@cancia/astro 0.5.0 → 0.5.1

package/dist/{chunk-YZH7QWZV.js → chunk-AGNPUTKS.js}

@@ -166,10 +166,20 @@ function setBakedConfig(config) {
 function setCanciaRuntime(runtime) {
   _runtime = runtime;
 }
+function __resetRuntimeForTests() {
+  _runtime = null;
+  _bakedConfig = null;
+}
 function buildRuntimeFromBaked(baked) {
   const projectRoot = baked.projectRoot || process.cwd();
   const token = process.env.CANCIA_TOKEN?.trim() || "";
-  const secret = baked.public ? void 0 : token || void 0;
+  const isPublic = baked.public === true;
+  if (!isPublic && !token) {
+    throw new Error(
+      "[cancia] CANCIA_TOKEN is not set but this site is not public \u2014 refusing to start to avoid serving an open, unauthenticated mutation API. Set CANCIA_TOKEN in the deployed process, or set public:true if anonymous editing is intended."
+    );
+  }
+  const secret = isPublic ? void 0 : token;
   const redeployHook = baked.redeployHook || void 0;
   const deployHook = redeployHook || process.env.CANCIA_DEPLOY_HOOK || void 0;
   const deployHookToken = process.env.CANCIA_DEPLOY_HOOK_TOKEN || void 0;
@@ -261,5 +271,6 @@ export {
   makeR2UploadHandler,
   setBakedConfig,
   setCanciaRuntime,
+  __resetRuntimeForTests,
   getCanciaRuntime
 };

package/dist/index.js

@@ -13,7 +13,7 @@ import {
   makeR2UploadHandler,
   makeUploadRoute,
   setCanciaRuntime
-} from "./chunk-YZH7QWZV.js";
+} from "./chunk-AGNPUTKS.js";
 import "./chunk-5IPHDIC6.js";
 import {
   defineField,

package/dist/runtime.d.ts

@@ -146,6 +146,14 @@ declare function setBakedConfig(config: BakedConfig): void;
  * to lazy init instead.
  */
 declare function setCanciaRuntime(runtime: CanciaRuntime): void;
+/**
+ * TEST-ONLY: clear both module singletons so the next getCanciaRuntime() rebuilds
+ * from scratch. Production never calls this — the virtual module supplies baked
+ * config exactly once and endpoints share the built runtime for the process
+ * lifetime. Needed only because a mocked virtual:cancia/runtime module survives
+ * vitest's vi.resetModules() (its singletons would otherwise leak across cases).
+ */
+declare function __resetRuntimeForTests(): void;
 declare function getCanciaRuntime(): CanciaRuntime;
 
-export { type BakedConfig, type BakedR2Config, type BakedStorageDescriptor, type CanciaRuntime, type PublishMode, getCanciaRuntime, setBakedConfig, setCanciaRuntime };
+export { type BakedConfig, type BakedR2Config, type BakedStorageDescriptor, type CanciaRuntime, type PublishMode, __resetRuntimeForTests, getCanciaRuntime, setBakedConfig, setCanciaRuntime };

package/dist/runtime.js

@@ -1,14 +1,16 @@
 import {
+  __resetRuntimeForTests,
   getCanciaRuntime,
   setBakedConfig,
   setCanciaRuntime
-} from "./chunk-YZH7QWZV.js";
+} from "./chunk-AGNPUTKS.js";
 import "./chunk-5IPHDIC6.js";
 import "./chunk-GNWD7EL2.js";
 import "./chunk-U7V53JX7.js";
 import "./chunk-L2VKQJPY.js";
 import "./chunk-7IA5B5CF.js";
 export {
+  __resetRuntimeForTests,
   getCanciaRuntime,
   setBakedConfig,
   setCanciaRuntime

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cancia/astro",
-  "version": "0.5.0",
+  "version": "0.5.1",
   "description": "Astro integration for Cancia CMS — inline editing with zero separate server",
   "license": "MIT",
   "repository": {