@topy-ai/maggie 0.7.32 → 0.7.34

package/bundled-templates/astro-blog/starter/src/pages/api/ops/pull/sync.ts

@@ -0,0 +1,172 @@
+import type { APIRoute } from "astro";
+import { createHash } from "node:crypto";
+import { aiCmoRequest } from "../../../../lib/ai-cmo";
+import { audit, db, id, now } from "../../../../lib/db";
+import { json } from "../../../../lib/ops-auth";
+
+const slugify = (value: string) =>
+  value
+    .toLowerCase()
+    .normalize("NFKD")
+    .replace(/[^\w\s-]/g, "")
+    .trim()
+    .replace(/[\s_-]+/g, "-")
+    .replace(/^-+|-+$/g, "")
+    .slice(0, 180) || "untitled";
+
+export const POST: APIRoute = async () => {
+  const setting = db()
+    .prepare("SELECT value_json FROM blog_settings WHERE key='defaultAuthorId'")
+    .get() as { value_json: string } | undefined;
+  const authorId = setting ? JSON.parse(setting.value_json) : undefined;
+  if (
+    !authorId ||
+    !db().prepare("SELECT 1 FROM authors WHERE id=?").get(authorId)
+  )
+    return json(
+      { error: "Configure a valid defaultAuthorId before API Pull sync" },
+      422,
+    );
+  const upstream = await aiCmoRequest("/posts", "GET");
+  const text = await upstream.text();
+  let payload: any;
+  try {
+    payload = JSON.parse(text);
+  } catch {
+    db()
+      .prepare(
+        "INSERT INTO content_sync_state (source,last_error,updated_at) VALUES (?,?,?) ON CONFLICT(source) DO UPDATE SET last_error=excluded.last_error, updated_at=excluded.updated_at",
+      )
+      .run("api-pull", "AI CMO returned invalid JSON", now());
+    return json({ error: "AI CMO returned invalid JSON" }, 502);
+  }
+  const items = Array.isArray(payload)
+    ? payload
+    : payload.posts || payload.items;
+  if (!Array.isArray(items)) {
+    db()
+      .prepare(
+        "INSERT INTO content_sync_state (source,last_error,updated_at) VALUES (?,?,?) ON CONFLICT(source) DO UPDATE SET last_error=excluded.last_error, updated_at=excluded.updated_at",
+      )
+      .run("api-pull", "AI CMO response did not contain posts or items", now());
+    return json(
+      { error: "AI CMO response did not contain posts or items" },
+      502,
+    );
+  }
+  const timestamp = now();
+  let imported = 0;
+  let skipped = 0;
+  const transaction = db().transaction(() => {
+    for (const item of items) {
+      const sourceId = String(
+        item.id || item.content_id || item.source_id || "",
+      );
+      const title = String(item.title || "");
+      const requestedSlug = String(item.slug || slugify(title));
+      const content = String(item.content_html || item.contentHtml || item.content_markdown || item.contentMarkdown || "");
+      const sourceModified = item.modified_at || item.updated_at || item.updatedAt || item.generated_at || null;
+      const contentChecksum = String(item.content_hash || createHash("sha256").update(content).digest("hex"));
+      if (!sourceId || !requestedSlug || !title) {
+        skipped++;
+        continue;
+      }
+      const existing = db()
+        .prepare("SELECT * FROM posts WHERE source='api-pull' AND source_id=?")
+        .get(sourceId) as
+        ({ id: string } & Record<string, unknown>) | undefined;
+      const postId = existing?.id || id("post");
+      const slug = existing?.status === "published" ? String(existing.slug) : requestedSlug;
+      const canonical = existing?.status === "published" ? String(existing.canonical_url) : String(item.canonical_url || item.canonicalUrl || `${import.meta.env.PUBLIC_SITE_URL || "https://example.com"}/blog/${slug}`);
+      if (existing) {
+        const version =
+          Number(
+            (
+              db()
+                .prepare(
+                  "SELECT MAX(version) version FROM post_revisions WHERE post_id=?",
+                )
+                .get(postId) as any
+            )?.version || 0,
+          ) + 1;
+        db()
+          .prepare(
+            "INSERT INTO post_revisions (id,post_id,version,snapshot_json,actor_id,reason,created_at) VALUES (?,?,?,?,?,?,?)",
+          )
+          .run(
+            id("revision"),
+            postId,
+            version,
+            JSON.stringify(existing),
+            "api-pull",
+            "API Pull sync",
+            timestamp,
+          );
+        db()
+          .prepare(
+            "UPDATE posts SET slug=?,title=?,excerpt=?,content_html=?,canonical_url=?,author_id=?,language=?,updated_at=?,checksum=?,source_modified_at=? WHERE id=?",
+          )
+          .run(
+            slug,
+            title,
+            String(item.excerpt || item.description || ""),
+            content,
+            canonical,
+            authorId,
+            String(item.language || "en"),
+            timestamp,
+            contentChecksum,
+            sourceModified ? String(sourceModified) : null,
+            postId,
+          );
+      } else
+        db()
+          .prepare(
+            "INSERT INTO posts (id,source,source_id,slug,title,excerpt,content_html,canonical_url,author_id,language,status,updated_at,created_at,checksum,source_modified_at) VALUES (?,?,?,?,?,?,?,?,?,?,?,?,?,?,?)",
+          )
+          .run(
+            postId,
+            "api-pull",
+            sourceId,
+            slug,
+            title,
+            String(item.excerpt || item.description || ""),
+            content,
+            canonical,
+            authorId,
+            String(item.language || "en"),
+            "draft",
+            timestamp,
+            timestamp,
+            contentChecksum,
+            sourceModified ? String(sourceModified) : null,
+          );
+      audit(
+        existing ? "api_pull.post.updated" : "api_pull.post.created",
+        "post",
+        postId,
+        null,
+        { sourceId, slug },
+      );
+      imported++;
+    }
+  });
+  try {
+    transaction();
+    db()
+      .prepare(
+        "INSERT INTO content_sync_state (source,last_success_at,last_error,updated_at) VALUES (?,?,?,?) ON CONFLICT(source) DO UPDATE SET last_success_at=excluded.last_success_at, last_error=NULL, updated_at=excluded.updated_at",
+      )
+      .run("api-pull", timestamp, null, timestamp);
+  } catch (error) {
+    const message =
+      error instanceof Error ? error.message : "API Pull import failed";
+    db()
+      .prepare(
+        "INSERT INTO content_sync_state (source,last_error,updated_at) VALUES (?,?,?) ON CONFLICT(source) DO UPDATE SET last_error=excluded.last_error, updated_at=excluded.updated_at",
+      )
+      .run("api-pull", message, now());
+    return json({ error: message, imported, skipped }, 409);
+  }
+  return json({ imported, skipped, total: items.length, status: "completed" });
+};

package/bundled-templates/astro-blog/starter/src/pages/api/ops/pull/updates.ts

@@ -0,0 +1,3 @@
+import type { APIRoute } from "astro";
+import { aiCmoRequest } from "../../../../lib/ai-cmo";
+export const POST: APIRoute = () => aiCmoRequest("/updates", "GET");

package/bundled-templates/astro-blog/starter/src/pages/api/ops/redirects/check.ts

@@ -0,0 +1,5 @@
+import type { APIRoute } from "astro";
+import { db, id, now } from "../../../../lib/db";
+import { json } from "../../../../lib/ops-auth";
+
+export const POST: APIRoute = async ({ request }) => { const body = await request.json().catch(() => null) as any; const rows = Array.isArray(body?.urls) ? body.urls.map((url: string) => ({ target: String(url), source: String(url) })) : (db().prepare("SELECT source_path,target_path FROM redirects").all() as Array<{ source_path: string; target_path: string }>).map((row) => ({ target: row.target_path, source: row.source_path })); if (!rows.length) return json({ checked: 0, broken: [] }); const broken: Array<{ url: string; error: string }> = []; for (const row of rows.slice(0, 200)) { try { const response = await fetch(new URL(row.target, import.meta.env.PUBLIC_SITE_URL || "https://example.com"), { method: "HEAD", redirect: "manual", signal: AbortSignal.timeout(10000) }); if (response.status >= 400) broken.push({ url: row.target, error: `HTTP ${response.status}` }); db().prepare("INSERT INTO indexability_checks (id,url,status,robots,canonical,checked_at,details_json) VALUES (?,?,?,?,?,?,?)").run(id("indexability"), row.target, response.ok ? "ok" : "broken", null, null, now(), JSON.stringify({ status: response.status, redirect_source: row.source })); } catch (error) { broken.push({ url: row.target, error: error instanceof Error ? error.message : "request failed" }); } } return json({ checked: Math.min(rows.length, 200), broken }); };

package/bundled-templates/astro-blog/starter/src/pages/api/ops/redirects.ts

@@ -0,0 +1,32 @@
+import type { APIRoute } from "astro";
+import { db, id, now } from "../../../lib/db";
+import { json } from "../../../lib/ops-auth";
+
+const csvCell = (value: unknown) => `"${String(value ?? "").replaceAll('"', '""')}"`;
+const parseCsv = (input: string) => {
+  const lines = input.split(/\r?\n/).filter((line) => line.trim());
+  if (!lines.length) return [] as Array<Record<string, string>>;
+  const cells = (line: string) => [...line.matchAll(/("(?:[^"]|"")*"|[^,]*)/g)].map((match) => match[1]).filter((value) => value !== undefined).map((value) => value.startsWith('"') ? value.slice(1, -1).replaceAll('""', '"') : value);
+  const headers = cells(lines[0]).map((value) => value.trim());
+  return lines.slice(1).map((line) => Object.fromEntries(headers.map((header, index) => [header, cells(line)[index] || ""])));
+};
+
+export const GET: APIRoute = ({ url }) => {
+  const rows = db().prepare("SELECT source_path,target_path,status_code,reason,created_at FROM redirects ORDER BY source_path").all() as any[];
+  if (url.searchParams.get("format") !== "csv") return json({ items: rows });
+  const csv = [["source_path", "target_path", "status_code", "reason", "created_at"], ...rows.map((row) => [row.source_path, row.target_path, row.status_code, row.reason, row.created_at])].map((row) => row.map(csvCell).join(",")).join("\n");
+  return new Response(csv + "\n", { headers: { "content-type": "text/csv; charset=utf-8", "content-disposition": "attachment; filename=redirects.csv" } });
+};
+
+export const POST: APIRoute = async ({ request }) => {
+  const contentType = request.headers.get("content-type") || "";
+  const raw = await request.text();
+  let rows: any[] = [];
+  if (contentType.includes("text/csv") || contentType.includes("application/csv")) rows = parseCsv(raw);
+  else { try { const body = JSON.parse(raw); rows = Array.isArray(body?.items) ? body.items : []; } catch { return json({ error: "body must be JSON {items} or CSV" }, 400); } }
+  if (!rows.length) return json({ error: "items is required" }, 400);
+  const timestamp = now(); let imported = 0; let skipped = 0;
+  const tx = db().transaction(() => { for (const row of rows) { const sourcePath = String(row.sourcePath || row.source_path || ""); const targetPath = String(row.targetPath || row.target_path || ""); if (!sourcePath.startsWith("/") || !targetPath.startsWith("/")) { skipped++; continue; } db().prepare("INSERT INTO redirects (id,source_path,target_path,status_code,reason,created_at) VALUES (?,?,?,?,?,?) ON CONFLICT(source_path) DO UPDATE SET target_path=excluded.target_path,status_code=excluded.status_code,reason=excluded.reason").run(id("redirect"), sourcePath, targetPath, Number(row.statusCode || row.status_code) === 308 ? 308 : 301, row.reason || "import", timestamp); imported++; } });
+  tx();
+  return json({ imported, skipped }, 201);
+};

package/bundled-templates/astro-blog/starter/src/pages/api/ops/reports/deliver-due.ts

@@ -0,0 +1,12 @@
+import type { APIRoute } from "astro";
+import { db } from "../../../../lib/db";
+import { json } from "../../../../lib/ops-auth";
+import { deliverReport, isDeliveryDue } from "../../../../lib/report-delivery";
+
+export const POST: APIRoute = async () => {
+  const deliveries = db().prepare("SELECT * FROM report_deliveries WHERE status='active' ORDER BY created_at").all() as any[];
+  const due = deliveries.filter((delivery) => isDeliveryDue(delivery));
+  const results = [];
+  for (const delivery of due) results.push(await deliverReport(delivery));
+  return json({ checked: deliveries.length, due: due.length, results });
+};

package/bundled-templates/astro-blog/starter/src/pages/api/ops/reports/deliver.ts

@@ -0,0 +1,6 @@
+import type { APIRoute } from "astro";
+import { db } from "../../../../lib/db";
+import { json } from "../../../../lib/ops-auth";
+import { deliverReport } from "../../../../lib/report-delivery";
+
+export const POST: APIRoute = async ({ request }) => { const body = await request.json().catch(() => null) as any; const delivery = db().prepare("SELECT * FROM report_deliveries WHERE id=? AND status='active'").get(body?.deliveryId) as any; if (!delivery) return json({ error: "active delivery not found" }, 404); const result = await deliverReport(delivery); return json(result, result.status === "failed" ? 502 : 200); };

package/bundled-templates/astro-blog/starter/src/pages/api/ops/reports/export.ts

@@ -0,0 +1,17 @@
+import type { APIRoute } from "astro";
+import { db } from "../../../../lib/db";
+import { json } from "../../../../lib/ops-auth";
+import { createReportPdf } from "../../../../lib/report-pdf";
+
+const escape = (value: unknown) => String(value ?? "").replace(/[&<>"']/g, (char) => ({ "&": "&amp;", "<": "&lt;", ">": "&gt;", '"': "&quot;", "'": "&#39;" }[char] || char));
+export const GET: APIRoute = ({ url }) => {
+  const reportId = url.searchParams.get("reportId"); const format = url.searchParams.get("format") || "json";
+  const report = reportId ? db().prepare("SELECT * FROM blog_reports WHERE id=?").get(reportId) as any : db().prepare("SELECT * FROM blog_reports ORDER BY COALESCE(completed_at,started_at) DESC LIMIT 1").get() as any;
+  if (!report) return json({ error: "report not found" }, 404);
+  const summary = JSON.parse(report.summary_json || "{}"); const findings = JSON.parse(report.findings_json || "[]"); const workspace = url.searchParams.get("workspaceId") ? db().prepare("SELECT name,logo_url,brand_colors_json FROM workspaces WHERE id=?").get(url.searchParams.get("workspaceId")) as any : null;
+  if (format === "json") return json({ report: { ...report, summary, findings } });
+  if (format === "csv") { const rows: string[][] = [["severity", "code", "url", "message"], ...findings.map((item: any) => [String(item.severity || ""), String(item.code || ""), String(item.url || ""), String(item.message || "")])]; const csv = rows.map((row) => row.map((value: string) => `"${value.replaceAll('"', '""')}"`).join(",")).join("\n"); return new Response(csv + "\n", { headers: { "content-type": "text/csv; charset=utf-8", "content-disposition": `attachment; filename="${report.run_type}.csv"` } }); }
+  if (format === "pdf") return new Response(createReportPdf(`${workspace?.name || "Maggie"} ${report.run_type} report`, summary, findings), { headers: { "content-type": "application/pdf", "content-disposition": `attachment; filename="${report.run_type}.pdf"` } });
+  if (format === "html") { const body = `${workspace?.logo_url ? `<img alt="${escape(workspace.name)}" src="${escape(workspace.logo_url)}" style="max-height:48px">` : ""}<h1>${escape(workspace?.name || "")} ${escape(report.run_type)} report</h1><p>${escape(JSON.stringify(summary))}</p><table><thead><tr><th>Severity</th><th>Code</th><th>Message</th></tr></thead><tbody>${findings.map((item: any) => `<tr><td>${escape(item.severity)}</td><td>${escape(item.code)}</td><td>${escape(item.message)}</td></tr>`).join("")}</tbody></table>`; return new Response(`<!doctype html><html><head><meta charset="utf-8"><title>${escape(report.run_type)}</title><style>body{font:14px system-ui;margin:40px}table{border-collapse:collapse}td,th{border:1px solid #ddd;padding:8px}</style></head><body>${body}</body></html>`, { headers: { "content-type": "text/html; charset=utf-8" } }); }
+  return json({ error: "format must be json, csv, html, or pdf" }, 400);
+};

package/bundled-templates/astro-blog/starter/src/pages/api/ops/reports.ts

@@ -0,0 +1,31 @@
+import type { APIRoute } from "astro";
+import { db, id, now } from "../../../lib/db";
+import { json } from "../../../lib/ops-auth";
+import { runProviderReport } from "../../../lib/google";
+
+export const GET: APIRoute = () => json({ items: db().prepare("SELECT * FROM blog_reports ORDER BY COALESCE(completed_at,started_at) DESC LIMIT 50").all() });
+export const POST: APIRoute = async ({ request }) => {
+  const body = await request.json().catch(() => null) as any;
+  const runType = body?.runType || "technical_seo"; const reportId = id("report"); const timestamp = now();
+  const findings: Array<{ severity: string; code: string; url?: string; message: string }> = [];
+  const database = db();
+  if (runType === "technical_seo" || runType === "content_quality") {
+    const posts = database.prepare("SELECT slug,title,excerpt,canonical_url,content_html,cover_image_alt,author_id,published_at FROM posts WHERE status='published' AND published_at IS NOT NULL").all() as any[];
+    for (const post of posts) {
+      const url = `/blog/${post.slug}`;
+      if (!post.title) findings.push({ severity: "error", code: "missing_title", url, message: "Published post has no title." });
+      if (!post.excerpt) findings.push({ severity: "warning", code: "missing_description", url, message: "Published post has no excerpt/description." });
+      if (!post.canonical_url || !/^https?:\/\//.test(post.canonical_url)) findings.push({ severity: "error", code: "invalid_canonical", url, message: "Published post has no absolute canonical URL." });
+      if (!post.author_id) findings.push({ severity: "error", code: "missing_author", url, message: "Published post has no author." });
+      if (runType === "content_quality" && !post.content_html) findings.push({ severity: "error", code: "missing_content", url, message: "Published post has no rendered content." });
+      if (runType === "technical_seo" && post.cover_image_alt === "") findings.push({ severity: "warning", code: "missing_image_alt", url, message: "Cover image alt text is empty." });
+    }
+    const summary = { runType, checkedPosts: posts.length, errors: findings.filter((item) => item.severity === "error").length, warnings: findings.filter((item) => item.severity === "warning").length };
+    database.prepare("INSERT INTO blog_reports (id,run_type,status,summary_json,findings_json,started_at,completed_at) VALUES (?,?,?,?,?,?,?)").run(reportId, runType, "completed", JSON.stringify(summary), JSON.stringify(findings), timestamp, now());
+    return json({ id: reportId, status: "completed", summary, findings });
+  }
+  const error = `${runType} report requires a configured provider adapter`;
+  if (runType !== "visibility" && runType !== "analytics") { database.prepare("INSERT INTO blog_reports (id,run_type,status,summary_json,findings_json,started_at,completed_at,error) VALUES (?,?,?,?,?,?,?,?)").run(reportId, runType, "failed", "{}", JSON.stringify([{ severity: "error", code: "provider_not_configured", message: error }]), timestamp, now(), error); return json({ id: reportId, status: "failed", error }, 503); }
+  const endDate = body?.endDate || new Date().toISOString().slice(0, 10); const startDate = body?.startDate || new Date(Date.now() - 28 * 86400000).toISOString().slice(0, 10);
+  try { const result = await runProviderReport(runType, startDate, endDate); const summary = { runType, provider: result.provider, startDate, endDate, data: result.data }; database.prepare("INSERT INTO blog_reports (id,run_type,status,summary_json,findings_json,started_at,completed_at) VALUES (?,?,?,?,?,?,?)").run(reportId, runType, "completed", JSON.stringify(summary).slice(0, 500000), "[]", timestamp, now()); return json({ id: reportId, status: "completed", summary }); } catch (providerError) { const message = providerError instanceof Error ? providerError.message : error; database.prepare("INSERT INTO blog_reports (id,run_type,status,summary_json,findings_json,started_at,completed_at,error) VALUES (?,?,?,?,?,?,?,?)").run(reportId, runType, "failed", "{}", JSON.stringify([{ severity: "error", code: "provider_error", message }]), timestamp, now(), message); return json({ id: reportId, status: "failed", error: message }, 502); }
+};

package/bundled-templates/astro-blog/starter/src/pages/api/ops/rewrite/history/[contentId].ts

@@ -0,0 +1,3 @@
+import type { APIRoute } from "astro";
+import { aiCmoRequest } from "../../../../../lib/ai-cmo";
+export const GET: APIRoute = ({ params }) => aiCmoRequest(`/rewrite/history/${encodeURIComponent(params.contentId || "")}`, "GET");

package/bundled-templates/astro-blog/starter/src/pages/api/ops/rewrite/policy.ts

@@ -0,0 +1,4 @@
+import type { APIRoute } from "astro";
+import { aiCmoRequest } from "../../../../lib/ai-cmo";
+export const GET: APIRoute = () => aiCmoRequest("/rewrite-policy", "GET");
+export const PATCH: APIRoute = async ({ request }) => aiCmoRequest("/rewrite-policy", "POST", await request.json().catch(() => null));

package/bundled-templates/astro-blog/starter/src/pages/api/ops/rewrite/queue.ts

@@ -0,0 +1,4 @@
+import type { APIRoute } from "astro";
+import { aiCmoRequest } from "../../../../lib/ai-cmo";
+export const GET: APIRoute = () => aiCmoRequest("/rewrite/queue", "GET");
+export const POST: APIRoute = async ({ request }) => aiCmoRequest("/rewrite/queue", "POST", await request.json().catch(() => null));

package/bundled-templates/astro-blog/starter/src/pages/api/ops/seo/audit.ts

@@ -0,0 +1,7 @@
+import type { APIRoute } from "astro";
+import { db } from "../../../../lib/db";
+import { json } from "../../../../lib/ops-auth";
+import { runTechnicalAudit } from "../../../../lib/seo-audit";
+
+export const GET: APIRoute = ({ url }) => { const runId = url.searchParams.get("runId"); if (runId) return json({ run: db().prepare("SELECT * FROM blog_reports WHERE id=?").get(runId), findings: db().prepare("SELECT * FROM seo_findings WHERE run_id=? ORDER BY severity DESC,category").all(runId) }); return json({ items: db().prepare("SELECT id,run_type,status,summary_json,started_at,completed_at FROM blog_reports ORDER BY COALESCE(completed_at,started_at) DESC LIMIT 20").all() }); };
+export const POST: APIRoute = () => json(runTechnicalAudit(), 201);

package/bundled-templates/astro-blog/starter/src/pages/api/ops/seo/insights.ts

@@ -0,0 +1,5 @@
+import type { APIRoute } from "astro";
+import { json } from "../../../../lib/ops-auth";
+import { seoInsights } from "../../../../lib/seo-insights";
+
+export const GET: APIRoute = () => json(seoInsights());

package/bundled-templates/astro-blog/starter/src/pages/api/ops/settings/site.ts

@@ -0,0 +1,7 @@
+import type { APIRoute } from "astro";
+import { audit, db, now } from "../../../../lib/db";
+import { json } from "../../../../lib/ops-auth";
+
+const allowed = new Set(["siteName", "postsPerPage", "gridColumns", "defaultAuthorId", "defaultCtaId", "locale", "timezone"]);
+export const GET: APIRoute = () => json({ items: db().prepare("SELECT key,value_json,updated_at FROM blog_settings WHERE key IN ('siteName','postsPerPage','gridColumns','defaultAuthorId','defaultCtaId','locale','timezone') ORDER BY key").all() });
+export const PATCH: APIRoute = async ({ request }) => { const body = await request.json().catch(() => null) as Record<string, unknown> | null; if (!body) return json({ error: "JSON object required" }, 400); const entries = Object.entries(body); if (!entries.length || entries.some(([key]) => !allowed.has(key))) return json({ error: "Only documented site settings may be changed" }, 400); const statement = db().prepare("INSERT INTO blog_settings (key,value_json,updated_at) VALUES (?,?,?) ON CONFLICT(key) DO UPDATE SET value_json=excluded.value_json, updated_at=excluded.updated_at"); const transaction = db().transaction(() => entries.forEach(([key, value]) => { statement.run(key, JSON.stringify(value), now()); audit("site_setting.updated", "setting", key, null, value); })); transaction(); return json({ ok: true }); };

package/bundled-templates/astro-blog/starter/src/pages/api/ops/settings.ts

@@ -0,0 +1,19 @@
+import type { APIRoute } from "astro";
+import { audit, db, now, settingBoolean } from "../../../lib/db";
+import { json } from "../../../lib/ops-auth";
+import { providerConfigured } from "../../../lib/google";
+
+export const GET: APIRoute = () => {
+  const settings = db().prepare("SELECT key,value_json,updated_at FROM blog_settings ORDER BY key").all() as any[];
+  const safe = settings.filter((item) => !/(key|token|secret|password|credential)/i.test(item.key)).map((item) => ({ ...item, value: JSON.parse(item.value_json) }));
+  return json({ items: safe, integrations: { aiCmo: !settingBoolean("aiCmoEnabled") ? "disabled" : (import.meta.env.AI_CMO_API_KEY ? "configured" : "disabled"), gsc: !settingBoolean("gscEnabled") ? "disabled" : (providerConfigured("visibility") ? "verified" : (import.meta.env.GSC_VERIFICATION_TOKEN ? "configured" : "disabled")), ga4: !settingBoolean("ga4Enabled") ? "disabled" : (providerConfigured("analytics") ? "verified" : (import.meta.env.GA4_MEASUREMENT_ID ? "configured" : "disabled")) } });
+};
+export const PATCH: APIRoute = async ({ request }) => {
+  const body = await request.json().catch(() => null) as Record<string, unknown> | null;
+  if (!body || typeof body !== "object") return json({ error: "JSON object required" }, 400);
+  const entries = Object.entries(body);
+  if (entries.some(([key]) => /(key|token|secret|password|credential)/i.test(key))) return json({ error: "Secret values must be configured through server environment variables" }, 400);
+  const statement = db().prepare("INSERT INTO blog_settings (key,value_json,updated_at) VALUES (?,?,?) ON CONFLICT(key) DO UPDATE SET value_json=excluded.value_json, updated_at=excluded.updated_at");
+  const transaction = db().transaction(() => entries.forEach(([key, value]) => { statement.run(key, JSON.stringify(value), now()); audit("setting.updated", "setting", key, null, value); }));
+  transaction(); return json({ ok: true });
+};

package/bundled-templates/astro-blog/starter/src/pages/api/ops/sitemap/auto-detect.ts

@@ -0,0 +1,13 @@
+import type { APIRoute } from "astro";
+import { aiCmoRequest } from "../../../../lib/ai-cmo";
+import { db, id, now } from "../../../../lib/db";
+
+export const POST: APIRoute = async ({ request }) => {
+  const body = await request.json().catch(() => ({}));
+  const response = await aiCmoRequest("/sitemap/auto-detect", "POST", body);
+  const text = await response.text(); let result: any = {}; try { result = text ? JSON.parse(text) : {}; } catch { result = { raw: text }; }
+  const candidates = Array.isArray(result.sitemaps) ? result.sitemaps : Array.isArray(result.urls) ? result.urls : [];
+  const timestamp = now();
+  for (const candidate of candidates) { const url = typeof candidate === "string" ? candidate : candidate?.url; if (!url) continue; db().prepare("INSERT INTO sitemap_sources (id,url,source_type,status,created_at,updated_at) VALUES (?,?,?,?,?,?) ON CONFLICT(url) DO UPDATE SET updated_at=excluded.updated_at, status='active'").run(id("sitemap"), url, "auto_detected", "active", timestamp, timestamp); }
+  return new Response(JSON.stringify(result), { status: response.status, headers: { "content-type": "application/json" } });
+};

package/bundled-templates/astro-blog/starter/src/pages/api/ops/sitemap/diff.ts

@@ -0,0 +1,11 @@
+import type { APIRoute } from "astro";
+import { createHash } from "node:crypto";
+import { db, id, now } from "../../../../lib/db";
+import { json } from "../../../../lib/ops-auth";
+
+const urlsFrom = (xml: string) => [...xml.matchAll(/<loc>([\s\S]*?)<\/loc>/gi)].map((match) => match[1].trim()).filter(Boolean);
+export const POST: APIRoute = async ({ request }) => {
+  const body = await request.json().catch(() => null) as any; const sourceUrl = body?.sourceUrl; if (!sourceUrl) return json({ error: "sourceUrl is required" }, 400); let urls = Array.isArray(body.urls) ? body.urls.map(String) : [];
+  if (!urls.length) { try { const response = await fetch(sourceUrl, { signal: AbortSignal.timeout(30000) }); if (!response.ok) return json({ error: `sitemap returned ${response.status}` }, 502); urls = urlsFrom(await response.text()); } catch (error) { return json({ error: error instanceof Error ? error.message : "sitemap fetch failed" }, 502); } }
+  urls = [...new Set(urls)].sort(); const serialized = JSON.stringify(urls); const digest = createHash("sha256").update(serialized).digest("hex"); const previous = db().prepare("SELECT urls_json,checksum,created_at FROM sitemap_snapshots WHERE source_url=? ORDER BY created_at DESC LIMIT 1").get(sourceUrl) as any; const before = previous ? new Set<string>(JSON.parse(previous.urls_json)) : new Set<string>(); const after = new Set<string>(urls); const added = urls.filter((url: string) => !before.has(url)); const removed = [...before].filter((url: string) => !after.has(url)); const timestamp = now(); db().prepare("INSERT INTO sitemap_snapshots (id,source_url,urls_json,checksum,created_at) VALUES (?,?,?,?,?)").run(id("sitemap_snapshot"), sourceUrl, serialized, digest, timestamp); return json({ sourceUrl, total: urls.length, checksum: digest, changed: !previous || previous.checksum !== digest, added, removed, previousAt: previous?.created_at || null });
+};

package/bundled-templates/astro-blog/starter/src/pages/api/ops/sitemap/match.ts

@@ -0,0 +1,16 @@
+import type { APIRoute } from "astro";
+import { aiCmoRequest } from "../../../../lib/ai-cmo";
+import { db, id, now } from "../../../../lib/db";
+import { json } from "../../../../lib/ops-auth";
+
+export const POST: APIRoute = async ({ request }) => {
+  const body = await request.json().catch(() => null) as any;
+  if (!body?.sitemapUrl) return json({ error: "sitemapUrl is required" }, 400);
+  const response = await aiCmoRequest("/sitemap/match", "POST", { sitemap_url: body.sitemapUrl });
+  const text = await response.text(); let result: any = {}; try { result = text ? JSON.parse(text) : {}; } catch { result = { raw: text }; }
+  const timestamp = now(); const sourceId = id("sitemap");
+  db().prepare("INSERT INTO sitemap_sources (id,url,source_type,status,created_at,updated_at) VALUES (?,?,?,?,?,?) ON CONFLICT(url) DO UPDATE SET updated_at=excluded.updated_at, status='active'").run(sourceId, body.sitemapUrl, "manual", "active", timestamp, timestamp);
+  const storedSource = db().prepare("SELECT id FROM sitemap_sources WHERE url=?").get(body.sitemapUrl) as { id: string };
+  db().prepare("INSERT INTO sitemap_runs (id,source_id,status,total_urls,matched_posts,eligible_posts,unmatched_urls,error,started_at,completed_at) VALUES (?,?,?,?,?,?,?,?,?,?)").run(id("sitemap_run"), storedSource.id, response.ok ? "completed" : "failed", Number(result.total_urls ?? result.total ?? 0), Number(result.matched_posts ?? result.matched ?? result.matched_count ?? 0), Number(result.eligible_posts ?? result.eligible ?? 0), Number(result.unmatched_urls ?? result.unmatched ?? 0), response.ok ? null : (result.error || text).slice(0, 1000), timestamp, timestamp);
+  return new Response(JSON.stringify(result), { status: response.status, headers: { "content-type": "application/json" } });
+};

package/bundled-templates/astro-blog/starter/src/pages/api/ops/sitemap/matching-history.ts

@@ -0,0 +1,4 @@
+import type { APIRoute } from "astro";
+import { aiCmoRequest } from "../../../../lib/ai-cmo";
+
+export const GET: APIRoute = () => aiCmoRequest("/sitemap/matching-history", "GET");

package/bundled-templates/astro-blog/starter/src/pages/api/ops/sitemap/runs.ts

@@ -0,0 +1,4 @@
+import type { APIRoute } from "astro";
+import { db } from "../../../../lib/db";
+import { json } from "../../../../lib/ops-auth";
+export const GET: APIRoute = ({ url }) => { const limit = Math.min(Number(url.searchParams.get("limit") || 20), 100); return json({ items: db().prepare("SELECT r.*, s.url sitemap_url FROM sitemap_runs r LEFT JOIN sitemap_sources s ON s.id=r.source_id ORDER BY r.started_at DESC LIMIT ?").all(limit) }); };

package/bundled-templates/astro-blog/starter/src/pages/api/ops/sitemap.ts

@@ -0,0 +1,11 @@
+import type { APIRoute } from "astro";
+import { db, id, now } from "../../../lib/db";
+import { json } from "../../../lib/ops-auth";
+
+export const GET: APIRoute = () => json({ sources: db().prepare("SELECT * FROM sitemap_sources ORDER BY updated_at DESC").all(), runs: db().prepare("SELECT * FROM sitemap_runs ORDER BY started_at DESC LIMIT 20").all() });
+export const POST: APIRoute = async ({ request }) => {
+  const body = await request.json().catch(() => null) as any;
+  if (!body?.url) return json({ error: "url is required" }, 400);
+  const timestamp = now();
+  try { const sourceId = id("sitemap"); db().prepare("INSERT INTO sitemap_sources (id,url,source_type,status,created_at,updated_at) VALUES (?,?,?,?,?,?) ON CONFLICT(url) DO UPDATE SET updated_at=excluded.updated_at, status='active'").run(sourceId, body.url, body.sourceType || "manual", "active", timestamp, timestamp); return json({ ok: true, url: body.url }); } catch (error) { return json({ error: error instanceof Error ? error.message : "sitemap could not be saved" }, 409); }
+};

package/bundled-templates/astro-blog/starter/src/pages/api/ops/summary.ts

@@ -0,0 +1,12 @@
+import type { APIRoute } from "astro";
+import { db } from "../../../lib/db";
+import { json } from "../../../lib/ops-auth";
+import { providerConfigured } from "../../../lib/google";
+
+export const GET: APIRoute = () => {
+  const database = db();
+  const count = (status: string) => (database.prepare("SELECT COUNT(*) AS count FROM posts WHERE status=?").get(status) as { count: number }).count;
+  const lastSitemap = database.prepare("SELECT started_at,matched_posts,eligible_posts,unmatched_urls,status FROM sitemap_runs ORDER BY started_at DESC LIMIT 1").get() as any;
+  const openErrors = (database.prepare("SELECT COUNT(*) AS count FROM blog_reports WHERE status='failed'").get() as { count: number }).count;
+  return json({ bootstrap: "incomplete", content: { published: count("published"), drafts: count("draft"), review: count("review"), failedSyncs: (database.prepare("SELECT COUNT(*) AS count FROM content_sync_state WHERE last_error IS NOT NULL").get() as { count: number }).count }, sitemap: { lastRunAt: lastSitemap?.started_at, status: lastSitemap?.status, matched: lastSitemap?.matched_posts || 0, eligible: lastSitemap?.eligible_posts || 0, unmatched: lastSitemap?.unmatched_urls || 0 }, reports: { openErrors, lastTechnicalSeoRunAt: (database.prepare("SELECT completed_at FROM blog_reports WHERE run_type='technical_seo' ORDER BY completed_at DESC LIMIT 1").get() as { completed_at?: string } | undefined)?.completed_at }, integrations: { aiCmo: import.meta.env.AI_CMO_API_KEY ? "configured" : "disabled", gsc: providerConfigured("visibility") ? "verified" : "disabled", ga4: providerConfigured("analytics") ? "verified" : "disabled" }, generatedAt: new Date().toISOString() });
+};

package/bundled-templates/astro-blog/starter/src/pages/api/ops/topics/[id]/faq.ts

@@ -0,0 +1,12 @@
+import type { APIRoute } from "astro";
+import { audit, db, id, now } from "../../../../../lib/db";
+import { json } from "../../../../../lib/ops-auth";
+
+export const POST: APIRoute = async ({ params, request }) => {
+  const body = await request.json().catch(() => null) as any;
+  if (!body?.question || !body?.answer) return json({ error: "question and answer are required" }, 400);
+  if (!db().prepare("SELECT 1 FROM topics WHERE id=?").get(params.id)) return json({ error: "Topic not found" }, 404);
+  const faqId = id("faq"); const timestamp = now();
+  const transaction = db().transaction(() => { db().prepare("INSERT INTO faq_items (id,question,answer_markdown,sort_order,status,created_at,updated_at) VALUES (?,?,?,?,?,?,?)").run(faqId, body.question, body.answer, Number(body.sortOrder || 0), body.status || "draft", timestamp, timestamp); db().prepare("INSERT INTO topic_faqs (topic_id,faq_id) VALUES (?,?)").run(params.id, faqId); });
+  try { transaction(); audit("faq.created", "topic", params.id!, null, { faqId, question: body.question }); return json({ id: faqId }, 201); } catch (error) { return json({ error: error instanceof Error ? error.message : "FAQ could not be created" }, 409); }
+};

package/bundled-templates/astro-blog/starter/src/pages/api/ops/topics.ts

@@ -0,0 +1,11 @@
+import type { APIRoute } from "astro";
+import { audit, db, id, now } from "../../../lib/db";
+import { json } from "../../../lib/ops-auth";
+
+export const GET: APIRoute = () => json({ items: db().prepare("SELECT t.*, COUNT(pt.post_id) AS post_count FROM topics t LEFT JOIN post_topics pt ON pt.topic_id=t.id GROUP BY t.id ORDER BY t.title").all() });
+export const POST: APIRoute = async ({ request }) => {
+  const body = await request.json().catch(() => null) as any;
+  if (!body?.slug || !body?.title || !body?.description) return json({ error: "slug, title and description are required" }, 400);
+  const topicId = id("topic"); const timestamp = now();
+  try { db().prepare("INSERT INTO topics (id,slug,title,description,status,created_at,updated_at) VALUES (?,?,?,?,?,?,?)").run(topicId, body.slug, body.title, body.description, body.status || "draft", timestamp, timestamp); audit("topic.created", "topic", topicId, null, body); return json({ id: topicId }, 201); } catch (error) { return json({ error: error instanceof Error ? error.message : "topic could not be created" }, 409); }
+};

package/bundled-templates/astro-blog/starter/src/pages/api/ops/wordpress/capabilities.ts

@@ -0,0 +1,5 @@
+import type { APIRoute } from "astro";
+import { inspectWordPressCapabilities } from "../../../../lib/wordpress";
+import { json } from "../../../../lib/ops-auth";
+
+export const GET: APIRoute = async ({ url }) => { const sourceUrl = url.searchParams.get("sourceUrl"); if (!sourceUrl) return json({ error: "sourceUrl is required" }, 400); try { return json(await inspectWordPressCapabilities(sourceUrl)); } catch (error) { return json({ error: error instanceof Error ? error.message : "capability detection failed" }, 502); } };

package/bundled-templates/astro-blog/starter/src/pages/api/ops/wordpress/migration-plan.ts

@@ -0,0 +1,21 @@
+import type { APIRoute } from "astro";
+import { id, now, db } from "../../../../lib/db";
+import { inspectWordPress, inspectWordPressCapabilities } from "../../../../lib/wordpress";
+import { json } from "../../../../lib/ops-auth";
+
+export const POST: APIRoute = async ({ request }) => {
+  const body = await request.json().catch(() => null) as any;
+  if (!body?.sourceUrl) return json({ error: "sourceUrl is required" }, 400);
+  const postTypes = Array.isArray(body.postTypes) && body.postTypes.length ? body.postTypes.map(String) : ["post"];
+  const selections = {
+    postTypes,
+    resources: { posts: body.resources?.posts !== false, pages: body.resources?.pages === true, categories: body.resources?.categories !== false, tags: body.resources?.tags !== false, media: body.resources?.media !== false, authors: body.resources?.authors !== false },
+    mapping: { categoryToTopic: body.mapping?.categoryToTopic || {}, tagToTaxonomy: body.mapping?.tagToTaxonomy || "tag", authorToAuthor: body.mapping?.authorToAuthor || {}, featuredImageToMedia: body.mapping?.featuredImageToMedia !== false, seo: body.mapping?.seo || { yoast: true, rankMath: true, aioseo: true, customFields: true } },
+  };
+  try {
+    const [capabilities, preview] = await Promise.all([inspectWordPressCapabilities(String(body.sourceUrl)), inspectWordPress(String(body.sourceUrl), { maxPosts: Number(body.maxPosts || 100), maxTerms: Number(body.maxTerms || 1000), mediaMode: selections.resources.media ? "all" : "featured" })]);
+    const planId = id("wp_plan"); const timestamp = now();
+    db().prepare("INSERT INTO wp_migrations (id,source_url,mode,status,options_json,counts_json,started_at,completed_at) VALUES (?,?,?,?,?,?,?,?)").run(planId, String(body.sourceUrl), "preview", "completed", JSON.stringify(selections), JSON.stringify(preview.totals), timestamp, timestamp);
+    return json({ id: planId, status: "planned", capabilities, selections, counts: preview.totals, urlMappingPreview: preview.sample.map((post) => ({ source: post.slug, destination: `/blog/${post.slug}`, title: post.title })) });
+  } catch (error) { return json({ error: error instanceof Error ? error.message : "migration plan failed" }, 502); }
+};

package/bundled-templates/astro-blog/starter/src/pages/api/ops/wordpress/migrations/[id]/resume.ts

@@ -0,0 +1,5 @@
+import type { APIRoute } from "astro";
+import { db, now } from "../../../../../../lib/db";
+import { json } from "../../../../../../lib/ops-auth";
+import { importWordPress } from "../../../../../../lib/wordpress";
+export const POST: APIRoute = async ({ params }) => { const migration = db().prepare("SELECT * FROM wp_migrations WHERE id=?").get(params.id) as any; if (!migration) return json({ error: "Migration not found" }, 404); if (migration.status === "running") return json({ error: "Migration is already running" }, 409); const options = JSON.parse(migration.options_json); db().prepare("UPDATE wp_migrations SET mode='apply',status='running',error=NULL,completed_at=NULL WHERE id=?").run(params.id); try { const counts = await importWordPress(params.id!, migration.source_url, options); db().prepare("UPDATE wp_migrations SET status='completed',counts_json=?,completed_at=? WHERE id=?").run(JSON.stringify(counts), now(), params.id); return json({ id: params.id, status: "completed", counts }); } catch (error) { const message = error instanceof Error ? error.message : "WordPress migration failed"; db().prepare("UPDATE wp_migrations SET status='failed',error=?,completed_at=? WHERE id=?").run(message, now(), params.id); return json({ id: params.id, status: "failed", error: message }, 502); } };

package/bundled-templates/astro-blog/starter/src/pages/api/ops/wordpress/migrations/[id]/validate.ts

@@ -0,0 +1,6 @@
+import type { APIRoute } from "astro";
+import { db } from "../../../../../../lib/db";
+import { json } from "../../../../../../lib/ops-auth";
+import { validateMigration } from "../../../../../../lib/migration-validation";
+
+export const POST: APIRoute = ({ params }) => { if (!db().prepare("SELECT 1 FROM wp_migrations WHERE id=?").get(params.id)) return json({ error: "migration not found" }, 404); return json(validateMigration(params.id!)); };

package/bundled-templates/astro-blog/starter/src/pages/api/ops/wordpress/migrations/[id].ts

@@ -0,0 +1,13 @@
+import type { APIRoute } from "astro";
+import { audit, db, now } from "../../../../../lib/db";
+import { json } from "../../../../../lib/ops-auth";
+export const GET: APIRoute = ({ params }) => { const migration = db().prepare("SELECT * FROM wp_migrations WHERE id=?").get(params.id) as any; if (!migration) return json({ error: "Migration not found" }, 404); return json({ ...migration, options: JSON.parse(migration.options_json), counts: JSON.parse(migration.counts_json), items: db().prepare("SELECT entity_type,source_id,target_id,action,error,created_at FROM wp_import_items WHERE migration_id=? ORDER BY entity_type,source_id").all(params.id) }); };
+function restoreMigrationRevision(postId: string, startedAt: string): boolean { const revision = db().prepare("SELECT snapshot_json FROM post_revisions WHERE post_id=? AND reason='WordPress migration' AND created_at>=? ORDER BY created_at LIMIT 1").get(postId, startedAt) as { snapshot_json: string } | undefined; if (!revision) return false; const snapshot = JSON.parse(revision.snapshot_json); const fields = ["slug","title","excerpt","content_markdown","content_html","canonical_url","cover_image_url","cover_image_alt","author_id","language","status","published_at","updated_at","seo_title","meta_description","focus_keyword","canonical_override","robots_index","robots_follow","og_image_url","schema_type","custom_metadata_json"]; const present = fields.filter((field) => snapshot[field] !== undefined); if (!present.length) return false; db().prepare(`UPDATE posts SET ${present.map((field) => `${field}=?`).join(",")} WHERE id=?`).run(...present.map((field) => snapshot[field]), postId); return true; }
+export const POST: APIRoute = async ({ params, request }) => {
+  const body = await request.json().catch(() => null) as any; if (body?.action !== "rollback") return json({ error: "action must be rollback" }, 400);
+  const migration = db().prepare("SELECT * FROM wp_migrations WHERE id=?").get(params.id) as any; if (!migration) return json({ error: "Migration not found" }, 404);
+  const items = db().prepare("SELECT target_id FROM wp_import_items WHERE migration_id=? AND entity_type='post' AND action='created' AND target_id IS NOT NULL").all(params.id) as Array<{ target_id: string }>;
+  const updated = db().prepare("SELECT target_id FROM wp_import_items WHERE migration_id=? AND entity_type='post' AND action='updated' AND target_id IS NOT NULL").all(params.id) as Array<{ target_id: string }>;
+  const tx = db().transaction(() => { const remove = db().prepare("DELETE FROM posts WHERE id=? AND source='cms'"); for (const item of items) remove.run(item.target_id); const restored = updated.filter((item) => restoreMigrationRevision(item.target_id, migration.started_at)).length; db().prepare("UPDATE wp_migrations SET status='cancelled',completed_at=?,error=? WHERE id=?").run(now(), "rolled back by operator", params.id); return restored; }); const restored = tx();
+  audit("wordpress.migration.rolled_back", "wordpress_migration", params.id!, { status: migration.status }, { removedPosts: items.length, restoredUpdatedPosts: restored }); return json({ id: params.id, status: "cancelled", removedPosts: items.length, restoredUpdatedPosts: restored });
+};