@aotter/mantle-runtime 0.0.11-alpha.11

package/dist/domain/port/MediaStorage.d.ts

@@ -0,0 +1,102 @@
+/**
+ * Optional first-party media storage — **public bucket only**. Not
+ * part of the required v0.1.0 provisioning path: starters must keep
+ * working without an implementation.
+ *
+ * The port is intentionally object-storage-shaped. Cloudflare R2, S3,
+ * filesystem, or a future hosted service can implement it without
+ * leaking adapter types into runtime use cases.
+ *
+ * # Scope: public bucket only
+ *
+ * `getPublicUrl()` returns an unconditional public URL; reads bypass
+ * the Worker (`MEDIA_PUBLIC_URL_BASE` → CDN → R2). `MediaAsset.publicUrl`
+ * is frozen at commit time and embedded directly into entry data
+ * (e.g. `posts.coverUrl`). For public assets the URL is permanent and
+ * the read path stays cheap.
+ *
+ * **Private content (subscription-gated, fan-club, signed-GET, etc.)
+ * is a separate port + separate R2 bucket in v0.2** — see ADR-0011
+ * § "Public vs private media — two buckets, two ports". The private
+ * port will live alongside this one (`PrivateMediaStorage`); current
+ * callers stay untouched. Don't bolt a `visibility` flag onto this
+ * port to retrofit private semantics — that's not the seam.
+ *
+ * Method-arg shapes use the `*Args` suffix (matching `EntryRepository`)
+ * to leave the `*Request` / `*Response` namespace for use-case DTOs in
+ * `usecase/dto/media/`.
+ */
+export interface MediaStorage {
+    /** Create a short-lived direct-upload capability for a single object. */
+    createUpload(args: CreateUploadArgs): Promise<CreateUploadResult>;
+    /** Commit a previously-uploaded object after adapter metadata checks. */
+    commitUpload(args: CommitUploadArgs): Promise<MediaAsset>;
+    /** Resolve the stable public URL for an already committed asset. */
+    getPublicUrl(args: GetPublicUrlArgs): Promise<string>;
+    deleteAsset(args: DeleteAssetArgs): Promise<void>;
+}
+export interface CreateUploadArgs {
+    readonly filename: string;
+    readonly mimeType: string;
+    /** Already checked against `maxBytes` by the use case. Adapters may
+     *  forward it as a `Content-Length` constraint when the backend
+     *  supports it. */
+    readonly byteSize: number;
+    readonly maxBytes: number;
+    readonly purpose?: string;
+    readonly now: number;
+    readonly expiresAt: number;
+    readonly metadata?: Readonly<Record<string, string>>;
+}
+export interface CreateUploadResult {
+    readonly uploadId: string;
+    readonly method: "PUT";
+    readonly uploadUrl: string;
+    readonly storageKey: string;
+    readonly expiresAt: number;
+    readonly requiredHeaders?: Readonly<Record<string, string>>;
+    /** Optional preview of the eventual public URL. Commit remains authoritative. */
+    readonly publicUrl?: string;
+}
+/**
+ * Adapter contract: before returning `MediaAsset`, verify the stored
+ * object's actual content-type against `expectedMimeType` and actual
+ * byte size against `maxBytes`. The use case only validates caller-
+ * declared MIME, not the bytes that landed in storage — without
+ * adapter-side verification, a caller can declare `image/png` and PUT
+ * a PDF. Mismatch → throw `DiagnosticError(MEDIA_MIME_REJECTED)` or
+ * `MEDIA_SIZE_EXCEEDED`. (Use whichever metadata primitive the
+ * backend exposes: R2 / S3 `head()`, filesystem `stat()`.)
+ */
+export interface CommitUploadArgs {
+    readonly uploadId: string;
+    readonly storageKey: string;
+    /** Adapter must verify stored object's actual content-type matches. */
+    readonly expectedMimeType: string;
+    /** Adapter must verify stored object's actual byte size ≤ this. */
+    readonly maxBytes: number;
+    readonly alt?: string;
+    readonly caption?: string;
+    readonly checksum?: string;
+    readonly now: number;
+}
+export interface GetPublicUrlArgs {
+    readonly assetId: string;
+    readonly storageKey: string;
+}
+export interface DeleteAssetArgs {
+    readonly assetId: string;
+    readonly storageKey: string;
+}
+export interface MediaAsset {
+    readonly id: string;
+    readonly storageKey: string;
+    readonly publicUrl: string;
+    readonly mimeType: string;
+    readonly byteSize: number;
+    readonly alt?: string;
+    readonly caption?: string;
+    readonly createdAt: number;
+    readonly metadata?: Readonly<Record<string, string>>;
+}
+//# sourceMappingURL=MediaStorage.d.ts.map

package/dist/domain/port/MediaStorage.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"MediaStorage.d.ts","sourceRoot":"","sources":["../../../src/domain/port/MediaStorage.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AACH,MAAM,WAAW,YAAY;IAC3B,yEAAyE;IACzE,YAAY,CAAC,IAAI,EAAE,gBAAgB,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAAC;IAElE,yEAAyE;IACzE,YAAY,CAAC,IAAI,EAAE,gBAAgB,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;IAE1D,oEAAoE;IACpE,YAAY,CAAC,IAAI,EAAE,gBAAgB,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAEtD,WAAW,CAAC,IAAI,EAAE,eAAe,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACnD;AAED,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B;;uBAEmB;IACnB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,QAAQ,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;CACtD;AAED,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,MAAM,EAAE,KAAK,CAAC;IACvB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,eAAe,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IAC5D,iFAAiF;IACjF,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;CAC7B;AAED;;;;;;;;;GASG;AACH,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,uEAAuE;IACvE,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;IAClC,mEAAmE;IACnE,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;CAC7B;AAED,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;CAC7B;AAED,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,QAAQ,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;CACtD"}

package/dist/domain/port/MediaStorage.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=MediaStorage.js.map

package/dist/domain/port/MediaStorage.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"MediaStorage.js","sourceRoot":"","sources":["../../../src/domain/port/MediaStorage.ts"],"names":[],"mappings":""}

package/dist/domain/port/PublishOrchestrator.d.ts

@@ -0,0 +1,25 @@
+import type { SiteConfig } from "@aotter/mantle-spec";
+import type { TemplateRegistry } from "../model/TemplateRegistry.js";
+/**
+ * `PublishOrchestrator` — the publish-pipeline surface adapters call
+ * after a successful `requestPublish` to materialize HTML / `.md` /
+ * list pages / `llms.txt` into the `KvCache`.
+ *
+ * `TemplateRegistry` is consumer-supplied (`createCmsRuntime` accepts
+ * it); rendering is idempotent — two invocations with the same entry
+ * id are safe.
+ *
+ * The HTML implementation is in
+ * `infrastructure/render/HtmlPublishOrchestrator`.
+ */
+export interface PublishOrchestrator {
+    publish(request: PublishEntryRequest): Promise<void>;
+    unpublish(request: PublishEntryRequest): Promise<void>;
+}
+export interface PublishEntryRequest {
+    readonly entryId: string;
+    readonly site: SiteConfig;
+    readonly templates: TemplateRegistry;
+    readonly htmlDoctype?: string;
+}
+//# sourceMappingURL=PublishOrchestrator.d.ts.map

package/dist/domain/port/PublishOrchestrator.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"PublishOrchestrator.d.ts","sourceRoot":"","sources":["../../../src/domain/port/PublishOrchestrator.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AACtD,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,8BAA8B,CAAC;AAErE;;;;;;;;;;;GAWG;AACH,MAAM,WAAW,mBAAmB;IAClC,OAAO,CAAC,OAAO,EAAE,mBAAmB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACrD,SAAS,CAAC,OAAO,EAAE,mBAAmB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACxD;AAED,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC;IAC1B,QAAQ,CAAC,SAAS,EAAE,gBAAgB,CAAC;IACrC,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;CAC/B"}

package/dist/domain/port/PublishOrchestrator.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=PublishOrchestrator.js.map

package/dist/domain/port/PublishOrchestrator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"PublishOrchestrator.js","sourceRoot":"","sources":["../../../src/domain/port/PublishOrchestrator.ts"],"names":[],"mappings":""}

package/dist/domain/port/SiteConfigRepository.d.ts

@@ -0,0 +1,27 @@
+import type { SiteConfig, SiteDefaults } from "@aotter/mantle-spec";
+/**
+ * `SiteConfigRepository` — the `site_config` row read/write surface
+ * the runtime exposes to render paths and `bootInit`.
+ *
+ * `seed` is called once during `bootInit` with the config-supplied
+ * `siteDefaults`; subsequent operator edits to the row are preserved
+ * (INSERT … ON CONFLICT DO NOTHING).
+ *
+ * `load` returns the merged view template authors and adapters see.
+ * `readLocales` exists separately because boot-time validation needs
+ * the locales list before the rest of the row is meaningful.
+ *
+ * The DB-backed implementation is in
+ * `infrastructure/persistence/DatabaseSiteConfigRepository`.
+ */
+export interface SiteConfigRepository {
+    seed(defaults: SiteDefaults | undefined): Promise<void>;
+    load(): Promise<SiteConfig>;
+    readLocales(): Promise<readonly string[]>;
+    /** Declared media purpose taxonomy (`SiteConfig.media.purposes`).
+     *  Empty array when the deployment didn't declare any — symmetric
+     *  with "no `MediaStorage` configured" and used by the MCP tool
+     *  catalog to gate `create_media_upload` / `commit_media_upload`. */
+    readMediaPurposes(): Promise<readonly string[]>;
+}
+//# sourceMappingURL=SiteConfigRepository.d.ts.map

package/dist/domain/port/SiteConfigRepository.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"SiteConfigRepository.d.ts","sourceRoot":"","sources":["../../../src/domain/port/SiteConfigRepository.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAEpE;;;;;;;;;;;;;;GAcG;AACH,MAAM,WAAW,oBAAoB;IACnC,IAAI,CAAC,QAAQ,EAAE,YAAY,GAAG,SAAS,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACxD,IAAI,IAAI,OAAO,CAAC,UAAU,CAAC,CAAC;IAC5B,WAAW,IAAI,OAAO,CAAC,SAAS,MAAM,EAAE,CAAC,CAAC;IAC1C;;;yEAGqE;IACrE,iBAAiB,IAAI,OAAO,CAAC,SAAS,MAAM,EAAE,CAAC,CAAC;CACjD"}

package/dist/domain/port/SiteConfigRepository.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=SiteConfigRepository.js.map

package/dist/domain/port/SiteConfigRepository.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"SiteConfigRepository.js","sourceRoot":"","sources":["../../../src/domain/port/SiteConfigRepository.ts"],"names":[],"mappings":""}

package/dist/domain/port/index.d.ts

@@ -0,0 +1,30 @@
+/**
+ * `domain/port/` — interface contracts the use cases depend on.
+ * Concrete implementations live in `infrastructure/` (or in adapter
+ * packages like `@aotter/mantle-cloudflare`).
+ *
+ * Required adapter ports — `DatabaseDriver`, `KvCache`, `AssetServer`.
+ * Optional feature ports — `MediaStorage` (public-bucket media
+ * uploads), `EmailSender` (transactional email — passwordless auth,
+ * receipts). Dispatcher-internal seams — `Clock`, `IdGenerator`,
+ * `HandlerRegistry`, `EntryRepository`. Identity / session / OAuth
+ * live outside the runtime via Better Auth (ADR-0014).
+ *
+ * Per the Aotter clean-architecture convention, no `*Port` suffix;
+ * ports are discoverable by the package alone.
+ */
+export type { DatabaseDriver, PreparedStatement, RunResult, BatchResult, MigrationRunner, Migration, } from "./DatabaseDriver.js";
+export type { KvCache, KvPutOptions, KvListResult } from "./KvCache.js";
+export type { AssetServer } from "./AssetServer.js";
+export type { EntryRepository, CreateEntryArgs, UpdateEntryArgs, DeleteEntryArgs, ArchiveEntryArgs, TransitionStatusArgs, ListEntriesArgs, ListEntriesResult, FindEntryByDataFieldArgs, FindEntryByDataFieldsArgs, MutationHookFields, } from "./EntryRepository.js";
+export type { SiteConfigRepository } from "./SiteConfigRepository.js";
+export type { PublishOrchestrator, PublishEntryRequest, } from "./PublishOrchestrator.js";
+export type { MediaStorage, CreateUploadArgs, CreateUploadResult, CommitUploadArgs, GetPublicUrlArgs, DeleteAssetArgs, MediaAsset, } from "./MediaStorage.js";
+export type { EmailSender, EmailSendArgs, } from "./EmailSender.js";
+export type { LifecycleHookRunner, RunLifecycleHookRequest, } from "./LifecycleHookRunner.js";
+export type { DeferredHookDispatcher, DeferredHookEnvelope, CtxSnapshot, } from "./DeferredHookDispatcher.js";
+export { ctxSnapshotFrom } from "./DeferredHookDispatcher.js";
+export { type Clock, SystemClock } from "./Clock.js";
+export { type IdGenerator, RandomUuidGenerator } from "./IdGenerator.js";
+export { type HandlerRegistry, InMemoryHandlerRegistry, buildHandlerRegistry, } from "./HandlerRegistry.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/domain/port/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/domain/port/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AACH,YAAY,EACV,cAAc,EACd,iBAAiB,EACjB,SAAS,EACT,WAAW,EACX,eAAe,EACf,SAAS,GACV,MAAM,qBAAqB,CAAC;AAC7B,YAAY,EAAE,OAAO,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AACxE,YAAY,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AACpD,YAAY,EACV,eAAe,EACf,eAAe,EACf,eAAe,EACf,eAAe,EACf,gBAAgB,EAChB,oBAAoB,EACpB,eAAe,EACf,iBAAiB,EACjB,wBAAwB,EACxB,yBAAyB,EACzB,kBAAkB,GACnB,MAAM,sBAAsB,CAAC;AAC9B,YAAY,EAAE,oBAAoB,EAAE,MAAM,2BAA2B,CAAC;AACtE,YAAY,EACV,mBAAmB,EACnB,mBAAmB,GACpB,MAAM,0BAA0B,CAAC;AAClC,YAAY,EACV,YAAY,EACZ,gBAAgB,EAChB,kBAAkB,EAClB,gBAAgB,EAChB,gBAAgB,EAChB,eAAe,EACf,UAAU,GACX,MAAM,mBAAmB,CAAC;AAC3B,YAAY,EACV,WAAW,EACX,aAAa,GACd,MAAM,kBAAkB,CAAC;AAC1B,YAAY,EACV,mBAAmB,EACnB,uBAAuB,GACxB,MAAM,0BAA0B,CAAC;AAClC,YAAY,EACV,sBAAsB,EACtB,oBAAoB,EACpB,WAAW,GACZ,MAAM,6BAA6B,CAAC;AACrC,OAAO,EAAE,eAAe,EAAE,MAAM,6BAA6B,CAAC;AAC9D,OAAO,EAAE,KAAK,KAAK,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AACrD,OAAO,EAAE,KAAK,WAAW,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAC;AACzE,OAAO,EACL,KAAK,eAAe,EACpB,uBAAuB,EACvB,oBAAoB,GACrB,MAAM,sBAAsB,CAAC"}

package/dist/domain/port/index.js

@@ -0,0 +1,5 @@
+export { ctxSnapshotFrom } from "./DeferredHookDispatcher.js";
+export { SystemClock } from "./Clock.js";
+export { RandomUuidGenerator } from "./IdGenerator.js";
+export { InMemoryHandlerRegistry, buildHandlerRegistry, } from "./HandlerRegistry.js";
+//# sourceMappingURL=index.js.map

package/dist/domain/port/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/domain/port/index.ts"],"names":[],"mappings":"AAiEA,OAAO,EAAE,eAAe,EAAE,MAAM,6BAA6B,CAAC;AAC9D,OAAO,EAAc,WAAW,EAAE,MAAM,YAAY,CAAC;AACrD,OAAO,EAAoB,mBAAmB,EAAE,MAAM,kBAAkB,CAAC;AACzE,OAAO,EAEL,uBAAuB,EACvB,oBAAoB,GACrB,MAAM,sBAAsB,CAAC"}

package/dist/domain/service/AbsoluteUrl.d.ts

@@ -0,0 +1,6 @@
+export declare function absoluteUrl(origin: string, path: string): string;
+/** Append `.md` before any query string / hash. Used by the SEO
+ *  composer + sitemap to derive markdown-mirror URLs without
+ *  mangling query params. */
+export declare function appendMarkdownExt(absoluteOrPath: string): string;
+//# sourceMappingURL=AbsoluteUrl.d.ts.map

package/dist/domain/service/AbsoluteUrl.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"AbsoluteUrl.d.ts","sourceRoot":"","sources":["../../../src/domain/service/AbsoluteUrl.ts"],"names":[],"mappings":"AAcA,wBAAgB,WAAW,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,CAMhE;AAED;;6BAE6B;AAC7B,wBAAgB,iBAAiB,CAAC,cAAc,EAAE,MAAM,GAAG,MAAM,CAIhE"}

package/dist/domain/service/AbsoluteUrl.js

@@ -0,0 +1,33 @@
+/**
+ * Absolutize a path against a `SiteConfig.origin`. Single chokepoint
+ * so trailing-slash handling is consistent across every URL the SDK
+ * emits — sitemap, llms.txt mirrors, SEO canonical, hreflang siblings.
+ *
+ * Two divergent strip behaviors used to live across the codebase
+ * (`/\/$/` vs `/\/+$/`); both flow through here now.
+ *
+ * Empty `origin` returns the path unchanged — useful for tests and
+ * for templates that intentionally emit relative URLs. Already-
+ * absolute `path` (http(s)://...) returns unchanged.
+ */
+const TRAILING_SLASHES = /\/+$/;
+export function absoluteUrl(origin, path) {
+    if (!origin)
+        return path;
+    if (path.startsWith("http://") || path.startsWith("https://"))
+        return path;
+    const cleanOrigin = origin.replace(TRAILING_SLASHES, "");
+    if (!path)
+        return cleanOrigin;
+    return `${cleanOrigin}${path.startsWith("/") ? "" : "/"}${path}`;
+}
+/** Append `.md` before any query string / hash. Used by the SEO
+ *  composer + sitemap to derive markdown-mirror URLs without
+ *  mangling query params. */
+export function appendMarkdownExt(absoluteOrPath) {
+    const match = /^([^?#]*)(.*)$/.exec(absoluteOrPath);
+    if (!match)
+        return `${absoluteOrPath}.md`;
+    return `${match[1]}.md${match[2]}`;
+}
+//# sourceMappingURL=AbsoluteUrl.js.map

package/dist/domain/service/AbsoluteUrl.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"AbsoluteUrl.js","sourceRoot":"","sources":["../../../src/domain/service/AbsoluteUrl.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AACH,MAAM,gBAAgB,GAAG,MAAM,CAAC;AAEhC,MAAM,UAAU,WAAW,CAAC,MAAc,EAAE,IAAY;IACtD,IAAI,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IACzB,IAAI,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC;QAAE,OAAO,IAAI,CAAC;IAC3E,MAAM,WAAW,GAAG,MAAM,CAAC,OAAO,CAAC,gBAAgB,EAAE,EAAE,CAAC,CAAC;IACzD,IAAI,CAAC,IAAI;QAAE,OAAO,WAAW,CAAC;IAC9B,OAAO,GAAG,WAAW,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,GAAG,IAAI,EAAE,CAAC;AACnE,CAAC;AAED;;6BAE6B;AAC7B,MAAM,UAAU,iBAAiB,CAAC,cAAsB;IACtD,MAAM,KAAK,GAAG,gBAAgB,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;IACpD,IAAI,CAAC,KAAK;QAAE,OAAO,GAAG,cAAc,KAAK,CAAC;IAC1C,OAAO,GAAG,KAAK,CAAC,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;AACrC,CAAC"}

package/dist/domain/service/AuthPredicateEvaluator.d.ts

@@ -0,0 +1,29 @@
+import { type AuthPredicate, type Diagnostic, type Phase } from "@aotter/mantle-spec";
+import type { HandlerContext } from "../model/HandlerContext.js";
+/**
+ * Pure auth-predicate evaluator. Shared by `InvokeProcedureUseCase`
+ * and `ExecuteViewUseCase` so the `requires.auth.all` semantics in the
+ * manifest grammar produce identical runtime behavior across atoms.
+ *
+ * The closed predicate vocabulary (`ctx.user`, `{ ctx.staff: [<role>] }`)
+ * is enforced at parse time; this evaluator trusts the shape and only
+ * checks against the live `HandlerContext`.
+ *
+ * Domain-pure: no IO, no port deps. Lives in `domain/service/` because
+ * both the procedure and view use cases need it; placing it in either
+ * use case would create a usecase→usecase coupling.
+ */
+export interface AuthRequires {
+    readonly auth?: {
+        readonly all: readonly AuthPredicate[];
+    };
+}
+/**
+ * Evaluate `requires.auth.all` against `ctx`. Returns `null` when
+ * authorization passes (or no `requires.auth.all` is declared), or an
+ * `AUTH_DENIED` Diagnostic naming the first failing predicate.
+ */
+export declare function evaluateAuthAll(requires: AuthRequires | undefined, ctx: HandlerContext, path: string, phase: Phase): Diagnostic | null;
+export declare function evaluatePredicate(pred: AuthPredicate, ctx: HandlerContext): boolean;
+export declare function describePredicate(pred: AuthPredicate): string;
+//# sourceMappingURL=AuthPredicateEvaluator.d.ts.map

package/dist/domain/service/AuthPredicateEvaluator.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"AuthPredicateEvaluator.d.ts","sourceRoot":"","sources":["../../../src/domain/service/AuthPredicateEvaluator.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,KAAK,aAAa,EAClB,KAAK,UAAU,EACf,KAAK,KAAK,EACX,MAAM,qBAAqB,CAAC;AAC7B,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,4BAA4B,CAAC;AAEjE;;;;;;;;;;;;GAYG;AAEH,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,IAAI,CAAC,EAAE;QAAE,QAAQ,CAAC,GAAG,EAAE,SAAS,aAAa,EAAE,CAAA;KAAE,CAAC;CAC5D;AAED;;;;GAIG;AACH,wBAAgB,eAAe,CAC7B,QAAQ,EAAE,YAAY,GAAG,SAAS,EAClC,GAAG,EAAE,cAAc,EACnB,IAAI,EAAE,MAAM,EACZ,KAAK,EAAE,KAAK,GACX,UAAU,GAAG,IAAI,CAiBnB;AAED,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,aAAa,EAAE,GAAG,EAAE,cAAc,GAAG,OAAO,CAOnF;AAED,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,aAAa,GAAG,MAAM,CAU7D"}

package/dist/domain/service/AuthPredicateEvaluator.js

@@ -0,0 +1,48 @@
+import { makeDiagnostic, } from "@aotter/mantle-spec";
+/**
+ * Evaluate `requires.auth.all` against `ctx`. Returns `null` when
+ * authorization passes (or no `requires.auth.all` is declared), or an
+ * `AUTH_DENIED` Diagnostic naming the first failing predicate.
+ */
+export function evaluateAuthAll(requires, ctx, path, phase) {
+    const all = requires?.auth?.all;
+    if (!all || all.length === 0)
+        return null;
+    for (let i = 0; i < all.length; i++) {
+        const pred = all[i];
+        if (!evaluatePredicate(pred, ctx)) {
+            return makeDiagnostic({
+                code: "AUTH_DENIED",
+                phase,
+                severity: "error",
+                path: `${path}#/requires/auth/all/${i}`,
+                expected: describePredicate(pred),
+                message: `Authorization predicate not satisfied: ${describePredicate(pred)}.`,
+            });
+        }
+    }
+    return null;
+}
+export function evaluatePredicate(pred, ctx) {
+    if (pred === "ctx.user")
+        return ctx.user !== null;
+    if (typeof pred === "object" && pred !== null && "ctx.staff" in pred) {
+        if (!ctx.staff)
+            return false;
+        return pred["ctx.staff"].includes(ctx.staff.role);
+    }
+    return false;
+}
+export function describePredicate(pred) {
+    if (pred === "ctx.user")
+        return "caller is signed in (ctx.user)";
+    if (typeof pred === "object" && pred !== null && "ctx.staff" in pred) {
+        return `caller is staff with role in [${pred["ctx.staff"].join(", ")}]`;
+    }
+    // Exhaustive: if AuthPredicate gains a variant the parser admits but
+    // this function doesn't yet recognise, fail loud rather than throw
+    // on a downstream key access.
+    const _exhaustive = pred;
+    throw new Error(`describePredicate: unrecognised AuthPredicate ${JSON.stringify(_exhaustive)}`);
+}
+//# sourceMappingURL=AuthPredicateEvaluator.js.map

package/dist/domain/service/AuthPredicateEvaluator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"AuthPredicateEvaluator.js","sourceRoot":"","sources":["../../../src/domain/service/AuthPredicateEvaluator.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,cAAc,GAIf,MAAM,qBAAqB,CAAC;AAqB7B;;;;GAIG;AACH,MAAM,UAAU,eAAe,CAC7B,QAAkC,EAClC,GAAmB,EACnB,IAAY,EACZ,KAAY;IAEZ,MAAM,GAAG,GAAG,QAAQ,EAAE,IAAI,EAAE,GAAG,CAAC;IAChC,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAC1C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACpC,MAAM,IAAI,GAAG,GAAG,CAAC,CAAC,CAAE,CAAC;QACrB,IAAI,CAAC,iBAAiB,CAAC,IAAI,EAAE,GAAG,CAAC,EAAE,CAAC;YAClC,OAAO,cAAc,CAAC;gBACpB,IAAI,EAAE,aAAa;gBACnB,KAAK;gBACL,QAAQ,EAAE,OAAO;gBACjB,IAAI,EAAE,GAAG,IAAI,uBAAuB,CAAC,EAAE;gBACvC,QAAQ,EAAE,iBAAiB,CAAC,IAAI,CAAC;gBACjC,OAAO,EAAE,0CAA0C,iBAAiB,CAAC,IAAI,CAAC,GAAG;aAC9E,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,IAAmB,EAAE,GAAmB;IACxE,IAAI,IAAI,KAAK,UAAU;QAAE,OAAO,GAAG,CAAC,IAAI,KAAK,IAAI,CAAC;IAClD,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,IAAI,IAAI,WAAW,IAAI,IAAI,EAAE,CAAC;QACrE,IAAI,CAAC,GAAG,CAAC,KAAK;YAAE,OAAO,KAAK,CAAC;QAC7B,OAAO,IAAI,CAAC,WAAW,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACpD,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,IAAmB;IACnD,IAAI,IAAI,KAAK,UAAU;QAAE,OAAO,gCAAgC,CAAC;IACjE,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,IAAI,IAAI,WAAW,IAAI,IAAI,EAAE,CAAC;QACrE,OAAO,iCAAiC,IAAI,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC;IAC1E,CAAC;IACD,qEAAqE;IACrE,mEAAmE;IACnE,8BAA8B;IAC9B,MAAM,WAAW,GAAU,IAAI,CAAC;IAChC,MAAM,IAAI,KAAK,CAAC,iDAAiD,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;AAClG,CAAC"}

package/dist/domain/service/BuiltinProjector.d.ts

@@ -0,0 +1,50 @@
+import { type SchemaManifest } from "@aotter/mantle-spec";
+import type { HandlerContext } from "../model/HandlerContext.js";
+/**
+ * Builtin op input projection + `x-clam-bind` stamping (POC ADR-0014).
+ *
+ * Two transforms applied to `Procedure.input` before it lands in
+ * `EntryRepository`:
+ *
+ *   1. **Projection**: copy only the keys declared on the target
+ *      Schema's `spec.schema.properties`. Side-channel fields (CAPTCHA
+ *      tokens, hCaptcha challenges, etc.) declared in the Procedure's
+ *      input but not in the Schema's properties are silently dropped
+ *      from the row. They remain available to lifecycle hooks via
+ *      `ctx.event.originalInput`.
+ *
+ *   2. **Stamping**: any Schema property carrying `x-clam-bind: <value>`
+ *      gets its value computed at write time:
+ *        - `ctx.user` → `ctx.user?.id ?? null`
+ *        - `ctx.staff` → `ctx.staff?.id ?? null`
+ *        - `now` → `clockNow` (caller-supplied; lets the use case
+ *          share its `Clock` so created/updated stamps line up)
+ *
+ * Stamping overrides whatever the caller passed for that key —
+ * declarative server-stamping is the contract.
+ *
+ * Pure stateless service — no I/O. Lives in `domain/service/`.
+ */
+export interface ProjectAndStampArgs {
+    readonly schema: SchemaManifest;
+    readonly input: Record<string, unknown>;
+    readonly ctx: HandlerContext;
+    readonly clockNow: number;
+}
+export declare function projectAndStamp(args: ProjectAndStampArgs): Record<string, unknown>;
+export interface ProjectUpdateAndStampArgs {
+    readonly schema: SchemaManifest;
+    readonly existing: Record<string, unknown>;
+    readonly patch: Record<string, unknown>;
+    readonly ctx: HandlerContext;
+    readonly clockNow: number;
+}
+/**
+ * Project update data through the same Schema-declared field allowlist
+ * while preserving existing server-stamped values. This keeps direct
+ * authoring paths (MCP/admin) from accepting arbitrary blob keys, but
+ * avoids turning `x-clam-bind: now` fields into "update timestamp"
+ * fields on every draft edit.
+ */
+export declare function projectUpdateAndStamp(args: ProjectUpdateAndStampArgs): Record<string, unknown>;
+//# sourceMappingURL=BuiltinProjector.d.ts.map

package/dist/domain/service/BuiltinProjector.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"BuiltinProjector.d.ts","sourceRoot":"","sources":["../../../src/domain/service/BuiltinProjector.ts"],"names":[],"mappings":"AAAA,OAAO,EAIL,KAAK,cAAc,EACpB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,4BAA4B,CAAC;AAEjE;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,MAAM,EAAE,cAAc,CAAC;IAChC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACxC,QAAQ,CAAC,GAAG,EAAE,cAAc,CAAC;IAC7B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;CAC3B;AAED,wBAAgB,eAAe,CAAC,IAAI,EAAE,mBAAmB,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAelF;AAED,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,MAAM,EAAE,cAAc,CAAC;IAChC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC3C,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACxC,QAAQ,CAAC,GAAG,EAAE,cAAc,CAAC;IAC7B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;CAC3B;AAED;;;;;;GAMG;AACH,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,yBAAyB,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAkB9F"}

package/dist/domain/service/BuiltinProjector.js

@@ -0,0 +1,61 @@
+import { CLAM_BIND_KEYWORD, CLAM_BIND_VALUES, } from "@aotter/mantle-spec";
+export function projectAndStamp(args) {
+    const properties = args.schema.spec.schema.properties ?? {};
+    const out = {};
+    for (const [key, propDef] of Object.entries(properties)) {
+        const bind = bindValueOf(propDef);
+        if (bind) {
+            out[key] = computeBind(bind, args.ctx, args.clockNow);
+            continue;
+        }
+        if (key in args.input) {
+            out[key] = args.input[key];
+        }
+    }
+    return out;
+}
+/**
+ * Project update data through the same Schema-declared field allowlist
+ * while preserving existing server-stamped values. This keeps direct
+ * authoring paths (MCP/admin) from accepting arbitrary blob keys, but
+ * avoids turning `x-clam-bind: now` fields into "update timestamp"
+ * fields on every draft edit.
+ */
+export function projectUpdateAndStamp(args) {
+    const properties = args.schema.spec.schema.properties ?? {};
+    const merged = { ...args.existing, ...args.patch };
+    const out = {};
+    for (const [key, propDef] of Object.entries(properties)) {
+        const bind = bindValueOf(propDef);
+        if (bind) {
+            out[key] = key in args.existing
+                ? args.existing[key]
+                : computeBind(bind, args.ctx, args.clockNow);
+            continue;
+        }
+        if (key in merged) {
+            out[key] = merged[key];
+        }
+    }
+    return out;
+}
+function bindValueOf(propDef) {
+    if (typeof propDef !== "object" || propDef === null)
+        return undefined;
+    const v = propDef[CLAM_BIND_KEYWORD];
+    if (typeof v === "string" && CLAM_BIND_VALUES.includes(v)) {
+        return v;
+    }
+    return undefined;
+}
+function computeBind(bind, ctx, clockNow) {
+    switch (bind) {
+        case "ctx.user":
+            return ctx.user?.id ?? null;
+        case "ctx.staff":
+            return ctx.staff?.id ?? null;
+        case "now":
+            return clockNow;
+    }
+}
+//# sourceMappingURL=BuiltinProjector.js.map

package/dist/domain/service/BuiltinProjector.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"BuiltinProjector.js","sourceRoot":"","sources":["../../../src/domain/service/BuiltinProjector.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,iBAAiB,EACjB,gBAAgB,GAGjB,MAAM,qBAAqB,CAAC;AAmC7B,MAAM,UAAU,eAAe,CAAC,IAAyB;IACvD,MAAM,UAAU,GACb,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,MAAmD,CAAC,UAAU,IAAI,EAAE,CAAC;IACzF,MAAM,GAAG,GAA4B,EAAE,CAAC;IACxC,KAAK,MAAM,CAAC,GAAG,EAAE,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC;QACxD,MAAM,IAAI,GAAG,WAAW,CAAC,OAAO,CAAC,CAAC;QAClC,IAAI,IAAI,EAAE,CAAC;YACT,GAAG,CAAC,GAAG,CAAC,GAAG,WAAW,CAAC,IAAI,EAAE,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;YACtD,SAAS;QACX,CAAC;QACD,IAAI,GAAG,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YACtB,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC7B,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAUD;;;;;;GAMG;AACH,MAAM,UAAU,qBAAqB,CAAC,IAA+B;IACnE,MAAM,UAAU,GACb,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,MAAmD,CAAC,UAAU,IAAI,EAAE,CAAC;IACzF,MAAM,MAAM,GAAG,EAAE,GAAG,IAAI,CAAC,QAAQ,EAAE,GAAG,IAAI,CAAC,KAAK,EAAE,CAAC;IACnD,MAAM,GAAG,GAA4B,EAAE,CAAC;IACxC,KAAK,MAAM,CAAC,GAAG,EAAE,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC;QACxD,MAAM,IAAI,GAAG,WAAW,CAAC,OAAO,CAAC,CAAC;QAClC,IAAI,IAAI,EAAE,CAAC;YACT,GAAG,CAAC,GAAG,CAAC,GAAG,GAAG,IAAI,IAAI,CAAC,QAAQ;gBAC7B,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC;gBACpB,CAAC,CAAC,WAAW,CAAC,IAAI,EAAE,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;YAC/C,SAAS;QACX,CAAC;QACD,IAAI,GAAG,IAAI,MAAM,EAAE,CAAC;YAClB,GAAG,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;QACzB,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,WAAW,CAAC,OAAgB;IACnC,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,KAAK,IAAI;QAAE,OAAO,SAAS,CAAC;IACtE,MAAM,CAAC,GAAI,OAAmC,CAAC,iBAAiB,CAAC,CAAC;IAClE,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAK,gBAAsC,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC;QACjF,OAAO,CAAkB,CAAC;IAC5B,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,WAAW,CAAC,IAAmB,EAAE,GAAmB,EAAE,QAAgB;IAC7E,QAAQ,IAAI,EAAE,CAAC;QACb,KAAK,UAAU;YACb,OAAO,GAAG,CAAC,IAAI,EAAE,EAAE,IAAI,IAAI,CAAC;QAC9B,KAAK,WAAW;YACd,OAAO,GAAG,CAAC,KAAK,EAAE,EAAE,IAAI,IAAI,CAAC;QAC/B,KAAK,KAAK;YACR,OAAO,QAAQ,CAAC;IACpB,CAAC;AACH,CAAC"}

package/dist/domain/service/EntrySeoSupport.d.ts

@@ -0,0 +1,27 @@
+import type { Entry, SiteConfig } from "@aotter/mantle-spec";
+import type { SeoMeta } from "../model/SeoMeta.js";
+import type { PublicPathResolver } from "./PublicPathResolver.js";
+/**
+ * Structural shape of the SEO-meta composer the render pipeline
+ * accepts. Lives in `domain/service/` (not `usecase/render/`) so
+ * infrastructure code — notably `HtmlPublishOrchestrator` — can
+ * import this helper without crossing the `infrastructure→usecase`
+ * boundary that CLAUDE.md forbids.
+ *
+ * The runtime assembly root wires in `ComposeEntrySeoMetaUseCase`
+ * which satisfies this shape; tests may pass a hand-rolled stub.
+ */
+export interface SeoComposer {
+    execute(args: {
+        readonly entry: Entry;
+        readonly site: SiteConfig;
+        readonly paths: PublicPathResolver;
+    }): Promise<SeoMeta>;
+}
+/**
+ * Shared "compose if the entry has a public URL" predicate. Keeps the
+ * three callers (`RenderEntryLiveUseCase`, `PreviewEntryUseCase`,
+ * `HtmlPublishOrchestrator`) from re-inlining the same null-check.
+ */
+export declare function composeSeoIfPathed(composer: SeoComposer, paths: PublicPathResolver | null, entry: Entry, site: SiteConfig): Promise<SeoMeta | undefined>;
+//# sourceMappingURL=EntrySeoSupport.d.ts.map

package/dist/domain/service/EntrySeoSupport.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"EntrySeoSupport.d.ts","sourceRoot":"","sources":["../../../src/domain/service/EntrySeoSupport.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,KAAK,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AAC7D,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAElE;;;;;;;;;GASG;AACH,MAAM,WAAW,WAAW;IAC1B,OAAO,CAAC,IAAI,EAAE;QACZ,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAC;QACtB,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC;QAC1B,QAAQ,CAAC,KAAK,EAAE,kBAAkB,CAAC;KACpC,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CACtB;AAED;;;;GAIG;AACH,wBAAsB,kBAAkB,CACtC,QAAQ,EAAE,WAAW,EACrB,KAAK,EAAE,kBAAkB,GAAG,IAAI,EAChC,KAAK,EAAE,KAAK,EACZ,IAAI,EAAE,UAAU,GACf,OAAO,CAAC,OAAO,GAAG,SAAS,CAAC,CAI9B"}

package/dist/domain/service/EntrySeoSupport.js

@@ -0,0 +1,13 @@
+/**
+ * Shared "compose if the entry has a public URL" predicate. Keeps the
+ * three callers (`RenderEntryLiveUseCase`, `PreviewEntryUseCase`,
+ * `HtmlPublishOrchestrator`) from re-inlining the same null-check.
+ */
+export async function composeSeoIfPathed(composer, paths, entry, site) {
+    if (!paths)
+        return undefined;
+    if (!paths.forEntry(entry))
+        return undefined;
+    return composer.execute({ entry, site, paths });
+}
+//# sourceMappingURL=EntrySeoSupport.js.map

package/dist/domain/service/EntrySeoSupport.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"EntrySeoSupport.js","sourceRoot":"","sources":["../../../src/domain/service/EntrySeoSupport.ts"],"names":[],"mappings":"AAsBA;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,QAAqB,EACrB,KAAgC,EAChC,KAAY,EACZ,IAAgB;IAEhB,IAAI,CAAC,KAAK;QAAE,OAAO,SAAS,CAAC;IAC7B,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IAC7C,OAAO,QAAQ,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;AAClD,CAAC"}

package/dist/domain/service/HtmlRenderer.d.ts

@@ -0,0 +1,32 @@
+import type { Entry, SiteConfig } from "@aotter/mantle-spec";
+import type { TemplateRegistry } from "../model/TemplateRegistry.js";
+import type { SeoMeta } from "../model/SeoMeta.js";
+export interface RenderEntryArgs {
+    readonly entry: Entry;
+    readonly site: SiteConfig;
+    readonly templates: TemplateRegistry;
+    /** Defaults to `<!doctype html>`. Pipelines that want the
+     *  upper-case `<!DOCTYPE html>\n` shape pass it explicitly. */
+    readonly doctype?: string;
+    /** Optional pre-composed SEO/AEO block. Threaded into the
+     *  `EntryContext.seo` field so templates can emit `<SeoTags
+     *  seo={seo}/>` inside `<head>`. Renderers that skip composition
+     *  leave it undefined — opt-out templates keep working. */
+    readonly seo?: SeoMeta;
+}
+/** Returns the full HTML doc (doctype + body) or `null` if no entry
+ *  template is registered for `entry.collection`. */
+export declare function renderEntryHtml(args: RenderEntryArgs): string | null;
+export interface RenderListArgs {
+    readonly collection: string;
+    readonly locale: string;
+    readonly entries: ReadonlyArray<Entry>;
+    readonly site: SiteConfig;
+    readonly templates: TemplateRegistry;
+    readonly doctype?: string;
+    readonly seo?: SeoMeta;
+}
+/** Returns the full HTML doc or `null` if no list template is
+ *  registered for `collection`. */
+export declare function renderListHtml(args: RenderListArgs): string | null;
+//# sourceMappingURL=HtmlRenderer.d.ts.map

package/dist/domain/service/HtmlRenderer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"HtmlRenderer.d.ts","sourceRoot":"","sources":["../../../src/domain/service/HtmlRenderer.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,KAAK,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AAC7D,OAAO,KAAK,EAGV,gBAAgB,EACjB,MAAM,8BAA8B,CAAC;AACtC,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAC;AAgBnD,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAC;IACtB,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC;IAC1B,QAAQ,CAAC,SAAS,EAAE,gBAAgB,CAAC;IACrC;mEAC+D;IAC/D,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B;;;+DAG2D;IAC3D,QAAQ,CAAC,GAAG,CAAC,EAAE,OAAO,CAAC;CACxB;AAED;qDACqD;AACrD,wBAAgB,eAAe,CAAC,IAAI,EAAE,eAAe,GAAG,MAAM,GAAG,IAAI,CASpE;AAED,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,OAAO,EAAE,aAAa,CAAC,KAAK,CAAC,CAAC;IACvC,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC;IAC1B,QAAQ,CAAC,SAAS,EAAE,gBAAgB,CAAC;IACrC,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,GAAG,CAAC,EAAE,OAAO,CAAC;CACxB;AAED;mCACmC;AACnC,wBAAgB,cAAc,CAAC,IAAI,EAAE,cAAc,GAAG,MAAM,GAAG,IAAI,CAalE"}

package/dist/domain/service/HtmlRenderer.js

@@ -0,0 +1,38 @@
+/**
+ * Pure render functions over the consumer-supplied template registry.
+ * Used by:
+ *   - `HtmlPublishOrchestrator` (publish-time → write KV)
+ *   - request-time route handlers in adapters (live-render bypass,
+ *     preview surface)
+ *
+ * Both call sites previously inlined the template-lookup + doctype
+ * concatenation. Extracting here keeps the contract single-sourced
+ * — adding a doctype mode, an OG-meta wrapper, or a per-collection
+ * pre/post hook is one edit. No I/O; no DB; no env access.
+ */
+const DEFAULT_DOCTYPE = "<!doctype html>";
+/** Returns the full HTML doc (doctype + body) or `null` if no entry
+ *  template is registered for `entry.collection`. */
+export function renderEntryHtml(args) {
+    const tpl = args.templates.getEntryTemplate(args.entry.collection);
+    if (!tpl)
+        return null;
+    return ((args.doctype ?? DEFAULT_DOCTYPE) +
+        tpl({ entry: args.entry, site: args.site, seo: args.seo }));
+}
+/** Returns the full HTML doc or `null` if no list template is
+ *  registered for `collection`. */
+export function renderListHtml(args) {
+    const tpl = args.templates.getListTemplate(args.collection);
+    if (!tpl)
+        return null;
+    return ((args.doctype ?? DEFAULT_DOCTYPE) +
+        tpl({
+            collection: args.collection,
+            locale: args.locale,
+            entries: args.entries,
+            site: args.site,
+            seo: args.seo,
+        }));
+}
+//# sourceMappingURL=HtmlRenderer.js.map