@nexpress/core 0.1.0

package/dist/chunk-RIPHIRPP.js

@@ -0,0 +1,68 @@
+import {
+  getCurrentSiteId
+} from "./chunk-SBCVAC2Z.js";
+import {
+  getLogger
+} from "./chunk-JJL74ZPK.js";
+import {
+  getDb
+} from "./chunk-XANPEOJC.js";
+import {
+  npAuditEvents
+} from "./chunk-M43PGOQY.js";
+
+// src/community/audit.ts
+import { and, count, desc, eq, gte, lt } from "drizzle-orm";
+async function recordAuditEvent(input) {
+  const db = getDb();
+  try {
+    const siteId = input.siteId === void 0 ? await getCurrentSiteId() : input.siteId;
+    await db.insert(npAuditEvents).values({
+      actorKind: input.actor.kind,
+      actorUserId: input.actor.userId ?? null,
+      actorMemberId: input.actor.memberId ?? null,
+      action: input.action,
+      targetType: input.targetType ?? null,
+      targetId: input.targetId ?? null,
+      payload: input.payload ?? {},
+      siteId
+    });
+  } catch (err) {
+    getLogger().error("audit insert failed", {
+      error: err instanceof Error ? err.message : String(err),
+      action: input.action,
+      targetType: input.targetType ?? null,
+      targetId: input.targetId ?? null
+    });
+  }
+}
+async function listAuditEvents(options = {}) {
+  const db = getDb();
+  const limit = Math.min(Math.max(options.limit ?? 50, 1), 200);
+  const offset = Math.max(options.offset ?? 0, 0);
+  const filters = [];
+  if (options.targetType) filters.push(eq(npAuditEvents.targetType, options.targetType));
+  if (options.targetId) filters.push(eq(npAuditEvents.targetId, options.targetId));
+  if (options.actorUserId) filters.push(eq(npAuditEvents.actorUserId, options.actorUserId));
+  if (options.actorMemberId) filters.push(eq(npAuditEvents.actorMemberId, options.actorMemberId));
+  if (options.action) filters.push(eq(npAuditEvents.action, options.action));
+  if (options.since) filters.push(gte(npAuditEvents.createdAt, options.since));
+  if (options.until) filters.push(lt(npAuditEvents.createdAt, options.until));
+  if (options.siteId !== null) {
+    const resolvedSite = options.siteId !== void 0 ? options.siteId : await getCurrentSiteId();
+    if (resolvedSite !== null) {
+      filters.push(eq(npAuditEvents.siteId, resolvedSite));
+    }
+  }
+  const where = filters.length > 0 ? and(...filters) : void 0;
+  const rows = await db.select().from(npAuditEvents).where(where).orderBy(desc(npAuditEvents.createdAt)).limit(limit).offset(offset);
+  const [totalRow] = await db.select({ total: count() }).from(npAuditEvents).where(where);
+  const totalDocs = Number(totalRow?.total ?? 0);
+  return { events: rows, totalDocs };
+}
+
+export {
+  recordAuditEvent,
+  listAuditEvents
+};
+//# sourceMappingURL=chunk-RIPHIRPP.js.map

package/dist/chunk-RIPHIRPP.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/community/audit.ts"],"sourcesContent":["import { and, count, desc, eq, gte, lt } from \"drizzle-orm\";\nimport type { NodePgDatabase } from \"drizzle-orm/node-postgres\";\n\nimport { getDb } from \"../db/runtime.js\";\nimport { npAuditEvents } from \"../db/schema/community.js\";\nimport { getLogger } from \"../observability/logger.js\";\nimport { getCurrentSiteId } from \"../sites/context.js\";\n\n/**\n * Append-only moderation audit log. Every hide / restore / ban /\n * role-grant write goes through here so admins can later answer\n * \"who took this action and when?\" without diffing application logs.\n *\n * Writes are best-effort: a failed audit insert MUST NOT prevent the\n * underlying mod action from succeeding (logged via the observability\n * hooks instead). Reads are paginated and indexed by target.\n */\n\nexport type AuditActorKind = \"staff\" | \"member\" | \"system\";\n\nexport interface AuditActor {\n  kind: AuditActorKind;\n  /** Set only for `kind: \"staff\"`. */\n  userId?: string;\n  /** Set only for `kind: \"member\"`. */\n  memberId?: string;\n}\n\nexport interface RecordAuditEventInput {\n  actor: AuditActor;\n  action: string;\n  targetType?: string;\n  targetId?: string;\n  payload?: Record<string, unknown>;\n  /**\n   * Phase 17 — site this event belongs to. When omitted the\n   * writer reads `getCurrentSiteId()` so request-driven calls\n   * automatically scope to the resolving tenant. Pass `null`\n   * explicitly to record an unscoped event (super-admin\n   * cross-site action, background job).\n   */\n  siteId?: string | null;\n}\n\nexport interface AuditEventRow {\n  id: string;\n  actorKind: AuditActorKind;\n  actorUserId: string | null;\n  actorMemberId: string | null;\n  action: string;\n  targetType: string | null;\n  targetId: string | null;\n  payload: Record<string, unknown>;\n  siteId: string | null;\n  createdAt: Date;\n}\n\nexport async function recordAuditEvent(input: RecordAuditEventInput): Promise<void> {\n  const db = getDb() as unknown as NodePgDatabase<Record<string, unknown>>;\n  try {\n    // Phase 17 — fill `site_id` from the request resolver when\n    // the caller doesn't pin it explicitly. Resolver returns\n    // null in non-request contexts (jobs, scripts), which we\n    // record as a NULL site so super-admin queries can find\n    // them via \"no site filter.\"\n    const siteId = input.siteId === undefined ? await getCurrentSiteId() : input.siteId;\n    await db.insert(npAuditEvents).values({\n      actorKind: input.actor.kind,\n      actorUserId: input.actor.userId ?? null,\n      actorMemberId: input.actor.memberId ?? null,\n      action: input.action,\n      targetType: input.targetType ?? null,\n      targetId: input.targetId ?? null,\n      payload: input.payload ?? {},\n      siteId,\n    });\n  } catch (err) {\n    // Audit failures must not block the underlying mod action — but\n    // they MUST surface, otherwise gaps in the forensic record go\n    // unnoticed (column drift, FK violation, transient pg blip).\n    getLogger().error(\"audit insert failed\", {\n      error: err instanceof Error ? err.message : String(err),\n      action: input.action,\n      targetType: input.targetType ?? null,\n      targetId: input.targetId ?? null,\n    });\n  }\n}\n\nexport interface ListAuditOptions {\n  /** Filter to audit events targeting one specific row. */\n  targetType?: string;\n  targetId?: string;\n  /** Filter to events caused by a specific actor. */\n  actorUserId?: string;\n  actorMemberId?: string;\n  /**\n   * Filter to events whose `action` matches. Common operational\n   * query: \"show every ban issued this week\" →\n   * `action=\"member.ban.issue\"` plus `since`.\n   */\n  action?: string;\n  /** Lower-bound `created_at` (inclusive). */\n  since?: Date;\n  /** Upper-bound `created_at` (exclusive). */\n  until?: Date;\n  /**\n   * Phase 17 — site filter. `undefined` means \"use current\n   * request's site\" (the typical admin-page query). Pass an\n   * explicit string to view another site's audit log\n   * (super-admin cross-site triage). Pass `null` to skip the\n   * filter entirely (every site's events).\n   */\n  siteId?: string | null;\n  limit?: number;\n  offset?: number;\n}\n\nexport async function listAuditEvents(\n  options: ListAuditOptions = {},\n): Promise<{ events: AuditEventRow[]; totalDocs: number }> {\n  const db = getDb() as unknown as NodePgDatabase<Record<string, unknown>>;\n  const limit = Math.min(Math.max(options.limit ?? 50, 1), 200);\n  const offset = Math.max(options.offset ?? 0, 0);\n\n  const filters = [];\n  if (options.targetType) filters.push(eq(npAuditEvents.targetType, options.targetType));\n  if (options.targetId) filters.push(eq(npAuditEvents.targetId, options.targetId));\n  if (options.actorUserId) filters.push(eq(npAuditEvents.actorUserId, options.actorUserId));\n  if (options.actorMemberId) filters.push(eq(npAuditEvents.actorMemberId, options.actorMemberId));\n  if (options.action) filters.push(eq(npAuditEvents.action, options.action));\n  if (options.since) filters.push(gte(npAuditEvents.createdAt, options.since));\n  if (options.until) filters.push(lt(npAuditEvents.createdAt, options.until));\n\n  // Phase 17 — site scope.\n  // `undefined` (default) → use the resolver's current site if\n  //                        any. Pass `null` to skip filtering\n  //                        (cross-site, super-admin).\n  if (options.siteId !== null) {\n    const resolvedSite = options.siteId !== undefined ? options.siteId : await getCurrentSiteId();\n    if (resolvedSite !== null) {\n      filters.push(eq(npAuditEvents.siteId, resolvedSite));\n    }\n  }\n\n  const where = filters.length > 0 ? and(...filters) : undefined;\n\n  const rows = (await db\n    .select()\n    .from(npAuditEvents)\n    .where(where)\n    .orderBy(desc(npAuditEvents.createdAt))\n    .limit(limit)\n    .offset(offset)) as AuditEventRow[];\n\n  const [totalRow] = (await db\n    .select({ total: count() })\n    .from(npAuditEvents)\n    .where(where)) as Array<{ total: number }>;\n  const totalDocs = Number(totalRow?.total ?? 0);\n  return { events: rows, totalDocs };\n}\n"],"mappings":";;;;;;;;;;;;;;AAAA,SAAS,KAAK,OAAO,MAAM,IAAI,KAAK,UAAU;AAyD9C,eAAsB,iBAAiB,OAA6C;AAClF,QAAM,KAAK,MAAM;AACjB,MAAI;AAMF,UAAM,SAAS,MAAM,WAAW,SAAY,MAAM,iBAAiB,IAAI,MAAM;AAC7E,UAAM,GAAG,OAAO,aAAa,EAAE,OAAO;AAAA,MACpC,WAAW,MAAM,MAAM;AAAA,MACvB,aAAa,MAAM,MAAM,UAAU;AAAA,MACnC,eAAe,MAAM,MAAM,YAAY;AAAA,MACvC,QAAQ,MAAM;AAAA,MACd,YAAY,MAAM,cAAc;AAAA,MAChC,UAAU,MAAM,YAAY;AAAA,MAC5B,SAAS,MAAM,WAAW,CAAC;AAAA,MAC3B;AAAA,IACF,CAAC;AAAA,EACH,SAAS,KAAK;AAIZ,cAAU,EAAE,MAAM,uBAAuB;AAAA,MACvC,OAAO,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;AAAA,MACtD,QAAQ,MAAM;AAAA,MACd,YAAY,MAAM,cAAc;AAAA,MAChC,UAAU,MAAM,YAAY;AAAA,IAC9B,CAAC;AAAA,EACH;AACF;AA+BA,eAAsB,gBACpB,UAA4B,CAAC,GAC4B;AACzD,QAAM,KAAK,MAAM;AACjB,QAAM,QAAQ,KAAK,IAAI,KAAK,IAAI,QAAQ,SAAS,IAAI,CAAC,GAAG,GAAG;AAC5D,QAAM,SAAS,KAAK,IAAI,QAAQ,UAAU,GAAG,CAAC;AAE9C,QAAM,UAAU,CAAC;AACjB,MAAI,QAAQ,WAAY,SAAQ,KAAK,GAAG,cAAc,YAAY,QAAQ,UAAU,CAAC;AACrF,MAAI,QAAQ,SAAU,SAAQ,KAAK,GAAG,cAAc,UAAU,QAAQ,QAAQ,CAAC;AAC/E,MAAI,QAAQ,YAAa,SAAQ,KAAK,GAAG,cAAc,aAAa,QAAQ,WAAW,CAAC;AACxF,MAAI,QAAQ,cAAe,SAAQ,KAAK,GAAG,cAAc,eAAe,QAAQ,aAAa,CAAC;AAC9F,MAAI,QAAQ,OAAQ,SAAQ,KAAK,GAAG,cAAc,QAAQ,QAAQ,MAAM,CAAC;AACzE,MAAI,QAAQ,MAAO,SAAQ,KAAK,IAAI,cAAc,WAAW,QAAQ,KAAK,CAAC;AAC3E,MAAI,QAAQ,MAAO,SAAQ,KAAK,GAAG,cAAc,WAAW,QAAQ,KAAK,CAAC;AAM1E,MAAI,QAAQ,WAAW,MAAM;AAC3B,UAAM,eAAe,QAAQ,WAAW,SAAY,QAAQ,SAAS,MAAM,iBAAiB;AAC5F,QAAI,iBAAiB,MAAM;AACzB,cAAQ,KAAK,GAAG,cAAc,QAAQ,YAAY,CAAC;AAAA,IACrD;AAAA,EACF;AAEA,QAAM,QAAQ,QAAQ,SAAS,IAAI,IAAI,GAAG,OAAO,IAAI;AAErD,QAAM,OAAQ,MAAM,GACjB,OAAO,EACP,KAAK,aAAa,EAClB,MAAM,KAAK,EACX,QAAQ,KAAK,cAAc,SAAS,CAAC,EACrC,MAAM,KAAK,EACX,OAAO,MAAM;AAEhB,QAAM,CAAC,QAAQ,IAAK,MAAM,GACvB,OAAO,EAAE,OAAO,MAAM,EAAE,CAAC,EACzB,KAAK,aAAa,EAClB,MAAM,KAAK;AACd,QAAM,YAAY,OAAO,UAAU,SAAS,CAAC;AAC7C,SAAO,EAAE,QAAQ,MAAM,UAAU;AACnC;","names":[]}

package/dist/chunk-S27S42QY.js

@@ -0,0 +1,134 @@
+import {
+  npMediaRefs
+} from "./chunk-M43PGOQY.js";
+
+// src/media/refs.ts
+import { and, eq } from "drizzle-orm";
+function extractMediaIds(fields, data) {
+  const refs = [];
+  collectMediaIds(fields, data, refs, []);
+  return refs;
+}
+async function syncMediaRefs(tx, collection, documentId, refs) {
+  await tx.delete(npMediaRefs).where(
+    and(eq(npMediaRefs.collection, collection), eq(npMediaRefs.documentId, documentId))
+  );
+  const uniqueRefs = dedupeRefs(refs);
+  if (uniqueRefs.length === 0) {
+    return;
+  }
+  await tx.insert(npMediaRefs).values(
+    uniqueRefs.map((ref) => ({
+      mediaId: ref.mediaId,
+      collection,
+      documentId,
+      field: ref.field
+    }))
+  );
+}
+function collectMediaIds(fields, data, refs, prefix) {
+  for (const field of fields) {
+    if (field.type === "row" || field.type === "collapsible") {
+      collectMediaIds(field.fields, data, refs, prefix);
+      continue;
+    }
+    const fieldPath = [...prefix, field.name];
+    const fieldKey = fieldPath.join(".");
+    const value = data[field.name];
+    if (field.type === "upload") {
+      const mediaId = getMediaId(value);
+      if (mediaId) {
+        refs.push({ mediaId, field: fieldKey });
+      }
+      continue;
+    }
+    if (field.type === "richText") {
+      collectRichTextMediaIds(value, fieldKey, refs);
+      continue;
+    }
+    if (field.type === "array") {
+      if (!Array.isArray(value)) {
+        continue;
+      }
+      for (const item of value) {
+        const itemRecord = toOptionalRecord(item);
+        if (itemRecord) {
+          collectMediaIds(field.fields, itemRecord, refs, fieldPath);
+        }
+      }
+      continue;
+    }
+    if (field.type === "group") {
+      const groupRecord = toOptionalRecord(value);
+      if (groupRecord) {
+        collectMediaIds(field.fields, groupRecord, refs, fieldPath);
+      }
+    }
+  }
+}
+function collectRichTextMediaIds(value, field, refs) {
+  walkRichTextValue(value, (node) => {
+    if (node.type !== "image") {
+      return;
+    }
+    const mediaId = getMediaId(node.mediaId) ?? getMediaId(node.value);
+    if (mediaId) {
+      refs.push({ mediaId, field });
+    }
+  });
+}
+function walkRichTextValue(value, visit) {
+  if (Array.isArray(value)) {
+    for (const item of value) {
+      walkRichTextValue(item, visit);
+    }
+    return;
+  }
+  const record = toOptionalRecord(value);
+  if (!record) {
+    return;
+  }
+  visit(record);
+  for (const child of Object.values(record)) {
+    walkRichTextValue(child, visit);
+  }
+}
+function getMediaId(value) {
+  if (typeof value === "string" && value.length > 0) {
+    return value;
+  }
+  const record = toOptionalRecord(value);
+  if (!record) {
+    return null;
+  }
+  if (typeof record.mediaId === "string" && record.mediaId.length > 0) {
+    return record.mediaId;
+  }
+  if (typeof record.id === "string" && record.id.length > 0) {
+    return record.id;
+  }
+  return null;
+}
+function dedupeRefs(refs) {
+  const seen = /* @__PURE__ */ new Set();
+  return refs.filter((ref) => {
+    const key = `${ref.mediaId}:${ref.field}`;
+    if (seen.has(key)) {
+      return false;
+    }
+    seen.add(key);
+    return true;
+  });
+}
+function toOptionalRecord(value) {
+  if (!value || typeof value !== "object" || Array.isArray(value)) {
+    return null;
+  }
+  return value;
+}
+
+export {
+  extractMediaIds,
+  syncMediaRefs
+};
+//# sourceMappingURL=chunk-S27S42QY.js.map

package/dist/chunk-S27S42QY.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/media/refs.ts"],"sourcesContent":["import { and, eq } from \"drizzle-orm\";\nimport type { PgTable } from \"drizzle-orm/pg-core\";\n\nimport type { NpFieldConfig } from \"../config/types.js\";\nimport { npMediaRefs } from \"../db/schema/media.js\";\n\ninterface InsertValuesQuery extends Promise<unknown> {\n  returning(): Promise<unknown[]>;\n}\n\ninterface SelectQuery extends Promise<unknown[]> {\n  where(condition: ReturnType<typeof and>): SelectQuery;\n}\n\nexport interface DrizzleTransactionLike {\n  insert(table: PgTable): {\n    values(values: Record<string, unknown> | Record<string, unknown>[]): InsertValuesQuery;\n  };\n  delete(table: PgTable): {\n    where(condition: ReturnType<typeof and>): Promise<unknown>;\n  };\n  select(selection?: Record<string, unknown>): {\n    from(table: PgTable): SelectQuery;\n  };\n}\n\nexport function extractMediaIds(\n  fields: NpFieldConfig[],\n  data: Record<string, unknown>,\n): Array<{ mediaId: string; field: string }> {\n  const refs: Array<{ mediaId: string; field: string }> = [];\n\n  collectMediaIds(fields, data, refs, []);\n\n  return refs;\n}\n\nexport async function syncMediaRefs(\n  tx: DrizzleTransactionLike,\n  collection: string,\n  documentId: string,\n  refs: Array<{ mediaId: string; field: string }>,\n): Promise<void> {\n  await tx.delete(npMediaRefs).where(\n    and(eq(npMediaRefs.collection, collection), eq(npMediaRefs.documentId, documentId)),\n  );\n\n  const uniqueRefs = dedupeRefs(refs);\n\n  if (uniqueRefs.length === 0) {\n    return;\n  }\n\n  await tx.insert(npMediaRefs).values(\n    uniqueRefs.map((ref) => ({\n      mediaId: ref.mediaId,\n      collection,\n      documentId,\n      field: ref.field,\n    })),\n  );\n}\n\nfunction collectMediaIds(\n  fields: NpFieldConfig[],\n  data: Record<string, unknown>,\n  refs: Array<{ mediaId: string; field: string }>,\n  prefix: string[],\n): void {\n  for (const field of fields) {\n    if (field.type === \"row\" || field.type === \"collapsible\") {\n      collectMediaIds(field.fields, data, refs, prefix);\n      continue;\n    }\n\n    const fieldPath = [...prefix, field.name];\n    const fieldKey = fieldPath.join(\".\");\n    const value = data[field.name];\n\n    if (field.type === \"upload\") {\n      const mediaId = getMediaId(value);\n\n      if (mediaId) {\n        refs.push({ mediaId, field: fieldKey });\n      }\n\n      continue;\n    }\n\n    if (field.type === \"richText\") {\n      collectRichTextMediaIds(value, fieldKey, refs);\n      continue;\n    }\n\n    if (field.type === \"array\") {\n      if (!Array.isArray(value)) {\n        continue;\n      }\n\n      for (const item of value) {\n        const itemRecord = toOptionalRecord(item);\n\n        if (itemRecord) {\n          collectMediaIds(field.fields, itemRecord, refs, fieldPath);\n        }\n      }\n\n      continue;\n    }\n\n    if (field.type === \"group\") {\n      const groupRecord = toOptionalRecord(value);\n\n      if (groupRecord) {\n        collectMediaIds(field.fields, groupRecord, refs, fieldPath);\n      }\n    }\n  }\n}\n\nfunction collectRichTextMediaIds(\n  value: unknown,\n  field: string,\n  refs: Array<{ mediaId: string; field: string }>,\n): void {\n  walkRichTextValue(value, (node) => {\n    if (node.type !== \"image\") {\n      return;\n    }\n\n    const mediaId = getMediaId(node.mediaId) ?? getMediaId(node.value);\n\n    if (mediaId) {\n      refs.push({ mediaId, field });\n    }\n  });\n}\n\nfunction walkRichTextValue(\n  value: unknown,\n  visit: (node: Record<string, unknown>) => void,\n): void {\n  if (Array.isArray(value)) {\n    for (const item of value) {\n      walkRichTextValue(item, visit);\n    }\n\n    return;\n  }\n\n  const record = toOptionalRecord(value);\n\n  if (!record) {\n    return;\n  }\n\n  visit(record);\n\n  for (const child of Object.values(record)) {\n    walkRichTextValue(child, visit);\n  }\n}\n\nfunction getMediaId(value: unknown): string | null {\n  if (typeof value === \"string\" && value.length > 0) {\n    return value;\n  }\n\n  const record = toOptionalRecord(value);\n\n  if (!record) {\n    return null;\n  }\n\n  if (typeof record.mediaId === \"string\" && record.mediaId.length > 0) {\n    return record.mediaId;\n  }\n\n  if (typeof record.id === \"string\" && record.id.length > 0) {\n    return record.id;\n  }\n\n  return null;\n}\n\nfunction dedupeRefs(\n  refs: Array<{ mediaId: string; field: string }>,\n): Array<{ mediaId: string; field: string }> {\n  const seen = new Set<string>();\n\n  return refs.filter((ref) => {\n    const key = `${ref.mediaId}:${ref.field}`;\n\n    if (seen.has(key)) {\n      return false;\n    }\n\n    seen.add(key);\n    return true;\n  });\n}\n\nfunction toOptionalRecord(value: unknown): Record<string, unknown> | null {\n  if (!value || typeof value !== \"object\" || Array.isArray(value)) {\n    return null;\n  }\n\n  return value as Record<string, unknown>;\n}\n"],"mappings":";;;;;AAAA,SAAS,KAAK,UAAU;AA0BjB,SAAS,gBACd,QACA,MAC2C;AAC3C,QAAM,OAAkD,CAAC;AAEzD,kBAAgB,QAAQ,MAAM,MAAM,CAAC,CAAC;AAEtC,SAAO;AACT;AAEA,eAAsB,cACpB,IACA,YACA,YACA,MACe;AACf,QAAM,GAAG,OAAO,WAAW,EAAE;AAAA,IAC3B,IAAI,GAAG,YAAY,YAAY,UAAU,GAAG,GAAG,YAAY,YAAY,UAAU,CAAC;AAAA,EACpF;AAEA,QAAM,aAAa,WAAW,IAAI;AAElC,MAAI,WAAW,WAAW,GAAG;AAC3B;AAAA,EACF;AAEA,QAAM,GAAG,OAAO,WAAW,EAAE;AAAA,IAC3B,WAAW,IAAI,CAAC,SAAS;AAAA,MACvB,SAAS,IAAI;AAAA,MACb;AAAA,MACA;AAAA,MACA,OAAO,IAAI;AAAA,IACb,EAAE;AAAA,EACJ;AACF;AAEA,SAAS,gBACP,QACA,MACA,MACA,QACM;AACN,aAAW,SAAS,QAAQ;AAC1B,QAAI,MAAM,SAAS,SAAS,MAAM,SAAS,eAAe;AACxD,sBAAgB,MAAM,QAAQ,MAAM,MAAM,MAAM;AAChD;AAAA,IACF;AAEA,UAAM,YAAY,CAAC,GAAG,QAAQ,MAAM,IAAI;AACxC,UAAM,WAAW,UAAU,KAAK,GAAG;AACnC,UAAM,QAAQ,KAAK,MAAM,IAAI;AAE7B,QAAI,MAAM,SAAS,UAAU;AAC3B,YAAM,UAAU,WAAW,KAAK;AAEhC,UAAI,SAAS;AACX,aAAK,KAAK,EAAE,SAAS,OAAO,SAAS,CAAC;AAAA,MACxC;AAEA;AAAA,IACF;AAEA,QAAI,MAAM,SAAS,YAAY;AAC7B,8BAAwB,OAAO,UAAU,IAAI;AAC7C;AAAA,IACF;AAEA,QAAI,MAAM,SAAS,SAAS;AAC1B,UAAI,CAAC,MAAM,QAAQ,KAAK,GAAG;AACzB;AAAA,MACF;AAEA,iBAAW,QAAQ,OAAO;AACxB,cAAM,aAAa,iBAAiB,IAAI;AAExC,YAAI,YAAY;AACd,0BAAgB,MAAM,QAAQ,YAAY,MAAM,SAAS;AAAA,QAC3D;AAAA,MACF;AAEA;AAAA,IACF;AAEA,QAAI,MAAM,SAAS,SAAS;AAC1B,YAAM,cAAc,iBAAiB,KAAK;AAE1C,UAAI,aAAa;AACf,wBAAgB,MAAM,QAAQ,aAAa,MAAM,SAAS;AAAA,MAC5D;AAAA,IACF;AAAA,EACF;AACF;AAEA,SAAS,wBACP,OACA,OACA,MACM;AACN,oBAAkB,OAAO,CAAC,SAAS;AACjC,QAAI,KAAK,SAAS,SAAS;AACzB;AAAA,IACF;AAEA,UAAM,UAAU,WAAW,KAAK,OAAO,KAAK,WAAW,KAAK,KAAK;AAEjE,QAAI,SAAS;AACX,WAAK,KAAK,EAAE,SAAS,MAAM,CAAC;AAAA,IAC9B;AAAA,EACF,CAAC;AACH;AAEA,SAAS,kBACP,OACA,OACM;AACN,MAAI,MAAM,QAAQ,KAAK,GAAG;AACxB,eAAW,QAAQ,OAAO;AACxB,wBAAkB,MAAM,KAAK;AAAA,IAC/B;AAEA;AAAA,EACF;AAEA,QAAM,SAAS,iBAAiB,KAAK;AAErC,MAAI,CAAC,QAAQ;AACX;AAAA,EACF;AAEA,QAAM,MAAM;AAEZ,aAAW,SAAS,OAAO,OAAO,MAAM,GAAG;AACzC,sBAAkB,OAAO,KAAK;AAAA,EAChC;AACF;AAEA,SAAS,WAAW,OAA+B;AACjD,MAAI,OAAO,UAAU,YAAY,MAAM,SAAS,GAAG;AACjD,WAAO;AAAA,EACT;AAEA,QAAM,SAAS,iBAAiB,KAAK;AAErC,MAAI,CAAC,QAAQ;AACX,WAAO;AAAA,EACT;AAEA,MAAI,OAAO,OAAO,YAAY,YAAY,OAAO,QAAQ,SAAS,GAAG;AACnE,WAAO,OAAO;AAAA,EAChB;AAEA,MAAI,OAAO,OAAO,OAAO,YAAY,OAAO,GAAG,SAAS,GAAG;AACzD,WAAO,OAAO;AAAA,EAChB;AAEA,SAAO;AACT;AAEA,SAAS,WACP,MAC2C;AAC3C,QAAM,OAAO,oBAAI,IAAY;AAE7B,SAAO,KAAK,OAAO,CAAC,QAAQ;AAC1B,UAAM,MAAM,GAAG,IAAI,OAAO,IAAI,IAAI,KAAK;AAEvC,QAAI,KAAK,IAAI,GAAG,GAAG;AACjB,aAAO;AAAA,IACT;AAEA,SAAK,IAAI,GAAG;AACZ,WAAO;AAAA,EACT,CAAC;AACH;AAEA,SAAS,iBAAiB,OAAgD;AACxE,MAAI,CAAC,SAAS,OAAO,UAAU,YAAY,MAAM,QAAQ,KAAK,GAAG;AAC/D,WAAO;AAAA,EACT;AAEA,SAAO;AACT;","names":[]}

package/dist/chunk-SBCVAC2Z.js

@@ -0,0 +1,40 @@
+// src/sites/context.ts
+var resolver = null;
+function setCurrentSiteResolver(fn) {
+  resolver = fn;
+}
+function resetCurrentSiteResolver() {
+  resolver = null;
+}
+async function getCurrentSiteId() {
+  if (!resolver) return null;
+  return resolver();
+}
+async function requireSiteId() {
+  const id = await getCurrentSiteId();
+  if (!id) {
+    const { NpSiteContextMissingError } = await import("./errors-5OS3S2J3.js");
+    throw new NpSiteContextMissingError(
+      "site context required for this write but none is set \u2014 wrap the call in withCurrentSite() or stamp siteId on the job payload"
+    );
+  }
+  return id;
+}
+async function withCurrentSite(siteId, fn) {
+  const previous = resolver;
+  resolver = () => siteId;
+  try {
+    return await fn();
+  } finally {
+    resolver = previous;
+  }
+}
+
+export {
+  setCurrentSiteResolver,
+  resetCurrentSiteResolver,
+  getCurrentSiteId,
+  requireSiteId,
+  withCurrentSite
+};
+//# sourceMappingURL=chunk-SBCVAC2Z.js.map

package/dist/chunk-SBCVAC2Z.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/sites/context.ts"],"sourcesContent":["/**\n * Phase 15.1 — process-wide \"current site\" resolver hook.\n *\n * The pipeline doesn't know how to find the current request's\n * site on its own (the runtime layer does — it reads the\n * `x-np-site-id` header the middleware sets). This module\n * exposes a setter the runtime calls at boot:\n *\n *   setCurrentSiteResolver(async () => {\n *     const headerList = await headers();\n *     return headerList.get(\"x-np-site-id\") ?? null;\n *   });\n *\n * Pipeline / hooks call `getCurrentSiteId()` to read the\n * resolved id (or `null` when no resolver is wired, e.g.\n * background workers, scripts).\n *\n * This is intentionally async — the canonical Next.js\n * resolver awaits `headers()`. Sync paths (CLI, tests) can\n * register a sync resolver by returning the value directly.\n */\n\ntype Resolver = () => string | null | Promise<string | null>;\n\nlet resolver: Resolver | null = null;\n\nexport function setCurrentSiteResolver(fn: Resolver | null): void {\n  resolver = fn;\n}\n\nexport function resetCurrentSiteResolver(): void {\n  resolver = null;\n}\n\nexport async function getCurrentSiteId(): Promise<string | null> {\n  if (!resolver) return null;\n  return resolver();\n}\n\n/**\n * Like `getCurrentSiteId()` but throws when no site context is set.\n *\n * Use this on write paths that must NEVER silently fall through to\n * the default site — community moderation, ban/mute writes, report\n * creation, notification fan-out. Reading from the default site\n * when context is missing is usually fine; *writing* to it is how\n * cross-site data leaks happen.\n *\n * Background jobs / CLI scripts: stamp the originating `siteId`\n * onto the job payload at enqueue time and wrap the handler in\n * `withCurrentSite(siteId, fn)` so this helper resolves correctly.\n *\n * Throws `NpSiteContextMissingError` (code `SITE_CONTEXT_MISSING`,\n * status 500). The 500 is deliberate — this is a server-side\n * wiring bug, not user input fault, and the API layer surfaces\n * it through the standard NpError envelope.\n */\nexport async function requireSiteId(): Promise<string> {\n  const id = await getCurrentSiteId();\n  if (!id) {\n    // Defer the import to keep this module's load graph thin —\n    // `errors.js` doesn't currently reach back into sites/, but\n    // the dynamic specifier costs nothing on the happy path\n    // (resolver hit) and avoids a future cycle.\n    const { NpSiteContextMissingError } = await import(\"../errors.js\");\n    throw new NpSiteContextMissingError(\n      \"site context required for this write but none is set — \" +\n        \"wrap the call in withCurrentSite() or stamp siteId on the job payload\",\n    );\n  }\n  return id;\n}\n\n/**\n * Tests / scripts that want to pin the current site id for the\n * duration of a block use the `withCurrentSite` helper — it swaps\n * in a constant resolver, runs `fn`, and restores the previous\n * resolver on exit.\n *\n * Contract — read this carefully (#320):\n *\n *   `withCurrentSite` covers ONLY work that completes (synchronously\n *   or via `await`) before `fn` returns. Any fire-and-forget async\n *   work spawned inside `fn` runs AFTER the `finally` block has\n *   already restored the previous resolver, so it sees the OUTER\n *   site context — typically `null` for a CLI / job, or the wrong\n *   site for a request that was acting on a different tenant.\n *\n *   Concretely:\n *     - `enqueueJob(...)` persists the row immediately but the\n *       handler runs later in the worker. The worker has no\n *       resolver wired, so `getCurrentSiteId()` returns `null`\n *       and `requireSiteId()` throws — even though the enqueuer\n *       was inside a `withCurrentSite` block.\n *     - `void someAsyncFn()` patterns inside `fn` are similarly\n *       exposed.\n *\n *   How to do it safely:\n *     - Stamp `siteId` explicitly onto every job payload at\n *       enqueue time. The handler reads it back from the payload\n *       and wraps its own work in `withCurrentSite(payload.siteId,\n *       handlerBody)`.\n *     - `await` everything that needs the site context inside\n *       `fn`. Don't return from `fn` while a site-dependent\n *       operation is still pending.\n *\n *   This is a fundamental limit of plain module-scoped state. A\n *   future refactor could switch the resolver to\n *   `AsyncLocalStorage` so the site follows the async boundary\n *   automatically — that's tracked under #320 but out of scope\n *   for this helper today.\n */\nexport async function withCurrentSite<T>(\n  siteId: string,\n  fn: () => Promise<T>,\n): Promise<T> {\n  const previous = resolver;\n  resolver = () => siteId;\n  try {\n    return await fn();\n  } finally {\n    resolver = previous;\n  }\n}\n"],"mappings":";AAwBA,IAAI,WAA4B;AAEzB,SAAS,uBAAuB,IAA2B;AAChE,aAAW;AACb;AAEO,SAAS,2BAAiC;AAC/C,aAAW;AACb;AAEA,eAAsB,mBAA2C;AAC/D,MAAI,CAAC,SAAU,QAAO;AACtB,SAAO,SAAS;AAClB;AAoBA,eAAsB,gBAAiC;AACrD,QAAM,KAAK,MAAM,iBAAiB;AAClC,MAAI,CAAC,IAAI;AAKP,UAAM,EAAE,0BAA0B,IAAI,MAAM,OAAO,sBAAc;AACjE,UAAM,IAAI;AAAA,MACR;AAAA,IAEF;AAAA,EACF;AACA,SAAO;AACT;AAyCA,eAAsB,gBACpB,QACA,IACY;AACZ,QAAM,WAAW;AACjB,aAAW,MAAM;AACjB,MAAI;AACF,WAAO,MAAM,GAAG;AAAA,EAClB,UAAE;AACA,eAAW;AAAA,EACb;AACF;","names":[]}