@voltro/cms 0.86.0 → 0.88.0

package/dist/promotion.js

@@ -1,12 +1,16 @@
-import { asTyped as e } from "./effectForm.js";
-import { ContentIdConflict as t, ContentNotFound as n, ContentValidationFailed as r, ReferenceUnavailable as i, ReleaseNotEditable as a, ReviewRequired as o, RevisionMismatch as s } from "./errors.js";
-import { pickDeclared as c, saveDraft as l } from "./write.js";
-import { addToRelease as u, createRelease as d, publishRelease as f } from "./release.js";
-import { and as p, eq as m, neq as h } from "@voltro/database";
-//#region src/promotion.ts
-var g = (e, t, n, r, i = []) => e.query({
+import { PublicRouteRegistryUnavailable as e } from "./publicRouteRegistry.js";
+import { ChangeFeedUnavailable as t, ContentIdConflict as n, ContentNotFound as r, ContentValidationFailed as i, ReferenceUnavailable as a, ReleaseNotEditable as o, ReviewRequired as s, RevisionMismatch as c } from "./errors.js";
+import { asTyped as l } from "./effectForm.js";
+import { pickDeclared as u } from "./contentValues.js";
+import { withPublicRouteStateMutation as d } from "./publicRouteMutation.js";
+import { saveDraft as f } from "./write.js";
+import { addToRelease as p, createRelease as m, publishRelease as h } from "./release.js";
+import { lockEnvironmentPairForPublication as g } from "./environments.js";
+import { and as _, eq as v, neq as y } from "@voltro/database";
+// src/promotion.ts
+var b = (e, t, n, r, i = []) => e.query({
 	table: t,
-	predicate: p(m("site", n), m("environment", r), h("status", "archived"), ...i),
+	predicate: _(v("site", n), v("environment", r), y("status", "archived"), ...i),
 	order: [{
 		column: "id",
 		direction: "asc"
@@ -14,25 +18,25 @@ var g = (e, t, n, r, i = []) => e.query({
 	take: void 0,
 	skip: void 0,
 	projection: void 0
-}), _ = (e) => JSON.stringify(e, (e, t) => typeof t == "object" && t && !Array.isArray(t) && !(t instanceof Date) ? Object.fromEntries(Object.entries(t).sort(([e], [t]) => e < t ? -1 : 1)) : t), v = (e) => {
+}), x = (e) => JSON.stringify(e, (e, t) => typeof t == "object" && t && !Array.isArray(t) && !(t instanceof Date) ? Object.fromEntries(Object.entries(t).sort(([e], [t]) => e < t ? -1 : 1)) : t), S = (e) => {
 	for (let t of [
 		"title",
 		"name",
 		"slug"
 	]) if (typeof e[t] == "string" && e[t] !== "") return e[t];
 	return String(e.documentId);
-}, y = (e) => `${String(e.documentId)}\u0000${String(e.locale)}`, b = async (e, t, n) => {
+}, C = (e) => `${String(e.documentId)}\u0000${String(e.locale)}`, w = async (e, t, n) => {
 	let r = [];
 	for (let i of t) {
-		let t = await g(e, `${i.name}_published`, n.site, n.from);
+		let t = await b(e, `${i.name}_published`, n.site, n.from);
 		if (t.length === 0) continue;
-		let a = new Map((await g(e, `${i.name}_published`, n.site, n.to)).map((e) => [y(e), e])), o = new Map((await g(e, `${i.name}_drafts`, n.site, n.to)).map((e) => [y(e), e]));
+		let a = new Map((await b(e, `${i.name}_published`, n.site, n.to)).map((e) => [C(e), e])), o = new Map((await b(e, `${i.name}_drafts`, n.site, n.to)).map((e) => [C(e), e]));
 		for (let e of t) {
-			let t = a.get(y(e)), n = o.get(y(e)), s = {
+			let t = a.get(C(e)), n = o.get(C(e)), s = {
 				contentType: i.name,
 				documentId: String(e.documentId),
 				locale: String(e.locale),
-				title: v(e)
+				title: S(e)
 			};
 			n !== void 0 && n.status === "draft" ? r.push({
 				...s,
@@ -40,68 +44,72 @@ var g = (e, t, n, r, i = []) => e.query({
 			}) : t === void 0 ? r.push({
 				...s,
 				change: "new"
-			}) : _(c(i, e)) !== _(c(i, t)) && r.push({
+			}) : x(u(i, e)) !== x(u(i, t)) && r.push({
 				...s,
 				change: "changed"
 			});
 		}
 	}
 	return r;
-}, x = async (e, t, n, r, i) => {
-	if (r.length === 0) return {
+}, T = async (e, n, r, i, a) => {
+	if (i.length === 0) return {
 		ok: !1,
 		reason: "nothingSelected",
 		items: []
 	};
-	let a = await b(e, t, n), o = new Map(a.map((e) => [`${e.contentType}\u0000${e.documentId}\u0000${e.locale}`, e])), s = r.filter((e) => !o.has(`${e.contentType}\u0000${e.documentId}\u0000${e.locale}`));
-	if (s.length > 0) return {
+	let o = await g(e, n, r), s = await w(e, n, r), c = new Map(s.map((e) => [`${e.contentType}\u0000${e.documentId}\u0000${e.locale}`, e])), l = i.filter((e) => !c.has(`${e.contentType}\u0000${e.documentId}\u0000${e.locale}`));
+	if (l.length > 0) return {
 		ok: !1,
 		reason: "notInPlan",
-		items: s
+		items: l
 	};
-	let p = r.filter((e) => o.get(`${e.contentType}\u0000${e.documentId}\u0000${e.locale}`).change === "blocked");
-	if (p.length > 0) return {
+	let _ = i.filter((e) => c.get(`${e.contentType}\u0000${e.documentId}\u0000${e.locale}`).change === "blocked");
+	if (_.length > 0) return {
 		ok: !1,
 		reason: "blocked",
-		items: p
+		items: _
 	};
-	let h = new Map(t.map((e) => [e.name, e])), _ = await d(e, {
-		name: i.name,
-		site: n.site,
-		environment: n.to
-	}), v = String(_.id);
-	for (let t of r) {
-		let r = h.get(t.contentType), [i] = await g(e, `${r.name}_published`, n.site, n.from, [m("documentId", t.documentId), m("locale", t.locale)]), a = {
-			site: n.site,
-			environment: n.to,
-			locale: t.locale
-		}, [o] = await g(e, `${r.name}_drafts`, n.site, n.to, [m("documentId", t.documentId), m("locale", t.locale)]), s = c(r, i), d = await l(e, r, o === void 0 ? {
-			...s,
-			documentId: t.documentId
-		} : {
-			...s,
-			id: o.id
-		}, a);
-		await u(e, v, {
-			type: r,
-			id: String(d.id),
-			locale: t.locale,
-			revisionId: String(d.revisionId)
-		});
-	}
-	return await f(e, t, v), {
-		ok: !0,
-		releaseId: v,
-		promoted: r.length
-	};
-}, S = [
-	r,
-	t,
+	let y = new Map(n.map((e) => [e.name, e]));
+	return d(e, async () => {
+		let s = await m(e, {
+			name: a.name,
+			site: r.site,
+			environment: r.to
+		}), c = String(s.id);
+		for (let n of i) {
+			let i = y.get(n.contentType), [a] = await b(e, `${i.name}_published`, r.site, r.from, [v("documentId", n.documentId), v("locale", n.locale)]), s = {
+				site: r.site,
+				environment: r.to,
+				locale: n.locale
+			}, [l] = await b(e, `${i.name}_drafts`, r.site, r.to, [v("documentId", n.documentId), v("locale", n.locale)]);
+			if (o === null || a === void 0 || a.tenantId !== o.tenantId) throw new t({ reason: "scope" });
+			let d = u(i, a), m = await f(e, i, l === void 0 ? {
+				...d,
+				documentId: n.documentId
+			} : {
+				...d,
+				id: l.id
+			}, s);
+			await p(e, c, {
+				type: i,
+				id: String(m.id),
+				locale: n.locale,
+				revisionId: String(m.revisionId)
+			});
+		}
+		return await h(e, n, c), {
+			ok: !0,
+			releaseId: c,
+			promoted: i.length
+		};
+	});
+}, E = [
+	i,
 	n,
-	s,
-	a,
+	r,
+	c,
 	o,
-	i
-], C = (...t) => e(() => b(...t), ...S), w = (...t) => e(() => x(...t), ...S);
-//#endregion
-export { b as planPromotion, C as planPromotionEffect, x as promote, w as promoteEffect };
+	s,
+	a
+], D = (...e) => l(() => w(...e), ...E), O = (...n) => l(() => T(...n), ...E, t, e);
+export { w as planPromotion, D as planPromotionEffect, T as promote, O as promoteEffect };

package/dist/publicBuild.js

@@ -0,0 +1,89 @@
+import { encodeCanonicalPathSegment as e } from "./pathSegmentEncoding.js";
+// src/publicBuild.ts
+var t = class extends Error {
+	reason;
+	_tag = "CmsPublicBuildUnavailable";
+	constructor(e) {
+		super("Public build unavailable: " + e), this.reason = e;
+	}
+}, n = (e) => {
+	throw new t(e);
+}, r = (e) => typeof e == "string" && /^[a-f0-9]{64}$/.test(e), i = (e) => {
+	if (typeof e != "object" || !e || Array.isArray(e)) return n("identity");
+	let t = e;
+	return Object.keys(t).sort().join(",") !== "executionId,inputsId,snapshotDigest,version" || t.version !== 1 || !r(t.snapshotDigest) || !r(t.inputsId) || !r(t.executionId) ? n("identity") : {
+		version: 1,
+		snapshotDigest: t.snapshotDigest,
+		inputsId: t.inputsId,
+		executionId: t.executionId
+	};
+}, a = (e) => {
+	let t = i(e);
+	return [
+		"1",
+		t.snapshotDigest,
+		t.inputsId,
+		t.executionId
+	].join(".");
+}, o = (e) => {
+	if (typeof e != "string" || !/^1\.[a-f0-9]{64}\.[a-f0-9]{64}\.[a-f0-9]{64}$/.test(e)) return n("identity");
+	let [, t, r, a] = e.split(".");
+	return i({
+		version: 1,
+		snapshotDigest: t,
+		inputsId: r,
+		executionId: a
+	});
+}, s = (e = globalThis.document) => {
+	if (e === void 0) return null;
+	let t = e.querySelectorAll("meta[name=\"voltro:cms-build\"]");
+	return t.length === 0 ? null : t.length === 1 ? o(t[0].getAttribute("content") ?? "") : n("identity");
+}, c = (e) => `<meta name="voltro:cms-build" content="${a(e)}" />`, l = (t) => {
+	if (typeof t != "string" || t.length > 4096 || !t.startsWith("/") || t.startsWith("//") || /[\\?#\x00-\x20\x7f]/.test(t) || t.slice(1).includes("//")) return n("request");
+	try {
+		if (new URL(t, "https://captured.invalid").pathname !== t) return n("request");
+		let r = t.split("/").map((t) => {
+			let r = decodeURIComponent(t).normalize("NFC");
+			return /[\\/\x00-\x1f\x7f]/.test(r) || r === "." || r === ".." ? n("request") : e(r);
+		}).join("/").replace(/\/$/, "") || "/";
+		return r.length > 4096 ? n("request") : r;
+	} catch {
+		return n("request");
+	}
+}, u = async (e, t, r = {}) => {
+	let o = i(e), s = l(t), c = new URLSearchParams({
+		build: a(o),
+		path: s
+	}), u;
+	try {
+		u = await (r.fetch ?? globalThis.fetch)("/v1/cms/public-build/page?" + c, {
+			method: "GET",
+			credentials: "same-origin",
+			cache: "no-store",
+			redirect: "error",
+			...r.signal === void 0 ? {} : { signal: r.signal }
+		});
+	} catch (e) {
+		if (r.signal?.aborted) throw e;
+		return n("transport");
+	}
+	if (u.status === 409) return n("changed");
+	if (u.status === 404) return n("not-found");
+	if (u.status === 403 || u.status === 410) return n("denied");
+	if (!u.ok || u.headers.get("content-type")?.split(";", 1)[0] !== "application/json") return n("transport");
+	let d;
+	try {
+		d = await u.json();
+	} catch {
+		return n("transport");
+	}
+	if (typeof d != "object" || !d || Array.isArray(d)) return n("request");
+	let f = d;
+	return Object.keys(f).sort().join(",") !== "build,page,path,version" || f.version !== 1 || f.path !== s || a(i(f.build)) !== a(o) ? n("changed") : {
+		version: 1,
+		build: o,
+		path: s,
+		page: f.page
+	};
+};
+export { t as CmsPublicBuildUnavailable, l as canonicalCmsPublicPath, c as cmsPublicBuildMeta, i as copyCmsPublicBuildIdentity, o as decodeCmsPublicBuildIdentity, a as encodeCmsPublicBuildIdentity, u as loadCmsPublicBuildPage, s as readCmsPublicBuildIdentity };

package/dist/publicBuildRest.js

@@ -0,0 +1,97 @@
+import { CmsPublicBuildUnavailable as e, decodeCmsPublicBuildIdentity as t } from "./publicBuild.js";
+import { Effect as n, Schema as r } from "effect";
+import { defineQuery as i } from "@voltro/protocol";
+import { RestRouteError as a, projectedFailure as o, publicApiRoute as s, restError as c, restRoutesToHttpRoutes as l } from "@voltro/protocol/rest";
+// src/publicBuildRest.ts
+var u = {
+	"cache-control": "private, no-store",
+	pragma: "no-cache",
+	vary: "Cookie"
+}, d = r.Struct({
+	version: r.Literal(1),
+	snapshotDigest: r.String,
+	inputsId: r.String,
+	executionId: r.String
+}), f = r.Struct({
+	build: r.String,
+	path: r.String
+}), p = {
+	identity: 400,
+	request: 400,
+	changed: 409,
+	"not-found": 404,
+	denied: 410,
+	transport: 503
+}, m = i({
+	name: "cms.publicBuildPage",
+	input: f,
+	output: r.Struct({
+		version: r.Literal(1),
+		build: d,
+		path: r.String,
+		page: r.Unknown
+	}),
+	error: r.Struct({
+		_tag: r.Literal("CmsPublicBuildUnavailable"),
+		reason: r.Literals([
+			"identity",
+			"request",
+			"changed",
+			"not-found",
+			"denied",
+			"transport"
+		])
+	}),
+	openAccess: "Anonymous presentation from the current independently admitted public output marker. Private read credentials never grant this endpoint.",
+	publicApi: {
+		method: "GET",
+		path: "/v1/cms/public-build/page",
+		security: !1,
+		idempotent: !1,
+		operationId: "cmsPublicBuildPage",
+		tags: ["CMS public builds"],
+		errorStatus: { CmsPublicBuildUnavailable: 409 },
+		additionalErrorStatuses: { CmsPublicBuildUnavailable: [...new Set(Object.values(p))].filter((e) => e !== 409) },
+		summary: "Read a current captured public page presentation",
+		description: "Exact public build selector, admitted request host and canonical path. Active generation, region, output membership, current rights and monotone denies are checked. No live fallback; private no-store including errors."
+	}
+}), h = (t) => {
+	let n = o(new e(t), m, { errorStatus: { CmsPublicBuildUnavailable: p[t] } });
+	throw n instanceof a ? c(n.status, n.body, u) : n;
+}, g = (e, r) => {
+	let i = [s(m, async (i, a) => {
+		let o = i;
+		[...new URLSearchParams(a.query).keys()].sort().join(",") !== "build,path" && h("request");
+		let s = (() => {
+			try {
+				return t(o.build);
+			} catch {
+				return h("identity");
+			}
+		})(), c = r.choices?.(a.headers), l = await n.runPromise(n.result(e.page({
+			build: s,
+			path: o.path,
+			host: r.host(a.headers),
+			...c === void 0 ? {} : { choices: c }
+		})));
+		if (l._tag === "Success") return l.success;
+		h(l.failure.reason);
+	})];
+	return {
+		routes: i,
+		httpRoutes: l(i).map((e) => ({
+			...e,
+			handle: async (...t) => {
+				let n = await e.handle(...t);
+				return {
+					...n,
+					headers: {
+						...n.headers,
+						...u
+					}
+				};
+			}
+		}))
+	};
+};
+export { g as cmsPublicBuildRest };

package/dist/publicBuildService.js

@@ -0,0 +1,62 @@
+import { normalizeHost as e } from "./domainHost.js";
+import { OutputActivationUnavailable as t } from "./outputActivation.js";
+import { CmsPublicBuildUnavailable as n, canonicalCmsPublicPath as r, copyCmsPublicBuildIdentity as i, encodeCmsPublicBuildIdentity as a } from "./publicBuild.js";
+import { readActiveOutput as o } from "./outputActivationStore.js";
+import { copyPublicConsentChoices as s, selectPublicPresentation as c } from "./publicPresentation.js";
+import { Effect as l } from "effect";
+// src/publicBuildService.ts
+var u = (u) => {
+	let d = { ...u.scope }, f = u.keys.map((e) => ({
+		id: e.id,
+		material: new Uint8Array(e.material)
+	})), p = Object.fromEntries(Object.entries(u.regionKeys).map(([e, t]) => [e, t.map((e) => ({
+		id: e.id,
+		material: new Uint8Array(e.material)
+	}))])), m = u.region, h = u.admit, g = u.readPage, _ = u.store;
+	return { page: (v) => l.tryPromise({
+		try: async () => {
+			let t = i(v.build), l = e(v.host), y = r(v.path), b = s(v.choices);
+			if (l !== v.host) throw new n("request");
+			return _.transactional(async (e) => {
+				let r;
+				if (await o(e, d, {
+					kind: "url",
+					url: "https://" + l + y
+				}, {
+					keys: f,
+					regionKeys: p,
+					region: m,
+					lock: "share",
+					admit: async (e, i, o, s) => {
+						let d = {
+							version: 1,
+							snapshotDigest: i.manifest.snapshot.digest,
+							inputsId: i.manifest.app.inputsId,
+							executionId: i.manifest.app.executionId
+						};
+						if (a(d) !== a(t)) throw new n("changed");
+						if (!i.manifest.paths.some((e) => e.host === l)) throw new n("not-found");
+						await h(e, i, o, s);
+						let f = c(await u.readPresentations(e, i, s), b), p = await g(e, i, s, {
+							host: l,
+							path: y,
+							presentation: f
+						});
+						if (!p.found) throw new n("not-found");
+						let m = JSON.stringify(p.page);
+						if (m === void 0 || Buffer.byteLength(m) > 4194304) throw new n("transport");
+						await h(e, i, o, s), r = {
+							version: 1,
+							build: t,
+							path: y,
+							page: JSON.parse(m)
+						};
+					}
+				}) === null || r === void 0) throw new n("not-found");
+				return r;
+			});
+		},
+		catch: (e) => e instanceof n ? e : e instanceof t ? new n(e.reason === "denied" ? "denied" : "changed") : new n("transport")
+	}) };
+};
+export { u as createCmsPublicBuilds };

package/dist/publicOutputHttp.js

@@ -0,0 +1,128 @@
+import { canonicalCmsPublicPath as e } from "./publicBuild.js";
+import { Effect as t } from "effect";
+import { storageByteSecurityHeaders as n } from "@voltro/plugin-storage/byte-security";
+// src/publicOutputHttp.ts
+var r = (r, i) => {
+	if (i.redirects && r.redirect === void 0) throw Error("Missing public redirect service");
+	let a = [
+		...i.documents.map((e) => ({
+			...e,
+			kind: "document"
+		})),
+		{
+			path: "/__voltro/media",
+			match: "prefix",
+			kind: "asset"
+		},
+		{
+			path: "/__voltro/web",
+			match: "prefix",
+			kind: "asset"
+		},
+		...i.controls ? [
+			{
+				path: "/sitemap.xml",
+				match: "exact",
+				kind: "control"
+			},
+			{
+				path: "/robots.txt",
+				match: "exact",
+				kind: "control"
+			},
+			{
+				path: "/sitemaps",
+				match: "prefix",
+				kind: "control"
+			}
+		] : []
+	];
+	if (a.some((t) => e(t.path) !== t.path) || new Set(a.map((e) => e.path)).size !== a.length) throw Error("Invalid public output mounts");
+	return a.map((e) => ({
+		path: e.path,
+		match: e.match,
+		method: "GET",
+		answersOtherMethods: !0,
+		handle: async (a) => {
+			let o = {
+				"cache-control": "private, no-store",
+				pragma: "no-cache",
+				...e.kind === "control" ? {} : { vary: "Cookie" },
+				"x-content-type-options": "nosniff"
+			};
+			if (a.method !== "GET" && a.method !== "HEAD" && !(i.redirects && e.kind === "document")) return {
+				status: 405,
+				headers: {
+					...o,
+					allow: "GET, HEAD"
+				}
+			};
+			let s, c;
+			try {
+				s = i.host(a.headers), c = e.kind === "control" ? void 0 : i.choices?.(a.headers);
+			} catch {
+				return {
+					status: 400,
+					headers: o
+				};
+			}
+			if (i.redirects && e.kind === "document" && r.redirect !== void 0) {
+				let e = await t.runPromise(t.result(r.redirect({
+					host: s,
+					path: a.path,
+					...c === void 0 ? {} : { choices: c }
+				})));
+				if (e._tag === "Success") {
+					let t = e.success;
+					return {
+						status: t.status,
+						headers: {
+							...o,
+							...t.location === null ? {} : { location: t.location },
+							"content-length": "0"
+						}
+					};
+				}
+				let n = e.failure.reason;
+				if (n !== "not-found") return {
+					status: n === "request" || n === "identity" ? 400 : n === "denied" ? 410 : n === "changed" ? 409 : 503,
+					headers: o
+				};
+			}
+			if (a.method !== "GET" && a.method !== "HEAD") return {
+				status: 405,
+				headers: {
+					...o,
+					allow: "GET, HEAD"
+				}
+			};
+			let l = e.kind === "control" ? r.control({
+				host: s,
+				path: a.path
+			}) : r[e.kind]({
+				host: s,
+				path: a.path,
+				...c === void 0 ? {} : { choices: c }
+			}), u = await t.runPromise(t.result(l));
+			if (u._tag === "Failure") {
+				let e = u.failure.reason;
+				return {
+					status: e === "request" || e === "identity" ? 400 : e === "not-found" ? 404 : e === "denied" ? 410 : e === "changed" ? 409 : 503,
+					headers: o
+				};
+			}
+			let d = u.success;
+			return {
+				status: 200,
+				headers: {
+					...o,
+					...e.path === "/__voltro/media" ? n(d.contentType) : {},
+					"content-length": String(d.bytes.byteLength)
+				},
+				contentType: d.contentType,
+				...a.method === "HEAD" ? {} : { body: d.bytes }
+			};
+		}
+	}));
+};
+export { r as cmsPublicOutputHttp };