@elytracms/core 0.0.6

package/dist/plugins/asset-storage.js

@@ -0,0 +1,104 @@
+/**
+ * Asset-storage adapters (EC-133). The CMS stores asset *metadata* (filename, size, content type)
+ * and points at bytes by an opaque storage key. A storage adapter owns where those bytes live —
+ * in-memory, a CDN base URL, S3, Convex file storage, etc. This interface is structurally
+ * compatible with `@elytracms/core/persistence`'s `BlobStorageAdapter`, so an adapter registered here can
+ * back the asset repository directly. Selection is pluggable and configurable.
+ */
+/** Registry of asset-storage adapters keyed by kind, with a selectable active backend. */
+export class AssetStorageRegistry {
+    byKind = new Map();
+    activeKind;
+    issues = [];
+    constructor(adapters = []) {
+        for (const adapter of adapters)
+            this.register(adapter);
+    }
+    register(adapter) {
+        if (this.byKind.has(adapter.kind)) {
+            this.issues.push({ code: 'duplicate', ref: adapter.kind, message: `Duplicate storage adapter "${adapter.kind}" — keeping the first registration.` });
+            return;
+        }
+        this.byKind.set(adapter.kind, adapter);
+        if (this.activeKind === undefined)
+            this.activeKind = adapter.kind;
+    }
+    has(kind) {
+        return this.byKind.has(kind);
+    }
+    get(kind) {
+        return this.byKind.get(kind);
+    }
+    list() {
+        return [...this.byKind.values()];
+    }
+    /** Select the active backend (the one the asset repository writes through). */
+    use(kind) {
+        if (!this.byKind.has(kind))
+            return false;
+        this.activeKind = kind;
+        return true;
+    }
+    /** The active adapter (first registered, unless changed via {@link use}). */
+    active() {
+        return this.activeKind ? this.byKind.get(this.activeKind) : undefined;
+    }
+    get size() {
+        return this.byKind.size;
+    }
+}
+/**
+ * In-memory asset storage (the reference adapter for tests and local inspection). Bytes persist
+ * for the lifetime of the instance.
+ */
+export class MemoryAssetStorage {
+    kind = 'memory';
+    title = 'In-memory';
+    description = 'Keeps bytes in process memory. For local development and tests.';
+    blobs = new Map();
+    async put(key, data) {
+        this.blobs.set(key, data);
+    }
+    async get(key) {
+        return this.blobs.get(key);
+    }
+    url(key) {
+        return `memory://assets/${key}`;
+    }
+    async has(key) {
+        return this.blobs.has(key);
+    }
+    async delete(key) {
+        this.blobs.delete(key);
+    }
+}
+/**
+ * A read-through CDN/base-URL adapter (example, EC-133). Bytes are served from an external base
+ * URL; this adapter resolves locators but does not own writes (uploads happen out of band). It
+ * demonstrates that a "new storage backend" is just another implementation of the interface.
+ */
+export class BaseUrlAssetStorage {
+    kind = 'plugin.base-url';
+    title = 'CDN base URL';
+    description = 'Resolves asset URLs against a configured CDN/base URL. Read-through.';
+    base;
+    constructor(baseUrl) {
+        this.base = baseUrl.replace(/\/$/, '');
+    }
+    async put() {
+        throw new Error('BaseUrlAssetStorage is read-through; upload bytes to the CDN out of band.');
+    }
+    async get() {
+        return undefined;
+    }
+    url(key) {
+        return `${this.base}/${key.replace(/^\//, '')}`;
+    }
+    async has() {
+        return false;
+    }
+    async delete() {
+        /* no-op: the CDN owns lifecycle */
+    }
+}
+//# sourceMappingURL=asset-storage.js.map

package/dist/plugins/asset-storage.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"asset-storage.js","sourceRoot":"","sources":["../../src/plugins/asset-storage.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAyBH,0FAA0F;AAC1F,MAAM,OAAO,oBAAoB;IACd,MAAM,GAAG,IAAI,GAAG,EAA+B,CAAA;IACxD,UAAU,CAAoB;IAC7B,MAAM,GAAgC,EAAE,CAAA;IAEjD,YAAY,WAA0C,EAAE;QACtD,KAAK,MAAM,OAAO,IAAI,QAAQ;YAAE,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAA;IACxD,CAAC;IAED,QAAQ,CAAC,OAA4B;QACnC,IAAI,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;YAClC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,GAAG,EAAE,OAAO,CAAC,IAAI,EAAE,OAAO,EAAE,8BAA8B,OAAO,CAAC,IAAI,qCAAqC,EAAE,CAAC,CAAA;YACpJ,OAAM;QACR,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,CAAA;QACtC,IAAI,IAAI,CAAC,UAAU,KAAK,SAAS;YAAE,IAAI,CAAC,UAAU,GAAG,OAAO,CAAC,IAAI,CAAA;IACnE,CAAC;IAED,GAAG,CAAC,IAAY;QACd,OAAO,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;IAC9B,CAAC;IAED,GAAG,CAAC,IAAY;QACd,OAAO,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;IAC9B,CAAC;IAED,IAAI;QACF,OAAO,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAA;IAClC,CAAC;IAED,+EAA+E;IAC/E,GAAG,CAAC,IAAY;QACd,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,OAAO,KAAK,CAAA;QACxC,IAAI,CAAC,UAAU,GAAG,IAAI,CAAA;QACtB,OAAO,IAAI,CAAA;IACb,CAAC;IAED,6EAA6E;IAC7E,MAAM;QACJ,OAAO,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;IACvE,CAAC;IAED,IAAI,IAAI;QACN,OAAO,IAAI,CAAC,MAAM,CAAC,IAAI,CAAA;IACzB,CAAC;CACF;AAED;;;GAGG;AACH,MAAM,OAAO,kBAAkB;IACpB,IAAI,GAAG,QAAQ,CAAA;IACf,KAAK,GAAG,WAAW,CAAA;IACnB,WAAW,GAAG,iEAAiE,CAAA;IACvE,KAAK,GAAG,IAAI,GAAG,EAAsB,CAAA;IAEtD,KAAK,CAAC,GAAG,CAAC,GAAW,EAAE,IAAgB;QACrC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,CAAA;IAC3B,CAAC;IACD,KAAK,CAAC,GAAG,CAAC,GAAW;QACnB,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;IAC5B,CAAC;IACD,GAAG,CAAC,GAAW;QACb,OAAO,mBAAmB,GAAG,EAAE,CAAA;IACjC,CAAC;IACD,KAAK,CAAC,GAAG,CAAC,GAAW;QACnB,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;IAC5B,CAAC;IACD,KAAK,CAAC,MAAM,CAAC,GAAW;QACtB,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAA;IACxB,CAAC;CACF;AAED;;;;GAIG;AACH,MAAM,OAAO,mBAAmB;IACrB,IAAI,GAAG,iBAAiB,CAAA;IACxB,KAAK,GAAG,cAAc,CAAA;IACtB,WAAW,GAAG,sEAAsE,CAAA;IAC5E,IAAI,CAAQ;IAE7B,YAAY,OAAe;QACzB,IAAI,CAAC,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAA;IACxC,CAAC;IAED,KAAK,CAAC,GAAG;QACP,MAAM,IAAI,KAAK,CAAC,2EAA2E,CAAC,CAAA;IAC9F,CAAC;IACD,KAAK,CAAC,GAAG;QACP,OAAO,SAAS,CAAA;IAClB,CAAC;IACD,GAAG,CAAC,GAAW;QACb,OAAO,GAAG,IAAI,CAAC,IAAI,IAAI,GAAG,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,EAAE,CAAA;IACjD,CAAC;IACD,KAAK,CAAC,GAAG;QACP,OAAO,KAAK,CAAA;IACd,CAAC;IACD,KAAK,CAAC,MAAM;QACV,mCAAmC;IACrC,CAAC;CACF"}

package/dist/plugins/component-package.d.ts

@@ -0,0 +1,54 @@
+import { z } from 'zod';
+import { ComponentRegistry } from '@elytracms/core/component-registry';
+import type { ComponentManifest } from '@elytracms/core/component-registry';
+/**
+ * Component package conventions (EC-130). A distributable component package bundles a set of
+ * component *manifests* (shape; real React implementations are wired in the consuming app/export —
+ * brief §4.2 "project-level components first"). Conventions:
+ *
+ * - **Name**: npm-style (`@vendor/name` or `name`).
+ * - **Version**: semver (`major.minor.patch`).
+ * - **Vendor namespace**: a short slug (e.g. `acme`). Every component id MUST be
+ *   `project.<vendor>.<ComponentName>` — installed third-party components are project-level
+ *   components, scoped by vendor so they validate cleanly and never collide with platform
+ *   primitives (`base.primitives.*`) or another vendor.
+ *
+ * `validateComponentPackage` checks these conventions and the manifests (via the canonical
+ * `ComponentRegistry`); `registerComponentPackage` registers a conforming package.
+ */
+/** Reserved id prefixes a vendor package must never use. */
+export declare const RESERVED_VENDORS: readonly ["base", "primitives", "project"];
+export declare const componentPackageMetaSchema: z.ZodObject<{
+    name: z.ZodString;
+    version: z.ZodString;
+    vendor: z.ZodString;
+    description: z.ZodOptional<z.ZodString>;
+    author: z.ZodOptional<z.ZodString>;
+    homepage: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
+export type ComponentPackageMeta = z.infer<typeof componentPackageMetaSchema>;
+/** A distributable component package (EC-130). */
+export interface ComponentPackage extends ComponentPackageMeta {
+    manifests: ComponentManifest[];
+}
+/** A structured validation issue for a component package. */
+export interface ComponentPackageIssue {
+    code: 'meta' | 'reserved' | 'namespace' | 'invalid-id' | 'duplicate' | 'empty';
+    severity: 'error' | 'warning';
+    message: string;
+    ref?: string;
+}
+/** The required component-id prefix for a vendor's package. */
+export declare function vendorPrefix(vendor: string): string;
+/**
+ * Validate a component package against the conventions (EC-130). Returns structured issues; never
+ * throws. A package with any `error` must not be registered.
+ */
+export declare function validateComponentPackage(pkg: ComponentPackage): ComponentPackageIssue[];
+/** True when a package validates with no errors. */
+export declare function isComponentPackageValid(pkg: ComponentPackage): boolean;
+/**
+ * Register a conforming component package into a registry (EC-130). Validates first; only registers
+ * the manifests when there are no errors. Returns the validation issues either way.
+ */
+export declare function registerComponentPackage(registry: ComponentRegistry, pkg: ComponentPackage): ComponentPackageIssue[];

package/dist/plugins/component-package.js

@@ -0,0 +1,92 @@
+import { z } from 'zod';
+import { ComponentRegistry, isPrimitive } from '@elytracms/core/component-registry';
+import { isValidComponentId } from '@elytracms/core/project-graph';
+/**
+ * Component package conventions (EC-130). A distributable component package bundles a set of
+ * component *manifests* (shape; real React implementations are wired in the consuming app/export —
+ * brief §4.2 "project-level components first"). Conventions:
+ *
+ * - **Name**: npm-style (`@vendor/name` or `name`).
+ * - **Version**: semver (`major.minor.patch`).
+ * - **Vendor namespace**: a short slug (e.g. `acme`). Every component id MUST be
+ *   `project.<vendor>.<ComponentName>` — installed third-party components are project-level
+ *   components, scoped by vendor so they validate cleanly and never collide with platform
+ *   primitives (`base.primitives.*`) or another vendor.
+ *
+ * `validateComponentPackage` checks these conventions and the manifests (via the canonical
+ * `ComponentRegistry`); `registerComponentPackage` registers a conforming package.
+ */
+/** Reserved id prefixes a vendor package must never use. */
+export const RESERVED_VENDORS = ['base', 'primitives', 'project'];
+export const componentPackageMetaSchema = z.object({
+    /** npm-style package name. */
+    name: z.string().regex(/^(@[a-z0-9][a-z0-9-]*\/)?[a-z0-9][a-z0-9-]*$/, 'must be an npm-style package name'),
+    /** Semantic version. */
+    version: z.string().regex(/^\d+\.\d+\.\d+$/, 'must be semver (major.minor.patch)'),
+    /** Vendor namespace slug — the `<vendor>` in `project.<vendor>.<Name>`. */
+    vendor: z.string().regex(/^[a-z][a-z0-9]*$/, 'must be a lowercase alphanumeric slug'),
+    description: z.string().optional(),
+    author: z.string().optional(),
+    homepage: z.string().url().optional(),
+});
+/** The required component-id prefix for a vendor's package. */
+export function vendorPrefix(vendor) {
+    return `project.${vendor}.`;
+}
+/**
+ * Validate a component package against the conventions (EC-130). Returns structured issues; never
+ * throws. A package with any `error` must not be registered.
+ */
+export function validateComponentPackage(pkg) {
+    const issues = [];
+    const meta = componentPackageMetaSchema.safeParse(pkg);
+    if (!meta.success) {
+        for (const i of meta.error.issues) {
+            issues.push({ code: 'meta', severity: 'error', message: `${i.path.join('.') || 'meta'}: ${i.message}` });
+        }
+        // Without valid meta we cannot derive the namespace; stop here.
+        return issues;
+    }
+    if (RESERVED_VENDORS.includes(pkg.vendor)) {
+        issues.push({ code: 'reserved', severity: 'error', ref: pkg.vendor, message: `Vendor "${pkg.vendor}" is reserved.` });
+    }
+    if (pkg.manifests.length === 0) {
+        issues.push({ code: 'empty', severity: 'warning', message: 'Component package declares no components.' });
+    }
+    const prefix = vendorPrefix(pkg.vendor);
+    const seen = new Set();
+    for (const manifest of pkg.manifests) {
+        if (isPrimitive(manifest.id)) {
+            issues.push({ code: 'reserved', severity: 'error', ref: manifest.id, message: `"${manifest.id}" uses the reserved base.primitives namespace.` });
+            continue;
+        }
+        if (!manifest.id.startsWith(prefix)) {
+            issues.push({ code: 'namespace', severity: 'error', ref: manifest.id, message: `"${manifest.id}" must be namespaced under "${prefix}".` });
+        }
+        if (!isValidComponentId(manifest.id)) {
+            issues.push({ code: 'invalid-id', severity: 'error', ref: manifest.id, message: `"${manifest.id}" is not a valid component id.` });
+        }
+        if (seen.has(manifest.id)) {
+            issues.push({ code: 'duplicate', severity: 'error', ref: manifest.id, message: `Duplicate component id "${manifest.id}".` });
+        }
+        seen.add(manifest.id);
+    }
+    return issues;
+}
+/** True when a package validates with no errors. */
+export function isComponentPackageValid(pkg) {
+    return !validateComponentPackage(pkg).some((i) => i.severity === 'error');
+}
+/**
+ * Register a conforming component package into a registry (EC-130). Validates first; only registers
+ * the manifests when there are no errors. Returns the validation issues either way.
+ */
+export function registerComponentPackage(registry, pkg) {
+    const issues = validateComponentPackage(pkg);
+    if (!issues.some((i) => i.severity === 'error')) {
+        for (const manifest of pkg.manifests)
+            registry.register(manifest);
+    }
+    return issues;
+}
+//# sourceMappingURL=component-package.js.map

package/dist/plugins/component-package.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"component-package.js","sourceRoot":"","sources":["../../src/plugins/component-package.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AACvB,OAAO,EAAE,iBAAiB,EAAE,WAAW,EAAE,MAAM,oCAAoC,CAAA;AAEnF,OAAO,EAAE,kBAAkB,EAAE,MAAM,+BAA+B,CAAA;AAElE;;;;;;;;;;;;;;GAcG;AAEH,4DAA4D;AAC5D,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,MAAM,EAAE,YAAY,EAAE,SAAS,CAAU,CAAA;AAE1E,MAAM,CAAC,MAAM,0BAA0B,GAAG,CAAC,CAAC,MAAM,CAAC;IACjD,8BAA8B;IAC9B,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,8CAA8C,EAAE,mCAAmC,CAAC;IAC3G,wBAAwB;IACxB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,iBAAiB,EAAE,oCAAoC,CAAC;IAClF,2EAA2E;IAC3E,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,kBAAkB,EAAE,uCAAuC,CAAC;IACrF,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAClC,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC7B,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;CACtC,CAAC,CAAA;AAgBF,+DAA+D;AAC/D,MAAM,UAAU,YAAY,CAAC,MAAc;IACzC,OAAO,WAAW,MAAM,GAAG,CAAA;AAC7B,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,wBAAwB,CAAC,GAAqB;IAC5D,MAAM,MAAM,GAA4B,EAAE,CAAA;IAE1C,MAAM,IAAI,GAAG,0BAA0B,CAAC,SAAS,CAAC,GAAG,CAAC,CAAA;IACtD,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;QAClB,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;YAClC,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,MAAM,KAAK,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAA;QAC1G,CAAC;QACD,gEAAgE;QAChE,OAAO,MAAM,CAAA;IACf,CAAC;IAED,IAAK,gBAAsC,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;QACjE,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,EAAE,GAAG,CAAC,MAAM,EAAE,OAAO,EAAE,WAAW,GAAG,CAAC,MAAM,gBAAgB,EAAE,CAAC,CAAA;IACvH,CAAC;IAED,IAAI,GAAG,CAAC,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC/B,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,OAAO,EAAE,2CAA2C,EAAE,CAAC,CAAA;IAC3G,CAAC;IAED,MAAM,MAAM,GAAG,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,CAAA;IACvC,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAA;IAC9B,KAAK,MAAM,QAAQ,IAAI,GAAG,CAAC,SAAS,EAAE,CAAC;QACrC,IAAI,WAAW,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAE,CAAC;YAC7B,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,CAAC,EAAE,EAAE,OAAO,EAAE,IAAI,QAAQ,CAAC,EAAE,gDAAgD,EAAE,CAAC,CAAA;YAChJ,SAAQ;QACV,CAAC;QACD,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;YACpC,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,CAAC,EAAE,EAAE,OAAO,EAAE,IAAI,QAAQ,CAAC,EAAE,+BAA+B,MAAM,IAAI,EAAE,CAAC,CAAA;QAC5I,CAAC;QACD,IAAI,CAAC,kBAAkB,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAE,CAAC;YACrC,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,CAAC,EAAE,EAAE,OAAO,EAAE,IAAI,QAAQ,CAAC,EAAE,gCAAgC,EAAE,CAAC,CAAA;QACpI,CAAC;QACD,IAAI,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAE,CAAC;YAC1B,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,CAAC,EAAE,EAAE,OAAO,EAAE,2BAA2B,QAAQ,CAAC,EAAE,IAAI,EAAE,CAAC,CAAA;QAC9H,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAA;IACvB,CAAC;IAED,OAAO,MAAM,CAAA;AACf,CAAC;AAED,oDAAoD;AACpD,MAAM,UAAU,uBAAuB,CAAC,GAAqB;IAC3D,OAAO,CAAC,wBAAwB,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAA;AAC3E,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,wBAAwB,CAAC,QAA2B,EAAE,GAAqB;IACzF,MAAM,MAAM,GAAG,wBAAwB,CAAC,GAAG,CAAC,CAAA;IAC5C,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,OAAO,CAAC,EAAE,CAAC;QAChD,KAAK,MAAM,QAAQ,IAAI,GAAG,CAAC,SAAS;YAAE,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAA;IACnE,CAAC;IACD,OAAO,MAAM,CAAA;AACf,CAAC"}

package/dist/plugins/data-sources.d.ts

@@ -0,0 +1,78 @@
+import { z } from 'zod';
+import type { BindingReference, JsonValue } from '@elytracms/core/project-graph';
+import type { BindingResolution, RepeaterItemContext } from '@elytracms/core/data-binding';
+/**
+ * Data-source adapters (EC-132). The product ships three built-in source kinds (rest/cms/convex).
+ * An adapter adds a *new* kind: a config schema and a `fetch` that returns a payload. Crucially the
+ * adapter only produces a payload — resolution still flows through the SAME binding model
+ * (`@elytracms/core/data-binding`'s `resolveBinding`), so REST, CMS, Convex, and plugin sources all use
+ * identical path tokens, modes, and broken-binding issues (brief §4.6 "data sources are uniform").
+ */
+/** The built-in source kinds an adapter must not shadow. */
+export declare const BUILTIN_SOURCE_KINDS: readonly ["rest", "cms", "convex"];
+/** A data-source adapter for a new source kind (EC-132). */
+export interface DataSourceAdapter<C extends JsonValue = JsonValue> {
+    /** Namespaced source kind, e.g. `plugin.graphql`. Must contain a dot; must not shadow a built-in. */
+    kind: string;
+    title: string;
+    description?: string;
+    /** Validates a source's per-kind config. */
+    configSchema: z.ZodType<C>;
+    /** Fetch the payload for a configured source. The result feeds the shared payload store. */
+    fetch: (config: C, ctx?: {
+        signal?: AbortSignal;
+    }) => Promise<JsonValue>;
+    /** A short human description of a configured source (for the source list). */
+    describe?: (config: C) => string;
+}
+/**
+ * Define a data-source adapter with full type-checking of its `configSchema`/`fetch`/`describe`
+ * against the config type `C`, then widen it to the registry's element type (the standard
+ * heterogeneous-registry erasure).
+ */
+export declare function defineDataSourceAdapter<C extends JsonValue>(adapter: DataSourceAdapter<C>): DataSourceAdapter;
+/** A source configured against an adapter kind (parallel to the built-in `DataSource` envelope). */
+export interface PluggableSource {
+    kind: string;
+    id: string;
+    label: string;
+    config: JsonValue;
+}
+/** A structured registration issue for the adapter registry. */
+export interface DataSourceRegistryIssue {
+    code: 'reserved' | 'namespace' | 'duplicate';
+    message: string;
+    ref: string;
+}
+/** True when a source kind follows the namespace rules (dotted, not a built-in). */
+export declare function isValidSourceKind(kind: string): boolean;
+/** Registry of data-source adapters keyed by kind. */
+export declare class DataSourceAdapterRegistry {
+    private readonly byKind;
+    readonly issues: DataSourceRegistryIssue[];
+    constructor(adapters?: Iterable<DataSourceAdapter>);
+    register(adapter: DataSourceAdapter): void;
+    has(kind: string): boolean;
+    get(kind: string): DataSourceAdapter | undefined;
+    list(): DataSourceAdapter[];
+    get size(): number;
+    /** Validate a source's config against its adapter. Returns issues; never throws. */
+    validateConfig(source: PluggableSource): {
+        code: string;
+        message: string;
+    }[];
+    /**
+     * Build a payload store by running each adapter source's `fetch` (EC-132). The output is keyed by
+     * source id — exactly the shape `resolveBinding` consumes — so plugin sources slot into the
+     * shared binding model with no special-casing. Unknown kinds and invalid configs are skipped.
+     */
+    buildPayloads(sources: readonly PluggableSource[], ctx?: {
+        signal?: AbortSignal;
+    }): Promise<Record<string, JsonValue>>;
+}
+/**
+ * Resolve a binding against adapter-produced payloads using the shared binding model (EC-132).
+ * This is the proof that a new source kind is a first-class citizen: the very same `resolveBinding`
+ * that serves rest/cms/convex resolves a plugin source's payload too.
+ */
+export declare function resolveViaAdapters(ref: BindingReference, sources: readonly PluggableSource[], registry: DataSourceAdapterRegistry, itemContext?: RepeaterItemContext): Promise<BindingResolution>;

package/dist/plugins/data-sources.js

@@ -0,0 +1,99 @@
+import { z } from 'zod';
+import { resolveBinding } from '@elytracms/core/data-binding';
+/**
+ * Data-source adapters (EC-132). The product ships three built-in source kinds (rest/cms/convex).
+ * An adapter adds a *new* kind: a config schema and a `fetch` that returns a payload. Crucially the
+ * adapter only produces a payload — resolution still flows through the SAME binding model
+ * (`@elytracms/core/data-binding`'s `resolveBinding`), so REST, CMS, Convex, and plugin sources all use
+ * identical path tokens, modes, and broken-binding issues (brief §4.6 "data sources are uniform").
+ */
+/** The built-in source kinds an adapter must not shadow. */
+export const BUILTIN_SOURCE_KINDS = ['rest', 'cms', 'convex'];
+/**
+ * Define a data-source adapter with full type-checking of its `configSchema`/`fetch`/`describe`
+ * against the config type `C`, then widen it to the registry's element type (the standard
+ * heterogeneous-registry erasure).
+ */
+export function defineDataSourceAdapter(adapter) {
+    return adapter;
+}
+/** True when a source kind follows the namespace rules (dotted, not a built-in). */
+export function isValidSourceKind(kind) {
+    if (BUILTIN_SOURCE_KINDS.includes(kind))
+        return false;
+    return /^[a-z][a-z0-9]*\.[a-z][a-z0-9]*$/i.test(kind);
+}
+/** Registry of data-source adapters keyed by kind. */
+export class DataSourceAdapterRegistry {
+    byKind = new Map();
+    issues = [];
+    constructor(adapters = []) {
+        for (const adapter of adapters)
+            this.register(adapter);
+    }
+    register(adapter) {
+        if (BUILTIN_SOURCE_KINDS.includes(adapter.kind)) {
+            this.issues.push({ code: 'reserved', ref: adapter.kind, message: `Source kind "${adapter.kind}" shadows a built-in kind.` });
+            return;
+        }
+        if (!isValidSourceKind(adapter.kind)) {
+            this.issues.push({ code: 'namespace', ref: adapter.kind, message: `Source kind "${adapter.kind}" must be namespaced (e.g. "plugin.graphql").` });
+            return;
+        }
+        if (this.byKind.has(adapter.kind)) {
+            this.issues.push({ code: 'duplicate', ref: adapter.kind, message: `Duplicate source kind "${adapter.kind}" — keeping the first registration.` });
+            return;
+        }
+        this.byKind.set(adapter.kind, adapter);
+    }
+    has(kind) {
+        return this.byKind.has(kind);
+    }
+    get(kind) {
+        return this.byKind.get(kind);
+    }
+    list() {
+        return [...this.byKind.values()];
+    }
+    get size() {
+        return this.byKind.size;
+    }
+    /** Validate a source's config against its adapter. Returns issues; never throws. */
+    validateConfig(source) {
+        const adapter = this.byKind.get(source.kind);
+        if (!adapter)
+            return [{ code: 'unknown-source-kind', message: `No adapter registered for source kind "${source.kind}".` }];
+        const parsed = adapter.configSchema.safeParse(source.config);
+        if (parsed.success)
+            return [];
+        return parsed.error.issues.map((i) => ({ code: 'invalid-config', message: `${i.path.join('.') || 'config'}: ${i.message}` }));
+    }
+    /**
+     * Build a payload store by running each adapter source's `fetch` (EC-132). The output is keyed by
+     * source id — exactly the shape `resolveBinding` consumes — so plugin sources slot into the
+     * shared binding model with no special-casing. Unknown kinds and invalid configs are skipped.
+     */
+    async buildPayloads(sources, ctx) {
+        const payloads = {};
+        for (const source of sources) {
+            const adapter = this.byKind.get(source.kind);
+            if (!adapter)
+                continue;
+            const parsed = adapter.configSchema.safeParse(source.config);
+            if (!parsed.success)
+                continue;
+            payloads[source.id] = await adapter.fetch(parsed.data, ctx);
+        }
+        return payloads;
+    }
+}
+/**
+ * Resolve a binding against adapter-produced payloads using the shared binding model (EC-132).
+ * This is the proof that a new source kind is a first-class citizen: the very same `resolveBinding`
+ * that serves rest/cms/convex resolves a plugin source's payload too.
+ */
+export async function resolveViaAdapters(ref, sources, registry, itemContext) {
+    const payloads = await registry.buildPayloads(sources);
+    return resolveBinding(ref, { payloads }, itemContext);
+}
+//# sourceMappingURL=data-sources.js.map

package/dist/plugins/data-sources.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"data-sources.js","sourceRoot":"","sources":["../../src/plugins/data-sources.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AAEvB,OAAO,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAA;AAG7D;;;;;;GAMG;AAEH,4DAA4D;AAC5D,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,MAAM,EAAE,KAAK,EAAE,QAAQ,CAAU,CAAA;AAgBtE;;;;GAIG;AACH,MAAM,UAAU,uBAAuB,CAAsB,OAA6B;IACxF,OAAO,OAAuC,CAAA;AAChD,CAAC;AAiBD,oFAAoF;AACpF,MAAM,UAAU,iBAAiB,CAAC,IAAY;IAC5C,IAAK,oBAA0C,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,OAAO,KAAK,CAAA;IAC5E,OAAO,mCAAmC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;AACvD,CAAC;AAED,sDAAsD;AACtD,MAAM,OAAO,yBAAyB;IACnB,MAAM,GAAG,IAAI,GAAG,EAA6B,CAAA;IACrD,MAAM,GAA8B,EAAE,CAAA;IAE/C,YAAY,WAAwC,EAAE;QACpD,KAAK,MAAM,OAAO,IAAI,QAAQ;YAAE,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAA;IACxD,CAAC;IAED,QAAQ,CAAC,OAA0B;QACjC,IAAK,oBAA0C,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;YACvE,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,GAAG,EAAE,OAAO,CAAC,IAAI,EAAE,OAAO,EAAE,gBAAgB,OAAO,CAAC,IAAI,4BAA4B,EAAE,CAAC,CAAA;YAC5H,OAAM;QACR,CAAC;QACD,IAAI,CAAC,iBAAiB,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;YACrC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,GAAG,EAAE,OAAO,CAAC,IAAI,EAAE,OAAO,EAAE,gBAAgB,OAAO,CAAC,IAAI,+CAA+C,EAAE,CAAC,CAAA;YAChJ,OAAM;QACR,CAAC;QACD,IAAI,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;YAClC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,GAAG,EAAE,OAAO,CAAC,IAAI,EAAE,OAAO,EAAE,0BAA0B,OAAO,CAAC,IAAI,qCAAqC,EAAE,CAAC,CAAA;YAChJ,OAAM;QACR,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,OAA4B,CAAC,CAAA;IAC7D,CAAC;IAED,GAAG,CAAC,IAAY;QACd,OAAO,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;IAC9B,CAAC;IAED,GAAG,CAAC,IAAY;QACd,OAAO,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;IAC9B,CAAC;IAED,IAAI;QACF,OAAO,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAA;IAClC,CAAC;IAED,IAAI,IAAI;QACN,OAAO,IAAI,CAAC,MAAM,CAAC,IAAI,CAAA;IACzB,CAAC;IAED,oFAAoF;IACpF,cAAc,CAAC,MAAuB;QACpC,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAA;QAC5C,IAAI,CAAC,OAAO;YAAE,OAAO,CAAC,EAAE,IAAI,EAAE,qBAAqB,EAAE,OAAO,EAAE,0CAA0C,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC,CAAA;QAC1H,MAAM,MAAM,GAAG,OAAO,CAAC,YAAY,CAAC,SAAS,CAAC,MAAM,CAAC,MAAM,CAAC,CAAA;QAC5D,IAAI,MAAM,CAAC,OAAO;YAAE,OAAO,EAAE,CAAA;QAC7B,OAAO,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,gBAAgB,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,QAAQ,KAAK,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAA;IAC/H,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,aAAa,CACjB,OAAmC,EACnC,GAA8B;QAE9B,MAAM,QAAQ,GAA8B,EAAE,CAAA;QAC9C,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;YAC7B,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAA;YAC5C,IAAI,CAAC,OAAO;gBAAE,SAAQ;YACtB,MAAM,MAAM,GAAG,OAAO,CAAC,YAAY,CAAC,SAAS,CAAC,MAAM,CAAC,MAAM,CAAC,CAAA;YAC5D,IAAI,CAAC,MAAM,CAAC,OAAO;gBAAE,SAAQ;YAC7B,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,GAAG,MAAM,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,GAAG,CAAC,CAAA;QAC7D,CAAC;QACD,OAAO,QAAQ,CAAA;IACjB,CAAC;CACF;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,GAAqB,EACrB,OAAmC,EACnC,QAAmC,EACnC,WAAiC;IAEjC,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,aAAa,CAAC,OAAO,CAAC,CAAA;IACtD,OAAO,cAAc,CAAC,GAAG,EAAE,EAAE,QAAQ,EAAE,EAAE,WAAW,CAAC,CAAA;AACvD,CAAC"}

package/dist/plugins/examples.d.ts

@@ -0,0 +1,47 @@
+import type { JsonValue } from '@elytracms/core/project-graph';
+import type { FieldTypePlugin } from './field-types';
+import type { DataSourceAdapter } from './data-sources';
+import type { ComponentPackage } from './component-package';
+import type { ProjectTemplate } from './templates';
+import type { Plugin } from './plugin';
+import { ExtensionRegistry } from './marketplace';
+/** A hex color field type. */
+export declare const colorFieldType: FieldTypePlugin;
+/** An integer star-rating (0–5) field type. */
+export declare const ratingFieldType: FieldTypePlugin;
+/** A URL-safe slug field type, with extra format validation. */
+export declare const slugFieldType: FieldTypePlugin;
+/** A static inline-JSON source — the simplest possible adapter, fully deterministic. */
+export declare const staticDataSourceAdapter: DataSourceAdapter;
+/** A transport function a GraphQL adapter calls (injected so the adapter stays testable). */
+export type GraphqlTransport = (req: {
+    endpoint: string;
+    query: string;
+    variables: Record<string, JsonValue>;
+}) => Promise<JsonValue>;
+/**
+ * Build a GraphQL data-source adapter (example, EC-132). The network transport is injected, so the
+ * adapter is deterministic in tests and provider-neutral in production. Its payload resolves
+ * through the shared binding model like any built-in source.
+ */
+export declare function createGraphqlAdapter(transport: GraphqlTransport): DataSourceAdapter;
+/** A conforming component package under the `acme` vendor namespace (EC-130). */
+export declare const acmeBlocksPackage: ComponentPackage;
+/** A private component package (used by the private-registry example). */
+export declare const labsInternalPackage: ComponentPackage;
+/** A community marketing template wrapping the Aurora starter kit. */
+export declare const auroraTemplate: ProjectTemplate;
+/** A community docs template wrapping the Northwind starter kit. */
+export declare const northwindTemplate: ProjectTemplate;
+/** A sampler plugin touching every extensibility surface. */
+export declare const acmeSuitePlugin: Plugin;
+/** A single-surface plugin: just the color field type. */
+export declare const colorFieldPlugin: Plugin;
+/** A private plugin available only behind the private registry token. */
+export declare const labsInternalPlugin: Plugin;
+/** The public marketplace catalogue. */
+export declare const publicMarketplace: ExtensionRegistry;
+/** The token granting access to the private registry. */
+export declare const PRIVATE_REGISTRY_TOKEN = "acme-internal-token";
+/** A private registry, gated behind {@link PRIVATE_REGISTRY_TOKEN}. */
+export declare const privateMarketplace: ExtensionRegistry;