@se-studio/contentful-cms 3.15.6 → 3.16.0

package/dist/hosted/tenant-registry.d.ts

@@ -0,0 +1,68 @@
+import { z } from 'zod';
+/** Opt-in Option C multi-tenant Host routing (shared cms-edit host). */
+export declare function isMultiTenantHostedMode(): boolean;
+/**
+ * Non-secret tenant map for Option C shared cms-edit hosts.
+ * Secrets stay in Vercel env under `${secretEnvPrefix}_*`.
+ */
+export declare const TenantRegistryEntrySchema: z.ZodObject<{
+    hostname: z.ZodString;
+    projectKey: z.ZodString;
+    spaceId: z.ZodString;
+    environment: z.ZodDefault<z.ZodString>;
+    defaultLocale: z.ZodOptional<z.ZodString>;
+    mediaTenant: z.ZodOptional<z.ZodString>;
+    publicOrigin: z.ZodString;
+    packRepo: z.ZodString;
+    packTag: z.ZodString;
+    packAssetName: z.ZodOptional<z.ZodString>;
+    secretEnvPrefix: z.ZodString;
+    displayName: z.ZodOptional<z.ZodString>;
+    coreChannel: z.ZodOptional<z.ZodString>;
+    devBaseUrl: z.ZodOptional<z.ZodString>;
+    productionSiteUrl: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
+export type TenantRegistryEntry = z.infer<typeof TenantRegistryEntrySchema>;
+export declare const TenantRegistrySchema: z.ZodObject<{
+    version: z.ZodDefault<z.ZodLiteral<1>>;
+    tenants: z.ZodArray<z.ZodObject<{
+        hostname: z.ZodString;
+        projectKey: z.ZodString;
+        spaceId: z.ZodString;
+        environment: z.ZodDefault<z.ZodString>;
+        defaultLocale: z.ZodOptional<z.ZodString>;
+        mediaTenant: z.ZodOptional<z.ZodString>;
+        publicOrigin: z.ZodString;
+        packRepo: z.ZodString;
+        packTag: z.ZodString;
+        packAssetName: z.ZodOptional<z.ZodString>;
+        secretEnvPrefix: z.ZodString;
+        displayName: z.ZodOptional<z.ZodString>;
+        coreChannel: z.ZodOptional<z.ZodString>;
+        devBaseUrl: z.ZodOptional<z.ZodString>;
+        productionSiteUrl: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>>;
+}, z.core.$strip>;
+export type TenantRegistry = z.infer<typeof TenantRegistrySchema>;
+export declare class TenantRegistryError extends Error {
+    constructor(message: string);
+}
+export declare function parseTenantRegistry(raw: unknown): TenantRegistry;
+export declare function normalizeHostname(hostname: string): string;
+/** Strip port from Host header values. */
+export declare function hostnameFromHostHeader(hostHeader: string | null): string | null;
+/**
+ * Staging override: `x-cms-edit-host` header, then `?host=`, then `Host`.
+ * Never trust override unless multi-tenant mode is on (caller enforces).
+ */
+export declare function resolveRequestHostname(request: Request): string | null;
+export declare function findTenantByHostname(registry: TenantRegistry, hostname: string): TenantRegistryEntry | undefined;
+/** Clear process-level registry cache (tests). */
+export declare function clearTenantRegistryCache(): void;
+/**
+ * Load registry from `CMS_EDIT_TENANT_REGISTRY_JSON` or `CMS_EDIT_TENANT_REGISTRY_PATH`.
+ * Returns null when neither is set (single-tenant hosts).
+ */
+export declare function loadTenantRegistryFromEnv(): TenantRegistry | null;
+export declare function readTenantSecret(prefix: string, suffix: string): string | undefined;
+//# sourceMappingURL=tenant-registry.d.ts.map

package/dist/hosted/tenant-registry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tenant-registry.d.ts","sourceRoot":"","sources":["../../src/hosted/tenant-registry.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,wEAAwE;AACxE,wBAAgB,uBAAuB,IAAI,OAAO,CAGjD;AAED;;;GAGG;AACH,eAAO,MAAM,yBAAyB;;;;;;;;;;;;;;;;iBAmCpC,CAAC;AAEH,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,yBAAyB,CAAC,CAAC;AAE5E,eAAO,MAAM,oBAAoB;;;;;;;;;;;;;;;;;;;iBAG/B,CAAC;AAEH,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAElE,qBAAa,mBAAoB,SAAQ,KAAK;IAC5C,YAAY,OAAO,EAAE,MAAM,EAG1B;CACF;AAED,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,OAAO,GAAG,cAAc,CAuBhE;AAED,wBAAgB,iBAAiB,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAE1D;AAED,0CAA0C;AAC1C,wBAAgB,sBAAsB,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI,GAAG,MAAM,GAAG,IAAI,CAU/E;AAED;;;GAGG;AACH,wBAAgB,sBAAsB,CAAC,OAAO,EAAE,OAAO,GAAG,MAAM,GAAG,IAAI,CAetE;AAED,wBAAgB,oBAAoB,CAClC,QAAQ,EAAE,cAAc,EACxB,QAAQ,EAAE,MAAM,GACf,mBAAmB,GAAG,SAAS,CAGjC;AAID,kDAAkD;AAClD,wBAAgB,wBAAwB,IAAI,IAAI,CAE/C;AAED;;;GAGG;AACH,wBAAgB,yBAAyB,IAAI,cAAc,GAAG,IAAI,CA+BjE;AAED,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAInF"}

package/dist/hosted/tenant-registry.js

@@ -0,0 +1,167 @@
+import { readFileSync } from 'node:fs';
+import { z } from 'zod';
+/** Opt-in Option C multi-tenant Host routing (shared cms-edit host). */
+export function isMultiTenantHostedMode() {
+    const flag = process.env['CMS_EDIT_MULTI_TENANT']?.trim().toLowerCase();
+    return flag === '1' || flag === 'true' || flag === 'yes';
+}
+/**
+ * Non-secret tenant map for Option C shared cms-edit hosts.
+ * Secrets stay in Vercel env under `${secretEnvPrefix}_*`.
+ */
+export const TenantRegistryEntrySchema = z.object({
+    /** Request Host (lowercase), e.g. `eagle.content.se.studio`. */
+    hostname: z.string().min(1),
+    projectKey: z
+        .string()
+        .min(1)
+        .regex(/^[a-z0-9-]+$/, 'projectKey must be lowercase alphanumeric with hyphens'),
+    spaceId: z.string().min(1),
+    environment: z.string().min(1).default('master'),
+    defaultLocale: z.string().min(1).optional(),
+    mediaTenant: z.string().min(1).optional(),
+    /** Canonical public origin for OAuth / MCP resource URLs (no trailing slash). */
+    publicOrigin: z.string().url(),
+    /** GitHub `owner/repo` that publishes editor-pack Release artefacts. */
+    packRepo: z
+        .string()
+        .min(1)
+        .regex(/^[^/]+\/[^/]+$/, 'packRepo must be owner/repo'),
+    /** Release tag, e.g. `cms-edit-pack-eagle-v1.0.0`. */
+    packTag: z.string().min(1),
+    /** Asset filename on the Release (default: `editor-pack.tar.gz`). */
+    packAssetName: z.string().min(1).optional(),
+    /**
+     * Env prefix for tenant secrets, e.g. `CMS_EDIT_TENANT_EAGLE`.
+     * Reads `${prefix}_CONTENTFUL_PREVIEW_ACCESS_TOKEN`, etc.
+     */
+    secretEnvPrefix: z
+        .string()
+        .min(1)
+        .regex(/^[A-Z][A-Z0-9_]*$/, 'secretEnvPrefix must be UPPER_SNAKE'),
+    displayName: z.string().min(1).optional(),
+    /** Optional canary pin for shared-host channels. */
+    coreChannel: z.string().min(1).optional(),
+    devBaseUrl: z.string().url().optional(),
+    productionSiteUrl: z.string().url().optional(),
+});
+export const TenantRegistrySchema = z.object({
+    version: z.literal(1).default(1),
+    tenants: z.array(TenantRegistryEntrySchema).min(1),
+});
+export class TenantRegistryError extends Error {
+    constructor(message) {
+        super(message);
+        this.name = 'TenantRegistryError';
+    }
+}
+export function parseTenantRegistry(raw) {
+    const parsed = TenantRegistrySchema.safeParse(raw);
+    if (!parsed.success) {
+        throw new TenantRegistryError(`Invalid tenant registry: ${parsed.error.issues.map((i) => i.message).join('; ')}`);
+    }
+    const hostnames = new Set();
+    for (const tenant of parsed.data.tenants) {
+        const host = normalizeHostname(tenant.hostname);
+        if (hostnames.has(host)) {
+            throw new TenantRegistryError(`Duplicate tenant hostname: ${host}`);
+        }
+        hostnames.add(host);
+    }
+    return {
+        ...parsed.data,
+        tenants: parsed.data.tenants.map((t) => ({
+            ...t,
+            hostname: normalizeHostname(t.hostname),
+            publicOrigin: t.publicOrigin.replace(/\/$/, ''),
+        })),
+    };
+}
+export function normalizeHostname(hostname) {
+    return hostname.trim().toLowerCase().replace(/\.$/, '');
+}
+/** Strip port from Host header values. */
+export function hostnameFromHostHeader(hostHeader) {
+    if (!hostHeader?.trim())
+        return null;
+    const raw = hostHeader.trim().toLowerCase();
+    // IPv6 [::1]:port — rare for cms-edit; treat whole string if brackets present.
+    if (raw.startsWith('[')) {
+        const end = raw.indexOf(']');
+        return end === -1 ? normalizeHostname(raw) : normalizeHostname(raw.slice(0, end + 1));
+    }
+    const withoutPort = raw.includes(':') ? (raw.split(':')[0] ?? raw) : raw;
+    return normalizeHostname(withoutPort);
+}
+/**
+ * Staging override: `x-cms-edit-host` header, then `?host=`, then `Host`.
+ * Never trust override unless multi-tenant mode is on (caller enforces).
+ */
+export function resolveRequestHostname(request) {
+    const override = request.headers.get('x-cms-edit-host')?.trim();
+    if (override) {
+        return hostnameFromHostHeader(override);
+    }
+    try {
+        const url = new URL(request.url);
+        const queryHost = url.searchParams.get('host')?.trim();
+        if (queryHost) {
+            return hostnameFromHostHeader(queryHost);
+        }
+    }
+    catch {
+        // ignore malformed URL
+    }
+    return hostnameFromHostHeader(request.headers.get('host'));
+}
+export function findTenantByHostname(registry, hostname) {
+    const normalized = normalizeHostname(hostname);
+    return registry.tenants.find((t) => t.hostname === normalized);
+}
+let cachedRegistry;
+/** Clear process-level registry cache (tests). */
+export function clearTenantRegistryCache() {
+    cachedRegistry = undefined;
+}
+/**
+ * Load registry from `CMS_EDIT_TENANT_REGISTRY_JSON` or `CMS_EDIT_TENANT_REGISTRY_PATH`.
+ * Returns null when neither is set (single-tenant hosts).
+ */
+export function loadTenantRegistryFromEnv() {
+    if (cachedRegistry !== undefined) {
+        return cachedRegistry;
+    }
+    const json = process.env['CMS_EDIT_TENANT_REGISTRY_JSON']?.trim();
+    if (json) {
+        try {
+            cachedRegistry = parseTenantRegistry(JSON.parse(json));
+            return cachedRegistry;
+        }
+        catch (err) {
+            const message = err instanceof Error ? err.message : String(err);
+            throw new TenantRegistryError(`CMS_EDIT_TENANT_REGISTRY_JSON: ${message}`);
+        }
+    }
+    const filePath = process.env['CMS_EDIT_TENANT_REGISTRY_PATH']?.trim();
+    if (filePath) {
+        try {
+            const raw = readFileSync(filePath, 'utf8');
+            cachedRegistry = parseTenantRegistry(JSON.parse(raw));
+            return cachedRegistry;
+        }
+        catch (err) {
+            if (err instanceof TenantRegistryError)
+                throw err;
+            const message = err instanceof Error ? err.message : String(err);
+            throw new TenantRegistryError(`CMS_EDIT_TENANT_REGISTRY_PATH: ${message}`);
+        }
+    }
+    cachedRegistry = null;
+    return null;
+}
+export function readTenantSecret(prefix, suffix) {
+    const key = `${prefix}_${suffix}`;
+    const value = process.env[key]?.trim();
+    return value || undefined;
+}
+//# sourceMappingURL=tenant-registry.js.map

package/dist/hosted/tenant-registry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tenant-registry.js","sourceRoot":"","sources":["../../src/hosted/tenant-registry.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,wEAAwE;AACxE,MAAM,UAAU,uBAAuB;IACrC,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,uBAAuB,CAAC,EAAE,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACxE,OAAO,IAAI,KAAK,GAAG,IAAI,IAAI,KAAK,MAAM,IAAI,IAAI,KAAK,KAAK,CAAC;AAC3D,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,CAAC,MAAM,CAAC;IAChD,gEAAgE;IAChE,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC3B,UAAU,EAAE,CAAC;SACV,MAAM,EAAE;SACR,GAAG,CAAC,CAAC,CAAC;SACN,KAAK,CAAC,cAAc,EAAE,wDAAwD,CAAC;IAClF,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC1B,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC;IAChD,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IAC3C,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACzC,iFAAiF;IACjF,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE;IAC9B,wEAAwE;IACxE,QAAQ,EAAE,CAAC;SACR,MAAM,EAAE;SACR,GAAG,CAAC,CAAC,CAAC;SACN,KAAK,CAAC,gBAAgB,EAAE,6BAA6B,CAAC;IACzD,sDAAsD;IACtD,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC1B,qEAAqE;IACrE,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IAC3C;;;OAGG;IACH,eAAe,EAAE,CAAC;SACf,MAAM,EAAE;SACR,GAAG,CAAC,CAAC,CAAC;SACN,KAAK,CAAC,mBAAmB,EAAE,qCAAqC,CAAC;IACpE,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACzC,oDAAoD;IACpD,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACzC,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IACvC,iBAAiB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;CAC/C,CAAC,CAAC;AAIH,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC3C,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;IAChC,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,yBAAyB,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;CACnD,CAAC,CAAC;AAIH,MAAM,OAAO,mBAAoB,SAAQ,KAAK;IAC5C,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,qBAAqB,CAAC;IACpC,CAAC;CACF;AAED,MAAM,UAAU,mBAAmB,CAAC,GAAY;IAC9C,MAAM,MAAM,GAAG,oBAAoB,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;IACnD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,MAAM,IAAI,mBAAmB,CAC3B,4BAA4B,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CACnF,CAAC;IACJ,CAAC;IACD,MAAM,SAAS,GAAG,IAAI,GAAG,EAAU,CAAC;IACpC,KAAK,MAAM,MAAM,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;QACzC,MAAM,IAAI,GAAG,iBAAiB,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QAChD,IAAI,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YACxB,MAAM,IAAI,mBAAmB,CAAC,8BAA8B,IAAI,EAAE,CAAC,CAAC;QACtE,CAAC;QACD,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IACtB,CAAC;IACD,OAAO;QACL,GAAG,MAAM,CAAC,IAAI;QACd,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YACvC,GAAG,CAAC;YACJ,QAAQ,EAAE,iBAAiB,CAAC,CAAC,CAAC,QAAQ,CAAC;YACvC,YAAY,EAAE,CAAC,CAAC,YAAY,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC;SAChD,CAAC,CAAC;KACJ,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,QAAgB;IAChD,OAAO,QAAQ,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;AAC1D,CAAC;AAED,0CAA0C;AAC1C,MAAM,UAAU,sBAAsB,CAAC,UAAyB;IAC9D,IAAI,CAAC,UAAU,EAAE,IAAI,EAAE;QAAE,OAAO,IAAI,CAAC;IACrC,MAAM,GAAG,GAAG,UAAU,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC5C,+EAA+E;IAC/E,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QACxB,MAAM,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAC7B,OAAO,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,iBAAiB,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,iBAAiB,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC;IACxF,CAAC;IACD,MAAM,WAAW,GAAG,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;IACzE,OAAO,iBAAiB,CAAC,WAAW,CAAC,CAAC;AACxC,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,sBAAsB,CAAC,OAAgB;IACrD,MAAM,QAAQ,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC,EAAE,IAAI,EAAE,CAAC;IAChE,IAAI,QAAQ,EAAE,CAAC;QACb,OAAO,sBAAsB,CAAC,QAAQ,CAAC,CAAC;IAC1C,CAAC;IACD,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACjC,MAAM,SAAS,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC;QACvD,IAAI,SAAS,EAAE,CAAC;YACd,OAAO,sBAAsB,CAAC,SAAS,CAAC,CAAC;QAC3C,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,uBAAuB;IACzB,CAAC;IACD,OAAO,sBAAsB,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC;AAC7D,CAAC;AAED,MAAM,UAAU,oBAAoB,CAClC,QAAwB,EACxB,QAAgB;IAEhB,MAAM,UAAU,GAAG,iBAAiB,CAAC,QAAQ,CAAC,CAAC;IAC/C,OAAO,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,UAAU,CAAC,CAAC;AACjE,CAAC;AAED,IAAI,cAAiD,CAAC;AAEtD,kDAAkD;AAClD,MAAM,UAAU,wBAAwB;IACtC,cAAc,GAAG,SAAS,CAAC;AAC7B,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,yBAAyB;IACvC,IAAI,cAAc,KAAK,SAAS,EAAE,CAAC;QACjC,OAAO,cAAc,CAAC;IACxB,CAAC;IAED,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,+BAA+B,CAAC,EAAE,IAAI,EAAE,CAAC;IAClE,IAAI,IAAI,EAAE,CAAC;QACT,IAAI,CAAC;YACH,cAAc,GAAG,mBAAmB,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAY,CAAC,CAAC;YAClE,OAAO,cAAc,CAAC;QACxB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACjE,MAAM,IAAI,mBAAmB,CAAC,kCAAkC,OAAO,EAAE,CAAC,CAAC;QAC7E,CAAC;IACH,CAAC;IAED,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,+BAA+B,CAAC,EAAE,IAAI,EAAE,CAAC;IACtE,IAAI,QAAQ,EAAE,CAAC;QACb,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;YAC3C,cAAc,GAAG,mBAAmB,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAY,CAAC,CAAC;YACjE,OAAO,cAAc,CAAC;QACxB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,GAAG,YAAY,mBAAmB;gBAAE,MAAM,GAAG,CAAC;YAClD,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACjE,MAAM,IAAI,mBAAmB,CAAC,kCAAkC,OAAO,EAAE,CAAC,CAAC;QAC7E,CAAC;IACH,CAAC;IAED,cAAc,GAAG,IAAI,CAAC;IACtB,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,MAAc,EAAE,MAAc;IAC7D,MAAM,GAAG,GAAG,GAAG,MAAM,IAAI,MAAM,EAAE,CAAC;IAClC,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,CAAC;IACvC,OAAO,KAAK,IAAI,SAAS,CAAC;AAC5B,CAAC"}

package/docs/editor-tasks/publish-handoff.md

@@ -42,3 +42,13 @@ The signed-in Contentful user must have the matching role permission. AI Editor
 1. Do not apply a plan unless the user has said yes for that plan id.
 2. Do not claim the site is updated until apply succeeds.
 3. There is no scheduled publish.
+
+## Before a production promote
+
+Publishing in Contentful is not the same as a git promote. Before merging integration → production when new or changed entries are involved:
+
+1. List every page, **template**, **person** / person-type, and other linked entries the live pages render through.
+2. Confirm each is published in the production environment with **no pending drafts** (CDA vs CPA, or `check-publish-state`).
+3. Record the result on the promote PR.
+
+Shared templates and person entries are easy to leave draft-only while the page looks fine in preview — that is what broke Brightline provider headshots (7 Oct 2026). Full rules: se-core-product `docs/RELEASE_VERIFICATION.md`.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@se-studio/contentful-cms",
-  "version": "3.15.6",
+  "version": "3.16.0",
   "description": "CLI tool for AI agents to edit Contentful drafts and, when the user's role allows it, publish after an explicit yes",
   "repository": {
     "type": "git",

package/skills/core/SKILL.md

@@ -867,6 +867,17 @@ cms-edit index dump --reference-only          # Full catalog snapshot in termina
 
 If someone else also changed an entry, ask all versus mine and `publish choose`. The Contentful role must allow it. Unpublish, archive, and revalidate use the same plan-then-yes rule. Do not apply a plan on your own.
 
+### Before a production promote
+
+When pages that use **templates**, **person** entries, or other linked content are about to go live, verify publish state **before** merging the promote (release verification rule 1):
+
+1. List the page(s), linked **template**(s), **person** / person-type entries, and any other content stack pieces the live render walks.
+2. Confirm each is published in the production environment with no pending drafts — compare CDA (Delivery) vs CPA (Preview), or use `@se-studio/site-check/publish-state` / `check-publish-state`.
+3. Record results on the promote PR. A Nick override never skips this check.
+4. Do not assume publishing the page alone published a shared template or person — those often need their own publish (and template webhooks refresh pages that use them).
+
+See `packages/skills/references/agent-session/release-verification.md` and `docs/editor-tasks/publish-handoff.md` (in contentful-cms).
+
 ## Concurrent Sessions
 
 Use `--session <name>` or `CONTENTFUL_CMS_SESSION=<name>` to isolate parallel workflows.