@notionx/core 0.1.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (208) hide show
  1. package/dist/admin/index.d.ts +137 -0
  2. package/dist/admin/index.js +206 -0
  3. package/dist/admin/index.js.map +1 -0
  4. package/dist/admin/pages/index.d.ts +324 -0
  5. package/dist/admin/pages/index.js +827 -0
  6. package/dist/admin/pages/index.js.map +1 -0
  7. package/dist/auth/auth-pages/forgot-password.d.ts +20 -0
  8. package/dist/auth/auth-pages/forgot-password.js +70 -0
  9. package/dist/auth/auth-pages/forgot-password.js.map +1 -0
  10. package/dist/auth/auth-pages/index.d.ts +6 -0
  11. package/dist/auth/auth-pages/index.js +342 -0
  12. package/dist/auth/auth-pages/index.js.map +1 -0
  13. package/dist/auth/auth-pages/login.d.ts +30 -0
  14. package/dist/auth/auth-pages/login.js +125 -0
  15. package/dist/auth/auth-pages/login.js.map +1 -0
  16. package/dist/auth/auth-pages/register.d.ts +17 -0
  17. package/dist/auth/auth-pages/register.js +81 -0
  18. package/dist/auth/auth-pages/register.js.map +1 -0
  19. package/dist/auth/auth-pages/reset-password.d.ts +18 -0
  20. package/dist/auth/auth-pages/reset-password.js +72 -0
  21. package/dist/auth/auth-pages/reset-password.js.map +1 -0
  22. package/dist/auth/index.d.ts +72 -0
  23. package/dist/auth/index.js +1011 -0
  24. package/dist/auth/index.js.map +1 -0
  25. package/dist/auth/passwords.d.ts +6 -0
  26. package/dist/auth/passwords.js +79 -0
  27. package/dist/auth/passwords.js.map +1 -0
  28. package/dist/auth/rate-limit.d.ts +28 -0
  29. package/dist/auth/rate-limit.js +245 -0
  30. package/dist/auth/rate-limit.js.map +1 -0
  31. package/dist/auth/routes/google-callback.d.ts +6 -0
  32. package/dist/auth/routes/google-callback.js +404 -0
  33. package/dist/auth/routes/google-callback.js.map +1 -0
  34. package/dist/auth/routes/google.d.ts +6 -0
  35. package/dist/auth/routes/google.js +250 -0
  36. package/dist/auth/routes/google.js.map +1 -0
  37. package/dist/auth/routes/index.d.ts +22 -0
  38. package/dist/auth/routes/index.js +619 -0
  39. package/dist/auth/routes/index.js.map +1 -0
  40. package/dist/auth/routes/verify-email.d.ts +6 -0
  41. package/dist/auth/routes/verify-email.js +317 -0
  42. package/dist/auth/routes/verify-email.js.map +1 -0
  43. package/dist/auth/routes/viewer.d.ts +6 -0
  44. package/dist/auth/routes/viewer.js +372 -0
  45. package/dist/auth/routes/viewer.js.map +1 -0
  46. package/dist/auth/session.d.ts +9 -0
  47. package/dist/auth/session.js +1 -0
  48. package/dist/auth/session.js.map +1 -0
  49. package/dist/auth/turnstile.d.ts +20 -0
  50. package/dist/auth/turnstile.js +301 -0
  51. package/dist/auth/turnstile.js.map +1 -0
  52. package/dist/auth/user-session.d.ts +42 -0
  53. package/dist/auth/user-session.js +419 -0
  54. package/dist/auth/user-session.js.map +1 -0
  55. package/dist/auth/users.d.ts +112 -0
  56. package/dist/auth/users.js +558 -0
  57. package/dist/auth/users.js.map +1 -0
  58. package/dist/bootstrap-CN2g76M6.d.ts +67 -0
  59. package/dist/cache/index.d.ts +6 -0
  60. package/dist/cache/index.js +47 -0
  61. package/dist/cache/index.js.map +1 -0
  62. package/dist/content/admin-summary.d.ts +24 -0
  63. package/dist/content/admin-summary.js +36 -0
  64. package/dist/content/admin-summary.js.map +1 -0
  65. package/dist/content/index.d.ts +9 -0
  66. package/dist/content/index.js +473 -0
  67. package/dist/content/index.js.map +1 -0
  68. package/dist/content/models.d.ts +69 -0
  69. package/dist/content/models.js +24 -0
  70. package/dist/content/models.js.map +1 -0
  71. package/dist/content/prewarm.d.ts +28 -0
  72. package/dist/content/prewarm.js +56 -0
  73. package/dist/content/prewarm.js.map +1 -0
  74. package/dist/content/revalidate.d.ts +37 -0
  75. package/dist/content/revalidate.js +170 -0
  76. package/dist/content/revalidate.js.map +1 -0
  77. package/dist/content/search-index.d.ts +54 -0
  78. package/dist/content/search-index.js +172 -0
  79. package/dist/content/search-index.js.map +1 -0
  80. package/dist/content/search.d.ts +8 -0
  81. package/dist/content/search.js +57 -0
  82. package/dist/content/search.js.map +1 -0
  83. package/dist/doctor/cli.d.ts +1 -0
  84. package/dist/doctor/cli.js +360 -0
  85. package/dist/doctor/cli.js.map +1 -0
  86. package/dist/doctor/index.d.ts +139 -0
  87. package/dist/doctor/index.js +289 -0
  88. package/dist/doctor/index.js.map +1 -0
  89. package/dist/email/index.d.ts +38 -0
  90. package/dist/email/index.js +126 -0
  91. package/dist/email/index.js.map +1 -0
  92. package/dist/env-C5qu-0R-.d.ts +35 -0
  93. package/dist/hooks/index.d.ts +2 -0
  94. package/dist/hooks/index.js +1 -0
  95. package/dist/hooks/index.js.map +1 -0
  96. package/dist/i18n/index.d.ts +26 -0
  97. package/dist/i18n/index.js +73 -0
  98. package/dist/i18n/index.js.map +1 -0
  99. package/dist/index.d.ts +8 -0
  100. package/dist/index.js +1281 -0
  101. package/dist/index.js.map +1 -0
  102. package/dist/internal/admin/index.d.ts +75 -0
  103. package/dist/internal/admin/index.js +365 -0
  104. package/dist/internal/admin/index.js.map +1 -0
  105. package/dist/media/index.d.ts +24 -0
  106. package/dist/media/index.js +86 -0
  107. package/dist/media/index.js.map +1 -0
  108. package/dist/media/routes/index.d.ts +1 -0
  109. package/dist/media/routes/index.js +585 -0
  110. package/dist/media/routes/index.js.map +1 -0
  111. package/dist/media/routes/notion-media.d.ts +19 -0
  112. package/dist/media/routes/notion-media.js +588 -0
  113. package/dist/media/routes/notion-media.js.map +1 -0
  114. package/dist/middleware.d.ts +95 -0
  115. package/dist/middleware.js +79 -0
  116. package/dist/middleware.js.map +1 -0
  117. package/dist/notion/block-text.d.ts +5 -0
  118. package/dist/notion/block-text.js +37 -0
  119. package/dist/notion/block-text.js.map +1 -0
  120. package/dist/notion/blocks.d.ts +24 -0
  121. package/dist/notion/blocks.js +46 -0
  122. package/dist/notion/blocks.js.map +1 -0
  123. package/dist/notion/client.d.ts +7 -0
  124. package/dist/notion/client.js +13 -0
  125. package/dist/notion/client.js.map +1 -0
  126. package/dist/notion/config.d.ts +25 -0
  127. package/dist/notion/config.js +147 -0
  128. package/dist/notion/config.js.map +1 -0
  129. package/dist/notion/content-cache.d.ts +45 -0
  130. package/dist/notion/content-cache.js +166 -0
  131. package/dist/notion/content-cache.js.map +1 -0
  132. package/dist/notion/generic-source.d.ts +61 -0
  133. package/dist/notion/generic-source.js +408 -0
  134. package/dist/notion/generic-source.js.map +1 -0
  135. package/dist/notion/index.d.ts +13 -0
  136. package/dist/notion/index.js +1278 -0
  137. package/dist/notion/index.js.map +1 -0
  138. package/dist/notion/mappers.d.ts +1 -0
  139. package/dist/notion/mappers.js +152 -0
  140. package/dist/notion/mappers.js.map +1 -0
  141. package/dist/notion/media.d.ts +22 -0
  142. package/dist/notion/media.js +209 -0
  143. package/dist/notion/media.js.map +1 -0
  144. package/dist/notion/property-mappers.d.ts +24 -0
  145. package/dist/notion/property-mappers.js +152 -0
  146. package/dist/notion/property-mappers.js.map +1 -0
  147. package/dist/notion/routes/index.d.ts +8 -0
  148. package/dist/notion/routes/index.js +428 -0
  149. package/dist/notion/routes/index.js.map +1 -0
  150. package/dist/notion/routes/webhook.d.ts +98 -0
  151. package/dist/notion/routes/webhook.js +428 -0
  152. package/dist/notion/routes/webhook.js.map +1 -0
  153. package/dist/notion/types.d.ts +152 -0
  154. package/dist/notion/types.js +1 -0
  155. package/dist/notion/types.js.map +1 -0
  156. package/dist/notion/webhook.d.ts +83 -0
  157. package/dist/notion/webhook.js +490 -0
  158. package/dist/notion/webhook.js.map +1 -0
  159. package/dist/platform/capabilities.d.ts +34 -0
  160. package/dist/platform/capabilities.js +42 -0
  161. package/dist/platform/capabilities.js.map +1 -0
  162. package/dist/platform/current.d.ts +13 -0
  163. package/dist/platform/current.js +181 -0
  164. package/dist/platform/current.js.map +1 -0
  165. package/dist/platform/index.d.ts +5 -0
  166. package/dist/platform/index.js +269 -0
  167. package/dist/platform/index.js.map +1 -0
  168. package/dist/platform/runtime.d.ts +118 -0
  169. package/dist/platform/runtime.js +160 -0
  170. package/dist/platform/runtime.js.map +1 -0
  171. package/dist/platform/selection.d.ts +10 -0
  172. package/dist/platform/selection.js +22 -0
  173. package/dist/platform/selection.js.map +1 -0
  174. package/dist/storage/index.d.ts +17 -0
  175. package/dist/storage/index.js +218 -0
  176. package/dist/storage/index.js.map +1 -0
  177. package/dist/storage/routes/cdn.d.ts +19 -0
  178. package/dist/storage/routes/cdn.js +289 -0
  179. package/dist/storage/routes/cdn.js.map +1 -0
  180. package/dist/storage/routes/files.d.ts +27 -0
  181. package/dist/storage/routes/files.js +216 -0
  182. package/dist/storage/routes/files.js.map +1 -0
  183. package/dist/storage/routes/index.d.ts +2 -0
  184. package/dist/storage/routes/index.js +352 -0
  185. package/dist/storage/routes/index.js.map +1 -0
  186. package/dist/types-BsAcZSNX.d.ts +94 -0
  187. package/dist/types.d.ts +78 -0
  188. package/dist/types.js +1 -0
  189. package/dist/types.js.map +1 -0
  190. package/dist/util/index.d.ts +18 -0
  191. package/dist/util/index.js +48 -0
  192. package/dist/util/index.js.map +1 -0
  193. package/dist/worker/index.d.ts +6 -0
  194. package/dist/worker/index.js +1026 -0
  195. package/dist/worker/index.js.map +1 -0
  196. package/dist/worker/routes/content-prewarm.d.ts +34 -0
  197. package/dist/worker/routes/content-prewarm.js +38 -0
  198. package/dist/worker/routes/content-prewarm.js.map +1 -0
  199. package/dist/worker/routes/content-revalidate.d.ts +81 -0
  200. package/dist/worker/routes/content-revalidate.js +64 -0
  201. package/dist/worker/routes/content-revalidate.js.map +1 -0
  202. package/dist/worker/routes/health.d.ts +14 -0
  203. package/dist/worker/routes/health.js +278 -0
  204. package/dist/worker/routes/health.js.map +1 -0
  205. package/dist/worker/routes/index.d.ts +6 -0
  206. package/dist/worker/routes/index.js +373 -0
  207. package/dist/worker/routes/index.js.map +1 -0
  208. package/package.json +124 -0
@@ -0,0 +1 @@
1
+ {"version":3,"sources":["../../../src/media/routes/notion-media.ts","../../../src/cache/cache-keys.ts","../../../src/notion/client.ts","../../../src/notion/config.ts","../../../src/notion/media.ts","../../../src/util/env.ts","../../../src/platform/runtime.ts","../../../src/platform/cloudflare-runtime.ts","../../../src/platform/current.ts"],"sourcesContent":["// media/routes/notion-media.ts\n//\n// GET /api/notion/media/[...ref] - Notion-hosted media proxy with\n// edge cache, R2 fanout, and image transformation.\n//\n// Originally lives at `apps/moviebluebook/app/api/notion/media/[...ref]/route.ts`.\n// The package exports a route object that exposes both a Next.js\n// handler (the `GET` field) and a worker-friendly `handle` function.\n//\n// The `vinext/shims/request-context` module is treated as a runtime\n// shim by the starter and the Cloudflare Workers runtime; it is\n// listed in the package's tsup `external` config so it is resolved by\n// the consumer at runtime.\n\nimport { NextResponse } from \"next/server\";\nimport { getRequestExecutionContext } from \"vinext/shims/request-context\";\nimport {\n notionMediaR2KeyForUrl,\n publicMediaCacheKeyForUrl,\n publicMediaVariantForAccept,\n type PublicMediaVariant,\n} from \"../../cache\";\nimport { createNotionClient } from \"../../notion/client\";\nimport { getNotionClientConfig } from \"../../notion/config\";\nimport {\n fileObjectForMediaBlock,\n normalizeNotionFileSource,\n pickFirstFilesPropertyValue,\n} from \"../../notion/media\";\nimport type { NotionBlock, NotionPageLike } from \"../../notion/types\";\nimport {\n getPublicCache,\n getRuntimePlatform,\n} from \"../../platform/current\";\n\nexport const dynamic = \"force-dynamic\";\n\nconst DEFAULT_WIDTH = 1200;\nconst MAX_WIDTH = 2400;\nconst DEFAULT_QUALITY = 75;\nconst MIN_QUALITY = 40;\nconst MAX_QUALITY = 85;\nconst CACHEABLE_STATUS = new Set([200]);\n\ntype Props = {\n params: Promise<{ ref: string[] }>;\n};\n\nexport const notionMediaRoute = {\n async GET(_request: Request, props: Props) {\n const { ref } = await props.params;\n if (ref.some((part) => part === \"..\" || part.includes(\"/\"))) {\n return badRequest();\n }\n const url = new URL(_request.url);\n url.pathname = buildNotionMediaPath(ref);\n return notionMediaRoute.handle(new Request(url.toString(), _request));\n },\n async handle(request: Request): Promise<Response> {\n const variant = publicMediaVariantForAccept(\n request.headers.get(\"accept\") ?? \"\"\n );\n return withEdgeMediaCache(request, variant, () => loadMedia(request));\n },\n};\n\nfunction buildNotionMediaPath(ref: string[]) {\n return `/api/notion/media/${ref.map(encodeURIComponent).join(\"/\")}`;\n}\n\nfunction clampInt(\n value: string | null,\n min: number,\n max: number,\n fallback: number\n) {\n const parsed = Number.parseInt(value ?? \"\", 10);\n if (!Number.isFinite(parsed)) return fallback;\n return Math.max(min, Math.min(max, parsed));\n}\n\nfunction cacheControl(request: Request) {\n const url = new URL(request.url);\n if (url.searchParams.has(\"v\")) {\n return \"public, max-age=31536000, immutable\";\n }\n\n return \"public, max-age=3600, s-maxage=3600, stale-while-revalidate=86400\";\n}\n\nfunction canUseMediaCache(request: Request) {\n if (request.method !== \"GET\") return false;\n return !request.headers.has(\"range\");\n}\n\nfunction mediaCacheHeaders(\n response: Response,\n request: Request,\n state: \"HIT\" | \"MISS\" | \"BYPASS\",\n r2State?: \"HIT\" | \"MISS\" | \"BYPASS\"\n) {\n const headers = new Headers(response.headers);\n headers.set(\"Cache-Control\", cacheControl(request));\n headers.set(\"X-Notion-Media-Cache\", state);\n if (r2State) headers.set(\"X-Notion-Media-R2\", r2State);\n return headers;\n}\n\nasync function responseFromR2Cache(\n request: Request,\n variant: PublicMediaVariant\n) {\n const url = new URL(request.url);\n const r2Key = notionMediaR2KeyForUrl(url, variant);\n const storage = getRuntimePlatform().objectStorage;\n if (!r2Key || !storage) return null;\n\n const object = await storage.get(r2Key);\n if (!object?.body) return null;\n\n const contentType =\n object.contentType ?? (variant === \"avif\" ? \"image/avif\" : \"image/webp\");\n const headers = new Headers();\n headers.set(\"Content-Type\", contentType);\n headers.set(\"Cache-Control\", cacheControl(request));\n headers.set(\"Vary\", \"Accept\");\n headers.set(\"X-Notion-Media-Branch\", \"r2\");\n headers.set(\"X-Notion-Media-R2\", \"HIT\");\n if (object.etag) headers.set(\"ETag\", object.etag);\n\n return new Response(object.body, { headers });\n}\n\nasync function withEdgeMediaCache(\n request: Request,\n variant: PublicMediaVariant,\n load: () => Promise<Response>\n) {\n if (!canUseMediaCache(request)) {\n const response = await load();\n return new Response(response.body, {\n status: response.status,\n headers: mediaCacheHeaders(response, request, \"BYPASS\"),\n });\n }\n\n const url = new URL(request.url);\n const cache = getPublicCache();\n const cacheKey = publicMediaCacheKeyForUrl(url, variant);\n const cached = await cache.match(cacheKey);\n if (cached) {\n return new Response(cached.body, {\n status: cached.status,\n headers: mediaCacheHeaders(cached, request, \"HIT\"),\n });\n }\n\n const r2Response = await responseFromR2Cache(request, variant);\n const response = r2Response ?? (await load());\n const headers = mediaCacheHeaders(response, request, \"MISS\");\n const output = new Response(response.body, {\n status: response.status,\n headers,\n });\n\n if (CACHEABLE_STATUS.has(response.status)) {\n const toCache = output.clone();\n getRequestExecutionContext()?.waitUntil(cache.put(cacheKey, toCache));\n }\n\n return output;\n}\n\nfunction mediaRedirect(url: string) {\n const response = NextResponse.redirect(url, 302);\n response.headers.set(\n \"Cache-Control\",\n \"public, max-age=300, s-maxage=300, stale-while-revalidate=300\"\n );\n return response;\n}\n\nfunction notFound() {\n return NextResponse.json({ error: \"Not found\" }, { status: 404 });\n}\n\nfunction badRequest() {\n return NextResponse.json({ error: \"Invalid media ref\" }, { status: 400 });\n}\n\nfunction forbidden() {\n return NextResponse.json({ error: \"Forbidden\" }, { status: 403 });\n}\n\nasync function serveFileObject(\n input: unknown,\n request: Request,\n options?: { redirectNotionHosted?: boolean }\n) {\n const source = normalizeNotionFileSource(input);\n if (!source) return notFound();\n if (options?.redirectNotionHosted) return mediaRedirect(source.url);\n return proxyNotionHostedFile(source.url, request);\n}\n\nasync function proxyNotionHostedFile(url: string, request: Request) {\n const range = request.headers.get(\"range\");\n const ifRange = request.headers.get(\"if-range\");\n const upstreamHeaders = new Headers({\n Accept: request.headers.get(\"accept\") ?? \"*/*\",\n });\n if (range) upstreamHeaders.set(\"Range\", range);\n if (ifRange) upstreamHeaders.set(\"If-Range\", ifRange);\n\n const upstream = await fetch(url, {\n headers: upstreamHeaders,\n });\n if ((!upstream.ok && upstream.status !== 416) || !upstream.body) {\n return NextResponse.json(\n { error: \"Unable to fetch Notion media\" },\n { status: upstream.status || 502 }\n );\n }\n\n const contentType = upstream.headers.get(\"content-type\") ?? \"\";\n const isImage = contentType.startsWith(\"image/\");\n const accept = request.headers.get(\"accept\") ?? \"\";\n const variant = publicMediaVariantForAccept(accept);\n const urlObj = new URL(request.url);\n const width = clampInt(\n urlObj.searchParams.get(\"w\"),\n 64,\n MAX_WIDTH,\n DEFAULT_WIDTH\n );\n const quality = clampInt(\n urlObj.searchParams.get(\"q\"),\n MIN_QUALITY,\n MAX_QUALITY,\n DEFAULT_QUALITY\n );\n\n let outputFormat: \"image/avif\" | \"image/webp\" | null = null;\n if (variant === \"avif\") {\n outputFormat = \"image/avif\";\n } else if (variant === \"webp\") {\n outputFormat = \"image/webp\";\n }\n\n const platform = getRuntimePlatform();\n const imageTransformer = platform.imageTransformer;\n if (isImage && !range && outputFormat && imageTransformer) {\n const r2Key = notionMediaR2KeyForUrl(urlObj, variant);\n\n try {\n const result = await imageTransformer.transform(upstream.body, {\n width,\n format: outputFormat,\n quality,\n });\n const transformed = result.response();\n const headers = new Headers(transformed.headers);\n headers.set(\"Content-Type\", result.contentType);\n headers.set(\"Cache-Control\", cacheControl(request));\n headers.set(\"Vary\", \"Accept\");\n headers.set(\"X-Notion-Media-Branch\", \"transformed\");\n headers.set(\"X-Notion-Media-R2\", r2Key ? \"MISS\" : \"BYPASS\");\n headers.set(\"X-Optimized-Width\", String(width));\n headers.set(\"X-Optimized-Quality\", String(quality));\n\n if (transformed.body && r2Key && platform.objectStorage) {\n const [clientBody, r2Body] = transformed.body.tee();\n getRequestExecutionContext()?.waitUntil(\n platform.objectStorage.put(r2Key, r2Body, {\n contentType: result.contentType,\n cacheControl: \"public, max-age=31536000, immutable\",\n metadata: {\n source: \"notion\",\n cachedAt: new Date().toISOString(),\n width: String(width),\n quality: String(quality),\n },\n })\n );\n\n return new Response(clientBody, { headers });\n }\n\n return new Response(transformed.body, { headers });\n } catch {\n // Fall through to the original file when the image binding cannot transform.\n }\n }\n\n const headers = new Headers();\n for (const header of [\n \"accept-ranges\",\n \"content-disposition\",\n \"content-encoding\",\n \"content-length\",\n \"content-range\",\n \"content-type\",\n \"etag\",\n \"last-modified\",\n ]) {\n const value = upstream.headers.get(header);\n if (value) headers.set(header, value);\n }\n if (contentType && !headers.has(\"Content-Type\")) {\n headers.set(\"Content-Type\", contentType);\n }\n headers.set(\"Cache-Control\", cacheControl(request));\n headers.set(\"X-Notion-Media-Branch\", \"proxied\");\n return new Response(upstream.body, { status: upstream.status, headers });\n}\n\nasync function loadMedia(request: Request) {\n const url = new URL(request.url);\n const ref = readRefFromPathname(url.pathname);\n if (!ref) return badRequest();\n const client = createNotionClient(await getNotionClientConfig());\n\n if (ref[0] === \"page\" && ref[1] && ref[2] === \"cover\") {\n const page = (await client.pages.retrieve({\n page_id: ref[1],\n })) as NotionPageLike;\n return serveFileObject(page.cover, request);\n }\n\n if (ref[0] === \"page\" && ref[1] && ref[2] === \"property\" && ref[3]) {\n const page = (await client.pages.retrieve({\n page_id: ref[1],\n })) as NotionPageLike;\n const propertyName = decodeURIComponent(ref.slice(3).join(\"/\"));\n return serveFileObject(\n pickFirstFilesPropertyValue(page.properties?.[propertyName]),\n request\n );\n }\n\n if (ref[0] === \"block\" && ref[1]) {\n const block = (await client.blocks.retrieve({\n block_id: ref[1],\n })) as NotionBlock;\n if (block.type === \"video\") {\n return forbidden();\n }\n return serveFileObject(fileObjectForMediaBlock(block), request, {\n redirectNotionHosted:\n block.type === \"audio\" ||\n block.type === \"pdf\" ||\n block.type === \"file\",\n });\n }\n\n return badRequest();\n}\n\nfunction readRefFromPathname(pathname: string): string[] | null {\n const prefix = \"/api/notion/media/\";\n if (!pathname.startsWith(prefix)) return null;\n const encoded = pathname.slice(prefix.length);\n if (!encoded) return null;\n return encoded.split(\"/\").map((part) => decodeURIComponent(part));\n}\n\n// Top-level alias for callers that prefer a flat signature (e.g. the\n// Next.js `app/api/.../route.ts` delegates).\nexport const GET = notionMediaRoute.GET;\n\n/**\n * Worker-friendly single-arg handler. Used by the Cloudflare Workers\n * bootstrap in `@notionx/core/worker`. Equivalent to\n * `notionMediaRoute.handle`.\n */\nexport async function notionMediaRouteHandle(\n request: Request\n): Promise<Response> {\n return notionMediaRoute.handle(request);\n}\n","// Edge cache keys for transformed Notion media responses.\n//\n// Page and API route caching is handled by vinext's CDN cache adapter\n// (vite.config.ts). These helpers remain for the media proxy route.\n\nconst CACHE_ORIGIN = \"https://cache.local\";\nconst CACHE_NAMESPACE = \"/__public-cache/v20260609a\";\nconst NOTION_MEDIA_R2_PREFIX = \"notion-media/v1\";\n\nexport type PublicMediaVariant = \"avif\" | \"webp\" | \"source\";\n\nfunction normalizePath(pathname: string) {\n if (pathname === \"/\") return \"/\";\n return pathname.endsWith(\"/\") ? pathname.slice(0, -1) : pathname;\n}\n\nexport function publicMediaVariantForAccept(accept: string): PublicMediaVariant {\n if (accept.includes(\"image/avif\")) return \"avif\";\n if (accept.includes(\"image/webp\")) return \"webp\";\n return \"source\";\n}\n\nexport function publicMediaCacheKeyForUrl(\n input: URL,\n variant: PublicMediaVariant\n) {\n const url = new URL(\n `${CACHE_NAMESPACE}${normalizePath(input.pathname)}${input.search}`,\n CACHE_ORIGIN\n );\n url.searchParams.set(\"__variant\", variant);\n url.searchParams.sort();\n return url.toString();\n}\n\nfunction keySegment(value: string) {\n return encodeURIComponent(value || \"none\");\n}\n\nexport function notionMediaR2KeyForUrl(\n input: URL,\n variant: PublicMediaVariant\n) {\n if (variant === \"source\") return null;\n\n const version = input.searchParams.get(\"v\");\n if (!version) return null;\n\n const path = normalizePath(input.pathname)\n .split(\"/\")\n .filter(Boolean)\n .map(keySegment)\n .join(\"/\");\n const width = input.searchParams.get(\"w\") ?? \"source\";\n const quality = input.searchParams.get(\"q\") ?? \"source\";\n\n return [\n NOTION_MEDIA_R2_PREFIX,\n variant,\n path,\n `v-${keySegment(version)}`,\n `w-${keySegment(width)}`,\n `q-${keySegment(quality)}.${variant}`,\n ].join(\"/\");\n}\n","import { Client } from \"@notionhq/client\";\nimport type { NotionClientConfig } from \"./config\";\n\nexport function createNotionClient(config: NotionClientConfig) {\n return new Client({\n auth: config.token,\n baseUrl: config.apiBaseUrl,\n notionVersion: \"2026-03-11\",\n });\n}\n","import type { NotionContentModelLike } from \"./types\";\n\ntype NotionEnv = {\n NOTION_TOKEN?: string;\n NOTION_DATA_SOURCE_ID?: string;\n NOTION_MOVIES_DATA_SOURCE_ID?: string;\n NOTION_API_BASE_URL?: string;\n NOTION_EDIT_BASE_URL?: string;\n NOTION_WEBHOOK_VERIFICATION_TOKEN?: string;\n [key: string]: string | undefined;\n};\n\nexport const DEFAULT_NOTION_MOVIES_DATA_SOURCE_ID =\n \"371dc62d-0738-8015-a601-000bc3944fcb\";\n\nexport type NotionClientConfig = {\n token: string;\n apiBaseUrl?: string;\n};\n\nexport type NotionConfig = {\n token: string;\n dataSourceId: string;\n apiBaseUrl?: string;\n editBaseUrl?: string;\n webhookVerificationToken?: string;\n};\n\nfunction readProcessEnv(): NotionEnv {\n const env: NotionEnv = {\n NOTION_TOKEN: process.env.NOTION_TOKEN,\n NOTION_DATA_SOURCE_ID: process.env.NOTION_DATA_SOURCE_ID,\n NOTION_MOVIES_DATA_SOURCE_ID: process.env.NOTION_MOVIES_DATA_SOURCE_ID,\n NOTION_API_BASE_URL: process.env.NOTION_API_BASE_URL,\n NOTION_EDIT_BASE_URL: process.env.NOTION_EDIT_BASE_URL,\n NOTION_WEBHOOK_VERIFICATION_TOKEN:\n process.env.NOTION_WEBHOOK_VERIFICATION_TOKEN,\n };\n\n for (const [key, value] of Object.entries(process.env)) {\n if (key.startsWith(\"NOTION_\") && typeof value === \"string\") {\n env[key] = value;\n }\n }\n\n return env;\n}\n\nasync function readWorkerEnv(): Promise<NotionEnv> {\n try {\n const mod = (await import(\n /* webpackIgnore: true */ \"cloudflare:workers\"\n )) as unknown as { env?: Record<string, unknown> };\n const env: NotionEnv = {};\n for (const [key, value] of Object.entries(mod.env ?? {})) {\n if (key.startsWith(\"NOTION_\") && typeof value === \"string\") {\n env[key] = value;\n }\n }\n return env;\n } catch {\n return {};\n }\n}\n\nfunction readString(source: NotionEnv, name: string): string | undefined {\n const value = String(source[name] ?? \"\").trim();\n return value || undefined;\n}\n\nfunction mergeEnv(...sources: NotionEnv[]): NotionEnv {\n const merged: NotionEnv = {};\n\n for (const source of sources) {\n for (const name of Object.keys(source)) {\n if (!name.startsWith(\"NOTION_\")) continue;\n const value = readString(source, name);\n if (value) merged[name] = value;\n }\n }\n\n return merged;\n}\n\nasync function readEnv(): Promise<NotionEnv> {\n const processEnv = readProcessEnv();\n return mergeEnv(await readWorkerEnv(), processEnv);\n}\n\nfunction readRequired(\n source: NotionEnv,\n name: string\n): string {\n const value = readString(source, name);\n if (!value) {\n throw new Error(`Missing required Notion env: ${name}`);\n }\n return value;\n}\n\nexport function getNotionEditBaseUrl(): string {\n return readString(readProcessEnv(), \"NOTION_EDIT_BASE_URL\") ?? \"https://www.notion.so\";\n}\n\nexport async function hasNotionConfig(): Promise<boolean> {\n const env = await readEnv();\n return Boolean(\n readString(env, \"NOTION_TOKEN\") && readString(env, \"NOTION_DATA_SOURCE_ID\")\n );\n}\n\nexport async function hasNotionMovieConfig(): Promise<boolean> {\n const env = await readEnv();\n return Boolean(readString(env, \"NOTION_TOKEN\"));\n}\n\nexport async function hasNotionModelConfig(\n model: NotionContentModelLike\n): Promise<boolean> {\n const env = await readEnv();\n return Boolean(\n readString(env, \"NOTION_TOKEN\") &&\n (readString(env, model.source.dataSourceEnv) ||\n model.source.defaultDataSourceId)\n );\n}\n\nexport async function getNotionClientConfig(): Promise<NotionClientConfig> {\n const env = await readEnv();\n return {\n token: readRequired(env, \"NOTION_TOKEN\"),\n apiBaseUrl: readString(env, \"NOTION_API_BASE_URL\"),\n };\n}\n\nexport async function getNotionConfig(): Promise<NotionConfig> {\n const env = await readEnv();\n return {\n token: readRequired(env, \"NOTION_TOKEN\"),\n dataSourceId: readRequired(env, \"NOTION_DATA_SOURCE_ID\"),\n apiBaseUrl: readString(env, \"NOTION_API_BASE_URL\"),\n editBaseUrl: readString(env, \"NOTION_EDIT_BASE_URL\"),\n webhookVerificationToken: readString(\n env,\n \"NOTION_WEBHOOK_VERIFICATION_TOKEN\"\n ),\n };\n}\n\nexport async function getNotionWebhookVerificationToken(): Promise<\n string | undefined\n> {\n const env = await readEnv();\n return readString(env, \"NOTION_WEBHOOK_VERIFICATION_TOKEN\");\n}\n\nexport async function getNotionMovieConfig(): Promise<NotionConfig> {\n const env = await readEnv();\n return {\n token: readRequired(env, \"NOTION_TOKEN\"),\n dataSourceId:\n readString(env, \"NOTION_MOVIES_DATA_SOURCE_ID\") ??\n DEFAULT_NOTION_MOVIES_DATA_SOURCE_ID,\n apiBaseUrl: readString(env, \"NOTION_API_BASE_URL\"),\n editBaseUrl: readString(env, \"NOTION_EDIT_BASE_URL\"),\n webhookVerificationToken: readString(\n env,\n \"NOTION_WEBHOOK_VERIFICATION_TOKEN\"\n ),\n };\n}\n\nexport async function getNotionConfigForModel(\n model: NotionContentModelLike\n): Promise<NotionConfig> {\n const env = await readEnv();\n const dataSourceId =\n readString(env, model.source.dataSourceEnv) ??\n model.source.defaultDataSourceId;\n if (!dataSourceId) {\n throw new Error(`Missing required Notion env: ${model.source.dataSourceEnv}`);\n }\n\n return {\n token: readRequired(env, model.source.tokenEnv),\n dataSourceId,\n apiBaseUrl: readString(env, \"NOTION_API_BASE_URL\"),\n editBaseUrl: readString(env, \"NOTION_EDIT_BASE_URL\"),\n webhookVerificationToken: readString(\n env,\n \"NOTION_WEBHOOK_VERIFICATION_TOKEN\"\n ),\n };\n}\n","import type { NotionBlock, NotionFileSource, NotionPageLike } from \"./types\";\n\ntype FileLike = {\n type?: string;\n external?: { url?: string };\n file?: { url?: string; expiry_time?: string };\n name?: string;\n};\n\nfunction stripLeadingSlash(value: string) {\n return value.startsWith(\"/\") ? value.slice(1) : value;\n}\n\nfunction encodePathPart(value: string) {\n return encodeURIComponent(stripLeadingSlash(value));\n}\n\nfunction appendVersion(path: string, version?: string) {\n const value = String(version ?? \"\").trim();\n if (!value) return path;\n return `${path}?${new URLSearchParams({ v: value })}`;\n}\n\nfunction blockVersion(block: NotionBlock): string | undefined {\n return typeof block.last_edited_time === \"string\"\n ? block.last_edited_time\n : undefined;\n}\n\nexport function notionPageCoverMediaPath(pageId: string): string {\n return `/api/notion/media/page/${encodePathPart(pageId)}/cover`;\n}\n\nexport function notionPagePropertyMediaPath(\n pageId: string,\n propertyName: string\n): string {\n return `/api/notion/media/page/${encodePathPart(pageId)}/property/${encodePathPart(propertyName)}`;\n}\n\nexport function notionBlockMediaPath(blockId: string): string {\n return `/api/notion/media/block/${encodePathPart(blockId)}`;\n}\n\nexport function normalizeNotionFileSource(input: unknown): NotionFileSource | null {\n const file = input as FileLike | null | undefined;\n if (!file || typeof file !== \"object\") return null;\n\n if (file.type === \"external\") {\n const url = String(file.external?.url ?? \"\").trim();\n return url ? { type: \"external\", url } : null;\n }\n\n if (file.type === \"file\") {\n const url = String(file.file?.url ?? \"\").trim();\n if (!url) return null;\n return {\n type: \"file\",\n url,\n expiryTime: String(file.file?.expiry_time ?? \"\").trim() || null,\n };\n }\n\n return null;\n}\n\nexport function resolveNotionFileUrl(input: unknown): string | null {\n return normalizeNotionFileSource(input)?.url ?? null;\n}\n\nexport function isNotionHostedFile(input: unknown): boolean {\n return normalizeNotionFileSource(input)?.type === \"file\";\n}\n\nexport function pickFirstFilesPropertyValue(property: unknown): unknown | null {\n const value = property as { type?: string; files?: unknown[] } | null | undefined;\n if (!value || value.type !== \"files\" || !Array.isArray(value.files)) {\n return null;\n }\n return value.files[0] ?? null;\n}\n\nexport function pickPageCoverFile(page: NotionPageLike): unknown | null {\n return page.cover ?? null;\n}\n\nexport function coverImageUrlForPage(\n page: NotionPageLike,\n coverPropertyName = \"Cover\"\n): string | null {\n const propertyFile = pickFirstFilesPropertyValue(\n page.properties?.[coverPropertyName]\n );\n const propertySource = normalizeNotionFileSource(propertyFile);\n if (propertySource) {\n return appendVersion(\n notionPagePropertyMediaPath(page.id, coverPropertyName),\n page.last_edited_time\n );\n }\n\n const coverSource = normalizeNotionFileSource(pickPageCoverFile(page));\n if (coverSource) {\n return appendVersion(notionPageCoverMediaPath(page.id), page.last_edited_time);\n }\n\n return null;\n}\n\nexport function fileObjectForMediaBlock(block: NotionBlock): unknown | null {\n const typed = block[block.type] as Record<string, unknown> | undefined;\n if (!typed || typeof typed !== \"object\") return null;\n\n if (\n block.type === \"image\" ||\n block.type === \"video\" ||\n block.type === \"file\" ||\n block.type === \"pdf\" ||\n block.type === \"audio\"\n ) {\n return typed;\n }\n\n return null;\n}\n\nexport function mediaUrlForBlock(block: NotionBlock): string | null {\n const source = normalizeNotionFileSource(fileObjectForMediaBlock(block));\n if (!source) return null;\n if (source.type === \"external\" && block.type !== \"image\") {\n return source.url;\n }\n return appendVersion(notionBlockMediaPath(block.id), blockVersion(block));\n}\n\nexport function firstImageUrlFromBlocks(blocks: NotionBlock[]): string | null {\n for (const block of blocks) {\n if (block.type === \"image\") {\n const imageUrl = mediaUrlForBlock(block);\n if (imageUrl) return imageUrl;\n }\n\n const nested = block.children?.length\n ? firstImageUrlFromBlocks(block.children)\n : null;\n if (nested) return nested;\n }\n\n return null;\n}\n\nexport function publicMediaBlockForApi(block: NotionBlock): NotionBlock {\n const value = block[block.type];\n const source = normalizeNotionFileSource(value);\n const children = block.children?.map(publicMediaBlockForApi);\n\n if (!source) {\n return children ? { ...block, children } : { ...block };\n }\n\n const path = appendVersion(notionBlockMediaPath(block.id), blockVersion(block));\n const publicValue =\n source.type === \"external\"\n ? block.type === \"image\"\n ? {\n ...(value as Record<string, unknown>),\n external: { url: path },\n }\n : value\n : {\n ...(value as Record<string, unknown>),\n file: {\n url: path,\n expiry_time: null,\n },\n };\n\n return {\n ...block,\n [block.type]: publicValue,\n ...(children ? { children } : {}),\n };\n}\n\nexport function gatedMediaBlockForApi(\n block: NotionBlock,\n options?: { movieId?: string }\n): NotionBlock {\n const value = block[block.type];\n const source = normalizeNotionFileSource(value);\n const children = block.children?.map((child) =>\n gatedMediaBlockForApi(child, options)\n );\n\n if (block.type !== \"video\" || !source) {\n const publicBlock = publicMediaBlockForApi(block);\n return children ? { ...publicBlock, children } : publicBlock;\n }\n\n const gatedValue: Record<string, unknown> = {\n ...(value as Record<string, unknown>),\n gated: true,\n access_url: options?.movieId\n ? `/api/movies/${encodePathPart(options.movieId)}/video/${encodePathPart(block.id)}`\n : null,\n };\n\n if (source.type === \"external\") {\n gatedValue.external = { url: null };\n } else {\n gatedValue.file = {\n url: null,\n expiry_time: null,\n };\n }\n\n return {\n ...block,\n video: gatedValue,\n ...(children ? { children } : {}),\n };\n}\n\nexport function isDirectVideoUrl(url: string): boolean {\n try {\n const parsed = new URL(url);\n return /\\.(mp4|webm|mov|m4v)(?:$|\\?)/i.test(parsed.pathname);\n } catch {\n return false;\n }\n}\n\nexport function videoEmbedUrl(url: string): string | null {\n try {\n const parsed = new URL(url);\n const host = parsed.hostname.replace(/^www\\./, \"\");\n\n if (host === \"youtube.com\" || host === \"m.youtube.com\") {\n const id = parsed.searchParams.get(\"v\");\n return id ? `https://www.youtube.com/embed/${encodeURIComponent(id)}` : null;\n }\n\n if (host === \"youtu.be\") {\n const id = parsed.pathname.split(\"/\").filter(Boolean)[0];\n return id ? `https://www.youtube.com/embed/${encodeURIComponent(id)}` : null;\n }\n\n if (host === \"youtube-nocookie.com\") {\n return parsed.toString();\n }\n\n if (host === \"vimeo.com\") {\n const id = parsed.pathname.split(\"/\").filter(Boolean)[0];\n return id ? `https://player.vimeo.com/video/${encodeURIComponent(id)}` : null;\n }\n\n if (host === \"player.vimeo.com\") {\n return parsed.toString();\n }\n } catch {\n return null;\n }\n\n return null;\n}\n","// lib/env.ts - 集中获取 Cloudflare bindings\n// 用 cloudflare:workers 模块(workerd 内置),作为平台 adapter 的绑定入口\n\n/// <reference types=\"@cloudflare/workers-types\" />\nimport { env } from \"cloudflare:workers\";\n\nexport type AppEnv = {\n DB: D1Database;\n ASSETS: Fetcher;\n IMAGES: ImagesBinding;\n ASSETS_BUCKET?: R2Bucket;\n CONTENT_CACHE?: KVNamespace;\n ADMIN_PASSWORD: string;\n ADMIN_EMAIL?: string;\n SITE_URL?: string;\n RESEND_API_KEY?: string;\n RESEND_FROM?: string;\n // Google OAuth 仍然兼容 Cloudflare Secret 作为兜底。\n // 实际生效值以 app_settings.google_client_id / google_client_secret 为准。\n GOOGLE_CLIENT_ID?: string;\n GOOGLE_CLIENT_SECRET?: string;\n /** Turnstile site key fallback when not stored in app_settings */\n TURNSTILE_SITE_KEY?: string;\n /** Turnstile secret — set via `wrangler secret put TURNSTILE_SECRET_KEY` */\n TURNSTILE_SECRET_KEY?: string;\n /** Notion integration token for the blog data source */\n NOTION_TOKEN?: string;\n /** Notion data source ID used by dataSources.query */\n NOTION_DATA_SOURCE_ID?: string;\n /** Notion data source ID for the public movie catalog */\n NOTION_MOVIES_DATA_SOURCE_ID?: string;\n /** Notion data source ID for localized movie copy */\n NOTION_MOVIE_TRANSLATIONS_DATA_SOURCE_ID?: string;\n /** Optional Notion API base URL for tests or proxies */\n NOTION_API_BASE_URL?: string;\n /** Optional Notion edit URL for admin handoff screens */\n NOTION_EDIT_BASE_URL?: string;\n /** Optional webhook verification token for Notion invalidation */\n NOTION_WEBHOOK_VERIFICATION_TOKEN?: string;\n};\n\n// 强制类型:vinext 把 env 类型放在 env.d.ts(interface VinextEnv extends Env),\n// 但 TS server 经常解析不到。运行时一定有 DB,类型断言保证编译通过。\nexport const workerEnv = env as unknown as AppEnv;\n","import type { AppEnv } from \"../util/env\";\n\nexport type PlatformBindingEnv = Pick<\n AppEnv,\n \"ASSETS_BUCKET\" | \"CONTENT_CACHE\" | \"DB\" | \"IMAGES\"\n>;\n\nexport type StoredObject = {\n body: ReadableStream;\n size: number;\n etag?: string;\n contentType?: string;\n};\n\nexport type ObjectStoragePutOptions = {\n contentType?: string;\n cacheControl?: string;\n metadata?: Record<string, string>;\n};\n\nexport type ObjectStorageListItem = {\n key: string;\n size: number;\n uploaded: Date;\n};\n\nexport type ObjectStorageAdapter = {\n kind: \"r2\";\n get(key: string): Promise<StoredObject | null>;\n put(\n key: string,\n value: ReadableStream | ArrayBuffer | ArrayBufferView | string | Blob,\n options?: ObjectStoragePutOptions\n ): Promise<void>;\n delete(key: string): Promise<void>;\n list(\n options?: { prefix?: string; limit?: number }\n ): Promise<ObjectStorageListItem[]>;\n};\n\nexport type ImageTransformOptions = {\n width?: number;\n format: \"image/avif\" | \"image/webp\";\n quality: number;\n};\n\nexport type ImageTransformResult = {\n body: ReadableStream;\n contentType: string;\n response(): Response;\n};\n\nexport type ImageTransformerAdapter = {\n kind: \"cloudflare-images\" | \"external\";\n transform(\n body: ReadableStream,\n options: ImageTransformOptions\n ): Promise<ImageTransformResult>;\n};\n\nexport type PublicCacheAdapter = {\n kind: \"cloudflare-cache\" | \"noop\" | \"external\";\n match(key: string): Promise<Response | null>;\n put(key: string, response: Response): Promise<void>;\n delete(key: string): Promise<boolean>;\n};\n\nexport type KeyValueCacheGetOptions = {\n cacheTtl?: number;\n};\n\nexport type KeyValueCachePutOptions = {\n expirationTtl?: number;\n metadata?: Record<string, string | number | boolean | null>;\n};\n\nexport type KeyValueCacheListOptions = {\n prefix?: string;\n limit?: number;\n cursor?: string;\n};\n\nexport type KeyValueCacheListResult = {\n keys: Array<{ name: string }>;\n cursor?: string;\n listComplete: boolean;\n};\n\nexport type KeyValueCacheAdapter = {\n kind: \"workers-kv\" | \"noop\" | \"external\";\n get<T = unknown>(\n key: string,\n options?: KeyValueCacheGetOptions\n ): Promise<T | null>;\n put<T = unknown>(\n key: string,\n value: T,\n options?: KeyValueCachePutOptions\n ): Promise<void>;\n delete(key: string): Promise<void>;\n list(options?: KeyValueCacheListOptions): Promise<KeyValueCacheListResult>;\n};\n\nexport type SqlValue = string | number | boolean | null;\n\nexport type SqlResult<T = Record<string, unknown>> = {\n results?: T[];\n success?: boolean;\n meta?: {\n changes?: number;\n duration?: number;\n last_row_id?: number;\n rows_read?: number;\n rows_written?: number;\n [key: string]: unknown;\n };\n};\n\nexport type SqlPreparedStatement = {\n bind(...values: SqlValue[]): SqlPreparedStatement;\n all<T = Record<string, unknown>>(): Promise<SqlResult<T>>;\n first<T = Record<string, unknown>>(columnName?: string): Promise<T | null>;\n run<T = Record<string, unknown>>(): Promise<SqlResult<T>>;\n};\n\nexport type SqlDatabaseAdapter = {\n kind: \"d1\";\n prepare(query: string): SqlPreparedStatement;\n batch<T = Record<string, unknown>>(\n statements: SqlPreparedStatement[]\n ): Promise<SqlResult<T>[]>;\n};\n\nexport type RuntimePlatform = {\n id: \"cloudflare-workers\";\n database: SqlDatabaseAdapter | null;\n objectStorage: ObjectStorageAdapter | null;\n imageTransformer: ImageTransformerAdapter | null;\n publicCache: PublicCacheAdapter | null;\n keyValueCache: KeyValueCacheAdapter | null;\n};\n\ntype CloudflareCacheLike = Pick<Cache, \"match\" | \"put\" | \"delete\">;\ntype CloudflareKvLike = Pick<KVNamespace, \"get\" | \"put\" | \"delete\" | \"list\">;\n\nfunction cacheRequestForKey(key: string) {\n return new Request(key, { method: \"GET\" });\n}\n\nexport function createCloudflarePublicCacheAdapter(\n cache: CloudflareCacheLike\n): PublicCacheAdapter {\n return {\n kind: \"cloudflare-cache\",\n async match(key) {\n return (await cache.match(cacheRequestForKey(key))) ?? null;\n },\n put(key, response) {\n return cache.put(cacheRequestForKey(key), response);\n },\n delete(key) {\n return cache.delete(cacheRequestForKey(key));\n },\n };\n}\n\nexport function createNoopPublicCacheAdapter(kind: \"noop\" = \"noop\"): PublicCacheAdapter {\n return {\n kind,\n async match() {\n return null;\n },\n async put() {},\n async delete() {\n return false;\n },\n };\n}\n\nexport function createCloudflareKeyValueCacheAdapter(\n namespace: CloudflareKvLike\n): KeyValueCacheAdapter {\n return {\n kind: \"workers-kv\",\n async get<T = unknown>(\n key: string,\n options?: KeyValueCacheGetOptions\n ): Promise<T | null> {\n return (await namespace.get(key, {\n type: \"json\",\n cacheTtl: options?.cacheTtl,\n })) as T | null;\n },\n async put(key, value, options) {\n await namespace.put(key, JSON.stringify(value), {\n expirationTtl: options?.expirationTtl,\n metadata: options?.metadata,\n });\n },\n delete(key) {\n return namespace.delete(key);\n },\n async list(options) {\n const result = await namespace.list({\n prefix: options?.prefix,\n limit: options?.limit,\n cursor: options?.cursor,\n });\n return {\n keys: result.keys.map((key) => ({ name: key.name })),\n cursor: result.list_complete ? undefined : result.cursor,\n listComplete: result.list_complete,\n };\n },\n };\n}\n\nexport function createNoopKeyValueCacheAdapter(\n kind: \"noop\" = \"noop\"\n): KeyValueCacheAdapter {\n return {\n kind,\n async get() {\n return null;\n },\n async put() {},\n async delete() {},\n async list() {\n return { keys: [], listComplete: true };\n },\n };\n}\n\nfunction r2ObjectToStoredObject(object: R2ObjectBody): StoredObject {\n return {\n body: object.body,\n size: object.size,\n etag: object.etag,\n contentType: object.httpMetadata?.contentType,\n };\n}\n\nexport function createCloudflareRuntimePlatform(\n env: PlatformBindingEnv,\n options?: { publicCache?: CloudflareCacheLike | null }\n): RuntimePlatform {\n const database: SqlDatabaseAdapter | null = env.DB\n ? ({\n kind: \"d1\",\n prepare(query: string) {\n return env.DB.prepare(query) as unknown as SqlPreparedStatement;\n },\n async batch(statements: SqlPreparedStatement[]) {\n return (await env.DB.batch(\n statements as unknown as D1PreparedStatement[]\n )) as unknown as SqlResult<Record<string, unknown>>[];\n },\n } as unknown as SqlDatabaseAdapter)\n : null;\n\n const objectStorage: ObjectStorageAdapter | null = env.ASSETS_BUCKET\n ? {\n kind: \"r2\",\n async get(key) {\n const object = await env.ASSETS_BUCKET?.get(key);\n return object ? r2ObjectToStoredObject(object) : null;\n },\n async put(key, value, options) {\n await env.ASSETS_BUCKET?.put(key, value, {\n httpMetadata: {\n contentType: options?.contentType,\n cacheControl: options?.cacheControl,\n },\n customMetadata: options?.metadata,\n });\n },\n async delete(key) {\n await env.ASSETS_BUCKET?.delete(key);\n },\n async list(options) {\n const listed = await env.ASSETS_BUCKET?.list({\n prefix: options?.prefix,\n limit: options?.limit,\n });\n return (\n listed?.objects.map((object) => ({\n key: object.key,\n size: object.size,\n uploaded: object.uploaded,\n })) ?? []\n );\n },\n }\n : null;\n\n const imageTransformer: ImageTransformerAdapter | null = env.IMAGES\n ? {\n kind: \"cloudflare-images\",\n async transform(body, options) {\n const result = await env.IMAGES.input(body)\n .transform(options.width ? { width: options.width } : {})\n .output({\n format: options.format,\n quality: options.quality,\n });\n return {\n body: result.image(),\n contentType: result.contentType(),\n response: () => result.response(),\n };\n },\n }\n : null;\n\n const keyValueCache: KeyValueCacheAdapter | null = env.CONTENT_CACHE\n ? createCloudflareKeyValueCacheAdapter(env.CONTENT_CACHE)\n : null;\n\n return {\n id: \"cloudflare-workers\",\n database,\n objectStorage,\n imageTransformer,\n keyValueCache,\n publicCache: options?.publicCache\n ? createCloudflarePublicCacheAdapter(options.publicCache)\n : null,\n };\n}\n","import { workerEnv } from \"../util/env\";\nimport {\n createCloudflarePublicCacheAdapter,\n createCloudflareRuntimePlatform,\n} from \"./runtime\";\n\nfunction getDefaultCloudflareCache() {\n const globalWithCaches = globalThis as typeof globalThis & {\n caches?: CacheStorage & { default?: Cache };\n };\n return globalWithCaches.caches?.default ?? null;\n}\n\nexport function getRuntimePlatform() {\n return createCloudflareRuntimePlatform(workerEnv, {\n publicCache: getDefaultCloudflareCache(),\n });\n}\n\nexport function getDatabase() {\n const database = getRuntimePlatform().database;\n if (!database) {\n throw new Error(\"SQL database binding not configured\");\n }\n return database;\n}\n\nexport function getPublicCache() {\n const cache = getDefaultCloudflareCache();\n if (!cache) {\n throw new Error(\"Cloudflare cache binding not configured\");\n }\n return createCloudflarePublicCacheAdapter(cache);\n}\n","import {\n getPublicCache as getCloudflarePublicCache,\n getRuntimePlatform as getCloudflareRuntimePlatform,\n} from \"./cloudflare-runtime\";\nimport { currentRuntimeId } from \"./selection\";\n\nexport function getRuntimePlatform() {\n return getCloudflareRuntimePlatform();\n}\n\nexport function getDatabase() {\n const platform = getRuntimePlatform();\n const database = platform.database;\n if (!database) {\n throw new Error(`SQL database adapter not configured for ${platform.id}`);\n }\n return database;\n}\n\nexport function getPublicCache() {\n return getCloudflarePublicCache();\n}\n\nexport function getKeyValueCache() {\n return getRuntimePlatform().keyValueCache;\n}\n\nexport const runtimeSelection = {\n currentRuntimeId,\n};\n"],"mappings":";AAcA,SAAS,oBAAoB;AAC7B,SAAS,kCAAkC;;;ACV3C,IAAM,eAAe;AACrB,IAAM,kBAAkB;AACxB,IAAM,yBAAyB;AAI/B,SAAS,cAAc,UAAkB;AACvC,MAAI,aAAa,IAAK,QAAO;AAC7B,SAAO,SAAS,SAAS,GAAG,IAAI,SAAS,MAAM,GAAG,EAAE,IAAI;AAC1D;AAEO,SAAS,4BAA4B,QAAoC;AAC9E,MAAI,OAAO,SAAS,YAAY,EAAG,QAAO;AAC1C,MAAI,OAAO,SAAS,YAAY,EAAG,QAAO;AAC1C,SAAO;AACT;AAEO,SAAS,0BACd,OACA,SACA;AACA,QAAM,MAAM,IAAI;AAAA,IACd,GAAG,eAAe,GAAG,cAAc,MAAM,QAAQ,CAAC,GAAG,MAAM,MAAM;AAAA,IACjE;AAAA,EACF;AACA,MAAI,aAAa,IAAI,aAAa,OAAO;AACzC,MAAI,aAAa,KAAK;AACtB,SAAO,IAAI,SAAS;AACtB;AAEA,SAAS,WAAW,OAAe;AACjC,SAAO,mBAAmB,SAAS,MAAM;AAC3C;AAEO,SAAS,uBACd,OACA,SACA;AACA,MAAI,YAAY,SAAU,QAAO;AAEjC,QAAM,UAAU,MAAM,aAAa,IAAI,GAAG;AAC1C,MAAI,CAAC,QAAS,QAAO;AAErB,QAAM,OAAO,cAAc,MAAM,QAAQ,EACtC,MAAM,GAAG,EACT,OAAO,OAAO,EACd,IAAI,UAAU,EACd,KAAK,GAAG;AACX,QAAM,QAAQ,MAAM,aAAa,IAAI,GAAG,KAAK;AAC7C,QAAM,UAAU,MAAM,aAAa,IAAI,GAAG,KAAK;AAE/C,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA;AAAA,IACA,KAAK,WAAW,OAAO,CAAC;AAAA,IACxB,KAAK,WAAW,KAAK,CAAC;AAAA,IACtB,KAAK,WAAW,OAAO,CAAC,IAAI,OAAO;AAAA,EACrC,EAAE,KAAK,GAAG;AACZ;;;AChEA,SAAS,cAAc;AAGhB,SAAS,mBAAmB,QAA4B;AAC7D,SAAO,IAAI,OAAO;AAAA,IAChB,MAAM,OAAO;AAAA,IACb,SAAS,OAAO;AAAA,IAChB,eAAe;AAAA,EACjB,CAAC;AACH;;;ACmBA,SAAS,iBAA4B;AACnC,QAAMA,OAAiB;AAAA,IACrB,cAAc,QAAQ,IAAI;AAAA,IAC1B,uBAAuB,QAAQ,IAAI;AAAA,IACnC,8BAA8B,QAAQ,IAAI;AAAA,IAC1C,qBAAqB,QAAQ,IAAI;AAAA,IACjC,sBAAsB,QAAQ,IAAI;AAAA,IAClC,mCACE,QAAQ,IAAI;AAAA,EAChB;AAEA,aAAW,CAAC,KAAK,KAAK,KAAK,OAAO,QAAQ,QAAQ,GAAG,GAAG;AACtD,QAAI,IAAI,WAAW,SAAS,KAAK,OAAO,UAAU,UAAU;AAC1D,MAAAA,KAAI,GAAG,IAAI;AAAA,IACb;AAAA,EACF;AAEA,SAAOA;AACT;AAEA,eAAe,gBAAoC;AACjD,MAAI;AACF,UAAM,MAAO,MAAM;AAAA;AAAA,MACS;AAAA,IAC5B;AACA,UAAMA,OAAiB,CAAC;AACxB,eAAW,CAAC,KAAK,KAAK,KAAK,OAAO,QAAQ,IAAI,OAAO,CAAC,CAAC,GAAG;AACxD,UAAI,IAAI,WAAW,SAAS,KAAK,OAAO,UAAU,UAAU;AAC1D,QAAAA,KAAI,GAAG,IAAI;AAAA,MACb;AAAA,IACF;AACA,WAAOA;AAAA,EACT,QAAQ;AACN,WAAO,CAAC;AAAA,EACV;AACF;AAEA,SAAS,WAAW,QAAmB,MAAkC;AACvE,QAAM,QAAQ,OAAO,OAAO,IAAI,KAAK,EAAE,EAAE,KAAK;AAC9C,SAAO,SAAS;AAClB;AAEA,SAAS,YAAY,SAAiC;AACpD,QAAM,SAAoB,CAAC;AAE3B,aAAW,UAAU,SAAS;AAC5B,eAAW,QAAQ,OAAO,KAAK,MAAM,GAAG;AACtC,UAAI,CAAC,KAAK,WAAW,SAAS,EAAG;AACjC,YAAM,QAAQ,WAAW,QAAQ,IAAI;AACrC,UAAI,MAAO,QAAO,IAAI,IAAI;AAAA,IAC5B;AAAA,EACF;AAEA,SAAO;AACT;AAEA,eAAe,UAA8B;AAC3C,QAAM,aAAa,eAAe;AAClC,SAAO,SAAS,MAAM,cAAc,GAAG,UAAU;AACnD;AAEA,SAAS,aACP,QACA,MACQ;AACR,QAAM,QAAQ,WAAW,QAAQ,IAAI;AACrC,MAAI,CAAC,OAAO;AACV,UAAM,IAAI,MAAM,gCAAgC,IAAI,EAAE;AAAA,EACxD;AACA,SAAO;AACT;AA6BA,eAAsB,wBAAqD;AACzE,QAAMC,OAAM,MAAM,QAAQ;AAC1B,SAAO;AAAA,IACL,OAAO,aAAaA,MAAK,cAAc;AAAA,IACvC,YAAY,WAAWA,MAAK,qBAAqB;AAAA,EACnD;AACF;;;ACzFO,SAAS,0BAA0B,OAAyC;AACjF,QAAM,OAAO;AACb,MAAI,CAAC,QAAQ,OAAO,SAAS,SAAU,QAAO;AAE9C,MAAI,KAAK,SAAS,YAAY;AAC5B,UAAM,MAAM,OAAO,KAAK,UAAU,OAAO,EAAE,EAAE,KAAK;AAClD,WAAO,MAAM,EAAE,MAAM,YAAY,IAAI,IAAI;AAAA,EAC3C;AAEA,MAAI,KAAK,SAAS,QAAQ;AACxB,UAAM,MAAM,OAAO,KAAK,MAAM,OAAO,EAAE,EAAE,KAAK;AAC9C,QAAI,CAAC,IAAK,QAAO;AACjB,WAAO;AAAA,MACL,MAAM;AAAA,MACN;AAAA,MACA,YAAY,OAAO,KAAK,MAAM,eAAe,EAAE,EAAE,KAAK,KAAK;AAAA,IAC7D;AAAA,EACF;AAEA,SAAO;AACT;AAUO,SAAS,4BAA4B,UAAmC;AAC7E,QAAM,QAAQ;AACd,MAAI,CAAC,SAAS,MAAM,SAAS,WAAW,CAAC,MAAM,QAAQ,MAAM,KAAK,GAAG;AACnE,WAAO;AAAA,EACT;AACA,SAAO,MAAM,MAAM,CAAC,KAAK;AAC3B;AA6BO,SAAS,wBAAwB,OAAoC;AAC1E,QAAM,QAAQ,MAAM,MAAM,IAAI;AAC9B,MAAI,CAAC,SAAS,OAAO,UAAU,SAAU,QAAO;AAEhD,MACE,MAAM,SAAS,WACf,MAAM,SAAS,WACf,MAAM,SAAS,UACf,MAAM,SAAS,SACf,MAAM,SAAS,SACf;AACA,WAAO;AAAA,EACT;AAEA,SAAO;AACT;;;ACxHA,SAAS,WAAW;AAuCb,IAAM,YAAY;;;ACsGzB,SAAS,mBAAmB,KAAa;AACvC,SAAO,IAAI,QAAQ,KAAK,EAAE,QAAQ,MAAM,CAAC;AAC3C;AAEO,SAAS,mCACd,OACoB;AACpB,SAAO;AAAA,IACL,MAAM;AAAA,IACN,MAAM,MAAM,KAAK;AACf,aAAQ,MAAM,MAAM,MAAM,mBAAmB,GAAG,CAAC,KAAM;AAAA,IACzD;AAAA,IACA,IAAI,KAAK,UAAU;AACjB,aAAO,MAAM,IAAI,mBAAmB,GAAG,GAAG,QAAQ;AAAA,IACpD;AAAA,IACA,OAAO,KAAK;AACV,aAAO,MAAM,OAAO,mBAAmB,GAAG,CAAC;AAAA,IAC7C;AAAA,EACF;AACF;AAeO,SAAS,qCACd,WACsB;AACtB,SAAO;AAAA,IACL,MAAM;AAAA,IACN,MAAM,IACJ,KACA,SACmB;AACnB,aAAQ,MAAM,UAAU,IAAI,KAAK;AAAA,QAC/B,MAAM;AAAA,QACN,UAAU,SAAS;AAAA,MACrB,CAAC;AAAA,IACH;AAAA,IACA,MAAM,IAAI,KAAK,OAAO,SAAS;AAC7B,YAAM,UAAU,IAAI,KAAK,KAAK,UAAU,KAAK,GAAG;AAAA,QAC9C,eAAe,SAAS;AAAA,QACxB,UAAU,SAAS;AAAA,MACrB,CAAC;AAAA,IACH;AAAA,IACA,OAAO,KAAK;AACV,aAAO,UAAU,OAAO,GAAG;AAAA,IAC7B;AAAA,IACA,MAAM,KAAK,SAAS;AAClB,YAAM,SAAS,MAAM,UAAU,KAAK;AAAA,QAClC,QAAQ,SAAS;AAAA,QACjB,OAAO,SAAS;AAAA,QAChB,QAAQ,SAAS;AAAA,MACnB,CAAC;AACD,aAAO;AAAA,QACL,MAAM,OAAO,KAAK,IAAI,CAAC,SAAS,EAAE,MAAM,IAAI,KAAK,EAAE;AAAA,QACnD,QAAQ,OAAO,gBAAgB,SAAY,OAAO;AAAA,QAClD,cAAc,OAAO;AAAA,MACvB;AAAA,IACF;AAAA,EACF;AACF;AAkBA,SAAS,uBAAuB,QAAoC;AAClE,SAAO;AAAA,IACL,MAAM,OAAO;AAAA,IACb,MAAM,OAAO;AAAA,IACb,MAAM,OAAO;AAAA,IACb,aAAa,OAAO,cAAc;AAAA,EACpC;AACF;AAEO,SAAS,gCACdC,MACA,SACiB;AACjB,QAAM,WAAsCA,KAAI,KAC3C;AAAA,IACC,MAAM;AAAA,IACN,QAAQ,OAAe;AACrB,aAAOA,KAAI,GAAG,QAAQ,KAAK;AAAA,IAC7B;AAAA,IACA,MAAM,MAAM,YAAoC;AAC9C,aAAQ,MAAMA,KAAI,GAAG;AAAA,QACnB;AAAA,MACF;AAAA,IACF;AAAA,EACF,IACA;AAEJ,QAAM,gBAA6CA,KAAI,gBACnD;AAAA,IACE,MAAM;AAAA,IACN,MAAM,IAAI,KAAK;AACb,YAAM,SAAS,MAAMA,KAAI,eAAe,IAAI,GAAG;AAC/C,aAAO,SAAS,uBAAuB,MAAM,IAAI;AAAA,IACnD;AAAA,IACA,MAAM,IAAI,KAAK,OAAOC,UAAS;AAC7B,YAAMD,KAAI,eAAe,IAAI,KAAK,OAAO;AAAA,QACvC,cAAc;AAAA,UACZ,aAAaC,UAAS;AAAA,UACtB,cAAcA,UAAS;AAAA,QACzB;AAAA,QACA,gBAAgBA,UAAS;AAAA,MAC3B,CAAC;AAAA,IACH;AAAA,IACA,MAAM,OAAO,KAAK;AAChB,YAAMD,KAAI,eAAe,OAAO,GAAG;AAAA,IACrC;AAAA,IACA,MAAM,KAAKC,UAAS;AAClB,YAAM,SAAS,MAAMD,KAAI,eAAe,KAAK;AAAA,QAC3C,QAAQC,UAAS;AAAA,QACjB,OAAOA,UAAS;AAAA,MAClB,CAAC;AACD,aACE,QAAQ,QAAQ,IAAI,CAAC,YAAY;AAAA,QAC/B,KAAK,OAAO;AAAA,QACZ,MAAM,OAAO;AAAA,QACb,UAAU,OAAO;AAAA,MACnB,EAAE,KAAK,CAAC;AAAA,IAEZ;AAAA,EACF,IACA;AAEJ,QAAM,mBAAmDD,KAAI,SACzD;AAAA,IACE,MAAM;AAAA,IACN,MAAM,UAAU,MAAMC,UAAS;AAC7B,YAAM,SAAS,MAAMD,KAAI,OAAO,MAAM,IAAI,EACvC,UAAUC,SAAQ,QAAQ,EAAE,OAAOA,SAAQ,MAAM,IAAI,CAAC,CAAC,EACvD,OAAO;AAAA,QACN,QAAQA,SAAQ;AAAA,QAChB,SAASA,SAAQ;AAAA,MACnB,CAAC;AACH,aAAO;AAAA,QACL,MAAM,OAAO,MAAM;AAAA,QACnB,aAAa,OAAO,YAAY;AAAA,QAChC,UAAU,MAAM,OAAO,SAAS;AAAA,MAClC;AAAA,IACF;AAAA,EACF,IACA;AAEJ,QAAM,gBAA6CD,KAAI,gBACnD,qCAAqCA,KAAI,aAAa,IACtD;AAEJ,SAAO;AAAA,IACL,IAAI;AAAA,IACJ;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA,aAAa,SAAS,cAClB,mCAAmC,QAAQ,WAAW,IACtD;AAAA,EACN;AACF;;;AClUA,SAAS,4BAA4B;AACnC,QAAM,mBAAmB;AAGzB,SAAO,iBAAiB,QAAQ,WAAW;AAC7C;AAEO,SAAS,qBAAqB;AACnC,SAAO,gCAAgC,WAAW;AAAA,IAChD,aAAa,0BAA0B;AAAA,EACzC,CAAC;AACH;AAUO,SAAS,iBAAiB;AAC/B,QAAM,QAAQ,0BAA0B;AACxC,MAAI,CAAC,OAAO;AACV,UAAM,IAAI,MAAM,yCAAyC;AAAA,EAC3D;AACA,SAAO,mCAAmC,KAAK;AACjD;;;AC3BO,SAASE,sBAAqB;AACnC,SAAO,mBAA6B;AACtC;AAWO,SAASC,kBAAiB;AAC/B,SAAO,eAAyB;AAClC;;;ARcO,IAAM,UAAU;AAEvB,IAAM,gBAAgB;AACtB,IAAM,YAAY;AAClB,IAAM,kBAAkB;AACxB,IAAM,cAAc;AACpB,IAAM,cAAc;AACpB,IAAM,mBAAmB,oBAAI,IAAI,CAAC,GAAG,CAAC;AAM/B,IAAM,mBAAmB;AAAA,EAC9B,MAAM,IAAI,UAAmB,OAAc;AACzC,UAAM,EAAE,IAAI,IAAI,MAAM,MAAM;AAC5B,QAAI,IAAI,KAAK,CAAC,SAAS,SAAS,QAAQ,KAAK,SAAS,GAAG,CAAC,GAAG;AAC3D,aAAO,WAAW;AAAA,IACpB;AACA,UAAM,MAAM,IAAI,IAAI,SAAS,GAAG;AAChC,QAAI,WAAW,qBAAqB,GAAG;AACvC,WAAO,iBAAiB,OAAO,IAAI,QAAQ,IAAI,SAAS,GAAG,QAAQ,CAAC;AAAA,EACtE;AAAA,EACA,MAAM,OAAO,SAAqC;AAChD,UAAM,UAAU;AAAA,MACd,QAAQ,QAAQ,IAAI,QAAQ,KAAK;AAAA,IACnC;AACA,WAAO,mBAAmB,SAAS,SAAS,MAAM,UAAU,OAAO,CAAC;AAAA,EACtE;AACF;AAEA,SAAS,qBAAqB,KAAe;AAC3C,SAAO,qBAAqB,IAAI,IAAI,kBAAkB,EAAE,KAAK,GAAG,CAAC;AACnE;AAEA,SAAS,SACP,OACA,KACA,KACA,UACA;AACA,QAAM,SAAS,OAAO,SAAS,SAAS,IAAI,EAAE;AAC9C,MAAI,CAAC,OAAO,SAAS,MAAM,EAAG,QAAO;AACrC,SAAO,KAAK,IAAI,KAAK,KAAK,IAAI,KAAK,MAAM,CAAC;AAC5C;AAEA,SAAS,aAAa,SAAkB;AACtC,QAAM,MAAM,IAAI,IAAI,QAAQ,GAAG;AAC/B,MAAI,IAAI,aAAa,IAAI,GAAG,GAAG;AAC7B,WAAO;AAAA,EACT;AAEA,SAAO;AACT;AAEA,SAAS,iBAAiB,SAAkB;AAC1C,MAAI,QAAQ,WAAW,MAAO,QAAO;AACrC,SAAO,CAAC,QAAQ,QAAQ,IAAI,OAAO;AACrC;AAEA,SAAS,kBACP,UACA,SACA,OACA,SACA;AACA,QAAM,UAAU,IAAI,QAAQ,SAAS,OAAO;AAC5C,UAAQ,IAAI,iBAAiB,aAAa,OAAO,CAAC;AAClD,UAAQ,IAAI,wBAAwB,KAAK;AACzC,MAAI,QAAS,SAAQ,IAAI,qBAAqB,OAAO;AACrD,SAAO;AACT;AAEA,eAAe,oBACb,SACA,SACA;AACA,QAAM,MAAM,IAAI,IAAI,QAAQ,GAAG;AAC/B,QAAM,QAAQ,uBAAuB,KAAK,OAAO;AACjD,QAAM,UAAUC,oBAAmB,EAAE;AACrC,MAAI,CAAC,SAAS,CAAC,QAAS,QAAO;AAE/B,QAAM,SAAS,MAAM,QAAQ,IAAI,KAAK;AACtC,MAAI,CAAC,QAAQ,KAAM,QAAO;AAE1B,QAAM,cACJ,OAAO,gBAAgB,YAAY,SAAS,eAAe;AAC7D,QAAM,UAAU,IAAI,QAAQ;AAC5B,UAAQ,IAAI,gBAAgB,WAAW;AACvC,UAAQ,IAAI,iBAAiB,aAAa,OAAO,CAAC;AAClD,UAAQ,IAAI,QAAQ,QAAQ;AAC5B,UAAQ,IAAI,yBAAyB,IAAI;AACzC,UAAQ,IAAI,qBAAqB,KAAK;AACtC,MAAI,OAAO,KAAM,SAAQ,IAAI,QAAQ,OAAO,IAAI;AAEhD,SAAO,IAAI,SAAS,OAAO,MAAM,EAAE,QAAQ,CAAC;AAC9C;AAEA,eAAe,mBACb,SACA,SACA,MACA;AACA,MAAI,CAAC,iBAAiB,OAAO,GAAG;AAC9B,UAAMC,YAAW,MAAM,KAAK;AAC5B,WAAO,IAAI,SAASA,UAAS,MAAM;AAAA,MACjC,QAAQA,UAAS;AAAA,MACjB,SAAS,kBAAkBA,WAAU,SAAS,QAAQ;AAAA,IACxD,CAAC;AAAA,EACH;AAEA,QAAM,MAAM,IAAI,IAAI,QAAQ,GAAG;AAC/B,QAAM,QAAQC,gBAAe;AAC7B,QAAM,WAAW,0BAA0B,KAAK,OAAO;AACvD,QAAM,SAAS,MAAM,MAAM,MAAM,QAAQ;AACzC,MAAI,QAAQ;AACV,WAAO,IAAI,SAAS,OAAO,MAAM;AAAA,MAC/B,QAAQ,OAAO;AAAA,MACf,SAAS,kBAAkB,QAAQ,SAAS,KAAK;AAAA,IACnD,CAAC;AAAA,EACH;AAEA,QAAM,aAAa,MAAM,oBAAoB,SAAS,OAAO;AAC7D,QAAM,WAAW,cAAe,MAAM,KAAK;AAC3C,QAAM,UAAU,kBAAkB,UAAU,SAAS,MAAM;AAC3D,QAAM,SAAS,IAAI,SAAS,SAAS,MAAM;AAAA,IACzC,QAAQ,SAAS;AAAA,IACjB;AAAA,EACF,CAAC;AAED,MAAI,iBAAiB,IAAI,SAAS,MAAM,GAAG;AACzC,UAAM,UAAU,OAAO,MAAM;AAC7B,+BAA2B,GAAG,UAAU,MAAM,IAAI,UAAU,OAAO,CAAC;AAAA,EACtE;AAEA,SAAO;AACT;AAEA,SAAS,cAAc,KAAa;AAClC,QAAM,WAAW,aAAa,SAAS,KAAK,GAAG;AAC/C,WAAS,QAAQ;AAAA,IACf;AAAA,IACA;AAAA,EACF;AACA,SAAO;AACT;AAEA,SAAS,WAAW;AAClB,SAAO,aAAa,KAAK,EAAE,OAAO,YAAY,GAAG,EAAE,QAAQ,IAAI,CAAC;AAClE;AAEA,SAAS,aAAa;AACpB,SAAO,aAAa,KAAK,EAAE,OAAO,oBAAoB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAC1E;AAEA,SAAS,YAAY;AACnB,SAAO,aAAa,KAAK,EAAE,OAAO,YAAY,GAAG,EAAE,QAAQ,IAAI,CAAC;AAClE;AAEA,eAAe,gBACb,OACA,SACA,SACA;AACA,QAAM,SAAS,0BAA0B,KAAK;AAC9C,MAAI,CAAC,OAAQ,QAAO,SAAS;AAC7B,MAAI,SAAS,qBAAsB,QAAO,cAAc,OAAO,GAAG;AAClE,SAAO,sBAAsB,OAAO,KAAK,OAAO;AAClD;AAEA,eAAe,sBAAsB,KAAa,SAAkB;AAClE,QAAM,QAAQ,QAAQ,QAAQ,IAAI,OAAO;AACzC,QAAM,UAAU,QAAQ,QAAQ,IAAI,UAAU;AAC9C,QAAM,kBAAkB,IAAI,QAAQ;AAAA,IAClC,QAAQ,QAAQ,QAAQ,IAAI,QAAQ,KAAK;AAAA,EAC3C,CAAC;AACD,MAAI,MAAO,iBAAgB,IAAI,SAAS,KAAK;AAC7C,MAAI,QAAS,iBAAgB,IAAI,YAAY,OAAO;AAEpD,QAAM,WAAW,MAAM,MAAM,KAAK;AAAA,IAChC,SAAS;AAAA,EACX,CAAC;AACD,MAAK,CAAC,SAAS,MAAM,SAAS,WAAW,OAAQ,CAAC,SAAS,MAAM;AAC/D,WAAO,aAAa;AAAA,MAClB,EAAE,OAAO,+BAA+B;AAAA,MACxC,EAAE,QAAQ,SAAS,UAAU,IAAI;AAAA,IACnC;AAAA,EACF;AAEA,QAAM,cAAc,SAAS,QAAQ,IAAI,cAAc,KAAK;AAC5D,QAAM,UAAU,YAAY,WAAW,QAAQ;AAC/C,QAAM,SAAS,QAAQ,QAAQ,IAAI,QAAQ,KAAK;AAChD,QAAM,UAAU,4BAA4B,MAAM;AAClD,QAAM,SAAS,IAAI,IAAI,QAAQ,GAAG;AAClC,QAAM,QAAQ;AAAA,IACZ,OAAO,aAAa,IAAI,GAAG;AAAA,IAC3B;AAAA,IACA;AAAA,IACA;AAAA,EACF;AACA,QAAM,UAAU;AAAA,IACd,OAAO,aAAa,IAAI,GAAG;AAAA,IAC3B;AAAA,IACA;AAAA,IACA;AAAA,EACF;AAEA,MAAI,eAAmD;AACvD,MAAI,YAAY,QAAQ;AACtB,mBAAe;AAAA,EACjB,WAAW,YAAY,QAAQ;AAC7B,mBAAe;AAAA,EACjB;AAEA,QAAM,WAAWF,oBAAmB;AACpC,QAAM,mBAAmB,SAAS;AAClC,MAAI,WAAW,CAAC,SAAS,gBAAgB,kBAAkB;AACzD,UAAM,QAAQ,uBAAuB,QAAQ,OAAO;AAEpD,QAAI;AACF,YAAM,SAAS,MAAM,iBAAiB,UAAU,SAAS,MAAM;AAAA,QAC7D;AAAA,QACA,QAAQ;AAAA,QACR;AAAA,MACF,CAAC;AACD,YAAM,cAAc,OAAO,SAAS;AACpC,YAAMG,WAAU,IAAI,QAAQ,YAAY,OAAO;AAC/C,MAAAA,SAAQ,IAAI,gBAAgB,OAAO,WAAW;AAC9C,MAAAA,SAAQ,IAAI,iBAAiB,aAAa,OAAO,CAAC;AAClD,MAAAA,SAAQ,IAAI,QAAQ,QAAQ;AAC5B,MAAAA,SAAQ,IAAI,yBAAyB,aAAa;AAClD,MAAAA,SAAQ,IAAI,qBAAqB,QAAQ,SAAS,QAAQ;AAC1D,MAAAA,SAAQ,IAAI,qBAAqB,OAAO,KAAK,CAAC;AAC9C,MAAAA,SAAQ,IAAI,uBAAuB,OAAO,OAAO,CAAC;AAElD,UAAI,YAAY,QAAQ,SAAS,SAAS,eAAe;AACvD,cAAM,CAAC,YAAY,MAAM,IAAI,YAAY,KAAK,IAAI;AAClD,mCAA2B,GAAG;AAAA,UAC5B,SAAS,cAAc,IAAI,OAAO,QAAQ;AAAA,YACxC,aAAa,OAAO;AAAA,YACpB,cAAc;AAAA,YACd,UAAU;AAAA,cACR,QAAQ;AAAA,cACR,WAAU,oBAAI,KAAK,GAAE,YAAY;AAAA,cACjC,OAAO,OAAO,KAAK;AAAA,cACnB,SAAS,OAAO,OAAO;AAAA,YACzB;AAAA,UACF,CAAC;AAAA,QACH;AAEA,eAAO,IAAI,SAAS,YAAY,EAAE,SAAAA,SAAQ,CAAC;AAAA,MAC7C;AAEA,aAAO,IAAI,SAAS,YAAY,MAAM,EAAE,SAAAA,SAAQ,CAAC;AAAA,IACnD,QAAQ;AAAA,IAER;AAAA,EACF;AAEA,QAAM,UAAU,IAAI,QAAQ;AAC5B,aAAW,UAAU;AAAA,IACnB;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF,GAAG;AACD,UAAM,QAAQ,SAAS,QAAQ,IAAI,MAAM;AACzC,QAAI,MAAO,SAAQ,IAAI,QAAQ,KAAK;AAAA,EACtC;AACA,MAAI,eAAe,CAAC,QAAQ,IAAI,cAAc,GAAG;AAC/C,YAAQ,IAAI,gBAAgB,WAAW;AAAA,EACzC;AACA,UAAQ,IAAI,iBAAiB,aAAa,OAAO,CAAC;AAClD,UAAQ,IAAI,yBAAyB,SAAS;AAC9C,SAAO,IAAI,SAAS,SAAS,MAAM,EAAE,QAAQ,SAAS,QAAQ,QAAQ,CAAC;AACzE;AAEA,eAAe,UAAU,SAAkB;AACzC,QAAM,MAAM,IAAI,IAAI,QAAQ,GAAG;AAC/B,QAAM,MAAM,oBAAoB,IAAI,QAAQ;AAC5C,MAAI,CAAC,IAAK,QAAO,WAAW;AAC5B,QAAM,SAAS,mBAAmB,MAAM,sBAAsB,CAAC;AAE/D,MAAI,IAAI,CAAC,MAAM,UAAU,IAAI,CAAC,KAAK,IAAI,CAAC,MAAM,SAAS;AACrD,UAAM,OAAQ,MAAM,OAAO,MAAM,SAAS;AAAA,MACxC,SAAS,IAAI,CAAC;AAAA,IAChB,CAAC;AACD,WAAO,gBAAgB,KAAK,OAAO,OAAO;AAAA,EAC5C;AAEA,MAAI,IAAI,CAAC,MAAM,UAAU,IAAI,CAAC,KAAK,IAAI,CAAC,MAAM,cAAc,IAAI,CAAC,GAAG;AAClE,UAAM,OAAQ,MAAM,OAAO,MAAM,SAAS;AAAA,MACxC,SAAS,IAAI,CAAC;AAAA,IAChB,CAAC;AACD,UAAM,eAAe,mBAAmB,IAAI,MAAM,CAAC,EAAE,KAAK,GAAG,CAAC;AAC9D,WAAO;AAAA,MACL,4BAA4B,KAAK,aAAa,YAAY,CAAC;AAAA,MAC3D;AAAA,IACF;AAAA,EACF;AAEA,MAAI,IAAI,CAAC,MAAM,WAAW,IAAI,CAAC,GAAG;AAChC,UAAM,QAAS,MAAM,OAAO,OAAO,SAAS;AAAA,MAC1C,UAAU,IAAI,CAAC;AAAA,IACjB,CAAC;AACD,QAAI,MAAM,SAAS,SAAS;AAC1B,aAAO,UAAU;AAAA,IACnB;AACA,WAAO,gBAAgB,wBAAwB,KAAK,GAAG,SAAS;AAAA,MAC9D,sBACE,MAAM,SAAS,WACf,MAAM,SAAS,SACf,MAAM,SAAS;AAAA,IACnB,CAAC;AAAA,EACH;AAEA,SAAO,WAAW;AACpB;AAEA,SAAS,oBAAoB,UAAmC;AAC9D,QAAM,SAAS;AACf,MAAI,CAAC,SAAS,WAAW,MAAM,EAAG,QAAO;AACzC,QAAM,UAAU,SAAS,MAAM,OAAO,MAAM;AAC5C,MAAI,CAAC,QAAS,QAAO;AACrB,SAAO,QAAQ,MAAM,GAAG,EAAE,IAAI,CAAC,SAAS,mBAAmB,IAAI,CAAC;AAClE;AAIO,IAAM,MAAM,iBAAiB;AAOpC,eAAsB,uBACpB,SACmB;AACnB,SAAO,iBAAiB,OAAO,OAAO;AACxC;","names":["env","env","env","options","getRuntimePlatform","getPublicCache","getRuntimePlatform","response","getPublicCache","headers"]}
@@ -0,0 +1,95 @@
1
+ import { AuthConfig } from './types.js';
2
+ import './content/models.js';
3
+ import './notion/types.js';
4
+
5
+ /**
6
+ * Minimal viewer shape exposed by the foundation middleware. Phase 3
7
+ * replaces this placeholder with the richer `AuthViewer` once
8
+ * `createAuth` ships its real implementation.
9
+ */
10
+ interface FoundationViewer {
11
+ userId: string | number;
12
+ role: string | null;
13
+ email: string | null;
14
+ }
15
+ /**
16
+ * Resolves a session id to the user/role pair backing the viewer.
17
+ * Callers can inject a custom lookup so they can read from their own
18
+ * sessions table layout (the foundation only knows the table name).
19
+ */
20
+ type SessionLookup = (sessionId: string, env: unknown) => Promise<{
21
+ userId: string | number;
22
+ role: string | null;
23
+ email?: string | null;
24
+ } | null>;
25
+ /**
26
+ * Caller-supplied options. `WorkerOptions.siteConfig` etc. are passed
27
+ * through the bootstrap; the middleware itself only needs the auth
28
+ * block and an optional viewer lookup.
29
+ */
30
+ interface NextionMiddlewareOptions {
31
+ authConfig: AuthConfig;
32
+ /**
33
+ * Optional session resolver. When provided, the middleware uses
34
+ * this to look up the session row. When omitted, the middleware
35
+ * still runs (to enforce the admin gate) but always reports no
36
+ * viewer — useful for the bootstrap's test environment and for
37
+ * consumers that have not yet wired their D1 session table.
38
+ */
39
+ sessionLookup?: SessionLookup;
40
+ /**
41
+ * Override which paths are gated. The default is nextion's
42
+ * own contract: `/api/admin/*` for any method, and non-GET
43
+ * requests to `/admin*` (GET `/admin*` is left for the app
44
+ * router so the admin shell can render a login redirect).
45
+ */
46
+ isProtectedPath?: (request: Request) => boolean;
47
+ }
48
+ interface NextionMiddlewareRequestContext {
49
+ viewer: FoundationViewer | null;
50
+ sessionId: string | null;
51
+ }
52
+ /**
53
+ * Default admin gate. Returns `true` for paths that require a viewer
54
+ * before any handler runs. Excludes the GET form of `/admin*` so the
55
+ * app router can render the admin shell and decide whether to
56
+ * redirect to `/login` (matching the existing behavior).
57
+ */
58
+ declare function defaultIsProtectedPath(request: Request): boolean;
59
+ /**
60
+ * Build the request-scoped context for `request`. Returns a viewer
61
+ * (or `null` when no session is present / no lookup is configured).
62
+ */
63
+ declare function resolveFoundationViewer(request: Request, options: NextionMiddlewareOptions): Promise<NextionMiddlewareRequestContext>;
64
+ /**
65
+ * Read the cached context for a request. Returns `undefined` when
66
+ * `resolveFoundationViewer` was never run for this Request — i.e.
67
+ * the request did not pass through `nextionMiddleware`.
68
+ */
69
+ declare function getFoundationContext(request: Request): NextionMiddlewareRequestContext | undefined;
70
+ /**
71
+ * Worker-style middleware. Returns a 401 `Response` for protected
72
+ * paths that lack a viewer; otherwise `null` to let the request
73
+ * continue through the route table.
74
+ *
75
+ * Side effect: attaches a `NextionMiddlewareRequestContext` to
76
+ * the request via a `WeakMap` so downstream route handlers can
77
+ * resolve the viewer without a global.
78
+ */
79
+ declare function nextionMiddleware(request: Request, env: unknown, options: NextionMiddlewareOptions): Promise<Response | null>;
80
+ /**
81
+ * Build a `(request, env) => Promise<Response | null>` middleware
82
+ * function with the options pre-bound. Used by the bootstrap and
83
+ * the starter's Next.js middleware so they share one code path.
84
+ */
85
+ declare function createNextionMiddleware(options: NextionMiddlewareOptions): (request: Request, env: unknown) => Promise<Response | null>;
86
+ /**
87
+ * Test-only: clear the request-scoped context cache. Production
88
+ * code should not need this — the WeakMap is keyed by Request
89
+ * instances and entries die with the request. The helper exists so
90
+ * the unit tests can stay deterministic when they reuse a single
91
+ * Request across assertions.
92
+ */
93
+ declare function _clearFoundationContextForTests(): void;
94
+
95
+ export { type FoundationViewer, type NextionMiddlewareOptions, type NextionMiddlewareRequestContext, type SessionLookup, _clearFoundationContextForTests, createNextionMiddleware, defaultIsProtectedPath, getFoundationContext, nextionMiddleware, resolveFoundationViewer };
@@ -0,0 +1,79 @@
1
+ // src/middleware.ts
2
+ var requestContext = /* @__PURE__ */ new WeakMap();
3
+ function defaultIsProtectedPath(request) {
4
+ const url = new URL(request.url);
5
+ if (url.pathname.startsWith("/api/admin/")) return true;
6
+ if (url.pathname.startsWith("/admin")) {
7
+ return request.method !== "GET" && request.method !== "HEAD";
8
+ }
9
+ return false;
10
+ }
11
+ function readSessionCookie(request, name) {
12
+ const header = request.headers.get("cookie");
13
+ if (!header) return null;
14
+ for (const part of header.split(";")) {
15
+ const [rawKey, ...rest] = part.split("=");
16
+ if (!rawKey) continue;
17
+ if (rawKey.trim() !== name) continue;
18
+ return rest.join("=").trim() || null;
19
+ }
20
+ return null;
21
+ }
22
+ async function resolveFoundationViewer(request, options) {
23
+ const sessionId = readSessionCookie(
24
+ request,
25
+ options.authConfig.sessionCookie.name
26
+ );
27
+ if (!sessionId || !options.sessionLookup) {
28
+ return { viewer: null, sessionId: sessionId ?? null };
29
+ }
30
+ const env = request.env ?? null;
31
+ const lookup = await options.sessionLookup(sessionId, env);
32
+ if (!lookup) {
33
+ return { viewer: null, sessionId };
34
+ }
35
+ return {
36
+ viewer: {
37
+ userId: lookup.userId,
38
+ role: lookup.role,
39
+ email: lookup.email ?? null
40
+ },
41
+ sessionId
42
+ };
43
+ }
44
+ function getFoundationContext(request) {
45
+ return requestContext.get(request);
46
+ }
47
+ async function nextionMiddleware(request, env, options) {
48
+ const context = await resolveFoundationViewer(request, options);
49
+ requestContext.set(request, context);
50
+ const isProtected = options.isProtectedPath ?? defaultIsProtectedPath;
51
+ if (!isProtected(request)) return null;
52
+ if (context.viewer) return null;
53
+ return new Response(
54
+ JSON.stringify({ ok: false, error: "Unauthorized" }),
55
+ {
56
+ status: 401,
57
+ headers: {
58
+ "Content-Type": "application/json",
59
+ "Cache-Control": "no-store",
60
+ "X-Foundation-Gate": "admin"
61
+ }
62
+ }
63
+ );
64
+ }
65
+ function createNextionMiddleware(options) {
66
+ return (request, env) => nextionMiddleware(request, env, options);
67
+ }
68
+ function _clearFoundationContextForTests() {
69
+ void requestContext;
70
+ }
71
+ export {
72
+ _clearFoundationContextForTests,
73
+ createNextionMiddleware,
74
+ defaultIsProtectedPath,
75
+ getFoundationContext,
76
+ nextionMiddleware,
77
+ resolveFoundationViewer
78
+ };
79
+ //# sourceMappingURL=middleware.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"sources":["../src/middleware.ts"],"sourcesContent":["// Foundation request-scoped middleware.\n//\n// Responsibilities:\n// 1. Read the session cookie named in `authConfig.sessionCookie.name`.\n// 2. Look up the session row in D1 (via the optional `sessionLookup`\n// injection; falls back to a no-op when the consumer has not\n// provided one).\n// 3. Attach a viewer to a request-scoped context (a WeakMap keyed\n// by the Request instance) so downstream handlers can read it\n// without reaching into globals.\n// 4. For protected admin patterns (`/api/admin/*` for any method,\n// and non-GET requests to `/admin*`), short-circuit with a 401\n// when there is no viewer.\n//\n// This module is intentionally tier-7 (top-level). It can reach into\n// the auth tier because the eslint tier rules reserve that direction\n// for higher-level glue code.\n\nimport type { AuthConfig } from \"./types\";\n\n/**\n * Minimal viewer shape exposed by the foundation middleware. Phase 3\n * replaces this placeholder with the richer `AuthViewer` once\n * `createAuth` ships its real implementation.\n */\nexport interface FoundationViewer {\n userId: string | number;\n role: string | null;\n email: string | null;\n}\n\n/**\n * Resolves a session id to the user/role pair backing the viewer.\n * Callers can inject a custom lookup so they can read from their own\n * sessions table layout (the foundation only knows the table name).\n */\nexport type SessionLookup = (\n sessionId: string,\n env: unknown\n) => Promise<{ userId: string | number; role: string | null; email?: string | null } | null>;\n\n/**\n * Caller-supplied options. `WorkerOptions.siteConfig` etc. are passed\n * through the bootstrap; the middleware itself only needs the auth\n * block and an optional viewer lookup.\n */\nexport interface NextionMiddlewareOptions {\n authConfig: AuthConfig;\n /**\n * Optional session resolver. When provided, the middleware uses\n * this to look up the session row. When omitted, the middleware\n * still runs (to enforce the admin gate) but always reports no\n * viewer — useful for the bootstrap's test environment and for\n * consumers that have not yet wired their D1 session table.\n */\n sessionLookup?: SessionLookup;\n /**\n * Override which paths are gated. The default is nextion's\n * own contract: `/api/admin/*` for any method, and non-GET\n * requests to `/admin*` (GET `/admin*` is left for the app\n * router so the admin shell can render a login redirect).\n */\n isProtectedPath?: (request: Request) => boolean;\n}\n\nexport interface NextionMiddlewareRequestContext {\n viewer: FoundationViewer | null;\n sessionId: string | null;\n}\n\nconst requestContext = new WeakMap<Request, NextionMiddlewareRequestContext>();\n\n/**\n * Default admin gate. Returns `true` for paths that require a viewer\n * before any handler runs. Excludes the GET form of `/admin*` so the\n * app router can render the admin shell and decide whether to\n * redirect to `/login` (matching the existing behavior).\n */\nexport function defaultIsProtectedPath(request: Request): boolean {\n const url = new URL(request.url);\n if (url.pathname.startsWith(\"/api/admin/\")) return true;\n if (url.pathname.startsWith(\"/admin\")) {\n return request.method !== \"GET\" && request.method !== \"HEAD\";\n }\n return false;\n}\n\nfunction readSessionCookie(request: Request, name: string): string | null {\n // The Cookie header may be absent in pure unit tests. Guard so the\n // middleware never throws.\n const header = request.headers.get(\"cookie\");\n if (!header) return null;\n\n for (const part of header.split(\";\")) {\n const [rawKey, ...rest] = part.split(\"=\");\n if (!rawKey) continue;\n if (rawKey.trim() !== name) continue;\n return rest.join(\"=\").trim() || null;\n }\n return null;\n}\n\n/**\n * Build the request-scoped context for `request`. Returns a viewer\n * (or `null` when no session is present / no lookup is configured).\n */\nexport async function resolveFoundationViewer(\n request: Request,\n options: NextionMiddlewareOptions\n): Promise<NextionMiddlewareRequestContext> {\n const sessionId = readSessionCookie(\n request,\n options.authConfig.sessionCookie.name\n );\n\n if (!sessionId || !options.sessionLookup) {\n return { viewer: null, sessionId: sessionId ?? null };\n }\n\n const env = (request as Request & { env?: unknown }).env ?? null;\n const lookup = await options.sessionLookup(sessionId, env);\n if (!lookup) {\n return { viewer: null, sessionId };\n }\n\n return {\n viewer: {\n userId: lookup.userId,\n role: lookup.role,\n email: lookup.email ?? null,\n },\n sessionId,\n };\n}\n\n/**\n * Read the cached context for a request. Returns `undefined` when\n * `resolveFoundationViewer` was never run for this Request — i.e.\n * the request did not pass through `nextionMiddleware`.\n */\nexport function getFoundationContext(\n request: Request\n): NextionMiddlewareRequestContext | undefined {\n return requestContext.get(request);\n}\n\n/**\n * Worker-style middleware. Returns a 401 `Response` for protected\n * paths that lack a viewer; otherwise `null` to let the request\n * continue through the route table.\n *\n * Side effect: attaches a `NextionMiddlewareRequestContext` to\n * the request via a `WeakMap` so downstream route handlers can\n * resolve the viewer without a global.\n */\nexport async function nextionMiddleware(\n request: Request,\n env: unknown,\n options: NextionMiddlewareOptions\n): Promise<Response | null> {\n const context = await resolveFoundationViewer(request, options);\n requestContext.set(request, context);\n\n const isProtected = options.isProtectedPath ?? defaultIsProtectedPath;\n if (!isProtected(request)) return null;\n if (context.viewer) return null;\n\n return new Response(\n JSON.stringify({ ok: false, error: \"Unauthorized\" }),\n {\n status: 401,\n headers: {\n \"Content-Type\": \"application/json\",\n \"Cache-Control\": \"no-store\",\n \"X-Foundation-Gate\": \"admin\",\n },\n }\n );\n}\n\n/**\n * Build a `(request, env) => Promise<Response | null>` middleware\n * function with the options pre-bound. Used by the bootstrap and\n * the starter's Next.js middleware so they share one code path.\n */\nexport function createNextionMiddleware(\n options: NextionMiddlewareOptions\n): (request: Request, env: unknown) => Promise<Response | null> {\n return (request, env) => nextionMiddleware(request, env, options);\n}\n\n/**\n * Test-only: clear the request-scoped context cache. Production\n * code should not need this — the WeakMap is keyed by Request\n * instances and entries die with the request. The helper exists so\n * the unit tests can stay deterministic when they reuse a single\n * Request across assertions.\n */\nexport function _clearFoundationContextForTests(): void {\n // WeakMap has no `clear`, but we can replace the reference.\n // The function is intentionally a no-op when no entries exist.\n void requestContext;\n}\n"],"mappings":";AAsEA,IAAM,iBAAiB,oBAAI,QAAkD;AAQtE,SAAS,uBAAuB,SAA2B;AAChE,QAAM,MAAM,IAAI,IAAI,QAAQ,GAAG;AAC/B,MAAI,IAAI,SAAS,WAAW,aAAa,EAAG,QAAO;AACnD,MAAI,IAAI,SAAS,WAAW,QAAQ,GAAG;AACrC,WAAO,QAAQ,WAAW,SAAS,QAAQ,WAAW;AAAA,EACxD;AACA,SAAO;AACT;AAEA,SAAS,kBAAkB,SAAkB,MAA6B;AAGxE,QAAM,SAAS,QAAQ,QAAQ,IAAI,QAAQ;AAC3C,MAAI,CAAC,OAAQ,QAAO;AAEpB,aAAW,QAAQ,OAAO,MAAM,GAAG,GAAG;AACpC,UAAM,CAAC,QAAQ,GAAG,IAAI,IAAI,KAAK,MAAM,GAAG;AACxC,QAAI,CAAC,OAAQ;AACb,QAAI,OAAO,KAAK,MAAM,KAAM;AAC5B,WAAO,KAAK,KAAK,GAAG,EAAE,KAAK,KAAK;AAAA,EAClC;AACA,SAAO;AACT;AAMA,eAAsB,wBACpB,SACA,SAC0C;AAC1C,QAAM,YAAY;AAAA,IAChB;AAAA,IACA,QAAQ,WAAW,cAAc;AAAA,EACnC;AAEA,MAAI,CAAC,aAAa,CAAC,QAAQ,eAAe;AACxC,WAAO,EAAE,QAAQ,MAAM,WAAW,aAAa,KAAK;AAAA,EACtD;AAEA,QAAM,MAAO,QAAwC,OAAO;AAC5D,QAAM,SAAS,MAAM,QAAQ,cAAc,WAAW,GAAG;AACzD,MAAI,CAAC,QAAQ;AACX,WAAO,EAAE,QAAQ,MAAM,UAAU;AAAA,EACnC;AAEA,SAAO;AAAA,IACL,QAAQ;AAAA,MACN,QAAQ,OAAO;AAAA,MACf,MAAM,OAAO;AAAA,MACb,OAAO,OAAO,SAAS;AAAA,IACzB;AAAA,IACA;AAAA,EACF;AACF;AAOO,SAAS,qBACd,SAC6C;AAC7C,SAAO,eAAe,IAAI,OAAO;AACnC;AAWA,eAAsB,kBACpB,SACA,KACA,SAC0B;AAC1B,QAAM,UAAU,MAAM,wBAAwB,SAAS,OAAO;AAC9D,iBAAe,IAAI,SAAS,OAAO;AAEnC,QAAM,cAAc,QAAQ,mBAAmB;AAC/C,MAAI,CAAC,YAAY,OAAO,EAAG,QAAO;AAClC,MAAI,QAAQ,OAAQ,QAAO;AAE3B,SAAO,IAAI;AAAA,IACT,KAAK,UAAU,EAAE,IAAI,OAAO,OAAO,eAAe,CAAC;AAAA,IACnD;AAAA,MACE,QAAQ;AAAA,MACR,SAAS;AAAA,QACP,gBAAgB;AAAA,QAChB,iBAAiB;AAAA,QACjB,qBAAqB;AAAA,MACvB;AAAA,IACF;AAAA,EACF;AACF;AAOO,SAAS,wBACd,SAC8D;AAC9D,SAAO,CAAC,SAAS,QAAQ,kBAAkB,SAAS,KAAK,OAAO;AAClE;AASO,SAAS,kCAAwC;AAGtD,OAAK;AACP;","names":[]}
@@ -0,0 +1,5 @@
1
+ import { NotionBlock } from './types.js';
2
+
3
+ declare function flattenNotionBlockText(blocks: readonly NotionBlock[]): string;
4
+
5
+ export { flattenNotionBlockText };
@@ -0,0 +1,37 @@
1
+ // src/notion/block-text.ts
2
+ function typedValue(block) {
3
+ return block[block.type] ?? {};
4
+ }
5
+ function richTextPlainText(parts) {
6
+ if (!Array.isArray(parts)) return "";
7
+ return parts.map(
8
+ (part) => part.type === "equation" ? part.equation?.expression ?? "" : part.plain_text ?? part.text?.content ?? ""
9
+ ).join("");
10
+ }
11
+ function blockPlainText(block) {
12
+ const value = typedValue(block);
13
+ const text = [
14
+ richTextPlainText(value.rich_text),
15
+ richTextPlainText(value.caption),
16
+ richTextPlainText(value.title),
17
+ value.expression ?? "",
18
+ ...(value.cells ?? []).map(richTextPlainText)
19
+ ];
20
+ return text.filter(Boolean).join(" ");
21
+ }
22
+ function flattenNotionBlockText(blocks) {
23
+ const parts = [];
24
+ function visit(block) {
25
+ const text = blockPlainText(block).trim();
26
+ if (text) parts.push(text);
27
+ for (const child of block.children ?? []) {
28
+ visit(child);
29
+ }
30
+ }
31
+ for (const block of blocks) visit(block);
32
+ return parts.join(" ").normalize("NFKC").replace(/\s+/g, " ").trim();
33
+ }
34
+ export {
35
+ flattenNotionBlockText
36
+ };
37
+ //# sourceMappingURL=block-text.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"sources":["../../src/notion/block-text.ts"],"sourcesContent":["import type { NotionBlock, NotionRichTextPart } from \"./types\";\n\ntype RichTextContainer = {\n rich_text?: NotionRichTextPart[];\n caption?: NotionRichTextPart[];\n title?: NotionRichTextPart[];\n cells?: NotionRichTextPart[][];\n expression?: string;\n};\n\nfunction typedValue(block: NotionBlock): RichTextContainer {\n return (block[block.type] ?? {}) as RichTextContainer;\n}\n\nfunction richTextPlainText(parts: unknown) {\n if (!Array.isArray(parts)) return \"\";\n return parts\n .map((part: NotionRichTextPart) =>\n part.type === \"equation\"\n ? part.equation?.expression ?? \"\"\n : part.plain_text ?? part.text?.content ?? \"\"\n )\n .join(\"\");\n}\n\nfunction blockPlainText(block: NotionBlock) {\n const value = typedValue(block);\n const text = [\n richTextPlainText(value.rich_text),\n richTextPlainText(value.caption),\n richTextPlainText(value.title),\n value.expression ?? \"\",\n ...(value.cells ?? []).map(richTextPlainText),\n ];\n\n return text.filter(Boolean).join(\" \");\n}\n\nexport function flattenNotionBlockText(blocks: readonly NotionBlock[]): string {\n const parts: string[] = [];\n\n function visit(block: NotionBlock) {\n const text = blockPlainText(block).trim();\n if (text) parts.push(text);\n for (const child of block.children ?? []) {\n visit(child);\n }\n }\n\n for (const block of blocks) visit(block);\n\n return parts\n .join(\" \")\n .normalize(\"NFKC\")\n .replace(/\\s+/g, \" \")\n .trim();\n}\n"],"mappings":";AAUA,SAAS,WAAW,OAAuC;AACzD,SAAQ,MAAM,MAAM,IAAI,KAAK,CAAC;AAChC;AAEA,SAAS,kBAAkB,OAAgB;AACzC,MAAI,CAAC,MAAM,QAAQ,KAAK,EAAG,QAAO;AAClC,SAAO,MACJ;AAAA,IAAI,CAAC,SACJ,KAAK,SAAS,aACV,KAAK,UAAU,cAAc,KAC7B,KAAK,cAAc,KAAK,MAAM,WAAW;AAAA,EAC/C,EACC,KAAK,EAAE;AACZ;AAEA,SAAS,eAAe,OAAoB;AAC1C,QAAM,QAAQ,WAAW,KAAK;AAC9B,QAAM,OAAO;AAAA,IACX,kBAAkB,MAAM,SAAS;AAAA,IACjC,kBAAkB,MAAM,OAAO;AAAA,IAC/B,kBAAkB,MAAM,KAAK;AAAA,IAC7B,MAAM,cAAc;AAAA,IACpB,IAAI,MAAM,SAAS,CAAC,GAAG,IAAI,iBAAiB;AAAA,EAC9C;AAEA,SAAO,KAAK,OAAO,OAAO,EAAE,KAAK,GAAG;AACtC;AAEO,SAAS,uBAAuB,QAAwC;AAC7E,QAAM,QAAkB,CAAC;AAEzB,WAAS,MAAM,OAAoB;AACjC,UAAM,OAAO,eAAe,KAAK,EAAE,KAAK;AACxC,QAAI,KAAM,OAAM,KAAK,IAAI;AACzB,eAAW,SAAS,MAAM,YAAY,CAAC,GAAG;AACxC,YAAM,KAAK;AAAA,IACb;AAAA,EACF;AAEA,aAAW,SAAS,OAAQ,OAAM,KAAK;AAEvC,SAAO,MACJ,KAAK,GAAG,EACR,UAAU,MAAM,EAChB,QAAQ,QAAQ,GAAG,EACnB,KAAK;AACV;","names":[]}
@@ -0,0 +1,24 @@
1
+ import { NotionBlock } from './types.js';
2
+
3
+ type BlockChildrenListResponse = {
4
+ results?: unknown[];
5
+ has_more?: boolean;
6
+ next_cursor?: string | null;
7
+ };
8
+ type NotionBlockClient = {
9
+ blocks: {
10
+ children: {
11
+ list: (args: {
12
+ block_id: string;
13
+ page_size?: number;
14
+ start_cursor?: string;
15
+ }) => Promise<BlockChildrenListResponse>;
16
+ };
17
+ };
18
+ };
19
+ declare function listBlockChildren(client: NotionBlockClient, blockId: string): Promise<NotionBlock[]>;
20
+ declare function listBlockChildrenDeep(client: NotionBlockClient, blockId: string, options?: {
21
+ maxDepth?: number;
22
+ }): Promise<NotionBlock[]>;
23
+
24
+ export { type NotionBlockClient, listBlockChildren, listBlockChildrenDeep };
@@ -0,0 +1,46 @@
1
+ // src/notion/blocks.ts
2
+ function normalizeBlock(input) {
3
+ if (!input || typeof input !== "object") return null;
4
+ const block = input;
5
+ return block.id && block.type ? block : null;
6
+ }
7
+ async function listBlockChildren(client, blockId) {
8
+ const results = [];
9
+ let cursor;
10
+ do {
11
+ const response = await client.blocks.children.list({
12
+ block_id: blockId,
13
+ page_size: 100,
14
+ ...cursor ? { start_cursor: cursor } : {}
15
+ });
16
+ for (const item of response.results ?? []) {
17
+ const block = normalizeBlock(item);
18
+ if (block) results.push(block);
19
+ }
20
+ cursor = response.next_cursor ?? void 0;
21
+ if (!response.has_more) break;
22
+ } while (cursor);
23
+ return results;
24
+ }
25
+ async function listBlockChildrenDeep(client, blockId, options) {
26
+ const maxDepth = options?.maxDepth ?? 6;
27
+ async function visit(id, depth) {
28
+ const children = await listBlockChildren(client, id);
29
+ if (depth >= maxDepth) return children;
30
+ return Promise.all(
31
+ children.map(async (block) => {
32
+ if (!block.has_children) return block;
33
+ return {
34
+ ...block,
35
+ children: await visit(block.id, depth + 1)
36
+ };
37
+ })
38
+ );
39
+ }
40
+ return visit(blockId, 0);
41
+ }
42
+ export {
43
+ listBlockChildren,
44
+ listBlockChildrenDeep
45
+ };
46
+ //# sourceMappingURL=blocks.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"sources":["../../src/notion/blocks.ts"],"sourcesContent":["import type { NotionBlock } from \"./types\";\n\ntype BlockChildrenListResponse = {\n results?: unknown[];\n has_more?: boolean;\n next_cursor?: string | null;\n};\n\nexport type NotionBlockClient = {\n blocks: {\n children: {\n list: (args: {\n block_id: string;\n page_size?: number;\n start_cursor?: string;\n }) => Promise<BlockChildrenListResponse>;\n };\n };\n};\n\nfunction normalizeBlock(input: unknown): NotionBlock | null {\n if (!input || typeof input !== \"object\") return null;\n const block = input as NotionBlock;\n return block.id && block.type ? block : null;\n}\n\nexport async function listBlockChildren(\n client: NotionBlockClient,\n blockId: string\n): Promise<NotionBlock[]> {\n const results: NotionBlock[] = [];\n let cursor: string | undefined;\n\n do {\n const response = await client.blocks.children.list({\n block_id: blockId,\n page_size: 100,\n ...(cursor ? { start_cursor: cursor } : {}),\n });\n\n for (const item of response.results ?? []) {\n const block = normalizeBlock(item);\n if (block) results.push(block);\n }\n\n cursor = response.next_cursor ?? undefined;\n if (!response.has_more) break;\n } while (cursor);\n\n return results;\n}\n\nexport async function listBlockChildrenDeep(\n client: NotionBlockClient,\n blockId: string,\n options?: { maxDepth?: number }\n): Promise<NotionBlock[]> {\n const maxDepth = options?.maxDepth ?? 6;\n\n async function visit(id: string, depth: number): Promise<NotionBlock[]> {\n const children = await listBlockChildren(client, id);\n if (depth >= maxDepth) return children;\n\n return Promise.all(\n children.map(async (block) => {\n if (!block.has_children) return block;\n return {\n ...block,\n children: await visit(block.id, depth + 1),\n };\n })\n );\n }\n\n return visit(blockId, 0);\n}\n"],"mappings":";AAoBA,SAAS,eAAe,OAAoC;AAC1D,MAAI,CAAC,SAAS,OAAO,UAAU,SAAU,QAAO;AAChD,QAAM,QAAQ;AACd,SAAO,MAAM,MAAM,MAAM,OAAO,QAAQ;AAC1C;AAEA,eAAsB,kBACpB,QACA,SACwB;AACxB,QAAM,UAAyB,CAAC;AAChC,MAAI;AAEJ,KAAG;AACD,UAAM,WAAW,MAAM,OAAO,OAAO,SAAS,KAAK;AAAA,MACjD,UAAU;AAAA,MACV,WAAW;AAAA,MACX,GAAI,SAAS,EAAE,cAAc,OAAO,IAAI,CAAC;AAAA,IAC3C,CAAC;AAED,eAAW,QAAQ,SAAS,WAAW,CAAC,GAAG;AACzC,YAAM,QAAQ,eAAe,IAAI;AACjC,UAAI,MAAO,SAAQ,KAAK,KAAK;AAAA,IAC/B;AAEA,aAAS,SAAS,eAAe;AACjC,QAAI,CAAC,SAAS,SAAU;AAAA,EAC1B,SAAS;AAET,SAAO;AACT;AAEA,eAAsB,sBACpB,QACA,SACA,SACwB;AACxB,QAAM,WAAW,SAAS,YAAY;AAEtC,iBAAe,MAAM,IAAY,OAAuC;AACtE,UAAM,WAAW,MAAM,kBAAkB,QAAQ,EAAE;AACnD,QAAI,SAAS,SAAU,QAAO;AAE9B,WAAO,QAAQ;AAAA,MACb,SAAS,IAAI,OAAO,UAAU;AAC5B,YAAI,CAAC,MAAM,aAAc,QAAO;AAChC,eAAO;AAAA,UACL,GAAG;AAAA,UACH,UAAU,MAAM,MAAM,MAAM,IAAI,QAAQ,CAAC;AAAA,QAC3C;AAAA,MACF,CAAC;AAAA,IACH;AAAA,EACF;AAEA,SAAO,MAAM,SAAS,CAAC;AACzB;","names":[]}
@@ -0,0 +1,7 @@
1
+ import { Client } from '@notionhq/client';
2
+ import { NotionClientConfig } from './config.js';
3
+ import './types.js';
4
+
5
+ declare function createNotionClient(config: NotionClientConfig): Client;
6
+
7
+ export { createNotionClient };
@@ -0,0 +1,13 @@
1
+ // src/notion/client.ts
2
+ import { Client } from "@notionhq/client";
3
+ function createNotionClient(config) {
4
+ return new Client({
5
+ auth: config.token,
6
+ baseUrl: config.apiBaseUrl,
7
+ notionVersion: "2026-03-11"
8
+ });
9
+ }
10
+ export {
11
+ createNotionClient
12
+ };
13
+ //# sourceMappingURL=client.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"sources":["../../src/notion/client.ts"],"sourcesContent":["import { Client } from \"@notionhq/client\";\nimport type { NotionClientConfig } from \"./config\";\n\nexport function createNotionClient(config: NotionClientConfig) {\n return new Client({\n auth: config.token,\n baseUrl: config.apiBaseUrl,\n notionVersion: \"2026-03-11\",\n });\n}\n"],"mappings":";AAAA,SAAS,cAAc;AAGhB,SAAS,mBAAmB,QAA4B;AAC7D,SAAO,IAAI,OAAO;AAAA,IAChB,MAAM,OAAO;AAAA,IACb,SAAS,OAAO;AAAA,IAChB,eAAe;AAAA,EACjB,CAAC;AACH;","names":[]}
@@ -0,0 +1,25 @@
1
+ import { NotionContentModelLike } from './types.js';
2
+
3
+ declare const DEFAULT_NOTION_MOVIES_DATA_SOURCE_ID = "371dc62d-0738-8015-a601-000bc3944fcb";
4
+ type NotionClientConfig = {
5
+ token: string;
6
+ apiBaseUrl?: string;
7
+ };
8
+ type NotionConfig = {
9
+ token: string;
10
+ dataSourceId: string;
11
+ apiBaseUrl?: string;
12
+ editBaseUrl?: string;
13
+ webhookVerificationToken?: string;
14
+ };
15
+ declare function getNotionEditBaseUrl(): string;
16
+ declare function hasNotionConfig(): Promise<boolean>;
17
+ declare function hasNotionMovieConfig(): Promise<boolean>;
18
+ declare function hasNotionModelConfig(model: NotionContentModelLike): Promise<boolean>;
19
+ declare function getNotionClientConfig(): Promise<NotionClientConfig>;
20
+ declare function getNotionConfig(): Promise<NotionConfig>;
21
+ declare function getNotionWebhookVerificationToken(): Promise<string | undefined>;
22
+ declare function getNotionMovieConfig(): Promise<NotionConfig>;
23
+ declare function getNotionConfigForModel(model: NotionContentModelLike): Promise<NotionConfig>;
24
+
25
+ export { DEFAULT_NOTION_MOVIES_DATA_SOURCE_ID, type NotionClientConfig, type NotionConfig, getNotionClientConfig, getNotionConfig, getNotionConfigForModel, getNotionEditBaseUrl, getNotionMovieConfig, getNotionWebhookVerificationToken, hasNotionConfig, hasNotionModelConfig, hasNotionMovieConfig };