@beechcms/core 0.7.0 → 0.8.1

package/dist/antivirus/antivirus.interface.d.ts

@@ -0,0 +1,12 @@
+export type AntivirusStatus = 'clean' | 'infected' | 'skipped' | 'error';
+export interface AntivirusScanResult {
+    status: AntivirusStatus;
+    provider: string;
+    details?: string;
+    threatName?: string;
+}
+export interface IAntivirusProvider {
+    readonly name: string;
+    scan(fileBuffer: ArrayBuffer | Uint8Array, filename: string): Promise<AntivirusScanResult>;
+}
+//# sourceMappingURL=antivirus.interface.d.ts.map

package/dist/antivirus/antivirus.interface.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"antivirus.interface.d.ts","sourceRoot":"","sources":["../../src/antivirus/antivirus.interface.ts"],"names":[],"mappings":"AAGA,MAAM,MAAM,eAAe,GAAG,OAAO,GAAG,UAAU,GAAG,SAAS,GAAG,OAAO,CAAA;AAExE,MAAM,WAAW,mBAAmB;IAClC,MAAM,EAAE,eAAe,CAAA;IACvB,QAAQ,EAAE,MAAM,CAAA;IAChB,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,UAAU,CAAC,EAAE,MAAM,CAAA;CACpB;AAED,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,IAAI,CAAC,UAAU,EAAE,WAAW,GAAG,UAAU,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,mBAAmB,CAAC,CAAA;CAC3F"}

package/dist/antivirus/antivirus.interface.js

@@ -0,0 +1,3 @@
+// SPDX-License-Identifier: MIT
+// Copyright (c) 2024–2026 Flavio De Musso
+export {};

package/dist/antivirus/noop-antivirus.provider.d.ts

@@ -0,0 +1,6 @@
+import type { IAntivirusProvider, AntivirusScanResult } from './antivirus.interface.js';
+export declare class NoopAntivirusProvider implements IAntivirusProvider {
+    readonly name = "noop";
+    scan(_fileBuffer: ArrayBuffer | Uint8Array, _filename: string): Promise<AntivirusScanResult>;
+}
+//# sourceMappingURL=noop-antivirus.provider.d.ts.map

package/dist/antivirus/noop-antivirus.provider.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"noop-antivirus.provider.d.ts","sourceRoot":"","sources":["../../src/antivirus/noop-antivirus.provider.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAA;AAEvF,qBAAa,qBAAsB,YAAW,kBAAkB;IAC9D,QAAQ,CAAC,IAAI,UAAS;IAEhB,IAAI,CAAC,WAAW,EAAE,WAAW,GAAG,UAAU,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,mBAAmB,CAAC,CAEjG;CACF"}

package/dist/antivirus/noop-antivirus.provider.js

@@ -0,0 +1,8 @@
+// SPDX-License-Identifier: MIT
+// Copyright (c) 2024–2026 Flavio De Musso
+export class NoopAntivirusProvider {
+    name = 'noop';
+    async scan(_fileBuffer, _filename) {
+        return { status: 'skipped', provider: this.name, details: 'Antivirus scanning disabled' };
+    }
+}

package/dist/antivirus/virustotal-antivirus.provider.d.ts

@@ -0,0 +1,8 @@
+import type { IAntivirusProvider, AntivirusScanResult } from './antivirus.interface.js';
+export declare class VirusTotalAntivirusProvider implements IAntivirusProvider {
+    private readonly apiKey?;
+    readonly name = "virustotal";
+    constructor(apiKey?: string | undefined);
+    scan(fileBuffer: ArrayBuffer | Uint8Array, filename: string): Promise<AntivirusScanResult>;
+}
+//# sourceMappingURL=virustotal-antivirus.provider.d.ts.map

package/dist/antivirus/virustotal-antivirus.provider.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"virustotal-antivirus.provider.d.ts","sourceRoot":"","sources":["../../src/antivirus/virustotal-antivirus.provider.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAA;AAEvF,qBAAa,2BAA4B,YAAW,kBAAkB;IAExD,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC;IADpC,QAAQ,CAAC,IAAI,gBAAe;IAC5B,YAA6B,MAAM,CAAC,EAAE,MAAM,YAAA,EAAI;IAE1C,IAAI,CAAC,UAAU,EAAE,WAAW,GAAG,UAAU,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,mBAAmB,CAAC,CA0C/F;CACF"}

package/dist/antivirus/virustotal-antivirus.provider.js

@@ -0,0 +1,48 @@
+// SPDX-License-Identifier: MIT
+// Copyright (c) 2024–2026 Flavio De Musso
+export class VirusTotalAntivirusProvider {
+    apiKey;
+    name = 'virustotal';
+    constructor(apiKey) {
+        this.apiKey = apiKey;
+    }
+    async scan(fileBuffer, filename) {
+        if (!this.apiKey) {
+            return { status: 'skipped', provider: this.name, details: 'API key not configured' };
+        }
+        const bytes = fileBuffer instanceof Uint8Array ? fileBuffer : new Uint8Array(fileBuffer);
+        const hashBuffer = await crypto.subtle.digest('SHA-256', bytes);
+        const hash = Array.from(new Uint8Array(hashBuffer)).map(b => b.toString(16).padStart(2, '0')).join('');
+        try {
+            const res = await fetch(`https://www.virustotal.com/api/v3/files/${hash}`, {
+                headers: { 'x-apikey': this.apiKey },
+            });
+            if (res.status === 200) {
+                const data = await res.json();
+                const stats = data?.data?.attributes?.last_analysis_stats;
+                const malicious = (stats?.malicious ?? 0) + (stats?.suspicious ?? 0);
+                if (malicious > 0) {
+                    return { status: 'infected', provider: this.name, details: `Detected by ${malicious} security engines` };
+                }
+                return { status: 'clean', provider: this.name };
+            }
+            if (res.status === 404) {
+                const formData = new FormData();
+                formData.append('file', new Blob([bytes]), filename);
+                const uploadRes = await fetch('https://www.virustotal.com/api/v3/files', {
+                    method: 'POST',
+                    headers: { 'x-apikey': this.apiKey },
+                    body: formData,
+                });
+                if (!uploadRes.ok) {
+                    return { status: 'error', provider: this.name, details: `Upload scan error: ${uploadRes.status}` };
+                }
+                return { status: 'clean', provider: this.name, details: 'Queued for background analysis' };
+            }
+            return { status: 'error', provider: this.name, details: `VirusTotal lookup returned ${res.status}` };
+        }
+        catch (error) {
+            return { status: 'error', provider: this.name, details: error instanceof Error ? error.message : 'Scan request failed' };
+        }
+    }
+}

package/dist/automations-grammar-words.d.ts

@@ -0,0 +1,2 @@
+export declare const AUTOMATION_RESERVED_WORDS: Set<string>;
+//# sourceMappingURL=automations-grammar-words.d.ts.map

package/dist/automations-grammar-words.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"automations-grammar-words.d.ts","sourceRoot":"","sources":["../src/automations-grammar-words.ts"],"names":[],"mappings":"AAGA,eAAO,MAAM,yBAAyB,aAKpC,CAAA"}

package/dist/automations-grammar-words.js

@@ -0,0 +1,8 @@
+// SPDX-License-Identifier: MIT
+// Copyright (c) 2024–2026 Flavio De Musso
+export const AUTOMATION_RESERVED_WORDS = new Set([
+    'this', 'batch', 'all', 'firstone', 'lastone', 'byid', 'where',
+    'array',
+    'count', 'sum', 'avg', 'min', 'max', 'pluck',
+    'true', 'false', 'null',
+]);

package/dist/automations.repository.interface.d.ts

@@ -0,0 +1,19 @@
+import type { Automation, AutomationAction, AutomationTrigger, AutomationTriggerEvent, WhenNode } from './automations.types.js';
+export interface CreateAutomationInput {
+    seed_slug: string;
+    name: string;
+    triggers: AutomationTrigger[];
+    trigger_conditions: WhenNode | null;
+    actions: AutomationAction[];
+}
+export type UpdateAutomationInput = Partial<CreateAutomationInput>;
+export interface IAutomationRepository {
+    list(seedSlug: string): Promise<Automation[]>;
+    findById(id: string): Promise<Automation | null>;
+    create(input: CreateAutomationInput): Promise<string>;
+    update(id: string, input: UpdateAutomationInput): Promise<void>;
+    toggle(id: string, enabled: boolean): Promise<void>;
+    delete(id: string): Promise<void>;
+    findActive(seedSlug: string, event: AutomationTriggerEvent): Promise<Automation[]>;
+}
+//# sourceMappingURL=automations.repository.interface.d.ts.map

package/dist/automations.repository.interface.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"automations.repository.interface.d.ts","sourceRoot":"","sources":["../src/automations.repository.interface.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,UAAU,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,sBAAsB,EAAE,QAAQ,EAAE,MAAM,wBAAwB,CAAA;AAE/H,MAAM,WAAW,qBAAqB;IACpC,SAAS,EAAE,MAAM,CAAA;IACjB,IAAI,EAAE,MAAM,CAAA;IACZ,QAAQ,EAAE,iBAAiB,EAAE,CAAA;IAC7B,kBAAkB,EAAE,QAAQ,GAAG,IAAI,CAAA;IACnC,OAAO,EAAE,gBAAgB,EAAE,CAAA;CAC5B;AAED,MAAM,MAAM,qBAAqB,GAAG,OAAO,CAAC,qBAAqB,CAAC,CAAA;AAElE,MAAM,WAAW,qBAAqB;IACpC,IAAI,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,EAAE,CAAC,CAAA;IAC7C,QAAQ,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC,CAAA;IAChD,MAAM,CAAC,KAAK,EAAE,qBAAqB,GAAG,OAAO,CAAC,MAAM,CAAC,CAAA;IACrD,MAAM,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,qBAAqB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAC/D,MAAM,CAAC,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IACnD,MAAM,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IACjC,UAAU,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,sBAAsB,GAAG,OAAO,CAAC,UAAU,EAAE,CAAC,CAAA;CACnF"}

package/dist/automations.repository.interface.js

@@ -0,0 +1,3 @@
+// SPDX-License-Identifier: MIT
+// Copyright (c) 2024–2026 Flavio De Musso
+export {};

package/dist/automations.runner.interface.d.ts

@@ -0,0 +1,10 @@
+import type { AutomationTriggerEvent } from './automations.types.js';
+export interface AutomationEventPayload {
+    seedSlug: string;
+    event: AutomationTriggerEvent;
+    entry: Record<string, unknown>;
+}
+export interface IAutomationRunner {
+    run(payload: AutomationEventPayload): Promise<void>;
+}
+//# sourceMappingURL=automations.runner.interface.d.ts.map

package/dist/automations.runner.interface.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"automations.runner.interface.d.ts","sourceRoot":"","sources":["../src/automations.runner.interface.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,wBAAwB,CAAA;AAEpE,MAAM,WAAW,sBAAsB;IACrC,QAAQ,EAAE,MAAM,CAAA;IAChB,KAAK,EAAE,sBAAsB,CAAA;IAC7B,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CAC/B;AAED,MAAM,WAAW,iBAAiB;IAChC,GAAG,CAAC,OAAO,EAAE,sBAAsB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;CACpD"}

package/dist/automations.runner.interface.js

@@ -0,0 +1,3 @@
+// SPDX-License-Identifier: MIT
+// Copyright (c) 2024–2026 Flavio De Musso
+export {};

package/dist/automations.runner.stub.d.ts

@@ -0,0 +1,5 @@
+import type { IAutomationRunner, AutomationEventPayload } from './automations.runner.interface.js';
+export declare class NoOpAutomationRunner implements IAutomationRunner {
+    run(_payload: AutomationEventPayload): Promise<void>;
+}
+//# sourceMappingURL=automations.runner.stub.d.ts.map

package/dist/automations.runner.stub.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"automations.runner.stub.d.ts","sourceRoot":"","sources":["../src/automations.runner.stub.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,iBAAiB,EAAE,sBAAsB,EAAE,MAAM,mCAAmC,CAAA;AAElG,qBAAa,oBAAqB,YAAW,iBAAiB;IACtD,GAAG,CAAC,QAAQ,EAAE,sBAAsB,GAAG,OAAO,CAAC,IAAI,CAAC;CAG3D"}

package/dist/automations.runner.stub.js

@@ -0,0 +1,7 @@
+// SPDX-License-Identifier: MIT
+// Copyright (c) 2024–2026 Flavio De Musso
+export class NoOpAutomationRunner {
+    async run(_payload) {
+        // intentionally empty
+    }
+}

package/dist/automations.types.d.ts

@@ -0,0 +1,75 @@
+export type AutomationTriggerEvent = 'create' | 'update' | 'delete' | 'cron';
+export interface AutomationTrigger {
+    event: AutomationTriggerEvent;
+    cron?: string | null;
+}
+export interface TriggerCondition {
+    field: string;
+    op: 'eq' | 'neq' | 'contains' | 'gt' | 'lt' | 'isempty' | 'isnotempty';
+    value: unknown;
+}
+export type WhenOperand = {
+    kind: 'literal';
+    value: unknown;
+} | {
+    kind: 'ref';
+    key: string;
+};
+export type WhenOp = 'eq' | 'neq' | 'gt' | 'gte' | 'lt' | 'lte' | 'contains' | 'startswith' | 'endswith' | 'in' | 'notin' | 'isempty' | 'isnotempty' | 'matches';
+export interface WhenPredicate {
+    kind: 'predicate';
+    left: WhenOperand;
+    op: WhenOp;
+    right?: WhenOperand;
+}
+export interface WhenGroup {
+    kind: 'group';
+    op: 'AND' | 'OR';
+    children: WhenNode[];
+    negate?: boolean;
+}
+export type WhenNode = WhenPredicate | WhenGroup;
+export interface SetVariableAction {
+    type: 'set_variable';
+    name: string;
+    seed_slug?: string;
+    fixed_id?: string;
+    column?: string;
+    filters?: TriggerCondition[];
+    order_by?: string;
+    order?: 'asc' | 'desc';
+    /** @deprecated Read but ignored at runtime. Removed on next save. */
+    load_type?: 'fruit' | 'branch';
+}
+export type AutomationAction = {
+    type: 'webhook';
+    url: string;
+    method?: 'POST' | 'GET' | 'PUT';
+    headers?: Record<string, string>;
+    body_template?: string;
+} | {
+    type: 'send_mail';
+    to: string;
+    subject_template: string;
+    body_template: string;
+} | {
+    type: 'edit_field';
+    field: string;
+    value: unknown;
+} | {
+    type: 'create_entry';
+    seed_slug: string;
+    field_map: Record<string, string>;
+} | SetVariableAction;
+export interface Automation {
+    id: string;
+    seed_slug: string;
+    name: string;
+    enabled: boolean;
+    triggers: AutomationTrigger[];
+    trigger_conditions: WhenNode | null;
+    actions: AutomationAction[];
+    created_at: number;
+    updated_at: number;
+}
+//# sourceMappingURL=automations.types.d.ts.map

package/dist/automations.types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"automations.types.d.ts","sourceRoot":"","sources":["../src/automations.types.ts"],"names":[],"mappings":"AAGA,MAAM,MAAM,sBAAsB,GAAG,QAAQ,GAAG,QAAQ,GAAG,QAAQ,GAAG,MAAM,CAAA;AAE5E,MAAM,WAAW,iBAAiB;IAChC,KAAK,EAAE,sBAAsB,CAAA;IAC7B,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;CACrB;AAED,MAAM,WAAW,gBAAgB;IAC/B,KAAK,EAAE,MAAM,CAAA;IACb,EAAE,EAAE,IAAI,GAAG,KAAK,GAAG,UAAU,GAAG,IAAI,GAAG,IAAI,GAAG,SAAS,GAAG,YAAY,CAAA;IACtE,KAAK,EAAE,OAAO,CAAA;CACf;AAMD,MAAM,MAAM,WAAW,GACnB;IAAE,IAAI,EAAE,SAAS,CAAC;IAAC,KAAK,EAAE,OAAO,CAAA;CAAE,GACnC;IAAE,IAAI,EAAE,KAAK,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,CAAA;AAEhC,MAAM,MAAM,MAAM,GACd,IAAI,GAAG,KAAK,GACZ,IAAI,GAAG,KAAK,GAAG,IAAI,GAAG,KAAK,GAC3B,UAAU,GAAG,YAAY,GAAG,UAAU,GACtC,IAAI,GAAG,OAAO,GACd,SAAS,GAAG,YAAY,GACxB,SAAS,CAAA;AAEb,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,WAAW,CAAA;IACjB,IAAI,EAAE,WAAW,CAAA;IACjB,EAAE,EAAE,MAAM,CAAA;IACV,KAAK,CAAC,EAAE,WAAW,CAAA;CACpB;AAED,MAAM,WAAW,SAAS;IACxB,IAAI,EAAE,OAAO,CAAA;IACb,EAAE,EAAE,KAAK,GAAG,IAAI,CAAA;IAChB,QAAQ,EAAE,QAAQ,EAAE,CAAA;IACpB,MAAM,CAAC,EAAE,OAAO,CAAA;CACjB;AAED,MAAM,MAAM,QAAQ,GAAG,aAAa,GAAG,SAAS,CAAA;AAEhD,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,cAAc,CAAA;IACpB,IAAI,EAAE,MAAM,CAAA;IACZ,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,OAAO,CAAC,EAAE,gBAAgB,EAAE,CAAA;IAC5B,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,KAAK,CAAC,EAAE,KAAK,GAAG,MAAM,CAAA;IACtB,qEAAqE;IACrE,SAAS,CAAC,EAAE,OAAO,GAAG,QAAQ,CAAA;CAC/B;AAED,MAAM,MAAM,gBAAgB,GACxB;IAAE,IAAI,EAAE,SAAS,CAAC;IAAM,GAAG,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,GAAG,KAAK,GAAG,KAAK,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAAC,aAAa,CAAC,EAAE,MAAM,CAAA;CAAE,GAChI;IAAE,IAAI,EAAE,WAAW,CAAC;IAAI,EAAE,EAAE,MAAM,CAAC;IAAC,gBAAgB,EAAE,MAAM,CAAC;IAAC,aAAa,EAAE,MAAM,CAAA;CAAE,GACrF;IAAE,IAAI,EAAE,YAAY,CAAC;IAAG,KAAK,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,OAAO,CAAA;CAAE,GACvD;IAAE,IAAI,EAAE,cAAc,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;CAAE,GAC9E,iBAAiB,CAAA;AAErB,MAAM,WAAW,UAAU;IACzB,EAAE,EAAE,MAAM,CAAA;IACV,SAAS,EAAE,MAAM,CAAA;IACjB,IAAI,EAAE,MAAM,CAAA;IACZ,OAAO,EAAE,OAAO,CAAA;IAChB,QAAQ,EAAE,iBAAiB,EAAE,CAAA;IAC7B,kBAAkB,EAAE,QAAQ,GAAG,IAAI,CAAA;IACnC,OAAO,EAAE,gBAAgB,EAAE,CAAA;IAC3B,UAAU,EAAE,MAAM,CAAA;IAClB,UAAU,EAAE,MAAM,CAAA;CACnB"}

package/dist/automations.types.js

@@ -0,0 +1,3 @@
+// SPDX-License-Identifier: MIT
+// Copyright (c) 2024–2026 Flavio De Musso
+export {};

package/dist/clock.d.ts

@@ -0,0 +1,25 @@
+/**
+ * Time abstraction. Hides direct calls to {@link Date.now} so callers can
+ * swap in deterministic clocks during tests without resorting to global
+ * timer mocks (e.g. vi.useFakeTimers, sinon, monkey-patching Date).
+ */
+export interface IClock {
+    /**
+     * Returns the current Unix timestamp in milliseconds.
+     * Equivalent to Date.now() in production.
+     * Overridable in tests for deterministic time-sensitive assertions.
+     */
+    now(): number;
+    /**
+     * Returns the current Unix timestamp in whole seconds.
+     * Equivalent to Math.floor(Date.now() / 1000) in production.
+     * Used by JWT issuance, session expiry, and analytics day-bucket computations.
+     */
+    nowSeconds(): number;
+}
+/**
+ * Production singleton. Delegates to the host runtime clock. Stateless and
+ * therefore safe to share across requests.
+ */
+export declare const SystemClock: IClock;
+//# sourceMappingURL=clock.d.ts.map

package/dist/clock.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"clock.d.ts","sourceRoot":"","sources":["../src/clock.ts"],"names":[],"mappings":"AAGA;;;;GAIG;AACH,MAAM,WAAW,MAAM;IACrB;;;;OAIG;IACH,GAAG,IAAI,MAAM,CAAA;IAEb;;;;OAIG;IACH,UAAU,IAAI,MAAM,CAAA;CACrB;AAID;;;GAGG;AACH,eAAO,MAAM,WAAW,EAAE,MAGzB,CAAA"}

package/dist/clock.js

@@ -0,0 +1,11 @@
+// SPDX-License-Identifier: MIT
+// Copyright (c) 2024–2026 Flavio De Musso
+const MILLISECONDS_PER_SECOND = 1000;
+/**
+ * Production singleton. Delegates to the host runtime clock. Stateless and
+ * therefore safe to share across requests.
+ */
+export const SystemClock = {
+    now: () => Date.now(),
+    nowSeconds: () => Math.floor(Date.now() / MILLISECONDS_PER_SECOND),
+};

package/dist/common/canonical-json.d.ts

@@ -0,0 +1,30 @@
+/**
+ * @module common/canonical-json
+ * Deterministic JSON serialization, shared by two callers that must never disagree:
+ * the manifest writer (`schema/canonical.ts`, authoring-side) and the schema fingerprint
+ * (`engine/schema-fingerprint.ts`, runtime-side).
+ *
+ * Moved here in sprint 2 because the fingerprint runs inside the Worker and `schema/` is the one
+ * module the Worker must never import. The BYTES ARE FROZEN — sprint 1 declared this format a
+ * compatibility surface, and a published client's fingerprint is only comparable as long as it
+ * stays byte-stable. Changing key ordering, indentation or the trailing newline invalidates every
+ * already-published client and requires a `SCHEMA_FINGERPRINT_VERSION` bump.
+ */
+/** Thrown when a value cannot survive a JSON round-trip. */
+export declare class CanonicalSerializationError extends Error {
+    /** Dotted path to the offending value, e.g. `seeds[0].branches[2].validate`. */
+    readonly path: string;
+    /** What was found there, e.g. `function`. */
+    readonly found: string;
+    constructor(
+    /** Dotted path to the offending value, e.g. `seeds[0].branches[2].validate`. */
+    path: string, 
+    /** What was found there, e.g. `function`. */
+    found: string);
+}
+/**
+ * Serializes any value to its canonical form: keys sorted, two-space indentation, trailing newline.
+ * Stable across key insertion order and across authoring order.
+ */
+export declare function canonicalStringify(value: unknown): string;
+//# sourceMappingURL=canonical-json.d.ts.map

package/dist/common/canonical-json.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"canonical-json.d.ts","sourceRoot":"","sources":["../../src/common/canonical-json.ts"],"names":[],"mappings":"AAGA;;;;;;;;;;;GAWG;AAEH,4DAA4D;AAC5D,qBAAa,2BAA4B,SAAQ,KAAK;IAElD,gFAAgF;IAChF,QAAQ,CAAC,IAAI,EAAE,MAAM;IACrB,6CAA6C;IAC7C,QAAQ,CAAC,KAAK,EAAE,MAAM;;IAHtB,gFAAgF;IACvE,IAAI,EAAE,MAAM;IACrB,6CAA6C;IACpC,KAAK,EAAE,MAAM;CAQzB;AA8CD;;;GAGG;AACH,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAEzD"}

package/dist/common/canonical-json.js

@@ -0,0 +1,89 @@
+// SPDX-License-Identifier: MIT
+// Copyright (c) 2024–2026 Flavio De Musso
+/**
+ * @module common/canonical-json
+ * Deterministic JSON serialization, shared by two callers that must never disagree:
+ * the manifest writer (`schema/canonical.ts`, authoring-side) and the schema fingerprint
+ * (`engine/schema-fingerprint.ts`, runtime-side).
+ *
+ * Moved here in sprint 2 because the fingerprint runs inside the Worker and `schema/` is the one
+ * module the Worker must never import. The BYTES ARE FROZEN — sprint 1 declared this format a
+ * compatibility surface, and a published client's fingerprint is only comparable as long as it
+ * stays byte-stable. Changing key ordering, indentation or the trailing newline invalidates every
+ * already-published client and requires a `SCHEMA_FINGERPRINT_VERSION` bump.
+ */
+/** Thrown when a value cannot survive a JSON round-trip. */
+export class CanonicalSerializationError extends Error {
+    path;
+    found;
+    constructor(
+    /** Dotted path to the offending value, e.g. `seeds[0].branches[2].validate`. */
+    path, 
+    /** What was found there, e.g. `function`. */
+    found) {
+        super(`Manifest value at '${path}' is a ${found}, which cannot be persisted. ` +
+            `A manifest holds serializable JSON only — no callbacks, class instances, Date, Map, Set or RegExp.`);
+        this.path = path;
+        this.found = found;
+        this.name = 'CanonicalSerializationError';
+    }
+}
+function describe(value) {
+    if (value === null)
+        return null;
+    const type = typeof value;
+    if (type === 'function')
+        return 'function';
+    if (type === 'symbol')
+        return 'symbol';
+    if (type === 'bigint')
+        return 'bigint';
+    if (type === 'undefined')
+        return 'undefined';
+    if (type === 'number' && !Number.isFinite(value))
+        return 'non-finite number';
+    if (type !== 'object')
+        return null;
+    if (Array.isArray(value))
+        return null;
+    const proto = Object.getPrototypeOf(value);
+    if (proto !== Object.prototype && proto !== null)
+        return value.constructor?.name ?? 'class instance';
+    return null;
+}
+/**
+ * Canonicalizes one value: object keys sorted lexicographically, `undefined` properties dropped,
+ * array ORDER preserved (branch order is the physical column order — it is data, not formatting).
+ */
+function canonicalize(value, path) {
+    const offence = describe(value);
+    if (offence)
+        throw new CanonicalSerializationError(path, offence);
+    if (value === null)
+        return null;
+    if (Array.isArray(value)) {
+        return value.map((item, index) => {
+            if (item === undefined)
+                throw new CanonicalSerializationError(`${path}[${index}]`, 'undefined');
+            return canonicalize(item, `${path}[${index}]`);
+        });
+    }
+    if (typeof value === 'object') {
+        const out = {};
+        for (const key of Object.keys(value).sort()) {
+            const child = value[key];
+            if (child === undefined)
+                continue;
+            out[key] = canonicalize(child, path ? `${path}.${key}` : key);
+        }
+        return out;
+    }
+    return value;
+}
+/**
+ * Serializes any value to its canonical form: keys sorted, two-space indentation, trailing newline.
+ * Stable across key insertion order and across authoring order.
+ */
+export function canonicalStringify(value) {
+    return `${JSON.stringify(canonicalize(value, ''), null, 2)}\n`;
+}

package/dist/common/hooks.d.ts

@@ -1,5 +1,6 @@
 import type { ContentRepository } from '../content/content.repository.js';
 import type { Seed } from '../engine/types.js';
+import type { IQueueService } from '../queue/queue.interface.js';
 export interface HookActor {
     id: string;
     role?: string;
@@ -17,6 +18,8 @@ export interface HookContext {
      * scrivere qui bypassa la Botanical Engine.
      */
     db: unknown;
+    /** Optional queue service for enqueuing async jobs from hooks. */
+    queue?: IQueueService;
 }
 export interface BeechHooks {
     beforeCreate?: (data: Record<string, any>, ctx: HookContext) => Promise<Record<string, any> | void> | Record<string, any> | void;

package/dist/common/hooks.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"hooks.d.ts","sourceRoot":"","sources":["../../src/common/hooks.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,kCAAkC,CAAA;AACzE,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,oBAAoB,CAAA;AAE9C,MAAM,WAAW,SAAS;IACxB,EAAE,EAAE,MAAM,CAAA;IACV,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,KAAK,CAAC,EAAE,MAAM,CAAA;CACf;AAED,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,IAAI,CAAA;IACV,6FAA6F;IAC7F,UAAU,EAAE,iBAAiB,CAAA;IAC7B,gGAAgG;IAChG,KAAK,CAAC,EAAE,SAAS,CAAA;IACjB;;;;OAIG;IACH,EAAE,EAAE,OAAO,CAAA;CACZ;AAED,MAAM,WAAW,UAAU;IAGzB,YAAY,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,EAAE,GAAG,EAAE,WAAW,KAAK,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,IAAI,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,IAAI,CAAA;IAChI,YAAY,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,EAAE,GAAG,EAAE,WAAW,KAAK,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,IAAI,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,IAAI,CAAA;IAC/I,YAAY,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,KAAK,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAA;IAGrE,WAAW,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,EAAE,GAAG,EAAE,WAAW,KAAK,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAA;IACpF,WAAW,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,EAAE,GAAG,EAAE,WAAW,KAAK,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAA;IACpF,WAAW,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,KAAK,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAA;CACrE"}
+{"version":3,"file":"hooks.d.ts","sourceRoot":"","sources":["../../src/common/hooks.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,kCAAkC,CAAA;AACzE,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,oBAAoB,CAAA;AAE9C,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,6BAA6B,CAAA;AAEhE,MAAM,WAAW,SAAS;IACxB,EAAE,EAAE,MAAM,CAAA;IACV,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,KAAK,CAAC,EAAE,MAAM,CAAA;CACf;AAED,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,IAAI,CAAA;IACV,6FAA6F;IAC7F,UAAU,EAAE,iBAAiB,CAAA;IAC7B,gGAAgG;IAChG,KAAK,CAAC,EAAE,SAAS,CAAA;IACjB;;;;OAIG;IACH,EAAE,EAAE,OAAO,CAAA;IACX,kEAAkE;IAClE,KAAK,CAAC,EAAE,aAAa,CAAA;CACtB;AAED,MAAM,WAAW,UAAU;IAGzB,YAAY,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,EAAE,GAAG,EAAE,WAAW,KAAK,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,IAAI,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,IAAI,CAAA;IAChI,YAAY,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,EAAE,GAAG,EAAE,WAAW,KAAK,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,IAAI,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,IAAI,CAAA;IAC/I,YAAY,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,KAAK,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAA;IAGrE,WAAW,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,EAAE,GAAG,EAAE,WAAW,KAAK,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAA;IACpF,WAAW,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,EAAE,GAAG,EAAE,WAAW,KAAK,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAA;IACpF,WAAW,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,KAAK,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAA;CACrE"}

package/dist/content/content.repository.d.ts

@@ -19,8 +19,8 @@ export interface DraftSummary {
  * Base Repository Error
  */
 export declare class RepositoryError extends Error {
-    cause?: unknown | undefined;
-    constructor(message: string, cause?: unknown | undefined);
+    cause?: unknown;
+    constructor(message: string, cause?: unknown);
 }
 /**
  * Thrown when an entry is not found by ID or Slug

package/dist/content/content.repository.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"content.repository.d.ts","sourceRoot":"","sources":["../../src/content/content.repository.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAA;AAExD;;;;GAIG;AACH,MAAM,WAAW,YAAY;IAC3B,EAAE,EAAE,MAAM,CAAA;IACV,QAAQ,EAAE,MAAM,CAAA;IAChB,SAAS,EAAE,MAAM,CAAA;IACjB,KAAK,EAAE,MAAM,CAAA;IACb,SAAS,EAAE,MAAM,CAAA;IACjB,cAAc,EAAE;QACd,IAAI,EAAE,MAAM,GAAG,IAAI,CAAA;QACnB,KAAK,EAAE,MAAM,CAAA;KACd,CAAA;CACF;AAED;;GAEG;AACH,qBAAa,eAAgB,SAAQ,KAAK;IACJ,KAAK,CAAC,EAAE,OAAO;gBAAvC,OAAO,EAAE,MAAM,EAAS,KAAK,CAAC,EAAE,OAAO,YAAA;CAIpD;AAED;;GAEG;AACH,qBAAa,kBAAmB,SAAQ,eAAe;gBACzC,OAAO,EAAE,MAAM;CAI5B;AAED;;GAEG;AACH,qBAAa,iBAAkB,SAAQ,eAAe;gBACxC,OAAO,EAAE,MAAM;CAI5B;AAED;;;GAGG;AACH,qBAAa,2BAA4B,SAAQ,eAAe;IAC9D,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;gBAEV,MAAM,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE;CASzE;AAED;;;GAGG;AACH,qBAAa,mBAAoB,SAAQ,eAAe;IACtD,QAAQ,CAAC,MAAM,CAAC,EAAE,KAAK,CAAC;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;gBAE/C,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,KAAK,CAAC;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;CAKhF;AAED,MAAM,MAAM,eAAe,GACvB;IAAE,IAAI,EAAE,KAAK,CAAC;IAAC,KAAK,EAAE,OAAO,CAAA;CAAE,GAC/B;IAAE,IAAI,EAAE,eAAe,CAAC;IAAC,KAAK,EAAE,MAAM,EAAE,CAAA;CAAE,GAC1C;IAAE,IAAI,EAAE,WAAW,CAAC;IAAC,KAAK,EAAE,MAAM,EAAE,CAAA;CAAE,GACtC;IAAE,IAAI,EAAE,cAAc,CAAC;IAAC,KAAK,EAAE,MAAM,EAAE,CAAA;CAAE,CAAA;AAE7C;;;GAGG;AACH,MAAM,WAAW,iBAAiB;IAChC,KAAK,CAAC,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,CAAA;CACtD;AAED;;;;;;;GAOG;AACH,MAAM,MAAM,UAAU,GAClB;IAAE,IAAI,EAAE,QAAQ,CAAC;IAAC,IAAI,EAAE,IAAI,CAAC;IAAC,EAAE,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;CAAE,GACnG;IAAE,IAAI,EAAE,QAAQ,CAAC;IAAC,IAAI,EAAE,IAAI,CAAC;IAAC,EAAE,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,GACtF;IAAE,IAAI,EAAE,aAAa,CAAC;IAAC,IAAI,EAAE,IAAI,CAAC;IAAC,EAAE,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE;QAAE,IAAI,EAAE,WAAW,GAAG,WAAW,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC;IAAC,OAAO,CAAC,EAAE;QAAE,GAAG,CAAC,EAAE,MAAM,CAAC;QAAC,GAAG,CAAC,EAAE,MAAM,CAAA;KAAE,CAAA;CAAE,CAAA;AAE/K;;;GAGG;AACH,MAAM,WAAW,iBAAiB;IAChC;;OAEG;IACH,QAAQ,CAAC,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,aAAa,GAAG,OAAO,CAAC;QAAE,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,EAAE,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;IAEtG;;;OAGG;IACH,QAAQ,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,CAAA;IAE9D;;;OAGG;IACH,UAAU,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,CAAA;IAElE;;OAEG;IACH,SAAS,CAAC,IAAI,EAAE,IAAI,GAAG,OAAO,CAAC;QAC7B,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;QAChC,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAA;KACvC,CAAC,CAAA;IAEF;;;OAGG;IACH,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,EAAE,OAAO,CAAC,EAAE,iBAAiB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAEnI;;;OAGG;IACH,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,EAAE,MAAM,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,iBAAiB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAEtH;;;;OAIG;IACH,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,iBAAiB,GAAG,OAAO,CAAC;QAAE,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;KAAE,CAAC,CAAA;IAElG;;;;;;OAMG;IACH,WAAW,CACT,IAAI,EAAE,IAAI,EACV,EAAE,EAAE,MAAM,EACV,SAAS,EAAE,MAAM,EACjB,SAAS,EAAE;QAAE,IAAI,EAAE,WAAW,GAAG,WAAW,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,EAC7D,OAAO,CAAC,EAAE;QAAE,GAAG,CAAC,EAAE,MAAM,CAAC;QAAC,GAAG,CAAC,EAAE,MAAM,CAAA;KAAE,GACvC,OAAO,CAAC;QAAE,QAAQ,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;IAEhC;;;OAGG;IACH,wBAAwB,CACtB,IAAI,EAAE,IAAI,EACV,EAAE,EAAE,MAAM,EACV,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,EACrC,QAAQ,EAAE,MAAM,EAChB,YAAY,EAAE,MAAM,EACpB,GAAG,EAAE;QAAE,KAAK,EAAE,MAAM,CAAA;KAAE,GACrB,OAAO,CAAC;QAAE,OAAO,EAAE,OAAO,CAAA;KAAE,CAAC,CAAA;IAEhC;;;OAGG;IACH,QAAQ,CAAC,UAAU,EAAE,UAAU,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAEjD;;OAEG;IACH,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAEhF;;;OAGG;IACH,QAAQ,CAAC,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,IAAI,CAAC,CAAA;IAE1E;;;OAGG;IACH,YAAY,CAAC,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAExD;;OAEG;IACH,WAAW,CAAC,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAEvD;;OAEG;IACH,UAAU,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAA;IAE1E;;OAEG;IACH,QAAQ,CAAC,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAA;IAEvD;;;;;OAKG;IACH,iBAAiB,CAAC,KAAK,EAAE,IAAI,EAAE,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC,CAAA;IAEzD;;;;OAIG;IACH,UAAU,CACR,IAAI,EAAE,IAAI,EACV,GAAG,EAAE,MAAM,EAAE,EACb,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,eAAe,CAAC,GACtC,OAAO,CAAC;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,KAAK,CAAC;YAAE,EAAE,EAAE,MAAM,CAAC;YAAC,MAAM,EAAE,MAAM,CAAA;SAAE,CAAC,CAAA;KAAE,CAAC,CAAA;CAC/E"}
+{"version":3,"file":"content.repository.d.ts","sourceRoot":"","sources":["../../src/content/content.repository.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAA;AAExD;;;;GAIG;AACH,MAAM,WAAW,YAAY;IAC3B,EAAE,EAAE,MAAM,CAAA;IACV,QAAQ,EAAE,MAAM,CAAA;IAChB,SAAS,EAAE,MAAM,CAAA;IACjB,KAAK,EAAE,MAAM,CAAA;IACb,SAAS,EAAE,MAAM,CAAA;IACjB,cAAc,EAAE;QACd,IAAI,EAAE,MAAM,GAAG,IAAI,CAAA;QACnB,KAAK,EAAE,MAAM,CAAA;KACd,CAAA;CACF;AAED;;GAEG;AACH,qBAAa,eAAgB,SAAQ,KAAK;IACJ,KAAK,CAAC,EAAE,OAAO;IAAnD,YAAY,OAAO,EAAE,MAAM,EAAS,KAAK,CAAC,EAAE,OAAO,EAGlD;CACF;AAED;;GAEG;AACH,qBAAa,kBAAmB,SAAQ,eAAe;IACrD,YAAY,OAAO,EAAE,MAAM,EAG1B;CACF;AAED;;GAEG;AACH,qBAAa,iBAAkB,SAAQ,eAAe;IACpD,YAAY,OAAO,EAAE,MAAM,EAG1B;CACF;AAED;;;GAGG;AACH,qBAAa,2BAA4B,SAAQ,eAAe;IAC9D,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;IAEtB,YAAY,MAAM,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,EAQvE;CACF;AAED;;;GAGG;AACH,qBAAa,mBAAoB,SAAQ,eAAe;IACtD,QAAQ,CAAC,MAAM,CAAC,EAAE,KAAK,CAAC;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;IAE3D,YAAY,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,KAAK,CAAC;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC,EAI9E;CACF;AAED,MAAM,MAAM,eAAe,GACvB;IAAE,IAAI,EAAE,KAAK,CAAC;IAAC,KAAK,EAAE,OAAO,CAAA;CAAE,GAC/B;IAAE,IAAI,EAAE,eAAe,CAAC;IAAC,KAAK,EAAE,MAAM,EAAE,CAAA;CAAE,GAC1C;IAAE,IAAI,EAAE,WAAW,CAAC;IAAC,KAAK,EAAE,MAAM,EAAE,CAAA;CAAE,GACtC;IAAE,IAAI,EAAE,cAAc,CAAC;IAAC,KAAK,EAAE,MAAM,EAAE,CAAA;CAAE,CAAA;AAE7C;;;GAGG;AACH,MAAM,WAAW,iBAAiB;IAChC,KAAK,CAAC,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,CAAA;CACtD;AAED;;;;;;;GAOG;AACH,MAAM,MAAM,UAAU,GAClB;IAAE,IAAI,EAAE,QAAQ,CAAC;IAAC,IAAI,EAAE,IAAI,CAAC;IAAC,EAAE,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;CAAE,GACnG;IAAE,IAAI,EAAE,QAAQ,CAAC;IAAC,IAAI,EAAE,IAAI,CAAC;IAAC,EAAE,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,GACtF;IAAE,IAAI,EAAE,aAAa,CAAC;IAAC,IAAI,EAAE,IAAI,CAAC;IAAC,EAAE,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE;QAAE,IAAI,EAAE,WAAW,GAAG,WAAW,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC;IAAC,OAAO,CAAC,EAAE;QAAE,GAAG,CAAC,EAAE,MAAM,CAAC;QAAC,GAAG,CAAC,EAAE,MAAM,CAAA;KAAE,CAAA;CAAE,CAAA;AAE/K;;;GAGG;AACH,MAAM,WAAW,iBAAiB;IAChC;;OAEG;IACH,QAAQ,CAAC,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,aAAa,GAAG,OAAO,CAAC;QAAE,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,EAAE,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;IAEtG;;;OAGG;IACH,QAAQ,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,CAAA;IAE9D;;;OAGG;IACH,UAAU,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,CAAA;IAElE;;OAEG;IACH,SAAS,CAAC,IAAI,EAAE,IAAI,GAAG,OAAO,CAAC;QAC7B,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;QAChC,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAA;KACvC,CAAC,CAAA;IAEF;;;OAGG;IACH,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,EAAE,OAAO,CAAC,EAAE,iBAAiB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAEnI;;;OAGG;IACH,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,EAAE,MAAM,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,iBAAiB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAEtH;;;;OAIG;IACH,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,iBAAiB,GAAG,OAAO,CAAC;QAAE,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;KAAE,CAAC,CAAA;IAElG;;;;;;OAMG;IACH,WAAW,CACT,IAAI,EAAE,IAAI,EACV,EAAE,EAAE,MAAM,EACV,SAAS,EAAE,MAAM,EACjB,SAAS,EAAE;QAAE,IAAI,EAAE,WAAW,GAAG,WAAW,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,EAC7D,OAAO,CAAC,EAAE;QAAE,GAAG,CAAC,EAAE,MAAM,CAAC;QAAC,GAAG,CAAC,EAAE,MAAM,CAAA;KAAE,GACvC,OAAO,CAAC;QAAE,QAAQ,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;IAEhC;;;OAGG;IACH,wBAAwB,CACtB,IAAI,EAAE,IAAI,EACV,EAAE,EAAE,MAAM,EACV,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,EACrC,QAAQ,EAAE,MAAM,EAChB,YAAY,EAAE,MAAM,EACpB,GAAG,EAAE;QAAE,KAAK,EAAE,MAAM,CAAA;KAAE,GACrB,OAAO,CAAC;QAAE,OAAO,EAAE,OAAO,CAAA;KAAE,CAAC,CAAA;IAEhC;;;OAGG;IACH,QAAQ,CAAC,UAAU,EAAE,UAAU,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAEjD;;OAEG;IACH,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAEhF;;;OAGG;IACH,QAAQ,CAAC,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,IAAI,CAAC,CAAA;IAE1E;;;OAGG;IACH,YAAY,CAAC,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAExD;;OAEG;IACH,WAAW,CAAC,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAEvD;;OAEG;IACH,UAAU,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAA;IAE1E;;OAEG;IACH,QAAQ,CAAC,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAA;IAEvD;;;;;OAKG;IACH,iBAAiB,CAAC,KAAK,EAAE,IAAI,EAAE,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC,CAAA;IAEzD;;;;OAIG;IACH,UAAU,CACR,IAAI,EAAE,IAAI,EACV,GAAG,EAAE,MAAM,EAAE,EACb,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,eAAe,CAAC,GACtC,OAAO,CAAC;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,KAAK,CAAC;YAAE,EAAE,EAAE,MAAM,CAAC;YAAC,MAAM,EAAE,MAAM,CAAA;SAAE,CAAC,CAAA;KAAE,CAAC,CAAA;CAC/E"}

package/dist/content/deletion-ledger.d.ts

@@ -0,0 +1,39 @@
+/**
+ * The GDPR erasure record. It lives OUTSIDE D1 on purpose: a D1 Time Travel restore rewinds
+ * every table it wrote, including any local ledger, which would defeat the one guarantee this
+ * record exists to give — that an erasure stays erased.
+ */
+export interface DeletionLedgerEvent {
+    /** Seed slug the purged entry belonged to. */
+    seedSlug: string;
+    /** Entry id, the reconciliation key against a restored `content_{slug}` row. */
+    entryId: string;
+    /** Entry slug at purge time. Diagnostic only; `entryId` is the identity. */
+    entrySlug: string | null;
+    /** Unix seconds (`IClock`), never `Date.now()`. */
+    purgedAt: number;
+    /** Who ordered the purge. `null` for a system/reconciliation purge. */
+    actorId: string | null;
+    /** 'purge' = operator action; 'reconcile' = re-applied after a restore. */
+    reason: 'purge' | 'reconcile';
+}
+/**
+ * Append-only erasure log. `append` must be durable before the caller reports success:
+ * a purge whose event was lost is a purge that a restore can silently undo.
+ */
+export interface IDeletionLedger {
+    /** Records one erasure. Throws if the write did not land. */
+    append(event: DeletionLedgerEvent): Promise<void>;
+    /**
+     * Streams recorded erasures for one seed, newest-first is NOT guaranteed.
+     * `cursor` is opaque and comes from the previous page's `nextCursor`.
+     */
+    list(seedSlug: string, options?: {
+        limit?: number;
+        cursor?: string;
+    }): Promise<{
+        events: DeletionLedgerEvent[];
+        nextCursor?: string;
+    }>;
+}
+//# sourceMappingURL=deletion-ledger.d.ts.map

package/dist/content/deletion-ledger.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"deletion-ledger.d.ts","sourceRoot":"","sources":["../../src/content/deletion-ledger.ts"],"names":[],"mappings":"AAGA;;;;GAIG;AACH,MAAM,WAAW,mBAAmB;IAClC,8CAA8C;IAC9C,QAAQ,EAAE,MAAM,CAAA;IAChB,gFAAgF;IAChF,OAAO,EAAE,MAAM,CAAA;IACf,4EAA4E;IAC5E,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;IACxB,mDAAmD;IACnD,QAAQ,EAAE,MAAM,CAAA;IAChB,uEAAuE;IACvE,OAAO,EAAE,MAAM,GAAG,IAAI,CAAA;IACtB,2EAA2E;IAC3E,MAAM,EAAE,OAAO,GAAG,WAAW,CAAA;CAC9B;AAED;;;GAGG;AACH,MAAM,WAAW,eAAe;IAC9B,6DAA6D;IAC7D,MAAM,CAAC,KAAK,EAAE,mBAAmB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IACjD;;;OAGG;IACH,IAAI,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC;QAC7E,MAAM,EAAE,mBAAmB,EAAE,CAAA;QAC7B,UAAU,CAAC,EAAE,MAAM,CAAA;KACpB,CAAC,CAAA;CACH"}

package/dist/content/deletion-ledger.js

@@ -0,0 +1,3 @@
+// SPDX-License-Identifier: MIT
+// Copyright (c) 2024–2026 Flavio De Musso
+export {};

package/dist/content/richtext/richtext-render.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"richtext-render.d.ts","sourceRoot":"","sources":["../../../src/content/richtext/richtext-render.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,cAAc,CAAA;AAuD/C;;;GAGG;AACH,wBAAgB,0BAA0B,CAAC,KAAK,EAAE,OAAO,GAAG,WAAW,GAAG,IAAI,CAQ7E;AAED;;;GAGG;AACH,wBAAgB,cAAc,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAIrD"}
+{"version":3,"file":"richtext-render.d.ts","sourceRoot":"","sources":["../../../src/content/richtext/richtext-render.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,cAAc,CAAA;AA8D/C;;;GAGG;AACH,wBAAgB,0BAA0B,CAAC,KAAK,EAAE,OAAO,GAAG,WAAW,GAAG,IAAI,CAQ7E;AAED;;;GAGG;AACH,wBAAgB,cAAc,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CASrD"}

package/dist/content/richtext/richtext-render.js

@@ -9,6 +9,9 @@ import Superscript from '@tiptap/extension-superscript';
 import { Table, TableCell, TableHeader, TableRow } from '@tiptap/extension-table';
 import TextAlign from '@tiptap/extension-text-align';
 import { Mathematics } from '@tiptap/extension-mathematics';
+import { TextStyle } from '@tiptap/extension-text-style';
+import Color from '@tiptap/extension-color';
+import { TaskItem, TaskList } from '@tiptap/extension-list';
 import StarterKit from '@tiptap/starter-kit';
 import { isRichtextEnvelopeV1 } from './richtext.js';
 /**
@@ -38,6 +41,10 @@ function createRichTextHtmlExtensions() {
         Highlight,
         Superscript,
         Subscript,
+        TextStyle,
+        Color,
+        TaskList,
+        TaskItem,
         Image.configure({
             allowBase64: false,
         }),
@@ -76,5 +83,11 @@ export function renderRichText(value) {
     const normalized = normalizeRichtextForRender(value);
     if (normalized == null)
         return '';
-    return generateHTML(normalized, createRichTextHtmlExtensions());
+    try {
+        return generateHTML(normalized, createRichTextHtmlExtensions());
+    }
+    catch (error) {
+        console.warn('[BeechCMS RichText] Failed to render rich text document:', error);
+        return '';
+    }
 }

package/dist/content/seed.repository.d.ts

@@ -33,5 +33,27 @@ export interface ISeedRepository {
     getRegistryVersion(): Promise<number>;
     /** Atomically increment and return the new token. Call after any write. */
     bumpRegistryVersion(): Promise<number>;
+    /** Applies additive DDL, the definition upsert and the registry-version bump as ONE
+     *  transactional batch, guarded by compare-and-swap on seed_meta.registry_version.
+     *  All-or-nothing: a guard mismatch or a failing statement writes nothing.
+     *  The DDL strings MUST come from the core planners — this method never generates SQL. */
+    applyAtomic(input: SeedApplyInput): Promise<SeedApplyResult>;
+}
+/** Input for an atomic, OCC-guarded schema apply. */
+export interface SeedApplyInput {
+    slug: string;
+    /** Full canonical definition to store in `seeds.definition`. */
+    definition: Seed;
+    /** Additive DDL produced by planCreateSeed / planExtendSeed. Never destructive. */
+    ddl: string[];
+    /** The registry_version the caller planned against (compare-and-swap guard). */
+    expectedVersion: number;
+    source?: 'code' | 'runtime';
+}
+export interface SeedApplyResult {
+    /** false when the CAS guard did not match — nothing was written. */
+    applied: boolean;
+    /** The version now in D1: expectedVersion + 1 on success, the live value on conflict. */
+    version: number;
 }
 //# sourceMappingURL=seed.repository.d.ts.map