@cancia/astro 0.7.0 → 0.9.0

package/dist/endpoints/auth.js

@@ -1,55 +1,14 @@
+import {
+  createRateLimiter,
+  runAuth
+} from "../chunk-GJIX7MWC.js";
+
 // src/endpoints/auth.ts
 import { getCanciaRuntime } from "virtual:cancia/runtime";
-var buckets = /* @__PURE__ */ new Map();
-var MAX_FAILURES = 5;
-var WINDOW_MS = 6e4;
-function getIp(req) {
-  return req.headers.get("x-forwarded-for")?.split(",")[0].trim() ?? req.headers.get("x-real-ip") ?? "unknown";
-}
-function isRateLimited(ip) {
-  const bucket = buckets.get(ip);
-  if (!bucket || Date.now() > bucket.resetAt) return false;
-  return bucket.failures >= MAX_FAILURES;
-}
-function recordFailure(ip) {
-  const now = Date.now();
-  const bucket = buckets.get(ip);
-  if (!bucket || now > bucket.resetAt) {
-    buckets.set(ip, { failures: 1, resetAt: now + WINDOW_MS });
-  } else {
-    bucket.failures += 1;
-  }
-}
+var limiter = createRateLimiter();
 async function POST({ request }) {
   const { secret } = getCanciaRuntime();
-  const ip = getIp(request);
-  if (isRateLimited(ip))
-    return new Response(
-      JSON.stringify({ error: "Too many attempts. Try again in a minute." }),
-      { status: 429, headers: { "Content-Type": "application/json" } }
-    );
-  let token;
-  try {
-    const body = await request.json();
-    token = body?.token;
-  } catch {
-    return new Response(
-      JSON.stringify({ error: "Invalid request body" }),
-      { status: 400, headers: { "Content-Type": "application/json" } }
-    );
-  }
-  if (!token || token !== secret) {
-    recordFailure(ip);
-    return new Response(
-      JSON.stringify({ error: "Invalid token" }),
-      { status: 401, headers: { "Content-Type": "application/json" } }
-    );
-  }
-  buckets.delete(ip);
-  return new Response(
-    JSON.stringify({ ok: true }),
-    { status: 200, headers: { "Content-Type": "application/json" } }
-  );
+  return runAuth({ request, secret, limiter });
 }
 export {
   POST

package/dist/endpoints/lists.js

@@ -4,9 +4,9 @@ import {
 } from "../chunk-VGRG5DN7.js";
 import {
   makeListsRoutes
-} from "../chunk-22DJVJBR.js";
-import "../chunk-NG5GJME5.js";
+} from "../chunk-DIV2FFYX.js";
 import "../chunk-X6ZFFGIA.js";
+import "../chunk-VL6FO446.js";
 import "../chunk-7IA5B5CF.js";
 
 // src/endpoints/lists.ts

package/dist/endpoints/schemas.js

@@ -1,9 +1,9 @@
 import {
   makeSchemasRoute
-} from "../chunk-VFMOVGMC.js";
-import "../chunk-NG5GJME5.js";
-import "../chunk-UMCBQXB6.js";
-import "../chunk-BOIQNZAO.js";
+} from "../chunk-HQIGNRIU.js";
+import "../chunk-VL6FO446.js";
+import "../chunk-WVHTCFE6.js";
+import "../chunk-KHCFVVYV.js";
 
 // src/endpoints/schemas.ts
 import { getCanciaRuntime } from "virtual:cancia/runtime";

package/dist/index.d.ts

@@ -9,7 +9,7 @@ export { FieldDescription, FieldMeta, FieldMetaBase, FieldWidget, ListDescriptio
 export { G as GitBackedContentPaths, a as GitBackedControls, b as GitBackedOptions, c as GitBackedStorage, S as SqliteV2Options, d as closeSqliteAdapterV2, e as createGitBackedAdapter, f as createJsonFileAdapter, g as createJsonFileAdapterV2, h as createSQLiteAdapter, i as createSqliteAdapterV2 } from './git-backed-DtiH52EI.js';
 export { z } from 'zod';
 import 'astro/loaders';
-import './portable-text-BikSqS9T.js';
+import './portable-text-D74aIuHn.js';
 
 interface R2UploadHandlerOptions {
     /** Cloudflare account ID (from R2 dashboard) */

package/dist/index.js

@@ -1,29 +1,23 @@
+import {
+  makeSchemasRoute
+} from "./chunk-HQIGNRIU.js";
 import {
   runPublish
 } from "./chunk-5RCLBWRH.js";
 import {
-  makeListsRoutes
-} from "./chunk-22DJVJBR.js";
+  createRateLimiter,
+  runAuth
+} from "./chunk-GJIX7MWC.js";
 import {
-  makeSchemasRoute
-} from "./chunk-VFMOVGMC.js";
-import "./chunk-NG5GJME5.js";
+  makeListsRoutes
+} from "./chunk-DIV2FFYX.js";
 import {
   makeLocalUploadHandler,
   makeR2UploadHandler,
   makeUploadRoute,
   setCanciaRuntime
-} from "./chunk-AGNPUTKS.js";
+} from "./chunk-LJSSPOSW.js";
 import "./chunk-5IPHDIC6.js";
-import {
-  defineField,
-  defineList,
-  describeList,
-  z
-} from "./chunk-UMCBQXB6.js";
-import {
-  canciaLoader
-} from "./chunk-UR5WC3RA.js";
 import {
   createSQLiteAdapter
 } from "./chunk-CJDIVWO3.js";
@@ -31,20 +25,31 @@ import {
   closeSqliteAdapterV2,
   createGitBackedAdapter,
   createSqliteAdapterV2
-} from "./chunk-GNWD7EL2.js";
+} from "./chunk-MXVOJRAM.js";
 import "./chunk-U7V53JX7.js";
+import "./chunk-VL6FO446.js";
+import {
+  canciaLoader
+} from "./chunk-GBTFXQEA.js";
 import {
   createJsonFileAdapter,
   createJsonFileAdapterV2
-} from "./chunk-L2VKQJPY.js";
+} from "./chunk-2NVZWZPE.js";
 import {
   RevConflictError
 } from "./chunk-7IA5B5CF.js";
-import "./chunk-BOIQNZAO.js";
+import {
+  defineField,
+  defineList,
+  describeList,
+  z
+} from "./chunk-WVHTCFE6.js";
+import "./chunk-KHCFVVYV.js";
 
 // src/integration.ts
 import { loadEnv } from "vite";
 import { fileURLToPath, pathToFileURL } from "url";
+import { readFile } from "fs/promises";
 import { isAbsolute, join as join2 } from "path";
 
 // src/routes/content.ts
@@ -114,61 +119,10 @@ function makePublishRoute(deployHook, secret, hookOptions, dispatch, mode) {
 }
 
 // src/routes/auth.ts
-var buckets = /* @__PURE__ */ new Map();
-var MAX_FAILURES = 5;
-var WINDOW_MS = 6e4;
-function getIp(req) {
-  return req.headers.get("x-forwarded-for")?.split(",")[0].trim() ?? req.headers.get("x-real-ip") ?? "unknown";
-}
-function isRateLimited(ip) {
-  const now = Date.now();
-  const bucket = buckets.get(ip);
-  if (!bucket || now > bucket.resetAt) return false;
-  return bucket.failures >= MAX_FAILURES;
-}
-function recordFailure(ip) {
-  const now = Date.now();
-  const bucket = buckets.get(ip);
-  if (!bucket || now > bucket.resetAt) {
-    buckets.set(ip, { failures: 1, resetAt: now + WINDOW_MS });
-  } else {
-    bucket.failures += 1;
-  }
-}
-function clearFailures(ip) {
-  buckets.delete(ip);
-}
 function makeAuthRoute(secret) {
+  const limiter = createRateLimiter();
   return async function authRoute(req) {
-    const ip = getIp(req);
-    if (isRateLimited(ip)) {
-      return new Response(
-        JSON.stringify({ error: "Too many attempts. Try again in a minute." }),
-        { status: 429, headers: { "Content-Type": "application/json" } }
-      );
-    }
-    let token;
-    try {
-      const body = await req.json();
-      token = body?.token;
-    } catch {
-      return new Response(
-        JSON.stringify({ error: "Invalid request body" }),
-        { status: 400, headers: { "Content-Type": "application/json" } }
-      );
-    }
-    if (!token || token !== secret) {
-      recordFailure(ip);
-      return new Response(
-        JSON.stringify({ error: "Invalid token" }),
-        { status: 401, headers: { "Content-Type": "application/json" } }
-      );
-    }
-    clearFailures(ip);
-    return new Response(
-      JSON.stringify({ ok: true }),
-      { status: 200, headers: { "Content-Type": "application/json" } }
-    );
+    return runAuth({ request: req, secret, limiter });
   };
 }
 
@@ -198,6 +152,211 @@ CANCIA_TOKEN=${token}
   return token;
 }
 
+// src/transform/attribute-text.ts
+import { parse } from "@astrojs/compiler";
+var HELPER_NAME = "__canciaText";
+var LINK_HELPER_NAME = "__canciaLink";
+var LOADER_NAME = "__canciaContent";
+var CONTENT_LOCAL = "__canciaCms";
+var HELPER_MODULE = "virtual:cancia/text";
+var RAW_TEXT = /* @__PURE__ */ new Set([
+  "script",
+  "style",
+  "pre",
+  "textarea",
+  "code",
+  "title",
+  "option",
+  "noscript",
+  "template"
+]);
+function byteToCharMap(source) {
+  let ascii = true;
+  for (let i = 0; i < source.length; i++) {
+    if (source.charCodeAt(i) > 127) {
+      ascii = false;
+      break;
+    }
+  }
+  if (ascii) return (b) => b;
+  const map = /* @__PURE__ */ new Map();
+  let byte = 0;
+  for (let char = 0; char < source.length; char++) {
+    map.set(byte, char);
+    const code = source.codePointAt(char);
+    byte += code < 128 ? 1 : code < 2048 ? 2 : code < 65536 ? 3 : 4;
+    if (code >= 65536) char++;
+  }
+  map.set(byte, source.length);
+  return (b) => map.get(b) ?? b;
+}
+function quote(text) {
+  return JSON.stringify(text);
+}
+function findOpenAngle(node, src, at) {
+  const name = node.name ?? "";
+  const floor = Math.max(0, at - 4096);
+  for (let i = Math.min(at, src.length - 1); i >= floor; i--) {
+    if (src[i] !== "<") continue;
+    if (src.slice(i + 1, i + 1 + name.length) !== name) continue;
+    const boundary = src[i + 1 + name.length];
+    if (boundary === void 0 || /[\s/>]/.test(boundary)) return i;
+  }
+  return null;
+}
+function readAttr(openTag, name) {
+  const re = new RegExp(`\\s${name}\\s*=\\s*["']([^"']*)["']`);
+  return re.exec(openTag)?.[1] ?? null;
+}
+function findOpenTagEnd(src, lt) {
+  let quoteChar = null;
+  for (let i = lt; i < src.length; i++) {
+    const c = src[i];
+    if (quoteChar) {
+      if (c === quoteChar) quoteChar = null;
+      continue;
+    }
+    if (c === '"' || c === "'") {
+      quoteChar = c;
+      continue;
+    }
+    if (c === ">") return i + 1;
+  }
+  return null;
+}
+async function transformAttributeText(source) {
+  if (!source.includes("data-cms")) {
+    return { code: source, changed: false, substituted: [] };
+  }
+  const toChar = byteToCharMap(source);
+  let ast;
+  try {
+    ast = (await parse(source, { position: true })).ast;
+  } catch {
+    return { code: source, changed: false, substituted: [] };
+  }
+  const edits = [];
+  const substituted = [];
+  function visit(node) {
+    if (node.type === "element" && RAW_TEXT.has((node.name ?? "").toLowerCase())) {
+      return;
+    }
+    if (node.type === "element") {
+      const reported = node.position?.start?.offset;
+      if (reported !== void 0) {
+        const lt = findOpenAngle(node, source, toChar(reported));
+        if (lt !== null) {
+          const gt = findOpenTagEnd(source, lt);
+          if (gt !== null) {
+            const openTag = source.slice(lt, gt);
+            const key = readAttr(openTag, "data-cms");
+            if (key !== null) {
+              const declaredType = readAttr(openTag, "data-cms-type");
+              const isList = /\sdata-cms-list\s*=/.test(openTag);
+              if (declaredType === "link" && !isList) {
+                const kids = (node.children ?? []).filter(
+                  (c) => c.type !== "text" || (c.value ?? "").trim() !== ""
+                );
+                const soleText = kids.length === 1 && kids[0].type === "text" ? kids[0] : null;
+                const authoredHref = readAttr(openTag, "href");
+                if (soleText && authoredHref !== null) {
+                  const raw = soleText.value ?? "";
+                  const literal = raw.replace(/\s+/g, " ").trim();
+                  const s = soleText.position?.start?.offset;
+                  const e = soleText.position?.end?.offset;
+                  const hrefRe = /\shref\s*=\s*(["'])([^"']*)\1/.exec(openTag);
+                  if (literal !== "" && s !== void 0 && e !== void 0 && hrefRe) {
+                    const call = `${LINK_HELPER_NAME}(${CONTENT_LOCAL}, ${quote(key)}, ${quote(literal)}, ${quote(hrefRe[2])})`;
+                    edits.push({
+                      start: lt + hrefRe.index,
+                      end: lt + hrefRe.index + hrefRe[0].length,
+                      text: ` href={${call}.href}`
+                    });
+                    edits.push({
+                      start: toChar(s),
+                      end: toChar(e),
+                      text: `{${call}.label}`
+                    });
+                    substituted.push({ key, line: node.position?.start?.line ?? 0 });
+                  }
+                }
+              }
+              const typed = declaredType !== null;
+              if (!typed && !isList) {
+                const kids = (node.children ?? []).filter(
+                  (c) => c.type !== "text" || (c.value ?? "").trim() !== ""
+                );
+                const soleText = kids.length === 1 && kids[0].type === "text" ? kids[0] : null;
+                if (soleText) {
+                  const raw = soleText.value ?? "";
+                  const literal = raw.replace(/\s+/g, " ").trim();
+                  const s = soleText.position?.start?.offset;
+                  const e = soleText.position?.end?.offset;
+                  if (literal !== "" && s !== void 0 && e !== void 0) {
+                    edits.push({
+                      start: toChar(s),
+                      end: toChar(e),
+                      // Emitted as an EXPRESSION, not a spliced string: Astro
+                      // escapes {expression} output, which is the XSS gate. A
+                      // probe proved naive splicing executes a stored
+                      // <script> tag.
+                      text: `{${HELPER_NAME}(${CONTENT_LOCAL}, ${quote(key)}, ${quote(literal)})}`
+                    });
+                    substituted.push({
+                      key,
+                      line: node.position?.start?.line ?? 0
+                    });
+                  }
+                }
+              }
+            }
+          }
+        }
+      }
+    }
+    for (const child of node.children ?? []) visit(child);
+  }
+  visit(ast);
+  if (edits.length === 0) {
+    return { code: source, changed: false, substituted: [] };
+  }
+  edits.sort((a, b) => b.start - a.start);
+  let code = source;
+  for (const edit of edits) {
+    code = code.slice(0, edit.start) + edit.text + code.slice(edit.end);
+  }
+  return {
+    code: injectImports(code, {
+      text: code.includes(`${HELPER_NAME}(`),
+      link: code.includes(`${LINK_HELPER_NAME}(`)
+    }),
+    changed: true,
+    substituted
+  };
+}
+function injectImports(code, used) {
+  const names = [
+    LOADER_NAME,
+    used.text ? HELPER_NAME : null,
+    used.link ? LINK_HELPER_NAME : null
+  ].filter(Boolean).join(", ");
+  const preamble = [
+    `import { ${names} } from ${quote(HELPER_MODULE)};`,
+    `const ${CONTENT_LOCAL} = await ${LOADER_NAME}();`
+  ].join("\n");
+  const fm = /^---\r?\n([\s\S]*?)\r?\n---/.exec(code);
+  if (!fm) {
+    return `---
+${preamble}
+---
+${code}`;
+  }
+  if (fm[1].includes(HELPER_MODULE)) return code;
+  const at = fm.index + fm[0].length - 3;
+  return `${code.slice(0, at)}${preamble}
+${code.slice(at)}`;
+}
+
 // src/integration.ts
 function resolvePublish(opts, hasDeployHookEnv) {
   const publish = opts.publish;
@@ -343,6 +502,11 @@ function canciaIntegration(opts = {}) {
         injectRoute({ pattern: "/api/cancia/lists/[listName]/[id]", entrypoint: endpointPath("lists"), prerender: false });
         const runtimeModulePath = fileURLToPath(new URL("./runtime.js", import.meta.url));
         const RESOLVED_VIRTUAL_ID = "\0virtual:cancia/runtime";
+        const textHelperModulePath = fileURLToPath(
+          new URL("./transform/text-helper.js", import.meta.url)
+        );
+        const TEXT_VIRTUAL_ID = "virtual:cancia/text";
+        const RESOLVED_TEXT_VIRTUAL_ID = "\0virtual:cancia/text";
         updateConfig({
           vite: {
             plugins: [
@@ -363,6 +527,56 @@ function canciaIntegration(opts = {}) {
                     `export { getCanciaRuntime };`
                   ].join("\n");
                 }
+              },
+              // ---- plan 054: attribute-only authoring ---------------------
+              // Rewrites `<h1 data-cms="k">text</h1>` into a helper call before
+              // Astro's compiler reads the file, so a developer never writes a
+              // t() call, an import, or a repeated key.
+              //
+              // This works because Astro compiles the `source` ARGUMENT rather
+              // than reading from disk (deliberate since astro#3889), so an
+              // upstream transform is honoured.
+              //
+              // NOTE `enforce: "pre"` does NOT place this before Astro's own
+              // plugin — Astro prepends its own and mergeConfig appends ours
+              // (measured: ours at 20, astro:build at 9). It works because Vite
+              // CHAINS transform hooks and Astro's has an id filter. Do not
+              // write anything here that depends on plugin array position.
+              {
+                name: "vite-plugin-cancia-attribute-text",
+                enforce: "pre",
+                resolveId(id) {
+                  if (id === TEXT_VIRTUAL_ID) return RESOLVED_TEXT_VIRTUAL_ID;
+                },
+                async load(id) {
+                  if (id.endsWith(".astro") && !id.includes("?")) {
+                    let source;
+                    try {
+                      source = await readFile(id, "utf8");
+                    } catch {
+                      return null;
+                    }
+                    const result = await transformAttributeText(source);
+                    return result.changed ? result.code : null;
+                  }
+                  if (id !== RESOLVED_TEXT_VIRTUAL_ID) return;
+                  const importUrl = pathToFileURL(textHelperModulePath).href;
+                  return [
+                    `import { __canciaText, __canciaLink, __canciaContent, configureTextHelper } from ${JSON.stringify(importUrl)};`,
+                    `import { getCanciaRuntime } from "virtual:cancia/runtime";`,
+                    `configureTextHelper({`,
+                    `  site: ${JSON.stringify(site)},`,
+                    `  lang: ${JSON.stringify(languages[0] ?? "en")},`,
+                    // The read goes through the runtime so it uses whatever
+                    // storage this project configured — no second adapter path.
+                    `  read: async () => {`,
+                    `    const rt = getCanciaRuntime();`,
+                    `    return rt.storageV2 ? rt.storageV2.kv.getAll(${JSON.stringify(site)}) : {};`,
+                    `  },`,
+                    `});`,
+                    `export { __canciaText, __canciaLink, __canciaContent };`
+                  ].join("\n");
+                }
               }
             ]
           }

package/dist/loader/index.d.ts

@@ -1,5 +1,8 @@
 import { Loader } from 'astro/loaders';
 import { a as CanciaStorageV2 } from '../types-BMlLS-OS.js';
+import { ListSchema } from '../schema/index.js';
+import 'zod';
+import '../portable-text-D74aIuHn.js';
 
 interface CanciaLoaderOptions {
     /** The list name as declared in src/cms/schemas.ts. */
@@ -20,6 +23,27 @@ interface CanciaLoaderOptions {
      * adapter. Ignored when `storage` is supplied.
      */
     projectRoot?: string;
+    /**
+     * The list's schema. Pass it to enable draft filtering: when the schema
+     * declares a `draftField`, entries flagged as drafts are omitted from the
+     * collection, so an unpublished entry never reaches the built site.
+     *
+     * Optional — omitting it keeps the pre-056 behaviour of emitting every
+     * stored entry. You are almost certainly already importing `schemas` in
+     * `src/content.config.ts` for the collection's `schema:`, so this is one
+     * more reference to the same object:
+     *
+     *   loader: canciaLoader({ list: "blog", site: "x", schema: schemas.blog }),
+     *   schema: schemas.blog.validator,
+     */
+    schema?: Pick<ListSchema, "draftField">;
+    /**
+     * Emit drafts anyway, even when `schema.draftField` is set. The escape hatch
+     * for a preview deployment: build the same site with drafts visible by
+     * flipping one flag (e.g. `includeDrafts: import.meta.env.PREVIEW === "1"`),
+     * rather than maintaining a second content config.
+     */
+    includeDrafts?: boolean;
 }
 declare function canciaLoader(opts: CanciaLoaderOptions): Loader;
 

package/dist/loader/index.js

@@ -1,8 +1,10 @@
 import {
   canciaLoader
-} from "../chunk-UR5WC3RA.js";
-import "../chunk-L2VKQJPY.js";
+} from "../chunk-GBTFXQEA.js";
+import "../chunk-2NVZWZPE.js";
 import "../chunk-7IA5B5CF.js";
+import "../chunk-WVHTCFE6.js";
+import "../chunk-KHCFVVYV.js";
 export {
   canciaLoader
 };

package/dist/{portable-text-BikSqS9T.d.ts → portable-text-D74aIuHn.d.ts}

@@ -113,5 +113,29 @@ declare const portableTextSubsetSchema: z.ZodArray<z.ZodObject<{
     }, z.core.$strip>>;
 }, z.core.$strip>>;
 type PortableTextValue = z.infer<typeof portableTextSubsetSchema>;
+/**
+ * Parse a stored rich-text value. NEVER throws.
+ *
+ * The KV surface stores every value as a string, so a rich document round-trips
+ * as JSON — exactly the precedent `link` set (see parseLinkValue). Four cases
+ * must all degrade gracefully rather than break a render:
+ *
+ *   - valid PT-subset JSON  → used as-is, with unsafe hrefs stripped
+ *   - a bare string         → ONE normal block containing that text. This is
+ *                             the migration path for a field promoted from
+ *                             `text` to `richtext`: it keeps rendering.
+ *   - empty string          → [] (deliberately empty — renders nothing, on
+ *                             purpose; NOT the same as "no override")
+ *   - malformed / off-subset → [] rather than propagating bad data to the
+ *                             renderer
+ *
+ * Unsafe hrefs are dropped ON READ, not only rejected on write. Validation
+ * guards the save path, but a value can reach a renderer another way — an older
+ * row, a hand-edited DB, a different adapter — so the read is where the
+ * guarantee actually holds. Same rule, same reason, as parseLinkValue.
+ */
+declare function parseRichValue(raw: unknown): PortableTextValue;
+/** Serialise a rich value for the KV store. Empty array -> "" (hidden). */
+declare function serializeRichValue(value: PortableTextValue): string;
 
-export { PT_DECORATORS as P, PT_LIST_ITEMS as a, PT_STYLES as b, type PortableTextValue as c, type PtBlock as d, type PtDecorator as e, type PtLinkMarkDef as f, type PtListItem as g, type PtSpan as h, type PtStyle as i, isSafeHref as j, ptBlockSchema as k, portableTextSubsetSchema as p };
+export { PT_DECORATORS as P, PT_LIST_ITEMS as a, PT_STYLES as b, type PortableTextValue as c, type PtBlock as d, type PtDecorator as e, type PtLinkMarkDef as f, type PtListItem as g, type PtSpan as h, type PtStyle as i, isSafeHref as j, portableTextSubsetSchema as k, ptBlockSchema as l, parseRichValue as p, serializeRichValue as s };

package/dist/richtext/CanciaRichRegion.astro

@@ -0,0 +1,57 @@
+---
+// =============================================================================
+// <CanciaRichRegion> — an editable rich-text region on the INLINE surface
+// =============================================================================
+// A slot the client can fill with real prose: paragraphs, h2/h3, blockquotes,
+// bullet/number lists, strong/em, and links. They may ADD and DELETE paragraphs
+// inside it. What they cannot do is invent a new section — the structure of the
+// PAGE stays the developer's; the structure INSIDE a region is the client's.
+//
+// Usage:
+//   ---
+//   import CanciaRichRegion from "@cancia/astro/richtext/CanciaRichRegion.astro";
+//   const { tRich } = await reader.get();
+//   ---
+//   <CanciaRichRegion key="about.story" value={tRich("about.story")}>
+//     <p>The prose authored in the page. This is the fallback.</p>
+//   </CanciaRichRegion>
+//
+// THE FALLBACK IS THE SLOT. A rich fallback cannot be a JS string, so rather
+// than serialise the markup into a Portable-Text literal at annotate time
+// (lossy, unreadable, and it stops the source being the source of truth), the
+// authored children ARE the fallback. An empty DB therefore renders
+// byte-identically — the invariant that makes annotating a live client site
+// safe.
+//
+// Three states, and the difference between the last two matters:
+//   value === null  → no override. Render the authored children.
+//   value === []    → a stored, DELIBERATELY EMPTY value. Render nothing; the
+//                     client removed this prose on purpose. Falling back to the
+//                     authored children here would resurrect deleted content.
+//   value = blocks  → render the stored document.
+//
+// Ships as a raw .astro under dist/richtext/ (an .astro file can't be a tsup
+// entry) and is Vite-free at the package boundary.
+// =============================================================================
+import CanciaRichText from "./CanciaRichText.astro";
+
+export interface Props {
+  /** Content key — what the toolbar edits and what the value is stored under. */
+  key: string;
+  /** The resolved value from `tRich(key)`. `null` means "no override". */
+  value?: Record<string, unknown>[] | null;
+  /** Element to render as the region wrapper. Default: `div`. */
+  as?: string;
+  class?: string;
+}
+
+const { key, value = null, as: Tag = "div", class: className } = Astro.props;
+
+// `null` (no row) is the only state that shows the authored markup. An empty
+// array is a real stored value and must render empty — see the header.
+const hasOverride = Array.isArray(value);
+---
+
+<Tag data-cms={key} data-cms-type="richtext" class={className}>
+  {hasOverride ? <CanciaRichText value={value} /> : <slot />}
+</Tag>

package/dist/richtext/index.d.ts

@@ -1,5 +1,5 @@
-import { i as PtStyle, g as PtListItem, d as PtBlock } from '../portable-text-BikSqS9T.js';
-export { P as PT_DECORATORS, a as PT_LIST_ITEMS, b as PT_STYLES, c as PortableTextValue, e as PtDecorator, f as PtLinkMarkDef, h as PtSpan, j as isSafeHref, p as portableTextSubsetSchema, k as ptBlockSchema } from '../portable-text-BikSqS9T.js';
+import { i as PtStyle, g as PtListItem, d as PtBlock } from '../portable-text-D74aIuHn.js';
+export { P as PT_DECORATORS, a as PT_LIST_ITEMS, b as PT_STYLES, c as PortableTextValue, e as PtDecorator, f as PtLinkMarkDef, h as PtSpan, j as isSafeHref, p as parseRichValue, k as portableTextSubsetSchema, l as ptBlockSchema, s as serializeRichValue } from '../portable-text-D74aIuHn.js';
 import 'zod';
 
 /** A row as the editor holds it: raw shorthand text + style + optional list kind. */