@prenta/core 7.7.1 → 7.8.0

package/dist/api/route-helpers/http.js

@@ -0,0 +1,286 @@
+import { publicReadCacheControl } from '../../cache/http.js';
+import { createLogger } from '../../diagnostics/logger.js';
+import { captureServerException } from '../../diagnostics/sentry.js';
+import { getPrentaConfig } from '../../config/runtime.js';
+import { ModelNotAvailableError } from '../guarded-db.js';
+import { SECURITY_HEADERS } from '../security-headers.js';
+export const logger = createLogger('api');
+export function json(data, status = 200) {
+    return new Response(JSON.stringify(data), {
+        status,
+        headers: { ...SECURITY_HEADERS },
+    });
+}
+/**
+ * Variant of `json()` that emits the Phase-5.5 public-read
+ * `Cache-Control` header when the active CMS config opts in.
+ *
+ * - Session-cookie requests always get `private, no-store`.
+ * - API-key / unauthenticated requests get
+ *   `public, s-maxage=N, stale-while-revalidate=M` when
+ *   `cache.publicReads.enabled` is true.
+ * - Otherwise no `Cache-Control` header is set (i.e. the response is
+ *   uncacheable downstream, matching the pre-5.5 behaviour).
+ *
+ * Use this for the public read endpoints (`/collections/:slug`,
+ * `/collections/:slug/:id`, `/globals/:slug`, `/resolve`). Mutating
+ * endpoints stay on the plain `json()` so the CDN never caches a write
+ * response by accident.
+ */
+export function jsonWithCache(data, request, status = 200) {
+    const cacheControl = publicReadCacheControl(request, getPrentaConfig()?.cache);
+    const headers = { ...SECURITY_HEADERS };
+    if (cacheControl)
+        headers['Cache-Control'] = cacheControl;
+    return new Response(JSON.stringify(data), { status, headers });
+}
+export function errorResponse(message, status) {
+    return json({ error: message }, status);
+}
+export function internalError(err, context) {
+    if (err instanceof ModelNotAvailableError) {
+        return modelNotAvailable(err.model);
+    }
+    const msg = err instanceof Error ? err.message : String(err);
+    logger.error(msg, context ? { context } : undefined);
+    // Fire-and-forget: capture lazily imports the optional @sentry/node and never
+    // throws, so we don't await it before returning the error response.
+    void captureServerException(err, { scope: 'api', extra: context ? { context } : undefined });
+    if (process.env.PRENTA_DEBUG_ERRORS === '1') {
+        return errorResponse(msg, 500);
+    }
+    return errorResponse('Internal server error', 500);
+}
+/**
+ * Map a thrown action-layer error to the right HTTP status. The data layer
+ * throws plain `Error`s with stable, human-readable prefixes for client-fixable
+ * problems (publish validation, access/permission, not-found); those are 4xx
+ * and the message is safe to return verbatim. Anything else falls through to
+ * {@link internalError} (500, generic message, logged).
+ */
+export function actionError(err, context) {
+    if (err instanceof ModelNotAvailableError)
+        return modelNotAvailable(err.model);
+    const conflict = uniqueConstraintConflict(err);
+    if (conflict)
+        return errorResponse(conflict, 409);
+    const msg = err instanceof Error ? err.message : String(err);
+    if (/^Cannot publish —/.test(msg))
+        return errorResponse(msg, 422);
+    if (/^Invalid media field/i.test(msg))
+        return errorResponse(msg, 400);
+    if (/insufficient permissions/i.test(msg) ||
+        /^Access denied/i.test(msg) ||
+        /submit for review before publishing/i.test(msg)) {
+        return errorResponse(msg, 403);
+    }
+    if (/not found/i.test(msg))
+        return errorResponse(msg, 404);
+    return internalError(err, context);
+}
+/**
+ * Detect a Prisma unique-constraint violation (P2002) via its stable `code`,
+ * without importing the heavy Prisma error class. Returns a client-safe 409
+ * message, or null when `err` is not a unique-constraint error. The usual
+ * trigger is a duplicate (collection, slug) on create/rename/publish — which
+ * previously fell through to a 500 (#560); a genuine live-slug clash is a
+ * client-fixable conflict, so it belongs at 409.
+ */
+function uniqueConstraintConflict(err) {
+    if (!err || typeof err !== 'object' || err.code !== 'P2002') {
+        return null;
+    }
+    const target = err.meta?.target;
+    const fields = Array.isArray(target)
+        ? target.map(String)
+        : typeof target === 'string'
+            ? [target]
+            : [];
+    if (fields.some((f) => f.toLowerCase().includes('slug'))) {
+        return 'A document with this slug already exists in this collection.';
+    }
+    return 'That value is already in use.';
+}
+export function clampPageSize(raw, max = 100, fallback = 20) {
+    const n = Number(raw) || fallback;
+    return Math.min(Math.max(1, n), max);
+}
+/**
+ * Clamp a 1-based list `page` query param. Negative / zero / NaN values must
+ * never reach Prisma `skip` (negative OFFSET → validation error → opaque 500).
+ * Mirrors forms/users/redirects (`Math.max(1, …)`).
+ */
+export function clampPage(raw, fallback = 1) {
+    const n = Number(raw);
+    if (!Number.isFinite(n) || n < 1)
+        return fallback;
+    return Math.min(Math.floor(n), 100_000);
+}
+/** Parse a JSON object body; invalid JSON or a non-object yields a 400. */
+export async function readJsonBody(request) {
+    try {
+        const parsed = await request.json();
+        if (!parsed || typeof parsed !== 'object' || Array.isArray(parsed)) {
+            return { ok: false, error: errorResponse('Invalid JSON body', 400) };
+        }
+        return { ok: true, data: parsed };
+    }
+    catch {
+        return { ok: false, error: errorResponse('Invalid JSON body', 400) };
+    }
+}
+export function asRecord(value) {
+    return value && typeof value === 'object' && !Array.isArray(value)
+        ? value
+        : {};
+}
+export function hasModel(d, name) {
+    try {
+        return d[name] && typeof d[name].findMany === 'function';
+    }
+    catch {
+        return false;
+    }
+}
+/** Format a number compactly, e.g. 8400 -> "8.4K", 1_200_000 -> "1.2M". */
+export function formatCompactNumber(n) {
+    if (!Number.isFinite(n))
+        return '0';
+    if (Math.abs(n) >= 1_000_000)
+        return `${(n / 1_000_000).toFixed(1)}M`;
+    if (Math.abs(n) >= 1_000)
+        return `${(n / 1_000).toFixed(1)}K`;
+    return String(Math.round(n));
+}
+/** Minimal CSV line parser supporting double-quoted fields with escaped quotes. */
+export function parseCsvLine(line) {
+    const out = [];
+    let cur = '';
+    let inQuotes = false;
+    for (let i = 0; i < line.length; i++) {
+        const ch = line[i];
+        if (inQuotes) {
+            if (ch === '"') {
+                if (line[i + 1] === '"') {
+                    cur += '"';
+                    i++;
+                }
+                else {
+                    inQuotes = false;
+                }
+            }
+            else {
+                cur += ch;
+            }
+        }
+        else if (ch === '"') {
+            inQuotes = true;
+        }
+        else if (ch === ',') {
+            out.push(cur);
+            cur = '';
+        }
+        else {
+            cur += ch;
+        }
+    }
+    out.push(cur);
+    return out;
+}
+export function modelNotAvailable(name) {
+    return errorResponse(`The "${name}" model is not available in your Prisma schema. ` +
+        'Run `prenta db:init` for new schemas, or carefully update the existing Prenta block, create/apply a Prisma migration, then regenerate Prisma Client. ' +
+        'See https://prentacms.dev/docs/database-setup for required models.', 501);
+}
+/**
+ * XML-escape a value for safe inclusion in sitemap content. Sitemaps reject
+ * unescaped ampersands and angle brackets; URLs frequently contain `&` query
+ * separators, so this is non-optional.
+ */
+export function escapeXml(value) {
+    return value
+        .replace(/&/g, '&amp;')
+        .replace(/</g, '&lt;')
+        .replace(/>/g, '&gt;')
+        .replace(/"/g, '&quot;')
+        .replace(/'/g, '&apos;');
+}
+/**
+ * URLs per sitemap file. The sitemaps protocol caps a single file at 50,000
+ * URLs, but the child-sitemap route must load each row's full `data` JSON blob
+ * (for path/noindex/images) into memory to build the XML — at 45k rows that is
+ * hundreds of MB per request on an unauthenticated, crawler-hit endpoint. We
+ * cap well below the protocol limit to bound per-request memory; collections
+ * larger than this are split across multiple `?page=N` files referenced from
+ * the sitemap index, so no URLs are lost.
+ */
+export const SITEMAP_PAGE_SIZE = 10000;
+/**
+ * Log unexpected query failures from the `safe*` wrappers.
+ *
+ * The wrappers exist so an optional Prisma model (e.g. a delegate
+ * that older schemas don't define) doesn't blow up the route — they
+ * return the empty value (`0` / `[]`) when the model isn't available.
+ * That defensive contract historically swallowed *every* error,
+ * including Prisma's "Unknown argument" rejections that flag a real
+ * application bug (see the `relationLoadStrategy` regression
+ * discovered while landing Phase 5.5 #5). Logging the underlying
+ * error preserves the defensive return semantics while making the
+ * actual class of bug visible in Vercel + Sentry logs.
+ *
+ * Kept private to this module — it's a logging contract, not a
+ * public API.
+ */
+export function logSafeQueryFailure(scope, err) {
+    // Defensive: never throw from a logger that wraps `safe*` queries
+    // — the whole point of those wrappers is to keep the request hot
+    // path alive.
+    try {
+        const message = err instanceof Error ? err.message : String(err);
+        logger.warn(`${scope} query failed`, { error: message });
+    }
+    catch {
+        /* swallow */
+    }
+}
+export async function safeCount(model, where) {
+    if (!model || typeof model !== 'object')
+        return 0;
+    let countFn;
+    try {
+        countFn = model.count;
+    }
+    catch {
+        return 0;
+    }
+    if (typeof countFn !== 'function')
+        return 0;
+    try {
+        return await countFn.call(model, where ? { where } : undefined);
+    }
+    catch (err) {
+        logSafeQueryFailure('safeCount', err);
+        return 0;
+    }
+}
+export async function safeFindMany(model, args) {
+    if (!model || typeof model !== 'object')
+        return [];
+    let findManyFn;
+    try {
+        findManyFn = model.findMany;
+    }
+    catch {
+        return [];
+    }
+    if (typeof findManyFn !== 'function')
+        return [];
+    try {
+        return await findManyFn.call(model, args);
+    }
+    catch (err) {
+        logSafeQueryFailure('safeFindMany', err);
+        return [];
+    }
+}
+//# sourceMappingURL=http.js.map

package/dist/api/route-helpers/http.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"http.js","sourceRoot":"","sources":["../../../src/api/route-helpers/http.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,sBAAsB,EAAE,MAAM,qBAAqB,CAAA;AAC5D,OAAO,EAAE,YAAY,EAAE,MAAM,6BAA6B,CAAA;AAC1D,OAAO,EAAE,sBAAsB,EAAE,MAAM,6BAA6B,CAAA;AACpE,OAAO,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAA;AACzD,OAAO,EAAE,sBAAsB,EAAE,MAAM,kBAAkB,CAAA;AACzD,OAAO,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAA;AAEzD,MAAM,CAAC,MAAM,MAAM,GAAG,YAAY,CAAC,KAAK,CAAC,CAAA;AAEzC,MAAM,UAAU,IAAI,CAAC,IAAa,EAAE,MAAM,GAAG,GAAG;IAC9C,OAAO,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE;QACxC,MAAM;QACN,OAAO,EAAE,EAAE,GAAG,gBAAgB,EAAE;KACjC,CAAC,CAAA;AACJ,CAAC;AAED;;;;;;;;;;;;;;;GAeG;AACH,MAAM,UAAU,aAAa,CAAC,IAAa,EAAE,OAAgB,EAAE,MAAM,GAAG,GAAG;IACzE,MAAM,YAAY,GAAG,sBAAsB,CAAC,OAAO,EAAE,eAAe,EAAE,EAAE,KAAK,CAAC,CAAA;IAC9E,MAAM,OAAO,GAA2B,EAAE,GAAG,gBAAgB,EAAE,CAAA;IAC/D,IAAI,YAAY;QAAE,OAAO,CAAC,eAAe,CAAC,GAAG,YAAY,CAAA;IACzD,OAAO,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAA;AAChE,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,OAAe,EAAE,MAAc;IAC3D,OAAO,IAAI,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,MAAM,CAAC,CAAA;AACzC,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,GAAY,EAAE,OAAgB;IAC1D,IAAI,GAAG,YAAY,sBAAsB,EAAE,CAAC;QAC1C,OAAO,iBAAiB,CAAC,GAAG,CAAC,KAAK,CAAC,CAAA;IACrC,CAAC;IACD,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAA;IAC5D,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAA;IACpD,8EAA8E;IAC9E,oEAAoE;IACpE,KAAK,sBAAsB,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC,CAAA;IAC5F,IAAI,OAAO,CAAC,GAAG,CAAC,mBAAmB,KAAK,GAAG,EAAE,CAAC;QAC5C,OAAO,aAAa,CAAC,GAAG,EAAE,GAAG,CAAC,CAAA;IAChC,CAAC;IACD,OAAO,aAAa,CAAC,uBAAuB,EAAE,GAAG,CAAC,CAAA;AACpD,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,WAAW,CAAC,GAAY,EAAE,OAAgB;IACxD,IAAI,GAAG,YAAY,sBAAsB;QAAE,OAAO,iBAAiB,CAAC,GAAG,CAAC,KAAK,CAAC,CAAA;IAC9E,MAAM,QAAQ,GAAG,wBAAwB,CAAC,GAAG,CAAC,CAAA;IAC9C,IAAI,QAAQ;QAAE,OAAO,aAAa,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAA;IACjD,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAA;IAC5D,IAAI,mBAAmB,CAAC,IAAI,CAAC,GAAG,CAAC;QAAE,OAAO,aAAa,CAAC,GAAG,EAAE,GAAG,CAAC,CAAA;IACjE,IAAI,uBAAuB,CAAC,IAAI,CAAC,GAAG,CAAC;QAAE,OAAO,aAAa,CAAC,GAAG,EAAE,GAAG,CAAC,CAAA;IACrE,IACE,2BAA2B,CAAC,IAAI,CAAC,GAAG,CAAC;QACrC,iBAAiB,CAAC,IAAI,CAAC,GAAG,CAAC;QAC3B,sCAAsC,CAAC,IAAI,CAAC,GAAG,CAAC,EAChD,CAAC;QACD,OAAO,aAAa,CAAC,GAAG,EAAE,GAAG,CAAC,CAAA;IAChC,CAAC;IACD,IAAI,YAAY,CAAC,IAAI,CAAC,GAAG,CAAC;QAAE,OAAO,aAAa,CAAC,GAAG,EAAE,GAAG,CAAC,CAAA;IAC1D,OAAO,aAAa,CAAC,GAAG,EAAE,OAAO,CAAC,CAAA;AACpC,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,wBAAwB,CAAC,GAAY;IAC5C,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAK,GAA0B,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;QACpF,OAAO,IAAI,CAAA;IACb,CAAC;IACD,MAAM,MAAM,GAAI,GAAuC,CAAC,IAAI,EAAE,MAAM,CAAA;IACpE,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;QAClC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC;QACpB,CAAC,CAAC,OAAO,MAAM,KAAK,QAAQ;YAC1B,CAAC,CAAC,CAAC,MAAM,CAAC;YACV,CAAC,CAAC,EAAE,CAAA;IACR,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC;QACzD,OAAO,8DAA8D,CAAA;IACvE,CAAC;IACD,OAAO,+BAA+B,CAAA;AACxC,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,GAA2B,EAAE,GAAG,GAAG,GAAG,EAAE,QAAQ,GAAG,EAAE;IACjF,MAAM,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,IAAI,QAAQ,CAAA;IACjC,OAAO,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,GAAG,CAAC,CAAA;AACtC,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,SAAS,CAAC,GAAuC,EAAE,QAAQ,GAAG,CAAC;IAC7E,MAAM,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,CAAA;IACrB,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC;QAAE,OAAO,QAAQ,CAAA;IACjD,OAAO,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,OAAO,CAAC,CAAA;AACzC,CAAC;AAED,2EAA2E;AAC3E,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,OAAgB;IAEhB,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,IAAI,EAAE,CAAA;QACnC,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;YACnE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,aAAa,CAAC,mBAAmB,EAAE,GAAG,CAAC,EAAE,CAAA;QACtE,CAAC;QACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,MAAiC,EAAE,CAAA;IAC9D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,aAAa,CAAC,mBAAmB,EAAE,GAAG,CAAC,EAAE,CAAA;IACtE,CAAC;AACH,CAAC;AAED,MAAM,UAAU,QAAQ,CAAC,KAAc;IACrC,OAAO,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAChE,CAAC,CAAE,KAAiC;QACpC,CAAC,CAAC,EAAE,CAAA;AACR,CAAC;AAED,MAAM,UAAU,QAAQ,CAAC,CAAM,EAAE,IAAY;IAC3C,IAAI,CAAC;QACH,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,KAAK,UAAU,CAAA;IAC1D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAA;IACd,CAAC;AACH,CAAC;AAED,2EAA2E;AAC3E,MAAM,UAAU,mBAAmB,CAAC,CAAS;IAC3C,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC;QAAE,OAAO,GAAG,CAAA;IACnC,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,SAAS;QAAE,OAAO,GAAG,CAAC,CAAC,GAAG,SAAS,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAA;IACrE,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,KAAK;QAAE,OAAO,GAAG,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAA;IAC7D,OAAO,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAA;AAC9B,CAAC;AAED,mFAAmF;AACnF,MAAM,UAAU,YAAY,CAAC,IAAY;IACvC,MAAM,GAAG,GAAa,EAAE,CAAA;IACxB,IAAI,GAAG,GAAG,EAAE,CAAA;IACZ,IAAI,QAAQ,GAAG,KAAK,CAAA;IACpB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACrC,MAAM,EAAE,GAAG,IAAI,CAAC,CAAC,CAAE,CAAA;QACnB,IAAI,QAAQ,EAAE,CAAC;YACb,IAAI,EAAE,KAAK,GAAG,EAAE,CAAC;gBACf,IAAI,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,GAAG,EAAE,CAAC;oBACxB,GAAG,IAAI,GAAG,CAAA;oBACV,CAAC,EAAE,CAAA;gBACL,CAAC;qBAAM,CAAC;oBACN,QAAQ,GAAG,KAAK,CAAA;gBAClB,CAAC;YACH,CAAC;iBAAM,CAAC;gBACN,GAAG,IAAI,EAAE,CAAA;YACX,CAAC;QACH,CAAC;aAAM,IAAI,EAAE,KAAK,GAAG,EAAE,CAAC;YACtB,QAAQ,GAAG,IAAI,CAAA;QACjB,CAAC;aAAM,IAAI,EAAE,KAAK,GAAG,EAAE,CAAC;YACtB,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;YACb,GAAG,GAAG,EAAE,CAAA;QACV,CAAC;aAAM,CAAC;YACN,GAAG,IAAI,EAAE,CAAA;QACX,CAAC;IACH,CAAC;IACD,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;IACb,OAAO,GAAG,CAAA;AACZ,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,IAAY;IAC5C,OAAO,aAAa,CAClB,QAAQ,IAAI,kDAAkD;QAC5D,uJAAuJ;QACvJ,oEAAoE,EACtE,GAAG,CACJ,CAAA;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,SAAS,CAAC,KAAa;IACrC,OAAO,KAAK;SACT,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC;SACtB,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC;SACrB,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC;SACrB,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC;SACvB,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAA;AAC5B,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,KAAK,CAAA;AAEtC;;;;;;;;;;;;;;;GAeG;AACH,MAAM,UAAU,mBAAmB,CAAC,KAAa,EAAE,GAAY;IAC7D,kEAAkE;IAClE,iEAAiE;IACjE,cAAc;IACd,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAA;QAChE,MAAM,CAAC,IAAI,CAAC,GAAG,KAAK,eAAe,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAA;IAC1D,CAAC;IAAC,MAAM,CAAC;QACP,aAAa;IACf,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,KAAU,EAAE,KAA+B;IACzE,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,CAAC,CAAA;IACjD,IAAI,OAAY,CAAA;IAChB,IAAI,CAAC;QACH,OAAO,GAAG,KAAK,CAAC,KAAK,CAAA;IACvB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,CAAC,CAAA;IACV,CAAC;IACD,IAAI,OAAO,OAAO,KAAK,UAAU;QAAE,OAAO,CAAC,CAAA;IAC3C,IAAI,CAAC;QACH,OAAO,MAAM,OAAO,CAAC,IAAI,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAA;IACjE,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,mBAAmB,CAAC,WAAW,EAAE,GAAG,CAAC,CAAA;QACrC,OAAO,CAAC,CAAA;IACV,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,YAAY,CAAI,KAAU,EAAE,IAA6B;IAC7E,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,EAAE,CAAA;IAClD,IAAI,UAAe,CAAA;IACnB,IAAI,CAAC;QACH,UAAU,GAAG,KAAK,CAAC,QAAQ,CAAA;IAC7B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAA;IACX,CAAC;IACD,IAAI,OAAO,UAAU,KAAK,UAAU;QAAE,OAAO,EAAE,CAAA;IAC/C,IAAI,CAAC;QACH,OAAO,MAAM,UAAU,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,CAAA;IAC3C,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,mBAAmB,CAAC,cAAc,EAAE,GAAG,CAAC,CAAA;QACxC,OAAO,EAAE,CAAA;IACX,CAAC;AACH,CAAC"}

package/dist/api/route-helpers/media.d.ts

@@ -0,0 +1,37 @@
+export declare function importBlobStorage(): Promise<any>;
+export declare function mediaUrl(storageKey: unknown): string;
+export declare function normalizeMediaItem(media: any): any;
+/**
+ * Map the `MediaUsage` join rows (with their related document) into the
+ * `{ page, path }[]` shape the admin drawer renders. Soft-deleted documents
+ * are excluded so trashed pages don't keep an asset looking "in use".
+ */
+export declare function buildMediaUsedOn(mediaUsages: unknown): {
+    page: string;
+    path: string;
+}[];
+/**
+ * Derive a concise, Title-Cased title from AI-generated alt text. The alt
+ * text is already a model output describing the image, so the title stays
+ * grounded in real content rather than the filename.
+ */
+export declare function deriveMediaTitleFromAlt(alt: string): string;
+/**
+ * String-level gate before fetching a media `storageKey`. Delegates to
+ * {@link validateWebhookUrl} (IP canonicalization for decimal/octal/hex,
+ * CGNAT, metadata, etc.) so this allowlist cannot drift from the SSRF policy
+ * used by `safeFetch`. Also rejects `*.local` (mDNS) which webhook validation
+ * does not cover.
+ */
+export declare function isAllowedStorageUrl(url: string): boolean;
+/**
+ * Fetch image bytes for multimodal (vision) analysis through {@link safeFetch}
+ * (SSRF-safe: re-validates the host, DNS-resolves to defeat rebinding, no
+ * redirects). Returns `null` on any failure (non-image, oversize, blocked,
+ * network) so the caller transparently falls back to a context-only heuristic.
+ */
+export declare function fetchImageForVision(url: string, knownMimeType?: string): Promise<{
+    base64: string;
+    mimeType: string;
+} | null>;
+//# sourceMappingURL=media.d.ts.map

package/dist/api/route-helpers/media.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"media.d.ts","sourceRoot":"","sources":["../../../src/api/route-helpers/media.ts"],"names":[],"mappings":"AAQA,wBAAsB,iBAAiB,IAAI,OAAO,CAAC,GAAG,CAAC,CAGtD;AAED,wBAAgB,QAAQ,CAAC,UAAU,EAAE,OAAO,GAAG,MAAM,CAMpD;AAED,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,GAAG,OA8C5C;AAeD;;;;GAIG;AACH,wBAAgB,gBAAgB,CAAC,WAAW,EAAE,OAAO,GAAG;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,EAAE,CAcvF;AAsBD;;;;GAIG;AACH,wBAAgB,uBAAuB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAa3D;AAED;;;;;;GAMG;AACH,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CASxD;AAKD;;;;;GAKG;AACH,wBAAsB,mBAAmB,CACvC,GAAG,EAAE,MAAM,EACX,aAAa,CAAC,EAAE,MAAM,GACrB,OAAO,CAAC;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,CAAC,CAgBtD"}

package/dist/api/route-helpers/media.js

@@ -0,0 +1,189 @@
+import { formatBytes } from '../../media/optimize.js';
+import { calculateMediaSeoScore } from '../../media/seo.js';
+import { safeFetch } from '../../security/safe-fetch.js';
+import { validateWebhookUrl } from '../../security/webhook.js';
+import { getPrentaConfig } from '../../config/runtime.js';
+// Opaque dynamic import so Turbopack/webpack won't statically analyze the specifier.
+// Returns { put, del, ... } from @vercel/blob when available.
+export async function importBlobStorage() {
+    const mod = '@vercel/' + 'blob';
+    return import(/* webpackIgnore: true */ /* turbopackIgnore: true */ /* @vite-ignore */ mod);
+}
+export function mediaUrl(storageKey) {
+    const value = String(storageKey ?? '');
+    if (!value)
+        return '';
+    return value.startsWith('http://') || value.startsWith('https://') || value.startsWith('/')
+        ? value
+        : '';
+}
+export function normalizeMediaItem(media) {
+    const width = typeof media.width === 'number' ? media.width : null;
+    const height = typeof media.height === 'number' ? media.height : null;
+    const sizeBytes = Number(media.fileSize ?? media.sizeBytes ?? 0);
+    const isDecorative = media.isDecorative === true;
+    const usedOnTitles = Array.isArray(media.mediaUsages)
+        ? media.mediaUsages
+            .map((usage) => usage?.document?.title)
+            .filter((title) => typeof title === 'string' && title.trim().length > 0)
+        : [];
+    // Derived on every read (never persisted) so the score can't drift from the
+    // metadata — see `media/seo.ts` for the weight contract.
+    const seo = calculateMediaSeoScore({
+        fileName: media.filename ?? media.name ?? null,
+        mimeType: media.mimeType ?? media.type ?? null,
+        altText: media.altText ?? media.altTag ?? null,
+        title: media.title ?? null,
+        caption: media.caption ?? null,
+        description: media.description ?? null,
+        focusKeyword: media.focusKeyword ?? null,
+        sizeBytes,
+        width,
+        height,
+        isDecorative,
+        usedOnTitles,
+    });
+    return {
+        ...media,
+        name: media.filename ?? media.name ?? '',
+        type: media.mimeType ?? media.type ?? '',
+        size: formatBytes(sizeBytes),
+        sizeBytes,
+        date: media.createdAt ?? media.updatedAt ?? null,
+        url: mediaUrl(media.storageKey ?? media.url),
+        dimensions: width && height ? `${width}x${height}` : undefined,
+        format: typeof media.mimeType === 'string' ? media.mimeType.split('/')[1] : undefined,
+        altTag: media.altText ?? media.altTag ?? '',
+        isDecorative,
+        ...(media.aiAltText != null ? { aiAltSuggestion: media.aiAltText } : {}),
+        title: media.title ?? '',
+        seoScore: seo.score,
+        seoGrade: seo.grade,
+        seoIssues: seo.issues,
+    };
+}
+/**
+ * Build the admin editor route for a document that references a media asset.
+ * Pages own the `/pages/*` namespace; post-type collections use
+ * `/posts/:type/:id/edit`; everything else falls back to the generic
+ * collection editor. Kept in sync with the route table in `AdminRoot.tsx`.
+ */
+function mediaUsageEditPath(collection, id) {
+    if (collection === 'pages')
+        return `/pages/${id}/edit`;
+    const def = getPrentaConfig()?.collections?.[collection];
+    if (def?.type === 'post')
+        return `/posts/${collection}/${id}/edit`;
+    return `/collections/${collection}/${id}`;
+}
+/**
+ * Map the `MediaUsage` join rows (with their related document) into the
+ * `{ page, path }[]` shape the admin drawer renders. Soft-deleted documents
+ * are excluded so trashed pages don't keep an asset looking "in use".
+ */
+export function buildMediaUsedOn(mediaUsages) {
+    if (!Array.isArray(mediaUsages))
+        return [];
+    const seen = new Set();
+    const out = [];
+    for (const usage of mediaUsages) {
+        const doc = usage?.document;
+        if (!doc || doc.deletedAt || seen.has(doc.id))
+            continue;
+        seen.add(doc.id);
+        out.push({
+            page: doc.title || '(untitled)',
+            path: mediaUsageEditPath(doc.collection, doc.id),
+        });
+    }
+    return out;
+}
+const MEDIA_TITLE_STOPWORDS = new Set([
+    'a',
+    'an',
+    'the',
+    'of',
+    'and',
+    'or',
+    'to',
+    'in',
+    'on',
+    'for',
+    'with',
+    'at',
+    'by',
+    'from',
+    'is',
+    'are',
+    'as',
+]);
+/**
+ * Derive a concise, Title-Cased title from AI-generated alt text. The alt
+ * text is already a model output describing the image, so the title stays
+ * grounded in real content rather than the filename.
+ */
+export function deriveMediaTitleFromAlt(alt) {
+    if (!alt)
+        return '';
+    const firstClause = (alt.split(/[.;:\n]/)[0] ?? '').trim();
+    const titled = firstClause
+        .split(/\s+/)
+        .slice(0, 9)
+        .map((word, i) => {
+        const lower = word.toLowerCase();
+        if (i > 0 && MEDIA_TITLE_STOPWORDS.has(lower))
+            return lower;
+        return word.charAt(0).toUpperCase() + word.slice(1);
+    })
+        .join(' ');
+    return titled.slice(0, 80).replace(/[\s,]+$/, '');
+}
+/**
+ * String-level gate before fetching a media `storageKey`. Delegates to
+ * {@link validateWebhookUrl} (IP canonicalization for decimal/octal/hex,
+ * CGNAT, metadata, etc.) so this allowlist cannot drift from the SSRF policy
+ * used by `safeFetch`. Also rejects `*.local` (mDNS) which webhook validation
+ * does not cover.
+ */
+export function isAllowedStorageUrl(url) {
+    if (!validateWebhookUrl(url).valid)
+        return false;
+    try {
+        const h = new URL(url).hostname.toLowerCase();
+        if (h.endsWith('.local'))
+            return false;
+        return true;
+    }
+    catch {
+        return false;
+    }
+}
+/** Max image size (bytes) we'll pull into memory for vision analysis. */
+const MAX_VISION_IMAGE_BYTES = 8 * 1024 * 1024;
+/**
+ * Fetch image bytes for multimodal (vision) analysis through {@link safeFetch}
+ * (SSRF-safe: re-validates the host, DNS-resolves to defeat rebinding, no
+ * redirects). Returns `null` on any failure (non-image, oversize, blocked,
+ * network) so the caller transparently falls back to a context-only heuristic.
+ */
+export async function fetchImageForVision(url, knownMimeType) {
+    try {
+        const resp = await safeFetch(url, { method: 'GET', timeoutMs: 5000 });
+        if (!resp.ok)
+            return null;
+        const contentType = ((resp.headers.get('content-type') ?? knownMimeType ?? '').split(';')[0] ?? '').trim();
+        if (!contentType.startsWith('image/'))
+            return null;
+        const declaredLength = Number(resp.headers.get('content-length') ?? '0');
+        if (declaredLength > MAX_VISION_IMAGE_BYTES)
+            return null;
+        const buffer = Buffer.from(await resp.arrayBuffer());
+        if (buffer.byteLength === 0 || buffer.byteLength > MAX_VISION_IMAGE_BYTES)
+            return null;
+        return { base64: buffer.toString('base64'), mimeType: contentType };
+    }
+    catch {
+        return null;
+    }
+}
+//# sourceMappingURL=media.js.map

package/dist/api/route-helpers/media.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"media.js","sourceRoot":"","sources":["../../../src/api/route-helpers/media.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAA;AACrD,OAAO,EAAE,sBAAsB,EAAE,MAAM,oBAAoB,CAAA;AAC3D,OAAO,EAAE,SAAS,EAAE,MAAM,8BAA8B,CAAA;AACxD,OAAO,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAA;AAC9D,OAAO,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAA;AAEzD,qFAAqF;AACrF,8DAA8D;AAC9D,MAAM,CAAC,KAAK,UAAU,iBAAiB;IACrC,MAAM,GAAG,GAAG,UAAU,GAAG,MAAM,CAAA;IAC/B,OAAO,MAAM,CAAC,yBAAyB,CAAC,2BAA2B,CAAC,kBAAkB,CAAC,GAAG,CAAC,CAAA;AAC7F,CAAC;AAED,MAAM,UAAU,QAAQ,CAAC,UAAmB;IAC1C,MAAM,KAAK,GAAG,MAAM,CAAC,UAAU,IAAI,EAAE,CAAC,CAAA;IACtC,IAAI,CAAC,KAAK;QAAE,OAAO,EAAE,CAAA;IACrB,OAAO,KAAK,CAAC,UAAU,CAAC,SAAS,CAAC,IAAI,KAAK,CAAC,UAAU,CAAC,UAAU,CAAC,IAAI,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC;QACzF,CAAC,CAAC,KAAK;QACP,CAAC,CAAC,EAAE,CAAA;AACR,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,KAAU;IAC3C,MAAM,KAAK,GAAG,OAAO,KAAK,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAA;IAClE,MAAM,MAAM,GAAG,OAAO,KAAK,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAA;IACrE,MAAM,SAAS,GAAG,MAAM,CAAC,KAAK,CAAC,QAAQ,IAAI,KAAK,CAAC,SAAS,IAAI,CAAC,CAAC,CAAA;IAChE,MAAM,YAAY,GAAG,KAAK,CAAC,YAAY,KAAK,IAAI,CAAA;IAChD,MAAM,YAAY,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,WAAW,CAAC;QACnD,CAAC,CAAC,KAAK,CAAC,WAAW;aACd,GAAG,CAAC,CAAC,KAAgD,EAAE,EAAE,CAAC,KAAK,EAAE,QAAQ,EAAE,KAAK,CAAC;aACjF,MAAM,CACL,CAAC,KAAc,EAAmB,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAC1F;QACL,CAAC,CAAC,EAAE,CAAA;IACN,4EAA4E;IAC5E,yDAAyD;IACzD,MAAM,GAAG,GAAG,sBAAsB,CAAC;QACjC,QAAQ,EAAE,KAAK,CAAC,QAAQ,IAAI,KAAK,CAAC,IAAI,IAAI,IAAI;QAC9C,QAAQ,EAAE,KAAK,CAAC,QAAQ,IAAI,KAAK,CAAC,IAAI,IAAI,IAAI;QAC9C,OAAO,EAAE,KAAK,CAAC,OAAO,IAAI,KAAK,CAAC,MAAM,IAAI,IAAI;QAC9C,KAAK,EAAE,KAAK,CAAC,KAAK,IAAI,IAAI;QAC1B,OAAO,EAAE,KAAK,CAAC,OAAO,IAAI,IAAI;QAC9B,WAAW,EAAE,KAAK,CAAC,WAAW,IAAI,IAAI;QACtC,YAAY,EAAE,KAAK,CAAC,YAAY,IAAI,IAAI;QACxC,SAAS;QACT,KAAK;QACL,MAAM;QACN,YAAY;QACZ,YAAY;KACb,CAAC,CAAA;IACF,OAAO;QACL,GAAG,KAAK;QACR,IAAI,EAAE,KAAK,CAAC,QAAQ,IAAI,KAAK,CAAC,IAAI,IAAI,EAAE;QACxC,IAAI,EAAE,KAAK,CAAC,QAAQ,IAAI,KAAK,CAAC,IAAI,IAAI,EAAE;QACxC,IAAI,EAAE,WAAW,CAAC,SAAS,CAAC;QAC5B,SAAS;QACT,IAAI,EAAE,KAAK,CAAC,SAAS,IAAI,KAAK,CAAC,SAAS,IAAI,IAAI;QAChD,GAAG,EAAE,QAAQ,CAAC,KAAK,CAAC,UAAU,IAAI,KAAK,CAAC,GAAG,CAAC;QAC5C,UAAU,EAAE,KAAK,IAAI,MAAM,CAAC,CAAC,CAAC,GAAG,KAAK,IAAI,MAAM,EAAE,CAAC,CAAC,CAAC,SAAS;QAC9D,MAAM,EAAE,OAAO,KAAK,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS;QACrF,MAAM,EAAE,KAAK,CAAC,OAAO,IAAI,KAAK,CAAC,MAAM,IAAI,EAAE;QAC3C,YAAY;QACZ,GAAG,CAAC,KAAK,CAAC,SAAS,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACxE,KAAK,EAAE,KAAK,CAAC,KAAK,IAAI,EAAE;QACxB,QAAQ,EAAE,GAAG,CAAC,KAAK;QACnB,QAAQ,EAAE,GAAG,CAAC,KAAK;QACnB,SAAS,EAAE,GAAG,CAAC,MAAM;KACtB,CAAA;AACH,CAAC;AAED;;;;;GAKG;AACH,SAAS,kBAAkB,CAAC,UAAkB,EAAE,EAAU;IACxD,IAAI,UAAU,KAAK,OAAO;QAAE,OAAO,UAAU,EAAE,OAAO,CAAA;IACtD,MAAM,GAAG,GAAG,eAAe,EAAE,EAAE,WAAW,EAAE,CAAC,UAAU,CAAC,CAAA;IACxD,IAAI,GAAG,EAAE,IAAI,KAAK,MAAM;QAAE,OAAO,UAAU,UAAU,IAAI,EAAE,OAAO,CAAA;IAClE,OAAO,gBAAgB,UAAU,IAAI,EAAE,EAAE,CAAA;AAC3C,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,gBAAgB,CAAC,WAAoB;IACnD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC;QAAE,OAAO,EAAE,CAAA;IAC1C,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAA;IAC9B,MAAM,GAAG,GAAqC,EAAE,CAAA;IAChD,KAAK,MAAM,KAAK,IAAI,WAAW,EAAE,CAAC;QAChC,MAAM,GAAG,GAAI,KAA4B,EAAE,QAAQ,CAAA;QACnD,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,SAAS,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;YAAE,SAAQ;QACvD,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;QAChB,GAAG,CAAC,IAAI,CAAC;YACP,IAAI,EAAE,GAAG,CAAC,KAAK,IAAI,YAAY;YAC/B,IAAI,EAAE,kBAAkB,CAAC,GAAG,CAAC,UAAU,EAAE,GAAG,CAAC,EAAE,CAAC;SACjD,CAAC,CAAA;IACJ,CAAC;IACD,OAAO,GAAG,CAAA;AACZ,CAAC;AAED,MAAM,qBAAqB,GAAG,IAAI,GAAG,CAAC;IACpC,GAAG;IACH,IAAI;IACJ,KAAK;IACL,IAAI;IACJ,KAAK;IACL,IAAI;IACJ,IAAI;IACJ,IAAI;IACJ,IAAI;IACJ,KAAK;IACL,MAAM;IACN,IAAI;IACJ,IAAI;IACJ,MAAM;IACN,IAAI;IACJ,KAAK;IACL,IAAI;CACL,CAAC,CAAA;AAEF;;;;GAIG;AACH,MAAM,UAAU,uBAAuB,CAAC,GAAW;IACjD,IAAI,CAAC,GAAG;QAAE,OAAO,EAAE,CAAA;IACnB,MAAM,WAAW,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAA;IAC1D,MAAM,MAAM,GAAG,WAAW;SACvB,KAAK,CAAC,KAAK,CAAC;SACZ,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC;SACX,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,EAAE;QACf,MAAM,KAAK,GAAG,IAAI,CAAC,WAAW,EAAE,CAAA;QAChC,IAAI,CAAC,GAAG,CAAC,IAAI,qBAAqB,CAAC,GAAG,CAAC,KAAK,CAAC;YAAE,OAAO,KAAK,CAAA;QAC3D,OAAO,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAA;IACrD,CAAC,CAAC;SACD,IAAI,CAAC,GAAG,CAAC,CAAA;IACZ,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAA;AACnD,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,mBAAmB,CAAC,GAAW;IAC7C,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,CAAC,KAAK;QAAE,OAAO,KAAK,CAAA;IAChD,IAAI,CAAC;QACH,MAAM,CAAC,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAA;QAC7C,IAAI,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC;YAAE,OAAO,KAAK,CAAA;QACtC,OAAO,IAAI,CAAA;IACb,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAA;IACd,CAAC;AACH,CAAC;AAED,yEAAyE;AACzE,MAAM,sBAAsB,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI,CAAA;AAE9C;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,GAAW,EACX,aAAsB;IAEtB,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,SAAS,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;QACrE,IAAI,CAAC,IAAI,CAAC,EAAE;YAAE,OAAO,IAAI,CAAA;QACzB,MAAM,WAAW,GAAG,CAClB,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,aAAa,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAC9E,CAAC,IAAI,EAAE,CAAA;QACR,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,QAAQ,CAAC;YAAE,OAAO,IAAI,CAAA;QAClD,MAAM,cAAc,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,IAAI,GAAG,CAAC,CAAA;QACxE,IAAI,cAAc,GAAG,sBAAsB;YAAE,OAAO,IAAI,CAAA;QACxD,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC,CAAA;QACpD,IAAI,MAAM,CAAC,UAAU,KAAK,CAAC,IAAI,MAAM,CAAC,UAAU,GAAG,sBAAsB;YAAE,OAAO,IAAI,CAAA;QACtF,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,QAAQ,EAAE,WAAW,EAAE,CAAA;IACrE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAA;IACb,CAAC;AACH,CAAC"}

package/dist/api/route-helpers/page-shape.d.ts

@@ -0,0 +1,31 @@
+export declare function normalizeRedirect(redirect: any): any;
+export declare function normalizeSeoPage(page: any): {
+    id: any;
+    collection: any;
+    updatedAt: any;
+    url: {};
+    title: any;
+    score: number;
+    issues: number;
+    metaTitle: {};
+    metaDescription: {};
+    canonical: {};
+    schemaType: {};
+};
+/**
+ * Renders a 1200x630 SVG suitable for og:image. We don't pull in Satori/resvg
+ * because most integrators don't need PNG — major crawlers (Facebook, Twitter,
+ * LinkedIn, Slack, Discord) handle image/svg+xml correctly. Sites that
+ * specifically need PNG can override with their own /og endpoint via
+ * @vercel/og and point `seo.defaultOgImage` at it.
+ */
+export declare function renderOgSvg(opts: {
+    title: string;
+    description?: string;
+    siteName?: string | null;
+    theme: 'light' | 'dark';
+    bg: string;
+    fg: string;
+    muted: string;
+}): string;
+//# sourceMappingURL=page-shape.d.ts.map

package/dist/api/route-helpers/page-shape.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"page-shape.d.ts","sourceRoot":"","sources":["../../../src/api/route-helpers/page-shape.ts"],"names":[],"mappings":"AAEA,wBAAgB,iBAAiB,CAAC,QAAQ,EAAE,GAAG,OAS9C;AAED,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,GAAG;;;;;;;;;;;;EAyBzC;AAED;;;;;;GAMG;AACH,wBAAgB,WAAW,CAAC,IAAI,EAAE;IAChC,KAAK,EAAE,MAAM,CAAA;IACb,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IACxB,KAAK,EAAE,OAAO,GAAG,MAAM,CAAA;IACvB,EAAE,EAAE,MAAM,CAAA;IACV,EAAE,EAAE,MAAM,CAAA;IACV,KAAK,EAAE,MAAM,CAAA;CACd,GAAG,MAAM,CAyDT"}