@aotter/mantle 0.1.5-alpha.1 → 0.2.0-alpha.1

package/docs/examples/host-chatgpt-sites/src/chatgpt-auth.ts

@@ -1,66 +0,0 @@
-import type { AdminAuth, AdminStaffUser, StaffRole } from '@aotter/mantle/admin';
-
-export interface Env { DB: D1Database; MEDIA_BUCKET: R2Bucket; ASSETS: Fetcher; PUBLIC_ORIGIN: string; OWNER_EMAIL: string }
-type UserRow = { id: string; email: string; name: string; role: StaffRole | null; created_at: string; signed_in: number };
-const project = (row: UserRow): AdminStaffUser => ({ id:row.id,email:row.email,name:row.name,role:row.role,githubLogin:null,emailVerified:!!row.signed_in,createdAt:new Date(row.created_at) });
-
-// This adapter must only receive requests through Sites' identity-stripping dispatcher.
-// Never expose the Worker independently with caller-controlled oai-* headers.
-export function readIdentity(request: Request) {
-  const sub=request.headers.get('oai-authenticated-user-id');
-  const email=request.headers.get('oai-authenticated-user-email')?.trim().toLowerCase();
-  if(!sub || !email || sub.length>512 || email.length>320) return null;
-  let name=email;
-  if(request.headers.get('oai-authenticated-user-full-name-encoding')==='percent-encoded-utf-8') {
-    try { name=decodeURIComponent(request.headers.get('oai-authenticated-user-full-name')||'')||email; } catch {}
-  }
-  return {id:`chatgpt:${sub}`,email,name};
-}
-
-export function createChatGPTAuth(env: Env): AdminAuth {
-  const db=env.DB;
-  const roleFor=async(id:string)=>(await db.prepare('SELECT role FROM sites_users WHERE id = ?').bind(id).first<{role:StaffRole|null}>())?.role??null;
-  const auth: AdminAuth = {
-    basePath:'/api/auth', methods:[],
-    async getSession(request) {
-      const who=readIdentity(request); if(!who)return null;
-      let row=await db.prepare('SELECT * FROM sites_users WHERE id=?').bind(who.id).first<UserRow>();
-      if(!row){
-        // Claim an invitation before inserting; a stable identity keeps its existing role if its email later changes.
-        await db.prepare('UPDATE sites_users SET id=?,name=?,signed_in=1 WHERE email=? AND signed_in=0').bind(who.id,who.name,who.email).run();
-        await db.prepare('INSERT OR IGNORE INTO sites_users (id,email,name,role,signed_in) VALUES (?,?,?,?,1)')
-          .bind(who.id,who.email,who.name,who.email===env.OWNER_EMAIL?.trim().toLowerCase()?'owner':null).run();
-        row=await db.prepare('SELECT * FROM sites_users WHERE id=?').bind(who.id).first<UserRow>();
-      }
-      if(!row)return null;
-      return {session:{id:`sites:${who.id}`},user:{id:row.id,email:row.email,name:row.name,role:row.role,roleCurrent:true}};
-    },
-    getUserRole:roleFor,
-    async handler(request) {
-      const path=new URL(request.url).pathname;
-      if(path==='/api/auth/get-session' && request.method==='GET') return Response.json(await auth.getSession(request));
-      if(path==='/api/auth/sign-out' && request.method==='POST') {
-        if(request.headers.get('origin')!==env.PUBLIC_ORIGIN)return new Response('Forbidden',{status:403});
-        // The shipped Admin UI navigates here after its POST; the next top-level request signs out at Sites.
-        return Response.json({success:true},{headers:{'set-cookie':'mantle-sites-signout=1; Path=/admin/sign-in; HttpOnly; SameSite=Strict; Max-Age=60'+(env.PUBLIC_ORIGIN.startsWith('https:')?'; Secure':'')}});
-      }
-      return Response.json({error:'unsupported_auth_route'},{status:404});
-    },
-    async listUsers(){const r=await db.prepare('SELECT * FROM sites_users WHERE role IS NOT NULL ORDER BY created_at,id').all<UserRow>();return r.results.map(project);},
-    async listMembers(args){
-      // ponytail: one bounded page for this integration lab; add cursor pagination before a large member rollout.
-      const r=await db.prepare('SELECT * FROM sites_users WHERE role IS NULL AND (email LIKE ? OR name LIKE ?) ORDER BY created_at,id LIMIT ?').bind(`%${args.search||''}%`,`%${args.search||''}%`,Math.min(args.limit,100)).all<UserRow>();
-      return {items:r.results.map(project),previousCursor:null,nextCursor:null};
-    },
-    async setUserRole(id,role){if(role!==null&&!['owner','editor','contributor'].includes(role))throw new Error('Invalid role');return !!(await db.prepare('UPDATE sites_users SET role=? WHERE id=?').bind(role,id).run()).meta.changes;},
-    async inviteUser(email,role){
-      const normalized=email.trim().toLowerCase();const id=`invite:${crypto.randomUUID()}`;
-      const r=await db.prepare('INSERT OR IGNORE INTO sites_users (id,email,name,role,signed_in) VALUES (?,?,?,?,0)').bind(id,normalized,normalized,role).run();
-      if(r.meta.changes)return {kind:'created',id};
-      const existing=await db.prepare('SELECT id FROM sites_users WHERE email=?').bind(normalized).first<{id:string}>();
-      if(!existing)throw new Error('Invitation could not be saved');return {kind:'exists',id:existing.id};
-    },
-    async revokeInvite(id){return !!(await db.prepare('DELETE FROM sites_users WHERE id=? AND signed_in=0').bind(id).run()).meta.changes;},
-  };
-  return auth;
-}

package/docs/examples/host-chatgpt-sites/src/index.ts

@@ -1,46 +0,0 @@
-import { Hono } from 'hono';
-import { bootMantleRuntime, SqliteMantleStorageAdapter } from '@aotter/mantle/runtime';
-import { D1DatabaseDriver, AssetsAssetServer } from '@aotter/mantle/cloudflare';
-import { mountMantleAdmin, type MantleAdminRuntime } from '@aotter/mantle/admin';
-import { plan } from '../.mantle/generated/mantle';
-import fingerprint from './storage-fingerprint.json';
-import { createChatGPTAuth, type Env } from './chatgpt-auth';
-import { mountR2Lab } from './r2-lab';
-import { mountWeb } from './web';
-import { SitesR2MediaStorage, mountMedia } from './media';
-import { mountMcp } from './mcp';
-
-function assemble(env:Env) {
-  const auth=createChatGPTAuth(env);
-  let runtime:Promise<MantleAdminRuntime>|undefined;
-  const get=()=>runtime??=(async()=>{
-    const r=await bootMantleRuntime({plan,storage:new SqliteMantleStorageAdapter(new D1DatabaseDriver(env.DB),{brand:'Mantle × Sites Reference',title:'Mantle × ChatGPT Sites Reference',origin:env.PUBLIC_ORIGIN,media:{purposes:[{name:'content',required:['image/jpeg,image/png,image/webp'],maxBytes:{'image/jpeg':5_000_000,'image/png':5_000_000,'image/webp':5_000_000}}]}},{managedStorageFingerprint:fingerprint}),ports:{mediaStorage:new SitesR2MediaStorage(env.MEDIA_BUCKET,env.PUBLIC_ORIGIN)}});
-    if(!r.siteConfig||!r.updateSiteSettings)throw new Error('Admin storage unavailable');
-    return Object.assign(r,{siteConfig:r.siteConfig,updateSiteSettings:r.updateSiteSettings});
-  })().catch(error=>{runtime=undefined;throw error;});
-  const app=new Hono<{Bindings:Env}>();
-  app.use('*',async(c,next)=>{await next();if(!c.res.headers.has('Cache-Control'))c.header('Cache-Control','private, no-store');c.header('X-Content-Type-Options','nosniff');});
-  mountWeb(app,get);
-  mountMcp(app,get,auth);
-  mountMedia(app,auth,env);
-  app.get('/health',async()=>{await get();return Response.json({ok:true,storage:'D1',auth:'ChatGPT Sites'});});
-  app.get('/admin/sign-in',async c=>{
-    if(c.req.header('cookie')?.split(';').some(v=>v.trim()==='mantle-sites-signout=1')) {
-      c.header('Set-Cookie','mantle-sites-signout=; Path=/admin/sign-in; HttpOnly; SameSite=Strict; Max-Age=0'+(env.PUBLIC_ORIGIN.startsWith('https:')?'; Secure':''));
-      return c.redirect('/signout-with-chatgpt?return_to=%2F');
-    }
-    return c.redirect(await auth.getSession(c.req.raw)?'/admin':'/signin-with-chatgpt?return_to=%2Fadmin');
-  });
-  app.use('/admin/*',async(c,next)=>{
-    if(!c.req.path.startsWith('/admin/api/')&&!c.req.path.startsWith('/admin/lab/r2')&&!await auth.getSession(c.req.raw))return c.redirect('/signin-with-chatgpt?return_to=%2Fadmin');
-    await next();
-  });
-  mountR2Lab(app,auth,env);
-  mountMantleAdmin(app,{plan,auth,get,assets:new AssetsAssetServer(env.ASSETS),mcpEndpoints:{public:'/api/mcp',staff:'/api/mcp/staff'},requestContext:c=>({env:c.env,waitUntil:p=>c.executionCtx.waitUntil(p)})});
-  app.get('/site.css',c=>env.ASSETS.fetch(c.req.raw));
-  app.get('/_mantle/*',c=>env.ASSETS.fetch(c.req.raw));
-  app.onError(error=>{console.error('Mantle request failed',error);return Response.json({error:'internal_error'},{status:500,headers:{'Cache-Control':'private, no-store'}});});
-  return app;
-}
-let app:ReturnType<typeof assemble>|undefined;
-export default {fetch(request:Request,env:Env,ctx:ExecutionContext){return (app??=assemble(env)).fetch(request,env,ctx);}};

package/docs/examples/host-chatgpt-sites/src/mcp.ts

@@ -1,49 +0,0 @@
-import type { Hono } from 'hono';
-import type { AdminAuth, MantleAdminRuntime, StaffRole } from '@aotter/mantle/admin';
-import { McpJsonRpcDispatcher, projectCallableCapabilities } from '@aotter/mantle/runtime';
-import { plan } from '../.mantle/generated/mantle';
-import type { Env } from './chatgpt-auth';
-
-const staffRoles=new Set<string>(['owner','editor','contributor']);
-
-/** Sites-session MCP surfaces. Remote clients still need a separate OAuth bearer flow. */
-export function mountMcp(app:Hono<{Bindings:Env}>, get:()=>Promise<MantleAdminRuntime>, auth:AdminAuth) {
-  const cache=new WeakMap<object,Map<'public'|'staff',McpJsonRpcDispatcher>>();
-  const dispatcher=async(surface:'public'|'staff',origin:string)=>{
-    const runtime=await get();
-    let dispatchers=cache.get(runtime);
-    if(!dispatchers)cache.set(runtime,dispatchers=new Map());
-    let value=dispatchers.get(surface);
-    if(!value) {
-      value=new McpJsonRpcDispatcher({
-        getEntry:runtime.getEntry,
-        createDraft:runtime.createDraft,
-        updateDraft:runtime.updateDraft,
-        requestPublish:runtime.requestPublish,
-        unpublish:runtime.unpublish,
-        archive:runtime.archive,
-        deleteEntry:runtime.deleteEntry,
-        executeView:{execute:request=>runtime.executeView({...request,view:request.view.metadata.name})},
-        invokeTrigger:{execute:request=>runtime.invokeTrigger(request)},
-      },[...runtime.schemas.values()],{
-        surface,
-        capabilities:projectCallableCapabilities(plan,{surface}),
-        serverInfo:{name:`aotter.mantle.${surface}`,title:`Mantle ${surface}`,websiteUrl:origin},
-      });
-      dispatchers.set(surface,value);
-    }
-    return value;
-  };
-  app.all('/api/mcp',async c=>(await dispatcher('public',c.env.PUBLIC_ORIGIN)).dispatch(c.req.raw,{user:null,staff:null,env:c.env,waitUntil:p=>c.executionCtx.waitUntil(p)}));
-  app.all('/api/mcp/staff',async c=>{
-    const session=await auth.getSession(c.req.raw);
-    if(!session)return Response.json({error:'unauthorized'},{status:401});
-    const role=session.user.roleCurrent?session.user.role:await auth.getUserRole(session.user.id);
-    if(!role||!staffRoles.has(role))return Response.json({error:'forbidden'},{status:403});
-    return (await dispatcher('staff',c.env.PUBLIC_ORIGIN)).dispatch(c.req.raw,{
-      user:{id:session.user.id},staff:{id:session.user.id,role:role as StaffRole},
-      auth:{credential:'session',credentialId:session.session.id,clientId:null,scopes:[]},
-      env:c.env,waitUntil:p=>c.executionCtx.waitUntil(p),
-    });
-  });
-}

package/docs/examples/host-chatgpt-sites/src/media.ts

@@ -1,109 +0,0 @@
-import type { Hono } from 'hono';
-import { DiagnosticError, makeDiagnostic } from '@aotter/mantle/spec';
-import { extensionForMime, type MediaStorage, type MediaAsset, type MediaVariant } from '@aotter/mantle/runtime';
-import type { AdminAuth } from '@aotter/mantle/admin';
-import type { Env } from './chatgpt-auth';
-
-const mimes = new Set(['image/jpeg', 'image/png', 'image/webp']);
-const groupPattern = /^[0-9a-f]{8}-[0-9a-f]{4}-4[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/;
-const filePattern = /^(primary|alternate|fallback)\.(jpg|png|webp)$/;
-
-type Pending = { expiresAt: number; variants: { mimeType: string; storageKey: string; expectedSize: number; maxBytes: number }[] };
-
-function failure(code: 'MEDIA_OBJECT_NOT_FOUND' | 'MEDIA_MIME_REJECTED' | 'MEDIA_VARIANT_SIZE_EXCEEDED') {
-  return new DiagnosticError(makeDiagnostic({code, phase:'runtime', severity:'error', path:'sites/R2MediaStorage'}));
-}
-
-/** Public media over the Sites R2 binding; no S3 credentials or public bucket URL. */
-export class SitesR2MediaStorage implements MediaStorage {
-  constructor(private readonly bucket:R2Bucket, private readonly origin:string) {}
-
-  async createUpload(args:Parameters<MediaStorage['createUpload']>[0]) {
-    const capabilities=args.variants.map(variant=>{
-      const storageKey=`${args.purpose}/${args.uploadGroupId}/${variant.role}.${extensionForMime(variant.mimeType)}`;
-      return {
-        mimeType:variant.mimeType, role:variant.role, method:'PUT' as const,
-        uploadUrl:`${this.origin}/admin/media-upload/${args.uploadGroupId}/${storageKey.split('/').at(-1)}`,
-        storageKey, publicUrl:`${this.origin}/media/${storageKey}`,
-        requiredHeaders:{'Content-Type':variant.mimeType},
-      };
-    });
-    return {uploadGroupId:args.uploadGroupId, capabilities, expiresAt:args.expiresAt};
-  }
-
-  async commitUpload(args:Parameters<MediaStorage['commitUpload']>[0]):Promise<MediaAsset> {
-    const checked=[] as {spec:(typeof args.variants)[number]; size:number}[];
-    for(const spec of args.variants) {
-      const head=await this.bucket.head(spec.storageKey);
-      if(!head)throw failure('MEDIA_OBJECT_NOT_FOUND');
-      if(head.httpMetadata?.contentType!==spec.mimeType)throw failure('MEDIA_MIME_REJECTED');
-      if(head.size>spec.maxBytes)throw failure('MEDIA_VARIANT_SIZE_EXCEEDED');
-      checked.push({spec,size:head.size});
-    }
-    const variants:MediaVariant[]=[];
-    for(const {spec,size} of checked) {
-      const object=await this.bucket.get(spec.storageKey);
-      if(!object)throw failure('MEDIA_OBJECT_NOT_FOUND');
-      await this.bucket.put(spec.storageKey,object.body,{
-        httpMetadata:{contentType:spec.mimeType},
-        customMetadata:{...object.customMetadata,committedAt:String(args.now),uploadGroupId:args.uploadGroupId,role:spec.role,filename:args.filename},
-      });
-      variants.push({mimeType:spec.mimeType,role:spec.role,storageKey:spec.storageKey,byteSize:size,publicUrl:await this.getPublicUrl({storageKey:spec.storageKey})});
-    }
-    return {id:args.uploadGroupId,variants,alt:args.alt,caption:args.caption,createdAt:args.now,metadata:{filename:args.filename}};
-  }
-
-  async getPublicUrl({storageKey}:Parameters<MediaStorage['getPublicUrl']>[0]) {return `${this.origin}/media/${storageKey}`;}
-  async deleteObject({storageKey}:Parameters<MediaStorage['deleteObject']>[0]) {await this.bucket.delete(storageKey);}
-}
-
-export function mountMedia(app:Hono<{Bindings:Env}>,auth:AdminAuth,env:Env) {
-  app.put('/admin/media-upload/:group/:file',async c=>{
-    const session=await auth.getSession(c.req.raw);
-    if(!session)return c.json({error:'unauthenticated'},401);
-    if(session.user.role!=='owner'&&session.user.role!=='editor')return c.json({error:'editor_required'},403);
-    if(c.req.header('origin')!==env.PUBLIC_ORIGIN)return c.json({error:'cross_origin'},403);
-    const group=c.req.param('group'),file=c.req.param('file');
-    if(!groupPattern.test(group)||!filePattern.test(file))return c.json({error:'invalid_upload'},400);
-    const row=await env.DB.prepare('SELECT record FROM pending_media_uploads WHERE id=?').bind(group).first<{record:string}>();
-    if(!row)return c.json({error:'upload_expired'},410);
-    const pending=JSON.parse(row.record) as Pending;
-    if(pending.expiresAt<=Date.now())return c.json({error:'upload_expired'},410);
-    const key=`content/${group}/${file}`;
-    const variant=pending.variants.find(v=>v.storageKey===key);
-    if(!variant||!mimes.has(variant.mimeType))return c.json({error:'invalid_upload'},400);
-    if(c.req.header('content-type')!==variant.mimeType)return c.json({error:'mime_rejected'},415);
-    const length=Number(c.req.header('content-length'));
-    if(Number.isFinite(length)&&length>variant.expectedSize)return c.json({error:'size_exceeded'},413);
-    if(!c.req.raw.body)return c.json({error:'empty_upload'},400);
-    // R2 put requires a fixed-length body. Bound memory to this validated 5 MB policy.
-    const reader=c.req.raw.body.getReader(),chunks:Uint8Array[]=[];
-    let bytes=0;
-    for(;;) {
-      const {done,value}=await reader.read();
-      if(done)break;
-      bytes+=value.byteLength;
-      if(bytes>variant.expectedSize){await reader.cancel();return c.json({error:'size_exceeded'},413);}
-      chunks.push(value);
-    }
-    if(bytes!==variant.expectedSize)return c.json({error:'size_mismatch'},400);
-    const body=new Uint8Array(bytes);
-    let offset=0;
-    for(const chunk of chunks){body.set(chunk,offset);offset+=chunk.byteLength;}
-    await env.MEDIA_BUCKET.put(key,body,{httpMetadata:{contentType:variant.mimeType}});
-    return c.body(null,204);
-  });
-
-  app.get('/media/:purpose/:group/:file',async c=>{
-    const {purpose,group,file}=c.req.param();
-    if(purpose!=='content'||!groupPattern.test(group)||!filePattern.test(file))return c.notFound();
-    const key=`${purpose}/${group}/${file}`;
-    const row=await env.DB.prepare('SELECT variants FROM media_assets WHERE id=?').bind(group).first<{variants:string}>();
-    if(!row)return c.notFound();
-    const variants=JSON.parse(row.variants) as MediaVariant[];
-    if(!variants.some(v=>v.storageKey===key))return c.notFound();
-    const object=await env.MEDIA_BUCKET.get(key);
-    if(!object||!mimes.has(object.httpMetadata?.contentType??''))return c.notFound();
-    return new Response(object.body,{headers:{'Content-Type':object.httpMetadata!.contentType!,'Content-Length':String(object.size),'Cache-Control':'public, max-age=3600','X-Content-Type-Options':'nosniff'}});
-  });
-}

package/docs/examples/host-chatgpt-sites/src/r2-lab.ts

@@ -1,38 +0,0 @@
-import type { Hono } from 'hono';
-import type { AdminAuth } from '@aotter/mantle/admin';
-import type { Env } from './chatgpt-auth';
-
-// Deliberately a binding probe, not an implementation of Mantle's public MediaStorage port.
-export function mountR2Lab(app:Hono<{Bindings:Env}>,auth:AdminAuth,env:Env) {
-  app.use('/admin/lab*',async(c,next)=>{
-    const session=await auth.getSession(c.req.raw);
-    if(!session)return c.json({error:'unauthenticated'},401);
-    if(session.user.role!=='owner')return c.json({error:'owner_required'},403);
-    if(c.req.method!=='GET'&&c.req.header('origin')!==env.PUBLIC_ORIGIN)return c.json({error:'cross_origin'},403);
-    await next();
-  });
-  app.get('/admin/lab',c=>c.html(`<!doctype html><html lang="zh-Hant"><meta charset="utf-8"><meta name="viewport" content="width=device-width"><title>R2 驗證 · Mantle Sites</title><style>body{font:18px system-ui;max-width:760px;margin:60px auto;padding:24px;background:#101820;color:#eef5ff}a{color:#69dbff}button{font:inherit;padding:12px 20px;cursor:pointer}pre{white-space:pre-wrap}</style><h1>R2 binding 驗證</h1><p>以目前的 owner 身分寫入一個測試物件，在另一個請求讀取並核對內容，最後清理該物件。這不是媒體庫上傳測試。</p><button id="run">執行 R2 測試</button><pre id="result" role="status"></pre><a href="/admin">回管理後台</a><script>
-const button=document.querySelector('#run'),result=document.querySelector('#result');
-button.onclick=async()=>{button.disabled=true;result.textContent='測試中…';let id;try{
-const send=async(method,path)=>{const r=await fetch(path,{method});if(!r.ok)throw Error('HTTP '+r.status);return r.json()};
-const created=await send('POST','/admin/lab/r2');id=created.id;
-const read=await send('GET','/admin/lab/r2/'+id);if(!read.matches)throw Error('內容不一致');
-const deleted=await send('DELETE','/admin/lab/r2/'+id);if(!deleted.deleted)throw Error('清理未完成');id=null;
-result.textContent='PASS：R2 PUT → HEAD / GET（另一個請求）→ 內容核對 → DELETE / HEAD 確認已清理。';
-}catch(e){result.textContent='FAIL：'+e.message+(id?'；待清理測試 ID：'+id:'')}finally{button.disabled=false}};
-</script></html>`));
-  app.post('/admin/lab/r2',async c=>{
-    const id=crypto.randomUUID();
-    await env.MEDIA_BUCKET.put(`_sites_binding_probe/${id}`,`mantle-sites-r2:${id}`,{httpMetadata:{contentType:'text/plain'},customMetadata:{purpose:'disposable-binding-probe'}});
-    return c.json({id});
-  });
-  app.on(['GET','DELETE'],'/admin/lab/r2/:id',async c=>{
-    const id=c.req.param('id');
-    if(!/^[0-9a-f]{8}-[0-9a-f]{4}-4[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/.test(id))return c.json({error:'invalid_id'},400);
-    const key=`_sites_binding_probe/${id}`,head=await env.MEDIA_BUCKET.head(key);
-    if(!head||head.customMetadata?.purpose!=='disposable-binding-probe')return c.json({error:'not_found'},404);
-    if(c.req.method==='DELETE'){await env.MEDIA_BUCKET.delete(key);return c.json({deleted:await env.MEDIA_BUCKET.head(key)===null});}
-    const object=await env.MEDIA_BUCKET.get(key);
-    return c.json({matches:!!object&&await object.text()===`mantle-sites-r2:${id}`,size:head.size});
-  });
-}

package/docs/examples/host-chatgpt-sites/src/storage-fingerprint.json

@@ -1 +0,0 @@
-"9ef85f9933e22328140e924045820af6be2a6985ed8ecc19b63a4f2a37826618"

package/docs/examples/host-chatgpt-sites/src/web.ts

@@ -1,35 +0,0 @@
-import type { Hono } from 'hono';
-import type { MantleAdminRuntime } from '@aotter/mantle/admin';
-import { createMantleWeb, createPublicPathResolver, composeEntrySeoMeta, composePageSeoMeta, renderSeoTagsHtml, serializeEntryAsMarkdown, TemplateRegistry } from '@aotter/mantle-web';
-import { micromark } from 'micromark';
-import type { Env } from './chatgpt-auth';
-
-const paths=createPublicPathResolver({collectionRoutes:{articles:{segment:'articles'}}});
-const escape=(value:unknown)=>String(value??'').replace(/[&<>"']/g,c=>({'&':'&amp;','<':'&lt;','>':'&gt;','"':'&quot;',"'":'&#39;'}[c]!));
-const articlePath=(id:string)=>`/articles/${encodeURIComponent(id)}`;
-const shell=(title:string,head:string,body:string)=>`<!doctype html><html lang="zh-Hant"><head><meta charset="utf-8"><meta name="viewport" content="width=device-width,initial-scale=1"><title>${escape(title)}</title>${head}<link rel="stylesheet" href="/site.css"><style>.article-cover{margin:36px 0}.article-cover img{display:block;width:100%;height:auto;border-radius:12px}.prose img{max-width:100%;height:auto}</style></head><body><header class="topbar"><a class="brand" href="/"><span class="mark">M</span><span>Mantle <em>×</em> Sites</span></a><nav aria-label="主要導覽"><a href="/articles">文章</a><a href="/admin">管理後台 ↗</a></nav></header>${body}<footer><span>Mantle on ChatGPT Sites</span><a href="/llms.txt">給 AI 的內容索引</a></footer></body></html>`;
-const templates=new TemplateRegistry();
-templates.registerListTemplate('articles',({entries,nextPageUrl})=>`<section class="article-list">${entries.length?entries.map(entry=>`<article class="article-row"><div class="article-number">${new Date(entry.updatedAt).toLocaleDateString('zh-TW',{timeZone:'UTC'})}</div><div><h2><a href="${articlePath(entry.id)}">${escape(entry.data.title)}</a></h2><p>${escape(entry.data.summary||'閱讀完整文章')}</p></div><span aria-hidden="true">↗</span></article>`).join(''):'<div class="empty"><h2>文章準備中</h2><p>在管理後台發布文章後，就會自動出現在這裡。</p></div>'}</section>${nextPageUrl?`<nav class="pagination" aria-label="分頁"><a rel="next" href="${escape(nextPageUrl)}">更多文章 →</a></nav>`:''}`);
-
-export function mountWeb(app:Hono<{Bindings:Env}>,get:()=>Promise<MantleAdminRuntime>) {
-  const load=async()=>{const runtime=await get();return {runtime,site:await runtime.siteConfig.load(),web:createMantleWeb(runtime,{templates,paths})};};
-  const list=async(cursor?:string)=>{const {site,web}=await load();const seo=composePageSeoMeta({site,locale:'zh-TW',publicPath:'/articles',title:`文章｜${site.title}`,description:site.description||'由 Mantle 管理與發布的文章。',markdown:false,pathForLocale:()=>'/articles'});const page=await web.renderListLive.execute({collection:'articles',locale:'zh-TW',contentLocale:null,site,seo,cursor,limit:20,pathForPage:next=>`/articles?cursor=${encodeURIComponent(next)}`});return shell(`文章｜${site.title}`,renderSeoTagsHtml(seo),`<main><section class="hero small"><p class="eyebrow">THE JOURNAL</p><h1>文章與觀察<span class="dot">.</span></h1><p class="hero-copy">內容由 Mantle 後台管理，從 D1 即時讀取。</p></section><div class="content-wrap">${page?.html.replace(/^<!doctype html>/i,'')??''}</div></main>`);};
-  app.get('/',async c=>{const {site}=await load();const seo=composePageSeoMeta({site,locale:'zh-TW',publicPath:'/',title:site.title,description:site.description||'Mantle 在 ChatGPT Sites 上的內容實驗。',markdown:false,pathForLocale:()=>'/'});return c.html(shell(site.title,renderSeoTagsHtml(seo),`<main><section class="hero"><p class="eyebrow">BUILT WITH MANTLE · RUNNING ON CHATGPT SITES</p><h1>內容、資料、<br>與下一種網站<span class="dot">.</span></h1><p class="hero-copy">這個站點連接 Mantle 管理後台與 Sites 的 D1 資料庫。文章發布後，會自動生成可閱讀、可索引的頁面。</p><div class="actions"><a class="button" href="/articles">探索文章 <span>↗</span></a><a class="text-link" href="/admin">進入管理後台 →</a></div></section><section class="feature-grid" aria-label="網站能力"><div><span class="feature-index">01 / CONTENT</span><h2>一處編輯</h2><p>文章在 Mantle 後台建立與發布，前台直接讀取同一份內容。</p></div><div><span class="feature-index">02 / DISCOVERY</span><h2>搜尋與 AI 可讀</h2><p>標準 metadata、結構化資料、Markdown 鏡像與內容索引。</p></div><div><span class="feature-index">03 / PLATFORM</span><h2>託管於 Sites</h2><p>D1 保存文章，R2 圖片可在後台上傳並綁定文章封面。</p></div></section></main>`));});
-  app.get('/articles',async c=>c.html(await list(c.req.query('cursor'))));
-  app.get('/articles/:id',async c=>{const {runtime,site}=await load();const rawId=c.req.param('id');const markdown=rawId.endsWith('.md');const entry=await runtime.entries.readById({collection:'articles',id:markdown?rawId.slice(0,-3):rawId});if(!entry||entry.status!=='published')return c.notFound();if(markdown){const text=serializeEntryAsMarkdown(entry);return text?c.text(text,200,{'Content-Type':'text/markdown; charset=utf-8'}):c.notFound();}
-    const coverId=typeof entry.data.coverAssetId==='string'?entry.data.coverAssetId:'';
-    const cover=coverId?await runtime.media?.resolve(coverId):null;
-    const primary=cover?.variants.find(v=>v.role==='primary');
-    const coverUrl=primary?.publicUrl;
-    const seoEntry=coverUrl?{...entry,data:{...entry.data,coverUrl}}:entry;
-    const path=articlePath(entry.id),seo=composeEntrySeoMeta({entry:seoEntry,site,publicPath:path,locale:'zh-TW',type:'article'});
-    const title=String(entry.data.title??site.title);
-    const image=coverUrl?`<figure class="article-cover"><img src="${escape(coverUrl)}" alt="${escape(cover?.alt||title)}" loading="eager"></figure>`:'';
-    const body=micromark(String(entry.data.body??''),{allowDangerousHtml:false,allowDangerousProtocol:false});
-    return c.html(shell(`${title}｜${site.title}`,renderSeoTagsHtml(seo),`<main class="article-page"><a class="back" href="/articles">← 返回文章</a><article><p class="eyebrow">ARTICLE · ${new Date(entry.updatedAt).toLocaleDateString('zh-TW',{timeZone:'UTC'})}</p><h1>${escape(title)}</h1>${entry.data.summary?`<p class="lede">${escape(entry.data.summary)}</p>`:''}${image}<div class="prose">${body}</div></article></main>`));});
-  // ponytail: one discovery page is enough for this lab; expose cursor pages when published articles exceed the SDK page limit.
-  app.get('/llms.txt',async c=>{const {site,web}=await load();const page=await web.composeLlmsTxt.execute({collections:['articles'],locale:null,site,pathFor:e=>articlePath(e.id)});const body=page?.body??`# ${site.title}\n\n文章索引：${site.origin}/articles\n`;return c.text(body,200,{'Content-Type':'text/plain; charset=utf-8'});});
-  // ponytail: first 1000 published URLs; add sitemap index parts only when the catalogue reaches that ceiling.
-  app.get('/sitemap.xml',async c=>{const {site,web}=await load();const page=await web.composeSitemap.execute({site,collections:['articles'],pathFor:e=>articlePath(e.id),additionalPaths:['/','/articles'],maxUrls:1000});return c.text(page.body,200,{'Content-Type':'application/xml; charset=utf-8'});});
-  app.get('/robots.txt',async c=>c.text(`User-agent: *\nAllow: /\nSitemap: ${c.env.PUBLIC_ORIGIN}/sitemap.xml\n`));
-}

package/docs/examples/host-chatgpt-sites/tsconfig.json

@@ -1 +0,0 @@
-{"compilerOptions":{"target":"ES2022","module":"ESNext","moduleResolution":"Bundler","strict":true,"skipLibCheck":true,"noEmit":true,"types":["@cloudflare/workers-types"],"lib":["ES2022","DOM"]},"include":["src/**/*.ts",".mantle/generated/**/*.ts"]}

package/docs/examples/host-chatgpt-sites/wrangler.jsonc

@@ -1,10 +0,0 @@
-{
-  "name": "mantle-sites-reference",
-  "main": "dist/server/index.js",
-  "compatibility_date": "2026-09-08",
-  "compatibility_flags": ["nodejs_compat", "global_fetch_strictly_public"],
-  "assets": {"directory":"dist/client","binding":"ASSETS","run_worker_first":true},
-  "d1_databases": [{"binding":"DB","database_name":"mantle-sites-reference-local","database_id":"local","migrations_dir":"drizzle"}],
-  "r2_buckets": [{"binding":"MEDIA_BUCKET","bucket_name":"mantle-sites-reference-local-media"}],
-  "vars": {"PUBLIC_ORIGIN":"http://localhost:4174","OWNER_EMAIL":"owner@example.test"}
-}

package/docs/examples/host-local-admin-otp/.dev.vars.example

@@ -1,3 +0,0 @@
-PUBLIC_ORIGIN=http://127.0.0.1:8787
-BETTER_AUTH_SECRET=local-admin-otp-dev-secret-do-not-use-in-prod
-ADMIN_EMAIL=owner@example.com

package/docs/examples/host-local-admin-otp/README.md

@@ -1,80 +0,0 @@
-# Local Admin OTP
-
-This is the opt-in Dev UI path: a directly authored Cloudflare application
-that opens Mantle Admin locally with email OTP. Admin is not required to
-ship a complete service. It is not a Starter or CLI generator. Business
-Manifests live in the [Examples hub](../README.md). The notes
-Schema is example business data; `mantle generate` never invents it.
-
-Spec + adapter without Admin:
-[`docs/examples/host-minimal-worker`](../host-minimal-worker/README.md).
-
-This reference depends on every `@aotter/mantle*` package via the `latest`
-dist-tag, so a fresh install always resolves the current stable release.
-Core's test runner substitutes its exact candidate in a disposable copy.
-
-## One-shot
-
-Outside the SDK workspace, with Node 22+ and pnpm 9+:
-
-```sh
-pnpm install && pnpm generate && pnpm dev
-```
-
-`predev` copies `.dev.vars.example` to `.dev.vars` when that file is
-missing. `pnpm dev` binds `127.0.0.1:8787` so wrangler's Ready-on origin
-matches `PUBLIC_ORIGIN` (`http://127.0.0.1:8787`). Open that Ready-on
-URL. Browsing `http://localhost:8787` still serves HTML, but the OTP
-Origin header mismatches `PUBLIC_ORIGIN` and Better Auth returns
-`INVALID_ORIGIN`. Then:
-
-1. Open `http://127.0.0.1:8787/admin/sign-in`.
-2. Sign in with the bootstrap owner email from `.dev.vars` (`owner@example.com`
-   in the example).
-3. Read the one-time code from the wrangler log line
-   `[ConsoleEmailSender] auth.email-otp.sign-in → …`.
-4. Land in the Admin / Dev UI as `owner`.
-
-`mantle generate` syncs the prebuilt Admin SPA from `@aotter/mantle-admin-ui`
-into `public/_mantle/admin/`. There is no Vite or frontend build step unless
-you are developing `admin-ui` itself.
-
-## Hard requirements for Admin
-
-Admin is not a Worker route that paints itself. These must all be present:
-
-| Piece | Why |
-|---|---|
-| `@aotter/mantle-admin` and `@aotter/mantle-admin-ui` | Admin API plus the prebuilt SPA |
-| `assets.directory = ./public` and `binding = ASSETS` | Serves `/_mantle/admin/assets/*` |
-| `createAuth` `email-otp` + `ConsoleEmailSender` | Local human sign-in; code is in wrangler logs |
-| `bootstrapOwner.match: email` | First matching sign-in becomes `owner` |
-| `PUBLIC_ORIGIN` and `BETTER_AUTH_SECRET` | Auth construction; copied from `.dev.vars.example` |
-
-If `/admin` returns HTML `200` while `/_mantle/admin/assets/*` is `404`, the
-SPA white-screens. That is a missing or misconfigured `ASSETS` binding, not a
-failed frontend build. Do not put `/_mantle` in `run_worker_first`; asset
-paths must fall through to Static Assets.
-
-`ConsoleEmailSender` is the local path only. Do not wire it in production.
-
-## Local traps
-
-- Prefer `http://127.0.0.1:8787` over `http://localhost:8787`. Wrangler still
-  serves HTML on localhost, but the OTP `Origin` header will not match
-  `PUBLIC_ORIGIN` and Better Auth returns `INVALID_ORIGIN`.
-- `pnpm check` runs `smoke.mjs`, which rewrites `.dev.vars` to a smoke-only
-  port (`18787`). Restore `.dev.vars` from `.dev.vars.example` (or delete it
-  and let `predev` recopy) before `pnpm dev`, or OTP will fail with
-  `INVALID_ORIGIN` against the Ready-on `8787` origin.
-
-## What this project does not do
-
-`/` is `404`: no visitor frontend is installed. Public GET
-`/api/views/published-notes` still works against fresh local D1. Conventional
-GitHub Auth (`MANTLE_AUTH_MODE`) is not used; the Worker replaces construction
-with `createAuth` while Core still owns `/admin` and `/api/auth/*`.
-
-Commit the resolved lockfile in a real application and use frozen installs
-afterwards. Configure a real D1 `database_id`, a production email sender, and
-secrets before any remote deploy. Never commit `.dev.vars`.

package/docs/examples/host-local-admin-otp/ensure-dev-vars.mjs

@@ -1,5 +0,0 @@
-import { copyFileSync, existsSync } from "node:fs";
-
-if (!existsSync(".dev.vars")) {
-  copyFileSync(".dev.vars.example", ".dev.vars");
-}

package/docs/examples/host-local-admin-otp/manifests/site.yaml

@@ -1,25 +0,0 @@
-apiVersion: cms.mantle.aotter.net/v1
-kind: Schema
-metadata:
-  name: notes
-spec:
-  title: Notes
-  schema:
-    type: object
-    required: [title]
-    properties:
-      title: { type: string }
-  lifecycle: publishing
----
-apiVersion: cms.mantle.aotter.net/v1
-kind: View
-metadata:
-  name: published-notes
-spec:
-  surface: public
-  from: notes
-  cache: { sharedMaxAge: 3600 }
-  fields: [id, title]
-  filter:
-    eq: { field: status, value: published }
-  limit: 20

package/docs/examples/host-local-admin-otp/package.json

@@ -1,29 +0,0 @@
-{
-  "name": "mantle-local-admin-otp",
-  "private": true,
-  "type": "module",
-  "scripts": {
-    "generate": "mantle generate",
-    "validate": "mantle validate",
-    "typecheck": "tsc --noEmit",
-    "predev": "node ensure-dev-vars.mjs",
-    "dev": "wrangler dev --local --ip 127.0.0.1 --port 8787",
-    "check": "node ensure-dev-vars.mjs && mantle generate && mantle generate --check && mantle validate && mantle skills && mantle skills --check && tsc --noEmit && node smoke.mjs"
-  },
-  "dependencies": {
-    "@aotter/mantle": "latest",
-    "@aotter/mantle-admin": "latest",
-    "@aotter/mantle-admin-ui": "latest",
-    "@aotter/mantle-cloudflare": "latest",
-    "better-auth": "1.7.2",
-    "hono": "^4.13.3",
-    "zod": "^4.5.4",
-    "aws4fetch": "^1.0.20"
-  },
-  "devDependencies": {
-    "@cloudflare/workers-types": "5.20260904.1",
-    "typescript": "^6.0.3",
-    "wrangler": "4.129.0"
-  },
-  "packageManager": "pnpm@9.15.0"
-}

package/docs/examples/host-local-admin-otp/public/.gitkeep

@@ -1 +0,0 @@
-# Static Assets root. `mantle generate` writes public/_mantle/admin/ here.