@caretcms/core 0.1.0

package/dist/runtime/routes/entries.js

@@ -0,0 +1,96 @@
+import { isEditorAuthenticated } from "../auth/session.js";
+import { parseCollectionName, parseEntryId } from "../mutations/contracts.js";
+import { json, getAdapter } from "./_helpers.js";
+function asPositiveInt(value, fallback) {
+    if (!value)
+        return fallback;
+    const parsed = Number.parseInt(value, 10);
+    if (!Number.isFinite(parsed) || parsed <= 0)
+        return fallback;
+    return parsed;
+}
+async function parseQuery(context) {
+    const url = new URL(context.request.url);
+    // Validate the collection name's format only — a well-formed but not-yet-
+    // created collection is legitimate (the editor reads an entry's revision
+    // before its very first write, which auto-creates the collection). Gating on
+    // existence here would 400 that read and silently abort the first save.
+    const rawCollection = parseCollectionName(url.searchParams.get("collection"));
+    if (!rawCollection)
+        return null;
+    const rawIdValue = url.searchParams.get("id");
+    const id = rawIdValue && rawIdValue.trim().length > 0 ? parseEntryId(rawIdValue) : undefined;
+    if (rawIdValue && rawIdValue.trim().length > 0 && !id)
+        return null;
+    const page = asPositiveInt(url.searchParams.get("page"), 1);
+    const pageSize = Math.min(asPositiveInt(url.searchParams.get("pageSize"), 24), 100);
+    const qRaw = (url.searchParams.get("q") ?? "").trim();
+    return {
+        collection: rawCollection,
+        id: id ?? undefined,
+        page,
+        pageSize,
+        q: qRaw.length > 0 ? qRaw.toLowerCase() : undefined,
+    };
+}
+export async function GET(context) {
+    if (!isEditorAuthenticated(context)) {
+        return json({ error: "Unauthorized" }, 401);
+    }
+    const query = await parseQuery(context);
+    if (!query) {
+        return json({
+            error: "Invalid query. Provide a valid collection name matching a known collection.",
+        }, 400);
+    }
+    const adapter = getAdapter();
+    const { collection, id: singleId, page, pageSize, q } = query;
+    if (singleId) {
+        const entry = await adapter.getEntry(collection, singleId);
+        const revision = entry ? await adapter.getRevision(collection, singleId) : 0;
+        const entries = entry
+            ? [{ id: entry.id, data: entry.data, revision }]
+            : [];
+        return json({
+            entries,
+            pagination: {
+                page: 1,
+                pageSize: 1,
+                total: entries.length,
+                totalPages: entries.length > 0 ? 1 : 0,
+                hasPrev: false,
+                hasNext: false,
+            },
+        });
+    }
+    const allIds = await adapter.listEntryIds(collection);
+    const filteredIds = q ? allIds.filter((entryId) => entryId.toLowerCase().includes(q)) : allIds;
+    const total = filteredIds.length;
+    const totalPages = total > 0 ? Math.ceil(total / pageSize) : 0;
+    const effectivePage = totalPages === 0 ? 1 : Math.min(page, totalPages);
+    const start = (effectivePage - 1) * pageSize;
+    const pageIds = filteredIds.slice(start, start + pageSize);
+    const rawEntries = await Promise.all(pageIds.map((entryId) => adapter.getEntry(collection, entryId)));
+    const entries = await Promise.all(rawEntries
+        .filter((entry) => Boolean(entry))
+        .map(async (entry) => ({
+        id: entry.id,
+        data: entry.data,
+        revision: await adapter.getRevision(collection, entry.id),
+    })));
+    return json({
+        entries,
+        pagination: {
+            page: effectivePage,
+            pageSize,
+            total,
+            totalPages,
+            hasPrev: effectivePage > 1,
+            hasNext: effectivePage < totalPages,
+            q,
+        },
+        collection,
+        source: "adapter",
+    });
+}
+//# sourceMappingURL=entries.js.map

package/dist/runtime/routes/entries.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"entries.js","sourceRoot":"","sources":["../../../src/runtime/routes/entries.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,qBAAqB,EAAE,MAAM,oBAAoB,CAAC;AAC3D,OAAO,EAAE,mBAAmB,EAAE,YAAY,EAAE,MAAM,2BAA2B,CAAC;AAC9E,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AA0BjD,SAAS,aAAa,CAAC,KAAoB,EAAE,QAAgB;IAC3D,IAAI,CAAC,KAAK;QAAE,OAAO,QAAQ,CAAC;IAC5B,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IAC1C,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,MAAM,IAAI,CAAC;QAAE,OAAO,QAAQ,CAAC;IAC7D,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,KAAK,UAAU,UAAU,CAAC,OAAmB;IAC3C,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACzC,0EAA0E;IAC1E,yEAAyE;IACzE,6EAA6E;IAC7E,wEAAwE;IACxE,MAAM,aAAa,GAAG,mBAAmB,CAAC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC;IAC9E,IAAI,CAAC,aAAa;QAAE,OAAO,IAAI,CAAC;IAEhC,MAAM,UAAU,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAC9C,MAAM,EAAE,GAAG,UAAU,IAAI,UAAU,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAC7F,IAAI,UAAU,IAAI,UAAU,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,EAAE;QAAE,OAAO,IAAI,CAAC;IAEnE,MAAM,IAAI,GAAG,aAAa,CAAC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;IAC5D,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,aAAa,CAAC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,EAAE,CAAC,EAAE,GAAG,CAAC,CAAC;IACpF,MAAM,IAAI,GAAG,CAAC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IAEtD,OAAO;QACL,UAAU,EAAE,aAAa;QACzB,EAAE,EAAE,EAAE,IAAI,SAAS;QACnB,IAAI;QACJ,QAAQ;QACR,CAAC,EAAE,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,SAAS;KACpD,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,GAAG,CAAC,OAAmB;IAC3C,IAAI,CAAC,qBAAqB,CAAC,OAAO,CAAC,EAAE,CAAC;QACpC,OAAO,IAAI,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,EAAE,GAAG,CAAC,CAAC;IAC9C,CAAC;IAED,MAAM,KAAK,GAAG,MAAM,UAAU,CAAC,OAAO,CAAC,CAAC;IACxC,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,IAAI,CACT;YACE,KAAK,EACH,6EAA6E;SAChF,EACD,GAAG,CACJ,CAAC;IACJ,CAAC;IAED,MAAM,OAAO,GAAG,UAAU,EAAE,CAAC;IAC7B,MAAM,EAAE,UAAU,EAAE,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,EAAE,GAAG,KAAK,CAAC;IAE9D,IAAI,QAAQ,EAAE,CAAC;QACb,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,QAAQ,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;QAC3D,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,CAAC,MAAM,OAAO,CAAC,WAAW,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC7E,MAAM,OAAO,GAAuB,KAAK;YACvC,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,QAAQ,EAAE,CAAC;YAChD,CAAC,CAAC,EAAE,CAAC;QAEP,OAAO,IAAI,CAAC;YACV,OAAO;YACP,UAAU,EAAE;gBACV,IAAI,EAAE,CAAC;gBACP,QAAQ,EAAE,CAAC;gBACX,KAAK,EAAE,OAAO,CAAC,MAAM;gBACrB,UAAU,EAAE,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;gBACtC,OAAO,EAAE,KAAK;gBACd,OAAO,EAAE,KAAK;aACc;SAC/B,CAAC,CAAC;IACL,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,YAAY,CAAC,UAAU,CAAC,CAAC;IACtD,MAAM,WAAW,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;IAE/F,MAAM,KAAK,GAAG,WAAW,CAAC,MAAM,CAAC;IACjC,MAAM,UAAU,GAAG,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC/D,MAAM,aAAa,GAAG,UAAU,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;IACxE,MAAM,KAAK,GAAG,CAAC,aAAa,GAAG,CAAC,CAAC,GAAG,QAAQ,CAAC;IAC7C,MAAM,OAAO,GAAG,WAAW,CAAC,KAAK,CAAC,KAAK,EAAE,KAAK,GAAG,QAAQ,CAAC,CAAC;IAE3D,MAAM,UAAU,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC;IACtG,MAAM,OAAO,GAAuB,MAAM,OAAO,CAAC,GAAG,CACnD,UAAU;SACP,MAAM,CAAC,CAAC,KAAK,EAAsC,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;SACrE,GAAG,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC;QACrB,EAAE,EAAE,KAAK,CAAC,EAAE;QACZ,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,QAAQ,EAAE,MAAM,OAAO,CAAC,WAAW,CAAC,UAAU,EAAE,KAAK,CAAC,EAAE,CAAC;KAC1D,CAAC,CAAC,CACN,CAAC;IAEF,OAAO,IAAI,CAAC;QACV,OAAO;QACP,UAAU,EAAE;YACV,IAAI,EAAE,aAAa;YACnB,QAAQ;YACR,KAAK;YACL,UAAU;YACV,OAAO,EAAE,aAAa,GAAG,CAAC;YAC1B,OAAO,EAAE,aAAa,GAAG,UAAU;YACnC,CAAC;SAC2B;QAC9B,UAAU;QACV,MAAM,EAAE,SAAS;KAClB,CAAC,CAAC;AACL,CAAC"}

package/dist/runtime/routes/history.d.ts

@@ -0,0 +1,4 @@
+import type { APIContext } from "astro";
+export declare function GET(context: APIContext): Promise<Response>;
+export declare function POST(context: APIContext): Promise<Response>;
+//# sourceMappingURL=history.d.ts.map

package/dist/runtime/routes/history.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"history.d.ts","sourceRoot":"","sources":["../../../src/runtime/routes/history.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,OAAO,CAAC;AAKxC,wBAAsB,GAAG,CAAC,OAAO,EAAE,UAAU,GAAG,OAAO,CAAC,QAAQ,CAAC,CAiBhE;AAED,wBAAsB,IAAI,CAAC,OAAO,EAAE,UAAU,GAAG,OAAO,CAAC,QAAQ,CAAC,CAwCjE"}

package/dist/runtime/routes/history.js

@@ -0,0 +1,54 @@
+import { isEditorAuthenticated } from "../auth/session.js";
+import { parseEntryId } from "../mutations/contracts.js";
+import { json, getAdapter, enforceCsrfHeader } from "./_helpers.js";
+export async function GET(context) {
+    if (!isEditorAuthenticated(context)) {
+        return json({ error: "Unauthorized" }, 401);
+    }
+    const adapter = getAdapter();
+    const collectionRaw = (context.url.searchParams.get("collection") ?? "")
+        .trim()
+        .toLowerCase();
+    const id = parseEntryId(context.url.searchParams.get("id"));
+    if (!(await adapter.isKnownCollection(collectionRaw)) || !id) {
+        return json({ error: "Invalid collection or id" }, 400);
+    }
+    const history = await adapter.getHistory(collectionRaw, id);
+    return json({ history });
+}
+export async function POST(context) {
+    const csrfFailure = enforceCsrfHeader(context.request);
+    if (csrfFailure)
+        return csrfFailure;
+    if (!isEditorAuthenticated(context)) {
+        return json({ error: "Unauthorized" }, 401);
+    }
+    const body = (await context.request.json().catch(() => null));
+    if (!body)
+        return json({ error: "Invalid payload" }, 400);
+    const adapter = getAdapter();
+    const collectionRaw = typeof body.collection === "string"
+        ? body.collection.trim().toLowerCase()
+        : "";
+    const id = parseEntryId(body.id) ?? "";
+    const ts = typeof body.ts === "number" && Number.isFinite(body.ts) ? body.ts : NaN;
+    if (!(await adapter.isKnownCollection(collectionRaw)) || !id || !Number.isFinite(ts)) {
+        return json({ error: "Invalid restore payload" }, 400);
+    }
+    const entries = await adapter.getHistory(collectionRaw, id);
+    const snapshot = entries.find((entry) => entry.ts === ts);
+    if (!snapshot)
+        return json({ error: "Snapshot not found" }, 404);
+    if (!snapshot.data || typeof snapshot.data !== "object" || Array.isArray(snapshot.data)) {
+        return json({ error: "Snapshot data invalid" }, 500);
+    }
+    await adapter.writeEntry(collectionRaw, id, snapshot.data);
+    const revision = await adapter.bumpRevision(collectionRaw, id);
+    await adapter.appendHistory(collectionRaw, id, {
+        ts: Date.now(),
+        action: "restore",
+        data: snapshot.data,
+    });
+    return json({ ok: true, revision });
+}
+//# sourceMappingURL=history.js.map

package/dist/runtime/routes/history.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"history.js","sourceRoot":"","sources":["../../../src/runtime/routes/history.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,qBAAqB,EAAE,MAAM,oBAAoB,CAAC;AAC3D,OAAO,EAAE,YAAY,EAAE,MAAM,2BAA2B,CAAC;AACzD,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAC;AAEpE,MAAM,CAAC,KAAK,UAAU,GAAG,CAAC,OAAmB;IAC3C,IAAI,CAAC,qBAAqB,CAAC,OAAO,CAAC,EAAE,CAAC;QACpC,OAAO,IAAI,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,EAAE,GAAG,CAAC,CAAC;IAC9C,CAAC;IAED,MAAM,OAAO,GAAG,UAAU,EAAE,CAAC;IAC7B,MAAM,aAAa,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,YAAY,CAAC,IAAI,EAAE,CAAC;SACrE,IAAI,EAAE;SACN,WAAW,EAAE,CAAC;IACjB,MAAM,EAAE,GAAG,YAAY,CAAC,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;IAE5D,IAAI,CAAC,CAAC,MAAM,OAAO,CAAC,iBAAiB,CAAC,aAAa,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;QAC7D,OAAO,IAAI,CAAC,EAAE,KAAK,EAAE,0BAA0B,EAAE,EAAE,GAAG,CAAC,CAAC;IAC1D,CAAC;IAED,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,UAAU,CAAC,aAAa,EAAE,EAAE,CAAC,CAAC;IAC5D,OAAO,IAAI,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC;AAC3B,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,IAAI,CAAC,OAAmB;IAC5C,MAAM,WAAW,GAAG,iBAAiB,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IACvD,IAAI,WAAW;QAAE,OAAO,WAAW,CAAC;IAEpC,IAAI,CAAC,qBAAqB,CAAC,OAAO,CAAC,EAAE,CAAC;QACpC,OAAO,IAAI,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,EAAE,GAAG,CAAC,CAAC;IAC9C,CAAC;IAED,MAAM,IAAI,GAAG,CAAC,MAAM,OAAO,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAEpD,CAAC;IACT,IAAI,CAAC,IAAI;QAAE,OAAO,IAAI,CAAC,EAAE,KAAK,EAAE,iBAAiB,EAAE,EAAE,GAAG,CAAC,CAAC;IAE1D,MAAM,OAAO,GAAG,UAAU,EAAE,CAAC;IAC7B,MAAM,aAAa,GAAG,OAAO,IAAI,CAAC,UAAU,KAAK,QAAQ;QACvD,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE;QACtC,CAAC,CAAC,EAAE,CAAC;IACP,MAAM,EAAE,GAAG,YAAY,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC;IACvC,MAAM,EAAE,GAAG,OAAO,IAAI,CAAC,EAAE,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC;IAEnF,IAAI,CAAC,CAAC,MAAM,OAAO,CAAC,iBAAiB,CAAC,aAAa,CAAC,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAE,CAAC;QACrF,OAAO,IAAI,CAAC,EAAE,KAAK,EAAE,yBAAyB,EAAE,EAAE,GAAG,CAAC,CAAC;IACzD,CAAC;IAED,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,UAAU,CAAC,aAAa,EAAE,EAAE,CAAC,CAAC;IAC5D,MAAM,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;IAC1D,IAAI,CAAC,QAAQ;QAAE,OAAO,IAAI,CAAC,EAAE,KAAK,EAAE,oBAAoB,EAAE,EAAE,GAAG,CAAC,CAAC;IACjE,IAAI,CAAC,QAAQ,CAAC,IAAI,IAAI,OAAO,QAAQ,CAAC,IAAI,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACxF,OAAO,IAAI,CAAC,EAAE,KAAK,EAAE,uBAAuB,EAAE,EAAE,GAAG,CAAC,CAAC;IACvD,CAAC;IAED,MAAM,OAAO,CAAC,UAAU,CAAC,aAAa,EAAE,EAAE,EAAE,QAAQ,CAAC,IAA+B,CAAC,CAAC;IACtF,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,YAAY,CAAC,aAAa,EAAE,EAAE,CAAC,CAAC;IAC/D,MAAM,OAAO,CAAC,aAAa,CAAC,aAAa,EAAE,EAAE,EAAE;QAC7C,EAAE,EAAE,IAAI,CAAC,GAAG,EAAE;QACd,MAAM,EAAE,SAAS;QACjB,IAAI,EAAE,QAAQ,CAAC,IAAI;KACpB,CAAC,CAAC;IAEH,OAAO,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;AACtC,CAAC"}

package/dist/runtime/routes/mutate.d.ts

@@ -0,0 +1,4 @@
+import type { APIContext } from "astro";
+export declare function GET(context: APIContext): Promise<Response>;
+export declare function POST(context: APIContext): Promise<Response>;
+//# sourceMappingURL=mutate.d.ts.map

package/dist/runtime/routes/mutate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mutate.d.ts","sourceRoot":"","sources":["../../../src/runtime/routes/mutate.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,OAAO,CAAC;AAMxC,wBAAsB,GAAG,CAAC,OAAO,EAAE,UAAU,GAAG,OAAO,CAAC,QAAQ,CAAC,CAahE;AAED,wBAAsB,IAAI,CAAC,OAAO,EAAE,UAAU,GAAG,OAAO,CAAC,QAAQ,CAAC,CAqBjE"}

package/dist/runtime/routes/mutate.js

@@ -0,0 +1,38 @@
+import { isEditorAuthenticated } from "../auth/session.js";
+import { getRuntimeConfig } from "../config.js";
+import { executeMutation } from "../mutations/engine.js";
+import { json, getAdapter, enforceCsrfHeader } from "./_helpers.js";
+export async function GET(context) {
+    const runtime = getRuntimeConfig();
+    if (!isEditorAuthenticated(context)) {
+        return json({ error: "Unauthorized" }, 401);
+    }
+    return json({
+        ok: true,
+        route: `${runtime.apiBasePath}/mutate`,
+        methods: ["POST"],
+        note: "Mutation pipeline is active. Use POST with a mutation command payload.",
+    });
+}
+export async function POST(context) {
+    const csrfFailure = enforceCsrfHeader(context.request);
+    if (csrfFailure)
+        return csrfFailure;
+    if (!isEditorAuthenticated(context)) {
+        return json({ error: "Unauthorized" }, 401);
+    }
+    let body;
+    try {
+        body = await context.request.json();
+    }
+    catch {
+        return json({ error: "Invalid JSON" }, 400);
+    }
+    const adapter = getAdapter();
+    const result = await executeMutation(adapter, body);
+    if (!result.ok) {
+        return json(result.body, result.status);
+    }
+    return json(result.body, 200);
+}
+//# sourceMappingURL=mutate.js.map

package/dist/runtime/routes/mutate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mutate.js","sourceRoot":"","sources":["../../../src/runtime/routes/mutate.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,qBAAqB,EAAE,MAAM,oBAAoB,CAAC;AAC3D,OAAO,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAChD,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AACzD,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAC;AAEpE,MAAM,CAAC,KAAK,UAAU,GAAG,CAAC,OAAmB;IAC3C,MAAM,OAAO,GAAG,gBAAgB,EAAE,CAAC;IAEnC,IAAI,CAAC,qBAAqB,CAAC,OAAO,CAAC,EAAE,CAAC;QACpC,OAAO,IAAI,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,EAAE,GAAG,CAAC,CAAC;IAC9C,CAAC;IAED,OAAO,IAAI,CAAC;QACV,EAAE,EAAE,IAAI;QACR,KAAK,EAAE,GAAG,OAAO,CAAC,WAAW,SAAS;QACtC,OAAO,EAAE,CAAC,MAAM,CAAC;QACjB,IAAI,EAAE,wEAAwE;KAC/E,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,IAAI,CAAC,OAAmB;IAC5C,MAAM,WAAW,GAAG,iBAAiB,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IACvD,IAAI,WAAW;QAAE,OAAO,WAAW,CAAC;IAEpC,IAAI,CAAC,qBAAqB,CAAC,OAAO,CAAC,EAAE,CAAC;QACpC,OAAO,IAAI,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,EAAE,GAAG,CAAC,CAAC;IAC9C,CAAC;IAED,IAAI,IAAa,CAAC;IAClB,IAAI,CAAC;QACH,IAAI,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;IACtC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,EAAE,GAAG,CAAC,CAAC;IAC9C,CAAC;IAED,MAAM,OAAO,GAAG,UAAU,EAAE,CAAC;IAC7B,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IACpD,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;QACf,OAAO,IAAI,CAAC,MAAM,CAAC,IAA+B,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;IACrE,CAAC;IACD,OAAO,IAAI,CAAC,MAAM,CAAC,IAA+B,EAAE,GAAG,CAAC,CAAC;AAC3D,CAAC"}

package/dist/runtime/routes/schema.d.ts

@@ -0,0 +1,3 @@
+import type { APIContext } from "astro";
+export declare function GET(context: APIContext): Promise<Response>;
+//# sourceMappingURL=schema.d.ts.map

package/dist/runtime/routes/schema.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema.d.ts","sourceRoot":"","sources":["../../../src/runtime/routes/schema.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,OAAO,CAAC;AAOxC,wBAAsB,GAAG,CAAC,OAAO,EAAE,UAAU,GAAG,OAAO,CAAC,QAAQ,CAAC,CAyDhE"}

package/dist/runtime/routes/schema.js

@@ -0,0 +1,58 @@
+import { isEditorAuthenticated } from "../auth/session.js";
+import { getRegisteredSchema } from "../schema-registry.js";
+import { inferJsonSchema, buildTemplate } from "../../schema-utils.js";
+import { generateTemplateFromSchema } from "../schema/template.js";
+import { json, getAdapter } from "./_helpers.js";
+export async function GET(context) {
+    if (!isEditorAuthenticated(context)) {
+        return json({ error: "Unauthorized" }, 401);
+    }
+    const adapter = getAdapter();
+    const collectionRaw = (context.url.searchParams.get("collection") ?? "")
+        .trim()
+        .toLowerCase();
+    if (!(await adapter.isKnownCollection(collectionRaw))) {
+        return json({ error: "Invalid collection" }, 400);
+    }
+    // 1. Check for explicit registered schema (from integration config)
+    const registered = getRegisteredSchema(collectionRaw);
+    if (registered) {
+        return json({
+            schema: registered.schema,
+            template: registered.template,
+            collection: collectionRaw,
+            source: "explicit",
+        });
+    }
+    // 2. Check for dynamic schema (from collection metadata)
+    const metadata = await adapter.getCollectionMetadata(collectionRaw);
+    if (metadata?.schema) {
+        const template = generateTemplateFromSchema(metadata.schema);
+        return json({
+            schema: metadata.schema,
+            template,
+            collection: collectionRaw,
+            source: "dynamic",
+            metadata: {
+                label: metadata.label,
+                description: metadata.description,
+                icon: metadata.icon,
+                creatable: metadata.creatable,
+                orderable: metadata.orderable,
+            },
+        });
+    }
+    // 3. Fall back to schema inference from first entry
+    const entries = await adapter.listEntries(collectionRaw);
+    const firstEntry = entries[0]?.data ?? {};
+    const schema = inferJsonSchema(firstEntry);
+    const template = buildTemplate(schema);
+    return json({
+        schema,
+        template,
+        collection: collectionRaw,
+        source: "inferred",
+        inferredFrom: entries.length > 0 ? entries[0].id : null,
+    });
+}
+//# sourceMappingURL=schema.js.map

package/dist/runtime/routes/schema.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema.js","sourceRoot":"","sources":["../../../src/runtime/routes/schema.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,qBAAqB,EAAE,MAAM,oBAAoB,CAAC;AAC3D,OAAO,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AAC5D,OAAO,EAAE,eAAe,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AACvE,OAAO,EAAE,0BAA0B,EAAE,MAAM,uBAAuB,CAAC;AACnE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAEjD,MAAM,CAAC,KAAK,UAAU,GAAG,CAAC,OAAmB;IAC3C,IAAI,CAAC,qBAAqB,CAAC,OAAO,CAAC,EAAE,CAAC;QACpC,OAAO,IAAI,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,EAAE,GAAG,CAAC,CAAC;IAC9C,CAAC;IAED,MAAM,OAAO,GAAG,UAAU,EAAE,CAAC;IAC7B,MAAM,aAAa,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,YAAY,CAAC,IAAI,EAAE,CAAC;SACrE,IAAI,EAAE;SACN,WAAW,EAAE,CAAC;IACjB,IAAI,CAAC,CAAC,MAAM,OAAO,CAAC,iBAAiB,CAAC,aAAa,CAAC,CAAC,EAAE,CAAC;QACtD,OAAO,IAAI,CAAC,EAAE,KAAK,EAAE,oBAAoB,EAAE,EAAE,GAAG,CAAC,CAAC;IACpD,CAAC;IAED,oEAAoE;IACpE,MAAM,UAAU,GAAG,mBAAmB,CAAC,aAAa,CAAC,CAAC;IACtD,IAAI,UAAU,EAAE,CAAC;QACf,OAAO,IAAI,CAAC;YACV,MAAM,EAAE,UAAU,CAAC,MAAM;YACzB,QAAQ,EAAE,UAAU,CAAC,QAAQ;YAC7B,UAAU,EAAE,aAAa;YACzB,MAAM,EAAE,UAAU;SACnB,CAAC,CAAC;IACL,CAAC;IAED,yDAAyD;IACzD,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,qBAAqB,CAAC,aAAa,CAAC,CAAC;IACpE,IAAI,QAAQ,EAAE,MAAM,EAAE,CAAC;QACrB,MAAM,QAAQ,GAAG,0BAA0B,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QAC7D,OAAO,IAAI,CAAC;YACV,MAAM,EAAE,QAAQ,CAAC,MAAM;YACvB,QAAQ;YACR,UAAU,EAAE,aAAa;YACzB,MAAM,EAAE,SAAS;YACjB,QAAQ,EAAE;gBACR,KAAK,EAAE,QAAQ,CAAC,KAAK;gBACrB,WAAW,EAAE,QAAQ,CAAC,WAAW;gBACjC,IAAI,EAAE,QAAQ,CAAC,IAAI;gBACnB,SAAS,EAAE,QAAQ,CAAC,SAAS;gBAC7B,SAAS,EAAE,QAAQ,CAAC,SAAS;aAC9B;SACF,CAAC,CAAC;IACL,CAAC;IAED,oDAAoD;IACpD,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,WAAW,CAAC,aAAa,CAAC,CAAC;IACzD,MAAM,UAAU,GAAG,OAAO,CAAC,CAAC,CAAC,EAAE,IAAI,IAAI,EAAE,CAAC;IAE1C,MAAM,MAAM,GAAG,eAAe,CAAC,UAAU,CAAC,CAAC;IAC3C,MAAM,QAAQ,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC;IAEvC,OAAO,IAAI,CAAC;QACV,MAAM;QACN,QAAQ;QACR,UAAU,EAAE,aAAa;QACzB,MAAM,EAAE,UAAU;QAClB,YAAY,EAAE,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI;KACxD,CAAC,CAAC;AACL,CAAC"}

package/dist/runtime/routes/studio-home.d.ts

@@ -0,0 +1,3 @@
+import type { APIContext } from "astro";
+export declare function GET(context: APIContext): Promise<Response>;
+//# sourceMappingURL=studio-home.d.ts.map

package/dist/runtime/routes/studio-home.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"studio-home.d.ts","sourceRoot":"","sources":["../../../src/runtime/routes/studio-home.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,OAAO,CAAC;AA8BxC,wBAAsB,GAAG,CAAC,OAAO,EAAE,UAAU,GAAG,OAAO,CAAC,QAAQ,CAAC,CA+EhE"}

package/dist/runtime/routes/studio-home.js

@@ -0,0 +1,99 @@
+import { isEditorAuthenticated } from "../auth/session.js";
+import { getRuntimeConfig } from "../config.js";
+import { getAdapter } from "./_helpers.js";
+import { escapeHtml, htmlResponse, redirectResponse, renderStudioPage, } from "../views/studio-layout.js";
+function humanizeCollection(name) {
+    return name
+        .replace(/[-_]+/g, " ")
+        .replace(/\b\w/g, (c) => c.toUpperCase());
+}
+function pickIcon(name) {
+    const lower = name.toLowerCase();
+    if (lower.includes("page"))
+        return "📄";
+    if (lower.includes("post") || lower.includes("blog"))
+        return "✍️";
+    if (lower.includes("product"))
+        return "💎";
+    if (lower.includes("testimonial") || lower.includes("review"))
+        return "⭐";
+    if (lower.includes("faq") || lower.includes("question"))
+        return "❓";
+    if (lower.includes("site") || lower.includes("setting") || lower.includes("config"))
+        return "⚙️";
+    if (lower.includes("team") || lower.includes("author") || lower.includes("user"))
+        return "👤";
+    if (lower.includes("event"))
+        return "📅";
+    return "📁";
+}
+export async function GET(context) {
+    const runtime = getRuntimeConfig();
+    const loginRedirect = `${runtime.mountPath}?redirect=${encodeURIComponent(`${runtime.mountPath}/cms`)}`;
+    if (!isEditorAuthenticated(context)) {
+        return redirectResponse(loginRedirect);
+    }
+    const adapter = getAdapter();
+    const collections = await adapter.discoverCollections();
+    const cards = collections
+        .map((name) => {
+        const label = humanizeCollection(name);
+        const icon = pickIcon(name);
+        const href = `${runtime.mountPath}/cms/${encodeURIComponent(name)}`;
+        return `<a href="${escapeHtml(href)}" class="studio-card-interactive" data-collection="${escapeHtml(name)}">
+        <div style="font-size:1.5rem;margin-bottom:0.75rem;">${icon}</div>
+        <h3 style="font-size:0.875rem;font-weight:600;margin:0 0 0.25rem;color:var(--studio-text);">${escapeHtml(label)}</h3>
+        <p style="font-size:0.7rem;margin:0 0 0.5rem;color:var(--studio-text-dim);font-family:var(--studio-font-mono);">${escapeHtml(name)}</p>
+        <span class="studio-count-label" data-collection="${escapeHtml(name)}" style="font-size:0.7rem;color:var(--studio-accent);font-weight:500;">…</span>
+      </a>`;
+    })
+        .join("");
+    const emptyState = `<div class="studio-card" style="padding:2rem;text-align:center;color:var(--studio-text-dim);font-size:0.85rem;">
+    No collections yet. Add data under <code style="font-family:var(--studio-font-mono);">.caret/data/&lt;collection&gt;/</code> or create one from Studio.
+  </div>`;
+    const body = `<div class="studio-fade-in" style="max-width:64rem;margin:0 auto;">
+    <div style="text-align:center;margin-bottom:2.5rem;">
+      <h1 style="font-family:var(--studio-font-heading);font-size:1.875rem;font-weight:500;margin:0 0 0.5rem;color:var(--studio-text);">Content Studio</h1>
+      <p style="font-size:0.85rem;color:var(--studio-text-dim);margin:0;">Manage your collections and entries.</p>
+    </div>
+
+    ${collections.length === 0
+        ? emptyState
+        : `<div style="display:grid;gap:1rem;grid-template-columns:repeat(auto-fill,minmax(220px,1fr));">${cards}</div>`}
+  </div>`;
+    const inlineScript = `(function(){
+    var apiBase = ${JSON.stringify(runtime.apiBasePath)};
+    var labels = document.querySelectorAll('.studio-count-label');
+    labels.forEach(function (el) {
+      var collection = el.getAttribute('data-collection');
+      if (!collection) return;
+      fetch(apiBase + '/entries?collection=' + encodeURIComponent(collection))
+        .then(function (res) {
+          if (res.status === 401) {
+            window.location.href = ${JSON.stringify(runtime.mountPath)} + '?redirect=' + encodeURIComponent(window.location.pathname);
+            return null;
+          }
+          if (!res.ok) throw new Error('failed');
+          return res.json();
+        })
+        .then(function (data) {
+          if (!data) return;
+          var entries = Array.isArray(data.entries) ? data.entries : [];
+          var n = entries.length;
+          el.textContent = n + ' ' + (n === 1 ? 'entry' : 'entries');
+        })
+        .catch(function () {
+          el.textContent = 'error';
+          el.style.color = 'var(--studio-red)';
+        });
+    });
+  })();`;
+    return htmlResponse(renderStudioPage({
+        runtime,
+        title: "Content Studio",
+        breadcrumb: [],
+        body,
+        inlineScript,
+    }));
+}
+//# sourceMappingURL=studio-home.js.map

package/dist/runtime/routes/studio-home.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"studio-home.js","sourceRoot":"","sources":["../../../src/runtime/routes/studio-home.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,qBAAqB,EAAE,MAAM,oBAAoB,CAAC;AAC3D,OAAO,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAChD,OAAO,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAC3C,OAAO,EACL,UAAU,EACV,YAAY,EACZ,gBAAgB,EAChB,gBAAgB,GACjB,MAAM,2BAA2B,CAAC;AAEnC,SAAS,kBAAkB,CAAC,IAAY;IACtC,OAAO,IAAI;SACR,OAAO,CAAC,QAAQ,EAAE,GAAG,CAAC;SACtB,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC;AAC9C,CAAC;AAED,SAAS,QAAQ,CAAC,IAAY;IAC5B,MAAM,KAAK,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;IACjC,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC;QAAE,OAAO,IAAI,CAAC;IACxC,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC;QAAE,OAAO,IAAI,CAAC;IAClE,IAAI,KAAK,CAAC,QAAQ,CAAC,SAAS,CAAC;QAAE,OAAO,IAAI,CAAC;IAC3C,IAAI,KAAK,CAAC,QAAQ,CAAC,aAAa,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC;QAAE,OAAO,GAAG,CAAC;IAC1E,IAAI,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,UAAU,CAAC;QAAE,OAAO,GAAG,CAAC;IACpE,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC;QAAE,OAAO,IAAI,CAAC;IACjG,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC;QAAE,OAAO,IAAI,CAAC;IAC9F,IAAI,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC;QAAE,OAAO,IAAI,CAAC;IACzC,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,GAAG,CAAC,OAAmB;IAC3C,MAAM,OAAO,GAAG,gBAAgB,EAAE,CAAC;IACnC,MAAM,aAAa,GAAG,GAAG,OAAO,CAAC,SAAS,aAAa,kBAAkB,CAAC,GAAG,OAAO,CAAC,SAAS,MAAM,CAAC,EAAE,CAAC;IAExG,IAAI,CAAC,qBAAqB,CAAC,OAAO,CAAC,EAAE,CAAC;QACpC,OAAO,gBAAgB,CAAC,aAAa,CAAC,CAAC;IACzC,CAAC;IAED,MAAM,OAAO,GAAG,UAAU,EAAE,CAAC;IAC7B,MAAM,WAAW,GAAG,MAAM,OAAO,CAAC,mBAAmB,EAAE,CAAC;IAExD,MAAM,KAAK,GAAG,WAAW;SACtB,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;QACZ,MAAM,KAAK,GAAG,kBAAkB,CAAC,IAAI,CAAC,CAAC;QACvC,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;QAC5B,MAAM,IAAI,GAAG,GAAG,OAAO,CAAC,SAAS,QAAQ,kBAAkB,CAAC,IAAI,CAAC,EAAE,CAAC;QACpE,OAAO,YAAY,UAAU,CAAC,IAAI,CAAC,sDAAsD,UAAU,CAAC,IAAI,CAAC;+DAChD,IAAI;sGACmC,UAAU,CAAC,KAAK,CAAC;0HACG,UAAU,CAAC,IAAI,CAAC;4DAC9E,UAAU,CAAC,IAAI,CAAC;WACjE,CAAC;IACR,CAAC,CAAC;SACD,IAAI,CAAC,EAAE,CAAC,CAAC;IAEZ,MAAM,UAAU,GAAG;;SAEZ,CAAC;IAER,MAAM,IAAI,GAAG;;;;;;MAOT,WAAW,CAAC,MAAM,KAAK,CAAC;QACtB,CAAC,CAAC,UAAU;QACZ,CAAC,CAAC,iGAAiG,KAAK,QAC5G;SACK,CAAC;IAER,MAAM,YAAY,GAAG;oBACH,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,WAAW,CAAC;;;;;;;;qCAQlB,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,SAAS,CAAC;;;;;;;;;;;;;;;;;QAiB9D,CAAC;IAEP,OAAO,YAAY,CACjB,gBAAgB,CAAC;QACf,OAAO;QACP,KAAK,EAAE,gBAAgB;QACvB,UAAU,EAAE,EAAE;QACd,IAAI;QACJ,YAAY;KACb,CAAC,CACH,CAAC;AACJ,CAAC"}

package/dist/runtime/routes/theme-stylesheet.d.ts

@@ -0,0 +1,3 @@
+import type { APIContext } from "astro";
+export declare function GET(_context: APIContext): Promise<Response>;
+//# sourceMappingURL=theme-stylesheet.d.ts.map

package/dist/runtime/routes/theme-stylesheet.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"theme-stylesheet.d.ts","sourceRoot":"","sources":["../../../src/runtime/routes/theme-stylesheet.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,OAAO,CAAC;AA0BxC,wBAAsB,GAAG,CAAC,QAAQ,EAAE,UAAU,GAAG,OAAO,CAAC,QAAQ,CAAC,CAajE"}

package/dist/runtime/routes/theme-stylesheet.js

@@ -0,0 +1,32 @@
+import { getRuntimeConfig } from "../config.js";
+import { DEFAULT_PRESET_ID, getPresetTokens, } from "../themes/preset-tokens.js";
+/**
+ * Emits the active theme as a CSS file consumed by the studio shell.
+ *
+ * Resolution order:
+ *   1. Built-in preset tokens for the configured theme id (or default).
+ *   2. Per-token overrides from `caret({ theme: { tokens: {...} } })`.
+ *
+ * Brand customizations (logo URL, etc.) are NOT emitted here — they live
+ * in the integration's `clientConfig` and are read by the studio HTML.
+ */
+function buildCss(tokens) {
+    const lines = Object.entries(tokens)
+        .map(([prop, value]) => `  ${prop}: ${value};`)
+        .join("\n");
+    return `:root {\n${lines}\n}\n`;
+}
+export async function GET(_context) {
+    const runtime = getRuntimeConfig();
+    const presetId = runtime.theme.presetId ?? DEFAULT_PRESET_ID;
+    const baseTokens = getPresetTokens(presetId);
+    const merged = { ...baseTokens, ...runtime.theme.tokenOverrides };
+    return new Response(buildCss(merged), {
+        status: 200,
+        headers: {
+            "Content-Type": "text/css; charset=utf-8",
+            "Cache-Control": "public, max-age=300",
+        },
+    });
+}
+//# sourceMappingURL=theme-stylesheet.js.map

package/dist/runtime/routes/theme-stylesheet.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"theme-stylesheet.js","sourceRoot":"","sources":["../../../src/runtime/routes/theme-stylesheet.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAChD,OAAO,EACL,iBAAiB,EACjB,eAAe,GAEhB,MAAM,4BAA4B,CAAC;AAEpC;;;;;;;;;GASG;AACH,SAAS,QAAQ,CAAC,MAAmB;IACnC,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC;SACjC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,KAAK,IAAI,KAAK,KAAK,GAAG,CAAC;SAC9C,IAAI,CAAC,IAAI,CAAC,CAAC;IAEd,OAAO,YAAY,KAAK,OAAO,CAAC;AAClC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,GAAG,CAAC,QAAoB;IAC5C,MAAM,OAAO,GAAG,gBAAgB,EAAE,CAAC;IACnC,MAAM,QAAQ,GAAG,OAAO,CAAC,KAAK,CAAC,QAAQ,IAAI,iBAAiB,CAAC;IAC7D,MAAM,UAAU,GAAG,eAAe,CAAC,QAAQ,CAAC,CAAC;IAC7C,MAAM,MAAM,GAAgB,EAAE,GAAG,UAAU,EAAE,GAAG,OAAO,CAAC,KAAK,CAAC,cAAc,EAAE,CAAC;IAE/E,OAAO,IAAI,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE;QACpC,MAAM,EAAE,GAAG;QACX,OAAO,EAAE;YACP,cAAc,EAAE,yBAAyB;YACzC,eAAe,EAAE,qBAAqB;SACvC;KACF,CAAC,CAAC;AACL,CAAC"}

package/dist/runtime/routes/upload.d.ts

@@ -0,0 +1,3 @@
+import type { APIContext } from "astro";
+export declare function POST(context: APIContext): Promise<Response>;
+//# sourceMappingURL=upload.d.ts.map

package/dist/runtime/routes/upload.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"upload.d.ts","sourceRoot":"","sources":["../../../src/runtime/routes/upload.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,OAAO,CAAC;AASxC,wBAAsB,IAAI,CAAC,OAAO,EAAE,UAAU,GAAG,OAAO,CAAC,QAAQ,CAAC,CAmCjE"}

package/dist/runtime/routes/upload.js

@@ -0,0 +1,33 @@
+import { isEditorAuthenticated } from "../auth/session.js";
+import { json, getUploadHandler, getSessionId, enforceCsrfHeader, } from "./_helpers.js";
+export async function POST(context) {
+    const csrfFailure = enforceCsrfHeader(context.request);
+    if (csrfFailure)
+        return csrfFailure;
+    if (!isEditorAuthenticated(context)) {
+        return json({ error: "Unauthorized" }, 401);
+    }
+    const contentType = context.request.headers.get("content-type") ?? "";
+    if (!contentType.includes("multipart/form-data")) {
+        return json({ error: "Expected multipart/form-data" }, 400);
+    }
+    const formData = await context.request.formData().catch(() => null);
+    if (!formData) {
+        return json({ error: "Invalid form data" }, 400);
+    }
+    const file = formData.get("file");
+    if (!(file instanceof File)) {
+        return json({ error: "Missing file" }, 400);
+    }
+    try {
+        const handler = getUploadHandler();
+        const sessionId = getSessionId();
+        const result = await handler.upload(file, sessionId ? { sessionId } : undefined);
+        return json({ url: result.url });
+    }
+    catch (error) {
+        const message = error instanceof Error ? error.message : "Upload failed";
+        return json({ error: message }, 400);
+    }
+}
+//# sourceMappingURL=upload.js.map

package/dist/runtime/routes/upload.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"upload.js","sourceRoot":"","sources":["../../../src/runtime/routes/upload.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,qBAAqB,EAAE,MAAM,oBAAoB,CAAC;AAC3D,OAAO,EACL,IAAI,EACJ,gBAAgB,EAChB,YAAY,EACZ,iBAAiB,GAClB,MAAM,eAAe,CAAC;AAEvB,MAAM,CAAC,KAAK,UAAU,IAAI,CAAC,OAAmB;IAC5C,MAAM,WAAW,GAAG,iBAAiB,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IACvD,IAAI,WAAW;QAAE,OAAO,WAAW,CAAC;IAEpC,IAAI,CAAC,qBAAqB,CAAC,OAAO,CAAC,EAAE,CAAC;QACpC,OAAO,IAAI,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,EAAE,GAAG,CAAC,CAAC;IAC9C,CAAC;IAED,MAAM,WAAW,GAAG,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC;IACtE,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,qBAAqB,CAAC,EAAE,CAAC;QACjD,OAAO,IAAI,CAAC,EAAE,KAAK,EAAE,8BAA8B,EAAE,EAAE,GAAG,CAAC,CAAC;IAC9D,CAAC;IAED,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;IACpE,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,OAAO,IAAI,CAAC,EAAE,KAAK,EAAE,mBAAmB,EAAE,EAAE,GAAG,CAAC,CAAC;IACnD,CAAC;IAED,MAAM,IAAI,GAAG,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IAClC,IAAI,CAAC,CAAC,IAAI,YAAY,IAAI,CAAC,EAAE,CAAC;QAC5B,OAAO,IAAI,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,EAAE,GAAG,CAAC,CAAC;IAC9C,CAAC;IAED,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,gBAAgB,EAAE,CAAC;QACnC,MAAM,SAAS,GAAG,YAAY,EAAE,CAAC;QACjC,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,MAAM,CACjC,IAAI,EACJ,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,SAAS,CACtC,CAAC;QACF,OAAO,IAAI,CAAC,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC;IACnC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,CAAC;QACzE,OAAO,IAAI,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,GAAG,CAAC,CAAC;IACvC,CAAC;AACH,CAAC"}

package/dist/runtime/sanitize-html.d.ts

@@ -0,0 +1,8 @@
+/**
+ * Server-side HTML sanitizer for rich text fields.
+ *
+ * Regex-based (no DOM dependency) — works in Node, Deno, edge runtimes.
+ * Same allowlist as the client sanitizer in static/cms/editor/sanitize.js.
+ */
+export declare function sanitizeHtml(html: string): string;
+//# sourceMappingURL=sanitize-html.d.ts.map

package/dist/runtime/sanitize-html.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sanitize-html.d.ts","sourceRoot":"","sources":["../../src/runtime/sanitize-html.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAeH,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAmEjD"}

package/dist/runtime/sanitize-html.js

@@ -0,0 +1,86 @@
+/**
+ * Server-side HTML sanitizer for rich text fields.
+ *
+ * Regex-based (no DOM dependency) — works in Node, Deno, edge runtimes.
+ * Same allowlist as the client sanitizer in static/cms/editor/sanitize.js.
+ */
+const ALLOWED_TAGS = new Set([
+    "b", "strong", "i", "em", "u", "s", "a", "br", "sub", "sup",
+]);
+const ALLOWED_ATTRS = {
+    a: new Set(["href", "target", "rel"]),
+};
+const SAFE_HREF_RE = /^(?:https?:|mailto:|tel:|\/)/i;
+const TOKEN_RE = /<\/?([a-zA-Z][\w-]*)\b([^>]*)\/?>|[^<]+/g;
+const ATTR_RE = /([a-zA-Z][\w-]*)\s*=\s*(?:"([^"]*)"|'([^']*)'|(\S+))/g;
+export function sanitizeHtml(html) {
+    if (!html)
+        return "";
+    let result = "";
+    TOKEN_RE.lastIndex = 0;
+    let match;
+    while ((match = TOKEN_RE.exec(html)) !== null) {
+        const [full, tagName, rawAttrs] = match;
+        // Text node — escape any stray < that the regex didn't capture
+        if (!tagName) {
+            result += escapeText(full);
+            continue;
+        }
+        const tag = tagName.toLowerCase();
+        const isClosing = full.startsWith("</");
+        const isSelfClosing = full.endsWith("/>") || tag === "br";
+        if (!ALLOWED_TAGS.has(tag))
+            continue;
+        if (isClosing) {
+            result += `</${tag}>`;
+            continue;
+        }
+        // Build sanitized opening tag
+        const allowedAttrSet = ALLOWED_ATTRS[tag];
+        let attrs = "";
+        if (allowedAttrSet && rawAttrs) {
+            ATTR_RE.lastIndex = 0;
+            let attrMatch;
+            while ((attrMatch = ATTR_RE.exec(rawAttrs)) !== null) {
+                const attrName = attrMatch[1].toLowerCase();
+                const attrValue = attrMatch[2] ?? attrMatch[3] ?? attrMatch[4] ?? "";
+                if (!allowedAttrSet.has(attrName))
+                    continue;
+                if (attrName === "href") {
+                    if (!SAFE_HREF_RE.test(attrValue))
+                        continue;
+                }
+                attrs += ` ${attrName}="${escapeAttr(attrValue)}"`;
+            }
+        }
+        // Force security attrs on external <a> links
+        if (tag === "a") {
+            const hrefMatch = /\bhref\s*=\s*"([^"]*)"/i.exec(attrs);
+            const href = hrefMatch?.[1] ?? "";
+            if (href && /^https?:/i.test(href)) {
+                if (!attrs.includes("target=")) {
+                    attrs += ` target="_blank"`;
+                }
+                if (!attrs.includes("rel=")) {
+                    attrs += ` rel="noopener noreferrer"`;
+                }
+            }
+        }
+        result += isSelfClosing ? `<${tag}${attrs} />` : `<${tag}${attrs}>`;
+    }
+    return result;
+}
+function escapeText(str) {
+    return str
+        .replace(/&/g, "&amp;")
+        .replace(/</g, "&lt;")
+        .replace(/>/g, "&gt;");
+}
+function escapeAttr(str) {
+    return str
+        .replace(/&/g, "&amp;")
+        .replace(/"/g, "&quot;")
+        .replace(/</g, "&lt;")
+        .replace(/>/g, "&gt;");
+}
+//# sourceMappingURL=sanitize-html.js.map

package/dist/runtime/sanitize-html.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sanitize-html.js","sourceRoot":"","sources":["../../src/runtime/sanitize-html.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC;IAC3B,GAAG,EAAE,QAAQ,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK;CAC5D,CAAC,CAAC;AAEH,MAAM,aAAa,GAAgC;IACjD,CAAC,EAAE,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAC;CACtC,CAAC;AAEF,MAAM,YAAY,GAAG,+BAA+B,CAAC;AAErD,MAAM,QAAQ,GAAG,0CAA0C,CAAC;AAC5D,MAAM,OAAO,GAAG,uDAAuD,CAAC;AAExE,MAAM,UAAU,YAAY,CAAC,IAAY;IACvC,IAAI,CAAC,IAAI;QAAE,OAAO,EAAE,CAAC;IAErB,IAAI,MAAM,GAAG,EAAE,CAAC;IAChB,QAAQ,CAAC,SAAS,GAAG,CAAC,CAAC;IACvB,IAAI,KAA6B,CAAC;IAElC,OAAO,CAAC,KAAK,GAAG,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;QAC9C,MAAM,CAAC,IAAI,EAAE,OAAO,EAAE,QAAQ,CAAC,GAAG,KAAK,CAAC;QAExC,+DAA+D;QAC/D,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,MAAM,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC;YAC3B,SAAS;QACX,CAAC;QAED,MAAM,GAAG,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC;QAClC,MAAM,SAAS,GAAG,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;QACxC,MAAM,aAAa,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,GAAG,KAAK,IAAI,CAAC;QAE1D,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,SAAS;QAErC,IAAI,SAAS,EAAE,CAAC;YACd,MAAM,IAAI,KAAK,GAAG,GAAG,CAAC;YACtB,SAAS;QACX,CAAC;QAED,8BAA8B;QAC9B,MAAM,cAAc,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC;QAC1C,IAAI,KAAK,GAAG,EAAE,CAAC;QAEf,IAAI,cAAc,IAAI,QAAQ,EAAE,CAAC;YAC/B,OAAO,CAAC,SAAS,GAAG,CAAC,CAAC;YACtB,IAAI,SAAiC,CAAC;YAEtC,OAAO,CAAC,SAAS,GAAG,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;gBACrD,MAAM,QAAQ,GAAG,SAAS,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;gBAC5C,MAAM,SAAS,GAAG,SAAS,CAAC,CAAC,CAAC,IAAI,SAAS,CAAC,CAAC,CAAC,IAAI,SAAS,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;gBAErE,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,QAAQ,CAAC;oBAAE,SAAS;gBAE5C,IAAI,QAAQ,KAAK,MAAM,EAAE,CAAC;oBACxB,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,SAAS,CAAC;wBAAE,SAAS;gBAC9C,CAAC;gBAED,KAAK,IAAI,IAAI,QAAQ,KAAK,UAAU,CAAC,SAAS,CAAC,GAAG,CAAC;YACrD,CAAC;QACH,CAAC;QAED,6CAA6C;QAC7C,IAAI,GAAG,KAAK,GAAG,EAAE,CAAC;YAChB,MAAM,SAAS,GAAG,yBAAyB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACxD,MAAM,IAAI,GAAG,SAAS,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;YAClC,IAAI,IAAI,IAAI,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;gBACnC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;oBAC/B,KAAK,IAAI,kBAAkB,CAAC;gBAC9B,CAAC;gBACD,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;oBAC5B,KAAK,IAAI,4BAA4B,CAAC;gBACxC,CAAC;YACH,CAAC;QACH,CAAC;QAED,MAAM,IAAI,aAAa,CAAC,CAAC,CAAC,IAAI,GAAG,GAAG,KAAK,KAAK,CAAC,CAAC,CAAC,IAAI,GAAG,GAAG,KAAK,GAAG,CAAC;IACtE,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,UAAU,CAAC,GAAW;IAC7B,OAAO,GAAG;SACP,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC;SACtB,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC;SACrB,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;AAC3B,CAAC;AAED,SAAS,UAAU,CAAC,GAAW;IAC7B,OAAO,GAAG;SACP,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC;SACtB,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC;SACvB,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC;SACrB,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;AAC3B,CAAC"}