@voltro/cms 0.86.0 → 0.88.0

package/dist/buildSnapshotService.js

@@ -0,0 +1,264 @@
+import { copySnapshotResource as e } from "./buildSnapshot.js";
+import { readRenderReadCredential as t } from "./renderReadAuthority.js";
+import { copySnapshotPresentationValue as n } from "./snapshotPresentation.js";
+import { copyFrontendOutputSelection as r } from "./frontendBindings.js";
+import { snapshotApplicationConfigurationPins as i, snapshotApplicationPins as a } from "./snapshotApplication.js";
+import { beginSnapshotMediaCapture as o, resumeSnapshotMediaCapture as s } from "./snapshotMediaCapture.js";
+import { captureSiteBuildCandidate as c } from "./siteBuildCandidate.js";
+import { issueSnapshotAppGrant as l } from "./snapshotAppConsumer.js";
+import { readSnapshotRoute as u } from "./snapshotRouteRead.js";
+import { readSnapshotBinding as d } from "./snapshotBindingRead.js";
+import { readSnapshotTree as f } from "./snapshotTreeRead.js";
+import { renderSnapshotRoute as p } from "./snapshotRender.js";
+import { copySnapshotSeoDocumentsSelection as m } from "./snapshotSeoPathSets.js";
+import { readSnapshotSeoDocuments as h, snapshotOutputSafetyBinding as g } from "./snapshotSeoDocuments.js";
+import { captureOutputSafetyArtifact as _, copyOutputSafetySelection as v } from "./outputSafetyArtifact.js";
+import { renderSnapshotSeoControls as y } from "./snapshotSeoOutput.js";
+import { copySnapshotRedirectTargets as b } from "./snapshotRedirectTargets.js";
+import { renderSnapshotRouteDispositions as x } from "./snapshotRedirectOutput.js";
+import { Effect as S, Schema as C } from "effect";
+import { createHash as w } from "node:crypto";
+import { canonicalJson as T } from "@voltro/runtime";
+// src/buildSnapshotService.ts
+var E = class extends C.TaggedError()("CmsBuildSnapshotUnavailable", { reason: C.Literals([
+	"configuration",
+	"credential",
+	"capture",
+	"grant",
+	"read",
+	"render"
+]) }) {}, D = (e) => w("sha256").update(T(e)).digest("hex"), O = (e) => {
+	throw new E({ reason: e });
+}, k = (e, t) => S.tryPromise({
+	try: t,
+	catch: (t) => t instanceof E ? t : new E({ reason: e })
+}), A = (C) => {
+	let { store: w, application: A, app: j, custody: M, execution: N, output: P } = C, F = {
+		tenantId: C.scope.tenantId,
+		site: C.scope.site,
+		environment: C.scope.environment
+	}, I = { ...C.code }, L = C.alias, R = C.requiredScope, z = C.snapshotTtlMs, B = C.maxMediaBytes, V = C.now ?? Date.now, H = {
+		id: C.key.id,
+		material: new Uint8Array(C.key.material)
+	}, U = [H, ...(C.verificationKeys ?? []).map((e) => ({
+		id: e.id,
+		material: new Uint8Array(e.material)
+	}))], W = JSON.parse(T(C.routeDiscovery));
+	if (!Number.isSafeInteger(z) || z <= 0 || !Number.isSafeInteger(B) || B < 0 || !/^[A-Za-z][A-Za-z0-9:_.-]{0,127}$/.test(R)) return O("configuration");
+	let G = D({
+		version: 1,
+		scope: F,
+		alias: L,
+		requiredScope: R,
+		ttl: z,
+		maxBytes: B,
+		application: A.frontend === void 0 ? {
+			...i(A, I),
+			frontend: {
+				source: "retained-application",
+				output: r(A.output)
+			}
+		} : a({
+			...A,
+			frontend: A.frontend
+		}, I),
+		discovery: W
+	}), K = async (e, n) => {
+		let r = await t(e, F, n, V());
+		return r === null || !r.scopes.includes(R) ? O("credential") : r;
+	}, q = (e) => ({
+		snapshot: {
+			id: e.snapshot.id,
+			digest: e.snapshot.digest
+		},
+		token: e.token,
+		consumerId: e.consumerId,
+		buildId: e.buildId,
+		host: e.host,
+		path: e.path,
+		presentation: n(e.presentation)
+	});
+	return {
+		capture: (t) => S.gen(function* () {
+			let { apiKey: n, attemptId: r, releaseId: i } = t, a = t.expectedApplication === void 0 ? void 0 : {
+				inputsId: t.expectedApplication.inputsId,
+				executionId: t.expectedApplication.executionId,
+				code: {
+					commit: t.expectedApplication.code.commit,
+					artifactDigest: t.expectedApplication.code.artifactDigest,
+					configDigest: t.expectedApplication.code.configDigest
+				}
+			}, l = yield* k("credential", () => w.transactional((e) => K(e, n))), u = yield* k("capture", async () => {
+				for await (let t of j.entries()) {
+					if (t.key !== "configuration") return O("configuration");
+					let n = e(t).value, r = n.execution;
+					if (a !== void 0) {
+						let e = typeof r == "object" && r && !Array.isArray(r) ? r.id : void 0;
+						if (D(a) !== D({
+							inputsId: n.inputsId,
+							executionId: e,
+							code: n.app
+						})) return O("configuration");
+					}
+					let i = typeof r == "object" && r && !Array.isArray(r) ? r.definitions : void 0, o = typeof i == "object" && i && !Array.isArray(i) ? i.value : void 0, s = typeof o == "object" && o && !Array.isArray(o) ? o.frontend : void 0;
+					return {
+						digest: D(n),
+						frontend: s
+					};
+				}
+				return O("configuration");
+			}), d = yield* k("capture", () => w.transactional(async (e) => {
+				let t = await K(e, n), a = V();
+				if (t.id !== l.id) return O("credential");
+				let s = D({
+					configuration: G,
+					retained: u.digest,
+					releaseId: i,
+					authority: t.id
+				});
+				return typeof i != "string" || !/^[A-Za-z0-9_-]{1,64}$/.test(i) || typeof r != "string" || !/^[A-Za-z0-9_-]{1,64}$/.test(r) || !Number.isSafeInteger(a + z) || !Number.isFinite(new Date(a + z).getTime()) ? O("capture") : o(e, M, F, {
+					id: r,
+					contextDigest: s
+				}, {
+					maxBytes: B,
+					now: a,
+					capture: (e) => c(e, {
+						...A,
+						scope: F,
+						code: I,
+						app: j,
+						custody: M,
+						routeDiscovery: W,
+						frontendManifest: u.frontend,
+						alias: L,
+						releaseId: i,
+						now: a,
+						expiresAt: a + z
+					})
+				});
+			})), f = yield* s(w, M, F, d, V).pipe(S.mapError(() => new E({ reason: "capture" })));
+			return yield* k("credential", () => w.transactional(async (e) => {
+				if ((await K(e, n)).id !== l.id) return O("credential");
+			})), {
+				id: f.id,
+				digest: f.digest,
+				expiresAt: f.expiresAt
+			};
+		}),
+		open: (e) => k("grant", () => l(w, F, e, {
+			execution: N,
+			key: H,
+			now: V,
+			verificationKeys: U.filter((e) => e.id !== H.id)
+		})),
+		read: (e) => k("read", () => {
+			let t = q(e);
+			return w.transactional((e) => u(e, F, t.snapshot, t, {
+				keys: U,
+				now: V()
+			}));
+		}),
+		readBinding: (e) => k("read", () => {
+			let t = {
+				...q(e),
+				binding: e.binding
+			};
+			return w.transactional((e) => d(e, F, t.snapshot, t, {
+				keys: U,
+				now: V()
+			}));
+		}),
+		readTree: (e) => k("read", () => {
+			let t = {
+				...q(e),
+				name: e.name
+			};
+			return w.transactional((e) => f(e, F, t.snapshot, t, {
+				keys: U,
+				now: V()
+			}));
+		}),
+		render: (e) => k("render", () => {
+			let t = q(e);
+			return p(w, F, t.snapshot, t, {
+				keys: U,
+				execution: N,
+				now: V,
+				...P === void 0 ? {} : { output: {
+					...P,
+					custody: M
+				} }
+			});
+		}).pipe(S.map((e) => e === null ? null : {
+			html: e.html,
+			head: e.head,
+			document: e.document,
+			artifactId: e.output?.id ?? null
+		})),
+		renderSafety: (e) => k("render", () => {
+			if (P === void 0) return O("configuration");
+			let t = q({
+				...e,
+				path: "/"
+			}), n = m(e.documents);
+			return _(w, F, {
+				provider: P.provider,
+				maxBytes: P.maxBytes,
+				admit: async (e) => {
+					let r = await h(e, F, t, n, {
+						keys: U,
+						provider: P.provider,
+						use: P.use,
+						now: V
+					});
+					return g(r);
+				}
+			});
+		}),
+		renderRedirects: (e) => k("render", () => {
+			if (P === void 0) return O("configuration");
+			let t = q({
+				...e,
+				path: "/"
+			}), n = m(e.documents), r = v(e.safety), i = b(e.targets, t.host);
+			return x(w, F, t.snapshot, {
+				...t,
+				documents: n,
+				safety: r,
+				targets: i
+			}, {
+				declaration: {
+					types: A.types,
+					site: A.site,
+					code: I,
+					routing: A.routing,
+					routeDiscovery: W
+				},
+				keys: U,
+				provider: P.provider,
+				use: P.use,
+				maxBytes: P.maxBytes,
+				now: V
+			});
+		}),
+		renderSeo: (e) => k("render", () => {
+			if (P === void 0) return O("configuration");
+			let t = q({
+				...e,
+				path: "/"
+			}), n = e.documents === void 0 ? void 0 : m(e.documents), r = e.safety === void 0 ? void 0 : v(e.safety);
+			return y(w, F, t.snapshot, {
+				...t,
+				...n === void 0 ? {} : { documents: n },
+				...r === void 0 ? {} : { safety: r }
+			}, {
+				keys: U,
+				provider: P.provider,
+				use: P.use,
+				maxBytes: P.maxBytes,
+				now: V
+			});
+		})
+	};
+};
+export { E as CmsBuildSnapshotUnavailable, A as createCmsBuildSnapshots };

package/dist/buildSnapshotTables.js

@@ -0,0 +1,24 @@
+import { publicationStateEntriesTable as e, publicationStatesTable as t } from "./publicationState.js";
+import { buildSnapshotsTable as n, snapshotResourcesTable as r } from "./buildSnapshot.js";
+import { routeDispositionTables as i } from "./routeDispositionStore.js";
+import { cmsPublicRouteTables as a } from "./publicRouteTables.js";
+import { outputActivationTables as o } from "./outputActivationStore.js";
+import { snapshotMediaCapturesTable as s } from "./snapshotMediaCapture.js";
+import { renderReadGrantsTable as c } from "./renderReadGrant.js";
+import { staticPathSetTables as l } from "./staticPathSetStore.js";
+import { buildApplicationCatalogTable as u } from "./buildApplicationCatalogTable.js";
+// src/buildSnapshotTables.ts
+var d = Object.freeze([
+	t,
+	e,
+	n,
+	r,
+	s,
+	c,
+	u,
+	...l,
+	...o,
+	...i,
+	...a
+]);
+export { d as cmsBuildSnapshotTables };

package/dist/bulk.js

@@ -1,15 +1,16 @@
-import { asTyped as e } from "./effectForm.js";
-import { ContentIdConflict as t, ContentNotFound as n, ContentValidationFailed as r, ReferenceUnavailable as i, ReviewRequired as a, RevisionMismatch as o } from "./errors.js";
+import { ContentIdConflict as e, ContentNotFound as t, ContentValidationFailed as n, ReferenceUnavailable as r, ReviewRequired as i, RevisionMismatch as a } from "./errors.js";
+import { asTyped as o } from "./effectForm.js";
 import { applyDerivations as s, publishViolations as c, validateContent as l } from "./validation.js";
 import { CMS_REVISIONS_TABLE as u } from "./contentType.js";
-import { assertApproved as d } from "./review.js";
-import { assertReferencesAvailable as f } from "./availability.js";
-import { setOwner as p, stewardshipOf as m } from "./stewardship.js";
-import { pickDeclared as h, publishRevision as g, revalidateContent as _, saveDraft as v, unpublish as y } from "./write.js";
+import { pickDeclared as d } from "./contentValues.js";
+import { assertApproved as f } from "./review.js";
+import { assertReferencesAvailable as p } from "./availability.js";
+import { setOwner as m, stewardshipOf as h } from "./stewardship.js";
+import { publishRevision as g, revalidateContent as _, saveDraft as v, unpublish as y } from "./write.js";
 import { addToRelease as b, releaseStatusOf as x } from "./release.js";
 import { and as S, eq as C, id as w, json as T, table as E, text as D, timestamp as O } from "@voltro/database";
 import { tenant as k } from "@voltro/plugin-multitenancy/mixin";
-//#region src/bulk.ts
+// src/bulk.ts
 var A = async (e, t, n, r) => (await e.query({
 	table: t,
 	predicate: S(C("id", n), C("site", r.site), C("environment", r.environment), C("locale", r.locale)),
@@ -27,11 +28,11 @@ var A = async (e, t, n, r) => (await e.query({
 		if (typeof n == "string" && n !== "") return n;
 	}
 	return t;
-}, M = (e) => e.targets.map((e) => `${e.path}: ${e.reason}`), N = async (e, t, n, o, p) => {
+}, M = (e) => e.targets.map((e) => `${e.path}: ${e.reason}`), N = async (e, t, a, o, m) => {
 	let g = (e, t = {}) => ({
-		...p,
+		...m,
 		documentId: null,
-		title: p.id,
+		title: m.id,
 		revisionId: null,
 		disposition: "blocked",
 		reason: e,
@@ -40,52 +41,52 @@ var A = async (e, t, n, r) => (await e.query({
 	});
 	if (t === void 0) return g("unknownType");
 	let _ = {
-		...n,
-		locale: p.locale
-	}, v = await A(e, `${t.name}_drafts`, p.id, _);
+		...a,
+		locale: m.locale
+	}, v = await A(e, `${t.name}_drafts`, m.id, _);
 	if (v === void 0) return g("notFound");
 	let y = {
 		documentId: String(v.documentId),
-		title: j(v, p.id)
+		title: j(v, m.id)
 	}, b = (e, t = null) => ({
-		...p,
+		...m,
 		...y,
 		revisionId: t,
 		disposition: e,
 		reason: null,
 		detail: []
 	});
-	if (o.kind === "unpublish") return await A(e, `${t.name}_published`, p.id, _) === void 0 ? g("notPublished", y) : b("ready");
-	if (o.kind === "setOwner") return b((await m(e, t, y.documentId, n)).owner === o.owner ? "unchanged" : "ready");
+	if (o.kind === "unpublish") return await A(e, `${t.name}_published`, m.id, _) === void 0 ? g("notPublished", y) : b("ready");
+	if (o.kind === "setOwner") return b((await h(e, t, y.documentId, a)).owner === o.owner ? "unchanged" : "ready");
 	if (o.kind === "setField") {
 		let e = t.fields[o.field];
 		if (e === void 0 || e.derived !== void 0 || e.kind === "richText" || e.kind === "components") return g("invalid", {
 			...y,
 			detail: [`${o.field}: not a field this can set`]
 		});
-		let n = String(v.revisionId);
-		if (JSON.stringify(v[o.field] ?? null) === JSON.stringify(o.value ?? null)) return b("unchanged", n);
+		let r = String(v.revisionId);
+		if (JSON.stringify(v[o.field] ?? null) === JSON.stringify(o.value ?? null)) return b("unchanged", r);
 		try {
-			l(t, s(t, h(t, {
+			l(t, s(t, d(t, {
 				...v,
 				[o.field]: o.value
 			})));
 		} catch (e) {
-			if (e instanceof r) return g("invalid", {
+			if (e instanceof n) return g("invalid", {
 				...y,
-				revisionId: n,
+				revisionId: r,
 				detail: e.violations.map((e) => `${e.field}: ${e.message}`)
 			});
 			throw e;
 		}
-		return b("ready", n);
+		return b("ready", r);
 	}
 	let S = String(v.revisionId);
 	if (o.kind === "addToRelease" && await x(e, o.releaseId) !== "draft") return g("releaseClosed", {
 		...y,
 		revisionId: S
 	});
-	if ((await A(e, `${t.name}_published`, p.id, _))?.revisionId === S) return b("unchanged", S);
+	if ((await A(e, `${t.name}_published`, m.id, _))?.revisionId === S) return b("unchanged", S);
 	try {
 		let [n] = await e.query({
 			table: u,
@@ -100,13 +101,13 @@ var A = async (e, t, n, r) => (await e.query({
 			revisionId: S,
 			detail: i.map((e) => e.field)
 		});
-		await d(e, t, p.id, _, S), await f(e, t, p.id, r, _);
+		await f(e, t, m.id, _, S), await p(e, t, m.id, r, _);
 	} catch (e) {
-		if (e instanceof a) return g("reviewRequired", {
+		if (e instanceof i) return g("reviewRequired", {
 			...y,
 			revisionId: S
 		});
-		if (e instanceof i) return g("referenceUnavailable", {
+		if (e instanceof r) return g("referenceUnavailable", {
 			...y,
 			revisionId: S,
 			detail: M(e)
@@ -118,82 +119,82 @@ var A = async (e, t, n, r) => (await e.query({
 	let a = new Map(t.map((e) => [e.name, e])), o = [];
 	for (let t of i) o.push(await N(e, a.get(t.type), n, r, t));
 	return o;
-}, F = async (e, t, s, c, l) => {
-	let u = new Map(t.map((e) => [e.name, e])), d = [], f = /* @__PURE__ */ new Set();
-	for (let t of l) {
+}, F = async (e, o, s, c, l) => {
+	let u = new Map(o.map((e) => [e.name, e])), f = [], p = /* @__PURE__ */ new Set();
+	for (let o of l) {
 		let l = {
-			type: t.type,
-			id: t.id,
-			locale: t.locale,
-			title: t.title
+			type: o.type,
+			id: o.id,
+			locale: o.locale,
+			title: o.title
 		};
-		if (t.disposition !== "ready") {
-			d.push({
+		if (o.disposition !== "ready") {
+			f.push({
 				...l,
-				outcome: t.disposition === "unchanged" ? "unchanged" : "failed",
-				reason: t.reason,
-				detail: t.detail
+				outcome: o.disposition === "unchanged" ? "unchanged" : "failed",
+				reason: o.reason,
+				detail: o.detail
 			});
 			continue;
 		}
-		let m = u.get(t.type), _ = {
+		let h = u.get(o.type), _ = {
 			...s,
-			locale: t.locale
+			locale: o.locale
 		};
 		try {
-			if (m === void 0) throw new n({
-				contentType: t.type,
-				id: t.id,
+			if (h === void 0) throw new t({
+				contentType: o.type,
+				id: o.id,
 				stage: "draft"
 			});
-			if (c.kind === "publish") await e.transactional((e) => g(e, m, t.id, _, t.revisionId ?? "")), f.add(m);
+			if (c.kind === "publish") await e.transactional((e) => g(e, h, o.id, _, o.revisionId ?? "")), p.add(h);
 			else if (c.kind === "addToRelease") await e.transactional((e) => b(e, c.releaseId, {
-				type: m,
-				id: t.id,
-				locale: t.locale,
+				type: h,
+				id: o.id,
+				locale: o.locale,
 				action: "publish",
-				revisionId: t.revisionId ?? ""
+				revisionId: o.revisionId ?? ""
 			}));
-			else if (c.kind === "unpublish") await e.transactional((e) => y(e, m, t.id, _)), f.add(m);
+			else if (c.kind === "unpublish") await e.transactional((e) => y(e, h, o.id, _)), p.add(h);
 			else if (c.kind === "setField") await e.transactional(async (e) => {
-				let r = await A(e, `${m.name}_drafts`, t.id, _);
-				if (r === void 0) throw new n({
-					contentType: t.type,
-					id: t.id,
+				let n = await A(e, `${h.name}_drafts`, o.id, _);
+				if (n === void 0) throw new t({
+					contentType: o.type,
+					id: o.id,
 					stage: "draft"
 				});
-				await v(e, m, {
-					...h(m, r),
-					id: t.id,
+				await v(e, h, {
+					...d(h, n),
+					id: o.id,
 					[c.field]: c.value
-				}, _, t.revisionId === null ? {} : { expectedRevision: t.revisionId });
+				}, _, o.revisionId === null ? {} : { expectedRevision: o.revisionId });
 			});
 			else {
-				if (t.documentId === null) throw new n({
-					contentType: t.type,
-					id: t.id,
+				if (o.documentId === null) throw new t({
+					contentType: o.type,
+					id: o.id,
 					stage: "draft"
 				});
-				await p(e, m, t.documentId, s, c.owner);
+				await m(e, h, o.documentId, s, c.owner);
 			}
-			d.push({
+			f.push({
 				...l,
 				outcome: "done",
 				reason: null,
 				detail: []
 			});
 		} catch (e) {
-			let t = e instanceof a ? "reviewRequired" : e instanceof o ? "revisionMoved" : e instanceof r ? "incomplete" : e instanceof i ? "referenceUnavailable" : e instanceof n ? e.stage === "published" ? "notPublished" : "notFound" : "failed", s = e instanceof i ? M(e) : e instanceof r ? e.violations.map((e) => e.field) : t === "failed" ? [e instanceof Error ? e.message : String(e)] : [];
-			d.push({
+			let o = e instanceof i ? "reviewRequired" : e instanceof a ? "revisionMoved" : e instanceof n ? "incomplete" : e instanceof r ? "referenceUnavailable" : e instanceof t ? e.stage === "published" ? "notPublished" : "notFound" : "failed", s = e instanceof r ? M(e) : e instanceof n ? e.violations.map((e) => e.field) : o === "failed" ? [e instanceof Error ? e.message : String(e)] : [];
+			f.push({
 				...l,
 				outcome: "failed",
-				reason: t,
+				reason: o,
 				detail: s
 			});
 		}
 	}
-	for (let e of f) _(e);
-	return d;
+	for (let e of p) _(e);
+	return f;
 }, I = "cms_bulk_runs", L = E(I, {
 	id: w({ prefix: "cbrn" }),
 	site: D().maxLength(64),
@@ -270,12 +271,11 @@ var A = async (e, t, n, r) => (await e.query({
 	skip: void 0,
 	projection: ["id"]
 })).map((e) => String(e.id)), U = [
+	e,
 	t,
 	n,
 	r,
 	i,
-	a,
-	o
-], W = (...t) => e(() => P(...t), ...U), G = (...t) => e(() => F(...t), ...U), K = (...t) => e(() => z(...t)), q = (...t) => e(() => B(...t)), J = (...t) => e(() => V(...t)), Y = (...t) => e(() => H(...t));
-//#endregion
+	a
+], W = (...e) => o(() => P(...e), ...U), G = (...e) => o(() => F(...e), ...U), K = (...e) => o(() => z(...e)), q = (...e) => o(() => B(...e)), J = (...e) => o(() => V(...e)), Y = (...e) => o(() => H(...e));
 export { I as CMS_BULK_RUNS_TABLE, V as bulkRunState, J as bulkRunStateEffect, L as cmsBulkRunsTable, B as continueBulkRun, q as continueBulkRunEffect, P as planBulk, W as planBulkEffect, F as runBulk, G as runBulkEffect, z as startBulkRun, K as startBulkRunEffect, H as unfinishedBulkRuns, Y as unfinishedBulkRunsEffect };

package/dist/cacheIdentity.js

@@ -1,4 +1,4 @@
-//#region src/cacheIdentity.ts
+// src/cacheIdentity.ts
 var e = /^(utm_[a-z]+|fbclid|gclid|dclid|msclkid|mc_[a-z]+|_ga|_gl|ref)$/i, t = (e) => {
 	let t = 2166136261;
 	for (let n of e) t ^= n.codePointAt(0) ?? 0, t = Math.imul(t, 16777619) >>> 0;
@@ -148,5 +148,4 @@ var e = /^(utm_[a-z]+|fbclid|gclid|dclid|msclkid|mc_[a-z]+|_ga|_gl|ref)$/i, t =
 		...o
 	};
 };
-//#endregion
 export { c as compileCacheIdentity, s as contractVariants, u as edgeHeaders, l as sharedCacheable };