@agntcms/next 0.3.1 → 0.3.4

package/dist/{defineSection-Kr0pWqMY.d.ts → defineSection-ByG5uwiR.d.cts}

@@ -1,4 +1,4 @@
-import { S as SectionSchema, c as FieldDescriptor, T as TextField, R as RichTextField, I as ImageField, d as ImageValue, V as VideoField, e as VideoValue, f as ReferenceField, g as ReferenceValue, L as LinkField, h as LinkValue, B as ButtonField, i as ButtonValue, N as NumberField, j as BooleanField, k as SelectField, l as ListField, m as FormOverridesFieldDescriptor, n as FormFieldOverrides } from './form-BqY0H1V5.js';
+import { S as SectionSchema, F as FieldDescriptor, T as TextField, R as RichTextField, I as ImageField, a as ImageValue, V as VideoField, b as VideoValue, c as ReferenceField, d as ReferenceValue, L as LinkField, e as LinkValue, B as ButtonField, f as ButtonValue, N as NumberField, g as BooleanField, h as SelectField, i as ListField } from './page-DXF0_SrY.cjs';
 
 declare const __slot: unique symbol;
 /**
@@ -70,7 +70,6 @@ type SlotItem<S extends SectionSchema> = {
  *   select        → EditableSlot<'select', string>
  *   list          → EditableSlot<'list', ReadonlyArray<SlotItem<S>>>
  *   reference     → ReferenceValue          (raw — see decision #3)
- *   formOverrides → FormFieldOverrides      (raw — see decision #4)
  *
  * EDITABILITY_DESIGN.md gates this design. The slot wrapping is the
  * load-bearing change: a slot is not assignable to `React.ReactNode`, so
@@ -80,11 +79,7 @@ type SlotItem<S extends SectionSchema> = {
  *
  * `ReferenceField` stays raw because references are not inline-editable
  * in v1 (decision #3): a slot would force a no-op `<EditableReference>`
- * wrapper without UX value. `FormOverridesField` stays raw because
- * forms render via a built-in `<Form>` component that reads the schema
- * itself; there is no author-defined component receiving raw form-field
- * values, and therefore no JSX surface where a raw render could leak
- * (decision #4).
+ * wrapper without UX value.
  *
  * `FieldDataType` and `FieldValueFor` (`domain/schema.ts`) NO LONGER
  * agree element-by-element: `FieldValueFor` is the bare runtime payload
@@ -100,13 +95,13 @@ type SlotItem<S extends SectionSchema> = {
  * "user-extensible field types" — invariant 5 (CLAUDE.md) forbids a
  * plugin system; this is just the internal seam.
  */
-type FieldDataType<F extends FieldDescriptor> = F extends TextField ? EditableSlot<'text', string> : F extends RichTextField ? EditableSlot<'richText', string> : F extends ImageField ? EditableSlot<'image', ImageValue> : F extends VideoField ? EditableSlot<'video', VideoValue> : F extends ReferenceField ? ReferenceValue : F extends LinkField ? EditableSlot<'link', LinkValue> : F extends ButtonField ? EditableSlot<'button', ButtonValue> : F extends NumberField ? EditableSlot<'number', number> : F extends BooleanField ? EditableSlot<'boolean', boolean> : F extends SelectField ? EditableSlot<'select', string> : F extends ListField<infer S> ? EditableSlot<'list', ReadonlyArray<SlotItem<S>>> : F extends FormOverridesFieldDescriptor ? FormFieldOverrides : never;
+type FieldDataType<F extends FieldDescriptor> = F extends TextField ? EditableSlot<'text', string> : F extends RichTextField ? EditableSlot<'richText', string> : F extends ImageField ? EditableSlot<'image', ImageValue> : F extends VideoField ? EditableSlot<'video', VideoValue> : F extends ReferenceField ? ReferenceValue : F extends LinkField ? EditableSlot<'link', LinkValue> : F extends ButtonField ? EditableSlot<'button', ButtonValue> : F extends NumberField ? EditableSlot<'number', number> : F extends BooleanField ? EditableSlot<'boolean', boolean> : F extends SelectField ? EditableSlot<'select', string> : F extends ListField<infer S> ? EditableSlot<'list', ReadonlyArray<SlotItem<S>>> : never;
 /**
  * Derives the SECTION-COMPONENT prop shape from its schema.
  *
  * Per `FieldDataType`, every editable field becomes an `EditableSlot<K,V>`
- * (so `<h1>{title}</h1>` is a TS error); `ReferenceValue` and
- * `FormFieldOverrides` stay raw. Example:
+ * (so `<h1>{title}</h1>` is a TS error); `ReferenceValue` stays raw.
+ * Example:
  *
  *   type HeroSchema = { title: TextField; image: ImageField; ref: ReferenceField }
  *   DataOf<HeroSchema> ≡ {
@@ -172,16 +167,6 @@ interface SectionDefinition<S extends SectionSchema, C extends SectionComponent<
      *  never interprets these — consumers that read a specific field narrow
      *  at the call site. */
     readonly defaults: Record<string, unknown>;
-    /** Optional list of layout names supported by this section. When present
-     *  with length >= 2, the preview-mode section picker renders a "Layout"
-     *  tab so authors can switch the layout without editing JSON. The section
-     *  component reads the active layout from its `layout` prop; the picker
-     *  writes that value via the existing per-field save round-trip.
-     *
-     *  Layouts are a SECTION-level concern, not a field descriptor, because
-     *  they gate structure inside a single component rather than introducing
-     *  a new field type. See ARCHITECTURE.md §4. */
-    readonly layouts?: readonly string[];
 }
 /**
  * The erased/heterogeneous form used by the registry and by
@@ -208,8 +193,6 @@ interface AnySectionDefinition {
     readonly component: (props: never) => unknown;
     /** Pre-computed placeholder values — see `SectionDefinition.defaults`. */
     readonly defaults: Record<string, unknown>;
-    /** Optional layout names — see `SectionDefinition.layouts`. */
-    readonly layouts?: readonly string[];
 }
 /**
  * Input shape for `defineSection`. Split out so the factory can use a single
@@ -221,8 +204,6 @@ interface DefineSectionInput<S extends SectionSchema, C extends SectionComponent
     readonly category?: string;
     readonly schema: S;
     readonly component: C;
-    /** Optional layout names — see `SectionDefinition.layouts`. */
-    readonly layouts?: readonly string[];
 }
 /**
  * Type-safe factory for a `SectionDefinition`.

package/dist/{defineSection-9qQ5ulAH.d.cts → defineSection-ChkZCQyQ.d.ts}

@@ -1,4 +1,4 @@
-import { S as SectionSchema, c as FieldDescriptor, T as TextField, R as RichTextField, I as ImageField, d as ImageValue, V as VideoField, e as VideoValue, f as ReferenceField, g as ReferenceValue, L as LinkField, h as LinkValue, B as ButtonField, i as ButtonValue, N as NumberField, j as BooleanField, k as SelectField, l as ListField, m as FormOverridesFieldDescriptor, n as FormFieldOverrides } from './form-BqY0H1V5.cjs';
+import { S as SectionSchema, F as FieldDescriptor, T as TextField, R as RichTextField, I as ImageField, a as ImageValue, V as VideoField, b as VideoValue, c as ReferenceField, d as ReferenceValue, L as LinkField, e as LinkValue, B as ButtonField, f as ButtonValue, N as NumberField, g as BooleanField, h as SelectField, i as ListField } from './page-DXF0_SrY.js';
 
 declare const __slot: unique symbol;
 /**
@@ -70,7 +70,6 @@ type SlotItem<S extends SectionSchema> = {
  *   select        → EditableSlot<'select', string>
  *   list          → EditableSlot<'list', ReadonlyArray<SlotItem<S>>>
  *   reference     → ReferenceValue          (raw — see decision #3)
- *   formOverrides → FormFieldOverrides      (raw — see decision #4)
  *
  * EDITABILITY_DESIGN.md gates this design. The slot wrapping is the
  * load-bearing change: a slot is not assignable to `React.ReactNode`, so
@@ -80,11 +79,7 @@ type SlotItem<S extends SectionSchema> = {
  *
  * `ReferenceField` stays raw because references are not inline-editable
  * in v1 (decision #3): a slot would force a no-op `<EditableReference>`
- * wrapper without UX value. `FormOverridesField` stays raw because
- * forms render via a built-in `<Form>` component that reads the schema
- * itself; there is no author-defined component receiving raw form-field
- * values, and therefore no JSX surface where a raw render could leak
- * (decision #4).
+ * wrapper without UX value.
  *
  * `FieldDataType` and `FieldValueFor` (`domain/schema.ts`) NO LONGER
  * agree element-by-element: `FieldValueFor` is the bare runtime payload
@@ -100,13 +95,13 @@ type SlotItem<S extends SectionSchema> = {
  * "user-extensible field types" — invariant 5 (CLAUDE.md) forbids a
  * plugin system; this is just the internal seam.
  */
-type FieldDataType<F extends FieldDescriptor> = F extends TextField ? EditableSlot<'text', string> : F extends RichTextField ? EditableSlot<'richText', string> : F extends ImageField ? EditableSlot<'image', ImageValue> : F extends VideoField ? EditableSlot<'video', VideoValue> : F extends ReferenceField ? ReferenceValue : F extends LinkField ? EditableSlot<'link', LinkValue> : F extends ButtonField ? EditableSlot<'button', ButtonValue> : F extends NumberField ? EditableSlot<'number', number> : F extends BooleanField ? EditableSlot<'boolean', boolean> : F extends SelectField ? EditableSlot<'select', string> : F extends ListField<infer S> ? EditableSlot<'list', ReadonlyArray<SlotItem<S>>> : F extends FormOverridesFieldDescriptor ? FormFieldOverrides : never;
+type FieldDataType<F extends FieldDescriptor> = F extends TextField ? EditableSlot<'text', string> : F extends RichTextField ? EditableSlot<'richText', string> : F extends ImageField ? EditableSlot<'image', ImageValue> : F extends VideoField ? EditableSlot<'video', VideoValue> : F extends ReferenceField ? ReferenceValue : F extends LinkField ? EditableSlot<'link', LinkValue> : F extends ButtonField ? EditableSlot<'button', ButtonValue> : F extends NumberField ? EditableSlot<'number', number> : F extends BooleanField ? EditableSlot<'boolean', boolean> : F extends SelectField ? EditableSlot<'select', string> : F extends ListField<infer S> ? EditableSlot<'list', ReadonlyArray<SlotItem<S>>> : never;
 /**
  * Derives the SECTION-COMPONENT prop shape from its schema.
  *
  * Per `FieldDataType`, every editable field becomes an `EditableSlot<K,V>`
- * (so `<h1>{title}</h1>` is a TS error); `ReferenceValue` and
- * `FormFieldOverrides` stay raw. Example:
+ * (so `<h1>{title}</h1>` is a TS error); `ReferenceValue` stays raw.
+ * Example:
  *
  *   type HeroSchema = { title: TextField; image: ImageField; ref: ReferenceField }
  *   DataOf<HeroSchema> ≡ {
@@ -172,16 +167,6 @@ interface SectionDefinition<S extends SectionSchema, C extends SectionComponent<
      *  never interprets these — consumers that read a specific field narrow
      *  at the call site. */
     readonly defaults: Record<string, unknown>;
-    /** Optional list of layout names supported by this section. When present
-     *  with length >= 2, the preview-mode section picker renders a "Layout"
-     *  tab so authors can switch the layout without editing JSON. The section
-     *  component reads the active layout from its `layout` prop; the picker
-     *  writes that value via the existing per-field save round-trip.
-     *
-     *  Layouts are a SECTION-level concern, not a field descriptor, because
-     *  they gate structure inside a single component rather than introducing
-     *  a new field type. See ARCHITECTURE.md §4. */
-    readonly layouts?: readonly string[];
 }
 /**
  * The erased/heterogeneous form used by the registry and by
@@ -208,8 +193,6 @@ interface AnySectionDefinition {
     readonly component: (props: never) => unknown;
     /** Pre-computed placeholder values — see `SectionDefinition.defaults`. */
     readonly defaults: Record<string, unknown>;
-    /** Optional layout names — see `SectionDefinition.layouts`. */
-    readonly layouts?: readonly string[];
 }
 /**
  * Input shape for `defineSection`. Split out so the factory can use a single
@@ -221,8 +204,6 @@ interface DefineSectionInput<S extends SectionSchema, C extends SectionComponent
     readonly category?: string;
     readonly schema: S;
     readonly component: C;
-    /** Optional layout names — see `SectionDefinition.layouts`. */
-    readonly layouts?: readonly string[];
 }
 /**
  * Type-safe factory for a `SectionDefinition`.

package/dist/{rateLimit-CXptRM_K.d.ts → getContent-DAgAn095.d.ts}

@@ -1,5 +1,5 @@
-import { S as SectionSchema, x as FieldValueFor, w as PageSummary, F as FormLookup, o as SubmissionStorageAdapter, P as Page } from './form-BqY0H1V5.js';
-import { C as ContentStorageAdapter } from './assets-P8OCigDG.js';
+import { S as SectionSchema, k as FieldValueFor, j as PageSummary, P as Page } from './page-DXF0_SrY.js';
+import { C as ContentStorageAdapter } from './assets-DHumg-X7.js';
 import { G as Global } from './global-CV23g5Bn.js';
 
 /**
@@ -194,76 +194,9 @@ interface CreateListPagesDeps {
  */
 declare const createListPages: ({ contentAdapter, }: CreateListPagesDeps) => ListPages;
 
-/** Result of a `submitForm` call. */
-type SubmitFormResult = {
-    readonly ok: true;
-    readonly stored: true;
-    readonly id: string;
-} | {
-    readonly ok: true;
-    readonly stored: false;
-    readonly suppressed: 'honeypot';
-} | {
-    readonly ok: false;
-    readonly error: 'unknown_form';
-} | {
-    readonly ok: false;
-    readonly error: 'validation_failed';
-    readonly errors: Record<string, string>;
-};
-/** Dependencies for `submitForm`. */
-interface SubmitFormDeps {
-    /**
-     * A `FormLookup`-shaped object: anything with `get(name)` returning a
-     * form definition. The concrete `FormRegistry` from `forms/registry.ts`
-     * structurally satisfies this interface, so the runtime can stay
-     * dependency-free of `forms/` (per ARCHITECTURE.md §8 dep graph).
-     */
-    readonly forms: FormLookup;
-    readonly submissionAdapter: SubmissionStorageAdapter;
-    /** Optional ID generator for tests; defaults to a ULID-like generator. */
-    readonly generateId?: () => string;
-    /** Optional clock for tests; defaults to `() => new Date().toISOString()`. */
-    readonly now?: () => string;
-}
-/** Input to `submitForm`. */
-interface SubmitFormInput {
-    readonly formName: string;
-    /** The raw payload from the request. Validated here, NOT in the handler. */
-    readonly payload: Readonly<Record<string, unknown>>;
-}
-/**
- * Build the runtime function that handles form submissions.
- *
- * Returns a `submitForm(input)` that:
- *   1. Looks up the form definition.
- *   2. Honors honeypot.
- *   3. Validates payload.
- *   4. Stamps id+submittedAt and stores via the adapter.
- */
-declare function createSubmitForm(deps: SubmitFormDeps): (input: SubmitFormInput) => Promise<SubmitFormResult>;
-/** Type of the function returned by `createSubmitForm`. */
-type SubmitForm = ReturnType<typeof createSubmitForm>;
-
 /** Dependencies for the runtime. */
 interface RuntimeOptions {
     readonly contentAdapter: ContentStorageAdapter;
-    /**
-     * Form registry — required for `submitForm` to look up form definitions.
-     * Accepts any `FormLookup`-shaped object (the concrete `FormRegistry`
-     * from `forms/registry.ts` satisfies this structurally). Optional for
-     * backward compatibility: when omitted, `submitForm` is wired to an
-     * empty lookup, so any submission attempt returns `unknown_form`.
-     * Templates that use forms (ARCHITECTURE.md §6.5) MUST pass a registry
-     * built from `defineConfig({ forms: [...] })`.
-     */
-    readonly forms?: FormLookup;
-    /**
-     * Submission storage adapter. Optional for backward compatibility: when
-     * omitted, `submitForm` is wired to a no-op adapter that throws on store.
-     * Templates that use forms MUST pass an adapter (FS or webhook).
-     */
-    readonly submissionAdapter?: SubmissionStorageAdapter;
 }
 /**
  * The runtime surface returned by `createRuntime`. This is what
@@ -303,16 +236,6 @@ interface Runtime {
      * fall-back branch.
      */
     readonly getGlobal: GetGlobal;
-    /**
-     * Accept a form submission. See `runtime/submitForm.ts` for the full
-     * pipeline (form lookup, honeypot, validation, store). Rate limiting
-     * is handled at the handler layer, not here.
-     *
-     * When the runtime was built without a `forms` registry or a
-     * `submissionAdapter`, `submitForm` returns `{ ok: false, error: 'unknown_form' }`
-     * for every call so downstream code can fail closed without crashing.
-     */
-    readonly submitForm: SubmitForm;
     /**
      * Return metadata-only summaries of every published page, optionally
      * filtered by a single tag and capped by `limit`. Used by user-defined
@@ -336,56 +259,4 @@ interface GetContentInput {
  */
 declare function createRuntime(options: RuntimeOptions): Runtime;
 
-/** Result of a rate-limit check. */
-interface RateLimitResult {
-    /** When `false`, the caller MUST reject the request with HTTP 429. */
-    readonly allowed: boolean;
-    /** Number of requests counted in the current window after this call. */
-    readonly count: number;
-    /** Epoch milliseconds when the current window resets. */
-    readonly resetAt: number;
-}
-/** Options for `createRateLimit`. */
-interface RateLimitOptions {
-    /** Max requests per window per (ip, formName) key. Default: 5. */
-    readonly perWindow: number;
-    /** Window length in milliseconds. Default: 60_000 (1 minute). */
-    readonly windowMs: number;
-    /**
-     * Clock injection point for tests. Called once per check to read the
-     * current time. Defaults to `Date.now`.
-     */
-    readonly now?: () => number;
-    /**
-     * Maximum number of (ip, formName) buckets retained in memory. When
-     * the map reaches this size, `check()` lazily sweeps expired buckets;
-     * if still at the cap, the oldest-resetAt buckets are dropped to make
-     * room. Default: 10_000. Must be a positive integer.
-     *
-     * Why: a public submit endpoint with one-off IPs (CDN edges, mobile
-     * NAT pools, attack traffic) would otherwise grow the map without
-     * bound until process restart.
-     */
-    readonly maxBuckets?: number;
-}
-interface RateLimit {
-    /**
-     * Record one request and return whether it is allowed under the current
-     * window. Always counts (even rejected calls) — this matches the typical
-     * abuse-mitigation expectation: a flood that hits the limit shouldn't
-     * "free" itself by spinning down the counter.
-     */
-    check(ip: string, formName: string): RateLimitResult;
-    /**
-     * Test-only utility: clear all buckets. Useful between tests to keep
-     * them order-independent without recreating the limiter.
-     */
-    reset(): void;
-}
-/**
- * Build an in-memory rate limiter. Each created limiter is independent
- * (no module-level singleton).
- */
-declare function createRateLimit(options: RateLimitOptions): RateLimit;
-
-export { type FieldIn as F, type GetGlobal as G, type ListPages as L, type PreviewMode as P, type RateLimit as R, type SubmitForm as S, type GetContent as a, type GetContentInput as b, type GetContentOptions as c, type GetGlobalInput as d, type ListPagesInput as e, type ListPagesSort as f, type PageContent as g, type PreviewField as h, type PreviewFieldOrigin as i, type RateLimitOptions as j, type RateLimitResult as k, type Runtime as l, type RuntimeOptions as m, type SubmitFormDeps as n, type SubmitFormInput as o, type SubmitFormResult as p, createListPages as q, createRateLimit as r, createRuntime as s, createSubmitForm as t };
+export { type FieldIn as F, type GetGlobal as G, type ListPages as L, type PreviewMode as P, type Runtime as R, type GetContent as a, type GetContentInput as b, type GetContentOptions as c, type GetGlobalInput as d, type ListPagesInput as e, type ListPagesSort as f, type PageContent as g, type PreviewField as h, type PreviewFieldOrigin as i, type RuntimeOptions as j, createListPages as k, createRuntime as l };

package/dist/{rateLimit-CiROGTLE.d.cts → getContent-yK-sARoc.d.cts}

@@ -1,5 +1,5 @@
-import { S as SectionSchema, x as FieldValueFor, w as PageSummary, F as FormLookup, o as SubmissionStorageAdapter, P as Page } from './form-BqY0H1V5.cjs';
-import { C as ContentStorageAdapter } from './assets-Cyt9upqW.cjs';
+import { S as SectionSchema, k as FieldValueFor, j as PageSummary, P as Page } from './page-DXF0_SrY.cjs';
+import { C as ContentStorageAdapter } from './assets-B3oNeLdj.cjs';
 import { G as Global } from './global-CV23g5Bn.cjs';
 
 /**
@@ -194,76 +194,9 @@ interface CreateListPagesDeps {
  */
 declare const createListPages: ({ contentAdapter, }: CreateListPagesDeps) => ListPages;
 
-/** Result of a `submitForm` call. */
-type SubmitFormResult = {
-    readonly ok: true;
-    readonly stored: true;
-    readonly id: string;
-} | {
-    readonly ok: true;
-    readonly stored: false;
-    readonly suppressed: 'honeypot';
-} | {
-    readonly ok: false;
-    readonly error: 'unknown_form';
-} | {
-    readonly ok: false;
-    readonly error: 'validation_failed';
-    readonly errors: Record<string, string>;
-};
-/** Dependencies for `submitForm`. */
-interface SubmitFormDeps {
-    /**
-     * A `FormLookup`-shaped object: anything with `get(name)` returning a
-     * form definition. The concrete `FormRegistry` from `forms/registry.ts`
-     * structurally satisfies this interface, so the runtime can stay
-     * dependency-free of `forms/` (per ARCHITECTURE.md §8 dep graph).
-     */
-    readonly forms: FormLookup;
-    readonly submissionAdapter: SubmissionStorageAdapter;
-    /** Optional ID generator for tests; defaults to a ULID-like generator. */
-    readonly generateId?: () => string;
-    /** Optional clock for tests; defaults to `() => new Date().toISOString()`. */
-    readonly now?: () => string;
-}
-/** Input to `submitForm`. */
-interface SubmitFormInput {
-    readonly formName: string;
-    /** The raw payload from the request. Validated here, NOT in the handler. */
-    readonly payload: Readonly<Record<string, unknown>>;
-}
-/**
- * Build the runtime function that handles form submissions.
- *
- * Returns a `submitForm(input)` that:
- *   1. Looks up the form definition.
- *   2. Honors honeypot.
- *   3. Validates payload.
- *   4. Stamps id+submittedAt and stores via the adapter.
- */
-declare function createSubmitForm(deps: SubmitFormDeps): (input: SubmitFormInput) => Promise<SubmitFormResult>;
-/** Type of the function returned by `createSubmitForm`. */
-type SubmitForm = ReturnType<typeof createSubmitForm>;
-
 /** Dependencies for the runtime. */
 interface RuntimeOptions {
     readonly contentAdapter: ContentStorageAdapter;
-    /**
-     * Form registry — required for `submitForm` to look up form definitions.
-     * Accepts any `FormLookup`-shaped object (the concrete `FormRegistry`
-     * from `forms/registry.ts` satisfies this structurally). Optional for
-     * backward compatibility: when omitted, `submitForm` is wired to an
-     * empty lookup, so any submission attempt returns `unknown_form`.
-     * Templates that use forms (ARCHITECTURE.md §6.5) MUST pass a registry
-     * built from `defineConfig({ forms: [...] })`.
-     */
-    readonly forms?: FormLookup;
-    /**
-     * Submission storage adapter. Optional for backward compatibility: when
-     * omitted, `submitForm` is wired to a no-op adapter that throws on store.
-     * Templates that use forms MUST pass an adapter (FS or webhook).
-     */
-    readonly submissionAdapter?: SubmissionStorageAdapter;
 }
 /**
  * The runtime surface returned by `createRuntime`. This is what
@@ -303,16 +236,6 @@ interface Runtime {
      * fall-back branch.
      */
     readonly getGlobal: GetGlobal;
-    /**
-     * Accept a form submission. See `runtime/submitForm.ts` for the full
-     * pipeline (form lookup, honeypot, validation, store). Rate limiting
-     * is handled at the handler layer, not here.
-     *
-     * When the runtime was built without a `forms` registry or a
-     * `submissionAdapter`, `submitForm` returns `{ ok: false, error: 'unknown_form' }`
-     * for every call so downstream code can fail closed without crashing.
-     */
-    readonly submitForm: SubmitForm;
     /**
      * Return metadata-only summaries of every published page, optionally
      * filtered by a single tag and capped by `limit`. Used by user-defined
@@ -336,56 +259,4 @@ interface GetContentInput {
  */
 declare function createRuntime(options: RuntimeOptions): Runtime;
 
-/** Result of a rate-limit check. */
-interface RateLimitResult {
-    /** When `false`, the caller MUST reject the request with HTTP 429. */
-    readonly allowed: boolean;
-    /** Number of requests counted in the current window after this call. */
-    readonly count: number;
-    /** Epoch milliseconds when the current window resets. */
-    readonly resetAt: number;
-}
-/** Options for `createRateLimit`. */
-interface RateLimitOptions {
-    /** Max requests per window per (ip, formName) key. Default: 5. */
-    readonly perWindow: number;
-    /** Window length in milliseconds. Default: 60_000 (1 minute). */
-    readonly windowMs: number;
-    /**
-     * Clock injection point for tests. Called once per check to read the
-     * current time. Defaults to `Date.now`.
-     */
-    readonly now?: () => number;
-    /**
-     * Maximum number of (ip, formName) buckets retained in memory. When
-     * the map reaches this size, `check()` lazily sweeps expired buckets;
-     * if still at the cap, the oldest-resetAt buckets are dropped to make
-     * room. Default: 10_000. Must be a positive integer.
-     *
-     * Why: a public submit endpoint with one-off IPs (CDN edges, mobile
-     * NAT pools, attack traffic) would otherwise grow the map without
-     * bound until process restart.
-     */
-    readonly maxBuckets?: number;
-}
-interface RateLimit {
-    /**
-     * Record one request and return whether it is allowed under the current
-     * window. Always counts (even rejected calls) — this matches the typical
-     * abuse-mitigation expectation: a flood that hits the limit shouldn't
-     * "free" itself by spinning down the counter.
-     */
-    check(ip: string, formName: string): RateLimitResult;
-    /**
-     * Test-only utility: clear all buckets. Useful between tests to keep
-     * them order-independent without recreating the limiter.
-     */
-    reset(): void;
-}
-/**
- * Build an in-memory rate limiter. Each created limiter is independent
- * (no module-level singleton).
- */
-declare function createRateLimit(options: RateLimitOptions): RateLimit;
-
-export { type FieldIn as F, type GetGlobal as G, type ListPages as L, type PreviewMode as P, type RateLimit as R, type SubmitForm as S, type GetContent as a, type GetContentInput as b, type GetContentOptions as c, type GetGlobalInput as d, type ListPagesInput as e, type ListPagesSort as f, type PageContent as g, type PreviewField as h, type PreviewFieldOrigin as i, type RateLimitOptions as j, type RateLimitResult as k, type Runtime as l, type RuntimeOptions as m, type SubmitFormDeps as n, type SubmitFormInput as o, type SubmitFormResult as p, createListPages as q, createRateLimit as r, createRuntime as s, createSubmitForm as t };
+export { type FieldIn as F, type GetGlobal as G, type ListPages as L, type PreviewMode as P, type Runtime as R, type GetContent as a, type GetContentInput as b, type GetContentOptions as c, type GetGlobalInput as d, type ListPagesInput as e, type ListPagesSort as f, type PageContent as g, type PreviewField as h, type PreviewFieldOrigin as i, type RuntimeOptions as j, createListPages as k, createRuntime as l };