@ekrist1/vulse 0.1.6-alpha.3

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 ekrist1
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,104 @@
+# Vulse
+
+**Vulse** is an Astro-native, Vue Based, Cloudflare-hosted headless CMS. One deploy serves your public site, the admin UI (`/admin`), and the REST API (`/api/vulse/*`). Content lives in D1, assets in R2, search uses SQLite FTS5, and delivery uses Astro's Content Layer (build/sync) plus a runtime SDK (SSR / members-only content).
+
+## Highlights
+
+- **Cloudflare-native** — D1, R2, Queues, Cron, Pages or Workers. Single deploy.
+- **Astro-first** — installs as an Astro integration; uses the Content Layer for SSG and a typed SDK for SSR.
+- **Schema editor** — define collections in code or at runtime in the admin UI (with safe field renames).
+- **Rich blocks** — TipTap/ProseMirror editor with reusable Sets and Replicators.
+- **Drafts + Live preview** — split-panel live editor preview and signed saved-draft preview links.
+- **i18n** — each entry can carry multiple locale translations with per-locale slugs and statuses.
+- **Forms** — first-party form builder with submissions, file uploads, async hooks via Queues.
+- **Auth** — Better Auth under the hood; role-based access (`admin` / `editor` / `member`).
+- **Globals** — site-wide content sets exposed via a public read API.
+
+## Install
+
+> **Alpha:** install the `alpha` dist-tag until 1.0:
+>
+> `pnpm astro add @ekrist1/vulse@alpha`
+
+```bash
+pnpm astro add @ekrist1/vulse@alpha
+pnpm astro add cloudflare
+wrangler d1 create vulse-db
+wrangler r2 bucket create vulse-media
+npx vulse migrate
+npx vulse seed:admin --email you@example.com
+pnpm dev
+```
+
+Sign in at `http://localhost:4321/admin/login`.
+
+The full setup (Cloudflare resources, secrets, first admin) is documented in [`docs/installation.md`](https://github.com/ekrist1/vulseastro/blob/main/docs/installation.md).
+
+## Documentation
+
+Vulse's documentation lives on GitHub:
+
+| Page | Purpose |
+|------|---------|
+| [Installation](https://github.com/ekrist1/vulseastro/blob/main/docs/installation.md) | Prerequisites, install, Cloudflare resources, first admin |
+| [Upgrading](https://github.com/ekrist1/vulseastro/blob/main/docs/upgrading.md) | Updates and migrations |
+| [Configuration](https://github.com/ekrist1/vulseastro/blob/main/docs/configuration.md) | `wrangler.toml` bindings, env vars, runtime settings |
+| [Control panel](https://github.com/ekrist1/vulseastro/blob/main/docs/control-panel.md) | Admin UI walkthrough |
+| [Content modeling](https://github.com/ekrist1/vulseastro/blob/main/docs/content-modeling.md) | Blueprints, sets, replicators, globals, locales |
+| [Frontend](https://github.com/ekrist1/vulseastro/blob/main/docs/frontend.md) | Wiring Vulse into Astro |
+| [Live preview](https://github.com/ekrist1/vulseastro/blob/main/docs/live-preview.md) | Live preview and saved-draft preview |
+| [Forms](https://github.com/ekrist1/vulseastro/blob/main/docs/forms.md) | Form builder, spam, queues, hooks |
+| [Plugins](https://github.com/ekrist1/vulseastro/blob/main/docs/plugins.md) | Native Vulse plugins for forms, auth, CRM, and email workflows |
+| [API reference](https://github.com/ekrist1/vulseastro/blob/main/docs/api-reference.md) | REST endpoints |
+| [CLI reference](https://github.com/ekrist1/vulseastro/blob/main/docs/cli.md) | `vulse migrate`, `seed:admin`, `collection:scaffold` |
+| [Deployment](https://github.com/ekrist1/vulseastro/blob/main/docs/deployment.md) | Cloudflare deploy + production checklist |
+| [Directory structure](https://github.com/ekrist1/vulseastro/blob/main/docs/directory-structure.md) | What files and folders mean |
+| [Troubleshooting](https://github.com/ekrist1/vulseastro/blob/main/docs/troubleshooting.md) | FAQ and common errors |
+
+## Quick example
+
+```ts
+// src/vulse/collections/post.ts
+import { defineCollection, z, blocks, media } from '@ekrist1/vulse'
+
+export default defineCollection({
+  name: 'post',
+  label: 'Blog post',
+  schema: z.object({
+    title: z.string().min(1),
+    slug: z.string(),
+    cover: media().optional(),
+    body: blocks(),
+  }),
+  admin: { titleField: 'title', listColumns: ['title', 'slug'] },
+  access: {
+    read: ({ entry, user }) => entry?.status === 'published' || !!user,
+    create: ({ user }) => user?.role === 'admin' || user?.role === 'editor',
+  },
+})
+```
+
+```astro
+---
+// src/pages/blog/[slug].astro
+import { getCollection } from 'astro:content'
+import BlockRenderer from '@ekrist1/vulse/client/BlockRenderer.astro'
+
+const posts = await getCollection('post')
+const post = posts.find((p) => p.data.slug === Astro.params.slug)
+if (!post) return Astro.redirect('/404')
+---
+<h1>{post.data.title}</h1>
+<BlockRenderer blocks={post.data.body ?? []} />
+```
+
+## Requirements
+
+- Node.js 22+
+- pnpm 9+
+- Astro 6 with `@astrojs/cloudflare` in server-output mode
+- Cloudflare account (free tier is enough to develop)
+
+## License
+
+MIT — see [LICENSE](https://github.com/ekrist1/vulseastro/blob/main/LICENSE).

package/dist/admin/client/active-locale.d.ts

@@ -0,0 +1,3 @@
+/** Resolve the active locale for admin entry editing. Prefer the URL on the client (source of truth after navigation). */
+export declare function resolveActiveLocale(supportedLocales: string[] | undefined, entryLocale: string | undefined, defaultLocale: string | undefined): string;
+//# sourceMappingURL=active-locale.d.ts.map

package/dist/admin/client/active-locale.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"active-locale.d.ts","sourceRoot":"","sources":["../../../src/admin/client/active-locale.ts"],"names":[],"mappings":"AAMA,0HAA0H;AAC1H,wBAAgB,mBAAmB,CACjC,gBAAgB,EAAE,MAAM,EAAE,GAAG,SAAS,EACtC,WAAW,EAAE,MAAM,GAAG,SAAS,EAC/B,aAAa,EAAE,MAAM,GAAG,SAAS,GAChC,MAAM,CAKR"}

package/dist/admin/client/active-locale.js

@@ -0,0 +1,14 @@
+function readUrlLocaleParam() {
+    const search = globalThis.location?.search;
+    if (!search)
+        return null;
+    return new URLSearchParams(search).get('locale');
+}
+/** Resolve the active locale for admin entry editing. Prefer the URL on the client (source of truth after navigation). */
+export function resolveActiveLocale(supportedLocales, entryLocale, defaultLocale) {
+    const fallback = entryLocale ?? defaultLocale ?? 'default';
+    const raw = readUrlLocaleParam();
+    if (raw && (supportedLocales ?? []).includes(raw))
+        return raw;
+    return fallback;
+}

package/dist/admin/client/api.d.ts

@@ -0,0 +1,14 @@
+export declare class AdminApiError extends Error {
+    code: string;
+    details?: unknown | undefined;
+    status?: number | undefined;
+    constructor(code: string, message: string, details?: unknown | undefined, status?: number | undefined);
+}
+export declare const adminApi: {
+    get: <T>(path: string) => Promise<T>;
+    post: <T>(path: string, body: unknown) => Promise<T>;
+    put: <T>(path: string, body: unknown) => Promise<T>;
+    patch: <T>(path: string, body: unknown) => Promise<T>;
+    delete: <T>(path: string) => Promise<T>;
+};
+//# sourceMappingURL=api.d.ts.map

package/dist/admin/client/api.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"api.d.ts","sourceRoot":"","sources":["../../../src/admin/client/api.ts"],"names":[],"mappings":"AAAA,qBAAa,aAAc,SAAQ,KAAK;IACnB,IAAI,EAAE,MAAM;IAA0B,OAAO,CAAC,EAAE,OAAO;IAAS,MAAM,CAAC,EAAE,MAAM;gBAA/E,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAS,OAAO,CAAC,EAAE,OAAO,YAAA,EAAS,MAAM,CAAC,EAAE,MAAM,YAAA;CAInG;AASD,eAAO,MAAM,QAAQ;UACb,CAAC,QAAQ,MAAM;WACd,CAAC,QAAQ,MAAM,QAAQ,OAAO;UAC/B,CAAC,QAAQ,MAAM,QAAQ,OAAO;YAC5B,CAAC,QAAQ,MAAM,QAAQ,OAAO;aAC7B,CAAC,QAAQ,MAAM;CACzB,CAAA"}

package/dist/admin/client/api.js

@@ -0,0 +1,26 @@
+export class AdminApiError extends Error {
+    code;
+    details;
+    status;
+    constructor(code, message, details, status) {
+        super(message);
+        this.code = code;
+        this.details = details;
+        this.status = status;
+        this.name = 'AdminApiError';
+    }
+}
+async function request(path, init) {
+    const res = await fetch(path, { credentials: 'same-origin', ...init });
+    const body = await res.json();
+    if (body.ok)
+        return body.data;
+    throw new AdminApiError(body.error.code, body.error.message, body.error.details, res.status);
+}
+export const adminApi = {
+    get: (path) => request(path),
+    post: (path, body) => request(path, { method: 'POST', headers: { 'content-type': 'application/json' }, body: JSON.stringify(body) }),
+    put: (path, body) => request(path, { method: 'PUT', headers: { 'content-type': 'application/json' }, body: JSON.stringify(body) }),
+    patch: (path, body) => request(path, { method: 'PATCH', headers: { 'content-type': 'application/json' }, body: JSON.stringify(body) }),
+    delete: (path) => request(path, { method: 'DELETE' }),
+};

package/dist/admin/client/form-from-zod.d.ts

@@ -0,0 +1,2 @@
+export { reflectFields, fieldDescriptorsFromBlueprint, fieldDescriptorsFromDefinitions, type FieldDescriptor, type Widget, } from '../../core/blueprints/reflect-fields.js';
+//# sourceMappingURL=form-from-zod.d.ts.map

package/dist/admin/client/form-from-zod.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"form-from-zod.d.ts","sourceRoot":"","sources":["../../../src/admin/client/form-from-zod.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,aAAa,EACb,6BAA6B,EAC7B,+BAA+B,EAC/B,KAAK,eAAe,EACpB,KAAK,MAAM,GACZ,MAAM,yCAAyC,CAAA"}

package/dist/admin/client/form-from-zod.js

@@ -0,0 +1 @@
+export { reflectFields, fieldDescriptorsFromBlueprint, fieldDescriptorsFromDefinitions, } from '../../core/blueprints/reflect-fields.js';

package/dist/admin/client/live-preview-enabled.d.ts

@@ -0,0 +1,3 @@
+/** Normalize Astro/Vue boolean props (`false`, `"false"`, `0`, etc.). */
+export declare function isLivePreviewEnabled(value: unknown): boolean;
+//# sourceMappingURL=live-preview-enabled.d.ts.map

package/dist/admin/client/live-preview-enabled.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"live-preview-enabled.d.ts","sourceRoot":"","sources":["../../../src/admin/client/live-preview-enabled.ts"],"names":[],"mappings":"AAAA,yEAAyE;AACzE,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAG5D"}

package/dist/admin/client/live-preview-enabled.js

@@ -0,0 +1,6 @@
+/** Normalize Astro/Vue boolean props (`false`, `"false"`, `0`, etc.). */
+export function isLivePreviewEnabled(value) {
+    if (value === false || value === 'false' || value === 0 || value === '0')
+        return false;
+    return true;
+}

package/dist/cli/collection-scaffold.d.ts

@@ -0,0 +1,14 @@
+export interface CollectionScaffoldCliOptions {
+    handle: string;
+    route?: string;
+    index?: string;
+    label?: string;
+    titleField?: string;
+    force?: boolean;
+    skipBlueprint?: boolean;
+    skipPages?: boolean;
+    skipContentConfig?: boolean;
+    cwd?: string;
+}
+export declare function runCollectionScaffold(opts: CollectionScaffoldCliOptions): Promise<void>;
+//# sourceMappingURL=collection-scaffold.d.ts.map

package/dist/cli/collection-scaffold.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"collection-scaffold.d.ts","sourceRoot":"","sources":["../../src/cli/collection-scaffold.ts"],"names":[],"mappings":"AAGA,MAAM,WAAW,4BAA4B;IAC3C,MAAM,EAAE,MAAM,CAAA;IACd,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,KAAK,CAAC,EAAE,OAAO,CAAA;IACf,aAAa,CAAC,EAAE,OAAO,CAAA;IACvB,SAAS,CAAC,EAAE,OAAO,CAAA;IACnB,iBAAiB,CAAC,EAAE,OAAO,CAAA;IAC3B,GAAG,CAAC,EAAE,MAAM,CAAA;CACb;AAUD,wBAAsB,qBAAqB,CAAC,IAAI,EAAE,4BAA4B,GAAG,OAAO,CAAC,IAAI,CAAC,CAiC7F"}

package/dist/cli/collection-scaffold.js

@@ -0,0 +1,44 @@
+import { writeCollectionScaffold } from '../scaffold/collection-write.js';
+import { defaultScaffoldRoutes } from '../scaffold/collection.js';
+function titleCaseHandle(handle) {
+    return handle
+        .split(/[-_]/g)
+        .filter(Boolean)
+        .map((part) => part.charAt(0).toUpperCase() + part.slice(1))
+        .join(' ');
+}
+export async function runCollectionScaffold(opts) {
+    const cwd = opts.cwd ?? process.cwd();
+    const defaults = defaultScaffoldRoutes(opts.handle);
+    const showRoute = opts.route ?? defaults.showRoute;
+    const indexRoute = opts.index !== undefined ? opts.index : defaults.indexRoute;
+    const result = await writeCollectionScaffold(cwd, {
+        handle: opts.handle,
+        label: opts.label ?? titleCaseHandle(opts.handle),
+        showRoute,
+        indexRoute,
+        ...(opts.titleField ? { titleField: opts.titleField } : {}),
+    }, {
+        ...(opts.force ? { force: true } : {}),
+        ...(opts.skipBlueprint ? { skipBlueprint: true } : {}),
+        ...(opts.skipPages ? { skipPages: true } : {}),
+        ...(opts.skipContentConfig ? { skipContentConfig: true } : {}),
+    });
+    console.log(`\nScaffolded collection "${opts.handle}"`);
+    if (result.written.length) {
+        console.log('\nCreated:');
+        for (const path of result.written)
+            console.log(`  + ${path}`);
+    }
+    if (result.patched.length) {
+        console.log('\nUpdated:');
+        for (const path of result.patched)
+            console.log(`  ~ ${path}`);
+    }
+    if (result.skipped.length) {
+        console.log('\nSkipped (already exists — use --force to overwrite):');
+        for (const path of result.skipped)
+            console.log(`  - ${path}`);
+    }
+    console.log('\nNext: restart dev server, then create entries in Admin → Collections.\n');
+}

package/dist/cli/index.d.ts

@@ -0,0 +1,3 @@
+#!/usr/bin/env node
+export {};
+//# sourceMappingURL=index.d.ts.map

package/dist/cli/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/cli/index.ts"],"names":[],"mappings":""}

package/dist/cli/index.js

@@ -0,0 +1,74 @@
+#!/usr/bin/env node
+import { Command } from 'commander';
+import { VULSE_VERSION } from '../version.js';
+const program = new Command();
+program.name('vulse').description('Vulse CMS command-line tools').version(VULSE_VERSION);
+program
+    .command('setup')
+    .description('Interactive first-run setup: configure D1, R2, secrets, run migrations, seed admin')
+    .option('-y, --yes', 'Accept all defaults and skip prompts', false)
+    .option('--email <email>', 'Admin email for the seeded user')
+    .option('--password <password>', 'Admin password (generated if omitted)')
+    .option('--skip-migrate', 'Skip running migrations', false)
+    .option('--skip-seed', 'Skip seeding the first admin user', false)
+    .action(async (opts) => {
+    const { runSetup } = await import('./setup.js');
+    await runSetup({
+        yes: !!opts.yes,
+        ...(opts.email !== undefined ? { email: opts.email } : {}),
+        ...(opts.password !== undefined ? { password: opts.password } : {}),
+        skipMigrate: !!opts.skipMigrate,
+        skipSeed: !!opts.skipSeed,
+    });
+});
+program
+    .command('migrate')
+    .description('Apply Drizzle migrations to the configured D1 database')
+    .option('--remote', 'Run against the remote D1 instead of local miniflare', false)
+    .action(async (opts) => {
+    const { runMigrate } = await import('./migrate.js');
+    await runMigrate({ remote: !!opts.remote });
+});
+program
+    .command('seed:admin')
+    .description('Create the first admin user')
+    .option('--email <email>', 'Admin email (required)')
+    .option('--password <password>', 'Password (generated if omitted)')
+    .option('--remote', 'Run against the remote D1', false)
+    .action(async (opts) => {
+    const { runSeedAdmin } = await import('./seed-admin.js');
+    await runSeedAdmin({
+        email: opts.email,
+        ...(opts.password !== undefined ? { password: opts.password } : {}),
+        remote: !!opts.remote,
+    });
+});
+program
+    .command('collection:scaffold <handle>')
+    .description('Scaffold a code blueprint, Astro index/show pages, and content.config entry')
+    .option('--route <path>', 'Show route template, e.g. /blog/{slug}')
+    .option('--index <path>', 'Index route, e.g. /blog (omit for show-only)')
+    .option('--label <label>', 'Collection label for generated files')
+    .option('--title-field <field>', 'Title field used in templates')
+    .option('--force', 'Overwrite existing scaffold files', false)
+    .option('--skip-blueprint', 'Skip src/vulse/collections/<handle>.ts', false)
+    .option('--skip-pages', 'Skip Astro page files', false)
+    .option('--skip-content-config', 'Skip content.config.ts update', false)
+    .action(async (handle, opts) => {
+    const { runCollectionScaffold } = await import('./collection-scaffold.js');
+    await runCollectionScaffold({
+        handle,
+        ...(opts.route !== undefined ? { route: opts.route } : {}),
+        ...(opts.index !== undefined ? { index: opts.index } : {}),
+        ...(opts.label !== undefined ? { label: opts.label } : {}),
+        ...(opts.titleField !== undefined ? { titleField: opts.titleField } : {}),
+        force: !!opts.force,
+        skipBlueprint: !!opts.skipBlueprint,
+        skipPages: !!opts.skipPages,
+        skipContentConfig: !!opts.skipContentConfig,
+    });
+});
+program.parseAsync().catch((err) => {
+    console.error(err instanceof Error ? err.message : err);
+    process.exit(1);
+});

package/dist/cli/migrate.d.ts

@@ -0,0 +1,5 @@
+export interface MigrateOptions {
+    remote?: boolean;
+}
+export declare function runMigrate(opts: MigrateOptions): Promise<void>;
+//# sourceMappingURL=migrate.d.ts.map

package/dist/cli/migrate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"migrate.d.ts","sourceRoot":"","sources":["../../src/cli/migrate.ts"],"names":[],"mappings":"AAMA,MAAM,WAAW,cAAc;IAAG,MAAM,CAAC,EAAE,OAAO,CAAA;CAAE;AAEpD,wBAAsB,UAAU,CAAC,IAAI,EAAE,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC,CAKpE"}

package/dist/cli/migrate.js

@@ -0,0 +1,10 @@
+import { join, dirname } from 'node:path';
+import { fileURLToPath } from 'node:url';
+import { execSync } from 'node:child_process';
+const MIGRATIONS_DIR = join(dirname(fileURLToPath(import.meta.url)), '../../migrations');
+export async function runMigrate(opts) {
+    const flag = opts.remote ? '--remote' : '--local';
+    const cmd = `wrangler d1 migrations apply DB ${flag}`;
+    console.log(`> ${cmd}`);
+    execSync(cmd, { stdio: 'inherit' });
+}

package/dist/cli/platform.d.ts

@@ -0,0 +1,12 @@
+/** Walk up from cwd to find wrangler.toml (same resolution wrangler uses). */
+export declare function findWranglerConfig(cwd?: string): Promise<string>;
+export interface CliPlatform {
+    db: D1Database;
+    env: Record<string, unknown>;
+    dispose: () => Promise<void>;
+}
+/** Resolves the D1 binding via wrangler (local miniflare or remote). */
+export declare function resolveCliPlatform(opts?: {
+    remote?: boolean;
+}): Promise<CliPlatform>;
+//# sourceMappingURL=platform.d.ts.map

package/dist/cli/platform.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"platform.d.ts","sourceRoot":"","sources":["../../src/cli/platform.ts"],"names":[],"mappings":"AAYA,8EAA8E;AAC9E,wBAAsB,kBAAkB,CAAC,GAAG,SAAgB,GAAG,OAAO,CAAC,MAAM,CAAC,CAW7E;AAED,MAAM,WAAW,WAAW;IAC1B,EAAE,EAAE,UAAU,CAAA;IACd,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IAC5B,OAAO,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAA;CAC7B;AAED,wEAAwE;AACxE,wBAAsB,kBAAkB,CAAC,IAAI,GAAE;IAAE,MAAM,CAAC,EAAE,OAAO,CAAA;CAAO,GAAG,OAAO,CAAC,WAAW,CAAC,CAU9F"}

package/dist/cli/platform.js

@@ -0,0 +1,38 @@
+import { access } from 'node:fs/promises';
+import { dirname, join } from 'node:path';
+async function fileExists(path) {
+    try {
+        await access(path);
+        return true;
+    }
+    catch {
+        return false;
+    }
+}
+/** Walk up from cwd to find wrangler.toml (same resolution wrangler uses). */
+export async function findWranglerConfig(cwd = process.cwd()) {
+    let dir = cwd;
+    for (;;) {
+        const configPath = join(dir, 'wrangler.toml');
+        if (await fileExists(configPath))
+            return configPath;
+        const parent = dirname(dir);
+        if (parent === dir) {
+            throw new Error('No wrangler.toml found. Run this command from your Astro project root.');
+        }
+        dir = parent;
+    }
+}
+/** Resolves the D1 binding via wrangler (local miniflare or remote). */
+export async function resolveCliPlatform(opts = {}) {
+    const configPath = await findWranglerConfig();
+    const { getPlatformProxy } = await import('wrangler');
+    const proxy = await getPlatformProxy({
+        configPath,
+        remoteBindings: !!opts.remote,
+    });
+    const db = proxy.env.DB;
+    if (!db)
+        throw new Error('D1 binding "DB" not found in wrangler.toml');
+    return { db, env: proxy.env, dispose: proxy.dispose };
+}

package/dist/cli/seed-admin.d.ts

@@ -0,0 +1,19 @@
+export interface SeedOptions {
+    email?: string;
+    remote?: boolean;
+    password?: string;
+}
+export interface SeedResult {
+    email: string;
+    tempPassword: string;
+}
+export interface SeedAdminUserOptions {
+    email: string;
+    password?: string;
+    secret?: string;
+    baseURL?: string;
+}
+/** Creates an admin user with a Better Auth–compatible password hash. */
+export declare function seedAdminUser(db: D1Database, opts: SeedAdminUserOptions): Promise<SeedResult>;
+export declare function runSeedAdmin(opts: SeedOptions): Promise<void>;
+//# sourceMappingURL=seed-admin.d.ts.map

package/dist/cli/seed-admin.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"seed-admin.d.ts","sourceRoot":"","sources":["../../src/cli/seed-admin.ts"],"names":[],"mappings":"AAKA,MAAM,WAAW,WAAW;IAAG,KAAK,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,OAAO,CAAC;IAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;CAAE;AACpF,MAAM,WAAW,UAAU;IAAG,KAAK,EAAE,MAAM,CAAC;IAAC,YAAY,EAAE,MAAM,CAAA;CAAE;AAEnE,MAAM,WAAW,oBAAoB;IACnC,KAAK,EAAE,MAAM,CAAA;IACb,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,OAAO,CAAC,EAAE,MAAM,CAAA;CACjB;AAMD,yEAAyE;AACzE,wBAAsB,aAAa,CAAC,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,oBAAoB,GAAG,OAAO,CAAC,UAAU,CAAC,CAsBnG;AAED,wBAAsB,YAAY,CAAC,IAAI,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CAkCnE"}

package/dist/cli/seed-admin.js

@@ -0,0 +1,59 @@
+import { nanoid } from 'nanoid';
+import { createDb } from '../core/db.js';
+import { ConflictError } from '../core/errors.js';
+import { createAuth } from '../server/better-auth.js';
+function generatePassword() {
+    return nanoid(16);
+}
+/** Creates an admin user with a Better Auth–compatible password hash. */
+export async function seedAdminUser(db, opts) {
+    const existing = await db.prepare(`SELECT id FROM user WHERE email = ?`).bind(opts.email).first();
+    if (existing)
+        throw new ConflictError(`User with email ${opts.email} already exists`);
+    const tempPassword = opts.password ?? generatePassword();
+    const secret = opts.secret ?? 'dev-secret-change-me-in-production-32chars';
+    const baseURL = opts.baseURL ?? 'http://localhost';
+    const auth = await createAuth(createDb(db), { baseURL, secret, allowSignUp: true });
+    const res = await auth.handler(new Request(`${baseURL}/api/auth/sign-up/email`, {
+        method: 'POST',
+        headers: { 'content-type': 'application/json', origin: baseURL },
+        body: JSON.stringify({ email: opts.email, password: tempPassword, name: 'Admin' }),
+    }));
+    if (!res.ok) {
+        const detail = await res.text().catch(() => '');
+        throw new Error(`Failed to create admin user (${res.status})${detail ? `: ${detail}` : ''}`);
+    }
+    await db.prepare(`UPDATE user SET role = 'admin' WHERE email = ?`).bind(opts.email).run();
+    return { email: opts.email, tempPassword };
+}
+export async function runSeedAdmin(opts) {
+    if (!opts.email) {
+        process.stderr.write('Error: --email is required.\n');
+        process.exit(1);
+    }
+    const { resolveCliPlatform } = await import('./platform.js');
+    const { db, env, dispose } = await resolveCliPlatform(opts.remote !== undefined ? { remote: opts.remote } : {});
+    try {
+        const secret = env.BETTER_AUTH_SECRET;
+        if (typeof secret !== 'string' || !secret) {
+            throw new Error('BETTER_AUTH_SECRET missing from wrangler.toml [vars] (or secrets).');
+        }
+        const result = await seedAdminUser(db, {
+            email: opts.email,
+            ...(opts.password !== undefined ? { password: opts.password } : {}),
+            secret,
+        });
+        const scope = opts.remote ? 'remote' : 'local';
+        process.stdout.write(`
+✅ Admin user created (${scope} D1).
+
+  Email:    ${result.email}
+  Password: ${result.tempPassword}
+
+Sign in at /admin/login with these credentials.
+`);
+    }
+    finally {
+        await dispose();
+    }
+}

package/dist/cli/setup.d.ts

@@ -0,0 +1,29 @@
+export interface SetupOptions {
+    yes?: boolean;
+    email?: string;
+    password?: string;
+    skipMigrate?: boolean;
+    skipSeed?: boolean;
+    cwd?: string;
+}
+/** 32 random bytes → 64-char hex string. Suitable for BETTER_AUTH_SECRET. */
+export declare function generateSecret(): string;
+/**
+ * Set the D1 `database_id` in wrangler.toml. Replaces the placeholder if
+ * present; otherwise replaces the existing id under the `# vulse:d1` block.
+ * Idempotent: writing the same id twice yields the same output.
+ */
+export declare function setDatabaseId(toml: string, id: string): string;
+/**
+ * Set/replace KEY=VALUE entries in a `.dev.vars`-style file. Existing entries
+ * for the same key are replaced in place; unknown keys are appended. Values
+ * are written as `KEY="value"` (double-quoted) to handle special chars safely.
+ * Pre-existing keys not in `vars` are left untouched.
+ */
+export declare function applyDevVars(existing: string, vars: Record<string, string>): string;
+/** Ensure `.dev.vars` (and `.dev.vars.*`) appear in .gitignore. */
+export declare function ensureGitignored(existing: string, entry?: string): string;
+/** Pull a database_id out of `wrangler d1 create` JSON-ish output. */
+export declare function parseDatabaseId(output: string): string | null;
+export declare function runSetup(opts?: SetupOptions): Promise<void>;
+//# sourceMappingURL=setup.d.ts.map

package/dist/cli/setup.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"setup.d.ts","sourceRoot":"","sources":["../../src/cli/setup.ts"],"names":[],"mappings":"AAUA,MAAM,WAAW,YAAY;IAC3B,GAAG,CAAC,EAAE,OAAO,CAAA;IACb,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,WAAW,CAAC,EAAE,OAAO,CAAA;IACrB,QAAQ,CAAC,EAAE,OAAO,CAAA;IAClB,GAAG,CAAC,EAAE,MAAM,CAAA;CACb;AAiBD,6EAA6E;AAC7E,wBAAgB,cAAc,IAAI,MAAM,CAEvC;AAED;;;;GAIG;AACH,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,GAAG,MAAM,CAM9D;AAED;;;;;GAKG;AACH,wBAAgB,YAAY,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,MAAM,CAgBnF;AAED,mEAAmE;AACnE,wBAAgB,gBAAgB,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,SAAc,GAAG,MAAM,CAK9E;AAuCD,sEAAsE;AACtE,wBAAgB,eAAe,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAG7D;AAED,wBAAsB,QAAQ,CAAC,IAAI,GAAE,YAAiB,GAAG,OAAO,CAAC,IAAI,CAAC,CAsJrE"}