@prenta/core 7.7.0 → 7.7.2

package/dist/api/route-helpers/media.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"media.js","sourceRoot":"","sources":["../../../src/api/route-helpers/media.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAA;AACrD,OAAO,EAAE,sBAAsB,EAAE,MAAM,oBAAoB,CAAA;AAC3D,OAAO,EAAE,SAAS,EAAE,MAAM,8BAA8B,CAAA;AACxD,OAAO,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAA;AAC9D,OAAO,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAA;AAEzD,qFAAqF;AACrF,8DAA8D;AAC9D,MAAM,CAAC,KAAK,UAAU,iBAAiB;IACrC,MAAM,GAAG,GAAG,UAAU,GAAG,MAAM,CAAA;IAC/B,OAAO,MAAM,CAAC,yBAAyB,CAAC,2BAA2B,CAAC,kBAAkB,CAAC,GAAG,CAAC,CAAA;AAC7F,CAAC;AAED,MAAM,UAAU,QAAQ,CAAC,UAAmB;IAC1C,MAAM,KAAK,GAAG,MAAM,CAAC,UAAU,IAAI,EAAE,CAAC,CAAA;IACtC,IAAI,CAAC,KAAK;QAAE,OAAO,EAAE,CAAA;IACrB,OAAO,KAAK,CAAC,UAAU,CAAC,SAAS,CAAC,IAAI,KAAK,CAAC,UAAU,CAAC,UAAU,CAAC,IAAI,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC;QACzF,CAAC,CAAC,KAAK;QACP,CAAC,CAAC,EAAE,CAAA;AACR,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,KAAU;IAC3C,MAAM,KAAK,GAAG,OAAO,KAAK,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAA;IAClE,MAAM,MAAM,GAAG,OAAO,KAAK,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAA;IACrE,MAAM,SAAS,GAAG,MAAM,CAAC,KAAK,CAAC,QAAQ,IAAI,KAAK,CAAC,SAAS,IAAI,CAAC,CAAC,CAAA;IAChE,MAAM,YAAY,GAAG,KAAK,CAAC,YAAY,KAAK,IAAI,CAAA;IAChD,MAAM,YAAY,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,WAAW,CAAC;QACnD,CAAC,CAAC,KAAK,CAAC,WAAW;aACd,GAAG,CAAC,CAAC,KAAgD,EAAE,EAAE,CAAC,KAAK,EAAE,QAAQ,EAAE,KAAK,CAAC;aACjF,MAAM,CACL,CAAC,KAAc,EAAmB,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAC1F;QACL,CAAC,CAAC,EAAE,CAAA;IACN,4EAA4E;IAC5E,yDAAyD;IACzD,MAAM,GAAG,GAAG,sBAAsB,CAAC;QACjC,QAAQ,EAAE,KAAK,CAAC,QAAQ,IAAI,KAAK,CAAC,IAAI,IAAI,IAAI;QAC9C,QAAQ,EAAE,KAAK,CAAC,QAAQ,IAAI,KAAK,CAAC,IAAI,IAAI,IAAI;QAC9C,OAAO,EAAE,KAAK,CAAC,OAAO,IAAI,KAAK,CAAC,MAAM,IAAI,IAAI;QAC9C,KAAK,EAAE,KAAK,CAAC,KAAK,IAAI,IAAI;QAC1B,OAAO,EAAE,KAAK,CAAC,OAAO,IAAI,IAAI;QAC9B,WAAW,EAAE,KAAK,CAAC,WAAW,IAAI,IAAI;QACtC,YAAY,EAAE,KAAK,CAAC,YAAY,IAAI,IAAI;QACxC,SAAS;QACT,KAAK;QACL,MAAM;QACN,YAAY;QACZ,YAAY;KACb,CAAC,CAAA;IACF,OAAO;QACL,GAAG,KAAK;QACR,IAAI,EAAE,KAAK,CAAC,QAAQ,IAAI,KAAK,CAAC,IAAI,IAAI,EAAE;QACxC,IAAI,EAAE,KAAK,CAAC,QAAQ,IAAI,KAAK,CAAC,IAAI,IAAI,EAAE;QACxC,IAAI,EAAE,WAAW,CAAC,SAAS,CAAC;QAC5B,SAAS;QACT,IAAI,EAAE,KAAK,CAAC,SAAS,IAAI,KAAK,CAAC,SAAS,IAAI,IAAI;QAChD,GAAG,EAAE,QAAQ,CAAC,KAAK,CAAC,UAAU,IAAI,KAAK,CAAC,GAAG,CAAC;QAC5C,UAAU,EAAE,KAAK,IAAI,MAAM,CAAC,CAAC,CAAC,GAAG,KAAK,IAAI,MAAM,EAAE,CAAC,CAAC,CAAC,SAAS;QAC9D,MAAM,EAAE,OAAO,KAAK,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS;QACrF,MAAM,EAAE,KAAK,CAAC,OAAO,IAAI,KAAK,CAAC,MAAM,IAAI,EAAE;QAC3C,YAAY;QACZ,GAAG,CAAC,KAAK,CAAC,SAAS,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACxE,KAAK,EAAE,KAAK,CAAC,KAAK,IAAI,EAAE;QACxB,QAAQ,EAAE,GAAG,CAAC,KAAK;QACnB,QAAQ,EAAE,GAAG,CAAC,KAAK;QACnB,SAAS,EAAE,GAAG,CAAC,MAAM;KACtB,CAAA;AACH,CAAC;AAED;;;;;GAKG;AACH,SAAS,kBAAkB,CAAC,UAAkB,EAAE,EAAU;IACxD,IAAI,UAAU,KAAK,OAAO;QAAE,OAAO,UAAU,EAAE,OAAO,CAAA;IACtD,MAAM,GAAG,GAAG,eAAe,EAAE,EAAE,WAAW,EAAE,CAAC,UAAU,CAAC,CAAA;IACxD,IAAI,GAAG,EAAE,IAAI,KAAK,MAAM;QAAE,OAAO,UAAU,UAAU,IAAI,EAAE,OAAO,CAAA;IAClE,OAAO,gBAAgB,UAAU,IAAI,EAAE,EAAE,CAAA;AAC3C,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,gBAAgB,CAAC,WAAoB;IACnD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC;QAAE,OAAO,EAAE,CAAA;IAC1C,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAA;IAC9B,MAAM,GAAG,GAAqC,EAAE,CAAA;IAChD,KAAK,MAAM,KAAK,IAAI,WAAW,EAAE,CAAC;QAChC,MAAM,GAAG,GAAI,KAA4B,EAAE,QAAQ,CAAA;QACnD,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,SAAS,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;YAAE,SAAQ;QACvD,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;QAChB,GAAG,CAAC,IAAI,CAAC;YACP,IAAI,EAAE,GAAG,CAAC,KAAK,IAAI,YAAY;YAC/B,IAAI,EAAE,kBAAkB,CAAC,GAAG,CAAC,UAAU,EAAE,GAAG,CAAC,EAAE,CAAC;SACjD,CAAC,CAAA;IACJ,CAAC;IACD,OAAO,GAAG,CAAA;AACZ,CAAC;AAED,MAAM,qBAAqB,GAAG,IAAI,GAAG,CAAC;IACpC,GAAG;IACH,IAAI;IACJ,KAAK;IACL,IAAI;IACJ,KAAK;IACL,IAAI;IACJ,IAAI;IACJ,IAAI;IACJ,IAAI;IACJ,KAAK;IACL,MAAM;IACN,IAAI;IACJ,IAAI;IACJ,MAAM;IACN,IAAI;IACJ,KAAK;IACL,IAAI;CACL,CAAC,CAAA;AAEF;;;;GAIG;AACH,MAAM,UAAU,uBAAuB,CAAC,GAAW;IACjD,IAAI,CAAC,GAAG;QAAE,OAAO,EAAE,CAAA;IACnB,MAAM,WAAW,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAA;IAC1D,MAAM,MAAM,GAAG,WAAW;SACvB,KAAK,CAAC,KAAK,CAAC;SACZ,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC;SACX,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,EAAE;QACf,MAAM,KAAK,GAAG,IAAI,CAAC,WAAW,EAAE,CAAA;QAChC,IAAI,CAAC,GAAG,CAAC,IAAI,qBAAqB,CAAC,GAAG,CAAC,KAAK,CAAC;YAAE,OAAO,KAAK,CAAA;QAC3D,OAAO,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAA;IACrD,CAAC,CAAC;SACD,IAAI,CAAC,GAAG,CAAC,CAAA;IACZ,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAA;AACnD,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,mBAAmB,CAAC,GAAW;IAC7C,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,CAAC,KAAK;QAAE,OAAO,KAAK,CAAA;IAChD,IAAI,CAAC;QACH,MAAM,CAAC,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAA;QAC7C,IAAI,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC;YAAE,OAAO,KAAK,CAAA;QACtC,OAAO,IAAI,CAAA;IACb,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAA;IACd,CAAC;AACH,CAAC;AAED,yEAAyE;AACzE,MAAM,sBAAsB,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI,CAAA;AAE9C;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,GAAW,EACX,aAAsB;IAEtB,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,SAAS,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;QACrE,IAAI,CAAC,IAAI,CAAC,EAAE;YAAE,OAAO,IAAI,CAAA;QACzB,MAAM,WAAW,GAAG,CAClB,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,aAAa,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAC9E,CAAC,IAAI,EAAE,CAAA;QACR,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,QAAQ,CAAC;YAAE,OAAO,IAAI,CAAA;QAClD,MAAM,cAAc,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,IAAI,GAAG,CAAC,CAAA;QACxE,IAAI,cAAc,GAAG,sBAAsB;YAAE,OAAO,IAAI,CAAA;QACxD,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC,CAAA;QACpD,IAAI,MAAM,CAAC,UAAU,KAAK,CAAC,IAAI,MAAM,CAAC,UAAU,GAAG,sBAAsB;YAAE,OAAO,IAAI,CAAA;QACtF,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,QAAQ,EAAE,WAAW,EAAE,CAAA;IACrE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAA;IACb,CAAC;AACH,CAAC"}

package/dist/api/route-helpers/page-shape.d.ts

@@ -0,0 +1,31 @@
+export declare function normalizeRedirect(redirect: any): any;
+export declare function normalizeSeoPage(page: any): {
+    id: any;
+    collection: any;
+    updatedAt: any;
+    url: {};
+    title: any;
+    score: number;
+    issues: number;
+    metaTitle: {};
+    metaDescription: {};
+    canonical: {};
+    schemaType: {};
+};
+/**
+ * Renders a 1200x630 SVG suitable for og:image. We don't pull in Satori/resvg
+ * because most integrators don't need PNG — major crawlers (Facebook, Twitter,
+ * LinkedIn, Slack, Discord) handle image/svg+xml correctly. Sites that
+ * specifically need PNG can override with their own /og endpoint via
+ * @vercel/og and point `seo.defaultOgImage` at it.
+ */
+export declare function renderOgSvg(opts: {
+    title: string;
+    description?: string;
+    siteName?: string | null;
+    theme: 'light' | 'dark';
+    bg: string;
+    fg: string;
+    muted: string;
+}): string;
+//# sourceMappingURL=page-shape.d.ts.map

package/dist/api/route-helpers/page-shape.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"page-shape.d.ts","sourceRoot":"","sources":["../../../src/api/route-helpers/page-shape.ts"],"names":[],"mappings":"AAEA,wBAAgB,iBAAiB,CAAC,QAAQ,EAAE,GAAG,OAS9C;AAED,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,GAAG;;;;;;;;;;;;EAyBzC;AAED;;;;;;GAMG;AACH,wBAAgB,WAAW,CAAC,IAAI,EAAE;IAChC,KAAK,EAAE,MAAM,CAAA;IACb,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IACxB,KAAK,EAAE,OAAO,GAAG,MAAM,CAAA;IACvB,EAAE,EAAE,MAAM,CAAA;IACV,EAAE,EAAE,MAAM,CAAA;IACV,KAAK,EAAE,MAAM,CAAA;CACd,GAAG,MAAM,CAyDT"}

package/dist/api/route-helpers/page-shape.js

@@ -0,0 +1,98 @@
+import { asRecord } from './http.js';
+export function normalizeRedirect(redirect) {
+    return {
+        ...redirect,
+        from: redirect.from ?? redirect.source ?? '',
+        to: redirect.to ?? redirect.destination ?? '',
+        type: String(redirect.type ?? redirect.statusCode ?? 301),
+        hits: Number(redirect.hits ?? 0),
+        active: redirect.active ?? true,
+    };
+}
+export function normalizeSeoPage(page) {
+    const data = asRecord(page.data);
+    const structuredData = asRecord(page.structuredData);
+    const issueValue = structuredData.issues ?? data.issues;
+    const issueCount = Array.isArray(issueValue) ? issueValue.length : Number(issueValue ?? 0);
+    const slug = String(data.slug ?? page.slug ?? page.id ?? '');
+    const schemaType = data.schemaType ?? data.structuredDataType ?? structuredData.schemaType ?? '';
+    // Return ONLY the derived summary fields — never the raw `data` /
+    // `structuredData` JSONB blobs. This endpoint powers a summary table; for
+    // section-built pages those blobs are large, so spreading them made the
+    // response grow linearly with page content (megabytes for a table that only
+    // needs a dozen scalar fields).
+    return {
+        id: page.id,
+        collection: page.collection,
+        updatedAt: page.updatedAt,
+        url: data.url ?? (slug === 'home' ? '/' : `/${slug}`),
+        title: data.title ?? page.title ?? 'Untitled',
+        score: Number(structuredData.score ?? data.score ?? 0),
+        issues: issueCount,
+        metaTitle: data.metaTitle ?? '',
+        metaDescription: data.metaDescription ?? '',
+        canonical: data.canonical ?? data.canonicalUrl ?? '',
+        schemaType,
+    };
+}
+/**
+ * Renders a 1200x630 SVG suitable for og:image. We don't pull in Satori/resvg
+ * because most integrators don't need PNG — major crawlers (Facebook, Twitter,
+ * LinkedIn, Slack, Discord) handle image/svg+xml correctly. Sites that
+ * specifically need PNG can override with their own /og endpoint via
+ * @vercel/og and point `seo.defaultOgImage` at it.
+ */
+export function renderOgSvg(opts) {
+    const { title, description, siteName, bg, fg, muted } = opts;
+    // Naive line wrapping at ~22 chars (large font). Good enough for an OG card;
+    // anything longer than ~3 lines gets truncated with an ellipsis.
+    const wrap = (text, maxChars, maxLines) => {
+        const words = text.split(/\s+/);
+        const lines = [];
+        let current = '';
+        for (const w of words) {
+            if (lines.length >= maxLines)
+                break;
+            const next = current ? `${current} ${w}` : w;
+            if (next.length > maxChars) {
+                if (current)
+                    lines.push(current);
+                current = w;
+                if (lines.length === maxLines - 1 && words.indexOf(w) < words.length - 1) {
+                    lines.push(current.length > maxChars ? current.slice(0, maxChars - 1) + '…' : current + '…');
+                    current = '';
+                    break;
+                }
+            }
+            else {
+                current = next;
+            }
+        }
+        if (current && lines.length < maxLines)
+            lines.push(current);
+        return lines;
+    };
+    const escapeSvg = (s) => s.replace(/&/g, '&amp;').replace(/</g, '&lt;').replace(/>/g, '&gt;').replace(/"/g, '&quot;');
+    const titleLines = wrap(title, 28, 3);
+    const descLines = description ? wrap(description, 60, 2) : [];
+    const titleEls = titleLines
+        .map((line, i) => `<tspan x="60" dy="${i === 0 ? 0 : 78}">${escapeSvg(line)}</tspan>`)
+        .join('');
+    const descEls = descLines
+        .map((line, i) => `<tspan x="60" dy="${i === 0 ? 0 : 36}">${escapeSvg(line)}</tspan>`)
+        .join('');
+    // Layout: site name top-left, title bottom-left, description below title.
+    // Coordinates are roughly aligned to the 1200x630 spec used by every major
+    // social platform.
+    const titleY = descLines.length > 0 ? 360 : 420;
+    const descY = titleY + 80 * titleLines.length;
+    return `<?xml version="1.0" encoding="UTF-8"?>
+<svg xmlns="http://www.w3.org/2000/svg" width="1200" height="630" viewBox="0 0 1200 630">
+  <rect width="1200" height="630" fill="${bg}"/>
+  ${siteName ? `<text x="60" y="100" font-family="system-ui, -apple-system, Segoe UI, Arial, sans-serif" font-size="28" font-weight="500" fill="${muted}">${escapeSvg(siteName)}</text>` : ''}
+  <text x="60" y="${titleY}" font-family="system-ui, -apple-system, Segoe UI, Arial, sans-serif" font-size="68" font-weight="700" fill="${fg}">${titleEls}</text>
+  ${descLines.length > 0 ? `<text x="60" y="${descY}" font-family="system-ui, -apple-system, Segoe UI, Arial, sans-serif" font-size="30" fill="${muted}">${descEls}</text>` : ''}
+  <rect x="60" y="560" width="60" height="6" fill="${fg}" rx="3"/>
+</svg>`;
+}
+//# sourceMappingURL=page-shape.js.map

package/dist/api/route-helpers/page-shape.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"page-shape.js","sourceRoot":"","sources":["../../../src/api/route-helpers/page-shape.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAA;AAEpC,MAAM,UAAU,iBAAiB,CAAC,QAAa;IAC7C,OAAO;QACL,GAAG,QAAQ;QACX,IAAI,EAAE,QAAQ,CAAC,IAAI,IAAI,QAAQ,CAAC,MAAM,IAAI,EAAE;QAC5C,EAAE,EAAE,QAAQ,CAAC,EAAE,IAAI,QAAQ,CAAC,WAAW,IAAI,EAAE;QAC7C,IAAI,EAAE,MAAM,CAAC,QAAQ,CAAC,IAAI,IAAI,QAAQ,CAAC,UAAU,IAAI,GAAG,CAAC;QACzD,IAAI,EAAE,MAAM,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,CAAC;QAChC,MAAM,EAAE,QAAQ,CAAC,MAAM,IAAI,IAAI;KAChC,CAAA;AACH,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,IAAS;IACxC,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IAChC,MAAM,cAAc,GAAG,QAAQ,CAAC,IAAI,CAAC,cAAc,CAAC,CAAA;IACpD,MAAM,UAAU,GAAG,cAAc,CAAC,MAAM,IAAI,IAAI,CAAC,MAAM,CAAA;IACvD,MAAM,UAAU,GAAG,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,UAAU,IAAI,CAAC,CAAC,CAAA;IAC1F,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,CAAA;IAC5D,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,IAAI,IAAI,CAAC,kBAAkB,IAAI,cAAc,CAAC,UAAU,IAAI,EAAE,CAAA;IAChG,kEAAkE;IAClE,0EAA0E;IAC1E,wEAAwE;IACxE,4EAA4E;IAC5E,gCAAgC;IAChC,OAAO;QACL,EAAE,EAAE,IAAI,CAAC,EAAE;QACX,UAAU,EAAE,IAAI,CAAC,UAAU;QAC3B,SAAS,EAAE,IAAI,CAAC,SAAS;QACzB,GAAG,EAAE,IAAI,CAAC,GAAG,IAAI,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC;QACrD,KAAK,EAAE,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,IAAI,UAAU;QAC7C,KAAK,EAAE,MAAM,CAAC,cAAc,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,IAAI,CAAC,CAAC;QACtD,MAAM,EAAE,UAAU;QAClB,SAAS,EAAE,IAAI,CAAC,SAAS,IAAI,EAAE;QAC/B,eAAe,EAAE,IAAI,CAAC,eAAe,IAAI,EAAE;QAC3C,SAAS,EAAE,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,YAAY,IAAI,EAAE;QACpD,UAAU;KACX,CAAA;AACH,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,WAAW,CAAC,IAQ3B;IACC,MAAM,EAAE,KAAK,EAAE,WAAW,EAAE,QAAQ,EAAE,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,GAAG,IAAI,CAAA;IAE5D,6EAA6E;IAC7E,iEAAiE;IACjE,MAAM,IAAI,GAAG,CAAC,IAAY,EAAE,QAAgB,EAAE,QAAgB,EAAY,EAAE;QAC1E,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAA;QAC/B,MAAM,KAAK,GAAa,EAAE,CAAA;QAC1B,IAAI,OAAO,GAAG,EAAE,CAAA;QAChB,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;YACtB,IAAI,KAAK,CAAC,MAAM,IAAI,QAAQ;gBAAE,MAAK;YACnC,MAAM,IAAI,GAAG,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAA;YAC5C,IAAI,IAAI,CAAC,MAAM,GAAG,QAAQ,EAAE,CAAC;gBAC3B,IAAI,OAAO;oBAAE,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;gBAChC,OAAO,GAAG,CAAC,CAAA;gBACX,IAAI,KAAK,CAAC,MAAM,KAAK,QAAQ,GAAG,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBACzE,KAAK,CAAC,IAAI,CACR,OAAO,CAAC,MAAM,GAAG,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,QAAQ,GAAG,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,OAAO,GAAG,GAAG,CACjF,CAAA;oBACD,OAAO,GAAG,EAAE,CAAA;oBACZ,MAAK;gBACP,CAAC;YACH,CAAC;iBAAM,CAAC;gBACN,OAAO,GAAG,IAAI,CAAA;YAChB,CAAC;QACH,CAAC;QACD,IAAI,OAAO,IAAI,KAAK,CAAC,MAAM,GAAG,QAAQ;YAAE,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;QAC3D,OAAO,KAAK,CAAA;IACd,CAAC,CAAA;IAED,MAAM,SAAS,GAAG,CAAC,CAAS,EAAE,EAAE,CAC9B,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAA;IAE9F,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,EAAE,EAAE,EAAE,CAAC,CAAC,CAAA;IACrC,MAAM,SAAS,GAAG,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAA;IAE7D,MAAM,QAAQ,GAAG,UAAU;SACxB,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,EAAE,CAAC,qBAAqB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,KAAK,SAAS,CAAC,IAAI,CAAC,UAAU,CAAC;SACrF,IAAI,CAAC,EAAE,CAAC,CAAA;IACX,MAAM,OAAO,GAAG,SAAS;SACtB,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,EAAE,CAAC,qBAAqB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,KAAK,SAAS,CAAC,IAAI,CAAC,UAAU,CAAC;SACrF,IAAI,CAAC,EAAE,CAAC,CAAA;IAEX,0EAA0E;IAC1E,2EAA2E;IAC3E,mBAAmB;IACnB,MAAM,MAAM,GAAG,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAA;IAC/C,MAAM,KAAK,GAAG,MAAM,GAAG,EAAE,GAAG,UAAU,CAAC,MAAM,CAAA;IAE7C,OAAO;;0CAEiC,EAAE;IACxC,QAAQ,CAAC,CAAC,CAAC,mIAAmI,KAAK,KAAK,SAAS,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE;oBACzK,MAAM,gHAAgH,EAAE,KAAK,QAAQ;IACrJ,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,mBAAmB,KAAK,8FAA8F,KAAK,KAAK,OAAO,SAAS,CAAC,CAAC,CAAC,EAAE;qDAC3H,EAAE;OAChD,CAAA;AACP,CAAC"}

package/dist/api/route-helpers.d.ts

@@ -1,361 +1,11 @@
-import type { ActionContext } from '../actions.js';
-import { type TeamOptions } from '../auth/team.js';
-import type { FetchFormEntriesParams, FetchFormsParams, FormDefinition } from '../forms/types.js';
-import { type IncomingFile } from '../forms/files.js';
-import { type ApiKeyScope } from '../security/api-key-enhanced.js';
-import { SECURITY_HEADERS } from './security-headers.js';
-import type { PrentaDB } from '../db/client-types.js';
-export declare function importBlobStorage(): Promise<any>;
 export { importAIPlugin } from '../ai/plugin-import.js';
-/**
- * Build the system/user prompt for an inline co-author action. Kept
- * deterministic and small so the governed runtime can route it to any
- * configured provider/model.
- */
-export declare function buildCoauthorPrompt(action: 'rewrite' | 'expand' | 'compress' | 'proofread', body: {
-    text?: string;
-    style?: string;
-    tone?: string;
-    instructions?: string;
-    targetLength?: number;
-}): {
-    system: string;
-    user: string;
-    maxTokens: number;
-};
-/**
- * Common helper for the read endpoints. Reads the `?populate=` query param,
- * fetches the target collection's field schema, and expands every relation
- * reference into a {@link RelationSummary}. When the caller didn't ask for
- * population (or the doc has no `data` field) we short-circuit and return
- * the doc untouched.
- *
- * Lives here (not in `actions.ts`) because the rest of the actions API
- * stays purely DB-shaped — population is an HTTP concern.
- */
-export declare function maybePopulate(request: Request, collection: string, doc: Record<string, unknown> | null, dbInstance: PrentaDB, viewer?: {
-    id?: string;
-    role?: string;
-}): Promise<Record<string, unknown> | null>;
-export { SECURITY_HEADERS };
-export declare function json(data: unknown, status?: number): Response;
-/**
- * Variant of `json()` that emits the Phase-5.5 public-read
- * `Cache-Control` header when the active CMS config opts in.
- *
- * - Session-cookie requests always get `private, no-store`.
- * - API-key / unauthenticated requests get
- *   `public, s-maxage=N, stale-while-revalidate=M` when
- *   `cache.publicReads.enabled` is true.
- * - Otherwise no `Cache-Control` header is set (i.e. the response is
- *   uncacheable downstream, matching the pre-5.5 behaviour).
- *
- * Use this for the public read endpoints (`/collections/:slug`,
- * `/collections/:slug/:id`, `/globals/:slug`, `/resolve`). Mutating
- * endpoints stay on the plain `json()` so the CDN never caches a write
- * response by accident.
- */
-export declare function jsonWithCache(data: unknown, request: Request, status?: number): Response;
-export declare function errorResponse(message: string, status: number): Response;
-export declare function internalError(err: unknown, context?: string): Response;
-/**
- * Map a thrown action-layer error to the right HTTP status. The data layer
- * throws plain `Error`s with stable, human-readable prefixes for client-fixable
- * problems (publish validation, access/permission, not-found); those are 4xx
- * and the message is safe to return verbatim. Anything else falls through to
- * {@link internalError} (500, generic message, logged).
- */
-export declare function actionError(err: unknown, context?: string): Response;
-export declare function clampPageSize(raw: number | string | null, max?: number, fallback?: number): number;
-/**
- * Clamp a 1-based list `page` query param. Negative / zero / NaN values must
- * never reach Prisma `skip` (negative OFFSET → validation error → opaque 500).
- * Mirrors forms/users/redirects (`Math.max(1, …)`).
- */
-export declare function clampPage(raw: number | string | null | undefined, fallback?: number): number;
-/** Parse a JSON object body; invalid JSON or a non-object yields a 400. */
-export declare function readJsonBody(request: Request): Promise<{
-    ok: true;
-    data: Record<string, unknown>;
-} | {
-    ok: false;
-    error: Response;
-}>;
-export declare function mediaUrl(storageKey: unknown): string;
-export declare function normalizeMediaItem(media: any): any;
-/**
- * Map the `MediaUsage` join rows (with their related document) into the
- * `{ page, path }[]` shape the admin drawer renders. Soft-deleted documents
- * are excluded so trashed pages don't keep an asset looking "in use".
- */
-export declare function buildMediaUsedOn(mediaUsages: unknown): {
-    page: string;
-    path: string;
-}[];
-/**
- * Derive a concise, Title-Cased title from AI-generated alt text. The alt
- * text is already a model output describing the image, so the title stays
- * grounded in real content rather than the filename.
- */
-export declare function deriveMediaTitleFromAlt(alt: string): string;
-export declare function asRecord(value: unknown): Record<string, unknown>;
-export declare function normalizeSubmission(submission: any): any;
-/**
- * Map a forms-service domain error to an HTTP response. Returns `null` for
- * unrecognised errors so the caller can fall through to `internalError`.
- */
-export declare function mapFormError(err: unknown): Response | null;
-export declare function parseFormsQuery(url: URL): FetchFormsParams;
-export declare function parseEntriesQuery(url: URL): FetchFormEntriesParams;
-/**
- * Build CORS headers for the public form endpoints. When the form has no
- * embed allowlist we reflect the requesting origin (open embedding). When an
- * allowlist is set we only echo the origin if it matches, so a disallowed site
- * cannot read the response. Browser-level CORS is complemented by a hard
- * server-side origin check in the submit handler.
- */
-export declare function formCorsHeaders(request: Request, allowedDomains?: string[]): Record<string, string>;
-export declare function jsonWithHeaders(data: unknown, status: number, extra: Record<string, string>): Response;
-/**
- * Parse a public submission request into field values, files, and metadata.
- * Supports both `application/json` (no files) and `multipart/form-data`
- * (files + fields). Unknown/oversized bodies are rejected by the caller's
- * Content-Length gate before this runs.
- */
-export declare function parseSubmissionRequest(request: Request): Promise<{
-    values: Record<string, unknown>;
-    files: IncomingFile[];
-    meta: {
-        attribution: Record<string, unknown> | null;
-        elapsedMs: number | null;
-        pageUrl: string | null;
-        captchaToken: string;
-    };
-} | null>;
-/**
- * Shared public-submission handler used by both the slug-based public route and
- * the legacy by-id route. Enforces per-IP+form rate limiting, embed-origin
- * allowlisting, optional CAPTCHA, file validation, then runs the core
- * submission pipeline. Always responds with CORS headers so embedded forms can
- * read the result.
- */
-export declare function submitToForm(request: Request, form: FormDefinition): Promise<Response>;
-/** Native HTML form posts typically prefer HTML; fetch/XHR clients send Accept: application/json. */
-export declare function requestPrefersHtmlResponse(request: Request): boolean;
-export declare function normalizeRedirect(redirect: any): any;
-export declare function normalizeSeoPage(page: any): {
-    id: any;
-    collection: any;
-    updatedAt: any;
-    url: {};
-    title: any;
-    score: number;
-    issues: number;
-    metaTitle: {};
-    metaDescription: {};
-    canonical: {};
-    schemaType: {};
-};
-export declare function hasModel(d: any, name: string): boolean;
-/** Format a number compactly, e.g. 8400 -> "8.4K", 1_200_000 -> "1.2M". */
-export declare function formatCompactNumber(n: number): string;
-/** Minimal CSV line parser supporting double-quoted fields with escaped quotes. */
-export declare function parseCsvLine(line: string): string[];
-export declare function modelNotAvailable(name: string): Response;
-/**
- * XML-escape a value for safe inclusion in sitemap content. Sitemaps reject
- * unescaped ampersands and angle brackets; URLs frequently contain `&` query
- * separators, so this is non-optional.
- */
-export declare function escapeXml(value: string): string;
-/**
- * URLs per sitemap file. The sitemaps protocol caps a single file at 50,000
- * URLs, but the child-sitemap route must load each row's full `data` JSON blob
- * (for path/noindex/images) into memory to build the XML — at 45k rows that is
- * hundreds of MB per request on an unauthenticated, crawler-hit endpoint. We
- * cap well below the protocol limit to bound per-request memory; collections
- * larger than this are split across multiple `?page=N` files referenced from
- * the sitemap index, so no URLs are lost.
- */
-export declare const SITEMAP_PAGE_SIZE = 10000;
-/**
- * Renders a 1200x630 SVG suitable for og:image. We don't pull in Satori/resvg
- * because most integrators don't need PNG — major crawlers (Facebook, Twitter,
- * LinkedIn, Slack, Discord) handle image/svg+xml correctly. Sites that
- * specifically need PNG can override with their own /og endpoint via
- * @vercel/og and point `seo.defaultOgImage` at it.
- */
-export declare function renderOgSvg(opts: {
-    title: string;
-    description?: string;
-    siteName?: string | null;
-    theme: 'light' | 'dark';
-    bg: string;
-    fg: string;
-    muted: string;
-}): string;
-/**
- * Log unexpected query failures from the `safe*` wrappers.
- *
- * The wrappers exist so an optional Prisma model (e.g. a delegate
- * that older schemas don't define) doesn't blow up the route — they
- * return the empty value (`0` / `[]`) when the model isn't available.
- * That defensive contract historically swallowed *every* error,
- * including Prisma's "Unknown argument" rejections that flag a real
- * application bug (see the `relationLoadStrategy` regression
- * discovered while landing Phase 5.5 #5). Logging the underlying
- * error preserves the defensive return semantics while making the
- * actual class of bug visible in Vercel + Sentry logs.
- *
- * Kept private to this module — it's a logging contract, not a
- * public API.
- */
-export declare function logSafeQueryFailure(scope: string, err: unknown): void;
-export declare function safeCount(model: any, where?: Record<string, unknown>): Promise<number>;
-export declare function safeFindMany<T>(model: any, args: Record<string, unknown>): Promise<T[]>;
-/**
- * String-level gate before fetching a media `storageKey`. Delegates to
- * {@link validateWebhookUrl} (IP canonicalization for decimal/octal/hex,
- * CGNAT, metadata, etc.) so this allowlist cannot drift from the SSRF policy
- * used by `safeFetch`. Also rejects `*.local` (mDNS) which webhook validation
- * does not cover.
- */
-export declare function isAllowedStorageUrl(url: string): boolean;
-/**
- * Fetch image bytes for multimodal (vision) analysis through {@link safeFetch}
- * (SSRF-safe: re-validates the host, DNS-resolves to defeat rebinding, no
- * redirects). Returns `null` on any failure (non-image, oversize, blocked,
- * network) so the caller transparently falls back to a context-only heuristic.
- */
-export declare function fetchImageForVision(url: string, knownMimeType?: string): Promise<{
-    base64: string;
-    mimeType: string;
-} | null>;
-export declare function getSessionSecret(): string;
-export declare function isSecretMissing(): boolean;
-/**
- * Authenticated request context. `apiKey` is set when the request was
- * authenticated via an `act_sk_*` API key (rather than a user session) — in
- * that case `sessionId` is the API key id and `role` reflects either the
- * granted `admin` scope or `'API_KEY'` for scoped keys.
- */
-export type AuthSession = {
-    userId: string;
-    role: string;
-    sessionId: string;
-    apiKey?: {
-        id: string;
-        scopes: ApiKeyScope;
-    };
-};
-export declare function extractSession(request: Request): Promise<AuthSession | null>;
-export declare function parseCookieHeader(cookieHeader: string): Record<string, string>;
-/**
- * Verify a password (or "current password") posted in the X-Reauth-Password
- * header against the authenticated user. Returns an error Response when the
- * header is missing or the password is wrong; returns null on success.
- *
- * Use this for high-impact account changes (TOTP enable/disable, role change,
- * delete user, etc.) so a stolen session alone cannot perform them.
- */
-export declare function requirePasswordReauth(request: Request, userId: string): Promise<Response | null>;
-export declare function requireAuth(request: Request): Promise<{
-    session: AuthSession;
-    error?: never;
-} | {
-    session?: never;
-    error: Response;
-}>;
-/**
- * API-key collection-scope check as a plain denial reason (`null` = allowed).
- * JWT sessions are never denied here — role checks are the route's job. Use
- * this where the collection is only known deep inside a service (e.g. an SEO
- * fix that writes a document) and a `Response` cannot be returned directly.
- */
-export declare function apiKeyCollectionScopeDenial(session: AuthSession, collection: string, action: 'read' | 'create' | 'update' | 'delete'): string | null;
-/**
- * Check that the request's auth context permits `action` on `collection`.
- * - Session-authenticated requests fall through to `requireRole` semantics:
- *   write actions require WRITE_ROLES.
- * - API-key-authenticated requests must have an explicit scope match.
- */
-export declare function requireCollectionScope(session: AuthSession, collection: string, action: 'read' | 'create' | 'update' | 'delete'): Response | null;
-export declare function requireGlobalScope(session: AuthSession, slug: string): Response | null;
-export declare function requireMediaScope(session: AuthSession): Response | null;
-export declare function requireAdminScope(session: AuthSession): Response | null;
-export declare function buildActionContext(session: {
-    userId: string;
-    role: string;
-}, db: PrentaDB, locale?: string): ActionContext;
-export declare const WRITE_ROLES: Set<string>;
-export declare const ADMIN_ROLES: Set<string>;
-export declare function requireRole(role: string, allowedRoles: Set<string>): Response | null;
-/**
- * Build the shared {@link TeamOptions} for the Users endpoints from config +
- * session: the workspace domain (for external-domain detection) and the seat
- * cap (config-provided; null = unlimited until billing exists).
- */
-export declare function teamOptionsFor(session: AuthSession): TeamOptions;
-/**
- * DB-aware variant of {@link isEmailConfigured} — also true when a provider
- * is configured through Settings > Email.
- */
-export declare function isEmailConfiguredAsync(db?: unknown): Promise<boolean>;
-export declare const loginLimiter: import("../security/rate-limit.js").RateLimiter;
-export declare const loginUnknownLimiter: import("../security/rate-limit.js").RateLimiter;
-/** Per-email-hash login limiter so account protection does not depend on IP. */
-export declare const loginEmailLimiter: import("../security/rate-limit.js").RateLimiter;
-export declare const inviteLimiter: import("../security/rate-limit.js").RateLimiter;
-export declare const totpLimiter: import("../security/rate-limit.js").RateLimiter;
-export declare const emailTestLimiter: import("../security/rate-limit.js").RateLimiter;
-export declare const aiGenerateLimiter: import("../security/rate-limit.js").RateLimiter;
-export declare const uploadLimiter: import("../security/rate-limit.js").RateLimiter;
-export declare const aiAnalysisLimiter: import("../security/rate-limit.js").RateLimiter;
-export declare const AI_ANALYSIS_MAX_CHARS = 50000;
-export declare const linkHealthLimiter: import("../security/rate-limit.js").RateLimiter;
-export declare const seoAuditLimiter: import("../security/rate-limit.js").RateLimiter;
-export declare const searchConsoleTestLimiter: import("../security/rate-limit.js").RateLimiter;
-export declare const searchSyncLimiter: import("../security/rate-limit.js").RateLimiter;
-export declare const digestTestSendLimiter: import("../security/rate-limit.js").RateLimiter;
-export declare function checkRateLimitAsync(limiter: {
-    check: (key: string) => Promise<{
-        allowed: boolean;
-    }>;
-}, key: string): Promise<boolean>;
-/**
- * Resolve the client IP from trusted-proxy headers (Vercel first, then x-real-ip,
- * then x-forwarded-for only when PRENTA_TRUST_PROXY=1). Returns 'unknown' when
- * no trustworthy source is available — callers MUST treat that case as a hard
- * failure for security-sensitive decisions like rate-limit keys and IP allowlists.
- */
-export declare function clientIp(request: Request): string;
-/**
- * Compute a before/after diff of top-level scalar (string/number/boolean) keys
- * between a stored record and an incoming patch. Used to audit settings changes
- * without ever logging nested objects (which may hold secret blobs).
- */
-export declare function diffScalarKeys(previous: Record<string, unknown>, next: Record<string, unknown>): Array<{
-    key: string;
-    from: unknown;
-    to: unknown;
-}>;
-/**
- * After a successful primary-credential check, prune the user's active sessions
- * down to the configured concurrent maximum (default 5; configurable via
- * `auth.maxConcurrentSessions`). Strategy is "revoke oldest" so a user can
- * always sign in.
- */
-export declare function enforceSessionLimitsForUser(d: any, userId: string): Promise<void>;
-/** Revoke every live API key for a user. Called with session revocation. */
-export declare function revokeUserApiKeys(d: any, userId: string): Promise<number>;
-export declare function getAdminPath(): string;
+export { SECURITY_HEADERS } from './security-headers.js';
 export { findCollectionDef, collectionSupportsSections } from '../config/collection-lookup.js';
-/**
- * Gate a per-document read for endpoints (e.g. SEO analysis) that fetch a
- * document directly rather than through the collection CRUD routes. Enforces
- * both the API-key collection scope and the collection's `access.read` rule
- * so an AUTHOR scoped to one collection cannot read another's content.
- * Returns a `Response` to short-circuit with, or `null` when allowed.
- */
-export declare function enforceDocumentReadAccess(session: AuthSession, collection: string): Promise<Response | null>;
+export { importBlobStorage, mediaUrl, normalizeMediaItem, buildMediaUsedOn, deriveMediaTitleFromAlt, isAllowedStorageUrl, fetchImageForVision, } from './route-helpers/media.js';
+export { buildCoauthorPrompt, maybePopulate } from './route-helpers/authoring.js';
+export { json, jsonWithCache, errorResponse, internalError, actionError, clampPageSize, clampPage, readJsonBody, asRecord, hasModel, formatCompactNumber, parseCsvLine, modelNotAvailable, escapeXml, SITEMAP_PAGE_SIZE, logSafeQueryFailure, safeCount, safeFindMany, } from './route-helpers/http.js';
+export { normalizeSubmission, mapFormError, parseFormsQuery, parseEntriesQuery, formCorsHeaders, jsonWithHeaders, parseSubmissionRequest, submitToForm, requestPrefersHtmlResponse, } from './route-helpers/forms.js';
+export { normalizeRedirect, normalizeSeoPage, renderOgSvg } from './route-helpers/page-shape.js';
+export { getSessionSecret, isSecretMissing, extractSession, parseCookieHeader, requirePasswordReauth, requireAuth, apiKeyCollectionScopeDenial, requireCollectionScope, requireGlobalScope, requireMediaScope, requireAdminScope, buildActionContext, WRITE_ROLES, ADMIN_ROLES, requireRole, teamOptionsFor, isEmailConfiguredAsync, loginLimiter, loginUnknownLimiter, loginEmailLimiter, inviteLimiter, totpLimiter, emailTestLimiter, aiGenerateLimiter, uploadLimiter, aiAnalysisLimiter, AI_ANALYSIS_MAX_CHARS, linkHealthLimiter, seoAuditLimiter, searchConsoleTestLimiter, searchSyncLimiter, digestTestSendLimiter, checkRateLimitAsync, clientIp, diffScalarKeys, enforceSessionLimitsForUser, revokeUserApiKeys, getAdminPath, enforceDocumentReadAccess, } from './route-helpers/auth.js';
+export type { AuthSession } from './route-helpers/auth.js';
 //# sourceMappingURL=route-helpers.d.ts.map

package/dist/api/route-helpers.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"route-helpers.d.ts","sourceRoot":"","sources":["../../src/api/route-helpers.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,eAAe,CAAA;AAKlD,OAAO,EAA0B,KAAK,WAAW,EAAE,MAAM,iBAAiB,CAAA;AAa1E,OAAO,KAAK,EACV,sBAAsB,EACtB,gBAAgB,EAChB,cAAc,EAEf,MAAM,mBAAmB,CAAA;AAM1B,OAAO,EAIL,KAAK,YAAY,EAClB,MAAM,mBAAmB,CAAA;AAY1B,OAAO,EAOL,KAAK,WAAW,EACjB,MAAM,iCAAiC,CAAA;AAExC,OAAO,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAA;AACxD,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,uBAAuB,CAAA;AAIrD,wBAAsB,iBAAiB,IAAI,OAAO,CAAC,GAAG,CAAC,CAGtD;AAED,OAAO,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAA;AAEvD;;;;GAIG;AACH,wBAAgB,mBAAmB,CACjC,MAAM,EAAE,SAAS,GAAG,QAAQ,GAAG,UAAU,GAAG,WAAW,EACvD,IAAI,EAAE;IACJ,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,YAAY,CAAC,EAAE,MAAM,CAAA;CACtB,GACA;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,CAuDrD;AAED;;;;;;;;;GASG;AACH,wBAAsB,aAAa,CACjC,OAAO,EAAE,OAAO,EAChB,UAAU,EAAE,MAAM,EAClB,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,EACnC,UAAU,EAAE,QAAQ,EACpB,MAAM,CAAC,EAAE;IAAE,EAAE,CAAC,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAA;CAAE,GACtC,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC,CA4BzC;AAED,OAAO,EAAE,gBAAgB,EAAE,CAAA;AAI3B,wBAAgB,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,MAAM,SAAM,GAAG,QAAQ,CAK1D;AAED;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,aAAa,CAAC,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,SAAM,GAAG,QAAQ,CAKrF;AAED,wBAAgB,aAAa,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,QAAQ,CAEvE;AAED,wBAAgB,aAAa,CAAC,GAAG,EAAE,OAAO,EAAE,OAAO,CAAC,EAAE,MAAM,GAAG,QAAQ,CAatE;AAED;;;;;;GAMG;AACH,wBAAgB,WAAW,CAAC,GAAG,EAAE,OAAO,EAAE,OAAO,CAAC,EAAE,MAAM,GAAG,QAAQ,CAgBpE;AA0BD,wBAAgB,aAAa,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,EAAE,GAAG,SAAM,EAAE,QAAQ,SAAK,GAAG,MAAM,CAG3F;AAED;;;;GAIG;AACH,wBAAgB,SAAS,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,GAAG,SAAS,EAAE,QAAQ,SAAI,GAAG,MAAM,CAIvF;AAED,2EAA2E;AAC3E,wBAAsB,YAAY,CAChC,OAAO,EAAE,OAAO,GACf,OAAO,CAAC;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CAAE,GAAG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,KAAK,EAAE,QAAQ,CAAA;CAAE,CAAC,CAUvF;AAED,wBAAgB,QAAQ,CAAC,UAAU,EAAE,OAAO,GAAG,MAAM,CAMpD;AAED,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,GAAG,OA8C5C;AAeD;;;;GAIG;AACH,wBAAgB,gBAAgB,CAAC,WAAW,EAAE,OAAO,GAAG;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,EAAE,CAcvF;AAsBD;;;;GAIG;AACH,wBAAgB,uBAAuB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAa3D;AAED,wBAAgB,QAAQ,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAIhE;AAED,wBAAgB,mBAAmB,CAAC,UAAU,EAAE,GAAG,OAuBlD;AAED;;;GAGG;AACH,wBAAgB,YAAY,CAAC,GAAG,EAAE,OAAO,GAAG,QAAQ,GAAG,IAAI,CAc1D;AAED,wBAAgB,eAAe,CAAC,GAAG,EAAE,GAAG,GAAG,gBAAgB,CAkB1D;AAED,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,GAAG,GAAG,sBAAsB,CAyBlE;AAID;;;;;;GAMG;AACH,wBAAgB,eAAe,CAC7B,OAAO,EAAE,OAAO,EAChB,cAAc,CAAC,EAAE,MAAM,EAAE,GACxB,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAcxB;AAuBD,wBAAgB,eAAe,CAC7B,IAAI,EAAE,OAAO,EACb,MAAM,EAAE,MAAM,EACd,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAC5B,QAAQ,CAKV;AAED;;;;;GAKG;AACH,wBAAsB,sBAAsB,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC;IACtE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IAC/B,KAAK,EAAE,YAAY,EAAE,CAAA;IACrB,IAAI,EAAE;QACJ,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAA;QAC3C,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;QACxB,OAAO,EAAE,MAAM,GAAG,IAAI,CAAA;QACtB,YAAY,EAAE,MAAM,CAAA;KACrB,CAAA;CACF,GAAG,IAAI,CAAC,CAkCR;AA4FD;;;;;;GAMG;AACH,wBAAsB,YAAY,CAAC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,cAAc,GAAG,OAAO,CAAC,QAAQ,CAAC,CAmJ5F;AAED,qGAAqG;AACrG,wBAAgB,0BAA0B,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAWpE;AAqCD,wBAAgB,iBAAiB,CAAC,QAAQ,EAAE,GAAG,OAS9C;AAED,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,GAAG;;;;;;;;;;;;EAyBzC;AAED,wBAAgB,QAAQ,CAAC,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAMtD;AAED,2EAA2E;AAC3E,wBAAgB,mBAAmB,CAAC,CAAC,EAAE,MAAM,GAAG,MAAM,CAKrD;AAED,mFAAmF;AACnF,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,EAAE,CA4BnD;AAED,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,GAAG,QAAQ,CAOxD;AAED;;;;GAIG;AACH,wBAAgB,SAAS,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAO/C;AAED;;;;;;;;GAQG;AACH,eAAO,MAAM,iBAAiB,QAAQ,CAAA;AAEtC;;;;;;GAMG;AACH,wBAAgB,WAAW,CAAC,IAAI,EAAE;IAChC,KAAK,EAAE,MAAM,CAAA;IACb,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IACxB,KAAK,EAAE,OAAO,GAAG,MAAM,CAAA;IACvB,EAAE,EAAE,MAAM,CAAA;IACV,EAAE,EAAE,MAAM,CAAA;IACV,KAAK,EAAE,MAAM,CAAA;CACd,GAAG,MAAM,CAyDT;AAED;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,GAAG,IAAI,CAUrE;AAED,wBAAsB,SAAS,CAAC,KAAK,EAAE,GAAG,EAAE,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC,CAe5F;AAED,wBAAsB,YAAY,CAAC,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC,CAAC,EAAE,CAAC,CAe7F;AAED;;;;;;GAMG;AACH,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CASxD;AAKD;;;;;GAKG;AACH,wBAAsB,mBAAmB,CACvC,GAAG,EAAE,MAAM,EACX,aAAa,CAAC,EAAE,MAAM,GACrB,OAAO,CAAC;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,CAAC,CAgBtD;AAKD,wBAAgB,gBAAgB,IAAI,MAAM,CAuBzC;AAED,wBAAgB,eAAe,IAAI,OAAO,CAQzC;AAED;;;;;GAKG;AACH,MAAM,MAAM,WAAW,GAAG;IACxB,MAAM,EAAE,MAAM,CAAA;IACd,IAAI,EAAE,MAAM,CAAA;IACZ,SAAS,EAAE,MAAM,CAAA;IACjB,MAAM,CAAC,EAAE;QACP,EAAE,EAAE,MAAM,CAAA;QACV,MAAM,EAAE,WAAW,CAAA;KACpB,CAAA;CACF,CAAA;AAED,wBAAsB,cAAc,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC,CAsFlF;AAED,wBAAgB,iBAAiB,CAAC,YAAY,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAS9E;AAED;;;;;;;GAOG;AACH,wBAAsB,qBAAqB,CACzC,OAAO,EAAE,OAAO,EAChB,MAAM,EAAE,MAAM,GACb,OAAO,CAAC,QAAQ,GAAG,IAAI,CAAC,CA0B1B;AAED,wBAAsB,WAAW,CAC/B,OAAO,EAAE,OAAO,GACf,OAAO,CAAC;IAAE,OAAO,EAAE,WAAW,CAAC;IAAC,KAAK,CAAC,EAAE,KAAK,CAAA;CAAE,GAAG;IAAE,OAAO,CAAC,EAAE,KAAK,CAAC;IAAC,KAAK,EAAE,QAAQ,CAAA;CAAE,CAAC,CAkBzF;AAED;;;;;GAKG;AACH,wBAAgB,2BAA2B,CACzC,OAAO,EAAE,WAAW,EACpB,UAAU,EAAE,MAAM,EAClB,MAAM,EAAE,MAAM,GAAG,QAAQ,GAAG,QAAQ,GAAG,QAAQ,GAC9C,MAAM,GAAG,IAAI,CAKf;AAED;;;;;GAKG;AACH,wBAAgB,sBAAsB,CACpC,OAAO,EAAE,WAAW,EACpB,UAAU,EAAE,MAAM,EAClB,MAAM,EAAE,MAAM,GAAG,QAAQ,GAAG,QAAQ,GAAG,QAAQ,GAC9C,QAAQ,GAAG,IAAI,CAOjB;AAED,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,GAAG,QAAQ,GAAG,IAAI,CAOtF;AAED,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,WAAW,GAAG,QAAQ,GAAG,IAAI,CAOvE;AAED,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,WAAW,GAAG,QAAQ,GAAG,IAAI,CAQvE;AAED,wBAAgB,kBAAkB,CAChC,OAAO,EAAE;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,EACzC,EAAE,EAAE,QAAQ,EACZ,MAAM,CAAC,EAAE,MAAM,GACd,aAAa,CAOf;AAED,eAAO,MAAM,WAAW,aAAkD,CAAA;AAC1E,eAAO,MAAM,WAAW,aAA8B,CAAA;AAEtD,wBAAgB,WAAW,CAAC,IAAI,EAAE,MAAM,EAAE,YAAY,EAAE,GAAG,CAAC,MAAM,CAAC,GAAG,QAAQ,GAAG,IAAI,CAKpF;AAED;;;;GAIG;AACH,wBAAgB,cAAc,CAAC,OAAO,EAAE,WAAW,GAAG,WAAW,CAehE;AASD;;;GAGG;AACH,wBAAsB,sBAAsB,CAAC,EAAE,CAAC,EAAE,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAI3E;AAED,eAAO,MAAM,YAAY,iDAIvB,CAAA;AAOF,eAAO,MAAM,mBAAmB,iDAI9B,CAAA;AACF,gFAAgF;AAChF,eAAO,MAAM,iBAAiB,iDAI5B,CAAA;AAGF,eAAO,MAAM,aAAa,iDAAmE,CAAA;AAC7F,eAAO,MAAM,WAAW,iDAItB,CAAA;AAGF,eAAO,MAAM,gBAAgB,iDAAmE,CAAA;AAEhG,eAAO,MAAM,iBAAiB,iDAI5B,CAAA;AAGF,eAAO,MAAM,aAAa,iDAIxB,CAAA;AAGF,eAAO,MAAM,iBAAiB,iDAI5B,CAAA;AAGF,eAAO,MAAM,qBAAqB,QAAS,CAAA;AAC3C,eAAO,MAAM,iBAAiB,iDAAkE,CAAA;AAChG,eAAO,MAAM,eAAe,iDAAmE,CAAA;AAG/F,eAAO,MAAM,wBAAwB,iDAInC,CAAA;AAGF,eAAO,MAAM,iBAAiB,iDAI5B,CAAA;AAEF,eAAO,MAAM,qBAAqB,iDAIhC,CAAA;AAEF,wBAAsB,mBAAmB,CACvC,OAAO,EAAE;IAAE,KAAK,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC;QAAE,OAAO,EAAE,OAAO,CAAA;KAAE,CAAC,CAAA;CAAE,EAClE,GAAG,EAAE,MAAM,GACV,OAAO,CAAC,OAAO,CAAC,CAWlB;AAED;;;;;GAKG;AACH,wBAAgB,QAAQ,CAAC,OAAO,EAAE,OAAO,GAAG,MAAM,CAEjD;AAED;;;;GAIG;AACH,wBAAgB,cAAc,CAC5B,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EACjC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC5B,KAAK,CAAC;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,OAAO,CAAC;IAAC,EAAE,EAAE,OAAO,CAAA;CAAE,CAAC,CAapD;AAID;;;;;GAKG;AACH,wBAAsB,2BAA2B,CAAC,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CA8CvF;AAED,4EAA4E;AAC5E,wBAAsB,iBAAiB,CAAC,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAO/E;AAED,wBAAgB,YAAY,IAAI,MAAM,CAErC;AAKD,OAAO,EAAE,iBAAiB,EAAE,0BAA0B,EAAE,MAAM,gCAAgC,CAAA;AAE9F;;;;;;GAMG;AACH,wBAAsB,yBAAyB,CAC7C,OAAO,EAAE,WAAW,EACpB,UAAU,EAAE,MAAM,GACjB,OAAO,CAAC,QAAQ,GAAG,IAAI,CAAC,CAY1B"}
+{"version":3,"file":"route-helpers.d.ts","sourceRoot":"","sources":["../../src/api/route-helpers.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAA;AACvD,OAAO,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAA;AAIxD,OAAO,EAAE,iBAAiB,EAAE,0BAA0B,EAAE,MAAM,gCAAgC,CAAA;AAC9F,OAAO,EACL,iBAAiB,EACjB,QAAQ,EACR,kBAAkB,EAClB,gBAAgB,EAChB,uBAAuB,EACvB,mBAAmB,EACnB,mBAAmB,GACpB,MAAM,0BAA0B,CAAA;AACjC,OAAO,EAAE,mBAAmB,EAAE,aAAa,EAAE,MAAM,8BAA8B,CAAA;AACjF,OAAO,EACL,IAAI,EACJ,aAAa,EACb,aAAa,EACb,aAAa,EACb,WAAW,EACX,aAAa,EACb,SAAS,EACT,YAAY,EACZ,QAAQ,EACR,QAAQ,EACR,mBAAmB,EACnB,YAAY,EACZ,iBAAiB,EACjB,SAAS,EACT,iBAAiB,EACjB,mBAAmB,EACnB,SAAS,EACT,YAAY,GACb,MAAM,yBAAyB,CAAA;AAChC,OAAO,EACL,mBAAmB,EACnB,YAAY,EACZ,eAAe,EACf,iBAAiB,EACjB,eAAe,EACf,eAAe,EACf,sBAAsB,EACtB,YAAY,EACZ,0BAA0B,GAC3B,MAAM,0BAA0B,CAAA;AACjC,OAAO,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,WAAW,EAAE,MAAM,+BAA+B,CAAA;AAChG,OAAO,EACL,gBAAgB,EAChB,eAAe,EACf,cAAc,EACd,iBAAiB,EACjB,qBAAqB,EACrB,WAAW,EACX,2BAA2B,EAC3B,sBAAsB,EACtB,kBAAkB,EAClB,iBAAiB,EACjB,iBAAiB,EACjB,kBAAkB,EAClB,WAAW,EACX,WAAW,EACX,WAAW,EACX,cAAc,EACd,sBAAsB,EACtB,YAAY,EACZ,mBAAmB,EACnB,iBAAiB,EACjB,aAAa,EACb,WAAW,EACX,gBAAgB,EAChB,iBAAiB,EACjB,aAAa,EACb,iBAAiB,EACjB,qBAAqB,EACrB,iBAAiB,EACjB,eAAe,EACf,wBAAwB,EACxB,iBAAiB,EACjB,qBAAqB,EACrB,mBAAmB,EACnB,QAAQ,EACR,cAAc,EACd,2BAA2B,EAC3B,iBAAiB,EACjB,YAAY,EACZ,yBAAyB,GAC1B,MAAM,yBAAyB,CAAA;AAChC,YAAY,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAA"}