out-of-scope translated slugs cannot leak through here.\n const app = getApp()\n const translationMatches = await app.db.readOnly\n .select({ entityId: translationEntityId })\n .from(translationResolved.table)\n .where(and(eq(translationSlug, slug), eq(translationLocale, resolvedLocale)))\n\n if (translationMatches.length > 0) {\n const translatedIds = translationMatches.map((r) => r.entityId as string)\n // Match by translated slug OR by main table slug (fallback).\n // `or(...)` returns SQL when given two non-undefined inputs; the\n // `?? eq(...)` keeps the type system honest without a non-null\n // assertion.\n whereClause =\n or(inArray(tableId, translatedIds), eq(tableSlug, slug)) ?? eq(tableSlug, slug)\n }\n }\n }\n }\n\n const results = await client.findMany({\n where: whereClause,\n limit: 1,\n select,\n locale: resolvedLocale,\n defaultLocale,\n })\n\n if (results.length === 0) return notFoundResponse(corsHeaders)\n\n return jsonResponse(\n { data: results[0] },\n 200,\n buildResponseHeaders(entity.name, corsHeaders, role, publicRole, cacheConfig),\n )\n }\n\n // -- Central dispatch -------------------------------------------------------\n\n async function handleGet(req: Request, ctx: RouteContext): Promise<Response> {\n const corsHeaders = buildCorsHeaders(req, corsConfig)\n\n try {\n const segments = await ctx.params.then((p) => p.path)\n if (!segments || segments.length === 0) {\n return notFoundResponse(corsHeaders)\n }\n\n // Resolve role + load permissions + establish request context\n const role = await resolveRole(req)\n const checker = await getChecker()\n\n const requestContext: RequestContext = {\n user: { id: 'public', groups: role ? [role] : [] },\n checker,\n }\n\n return await runWithContextAsync(requestContext, async () => {\n // /_schema — entity introspection (filtered by role)\n if (segments[0] === '_schema') {\n const schema = buildSchemaResponse(entities, (name) =>\n hasViewPermission(checker, role, name),\n )\n return jsonResponse(schema, 200, {\n ...corsHeaders,\n 'Cache-Control': 'no-store',\n })\n }\n\n // Resolve entity from whitelist\n const entityName = segments[0]\n if (entityName === undefined) return notFoundResponse(corsHeaders)\n const entity =\n entityMap.get(entityName) ??\n entityMap.get(entityName.endsWith('s') ? entityName.slice(0, -1) : entityName)\n\n // Entity not in whitelist OR role lacks view permission → 404\n if (!entity || !hasViewPermission(checker, role, entity.name)) {\n return notFoundResponse(corsHeaders)\n }\n\n // Route to handler\n if (segments.length === 1) {\n return handleList(req, entity, role, corsHeaders)\n }\n if (segments[1] === 'count') {\n return handleCount(req, entity, role, corsHeaders)\n }\n if (segments[1] === 'slug' && segments[2]) {\n return handleBySlug(req, entity, segments[2], role, corsHeaders)\n }\n if (segments.length === 2 && segments[1] !== undefined) {\n return handleById(req, entity, segments[1], role, corsHeaders)\n }\n\n return notFoundResponse(corsHeaders)\n })\n } catch (err) {\n const message = err instanceof Error ? err.message : 'Internal server error'\n const path = new URL(req.url).pathname\n // Route through the toolkit logger so errors land alongside the rest of\n // the structured stream rather than raw stdout.\n try {\n getApp().logger.error({ err, path }, 'content-api handler error')\n } catch {\n // App not yet bootstrapped (early failure path) — last-resort log.\n console.error('[content-api] handler error:', err)\n }\n onError?.({\n status: 500,\n message,\n path,\n })\n return errorResponse('Internal server error', 'INTERNAL_ERROR', 500, corsHeaders)\n }\n }\n\n return {\n GET: (req: Request, ctx: RouteContext) => handleGet(req, ctx),\n OPTIONS: (req: Request) => corsPreflightResponse(req, corsConfig),\n /**\n * Invalidate the cached permission checker. Call this from the\n * role-management code path (after a role is created/edited/deleted)\n * so the next request re-runs `loadPermissions()` instead of waiting\n * up to 30 seconds for the TTL to expire.\n */\n invalidatePermissionCache,\n }\n}\n"],"mappings":"2fAgBA,SAAgB,EACd,EACA,EACwB,CACxB,IAAM,EAAe,GAAQ,WAAW,GASxC,OAPI,GAAc,YAAc,GACvB,CAAE,gBAAiB,WAAY,CAMjC,CACL,gBAAiB,mBAJJ,GAAc,QAAU,GAAQ,eAAiB,GAInB,2BAHjC,GAAc,sBAAwB,GAAQ,6BAA+B,MAIxF,CAaH,SAAgB,EACd,EACA,EACA,EACA,EACA,EACwB,CACxB,GAAI,IAAS,EAAY,CACvB,IAAM,EAAe,EAAY,KAC3B,EAAW,wBACjB,MAAO,CACL,GAAG,EACH,gBAAiB,WACjB,KAAM,EAAe,GAAG,EAAa,IAAI,IAAa,EACvD,CAEH,MAAO,CACL,GAAG,EACH,GAAG,EAAkB,EAAY,EAAY,CAC9C,CCtDH,SAAgB,EACd,EACA,EACwB,CACxB,GAAI,CAAC,EAAQ,MAAO,EAAE,CAEtB,IAAM,EAAS,EAAI,QAAQ,IAAI,SAAS,CAMxC,MALI,CAAC,GAGD,CAAC,EAAO,eAAe,SAAS,EAAO,CAAS,EAAE,CAE/C,CACL,8BAA+B,EAC/B,+BAAgC,eAChC,+BAAgC,sCAChC,yBAA0B,OAAO,EAAO,QAAU,KAAK,CACvD,KAAM,SACP,CAGH,SAAgB,EAAsB,EAAc,EAA0C,CAC5F,IAAM,EAAU,EAAiB,EAAK,EAAO,CAC7C,OAAO,IAAI,SAAS,KAAM,CAAE,OAAQ,IAAK,UAAS,CAAC,CCpBrD,MAGa,EAAmB,EAAE,OAAO,CACvC,MAAO,EAAE,OAAO,QAAQ,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,IAAA,IAAc,CAAC,QAAQ,GAAG,CAChE,OAAQ,EAAE,OAAO,QAAQ,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE,CACjD,KAAM,EACH,QAAQ,CACR,MAAM,iBAAiB,CACvB,UAAU,CACb,OAAQ,EAAE,QAAQ,CAAC,MAAM,EAAe,CAAC,UAAU,CACnD,OAAQ,EAAE,QAAQ,CAAC,UAAU,CAC7B,OAAQ,EAAE,QAAQ,CAAC,IAAI,IAAI,CAAC,UAAU,CAEtC,OAAQ,EAAE,QAAQ,CAAC,IAAI,IAAI,CAAC,UAAU,CACvC,CAAC,CAGW,EAAqB,EAAE,OAAO,CACzC,OAAQ,EAAE,QAAQ,CAAC,MAAM,EAAe,CAAC,UAAU,CACnD,OAAQ,EAAE,QAAQ,CAAC,UAAU,CAC9B,CAAC,CAGW,EAAoB,EAAE,OAAO,CACxC,OAAQ,EAAE,QAAQ,CAAC,MAAM,EAAe,CAAC,UAAU,CACpD,CAAC,CAKI,EAAU,kEASV,EACJ,0FAQF,SAAS,EAAe,EAAsB,CAC5C,GAAI,CAAC,EAAY,KAAK,EAAI,CAAE,MAAO,GACnC,IAAM,EAAK,KAAK,MAAM,EAAI,CAM1B,OALI,OAAO,MAAM,EAAG,CAAS,GAEzB,EAAI,SAAW,GACV,IAAI,KAAK,EAAG,CAAC,aAAa,CAAC,MAAM,EAAG,GAAG,GAAK,EAE9C,GAIT,SAAS,EAAiB,EAAoB,CAC5C,GAAI,EAAE,MAAM,GAAK,GAAI,MAAO,GAC5B,IAAM,EAAI,OAAO,EAAE,CACnB,OAAO,OAAO,SAAS,EAAE,CAI3B,SAAgB,EAAO,EAAqB,CAC1C,OAAO,EAAQ,KAAK,EAAG,CAWzB,SAAgB,EAAoB,EAA0B,EAAsB,CAClF,OAAQ,EAAY,KAApB,CACE,IAAK,UAGH,OAFI,IAAQ,OAAe,GACvB,IAAQ,QAAgB,GACrB,KAET,IAAK,YACL,IAAK,QACH,OAAO,EAAQ,KAAK,EAAI,CAAG,EAAM,KAEnC,IAAK,SACH,OAAO,EAAY,QAAQ,SAAS,EAAI,CAAG,EAAM,KAEnD,IAAK,OAEH,OAAO,EADM,EAAI,WAAW,OAAO,EAAI,EAAI,WAAW,OAAO,CAAG,EAAI,MAAM,EAAE,CAAG,EACpD,CAAG,EAAM,KAGtC,IAAK,SACH,OAAO,EAAiB,EAAI,CAAG,OAAO,EAAI,CAAG,KAE/C,IAAK,OACH,OAAO,EAAI,QAAU,IAAyB,EAAM,KAEtD,QACE,OAAO,MAQb,SAAgB,EACd,EACA,EACsB,CACtB,GAAI,CAAC,EAAa,OAGlB,IAAM,EADY,EAAY,MAAM,IAAI,CAAC,IAAK,GAAM,EAAE,MAAM,CACrC,CAAC,OAAQ,GAAS,CACvC,IAAM,EAAS,EAAU,GACzB,OAAO,IAAW,IAAA,IAAa,CAAC,EAAK,WAAW,IAAI,EAAI,EAAO,OAAS,UACxE,CAOF,OAJI,EAAM,OAAS,GAAK,CAAC,EAAM,SAAS,KAAK,EAC3C,EAAM,QAAQ,KAAK,CAGd,EAAM,OAAS,EAAI,EAAQ,IAAA,GC3IpC,SAAgB,EACd,EACA,EAAS,IACT,EACU,CACV,OAAO,IAAI,SAAS,KAAK,UAAU,EAAK,CAAE,CACxC,SACA,QAAS,CACP,eAAgB,mBAChB,GAAG,EACJ,CACF,CAAC,CAGJ,SAAgB,EACd,EACA,EACA,EACA,EACU,CACV,OAAO,EAAa,CAAE,MAAO,CAAE,SAAQ,UAAS,OAAM,CAAE,CAAE,EAAQ,EAAa,CAGjF,SAAgB,EAAiB,EAAiD,CAChF,OAAO,EAAc,YAAa,YAAa,IAAK,EAAa,CCZnE,SAAS,EAAc,EAAkC,CACvD,IAAM,EAAqB,CAAE,KAAM,EAAO,KAAM,CAchD,OAZI,EAAO,WACT,EAAM,SAAW,IAGf,EAAO,OAAS,WAClB,EAAM,QAAU,EAAO,SAGrB,EAAO,OAAS,cAClB,EAAM,YAAc,EAAO,aAGtB,EAIT,SAAgB,EAAe,EAA8B,CAC3D,IAAM,EAAY,EAAO,UACnB,EAAsC,EAAE,CAE9C,IAAK,GAAM,CAAC,EAAM,KAAW,OAAO,QAAQ,EAAU,CAEhD,EAAK,WAAW,IAAI,GACxB,EAAO,GAAQ,EAAc,EAAO,EAGtC,MAAO,CACL,KAAM,EAAO,KACb,WAAY,GAAG,EAAO,KAAK,GAC3B,SACD,CAOH,SAAgB,EACd,EACA,EACgB,CAEhB,MAAO,CACL,SAFc,EAAS,OAAQ,GAAM,EAAgB,EAAE,KAAK,CAE3C,CAAC,IAAI,EAAe,CACtC,CCOH,SAAS,EAAe,EAAyC,CAC/D,IAAM,EAAM,IAAI,IAChB,IAAK,IAAM,KAAU,EACnB,EAAI,IAAI,EAAO,KAAM,EAAO,CAC5B,EAAI,IAAI,GAAG,EAAO,KAAK,GAAI,EAAO,CAEpC,OAAO,EAYT,SAAS,EACP,EACgE,CAChE,IAAM,EAAQ,EAAe,IAAI,EAAK,CACjC,KACL,MAAO,CAAE,QAAO,KAAM,EAAgB,EAAM,CAA8B,CA4B5E,SAAS,EAAqB,EAAgB,EAAiC,CAC7E,IAAM,EAAS,EAAoB,EAAO,CAC1C,GAAI,CAAC,EAAQ,OACb,IAAM,EAAU,EAAO,MAAM,CAC7B,GAAI,EAAQ,SAAW,EAAG,OAE1B,IAAM,EAAW,EAAiB,EAAO,KAAK,CAC9C,GAAI,CAAC,EAAU,OACf,GAAM,CAAE,QAAS,EAEjB,GAAI,EAAO,IAAK,CACd,IAAM,EAAS,EAAK,YACpB,GAAI,EAEF,MAAO,EAAG,GAAG,EAAO,2BADH,EAAO,IAAI,UAAY,SACgB,IAAI,EAAQ,GAKxE,IAAM,EAAU,IAAI,EAAkB,EAAQ,CAAC,GACzC,EAAgB,EAAE,CACxB,IAAK,IAAM,KAAa,EAAO,OAAQ,CACrC,IAAM,EAAS,EAAK,GACf,GACL,EAAO,KAAK,EAAM,EAAQ,EAAQ,CAAC,CAErC,GAAI,EAAO,SAAW,EAAG,OACzB,IAAM,EAAQ,EAAO,GAChB,KAGL,OAFI,EAAO,SAAW,EAAU,EAEzB,EAAG,EAAO,GADJ,EAAO,MAAM,EACF,CAAC,CAG3B,SAAS,EACP,EACA,EACA,EACiB,CACjB,GAAI,CAAC,EAAW,OAEhB,IAAM,EAAa,EAAU,WAAW,IAAI,CACtC,EAAY,EAAa,EAAU,MAAM,EAAE,CAAG,EAE9C,EAAc,EAAU,GAC9B,GAAI,CAAC,GAAe,EAAY,OAAS,SAAU,OAEnD,IAAM,EAAW,EAAiB,EAAW,CAC7C,GAAI,CAAC,EAAU,OACf,IAAM,EAAS,EAAS,KAAK,GACxB,KAEL,OAAO,EAAa,EAAK,EAAO,CAAG,EAAI,EAAO,CAGhD,SAAS,EACP,EACA,EACA,EACO,CACP,IAAM,EAAW,EAAiB,EAAW,CAC7C,GAAI,CAAC,EAAU,MAAO,EAAE,CACxB,GAAM,CAAE,QAAS,EAEX,EAAoB,EAAE,CAE5B,IAAK,GAAM,CAAC,EAAK,KAAQ,EAAI,aAAa,SAAS,CAAE,CACnD,IAAM,EAAQ,EAAI,MAAM,2BAA2B,CACnD,GAAI,CAAC,EAAO,SAEZ,IAAM,EAAY,EAAM,GAMxB,GALI,IAAc,IAAA,IAGd,EAAU,WAAW,IAAI,EAEzB,CAAC,OAAO,OAAO,EAAW,EAAU,CAAE,SAE1C,IAAM,EAAc,EAAU,GAC9B,GAAI,CAAC,GAAe,EAAY,OAAS,SAAU,SAEnD,IAAM,EAAS,EAAK,GACpB,GAAI,CAAC,EAAQ,SAEb,IAAM,EAAY,EAAoB,EAAa,EAAI,CACnD,OAAc,KAGlB,IAAI,EAAY,OAAS,QAAU,OAAO,GAAc,SAAU,CAChE,GAAI,EAAU,WAAW,OAAO,CAAE,CAChC,EAAW,KAAK,EAAI,EAAQ,EAAU,MAAM,EAAE,CAAC,CAAC,CAChD,SAEF,GAAI,EAAU,WAAW,OAAO,CAAE,CAChC,EAAW,KAAK,EAAI,EAAQ,EAAU,MAAM,EAAE,CAAC,CAAC,CAChD,UAGJ,EAAW,KAAK,EAAG,EAAQ,EAAU,CAAC,EAGxC,OAAO,EAOT,SAAgB,EAAwB,EAA0B,CAChE,GAAM,CACJ,WACA,gBACA,aAAa,SACb,KAAM,EACN,MAAO,EACP,WACE,EACE,EAAW,KAAK,IAAI,EAAO,UAAA,IAAA,IAAiC,CAC5D,EAAY,EAAe,EAAS,CAGpC,EAAa,IAAI,EAAW,IAAK,CAMnC,EAA8C,KAC9C,EAAsB,EAE1B,eAAe,GAAyC,CACtD,IAAM,EAAM,KAAK,KAAK,CAKtB,OAJI,CAAC,GAAqB,EAAM,EAAsB,OACpD,EAAoB,MAAM,EAAO,iBAAiB,CAClD,EAAsB,GAEjB,EAGT,SAAS,GAAkC,CACzC,EAAoB,KACpB,EAAsB,EAKxB,eAAe,EAAY,EAA+B,CACxD,GAAI,CAAC,EAAO,aAAc,OAAO,EACjC,GAAI,CAEF,OAAO,MADc,EAAO,aAAa,EAAI,GAC9B,MAAQ,OACjB,CACN,OAAO,GAMX,SAAS,EACP,EACA,EACA,EACS,CACT,OAAO,EAAQ,EAAM,EAAY,OAAO,CAK1C,SAAS,EAAa,EAA6B,CACjD,IAAM,EAAM,GAAQ,CACpB,OAAO,IAAI,EAAY,CACrB,SACA,GAAI,EAAI,GAAG,SACX,OAAQ,EAAI,OAAO,MAAM,CAAE,OAAQ,EAAO,KAAM,CAAC,CACjD,aACA,oBAAuB,CACrB,IAAM,EAAM,GAAY,CACpB,MAAC,GAAK,MAAQ,CAAC,GAAK,SACxB,MAAO,CACL,KAAM,EAAI,KACV,QAAS,EAAI,QACb,GAAI,EAAI,QAAU,IAAA,IAAa,CAAE,MAAO,EAAI,MAAO,CACpD,EAEJ,CAAC,CAKJ,eAAe,EACb,EACA,EACA,EACA,EACmB,CACnB,IAAM,EAAM,IAAI,IAAI,EAAI,IAAI,CACtB,EAAS,EAAiB,UAAU,OAAO,YAAY,EAAI,aAAa,CAAC,CAC/E,GAAI,CAAC,EAAO,QACV,OAAO,EAAc,2BAA4B,mBAAoB,IAAK,EAAY,CAGxF,GAAM,CACJ,MAAO,EACP,SACA,OACA,SACA,SACA,SACA,OAAQ,GACN,EAAO,KACL,EAAQ,KAAK,IAAI,EAAU,EAAS,CACpC,EAAY,EAAO,UAGrB,EACJ,GAAI,EAAa,CACf,IAAM,EAAU,EAAa,EAAY,CACzC,GAAI,CAAC,EACH,OAAO,EAAc,iBAAkB,mBAAoB,IAAK,EAAY,CAI9E,GAAI,CAAC,OAAO,OAAO,EAAW,EAAQ,MAAM,EAAI,EAAQ,QAAU,KAChE,OAAO,EAAc,uBAAwB,mBAAoB,IAAK,EAAY,CAEpF,EAAS,EAGX,IAAM,EAAe,EAAE,CACvB,GAAI,EAAQ,CACV,IAAM,EAAkB,EAAqB,EAAQ,EAAO,CACxD,GAAiB,EAAM,KAAK,EAAgB,CAGlD,IAAM,EAAmB,EAAsB,EAAO,KAAM,EAAK,EAAU,CAC3E,EAAM,KAAK,GAAG,EAAiB,CAE/B,IAAM,EAAU,EAAa,EAAO,KAAM,EAAM,EAAU,CACpD,EAAS,EAAoB,EAAQ,EAAU,CAE/C,EAAS,EAAa,EAAO,CAC7B,EAAiB,GAAU,EAC3B,EAAY,CAChB,MAAO,EAAM,OAAS,EAAI,EAAI,GAAG,EAAM,CAAG,IAAA,GAC1C,QACA,SACA,UACA,SACA,OAAQ,EACR,gBACA,SACD,CAEK,CAAC,EAAO,GAAS,MAAM,QAAQ,IAAI,CACvC,EAAO,SAAS,EAAU,CAC1B,EAAO,MAAM,CAAE,MAAO,EAAM,OAAS,EAAI,EAAI,GAAG,EAAM,CAAG,IAAA,GAAW,CAAC,CACtE,CAAC,CAGE,EACJ,GAAI,EAAM,OAAS,GAAK,EAAM,SAAW,EAAO,CAC9C,IAAM,EAAW,EAAM,EAAM,OAAS,GAEhC,EACJ,GAAQ,QAAU,EAAQ,EAAK,WAAW,IAAI,CAAG,EAAK,MAAM,EAAE,CAAG,EAAQ,IAAA,IACrE,EACJ,GAAQ,YAAc,GAAM,WAAW,IAAI,CAAG,OAAS,OACrD,GAAe,EAAS,KAAiB,IAAA,KAC3C,EAAa,EAAa,EAAU,EAAa,EAAgB,EAIrE,OAAO,EACL,CACE,KAAM,EACN,KAAM,CAAE,QAAO,QAAO,SAAQ,QAAS,EAAS,EAAQ,EAAO,aAAY,CAC5E,CACD,IACA,EAAqB,EAAO,KAAM,EAAa,EAAM,EAAY,EAAY,CAC9E,CAGH,eAAe,EACb,EACA,EACA,EACA,EACmB,CACnB,IAAM,EAAM,IAAI,IAAI,EAAI,IAAI,CAgB5B,OAfe,EAAkB,UAAU,OAAO,YAAY,EAAI,aAAa,CACpE,CAAC,QAcL,EACL,CAAE,KAAM,CAAE,MAAA,MAJG,EAAa,EACF,CAAC,OAAO,CAGf,CAAE,CACnB,IACA,EAAqB,EAAO,KAAM,EAAa,EAAM,EAAY,EAAY,CAC9E,CAjBQ,EAAc,2BAA4B,mBAAoB,IAAK,EAAY,CAoB1F,eAAe,EACb,EACA,EACA,EACA,EACA,EACmB,CAKnB,GAAI,CAAC,EAAO,EAAG,CAAE,OAAO,EAAiB,EAAY,CAErD,IAAM,EAAM,IAAI,IAAI,EAAI,IAAI,CACtB,EAAS,EAAmB,UAAU,OAAO,YAAY,EAAI,aAAa,CAAC,CACjF,GAAI,CAAC,EAAO,QACV,OAAO,EAAc,2BAA4B,mBAAoB,IAAK,EAAY,CAGxF,GAAM,CAAE,SAAQ,UAAW,EAAO,KAC5B,EAAY,EAAO,UACnB,EAAS,EAAoB,EAAQ,EAAU,CAC/C,EAAiB,GAAU,EAG3B,EAAO,MADE,EAAa,EACH,CAAC,SAAS,EAAI,CACrC,GAAI,IAAW,IAAA,IAAa,CAAE,SAAQ,CACtC,GAAI,IAAmB,IAAA,IAAa,CAAE,OAAQ,EAAgB,CAC9D,gBACD,CAAC,CAGF,OAFK,EAEE,EACL,CAAE,KAAM,EAAM,CACd,IACA,EAAqB,EAAO,KAAM,EAAa,EAAM,EAAY,EAAY,CAC9E,CANiB,EAAiB,EAAY,CASjD,eAAe,EACb,EACA,EACA,EACA,EACA,EACmB,CACnB,IAAM,EAAM,IAAI,IAAI,EAAI,IAAI,CACtB,EAAS,EAAmB,UAAU,OAAO,YAAY,EAAI,aAAa,CAAC,CACjF,GAAI,CAAC,EAAO,QACV,OAAO,EAAc,2BAA4B,mBAAoB,IAAK,EAAY,CAIxF,IAAM,EAAY,EAAO,UACzB,GAAI,CAAC,EAAU,KAAM,OAAO,EAAiB,EAAY,CAEzD,GAAM,CAAE,SAAQ,UAAW,EAAO,KAC5B,EAAS,EAAoB,EAAQ,EAAU,CAC/C,EAAiB,GAAU,EAE3B,EAAW,EAAiB,EAAO,KAAK,CAC9C,GAAI,CAAC,EAAU,OAAO,EAAiB,EAAY,CACnD,IAAM,EAAY,EAAS,KAAK,KAC1B,EAAU,EAAS,KAAK,GAC9B,GAAI,CAAC,GAAa,CAAC,EAAS,OAAO,EAAiB,EAAY,CAEhE,IAAM,EAAS,EAAa,EAAO,CAC7B,EAAa,EAAU,KAIzB,EAAmB,EAAG,EAAW,EAAK,CAE1C,GAAI,EAAW,cAAgB,EAAgB,CAE7C,IAAM,EAAsB,EAAiB,GADb,EAAO,KAAK,eACsB,CAClE,GAAI,EAAqB,CACvB,IAAM,EAAkB,EAAoB,KAAK,KAC3C,EAAoB,EAAoB,KAAK,OAC7C,EAAsB,EAAoB,KAAK,SACrD,GAAI,GAAmB,GAAqB,EAAqB,CAK/D,IAAM,EAAqB,MADf,GACwB,CAAC,GAAG,SACrC,OAAO,CAAE,SAAU,EAAqB,CAAC,CACzC,KAAK,EAAoB,MAAM,CAC/B,MAAM,EAAI,EAAG,EAAiB,EAAK,CAAE,EAAG,EAAmB,EAAe,CAAC,CAAC,CAE3E,EAAmB,OAAS,IAM9B,EACE,EAAG,EAAQ,EANS,EAAmB,IAAK,GAAM,EAAE,SAMnB,CAAC,CAAE,EAAG,EAAW,EAAK,CAAC,EAAI,EAAG,EAAW,EAAK,IAMzF,IAAM,EAAU,MAAM,EAAO,SAAS,CACpC,MAAO,EACP,MAAO,EACP,SACA,OAAQ,EACR,gBACD,CAAC,CAIF,OAFI,EAAQ,SAAW,EAAU,EAAiB,EAAY,CAEvD,EACL,CAAE,KAAM,EAAQ,GAAI,CACpB,IACA,EAAqB,EAAO,KAAM,EAAa,EAAM,EAAY,EAAY,CAC9E,CAKH,eAAe,EAAU,EAAc,EAAsC,CAC3E,IAAM,EAAc,EAAiB,EAAK,EAAW,CAErD,GAAI,CACF,IAAM,EAAW,MAAM,EAAI,OAAO,KAAM,GAAM,EAAE,KAAK,CACrD,GAAI,CAAC,GAAY,EAAS,SAAW,EACnC,OAAO,EAAiB,EAAY,CAItC,IAAM,EAAO,MAAM,EAAY,EAAI,CAC7B,EAAU,MAAM,GAAY,CAOlC,OAAO,MAAM,EAAoB,CAJ/B,KAAM,CAAE,GAAI,SAAU,OAAQ,EAAO,CAAC,EAAK,CAAG,EAAE,CAAE,CAClD,UAG6C,CAAE,SAAY,CAE3D,GAAI,EAAS,KAAO,UAIlB,OAAO,EAHQ,EAAoB,EAAW,GAC5C,EAAkB,EAAS,EAAM,EAAK,CAEd,CAAE,IAAK,CAC/B,GAAG,EACH,gBAAiB,WAClB,CAAC,CAIJ,IAAM,EAAa,EAAS,GAC5B,GAAI,IAAe,IAAA,GAAW,OAAO,EAAiB,EAAY,CAClE,IAAM,EACJ,EAAU,IAAI,EAAW,EACzB,EAAU,IAAI,EAAW,SAAS,IAAI,CAAG,EAAW,MAAM,EAAG,GAAG,CAAG,EAAW,CAqBhF,MAlBI,CAAC,GAAU,CAAC,EAAkB,EAAS,EAAM,EAAO,KAAK,CACpD,EAAiB,EAAY,CAIlC,EAAS,SAAW,EACf,EAAW,EAAK,EAAQ,EAAM,EAAY,CAE/C,EAAS,KAAO,QACX,EAAY,EAAK,EAAQ,EAAM,EAAY,CAEhD,EAAS,KAAO,QAAU,EAAS,GAC9B,EAAa,EAAK,EAAQ,EAAS,GAAI,EAAM,EAAY,CAE9D,EAAS,SAAW,GAAK,EAAS,KAAO,IAAA,GACpC,EAAW,EAAK,EAAQ,EAAS,GAAI,EAAM,EAAY,CAGzD,EAAiB,EAAY,EACpC,OACK,EAAK,CACZ,IAAM,EAAU,aAAe,MAAQ,EAAI,QAAU,wBAC/C,EAAO,IAAI,IAAI,EAAI,IAAI,CAAC,SAG9B,GAAI,CACF,GAAQ,CAAC,OAAO,MAAM,CAAE,MAAK,OAAM,CAAE,4BAA4B,MAC3D,CAEN,QAAQ,MAAM,+BAAgC,EAAI,CAOpD,OALA,IAAU,CACR,OAAQ,IACR,UACA,OACD,CAAC,CACK,EAAc,wBAAyB,iBAAkB,IAAK,EAAY,EAIrF,MAAO,CACL,KAAM,EAAc,IAAsB,EAAU,EAAK,EAAI,CAC7D,QAAU,GAAiB,EAAsB,EAAK,EAAW,CAOjE,4BACD"}
1
+ {"version":3,"file":"index.mjs","names":[],"sources":["../src/cache.ts","../src/cors.ts","../src/query-params.ts","../src/response.ts","../src/schema-endpoint.ts","../src/handler.ts"],"sourcesContent":["/**\n * Cache-Control header builder.\n *\n * Defaults: public, max-age=60, stale-while-revalidate=300.\n * Per-entity overrides for hot content (low TTL) vs static pages (high TTL).\n *\n * Role-aware short-circuit: when the resolved role is NOT the configured\n * `publicRole`, we force `Cache-Control: no-store`. Authenticated/preview\n * responses must never reach a shared CDN cache — the URL is the same for\n * public and editor callers, but the body is role-specific. Without this,\n * a CloudFront/Fastly/Cloudflare edge with the default URL-only cache key\n * would serve an editor's response to subsequent anonymous visitors.\n */\n\nimport type { CacheConfig } from './types.js'\n\nexport function buildCacheHeaders(\n entityName: string,\n config: CacheConfig | undefined,\n): Record<string, string> {\n const entityConfig = config?.entities?.[entityName]\n\n if (entityConfig?.cacheable === false) {\n return { 'Cache-Control': 'no-store' }\n }\n\n const maxAge = entityConfig?.maxAge ?? config?.defaultMaxAge ?? 60\n const swr = entityConfig?.staleWhileRevalidate ?? config?.defaultStaleWhileRevalidate ?? 300\n\n return {\n 'Cache-Control': `public, max-age=${maxAge}, stale-while-revalidate=${swr}`,\n }\n}\n\n/**\n * Combined response headers: CORS + Cache-Control.\n *\n * When `role !== publicRole`, returns `Cache-Control: no-store` regardless\n * of the per-entity cache config — see file-level comment. We also append\n * `Cookie` and `Authorization` to `Vary` since hosts may resolve role from\n * either; `no-store` already prevents shared-cache reuse, but the Vary\n * header keeps semantics correct for any down-stream policy that respects\n * it without requiring `no-store`.\n */\nexport function buildResponseHeaders(\n entityName: string,\n corsHeaders: Record<string, string>,\n role: string,\n publicRole: string,\n cacheConfig: CacheConfig | undefined,\n): Record<string, string> {\n if (role !== publicRole) {\n const existingVary = corsHeaders.Vary\n const authVary = 'Cookie, Authorization'\n return {\n ...corsHeaders,\n 'Cache-Control': 'no-store',\n Vary: existingVary ? `${existingVary}, ${authVary}` : authVary,\n }\n }\n return {\n ...corsHeaders,\n ...buildCacheHeaders(entityName, cacheConfig),\n }\n}\n","/**\n * CORS — Origin allowlist with exact match.\n *\n * No wildcards, no regex. This is a CMS content API — you know which\n * frontends consume it. Vary: Origin ensures CDNs cache per-origin.\n */\n\nimport type { CorsConfig } from './types.js'\n\nexport function buildCorsHeaders(\n req: Request,\n config: CorsConfig | undefined,\n): Record<string, string> {\n if (!config) return {}\n\n const origin = req.headers.get('Origin')\n if (!origin) return {}\n\n // Exact match only\n if (!config.allowedOrigins.includes(origin)) return {}\n\n return {\n 'Access-Control-Allow-Origin': origin,\n 'Access-Control-Allow-Methods': 'GET, OPTIONS',\n 'Access-Control-Allow-Headers': 'Content-Type, Accept, Authorization',\n 'Access-Control-Max-Age': String(config.maxAge ?? 3600),\n Vary: 'Origin',\n }\n}\n\nexport function corsPreflightResponse(req: Request, config: CorsConfig | undefined): Response {\n const headers = buildCorsHeaders(req, config)\n return new Response(null, { status: 204, headers })\n}\n","/**\n * Query parameter validation — Zod schemas for all content API endpoints.\n *\n * All user input is validated before it touches QueryClient.\n * Pagination hard-capped at MAX_LIMIT. Sort/filter restricted to queryable columns.\n */\n\nimport { escapeLikePattern, LOCALE_PATTERN } from '@murumets-ee/core'\nimport type { FieldConfig } from '@murumets-ee/entity'\nimport { z } from 'zod'\n\nexport const MAX_LIMIT = 100\nexport const MAX_FILTER_TEXT_LENGTH = 200\n\n/** List endpoint query params. */\nexport const listParamsSchema = z.object({\n limit: z.coerce.number().int().min(1).max(MAX_LIMIT).default(20),\n offset: z.coerce.number().int().min(0).default(0),\n sort: z\n .string()\n .regex(/^-?[a-zA-Z_]+$/)\n .optional(),\n locale: z.string().regex(LOCALE_PATTERN).optional(),\n fields: z.string().optional(),\n search: z.string().max(200).optional(),\n /** Opaque cursor for keyset pagination (base64-encoded JSON). */\n cursor: z.string().max(500).optional(),\n})\n\n/** Single entity query params. */\nexport const singleParamsSchema = z.object({\n locale: z.string().regex(LOCALE_PATTERN).optional(),\n fields: z.string().optional(),\n})\n\n/** Count endpoint query params. */\nexport const countParamsSchema = z.object({\n locale: z.string().regex(LOCALE_PATTERN).optional(),\n})\n\n// Re-export from core so existing imports from this module continue to work\nexport { escapeLikePattern }\n\nconst UUID_RE = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i\n\n/**\n * ISO-8601 calendar date or full timestamp.\n * Accepts: 2024-01-31, 2024-01-31T12:34:56Z, 2024-01-31T12:34:56.789+02:00.\n * Note: shape only — calendar validity (e.g. month 1–12, valid day-of-month)\n * is enforced separately by `isValidIsoDate` so impossible-date values cannot\n * reach Postgres and trigger a 500 cast error.\n */\nconst ISO_DATE_RE =\n /^\\d{4}-\\d{2}-\\d{2}(?:[Tt ]\\d{2}:\\d{2}(?::\\d{2}(?:\\.\\d+)?)?(?:[Zz]|[+-]\\d{2}:?\\d{2})?)?$/\n\n/**\n * Validate ISO-8601 shape AND calendar validity.\n * `Date.parse('2024-13-01')` returns NaN; `Date.parse('2024-02-30')` rolls over\n * to 2024-03-01 in some hosts but produces a different YYYY-MM-DD prefix from\n * the input — comparing the round-tripped date prefix catches both cases.\n */\nexport function isValidIsoDate(raw: string): boolean {\n if (!ISO_DATE_RE.test(raw)) return false\n const ms = Date.parse(raw)\n if (Number.isNaN(ms)) return false\n // For bare YYYY-MM-DD, confirm the parsed date round-trips to the same prefix.\n if (raw.length === 10) {\n return new Date(ms).toISOString().slice(0, 10) === raw\n }\n return true\n}\n\n/** True if `s` parses as a finite number with no trailing junk. */\nfunction isNumericLiteral(s: string): boolean {\n if (s.trim() === '') return false\n const n = Number(s)\n return Number.isFinite(n)\n}\n\n/** True if `id` matches the canonical UUID format used by entity primary keys. */\nexport function isUuid(id: string): boolean {\n return UUID_RE.test(id)\n}\n\n/**\n * Validate a filter value against the field type.\n * Returns the validated value (possibly coerced) or null if invalid.\n *\n * For `date`, accepts a `gte:` / `lte:` prefix; the prefix itself is preserved\n * so the caller can route to the right comparison operator. The bare value\n * (with prefix stripped) must match ISO-8601.\n */\nexport function validateFilterValue(fieldConfig: FieldConfig, raw: string): unknown {\n switch (fieldConfig.type) {\n case 'boolean':\n if (raw === 'true') return true\n if (raw === 'false') return false\n return null\n\n case 'reference':\n case 'media':\n return UUID_RE.test(raw) ? raw : null\n\n case 'select':\n return fieldConfig.options.includes(raw) ? raw : null\n\n case 'date': {\n const bare = raw.startsWith('gte:') || raw.startsWith('lte:') ? raw.slice(4) : raw\n return isValidIsoDate(bare) ? raw : null\n }\n\n case 'number':\n return isNumericLiteral(raw) ? Number(raw) : null\n\n case 'text':\n return raw.length <= MAX_FILTER_TEXT_LENGTH ? raw : null\n\n default:\n return null\n }\n}\n\n/**\n * Parse field selection string into validated field names.\n * Unknown/internal field names are silently dropped (no info leakage).\n */\nexport function parseFieldSelection(\n fieldsParam: string | undefined,\n allFields: Record<string, FieldConfig>,\n): string[] | undefined {\n if (!fieldsParam) return undefined\n\n const requested = fieldsParam.split(',').map((f) => f.trim())\n const valid = requested.filter((name) => {\n const config = allFields[name]\n return config !== undefined && !name.startsWith('_') && config.type !== 'blocks'\n })\n\n // Always include id\n if (valid.length > 0 && !valid.includes('id')) {\n valid.unshift('id')\n }\n\n return valid.length > 0 ? valid : undefined\n}\n","/**\n * Response helpers — JSON envelope builders.\n */\n\nexport function jsonResponse(\n data: unknown,\n status = 200,\n extraHeaders?: Record<string, string>,\n): Response {\n return new Response(JSON.stringify(data), {\n status,\n headers: {\n 'Content-Type': 'application/json',\n ...extraHeaders,\n },\n })\n}\n\nexport function errorResponse(\n message: string,\n code: string,\n status: number,\n extraHeaders?: Record<string, string>,\n): Response {\n return jsonResponse({ error: { status, message, code } }, status, extraHeaders)\n}\n\nexport function notFoundResponse(extraHeaders?: Record<string, string>): Response {\n return errorResponse('Not found', 'NOT_FOUND', 404, extraHeaders)\n}\n","/**\n * Schema introspection endpoint — GET /_schema\n *\n * Returns public-safe entity metadata for SDK generation.\n * Only exposes: type, required, options (select), cardinality (reference).\n * Internal fields (_version, _scopeId) excluded.\n * No hooks, behaviors, access rules, or implementation details.\n *\n * Response is filtered by the caller's role permissions — only entities\n * the role can 'view' are included.\n */\n\nimport type { Entity, FieldConfig } from '@murumets-ee/entity'\nimport type { SchemaEntity, SchemaField, SchemaResponse } from './types.js'\n\n/** Convert a FieldConfig to the public-safe SchemaField subset. */\nfunction toSchemaField(config: FieldConfig): SchemaField {\n const field: SchemaField = { type: config.type }\n\n if (config.required) {\n field.required = true\n }\n\n if (config.type === 'select') {\n field.options = config.options\n }\n\n if (config.type === 'reference') {\n field.cardinality = config.cardinality\n }\n\n return field\n}\n\n/** Convert an Entity to public-safe schema metadata. */\nexport function toSchemaEntity(entity: Entity): SchemaEntity {\n const allFields = entity.allFields as Record<string, FieldConfig>\n const fields: Record<string, SchemaField> = {}\n\n for (const [name, config] of Object.entries(allFields)) {\n // Skip internal fields\n if (name.startsWith('_')) continue\n fields[name] = toSchemaField(config)\n }\n\n return {\n name: entity.name,\n pluralName: `${entity.name}s`,\n fields,\n }\n}\n\n/**\n * Build the full /_schema response.\n * Only includes entities that pass the permission check.\n */\nexport function buildSchemaResponse(\n entities: Entity[],\n checkPermission: (entityName: string) => boolean,\n): SchemaResponse {\n const visible = entities.filter((e) => checkPermission(e.name))\n return {\n entities: visible.map(toSchemaEntity),\n }\n}\n","/**\n * Content API handler factory\n *\n * Creates a read-only catch-all route handler for public content delivery.\n * Mirrors the `createAdminApiHandler` pattern but with:\n * - No mutations (GET + OPTIONS only)\n * - Permission-gated (public role starts with 0 permissions)\n * - Published content only (QueryClient auto-filters)\n * - CORS + Cache-Control headers\n *\n * @example\n * ```typescript\n * // app/api/content/[...path]/route.ts\n * import { createContentApiHandler } from '@murumets-ee/content-api'\n * import { Article, Page } from '@/entities'\n *\n * const handler = createContentApiHandler({\n * entities: [Article, Page],\n * loadPermissions: async () => {\n * const roles = await loadRoles(getApp())\n * return buildPermissionChecker(roles)\n * },\n * cors: { allowedOrigins: ['https://www.example.com'] },\n * })\n *\n * export const { GET, OPTIONS } = handler\n * ```\n */\n\nimport type { PermissionChecker, RequestContext, RouteContext } from '@murumets-ee/core'\nimport { getApp, getContext, runWithContextAsync } from '@murumets-ee/core'\nimport { schemaRegistry } from '@murumets-ee/db'\nimport type { CursorInput, Entity, FieldConfig, SlugField } from '@murumets-ee/entity'\nimport { CountCache, decodeCursor, encodeCursor, getSearchableConfig } from '@murumets-ee/entity'\nimport { QueryClient } from '@murumets-ee/entity/query'\nimport {\n and,\n asc,\n desc,\n eq,\n getTableColumns,\n gte,\n ilike,\n inArray,\n lte,\n or,\n type SQL,\n sql,\n} from 'drizzle-orm'\nimport type { PgColumn, PgTable } from 'drizzle-orm/pg-core'\nimport { buildResponseHeaders } from './cache.js'\nimport { buildCorsHeaders, corsPreflightResponse } from './cors.js'\nimport {\n countParamsSchema,\n escapeLikePattern,\n isUuid,\n listParamsSchema,\n MAX_LIMIT,\n parseFieldSelection,\n singleParamsSchema,\n validateFilterValue,\n} from './query-params.js'\nimport { errorResponse, jsonResponse, notFoundResponse } from './response.js'\nimport { buildSchemaResponse } from './schema-endpoint.js'\nimport type { ContentApiConfig } from './types.js'\n\n// ---------------------------------------------------------------------------\n// Entity resolution (whitelist-based, same pattern as admin handler)\n// ---------------------------------------------------------------------------\n\nfunction buildEntityMap(entities: Entity[]): Map<string, Entity> {\n const map = new Map<string, Entity>()\n for (const entity of entities) {\n map.set(entity.name, entity)\n map.set(`${entity.name}s`, entity)\n }\n return map\n}\n\n// ---------------------------------------------------------------------------\n// Table-column helpers (typed via drizzle's getTableColumns)\n// ---------------------------------------------------------------------------\n\n/**\n * Resolve the registered Drizzle table + its column map for an entity by name.\n * Returns undefined if the entity isn't registered (caller decides whether\n * that's a 404 or a no-op).\n */\nfunction resolveTableCols(\n name: string,\n): { table: PgTable; cols: Record<string, PgColumn> } | undefined {\n const table = schemaRegistry.get(name)\n if (!table) return undefined\n return { table, cols: getTableColumns(table) as Record<string, PgColumn> }\n}\n\n// ---------------------------------------------------------------------------\n// Query helpers\n// ---------------------------------------------------------------------------\n\n/**\n * Build WHERE condition for `?search=q` against a public entity.\n *\n * Reads `searchable()` declaration (when present):\n * - `fts: {...}` → `_search_tsv @@ websearch_to_tsquery(language, q)`\n * - no fts → OR-combined ILIKE across `searchable().fields`\n *\n * Returns `undefined` when the entity has no `searchable()` (search\n * param ignored — public consumers won't get filtered results without\n * the entity opting in).\n *\n * **Differences from admin-ui's `buildSearchableWhere`:**\n * - This helper does NOT apply `searchable().defaultFilters`. Defaults\n * are an admin-side UX feature (\"hide closed tickets from the\n * inbox by default\"); public consumers already get publish-status\n * filtering from `publishable()` and don't need a second-layer\n * default-filter mechanism.\n * - This helper does NOT honour `searchable().includes`. Public\n * cross-entity OR-search would expose join structure that the\n * public API contract doesn't promise. Admin path supports it.\n */\nfunction buildSearchCondition(entity: Entity, search: string): SQL | undefined {\n const config = getSearchableConfig(entity)\n if (!config) return undefined\n const trimmed = search.trim()\n if (trimmed.length === 0) return undefined\n\n const resolved = resolveTableCols(entity.name)\n if (!resolved) return undefined\n const { cols } = resolved\n\n if (config.fts) {\n const tsvCol = cols._search_tsv\n if (tsvCol) {\n const language = config.fts.language ?? 'simple'\n return sql`${tsvCol} @@ websearch_to_tsquery(${language}, ${trimmed})`\n }\n // Translatable-only FTS — fall through to ILIKE.\n }\n\n const pattern = `%${escapeLikePattern(trimmed)}%`\n const pieces: SQL[] = []\n for (const fieldName of config.fields) {\n const column = cols[fieldName]\n if (!column) continue\n pieces.push(ilike(column, pattern))\n }\n if (pieces.length === 0) return undefined\n const first = pieces[0]\n if (!first) return undefined\n if (pieces.length === 1) return first\n const tail = pieces.slice(1)\n return or(first, ...tail)\n}\n\nfunction buildOrderBy(\n entityName: string,\n sortParam: string | undefined,\n allFields: Record<string, FieldConfig>,\n): SQL | undefined {\n if (!sortParam) return undefined\n\n const descending = sortParam.startsWith('-')\n const fieldName = descending ? sortParam.slice(1) : sortParam\n\n const fieldConfig = allFields[fieldName]\n if (!fieldConfig || fieldConfig.type === 'blocks') return undefined\n\n const resolved = resolveTableCols(entityName)\n if (!resolved) return undefined\n const column = resolved.cols[fieldName]\n if (!column) return undefined\n\n return descending ? desc(column) : asc(column)\n}\n\nfunction buildFilterConditions(\n entityName: string,\n url: URL,\n allFields: Record<string, FieldConfig>,\n): SQL[] {\n const resolved = resolveTableCols(entityName)\n if (!resolved) return []\n const { cols } = resolved\n\n const conditions: SQL[] = []\n\n for (const [key, raw] of url.searchParams.entries()) {\n const match = key.match(/^filter\\[([a-zA-Z_]+)\\]$/)\n if (!match) continue\n\n const fieldName = match[1]\n if (fieldName === undefined) continue\n // Reject internal fields (`_scopeId`, `_versionId`, …) — match the\n // underscore-prefix rule used by `parseFieldSelection`.\n if (fieldName.startsWith('_')) continue\n // Reject prototype-chain keys (`constructor`, `toString`, …).\n if (!Object.hasOwn(allFields, fieldName)) continue\n\n const fieldConfig = allFields[fieldName]\n if (!fieldConfig || fieldConfig.type === 'blocks') continue\n\n const column = cols[fieldName]\n if (!column) continue\n\n const validated = validateFilterValue(fieldConfig, raw)\n if (validated === null) continue\n\n // Date range filters: gte: / lte: prefix is preserved by validateFilterValue.\n if (fieldConfig.type === 'date' && typeof validated === 'string') {\n if (validated.startsWith('gte:')) {\n conditions.push(gte(column, validated.slice(4)))\n continue\n }\n if (validated.startsWith('lte:')) {\n conditions.push(lte(column, validated.slice(4)))\n continue\n }\n }\n conditions.push(eq(column, validated))\n }\n\n return conditions\n}\n\n// ---------------------------------------------------------------------------\n// Handler factory\n// ---------------------------------------------------------------------------\n\nexport function createContentApiHandler(config: ContentApiConfig) {\n const {\n entities,\n defaultLocale,\n publicRole = 'public',\n cors: corsConfig,\n cache: cacheConfig,\n onError,\n } = config\n const maxLimit = Math.min(config.maxLimit ?? MAX_LIMIT, MAX_LIMIT)\n const entityMap = buildEntityMap(entities)\n\n // Shared count cache — reduces COUNT(*) queries on paginated list pages.\n const countCache = new CountCache(5000)\n\n // Lazy-loaded permission checker — cached with 30s TTL.\n // Hosts that mutate roles at runtime should call invalidatePermissionCache()\n // immediately after the change so the next request reloads.\n const PERMISSION_CACHE_TTL_MS = 30_000\n let permissionChecker: PermissionChecker | null = null\n let permissionCacheTime = 0\n\n async function getChecker(): Promise<PermissionChecker> {\n const now = Date.now()\n if (!permissionChecker || now - permissionCacheTime > PERMISSION_CACHE_TTL_MS) {\n permissionChecker = await config.loadPermissions()\n permissionCacheTime = now\n }\n return permissionChecker\n }\n\n function invalidatePermissionCache(): void {\n permissionChecker = null\n permissionCacheTime = 0\n }\n\n // -- Role resolution -------------------------------------------------------\n\n async function resolveRole(req: Request): Promise<string> {\n if (!config.authenticate) return publicRole\n try {\n const result = await config.authenticate(req)\n return result?.role ?? publicRole\n } catch {\n return publicRole\n }\n }\n\n // -- Permission check (returns 404 on deny to avoid info leakage) ----------\n\n function hasViewPermission(\n checker: PermissionChecker,\n role: string,\n entityName: string,\n ): boolean {\n return checker(role, entityName, 'view')\n }\n\n // -- Create QueryClient from entity ----------------------------------------\n\n function createClient(entity: Entity): QueryClient {\n const app = getApp()\n return new QueryClient({\n entity,\n db: app.db.readOnly,\n logger: app.logger.child({ entity: entity.name }),\n countCache,\n contextResolver: () => {\n const ctx = getContext()\n if (!ctx?.user || !ctx?.checker) return undefined\n return {\n user: ctx.user,\n checker: ctx.checker,\n ...(ctx.scope !== undefined && { scope: ctx.scope }),\n }\n },\n })\n }\n\n // -- Endpoint handlers -----------------------------------------------------\n\n async function handleList(\n req: Request,\n entity: Entity,\n role: string,\n corsHeaders: Record<string, string>,\n ): Promise<Response> {\n const url = new URL(req.url)\n const params = listParamsSchema.safeParse(Object.fromEntries(url.searchParams))\n if (!params.success) {\n return errorResponse('Invalid query parameters', 'VALIDATION_ERROR', 400, corsHeaders)\n }\n\n const {\n limit: rawLimit,\n offset,\n sort,\n locale,\n fields,\n search,\n cursor: cursorParam,\n } = params.data\n const limit = Math.min(rawLimit, maxLimit)\n const allFields = entity.allFields as Record<string, FieldConfig>\n\n // Cursor-based pagination (opt-in, replaces OFFSET when provided)\n let cursor: CursorInput | undefined\n if (cursorParam) {\n const decoded = decodeCursor(cursorParam)\n if (!decoded) {\n return errorResponse('Invalid cursor', 'VALIDATION_ERROR', 400, corsHeaders)\n }\n // Whitelist via `Object.hasOwn` so prototype-chain keys (`__proto__`,\n // `constructor`, …) cannot pass.\n if (!Object.hasOwn(allFields, decoded.field) && decoded.field !== 'id') {\n return errorResponse('Invalid cursor field', 'VALIDATION_ERROR', 400, corsHeaders)\n }\n cursor = decoded\n }\n\n const where: SQL[] = []\n if (search) {\n const searchCondition = buildSearchCondition(entity, search)\n if (searchCondition) where.push(searchCondition)\n }\n\n const filterConditions = buildFilterConditions(entity.name, url, allFields)\n where.push(...filterConditions)\n\n const orderBy = buildOrderBy(entity.name, sort, allFields)\n const select = parseFieldSelection(fields, allFields)\n\n const client = createClient(entity)\n const resolvedLocale = locale ?? defaultLocale\n const queryOpts = {\n where: where.length > 0 ? and(...where) : undefined,\n limit,\n offset,\n orderBy,\n select,\n locale: resolvedLocale,\n defaultLocale,\n cursor,\n }\n\n const [items, total] = await Promise.all([\n client.findMany(queryOpts),\n client.count({ where: where.length > 0 ? and(...where) : undefined }),\n ])\n\n // Build nextCursor from last item for keyset pagination\n let nextCursor: string | undefined\n if (items.length > 0 && items.length === limit) {\n const lastItem = items[items.length - 1] as Record<string, unknown>\n // Derive sort field and direction from cursor or sort param\n const cursorField =\n cursor?.field ?? (sort ? (sort.startsWith('-') ? sort.slice(1) : sort) : undefined)\n const cursorDirection: 'asc' | 'desc' =\n cursor?.direction ?? (sort?.startsWith('-') ? 'desc' : 'asc')\n if (cursorField && lastItem[cursorField] !== undefined) {\n nextCursor = encodeCursor(lastItem, cursorField, cursorDirection)\n }\n }\n\n return jsonResponse(\n {\n data: items,\n meta: { total, limit, offset, hasMore: offset + limit < total, nextCursor },\n },\n 200,\n buildResponseHeaders(entity.name, corsHeaders, role, publicRole, cacheConfig),\n )\n }\n\n async function handleCount(\n req: Request,\n entity: Entity,\n role: string,\n corsHeaders: Record<string, string>,\n ): Promise<Response> {\n const url = new URL(req.url)\n const params = countParamsSchema.safeParse(Object.fromEntries(url.searchParams))\n if (!params.success) {\n return errorResponse('Invalid query parameters', 'VALIDATION_ERROR', 400, corsHeaders)\n }\n\n // ?countMode=estimate is only safe for entities that don't apply\n // publish/scope filters at query time — otherwise the pg_class row count\n // leaks unpublished or out-of-scope rows. For publishable entities we\n // always run the filtered count instead.\n //\n // We fall through to the filtered count even when the public client asked\n // for an estimate; the response shape stays compatible (`{count}`).\n const client = createClient(entity)\n const count = await client.count()\n\n return jsonResponse(\n { data: { count } },\n 200,\n buildResponseHeaders(entity.name, corsHeaders, role, publicRole, cacheConfig),\n )\n }\n\n async function handleById(\n req: Request,\n entity: Entity,\n id: string,\n role: string,\n corsHeaders: Record<string, string>,\n ): Promise<Response> {\n // Entity primary keys are UUID-typed throughout the toolkit. Reject\n // non-UUID inputs as 404 rather than letting Postgres throw a cast error\n // that would surface as a 500 (and side-channel \"valid format but missing\"\n // vs \"bogus format\").\n if (!isUuid(id)) return notFoundResponse(corsHeaders)\n\n const url = new URL(req.url)\n const params = singleParamsSchema.safeParse(Object.fromEntries(url.searchParams))\n if (!params.success) {\n return errorResponse('Invalid query parameters', 'VALIDATION_ERROR', 400, corsHeaders)\n }\n\n const { locale, fields } = params.data\n const allFields = entity.allFields as Record<string, FieldConfig>\n const select = parseFieldSelection(fields, allFields)\n const resolvedLocale = locale ?? defaultLocale\n\n const client = createClient(entity)\n const item = await client.findById(id, {\n ...(select !== undefined && { select }),\n ...(resolvedLocale !== undefined && { locale: resolvedLocale }),\n defaultLocale,\n })\n if (!item) return notFoundResponse(corsHeaders)\n\n return jsonResponse(\n { data: item },\n 200,\n buildResponseHeaders(entity.name, corsHeaders, role, publicRole, cacheConfig),\n )\n }\n\n async function handleBySlug(\n req: Request,\n entity: Entity,\n slug: string,\n role: string,\n corsHeaders: Record<string, string>,\n ): Promise<Response> {\n const url = new URL(req.url)\n const params = singleParamsSchema.safeParse(Object.fromEntries(url.searchParams))\n if (!params.success) {\n return errorResponse('Invalid query parameters', 'VALIDATION_ERROR', 400, corsHeaders)\n }\n\n // Check entity has a slug field\n const allFields = entity.allFields as Record<string, FieldConfig>\n if (!allFields.slug) return notFoundResponse(corsHeaders)\n\n const { locale, fields } = params.data\n const select = parseFieldSelection(fields, allFields)\n const resolvedLocale = locale ?? defaultLocale\n\n const resolved = resolveTableCols(entity.name)\n if (!resolved) return notFoundResponse(corsHeaders)\n const tableSlug = resolved.cols.slug\n const tableId = resolved.cols.id\n if (!tableSlug || !tableId) return notFoundResponse(corsHeaders)\n\n const client = createClient(entity)\n const slugConfig = allFields.slug as SlugField\n\n // For translatable slugs, also search the translation table.\n // A non-default locale's slug may live in {entity}_translations, not the main table.\n let whereClause: SQL = eq(tableSlug, slug)\n\n if (slugConfig.translatable && resolvedLocale) {\n const translationTableName = `${entity.name}_translations`\n const translationResolved = resolveTableCols(translationTableName)\n if (translationResolved) {\n const translationSlug = translationResolved.cols.slug\n const translationLocale = translationResolved.cols.locale\n const translationEntityId = translationResolved.cols.entityId\n if (translationSlug && translationLocale && translationEntityId) {\n // Find entity IDs whose translated slug matches (for the requested locale).\n // QueryClient applies publish + scope filters on the follow-up findMany,\n // so unpublished/out-of-scope translated slugs cannot leak through here.\n const app = getApp()\n const translationMatches = await app.db.readOnly\n .select({ entityId: translationEntityId })\n .from(translationResolved.table)\n .where(and(eq(translationSlug, slug), eq(translationLocale, resolvedLocale)))\n\n if (translationMatches.length > 0) {\n const translatedIds = translationMatches.map((r) => r.entityId as string)\n // Match by translated slug OR by main table slug (fallback).\n // `or(...)` returns SQL when given two non-undefined inputs; the\n // `?? eq(...)` keeps the type system honest without a non-null\n // assertion.\n whereClause =\n or(inArray(tableId, translatedIds), eq(tableSlug, slug)) ?? eq(tableSlug, slug)\n }\n }\n }\n }\n\n const results = await client.findMany({\n where: whereClause,\n limit: 1,\n select,\n locale: resolvedLocale,\n defaultLocale,\n })\n\n if (results.length === 0) return notFoundResponse(corsHeaders)\n\n return jsonResponse(\n { data: results[0] },\n 200,\n buildResponseHeaders(entity.name, corsHeaders, role, publicRole, cacheConfig),\n )\n }\n\n // -- Central dispatch -------------------------------------------------------\n\n async function handleGet(req: Request, ctx: RouteContext): Promise<Response> {\n const corsHeaders = buildCorsHeaders(req, corsConfig)\n\n try {\n const segments = await ctx.params.then((p) => p.path)\n if (!segments || segments.length === 0) {\n return notFoundResponse(corsHeaders)\n }\n\n // Resolve role + load permissions + establish request context\n const role = await resolveRole(req)\n const checker = await getChecker()\n\n const requestContext: RequestContext = {\n user: { id: 'public', groups: role ? [role] : [] },\n checker,\n }\n\n return await runWithContextAsync(requestContext, async () => {\n // /_schema — entity introspection (filtered by role)\n if (segments[0] === '_schema') {\n const schema = buildSchemaResponse(entities, (name) =>\n hasViewPermission(checker, role, name),\n )\n return jsonResponse(schema, 200, {\n ...corsHeaders,\n 'Cache-Control': 'no-store',\n })\n }\n\n // Resolve entity from whitelist\n const entityName = segments[0]\n if (entityName === undefined) return notFoundResponse(corsHeaders)\n const entity =\n entityMap.get(entityName) ??\n entityMap.get(entityName.endsWith('s') ? entityName.slice(0, -1) : entityName)\n\n // Entity not in whitelist OR role lacks view permission → 404\n if (!entity || !hasViewPermission(checker, role, entity.name)) {\n return notFoundResponse(corsHeaders)\n }\n\n // Route to handler\n if (segments.length === 1) {\n return handleList(req, entity, role, corsHeaders)\n }\n if (segments[1] === 'count') {\n return handleCount(req, entity, role, corsHeaders)\n }\n if (segments[1] === 'slug' && segments[2]) {\n return handleBySlug(req, entity, segments[2], role, corsHeaders)\n }\n if (segments.length === 2 && segments[1] !== undefined) {\n return handleById(req, entity, segments[1], role, corsHeaders)\n }\n\n return notFoundResponse(corsHeaders)\n })\n } catch (err) {\n const message = err instanceof Error ? err.message : 'Internal server error'\n const path = new URL(req.url).pathname\n // Route through the toolkit logger so errors land alongside the rest of\n // the structured stream rather than raw stdout.\n try {\n getApp().logger.error({ err, path }, 'content-api handler error')\n } catch {\n // App not yet bootstrapped (early failure path) — last-resort log.\n console.error('[content-api] handler error:', err)\n }\n onError?.({\n status: 500,\n message,\n path,\n })\n return errorResponse('Internal server error', 'INTERNAL_ERROR', 500, corsHeaders)\n }\n }\n\n return {\n GET: (req: Request, ctx: RouteContext) => handleGet(req, ctx),\n OPTIONS: (req: Request) => corsPreflightResponse(req, corsConfig),\n /**\n * Invalidate the cached permission checker. Call this from the\n * role-management code path (after a role is created/edited/deleted)\n * so the next request re-runs `loadPermissions()` instead of waiting\n * up to 30 seconds for the TTL to expire.\n */\n invalidatePermissionCache,\n }\n}\n"],"mappings":"2fAgBA,SAAgB,EACd,EACA,EACwB,CACxB,IAAM,EAAe,GAAQ,WAAW,GASxC,OAPI,GAAc,YAAc,GACvB,CAAE,gBAAiB,WAAY,CAMjC,CACL,gBAAiB,mBAJJ,GAAc,QAAU,GAAQ,eAAiB,GAInB,2BAHjC,GAAc,sBAAwB,GAAQ,6BAA+B,MAIxF,CAaH,SAAgB,EACd,EACA,EACA,EACA,EACA,EACwB,CACxB,GAAI,IAAS,EAAY,CACvB,IAAM,EAAe,EAAY,KAC3B,EAAW,wBACjB,MAAO,CACL,GAAG,EACH,gBAAiB,WACjB,KAAM,EAAe,GAAG,EAAa,IAAI,IAAa,EACvD,CAEH,MAAO,CACL,GAAG,EACH,GAAG,EAAkB,EAAY,EAAY,CAC9C,CCtDH,SAAgB,EACd,EACA,EACwB,CACxB,GAAI,CAAC,EAAQ,MAAO,EAAE,CAEtB,IAAM,EAAS,EAAI,QAAQ,IAAI,SAAS,CAMxC,MALI,CAAC,GAGD,CAAC,EAAO,eAAe,SAAS,EAAO,CAAS,EAAE,CAE/C,CACL,8BAA+B,EAC/B,+BAAgC,eAChC,+BAAgC,sCAChC,yBAA0B,OAAO,EAAO,QAAU,KAAK,CACvD,KAAM,SACP,CAGH,SAAgB,EAAsB,EAAc,EAA0C,CAC5F,IAAM,EAAU,EAAiB,EAAK,EAAO,CAC7C,OAAO,IAAI,SAAS,KAAM,CAAE,OAAQ,IAAK,UAAS,CAAC,CCjBrD,MAAa,EAAmB,EAAE,OAAO,CACvC,MAAO,EAAE,OAAO,QAAQ,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,IAAA,IAAc,CAAC,QAAQ,GAAG,CAChE,OAAQ,EAAE,OAAO,QAAQ,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE,CACjD,KAAM,EACH,QAAQ,CACR,MAAM,iBAAiB,CACvB,UAAU,CACb,OAAQ,EAAE,QAAQ,CAAC,MAAM,EAAe,CAAC,UAAU,CACnD,OAAQ,EAAE,QAAQ,CAAC,UAAU,CAC7B,OAAQ,EAAE,QAAQ,CAAC,IAAI,IAAI,CAAC,UAAU,CAEtC,OAAQ,EAAE,QAAQ,CAAC,IAAI,IAAI,CAAC,UAAU,CACvC,CAAC,CAGW,EAAqB,EAAE,OAAO,CACzC,OAAQ,EAAE,QAAQ,CAAC,MAAM,EAAe,CAAC,UAAU,CACnD,OAAQ,EAAE,QAAQ,CAAC,UAAU,CAC9B,CAAC,CAGW,EAAoB,EAAE,OAAO,CACxC,OAAQ,EAAE,QAAQ,CAAC,MAAM,EAAe,CAAC,UAAU,CACpD,CAAC,CAKI,EAAU,kEASV,EACJ,0FAQF,SAAgB,EAAe,EAAsB,CACnD,GAAI,CAAC,EAAY,KAAK,EAAI,CAAE,MAAO,GACnC,IAAM,EAAK,KAAK,MAAM,EAAI,CAM1B,OALI,OAAO,MAAM,EAAG,CAAS,GAEzB,EAAI,SAAW,GACV,IAAI,KAAK,EAAG,CAAC,aAAa,CAAC,MAAM,EAAG,GAAG,GAAK,EAE9C,GAIT,SAAS,EAAiB,EAAoB,CAC5C,GAAI,EAAE,MAAM,GAAK,GAAI,MAAO,GAC5B,IAAM,EAAI,OAAO,EAAE,CACnB,OAAO,OAAO,SAAS,EAAE,CAI3B,SAAgB,EAAO,EAAqB,CAC1C,OAAO,EAAQ,KAAK,EAAG,CAWzB,SAAgB,EAAoB,EAA0B,EAAsB,CAClF,OAAQ,EAAY,KAApB,CACE,IAAK,UAGH,OAFI,IAAQ,OAAe,GACvB,IAAQ,QAAgB,GACrB,KAET,IAAK,YACL,IAAK,QACH,OAAO,EAAQ,KAAK,EAAI,CAAG,EAAM,KAEnC,IAAK,SACH,OAAO,EAAY,QAAQ,SAAS,EAAI,CAAG,EAAM,KAEnD,IAAK,OAEH,OAAO,EADM,EAAI,WAAW,OAAO,EAAI,EAAI,WAAW,OAAO,CAAG,EAAI,MAAM,EAAE,CAAG,EACpD,CAAG,EAAM,KAGtC,IAAK,SACH,OAAO,EAAiB,EAAI,CAAG,OAAO,EAAI,CAAG,KAE/C,IAAK,OACH,OAAO,EAAI,QAAA,IAAmC,EAAM,KAEtD,QACE,OAAO,MAQb,SAAgB,EACd,EACA,EACsB,CACtB,GAAI,CAAC,EAAa,OAGlB,IAAM,EADY,EAAY,MAAM,IAAI,CAAC,IAAK,GAAM,EAAE,MAAM,CACrC,CAAC,OAAQ,GAAS,CACvC,IAAM,EAAS,EAAU,GACzB,OAAO,IAAW,IAAA,IAAa,CAAC,EAAK,WAAW,IAAI,EAAI,EAAO,OAAS,UACxE,CAOF,OAJI,EAAM,OAAS,GAAK,CAAC,EAAM,SAAS,KAAK,EAC3C,EAAM,QAAQ,KAAK,CAGd,EAAM,OAAS,EAAI,EAAQ,IAAA,GC3IpC,SAAgB,EACd,EACA,EAAS,IACT,EACU,CACV,OAAO,IAAI,SAAS,KAAK,UAAU,EAAK,CAAE,CACxC,SACA,QAAS,CACP,eAAgB,mBAChB,GAAG,EACJ,CACF,CAAC,CAGJ,SAAgB,EACd,EACA,EACA,EACA,EACU,CACV,OAAO,EAAa,CAAE,MAAO,CAAE,SAAQ,UAAS,OAAM,CAAE,CAAE,EAAQ,EAAa,CAGjF,SAAgB,EAAiB,EAAiD,CAChF,OAAO,EAAc,YAAa,YAAa,IAAK,EAAa,CCZnE,SAAS,EAAc,EAAkC,CACvD,IAAM,EAAqB,CAAE,KAAM,EAAO,KAAM,CAchD,OAZI,EAAO,WACT,EAAM,SAAW,IAGf,EAAO,OAAS,WAClB,EAAM,QAAU,EAAO,SAGrB,EAAO,OAAS,cAClB,EAAM,YAAc,EAAO,aAGtB,EAIT,SAAgB,EAAe,EAA8B,CAC3D,IAAM,EAAY,EAAO,UACnB,EAAsC,EAAE,CAE9C,IAAK,GAAM,CAAC,EAAM,KAAW,OAAO,QAAQ,EAAU,CAEhD,EAAK,WAAW,IAAI,GACxB,EAAO,GAAQ,EAAc,EAAO,EAGtC,MAAO,CACL,KAAM,EAAO,KACb,WAAY,GAAG,EAAO,KAAK,GAC3B,SACD,CAOH,SAAgB,EACd,EACA,EACgB,CAEhB,MAAO,CACL,SAFc,EAAS,OAAQ,GAAM,EAAgB,EAAE,KAAK,CAE3C,CAAC,IAAI,EAAe,CACtC,CCOH,SAAS,EAAe,EAAyC,CAC/D,IAAM,EAAM,IAAI,IAChB,IAAK,IAAM,KAAU,EACnB,EAAI,IAAI,EAAO,KAAM,EAAO,CAC5B,EAAI,IAAI,GAAG,EAAO,KAAK,GAAI,EAAO,CAEpC,OAAO,EAYT,SAAS,EACP,EACgE,CAChE,IAAM,EAAQ,EAAe,IAAI,EAAK,CACjC,KACL,MAAO,CAAE,QAAO,KAAM,EAAgB,EAAM,CAA8B,CA4B5E,SAAS,EAAqB,EAAgB,EAAiC,CAC7E,IAAM,EAAS,EAAoB,EAAO,CAC1C,GAAI,CAAC,EAAQ,OACb,IAAM,EAAU,EAAO,MAAM,CAC7B,GAAI,EAAQ,SAAW,EAAG,OAE1B,IAAM,EAAW,EAAiB,EAAO,KAAK,CAC9C,GAAI,CAAC,EAAU,OACf,GAAM,CAAE,QAAS,EAEjB,GAAI,EAAO,IAAK,CACd,IAAM,EAAS,EAAK,YACpB,GAAI,EAEF,MAAO,EAAG,GAAG,EAAO,2BADH,EAAO,IAAI,UAAY,SACgB,IAAI,EAAQ,GAKxE,IAAM,EAAU,IAAI,EAAkB,EAAQ,CAAC,GACzC,EAAgB,EAAE,CACxB,IAAK,IAAM,KAAa,EAAO,OAAQ,CACrC,IAAM,EAAS,EAAK,GACf,GACL,EAAO,KAAK,EAAM,EAAQ,EAAQ,CAAC,CAErC,GAAI,EAAO,SAAW,EAAG,OACzB,IAAM,EAAQ,EAAO,GAChB,KAGL,OAFI,EAAO,SAAW,EAAU,EAEzB,EAAG,EAAO,GADJ,EAAO,MAAM,EACF,CAAC,CAG3B,SAAS,EACP,EACA,EACA,EACiB,CACjB,GAAI,CAAC,EAAW,OAEhB,IAAM,EAAa,EAAU,WAAW,IAAI,CACtC,EAAY,EAAa,EAAU,MAAM,EAAE,CAAG,EAE9C,EAAc,EAAU,GAC9B,GAAI,CAAC,GAAe,EAAY,OAAS,SAAU,OAEnD,IAAM,EAAW,EAAiB,EAAW,CAC7C,GAAI,CAAC,EAAU,OACf,IAAM,EAAS,EAAS,KAAK,GACxB,KAEL,OAAO,EAAa,EAAK,EAAO,CAAG,EAAI,EAAO,CAGhD,SAAS,EACP,EACA,EACA,EACO,CACP,IAAM,EAAW,EAAiB,EAAW,CAC7C,GAAI,CAAC,EAAU,MAAO,EAAE,CACxB,GAAM,CAAE,QAAS,EAEX,EAAoB,EAAE,CAE5B,IAAK,GAAM,CAAC,EAAK,KAAQ,EAAI,aAAa,SAAS,CAAE,CACnD,IAAM,EAAQ,EAAI,MAAM,2BAA2B,CACnD,GAAI,CAAC,EAAO,SAEZ,IAAM,EAAY,EAAM,GAMxB,GALI,IAAc,IAAA,IAGd,EAAU,WAAW,IAAI,EAEzB,CAAC,OAAO,OAAO,EAAW,EAAU,CAAE,SAE1C,IAAM,EAAc,EAAU,GAC9B,GAAI,CAAC,GAAe,EAAY,OAAS,SAAU,SAEnD,IAAM,EAAS,EAAK,GACpB,GAAI,CAAC,EAAQ,SAEb,IAAM,EAAY,EAAoB,EAAa,EAAI,CACnD,OAAc,KAGlB,IAAI,EAAY,OAAS,QAAU,OAAO,GAAc,SAAU,CAChE,GAAI,EAAU,WAAW,OAAO,CAAE,CAChC,EAAW,KAAK,EAAI,EAAQ,EAAU,MAAM,EAAE,CAAC,CAAC,CAChD,SAEF,GAAI,EAAU,WAAW,OAAO,CAAE,CAChC,EAAW,KAAK,EAAI,EAAQ,EAAU,MAAM,EAAE,CAAC,CAAC,CAChD,UAGJ,EAAW,KAAK,EAAG,EAAQ,EAAU,CAAC,EAGxC,OAAO,EAOT,SAAgB,EAAwB,EAA0B,CAChE,GAAM,CACJ,WACA,gBACA,aAAa,SACb,KAAM,EACN,MAAO,EACP,WACE,EACE,EAAW,KAAK,IAAI,EAAO,UAAA,IAAA,IAAiC,CAC5D,EAAY,EAAe,EAAS,CAGpC,EAAa,IAAI,EAAW,IAAK,CAMnC,EAA8C,KAC9C,EAAsB,EAE1B,eAAe,GAAyC,CACtD,IAAM,EAAM,KAAK,KAAK,CAKtB,OAJI,CAAC,GAAqB,EAAM,EAAsB,OACpD,EAAoB,MAAM,EAAO,iBAAiB,CAClD,EAAsB,GAEjB,EAGT,SAAS,GAAkC,CACzC,EAAoB,KACpB,EAAsB,EAKxB,eAAe,EAAY,EAA+B,CACxD,GAAI,CAAC,EAAO,aAAc,OAAO,EACjC,GAAI,CAEF,OAAO,MADc,EAAO,aAAa,EAAI,GAC9B,MAAQ,OACjB,CACN,OAAO,GAMX,SAAS,EACP,EACA,EACA,EACS,CACT,OAAO,EAAQ,EAAM,EAAY,OAAO,CAK1C,SAAS,EAAa,EAA6B,CACjD,IAAM,EAAM,GAAQ,CACpB,OAAO,IAAI,EAAY,CACrB,SACA,GAAI,EAAI,GAAG,SACX,OAAQ,EAAI,OAAO,MAAM,CAAE,OAAQ,EAAO,KAAM,CAAC,CACjD,aACA,oBAAuB,CACrB,IAAM,EAAM,GAAY,CACpB,MAAC,GAAK,MAAQ,CAAC,GAAK,SACxB,MAAO,CACL,KAAM,EAAI,KACV,QAAS,EAAI,QACb,GAAI,EAAI,QAAU,IAAA,IAAa,CAAE,MAAO,EAAI,MAAO,CACpD,EAEJ,CAAC,CAKJ,eAAe,EACb,EACA,EACA,EACA,EACmB,CACnB,IAAM,EAAM,IAAI,IAAI,EAAI,IAAI,CACtB,EAAS,EAAiB,UAAU,OAAO,YAAY,EAAI,aAAa,CAAC,CAC/E,GAAI,CAAC,EAAO,QACV,OAAO,EAAc,2BAA4B,mBAAoB,IAAK,EAAY,CAGxF,GAAM,CACJ,MAAO,EACP,SACA,OACA,SACA,SACA,SACA,OAAQ,GACN,EAAO,KACL,EAAQ,KAAK,IAAI,EAAU,EAAS,CACpC,EAAY,EAAO,UAGrB,EACJ,GAAI,EAAa,CACf,IAAM,EAAU,EAAa,EAAY,CACzC,GAAI,CAAC,EACH,OAAO,EAAc,iBAAkB,mBAAoB,IAAK,EAAY,CAI9E,GAAI,CAAC,OAAO,OAAO,EAAW,EAAQ,MAAM,EAAI,EAAQ,QAAU,KAChE,OAAO,EAAc,uBAAwB,mBAAoB,IAAK,EAAY,CAEpF,EAAS,EAGX,IAAM,EAAe,EAAE,CACvB,GAAI,EAAQ,CACV,IAAM,EAAkB,EAAqB,EAAQ,EAAO,CACxD,GAAiB,EAAM,KAAK,EAAgB,CAGlD,IAAM,EAAmB,EAAsB,EAAO,KAAM,EAAK,EAAU,CAC3E,EAAM,KAAK,GAAG,EAAiB,CAE/B,IAAM,EAAU,EAAa,EAAO,KAAM,EAAM,EAAU,CACpD,EAAS,EAAoB,EAAQ,EAAU,CAE/C,EAAS,EAAa,EAAO,CAC7B,EAAiB,GAAU,EAC3B,EAAY,CAChB,MAAO,EAAM,OAAS,EAAI,EAAI,GAAG,EAAM,CAAG,IAAA,GAC1C,QACA,SACA,UACA,SACA,OAAQ,EACR,gBACA,SACD,CAEK,CAAC,EAAO,GAAS,MAAM,QAAQ,IAAI,CACvC,EAAO,SAAS,EAAU,CAC1B,EAAO,MAAM,CAAE,MAAO,EAAM,OAAS,EAAI,EAAI,GAAG,EAAM,CAAG,IAAA,GAAW,CAAC,CACtE,CAAC,CAGE,EACJ,GAAI,EAAM,OAAS,GAAK,EAAM,SAAW,EAAO,CAC9C,IAAM,EAAW,EAAM,EAAM,OAAS,GAEhC,EACJ,GAAQ,QAAU,EAAQ,EAAK,WAAW,IAAI,CAAG,EAAK,MAAM,EAAE,CAAG,EAAQ,IAAA,IACrE,EACJ,GAAQ,YAAc,GAAM,WAAW,IAAI,CAAG,OAAS,OACrD,GAAe,EAAS,KAAiB,IAAA,KAC3C,EAAa,EAAa,EAAU,EAAa,EAAgB,EAIrE,OAAO,EACL,CACE,KAAM,EACN,KAAM,CAAE,QAAO,QAAO,SAAQ,QAAS,EAAS,EAAQ,EAAO,aAAY,CAC5E,CACD,IACA,EAAqB,EAAO,KAAM,EAAa,EAAM,EAAY,EAAY,CAC9E,CAGH,eAAe,EACb,EACA,EACA,EACA,EACmB,CACnB,IAAM,EAAM,IAAI,IAAI,EAAI,IAAI,CAgB5B,OAfe,EAAkB,UAAU,OAAO,YAAY,EAAI,aAAa,CACpE,CAAC,QAcL,EACL,CAAE,KAAM,CAAE,MAAA,MAJG,EAAa,EACF,CAAC,OAAO,CAGf,CAAE,CACnB,IACA,EAAqB,EAAO,KAAM,EAAa,EAAM,EAAY,EAAY,CAC9E,CAjBQ,EAAc,2BAA4B,mBAAoB,IAAK,EAAY,CAoB1F,eAAe,EACb,EACA,EACA,EACA,EACA,EACmB,CAKnB,GAAI,CAAC,EAAO,EAAG,CAAE,OAAO,EAAiB,EAAY,CAErD,IAAM,EAAM,IAAI,IAAI,EAAI,IAAI,CACtB,EAAS,EAAmB,UAAU,OAAO,YAAY,EAAI,aAAa,CAAC,CACjF,GAAI,CAAC,EAAO,QACV,OAAO,EAAc,2BAA4B,mBAAoB,IAAK,EAAY,CAGxF,GAAM,CAAE,SAAQ,UAAW,EAAO,KAC5B,EAAY,EAAO,UACnB,EAAS,EAAoB,EAAQ,EAAU,CAC/C,EAAiB,GAAU,EAG3B,EAAO,MADE,EAAa,EACH,CAAC,SAAS,EAAI,CACrC,GAAI,IAAW,IAAA,IAAa,CAAE,SAAQ,CACtC,GAAI,IAAmB,IAAA,IAAa,CAAE,OAAQ,EAAgB,CAC9D,gBACD,CAAC,CAGF,OAFK,EAEE,EACL,CAAE,KAAM,EAAM,CACd,IACA,EAAqB,EAAO,KAAM,EAAa,EAAM,EAAY,EAAY,CAC9E,CANiB,EAAiB,EAAY,CASjD,eAAe,EACb,EACA,EACA,EACA,EACA,EACmB,CACnB,IAAM,EAAM,IAAI,IAAI,EAAI,IAAI,CACtB,EAAS,EAAmB,UAAU,OAAO,YAAY,EAAI,aAAa,CAAC,CACjF,GAAI,CAAC,EAAO,QACV,OAAO,EAAc,2BAA4B,mBAAoB,IAAK,EAAY,CAIxF,IAAM,EAAY,EAAO,UACzB,GAAI,CAAC,EAAU,KAAM,OAAO,EAAiB,EAAY,CAEzD,GAAM,CAAE,SAAQ,UAAW,EAAO,KAC5B,EAAS,EAAoB,EAAQ,EAAU,CAC/C,EAAiB,GAAU,EAE3B,EAAW,EAAiB,EAAO,KAAK,CAC9C,GAAI,CAAC,EAAU,OAAO,EAAiB,EAAY,CACnD,IAAM,EAAY,EAAS,KAAK,KAC1B,EAAU,EAAS,KAAK,GAC9B,GAAI,CAAC,GAAa,CAAC,EAAS,OAAO,EAAiB,EAAY,CAEhE,IAAM,EAAS,EAAa,EAAO,CAC7B,EAAa,EAAU,KAIzB,EAAmB,EAAG,EAAW,EAAK,CAE1C,GAAI,EAAW,cAAgB,EAAgB,CAE7C,IAAM,EAAsB,EAAiB,GADb,EAAO,KAAK,eACsB,CAClE,GAAI,EAAqB,CACvB,IAAM,EAAkB,EAAoB,KAAK,KAC3C,EAAoB,EAAoB,KAAK,OAC7C,EAAsB,EAAoB,KAAK,SACrD,GAAI,GAAmB,GAAqB,EAAqB,CAK/D,IAAM,EAAqB,MADf,GACwB,CAAC,GAAG,SACrC,OAAO,CAAE,SAAU,EAAqB,CAAC,CACzC,KAAK,EAAoB,MAAM,CAC/B,MAAM,EAAI,EAAG,EAAiB,EAAK,CAAE,EAAG,EAAmB,EAAe,CAAC,CAAC,CAE3E,EAAmB,OAAS,IAM9B,EACE,EAAG,EAAQ,EANS,EAAmB,IAAK,GAAM,EAAE,SAMnB,CAAC,CAAE,EAAG,EAAW,EAAK,CAAC,EAAI,EAAG,EAAW,EAAK,IAMzF,IAAM,EAAU,MAAM,EAAO,SAAS,CACpC,MAAO,EACP,MAAO,EACP,SACA,OAAQ,EACR,gBACD,CAAC,CAIF,OAFI,EAAQ,SAAW,EAAU,EAAiB,EAAY,CAEvD,EACL,CAAE,KAAM,EAAQ,GAAI,CACpB,IACA,EAAqB,EAAO,KAAM,EAAa,EAAM,EAAY,EAAY,CAC9E,CAKH,eAAe,EAAU,EAAc,EAAsC,CAC3E,IAAM,EAAc,EAAiB,EAAK,EAAW,CAErD,GAAI,CACF,IAAM,EAAW,MAAM,EAAI,OAAO,KAAM,GAAM,EAAE,KAAK,CACrD,GAAI,CAAC,GAAY,EAAS,SAAW,EACnC,OAAO,EAAiB,EAAY,CAItC,IAAM,EAAO,MAAM,EAAY,EAAI,CAC7B,EAAU,MAAM,GAAY,CAOlC,OAAO,MAAM,EAAoB,CAJ/B,KAAM,CAAE,GAAI,SAAU,OAAQ,EAAO,CAAC,EAAK,CAAG,EAAE,CAAE,CAClD,UAG6C,CAAE,SAAY,CAE3D,GAAI,EAAS,KAAO,UAIlB,OAAO,EAHQ,EAAoB,EAAW,GAC5C,EAAkB,EAAS,EAAM,EAAK,CAEd,CAAE,IAAK,CAC/B,GAAG,EACH,gBAAiB,WAClB,CAAC,CAIJ,IAAM,EAAa,EAAS,GAC5B,GAAI,IAAe,IAAA,GAAW,OAAO,EAAiB,EAAY,CAClE,IAAM,EACJ,EAAU,IAAI,EAAW,EACzB,EAAU,IAAI,EAAW,SAAS,IAAI,CAAG,EAAW,MAAM,EAAG,GAAG,CAAG,EAAW,CAqBhF,MAlBI,CAAC,GAAU,CAAC,EAAkB,EAAS,EAAM,EAAO,KAAK,CACpD,EAAiB,EAAY,CAIlC,EAAS,SAAW,EACf,EAAW,EAAK,EAAQ,EAAM,EAAY,CAE/C,EAAS,KAAO,QACX,EAAY,EAAK,EAAQ,EAAM,EAAY,CAEhD,EAAS,KAAO,QAAU,EAAS,GAC9B,EAAa,EAAK,EAAQ,EAAS,GAAI,EAAM,EAAY,CAE9D,EAAS,SAAW,GAAK,EAAS,KAAO,IAAA,GACpC,EAAW,EAAK,EAAQ,EAAS,GAAI,EAAM,EAAY,CAGzD,EAAiB,EAAY,EACpC,OACK,EAAK,CACZ,IAAM,EAAU,aAAe,MAAQ,EAAI,QAAU,wBAC/C,EAAO,IAAI,IAAI,EAAI,IAAI,CAAC,SAG9B,GAAI,CACF,GAAQ,CAAC,OAAO,MAAM,CAAE,MAAK,OAAM,CAAE,4BAA4B,MAC3D,CAEN,QAAQ,MAAM,+BAAgC,EAAI,CAOpD,OALA,IAAU,CACR,OAAQ,IACR,UACA,OACD,CAAC,CACK,EAAc,wBAAyB,iBAAkB,IAAK,EAAY,EAIrF,MAAO,CACL,KAAM,EAAc,IAAsB,EAAU,EAAK,EAAI,CAC7D,QAAU,GAAiB,EAAsB,EAAK,EAAW,CAOjE,4BACD"}
package/dist/query-params.d.mts ADDED
@@ -0,0 +1,78 @@
1
+ import { escapeLikePattern } from "@murumets-ee/core";
2
+ import { z } from "zod";
3
+ import { FieldConfig } from "@murumets-ee/entity";
4
+
5
+ //#region src/query-params.d.ts
6
+ declare const MAX_LIMIT = 100;
7
+ declare const MAX_FILTER_TEXT_LENGTH = 200;
8
+ /** List endpoint query params. */
9
+ declare const listParamsSchema: z.ZodObject<{
10
+ limit: z.ZodDefault<z.ZodNumber>;
11
+ offset: z.ZodDefault<z.ZodNumber>;
12
+ sort: z.ZodOptional<z.ZodString>;
13
+ locale: z.ZodOptional<z.ZodString>;
14
+ fields: z.ZodOptional<z.ZodString>;
15
+ search: z.ZodOptional<z.ZodString>; /** Opaque cursor for keyset pagination (base64-encoded JSON). */
16
+ cursor: z.ZodOptional<z.ZodString>;
17
+ }, "strip", z.ZodTypeAny, {
18
+ limit: number;
19
+ offset: number;
20
+ sort?: string | undefined;
21
+ locale?: string | undefined;
22
+ fields?: string | undefined;
23
+ search?: string | undefined;
24
+ cursor?: string | undefined;
25
+ }, {
26
+ limit?: number | undefined;
27
+ offset?: number | undefined;
28
+ sort?: string | undefined;
29
+ locale?: string | undefined;
30
+ fields?: string | undefined;
31
+ search?: string | undefined;
32
+ cursor?: string | undefined;
33
+ }>;
34
+ /** Single entity query params. */
35
+ declare const singleParamsSchema: z.ZodObject<{
36
+ locale: z.ZodOptional<z.ZodString>;
37
+ fields: z.ZodOptional<z.ZodString>;
38
+ }, "strip", z.ZodTypeAny, {
39
+ locale?: string | undefined;
40
+ fields?: string | undefined;
41
+ }, {
42
+ locale?: string | undefined;
43
+ fields?: string | undefined;
44
+ }>;
45
+ /** Count endpoint query params. */
46
+ declare const countParamsSchema: z.ZodObject<{
47
+ locale: z.ZodOptional<z.ZodString>;
48
+ }, "strip", z.ZodTypeAny, {
49
+ locale?: string | undefined;
50
+ }, {
51
+ locale?: string | undefined;
52
+ }>;
53
+ /**
54
+ * Validate ISO-8601 shape AND calendar validity.
55
+ * `Date.parse('2024-13-01')` returns NaN; `Date.parse('2024-02-30')` rolls over
56
+ * to 2024-03-01 in some hosts but produces a different YYYY-MM-DD prefix from
57
+ * the input — comparing the round-tripped date prefix catches both cases.
58
+ */
59
+ declare function isValidIsoDate(raw: string): boolean;
60
+ /** True if `id` matches the canonical UUID format used by entity primary keys. */
61
+ declare function isUuid(id: string): boolean;
62
+ /**
63
+ * Validate a filter value against the field type.
64
+ * Returns the validated value (possibly coerced) or null if invalid.
65
+ *
66
+ * For `date`, accepts a `gte:` / `lte:` prefix; the prefix itself is preserved
67
+ * so the caller can route to the right comparison operator. The bare value
68
+ * (with prefix stripped) must match ISO-8601.
69
+ */
70
+ declare function validateFilterValue(fieldConfig: FieldConfig, raw: string): unknown;
71
+ /**
72
+ * Parse field selection string into validated field names.
73
+ * Unknown/internal field names are silently dropped (no info leakage).
74
+ */
75
+ declare function parseFieldSelection(fieldsParam: string | undefined, allFields: Record<string, FieldConfig>): string[] | undefined;
76
+ //#endregion
77
+ export { MAX_FILTER_TEXT_LENGTH, MAX_LIMIT, countParamsSchema, escapeLikePattern, isUuid, isValidIsoDate, listParamsSchema, parseFieldSelection, singleParamsSchema, validateFilterValue };
78
+ //# sourceMappingURL=query-params.d.mts.map
package/dist/query-params.d.mts.map ADDED
@@ -0,0 +1 @@
1
+ {"version":3,"file":"query-params.d.mts","names":[],"sources":["../src/query-params.ts"],"mappings":";;;;;cAWa,SAAA;AAAA,cACA,sBAAA;;cAGA,gBAAA,EAAgB,CAAA,CAAA,SAAA;;;;;;;;;;;;;;;;;;;;;;;;;;cAehB,kBAAA,EAAkB,CAAA,CAAA,SAAA;;;;;;;;;;;cAMlB,iBAAA,EAAiB,CAAA,CAAA,SAAA;;;;;;;;;;;;;iBAyBd,cAAA,CAAe,GAAA;;iBAmBf,MAAA,CAAO,EAAA;;;;;;;;;iBAYP,mBAAA,CAAoB,WAAA,EAAa,WAAA,EAAa,GAAA;;;;;iBAkC9C,mBAAA,CACd,WAAA,sBACA,SAAA,EAAW,MAAA,SAAe,WAAA"}
package/dist/query-params.mjs ADDED
@@ -0,0 +1,2 @@
1
+ import{LOCALE_PATTERN as e,escapeLikePattern as t}from"@murumets-ee/core";import{z as n}from"zod";const r=100,i=200,a=n.object({limit:n.coerce.number().int().min(1).max(100).default(20),offset:n.coerce.number().int().min(0).default(0),sort:n.string().regex(/^-?[a-zA-Z_]+$/).optional(),locale:n.string().regex(e).optional(),fields:n.string().optional(),search:n.string().max(200).optional(),cursor:n.string().max(500).optional()}),o=n.object({locale:n.string().regex(e).optional(),fields:n.string().optional()}),s=n.object({locale:n.string().regex(e).optional()}),c=/^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i,l=/^\d{4}-\d{2}-\d{2}(?:[Tt ]\d{2}:\d{2}(?::\d{2}(?:\.\d+)?)?(?:[Zz]|[+-]\d{2}:?\d{2})?)?$/;function u(e){if(!l.test(e))return!1;let t=Date.parse(e);return Number.isNaN(t)?!1:e.length===10?new Date(t).toISOString().slice(0,10)===e:!0}function d(e){if(e.trim()===``)return!1;let t=Number(e);return Number.isFinite(t)}function f(e){return c.test(e)}function p(e,t){switch(e.type){case`boolean`:return t===`true`?!0:t===`false`?!1:null;case`reference`:case`media`:return c.test(t)?t:null;case`select`:return e.options.includes(t)?t:null;case`date`:return u(t.startsWith(`gte:`)||t.startsWith(`lte:`)?t.slice(4):t)?t:null;case`number`:return d(t)?Number(t):null;case`text`:return t.length<=200?t:null;default:return null}}function m(e,t){if(!e)return;let n=e.split(`,`).map(e=>e.trim()).filter(e=>{let n=t[e];return n!==void 0&&!e.startsWith(`_`)&&n.type!==`blocks`});return n.length>0&&!n.includes(`id`)&&n.unshift(`id`),n.length>0?n:void 0}export{i as MAX_FILTER_TEXT_LENGTH,r as MAX_LIMIT,s as countParamsSchema,t as escapeLikePattern,f as isUuid,u as isValidIsoDate,a as listParamsSchema,m as parseFieldSelection,o as singleParamsSchema,p as validateFilterValue};
2
+ //# sourceMappingURL=query-params.mjs.map
package/dist/query-params.mjs.map ADDED
@@ -0,0 +1 @@
1
+ {"version":3,"file":"query-params.mjs","names":[],"sources":["../src/query-params.ts"],"sourcesContent":["/**\n * Query parameter validation — Zod schemas for all content API endpoints.\n *\n * All user input is validated before it touches QueryClient.\n * Pagination hard-capped at MAX_LIMIT. Sort/filter restricted to queryable columns.\n */\n\nimport { escapeLikePattern, LOCALE_PATTERN } from '@murumets-ee/core'\nimport type { FieldConfig } from '@murumets-ee/entity'\nimport { z } from 'zod'\n\nexport const MAX_LIMIT = 100\nexport const MAX_FILTER_TEXT_LENGTH = 200\n\n/** List endpoint query params. */\nexport const listParamsSchema = z.object({\n limit: z.coerce.number().int().min(1).max(MAX_LIMIT).default(20),\n offset: z.coerce.number().int().min(0).default(0),\n sort: z\n .string()\n .regex(/^-?[a-zA-Z_]+$/)\n .optional(),\n locale: z.string().regex(LOCALE_PATTERN).optional(),\n fields: z.string().optional(),\n search: z.string().max(200).optional(),\n /** Opaque cursor for keyset pagination (base64-encoded JSON). */\n cursor: z.string().max(500).optional(),\n})\n\n/** Single entity query params. */\nexport const singleParamsSchema = z.object({\n locale: z.string().regex(LOCALE_PATTERN).optional(),\n fields: z.string().optional(),\n})\n\n/** Count endpoint query params. */\nexport const countParamsSchema = z.object({\n locale: z.string().regex(LOCALE_PATTERN).optional(),\n})\n\n// Re-export from core so existing imports from this module continue to work\nexport { escapeLikePattern }\n\nconst UUID_RE = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i\n\n/**\n * ISO-8601 calendar date or full timestamp.\n * Accepts: 2024-01-31, 2024-01-31T12:34:56Z, 2024-01-31T12:34:56.789+02:00.\n * Note: shape only — calendar validity (e.g. month 1–12, valid day-of-month)\n * is enforced separately by `isValidIsoDate` so impossible-date values cannot\n * reach Postgres and trigger a 500 cast error.\n */\nconst ISO_DATE_RE =\n /^\\d{4}-\\d{2}-\\d{2}(?:[Tt ]\\d{2}:\\d{2}(?::\\d{2}(?:\\.\\d+)?)?(?:[Zz]|[+-]\\d{2}:?\\d{2})?)?$/\n\n/**\n * Validate ISO-8601 shape AND calendar validity.\n * `Date.parse('2024-13-01')` returns NaN; `Date.parse('2024-02-30')` rolls over\n * to 2024-03-01 in some hosts but produces a different YYYY-MM-DD prefix from\n * the input — comparing the round-tripped date prefix catches both cases.\n */\nexport function isValidIsoDate(raw: string): boolean {\n if (!ISO_DATE_RE.test(raw)) return false\n const ms = Date.parse(raw)\n if (Number.isNaN(ms)) return false\n // For bare YYYY-MM-DD, confirm the parsed date round-trips to the same prefix.\n if (raw.length === 10) {\n return new Date(ms).toISOString().slice(0, 10) === raw\n }\n return true\n}\n\n/** True if `s` parses as a finite number with no trailing junk. */\nfunction isNumericLiteral(s: string): boolean {\n if (s.trim() === '') return false\n const n = Number(s)\n return Number.isFinite(n)\n}\n\n/** True if `id` matches the canonical UUID format used by entity primary keys. */\nexport function isUuid(id: string): boolean {\n return UUID_RE.test(id)\n}\n\n/**\n * Validate a filter value against the field type.\n * Returns the validated value (possibly coerced) or null if invalid.\n *\n * For `date`, accepts a `gte:` / `lte:` prefix; the prefix itself is preserved\n * so the caller can route to the right comparison operator. The bare value\n * (with prefix stripped) must match ISO-8601.\n */\nexport function validateFilterValue(fieldConfig: FieldConfig, raw: string): unknown {\n switch (fieldConfig.type) {\n case 'boolean':\n if (raw === 'true') return true\n if (raw === 'false') return false\n return null\n\n case 'reference':\n case 'media':\n return UUID_RE.test(raw) ? raw : null\n\n case 'select':\n return fieldConfig.options.includes(raw) ? raw : null\n\n case 'date': {\n const bare = raw.startsWith('gte:') || raw.startsWith('lte:') ? raw.slice(4) : raw\n return isValidIsoDate(bare) ? raw : null\n }\n\n case 'number':\n return isNumericLiteral(raw) ? Number(raw) : null\n\n case 'text':\n return raw.length <= MAX_FILTER_TEXT_LENGTH ? raw : null\n\n default:\n return null\n }\n}\n\n/**\n * Parse field selection string into validated field names.\n * Unknown/internal field names are silently dropped (no info leakage).\n */\nexport function parseFieldSelection(\n fieldsParam: string | undefined,\n allFields: Record<string, FieldConfig>,\n): string[] | undefined {\n if (!fieldsParam) return undefined\n\n const requested = fieldsParam.split(',').map((f) => f.trim())\n const valid = requested.filter((name) => {\n const config = allFields[name]\n return config !== undefined && !name.startsWith('_') && config.type !== 'blocks'\n })\n\n // Always include id\n if (valid.length > 0 && !valid.includes('id')) {\n valid.unshift('id')\n }\n\n return valid.length > 0 ? valid : undefined\n}\n"],"mappings":"kGAWA,MAAa,EAAY,IACZ,EAAyB,IAGzB,EAAmB,EAAE,OAAO,CACvC,MAAO,EAAE,OAAO,QAAQ,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,IAAA,IAAc,CAAC,QAAQ,GAAG,CAChE,OAAQ,EAAE,OAAO,QAAQ,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE,CACjD,KAAM,EACH,QAAQ,CACR,MAAM,iBAAiB,CACvB,UAAU,CACb,OAAQ,EAAE,QAAQ,CAAC,MAAM,EAAe,CAAC,UAAU,CACnD,OAAQ,EAAE,QAAQ,CAAC,UAAU,CAC7B,OAAQ,EAAE,QAAQ,CAAC,IAAI,IAAI,CAAC,UAAU,CAEtC,OAAQ,EAAE,QAAQ,CAAC,IAAI,IAAI,CAAC,UAAU,CACvC,CAAC,CAGW,EAAqB,EAAE,OAAO,CACzC,OAAQ,EAAE,QAAQ,CAAC,MAAM,EAAe,CAAC,UAAU,CACnD,OAAQ,EAAE,QAAQ,CAAC,UAAU,CAC9B,CAAC,CAGW,EAAoB,EAAE,OAAO,CACxC,OAAQ,EAAE,QAAQ,CAAC,MAAM,EAAe,CAAC,UAAU,CACpD,CAAC,CAKI,EAAU,kEASV,EACJ,0FAQF,SAAgB,EAAe,EAAsB,CACnD,GAAI,CAAC,EAAY,KAAK,EAAI,CAAE,MAAO,GACnC,IAAM,EAAK,KAAK,MAAM,EAAI,CAM1B,OALI,OAAO,MAAM,EAAG,CAAS,GAEzB,EAAI,SAAW,GACV,IAAI,KAAK,EAAG,CAAC,aAAa,CAAC,MAAM,EAAG,GAAG,GAAK,EAE9C,GAIT,SAAS,EAAiB,EAAoB,CAC5C,GAAI,EAAE,MAAM,GAAK,GAAI,MAAO,GAC5B,IAAM,EAAI,OAAO,EAAE,CACnB,OAAO,OAAO,SAAS,EAAE,CAI3B,SAAgB,EAAO,EAAqB,CAC1C,OAAO,EAAQ,KAAK,EAAG,CAWzB,SAAgB,EAAoB,EAA0B,EAAsB,CAClF,OAAQ,EAAY,KAApB,CACE,IAAK,UAGH,OAFI,IAAQ,OAAe,GACvB,IAAQ,QAAgB,GACrB,KAET,IAAK,YACL,IAAK,QACH,OAAO,EAAQ,KAAK,EAAI,CAAG,EAAM,KAEnC,IAAK,SACH,OAAO,EAAY,QAAQ,SAAS,EAAI,CAAG,EAAM,KAEnD,IAAK,OAEH,OAAO,EADM,EAAI,WAAW,OAAO,EAAI,EAAI,WAAW,OAAO,CAAG,EAAI,MAAM,EAAE,CAAG,EACpD,CAAG,EAAM,KAGtC,IAAK,SACH,OAAO,EAAiB,EAAI,CAAG,OAAO,EAAI,CAAG,KAE/C,IAAK,OACH,OAAO,EAAI,QAAA,IAAmC,EAAM,KAEtD,QACE,OAAO,MAQb,SAAgB,EACd,EACA,EACsB,CACtB,GAAI,CAAC,EAAa,OAGlB,IAAM,EADY,EAAY,MAAM,IAAI,CAAC,IAAK,GAAM,EAAE,MAAM,CACrC,CAAC,OAAQ,GAAS,CACvC,IAAM,EAAS,EAAU,GACzB,OAAO,IAAW,IAAA,IAAa,CAAC,EAAK,WAAW,IAAI,EAAI,EAAO,OAAS,UACxE,CAOF,OAJI,EAAM,OAAS,GAAK,CAAC,EAAM,SAAS,KAAK,EAC3C,EAAM,QAAQ,KAAK,CAGd,EAAM,OAAS,EAAI,EAAQ,IAAA"}
package/package.json CHANGED
@@ -1,12 +1,16 @@
1
1
  {
2
2
  "name": "@murumets-ee/content-api",
3
- "version": "0.23.2",
3
+ "version": "0.24.1",
4
4
  "license": "Elastic-2.0",
5
5
  "type": "module",
6
6
  "exports": {
7
7
  ".": {
8
8
  "types": "./dist/index.d.mts",
9
9
  "import": "./dist/index.mjs"
10
+ },
11
+ "./query-params": {
12
+ "types": "./dist/query-params.d.mts",
13
+ "import": "./dist/query-params.mjs"
10
14
  }
11
15
  },
12
16
  "files": [
@@ -15,9 +19,9 @@
15
19
  "dependencies": {
16
20
  "drizzle-orm": "^0.45.2",
17
21
  "zod": "^3.24.1",
18
- "@murumets-ee/core": "0.23.2",
19
- "@murumets-ee/entity": "0.23.2",
20
- "@murumets-ee/db": "0.23.2"
22
+ "@murumets-ee/core": "0.24.1",
23
+ "@murumets-ee/entity": "0.24.1",
24
+ "@murumets-ee/db": "0.24.1"
21
25
  },
22
26
  "devDependencies": {
23
27
  "tsdown": "^0.21.10",