@strifeapp/astro 1.0.29 → 1.2.0

package/dist/localized-content-index.js

@@ -62,14 +62,22 @@
  *   - Shape expansion itself does not localize values, except StrifeUri's first
  *     path segment at dereference time.
  *
+ * Collection mapping
+ *   - This index must map BOTH 'Contents' AND 'Drafts' collections.
+ *   - Draft entries are emitted with draft: true so consumers can filter.
+ *   - When building URLs for draft entries, the origin chain falls back to
+ *     parent draft documents when the published parent lacks the locale slug.
+ *
  * Determinism & engine constraints
  *   - ES5‑only (no for..of, no arrow functions).
  *   - Deterministic shapes under the same inputs.
- *   - No performance guards (depth/breadth are unbounded); cycles are still safe.
+ *   - Relation depth is capped at MAX_RELATION_DEPTH hops; cycles are still safe.
  * -----------------------------------------------------------------------------
  */
 
 
+var MAX_RELATION_DEPTH = 1;
+
 var RESERVED_ROOT_FIELDS = {
   url: true,
   collection: true,
@@ -80,8 +88,11 @@ var RESERVED_ROOT_FIELDS = {
   locale: true,
   origin: true,
   id: true,
+  docId: true,
   displayName: true,
-  dependencies: true
+  dependencies: true,
+  deleted: true,
+  draft: true
 };
 
 function storeAs(name, value) {
@@ -92,21 +103,20 @@ function indexAs(name, value) {
   return { $value: value, $name: name, $options: { storage: false } };
 }
 
-function loadDocCached(id, collection, docCache) {
+function loadDocCached(id, docCache) {
   if (!id) return null;
-  var key = collection + '::' + id;
+  var key = id;
   if (docCache.has(key)) return docCache.get(key);
-  var d = load(id, collection);
+  var d = load(id, '@all_docs');
   if (d) docCache.set(key, d);
   return d;
 }
 
-function loadTemplateByCollectionCached(collection, tplCache) {
-  if (!collection) return null;
-  var key = 'templates/' + collection;
-  if (tplCache.has(key)) return tplCache.get(key);
-  var t = load(key, 'templates');
-  if (t) tplCache.set(key, t);
+function loadTemplateByCollectionCached(templateId, tplCache) {
+  if (!templateId) return null;
+  if (tplCache.has(templateId)) return tplCache.get(templateId);
+  var t = load(templateId, 'templates');
+  if (t) tplCache.set(templateId, t);
   return t;
 }
 
@@ -131,18 +141,144 @@ function loadLabelCached(id, labelCache) {
   return d;
 }
 
-function buildUrlCached(doc, docCache) {
+function resolveSlug(slug, locale) {
+  if (typeof slug === 'string') return slug;           // legacy string format
+  if (slug && locale && slug[locale]) return slug[locale]; // locale-keyed object
+  return null;
+}
+
+// Checks if obj is a locale-keyed object where ALL keys are configured locales.
+// Uses configured locales (not BCP 47 syntax) to avoid false positives on
+// objects like { "id": "abc", "no": false } where keys happen to be 2-letter strings.
+function isLocaleObject(obj, configuredLocales) {
+  if (!obj || typeof obj !== 'object' || Array.isArray(obj)) return false;
+  var keys = Object.keys(obj);
+  if (keys.length === 0) return false;
+  for (var i = 0; i < keys.length; i++) {
+    if (configuredLocales.indexOf(keys[i]) === -1) return false;
+  }
+  return true;
+}
+
+function buildUrlCached(doc, locale, docCache, isDraft) {
   var visited = {};
   var slugs = [];
   var c = doc;
   do {
-    if (c.slug) slugs.unshift(c.slug);
+    var nodeSlug = resolveSlug(c.slug, locale);
+    // Draft URL building: if a published ancestor lacks the locale slug, try its draft
+    if (!nodeSlug && isDraft) {
+      var nodeCollection = c['@metadata'] ? c['@metadata']['@collection'] : null;
+      if (nodeCollection !== 'Drafts') {
+        var nodeId = c['@metadata'] ? c['@metadata']['@id'] : null;
+        if (nodeId) {
+          var draftNode = loadDocCached(nodeId + '/draft', docCache);
+          if (draftNode) nodeSlug = resolveSlug(draftNode.slug, locale);
+        }
+      }
+    }
+    if (nodeSlug) slugs.unshift(nodeSlug);
     if (!c.origin || visited[c.origin.id]) break;
     visited[c.origin.id] = true;
-    c = loadDocCached(c.origin.id, c.origin.collection, docCache);
+    c = loadDocCached(c.origin.id, docCache);
   } while (c);
 
-  return slugs.shift() + slugs.join('/');
+  // ENG-62: do NOT return slugs.shift() + slugs.join('/').
+  // For an empty array that expression evaluates to the literal string "undefined"
+  // (because [].shift() is undefined and undefined + '' coerces to "undefined").
+  // For a two-element array it drops the separator (['a','b'] -> "ab" instead of "a/b").
+  // Both behaviors are confirmed in api-test/Integration/Eng62LinkResolutionDiagnosticTests.
+  //
+  // We also can't just slugs.join('/'): the root home's slug is "/" by convention,
+  // so ['/', 'page'] would produce "//page". Instead, normalize each slug (strip its
+  // own leading/trailing slashes so "/" becomes "" and drops out) and prepend a
+  // single leading "/" so URLs always start with "/".
+  if (slugs.length === 0) return null;
+  var parts = [];
+  for (var si = 0; si < slugs.length; si++) {
+    var s = slugs[si];
+    if (typeof s !== 'string') continue;
+    // Strip leading and trailing slashes from this segment. Reduces "/" to ""
+    // (skipped) and leaves "foo" untouched.
+    var stripped = s;
+    while (stripped.length > 0 && stripped.charAt(0) === '/') stripped = stripped.substring(1);
+    while (stripped.length > 0 && stripped.charAt(stripped.length - 1) === '/') stripped = stripped.substring(0, stripped.length - 1);
+    if (stripped.length > 0) parts.push(stripped);
+  }
+  return '/' + parts.join('/');
+}
+
+function isLinkValue(val) {
+  return val && typeof val === 'object' && !Array.isArray(val) &&
+         typeof val.href === 'string' && typeof val.target === 'string' &&
+         isGuid(val.id);
+}
+
+function resolveLinkHref(val, locale, docCache) {
+  var doc = loadDocCached(val.id, docCache);
+  if (!doc) return val.href;
+  // ENG-62: do NOT use `'slug' in doc` here. RavenDB's Jint wraps loaded docs in a
+  // BlittableObjectInstance whose [[HasProperty]] returns true for ANY property name,
+  // making `'slug' in doc` always-true dead code. Use the @metadata collection check
+  // (proven reliable) and a value-presence check instead.
+  // See api-test/Integration/Eng62LinkResolutionDiagnosticTests for proof.
+  var collection = doc['@metadata'] && doc['@metadata']['@collection'];
+  if (collection === 'Files' || collection === 'Folders') return val.href;
+  if (doc.slug == null) return val.href;
+  var url = buildUrlCached(doc, locale, docCache);
+  if (!url || url === 'undefined') return val.href;
+  return url;
+}
+
+function resolveLink(val, locale, docCache) {
+  return {
+    id: val.id,
+    text: val.text,
+    href: resolveLinkHref(val, locale, docCache),
+    target: val.target
+  };
+}
+
+function resolveHtmlLinks(html, locale, docCache) {
+  if (html.indexOf('data-id="') === -1) return html;
+
+  var guidPat = '[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{12}';
+
+  // data-id before href
+  var p1 = new RegExp(
+    '<a\\s([^>]*?)data-id="(' + guidPat + ')"([^>]*?)href="([^"]*)"([^>]*?)>',
+    'g'
+  );
+  // ENG-62: same Jint quirk as resolveLinkHref — `'slug' in doc` is dead code on
+  // a wrapped loaded doc. Use collection check + value check instead.
+  var result = html.replace(p1, function(match, before, id, mid, href, after) {
+    var doc = loadDocCached(id, docCache);
+    if (!doc) return match;
+    var coll = doc['@metadata'] && doc['@metadata']['@collection'];
+    if (coll === 'Files' || coll === 'Folders') return match;
+    if (doc.slug == null) return match;
+    var url = buildUrlCached(doc, locale, docCache);
+    if (!url || url === 'undefined') return match;
+    return '<a ' + before + 'data-id="' + id + '"' + mid + 'href="' + url + '"' + after + '>';
+  });
+
+  // href before data-id
+  var p2 = new RegExp(
+    '<a\\s([^>]*?)href="([^"]*)"([^>]*?)data-id="(' + guidPat + ')"([^>]*?)>',
+    'g'
+  );
+  result = result.replace(p2, function(match, before, href, mid, id, after) {
+    var doc = loadDocCached(id, docCache);
+    if (!doc) return match;
+    var coll = doc['@metadata'] && doc['@metadata']['@collection'];
+    if (coll === 'Files' || coll === 'Folders') return match;
+    if (doc.slug == null) return match;
+    var url = buildUrlCached(doc, locale, docCache);
+    if (!url || url === 'undefined') return match;
+    return '<a ' + before + 'href="' + url + '"' + mid + 'data-id="' + id + '"' + after + '>';
+  });
+
+  return result;
 }
 
 function getTranslator(locale, defaultLocale, fallbackToPrimary) {
@@ -156,10 +292,23 @@ function getTranslator(locale, defaultLocale, fallbackToPrimary) {
       // }
       //return obj[defaultLocale];
     }
+    // Return non-objects as-is only for the default locale (handles false→true
+    // mismatch where editor.localizable is true but stored value is still a
+    // plain scalar). Non-default locales get null — the value was never translated.
+    if ((typeof obj === 'string' || typeof obj === 'number') && locale === defaultLocale) return obj;
     return null;
   };
 }
 
+function isLocalized(obj, configuredLocales) {
+  if (!obj || typeof obj !== 'object' || Array.isArray(obj)) return false;
+  if (!obj.hasOwnProperty) return false;
+  for (var i = 0; i < configuredLocales.length; i++) {
+    if (obj.hasOwnProperty(configuredLocales[i])) return true;
+  }
+  return false;
+}
+
 function isGuid(s) {
   return typeof s === 'string' &&
          /^[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{12}$/.test(s);
@@ -199,14 +348,19 @@ function isStrifeUri(value) {
 }
 
 function tryGetReferencedValue(strifeUri, populationContext, docCache) {
-  var document = loadDocCached(strifeUri.docId, '@all_docs', docCache);
+  var document = loadDocCached(strifeUri.docId, docCache);
   if (!document) return null;
 
   var val = document;
   if (strifeUri.segments.length > 0) {
-    // first segment may be localized
+    // first segment may be localized; use isLocalized to distinguish locale-keyed objects
     var first = strifeUri.segments[0];
-    val = populationContext.translate(val[first]);
+    var rawFirst = val[first];
+    if (populationContext.isLocalized(rawFirst)) {
+      val = populationContext.translate(rawFirst);
+    } else {
+      val = rawFirst;
+    }
     for (var i = 1; i < strifeUri.segments.length; i++) {
       if (val == null) break;
       var segment = strifeUri.segments[i];
@@ -279,7 +433,7 @@ function isChaptersArray(v) {
 }
 
 function populateByShape(document, out, populationContext, visit,
-                         docCache, tplCache, labelCache) {
+                         docCache, tplCache, labelCache, hopsLeft) {
   if (!document || typeof document !== 'object') return;
 
   for (var prop in document) {
@@ -300,7 +454,7 @@ function populateByShape(document, out, populationContext, visit,
         if (chapter && chapter['@strife'] && chapter['@strife'].template) {
           var child = {};
           populateByShape(chapter, child, populationContext, visit,
-                          docCache, tplCache, labelCache);
+                          docCache, tplCache, labelCache, hopsLeft);
           arr.push(child);
         }
       }
@@ -312,17 +466,37 @@ function populateByShape(document, out, populationContext, visit,
     if (isContentTemplateNode(val)) {
       var nested = {};
       populateByShape(val, nested, populationContext, visit,
-                      docCache, tplCache, labelCache);
+                      docCache, tplCache, labelCache, hopsLeft);
       out[prop] = nested;
       continue;
     }
 
     // Relations (GUID-strict)
     if (isRelationArray(val)) {
-      var related = projectRelationsIfAny(val, populationContext, visit, docCache, tplCache, labelCache);
+      var related = projectRelationsIfAny(val, populationContext, visit, docCache, tplCache, labelCache, hopsLeft);
       if (related) { out[prop] = related; continue; }
     }
 
+    // Link resolution
+    if (isLinkValue(val)) {
+      out[prop] = resolveLink(val, populationContext.locale, docCache);
+      continue;
+    }
+    if (Array.isArray(val) && val.length > 0 && isLinkValue(val[0])) {
+      var linkArr = [];
+      for (var lki = 0; lki < val.length; lki++) {
+        linkArr.push(isLinkValue(val[lki]) ? resolveLink(val[lki], populationContext.locale, docCache) : val[lki]);
+      }
+      out[prop] = linkArr;
+      continue;
+    }
+
+    // HTML link resolution (rich text fields)
+    if (typeof val === 'string' && val.indexOf('data-id="') !== -1) {
+      out[prop] = resolveHtmlLinks(val, populationContext.locale, docCache);
+      continue;
+    }
+
     // Default: copy-through (no localization inside nested)
     out[prop] = val;
   }
@@ -330,19 +504,20 @@ function populateByShape(document, out, populationContext, visit,
   if (document['@strife'] && !out['@strife']) out['@strife'] = document['@strife'];
 }
 
-function projectRelationsIfAny(value, populationContext, visit, docCache, tplCache, labelCache) {
+function projectRelationsIfAny(value, populationContext, visit, docCache, tplCache, labelCache, hopsLeft) {
   if (!isRelationArray(value)) return null;
+  if (hopsLeft <= 0) return [];
   var refs = [];
   for (var i = 0; i < value.length; i++) {
     var v = value[i];
     var idStr = (typeof v === 'string') ? v : (v && v.id);
     if (isGuid(idStr)) refs.push(idStr);
   }
-  return loadRelatedDocumentsRecurse(refs, populationContext, visit, docCache, tplCache, labelCache);
+  return loadRelatedDocumentsRecurse(refs, populationContext, visit, docCache, tplCache, labelCache, hopsLeft);
 }
 
 function populateValuesByEditor(document, template, result, populationContext, visit,
-                                docCache, tplCache, labelCache, isRootLevel) {
+                                docCache, tplCache, labelCache, isRootLevel, hopsLeft) {
   if (!template || !template.editors) return;
   var tEditors = template.editors || [];
   var i, editor;
@@ -357,13 +532,21 @@ function populateValuesByEditor(document, template, result, populationContext, v
 
     // Read value with optional localization
     var rawVal = document[propertyName];
+
+    // true→false mismatch: editor is no longer localizable but value is still a locale-object
+    if (!editor.localizable && isLocaleObject(rawVal, populationContext.locales)) {
+      var defVal = rawVal[populationContext.defaultLocale];
+      rawVal = (defVal != null) ? defVal : rawVal[Object.keys(rawVal)[0]];
+      if (rawVal == null) rawVal = null;
+    }
+
     var docValue = (editor.localizable) ? populationContext.translate(rawVal) : rawVal;
 
     // StrifeUri resolution
     docValue = resolveStrifeUriIfAny(docValue, populationContext, docCache);
 
     // Relations (GUID-strict) — detect by value shape
-    var relatedDocs = projectRelationsIfAny(docValue, populationContext, visit, docCache, tplCache, labelCache);
+    var relatedDocs = projectRelationsIfAny(docValue, populationContext, visit, docCache, tplCache, labelCache, hopsLeft);
     if (relatedDocs) { result[propertyName] = relatedDocs; return; }
 
     // Chapters (nested without template loads)
@@ -379,7 +562,7 @@ function populateValuesByEditor(document, template, result, populationContext, v
         if (chapter && chapter['@strife'] && chapter['@strife'].template) {
           var child = {};
           populateByShape(chapter, child, populationContext, visit,
-                          docCache, tplCache, labelCache);
+                          docCache, tplCache, labelCache, hopsLeft);
           docResults.push(child);
         }
       }
@@ -396,12 +579,32 @@ function populateValuesByEditor(document, template, result, populationContext, v
       if (docValue && typeof docValue === 'object') {
         var nested = {};
         populateByShape(docValue, nested, populationContext, visit,
-                        docCache, tplCache, labelCache);
+                        docCache, tplCache, labelCache, hopsLeft);
         result[propertyName] = nested;
       }
       return;
     }
 
+    // Link resolution
+    if (isLinkValue(docValue)) {
+      result[propertyName] = resolveLink(docValue, populationContext.locale, docCache);
+      return;
+    }
+    if (Array.isArray(docValue) && docValue.length > 0 && isLinkValue(docValue[0])) {
+      var linkResults = [];
+      for (var lki = 0; lki < docValue.length; lki++) {
+        linkResults.push(isLinkValue(docValue[lki]) ? resolveLink(docValue[lki], populationContext.locale, docCache) : docValue[lki]);
+      }
+      result[propertyName] = linkResults;
+      return;
+    }
+
+    // HTML link resolution (rich text fields)
+    if (typeof docValue === 'string' && docValue.indexOf('data-id="') !== -1) {
+      result[propertyName] = resolveHtmlLinks(docValue, populationContext.locale, docCache);
+      return;
+    }
+
     // Other fields: plain values (localized at root when editor.localizable)
     if (docValue !== undefined) {
       result[propertyName] = docValue;
@@ -416,17 +619,18 @@ function populateValuesByEditor(document, template, result, populationContext, v
 }
 
 function projectDocumentWithTemplate(doc, populationContext, visit,
-                                     docCache, tplCache, labelCache) {
+                                     docCache, tplCache, labelCache, locale, hopsLeft) {
   var collection = doc && doc['@metadata'] ? doc['@metadata']['@collection'] : null;
-  var tpl = loadTemplateByCollectionCached(collection, tplCache);
+  var templateId = 'templates/' + (collection === 'Drafts' ? doc['@metadata']['@base-collection'] : collection);
+  var tpl = loadTemplateByCollectionCached(templateId, tplCache);
   var labelsArr = Array.isArray(doc.labels) ? doc.labels : null;
 
   var result = {
-    id: Id(doc),
-    url: buildUrlCached(doc, docCache),
+    id: doc['@metadata']['@id'],
+    url: buildUrlCached(doc, locale, docCache),
     collection: collection,
     displayName: doc.displayName,
-    slug: doc.slug,
+    slug: resolveSlug(doc.slug, locale),
     publishedDate: doc.publishedDate,
     labels: loadRelatedLabels(labelsArr, labelCache)
   };
@@ -434,14 +638,14 @@ function projectDocumentWithTemplate(doc, populationContext, visit,
   // Fill fields per template (use root locale via populationContext.translate)
   if (tpl && tpl.editors) {
     populateValuesByEditor(doc, tpl, result, populationContext, visit,
-                           docCache, tplCache, labelCache, false);
+                           docCache, tplCache, labelCache, false, hopsLeft);
   }
 
   return result;
 }
 
 function loadRelatedDocumentsRecurse(refGuids, populationContext, visit,
-                                     docCache, tplCache, labelCache) {
+                                     docCache, tplCache, labelCache, hopsLeft) {
   if (!refGuids) return null;
 
   var results = [];
@@ -455,11 +659,11 @@ function loadRelatedDocumentsRecurse(refGuids, populationContext, visit,
     if (cached) { results.push(cached); continue; }
 
     markVisiting(visit, id);
-    var doc = loadDocCached(id, '@all_docs', docCache);
+    var doc = loadDocCached(id, docCache);
 
     if (doc) {
       var projected = projectDocumentWithTemplate(doc, populationContext, visit,
-                                                 docCache, tplCache, labelCache);
+                                                 docCache, tplCache, labelCache, populationContext.locale, hopsLeft - 1);
       setCachedNode(visit, id, projected);
       results.push(projected);
     }
@@ -472,12 +676,15 @@ function loadRelatedDocumentsRecurse(refGuids, populationContext, visit,
 
 function mapDocument(document) {
   var collection = document['@metadata']['@collection'];
-  var template = load('templates/' + collection, 'templates');
+  var templateId = 'templates/' + (collection === 'Drafts' ? document['@metadata']['@base-collection'] : collection);
+  var template = load(templateId, 'templates');
   if (!template || !template.editors || document.deleted || document.archived) return null;
 
   var l10n = loadLocalizationSettings();
   var locales = (l10n && Array.isArray(l10n.locales)) ? l10n.locales : [l10n && l10n.defaultLocale ? l10n.defaultLocale : 'en'];
 
+  var _isDraft = collection === 'Drafts';
+
   // Shared per-document caches (shared across locales)
   var _docCache   = new Map();
   var _tplCache   = new Map();
@@ -522,22 +729,25 @@ function mapDocument(document) {
     }
 
     var translate = getTranslator(currentLocale, l10n.defaultLocale, l10n.fallbackToPrimary);
+    var checkLocalized = function (obj) { return isLocalized(obj, locales); };
 
     // Root result (stored fields)
     var result = {
-      id: Id(document),
+      id: storeAs('id',Id(document)),
+      docId: storeAs('docId', document['@metadata']['@id']),
       locale: storeAs('locale', currentLocale),
-      displayName: document.displayName,
-      url: template.disableURL ? null : storeAs('url', buildUrlCached(document, _docCache)),
+      displayName: storeAs('displayName',document.displayName),
+      url: template.disableURL ? null : storeAs('url', buildUrlCached(document, currentLocale, _docCache, _isDraft)),
       origin: storeAs('origin', document.origin ? document.origin.id : null ),
-      collection: storeAs('collection', collection),
-      publishedDate: storeAs('publishedAt', document.publishedDate),
+      collection: storeAs('collection', collection === 'Drafts' ? document['@metadata']['@base-collection'] : collection),
+      draft: storeAs('draft', (document['@metadata']['@collection'] === 'Drafts')),
+      publishedAt: storeAs('publishedAt', document.publishedDate),
       createdAt: storeAs('createdAt', document.createdAt),
       changedAt: storeAs('changedAt', document.changedAt),
       dependencies: storeAs('dependencies', depsArr),
       //labels: storeAs('labels', loadRelatedLabels(rootLabelIds, _labelCache)),
-      labels: storeAs('labels', loadRelatedLabels(rootLabelIds, _labelCache).map(label => label.name)),
-      deleted: document.deleted
+      labels: storeAs('labels', loadRelatedLabels(rootLabelIds, _labelCache).map(function(label) { return label.name; })),
+      deleted: indexAs('deleted', document.deleted)
     };
 
     // Visit cache per-locale (keeps shapes deterministic per entry)
@@ -545,8 +755,9 @@ function mapDocument(document) {
 
     // Build dynamic fields into a temp container using ROOT TEMPLATE (respect localizable)
     var rootContainer = {};
-    populateValuesByEditor(document, template, rootContainer, { translate: translate },
-                           visit, _docCache, _tplCache, _labelCache, true);
+    populateValuesByEditor(document, template, rootContainer,
+                           { translate: translate, isLocalized: checkLocalized, locale: currentLocale, defaultLocale: l10n.defaultLocale, locales: locales },
+                           visit, _docCache, _tplCache, _labelCache, true, MAX_RELATION_DEPTH);
 
     // Copy fields from temp container into result
     // - arrays/objects -> storeAs

package/dist/secrets-codec.d.ts

@@ -0,0 +1,54 @@
+/**
+ * Codec for the single `STRIFE_SECRET` env var.
+ *
+ * Wire format (dot-separated, JWT-style): `v1.<meta>.<cert>`
+ *   - `meta` = base64url(JSON.stringify({ urls, database, password?, type?, teamId?, previewSecret? }))
+ *   - `cert` = base64url(<raw PFX bytes>)   — encoded ONCE (no double-base64)
+ *
+ * This module is the single source of truth for the format. The generation
+ * script (encode) and the generated `strife:store` module (decode) both bind to
+ * it. It is intentionally dependency-free (Node `Buffer` only) so the decode
+ * logic runs on every Node-based runtime, including edge runtimes without
+ * `node:zlib`. No compression, no encryption — base64url is encoding, not secrecy.
+ *
+ * Error messages carry only STRUCTURAL diagnostics — never the blob value, the
+ * decoded meta, the certificate bytes, or the password (R7 no-leak): a decode
+ * error can surface in an SSR log or error overlay.
+ */
+export interface PackedSecrets {
+    urls: string[];
+    database: string;
+    /** Raw PFX bytes (NOT base64). RavenDB receives this Buffer directly. */
+    certificate: Buffer;
+    password?: string;
+    type?: string;
+    /**
+     * Team/workspace id. Matched against the `workspace` claim of a preview
+     * (edit-mode) token. Not secret on its own — an identifier, like an account
+     * number.
+     */
+    teamId?: string;
+    /**
+     * HMAC secret used to verify preview (edit-mode) tokens. Distinct in purpose
+     * from the DB certificate/password, but rides in the same blob so consumers
+     * configure a single var. Consumed by edit-mode.ts.
+     */
+    previewSecret?: string;
+}
+/** Thrown on a malformed blob. Messages are structural-only (no secret content). */
+export declare class SecretsDecodeError extends Error {
+    constructor(message: string);
+}
+export declare function encodeSecrets(secrets: PackedSecrets): string;
+/**
+ * Decode a `STRIFE_SECRET` blob.
+ *
+ * @returns the packed secrets, or `null` when the blob carries a *known-shape*
+ *   but unrecognised version (e.g. a future `v2`). `null` signals the caller to
+ *   treat `STRIFE_SECRET` as unset and degrade to the four-var fallback chain,
+ *   rather than aborting module init.
+ * @throws {SecretsDecodeError} when the blob is malformed (wrong section count,
+ *   no version prefix, bad base64url, invalid/incomplete JSON).
+ */
+export declare function decodeSecrets(value: string): PackedSecrets | null;
+//# sourceMappingURL=secrets-codec.d.ts.map

package/dist/secrets-codec.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"secrets-codec.d.ts","sourceRoot":"","sources":["../src/secrets-codec.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAMH,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,MAAM,EAAE,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,yEAAyE;IACzE,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd;;;;OAIG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB;;;;OAIG;IACH,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,oFAAoF;AACpF,qBAAa,kBAAmB,SAAQ,KAAK;gBAC/B,OAAO,EAAE,MAAM;CAI5B;AAED,wBAAgB,aAAa,CAAC,OAAO,EAAE,aAAa,GAAG,MAAM,CAc5D;AAED;;;;;;;;;GASG;AACH,wBAAgB,aAAa,CAAC,KAAK,EAAE,MAAM,GAAG,aAAa,GAAG,IAAI,CA0DjE"}