@prenta/core 8.6.1 → 8.7.0

package/dist/privacy/phi.js

@@ -0,0 +1,69 @@
+import { getDB } from '../db.js';
+import { errorResponse } from '../api/route-helpers/http.js';
+const SETTINGS_COLLECTION = 'settings';
+/**
+ * "Protect health information" — a technical disclosure boundary, not a
+ * certification. When on, API keys, MCP, and AI must not receive form
+ * submission values. Admin browser sessions still read the inbox.
+ *
+ * Public submit treats a failed lookup as off so a database blip does not
+ * reject a visitor. Disclosure paths fail closed: if the lookup throws, the
+ * API key is refused.
+ */
+async function readPhiSafeguardsFlag() {
+    const db = getDB();
+    const doc = await db.document.findFirst({
+        where: { collection: SETTINGS_COLLECTION, deletedAt: null },
+        select: { data: true },
+    });
+    const data = doc?.data;
+    if (!data || typeof data !== 'object')
+        return false;
+    const privacy = data.privacy;
+    return privacy?.phiSafeguards === true;
+}
+export async function phiSafeguardsEnabled() {
+    try {
+        return await readPhiSafeguardsFlag();
+    }
+    catch {
+        return false;
+    }
+}
+export async function phiDisclosureDenied(session) {
+    if (!session.apiKey)
+        return null;
+    try {
+        if (!(await readPhiSafeguardsFlag()))
+            return null;
+    }
+    catch {
+        return errorResponse('phi_restricted', 403);
+    }
+    return errorResponse('phi_restricted', 403);
+}
+export async function setPhiSafeguards(enabled, userId) {
+    const db = getDB();
+    const doc = await db.document.findFirst({
+        where: { collection: SETTINGS_COLLECTION, deletedAt: null },
+    });
+    const current = doc?.data && typeof doc.data === 'object' ? doc.data : {};
+    const privacy = current.privacy && typeof current.privacy === 'object'
+        ? current.privacy
+        : {};
+    const next = {
+        ...current,
+        privacy: {
+            ...privacy,
+            phiSafeguards: enabled,
+            updatedAt: new Date().toISOString(),
+            updatedBy: userId,
+        },
+    };
+    if (doc?.id) {
+        await db.document.update({ where: { id: doc.id }, data: { data: next } });
+        return;
+    }
+    throw new Error('Settings global is missing');
+}
+//# sourceMappingURL=phi.js.map

package/dist/privacy/phi.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"phi.js","sourceRoot":"","sources":["../../src/privacy/phi.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,UAAU,CAAA;AAChC,OAAO,EAAE,aAAa,EAAE,MAAM,8BAA8B,CAAA;AAG5D,MAAM,mBAAmB,GAAG,UAAU,CAAA;AAStC;;;;;;;;GAQG;AACH,KAAK,UAAU,qBAAqB;IAClC,MAAM,EAAE,GAAG,KAAK,EAAc,CAAA;IAC9B,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,SAAS,CAAC;QACtC,KAAK,EAAE,EAAE,UAAU,EAAE,mBAAmB,EAAE,SAAS,EAAE,IAAI,EAAE;QAC3D,MAAM,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE;KACvB,CAAC,CAAA;IACF,MAAM,IAAI,GAAG,GAAG,EAAE,IAAI,CAAA;IACtB,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAA;IACnD,MAAM,OAAO,GAAI,IAAkD,CAAC,OAAO,CAAA;IAC3E,OAAO,OAAO,EAAE,aAAa,KAAK,IAAI,CAAA;AACxC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,oBAAoB;IACxC,IAAI,CAAC;QACH,OAAO,MAAM,qBAAqB,EAAE,CAAA;IACtC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAA;IACd,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,OAAoB;IAC5D,IAAI,CAAC,OAAO,CAAC,MAAM;QAAE,OAAO,IAAI,CAAA;IAChC,IAAI,CAAC;QACH,IAAI,CAAC,CAAC,MAAM,qBAAqB,EAAE,CAAC;YAAE,OAAO,IAAI,CAAA;IACnD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,aAAa,CAAC,gBAAgB,EAAE,GAAG,CAAC,CAAA;IAC7C,CAAC;IACD,OAAO,aAAa,CAAC,gBAAgB,EAAE,GAAG,CAAC,CAAA;AAC7C,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,OAAgB,EAAE,MAAc;IACrE,MAAM,EAAE,GAAG,KAAK,EAAc,CAAA;IAC9B,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,SAAS,CAAC;QACtC,KAAK,EAAE,EAAE,UAAU,EAAE,mBAAmB,EAAE,SAAS,EAAE,IAAI,EAAE;KAC5D,CAAC,CAAA;IACF,MAAM,OAAO,GACX,GAAG,EAAE,IAAI,IAAI,OAAO,GAAG,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAE,GAAG,CAAC,IAAgC,CAAC,CAAC,CAAC,EAAE,CAAA;IACxF,MAAM,OAAO,GACX,OAAO,CAAC,OAAO,IAAI,OAAO,OAAO,CAAC,OAAO,KAAK,QAAQ;QACpD,CAAC,CAAE,OAAO,CAAC,OAAmC;QAC9C,CAAC,CAAC,EAAE,CAAA;IACR,MAAM,IAAI,GAAG;QACX,GAAG,OAAO;QACV,OAAO,EAAE;YACP,GAAG,OAAO;YACV,aAAa,EAAE,OAAO;YACtB,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACnC,SAAS,EAAE,MAAM;SAClB;KACF,CAAA;IACD,IAAI,GAAG,EAAE,EAAE,EAAE,CAAC;QACZ,MAAM,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,CAAC,CAAA;QACzE,OAAM;IACR,CAAC;IACD,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAA;AAC/C,CAAC"}

package/dist/seo/document-path.d.ts

@@ -58,4 +58,17 @@ export declare function resolveDocumentUrl(params: {
      */
     trailingSlash?: TrailingSlashPolicy | null;
 }): string;
+/**
+ * Public URL that opens a draft in the site renderer. The path comes from
+ * {@link documentPublicPath}; the token is the `preview` query value the
+ * public site already accepts.
+ */
+export declare function documentPreviewUrl(params: {
+    siteUrl: string;
+    token: string;
+    urlPrefix?: string | null;
+    slug?: string | null;
+    data?: Record<string, unknown> | null;
+    path?: string | null;
+}): string;
 //# sourceMappingURL=document-path.d.ts.map

package/dist/seo/document-path.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"document-path.d.ts","sourceRoot":"","sources":["../../src/seo/document-path.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,6EAA6E;AAC7E,MAAM,MAAM,mBAAmB,GAAG,QAAQ,GAAG,OAAO,CAAA;AAEpD,qFAAqF;AACrF,wBAAgB,0BAA0B,CAAC,KAAK,EAAE,OAAO,GAAG,mBAAmB,CAE9E;AAMD;;;;GAIG;AACH,wBAAgB,4BAA4B,CAC1C,QAAQ,EAAE,MAAM,EAChB,MAAM,GAAE,mBAA6B,GACpC,MAAM,CAKR;AAED;;;GAGG;AACH,wBAAgB,uBAAuB,CACrC,GAAG,EAAE,MAAM,EACX,MAAM,GAAE,mBAA6B,GACpC,MAAM,CAYR;AAED;;;;GAIG;AACH,wBAAgB,2BAA2B,CACzC,GAAG,EAAE,MAAM,EACX,MAAM,EAAE,mBAAmB,GAC1B,MAAM,GAAG,IAAI,CAYf;AAED;;;;;;;;GAQG;AACH,wBAAgB,kBAAkB,CAAC,MAAM,EAAE;IACzC,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IACzB,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IACpB,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAA;IACrC,iFAAiF;IACjF,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;CACrB,GAAG,MAAM,CAeT;AAED;;;;;GAKG;AACH,wBAAgB,kBAAkB,CAAC,MAAM,EAAE;IACzC,OAAO,EAAE,MAAM,CAAA;IACf,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IACzB,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IACpB,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAA;IACrC,iFAAiF;IACjF,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IACpB;;;OAGG;IACH,aAAa,CAAC,EAAE,mBAAmB,GAAG,IAAI,CAAA;CAC3C,GAAG,MAAM,CAOT"}
+{"version":3,"file":"document-path.d.ts","sourceRoot":"","sources":["../../src/seo/document-path.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,6EAA6E;AAC7E,MAAM,MAAM,mBAAmB,GAAG,QAAQ,GAAG,OAAO,CAAA;AAEpD,qFAAqF;AACrF,wBAAgB,0BAA0B,CAAC,KAAK,EAAE,OAAO,GAAG,mBAAmB,CAE9E;AAMD;;;;GAIG;AACH,wBAAgB,4BAA4B,CAC1C,QAAQ,EAAE,MAAM,EAChB,MAAM,GAAE,mBAA6B,GACpC,MAAM,CAKR;AAED;;;GAGG;AACH,wBAAgB,uBAAuB,CACrC,GAAG,EAAE,MAAM,EACX,MAAM,GAAE,mBAA6B,GACpC,MAAM,CAYR;AAED;;;;GAIG;AACH,wBAAgB,2BAA2B,CACzC,GAAG,EAAE,MAAM,EACX,MAAM,EAAE,mBAAmB,GAC1B,MAAM,GAAG,IAAI,CAYf;AAED;;;;;;;;GAQG;AACH,wBAAgB,kBAAkB,CAAC,MAAM,EAAE;IACzC,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IACzB,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IACpB,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAA;IACrC,iFAAiF;IACjF,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;CACrB,GAAG,MAAM,CAeT;AAED;;;;;GAKG;AACH,wBAAgB,kBAAkB,CAAC,MAAM,EAAE;IACzC,OAAO,EAAE,MAAM,CAAA;IACf,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IACzB,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IACpB,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAA;IACrC,iFAAiF;IACjF,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IACpB;;;OAGG;IACH,aAAa,CAAC,EAAE,mBAAmB,GAAG,IAAI,CAAA;CAC3C,GAAG,MAAM,CAOT;AAED;;;;GAIG;AACH,wBAAgB,kBAAkB,CAAC,MAAM,EAAE;IACzC,OAAO,EAAE,MAAM,CAAA;IACf,KAAK,EAAE,MAAM,CAAA;IACb,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IACzB,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IACpB,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAA;IACrC,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;CACrB,GAAG,MAAM,CAIT"}

package/dist/seo/document-path.js

@@ -100,4 +100,14 @@ export function resolveDocumentUrl(params) {
         return policy === 'always' ? `${base}/` : base;
     return policy === 'always' ? `${base}${path}/` : `${base}${path}`;
 }
+/**
+ * Public URL that opens a draft in the site renderer. The path comes from
+ * {@link documentPublicPath}; the token is the `preview` query value the
+ * public site already accepts.
+ */
+export function documentPreviewUrl(params) {
+    const canonical = resolveDocumentUrl(params);
+    const join = canonical.includes('?') ? '&' : '?';
+    return `${canonical}${join}preview=${encodeURIComponent(params.token)}`;
+}
 //# sourceMappingURL=document-path.js.map

package/dist/seo/document-path.js.map

@@ -1 +1 @@
-{"version":3,"file":"document-path.js","sourceRoot":"","sources":["../../src/seo/document-path.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAKH,qFAAqF;AACrF,MAAM,UAAU,0BAA0B,CAAC,KAAc;IACvD,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAA;AAChD,CAAC;AAED,SAAS,iBAAiB,CAAC,GAAW;IACpC,OAAO,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAA;AAChC,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,4BAA4B,CAC1C,QAAgB,EAChB,SAA8B,OAAO;IAErC,IAAI,CAAC,QAAQ,IAAI,QAAQ,KAAK,GAAG;QAAE,OAAO,GAAG,CAAA;IAC7C,MAAM,OAAO,GAAG,QAAQ,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,IAAI,GAAG,CAAA;IACnD,IAAI,OAAO,KAAK,GAAG;QAAE,OAAO,GAAG,CAAA;IAC/B,OAAO,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,OAAO,GAAG,CAAC,CAAC,CAAC,OAAO,CAAA;AACtD,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,uBAAuB,CACrC,GAAW,EACX,SAA8B,OAAO;IAErC,IAAI,MAAW,CAAA;IACf,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAA;IACvB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,GAAG,CAAA;IACZ,CAAC;IACD,MAAM,CAAC,QAAQ,GAAG,4BAA4B,CAAC,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAA;IACvE,IAAI,MAAM,CAAC,QAAQ,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;QAC9D,OAAO,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAA;IAClE,CAAC;IACD,OAAO,MAAM,CAAC,QAAQ,EAAE,CAAA;AAC1B,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,2BAA2B,CACzC,GAAW,EACX,MAA2B;IAE3B,IAAI,MAAW,CAAA;IACf,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAA;IACvB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAA;IACb,CAAC;IACD,IAAI,MAAM,CAAC,QAAQ,KAAK,GAAG;QAAE,OAAO,IAAI,CAAA;IACxC,MAAM,QAAQ,GAAG,4BAA4B,CAAC,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAA;IACtE,IAAI,QAAQ,KAAK,MAAM,CAAC,QAAQ;QAAE,OAAO,IAAI,CAAA;IAC7C,MAAM,CAAC,QAAQ,GAAG,QAAQ,CAAA;IAC1B,OAAO,MAAM,CAAC,QAAQ,EAAE,CAAA;AAC1B,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,kBAAkB,CAAC,MAMlC;IACC,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,IAAI,EAAE,CAAA;IAC9B,MAAM,SAAS,GAAG,OAAO,MAAM,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAA;IAC3E,MAAM,YAAY,GAAG,SAAS,IAAI,CAAC,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAA;IACzF,IAAI,YAAY,EAAE,CAAC;QACjB,MAAM,UAAU,GAAG,IAAI,YAAY,CAAC,OAAO,CAAC,YAAY,EAAE,EAAE,CAAC,EAAE,CAAA;QAC/D,OAAO,UAAU,KAAK,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,UAAU,CAAA;IAC9C,CAAC;IACD,MAAM,IAAI,GAAG,CAAC,CAAC,MAAM,CAAC,IAAI,IAAK,IAAI,CAAC,IAA2B,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC,OAAO,CACnF,YAAY,EACZ,EAAE,CACH,CAAA;IACD,IAAI,IAAI,KAAK,MAAM,IAAI,IAAI,KAAK,OAAO,IAAI,IAAI,KAAK,EAAE;QAAE,OAAO,GAAG,CAAA;IAClE,MAAM,MAAM,GAAG,CAAC,MAAM,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,YAAY,EAAE,EAAE,CAAC,CAAA;IACjE,OAAO,MAAM,CAAC,CAAC,CAAC,IAAI,MAAM,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAA;AACnD,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,kBAAkB,CAAC,MAYlC;IACC,MAAM,IAAI,GAAG,iBAAiB,CAAC,MAAM,CAAC,OAAO,CAAC,CAAA;IAC9C,MAAM,IAAI,GAAG,kBAAkB,CAAC,MAAM,CAAC,CAAA;IACvC,MAAM,MAAM,GAAG,0BAA0B,CAAC,MAAM,CAAC,aAAa,CAAC,CAAA;IAC/D,IAAI,CAAC,IAAI;QAAE,OAAO,IAAI,CAAA;IACtB,IAAI,IAAI,KAAK,GAAG;QAAE,OAAO,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,CAAC,IAAI,CAAA;IAChE,OAAO,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,IAAI,GAAG,IAAI,GAAG,CAAC,CAAC,CAAC,GAAG,IAAI,GAAG,IAAI,EAAE,CAAA;AACnE,CAAC"}
+{"version":3,"file":"document-path.js","sourceRoot":"","sources":["../../src/seo/document-path.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAKH,qFAAqF;AACrF,MAAM,UAAU,0BAA0B,CAAC,KAAc;IACvD,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAA;AAChD,CAAC;AAED,SAAS,iBAAiB,CAAC,GAAW;IACpC,OAAO,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAA;AAChC,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,4BAA4B,CAC1C,QAAgB,EAChB,SAA8B,OAAO;IAErC,IAAI,CAAC,QAAQ,IAAI,QAAQ,KAAK,GAAG;QAAE,OAAO,GAAG,CAAA;IAC7C,MAAM,OAAO,GAAG,QAAQ,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,IAAI,GAAG,CAAA;IACnD,IAAI,OAAO,KAAK,GAAG;QAAE,OAAO,GAAG,CAAA;IAC/B,OAAO,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,OAAO,GAAG,CAAC,CAAC,CAAC,OAAO,CAAA;AACtD,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,uBAAuB,CACrC,GAAW,EACX,SAA8B,OAAO;IAErC,IAAI,MAAW,CAAA;IACf,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAA;IACvB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,GAAG,CAAA;IACZ,CAAC;IACD,MAAM,CAAC,QAAQ,GAAG,4BAA4B,CAAC,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAA;IACvE,IAAI,MAAM,CAAC,QAAQ,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;QAC9D,OAAO,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAA;IAClE,CAAC;IACD,OAAO,MAAM,CAAC,QAAQ,EAAE,CAAA;AAC1B,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,2BAA2B,CACzC,GAAW,EACX,MAA2B;IAE3B,IAAI,MAAW,CAAA;IACf,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAA;IACvB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAA;IACb,CAAC;IACD,IAAI,MAAM,CAAC,QAAQ,KAAK,GAAG;QAAE,OAAO,IAAI,CAAA;IACxC,MAAM,QAAQ,GAAG,4BAA4B,CAAC,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAA;IACtE,IAAI,QAAQ,KAAK,MAAM,CAAC,QAAQ;QAAE,OAAO,IAAI,CAAA;IAC7C,MAAM,CAAC,QAAQ,GAAG,QAAQ,CAAA;IAC1B,OAAO,MAAM,CAAC,QAAQ,EAAE,CAAA;AAC1B,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,kBAAkB,CAAC,MAMlC;IACC,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,IAAI,EAAE,CAAA;IAC9B,MAAM,SAAS,GAAG,OAAO,MAAM,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAA;IAC3E,MAAM,YAAY,GAAG,SAAS,IAAI,CAAC,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAA;IACzF,IAAI,YAAY,EAAE,CAAC;QACjB,MAAM,UAAU,GAAG,IAAI,YAAY,CAAC,OAAO,CAAC,YAAY,EAAE,EAAE,CAAC,EAAE,CAAA;QAC/D,OAAO,UAAU,KAAK,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,UAAU,CAAA;IAC9C,CAAC;IACD,MAAM,IAAI,GAAG,CAAC,CAAC,MAAM,CAAC,IAAI,IAAK,IAAI,CAAC,IAA2B,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC,OAAO,CACnF,YAAY,EACZ,EAAE,CACH,CAAA;IACD,IAAI,IAAI,KAAK,MAAM,IAAI,IAAI,KAAK,OAAO,IAAI,IAAI,KAAK,EAAE;QAAE,OAAO,GAAG,CAAA;IAClE,MAAM,MAAM,GAAG,CAAC,MAAM,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,YAAY,EAAE,EAAE,CAAC,CAAA;IACjE,OAAO,MAAM,CAAC,CAAC,CAAC,IAAI,MAAM,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAA;AACnD,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,kBAAkB,CAAC,MAYlC;IACC,MAAM,IAAI,GAAG,iBAAiB,CAAC,MAAM,CAAC,OAAO,CAAC,CAAA;IAC9C,MAAM,IAAI,GAAG,kBAAkB,CAAC,MAAM,CAAC,CAAA;IACvC,MAAM,MAAM,GAAG,0BAA0B,CAAC,MAAM,CAAC,aAAa,CAAC,CAAA;IAC/D,IAAI,CAAC,IAAI;QAAE,OAAO,IAAI,CAAA;IACtB,IAAI,IAAI,KAAK,GAAG;QAAE,OAAO,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,CAAC,IAAI,CAAA;IAChE,OAAO,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,IAAI,GAAG,IAAI,GAAG,CAAC,CAAC,CAAC,GAAG,IAAI,GAAG,IAAI,EAAE,CAAA;AACnE,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,kBAAkB,CAAC,MAOlC;IACC,MAAM,SAAS,GAAG,kBAAkB,CAAC,MAAM,CAAC,CAAA;IAC5C,MAAM,IAAI,GAAG,SAAS,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAA;IAChD,OAAO,GAAG,SAAS,GAAG,IAAI,WAAW,kBAAkB,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAA;AACzE,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@prenta/core",
-  "version": "8.6.1",
+  "version": "8.7.0",
   "license": "MIT",
   "repository": {
     "type": "git",
@@ -191,7 +191,7 @@
     "@prisma/client": "^7.8.0",
     "jose": "^6.2.9",
     "sanitize-html": "^2.17.7",
-    "sharp": "^0.35.4",
+    "sharp": "^0.35.5",
     "turndown": "^7.2.4",
     "yjs": "^13.6.0",
     "zod": "^3.23.0",
@@ -239,7 +239,7 @@
     "@vitest/coverage-v8": "4.1.8",
     "dotenv": "^17.3.1",
     "graphql": "^16.13.2",
-    "graphql-yoga": "^5.19.0",
+    "graphql-yoga": "^5.24.4",
     "next": "^16.3.6",
     "pg": "^8.20.0",
     "prisma": "^7.8.0",

package/prisma/migrations/0023_mcp_oauth/migration.sql

@@ -0,0 +1,40 @@
+-- MCP OAuth grants. Codes and refresh tokens are stored as hashes.
+
+CREATE TABLE "prenta_mcp_oauth_grants" (
+    "id" TEXT NOT NULL,
+    "userId" TEXT NOT NULL,
+    "clientId" TEXT NOT NULL,
+    "redirectUri" TEXT NOT NULL,
+    "resource" TEXT NOT NULL,
+    "scope" TEXT NOT NULL,
+    "codeChallenge" TEXT NOT NULL,
+    "codeHash" TEXT,
+    "codeExpiresAt" TIMESTAMP(3),
+    "codeConsumedAt" TIMESTAMP(3),
+    "refreshHash" TEXT,
+    "refreshExpiresAt" TIMESTAMP(3),
+    "familyId" TEXT NOT NULL,
+    "revokedAt" TIMESTAMP(3),
+    "createdAt" TIMESTAMP(3) NOT NULL DEFAULT CURRENT_TIMESTAMP,
+    "updatedAt" TIMESTAMP(3) NOT NULL,
+
+    CONSTRAINT "prenta_mcp_oauth_grants_pkey" PRIMARY KEY ("id")
+);
+
+CREATE UNIQUE INDEX "prenta_mcp_oauth_grants_codeHash_key" ON "prenta_mcp_oauth_grants"("codeHash");
+CREATE UNIQUE INDEX "prenta_mcp_oauth_grants_refreshHash_key" ON "prenta_mcp_oauth_grants"("refreshHash");
+CREATE INDEX "prenta_mcp_oauth_grants_userId_idx" ON "prenta_mcp_oauth_grants"("userId");
+CREATE INDEX "prenta_mcp_oauth_grants_familyId_idx" ON "prenta_mcp_oauth_grants"("familyId");
+CREATE INDEX "prenta_mcp_oauth_grants_clientId_idx" ON "prenta_mcp_oauth_grants"("clientId");
+
+ALTER TABLE "prenta_mcp_oauth_grants" ADD CONSTRAINT "prenta_mcp_oauth_grants_userId_fkey" FOREIGN KEY ("userId") REFERENCES "prenta_users"("id") ON DELETE CASCADE ON UPDATE CASCADE;
+
+CREATE TABLE "prenta_mcp_oauth_refresh_replays" (
+    "hash" TEXT NOT NULL,
+    "familyId" TEXT NOT NULL,
+    "createdAt" TIMESTAMP(3) NOT NULL DEFAULT CURRENT_TIMESTAMP,
+
+    CONSTRAINT "prenta_mcp_oauth_refresh_replays_pkey" PRIMARY KEY ("hash")
+);
+
+CREATE INDEX "prenta_mcp_oauth_refresh_replays_familyId_idx" ON "prenta_mcp_oauth_refresh_replays"("familyId");

package/prisma/migrations/0024_mcp_oauth_transactions/migration.sql

@@ -0,0 +1,16 @@
+CREATE TABLE "prenta_mcp_oauth_transactions" (
+    "id" TEXT NOT NULL,
+    "clientId" TEXT NOT NULL,
+    "clientName" TEXT NOT NULL,
+    "redirectUri" TEXT NOT NULL,
+    "resource" TEXT NOT NULL,
+    "scope" TEXT NOT NULL,
+    "codeChallenge" TEXT NOT NULL,
+    "state" TEXT,
+    "expiresAt" TIMESTAMP(3) NOT NULL,
+    "createdAt" TIMESTAMP(3) NOT NULL DEFAULT CURRENT_TIMESTAMP,
+
+    CONSTRAINT "prenta_mcp_oauth_transactions_pkey" PRIMARY KEY ("id")
+);
+
+CREATE INDEX "prenta_mcp_oauth_transactions_expiresAt_idx" ON "prenta_mcp_oauth_transactions"("expiresAt");

package/prisma/schema.prisma

@@ -121,6 +121,7 @@ model User {
   sessions            Session[]
   oauthAccounts       OAuthAccount[]
   apiKeys             ApiKey[]
+  mcpOauthGrants      McpOauthGrant[]
   documents           Document[]           @relation("CreatedDocuments")
   updatedDocuments    Document[]           @relation("UpdatedDocuments")
   versions            Version[]
@@ -1138,3 +1139,60 @@ model Job {
   @@index([status, runAt])
   @@map("prenta_jobs")
 }
+
+/// One MCP OAuth grant. The authorization code and the current refresh token
+/// are stored only as SHA-256 hashes. `familyId` groups rotations; replaying a
+/// replaced refresh token revokes every row in the family.
+model McpOauthGrant {
+  id                  String    @id @default(cuid())
+  userId              String
+  user                User      @relation(fields: [userId], references: [id], onDelete: Cascade)
+  clientId            String
+  redirectUri         String
+  resource            String
+  scope               String
+  codeChallenge       String
+  codeHash            String?   @unique
+  codeExpiresAt       DateTime?
+  codeConsumedAt      DateTime?
+  refreshHash         String?   @unique
+  refreshExpiresAt    DateTime?
+  familyId            String
+  revokedAt           DateTime?
+  createdAt           DateTime  @default(now())
+  updatedAt           DateTime  @updatedAt
+
+  @@index([userId])
+  @@index([familyId])
+  @@index([clientId])
+  @@map("prenta_mcp_oauth_grants")
+}
+
+/// Hashes of refresh tokens that have already been rotated. Presenting one
+/// revokes the family.
+model McpOauthRefreshReplay {
+  hash      String   @id
+  familyId  String
+  createdAt DateTime @default(now())
+
+  @@index([familyId])
+  @@map("prenta_mcp_oauth_refresh_replays")
+}
+
+/// Pending authorize request, before the person allows or denies it.
+/// Short-lived. The id is the browser transaction, not a credential.
+model McpOauthTransaction {
+  id             String   @id
+  clientId       String
+  clientName     String
+  redirectUri    String
+  resource       String
+  scope          String
+  codeChallenge  String
+  state          String?
+  expiresAt      DateTime
+  createdAt      DateTime @default(now())
+
+  @@index([expiresAt])
+  @@map("prenta_mcp_oauth_transactions")
+}