@speakspec/astro 0.0.2 → 0.0.4

package/dist/runtime/server/utils/cache.d.ts

@@ -26,10 +26,22 @@ export interface CacheStorage {
 export declare function invalidateEntityCache(storage: CacheStorage, slug: string): Promise<void>;
 export declare function invalidateContentCache(storage: CacheStorage, slug: string, contentId: string): Promise<void>;
 /**
- * Build a JSON Response with cache headers, short-circuiting to 304
- * when the inbound `If-None-Match` matches the response ETag (per
- * AIDP §8.7 + RFC 7232 §2.3.2 weak comparison via `etagMatches`).
+ * Build a JSON Response with cache headers per AIDP §8.3 + §11.6,
+ * short-circuiting to 304 when the inbound `If-None-Match` matches the
+ * response ETag (per AIDP §8.7 + RFC 7232 §2.3.2 weak comparison via
+ * `etagMatches`).
  *
- * 304 responses still carry ETag + Cache-Control per RFC 7232 §4.1.
+ * 304 responses still carry ETag + Cache-Control per RFC 7232 §4.1, and
+ * we keep CORS on them so browser-side agents can revalidate cross-origin.
  */
 export declare function respondWithCache<T>(etag: string, payload: T, cacheControl: string, inboundIfNoneMatch: string | undefined | null): Response;
+/**
+ * Project `directives.access_control` to an AIPREF-compatible
+ * `Content-Usage` header value per AIDP §11.6.
+ *
+ * Returns null when the payload is not an AIDP envelope (e.g. the
+ * directory listing has no `directives` field) or when `access_control`
+ * has no actionable flags — callers MUST NOT emit the header in that
+ * case rather than emitting an empty value.
+ */
+export declare function buildContentUsage(payload: unknown): string | null;

package/dist/runtime/server/utils/cache.js

@@ -55,26 +55,62 @@ export async function invalidateContentCache(storage, slug, contentId) {
     }
 }
 /**
- * Build a JSON Response with cache headers, short-circuiting to 304
- * when the inbound `If-None-Match` matches the response ETag (per
- * AIDP §8.7 + RFC 7232 §2.3.2 weak comparison via `etagMatches`).
+ * Build a JSON Response with cache headers per AIDP §8.3 + §11.6,
+ * short-circuiting to 304 when the inbound `If-None-Match` matches the
+ * response ETag (per AIDP §8.7 + RFC 7232 §2.3.2 weak comparison via
+ * `etagMatches`).
  *
- * 304 responses still carry ETag + Cache-Control per RFC 7232 §4.1.
+ * 304 responses still carry ETag + Cache-Control per RFC 7232 §4.1, and
+ * we keep CORS on them so browser-side agents can revalidate cross-origin.
  */
 export function respondWithCache(etag, payload, cacheControl, inboundIfNoneMatch) {
     const headers = {
         'cache-control': cacheControl,
+        'access-control-allow-origin': '*',
     };
     if (etag)
         headers.etag = etag;
     if (etagMatches(inboundIfNoneMatch, etag)) {
         return new Response(null, { status: 304, headers });
     }
+    const usage = buildContentUsage(payload);
+    if (usage)
+        headers['content-usage'] = usage;
     return new Response(JSON.stringify(payload), {
         status: 200,
         headers: {
             ...headers,
-            'content-type': 'application/json; charset=utf-8',
+            'content-type': 'application/aidp+json',
         },
     });
 }
+/**
+ * Project `directives.access_control` to an AIPREF-compatible
+ * `Content-Usage` header value per AIDP §11.6.
+ *
+ * Returns null when the payload is not an AIDP envelope (e.g. the
+ * directory listing has no `directives` field) or when `access_control`
+ * has no actionable flags — callers MUST NOT emit the header in that
+ * case rather than emitting an empty value.
+ */
+export function buildContentUsage(payload) {
+    if (!payload || typeof payload !== 'object')
+        return null;
+    const directives = payload.directives;
+    if (!directives || typeof directives !== 'object')
+        return null;
+    const ac = directives.access_control;
+    if (!ac || typeof ac !== 'object')
+        return null;
+    const flags = ac;
+    const parts = [];
+    if (flags.allow_training === true)
+        parts.push('train-ai=y');
+    else if (flags.allow_training === false)
+        parts.push('train-ai=n');
+    if (flags.allow_derivative === true)
+        parts.push('search=y');
+    else if (flags.allow_derivative === false)
+        parts.push('search=n');
+    return parts.length > 0 ? parts.join(', ') : null;
+}

package/dist/runtime/version.d.ts

@@ -1,2 +1,2 @@
-export declare const SDK_VERSION: "0.0.2";
+export declare const SDK_VERSION: "0.0.4";
 export declare const SDK_USER_AGENT: string;

package/dist/runtime/version.js

@@ -1,2 +1,2 @@
-export const SDK_VERSION = "0.0.2";
+export const SDK_VERSION = "0.0.4";
 export const SDK_USER_AGENT = `@speakspec/astro/${SDK_VERSION}`;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@speakspec/astro",
-  "version": "0.0.2",
+  "version": "0.0.4",
   "description": "AIDP 0.3 publishing channel for Astro 5 — exposes /.well-known/aidp.json and friends, fetches signed content + pointer payloads from SpeakSpec, receives §8.10 cache-invalidation webhooks.",
   "repository": {
     "type": "git",