ghost 6.57.1 → 6.58.0

package/core/built/admin/assets/zapier-modal-Bp507Um7.js

@@ -1 +0,0 @@
-import{o as e,r as t}from"./rolldown-runtime-DAXXjFlN.js";import{t as n}from"./react-Bb3IsNbi.js";import{t as r}from"./jsx-runtime-DX3WBWVO.js";import{m as i,p as a}from"./hooks-D6EE7BIt.js";import{n as o,o as s,s as c,t as l}from"./use-settings-navigation-BmROPrls.js";import{i as u,n as d,r as f,t as ee}from"./action-list-lGzZLHc8.js";import{Pr as p,ws as m}from"./index-DUXM0NlS.js";import{n as te}from"./confirmation-modal-CYD7x3UQ.js";import{n as ne,t as h}from"./global-data-provider-RzW6Bnlf.js";import{n as re}from"./integrations-BT6_iJvu.js";import{t as ie}from"./api-keys-Dx4NeNpK.js";import{t as g}from"./integration-header-B4DyXV06.js";import{t as _}from"./api-keys-_iCT4dxr.js";import{t as v}from"./brand-icon-09YqFZjV.js";var y=``+new URL(`zapier-logo-D8a11oW_.svg`,import.meta.url).href,b=e(n(),1),x=r(),S=(e,t)=>`${e}-${t}`,C=()=>{let[e,t]=(0,b.useState)(``),[n,r]=(0,b.useState)(!1),i=(0,b.useRef)(new Map),[a,o]=(0,b.useState)(new Set),s=t=>t.length?t.some(t=>t.toLowerCase().includes(e.toLowerCase())):!0,c=(0,b.useCallback)((t,n)=>{i.current.set(t,n),(!e||n.some(t=>t.toLowerCase().includes(e.toLowerCase())))&&o(e=>new Set(e).add(t))},[e]),l=(0,b.useCallback)(e=>{i.current.delete(e),o(t=>{let n=new Set(t);return n.delete(e),n})},[]);(0,b.useEffect)(()=>{let t=new Set;i.current.forEach((n,r)=>{(!e||n.some(t=>t.toLowerCase().includes(e.toLowerCase())))&&t.add(r)}),o(t)},[e]);let u=(0,b.useCallback)(e=>a.size===1&&a.has(e),[a]),d=(0,b.useCallback)(()=>a,[a]),f=t=>{if(!e)return t;if(typeof t==`string`){let n=e.split(/\s+/).map(e=>e.toLowerCase()),r=n.map(e=>e.replace(/[.*+?^${}()|[\]\\]/g,`\\$&`)).join(`|`),i=t.split(RegExp(`(${r})`,`gi`)),a=new Map;return i.map(e=>{if(!n.includes(e.toLowerCase()))return e;let t=(a.get(e)??0)+1;return a.set(e,t),(0,x.jsx)(`span`,{className:`bg-yellow-500/40`,children:e},`${e}-${t}`)})}else if(Array.isArray(t))return t.map(e=>f(e));else if(t&&typeof t==`object`&&t)return b.Children.map(t,e=>e&&typeof e==`object`&&`props`in e?f(e.props.children):e);else return t};return{filter:e,setFilter:t,checkVisible:s,highlightKeywords:f,noResult:n,setNoResult:r,registerComponent:c,unregisterComponent:l,getVisibleComponents:d,isOnlyVisibleComponent:u}},w=``+new URL(`Alto-DoS3yH_j.png`,import.meta.url).href,T=``+new URL(`Bulletin-BUpcurG5.png`,import.meta.url).href,E=``+new URL(`Casper-ASA9Ix4v.png`,import.meta.url).href,D=``+new URL(`Dawn-aeEVEPie.png`,import.meta.url).href,O=``+new URL(`Digest-DJl0U_FG.png`,import.meta.url).href,k=``+new URL(`Dope-D_CgP0p0.png`,import.meta.url).href,A=``+new URL(`Ease-B4NuA7sj.png`,import.meta.url).href,j=``+new URL(`Edge-BPZxvKka.png`,import.meta.url).href,M=``+new URL(`Edition-cIDLjlhj.png`,import.meta.url).href,N=``+new URL(`Episode-D7bgV2bY.png`,import.meta.url).href,P=``+new URL(`Headline-BFXOunIb.png`,import.meta.url).href,F=``+new URL(`Journal-D3UW9T2b.png`,import.meta.url).href,I=``+new URL(`London-CSCVHwS0.png`,import.meta.url).href,L=``+new URL(`Ruby-DVEXVMTx.png`,import.meta.url).href,R=``+new URL(`Solo-c-yPo0gw.png`,import.meta.url).href,z=``+new URL(`Source-V-WXZXnS.png`,import.meta.url).href,B=``+new URL(`Source-Magazine-Czq1p0a_.png`,import.meta.url).href,V=``+new URL(`Source-Newsletter-CwTcfhJ-.png`,import.meta.url).href,H=``+new URL(`Taste-U2cRR2yO.png`,import.meta.url).href,U=``+new URL(`Wave-DE2aI-FM.png`,import.meta.url).href,W=[{name:`Source`,category:`News`,previewUrl:`https://source.ghost.io/`,ref:`default`,image:z,variants:[{category:`Magazine`,previewUrl:`https://source-magazine.ghost.io/`,image:B},{category:`Newsletter`,previewUrl:`https://source-newsletter.ghost.io/`,image:V}]},{name:`Casper`,category:`Blog`,previewUrl:`https://demo.ghost.io/`,ref:`TryGhost/Casper`,image:E},{name:`Edition`,category:`Newsletter`,url:`https://github.com/TryGhost/Edition`,previewUrl:`https://edition.ghost.io/`,ref:`TryGhost/Edition`,image:M},{name:`Solo`,category:`Blog`,url:`https://github.com/TryGhost/Solo`,previewUrl:`https://solo.ghost.io`,ref:`TryGhost/Solo`,image:R},{name:`Taste`,category:`Blog`,url:`https://github.com/TryGhost/Taste`,previewUrl:`https://taste.ghost.io`,ref:`TryGhost/Taste`,image:H},{name:`Episode`,category:`Podcast`,url:`https://github.com/TryGhost/Episode`,previewUrl:`https://episode.ghost.io`,ref:`TryGhost/Episode`,image:N},{name:`Digest`,category:`Newsletter`,url:`https://github.com/TryGhost/Digest`,previewUrl:`https://digest.ghost.io/`,ref:`TryGhost/Digest`,image:O},{name:`Bulletin`,category:`Newsletter`,url:`https://github.com/TryGhost/Bulletin`,previewUrl:`https://bulletin.ghost.io/`,ref:`TryGhost/Bulletin`,image:T},{name:`Alto`,category:`Blog`,url:`https://github.com/TryGhost/Alto`,previewUrl:`https://alto.ghost.io`,ref:`TryGhost/Alto`,image:w},{name:`Dope`,category:`Magazine`,url:`https://github.com/TryGhost/Dope`,previewUrl:`https://dope.ghost.io`,ref:`TryGhost/Dope`,image:k},{name:`Wave`,category:`Podcast`,url:`https://github.com/TryGhost/Wave`,previewUrl:`https://wave.ghost.io`,ref:`TryGhost/Wave`,image:U},{name:`Edge`,category:`Photography`,url:`https://github.com/TryGhost/Edge`,previewUrl:`https://edge.ghost.io`,ref:`TryGhost/Edge`,image:j},{name:`Dawn`,category:`Newsletter`,url:`https://github.com/TryGhost/Dawn`,previewUrl:`https://dawn.ghost.io/`,ref:`TryGhost/Dawn`,image:D},{name:`Ease`,category:`Documentation`,url:`https://github.com/TryGhost/Ease`,previewUrl:`https://ease.ghost.io`,ref:`TryGhost/Ease`,image:A},{name:`Headline`,category:`News`,url:`https://github.com/TryGhost/Headline`,previewUrl:`https://headline.ghost.io`,ref:`TryGhost/Headline`,image:P},{name:`Ruby`,category:`Magazine`,url:`https://github.com/TryGhost/Ruby`,previewUrl:`https://ruby.ghost.io`,ref:`TryGhost/Ruby`,image:L},{name:`London`,category:`Photography`,url:`https://github.com/TryGhost/London`,previewUrl:`https://london.ghost.io`,ref:`TryGhost/London`,image:I},{name:`Journal`,category:`Newsletter`,url:`https://github.com/TryGhost/Journal`,previewUrl:`https://journal.ghost.io/`,ref:`TryGhost/Journal`,image:F}],G=``+new URL(`orb-black-1-bYPPSSAp.png`,import.meta.url).href,ae=``+new URL(`orb-black-2-C-rcujeh.png`,import.meta.url).href,K=``+new URL(`orb-black-3-DTkwRv_1.png`,import.meta.url).href,q=``+new URL(`orb-black-4-BXF3fMuE.png`,import.meta.url).href,J=``+new URL(`orb-black-5-94Eda1ek.png`,import.meta.url).href,oe=`data:image/svg+xml,%3csvg%20xmlns='http://www.w3.org/2000/svg'%20viewBox='0%200%201818.2%202500'%20style='enable-background:new%200%200%201818.2%202500'%20xml:space='preserve'%3e%3ctitle%3egoogle-docs%3c/title%3e%3cpath%20d='M1136.4%200h-966C79.6%200%200%2079.5%200%20170.5v2159.1c0%2090.9%2079.5%20170.5%20170.5%20170.5h1477.3c90.9%200%20170.5-79.5%20170.5-170.5V681.8l-397.7-284.1L1136.4%200z'%20style='fill:%234285f4'/%3e%3cpath%20d='M454.5%201818.2h909.1v-113.6h-909l-.1%20113.6zm0%20227.3h681.8v-113.6H454.5v113.6zm0-795.5v113.6h909.1V1250H454.5zm0%20340.9h909.1v-113.6h-909l-.1%20113.6z'%20style='fill:%23f1f1f1'/%3e%3cpath%20d='M1136.4%200v511.4c0%2090.9%2079.5%20170.4%20170.4%20170.4h511.4L1136.4%200z'%20style='fill:%23a1c2fa'/%3e%3c/svg%3e`,se=``+new URL(`mailchimp-DwTEN-tS.svg`,import.meta.url).href,ce=`data:image/svg+xml,%3csvg%20height='546'%20viewBox='0%200%20569%20546'%20width='569'%20xmlns='http://www.w3.org/2000/svg'%3e%3ctitle%3epatreon%3c/title%3e%3cg%20fill='%23FF424D'%3e%3ccircle%20cx='362.59'%20cy='204.59'%20data-fill='1'%20r='204.59'/%3e%3cpath%20data-fill='1'%20d='M0%200h100v545.8H0z'/%3e%3c/g%3e%3c/svg%3e`,Y=`data:image/svg+xml,%3csvg%20width='152'%20height='179'%20viewBox='0%200%20152%20179'%20xmlns='http://www.w3.org/2000/svg'%3e%3ctitle%3epaypal%3c/title%3e%3cg%20fill='none'%20fill-rule='evenodd'%3e%3cpath%20d='M136.492%2045.453c2.179-13.894-.015-23.348-7.53-31.911C120.688%204.114%20105.741.075%2086.617.075H31.105a7.943%207.943%200%200%200-7.846%206.705L.144%20153.36a4.765%204.765%200%200%200%204.707%205.507h34.27l-2.365%2015a4.168%204.168%200%200%200%204.118%204.818H69.76a6.948%206.948%200%200%200%206.863-5.865l.283-1.468%205.442-34.507.351-1.907a6.947%206.947%200%200%201%206.862-5.865h4.322c27.984%200%2049.896-11.37%2056.299-44.25%202.675-13.74%201.292-25.208-5.783-33.27-2.14-2.439-4.802-4.455-7.907-6.1'%20fill='%23238EC2'/%3e%3cpath%20d='M136.492%2045.453c2.179-13.894-.015-23.348-7.53-31.911C120.688%204.114%20105.741.075%2086.617.075H31.105a7.943%207.943%200%200%200-7.846%206.705L.144%20153.36a4.765%204.765%200%200%200%204.707%205.507h34.27l8.609-54.588-.267%201.711c.609-3.86%203.909-6.704%207.817-6.704h16.288c31.989%200%2057.037-12.996%2064.356-50.582.217-1.113.402-2.191.568-3.251'%20fill='%2320274F'/%3e%3cpath%20d='M56.978%2045.638a6.945%206.945%200%200%201%206.863-5.866h43.514c5.155%200%209.961.337%2014.356%201.045%201.256.202%202.478.435%203.665.698a53.92%2053.92%200%200%201%203.455.885c.558.162%201.106.333%201.646.512%202.157.717%204.166%201.562%206.015%202.541%202.179-13.894-.015-23.348-7.53-31.911C120.688%204.114%20105.741.075%2086.617.075H31.105a7.943%207.943%200%200%200-7.846%206.705L.144%20153.36a4.765%204.765%200%200%200%204.707%205.507h34.27L56.978%2045.638'%20fill='%23253667'/%3e%3c/g%3e%3c/svg%3e`,le=``+new URL(`slackicon-37ETtpm7.png`,import.meta.url).href,ue=`data:image/svg+xml,%3csvg%20width='86'%20height='89'%20xmlns='http://www.w3.org/2000/svg'%3e%3ctitle%3etypeform%3c/title%3e%3cg%20fill='none'%20fill-rule='evenodd'%3e%3cpath%20d='M40.28%2087.561c12.464.154%2021.16-3.994%2030.135-12.175%208.975-8.18%2014.306-16.867%2014.741-28.73.436-11.862-3.412-21.43-12.564-30.581C63.441%206.923%2051.64.9%2039.4.899%2027.158.898%2018.967%206.252%2011.385%2016.07c-7.581%209.818-9.237%2022.212-9.894%2033.921-.657%2011.71-1.15%2017.111%206.608%2024.625%207.758%207.514%2019.718%2012.791%2032.182%2012.945z'%20stroke='%23262627'/%3e%3cpath%20d='M29.136%2037.976v-4.885h25.918v4.885H44.679v27.998H39.51V37.976z'%20fill='%23262627'%20fill-rule='nonzero'/%3e%3c/g%3e%3c/svg%3e`,de=``+new URL(`zero-bounce-lzY95s9E.png`,import.meta.url).href,X=[{ghostImage:ae,appImage:le,title:`Share scheduled posts with your team in Slack`,url:`https://zapier.com/webintent/create-zap?template=359499`},{ghostImage:K,appImage:ce,title:`Connect Patreon to your Ghost membership site`,url:`https://zapier.com/webintent/create-zap?template=75801`},{ghostImage:q,appImage:de,title:`Protect email delivery with email verification`,url:`https://zapier.com/webintent/create-zap?template=359415`},{ghostImage:J,appImage:Y,title:`Add members for successful sales in PayPal`,url:`https://zapier.com/webintent/create-zap?template=184423`},{ghostImage:K,appImage:Y,title:`Unsubscribe members who cancel a subscription in PayPal`,url:`https://zapier.com/webintent/create-zap?template=359348`},{ghostImage:G,appImage:oe,title:`Send new post drafts from Google Docs to Ghost`,url:`https://zapier.com/webintent/create-zap?template=50924`},{ghostImage:q,appImage:ue,title:`Survey new members using Typeform`,url:`https://zapier.com/webintent/create-zap?template=359407`},{ghostImage:G,appImage:se,title:`Sync email subscribers in Ghost + Mailchimp`,url:`https://zapier.com/webintent/create-zap?template=359342`}],Z=(0,b.createContext)({officialThemes:W,zapierTemplates:X,search:{filter:``,setFilter:()=>{},checkVisible:()=>!0,highlightKeywords:()=>``,noResult:!1,setNoResult:()=>{},registerComponent:()=>{},unregisterComponent:()=>{},getVisibleComponents:()=>new Set,isOnlyVisibleComponent:()=>!1},sortingState:[],offersShowArchived:!1,setOffersShowArchived:()=>{}}),fe=({children:e,...t})=>{let n=C(),[r,i]=(0,b.useState)([{type:`offers`,option:`date-added`,direction:`desc`}]),[a,s]=(0,b.useState)(!1);return(0,x.jsx)(Z.Provider,{value:{officialThemes:W,zapierTemplates:X,...t,search:n,sortingState:r,setSortingState:i,offersShowArchived:a,setOffersShowArchived:s},children:(0,x.jsx)(h,{children:(0,x.jsx)(o,{children:e})})})},Q=()=>(0,b.useContext)(Z),pe=()=>Q().officialThemes,me=()=>Q().search,he=()=>Q().upgradeStatus,ge=()=>{let{sortingState:e,setSortingState:t}=Q();return{sortingState:e,setSortingState:t}},$=()=>{let{offersShowArchived:e,setOffersShowArchived:t}=Q();return{offersShowArchived:e,setOffersShowArchived:t}},_e=t({default:()=>ve});function ve(){let{updateRoute:e}=l(),{zapierTemplates:t}=Q(),{data:{integrations:n}={integrations:[]}}=re(),{config:r}=ne(),{mutateAsync:o}=_(),h=i(),[S,C]=(0,b.useState)(!1),w=r.hostSettings?.limits?.customIntegrations?.disabled,T=n.find(({slug:e})=>e===`zapier`),E=T?.api_keys?.find(e=>e.type===`admin`);return(0,b.useEffect)(()=>{w&&e(`integrations`)},[w,e]),(0,x.jsxs)(s,{cancelLabel:``,footer:(0,x.jsxs)(`div`,{className:`mx-8 flex w-full items-center justify-between`,children:[(0,x.jsxs)(`a`,{className:`mt-1 self-baseline font-bold`,href:`https://zapier.com/apps/ghost/integrations?utm_medium=partner_api&utm_source=widget&utm_campaign=Widget`,rel:`noopener noreferrer`,target:`_blank`,children:[`View more Ghost integrations powered by `,(0,x.jsx)(`span`,{children:(0,x.jsx)(`img`,{alt:`Zapier`,className:`relative top-[-2px] inline-block`,src:y})})]}),(0,x.jsx)(p,{type:`button`,onClick:()=>{e(`integrations`)},children:`Close`})]}),okLabel:`Close`,okVariant:`default`,testId:`zapier-modal`,title:``,stickyFooter:!0,onClose:()=>{e(`integrations`)},onOk:()=>{e(`integrations`)},children:[(0,x.jsx)(g,{detail:`Automation for your favorite apps`,extra:(0,x.jsx)(`div`,{className:`mt-1 -mb-4`,children:(0,x.jsx)(ie,{keys:[{id:`admin-api-key`,label:`Admin API key`,text:E?.secret,hint:S?(0,x.jsx)(`div`,{className:`text-green`,children:`Admin API Key was successfully regenerated`}):void 0,onRegenerate:()=>{!T||!E||(C(!1),c.show(te,{title:`Regenerate Admin API Key`,prompt:`You will need to locate the Ghost App within your Zapier account and click on "Reconnect" to enter the new Admin API Key.`,okLabel:`Regenerate Admin API Key`,onOk:async e=>{try{await o({integrationId:T.id,apiKeyId:E.id}),C(!0),e?.remove()}catch(e){h(e)}}}))}},{id:`api-url`,label:`API URL`,text:window.location.origin+a().subdir}]})}),icon:(0,x.jsx)(v,{name:`zapier`,size:56}),title:`Zapier`}),(0,x.jsx)(ee,{children:t.map(e=>(0,x.jsxs)(d,{hover:!1,children:[(0,x.jsx)(u,{className:`flex items-center gap-3 py-2 pl-3`,children:(0,x.jsxs)(`div`,{className:`flex flex-col gap-4 md:flex-row md:items-center`,children:[(0,x.jsxs)(`div`,{className:`flex shrink-0 flex-nowrap items-center gap-2`,children:[(0,x.jsx)(`img`,{className:`size-8 object-contain dark:invert`,role:`presentation`,src:e.ghostImage}),(0,x.jsx)(m,{className:`size-3`}),(0,x.jsx)(`img`,{className:`size-8 object-contain`,role:`presentation`,src:e.appImage})]}),(0,x.jsx)(`span`,{children:e.title})]})}),(0,x.jsx)(f,{visibility:`hover`,children:(0,x.jsx)(p,{className:`h-auto p-0 font-semibold whitespace-nowrap text-[#FF4A00] hover:text-[#FF4A00]`,variant:`link`,asChild:!0,children:(0,x.jsx)(`a`,{href:e.url,rel:`noopener noreferrer`,target:`_blank`,children:`Use this Zap`})})})]},e.url))})]})}export{me as a,S as c,pe as i,fe as n,ge as o,$ as r,he as s,_e as t};

package/core/frontend/meta/og-type.ts

@@ -1,13 +0,0 @@
-import type {ReadonlyDeep} from 'type-fest';
-
-export function getOgType(data: ReadonlyDeep<{context?: unknown[]}>): 'profile' | 'article' | 'website' {
-    const context = data.context ? data.context[0] : null;
-
-    if (context === 'author') {
-        return 'profile';
-    }
-    if (context === 'post') {
-        return 'article';
-    }
-    return 'website';
-}

package/core/frontend/services/routing/api-adapter.ts

@@ -1,157 +0,0 @@
-import _ from 'lodash';
-import errors from '@tryghost/errors';
-import {QUERY} from './config';
-import type {RouteData, DataEntry, DataShortForm, DataLongFormEntry} from '@tryghost/adapter-base-route-settings';
-
-/**
- * A resolved Content API call: which controller to reach for, which method to
- * call on it, and the options to call it with.
- */
-export interface ApiCallSpec {
-    controller: string;
-    type: 'read' | 'browse';
-    resource: string;
-    options: Record<string, unknown>;
-}
-
-/**
- * The resource read that a data entry claims — the router that declares it owns
- * that slug, and other routers redirect to it.
- */
-export interface ResourceRead {
-    resource: string;
-    slug: string;
-}
-
-interface ResourceConfig {
-    controller: string;
-    type?: 'read' | 'browse';
-    resource: string;
-    options?: Record<string, unknown>;
-}
-
-/**
- * Not every entry in QUERY is reachable from route data — `previews` and `email`
- * are internal routers with no `type`, so they resolve to no API call.
- */
-const RESOURCE_CONFIGS: Record<string, ResourceConfig | undefined> = QUERY;
-
-/**
- * The entry fields the Content API accepts as query options. Everything else on
- * a data entry is routing metadata (`redirect`) or unsupported (`fields`), and
- * is deliberately not forwarded.
- */
-const ALLOWED_QUERY_OPTIONS = ['limit', 'order', 'filter', 'include', 'slug', 'visibility', 'status', 'page'];
-
-function unknownResource(resource: string) {
-    return new errors.IncorrectUsageError({message: `Unknown route data resource: ${resource}`});
-}
-
-// Shorthand names a resource the short way (`tag`), long form the way the API
-// does (`tags`). Both land on the same config.
-function splitShortForm(shortForm: DataShortForm): [string, string] {
-    const [key, slug] = shortForm.split('.');
-    return [key, slug];
-}
-
-function shortFormConfig(key: string): ResourceConfig | undefined {
-    return RESOURCE_CONFIGS[key];
-}
-
-function longFormConfig(resource: string): ResourceConfig | undefined {
-    return Object.values(RESOURCE_CONFIGS).find(config => config?.resource === resource);
-}
-
-function resolveShortForm(shortForm: DataShortForm): ApiCallSpec {
-    const [key, slug] = splitShortForm(shortForm);
-    const config = shortFormConfig(key);
-
-    if (!config?.type) {
-        throw unknownResource(key);
-    }
-
-    return {
-        controller: config.controller,
-        type: config.type,
-        resource: config.resource,
-        options: {...config.options, slug}
-    };
-}
-
-function resolveLongForm(entry: DataLongFormEntry): ApiCallSpec {
-    const config = longFormConfig(entry.resource);
-
-    if (!config) {
-        throw unknownResource(entry.resource);
-    }
-
-    const options: Record<string, unknown> = _.pick(entry, ALLOWED_QUERY_OPTIONS);
-
-    return {
-        controller: config.controller,
-        type: entry.type,
-        resource: config.resource,
-        // A `read` targets one known resource, so the resource defaults (e.g.
-        // `visibility: public` for tags) apply. A `browse` is author-driven and
-        // takes only what the entry asked for.
-        options: entry.type === 'read' ? _.defaults(options, config.options) : options
-    };
-}
-
-/**
- * Resolve a single route data entry into a Content API call.
- *
- * This is the one place that knows how a domain `resource` maps onto a Ghost API
- * controller — routes.yaml talks about `tags`, the API is reached via
- * `tagsPublic`. Callers work with the domain model and never name a controller.
- *
- * @example resolveApiCall('tag.food')
- *   // => {controller: 'tagsPublic', type: 'read', resource: 'tags', options: {slug: 'food', visibility: 'public'}}
- */
-export function resolveApiCall(entry: DataEntry): ApiCallSpec {
-    return typeof entry === 'string' ? resolveShortForm(entry) : resolveLongForm(entry);
-}
-
-/**
- * Resolve a route's whole `data` block, keyed the way the theme sees it.
- *
- * Top-level shorthand (`data: tag.food`) has no author-given name, so it is
- * keyed by its resource shorthand — `tag` — matching what themes already expect.
- */
-export function resolveRouteData(routeData?: RouteData): Record<string, ApiCallSpec> {
-    if (!routeData) {
-        return {};
-    }
-
-    if (typeof routeData === 'string') {
-        const [key] = splitShortForm(routeData);
-
-        return {[key]: resolveApiCall(routeData)};
-    }
-
-    return _.mapValues(routeData, entry => resolveApiCall(entry));
-}
-
-/**
- * The resource read a data entry claims, or `null` if it claims none.
- *
- * Only a `read` names a single resource; a `browse` pulls a set and claims
- * nothing. Unlike {@link resolveApiCall} this answers a routing question, so an
- * entry it cannot make sense of is simply not a claim rather than an error.
- *
- * @example resolveResourceRead('tag.food') // => {resource: 'tags', slug: 'food'}
- */
-export function resolveResourceRead(entry: DataEntry): ResourceRead | null {
-    if (typeof entry === 'string') {
-        const [key, slug] = splitShortForm(entry);
-        const config = shortFormConfig(key);
-
-        return config?.type === 'read' ? {resource: config.resource, slug} : null;
-    }
-
-    if (entry.type !== 'read') {
-        return null;
-    }
-
-    return longFormConfig(entry.resource) ? {resource: entry.resource, slug: entry.slug} : null;
-}

package/core/frontend/services/routing/config.ts

@@ -1,59 +0,0 @@
-export const QUERY = {
-    tag: {
-        controller: 'tagsPublic',
-        type: 'read',
-        resource: 'tags',
-        options: {
-            slug: '%s',
-            visibility: 'public'
-        }
-    },
-    author: {
-        controller: 'authorsPublic',
-        type: 'read',
-        resource: 'authors',
-        options: {
-            slug: '%s'
-        }
-    },
-    post: {
-        controller: 'postsPublic',
-        type: 'read',
-        resource: 'posts',
-        options: {
-            slug: '%s'
-        }
-    },
-    page: {
-        controller: 'pagesPublic',
-        type: 'read',
-        resource: 'pages',
-        options: {
-            slug: '%s'
-        }
-    },
-    previews: {
-        controller: 'previews',
-        resource: 'previews'
-    },
-    email: {
-        controller: 'emailPost',
-        resource: 'email_posts',
-        options: {
-            slug: '%s'
-        }
-    }
-} as const;
-
-export const TAXONOMIES = {
-    tag: {
-        filter: 'tags:\'%s\'+tags.visibility:public',
-        editRedirect: '#/tags/:slug/',
-        resource: 'tags'
-    },
-    author: {
-        filter: 'authors:\'%s\'',
-        editRedirect: '#/settings/staff/:slug/',
-        resource: 'authors'
-    }
-} as const;

package/core/frontend/services/routing/controllers/entry/canonical-url.ts

@@ -1,14 +0,0 @@
-import {format, parse} from 'node:url';
-import type {Request} from 'express';
-import type {Entry} from '../entry';
-
-/**
- * Build the entry's canonical URL (its own pathname) carrying over the current
- * request's query string. Shared by the permalink and markdown-url redirects.
- */
-export default function buildCanonicalUrl(req: Request, entry: Entry): string {
-    return format({
-        pathname: parse(entry.url).pathname,
-        search: parse(req.originalUrl).search
-    });
-};

package/core/frontend/services/routing/controllers/entry/gift-links.ts

@@ -1,56 +0,0 @@
-import {format, parse} from 'node:url';
-import type {ParsedUrlQueryInput} from 'node:querystring';
-import type {Request} from 'express';
-import type {EntryResponse} from '../entry';
-
-/**
- * Build this request's URL with `?gift` removed, preserving path, subdirectory
- * and other query params. Rebuilt from req.query (qs-parsed) so bracket forms
- * like `?gift[]=x` are dropped too — otherwise the stripped redirect would loop.
- */
-function strippedGiftUrl(req: Request): string {
-    const query = {...req.query} as ParsedUrlQueryInput;
-    delete query.gift;
-    return format({pathname: parse(req.originalUrl).pathname, query});
-}
-
-/**
- * Whether this request is an attempt to use a gift link: a `?gift` param is
- * present (in any form).
- */
-export function isGiftRequest(req: Request): boolean {
-    return req.query.gift !== undefined;
-}
-
-/**
- * The gift token from the request, or null. A non-string or empty form (e.g.
- * `?gift[]=x`, `?gift=`) isn't a token.
- */
-export function giftToken(req: Request): string | null {
-    return typeof req.query.gift === 'string' && req.query.gift !== '' ? req.query.gift : null;
-}
-
-export function isInvalidGiftTokenError(err: unknown): boolean {
-    return (err as {code?: string} | null)?.code === 'INVALID_GIFT_TOKEN';
-}
-
-/**
- * Strip `?gift` and 301 to the clean URL (the page still renders, paywalled).
- * res.redirect, not urlUtils.redirect301, so the no-store set for ?gift
- * requests survives and the token-bearing redirect isn't cached.
- */
-export function stripGiftAndRedirect(req: Request, res: EntryResponse) {
-    return res.redirect(301, strippedGiftUrl(req));
-}
-
-/**
- * Prepare a verified gift render: don't index the unlocked variant, keep the
- * token out of the Referer on sub-resource requests, and set the internal
- * `_giftLink` flag on res.locals so it merges onto the render context root,
- * where `ghost_foot` (toast) and `ghost_head` (analytics) read it.
- */
-export function prepareGiftRender(res: EntryResponse, token: string): void {
-    res.set('X-Robots-Tag', 'noindex');
-    res.set('Referrer-Policy', 'no-referrer');
-    res.locals._giftLink = token;
-}

package/core/frontend/services/routing/controllers/entry/markdown.ts

@@ -1,72 +0,0 @@
-import type {Request, Response} from 'express';
-import type {Entry, EntryResponse} from '../entry';
-import buildCanonicalUrl from './canonical-url';
-
-const config = require('../../../../../shared/config');
-const urlUtils = require('../../../../../shared/url-utils').default;
-const {getAcceptedMarkdownContentType, getMarkdownPath, renderEntryMarkdown} = require('../../../llms/markdown');
-
-const MEMBERS_ONLY_MARKDOWN = '# Members-only content\n\nThis post requires a subscription and is not available for public access.\n';
-
-function llmsEnabled(req: Request): boolean {
-    const llmsService = req.app.get('llmsService') || null;
-    return Boolean(llmsService && llmsService.isEnabled());
-}
-
-/**
- * Only public entries ever render as markdown; gated entries stay html (or
- * 403 on an explicit `.md` URL).
- */
-export function isPublic(entry: Entry): boolean {
-    return entry.visibility === 'public';
-}
-
-function serveMarkdown(res: Response, entry: Entry) {
-    const llmsIndexUrl = urlUtils.urlFor({relativeUrl: '/llms.txt'}, true);
-    res.set('Cache-Control', `public, max-age=${config.get('caching:llms:maxAge')}`);
-    res.set('Content-Location', getMarkdownPath(new URL(entry.url).pathname));
-    res.type('text/markdown');
-    return res.send(renderEntryMarkdown(entry, {llmsIndexUrl}));
-}
-
-/**
- * Whether this is a `.md` URL request (the scoped suffix route sets the flag).
- */
-export function isMdRequest(res: EntryResponse): boolean {
-    return Boolean(res.routerOptions.isMarkdownRequest);
-}
-
-/**
- * Serve a `.md` URL as markdown for LLM consumption. When the feature is
- * disabled we redirect to the canonical (html) url; members-only content is
- * refused.
- */
-export function serveMdRequest(req: Request, res: Response, entry: Entry) {
-    if (!llmsEnabled(req)) {
-        return res.redirect(302, buildCanonicalUrl(req, entry));
-    }
-
-    if (!isPublic(entry)) {
-        return res.status(403).type('text/markdown').send(MEMBERS_ONLY_MARKDOWN);
-    }
-
-    return serveMarkdown(res, entry);
-}
-
-/**
- * Whether the request negotiates markdown via the Accept header (and the llms
- * feature is on) — request knowledge only, so it can be decided before the
- * entry lookup. Whether markdown is actually served still depends on the
- * entry: see `isPublic`.
- */
-export function isAcceptsRequest(req: Request): boolean {
-    return Boolean(getAcceptedMarkdownContentType(req)) && llmsEnabled(req);
-}
-
-/**
- * Serve markdown negotiated via the Accept header.
- */
-export function serveAcceptsRequest(res: Response, entry: Entry) {
-    res.vary('Accept');
-    return serveMarkdown(res, entry);
-}

package/core/frontend/services/routing/controllers/entry.ts

@@ -1,120 +0,0 @@
-import type {NextFunction, Request, Response} from 'express';
-import * as markdown from './entry/markdown';
-import * as giftLinks from './entry/gift-links';
-import buildCanonicalUrl from './entry/canonical-url';
-
-const debug = require('@tryghost/debug')('services:routing:controllers:entry');
-const config = require('../../../../shared/config');
-const urlUtils = require('../../../../shared/url-utils').default;
-const dataService = require('../../data');
-const renderer = require('../../rendering');
-
-// Routing context the router attaches to the matched entry's response.
-export interface RouterOptions {
-    isMarkdownRequest?: boolean;
-    context?: string[];
-    [key: string]: unknown;
-}
-
-export interface EntryResponse extends Response {
-    routerOptions: RouterOptions;
-}
-
-// The resolved post/page entry from the data layer; only the fields used here are typed.
-export interface Entry {
-    id: string;
-    url: string;
-    visibility: string;
-    [key: string]: unknown;
-}
-
-/**
- * The request's last url param is `/edit`: redirect to the admin editor, or fall
- * through to a 404 when admin redirects are disabled.
- */
-function editRedirect(res: EntryResponse, next: NextFunction, entry: Entry) {
-    if (!config.get('admin:redirects')) {
-        debug('is edit url but admin redirects are disabled');
-        return next();
-    }
-
-    debug('redirect. is edit url');
-    const resourceType = res.routerOptions.context?.includes('page') ? 'page' : 'post';
-    return urlUtils.redirectToAdmin(302, res, `/#/editor/${resourceType}/${entry.id}`);
-}
-
-/**
- * The requested path no longer matches the entry's canonical url — happens with
- * date permalinks after a publish date change.
- */
-function isPermalinkStale(req: Request, entry: Entry): boolean {
-    return urlUtils.absoluteToRelative(entry.url, {withoutSubdirectory: true}) !== req.path;
-}
-
-export async function entryController(req: Request, res: EntryResponse, next: NextFunction): Promise<void | Response> {
-    debug('entryController', res.routerOptions);
-
-    try {
-        // A gift view is html-only. Redirecting before the lookup keeps the
-        // token off the read, so markdown paths can never see an unlocked entry.
-        if (giftLinks.isGiftRequest(req) && (markdown.isMdRequest(res) || markdown.isAcceptsRequest(req))) {
-            return giftLinks.stripGiftAndRedirect(req, res);
-        }
-
-        // The raw gift token rides the lookup as read context; the API read
-        // verifies it against the entry and unlocks, or rejects the lookup.
-        const giftToken = giftLinks.isGiftRequest(req) ? giftLinks.giftToken(req) : null;
-
-        let lookup;
-        try {
-            lookup = await dataService.entryLookup(req.path, res.routerOptions, res.locals, {giftToken});
-        } catch (err) {
-            if (giftLinks.isInvalidGiftTokenError(err)) {
-                return giftLinks.stripGiftAndRedirect(req, res);
-            }
-            throw err;
-        }
-        const entry = lookup ? lookup.entry : false;
-
-        if (!entry || lookup.isUnknownOption) {
-            debug('no entry or unknown option');
-            return next();
-        }
-
-        if (lookup.isEditURL) {
-            return editRedirect(res, next, entry);
-        }
-
-        // MUST run before the permalink redirect below: a `.md` path can never
-        // equal the entry's canonical (html) path, so the redirect would always
-        // fire and 301 the request to html, losing the markdown intent.
-        if (markdown.isMdRequest(res)) {
-            return markdown.serveMdRequest(req, res, entry);
-        }
-
-        if (isPermalinkStale(req, entry)) {
-            debug('redirect');
-            return urlUtils.redirect301(res, buildCanonicalUrl(req, entry));
-        }
-
-        // MUST run after the permalink redirect above: negotiation rides on the
-        // canonical URL, so a stale dated-permalink URL is 301'd to canonical
-        // first, then markdown is served.
-        if (markdown.isAcceptsRequest(req) && markdown.isPublic(entry)) {
-            return markdown.serveAcceptsRequest(res, entry);
-        }
-
-        if (giftLinks.isGiftRequest(req)) {
-            if (!giftToken) {
-                return giftLinks.stripGiftAndRedirect(req, res);
-            }
-            // Reaching here means the lookup verified the token: the entry is
-            // the unlocked variant.
-            giftLinks.prepareGiftRender(res, giftToken);
-        }
-
-        return renderer.renderEntry(req, res)(entry);
-    } catch (err) {
-        return renderer.handleError(next)(err);
-    }
-};

package/core/frontend/services/routing/controllers/rss.ts

@@ -1,66 +0,0 @@
-import type {Request, Response, NextFunction} from 'express';
-import _ from 'lodash';
-import url from 'node:url';
-
-const debug = require('@tryghost/debug')('services:routing:controllers:rss');
-const security = require('@tryghost/security');
-const settingsCache = require('../../../../shared/settings-cache');
-const rssService = require('../../rss');
-const renderer = require('../../rendering');
-const dataService = require('../../data');
-
-export interface RSSPathOptions {
-    page: number;
-    slug?: string;
-}
-
-export interface RSSResponse extends Response {
-    routerOptions: Record<string, unknown>;
-}
-
-export interface RelatedData {
-    author?: Array<{name: string}>;
-    tag?: Array<{name: string}>;
-    [key: string]: unknown;
-}
-
-/**
- * Generates the title for the RSS feed based on author, tag, or publication settings.
- */
-function getTitle(relatedData?: RelatedData): string {
-    const data = relatedData || {};
-    let titleStart = _.get(data, 'author[0].name') || _.get(data, 'tag[0].name') || '';
-
-    titleStart += titleStart ? ' - ' : '';
-    return titleStart + settingsCache.get('title');
-}
-
-/**
- * RSS routing controller.
- * Fetches posts/meta data and delegates rendering to `rssService`.
- */
-export function rssController(req: Request, res: RSSResponse, next: NextFunction): Promise<void> {
-    debug('rssController');
-
-    const pathOptions: RSSPathOptions = {
-        page: 1, // required for fetchData
-        slug: req.params.slug ? security.string.safe(req.params.slug) : undefined
-    };
-
-    // CASE: Ghost is using an rss cache - normalize the URL for use as a key
-    const baseUrl = url.parse(req.originalUrl).pathname;
-
-    return dataService.fetchData(pathOptions, res.routerOptions, res.locals)
-        .then(function formatResult(result: {posts?: unknown[]; meta?: unknown; data?: RelatedData}) {
-            const response = _.pick(result, ['posts', 'meta']) as Record<string, unknown>;
-
-            response.title = getTitle(result.data);
-            response.description = settingsCache.get('description');
-
-            return response;
-        })
-        .then(function (data: Record<string, unknown>) {
-            return rssService.render(res, baseUrl, data);
-        })
-        .catch(renderer.handleError(next));
-}

package/core/frontend/services/routing/permalink-adapter.ts

@@ -1,10 +0,0 @@
-/**
- * Convert a domain-model permalink into Express / URL-service notation.
- *
- * @example toExpressNotation('/{slug}/')               // => '/:slug/'
- * @example toExpressNotation('/{primary_tag}/{slug}/') // => '/:primary_tag/:slug/'
- * @example toExpressNotation('/:slug/')                // => '/:slug/' (idempotent)
- */
-export function toExpressNotation(permalink: string): string {
-    return permalink.replace(/{(\w+)}/g, ':$1');
-}

package/core/frontend/src/utils/privacy.ts

@@ -1,66 +0,0 @@
-import type {JsonValue} from 'type-fest';
-
-/**
- * Utility functions for data privacy and PII protection
- */
-
-/**
- * Default attributes that should be masked for privacy
- */
-export const SENSITIVE_ATTRIBUTES = [
-    'username',
-    'user',
-    'user_id',
-    'userid',
-    'password',
-    'pass',
-    'pin',
-    'passcode',
-    'token',
-    'api_token',
-    'email',
-    'address',
-    'phone',
-    'sex',
-    'gender',
-    'order',
-    'order_id',
-    'orderid',
-    'payment',
-    'credit_card'
-];
-
-/**
- * Mask sensitive attributes in a payload
- */
-export function maskSensitiveData(payload: unknown, attributesToMask: ReadonlyArray<string> = SENSITIVE_ATTRIBUTES): string {
-    // Deep copy
-    let payloadStr = JSON.stringify(payload);
-
-    attributesToMask.forEach((attr) => {
-        payloadStr = payloadStr.replace(
-            new RegExp(`("${attr}"):(".+?"|\\d+)`, 'mgi'),
-            '$1:"********"'
-        );
-    });
-
-    return payloadStr;
-}
-
-/**
- * Process a payload with sensitive data masked
- */
-export function processPayload(payload: unknown, globalAttributes?: Record<string, unknown>, stringify?: true): string;
-export function processPayload(payload: unknown, globalAttributes: Record<string, unknown>, stringify: false): JsonValue;
-export function processPayload(payload: unknown, globalAttributes?: Record<string, unknown>, stringify?: boolean): string | JsonValue;
-export function processPayload(payload: unknown, globalAttributes = {}, stringify = true): string | JsonValue {
-    if (stringify) {
-        const maskedStr = maskSensitiveData(payload);
-        const processed = Object.assign({}, JSON.parse(maskedStr), globalAttributes);
-        return JSON.stringify(processed);
-    } else {
-        const processed = Object.assign({}, payload, globalAttributes);
-        const maskedStr = maskSensitiveData(processed);
-        return JSON.parse(maskedStr);
-    }
-}