@aotter/mantle 0.1.4 → 0.2.0-alpha.1

package/docs/examples/host-chatgpt-sites/drizzle/0001_mantle.sql

@@ -1,294 +0,0 @@
-CREATE TABLE IF NOT EXISTS site_config (
-        key   TEXT PRIMARY KEY,
-        value TEXT NOT NULL
-      );
---> statement-breakpoint
-CREATE TABLE IF NOT EXISTS user (
-        id            TEXT PRIMARY KEY NOT NULL,
-        name          TEXT NOT NULL,
-        email         TEXT NOT NULL UNIQUE,
-        emailVerified INTEGER NOT NULL DEFAULT 0,
-        image         TEXT,
-        createdAt     TEXT NOT NULL,
-        updatedAt     TEXT NOT NULL,
-        role          TEXT,
-        banned        INTEGER DEFAULT 0,
-        banReason     TEXT,
-        banExpires    TEXT,
-        githubLogin   TEXT
-      );
---> statement-breakpoint
--- Partial index keeps ensureBootstrapOwner's role-IN scan off
-      -- the pile of role=NULL rows.
-      CREATE INDEX IF NOT EXISTS user_role_idx ON user (role) WHERE role IS NOT NULL;
---> statement-breakpoint
-CREATE TABLE IF NOT EXISTS session (
-        id             TEXT PRIMARY KEY NOT NULL,
-        expiresAt      TEXT NOT NULL,
-        token          TEXT NOT NULL UNIQUE,
-        createdAt      TEXT NOT NULL,
-        updatedAt      TEXT NOT NULL,
-        ipAddress      TEXT,
-        userAgent      TEXT,
-        userId         TEXT NOT NULL REFERENCES user(id) ON DELETE CASCADE,
-        impersonatedBy TEXT
-      );
---> statement-breakpoint
-CREATE INDEX IF NOT EXISTS session_userId_idx ON session (userId);
---> statement-breakpoint
-CREATE TABLE IF NOT EXISTS account (
-        id                       TEXT PRIMARY KEY NOT NULL,
-        issuer                   TEXT NOT NULL,
-        accountId                TEXT NOT NULL,
-        providerId               TEXT NOT NULL,
-        userId                   TEXT NOT NULL REFERENCES user(id) ON DELETE CASCADE,
-        accessToken              TEXT,
-        refreshToken             TEXT,
-        idToken                  TEXT,
-        accessTokenExpiresAt     TEXT,
-        refreshTokenExpiresAt    TEXT,
-        scope                    TEXT,
-        password                 TEXT,
-        createdAt                TEXT NOT NULL,
-        updatedAt                TEXT NOT NULL,
-        UNIQUE (issuer, accountId)
-      );
---> statement-breakpoint
-CREATE INDEX IF NOT EXISTS account_userId_idx ON account (userId);
---> statement-breakpoint
-CREATE TABLE IF NOT EXISTS verification (
-        id         TEXT PRIMARY KEY NOT NULL,
-        identifier TEXT NOT NULL,
-        value      TEXT NOT NULL,
-        expiresAt  TEXT NOT NULL,
-        createdAt  TEXT NOT NULL,
-        updatedAt  TEXT NOT NULL
-      );
---> statement-breakpoint
-CREATE INDEX IF NOT EXISTS verification_identifier_idx ON verification (identifier);
---> statement-breakpoint
-CREATE TABLE IF NOT EXISTS jwks (
-        id         TEXT PRIMARY KEY NOT NULL,
-        publicKey  TEXT NOT NULL,
-        privateKey TEXT NOT NULL,
-        createdAt  TEXT NOT NULL,
-        expiresAt  TEXT,
-        alg        TEXT,
-        crv        TEXT
-      );
---> statement-breakpoint
-CREATE TABLE IF NOT EXISTS oauthClient (
-        id                               TEXT PRIMARY KEY NOT NULL,
-        clientId                         TEXT NOT NULL UNIQUE,
-        clientSecret                     TEXT,
-        clientDiscoveryId                TEXT,
-        disabled                         INTEGER DEFAULT 0,
-        skipConsent                      INTEGER,
-        enableEndSession                 INTEGER,
-        subjectType                      TEXT,
-        scopes                           TEXT,
-        clientCredentialsScopes          TEXT DEFAULT '[]',
-        userId                           TEXT REFERENCES user(id) ON DELETE CASCADE,
-        createdAt                        TEXT,
-        updatedAt                        TEXT,
-        name                             TEXT,
-        uri                              TEXT,
-        icon                             TEXT,
-        contacts                         TEXT,
-        tos                              TEXT,
-        policy                           TEXT,
-        softwareId                       TEXT,
-        softwareVersion                  TEXT,
-        softwareStatement                TEXT,
-        redirectUris                     TEXT NOT NULL,
-        postLogoutRedirectUris           TEXT,
-        backchannelLogoutUri             TEXT,
-        backchannelLogoutSessionRequired INTEGER,
-        tokenEndpointAuthMethod          TEXT,
-        applicationType                  TEXT,
-        jwks                             TEXT,
-        jwksUri                          TEXT,
-        grantTypes                       TEXT,
-        responseTypes                    TEXT,
-        requirePKCE                      INTEGER,
-        dpopBoundAccessTokens            INTEGER DEFAULT 0,
-        referenceId                      TEXT,
-        metadata                         TEXT
-      );
---> statement-breakpoint
-CREATE INDEX IF NOT EXISTS oauthClient_userId_idx ON oauthClient (userId);
---> statement-breakpoint
-CREATE TABLE IF NOT EXISTS oauthResource (
-        id                              TEXT PRIMARY KEY NOT NULL,
-        identifier                      TEXT NOT NULL UNIQUE,
-        name                            TEXT NOT NULL,
-        accessTokenTtl                  INTEGER,
-        refreshTokenTtl                 INTEGER,
-        signingAlgorithm                TEXT,
-        signingKeyId                    TEXT,
-        allowedScopes                   TEXT,
-        customClaims                    TEXT,
-        dpopBoundAccessTokensRequired   INTEGER DEFAULT 0,
-        disabled                        INTEGER DEFAULT 0,
-        createdAt                       TEXT,
-        updatedAt                       TEXT,
-        policyVersion                   INTEGER DEFAULT 1,
-        metadata                        TEXT
-      );
---> statement-breakpoint
-CREATE TABLE IF NOT EXISTS oauthClientResource (
-        id         TEXT PRIMARY KEY NOT NULL,
-        clientId   TEXT NOT NULL REFERENCES oauthClient(clientId) ON DELETE CASCADE,
-        resourceId TEXT NOT NULL REFERENCES oauthResource(identifier) ON DELETE CASCADE,
-        metadata   TEXT,
-        createdAt  TEXT,
-        UNIQUE (clientId, resourceId)
-      );
---> statement-breakpoint
-CREATE INDEX IF NOT EXISTS oauthClientResource_clientId_idx
-        ON oauthClientResource (clientId);
---> statement-breakpoint
-CREATE INDEX IF NOT EXISTS oauthClientResource_resourceId_idx
-        ON oauthClientResource (resourceId);
---> statement-breakpoint
-CREATE TABLE IF NOT EXISTS oauthRefreshToken (
-        id                    TEXT PRIMARY KEY NOT NULL,
-        token                 TEXT NOT NULL UNIQUE,
-        clientId              TEXT NOT NULL REFERENCES oauthClient(clientId) ON DELETE CASCADE,
-        sessionId             TEXT REFERENCES session(id) ON DELETE SET NULL,
-        userId                TEXT NOT NULL REFERENCES user(id) ON DELETE CASCADE,
-        referenceId           TEXT,
-        authorizationCodeId   TEXT,
-        resources             TEXT,
-        requestedUserInfoClaims TEXT,
-        expiresAt             TEXT NOT NULL,
-        createdAt             TEXT NOT NULL,
-        revoked               TEXT,
-        rotatedAt             TEXT,
-        rotationReplayResponse TEXT,
-        rotationReplayExpiresAt TEXT,
-        authTime              TEXT,
-        confirmation          TEXT,
-        scopes                TEXT NOT NULL
-      );
---> statement-breakpoint
-CREATE INDEX IF NOT EXISTS oauthRefreshToken_clientId_idx ON oauthRefreshToken (clientId);
---> statement-breakpoint
-CREATE INDEX IF NOT EXISTS oauthRefreshToken_sessionId_idx ON oauthRefreshToken (sessionId);
---> statement-breakpoint
-CREATE INDEX IF NOT EXISTS oauthRefreshToken_userId_idx ON oauthRefreshToken (userId);
---> statement-breakpoint
-CREATE INDEX IF NOT EXISTS oauthRefreshToken_authorizationCodeId_idx
-        ON oauthRefreshToken (authorizationCodeId);
---> statement-breakpoint
-CREATE TABLE IF NOT EXISTS oauthAccessToken (
-        id                      TEXT PRIMARY KEY NOT NULL,
-        token                   TEXT NOT NULL UNIQUE,
-        clientId                TEXT NOT NULL REFERENCES oauthClient(clientId) ON DELETE CASCADE,
-        sessionId               TEXT REFERENCES session(id) ON DELETE SET NULL,
-        userId                  TEXT REFERENCES user(id) ON DELETE CASCADE,
-        referenceId             TEXT,
-        authorizationCodeId     TEXT,
-        resources               TEXT,
-        requestedUserInfoClaims TEXT,
-        refreshId               TEXT REFERENCES oauthRefreshToken(id) ON DELETE CASCADE,
-        expiresAt               TEXT NOT NULL,
-        createdAt               TEXT NOT NULL,
-        revoked                 TEXT,
-        confirmation            TEXT,
-        scopes                  TEXT NOT NULL
-      );
---> statement-breakpoint
-CREATE INDEX IF NOT EXISTS oauthAccessToken_clientId_idx ON oauthAccessToken (clientId);
---> statement-breakpoint
-CREATE INDEX IF NOT EXISTS oauthAccessToken_sessionId_idx ON oauthAccessToken (sessionId);
---> statement-breakpoint
-CREATE INDEX IF NOT EXISTS oauthAccessToken_userId_idx ON oauthAccessToken (userId);
---> statement-breakpoint
-CREATE INDEX IF NOT EXISTS oauthAccessToken_refreshId_idx ON oauthAccessToken (refreshId);
---> statement-breakpoint
-CREATE INDEX IF NOT EXISTS oauthAccessToken_authorizationCodeId_idx
-        ON oauthAccessToken (authorizationCodeId);
---> statement-breakpoint
-CREATE TABLE IF NOT EXISTS oauthConsent (
-        id                      TEXT PRIMARY KEY NOT NULL,
-        clientId                TEXT NOT NULL REFERENCES oauthClient(clientId) ON DELETE CASCADE,
-        userId                  TEXT REFERENCES user(id) ON DELETE CASCADE,
-        referenceId             TEXT,
-        resources               TEXT,
-        requestedUserInfoClaims TEXT,
-        scopes                  TEXT NOT NULL,
-        createdAt               TEXT NOT NULL,
-        updatedAt               TEXT NOT NULL
-      );
---> statement-breakpoint
-CREATE INDEX IF NOT EXISTS oauthConsent_clientId_idx ON oauthConsent (clientId);
---> statement-breakpoint
-CREATE INDEX IF NOT EXISTS oauthConsent_userId_idx ON oauthConsent (userId);
---> statement-breakpoint
-CREATE TABLE IF NOT EXISTS oauthClientAssertion (
-        id        TEXT PRIMARY KEY NOT NULL,
-        expiresAt TEXT NOT NULL
-      );
---> statement-breakpoint
-CREATE TABLE IF NOT EXISTS media_assets (
-        id          TEXT PRIMARY KEY,
-        created_at  INTEGER NOT NULL,
-        owner_id    TEXT,
-        alt         TEXT,
-        caption     TEXT,
-        variants    TEXT NOT NULL,
-        metadata    TEXT
-      );
---> statement-breakpoint
-CREATE INDEX IF NOT EXISTS media_assets_by_owner_created
-        ON media_assets (owner_id, created_at DESC);
---> statement-breakpoint
-CREATE TABLE IF NOT EXISTS pending_media_uploads (
-        id          TEXT PRIMARY KEY,
-        record      TEXT NOT NULL,
-        expires_at  INTEGER NOT NULL
-      );
---> statement-breakpoint
-CREATE INDEX IF NOT EXISTS pending_media_uploads_expires_at
-        ON pending_media_uploads (expires_at);
---> statement-breakpoint
-CREATE TABLE IF NOT EXISTS _mantle_boot_state (
-        id          TEXT PRIMARY KEY NOT NULL,
-        fingerprint TEXT NOT NULL
-      );
---> statement-breakpoint
-CREATE TABLE IF NOT EXISTS _mantle_schema_tables (
-        name       TEXT PRIMARY KEY NOT NULL,
-        projection TEXT NOT NULL
-      );
---> statement-breakpoint
-CREATE TABLE IF NOT EXISTS _mantle_storage_state (
-        id          INTEGER PRIMARY KEY CHECK (id = 1),
-        fingerprint TEXT NOT NULL
-      );
---> statement-breakpoint
-CREATE TABLE IF NOT EXISTS "articles" (
-        "_mantle_id" TEXT PRIMARY KEY,
-        "_mantle_status" TEXT NOT NULL,
-        "_mantle_version" INTEGER NOT NULL DEFAULT 1,
-        "_mantle_author_id" TEXT,
-        "_mantle_created_at" INTEGER NOT NULL,
-        "_mantle_updated_at" INTEGER NOT NULL
-      );
---> statement-breakpoint
-ALTER TABLE "articles" ADD COLUMN "body" TEXT;
---> statement-breakpoint
-ALTER TABLE "articles" ADD COLUMN "summary" TEXT;
---> statement-breakpoint
-ALTER TABLE "articles" ADD COLUMN "title" TEXT;
---> statement-breakpoint
-CREATE INDEX IF NOT EXISTS "m_61727469636c6573_updated" ON "articles"("_mantle_updated_at" DESC, "_mantle_id" DESC);
---> statement-breakpoint
-CREATE INDEX IF NOT EXISTS "m_61727469636c6573_status_updated" ON "articles"("_mantle_status", "_mantle_updated_at" DESC, "_mantle_id" DESC);
---> statement-breakpoint
-CREATE INDEX IF NOT EXISTS "m_61727469636c6573_created" ON "articles"("_mantle_created_at");
---> statement-breakpoint
-INSERT INTO _mantle_schema_tables(name,projection) VALUES ('articles','{"columns":[["body","TEXT","string",false],["summary","TEXT","string",false],["title","TEXT","string",false]],"indexes":[]}');
---> statement-breakpoint
-INSERT INTO _mantle_storage_state(id,fingerprint) VALUES (1,'e3cdedf91dbe27db4b9af7ff7e3512e81ae0b0bd69e5a90bd1c9e0526d86ba6b');

package/docs/examples/host-chatgpt-sites/drizzle/0002_article_cover.sql

@@ -1,5 +0,0 @@
-ALTER TABLE "articles" ADD COLUMN "coverAssetId" TEXT;
---> statement-breakpoint
-UPDATE _mantle_schema_tables SET projection='{"columns":[["body","TEXT","string",false],["coverAssetId","TEXT","string",false],["summary","TEXT","string",false],["title","TEXT","string",false]],"indexes":[]}' WHERE name='articles';
---> statement-breakpoint
-UPDATE _mantle_storage_state SET fingerprint='9ef85f9933e22328140e924045820af6be2a6985ed8ecc19b63a4f2a37826618' WHERE id=1 AND fingerprint='e3cdedf91dbe27db4b9af7ff7e3512e81ae0b0bd69e5a90bd1c9e0526d86ba6b';

package/docs/examples/host-chatgpt-sites/drizzle/0003_store_instance_id.sql

@@ -1 +0,0 @@
-ALTER TABLE _mantle_boot_state ADD COLUMN store_instance_id TEXT;

package/docs/examples/host-chatgpt-sites/drizzle/meta/_journal.json

@@ -1 +0,0 @@
-{"version":"7","dialect":"sqlite","entries":[{"idx":0,"version":"6","when":1790000000000,"tag":"0000_sites_users","breakpoints":true},{"idx":1,"version":"6","when":1790000000001,"tag":"0001_mantle","breakpoints":true},{"idx":2,"version":"6","when":1790000000002,"tag":"0002_article_cover","breakpoints":true},{"idx":3,"version":"6","when":1790000000003,"tag":"0003_store_instance_id","breakpoints":true}]}

package/docs/examples/host-chatgpt-sites/manifests/site.yaml

@@ -1,27 +0,0 @@
-apiVersion: cms.mantle.aotter.net/v1
-kind: Schema
-metadata:
-  name: articles
-spec:
-  title: 文章
-  schema:
-    type: object
-    required: [title]
-    properties:
-      title: { type: string, title: 標題, maxLength: 160 }
-      summary: { type: string, title: 摘要, maxLength: 1000 }
-      body: { type: string, title: 內容, x-mcp-hint: markdown }
-      coverAssetId: { type: string, title: 封面圖片, x-mantle-ref: media_assets, x-mcp-hint: media-image }
-  lifecycle: publishing
----
-apiVersion: cms.mantle.aotter.net/v1
-kind: View
-metadata:
-  name: published-articles
-spec:
-  surface: public
-  from: articles
-  fields: [id, title, summary]
-  filter:
-    eq: { field: status, value: published }
-  limit: 20

package/docs/examples/host-chatgpt-sites/package.json

@@ -1 +0,0 @@
-{"name":"mantle-sites-reference","version":"0.0.1","private":true,"type":"module","scripts":{"build":"node scripts/build.mjs","dev":"wrangler dev","generate":"mantle generate","check":"tsc --noEmit","test":"node --experimental-strip-types scripts/check.mjs"},"dependencies":{"@aotter/mantle":"latest","@aotter/mantle-admin":"latest","@aotter/mantle-admin-ui":"latest","@aotter/mantle-cloudflare":"latest","@aotter/mantle-web":"latest","hono":"^4.9.0","micromark":"4.0.2","zod":"^4.0.0"},"devDependencies":{"@cloudflare/workers-types":"*","esbuild":"^0.28.0","typescript":"^5.9.0","wrangler":"^4.0.0"}}

package/docs/examples/host-chatgpt-sites/public/site.css

@@ -1 +0,0 @@
-:root{font-family:Inter,"Noto Sans TC",ui-sans-serif,system-ui,sans-serif;color:#172320;background:#f7f8f4;font-synthesis:none}*{box-sizing:border-box}body{margin:0}a{color:inherit;text-decoration:none}a:hover{text-decoration:underline}.topbar{height:78px;max-width:1440px;margin:auto;padding:0 clamp(24px,5vw,80px);display:flex;align-items:center;justify-content:space-between;border-bottom:1px solid #d9dfd8}.brand{display:flex;align-items:center;gap:12px;font-size:18px;font-weight:760;letter-spacing:-.04em}.brand em{color:#95aa8c;font-style:normal}.mark{width:37px;height:37px;border-radius:11px;background:#183c30;color:#d9eadb;display:grid;place-items:center;font-size:19px;font-family:Georgia,serif}.topbar nav{display:flex;gap:28px;font-size:14px;color:#43564e}.hero{max-width:1440px;margin:auto;padding:100px clamp(24px,8vw,128px) 116px}.hero.small{padding-bottom:75px}.eyebrow,.feature-index{font-size:11px;letter-spacing:.19em;font-weight:750;color:#68806f}.hero h1,.article-page h1{font-family:Georgia,"Noto Serif TC",serif;font-weight:500;letter-spacing:-.055em;line-height:1.09;margin:26px 0 28px;font-size:clamp(48px,6.1vw,94px)}.dot{color:#a2b888}.hero-copy{max-width:620px;color:#52665a;font-size:18px;line-height:1.8}.actions{display:flex;align-items:center;gap:30px;margin-top:38px}.button{display:inline-flex;justify-content:space-between;gap:44px;min-width:184px;padding:17px 19px;border-radius:7px;color:#fff;background:#214f3c;font-size:14px;font-weight:650}.button:hover{background:#173c2d;text-decoration:none}.text-link{font-size:14px;color:#315640}.feature-grid{max-width:1440px;margin:auto;padding:0 clamp(24px,8vw,128px) 110px;display:grid;grid-template-columns:repeat(3,1fr);gap:18px}.feature-grid>div{border-top:1px solid #bfcac0;padding-top:24px}.feature-grid h2{font-family:Georgia,"Noto Serif TC",serif;font-size:29px;font-weight:500;margin:29px 0 10px}.feature-grid p{font-size:14px;line-height:1.75;color:#597064;max-width:270px}.content-wrap{max-width:1184px;margin:0 auto;padding:0 24px 100px}.article-row{padding:25px 0;border-top:1px solid #cbd5ca;display:grid;grid-template-columns:160px 1fr 36px;gap:24px;align-items:start}.article-row:last-child{border-bottom:1px solid #cbd5ca}.article-number{font-size:12px;color:#708477;margin-top:11px}.article-row h2{font-family:Georgia,"Noto Serif TC",serif;font-size:clamp(24px,3vw,35px);font-weight:500;letter-spacing:-.035em;margin:0 0 8px}.article-row p{font-size:14px;color:#617468;line-height:1.65;margin:0}.article-row>span{color:#739279;font-size:25px}.empty{min-height:220px;padding:52px 0}.empty h2{font-size:27px;font-family:Georgia,"Noto Serif TC",serif;font-weight:500}.empty p{color:#66796c}.pagination{margin:26px 0}.article-page{max-width:900px;padding:75px 30px 140px;margin:auto}.back{font-size:13px;color:#5c7768}.article-page article{margin-top:75px}.article-page h1{font-size:clamp(44px,5vw,75px)}.lede{font-size:21px;line-height:1.75;color:#52685a}.prose{border-top:1px solid #cbd5ca;margin-top:45px;padding-top:28px;line-height:1.95;font-size:17px;color:#33473c}.prose p{margin:0 0 1.2em}footer{border-top:1px solid #d5ddd3;max-width:1440px;margin:auto;padding:28px clamp(24px,5vw,80px);display:flex;justify-content:space-between;font-size:12px;color:#788b7d}@media(max-width:700px){.topbar{height:68px}.topbar nav{gap:16px;font-size:12px}.hero{padding-top:74px;padding-bottom:70px}.hero-copy{font-size:16px}.feature-grid{grid-template-columns:1fr;gap:26px}.article-row{grid-template-columns:1fr 26px;gap:10px}.article-number{grid-column:1/-1;margin:0}.article-page{padding-top:55px}.article-page article{margin-top:50px}footer{gap:20px}}

package/docs/examples/host-chatgpt-sites/scripts/build.mjs

@@ -1,13 +0,0 @@
-import { build } from 'esbuild';
-import { cp, mkdir, rm } from 'node:fs/promises';
-import { execFileSync } from 'node:child_process';
-await rm('dist',{recursive:true,force:true});
-execFileSync('node',['node_modules/@aotter/mantle/dist/cli/main.js','generate'],{stdio:'inherit'});
-// Reject older published SDKs that cannot advertise the mounted MCP endpoints.
-execFileSync('node',['node_modules/typescript/bin/tsc','--noEmit'],{stdio:'inherit'});
-await mkdir('dist/server',{recursive:true});
-await build({entryPoints:['src/index.ts'],outfile:'dist/server/index.js',bundle:true,format:'esm',platform:'browser',conditions:['workerd'],target:'es2022',external:['cloudflare:*','node:*'],minify:true});
-await cp('public','dist/client',{recursive:true});
-await mkdir('dist/.openai',{recursive:true});
-await cp('.openai/hosting.json','dist/.openai/hosting.json');
-await cp('drizzle','dist/.openai/drizzle',{recursive:true});

package/docs/examples/host-chatgpt-sites/scripts/check.mjs

@@ -1,101 +0,0 @@
-import assert from 'node:assert/strict';
-// Only localhost: these headers simulate Sites' trusted dispatcher, never real SIWC.
-const base=process.env.MANTLE_TEST_ORIGIN??'http://localhost:4174';
-assert.ok(['localhost','127.0.0.1'].includes(new URL(base).hostname),'Smoke identity headers are local-only');
-const owner={'oai-authenticated-user-id':'local-owner','oai-authenticated-user-email':'owner@example.test'};
-const member={'oai-authenticated-user-id':`test-${Date.now()}`,'oai-authenticated-user-email':`test-${Date.now()}@example.test`};
-const call=(path,headers={},method='GET',body)=>fetch(base+path,{redirect:'manual',method,headers:{...headers,...(body?{'content-type':'application/json',origin:base}:{})},body:body?JSON.stringify(body):undefined});
-assert.equal((await call('/health')).status,200);
-const mcp=(method,params)=>fetch(base+'/api/mcp',{method:'POST',headers:{'content-type':'application/json','mcp-protocol-version':'2025-11-25'},body:JSON.stringify({jsonrpc:'2.0',id:1,method,...(params?{params}:{})})});
-const staffMcp=(headers,method,params)=>fetch(base+'/api/mcp/staff',{method:'POST',headers:{...headers,'content-type':'application/json','mcp-protocol-version':'2025-11-25'},body:JSON.stringify({jsonrpc:'2.0',id:2,method,...(params?{params}:{})})});
-let mcpResponse=await mcp('initialize');assert.equal(mcpResponse.status,200,await mcpResponse.clone().text());
-assert.equal((await mcpResponse.json()).result.serverInfo.name,'aotter.mantle.public');
-mcpResponse=await mcp('tools/list');assert.equal(mcpResponse.status,200,await mcpResponse.clone().text());
-const publicTools=(await mcpResponse.json()).result.tools.map(tool=>tool.name);
-assert.deepEqual(publicTools,['query_view_published_articles']);
-assert.equal((await call('/api/mcp')).status,405);
-assert.equal((await call('/admin/api/me')).status,401);
-assert.equal((await call('/admin/api/me',{'oai-authenticated-user-email':'owner@example.test'})).status,401);
-assert.equal((await call('/admin/api/me',member)).status,403);
-assert.equal((await (await call('/admin/api/me',owner)).json()).role,'owner');
-const siteResponse=await call('/admin/api/site',owner);
-assert.equal(siteResponse.status,200);
-const site=await siteResponse.json();
-assert.deepEqual(site.mcpEndpoints,{public:base+'/api/mcp',staff:base+'/api/mcp/staff'});
-assert.equal(site.mcpUrl,base+'/api/mcp/staff');
-assert.equal((await staffMcp({},'initialize')).status,401);
-assert.equal((await staffMcp(member,'initialize')).status,403);
-let staffResponse=await staffMcp(owner,'initialize');assert.equal(staffResponse.status,200,await staffResponse.clone().text());
-assert.equal((await staffResponse.json()).result.serverInfo.name,'aotter.mantle.staff');
-staffResponse=await staffMcp(owner,'tools/list');assert.equal(staffResponse.status,200,await staffResponse.clone().text());
-assert.ok((await staffResponse.json()).result.tools.some(tool=>tool.name==='create_draft_articles'));
-for(const path of ['/mcp','/mcp/staff'])assert.equal((await call(path,{},'POST',{jsonrpc:'2.0',id:1,method:'initialize'})).status,404);
-assert.equal((await call('/admin/sign-in')).headers.get('location'),'/signin-with-chatgpt?return_to=%2Fadmin');
-assert.equal((await call('/admin',owner)).status,200);
-assert.equal((await call('/admin/lab/r2',member,'POST',{})).status,403);
-assert.equal((await call('/admin/lab/r2',{},'POST',{})).status,401);
-const probe=await call('/admin/lab/r2',owner,'POST',{});assert.equal(probe.status,200);
-const probeId=(await probe.json()).id;
-assert.equal((await (await call('/admin/lab/r2/'+probeId,owner)).json()).matches,true);
-assert.equal((await (await call('/admin/lab/r2/'+probeId,owner,'DELETE',{})).json()).deleted,true);
-assert.equal((await call('/admin/lab/r2/'+probeId,owner)).status,404);
-const png=Buffer.from('iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAQAAAC1HAwCAAAAC0lEQVR42mP8/x8AAwMCAO+/lXcAAAAASUVORK5CYII=','base64');
-const short=await call('/admin/api/media/uploads',owner,'POST',{filename:'short.png',purpose:'content',variants:[{mimeType:'image/png',byteSize:1,role:'primary'}]});
-assert.equal(short.status,200);
-const shortUpload=(await short.json()).capabilities[0].uploadUrl;
-assert.equal((await fetch(shortUpload,{method:'PUT',headers:{...owner,origin:base,'content-type':'image/png'},body:png})).status,413);
-let media=await call('/admin/api/media/uploads',owner,'POST',{filename:'test.png',purpose:'content',variants:[{mimeType:'image/png',byteSize:png.length,role:'primary'}]});
-assert.equal(media.status,200,await media.clone().text());
-const upload=await media.json();
-const putUrl=upload.capabilities[0].uploadUrl;
-assert.equal((await fetch(putUrl,{method:'PUT',headers:{origin:base,'content-type':'image/png'},body:png})).status,401);
-assert.equal((await fetch(putUrl,{method:'PUT',headers:{...owner,origin:'https://evil.example','content-type':'image/png'},body:png})).status,403);
-media=await fetch(putUrl,{method:'PUT',headers:{...owner,origin:base,'content-type':'image/png'},body:png});
-assert.equal(media.status,204,await media.clone().text());
-const mediaUrl=`/media/content/${upload.uploadGroupId}/primary.png`;
-assert.equal((await call(mediaUrl)).status,404);
-media=await call(`/admin/api/media/uploads/${upload.uploadGroupId}/commit`,owner,'POST',{});
-assert.equal(media.status,200,await media.clone().text());
-assert.deepEqual(Buffer.from(await (await call(mediaUrl)).arrayBuffer()),png);
-assert.equal((await call('/admin/api/media',owner)).status,200);
-let r=await call('/admin/api/entries',owner,'POST',{collection:'articles',data:{title:'Smoke test',summary:'D1 persistence',body:'## Published body from Mantle\n\n[unsafe](javascript:alert(1))',coverAssetId:upload.uploadGroupId}});
-assert.equal(r.status,200,await r.clone().text());
-const {entry}=await r.json();
-const path=`/admin/api/entries/${entry.id}?collection=articles`;
-assert.equal((await call(`/articles/${entry.id}`)).status,404);
-assert.equal((await call(`/articles/${entry.id}.md`)).status,404);
-r=await call(path,owner);assert.equal((await r.json()).entry.data.title,'Smoke test');
-const current=(await (await call(path,owner)).json()).entry;
-const writes=await Promise.all(['A','B'].map(title=>call(path,owner,'PATCH',{expectedVersion:current.version,data:{title}})));
-assert.deepEqual(writes.map(x=>x.status).sort(),[200,409]);
-r=await call(`/admin/api/entries/${entry.id}/publish?collection=articles`,owner,'POST',{});assert.equal(r.status,200,await r.clone().text());
-const publicPage=await (await call(`/articles/${entry.id}`)).text();
-assert.match(publicPage,/Published body from Mantle/);
-assert.match(publicPage,/<h2>Published body from Mantle<\/h2>/);
-assert.match(publicPage,new RegExp(mediaUrl));
-assert.doesNotMatch(publicPage,/href="javascript:/);
-assert.match(publicPage,/<meta property="og:image"/);
-assert.match(publicPage,/<link rel="canonical"/);
-assert.match(publicPage,/<link rel="alternate" type="text\/markdown"/);
-assert.doesNotMatch(publicPage,/<a\b[^>]*href="[^"]+\.md(?:[?#][^"]*)?"/);
-assert.match(publicPage,/application\/ld\+json/);
-assert.match(await (await call(`/articles/${entry.id}.md`)).text(),/Published body from Mantle/);
-assert.match(await (await call('/articles')).text(),new RegExp(entry.id));
-assert.match(await (await call('/llms.txt')).text(),new RegExp(entry.id));
-assert.match(await (await call('/sitemap.xml')).text(),new RegExp(entry.id));
-mcpResponse=await mcp('tools/call',{name:'query_view_published_articles',arguments:{}});assert.equal(mcpResponse.status,200,await mcpResponse.clone().text());
-assert.match(JSON.stringify(await mcpResponse.json()),new RegExp(entry.id));
-r=await fetch(base+'/admin/api/entries',{method:'POST',headers:{...owner,origin:'https://evil.example','content-type':'application/json'},body:'{}'});assert.equal(r.status,403);
-r=await call(`/admin/api/staff/${encodeURIComponent('chatgpt:'+member['oai-authenticated-user-id'])}/role`,owner,'PATCH',{role:'editor'});assert.equal(r.status,200);
-assert.equal((await call('/admin/api/me',member)).status,200);
-r=await call(`/admin/api/staff/${encodeURIComponent('chatgpt:'+member['oai-authenticated-user-id'])}/role`,owner,'PATCH',{role:null});assert.equal(r.status,200);
-assert.equal((await call('/admin/api/me',member)).status,403);
-r=await call('/api/auth/sign-out',owner,'POST',{});assert.equal(r.status,200);
-const cookie=r.headers.get('set-cookie').split(';')[0];
-r=await call('/admin/sign-in',{...owner,cookie});assert.equal(r.headers.get('location'),'/signout-with-chatgpt?return_to=%2F');
-assert.equal((await call(`/admin/api/entries/${entry.id}/unpublish?collection=articles`,owner,'POST',{})).status,200);
-assert.equal((await call(`/articles/${entry.id}`)).status,404);
-assert.equal((await call(path,owner,'DELETE',{})).status,200);
-assert.equal((await call(`/admin/api/media/${upload.uploadGroupId}`,owner,'DELETE',{})).status,200);
-assert.equal((await call(mediaUrl)).status,404);
-console.log('PASS: D1 boot, R2/media upload and cleanup, identity and roles, CRUD/version conflict, CSRF, sign-out, public and Sites-session staff MCP, published article HTML/Markdown/SEO/llms/sitemap.');

package/docs/examples/host-chatgpt-sites/scripts/migration.mjs

@@ -1,9 +0,0 @@
-// One-time, reviewable initial migration from Mantle's public migration planner.
-import { buildSqliteMigrationArtifact, splitSqlStatements } from '@aotter/mantle/runtime';
-import { plan } from '../.mantle/generated/mantle.ts';
-import { writeFile } from 'node:fs/promises';
-const artifact=await buildSqliteMigrationArtifact([],Object.values(plan.schemas).map(s=>s.manifest));
-const quote=value=>`'${value.replaceAll("'","''")}'`;
-const sql=[...artifact.migrations.flatMap(m=>splitSqlStatements(m.sql).map(s=>s+';')),...artifact.projections.map(p=>`INSERT INTO _mantle_schema_tables(name,projection) VALUES (${quote(p.name)},${quote(p.projection)});`),`INSERT INTO _mantle_storage_state(id,fingerprint) VALUES (1,${quote(artifact.targetFingerprint)});`].join('\n--> statement-breakpoint\n');
-await writeFile('drizzle/0001_mantle.sql',sql);
-await writeFile('src/storage-fingerprint.json',JSON.stringify(artifact.targetFingerprint)+'\n');

package/docs/examples/host-chatgpt-sites/src/chatgpt-auth.ts

@@ -1,63 +0,0 @@
-import type { AdminAuth, AdminStaffUser, StaffRole } from '@aotter/mantle/admin';
-
-export interface Env { DB: D1Database; MEDIA_BUCKET: R2Bucket; ASSETS: Fetcher; PUBLIC_ORIGIN: string; OWNER_EMAIL: string }
-type UserRow = { id: string; email: string; name: string; role: StaffRole | null; created_at: string; signed_in: number };
-const project = (row: UserRow): AdminStaffUser => ({ id:row.id,email:row.email,name:row.name,role:row.role,githubLogin:null,emailVerified:!!row.signed_in,createdAt:new Date(row.created_at) });
-
-// This adapter must only receive requests through Sites' identity-stripping dispatcher.
-// Never expose the Worker independently with caller-controlled oai-* headers.
-export function readIdentity(request: Request) {
-  const sub=request.headers.get('oai-authenticated-user-id');
-  const email=request.headers.get('oai-authenticated-user-email')?.trim().toLowerCase();
-  if(!sub || !email || sub.length>512 || email.length>320) return null;
-  let name=email;
-  if(request.headers.get('oai-authenticated-user-full-name-encoding')==='percent-encoded-utf-8') {
-    try { name=decodeURIComponent(request.headers.get('oai-authenticated-user-full-name')||'')||email; } catch {}
-  }
-  return {id:`chatgpt:${sub}`,email,name};
-}
-
-export function createChatGPTAuth(env: Env): AdminAuth {
-  const db=env.DB;
-  const roleFor=async(id:string)=>(await db.prepare('SELECT role FROM sites_users WHERE id = ?').bind(id).first<{role:StaffRole|null}>())?.role??null;
-  const auth: AdminAuth = {
-    basePath:'/api/auth', methods:[],
-    async getSession(request) {
-      const who=readIdentity(request); if(!who)return null;
-      // Only the configured owner can bootstrap privilege; a later role revocation persists.
-      await db.prepare('INSERT OR IGNORE INTO sites_users (id,email,name,role,signed_in) VALUES (?,?,?,?,1)')
-        .bind(who.id,who.email,who.name,who.email===env.OWNER_EMAIL?.trim().toLowerCase()?'owner':null).run();
-      await db.prepare('UPDATE sites_users SET id=?,name=?,signed_in=1 WHERE email=? AND signed_in=0').bind(who.id,who.name,who.email).run();
-      const row=await db.prepare('SELECT * FROM sites_users WHERE id=?').bind(who.id).first<UserRow>();
-      if(!row)return null;
-      return {session:{id:`sites:${who.id}`},user:{...who,role:row.role,roleCurrent:true}};
-    },
-    getUserRole:roleFor,
-    async handler(request) {
-      const path=new URL(request.url).pathname;
-      if(path==='/api/auth/get-session' && request.method==='GET') return Response.json(await auth.getSession(request));
-      if(path==='/api/auth/sign-out' && request.method==='POST') {
-        if(request.headers.get('origin')!==env.PUBLIC_ORIGIN)return new Response('Forbidden',{status:403});
-        // The shipped Admin UI navigates here after its POST; the next top-level request signs out at Sites.
-        return Response.json({success:true},{headers:{'set-cookie':'mantle-sites-signout=1; Path=/admin/sign-in; HttpOnly; SameSite=Strict; Max-Age=60'+(env.PUBLIC_ORIGIN.startsWith('https:')?'; Secure':'')}});
-      }
-      return Response.json({error:'unsupported_auth_route'},{status:404});
-    },
-    async listUsers(){const r=await db.prepare('SELECT * FROM sites_users WHERE role IS NOT NULL ORDER BY created_at,id').all<UserRow>();return r.results.map(project);},
-    async listMembers(args){
-      // ponytail: one bounded page for this integration lab; add cursor pagination before a large member rollout.
-      const r=await db.prepare('SELECT * FROM sites_users WHERE role IS NULL AND (email LIKE ? OR name LIKE ?) ORDER BY created_at,id LIMIT ?').bind(`%${args.search||''}%`,`%${args.search||''}%`,Math.min(args.limit,100)).all<UserRow>();
-      return {items:r.results.map(project),previousCursor:null,nextCursor:null};
-    },
-    async setUserRole(id,role){if(role!==null&&!['owner','editor','contributor'].includes(role))throw new Error('Invalid role');return !!(await db.prepare('UPDATE sites_users SET role=? WHERE id=?').bind(role,id).run()).meta.changes;},
-    async inviteUser(email,role){
-      const normalized=email.trim().toLowerCase();const id=`invite:${crypto.randomUUID()}`;
-      const r=await db.prepare('INSERT OR IGNORE INTO sites_users (id,email,name,role,signed_in) VALUES (?,?,?,?,0)').bind(id,normalized,normalized,role).run();
-      if(r.meta.changes)return {kind:'created',id};
-      const existing=await db.prepare('SELECT id FROM sites_users WHERE email=?').bind(normalized).first<{id:string}>();
-      if(!existing)throw new Error('Invitation could not be saved');return {kind:'exists',id:existing.id};
-    },
-    async revokeInvite(id){return !!(await db.prepare('DELETE FROM sites_users WHERE id=? AND signed_in=0').bind(id).run()).meta.changes;},
-  };
-  return auth;
-}

package/docs/examples/host-chatgpt-sites/src/index.ts

@@ -1,46 +0,0 @@
-import { Hono } from 'hono';
-import { bootMantleRuntime, SqliteMantleStorageAdapter } from '@aotter/mantle/runtime';
-import { D1DatabaseDriver, AssetsAssetServer } from '@aotter/mantle/cloudflare';
-import { mountMantleAdmin, type MantleAdminRuntime } from '@aotter/mantle/admin';
-import { plan } from '../.mantle/generated/mantle';
-import fingerprint from './storage-fingerprint.json';
-import { createChatGPTAuth, type Env } from './chatgpt-auth';
-import { mountR2Lab } from './r2-lab';
-import { mountWeb } from './web';
-import { SitesR2MediaStorage, mountMedia } from './media';
-import { mountMcp } from './mcp';
-
-function assemble(env:Env) {
-  const auth=createChatGPTAuth(env);
-  let runtime:Promise<MantleAdminRuntime>|undefined;
-  const get=()=>runtime??=(async()=>{
-    const r=await bootMantleRuntime({plan,storage:new SqliteMantleStorageAdapter(new D1DatabaseDriver(env.DB),{brand:'Mantle × Sites Reference',title:'Mantle × ChatGPT Sites Reference',origin:env.PUBLIC_ORIGIN,media:{purposes:[{name:'content',required:['image/jpeg,image/png,image/webp'],maxBytes:{'image/jpeg':5_000_000,'image/png':5_000_000,'image/webp':5_000_000}}]}},{managedStorageFingerprint:fingerprint}),ports:{mediaStorage:new SitesR2MediaStorage(env.MEDIA_BUCKET,env.PUBLIC_ORIGIN)}});
-    if(!r.siteConfig||!r.updateSiteSettings)throw new Error('Admin storage unavailable');
-    return Object.assign(r,{siteConfig:r.siteConfig,updateSiteSettings:r.updateSiteSettings});
-  })().catch(error=>{runtime=undefined;throw error;});
-  const app=new Hono<{Bindings:Env}>();
-  app.use('*',async(c,next)=>{await next();if(!c.res.headers.has('Cache-Control'))c.header('Cache-Control','private, no-store');c.header('X-Content-Type-Options','nosniff');});
-  mountWeb(app,get);
-  mountMcp(app,get,auth);
-  mountMedia(app,auth,env);
-  app.get('/health',async()=>{await get();return Response.json({ok:true,storage:'D1',auth:'ChatGPT Sites'});});
-  app.get('/admin/sign-in',async c=>{
-    if(c.req.header('cookie')?.split(';').some(v=>v.trim()==='mantle-sites-signout=1')) {
-      c.header('Set-Cookie','mantle-sites-signout=; Path=/admin/sign-in; HttpOnly; SameSite=Strict; Max-Age=0'+(env.PUBLIC_ORIGIN.startsWith('https:')?'; Secure':''));
-      return c.redirect('/signout-with-chatgpt?return_to=%2F');
-    }
-    return c.redirect(await auth.getSession(c.req.raw)?'/admin':'/signin-with-chatgpt?return_to=%2Fadmin');
-  });
-  app.use('/admin/*',async(c,next)=>{
-    if(!c.req.path.startsWith('/admin/api/')&&!c.req.path.startsWith('/admin/lab/r2')&&!await auth.getSession(c.req.raw))return c.redirect('/signin-with-chatgpt?return_to=%2Fadmin');
-    await next();
-  });
-  mountR2Lab(app,auth,env);
-  mountMantleAdmin(app,{plan,auth,get,assets:new AssetsAssetServer(env.ASSETS),mcpEndpoints:{public:'/api/mcp',staff:'/api/mcp/staff'},requestContext:c=>({env:c.env,waitUntil:p=>c.executionCtx.waitUntil(p)})});
-  app.get('/site.css',c=>env.ASSETS.fetch(c.req.raw));
-  app.get('/_mantle/*',c=>env.ASSETS.fetch(c.req.raw));
-  app.onError(error=>{console.error('Mantle request failed',error);return Response.json({error:'internal_error'},{status:500,headers:{'Cache-Control':'private, no-store'}});});
-  return app;
-}
-let app:ReturnType<typeof assemble>|undefined;
-export default {fetch(request:Request,env:Env,ctx:ExecutionContext){return (app??=assemble(env)).fetch(request,env,ctx);}};

package/docs/examples/host-chatgpt-sites/src/mcp.ts

@@ -1,49 +0,0 @@
-import type { Hono } from 'hono';
-import type { AdminAuth, MantleAdminRuntime, StaffRole } from '@aotter/mantle/admin';
-import { McpJsonRpcDispatcher, projectCallableCapabilities } from '@aotter/mantle/runtime';
-import { plan } from '../.mantle/generated/mantle';
-import type { Env } from './chatgpt-auth';
-
-const staffRoles=new Set<string>(['owner','editor','contributor']);
-
-/** Sites-session MCP surfaces. Remote clients still need a separate OAuth bearer flow. */
-export function mountMcp(app:Hono<{Bindings:Env}>, get:()=>Promise<MantleAdminRuntime>, auth:AdminAuth) {
-  const cache=new WeakMap<object,Map<'public'|'staff',McpJsonRpcDispatcher>>();
-  const dispatcher=async(surface:'public'|'staff',origin:string)=>{
-    const runtime=await get();
-    let dispatchers=cache.get(runtime);
-    if(!dispatchers)cache.set(runtime,dispatchers=new Map());
-    let value=dispatchers.get(surface);
-    if(!value) {
-      value=new McpJsonRpcDispatcher({
-        getEntry:runtime.getEntry,
-        createDraft:runtime.createDraft,
-        updateDraft:runtime.updateDraft,
-        requestPublish:runtime.requestPublish,
-        unpublish:runtime.unpublish,
-        archive:runtime.archive,
-        deleteEntry:runtime.deleteEntry,
-        executeView:{execute:request=>runtime.executeView({...request,view:request.view.metadata.name})},
-        invokeTrigger:{execute:request=>runtime.invokeTrigger(request)},
-      },[...runtime.schemas.values()],{
-        surface,
-        capabilities:projectCallableCapabilities(plan,{surface}),
-        serverInfo:{name:`aotter.mantle.${surface}`,title:`Mantle ${surface}`,websiteUrl:origin},
-      });
-      dispatchers.set(surface,value);
-    }
-    return value;
-  };
-  app.all('/api/mcp',async c=>(await dispatcher('public',c.env.PUBLIC_ORIGIN)).dispatch(c.req.raw,{user:null,staff:null,env:c.env,waitUntil:p=>c.executionCtx.waitUntil(p)}));
-  app.all('/api/mcp/staff',async c=>{
-    const session=await auth.getSession(c.req.raw);
-    if(!session)return Response.json({error:'unauthorized'},{status:401});
-    const role=session.user.roleCurrent?session.user.role:await auth.getUserRole(session.user.id);
-    if(!role||!staffRoles.has(role))return Response.json({error:'forbidden'},{status:403});
-    return (await dispatcher('staff',c.env.PUBLIC_ORIGIN)).dispatch(c.req.raw,{
-      user:{id:session.user.id},staff:{id:session.user.id,role:role as StaffRole},
-      auth:{credential:'session',credentialId:session.session.id,clientId:null,scopes:[]},
-      env:c.env,waitUntil:p=>c.executionCtx.waitUntil(p),
-    });
-  });
-}