@se-studio/contentful-cms 0.0.0-next16-20260822103555

package/dist/hosted/next/redis.js

@@ -0,0 +1,49 @@
+import { Redis } from '@upstash/redis';
+export const upstashRedis = Redis.fromEnv();
+export function createRedisClient(redis = upstashRedis) {
+    return {
+        get: async (key) => {
+            const value = await redis.get(key);
+            return value ?? null;
+        },
+        set: async (key, value, options) => {
+            if (options?.nx === true && options.ex !== undefined) {
+                const result = await redis.set(key, value, { nx: true, ex: options.ex });
+                return result === 'OK';
+            }
+            if (options?.nx === true) {
+                const result = await redis.set(key, value, { nx: true });
+                return result === 'OK';
+            }
+            if (options?.ex !== undefined) {
+                await redis.set(key, value, { ex: options.ex });
+                return true;
+            }
+            await redis.set(key, value);
+            return true;
+        },
+        del: async (key) => {
+            await redis.del(key);
+        },
+        keys: async (pattern) => redis.keys(pattern),
+        incr: async (key) => redis.incr(key),
+        expire: async (key, seconds) => {
+            await redis.expire(key, seconds);
+        },
+        sadd: async (key, ...members) => {
+            if (members.length === 0)
+                return 0;
+            return redis.sadd(key, members);
+        },
+        srem: async (key, ...members) => {
+            if (members.length === 0)
+                return 0;
+            return redis.srem(key, members);
+        },
+        smembers: async (key) => {
+            const members = await redis.smembers(key);
+            return members.map(String);
+        },
+    };
+}
+//# sourceMappingURL=redis.js.map

package/dist/hosted/next/redis.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"redis.js","sourceRoot":"","sources":["../../../src/hosted/next/redis.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,gBAAgB,CAAC;AAGvC,MAAM,CAAC,MAAM,YAAY,GAAG,KAAK,CAAC,OAAO,EAAE,CAAC;AAE5C,MAAM,UAAU,iBAAiB,CAAC,QAAe,YAAY;IAC3D,OAAO;QACL,GAAG,EAAE,KAAK,EAAE,GAAW,EAAE,EAAE;YACzB,MAAM,KAAK,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YACnC,OAAO,KAAK,IAAI,IAAI,CAAC;QACvB,CAAC;QACD,GAAG,EAAE,KAAK,EAAE,GAAW,EAAE,KAAa,EAAE,OAAuC,EAAE,EAAE;YACjF,IAAI,OAAO,EAAE,EAAE,KAAK,IAAI,IAAI,OAAO,CAAC,EAAE,KAAK,SAAS,EAAE,CAAC;gBACrD,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,OAAO,CAAC,EAAE,EAAE,CAAC,CAAC;gBACzE,OAAO,MAAM,KAAK,IAAI,CAAC;YACzB,CAAC;YACD,IAAI,OAAO,EAAE,EAAE,KAAK,IAAI,EAAE,CAAC;gBACzB,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;gBACzD,OAAO,MAAM,KAAK,IAAI,CAAC;YACzB,CAAC;YACD,IAAI,OAAO,EAAE,EAAE,KAAK,SAAS,EAAE,CAAC;gBAC9B,MAAM,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,OAAO,CAAC,EAAE,EAAE,CAAC,CAAC;gBAChD,OAAO,IAAI,CAAC;YACd,CAAC;YACD,MAAM,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;YAC5B,OAAO,IAAI,CAAC;QACd,CAAC;QACD,GAAG,EAAE,KAAK,EAAE,GAAW,EAAE,EAAE;YACzB,MAAM,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACvB,CAAC;QACD,IAAI,EAAE,KAAK,EAAE,OAAe,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC;QACpD,IAAI,EAAE,KAAK,EAAE,GAAW,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC;QAC5C,MAAM,EAAE,KAAK,EAAE,GAAW,EAAE,OAAe,EAAE,EAAE;YAC7C,MAAM,KAAK,CAAC,MAAM,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;QACnC,CAAC;QACD,IAAI,EAAE,KAAK,EAAE,GAAW,EAAE,GAAG,OAAiB,EAAE,EAAE;YAChD,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;gBAAE,OAAO,CAAC,CAAC;YACnC,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;QAClC,CAAC;QACD,IAAI,EAAE,KAAK,EAAE,GAAW,EAAE,GAAG,OAAiB,EAAE,EAAE;YAChD,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;gBAAE,OAAO,CAAC,CAAC;YACnC,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;QAClC,CAAC;QACD,QAAQ,EAAE,KAAK,EAAE,GAAW,EAAE,EAAE;YAC9B,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;YAC1C,OAAO,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAC7B,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/hosted/next/routes/connect.d.ts

@@ -0,0 +1,2 @@
+export declare function GET(): Promise<Response>;
+//# sourceMappingURL=connect.d.ts.map

package/dist/hosted/next/routes/connect.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"connect.d.ts","sourceRoot":"","sources":["../../../../src/hosted/next/routes/connect.ts"],"names":[],"mappings":"AAIA,wBAAsB,GAAG,IAAI,OAAO,CAAC,QAAQ,CAAC,CAe7C"}

package/dist/hosted/next/routes/connect.js

@@ -0,0 +1,19 @@
+import { getMcpResourceUrl, loadHostedDeploymentFromEnv } from '../../index.js';
+import { buildClaudeConnectorInstallUrl } from '../claude-connect.js';
+import { resolveRequestOrigin } from '../page-styles.js';
+export async function GET() {
+    const origin = await resolveRequestOrigin();
+    let displayName = 'cms-edit';
+    let mcpUrl = `${origin}/api/mcp`;
+    try {
+        const deployment = loadHostedDeploymentFromEnv();
+        displayName = `cms-edit (${process.env['CMS_EDIT_DISPLAY_NAME'] ?? deployment.projectKey})`;
+        mcpUrl = getMcpResourceUrl();
+    }
+    catch {
+        // partial env during local dev
+    }
+    const installUrl = buildClaudeConnectorInstallUrl(mcpUrl, displayName);
+    return Response.redirect(installUrl, 302);
+}
+//# sourceMappingURL=connect.js.map

package/dist/hosted/next/routes/connect.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"connect.js","sourceRoot":"","sources":["../../../../src/hosted/next/routes/connect.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,2BAA2B,EAAE,MAAM,gBAAgB,CAAC;AAChF,OAAO,EAAE,8BAA8B,EAAE,MAAM,sBAAsB,CAAC;AACtE,OAAO,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAC;AAEzD,MAAM,CAAC,KAAK,UAAU,GAAG;IACvB,MAAM,MAAM,GAAG,MAAM,oBAAoB,EAAE,CAAC;IAC5C,IAAI,WAAW,GAAG,UAAU,CAAC;IAC7B,IAAI,MAAM,GAAG,GAAG,MAAM,UAAU,CAAC;IAEjC,IAAI,CAAC;QACH,MAAM,UAAU,GAAG,2BAA2B,EAAE,CAAC;QACjD,WAAW,GAAG,aAAa,OAAO,CAAC,GAAG,CAAC,uBAAuB,CAAC,IAAI,UAAU,CAAC,UAAU,GAAG,CAAC;QAC5F,MAAM,GAAG,iBAAiB,EAAE,CAAC;IAC/B,CAAC;IAAC,MAAM,CAAC;QACP,+BAA+B;IACjC,CAAC;IAED,MAAM,UAAU,GAAG,8BAA8B,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;IACvE,OAAO,QAAQ,CAAC,QAAQ,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC;AAC5C,CAAC"}

package/dist/hosted/next/routes/customer-index.d.ts

@@ -0,0 +1,2 @@
+export declare function GET(request: Request): Promise<Response>;
+//# sourceMappingURL=customer-index.d.ts.map

package/dist/hosted/next/routes/customer-index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"customer-index.d.ts","sourceRoot":"","sources":["../../../../src/hosted/next/routes/customer-index.ts"],"names":[],"mappings":"AAIA,wBAAsB,GAAG,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,QAAQ,CAAC,CAY7D"}

package/dist/hosted/next/routes/customer-index.js

@@ -0,0 +1,12 @@
+import { buildCustomerPlaybookIndex } from '../../customer-playbooks.js';
+import { getHostedEditorPackPath } from '../editor-pack-path.js';
+import { resolveRequestOrigin } from '../page-styles.js';
+export async function GET(request) {
+    const origin = new URL(request.url).origin || (await resolveRequestOrigin());
+    const index = buildCustomerPlaybookIndex(origin, getHostedEditorPackPath());
+    if (!index) {
+        return Response.json({ ok: false, error: 'Editor pack not found on this deployment.' }, { status: 404 });
+    }
+    return Response.json({ ok: true, ...index });
+}
+//# sourceMappingURL=customer-index.js.map

package/dist/hosted/next/routes/customer-index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"customer-index.js","sourceRoot":"","sources":["../../../../src/hosted/next/routes/customer-index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,0BAA0B,EAAE,MAAM,6BAA6B,CAAC;AACzE,OAAO,EAAE,uBAAuB,EAAE,MAAM,wBAAwB,CAAC;AACjE,OAAO,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAC;AAEzD,MAAM,CAAC,KAAK,UAAU,GAAG,CAAC,OAAgB;IACxC,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,IAAI,CAAC,MAAM,oBAAoB,EAAE,CAAC,CAAC;IAC7E,MAAM,KAAK,GAAG,0BAA0B,CAAC,MAAM,EAAE,uBAAuB,EAAE,CAAC,CAAC;IAE5E,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,QAAQ,CAAC,IAAI,CAClB,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,2CAA2C,EAAE,EACjE,EAAE,MAAM,EAAE,GAAG,EAAE,CAChB,CAAC;IACJ,CAAC;IAED,OAAO,QAAQ,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,GAAG,KAAK,EAAE,CAAC,CAAC;AAC/C,CAAC"}

package/dist/hosted/next/routes/customer-resource.d.ts

@@ -0,0 +1,8 @@
+type CustomerResourceParams = {
+    resource: string;
+};
+export declare function GET(_request: Request, context: {
+    params: Promise<CustomerResourceParams>;
+}): Promise<Response>;
+export {};
+//# sourceMappingURL=customer-resource.d.ts.map

package/dist/hosted/next/routes/customer-resource.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"customer-resource.d.ts","sourceRoot":"","sources":["../../../../src/hosted/next/routes/customer-resource.ts"],"names":[],"mappings":"AAGA,KAAK,sBAAsB,GAAG;IAC5B,QAAQ,EAAE,MAAM,CAAC;CAClB,CAAC;AAEF,wBAAsB,GAAG,CACvB,QAAQ,EAAE,OAAO,EACjB,OAAO,EAAE;IAAE,MAAM,EAAE,OAAO,CAAC,sBAAsB,CAAC,CAAA;CAAE,GACnD,OAAO,CAAC,QAAQ,CAAC,CAsBnB"}

package/dist/hosted/next/routes/customer-resource.js

@@ -0,0 +1,19 @@
+import { readCustomerPlaybook } from '../../customer-playbooks.js';
+import { getHostedEditorPackPath } from '../editor-pack-path.js';
+export async function GET(_request, context) {
+    const { resource } = await context.params;
+    const playbook = readCustomerPlaybook(resource, getHostedEditorPackPath());
+    if (!playbook) {
+        return Response.json({ ok: false, error: `Unknown customer playbook: ${resource}` }, { status: 404 });
+    }
+    const headers = {
+        'Content-Type': playbook.mimeType,
+        'Cache-Control': 'public, max-age=300',
+        'X-Cms-Edit-Resource': playbook.uri,
+    };
+    if (playbook.mimeType === 'application/json') {
+        return new Response(playbook.text, { status: 200, headers });
+    }
+    return new Response(playbook.text, { status: 200, headers });
+}
+//# sourceMappingURL=customer-resource.js.map

package/dist/hosted/next/routes/customer-resource.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"customer-resource.js","sourceRoot":"","sources":["../../../../src/hosted/next/routes/customer-resource.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,oBAAoB,EAAE,MAAM,6BAA6B,CAAC;AACnE,OAAO,EAAE,uBAAuB,EAAE,MAAM,wBAAwB,CAAC;AAMjE,MAAM,CAAC,KAAK,UAAU,GAAG,CACvB,QAAiB,EACjB,OAAoD;IAEpD,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,OAAO,CAAC,MAAM,CAAC;IAC1C,MAAM,QAAQ,GAAG,oBAAoB,CAAC,QAAQ,EAAE,uBAAuB,EAAE,CAAC,CAAC;IAE3E,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,OAAO,QAAQ,CAAC,IAAI,CAClB,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,8BAA8B,QAAQ,EAAE,EAAE,EAC9D,EAAE,MAAM,EAAE,GAAG,EAAE,CAChB,CAAC;IACJ,CAAC;IAED,MAAM,OAAO,GAA2B;QACtC,cAAc,EAAE,QAAQ,CAAC,QAAQ;QACjC,eAAe,EAAE,qBAAqB;QACtC,qBAAqB,EAAE,QAAQ,CAAC,GAAG;KACpC,CAAC;IAEF,IAAI,QAAQ,CAAC,QAAQ,KAAK,kBAAkB,EAAE,CAAC;QAC7C,OAAO,IAAI,QAAQ,CAAC,QAAQ,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC,CAAC;IAC/D,CAAC;IAED,OAAO,IAAI,QAAQ,CAAC,QAAQ,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC,CAAC;AAC/D,CAAC"}

package/dist/hosted/next/routes/health.d.ts

@@ -0,0 +1,2 @@
+export declare function GET(request: Request): Promise<Response>;
+//# sourceMappingURL=health.d.ts.map

package/dist/hosted/next/routes/health.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"health.d.ts","sourceRoot":"","sources":["../../../../src/hosted/next/routes/health.ts"],"names":[],"mappings":"AAmBA,wBAAsB,GAAG,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,QAAQ,CAAC,CAqF7D"}

package/dist/hosted/next/routes/health.js

@@ -0,0 +1,82 @@
+import { loadEditorPackManifest } from '../../../editor-pack/load.js';
+import { buildCustomerPlaybookIndex } from '../../customer-playbooks.js';
+import { GETTING_STARTED_INFO, getMcpResourceUrl, getVersionInfo, handleOAuthHealthCheck, loadHostedDeploymentFromEnv, } from '../../index.js';
+import { getHostedEditorPackPath } from '../editor-pack-path.js';
+import { upstashRedis } from '../redis.js';
+export async function GET(request) {
+    const deployment = loadHostedDeploymentFromEnv();
+    const checks = {
+        config: {
+            ok: Boolean(process.env['CONTENTFUL_SPACE_ID']),
+            detail: process.env['CONTENTFUL_SPACE_ID'] ? 'CONTENTFUL_SPACE_ID is set' : 'Missing',
+        },
+        redis: { ok: false, detail: 'Not checked' },
+        oauth: { ok: false, detail: 'Not checked' },
+        editorPack: { ok: false, detail: 'Not checked', path: '' },
+    };
+    try {
+        // Space-scoped so shared cmsedit-sessions Redis does not mix probes across hosts.
+        const probeSpace = deployment.spaceId?.trim() || process.env['CONTENTFUL_SPACE_ID']?.trim() || 'unknown';
+        const probeKey = `cms-edit:health-probe:${probeSpace}`;
+        await upstashRedis.set(probeKey, 'ok', { ex: 30 });
+        const value = await upstashRedis.get(probeKey);
+        checks.redis = {
+            ok: value === 'ok',
+            detail: value === 'ok' ? 'Redis read/write OK' : 'Redis probe failed',
+        };
+    }
+    catch (err) {
+        checks.redis = {
+            ok: false,
+            detail: err instanceof Error ? err.message : String(err),
+        };
+    }
+    checks.oauth = await handleOAuthHealthCheck();
+    const editorPackPath = getHostedEditorPackPath();
+    const editorPackManifest = loadEditorPackManifest(editorPackPath);
+    checks.editorPack = {
+        ok: editorPackManifest !== null,
+        path: editorPackPath,
+        detail: editorPackManifest !== null
+            ? `manifest.json OK (${editorPackManifest.resources.length} resources)`
+            : `manifest.json missing at ${editorPackPath}`,
+    };
+    const ok = checks.config.ok && checks.redis.ok && checks.oauth.ok;
+    const origin = new URL(request.url).origin;
+    const landingPageUrl = `${origin}/cms-edit`;
+    const playbooksUrl = `${origin}/cms-edit/playbooks`;
+    const customerApiUrl = `${origin}/api/customer`;
+    let mcpUrl = `${origin}/api/mcp`;
+    try {
+        mcpUrl = getMcpResourceUrl();
+    }
+    catch {
+        // CMS_EDIT_PUBLIC_ORIGIN may be unset during partial local setup
+    }
+    const customerPlaybooks = buildCustomerPlaybookIndex(origin, getHostedEditorPackPath());
+    return Response.json({
+        ok,
+        cmsEdit: getVersionInfo(),
+        gettingStarted: {
+            ...GETTING_STARTED_INFO,
+            landingPageUrl,
+            mcpIntegrationUrl: mcpUrl,
+            playbooksUrl,
+            customerApiUrl,
+            customerTool: 'cms_edit_customer',
+            customerPlaybooks: customerPlaybooks
+                ? {
+                    projectKey: customerPlaybooks.projectKey,
+                    displayName: customerPlaybooks.displayName,
+                    resources: customerPlaybooks.resources.map((resource) => ({
+                        name: resource.name,
+                        apiUrl: resource.apiUrl,
+                    })),
+                }
+                : null,
+        },
+        deployment: { projectKey: deployment.projectKey, spaceId: deployment.spaceId },
+        checks,
+    }, { status: ok ? 200 : 503 });
+}
+//# sourceMappingURL=health.js.map

package/dist/hosted/next/routes/health.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"health.js","sourceRoot":"","sources":["../../../../src/hosted/next/routes/health.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,sBAAsB,EAAE,MAAM,8BAA8B,CAAC;AACtE,OAAO,EAAE,0BAA0B,EAAE,MAAM,6BAA6B,CAAC;AACzE,OAAO,EACL,oBAAoB,EACpB,iBAAiB,EACjB,cAAc,EACd,sBAAsB,EACtB,2BAA2B,GAC5B,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,uBAAuB,EAAE,MAAM,wBAAwB,CAAC;AACjE,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAS3C,MAAM,CAAC,KAAK,UAAU,GAAG,CAAC,OAAgB;IACxC,MAAM,UAAU,GAAG,2BAA2B,EAAE,CAAC;IAEjD,MAAM,MAAM,GAAiB;QAC3B,MAAM,EAAE;YACN,EAAE,EAAE,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAC,CAAC;YAC/C,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC,4BAA4B,CAAC,CAAC,CAAC,SAAS;SACtF;QACD,KAAK,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,aAAa,EAAE;QAC3C,KAAK,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,aAAa,EAAE;QAC3C,UAAU,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,aAAa,EAAE,IAAI,EAAE,EAAE,EAAE;KAC3D,CAAC;IAEF,IAAI,CAAC;QACH,kFAAkF;QAClF,MAAM,UAAU,GACd,UAAU,CAAC,OAAO,EAAE,IAAI,EAAE,IAAI,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAC,EAAE,IAAI,EAAE,IAAI,SAAS,CAAC;QACxF,MAAM,QAAQ,GAAG,yBAAyB,UAAU,EAAE,CAAC;QACvD,MAAM,YAAY,CAAC,GAAG,CAAC,QAAQ,EAAE,IAAI,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;QACnD,MAAM,KAAK,GAAG,MAAM,YAAY,CAAC,GAAG,CAAS,QAAQ,CAAC,CAAC;QACvD,MAAM,CAAC,KAAK,GAAG;YACb,EAAE,EAAE,KAAK,KAAK,IAAI;YAClB,MAAM,EAAE,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,oBAAoB;SACtE,CAAC;IACJ,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,CAAC,KAAK,GAAG;YACb,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;SACzD,CAAC;IACJ,CAAC;IAED,MAAM,CAAC,KAAK,GAAG,MAAM,sBAAsB,EAAE,CAAC;IAE9C,MAAM,cAAc,GAAG,uBAAuB,EAAE,CAAC;IACjD,MAAM,kBAAkB,GAAG,sBAAsB,CAAC,cAAc,CAAC,CAAC;IAClE,MAAM,CAAC,UAAU,GAAG;QAClB,EAAE,EAAE,kBAAkB,KAAK,IAAI;QAC/B,IAAI,EAAE,cAAc;QACpB,MAAM,EACJ,kBAAkB,KAAK,IAAI;YACzB,CAAC,CAAC,qBAAqB,kBAAkB,CAAC,SAAS,CAAC,MAAM,aAAa;YACvE,CAAC,CAAC,4BAA4B,cAAc,EAAE;KACnD,CAAC;IAEF,MAAM,EAAE,GAAG,MAAM,CAAC,MAAM,CAAC,EAAE,IAAI,MAAM,CAAC,KAAK,CAAC,EAAE,IAAI,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;IAClE,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC;IAC3C,MAAM,cAAc,GAAG,GAAG,MAAM,WAAW,CAAC;IAC5C,MAAM,YAAY,GAAG,GAAG,MAAM,qBAAqB,CAAC;IACpD,MAAM,cAAc,GAAG,GAAG,MAAM,eAAe,CAAC;IAChD,IAAI,MAAM,GAAG,GAAG,MAAM,UAAU,CAAC;IACjC,IAAI,CAAC;QACH,MAAM,GAAG,iBAAiB,EAAE,CAAC;IAC/B,CAAC;IAAC,MAAM,CAAC;QACP,iEAAiE;IACnE,CAAC;IAED,MAAM,iBAAiB,GAAG,0BAA0B,CAAC,MAAM,EAAE,uBAAuB,EAAE,CAAC,CAAC;IAExF,OAAO,QAAQ,CAAC,IAAI,CAClB;QACE,EAAE;QACF,OAAO,EAAE,cAAc,EAAE;QACzB,cAAc,EAAE;YACd,GAAG,oBAAoB;YACvB,cAAc;YACd,iBAAiB,EAAE,MAAM;YACzB,YAAY;YACZ,cAAc;YACd,YAAY,EAAE,mBAAmB;YACjC,iBAAiB,EAAE,iBAAiB;gBAClC,CAAC,CAAC;oBACE,UAAU,EAAE,iBAAiB,CAAC,UAAU;oBACxC,WAAW,EAAE,iBAAiB,CAAC,WAAW;oBAC1C,SAAS,EAAE,iBAAiB,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;wBACxD,IAAI,EAAE,QAAQ,CAAC,IAAI;wBACnB,MAAM,EAAE,QAAQ,CAAC,MAAM;qBACxB,CAAC,CAAC;iBACJ;gBACH,CAAC,CAAC,IAAI;SACT;QACD,UAAU,EAAE,EAAE,UAAU,EAAE,UAAU,CAAC,UAAU,EAAE,OAAO,EAAE,UAAU,CAAC,OAAO,EAAE;QAC9E,MAAM;KACP,EACD,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,CAC3B,CAAC;AACJ,CAAC"}

package/dist/hosted/next/routes/link-contentful.d.ts

@@ -0,0 +1,2 @@
+export declare function POST(request: Request): Promise<Response>;
+//# sourceMappingURL=link-contentful.d.ts.map

package/dist/hosted/next/routes/link-contentful.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"link-contentful.d.ts","sourceRoot":"","sources":["../../../../src/hosted/next/routes/link-contentful.ts"],"names":[],"mappings":"AAGA,wBAAsB,IAAI,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,QAAQ,CAAC,CAE9D"}

package/dist/hosted/next/routes/link-contentful.js

@@ -0,0 +1,6 @@
+import { handleLinkContentfulPost } from '../../index.js';
+import { createOAuthHandlerContext } from '../context.js';
+export async function POST(request) {
+    return handleLinkContentfulPost(request, createOAuthHandlerContext());
+}
+//# sourceMappingURL=link-contentful.js.map

package/dist/hosted/next/routes/link-contentful.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"link-contentful.js","sourceRoot":"","sources":["../../../../src/hosted/next/routes/link-contentful.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,wBAAwB,EAAE,MAAM,gBAAgB,CAAC;AAC1D,OAAO,EAAE,yBAAyB,EAAE,MAAM,eAAe,CAAC;AAE1D,MAAM,CAAC,KAAK,UAAU,IAAI,CAAC,OAAgB;IACzC,OAAO,wBAAwB,CAAC,OAAO,EAAE,yBAAyB,EAAE,CAAC,CAAC;AACxE,CAAC"}

package/dist/hosted/next/routes/mcp.d.ts

@@ -0,0 +1,4 @@
+export declare function GET(request: Request): Promise<Response>;
+export declare function POST(request: Request): Promise<Response>;
+export declare function DELETE(request: Request): Promise<Response>;
+//# sourceMappingURL=mcp.d.ts.map

package/dist/hosted/next/routes/mcp.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp.d.ts","sourceRoot":"","sources":["../../../../src/hosted/next/routes/mcp.ts"],"names":[],"mappings":"AA0BA,wBAAsB,GAAG,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,QAAQ,CAAC,CAE7D;AAED,wBAAsB,IAAI,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,QAAQ,CAAC,CAE9D;AAED,wBAAsB,MAAM,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,QAAQ,CAAC,CAEhE"}

package/dist/hosted/next/routes/mcp.js

@@ -0,0 +1,116 @@
+import { MediaPipelineJobStore } from '../../../media-pipeline/job-store.js';
+import { StagedUploadStore } from '../../../staged-upload/store.js';
+import { buildHostedConfig, handleHostedMcpRequest, isMcpUnauthorizedError, isTransientContentfulFailure, isUnusableContentfulCacheReason, loadHostedDeploymentFromEnv, oauthLogAuthFailure, oauthLogMcpHandlerError, patValidationFailureReason, RedisIndexCacheStore, RedisSessionStore, resolveContentfulTokenFromRequest, resolvePatForDeployment, runWithContentfulRequestStats, unauthorizedMcpResponse, } from '../../index.js';
+import { createOAuthHandlerContext } from '../context.js';
+import { getHostedEditorPackPath } from '../editor-pack-path.js';
+import { createRedisClient } from '../redis.js';
+const redisClient = createRedisClient();
+const editorPackPath = getHostedEditorPackPath();
+export async function GET(request) {
+    return handleMcp(request);
+}
+export async function POST(request) {
+    return handleMcp(request);
+}
+export async function DELETE(request) {
+    return handleMcp(request);
+}
+async function handleMcp(request) {
+    return runWithContentfulRequestStats(() => handleMcpInner(request));
+}
+async function handleMcpInner(request) {
+    const oauthCtx = createOAuthHandlerContext();
+    let user;
+    let mcpSub;
+    try {
+        const deployment = loadHostedDeploymentFromEnv();
+        const { sub, contentfulToken } = await resolveContentfulTokenFromRequest(request, oauthCtx.store, deployment.spaceId);
+        mcpSub = sub;
+        try {
+            user = await resolvePatForDeployment(oauthCtx.store, sub, contentfulToken, deployment);
+        }
+        catch (err) {
+            const message = err instanceof Error ? err.message : String(err);
+            const reason = patValidationFailureReason(message);
+            if (isUnusableContentfulCacheReason(reason)) {
+                await oauthCtx.store.deleteContentfulToken(sub, deployment.spaceId);
+                oauthLogAuthFailure('mcp', reason, {
+                    spaceId: deployment.spaceId,
+                    projectKey: deployment.projectKey,
+                    message,
+                });
+                return unauthorizedMcpResponse('invalid_contentful_token');
+            }
+            if (isTransientContentfulFailure(reason)) {
+                oauthLogAuthFailure('mcp', reason, {
+                    spaceId: deployment.spaceId,
+                    projectKey: deployment.projectKey,
+                    message,
+                });
+                return Response.json({ error: message }, { status: 503 });
+            }
+            throw err;
+        }
+        await oauthCtx.store.touchContentfulToken(sub, deployment.spaceId);
+    }
+    catch (err) {
+        let deploymentMeta = {};
+        try {
+            const deployment = loadHostedDeploymentFromEnv();
+            deploymentMeta = { spaceId: deployment.spaceId, projectKey: deployment.projectKey };
+        }
+        catch {
+            // env not configured — still log auth failure without deployment context
+        }
+        if (isMcpUnauthorizedError(err)) {
+            oauthLogAuthFailure('mcp', err.reason, deploymentMeta);
+            return unauthorizedMcpResponse(err.reason);
+        }
+        const message = err instanceof Error ? err.message : String(err);
+        oauthLogAuthFailure('mcp', patValidationFailureReason(message), {
+            ...deploymentMeta,
+            message,
+        });
+        return Response.json({ error: message }, { status: 401 });
+    }
+    try {
+        const deployment = loadHostedDeploymentFromEnv();
+        const runtimeContext = {
+            config: buildHostedConfig(deployment, user.token),
+            sessionStore: new RedisSessionStore(redisClient),
+            indexCacheStore: new RedisIndexCacheStore(redisClient),
+            stagedUploadStore: new StagedUploadStore(redisClient),
+            mediaPipelineJobStore: new MediaPipelineJobStore(redisClient),
+            projectKey: deployment.projectKey,
+            user: { userId: user.userId, email: user.email },
+            onCmaUnauthorized: mcpSub === undefined
+                ? undefined
+                : async () => {
+                    await oauthCtx.store.deleteContentfulToken(mcpSub, deployment.spaceId);
+                },
+        };
+        return await handleHostedMcpRequest(request, {
+            resolveContext: async () => runtimeContext,
+            getMcpInfo: () => ({
+                projectKey: deployment.projectKey,
+                displayName: process.env['CMS_EDIT_DISPLAY_NAME'],
+                spaceId: deployment.spaceId,
+            }),
+            editorPackPath,
+        });
+    }
+    catch (err) {
+        const message = err instanceof Error ? err.message : String(err);
+        let deploymentMeta = {};
+        try {
+            const deployment = loadHostedDeploymentFromEnv();
+            deploymentMeta = { spaceId: deployment.spaceId, projectKey: deployment.projectKey };
+        }
+        catch {
+            // env not configured — still log handler failure without deployment context
+        }
+        oauthLogMcpHandlerError(message, deploymentMeta);
+        return Response.json({ error: message }, { status: 500 });
+    }
+}
+//# sourceMappingURL=mcp.js.map

package/dist/hosted/next/routes/mcp.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp.js","sourceRoot":"","sources":["../../../../src/hosted/next/routes/mcp.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,qBAAqB,EAAE,MAAM,sCAAsC,CAAC;AAC7E,OAAO,EAAE,iBAAiB,EAAE,MAAM,iCAAiC,CAAC;AACpE,OAAO,EACL,iBAAiB,EACjB,sBAAsB,EACtB,sBAAsB,EACtB,4BAA4B,EAC5B,+BAA+B,EAC/B,2BAA2B,EAC3B,mBAAmB,EACnB,uBAAuB,EACvB,0BAA0B,EAC1B,oBAAoB,EACpB,iBAAiB,EACjB,iCAAiC,EACjC,uBAAuB,EACvB,6BAA6B,EAC7B,uBAAuB,GACxB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,yBAAyB,EAAE,MAAM,eAAe,CAAC;AAC1D,OAAO,EAAE,uBAAuB,EAAE,MAAM,wBAAwB,CAAC;AACjE,OAAO,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAEhD,MAAM,WAAW,GAAG,iBAAiB,EAAE,CAAC;AACxC,MAAM,cAAc,GAAG,uBAAuB,EAAE,CAAC;AAEjD,MAAM,CAAC,KAAK,UAAU,GAAG,CAAC,OAAgB;IACxC,OAAO,SAAS,CAAC,OAAO,CAAC,CAAC;AAC5B,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,IAAI,CAAC,OAAgB;IACzC,OAAO,SAAS,CAAC,OAAO,CAAC,CAAC;AAC5B,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,MAAM,CAAC,OAAgB;IAC3C,OAAO,SAAS,CAAC,OAAO,CAAC,CAAC;AAC5B,CAAC;AAED,KAAK,UAAU,SAAS,CAAC,OAAgB;IACvC,OAAO,6BAA6B,CAAC,GAAG,EAAE,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC,CAAC;AACtE,CAAC;AAED,KAAK,UAAU,cAAc,CAAC,OAAgB;IAC5C,MAAM,QAAQ,GAAG,yBAAyB,EAAE,CAAC;IAE7C,IAAI,IAAyD,CAAC;IAC9D,IAAI,MAA0B,CAAC;IAC/B,IAAI,CAAC;QACH,MAAM,UAAU,GAAG,2BAA2B,EAAE,CAAC;QACjD,MAAM,EAAE,GAAG,EAAE,eAAe,EAAE,GAAG,MAAM,iCAAiC,CACtE,OAAO,EACP,QAAQ,CAAC,KAAK,EACd,UAAU,CAAC,OAAO,CACnB,CAAC;QACF,MAAM,GAAG,GAAG,CAAC;QACb,IAAI,CAAC;YACH,IAAI,GAAG,MAAM,uBAAuB,CAAC,QAAQ,CAAC,KAAK,EAAE,GAAG,EAAE,eAAe,EAAE,UAAU,CAAC,CAAC;QACzF,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACjE,MAAM,MAAM,GAAG,0BAA0B,CAAC,OAAO,CAAC,CAAC;YACnD,IAAI,+BAA+B,CAAC,MAAM,CAAC,EAAE,CAAC;gBAC5C,MAAM,QAAQ,CAAC,KAAK,CAAC,qBAAqB,CAAC,GAAG,EAAE,UAAU,CAAC,OAAO,CAAC,CAAC;gBACpE,mBAAmB,CAAC,KAAK,EAAE,MAAM,EAAE;oBACjC,OAAO,EAAE,UAAU,CAAC,OAAO;oBAC3B,UAAU,EAAE,UAAU,CAAC,UAAU;oBACjC,OAAO;iBACR,CAAC,CAAC;gBACH,OAAO,uBAAuB,CAAC,0BAA0B,CAAC,CAAC;YAC7D,CAAC;YACD,IAAI,4BAA4B,CAAC,MAAM,CAAC,EAAE,CAAC;gBACzC,mBAAmB,CAAC,KAAK,EAAE,MAAM,EAAE;oBACjC,OAAO,EAAE,UAAU,CAAC,OAAO;oBAC3B,UAAU,EAAE,UAAU,CAAC,UAAU;oBACjC,OAAO;iBACR,CAAC,CAAC;gBACH,OAAO,QAAQ,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;YAC5D,CAAC;YACD,MAAM,GAAG,CAAC;QACZ,CAAC;QACD,MAAM,QAAQ,CAAC,KAAK,CAAC,oBAAoB,CAAC,GAAG,EAAE,UAAU,CAAC,OAAO,CAAC,CAAC;IACrE,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,cAAc,GAA8C,EAAE,CAAC;QACnE,IAAI,CAAC;YACH,MAAM,UAAU,GAAG,2BAA2B,EAAE,CAAC;YACjD,cAAc,GAAG,EAAE,OAAO,EAAE,UAAU,CAAC,OAAO,EAAE,UAAU,EAAE,UAAU,CAAC,UAAU,EAAE,CAAC;QACtF,CAAC;QAAC,MAAM,CAAC;YACP,yEAAyE;QAC3E,CAAC;QAED,IAAI,sBAAsB,CAAC,GAAG,CAAC,EAAE,CAAC;YAChC,mBAAmB,CAAC,KAAK,EAAE,GAAG,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;YACvD,OAAO,uBAAuB,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAC7C,CAAC;QACD,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACjE,mBAAmB,CAAC,KAAK,EAAE,0BAA0B,CAAC,OAAO,CAAC,EAAE;YAC9D,GAAG,cAAc;YACjB,OAAO;SACR,CAAC,CAAC;QACH,OAAO,QAAQ,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;IAC5D,CAAC;IAED,IAAI,CAAC;QACH,MAAM,UAAU,GAAG,2BAA2B,EAAE,CAAC;QACjD,MAAM,cAAc,GAAG;YACrB,MAAM,EAAE,iBAAiB,CAAC,UAAU,EAAE,IAAI,CAAC,KAAK,CAAC;YACjD,YAAY,EAAE,IAAI,iBAAiB,CAAC,WAAW,CAAC;YAChD,eAAe,EAAE,IAAI,oBAAoB,CAAC,WAAW,CAAC;YACtD,iBAAiB,EAAE,IAAI,iBAAiB,CAAC,WAAW,CAAC;YACrD,qBAAqB,EAAE,IAAI,qBAAqB,CAAC,WAAW,CAAC;YAC7D,UAAU,EAAE,UAAU,CAAC,UAAU;YACjC,IAAI,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE;YAChD,iBAAiB,EACf,MAAM,KAAK,SAAS;gBAClB,CAAC,CAAC,SAAS;gBACX,CAAC,CAAC,KAAK,IAAI,EAAE;oBACT,MAAM,QAAQ,CAAC,KAAK,CAAC,qBAAqB,CAAC,MAAM,EAAE,UAAU,CAAC,OAAO,CAAC,CAAC;gBACzE,CAAC;SACR,CAAC;QAEF,OAAO,MAAM,sBAAsB,CAAC,OAAO,EAAE;YAC3C,cAAc,EAAE,KAAK,IAAI,EAAE,CAAC,cAAc;YAC1C,UAAU,EAAE,GAAG,EAAE,CAAC,CAAC;gBACjB,UAAU,EAAE,UAAU,CAAC,UAAU;gBACjC,WAAW,EAAE,OAAO,CAAC,GAAG,CAAC,uBAAuB,CAAC;gBACjD,OAAO,EAAE,UAAU,CAAC,OAAO;aAC5B,CAAC;YACF,cAAc;SACf,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACjE,IAAI,cAAc,GAA8C,EAAE,CAAC;QACnE,IAAI,CAAC;YACH,MAAM,UAAU,GAAG,2BAA2B,EAAE,CAAC;YACjD,cAAc,GAAG,EAAE,OAAO,EAAE,UAAU,CAAC,OAAO,EAAE,UAAU,EAAE,UAAU,CAAC,UAAU,EAAE,CAAC;QACtF,CAAC;QAAC,MAAM,CAAC;YACP,4EAA4E;QAC9E,CAAC;QACD,uBAAuB,CAAC,OAAO,EAAE,cAAc,CAAC,CAAC;QACjD,OAAO,QAAQ,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;IAC5D,CAAC;AACH,CAAC"}

package/dist/hosted/next/routes/oauth-authorization-server.d.ts

@@ -0,0 +1,2 @@
+export declare function GET(): Promise<Response>;
+//# sourceMappingURL=oauth-authorization-server.d.ts.map

package/dist/hosted/next/routes/oauth-authorization-server.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauth-authorization-server.d.ts","sourceRoot":"","sources":["../../../../src/hosted/next/routes/oauth-authorization-server.ts"],"names":[],"mappings":"AAEA,wBAAsB,GAAG,IAAI,OAAO,CAAC,QAAQ,CAAC,CAE7C"}

package/dist/hosted/next/routes/oauth-authorization-server.js

@@ -0,0 +1,5 @@
+import { handleOAuthAuthorizationServerMetadataGet } from '../../index.js';
+export async function GET() {
+    return handleOAuthAuthorizationServerMetadataGet();
+}
+//# sourceMappingURL=oauth-authorization-server.js.map

package/dist/hosted/next/routes/oauth-authorization-server.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauth-authorization-server.js","sourceRoot":"","sources":["../../../../src/hosted/next/routes/oauth-authorization-server.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,yCAAyC,EAAE,MAAM,gBAAgB,CAAC;AAE3E,MAAM,CAAC,KAAK,UAAU,GAAG;IACvB,OAAO,yCAAyC,EAAE,CAAC;AACrD,CAAC"}

package/dist/hosted/next/routes/oauth-authorize.d.ts

@@ -0,0 +1,2 @@
+export declare function GET(request: Request): Promise<Response>;
+//# sourceMappingURL=oauth-authorize.d.ts.map

package/dist/hosted/next/routes/oauth-authorize.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauth-authorize.d.ts","sourceRoot":"","sources":["../../../../src/hosted/next/routes/oauth-authorize.ts"],"names":[],"mappings":"AAGA,wBAAsB,GAAG,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,QAAQ,CAAC,CAE7D"}

package/dist/hosted/next/routes/oauth-authorize.js

@@ -0,0 +1,6 @@
+import { handleOAuthAuthorizeGet } from '../../index.js';
+import { createOAuthHandlerContext } from '../context.js';
+export async function GET(request) {
+    return handleOAuthAuthorizeGet(request, createOAuthHandlerContext());
+}
+//# sourceMappingURL=oauth-authorize.js.map

package/dist/hosted/next/routes/oauth-authorize.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauth-authorize.js","sourceRoot":"","sources":["../../../../src/hosted/next/routes/oauth-authorize.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,uBAAuB,EAAE,MAAM,gBAAgB,CAAC;AACzD,OAAO,EAAE,yBAAyB,EAAE,MAAM,eAAe,CAAC;AAE1D,MAAM,CAAC,KAAK,UAAU,GAAG,CAAC,OAAgB;IACxC,OAAO,uBAAuB,CAAC,OAAO,EAAE,yBAAyB,EAAE,CAAC,CAAC;AACvE,CAAC"}

package/dist/hosted/next/routes/oauth-protected-resource.d.ts

@@ -0,0 +1,2 @@
+export declare function GET(): Promise<Response>;
+//# sourceMappingURL=oauth-protected-resource.d.ts.map

package/dist/hosted/next/routes/oauth-protected-resource.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauth-protected-resource.d.ts","sourceRoot":"","sources":["../../../../src/hosted/next/routes/oauth-protected-resource.ts"],"names":[],"mappings":"AAEA,wBAAsB,GAAG,IAAI,OAAO,CAAC,QAAQ,CAAC,CAE7C"}

package/dist/hosted/next/routes/oauth-protected-resource.js

@@ -0,0 +1,5 @@
+import { handleOAuthProtectedResourceMetadataGet } from '../../index.js';
+export async function GET() {
+    return handleOAuthProtectedResourceMetadataGet();
+}
+//# sourceMappingURL=oauth-protected-resource.js.map

package/dist/hosted/next/routes/oauth-protected-resource.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauth-protected-resource.js","sourceRoot":"","sources":["../../../../src/hosted/next/routes/oauth-protected-resource.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,uCAAuC,EAAE,MAAM,gBAAgB,CAAC;AAEzE,MAAM,CAAC,KAAK,UAAU,GAAG;IACvB,OAAO,uCAAuC,EAAE,CAAC;AACnD,CAAC"}

package/dist/hosted/next/routes/oauth-register.d.ts

@@ -0,0 +1,2 @@
+export declare function POST(request: Request): Promise<Response>;
+//# sourceMappingURL=oauth-register.d.ts.map

package/dist/hosted/next/routes/oauth-register.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauth-register.d.ts","sourceRoot":"","sources":["../../../../src/hosted/next/routes/oauth-register.ts"],"names":[],"mappings":"AAGA,wBAAsB,IAAI,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,QAAQ,CAAC,CAE9D"}

package/dist/hosted/next/routes/oauth-register.js

@@ -0,0 +1,6 @@
+import { handleOAuthRegisterPost } from '../../index.js';
+import { createOAuthHandlerContext } from '../context.js';
+export async function POST(request) {
+    return handleOAuthRegisterPost(request, createOAuthHandlerContext());
+}
+//# sourceMappingURL=oauth-register.js.map

package/dist/hosted/next/routes/oauth-register.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauth-register.js","sourceRoot":"","sources":["../../../../src/hosted/next/routes/oauth-register.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,uBAAuB,EAAE,MAAM,gBAAgB,CAAC;AACzD,OAAO,EAAE,yBAAyB,EAAE,MAAM,eAAe,CAAC;AAE1D,MAAM,CAAC,KAAK,UAAU,IAAI,CAAC,OAAgB;IACzC,OAAO,uBAAuB,CAAC,OAAO,EAAE,yBAAyB,EAAE,CAAC,CAAC;AACvE,CAAC"}

package/dist/hosted/next/routes/oauth-token.d.ts

@@ -0,0 +1,2 @@
+export declare function POST(request: Request): Promise<Response>;
+//# sourceMappingURL=oauth-token.d.ts.map

package/dist/hosted/next/routes/oauth-token.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauth-token.d.ts","sourceRoot":"","sources":["../../../../src/hosted/next/routes/oauth-token.ts"],"names":[],"mappings":"AAGA,wBAAsB,IAAI,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,QAAQ,CAAC,CAE9D"}

package/dist/hosted/next/routes/oauth-token.js

@@ -0,0 +1,6 @@
+import { handleOAuthTokenPost } from '../../index.js';
+import { createOAuthHandlerContext } from '../context.js';
+export async function POST(request) {
+    return handleOAuthTokenPost(request, createOAuthHandlerContext());
+}
+//# sourceMappingURL=oauth-token.js.map

package/dist/hosted/next/routes/oauth-token.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauth-token.js","sourceRoot":"","sources":["../../../../src/hosted/next/routes/oauth-token.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,oBAAoB,EAAE,MAAM,gBAAgB,CAAC;AACtD,OAAO,EAAE,yBAAyB,EAAE,MAAM,eAAe,CAAC;AAE1D,MAAM,CAAC,KAAK,UAAU,IAAI,CAAC,OAAgB;IACzC,OAAO,oBAAoB,CAAC,OAAO,EAAE,yBAAyB,EAAE,CAAC,CAAC;AACpE,CAAC"}

package/dist/hosted/next/routes/staged-upload.d.ts

@@ -0,0 +1,2 @@
+export declare function POST(request: Request): Promise<Response>;
+//# sourceMappingURL=staged-upload.d.ts.map

package/dist/hosted/next/routes/staged-upload.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"staged-upload.d.ts","sourceRoot":"","sources":["../../../../src/hosted/next/routes/staged-upload.ts"],"names":[],"mappings":"AAkDA,wBAAsB,IAAI,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,QAAQ,CAAC,CAqD9D"}

package/dist/hosted/next/routes/staged-upload.js

@@ -0,0 +1,83 @@
+import { getUploadHmacSecret, verifyUploadSignature } from '../../../staged-upload/hmac.js';
+import { hostedStagedMaxBytes } from '../../../staged-upload/limits.js';
+import { StagedUploadStore } from '../../../staged-upload/store.js';
+import { createRedisClient } from '../redis.js';
+const redisClient = createRedisClient();
+const stagedStore = new StagedUploadStore(redisClient);
+function parseUploadQuery(url) {
+    const uploadId = url.searchParams.get('id')?.trim();
+    const userId = url.searchParams.get('uid')?.trim();
+    const expRaw = url.searchParams.get('exp')?.trim();
+    const sig = url.searchParams.get('sig')?.trim();
+    if (!uploadId || !userId || !expRaw || !sig) {
+        return null;
+    }
+    const exp = Number.parseInt(expRaw, 10);
+    if (!Number.isFinite(exp)) {
+        return null;
+    }
+    return { uploadId, userId, exp, sig };
+}
+async function readUploadBody(request) {
+    const contentType = request.headers.get('content-type') ?? '';
+    if (contentType.includes('multipart/form-data')) {
+        const form = await request.formData();
+        const file = form.get('file');
+        if (!(file instanceof File)) {
+            throw new Error('multipart upload requires a "file" field.');
+        }
+        const buffer = Buffer.from(await file.arrayBuffer());
+        const mimeType = file.type || 'application/octet-stream';
+        return { buffer, mimeType };
+    }
+    const buffer = Buffer.from(await request.arrayBuffer());
+    if (buffer.length === 0) {
+        throw new Error('Upload body is empty.');
+    }
+    const mimeType = contentType.split(';')[0]?.trim() || 'application/octet-stream';
+    return { buffer, mimeType };
+}
+export async function POST(request) {
+    try {
+        const url = new URL(request.url);
+        const query = parseUploadQuery(url);
+        if (!query) {
+            return Response.json({ ok: false, error: 'Missing upload query parameters.' }, { status: 400 });
+        }
+        const now = Math.floor(Date.now() / 1000);
+        if (query.exp < now) {
+            return Response.json({ ok: false, error: 'Upload URL expired.' }, { status: 401 });
+        }
+        const secret = getUploadHmacSecret();
+        if (!verifyUploadSignature(query.uploadId, query.userId, query.exp, query.sig, secret)) {
+            return Response.json({ ok: false, error: 'Invalid upload signature.' }, { status: 401 });
+        }
+        const { buffer, mimeType } = await readUploadBody(request);
+        if (buffer.length > hostedStagedMaxBytes()) {
+            return Response.json({
+                ok: false,
+                error: `File exceeds hosted staged upload limit (${String(hostedStagedMaxBytes())} bytes).`,
+            }, { status: 413 });
+        }
+        const record = await stagedStore.storeFile(query.userId, query.uploadId, buffer, mimeType);
+        return Response.json({
+            ok: true,
+            uploadId: record.uploadId,
+            byteLength: record.byteLength,
+            mimeType: record.mimeType,
+            fileName: record.fileName,
+        });
+    }
+    catch (err) {
+        const message = err instanceof Error ? err.message : String(err);
+        const status = message.includes('not found') ||
+            message.includes('expired') ||
+            message.includes('already received')
+            ? 409
+            : message.includes('not allowed') || message.includes('requires')
+                ? 400
+                : 500;
+        return Response.json({ ok: false, error: message }, { status });
+    }
+}
+//# sourceMappingURL=staged-upload.js.map

package/dist/hosted/next/routes/staged-upload.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"staged-upload.js","sourceRoot":"","sources":["../../../../src/hosted/next/routes/staged-upload.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAE,qBAAqB,EAAE,MAAM,gCAAgC,CAAC;AAC5F,OAAO,EAAE,oBAAoB,EAAE,MAAM,kCAAkC,CAAC;AACxE,OAAO,EAAE,iBAAiB,EAAE,MAAM,iCAAiC,CAAC;AACpE,OAAO,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAEhD,MAAM,WAAW,GAAG,iBAAiB,EAAE,CAAC;AACxC,MAAM,WAAW,GAAG,IAAI,iBAAiB,CAAC,WAAW,CAAC,CAAC;AAEvD,SAAS,gBAAgB,CAAC,GAAQ;IAMhC,MAAM,QAAQ,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC;IACpD,MAAM,MAAM,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,CAAC;IACnD,MAAM,MAAM,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,CAAC;IACnD,MAAM,GAAG,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,CAAC;IAChD,IAAI,CAAC,QAAQ,IAAI,CAAC,MAAM,IAAI,CAAC,MAAM,IAAI,CAAC,GAAG,EAAE,CAAC;QAC5C,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,GAAG,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IACxC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QAC1B,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC;AACxC,CAAC;AAED,KAAK,UAAU,cAAc,CAAC,OAAgB;IAC5C,MAAM,WAAW,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC;IAE9D,IAAI,WAAW,CAAC,QAAQ,CAAC,qBAAqB,CAAC,EAAE,CAAC;QAChD,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,QAAQ,EAAE,CAAC;QACtC,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAC9B,IAAI,CAAC,CAAC,IAAI,YAAY,IAAI,CAAC,EAAE,CAAC;YAC5B,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;QAC/D,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC;QACrD,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,IAAI,0BAA0B,CAAC;QACzD,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;IAC9B,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC;IACxD,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxB,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC;IAC3C,CAAC;IACD,MAAM,QAAQ,GAAG,WAAW,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,0BAA0B,CAAC;IACjF,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;AAC9B,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,IAAI,CAAC,OAAgB;IACzC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACjC,MAAM,KAAK,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC;QACpC,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,OAAO,QAAQ,CAAC,IAAI,CAClB,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,kCAAkC,EAAE,EACxD,EAAE,MAAM,EAAE,GAAG,EAAE,CAChB,CAAC;QACJ,CAAC;QAED,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;QAC1C,IAAI,KAAK,CAAC,GAAG,GAAG,GAAG,EAAE,CAAC;YACpB,OAAO,QAAQ,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,qBAAqB,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;QACrF,CAAC;QAED,MAAM,MAAM,GAAG,mBAAmB,EAAE,CAAC;QACrC,IAAI,CAAC,qBAAqB,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,MAAM,CAAC,EAAE,CAAC;YACvF,OAAO,QAAQ,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,2BAA2B,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;QAC3F,CAAC;QAED,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,cAAc,CAAC,OAAO,CAAC,CAAC;QAC3D,IAAI,MAAM,CAAC,MAAM,GAAG,oBAAoB,EAAE,EAAE,CAAC;YAC3C,OAAO,QAAQ,CAAC,IAAI,CAClB;gBACE,EAAE,EAAE,KAAK;gBACT,KAAK,EAAE,4CAA4C,MAAM,CAAC,oBAAoB,EAAE,CAAC,UAAU;aAC5F,EACD,EAAE,MAAM,EAAE,GAAG,EAAE,CAChB,CAAC;QACJ,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,SAAS,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC;QAE3F,OAAO,QAAQ,CAAC,IAAI,CAAC;YACnB,EAAE,EAAE,IAAI;YACR,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,UAAU,EAAE,MAAM,CAAC,UAAU;YAC7B,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,QAAQ,EAAE,MAAM,CAAC,QAAQ;SAC1B,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACjE,MAAM,MAAM,GACV,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAC;YAC7B,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC;YAC3B,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAAC;YAClC,CAAC,CAAC,GAAG;YACL,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAC;gBAC/D,CAAC,CAAC,GAAG;gBACL,CAAC,CAAC,GAAG,CAAC;QACZ,OAAO,QAAQ,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;IAClE,CAAC;AACH,CAAC"}