@glw907/cairn-cms 0.3.1 → 0.5.0

package/dist/index.js

@@ -1,7 +1,8 @@
-// cairn-cms public API. Consumers import everything from 'cairn-cms'.
-export * from './auth';
+// cairn-cms public API. Consumers import content/email/github/adapter from 'cairn-cms';
+// auth (better-auth factory, guards, manage-editors) lives at the 'cairn-cms/auth' subpath.
 export * from './email';
 export * from './github';
 export * from './carta';
 export * from './content';
 export * from './adapter';
+export * from './render';

package/dist/render/glyph.d.ts

@@ -0,0 +1,6 @@
+import type { Element } from 'hast';
+/** A glyph name → SVG path-data map (the site owns the icon set). */
+export type IconSet = Record<string, string>;
+/** Inline SVG glyph as a real hast node: class ec-glyph, 256 viewBox, currentColor fill. */
+export declare function glyph(name: string, icons: IconSet): Element;
+//# sourceMappingURL=glyph.d.ts.map

package/dist/render/glyph.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"glyph.d.ts","sourceRoot":"","sources":["../../src/lib/render/glyph.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,MAAM,CAAC;AAEpC,qEAAqE;AACrE,MAAM,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;AAE7C,4FAA4F;AAC5F,wBAAgB,KAAK,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,GAAG,OAAO,CAM3D"}

package/dist/render/glyph.js

@@ -0,0 +1,5 @@
+import { s } from 'hastscript';
+/** Inline SVG glyph as a real hast node: class ec-glyph, 256 viewBox, currentColor fill. */
+export function glyph(name, icons) {
+    return s('svg', { className: ['ec-glyph'], viewBox: '0 0 256 256', fill: 'currentColor', ariaHidden: 'true' }, [s('path', { d: icons[name] })]);
+}

package/dist/render/index.d.ts

@@ -0,0 +1,6 @@
+export * from './registry';
+export * from './glyph';
+export * from './remark-directives';
+export * from './rehype-dispatch';
+export * from './pipeline';
+//# sourceMappingURL=index.d.ts.map

package/dist/render/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/lib/render/index.ts"],"names":[],"mappings":"AAGA,cAAc,YAAY,CAAC;AAC3B,cAAc,SAAS,CAAC;AACxB,cAAc,qBAAqB,CAAC;AACpC,cAAc,mBAAmB,CAAC;AAClC,cAAc,YAAY,CAAC"}

package/dist/render/index.js

@@ -0,0 +1,8 @@
+// cairn-cms render engine: a directive-driven markdown → HTML pipeline whose
+// component vocabulary is supplied by a site's component registry. The site owns the
+// component builders, class names, icon set, and CSS; the engine owns the machinery.
+export * from './registry';
+export * from './glyph';
+export * from './remark-directives';
+export * from './rehype-dispatch';
+export * from './pipeline';

package/dist/render/pipeline.d.ts

@@ -0,0 +1,16 @@
+import { type PluggableList } from 'unified';
+import type { ComponentRegistry } from './registry';
+export interface RendererOptions {
+    /** A site's per-index motion formula for the top-level rise stagger
+     *  (e.g. ecnordic's `(i) => '--rise:' + …`). Omit for no stagger. */
+    rise?: (idx: number) => string;
+}
+/** Compose a site's render pipeline from its component registry: directive syntax →
+ *  stamped markers → registry-built hast. Returns `renderMarkdown` plus the remark/
+ *  rehype plugin arrays (so the Carta editor preview can reuse the exact same set). */
+export declare function createRenderer(registry: ComponentRegistry, options?: RendererOptions): {
+    remarkPlugins: PluggableList;
+    rehypePlugins: PluggableList;
+    renderMarkdown: (content: string) => Promise<string>;
+};
+//# sourceMappingURL=pipeline.d.ts.map

package/dist/render/pipeline.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pipeline.d.ts","sourceRoot":"","sources":["../../src/lib/render/pipeline.ts"],"names":[],"mappings":"AAAA,OAAO,EAAW,KAAK,aAAa,EAAE,MAAM,SAAS,CAAC;AAUtD,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAEpD,MAAM,WAAW,eAAe;IAC/B;yEACqE;IACrE,IAAI,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,MAAM,CAAC;CAC/B;AAED;;uFAEuF;AACvF,wBAAgB,cAAc,CAAC,QAAQ,EAAE,iBAAiB,EAAE,OAAO,GAAE,eAAoB;;;8BAavD,MAAM,KAAG,OAAO,CAAC,MAAM,CAAC;EAEzD"}

package/dist/render/pipeline.js

@@ -0,0 +1,29 @@
+import { unified } from 'unified';
+import remarkParse from 'remark-parse';
+import remarkGfm from 'remark-gfm';
+import remarkDirective from 'remark-directive';
+import remarkRehype from 'remark-rehype';
+import rehypeRaw from 'rehype-raw';
+import rehypeSlug from 'rehype-slug';
+import rehypeStringify from 'rehype-stringify';
+import { remarkDirectiveStamp } from './remark-directives';
+import { rehypeDispatch } from './rehype-dispatch';
+/** Compose a site's render pipeline from its component registry: directive syntax →
+ *  stamped markers → registry-built hast. Returns `renderMarkdown` plus the remark/
+ *  rehype plugin arrays (so the Carta editor preview can reuse the exact same set). */
+export function createRenderer(registry, options = {}) {
+    const remarkPlugins = [remarkDirective, [remarkDirectiveStamp, registry]];
+    const rehypePlugins = [rehypeRaw, [rehypeDispatch, registry, options.rise], rehypeSlug];
+    const processor = unified()
+        .use(remarkParse)
+        .use(remarkGfm)
+        .use(remarkPlugins)
+        .use(remarkRehype, { allowDangerousHtml: true })
+        .use(rehypePlugins)
+        .use(rehypeStringify);
+    return {
+        remarkPlugins,
+        rehypePlugins,
+        renderMarkdown: async (content) => String(await processor.process(content)),
+    };
+}

package/dist/render/registry.d.ts

@@ -0,0 +1,28 @@
+import type { Element } from 'hast';
+/** A site component: how it inserts (editor) and how it renders (rehype). */
+export interface ComponentDef {
+    /** Directive name, e.g. 'card' (matches `:::card`). */
+    name: string;
+    /** Palette label. */
+    label: string;
+    /** Palette description. */
+    description: string;
+    /** Markdown scaffold inserted at the cursor by the editor palette. */
+    insertTemplate: string;
+    /** Build the final hast element from the stamped directive element. */
+    build: (node: Element, rise?: string) => Element;
+    /** Optional role→default-icon (e.g. `{ caution: 'warning' }`). */
+    defaultIconByRole?: Record<string, string>;
+}
+export interface ComponentRegistry {
+    defs: ComponentDef[];
+    names: string[];
+    get(name: string): ComponentDef | undefined;
+    defaultIcon(name: string, role?: string): string | undefined;
+}
+/** Build a registry from a site's component definitions. The single source the
+ *  render pipeline (directive stamp + rehype dispatch) and the editor palette read. */
+export declare function defineRegistry(input: {
+    components: ComponentDef[];
+}): ComponentRegistry;
+//# sourceMappingURL=registry.d.ts.map

package/dist/render/registry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"registry.d.ts","sourceRoot":"","sources":["../../src/lib/render/registry.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,MAAM,CAAC;AAEpC,6EAA6E;AAC7E,MAAM,WAAW,YAAY;IAC5B,uDAAuD;IACvD,IAAI,EAAE,MAAM,CAAC;IACb,qBAAqB;IACrB,KAAK,EAAE,MAAM,CAAC;IACd,2BAA2B;IAC3B,WAAW,EAAE,MAAM,CAAC;IACpB,sEAAsE;IACtE,cAAc,EAAE,MAAM,CAAC;IACvB,uEAAuE;IACvE,KAAK,EAAE,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,MAAM,KAAK,OAAO,CAAC;IACjD,kEAAkE;IAClE,iBAAiB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAC3C;AAED,MAAM,WAAW,iBAAiB;IACjC,IAAI,EAAE,YAAY,EAAE,CAAC;IACrB,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,GAAG,CAAC,IAAI,EAAE,MAAM,GAAG,YAAY,GAAG,SAAS,CAAC;IAC5C,WAAW,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAAC;CAC7D;AAED;uFACuF;AACvF,wBAAgB,cAAc,CAAC,KAAK,EAAE;IAAE,UAAU,EAAE,YAAY,EAAE,CAAA;CAAE,GAAG,iBAAiB,CAQvF"}

package/dist/render/registry.js

@@ -0,0 +1,11 @@
+/** Build a registry from a site's component definitions. The single source the
+ *  render pipeline (directive stamp + rehype dispatch) and the editor palette read. */
+export function defineRegistry(input) {
+    const byName = new Map(input.components.map((c) => [c.name, c]));
+    return {
+        defs: input.components,
+        names: input.components.map((c) => c.name),
+        get: (name) => byName.get(name),
+        defaultIcon: (name, role) => (role ? byName.get(name)?.defaultIconByRole?.[role] : undefined),
+    };
+}

package/dist/render/rehype-dispatch.d.ts

@@ -0,0 +1,24 @@
+import type { Root, Element, ElementContent } from 'hast';
+import type { ComponentRegistry } from './registry';
+export declare function isElement(node: ElementContent | undefined): node is Element;
+export declare function strProp(node: Element, name: string): string | undefined;
+/** Wrap a pre-built glyph in an ec-icon span; secondary role adds the modifier. */
+export declare function iconSpan(glyphEl: Element, role?: string): Element;
+/** A site's icon factory: turn a stamped icon name + role into a hast element. */
+export type MakeIcon = (name: string, role?: string) => Element;
+export declare function splitHead(node: Element, makeIcon?: MakeIcon): {
+    head: Element;
+    rest: ElementContent[];
+};
+/** Section wrapper: `<section class=…><div class="card-body">…</div></section>`,
+ *  with an optional inline rise style. */
+export declare function cardShell(classes: string[], rise: string | undefined, body: ElementContent[]): Element;
+/** Tag the first <ul> among children with `ec-grid` and strip its whitespace-only
+ *  text nodes so the bare list serializes without newlines. Returns that <ul>. */
+export declare function markFirstList(children: ElementContent[]): Element | undefined;
+/** Rehype transformer: dispatch each stamped element through its registry `build`
+ *  fn. Top-level primitives get a document-order rise stagger when `rise` is
+ *  supplied (a site's per-index motion formula); nested ones don't. Non-primitive
+ *  content (lede, intro paragraphs, the page-toc nav) passes through untouched. */
+export declare function rehypeDispatch(registry: ComponentRegistry, rise?: (idx: number) => string): (tree: Root) => void;
+//# sourceMappingURL=rehype-dispatch.d.ts.map

package/dist/render/rehype-dispatch.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"rehype-dispatch.d.ts","sourceRoot":"","sources":["../../src/lib/render/rehype-dispatch.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,cAAc,EAAc,MAAM,MAAM,CAAC;AAEtE,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAEpD,wBAAgB,SAAS,CAAC,IAAI,EAAE,cAAc,GAAG,SAAS,GAAG,IAAI,IAAI,OAAO,CAE3E;AAKD,wBAAgB,OAAO,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAGvE;AAED,mFAAmF;AACnF,wBAAgB,QAAQ,CAAC,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,MAAM,GAAG,OAAO,CAGjE;AAED,kFAAkF;AAClF,MAAM,MAAM,QAAQ,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,KAAK,OAAO,CAAC;AAMhE,wBAAgB,SAAS,CAAC,IAAI,EAAE,OAAO,EAAE,QAAQ,CAAC,EAAE,QAAQ,GAAG;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,IAAI,EAAE,cAAc,EAAE,CAAA;CAAE,CAYvG;AAED;0CAC0C;AAC1C,wBAAgB,SAAS,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,MAAM,GAAG,SAAS,EAAE,IAAI,EAAE,cAAc,EAAE,GAAG,OAAO,CAItG;AAED;kFACkF;AAClF,wBAAgB,aAAa,CAAC,QAAQ,EAAE,cAAc,EAAE,GAAG,OAAO,GAAG,SAAS,CAS7E;AAmBD;;;mFAGmF;AACnF,wBAAgB,cAAc,CAAC,QAAQ,EAAE,iBAAiB,EAAE,IAAI,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,MAAM,IACjF,MAAM,IAAI,UAUlB"}

package/dist/render/rehype-dispatch.js

@@ -0,0 +1,86 @@
+import { h } from 'hastscript';
+export function isElement(node) {
+    return !!node && node.type === 'element';
+}
+// hast Properties values are PropertyValue (string | number | boolean | array | null).
+// Directive markers (dataIcon/dataRole/dataPrimitive) are always stamped as strings;
+// this reads them back with that guarantee instead of casting at each call site.
+export function strProp(node, name) {
+    const value = node.properties?.[name];
+    return typeof value === 'string' ? value : undefined;
+}
+/** Wrap a pre-built glyph in an ec-icon span; secondary role adds the modifier. */
+export function iconSpan(glyphEl, role) {
+    const className = role === 'secondary' ? ['ec-icon', 'ec-icon-secondary'] : ['ec-icon'];
+    return h('span', { className }, [glyphEl]);
+}
+// Pull the section's <h2> out, retag it .card-title, and build the .ec-head row
+// (optional icon + heading). Returns the head plus the remaining body children.
+// `makeIcon` (site-supplied) turns the stamped data-icon into an element; omit it
+// for a head with no icon.
+export function splitHead(node, makeIcon) {
+    const children = node.children;
+    const i = children.findIndex((c) => isElement(c) && c.tagName === 'h2');
+    const h2 = children[i];
+    h2.properties = { ...h2.properties, className: ['card-title'] };
+    const rest = children.filter((_, j) => j !== i);
+    const icon = strProp(node, 'dataIcon');
+    const role = strProp(node, 'dataRole');
+    const headKids = [];
+    if (makeIcon && icon)
+        headKids.push(makeIcon(icon, role));
+    headKids.push(h2);
+    return { head: h('div', { className: ['ec-head'] }, headKids), rest };
+}
+/** Section wrapper: `<section class=…><div class="card-body">…</div></section>`,
+ *  with an optional inline rise style. */
+export function cardShell(classes, rise, body) {
+    const properties = { className: classes };
+    if (rise)
+        properties.style = rise;
+    return h('section', properties, [h('div', { className: ['card-body'] }, body)]);
+}
+/** Tag the first <ul> among children with `ec-grid` and strip its whitespace-only
+ *  text nodes so the bare list serializes without newlines. Returns that <ul>. */
+export function markFirstList(children) {
+    const ul = children.find((c) => isElement(c) && c.tagName === 'ul');
+    if (ul) {
+        ul.properties = { ...ul.properties, className: ['ec-grid'] };
+        ul.children = ul.children.filter((c) => !(c.type === 'text' && /^\s*$/.test(c.value)));
+    }
+    return ul;
+}
+// Recurse into a node's children, transforming any nested primitive sections
+// (a grid inside a card, panels inside a split) WITHOUT a rise stagger.
+function transformChildren(children, registry) {
+    return children.map((c) => {
+        if (isElement(c) && c.properties?.dataPrimitive)
+            return transformNode(c, registry);
+        if (isElement(c))
+            c.children = transformChildren(c.children, registry);
+        return c;
+    });
+}
+function transformNode(node, registry, rise) {
+    node.children = transformChildren(node.children, registry);
+    const name = strProp(node, 'dataPrimitive');
+    const def = name ? registry.get(name) : undefined;
+    return def ? def.build(node, rise) : node;
+}
+/** Rehype transformer: dispatch each stamped element through its registry `build`
+ *  fn. Top-level primitives get a document-order rise stagger when `rise` is
+ *  supplied (a site's per-index motion formula); nested ones don't. Non-primitive
+ *  content (lede, intro paragraphs, the page-toc nav) passes through untouched. */
+export function rehypeDispatch(registry, rise) {
+    return (tree) => {
+        let idx = 0;
+        tree.children = tree.children.map((child) => {
+            if (isElement(child) && child.properties?.dataPrimitive) {
+                return transformNode(child, registry, rise ? rise(idx++) : undefined);
+            }
+            if (isElement(child))
+                child.children = transformChildren(child.children, registry);
+            return child;
+        });
+    };
+}

package/dist/render/remark-directives.d.ts

@@ -0,0 +1,4 @@
+import type { Root } from 'mdast';
+import type { ComponentRegistry } from './registry';
+export declare function remarkDirectiveStamp(registry: ComponentRegistry): (tree: Root) => void;
+//# sourceMappingURL=remark-directives.d.ts.map

package/dist/render/remark-directives.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"remark-directives.d.ts","sourceRoot":"","sources":["../../src/lib/render/remark-directives.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAA8B,IAAI,EAAQ,MAAM,OAAO,CAAC;AAGpE,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAmCpD,wBAAgB,oBAAoB,CAAC,QAAQ,EAAE,iBAAiB,IAEvD,MAAM,IAAI,UA8BlB"}

package/dist/render/remark-directives.js

@@ -0,0 +1,74 @@
+import { visit } from 'unist-util-visit';
+// Reconstruct a directive's authored attribute block (`{#id .class key="value"}`).
+// Accidental prose directives carry none, so this is almost always empty.
+function serializeAttributes(attributes) {
+    if (!attributes)
+        return '';
+    const tokens = [];
+    for (const [key, value] of Object.entries(attributes)) {
+        if (value == null)
+            tokens.push(key);
+        else if (key === 'id')
+            tokens.push(`#${value}`);
+        else if (key === 'class')
+            for (const c of value.split(/\s+/).filter(Boolean))
+                tokens.push(`.${c}`);
+        else
+            tokens.push(`${key}="${value}"`);
+    }
+    return tokens.length ? `{${tokens.join(' ')}}` : '';
+}
+// The vocabulary is container-only (`:::name`). A text directive (`:name`) or
+// leaf directive (`::name`) is therefore always an accidental colon in prose
+// ("4:00", "9:30", "ratio 16:9") that micromark tokenized as a directive.
+// Restore it to its literal source text so prose renders verbatim.
+function restoreLiteral(node) {
+    const marker = node.type === 'leafDirective' ? '::' : ':';
+    const attrs = serializeAttributes(node.attributes);
+    if (node.children.length === 0) {
+        return [{ type: 'text', value: marker + node.name + attrs }];
+    }
+    const open = { type: 'text', value: `${marker}${node.name}[` };
+    const close = { type: 'text', value: `]${attrs}` };
+    return [open, ...node.children, close];
+}
+// Stamp each registered container directive with data-* markers carrying its
+// component name, icon, and role. No structure is built here; the rehype
+// dispatcher rewrites the marked elements once their children are hast.
+// Text and leaf directives are restored to literal text (accidental prose colons).
+export function remarkDirectiveStamp(registry) {
+    const known = new Set(registry.names);
+    return (tree) => {
+        visit(tree, 'containerDirective', (node) => {
+            if (!known.has(node.name))
+                return;
+            const attrs = node.attributes ?? {};
+            const role = attrs.role || undefined;
+            let icon = attrs.icon || undefined;
+            if (!icon && role)
+                icon = registry.defaultIcon(node.name, role);
+            const properties = { dataPrimitive: node.name };
+            if (icon)
+                properties.dataIcon = icon;
+            if (role)
+                properties.dataRole = role;
+            const data = node.data ?? (node.data = {});
+            data.hName = 'div';
+            data.hProperties = properties;
+        });
+        visit(tree, ['textDirective', 'leafDirective'], (node, index, parent) => {
+            if (!parent || index == null)
+                return;
+            const literal = restoreLiteral(node);
+            if (node.type === 'leafDirective') {
+                // Leaf directives sit at block level; wrap the restored text in a paragraph.
+                const paragraph = { type: 'paragraph', children: literal };
+                parent.children.splice(index, 1, paragraph);
+            }
+            else {
+                parent.children.splice(index, 1, ...literal);
+            }
+            return index;
+        });
+    };
+}

package/dist/sveltekit/index.d.ts

@@ -1,17 +1,8 @@
-import { type Cookies } from '@sveltejs/kit';
-import type { KVNamespace } from '@cloudflare/workers-types';
-import { type Editor } from '../auth';
-import { type EmailSender } from '../email';
+import type { CairnUser } from '../auth/guard';
 import { type RepoFile } from '../github';
 import { type CairnAdapter, type CairnField } from '../adapter';
-/** The `platform.env` bindings the admin routes read. All optional — the handlers guard. */
+/** The `platform.env` bindings the content routes read. All optional; the handlers guard. */
 export interface AdminEnv {
-    AUTH_KV?: KVNamespace;
-    MAGIC_LINK_SECRET?: string;
-    SESSION_SECRET?: string;
-    EMAIL?: EmailSender;
-    /** Overrides `url.origin` for the magic-link base (set in dev, unset in prod). */
-    PUBLIC_ORIGIN?: string;
     GITHUB_APP_ID?: string;
     GITHUB_APP_INSTALLATION_ID?: string;
     GITHUB_APP_PRIVATE_KEY_B64?: string;
@@ -22,20 +13,20 @@ interface PlatformEvent {
     };
 }
 export interface AdminLayoutData {
-    editor: Editor | null;
+    user: CairnUser | null;
     siteName: string;
     pathname: string;
 }
 /**
  * Branding + session for every admin page. `siteName` flows from the adapter without pulling
- * its plugin graph into client bundles — the import stays server-side in the layout load.
+ * its plugin graph into client bundles; the import stays server-side in the layout load.
  * `pathname` lets the shared shell highlight the active nav item without a `$app/*` import
  * (those kit virtual modules have no types outside a kit app, so they can't live in the
  * package); reading `event.url` here also opts the layout load into rerunning on navigation.
  */
 export declare function adminLayoutLoad(event: {
     locals: {
-        editor: Editor | null;
+        user: CairnUser | null;
     };
     url: URL;
 }, adapter: CairnAdapter): AdminLayoutData;
@@ -49,13 +40,6 @@ export interface AdminCollectionList {
 export declare function adminListLoad(event: PlatformEvent, adapter: CairnAdapter): Promise<{
     collections: AdminCollectionList[];
 }>;
-export interface LoginData {
-    sent: boolean;
-    error: string | null;
-}
-export declare function loginLoad(event: {
-    url: URL;
-}): LoginData;
 export interface EditData {
     type: string;
     id: string;
@@ -75,48 +59,26 @@ export declare function editLoad(event: PlatformEvent & {
     };
     url: URL;
 }, adapter: CairnAdapter): Promise<EditData>;
-export declare function authRequest(event: PlatformEvent & {
-    request: Request;
-    url: URL;
-}, adapter: CairnAdapter): Promise<never>;
-export declare function authCallback(event: PlatformEvent & {
-    url: URL;
-    cookies: Cookies;
-}): Promise<never>;
-export declare function logout(event: {
-    cookies: Cookies;
-}): never;
 export declare function saveCommit(event: PlatformEvent & {
     request: Request;
     locals: {
-        editor: Editor | null;
+        user: CairnUser | null;
     };
 }, adapter: CairnAdapter): Promise<never>;
-export interface AdminsData {
-    admins: Editor[];
-    /** Acting owner's email, so the UI can disable self-targeted remove/demote. */
-    self: string;
-    saved: boolean;
-    error: string | null;
-}
-/** List the allowlist for the manage-admins page. Owner-only. */
-export declare function adminsLoad(event: PlatformEvent & {
-    locals: {
-        editor: Editor | null;
+export interface HealthData {
+    ok: boolean;
+    checks: {
+        githubAppSigning: {
+            ok: boolean;
+            detail?: string;
+        };
     };
-    url: URL;
-}): Promise<AdminsData>;
-type AdminsActionEvent = PlatformEvent & {
-    request: Request;
-    locals: {
-        editor: Editor | null;
-    };
-};
-/** Add (or update) an allowlist entry. Owner-only. */
-export declare function addAdmin(event: AdminsActionEvent): Promise<never>;
-/** Remove an allowlist entry. Owner-only; owners can't remove themselves (anti-lockout). */
-export declare function removeAdmin(event: AdminsActionEvent): Promise<never>;
-/** Change an editor's role. Owner-only; owners can't demote themselves (anti-lockout). */
-export declare function setAdminRole(event: AdminsActionEvent): Promise<never>;
+}
+/**
+ * Deploy-time health check (M2): signs a dummy App JWT to prove the GitHub App key loads and
+ * the PKCS#1→PKCS#8 conversion still works, before an editor hits it on save. Behind the
+ * `/admin` guard (signed-in editors only); returns ok/fail with no secret in the body.
+ */
+export declare function healthLoad(event: PlatformEvent): Promise<HealthData>;
 export {};
 //# sourceMappingURL=index.d.ts.map

package/dist/sveltekit/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/lib/sveltekit/index.ts"],"names":[],"mappings":"AASA,OAAO,EAAmB,KAAK,OAAO,EAAE,MAAM,eAAe,CAAC;AAC9D,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,2BAA2B,CAAC;AAE7D,OAAO,EAUL,KAAK,MAAM,EAEZ,MAAM,SAAS,CAAC;AACjB,OAAO,EAAiB,KAAK,WAAW,EAAE,MAAM,UAAU,CAAC;AAC3D,OAAO,EAAwD,KAAK,QAAQ,EAAE,MAAM,WAAW,CAAC;AAEhG,OAAO,EAAuC,KAAK,YAAY,EAAE,KAAK,UAAU,EAAE,MAAM,YAAY,CAAC;AAErG,4FAA4F;AAC5F,MAAM,WAAW,QAAQ;IACvB,OAAO,CAAC,EAAE,WAAW,CAAC;IACtB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,KAAK,CAAC,EAAE,WAAW,CAAC;IACpB,kFAAkF;IAClF,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,0BAA0B,CAAC,EAAE,MAAM,CAAC;IACpC,0BAA0B,CAAC,EAAE,MAAM,CAAC;CACrC;AAED,UAAU,aAAa;IACrB,QAAQ,CAAC,EAAE;QAAE,GAAG,CAAC,EAAE,QAAQ,CAAA;KAAE,CAAC;CAC/B;AA6BD,MAAM,WAAW,eAAe;IAC9B,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED;;;;;;GAMG;AACH,wBAAgB,eAAe,CAC7B,KAAK,EAAE;IAAE,MAAM,EAAE;QAAE,MAAM,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,CAAC;IAAC,GAAG,EAAE,GAAG,CAAA;CAAE,EACtD,OAAO,EAAE,YAAY,GACpB,eAAe,CAEjB;AAID,MAAM,WAAW,mBAAmB;IAClC,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,QAAQ,EAAE,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,4FAA4F;AAC5F,wBAAsB,aAAa,CACjC,KAAK,EAAE,aAAa,EACpB,OAAO,EAAE,YAAY,GACpB,OAAO,CAAC;IAAE,WAAW,EAAE,mBAAmB,EAAE,CAAA;CAAE,CAAC,CAajD;AAID,MAAM,WAAW,SAAS;IACxB,IAAI,EAAE,OAAO,CAAC;IACd,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;CACtB;AAED,wBAAgB,SAAS,CAAC,KAAK,EAAE;IAAE,GAAG,EAAE,GAAG,CAAA;CAAE,GAAG,SAAS,CAKxD;AAID,MAAM,WAAW,QAAQ;IACvB,IAAI,EAAE,MAAM,CAAC;IACb,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,UAAU,EAAE,CAAC;IACrB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACrC,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,OAAO,CAAC;IACf,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;CACtB;AAED,wBAAsB,QAAQ,CAC5B,KAAK,EAAE,aAAa,GAAG;IAAE,MAAM,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,EAAE,EAAE,MAAM,CAAA;KAAE,CAAC;IAAC,GAAG,EAAE,GAAG,CAAA;CAAE,EACzE,OAAO,EAAE,YAAY,GACpB,OAAO,CAAC,QAAQ,CAAC,CAyBnB;AAID,wBAAsB,WAAW,CAC/B,KAAK,EAAE,aAAa,GAAG;IAAE,OAAO,EAAE,OAAO,CAAC;IAAC,GAAG,EAAE,GAAG,CAAA;CAAE,EACrD,OAAO,EAAE,YAAY,GACpB,OAAO,CAAC,KAAK,CAAC,CA8BhB;AAID,wBAAsB,YAAY,CAChC,KAAK,EAAE,aAAa,GAAG;IAAE,GAAG,EAAE,GAAG,CAAC;IAAC,OAAO,EAAE,OAAO,CAAA;CAAE,GACpD,OAAO,CAAC,KAAK,CAAC,CA4BhB;AAID,wBAAgB,MAAM,CAAC,KAAK,EAAE;IAAE,OAAO,EAAE,OAAO,CAAA;CAAE,GAAG,KAAK,CAGzD;AAID,wBAAsB,UAAU,CAC9B,KAAK,EAAE,aAAa,GAAG;IAAE,OAAO,EAAE,OAAO,CAAC;IAAC,MAAM,EAAE;QAAE,MAAM,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,CAAA;CAAE,EAC9E,OAAO,EAAE,YAAY,GACpB,OAAO,CAAC,KAAK,CAAC,CA0ChB;AAsBD,MAAM,WAAW,UAAU;IACzB,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,+EAA+E;IAC/E,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,OAAO,CAAC;IACf,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;CACtB;AAED,iEAAiE;AACjE,wBAAsB,UAAU,CAC9B,KAAK,EAAE,aAAa,GAAG;IAAE,MAAM,EAAE;QAAE,MAAM,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,CAAC;IAAC,GAAG,EAAE,GAAG,CAAA;CAAE,GACrE,OAAO,CAAC,UAAU,CAAC,CASrB;AAED,KAAK,iBAAiB,GAAG,aAAa,GAAG;IACvC,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,EAAE;QAAE,MAAM,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,CAAC;CACnC,CAAC;AAMF,sDAAsD;AACtD,wBAAsB,QAAQ,CAAC,KAAK,EAAE,iBAAiB,GAAG,OAAO,CAAC,KAAK,CAAC,CAWvE;AAED,4FAA4F;AAC5F,wBAAsB,WAAW,CAAC,KAAK,EAAE,iBAAiB,GAAG,OAAO,CAAC,KAAK,CAAC,CAU1E;AAED,0FAA0F;AAC1F,wBAAsB,YAAY,CAAC,KAAK,EAAE,iBAAiB,GAAG,OAAO,CAAC,KAAK,CAAC,CAe3E"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/lib/sveltekit/index.ts"],"names":[],"mappings":"AAYA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,eAAe,CAAC;AAC/C,OAAO,EAOL,KAAK,QAAQ,EACd,MAAM,WAAW,CAAC;AAEnB,OAAO,EAAuC,KAAK,YAAY,EAAE,KAAK,UAAU,EAAE,MAAM,YAAY,CAAC;AAErG,6FAA6F;AAC7F,MAAM,WAAW,QAAQ;IACvB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,0BAA0B,CAAC,EAAE,MAAM,CAAC;IACpC,0BAA0B,CAAC,EAAE,MAAM,CAAC;CACrC;AAED,UAAU,aAAa;IACrB,QAAQ,CAAC,EAAE;QAAE,GAAG,CAAC,EAAE,QAAQ,CAAA;KAAE,CAAC;CAC/B;AA2BD,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,SAAS,GAAG,IAAI,CAAC;IACvB,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED;;;;;;GAMG;AACH,wBAAgB,eAAe,CAC7B,KAAK,EAAE;IAAE,MAAM,EAAE;QAAE,IAAI,EAAE,SAAS,GAAG,IAAI,CAAA;KAAE,CAAC;IAAC,GAAG,EAAE,GAAG,CAAA;CAAE,EACvD,OAAO,EAAE,YAAY,GACpB,eAAe,CAEjB;AAID,MAAM,WAAW,mBAAmB;IAClC,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,QAAQ,EAAE,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,4FAA4F;AAC5F,wBAAsB,aAAa,CACjC,KAAK,EAAE,aAAa,EACpB,OAAO,EAAE,YAAY,GACpB,OAAO,CAAC;IAAE,WAAW,EAAE,mBAAmB,EAAE,CAAA;CAAE,CAAC,CAajD;AAID,MAAM,WAAW,QAAQ;IACvB,IAAI,EAAE,MAAM,CAAC;IACb,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,UAAU,EAAE,CAAC;IACrB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACrC,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,OAAO,CAAC;IACf,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;CACtB;AAED,wBAAsB,QAAQ,CAC5B,KAAK,EAAE,aAAa,GAAG;IAAE,MAAM,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,EAAE,EAAE,MAAM,CAAA;KAAE,CAAC;IAAC,GAAG,EAAE,GAAG,CAAA;CAAE,EACzE,OAAO,EAAE,YAAY,GACpB,OAAO,CAAC,QAAQ,CAAC,CAyBnB;AAID,wBAAsB,UAAU,CAC9B,KAAK,EAAE,aAAa,GAAG;IAAE,OAAO,EAAE,OAAO,CAAC;IAAC,MAAM,EAAE;QAAE,IAAI,EAAE,SAAS,GAAG,IAAI,CAAA;KAAE,CAAA;CAAE,EAC/E,OAAO,EAAE,YAAY,GACpB,OAAO,CAAC,KAAK,CAAC,CAoDhB;AAID,MAAM,WAAW,UAAU;IACzB,EAAE,EAAE,OAAO,CAAC;IACZ,MAAM,EAAE;QAAE,gBAAgB,EAAE;YAAE,EAAE,EAAE,OAAO,CAAC;YAAC,MAAM,CAAC,EAAE,MAAM,CAAA;SAAE,CAAA;KAAE,CAAC;CAChE;AAED;;;;GAIG;AACH,wBAAsB,UAAU,CAAC,KAAK,EAAE,aAAa,GAAG,OAAO,CAAC,UAAU,CAAC,CAS1E"}