ghost 6.57.1 → 6.58.0

package/core/server/services/explore-ping/explore-ping-service.ts

@@ -1,198 +0,0 @@
-type SettingsCache = {
-    get(key: string): unknown;
-};
-
-type Config = {
-    get(key: string): unknown;
-};
-
-type Labs = {
-    isSet(flag: string): boolean;
-};
-
-type Logging = {
-    info(...args: unknown[]): void;
-    warn(...args: unknown[]): void;
-};
-
-type GhostVersion = {
-    full: string;
-};
-
-type RequestFn = (url: string, options: Record<string, unknown>) => Promise<{statusCode: number; statusMessage?: string}>;
-
-type PostsService = {
-    stats: {
-        getMostRecentlyPublishedPostDate(): Promise<Date | null>;
-        getFirstPublishedPostDate(): Promise<Date | null>;
-        getTotalPostsPublished(): Promise<number | null>;
-    };
-};
-
-type MembersService = {
-    stats: {
-        getTotalMembers(): Promise<number>;
-    };
-};
-
-type MrrByCurrency = {
-    currency: string;
-    mrr: number;
-};
-
-type StatsService = {
-    api?: {
-        mrr?: {
-            getCurrentMrr(): Promise<MrrByCurrency[]>;
-        };
-    };
-} | null;
-
-type ExplorePayload = {
-    ghost: string;
-    site_uuid: unknown;
-    url: unknown;
-    theme: unknown;
-    facebook: unknown;
-    twitter: unknown;
-    posts_total?: number | null;
-    posts_last?: string | null;
-    posts_first?: string | null;
-    members_total?: number | null;
-    mrr?: MrrByCurrency[] | null;
-};
-
-export type ExplorePingServiceDeps = {
-    settingsCache: SettingsCache;
-    config: Config;
-    labs: Labs;
-    logging: Logging;
-    ghostVersion: GhostVersion;
-    request: RequestFn;
-    posts: PostsService;
-    members: MembersService;
-    statsService: StatsService;
-};
-
-export class ExplorePingService {
-    settingsCache: SettingsCache;
-    config: Config;
-    labs: Labs;
-    logging: Logging;
-    ghostVersion: GhostVersion;
-    request: RequestFn;
-    posts: PostsService;
-    members: MembersService;
-    statsService: StatsService;
-
-    constructor({settingsCache, config, labs, logging, ghostVersion, request, posts, members, statsService}: ExplorePingServiceDeps) {
-        this.settingsCache = settingsCache;
-        this.config = config;
-        this.labs = labs;
-        this.logging = logging;
-        this.ghostVersion = ghostVersion;
-        this.request = request;
-        this.posts = posts;
-        this.members = members;
-        this.statsService = statsService;
-    }
-
-    async constructPayload(): Promise<ExplorePayload> {
-        const payload: ExplorePayload = {
-            ghost: this.ghostVersion.full,
-            site_uuid: this.settingsCache.get('site_uuid'),
-            url: this.config.get('url'),
-            theme: this.settingsCache.get('active_theme'),
-            facebook: this.settingsCache.get('facebook'),
-            twitter: this.settingsCache.get('twitter')
-        };
-
-        try {
-            const [totalPosts, lastPublishedAt, firstPublishedAt] = await Promise.all([
-                this.posts.stats.getTotalPostsPublished(),
-                this.posts.stats.getMostRecentlyPublishedPostDate(),
-                this.posts.stats.getFirstPublishedPostDate()
-            ]);
-
-            payload.posts_total = totalPosts;
-            payload.posts_last = lastPublishedAt ? lastPublishedAt.toISOString() : null;
-            payload.posts_first = firstPublishedAt ? firstPublishedAt.toISOString() : null;
-        } catch (err) {
-            this.logging.warn('Failed to fetch post statistics', {
-                error: (err as Error).message,
-                context: 'explore-ping-service'
-            });
-            payload.posts_total = null;
-            payload.posts_last = null;
-            payload.posts_first = null;
-        }
-
-        if (this.settingsCache.get('explore_ping_growth')) {
-            try {
-                const totalMembers = await this.members.stats.getTotalMembers();
-                payload.members_total = totalMembers;
-
-                // Only send real MRR data when Stripe is in live mode
-                // When using test keys (stripe_connect_livemode is false/null), send empty array
-                const isStripeLiveMode = this.settingsCache.get('stripe_connect_livemode') === true;
-                if (isStripeLiveMode && this.statsService?.api?.mrr) {
-                    const mrrByCurrency = await this.statsService.api.mrr.getCurrentMrr();
-                    // Return array of {currency, mrr} objects
-                    payload.mrr = mrrByCurrency;
-                } else {
-                    payload.mrr = [];
-                }
-            } catch (err) {
-                this.logging.warn('Failed to fetch member statistics', {
-                    error: (err as Error).message,
-                    context: 'explore-ping-service'
-                });
-                payload.members_total = null;
-                payload.mrr = null;
-            }
-        }
-
-        return payload;
-    }
-
-    async makeRequest(exploreUrl: string, payload: ExplorePayload | Record<string, unknown>): Promise<{statusCode: number; statusMessage?: string} | undefined> {
-        const json = JSON.stringify(payload);
-        this.logging.info('Pinging Explore with Payload', exploreUrl, json);
-
-        try {
-            const response = await this.request(exploreUrl, {
-                method: 'POST',
-                body: json,
-                headers: {
-                    'Content-Type': 'application/json'
-                }
-            });
-
-            this.logging.info('Explore Response', response.statusCode, response.statusMessage);
-
-            return response;
-        } catch (err) {
-            this.logging.warn('Explore Error', (err as Error).message);
-        }
-    }
-
-    async ping(): Promise<void> {
-        if (!this.labs.isSet('explore')) {
-            return;
-        }
-
-        const exploreUrl = this.config.get('explore:update_url') as string | undefined;
-        if (!exploreUrl) {
-            this.logging.warn('Explore URL not set');
-            return;
-        }
-
-        if (!this.settingsCache.get('explore_ping')) {
-            this.logging.info('Explore ping disabled');
-            return;
-        }
-
-        const payload = await this.constructPayload();
-        await this.makeRequest(exploreUrl, payload);
-    }
-}

package/core/server/services/explore-ping/index.ts

@@ -1,42 +0,0 @@
-import {ExplorePingService} from './explore-ping-service';
-
-const config = require('../../../shared/config');
-const labs = require('../../../shared/labs');
-const logging = require('@tryghost/logging');
-const ghostVersion = require('@tryghost/version');
-const request = require('@tryghost/request');
-const settingsCache = require('../../../shared/settings-cache');
-const posts = require('../posts/posts-service-instance');
-const members = require('../members');
-const statsService = require('../stats');
-
-// Export the creation function for testing
-export function createService(): ExplorePingService {
-    return new ExplorePingService({
-        settingsCache,
-        config,
-        labs,
-        logging,
-        ghostVersion,
-        request,
-        posts: posts(),
-        members,
-        statsService
-    });
-}
-
-export async function init(): Promise<void> {
-    // The explore ping is a background "phone home" request. It should not run
-    // in the test environment (cf. the update-check service, which gates on the
-    // same environments), where there is no explore URL configured.
-    if (!config.isProductionOrDevelopment()) {
-        return;
-    }
-
-    const explorePingService = createService();
-
-    // The final intention is to have this run on a schedule
-    // For the initial version, we'll just ping when the server starts
-    // Without waiting for the response
-    explorePingService.ping();
-}

package/core/server/services/files/file-type-utils.ts

@@ -1,56 +0,0 @@
-import path from 'path';
-import {lookup} from 'mime-types';
-
-const CONTENT_TYPE_OVERRIDES = new Map<string, string>([
-    ['.html', 'text/plain'],
-    ['.htm', 'text/plain'],
-    ['.js', 'text/plain'],
-    ['.css', 'text/plain'],
-    ['.xml', 'text/plain']
-]);
-
-const BROWSER_RENDERABLE_TYPES = new Set<string>([
-    'image/jpeg',
-    'image/png',
-    'image/gif',
-    'image/webp',
-    'application/pdf',
-    'application/json',
-    'audio/mpeg',
-    'audio/wave',
-    'audio/mp4',
-    'video/mp4',
-    'video/quicktime',
-    'font/otf',
-    'font/woff',
-    'font/woff2',
-    'text/plain'
-]);
-
-/**
- * Determines the content type to store/serve for a given filename.
- *
- * Three-tier resolution:
- * 1. Override map — forced to text/plain to prevent browser execution
- * 2. Browser-renderable — type preserved as safe for browser rendering
- * 3. Fallback — application/octet-stream to force download
- */
-function getStorageContentType(filename: string): string {
-    const ext = path.extname(filename).toLowerCase();
-
-    const override = CONTENT_TYPE_OVERRIDES.get(ext);
-    if (override) {
-        return override;
-    }
-
-    const mimeType = lookup(ext);
-    if (mimeType && BROWSER_RENDERABLE_TYPES.has(mimeType)) {
-        return mimeType;
-    }
-
-    return 'application/octet-stream';
-}
-
-export {
-    getStorageContentType
-};

package/core/server/services/gift-links/actions.ts

@@ -1,51 +0,0 @@
-import logging from '@tryghost/logging';
-
-export interface Actor {
-    id: string;
-    type: 'user' | 'integration';
-}
-
-export interface RequestContext {
-    actor: Actor | null;
-}
-
-export interface ActionRecorder {
-    add(data: Record<string, unknown>, options: {autoRefresh: boolean}): Promise<unknown>;
-}
-
-// The history UI only surfaces a verb-specific label (action_name) for 'edited' events; 'added' and
-// 'deleted' render as the bare event. So 'reset' maps to 'edited' to read as "reset", while
-// 'add'/'remove' read as plain "added"/"deleted".
-const COMMANDS = {
-    add: 'added',
-    reset: 'edited',
-    remove: 'deleted'
-} as const satisfies Record<string, 'added' | 'edited' | 'deleted'>;
-
-export type GiftLinkVerb = keyof typeof COMMANDS;
-
-export type RecordGiftLinkAction =
-    (input: {context: RequestContext; verb: GiftLinkVerb; subject: string | null}) => Promise<void>;
-
-// Best-effort action-log write: a failed action must never fail the command that triggered it.
-export async function recordGiftLinkAction(
-    {Action, context, verb, subject}:
-    {Action: ActionRecorder; context: RequestContext; verb: GiftLinkVerb; subject: string | null}
-): Promise<void> {
-    if (!context.actor) {
-        return;
-    }
-    const event = COMMANDS[verb];
-    try {
-        await Action.add({
-            event,
-            resource_type: 'gift_link',
-            resource_id: subject,
-            actor_type: context.actor.type,
-            actor_id: context.actor.id,
-            ...(event === 'edited' ? {context: {action_name: verb}} : {})
-        }, {autoRefresh: false});
-    } catch (err) {
-        logging.error(err);
-    }
-}

package/core/server/services/gift-links/codec.ts

@@ -1,16 +0,0 @@
-import {z} from 'zod';
-import {camelKeys, snakeKeys} from '../../lib/case-keys';
-import {DbGiftLink} from './schema';
-import {GiftLink} from './models';
-
-export const GiftLinkRow = DbGiftLink.pick({
-    token: true,
-    created_at: true
-});
-
-export const giftLinkCodec = z.codec(GiftLinkRow, GiftLink, {
-    decode: row => camelKeys(row),
-    encode: link => snakeKeys(link)
-});
-
-export const giftLinkColumns = Object.keys(GiftLinkRow.shape).map(column => `gift_links.${column}`);

package/core/server/services/gift-links/index.ts

@@ -1,20 +0,0 @@
-import {GiftLinksService} from './service';
-import {recordGiftLinkAction, type RecordGiftLinkAction} from './actions';
-
-export type {RequestContext} from './actions';
-
-// Constructed by init() at boot, not at import: knex is only available once the DB has connected.
-export let service: GiftLinksService | undefined;
-
-export function init(): void {
-    if (service) {
-        return;
-    }
-
-    const {knex} = require('../../data/db');
-    const models = require('../../models');
-
-    const recordAction: RecordGiftLinkAction = ({context, verb, subject}) =>
-        recordGiftLinkAction({Action: models.Action, context, verb, subject});
-    service = new GiftLinksService({knex, recordAction});
-}

package/core/server/services/gift-links/models.ts

@@ -1,22 +0,0 @@
-import crypto from 'crypto';
-import {z} from 'zod';
-
-export const GiftLinkToken = z.string().brand('GiftLinkToken');
-export type GiftLinkToken = z.infer<typeof GiftLinkToken>;
-
-// 24 random bytes (192 bits of entropy); base64url keeps it URL-safe.
-export function generateGiftLinkToken(): GiftLinkToken {
-    return GiftLinkToken.parse(crypto.randomBytes(24).toString('base64url'));
-}
-
-export const GiftLink = z.object({
-    token: GiftLinkToken,
-    createdAt: z.date()
-});
-export type GiftLink = z.infer<typeof GiftLink>;
-
-/** A post and its live gift links — distinct from the Bookshelf Post model. */
-export interface Post {
-    id: string;
-    giftLinks: GiftLink[];
-}

package/core/server/services/gift-links/schema.ts

@@ -1,33 +0,0 @@
-import {z} from 'zod';
-import type {Knex} from 'knex';
-import {DbDate} from '../../lib/db-date';
-
-export const DbGiftLink = z.object({
-    token: z.string(),
-    post_id: z.string(),
-    created_at: DbDate,
-    updated_at: DbDate.nullable()
-});
-
-// The post_gift_links association carries no domain object, so it stays a plain row type.
-interface DbPostGiftLink {
-    post_id: string;
-    gift_link_token: string;
-    created_at: Date;
-    updated_at: Date | null;
-}
-
-declare module 'knex/types/tables' {
-    interface Tables {
-        gift_links: Knex.CompositeTableType<
-            z.infer<typeof DbGiftLink>,
-            Omit<z.input<typeof DbGiftLink>, 'updated_at'>,
-            Partial<z.infer<typeof DbGiftLink>>
-        >;
-        post_gift_links: Knex.CompositeTableType<
-            DbPostGiftLink,
-            Pick<DbPostGiftLink, 'post_id' | 'gift_link_token' | 'created_at'>,
-            Partial<DbPostGiftLink>
-        >;
-    }
-}

package/core/server/services/gift-links/serializers.ts

@@ -1,20 +0,0 @@
-import {z} from 'zod';
-import {snakeKeys} from '../../lib/case-keys';
-import {GiftLink} from './models';
-
-const GiftLinkResource = z.object({
-    token: z.string(),
-    created_at: z.date()
-});
-const GiftLinksResponse = z.object({gift_links: z.array(GiftLinkResource)});
-const RevokeAllResponse = z.object({meta: z.object({count: z.number()})});
-
-export const toGiftLinksResponse = z.array(GiftLink)
-    .transform((links): z.input<typeof GiftLinksResponse> => ({
-        gift_links: links.map(link => snakeKeys(link))
-    }))
-    .pipe(GiftLinksResponse);
-
-export const toRevokeAllResponse = z.object({count: z.number()})
-    .transform((data): z.input<typeof RevokeAllResponse> => ({meta: {count: data.count}}))
-    .pipe(RevokeAllResponse);

package/core/server/services/gift-links/service.ts

@@ -1,95 +0,0 @@
-import {z} from 'zod';
-import errors from '@tryghost/errors';
-import type {Knex} from 'knex';
-import {GiftLinkRow, giftLinkCodec, giftLinkColumns} from './codec';
-import {generateGiftLinkToken, type GiftLink, type Post} from './models';
-import {type RecordGiftLinkAction, type RequestContext} from './actions';
-
-// The LEFT JOIN leaves every link column nullable; the explicit generic names a row shape knex
-// can't infer from a dynamic column list.
-type LiveLinkRow = {[K in keyof z.input<typeof GiftLinkRow>]: z.input<typeof GiftLinkRow>[K] | null};
-
-export class GiftLinksService {
-    private knex: Knex;
-    private recordAction: RecordGiftLinkAction;
-
-    constructor({knex, recordAction}: {knex: Knex; recordAction: RecordGiftLinkAction}) {
-        this.knex = knex;
-        this.recordAction = recordAction;
-    }
-
-    async getPost(postId: string): Promise<Post> {
-        // Anchored on posts: zero rows means the post itself doesn't exist, not merely that it has
-        // no live link.
-        const rows = await this.knex('posts')
-            .where('posts.id', postId)
-            .leftJoin('post_gift_links', 'post_gift_links.post_id', 'posts.id')
-            .leftJoin('gift_links', 'gift_links.token', 'post_gift_links.gift_link_token')
-            .select<LiveLinkRow[]>(giftLinkColumns);
-
-        if (rows.length === 0) {
-            throw new errors.NotFoundError({message: `Post ${postId} does not exist.`});
-        }
-
-        const giftLinks = rows
-            .filter((row): row is z.input<typeof GiftLinkRow> => row.token !== null)
-            .map(row => z.decode(giftLinkCodec, row));
-        return {id: postId, giftLinks};
-    }
-
-    async getPostByToken(token: string): Promise<Post | null> {
-        const row = await this.knex('post_gift_links')
-            .join('gift_links', 'gift_links.token', 'post_gift_links.gift_link_token')
-            .where('gift_links.token', token)
-            .first<z.input<typeof GiftLinkRow> & {post_id: string}>(
-                [...giftLinkColumns, 'post_gift_links.post_id as post_id']
-            );
-        return row ? {id: row.post_id, giftLinks: [z.decode(giftLinkCodec, row)]} : null;
-    }
-
-    async ensure(context: RequestContext, postId: string): Promise<Post> {
-        const post = await this.getPost(postId);
-        if (post.giftLinks.length) {
-            return post;
-        }
-        const minted = await this.mint(postId);
-        await this.recordAction({context, verb: 'add', subject: postId});
-        return minted;
-    }
-
-    async create(context: RequestContext, postId: string): Promise<Post> {
-        await this.getPost(postId); // asserts the post exists (throws NotFound)
-        const minted = await this.mint(postId);
-        await this.recordAction({context, verb: 'reset', subject: postId});
-        return minted;
-    }
-
-    // gift_links rows are kept as history; only the live association is removed.
-    async removeAll(context: RequestContext): Promise<number> {
-        const removed = await this.knex('post_gift_links').del();
-        if (removed > 0) {
-            await this.recordAction({context, verb: 'remove', subject: null});
-        }
-        return removed;
-    }
-
-    private async mint(postId: string): Promise<Post> {
-        const link: GiftLink = {token: generateGiftLinkToken(), createdAt: new Date()};
-        await this.knex.transaction(async (trx) => {
-            await this.addToHistory(trx, postId, link);
-            await this.setLiveLink(trx, postId, link);
-        });
-        return {id: postId, giftLinks: [link]};
-    }
-
-    private addToHistory(trx: Knex.Transaction, postId: string, link: GiftLink) {
-        return trx('gift_links').insert({...z.encode(giftLinkCodec, link), post_id: postId});
-    }
-
-    private setLiveLink(trx: Knex.Transaction, postId: string, link: GiftLink) {
-        return trx('post_gift_links')
-            .insert({post_id: postId, gift_link_token: link.token, created_at: link.createdAt})
-            .onConflict('post_id')
-            .merge({gift_link_token: link.token, updated_at: link.createdAt});
-    }
-}

package/core/server/services/gifts/constants.ts

@@ -1,3 +0,0 @@
-export const GIFT_EXPIRY_DAYS = 365;
-export const GIFT_REMINDER_LEAD_DAYS = 7;
-export const GIFT_REMINDER_FLOOR_DAYS = 3;

package/core/server/services/gifts/email-templates/gift-purchase-confirmation.ts

@@ -1,43 +0,0 @@
-import type {Translate} from '../gift-email-renderer';
-
-export interface GiftPurchaseConfirmationData {
-    siteTitle: string;
-    siteUrl: string;
-    siteIconUrl: string | null;
-    siteDomain: string;
-    accentColor: string | undefined;
-    toEmail: string;
-    gift: {
-        tierName: string;
-        cadenceLabel: string;
-        link: string;
-        expiresAt: string;
-    };
-}
-
-export function renderText(data: GiftPurchaseConfirmationData, t: Translate): string {
-    const intro = t('Thank you for your support. Share the link below with whoever you\'d like to gift them a {cadenceLabel} {tierName} membership to {siteTitle}.', {
-        cadenceLabel: data.gift.cadenceLabel,
-        tierName: data.gift.tierName,
-        siteTitle: data.siteTitle,
-        interpolation: {escapeValue: false}
-    });
-
-    return `${t('Your gift is ready')}
-
-${intro}
-
-${data.gift.link}
-
-${t('The link expires on {expiresAt} and can only be redeemed once.', {
-        expiresAt: data.gift.expiresAt,
-        interpolation: {escapeValue: false}
-    })}
-
----
-${t('This message was sent from {siteDomain} to {email}.', {
-        siteDomain: data.siteDomain,
-        email: data.toEmail,
-        interpolation: {escapeValue: false}
-    })}`;
-}

package/core/server/services/gifts/email-templates/gift-reminder.ts

@@ -1,50 +0,0 @@
-import type {Translate} from '../gift-email-renderer';
-
-export interface GiftReminderData {
-    siteTitle: string;
-    siteUrl: string;
-    siteIconUrl: string | null;
-    siteDomain: string;
-    accentColor: string | undefined;
-    memberEmail: string;
-    firstName: string | null;
-    gift: {
-        tierName: string;
-        consumesAt: string;
-        manageSubscriptionUrl: string;
-    };
-}
-
-export function renderText(data: GiftReminderData, t: Translate): string {
-    const greeting = data.firstName
-        ? t('Hi {firstName},', {firstName: data.firstName, interpolation: {escapeValue: false}})
-        : t('Hey there,');
-
-    return `${greeting}
-
-${t('Your gift subscription to {siteTitle} ends on {consumesAt}.', {
-        siteTitle: data.siteTitle,
-        consumesAt: data.gift.consumesAt,
-        interpolation: {escapeValue: false}
-    })}
-
-${t('To keep your {tierName} membership, continue with a paid subscription today and we\'ll automatically add the rest of your gift period as a free trial.', {
-        tierName: data.gift.tierName,
-        interpolation: {escapeValue: false}
-    })}
-
-${t('Continue subscription')}:
-${data.gift.manageSubscriptionUrl}
-
-${t('Thanks for reading {siteTitle}.', {
-        siteTitle: data.siteTitle,
-        interpolation: {escapeValue: false}
-    })}
-
----
-${t('This message was sent from {siteDomain} to {email}.', {
-        siteDomain: data.siteDomain,
-        email: data.memberEmail,
-        interpolation: {escapeValue: false}
-    })}`;
-}