@glw907/cairn-cms 0.60.0 → 0.62.1

package/dist/sveltekit/editors-routes.d.ts

@@ -1,5 +1,8 @@
 import type { Editor } from '../auth/types.js';
 import type { RequestContext } from './types.js';
+/**
+ *
+ */
 export declare function createEditorRoutes(): {
     editorsLoad: (event: RequestContext) => Promise<{
         editors: Editor[];

package/dist/sveltekit/editors-routes.js

@@ -10,6 +10,9 @@ const EMAIL_RE = /^[^@\s]+@[^@\s]+\.[^@\s]+$/;
 function parseRole(value) {
     return value === 'owner' ? 'owner' : 'editor';
 }
+/**
+ *
+ */
 export function createEditorRoutes() {
     /** GET /admin/editors. Owner-only. Returns the allowlist and the acting owner's email. */
     async function editorsLoad(event) {

package/dist/sveltekit/guard.d.ts

@@ -2,9 +2,11 @@ import type { Editor } from '../auth/types.js';
 import type { HandleInput, RequestContext } from './types.js';
 /** The SvelteKit `Handle` that guards `/admin/**` and hardens admin responses. */
 export declare function createAuthGuard(): ({ event, resolve }: HandleInput) => Promise<Response>;
-/** For a protected load/action: the session the guard already resolved, or a login redirect.
+/**
+ * For a protected load/action: the session the guard already resolved, or a login redirect.
  *  The parameter is the minimal structural need (just `locals`), so every engine event shape
- *  (RequestContext, the content routes' ContentEvent) and a real RequestEvent all satisfy it. */
+ *  (RequestContext, the content routes' ContentEvent) and a real RequestEvent all satisfy it.
+ */
 export declare function requireSession(event: {
     locals: {
         editor?: Editor | null;

package/dist/sveltekit/guard.js

@@ -87,9 +87,11 @@ export function createAuthGuard() {
         return response;
     };
 }
-/** For a protected load/action: the session the guard already resolved, or a login redirect.
+/**
+ * For a protected load/action: the session the guard already resolved, or a login redirect.
  *  The parameter is the minimal structural need (just `locals`), so every engine event shape
- *  (RequestContext, the content routes' ContentEvent) and a real RequestEvent all satisfy it. */
+ *  (RequestContext, the content routes' ContentEvent) and a real RequestEvent all satisfy it.
+ */
 export function requireSession(event) {
     const editor = event.locals.editor;
     if (!editor)

package/dist/sveltekit/https-required-page.d.ts

@@ -1,5 +1,5 @@
 /**
  * Render the full HTML document for the HTTPS-required page.
- * @param httpsUrl The same request rebuilt over https, offered as the one-click recovery link.
+ * @param httpsUrl - The same request rebuilt over https, offered as the one-click recovery link.
  */
 export declare function httpsRequiredPage(httpsUrl: string): string;

package/dist/sveltekit/https-required-page.js

@@ -8,7 +8,7 @@ import { escapeHtml } from '../escape.js';
 import { renderStaticAdminPage } from './static-admin-page.js';
 /**
  * Render the full HTML document for the HTTPS-required page.
- * @param httpsUrl The same request rebuilt over https, offered as the one-click recovery link.
+ * @param httpsUrl - The same request rebuilt over https, offered as the one-click recovery link.
  */
 export function httpsRequiredPage(httpsUrl) {
     const href = escapeHtml(httpsUrl);

package/dist/sveltekit/index.d.ts

@@ -3,7 +3,7 @@ export { createAuthRoutes, type AuthRoutesConfig, type RequestResult } from './a
 export { createEditorRoutes } from './editors-routes.js';
 export { createContentRoutes } from './content-routes.js';
 export { createMediaRoute } from './media-route.js';
-export type { NavConcept, LayoutData, EntrySummary, ListData, EditData, MediaUsageInfo, MediaLibraryData, ContentEvent, ContentRoutesDeps, SaveFailure, DeleteRefusal, RenameFailure, MediaDeleteRefusal, MediaUpdateFailure, MediaReplaceFailure, MediaAltPropagateFailure, MediaBulkFailure, ContentFormFailure, UploadResult, } from './content-routes.js';
+export type { NavConcept, LayoutData, EntrySummary, ListData, EditData, AdvisoryNotice, AdvisoryAction, HelpData, MediaUsageInfo, MediaLibraryData, ContentEvent, ContentRoutesDeps, SaveFailure, DeleteRefusal, RenameFailure, MediaDeleteRefusal, MediaUpdateFailure, MediaReplaceFailure, MediaAltPropagateFailure, MediaBulkFailure, ContentFormFailure, UploadResult, } from './content-routes.js';
 export { createNavRoutes } from './nav-routes.js';
 export type { NavLoadData, NavPageOption, NavRoutesDeps } from './nav-routes.js';
 export { parseAdminPath, type AdminView } from './admin-dispatch.js';

package/dist/sveltekit/media-route.d.ts

@@ -6,7 +6,6 @@ import type { ResolvedAssetConfig } from '../media/config.js';
  * The handler validates the hash and extension before any R2 call, derives the object key from the
  * validated values only (never trusting the URL's fan-out), guards the Cloudflare Images self-loop,
  * and sets the security headers on every served response.
- *
- * @param resolved the adapter's resolved media config; when media is off the handler always 404s.
+ * @param resolved - the adapter's resolved media config; when media is off the handler always 404s.
  */
 export declare function createMediaRoute(resolved: ResolvedAssetConfig): RequestHandler;

package/dist/sveltekit/media-route.js

@@ -4,12 +4,16 @@ import { r2Key } from '../media/naming.js';
 import { log } from '../log/index.js';
 /** A 16-character lowercase hex content-hash prefix, validated before any R2 lookup. */
 const HASH_RE = /^[0-9a-f]{16}$/;
-/** The closed delivery extension allow-list. A filename ext outside this set is a 404 with no R2
- *  read, so the route can never serve a type it cannot vouch for. */
+/**
+ * The closed delivery extension allow-list. A filename ext outside this set is a 404 with no R2
+ *  read, so the route can never serve a type it cannot vouch for.
+ */
 const DELIVERY_EXTS = new Set(['jpg', 'jpeg', 'png', 'gif', 'webp', 'avif']);
-/** The load-bearing XSS control: set on every non-404 response, so a served object can never run as
+/**
+ * The load-bearing XSS control: set on every non-404 response, so a served object can never run as
  *  active content. `Content-Type` comes from the stored, server-validated metadata via
- *  `writeHttpMetadata`; these override or add to it. */
+ *  `writeHttpMetadata`; these override or add to it.
+ */
 function applySecurityHeaders(headers, etag) {
     headers.set('X-Content-Type-Options', 'nosniff');
     headers.set('Content-Disposition', 'inline');
@@ -22,8 +26,10 @@ function applySecurityHeaders(headers, etag) {
     if (!headers.has('Content-Type'))
         headers.set('Content-Type', 'application/octet-stream');
 }
-/** True when the returned object carries a body (a full or ranged read), narrowing it to the body
- *  variant. R2 returns a body-less object on an `If-None-Match` hit. */
+/**
+ * True when the returned object carries a body (a full or ranged read), narrowing it to the body
+ *  variant. R2 returns a body-less object on an `If-None-Match` hit.
+ */
 function hasBody(obj) {
     return 'body' in obj && obj.body != null;
 }
@@ -33,8 +39,7 @@ function hasBody(obj) {
  * The handler validates the hash and extension before any R2 call, derives the object key from the
  * validated values only (never trusting the URL's fan-out), guards the Cloudflare Images self-loop,
  * and sets the security headers on every served response.
- *
- * @param resolved the adapter's resolved media config; when media is off the handler always 404s.
+ * @param resolved - the adapter's resolved media config; when media is off the handler always 404s.
  */
 export function createMediaRoute(resolved) {
     return async (event) => {

package/dist/sveltekit/nav-routes.d.ts

@@ -21,10 +21,15 @@ export interface NavLoadData {
 }
 /** Injectable dependencies; tests stub the token mint to avoid signing a real key. */
 export interface NavRoutesDeps {
-    /** Mint a GitHub App installation token from the Worker env. Defaults to the real signer.
-     *  A bare string works too; the routes await whatever comes back. */
+    /**
+     * Mint a GitHub App installation token from the Worker env. Defaults to the real signer.
+     *  A bare string works too; the routes await whatever comes back.
+     */
     mintToken?: (env: GithubKeyEnv) => string | Promise<string>;
 }
+/**
+ *
+ */
 export declare function createNavRoutes(runtime: CairnRuntime, deps?: NavRoutesDeps): {
     navLoad: (event: ContentEvent) => Promise<NavLoadData>;
     navSave: (event: ContentEvent) => Promise<never>;

package/dist/sveltekit/nav-routes.js

@@ -9,6 +9,9 @@ import { isConflict } from '../github/types.js';
 import { log } from '../log/index.js';
 import { parseSiteConfig, extractMenu, validateNavTree, setMenu } from '../nav/site-config.js';
 import { requireSession } from './guard.js';
+/**
+ *
+ */
 export function createNavRoutes(runtime, deps = {}) {
     const mintToken = deps.mintToken ?? ((env) => cachedInstallationToken(appCredentials(runtime.backend, env)));
     /** List page-like concepts (routable, not dated) for the URL picker. Best-effort per concept. */

package/dist/sveltekit/types.d.ts

@@ -23,9 +23,11 @@ export interface PlatformContext<Env> {
         waitUntil(promise: Promise<unknown>): void;
     };
 }
-/** The structural core every engine event type extends, parameterized by the Worker env the
+/**
+ * The structural core every engine event type extends, parameterized by the Worker env the
  *  surface reads. Each shared field is defined once here; the extensions add only what their
- *  surface needs (cookies, params, setHeaders). */
+ *  surface needs (cookies, params, setHeaders).
+ */
 export interface EventBase<Env> {
     url: URL;
     request: Request;

package/dist/vite/index.d.ts

@@ -1,6 +1,8 @@
 import type { Plugin, PluginOption } from 'vite';
-/** Options for {@link cairnManifest}. Paths are app-root-absolute (the form `import.meta.glob` wants),
- *  so they match the build's own resolution. */
+/**
+ * Options for {@link cairnManifest}. Paths are app-root-absolute (the form `import.meta.glob` wants),
+ *  so they match the build's own resolution.
+ */
 export interface CairnManifestOptions {
     /** The module exporting the `cairn` adapter and the parsed `siteConfig`, app-root-absolute. */
     configModule: string;
@@ -9,28 +11,38 @@ export interface CairnManifestOptions {
     /** The committed manifest path, app-root-absolute. Defaults to `/src/content/.cairn/index.json`. */
     manifestPath?: string;
 }
-/** Flatten the consumer's plugins option and drop the cairnManifest plugin at any nesting depth, so
+/**
+ * Flatten the consumer's plugins option and drop the cairnManifest plugin at any nesting depth, so
  *  the nested verify server can never re-enter its buildStart. Vite supports (and flattens) nested
  *  plugin arrays, and findCairnOptions recurses into them, so a flat single-level filter would miss a
  *  cairnManifest nested inside a shared preset's sub-array and let it survive into the nested server.
- *  This mirrors findCairnOptions's recursion. Falsy slots pass through, which Vite tolerates. */
+ *  This mirrors findCairnOptions's recursion. Falsy slots pass through, which Vite tolerates.
+ */
 export declare function stripCairnManifest(plugins: PluginOption | PluginOption[]): PluginOption[];
-/** Verify the committed manifest against the corpus from a Vite context, throwing on drift. The bin
- *  and the plugin share this; the spike proved it runs cleanly inside the consumer's config. */
+/**
+ * Verify the committed manifest against the corpus from a Vite context, throwing on drift. The bin
+ *  and the plugin share this; the spike proved it runs cleanly inside the consumer's config.
+ */
 export declare function verifyManifestFromVite(opts: CairnManifestOptions, root: string): Promise<void>;
-/** Regenerate the serialized manifest from the corpus in a Vite context, sharing the build's
- *  resolution. The cairn-manifest bin (a later task) will call this and write the result. */
+/**
+ * Regenerate the serialized manifest from the corpus in a Vite context, sharing the build's
+ *  resolution. The cairn-manifest bin (a later task) will call this and write the result.
+ */
 export declare function buildManifestFromVite(opts: CairnManifestOptions, root: string): Promise<string>;
-/** The cairnManifest plugin. It serves the verify virtual module to the app graph and, in
- *  buildStart, evaluates it through a nested Vite SSR load so a manifest drift fails the build. */
+/**
+ * The cairnManifest plugin. It serves the verify virtual module to the app graph and, in
+ *  buildStart, evaluates it through a nested Vite SSR load so a manifest drift fails the build.
+ */
 export declare function cairnManifest(opts: CairnManifestOptions): Plugin;
-/** Regenerate the committed manifest from the consumer's corpus and write it to the configured
+/**
+ * Regenerate the committed manifest from the consumer's corpus and write it to the configured
  *  manifestPath. It searches for the consumer's Vite config from `cwd`, derives the authoritative
  *  Vite root from the loaded config (so a configured `root` or a non-root cwd resolves correctly),
  *  reads the cairnManifest plugin's options off the instance, evaluates the write-mode virtual
  *  module through the build's own resolution, and writes the serialized manifest under the Vite
  *  root. The cairn-manifest bin calls this; it is exported so the write logic is testable apart
- *  from the CLI shell. */
+ *  from the CLI shell.
+ */
 export declare function writeManifest(cwd?: string): Promise<void>;
 /** The repo and sender facts cairn-doctor derives off the consumer's adapter. */
 export interface AdapterFacts {
@@ -40,14 +52,18 @@ export interface AdapterFacts {
     repo?: string;
     /** `cairn.sender.from`. */
     from?: string;
-    /** `cairn.assets.bucketBinding`, the media R2 binding name; undefined when the adapter declares no
-     *  assets. The doctor's conditional media-bucket check reads it. */
+    /**
+     * `cairn.assets.bucketBinding`, the media R2 binding name; undefined when the adapter declares no
+     *  assets. The doctor's conditional media-bucket check reads it.
+     */
     mediaBucketBinding?: string;
 }
-/** Read `{ owner, repo, from }` off the consumer's adapter by evaluating a tiny virtual module
+/**
+ * Read `{ owner, repo, from }` off the consumer's adapter by evaluating a tiny virtual module
  *  through the consumer's own Vite resolution, the same machinery the cairn-manifest bin uses.
  *  cairn-doctor calls this to fill inputs the operator did not pass. Derivation is best-effort:
  *  any failure (no Vite config, no cairnManifest plugin, a config module that throws) returns
  *  null, so the doctor degrades to flags instead of crashing. This runs only on the bin path,
- *  never in a Worker. */
+ *  never in a Worker.
+ */
 export declare function readAdapterFacts(cwd?: string): Promise<AdapterFacts | null>;

package/dist/vite/index.js

@@ -1,16 +1,20 @@
 import { writeFile, mkdir } from 'node:fs/promises';
 import { dirname, join } from 'node:path';
 import { resolveViteRoot } from './resolve-root.js';
-/** The key the cairnManifest plugin stashes its options under, so the write path can read them off the
- *  plugin instance in the consumer's loaded config without re-parsing the config file. */
+/**
+ * The key the cairnManifest plugin stashes its options under, so the write path can read them off the
+ *  plugin instance in the consumer's loaded config without re-parsing the config file.
+ */
 const CAIRN_OPTIONS = Symbol.for('cairn-cms.manifest-options');
 const VIRTUAL_ID = 'virtual:cairn-manifest';
 const RESOLVED_ID = '\0' + VIRTUAL_ID;
 /** The default committed manifest path, app-root-absolute. */
 const DEFAULT_MANIFEST_PATH = '/src/content/.cairn/index.json';
-/** Build the virtual module source. In verify mode it throws on drift; in write mode it exports the
+/**
+ * Build the virtual module source. In verify mode it throws on drift; in write mode it exports the
  *  serialized manifest as `result`. The module runs in the app graph, so its `import.meta.glob`,
- *  package, and `?raw` resolution is the build's own. */
+ *  package, and `?raw` resolution is the build's own.
+ */
 function virtualSource(opts, mode) {
     const manifestPath = opts.manifestPath ?? DEFAULT_MANIFEST_PATH;
     const globEntries = Object.entries(opts.content)
@@ -31,11 +35,13 @@ const built = buildSiteManifest(cairn, siteConfig, globs);
 export const result = ${resultExpr};
 `;
 }
-/** Evaluate a virtual module source inside the consumer's own Vite resolution, then return the
+/**
+ * Evaluate a virtual module source inside the consumer's own Vite resolution, then return the
  *  module's `result`. It reuses the consumer's loaded config (so `$lib`, the config module,
  *  `import.meta.glob`, and `?raw` resolve exactly as the build does) and strips the cairnManifest
  *  plugin from the nested server's plugin list, so its buildStart never recurses. This runs at
- *  build time and in the bins, never in the request lifecycle. */
+ *  build time and in the bins, never in the request lifecycle.
+ */
 async function evalVirtual(source, root) {
     const { createServer, loadConfigFromFile } = await import('vite');
     // Load the consumer's real Vite config so the nested server inherits SvelteKit's resolution
@@ -60,17 +66,21 @@ async function evalVirtual(source, root) {
         await server.close();
     }
 }
-/** True for any plugin object whose name is the cairnManifest plugin, so the nested server drops it
+/**
+ * True for any plugin object whose name is the cairnManifest plugin, so the nested server drops it
  *  and cannot recurse into another buildStart. The consumer's plugin list may nest arrays and hold
- *  falsy slots, so guard the shape. */
+ *  falsy slots, so guard the shape.
+ */
 function isCairnManifestPlugin(p) {
     return !!p && typeof p === 'object' && 'name' in p && p.name === 'cairn-manifest';
 }
-/** Flatten the consumer's plugins option and drop the cairnManifest plugin at any nesting depth, so
+/**
+ * Flatten the consumer's plugins option and drop the cairnManifest plugin at any nesting depth, so
  *  the nested verify server can never re-enter its buildStart. Vite supports (and flattens) nested
  *  plugin arrays, and findCairnOptions recurses into them, so a flat single-level filter would miss a
  *  cairnManifest nested inside a shared preset's sub-array and let it survive into the nested server.
- *  This mirrors findCairnOptions's recursion. Falsy slots pass through, which Vite tolerates. */
+ *  This mirrors findCairnOptions's recursion. Falsy slots pass through, which Vite tolerates.
+ */
 export function stripCairnManifest(plugins) {
     if (Array.isArray(plugins))
         return plugins.flatMap(stripCairnManifest);
@@ -78,18 +88,24 @@ export function stripCairnManifest(plugins) {
         return [];
     return [plugins];
 }
-/** Verify the committed manifest against the corpus from a Vite context, throwing on drift. The bin
- *  and the plugin share this; the spike proved it runs cleanly inside the consumer's config. */
+/**
+ * Verify the committed manifest against the corpus from a Vite context, throwing on drift. The bin
+ *  and the plugin share this; the spike proved it runs cleanly inside the consumer's config.
+ */
 export async function verifyManifestFromVite(opts, root) {
     await evalVirtual(virtualSource(opts, 'verify'), root);
 }
-/** Regenerate the serialized manifest from the corpus in a Vite context, sharing the build's
- *  resolution. The cairn-manifest bin (a later task) will call this and write the result. */
+/**
+ * Regenerate the serialized manifest from the corpus in a Vite context, sharing the build's
+ *  resolution. The cairn-manifest bin (a later task) will call this and write the result.
+ */
 export async function buildManifestFromVite(opts, root) {
     return evalVirtual(virtualSource(opts, 'write'), root);
 }
-/** The cairnManifest plugin. It serves the verify virtual module to the app graph and, in
- *  buildStart, evaluates it through a nested Vite SSR load so a manifest drift fails the build. */
+/**
+ * The cairnManifest plugin. It serves the verify virtual module to the app graph and, in
+ *  buildStart, evaluates it through a nested Vite SSR load so a manifest drift fails the build.
+ */
 export function cairnManifest(opts) {
     let root = process.cwd();
     const plugin = {
@@ -121,13 +137,15 @@ export function cairnManifest(opts) {
     plugin[CAIRN_OPTIONS] = opts;
     return plugin;
 }
-/** Regenerate the committed manifest from the consumer's corpus and write it to the configured
+/**
+ * Regenerate the committed manifest from the consumer's corpus and write it to the configured
  *  manifestPath. It searches for the consumer's Vite config from `cwd`, derives the authoritative
  *  Vite root from the loaded config (so a configured `root` or a non-root cwd resolves correctly),
  *  reads the cairnManifest plugin's options off the instance, evaluates the write-mode virtual
  *  module through the build's own resolution, and writes the serialized manifest under the Vite
  *  root. The cairn-manifest bin calls this; it is exported so the write logic is testable apart
- *  from the CLI shell. */
+ *  from the CLI shell.
+ */
 export async function writeManifest(cwd = process.cwd()) {
     const { loadConfigFromFile } = await import('vite');
     const loaded = await loadConfigFromFile({ command: 'build', mode: 'production' }, undefined, cwd);
@@ -147,8 +165,10 @@ export async function writeManifest(cwd = process.cwd()) {
     await mkdir(dirname(outPath), { recursive: true });
     await writeFile(outPath, serialized);
 }
-/** Walk a Vite plugins option (which may nest arrays, hold falsy slots, or be a thenable) and return
- *  the stashed cairnManifest options from the first matching plugin, or null if there is none. */
+/**
+ * Walk a Vite plugins option (which may nest arrays, hold falsy slots, or be a thenable) and return
+ *  the stashed cairnManifest options from the first matching plugin, or null if there is none.
+ */
 function findCairnOptions(plugins) {
     if (!plugins)
         return null;
@@ -165,8 +185,10 @@ function findCairnOptions(plugins) {
     }
     return null;
 }
-/** A minimal plugin that serves only the given virtual module source, for the nested SSR load. It
- *  carries no buildStart, so the nested server never recurses into the verify. */
+/**
+ * A minimal plugin that serves only the given virtual module source, for the nested SSR load. It
+ *  carries no buildStart, so the nested server never recurses into the verify.
+ */
 function cairnVirtualOnly(source) {
     return {
         name: 'cairn-manifest-virtual',
@@ -180,10 +202,12 @@ function cairnVirtualOnly(source) {
         },
     };
 }
-/** Build the virtual module that reads only the adapter facts the doctor derives. It imports the
+/**
+ * Build the virtual module that reads only the adapter facts the doctor derives. It imports the
  *  configured config module and exports the string-typed `owner`, `repo`, `from`, and the media
  *  `bucketBinding` as JSON, so nothing else of the adapter (least of all a secret) crosses the
- *  boundary. */
+ *  boundary.
+ */
 function adapterFactsSource(opts) {
     return `
 import { cairn } from ${JSON.stringify(opts.configModule)};
@@ -198,12 +222,14 @@ if (typeof assets.bucketBinding === 'string') facts.mediaBucketBinding = assets.
 export const result = JSON.stringify(facts);
 `;
 }
-/** Read `{ owner, repo, from }` off the consumer's adapter by evaluating a tiny virtual module
+/**
+ * Read `{ owner, repo, from }` off the consumer's adapter by evaluating a tiny virtual module
  *  through the consumer's own Vite resolution, the same machinery the cairn-manifest bin uses.
  *  cairn-doctor calls this to fill inputs the operator did not pass. Derivation is best-effort:
  *  any failure (no Vite config, no cairnManifest plugin, a config module that throws) returns
  *  null, so the doctor degrades to flags instead of crashing. This runs only on the bin path,
- *  never in a Worker. */
+ *  never in a Worker.
+ */
 export async function readAdapterFacts(cwd = process.cwd()) {
     try {
         const { loadConfigFromFile } = await import('vite');

package/dist/vite/resolve-root.d.ts

@@ -1,5 +1,7 @@
-/** The shape of `loadConfigFromFile`'s result that the root derivation reads: the config file's own
- *  path and its `root` field. Typed structurally so the helper is testable without a real load. */
+/**
+ * The shape of `loadConfigFromFile`'s result that the root derivation reads: the config file's own
+ *  path and its `root` field. Typed structurally so the helper is testable without a real load.
+ */
 export interface LoadedViteConfig {
     /** The resolved path of the config file Vite loaded. */
     path: string;
@@ -8,9 +10,11 @@ export interface LoadedViteConfig {
         root?: string;
     };
 }
-/** The authoritative Vite root for the manifest bin, derived from the loaded config the way Vite
+/**
+ * The authoritative Vite root for the manifest bin, derived from the loaded config the way Vite
  *  resolves a relative `root`: against the config file's own directory, not cwd. An absolute `root`
  *  stands as given, and no `root` falls back to `cwd` (the directory the bin was run from). This
  *  separates the config-search dir (cwd) from the Vite root, so a non-root cwd or a config that
- *  sets `root` reads and writes the manifest under the real app root. */
+ *  sets `root` reads and writes the manifest under the real app root.
+ */
 export declare function resolveViteRoot(loaded: LoadedViteConfig, cwd: string): string;

package/dist/vite/resolve-root.js

@@ -1,11 +1,13 @@
 // The manifest bin's root derivation, split out so it is unit-testable without widening the public
 // /vite surface (only src/lib/vite/index.ts is the package subpath; this sibling is internal).
 import { dirname, isAbsolute, resolve } from 'node:path';
-/** The authoritative Vite root for the manifest bin, derived from the loaded config the way Vite
+/**
+ * The authoritative Vite root for the manifest bin, derived from the loaded config the way Vite
  *  resolves a relative `root`: against the config file's own directory, not cwd. An absolute `root`
  *  stands as given, and no `root` falls back to `cwd` (the directory the bin was run from). This
  *  separates the config-search dir (cwd) from the Vite root, so a non-root cwd or a config that
- *  sets `root` reads and writes the manifest under the real app root. */
+ *  sets `root` reads and writes the manifest under the real app root.
+ */
 export function resolveViteRoot(loaded, cwd) {
     const root = loaded.config.root;
     if (!root)

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@glw907/cairn-cms",
-  "version": "0.60.0",
+  "version": "0.62.1",
   "description": "Embedded, magic-link, GitHub-committing CMS for SvelteKit/Cloudflare sites.",
   "type": "module",
   "sideEffects": [
@@ -26,7 +26,7 @@
     "markdown"
   ],
   "scripts": {
-    "package": "svelte-package && node scripts/build-admin-css.mjs && chmod +x dist/vite/bin.js dist/doctor/bin.js",
+    "package": "svelte-package && node scripts/build-admin-css.mjs && node scripts/transpile-dist-svelte.mjs && chmod +x dist/vite/bin.js dist/doctor/bin.js",
     "check:package": "npm run package && publint --strict && attw --pack . --ignore-rules no-resolution cjs-resolves-to-esm internal-resolution-error",
     "check:reference": "npm run package && node scripts/reference-coverage.mjs",
     "check:reference:signatures": "npm run package && node scripts/check-reference-signatures.mjs",
@@ -34,6 +34,8 @@
     "check:docs": "node scripts/docs-links.mjs",
     "check:version": "node scripts/check-version.mjs",
     "check:prose": "node scripts/check-admin-prose.mjs",
+    "lint": "eslint src/lib",
+    "check:comments": "bash scripts/check-comments.sh",
     "prepare": "npm run package",
     "check": "svelte-check --tsconfig ./tsconfig.json",
     "test": "vitest run",
@@ -158,6 +160,9 @@
     "@vitest/browser": "^4.1.7",
     "@vitest/browser-playwright": "^4.1.7",
     "daisyui": "^5.5.23",
+    "eslint": "^9.39.4",
+    "eslint-plugin-jsdoc": "^63.0.7",
+    "eslint-plugin-tsdoc": "^0.5.2",
     "lightningcss": "^1.32.0",
     "playwright": "^1.60.0",
     "postcss": "^8.5.15",
@@ -167,6 +172,7 @@
     "svelte-check": "^4",
     "tailwindcss": "^4.3.0",
     "typescript": "^6.0.3",
+    "typescript-eslint": "^8.62.0",
     "vite": "^8.0",
     "vitest": "^4.1",
     "vitest-browser-svelte": "^2.1.1",

package/src/lib/components/AdminLayout.svelte

@@ -23,6 +23,7 @@ identical on every host regardless of the site's own theme.
   import ImageIcon from '@lucide/svelte/icons/image';
   import BlocksIcon from '@lucide/svelte/icons/blocks';
   import ExternalLinkIcon from '@lucide/svelte/icons/external-link';
+  import HelpCircleIcon from '@lucide/svelte/icons/circle-help';
   import './cairn-admin.css';
 
   interface Props {
@@ -186,6 +187,7 @@ identical on every host regardless of the site's own theme.
 
   const paletteCommands = $derived<Command[]>([
     ...coreItems.map((item) => ({ label: item.label, icon: item.icon, href: item.href })),
+    { label: 'Help', icon: HelpCircleIcon, href: '/admin/help' },
     { label: 'View the live site', icon: ExternalLinkIcon, href: '/', external: true },
     theme === 'cairn-admin'
       ? { label: 'Switch to dark mode', icon: MoonIcon, action: toggleTheme }
@@ -478,6 +480,26 @@ identical on every host regardless of the site's own theme.
           {/each}
         </div>
 
+        <!-- Help is a standing utility destination, pinned at the foot of the nav and set apart from
+             the content concepts by a top hairline. It is always present, labeled in plain text, and
+             styled as a peer of the nav items above it. -->
+        <div class="flex-none border-t border-[var(--cairn-card-border)] px-2 py-2">
+          <ul class="menu menu-sm w-full gap-0.5 p-0">
+            <li>
+              <a
+                href="/admin/help"
+                class={isActive('/admin/help')
+                  ? 'bg-primary/10 font-semibold text-primary'
+                  : 'font-medium text-[var(--color-subtle)]'}
+                aria-current={isActive('/admin/help') ? 'page' : undefined}
+              >
+                <HelpCircleIcon class="h-4 w-4" aria-hidden="true" />
+                Help
+              </a>
+            </li>
+          </ul>
+        </div>
+
         <div class="flex-none border-t border-[var(--cairn-card-border)] px-5 py-4">
           <div class="flex items-center gap-3">
             <div class="avatar avatar-placeholder">

package/src/lib/components/CairnAdmin.svelte

@@ -15,6 +15,7 @@ mount inside `AdminLayout`. No styling or wrapper elements of its own.
   import NavTree from './NavTree.svelte';
   import CairnMediaLibrary from './CairnMediaLibrary.svelte';
   import CairnTidySettings from './CairnTidySettings.svelte';
+  import HelpHome from './HelpHome.svelte';
   import type { AdminData } from '../sveltekit/cairn-admin.js';
   import type { ContentFormFailure } from '../sveltekit/content-routes.js';
   import type { ComponentRegistry } from '../render/registry.js';
@@ -72,6 +73,8 @@ mount inside `AdminLayout`. No styling or wrapper elements of its own.
       <CairnMediaLibrary data={data.page} {form} />
     {:else if data.view === 'settings'}
       <CairnTidySettings data={data.page} />
+    {:else if data.view === 'help'}
+      <HelpHome data={data.page} />
     {/if}
   </AdminLayout>
 {/if}

package/src/lib/components/CairnTidySettings.svelte

@@ -8,7 +8,7 @@ Two tiers with a truthful visibility gate:
     that tidy is enabled, a key is configured, and which model runs, but cannot edit any of it. The
     literal deploy-time tokens sit in a marked "For your developer" sub-block.
   - The EDITOR tier (the per-convention config) renders ONLY when tidy is enabled AND the key is
-    present (`data.enabled`). When tidy is not enabled, the editor tier is genuinely ABSENT, replaced
+    present (`data.enabled`). When tidy is not enabled, the editor tier is ABSENT, replaced
     by an honest labelled gate region with a read-only "what your developer needs to do" checklist and
     a "spellcheck still works" reassurance. No teasing disabled controls sit in the tab order.
 
@@ -515,7 +515,7 @@ home), diffable and shared across editors.
       </div>
     </form>
   {:else}
-    <!-- THE VISIBILITY GATE: tidy NOT enabled by the developer. The convention list is genuinely
+    <!-- THE VISIBILITY GATE: tidy NOT enabled by the developer. The convention list is
          absent, not disabled. One honest labelled region names the deploy-time task and who does it,
          with no disabled controls in the tab order. -->
     <div role="region" aria-label="Tidy is not set up" class="mt-6 flex flex-col items-center gap-3 rounded-2xl border border-[var(--cairn-card-border)] bg-base-100 p-10 text-center shadow-[var(--cairn-shadow)]">

package/src/lib/components/ComponentForm.svelte

@@ -56,7 +56,6 @@ binds out its live `values` and `incomplete` so the dialog can render that previ
   });
 
   const attributes = $derived(def.attributes ?? []);
-  // Non-repeatable slots render here; the repeatable list is handled separately.
   const flatSlots = $derived((def.slots ?? []).filter((s) => s.kind !== 'repeatable'));
   const repeatableSlots = $derived((def.slots ?? []).filter((s) => s.kind === 'repeatable'));