@beechcms/core 0.8.0 → 0.8.1

package/dist/content.repository.d.ts

@@ -0,0 +1,247 @@
+import { Seed, SelectOptions } from './types.js';
+/**
+ * One row of the cross-seed pending-drafts overview. Aggregates the minimum a
+ * reviewer needs to triage a draft without opening it: which seed it belongs to,
+ * a human title, when it was last touched, and who touched it.
+ */
+export interface DraftSummary {
+    id: string;
+    seedSlug: string;
+    seedLabel: string;
+    title: string;
+    updatedAt: number;
+    lastModifiedBy: {
+        name: string | null;
+        email: string;
+    };
+}
+/**
+ * Base Repository Error
+ */
+export declare class RepositoryError extends Error {
+    cause?: unknown | undefined;
+    constructor(message: string, cause?: unknown | undefined);
+}
+/**
+ * Thrown when an entry is not found by ID or Slug
+ */
+export declare class EntryNotFoundError extends RepositoryError {
+    constructor(message: string);
+}
+/**
+ * Thrown when a slug already exists for a content type
+ */
+export declare class SlugConflictError extends RepositoryError {
+    constructor(message: string);
+}
+/**
+ * Thrown by publishDraft when a non-null relation value points to a missing
+ * target row. Mapped to 422 Unprocessable Entity by the API problem-mapper.
+ */
+export declare class RelationTargetNotFoundError extends RepositoryError {
+    readonly alias: string;
+    readonly targetSeed: string;
+    readonly value: string;
+    constructor(params: {
+        alias: string;
+        targetSeed: string;
+        value: string;
+    });
+}
+/**
+ * Thrown by lifecycle `before*` hooks to signal a business validation failure.
+ * Mapped to 422 Unprocessable Entity by the API problem-mapper.
+ */
+export declare class HookValidationError extends RepositoryError {
+    readonly fields?: Array<{
+        field: string;
+        message: string;
+    }>;
+    constructor(message: string, fields?: Array<{
+        field: string;
+        message: string;
+    }>);
+}
+export type BulkFieldUpdate = {
+    kind: 'set';
+    value: unknown;
+} | {
+    kind: 'array_replace';
+    value: string[];
+} | {
+    kind: 'array_add';
+    value: string[];
+} | {
+    kind: 'array_remove';
+    value: string[];
+};
+/**
+ * Options passed to write operations. Currently carries the acting user
+ * (extracted from the JWT) so lifecycle hooks can attribute changes.
+ */
+export interface RepositoryOptions {
+    actor?: {
+        id: string;
+        role?: string;
+        email?: string;
+    };
+}
+/**
+ * Declarative multi-write operation translated into a single `db.batch` call.
+ * Used for coordinated writes across one or more seeds when D1's lack of
+ * interactive transactions makes a callback-based API impossible.
+ *
+ * NOTE: document-level lifecycle hooks do NOT run for operations inside a
+ * `runBatch` call — they would be non-atomic side-effects.
+ */
+export type BatchWrite = {
+    kind: 'create';
+    seed: Seed;
+    id: string;
+    slug: string;
+    status: string;
+    data: Record<string, any>;
+} | {
+    kind: 'update';
+    seed: Seed;
+    id: string;
+    data: Record<string, any>;
+    status?: string;
+} | {
+    kind: 'mutateField';
+    seed: Seed;
+    id: string;
+    fieldName: string;
+    operation: {
+        type: 'increment' | 'decrement';
+        value: number;
+    };
+    options?: {
+        min?: number;
+        max?: number;
+    };
+};
+/**
+ * Interface defining the standard operations for content persistence.
+ * This is platform-agnostic and should be implemented for specific databases (e.g., D1).
+ */
+export interface ContentRepository {
+    /**
+     * Retrieves a paginated and filtered list of entries.
+     */
+    findMany(seed: Seed, options: SelectOptions): Promise<{
+        items: Record<string, any>[];
+        total: number;
+    }>;
+    /**
+     * Finds a single entry by its unique ID.
+     * Throws EntryNotFoundError if not found.
+     */
+    findById(seed: Seed, id: string): Promise<Record<string, any>>;
+    /**
+     * Finds a single entry by its unique slug.
+     * Throws EntryNotFoundError if not found.
+     */
+    findBySlug(seed: Seed, slug: string): Promise<Record<string, any>>;
+    /**
+     * Computes facets (status counts and distinct tags) for a content type.
+     */
+    getFacets(seed: Seed): Promise<{
+        statuses: Record<string, number>;
+        tagsByColumn: Record<string, string[]>;
+    }>;
+    /**
+     * Creates a new content entry in the live table.
+     * Throws SlugConflictError if the slug is already taken.
+     */
+    create(seed: Seed, id: string, slug: string, status: string, data: Record<string, any>, options?: RepositoryOptions): Promise<void>;
+    /**
+     * Partially updates an existing entry in the live table.
+     * Throws EntryNotFoundError if the ID does not exist.
+     */
+    update(seed: Seed, id: string, data: Record<string, any>, status?: string, options?: RepositoryOptions): Promise<void>;
+    /**
+     * Deletes an entry from the live table.
+     * Returns the deleted row data (useful for media cleanup).
+     * Throws EntryNotFoundError if the ID does not exist.
+     */
+    delete(seed: Seed, id: string, options?: RepositoryOptions): Promise<{
+        row: Record<string, any>;
+    }>;
+    /**
+     * Atomically increments/decrements a numeric field with optional min/max guards.
+     * Bypasses document-level lifecycle hooks — it's a single UPDATE statement,
+     * used to prevent race conditions on counters (stock, balances).
+     * Throws RepositoryError if `fieldName` is not a numeric branch of `seed`, or
+     * if the guard conditions fail / the row does not exist.
+     */
+    mutateField(seed: Seed, id: string, fieldName: string, operation: {
+        type: 'increment' | 'decrement';
+        value: number;
+    }, options?: {
+        min?: number;
+        max?: number;
+    }): Promise<{
+        newValue: number;
+    }>;
+    /**
+     * Atomically applies an axis-value patch AND a kanban_positions upsert in one DB batch (KB-S04e).
+     * `patch` is null for same-column reorders (position only).
+     */
+    updateWithKanbanPosition(seed: Seed, id: string, patch: Record<string, unknown> | null, position: string, axisBranchId: string, ctx: {
+        actor: string;
+    }): Promise<{
+        success: boolean;
+    }>;
+    /**
+     * Executes a list of write operations atomically via a single `db.batch`.
+     * Document-level lifecycle hooks do NOT run for operations inside this call.
+     */
+    runBatch(operations: BatchWrite[]): Promise<void>;
+    /**
+     * Saves or updates a pending draft in the mirror table.
+     */
+    saveDraft(seed: Seed, entryId: string, data: Record<string, any>): Promise<void>;
+    /**
+     * Retrieves the pending draft for a given entry.
+     * Returns null if no draft exists.
+     */
+    getDraft(seed: Seed, entryId: string): Promise<Record<string, any> | null>;
+    /**
+     * Atomic promotion of a draft to the live table.
+     * Must use a transaction (db.batch) to update live and delete draft.
+     */
+    publishDraft(seed: Seed, entryId: string): Promise<void>;
+    /**
+     * Discards the pending draft.
+     */
+    deleteDraft(seed: Seed, entryId: string): Promise<void>;
+    /**
+     * Checks if a slug is already taken by another entry.
+     */
+    existsSlug(seed: Seed, slug: string, excludeId?: string): Promise<boolean>;
+    /**
+     * Checks if an entry has a pending draft.
+     */
+    hasDraft(seed: Seed, entryId: string): Promise<boolean>;
+    /**
+     * Aggregates pending drafts across every draft-enabled seed in a single round-trip.
+     * Exists so the unified /drafts view never issues one query per seed.
+     * @param seeds The draft-enabled seeds to scan (caller passes seedRegistry.draftEnabled()).
+     * @returns Drafts newest-first; empty array when no seeds or no drafts.
+     */
+    findPendingDrafts(seeds: Seed[]): Promise<DraftSummary[]>;
+    /**
+     * Apply the same field update to many entries. Returns per-id outcome.
+     * Caller is responsible for validation; this method assumes the payload is
+     * already shape-checked against the seed.
+     */
+    bulkUpdate(seedSlug: string, ids: string[], fields: Record<string, BulkFieldUpdate>): Promise<{
+        updated: number;
+        failed: Array<{
+            id: string;
+            reason: string;
+        }>;
+    }>;
+}
+//# sourceMappingURL=content.repository.d.ts.map

package/dist/content.repository.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"content.repository.d.ts","sourceRoot":"","sources":["../src/content.repository.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,MAAM,YAAY,CAAA;AAEhD;;;;GAIG;AACH,MAAM,WAAW,YAAY;IAC3B,EAAE,EAAE,MAAM,CAAA;IACV,QAAQ,EAAE,MAAM,CAAA;IAChB,SAAS,EAAE,MAAM,CAAA;IACjB,KAAK,EAAE,MAAM,CAAA;IACb,SAAS,EAAE,MAAM,CAAA;IACjB,cAAc,EAAE;QACd,IAAI,EAAE,MAAM,GAAG,IAAI,CAAA;QACnB,KAAK,EAAE,MAAM,CAAA;KACd,CAAA;CACF;AAED;;GAEG;AACH,qBAAa,eAAgB,SAAQ,KAAK;IACJ,KAAK,CAAC,EAAE,OAAO;gBAAvC,OAAO,EAAE,MAAM,EAAS,KAAK,CAAC,EAAE,OAAO,YAAA;CAIpD;AAED;;GAEG;AACH,qBAAa,kBAAmB,SAAQ,eAAe;gBACzC,OAAO,EAAE,MAAM;CAI5B;AAED;;GAEG;AACH,qBAAa,iBAAkB,SAAQ,eAAe;gBACxC,OAAO,EAAE,MAAM;CAI5B;AAED;;;GAGG;AACH,qBAAa,2BAA4B,SAAQ,eAAe;IAC9D,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;gBAEV,MAAM,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE;CASzE;AAED;;;GAGG;AACH,qBAAa,mBAAoB,SAAQ,eAAe;IACtD,QAAQ,CAAC,MAAM,CAAC,EAAE,KAAK,CAAC;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;gBAE/C,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,KAAK,CAAC;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;CAKhF;AAED,MAAM,MAAM,eAAe,GACvB;IAAE,IAAI,EAAE,KAAK,CAAC;IAAC,KAAK,EAAE,OAAO,CAAA;CAAE,GAC/B;IAAE,IAAI,EAAE,eAAe,CAAC;IAAC,KAAK,EAAE,MAAM,EAAE,CAAA;CAAE,GAC1C;IAAE,IAAI,EAAE,WAAW,CAAC;IAAC,KAAK,EAAE,MAAM,EAAE,CAAA;CAAE,GACtC;IAAE,IAAI,EAAE,cAAc,CAAC;IAAC,KAAK,EAAE,MAAM,EAAE,CAAA;CAAE,CAAA;AAE7C;;;GAGG;AACH,MAAM,WAAW,iBAAiB;IAChC,KAAK,CAAC,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,CAAA;CACtD;AAED;;;;;;;GAOG;AACH,MAAM,MAAM,UAAU,GAClB;IAAE,IAAI,EAAE,QAAQ,CAAC;IAAC,IAAI,EAAE,IAAI,CAAC;IAAC,EAAE,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;CAAE,GACnG;IAAE,IAAI,EAAE,QAAQ,CAAC;IAAC,IAAI,EAAE,IAAI,CAAC;IAAC,EAAE,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,GACtF;IAAE,IAAI,EAAE,aAAa,CAAC;IAAC,IAAI,EAAE,IAAI,CAAC;IAAC,EAAE,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE;QAAE,IAAI,EAAE,WAAW,GAAG,WAAW,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC;IAAC,OAAO,CAAC,EAAE;QAAE,GAAG,CAAC,EAAE,MAAM,CAAC;QAAC,GAAG,CAAC,EAAE,MAAM,CAAA;KAAE,CAAA;CAAE,CAAA;AAE/K;;;GAGG;AACH,MAAM,WAAW,iBAAiB;IAChC;;OAEG;IACH,QAAQ,CAAC,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,aAAa,GAAG,OAAO,CAAC;QAAE,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,EAAE,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;IAEtG;;;OAGG;IACH,QAAQ,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,CAAA;IAE9D;;;OAGG;IACH,UAAU,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,CAAA;IAElE;;OAEG;IACH,SAAS,CAAC,IAAI,EAAE,IAAI,GAAG,OAAO,CAAC;QAC7B,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;QAChC,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAA;KACvC,CAAC,CAAA;IAEF;;;OAGG;IACH,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,EAAE,OAAO,CAAC,EAAE,iBAAiB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAEnI;;;OAGG;IACH,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,EAAE,MAAM,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,iBAAiB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAEtH;;;;OAIG;IACH,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,iBAAiB,GAAG,OAAO,CAAC;QAAE,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;KAAE,CAAC,CAAA;IAElG;;;;;;OAMG;IACH,WAAW,CACT,IAAI,EAAE,IAAI,EACV,EAAE,EAAE,MAAM,EACV,SAAS,EAAE,MAAM,EACjB,SAAS,EAAE;QAAE,IAAI,EAAE,WAAW,GAAG,WAAW,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,EAC7D,OAAO,CAAC,EAAE;QAAE,GAAG,CAAC,EAAE,MAAM,CAAC;QAAC,GAAG,CAAC,EAAE,MAAM,CAAA;KAAE,GACvC,OAAO,CAAC;QAAE,QAAQ,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;IAEhC;;;OAGG;IACH,wBAAwB,CACtB,IAAI,EAAE,IAAI,EACV,EAAE,EAAE,MAAM,EACV,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,EACrC,QAAQ,EAAE,MAAM,EAChB,YAAY,EAAE,MAAM,EACpB,GAAG,EAAE;QAAE,KAAK,EAAE,MAAM,CAAA;KAAE,GACrB,OAAO,CAAC;QAAE,OAAO,EAAE,OAAO,CAAA;KAAE,CAAC,CAAA;IAEhC;;;OAGG;IACH,QAAQ,CAAC,UAAU,EAAE,UAAU,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAEjD;;OAEG;IACH,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAEhF;;;OAGG;IACH,QAAQ,CAAC,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,IAAI,CAAC,CAAA;IAE1E;;;OAGG;IACH,YAAY,CAAC,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAExD;;OAEG;IACH,WAAW,CAAC,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAEvD;;OAEG;IACH,UAAU,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAA;IAE1E;;OAEG;IACH,QAAQ,CAAC,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAA;IAEvD;;;;;OAKG;IACH,iBAAiB,CAAC,KAAK,EAAE,IAAI,EAAE,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC,CAAA;IAEzD;;;;OAIG;IACH,UAAU,CACR,QAAQ,EAAE,MAAM,EAChB,GAAG,EAAE,MAAM,EAAE,EACb,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,eAAe,CAAC,GACtC,OAAO,CAAC;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,KAAK,CAAC;YAAE,EAAE,EAAE,MAAM,CAAC;YAAC,MAAM,EAAE,MAAM,CAAA;SAAE,CAAC,CAAA;KAAE,CAAC,CAAA;CAC/E"}

package/dist/content.repository.js

@@ -0,0 +1,59 @@
+// SPDX-License-Identifier: MIT
+// Copyright (c) 2024–2026 Flavio De Musso
+/**
+ * Base Repository Error
+ */
+export class RepositoryError extends Error {
+    cause;
+    constructor(message, cause) {
+        super(message);
+        this.cause = cause;
+        this.name = 'RepositoryError';
+    }
+}
+/**
+ * Thrown when an entry is not found by ID or Slug
+ */
+export class EntryNotFoundError extends RepositoryError {
+    constructor(message) {
+        super(message);
+        this.name = 'EntryNotFoundError';
+    }
+}
+/**
+ * Thrown when a slug already exists for a content type
+ */
+export class SlugConflictError extends RepositoryError {
+    constructor(message) {
+        super(message);
+        this.name = 'SlugConflictError';
+    }
+}
+/**
+ * Thrown by publishDraft when a non-null relation value points to a missing
+ * target row. Mapped to 422 Unprocessable Entity by the API problem-mapper.
+ */
+export class RelationTargetNotFoundError extends RepositoryError {
+    alias;
+    targetSeed;
+    value;
+    constructor(params) {
+        super(`Relation target not found: field '${params.alias}' references '${params.targetSeed}' id='${params.value}' which does not exist`);
+        this.name = 'RelationTargetNotFoundError';
+        this.alias = params.alias;
+        this.targetSeed = params.targetSeed;
+        this.value = params.value;
+    }
+}
+/**
+ * Thrown by lifecycle `before*` hooks to signal a business validation failure.
+ * Mapped to 422 Unprocessable Entity by the API problem-mapper.
+ */
+export class HookValidationError extends RepositoryError {
+    fields;
+    constructor(message, fields) {
+        super(message);
+        this.name = 'HookValidationError';
+        this.fields = fields;
+    }
+}

package/dist/dashboard-layout.d.ts

@@ -0,0 +1,154 @@
+import { z } from 'zod';
+import type { Seed } from './types.js';
+/** A placed widget. `type` is namespaced ('core/stat', '@acme/weather').
+ *  `config` is opaque to core/API except for the optional `seedSlug` key,
+ *  which enables auto-cleanup when the referenced seed disappears. */
+export interface DashboardWidgetInstance {
+    id: string;
+    type: string;
+    title?: string;
+    config: Record<string, unknown>;
+}
+export interface DashboardColumn {
+    id: string;
+    widgets: DashboardWidgetInstance[];
+}
+export interface DashboardSection {
+    id: string;
+    label?: string;
+    hideLabel?: boolean;
+    collapsible?: boolean;
+    /** 1–4 columns. Enforced by validator. */
+    columns: DashboardColumn[];
+    /** Optional spans on a 12-unit grid, parallel to `columns`, must sum to 12.
+     *  Absent = equal split. */
+    columnSpans?: number[];
+}
+export interface DashboardPageLayout {
+    id: string;
+    /** URL identity (?page=<slug>). Unique within the layout. */
+    slug: string;
+    label: string;
+    /** Lucide icon name, same convention as DashboardSeedConfig.icon. */
+    icon?: string;
+    sections: DashboardSection[];
+}
+export interface DashboardLayout {
+    /** Format version — bump when introducing breaking changes. */
+    version: 1;
+    pages: DashboardPageLayout[];
+}
+/** Namespaced widget type — lowercase npm-name-compatible.
+ *  Built-ins use the 'core/' prefix; custom widgets '@scope/name'. */
+export declare const WIDGET_TYPE_REGEX: RegExp;
+/** Max serialized size of a single widget `config`
+ *  (`JSON.stringify(widget.config).length`) — guards D1 row bloat. */
+export declare const MAX_WIDGET_CONFIG_BYTES = 8192;
+export declare const dashboardWidgetInstanceSchema: z.ZodObject<{
+    id: z.ZodString;
+    type: z.ZodString;
+    title: z.ZodOptional<z.ZodString>;
+    config: z.ZodRecord<z.ZodString, z.ZodUnknown>;
+}, z.core.$strip>;
+export declare const dashboardColumnSchema: z.ZodObject<{
+    id: z.ZodString;
+    widgets: z.ZodArray<z.ZodObject<{
+        id: z.ZodString;
+        type: z.ZodString;
+        title: z.ZodOptional<z.ZodString>;
+        config: z.ZodRecord<z.ZodString, z.ZodUnknown>;
+    }, z.core.$strip>>;
+}, z.core.$strip>;
+export declare const dashboardSectionSchema: z.ZodObject<{
+    id: z.ZodString;
+    label: z.ZodOptional<z.ZodString>;
+    hideLabel: z.ZodOptional<z.ZodBoolean>;
+    collapsible: z.ZodOptional<z.ZodBoolean>;
+    columns: z.ZodArray<z.ZodObject<{
+        id: z.ZodString;
+        widgets: z.ZodArray<z.ZodObject<{
+            id: z.ZodString;
+            type: z.ZodString;
+            title: z.ZodOptional<z.ZodString>;
+            config: z.ZodRecord<z.ZodString, z.ZodUnknown>;
+        }, z.core.$strip>>;
+    }, z.core.$strip>>;
+    columnSpans: z.ZodOptional<z.ZodArray<z.ZodNumber>>;
+}, z.core.$strip>;
+export declare const dashboardPageSchema: z.ZodObject<{
+    id: z.ZodString;
+    slug: z.ZodString;
+    label: z.ZodString;
+    icon: z.ZodOptional<z.ZodString>;
+    sections: z.ZodArray<z.ZodObject<{
+        id: z.ZodString;
+        label: z.ZodOptional<z.ZodString>;
+        hideLabel: z.ZodOptional<z.ZodBoolean>;
+        collapsible: z.ZodOptional<z.ZodBoolean>;
+        columns: z.ZodArray<z.ZodObject<{
+            id: z.ZodString;
+            widgets: z.ZodArray<z.ZodObject<{
+                id: z.ZodString;
+                type: z.ZodString;
+                title: z.ZodOptional<z.ZodString>;
+                config: z.ZodRecord<z.ZodString, z.ZodUnknown>;
+            }, z.core.$strip>>;
+        }, z.core.$strip>>;
+        columnSpans: z.ZodOptional<z.ZodArray<z.ZodNumber>>;
+    }, z.core.$strip>>;
+}, z.core.$strip>;
+export declare const dashboardLayoutSchema: z.ZodObject<{
+    version: z.ZodLiteral<1>;
+    pages: z.ZodArray<z.ZodObject<{
+        id: z.ZodString;
+        slug: z.ZodString;
+        label: z.ZodString;
+        icon: z.ZodOptional<z.ZodString>;
+        sections: z.ZodArray<z.ZodObject<{
+            id: z.ZodString;
+            label: z.ZodOptional<z.ZodString>;
+            hideLabel: z.ZodOptional<z.ZodBoolean>;
+            collapsible: z.ZodOptional<z.ZodBoolean>;
+            columns: z.ZodArray<z.ZodObject<{
+                id: z.ZodString;
+                widgets: z.ZodArray<z.ZodObject<{
+                    id: z.ZodString;
+                    type: z.ZodString;
+                    title: z.ZodOptional<z.ZodString>;
+                    config: z.ZodRecord<z.ZodString, z.ZodUnknown>;
+                }, z.core.$strip>>;
+            }, z.core.$strip>>;
+            columnSpans: z.ZodOptional<z.ZodArray<z.ZodNumber>>;
+        }, z.core.$strip>>;
+    }, z.core.$strip>>;
+}, z.core.$strip>;
+/** Structural port of the legacy hardcoded dashboard config into a single
+ *  'Overview' page. Widgets fetch their own data: configs carry only the
+ *  variant and (where relevant) the default seed binding. */
+export declare function generateDefaultDashboardLayout(seeds: Seed[], opts?: {
+    newId: () => string;
+}): DashboardLayout;
+export interface DashboardLayoutContext {
+    /** Slugs of currently registered seeds (from ISeedRegistry.all()). */
+    seedSlugs: ReadonlySet<string>;
+    /** Optional: widget types known to the caller (frontend registry).
+     *  When provided, unknown types produce WARNINGS, never strips. */
+    knownWidgetTypes?: ReadonlySet<string>;
+}
+export type ValidateDashboardLayoutResult = {
+    ok: true;
+    cleaned: DashboardLayout;
+    warnings: string[];
+} | {
+    ok: false;
+    errors: string[];
+    cleaned: DashboardLayout;
+    warnings: string[];
+};
+/** Semantic validation on top of the Zod shape check (the caller's job).
+ *  Widgets bound to a seed that no longer exists are silently stripped
+ *  (auto-cleanup, recorded as a warning). Unknown widget types only warn —
+ *  custom widgets are invisible to the Worker and must never be stripped.
+ *  `cleaned` is always returned, errors or not. */
+export declare function validateDashboardLayout(layout: DashboardLayout, ctx: DashboardLayoutContext): ValidateDashboardLayoutResult;
+//# sourceMappingURL=dashboard-layout.d.ts.map

package/dist/dashboard-layout.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"dashboard-layout.d.ts","sourceRoot":"","sources":["../src/dashboard-layout.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AACvB,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,YAAY,CAAA;AAMtC;;sEAEsE;AACtE,MAAM,WAAW,uBAAuB;IACtC,EAAE,EAAE,MAAM,CAAA;IACV,IAAI,EAAE,MAAM,CAAA;IACZ,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CAChC;AAED,MAAM,WAAW,eAAe;IAC9B,EAAE,EAAE,MAAM,CAAA;IACV,OAAO,EAAE,uBAAuB,EAAE,CAAA;CACnC;AAED,MAAM,WAAW,gBAAgB;IAC/B,EAAE,EAAE,MAAM,CAAA;IACV,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,SAAS,CAAC,EAAE,OAAO,CAAA;IACnB,WAAW,CAAC,EAAE,OAAO,CAAA;IACrB,0CAA0C;IAC1C,OAAO,EAAE,eAAe,EAAE,CAAA;IAC1B;gCAC4B;IAC5B,WAAW,CAAC,EAAE,MAAM,EAAE,CAAA;CACvB;AAED,MAAM,WAAW,mBAAmB;IAClC,EAAE,EAAE,MAAM,CAAA;IACV,6DAA6D;IAC7D,IAAI,EAAE,MAAM,CAAA;IACZ,KAAK,EAAE,MAAM,CAAA;IACb,qEAAqE;IACrE,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,QAAQ,EAAE,gBAAgB,EAAE,CAAA;CAC7B;AAED,MAAM,WAAW,eAAe;IAC9B,+DAA+D;IAC/D,OAAO,EAAE,CAAC,CAAA;IACV,KAAK,EAAE,mBAAmB,EAAE,CAAA;CAC7B;AAMD;sEACsE;AACtE,eAAO,MAAM,iBAAiB,QAA6B,CAAA;AAE3D;sEACsE;AACtE,eAAO,MAAM,uBAAuB,OAAO,CAAA;AAM3C,eAAO,MAAM,6BAA6B;;;;;iBAKxC,CAAA;AACF,eAAO,MAAM,qBAAqB;;;;;;;;iBAGhC,CAAA;AACF,eAAO,MAAM,sBAAsB;;;;;;;;;;;;;;;iBAOjC,CAAA;AACF,eAAO,MAAM,mBAAmB;;;;;;;;;;;;;;;;;;;;;iBAM9B,CAAA;AACF,eAAO,MAAM,qBAAqB;;;;;;;;;;;;;;;;;;;;;;;;iBAGhC,CAAA;AAQF;;6DAE6D;AAC7D,wBAAgB,8BAA8B,CAC5C,KAAK,EAAE,IAAI,EAAE,EACb,IAAI,CAAC,EAAE;IAAE,KAAK,EAAE,MAAM,MAAM,CAAA;CAAE,GAC7B,eAAe,CA2EjB;AAMD,MAAM,WAAW,sBAAsB;IACrC,sEAAsE;IACtE,SAAS,EAAE,WAAW,CAAC,MAAM,CAAC,CAAA;IAC9B;uEACmE;IACnE,gBAAgB,CAAC,EAAE,WAAW,CAAC,MAAM,CAAC,CAAA;CACvC;AAED,MAAM,MAAM,6BAA6B,GACrC;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,OAAO,EAAE,eAAe,CAAC;IAAC,QAAQ,EAAE,MAAM,EAAE,CAAA;CAAE,GAC1D;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,MAAM,EAAE,CAAC;IAAC,OAAO,EAAE,eAAe,CAAC;IAAC,QAAQ,EAAE,MAAM,EAAE,CAAA;CAAE,CAAA;AAEjF;;;;mDAImD;AACnD,wBAAgB,uBAAuB,CACrC,MAAM,EAAE,eAAe,EACvB,GAAG,EAAE,sBAAsB,GAC1B,6BAA6B,CA2E/B"}

package/dist/dashboard-layout.js

@@ -0,0 +1,186 @@
+// SPDX-License-Identifier: MIT
+// Copyright (c) 2024–2026 Flavio De Musso
+import { z } from 'zod';
+// ---------------------------------------------------------------------------
+// Shared rules used by both the Zod schemas and the semantic validator.
+// ---------------------------------------------------------------------------
+/** Namespaced widget type — lowercase npm-name-compatible.
+ *  Built-ins use the 'core/' prefix; custom widgets '@scope/name'. */
+export const WIDGET_TYPE_REGEX = /^[a-z0-9@][a-z0-9@/_-]*$/;
+/** Max serialized size of a single widget `config`
+ *  (`JSON.stringify(widget.config).length`) — guards D1 row bloat. */
+export const MAX_WIDGET_CONFIG_BYTES = 8192;
+// ---------------------------------------------------------------------------
+// Zod schemas for shape validation
+// ---------------------------------------------------------------------------
+export const dashboardWidgetInstanceSchema = z.object({
+    id: z.string().min(1),
+    type: z.string().regex(WIDGET_TYPE_REGEX),
+    title: z.string().max(80).optional(),
+    config: z.record(z.string(), z.unknown()),
+});
+export const dashboardColumnSchema = z.object({
+    id: z.string().min(1),
+    widgets: z.array(dashboardWidgetInstanceSchema),
+});
+export const dashboardSectionSchema = z.object({
+    id: z.string().min(1),
+    label: z.string().max(60).optional(),
+    hideLabel: z.boolean().optional(),
+    collapsible: z.boolean().optional(),
+    columns: z.array(dashboardColumnSchema).min(1).max(4),
+    columnSpans: z.array(z.number().int().min(1).max(12)).optional(),
+});
+export const dashboardPageSchema = z.object({
+    id: z.string().min(1),
+    slug: z.string().regex(/^[a-z0-9][a-z0-9-]*$/).max(40),
+    label: z.string().min(1).max(60),
+    icon: z.string().max(40).optional(),
+    sections: z.array(dashboardSectionSchema).min(1),
+});
+export const dashboardLayoutSchema = z.object({
+    version: z.literal(1),
+    pages: z.array(dashboardPageSchema).min(1).max(8),
+});
+// ---------------------------------------------------------------------------
+// Default dashboard layout generator
+// ---------------------------------------------------------------------------
+const defaultIdFactory = () => crypto.randomUUID();
+/** Structural port of the legacy hardcoded dashboard config into a single
+ *  'Overview' page. Widgets fetch their own data: configs carry only the
+ *  variant and (where relevant) the default seed binding. */
+export function generateDefaultDashboardLayout(seeds, opts) {
+    const newId = opts?.newId ?? defaultIdFactory;
+    const widget = (type, config) => ({ id: newId(), type, config });
+    const singleWidgetColumn = (w) => ({
+        id: newId(),
+        widgets: [w],
+    });
+    const sections = [];
+    // Setup checklist, full width.
+    sections.push({
+        id: newId(),
+        hideLabel: true,
+        columns: [singleWidgetColumn(widget('core/setup-checklist', { variant: 'full' }))],
+    });
+    // Status row: equal columns; quick-draft needs at least one seed to target.
+    const statusWidgets = [
+        widget('core/site-status', { variant: 'badge' }),
+        widget('core/storage', { variant: 'gauge' }),
+        widget('core/publication-stats', { variant: 'trio' }),
+    ];
+    if (seeds.length > 0) {
+        statusWidgets.push(widget('core/quick-draft', { variant: 'minimal' }));
+    }
+    sections.push({
+        id: newId(),
+        hideLabel: true,
+        columns: statusWidgets.map(singleWidgetColumn),
+    });
+    if (seeds.length > 0) {
+        const seedSlug = seeds.find((s) => s.slug === 'articoli')?.slug ?? seeds[0].slug;
+        // Content row: recent content | pending drafts.
+        sections.push({
+            id: newId(),
+            hideLabel: true,
+            columns: [
+                singleWidgetColumn(widget('core/recent-content', { seedSlug, variant: 'list' })),
+                singleWidgetColumn(widget('core/pending-drafts', { seedSlug, variant: 'list' })),
+            ],
+            columnSpans: [6, 6],
+        });
+        // Media & activity row: media gallery | activity feed.
+        sections.push({
+            id: newId(),
+            hideLabel: true,
+            columns: [
+                singleWidgetColumn(widget('core/media-gallery', { seedSlug, variant: 'grid' })),
+                singleWidgetColumn(widget('core/activity-feed', { seedSlug, variant: 'feed' })),
+            ],
+            columnSpans: [6, 6],
+        });
+    }
+    return {
+        version: 1,
+        pages: [
+            {
+                id: newId(),
+                slug: 'overview',
+                label: 'Overview',
+                icon: 'LayoutDashboard',
+                sections,
+            },
+        ],
+    };
+}
+/** Semantic validation on top of the Zod shape check (the caller's job).
+ *  Widgets bound to a seed that no longer exists are silently stripped
+ *  (auto-cleanup, recorded as a warning). Unknown widget types only warn —
+ *  custom widgets are invisible to the Worker and must never be stripped.
+ *  `cleaned` is always returned, errors or not. */
+export function validateDashboardLayout(layout, ctx) {
+    const errors = [];
+    const warnings = [];
+    // Auto-cleanup: drop widgets whose config.seedSlug references a missing seed.
+    const cleanedPages = layout.pages.map((page) => ({
+        ...page,
+        sections: page.sections.map((section) => ({
+            ...section,
+            columns: section.columns.map((col) => ({
+                ...col,
+                widgets: (col.widgets ?? []).filter((w) => {
+                    const seedSlug = (w.config ?? {})['seedSlug'];
+                    if (typeof seedSlug === 'string' && !ctx.seedSlugs.has(seedSlug)) {
+                        warnings.push(`Widget '${w.type}' (id=${w.id}) removed: seed '${seedSlug}' is not registered.`);
+                        return false;
+                    }
+                    return true;
+                }),
+            })),
+        })),
+    }));
+    // Semantic checks on the cleaned layout
+    const seenWidgetIds = new Set();
+    const seenPageSlugs = new Set();
+    for (const page of cleanedPages) {
+        if (seenPageSlugs.has(page.slug)) {
+            errors.push(`Page slug '${page.slug}' appears more than once in the layout.`);
+        }
+        else {
+            seenPageSlugs.add(page.slug);
+        }
+        for (const section of page.sections) {
+            if (section.columnSpans !== undefined) {
+                if (section.columnSpans.length !== section.columns.length) {
+                    errors.push(`Section ${section.id}: columnSpans has ${section.columnSpans.length} entries for ${section.columns.length} columns.`);
+                }
+                else {
+                    const sum = section.columnSpans.reduce((acc, span) => acc + span, 0);
+                    if (sum !== 12) {
+                        errors.push(`Section ${section.id}: columnSpans must sum to 12, got ${sum}.`);
+                    }
+                }
+            }
+            for (const col of section.columns) {
+                for (const w of col.widgets) {
+                    if (seenWidgetIds.has(w.id)) {
+                        errors.push(`Widget id '${w.id}' appears more than once in the layout.`);
+                    }
+                    else {
+                        seenWidgetIds.add(w.id);
+                    }
+                    if (JSON.stringify(w.config ?? {}).length > MAX_WIDGET_CONFIG_BYTES) {
+                        errors.push(`Widget '${w.type}' (id=${w.id}): config exceeds ${MAX_WIDGET_CONFIG_BYTES} bytes when serialized.`);
+                    }
+                    if (ctx.knownWidgetTypes !== undefined && !ctx.knownWidgetTypes.has(w.type)) {
+                        warnings.push(`Widget '${w.type}' (id=${w.id}) is not a known widget type.`);
+                    }
+                }
+            }
+        }
+    }
+    const cleaned = { ...layout, pages: cleanedPages };
+    if (errors.length > 0)
+        return { ok: false, errors, cleaned, warnings };
+    return { ok: true, cleaned, warnings };
+}

package/dist/dashboard-layout.repository.d.ts

@@ -0,0 +1,18 @@
+import type { DashboardLayout } from './dashboard-layout.js';
+export interface DashboardLayoutRecord {
+    scope: string;
+    layout: DashboardLayout;
+    updatedAt: number;
+    updatedBy: string;
+}
+export interface IDashboardLayoutRepository {
+    /** Stored layout for a scope, or null if none was ever saved. */
+    get(scope: string): Promise<DashboardLayoutRecord | null>;
+    /** Scopes that currently have a stored row — used by the Sprint 06 builder UI. */
+    listScopes(): Promise<string[]>;
+    /** Upsert. `updatedBy` is the writer's user id. */
+    upsert(scope: string, layout: DashboardLayout, updatedBy: string): Promise<void>;
+    /** Remove the stored row — the "Reset" action. */
+    remove(scope: string): Promise<void>;
+}
+//# sourceMappingURL=dashboard-layout.repository.d.ts.map

package/dist/dashboard-layout.repository.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"dashboard-layout.repository.d.ts","sourceRoot":"","sources":["../src/dashboard-layout.repository.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAA;AAE5D,MAAM,WAAW,qBAAqB;IACpC,KAAK,EAAE,MAAM,CAAA;IACb,MAAM,EAAE,eAAe,CAAA;IACvB,SAAS,EAAE,MAAM,CAAA;IACjB,SAAS,EAAE,MAAM,CAAA;CAClB;AAED,MAAM,WAAW,0BAA0B;IACzC,iEAAiE;IACjE,GAAG,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,qBAAqB,GAAG,IAAI,CAAC,CAAA;IACzD,kFAAkF;IAClF,UAAU,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC,CAAA;IAC/B,mDAAmD;IACnD,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,eAAe,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAChF,kDAAkD;IAClD,MAAM,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;CACrC"}