canopycms 0.0.0

package/dist/paths/validation.d.ts

@@ -0,0 +1,181 @@
+/**
+ * Path validation utilities.
+ *
+ * Security-focused validation for content paths and slugs.
+ */
+import type { LogicalPath, PhysicalPath, ContentId, BranchName, EntrySlug, CollectionSlug } from './types';
+/**
+ * Validate a content path for security.
+ *
+ * @param path - The path to validate
+ * @param rootPath - The root directory (for traversal check)
+ * @returns Validation result
+ */
+export declare function validateContentPath(path: string, rootPath: string): {
+    valid: boolean;
+    error?: string;
+};
+/**
+ * Validate a collection path.
+ *
+ * @param collectionPath - The collection path to validate
+ * @returns true if valid, false otherwise
+ */
+export declare function isValidCollectionPath(collectionPath: string): boolean;
+/**
+ * Sanitize a string for use in paths by removing dangerous characters.
+ *
+ * @param input - The string to sanitize
+ * @returns Sanitized string safe for path use
+ */
+export declare function sanitizeForPath(input: string): string;
+/**
+ * Check if a path segment contains an embedded content ID.
+ *
+ * Physical paths have segments with embedded 12-char IDs:
+ * - `post.my-slug.abc123def456.json` (entry file)
+ * - `posts.abc123def456` (collection directory)
+ *
+ * @param segment - A single path segment (no slashes)
+ * @returns true if segment contains embedded ID pattern
+ */
+export declare function hasEmbeddedContentId(segment: string): boolean;
+/**
+ * Check if a path appears to be a physical path (contains embedded content IDs).
+ *
+ * Physical paths have the format:
+ * - `content/posts.abc123/post.hello.def456.json`
+ *
+ * Logical paths do not have embedded IDs:
+ * - `content/posts/hello` or `posts/hello`
+ *
+ * @param path - The path to check
+ * @returns true if any segment contains an embedded content ID
+ */
+export declare function looksLikePhysicalPath(path: string): boolean;
+/**
+ * Check if a path appears to be a logical path (no embedded content IDs).
+ *
+ * @param path - The path to check
+ * @returns true if no segments contain embedded content IDs
+ */
+export declare function looksLikeLogicalPath(path: string): boolean;
+/**
+ * Validate and cast a string to LogicalPath.
+ *
+ * Use this at API boundaries to validate incoming path strings
+ * and cast them to the branded LogicalPath type.
+ *
+ * @param path - The path string to validate
+ * @returns Object with success flag and either the typed path or an error
+ *
+ * @example
+ * ```ts
+ * const result = parseLogicalPath(params.collectionPath)
+ * if (!result.ok) {
+ *   return { ok: false, status: 400, error: result.error }
+ * }
+ * const collectionPath: LogicalPath = result.path
+ * ```
+ */
+export declare function parseLogicalPath(path: string): {
+    ok: true;
+    path: LogicalPath;
+} | {
+    ok: false;
+    error: string;
+};
+/**
+ * Validate and cast a string to PhysicalPath.
+ *
+ * Use this at API boundaries to validate incoming path strings
+ * and cast them to the branded PhysicalPath type.
+ *
+ * @param path - The path string to validate
+ * @returns Object with success flag and either the typed path or an error
+ */
+export declare function parsePhysicalPath(path: string): {
+    ok: true;
+    path: PhysicalPath;
+} | {
+    ok: false;
+    error: string;
+};
+/**
+ * Check if a string is a valid 12-character content ID.
+ *
+ * @param id - The string to check
+ * @returns true if valid Base58 12-char ID
+ */
+export declare function isValidContentId(id: string): boolean;
+/**
+ * Parse and validate a ContentId from a string.
+ * Validates Base58 format and 12-character length.
+ *
+ * @param id - The string to validate
+ * @returns Object with success flag and either the typed ID or an error
+ *
+ * @example
+ * ```ts
+ * const result = parseContentId(fileId)
+ * if (!result.ok) {
+ *   throw new Error(result.error)
+ * }
+ * const contentId: ContentId = result.id
+ * ```
+ */
+export declare function parseContentId(id: string): {
+    ok: true;
+    id: ContentId;
+} | {
+    ok: false;
+    error: string;
+};
+/**
+ * Parse and validate a BranchName.
+ * Checks git branch naming rules.
+ *
+ * @param name - The branch name to validate
+ * @returns Object with success flag and either the typed name or an error
+ *
+ * @example
+ * ```ts
+ * const result = parseBranchName(params.branch)
+ * if (!result.ok) {
+ *   return { ok: false, status: 400, error: result.error }
+ * }
+ * const branchName: BranchName = result.name
+ * ```
+ */
+export declare function parseBranchName(name: string): {
+    ok: true;
+    name: BranchName;
+} | {
+    ok: false;
+    error: string;
+};
+/**
+ * Parse and validate a slug (collection or entry).
+ * Validates format and length constraints.
+ *
+ * @param slug - The slug to validate
+ * @param type - Whether this is a collection or entry slug
+ * @returns Object with success flag and either the typed slug or an error
+ *
+ * @example
+ * ```ts
+ * const result = parseSlug(params.slug, 'entry')
+ * if (!result.ok) {
+ *   return { ok: false, status: 400, error: result.error }
+ * }
+ * const entrySlug: EntrySlug = result.slug
+ * ```
+ */
+export declare function parseSlug(slug: string, type: 'collection' | 'entry'): {
+    ok: true;
+    slug: CollectionSlug | EntrySlug;
+} | {
+    ok: false;
+    error: string;
+};
+//# sourceMappingURL=validation.d.ts.map

package/dist/paths/validation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"validation.d.ts","sourceRoot":"","sources":["../../src/paths/validation.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAGH,OAAO,KAAK,EACV,WAAW,EACX,YAAY,EACZ,SAAS,EACT,UAAU,EACV,SAAS,EACT,cAAc,EACf,MAAM,SAAS,CAAA;AAoBhB;;;;;;GAMG;AACH,wBAAgB,mBAAmB,CACjC,IAAI,EAAE,MAAM,EACZ,QAAQ,EAAE,MAAM,GACf;IAAE,KAAK,EAAE,OAAO,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,CAmBpC;AAED;;;;;GAKG;AACH,wBAAgB,qBAAqB,CAAC,cAAc,EAAE,MAAM,GAAG,OAAO,CAcrE;AAED;;;;;GAKG;AACH,wBAAgB,eAAe,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAMrD;AAED;;;;;;;;;GASG;AACH,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAE7D;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAG3D;AAED;;;;;GAKG;AACH,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAE1D;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,gBAAgB,CAC9B,IAAI,EAAE,MAAM,GACX;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,IAAI,EAAE,WAAW,CAAA;CAAE,GAAG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAwBhE;AAED;;;;;;;;GAQG;AACH,wBAAgB,iBAAiB,CAC/B,IAAI,EAAE,MAAM,GACX;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,IAAI,EAAE,YAAY,CAAA;CAAE,GAAG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAwBjE;AAED;;;;;GAKG;AACH,wBAAgB,gBAAgB,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAEpD;AAED;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,cAAc,CAC5B,EAAE,EAAE,MAAM,GACT;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,EAAE,EAAE,SAAS,CAAA;CAAE,GAAG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAa5D;AAED;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,eAAe,CAC7B,IAAI,EAAE,MAAM,GACX;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,IAAI,EAAE,UAAU,CAAA;CAAE,GAAG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CA2C/D;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,SAAS,CACvB,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,YAAY,GAAG,OAAO,GAC3B;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,IAAI,EAAE,cAAc,GAAG,SAAS,CAAA;CAAE,GAAG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAuC/E"}

package/dist/paths/validation.js

@@ -0,0 +1,322 @@
+/**
+ * Path validation utilities.
+ *
+ * Security-focused validation for content paths and slugs.
+ */
+import { normalizeFilesystemPath, hasTraversalSequence } from './normalize';
+/**
+ * Base58 alphabet used for content IDs (excludes ambiguous: 0, O, I, l)
+ */
+const BASE58_PATTERN = '[123456789ABCDEFGHJKLMNPQRSTUVWXYZabcdefghijkmnopqrstuvwxyz]';
+/**
+ * Pattern matching exactly a 12-character content ID
+ */
+const CONTENT_ID_PATTERN = new RegExp(`^${BASE58_PATTERN}{12}$`);
+/**
+ * Pattern matching a physical path segment with embedded ID.
+ * Matches patterns like:
+ * - `post.my-slug.abc123def456.json` (entry)
+ * - `posts.abc123def456` (collection directory)
+ */
+const PHYSICAL_SEGMENT_PATTERN = new RegExp(`\\.${BASE58_PATTERN}{12}(?:\\.[a-z]+)?$`);
+/**
+ * Validate a content path for security.
+ *
+ * @param path - The path to validate
+ * @param rootPath - The root directory (for traversal check)
+ * @returns Validation result
+ */
+export function validateContentPath(path, rootPath) {
+    const normalized = normalizeFilesystemPath(path);
+    // Check for traversal sequences
+    if (hasTraversalSequence(normalized)) {
+        return { valid: false, error: 'Path contains traversal sequence' };
+    }
+    // Check path doesn't escape root
+    const normalizedRoot = normalizeFilesystemPath(rootPath);
+    if (!normalized.startsWith(normalizedRoot) && normalized !== normalizedRoot) {
+        // Allow paths that are relative within the root
+        const normalizedPath = `${normalizedRoot}/${normalized}`;
+        if (hasTraversalSequence(normalizedPath)) {
+            return { valid: false, error: 'Path escapes root directory' };
+        }
+    }
+    return { valid: true };
+}
+/**
+ * Validate a collection path.
+ *
+ * @param collectionPath - The collection path to validate
+ * @returns true if valid, false otherwise
+ */
+export function isValidCollectionPath(collectionPath) {
+    if (!collectionPath || collectionPath.length === 0) {
+        return false;
+    }
+    // Normalize and check for traversal
+    const normalized = normalizeFilesystemPath(collectionPath);
+    if (hasTraversalSequence(normalized)) {
+        return false;
+    }
+    // Collection paths should only contain alphanumeric, hyphens, underscores, and forward slashes
+    const validPattern = /^[a-zA-Z0-9_/-]+$/;
+    return validPattern.test(normalized);
+}
+/**
+ * Sanitize a string for use in paths by removing dangerous characters.
+ *
+ * @param input - The string to sanitize
+ * @returns Sanitized string safe for path use
+ */
+export function sanitizeForPath(input) {
+    return input
+        .replace(/[<>:"|?*\\]/g, '') // Remove invalid filesystem chars
+        .replace(/\.{2,}/g, '.') // Collapse multiple dots
+        .replace(/^\./, '') // Remove leading dot
+        .trim();
+}
+/**
+ * Check if a path segment contains an embedded content ID.
+ *
+ * Physical paths have segments with embedded 12-char IDs:
+ * - `post.my-slug.abc123def456.json` (entry file)
+ * - `posts.abc123def456` (collection directory)
+ *
+ * @param segment - A single path segment (no slashes)
+ * @returns true if segment contains embedded ID pattern
+ */
+export function hasEmbeddedContentId(segment) {
+    return PHYSICAL_SEGMENT_PATTERN.test(segment);
+}
+/**
+ * Check if a path appears to be a physical path (contains embedded content IDs).
+ *
+ * Physical paths have the format:
+ * - `content/posts.abc123/post.hello.def456.json`
+ *
+ * Logical paths do not have embedded IDs:
+ * - `content/posts/hello` or `posts/hello`
+ *
+ * @param path - The path to check
+ * @returns true if any segment contains an embedded content ID
+ */
+export function looksLikePhysicalPath(path) {
+    const segments = path.split('/');
+    return segments.some(hasEmbeddedContentId);
+}
+/**
+ * Check if a path appears to be a logical path (no embedded content IDs).
+ *
+ * @param path - The path to check
+ * @returns true if no segments contain embedded content IDs
+ */
+export function looksLikeLogicalPath(path) {
+    return !looksLikePhysicalPath(path);
+}
+/**
+ * Validate and cast a string to LogicalPath.
+ *
+ * Use this at API boundaries to validate incoming path strings
+ * and cast them to the branded LogicalPath type.
+ *
+ * @param path - The path string to validate
+ * @returns Object with success flag and either the typed path or an error
+ *
+ * @example
+ * ```ts
+ * const result = parseLogicalPath(params.collectionPath)
+ * if (!result.ok) {
+ *   return { ok: false, status: 400, error: result.error }
+ * }
+ * const collectionPath: LogicalPath = result.path
+ * ```
+ */
+export function parseLogicalPath(path) {
+    // Basic validation
+    if (!path || typeof path !== 'string') {
+        return { ok: false, error: 'Path is required' };
+    }
+    // Normalize backslashes to forward slashes (consistent with parsePermissionPath)
+    const normalized = path.replace(/\\/g, '/');
+    // Security check
+    if (hasTraversalSequence(normalized)) {
+        return { ok: false, error: 'Path contains traversal sequence' };
+    }
+    // Check it's not a physical path
+    if (looksLikePhysicalPath(normalized)) {
+        return {
+            ok: false,
+            error: 'Path appears to be a physical path (contains embedded content ID). Expected a logical path.',
+        };
+    }
+    return { ok: true, path: normalized };
+}
+/**
+ * Validate and cast a string to PhysicalPath.
+ *
+ * Use this at API boundaries to validate incoming path strings
+ * and cast them to the branded PhysicalPath type.
+ *
+ * @param path - The path string to validate
+ * @returns Object with success flag and either the typed path or an error
+ */
+export function parsePhysicalPath(path) {
+    // Basic validation
+    if (!path || typeof path !== 'string') {
+        return { ok: false, error: 'Path is required' };
+    }
+    // Normalize backslashes to forward slashes (consistent with parseLogicalPath)
+    const normalized = path.replace(/\\/g, '/');
+    // Security check
+    if (hasTraversalSequence(normalized)) {
+        return { ok: false, error: 'Path contains traversal sequence' };
+    }
+    // Check it looks like a physical path
+    if (!looksLikePhysicalPath(normalized)) {
+        return {
+            ok: false,
+            error: 'Path appears to be a logical path (no embedded content ID). Expected a physical path.',
+        };
+    }
+    return { ok: true, path: normalized };
+}
+/**
+ * Check if a string is a valid 12-character content ID.
+ *
+ * @param id - The string to check
+ * @returns true if valid Base58 12-char ID
+ */
+export function isValidContentId(id) {
+    return CONTENT_ID_PATTERN.test(id);
+}
+/**
+ * Parse and validate a ContentId from a string.
+ * Validates Base58 format and 12-character length.
+ *
+ * @param id - The string to validate
+ * @returns Object with success flag and either the typed ID or an error
+ *
+ * @example
+ * ```ts
+ * const result = parseContentId(fileId)
+ * if (!result.ok) {
+ *   throw new Error(result.error)
+ * }
+ * const contentId: ContentId = result.id
+ * ```
+ */
+export function parseContentId(id) {
+    if (!id || typeof id !== 'string') {
+        return { ok: false, error: 'Content ID is required' };
+    }
+    if (!isValidContentId(id)) {
+        return {
+            ok: false,
+            error: `Invalid content ID format (expected 12 Base58 characters, got: ${id})`,
+        };
+    }
+    return { ok: true, id: id };
+}
+/**
+ * Parse and validate a BranchName.
+ * Checks git branch naming rules.
+ *
+ * @param name - The branch name to validate
+ * @returns Object with success flag and either the typed name or an error
+ *
+ * @example
+ * ```ts
+ * const result = parseBranchName(params.branch)
+ * if (!result.ok) {
+ *   return { ok: false, status: 400, error: result.error }
+ * }
+ * const branchName: BranchName = result.name
+ * ```
+ */
+export function parseBranchName(name) {
+    if (!name || typeof name !== 'string') {
+        return { ok: false, error: 'Branch name is required' };
+    }
+    // Length limit (branch names become directory names)
+    if (name.length > 250) {
+        return { ok: false, error: 'Branch name too long (max 250 characters)' };
+    }
+    // Git branch name rules
+    if (name.includes('..')) {
+        return { ok: false, error: 'Branch name cannot contain ".."' };
+    }
+    if (name.startsWith('/') || name.endsWith('/') || name.includes('//')) {
+        return { ok: false, error: 'Invalid branch name format (invalid slashes)' };
+    }
+    if (name.includes(' ')) {
+        return { ok: false, error: 'Branch name cannot contain spaces' };
+    }
+    // Additional git restrictions
+    if (name.startsWith('.') || name.endsWith('.')) {
+        return { ok: false, error: 'Branch name cannot start or end with a dot' };
+    }
+    if (name.includes('@{')) {
+        return { ok: false, error: 'Branch name cannot contain "@{"' };
+    }
+    // Git-forbidden characters: ~ ^ : ? * [ \ and control chars
+    // eslint-disable-next-line no-control-regex -- intentional: git forbids control characters in branch names
+    if (/[~^:?*[\\\x00-\x1f\x7f]/.test(name)) {
+        return { ok: false, error: 'Branch name contains invalid characters' };
+    }
+    if (name.endsWith('.lock')) {
+        return { ok: false, error: 'Branch name cannot end with ".lock"' };
+    }
+    return { ok: true, name: name };
+}
+/**
+ * Parse and validate a slug (collection or entry).
+ * Validates format and length constraints.
+ *
+ * @param slug - The slug to validate
+ * @param type - Whether this is a collection or entry slug
+ * @returns Object with success flag and either the typed slug or an error
+ *
+ * @example
+ * ```ts
+ * const result = parseSlug(params.slug, 'entry')
+ * if (!result.ok) {
+ *   return { ok: false, status: 400, error: result.error }
+ * }
+ * const entrySlug: EntrySlug = result.slug
+ * ```
+ */
+export function parseSlug(slug, type) {
+    if (!slug || typeof slug !== 'string') {
+        return {
+            ok: false,
+            error: `${type === 'collection' ? 'Collection' : 'Entry'} slug is required`,
+        };
+    }
+    // Check length (filesystem path safety)
+    if (slug.length > 64) {
+        return { ok: false, error: 'Slug too long (max 64 characters)' };
+    }
+    // Check for path separators and traversal
+    if (slug.includes('/') || slug.includes('\\')) {
+        return {
+            ok: false,
+            error: 'Slug cannot contain path separators',
+        };
+    }
+    if (slug === '.' || slug === '..') {
+        return {
+            ok: false,
+            error: 'Slug cannot be a traversal sequence',
+        };
+    }
+    // Validation from ContentStore.renameEntry
+    if (!/^[a-z0-9][a-z0-9-]*$/.test(slug)) {
+        return {
+            ok: false,
+            error: 'Slug must start with a letter or number and contain only lowercase letters, numbers, and hyphens',
+        };
+    }
+    // Cast to appropriate branded type
+    return { ok: true, slug: slug };
+}
+//# sourceMappingURL=validation.js.map

package/dist/paths/validation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"validation.js","sourceRoot":"","sources":["../../src/paths/validation.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,uBAAuB,EAAE,oBAAoB,EAAE,MAAM,aAAa,CAAA;AAU3E;;GAEG;AACH,MAAM,cAAc,GAAG,8DAA8D,CAAA;AAErF;;GAEG;AACH,MAAM,kBAAkB,GAAG,IAAI,MAAM,CAAC,IAAI,cAAc,OAAO,CAAC,CAAA;AAEhE;;;;;GAKG;AACH,MAAM,wBAAwB,GAAG,IAAI,MAAM,CAAC,MAAM,cAAc,qBAAqB,CAAC,CAAA;AAEtF;;;;;;GAMG;AACH,MAAM,UAAU,mBAAmB,CACjC,IAAY,EACZ,QAAgB;IAEhB,MAAM,UAAU,GAAG,uBAAuB,CAAC,IAAI,CAAC,CAAA;IAEhD,gCAAgC;IAChC,IAAI,oBAAoB,CAAC,UAAU,CAAC,EAAE,CAAC;QACrC,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,kCAAkC,EAAE,CAAA;IACpE,CAAC;IAED,iCAAiC;IACjC,MAAM,cAAc,GAAG,uBAAuB,CAAC,QAAQ,CAAC,CAAA;IACxD,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,cAAc,CAAC,IAAI,UAAU,KAAK,cAAc,EAAE,CAAC;QAC5E,gDAAgD;QAChD,MAAM,cAAc,GAAG,GAAG,cAAc,IAAI,UAAU,EAAE,CAAA;QACxD,IAAI,oBAAoB,CAAC,cAAc,CAAC,EAAE,CAAC;YACzC,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,6BAA6B,EAAE,CAAA;QAC/D,CAAC;IACH,CAAC;IAED,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAA;AACxB,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,qBAAqB,CAAC,cAAsB;IAC1D,IAAI,CAAC,cAAc,IAAI,cAAc,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACnD,OAAO,KAAK,CAAA;IACd,CAAC;IAED,oCAAoC;IACpC,MAAM,UAAU,GAAG,uBAAuB,CAAC,cAAc,CAAC,CAAA;IAC1D,IAAI,oBAAoB,CAAC,UAAU,CAAC,EAAE,CAAC;QACrC,OAAO,KAAK,CAAA;IACd,CAAC;IAED,+FAA+F;IAC/F,MAAM,YAAY,GAAG,mBAAmB,CAAA;IACxC,OAAO,YAAY,CAAC,IAAI,CAAC,UAAU,CAAC,CAAA;AACtC,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,eAAe,CAAC,KAAa;IAC3C,OAAO,KAAK;SACT,OAAO,CAAC,cAAc,EAAE,EAAE,CAAC,CAAC,kCAAkC;SAC9D,OAAO,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC,yBAAyB;SACjD,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,qBAAqB;SACxC,IAAI,EAAE,CAAA;AACX,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,oBAAoB,CAAC,OAAe;IAClD,OAAO,wBAAwB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;AAC/C,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,qBAAqB,CAAC,IAAY;IAChD,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;IAChC,OAAO,QAAQ,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAA;AAC5C,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,oBAAoB,CAAC,IAAY;IAC/C,OAAO,CAAC,qBAAqB,CAAC,IAAI,CAAC,CAAA;AACrC,CAAC;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,UAAU,gBAAgB,CAC9B,IAAY;IAEZ,mBAAmB;IACnB,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;QACtC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,kBAAkB,EAAE,CAAA;IACjD,CAAC;IAED,iFAAiF;IACjF,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAA;IAE3C,iBAAiB;IACjB,IAAI,oBAAoB,CAAC,UAAU,CAAC,EAAE,CAAC;QACrC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,kCAAkC,EAAE,CAAA;IACjE,CAAC;IAED,iCAAiC;IACjC,IAAI,qBAAqB,CAAC,UAAU,CAAC,EAAE,CAAC;QACtC,OAAO;YACL,EAAE,EAAE,KAAK;YACT,KAAK,EACH,6FAA6F;SAChG,CAAA;IACH,CAAC;IAED,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,UAAyB,EAAE,CAAA;AACtD,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,iBAAiB,CAC/B,IAAY;IAEZ,mBAAmB;IACnB,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;QACtC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,kBAAkB,EAAE,CAAA;IACjD,CAAC;IAED,8EAA8E;IAC9E,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAA;IAE3C,iBAAiB;IACjB,IAAI,oBAAoB,CAAC,UAAU,CAAC,EAAE,CAAC;QACrC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,kCAAkC,EAAE,CAAA;IACjE,CAAC;IAED,sCAAsC;IACtC,IAAI,CAAC,qBAAqB,CAAC,UAAU,CAAC,EAAE,CAAC;QACvC,OAAO;YACL,EAAE,EAAE,KAAK;YACT,KAAK,EACH,uFAAuF;SAC1F,CAAA;IACH,CAAC;IAED,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,UAA0B,EAAE,CAAA;AACvD,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,gBAAgB,CAAC,EAAU;IACzC,OAAO,kBAAkB,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;AACpC,CAAC;AAED;;;;;;;;;;;;;;;GAeG;AACH,MAAM,UAAU,cAAc,CAC5B,EAAU;IAEV,IAAI,CAAC,EAAE,IAAI,OAAO,EAAE,KAAK,QAAQ,EAAE,CAAC;QAClC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,wBAAwB,EAAE,CAAA;IACvD,CAAC;IAED,IAAI,CAAC,gBAAgB,CAAC,EAAE,CAAC,EAAE,CAAC;QAC1B,OAAO;YACL,EAAE,EAAE,KAAK;YACT,KAAK,EAAE,kEAAkE,EAAE,GAAG;SAC/E,CAAA;IACH,CAAC;IAED,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,EAAe,EAAE,CAAA;AAC1C,CAAC;AAED;;;;;;;;;;;;;;;GAeG;AACH,MAAM,UAAU,eAAe,CAC7B,IAAY;IAEZ,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;QACtC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,yBAAyB,EAAE,CAAA;IACxD,CAAC;IAED,qDAAqD;IACrD,IAAI,IAAI,CAAC,MAAM,GAAG,GAAG,EAAE,CAAC;QACtB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,2CAA2C,EAAE,CAAA;IAC1E,CAAC;IAED,wBAAwB;IACxB,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACxB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,iCAAiC,EAAE,CAAA;IAChE,CAAC;IAED,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACtE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,8CAA8C,EAAE,CAAA;IAC7E,CAAC;IAED,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QACvB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,mCAAmC,EAAE,CAAA;IAClE,CAAC;IAED,8BAA8B;IAC9B,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QAC/C,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,4CAA4C,EAAE,CAAA;IAC3E,CAAC;IAED,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACxB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,iCAAiC,EAAE,CAAA;IAChE,CAAC;IAED,4DAA4D;IAC5D,2GAA2G;IAC3G,IAAI,yBAAyB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QACzC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,yCAAyC,EAAE,CAAA;IACxE,CAAC;IAED,IAAI,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;QAC3B,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,qCAAqC,EAAE,CAAA;IACpE,CAAC;IAED,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,IAAkB,EAAE,CAAA;AAC/C,CAAC;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,UAAU,SAAS,CACvB,IAAY,EACZ,IAA4B;IAE5B,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;QACtC,OAAO;YACL,EAAE,EAAE,KAAK;YACT,KAAK,EAAE,GAAG,IAAI,KAAK,YAAY,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,OAAO,mBAAmB;SAC5E,CAAA;IACH,CAAC;IAED,wCAAwC;IACxC,IAAI,IAAI,CAAC,MAAM,GAAG,EAAE,EAAE,CAAC;QACrB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,mCAAmC,EAAE,CAAA;IAClE,CAAC;IAED,0CAA0C;IAC1C,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QAC9C,OAAO;YACL,EAAE,EAAE,KAAK;YACT,KAAK,EAAE,qCAAqC;SAC7C,CAAA;IACH,CAAC;IAED,IAAI,IAAI,KAAK,GAAG,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;QAClC,OAAO;YACL,EAAE,EAAE,KAAK;YACT,KAAK,EAAE,qCAAqC;SAC7C,CAAA;IACH,CAAC;IAED,2CAA2C;IAC3C,IAAI,CAAC,sBAAsB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QACvC,OAAO;YACL,EAAE,EAAE,KAAK;YACT,KAAK,EACH,kGAAkG;SACrG,CAAA;IACH,CAAC;IAED,mCAAmC;IACnC,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,IAAkC,EAAE,CAAA;AAC/D,CAAC"}

package/dist/reference-resolver.d.ts

@@ -0,0 +1,58 @@
+import type { ContentStore } from './content-store';
+import type { ContentIdIndex } from './content-id-index';
+import type { LogicalPath, EntrySlug } from './paths';
+export interface ResolvedReference {
+    id: string;
+    exists: boolean;
+    displayValue: string;
+    collection?: LogicalPath;
+    slug?: EntrySlug;
+}
+export interface ReferenceOption {
+    id: string;
+    label: string;
+    collection: string;
+}
+/**
+ * ReferenceResolver resolves content IDs to display values for reference fields.
+ *
+ * This class provides utilities for:
+ * - Resolving a single ID to its display value (e.g., title)
+ * - Loading all available options for a reference field
+ * - Filtering options by collection constraints
+ * - Searching options by display value
+ */
+export declare class ReferenceResolver {
+    private store;
+    private idIndex;
+    constructor(store: ContentStore, idIndex: ContentIdIndex);
+    /**
+     * Resolve a content ID to a display value.
+     * Returns null if the ID doesn't exist or points to a collection.
+     *
+     * @param id - The content ID to resolve
+     * @param displayField - The field to use for display value (default: 'title')
+     */
+    resolve(id: string, displayField?: string): Promise<ResolvedReference | null>;
+    /**
+     * Load all available reference options for a reference field.
+     *
+     * This method scans the specified collections and returns options
+     * suitable for a dropdown/select field.
+     *
+     * @param collections - Collection paths to search (e.g., ['posts', 'docs'])
+     * @param displayField - Field to use for option labels (default: 'title')
+     * @param search - Optional search string to filter options
+     */
+    loadReferenceOptions(collections: LogicalPath[], displayField?: string, search?: string): Promise<ReferenceOption[]>;
+    /**
+     * Helper to list all entries in a collection.
+     */
+    private listEntriesInCollection;
+    /**
+     * Resolve multiple IDs at once.
+     * Useful for displaying lists of referenced items.
+     */
+    resolveMany(ids: string[], displayField?: string): Promise<(ResolvedReference | null)[]>;
+}
+//# sourceMappingURL=reference-resolver.d.ts.map

package/dist/reference-resolver.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"reference-resolver.d.ts","sourceRoot":"","sources":["../src/reference-resolver.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAA;AACnD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAA;AAExD,OAAO,KAAK,EAAE,WAAW,EAAgB,SAAS,EAAE,MAAM,SAAS,CAAA;AAEnE,MAAM,WAAW,iBAAiB;IAChC,EAAE,EAAE,MAAM,CAAA;IACV,MAAM,EAAE,OAAO,CAAA;IACf,YAAY,EAAE,MAAM,CAAA;IACpB,UAAU,CAAC,EAAE,WAAW,CAAA;IACxB,IAAI,CAAC,EAAE,SAAS,CAAA;CACjB;AAED,MAAM,WAAW,eAAe;IAC9B,EAAE,EAAE,MAAM,CAAA;IACV,KAAK,EAAE,MAAM,CAAA;IACb,UAAU,EAAE,MAAM,CAAA;CACnB;AAED;;;;;;;;GAQG;AACH,qBAAa,iBAAiB;IAE1B,OAAO,CAAC,KAAK;IACb,OAAO,CAAC,OAAO;gBADP,KAAK,EAAE,YAAY,EACnB,OAAO,EAAE,cAAc;IAGjC;;;;;;OAMG;IACG,OAAO,CAAC,EAAE,EAAE,MAAM,EAAE,YAAY,SAAU,GAAG,OAAO,CAAC,iBAAiB,GAAG,IAAI,CAAC;IAgCpF;;;;;;;;;OASG;IACG,oBAAoB,CACxB,WAAW,EAAE,WAAW,EAAE,EAC1B,YAAY,SAAU,EACtB,MAAM,CAAC,EAAE,MAAM,GACd,OAAO,CAAC,eAAe,EAAE,CAAC;IA+C7B;;OAEG;YACW,uBAAuB;IAUrC;;;OAGG;IACG,WAAW,CAAC,GAAG,EAAE,MAAM,EAAE,EAAE,YAAY,SAAU,GAAG,OAAO,CAAC,CAAC,iBAAiB,GAAG,IAAI,CAAC,EAAE,CAAC;CAGhG"}