@aotter/mantle 0.1.5-alpha.1 → 0.2.0-alpha.1

package/dist/d1/migrations.js

@@ -0,0 +1,111 @@
+/**
+ * Canonical migrations (ADR-0033 decision 4): Core's product tables (`site_config`, `media_assets`, `pending_media_uploads`) and the
+ * tables of an optional package (Better Auth's) change with Mantle releases and sometimes need data moves, so they are versioned
+ * in `_mantle_migrations`, never converged. Schema tables are the plan's and go through `convergeStorage`.
+ */
+import { DiagnosticError, makeDiagnostic } from "../spec/kernel/index.js";
+const LEDGER = "_mantle_migrations";
+/** Applies each migration not yet in the ledger, its statements and its ledger row in one batch, so it lands whole or not at all. */
+export async function runMigrations(driver, migrations) {
+    await driver.batch([{ sql: `CREATE TABLE IF NOT EXISTS ${LEDGER} (id TEXT PRIMARY KEY, applied_at INTEGER NOT NULL)` }]);
+    const [applied] = await driver.batch([{ sql: `SELECT id FROM ${LEDGER}` }]);
+    const seen = new Set(applied.rows.map((r) => String(r.id)));
+    for (const m of migrations) {
+        if (seen.has(m.id))
+            continue;
+        if (m.tables?.length) {
+            const [found, won] = await driver.batch([
+                { sql: `SELECT name FROM sqlite_schema WHERE type = 'table' AND lower(name) IN (${m.tables.map((_, i) => `?${i + 1}`).join(", ")})`, binds: m.tables.map((t) => t.toLowerCase()) },
+                { sql: `SELECT id FROM ${LEDGER} WHERE id = ?1`, binds: [m.id] },
+            ]);
+            // the migration and its ledger row land in one batch, so a table without the row was never ours
+            if (won.rows.length) {
+                seen.add(m.id);
+                continue;
+            }
+            if (found.rows.length)
+                throw new DiagnosticError(found.rows.map((r) => makeDiagnostic({ code: "STORAGE_TABLE_NOT_OWNED", phase: "boot", severity: "error", path: `storage:${String(r.name)}`, message: `table ${String(r.name)} exists and Mantle's migration ${m.id} did not create it, so it is not read or written; rename it or move it away` })));
+        }
+        try {
+            await driver.batch([...splitSqlStatements(m.sql).map((sql) => ({ sql })), { sql: `INSERT INTO ${LEDGER} (id, applied_at) VALUES (?1, ?2)`, binds: [m.id, Date.now()] }]);
+        }
+        catch (error) {
+            // a concurrent isolate applied it first: the ledger row is the proof, anything else is a real failure
+            const [won] = await driver.batch([{ sql: `SELECT id FROM ${LEDGER} WHERE id = ?1`, binds: [m.id] }]);
+            if (!won.rows.length)
+                throw error;
+        }
+        seen.add(m.id);
+    }
+}
+/** A migration is SQL text with several statements; D1 takes one per prepared statement. Splits at `;` outside strings, identifiers and comments. */
+export function splitSqlStatements(sql) {
+    const out = [];
+    let start = 0;
+    let state = "sql";
+    for (let i = 0; i < sql.length; i++) {
+        const c = sql[i];
+        const n = sql[i + 1];
+        if (state === "line") {
+            if (c === "\n")
+                state = "sql";
+            continue;
+        }
+        if (state === "block") {
+            if (c === "*" && n === "/") {
+                state = "sql";
+                i++;
+            }
+            continue;
+        }
+        if (state !== "sql") {
+            const close = state === "single" ? "'" : state === "double" ? '"' : state === "backtick" ? "`" : "]";
+            if (c === close) {
+                if (state !== "bracket" && n === close)
+                    i++;
+                else
+                    state = "sql";
+            }
+            continue;
+        }
+        if (c === "-" && n === "-") {
+            state = "line";
+            i++;
+            continue;
+        }
+        if (c === "/" && n === "*") {
+            state = "block";
+            i++;
+            continue;
+        }
+        if (c === "'") {
+            state = "single";
+            continue;
+        }
+        if (c === '"') {
+            state = "double";
+            continue;
+        }
+        if (c === "`") {
+            state = "backtick";
+            continue;
+        }
+        if (c === "[") {
+            state = "bracket";
+            continue;
+        }
+        if (c === ";") {
+            const s = sql.slice(start, i).trim();
+            if (s)
+                out.push(s);
+            start = i + 1;
+        }
+    }
+    if (state !== "sql" && state !== "line")
+        throw new Error("Unterminated token in a migration.");
+    const tail = sql.slice(start).trim();
+    if (tail)
+        out.push(tail);
+    return out;
+}
+//# sourceMappingURL=migrations.js.map

package/dist/d1/migrations.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"migrations.js","sourceRoot":"","sources":["../../src/d1/migrations.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAC;AAU1E,MAAM,MAAM,GAAG,oBAAoB,CAAC;AAEpC,qIAAqI;AACrI,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,MAAsB,EAAE,UAAgC;IAC1F,MAAM,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,EAAE,8BAA8B,MAAM,qDAAqD,EAAE,CAAC,CAAC,CAAC;IACzH,MAAM,CAAC,OAAO,CAAC,GAAG,MAAM,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,EAAE,kBAAkB,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC;IAC5E,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,OAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IAC7D,KAAK,MAAM,CAAC,IAAI,UAAU,EAAE,CAAC;QAC3B,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;YAAE,SAAS;QAC7B,IAAI,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC;YACrB,MAAM,CAAC,KAAK,EAAE,GAAG,CAAC,GAAG,MAAM,MAAM,CAAC,KAAK,CAAC;gBACtC,EAAE,GAAG,EAAE,2EAA2E,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,EAAE;gBAClL,EAAE,GAAG,EAAE,kBAAkB,MAAM,gBAAgB,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE;aACjE,CAAC,CAAC;YACH,gGAAgG;YAChG,IAAI,GAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;gBAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;gBAAC,SAAS;YAAC,CAAC;YACnD,IAAI,KAAM,CAAC,IAAI,CAAC,MAAM;gBACpB,MAAM,IAAI,eAAe,CAAC,KAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,cAAc,CAAC,EAAE,IAAI,EAAE,yBAAyB,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,WAAW,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,OAAO,EAAE,SAAS,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,kCAAkC,CAAC,CAAC,EAAE,6EAA6E,EAAE,CAAC,CAAC,CAAC,CAAC;QACrU,CAAC;QACD,IAAI,CAAC;YACH,MAAM,MAAM,CAAC,KAAK,CAAC,CAAC,GAAG,kBAAkB,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,EAAE,GAAG,EAAE,eAAe,MAAM,mCAAmC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;QAC3K,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,sGAAsG;YACtG,MAAM,CAAC,GAAG,CAAC,GAAG,MAAM,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,EAAE,kBAAkB,MAAM,gBAAgB,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;YACrG,IAAI,CAAC,GAAI,CAAC,IAAI,CAAC,MAAM;gBAAE,MAAM,KAAK,CAAC;QACrC,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IACjB,CAAC;AACH,CAAC;AAED,qJAAqJ;AACrJ,MAAM,UAAU,kBAAkB,CAAC,GAAW;IAC5C,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,IAAI,KAAK,GAA4E,KAAK,CAAC;IAC3F,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACpC,MAAM,CAAC,GAAG,GAAG,CAAC,CAAC,CAAE,CAAC;QAClB,MAAM,CAAC,GAAG,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;QACrB,IAAI,KAAK,KAAK,MAAM,EAAE,CAAC;YAAC,IAAI,CAAC,KAAK,IAAI;gBAAE,KAAK,GAAG,KAAK,CAAC;YAAC,SAAS;QAAC,CAAC;QAClE,IAAI,KAAK,KAAK,OAAO,EAAE,CAAC;YAAC,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,GAAG,EAAE,CAAC;gBAAC,KAAK,GAAG,KAAK,CAAC;gBAAC,CAAC,EAAE,CAAC;YAAC,CAAC;YAAC,SAAS;QAAC,CAAC;QACxF,IAAI,KAAK,KAAK,KAAK,EAAE,CAAC;YACpB,MAAM,KAAK,GAAG,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,KAAK,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC;YACrG,IAAI,CAAC,KAAK,KAAK,EAAE,CAAC;gBAAC,IAAI,KAAK,KAAK,SAAS,IAAI,CAAC,KAAK,KAAK;oBAAE,CAAC,EAAE,CAAC;;oBAAM,KAAK,GAAG,KAAK,CAAC;YAAC,CAAC;YACrF,SAAS;QACX,CAAC;QACD,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,GAAG,EAAE,CAAC;YAAC,KAAK,GAAG,MAAM,CAAC;YAAC,CAAC,EAAE,CAAC;YAAC,SAAS;QAAC,CAAC;QAC9D,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,GAAG,EAAE,CAAC;YAAC,KAAK,GAAG,OAAO,CAAC;YAAC,CAAC,EAAE,CAAC;YAAC,SAAS;QAAC,CAAC;QAC/D,IAAI,CAAC,KAAK,GAAG,EAAE,CAAC;YAAC,KAAK,GAAG,QAAQ,CAAC;YAAC,SAAS;QAAC,CAAC;QAC9C,IAAI,CAAC,KAAK,GAAG,EAAE,CAAC;YAAC,KAAK,GAAG,QAAQ,CAAC;YAAC,SAAS;QAAC,CAAC;QAC9C,IAAI,CAAC,KAAK,GAAG,EAAE,CAAC;YAAC,KAAK,GAAG,UAAU,CAAC;YAAC,SAAS;QAAC,CAAC;QAChD,IAAI,CAAC,KAAK,GAAG,EAAE,CAAC;YAAC,KAAK,GAAG,SAAS,CAAC;YAAC,SAAS;QAAC,CAAC;QAC/C,IAAI,CAAC,KAAK,GAAG,EAAE,CAAC;YAAC,MAAM,CAAC,GAAG,GAAG,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;YAAC,IAAI,CAAC;gBAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAAC,KAAK,GAAG,CAAC,GAAG,CAAC,CAAC;QAAC,CAAC;IAC7F,CAAC;IACD,IAAI,KAAK,KAAK,KAAK,IAAI,KAAK,KAAK,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;IAC/F,MAAM,IAAI,GAAG,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC;IACrC,IAAI,IAAI;QAAE,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACzB,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/d1/print.d.ts

@@ -0,0 +1,28 @@
+/**
+ * The printer (ADR-0034 decision 3): pgsql-deparser, subclassed. The subset is the syntax PostgreSQL and
+ * SQLite share, so most nodes print as they are; each override exists because a case fails on local D1
+ * without it. Runs in the Worker: AST in, SQL text out, no parser.
+ */
+import { Deparser } from "pgsql-deparser";
+import type { SqlNode } from "../spec/domain/index.js";
+/** A pre-lowered SQLite expression: strings print as they are, nodes print as the deparser would, always in parentheses. */
+export interface RawExpr {
+    readonly parts: readonly (string | SqlNode)[];
+}
+export declare class SqliteDeparser extends Deparser {
+    /** PostgreSQL prints $n; SQLite reads $n as a NAMED parameter numbered by first appearance, so binds would shift silently. */
+    ParamRef(n: SqlNode): string;
+    /** PostgreSQL prints x::type; SQLite has only CAST(x AS type). */
+    TypeCast(n: SqlNode, ctx: any): string;
+    /** PostgreSQL prints E'a\\b' for a string with a backslash; SQLite has no E'' strings. */
+    A_Const(n: SqlNode, ctx: any): string;
+    /** `x LIKE p ESCAPE e` parses to LIKE with pg_catalog.like_escape(p, e), which SQLite has no function for. */
+    A_Expr(node: SqlNode, ctx: any): string;
+    NullTest(n: SqlNode, ctx: any): string;
+    BooleanTest(n: SqlNode, ctx: any): string;
+    SubLink(n: SqlNode, ctx: any): string;
+    /** Mantle's own lowerings are written as SQLite text with sub-ASTs spliced in (see `raw` in policy.ts). */
+    Raw(n: RawExpr, ctx: any): string;
+}
+export declare function print(ast: SqlNode): string;
+//# sourceMappingURL=print.d.ts.map

package/dist/d1/print.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"print.d.ts","sourceRoot":"","sources":["../../src/d1/print.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAC1C,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,yBAAyB,CAAC;AAGvD,4HAA4H;AAC5H,MAAM,WAAW,OAAO;IACtB,QAAQ,CAAC,KAAK,EAAE,SAAS,CAAC,MAAM,GAAG,OAAO,CAAC,EAAE,CAAC;CAC/C;AAED,qBAAa,cAAe,SAAQ,QAAQ;IAC1C,8HAA8H;IACrH,QAAQ,CAAC,CAAC,EAAE,OAAO;IAG5B,kEAAkE;IACzD,QAAQ,CAAC,CAAC,EAAE,OAAO,EAAE,GAAG,EAAE,GAAG;IAGtC,0FAA0F;IACjF,OAAO,CAAC,CAAC,EAAE,OAAO,EAAE,GAAG,EAAE,GAAG;IAMrC,8GAA8G;IACrG,MAAM,CAAC,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,GAAG;IAe9B,QAAQ,CAAC,CAAC,EAAE,OAAO,EAAE,GAAG,EAAE,GAAG;IAC7B,WAAW,CAAC,CAAC,EAAE,OAAO,EAAE,GAAG,EAAE,GAAG;IAChC,OAAO,CAAC,CAAC,EAAE,OAAO,EAAE,GAAG,EAAE,GAAG;IACrC,2GAA2G;IAC3G,GAAG,CAAC,CAAC,EAAE,OAAO,EAAE,GAAG,EAAE,GAAG;CAGzB;AAED,wBAAgB,KAAK,CAAC,GAAG,EAAE,OAAO,GAAG,MAAM,CAE1C"}

package/dist/d1/print.js

@@ -0,0 +1,54 @@
+/**
+ * The printer (ADR-0034 decision 3): pgsql-deparser, subclassed. The subset is the syntax PostgreSQL and
+ * SQLite share, so most nodes print as they are; each override exists because a case fails on local D1
+ * without it. Runs in the Worker: AST in, SQL text out, no parser.
+ */
+import { Deparser } from "pgsql-deparser";
+import { parenthesized } from "../core/sql/ast.js";
+export class SqliteDeparser extends Deparser {
+    /** PostgreSQL prints $n; SQLite reads $n as a NAMED parameter numbered by first appearance, so binds would shift silently. */
+    ParamRef(n) {
+        return `?${n.number}`;
+    }
+    /** PostgreSQL prints x::type; SQLite has only CAST(x AS type). */
+    TypeCast(n, ctx) {
+        return `CAST(${this.visit(n.arg, ctx)} AS ${n.typeName.names.at(-1).String.sval})`;
+    }
+    /** PostgreSQL prints E'a\\b' for a string with a backslash; SQLite has no E'' strings. */
+    A_Const(n, ctx) {
+        if (n.sval)
+            return `'${String(n.sval.sval ?? "").replace(/'/g, "''")}'`;
+        // SQLite resolves a bare `true`/`false` as a column or output alias of that name before the keyword
+        if (n.boolval)
+            return n.boolval.boolval === true ? "(1 = 1)" : "(1 = 0)";
+        return super.A_Const(n, ctx);
+    }
+    /** `x LIKE p ESCAPE e` parses to LIKE with pg_catalog.like_escape(p, e), which SQLite has no function for. */
+    A_Expr(node, ctx) {
+        const n = parenthesized("A_Expr", node);
+        const fc = n.rexpr?.FuncCall;
+        // only the parser's own like_escape(p, e); any other function on the right of LIKE is an ordinary pattern expression
+        if (n.kind === "AEXPR_LIKE" && fc?.funcname?.at(-1)?.String?.sval === "like_escape" && fc.args?.length === 2) {
+            const [pat, esc] = fc.args;
+            const not = n.name[0].String.sval === "!~~" ? "NOT " : "";
+            return `${this.visit(n.lexpr, ctx)} ${not}LIKE ${this.visit(pat, ctx)} ESCAPE ${this.visit(esc, ctx)}`;
+        }
+        // SQLite looks through a unary sign: `ORDER BY +2` is column position 2 to it (and `-2` an error) where PostgreSQL has a constant
+        const sign = n.name?.[0]?.String?.sval;
+        // the operand in its own parentheses: `-` then `-2` must never print as `--`, which starts a comment
+        if (n.kind === "AEXPR_OP" && !n.lexpr && (sign === "+" || sign === "-"))
+            return `(${sign}(${this.visit(n.rexpr, ctx)}) + 0)`;
+        return super.A_Expr(n, ctx);
+    }
+    NullTest(n, ctx) { return super.NullTest(parenthesized("NullTest", n), ctx); }
+    BooleanTest(n, ctx) { return super.BooleanTest(parenthesized("BooleanTest", n), ctx); }
+    SubLink(n, ctx) { return super.SubLink(parenthesized("SubLink", n), ctx); }
+    /** Mantle's own lowerings are written as SQLite text with sub-ASTs spliced in (see `raw` in policy.ts). */
+    Raw(n, ctx) {
+        return `(${n.parts.map((p) => (typeof p === "string" ? p : this.visit(p, ctx))).join("")})`;
+    }
+}
+export function print(ast) {
+    return new SqliteDeparser([ast], { pretty: false }).deparseQuery();
+}
+//# sourceMappingURL=print.js.map

package/dist/d1/print.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"print.js","sourceRoot":"","sources":["../../src/d1/print.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAE1C,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAOnD,MAAM,OAAO,cAAe,SAAQ,QAAQ;IAC1C,8HAA8H;IACrH,QAAQ,CAAC,CAAU;QAC1B,OAAO,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC;IACxB,CAAC;IACD,kEAAkE;IACzD,QAAQ,CAAC,CAAU,EAAE,GAAQ;QACpC,OAAO,QAAQ,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,GAAY,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,GAAG,CAAC;IAC9F,CAAC;IACD,0FAA0F;IACjF,OAAO,CAAC,CAAU,EAAE,GAAQ;QACnC,IAAI,CAAC,CAAC,IAAI;YAAE,OAAO,IAAI,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC;QACxE,oGAAoG;QACpG,IAAI,CAAC,CAAC,OAAO;YAAE,OAAO,CAAC,CAAC,OAAO,CAAC,OAAO,KAAK,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;QACzE,OAAO,KAAK,CAAC,OAAO,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IAC/B,CAAC;IACD,8GAA8G;IACrG,MAAM,CAAC,IAAa,EAAE,GAAQ;QACrC,MAAM,CAAC,GAAG,aAAa,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;QACxC,MAAM,EAAE,GAAG,CAAC,CAAC,KAAK,EAAE,QAAQ,CAAC;QAC7B,qHAAqH;QACrH,IAAI,CAAC,CAAC,IAAI,KAAK,YAAY,IAAI,EAAE,EAAE,QAAQ,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,KAAK,aAAa,IAAI,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,CAAC,EAAE,CAAC;YAC7G,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC;YAC3B,MAAM,GAAG,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,KAAK,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;YAC1D,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,KAAc,EAAE,GAAG,CAAC,IAAI,GAAG,QAAQ,IAAI,CAAC,KAAK,CAAC,GAAY,EAAE,GAAG,CAAC,WAAW,IAAI,CAAC,KAAK,CAAC,GAAY,EAAE,GAAG,CAAC,EAAE,CAAC;QACpI,CAAC;QACD,kIAAkI;QAClI,MAAM,IAAI,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC;QACvC,qGAAqG;QACrG,IAAI,CAAC,CAAC,IAAI,KAAK,UAAU,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,IAAI,KAAK,GAAG,IAAI,IAAI,KAAK,GAAG,CAAC;YAAE,OAAO,IAAI,IAAI,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,KAAc,EAAE,GAAG,CAAC,QAAQ,CAAC;QACtI,OAAO,KAAK,CAAC,MAAM,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IAC9B,CAAC;IACQ,QAAQ,CAAC,CAAU,EAAE,GAAQ,IAAI,OAAO,KAAK,CAAC,QAAQ,CAAC,aAAa,CAAC,UAAU,EAAE,CAAC,CAAU,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC;IACrG,WAAW,CAAC,CAAU,EAAE,GAAQ,IAAI,OAAO,KAAK,CAAC,WAAW,CAAC,aAAa,CAAC,aAAa,EAAE,CAAC,CAAU,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC;IAC9G,OAAO,CAAC,CAAU,EAAE,GAAQ,IAAI,OAAO,KAAK,CAAC,OAAO,CAAC,aAAa,CAAC,SAAS,EAAE,CAAC,CAAU,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC;IAC3G,2GAA2G;IAC3G,GAAG,CAAC,CAAU,EAAE,GAAQ;QACtB,OAAO,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAU,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,GAAG,CAAC;IACvG,CAAC;CACF;AAED,MAAM,UAAU,KAAK,CAAC,GAAY;IAChC,OAAO,IAAI,cAAc,CAAC,CAAC,GAAG,CAAQ,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC,YAAY,EAAE,CAAC;AAC5E,CAAC"}

package/dist/d1/site.d.ts

@@ -0,0 +1,17 @@
+/**
+ * `site_config` over a SQLite-family driver, and the canonical migrations of Core's product tables. The DDL and the migration
+ * ids are 0.1.x's; ownership is proven by next's own `_mantle_migrations` ledger. Upgrading a 0.1.x database in place is a
+ * separate step, not built yet. A new id is never purely numeric (`0004-…`): 0.1.x ledgers already hold those.
+ *
+ * Operator fields (`brand`, `title`, `description`) are seeded once: the database wins once a row exists, so a later code
+ * edit never overwrites what the owner set in Admin. Deployment fields (`origin`, icons, `locales`, media purposes) have no
+ * edit path but code, so every boot syncs them, writing only what changed. A blank default is skipped (#441).
+ */
+import { type SiteDefaults } from "../spec/domain/index.js";
+import type { DatabaseDriver } from "../core/driver.js";
+import type { MantleSite } from "../core/site.js";
+import { type Migration } from "./migrations.js";
+export declare const CORE_MIGRATIONS: readonly Migration[];
+/** Migrates the product tables, seeds and syncs the defaults, and returns the capability. Runs at every boot. */
+export declare function prepareSite(driver: DatabaseDriver, defaults: SiteDefaults): Promise<MantleSite>;
+//# sourceMappingURL=site.d.ts.map

package/dist/d1/site.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"site.d.ts","sourceRoot":"","sources":["../../src/d1/site.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,OAAO,EAAmD,KAAK,YAAY,EAAE,MAAM,yBAAyB,CAAC;AAC7G,OAAO,KAAK,EAAE,cAAc,EAAgB,MAAM,mBAAmB,CAAC;AACtE,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAGlD,OAAO,EAAiB,KAAK,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAEhE,eAAO,MAAM,eAAe,EAAE,SAAS,SAAS,EAa/C,CAAC;AAMF,iHAAiH;AACjH,wBAAsB,WAAW,CAAC,MAAM,EAAE,cAAc,EAAE,QAAQ,EAAE,YAAY,GAAG,OAAO,CAAC,UAAU,CAAC,CA2BrG"}

package/dist/d1/site.js

@@ -0,0 +1,63 @@
+/**
+ * `site_config` over a SQLite-family driver, and the canonical migrations of Core's product tables. The DDL and the migration
+ * ids are 0.1.x's; ownership is proven by next's own `_mantle_migrations` ledger. Upgrading a 0.1.x database in place is a
+ * separate step, not built yet. A new id is never purely numeric (`0004-…`): 0.1.x ledgers already hold those.
+ *
+ * Operator fields (`brand`, `title`, `description`) are seeded once: the database wins once a row exists, so a later code
+ * edit never overwrites what the owner set in Admin. Deployment fields (`origin`, icons, `locales`, media purposes) have no
+ * edit path but code, so every boot syncs them, writing only what changed. A blank default is skipped (#441).
+ */
+import { DEFAULT_SITE_ICONS, assertSiteDefaultsCanonical } from "../spec/domain/index.js";
+import { siteConfigOf } from "../core/siteConfig.js";
+import { mediaLibrary } from "./media.js";
+import { runMigrations } from "./migrations.js";
+export const CORE_MIGRATIONS = [
+    // 0.1.x's 0001-init also created Better Auth's tables; mantle-auth now migrates those itself
+    { id: "0001-init", tables: ["site_config"], sql: "CREATE TABLE IF NOT EXISTS site_config (key TEXT PRIMARY KEY, value TEXT NOT NULL)" },
+    {
+        id: "0002-media-assets", tables: ["media_assets"],
+        sql: `CREATE TABLE IF NOT EXISTS media_assets (id TEXT PRIMARY KEY, created_at INTEGER NOT NULL, owner_id TEXT, alt TEXT, caption TEXT, variants TEXT NOT NULL, metadata TEXT);
+      CREATE INDEX IF NOT EXISTS media_assets_by_owner_created ON media_assets (owner_id, created_at DESC)`,
+    },
+    {
+        id: "0003-pending-media-uploads", tables: ["pending_media_uploads"],
+        sql: `CREATE TABLE IF NOT EXISTS pending_media_uploads (id TEXT PRIMARY KEY, record TEXT NOT NULL, expires_at INTEGER NOT NULL);
+      CREATE INDEX IF NOT EXISTS pending_media_uploads_expires_at ON pending_media_uploads (expires_at)`,
+    },
+];
+const nonBlank = (v) => (v ? v : undefined);
+const upsert = (key, value) => ({ sql: "INSERT INTO site_config (key, value) VALUES (?1, ?2) ON CONFLICT(key) DO UPDATE SET value = excluded.value", binds: [key, value] });
+/** Migrates the product tables, seeds and syncs the defaults, and returns the capability. Runs at every boot. */
+export async function prepareSite(driver, defaults) {
+    assertSiteDefaultsCanonical(defaults);
+    await runMigrations(driver, CORE_MIGRATIONS);
+    const [stored] = await driver.batch([{ sql: "SELECT key, value FROM site_config" }]);
+    const have = new Map(stored.rows.map((r) => [String(r.key), String(r.value)]));
+    const writes = [];
+    for (const [key, value] of [["brand", defaults.brand], ["title", defaults.title], ["description", defaults.description]])
+        if (value && !have.has(key))
+            writes.push({ sql: "INSERT INTO site_config (key, value) VALUES (?1, ?2) ON CONFLICT(key) DO NOTHING", binds: [key, value] });
+    const synced = [
+        ["origin", nonBlank(defaults.origin)],
+        ["faviconUrl", JSON.stringify(defaults.icons ?? DEFAULT_SITE_ICONS)],
+        ["locales", defaults.locales?.length ? defaults.locales.join(",") : undefined],
+        ["mediaPurposes", defaults.media?.purposes?.length ? JSON.stringify(defaults.media.purposes) : undefined],
+    ];
+    for (const [key, value] of synced)
+        if (value !== undefined && have.get(key) !== value)
+            writes.push(upsert(key, value));
+    if (writes.length)
+        await driver.batch(writes);
+    const read = async () => siteConfigOf((await driver.batch([{ sql: "SELECT key, value FROM site_config" }]))[0].rows);
+    return {
+        read,
+        async updateSettings(values) {
+            const writes = ["brand", "title", "description"].flatMap((k) => (typeof values[k] === "string" ? [upsert(k, values[k])] : []));
+            if (writes.length)
+                await driver.batch(writes);
+            return read();
+        },
+        media: (storage) => mediaLibrary(driver, storage, async () => (await read()).media.purposes),
+    };
+}
+//# sourceMappingURL=site.js.map

package/dist/d1/site.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"site.js","sourceRoot":"","sources":["../../src/d1/site.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,OAAO,EAAE,kBAAkB,EAAE,2BAA2B,EAAqB,MAAM,yBAAyB,CAAC;AAG7G,OAAO,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AACrD,OAAO,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAC1C,OAAO,EAAE,aAAa,EAAkB,MAAM,iBAAiB,CAAC;AAEhE,MAAM,CAAC,MAAM,eAAe,GAAyB;IACnD,6FAA6F;IAC7F,EAAE,EAAE,EAAE,WAAW,EAAE,MAAM,EAAE,CAAC,aAAa,CAAC,EAAE,GAAG,EAAE,oFAAoF,EAAE;IACvI;QACE,EAAE,EAAE,mBAAmB,EAAE,MAAM,EAAE,CAAC,cAAc,CAAC;QACjD,GAAG,EAAE;2GACkG;KACxG;IACD;QACE,EAAE,EAAE,4BAA4B,EAAE,MAAM,EAAE,CAAC,uBAAuB,CAAC;QACnE,GAAG,EAAE;wGAC+F;KACrG;CACF,CAAC;AAEF,MAAM,QAAQ,GAAG,CAAC,CAAqB,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;AAEhE,MAAM,MAAM,GAAG,CAAC,GAAW,EAAE,KAAa,EAAgB,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,4GAA4G,EAAE,KAAK,EAAE,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,CAAC,CAAC;AAE1M,iHAAiH;AACjH,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,MAAsB,EAAE,QAAsB;IAC9E,2BAA2B,CAAC,QAAQ,CAAC,CAAC;IACtC,MAAM,aAAa,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC;IAC7C,MAAM,CAAC,MAAM,CAAC,GAAG,MAAM,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,EAAE,oCAAoC,EAAE,CAAC,CAAC,CAAC;IACrF,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,MAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IAChF,MAAM,MAAM,GAAmB,EAAE,CAAC;IAClC,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC,aAAa,EAAE,QAAQ,CAAC,WAAW,CAAC,CAAU;QAC/H,IAAI,KAAK,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,MAAM,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,kFAAkF,EAAE,KAAK,EAAE,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,CAAC,CAAC;IAC7J,MAAM,MAAM,GAAmC;QAC7C,CAAC,QAAQ,EAAE,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QACrC,CAAC,YAAY,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,KAAK,IAAI,kBAAkB,CAAC,CAAC;QACpE,CAAC,SAAS,EAAE,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAC9E,CAAC,eAAe,EAAE,QAAQ,CAAC,KAAK,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;KAC1G,CAAC;IACF,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM;QAAE,IAAI,KAAK,KAAK,SAAS,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,KAAK;YAAE,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC,CAAC;IACvH,IAAI,MAAM,CAAC,MAAM;QAAE,MAAM,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAE9C,MAAM,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC,YAAY,CAAC,CAAC,MAAM,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,EAAE,oCAAoC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAE,CAAC,IAAI,CAAC,CAAC;IACtH,OAAO;QACL,IAAI;QACJ,KAAK,CAAC,cAAc,CAAC,MAAM;YACzB,MAAM,MAAM,GAAI,CAAC,OAAO,EAAE,OAAO,EAAE,aAAa,CAAW,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,OAAO,MAAM,CAAC,CAAC,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;YAC3I,IAAI,MAAM,CAAC,MAAM;gBAAE,MAAM,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;YAC9C,OAAO,IAAI,EAAE,CAAC;QAChB,CAAC;QACD,KAAK,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,YAAY,CAAC,MAAM,EAAE,OAAO,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC;KAC7F,CAAC;AACJ,CAAC"}

package/dist/d1/storage.d.ts

@@ -0,0 +1,34 @@
+import type { DatabaseDriver } from "../core/driver.js";
+import type { StorageSchema } from "../core/dialect.js";
+export type { StorageSchema };
+export interface StorageChange {
+    readonly schema: string;
+    readonly code: "STORAGE_CHANGE_BLOCKED" | "STORAGE_TABLE_NOT_OWNED" | "STORAGE_UNDECLARED_COLUMN" | "STORAGE_UNDECLARED_INDEX";
+    readonly message: string;
+}
+export interface StorageReport {
+    /** Fingerprint matched: nothing but the fingerprint was read. */
+    readonly skipped: boolean;
+    readonly blocked: readonly StorageChange[];
+    readonly undeclared: readonly StorageChange[];
+}
+/** Converge storage to the plan. Blocked differences are reported and applied to nothing; a matching fingerprint reads nothing else. */
+export declare function convergeStorage(driver: DatabaseDriver, plan: Readonly<Record<string, StorageSchema>>, options: {
+    fingerprint: string;
+    timeZone?: string;
+}): Promise<StorageReport>;
+/**
+ * What `convergeStorage` would apply to this database now, applying nothing (`mantle generate --check`, ADR-0033 decision 3).
+ * `skipped` when the database already booted this fingerprint, as boot would. The SQL replays: system DDL (only where Mantle
+ * never booted) is `IF NOT EXISTS`, `ADD COLUMN` comes from the current state, binds are inlined. The boot state and time
+ * zone rows are left to boot.
+ */
+export declare function planStorageChanges(driver: DatabaseDriver, plan: Readonly<Record<string, StorageSchema>>, options?: {
+    fingerprint?: string;
+}): Promise<{
+    skipped: boolean;
+    sql: string[];
+    blocked: readonly StorageChange[];
+    undeclared: readonly StorageChange[];
+}>;
+//# sourceMappingURL=storage.d.ts.map

package/dist/d1/storage.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"storage.d.ts","sourceRoot":"","sources":["../../src/d1/storage.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,cAAc,EAAgB,MAAM,mBAAmB,CAAC;AACtE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAIxD,YAAY,EAAE,aAAa,EAAE,CAAC;AAE9B,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,IAAI,EAAE,wBAAwB,GAAG,yBAAyB,GAAG,2BAA2B,GAAG,0BAA0B,CAAC;IAC/H,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,WAAW,aAAa;IAC5B,iEAAiE;IACjE,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,OAAO,EAAE,SAAS,aAAa,EAAE,CAAC;IAC3C,QAAQ,CAAC,UAAU,EAAE,SAAS,aAAa,EAAE,CAAC;CAC/C;AAyHD,wIAAwI;AACxI,wBAAsB,eAAe,CACnC,MAAM,EAAE,cAAc,EACtB,IAAI,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC,EAC7C,OAAO,EAAE;IAAE,WAAW,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;CAAE,GAClD,OAAO,CAAC,aAAa,CAAC,CA2BxB;AASD;;;;;GAKG;AACH,wBAAsB,kBAAkB,CAAC,MAAM,EAAE,cAAc,EAAE,IAAI,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC,EAAE,OAAO,GAAE;IAAE,WAAW,CAAC,EAAE,MAAM,CAAA;CAAO,GAAG,OAAO,CAAC;IAAE,OAAO,EAAE,OAAO,CAAC;IAAC,GAAG,EAAE,MAAM,EAAE,CAAC;IAAC,OAAO,EAAE,SAAS,aAAa,EAAE,CAAC;IAAC,UAAU,EAAE,SAAS,aAAa,EAAE,CAAA;CAAE,CAAC,CAU7Q"}