@beechcms/api 0.6.0-preview.1 → 0.6.0-preview.3

package/dist/features/automations/var-access-resolver.d.ts

@@ -0,0 +1,6 @@
+import type { ParsedKey } from './template-grammar';
+type VarAccessParsed = Extract<ParsedKey, {
+    kind: 'var_access';
+}>;
+export declare function resolveVarAccess(parsed: VarAccessParsed, variables: Record<string, unknown>, onMissing?: (field: string) => void): unknown;
+export {};

package/dist/features/automations/when-evaluator.d.ts

@@ -0,0 +1,3 @@
+import type { WhenNode } from '@beechcms/core';
+import type { ResolvedContext } from './context-resolver';
+export declare function evaluateWhen(node: WhenNode | null, context: ResolvedContext): boolean;

package/dist/features/automations/when-pushdown.d.ts

@@ -0,0 +1,2 @@
+import type { WhenNode, FilterGroup, Seed } from '@beechcms/core';
+export declare function extractPushdownFilters(node: WhenNode | null, seed: Seed): FilterGroup[];

package/dist/features/backrefs/backrefs.handler.d.ts

@@ -0,0 +1,3 @@
+import { Hono } from 'hono';
+import type { AppEnv } from '../../types';
+export declare const backrefsApp: Hono<AppEnv, import("hono/types").BlankSchema, "/">;

package/dist/features/backrefs/d1-backref.repository.d.ts

@@ -0,0 +1,17 @@
+import type { BackrefSource, Seed } from '@beechcms/core';
+export interface BackrefItem {
+    id: string;
+    displayName: string | null;
+    status: string;
+    updated_at: number | null;
+}
+export interface QueryGroupResult {
+    items: BackrefItem[];
+    total: number;
+}
+export declare class D1BackrefRepository {
+    private readonly db;
+    constructor(db: D1Database);
+    entryExists(slug: string, id: string): Promise<boolean>;
+    queryGroup(source: BackrefSource, sourceSeed: Seed, targetId: string, limit: number, offset: number): Promise<QueryGroupResult>;
+}

package/dist/features/backrefs/index.d.ts

@@ -0,0 +1 @@
+export { backrefsApp } from './backrefs.handler';

package/dist/features/content/constants.d.ts

@@ -0,0 +1,12 @@
+export declare const CONTENT_ERRORS: {
+    readonly INVALID_SLUG: "Invalid slug";
+    readonly INVALID_SLUG_OR_ID: "Invalid slug or id";
+    readonly INVALID_JSON_BODY: "Invalid JSON body";
+    readonly NOT_FOUND: "Not found";
+    readonly SEED_NOT_FOUND: "Seed not found";
+    readonly DATABASE_ERROR: "Database error";
+    readonly SLUG_CONFLICT: "Slug already exists for this schema";
+    readonly SENSITIVE_FIELD_EDIT: "Cannot edit sensitive fields";
+    readonly BULK_SIZE_EXCEEDED: "Cannot edit more than 500 entries at once";
+    readonly FIELD_NOT_BULK_EDITABLE: "Field cannot be bulk-edited";
+};

package/dist/features/content/handlers/bulk.handler.d.ts

@@ -0,0 +1,3 @@
+import { Context } from 'hono';
+import { AppEnv } from '../../../types';
+export declare function bulkHandler(context: Context<AppEnv>): Promise<Response>;

package/dist/features/content/handlers/create.d.ts

@@ -0,0 +1,3 @@
+import { Context } from 'hono';
+import { AppEnv } from '../../../types';
+export declare function createHandler(context: Context<AppEnv>): Promise<Response>;

package/dist/features/content/handlers/delete.d.ts

@@ -0,0 +1,3 @@
+import { Context } from 'hono';
+import { AppEnv } from '../../../types';
+export declare function deleteHandler(context: Context<AppEnv>): Promise<Response>;

package/dist/features/content/handlers/facets.d.ts

@@ -0,0 +1,3 @@
+import { Context } from 'hono';
+import { AppEnv } from '../../../types';
+export declare function facetsHandler(context: Context<AppEnv>): Promise<Response>;

package/dist/features/content/handlers/get.d.ts

@@ -0,0 +1,4 @@
+import { Context } from 'hono';
+import { AppEnv } from '../../../types';
+export declare function getByIdHandler(context: Context<AppEnv>): Promise<Response>;
+export declare function getBySlugHandler(context: Context<AppEnv>): Promise<Response>;

package/dist/features/content/handlers/helpers.d.ts

@@ -0,0 +1,12 @@
+import { Context } from 'hono';
+import { AppEnv } from '../../../types';
+export declare function normalizeBody(raw: unknown): Record<string, unknown>;
+export declare function contentValidationProblem(context: Context, details: Array<{
+    field: string;
+    expected: string;
+    received: string;
+    message: string;
+}>): Response;
+export declare function logContentActivity(context: Context<AppEnv>, action: 'create' | 'update' | 'delete', id: string, slug: string, title: string): void;
+export declare function dispatchContentAutomation(context: Context<AppEnv>, seedSlug: string, event: 'create' | 'update' | 'delete', entry: Record<string, unknown>): void;
+export declare function handleContentDatabaseError(context: Context<AppEnv>, error: unknown): Response;

package/dist/features/content/handlers/list.d.ts

@@ -0,0 +1,3 @@
+import { Context } from 'hono';
+import { AppEnv } from '../../../types';
+export declare function listHandler(context: Context<AppEnv>): Promise<Response>;

package/dist/features/content/handlers/update.d.ts

@@ -0,0 +1,3 @@
+import { Context } from 'hono';
+import { AppEnv } from '../../../types';
+export declare function updateHandler(context: Context<AppEnv>): Promise<Response>;

package/dist/features/content/index.d.ts

@@ -0,0 +1,4 @@
+import { Hono } from 'hono';
+import { AppEnv } from '../../types';
+declare const content: Hono<AppEnv, import("hono/types").BlankSchema, "/">;
+export default content;

package/dist/features/dashboard-layout/dashboard-layout.handler.d.ts

@@ -0,0 +1,7 @@
+import { Hono } from 'hono';
+import type { Env, Variables } from '../../types';
+declare const dashboardLayoutApp: Hono<{
+    Bindings: Env;
+    Variables: Variables;
+}, import("hono/types").BlankSchema, "/">;
+export { dashboardLayoutApp };

package/dist/features/dashboard-layout/index.d.ts

@@ -0,0 +1 @@
+export { dashboardLayoutApp } from './dashboard-layout.handler';

package/dist/features/draft/draft.handler.d.ts

@@ -0,0 +1,4 @@
+import { Hono } from 'hono';
+import { AppEnv } from '../../types';
+declare const draftApp: Hono<AppEnv, import("hono/types").BlankSchema, "/">;
+export { draftApp };

package/dist/features/draft/draft.middleware.d.ts

@@ -0,0 +1,9 @@
+import type { AppEnv } from '../../types';
+/**
+ * Middleware that guards draft-related endpoints.
+ * Responsibilities:
+ * 1. Validates that the targeted Seed schema exists.
+ * 2. Ensures the Seed configuration explicitly allows drafts.
+ * 3. Confirms that the main live content entry exists in the repository.
+ */
+export declare const draftGuard: import("hono").MiddlewareHandler<AppEnv, string, {}, Response>;

package/dist/features/draft/index.d.ts

@@ -0,0 +1 @@
+export { draftApp } from './draft.handler';

package/{src/features/email/email.provider.ts → dist/features/email/email.provider.d.ts}

@@ -1,42 +1,37 @@
-// SPDX-License-Identifier: BUSL-1.1
-// Copyright (c) 2024–2026 Flavio De Musso. All rights reserved.
-// See LICENSE in the repository root for license terms.
-
-import type { OutboundEmail } from './email.types'
-
-/**
- * EmailProvider — formal contract for email sending providers.
- *
- * Every implementation (Resend, SendGrid, Mailgun, SMTP, ...) MUST comply
- * with this interface. It is the only point of coupling between the email module and
- * any third-party external service.
- *
- * ─── HOW TO CHANGE PROVIDER ──────────────────────────────────────────────────
- *  1. Create a new file under `providers/` (e.g., `providers/sendgrid.ts`).
- *  2. Export a class that implements this interface.
- *  3. In `email.service.ts`, replace the import and instantiation of the current
- *     provider with your new class in the `createProvider()` function.
- *  4. Update the necessary environment variables in `types.ts` and `wrangler.jsonc`.
- *  5. No other file in the project needs to be touched.
- * ─────────────────────────────────────────────────────────────────────────────
- */
-export interface EmailProvider {
-  /**
-   * Sends a single transactional email.
-   *
-   * @param email - The fully resolved message: sender, recipient,
-   *               subject, and HTML body. Use the builders in `templates/` to
-   *               construct this object correctly.
-   *
-   * @returns Promise that resolves when the provider has **accepted** the
-   *          message for delivery. Acceptance does not guarantee delivery
-   *          to the inbox — that depends on the recipient's server and the
-   *          provider's deliverability.
-   *
-   * @throws {Error} If the provider rejects the request (failed authentication,
-   *                 network error, invalid payload). The caller
-   *                 (`email.service.ts`) is responsible for catching and handling
-   *                 this error appropriately.
-   */
-  send(email: OutboundEmail): Promise<void>
-}
+import type { OutboundEmail } from './email.types';
+/**
+ * EmailProvider — formal contract for email sending providers.
+ *
+ * Every implementation (Resend, SendGrid, Mailgun, SMTP, ...) MUST comply
+ * with this interface. It is the only point of coupling between the email module and
+ * any third-party external service.
+ *
+ * ─── HOW TO CHANGE PROVIDER ──────────────────────────────────────────────────
+ *  1. Create a new file under `providers/` (e.g., `providers/sendgrid.ts`).
+ *  2. Export a class that implements this interface.
+ *  3. In `email.service.ts`, replace the import and instantiation of the current
+ *     provider with your new class in the `createProvider()` function.
+ *  4. Update the necessary environment variables in `types.ts` and `wrangler.jsonc`.
+ *  5. No other file in the project needs to be touched.
+ * ─────────────────────────────────────────────────────────────────────────────
+ */
+export interface EmailProvider {
+    /**
+     * Sends a single transactional email.
+     *
+     * @param email - The fully resolved message: sender, recipient,
+     *               subject, and HTML body. Use the builders in `templates/` to
+     *               construct this object correctly.
+     *
+     * @returns Promise that resolves when the provider has **accepted** the
+     *          message for delivery. Acceptance does not guarantee delivery
+     *          to the inbox — that depends on the recipient's server and the
+     *          provider's deliverability.
+     *
+     * @throws {Error} If the provider rejects the request (failed authentication,
+     *                 network error, invalid payload). The caller
+     *                 (`email.service.ts`) is responsible for catching and handling
+     *                 this error appropriately.
+     */
+    send(email: OutboundEmail): Promise<void>;
+}

package/dist/features/email/email.service.d.ts

@@ -0,0 +1,13 @@
+import type { PasswordResetEmailParams, PasswordChangedEmailParams, AutomationMailParams } from './email.types';
+export interface EmailProviderEnv {
+    /** "smtp" | "resend"; default "resend" if absent */
+    provider?: string;
+    /** Resend API key, used when provider is "resend" */
+    apiKey?: string;
+    /** Mailpit base URL (e.g. http://localhost:8025), used when provider is "smtp" */
+    smtpBaseUrl?: string;
+    isDev?: boolean;
+}
+export declare function sendPasswordResetEmail(params: PasswordResetEmailParams): Promise<void>;
+export declare function sendPasswordChangedEmail(params: PasswordChangedEmailParams): Promise<void>;
+export declare function sendAutomationMail(params: AutomationMailParams): Promise<void>;

package/dist/features/email/email.types.d.ts

@@ -0,0 +1,94 @@
+/**
+ * Shared types for the Beech CMS email module.
+ *
+ * All types used across provider, service, and templates are defined here
+ * so that each layer remains decoupled from the others.
+ */
+/**
+ * Supported languages for the email template system.
+ *
+ * To add a new language:
+ *  1. Add the ISO code here (e.g., `'fr'`).
+ *  2. Add the corresponding translation in the `COPY` object of every
+ *     file in `templates/`. TypeScript will flag missing keys.
+ */
+export declare const SUPPORTED_EMAIL_LOCALES: readonly ["en", "it"];
+export type EmailLocale = (typeof SUPPORTED_EMAIL_LOCALES)[number];
+/**
+ * Resolves an unverified locale string (e.g., from a request body)
+ * to a supported `EmailLocale` value. Any unknown value
+ * safely falls back to `'en'`.
+ *
+ * @param raw - Raw value from the client (can be anything).
+ * @returns A valid `EmailLocale`, always.
+ */
+export declare function resolveEmailLocale(raw: unknown): EmailLocale;
+/**
+ * The resolved email message that the provider receives and sends.
+ * It is constructed by the service by combining the call parameters
+ * with the template builder output.
+ */
+export interface OutboundEmail {
+    /** Sender address in RFC 5321 format (e.g., "Beech CMS <noreply@beechcms.dev>"). */
+    from: string;
+    /** List of recipient addresses. Must contain at least one element. */
+    to: string[];
+    subject: string;
+    /** Complete HTML body. Must be a valid HTML document (see `templates/shell.ts`). */
+    html: string;
+}
+/**
+ * Shared parameters for every email sending function in `email.service.ts`.
+ * Specific functions extend this type with the additional fields
+ * required for their respective templates.
+ */
+export interface BaseEmailParams {
+    /** Main recipient address. */
+    to: string;
+    /** Email body language. Use `resolveEmailLocale()` before passing it here. */
+    locale: EmailLocale;
+    /**
+     * Resend API key (or the active provider's key). Must be non-empty —
+     * the caller is responsible for validating it before invoking the service.
+     */
+    apiKey: string;
+    /**
+     * Sender address in RFC 5321 format.
+     * Default: "Beech CMS <onboarding@resend.dev>" (Resend test sender).
+     * In production, set a verified address via the
+     * `EMAIL_FROM` environment variable.
+     */
+    from?: string;
+    /**
+     * When `true`, provider errors are logged to the console.
+     * Set to `false` in production to avoid exposing internal details.
+     */
+    isDev?: boolean;
+}
+/** Parameters for the password reset email — adds the reset URL. */
+export interface PasswordResetEmailParams extends BaseEmailParams {
+    /**
+     * Complete URL that the user clicks to set the new password.
+     * Contains the token in plain text as a query param `?token=<uuid>`.
+     * Constructed by the caller as `${APP_URL}/reset-password?token=${token}`.
+     */
+    resetUrl: string;
+    provider?: 'smtp' | 'resend';
+    smtpBaseUrl?: string;
+}
+/** Parameters for the "password changed" notification. No additional fields. */
+export interface PasswordChangedEmailParams extends BaseEmailParams {
+    provider?: 'smtp' | 'resend';
+    smtpBaseUrl?: string;
+}
+export interface AutomationMailParams {
+    to: string;
+    subject: string;
+    /** Plain text or HTML — passed verbatim to provider. */
+    body: string;
+    apiKey?: string;
+    resendApiKey?: string;
+    from?: string;
+    provider?: 'smtp' | 'resend';
+    smtpBaseUrl?: string;
+}

package/{src/features/email/index.ts → dist/features/email/index.d.ts}

@@ -1,33 +1,20 @@
-// SPDX-License-Identifier: BUSL-1.1
-// Copyright (c) 2024–2026 Flavio De Musso. All rights reserved.
-// See LICENSE in the repository root for license terms.
-
-/**
- * Public API — modulo email di Beech CMS
- *
- * Questo è l'UNICO file da importare da codice esterno a questa feature.
- * I dettagli implementativi interni (provider, template, shell) sono privati
- * alla slice e non devono mai essere importati direttamente dall'esterno.
- *
- * ─── FUNZIONI ESPORTATE ───────────────────────────────────────────────────────
- *   sendPasswordResetEmail    — invia l'email con il link di reset
- *   sendPasswordChangedEmail  — invia la notifica "password modificata"
- *
- * ─── TIPI E UTILITY ESPORTATI ────────────────────────────────────────────────
- *   EmailLocale               — 'en' | 'it'  (aggiungere lingue in email.types.ts)
- *   resolveEmailLocale        — resolver sicuro per locale da input non verificato
- *   PasswordResetEmailParams  — shape dei parametri per sendPasswordResetEmail
- *   PasswordChangedEmailParams — shape dei parametri per sendPasswordChangedEmail
- */
-
-export { sendPasswordResetEmail, sendPasswordChangedEmail, sendAutomationMail } from './email.service'
-export {
-  resolveEmailLocale,
-  SUPPORTED_EMAIL_LOCALES,
-} from './email.types'
-export type {
-  EmailLocale,
-  PasswordResetEmailParams,
-  PasswordChangedEmailParams,
-  AutomationMailParams,
-} from './email.types'
+/**
+ * Public API — modulo email di Beech CMS
+ *
+ * Questo è l'UNICO file da importare da codice esterno a questa feature.
+ * I dettagli implementativi interni (provider, template, shell) sono privati
+ * alla slice e non devono mai essere importati direttamente dall'esterno.
+ *
+ * ─── FUNZIONI ESPORTATE ───────────────────────────────────────────────────────
+ *   sendPasswordResetEmail    — invia l'email con il link di reset
+ *   sendPasswordChangedEmail  — invia la notifica "password modificata"
+ *
+ * ─── TIPI E UTILITY ESPORTATI ────────────────────────────────────────────────
+ *   EmailLocale               — 'en' | 'it'  (aggiungere lingue in email.types.ts)
+ *   resolveEmailLocale        — resolver sicuro per locale da input non verificato
+ *   PasswordResetEmailParams  — shape dei parametri per sendPasswordResetEmail
+ *   PasswordChangedEmailParams — shape dei parametri per sendPasswordChangedEmail
+ */
+export { sendPasswordResetEmail, sendPasswordChangedEmail, sendAutomationMail } from './email.service';
+export { resolveEmailLocale, SUPPORTED_EMAIL_LOCALES, } from './email.types';
+export type { EmailLocale, PasswordResetEmailParams, PasswordChangedEmailParams, AutomationMailParams, } from './email.types';

package/dist/features/email/providers/resend.d.ts

@@ -0,0 +1,36 @@
+import type { EmailProvider } from '../email.provider';
+import type { OutboundEmail } from '../email.types';
+/**
+ * Resend implementation of EmailProvider.
+ *
+ * This is the ONLY file in the email module that knows about Resend.
+ * Every other file is completely unaware of which provider is active.
+ *
+ * ─── HOW TO REPLACE THIS PROVIDER ──────────────────────────────────────────
+ *  1. Create a new file in `providers/` (e.g., `providers/sendgrid.ts`).
+ *  2. Export a class that implements `EmailProvider` (a single method: `send`).
+ *  3. In `email.service.ts`, replace `new ResendEmailProvider(...)` with
+ *     your new class in the `createProvider()` function.
+ *  4. Update the environment variables in `types.ts` and `wrangler.jsonc`.
+ *  5. No other file in the project needs to be modified.
+ *
+ * Resend API Documentation: https://resend.com/docs/api-reference/emails/send-email
+ * ─────────────────────────────────────────────────────────────────────────────
+ */
+export declare class ResendEmailProvider implements EmailProvider {
+    private readonly apiKey;
+    /** When `true`, errors are logged to the console (development only). */
+    private readonly isDev;
+    constructor(apiKey: string, isDev?: boolean);
+    /**
+     * Sends the email via the Resend REST API (`POST /emails`).
+     *
+     * Throws an exception if Resend responds with a non-2xx status, so that
+     * the caller (`email.service.ts`) can decide whether to propagate the error
+     * or handle it silently (fire-and-forget).
+     *
+     * The response body is read for logging only in the development environment,
+     * to avoid unnecessarily consuming the body stream in production.
+     */
+    send(email: OutboundEmail): Promise<void>;
+}

package/dist/features/email/providers/smtp.d.ts

@@ -0,0 +1,11 @@
+import type { EmailProvider } from '../email.provider';
+import type { OutboundEmail } from '../email.types';
+export interface SmtpProviderConfig {
+    /** Base URL of the Mailpit HTTP API, e.g. http://localhost:8025 */
+    baseUrl: string;
+}
+export declare class SmtpEmailProvider implements EmailProvider {
+    private readonly endpoint;
+    constructor(config: SmtpProviderConfig);
+    send(email: OutboundEmail): Promise<void>;
+}

package/dist/features/email/templates/automation-mail.d.ts

@@ -0,0 +1,8 @@
+import type { AutomationMailParams } from '../email.types';
+/** Identity builder: automation payloads are already user-authored. */
+export declare function buildAutomationEmail(params: AutomationMailParams): {
+    to: string;
+    subject: string;
+    html: string;
+    text: string;
+};

package/dist/features/email/templates/password-changed.d.ts

@@ -0,0 +1,15 @@
+import type { EmailLocale } from '../email.types';
+/**
+ * Builds the "password changed" notification email.
+ *
+ * This email does not have a CTA button — it is a pure security notification.
+ * The `warning` block (red text) warns the user to take action if they
+ * were not the one who changed the password.
+ *
+ * @param locale - Language for the email subject and body.
+ * @returns Object with `subject` (string) and `html` (complete HTML document).
+ */
+export declare function buildPasswordChangedEmail(locale: EmailLocale): {
+    subject: string;
+    html: string;
+};

package/dist/features/email/templates/password-reset.d.ts

@@ -0,0 +1,18 @@
+import type { EmailLocale } from '../email.types';
+/**
+ * Builds the email with the password reset link.
+ *
+ * Composes the localized content with the base layout (`buildEmailShell`)
+ * injecting the CTA button pointing to the reset URL.
+ *
+ * @param resetUrl - Complete URL with the token in plain text, e.g.
+ *                   `https://dashboard.beechcms.dev/reset-password?token=<uuid>`.
+ *                   It is directly embedded in the CTA button — do not sanitize
+ *                   further: the token is an internally generated UUID.
+ * @param locale   - Language for the email subject and body.
+ * @returns Object with `subject` (string) and `html` (complete HTML document).
+ */
+export declare function buildPasswordResetEmail(resetUrl: string, locale: EmailLocale): {
+    subject: string;
+    html: string;
+};

package/dist/features/email/templates/shell.d.ts

@@ -0,0 +1,58 @@
+import type { EmailLocale } from '../email.types';
+/**
+ * Content slots that every template must provide to compose a complete email.
+ * Each slot corresponds to a visual block in the email card layout.
+ */
+export interface EmailShellSlots {
+    /**
+     * H2 heading shown at the top of the card. Keep it under ~50 characters
+     * to ensure good readability on mobile clients.
+     */
+    title: string;
+    /**
+     * Main body text. Rendered as a paragraph.
+     * Safe inline HTML is allowed (e.g., `<strong>`, `<a href="...">`),
+     * but avoid block elements (`<p>`, `<div>`) that could break
+     * the layout structure in rigid email clients (Outlook, Gmail).
+     */
+    body: string;
+    /**
+     * Optional call-to-action button, rendered as a dark link-button.
+     * Omit for notification-only emails that do not require user action.
+     */
+    cta?: {
+        label: string;
+        href: string;
+    };
+    /**
+     * Optional warning paragraph. Rendered in red (#ef4444) to attract
+     * attention. Use it for security alerts
+     * ("if it wasn't you, act immediately").
+     */
+    warning?: string;
+    /**
+     * Small gray text at the bottom of the card.
+     * Used for notes like "automated notification, do not reply".
+     */
+    footer: string;
+}
+/**
+ * Builds the base HTML layout shared by all Beech CMS transactional emails.
+ *
+ * ─── SINGLE SOURCE OF TRUTH FOR BRANDING ─────────────────────────────────────
+ * Modifying this function changes the visual appearance of ALL outgoing emails
+ * simultaneously:
+ *   - background and card color
+ *   - border style and border-radius
+ *   - typographic scale and spacing
+ *   - CTA button style
+ *
+ * To change the text or structure of a specific email, instead modify
+ * the corresponding template file (`templates/password-reset.ts`, etc.).
+ * ─────────────────────────────────────────────────────────────────────────────
+ *
+ * @param locale - Used for the `lang` attribute of the `<html>` tag.
+ * @param slots  - Content blocks injected into the layout.
+ * @returns A complete and self-contained HTML document ready to be sent.
+ */
+export declare function buildEmailShell(locale: EmailLocale, slots: EmailShellSlots): string;

package/dist/features/notifications/index.d.ts

@@ -0,0 +1 @@
+export { notificationsApp } from './notifications.handler';

package/dist/features/notifications/notifications.handler.d.ts

@@ -0,0 +1,15 @@
+import { Hono } from 'hono';
+import type { Env, Variables } from '../../types';
+/**
+ * Notifications Feature Handler.
+ *
+ * Manages retrieval, mark read/unread, and deletion of system notifications.
+ * All persistence goes through the {@link INotificationRepository} injected
+ * by `repositoryMiddleware`. The handler owns the HTTP concerns only:
+ * ETag negotiation, status codes, error mapping.
+ */
+declare const notificationsApp: Hono<{
+    Bindings: Env;
+    Variables: Variables;
+}, import("hono/types").BlankSchema, "/">;
+export { notificationsApp };

package/dist/features/password-reset/index.d.ts

@@ -0,0 +1,6 @@
+import { Hono } from 'hono';
+import type { Env, Variables } from '../../types';
+export declare const passwordResetApp: Hono<{
+    Bindings: Env;
+    Variables: Variables;
+}, import("hono/types").BlankSchema, "/">;

package/dist/features/password-reset/request.d.ts

@@ -0,0 +1,10 @@
+import type { Context } from 'hono';
+import type { Env, Variables } from '../../types';
+/**
+ * Handles the password reset request.
+ * Generates a reset token, stores its hash in the database, and sends an email to the user.
+ */
+export declare function requestPasswordReset(context: Context<{
+    Bindings: Env;
+    Variables: Variables;
+}>): Promise<Response>;

package/dist/features/password-reset/reset.d.ts

@@ -0,0 +1,9 @@
+import type { Context } from 'hono';
+import type { Env, Variables } from '../../types';
+/**
+ * Handles the actual password reset process using a valid token.
+ */
+export declare function resetPassword(context: Context<{
+    Bindings: Env;
+    Variables: Variables;
+}>): Promise<Response>;

package/dist/features/rotate-field/index.d.ts

@@ -0,0 +1 @@
+export { rotateFieldApp } from './rotate-field.handler';

package/dist/features/rotate-field/rotate-field.handler.d.ts

@@ -0,0 +1,7 @@
+import { Hono } from 'hono';
+import type { Env, Variables } from '../../types';
+declare const rotateFieldApp: Hono<{
+    Bindings: Env;
+    Variables: Variables;
+}, import("hono/types").BlankSchema, "/">;
+export { rotateFieldApp };

package/dist/features/rotate-field/rotate-field.schema.d.ts

@@ -0,0 +1,11 @@
+import { z } from 'zod';
+/**
+ * Schema for rotating a hashed field value.
+ * Used to update fields that have 'hash' privacy (e.g., passwords, PINs).
+ */
+export declare const rotateFieldRequestSchema: z.ZodObject<{
+    fieldAlias: z.ZodString;
+    currentValue: z.ZodString;
+    nextValue: z.ZodString;
+}, z.core.$strip>;
+export type RotateFieldRequest = z.infer<typeof rotateFieldRequestSchema>;