@cardinali-studio/adminkit 2.1.0 → 2.2.1

package/dist/api.d.ts

@@ -1,7 +1,9 @@
+import { type JsonValue } from "./persistence.js";
 export declare class ApiError extends Error {
     code: string;
     status: number;
-    constructor(message: string, code: string, status: number);
+    details: unknown;
+    constructor(message: string, code: string, status: number, details?: unknown);
 }
 export interface AssetFile {
     key: string;
@@ -50,6 +52,45 @@ export interface RepoPage {
         sha?: string;
     }>;
 }
+export type ContentSaveCommand = {
+    revisionId: string;
+    documentId: string;
+    baseRevisionId: string | null;
+    expectedDraftRevisionId?: string | null;
+    kind: string;
+    locale: string;
+    translationGroupId?: string | null;
+    payload: JsonValue | null;
+    tombstone: boolean;
+    schemaVersion: number;
+};
+export type ContentDocument = {
+    documentId: string;
+    kind: string;
+    locale: string;
+    draftRevisionId: string | null;
+    draftPayload: string | null;
+    draftTombstone: boolean | null;
+    publishedRevisionId: string | null;
+    publishedPayload: string | null;
+    publishedTombstone: boolean | null;
+};
+/** Builds the only D1 Save wire shape. The Worker recomputes these hashes too,
+ * so retries are deterministic rather than client-trusted. */
+export declare function contentSaveRequest(command: ContentSaveCommand): Promise<{
+    payloadChecksum: string;
+    requestChecksum: string;
+    revisionId: string;
+    documentId: string;
+    baseRevisionId: string | null;
+    expectedDraftRevisionId?: string | null;
+    kind: string;
+    locale: string;
+    translationGroupId?: string | null;
+    payload: JsonValue | null;
+    tombstone: boolean;
+    schemaVersion: number;
+}>;
 export declare const api: {
     pages: () => Promise<{
         ok: true;
@@ -71,6 +112,26 @@ export declare const api: {
         skipped: string[];
         shas?: Record<string, string>;
     }>;
+    contentState: () => Promise<{
+        ok: true;
+        state: {
+            current_release_id: string | null;
+        } | null;
+    }>;
+    contentDocument: (documentId: string) => Promise<{
+        ok: true;
+        document: ContentDocument;
+    }>;
+    saveContent: (command: ContentSaveCommand) => Promise<{
+        ok: true;
+        saved: true;
+        repeated: boolean;
+        revisionId: string;
+    }>;
+    discardContent: (documentId: string, expectedDraftRevisionId: string | null, baselineRevisionId: string | null) => Promise<{
+        ok: true;
+        discarded: true;
+    }>;
     publishState: () => Promise<{
         ok: true;
         configured: boolean;

package/dist/api.js

@@ -3,14 +3,17 @@
  * `unauthenticated` (sessione scaduta), `conflict` (qualcuno ha salvato nel frattempo),
  * `unreadable` (un file che non sappiamo riprodurre). Prima qualunque errore diventava
  * "backend non collegato", che manda a cercare il guasto dalla parte sbagliata. */
+import { canonicalChecksum, contentSaveRequestChecksum } from "./persistence.js";
 export class ApiError extends Error {
     code;
     status;
-    constructor(message, code, status) {
+    details;
+    constructor(message, code, status, details = null) {
         super(message);
         this.name = "ApiError";
         this.code = code;
         this.status = status;
+        this.details = details;
     }
 }
 async function call(url, init) {
@@ -22,7 +25,7 @@ async function call(url, init) {
     catch { /* risposta non JSON */ }
     if (!res.ok || (body && body.ok === false)) {
         const code = body?.code ?? (res.status === 401 ? "unauthenticated" : "error");
-        throw new ApiError(body?.error ?? `HTTP ${res.status}`, code, res.status);
+        throw new ApiError(body?.error ?? `HTTP ${res.status}`, code, res.status, body);
     }
     return body;
 }
@@ -31,6 +34,15 @@ const post = (url, data) => call(url, {
     headers: { "Content-Type": "application/json" },
     body: JSON.stringify(data),
 });
+/** Builds the only D1 Save wire shape. The Worker recomputes these hashes too,
+ * so retries are deterministic rather than client-trusted. */
+export async function contentSaveRequest(command) {
+    return {
+        ...command,
+        payloadChecksum: await canonicalChecksum(command.tombstone ? null : command.payload),
+        requestChecksum: await contentSaveRequestChecksum(command),
+    };
+}
 export const api = {
     // ---- pagine
     /* L'elenco viene DAL REPO, non da `/index.json`, che è il sito pubblicato e quindi indietro
@@ -43,6 +55,11 @@ export const api = {
     /* `shas` è la versione di ogni file DOPO il commit: senza, il salvataggio successivo
      * partirebbe da una versione che non esiste più e verrebbe rifiutato. */
     savePages: (pages) => post("/admin/api/pages", { pages }),
+    // ---- D1 content persistence (inactive unless a site explicitly selects it)
+    contentState: () => call("/admin/api/content/state"),
+    contentDocument: (documentId) => call(`/admin/api/content/document?id=${encodeURIComponent(documentId)}`),
+    saveContent: async (command) => post("/admin/api/content/save", await contentSaveRequest(command)),
+    discardContent: (documentId, expectedDraftRevisionId, baselineRevisionId) => post("/admin/api/content/discard", { documentId, expectedDraftRevisionId, baselineRevisionId }),
     // ---- pubblicazione
     /* Salvare scrive sulla bozza e non fa partire nessuna build; è questo che manda online. Due
      * gesti separati, quindi due chiamate: una chiede quanto c'è di non pubblicato, l'altra lo

package/dist/app/app.css

@@ -2093,3 +2093,24 @@ body:has(.uk) .pane-body { padding-bottom: 190px; }
   font: 400 14px/1.6 var(--ak-font); color: var(--ak-ink);
 }
 .feature-off-cta a { color: var(--ak-accent); text-decoration: underline; text-underline-offset: 2px; }
+/* Conflict resolution is deliberately a focused modal: accepting the current
+ * saved value by default is fine for one-sided changes, but divergent fields
+ * require an explicit radio choice before the composed preview can continue. */
+.ak-conflict-backdrop { position: fixed; inset: 0; z-index: 50; display: grid; place-items: center; padding: 24px; background: color-mix(in srgb, #111 55%, transparent); }
+.ak-conflict-dialog { width: min(760px, 100%); max-height: min(780px, 100%); overflow: auto; padding: 24px; border: 1px solid var(--ak-line, #d7d7d7); border-radius: 12px; background: var(--ak-surface, #fff); color: var(--ak-ink, #161616); box-shadow: 0 24px 70px rgba(0,0,0,.28); }
+.ak-conflict-dialog h2 { margin: 0; font-size: 20px; }
+.ak-conflict-dialog h2:focus { outline: none; }
+.ak-conflict-dialog header > p { margin: 8px 0 20px; color: var(--ak-muted, #606060); }
+.ak-conflict-fields { display: grid; gap: 14px; }
+.ak-conflict-field { padding: 16px; border: 1px solid var(--ak-line, #d7d7d7); border-radius: 8px; }
+.ak-conflict-field h3 { margin: 0 0 8px; font-size: 15px; }
+.ak-conflict-required { margin: 0 0 10px; color: #a33; font-weight: 600; }
+.ak-conflict-diff { margin: 0 0 10px; font: 12px/1.45 ui-monospace, SFMono-Regular, Menlo, monospace; color: var(--ak-muted, #606060); white-space: pre-wrap; }
+.ak-conflict-options { display: grid; grid-template-columns: repeat(2, minmax(0, 1fr)); gap: 10px; }
+.ak-conflict-options label { display: flex; gap: 8px; padding: 10px; border: 1px solid var(--ak-line, #d7d7d7); border-radius: 6px; cursor: pointer; }
+.ak-conflict-options input { margin-top: 3px; }
+.ak-conflict-options strong, .ak-conflict-value { display: block; }
+.ak-conflict-value { margin-top: 5px; overflow-wrap: anywhere; font-size: 13px; font-weight: 400; }
+.ak-conflict-image { display: grid; gap: 6px; margin-top: 5px; }.ak-conflict-image img { width: 72px; height: 48px; object-fit: cover; border-radius: 3px; }.ak-conflict-image code { overflow-wrap: anywhere; font-size: 11px; }
+.ak-conflict-dialog footer { display: flex; justify-content: flex-end; gap: 10px; margin-top: 20px; }
+@media (max-width: 620px) { .ak-conflict-options { grid-template-columns: 1fr; } .ak-conflict-backdrop { padding: 12px; } }

package/dist/app/lib/content-persistence.d.ts

@@ -0,0 +1,9 @@
+import { type ContentSaveCommand } from "../../api.js";
+export type ContentPersistenceClient = {
+    readonly mode: "github" | "d1";
+    state(): Promise<unknown>;
+    document(documentId: string): Promise<unknown>;
+    save(command: ContentSaveCommand): Promise<unknown>;
+    discard(documentId: string, expectedDraftRevisionId: string | null, baselineRevisionId: string | null): Promise<unknown>;
+};
+export declare function contentPersistenceClient(): ContentPersistenceClient;

package/dist/app/lib/content-persistence.js

@@ -0,0 +1,25 @@
+/* Browser-side persistence boundary. Editors use this adapter rather than
+ * reaching for /pages or /content directly, so the migration switch remains
+ * one deliberate per-site decision. */
+import { api } from "../../api.js";
+import { contentPersistenceMode } from "../site.js";
+const d1Client = {
+    mode: "d1",
+    state: () => api.contentState(),
+    document: (documentId) => api.contentDocument(documentId),
+    save: (command) => api.saveContent(command),
+    discard: (documentId, expectedDraftRevisionId, baselineRevisionId) => api.discardContent(documentId, expectedDraftRevisionId, baselineRevisionId),
+};
+/* Existing Git page/singleton adapters remain their own typed flows until the
+ * site supplies a lossless document mapping. A generic fallback would silently
+ * turn site-specific content into the wrong D1 document. */
+const gitClient = {
+    mode: "github",
+    state: async () => ({ mode: "github" }),
+    document: async () => { throw new Error("content_persistence_inactive"); },
+    save: async () => { throw new Error("content_persistence_inactive"); },
+    discard: async () => { throw new Error("content_persistence_inactive"); },
+};
+export function contentPersistenceClient() {
+    return contentPersistenceMode() === "d1" ? d1Client : gitClient;
+}

package/dist/app/lib/home.js

@@ -10,6 +10,8 @@
  */
 import { useCallback, useEffect, useState } from "react";
 import { ApiError } from "../../index.js";
+import { api } from "../../api.js";
+import { contentPersistenceMode, site } from "../site.js";
 async function call(url, init) {
     const res = await fetch(url, { cache: "no-store", ...init });
     const body = await res.json().catch(() => null);
@@ -24,9 +26,20 @@ export function useHome(active) {
     const [dirty, setDirty] = useState(false);
     const [saving, setSaving] = useState(false);
     const [notice, setNotice] = useState(null);
+    const [revision, setRevision] = useState(null);
     const load = useCallback(async () => {
         try {
-            setData((await call("/admin/api/singleton?name=home")).data);
+            const mapped = site().homeDocument;
+            if (contentPersistenceMode() === "d1" && mapped) {
+                const { document } = await api.contentDocument(mapped.documentId);
+                const payload = document.draftPayload ?? document.publishedPayload;
+                if (!payload || (document.draftPayload !== null ? document.draftTombstone : document.publishedTombstone))
+                    throw new Error("content_unavailable");
+                setData(JSON.parse(payload));
+                setRevision({ base: document.draftRevisionId ?? document.publishedRevisionId, expected: document.draftRevisionId });
+            }
+            else
+                setData((await call("/admin/api/singleton?name=home")).data);
             setError(null);
             setDirty(false);
         }
@@ -44,6 +57,15 @@ export function useHome(active) {
         setSaving(true);
         setNotice(null);
         try {
+            const mapped = site().homeDocument;
+            if (contentPersistenceMode() === "d1" && mapped && revision) {
+                const revisionId = crypto.randomUUID();
+                await api.saveContent({ revisionId, documentId: mapped.documentId, baseRevisionId: revision.base, expectedDraftRevisionId: revision.expected, kind: mapped.kind, locale: mapped.locale, schemaVersion: mapped.schemaVersion, payload: data, tombstone: false });
+                setRevision({ base: revisionId, expected: revisionId });
+                setNotice("Bozza D1 salvata");
+                setDirty(false);
+                return;
+            }
             await call("/admin/api/singleton", {
                 method: "POST",
                 headers: { "Content-Type": "application/json" },
@@ -61,7 +83,7 @@ export function useHome(active) {
         finally {
             setSaving(false);
         }
-    }, [data]);
+    }, [data, revision]);
     const change = useCallback((next) => { setData(next); setDirty(true); }, []);
     return { data, error, dirty, saving, notice, load, change, save, setNotice };
 }

package/dist/app/lib/publish.js

@@ -7,6 +7,7 @@
  */
 import { useCallback, useEffect, useState } from "react";
 import { api, ApiError } from "../../index.js";
+import { contentPersistenceMode } from "../site.js";
 export function usePublish() {
     const [ahead, setAhead] = useState(0);
     const [commits, setCommits] = useState([]);
@@ -15,6 +16,13 @@ export function usePublish() {
     const [notice, setNotice] = useState(null);
     const [error, setError] = useState(null);
     const reload = useCallback(async () => {
+        if (contentPersistenceMode() === "d1") {
+            setAhead(0);
+            setCommits([]);
+            setConfigured(false);
+            setError("La pubblicazione D1 non è ancora disponibile in questa versione del pannello.");
+            return;
+        }
         try {
             const d = await api.publishState();
             setAhead(d.ahead ?? 0);
@@ -33,6 +41,10 @@ export function usePublish() {
      * non serve a niente. È la stessa ragione dei badge di Richieste e Consegne. */
     useEffect(() => { void reload(); }, [reload]);
     const publish = useCallback(async () => {
+        if (contentPersistenceMode() === "d1") {
+            setNotice("La pubblicazione D1 non è ancora disponibile in questa versione del pannello.");
+            return;
+        }
         setPublishing(true);
         setNotice(null);
         try {

package/dist/app/routes/SiteSettingsEditor.js

@@ -1,6 +1,6 @@
 import { jsx as _jsx, jsxs as _jsxs, Fragment as _Fragment } from "react/jsx-runtime";
 import { useEffect, useRef } from "react";
-import { site } from "../site.js";
+import { contentPersistenceMode, site } from "../site.js";
 import { Icon } from "../ui/icons";
 function Toggle({ checked, onChange, label, disabled = false, }) {
     return (
@@ -32,10 +32,11 @@ export const EXTRAS = [
 function SettingRow({ title, help, children, }) {
     return (_jsxs("div", { className: "st-row", children: [_jsxs("div", { className: "st-copy", children: [_jsx("h3", { children: title }), _jsx("p", { children: help })] }), _jsx("div", { className: "st-control", children: children })] }));
 }
-function Field({ value, onChange, maxLength, placeholder, type = "text", }) {
-    return (_jsx("input", { className: "st-input", type: type, value: value, maxLength: maxLength, placeholder: placeholder, onChange: (event) => onChange(event.target.value) }));
+function Field({ value, onChange, maxLength, placeholder, type = "text", disabled = false, }) {
+    return (_jsx("input", { className: "st-input", type: type, value: value, maxLength: maxLength, placeholder: placeholder, disabled: disabled, onChange: (event) => onChange(event.target.value) }));
 }
 export function SiteSettingsEditor({ value, onChange, pickMediaFiles, focus, }) {
+    const d1Content = contentPersistenceMode() === "d1";
     const update = (key, next) => onChange({ ...value, [key]: next });
     const extras = useRef(null);
     /* Salto SECCO (`behavior: "auto"`), non fluido, e al frame successivo.
@@ -57,7 +58,7 @@ export function SiteSettingsEditor({ value, onChange, pickMediaFiles, focus, })
         if (selected?.[0])
             update("favicon", selected[0].url);
     };
-    return (_jsxs("section", { className: "settings-editor", children: [_jsxs("header", { className: "st-intro", children: [_jsx("span", { children: "Impostazioni generali" }), _jsx("h2", { children: "Sito" }), _jsx("p", { children: "Identit\u00E0, descrizione e accesso al sito pubblico." })] }), _jsxs("section", { className: "st-section", children: [_jsx("h2", { children: "Identit\u00E0 del sito" }), _jsx(SettingRow, { title: "Titolo del sito", help: "Il nome generale del sito, usato anche come nome del publisher nei metadati.", children: _jsx(Field, { value: value.siteTitle, maxLength: 140, placeholder: site().name, onChange: (next) => update("siteTitle", next) }) }), _jsxs(SettingRow, { title: "Descrizione breve", help: "Una frase sintetica usata come descrizione predefinita quando una pagina non ne possiede una specifica.", children: [_jsx("textarea", { className: "st-input st-textarea", rows: 3, value: value.shortDescription, maxLength: 255, onChange: (event) => update("shortDescription", event.target.value) }), _jsxs("span", { className: "st-count", children: [value.shortDescription.length, "/255"] })] }), _jsx(SettingRow, { title: "Favicon", help: "L\u2019icona mostrata nella scheda del browser. \u00C8 preferibile un\u2019immagine quadrata.", children: _jsxs("div", { className: "st-favicon", children: [_jsx("span", { className: "st-favicon-preview", children: value.favicon ? _jsx("img", { src: value.favicon, alt: "Anteprima favicon" }) : _jsx(Icon.pages, {}) }), _jsx("button", { className: "ak-btn", type: "button", onClick: () => void chooseFavicon(), children: value.favicon ? "Cambia favicon" : "Carica favicon" }), value.favicon && (_jsx("button", { className: "ak-btn ak-btn-quiet", type: "button", onClick: () => update("favicon", ""), children: "Rimuovi" }))] }) })] }), _jsxs("section", { className: "st-section", children: [_jsx("h2", { children: "Accesso al sito" }), _jsx(SettingRow, { title: "Password del sito", help: "Quando \u00E8 attiva, ogni pagina e ogni immagine pubblica richiedono la stessa password. L\u2019admin resta raggiungibile tramite il suo accesso protetto.", children: _jsxs("div", { className: "st-stack", children: [_jsx(Field, { type: "password", value: value.password, maxLength: 200, placeholder: value.passwordEnabled ? "Password già impostata · inseriscine una per cambiarla" : "Almeno 8 caratteri", onChange: (next) => update("password", next) }), _jsx(Toggle, { checked: value.passwordEnabled, label: "Protezione con password", onChange: (next) => update("passwordEnabled", next) }), value.passwordEnabled && (_jsx("p", { className: "st-inline-help", children: "Lascia il campo vuoto per mantenere la password attuale." }))] }) })] }), _jsxs("section", { className: "st-section" + (focus === "funzioni" ? " is-focused" : ""), ref: extras, children: [_jsx("h2", { children: "Funzioni aggiuntive" }), EXTRAS.map((extra) => (_jsx(SettingRow, { title: extra.title, help: extra.help, children: _jsx(Toggle, { checked: value.features[extra.key], disabled: true, label: value.features[extra.key] ? "Attiva su questo sito" : "Non attiva", onChange: () => { } }) }, extra.key))), _jsxs("p", { className: "st-inline-help st-extras-note", children: ["Queste funzioni si attivano separatamente. Per accenderle su questo sito scrivi a", " ", _jsx("strong", { children: site().support.name }), ":", " ", _jsx("a", { href: `mailto:${site().support.email}`, children: site().support.email }), "."] })] }), _jsxs("section", { className: "st-section", children: [_jsx("h2", { children: "Statistiche" }), _jsx(SettingRow, { title: "Tag Analytics", help: _jsxs(_Fragment, { children: ["Il codice fornito dal servizio di statistiche (Umami, Google Analytics, altro). Si incolla qui cos\u00EC com\u2019\u00E8: finisce dentro ", _jsx("code", { children: "<head>" }), " di ogni pagina del sito alla prossima pubblicazione. Le pagine di consegna ai clienti restano escluse. Per svuotarlo, cancella tutto e salva."] }), children: _jsxs("div", { className: "st-stack", children: [_jsx("textarea", { className: "st-input st-textarea st-code", rows: 6, value: value.analyticsTag, maxLength: 4000, spellCheck: false, autoCapitalize: "off", autoCorrect: "off", placeholder: '<script defer src="https://cloud.umami.is/script.js" data-website-id="…"></script>', onChange: (event) => update("analyticsTag", event.target.value) }), _jsxs("span", { className: "st-count", children: [value.analyticsTag.length, "/4000"] }), _jsxs("p", { className: "st-inline-help", children: ["\u00C8 codice eseguito su ogni pagina: incolla solo quello che ti ha dato il servizio. Un tag incompleto (per esempio senza ", _jsx("code", { children: "</script>" }), ") pu\u00F2 rompere il sito."] })] }) })] }), _jsxs("section", { className: "st-section", children: [_jsx("h2", { children: "Profilo" }), _jsx(SettingRow, { title: "Nome", help: "Il nome della persona proprietaria del sito. Sar\u00E0 disponibile per future funzioni del pannello.", children: _jsx(Field, { value: value.ownerName, maxLength: 120, placeholder: site().name, onChange: (next) => update("ownerName", next) }) }), _jsxs(SettingRow, { title: "Descrizione del sito", help: "Una descrizione generale pi\u00F9 estesa, conservata come informazione del profilo del sito.", children: [_jsx("textarea", { className: "st-input st-textarea", rows: 5, value: value.siteDescription, maxLength: 1200, onChange: (event) => update("siteDescription", event.target.value) }), _jsxs("span", { className: "st-count", children: [value.siteDescription.length, "/1200"] })] })] })] }));
+    return (_jsxs("section", { className: "settings-editor", children: [_jsxs("header", { className: "st-intro", children: [_jsx("span", { children: "Impostazioni generali" }), _jsx("h2", { children: "Sito" }), _jsx("p", { children: "Identit\u00E0, descrizione e accesso al sito pubblico." })] }), _jsxs("section", { className: "st-section", children: [_jsx("h2", { children: "Identit\u00E0 del sito" }), _jsx(SettingRow, { title: "Titolo del sito", help: "Il nome generale del sito, usato anche come nome del publisher nei metadati.", children: _jsx(Field, { value: value.siteTitle, maxLength: 140, placeholder: site().name, onChange: (next) => update("siteTitle", next) }) }), _jsxs(SettingRow, { title: "Descrizione breve", help: "Una frase sintetica usata come descrizione predefinita quando una pagina non ne possiede una specifica.", children: [_jsx("textarea", { className: "st-input st-textarea", rows: 3, value: value.shortDescription, maxLength: 255, onChange: (event) => update("shortDescription", event.target.value) }), _jsxs("span", { className: "st-count", children: [value.shortDescription.length, "/255"] })] }), _jsx(SettingRow, { title: "Favicon", help: "L\u2019icona mostrata nella scheda del browser. \u00C8 preferibile un\u2019immagine quadrata.", children: _jsxs("div", { className: "st-favicon", children: [_jsx("span", { className: "st-favicon-preview", children: value.favicon ? _jsx("img", { src: value.favicon, alt: "Anteprima favicon" }) : _jsx(Icon.pages, {}) }), _jsx("button", { className: "ak-btn", type: "button", onClick: () => void chooseFavicon(), children: value.favicon ? "Cambia favicon" : "Carica favicon" }), value.favicon && (_jsx("button", { className: "ak-btn ak-btn-quiet", type: "button", onClick: () => update("favicon", ""), children: "Rimuovi" }))] }) })] }), _jsxs("section", { className: "st-section", children: [_jsx("h2", { children: "Accesso al sito" }), _jsx(SettingRow, { title: "Password del sito", help: "Quando \u00E8 attiva, ogni pagina e ogni immagine pubblica richiedono la stessa password. L\u2019admin resta raggiungibile tramite il suo accesso protetto.", children: _jsxs("div", { className: "st-stack", children: [_jsx(Field, { type: "password", value: value.password, maxLength: 200, placeholder: value.passwordEnabled ? "Password già impostata · inseriscine una per cambiarla" : "Almeno 8 caratteri", disabled: d1Content, onChange: (next) => update("password", next) }), _jsx(Toggle, { checked: value.passwordEnabled, label: "Protezione con password", disabled: d1Content, onChange: (next) => update("passwordEnabled", next) }), d1Content && (_jsx("p", { className: "st-inline-help", children: "La protezione esistente resta attiva e viene gestita dall\u2019operatore durante la migrazione D1." })), value.passwordEnabled && (_jsx("p", { className: "st-inline-help", children: "Lascia il campo vuoto per mantenere la password attuale." }))] }) })] }), _jsxs("section", { className: "st-section" + (focus === "funzioni" ? " is-focused" : ""), ref: extras, children: [_jsx("h2", { children: "Funzioni aggiuntive" }), EXTRAS.map((extra) => (_jsx(SettingRow, { title: extra.title, help: extra.help, children: _jsx(Toggle, { checked: value.features[extra.key], disabled: true, label: value.features[extra.key] ? "Attiva su questo sito" : "Non attiva", onChange: () => { } }) }, extra.key))), _jsxs("p", { className: "st-inline-help st-extras-note", children: ["Queste funzioni si attivano separatamente. Per accenderle su questo sito scrivi a", " ", _jsx("strong", { children: site().support.name }), ":", " ", _jsx("a", { href: `mailto:${site().support.email}`, children: site().support.email }), "."] })] }), _jsxs("section", { className: "st-section", children: [_jsx("h2", { children: "Statistiche" }), _jsx(SettingRow, { title: "Tag Analytics", help: _jsxs(_Fragment, { children: ["Il codice fornito dal servizio di statistiche (Umami, Google Analytics, altro). Si incolla qui cos\u00EC com\u2019\u00E8: finisce dentro ", _jsx("code", { children: "<head>" }), " di ogni pagina del sito alla prossima pubblicazione. Le pagine di consegna ai clienti restano escluse. Per svuotarlo, cancella tutto e salva."] }), children: _jsxs("div", { className: "st-stack", children: [_jsx("textarea", { className: "st-input st-textarea st-code", rows: 6, value: value.analyticsTag, maxLength: 4000, spellCheck: false, autoCapitalize: "off", autoCorrect: "off", placeholder: '<script defer src="https://cloud.umami.is/script.js" data-website-id="…"></script>', onChange: (event) => update("analyticsTag", event.target.value) }), _jsxs("span", { className: "st-count", children: [value.analyticsTag.length, "/4000"] }), _jsxs("p", { className: "st-inline-help", children: ["\u00C8 codice eseguito su ogni pagina: incolla solo quello che ti ha dato il servizio. Un tag incompleto (per esempio senza ", _jsx("code", { children: "</script>" }), ") pu\u00F2 rompere il sito."] })] }) })] }), _jsxs("section", { className: "st-section", children: [_jsx("h2", { children: "Profilo" }), _jsx(SettingRow, { title: "Nome", help: "Il nome della persona proprietaria del sito. Sar\u00E0 disponibile per future funzioni del pannello.", children: _jsx(Field, { value: value.ownerName, maxLength: 120, placeholder: site().name, onChange: (next) => update("ownerName", next) }) }), _jsxs(SettingRow, { title: "Descrizione del sito", help: "Una descrizione generale pi\u00F9 estesa, conservata come informazione del profilo del sito.", children: [_jsx("textarea", { className: "st-input st-textarea", rows: 5, value: value.siteDescription, maxLength: 1200, onChange: (event) => update("siteDescription", event.target.value) }), _jsxs("span", { className: "st-count", children: [value.siteDescription.length, "/1200"] })] })] })] }));
 }
 export function WebsiteSeoSettingsEditor({ value, onChange, }) {
     const update = (key, next) => onChange({ ...value, [key]: next });

package/dist/app/site.d.ts

@@ -47,8 +47,19 @@ export interface SiteAdminConfig {
      * una sola verità per due letture, o il pannello promette ciò che il server nega.
      */
     modules?: Record<string, boolean>;
+    /** Git remains the compatibility default. D1 is an explicit, later site cutover. */
+    contentPersistence?: "github" | "d1";
+    /** Lossless D1 identity for the singleton home; required before its editor may leave Git. */
+    homeDocument?: {
+        documentId: string;
+        kind: string;
+        locale: string;
+        schemaVersion: number;
+    };
 }
 /** Chiamata da `mountAdmin` prima del primo render. */
 export declare function setSiteConfig(config: SiteAdminConfig): void;
 export declare function site(): SiteAdminConfig;
 export declare function pageType(type: unknown): PageTypeConfig | null;
+/** A single mode decision for all browser persistence clients. */
+export declare function contentPersistenceMode(): "github" | "d1";

package/dist/app/site.js

@@ -19,3 +19,7 @@ export function site() {
 export function pageType(type) {
     return site().pages[String(type ?? "")] ?? null;
 }
+/** A single mode decision for all browser persistence clients. */
+export function contentPersistenceMode() {
+    return site().contentPersistence === "d1" ? "d1" : "github";
+}

package/dist/app/ui/ConflictResolutionDialog.d.ts

@@ -0,0 +1,8 @@
+import { type ClassifiedConflictField, type Resolution } from "../../conflict.js";
+/** Generic, non-merging conflict chooser. A site passes only already-approved
+ * fields/values; this component returns choices, never a fabricated document. */
+export declare function ConflictResolutionDialog({ fields, onResolve, onCancel, }: {
+    fields: readonly ClassifiedConflictField[];
+    onResolve: (choices: Record<string, Resolution>) => void;
+    onCancel: () => void;
+}): import("react").JSX.Element;

package/dist/app/ui/ConflictResolutionDialog.js

@@ -0,0 +1,30 @@
+import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
+import { useEffect, useRef, useState } from "react";
+import { boundedTextDifference } from "../../conflict.js";
+function text(value) {
+    if (typeof value === "string")
+        return value;
+    return JSON.stringify(value);
+}
+function FieldValue({ field, value }) {
+    if (field.presentation === "image" && typeof value === "string") {
+        return _jsxs("span", { className: "ak-conflict-image", children: [_jsx("img", { src: value, alt: "" }), _jsx("code", { children: value })] });
+    }
+    if (field.presentation === "complex")
+        return _jsx("pre", { className: "ak-conflict-value", children: text(value) });
+    return _jsx("span", { className: "ak-conflict-value", children: text(value) });
+}
+/** Generic, non-merging conflict chooser. A site passes only already-approved
+ * fields/values; this component returns choices, never a fabricated document. */
+export function ConflictResolutionDialog({ fields, onResolve, onCancel, }) {
+    const [choices, setChoices] = useState(() => Object.fromEntries(fields.flatMap((field) => field.defaultResolution ? [[field.path, field.defaultResolution]] : [])));
+    const title = useRef(null);
+    useEffect(() => { title.current?.focus(); }, []);
+    const unresolved = fields.some((field) => field.kind === "both_changed" && !choices[field.path]);
+    return (_jsx("div", { className: "ak-conflict-backdrop", role: "presentation", onMouseDown: onCancel, children: _jsxs("section", { className: "ak-conflict-dialog", role: "dialog", "aria-modal": "true", "aria-labelledby": "ak-conflict-title", onMouseDown: (event) => event.stopPropagation(), onKeyDown: (event) => { if (event.key === "Escape")
+                onCancel(); }, children: [_jsxs("header", { children: [_jsx("h2", { id: "ak-conflict-title", ref: title, tabIndex: -1, children: "Risolvi le modifiche concorrenti" }), _jsx("p", { children: "Confronta ogni campo e scegli cosa mantenere. Nessuna scelta viene unita automaticamente." })] }), _jsx("div", { className: "ak-conflict-fields", children: fields.filter((field) => field.kind !== "unchanged").map((field) => {
+                        const difference = field.presentation === "text" && typeof field.base === "string" && typeof field.current === "string"
+                            ? boundedTextDifference(field.base, field.current) : null;
+                        return _jsxs("article", { className: "ak-conflict-field", children: [_jsx("h3", { children: field.label }), field.kind === "both_changed" && _jsx("p", { className: "ak-conflict-required", children: "Scegli esplicitamente una versione." }), difference && (difference.added || difference.removed) && _jsxs("p", { className: "ak-conflict-diff", children: ["Salvato: \u2212", difference.removed || "—", " +", difference.added || "—", difference.truncated ? "…" : ""] }), _jsxs("div", { className: "ak-conflict-options", children: [_jsxs("label", { children: [_jsx("input", { type: "radio", name: field.path, checked: choices[field.path] === "saved", onChange: () => setChoices((previous) => ({ ...previous, [field.path]: "saved" })) }), _jsxs("span", { children: [_jsx("strong", { children: "Usa il salvato" }), _jsx(FieldValue, { field: field, value: field.current })] })] }), _jsxs("label", { children: [_jsx("input", { type: "radio", name: field.path, checked: choices[field.path] === "mine", onChange: () => setChoices((previous) => ({ ...previous, [field.path]: "mine" })) }), _jsxs("span", { children: [_jsx("strong", { children: "Tieni il mio" }), _jsx(FieldValue, { field: field, value: field.mine })] })] })] })] }, field.path);
+                    }) }), _jsxs("footer", { children: [_jsx("button", { className: "ak-btn", type: "button", onClick: onCancel, children: "Annulla" }), _jsx("button", { className: "ak-btn ak-btn-primary", type: "button", disabled: unresolved, onClick: () => onResolve(choices), children: "Anteprima risultato" })] })] }) }));
+}

package/dist/conflict.d.ts

@@ -0,0 +1,30 @@
+import { type JsonValue } from "./persistence.js";
+export type ConflictKind = "current_only" | "mine_only" | "same_change" | "both_changed" | "unchanged";
+export type Resolution = "saved" | "mine";
+/** Values arrive here only after the Worker/site presenter has approved them
+ * for display. Arrays, rich text and Media values remain one whole field: this
+ * module deliberately never attempts an automatic merge. */
+export type ConflictField = {
+    path: string;
+    label: string;
+    presentation?: "text" | "image" | "complex";
+    base: JsonValue | undefined;
+    current: JsonValue | undefined;
+    mine: JsonValue | undefined;
+};
+export type ClassifiedConflictField = ConflictField & {
+    kind: ConflictKind;
+    defaultResolution: Resolution | null;
+};
+export declare function classifyConflictField(field: ConflictField): ClassifiedConflictField;
+export declare function classifyConflict(fields: readonly ConflictField[]): ClassifiedConflictField[];
+/** Returns choices only when every both-changed field has an explicit choice.
+ * It intentionally does not invent a field-level or text-level merge. */
+export declare function resolveConflict(fields: readonly ClassifiedConflictField[], choices: Readonly<Record<string, Resolution | undefined>>): Record<string, JsonValue | undefined>;
+/** Bounded, deliberately simple long-text cue for the UI. It does not claim to
+ * be a merge preview: values remain complete field replacements. */
+export declare function boundedTextDifference(base: string, next: string, limit?: number): {
+    removed: string;
+    added: string;
+    truncated: boolean;
+};

package/dist/conflict.js

@@ -0,0 +1,48 @@
+import { canonicalJson } from "./persistence.js";
+function same(left, right) {
+    if (left === undefined || right === undefined)
+        return left === right;
+    return canonicalJson(left) === canonicalJson(right);
+}
+export function classifyConflictField(field) {
+    const savedChanged = !same(field.base, field.current);
+    const mineChanged = !same(field.base, field.mine);
+    if (!savedChanged && !mineChanged)
+        return { ...field, kind: "unchanged", defaultResolution: "saved" };
+    if (savedChanged && !mineChanged)
+        return { ...field, kind: "current_only", defaultResolution: "saved" };
+    if (!savedChanged && mineChanged)
+        return { ...field, kind: "mine_only", defaultResolution: "mine" };
+    if (same(field.current, field.mine))
+        return { ...field, kind: "same_change", defaultResolution: "saved" };
+    return { ...field, kind: "both_changed", defaultResolution: null };
+}
+export function classifyConflict(fields) {
+    return fields.map(classifyConflictField);
+}
+/** Returns choices only when every both-changed field has an explicit choice.
+ * It intentionally does not invent a field-level or text-level merge. */
+export function resolveConflict(fields, choices) {
+    const resolved = {};
+    for (const field of fields) {
+        const choice = choices[field.path] ?? field.defaultResolution;
+        if (!choice)
+            throw new Error("unresolved_conflict");
+        resolved[field.path] = choice === "saved" ? field.current : field.mine;
+    }
+    return resolved;
+}
+/** Bounded, deliberately simple long-text cue for the UI. It does not claim to
+ * be a merge preview: values remain complete field replacements. */
+export function boundedTextDifference(base, next, limit = 240) {
+    let prefix = 0;
+    while (prefix < base.length && prefix < next.length && base[prefix] === next[prefix])
+        prefix += 1;
+    let suffix = 0;
+    while (suffix < base.length - prefix && suffix < next.length - prefix && base[base.length - 1 - suffix] === next[next.length - 1 - suffix])
+        suffix += 1;
+    const removed = base.slice(prefix, base.length - suffix);
+    const added = next.slice(prefix, next.length - suffix);
+    const truncated = removed.length > limit || added.length > limit;
+    return { removed: removed.slice(0, limit), added: added.slice(0, limit), truncated };
+}

package/dist/deployment.d.ts

@@ -0,0 +1,92 @@
+import { type D1DatabaseLike } from "./persistence.js";
+export declare const deploymentPhases: readonly ["waiting", "validating", "materializing", "building", "deploying", "verifying_deployment_url", "verifying_canonical", "succeeded", "failed", "ambiguous", "superseded"];
+export type DeploymentPhase = typeof deploymentPhases[number];
+export type DeploymentIntent = "content" | "code";
+export type DeploymentAttempt = Readonly<{
+    attemptId: string;
+    intentKind: DeploymentIntent;
+    releaseId: string;
+    codeSha: string | null;
+    phase: DeploymentPhase;
+    claimTokenChecksum: string | null;
+    claimExpiresAt: number | null;
+}>;
+export type RegisterDeploymentAttempt = Readonly<{
+    attemptId: string;
+    intentKind: DeploymentIntent;
+    requestedReleaseId: string | null;
+    requestedCodeSha: string | null;
+    releaseId: string;
+    codeSha: string;
+    expectedFingerprint: string;
+    now: number;
+}>;
+export declare function isTerminalDeploymentPhase(phase: DeploymentPhase): boolean;
+export declare function assertDeploymentTransition(from: DeploymentPhase, to: DeploymentPhase): void;
+/** A claim is a single-use, short-lived capability. The CI shared credential
+ * authenticates the caller; the claim token binds its later calls to one exact
+ * attempt so a captured request cannot be replayed against another release. */
+export declare function claimTokenChecksum(token: string): Promise<string>;
+export declare function constantTimeSecretEqual(expected: string, provided: string): Promise<boolean>;
+/** Pure state model used both to pin the allowed lifecycle in tests and to
+ * keep the SQL repository from growing an implicit transition graph. */
+export declare class DeploymentAttemptKernel {
+    readonly attempts: Map<string, Readonly<{
+        attemptId: string;
+        intentKind: DeploymentIntent;
+        releaseId: string;
+        codeSha: string | null;
+        phase: DeploymentPhase;
+        claimTokenChecksum: string | null;
+        claimExpiresAt: number | null;
+    }>>;
+    claim(attemptId: string, releaseId: string, tokenChecksum: string, expiresAt: number, now: number): DeploymentAttempt;
+    advance(attemptId: string, releaseId: string, tokenChecksum: string, to: DeploymentPhase, now: number): DeploymentAttempt;
+    private authorized;
+    private required;
+}
+/** D1 adapter for the CI-only surface. It deliberately has no query that can
+ * select a "latest" release or an attempt from another site binding. */
+export declare class D1DeploymentAttemptRepository {
+    private readonly db;
+    constructor(db: D1DatabaseLike);
+    get(attemptId: string): Promise<DeploymentAttempt | null>;
+    /** Registers the exact code/content pair before a workflow is dispatched.
+     * `active_slot` is the shared lane lock: code and content cannot overtake
+     * one another by merely reaching GitHub in a different queue order. */
+    register(input: RegisterDeploymentAttempt): Promise<"created" | "repeated">;
+    claim(input: {
+        attemptId: string;
+        releaseId: string;
+        tokenChecksum: string;
+        now: number;
+        expiresAt: number;
+    }): Promise<void>;
+    advance(input: {
+        attemptId: string;
+        releaseId: string;
+        tokenChecksum: string;
+        from: DeploymentPhase;
+        to: DeploymentPhase;
+        now: number;
+    }): Promise<void>;
+    fail(input: {
+        attemptId: string;
+        releaseId: string;
+        tokenChecksum: string;
+        phase: DeploymentPhase;
+        now: number;
+        code: string;
+        stage: string;
+        message: string;
+    }): Promise<void>;
+    /** Promotes the release and succeeds the exact verified attempt in one D1
+     * batch. Every mutating statement repeats the capability guard, so a stale
+     * claim cannot publish content even if a prior read was valid. */
+    finalize(input: {
+        attemptId: string;
+        releaseId: string;
+        tokenChecksum: string;
+        now: number;
+    }): Promise<void>;
+}