@prenta/core 0.118.0

package/dist/purge/adapters.d.ts

@@ -0,0 +1,60 @@
+/**
+ * CDN purge adapters for {@link createPublishPurgeReceiver}.
+ *
+ * All adapters are plain-fetch (zero SDK dependencies) so the receiver can
+ * run on any deploy target — Astro on Vercel, Cloudflare Workers, a Node
+ * process behind Fastly, etc. Adapter fetch failures throw, which the
+ * receiver converts into a 5xx so the CMS retry queue redelivers.
+ */
+import type { CachePurgeAdapter } from './receiver.js';
+type FetchLike = typeof globalThis.fetch;
+export interface CloudflarePurgeAdapterOptions {
+    /** Cloudflare zone id for the public site's apex domain. */
+    zoneId: string;
+    /** API token with the `Zone.Cache Purge` permission. */
+    apiToken: string;
+    /** Absolute site origin used to expand site-relative paths. */
+    siteUrl: string;
+    /** Override fetch (tests). */
+    fetchImpl?: FetchLike;
+}
+/**
+ * Purge via the Cloudflare zone `purge_cache` API — by URL for targeted
+ * purges, `purge_everything` for full purges.
+ */
+export declare function createCloudflarePurgeAdapter(options: CloudflarePurgeAdapterOptions): CachePurgeAdapter;
+export interface VercelDeployHookPurgeAdapterOptions {
+    /** A Vercel deploy hook URL for the public-site project. */
+    deployHookUrl: string;
+    /** Override fetch (tests). */
+    fetchImpl?: FetchLike;
+}
+/**
+ * Full-purge-only adapter for Vercel: POSTs a deploy hook, which redeploys
+ * the site and clears its edge cache. Coarse but universally available —
+ * pair with {@link createVercelIsrPurgeAdapter} when the site uses
+ * `@astrojs/vercel` ISR and you want targeted, redeploy-free purges.
+ */
+export declare function createVercelDeployHookPurgeAdapter(options: VercelDeployHookPurgeAdapterOptions): CachePurgeAdapter;
+export interface VercelIsrPurgeAdapterOptions {
+    /** Absolute site origin used to expand site-relative paths. */
+    siteUrl: string;
+    /**
+     * The `isr.bypassToken` configured on `@astrojs/vercel` (or Vercel
+     * prerender bypass token). Requesting a path with the
+     * `x-prerender-revalidate` header set to this token revalidates the
+     * cached page in place.
+     */
+    bypassToken: string;
+    /** Override fetch (tests). */
+    fetchImpl?: FetchLike;
+}
+/**
+ * Targeted, redeploy-free purge for sites on Vercel ISR: re-requests each
+ * path with `x-prerender-revalidate: <bypassToken>`, which regenerates the
+ * cached page. Targeted-only (`purgePaths`) — the receiver requires a
+ * `resolvePaths` mapper with this adapter.
+ */
+export declare function createVercelIsrPurgeAdapter(options: VercelIsrPurgeAdapterOptions): CachePurgeAdapter;
+export {};
+//# sourceMappingURL=adapters.d.ts.map

package/dist/purge/adapters.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"adapters.d.ts","sourceRoot":"","sources":["../../src/purge/adapters.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAA;AAEtD,KAAK,SAAS,GAAG,OAAO,UAAU,CAAC,KAAK,CAAA;AAOxC,MAAM,WAAW,6BAA6B;IAC5C,4DAA4D;IAC5D,MAAM,EAAE,MAAM,CAAA;IACd,wDAAwD;IACxD,QAAQ,EAAE,MAAM,CAAA;IAChB,+DAA+D;IAC/D,OAAO,EAAE,MAAM,CAAA;IACf,8BAA8B;IAC9B,SAAS,CAAC,EAAE,SAAS,CAAA;CACtB;AAKD;;;GAGG;AACH,wBAAgB,4BAA4B,CAC1C,OAAO,EAAE,6BAA6B,GACrC,iBAAiB,CA8BnB;AAED,MAAM,WAAW,mCAAmC;IAClD,4DAA4D;IAC5D,aAAa,EAAE,MAAM,CAAA;IACrB,8BAA8B;IAC9B,SAAS,CAAC,EAAE,SAAS,CAAA;CACtB;AAED;;;;;GAKG;AACH,wBAAgB,kCAAkC,CAChD,OAAO,EAAE,mCAAmC,GAC3C,iBAAiB,CAUnB;AAED,MAAM,WAAW,4BAA4B;IAC3C,+DAA+D;IAC/D,OAAO,EAAE,MAAM,CAAA;IACf;;;;;OAKG;IACH,WAAW,EAAE,MAAM,CAAA;IACnB,8BAA8B;IAC9B,SAAS,CAAC,EAAE,SAAS,CAAA;CACtB;AAED;;;;;GAKG;AACH,wBAAgB,2BAA2B,CACzC,OAAO,EAAE,4BAA4B,GACpC,iBAAiB,CAiBnB"}

package/dist/purge/adapters.js

@@ -0,0 +1,81 @@
+function joinSiteUrl(siteUrl, path) {
+    const base = siteUrl.replace(/\/+$/, '');
+    return `${base}${path.startsWith('/') ? path : `/${path}`}`;
+}
+/** Cloudflare `purge_cache` API caps files-per-call. */
+const CLOUDFLARE_PURGE_BATCH = 30;
+/**
+ * Purge via the Cloudflare zone `purge_cache` API — by URL for targeted
+ * purges, `purge_everything` for full purges.
+ */
+export function createCloudflarePurgeAdapter(options) {
+    const { zoneId, apiToken, siteUrl } = options;
+    const fetchImpl = options.fetchImpl ?? globalThis.fetch;
+    const endpoint = `https://api.cloudflare.com/client/v4/zones/${zoneId}/purge_cache`;
+    async function call(body) {
+        const res = await fetchImpl(endpoint, {
+            method: 'POST',
+            headers: {
+                authorization: `Bearer ${apiToken}`,
+                'content-type': 'application/json',
+            },
+            body: JSON.stringify(body),
+        });
+        if (!res.ok) {
+            throw new Error(`Cloudflare purge failed: HTTP ${res.status}`);
+        }
+    }
+    return {
+        async purgePaths(paths) {
+            const files = paths.map((p) => joinSiteUrl(siteUrl, p));
+            for (let i = 0; i < files.length; i += CLOUDFLARE_PURGE_BATCH) {
+                await call({ files: files.slice(i, i + CLOUDFLARE_PURGE_BATCH) });
+            }
+        },
+        async purgeAll() {
+            await call({ purge_everything: true });
+        },
+    };
+}
+/**
+ * Full-purge-only adapter for Vercel: POSTs a deploy hook, which redeploys
+ * the site and clears its edge cache. Coarse but universally available —
+ * pair with {@link createVercelIsrPurgeAdapter} when the site uses
+ * `@astrojs/vercel` ISR and you want targeted, redeploy-free purges.
+ */
+export function createVercelDeployHookPurgeAdapter(options) {
+    const fetchImpl = options.fetchImpl ?? globalThis.fetch;
+    return {
+        async purgeAll() {
+            const res = await fetchImpl(options.deployHookUrl, { method: 'POST' });
+            if (!res.ok) {
+                throw new Error(`Vercel deploy hook failed: HTTP ${res.status}`);
+            }
+        },
+    };
+}
+/**
+ * Targeted, redeploy-free purge for sites on Vercel ISR: re-requests each
+ * path with `x-prerender-revalidate: <bypassToken>`, which regenerates the
+ * cached page. Targeted-only (`purgePaths`) — the receiver requires a
+ * `resolvePaths` mapper with this adapter.
+ */
+export function createVercelIsrPurgeAdapter(options) {
+    const fetchImpl = options.fetchImpl ?? globalThis.fetch;
+    return {
+        async purgePaths(paths) {
+            for (const path of paths) {
+                const res = await fetchImpl(joinSiteUrl(options.siteUrl, path), {
+                    method: 'GET',
+                    headers: { 'x-prerender-revalidate': options.bypassToken },
+                });
+                // 404 is fine — an unpublished/deleted page has no fresh copy to
+                // regenerate, and the stale cache entry is dropped by the request.
+                if (!res.ok && res.status !== 404) {
+                    throw new Error(`Vercel ISR revalidate failed for ${path}: HTTP ${res.status}`);
+                }
+            }
+        },
+    };
+}
+//# sourceMappingURL=adapters.js.map

package/dist/purge/adapters.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"adapters.js","sourceRoot":"","sources":["../../src/purge/adapters.ts"],"names":[],"mappings":"AAYA,SAAS,WAAW,CAAC,OAAe,EAAE,IAAY;IAChD,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAA;IACxC,OAAO,GAAG,IAAI,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,EAAE,CAAA;AAC7D,CAAC;AAaD,wDAAwD;AACxD,MAAM,sBAAsB,GAAG,EAAE,CAAA;AAEjC;;;GAGG;AACH,MAAM,UAAU,4BAA4B,CAC1C,OAAsC;IAEtC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,OAAO,CAAA;IAC7C,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,UAAU,CAAC,KAAK,CAAA;IACvD,MAAM,QAAQ,GAAG,8CAA8C,MAAM,cAAc,CAAA;IAEnF,KAAK,UAAU,IAAI,CAAC,IAA6B;QAC/C,MAAM,GAAG,GAAG,MAAM,SAAS,CAAC,QAAQ,EAAE;YACpC,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,aAAa,EAAE,UAAU,QAAQ,EAAE;gBACnC,cAAc,EAAE,kBAAkB;aACnC;YACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;SAC3B,CAAC,CAAA;QACF,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YACZ,MAAM,IAAI,KAAK,CAAC,iCAAiC,GAAG,CAAC,MAAM,EAAE,CAAC,CAAA;QAChE,CAAC;IACH,CAAC;IAED,OAAO;QACL,KAAK,CAAC,UAAU,CAAC,KAAe;YAC9B,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,WAAW,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAA;YACvD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,IAAI,sBAAsB,EAAE,CAAC;gBAC9D,MAAM,IAAI,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,GAAG,sBAAsB,CAAC,EAAE,CAAC,CAAA;YACnE,CAAC;QACH,CAAC;QACD,KAAK,CAAC,QAAQ;YACZ,MAAM,IAAI,CAAC,EAAE,gBAAgB,EAAE,IAAI,EAAE,CAAC,CAAA;QACxC,CAAC;KACF,CAAA;AACH,CAAC;AASD;;;;;GAKG;AACH,MAAM,UAAU,kCAAkC,CAChD,OAA4C;IAE5C,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,UAAU,CAAC,KAAK,CAAA;IACvD,OAAO;QACL,KAAK,CAAC,QAAQ;YACZ,MAAM,GAAG,GAAG,MAAM,SAAS,CAAC,OAAO,CAAC,aAAa,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAA;YACtE,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;gBACZ,MAAM,IAAI,KAAK,CAAC,mCAAmC,GAAG,CAAC,MAAM,EAAE,CAAC,CAAA;YAClE,CAAC;QACH,CAAC;KACF,CAAA;AACH,CAAC;AAgBD;;;;;GAKG;AACH,MAAM,UAAU,2BAA2B,CACzC,OAAqC;IAErC,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,UAAU,CAAC,KAAK,CAAA;IACvD,OAAO;QACL,KAAK,CAAC,UAAU,CAAC,KAAe;YAC9B,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;gBACzB,MAAM,GAAG,GAAG,MAAM,SAAS,CAAC,WAAW,CAAC,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC,EAAE;oBAC9D,MAAM,EAAE,KAAK;oBACb,OAAO,EAAE,EAAE,wBAAwB,EAAE,OAAO,CAAC,WAAW,EAAE;iBAC3D,CAAC,CAAA;gBACF,iEAAiE;gBACjE,mEAAmE;gBACnE,IAAI,CAAC,GAAG,CAAC,EAAE,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;oBAClC,MAAM,IAAI,KAAK,CAAC,oCAAoC,IAAI,UAAU,GAAG,CAAC,MAAM,EAAE,CAAC,CAAA;gBACjF,CAAC;YACH,CAAC;QACH,CAAC;KACF,CAAA;AACH,CAAC"}

package/dist/purge/index.d.ts

@@ -0,0 +1,12 @@
+/**
+ * `@prenta/core/purge` — publish → purge receiver + CDN adapters.
+ *
+ * Deploy-side counterpart of the CMS's publish-lifecycle webhooks. See
+ * `receiver.ts` for the security contract and ADR 0011 for the freshness
+ * model (cache-static delivery + purge-on-publish).
+ */
+export { createPublishPurgeReceiver, createMemoryDedupeStore, createPrefixPathResolver, } from './receiver.js';
+export type { CachePurgeAdapter, DeliveryDedupeStore, PublishPurgeReceiverOptions, PurgeDocumentPayload, PurgeReceiverResult, } from './receiver.js';
+export { createCloudflarePurgeAdapter, createVercelDeployHookPurgeAdapter, createVercelIsrPurgeAdapter, } from './adapters.js';
+export type { CloudflarePurgeAdapterOptions, VercelDeployHookPurgeAdapterOptions, VercelIsrPurgeAdapterOptions, } from './adapters.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/purge/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/purge/index.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,EACL,0BAA0B,EAC1B,uBAAuB,EACvB,wBAAwB,GACzB,MAAM,eAAe,CAAA;AACtB,YAAY,EACV,iBAAiB,EACjB,mBAAmB,EACnB,2BAA2B,EAC3B,oBAAoB,EACpB,mBAAmB,GACpB,MAAM,eAAe,CAAA;AAEtB,OAAO,EACL,4BAA4B,EAC5B,kCAAkC,EAClC,2BAA2B,GAC5B,MAAM,eAAe,CAAA;AACtB,YAAY,EACV,6BAA6B,EAC7B,mCAAmC,EACnC,4BAA4B,GAC7B,MAAM,eAAe,CAAA"}

package/dist/purge/index.js

@@ -0,0 +1,10 @@
+/**
+ * `@prenta/core/purge` — publish → purge receiver + CDN adapters.
+ *
+ * Deploy-side counterpart of the CMS's publish-lifecycle webhooks. See
+ * `receiver.ts` for the security contract and ADR 0011 for the freshness
+ * model (cache-static delivery + purge-on-publish).
+ */
+export { createPublishPurgeReceiver, createMemoryDedupeStore, createPrefixPathResolver, } from './receiver.js';
+export { createCloudflarePurgeAdapter, createVercelDeployHookPurgeAdapter, createVercelIsrPurgeAdapter, } from './adapters.js';
+//# sourceMappingURL=index.js.map

package/dist/purge/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/purge/index.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,EACL,0BAA0B,EAC1B,uBAAuB,EACvB,wBAAwB,GACzB,MAAM,eAAe,CAAA;AAStB,OAAO,EACL,4BAA4B,EAC5B,kCAAkC,EAClC,2BAA2B,GAC5B,MAAM,eAAe,CAAA"}

package/dist/purge/receiver.d.ts

@@ -0,0 +1,95 @@
+/**
+ * The purge side of the receiver. Implement one or both methods:
+ * `purgePaths` for targeted eviction (needs a `resolvePaths` mapper on the
+ * receiver), `purgeAll` as the coarse fallback. At least one is required.
+ */
+export interface CachePurgeAdapter {
+    /** Purge specific site-relative paths (e.g. `['/pricing', '/blog/foo']`). */
+    purgePaths?(paths: string[]): Promise<void>;
+    /** Purge the entire public cache. */
+    purgeAll?(): Promise<void>;
+}
+/** The `data` payload of a publish-lifecycle webhook. */
+export interface PurgeDocumentPayload {
+    id: string;
+    collection: string;
+    title?: string | null;
+    slug?: string | null;
+    status?: string | null;
+}
+/** Idempotency store for `X-Prenta-Delivery` ids. */
+export interface DeliveryDedupeStore {
+    has(deliveryId: string): boolean | Promise<boolean>;
+    add(deliveryId: string): void | Promise<void>;
+}
+/**
+ * Default in-memory dedupe store (per-isolate; enough to absorb the CMS's
+ * short retry ladder). Use a shared store (KV/Redis) when the receiver runs
+ * on scale-to-many serverless instances and exact-once purging matters —
+ * a duplicate purge is harmless, so per-isolate is a fine default.
+ */
+export declare function createMemoryDedupeStore(maxEntries?: number): DeliveryDedupeStore;
+export interface PurgeReceiverResult {
+    event: string;
+    document: PurgeDocumentPayload;
+    /** Paths that were purged; empty array means a full purge. */
+    paths: string[];
+}
+export interface PublishPurgeReceiverOptions {
+    /**
+     * Webhook signing secret(s) — pass `[current, previous]` during rotation
+     * (the CMS keeps signing with the old secret for a grace window).
+     */
+    secret: string | Array<string | null | undefined>;
+    /** The CDN/edge purge implementation. */
+    purge: CachePurgeAdapter;
+    /**
+     * Map a webhook document to the site paths it renders at. Return an empty
+     * array to fall back to a full purge. When omitted, every purge is a full
+     * purge (the v1 default — publishes are infrequent).
+     */
+    resolvePaths?: (doc: PurgeDocumentPayload, event: string) => string[] | Promise<string[]>;
+    /**
+     * Decide whether an event warrants a purge. Default: purge on
+     * `document.published` / `document.unpublished` / `document.deleted`, and
+     * on `document.updated` only when the document is PUBLISHED (a live page
+     * changed content) — draft edits never purge.
+     */
+    shouldPurge?: (event: string, doc: PurgeDocumentPayload) => boolean;
+    /** Max |now − timestamp| in seconds. Default 300. */
+    toleranceSeconds?: number;
+    /** Delivery dedupe store, or `false` to disable. Default: in-memory. */
+    dedupe?: DeliveryDedupeStore | false;
+    /**
+     * Called after a successful purge — e.g. drain a layer-2
+     * `SiteCacheAdapter` (KV/Redis) so runtime reads also refresh. Best-effort:
+     * a throw here never fails the delivery.
+     */
+    onPurged?: (info: PurgeReceiverResult) => void | Promise<void>;
+    /** Reject request bodies larger than this many bytes. Default 256 KiB. */
+    maxBodyBytes?: number;
+}
+/**
+ * Create the fetch-style purge receiver. Throws at creation time on
+ * unusable configuration (no purge method; targeted-only adapter without a
+ * path resolver) so misconfiguration fails the deploy, not the first publish.
+ */
+export declare function createPublishPurgeReceiver(options: PublishPurgeReceiverOptions): (request: Request) => Promise<Response>;
+/**
+ * Build a `resolvePaths` mapper from a collection → URL-prefix table, the
+ * same shape as each collection's `urlPrefix` in `prenta.config.ts`:
+ *
+ * ```ts
+ * resolvePaths: createPrefixPathResolver({ prefixes: { pages: '', posts: '/blog' } })
+ * ```
+ *
+ * Unknown collections and documents without a slug resolve to `[]`, which
+ * the receiver treats as "fall back to a full purge".
+ */
+export declare function createPrefixPathResolver(options: {
+    /** collection slug → URL prefix (`''` for root-mounted collections). */
+    prefixes: Record<string, string>;
+    /** Slugs that render at the site root. Default `['home', 'index']`. */
+    homeSlugs?: string[];
+}): (doc: PurgeDocumentPayload) => string[];
+//# sourceMappingURL=receiver.d.ts.map

package/dist/purge/receiver.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"receiver.d.ts","sourceRoot":"","sources":["../../src/purge/receiver.ts"],"names":[],"mappings":"AA0BA;;;;GAIG;AACH,MAAM,WAAW,iBAAiB;IAChC,6EAA6E;IAC7E,UAAU,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAC3C,qCAAqC;IACrC,QAAQ,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,CAAA;CAC3B;AAED,yDAAyD;AACzD,MAAM,WAAW,oBAAoB;IACnC,EAAE,EAAE,MAAM,CAAA;IACV,UAAU,EAAE,MAAM,CAAA;IAClB,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IACrB,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IACpB,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;CACvB;AAED,qDAAqD;AACrD,MAAM,WAAW,mBAAmB;IAClC,GAAG,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAA;IACnD,GAAG,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;CAC9C;AAED;;;;;GAKG;AACH,wBAAgB,uBAAuB,CAAC,UAAU,SAAO,GAAG,mBAAmB,CAa9E;AAED,MAAM,WAAW,mBAAmB;IAClC,KAAK,EAAE,MAAM,CAAA;IACb,QAAQ,EAAE,oBAAoB,CAAA;IAC9B,8DAA8D;IAC9D,KAAK,EAAE,MAAM,EAAE,CAAA;CAChB;AAED,MAAM,WAAW,2BAA2B;IAC1C;;;OAGG;IACH,MAAM,EAAE,MAAM,GAAG,KAAK,CAAC,MAAM,GAAG,IAAI,GAAG,SAAS,CAAC,CAAA;IACjD,yCAAyC;IACzC,KAAK,EAAE,iBAAiB,CAAA;IACxB;;;;OAIG;IACH,YAAY,CAAC,EAAE,CAAC,GAAG,EAAE,oBAAoB,EAAE,KAAK,EAAE,MAAM,KAAK,MAAM,EAAE,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAAA;IACzF;;;;;OAKG;IACH,WAAW,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,oBAAoB,KAAK,OAAO,CAAA;IACnE,qDAAqD;IACrD,gBAAgB,CAAC,EAAE,MAAM,CAAA;IACzB,wEAAwE;IACxE,MAAM,CAAC,EAAE,mBAAmB,GAAG,KAAK,CAAA;IACpC;;;;OAIG;IACH,QAAQ,CAAC,EAAE,CAAC,IAAI,EAAE,mBAAmB,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAC9D,0EAA0E;IAC1E,YAAY,CAAC,EAAE,MAAM,CAAA;CACtB;AAqBD;;;;GAIG;AACH,wBAAgB,0BAA0B,CACxC,OAAO,EAAE,2BAA2B,GACnC,CAAC,OAAO,EAAE,OAAO,KAAK,OAAO,CAAC,QAAQ,CAAC,CA6GzC;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,wBAAwB,CAAC,OAAO,EAAE;IAChD,wEAAwE;IACxE,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IAChC,uEAAuE;IACvE,SAAS,CAAC,EAAE,MAAM,EAAE,CAAA;CACrB,GAAG,CAAC,GAAG,EAAE,oBAAoB,KAAK,MAAM,EAAE,CAU1C"}

package/dist/purge/receiver.js

@@ -0,0 +1,176 @@
+/**
+ * Publish → purge receiver (ADR 0011).
+ *
+ * A framework-agnostic `(Request) => Promise<Response>` handler that consumes
+ * Prenta publish-lifecycle webhooks (`document.published` / `unpublished` /
+ * `updated` / `deleted`) and purges a CDN/edge cache. Combined with
+ * cache-static delivery (`Cache-Control: s-maxage` + `stale-while-revalidate`
+ * on public routes) this gives a split-deploy public site ISR-grade
+ * freshness: pages serve from the edge and are evicted the moment an editor
+ * publishes.
+ *
+ * Mount it wherever the public site runs:
+ *   - Astro: `src/pages/api/prenta/purge.ts` → `export const POST = receiver`
+ *   - Next:  `app/api/prenta/purge/route.ts` → `export { receiver as POST }`
+ *
+ * Security contract — all enforced BEFORE any side effect:
+ *   1. HMAC-SHA256 signature over `${timestamp}.${rawBody}`, constant-time
+ *      compare, secret-rotation grace via multiple secrets.
+ *   2. Timestamp skew window (replay protection).
+ *   3. `X-Prenta-Delivery` dedupe (idempotency across CMS retries). A
+ *      delivery is marked seen only AFTER a successful purge, so a failed
+ *      purge is retried by the CMS retry queue (drained by `/cron/cleanup`)
+ *      instead of being swallowed.
+ */
+import { verifyPrentaWebhook, PRENTA_WEBHOOK_TOLERANCE_SECONDS } from '../webhooks/signing.js';
+/**
+ * Default in-memory dedupe store (per-isolate; enough to absorb the CMS's
+ * short retry ladder). Use a shared store (KV/Redis) when the receiver runs
+ * on scale-to-many serverless instances and exact-once purging matters —
+ * a duplicate purge is harmless, so per-isolate is a fine default.
+ */
+export function createMemoryDedupeStore(maxEntries = 1024) {
+    const seen = new Set();
+    return {
+        has: (id) => seen.has(id),
+        add: (id) => {
+            seen.add(id);
+            if (seen.size > maxEntries) {
+                // Sets iterate in insertion order — evict the oldest entry.
+                const oldest = seen.values().next().value;
+                if (oldest !== undefined)
+                    seen.delete(oldest);
+            }
+        },
+    };
+}
+function defaultShouldPurge(event, doc) {
+    if (event === 'document.published' ||
+        event === 'document.unpublished' ||
+        event === 'document.deleted') {
+        return true;
+    }
+    if (event === 'document.updated')
+        return doc.status === 'PUBLISHED';
+    return false;
+}
+function json(body, status = 200) {
+    return new Response(JSON.stringify(body), {
+        status,
+        headers: { 'content-type': 'application/json' },
+    });
+}
+/**
+ * Create the fetch-style purge receiver. Throws at creation time on
+ * unusable configuration (no purge method; targeted-only adapter without a
+ * path resolver) so misconfiguration fails the deploy, not the first publish.
+ */
+export function createPublishPurgeReceiver(options) {
+    const { secret, purge, resolvePaths, shouldPurge = defaultShouldPurge, toleranceSeconds = PRENTA_WEBHOOK_TOLERANCE_SECONDS, onPurged, maxBodyBytes = 256 * 1024, } = options;
+    if (!purge.purgeAll && !purge.purgePaths) {
+        throw new Error('createPublishPurgeReceiver: the purge adapter must implement purgePaths and/or purgeAll.');
+    }
+    if (!purge.purgeAll && !resolvePaths) {
+        throw new Error('createPublishPurgeReceiver: the purge adapter only supports purgePaths — ' +
+            'provide resolvePaths so events can be mapped to site paths.');
+    }
+    const dedupe = options.dedupe === false ? null : (options.dedupe ?? createMemoryDedupeStore());
+    return async (request) => {
+        if (request.method !== 'POST') {
+            return json({ error: 'Method not allowed' }, 405);
+        }
+        const rawBody = await request.text();
+        if (rawBody.length > maxBodyBytes) {
+            return json({ error: 'Payload too large' }, 413);
+        }
+        const verified = await verifyPrentaWebhook({
+            rawBody,
+            signature: request.headers.get('x-prenta-signature'),
+            timestamp: request.headers.get('x-prenta-timestamp'),
+            secrets: secret,
+            toleranceSeconds,
+        });
+        if (!verified.ok) {
+            return json({ error: verified.code }, 401);
+        }
+        let event;
+        let doc;
+        try {
+            const payload = JSON.parse(rawBody);
+            const data = payload.data;
+            if (typeof payload.event !== 'string' ||
+                !data ||
+                typeof data !== 'object' ||
+                typeof data.id !== 'string' ||
+                typeof data.collection !== 'string') {
+                return json({ error: 'Invalid webhook payload' }, 400);
+            }
+            event = payload.event;
+            doc = data;
+        }
+        catch {
+            return json({ error: 'Invalid JSON body' }, 400);
+        }
+        const deliveryId = request.headers.get('x-prenta-delivery');
+        if (dedupe && deliveryId && (await dedupe.has(deliveryId))) {
+            return json({ ok: true, deduped: true });
+        }
+        if (!shouldPurge(event, doc)) {
+            return json({ ok: true, skipped: true });
+        }
+        const paths = resolvePaths ? [...(await resolvePaths(doc, event))] : [];
+        try {
+            if (paths.length > 0 && purge.purgePaths) {
+                await purge.purgePaths(paths);
+            }
+            else if (purge.purgeAll) {
+                await purge.purgeAll();
+            }
+            else {
+                // Targeted-only adapter and the resolver produced no paths — nothing
+                // safe to do. 5xx keeps the delivery in the CMS retry queue and makes
+                // the mapping gap visible in delivery logs.
+                return json({ error: 'No paths resolved and purge adapter has no purgeAll' }, 500);
+            }
+        }
+        catch {
+            // 5xx → the CMS marks the delivery failed and retries via /cron/cleanup.
+            // Deliberately NOT deduped: the retry must purge again.
+            return json({ error: 'Purge failed' }, 502);
+        }
+        if (dedupe && deliveryId) {
+            await dedupe.add(deliveryId);
+        }
+        try {
+            await onPurged?.({ event, document: doc, paths });
+        }
+        catch {
+            // Best-effort drain hook — the purge itself already succeeded.
+        }
+        return json({ ok: true, purged: paths.length > 0 ? paths : 'all' });
+    };
+}
+/**
+ * Build a `resolvePaths` mapper from a collection → URL-prefix table, the
+ * same shape as each collection's `urlPrefix` in `prenta.config.ts`:
+ *
+ * ```ts
+ * resolvePaths: createPrefixPathResolver({ prefixes: { pages: '', posts: '/blog' } })
+ * ```
+ *
+ * Unknown collections and documents without a slug resolve to `[]`, which
+ * the receiver treats as "fall back to a full purge".
+ */
+export function createPrefixPathResolver(options) {
+    const homeSlugs = new Set(options.homeSlugs ?? ['home', 'index']);
+    return (doc) => {
+        const prefix = options.prefixes[doc.collection];
+        if (prefix === undefined || !doc.slug)
+            return [];
+        const cleanPrefix = prefix.replace(/^\/+|\/+$/g, '') === '' ? '' : `/${prefix.replace(/^\/+|\/+$/g, '')}`;
+        if (cleanPrefix === '' && homeSlugs.has(doc.slug))
+            return ['/'];
+        return [`${cleanPrefix}/${doc.slug}`];
+    };
+}
+//# sourceMappingURL=receiver.js.map

package/dist/purge/receiver.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"receiver.js","sourceRoot":"","sources":["../../src/purge/receiver.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,OAAO,EAAE,mBAAmB,EAAE,gCAAgC,EAAE,MAAM,wBAAwB,CAAA;AA6B9F;;;;;GAKG;AACH,MAAM,UAAU,uBAAuB,CAAC,UAAU,GAAG,IAAI;IACvD,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAA;IAC9B,OAAO;QACL,GAAG,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QACzB,GAAG,EAAE,CAAC,EAAE,EAAE,EAAE;YACV,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;YACZ,IAAI,IAAI,CAAC,IAAI,GAAG,UAAU,EAAE,CAAC;gBAC3B,4DAA4D;gBAC5D,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,KAAK,CAAA;gBACzC,IAAI,MAAM,KAAK,SAAS;oBAAE,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAA;YAC/C,CAAC;QACH,CAAC;KACF,CAAA;AACH,CAAC;AA4CD,SAAS,kBAAkB,CAAC,KAAa,EAAE,GAAyB;IAClE,IACE,KAAK,KAAK,oBAAoB;QAC9B,KAAK,KAAK,sBAAsB;QAChC,KAAK,KAAK,kBAAkB,EAC5B,CAAC;QACD,OAAO,IAAI,CAAA;IACb,CAAC;IACD,IAAI,KAAK,KAAK,kBAAkB;QAAE,OAAO,GAAG,CAAC,MAAM,KAAK,WAAW,CAAA;IACnE,OAAO,KAAK,CAAA;AACd,CAAC;AAED,SAAS,IAAI,CAAC,IAAa,EAAE,MAAM,GAAG,GAAG;IACvC,OAAO,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE;QACxC,MAAM;QACN,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;KAChD,CAAC,CAAA;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,0BAA0B,CACxC,OAAoC;IAEpC,MAAM,EACJ,MAAM,EACN,KAAK,EACL,YAAY,EACZ,WAAW,GAAG,kBAAkB,EAChC,gBAAgB,GAAG,gCAAgC,EACnD,QAAQ,EACR,YAAY,GAAG,GAAG,GAAG,IAAI,GAC1B,GAAG,OAAO,CAAA;IAEX,IAAI,CAAC,KAAK,CAAC,QAAQ,IAAI,CAAC,KAAK,CAAC,UAAU,EAAE,CAAC;QACzC,MAAM,IAAI,KAAK,CACb,0FAA0F,CAC3F,CAAA;IACH,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,QAAQ,IAAI,CAAC,YAAY,EAAE,CAAC;QACrC,MAAM,IAAI,KAAK,CACb,2EAA2E;YACzE,6DAA6D,CAChE,CAAA;IACH,CAAC;IAED,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,KAAK,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,IAAI,uBAAuB,EAAE,CAAC,CAAA;IAE9F,OAAO,KAAK,EAAE,OAAgB,EAAqB,EAAE;QACnD,IAAI,OAAO,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;YAC9B,OAAO,IAAI,CAAC,EAAE,KAAK,EAAE,oBAAoB,EAAE,EAAE,GAAG,CAAC,CAAA;QACnD,CAAC;QAED,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,IAAI,EAAE,CAAA;QACpC,IAAI,OAAO,CAAC,MAAM,GAAG,YAAY,EAAE,CAAC;YAClC,OAAO,IAAI,CAAC,EAAE,KAAK,EAAE,mBAAmB,EAAE,EAAE,GAAG,CAAC,CAAA;QAClD,CAAC;QAED,MAAM,QAAQ,GAAG,MAAM,mBAAmB,CAAC;YACzC,OAAO;YACP,SAAS,EAAE,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC;YACpD,SAAS,EAAE,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC;YACpD,OAAO,EAAE,MAAM;YACf,gBAAgB;SACjB,CAAC,CAAA;QACF,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,OAAO,IAAI,CAAC,EAAE,KAAK,EAAE,QAAQ,CAAC,IAAI,EAAE,EAAE,GAAG,CAAC,CAAA;QAC5C,CAAC;QAED,IAAI,KAAa,CAAA;QACjB,IAAI,GAAyB,CAAA;QAC7B,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAGjC,CAAA;YACD,MAAM,IAAI,GAAG,OAAO,CAAC,IAAkD,CAAA;YACvE,IACE,OAAO,OAAO,CAAC,KAAK,KAAK,QAAQ;gBACjC,CAAC,IAAI;gBACL,OAAO,IAAI,KAAK,QAAQ;gBACxB,OAAO,IAAI,CAAC,EAAE,KAAK,QAAQ;gBAC3B,OAAO,IAAI,CAAC,UAAU,KAAK,QAAQ,EACnC,CAAC;gBACD,OAAO,IAAI,CAAC,EAAE,KAAK,EAAE,yBAAyB,EAAE,EAAE,GAAG,CAAC,CAAA;YACxD,CAAC;YACD,KAAK,GAAG,OAAO,CAAC,KAAK,CAAA;YACrB,GAAG,GAAG,IAAuC,CAAA;QAC/C,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC,EAAE,KAAK,EAAE,mBAAmB,EAAE,EAAE,GAAG,CAAC,CAAA;QAClD,CAAC;QAED,MAAM,UAAU,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAA;QAC3D,IAAI,MAAM,IAAI,UAAU,IAAI,CAAC,MAAM,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,EAAE,CAAC;YAC3D,OAAO,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAA;QAC1C,CAAC;QAED,IAAI,CAAC,WAAW,CAAC,KAAK,EAAE,GAAG,CAAC,EAAE,CAAC;YAC7B,OAAO,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAA;QAC1C,CAAC;QAED,MAAM,KAAK,GAAG,YAAY,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,YAAY,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAA;QAEvE,IAAI,CAAC;YACH,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,KAAK,CAAC,UAAU,EAAE,CAAC;gBACzC,MAAM,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC,CAAA;YAC/B,CAAC;iBAAM,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;gBAC1B,MAAM,KAAK,CAAC,QAAQ,EAAE,CAAA;YACxB,CAAC;iBAAM,CAAC;gBACN,qEAAqE;gBACrE,sEAAsE;gBACtE,4CAA4C;gBAC5C,OAAO,IAAI,CAAC,EAAE,KAAK,EAAE,qDAAqD,EAAE,EAAE,GAAG,CAAC,CAAA;YACpF,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,yEAAyE;YACzE,wDAAwD;YACxD,OAAO,IAAI,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,EAAE,GAAG,CAAC,CAAA;QAC7C,CAAC;QAED,IAAI,MAAM,IAAI,UAAU,EAAE,CAAC;YACzB,MAAM,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,CAAA;QAC9B,CAAC;QAED,IAAI,CAAC;YACH,MAAM,QAAQ,EAAE,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC,CAAA;QACnD,CAAC;QAAC,MAAM,CAAC;YACP,+DAA+D;QACjE,CAAC;QAED,OAAO,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,CAAA;IACrE,CAAC,CAAA;AACH,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,wBAAwB,CAAC,OAKxC;IACC,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,SAAS,IAAI,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAA;IACjE,OAAO,CAAC,GAAG,EAAE,EAAE;QACb,MAAM,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,UAAU,CAAC,CAAA;QAC/C,IAAI,MAAM,KAAK,SAAS,IAAI,CAAC,GAAG,CAAC,IAAI;YAAE,OAAO,EAAE,CAAA;QAChD,MAAM,WAAW,GACf,MAAM,CAAC,OAAO,CAAC,YAAY,EAAE,EAAE,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,YAAY,EAAE,EAAE,CAAC,EAAE,CAAA;QACvF,IAAI,WAAW,KAAK,EAAE,IAAI,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,OAAO,CAAC,GAAG,CAAC,CAAA;QAC/D,OAAO,CAAC,GAAG,WAAW,IAAI,GAAG,CAAC,IAAI,EAAE,CAAC,CAAA;IACvC,CAAC,CAAA;AACH,CAAC"}