@ekrist1/vulse 0.1.6-alpha.3

package/dist/server/endpoints/api-vulse-users-id.js

@@ -0,0 +1,9 @@
+import { withRuntime } from './with-runtime.js';
+export const GET = async ({ params, request }) => {
+    const rt = await withRuntime(request);
+    return rt.routes.users.get(request, params);
+};
+export const PATCH = async ({ params, request }) => {
+    const rt = await withRuntime(request);
+    return rt.routes.users.update(request, params);
+};

package/dist/server/endpoints/api-vulse-users-reset-password.d.ts

@@ -0,0 +1,3 @@
+import type { APIRoute } from 'astro';
+export declare const POST: APIRoute;
+//# sourceMappingURL=api-vulse-users-reset-password.d.ts.map

package/dist/server/endpoints/api-vulse-users-reset-password.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"api-vulse-users-reset-password.d.ts","sourceRoot":"","sources":["../../../src/server/endpoints/api-vulse-users-reset-password.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,OAAO,CAAA;AAGrC,eAAO,MAAM,IAAI,EAAE,QAGlB,CAAA"}

package/dist/server/endpoints/api-vulse-users-reset-password.js

@@ -0,0 +1,5 @@
+import { withRuntime } from './with-runtime.js';
+export const POST = async ({ params, request }) => {
+    const rt = await withRuntime(request);
+    return rt.routes.users.resetPassword(request, params);
+};

package/dist/server/endpoints/api-vulse-users-role.d.ts

@@ -0,0 +1,4 @@
+import type { APIRoute } from 'astro';
+export declare const POST: APIRoute;
+export declare const PUT: APIRoute;
+//# sourceMappingURL=api-vulse-users-role.d.ts.map

package/dist/server/endpoints/api-vulse-users-role.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"api-vulse-users-role.d.ts","sourceRoot":"","sources":["../../../src/server/endpoints/api-vulse-users-role.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,OAAO,CAAA;AAGrC,eAAO,MAAM,IAAI,EAAE,QAGlB,CAAA;AAED,eAAO,MAAM,GAAG,EAAE,QAAe,CAAA"}

package/dist/server/endpoints/api-vulse-users-role.js

@@ -0,0 +1,6 @@
+import { withRuntime } from './with-runtime.js';
+export const POST = async ({ params, request }) => {
+    const rt = await withRuntime(request);
+    return rt.routes.users.setRole(request, params);
+};
+export const PUT = POST;

package/dist/server/endpoints/api-vulse-users.d.ts

@@ -0,0 +1,3 @@
+import type { APIRoute } from 'astro';
+export declare const GET: APIRoute;
+//# sourceMappingURL=api-vulse-users.d.ts.map

package/dist/server/endpoints/api-vulse-users.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"api-vulse-users.d.ts","sourceRoot":"","sources":["../../../src/server/endpoints/api-vulse-users.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,OAAO,CAAA;AAGrC,eAAO,MAAM,GAAG,EAAE,QAGjB,CAAA"}

package/dist/server/endpoints/api-vulse-users.js

@@ -0,0 +1,5 @@
+import { withRuntime } from './with-runtime.js';
+export const GET = async ({ request }) => {
+    const rt = await withRuntime(request);
+    return rt.routes.users.list(request);
+};

package/dist/server/endpoints/with-runtime.d.ts

@@ -0,0 +1,2 @@
+export declare function withRuntime(request: Request): Promise<import("../runtime.js").VulseRuntime>;
+//# sourceMappingURL=with-runtime.d.ts.map

package/dist/server/endpoints/with-runtime.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"with-runtime.d.ts","sourceRoot":"","sources":["../../../src/server/endpoints/with-runtime.ts"],"names":[],"mappings":"AAKA,wBAAsB,WAAW,CAAC,OAAO,EAAE,OAAO,iDAKjD"}

package/dist/server/endpoints/with-runtime.js

@@ -0,0 +1,10 @@
+import { getRuntimeEnv } from '../env.js';
+import { createDb } from '../../core/db.js';
+import { registryForRequest } from '../../core/blueprints/load.js';
+import { getRuntime } from '../runtime.js';
+export async function withRuntime(request) {
+    const env = getRuntimeEnv();
+    const db = createDb(env.DB);
+    const registry = await registryForRequest(db);
+    return getRuntime(env, registry, new URL(request.url).origin);
+}

package/dist/server/env.d.ts

@@ -0,0 +1,16 @@
+export interface RuntimeEnv {
+    DB: D1Database;
+    BUCKET?: R2Bucket;
+    FORM_QUEUE?: Queue;
+    BETTER_AUTH_SECRET: string;
+    BETTER_AUTH_URL?: string;
+    VULSE_PREVIEW_SECRET?: string;
+    /** When `"true"`, enables public sign-up (overrides DB setting). Useful for local playgrounds. */
+    VULSE_ALLOW_MEMBER_SIGNUP?: string;
+    CF_IMAGES_ACCOUNT_HASH?: string;
+    CF_IMAGES_TOKEN?: string;
+    EMAIL_FROM?: string;
+    EMAIL_API_TOKEN?: string;
+}
+export declare function getRuntimeEnv(): RuntimeEnv;
+//# sourceMappingURL=env.d.ts.map

package/dist/server/env.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"env.d.ts","sourceRoot":"","sources":["../../src/server/env.ts"],"names":[],"mappings":"AAEA,MAAM,WAAW,UAAU;IACzB,EAAE,EAAE,UAAU,CAAA;IACd,MAAM,CAAC,EAAE,QAAQ,CAAA;IACjB,UAAU,CAAC,EAAE,KAAK,CAAA;IAClB,kBAAkB,EAAE,MAAM,CAAA;IAC1B,eAAe,CAAC,EAAE,MAAM,CAAA;IACxB,oBAAoB,CAAC,EAAE,MAAM,CAAA;IAC7B,kGAAkG;IAClG,yBAAyB,CAAC,EAAE,MAAM,CAAA;IAClC,sBAAsB,CAAC,EAAE,MAAM,CAAA;IAC/B,eAAe,CAAC,EAAE,MAAM,CAAA;IACxB,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,eAAe,CAAC,EAAE,MAAM,CAAA;CACzB;AAED,wBAAgB,aAAa,IAAI,UAAU,CAK1C"}

package/dist/server/env.js

@@ -0,0 +1,9 @@
+import { env as cfEnv } from 'cloudflare:workers';
+export function getRuntimeEnv() {
+    const env = cfEnv;
+    if (!env.DB)
+        throw new Error('Vulse: D1 binding "DB" is missing. Add it to wrangler.toml.');
+    if (!env.BETTER_AUTH_SECRET)
+        throw new Error('Vulse: BETTER_AUTH_SECRET missing from wrangler.toml [vars].');
+    return env;
+}

package/dist/server/envelope.d.ts

@@ -0,0 +1,15 @@
+export interface OkEnvelope<T> {
+    ok: true;
+    data: T;
+}
+export interface FailEnvelope {
+    ok: false;
+    error: {
+        code: string;
+        message: string;
+        details?: unknown;
+    };
+}
+export declare function ok<T>(data: T, init?: ResponseInit): Response;
+export declare function fail(err: unknown): Response;
+//# sourceMappingURL=envelope.d.ts.map

package/dist/server/envelope.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"envelope.d.ts","sourceRoot":"","sources":["../../src/server/envelope.ts"],"names":[],"mappings":"AAEA,MAAM,WAAW,UAAU,CAAC,CAAC;IAAI,EAAE,EAAE,IAAI,CAAC;IAAC,IAAI,EAAE,CAAC,CAAA;CAAE;AACpD,MAAM,WAAW,YAAY;IAAG,EAAE,EAAE,KAAK,CAAC;IAAC,KAAK,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,OAAO,CAAA;KAAE,CAAA;CAAE;AAExG,wBAAgB,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,IAAI,CAAC,EAAE,YAAY,GAAG,QAAQ,CAE5D;AAED,wBAAgB,IAAI,CAAC,GAAG,EAAE,OAAO,GAAG,QAAQ,CAW3C"}

package/dist/server/envelope.js

@@ -0,0 +1,16 @@
+import { VulseError } from '../core/errors.js';
+export function ok(data, init) {
+    return Response.json({ ok: true, data }, init);
+}
+export function fail(err) {
+    if (VulseError.isVulseError(err)) {
+        return Response.json({
+            ok: false,
+            error: { code: err.code, message: err.message, ...(err.details ? { details: err.details } : {}) },
+        }, { status: err.status });
+    }
+    console.error('[vulse] internal error:', err);
+    return Response.json({
+        ok: false, error: { code: 'INTERNAL', message: 'Internal server error' },
+    }, { status: 500 });
+}

package/dist/server/forms/email.d.ts

@@ -0,0 +1,8 @@
+import { type EmailEnv } from '../email.js';
+export type FormEmailEnv = EmailEnv;
+export declare function sendFormEmail(env: FormEmailEnv, input: {
+    to: string;
+    subject: string;
+    body: string;
+}): Promise<void>;
+//# sourceMappingURL=email.d.ts.map

package/dist/server/forms/email.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"email.d.ts","sourceRoot":"","sources":["../../../src/server/forms/email.ts"],"names":[],"mappings":"AAAA,OAAO,EAAa,KAAK,QAAQ,EAAE,MAAM,aAAa,CAAA;AAEtD,MAAM,MAAM,YAAY,GAAG,QAAQ,CAAA;AAEnC,wBAAsB,aAAa,CACjC,GAAG,EAAE,YAAY,EACjB,KAAK,EAAE;IAAE,EAAE,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GACnD,OAAO,CAAC,IAAI,CAAC,CAGf"}

package/dist/server/forms/email.js

@@ -0,0 +1,6 @@
+import { sendEmail } from '../email.js';
+export async function sendFormEmail(env, input) {
+    const result = await sendEmail(env, input);
+    if (result === 'logged')
+        throw new Error('email_not_configured');
+}

package/dist/server/forms/process-submission.d.ts

@@ -0,0 +1,8 @@
+import type { FormProcessMessage } from './queue.js';
+import type { FormEmailEnv } from './email.js';
+export interface ProcessEnv extends FormEmailEnv {
+    DB: D1Database;
+}
+export declare function processSubmission(env: ProcessEnv, submissionId: string): Promise<void>;
+export declare function vulseFormQueue(batch: MessageBatch<FormProcessMessage>, env: ProcessEnv): Promise<void>;
+//# sourceMappingURL=process-submission.d.ts.map

package/dist/server/forms/process-submission.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"process-submission.d.ts","sourceRoot":"","sources":["../../../src/server/forms/process-submission.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAA;AACpD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,YAAY,CAAA;AAG9C,MAAM,WAAW,UAAW,SAAQ,YAAY;IAC9C,EAAE,EAAE,UAAU,CAAA;CACf;AAED,wBAAsB,iBAAiB,CAAC,GAAG,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAqE5F;AAED,wBAAsB,cAAc,CAClC,KAAK,EAAE,YAAY,CAAC,kBAAkB,CAAC,EACvC,GAAG,EAAE,UAAU,GACd,OAAO,CAAC,IAAI,CAAC,CAOf"}

package/dist/server/forms/process-submission.js

@@ -0,0 +1,75 @@
+import { createDb } from '../../core/db.js';
+import { FormsRepo, SubmissionsRepo } from '../../core/repos/forms.js';
+import { renderTemplate } from './templates.js';
+import { sendFormEmail } from './email.js';
+import { sendFormWebhook } from './webhook.js';
+import { runFormAfterProcessHooks, runFormBeforeProcessHooks } from '../plugins.js';
+export async function processSubmission(env, submissionId) {
+    const db = createDb(env.DB);
+    const forms = new FormsRepo(db);
+    const submissions = new SubmissionsRepo(db);
+    const submission = await submissions.findById(submissionId);
+    if (!submission)
+        return;
+    const formRow = await forms.findByHandle(submission.formHandle);
+    if (!formRow) {
+        await submissions.updateStatus(submissionId, 'failed', 'form_not_found');
+        return;
+    }
+    const def = formRow.definition;
+    const ctx = { form: def, submission, payload: submission.payload };
+    try {
+        await runFormBeforeProcessHooks(ctx, env);
+        const notifyEmails = def.settings.notifyEmails ?? [];
+        for (const email of notifyEmails) {
+            const body = renderTemplate('New submission for {{form.label}}\n\n{{email}}', ctx);
+            await sendFormEmail(env, { to: email, subject: `New ${def.label} submission`, body });
+        }
+        for (const action of def.actions) {
+            if (action.type === 'notify') {
+                for (const email of action.emails) {
+                    const body = renderTemplate(action.template ?? 'New submission', ctx);
+                    await sendFormEmail(env, { to: email, subject: `New ${def.label} submission`, body });
+                }
+            }
+            if (action.type === 'confirmation') {
+                const to = submission.payload[action.toField];
+                if (to && String(to).length > 0) {
+                    await sendFormEmail(env, {
+                        to: String(to),
+                        subject: renderTemplate(action.subject, ctx),
+                        body: renderTemplate(action.bodyTemplate, ctx),
+                    });
+                }
+            }
+            if (action.type === 'webhook') {
+                await sendFormWebhook(action.url, { form: def, submission, payload: submission.payload }, action.headers ?? {});
+            }
+        }
+        const conf = def.settings.confirmationEmail;
+        if (conf?.enabled && conf.toField) {
+            const to = submission.payload[conf.toField];
+            if (to && String(to).length > 0) {
+                await sendFormEmail(env, {
+                    to: String(to),
+                    subject: renderTemplate(conf.subject, ctx),
+                    body: renderTemplate(conf.bodyTemplate, ctx),
+                });
+            }
+        }
+        await runFormAfterProcessHooks(ctx, env);
+        await submissions.updateStatus(submissionId, 'processed');
+    }
+    catch (err) {
+        const message = err instanceof Error ? err.message : 'process_failed';
+        await submissions.updateStatus(submissionId, 'failed', message);
+    }
+}
+export async function vulseFormQueue(batch, env) {
+    for (const msg of batch.messages) {
+        if (msg.body.type === 'process_submission') {
+            await processSubmission(env, msg.body.submissionId);
+        }
+        msg.ack();
+    }
+}

package/dist/server/forms/queue.d.ts

@@ -0,0 +1,8 @@
+export interface FormProcessMessage {
+    type: 'process_submission';
+    submissionId: string;
+}
+export declare function enqueueFormProcess(queue: Queue | undefined, submissionId: string): Promise<void>;
+export declare function drainPendingProcess(): string[];
+export declare function __testResetPending(): void;
+//# sourceMappingURL=queue.d.ts.map

package/dist/server/forms/queue.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"queue.d.ts","sourceRoot":"","sources":["../../../src/server/forms/queue.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,oBAAoB,CAAA;IAC1B,YAAY,EAAE,MAAM,CAAA;CACrB;AAID,wBAAsB,kBAAkB,CAAC,KAAK,EAAE,KAAK,GAAG,SAAS,EAAE,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAOtG;AAED,wBAAgB,mBAAmB,IAAI,MAAM,EAAE,CAI9C;AAED,wBAAgB,kBAAkB,IAAI,IAAI,CAEzC"}

package/dist/server/forms/queue.js

@@ -0,0 +1,17 @@
+const pending = new Set();
+export async function enqueueFormProcess(queue, submissionId) {
+    const msg = { type: 'process_submission', submissionId };
+    if (queue) {
+        await queue.send(msg);
+        return;
+    }
+    pending.add(submissionId);
+}
+export function drainPendingProcess() {
+    const ids = [...pending];
+    pending.clear();
+    return ids;
+}
+export function __testResetPending() {
+    pending.clear();
+}

package/dist/server/forms/templates.d.ts

@@ -0,0 +1,9 @@
+import type { FormDefinition } from '../../core/forms/definition.js';
+import type { SubmissionRow } from '../../core/repos/forms.js';
+export interface TemplateContext {
+    form: FormDefinition;
+    submission: SubmissionRow;
+    payload: Record<string, unknown>;
+}
+export declare function renderTemplate(template: string, ctx: TemplateContext): string;
+//# sourceMappingURL=templates.d.ts.map

package/dist/server/forms/templates.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"templates.d.ts","sourceRoot":"","sources":["../../../src/server/forms/templates.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,gCAAgC,CAAA;AACpE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,2BAA2B,CAAA;AAE9D,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,cAAc,CAAA;IACpB,UAAU,EAAE,aAAa,CAAA;IACzB,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CACjC;AAED,wBAAgB,cAAc,CAAC,QAAQ,EAAE,MAAM,EAAE,GAAG,EAAE,eAAe,GAAG,MAAM,CAc7E"}

package/dist/server/forms/templates.js

@@ -0,0 +1,14 @@
+export function renderTemplate(template, ctx) {
+    const tokens = {
+        'form.label': ctx.form.label,
+        'submission.id': ctx.submission.id,
+        'submission.created_at': ctx.submission.createdAt.toISOString(),
+    };
+    for (const [key, value] of Object.entries(ctx.payload)) {
+        tokens[key] = value === null || value === undefined ? '' : String(value);
+    }
+    return template.replace(/\{\{([^}]+)\}\}/g, (_, key) => {
+        const trimmed = key.trim();
+        return tokens[trimmed] ?? '';
+    });
+}

package/dist/server/forms/webhook.d.ts

@@ -0,0 +1,2 @@
+export declare function sendFormWebhook(url: string, payload: unknown, headers?: Record<string, string>): Promise<void>;
+//# sourceMappingURL=webhook.d.ts.map

package/dist/server/forms/webhook.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"webhook.d.ts","sourceRoot":"","sources":["../../../src/server/forms/webhook.ts"],"names":[],"mappings":"AAAA,wBAAsB,eAAe,CACnC,GAAG,EAAE,MAAM,EACX,OAAO,EAAE,OAAO,EAChB,OAAO,GAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAM,GACnC,OAAO,CAAC,IAAI,CAAC,CAcf"}

package/dist/server/forms/webhook.js

@@ -0,0 +1,17 @@
+export async function sendFormWebhook(url, payload, headers = {}) {
+    const controller = new AbortController();
+    const timeout = setTimeout(() => controller.abort(), 5000);
+    try {
+        const res = await fetch(url, {
+            method: 'POST',
+            headers: { 'content-type': 'application/json', ...headers },
+            body: JSON.stringify(payload),
+            signal: controller.signal,
+        });
+        if (!res.ok)
+            throw new Error(`webhook failed: ${res.status}`);
+    }
+    finally {
+        clearTimeout(timeout);
+    }
+}

package/dist/server/handler.d.ts

@@ -0,0 +1,17 @@
+import { z } from 'astro/zod';
+import type { Auth } from './better-auth.js';
+import type { AuthContext, Role } from '../core/blueprints/types.js';
+export interface HandlerCtx<P, B> {
+    request: Request;
+    url: URL;
+    params: P;
+    body: B;
+    auth: AuthContext;
+}
+export interface HandlerOptions<P, B> {
+    params?: z.ZodType<P>;
+    body?: z.ZodType<B>;
+    requireRole?: Role[];
+}
+export declare function defineHandler<P = unknown, B = unknown, R = unknown>(auth: Auth, opts: HandlerOptions<P, B>, fn: (ctx: HandlerCtx<P, B>) => Promise<R>): (request: Request, rawParams?: Record<string, string>) => Promise<Response>;
+//# sourceMappingURL=handler.d.ts.map

package/dist/server/handler.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"handler.d.ts","sourceRoot":"","sources":["../../src/server/handler.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,WAAW,CAAA;AAC7B,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAA;AAC5C,OAAO,KAAK,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,6BAA6B,CAAA;AAIpE,MAAM,WAAW,UAAU,CAAC,CAAC,EAAE,CAAC;IAC9B,OAAO,EAAE,OAAO,CAAA;IAChB,GAAG,EAAE,GAAG,CAAA;IACR,MAAM,EAAE,CAAC,CAAA;IACT,IAAI,EAAE,CAAC,CAAA;IACP,IAAI,EAAE,WAAW,CAAA;CAClB;AAED,MAAM,WAAW,cAAc,CAAC,CAAC,EAAE,CAAC;IAClC,MAAM,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAA;IACrB,IAAI,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAA;IACnB,WAAW,CAAC,EAAE,IAAI,EAAE,CAAA;CACrB;AAED,wBAAgB,aAAa,CAAC,CAAC,GAAG,OAAO,EAAE,CAAC,GAAG,OAAO,EAAE,CAAC,GAAG,OAAO,EACjE,IAAI,EAAE,IAAI,EACV,IAAI,EAAE,cAAc,CAAC,CAAC,EAAE,CAAC,CAAC,EAC1B,EAAE,EAAE,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,OAAO,CAAC,CAAC,CAAC,IAE3B,SAAS,OAAO,EAAE,YAAW,MAAM,CAAC,MAAM,EAAE,MAAM,CAAM,KAAG,OAAO,CAAC,QAAQ,CAAC,CAwC3F"}

package/dist/server/handler.js

@@ -0,0 +1,45 @@
+import { z } from 'astro/zod';
+import { AccessDeniedError, ValidationError } from '../core/errors.js';
+import { fail, ok } from './envelope.js';
+export function defineHandler(auth, opts, fn) {
+    return async (request, rawParams = {}) => {
+        try {
+            const url = new URL(request.url);
+            let params = rawParams;
+            if (opts.params) {
+                const parsed = opts.params.safeParse(rawParams);
+                if (!parsed.success)
+                    throw new ValidationError('Invalid params', { issues: parsed.error.issues });
+                params = parsed.data;
+            }
+            let body = undefined;
+            if (opts.body && request.method !== 'GET' && request.method !== 'DELETE') {
+                const raw = await request.json().catch(() => undefined);
+                const parsed = opts.body.safeParse(raw);
+                if (!parsed.success)
+                    throw new ValidationError('Invalid body', { issues: parsed.error.issues });
+                body = parsed.data;
+            }
+            const session = await auth.api.getSession({ headers: request.headers });
+            const authCtx = session ? {
+                user: {
+                    id: session.user.id,
+                    email: session.user.email,
+                    role: session.user.role ?? 'member',
+                },
+            } : { user: null };
+            if (opts.requireRole && !authCtx.user)
+                throw new AccessDeniedError('Authentication required');
+            if (opts.requireRole && authCtx.user && !opts.requireRole.includes(authCtx.user.role)) {
+                throw new AccessDeniedError(`Requires role: ${opts.requireRole.join(' or ')}`);
+            }
+            const result = await fn({ request, url, params, body, auth: authCtx });
+            if (result instanceof Response)
+                return result;
+            return ok(result);
+        }
+        catch (err) {
+            return fail(err);
+        }
+    };
+}

package/dist/server/image-probe.d.ts

@@ -0,0 +1,6 @@
+/** Returns {width,height} from image headers without decoding the full file. */
+export declare function probeDimensions(buf: ArrayBuffer, mime: string): {
+    width: number;
+    height: number;
+} | null;
+//# sourceMappingURL=image-probe.d.ts.map

package/dist/server/image-probe.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"image-probe.d.ts","sourceRoot":"","sources":["../../src/server/image-probe.ts"],"names":[],"mappings":"AAAA,gFAAgF;AAChF,wBAAgB,eAAe,CAAC,GAAG,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,GAAG;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,CAiCxG"}

package/dist/server/image-probe.js

@@ -0,0 +1,38 @@
+/** Returns {width,height} from image headers without decoding the full file. */
+export function probeDimensions(buf, mime) {
+    const v = new DataView(buf);
+    if (mime === 'image/png') {
+        if (v.byteLength < 24)
+            return null;
+        return { width: v.getUint32(16), height: v.getUint32(20) };
+    }
+    if (mime === 'image/jpeg') {
+        let i = 2;
+        while (i < v.byteLength) {
+            if (v.getUint8(i) !== 0xff)
+                return null;
+            const marker = v.getUint8(i + 1);
+            const len = v.getUint16(i + 2);
+            if ((marker >= 0xc0 && marker <= 0xcf) && marker !== 0xc4 && marker !== 0xc8 && marker !== 0xcc) {
+                return { height: v.getUint16(i + 5), width: v.getUint16(i + 7) };
+            }
+            i += 2 + len;
+        }
+        return null;
+    }
+    if (mime === 'image/webp') {
+        if (v.byteLength < 30)
+            return null;
+        if (String.fromCharCode(v.getUint8(12), v.getUint8(13), v.getUint8(14), v.getUint8(15)) === 'VP8L') {
+            const b0 = v.getUint8(21);
+            const b1 = v.getUint8(22);
+            const b2 = v.getUint8(23);
+            const b3 = v.getUint8(24);
+            const width = 1 + (((b1 & 0x3f) << 8) | b0);
+            const height = 1 + (((b3 & 0x0f) << 10) | (b2 << 2) | ((b1 & 0xc0) >> 6));
+            return { width, height };
+        }
+        return null;
+    }
+    return null;
+}

package/dist/server/loader.d.ts

@@ -0,0 +1,10 @@
+import type { Loader } from 'astro/loaders';
+export interface VulseLoaderOptions {
+    collection: string;
+    locale?: string;
+}
+declare global {
+    var __VULSE_TEST_DB__: D1Database | undefined;
+}
+export declare function vulseLoader(opts: VulseLoaderOptions): Loader;
+//# sourceMappingURL=loader.d.ts.map

package/dist/server/loader.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"loader.d.ts","sourceRoot":"","sources":["../../src/server/loader.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,eAAe,CAAA;AAK3C,MAAM,WAAW,kBAAkB;IACjC,UAAU,EAAE,MAAM,CAAA;IAClB,MAAM,CAAC,EAAE,MAAM,CAAA;CAChB;AAED,OAAO,CAAC,MAAM,CAAC;IAEb,IAAI,iBAAiB,EAAE,UAAU,GAAG,SAAS,CAAA;CAC9C;AASD,wBAAgB,WAAW,CAAC,IAAI,EAAE,kBAAkB,GAAG,MAAM,CA+B5D"}

package/dist/server/loader.js

@@ -0,0 +1,42 @@
+import { createDb } from '../core/db.js';
+import { readLocalesConfig } from '../core/locales.js';
+import { EntriesRepo } from '../core/repos/entries.js';
+function resolveBinding(ctx) {
+    const c = ctx;
+    if (c._vulseTestBinding)
+        return c._vulseTestBinding;
+    if (globalThis.__VULSE_TEST_DB__)
+        return globalThis.__VULSE_TEST_DB__;
+    throw new Error('vulseLoader: no D1 binding available. See https://vulse.dev/docs/loader-binding');
+}
+export function vulseLoader(opts) {
+    return {
+        name: `vulse-loader-${opts.collection}`,
+        load: async (ctx) => {
+            const includeDrafts = ctx._vulseIncludeDrafts ?? false;
+            const db = createDb(resolveBinding(ctx));
+            const repo = new EntriesRepo(db);
+            const locale = opts.locale ?? (await readLocalesConfig(db)).defaultLocale;
+            const rows = await repo.list({
+                collection: opts.collection,
+                locale,
+                ...(includeDrafts ? {} : { status: 'published' }),
+            });
+            ctx.store.clear();
+            for (const r of rows) {
+                await ctx.store.set({
+                    id: r.id,
+                    digest: `v${r.version}`,
+                    data: {
+                        ...(r.content ?? {}),
+                        id: r.id,
+                        slug: r.slug,
+                        status: r.status,
+                        publishedAt: r.publishedAt?.toISOString() ?? null,
+                        updatedAt: r.updatedAt.toISOString(),
+                    },
+                });
+            }
+        },
+    };
+}

package/dist/server/plugins.d.ts

@@ -0,0 +1,17 @@
+import { type AuthUserCreateEvent, type AuthUserCreateInput, type AuthUserCreatedEvent, type FormAfterSubmitEvent, type FormBeforeSubmitEvent, type FormProcessEvent, type VulsePlugin } from '../core/plugins/definition.js';
+export declare function setVulsePlugins(plugins?: VulsePlugin[]): void;
+export declare function getVulsePlugins(): VulsePlugin[];
+export declare function __testResetVulsePlugins(): void;
+export declare function runFormBeforeSubmitHooks(event: FormBeforeSubmitEvent, env?: Record<string, unknown>): Promise<{
+    action: 'continue';
+    payload: Record<string, unknown>;
+} | {
+    action: 'drop';
+    reason?: string;
+}>;
+export declare function runFormAfterSubmitHooks(event: FormAfterSubmitEvent, env?: Record<string, unknown>): Promise<void>;
+export declare function runFormBeforeProcessHooks(event: FormProcessEvent, env?: Record<string, unknown>): Promise<void>;
+export declare function runFormAfterProcessHooks(event: FormProcessEvent, env?: Record<string, unknown>): Promise<void>;
+export declare function runAuthUserBeforeCreateHooks(event: AuthUserCreateEvent, env?: Record<string, unknown>): Promise<AuthUserCreateInput | false | undefined>;
+export declare function runAuthUserAfterCreateHooks(event: AuthUserCreatedEvent, env?: Record<string, unknown>): Promise<void>;
+//# sourceMappingURL=plugins.d.ts.map

package/dist/server/plugins.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"plugins.d.ts","sourceRoot":"","sources":["../../src/server/plugins.ts"],"names":[],"mappings":"AACA,OAAO,EAGL,KAAK,mBAAmB,EACxB,KAAK,mBAAmB,EACxB,KAAK,oBAAoB,EACzB,KAAK,oBAAoB,EACzB,KAAK,qBAAqB,EAE1B,KAAK,gBAAgB,EAGrB,KAAK,WAAW,EAEjB,MAAM,+BAA+B,CAAA;AAoBtC,wBAAgB,eAAe,CAAC,OAAO,GAAE,WAAW,EAAO,GAAG,IAAI,CAQjE;AAED,wBAAgB,eAAe,IAAI,WAAW,EAAE,CAE/C;AAED,wBAAgB,uBAAuB,IAAI,IAAI,CAE9C;AA+ED,wBAAsB,wBAAwB,CAC5C,KAAK,EAAE,qBAAqB,EAC5B,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC5B,OAAO,CAAC;IAAE,MAAM,EAAE,UAAU,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CAAE,GAAG;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,CAsBzG;AAED,wBAAsB,uBAAuB,CAC3C,KAAK,EAAE,oBAAoB,EAC3B,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC5B,OAAO,CAAC,IAAI,CAAC,CAEf;AAED,wBAAsB,yBAAyB,CAC7C,KAAK,EAAE,gBAAgB,EACvB,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC5B,OAAO,CAAC,IAAI,CAAC,CAIf;AAED,wBAAsB,wBAAwB,CAC5C,KAAK,EAAE,gBAAgB,EACvB,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC5B,OAAO,CAAC,IAAI,CAAC,CAEf;AAED,wBAAsB,4BAA4B,CAChD,KAAK,EAAE,mBAAmB,EAC1B,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC5B,OAAO,CAAC,mBAAmB,GAAG,KAAK,GAAG,SAAS,CAAC,CAuBlD;AAED,wBAAsB,2BAA2B,CAC/C,KAAK,EAAE,oBAAoB,EAC3B,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC5B,OAAO,CAAC,IAAI,CAAC,CAEf"}