@beechcms/core 0.4.0-preview.9 → 0.4.1

package/dist/auth/hash-provider.d.ts

@@ -0,0 +1,13 @@
+export interface IHashProvider {
+    /**
+     * Hashes a plaintext password using a one-way algorithm so that the original
+     * value can never be recovered from the stored digest.
+     */
+    hash(plaintextPassword: string): Promise<string>;
+    /**
+     * Verifies a plaintext password against a stored hash using a constant-time
+     * comparison to prevent timing-based attacks that could reveal whether a hash exists.
+     */
+    verify(plaintextPassword: string, storedHash: string): Promise<boolean>;
+}
+//# sourceMappingURL=hash-provider.d.ts.map

package/dist/auth/hash-provider.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"hash-provider.d.ts","sourceRoot":"","sources":["../../src/auth/hash-provider.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,aAAa;IAC5B;;;OAGG;IACH,IAAI,CAAC,iBAAiB,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAA;IAEhD;;;OAGG;IACH,MAAM,CAAC,iBAAiB,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAA;CACxE"}

package/dist/auth/hash-provider.js

@@ -0,0 +1 @@
+export {};

package/dist/auth/password-reset-token.repository.d.ts

@@ -0,0 +1,28 @@
+export interface NewPasswordResetToken {
+    userId: string;
+    tokenHash: string;
+    expiresAt: number;
+}
+export interface ValidatedResetToken {
+    id: string;
+    userId: string;
+    email: string;
+}
+export interface IPasswordResetTokenRepository {
+    /**
+     * Marks all pending (unused) tokens for the user as consumed before issuing a new one.
+     * Ensures only one active reset token exists per user at any time.
+     */
+    invalidatePending(userId: string, nowTimestamp: number): Promise<void>;
+    /** Stores a new password reset token. Only the hash is persisted, never the plaintext. */
+    create(record: NewPasswordResetToken): Promise<void>;
+    /**
+     * Finds a valid reset token by its hash, joining the users table to return the
+     * associated email in the same query to avoid a second round-trip.
+     * Returns null if the token is expired, already used, or not found.
+     */
+    findValidByHashWithEmail(tokenHash: string, nowTimestamp: number): Promise<ValidatedResetToken | null>;
+    /** Marks a token as consumed so it cannot be used again. */
+    markUsed(tokenId: string, nowTimestamp: number): Promise<void>;
+}
+//# sourceMappingURL=password-reset-token.repository.d.ts.map

package/dist/auth/password-reset-token.repository.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"password-reset-token.repository.d.ts","sourceRoot":"","sources":["../../src/auth/password-reset-token.repository.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,qBAAqB;IACpC,MAAM,EAAE,MAAM,CAAA;IACd,SAAS,EAAE,MAAM,CAAA;IACjB,SAAS,EAAE,MAAM,CAAA;CAClB;AAED,MAAM,WAAW,mBAAmB;IAClC,EAAE,EAAE,MAAM,CAAA;IACV,MAAM,EAAE,MAAM,CAAA;IACd,KAAK,EAAE,MAAM,CAAA;CACd;AAED,MAAM,WAAW,6BAA6B;IAC5C;;;OAGG;IACH,iBAAiB,CAAC,MAAM,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAEtE,0FAA0F;IAC1F,MAAM,CAAC,MAAM,EAAE,qBAAqB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAEpD;;;;OAIG;IACH,wBAAwB,CAAC,SAAS,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,mBAAmB,GAAG,IAAI,CAAC,CAAA;IAEtG,4DAA4D;IAC5D,QAAQ,CAAC,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;CAC/D"}

package/dist/auth/password-reset-token.repository.js

@@ -0,0 +1 @@
+export {};

package/dist/auth/session.repository.d.ts

@@ -0,0 +1,47 @@
+export interface NewRefreshToken {
+    id: string;
+    userId: string;
+    tokenHash: string;
+    expiresAt: number;
+}
+export interface RefreshTokenRecord {
+    id: string;
+    userId: string;
+    tokenHash: string;
+    expiresAt: number;
+    createdAt: number;
+    revokedAt: number | null;
+}
+export interface ActiveSessionSummary {
+    id: string;
+    createdAt: number;
+    expiresAt: number;
+}
+export interface ISessionRepository {
+    /** Stores a new refresh token record. Only the hash is persisted, never the plaintext. */
+    saveRefreshToken(record: NewRefreshToken): Promise<void>;
+    /**
+     * Finds an active refresh token by its hash.
+     * nowTimestamp is compared against expiresAt and revokedAt to guarantee the token
+     * is both unexpired and not revoked before returning it.
+     */
+    findActiveByHash(tokenHash: string, nowTimestamp: number): Promise<RefreshTokenRecord | null>;
+    /**
+     * Marks a refresh token as revoked so it cannot be used again.
+     * Returns true if the token was found and revoked, false if it was already revoked or absent.
+     */
+    revokeByHash(tokenHash: string, nowTimestamp: number): Promise<boolean>;
+    /**
+     * Revokes all active refresh tokens for a user.
+     * Must be called on password change to invalidate all existing sessions immediately.
+     */
+    revokeAllForUser(userId: string, nowTimestamp: number): Promise<void>;
+    /** Returns a paginated list of active sessions for the user, ordered newest first. */
+    listActiveForUser(userId: string, nowTimestamp: number, limit: number): Promise<ActiveSessionSummary[]>;
+    /**
+     * Revokes a specific session by its database ID, scoped to the owning user
+     * to prevent one user from revoking another user's sessions.
+     */
+    revokeById(sessionId: string, userId: string, nowTimestamp: number): Promise<boolean>;
+}
+//# sourceMappingURL=session.repository.d.ts.map

package/dist/auth/session.repository.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"session.repository.d.ts","sourceRoot":"","sources":["../../src/auth/session.repository.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,eAAe;IAC9B,EAAE,EAAE,MAAM,CAAA;IACV,MAAM,EAAE,MAAM,CAAA;IACd,SAAS,EAAE,MAAM,CAAA;IACjB,SAAS,EAAE,MAAM,CAAA;CAClB;AAED,MAAM,WAAW,kBAAkB;IACjC,EAAE,EAAE,MAAM,CAAA;IACV,MAAM,EAAE,MAAM,CAAA;IACd,SAAS,EAAE,MAAM,CAAA;IACjB,SAAS,EAAE,MAAM,CAAA;IACjB,SAAS,EAAE,MAAM,CAAA;IACjB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;CACzB;AAED,MAAM,WAAW,oBAAoB;IACnC,EAAE,EAAE,MAAM,CAAA;IACV,SAAS,EAAE,MAAM,CAAA;IACjB,SAAS,EAAE,MAAM,CAAA;CAClB;AAED,MAAM,WAAW,kBAAkB;IACjC,0FAA0F;IAC1F,gBAAgB,CAAC,MAAM,EAAE,eAAe,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAExD;;;;OAIG;IACH,gBAAgB,CAAC,SAAS,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,kBAAkB,GAAG,IAAI,CAAC,CAAA;IAE7F;;;OAGG;IACH,YAAY,CAAC,SAAS,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAA;IAEvE;;;OAGG;IACH,gBAAgB,CAAC,MAAM,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAErE,sFAAsF;IACtF,iBAAiB,CAAC,MAAM,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,oBAAoB,EAAE,CAAC,CAAA;IAEvG;;;OAGG;IACH,UAAU,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAA;CACtF"}

package/dist/auth/session.repository.js

@@ -0,0 +1 @@
+export {};

package/dist/auth/token-service.d.ts

@@ -0,0 +1,23 @@
+export interface JwtClaims {
+    sub: string;
+    email?: string;
+    name?: string;
+    [key: string]: unknown;
+}
+export interface IssueTokenOptions {
+    /** Time to live in seconds. Defaults to 900 (15 minutes). */
+    ttlSeconds?: number;
+}
+export interface ITokenService {
+    /**
+     * Issues a signed JWT for the given claims. The token is short-lived by design;
+     * callers that need a longer-lived session should use a refresh token instead.
+     */
+    issue(claims: JwtClaims, options?: IssueTokenOptions): Promise<string>;
+    /**
+     * Verifies a JWT and returns its decoded claims, or null on ANY failure
+     * (expired, tampered, wrong issuer/audience, malformed). Never throws.
+     */
+    verify(token: string): Promise<JwtClaims | null>;
+}
+//# sourceMappingURL=token-service.d.ts.map

package/dist/auth/token-service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"token-service.d.ts","sourceRoot":"","sources":["../../src/auth/token-service.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,SAAS;IACxB,GAAG,EAAE,MAAM,CAAA;IACX,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAA;CACvB;AAED,MAAM,WAAW,iBAAiB;IAChC,6DAA6D;IAC7D,UAAU,CAAC,EAAE,MAAM,CAAA;CACpB;AAED,MAAM,WAAW,aAAa;IAC5B;;;OAGG;IACH,KAAK,CAAC,MAAM,EAAE,SAAS,EAAE,OAAO,CAAC,EAAE,iBAAiB,GAAG,OAAO,CAAC,MAAM,CAAC,CAAA;IAEtE;;;OAGG;IACH,MAAM,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,GAAG,IAAI,CAAC,CAAA;CACjD"}

package/dist/auth/token-service.js

@@ -0,0 +1 @@
+export {};

package/dist/auth/user.repository.d.ts

@@ -0,0 +1,47 @@
+export interface UserRecord {
+    id: string;
+    email: string;
+    name: string | null;
+    passwordHash: string;
+    role: string;
+    avatarUrl: string | null;
+    notificationPreferences: string;
+}
+export interface NewUserInput {
+    id: string;
+    email: string;
+    passwordHash: string;
+    role: string;
+    name: string | null;
+}
+export interface IUserRepository {
+    /**
+     * Returns the total number of registered users.
+     * Used to block re-setup when at least one administrator account already exists.
+     */
+    countAll(): Promise<number>;
+    /** Retrieves a user by their unique identifier, or null if not found. */
+    findById(userId: string): Promise<UserRecord | null>;
+    /** Retrieves a user by their email address, or null if not found. */
+    findByEmail(email: string): Promise<UserRecord | null>;
+    /** Inserts a new user record. */
+    create(user: NewUserInput): Promise<void>;
+    /** Updates the user's display name and/or email address. */
+    updateProfile(userId: string, fields: {
+        name?: string;
+        email?: string;
+    }): Promise<void>;
+    /** Replaces the user's stored password hash after a successful password change. */
+    updatePasswordHash(userId: string, newPasswordHash: string): Promise<void>;
+    /** Sets or clears the user's avatar URL. */
+    updateAvatarUrl(userId: string, avatarUrl: string | null): Promise<void>;
+    /** Persists the user's notification preferences as a JSON string. */
+    updateNotificationPreferences(userId: string, preferencesJson: string): Promise<void>;
+    /**
+     * Checks whether the given email is already registered to a different user.
+     * Used during an email change to detect conflicts without exposing whether
+     * an unrelated account exists.
+     */
+    emailBelongsToAnotherUser(email: string, currentUserId: string): Promise<boolean>;
+}
+//# sourceMappingURL=user.repository.d.ts.map

package/dist/auth/user.repository.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"user.repository.d.ts","sourceRoot":"","sources":["../../src/auth/user.repository.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,UAAU;IACzB,EAAE,EAAE,MAAM,CAAA;IACV,KAAK,EAAE,MAAM,CAAA;IACb,IAAI,EAAE,MAAM,GAAG,IAAI,CAAA;IACnB,YAAY,EAAE,MAAM,CAAA;IACpB,IAAI,EAAE,MAAM,CAAA;IACZ,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;IACxB,uBAAuB,EAAE,MAAM,CAAA;CAChC;AAED,MAAM,WAAW,YAAY;IAC3B,EAAE,EAAE,MAAM,CAAA;IACV,KAAK,EAAE,MAAM,CAAA;IACb,YAAY,EAAE,MAAM,CAAA;IACpB,IAAI,EAAE,MAAM,CAAA;IACZ,IAAI,EAAE,MAAM,GAAG,IAAI,CAAA;CACpB;AAED,MAAM,WAAW,eAAe;IAC9B;;;OAGG;IACH,QAAQ,IAAI,OAAO,CAAC,MAAM,CAAC,CAAA;IAE3B,yEAAyE;IACzE,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC,CAAA;IAEpD,qEAAqE;IACrE,WAAW,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC,CAAA;IAEtD,iCAAiC;IACjC,MAAM,CAAC,IAAI,EAAE,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAEzC,4DAA4D;IAC5D,aAAa,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE;QAAE,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAEvF,mFAAmF;IACnF,kBAAkB,CAAC,MAAM,EAAE,MAAM,EAAE,eAAe,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAE1E,4CAA4C;IAC5C,eAAe,CAAC,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAExE,qEAAqE;IACrE,6BAA6B,CAAC,MAAM,EAAE,MAAM,EAAE,eAAe,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAErF;;;;OAIG;IACH,yBAAyB,CAAC,KAAK,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAA;CAClF"}

package/dist/auth/user.repository.js

@@ -0,0 +1 @@
+export {};

package/dist/clock.d.ts

@@ -0,0 +1,25 @@
+/**
+ * Time abstraction. Hides direct calls to {@link Date.now} so callers can
+ * swap in deterministic clocks during tests without resorting to global
+ * timer mocks (e.g. vi.useFakeTimers, sinon, monkey-patching Date).
+ */
+export interface IClock {
+    /**
+     * Returns the current Unix timestamp in milliseconds.
+     * Equivalent to Date.now() in production.
+     * Overridable in tests for deterministic time-sensitive assertions.
+     */
+    now(): number;
+    /**
+     * Returns the current Unix timestamp in whole seconds.
+     * Equivalent to Math.floor(Date.now() / 1000) in production.
+     * Used by JWT issuance, session expiry, and analytics day-bucket computations.
+     */
+    nowSeconds(): number;
+}
+/**
+ * Production singleton. Delegates to the host runtime clock. Stateless and
+ * therefore safe to share across requests.
+ */
+export declare const SystemClock: IClock;
+//# sourceMappingURL=clock.d.ts.map

package/dist/clock.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"clock.d.ts","sourceRoot":"","sources":["../src/clock.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,MAAM,WAAW,MAAM;IACrB;;;;OAIG;IACH,GAAG,IAAI,MAAM,CAAA;IAEb;;;;OAIG;IACH,UAAU,IAAI,MAAM,CAAA;CACrB;AAID;;;GAGG;AACH,eAAO,MAAM,WAAW,EAAE,MAGzB,CAAA"}

package/dist/clock.js

@@ -0,0 +1,9 @@
+const MILLISECONDS_PER_SECOND = 1000;
+/**
+ * Production singleton. Delegates to the host runtime clock. Stateless and
+ * therefore safe to share across requests.
+ */
+export const SystemClock = {
+    now: () => Date.now(),
+    nowSeconds: () => Math.floor(Date.now() / MILLISECONDS_PER_SECOND),
+};

package/dist/content-scan.repository.d.ts

@@ -0,0 +1,9 @@
+import type { Seed } from './types.js';
+export interface IContentScanRepository {
+    /**
+     * Scans across all registered seeds to identify media keys that are currently referenced
+     * by any content entry. Used for orphaned media detection and storage analytics.
+     */
+    getReferencedMediaKeys(seeds: Seed[]): Promise<Set<string>>;
+}
+//# sourceMappingURL=content-scan.repository.d.ts.map

package/dist/content-scan.repository.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"content-scan.repository.d.ts","sourceRoot":"","sources":["../src/content-scan.repository.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,YAAY,CAAA;AAEtC,MAAM,WAAW,sBAAsB;IACrC;;;OAGG;IACH,sBAAsB,CAAC,KAAK,EAAE,IAAI,EAAE,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAA;CAC5D"}

package/dist/content-scan.repository.js

@@ -0,0 +1 @@
+export {};

package/dist/content.repository.d.ts

@@ -0,0 +1,95 @@
+import { Seed, SelectOptions } from './types.js';
+/**
+ * Base Repository Error
+ */
+export declare class RepositoryError extends Error {
+    cause?: unknown | undefined;
+    constructor(message: string, cause?: unknown | undefined);
+}
+/**
+ * Thrown when an entry is not found by ID or Slug
+ */
+export declare class EntryNotFoundError extends RepositoryError {
+    constructor(message: string);
+}
+/**
+ * Thrown when a slug already exists for a content type
+ */
+export declare class SlugConflictError extends RepositoryError {
+    constructor(message: string);
+}
+/**
+ * Interface defining the standard operations for content persistence.
+ * This is platform-agnostic and should be implemented for specific databases (e.g., D1).
+ */
+export interface ContentRepository {
+    /**
+     * Retrieves a paginated and filtered list of entries.
+     */
+    findMany(seed: Seed, options: SelectOptions): Promise<{
+        items: Record<string, any>[];
+        total: number;
+    }>;
+    /**
+     * Finds a single entry by its unique ID.
+     * Throws EntryNotFoundError if not found.
+     */
+    findById(seed: Seed, id: string): Promise<Record<string, any>>;
+    /**
+     * Finds a single entry by its unique slug.
+     * Throws EntryNotFoundError if not found.
+     */
+    findBySlug(seed: Seed, slug: string): Promise<Record<string, any>>;
+    /**
+     * Computes facets (status counts and distinct tags) for a content type.
+     */
+    getFacets(seed: Seed): Promise<{
+        statuses: Record<string, number>;
+        tagsByColumn: Record<string, string[]>;
+    }>;
+    /**
+     * Creates a new content entry in the live table.
+     * Throws SlugConflictError if the slug is already taken.
+     */
+    create(seed: Seed, id: string, slug: string, status: string, data: Record<string, any>): Promise<void>;
+    /**
+     * Partially updates an existing entry in the live table.
+     * Throws EntryNotFoundError if the ID does not exist.
+     */
+    update(seed: Seed, id: string, data: Record<string, any>, status?: string): Promise<void>;
+    /**
+     * Deletes an entry from the live table.
+     * Returns the deleted row data (useful for media cleanup).
+     * Throws EntryNotFoundError if the ID does not exist.
+     */
+    delete(seed: Seed, id: string): Promise<{
+        row: Record<string, any>;
+    }>;
+    /**
+     * Saves or updates a pending draft in the mirror table.
+     */
+    saveDraft(seed: Seed, entryId: string, data: Record<string, any>): Promise<void>;
+    /**
+     * Retrieves the pending draft for a given entry.
+     * Returns null if no draft exists.
+     */
+    getDraft(seed: Seed, entryId: string): Promise<Record<string, any> | null>;
+    /**
+     * Atomic promotion of a draft to the live table.
+     * Must use a transaction (db.batch) to update live and delete draft.
+     */
+    publishDraft(seed: Seed, entryId: string): Promise<void>;
+    /**
+     * Discards the pending draft.
+     */
+    deleteDraft(seed: Seed, entryId: string): Promise<void>;
+    /**
+     * Checks if a slug is already taken by another entry.
+     */
+    existsSlug(seed: Seed, slug: string, excludeId?: string): Promise<boolean>;
+    /**
+     * Checks if an entry has a pending draft.
+     */
+    hasDraft(seed: Seed, entryId: string): Promise<boolean>;
+}
+//# sourceMappingURL=content.repository.d.ts.map

package/dist/content.repository.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"content.repository.d.ts","sourceRoot":"","sources":["../src/content.repository.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,MAAM,YAAY,CAAA;AAEhD;;GAEG;AACH,qBAAa,eAAgB,SAAQ,KAAK;IACJ,KAAK,CAAC,EAAE,OAAO;gBAAvC,OAAO,EAAE,MAAM,EAAS,KAAK,CAAC,EAAE,OAAO,YAAA;CAIpD;AAED;;GAEG;AACH,qBAAa,kBAAmB,SAAQ,eAAe;gBACzC,OAAO,EAAE,MAAM;CAI5B;AAED;;GAEG;AACH,qBAAa,iBAAkB,SAAQ,eAAe;gBACxC,OAAO,EAAE,MAAM;CAI5B;AAED;;;GAGG;AACH,MAAM,WAAW,iBAAiB;IAChC;;OAEG;IACH,QAAQ,CAAC,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,aAAa,GAAG,OAAO,CAAC;QAAE,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,EAAE,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;IAEtG;;;OAGG;IACH,QAAQ,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,CAAA;IAE9D;;;OAGG;IACH,UAAU,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,CAAA;IAElE;;OAEG;IACH,SAAS,CAAC,IAAI,EAAE,IAAI,GAAG,OAAO,CAAC;QAC7B,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;QAChC,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAA;KACvC,CAAC,CAAA;IAEF;;;OAGG;IACH,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAEtG;;;OAGG;IACH,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAEzF;;;;OAIG;IACH,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;KAAE,CAAC,CAAA;IAErE;;OAEG;IACH,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAEhF;;;OAGG;IACH,QAAQ,CAAC,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,IAAI,CAAC,CAAA;IAE1E;;;OAGG;IACH,YAAY,CAAC,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAExD;;OAEG;IACH,WAAW,CAAC,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAEvD;;OAEG;IACH,UAAU,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAA;IAE1E;;OAEG;IACH,QAAQ,CAAC,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAA;CACxD"}

package/dist/content.repository.js

@@ -0,0 +1,29 @@
+/**
+ * Base Repository Error
+ */
+export class RepositoryError extends Error {
+    cause;
+    constructor(message, cause) {
+        super(message);
+        this.cause = cause;
+        this.name = 'RepositoryError';
+    }
+}
+/**
+ * Thrown when an entry is not found by ID or Slug
+ */
+export class EntryNotFoundError extends RepositoryError {
+    constructor(message) {
+        super(message);
+        this.name = 'EntryNotFoundError';
+    }
+}
+/**
+ * Thrown when a slug already exists for a content type
+ */
+export class SlugConflictError extends RepositoryError {
+    constructor(message) {
+        super(message);
+        this.name = 'SlugConflictError';
+    }
+}

package/dist/engine.d.ts

@@ -1,47 +1,47 @@
 /**
  * Botanical Engine: Schema Compiler + Query Builder.
  *
- * In v0.4.0 ogni Seed ha una tabella SQL dedicata (`content_{slug}`) con colonne
- * reali tipizzate. Questo modulo genera il DDL e costruisce query parametrizzate.
- * Non conosce HTTP, auth o UI — è una libreria Node.js pura (C6).
+ * In v0.4.0 each Seed has a dedicated SQL table (`content_{slug}`) with
+ * real typed columns. This module generates the DDL and builds parameterized queries.
+ * It does not know about HTTP, auth, or UI — it's a pure TypeScript library.
  */
 import type { Seed, Branch, SelectOptions, ParameterizedQuery } from './types.js';
 /**
- * Genera `CREATE TABLE IF NOT EXISTS content_{slug}` con colonne di sistema
- * + una colonna per ogni Branch. Funzione pura: stesso Seed → stesso SQL.
+ * Generates `CREATE TABLE IF NOT EXISTS content_{slug}` with system columns
+ * + one column per Branch. Pure function: same Seed → same SQL.
  */
 export declare function generateCreateTable(seed: Seed): string;
 /**
- * Genera la tabella bozze `content_{slug}_drafts` per i Seed con `allowDrafts: true`.
- * Tutte le colonne branch sono nullable (le bozze sono parziali).
- * Ritorna null se il Seed non ha `allowDrafts: true`.
+ * Generates the drafts table `content_{slug}_drafts` for Seeds with `allowDrafts: true`.
+ * All branch columns are nullable (drafts are partial).
+ * Returns null if the Seed does not have `allowDrafts: true`.
  */
 export declare function generateDraftTable(seed: Seed): string | null;
 /**
- * Genera `ALTER TABLE content_{slug} ADD COLUMN {alias} {type}`.
- * Nuove colonne sono sempre nullable (limite SQLite su ALTER TABLE).
+ * Generates `ALTER TABLE content_{slug} ADD COLUMN {alias} {type}`.
+ * New columns are always nullable (SQLite limit on ALTER TABLE).
  */
 export declare function generateAddColumn(seed: Seed, branch: Branch): string;
 /**
- * Genera indici B-tree per status, created_at e ogni Branch filtrabile
- * con tipo indicizzabile (text, number, date, boolean).
+ * Generates B-tree indexes for status, created_at and every filterable Branch
+ * with an indexable type (text, number, date, boolean).
  */
 export declare function generateIndexes(seed: Seed): string[];
 /**
- * Genera la virtual table FTS5 per i Branch text/richtext indicizzabili.
- * Ritorna null se il Seed non ha branch con search abilitato.
+ * Generates the FTS5 virtual table for indexable text/richtext Branches.
+ * Returns null if the Seed has no branches with search enabled.
  */
 export declare function generateFtsTable(seed: Seed): string | null;
 /**
- * Genera i 3 trigger SQLite (insert/update/delete) che mantengono la FTS
- * sincronizzata automaticamente — elimina la necessità di syncFts manuale.
- * Ritorna array vuoto se il Seed non ha branch indicizzabili.
+ * Generates the 3 SQLite triggers (insert/update/delete) that keep the FTS
+ * automatically synchronized — eliminates the need for manual syncFts.
+ * Returns an empty array if the Seed has no indexable branches.
  */
 export declare function generateFtsTriggers(seed: Seed): string[];
 /**
- * Costruisce una SELECT parametrizzata su `content_{slug}`.
- * Non usa mai json_extract — ogni colonna è una colonna reale.
- * Colonne sconosciute nei filtri/orderBy vengono ignorate (fail-closed).
+ * Builds a parameterized SELECT on `content_{slug}`.
+ * Never uses json_extract — every column is a real column.
+ * Unknown columns in filters/orderBy are ignored (fail-closed).
  */
 export declare function buildSelectQuery(seed: Seed, options?: SelectOptions): ParameterizedQuery;
 export interface SchemaColumn {
@@ -51,17 +51,17 @@ export interface SchemaColumn {
     isPk: boolean;
 }
 /**
- * Ritorna la lista di colonne attese per la tabella di un Seed.
- * Usato da `beech seed:load --diff` per confrontare schema attuale vs atteso.
+ * Returns the list of expected columns for a Seed's table.
+ * Used by `beech seed:load --diff` to compare current vs expected schema.
  */
 export declare function getExpectedColumns(seed: Seed): SchemaColumn[];
 /**
- * Serializza un valore per la scrittura nel DB.
+ * Serializes a value for writing to the DB.
  * boolean → 0/1 | date → Unix timestamp | json/asset-list → JSON string
  */
 export declare function serializeForDb(branch: Branch, value: unknown): string | number | null;
 /**
- * Deserializza un valore letto dal DB per la risposta API.
+ * Deserializes a value read from the DB for the API response.
  * 0/1 → boolean | Unix timestamp → ISO 8601 | JSON string → object
  */
 export declare function deserializeFromDb(branch: Branch, value: unknown): unknown;

package/dist/engine.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"engine.d.ts","sourceRoot":"","sources":["../src/engine.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,KAAK,EACV,IAAI,EACJ,MAAM,EAKN,aAAa,EACb,kBAAkB,EACnB,MAAM,YAAY,CAAA;AA+EnB;;;GAGG;AACH,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,IAAI,GAAG,MAAM,CAsBtD;AAED;;;;GAIG;AACH,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,IAAI,GAAG,MAAM,GAAG,IAAI,CAuB5D;AAED;;;GAGG;AACH,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM,CAGpE;AAED;;;GAGG;AACH,wBAAgB,eAAe,CAAC,IAAI,EAAE,IAAI,GAAG,MAAM,EAAE,CAkBpD;AAED;;;GAGG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,IAAI,GAAG,MAAM,GAAG,IAAI,CAc1D;AAED;;;;GAIG;AACH,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,IAAI,GAAG,MAAM,EAAE,CAgCxD;AAID;;;;GAIG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,IAAI,EAAE,OAAO,GAAE,aAAkB,GAAG,kBAAkB,CAqE5F;AA0CD,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,MAAM,CAAA;IACZ,OAAO,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAAA;IACpC,OAAO,EAAE,OAAO,CAAA;IAChB,IAAI,EAAE,OAAO,CAAA;CACd;AAED;;;GAGG;AACH,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,IAAI,GAAG,YAAY,EAAE,CAc7D;AAID;;;GAGG;AACH,wBAAgB,cAAc,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,GAAG,MAAM,GAAG,MAAM,GAAG,IAAI,CAkCrF;AAED;;;GAGG;AACH,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,GAAG,OAAO,CA4BzE"}
+{"version":3,"file":"engine.d.ts","sourceRoot":"","sources":["../src/engine.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,KAAK,EACV,IAAI,EACJ,MAAM,EAKN,aAAa,EACb,kBAAkB,EACnB,MAAM,YAAY,CAAA;AAgFnB;;;GAGG;AACH,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,IAAI,GAAG,MAAM,CAsBtD;AAED;;;;GAIG;AACH,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,IAAI,GAAG,MAAM,GAAG,IAAI,CAuB5D;AAED;;;GAGG;AACH,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM,CAGpE;AAED;;;GAGG;AACH,wBAAgB,eAAe,CAAC,IAAI,EAAE,IAAI,GAAG,MAAM,EAAE,CAkBpD;AAED;;;GAGG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,IAAI,GAAG,MAAM,GAAG,IAAI,CAc1D;AAED;;;;GAIG;AACH,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,IAAI,GAAG,MAAM,EAAE,CAgCxD;AAID;;;;GAIG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,IAAI,EAAE,OAAO,GAAE,aAAkB,GAAG,kBAAkB,CAqE5F;AA+GD,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,MAAM,CAAA;IACZ,OAAO,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAAA;IACpC,OAAO,EAAE,OAAO,CAAA;IAChB,IAAI,EAAE,OAAO,CAAA;CACd;AAED;;;GAGG;AACH,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,IAAI,GAAG,YAAY,EAAE,CAc7D;AAID;;;GAGG;AACH,wBAAgB,cAAc,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,GAAG,MAAM,GAAG,MAAM,GAAG,IAAI,CAmCrF;AAED;;;GAGG;AACH,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,GAAG,OAAO,CA6BzE"}