@cancia/astro 0.11.0 → 0.12.0

package/dist/runtime.d.ts

@@ -1,6 +1,41 @@
-import { C as CanciaStorage, a as CanciaStorageV2 } from './types-BMlLS-OS.js';
-import { U as UploadHandler } from './upload-DwCGjXbz.js';
-import { G as GitHubCommitter } from './github-client-Db0pIrqE.js';
+import { d as CanciaStorage, C as CanciaStorageV2 } from './types-CKzfz5iu.js';
+import { S as SendLoginEmail, U as UploadHandler } from './email-BRK4WAO2.js';
+import { b as GitHubCommitter } from './github-client-Db5EPcSL.js';
+
+/** A live browser session. `id` is the SHA-256 hash of the cookie value. */
+interface SessionRecord {
+    /** Hash of the session secret — never the secret itself. */
+    id: string;
+    email: string;
+    createdAt: string;
+    expiresAt: string;
+}
+/** A pending, single-use login link. `hash` is the SHA-256 of the emailed token. */
+interface LoginTokenRecord {
+    hash: string;
+    email: string;
+    expiresAt: string;
+}
+interface CanciaAuthStore {
+    /** Replace the allow-list with exactly these addresses. Called on boot. */
+    seedEditors(site: string, emails: string[]): Promise<void>;
+    /** Is this address allowed to sign in? */
+    isEditor(site: string, email: string): Promise<boolean>;
+    createLoginToken(site: string, rec: LoginTokenRecord): Promise<void>;
+    /**
+     * Atomically redeem a login token: return it and delete it in one step, so
+     * two concurrent redemptions of the same link cannot both succeed.
+     * Returns null when the hash is unknown (already used, or never existed).
+     */
+    consumeLoginToken(site: string, hash: string): Promise<LoginTokenRecord | null>;
+    createSession(site: string, rec: SessionRecord): Promise<void>;
+    getSession(site: string, id: string): Promise<SessionRecord | null>;
+    /** Push a session's expiry out — the sliding half of the window. */
+    touchSession(site: string, id: string, expiresAt: string): Promise<void>;
+    deleteSession(site: string, id: string): Promise<void>;
+    /** Drop expired tokens and sessions. Best-effort housekeeping. */
+    purgeExpired(site: string, now: string): Promise<void>;
+}
 
 /**
  * The resolved publish mode (034). One of:
@@ -35,6 +70,23 @@ interface CanciaRuntime {
     /** All configured locales, in order with defaultLocale first. */
     locales: string[];
     secret: string | undefined;
+    /** Site identifier — scopes auth rows, as it scopes content rows. */
+    site: string;
+    /**
+     * Magic-link auth (042). Undefined when the site has no `editors`, which is
+     * the pre-042 world where the bearer token is the only credential. Every
+     * caller reads `undefined` as "bearer only", so no separate flag is needed.
+     */
+    auth: {
+        store: CanciaAuthStore;
+        site: string;
+    } | undefined;
+    /**
+     * Custom login-email sender. Not baked (it is a function): supplied by the
+     * dev hook, and undefined in a fresh SSR process, where the sender is
+     * resolved from env instead.
+     */
+    sendLoginEmail?: SendLoginEmail;
     uploadHandler: UploadHandler;
     deployHook: string | undefined;
     /**
@@ -97,6 +149,19 @@ interface BakedR2Config {
 }
 interface BakedConfig {
     projectRoot: string;
+    /** Site identifier. Non-secret. */
+    site?: string;
+    /**
+     * Addresses allowed to sign in (042). Non-secret — an allow-list is not a
+     * credential, and the client needs to know whether to show the login box.
+     */
+    editors?: string[];
+    /**
+     * Where the auth tables live. Same file as the content DB; kept as its own
+     * field because a json-file content site still needs somewhere to put
+     * sessions, and that somewhere is a sqlite file.
+     */
+    authDbPath?: string;
     schemasPath: string | undefined;
     defaultLocale: string;
     locales: string[];
@@ -154,6 +219,7 @@ declare function setCanciaRuntime(runtime: CanciaRuntime): void;
  * vitest's vi.resetModules() (its singletons would otherwise leak across cases).
  */
 declare function __resetRuntimeForTests(): void;
+
 declare function getCanciaRuntime(): CanciaRuntime;
 
 export { type BakedConfig, type BakedR2Config, type BakedStorageDescriptor, type CanciaRuntime, type PublishMode, __resetRuntimeForTests, getCanciaRuntime, setBakedConfig, setCanciaRuntime };

package/dist/runtime.js

@@ -3,8 +3,10 @@ import {
   getCanciaRuntime,
   setBakedConfig,
   setCanciaRuntime
-} from "./chunk-ZPXMPLQU.js";
+} from "./chunk-VF3EXXEM.js";
 import "./chunk-RHFTQW4W.js";
+import "./chunk-4PYVIIOO.js";
+import "./chunk-6GUOGDWO.js";
 import "./chunk-XINNLVZP.js";
 import "./chunk-U7V53JX7.js";
 import "./chunk-S5YLB6P3.js";

package/dist/storage/index.d.ts

@@ -1,7 +1,7 @@
-import { R as Rev } from '../types-BMlLS-OS.js';
-export { b as CanciaKVStore, c as CanciaListStore, d as CanciaPageStore, C as CanciaStorage, a as CanciaStorageV2, L as ListEntry, P as PageMeta, e as PageRecord, f as PageSEO, g as RevConflictError } from '../types-BMlLS-OS.js';
-export { G as GitBackedContentPaths, a as GitBackedControls, b as GitBackedOptions, c as GitBackedStorage, S as SqliteV2Options, d as closeSqliteAdapterV2, e as createGitBackedAdapter, f as createJsonFileAdapter, g as createJsonFileAdapterV2, h as createSQLiteAdapter, i as createSqliteAdapterV2 } from '../git-backed-DtiH52EI.js';
-export { C as CommitFile, a as GitHubClient, b as GitHubClientOptions, G as GitHubCommitter, c as createGitHubClient } from '../github-client-Db0pIrqE.js';
+import { R as Rev } from '../types-CKzfz5iu.js';
+export { a as CanciaKVStore, b as CanciaListStore, c as CanciaPageStore, d as CanciaStorage, C as CanciaStorageV2, L as ListEntry, P as PageMeta, e as PageRecord, f as PageSEO, g as RevConflictError } from '../types-CKzfz5iu.js';
+export { G as GitBackedContentPaths, a as GitBackedControls, b as GitBackedOptions, c as GitBackedStorage, S as SqliteV2Options, d as closeSqliteAdapterV2, e as createGitBackedAdapter, f as createJsonFileAdapter, g as createJsonFileAdapterV2, h as createSQLiteAdapter, i as createSqliteAdapterV2 } from '../git-backed-CwTFfUS4.js';
+export { C as CommitFile, G as GitHubClient, a as GitHubClientOptions, b as GitHubCommitter, c as createGitHubClient } from '../github-client-Db5EPcSL.js';
 
 /**
  * Canonical JSON: keys sorted alphabetically at every level. Two values that

package/dist/{types-BMlLS-OS.d.ts → types-CKzfz5iu.d.ts}

@@ -158,4 +158,4 @@ interface CanciaStorageV2 {
     lists: CanciaListStore;
 }
 
-export { type CanciaStorage as C, type ListEntry as L, type PageMeta as P, type Rev as R, type CanciaStorageV2 as a, type CanciaKVStore as b, type CanciaListStore as c, type CanciaPageStore as d, type PageRecord as e, type PageSEO as f, RevConflictError as g };
+export { type CanciaStorageV2 as C, type ListEntry as L, type PageMeta as P, type Rev as R, type CanciaKVStore as a, type CanciaListStore as b, type CanciaPageStore as c, type CanciaStorage as d, type PageRecord as e, type PageSEO as f, RevConflictError as g };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cancia/astro",
-  "version": "0.11.0",
+  "version": "0.12.0",
   "description": "Astro integration for Cancia CMS — inline editing with zero separate server",
   "license": "MIT",
   "repository": {