@heyo-sh/heyo-cms 0.0.0-stage → 0.1.0

package/dist/index-x72d1hzh.js

@@ -0,0 +1,2 @@
+class e extends Error{status;code;details;constructor(t,r={}){super(t,r.cause===void 0?void 0:{cause:r.cause});if(this.name="CmsError",this.status=r.status??400,this.code=r.code??"cms_error",r.details!==void 0)this.details=r.details}static notFound(t="Not found"){return new e(t,{status:404,code:"not_found"})}static forbidden(t="Forbidden"){return new e(t,{status:403,code:"forbidden"})}static unauthorized(t="Unauthorized"){return new e(t,{status:401,code:"unauthorized"})}static conflict(t){return new e(t,{status:409,code:"conflict"})}static validation(t,r){return new e(t,{status:422,code:"validation_failed",...r===void 0?{}:{details:r}})}}class n extends Error{path;constructor(t,r){super(t?`${t}: ${r}`:r);this.name="CmsConfigError",this.path=t}}
+export{e,n};

package/dist/index-y5mwknr9.js

@@ -0,0 +1,2 @@
+var N="cms_migrations";function e(u,i,a={}){return{name:u,type:i,nullable:a.default!==void 0?!1:a.nullable??!0,storage:"column",...a.default===void 0?{}:{default:a.default},...a.unique===void 0?{}:{unique:a.unique},...a.index===void 0?{}:{index:a.index},...a.array===void 0?{}:{array:a.array},...a.references===void 0?{}:{references:a.references}}}var l=()=>e("id","text",{nullable:!1,unique:!0}),n=()=>e("created_at","timestamp",{nullable:!1}),o=()=>e("updated_at","timestamp",{nullable:!1});function t(u,i,a={}){let d=i.map((c)=>({kind:"column",column:c})),r=a.unique===!0?"uniq":"idx";return{name:a.name??`${r}_${u}_${i.join("_")}`,table:u,targets:d,unique:a.unique===!0}}function s(u,i,a=[],d){return{name:u,columns:[...i].sort((r,c)=>r.name.localeCompare(c.name)),primaryKey:["id"],indexes:[...a].sort((r,c)=>r.name.localeCompare(c.name)),...d===void 0?{}:{documentColumn:d}}}function ze(){return[m(),_(),b(),f(),p(),x(),h(),y(),T(),g(),v(),k(),q(),S(),j(),w(),C()].sort((u,i)=>u.name.localeCompare(i.name))}function Ve(){return["cms_migrations",...ze().map((u)=>u.name)].sort()}function m(){return s("documents",[l(),e("collection","text",{nullable:!1}),e("data","json",{nullable:!1}),e("revision","integer",{nullable:!1,default:1}),e("scheduled_at","timestamp"),e("scheduled_patch","json"),e("deleted_at","timestamp"),e("purge_after","timestamp"),n(),o(),e("updated_by","text")],[t("documents",["collection"]),t("documents",["collection","deleted_at"]),t("documents",["collection","updated_at"]),t("documents",["scheduled_at"]),t("documents",["purge_after"])],"data")}function _(){return s("cms_users",[l(),e("email","text",{nullable:!1,unique:!0}),e("name","text"),e("password_hash","text"),e("two_factor_secret","text"),e("two_factor_enabled","boolean",{default:!1}),e("status","text",{nullable:!1,default:"active"}),e("roles","json",{nullable:!1,array:!0}),e("avatar_url","text"),e("locale","text"),e("last_login_at","timestamp"),n(),o()],[t("cms_users",["email"],{unique:!0})])}function b(){return s("cms_sessions",[l(),e("user_id","text",{nullable:!1,references:{table:"cms_users",column:"id",onDelete:"cascade"}}),e("token_hash","text",{nullable:!1,unique:!0}),e("ip","text"),e("user_agent","text"),e("expires_at","timestamp",{nullable:!1}),n()],[t("cms_sessions",["token_hash"],{unique:!0}),t("cms_sessions",["user_id"]),t("cms_sessions",["expires_at"])])}function f(){return s("cms_accounts",[l(),e("user_id","text",{nullable:!1,references:{table:"cms_users",column:"id",onDelete:"cascade"}}),e("provider","text",{nullable:!1}),e("provider_account_id","text",{nullable:!1}),e("email","text"),n(),o()],[t("cms_accounts",["provider","provider_account_id"],{unique:!0,name:"uniq_cms_accounts_provider_account"}),t("cms_accounts",["user_id"])])}function p(){return s("cms_tokens",[l(),e("type","text",{nullable:!1}),e("user_id","text",{references:{table:"cms_users",column:"id",onDelete:"cascade"}}),e("email","text"),e("token_hash","text",{nullable:!1,unique:!0}),e("data","json"),e("expires_at","timestamp",{nullable:!1}),e("consumed_at","timestamp"),n()],[t("cms_tokens",["token_hash"],{unique:!0}),t("cms_tokens",["user_id"]),t("cms_tokens",["type","expires_at"])])}function x(){return s("cms_api_keys",[l(),e("name","text",{nullable:!1}),e("user_id","text",{references:{table:"cms_users",column:"id",onDelete:"cascade"}}),e("key_hash","text",{nullable:!1,unique:!0}),e("prefix","text",{nullable:!1}),e("scopes","json",{nullable:!1,array:!0}),e("last_used_at","timestamp"),e("expires_at","timestamp"),e("revoked_at","timestamp"),n()],[t("cms_api_keys",["key_hash"],{unique:!0}),t("cms_api_keys",["user_id"])])}function h(){return s("cms_roles",[l(),e("name","text",{nullable:!1,unique:!0}),e("label","text"),e("permissions","json",{nullable:!1,array:!0}),n(),o()],[t("cms_roles",["name"],{unique:!0})])}function y(){return s("cms_ai_credentials",[l(),e("provider","text",{nullable:!1,unique:!0}),e("auth_type","text",{nullable:!1,default:"api-key"}),e("secret","text",{nullable:!1}),e("hint","text"),n(),o()],[t("cms_ai_credentials",["provider"],{unique:!0})])}function T(){return s("cms_ai_mutations",[l(),e("idempotency_key","text",{nullable:!1,unique:!0}),e("run_id","text",{nullable:!1}),e("collection","text"),e("document_id","text"),e("result","json"),n()],[t("cms_ai_mutations",["idempotency_key"],{unique:!0}),t("cms_ai_mutations",["run_id"])])}function g(){return s("cms_ai_plans",[l(),e("run_id","text",{nullable:!1}),e("actor_id","text"),e("kind","text",{nullable:!1}),e("summary","text",{nullable:!1}),e("operations","json",{nullable:!1}),e("status","text",{nullable:!1,default:"pending"}),e("result","json"),e("expires_at","timestamp",{nullable:!1}),e("approved_at","timestamp"),n()],[t("cms_ai_plans",["run_id"]),t("cms_ai_plans",["status","expires_at"])])}function v(){return s("media",[l(),e("filename","text",{nullable:!1}),e("mime_type","text",{nullable:!1}),e("size","bigint",{nullable:!1}),e("width","integer"),e("height","integer"),e("storage_key","text",{nullable:!1,unique:!0}),e("checksum","text"),e("alt","json"),e("focal_x","real"),e("focal_y","real"),e("status","text",{nullable:!1,default:"active"}),e("orphaned_at","timestamp"),e("purge_after","timestamp"),e("purge_error","text"),e("metadata","json"),e("created_by","text"),n(),o()],[t("media",["storage_key"],{unique:!0}),t("media",["status"]),t("media",["status","purge_after"])])}function k(){return s("media_usages",[l(),e("media_id","text",{nullable:!1,references:{table:"media",column:"id",onDelete:"cascade"}}),e("collection","text",{nullable:!1}),e("document_id","text",{nullable:!1}),e("field","text",{nullable:!1}),e("locale","text",{nullable:!1,default:""}),n()],[t("media_usages",["media_id"]),t("media_usages",["document_id"]),t("media_usages",["media_id","document_id","field","locale"],{unique:!0,name:"uniq_media_usages_reference"})])}function q(){return s("webhooks",[l(),e("url","text",{nullable:!1}),e("events","json",{nullable:!1,array:!0}),e("filters","json"),e("headers","json"),e("secret","text"),e("active","boolean",{nullable:!1,default:!0}),n(),o()],[t("webhooks",["active"])])}function S(){return s("webhook_deliveries",[l(),e("webhook_id","text",{nullable:!1,references:{table:"webhooks",column:"id",onDelete:"cascade"}}),e("event_id","text",{nullable:!1}),e("event_type","text",{nullable:!1}),e("status","text",{nullable:!1,default:"pending"}),e("attempt","integer",{nullable:!1,default:0}),e("request_body","json"),e("response_status","integer"),e("response_body","text"),e("error","text"),e("next_attempt_at","timestamp"),e("delivered_at","timestamp"),n()],[t("webhook_deliveries",["webhook_id","created_at"]),t("webhook_deliveries",["status","next_attempt_at"]),t("webhook_deliveries",["event_id"])])}function j(){return s("outbox",[l(),e("event_id","text",{nullable:!1,unique:!0}),e("type","text",{nullable:!1}),e("payload","json",{nullable:!1}),e("previous","json"),e("actor","json"),e("collection","text"),e("document_id","text"),e("status","text",{nullable:!1,default:"pending"}),e("attempts","integer",{nullable:!1,default:0}),e("available_at","timestamp",{nullable:!1}),e("processed_at","timestamp"),e("error","text"),n()],[t("outbox",["event_id"],{unique:!0}),t("outbox",["status","available_at"]),t("outbox",["document_id","created_at"])])}function w(){return s("activity",[l(),e("actor_id","text"),e("actor_source","text"),e("action","text",{nullable:!1}),e("source","text"),e("collection","text"),e("document_id","text"),e("locale","text"),e("changes","json"),e("ip","text"),n()],[t("activity",["collection","document_id"]),t("activity",["actor_id"]),t("activity",["created_at"])])}function C(){return s("jobs",[l(),e("type","text",{nullable:!1}),e("payload","json"),e("status","text",{nullable:!1,default:"pending"}),e("run_at","timestamp",{nullable:!1}),e("attempts","integer",{nullable:!1,default:0}),e("locked_at","timestamp"),e("locked_by","text"),e("completed_at","timestamp"),e("error","text"),n()],[t("jobs",["status","run_at"]),t("jobs",["type"])])}
+export{N,ze,Ve};

package/dist/index-ymq6jsar.js

@@ -0,0 +1,2 @@
+import{ze}from"./index-y5mwknr9.js";var g="documents",Qt="data";function At(n){let e=[...Object.values(n.collections),...Object.values(n.globals)].sort((t,a)=>t.name.localeCompare(a.name)),o=e.flatMap(r),s=ze().map((t)=>t.name===g?{...t,indexes:[...t.indexes,...o].sort((a,l)=>a.name.localeCompare(l.name))}:t);for(let t of n.pluginTables??[])s.push(u(t));return{version:1,tables:s.sort((t,a)=>t.name.localeCompare(a.name)),collections:e.map(c)}}function xt(){return{version:1,tables:[],collections:[]}}function u(n){return{...n,columns:[...n.columns].sort((e,o)=>e.name.localeCompare(o.name)),indexes:[...n.indexes].sort((e,o)=>e.name.localeCompare(o.name))}}function c(n){return{name:n.name,slug:n.slug,kind:n.kind,table:g,documentColumn:Qt,fields:Object.entries(n.fields).map(([e,o])=>i(e,o)).sort((e,o)=>e.name.localeCompare(o.name))}}function i(n,e){let o=e.defaultValue??e.column.default;return{name:n,type:e.type,localized:e.localized,required:e.required,unique:e.column.unique===!0,index:e.column.index===!0||e.column.unique===!0,...o===void 0?{}:{default:o},...e.relationTo===void 0?{}:{relationTo:e.relationTo},column:e.column}}function r(n){let e=[];for(let[o,s]of Object.entries(n.fields)){let t=s.column.unique===!0;if(!(t||s.column.index===!0)||s.localized)continue;e.push({name:m(n.slug,o,t),table:g,targets:[{kind:"json",column:Qt,path:[o],type:s.column.type}],unique:t,where:{column:"collection",equals:n.slug}})}return e.sort((o,s)=>o.name.localeCompare(s.name))}function m(n,e,o){return`${o?"uniq":"idx"}_documents_${n}_${e}`}
+export{g,Qt,At,xt};

package/dist/index.d.ts

@@ -0,0 +1,25 @@
+/**
+ * `@heyo-sh/heyo-cms`.
+ *
+ * The configuration surface and the contracts. Databases, fields and storage
+ * come from their own entry points so a Worker bundle only carries what it
+ * uses.
+ */
+export { defaultAdminPath, defaultBasePath, defaultMigrationsDirectory, defineCollection, defineGlobal, heyoCms, systemActor, } from "./config";
+export { aiActionsFor, createAi, defineAiAction, getAiAction, piCompletion, registeredAiActions, } from "./ai/index";
+export { defineEditorMark, defineEditorNode, describeEditorSchema, getEditorMark, getEditorNode, registeredEditorMarks, registeredEditorNodes, renderRichText, richTextFromMarkdown, richTextFromText, richTextToHtml, richTextToMarkdown, richTextToPlainText, } from "./editor/index";
+export { createWebhooks, signatureHeader, signPayload, verifySignature, webhookRetryJob, } from "./webhooks/index";
+export { cmsScheduled, runDueJobs, startJobRunner, type JobRunnerHandle, type JobRunnerOptions, } from "./jobs/runner";
+export { expandRoles, grants, intersectPermissions, isValidScope, permissionFor, permits, scopePermissions, } from "./access/index";
+export { CmsConfigError, CmsError } from "./errors";
+export { isRtlLocale, localeName, localeRecords, LOCALE_NAMES, } from "./i18n/index";
+export { createId, createOrderedId } from "./ids";
+export { createCmsHttp, Router, type CmsHttp, type RouteRecord, } from "./http/index";
+export { applyFieldReadAccess, assertFieldWriteAccess, buildHookPipeline, cursorWhere, encodeCursor, globalRowId, hookPipelineEntries, listTrashed, localeContext, resolveLocalized, rowToDocument, scheduledPatch, scopedDb, toStoredData, validateFields, CmsEngine, EventBuffer, JobRunner, Outbox, RelationLoader, relationTarget, runAfterHooks, runBeforeHooks, type CollectionHookPipeline, type EngineOptions, type EventDispatch, type JobDefinition, type JobHost, type ListTrashedOptions, type LocaleContext, type ScheduledPatch, type WriteIntent, } from "./engine/index";
+export { collectMediaReferences, createMedia, mediaGcJob, prepareUpload, probeImage, referencesMedia, stripImageMetadata, syncMediaUsages, toMediaDocument, variantKey, variantTransform, type MediaGcContext, type MediaReference, type MediaServiceOptions, type PreparedUpload, } from "./media/index";
+export { parseByteSize, parseDuration } from "./duration";
+export { describePanel } from "./panel";
+export { buildSchemaSnapshot, documentsDataColumn, documentsTableName, emptySnapshot, planMigration, systemTableNames, systemTables, } from "./schema/index";
+export { defineField } from "./fields/registry";
+export type * from "./types/index";
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,EACL,gBAAgB,EAChB,eAAe,EACf,0BAA0B,EAC1B,gBAAgB,EAChB,YAAY,EACZ,OAAO,EACP,WAAW,GACZ,MAAM,UAAU,CAAC;AAClB,OAAO,EACL,YAAY,EACZ,QAAQ,EACR,cAAc,EACd,WAAW,EACX,YAAY,EACZ,mBAAmB,GACpB,MAAM,YAAY,CAAC;AACpB,OAAO,EACL,gBAAgB,EAChB,gBAAgB,EAChB,oBAAoB,EACpB,aAAa,EACb,aAAa,EACb,qBAAqB,EACrB,qBAAqB,EACrB,cAAc,EACd,oBAAoB,EACpB,gBAAgB,EAChB,cAAc,EACd,kBAAkB,EAClB,mBAAmB,GACpB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,cAAc,EACd,eAAe,EACf,WAAW,EACX,eAAe,EACf,eAAe,GAChB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EACL,YAAY,EACZ,UAAU,EACV,cAAc,EACd,KAAK,eAAe,EACpB,KAAK,gBAAgB,GACtB,MAAM,eAAe,CAAC;AACvB,OAAO,EACL,WAAW,EACX,MAAM,EACN,oBAAoB,EACpB,YAAY,EACZ,aAAa,EACb,OAAO,EACP,gBAAgB,GACjB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,cAAc,EAAE,QAAQ,EAAE,MAAM,UAAU,CAAC;AACpD,OAAO,EACL,WAAW,EACX,UAAU,EACV,aAAa,EACb,YAAY,GACb,MAAM,cAAc,CAAC;AACtB,OAAO,EAAE,QAAQ,EAAE,eAAe,EAAE,MAAM,OAAO,CAAC;AAClD,OAAO,EACL,aAAa,EACb,MAAM,EACN,KAAK,OAAO,EACZ,KAAK,WAAW,GACjB,MAAM,cAAc,CAAC;AACtB,OAAO,EACL,oBAAoB,EACpB,sBAAsB,EACtB,iBAAiB,EACjB,WAAW,EACX,YAAY,EACZ,WAAW,EACX,mBAAmB,EACnB,WAAW,EACX,aAAa,EACb,gBAAgB,EAChB,aAAa,EACb,cAAc,EACd,QAAQ,EACR,YAAY,EACZ,cAAc,EACd,SAAS,EACT,WAAW,EACX,SAAS,EACT,MAAM,EACN,cAAc,EACd,cAAc,EACd,aAAa,EACb,cAAc,EACd,KAAK,sBAAsB,EAC3B,KAAK,aAAa,EAClB,KAAK,aAAa,EAClB,KAAK,aAAa,EAClB,KAAK,OAAO,EACZ,KAAK,kBAAkB,EACvB,KAAK,aAAa,EAClB,KAAK,cAAc,EACnB,KAAK,WAAW,GACjB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,sBAAsB,EACtB,WAAW,EACX,UAAU,EACV,aAAa,EACb,UAAU,EACV,eAAe,EACf,kBAAkB,EAClB,eAAe,EACf,eAAe,EACf,UAAU,EACV,gBAAgB,EAChB,KAAK,cAAc,EACnB,KAAK,cAAc,EACnB,KAAK,mBAAmB,EACxB,KAAK,cAAc,GACpB,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAC1D,OAAO,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AACxC,OAAO,EACL,mBAAmB,EACnB,mBAAmB,EACnB,kBAAkB,EAClB,aAAa,EACb,aAAa,EACb,gBAAgB,EAChB,YAAY,GACb,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAChD,mBAAmB,eAAe,CAAC"}

package/dist/index.js

@@ -0,0 +1 @@
+import{x,Y,Ne,wt,Tn,Sn,de,ue,On,J,_n,pe,Pn}from"./index-9zqnf6gx.js";import{ae,z,$e,ce,le,_}from"./index-vq2978e7.js";import{Rt,Ln,P,Ge,Ct,Tt,Re,S,rn,A,Ce,Ie,Te}from"./index-2z1qe5mw.js";import"./index-vxw0a03g.js";import{Xe,Se,De,Dt,et,tt,nt,ot,un,Mt,rt,V,qt,Lt,Ft,pn,Jt,Nt,Wn,Hn,Bn,it}from"./index-ty698y02.js";import{_e,Cn,Pe}from"./index-nvgwyykk.js";import{Ut,Wt,Ht,W,q,L,st,mn,Me,Bt,ut,fn,zt}from"./index-wj8y1xcj.js";import"./index-g4crf47y.js";import{Qe,ln,dn}from"./index-hy1x46nf.js";import{Le,ht}from"./index-hq05mc1n.js";import{be,we,wn}from"./index-7k091gpe.js";import{d}from"./index-9g2n7xa6.js";import{me,He,Be}from"./index-2757kej5.js";import{T}from"./index-k8wbg1dw.js";import{Ae}from"./index-gpwcmmvr.js";import{g,Qt,At,xt}from"./index-ymq6jsar.js";import{ze,Ve}from"./index-y5mwknr9.js";import"./index-5ngtc7gy.js";import{b,ee}from"./index-cbwwtcm4.js";import{w,ge}from"./index-2kb5nbxx.js";import{e,n}from"./index-x72d1hzh.js";export{n as CmsConfigError,rt as CmsEngine,e as CmsError,tt as EventBuffer,et as JobRunner,qt as LOCALE_NAMES,nt as Outbox,ot as RelationLoader,_e as Router,$e as aiActionsFor,le as applyFieldReadAccess,_ as assertFieldWriteAccess,Xe as buildHookPipeline,At as buildSchemaSnapshot,dn as cmsScheduled,Wt as collectMediaReferences,ht as createAi,Pe as createCmsHttp,w as createId,zt as createMedia,ge as createOrderedId,Jt as createWebhooks,q as cursorWhere,He as defaultAdminPath,me as defaultBasePath,Be as defaultMigrationsDirectory,ae as defineAiAction,Wn as defineCollection,Y as defineEditorMark,x as defineEditorNode,T as defineField,Hn as defineGlobal,de as describeEditorSchema,Cn as describePanel,Qt as documentsDataColumn,g as documentsTableName,xt as emptySnapshot,W as encodeCursor,Ge as expandRoles,z as getAiAction,wt as getEditorMark,Ne as getEditorNode,V as globalRowId,Ln as grants,Bn as heyoCms,Dt as hookPipelineEntries,Ct as intersectPermissions,Ft as isRtlLocale,Re as isValidScope,Mt as listTrashed,S as localeContext,Lt as localeName,pn as localeRecords,Bt as mediaGcJob,ee as parseByteSize,b as parseDuration,Rt as permissionFor,P as permits,Le as piCompletion,Ae as planMigration,fn as prepareUpload,st as probeImage,Ut as referencesMedia,ce as registeredAiActions,Sn as registeredEditorMarks,Tn as registeredEditorNodes,un as relationTarget,ue as renderRichText,rn as resolveLocalized,pe as richTextFromMarkdown,Pn as richTextFromText,On as richTextToHtml,J as richTextToMarkdown,_n as richTextToPlainText,A as rowToDocument,De as runAfterHooks,Se as runBeforeHooks,Qe as runDueJobs,Te as scheduledPatch,Tt as scopePermissions,d as scopedDb,we as signPayload,be as signatureHeader,ln as startJobRunner,ut as stripImageMetadata,Ht as syncMediaUsages,it as systemActor,Ve as systemTableNames,ze as systemTables,L as toMediaDocument,Ce as toStoredData,Ie as validateFields,Me as variantKey,mn as variantTransform,wn as verifySignature,Nt as webhookRetryJob};

package/dist/jobs/runner.d.ts

@@ -0,0 +1,77 @@
+import type { Duration } from "../types/config";
+import type { CmsInstance } from "../types/instance";
+import type { JobRunArgs, JobRunReport } from "../types/jobs";
+/**
+ * Something has to call `cms.jobs.run()`.
+ *
+ * The package deliberately starts no timer of its own (stage 5): it has to
+ * load on Workers and on Lambda, where a `setInterval` either does nothing
+ * or keeps an invocation alive and bills for it. So the sweeps are a
+ * function, and this file is the two ways a deployment calls it — a timer
+ * for a process that has one, and a handler for a platform that owns the
+ * clock.
+ *
+ * Both do the same two things in the same order: run what is due, then drain
+ * the outbox. The second part is not optional on serverless, where the
+ * process freezes the moment the handler returns and anything still in the
+ * outbox waits for the next cron.
+ */
+export interface RunDueOptions extends JobRunArgs {
+    /** Delivers the events the sweep produced before returning. Default true. */
+    drainEvents?: boolean;
+}
+export declare function runDueJobs(cms: CmsInstance, options?: RunDueOptions): Promise<JobRunReport>;
+export interface JobRunnerOptions extends RunDueOptions {
+    cms: CmsInstance;
+    /** How often to sweep. Defaults to one minute. */
+    interval?: Duration | number;
+    /** Runs one sweep immediately instead of waiting for the first tick. */
+    immediate?: boolean;
+    onReport?: (report: JobRunReport) => void;
+    /**
+     * Called when a sweep throws.
+     *
+     * A sweep that throws is a database that is unreachable, not a job that
+     * failed — individual failures are recorded and counted inside the report.
+     * Default: log to `console.error`, because a background loop that swallows
+     * its own outage is worse than a noisy one.
+     */
+    onError?: (error: unknown) => void;
+    /** Stops the loop. The same signal a server shutdown already has. */
+    signal?: AbortSignal;
+}
+export interface JobRunnerHandle {
+    /** Runs one sweep now, outside the schedule. */
+    runNow(): Promise<JobRunReport>;
+    /** Stops the loop and waits for a sweep in flight. */
+    stop(): Promise<void>;
+    readonly running: boolean;
+}
+/**
+ * The Node and Bun answer: a timer that never overlaps itself.
+ *
+ * Overlap is the failure that matters here. A sweep that takes longer than
+ * the interval — a backlog of scheduled changes, a slow webhook endpoint —
+ * would otherwise start a second pass over the same rows, and every job in
+ * the product claims its row before acting precisely because that must stay
+ * harmless. Not starting the second pass is cheaper than relying on it.
+ */
+export declare function startJobRunner(options: JobRunnerOptions): JobRunnerHandle;
+/**
+ * The Workers answer: the platform owns the clock.
+ *
+ * ```ts
+ * export default {
+ *   fetch: (request) => cms.handler(request),
+ *   scheduled: cmsScheduled(cms),
+ * };
+ * ```
+ *
+ * `waitUntil` is used when the platform provides it, so the outbox drain is
+ * allowed to outlive the handler rather than being killed halfway through a
+ * webhook.
+ */
+export declare function cmsScheduled(cms: CmsInstance, options?: RunDueOptions): (event: unknown, env?: unknown, context?: {
+    waitUntil?: (promise: Promise<unknown>) => void;
+}) => Promise<void>;
+//# sourceMappingURL=runner.d.ts.map

package/dist/jobs/runner.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"runner.d.ts","sourceRoot":"","sources":["../../src/jobs/runner.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAC;AAChD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AACrD,OAAO,KAAK,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAE9D;;;;;;;;;;;;;;GAcG;AACH,MAAM,WAAW,aAAc,SAAQ,UAAU;IAC/C,6EAA6E;IAC7E,WAAW,CAAC,EAAE,OAAO,CAAC;CACvB;AAED,wBAAsB,UAAU,CAC9B,GAAG,EAAE,WAAW,EAChB,OAAO,GAAE,aAAkB,GAC1B,OAAO,CAAC,YAAY,CAAC,CAKvB;AAED,MAAM,WAAW,gBAAiB,SAAQ,aAAa;IACrD,GAAG,EAAE,WAAW,CAAC;IACjB,kDAAkD;IAClD,QAAQ,CAAC,EAAE,QAAQ,GAAG,MAAM,CAAC;IAC7B,wEAAwE;IACxE,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,QAAQ,CAAC,EAAE,CAAC,MAAM,EAAE,YAAY,KAAK,IAAI,CAAC;IAC1C;;;;;;;OAOG;IACH,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,IAAI,CAAC;IACnC,qEAAqE;IACrE,MAAM,CAAC,EAAE,WAAW,CAAC;CACtB;AAED,MAAM,WAAW,eAAe;IAC9B,gDAAgD;IAChD,MAAM,IAAI,OAAO,CAAC,YAAY,CAAC,CAAC;IAChC,sDAAsD;IACtD,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IACtB,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;CAC3B;AAED;;;;;;;;GAQG;AACH,wBAAgB,cAAc,CAAC,OAAO,EAAE,gBAAgB,GAAG,eAAe,CAqEzE;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,YAAY,CAC1B,GAAG,EAAE,WAAW,EAChB,OAAO,GAAE,aAAkB,GAC1B,CACD,KAAK,EAAE,OAAO,EACd,GAAG,CAAC,EAAE,OAAO,EACb,OAAO,CAAC,EAAE;IAAE,SAAS,CAAC,EAAE,CAAC,OAAO,EAAE,OAAO,CAAC,OAAO,CAAC,KAAK,IAAI,CAAA;CAAE,KAC1D,OAAO,CAAC,IAAI,CAAC,CAMjB"}

package/dist/jobs.d.ts

@@ -0,0 +1,11 @@
+/**
+ * `@heyo-sh/heyo-cms/jobs`.
+ *
+ * The scheduled-change sweep, the trash purge, `media-gc` and the webhook
+ * retries all run from `cms.jobs.run()`. This entry point is how something
+ * calls it on a schedule: a timer in a long-lived process, or the platform's
+ * own cron on Workers and Vercel.
+ */
+export { cmsScheduled, runDueJobs, startJobRunner, type JobRunnerHandle, type JobRunnerOptions, type RunDueOptions, } from "./jobs/runner";
+export type { CmsJobs, JobFailure, JobResult, JobRunArgs, JobRunReport, } from "./types/jobs";
+//# sourceMappingURL=jobs.d.ts.map

package/dist/jobs.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"jobs.d.ts","sourceRoot":"","sources":["../src/jobs.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,OAAO,EACL,YAAY,EACZ,UAAU,EACV,cAAc,EACd,KAAK,eAAe,EACpB,KAAK,gBAAgB,EACrB,KAAK,aAAa,GACnB,MAAM,eAAe,CAAC;AACvB,YAAY,EACV,OAAO,EACP,UAAU,EACV,SAAS,EACT,UAAU,EACV,YAAY,GACb,MAAM,cAAc,CAAC"}

package/dist/jobs.js

@@ -0,0 +1 @@
+import{Qe,ln,dn}from"./index-hy1x46nf.js";export{dn as cmsScheduled,Qe as runDueJobs,ln as startJobRunner};

package/dist/media/document.d.ts

@@ -0,0 +1,28 @@
+import type { JsonObject } from "../types/json";
+import type { MediaDocument } from "../types/media";
+import type { Row } from "../types/query";
+import type { StorageAdapter } from "../types/storage";
+/**
+ * Metadata keys the engine owns.
+ *
+ * The crop rectangle and the list of rendered sizes live inside the `metadata`
+ * column because they are per-file facts no index ever has to answer about,
+ * and two more columns on a system table is two more migrations for every
+ * deployment that will ever exist. They are hidden from
+ * `MediaDocument.metadata` and refused on write, so "your metadata" stays
+ * yours.
+ */
+export declare const reservedMetadata: readonly ["crop", "variants"];
+/**
+ * A `media` row as the rest of the world sees it.
+ *
+ * `url` is the adapter's public URL rather than a signed one: signing is
+ * cryptography, and making this asynchronous would charge every list of
+ * twenty-five files twenty-five signatures for a feature most deployments do
+ * not use. A private bucket signs at the moment of serving instead, which is
+ * what `cms.media.variant()` returns.
+ */
+export declare function toMediaDocument(row: Row, storage: StorageAdapter): MediaDocument;
+/** The document as an event payload: plain JSON, no behaviour, no aliasing. */
+export declare function mediaJson(media: MediaDocument): JsonObject;
+//# sourceMappingURL=document.d.ts.map

package/dist/media/document.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"document.d.ts","sourceRoot":"","sources":["../../src/media/document.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,UAAU,EAAa,MAAM,eAAe,CAAC;AAC3D,OAAO,KAAK,EAAwB,aAAa,EAAe,MAAM,gBAAgB,CAAC;AACvF,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,gBAAgB,CAAC;AAC1C,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAEvD;;;;;;;;;GASG;AACH,eAAO,MAAM,gBAAgB,YAAI,MAAM,EAAE,UAAU,CAAU,CAAC;AAE9D;;;;;;;;GAQG;AACH,wBAAgB,eAAe,CAC7B,GAAG,EAAE,GAAG,EACR,OAAO,EAAE,cAAc,GACtB,aAAa,CA8Bf;AAED,+EAA+E;AAC/E,wBAAgB,SAAS,CAAC,KAAK,EAAE,aAAa,GAAG,UAAU,CAE1D"}

package/dist/media/gc.d.ts

@@ -0,0 +1,46 @@
+import type { JobDefinition } from "../engine/jobs";
+import type { BufferedEvent, OutboxEntryMeta } from "../engine/outbox";
+import type { ResolvedCmsConfig, UploadsConfig } from "../types/config";
+import type { DatabaseAdapter } from "../types/database";
+import type { MediaCollectArgs, MediaCollectReport, MediaDocument } from "../types/media";
+import type { Row, Tx } from "../types/query";
+import type { StorageAdapter } from "../types/storage";
+export interface MediaGcContext {
+    config: ResolvedCmsConfig;
+    database: () => Promise<DatabaseAdapter>;
+    storage: () => Promise<StorageAdapter>;
+    emit: (tx: Tx, events: BufferedEvent[], meta: OutboxEntryMeta) => Promise<void>;
+    deliver: () => void;
+}
+/** Files whose grace period has run out, oldest obligation first. */
+export declare function dueMedia(context: MediaGcContext, now: Date, limit: number): Promise<Row[]>;
+export declare function collectMedia(context: MediaGcContext, args?: MediaCollectArgs): Promise<MediaCollectReport>;
+export type CollectOutcome = "purged" | "reclaimed" | "taken";
+/**
+ * Takes one file, or discovers it should not be taken.
+ *
+ * The status change is a conditional update — the same portable claim the
+ * outbox and the scheduler use — so two collectors running at once cannot
+ * both delete the same object, on any of the three engines and without a
+ * lock.
+ */
+export declare function collectOne(context: MediaGcContext, row: Row, now: Date): Promise<CollectOutcome>;
+/**
+ * The sweep, as the job registry sees it.
+ *
+ * Registered next to `scheduled-changes` and `trash-purge` rather than run on
+ * a timer of its own: the deployment decides what calls `cms.jobs.run()`,
+ * because the package does not know whether it is in a process that has
+ * timers (stage 5).
+ */
+export declare function mediaGcJob(context: MediaGcContext): JobDefinition;
+/**
+ * Every object this file owns: the original and every size rendered from it.
+ *
+ * The recorded list plus the declared one. A size removed from the
+ * configuration still has objects in the bucket, and a size added since the
+ * last render has none but costs nothing to ask about — and a leaked
+ * derivative is a file nobody will ever find again.
+ */
+export declare function storageKeysOf(media: MediaDocument, uploads: UploadsConfig | undefined): string[];
+//# sourceMappingURL=gc.d.ts.map

package/dist/media/gc.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"gc.d.ts","sourceRoot":"","sources":["../../src/media/gc.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AACpD,OAAO,KAAK,EAAE,aAAa,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AACvE,OAAO,KAAK,EAAE,iBAAiB,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AACxE,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AAGzD,OAAO,KAAK,EACV,gBAAgB,EAChB,kBAAkB,EAClB,aAAa,EACd,MAAM,gBAAgB,CAAC;AACxB,OAAO,KAAK,EAAE,GAAG,EAAE,EAAE,EAAE,MAAM,gBAAgB,CAAC;AAC9C,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAmBvD,MAAM,WAAW,cAAc;IAC7B,MAAM,EAAE,iBAAiB,CAAC;IAC1B,QAAQ,EAAE,MAAM,OAAO,CAAC,eAAe,CAAC,CAAC;IACzC,OAAO,EAAE,MAAM,OAAO,CAAC,cAAc,CAAC,CAAC;IACvC,IAAI,EAAE,CACJ,EAAE,EAAE,EAAE,EACN,MAAM,EAAE,aAAa,EAAE,EACvB,IAAI,EAAE,eAAe,KAClB,OAAO,CAAC,IAAI,CAAC,CAAC;IACnB,OAAO,EAAE,MAAM,IAAI,CAAC;CACrB;AAED,qEAAqE;AACrE,wBAAsB,QAAQ,CAC5B,OAAO,EAAE,cAAc,EACvB,GAAG,EAAE,IAAI,EACT,KAAK,EAAE,MAAM,GACZ,OAAO,CAAC,GAAG,EAAE,CAAC,CAqBhB;AAED,wBAAsB,YAAY,CAChC,OAAO,EAAE,cAAc,EACvB,IAAI,GAAE,gBAAqB,GAC1B,OAAO,CAAC,kBAAkB,CAAC,CAyB7B;AAED,MAAM,MAAM,cAAc,GAAG,QAAQ,GAAG,WAAW,GAAG,OAAO,CAAC;AAE9D;;;;;;;GAOG;AACH,wBAAsB,UAAU,CAC9B,OAAO,EAAE,cAAc,EACvB,GAAG,EAAE,GAAG,EACR,GAAG,EAAE,IAAI,GACR,OAAO,CAAC,cAAc,CAAC,CAqDzB;AAED;;;;;;;GAOG;AACH,wBAAgB,UAAU,CAAC,OAAO,EAAE,cAAc,GAAG,aAAa,CAcjE;AAED;;;;;;;GAOG;AACH,wBAAgB,aAAa,CAC3B,KAAK,EAAE,aAAa,EACpB,OAAO,EAAE,aAAa,GAAG,SAAS,GACjC,MAAM,EAAE,CASV"}

package/dist/media/index.d.ts

@@ -0,0 +1,20 @@
+/**
+ * Media: storage, processing and the lifecycle.
+ *
+ * Three separate concerns that only make sense together. Storage is where the
+ * bytes live; processing is what happens to them on the way in and on the way
+ * out; the lifecycle is the reference counting that lets a file be removed
+ * from a page without being destroyed (section 6).
+ *
+ * Nothing here is HTTP-aware. The routes in stage 7 and the library screen in
+ * stage 8 call exactly these functions.
+ */
+export { mediaJson, reservedMetadata, toMediaDocument } from "./document";
+export { collectMedia, collectOne, dueMedia, mediaGcJob, storageKeysOf, type CollectOutcome, type MediaGcContext, } from "./gc";
+export { matchesMime, prepareUpload, sanitiseFilename, type PrepareUploadOptions, type PreparedUpload, } from "./pipeline";
+export { extensionFor, imageContentType, probeImage } from "./probe";
+export { createMedia, type MediaServiceOptions } from "./service";
+export { stripImageMetadata } from "./strip";
+export { collectMediaReferences, mediaTable, mediaUsagesTable, purgeDeadline, referencesMedia, richTextMediaAttribute, syncMediaUsages, type MediaReference, type SyncMediaUsagesOptions, type SyncMediaUsagesResult, } from "./usages";
+export { renderVariant, variantContentType, variantKey, variantNames, variantQuery, variantSize, variantTransform, } from "./variants";
+//# sourceMappingURL=index.d.ts.map

package/dist/media/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/media/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH,OAAO,EAAE,SAAS,EAAE,gBAAgB,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAC1E,OAAO,EACL,YAAY,EACZ,UAAU,EACV,QAAQ,EACR,UAAU,EACV,aAAa,EACb,KAAK,cAAc,EACnB,KAAK,cAAc,GACpB,MAAM,MAAM,CAAC;AACd,OAAO,EACL,WAAW,EACX,aAAa,EACb,gBAAgB,EAChB,KAAK,oBAAoB,EACzB,KAAK,cAAc,GACpB,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,YAAY,EAAE,gBAAgB,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrE,OAAO,EAAE,WAAW,EAAE,KAAK,mBAAmB,EAAE,MAAM,WAAW,CAAC;AAClE,OAAO,EAAE,kBAAkB,EAAE,MAAM,SAAS,CAAC;AAC7C,OAAO,EACL,sBAAsB,EACtB,UAAU,EACV,gBAAgB,EAChB,aAAa,EACb,eAAe,EACf,sBAAsB,EACtB,eAAe,EACf,KAAK,cAAc,EACnB,KAAK,sBAAsB,EAC3B,KAAK,qBAAqB,GAC3B,MAAM,UAAU,CAAC;AAClB,OAAO,EACL,aAAa,EACb,kBAAkB,EAClB,UAAU,EACV,YAAY,EACZ,YAAY,EACZ,WAAW,EACX,gBAAgB,GACjB,MAAM,YAAY,CAAC"}

package/dist/media/pipeline.d.ts

@@ -0,0 +1,36 @@
+import type { UploadsConfig } from "../types/config";
+import type { ImageInfo } from "../types/media";
+/**
+ * What happens between "here is a file" and "it is in the bucket".
+ *
+ * Validate, identify, shrink, strip, fingerprint — in that order, and all of
+ * it before a single byte reaches storage. Doing any of it afterwards would
+ * mean a rejected upload still costs a write, and a downscale that failed
+ * would leave the original in the bucket forever.
+ */
+export interface PreparedUpload {
+    data: Uint8Array;
+    contentType: string;
+    filename: string;
+    /** Null for anything that is not an image we can read. */
+    info: ImageInfo | null;
+    checksum: string;
+    extension: string;
+}
+export interface PrepareUploadOptions {
+    bytes: Uint8Array;
+    filename: string;
+    /** What the client claimed. Overruled by the bytes when they disagree. */
+    contentType: string;
+    uploads: UploadsConfig;
+}
+export declare function prepareUpload(options: PrepareUploadOptions): Promise<PreparedUpload>;
+export declare function matchesMime(contentType: string, pattern: string): boolean;
+/**
+ * A filename that is safe to show, log and put in a header.
+ *
+ * It is never used to build a storage key — those are derived from the id —
+ * so this is about display and `content-disposition`, not about traversal.
+ */
+export declare function sanitiseFilename(filename: string): string;
+//# sourceMappingURL=pipeline.d.ts.map

package/dist/media/pipeline.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pipeline.d.ts","sourceRoot":"","sources":["../../src/media/pipeline.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAgB,aAAa,EAAE,MAAM,iBAAiB,CAAC;AACnE,OAAO,KAAK,EAAE,SAAS,EAAkB,MAAM,gBAAgB,CAAC;AAIhE;;;;;;;GAOG;AAEH,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,UAAU,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,MAAM,CAAC;IACjB,0DAA0D;IAC1D,IAAI,EAAE,SAAS,GAAG,IAAI,CAAC;IACvB,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,oBAAoB;IACnC,KAAK,EAAE,UAAU,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,0EAA0E;IAC1E,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE,aAAa,CAAC;CACxB;AAED,wBAAsB,aAAa,CACjC,OAAO,EAAE,oBAAoB,GAC5B,OAAO,CAAC,cAAc,CAAC,CA6DzB;AAwFD,wBAAgB,WAAW,CAAC,WAAW,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAMzE;AAWD;;;;;GAKG;AACH,wBAAgB,gBAAgB,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAOzD"}

package/dist/media/probe.d.ts

@@ -0,0 +1,6 @@
+import type { ImageFormat, ImageInfo } from "../types/media";
+export declare function imageContentType(format: ImageFormat): string;
+export declare function probeImage(bytes: Uint8Array): ImageInfo | null;
+/** The extension a stored object should carry for a content type. */
+export declare function extensionFor(contentType: string): string;
+//# sourceMappingURL=probe.d.ts.map

package/dist/media/probe.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"probe.d.ts","sourceRoot":"","sources":["../../src/media/probe.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAyB7D,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,WAAW,GAAG,MAAM,CAE5D;AAED,wBAAgB,UAAU,CAAC,KAAK,EAAE,UAAU,GAAG,SAAS,GAAG,IAAI,CAS9D;AAED,qEAAqE;AACrE,wBAAgB,YAAY,CAAC,WAAW,EAAE,MAAM,GAAG,MAAM,CAuBxD"}

package/dist/media/service.d.ts

@@ -0,0 +1,26 @@
+import type { BufferedEvent, OutboxEntryMeta } from "../engine/outbox";
+import type { ResolvedCmsConfig } from "../types/config";
+import type { DatabaseAdapter } from "../types/database";
+import type { CmsMedia } from "../types/media";
+import type { Tx } from "../types/query";
+export interface MediaServiceOptions {
+    config: ResolvedCmsConfig;
+    database: () => Promise<DatabaseAdapter>;
+    /** Appends events to the outbox inside the caller's transaction. */
+    emit: (tx: Tx, events: BufferedEvent[], meta: OutboxEntryMeta) => Promise<void>;
+    /** Schedules delivery once the transaction has committed. */
+    deliver: () => void;
+}
+/**
+ * `cms.media`.
+ *
+ * Media is a high-level setting rather than a plugin (section 3), and a file
+ * is not a document: it has a lifecycle no document has — active, orphaned,
+ * collected — and a body that lives somewhere the database cannot see. Hence
+ * its own service, with the same rule as `cms.api`: everything is a method
+ * rather than a route, so the REST endpoints in stage 7, the panel in stage 8
+ * and a seed script all get identical behaviour, including the parts that are
+ * easy to get wrong.
+ */
+export declare function createMedia(options: MediaServiceOptions): CmsMedia;
+//# sourceMappingURL=service.d.ts.map

package/dist/media/service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"service.d.ts","sourceRoot":"","sources":["../../src/media/service.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,aAAa,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AAOvE,OAAO,KAAK,EAAE,iBAAiB,EAAiB,MAAM,iBAAiB,CAAC;AACxE,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AAGzD,OAAO,KAAK,EACV,QAAQ,EAcT,MAAM,gBAAgB,CAAC;AACxB,OAAO,KAAK,EAAO,EAAE,EAAS,MAAM,gBAAgB,CAAC;AAmBrD,MAAM,WAAW,mBAAmB;IAClC,MAAM,EAAE,iBAAiB,CAAC;IAC1B,QAAQ,EAAE,MAAM,OAAO,CAAC,eAAe,CAAC,CAAC;IACzC,oEAAoE;IACpE,IAAI,EAAE,CACJ,EAAE,EAAE,EAAE,EACN,MAAM,EAAE,aAAa,EAAE,EACvB,IAAI,EAAE,eAAe,KAClB,OAAO,CAAC,IAAI,CAAC,CAAC;IACnB,6DAA6D;IAC7D,OAAO,EAAE,MAAM,IAAI,CAAC;CACrB;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,WAAW,CAAC,OAAO,EAAE,mBAAmB,GAAG,QAAQ,CA0iBlE"}

package/dist/media/sharp.d.ts

@@ -0,0 +1,28 @@
+import type { ImageProcessor, ImageTransform } from "../types/media";
+export interface SharpImagesOptions {
+    /**
+     * The decompression-bomb ceiling, in pixels.
+     *
+     * `sharp` defaults to roughly 268 megapixels. The upload pipeline already
+     * refuses anything over `uploads.limits.maxImageDimensions`, so this is the
+     * second fence rather than the first.
+     */
+    limitInputPixels?: number | false;
+    /**
+     * Honour the EXIF orientation flag before doing anything else.
+     *
+     * On by default, and it matters: a phone photograph is stored sideways with
+     * a flag saying so, and stripping metadata without applying the flag first
+     * turns every portrait into a landscape.
+     */
+    autoOrient?: boolean;
+}
+export declare function sharpImages(options?: SharpImagesOptions): ImageProcessor;
+/** The rectangle of the source that a cover crop should keep. */
+export declare function sourceRegion(width: number, height: number, transform: ImageTransform): {
+    left: number;
+    top: number;
+    width: number;
+    height: number;
+} | null;
+//# sourceMappingURL=sharp.d.ts.map

package/dist/media/sharp.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sharp.d.ts","sourceRoot":"","sources":["../../src/media/sharp.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAEV,cAAc,EACd,cAAc,EAEf,MAAM,gBAAgB,CAAC;AAwBxB,MAAM,WAAW,kBAAkB;IACjC;;;;;;OAMG;IACH,gBAAgB,CAAC,EAAE,MAAM,GAAG,KAAK,CAAC;IAClC;;;;;;OAMG;IACH,UAAU,CAAC,EAAE,OAAO,CAAC;CACtB;AA8CD,wBAAgB,WAAW,CAAC,OAAO,GAAE,kBAAuB,GAAG,cAAc,CA6D5E;AAED,iEAAiE;AACjE,wBAAgB,YAAY,CAC1B,KAAK,EAAE,MAAM,EACb,MAAM,EAAE,MAAM,EACd,SAAS,EAAE,cAAc,GACxB;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,CA0BrE"}

package/dist/media/strip.d.ts

@@ -0,0 +1,16 @@
+/**
+ * Metadata removal, without a decoder.
+ *
+ * `stripMetadata` exists for one concrete reason: a photograph taken on a
+ * phone carries the coordinates of the place it was taken, and a CMS that
+ * publishes it publishes those too (section 6). That is a privacy obligation,
+ * not an optimisation, so it must not depend on whether an optional image
+ * processor happens to be installed — which is why it is implemented here, by
+ * dropping container chunks rather than by re-encoding pixels.
+ *
+ * ICC colour profiles are deliberately kept. Dropping them is what most tools
+ * do under "strip metadata", and it visibly shifts the colours of every
+ * wide-gamut photograph, which is not what anybody asking for privacy meant.
+ */
+export declare function stripImageMetadata(bytes: Uint8Array, contentType: string): Uint8Array;
+//# sourceMappingURL=strip.d.ts.map

package/dist/media/strip.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"strip.d.ts","sourceRoot":"","sources":["../../src/media/strip.ts"],"names":[],"mappings":"AAEA;;;;;;;;;;;;;GAaG;AACH,wBAAgB,kBAAkB,CAChC,KAAK,EAAE,UAAU,EACjB,WAAW,EAAE,MAAM,GAClB,UAAU,CAaZ"}

package/dist/media/usages.d.ts

@@ -0,0 +1,69 @@
+import type { ResolvedCollection } from "../types/config";
+import type { ScopedDb } from "../types/hooks";
+import type { JsonObject } from "../types/json";
+import type { RetentionConfig } from "../types/config";
+export declare const mediaTable = "media";
+export declare const mediaUsagesTable = "media_usages";
+/**
+ * The attribute a rich-text node uses to point at a file.
+ *
+ * A convention rather than a node type, so a custom editor node registered in
+ * stage 9 participates in reference counting for free: if it carries
+ * `mediaId`, the file it shows is counted as used.
+ */
+export declare const richTextMediaAttribute = "mediaId";
+export interface MediaReference {
+    mediaId: string;
+    field: string;
+    /** Empty for a field that is not localized. */
+    locale: string;
+}
+/**
+ * Whether a collection can point at a file at all.
+ *
+ * Checked once per collection and cached by the caller: the alternative is
+ * three extra queries on every write to a collection that has no images,
+ * which is most of them.
+ */
+export declare function referencesMedia(collection: ResolvedCollection): boolean;
+/**
+ * Every file this document body points at.
+ *
+ * Read from the stored body rather than from the resolved document, because
+ * references exist per locale: a German translation that drops an image has
+ * not stopped the English one from using it, and counting only the locale of
+ * the current request would orphan a file that is on a live page.
+ */
+export declare function collectMediaReferences(collection: ResolvedCollection, stored: JsonObject): MediaReference[];
+export interface SyncMediaUsagesOptions {
+    db: ScopedDb;
+    collection: string;
+    documentId: string;
+    /** `null` releases every reference this document held, for a purge. */
+    references: MediaReference[] | null;
+    /**
+     * Whether the orphan and reclaim rules apply.
+     *
+     * False when the configuration has no `uploads` section: the usage rows
+     * still have to be kept straight, because the trash and the purge depend on
+     * them, but there is no storage behind them to collect.
+     */
+    lifecycle: boolean;
+    retention: RetentionConfig | undefined;
+    now: Date;
+}
+export interface SyncMediaUsagesResult {
+    orphaned: string[];
+    reclaimed: string[];
+}
+/**
+ * Brings `media_usages` in line with what a document now contains.
+ *
+ * This is the mechanism the whole of section 6 rests on. Nothing counts
+ * references at read time or at delete time; the count is maintained at the
+ * one moment the truth changes, inside the transaction that changed it, so a
+ * rolled back save cannot leave a file looking unused.
+ */
+export declare function syncMediaUsages(options: SyncMediaUsagesOptions): Promise<SyncMediaUsagesResult>;
+export declare function purgeDeadline(retention: RetentionConfig | undefined, now: Date): Date | null;
+//# sourceMappingURL=usages.d.ts.map

package/dist/media/usages.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"usages.d.ts","sourceRoot":"","sources":["../../src/media/usages.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,iBAAiB,CAAC;AAC1D,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAC/C,OAAO,KAAK,EAAE,UAAU,EAAa,MAAM,eAAe,CAAC;AAC3D,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAGvD,eAAO,MAAM,UAAU,UAAU,CAAC;AAClC,eAAO,MAAM,gBAAgB,iBAAiB,CAAC;AAE/C;;;;;;GAMG;AACH,eAAO,MAAM,sBAAsB,YAAY,CAAC;AAEhD,MAAM,WAAW,cAAc;IAC7B,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,MAAM,CAAC;IACd,+CAA+C;IAC/C,MAAM,EAAE,MAAM,CAAC;CAChB;AAED;;;;;;GAMG;AACH,wBAAgB,eAAe,CAAC,UAAU,EAAE,kBAAkB,GAAG,OAAO,CAOvE;AAED;;;;;;;GAOG;AACH,wBAAgB,sBAAsB,CACpC,UAAU,EAAE,kBAAkB,EAC9B,MAAM,EAAE,UAAU,GACjB,cAAc,EAAE,CAuBlB;AAED,MAAM,WAAW,sBAAsB;IACrC,EAAE,EAAE,QAAQ,CAAC;IACb,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,uEAAuE;IACvE,UAAU,EAAE,cAAc,EAAE,GAAG,IAAI,CAAC;IACpC;;;;;;OAMG;IACH,SAAS,EAAE,OAAO,CAAC;IACnB,SAAS,EAAE,eAAe,GAAG,SAAS,CAAC;IACvC,GAAG,EAAE,IAAI,CAAC;CACX;AAED,MAAM,WAAW,qBAAqB;IACpC,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,SAAS,EAAE,MAAM,EAAE,CAAC;CACrB;AAED;;;;;;;GAOG;AACH,wBAAsB,eAAe,CACnC,OAAO,EAAE,sBAAsB,GAC9B,OAAO,CAAC,qBAAqB,CAAC,CA4ChC;AAqED,wBAAgB,aAAa,CAC3B,SAAS,EAAE,eAAe,GAAG,SAAS,EACtC,GAAG,EAAE,IAAI,GACR,IAAI,GAAG,IAAI,CAIb"}

package/dist/media/variants.d.ts

@@ -0,0 +1,50 @@
+import type { ImageSizeConfig, ImagesConfig } from "../types/config";
+import type { ImageProcessor, ImageTransform, MediaDocument, ProcessedImage } from "../types/media";
+/**
+ * Named sizes, and where they come from.
+ *
+ * Two strategies, one code path. `pregenerate` renders at upload time and
+ * `on-demand` renders at first request, but both write the result into storage
+ * under the same deterministic key — so a size added to the configuration next
+ * year applies to the whole archive either way, and the second request for it
+ * is a storage hit rather than a render (section 6).
+ */
+export declare function variantNames(images: ImagesConfig | undefined): string[];
+export declare function variantSize(images: ImagesConfig | undefined, name: string): ImageSizeConfig;
+/**
+ * The rendering request for one named size on one file.
+ *
+ * The focal point and the crop come from the file, not from the size: a size
+ * says "320 square, cover", and which 320 square pixels that is, is a decision
+ * the editor made once in the panel and that every size inherits.
+ */
+export declare function variantTransform(images: ImagesConfig | undefined, name: string, media: Pick<MediaDocument, "focalPoint" | "crop" | "mimeType">): ImageTransform;
+/** The content type a variant will have, before anything is rendered. */
+export declare function variantContentType(images: ImagesConfig | undefined, mimeType: string): string;
+/**
+ * Where a variant lives.
+ *
+ * Derived from the original's key rather than recorded, so the collector can
+ * find every derivative of a file it is about to delete without a second
+ * table — and so two processes rendering the same variant at the same time
+ * write the same object instead of two.
+ */
+export declare function variantKey(storageKey: string, name: string, contentType: string): string;
+/**
+ * The query a CDN would need to do this itself.
+ *
+ * Appended to the original's URL when no processor is configured: that is the
+ * `cdn-worker` arrangement from section 6, where the CMS owns one original and
+ * the edge owns the resizing. The parameters are the ones every image CDN
+ * understands, so the same URL works behind Cloudflare, Vercel or a Worker of
+ * your own.
+ */
+export declare function variantQuery(images: ImagesConfig | undefined, name: string): string;
+/**
+ * Renders one variant, or explains why it cannot.
+ *
+ * A processor that does not handle this type is not an error — an SVG asked
+ * for at thumbnail size is simply served as it is, because it already scales.
+ */
+export declare function renderVariant(processor: ImageProcessor | undefined, source: Uint8Array, transform: ImageTransform, media: Pick<MediaDocument, "mimeType" | "width" | "height">): Promise<ProcessedImage | null>;
+//# sourceMappingURL=variants.d.ts.map

package/dist/media/variants.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"variants.d.ts","sourceRoot":"","sources":["../../src/media/variants.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,eAAe,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AACrE,OAAO,KAAK,EACV,cAAc,EACd,cAAc,EACd,aAAa,EACb,cAAc,EACf,MAAM,gBAAgB,CAAC;AAGxB;;;;;;;;GAQG;AAEH,wBAAgB,YAAY,CAAC,MAAM,EAAE,YAAY,GAAG,SAAS,GAAG,MAAM,EAAE,CAEvE;AAED,wBAAgB,WAAW,CACzB,MAAM,EAAE,YAAY,GAAG,SAAS,EAChC,IAAI,EAAE,MAAM,GACX,eAAe,CAWjB;AAED;;;;;;GAMG;AACH,wBAAgB,gBAAgB,CAC9B,MAAM,EAAE,YAAY,GAAG,SAAS,EAChC,IAAI,EAAE,MAAM,EACZ,KAAK,EAAE,IAAI,CAAC,aAAa,EAAE,YAAY,GAAG,MAAM,GAAG,UAAU,CAAC,GAC7D,cAAc,CAqBhB;AAED,yEAAyE;AACzE,wBAAgB,kBAAkB,CAChC,MAAM,EAAE,YAAY,GAAG,SAAS,EAChC,QAAQ,EAAE,MAAM,GACf,MAAM,CAIR;AAED;;;;;;;GAOG;AACH,wBAAgB,UAAU,CACxB,UAAU,EAAE,MAAM,EAClB,IAAI,EAAE,MAAM,EACZ,WAAW,EAAE,MAAM,GAClB,MAAM,CAKR;AAED;;;;;;;;GAQG;AACH,wBAAgB,YAAY,CAC1B,MAAM,EAAE,YAAY,GAAG,SAAS,EAChC,IAAI,EAAE,MAAM,GACX,MAAM,CAUR;AAED;;;;;GAKG;AACH,wBAAsB,aAAa,CACjC,SAAS,EAAE,cAAc,GAAG,SAAS,EACrC,MAAM,EAAE,UAAU,EAClB,SAAS,EAAE,cAAc,EACzB,KAAK,EAAE,IAAI,CAAC,aAAa,EAAE,UAAU,GAAG,OAAO,GAAG,QAAQ,CAAC,GAC1D,OAAO,CAAC,cAAc,GAAG,IAAI,CAAC,CAQhC"}