@aotter/mantle 0.1.5-alpha.1 → 0.2.0-alpha.1

package/docs/examples/host-chatgpt-sites/drizzle/0001_mantle.sql

@@ -1,294 +0,0 @@
-CREATE TABLE IF NOT EXISTS site_config (
-        key   TEXT PRIMARY KEY,
-        value TEXT NOT NULL
-      );
---> statement-breakpoint
-CREATE TABLE IF NOT EXISTS user (
-        id            TEXT PRIMARY KEY NOT NULL,
-        name          TEXT NOT NULL,
-        email         TEXT NOT NULL UNIQUE,
-        emailVerified INTEGER NOT NULL DEFAULT 0,
-        image         TEXT,
-        createdAt     TEXT NOT NULL,
-        updatedAt     TEXT NOT NULL,
-        role          TEXT,
-        banned        INTEGER DEFAULT 0,
-        banReason     TEXT,
-        banExpires    TEXT,
-        githubLogin   TEXT
-      );
---> statement-breakpoint
--- Partial index keeps ensureBootstrapOwner's role-IN scan off
-      -- the pile of role=NULL rows.
-      CREATE INDEX IF NOT EXISTS user_role_idx ON user (role) WHERE role IS NOT NULL;
---> statement-breakpoint
-CREATE TABLE IF NOT EXISTS session (
-        id             TEXT PRIMARY KEY NOT NULL,
-        expiresAt      TEXT NOT NULL,
-        token          TEXT NOT NULL UNIQUE,
-        createdAt      TEXT NOT NULL,
-        updatedAt      TEXT NOT NULL,
-        ipAddress      TEXT,
-        userAgent      TEXT,
-        userId         TEXT NOT NULL REFERENCES user(id) ON DELETE CASCADE,
-        impersonatedBy TEXT
-      );
---> statement-breakpoint
-CREATE INDEX IF NOT EXISTS session_userId_idx ON session (userId);
---> statement-breakpoint
-CREATE TABLE IF NOT EXISTS account (
-        id                       TEXT PRIMARY KEY NOT NULL,
-        issuer                   TEXT NOT NULL,
-        accountId                TEXT NOT NULL,
-        providerId               TEXT NOT NULL,
-        userId                   TEXT NOT NULL REFERENCES user(id) ON DELETE CASCADE,
-        accessToken              TEXT,
-        refreshToken             TEXT,
-        idToken                  TEXT,
-        accessTokenExpiresAt     TEXT,
-        refreshTokenExpiresAt    TEXT,
-        scope                    TEXT,
-        password                 TEXT,
-        createdAt                TEXT NOT NULL,
-        updatedAt                TEXT NOT NULL,
-        UNIQUE (issuer, accountId)
-      );
---> statement-breakpoint
-CREATE INDEX IF NOT EXISTS account_userId_idx ON account (userId);
---> statement-breakpoint
-CREATE TABLE IF NOT EXISTS verification (
-        id         TEXT PRIMARY KEY NOT NULL,
-        identifier TEXT NOT NULL,
-        value      TEXT NOT NULL,
-        expiresAt  TEXT NOT NULL,
-        createdAt  TEXT NOT NULL,
-        updatedAt  TEXT NOT NULL
-      );
---> statement-breakpoint
-CREATE INDEX IF NOT EXISTS verification_identifier_idx ON verification (identifier);
---> statement-breakpoint
-CREATE TABLE IF NOT EXISTS jwks (
-        id         TEXT PRIMARY KEY NOT NULL,
-        publicKey  TEXT NOT NULL,
-        privateKey TEXT NOT NULL,
-        createdAt  TEXT NOT NULL,
-        expiresAt  TEXT,
-        alg        TEXT,
-        crv        TEXT
-      );
---> statement-breakpoint
-CREATE TABLE IF NOT EXISTS oauthClient (
-        id                               TEXT PRIMARY KEY NOT NULL,
-        clientId                         TEXT NOT NULL UNIQUE,
-        clientSecret                     TEXT,
-        clientDiscoveryId                TEXT,
-        disabled                         INTEGER DEFAULT 0,
-        skipConsent                      INTEGER,
-        enableEndSession                 INTEGER,
-        subjectType                      TEXT,
-        scopes                           TEXT,
-        clientCredentialsScopes          TEXT DEFAULT '[]',
-        userId                           TEXT REFERENCES user(id) ON DELETE CASCADE,
-        createdAt                        TEXT,
-        updatedAt                        TEXT,
-        name                             TEXT,
-        uri                              TEXT,
-        icon                             TEXT,
-        contacts                         TEXT,
-        tos                              TEXT,
-        policy                           TEXT,
-        softwareId                       TEXT,
-        softwareVersion                  TEXT,
-        softwareStatement                TEXT,
-        redirectUris                     TEXT NOT NULL,
-        postLogoutRedirectUris           TEXT,
-        backchannelLogoutUri             TEXT,
-        backchannelLogoutSessionRequired INTEGER,
-        tokenEndpointAuthMethod          TEXT,
-        applicationType                  TEXT,
-        jwks                             TEXT,
-        jwksUri                          TEXT,
-        grantTypes                       TEXT,
-        responseTypes                    TEXT,
-        requirePKCE                      INTEGER,
-        dpopBoundAccessTokens            INTEGER DEFAULT 0,
-        referenceId                      TEXT,
-        metadata                         TEXT
-      );
---> statement-breakpoint
-CREATE INDEX IF NOT EXISTS oauthClient_userId_idx ON oauthClient (userId);
---> statement-breakpoint
-CREATE TABLE IF NOT EXISTS oauthResource (
-        id                              TEXT PRIMARY KEY NOT NULL,
-        identifier                      TEXT NOT NULL UNIQUE,
-        name                            TEXT NOT NULL,
-        accessTokenTtl                  INTEGER,
-        refreshTokenTtl                 INTEGER,
-        signingAlgorithm                TEXT,
-        signingKeyId                    TEXT,
-        allowedScopes                   TEXT,
-        customClaims                    TEXT,
-        dpopBoundAccessTokensRequired   INTEGER DEFAULT 0,
-        disabled                        INTEGER DEFAULT 0,
-        createdAt                       TEXT,
-        updatedAt                       TEXT,
-        policyVersion                   INTEGER DEFAULT 1,
-        metadata                        TEXT
-      );
---> statement-breakpoint
-CREATE TABLE IF NOT EXISTS oauthClientResource (
-        id         TEXT PRIMARY KEY NOT NULL,
-        clientId   TEXT NOT NULL REFERENCES oauthClient(clientId) ON DELETE CASCADE,
-        resourceId TEXT NOT NULL REFERENCES oauthResource(identifier) ON DELETE CASCADE,
-        metadata   TEXT,
-        createdAt  TEXT,
-        UNIQUE (clientId, resourceId)
-      );
---> statement-breakpoint
-CREATE INDEX IF NOT EXISTS oauthClientResource_clientId_idx
-        ON oauthClientResource (clientId);
---> statement-breakpoint
-CREATE INDEX IF NOT EXISTS oauthClientResource_resourceId_idx
-        ON oauthClientResource (resourceId);
---> statement-breakpoint
-CREATE TABLE IF NOT EXISTS oauthRefreshToken (
-        id                    TEXT PRIMARY KEY NOT NULL,
-        token                 TEXT NOT NULL UNIQUE,
-        clientId              TEXT NOT NULL REFERENCES oauthClient(clientId) ON DELETE CASCADE,
-        sessionId             TEXT REFERENCES session(id) ON DELETE SET NULL,
-        userId                TEXT NOT NULL REFERENCES user(id) ON DELETE CASCADE,
-        referenceId           TEXT,
-        authorizationCodeId   TEXT,
-        resources             TEXT,
-        requestedUserInfoClaims TEXT,
-        expiresAt             TEXT NOT NULL,
-        createdAt             TEXT NOT NULL,
-        revoked               TEXT,
-        rotatedAt             TEXT,
-        rotationReplayResponse TEXT,
-        rotationReplayExpiresAt TEXT,
-        authTime              TEXT,
-        confirmation          TEXT,
-        scopes                TEXT NOT NULL
-      );
---> statement-breakpoint
-CREATE INDEX IF NOT EXISTS oauthRefreshToken_clientId_idx ON oauthRefreshToken (clientId);
---> statement-breakpoint
-CREATE INDEX IF NOT EXISTS oauthRefreshToken_sessionId_idx ON oauthRefreshToken (sessionId);
---> statement-breakpoint
-CREATE INDEX IF NOT EXISTS oauthRefreshToken_userId_idx ON oauthRefreshToken (userId);
---> statement-breakpoint
-CREATE INDEX IF NOT EXISTS oauthRefreshToken_authorizationCodeId_idx
-        ON oauthRefreshToken (authorizationCodeId);
---> statement-breakpoint
-CREATE TABLE IF NOT EXISTS oauthAccessToken (
-        id                      TEXT PRIMARY KEY NOT NULL,
-        token                   TEXT NOT NULL UNIQUE,
-        clientId                TEXT NOT NULL REFERENCES oauthClient(clientId) ON DELETE CASCADE,
-        sessionId               TEXT REFERENCES session(id) ON DELETE SET NULL,
-        userId                  TEXT REFERENCES user(id) ON DELETE CASCADE,
-        referenceId             TEXT,
-        authorizationCodeId     TEXT,
-        resources               TEXT,
-        requestedUserInfoClaims TEXT,
-        refreshId               TEXT REFERENCES oauthRefreshToken(id) ON DELETE CASCADE,
-        expiresAt               TEXT NOT NULL,
-        createdAt               TEXT NOT NULL,
-        revoked                 TEXT,
-        confirmation            TEXT,
-        scopes                  TEXT NOT NULL
-      );
---> statement-breakpoint
-CREATE INDEX IF NOT EXISTS oauthAccessToken_clientId_idx ON oauthAccessToken (clientId);
---> statement-breakpoint
-CREATE INDEX IF NOT EXISTS oauthAccessToken_sessionId_idx ON oauthAccessToken (sessionId);
---> statement-breakpoint
-CREATE INDEX IF NOT EXISTS oauthAccessToken_userId_idx ON oauthAccessToken (userId);
---> statement-breakpoint
-CREATE INDEX IF NOT EXISTS oauthAccessToken_refreshId_idx ON oauthAccessToken (refreshId);
---> statement-breakpoint
-CREATE INDEX IF NOT EXISTS oauthAccessToken_authorizationCodeId_idx
-        ON oauthAccessToken (authorizationCodeId);
---> statement-breakpoint
-CREATE TABLE IF NOT EXISTS oauthConsent (
-        id                      TEXT PRIMARY KEY NOT NULL,
-        clientId                TEXT NOT NULL REFERENCES oauthClient(clientId) ON DELETE CASCADE,
-        userId                  TEXT REFERENCES user(id) ON DELETE CASCADE,
-        referenceId             TEXT,
-        resources               TEXT,
-        requestedUserInfoClaims TEXT,
-        scopes                  TEXT NOT NULL,
-        createdAt               TEXT NOT NULL,
-        updatedAt               TEXT NOT NULL
-      );
---> statement-breakpoint
-CREATE INDEX IF NOT EXISTS oauthConsent_clientId_idx ON oauthConsent (clientId);
---> statement-breakpoint
-CREATE INDEX IF NOT EXISTS oauthConsent_userId_idx ON oauthConsent (userId);
---> statement-breakpoint
-CREATE TABLE IF NOT EXISTS oauthClientAssertion (
-        id        TEXT PRIMARY KEY NOT NULL,
-        expiresAt TEXT NOT NULL
-      );
---> statement-breakpoint
-CREATE TABLE IF NOT EXISTS media_assets (
-        id          TEXT PRIMARY KEY,
-        created_at  INTEGER NOT NULL,
-        owner_id    TEXT,
-        alt         TEXT,
-        caption     TEXT,
-        variants    TEXT NOT NULL,
-        metadata    TEXT
-      );
---> statement-breakpoint
-CREATE INDEX IF NOT EXISTS media_assets_by_owner_created
-        ON media_assets (owner_id, created_at DESC);
---> statement-breakpoint
-CREATE TABLE IF NOT EXISTS pending_media_uploads (
-        id          TEXT PRIMARY KEY,
-        record      TEXT NOT NULL,
-        expires_at  INTEGER NOT NULL
-      );
---> statement-breakpoint
-CREATE INDEX IF NOT EXISTS pending_media_uploads_expires_at
-        ON pending_media_uploads (expires_at);
---> statement-breakpoint
-CREATE TABLE IF NOT EXISTS _mantle_boot_state (
-        id          TEXT PRIMARY KEY NOT NULL,
-        fingerprint TEXT NOT NULL
-      );
---> statement-breakpoint
-CREATE TABLE IF NOT EXISTS _mantle_schema_tables (
-        name       TEXT PRIMARY KEY NOT NULL,
-        projection TEXT NOT NULL
-      );
---> statement-breakpoint
-CREATE TABLE IF NOT EXISTS _mantle_storage_state (
-        id          INTEGER PRIMARY KEY CHECK (id = 1),
-        fingerprint TEXT NOT NULL
-      );
---> statement-breakpoint
-CREATE TABLE IF NOT EXISTS "articles" (
-        "_mantle_id" TEXT PRIMARY KEY,
-        "_mantle_status" TEXT NOT NULL,
-        "_mantle_version" INTEGER NOT NULL DEFAULT 1,
-        "_mantle_author_id" TEXT,
-        "_mantle_created_at" INTEGER NOT NULL,
-        "_mantle_updated_at" INTEGER NOT NULL
-      );
---> statement-breakpoint
-ALTER TABLE "articles" ADD COLUMN "body" TEXT;
---> statement-breakpoint
-ALTER TABLE "articles" ADD COLUMN "summary" TEXT;
---> statement-breakpoint
-ALTER TABLE "articles" ADD COLUMN "title" TEXT;
---> statement-breakpoint
-CREATE INDEX IF NOT EXISTS "m_61727469636c6573_updated" ON "articles"("_mantle_updated_at" DESC, "_mantle_id" DESC);
---> statement-breakpoint
-CREATE INDEX IF NOT EXISTS "m_61727469636c6573_status_updated" ON "articles"("_mantle_status", "_mantle_updated_at" DESC, "_mantle_id" DESC);
---> statement-breakpoint
-CREATE INDEX IF NOT EXISTS "m_61727469636c6573_created" ON "articles"("_mantle_created_at");
---> statement-breakpoint
-INSERT INTO _mantle_schema_tables(name,projection) VALUES ('articles','{"columns":[["body","TEXT","string",false],["summary","TEXT","string",false],["title","TEXT","string",false]],"indexes":[]}');
---> statement-breakpoint
-INSERT INTO _mantle_storage_state(id,fingerprint) VALUES (1,'e3cdedf91dbe27db4b9af7ff7e3512e81ae0b0bd69e5a90bd1c9e0526d86ba6b');

package/docs/examples/host-chatgpt-sites/drizzle/0002_article_cover.sql

@@ -1,5 +0,0 @@
-ALTER TABLE "articles" ADD COLUMN "coverAssetId" TEXT;
---> statement-breakpoint
-UPDATE _mantle_schema_tables SET projection='{"columns":[["body","TEXT","string",false],["coverAssetId","TEXT","string",false],["summary","TEXT","string",false],["title","TEXT","string",false]],"indexes":[]}' WHERE name='articles';
---> statement-breakpoint
-UPDATE _mantle_storage_state SET fingerprint='9ef85f9933e22328140e924045820af6be2a6985ed8ecc19b63a4f2a37826618' WHERE id=1 AND fingerprint='e3cdedf91dbe27db4b9af7ff7e3512e81ae0b0bd69e5a90bd1c9e0526d86ba6b';

package/docs/examples/host-chatgpt-sites/drizzle/0003_store_instance_id.sql

@@ -1 +0,0 @@
-ALTER TABLE _mantle_boot_state ADD COLUMN store_instance_id TEXT;

package/docs/examples/host-chatgpt-sites/drizzle/0004_mantle.sql

@@ -1,10 +0,0 @@
-CREATE TABLE IF NOT EXISTS _mantle_managed_runtime_state (
-  id INTEGER PRIMARY KEY CHECK (id = 1),
-  canonical_version TEXT NOT NULL
-);
---> statement-breakpoint
-INSERT INTO _mantle_schema_tables(name,projection) VALUES ('articles','{"columns":[["body","TEXT","string",false],["coverAssetId","TEXT","string",false],["summary","TEXT","string",false],["title","TEXT","string",false]],"indexes":[]}') ON CONFLICT(name) DO UPDATE SET projection=excluded.projection;
---> statement-breakpoint
-INSERT INTO _mantle_managed_runtime_state(id,canonical_version) VALUES (1,'0006-managed-runtime-version') ON CONFLICT(id) DO UPDATE SET canonical_version=excluded.canonical_version;
---> statement-breakpoint
-INSERT INTO _mantle_storage_state(id,fingerprint) VALUES (1,(SELECT CASE WHEN fingerprint='9ef85f9933e22328140e924045820af6be2a6985ed8ecc19b63a4f2a37826618' THEN '9ef85f9933e22328140e924045820af6be2a6985ed8ecc19b63a4f2a37826618' ELSE NULL END FROM _mantle_storage_state WHERE id=1)) ON CONFLICT(id) DO UPDATE SET fingerprint=excluded.fingerprint;

package/docs/examples/host-chatgpt-sites/drizzle/0005_mantle.sql

@@ -1,24 +0,0 @@
-CREATE TABLE IF NOT EXISTS _mantle_schedule_runs (
-      run_id TEXT NOT NULL,
-      attempt INTEGER NOT NULL,
-      schedule_id TEXT NOT NULL,
-      scheduled_at INTEGER NOT NULL,
-      started_at INTEGER NOT NULL,
-      finished_at INTEGER,
-      status TEXT NOT NULL,
-      error_summary TEXT,
-      counts TEXT,
-      PRIMARY KEY (run_id, attempt)
-    );
---> statement-breakpoint
-CREATE INDEX IF NOT EXISTS _mantle_schedule_runs_recent
-      ON _mantle_schedule_runs (started_at DESC);
---> statement-breakpoint
-CREATE INDEX IF NOT EXISTS _mantle_schedule_runs_schedule_recent
-      ON _mantle_schedule_runs (schedule_id, started_at DESC);
---> statement-breakpoint
-INSERT INTO _mantle_schema_tables(name,projection) VALUES ('articles','{"columns":[["body","TEXT","string",false],["coverAssetId","TEXT","string",false],["summary","TEXT","string",false],["title","TEXT","string",false]],"indexes":[]}') ON CONFLICT(name) DO UPDATE SET projection=excluded.projection;
---> statement-breakpoint
-INSERT INTO _mantle_managed_runtime_state(id,canonical_version) VALUES (1,(SELECT CASE WHEN canonical_version='0006-managed-runtime-version' THEN '0007-schedule-run-observations' ELSE NULL END FROM _mantle_managed_runtime_state WHERE id=1)) ON CONFLICT(id) DO UPDATE SET canonical_version=excluded.canonical_version;
---> statement-breakpoint
-INSERT INTO _mantle_storage_state(id,fingerprint) VALUES (1,(SELECT CASE WHEN fingerprint='9ef85f9933e22328140e924045820af6be2a6985ed8ecc19b63a4f2a37826618' THEN '9ef85f9933e22328140e924045820af6be2a6985ed8ecc19b63a4f2a37826618' ELSE NULL END FROM _mantle_storage_state WHERE id=1)) ON CONFLICT(id) DO UPDATE SET fingerprint=excluded.fingerprint;

package/docs/examples/host-chatgpt-sites/drizzle/meta/_journal.json

@@ -1 +0,0 @@
-{"version":"7","dialect":"sqlite","entries":[{"idx":0,"version":"6","when":1790000000000,"tag":"0000_sites_users","breakpoints":true},{"idx":1,"version":"6","when":1790000000001,"tag":"0001_mantle","breakpoints":true},{"idx":2,"version":"6","when":1790000000002,"tag":"0002_article_cover","breakpoints":true},{"idx":3,"version":"6","when":1790000000003,"tag":"0003_store_instance_id","breakpoints":true},{"idx":4,"version":"6","when":1790000000004,"tag":"0004_mantle","breakpoints":true},{"idx":5,"version":"6","when":1790300000000,"tag":"0005_mantle","breakpoints":true}]}

package/docs/examples/host-chatgpt-sites/drizzle/meta/mantle-state.json

@@ -1,60 +0,0 @@
-{
-  "fingerprint": "9ef85f9933e22328140e924045820af6be2a6985ed8ecc19b63a4f2a37826618",
-  "schemas": [
-    {
-      "apiVersion": "cms.mantle.aotter.net/v1",
-      "kind": "Schema",
-      "metadata": {
-        "name": "articles"
-      },
-      "spec": {
-        "title": "文章",
-        "schema": {
-          "type": "object",
-          "required": [
-            "title"
-          ],
-          "properties": {
-            "title": {
-              "type": "string",
-              "title": "標題",
-              "maxLength": 160
-            },
-            "summary": {
-              "type": "string",
-              "title": "摘要",
-              "maxLength": 1000
-            },
-            "body": {
-              "type": "string",
-              "title": "內容",
-              "x-mcp-hint": "markdown"
-            },
-            "coverAssetId": {
-              "type": "string",
-              "title": "封面圖片",
-              "x-mantle-ref": "media_assets",
-              "x-mcp-hint": "media-image"
-            }
-          }
-        },
-        "lifecycle": "publishing",
-        "uniqueIndexes": [],
-        "indexes": [],
-        "searchableFields": [],
-        "localized": false
-      }
-    }
-  ],
-  "appliedMigrationIds": [
-    "0001-init",
-    "0002-media-assets",
-    "0003-pending-media-uploads",
-    "0004-native-schema-storage",
-    "0005-store-instance-id",
-    "0006-managed-runtime-version",
-    "0007-schedule-run-observations"
-  ],
-  "lastIndex": 5,
-  "canonicalVersion": "0007-schedule-run-observations"
-}

package/docs/examples/host-chatgpt-sites/manifests/site.yaml

@@ -1,27 +0,0 @@
-apiVersion: cms.mantle.aotter.net/v1
-kind: Schema
-metadata:
-  name: articles
-spec:
-  title: 文章
-  schema:
-    type: object
-    required: [title]
-    properties:
-      title: { type: string, title: 標題, maxLength: 160 }
-      summary: { type: string, title: 摘要, maxLength: 1000 }
-      body: { type: string, title: 內容, x-mcp-hint: markdown }
-      coverAssetId: { type: string, title: 封面圖片, x-mantle-ref: media_assets, x-mcp-hint: media-image }
-  lifecycle: publishing
----
-apiVersion: cms.mantle.aotter.net/v1
-kind: View
-metadata:
-  name: published-articles
-spec:
-  surface: public
-  from: articles
-  fields: [id, title, summary]
-  filter:
-    eq: { field: status, value: published }
-  limit: 20

package/docs/examples/host-chatgpt-sites/package.json

@@ -1 +0,0 @@
-{"name":"mantle-sites-reference","version":"0.0.1","private":true,"type":"module","scripts":{"build":"node scripts/build.mjs","dev":"wrangler dev","generate":"mantle generate","check":"tsc --noEmit","test":"node --experimental-strip-types scripts/check.mjs","migrate:generate":"node scripts/migration.mjs","migrate:check":"node scripts/migration.mjs --check"},"dependencies":{"@aotter/mantle":"latest","@aotter/mantle-admin":"latest","@aotter/mantle-admin-ui":"latest","@aotter/mantle-cloudflare":"latest","@aotter/mantle-web":"latest","hono":"^4.9.0","micromark":"4.0.2","zod":"^4.0.0"},"devDependencies":{"@cloudflare/workers-types":"*","esbuild":"^0.28.0","typescript":"^5.9.0","wrangler":"^4.0.0"}}

package/docs/examples/host-chatgpt-sites/public/site.css

@@ -1 +0,0 @@
-:root{font-family:Inter,"Noto Sans TC",ui-sans-serif,system-ui,sans-serif;color:#172320;background:#f7f8f4;font-synthesis:none}*{box-sizing:border-box}body{margin:0}a{color:inherit;text-decoration:none}a:hover{text-decoration:underline}.topbar{height:78px;max-width:1440px;margin:auto;padding:0 clamp(24px,5vw,80px);display:flex;align-items:center;justify-content:space-between;border-bottom:1px solid #d9dfd8}.brand{display:flex;align-items:center;gap:12px;font-size:18px;font-weight:760;letter-spacing:-.04em}.brand em{color:#95aa8c;font-style:normal}.mark{width:37px;height:37px;border-radius:11px;background:#183c30;color:#d9eadb;display:grid;place-items:center;font-size:19px;font-family:Georgia,serif}.topbar nav{display:flex;gap:28px;font-size:14px;color:#43564e}.hero{max-width:1440px;margin:auto;padding:100px clamp(24px,8vw,128px) 116px}.hero.small{padding-bottom:75px}.eyebrow,.feature-index{font-size:11px;letter-spacing:.19em;font-weight:750;color:#68806f}.hero h1,.article-page h1{font-family:Georgia,"Noto Serif TC",serif;font-weight:500;letter-spacing:-.055em;line-height:1.09;margin:26px 0 28px;font-size:clamp(48px,6.1vw,94px)}.dot{color:#a2b888}.hero-copy{max-width:620px;color:#52665a;font-size:18px;line-height:1.8}.actions{display:flex;align-items:center;gap:30px;margin-top:38px}.button{display:inline-flex;justify-content:space-between;gap:44px;min-width:184px;padding:17px 19px;border-radius:7px;color:#fff;background:#214f3c;font-size:14px;font-weight:650}.button:hover{background:#173c2d;text-decoration:none}.text-link{font-size:14px;color:#315640}.feature-grid{max-width:1440px;margin:auto;padding:0 clamp(24px,8vw,128px) 110px;display:grid;grid-template-columns:repeat(3,1fr);gap:18px}.feature-grid>div{border-top:1px solid #bfcac0;padding-top:24px}.feature-grid h2{font-family:Georgia,"Noto Serif TC",serif;font-size:29px;font-weight:500;margin:29px 0 10px}.feature-grid p{font-size:14px;line-height:1.75;color:#597064;max-width:270px}.content-wrap{max-width:1184px;margin:0 auto;padding:0 24px 100px}.article-row{padding:25px 0;border-top:1px solid #cbd5ca;display:grid;grid-template-columns:160px 1fr 36px;gap:24px;align-items:start}.article-row:last-child{border-bottom:1px solid #cbd5ca}.article-number{font-size:12px;color:#708477;margin-top:11px}.article-row h2{font-family:Georgia,"Noto Serif TC",serif;font-size:clamp(24px,3vw,35px);font-weight:500;letter-spacing:-.035em;margin:0 0 8px}.article-row p{font-size:14px;color:#617468;line-height:1.65;margin:0}.article-row>span{color:#739279;font-size:25px}.empty{min-height:220px;padding:52px 0}.empty h2{font-size:27px;font-family:Georgia,"Noto Serif TC",serif;font-weight:500}.empty p{color:#66796c}.pagination{margin:26px 0}.article-page{max-width:900px;padding:75px 30px 140px;margin:auto}.back{font-size:13px;color:#5c7768}.article-page article{margin-top:75px}.article-page h1{font-size:clamp(44px,5vw,75px)}.lede{font-size:21px;line-height:1.75;color:#52685a}.prose{border-top:1px solid #cbd5ca;margin-top:45px;padding-top:28px;line-height:1.95;font-size:17px;color:#33473c}.prose p{margin:0 0 1.2em}footer{border-top:1px solid #d5ddd3;max-width:1440px;margin:auto;padding:28px clamp(24px,5vw,80px);display:flex;justify-content:space-between;font-size:12px;color:#788b7d}@media(max-width:700px){.topbar{height:68px}.topbar nav{gap:16px;font-size:12px}.hero{padding-top:74px;padding-bottom:70px}.hero-copy{font-size:16px}.feature-grid{grid-template-columns:1fr;gap:26px}.article-row{grid-template-columns:1fr 26px;gap:10px}.article-number{grid-column:1/-1;margin:0}.article-page{padding-top:55px}.article-page article{margin-top:50px}footer{gap:20px}}

package/docs/examples/host-chatgpt-sites/scripts/build.mjs

@@ -1,13 +0,0 @@
-import { build } from 'esbuild';
-import { cp, mkdir, rm } from 'node:fs/promises';
-import { execFileSync } from 'node:child_process';
-await rm('dist',{recursive:true,force:true});
-execFileSync('node',['node_modules/@aotter/mantle/dist/cli/main.js','generate'],{stdio:'inherit'});
-// Reject older published SDKs that cannot advertise the mounted MCP endpoints.
-execFileSync('node',['node_modules/typescript/bin/tsc','--noEmit'],{stdio:'inherit'});
-await mkdir('dist/server',{recursive:true});
-await build({entryPoints:['src/index.ts'],outfile:'dist/server/index.js',bundle:true,format:'esm',platform:'browser',conditions:['workerd'],target:'es2022',external:['cloudflare:*','node:*'],minify:true});
-await cp('public','dist/client',{recursive:true});
-await mkdir('dist/.openai',{recursive:true});
-await cp('.openai/hosting.json','dist/.openai/hosting.json');
-await cp('drizzle','dist/.openai/drizzle',{recursive:true});

package/docs/examples/host-chatgpt-sites/scripts/check.mjs

@@ -1,101 +0,0 @@
-import assert from 'node:assert/strict';
-// Only localhost: these headers simulate Sites' trusted dispatcher, never real SIWC.
-const base=process.env.MANTLE_TEST_ORIGIN??'http://localhost:4174';
-assert.ok(['localhost','127.0.0.1'].includes(new URL(base).hostname),'Smoke identity headers are local-only');
-const owner={'oai-authenticated-user-id':'local-owner','oai-authenticated-user-email':'owner@example.test'};
-const member={'oai-authenticated-user-id':`test-${Date.now()}`,'oai-authenticated-user-email':`test-${Date.now()}@example.test`};
-const call=(path,headers={},method='GET',body)=>fetch(base+path,{redirect:'manual',method,headers:{...headers,...(body?{'content-type':'application/json',origin:base}:{})},body:body?JSON.stringify(body):undefined});
-assert.equal((await call('/health')).status,200);
-const mcp=(method,params)=>fetch(base+'/api/mcp',{method:'POST',headers:{'content-type':'application/json','mcp-protocol-version':'2025-11-25'},body:JSON.stringify({jsonrpc:'2.0',id:1,method,...(params?{params}:{})})});
-const staffMcp=(headers,method,params)=>fetch(base+'/api/mcp/staff',{method:'POST',headers:{...headers,'content-type':'application/json','mcp-protocol-version':'2025-11-25'},body:JSON.stringify({jsonrpc:'2.0',id:2,method,...(params?{params}:{})})});
-let mcpResponse=await mcp('initialize');assert.equal(mcpResponse.status,200,await mcpResponse.clone().text());
-assert.equal((await mcpResponse.json()).result.serverInfo.name,'aotter.mantle.public');
-mcpResponse=await mcp('tools/list');assert.equal(mcpResponse.status,200,await mcpResponse.clone().text());
-const publicTools=(await mcpResponse.json()).result.tools.map(tool=>tool.name);
-assert.deepEqual(publicTools,['query_view_published_articles']);
-assert.equal((await call('/api/mcp')).status,405);
-assert.equal((await call('/admin/api/me')).status,401);
-assert.equal((await call('/admin/api/me',{'oai-authenticated-user-email':'owner@example.test'})).status,401);
-assert.equal((await call('/admin/api/me',member)).status,403);
-assert.equal((await (await call('/admin/api/me',owner)).json()).role,'owner');
-const siteResponse=await call('/admin/api/site',owner);
-assert.equal(siteResponse.status,200);
-const site=await siteResponse.json();
-assert.deepEqual(site.mcpEndpoints,{public:base+'/api/mcp',staff:base+'/api/mcp/staff'});
-assert.equal(site.mcpUrl,base+'/api/mcp/staff');
-assert.equal((await staffMcp({},'initialize')).status,401);
-assert.equal((await staffMcp(member,'initialize')).status,403);
-let staffResponse=await staffMcp(owner,'initialize');assert.equal(staffResponse.status,200,await staffResponse.clone().text());
-assert.equal((await staffResponse.json()).result.serverInfo.name,'aotter.mantle.staff');
-staffResponse=await staffMcp(owner,'tools/list');assert.equal(staffResponse.status,200,await staffResponse.clone().text());
-assert.ok((await staffResponse.json()).result.tools.some(tool=>tool.name==='create_draft_articles'));
-for(const path of ['/mcp','/mcp/staff'])assert.equal((await call(path,{},'POST',{jsonrpc:'2.0',id:1,method:'initialize'})).status,404);
-assert.equal((await call('/admin/sign-in')).headers.get('location'),'/signin-with-chatgpt?return_to=%2Fadmin');
-assert.equal((await call('/admin',owner)).status,200);
-assert.equal((await call('/admin/lab/r2',member,'POST',{})).status,403);
-assert.equal((await call('/admin/lab/r2',{},'POST',{})).status,401);
-const probe=await call('/admin/lab/r2',owner,'POST',{});assert.equal(probe.status,200);
-const probeId=(await probe.json()).id;
-assert.equal((await (await call('/admin/lab/r2/'+probeId,owner)).json()).matches,true);
-assert.equal((await (await call('/admin/lab/r2/'+probeId,owner,'DELETE',{})).json()).deleted,true);
-assert.equal((await call('/admin/lab/r2/'+probeId,owner)).status,404);
-const png=Buffer.from('iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAQAAAC1HAwCAAAAC0lEQVR42mP8/x8AAwMCAO+/lXcAAAAASUVORK5CYII=','base64');
-const short=await call('/admin/api/media/uploads',owner,'POST',{filename:'short.png',purpose:'content',variants:[{mimeType:'image/png',byteSize:1,role:'primary'}]});
-assert.equal(short.status,200);
-const shortUpload=(await short.json()).capabilities[0].uploadUrl;
-assert.equal((await fetch(shortUpload,{method:'PUT',headers:{...owner,origin:base,'content-type':'image/png'},body:png})).status,413);
-let media=await call('/admin/api/media/uploads',owner,'POST',{filename:'test.png',purpose:'content',variants:[{mimeType:'image/png',byteSize:png.length,role:'primary'}]});
-assert.equal(media.status,200,await media.clone().text());
-const upload=await media.json();
-const putUrl=upload.capabilities[0].uploadUrl;
-assert.equal((await fetch(putUrl,{method:'PUT',headers:{origin:base,'content-type':'image/png'},body:png})).status,401);
-assert.equal((await fetch(putUrl,{method:'PUT',headers:{...owner,origin:'https://evil.example','content-type':'image/png'},body:png})).status,403);
-media=await fetch(putUrl,{method:'PUT',headers:{...owner,origin:base,'content-type':'image/png'},body:png});
-assert.equal(media.status,204,await media.clone().text());
-const mediaUrl=`/media/content/${upload.uploadGroupId}/primary.png`;
-assert.equal((await call(mediaUrl)).status,404);
-media=await call(`/admin/api/media/uploads/${upload.uploadGroupId}/commit`,owner,'POST',{});
-assert.equal(media.status,200,await media.clone().text());
-assert.deepEqual(Buffer.from(await (await call(mediaUrl)).arrayBuffer()),png);
-assert.equal((await call('/admin/api/media',owner)).status,200);
-let r=await call('/admin/api/entries',owner,'POST',{collection:'articles',data:{title:'Smoke test',summary:'D1 persistence',body:'## Published body from Mantle\n\n[unsafe](javascript:alert(1))',coverAssetId:upload.uploadGroupId}});
-assert.equal(r.status,200,await r.clone().text());
-const {entry}=await r.json();
-const path=`/admin/api/entries/${entry.id}?collection=articles`;
-assert.equal((await call(`/articles/${entry.id}`)).status,404);
-assert.equal((await call(`/articles/${entry.id}.md`)).status,404);
-r=await call(path,owner);assert.equal((await r.json()).entry.data.title,'Smoke test');
-const current=(await (await call(path,owner)).json()).entry;
-const writes=await Promise.all(['A','B'].map(title=>call(path,owner,'PATCH',{expectedVersion:current.version,data:{title}})));
-assert.deepEqual(writes.map(x=>x.status).sort(),[200,409]);
-r=await call(`/admin/api/entries/${entry.id}/publish?collection=articles`,owner,'POST',{});assert.equal(r.status,200,await r.clone().text());
-const publicPage=await (await call(`/articles/${entry.id}`)).text();
-assert.match(publicPage,/Published body from Mantle/);
-assert.match(publicPage,/<h2>Published body from Mantle<\/h2>/);
-assert.match(publicPage,new RegExp(mediaUrl));
-assert.doesNotMatch(publicPage,/href="javascript:/);
-assert.match(publicPage,/<meta property="og:image"/);
-assert.match(publicPage,/<link rel="canonical"/);
-assert.match(publicPage,/<link rel="alternate" type="text\/markdown"/);
-assert.doesNotMatch(publicPage,/<a\b[^>]*href="[^"]+\.md(?:[?#][^"]*)?"/);
-assert.match(publicPage,/application\/ld\+json/);
-assert.match(await (await call(`/articles/${entry.id}.md`)).text(),/Published body from Mantle/);
-assert.match(await (await call('/articles')).text(),new RegExp(entry.id));
-assert.match(await (await call('/llms.txt')).text(),new RegExp(entry.id));
-assert.match(await (await call('/sitemap.xml')).text(),new RegExp(entry.id));
-mcpResponse=await mcp('tools/call',{name:'query_view_published_articles',arguments:{}});assert.equal(mcpResponse.status,200,await mcpResponse.clone().text());
-assert.match(JSON.stringify(await mcpResponse.json()),new RegExp(entry.id));
-r=await fetch(base+'/admin/api/entries',{method:'POST',headers:{...owner,origin:'https://evil.example','content-type':'application/json'},body:'{}'});assert.equal(r.status,403);
-r=await call(`/admin/api/staff/${encodeURIComponent('chatgpt:'+member['oai-authenticated-user-id'])}/role`,owner,'PATCH',{role:'editor'});assert.equal(r.status,200);
-assert.equal((await call('/admin/api/me',member)).status,200);
-r=await call(`/admin/api/staff/${encodeURIComponent('chatgpt:'+member['oai-authenticated-user-id'])}/role`,owner,'PATCH',{role:null});assert.equal(r.status,200);
-assert.equal((await call('/admin/api/me',member)).status,403);
-r=await call('/api/auth/sign-out',owner,'POST',{});assert.equal(r.status,200);
-const cookie=r.headers.get('set-cookie').split(';')[0];
-r=await call('/admin/sign-in',{...owner,cookie});assert.equal(r.headers.get('location'),'/signout-with-chatgpt?return_to=%2F');
-assert.equal((await call(`/admin/api/entries/${entry.id}/unpublish?collection=articles`,owner,'POST',{})).status,200);
-assert.equal((await call(`/articles/${entry.id}`)).status,404);
-assert.equal((await call(path,owner,'DELETE',{})).status,200);
-assert.equal((await call(`/admin/api/media/${upload.uploadGroupId}`,owner,'DELETE',{})).status,200);
-assert.equal((await call(mediaUrl)).status,404);
-console.log('PASS: D1 boot, R2/media upload and cleanup, identity and roles, CRUD/version conflict, CSRF, sign-out, public and Sites-session staff MCP, published article HTML/Markdown/SEO/llms/sitemap.');

package/docs/examples/host-chatgpt-sites/scripts/migration.mjs

@@ -1,43 +0,0 @@
-// Append a reviewed D1 migration only after the previous one is applied locally.
-import { buildSqliteMigrationArtifact, renderSqliteManagedMigration } from '@aotter/mantle/runtime';
-import { parseManifestSources, ValidateManifestsUseCase } from '@aotter/mantle/spec';
-import { execFileSync } from 'node:child_process';
-import { readFile, readdir, writeFile } from 'node:fs/promises';
-const statePath='drizzle/meta/mantle-state.json';
-const state=JSON.parse(await readFile(statePath,'utf8'));
-const files=(await readdir('manifests')).filter(name=>/\.ya?ml$/i.test(name)).sort();
-const parsed=parseManifestSources({sources:await Promise.all(files.map(async name=>({sourceId:name,text:await readFile(`manifests/${name}`,'utf8')})))});
-if(!parsed.ok)throw Error(`Invalid manifest: ${parsed.diagnostics.map(d=>d.message).join('; ')}`);
-const validated=ValidateManifestsUseCase.run({parsed:parsed.value});
-if(validated.errorCount)throw Error(`Invalid manifest: ${validated.diagnostics.filter(d=>d.severity==='error').map(d=>d.message).join('; ')}`);
-const target=parsed.value.entries.map(entry=>entry.manifest).filter(manifest=>manifest.kind==='Schema');
-const artifact=await buildSqliteMigrationArtifact(state.schemas,target,{appliedMigrationIds:state.appliedMigrationIds});
-if(artifact.sourceFingerprint!==state.fingerprint)throw Error('The saved migration source fingerprint is invalid. Restore the applied state before generating.');
-if(artifact.destructive)throw Error('Destructive Schema change needs a reviewed migration; no D1 file was written.');
-const unchanged=artifact.sourceFingerprint===artifact.targetFingerprint&&artifact.migrations.length===0;
-const fingerprint=JSON.parse(await readFile('src/storage-fingerprint.json','utf8'));
-if(fingerprint!==state.fingerprint)throw Error('Generated fingerprint and migration source disagree. Restore the reviewed migration state.');
-if(process.argv.includes('--check')){
-  if(!unchanged)throw Error('Pending Schema or runtime migration. Run node scripts/migration.mjs and review the new D1 file.');
-  process.exit(0);
-}
-const output=execFileSync('node',['node_modules/wrangler/bin/wrangler.js','d1','execute','mantle-sites-reference-local','--local','--command','SELECT fingerprint FROM _mantle_storage_state WHERE id = 1','--json'],{encoding:'utf8'});
-const active=JSON.parse(output)[0]?.results?.[0]?.fingerprint;
-if(active!==state.fingerprint)throw Error(`Local D1 fingerprint ${active??'(missing)'} does not match the last migration ${state.fingerprint}. Apply pending D1 migrations first.`);
-const versionOutput=execFileSync('node',['node_modules/wrangler/bin/wrangler.js','d1','execute','mantle-sites-reference-local','--local','--command',"SELECT name FROM sqlite_schema WHERE type='table' AND name='_mantle_managed_runtime_state'",'--json'],{encoding:'utf8'});
-const versionTable=JSON.parse(versionOutput)[0]?.results?.[0]?.name;
-const version=versionTable?(JSON.parse(execFileSync('node',['node_modules/wrangler/bin/wrangler.js','d1','execute','mantle-sites-reference-local','--local','--command','SELECT canonical_version FROM _mantle_managed_runtime_state WHERE id = 1','--json'],{encoding:'utf8'}))[0]?.results?.[0]?.canonical_version??null):null;
-if(version!==null&&version!==state.canonicalVersion)throw Error(`Local D1 runtime version ${version} does not match migration source ${state.canonicalVersion}.`);
-if(version===null&&state.canonicalVersion!=='0005-store-instance-id')throw Error('Local D1 is missing the managed runtime version marker. Apply pending migrations first.');
-if(unchanged){console.log('D1 migrations are current.');process.exit(0);}
-const sql=renderSqliteManagedMigration(artifact,{canonicalVersion:state.canonicalVersion});
-const index=state.lastIndex+1;
-const path=`drizzle/${String(index).padStart(4,'0')}_mantle.sql`;
-const journalPath='drizzle/meta/_journal.json';
-const journal=JSON.parse(await readFile(journalPath,'utf8'));
-if(journal.entries.at(-1)?.idx!==state.lastIndex)throw Error('Drizzle journal does not match the saved migration state.');
-await writeFile(path,sql,{flag:'wx'});
-await writeFile(journalPath,JSON.stringify({...journal,entries:[...journal.entries,{idx:index,version:'6',when:Date.now(),tag:`${String(index).padStart(4,'0')}_mantle`,breakpoints:true}]})+'\n');
-await writeFile(statePath,JSON.stringify({fingerprint:artifact.targetFingerprint,canonicalVersion:artifact.targetCanonicalVersion,schemas:target,appliedMigrationIds:[...new Set([...state.appliedMigrationIds,...artifact.migrations.map(m=>m.id)])],lastIndex:index},null,2)+'\n');
-await writeFile('src/storage-fingerprint.json',JSON.stringify(artifact.targetFingerprint)+'\n');
-console.log(`Review ${path}, then apply it with wrangler d1 migrations apply mantle-sites-reference-local --local.`);