@contentrail/core 0.0.0-stage → 0.1.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 ContentRail contributors
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -1,3 +1,144 @@
-# Temporary Holding Version
+# `@contentrail/core`
 
-This version is a temporary placeholder for this package. An operational version to replace this has been submitted for review and is awaiting a staged release.
+Framework-independent ContentRail schemas, validation, and inferred content types.
+
+This package defines **collections and validation only**. It does not read files, talk to networks, store content, authenticate users, or publish sites.
+
+## Requirements
+
+- Node.js **≥ 22** (`engines.node`)
+- TypeScript 5.9+ recommended for consumers
+- [Zod](https://zod.dev) `^3.23` (dependency + peer `zod@^3.23.0`; shipped/tested on **3.25.76**)
+
+Prefer `validateEntry` / `validateCollection` / `assertValidEntry` for untrusted
+input. Calling `schema.safeParse()` directly bypasses ContentRail JSON bounds
+(ADR 025).
+
+## Install
+
+> **Not on the public npm registry yet.** Packages remain `"private": true` until
+> publication is explicitly authorized. See `docs/PUBLISHING.md`.
+
+### Monorepo (current)
+
+```sh
+pnpm install
+pnpm --filter @contentrail/core build
+```
+
+### Intended after first public `0.1.0` release
+
+```sh
+pnpm add @contentrail/core zod
+```
+
+## Define a collection
+
+```ts
+import { defineCollection } from "@contentrail/core";
+import { z } from "zod";
+
+const articles = defineCollection({
+  name: "articles",
+  schema: z.object({
+    title: z.string().min(1),
+    slug: z.string().min(1),
+    published: z.boolean(),
+    publishedAt: z.string().optional(),
+  }),
+});
+```
+
+Collection names must match `^[a-z][a-z0-9_-]*$`.
+
+### Unexpected fields
+
+| `unknownKeys`       | Behaviour                                 |
+| ------------------- | ----------------------------------------- |
+| `"strip"` (default) | Unknown root-object keys are removed.     |
+| `"strict"`          | Unknown root-object keys fail validation. |
+
+The policy is applied when the schema is a Zod object. Non-object schemas are left unchanged.
+
+## Validate an entry
+
+```ts
+import { validateEntry } from "@contentrail/core";
+
+const result = validateEntry(articles, {
+  title: "Welcome",
+  slug: "welcome",
+  published: true,
+});
+
+if (!result.success) {
+  console.error(result.error.issues);
+} else {
+  console.log(result.data.title);
+}
+```
+
+`validateEntry` never throws for invalid content. Use `assertValidEntry` when you prefer exceptions.
+
+## Validate a collection (array of entries)
+
+```ts
+import { validateCollection } from "@contentrail/core";
+
+const result = validateCollection(articles, [
+  { title: "Welcome", slug: "welcome", published: true },
+  { title: "Next", slug: "next", published: false },
+]);
+```
+
+Failing issues are prefixed with the entry index, for example `1.title`.
+
+## Type inference
+
+```ts
+import type { InferEntry } from "@contentrail/core";
+
+type Article = InferEntry<typeof articles>;
+// { title: string; slug: string; published: boolean; publishedAt?: string }
+```
+
+## Errors
+
+| Error                    | When                                                        |
+| ------------------------ | ----------------------------------------------------------- |
+| `ContentDefinitionError` | Invalid `defineCollection` input (thrown).                  |
+| `ContentValidationError` | Invalid content (`validate*` result or `assertValidEntry`). |
+
+`ContentValidationError` includes:
+
+- `collection` — collection name
+- `issues` — `{ path, code, message, expected?, received? }[]`
+- `toJSON()` — stable serializable shape
+
+## Public exports
+
+From `@contentrail/core`:
+
+- `defineCollection`
+- `validateEntry`
+- `validateCollection`
+- `assertValidEntry`
+- `ContentDefinitionError`
+- `ContentValidationError`
+- Types: `ContentCollection`, `DefineCollectionInput`, `InferEntry`, `UnknownKeysPolicy`, `ValidationResult`, `ValidationSuccess`, `ValidationFailure`, `ValidationIssue`
+
+There is a single browser-safe export map entry (`.`). No server-only subpath exists in this package.
+
+## Compatibility
+
+- Runtime: any modern ESM environment (browsers, Node, Workers) that can run Zod
+- Module format: ESM only
+- Not coupled to Astro, Vite, Cloudflare, or React
+
+## Current limitations
+
+- No content I/O, Git, R2, or publishing APIs
+- No editor schema introspection helpers beyond Zod itself
+- No JSON Schema export
+- Zod 4 is not targeted; peer range is Zod 3.x
+- Unpublished while `"private": true` — see root README / `docs/PUBLISHING.md`

package/dist/bounds.d.ts

@@ -0,0 +1,36 @@
+/**
+ * Structural limits applied **before** Zod validation.
+ *
+ * Zod 3 (and Zod 4's `zod/v3` entry) can accumulate one validation issue per
+ * array element without early termination (GHSA-mrhx-c7xc-m3w5). ContentRail
+ * stays on the Zod 3 public schema API; these bounds reduce resource-exhaustion
+ * risk at trust boundaries without migrating consumers to Zod 4.
+ *
+ * Limitations (explicit): these checks bound nesting, array length, and object
+ * key count. They do **not** cap string byte length, total serialized size, or
+ * CPU spent validating values that are within the structural limits.
+ */
+export interface JsonBoundLimits {
+    /** Maximum length of any array in the value tree. Default: 10_000. */
+    readonly maxArrayLength?: number;
+    /** Maximum number of own keys on any object. Default: 10_000. */
+    readonly maxObjectKeys?: number;
+    /** Maximum nesting depth (root = 0). Default: 32. */
+    readonly maxDepth?: number;
+}
+export interface JsonBoundViolation {
+    readonly path: ReadonlyArray<string | number>;
+    readonly code: "too_big" | "too_deep" | "cyclic";
+    readonly message: string;
+}
+/**
+ * Walks a JSON-like value and returns the first structural bound violation.
+ * Returns `null` when the value is within limits.
+ *
+ * Cyclic object graphs are rejected (`cyclic`) so the walker itself cannot be
+ * forced into unbounded recursion. Primitives (including large strings) are
+ * accepted by this helper — size must be constrained by callers (e.g. Worker
+ * body limits).
+ */
+export declare function findJsonBoundViolation(value: unknown, limits?: JsonBoundLimits): JsonBoundViolation | null;
+//# sourceMappingURL=bounds.d.ts.map

package/dist/bounds.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"bounds.d.ts","sourceRoot":"","sources":["../src/bounds.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,MAAM,WAAW,eAAe;IAC9B,sEAAsE;IACtE,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;IACjC,iEAAiE;IACjE,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAChC,qDAAqD;IACrD,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;CAC5B;AAED,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,IAAI,EAAE,aAAa,CAAC,MAAM,GAAG,MAAM,CAAC,CAAC;IAC9C,QAAQ,CAAC,IAAI,EAAE,SAAS,GAAG,UAAU,GAAG,QAAQ,CAAC;IACjD,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B;AAMD;;;;;;;;GAQG;AACH,wBAAgB,sBAAsB,CACpC,KAAK,EAAE,OAAO,EACd,MAAM,GAAE,eAAoB,GAC3B,kBAAkB,GAAG,IAAI,CAc3B"}

package/dist/bounds.js

@@ -0,0 +1,83 @@
+/**
+ * Structural limits applied **before** Zod validation.
+ *
+ * Zod 3 (and Zod 4's `zod/v3` entry) can accumulate one validation issue per
+ * array element without early termination (GHSA-mrhx-c7xc-m3w5). ContentRail
+ * stays on the Zod 3 public schema API; these bounds reduce resource-exhaustion
+ * risk at trust boundaries without migrating consumers to Zod 4.
+ *
+ * Limitations (explicit): these checks bound nesting, array length, and object
+ * key count. They do **not** cap string byte length, total serialized size, or
+ * CPU spent validating values that are within the structural limits.
+ */
+const DEFAULT_MAX_ARRAY_LENGTH = 10_000;
+const DEFAULT_MAX_OBJECT_KEYS = 10_000;
+const DEFAULT_MAX_DEPTH = 32;
+/**
+ * Walks a JSON-like value and returns the first structural bound violation.
+ * Returns `null` when the value is within limits.
+ *
+ * Cyclic object graphs are rejected (`cyclic`) so the walker itself cannot be
+ * forced into unbounded recursion. Primitives (including large strings) are
+ * accepted by this helper — size must be constrained by callers (e.g. Worker
+ * body limits).
+ */
+export function findJsonBoundViolation(value, limits = {}) {
+    const maxArrayLength = limits.maxArrayLength ?? DEFAULT_MAX_ARRAY_LENGTH;
+    const maxObjectKeys = limits.maxObjectKeys ?? DEFAULT_MAX_OBJECT_KEYS;
+    const maxDepth = limits.maxDepth ?? DEFAULT_MAX_DEPTH;
+    return walk(value, [], 0, maxArrayLength, maxObjectKeys, maxDepth, new WeakSet());
+}
+function walk(value, path, depth, maxArrayLength, maxObjectKeys, maxDepth, seen) {
+    if (depth > maxDepth) {
+        return {
+            path,
+            code: "too_deep",
+            message: `Value exceeds maximum nesting depth of ${maxDepth}.`,
+        };
+    }
+    if (value === null || typeof value !== "object") {
+        return null;
+    }
+    if (seen.has(value)) {
+        return {
+            path,
+            code: "cyclic",
+            message: "Cyclic object graph is not allowed.",
+        };
+    }
+    seen.add(value);
+    if (Array.isArray(value)) {
+        if (value.length > maxArrayLength) {
+            return {
+                path,
+                code: "too_big",
+                message: `Array length ${value.length} exceeds limit ${maxArrayLength}.`,
+            };
+        }
+        for (let index = 0; index < value.length; index += 1) {
+            const nested = walk(value[index], [...path, index], depth + 1, maxArrayLength, maxObjectKeys, maxDepth, seen);
+            if (nested !== null) {
+                return nested;
+            }
+        }
+        return null;
+    }
+    const keys = Object.keys(value);
+    if (keys.length > maxObjectKeys) {
+        return {
+            path,
+            code: "too_big",
+            message: `Object key count ${keys.length} exceeds limit ${maxObjectKeys}.`,
+        };
+    }
+    const record = value;
+    for (const key of keys) {
+        const nested = walk(record[key], [...path, key], depth + 1, maxArrayLength, maxObjectKeys, maxDepth, seen);
+        if (nested !== null) {
+            return nested;
+        }
+    }
+    return null;
+}
+//# sourceMappingURL=bounds.js.map

package/dist/bounds.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"bounds.js","sourceRoot":"","sources":["../src/bounds.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAiBH,MAAM,wBAAwB,GAAG,MAAM,CAAC;AACxC,MAAM,uBAAuB,GAAG,MAAM,CAAC;AACvC,MAAM,iBAAiB,GAAG,EAAE,CAAC;AAE7B;;;;;;;;GAQG;AACH,MAAM,UAAU,sBAAsB,CACpC,KAAc,EACd,SAA0B,EAAE;IAE5B,MAAM,cAAc,GAAG,MAAM,CAAC,cAAc,IAAI,wBAAwB,CAAC;IACzE,MAAM,aAAa,GAAG,MAAM,CAAC,aAAa,IAAI,uBAAuB,CAAC;IACtE,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,IAAI,iBAAiB,CAAC;IAEtD,OAAO,IAAI,CACT,KAAK,EACL,EAAE,EACF,CAAC,EACD,cAAc,EACd,aAAa,EACb,QAAQ,EACR,IAAI,OAAO,EAAU,CACtB,CAAC;AACJ,CAAC;AAED,SAAS,IAAI,CACX,KAAc,EACd,IAAoC,EACpC,KAAa,EACb,cAAsB,EACtB,aAAqB,EACrB,QAAgB,EAChB,IAAqB;IAErB,IAAI,KAAK,GAAG,QAAQ,EAAE,CAAC;QACrB,OAAO;YACL,IAAI;YACJ,IAAI,EAAE,UAAU;YAChB,OAAO,EAAE,0CAA0C,QAAQ,GAAG;SAC/D,CAAC;IACJ,CAAC;IAED,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAChD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;QACpB,OAAO;YACL,IAAI;YACJ,IAAI,EAAE,QAAQ;YACd,OAAO,EAAE,qCAAqC;SAC/C,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IAEhB,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,IAAI,KAAK,CAAC,MAAM,GAAG,cAAc,EAAE,CAAC;YAClC,OAAO;gBACL,IAAI;gBACJ,IAAI,EAAE,SAAS;gBACf,OAAO,EAAE,gBAAgB,KAAK,CAAC,MAAM,kBAAkB,cAAc,GAAG;aACzE,CAAC;QACJ,CAAC;QACD,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,KAAK,CAAC,MAAM,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;YACrD,MAAM,MAAM,GAAG,IAAI,CACjB,KAAK,CAAC,KAAK,CAAC,EACZ,CAAC,GAAG,IAAI,EAAE,KAAK,CAAC,EAChB,KAAK,GAAG,CAAC,EACT,cAAc,EACd,aAAa,EACb,QAAQ,EACR,IAAI,CACL,CAAC;YACF,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;gBACpB,OAAO,MAAM,CAAC;YAChB,CAAC;QACH,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAChC,IAAI,IAAI,CAAC,MAAM,GAAG,aAAa,EAAE,CAAC;QAChC,OAAO;YACL,IAAI;YACJ,IAAI,EAAE,SAAS;YACf,OAAO,EAAE,oBAAoB,IAAI,CAAC,MAAM,kBAAkB,aAAa,GAAG;SAC3E,CAAC;IACJ,CAAC;IACD,MAAM,MAAM,GAAG,KAAgC,CAAC;IAChD,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,MAAM,MAAM,GAAG,IAAI,CACjB,MAAM,CAAC,GAAG,CAAC,EACX,CAAC,GAAG,IAAI,EAAE,GAAG,CAAC,EACd,KAAK,GAAG,CAAC,EACT,cAAc,EACd,aAAa,EACb,QAAQ,EACR,IAAI,CACL,CAAC;QACF,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;YACpB,OAAO,MAAM,CAAC;QAChB,CAAC;IACH,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/collection.d.ts

@@ -0,0 +1,8 @@
+import { type z } from "zod";
+import type { ContentCollection, DefineCollectionInput } from "./types.js";
+/**
+ * Defines a content collection bound to a Zod schema.
+ * Does not touch storage or publishing — schema and validation only.
+ */
+export declare function defineCollection<TSchema extends z.ZodTypeAny>(input: DefineCollectionInput<TSchema>): ContentCollection<TSchema>;
+//# sourceMappingURL=collection.d.ts.map

package/dist/collection.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"collection.d.ts","sourceRoot":"","sources":["../src/collection.ts"],"names":[],"mappings":"AAAA,OAAO,EAAa,KAAK,CAAC,EAAE,MAAM,KAAK,CAAC;AAExC,OAAO,KAAK,EACV,iBAAiB,EACjB,qBAAqB,EAEtB,MAAM,YAAY,CAAC;AAIpB;;;GAGG;AACH,wBAAgB,gBAAgB,CAAC,OAAO,SAAS,CAAC,CAAC,UAAU,EAC3D,KAAK,EAAE,qBAAqB,CAAC,OAAO,CAAC,GACpC,iBAAiB,CAAC,OAAO,CAAC,CA4C5B"}

package/dist/collection.js

@@ -0,0 +1,45 @@
+import { ZodObject } from "zod";
+import { ContentDefinitionError } from "./errors.js";
+const COLLECTION_NAME_PATTERN = /^[a-z][a-z0-9_-]*$/;
+/**
+ * Defines a content collection bound to a Zod schema.
+ * Does not touch storage or publishing — schema and validation only.
+ */
+export function defineCollection(input) {
+    if (input === null || typeof input !== "object") {
+        throw new ContentDefinitionError("Collection definition must be a non-null object.");
+    }
+    const name = input.name;
+    if (typeof name !== "string" || name.trim() === "") {
+        throw new ContentDefinitionError('Collection "name" must be a non-empty string.');
+    }
+    if (!COLLECTION_NAME_PATTERN.test(name)) {
+        throw new ContentDefinitionError(`Collection "name" must match ${COLLECTION_NAME_PATTERN}: received "${name}".`);
+    }
+    if (input.schema === undefined || input.schema === null) {
+        throw new ContentDefinitionError(`Collection "${name}" requires a Zod "schema".`);
+    }
+    if (typeof input.schema.safeParse !== "function") {
+        throw new ContentDefinitionError(`Collection "${name}" "schema" must be a Zod schema with safeParse().`);
+    }
+    const unknownKeys = input.unknownKeys ?? "strip";
+    if (unknownKeys !== "strip" && unknownKeys !== "strict") {
+        throw new ContentDefinitionError(`Collection "${name}" "unknownKeys" must be "strip" or "strict".`);
+    }
+    const schema = applyUnknownKeysPolicy(input.schema, unknownKeys);
+    return Object.freeze({
+        name,
+        schema,
+        unknownKeys,
+    });
+}
+function applyUnknownKeysPolicy(schema, policy) {
+    if (!(schema instanceof ZodObject)) {
+        return schema;
+    }
+    if (policy === "strict") {
+        return schema.strict();
+    }
+    return schema.strip();
+}
+//# sourceMappingURL=collection.js.map

package/dist/collection.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"collection.js","sourceRoot":"","sources":["../src/collection.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAU,MAAM,KAAK,CAAC;AACxC,OAAO,EAAE,sBAAsB,EAAE,MAAM,aAAa,CAAC;AAOrD,MAAM,uBAAuB,GAAG,oBAAoB,CAAC;AAErD;;;GAGG;AACH,MAAM,UAAU,gBAAgB,CAC9B,KAAqC;IAErC,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAChD,MAAM,IAAI,sBAAsB,CAC9B,kDAAkD,CACnD,CAAC;IACJ,CAAC;IAED,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC;IACxB,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;QACnD,MAAM,IAAI,sBAAsB,CAC9B,+CAA+C,CAChD,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,uBAAuB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QACxC,MAAM,IAAI,sBAAsB,CAC9B,gCAAgC,uBAAuB,eAAe,IAAI,IAAI,CAC/E,CAAC;IACJ,CAAC;IAED,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS,IAAI,KAAK,CAAC,MAAM,KAAK,IAAI,EAAE,CAAC;QACxD,MAAM,IAAI,sBAAsB,CAC9B,eAAe,IAAI,4BAA4B,CAChD,CAAC;IACJ,CAAC;IACD,IAAI,OAAO,KAAK,CAAC,MAAM,CAAC,SAAS,KAAK,UAAU,EAAE,CAAC;QACjD,MAAM,IAAI,sBAAsB,CAC9B,eAAe,IAAI,mDAAmD,CACvE,CAAC;IACJ,CAAC;IAED,MAAM,WAAW,GAAsB,KAAK,CAAC,WAAW,IAAI,OAAO,CAAC;IACpE,IAAI,WAAW,KAAK,OAAO,IAAI,WAAW,KAAK,QAAQ,EAAE,CAAC;QACxD,MAAM,IAAI,sBAAsB,CAC9B,eAAe,IAAI,8CAA8C,CAClE,CAAC;IACJ,CAAC;IAED,MAAM,MAAM,GAAG,sBAAsB,CAAC,KAAK,CAAC,MAAM,EAAE,WAAW,CAAY,CAAC;IAE5E,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,IAAI;QACJ,MAAM;QACN,WAAW;KACZ,CAAC,CAAC;AACL,CAAC;AAED,SAAS,sBAAsB,CAC7B,MAAe,EACf,MAAyB;IAEzB,IAAI,CAAC,CAAC,MAAM,YAAY,SAAS,CAAC,EAAE,CAAC;QACnC,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,IAAI,MAAM,KAAK,QAAQ,EAAE,CAAC;QACxB,OAAO,MAAM,CAAC,MAAM,EAAE,CAAC;IACzB,CAAC;IAED,OAAO,MAAM,CAAC,KAAK,EAAE,CAAC;AACxB,CAAC"}

package/dist/errors.d.ts

@@ -0,0 +1,29 @@
+/**
+ * A single structured validation issue.
+ * Paths use Zod-style segments (string keys and numeric array indexes).
+ */
+export interface ValidationIssue {
+    readonly path: ReadonlyArray<string | number>;
+    readonly code: string;
+    readonly message: string;
+    readonly expected?: string;
+    readonly received?: string;
+}
+export declare class ContentDefinitionError extends Error {
+    readonly code: "CONTENT_DEFINITION_ERROR";
+    constructor(message: string);
+}
+export declare class ContentValidationError extends Error {
+    readonly code: "CONTENT_VALIDATION_ERROR";
+    readonly collection: string;
+    readonly issues: readonly ValidationIssue[];
+    constructor(collection: string, issues: readonly ValidationIssue[]);
+    toJSON(): {
+        name: string;
+        code: "CONTENT_VALIDATION_ERROR";
+        collection: string;
+        message: string;
+        issues: readonly ValidationIssue[];
+    };
+}
+//# sourceMappingURL=errors.d.ts.map

package/dist/errors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../src/errors.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,IAAI,EAAE,aAAa,CAAC,MAAM,GAAG,MAAM,CAAC,CAAC;IAC9C,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;CAC5B;AAED,qBAAa,sBAAuB,SAAQ,KAAK;IAC/C,QAAQ,CAAC,IAAI,EAAG,0BAA0B,CAAU;gBAExC,OAAO,EAAE,MAAM;CAI5B;AAED,qBAAa,sBAAuB,SAAQ,KAAK;IAC/C,QAAQ,CAAC,IAAI,EAAG,0BAA0B,CAAU;IACpD,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,MAAM,EAAE,SAAS,eAAe,EAAE,CAAC;gBAEhC,UAAU,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,eAAe,EAAE;IAWlE,MAAM,IAAI;QACR,IAAI,EAAE,MAAM,CAAC;QACb,IAAI,EAAE,0BAA0B,CAAC;QACjC,UAAU,EAAE,MAAM,CAAC;QACnB,OAAO,EAAE,MAAM,CAAC;QAChB,MAAM,EAAE,SAAS,eAAe,EAAE,CAAC;KACpC;CASF"}

package/dist/errors.js

@@ -0,0 +1,35 @@
+export class ContentDefinitionError extends Error {
+    code = "CONTENT_DEFINITION_ERROR";
+    constructor(message) {
+        super(message);
+        this.name = "ContentDefinitionError";
+    }
+}
+export class ContentValidationError extends Error {
+    code = "CONTENT_VALIDATION_ERROR";
+    collection;
+    issues;
+    constructor(collection, issues) {
+        const summary = issues.length === 1
+            ? formatIssue(issues[0])
+            : `${issues.length} validation issues`;
+        super(`Invalid content for collection "${collection}": ${summary}`);
+        this.name = "ContentValidationError";
+        this.collection = collection;
+        this.issues = issues;
+    }
+    toJSON() {
+        return {
+            name: this.name,
+            code: this.code,
+            collection: this.collection,
+            message: this.message,
+            issues: this.issues,
+        };
+    }
+}
+function formatIssue(issue) {
+    const path = issue.path.length > 0 ? issue.path.join(".") : "(root)";
+    return `${path}: ${issue.message}`;
+}
+//# sourceMappingURL=errors.js.map

package/dist/errors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.js","sourceRoot":"","sources":["../src/errors.ts"],"names":[],"mappings":"AAYA,MAAM,OAAO,sBAAuB,SAAQ,KAAK;IACtC,IAAI,GAAG,0BAAmC,CAAC;IAEpD,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,wBAAwB,CAAC;IACvC,CAAC;CACF;AAED,MAAM,OAAO,sBAAuB,SAAQ,KAAK;IACtC,IAAI,GAAG,0BAAmC,CAAC;IAC3C,UAAU,CAAS;IACnB,MAAM,CAA6B;IAE5C,YAAY,UAAkB,EAAE,MAAkC;QAChE,MAAM,OAAO,GACX,MAAM,CAAC,MAAM,KAAK,CAAC;YACjB,CAAC,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAAE,CAAC;YACzB,CAAC,CAAC,GAAG,MAAM,CAAC,MAAM,oBAAoB,CAAC;QAC3C,KAAK,CAAC,mCAAmC,UAAU,MAAM,OAAO,EAAE,CAAC,CAAC;QACpE,IAAI,CAAC,IAAI,GAAG,wBAAwB,CAAC;QACrC,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;QAC7B,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACvB,CAAC;IAED,MAAM;QAOJ,OAAO;YACL,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,MAAM,EAAE,IAAI,CAAC,MAAM;SACpB,CAAC;IACJ,CAAC;CACF;AAED,SAAS,WAAW,CAAC,KAAsB;IACzC,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC;IACrE,OAAO,GAAG,IAAI,KAAK,KAAK,CAAC,OAAO,EAAE,CAAC;AACrC,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,6 @@
+export { findJsonBoundViolation, type JsonBoundLimits, type JsonBoundViolation, } from "./bounds.js";
+export { defineCollection } from "./collection.js";
+export { ContentDefinitionError, ContentValidationError, type ValidationIssue, } from "./errors.js";
+export type { ContentCollection, DefineCollectionInput, InferEntry, UnknownKeysPolicy, ValidationFailure, ValidationResult, ValidationSuccess, } from "./types.js";
+export { DEFAULT_MAX_COLLECTION_ENTRIES, assertValidEntry, validateCollection, validateEntry, type ValidateCollectionOptions, type ValidateEntryOptions, } from "./validate.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,sBAAsB,EACtB,KAAK,eAAe,EACpB,KAAK,kBAAkB,GACxB,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AACnD,OAAO,EACL,sBAAsB,EACtB,sBAAsB,EACtB,KAAK,eAAe,GACrB,MAAM,aAAa,CAAC;AACrB,YAAY,EACV,iBAAiB,EACjB,qBAAqB,EACrB,UAAU,EACV,iBAAiB,EACjB,iBAAiB,EACjB,gBAAgB,EAChB,iBAAiB,GAClB,MAAM,YAAY,CAAC;AACpB,OAAO,EACL,8BAA8B,EAC9B,gBAAgB,EAChB,kBAAkB,EAClB,aAAa,EACb,KAAK,yBAAyB,EAC9B,KAAK,oBAAoB,GAC1B,MAAM,eAAe,CAAC"}

package/dist/index.js

@@ -0,0 +1,5 @@
+export { findJsonBoundViolation, } from "./bounds.js";
+export { defineCollection } from "./collection.js";
+export { ContentDefinitionError, ContentValidationError, } from "./errors.js";
+export { DEFAULT_MAX_COLLECTION_ENTRIES, assertValidEntry, validateCollection, validateEntry, } from "./validate.js";
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,sBAAsB,GAGvB,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AACnD,OAAO,EACL,sBAAsB,EACtB,sBAAsB,GAEvB,MAAM,aAAa,CAAC;AAUrB,OAAO,EACL,8BAA8B,EAC9B,gBAAgB,EAChB,kBAAkB,EAClB,aAAa,GAGd,MAAM,eAAe,CAAC"}

package/dist/types.d.ts

@@ -0,0 +1,40 @@
+import type { z } from "zod";
+import type { ContentValidationError } from "./errors.js";
+/** How root object schemas treat keys not declared in the schema. */
+export type UnknownKeysPolicy = "strip" | "strict";
+export interface DefineCollectionInput<TSchema extends z.ZodTypeAny> {
+    /** Stable collection identifier used in errors and tooling. */
+    readonly name: string;
+    /** Zod schema describing one content entry. */
+    readonly schema: TSchema;
+    /**
+     * Unexpected root-object field policy.
+     * - `strip` (default): remove unknown keys (Zod object default).
+     * - `strict`: reject unknown keys.
+     *
+     * Applies only when `schema` is a Zod object schema (including `.strict()` /
+     * `.passthrough()` wrappers replaced according to this policy).
+     */
+    readonly unknownKeys?: UnknownKeysPolicy;
+}
+/**
+ * A defined content collection. This is a schema-bound definition only —
+ * it does not read, write, or publish content.
+ */
+export interface ContentCollection<TSchema extends z.ZodTypeAny = z.ZodTypeAny> {
+    readonly name: string;
+    readonly schema: TSchema;
+    readonly unknownKeys: UnknownKeysPolicy;
+}
+/** Inferred entry type for a collection. */
+export type InferEntry<TCollection extends ContentCollection> = z.infer<TCollection["schema"]>;
+export type ValidationSuccess<T> = {
+    readonly success: true;
+    readonly data: T;
+};
+export type ValidationFailure = {
+    readonly success: false;
+    readonly error: ContentValidationError;
+};
+export type ValidationResult<T> = ValidationSuccess<T> | ValidationFailure;
+//# sourceMappingURL=types.d.ts.map

package/dist/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAC7B,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,aAAa,CAAC;AAE1D,qEAAqE;AACrE,MAAM,MAAM,iBAAiB,GAAG,OAAO,GAAG,QAAQ,CAAC;AAEnD,MAAM,WAAW,qBAAqB,CAAC,OAAO,SAAS,CAAC,CAAC,UAAU;IACjE,+DAA+D;IAC/D,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,+CAA+C;IAC/C,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC;IACzB;;;;;;;OAOG;IACH,QAAQ,CAAC,WAAW,CAAC,EAAE,iBAAiB,CAAC;CAC1C;AAED;;;GAGG;AACH,MAAM,WAAW,iBAAiB,CAChC,OAAO,SAAS,CAAC,CAAC,UAAU,GAAG,CAAC,CAAC,UAAU;IAE3C,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC;IACzB,QAAQ,CAAC,WAAW,EAAE,iBAAiB,CAAC;CACzC;AAED,4CAA4C;AAC5C,MAAM,MAAM,UAAU,CAAC,WAAW,SAAS,iBAAiB,IAAI,CAAC,CAAC,KAAK,CACrE,WAAW,CAAC,QAAQ,CAAC,CACtB,CAAC;AAEF,MAAM,MAAM,iBAAiB,CAAC,CAAC,IAAI;IACjC,QAAQ,CAAC,OAAO,EAAE,IAAI,CAAC;IACvB,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC;CAClB,CAAC;AAEF,MAAM,MAAM,iBAAiB,GAAG;IAC9B,QAAQ,CAAC,OAAO,EAAE,KAAK,CAAC;IACxB,QAAQ,CAAC,KAAK,EAAE,sBAAsB,CAAC;CACxC,CAAC;AAEF,MAAM,MAAM,gBAAgB,CAAC,CAAC,IAAI,iBAAiB,CAAC,CAAC,CAAC,GAAG,iBAAiB,CAAC"}

package/dist/types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=types.js.map

package/dist/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":""}

package/dist/validate.d.ts

@@ -0,0 +1,27 @@
+import { type JsonBoundLimits } from "./bounds.js";
+import type { ContentCollection, InferEntry, ValidationResult } from "./types.js";
+/** Default cap for `validateCollection` input length (entries, not nested fields). */
+export declare const DEFAULT_MAX_COLLECTION_ENTRIES = 10000;
+export interface ValidateEntryOptions {
+    readonly bounds?: JsonBoundLimits;
+}
+export interface ValidateCollectionOptions extends ValidateEntryOptions {
+    /** Maximum number of top-level entries. Default: 10_000. */
+    readonly maxEntries?: number;
+}
+/**
+ * Validates a single content entry against the collection schema.
+ * Never throws for invalid content — returns a structured result.
+ *
+ * Structural JSON bounds run before Zod so oversized nested arrays/objects
+ * cannot drive unbounded issue accumulation in Zod 3 (GHSA-mrhx-c7xc-m3w5).
+ */
+export declare function validateEntry<TCollection extends ContentCollection>(collection: TCollection, entry: unknown, options?: ValidateEntryOptions): ValidationResult<InferEntry<TCollection>>;
+/**
+ * Validates an ordered list of entries for a collection.
+ * Aggregates issues from every failing entry; paths are prefixed with the index.
+ */
+export declare function validateCollection<TCollection extends ContentCollection>(collection: TCollection, entries: unknown, options?: ValidateCollectionOptions): ValidationResult<Array<InferEntry<TCollection>>>;
+/** Narrow helper for callers that prefer throwing on failure. */
+export declare function assertValidEntry<TCollection extends ContentCollection>(collection: TCollection, entry: unknown, options?: ValidateEntryOptions): InferEntry<TCollection>;
+//# sourceMappingURL=validate.d.ts.map

package/dist/validate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"validate.d.ts","sourceRoot":"","sources":["../src/validate.ts"],"names":[],"mappings":"AACA,OAAO,EAA0B,KAAK,eAAe,EAAE,MAAM,aAAa,CAAC;AAE3E,OAAO,KAAK,EACV,iBAAiB,EACjB,UAAU,EACV,gBAAgB,EACjB,MAAM,YAAY,CAAC;AAEpB,sFAAsF;AACtF,eAAO,MAAM,8BAA8B,QAAS,CAAC;AAErD,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,MAAM,CAAC,EAAE,eAAe,CAAC;CACnC;AAED,MAAM,WAAW,yBAA0B,SAAQ,oBAAoB;IACrE,4DAA4D;IAC5D,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;CAC9B;AAED;;;;;;GAMG;AACH,wBAAgB,aAAa,CAAC,WAAW,SAAS,iBAAiB,EACjE,UAAU,EAAE,WAAW,EACvB,KAAK,EAAE,OAAO,EACd,OAAO,GAAE,oBAAyB,GACjC,gBAAgB,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC,CAgC3C;AAED;;;GAGG;AACH,wBAAgB,kBAAkB,CAAC,WAAW,SAAS,iBAAiB,EACtE,UAAU,EAAE,WAAW,EACvB,OAAO,EAAE,OAAO,EAChB,OAAO,GAAE,yBAA8B,GACtC,gBAAgB,CAAC,KAAK,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC,CAAC,CA+DlD;AA0DD,iEAAiE;AACjE,wBAAgB,gBAAgB,CAAC,WAAW,SAAS,iBAAiB,EACpE,UAAU,EAAE,WAAW,EACvB,KAAK,EAAE,OAAO,EACd,OAAO,GAAE,oBAAyB,GACjC,UAAU,CAAC,WAAW,CAAC,CAMzB"}

package/dist/validate.js

@@ -0,0 +1,151 @@
+import { findJsonBoundViolation } from "./bounds.js";
+import { ContentValidationError } from "./errors.js";
+/** Default cap for `validateCollection` input length (entries, not nested fields). */
+export const DEFAULT_MAX_COLLECTION_ENTRIES = 10_000;
+/**
+ * Validates a single content entry against the collection schema.
+ * Never throws for invalid content — returns a structured result.
+ *
+ * Structural JSON bounds run before Zod so oversized nested arrays/objects
+ * cannot drive unbounded issue accumulation in Zod 3 (GHSA-mrhx-c7xc-m3w5).
+ */
+export function validateEntry(collection, entry, options = {}) {
+    assertCollection(collection);
+    const bound = findJsonBoundViolation(entry, options.bounds);
+    if (bound !== null) {
+        return {
+            success: false,
+            error: new ContentValidationError(collection.name, [
+                {
+                    path: [...bound.path],
+                    code: bound.code,
+                    message: bound.message,
+                },
+            ]),
+        };
+    }
+    const parsed = collection.schema.safeParse(entry);
+    if (parsed.success) {
+        return {
+            success: true,
+            data: parsed.data,
+        };
+    }
+    return {
+        success: false,
+        error: new ContentValidationError(collection.name, parsed.error.issues.map(toValidationIssue)),
+    };
+}
+/**
+ * Validates an ordered list of entries for a collection.
+ * Aggregates issues from every failing entry; paths are prefixed with the index.
+ */
+export function validateCollection(collection, entries, options = {}) {
+    assertCollection(collection);
+    if (!Array.isArray(entries)) {
+        return {
+            success: false,
+            error: new ContentValidationError(collection.name, [
+                {
+                    path: [],
+                    code: "invalid_type",
+                    message: "Collection entries must be an array.",
+                    expected: "array",
+                    received: typeName(entries),
+                },
+            ]),
+        };
+    }
+    const maxEntries = options.maxEntries ?? DEFAULT_MAX_COLLECTION_ENTRIES;
+    if (entries.length > maxEntries) {
+        return {
+            success: false,
+            error: new ContentValidationError(collection.name, [
+                {
+                    path: [],
+                    code: "too_big",
+                    message: `Collection has ${entries.length} entries; limit is ${maxEntries}.`,
+                },
+            ]),
+        };
+    }
+    const data = [];
+    const issues = [];
+    for (let index = 0; index < entries.length; index += 1) {
+        const entryOptions = options.bounds === undefined ? {} : { bounds: options.bounds };
+        const result = validateEntry(collection, entries[index], entryOptions);
+        if (result.success) {
+            data.push(result.data);
+            continue;
+        }
+        for (const issue of result.error.issues) {
+            issues.push({
+                path: [index, ...issue.path],
+                code: issue.code,
+                message: issue.message,
+                ...(issue.expected !== undefined ? { expected: issue.expected } : {}),
+                ...(issue.received !== undefined ? { received: issue.received } : {}),
+            });
+        }
+    }
+    if (issues.length > 0) {
+        return {
+            success: false,
+            error: new ContentValidationError(collection.name, issues),
+        };
+    }
+    return { success: true, data };
+}
+function assertCollection(collection) {
+    if (collection === null ||
+        typeof collection !== "object" ||
+        typeof collection.name !== "string" ||
+        collection.schema === undefined ||
+        typeof collection.schema.safeParse !== "function") {
+        throw new TypeError("validateEntry/validateCollection require a ContentCollection from defineCollection().");
+    }
+}
+function toValidationIssue(issue) {
+    const base = {
+        path: issue.path.map((segment) => {
+            if (typeof segment === "string" || typeof segment === "number") {
+                return segment;
+            }
+            return String(segment);
+        }),
+        code: issue.code,
+        message: issue.message,
+    };
+    if (issue.code === "invalid_type") {
+        return {
+            ...base,
+            expected: issue.expected,
+            received: issue.received,
+        };
+    }
+    if (issue.code === "unrecognized_keys") {
+        return {
+            ...base,
+            received: issue.keys.join(", "),
+        };
+    }
+    return base;
+}
+function typeName(value) {
+    if (value === null) {
+        return "null";
+    }
+    if (Array.isArray(value)) {
+        return "array";
+    }
+    return typeof value;
+}
+/** Narrow helper for callers that prefer throwing on failure. */
+export function assertValidEntry(collection, entry, options = {}) {
+    const result = validateEntry(collection, entry, options);
+    if (!result.success) {
+        throw result.error;
+    }
+    return result.data;
+}
+//# sourceMappingURL=validate.js.map

package/dist/validate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"validate.js","sourceRoot":"","sources":["../src/validate.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,sBAAsB,EAAwB,MAAM,aAAa,CAAC;AAC3E,OAAO,EAAE,sBAAsB,EAAwB,MAAM,aAAa,CAAC;AAO3E,sFAAsF;AACtF,MAAM,CAAC,MAAM,8BAA8B,GAAG,MAAM,CAAC;AAWrD;;;;;;GAMG;AACH,MAAM,UAAU,aAAa,CAC3B,UAAuB,EACvB,KAAc,EACd,UAAgC,EAAE;IAElC,gBAAgB,CAAC,UAAU,CAAC,CAAC;IAE7B,MAAM,KAAK,GAAG,sBAAsB,CAAC,KAAK,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;IAC5D,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;QACnB,OAAO;YACL,OAAO,EAAE,KAAK;YACd,KAAK,EAAE,IAAI,sBAAsB,CAAC,UAAU,CAAC,IAAI,EAAE;gBACjD;oBACE,IAAI,EAAE,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC;oBACrB,IAAI,EAAE,KAAK,CAAC,IAAI;oBAChB,OAAO,EAAE,KAAK,CAAC,OAAO;iBACvB;aACF,CAAC;SACH,CAAC;IACJ,CAAC;IAED,MAAM,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IAClD,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;QACnB,OAAO;YACL,OAAO,EAAE,IAAI;YACb,IAAI,EAAE,MAAM,CAAC,IAA+B;SAC7C,CAAC;IACJ,CAAC;IAED,OAAO;QACL,OAAO,EAAE,KAAK;QACd,KAAK,EAAE,IAAI,sBAAsB,CAC/B,UAAU,CAAC,IAAI,EACf,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAC3C;KACF,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,kBAAkB,CAChC,UAAuB,EACvB,OAAgB,EAChB,UAAqC,EAAE;IAEvC,gBAAgB,CAAC,UAAU,CAAC,CAAC;IAE7B,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QAC5B,OAAO;YACL,OAAO,EAAE,KAAK;YACd,KAAK,EAAE,IAAI,sBAAsB,CAAC,UAAU,CAAC,IAAI,EAAE;gBACjD;oBACE,IAAI,EAAE,EAAE;oBACR,IAAI,EAAE,cAAc;oBACpB,OAAO,EAAE,sCAAsC;oBAC/C,QAAQ,EAAE,OAAO;oBACjB,QAAQ,EAAE,QAAQ,CAAC,OAAO,CAAC;iBAC5B;aACF,CAAC;SACH,CAAC;IACJ,CAAC;IAED,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,IAAI,8BAA8B,CAAC;IACxE,IAAI,OAAO,CAAC,MAAM,GAAG,UAAU,EAAE,CAAC;QAChC,OAAO;YACL,OAAO,EAAE,KAAK;YACd,KAAK,EAAE,IAAI,sBAAsB,CAAC,UAAU,CAAC,IAAI,EAAE;gBACjD;oBACE,IAAI,EAAE,EAAE;oBACR,IAAI,EAAE,SAAS;oBACf,OAAO,EAAE,kBAAkB,OAAO,CAAC,MAAM,sBAAsB,UAAU,GAAG;iBAC7E;aACF,CAAC;SACH,CAAC;IACJ,CAAC;IAED,MAAM,IAAI,GAAmC,EAAE,CAAC;IAChD,MAAM,MAAM,GAAsB,EAAE,CAAC;IAErC,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,OAAO,CAAC,MAAM,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QACvD,MAAM,YAAY,GAChB,OAAO,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC;QACjE,MAAM,MAAM,GAAG,aAAa,CAAC,UAAU,EAAE,OAAO,CAAC,KAAK,CAAC,EAAE,YAAY,CAAC,CAAC;QACvE,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;YACnB,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;YACvB,SAAS;QACX,CAAC;QAED,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;YACxC,MAAM,CAAC,IAAI,CAAC;gBACV,IAAI,EAAE,CAAC,KAAK,EAAE,GAAG,KAAK,CAAC,IAAI,CAAC;gBAC5B,IAAI,EAAE,KAAK,CAAC,IAAI;gBAChB,OAAO,EAAE,KAAK,CAAC,OAAO;gBACtB,GAAG,CAAC,KAAK,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACrE,GAAG,CAAC,KAAK,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACtE,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACtB,OAAO;YACL,OAAO,EAAE,KAAK;YACd,KAAK,EAAE,IAAI,sBAAsB,CAAC,UAAU,CAAC,IAAI,EAAE,MAAM,CAAC;SAC3D,CAAC;IACJ,CAAC;IAED,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;AACjC,CAAC;AAED,SAAS,gBAAgB,CACvB,UAA6B;IAE7B,IACE,UAAU,KAAK,IAAI;QACnB,OAAO,UAAU,KAAK,QAAQ;QAC9B,OAAO,UAAU,CAAC,IAAI,KAAK,QAAQ;QACnC,UAAU,CAAC,MAAM,KAAK,SAAS;QAC/B,OAAO,UAAU,CAAC,MAAM,CAAC,SAAS,KAAK,UAAU,EACjD,CAAC;QACD,MAAM,IAAI,SAAS,CACjB,uFAAuF,CACxF,CAAC;IACJ,CAAC;AACH,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAe;IACxC,MAAM,IAAI,GAAoB;QAC5B,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE;YAC/B,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;gBAC/D,OAAO,OAAO,CAAC;YACjB,CAAC;YACD,OAAO,MAAM,CAAC,OAAO,CAAC,CAAC;QACzB,CAAC,CAAC;QACF,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,OAAO,EAAE,KAAK,CAAC,OAAO;KACvB,CAAC;IAEF,IAAI,KAAK,CAAC,IAAI,KAAK,cAAc,EAAE,CAAC;QAClC,OAAO;YACL,GAAG,IAAI;YACP,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,QAAQ,EAAE,KAAK,CAAC,QAAQ;SACzB,CAAC;IACJ,CAAC;IAED,IAAI,KAAK,CAAC,IAAI,KAAK,mBAAmB,EAAE,CAAC;QACvC,OAAO;YACL,GAAG,IAAI;YACP,QAAQ,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC;SAChC,CAAC;IACJ,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC9B,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;QACnB,OAAO,MAAM,CAAC;IAChB,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,OAAO,CAAC;IACjB,CAAC;IACD,OAAO,OAAO,KAAK,CAAC;AACtB,CAAC;AAED,iEAAiE;AACjE,MAAM,UAAU,gBAAgB,CAC9B,UAAuB,EACvB,KAAc,EACd,UAAgC,EAAE;IAElC,MAAM,MAAM,GAAG,aAAa,CAAC,UAAU,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC;IACzD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,MAAM,MAAM,CAAC,KAAK,CAAC;IACrB,CAAC;IACD,OAAO,MAAM,CAAC,IAAI,CAAC;AACrB,CAAC"}

package/package.json

@@ -1,6 +1,52 @@
 {
   "name": "@contentrail/core",
-  "version": "0.0.0-stage",
-  "stub": true,
-  "description": "Temporary package placeholder for staged publishing"
+  "version": "0.1.0",
+  "private": false,
+  "type": "module",
+  "description": "Framework-independent ContentRail schemas, validation, and content types.",
+  "license": "MIT",
+  "engines": {
+    "node": ">=22"
+  },
+  "sideEffects": false,
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js"
+    },
+    "./package.json": "./package.json"
+  },
+  "files": [
+    "dist",
+    "README.md",
+    "LICENSE"
+  ],
+  "dependencies": {
+    "zod": "^3.25.76"
+  },
+  "peerDependencies": {
+    "zod": "^3.23.0"
+  },
+  "devDependencies": {
+    "@types/node": "^22.20.5",
+    "typescript": "5.9.3",
+    "zod": "3.25.76"
+  },
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/Hridhin-k/contentrail.git",
+    "directory": "packages/core"
+  },
+  "bugs": {
+    "url": "https://github.com/Hridhin-k/contentrail/issues"
+  },
+  "homepage": "https://github.com/Hridhin-k/contentrail#readme",
+  "publishConfig": {
+    "access": "public"
+  },
+  "scripts": {
+    "build": "tsc -p tsconfig.json",
+    "typecheck": "tsc -p tsconfig.json --noEmit && tsc -p tsconfig.type-tests.json",
+    "test": "pnpm run build && tsc -p tsconfig.test.json && node --test test-dist/**/*.test.js"
+  }
 }