@ekrist1/vulse 0.1.6-alpha.3 → 0.1.7-alpha.4

package/dist/cli/migrate.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"migrate.d.ts","sourceRoot":"","sources":["../../src/cli/migrate.ts"],"names":[],"mappings":"AAMA,MAAM,WAAW,cAAc;IAAG,MAAM,CAAC,EAAE,OAAO,CAAA;CAAE;AAEpD,wBAAsB,UAAU,CAAC,IAAI,EAAE,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC,CAKpE"}
+{"version":3,"file":"migrate.d.ts","sourceRoot":"","sources":["../../src/cli/migrate.ts"],"names":[],"mappings":"AAGA,MAAM,WAAW,cAAc;IAAG,MAAM,CAAC,EAAE,OAAO,CAAA;CAAE;AAEpD,wBAAsB,UAAU,CAAC,IAAI,EAAE,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC,CAMpE"}

package/dist/cli/migrate.js

@@ -1,10 +1,9 @@
-import { join, dirname } from 'node:path';
-import { fileURLToPath } from 'node:url';
 import { execSync } from 'node:child_process';
-const MIGRATIONS_DIR = join(dirname(fileURLToPath(import.meta.url)), '../../migrations');
+import { ensureWranglerConfig } from '../integration/wrangler-config.js';
 export async function runMigrate(opts) {
+    const file = await ensureWranglerConfig(process.cwd());
     const flag = opts.remote ? '--remote' : '--local';
     const cmd = `wrangler d1 migrations apply DB ${flag}`;
-    console.log(`> ${cmd}`);
+    console.log(`> ${cmd}  (migrations: node_modules/@ekrist1/vulse/migrations via ${file})`);
     execSync(cmd, { stdio: 'inherit' });
 }

package/dist/cli/setup.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"setup.d.ts","sourceRoot":"","sources":["../../src/cli/setup.ts"],"names":[],"mappings":"AAUA,MAAM,WAAW,YAAY;IAC3B,GAAG,CAAC,EAAE,OAAO,CAAA;IACb,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,WAAW,CAAC,EAAE,OAAO,CAAA;IACrB,QAAQ,CAAC,EAAE,OAAO,CAAA;IAClB,GAAG,CAAC,EAAE,MAAM,CAAA;CACb;AAiBD,6EAA6E;AAC7E,wBAAgB,cAAc,IAAI,MAAM,CAEvC;AAED;;;;GAIG;AACH,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,GAAG,MAAM,CAM9D;AAED;;;;;GAKG;AACH,wBAAgB,YAAY,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,MAAM,CAgBnF;AAED,mEAAmE;AACnE,wBAAgB,gBAAgB,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,SAAc,GAAG,MAAM,CAK9E;AAuCD,sEAAsE;AACtE,wBAAgB,eAAe,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAG7D;AAED,wBAAsB,QAAQ,CAAC,IAAI,GAAE,YAAiB,GAAG,OAAO,CAAC,IAAI,CAAC,CAsJrE"}
+{"version":3,"file":"setup.d.ts","sourceRoot":"","sources":["../../src/cli/setup.ts"],"names":[],"mappings":"AAUA,MAAM,WAAW,YAAY;IAC3B,GAAG,CAAC,EAAE,OAAO,CAAA;IACb,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,WAAW,CAAC,EAAE,OAAO,CAAA;IACrB,QAAQ,CAAC,EAAE,OAAO,CAAA;IAClB,GAAG,CAAC,EAAE,MAAM,CAAA;CACb;AAiBD,6EAA6E;AAC7E,wBAAgB,cAAc,IAAI,MAAM,CAEvC;AAED;;;;GAIG;AACH,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,GAAG,MAAM,CAM9D;AAED;;;;;GAKG;AACH,wBAAgB,YAAY,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,MAAM,CAgBnF;AAED,mEAAmE;AACnE,wBAAgB,gBAAgB,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,SAAc,GAAG,MAAM,CAK9E;AAuCD,sEAAsE;AACtE,wBAAgB,eAAe,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAG7D;AAED,wBAAsB,QAAQ,CAAC,IAAI,GAAE,YAAiB,GAAG,OAAO,CAAC,IAAI,CAAC,CAuJrE"}

package/dist/cli/setup.js

@@ -4,7 +4,7 @@ import { randomBytes } from 'node:crypto';
 import { execSync } from 'node:child_process';
 import { createInterface } from 'node:readline/promises';
 import { stdin, stdout } from 'node:process';
-import { patchWranglerToml } from '../integration/wrangler-patch.js';
+import { patchWranglerConfig, findWranglerConfig } from '../integration/wrangler-config.js';
 import { runMigrate } from './migrate.js';
 import { runSeedAdmin } from './seed-admin.js';
 const DEV_VARS_FILE = '.dev.vars';
@@ -117,7 +117,7 @@ export async function runSetup(opts = {}) {
     try {
         stdout.write(`\nVulse setup — local development\n\n`);
         stdout.write(`This wizard will update:\n`);
-        stdout.write(`  • ${WRANGLER_FILE}   (D1 + R2 bindings)\n`);
+        stdout.write(`  • wrangler config   (D1 + R2 bindings)\n`);
         stdout.write(`  • ${DEV_VARS_FILE}    (local secrets — gitignored)\n`);
         stdout.write(`  • ${GITIGNORE_FILE}    (adds ${DEV_VARS_FILE})\n\n`);
         if (!(await prompter.confirm('Continue?', true))) {
@@ -126,10 +126,11 @@ export async function runSetup(opts = {}) {
         }
         // --- Step 1: D1 ---
         stdout.write(`\nStep 1/3 — Cloudflare D1 (database)\n`);
-        const wranglerPath = join(cwd, WRANGLER_FILE);
-        let wranglerToml = await readIfExists(wranglerPath);
+        const wranglerFile = (await findWranglerConfig(cwd)) ?? WRANGLER_FILE;
+        const wranglerPath = join(cwd, wranglerFile);
+        let wranglerConfig = await readIfExists(wranglerPath);
         const d1Name = await prompter.ask('  D1 database name', 'vulse-db');
-        wranglerToml = patchWranglerToml(wranglerToml, { d1Name, r2Bucket: 'vulse-media' });
+        wranglerConfig = patchWranglerConfig(wranglerConfig, wranglerFile, { d1Name, r2Bucket: 'vulse-media' });
         let databaseId = await prompter.ask('  D1 database_id (leave blank to create one now)', '');
         if (!databaseId) {
             if (await prompter.confirm(`  Run \`wrangler d1 create ${d1Name}\`?`, true)) {
@@ -152,11 +153,11 @@ export async function runSetup(opts = {}) {
             }
         }
         if (databaseId)
-            wranglerToml = setDatabaseId(wranglerToml, databaseId);
+            wranglerConfig = setDatabaseId(wranglerConfig, databaseId);
         // --- Step 2: R2 ---
         stdout.write(`\nStep 2/3 — Cloudflare R2 (media storage)\n`);
         const r2Bucket = await prompter.ask('  R2 bucket name', 'vulse-media');
-        wranglerToml = patchWranglerToml(wranglerToml, { d1Name, r2Bucket });
+        wranglerConfig = patchWranglerConfig(wranglerConfig, wranglerFile, { d1Name, r2Bucket });
         if (await prompter.confirm(`  Run \`wrangler r2 bucket create ${r2Bucket}\`?`, true)) {
             const result = tryRun(`wrangler r2 bucket create ${r2Bucket}`);
             if (result.ok) {
@@ -170,8 +171,8 @@ export async function runSetup(opts = {}) {
                 stdout.write(`    Continuing — you can create it later.\n`);
             }
         }
-        await writeFile(wranglerPath, wranglerToml, 'utf8');
-        stdout.write(`  ✓ wrote ${WRANGLER_FILE}\n`);
+        await writeFile(wranglerPath, wranglerConfig, 'utf8');
+        stdout.write(`  ✓ wrote ${wranglerFile}\n`);
         // --- Step 3: Secrets + .dev.vars ---
         stdout.write(`\nStep 3/3 — Secrets\n`);
         const devVarsPath = join(cwd, DEV_VARS_FILE);
@@ -198,7 +199,7 @@ export async function runSetup(opts = {}) {
         }
         // Warn if wrangler.toml still has the placeholder BETTER_AUTH_SECRET — .dev.vars
         // overrides it in dev, but the placeholder is misleading.
-        if (wranglerToml.includes(PLACEHOLDER_AUTH_SECRET)) {
+        if (wranglerConfig.includes(PLACEHOLDER_AUTH_SECRET)) {
             stdout.write(`  ℹ ${WRANGLER_FILE} still contains the placeholder BETTER_AUTH_SECRET in [vars].\n` +
                 `    ${DEV_VARS_FILE} takes precedence in dev — you can remove the [vars] line.\n`);
         }

package/dist/core/blueprints/compile.d.ts

@@ -6,5 +6,5 @@ export interface CompileBlueprintOptions {
 }
 export declare function compileBlueprintSchema(def: BlueprintDefinition, options?: CompileBlueprintOptions): z.ZodObject<z.ZodRawShape>;
 export declare function compileFieldObject(fields: NestedFieldDefinition[]): z.ZodObject<z.ZodRawShape>;
-export declare function hashDefinition(def: BlueprintDefinition): string;
+export declare function hashDefinition(def: BlueprintDefinition): Promise<string>;
 //# sourceMappingURL=compile.d.ts.map

package/dist/core/blueprints/compile.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"compile.d.ts","sourceRoot":"","sources":["../../../src/core/blueprints/compile.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,CAAC,EAAE,MAAM,WAAW,CAAA;AAC7B,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAA;AAErD,OAAO,KAAK,EACV,mBAAmB,EAEnB,qBAAqB,EAEtB,MAAM,iBAAiB,CAAA;AAKxB,MAAM,WAAW,uBAAuB;IACtC,IAAI,CAAC,EAAE,GAAG,CAAC,MAAM,EAAE,WAAW,CAAC,CAAA;CAChC;AAED,wBAAgB,sBAAsB,CACpC,GAAG,EAAE,mBAAmB,EACxB,OAAO,GAAE,uBAA4B,GACpC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,CAS5B;AAqHD,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,qBAAqB,EAAE,GAAG,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,CAM9F;AAED,wBAAgB,cAAc,CAAC,GAAG,EAAE,mBAAmB,GAAG,MAAM,CAoB/D"}
+{"version":3,"file":"compile.d.ts","sourceRoot":"","sources":["../../../src/core/blueprints/compile.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,WAAW,CAAA;AAE7B,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAA;AAErD,OAAO,KAAK,EACV,mBAAmB,EAEnB,qBAAqB,EAEtB,MAAM,iBAAiB,CAAA;AAKxB,MAAM,WAAW,uBAAuB;IACtC,IAAI,CAAC,EAAE,GAAG,CAAC,MAAM,EAAE,WAAW,CAAC,CAAA;CAChC;AAED,wBAAgB,sBAAsB,CACpC,GAAG,EAAE,mBAAmB,EACxB,OAAO,GAAE,uBAA4B,GACpC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,CAS5B;AAqHD,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,qBAAqB,EAAE,GAAG,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,CAM9F;AAED,wBAAsB,cAAc,CAAC,GAAG,EAAE,mBAAmB,GAAG,OAAO,CAAC,MAAM,CAAC,CAoB9E"}

package/dist/core/blueprints/compile.js

@@ -1,5 +1,5 @@
-import { createHash } from 'node:crypto';
 import { z } from 'astro/zod';
+import { sha256Hex } from '../sha256.js';
 import { validateSetNodes } from '../sets/validate-tree.js';
 import { LinkValueSchema } from './definition.js';
 import { seoZodSchema } from './seo.js';
@@ -130,7 +130,7 @@ export function compileFieldObject(fields) {
     }
     return z.object(shape);
 }
-export function hashDefinition(def) {
+export async function hashDefinition(def) {
     const canonical = JSON.stringify({
         handle: def.handle,
         label: def.label,
@@ -149,5 +149,5 @@ export function hashDefinition(def) {
             validation: f.validation ?? null,
         })),
     });
-    return createHash('sha256').update(canonical).digest('hex');
+    return sha256Hex(canonical);
 }

package/dist/core/blueprints/mutations.js

@@ -10,7 +10,7 @@ export async function createBlueprint(db, input) {
         handle: def.handle,
         label: def.label,
         definition: def,
-        blueprintHash: hashDefinition(def),
+        blueprintHash: await hashDefinition(def),
         singleton: def.singleton,
         tree: def.tree === true,
         drafts: def.drafts === true,
@@ -64,7 +64,7 @@ export async function updateBlueprint(db, handle, input) {
     await db.update(vulseCollections).set({
         label: canonical.label,
         definition: canonical,
-        blueprintHash: hashDefinition(canonical),
+        blueprintHash: await hashDefinition(canonical),
         singleton: canonical.singleton,
         tree: canonical.tree === true,
         drafts: canonical.drafts === true,

package/dist/core/forms/rate-limit.d.ts

@@ -1,5 +1,5 @@
 import type { VulseDb } from '../db.js';
-export declare function hashIp(ip: string): string;
+export declare function hashIp(ip: string): Promise<string>;
 export declare function checkRateLimit(db: VulseDb, formHandle: string, ipHash: string, opts?: {
     maxPerIp: number;
     windowSec: number;

package/dist/core/forms/rate-limit.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"rate-limit.d.ts","sourceRoot":"","sources":["../../../src/core/forms/rate-limit.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,UAAU,CAAA;AAGvC,wBAAgB,MAAM,CAAC,EAAE,EAAE,MAAM,GAAG,MAAM,CAEzC;AAED,wBAAsB,cAAc,CAClC,EAAE,EAAE,OAAO,EACX,UAAU,EAAE,MAAM,EAClB,MAAM,EAAE,MAAM,EACd,IAAI,GAAE;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAsC,GAChF,OAAO,CAAC;IAAE,OAAO,EAAE,OAAO,CAAC;IAAC,aAAa,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,CAqCvD"}
+{"version":3,"file":"rate-limit.d.ts","sourceRoot":"","sources":["../../../src/core/forms/rate-limit.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,UAAU,CAAA;AAGvC,wBAAsB,MAAM,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAExD;AAED,wBAAsB,cAAc,CAClC,EAAE,EAAE,OAAO,EACX,UAAU,EAAE,MAAM,EAClB,MAAM,EAAE,MAAM,EACd,IAAI,GAAE;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAsC,GAChF,OAAO,CAAC;IAAE,OAAO,EAAE,OAAO,CAAC;IAAC,aAAa,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,CAqCvD"}

package/dist/core/forms/rate-limit.js

@@ -1,8 +1,8 @@
-import { createHash } from 'node:crypto';
+import { sha256Hex } from '../sha256.js';
 import { eq, and, lt } from 'drizzle-orm';
 import { vulseFormRateLimits } from '../schema.js';
-export function hashIp(ip) {
-    return createHash('sha256').update(ip).digest('hex');
+export async function hashIp(ip) {
+    return sha256Hex(ip);
 }
 export async function checkRateLimit(db, formHandle, ipHash, opts = { maxPerIp: 10, windowSec: 3600 }) {
     const windowMs = opts.windowSec * 1000;

package/dist/core/forms/unique.d.ts

@@ -1,5 +1,5 @@
 import type { VulseDb } from '../db.js';
 export declare function normalizeUniqueValue(value: unknown): string;
-export declare function hashUniqueValue(value: unknown): string;
+export declare function hashUniqueValue(value: unknown): Promise<string>;
 export declare function insertUniqueValues(db: VulseDb, formHandle: string, submissionId: string, fields: Record<string, unknown>, uniqueFieldNames: string[]): Promise<void>;
 //# sourceMappingURL=unique.d.ts.map

package/dist/core/forms/unique.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"unique.d.ts","sourceRoot":"","sources":["../../../src/core/forms/unique.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,UAAU,CAAA;AAIvC,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAE3D;AAED,wBAAgB,eAAe,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAEtD;AAED,wBAAsB,kBAAkB,CACtC,EAAE,EAAE,OAAO,EACX,UAAU,EAAE,MAAM,EAClB,YAAY,EAAE,MAAM,EACpB,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC/B,gBAAgB,EAAE,MAAM,EAAE,GACzB,OAAO,CAAC,IAAI,CAAC,CAkBf"}
+{"version":3,"file":"unique.d.ts","sourceRoot":"","sources":["../../../src/core/forms/unique.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,UAAU,CAAA;AAIvC,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAE3D;AAED,wBAAsB,eAAe,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,CAErE;AAED,wBAAsB,kBAAkB,CACtC,EAAE,EAAE,OAAO,EACX,UAAU,EAAE,MAAM,EAClB,YAAY,EAAE,MAAM,EACpB,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC/B,gBAAgB,EAAE,MAAM,EAAE,GACzB,OAAO,CAAC,IAAI,CAAC,CAkBf"}

package/dist/core/forms/unique.js

@@ -1,11 +1,11 @@
-import { createHash } from 'node:crypto';
+import { sha256Hex } from '../sha256.js';
 import { vulseFormUniqueValues } from '../schema.js';
 import { ConflictError } from '../errors.js';
 export function normalizeUniqueValue(value) {
     return String(value).trim().toLowerCase();
 }
-export function hashUniqueValue(value) {
-    return createHash('sha256').update(normalizeUniqueValue(value)).digest('hex');
+export async function hashUniqueValue(value) {
+    return sha256Hex(normalizeUniqueValue(value));
 }
 export async function insertUniqueValues(db, formHandle, submissionId, fields, uniqueFieldNames) {
     const now = new Date();
@@ -13,7 +13,7 @@ export async function insertUniqueValues(db, formHandle, submissionId, fields, u
         const value = fields[name];
         if (value === undefined || value === null || value === '')
             continue;
-        const valueHash = hashUniqueValue(value);
+        const valueHash = await hashUniqueValue(value);
         try {
             await db.insert(vulseFormUniqueValues).values({
                 formHandle,

package/dist/core/globals/compile.d.ts

@@ -9,5 +9,5 @@ export interface CompiledGlobalSet {
     schema: z.ZodObject<z.ZodRawShape>;
     hash: string;
 }
-export declare function compileGlobalSet(def: GlobalSetDefinition, sets?: Map<string, CompiledSet>): CompiledGlobalSet;
+export declare function compileGlobalSet(def: GlobalSetDefinition, sets?: Map<string, CompiledSet>): Promise<CompiledGlobalSet>;
 //# sourceMappingURL=compile.d.ts.map

package/dist/core/globals/compile.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"compile.d.ts","sourceRoot":"","sources":["../../../src/core/globals/compile.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,CAAC,EAAE,MAAM,WAAW,CAAA;AAElC,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAA;AACrD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,6BAA6B,CAAA;AAClE,OAAO,EAAE,KAAK,mBAAmB,EAA2B,MAAM,iBAAiB,CAAA;AAEnF,MAAM,WAAW,iBAAiB;IAChC,MAAM,EAAE,MAAM,CAAA;IACd,KAAK,EAAE,MAAM,CAAA;IACb,MAAM,EAAE,eAAe,EAAE,CAAA;IACzB,MAAM,EAAE,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,CAAA;IAClC,IAAI,EAAE,MAAM,CAAA;CACb;AAED,wBAAgB,gBAAgB,CAC9B,GAAG,EAAE,mBAAmB,EACxB,IAAI,CAAC,EAAE,GAAG,CAAC,MAAM,EAAE,WAAW,CAAC,GAC9B,iBAAiB,CAiBnB"}
+{"version":3,"file":"compile.d.ts","sourceRoot":"","sources":["../../../src/core/globals/compile.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,CAAC,EAAE,MAAM,WAAW,CAAA;AAElC,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAA;AACrD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,6BAA6B,CAAA;AAClE,OAAO,EAAE,KAAK,mBAAmB,EAA2B,MAAM,iBAAiB,CAAA;AAEnF,MAAM,WAAW,iBAAiB;IAChC,MAAM,EAAE,MAAM,CAAA;IACd,KAAK,EAAE,MAAM,CAAA;IACb,MAAM,EAAE,eAAe,EAAE,CAAA;IACzB,MAAM,EAAE,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,CAAA;IAClC,IAAI,EAAE,MAAM,CAAA;CACb;AAED,wBAAsB,gBAAgB,CACpC,GAAG,EAAE,mBAAmB,EACxB,IAAI,CAAC,EAAE,GAAG,CAAC,MAAM,EAAE,WAAW,CAAC,GAC9B,OAAO,CAAC,iBAAiB,CAAC,CAiB5B"}

package/dist/core/globals/compile.js

@@ -1,6 +1,6 @@
 import { compileBlueprintSchema } from '../blueprints/compile.js';
 import { hashGlobalSetDefinition } from './definition.js';
-export function compileGlobalSet(def, sets) {
+export async function compileGlobalSet(def, sets) {
     const options = sets ? { sets } : {};
     return {
         handle: def.handle,
@@ -12,6 +12,6 @@ export function compileGlobalSet(def, sets) {
             singleton: true,
             fields: def.fields,
         }, options),
-        hash: hashGlobalSetDefinition(def),
+        hash: await hashGlobalSetDefinition(def),
     };
 }

package/dist/core/globals/definition.d.ts

@@ -157,5 +157,5 @@ export declare const GlobalSetDefinitionSchema: z.ZodObject<{
     }, z.core.$strip>>>;
 }, z.core.$strip>;
 export type GlobalSetDefinition = z.infer<typeof GlobalSetDefinitionSchema>;
-export declare function hashGlobalSetDefinition(def: GlobalSetDefinition): string;
+export declare function hashGlobalSetDefinition(def: GlobalSetDefinition): Promise<string>;
 //# sourceMappingURL=definition.d.ts.map

package/dist/core/globals/definition.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"definition.d.ts","sourceRoot":"","sources":["../../../src/core/globals/definition.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,CAAC,EAAE,MAAM,WAAW,CAAA;AAG7B,eAAO,MAAM,yBAAyB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAIpC,CAAA;AAEF,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,yBAAyB,CAAC,CAAA;AAE3E,wBAAgB,uBAAuB,CAAC,GAAG,EAAE,mBAAmB,GAAG,MAAM,CAcxE"}
+{"version":3,"file":"definition.d.ts","sourceRoot":"","sources":["../../../src/core/globals/definition.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,WAAW,CAAA;AAI7B,eAAO,MAAM,yBAAyB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAIpC,CAAA;AAEF,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,yBAAyB,CAAC,CAAA;AAE3E,wBAAsB,uBAAuB,CAAC,GAAG,EAAE,mBAAmB,GAAG,OAAO,CAAC,MAAM,CAAC,CAcvF"}

package/dist/core/globals/definition.js

@@ -1,12 +1,12 @@
-import { createHash } from 'node:crypto';
 import { z } from 'astro/zod';
+import { sha256Hex } from '../sha256.js';
 import { FieldDefinitionSchema } from '../blueprints/definition.js';
 export const GlobalSetDefinitionSchema = z.object({
     handle: z.string().regex(/^[a-z][a-z0-9_-]*$/),
     label: z.string().min(1),
     fields: z.array(FieldDefinitionSchema).default([]),
 });
-export function hashGlobalSetDefinition(def) {
+export async function hashGlobalSetDefinition(def) {
     const canonical = JSON.stringify({
         handle: def.handle,
         label: def.label,
@@ -19,5 +19,5 @@ export function hashGlobalSetDefinition(def) {
             validation: f.validation ?? null,
         })),
     });
-    return createHash('sha256').update(canonical).digest('hex');
+    return sha256Hex(canonical);
 }

package/dist/core/repos/globals.js

@@ -44,7 +44,7 @@ export class GlobalsRepo {
         if (existing)
             throw new ConflictError(`global set already exists: ${def.handle}`);
         const now = new Date();
-        const hash = hashGlobalSetDefinition(def);
+        const hash = await hashGlobalSetDefinition(def);
         await this.db.insert(vulseGlobalSets).values({
             handle: def.handle,
             label: def.label,
@@ -78,7 +78,7 @@ export class GlobalsRepo {
         await this.db.update(vulseGlobalSets).set({
             label: def.label,
             definition: def,
-            blueprintHash: hashGlobalSetDefinition(def),
+            blueprintHash: await hashGlobalSetDefinition(def),
             updatedAt: new Date(),
         }).where(eq(vulseGlobalSets.handle, handle));
         const row = await this.findSetByHandle(handle);
@@ -104,7 +104,7 @@ export class GlobalsRepo {
         if (!set)
             throw new NotFoundError('global set not found');
         const sets = await loadCompiledSets(this.db);
-        const compiled = compileGlobalSet(set.definition, sets);
+        const compiled = await compileGlobalSet(set.definition, sets);
         const result = compiled.schema.safeParse(input);
         if (!result.success) {
             throw new ValidationError('Invalid global value', { issues: result.error.issues });

package/dist/core/sha256.d.ts

@@ -0,0 +1,3 @@
+/** Workers-safe SHA-256 hex digest (no node:crypto). */
+export declare function sha256Hex(input: string): Promise<string>;
+//# sourceMappingURL=sha256.d.ts.map

package/dist/core/sha256.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sha256.d.ts","sourceRoot":"","sources":["../../src/core/sha256.ts"],"names":[],"mappings":"AAIA,wDAAwD;AACxD,wBAAsB,SAAS,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAI9D"}

package/dist/core/sha256.js

@@ -0,0 +1,9 @@
+function bytesToHex(bytes) {
+    return Array.from(bytes, (byte) => byte.toString(16).padStart(2, '0')).join('');
+}
+/** Workers-safe SHA-256 hex digest (no node:crypto). */
+export async function sha256Hex(input) {
+    const data = new TextEncoder().encode(input);
+    const hash = await crypto.subtle.digest('SHA-256', data);
+    return bytesToHex(new Uint8Array(hash));
+}

package/dist/integration/index.js

@@ -50,7 +50,7 @@ export default function vulse(opts = {}) {
                         ssr: {
                             // Bundle vulse in-process for Cloudflare's module runner; avoid
                             // noExternal: true — it pulls native dev deps (tailwind oxide, babel) into SSR.
-                            noExternal: ['@ekrist1/vulse'],
+                            noExternal: ['@ekrist1/vulse', '@astrojs/vue'],
                             optimizeDeps: {
                                 exclude: [...OPTIMIZE_DEPS_EXCLUDE],
                             },

package/dist/integration/install-hook.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"install-hook.d.ts","sourceRoot":"","sources":["../../src/integration/install-hook.ts"],"names":[],"mappings":"AAsCA,wBAAsB,cAAc,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAmC/D"}
+{"version":3,"file":"install-hook.d.ts","sourceRoot":"","sources":["../../src/integration/install-hook.ts"],"names":[],"mappings":"AAsCA,wBAAsB,cAAc,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAqC/D"}

package/dist/integration/install-hook.js

@@ -1,7 +1,7 @@
 import { readFile, writeFile, mkdir, access } from 'node:fs/promises';
 import { join } from 'node:path';
 import { VULSE_PACKAGE } from '../package-name.js';
-import { patchWranglerToml } from './wrangler-patch.js';
+import { ensureWranglerConfig, patchWranglerConfig, findWranglerConfig } from './wrangler-config.js';
 const STARTER_BLUEPRINT = `import { defineCollection, z } from '${VULSE_PACKAGE}'
 
 export default defineCollection({
@@ -39,9 +39,10 @@ async function fileExists(path) {
     }
 }
 export async function runInstallHook(cwd) {
-    const wranglerPath = join(cwd, 'wrangler.toml');
+    const wranglerFile = await findWranglerConfig(cwd);
+    const wranglerPath = join(cwd, wranglerFile ?? 'wrangler.toml');
     const existing = (await fileExists(wranglerPath)) ? await readFile(wranglerPath, 'utf8') : '';
-    const patched = patchWranglerToml(existing, { d1Name: 'vulse-db', r2Bucket: 'vulse-media' });
+    const patched = patchWranglerConfig(existing, wranglerFile ?? 'wrangler.toml', { d1Name: 'vulse-db', r2Bucket: 'vulse-media' });
     if (patched !== existing)
         await writeFile(wranglerPath, patched, 'utf8');
     const collectionsDir = join(cwd, 'src/vulse/collections');
@@ -63,9 +64,10 @@ export async function runInstallHook(cwd) {
 ✅ Vulse installed.
 
 One-time setup (copy/paste):
+  pnpm add @astrojs/vue vue   # required at project root for the admin UI renderer
   wrangler d1 create vulse-db
   wrangler r2 bucket create vulse-media
-  # Paste the returned database_id into wrangler.toml (search for TODO_PASTE_ID).
+  # Paste the returned database_id into your wrangler config (search for TODO_PASTE_ID).
   npx vulse migrate
   npx vulse seed:admin --email you@example.com
 

package/dist/integration/wrangler-config.d.ts

@@ -0,0 +1,12 @@
+import { type PatchOptions } from './wrangler-patch.js';
+declare const WRANGLER_FILES: readonly ["wrangler.jsonc", "wrangler.toml", "wrangler.json"];
+export type WranglerConfigFile = (typeof WRANGLER_FILES)[number];
+/** Prefer the wrangler file Astro/Cloudflare already created. */
+export declare function findWranglerConfig(cwd: string): Promise<WranglerConfigFile | null>;
+export declare function isJsonWranglerConfig(file: WranglerConfigFile): boolean;
+export declare function patchWranglerJsonc(input: string, opts?: PatchOptions): string;
+export declare function patchWranglerConfig(input: string, file: WranglerConfigFile, opts?: PatchOptions): string;
+/** Ensure the active wrangler config points migrations at the bundled package SQL. */
+export declare function ensureWranglerConfig(cwd: string, opts?: PatchOptions): Promise<WranglerConfigFile>;
+export {};
+//# sourceMappingURL=wrangler-config.d.ts.map

package/dist/integration/wrangler-config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"wrangler-config.d.ts","sourceRoot":"","sources":["../../src/integration/wrangler-config.ts"],"names":[],"mappings":"AAEA,OAAO,EAA2C,KAAK,YAAY,EAAE,MAAM,qBAAqB,CAAA;AAEhG,QAAA,MAAM,cAAc,+DAAgE,CAAA;AAGpF,MAAM,MAAM,kBAAkB,GAAG,CAAC,OAAO,cAAc,CAAC,CAAC,MAAM,CAAC,CAAA;AAMhE,iEAAiE;AACjE,wBAAsB,kBAAkB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,kBAAkB,GAAG,IAAI,CAAC,CAKxF;AAED,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,kBAAkB,GAAG,OAAO,CAEtE;AAED,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,GAAE,YAA4B,GAAG,MAAM,CAyD5F;AAED,wBAAgB,mBAAmB,CACjC,KAAK,EAAE,MAAM,EACb,IAAI,EAAE,kBAAkB,EACxB,IAAI,GAAE,YAA4B,GACjC,MAAM,CAmBR;AAED,sFAAsF;AACtF,wBAAsB,oBAAoB,CACxC,GAAG,EAAE,MAAM,EACX,IAAI,GAAE,YAA4B,GACjC,OAAO,CAAC,kBAAkB,CAAC,CAQ7B"}

package/dist/integration/wrangler-config.js

@@ -0,0 +1,97 @@
+import { access, readFile, writeFile } from 'node:fs/promises';
+import { join } from 'node:path';
+import { patchWranglerToml, VULSE_MIGRATIONS_DIR } from './wrangler-patch.js';
+const WRANGLER_FILES = ['wrangler.jsonc', 'wrangler.toml', 'wrangler.json'];
+const DEFAULT_PATCH = { d1Name: 'vulse-db', r2Bucket: 'vulse-media' };
+async function fileExists(path) {
+    try {
+        await access(path);
+        return true;
+    }
+    catch {
+        return false;
+    }
+}
+/** Prefer the wrangler file Astro/Cloudflare already created. */
+export async function findWranglerConfig(cwd) {
+    for (const file of WRANGLER_FILES) {
+        if (await fileExists(join(cwd, file)))
+            return file;
+    }
+    return null;
+}
+export function isJsonWranglerConfig(file) {
+    return file === 'wrangler.jsonc' || file === 'wrangler.json';
+}
+export function patchWranglerJsonc(input, opts = DEFAULT_PATCH) {
+    const D1_MARKER = '// vulse:d1';
+    const R2_MARKER = '// vulse:r2';
+    let out = input.trimEnd();
+    if (!out.endsWith('\n'))
+        out += '\n';
+    if (!out.includes(D1_MARKER)) {
+        if (/["']binding["']\s*:\s*["']DB["']/.test(out) && !out.includes('migrations_dir')) {
+            out = out.replace(/("binding"\s*:\s*"DB"[\s\S]*?)(}\s*,?\s*(?=\]|,|\n\s*}))/, (match, prefix, suffix) => {
+                if (prefix.includes('migrations_dir'))
+                    return match;
+                const sep = prefix.trimEnd().endsWith(',') ? '\n      ' : ',\n      ';
+                return `${prefix}${sep}"migrations_dir": "${VULSE_MIGRATIONS_DIR}"${suffix}`;
+            });
+        }
+        else if (!out.includes('"d1_databases"')) {
+            const d1Block = `  ${D1_MARKER}
+  "d1_databases": [
+    {
+      "binding": "DB",
+      "database_name": "${opts.d1Name}",
+      "database_id": "TODO_PASTE_ID_FROM_WRANGLER_OUTPUT",
+      "migrations_dir": "${VULSE_MIGRATIONS_DIR}"
+    }
+  ],`;
+            out = out.replace(/\}\s*$/, `${d1Block}\n}\n`);
+        }
+    }
+    if (!out.includes(R2_MARKER) && !out.includes('"r2_buckets"')) {
+        const r2Block = `  ${R2_MARKER}
+  "r2_buckets": [
+    {
+      "binding": "BUCKET",
+      "bucket_name": "${opts.r2Bucket}"
+    }
+  ],`;
+        out = out.replace(/\}\s*$/, `${r2Block}\n}\n`);
+    }
+    if (!out.includes('nodejs_compat')) {
+        if (out.includes('"compatibility_flags"')) {
+            out = out.replace(/"compatibility_flags"\s*:\s*\[(.*?)\]/s, (match, flags) => flags.includes('nodejs_compat') ? match : `"compatibility_flags": [${flags.trim()}${flags.trim() ? ', ' : ''}"nodejs_compat"]`);
+        }
+        else if (out.includes('"compatibility_date"')) {
+            out = out.replace(/"compatibility_date"\s*:\s*"[^"]*"/, (m) => `${m},\n  "compatibility_flags": ["nodejs_compat"]`);
+        }
+    }
+    return out;
+}
+export function patchWranglerConfig(input, file, opts = DEFAULT_PATCH) {
+    const patched = isJsonWranglerConfig(file) ? patchWranglerJsonc(input, opts) : patchWranglerToml(input, opts);
+    if (patched.includes('migrations_dir'))
+        return patched;
+    // Cloudflare scaffold may already define D1 without migrations_dir (no vulse marker).
+    if (file.endsWith('.toml') && patched.includes('binding = "DB"') && !patched.includes('migrations_dir')) {
+        if (patched.includes('database_id = ')) {
+            return patched.replace(/(database_id = "[^"]*")/, `$1\nmigrations_dir = "${VULSE_MIGRATIONS_DIR}"`);
+        }
+        return patched.replace(/(binding = "DB"[^\n]*\n)/, `$1migrations_dir = "${VULSE_MIGRATIONS_DIR}"\n`);
+    }
+    return patched;
+}
+/** Ensure the active wrangler config points migrations at the bundled package SQL. */
+export async function ensureWranglerConfig(cwd, opts = DEFAULT_PATCH) {
+    const existing = await findWranglerConfig(cwd);
+    const file = existing ?? 'wrangler.toml';
+    const path = join(cwd, file);
+    const before = existing ? await readFile(path, 'utf8') : '';
+    const after = patchWranglerConfig(before, file, opts);
+    if (after !== before)
+        await writeFile(path, after, 'utf8');
+    return file;
+}

package/dist/integration/wrangler-patch.d.ts

@@ -2,5 +2,6 @@ export interface PatchOptions {
     d1Name: string;
     r2Bucket: string;
 }
+export declare const VULSE_MIGRATIONS_DIR = "node_modules/@ekrist1/vulse/migrations";
 export declare function patchWranglerToml(input: string, opts: PatchOptions): string;
 //# sourceMappingURL=wrangler-patch.d.ts.map

package/dist/integration/wrangler-patch.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"wrangler-patch.d.ts","sourceRoot":"","sources":["../../src/integration/wrangler-patch.ts"],"names":[],"mappings":"AAEA,MAAM,WAAW,YAAY;IAC3B,MAAM,EAAE,MAAM,CAAA;IACd,QAAQ,EAAE,MAAM,CAAA;CACjB;AAKD,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,YAAY,GAAG,MAAM,CAe3E"}
+{"version":3,"file":"wrangler-patch.d.ts","sourceRoot":"","sources":["../../src/integration/wrangler-patch.ts"],"names":[],"mappings":"AAEA,MAAM,WAAW,YAAY;IAC3B,MAAM,EAAE,MAAM,CAAA;IACd,QAAQ,EAAE,MAAM,CAAA;CACjB;AAED,eAAO,MAAM,oBAAoB,2CAA6C,CAAA;AAK9E,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,YAAY,GAAG,MAAM,CAe3E"}

package/dist/integration/wrangler-patch.js

@@ -1,4 +1,5 @@
 import { VULSE_PACKAGE } from '../package-name.js';
+export const VULSE_MIGRATIONS_DIR = `node_modules/${VULSE_PACKAGE}/migrations`;
 const D1_MARKER = '# vulse:d1';
 const R2_MARKER = '# vulse:r2';
 export function patchWranglerToml(input, opts) {
@@ -6,7 +7,7 @@ export function patchWranglerToml(input, opts) {
     const hasR2 = input.includes(R2_MARKER);
     let out = input;
     if (!hasD1) {
-        out += `\n${D1_MARKER}\n[[d1_databases]]\nbinding = "DB"\ndatabase_name = "${opts.d1Name}"\ndatabase_id = "TODO_PASTE_ID_FROM_WRANGLER_OUTPUT"\nmigrations_dir = "node_modules/${VULSE_PACKAGE}/migrations"\n`;
+        out += `\n${D1_MARKER}\n[[d1_databases]]\nbinding = "DB"\ndatabase_name = "${opts.d1Name}"\ndatabase_id = "TODO_PASTE_ID_FROM_WRANGLER_OUTPUT"\nmigrations_dir = "${VULSE_MIGRATIONS_DIR}"\n`;
     }
     if (!hasR2) {
         out += `\n${R2_MARKER}\n[[r2_buckets]]\nbinding = "BUCKET"\nbucket_name = "${opts.r2Bucket}"\n`;

package/dist/server/routes/form-submit.js

@@ -80,7 +80,7 @@ export function formSubmitRoutes(db, options = {}) {
                     });
                 }
                 const rate = def.settings.rateLimit ?? { maxPerIp: 10, windowSec: 3600 };
-                const rl = await checkRateLimit(db, handle, hashIp(ip), rate);
+                const rl = await checkRateLimit(db, handle, await hashIp(ip), rate);
                 if (!rl.allowed) {
                     return new Response(JSON.stringify({
                         ok: false,

package/dist/version.d.ts

@@ -1,2 +1,2 @@
-export declare const VULSE_VERSION = "0.1.6-alpha.3";
+export declare const VULSE_VERSION = "0.1.7-alpha.4";
 //# sourceMappingURL=version.d.ts.map

package/dist/version.js

@@ -1,2 +1,2 @@
 // Generated by sync-version — do not edit
-export const VULSE_VERSION = "0.1.6-alpha.3";
+export const VULSE_VERSION = "0.1.7-alpha.4";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ekrist1/vulse",
-  "version": "0.1.6-alpha.3",
+  "version": "0.1.7-alpha.4",
   "description": "Astro-native headless CMS for Cloudflare (D1, R2, Workers)",
   "license": "MIT",
   "repository": {
@@ -72,6 +72,10 @@
   "files": [
     "dist",
     "migrations",
+    "src/admin",
+    "src/core",
+    "src/server",
+    "src/scaffold",
     "src/client",
     "LICENSE",
     "README.md"
@@ -90,6 +94,7 @@
   },
   "dependencies": {
     "@astrojs/vue": "^6.0.1",
+    "@tailwindcss/vite": "^4.3.0",
     "@tiptap/core": "^2.8.0",
     "@tiptap/pm": "^2.8.0",
     "@tiptap/starter-kit": "^2.8.0",
@@ -101,28 +106,31 @@
     "jose": "^6.2.3",
     "morphdom": "^2.7.8",
     "nanoid": "^5.0.0",
+    "tailwindcss": "^4",
     "vue": "^3.5.34"
   },
   "devDependencies": {
     "@cloudflare/vitest-pool-workers": "^0.6.0",
     "@cloudflare/workers-types": "^4.20240320.0",
-    "@tailwindcss/vite": "^4.3.0",
     "@types/diff": "^8.0.0",
     "@types/node": "^22.0.0",
     "astro": "^6.3.7",
     "drizzle-kit": "^0.31.10",
     "esbuild": "^0.25.12",
-    "tailwindcss": "^4",
     "typescript": "^5.6.0",
     "vite": "^7.3.0",
     "vitest": "^2.1.0",
     "wrangler": "^4.94.0"
   },
   "peerDependencies": {
+    "@astrojs/vue": "^6.0.0",
     "astro": "^6.3.0",
     "vue": "^3.5.0"
   },
   "peerDependenciesMeta": {
+    "@astrojs/vue": {
+      "optional": false
+    },
     "vue": {
       "optional": false
     }

package/src/admin/assets/logo-mark.svg

@@ -0,0 +1,5 @@
+<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 120 120" role="img" aria-label="Vulse">
+  <rect x="0" y="0" width="120" height="120" rx="24" fill="#0B0B0C"></rect>
+  <path d="M30 36 L60 92 L90 36" stroke="#FAFAF7" stroke-width="11" stroke-linecap="round" stroke-linejoin="round" fill="none"></path>
+  <circle cx="60" cy="92" r="6" fill="#FF5B2E"></circle>
+</svg>