ghost 6.57.1 → 6.58.0

package/core/server/services/lib/dynamic-redirect-manager.d.ts

@@ -1,20 +0,0 @@
-import type {Request, Response, NextFunction} from 'express';
-
-export interface DynamicRedirectManagerOptions {
-    permanentMaxAge: number;
-    getSubdirectoryURL: (pathname: string) => string;
-}
-
-export interface AddRedirectOptions {
-    permanent?: boolean;
-}
-
-declare class DynamicRedirectManager {
-    constructor(options: DynamicRedirectManagerOptions);
-    addRedirect(from: string, to: string, options?: AddRedirectOptions): string | null;
-    removeRedirect(redirectId: string): void;
-    removeAllRedirects(): void;
-    handleRequest(req: Request, res: Response, next: NextFunction): void;
-}
-
-export default DynamicRedirectManager;

package/core/server/services/lib/in-memory-repository.ts

@@ -1,78 +0,0 @@
-import nql from '@tryghost/nql';
-
-type Entity<T> = {
-    id: T;
-    deleted: boolean;
-}
-
-type Order<T> = {
-    field: keyof T;
-    direction: 'asc' | 'desc';
-}
-
-type OrderOption<T extends Entity<any>> = Order<T>[];
-
-export abstract class InMemoryRepository<IDType, T extends Entity<IDType>> {
-    protected store: T[] = [];
-    private ids: Map<IDType, true> = new Map();
-
-    protected abstract toPrimitive(entity: T): object;
-
-    public async save(entity: T): Promise<void> {
-        if (entity.deleted) {
-            this.store = this.store.filter(item => item.id !== entity.id);
-            this.ids.delete(entity.id);
-            return;
-        }
-
-        if (this.ids.has(entity.id)) {
-            this.store = this.store.map((item) => {
-                if (item.id === entity.id) {
-                    return entity;
-                }
-                return item;
-            });
-        } else {
-            this.store.push(entity);
-            this.ids.set(entity.id, true);
-        }
-    }
-
-    public async getById(id: string): Promise<T | null> {
-        return this.store.find(item => item.id === id) || null;
-    }
-
-    public async getAll(options: { filter?: string; order?: OrderOption<T> } = {}): Promise<T[]> {
-        const filter = nql(options.filter);
-
-        const results = this.store.slice().filter(item => filter.queryJSON(this.toPrimitive(item)));
-
-        if (options.order) {
-            for (const order of options.order) {
-                results.sort((a, b) => {
-                    if (order.direction === 'asc') {
-                        return a[order.field] as any > (b[order.field] as any) ? 1 : -1;
-                    } else {
-                        return a[order.field] < b[order.field] ? 1 : -1;
-                    }
-                });
-            }
-        }
-
-        return results;
-    }
-
-    public async getPage(options: { filter?: string; page: number; limit: number; order?: Order<T>[] } = {page: 1, limit: 15}): Promise<T[]> {
-        const results = await this.getAll(options);
-
-        const start = (options.page - 1) * options.limit;
-        const end = start + options.limit;
-
-        return results.slice(start, end);
-    }
-
-    public async getCount(options: { filter?: string }): Promise<number> {
-        const results = await this.getAll(options);
-        return results.length;
-    }
-}

package/core/server/services/lib/member-signup-contexts.ts

@@ -1,22 +0,0 @@
-// Signup context describes the sign-in state when the Stripe checkout session is created.
-// NEEDS_MAGIC_LINK_EMAIL: No guaranteed sign-in path exists yet (custom/direct checkout paths).
-// HAS_PRECHECKOUT_MAGIC_LINK: Ghost generated a signup magic-link before Stripe (standard Portal flow).
-// ALREADY_AUTHENTICATED: Request came from a signed-in member identity (for example, opening a paid signup link directly).
-export const SIGNUP_CONTEXTS = {
-    NEEDS_MAGIC_LINK_EMAIL: 'needs_magic_link_email',
-    HAS_PRECHECKOUT_MAGIC_LINK: 'has_precheckout_magic_link',
-    ALREADY_AUTHENTICATED: 'already_authenticated'
-} as const;
-
-export type SignupContext = typeof SIGNUP_CONTEXTS[keyof typeof SIGNUP_CONTEXTS];
-
-/**
- * Signup-paid email can be skipped when welcome email is active only if
- * checkout already has a reliable sign-in path.
- *
- * - HAS_PRECHECKOUT_MAGIC_LINK: standard Portal flow generated signup link before Stripe
- * - ALREADY_AUTHENTICATED: checkout request came from an already signed-in member
- */
-export function canWelcomeEmailReplaceSignupPaidEmail(signupContext?: SignupContext) {
-    return signupContext === SIGNUP_CONTEXTS.HAS_PRECHECKOUT_MAGIC_LINK || signupContext === SIGNUP_CONTEXTS.ALREADY_AUTHENTICATED;
-}

package/core/server/services/link-redirection/link-redirect.ts

@@ -1,24 +0,0 @@
-import ObjectID from 'bson-objectid';
-
-export class LinkRedirect {
-    link_id: undefined | ObjectID;
-    from: URL;
-    to: URL;
-    edited: boolean;
-    automationActionRevisionId: string | undefined;
-
-    constructor(data: {id?: string; from: URL; to: URL; edited?: boolean; automationActionRevisionId?: string | null}) {
-        if (!data.id) {
-            this.link_id = new ObjectID();
-        }
-
-        if (typeof data.id === 'string') {
-            this.link_id = ObjectID.createFromHexString(data.id);
-        }
-
-        this.from = data.from;
-        this.to = data.to;
-        this.edited = !!data.edited;
-        this.automationActionRevisionId = data.automationActionRevisionId ?? undefined;
-    }
-}

package/core/server/services/member-welcome-emails/constants.ts

@@ -1,35 +0,0 @@
-const DEFAULT_EMAIL_DESIGN_SETTING_SLUG = 'default-automated-email';
-
-const MEMBER_WELCOME_EMAIL_LOG_KEY = '[MEMBER-WELCOME-EMAIL]';
-
-const MEMBER_WELCOME_EMAIL_SLUGS = {
-    free: 'member-welcome-email-free',
-    paid: 'member-welcome-email-paid'
-} as const;
-
-const MEMBER_WELCOME_EMAIL_ELIGIBLE_STATUSES = {
-    free: ['free'],
-    paid: ['paid', 'gift']
-} as const;
-
-const MEMBER_WELCOME_EMAIL_TAG = 'member-welcome-email';
-const AUTOMATION_EMAIL_TAG = 'automation-email';
-
-const MESSAGES = {
-    NO_MEMBER_WELCOME_EMAIL: 'No member welcome email found',
-    INVALID_LEXICAL_STRUCTURE: 'Member welcome email has invalid content structure',
-    MISSING_EMAIL_CONTENT: 'Email content is required to send a test email',
-    MISSING_EMAIL_SUBJECT: 'Email subject is required to send a test email',
-    MISSING_RECIPIENT_EMAIL: 'Cannot send welcome email: no recipient email address available',
-    memberWelcomeEmailInactive: (memberStatus: string) => `Member welcome email for "${memberStatus}" members is inactive`
-} as const;
-
-export {
-    AUTOMATION_EMAIL_TAG,
-    DEFAULT_EMAIL_DESIGN_SETTING_SLUG,
-    MEMBER_WELCOME_EMAIL_LOG_KEY,
-    MEMBER_WELCOME_EMAIL_TAG,
-    MEMBER_WELCOME_EMAIL_SLUGS,
-    MEMBER_WELCOME_EMAIL_ELIGIBLE_STATUSES,
-    MESSAGES
-};

package/core/server/services/members/commenting/index.ts

@@ -1,2 +0,0 @@
-export {MemberCommenting} from './member-commenting';
-export {MemberCommentingCodec} from './member-commenting-codec';

package/core/server/services/members/commenting/member-commenting-codec.ts

@@ -1,73 +0,0 @@
-import {MemberCommenting} from './member-commenting';
-
-interface StoredCommenting {
-    disabled: boolean;
-    disabledReason: string | null;
-    disabledUntil: string | null;
-}
-
-/**
- * Codec for bidirectional serialization of MemberCommenting.
- * Handles conversion between domain objects and persistence format.
- */
-interface SerializedCommenting {
-    disabled: boolean;
-    disabled_reason: string | null;
-    disabled_until: string | null;
-}
-
-export const MemberCommentingCodec = {
-    /**
-     * Parse a raw JSON string from storage into a MemberCommenting domain object.
-     * Invalid data fails open to enabled state.
-     */
-    parse(raw: string | null): MemberCommenting {
-        try {
-            const data: StoredCommenting = JSON.parse(raw ?? '');
-
-            if (!data.disabled) {
-                return MemberCommenting.enabled();
-            }
-
-            if (!data.disabledReason) {
-                throw undefined;
-            }
-
-            const disabledUntil = data.disabledUntil ? new Date(data.disabledUntil) : null;
-            if (disabledUntil && isNaN(disabledUntil.getTime())) {
-                throw undefined;
-            }
-
-            return MemberCommenting.disabled(data.disabledReason, disabledUntil);
-        } catch {
-            return MemberCommenting.enabled();
-        }
-    },
-
-    /**
-     * Format a MemberCommenting domain object into a JSON string for storage.
-     */
-    format(commenting: MemberCommenting): string {
-        return JSON.stringify({
-            disabled: commenting.disabled,
-            disabledReason: commenting.disabledReason,
-            disabledUntil: commenting.disabledUntil?.toISOString() ?? null
-        });
-    },
-
-    /**
-     * Serialize a MemberCommenting domain object for API responses.
-     * Converts camelCase domain properties to snake_case API format.
-     */
-    toJSON(commenting: MemberCommenting | null): SerializedCommenting | null {
-        if (!commenting) {
-            return commenting;
-        }
-
-        return {
-            disabled: commenting.disabled,
-            disabled_reason: commenting.disabledReason,
-            disabled_until: commenting.disabledUntil?.toISOString() ?? null
-        };
-    }
-};

package/core/server/services/members/commenting/member-commenting.ts

@@ -1,69 +0,0 @@
-import errors from '@tryghost/errors';
-import tpl from '@tryghost/tpl';
-
-const messages = {
-    reasonRequired: 'A reason is required when disabling commenting for a member',
-    reasonTooLong: 'Reason must be 2000 characters or less'
-};
-
-interface MemberCommentingData {
-    disabled: boolean;
-    disabledReason: string | null;
-    disabledUntil: Date | null;
-}
-
-export class MemberCommenting {
-    disabled: boolean;
-    disabledReason: string | null;
-    disabledUntil: Date | null;
-    canComment: boolean;
-
-    constructor(data: MemberCommentingData) {
-        if (data.disabled && !data.disabledReason) {
-            throw new errors.ValidationError({
-                message: tpl(messages.reasonRequired),
-                property: 'reason'
-            });
-        }
-
-        if (data.disabledReason && data.disabledReason.length > 2000) {
-            throw new errors.ValidationError({
-                message: tpl(messages.reasonTooLong),
-                property: 'reason'
-            });
-        }
-
-        this.disabled = data.disabled;
-        this.disabledReason = data.disabledReason;
-        this.disabledUntil = data.disabledUntil;
-
-        this.canComment = true;
-        if (this.disabled) {
-            this.canComment = this.disabledUntil ? this.disabledUntil <= new Date() : false;
-        }
-    }
-
-    static enabled(): MemberCommenting {
-        return new MemberCommenting({
-            disabled: false,
-            disabledReason: null,
-            disabledUntil: null
-        });
-    }
-
-    static disabled(reason: string, until: Date | null): MemberCommenting {
-        return new MemberCommenting({
-            disabled: true,
-            disabledReason: reason,
-            disabledUntil: until
-        });
-    }
-
-    enable(): MemberCommenting {
-        return MemberCommenting.enabled();
-    }
-
-    disable(reason: string, until: Date | null): MemberCommenting {
-        return MemberCommenting.disabled(reason, until);
-    }
-}

package/core/server/services/members/create-paid-member-shim.ts

@@ -1,40 +0,0 @@
-import logging from '@tryghost/logging';
-const models = require('../../models');
-
-interface PaidMemberShim {
-    status: 'paid';
-    products: Array<{slug: string}>;
-}
-
-/**
- * Build a stand-in paid member for content gating — NOT a real member. It
- * carries only the `status` and `products` that
- * `contentGating.checkPostAccess` / `checkGatedBlockAccess` read, letting previews
- * (`member_status=paid`) and gift-link reads reveal gated content without a
- * logged-in member. When a tier slug is supplied the shim has only that tier,
- * including archived tiers; otherwise it has every active paid tier. Single
- * source of truth for this security-sensitive grant.
- */
-export async function createPaidMemberShim(tierSlug?: string): Promise<PaidMemberShim> {
-    let products: Array<{slug: string}> = [];
-    try {
-        if (tierSlug) {
-            const paidProduct = await models.Product.findOne({slug: tierSlug, type: 'paid'});
-            if (paidProduct) {
-                products = [{slug: paidProduct.get('slug')}];
-            }
-        } else {
-            const paidProducts = await models.Product.findAll({status: 'active', type: 'paid'});
-            products = paidProducts.map((product: {get(key: string): string}) => ({slug: product.get('slug')}));
-        }
-    } catch (error) {
-        // Fall back to no tiers rather than failing the render — still grants
-        // status:paid/members content, just not tier-specific blocks.
-        logging.error('Failed to build paid member shim tiers:', error);
-    }
-
-    return {
-        status: 'paid',
-        products
-    };
-}

package/core/server/services/members/import-export/config.ts

@@ -1,34 +0,0 @@
-import {z} from 'zod';
-
-// Config arrives untyped: defaults.json ships a value, and any higher layer -- an
-// operator's config file, an environment variable, argv -- can replace it with anything.
-// Validating it into a usable number is a config concern, so it happens here at the
-// boundary; the importer is handed a resolved value.
-
-// The row count at or below which an import is performed while the request is
-// still open. Zero is allowed and means every import is deferred. A numeric
-// string is accepted because a value supplied through an environment variable
-// can arrive as one.
-const Threshold = z
-    .union([z.number(), z.string().trim().min(1)])
-    .transform(Number)
-    .pipe(z.number().int().nonnegative().max(Number.MAX_SAFE_INTEGER));
-
-// defaults.json is the single source of the shipped threshold: it is the lowest
-// config layer and the file an operator actually reads and edits, so it is read
-// rather than restated. Parsed eagerly because a missing or malformed value
-// there is our bug rather than an operator's, and should fail loudly at boot
-// instead of quietly becoming the fallback for everything below.
-const shippedThreshold: number = Threshold.parse(
-    require('../../../../shared/config/defaults.json').members.importer.inlineThreshold
-);
-
-// A higher layer can override the shipped value with anything. Something
-// unreadable falls back to the shipped threshold rather than throwing, because
-// an operator can correct this live and a bad value must not take member import
-// down with it.
-const InlineThreshold = Threshold.catch(shippedThreshold);
-
-export function resolveInlineThreshold(configured: unknown): number {
-    return InlineThreshold.parse(configured);
-}

package/core/server/services/members/import-export/csv/formula.ts

@@ -1,14 +0,0 @@
-// The export writes with papaparse's escapeFormulae on (see serialize), which prefixes a
-// cell starting with one of these with an apostrophe so a spreadsheet won't read it as a
-// formula: `=SUM(A1)` is written as `'=SUM(A1)`.
-const FORMULA_TRIGGERS = ['=', '+', '-', '@', '\t', '\r'];
-
-// Strip that guard back off, so a re-imported value doesn't gain an apostrophe on every
-// round trip. Only a lone apostrophe before a trigger is the guard; one before anything
-// else is a character the value actually starts with, and is left alone.
-export function stripFormulaGuard(cell: string): string {
-    if (cell.charAt(0) === '\'' && FORMULA_TRIGGERS.includes(cell.charAt(1))) {
-        return cell.slice(1);
-    }
-    return cell;
-}

package/core/server/services/members/import-export/csv/index.ts

@@ -1,3 +0,0 @@
-export {default as parse, type Row} from './parse';
-export {default as serialize} from './serialize';
-export {stripFormulaGuard} from './formula';

package/core/server/services/members/import-export/csv/parse.ts

@@ -1,69 +0,0 @@
-import {pipeline} from 'node:stream';
-import papaparse from 'papaparse';
-import fs from 'fs-extra';
-
-// A parsed CSV row: raw string cells, keyed by (renamed) column. Parsing is mechanical;
-// giving the columns meaning and coercing their values is the domain's job (the import
-// schema).
-export type Row = Record<string, string>;
-
-// A column named after an Object.prototype member (toString, __proto__, ...) is unsafe
-// as a key: writing it would shadow a method or reach the prototype.
-function isSafeColumnName(name: string): boolean {
-    return !(name in Object.prototype);
-}
-
-// headerMapping renames the CSV's headers to the columns they emit under; unmapped
-// columns carry through under their own name.
-export default function parse(path: string, headerMapping?: Record<string, string>): Promise<Row[]> {
-    return new Promise(function (resolve, reject) {
-        const csvFileStream = fs.createReadStream(path);
-        const csvParserStream = papaparse.parse(papaparse.NODE_STREAM_INPUT, {
-            header: true
-        });
-
-        const rows: Row[] = [];
-        const parsedCSVStream = pipeline(csvFileStream, csvParserStream, (err) => {
-            if (err) {
-                return reject(err);
-            }
-            resolve(rows);
-        });
-
-        parsedCSVStream.on('data', (parsedRow: Record<string, unknown>) => {
-            // a throw here escapes as an uncaught exception and leaves this
-            // promise forever unsettled, so it has to become a rejection
-            try {
-                const row: Row = {};
-
-                for (const [header, value] of Object.entries(parsedRow)) {
-                    // papaparse gathers the overflow from a row carrying more
-                    // fields than there are headers under __parsed_extra, as an
-                    // array rather than a cell any mapping can name
-                    if (typeof value !== 'string') {
-                        continue;
-                    }
-
-                    // hasOwn, not `in`: a prototype-named header would otherwise match an
-                    // inherited method on the mapping and take a function as its mapped name.
-                    if (headerMapping && Object.hasOwn(headerMapping, header)) {
-                        row[headerMapping[header]] = value;
-                    } else if (isSafeColumnName(header)) {
-                        // Carry any unmapped column through untouched, so the import is not
-                        // constrained to a known vocabulary: a custom_fields.* column
-                        // survives parsing even though nothing consumes it yet.
-                        row[header] = value;
-                    }
-                }
-
-                if (!Object.keys(row).length) {
-                    return;
-                }
-
-                rows.push(row);
-            } catch (err) {
-                reject(err);
-            }
-        });
-    });
-}

package/core/server/services/members/import-export/csv/serialize.ts

@@ -1,18 +0,0 @@
-import papaparse from 'papaparse';
-
-interface SerializeOptions {
-    // Omitted, papaparse derives the columns (and their order) from the first row's
-    // keys -- so a typed shaper's row can define them, with no separate list to drift.
-    columns?: string[];
-    header?: boolean;
-}
-
-// The papaparse boundary: given rows already shaped into cells, it writes CSV and
-// nothing else. escapeFormulae is forced on -- papaparse defaults it off, but this CSV
-// is opened by a person, so a leading =, +, -, @ or tab must be escaped.
-export default function serialize(
-    rows: Array<Record<string, unknown>>,
-    {columns, header = true}: SerializeOptions = {}
-): string {
-    return papaparse.unparse(rows, {columns, header, escapeFormulae: true});
-}