@derive-to/artifacts 0.0.0-stage → 0.6.0

package/dist/server/core/inline-assets.js

@@ -0,0 +1,43 @@
+import { DEFAULT_ASSET_POLICY } from "./assets.js";
+import { toBase64 } from "./base64.js";
+import { badRequest, notFound } from "./errors.js";
+const MAX_ASSETS = 50;
+const escapePattern = (text) => text.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
+const assetReferences = (origin) => {
+    const prefix = origin ? `(?:${escapePattern(new URL(origin).origin)})?` : "";
+    return new RegExp(`(?<![a-zA-Z0-9/:])${prefix}/blobs/([0-9a-f]{64})(?![a-zA-Z0-9])`, "g");
+};
+/** Uploaded assets cross the same access boundary as the rendered version. The sandbox
+ *  needs no public blob endpoint, session cookie, or long-lived asset capability. */
+export const inlineAssets = async (html, blobs, origin, policy = DEFAULT_ASSET_POLICY) => {
+    const maxRenderedBytes = Math.max(20 * 1024 * 1024, 2 * policy.maxBytes);
+    const pattern = assetReferences(origin);
+    const hashes = new Set(Array.from(html.matchAll(pattern), (match) => match[1] ?? ""));
+    if (hashes.size > MAX_ASSETS)
+        throw badRequest("An artifact can embed at most 50 uploaded assets.");
+    const data = new Map();
+    let total = 0;
+    // Read one asset at a time. The byte limit must stop reads before the next large blob.
+    const load = async function* () {
+        for (const hash of hashes)
+            yield { hash, blob: blobs.get(hash) };
+    };
+    for await (const { hash, blob: pending } of load()) {
+        const blob = await pending;
+        if (!blob || !policy.types.has(blob.type))
+            throw notFound("An uploaded artifact asset is missing.");
+        total += blob.bytes.byteLength;
+        if (total > policy.maxBytes)
+            throw badRequest(`Uploaded assets in one artifact must total at most ${policy.maxBytes / (1024 * 1024)} MB.`);
+        data.set(hash, `data:${blob.type};base64,${toBase64(blob.bytes)}`);
+    }
+    // Repeated references duplicate embedded bytes. Bound expansion before constructing HTML.
+    let renderedBytes = new TextEncoder().encode(html).byteLength;
+    for (const match of html.matchAll(pattern)) {
+        renderedBytes += (data.get(match[1] ?? "")?.length ?? match[0].length) - match[0].length;
+        if (renderedBytes > maxRenderedBytes)
+            throw badRequest(`Rendered artifact content must be at most ${maxRenderedBytes / (1024 * 1024)} MB, including repeated assets.`);
+    }
+    return html.replace(pattern, (reference, hash) => data.get(hash) ?? reference);
+};
+//# sourceMappingURL=inline-assets.js.map

package/dist/server/core/inline-assets.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"inline-assets.js","sourceRoot":"","sources":["../../../src/server/core/inline-assets.ts"],"names":[],"mappings":"AACA,OAAO,EAAoB,oBAAoB,EAAE,MAAM,aAAa,CAAA;AACpE,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAA;AACtC,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAA;AAElD,MAAM,UAAU,GAAG,EAAE,CAAA;AACrB,MAAM,aAAa,GAAG,CAAC,IAAY,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,qBAAqB,EAAE,MAAM,CAAC,CAAA;AAEnF,MAAM,eAAe,GAAG,CAAC,MAAe,EAAE,EAAE;IAC1C,MAAM,MAAM,GAAG,MAAM,CAAC,CAAC,CAAC,MAAM,aAAa,CAAC,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAA;IAC5E,OAAO,IAAI,MAAM,CAAC,qBAAqB,MAAM,sCAAsC,EAAE,GAAG,CAAC,CAAA;AAC3F,CAAC,CAAA;AAED;qFACqF;AACrF,MAAM,CAAC,MAAM,YAAY,GAAG,KAAK,EAC/B,IAAY,EACZ,KAAgB,EAChB,MAAe,EACf,MAAM,GAAgB,oBAAoB,EACzB,EAAE;IACnB,MAAM,gBAAgB,GAAG,IAAI,CAAC,GAAG,CAAC,EAAE,GAAG,IAAI,GAAG,IAAI,EAAE,CAAC,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAA;IACxE,MAAM,OAAO,GAAG,eAAe,CAAC,MAAM,CAAC,CAAA;IACvC,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAA;IACrF,IAAI,MAAM,CAAC,IAAI,GAAG,UAAU;QAC1B,MAAM,UAAU,CAAC,mDAAmD,CAAC,CAAA;IACvE,MAAM,IAAI,GAAG,IAAI,GAAG,EAAkB,CAAA;IACtC,IAAI,KAAK,GAAG,CAAC,CAAA;IACb,uFAAuF;IACvF,MAAM,IAAI,GAAG,KAAK,SAAS,CAAC;QAC1B,KAAK,MAAM,IAAI,IAAI,MAAM;YAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAA;IAClE,CAAC,CAAA;IACD,IAAI,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,IAAI,EAAE,EAAE,CAAC;QACnD,MAAM,IAAI,GAAG,MAAM,OAAO,CAAA;QAC1B,IAAI,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC;YACvC,MAAM,QAAQ,CAAC,wCAAwC,CAAC,CAAA;QAC1D,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,UAAU,CAAA;QAC9B,IAAI,KAAK,GAAG,MAAM,CAAC,QAAQ;YACzB,MAAM,UAAU,CACd,sDAAsD,MAAM,CAAC,QAAQ,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC,MAAM,CAC5F,CAAA;QACH,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,QAAQ,IAAI,CAAC,IAAI,WAAW,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAA;IACpE,CAAC;IACD,0FAA0F;IAC1F,IAAI,aAAa,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,UAAU,CAAA;IAC7D,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;QAC3C,aAAa,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,MAAM,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAA;QACxF,IAAI,aAAa,GAAG,gBAAgB;YAClC,MAAM,UAAU,CACd,6CAA6C,gBAAgB,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC,iCAAiC,CAC/G,CAAA;IACL,CAAC;IACD,OAAO,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,SAAiB,EAAE,IAAY,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,SAAS,CAAC,CAAA;AAChG,CAAC,CAAA"}

package/dist/server/core/live.d.ts

@@ -0,0 +1,10 @@
+import { type ArtifactEvent, type Principal } from "../../protocol/index.js";
+import type { ArtifactRow, WiredBackend } from "../ports.js";
+import type { Access } from "./access.js";
+/** Turn bus envelopes into the events viewers receive. The shared part of an event is read
+ *  once per envelope on this instance; only "mine" is computed per viewer. */
+export declare const liveService: ({ store, bus }: WiredBackend, access: Access, report: (error: unknown) => Promise<void>) => {
+    /** Live events for one viewer of one artifact. Returns an unsubscribe. */
+    watch: (artifact: ArtifactRow, viewer: Principal, send: (event: ArtifactEvent) => void) => () => void;
+};
+//# sourceMappingURL=live.d.ts.map

package/dist/server/core/live.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"live.d.ts","sourceRoot":"","sources":["../../../src/server/core/live.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,aAAa,EAAE,KAAK,SAAS,EAAe,MAAM,yBAAyB,CAAA;AACzF,OAAO,KAAK,EAAE,WAAW,EAAsB,YAAY,EAAE,MAAM,aAAa,CAAA;AAChF,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,aAAa,CAAA;AAQzC;8EAC8E;AAC9E,eAAO,MAAM,WAAW,mBACN,YAAY,UACpB,MAAM,UACN,CAAC,KAAK,EAAE,OAAO,KAAK,OAAO,CAAC,IAAI,CAAC;IAkDvC,0EAA0E;IAC1E,KAAK,aAAa,WAAW,UAAU,SAAS,QAAQ,CAAC,KAAK,EAAE,aAAa,KAAK,IAAI;CAkBzF,CAAA"}

package/dist/server/core/live.js

@@ -0,0 +1,73 @@
+import { snapshotFor } from "../../protocol/index.js";
+import { ArtifactError } from "./errors.js";
+import { threadViews, versionView } from "./views.js";
+/** Turn bus envelopes into the events viewers receive. The shared part of an event is read
+ *  once per envelope on this instance; only "mine" is computed per viewer. */
+export const liveService = ({ store, bus }, access, report) => {
+    const cache = new WeakMap();
+    const hydrate = async (event) => {
+        switch (event.type) {
+            case "presence":
+                return { type: "presence", actor: event.actor, cursor: event.cursor };
+            case "version.published": {
+                const version = await store.getVersion(event.artifactId, event.n);
+                return version ? { type: "version.published", version: versionView(version) } : null;
+            }
+            case "thread.changed": {
+                const { threads, comments } = await store.listThreads(event.artifactId);
+                const thread = threadViews(threads, comments).find((each) => each.id === event.threadId);
+                return thread ? { type: "thread.changed", thread } : null;
+            }
+            case "state.changed":
+                return {
+                    type: "state.changed",
+                    key: event.key,
+                    row: await store.getState(event.artifactId, event.key),
+                };
+            default:
+                return null;
+        }
+    };
+    const shared = (event) => {
+        const known = cache.get(event);
+        if (known)
+            return known;
+        const pending = hydrate(event).catch(async (error) => {
+            await report(error);
+            return null;
+        });
+        cache.set(event, pending);
+        return pending;
+    };
+    const forViewer = (event, viewer) => {
+        if (event.type !== "state.changed")
+            return event;
+        const { row } = event;
+        return {
+            type: "state.changed",
+            key: event.key,
+            snapshot: snapshotFor(row?.items ?? null, row?.version ?? 0, viewer.actor?.id ?? null),
+        };
+    };
+    return {
+        /** Live events for one viewer of one artifact. Returns an unsubscribe. */
+        watch: (artifact, viewer, send) => bus.subscribe(artifact.id, (event) => {
+            const deliver = async () => {
+                // An open stream does not retain a grant that the host has revoked.
+                await access.require(viewer, "view", artifact.id, artifact.space);
+                const hydrated = await shared(event);
+                if (hydrated) {
+                    await access.require(viewer, "view", artifact.id, artifact.space);
+                    send(forViewer(hydrated, viewer));
+                }
+            };
+            // A refusal (the grant was revoked) stops delivery quietly; anything else stops it
+            // too, never failing open, and reaches the host's onError.
+            void deliver().catch(async (error) => {
+                if (!(error instanceof ArtifactError))
+                    await report(error);
+            });
+        }),
+    };
+};
+//# sourceMappingURL=live.js.map

package/dist/server/core/live.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"live.js","sourceRoot":"","sources":["../../../src/server/core/live.ts"],"names":[],"mappings":"AAAA,OAAO,EAAsC,WAAW,EAAE,MAAM,yBAAyB,CAAA;AAGzF,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAA;AAC3C,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,YAAY,CAAA;AAMrD;8EAC8E;AAC9E,MAAM,CAAC,MAAM,WAAW,GAAG,CACzB,EAAE,KAAK,EAAE,GAAG,EAAgB,EAC5B,MAAc,EACd,MAAyC,EACzC,EAAE;IACF,MAAM,KAAK,GAAG,IAAI,OAAO,EAAsC,CAAA;IAE/D,MAAM,OAAO,GAAG,KAAK,EAAE,KAAe,EAA4B,EAAE;QAClE,QAAQ,KAAK,CAAC,IAAI,EAAE,CAAC;YACnB,KAAK,UAAU;gBACb,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAA;YACvE,KAAK,mBAAmB,EAAE,CAAC;gBACzB,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC,CAAC,CAAA;gBACjE,OAAO,OAAO,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,mBAAmB,EAAE,OAAO,EAAE,WAAW,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAA;YACtF,CAAC;YACD,KAAK,gBAAgB,EAAE,CAAC;gBACtB,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,GAAG,MAAM,KAAK,CAAC,WAAW,CAAC,KAAK,CAAC,UAAU,CAAC,CAAA;gBACvE,MAAM,MAAM,GAAG,WAAW,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,KAAK,KAAK,CAAC,QAAQ,CAAC,CAAA;gBACxF,OAAO,MAAM,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,gBAAgB,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,IAAI,CAAA;YAC3D,CAAC;YACD,KAAK,eAAe;gBAClB,OAAO;oBACL,IAAI,EAAE,eAAe;oBACrB,GAAG,EAAE,KAAK,CAAC,GAAG;oBACd,GAAG,EAAE,MAAM,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,GAAG,CAAC;iBACvD,CAAA;YACH;gBACE,OAAO,IAAI,CAAA;QACf,CAAC;IACH,CAAC,CAAA;IAED,MAAM,MAAM,GAAG,CAAC,KAAe,EAAE,EAAE;QACjC,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,CAAA;QAC9B,IAAI,KAAK;YAAE,OAAO,KAAK,CAAA;QACvB,MAAM,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,KAAK,EAAE,KAAc,EAAE,EAAE;YAC5D,MAAM,MAAM,CAAC,KAAK,CAAC,CAAA;YACnB,OAAO,IAAI,CAAA;QACb,CAAC,CAAC,CAAA;QACF,KAAK,CAAC,GAAG,CAAC,KAAK,EAAE,OAAO,CAAC,CAAA;QACzB,OAAO,OAAO,CAAA;IAChB,CAAC,CAAA;IAED,MAAM,SAAS,GAAG,CAAC,KAAe,EAAE,MAAiB,EAAiB,EAAE;QACtE,IAAI,KAAK,CAAC,IAAI,KAAK,eAAe;YAAE,OAAO,KAAK,CAAA;QAChD,MAAM,EAAE,GAAG,EAAE,GAAG,KAAK,CAAA;QACrB,OAAO;YACL,IAAI,EAAE,eAAe;YACrB,GAAG,EAAE,KAAK,CAAC,GAAG;YACd,QAAQ,EAAE,WAAW,CAAC,GAAG,EAAE,KAAK,IAAI,IAAI,EAAE,GAAG,EAAE,OAAO,IAAI,CAAC,EAAE,MAAM,CAAC,KAAK,EAAE,EAAE,IAAI,IAAI,CAAC;SACvF,CAAA;IACH,CAAC,CAAA;IAED,OAAO;QACL,0EAA0E;QAC1E,KAAK,EAAE,CAAC,QAAqB,EAAE,MAAiB,EAAE,IAAoC,EAAE,EAAE,CACxF,GAAG,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC,KAAK,EAAE,EAAE;YACnC,MAAM,OAAO,GAAG,KAAK,IAAI,EAAE;gBACzB,oEAAoE;gBACpE,MAAM,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAA;gBACjE,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,KAAK,CAAC,CAAA;gBACpC,IAAI,QAAQ,EAAE,CAAC;oBACb,MAAM,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAA;oBACjE,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAA;gBACnC,CAAC;YACH,CAAC,CAAA;YACD,mFAAmF;YACnF,2DAA2D;YAC3D,KAAK,OAAO,EAAE,CAAC,KAAK,CAAC,KAAK,EAAE,KAAc,EAAE,EAAE;gBAC5C,IAAI,CAAC,CAAC,KAAK,YAAY,aAAa,CAAC;oBAAE,MAAM,MAAM,CAAC,KAAK,CAAC,CAAA;YAC5D,CAAC,CAAC,CAAA;QACJ,CAAC,CAAC;KACL,CAAA;AACH,CAAC,CAAA"}

package/dist/server/core/source-publication.d.ts

@@ -0,0 +1,30 @@
+import type { Actor } from "../../protocol/index.js";
+import type { Events } from "../kit/events.js";
+import type { ArtifactRow, ArtifactStore, BlobStore, ContentFacts, VersionRow } from "../ports.js";
+import { type SourceContent, type SourceRenderer } from "./source.js";
+export type PublicationStore = Pick<ArtifactStore, "createArtifact" | "addVersion" | "appendVersion" | "replaceVersion">;
+export interface SourceCreate extends SourceContent {
+    id?: string | undefined;
+    title: string;
+    facts: ContentFacts;
+    space?: string | undefined;
+}
+export interface SourcePublish extends SourceContent {
+    facts: ContentFacts;
+    expected?: number | undefined;
+    replaceCurrent?: {
+        n: number;
+        contentHash: string;
+    } | undefined;
+    addresses?: readonly string[] | undefined;
+}
+export interface SourcePublication {
+    createSource(actor: Actor, input: SourceCreate): Promise<ArtifactRow>;
+    publishSource(actor: Actor, artifact: ArtifactRow, input: SourcePublish): Promise<VersionRow>;
+}
+/** The same ordered source publication serves the kit and host storage adapters. */
+export declare const createSourcePublication: ({ store, blobs }: {
+    store: PublicationStore;
+    blobs: BlobStore;
+}, events: Events, renderSource?: SourceRenderer) => SourcePublication;
+//# sourceMappingURL=source-publication.d.ts.map

package/dist/server/core/source-publication.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"source-publication.d.ts","sourceRoot":"","sources":["../../../src/server/core/source-publication.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,yBAAyB,CAAA;AACpD,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAA;AAC9C,OAAO,KAAK,EAAE,WAAW,EAAE,aAAa,EAAE,SAAS,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AAIlG,OAAO,EAAE,KAAK,aAAa,EAAE,KAAK,cAAc,EAAc,MAAM,aAAa,CAAA;AAGjF,MAAM,MAAM,gBAAgB,GAAG,IAAI,CACjC,aAAa,EACb,gBAAgB,GAAG,YAAY,GAAG,eAAe,GAAG,gBAAgB,CACrE,CAAA;AAED,MAAM,WAAW,YAAa,SAAQ,aAAa;IACjD,EAAE,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IACvB,KAAK,EAAE,MAAM,CAAA;IACb,KAAK,EAAE,YAAY,CAAA;IACnB,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;CAC3B;AAED,MAAM,WAAW,aAAc,SAAQ,aAAa;IAClD,KAAK,EAAE,YAAY,CAAA;IACnB,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IAC7B,cAAc,CAAC,EAAE;QAAE,CAAC,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,CAAA;KAAE,GAAG,SAAS,CAAA;IAC/D,SAAS,CAAC,EAAE,SAAS,MAAM,EAAE,GAAG,SAAS,CAAA;CAC1C;AAED,MAAM,WAAW,iBAAiB;IAChC,YAAY,CAAC,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,YAAY,GAAG,OAAO,CAAC,WAAW,CAAC,CAAA;IACrE,aAAa,CAAC,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,WAAW,EAAE,KAAK,EAAE,aAAa,GAAG,OAAO,CAAC,UAAU,CAAC,CAAA;CAC9F;AA8BD,oFAAoF;AACpF,eAAO,MAAM,uBAAuB,qBAChB;IAAE,KAAK,EAAE,gBAAgB,CAAC;IAAC,KAAK,EAAE,SAAS,CAAA;CAAE,UACvD,MAAM,iBACC,cAAc,KAC5B,iBAuCD,CAAA"}

package/dist/server/core/source-publication.js

@@ -0,0 +1,89 @@
+import { putContent } from "./blobs.js";
+import { badRequest, versionMoved } from "./errors.js";
+import { newId, nowIso } from "./ids.js";
+import { sourceHtml } from "./source.js";
+import { versionView } from "./views.js";
+const versionOf = async (blobs, source, at, actor) => {
+    const bytes = Uint8Array.from(source.bytes);
+    const { hash, size } = await putContent(blobs, { bytes, type: source.contentType });
+    const info = source.contentType !== "text/html" || source.metadata
+        ? {
+            source: {
+                contentType: source.contentType,
+                ...(source.metadata ? { metadata: structuredClone(source.metadata) } : {}),
+            },
+        }
+        : {};
+    return {
+        ...at,
+        contentHash: hash,
+        size,
+        csp: source.csp,
+        createdAt: nowIso(),
+        createdBy: actor,
+        ...info,
+    };
+};
+/** The same ordered source publication serves the kit and host storage adapters. */
+export const createSourcePublication = ({ store, blobs }, events, renderSource) => ({
+    createSource: async (actor, input) => {
+        await checkSource(events, input, actor, { artifact: null, version: 1, renderer: renderSource });
+        const first = await versionOf(blobs, input, { artifactId: input.id ?? newId("art"), n: 1 }, actor);
+        const row = {
+            id: first.artifactId,
+            space: input.space ?? "",
+            title: input.title,
+            currentVersion: 1,
+            createdAt: first.createdAt,
+            updatedAt: first.createdAt,
+            createdBy: actor,
+            updatedBy: actor,
+            summary: input.facts.summary,
+            kind: input.facts.kind,
+        };
+        await store.createArtifact(row, first);
+        await events.after("artifact.created", { artifact: row, actor });
+        return row;
+    },
+    publishSource: async (actor, artifact, input) => {
+        const n = writeNumber(store, input, artifact.currentVersion);
+        await checkSource(events, input, actor, { artifact, version: n, renderer: renderSource });
+        const row = await versionOf(blobs, input, { artifactId: artifact.id, n }, actor);
+        const saved = await saveVersion(store, row, input);
+        if (!saved)
+            throw versionMoved();
+        await events.after("version.published", {
+            artifact,
+            version: versionView(saved),
+            actor,
+            addresses: input.addresses ?? [],
+        });
+        return saved;
+    },
+});
+const saveVersion = (store, row, input) => {
+    if (input.replaceCurrent && store.replaceVersion)
+        return store.replaceVersion(row, input.replaceCurrent.contentHash, input.facts);
+    if (input.expected === undefined && store.appendVersion)
+        return store.appendVersion(row, input.facts);
+    if (input.expected === undefined)
+        throw badRequest("Read a version before publishing.");
+    return store.addVersion(row, input.expected, input.facts);
+};
+const checkSource = async (events, source, actor, context) => {
+    await events.before("source.publish", { artifact: context.artifact, source, actor });
+    if (context.renderer || source.contentType.split(";")[0]?.trim() === "text/html") {
+        const html = await sourceHtml(source, context, context.renderer);
+        await events.before("version.publish", { artifact: context.artifact, html, actor });
+    }
+};
+const writeNumber = (store, input, current) => {
+    const replacement = input.replaceCurrent;
+    if (replacement &&
+        (!store.replaceVersion || (input.expected !== undefined && replacement.n !== input.expected)))
+        throw badRequest("This storage adapter cannot replace that working version.");
+    if (!replacement && input.expected === undefined && !store.appendVersion)
+        throw badRequest("This storage adapter requires the version you read.");
+    return replacement?.n ?? (input.expected ?? current) + 1;
+};
+//# sourceMappingURL=source-publication.js.map

package/dist/server/core/source-publication.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"source-publication.js","sourceRoot":"","sources":["../../../src/server/core/source-publication.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,UAAU,EAAE,MAAM,YAAY,CAAA;AACvC,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,aAAa,CAAA;AACtD,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,UAAU,CAAA;AACxC,OAAO,EAA2C,UAAU,EAAE,MAAM,aAAa,CAAA;AACjF,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAA;AA0BxC,MAAM,SAAS,GAAG,KAAK,EACrB,KAAgB,EAChB,MAAqB,EACrB,EAAqC,EACrC,KAAY,EACS,EAAE;IACvB,MAAM,KAAK,GAAG,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;IAC3C,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,MAAM,UAAU,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,CAAC,WAAW,EAAE,CAAC,CAAA;IACnF,MAAM,IAAI,GACR,MAAM,CAAC,WAAW,KAAK,WAAW,IAAI,MAAM,CAAC,QAAQ;QACnD,CAAC,CAAC;YACE,MAAM,EAAE;gBACN,WAAW,EAAE,MAAM,CAAC,WAAW;gBAC/B,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,eAAe,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAC3E;SACF;QACH,CAAC,CAAC,EAAE,CAAA;IACR,OAAO;QACL,GAAG,EAAE;QACL,WAAW,EAAE,IAAI;QACjB,IAAI;QACJ,GAAG,EAAE,MAAM,CAAC,GAAG;QACf,SAAS,EAAE,MAAM,EAAE;QACnB,SAAS,EAAE,KAAK;QAChB,GAAG,IAAI;KACR,CAAA;AACH,CAAC,CAAA;AAED,oFAAoF;AACpF,MAAM,CAAC,MAAM,uBAAuB,GAAG,CACrC,EAAE,KAAK,EAAE,KAAK,EAAiD,EAC/D,MAAc,EACd,YAA6B,EACV,EAAE,CAAC,CAAC;IACvB,YAAY,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE;QACnC,MAAM,WAAW,CAAC,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,EAAE,QAAQ,EAAE,YAAY,EAAE,CAAC,CAAA;QAC/F,MAAM,KAAK,GAAG,MAAM,SAAS,CAC3B,KAAK,EACL,KAAK,EACL,EAAE,UAAU,EAAE,KAAK,CAAC,EAAE,IAAI,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,EAC9C,KAAK,CACN,CAAA;QACD,MAAM,GAAG,GAAgB;YACvB,EAAE,EAAE,KAAK,CAAC,UAAU;YACpB,KAAK,EAAE,KAAK,CAAC,KAAK,IAAI,EAAE;YACxB,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,cAAc,EAAE,CAAC;YACjB,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,SAAS,EAAE,KAAK;YAChB,SAAS,EAAE,KAAK;YAChB,OAAO,EAAE,KAAK,CAAC,KAAK,CAAC,OAAO;YAC5B,IAAI,EAAE,KAAK,CAAC,KAAK,CAAC,IAAI;SACvB,CAAA;QACD,MAAM,KAAK,CAAC,cAAc,CAAC,GAAG,EAAE,KAAK,CAAC,CAAA;QACtC,MAAM,MAAM,CAAC,KAAK,CAAC,kBAAkB,EAAE,EAAE,QAAQ,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC,CAAA;QAChE,OAAO,GAAG,CAAA;IACZ,CAAC;IACD,aAAa,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,EAAE;QAC9C,MAAM,CAAC,GAAG,WAAW,CAAC,KAAK,EAAE,KAAK,EAAE,QAAQ,CAAC,cAAc,CAAC,CAAA;QAC5D,MAAM,WAAW,CAAC,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,EAAE,QAAQ,EAAE,YAAY,EAAE,CAAC,CAAA;QACzF,MAAM,GAAG,GAAG,MAAM,SAAS,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,UAAU,EAAE,QAAQ,CAAC,EAAE,EAAE,CAAC,EAAE,EAAE,KAAK,CAAC,CAAA;QAChF,MAAM,KAAK,GAAG,MAAM,WAAW,CAAC,KAAK,EAAE,GAAG,EAAE,KAAK,CAAC,CAAA;QAClD,IAAI,CAAC,KAAK;YAAE,MAAM,YAAY,EAAE,CAAA;QAChC,MAAM,MAAM,CAAC,KAAK,CAAC,mBAAmB,EAAE;YACtC,QAAQ;YACR,OAAO,EAAE,WAAW,CAAC,KAAK,CAAC;YAC3B,KAAK;YACL,SAAS,EAAE,KAAK,CAAC,SAAS,IAAI,EAAE;SACjC,CAAC,CAAA;QACF,OAAO,KAAK,CAAA;IACd,CAAC;CACF,CAAC,CAAA;AAEF,MAAM,WAAW,GAAG,CAClB,KAAuB,EACvB,GAAe,EACf,KAAoB,EACQ,EAAE;IAC9B,IAAI,KAAK,CAAC,cAAc,IAAI,KAAK,CAAC,cAAc;QAC9C,OAAO,KAAK,CAAC,cAAc,CAAC,GAAG,EAAE,KAAK,CAAC,cAAc,CAAC,WAAW,EAAE,KAAK,CAAC,KAAK,CAAC,CAAA;IACjF,IAAI,KAAK,CAAC,QAAQ,KAAK,SAAS,IAAI,KAAK,CAAC,aAAa;QACrD,OAAO,KAAK,CAAC,aAAa,CAAC,GAAG,EAAE,KAAK,CAAC,KAAK,CAAC,CAAA;IAC9C,IAAI,KAAK,CAAC,QAAQ,KAAK,SAAS;QAAE,MAAM,UAAU,CAAC,mCAAmC,CAAC,CAAA;IACvF,OAAO,KAAK,CAAC,UAAU,CAAC,GAAG,EAAE,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,KAAK,CAAC,CAAA;AAC3D,CAAC,CAAA;AAED,MAAM,WAAW,GAAG,KAAK,EACvB,MAAc,EACd,MAAqB,EACrB,KAAY,EACZ,OAAiG,EAClF,EAAE;IACjB,MAAM,MAAM,CAAC,MAAM,CAAC,gBAAgB,EAAE,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAA;IACpF,IAAI,OAAO,CAAC,QAAQ,IAAI,MAAM,CAAC,WAAW,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,WAAW,EAAE,CAAC;QACjF,MAAM,IAAI,GAAG,MAAM,UAAU,CAAC,MAAM,EAAE,OAAO,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAA;QAChE,MAAM,MAAM,CAAC,MAAM,CAAC,iBAAiB,EAAE,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAA;IACrF,CAAC;AACH,CAAC,CAAA;AAED,MAAM,WAAW,GAAG,CAAC,KAAuB,EAAE,KAAoB,EAAE,OAAe,EAAU,EAAE;IAC7F,MAAM,WAAW,GAAG,KAAK,CAAC,cAAc,CAAA;IACxC,IACE,WAAW;QACX,CAAC,CAAC,KAAK,CAAC,cAAc,IAAI,CAAC,KAAK,CAAC,QAAQ,KAAK,SAAS,IAAI,WAAW,CAAC,CAAC,KAAK,KAAK,CAAC,QAAQ,CAAC,CAAC;QAE7F,MAAM,UAAU,CAAC,2DAA2D,CAAC,CAAA;IAC/E,IAAI,CAAC,WAAW,IAAI,KAAK,CAAC,QAAQ,KAAK,SAAS,IAAI,CAAC,KAAK,CAAC,aAAa;QACtE,MAAM,UAAU,CAAC,qDAAqD,CAAC,CAAA;IACzE,OAAO,WAAW,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,IAAI,OAAO,CAAC,GAAG,CAAC,CAAA;AAC1D,CAAC,CAAA"}

package/dist/server/core/source.d.ts

@@ -0,0 +1,16 @@
+import type { Csp } from "../../protocol/index.js";
+import type { ArtifactRow, SourceInfo } from "../ports.js";
+/** Saved bytes and served HTML have separate lifetimes. */
+export interface SourceContent extends SourceInfo {
+    bytes: Uint8Array<ArrayBuffer>;
+    csp: Csp;
+}
+export type SourceRenderer = (source: SourceContent, context: {
+    artifact: ArtifactRow | null;
+    version: number;
+}) => string | Promise<string>;
+export declare const sourceHtml: (source: SourceContent, context: {
+    artifact: ArtifactRow | null;
+    version: number;
+}, renderer: SourceRenderer | undefined) => Promise<string>;
+//# sourceMappingURL=source.d.ts.map

package/dist/server/core/source.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"source.d.ts","sourceRoot":"","sources":["../../../src/server/core/source.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,yBAAyB,CAAA;AAClD,OAAO,KAAK,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AAG1D,2DAA2D;AAC3D,MAAM,WAAW,aAAc,SAAQ,UAAU;IAC/C,KAAK,EAAE,UAAU,CAAC,WAAW,CAAC,CAAA;IAC9B,GAAG,EAAE,GAAG,CAAA;CACT;AAED,MAAM,MAAM,cAAc,GAAG,CAC3B,MAAM,EAAE,aAAa,EACrB,OAAO,EAAE;IAAE,QAAQ,EAAE,WAAW,GAAG,IAAI,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,KACvD,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAA;AAE7B,eAAO,MAAM,UAAU,WACb,aAAa,WACZ;IAAE,QAAQ,EAAE,WAAW,GAAG,IAAI,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,YAChD,cAAc,GAAG,SAAS,KACnC,OAAO,CAAC,MAAM,CAKhB,CAAA"}

package/dist/server/core/source.js

@@ -0,0 +1,9 @@
+import { badRequest } from "./errors.js";
+export const sourceHtml = async (source, context, renderer) => {
+    if (renderer)
+        return renderer(source, context);
+    if (source.contentType.split(";")[0]?.trim() !== "text/html")
+        throw badRequest(`No renderer is configured for ${source.contentType}.`);
+    return new TextDecoder().decode(source.bytes);
+};
+//# sourceMappingURL=source.js.map

package/dist/server/core/source.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"source.js","sourceRoot":"","sources":["../../../src/server/core/source.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AAaxC,MAAM,CAAC,MAAM,UAAU,GAAG,KAAK,EAC7B,MAAqB,EACrB,OAA0D,EAC1D,QAAoC,EACnB,EAAE;IACnB,IAAI,QAAQ;QAAE,OAAO,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IAC9C,IAAI,MAAM,CAAC,WAAW,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,WAAW;QAC1D,MAAM,UAAU,CAAC,iCAAiC,MAAM,CAAC,WAAW,GAAG,CAAC,CAAA;IAC1E,OAAO,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;AAC/C,CAAC,CAAA"}

package/dist/server/core/summary.d.ts

@@ -0,0 +1,12 @@
+import type { ArtifactKind } from "../../protocol/index.js";
+import type { ContentFacts } from "../ports.js";
+/** "slides" when the page says so in <meta name="artifact-kind">; otherwise "page". */
+export declare const kindOf: (html: string) => ArtifactKind;
+/** The text of the page's <title>, clipped to the artifact title limit. */
+export declare const titleOf: (html: string) => string | undefined;
+/** What lists show about a version without reading its HTML again. */
+export declare const factsOf: (html: string) => ContentFacts;
+/** Plain text that says what a page is: its meta description, else its first paragraph
+ *  with enough words. Scripts and styles never count. Empty when the page has neither. */
+export declare const summarize: (html: string) => string;
+//# sourceMappingURL=summary.d.ts.map

package/dist/server/core/summary.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"summary.d.ts","sourceRoot":"","sources":["../../../src/server/core/summary.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,yBAAyB,CAAA;AAE3D,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,aAAa,CAAA;AAe/C,uFAAuF;AACvF,eAAO,MAAM,MAAM,SAAU,MAAM,KAAG,YAIrC,CAAA;AAED,2EAA2E;AAC3E,eAAO,MAAM,OAAO,SAAU,MAAM,KAAG,MAAM,GAAG,SAG/C,CAAA;AAED,sEAAsE;AACtE,eAAO,MAAM,OAAO,SAAU,MAAM,KAAG,YAIrC,CAAA;AAEF;0FAC0F;AAC1F,eAAO,MAAM,SAAS,SAAU,MAAM,KAAG,MAWxC,CAAA"}

package/dist/server/core/summary.js

@@ -0,0 +1,40 @@
+import { decodeEntities } from "../../protocol/source.js";
+const MAX = 240;
+const plain = (html) => decodeEntities(html.replace(/<[^>]*>/gu, " "))
+    .replace(/\s+/gu, " ")
+    .trim();
+const clip = (text) => text.length <= MAX ? text : `${text.slice(0, MAX - 1).replace(/\s+\S*$/u, "")}…`;
+const KIND = /<meta\s[^>]*name=["']artifact-kind["'][^>]*content=["']([a-z]+)["']|<meta\s[^>]*content=["']([a-z]+)["'][^>]*name=["']artifact-kind["']/iu;
+/** "slides" when the page says so in <meta name="artifact-kind">; otherwise "page". */
+export const kindOf = (html) => {
+    const match = KIND.exec(html);
+    const kind = (match?.[1] ?? match?.[2] ?? "").toLowerCase();
+    return kind === "slides" ? "slides" : "page";
+};
+/** The text of the page's <title>, clipped to the artifact title limit. */
+export const titleOf = (html) => {
+    const text = plain(/<title\b[^>]*>([\s\S]*?)<\/title>/iu.exec(html)?.[1] ?? "");
+    return text ? text.slice(0, 300) : undefined;
+};
+/** What lists show about a version without reading its HTML again. */
+export const factsOf = (html) => ({
+    summary: summarize(html),
+    kind: kindOf(html),
+    title: titleOf(html),
+});
+/** Plain text that says what a page is: its meta description, else its first paragraph
+ *  with enough words. Scripts and styles never count. Empty when the page has neither. */
+export const summarize = (html) => {
+    const body = html.replace(/<(script|style|template)\b[\s\S]*?<\/\1>/giu, "");
+    const meta = /<meta\s[^>]*name=["']description["'][^>]*content=["']([^"']*)["']/iu.exec(body)?.[1] ??
+        /<meta\s[^>]*content=["']([^"']*)["'][^>]*name=["']description["']/iu.exec(body)?.[1];
+    if (meta && plain(meta))
+        return clip(plain(meta));
+    for (const [, inner = ""] of body.matchAll(/<p\b[^>]*>([\s\S]*?)<\/p>/giu)) {
+        const text = plain(inner);
+        if (text.split(" ").length >= 6)
+            return clip(text);
+    }
+    return "";
+};
+//# sourceMappingURL=summary.js.map

package/dist/server/core/summary.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"summary.js","sourceRoot":"","sources":["../../../src/server/core/summary.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAA;AAGzD,MAAM,GAAG,GAAG,GAAG,CAAA;AAEf,MAAM,KAAK,GAAG,CAAC,IAAY,EAAE,EAAE,CAC7B,cAAc,CAAC,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC;KAC3C,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC;KACrB,IAAI,EAAE,CAAA;AAEX,MAAM,IAAI,GAAG,CAAC,IAAY,EAAE,EAAE,CAC5B,IAAI,CAAC,MAAM,IAAI,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,GAAG,CAAA;AAElF,MAAM,IAAI,GACR,2IAA2I,CAAA;AAE7I,uFAAuF;AACvF,MAAM,CAAC,MAAM,MAAM,GAAG,CAAC,IAAY,EAAgB,EAAE;IACnD,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IAC7B,MAAM,IAAI,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAA;IAC3D,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAA;AAC9C,CAAC,CAAA;AAED,2EAA2E;AAC3E,MAAM,CAAC,MAAM,OAAO,GAAG,CAAC,IAAY,EAAsB,EAAE;IAC1D,MAAM,IAAI,GAAG,KAAK,CAAC,qCAAqC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAA;IAC/E,OAAO,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;AAC9C,CAAC,CAAA;AAED,sEAAsE;AACtE,MAAM,CAAC,MAAM,OAAO,GAAG,CAAC,IAAY,EAAgB,EAAE,CAAC,CAAC;IACtD,OAAO,EAAE,SAAS,CAAC,IAAI,CAAC;IACxB,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC;IAClB,KAAK,EAAE,OAAO,CAAC,IAAI,CAAC;CACrB,CAAC,CAAA;AAEF;0FAC0F;AAC1F,MAAM,CAAC,MAAM,SAAS,GAAG,CAAC,IAAY,EAAU,EAAE;IAChD,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,6CAA6C,EAAE,EAAE,CAAC,CAAA;IAC5E,MAAM,IAAI,GACR,qEAAqE,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;QACrF,qEAAqE,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAA;IACvF,IAAI,IAAI,IAAI,KAAK,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAA;IACjD,KAAK,MAAM,CAAC,EAAE,KAAK,GAAG,EAAE,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,8BAA8B,CAAC,EAAE,CAAC;QAC3E,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,CAAA;QACzB,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,IAAI,CAAC;YAAE,OAAO,IAAI,CAAC,IAAI,CAAC,CAAA;IACpD,CAAC;IACD,OAAO,EAAE,CAAA;AACX,CAAC,CAAA"}

package/dist/server/core/version-reader.d.ts

@@ -0,0 +1,21 @@
+import type { Csp } from "../../protocol/index.js";
+import type { Events } from "../kit/events.js";
+import type { ArtifactRow, Backend } from "../ports.js";
+import type { Access } from "./access.js";
+import { htmlExport } from "./export.js";
+import type { PageKit } from "./index.js";
+import { type SourceContent } from "./source.js";
+export interface Content {
+    html: string;
+    csp: Csp;
+}
+export interface VersionReader {
+    sourceBytes(artifact: ArtifactRow, n: number): Promise<SourceContent>;
+    source(artifact: ArtifactRow, n: number): Promise<Content & {
+        version: number;
+    }>;
+    content(artifact: ArtifactRow, n: number): Promise<Content>;
+    exportHtml: (who: Parameters<Access["require"]>[0], artifact: ArtifactRow, n: number) => Promise<ReturnType<typeof htmlExport>>;
+}
+export declare const versionReader: ({ store, blobs }: Pick<Backend, "store" | "blobs">, access: Access, page: PageKit, events: Events) => VersionReader;
+//# sourceMappingURL=version-reader.d.ts.map

package/dist/server/core/version-reader.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"version-reader.d.ts","sourceRoot":"","sources":["../../../src/server/core/version-reader.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,yBAAyB,CAAA;AAClD,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAA;AAC9C,OAAO,KAAK,EAAE,WAAW,EAAE,OAAO,EAAE,MAAM,aAAa,CAAA;AAEvD,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,aAAa,CAAA;AAEzC,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AACxC,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,YAAY,CAAA;AAEzC,OAAO,EAAE,KAAK,aAAa,EAAc,MAAM,aAAa,CAAA;AAE5D,MAAM,WAAW,OAAO;IACtB,IAAI,EAAE,MAAM,CAAA;IACZ,GAAG,EAAE,GAAG,CAAA;CACT;AAED,MAAM,WAAW,aAAa;IAC5B,WAAW,CAAC,QAAQ,EAAE,WAAW,EAAE,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,CAAC,CAAA;IACrE,MAAM,CAAC,QAAQ,EAAE,WAAW,EAAE,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,GAAG;QAAE,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;IAChF,OAAO,CAAC,QAAQ,EAAE,WAAW,EAAE,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAA;IAC3D,UAAU,EAAE,CACV,GAAG,EAAE,UAAU,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,EACrC,QAAQ,EAAE,WAAW,EACrB,CAAC,EAAE,MAAM,KACN,OAAO,CAAC,UAAU,CAAC,OAAO,UAAU,CAAC,CAAC,CAAA;CAC5C;AAED,eAAO,MAAM,aAAa,qBACN,IAAI,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,UAC1C,MAAM,QACR,OAAO,UACL,MAAM,KACb,aA4DF,CAAA"}

package/dist/server/core/version-reader.js

@@ -0,0 +1,49 @@
+import { injectRuntime } from "../sandbox/inject.js";
+import { badRequest, notFound } from "./errors.js";
+import { htmlExport } from "./export.js";
+import { inlineAssets } from "./inline-assets.js";
+import { sourceHtml } from "./source.js";
+export const versionReader = ({ store, blobs }, access, page, events) => {
+    const sourceBytes = async (artifact, n) => {
+        const version = await store.getVersion(artifact.id, n);
+        const blob = version && (await blobs.get(version.contentHash));
+        if (!version || !blob)
+            throw notFound("No such version.");
+        return {
+            bytes: blob.bytes,
+            contentType: version.source?.contentType ?? "text/html",
+            csp: version.csp,
+            ...(version.source?.metadata ? { metadata: version.source.metadata } : {}),
+        };
+    };
+    const rendered = async (artifact, n) => {
+        const source = await sourceBytes(artifact, n);
+        const html = await sourceHtml(source, { artifact, version: n }, page.renderSource);
+        return { html, csp: source.csp };
+    };
+    return {
+        sourceBytes,
+        source: async (artifact, n) => {
+            const source = await sourceBytes(artifact, n);
+            return { version: n, html: new TextDecoder().decode(source.bytes), csp: source.csp };
+        },
+        exportHtml: async (who, artifact, n) => {
+            if (!Number.isSafeInteger(n) || n < 1)
+                throw badRequest("Version must be a positive integer.");
+            await access.require(who, "view", artifact.id, artifact.space);
+            const { html, csp } = await rendered(artifact, n);
+            await events.before("version.export", { artifact, html, actor: who.actor, version: n });
+            const portable = injectRuntime(await inlineAssets(page.transforms.reduce((current, transform) => transform(current), html), blobs, page.assetOrigin, page.assetPolicy), page.runtime, undefined, page.scripts);
+            await access.require(who, "view", artifact.id, artifact.space);
+            return htmlExport(portable, csp, artifact.title, n);
+        },
+        content: async (artifact, n) => {
+            const { html, csp } = await rendered(artifact, n);
+            return {
+                html: injectRuntime(await inlineAssets(page.transforms.reduce((current, transform) => transform(current), html), blobs, page.assetOrigin, page.assetPolicy), page.runtime, { id: artifact.id, version: n }, page.scripts),
+                csp,
+            };
+        },
+    };
+};
+//# sourceMappingURL=version-reader.js.map

package/dist/server/core/version-reader.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"version-reader.js","sourceRoot":"","sources":["../../../src/server/core/version-reader.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAA;AAEpD,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAA;AAClD,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AAExC,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAA;AACjD,OAAO,EAAsB,UAAU,EAAE,MAAM,aAAa,CAAA;AAkB5D,MAAM,CAAC,MAAM,aAAa,GAAG,CAC3B,EAAE,KAAK,EAAE,KAAK,EAAoC,EAClD,MAAc,EACd,IAAa,EACb,MAAc,EACC,EAAE;IACjB,MAAM,WAAW,GAAG,KAAK,EAAE,QAAqB,EAAE,CAAS,EAA0B,EAAE;QACrF,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC,CAAC,CAAA;QACtD,MAAM,IAAI,GAAG,OAAO,IAAI,CAAC,MAAM,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,CAAA;QAC9D,IAAI,CAAC,OAAO,IAAI,CAAC,IAAI;YAAE,MAAM,QAAQ,CAAC,kBAAkB,CAAC,CAAA;QACzD,OAAO;YACL,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,WAAW,EAAE,OAAO,CAAC,MAAM,EAAE,WAAW,IAAI,WAAW;YACvD,GAAG,EAAE,OAAO,CAAC,GAAG;YAChB,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,OAAO,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC3E,CAAA;IACH,CAAC,CAAA;IACD,MAAM,QAAQ,GAAG,KAAK,EAAE,QAAqB,EAAE,CAAS,EAAoB,EAAE;QAC5E,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAA;QAC7C,MAAM,IAAI,GAAG,MAAM,UAAU,CAAC,MAAM,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,EAAE,EAAE,IAAI,CAAC,YAAY,CAAC,CAAA;QAClF,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE,CAAA;IAClC,CAAC,CAAA;IACD,OAAO;QACL,WAAW;QACX,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,EAAE,EAAE;YAC5B,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAA;YAC7C,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE,CAAA;QACtF,CAAC;QACD,UAAU,EAAE,KAAK,EAAE,GAAG,EAAE,QAAQ,EAAE,CAAC,EAAE,EAAE;YACrC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC;gBAAE,MAAM,UAAU,CAAC,qCAAqC,CAAC,CAAA;YAC9F,MAAM,MAAM,CAAC,OAAO,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAA;YAC9D,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,MAAM,QAAQ,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAA;YACjD,MAAM,MAAM,CAAC,MAAM,CAAC,gBAAgB,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC,CAAA;YACvF,MAAM,QAAQ,GAAG,aAAa,CAC5B,MAAM,YAAY,CAChB,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,IAAI,CAAC,EACxE,KAAK,EACL,IAAI,CAAC,WAAW,EAChB,IAAI,CAAC,WAAW,CACjB,EACD,IAAI,CAAC,OAAO,EACZ,SAAS,EACT,IAAI,CAAC,OAAO,CACb,CAAA;YACD,MAAM,MAAM,CAAC,OAAO,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAA;YAC9D,OAAO,UAAU,CAAC,QAAQ,EAAE,GAAG,EAAE,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC,CAAA;QACrD,CAAC;QACD,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,EAAE,EAAE;YAC7B,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,MAAM,QAAQ,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAA;YACjD,OAAO;gBACL,IAAI,EAAE,aAAa,CACjB,MAAM,YAAY,CAChB,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,IAAI,CAAC,EACxE,KAAK,EACL,IAAI,CAAC,WAAW,EAChB,IAAI,CAAC,WAAW,CACjB,EACD,IAAI,CAAC,OAAO,EACZ,EAAE,EAAE,EAAE,QAAQ,CAAC,EAAE,EAAE,OAAO,EAAE,CAAC,EAAE,EAC/B,IAAI,CAAC,OAAO,CACb;gBACD,GAAG;aACJ,CAAA;QACH,CAAC;KACF,CAAA;AACH,CAAC,CAAA"}

package/dist/server/core/views.d.ts

@@ -0,0 +1,6 @@
+import type { Thread, Version } from "../../protocol/index.js";
+import type { CommentRow, ThreadRow, VersionRow } from "../ports.js";
+/** Store rows → wire shapes. One place decides what leaves the server. */
+export declare const versionView: ({ n, csp, createdAt, createdBy }: VersionRow) => Version;
+export declare const threadViews: (threads: ThreadRow[], comments: CommentRow[]) => Thread[];
+//# sourceMappingURL=views.d.ts.map

package/dist/server/core/views.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"views.d.ts","sourceRoot":"","sources":["../../../src/server/core/views.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,yBAAyB,CAAA;AAC9D,OAAO,KAAK,EAAE,UAAU,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AAEpE,0EAA0E;AAC1E,eAAO,MAAM,WAAW,qCAAsC,UAAU,KAAG,OAKzE,CAAA;AAEF,eAAO,MAAM,WAAW,YAAa,SAAS,EAAE,YAAY,UAAU,EAAE,KAAG,MAAM,EAU7E,CAAA"}

package/dist/server/core/views.js

@@ -0,0 +1,19 @@
+/** Store rows → wire shapes. One place decides what leaves the server. */
+export const versionView = ({ n, csp, createdAt, createdBy }) => ({
+    n,
+    csp,
+    createdAt,
+    createdBy,
+});
+export const threadViews = (threads, comments) => threads.flatMap((thread) => {
+    const own = comments
+        .filter((comment) => comment.threadId === thread.id)
+        .toSorted((a, b) => a.createdAt.localeCompare(b.createdAt))
+        .map(({ artifactId: _, ...comment }) => comment);
+    const root = own.findIndex((comment) => comment.id === thread.id);
+    if (root > 0)
+        own.unshift(...own.splice(root, 1));
+    const [first, ...rest] = own;
+    return first ? [{ id: thread.id, state: thread.state, comments: [first, ...rest] }] : [];
+});
+//# sourceMappingURL=views.js.map

package/dist/server/core/views.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"views.js","sourceRoot":"","sources":["../../../src/server/core/views.ts"],"names":[],"mappings":"AAGA,0EAA0E;AAC1E,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,EAAE,CAAC,EAAE,GAAG,EAAE,SAAS,EAAE,SAAS,EAAc,EAAW,EAAE,CAAC,CAAC;IACrF,CAAC;IACD,GAAG;IACH,SAAS;IACT,SAAS;CACV,CAAC,CAAA;AAEF,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,OAAoB,EAAE,QAAsB,EAAY,EAAE,CACpF,OAAO,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,EAAE;IACzB,MAAM,GAAG,GAAG,QAAQ;SACjB,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,QAAQ,KAAK,MAAM,CAAC,EAAE,CAAC;SACnD,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;SAC1D,GAAG,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,EAAE,GAAG,OAAO,EAAE,EAAE,EAAE,CAAC,OAAO,CAAC,CAAA;IAClD,MAAM,IAAI,GAAG,GAAG,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,EAAE,KAAK,MAAM,CAAC,EAAE,CAAC,CAAA;IACjE,IAAI,IAAI,GAAG,CAAC;QAAE,GAAG,CAAC,OAAO,CAAC,GAAG,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAA;IACjD,MAAM,CAAC,KAAK,EAAE,GAAG,IAAI,CAAC,GAAG,GAAG,CAAA;IAC5B,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,QAAQ,EAAE,CAAC,KAAK,EAAE,GAAG,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAA;AAC1F,CAAC,CAAC,CAAA"}

package/dist/server/hosts.d.ts

@@ -0,0 +1,13 @@
+/** Anything that answers a request: a Hono app, the sandbox server, another router. */
+export interface Fetcher {
+    fetch(request: Request): Response | Promise<Response>;
+}
+/**
+ * One process for several hostnames: each request goes to the app for its hostname, anything
+ * else to `fallback`. The usual use is the artifact API and the sandbox from one deployment,
+ * with the sandbox on its own hostname so artifact code never shares your app's origin:
+ *
+ *   serve(byHostname({ "acme-usercontent.com": sandbox }, app))
+ */
+export declare const byHostname: (apps: Readonly<Record<string, Fetcher>>, fallback: Fetcher) => Fetcher;
+//# sourceMappingURL=hosts.d.ts.map

package/dist/server/hosts.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"hosts.d.ts","sourceRoot":"","sources":["../../src/server/hosts.ts"],"names":[],"mappings":"AAAA,uFAAuF;AACvF,MAAM,WAAW,OAAO;IACtB,KAAK,CAAC,OAAO,EAAE,OAAO,GAAG,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAA;CACtD;AAED;;;;;;GAMG;AACH,eAAO,MAAM,UAAU,SACf,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,YAC7B,OAAO,KAChB,OAED,CAAA"}

package/dist/server/hosts.js

@@ -0,0 +1,11 @@
+/**
+ * One process for several hostnames: each request goes to the app for its hostname, anything
+ * else to `fallback`. The usual use is the artifact API and the sandbox from one deployment,
+ * with the sandbox on its own hostname so artifact code never shares your app's origin:
+ *
+ *   serve(byHostname({ "acme-usercontent.com": sandbox }, app))
+ */
+export const byHostname = (apps, fallback) => ({
+    fetch: (request) => (apps[new URL(request.url).hostname] ?? fallback).fetch(request),
+});
+//# sourceMappingURL=hosts.js.map

package/dist/server/hosts.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"hosts.js","sourceRoot":"","sources":["../../src/server/hosts.ts"],"names":[],"mappings":"AAKA;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,UAAU,GAAG,CACxB,IAAuC,EACvC,QAAiB,EACR,EAAE,CAAC,CAAC;IACb,KAAK,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,IAAI,QAAQ,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC;CACrF,CAAC,CAAA"}

package/dist/server/http/app.d.ts

@@ -0,0 +1,48 @@
+import { Hono } from "hono";
+import type { Actor } from "../../protocol/index.js";
+import type { AssetPolicy } from "../core/assets.js";
+import { type Core } from "../core/index.js";
+import type { SourceRenderer } from "../core/source.js";
+import { type Observe } from "../kit/observe.js";
+import type { ArtifactPlugin } from "../kit/plugin.js";
+import type { ArtifactHost, Backend } from "../ports.js";
+import type { KitAssets } from "../sandbox/assets.js";
+import type { Env } from "./gates.js";
+export interface ArtifactServerOptions extends Backend {
+    host: ArtifactHost;
+    /** The browser bundles to serve and inline: `await loadKitAssets()`. */
+    assets: KitAssets;
+    /** The sandbox origin. Existing absolute uploaded asset references use this origin. */
+    sandboxOrigin?: string;
+    /** Push changes to everyone watching: new versions, comments, shared state. On by default.
+     *  `false` serves no event stream; each page still shows its own changes at once, and
+     *  other people's versions and comments when the tab comes back into view, and their
+     *  shared state on the next load. Presence needs it. */
+    live?: boolean;
+    /** Features, in order. Defaults to `starterKit()`: comments, shared state, editing. */
+    plugins?: readonly ArtifactPlugin[];
+    /** A plugin's `after` hook failed. The action itself already succeeded. */
+    onError?: (error: unknown) => void;
+    /** Every finished route and tool call, timed: feed your metrics or tracing. */
+    observe?: Observe;
+    /** Convert original source bytes to a served HTML view without changing saved bytes. */
+    renderSource?: SourceRenderer;
+    /** Keep the host upload and rendering limits on the same policy. */
+    assetPolicy?: AssetPolicy;
+}
+/** The artifact API as a Hono app. Mount it anywhere: `app.route("/api", server)`. */
+export declare const createArtifactServer: (options: ArtifactServerOptions) => Hono<Env>;
+/** The same, plus in-process access for the host's own code: the kit's services, and
+ *  `call(tool, args, { actor, space })`, which runs any tool (the kit's or a plugin's)
+ *  with the same validation and access checks as MCP. */
+export interface ArtifactKit {
+    app: Hono<Env>;
+    kit: Core;
+    call(name: string, args: Record<string, unknown>, who: {
+        actor: Actor | null;
+        link?: string | null;
+        space?: string;
+    }): Promise<Record<string, unknown>>;
+}
+export declare const createArtifactKit: (options: ArtifactServerOptions) => ArtifactKit;
+//# sourceMappingURL=app.d.ts.map

package/dist/server/http/app.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"app.d.ts","sourceRoot":"","sources":["../../../src/server/http/app.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAA;AAE3B,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,yBAAyB,CAAA;AACpD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAA;AAEpD,OAAO,EAAE,KAAK,IAAI,EAAc,MAAM,kBAAkB,CAAA;AACxD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAA;AAGvD,OAAO,EAAE,KAAK,OAAO,EAAyB,MAAM,mBAAmB,CAAA;AACvE,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAA;AAKtD,OAAO,KAAK,EAAE,YAAY,EAAE,OAAO,EAAE,MAAM,aAAa,CAAA;AACxD,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAA;AACrD,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,YAAY,CAAA;AAQrC,MAAM,WAAW,qBAAsB,SAAQ,OAAO;IACpD,IAAI,EAAE,YAAY,CAAA;IAClB,wEAAwE;IACxE,MAAM,EAAE,SAAS,CAAA;IACjB,uFAAuF;IACvF,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB;;;4DAGwD;IACxD,IAAI,CAAC,EAAE,OAAO,CAAA;IACd,uFAAuF;IACvF,OAAO,CAAC,EAAE,SAAS,cAAc,EAAE,CAAA;IACnC,2EAA2E;IAC3E,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,IAAI,CAAA;IAClC,+EAA+E;IAC/E,OAAO,CAAC,EAAE,OAAO,CAAA;IACjB,wFAAwF;IACxF,YAAY,CAAC,EAAE,cAAc,CAAA;IAC7B,oEAAoE;IACpE,WAAW,CAAC,EAAE,WAAW,CAAA;CAC1B;AAED,sFAAsF;AACtF,eAAO,MAAM,oBAAoB,YAAa,qBAAqB,KAAG,IAAI,CAAC,GAAG,CAC9C,CAAA;AAEhC;;yDAEyD;AACzD,MAAM,WAAW,WAAW;IAC1B,GAAG,EAAE,IAAI,CAAC,GAAG,CAAC,CAAA;IACd,GAAG,EAAE,IAAI,CAAA;IACT,IAAI,CACF,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC7B,GAAG,EAAE;QAAE,KAAK,EAAE,KAAK,GAAG,IAAI,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,GACjE,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAA;CACpC;AAED,eAAO,MAAM,iBAAiB,YAAa,qBAAqB,KAAG,WAyFlE,CAAA"}