@se-studio/contentful-cms 0.0.0-next16-20260822103555

package/dist/hosted/oauth/store.js

@@ -0,0 +1,217 @@
+import { randomUUID } from 'node:crypto';
+const AUTH_REQUEST_TTL_SECONDS = 600;
+const AUTH_CODE_TTL_SECONDS = 120;
+/** Match MCP refresh lifetime so CMA cache does not die while Grok can still refresh JWTs. */
+export const CONTENTFUL_TOKEN_TTL_SECONDS = 30 * 24 * 60 * 60;
+const REFRESH_TOKEN_TTL_SECONDS = CONTENTFUL_TOKEN_TTL_SECONDS;
+function cachedContentfulTokenFromParsed(parsed) {
+    if (!parsed || typeof parsed !== 'object')
+        return null;
+    const record = parsed;
+    if (typeof record.token !== 'string' || record.token.length === 0)
+        return null;
+    return {
+        token: record.token,
+        ...(typeof record.userId === 'string' ? { userId: record.userId } : {}),
+        ...(typeof record.email === 'string' ? { email: record.email } : {}),
+        ...(typeof record.lastValidatedAt === 'string'
+            ? { lastValidatedAt: record.lastValidatedAt }
+            : {}),
+    };
+}
+export function parseCachedContentfulToken(raw) {
+    // Upstash GET auto-parses JSON; a stored identity blob arrives as an object.
+    if (raw && typeof raw === 'object') {
+        return cachedContentfulTokenFromParsed(raw);
+    }
+    if (typeof raw !== 'string' || raw.length === 0)
+        return null;
+    const trimmed = raw.trim();
+    if (trimmed.startsWith('{')) {
+        try {
+            return cachedContentfulTokenFromParsed(JSON.parse(trimmed));
+        }
+        catch {
+            return null;
+        }
+    }
+    return { token: raw };
+}
+function serializeCachedContentfulToken(record) {
+    return JSON.stringify(record);
+}
+/**
+ * Contentful CMA token cache key — space-scoped for shared Redis across hosts.
+ */
+export function contentfulTokenKey(sub, spaceId) {
+    return `cms-edit:oauth:user:${sub}:${spaceId}:contentful_token`;
+}
+/**
+ * Pre-3.4.5 key (not space-scoped). Read as fallback; migrate to space-scoped on hit.
+ */
+export function legacyContentfulTokenKey(sub) {
+    return `cms-edit:oauth:user:${sub}:contentful_token`;
+}
+/**
+ * Host space for OAuth token isolation.
+ * Prefer explicit spaceId (deployment); fall back to CONTENTFUL_SPACE_ID.
+ * Returns undefined when neither is set — callers treat as missing token / store error.
+ */
+export function resolveOAuthSpaceId(explicit) {
+    const fromArg = explicit?.trim();
+    if (fromArg)
+        return fromArg;
+    const fromEnv = process.env['CONTENTFUL_SPACE_ID']?.trim();
+    return fromEnv || undefined;
+}
+export function refreshTokenKey(token) {
+    return `cms-edit:oauth:refresh:${token}`;
+}
+function authCodeKey(code) {
+    return `cms-edit:oauth:code:${code}`;
+}
+function parseAuthCodeRecord(raw) {
+    if (!raw)
+        return null;
+    if (typeof raw === 'string') {
+        return JSON.parse(raw);
+    }
+    return raw;
+}
+export function createOAuthStore(redis) {
+    return {
+        async registerOAuthClient(input) {
+            const clientId = randomUUID();
+            const record = {
+                clientId,
+                redirectUris: input.redirectUris,
+                clientName: input.clientName,
+            };
+            await redis.set(`cms-edit:oauth:client:${clientId}`, JSON.stringify(record));
+            return record;
+        },
+        async getOAuthClient(clientId) {
+            const raw = await redis.get(`cms-edit:oauth:client:${clientId}`);
+            if (!raw)
+                return null;
+            if (typeof raw === 'string') {
+                return JSON.parse(raw);
+            }
+            return raw;
+        },
+        async savePendingAuthRequest(request) {
+            const authRequestId = randomUUID();
+            await redis.set(`cms-edit:oauth:request:${authRequestId}`, JSON.stringify(request), {
+                ex: AUTH_REQUEST_TTL_SECONDS,
+            });
+            return { authRequestId };
+        },
+        async getPendingAuthRequest(authRequestId) {
+            const raw = await redis.get(`cms-edit:oauth:request:${authRequestId}`);
+            if (!raw)
+                return null;
+            if (typeof raw === 'string') {
+                return JSON.parse(raw);
+            }
+            return raw;
+        },
+        async saveAuthCode(code, record) {
+            await redis.set(authCodeKey(code), JSON.stringify(record), {
+                ex: AUTH_CODE_TTL_SECONDS,
+            });
+        },
+        async peekAuthCode(code) {
+            return parseAuthCodeRecord(await redis.get(authCodeKey(code)));
+        },
+        async consumeAuthCode(code) {
+            const key = authCodeKey(code);
+            const raw = await redis.get(key);
+            if (!raw)
+                return null;
+            await redis.del(key);
+            return parseAuthCodeRecord(raw);
+        },
+        async storeContentfulToken(sub, token, spaceId, identity) {
+            const resolved = resolveOAuthSpaceId(spaceId);
+            if (!resolved) {
+                throw new Error('CONTENTFUL_SPACE_ID (or explicit spaceId) is required to store Contentful OAuth tokens');
+            }
+            const key = contentfulTokenKey(sub, resolved);
+            const record = {
+                token,
+                ...(identity
+                    ? {
+                        userId: identity.userId,
+                        email: identity.email,
+                        lastValidatedAt: new Date().toISOString(),
+                    }
+                    : {}),
+            };
+            await redis.set(key, serializeCachedContentfulToken(record), {
+                ex: CONTENTFUL_TOKEN_TTL_SECONDS,
+            });
+        },
+        async getContentfulToken(sub, spaceId) {
+            const record = await this.getContentfulTokenRecord(sub, spaceId);
+            return record?.token ?? null;
+        },
+        async getContentfulTokenRecord(sub, spaceId) {
+            const resolved = resolveOAuthSpaceId(spaceId);
+            if (!resolved) {
+                return null;
+            }
+            const key = contentfulTokenKey(sub, resolved);
+            const scoped = parseCachedContentfulToken(await redis.get(key));
+            if (scoped)
+                return scoped;
+            // Soft cutover: pre-3.4.5 unscoped tokens (same Redis / shared cmsedit-sessions).
+            // Migrate into the space-scoped key so subsequent hosts stay isolated.
+            const legacyRaw = await redis.get(legacyContentfulTokenKey(sub));
+            const legacy = parseCachedContentfulToken(legacyRaw);
+            if (legacy) {
+                await redis.set(key, serializeCachedContentfulToken(legacy), {
+                    ex: CONTENTFUL_TOKEN_TTL_SECONDS,
+                });
+                return legacy;
+            }
+            return null;
+        },
+        async touchContentfulToken(sub, spaceId) {
+            const resolved = resolveOAuthSpaceId(spaceId);
+            if (!resolved) {
+                return;
+            }
+            const key = contentfulTokenKey(sub, resolved);
+            const token = await redis.get(key);
+            if (typeof token === 'string' && token.length > 0) {
+                await redis.expire(key, CONTENTFUL_TOKEN_TTL_SECONDS);
+            }
+        },
+        async deleteContentfulToken(sub, spaceId) {
+            const resolved = resolveOAuthSpaceId(spaceId);
+            const keys = [legacyContentfulTokenKey(sub)];
+            if (resolved) {
+                keys.unshift(contentfulTokenKey(sub, resolved));
+            }
+            await Promise.all(keys.map((key) => redis.del(key)));
+        },
+        async saveRefreshToken(token, record) {
+            await redis.set(refreshTokenKey(token), JSON.stringify(record), {
+                ex: REFRESH_TOKEN_TTL_SECONDS,
+            });
+        },
+        async getRefreshToken(token) {
+            const raw = await redis.get(refreshTokenKey(token));
+            if (!raw)
+                return null;
+            if (typeof raw === 'string') {
+                return JSON.parse(raw);
+            }
+            return raw;
+        },
+        async revokeRefreshToken(token) {
+            await redis.del(refreshTokenKey(token));
+        },
+    };
+}
+//# sourceMappingURL=store.js.map

package/dist/hosted/oauth/store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"store.js","sourceRoot":"","sources":["../../../src/hosted/oauth/store.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAGzC,MAAM,wBAAwB,GAAG,GAAG,CAAC;AACrC,MAAM,qBAAqB,GAAG,GAAG,CAAC;AAClC,8FAA8F;AAC9F,MAAM,CAAC,MAAM,4BAA4B,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC;AAC9D,MAAM,yBAAyB,GAAG,4BAA4B,CAAC;AAmC/D,SAAS,+BAA+B,CAAC,MAAe;IACtD,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IACvD,MAAM,MAAM,GAAG,MAAwC,CAAC;IACxD,IAAI,OAAO,MAAM,CAAC,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAC/E,OAAO;QACL,KAAK,EAAE,MAAM,CAAC,KAAK;QACnB,GAAG,CAAC,OAAO,MAAM,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACvE,GAAG,CAAC,OAAO,MAAM,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACpE,GAAG,CAAC,OAAO,MAAM,CAAC,eAAe,KAAK,QAAQ;YAC5C,CAAC,CAAC,EAAE,eAAe,EAAE,MAAM,CAAC,eAAe,EAAE;YAC7C,CAAC,CAAC,EAAE,CAAC;KACR,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,0BAA0B,CAAC,GAAY;IACrD,6EAA6E;IAC7E,IAAI,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;QACnC,OAAO,+BAA+B,CAAC,GAAG,CAAC,CAAC;IAC9C,CAAC;IACD,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAC7D,MAAM,OAAO,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;IAC3B,IAAI,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QAC5B,IAAI,CAAC;YACH,OAAO,+BAA+B,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAY,CAAC,CAAC;QACzE,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC;AACxB,CAAC;AAED,SAAS,8BAA8B,CAAC,MAA6B;IACnE,OAAO,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;AAChC,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,kBAAkB,CAAC,GAAW,EAAE,OAAe;IAC7D,OAAO,uBAAuB,GAAG,IAAI,OAAO,mBAAmB,CAAC;AAClE,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,wBAAwB,CAAC,GAAW;IAClD,OAAO,uBAAuB,GAAG,mBAAmB,CAAC;AACvD,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,mBAAmB,CAAC,QAAiB;IACnD,MAAM,OAAO,GAAG,QAAQ,EAAE,IAAI,EAAE,CAAC;IACjC,IAAI,OAAO;QAAE,OAAO,OAAO,CAAC;IAC5B,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAC,EAAE,IAAI,EAAE,CAAC;IAC3D,OAAO,OAAO,IAAI,SAAS,CAAC;AAC9B,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,KAAa;IAC3C,OAAO,0BAA0B,KAAK,EAAE,CAAC;AAC3C,CAAC;AAED,SAAS,WAAW,CAAC,IAAY;IAC/B,OAAO,uBAAuB,IAAI,EAAE,CAAC;AACvC,CAAC;AAED,SAAS,mBAAmB,CAAC,GAAY;IACvC,IAAI,CAAC,GAAG;QAAE,OAAO,IAAI,CAAC;IACtB,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;QAC5B,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAmB,CAAC;IAC3C,CAAC;IACD,OAAO,GAAqB,CAAC;AAC/B,CAAC;AA6BD,MAAM,UAAU,gBAAgB,CAAC,KAAkB;IACjD,OAAO;QACL,KAAK,CAAC,mBAAmB,CAAC,KAAK;YAC7B,MAAM,QAAQ,GAAG,UAAU,EAAE,CAAC;YAC9B,MAAM,MAAM,GAA4B;gBACtC,QAAQ;gBACR,YAAY,EAAE,KAAK,CAAC,YAAY;gBAChC,UAAU,EAAE,KAAK,CAAC,UAAU;aAC7B,CAAC;YACF,MAAM,KAAK,CAAC,GAAG,CAAC,yBAAyB,QAAQ,EAAE,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC;YAC7E,OAAO,MAAM,CAAC;QAChB,CAAC;QAED,KAAK,CAAC,cAAc,CAAC,QAAQ;YAC3B,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,yBAAyB,QAAQ,EAAE,CAAC,CAAC;YACjE,IAAI,CAAC,GAAG;gBAAE,OAAO,IAAI,CAAC;YACtB,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;gBAC5B,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAA4B,CAAC;YACpD,CAAC;YACD,OAAO,GAA8B,CAAC;QACxC,CAAC;QAED,KAAK,CAAC,sBAAsB,CAAC,OAAO;YAClC,MAAM,aAAa,GAAG,UAAU,EAAE,CAAC;YACnC,MAAM,KAAK,CAAC,GAAG,CAAC,0BAA0B,aAAa,EAAE,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE;gBAClF,EAAE,EAAE,wBAAwB;aAC7B,CAAC,CAAC;YACH,OAAO,EAAE,aAAa,EAAE,CAAC;QAC3B,CAAC;QAED,KAAK,CAAC,qBAAqB,CAAC,aAAa;YACvC,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,0BAA0B,aAAa,EAAE,CAAC,CAAC;YACvE,IAAI,CAAC,GAAG;gBAAE,OAAO,IAAI,CAAC;YACtB,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;gBAC5B,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAuB,CAAC;YAC/C,CAAC;YACD,OAAO,GAAyB,CAAC;QACnC,CAAC;QAED,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM;YAC7B,MAAM,KAAK,CAAC,GAAG,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE;gBACzD,EAAE,EAAE,qBAAqB;aAC1B,CAAC,CAAC;QACL,CAAC;QAED,KAAK,CAAC,YAAY,CAAC,IAAI;YACrB,OAAO,mBAAmB,CAAC,MAAM,KAAK,CAAC,GAAG,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACjE,CAAC;QAED,KAAK,CAAC,eAAe,CAAC,IAAI;YACxB,MAAM,GAAG,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC;YAC9B,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YACjC,IAAI,CAAC,GAAG;gBAAE,OAAO,IAAI,CAAC;YACtB,MAAM,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YACrB,OAAO,mBAAmB,CAAC,GAAG,CAAC,CAAC;QAClC,CAAC;QAED,KAAK,CAAC,oBAAoB,CAAC,GAAG,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ;YACtD,MAAM,QAAQ,GAAG,mBAAmB,CAAC,OAAO,CAAC,CAAC;YAC9C,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACd,MAAM,IAAI,KAAK,CACb,wFAAwF,CACzF,CAAC;YACJ,CAAC;YACD,MAAM,GAAG,GAAG,kBAAkB,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;YAC9C,MAAM,MAAM,GAA0B;gBACpC,KAAK;gBACL,GAAG,CAAC,QAAQ;oBACV,CAAC,CAAC;wBACE,MAAM,EAAE,QAAQ,CAAC,MAAM;wBACvB,KAAK,EAAE,QAAQ,CAAC,KAAK;wBACrB,eAAe,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;qBAC1C;oBACH,CAAC,CAAC,EAAE,CAAC;aACR,CAAC;YACF,MAAM,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,8BAA8B,CAAC,MAAM,CAAC,EAAE;gBAC3D,EAAE,EAAE,4BAA4B;aACjC,CAAC,CAAC;QACL,CAAC;QAED,KAAK,CAAC,kBAAkB,CAAC,GAAG,EAAE,OAAO;YACnC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,wBAAwB,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;YACjE,OAAO,MAAM,EAAE,KAAK,IAAI,IAAI,CAAC;QAC/B,CAAC;QAED,KAAK,CAAC,wBAAwB,CAAC,GAAG,EAAE,OAAO;YACzC,MAAM,QAAQ,GAAG,mBAAmB,CAAC,OAAO,CAAC,CAAC;YAC9C,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACd,OAAO,IAAI,CAAC;YACd,CAAC;YACD,MAAM,GAAG,GAAG,kBAAkB,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;YAC9C,MAAM,MAAM,GAAG,0BAA0B,CAAC,MAAM,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;YAChE,IAAI,MAAM;gBAAE,OAAO,MAAM,CAAC;YAE1B,kFAAkF;YAClF,uEAAuE;YACvE,MAAM,SAAS,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,wBAAwB,CAAC,GAAG,CAAC,CAAC,CAAC;YACjE,MAAM,MAAM,GAAG,0BAA0B,CAAC,SAAS,CAAC,CAAC;YACrD,IAAI,MAAM,EAAE,CAAC;gBACX,MAAM,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,8BAA8B,CAAC,MAAM,CAAC,EAAE;oBAC3D,EAAE,EAAE,4BAA4B;iBACjC,CAAC,CAAC;gBACH,OAAO,MAAM,CAAC;YAChB,CAAC;YACD,OAAO,IAAI,CAAC;QACd,CAAC;QAED,KAAK,CAAC,oBAAoB,CAAC,GAAG,EAAE,OAAO;YACrC,MAAM,QAAQ,GAAG,mBAAmB,CAAC,OAAO,CAAC,CAAC;YAC9C,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACd,OAAO;YACT,CAAC;YACD,MAAM,GAAG,GAAG,kBAAkB,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;YAC9C,MAAM,KAAK,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YACnC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAClD,MAAM,KAAK,CAAC,MAAM,CAAC,GAAG,EAAE,4BAA4B,CAAC,CAAC;YACxD,CAAC;QACH,CAAC;QAED,KAAK,CAAC,qBAAqB,CAAC,GAAG,EAAE,OAAO;YACtC,MAAM,QAAQ,GAAG,mBAAmB,CAAC,OAAO,CAAC,CAAC;YAC9C,MAAM,IAAI,GAAG,CAAC,wBAAwB,CAAC,GAAG,CAAC,CAAC,CAAC;YAC7C,IAAI,QAAQ,EAAE,CAAC;gBACb,IAAI,CAAC,OAAO,CAAC,kBAAkB,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC,CAAC;YAClD,CAAC;YACD,MAAM,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QACvD,CAAC;QAED,KAAK,CAAC,gBAAgB,CAAC,KAAK,EAAE,MAAM;YAClC,MAAM,KAAK,CAAC,GAAG,CAAC,eAAe,CAAC,KAAK,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE;gBAC9D,EAAE,EAAE,yBAAyB;aAC9B,CAAC,CAAC;QACL,CAAC;QAED,KAAK,CAAC,eAAe,CAAC,KAAK;YACzB,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC,CAAC;YACpD,IAAI,CAAC,GAAG;gBAAE,OAAO,IAAI,CAAC;YACtB,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;gBAC5B,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAuB,CAAC;YAC/C,CAAC;YACD,OAAO,GAAyB,CAAC;QACnC,CAAC;QAED,KAAK,CAAC,kBAAkB,CAAC,KAAK;YAC5B,MAAM,KAAK,CAAC,GAAG,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC,CAAC;QAC1C,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/hosted/oauth/token-grant-response.d.ts

@@ -0,0 +1,7 @@
+export type TokenGrantRoute = 'authorization-code' | 'refresh-token';
+/**
+ * Map token-endpoint failures: invalid CMA / grant errors → 400 invalid_grant;
+ * Contentful 5xx / unclassified PAT errors → 503 so clients retry.
+ */
+export declare function oauthTokenGrantFailureResponse(error: unknown, route: TokenGrantRoute): Response;
+//# sourceMappingURL=token-grant-response.d.ts.map

package/dist/hosted/oauth/token-grant-response.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"token-grant-response.d.ts","sourceRoot":"","sources":["../../../src/hosted/oauth/token-grant-response.ts"],"names":[],"mappings":"AAUA,MAAM,MAAM,eAAe,GAAG,oBAAoB,GAAG,eAAe,CAAC;AAErE;;;GAGG;AACH,wBAAgB,8BAA8B,CAAC,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,eAAe,GAAG,QAAQ,CAgC/F"}

package/dist/hosted/oauth/token-grant-response.js

@@ -0,0 +1,34 @@
+import { recordOAuthTelemetryFailure } from '../../telemetry/index.js';
+import { isCachedContentfulTokenError } from './cached-cma.js';
+import { authorizationCodeGrantFailureReason, isTransientContentfulFailure, oauthLogAuthFailure, patValidationFailureReason, } from './log.js';
+import { isRefreshTokenGrantError } from './refresh.js';
+/**
+ * Map token-endpoint failures: invalid CMA / grant errors → 400 invalid_grant;
+ * Contentful 5xx / unclassified PAT errors → 503 so clients retry.
+ */
+export function oauthTokenGrantFailureResponse(error, route) {
+    const message = error instanceof Error ? error.message : String(error);
+    if (isCachedContentfulTokenError(error)) {
+        oauthLogAuthFailure(route, error.reason);
+        recordOAuthTelemetryFailure(route, error.reason);
+        return Response.json({ error: 'invalid_grant', error_description: message }, { status: 400 });
+    }
+    if (isRefreshTokenGrantError(error)) {
+        oauthLogAuthFailure(route, error.reason);
+        recordOAuthTelemetryFailure(route, error.reason);
+        return Response.json({ error: 'invalid_grant', error_description: message }, { status: 400 });
+    }
+    const patReason = patValidationFailureReason(message);
+    if (isTransientContentfulFailure(patReason)) {
+        oauthLogAuthFailure(route, patReason);
+        recordOAuthTelemetryFailure(route, patReason);
+        return Response.json({ error: 'temporarily_unavailable', error_description: message }, { status: 503 });
+    }
+    const reason = route === 'authorization-code'
+        ? authorizationCodeGrantFailureReason(message)
+        : 'refresh_token_grant_failed';
+    oauthLogAuthFailure(route, reason);
+    recordOAuthTelemetryFailure(route, reason);
+    return Response.json({ error: 'invalid_grant', error_description: message }, { status: 400 });
+}
+//# sourceMappingURL=token-grant-response.js.map

package/dist/hosted/oauth/token-grant-response.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"token-grant-response.js","sourceRoot":"","sources":["../../../src/hosted/oauth/token-grant-response.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,2BAA2B,EAAE,MAAM,0BAA0B,CAAC;AACvE,OAAO,EAAE,4BAA4B,EAAE,MAAM,iBAAiB,CAAC;AAC/D,OAAO,EACL,mCAAmC,EACnC,4BAA4B,EAC5B,mBAAmB,EACnB,0BAA0B,GAC3B,MAAM,UAAU,CAAC;AAClB,OAAO,EAAE,wBAAwB,EAAE,MAAM,cAAc,CAAC;AAIxD;;;GAGG;AACH,MAAM,UAAU,8BAA8B,CAAC,KAAc,EAAE,KAAsB;IACnF,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAEvE,IAAI,4BAA4B,CAAC,KAAK,CAAC,EAAE,CAAC;QACxC,mBAAmB,CAAC,KAAK,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;QACzC,2BAA2B,CAAC,KAAK,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;QACjD,OAAO,QAAQ,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,eAAe,EAAE,iBAAiB,EAAE,OAAO,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;IAChG,CAAC;IAED,IAAI,wBAAwB,CAAC,KAAK,CAAC,EAAE,CAAC;QACpC,mBAAmB,CAAC,KAAK,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;QACzC,2BAA2B,CAAC,KAAK,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;QACjD,OAAO,QAAQ,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,eAAe,EAAE,iBAAiB,EAAE,OAAO,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;IAChG,CAAC;IAED,MAAM,SAAS,GAAG,0BAA0B,CAAC,OAAO,CAAC,CAAC;IACtD,IAAI,4BAA4B,CAAC,SAAS,CAAC,EAAE,CAAC;QAC5C,mBAAmB,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;QACtC,2BAA2B,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;QAC9C,OAAO,QAAQ,CAAC,IAAI,CAClB,EAAE,KAAK,EAAE,yBAAyB,EAAE,iBAAiB,EAAE,OAAO,EAAE,EAChE,EAAE,MAAM,EAAE,GAAG,EAAE,CAChB,CAAC;IACJ,CAAC;IAED,MAAM,MAAM,GACV,KAAK,KAAK,oBAAoB;QAC5B,CAAC,CAAC,mCAAmC,CAAC,OAAO,CAAC;QAC9C,CAAC,CAAC,4BAA4B,CAAC;IACnC,mBAAmB,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;IACnC,2BAA2B,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;IAC3C,OAAO,QAAQ,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,eAAe,EAAE,iBAAiB,EAAE,OAAO,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;AAChG,CAAC"}

package/dist/hosted/parse-customer-resource.d.ts

@@ -0,0 +1,3 @@
+/** Parse customer playbook resource from CLI/MCP args. Handles `index`, `resource=index`, etc. */
+export declare function parseCustomerResourceArgs(args: string[]): string;
+//# sourceMappingURL=parse-customer-resource.d.ts.map

package/dist/hosted/parse-customer-resource.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"parse-customer-resource.d.ts","sourceRoot":"","sources":["../../src/hosted/parse-customer-resource.ts"],"names":[],"mappings":"AAAA,kGAAkG;AAClG,wBAAgB,yBAAyB,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,MAAM,CAehE"}

package/dist/hosted/parse-customer-resource.js

@@ -0,0 +1,16 @@
+/** Parse customer playbook resource from CLI/MCP args. Handles `index`, `resource=index`, etc. */
+export function parseCustomerResourceArgs(args) {
+    for (const arg of args) {
+        const trimmed = arg.trim();
+        const keyValue = /^resource=(.+)$/i.exec(trimmed);
+        if (keyValue?.[1]) {
+            return keyValue[1].trim();
+        }
+    }
+    const positional = args.find((arg) => {
+        const trimmed = arg.trim();
+        return trimmed.length > 0 && !trimmed.startsWith('--') && !/^resource=/i.test(trimmed);
+    });
+    return positional?.trim() || 'index';
+}
+//# sourceMappingURL=parse-customer-resource.js.map

package/dist/hosted/parse-customer-resource.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"parse-customer-resource.js","sourceRoot":"","sources":["../../src/hosted/parse-customer-resource.ts"],"names":[],"mappings":"AAAA,kGAAkG;AAClG,MAAM,UAAU,yBAAyB,CAAC,IAAc;IACtD,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,MAAM,OAAO,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;QAC3B,MAAM,QAAQ,GAAG,kBAAkB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAClD,IAAI,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAClB,OAAO,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAC5B,CAAC;IACH,CAAC;IAED,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE;QACnC,MAAM,OAAO,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;QAC3B,OAAO,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACzF,CAAC,CAAC,CAAC;IAEH,OAAO,UAAU,EAAE,IAAI,EAAE,IAAI,OAAO,CAAC;AACvC,CAAC"}

package/dist/index/blob.d.ts

@@ -0,0 +1,5 @@
+export declare function gzipBuffer(data: Uint8Array): Buffer;
+export declare function gunzipBuffer(data: Uint8Array): Buffer;
+export declare function readFileBytes(filePath: string): Uint8Array;
+export declare function writeFileBytes(filePath: string, data: Uint8Array): void;
+//# sourceMappingURL=blob.d.ts.map

package/dist/index/blob.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"blob.d.ts","sourceRoot":"","sources":["../../src/index/blob.ts"],"names":[],"mappings":"AAGA,wBAAgB,UAAU,CAAC,IAAI,EAAE,UAAU,GAAG,MAAM,CAEnD;AAED,wBAAgB,YAAY,CAAC,IAAI,EAAE,UAAU,GAAG,MAAM,CAErD;AAED,wBAAgB,aAAa,CAAC,QAAQ,EAAE,MAAM,GAAG,UAAU,CAE1D;AAED,wBAAgB,cAAc,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,GAAG,IAAI,CAEvE"}

package/dist/index/blob.js

@@ -0,0 +1,15 @@
+import * as fs from 'node:fs';
+import * as zlib from 'node:zlib';
+export function gzipBuffer(data) {
+    return zlib.gzipSync(data);
+}
+export function gunzipBuffer(data) {
+    return zlib.gunzipSync(data);
+}
+export function readFileBytes(filePath) {
+    return fs.readFileSync(filePath);
+}
+export function writeFileBytes(filePath, data) {
+    fs.writeFileSync(filePath, data);
+}
+//# sourceMappingURL=blob.js.map

package/dist/index/blob.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"blob.js","sourceRoot":"","sources":["../../src/index/blob.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAElC,MAAM,UAAU,UAAU,CAAC,IAAgB;IACzC,OAAO,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;AAC7B,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,IAAgB;IAC3C,OAAO,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;AAC/B,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,QAAgB;IAC5C,OAAO,EAAE,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;AACnC,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,QAAgB,EAAE,IAAgB;IAC/D,EAAE,CAAC,aAAa,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;AACnC,CAAC"}

package/dist/index/cache-keys.d.ts

@@ -0,0 +1,9 @@
+import type { SpaceConfig } from '../config/types.js';
+export interface IndexCacheKey {
+    spaceId: string;
+    environment: string;
+    preview: boolean;
+}
+export declare function indexCacheKeyFromSpace(space: SpaceConfig, preview?: boolean): IndexCacheKey;
+export declare function indexCacheKeySuffix(key: IndexCacheKey): string;
+//# sourceMappingURL=cache-keys.d.ts.map

package/dist/index/cache-keys.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cache-keys.d.ts","sourceRoot":"","sources":["../../src/index/cache-keys.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAGtD,MAAM,WAAW,aAAa;IAC5B,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE,OAAO,CAAC;CAClB;AAED,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,WAAW,EAAE,OAAO,CAAC,EAAE,OAAO,GAAG,aAAa,CAM3F;AAED,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,aAAa,GAAG,MAAM,CAG9D"}

package/dist/index/cache-keys.js

@@ -0,0 +1,13 @@
+import { resolveIndexPreview } from './mode.js';
+export function indexCacheKeyFromSpace(space, preview) {
+    return {
+        spaceId: space.spaceId,
+        environment: space.environment,
+        preview: resolveIndexPreview(preview),
+    };
+}
+export function indexCacheKeySuffix(key) {
+    const mode = key.preview ? 'preview' : 'published';
+    return `${key.spaceId}:${key.environment}:${mode}`;
+}
+//# sourceMappingURL=cache-keys.js.map

package/dist/index/cache-keys.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cache-keys.js","sourceRoot":"","sources":["../../src/index/cache-keys.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,mBAAmB,EAAE,MAAM,WAAW,CAAC;AAQhD,MAAM,UAAU,sBAAsB,CAAC,KAAkB,EAAE,OAAiB;IAC1E,OAAO;QACL,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,OAAO,EAAE,mBAAmB,CAAC,OAAO,CAAC;KACtC,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,GAAkB;IACpD,MAAM,IAAI,GAAG,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC;IACnD,OAAO,GAAG,GAAG,CAAC,OAAO,IAAI,GAAG,CAAC,WAAW,IAAI,IAAI,EAAE,CAAC;AACrD,CAAC"}

package/dist/index/cache-store.d.ts

@@ -0,0 +1,31 @@
+import type { IndexCacheKey } from './cache-keys.js';
+export type IndexInvalidationMode = 'incremental' | 'full';
+export interface IndexInvalidation {
+    invalidatedAt: string;
+    mode: IndexInvalidationMode;
+}
+export interface IndexBlobMeta {
+    syncedAt: string;
+    schemaVersion: number;
+    assetCount: number;
+    referenceCount: number;
+}
+export interface IndexCacheStore {
+    getInvalidation(key: IndexCacheKey): Promise<IndexInvalidation | null>;
+    setInvalidation(key: IndexCacheKey, inv: IndexInvalidation): Promise<void>;
+    clearInvalidation(key: IndexCacheKey): Promise<void>;
+    getBlob(key: IndexCacheKey): Promise<{
+        meta: IndexBlobMeta;
+        data: Uint8Array;
+    } | null>;
+    putBlob(key: IndexCacheKey, meta: IndexBlobMeta, data: Uint8Array): Promise<void>;
+    deleteBlob(key: IndexCacheKey): Promise<void>;
+    tryAcquireSyncLock(key: IndexCacheKey, holderId: string, ttlSeconds: number): Promise<boolean>;
+    releaseSyncLock(key: IndexCacheKey, holderId: string): Promise<void>;
+}
+declare const INDEX_BLOB_TTL_SECONDS: number;
+export { INDEX_BLOB_TTL_SECONDS };
+export declare function getIndexCacheStore(): IndexCacheStore;
+/** @internal Reset singleton between tests. */
+export declare function resetDefaultIndexCacheStoreForTests(): void;
+//# sourceMappingURL=cache-store.d.ts.map

package/dist/index/cache-store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cache-store.d.ts","sourceRoot":"","sources":["../../src/index/cache-store.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAGrD,MAAM,MAAM,qBAAqB,GAAG,aAAa,GAAG,MAAM,CAAC;AAE3D,MAAM,WAAW,iBAAiB;IAChC,aAAa,EAAE,MAAM,CAAC;IACtB,IAAI,EAAE,qBAAqB,CAAC;CAC7B;AAED,MAAM,WAAW,aAAa;IAC5B,QAAQ,EAAE,MAAM,CAAC;IACjB,aAAa,EAAE,MAAM,CAAC;IACtB,UAAU,EAAE,MAAM,CAAC;IACnB,cAAc,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,eAAe;IAC9B,eAAe,CAAC,GAAG,EAAE,aAAa,GAAG,OAAO,CAAC,iBAAiB,GAAG,IAAI,CAAC,CAAC;IACvE,eAAe,CAAC,GAAG,EAAE,aAAa,EAAE,GAAG,EAAE,iBAAiB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC3E,iBAAiB,CAAC,GAAG,EAAE,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACrD,OAAO,CAAC,GAAG,EAAE,aAAa,GAAG,OAAO,CAAC;QAAE,IAAI,EAAE,aAAa,CAAC;QAAC,IAAI,EAAE,UAAU,CAAA;KAAE,GAAG,IAAI,CAAC,CAAC;IACvF,OAAO,CAAC,GAAG,EAAE,aAAa,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAClF,UAAU,CAAC,GAAG,EAAE,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC9C,kBAAkB,CAAC,GAAG,EAAE,aAAa,EAAE,QAAQ,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAC/F,eAAe,CAAC,GAAG,EAAE,aAAa,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACtE;AAED,QAAA,MAAM,sBAAsB,QAAmB,CAAC;AAEhD,OAAO,EAAE,sBAAsB,EAAE,CAAC;AAIlC,wBAAgB,kBAAkB,IAAI,eAAe,CAKpD;AAED,+CAA+C;AAC/C,wBAAgB,mCAAmC,IAAI,IAAI,CAE1D"}

package/dist/index/cache-store.js

@@ -0,0 +1,17 @@
+import { getRuntimeContext } from '../runtime/context.js';
+import { FileIndexCacheStore } from './file-index-cache.js';
+const INDEX_BLOB_TTL_SECONDS = 60 * 60 * 24 * 7;
+export { INDEX_BLOB_TTL_SECONDS };
+let defaultFileStore;
+export function getIndexCacheStore() {
+    const fromContext = getRuntimeContext()?.indexCacheStore;
+    if (fromContext)
+        return fromContext;
+    defaultFileStore ??= new FileIndexCacheStore();
+    return defaultFileStore;
+}
+/** @internal Reset singleton between tests. */
+export function resetDefaultIndexCacheStoreForTests() {
+    defaultFileStore = undefined;
+}
+//# sourceMappingURL=cache-store.js.map

package/dist/index/cache-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cache-store.js","sourceRoot":"","sources":["../../src/index/cache-store.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAE1D,OAAO,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AA2B5D,MAAM,sBAAsB,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;AAEhD,OAAO,EAAE,sBAAsB,EAAE,CAAC;AAElC,IAAI,gBAAiD,CAAC;AAEtD,MAAM,UAAU,kBAAkB;IAChC,MAAM,WAAW,GAAG,iBAAiB,EAAE,EAAE,eAAe,CAAC;IACzD,IAAI,WAAW;QAAE,OAAO,WAAW,CAAC;IACpC,gBAAgB,KAAK,IAAI,mBAAmB,EAAE,CAAC;IAC/C,OAAO,gBAAgB,CAAC;AAC1B,CAAC;AAED,+CAA+C;AAC/C,MAAM,UAAU,mCAAmC;IACjD,gBAAgB,GAAG,SAAS,CAAC;AAC/B,CAAC"}

package/dist/index/db.d.ts

@@ -0,0 +1,12 @@
+import { DatabaseSync } from 'node:sqlite';
+export type ContentIndexDatabase = DatabaseSync;
+/** @deprecated Use {@link ContentIndexDatabase}. */
+export type MediaIndexDatabase = ContentIndexDatabase;
+export declare function openIndexDatabase(dbPath: string, options?: {
+    memory?: boolean;
+}): ContentIndexDatabase;
+/** SQLite user-defined function for filename regex (pattern, value) → 0|1 */
+export declare function registerRegexpFunction(db: DatabaseSync): void;
+export declare function getMeta(db: ContentIndexDatabase, key: string): string | null;
+export declare function setMeta(db: ContentIndexDatabase, key: string, value: string): void;
+//# sourceMappingURL=db.d.ts.map

package/dist/index/db.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"db.d.ts","sourceRoot":"","sources":["../../src/index/db.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAQ3C,MAAM,MAAM,oBAAoB,GAAG,YAAY,CAAC;AAEhD,oDAAoD;AACpD,MAAM,MAAM,kBAAkB,GAAG,oBAAoB,CAAC;AAuBtD,wBAAgB,iBAAiB,CAC/B,MAAM,EAAE,MAAM,EACd,OAAO,CAAC,EAAE;IAAE,MAAM,CAAC,EAAE,OAAO,CAAA;CAAE,GAC7B,oBAAoB,CAOtB;AAED,6EAA6E;AAC7E,wBAAgB,sBAAsB,CAAC,EAAE,EAAE,YAAY,GAAG,IAAI,CAS7D;AAED,wBAAgB,OAAO,CAAC,EAAE,EAAE,oBAAoB,EAAE,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAK5E;AAED,wBAAgB,OAAO,CAAC,EAAE,EAAE,oBAAoB,EAAE,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI,CAIlF"}

package/dist/index/db.js

@@ -0,0 +1,49 @@
+import { DatabaseSync } from 'node:sqlite';
+import { BASE_INDEX_DDL, REFERENCE_V3_INDEX_DDL, REFERENCE_V4_INDEX_DDL, TABLE_DDL, } from './schema.js';
+function migrateReferenceEntriesTable(db) {
+    const columns = db.prepare('PRAGMA table_info(reference_entries)').all();
+    const names = new Set(columns.map((c) => c.name));
+    if (!names.has('cmsLabel')) {
+        db.exec('ALTER TABLE reference_entries ADD COLUMN cmsLabel TEXT');
+    }
+    if (!names.has('tagTypeSlug')) {
+        db.exec('ALTER TABLE reference_entries ADD COLUMN tagTypeSlug TEXT');
+    }
+    if (!names.has('articleTypeSlug')) {
+        db.exec('ALTER TABLE reference_entries ADD COLUMN articleTypeSlug TEXT');
+    }
+    if (!names.has('date')) {
+        db.exec('ALTER TABLE reference_entries ADD COLUMN date TEXT');
+    }
+    db.exec(REFERENCE_V3_INDEX_DDL);
+    db.exec(REFERENCE_V4_INDEX_DDL);
+}
+export function openIndexDatabase(dbPath, options) {
+    const db = new DatabaseSync(options?.memory ? ':memory:' : dbPath);
+    db.exec(TABLE_DDL);
+    db.exec(BASE_INDEX_DDL);
+    migrateReferenceEntriesTable(db);
+    registerRegexpFunction(db);
+    return db;
+}
+/** SQLite user-defined function for filename regex (pattern, value) → 0|1 */
+export function registerRegexpFunction(db) {
+    db.function('regexp', { deterministic: true }, (pattern, value) => {
+        if (pattern == null || value == null)
+            return 0;
+        try {
+            return new RegExp(String(pattern)).test(String(value)) ? 1 : 0;
+        }
+        catch {
+            return 0;
+        }
+    });
+}
+export function getMeta(db, key) {
+    const row = db.prepare('SELECT value FROM meta WHERE key = ?').get(key);
+    return row?.value ?? null;
+}
+export function setMeta(db, key, value) {
+    db.prepare('INSERT INTO meta (key, value) VALUES (?, ?) ON CONFLICT(key) DO UPDATE SET value = excluded.value').run(key, value);
+}
+//# sourceMappingURL=db.js.map

package/dist/index/db.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"db.js","sourceRoot":"","sources":["../../src/index/db.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC3C,OAAO,EACL,cAAc,EACd,sBAAsB,EACtB,sBAAsB,EACtB,SAAS,GACV,MAAM,aAAa,CAAC;AAOrB,SAAS,4BAA4B,CAAC,EAAwB;IAC5D,MAAM,OAAO,GAAG,EAAE,CAAC,OAAO,CAAC,sCAAsC,CAAC,CAAC,GAAG,EAEpE,CAAC;IACH,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;IAClD,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC;QAC3B,EAAE,CAAC,IAAI,CAAC,wDAAwD,CAAC,CAAC;IACpE,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,aAAa,CAAC,EAAE,CAAC;QAC9B,EAAE,CAAC,IAAI,CAAC,2DAA2D,CAAC,CAAC;IACvE,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,iBAAiB,CAAC,EAAE,CAAC;QAClC,EAAE,CAAC,IAAI,CAAC,+DAA+D,CAAC,CAAC;IAC3E,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;QACvB,EAAE,CAAC,IAAI,CAAC,oDAAoD,CAAC,CAAC;IAChE,CAAC;IACD,EAAE,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC;IAChC,EAAE,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC;AAClC,CAAC;AAED,MAAM,UAAU,iBAAiB,CAC/B,MAAc,EACd,OAA8B;IAE9B,MAAM,EAAE,GAAG,IAAI,YAAY,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;IACnE,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IACnB,EAAE,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;IACxB,4BAA4B,CAAC,EAAE,CAAC,CAAC;IACjC,sBAAsB,CAAC,EAAE,CAAC,CAAC;IAC3B,OAAO,EAAE,CAAC;AACZ,CAAC;AAED,6EAA6E;AAC7E,MAAM,UAAU,sBAAsB,CAAC,EAAgB;IACrD,EAAE,CAAC,QAAQ,CAAC,QAAQ,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,EAAE,CAAC,OAAgB,EAAE,KAAc,EAAE,EAAE;QAClF,IAAI,OAAO,IAAI,IAAI,IAAI,KAAK,IAAI,IAAI;YAAE,OAAO,CAAC,CAAC;QAC/C,IAAI,CAAC;YACH,OAAO,IAAI,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACjE,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,CAAC,CAAC;QACX,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,OAAO,CAAC,EAAwB,EAAE,GAAW;IAC3D,MAAM,GAAG,GAAG,EAAE,CAAC,OAAO,CAAC,sCAAsC,CAAC,CAAC,GAAG,CAAC,GAAG,CAEzD,CAAC;IACd,OAAO,GAAG,EAAE,KAAK,IAAI,IAAI,CAAC;AAC5B,CAAC;AAED,MAAM,UAAU,OAAO,CAAC,EAAwB,EAAE,GAAW,EAAE,KAAa;IAC1E,EAAE,CAAC,OAAO,CACR,mGAAmG,CACpG,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;AACpB,CAAC"}

package/dist/index/distributed-sync-lock.d.ts

@@ -0,0 +1,3 @@
+import type { SpaceConfig } from '../config/types.js';
+export declare function withDistributedIndexSyncLock<T>(space: SpaceConfig, preview: boolean | undefined, dbPath: string, fn: () => Promise<T>): Promise<T>;
+//# sourceMappingURL=distributed-sync-lock.d.ts.map

package/dist/index/distributed-sync-lock.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"distributed-sync-lock.d.ts","sourceRoot":"","sources":["../../src/index/distributed-sync-lock.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAQtD,wBAAsB,4BAA4B,CAAC,CAAC,EAClD,KAAK,EAAE,WAAW,EAClB,OAAO,EAAE,OAAO,GAAG,SAAS,EAC5B,MAAM,EAAE,MAAM,EACd,EAAE,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,GACnB,OAAO,CAAC,CAAC,CAAC,CAkBZ"}

package/dist/index/distributed-sync-lock.js

@@ -0,0 +1,22 @@
+import { indexCacheKeyFromSpace } from './cache-keys.js';
+import { getIndexCacheStore } from './cache-store.js';
+import { resolveIndexPreview } from './mode.js';
+import { IndexSyncLockError, withIndexSyncLock } from './sync-lock.js';
+const DISTRIBUTED_SYNC_LOCK_TTL_SECONDS = 300;
+export async function withDistributedIndexSyncLock(space, preview, dbPath, fn) {
+    const usePreview = resolveIndexPreview(preview);
+    const cache = getIndexCacheStore();
+    const key = indexCacheKeyFromSpace(space, usePreview);
+    const holderId = `${String(process.pid)}-${Date.now().toString()}`;
+    const acquired = await cache.tryAcquireSyncLock(key, holderId, DISTRIBUTED_SYNC_LOCK_TTL_SECONDS);
+    if (!acquired) {
+        throw new IndexSyncLockError('Another index sync is in progress for this space (shared lock). Retry shortly.');
+    }
+    try {
+        return await withIndexSyncLock(dbPath, fn);
+    }
+    finally {
+        await cache.releaseSyncLock(key, holderId);
+    }
+}
+//# sourceMappingURL=distributed-sync-lock.js.map

package/dist/index/distributed-sync-lock.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"distributed-sync-lock.js","sourceRoot":"","sources":["../../src/index/distributed-sync-lock.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,sBAAsB,EAAE,MAAM,iBAAiB,CAAC;AACzD,OAAO,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AACtD,OAAO,EAAE,mBAAmB,EAAE,MAAM,WAAW,CAAC;AAChD,OAAO,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AAEvE,MAAM,iCAAiC,GAAG,GAAG,CAAC;AAE9C,MAAM,CAAC,KAAK,UAAU,4BAA4B,CAChD,KAAkB,EAClB,OAA4B,EAC5B,MAAc,EACd,EAAoB;IAEpB,MAAM,UAAU,GAAG,mBAAmB,CAAC,OAAO,CAAC,CAAC;IAChD,MAAM,KAAK,GAAG,kBAAkB,EAAE,CAAC;IACnC,MAAM,GAAG,GAAG,sBAAsB,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC;IACtD,MAAM,QAAQ,GAAG,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC;IAEnE,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,kBAAkB,CAAC,GAAG,EAAE,QAAQ,EAAE,iCAAiC,CAAC,CAAC;IAClG,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,MAAM,IAAI,kBAAkB,CAC1B,gFAAgF,CACjF,CAAC;IACJ,CAAC;IAED,IAAI,CAAC;QACH,OAAO,MAAM,iBAAiB,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IAC7C,CAAC;YAAS,CAAC;QACT,MAAM,KAAK,CAAC,eAAe,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;IAC7C,CAAC;AACH,CAAC"}

package/dist/index/errors.d.ts

@@ -0,0 +1,18 @@
+export declare class ContentIndexSyncError extends Error {
+    constructor(message: string, options?: {
+        cause?: unknown;
+    });
+}
+export declare class ReferenceCatalogAmbiguityError extends Error {
+    readonly matches: Array<{
+        id: string;
+        label: string;
+        slug: string | null;
+    }>;
+    constructor(message: string, matches: Array<{
+        id: string;
+        label: string;
+        slug: string | null;
+    }>);
+}
+//# sourceMappingURL=errors.d.ts.map

package/dist/index/errors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../../src/index/errors.ts"],"names":[],"mappings":"AAAA,qBAAa,qBAAsB,SAAQ,KAAK;gBAClC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,OAAO,CAAA;KAAE;CAO3D;AAED,qBAAa,8BAA+B,SAAQ,KAAK;aAGrC,OAAO,EAAE,KAAK,CAAC;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,CAAC;gBADlF,OAAO,EAAE,MAAM,EACC,OAAO,EAAE,KAAK,CAAC;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,CAAC;CAKrF"}

package/dist/index/errors.js

@@ -0,0 +1,18 @@
+export class ContentIndexSyncError extends Error {
+    constructor(message, options) {
+        super(message);
+        this.name = 'ContentIndexSyncError';
+        if (options?.cause !== undefined) {
+            this.cause = options.cause;
+        }
+    }
+}
+export class ReferenceCatalogAmbiguityError extends Error {
+    matches;
+    constructor(message, matches) {
+        super(message);
+        this.matches = matches;
+        this.name = 'ReferenceCatalogAmbiguityError';
+    }
+}
+//# sourceMappingURL=errors.js.map

package/dist/index/errors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.js","sourceRoot":"","sources":["../../src/index/errors.ts"],"names":[],"mappings":"AAAA,MAAM,OAAO,qBAAsB,SAAQ,KAAK;IAC9C,YAAY,OAAe,EAAE,OAA6B;QACxD,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,uBAAuB,CAAC;QACpC,IAAI,OAAO,EAAE,KAAK,KAAK,SAAS,EAAE,CAAC;YACjC,IAAI,CAAC,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC;QAC7B,CAAC;IACH,CAAC;CACF;AAED,MAAM,OAAO,8BAA+B,SAAQ,KAAK;IAGrC;IAFlB,YACE,OAAe,EACC,OAAkE;QAElF,KAAK,CAAC,OAAO,CAAC,CAAC;QAFC,YAAO,GAAP,OAAO,CAA2D;QAGlF,IAAI,CAAC,IAAI,GAAG,gCAAgC,CAAC;IAC/C,CAAC;CACF"}

package/dist/index/file-index-cache.d.ts

@@ -0,0 +1,16 @@
+import type { IndexCacheKey } from './cache-keys.js';
+import type { IndexBlobMeta, IndexCacheStore, IndexInvalidation } from './cache-store.js';
+export declare class FileIndexCacheStore implements IndexCacheStore {
+    getInvalidation(key: IndexCacheKey): Promise<IndexInvalidation | null>;
+    setInvalidation(key: IndexCacheKey, inv: IndexInvalidation): Promise<void>;
+    clearInvalidation(key: IndexCacheKey): Promise<void>;
+    getBlob(key: IndexCacheKey): Promise<{
+        meta: IndexBlobMeta;
+        data: Uint8Array;
+    } | null>;
+    putBlob(key: IndexCacheKey, meta: IndexBlobMeta, data: Uint8Array): Promise<void>;
+    deleteBlob(key: IndexCacheKey): Promise<void>;
+    tryAcquireSyncLock(key: IndexCacheKey, holderId: string, ttlSeconds: number): Promise<boolean>;
+    releaseSyncLock(key: IndexCacheKey, holderId: string): Promise<void>;
+}
+//# sourceMappingURL=file-index-cache.d.ts.map

package/dist/index/file-index-cache.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"file-index-cache.d.ts","sourceRoot":"","sources":["../../src/index/file-index-cache.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AACrD,OAAO,KAAK,EAAE,aAAa,EAAE,eAAe,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AA0C1F,qBAAa,mBAAoB,YAAW,eAAe;IACnD,eAAe,CAAC,GAAG,EAAE,aAAa,GAAG,OAAO,CAAC,iBAAiB,GAAG,IAAI,CAAC;IAItE,eAAe,CAAC,GAAG,EAAE,aAAa,EAAE,GAAG,EAAE,iBAAiB,GAAG,OAAO,CAAC,IAAI,CAAC;IAI1E,iBAAiB,CAAC,GAAG,EAAE,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC;IAQpD,OAAO,CAAC,GAAG,EAAE,aAAa,GAAG,OAAO,CAAC;QAAE,IAAI,EAAE,aAAa,CAAC;QAAC,IAAI,EAAE,UAAU,CAAA;KAAE,GAAG,IAAI,CAAC;IAWtF,OAAO,CAAC,GAAG,EAAE,aAAa,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC;IAOjF,UAAU,CAAC,GAAG,EAAE,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC;IAU7C,kBAAkB,CACtB,GAAG,EAAE,aAAa,EAClB,QAAQ,EAAE,MAAM,EAChB,UAAU,EAAE,MAAM,GACjB,OAAO,CAAC,OAAO,CAAC;IAWb,eAAe,CAAC,GAAG,EAAE,aAAa,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;CAW3E"}