@heyo-sh/heyo-cms 0.0.0-stage → 0.1.0

package/dist/storage/providers.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"providers.d.ts","sourceRoot":"","sources":["../../src/storage/providers.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAEV,qBAAqB,EAEtB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAA0B,KAAK,SAAS,EAAE,MAAM,QAAQ,CAAC;AAchE,MAAM,WAAW,gBAAgB;IAC/B,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,qEAAqE;IACrE,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,GAAG,CAAC,EAAE,SAAS,GAAG,aAAa,CAAC;IAChC,UAAU,CAAC,EAAE;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IACtD,6DAA6D;IAC7D,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,uEAAuE;IACvE,MAAM,CAAC,EAAE,CAAC,IAAI,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAA;KAAE,KAAK,MAAM,CAAC;IAC5D,oEAAoE;IACpE,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,KAAK,CAAC,EAAE,SAAS,CAAC;CACnB;AAED;;;;;;GAMG;AACH,wBAAgB,EAAE,CAAC,OAAO,EAAE,gBAAgB,GAAG,qBAAqB,CAenE;AAED,MAAM,WAAW,gBAAiB,SAAQ,IAAI,CAC5C,gBAAgB,EAChB,QAAQ,GAAG,UAAU,CACtB;IACC,0EAA0E;IAC1E,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,mFAAmF;AACnF,MAAM,WAAW,SAAS;IACxB,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,CAAC,EAAE,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IACtE,GAAG,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,GAAG,IAAI,CAAC,CAAC;IAC/C,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC/C,IAAI,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,GAAG,IAAI,CAAC,CAAC;CACjD;AAED,UAAU,YAAY;IACpB,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,CAAC,EAAE,IAAI,CAAC;IAChB,YAAY,CAAC,EAAE;QAAE,WAAW,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;CACzC;AAED,UAAU,YAAa,SAAQ,YAAY;IACzC,IAAI,EAAE,cAAc,CAAC;CACtB;AAED;;;;;;GAMG;AACH,wBAAgB,EAAE,CAChB,OAAO,EAAE,SAAS,GAAG,CAAC,gBAAgB,GAAG;IAAE,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC,GAC3D,qBAAqB,CAuBvB;AAED,MAAM,WAAW,iBAAkB,SAAQ,IAAI,CAC7C,gBAAgB,EAChB,UAAU,GAAG,gBAAgB,CAC9B;IACC,gEAAgE;IAChE,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED;;;;;;GAMG;AACH,wBAAgB,GAAG,CAAC,OAAO,EAAE,iBAAiB,GAAG,qBAAqB,CAerE;AAED,MAAM,WAAW,mBAAmB;IAClC,6CAA6C;IAC7C,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,0DAA0D;IAC1D,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,MAAM,CAAC,EAAE,CAAC,IAAI,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAA;KAAE,KAAK,MAAM,CAAC;IAC5D,KAAK,CAAC,EAAE,SAAS,CAAC;CACnB;AAED,oDAAoD;AACpD,wBAAgB,KAAK,CAAC,OAAO,EAAE,mBAAmB,GAAG,qBAAqB,CAsCzE"}

package/dist/storage/sign.d.ts

@@ -0,0 +1,53 @@
+/**
+ * Request signing for the object stores we speak to over HTTP.
+ *
+ * Written out rather than taken from an SDK on purpose. `@aws-sdk/client-s3`
+ * is roughly twenty megabytes of dependency for four HTTP verbs, which is the
+ * entire installation budget this project set itself (section 0), and it does
+ * not run unchanged on every runtime we target. Signing is about ninety lines
+ * when the only operations are PUT, GET, DELETE and HEAD.
+ */
+export interface AwsCredentials {
+    accessKeyId: string;
+    secretAccessKey: string;
+    /** Set when the credentials come from an assumed role. */
+    sessionToken?: string;
+}
+export interface AwsSignRequest {
+    method: string;
+    url: URL;
+    headers: Record<string, string>;
+    /** `UNSIGNED-PAYLOAD` is legal over TLS and avoids buffering a stream. */
+    payload: Uint8Array | "UNSIGNED-PAYLOAD";
+    region: string;
+    service: string;
+    credentials: AwsCredentials;
+    now?: Date;
+}
+/**
+ * AWS Signature Version 4.
+ *
+ * Used for S3, for R2 (which speaks the S3 API) and for Google Cloud Storage
+ * through its S3-compatible XML endpoint, so one implementation covers three
+ * of the five adapters.
+ */
+export declare function signAwsV4(request: AwsSignRequest): Promise<Record<string, string>>;
+export interface AzureSignRequest {
+    method: string;
+    url: URL;
+    headers: Record<string, string>;
+    account: string;
+    /** The base64 account key from the portal. */
+    key: string;
+    contentLength?: number;
+    now?: Date;
+}
+/**
+ * Azure Blob Storage shared key.
+ *
+ * A different scheme from SigV4 and not reducible to it: the string to sign is
+ * a fixed list of positional headers, most of which we never send and all of
+ * which still have to be there as empty lines.
+ */
+export declare function signAzure(request: AzureSignRequest): Promise<Record<string, string>>;
+//# sourceMappingURL=sign.d.ts.map

package/dist/storage/sign.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sign.d.ts","sourceRoot":"","sources":["../../src/storage/sign.ts"],"names":[],"mappings":"AAEA;;;;;;;;GAQG;AAEH,MAAM,WAAW,cAAc;IAC7B,WAAW,EAAE,MAAM,CAAC;IACpB,eAAe,EAAE,MAAM,CAAC;IACxB,0DAA0D;IAC1D,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,cAAc;IAC7B,MAAM,EAAE,MAAM,CAAC;IACf,GAAG,EAAE,GAAG,CAAC;IACT,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAChC,0EAA0E;IAC1E,OAAO,EAAE,UAAU,GAAG,kBAAkB,CAAC;IACzC,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,cAAc,CAAC;IAC5B,GAAG,CAAC,EAAE,IAAI,CAAC;CACZ;AAID;;;;;;GAMG;AACH,wBAAsB,SAAS,CAC7B,OAAO,EAAE,cAAc,GACtB,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CA8DjC;AAED,MAAM,WAAW,gBAAgB;IAC/B,MAAM,EAAE,MAAM,CAAC;IACf,GAAG,EAAE,GAAG,CAAC;IACT,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAChC,OAAO,EAAE,MAAM,CAAC;IAChB,8CAA8C;IAC9C,GAAG,EAAE,MAAM,CAAC;IACZ,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,GAAG,CAAC,EAAE,IAAI,CAAC;CACZ;AAED;;;;;;GAMG;AACH,wBAAsB,SAAS,CAC7B,OAAO,EAAE,gBAAgB,GACxB,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAsDjC"}

package/dist/strings.d.ts

@@ -0,0 +1,13 @@
+/**
+ * String helpers shared across modules.
+ */
+/**
+ * Remove trailing slashes without a regex.
+ *
+ * The obvious `replace(/\/+$/, "")` backtracks quadratically on a string
+ * built out of slashes (CodeQL `js/polynomial-redos`). The values trimmed
+ * here are configuration most of the time, but a loop from the end is linear
+ * no matter what arrives, so every caller uses it.
+ */
+export declare function trimTrailingSlashes(value: string): string;
+//# sourceMappingURL=strings.d.ts.map

package/dist/strings.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"strings.d.ts","sourceRoot":"","sources":["../src/strings.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH;;;;;;;GAOG;AACH,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAIzD"}

package/dist/telemetry.d.ts

@@ -0,0 +1,137 @@
+import type { CmsInstance } from "./types/instance";
+import type { TelemetryConfig } from "./types/telemetry";
+export type { TelemetryConfig };
+/**
+ * Adoption telemetry — what it is, and what it refuses to be.
+ *
+ * The CMS has no analytics on the deployments it runs in: a server built from
+ * this package never phones home, in any environment, for any reason. What
+ * does report is the **command line**: `heyo-cms generate`, `migrate`,
+ * `seed`, `create-admin`, `import`, `export`, and the project generator. Those
+ * run on a developer's machine, once in a while, and answer the only question
+ * the project actually needs answered — is anybody using this, and with which
+ * database and framework.
+ *
+ * What is sent is in `TelemetryPayload` below and nowhere else. It is a fixed
+ * set of counts and identifiers: no content, no field names, no connection
+ * strings, no file paths, no addresses, no keys. `heyo-cms telemetry` prints
+ * the exact body that would be sent, so the claim is checkable rather than
+ * promised.
+ *
+ * Opting out, any one of which is enough:
+ *
+ *   HEYO_TELEMETRY_DISABLED=1      the project's own switch
+ *   DO_NOT_TRACK=1                 the cross-tool convention, honoured
+ *   telemetry: { enabled: false }  in heyo-cms.config.ts
+ *
+ * It is also off, without being asked, on CI and under a test runner: a build
+ * agent is not a user, and counting one as a user would make the number this
+ * exists to produce worthless.
+ */
+export declare const telemetryEndpoint = "https://telemetry.heyo.sh/v1/cms";
+export interface TelemetryDecision {
+    enabled: boolean;
+    /** Why, in words, so `heyo-cms telemetry` can print it. */
+    reason: string;
+}
+/**
+ * The whole payload. Adding a field here is a documentation change too.
+ */
+export interface TelemetryPayload {
+    /** The command that ran: `generate`, `migrate`, `create`, ... */
+    event: string;
+    /** The version of `@heyo-sh/heyo-cms` that sent it. */
+    version: string;
+    /**
+     * A project identifier that is not a project.
+     *
+     * The SHA-256 of the configuration's shape — collection names, the database
+     * id, the base path — truncated to 16 hex characters. Two runs from the
+     * same shape agree. This is not a unique installation id: projects with
+     * the same shape collide, and low-entropy inputs can be guessed. It must
+     * not be treated as a count of distinct users or as encryption.
+     */
+    project: string;
+    runtime: {
+        name: string;
+        version: string;
+    };
+    system: {
+        platform: string;
+        arch: string;
+        release: string;
+    };
+    /** The adapter id: `postgres`, `sqlite`, `d1`, `mongodb`. */
+    database: string;
+    /** Counts, never names. */
+    usage: {
+        collections: number;
+        globals: number;
+        fields: number;
+        plugins: number;
+        locales: number;
+    };
+    /** Which optional sections exist. Booleans, never their configuration. */
+    features: {
+        /** The panel bundle is mounted. */
+        panel: boolean;
+        /** Editor authentication is configured. */
+        auth: boolean;
+        /** The storage adapter id, or `null` when the CMS stores no files. */
+        uploads: string | null;
+        ai: boolean;
+        webhooks: boolean;
+        trash: boolean;
+    };
+}
+export interface TelemetryEnvironment {
+    [key: string]: string | undefined;
+}
+/**
+ * Decides whether anything may be sent, and says why.
+ *
+ * Every branch returns a sentence rather than a boolean alone, because the
+ * question a person asks is never "is it on" — it is "why is it on".
+ */
+export declare function telemetryDecision(config: TelemetryConfig | undefined, environment?: TelemetryEnvironment): TelemetryDecision;
+/**
+ * Builds the body from the configuration.
+ *
+ * Deliberately total: it never reads a file, never resolves a database and
+ * never touches the network, so printing it costs nothing and cannot fail in
+ * a way that breaks the command it was attached to.
+ */
+export declare function telemetryPayload(event: string, cms: CmsInstance, version: string): TelemetryPayload;
+export interface SendOptions {
+    endpoint?: string;
+    /** Injected by the tests; nothing else should pass it. */
+    fetch?: typeof fetch;
+    /** Milliseconds before the attempt is abandoned. */
+    timeout?: number;
+}
+/**
+ * Sends one payload, and never matters.
+ *
+ * Failure is not reported and not retried: a CLI that took longer, printed a
+ * warning or exited non-zero because a telemetry endpoint was down would be a
+ * worse tool than one with no telemetry at all.
+ */
+export declare function sendTelemetry(payload: TelemetryPayload, options?: SendOptions): Promise<"sent" | "failed">;
+/**
+ * The one call a command makes: decide, build, send, forget.
+ *
+ * Returns what happened so `heyo-cms telemetry` can print it; every caller
+ * except that command ignores the result.
+ */
+export declare function reportTelemetry(args: {
+    event: string;
+    cms: CmsInstance;
+    version: string;
+    config?: TelemetryConfig;
+    environment?: TelemetryEnvironment;
+    send?: SendOptions;
+}): Promise<{
+    decision: TelemetryDecision;
+    result: "sent" | "failed" | "skipped";
+}>;
+//# sourceMappingURL=telemetry.d.ts.map

package/dist/telemetry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"telemetry.d.ts","sourceRoot":"","sources":["../src/telemetry.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAEpD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AAEzD,YAAY,EAAE,eAAe,EAAE,CAAC;AAEhC;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AAEH,eAAO,MAAM,iBAAiB,qCAAqC,CAAC;AAEpE,MAAM,WAAW,iBAAiB;IAChC,OAAO,EAAE,OAAO,CAAC;IACjB,2DAA2D;IAC3D,MAAM,EAAE,MAAM,CAAC;CAChB;AAED;;GAEG;AACH,MAAM,WAAW,gBAAgB;IAC/B,iEAAiE;IACjE,KAAK,EAAE,MAAM,CAAC;IACd,uDAAuD;IACvD,OAAO,EAAE,MAAM,CAAC;IAChB;;;;;;;;OAQG;IACH,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;IAC3C,MAAM,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;IAC5D,6DAA6D;IAC7D,QAAQ,EAAE,MAAM,CAAC;IACjB,2BAA2B;IAC3B,KAAK,EAAE;QACL,WAAW,EAAE,MAAM,CAAC;QACpB,OAAO,EAAE,MAAM,CAAC;QAChB,MAAM,EAAE,MAAM,CAAC;QACf,OAAO,EAAE,MAAM,CAAC;QAChB,OAAO,EAAE,MAAM,CAAC;KACjB,CAAC;IACF,0EAA0E;IAC1E,QAAQ,EAAE;QACR,mCAAmC;QACnC,KAAK,EAAE,OAAO,CAAC;QACf,2CAA2C;QAC3C,IAAI,EAAE,OAAO,CAAC;QACd,sEAAsE;QACtE,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;QACvB,EAAE,EAAE,OAAO,CAAC;QACZ,QAAQ,EAAE,OAAO,CAAC;QAClB,KAAK,EAAE,OAAO,CAAC;KAChB,CAAC;CACH;AAED,MAAM,WAAW,oBAAoB;IACnC,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAAC;CACnC;AAED;;;;;GAKG;AACH,wBAAgB,iBAAiB,CAC/B,MAAM,EAAE,eAAe,GAAG,SAAS,EACnC,WAAW,GAAE,oBAAkC,GAC9C,iBAAiB,CAiBnB;AAED;;;;;;GAMG;AACH,wBAAgB,gBAAgB,CAC9B,KAAK,EAAE,MAAM,EACb,GAAG,EAAE,WAAW,EAChB,OAAO,EAAE,MAAM,GACd,gBAAgB,CAuClB;AAED,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,0DAA0D;IAC1D,KAAK,CAAC,EAAE,OAAO,KAAK,CAAC;IACrB,oDAAoD;IACpD,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED;;;;;;GAMG;AACH,wBAAsB,aAAa,CACjC,OAAO,EAAE,gBAAgB,EACzB,OAAO,GAAE,WAAgB,GACxB,OAAO,CAAC,MAAM,GAAG,QAAQ,CAAC,CAa5B;AAED;;;;;GAKG;AACH,wBAAsB,eAAe,CAAC,IAAI,EAAE;IAC1C,KAAK,EAAE,MAAM,CAAC;IACd,GAAG,EAAE,WAAW,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,eAAe,CAAC;IACzB,WAAW,CAAC,EAAE,oBAAoB,CAAC;IACnC,IAAI,CAAC,EAAE,WAAW,CAAC;CACpB,GAAG,OAAO,CAAC;IACV,QAAQ,EAAE,iBAAiB,CAAC;IAC5B,MAAM,EAAE,MAAM,GAAG,QAAQ,GAAG,SAAS,CAAC;CACvC,CAAC,CASD"}

package/dist/telemetry.js

@@ -0,0 +1 @@
+import{uo,St,Ot,po,an}from"./index-34s342fz.js";export{an as reportTelemetry,po as sendTelemetry,St as telemetryDecision,uo as telemetryEndpoint,Ot as telemetryPayload};

package/dist/types/activity.d.ts

@@ -0,0 +1,68 @@
+import type { ActorSource, OperationSource } from "./actor";
+import type { JsonObject } from "./json";
+/**
+ * One line of the audit trail.
+ *
+ * Written by the engine inside the transaction that caused it, which is the
+ * difference between an audit trail and a log: a change that committed is in
+ * here, and a change that rolled back is not (section 11).
+ */
+export interface ActivityEntry {
+    id: string;
+    /** `document.created`, `document.trashed`, … — the event vocabulary. */
+    action: string;
+    actorId: string | null;
+    actorSource: ActorSource | null;
+    /**
+     * Where the write came from: `admin`, `rest`, `job`, `ai`, …
+     *
+     * Distinct from `actorSource`, which says how the actor authenticated. An AI
+     * write has a human actor with a session and `source: "ai"`, and a trail
+     * that could only report one of those could not answer "what did the
+     * assistant change today".
+     */
+    source: OperationSource | null;
+    collection: string | null;
+    documentId: string | null;
+    locale: string | null;
+    /**
+     * `{ fields: [...] }` for a write: what actually changed.
+     *
+     * Carries `runId` as well when the assistant made the change, which is what
+     * ties a row back to the conversation that caused it.
+     */
+    changes: JsonObject | null;
+    ip: string | null;
+    createdAt: string | null;
+}
+export interface ActivityListArgs {
+    collection?: string;
+    documentId?: string;
+    actorId?: string;
+    action?: string;
+    /** `"ai"` answers "what did the assistant change" without a scan. */
+    source?: OperationSource;
+    limit?: number;
+    /** Keyset, over the ordered id. Pass back `cursor` from the last page. */
+    cursor?: string;
+}
+export interface ActivityPage {
+    entries: ActivityEntry[];
+    limit: number;
+    hasNextPage: boolean;
+    cursor: string | null;
+}
+/**
+ * `cms.activity`.
+ *
+ * Read-only on purpose: there is no `write` and no `delete`. The engine is the
+ * only writer, and an audit trail with a delete method is a list of the
+ * changes somebody was willing to leave behind.
+ *
+ * Paged by the row id rather than by `created_at`, because the ids are ordered
+ * and two writes to the same document routinely land in the same millisecond.
+ */
+export interface CmsActivity {
+    list(args?: ActivityListArgs): Promise<ActivityPage>;
+}
+//# sourceMappingURL=activity.d.ts.map

package/dist/types/activity.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"activity.d.ts","sourceRoot":"","sources":["../../src/types/activity.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,SAAS,CAAC;AAC5D,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAC;AAEzC;;;;;;GAMG;AACH,MAAM,WAAW,aAAa;IAC5B,EAAE,EAAE,MAAM,CAAC;IACX,wEAAwE;IACxE,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,WAAW,EAAE,WAAW,GAAG,IAAI,CAAC;IAChC;;;;;;;OAOG;IACH,MAAM,EAAE,eAAe,GAAG,IAAI,CAAC;IAC/B,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB;;;;;OAKG;IACH,OAAO,EAAE,UAAU,GAAG,IAAI,CAAC;IAC3B,EAAE,EAAE,MAAM,GAAG,IAAI,CAAC;IAClB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;CAC1B;AAED,MAAM,WAAW,gBAAgB;IAC/B,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,qEAAqE;IACrE,MAAM,CAAC,EAAE,eAAe,CAAC;IACzB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,0EAA0E;IAC1E,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,YAAY;IAC3B,OAAO,EAAE,aAAa,EAAE,CAAC;IACzB,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,OAAO,CAAC;IACrB,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;CACvB;AAED;;;;;;;;;GASG;AACH,MAAM,WAAW,WAAW;IAC1B,IAAI,CAAC,IAAI,CAAC,EAAE,gBAAgB,GAAG,OAAO,CAAC,YAAY,CAAC,CAAC;CACtD"}

package/dist/types/actor.d.ts

@@ -0,0 +1,26 @@
+/**
+ * Who is performing an operation.
+ *
+ * Both authentication methods (editor session, machine API key) collapse into
+ * the same shape on purpose: every access rule, hook and activity-log entry
+ * then has one thing to read, and a rule written against sessions cannot
+ * silently stop applying to API keys.
+ */
+export interface Actor {
+    id: string;
+    source: ActorSource;
+    roles: string[];
+    /** Flattened `collection:action` grants, wildcards already expanded. */
+    permissions: string[];
+}
+export type ActorSource = "session" | "api-key";
+/**
+ * Where an operation entered the engine. Carried through to hooks and events.
+ *
+ * `ai` is the global assistant writing on an editor's behalf. It is a source
+ * and not an actor: the person who asked for the change is still the actor,
+ * because "who is accountable" and "what typed it" are different questions and
+ * an audit trail that confuses them cannot answer either.
+ */
+export type OperationSource = "rest" | "admin" | "local" | "cli" | "job" | "ai";
+//# sourceMappingURL=actor.d.ts.map

package/dist/types/actor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"actor.d.ts","sourceRoot":"","sources":["../../src/types/actor.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,MAAM,WAAW,KAAK;IACpB,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,WAAW,CAAC;IACpB,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,wEAAwE;IACxE,WAAW,EAAE,MAAM,EAAE,CAAC;CACvB;AAED,MAAM,MAAM,WAAW,GAAG,SAAS,GAAG,SAAS,CAAC;AAEhD;;;;;;;GAOG;AACH,MAAM,MAAM,eAAe,GAAG,MAAM,GAAG,OAAO,GAAG,OAAO,GAAG,KAAK,GAAG,KAAK,GAAG,IAAI,CAAC"}