@glw907/cairn-cms 0.4.0 → 0.5.1

package/dist/components/ComponentPalette.svelte

@@ -0,0 +1,34 @@
+<script lang="ts">
+  // The insert-component palette (R10). Reads the site's component registry (R10a) and inserts a
+  // scaffolded directive snippet at the cursor via the `insert` callback. DaisyUI dropdown so it
+  // matches the Warm Stone admin theme. Shown only when the site supplies a non-empty registry; a
+  // plain-markdown site (e.g. 907.life) passes no registry and this renders nothing.
+  import type { ComponentRegistry } from '../render';
+
+  let { registry, insert }: { registry?: ComponentRegistry; insert: (template: string) => void } =
+    $props();
+
+  const defs = $derived(registry?.defs ?? []);
+</script>
+
+{#if defs.length > 0}
+  <div class="dropdown">
+    <button type="button" tabindex="0" class="btn btn-sm btn-ghost">Insert ▾</button>
+    <ul
+      class="dropdown-content menu z-10 mt-1 w-72 rounded-box border border-base-300 bg-base-100 p-2 shadow"
+    >
+      {#each defs as def (def.name)}
+        <li>
+          <button
+            type="button"
+            class="flex flex-col items-start gap-0.5"
+            onclick={() => insert(def.insertTemplate)}
+          >
+            <span class="font-medium">{def.label}</span>
+            <span class="text-xs opacity-60">{def.description}</span>
+          </button>
+        </li>
+      {/each}
+    </ul>
+  </div>
+{/if}

package/dist/components/ComponentPalette.svelte.d.ts

@@ -0,0 +1,9 @@
+import type { ComponentRegistry } from '../render';
+type $$ComponentProps = {
+    registry?: ComponentRegistry;
+    insert: (template: string) => void;
+};
+declare const ComponentPalette: import("svelte").Component<$$ComponentProps, {}, "">;
+type ComponentPalette = ReturnType<typeof ComponentPalette>;
+export default ComponentPalette;
+//# sourceMappingURL=ComponentPalette.svelte.d.ts.map

package/dist/components/ComponentPalette.svelte.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ComponentPalette.svelte.d.ts","sourceRoot":"","sources":["../../src/lib/components/ComponentPalette.svelte.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,WAAW,CAAC;AAElD,KAAK,gBAAgB,GAAI;IAAE,QAAQ,CAAC,EAAE,iBAAiB,CAAC;IAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,IAAI,CAAA;CAAE,CAAC;AAgC/F,QAAA,MAAM,gBAAgB,sDAAwC,CAAC;AAC/D,KAAK,gBAAgB,GAAG,UAAU,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAC5D,eAAe,gBAAgB,CAAC"}

package/dist/components/ConfirmPage.svelte

@@ -1,6 +1,6 @@
 <script lang="ts">
-  // The scanner-safe confirm surface (C2). A GET renders this static page — nothing is consumed.
-  // The token rides in a hidden field; only the explicit form POST (the route's default action →
+  // The scanner-safe confirm surface (C2). A GET renders this static page and consumes nothing.
+  // The token rides in a hidden field; only the explicit form POST (the route's default action,
   // confirmSignIn) verifies it. Mail scanners GET URLs but don't submit forms, so prefetch can't
   // burn the link. JS-free by design.
   interface Props {

package/dist/components/EditPage.svelte

@@ -1,33 +1,55 @@
 <script lang="ts">
-  // The editor: a per-field frontmatter form (driven by the adapter's `fields`) plus a Carta
-  // markdown editor whose preview runs the site's plugin set (passed as `preview`). Data comes
-  // from `editLoad` merged with `adminLayoutLoad` (siteName); `carta-md` is a peer dependency.
+  // The editor: a per-field frontmatter form (driven by the adapter's `fields`) beside a Carta
+  // markdown editor whose preview runs the site plugin set (`preview`). Content-forward layout:
+  // the editor is the prominent column, frontmatter sits in a side column (R4). A cairn control
+  // row hosts the insert-component palette (R10) and the preview toggle (R12); basic formatting
+  // stays on Carta's built-in toolbar (R11). Data comes from `editLoad` merged with the layout
+  // load (siteName); `carta-md` is a peer dependency.
   import { onMount } from 'svelte';
   import { Carta, MarkdownEditor } from 'carta-md';
   import 'carta-md/default.css';
   import { previewCartaOptions, type PreviewPlugins } from '../carta';
   import type { CairnField } from '../adapter';
+  import type { ComponentRegistry } from '../render';
   import type { EditData } from '../sveltekit';
+  import { cartaEditor } from '../editor';
+  import { dateInputValue } from '../frontmatter';
+  import ComponentPalette from './ComponentPalette.svelte';
 
-  let { data, preview }: { data: EditData & { siteName: string }; preview: PreviewPlugins } = $props();
+  let {
+    data,
+    preview,
+    registry,
+  }: { data: EditData & { siteName: string }; preview: PreviewPlugins; registry?: ComponentRegistry } =
+    $props();
 
   // Body is editable state; the Carta editor's preview runs the exact site plugin set, so it
   // matches the live page. A hidden input carries the current value into the form.
-  // svelte-ignore state_referenced_locally — seeding from the initial load is intended.
+  // svelte-ignore state_referenced_locally (seeding from the initial load is intended)
   let body = $state(data.body);
 
-  // svelte-ignore state_referenced_locally — the preview plugin set is fixed for the load.
+  // svelte-ignore state_referenced_locally (the preview plugin set is fixed for the load)
   const carta = new Carta(previewCartaOptions(preview));
+  const editor = cartaEditor(() => carta);
 
-  // Carta's MarkdownEditor must not render on the worker (it pulls Shiki). onMount fires only
-  // in the browser, so SSR renders the plain textarea and the client swaps in the editor —
-  // the kit-free equivalent of the per-site route's `$app/environment` `browser` guard.
+  // Carta's MarkdownEditor must not render on the worker (it pulls Shiki). onMount fires only in
+  // the browser, so SSR renders the plain textarea and the client swaps in the editor.
   let mounted = $state(false);
+
+  // Preview toggle (R12), persisted per user. 'split' shows the live preview beside the editor;
+  // 'tabs' foregrounds the editor full width with the preview one click away.
+  let mode = $state<'split' | 'tabs'>('split');
   onMount(() => {
     mounted = true;
+    const saved = localStorage.getItem('cairn-admin:preview');
+    if (saved === 'tabs' || saved === 'split') mode = saved;
   });
+  function togglePreview() {
+    mode = mode === 'split' ? 'tabs' : 'split';
+    localStorage.setItem('cairn-admin:preview', mode);
+  }
 
-  // svelte-ignore state_referenced_locally — form defaults from the initial load.
+  // svelte-ignore state_referenced_locally (form defaults from the initial load)
   const fm = data.frontmatter as Record<string, unknown>;
 
   function fmString(key: string): string {
@@ -39,31 +61,58 @@
   function fmFreeTags(key: string): string {
     return Array.isArray(fm[key]) ? (fm[key] as unknown[]).map(String).join(', ') : '';
   }
+
+  // Kind-aware header: a story leads with its date; a page leads with its slug/path.
+  const subtitle = $derived(
+    data.kind === 'page'
+      ? `Page · ${data.path}`
+      : `${data.label} · ${dateInputValue(fm['date']) || data.path}`,
+  );
 </script>
 
 <svelte:head>
-  <title>Edit {data.title} · {data.siteName} CMS</title>
+  <title>{data.isNew ? `New ${data.label} entry` : `Edit ${data.title}`} · {data.siteName} CMS</title>
 </svelte:head>
 
 <div class="flex items-center justify-between gap-4">
   <div>
-    <a href="/admin" class="text-sm opacity-70 hover:underline">← Back</a>
-    <h1 class="mt-1 text-2xl font-bold">{data.title}</h1>
-    <p class="text-sm opacity-60">{data.label} · {data.path}</p>
+    <a href="/admin/{data.type}" class="text-sm opacity-70 hover:underline">← Back to {data.label}</a>
+    <h1 class="mt-1 text-2xl font-bold">{data.isNew ? `New ${data.label} entry` : data.title}</h1>
+    <p class="text-sm opacity-60">{subtitle}</p>
   </div>
 </div>
 
 {#if data.saved}
-  <div class="alert alert-success mt-6"><span>Saved — committed to main; the site will redeploy.</span></div>
+  <div class="alert alert-success mt-6"><span>Saved. Committed to main; the site will redeploy.</span></div>
 {:else if data.error}
   <div class="alert alert-error mt-6"><span>{data.error}</span></div>
 {/if}
 
-<form method="POST" action="/admin/save" class="mt-6 flex flex-col gap-5">
+<form method="POST" action="/admin/save" class="mt-6 flex flex-col gap-5 lg:grid lg:grid-cols-[1fr_20rem] lg:items-start">
   <input type="hidden" name="type" value={data.type} />
   <input type="hidden" name="id" value={data.id} />
+  {#if data.isNew}<input type="hidden" name="new" value="1" />{/if}
+
+  <!-- Editor column (content-forward: first and widest) -->
+  <div class="flex flex-col gap-3 lg:order-1">
+    <div class="flex items-center justify-between gap-2">
+      <ComponentPalette {registry} insert={(template) => editor.insertComponent(template)} />
+      <button type="button" class="btn btn-sm btn-ghost" onclick={togglePreview}>
+        {mode === 'split' ? 'Hide preview' : 'Show preview'}
+      </button>
+    </div>
+    <div class="rounded-box border border-base-300 bg-base-100 p-2">
+      <input type="hidden" name="body" value={body} />
+      {#if mounted}
+        <MarkdownEditor {carta} bind:value={body} {mode} />
+      {:else}
+        <textarea bind:value={body} rows="20" class="textarea w-full font-mono"></textarea>
+      {/if}
+    </div>
+  </div>
 
-  <fieldset class="grid gap-4 rounded-box border border-base-300 bg-base-100 p-6">
+  <!-- Frontmatter side column -->
+  <fieldset class="grid gap-4 rounded-box border border-base-300 bg-base-100 p-6 lg:order-2">
     {#each data.fields as field (field.name)}
       {#if field.type === 'text' || field.type === 'date'}
         <label class="flex flex-col gap-1">
@@ -72,7 +121,7 @@
             type={field.type === 'date' ? 'date' : 'text'}
             name={field.name}
             required={field.required}
-            value={fmString(field.name)}
+            value={field.type === 'date' ? dateInputValue(fm[field.name]) : fmString(field.name)}
             class="input w-full"
           />
         </label>
@@ -108,18 +157,7 @@
         </label>
       {/if}
     {/each}
-  </fieldset>
-
-  <div class="rounded-box border border-base-300 bg-base-100 p-2">
-    <input type="hidden" name="body" value={body} />
-    {#if mounted}
-      <MarkdownEditor {carta} bind:value={body} mode="tabs" />
-    {:else}
-      <textarea bind:value={body} rows="20" class="textarea w-full font-mono"></textarea>
-    {/if}
-  </div>
 
-  <div class="flex justify-end">
-    <button type="submit" class="btn btn-primary">Save &amp; commit</button>
-  </div>
+    <button type="submit" class="btn btn-primary mt-2">{data.isNew ? 'Create & commit' : 'Save & commit'}</button>
+  </fieldset>
 </form>

package/dist/components/EditPage.svelte.d.ts

@@ -1,11 +1,13 @@
 import 'carta-md/default.css';
 import { type PreviewPlugins } from '../carta';
+import type { ComponentRegistry } from '../render';
 import type { EditData } from '../sveltekit';
 type $$ComponentProps = {
     data: EditData & {
         siteName: string;
     };
     preview: PreviewPlugins;
+    registry?: ComponentRegistry;
 };
 declare const EditPage: import("svelte").Component<$$ComponentProps, {}, "">;
 type EditPage = ReturnType<typeof EditPage>;

package/dist/components/EditPage.svelte.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"EditPage.svelte.d.ts","sourceRoot":"","sources":["../../src/lib/components/EditPage.svelte.ts"],"names":[],"mappings":"AAQA,OAAO,sBAAsB,CAAC;AAC9B,OAAO,EAAuB,KAAK,cAAc,EAAE,MAAM,UAAU,CAAC;AAEpE,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,cAAc,CAAC;AAE5C,KAAK,gBAAgB,GAAI;IAAE,IAAI,EAAE,QAAQ,GAAG;QAAE,QAAQ,EAAE,MAAM,CAAA;KAAE,CAAC;IAAC,OAAO,EAAE,cAAc,CAAA;CAAE,CAAC;AAwH7F,QAAA,MAAM,QAAQ,sDAAwC,CAAC;AACvD,KAAK,QAAQ,GAAG,UAAU,CAAC,OAAO,QAAQ,CAAC,CAAC;AAC5C,eAAe,QAAQ,CAAC"}
+{"version":3,"file":"EditPage.svelte.d.ts","sourceRoot":"","sources":["../../src/lib/components/EditPage.svelte.ts"],"names":[],"mappings":"AAWA,OAAO,sBAAsB,CAAC;AAC9B,OAAO,EAAuB,KAAK,cAAc,EAAE,MAAM,UAAU,CAAC;AAEpE,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,WAAW,CAAC;AACnD,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,cAAc,CAAC;AAK5C,KAAK,gBAAgB,GAAI;IAAE,IAAI,EAAE,QAAQ,GAAG;QAAE,QAAQ,EAAE,MAAM,CAAA;KAAE,CAAC;IAAC,OAAO,EAAE,cAAc,CAAC;IAAC,QAAQ,CAAC,EAAE,iBAAiB,CAAA;CAAE,CAAC;AA8J3H,QAAA,MAAM,QAAQ,sDAAwC,CAAC;AACvD,KAAK,QAAQ,GAAG,UAAU,CAAC,OAAO,QAAQ,CAAC,CAAC;AAC5C,eAAe,QAAQ,CAAC"}

package/dist/components/LoginPage.svelte

@@ -1,13 +1,13 @@
 <script lang="ts">
   // The magic-link sign-in page. Requests a link via the better-auth client (client-side, same
-  // origin). To avoid enumeration the UI shows the SAME neutral copy whether or not the email is
-  // on the allowlist — the server only emails actual editors (see auth/config.ts send gate).
+  // origin). To avoid enumeration the UI shows the same neutral copy whether or not the email is
+  // on the allowlist. The server only emails actual editors (see auth/config.ts send gate).
   import { createAuthClient } from 'better-auth/svelte';
   import { magicLinkClient } from 'better-auth/client/plugins';
 
   // The browser client lives in the one component that needs it (requesting a link). Sign-out
-  // and editor management go through server endpoints, so no shared client module is needed —
-  // and a component-local const keeps better-auth's deep client types out of the packaged .d.ts.
+  // and editor management go through server endpoints, so no shared client module is needed.
+  // A component-local const keeps better-auth's deep client types out of the packaged .d.ts.
   const authClient = createAuthClient({ plugins: [magicLinkClient()] });
 
   interface Props {
@@ -23,7 +23,7 @@
     event.preventDefault();
     busy = true;
     // The magic-link email points at our /admin/auth/confirm page (built in config.ts), not a
-    // GET-verify URL — so the result is the same regardless of allowlist membership.
+    // GET-verify URL, so the result is the same regardless of allowlist membership.
     await authClient.signIn.magicLink({ email });
     busy = false;
     requested = true;

package/dist/components/NavTree.svelte

@@ -0,0 +1,128 @@
+<script lang="ts">
+  // The navigation tree editor (Pass L). Edits a local copy of the menu tree and posts the whole
+  // tree as JSON to the `save` action. DaisyUI primitives under the Warm Stone admin theme. Drag a
+  // row up or down to reorder within its level; use Indent/Outdent to nest under the previous
+  // sibling or promote a level (capped at the menu's maxDepth). The engine validates on save.
+  import { untrack } from 'svelte';
+  import type { NavLoadData } from '../sveltekit';
+  import type { NavNode } from '../nav';
+
+  let { data }: { data: NavLoadData } = $props();
+
+  // A flat, ordered working model is far simpler to drag-edit than a recursive one: each row
+  // carries an explicit depth, and the tree is rebuilt from (order + depth) only at submit time.
+  interface Row {
+    id: number;
+    depth: number;
+    label: string;
+    url: string;
+  }
+
+  let nextId = 1;
+  function flatten(nodes: NavNode[], depth: number, out: Row[]): Row[] {
+    for (const n of nodes) {
+      out.push({ id: nextId++, depth, label: n.label, url: n.url ?? '' });
+      if (n.children?.length) flatten(n.children, depth + 1, out);
+    }
+    return out;
+  }
+
+  let rows = $state<Row[]>(untrack(() => flatten(data.tree, 0, [])));
+  const maxDepthIndex = $derived(data.menu.maxDepth - 1); // depth is 0-based here
+
+  // Rebuild the nested tree from the flat rows by depth, then serialize for the hidden field.
+  function toTree(list: Row[]): NavNode[] {
+    const root: NavNode[] = [];
+    const stack: { depth: number; node: NavNode }[] = [];
+    for (const r of list) {
+      const node: NavNode = { label: r.label.trim() };
+      if (r.url.trim()) node.url = r.url.trim();
+      while (stack.length && stack[stack.length - 1].depth >= r.depth) stack.pop();
+      if (stack.length) (stack[stack.length - 1].node.children ??= []).push(node);
+      else root.push(node);
+      stack.push({ depth: r.depth, node });
+    }
+    return root;
+  }
+
+  const treeJson = $derived(JSON.stringify(toTree(rows)));
+
+  function addRow() {
+    rows = [...rows, { id: nextId++, depth: 0, label: 'New item', url: '' }];
+  }
+  function removeRow(id: number) {
+    rows = rows.filter((r) => r.id !== id);
+  }
+  function indent(i: number) {
+    // A row may nest at most one level deeper than the row above it, and never past the cap.
+    if (i === 0) return;
+    const ceiling = Math.min(rows[i - 1].depth + 1, maxDepthIndex);
+    if (rows[i].depth < ceiling) rows[i].depth += 1;
+  }
+  function outdent(i: number) {
+    if (rows[i].depth > 0) rows[i].depth -= 1;
+  }
+
+  let dragFrom = $state<number | null>(null);
+  function onDrop(to: number) {
+    if (dragFrom === null || dragFrom === to) return;
+    const next = [...rows];
+    const [moved] = next.splice(dragFrom, 1);
+    next.splice(to, 0, moved);
+    rows = next;
+    dragFrom = null;
+  }
+</script>
+
+<div class="cairn-admin">
+  <div class="flex items-center justify-between">
+    <h1 class="text-xl font-semibold">{data.menu.label}</h1>
+    <button type="button" class="btn btn-sm" onclick={addRow}>Add item</button>
+  </div>
+
+  {#if data.saved}
+    <div class="alert alert-success mt-3">Navigation saved.</div>
+  {/if}
+  {#if data.error}
+    <div class="alert alert-error mt-3">{data.error}</div>
+  {/if}
+
+  <form method="POST" action="?/save" class="mt-4">
+    <input type="hidden" name="tree" value={treeJson} />
+    <ul class="menu w-full gap-1">
+      {#each rows as row, i (row.id)}
+        <li
+          draggable="true"
+          ondragstart={() => (dragFrom = i)}
+          ondragover={(e) => e.preventDefault()}
+          ondrop={() => onDrop(i)}
+          style={`margin-left:${row.depth * 1.5}rem`}
+        >
+          <div class="flex items-center gap-2 p-2">
+            <span class="cursor-grab opacity-40" aria-hidden="true">&#x283F;</span>
+            <input class="input input-sm input-bordered flex-1" placeholder="Label" bind:value={row.label} />
+            <input
+              class="input input-sm input-bordered flex-1"
+              placeholder="/path or https://…"
+              list="cairn-nav-pages"
+              bind:value={row.url}
+            />
+            <button type="button" class="btn btn-xs btn-ghost" onclick={() => outdent(i)} aria-label="Outdent">&larr;</button>
+            <button type="button" class="btn btn-xs btn-ghost" onclick={() => indent(i)} aria-label="Indent">&rarr;</button>
+            <button type="button" class="btn btn-xs btn-ghost text-error" onclick={() => removeRow(row.id)} aria-label="Remove">&times;</button>
+          </div>
+        </li>
+      {/each}
+    </ul>
+
+    <datalist id="cairn-nav-pages">
+      {#each data.pages as p (p.url)}
+        <option value={p.url}>{p.label}</option>
+      {/each}
+    </datalist>
+
+    <div class="mt-4">
+      <button type="submit" class="btn btn-primary btn-sm">Save navigation</button>
+    </div>
+  </form>
+</div>

package/dist/components/NavTree.svelte.d.ts

@@ -0,0 +1,8 @@
+import type { NavLoadData } from '../sveltekit';
+type $$ComponentProps = {
+    data: NavLoadData;
+};
+declare const NavTree: import("svelte").Component<$$ComponentProps, {}, "">;
+type NavTree = ReturnType<typeof NavTree>;
+export default NavTree;
+//# sourceMappingURL=NavTree.svelte.d.ts.map

package/dist/components/NavTree.svelte.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"NavTree.svelte.d.ts","sourceRoot":"","sources":["../../src/lib/components/NavTree.svelte.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAY/C,KAAK,gBAAgB,GAAI;IAAE,IAAI,EAAE,WAAW,CAAA;CAAE,CAAC;AAiHhD,QAAA,MAAM,OAAO,sDAAwC,CAAC;AACtD,KAAK,OAAO,GAAG,UAAU,CAAC,OAAO,OAAO,CAAC,CAAC;AAC1C,eAAe,OAAO,CAAC"}

package/dist/components/index.d.ts

@@ -1,7 +1,9 @@
 export { default as AdminLayout } from './AdminLayout.svelte';
-export { default as AdminList } from './AdminList.svelte';
+export { default as CollectionList } from './CollectionList.svelte';
 export { default as LoginPage } from './LoginPage.svelte';
 export { default as ConfirmPage } from './ConfirmPage.svelte';
 export { default as EditPage } from './EditPage.svelte';
 export { default as ManageAdmins } from './ManageAdmins.svelte';
+export { default as ComponentPalette } from './ComponentPalette.svelte';
+export { default as NavTree } from './NavTree.svelte';
 //# sourceMappingURL=index.d.ts.map

package/dist/components/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/lib/components/index.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,OAAO,IAAI,WAAW,EAAE,MAAM,sBAAsB,CAAC;AAC9D,OAAO,EAAE,OAAO,IAAI,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAC1D,OAAO,EAAE,OAAO,IAAI,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAC1D,OAAO,EAAE,OAAO,IAAI,WAAW,EAAE,MAAM,sBAAsB,CAAC;AAC9D,OAAO,EAAE,OAAO,IAAI,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AACxD,OAAO,EAAE,OAAO,IAAI,YAAY,EAAE,MAAM,uBAAuB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/lib/components/index.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,OAAO,IAAI,WAAW,EAAE,MAAM,sBAAsB,CAAC;AAC9D,OAAO,EAAE,OAAO,IAAI,cAAc,EAAE,MAAM,yBAAyB,CAAC;AACpE,OAAO,EAAE,OAAO,IAAI,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAC1D,OAAO,EAAE,OAAO,IAAI,WAAW,EAAE,MAAM,sBAAsB,CAAC;AAC9D,OAAO,EAAE,OAAO,IAAI,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AACxD,OAAO,EAAE,OAAO,IAAI,YAAY,EAAE,MAAM,uBAAuB,CAAC;AAChE,OAAO,EAAE,OAAO,IAAI,gBAAgB,EAAE,MAAM,2BAA2B,CAAC;AACxE,OAAO,EAAE,OAAO,IAAI,OAAO,EAAE,MAAM,kBAAkB,CAAC"}

package/dist/components/index.js

@@ -1,8 +1,10 @@
 // cairn-cms admin UI shell. Consumers import from 'cairn-cms/components'; each site's
 // admin route `.svelte` files are one-line shims around these.
 export { default as AdminLayout } from './AdminLayout.svelte';
-export { default as AdminList } from './AdminList.svelte';
+export { default as CollectionList } from './CollectionList.svelte';
 export { default as LoginPage } from './LoginPage.svelte';
 export { default as ConfirmPage } from './ConfirmPage.svelte';
 export { default as EditPage } from './EditPage.svelte';
 export { default as ManageAdmins } from './ManageAdmins.svelte';
+export { default as ComponentPalette } from './ComponentPalette.svelte';
+export { default as NavTree } from './NavTree.svelte';

package/dist/editor.d.ts

@@ -0,0 +1,25 @@
+interface CartaInput {
+    getSelection(): {
+        start: number;
+        end: number;
+        direction: string;
+        slice: string;
+    };
+    insertAt(position: number, text: string): void;
+}
+interface CartaLike {
+    input?: CartaInput;
+}
+/** The programmatic editing surface the admin relies on. */
+export interface MarkdownEditor {
+    /** Insert a component or template at the current cursor position. */
+    insertComponent(template: string): void;
+}
+/**
+ * Wrap a Carta instance as a MarkdownEditor. Takes a getter (not the instance) because the
+ * EditPage component creates the Carta instance once and `carta.input` is only populated after
+ * the editor mounts; reading it lazily at call time avoids capturing an undefined `input`.
+ */
+export declare function cartaEditor(getCarta: () => CartaLike): MarkdownEditor;
+export {};
+//# sourceMappingURL=editor.d.ts.map

package/dist/editor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"editor.d.ts","sourceRoot":"","sources":["../src/lib/editor.ts"],"names":[],"mappings":"AAQA,UAAU,UAAU;IAClB,YAAY,IAAI;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC;IACjF,QAAQ,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;CAChD;AAED,UAAU,SAAS;IACjB,KAAK,CAAC,EAAE,UAAU,CAAC;CACpB;AAED,4DAA4D;AAC5D,MAAM,WAAW,cAAc;IAC7B,qEAAqE;IACrE,eAAe,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;CACzC;AAED;;;;GAIG;AACH,wBAAgB,WAAW,CAAC,QAAQ,EAAE,MAAM,SAAS,GAAG,cAAc,CASrE"}

package/dist/editor.js

@@ -0,0 +1,20 @@
+// cairn-core: the editor cursor seam (decision P3). The component palette and any later insert
+// control talk to MarkdownEditor, never to Carta directly, so a swap to a different editing
+// engine is contained to this file. Verified against carta-md@4.11: `input.getSelection()` and
+// `input.insertAt(pos, text)` are public on the InputEnhancer.
+/**
+ * Wrap a Carta instance as a MarkdownEditor. Takes a getter (not the instance) because the
+ * EditPage component creates the Carta instance once and `carta.input` is only populated after
+ * the editor mounts; reading it lazily at call time avoids capturing an undefined `input`.
+ */
+export function cartaEditor(getCarta) {
+    return {
+        insertComponent(template) {
+            const input = getCarta().input;
+            if (!input)
+                return; // editor not mounted yet; nothing to insert into
+            const { start } = input.getSelection();
+            input.insertAt(start, template);
+        },
+    };
+}

package/dist/email.js

@@ -1,9 +1,9 @@
 // cairn-core: pluggable magic-link email sender.
 //
-// Default adapter is Cloudflare Email Service → Email Sending (transactional, arbitrary
-// recipients) — distinct from Email Routing's recipient-restricted `EmailMessage` flow.
-// It is reached through the same `send_email` binding (configured without a
-// destination_address) but a different call shape: `binding.send({ to, from, ... })`.
+// The default adapter targets Cloudflare Email Service (Email Sending, transactional,
+// arbitrary recipients), distinct from Email Routing's recipient-restricted `EmailMessage`
+// flow. Both share the same `send_email` binding (configured without a destination_address)
+// but use a different call shape: `binding.send({ to, from, ... })`.
 // Resend can slot in behind the same `sendMagicLink` signature if needed.
 export async function sendMagicLink(sender, to, link, siteName, from) {
     const expiry = "This link expires in 10 minutes and works only once. If you didn't request it, ignore this email.";

package/dist/frontmatter.d.ts

@@ -0,0 +1,3 @@
+/** A frontmatter date value (Date or string) to the `YYYY-MM-DD` an `<input type="date">` expects. */
+export declare function dateInputValue(value: unknown): string;
+//# sourceMappingURL=frontmatter.d.ts.map

package/dist/frontmatter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"frontmatter.d.ts","sourceRoot":"","sources":["../src/lib/frontmatter.ts"],"names":[],"mappings":"AAMA,sGAAsG;AACtG,wBAAgB,cAAc,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CASrD"}

package/dist/frontmatter.js

@@ -0,0 +1,16 @@
+// cairn-core: coerce a frontmatter value to the YYYY-MM-DD string an <input type="date"> wants.
+// gray-matter parses an unquoted YAML date (date: 2026-05-14) into a JS Date, so a string-only
+// read leaves the date input empty and drops the date on save. This normalizes a Date or an
+// ISO-ish string to YYYY-MM-DD. A parsed YAML date is UTC midnight, so slicing the ISO string
+// avoids a local-timezone shift. Internal (not re-exported from the barrel), like utils.ts.
+/** A frontmatter date value (Date or string) to the `YYYY-MM-DD` an `<input type="date">` expects. */
+export function dateInputValue(value) {
+    if (value instanceof Date) {
+        return Number.isNaN(value.getTime()) ? '' : value.toISOString().slice(0, 10);
+    }
+    if (typeof value === 'string') {
+        const match = value.match(/^\d{4}-\d{2}-\d{2}/);
+        return match ? match[0] : '';
+    }
+    return '';
+}

package/dist/github.d.ts

@@ -27,7 +27,7 @@ export declare function appJwt(appId: string, privateKeyPem: string): Promise<st
 export interface AppCredentials {
     appId: string;
     installationId: string;
-    /** The stored GITHUB_APP_PRIVATE_KEY_B64 — base64 of the PEM, single line. */
+    /** The stored GITHUB_APP_PRIVATE_KEY_B64: base64 of the PEM, single line. */
     privateKeyB64: string;
 }
 /** Exchange the App JWT for a short-lived installation access token. */
@@ -38,15 +38,35 @@ export interface CommitAuthor {
     name: string;
     email: string;
 }
+/**
+ * A concurrent edit lost the SHA race (C3): the file changed between the read and the PUT,
+ * from another editor or the site's own CI. Thrown so callers can fail safe (re-fetch and ask
+ * the editor to reapply) instead of surfacing a raw 409. Defined and caught inside the package
+ * so `instanceof` is reliable (no peer-boundary identity split, unlike kit's `redirect`/`error`).
+ */
+export declare class CommitConflictError extends Error {
+    readonly path: string;
+    constructor(path: string);
+}
 /**
  * Commit `content` to `path` on the configured branch via the contents API. Author is the
  * editor; committer is omitted so GitHub attributes it to the App (cairn-cms[bot]). Updates
  * the file in place when it exists (passing its sha), creates it otherwise. Returns the
- * commit sha.
+ * commit sha. A stale-sha 409 (someone committed in between) becomes a `CommitConflictError`.
  */
 export declare function commitFile(repo: RepoRef, path: string, content: string, opts: {
     message: string;
     author: CommitAuthor;
 }, token: string): Promise<string>;
+/**
+ * Deploy-time self-test for the GitHub App signer (M2): sign a dummy JWT with the configured
+ * private key. Exercises the brittle PKCS#1→PKCS#8 conversion + Web Crypto import/sign without
+ * any network call or secret in the result, so `/admin/healthz` catches a bad/rotated key
+ * before an editor's save fails. Returns `{ ok: false, detail }` rather than throwing.
+ */
+export declare function signingSelfTest(appId: string, privateKeyB64: string): Promise<{
+    ok: boolean;
+    detail?: string;
+}>;
 export {};
 //# sourceMappingURL=github.d.ts.map

package/dist/github.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"github.d.ts","sourceRoot":"","sources":["../src/lib/github.ts"],"names":[],"mappings":"AAWA,MAAM,WAAW,OAAO;IACtB,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,4FAA4F;AAC5F,MAAM,WAAW,QAAQ;IACvB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;CACd;AAcD,mFAAmF;AACnF,wBAAgB,WAAW,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,CAG/D;AAED,UAAU,aAAa;IACrB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;CACd;AAED,uFAAuF;AACvF,wBAAgB,aAAa,CAAC,OAAO,EAAE,aAAa,EAAE,GAAG,QAAQ,EAAE,CAKlE;AAED,yDAAyD;AACzD,wBAAsB,YAAY,CAAC,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,QAAQ,EAAE,CAAC,CAIlG;AAED,iEAAiE;AACjE,wBAAsB,OAAO,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAKjG;AAqCD,wFAAwF;AACxF,wBAAsB,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAclF;AAED,MAAM,WAAW,cAAc;IAC7B,KAAK,EAAE,MAAM,CAAC;IACd,cAAc,EAAE,MAAM,CAAC;IACvB,8EAA8E;IAC9E,aAAa,EAAE,MAAM,CAAC;CACvB;AAED,wEAAwE;AACxE,wBAAsB,iBAAiB,CAAC,KAAK,EAAE,cAAc,GAAG,OAAO,CAAC,MAAM,CAAC,CAQ9E;AAOD,+EAA+E;AAC/E,wBAAsB,OAAO,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAKhG;AAED,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;CACf;AAED;;;;;GAKG;AACH,wBAAsB,UAAU,CAC9B,IAAI,EAAE,OAAO,EACb,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,MAAM,EACf,IAAI,EAAE;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,YAAY,CAAA;CAAE,EAC/C,KAAK,EAAE,MAAM,GACZ,OAAO,CAAC,MAAM,CAAC,CAgBjB"}
+{"version":3,"file":"github.d.ts","sourceRoot":"","sources":["../src/lib/github.ts"],"names":[],"mappings":"AAWA,MAAM,WAAW,OAAO;IACtB,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,4FAA4F;AAC5F,MAAM,WAAW,QAAQ;IACvB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;CACd;AAcD,mFAAmF;AACnF,wBAAgB,WAAW,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,CAG/D;AAED,UAAU,aAAa;IACrB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;CACd;AAED,uFAAuF;AACvF,wBAAgB,aAAa,CAAC,OAAO,EAAE,aAAa,EAAE,GAAG,QAAQ,EAAE,CAKlE;AAED,yDAAyD;AACzD,wBAAsB,YAAY,CAAC,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,QAAQ,EAAE,CAAC,CAIlG;AAED,iEAAiE;AACjE,wBAAsB,OAAO,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAKjG;AAqCD,wFAAwF;AACxF,wBAAsB,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAclF;AAED,MAAM,WAAW,cAAc;IAC7B,KAAK,EAAE,MAAM,CAAC;IACd,cAAc,EAAE,MAAM,CAAC;IACvB,6EAA6E;IAC7E,aAAa,EAAE,MAAM,CAAC;CACvB;AAED,wEAAwE;AACxE,wBAAsB,iBAAiB,CAAC,KAAK,EAAE,cAAc,GAAG,OAAO,CAAC,MAAM,CAAC,CAQ9E;AAOD,+EAA+E;AAC/E,wBAAsB,OAAO,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAKhG;AAED,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;CACf;AAED;;;;;GAKG;AACH,qBAAa,mBAAoB,SAAQ,KAAK;aAChB,IAAI,EAAE,MAAM;gBAAZ,IAAI,EAAE,MAAM;CAIzC;AAED;;;;;GAKG;AACH,wBAAsB,UAAU,CAC9B,IAAI,EAAE,OAAO,EACb,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,MAAM,EACf,IAAI,EAAE;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,YAAY,CAAA;CAAE,EAC/C,KAAK,EAAE,MAAM,GACZ,OAAO,CAAC,MAAM,CAAC,CAmBjB;AAED;;;;;GAKG;AACH,wBAAsB,eAAe,CAAC,KAAK,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,GAAG,OAAO,CAAC;IAAE,EAAE,EAAE,OAAO,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,CAQrH"}