@heyo-sh/heyo-cms 0.0.0-stage → 0.1.0

package/dist/types/schema.d.ts

@@ -0,0 +1,203 @@
+import type { JsonPrimitive, JsonValue } from "./json";
+/**
+ * The storage types every supported engine can express.
+ *
+ * The list is deliberately short. A type that only Postgres understands would
+ * force the MongoDB and SQLite adapters to invent a translation, and the field
+ * registry would start encoding engine differences that the plan puts behind
+ * the adapter boundary (section 12).
+ */
+export type ColumnType = "text" | "integer" | "bigint" | "real" | "boolean" | "timestamp" | "json" | "blob";
+/** What a foreign key points at, and what happens when the target goes away. */
+export interface ForeignKeyDefinition {
+    table: string;
+    column: string;
+    onDelete?: "cascade" | "set-null" | "restrict";
+}
+/**
+ * Where a value physically lives.
+ *
+ * `document` means "inside the JSON body of the row". Content fields use it,
+ * which is what lets a new locale or a new field ship without a table
+ * rewrite (sections 9 and 12). System collections use `column`, because they
+ * are queried by the engine itself on every request.
+ */
+export type ColumnStorage = "column" | "document";
+/**
+ * What a field type asks the storage layer for.
+ *
+ * Returned by `FieldType.column()`. For content fields only `type`, `nullable`,
+ * `array`, `unique`, `index` and `default` are meaningful: the value lands in
+ * the document body, and `unique`/`index` become expression indexes over the
+ * JSON path rather than table columns.
+ */
+export interface ColumnDefinition {
+    type: ColumnType;
+    nullable?: boolean;
+    /** Literal default. Non-literal defaults belong in a hook, not in DDL. */
+    default?: JsonPrimitive;
+    unique?: boolean;
+    index?: boolean;
+    /** Multi-value field: stored as a JSON array, never as a native array type. */
+    array?: boolean;
+    references?: ForeignKeyDefinition;
+    storage?: ColumnStorage;
+}
+/** A column as it exists in a snapshot: a definition that knows its name. */
+export interface ColumnSnapshot extends ColumnDefinition {
+    name: string;
+    nullable: boolean;
+}
+/**
+ * An index target.
+ *
+ * `json` targets are what make content queryable without promoting fields to
+ * columns: Postgres indexes the `data ->> 'slug'` expression, SQLite indexes
+ * `json_extract(data, '$.slug')`, MongoDB indexes `data.slug`. Same snapshot,
+ * three renderings, decided inside the adapter.
+ */
+export type IndexTarget = {
+    kind: "column";
+    column: string;
+} | {
+    kind: "json";
+    column: string;
+    path: string[];
+    type: ColumnType;
+};
+export interface IndexSnapshot {
+    name: string;
+    table: string;
+    targets: IndexTarget[];
+    unique: boolean;
+    /**
+     * A partial-index predicate, restricted to one equality on purpose.
+     *
+     * Every content collection shares the `documents` table, so an index for
+     * `posts.slug` has to exclude the other collections' rows. One equality is
+     * all that requires, and it is the only predicate all three engines express
+     * identically (`WHERE`, `WHERE`, `partialFilterExpression`).
+     */
+    where?: {
+        column: string;
+        equals: string;
+    };
+}
+export interface TableSnapshot {
+    name: string;
+    /** Sorted by name so two runs of `generate` cannot disagree on ordering. */
+    columns: ColumnSnapshot[];
+    primaryKey: string[];
+    indexes: IndexSnapshot[];
+    /**
+     * The collection this table stores, when it is a content table. Backfill
+     * steps need it to scope an update to one collection inside `documents`.
+     */
+    documentColumn?: string;
+}
+/**
+ * A content field as the migration layer sees it.
+ *
+ * Content lives in a JSON body, so most field changes move no DDL at all.
+ * They still have to be recorded: adding a field with a default is a
+ * backfill, removing one is a cleanup, and marking one unique is an index.
+ * Without this logical layer the diff would see two identical `documents`
+ * tables and generate nothing.
+ */
+export interface FieldSnapshot {
+    name: string;
+    type: string;
+    localized: boolean;
+    required: boolean;
+    unique: boolean;
+    index: boolean;
+    default?: JsonValue;
+    relationTo?: string;
+    column: ColumnDefinition;
+}
+export interface CollectionSnapshot {
+    name: string;
+    slug: string;
+    kind: "collection" | "global";
+    /** The physical table; `documents` for everything the user declares. */
+    table: string;
+    documentColumn: string;
+    /** Sorted by name. */
+    fields: FieldSnapshot[];
+}
+export interface SchemaSnapshot {
+    version: 1;
+    /** Sorted by name. Determinism is the whole point of the snapshot. */
+    tables: TableSnapshot[];
+    /** Sorted by name. The logical layer behind the JSON document body. */
+    collections: CollectionSnapshot[];
+}
+/** Which attributes of a column a migration has to alter. */
+export type ColumnChange = "type" | "nullable" | "default" | "references";
+/**
+ * A neutral migration step.
+ *
+ * `plan()` produces these from two snapshots and nothing else, so the same
+ * diff drives a `.sql` file on Postgres, a `.sql` file on SQLite and an index
+ * plus backfill program on MongoDB. No SQL is constructed outside an adapter.
+ */
+export type MigrationStep = {
+    kind: "create_table";
+    table: TableSnapshot;
+} | {
+    kind: "drop_table";
+    table: string;
+} | {
+    kind: "add_column";
+    table: string;
+    column: ColumnSnapshot;
+} | {
+    kind: "drop_column";
+    table: string;
+    column: string;
+} | {
+    kind: "alter_column";
+    table: string;
+    column: ColumnSnapshot;
+    previous: ColumnSnapshot;
+    changes: ColumnChange[];
+} | {
+    kind: "create_index";
+    index: IndexSnapshot;
+} | {
+    kind: "drop_index";
+    table: string;
+    index: string;
+} | {
+    /** Writes a default into documents that predate the field. */
+    kind: "set_document_field";
+    table: string;
+    collection: string;
+    documentColumn: string;
+    path: string[];
+    value: JsonValue;
+} | {
+    /** Removes a field that left the collection, so reads stop seeing it. */
+    kind: "unset_document_field";
+    table: string;
+    collection: string;
+    documentColumn: string;
+    path: string[];
+};
+/**
+ * A migration as it is written into the repository.
+ *
+ * SQL engines get `.sql` a human can read in a pull request; MongoDB has no
+ * DDL, so it gets the step list itself — index creations, uniqueness changes
+ * and backfills — as data the adapter replays. Both are reviewed the same way,
+ * numbered the same way and applied by the same CLI.
+ */
+export interface MigrationArtifact {
+    /** `0003_add_posts_slug_index` — numbered, ordered, stable. */
+    id: string;
+    extension: "sql" | "json";
+    content: string;
+    /** One line per step, printed by `heyo-cms generate`. */
+    summary: string[];
+}
+//# sourceMappingURL=schema.d.ts.map

package/dist/types/schema.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema.d.ts","sourceRoot":"","sources":["../../src/types/schema.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAC;AAEvD;;;;;;;GAOG;AACH,MAAM,MAAM,UAAU,GAClB,MAAM,GACN,SAAS,GACT,QAAQ,GACR,MAAM,GACN,SAAS,GACT,WAAW,GACX,MAAM,GACN,MAAM,CAAC;AAEX,gFAAgF;AAChF,MAAM,WAAW,oBAAoB;IACnC,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,SAAS,GAAG,UAAU,GAAG,UAAU,CAAC;CAChD;AAED;;;;;;;GAOG;AACH,MAAM,MAAM,aAAa,GAAG,QAAQ,GAAG,UAAU,CAAC;AAElD;;;;;;;GAOG;AACH,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EAAE,UAAU,CAAC;IACjB,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,0EAA0E;IAC1E,OAAO,CAAC,EAAE,aAAa,CAAC;IACxB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,+EAA+E;IAC/E,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,UAAU,CAAC,EAAE,oBAAoB,CAAC;IAClC,OAAO,CAAC,EAAE,aAAa,CAAC;CACzB;AAED,6EAA6E;AAC7E,MAAM,WAAW,cAAe,SAAQ,gBAAgB;IACtD,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,OAAO,CAAC;CACnB;AAED;;;;;;;GAOG;AACH,MAAM,MAAM,WAAW,GACnB;IAAE,IAAI,EAAE,QAAQ,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GAClC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,EAAE,CAAC;IAAC,IAAI,EAAE,UAAU,CAAA;CAAE,CAAC;AAEvE,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,WAAW,EAAE,CAAC;IACvB,MAAM,EAAE,OAAO,CAAC;IAChB;;;;;;;OAOG;IACH,KAAK,CAAC,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC;CAC5C;AAED,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,4EAA4E;IAC5E,OAAO,EAAE,cAAc,EAAE,CAAC;IAC1B,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB,OAAO,EAAE,aAAa,EAAE,CAAC;IACzB;;;OAGG;IACH,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAED;;;;;;;;GAQG;AACH,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,OAAO,CAAC;IACnB,QAAQ,EAAE,OAAO,CAAC;IAClB,MAAM,EAAE,OAAO,CAAC;IAChB,KAAK,EAAE,OAAO,CAAC;IACf,OAAO,CAAC,EAAE,SAAS,CAAC;IACpB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,gBAAgB,CAAC;CAC1B;AAED,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,YAAY,GAAG,QAAQ,CAAC;IAC9B,wEAAwE;IACxE,KAAK,EAAE,MAAM,CAAC;IACd,cAAc,EAAE,MAAM,CAAC;IACvB,sBAAsB;IACtB,MAAM,EAAE,aAAa,EAAE,CAAC;CACzB;AAED,MAAM,WAAW,cAAc;IAC7B,OAAO,EAAE,CAAC,CAAC;IACX,sEAAsE;IACtE,MAAM,EAAE,aAAa,EAAE,CAAC;IACxB,uEAAuE;IACvE,WAAW,EAAE,kBAAkB,EAAE,CAAC;CACnC;AAED,6DAA6D;AAC7D,MAAM,MAAM,YAAY,GAAG,MAAM,GAAG,UAAU,GAAG,SAAS,GAAG,YAAY,CAAC;AAE1E;;;;;;GAMG;AACH,MAAM,MAAM,aAAa,GACrB;IAAE,IAAI,EAAE,cAAc,CAAC;IAAC,KAAK,EAAE,aAAa,CAAA;CAAE,GAC9C;IAAE,IAAI,EAAE,YAAY,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GACrC;IAAE,IAAI,EAAE,YAAY,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,cAAc,CAAA;CAAE,GAC7D;IAAE,IAAI,EAAE,aAAa,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GACtD;IACE,IAAI,EAAE,cAAc,CAAC;IACrB,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,cAAc,CAAC;IACvB,QAAQ,EAAE,cAAc,CAAC;IACzB,OAAO,EAAE,YAAY,EAAE,CAAC;CACzB,GACD;IAAE,IAAI,EAAE,cAAc,CAAC;IAAC,KAAK,EAAE,aAAa,CAAA;CAAE,GAC9C;IAAE,IAAI,EAAE,YAAY,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GACpD;IACE,8DAA8D;IAC9D,IAAI,EAAE,oBAAoB,CAAC;IAC3B,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,MAAM,CAAC;IACnB,cAAc,EAAE,MAAM,CAAC;IACvB,IAAI,EAAE,MAAM,EAAE,CAAC;IACf,KAAK,EAAE,SAAS,CAAC;CAClB,GACD;IACE,yEAAyE;IACzE,IAAI,EAAE,sBAAsB,CAAC;IAC7B,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,MAAM,CAAC;IACnB,cAAc,EAAE,MAAM,CAAC;IACvB,IAAI,EAAE,MAAM,EAAE,CAAC;CAChB,CAAC;AAEN;;;;;;;GAOG;AACH,MAAM,WAAW,iBAAiB;IAChC,+DAA+D;IAC/D,EAAE,EAAE,MAAM,CAAC;IACX,SAAS,EAAE,KAAK,GAAG,MAAM,CAAC;IAC1B,OAAO,EAAE,MAAM,CAAC;IAChB,yDAAyD;IACzD,OAAO,EAAE,MAAM,EAAE,CAAC;CACnB"}

package/dist/types/storage.d.ts

@@ -0,0 +1,61 @@
+/** Everything the storage layer records about an object it is given. */
+export interface ObjectMeta {
+    contentType: string;
+    size?: number;
+    cacheControl?: string;
+    contentDisposition?: string;
+    /** Provider-side user metadata. Never trusted for access decisions. */
+    metadata?: Record<string, string>;
+}
+export interface SignedUrlOptions {
+    /** Seconds, or a duration string such as `1h`. */
+    expiresIn?: number | string;
+    download?: boolean;
+    filename?: string;
+}
+/** What `head()` reports for an object that exists. */
+export interface StoredObject {
+    key: string;
+    size: number;
+    contentType: string;
+    lastModified?: Date;
+}
+/**
+ * The whole storage contract.
+ *
+ * Four required methods is the point: a bespoke adapter for an in-house object
+ * store should be a short afternoon, not a project. `head` is optional because
+ * media garbage collection can fall back to the size recorded in the database.
+ */
+export interface StorageAdapter {
+    /** `local`, `s3`, `r2`, `gcs`, `azure`. Printed by `cms.inspect()`. */
+    readonly id: string;
+    put(key: string, body: ReadableStream | Uint8Array, meta: ObjectMeta): Promise<void>;
+    get(key: string): Promise<ReadableStream | null>;
+    delete(keys: string[]): Promise<void>;
+    url(key: string, options?: SignedUrlOptions): string;
+    head?(key: string): Promise<StoredObject | null>;
+    /**
+     * A time-limited URL for a bucket that is not public.
+     *
+     * Separate from `url()` and asynchronous because signing is cryptography:
+     * making `url()` async instead would make the common case — a public file
+     * on a CDN — pay for a feature it does not use, in every template that
+     * renders an image.
+     */
+    signedUrl?(key: string, options?: SignedUrlOptions): Promise<string>;
+    /**
+     * Where new objects should live, given the file being stored.
+     *
+     * The adapter decides because the layout belongs to the bucket: a lifecycle
+     * rule that archives `2024/` only works if the adapter that was configured
+     * with it is the one choosing prefixes (section 6).
+     */
+    readonly prefix?: (file: {
+        id: string;
+        filename: string;
+    }) => string;
+}
+export type StorageAdapterFactory = () => StorageAdapter | Promise<StorageAdapter>;
+export type StorageConfig = StorageAdapter | StorageAdapterFactory;
+//# sourceMappingURL=storage.d.ts.map

package/dist/types/storage.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"storage.d.ts","sourceRoot":"","sources":["../../src/types/storage.ts"],"names":[],"mappings":"AAAA,wEAAwE;AACxE,MAAM,WAAW,UAAU;IACzB,WAAW,EAAE,MAAM,CAAC;IACpB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,uEAAuE;IACvE,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACnC;AAED,MAAM,WAAW,gBAAgB;IAC/B,kDAAkD;IAClD,SAAS,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;IAC5B,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,uDAAuD;AACvD,MAAM,WAAW,YAAY;IAC3B,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,CAAC,EAAE,IAAI,CAAC;CACrB;AAED;;;;;;GAMG;AACH,MAAM,WAAW,cAAc;IAC7B,uEAAuE;IACvE,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,GAAG,CACD,GAAG,EAAE,MAAM,EACX,IAAI,EAAE,cAAc,GAAG,UAAU,EACjC,IAAI,EAAE,UAAU,GACf,OAAO,CAAC,IAAI,CAAC,CAAC;IACjB,GAAG,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,GAAG,IAAI,CAAC,CAAC;IACjD,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACtC,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,gBAAgB,GAAG,MAAM,CAAC;IACrD,IAAI,CAAC,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,GAAG,IAAI,CAAC,CAAC;IACjD;;;;;;;OAOG;IACH,SAAS,CAAC,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,gBAAgB,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IACrE;;;;;;OAMG;IACH,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAA;KAAE,KAAK,MAAM,CAAC;CACtE;AAED,MAAM,MAAM,qBAAqB,GAAG,MAClC,cAAc,GAAG,OAAO,CAAC,cAAc,CAAC,CAAC;AAE3C,MAAM,MAAM,aAAa,GAAG,cAAc,GAAG,qBAAqB,CAAC"}

package/dist/types/telemetry.d.ts

@@ -0,0 +1,14 @@
+/**
+ * What `heyoCms({ telemetry })` accepts.
+ *
+ * The behaviour, and the list of everything that is ever sent, is documented
+ * on the module that implements it: `@heyo-sh/heyo-cms/telemetry`. In short —
+ * the CLI reports, a deployment never does, and `{ enabled: false }` here is
+ * one of three ways to turn even that off.
+ */
+export interface TelemetryConfig {
+    enabled?: boolean;
+    /** For a self-hosted collector. */
+    endpoint?: string;
+}
+//# sourceMappingURL=telemetry.d.ts.map

package/dist/types/telemetry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"telemetry.d.ts","sourceRoot":"","sources":["../../src/types/telemetry.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,MAAM,WAAW,eAAe;IAC9B,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,mCAAmC;IACnC,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB"}

package/dist/types/trash.d.ts

@@ -0,0 +1,42 @@
+import type { OperationArgs } from "./api";
+import type { JsonObject } from "./json";
+/**
+ * The trash, across every collection at once.
+ *
+ * The per-collection API already has `restore` and `purge`; this exists
+ * because the panel's trash screen and `GET /trash` (section 10) are one list
+ * of everything an editor deleted, and building that by asking every
+ * collection in turn would page wrongly and count wrongly.
+ */
+export interface TrashListArgs extends OperationArgs {
+    /** Collection name. Omitted means every collection the actor may read. */
+    collection?: string;
+    limit?: number;
+    cursor?: string;
+}
+export interface TrashedEntry {
+    collection: string;
+    id: string;
+    deletedAt: string | null;
+    /** When the purge job will remove it; `null` when retention is off. */
+    purgeAfter: string | null;
+    /** The document itself, with field-level read access already applied. */
+    document: JsonObject;
+}
+export interface TrashPage {
+    entries: TrashedEntry[];
+    limit: number;
+    hasNextPage: boolean;
+    cursor: string | null;
+}
+export interface TrashTargetArgs extends OperationArgs {
+    collection: string;
+    id: string;
+}
+export interface CmsTrash {
+    /** Newest deletion first. Keyset-paged, like every other list. */
+    list(args?: TrashListArgs): Promise<TrashPage>;
+    restore(args: TrashTargetArgs): Promise<JsonObject | null>;
+    purge(args: TrashTargetArgs): Promise<JsonObject | null>;
+}
+//# sourceMappingURL=trash.d.ts.map

package/dist/types/trash.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"trash.d.ts","sourceRoot":"","sources":["../../src/types/trash.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,OAAO,CAAC;AAC3C,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAC;AAEzC;;;;;;;GAOG;AACH,MAAM,WAAW,aAAc,SAAQ,aAAa;IAClD,0EAA0E;IAC1E,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,YAAY;IAC3B,UAAU,EAAE,MAAM,CAAC;IACnB,EAAE,EAAE,MAAM,CAAC;IACX,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,uEAAuE;IACvE,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,yEAAyE;IACzE,QAAQ,EAAE,UAAU,CAAC;CACtB;AAED,MAAM,WAAW,SAAS;IACxB,OAAO,EAAE,YAAY,EAAE,CAAC;IACxB,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,OAAO,CAAC;IACrB,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;CACvB;AAED,MAAM,WAAW,eAAgB,SAAQ,aAAa;IACpD,UAAU,EAAE,MAAM,CAAC;IACnB,EAAE,EAAE,MAAM,CAAC;CACZ;AAED,MAAM,WAAW,QAAQ;IACvB,kEAAkE;IAClE,IAAI,CAAC,IAAI,CAAC,EAAE,aAAa,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC;IAC/C,OAAO,CAAC,IAAI,EAAE,eAAe,GAAG,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC,CAAC;IAC3D,KAAK,CAAC,IAAI,EAAE,eAAe,GAAG,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC,CAAC;CAC1D"}

package/dist/types/webhooks.d.ts

@@ -0,0 +1,133 @@
+import type { Actor, OperationSource } from "./actor";
+import type { AnyEventType, CmsEvent } from "./events";
+import type { JsonObject } from "./json";
+/**
+ * Webhooks (stage 9, section 7).
+ *
+ * The delivery half of the outbox. An event is written inside the
+ * transaction that caused it and delivered afterwards, so a rolled back
+ * write sends nothing and a committed one sends even if the process dies a
+ * line later — and a subscriber that is down does not slow a save down, it
+ * accumulates retries.
+ */
+export interface WebhookFilters {
+    collections?: string[];
+    locales?: string[];
+}
+export interface WebhookSubscription {
+    id: string;
+    url: string;
+    /** Event types, or prefixes: `document.*`, or `*` for everything. */
+    events: string[];
+    filters: WebhookFilters | null;
+    headers: Record<string, string> | null;
+    /** Whether this subscription signs with its own secret rather than the global one. */
+    hasSecret: boolean;
+    active: boolean;
+    createdAt: string | null;
+    updatedAt: string | null;
+}
+/**
+ * One attempt to hand one event to one subscriber.
+ *
+ * `pending` is waiting or being retried, `delivered` succeeded, `failed` is
+ * out of attempts — the dead-letter queue is a status rather than a second
+ * table, because a replay has to be able to put the same row back in flight.
+ */
+export type WebhookDeliveryStatus = "pending" | "delivered" | "failed";
+export interface WebhookDelivery {
+    id: string;
+    webhookId: string;
+    eventId: string;
+    eventType: string;
+    status: WebhookDeliveryStatus;
+    attempt: number;
+    responseStatus: number | null;
+    responseBody: string | null;
+    error: string | null;
+    nextAttemptAt: string | null;
+    deliveredAt: string | null;
+    createdAt: string | null;
+    /** The exact body that was signed and sent. Present when asked for. */
+    requestBody?: JsonObject | null;
+}
+export interface WebhookCreateArgs {
+    url: string;
+    events: string[];
+    filters?: WebhookFilters;
+    headers?: Record<string, string>;
+    /** Overrides `webhooks.signing.secret` for this subscription. */
+    secret?: string;
+    active?: boolean;
+    actor?: Actor | null;
+    source?: OperationSource;
+}
+export interface WebhookUpdateArgs extends Partial<WebhookCreateArgs> {
+    id: string;
+}
+export interface WebhookListArgs {
+    /** Includes inactive subscriptions. They are included by default. */
+    active?: boolean;
+}
+export interface WebhookDeliveryListArgs {
+    webhookId?: string;
+    status?: WebhookDeliveryStatus;
+    eventId?: string;
+    limit?: number;
+    cursor?: string;
+    /** Includes the request body, which can be large. */
+    includeBody?: boolean;
+}
+export interface WebhookDeliveryPage {
+    entries: WebhookDelivery[];
+    limit: number;
+    hasNextPage: boolean;
+    cursor: string | null;
+}
+export interface WebhookTestArgs {
+    id: string;
+    actor?: Actor | null;
+}
+export interface WebhookRetryArgs {
+    /** A delivery id. The replay is a new attempt carrying the same event id. */
+    id: string;
+    actor?: Actor | null;
+}
+/** What one sweep of the retry queue did. */
+export interface WebhookDispatchReport {
+    attempted: number;
+    delivered: number;
+    failed: number;
+}
+export interface CmsWebhooks {
+    readonly enabled: boolean;
+    list(args?: WebhookListArgs): Promise<WebhookSubscription[]>;
+    get(id: string): Promise<WebhookSubscription | null>;
+    create(args: WebhookCreateArgs): Promise<WebhookSubscription>;
+    update(args: WebhookUpdateArgs): Promise<WebhookSubscription>;
+    remove(args: {
+        id: string;
+        actor?: Actor | null;
+    }): Promise<boolean>;
+    deliveries(args?: WebhookDeliveryListArgs): Promise<WebhookDeliveryPage>;
+    /** Sends a synthetic `webhook.test` event to one subscription, now. */
+    test(args: WebhookTestArgs): Promise<WebhookDelivery>;
+    /** Replays a delivery: same event, new attempt, new row. */
+    retry(args: WebhookRetryArgs): Promise<WebhookDelivery>;
+    /**
+     * Fans one committed event out to its subscribers.
+     *
+     * Called by the outbox worker after the commit. It never throws: a
+     * subscriber that is down is a retry, not a failed event — making the
+     * outbox row fail would replay the event to every *other* subscriber too.
+     */
+    dispatch(event: CmsEvent): Promise<void>;
+    /** The `webhook-retries` sweep, also registered in `cms.jobs`. */
+    drain(args?: {
+        now?: Date;
+        limit?: number;
+    }): Promise<WebhookDispatchReport>;
+    /** Whether any active subscription wants this event type. */
+    wants(type: AnyEventType): Promise<boolean>;
+}
+//# sourceMappingURL=webhooks.d.ts.map

package/dist/types/webhooks.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"webhooks.d.ts","sourceRoot":"","sources":["../../src/types/webhooks.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,KAAK,EAAE,eAAe,EAAE,MAAM,SAAS,CAAC;AACtD,OAAO,KAAK,EAAE,YAAY,EAAE,QAAQ,EAAE,MAAM,UAAU,CAAC;AACvD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAC;AAEzC;;;;;;;;GAQG;AAEH,MAAM,WAAW,cAAc;IAC7B,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;IACvB,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;CACpB;AAED,MAAM,WAAW,mBAAmB;IAClC,EAAE,EAAE,MAAM,CAAC;IACX,GAAG,EAAE,MAAM,CAAC;IACZ,qEAAqE;IACrE,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,OAAO,EAAE,cAAc,GAAG,IAAI,CAAC;IAC/B,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,IAAI,CAAC;IACvC,sFAAsF;IACtF,SAAS,EAAE,OAAO,CAAC;IACnB,MAAM,EAAE,OAAO,CAAC;IAChB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;CAC1B;AAED;;;;;;GAMG;AACH,MAAM,MAAM,qBAAqB,GAAG,SAAS,GAAG,WAAW,GAAG,QAAQ,CAAC;AAEvE,MAAM,WAAW,eAAe;IAC9B,EAAE,EAAE,MAAM,CAAC;IACX,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,qBAAqB,CAAC;IAC9B,OAAO,EAAE,MAAM,CAAC;IAChB,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,uEAAuE;IACvE,WAAW,CAAC,EAAE,UAAU,GAAG,IAAI,CAAC;CACjC;AAED,MAAM,WAAW,iBAAiB;IAChC,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,OAAO,CAAC,EAAE,cAAc,CAAC;IACzB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACjC,iEAAiE;IACjE,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,KAAK,CAAC,EAAE,KAAK,GAAG,IAAI,CAAC;IACrB,MAAM,CAAC,EAAE,eAAe,CAAC;CAC1B;AAED,MAAM,WAAW,iBAAkB,SAAQ,OAAO,CAAC,iBAAiB,CAAC;IACnE,EAAE,EAAE,MAAM,CAAC;CACZ;AAED,MAAM,WAAW,eAAe;IAC9B,qEAAqE;IACrE,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB;AAED,MAAM,WAAW,uBAAuB;IACtC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,MAAM,CAAC,EAAE,qBAAqB,CAAC;IAC/B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,qDAAqD;IACrD,WAAW,CAAC,EAAE,OAAO,CAAC;CACvB;AAED,MAAM,WAAW,mBAAmB;IAClC,OAAO,EAAE,eAAe,EAAE,CAAC;IAC3B,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,OAAO,CAAC;IACrB,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;CACvB;AAED,MAAM,WAAW,eAAe;IAC9B,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,CAAC,EAAE,KAAK,GAAG,IAAI,CAAC;CACtB;AAED,MAAM,WAAW,gBAAgB;IAC/B,6EAA6E;IAC7E,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,CAAC,EAAE,KAAK,GAAG,IAAI,CAAC;CACtB;AAED,6CAA6C;AAC7C,MAAM,WAAW,qBAAqB;IACpC,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,IAAI,CAAC,IAAI,CAAC,EAAE,eAAe,GAAG,OAAO,CAAC,mBAAmB,EAAE,CAAC,CAAC;IAC7D,GAAG,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,mBAAmB,GAAG,IAAI,CAAC,CAAC;IACrD,MAAM,CAAC,IAAI,EAAE,iBAAiB,GAAG,OAAO,CAAC,mBAAmB,CAAC,CAAC;IAC9D,MAAM,CAAC,IAAI,EAAE,iBAAiB,GAAG,OAAO,CAAC,mBAAmB,CAAC,CAAC;IAC9D,MAAM,CAAC,IAAI,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,KAAK,GAAG,IAAI,CAAA;KAAE,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IACrE,UAAU,CAAC,IAAI,CAAC,EAAE,uBAAuB,GAAG,OAAO,CAAC,mBAAmB,CAAC,CAAC;IACzE,uEAAuE;IACvE,IAAI,CAAC,IAAI,EAAE,eAAe,GAAG,OAAO,CAAC,eAAe,CAAC,CAAC;IACtD,4DAA4D;IAC5D,KAAK,CAAC,IAAI,EAAE,gBAAgB,GAAG,OAAO,CAAC,eAAe,CAAC,CAAC;IACxD;;;;;;OAMG;IACH,QAAQ,CAAC,KAAK,EAAE,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACzC,kEAAkE;IAClE,KAAK,CAAC,IAAI,CAAC,EAAE;QAAE,GAAG,CAAC,EAAE,IAAI,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,qBAAqB,CAAC,CAAC;IAC7E,6DAA6D;IAC7D,KAAK,CAAC,IAAI,EAAE,YAAY,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CAC7C"}

package/dist/types.d.ts

@@ -0,0 +1,8 @@
+/**
+ * The frozen contracts: every type the engine, the adapters and the plugins
+ * agree on. Implementations live elsewhere; this entry point is importable
+ * from anywhere, including a Worker that only needs the shapes.
+ */
+export type * from "./types/index";
+export { CmsError, CmsConfigError } from "./errors";
+//# sourceMappingURL=types.d.ts.map

package/dist/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,mBAAmB,eAAe,CAAC;AACnC,OAAO,EAAE,QAAQ,EAAE,cAAc,EAAE,MAAM,UAAU,CAAC"}

package/dist/types.js

@@ -0,0 +1 @@
+import{e,n}from"./index-x72d1hzh.js";export{n as CmsConfigError,e as CmsError};

package/dist/uploads.d.ts

@@ -0,0 +1,21 @@
+/**
+ * `@heyo-sh/heyo-cms/uploads`.
+ *
+ * Storage adapters, the image processor contract, and the two pieces of image
+ * work the engine does without a codec. Separate from the main entry point so
+ * a Worker bundle that never touches a file does not carry any of it.
+ *
+ * The lifecycle itself — reference counting, orphaning, collection — is not
+ * here: it is part of the engine, because it happens inside the transaction
+ * that saves a document (section 6).
+ */
+export { local, memory } from "./storage/local";
+export type { LocalStorageOptions, MemoryStorageOptions } from "./storage/local";
+export { azure, gcs, r2, s3, type AzureStorageOptions, type GcsStorageOptions, type R2Binding, type R2StorageOptions, type S3StorageOptions, } from "./storage/providers";
+export { encodeKey, httpStorage, type FetchLike, type HttpStorageOptions, type SignableRequest, } from "./storage/http";
+export { signAwsV4, signAzure, type AwsCredentials, type AwsSignRequest, type AzureSignRequest, } from "./storage/sign";
+export { sharpImages, type SharpImagesOptions } from "./media/sharp";
+export { extensionFor, imageContentType, probeImage, stripImageMetadata, } from "./media/index";
+export type { ObjectMeta, SignedUrlOptions, StorageAdapter, StorageAdapterFactory, StorageConfig, StoredObject, } from "./types/storage";
+export type { CropRect, FocalPoint, ImageFormat, ImageInfo, ImageProcessor, ImageTransform, MediaDocument, MediaStatus, MediaUsage, ProcessedImage, } from "./types/media";
+//# sourceMappingURL=uploads.d.ts.map

package/dist/uploads.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"uploads.d.ts","sourceRoot":"","sources":["../src/uploads.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,iBAAiB,CAAC;AAChD,YAAY,EAAE,mBAAmB,EAAE,oBAAoB,EAAE,MAAM,iBAAiB,CAAC;AACjF,OAAO,EACL,KAAK,EACL,GAAG,EACH,EAAE,EACF,EAAE,EACF,KAAK,mBAAmB,EACxB,KAAK,iBAAiB,EACtB,KAAK,SAAS,EACd,KAAK,gBAAgB,EACrB,KAAK,gBAAgB,GACtB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,SAAS,EACT,WAAW,EACX,KAAK,SAAS,EACd,KAAK,kBAAkB,EACvB,KAAK,eAAe,GACrB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,SAAS,EACT,SAAS,EACT,KAAK,cAAc,EACnB,KAAK,cAAc,EACnB,KAAK,gBAAgB,GACtB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,WAAW,EAAE,KAAK,kBAAkB,EAAE,MAAM,eAAe,CAAC;AACrE,OAAO,EACL,YAAY,EACZ,gBAAgB,EAChB,UAAU,EACV,kBAAkB,GACnB,MAAM,eAAe,CAAC;AAEvB,YAAY,EACV,UAAU,EACV,gBAAgB,EAChB,cAAc,EACd,qBAAqB,EACrB,aAAa,EACb,YAAY,GACb,MAAM,iBAAiB,CAAC;AACzB,YAAY,EACV,QAAQ,EACR,UAAU,EACV,WAAW,EACX,SAAS,EACT,cAAc,EACd,cAAc,EACd,aAAa,EACb,WAAW,EACX,UAAU,EACV,cAAc,GACf,MAAM,eAAe,CAAC"}

package/dist/uploads.js

@@ -0,0 +1,9 @@
+import"./index-2z1qe5mw.js";import"./index-vxw0a03g.js";import{mo,st,at,ye,ct,qe,zn,dt,ut}from"./index-wj8y1xcj.js";import"./index-g4crf47y.js";import{b}from"./index-cbwwtcm4.js";import{O}from"./index-m82a0shw.js";import{e,n}from"./index-x72d1hzh.js";function j(t={}){let r=new Map,i=O(t.baseUrl??"memory://media");return{id:"memory",async put(s,a,o){r.set(s,{body:await ye(a),meta:o,lastModified:new Date})},async get(s){let a=r.get(s);if(!a)return null;return ct(a.body)},async delete(s){for(let a of s)r.delete(a)},url(s){return`${i}/${s}`},async head(s){let a=r.get(s);if(!a)return null;return{key:s,size:a.body.byteLength,contentType:a.meta.contentType,lastModified:a.lastModified}}}}function T(t){let r=O(t.baseUrl??"/media"),i=async(s)=>{let{join:a,normalize:o,resolve:c}=await import("node:path"),g=c(t.directory),d=c(a(g,o(s)));if(d!==g&&!d.startsWith(`${g}/`))throw new e(`Refusing to write outside the storage root: ${s}`,{status:400,code:"invalid_storage_key"});return d};return{id:"local",...t.prefix===void 0?{}:{prefix:t.prefix},async put(s,a){let{mkdir:o,writeFile:c}=await import("node:fs/promises"),{dirname:g}=await import("node:path"),d=await i(s);await o(g(d),{recursive:!0}),await c(d,await ye(a))},async get(s){let{readFile:a}=await import("node:fs/promises");try{let o=await a(await i(s));return ct(new Uint8Array(o))}catch{return null}},async delete(s){let{rm:a}=await import("node:fs/promises");for(let o of s)await a(await i(o),{force:!0})},url(s){return`${r}/${s}`},async head(s){let{stat:a}=await import("node:fs/promises");try{let o=await a(await i(s));return{key:s,size:o.size,contentType:"application/octet-stream",lastModified:o.mtime}}catch{return null}}}}function A(t){let r=t.fetch??((...a)=>fetch(...a)),i=async(a,o,c={})=>{let g=t.endpoint(o),d=c.body,p=await t.sign({method:a,url:g,headers:{...t.defaultHeaders,...c.headers},payload:d??new Uint8Array(0),contentLength:d?.byteLength??0});return r(g,{method:a,headers:p,...d===void 0?{}:{body:d}})},s=async(a,o,c)=>{let g=(await a.text().catch(()=>"")).slice(0,512);throw new e(`${t.id}: could not ${o} "${c}" (${a.status})${g?`: ${g}`:""}`,{status:502,code:"storage_request_failed"})};return{id:t.id,...t.prefix===void 0?{}:{prefix:t.prefix},async put(a,o,c){let g=await ye(o),d=await i("PUT",a,{body:g,headers:{"content-type":c.contentType,"content-length":String(g.byteLength),...c.cacheControl?{"cache-control":c.cacheControl}:{},...c.contentDisposition?{"content-disposition":c.contentDisposition}:{},...L(t.id,c.metadata)}});if(!d.ok)await s(d,"store",a)},async get(a){let o=await i("GET",a);if(o.status===404)return null;if(!o.ok)await s(o,"read",a);return o.body},async delete(a){for(let o of a){let c=await i("DELETE",o);if(!c.ok&&c.status!==404)await s(c,"delete",o)}},url(a){return t.publicUrl(a)},...t.signedUrl===void 0?{}:{signedUrl:t.signedUrl.bind(t)},async head(a){let o=await i("HEAD",a);if(o.status===404)return null;if(!o.ok)await s(o,"stat",a);let c=o.headers.get("last-modified");return{key:a,size:Number(o.headers.get("content-length")??0),contentType:o.headers.get("content-type")??"application/octet-stream",...c?{lastModified:new Date(c)}:{}}}}}function L(t,r){if(!r)return{};let i=t==="azure"?"x-ms-meta-":"x-amz-meta-";return Object.fromEntries(Object.entries(r).map(([s,a])=>[`${i}${s.toLowerCase()}`,a]))}function f(t){return t.split("/").map((r)=>encodeURIComponent(r)).join("/")}var k="UNSIGNED-PAYLOAD";async function x(t){let i=(t.now??new Date).toISOString().replace(/[-:]/g,"").replace(/\.\d{3}/,""),s=i.slice(0,8),a=t.payload===k?k:qe(await dt(t.payload)),o={...t.headers,host:t.url.host,"x-amz-date":i,"x-amz-content-sha256":a,...t.credentials.sessionToken?{"x-amz-security-token":t.credentials.sessionToken}:{}},c=Object.entries(o).map(([l,y])=>[l.toLowerCase(),y.trim().replace(/\s+/g," ")]).sort((l,y)=>l[0]<y[0]?-1:l[0]>y[0]?1:0),g=c.map(([l])=>l).join(";"),d=[t.method.toUpperCase(),E(t.url.pathname),_(t.url),`${c.map(([l,y])=>`${l}:${y}`).join(`
+`)}
+`,g,a].join(`
+`),p=`${s}/${t.region}/${t.service}/aws4_request`,u=["AWS4-HMAC-SHA256",i,p,qe(await dt(d))].join(`
+`),h=await z(t.credentials.secretAccessKey,s,t.region,t.service),M=qe(await S(h,u));return{...o,authorization:`AWS4-HMAC-SHA256 Credential=${t.credentials.accessKeyId}/${p}, SignedHeaders=${g}, Signature=${M}`}}async function I(t){let r=t.now??new Date,i={...t.headers,"x-ms-date":r.toUTCString(),"x-ms-version":"2021-08-06"},s=Object.entries(i).map(([d,p])=>[d.toLowerCase(),p.trim()]).filter(([d])=>d.startsWith("x-ms-")).sort((d,p)=>d[0]<p[0]?-1:1).map(([d,p])=>`${d}:${p}`).join(`
+`),a=[...t.url.searchParams.keys()].map((d)=>d.toLowerCase()).sort().map((d)=>`${d}:${t.url.searchParams.getAll(d).sort().join(",")}`).join(`
+`),o=`/${t.account}${decodeURIComponent(t.url.pathname)}`+(a?`
+${a}`:""),c=[t.method.toUpperCase(),i["content-encoding"]??"",i["content-language"]??"",t.contentLength?String(t.contentLength):"",i["content-md5"]??"",i["content-type"]??"","","","","","","",s,o].join(`
+`),g=zn(await S(K(t.key),c));return{...i,authorization:`SharedKey ${t.account}:${g}`}}async function z(t,r,i,s){let o=await S(new TextEncoder().encode(`AWS4${t}`),r);return o=await S(o,i),o=await S(o,s),S(o,"aws4_request")}async function S(t,r){let i=await crypto.subtle.importKey("raw",t,{name:"HMAC",hash:"SHA-256"},!1,["sign"]),s=await crypto.subtle.sign("HMAC",i,new TextEncoder().encode(r));return new Uint8Array(s)}function E(t){return t.split("/").map((r)=>R(decodeURIComponent(r))).join("/")}function _(t){return[...t.searchParams.entries()].map(([r,i])=>[R(r),R(i)]).sort((r,i)=>r[0]<i[0]?-1:1).map(([r,i])=>`${r}=${i}`).join("&")}function R(t){return encodeURIComponent(t).replace(/[!'()*]/g,(r)=>`%${r.charCodeAt(0).toString(16).toUpperCase()}`)}function K(t){let r=atob(t);return Uint8Array.from(r,(i)=>i.charCodeAt(0))}var D="1h";function B(t){if(!t.bucket)throw new n("uploads.storage","s3() needs a bucket");if(!t.region&&!t.endpoint)throw new n("uploads.storage","s3() needs a region, or an endpoint for an S3-compatible service");if(t.signedUrls?.expiresIn)b(t.signedUrls.expiresIn,"uploads.storage.signedUrls");return()=>P("s3",t,"s3")}function F(t){if(G(t))return()=>N(t);let r=t;if(!r.accountId)throw new n("uploads.storage","r2() needs an accountId, or an R2 bucket binding");return()=>P("r2",{...r,region:"auto",endpoint:`https://${r.accountId}.r2.cloudflarestorage.com`,forcePathStyle:!0},"s3")}function H(t){if(!t.bucket)throw new n("uploads.storage","gcs() needs a bucket");return()=>P("gcs",{...t,region:t.region??"auto",endpoint:"https://storage.googleapis.com",forcePathStyle:!0},"s3")}function v(t){if(!t.account||!t.container)throw new n("uploads.storage","azure() needs an account and a container");return()=>{let r=U(t.accountKey??w("AZURE_STORAGE_KEY"),"azure()","an account key","AZURE_STORAGE_KEY"),i=`https://${t.account}.blob.core.windows.net/${t.container}`,s=O(t.publicUrl??i);return A({id:"azure",...t.fetch===void 0?{}:{fetch:t.fetch},...t.prefix===void 0?{}:{prefix:t.prefix},endpoint:(a)=>new URL(`${i}/${f(a)}`),publicUrl:(a)=>`${s}/${f(a)}`,defaultHeaders:{"x-ms-blob-type":"BlockBlob"},sign:(a)=>I({method:a.method,url:a.url,headers:a.headers,account:t.account,key:r,contentLength:a.contentLength})})}}function P(t,r,i){let s={accessKeyId:U(r.accessKeyId??w("AWS_ACCESS_KEY_ID"),`${t}()`,"an access key id","AWS_ACCESS_KEY_ID"),secretAccessKey:U(r.secretAccessKey??w("AWS_SECRET_ACCESS_KEY"),`${t}()`,"a secret access key","AWS_SECRET_ACCESS_KEY"),...r.sessionToken??w("AWS_SESSION_TOKEN")?{sessionToken:r.sessionToken??w("AWS_SESSION_TOKEN")}:{}},a=r.region??"us-east-1",o=r.forcePathStyle===!0||Boolean(r.endpoint),c=r.endpoint?O(r.endpoint):`https://s3.${a}.amazonaws.com`,g=o?`${c}/${r.bucket}`:Y(c,r.bucket),d=O(r.publicUrl??g),p=()=>Math.floor(b(r.signedUrls?.expiresIn??D)/1000);return A({id:t,...r.fetch===void 0?{}:{fetch:r.fetch},...r.prefix===void 0?{}:{prefix:r.prefix},endpoint:(u)=>new URL(`${g}/${f(u)}`),publicUrl:(u)=>`${d}/${f(u)}`,...r.acl===void 0?{}:{defaultHeaders:{"x-amz-acl":r.acl}},sign:(u)=>x({method:u.method,url:u.url,headers:u.headers,payload:u.payload,region:a,service:i,credentials:s}),signedUrl:(u,h)=>W({url:new URL(`${g}/${f(u)}`),region:a,service:i,credentials:s,expiresIn:X(h?.expiresIn)??p(),...h?.download===!0?{disposition:`attachment${h.filename?`; filename="${h.filename}"`:""}`}:{}})})}async function W(t){let r=new Date,i=r.toISOString().replace(/[-:]/g,"").replace(/\.\d{3}/,""),s=`${i.slice(0,8)}/${t.region}/${t.service}/aws4_request`,a=new URL(t.url.toString());if(a.searchParams.set("X-Amz-Algorithm","AWS4-HMAC-SHA256"),a.searchParams.set("X-Amz-Credential",`${t.credentials.accessKeyId}/${s}`),a.searchParams.set("X-Amz-Date",i),a.searchParams.set("X-Amz-Expires",String(t.expiresIn)),a.searchParams.set("X-Amz-SignedHeaders","host"),t.credentials.sessionToken)a.searchParams.set("X-Amz-Security-Token",t.credentials.sessionToken);if(t.disposition)a.searchParams.set("response-content-disposition",t.disposition);let o=await x({method:"GET",url:a,headers:{},payload:"UNSIGNED-PAYLOAD",region:t.region,service:t.service,credentials:{...t.credentials,sessionToken:void 0},now:r}),c=/Signature=([a-f0-9]+)/.exec(o.authorization??"")?.[1];return a.searchParams.set("X-Amz-Signature",c??""),a.toString()}function N(t){return{id:"r2",async put(r,i,s){await t.put(r,i,{httpMetadata:{contentType:s.contentType,...s.cacheControl?{cacheControl:s.cacheControl}:{}},...s.metadata?{customMetadata:s.metadata}:{}})},async get(r){let i=await t.get(r);return i?i.body:null},async delete(r){if(r.length>0)await t.delete(r)},url(r){return`/${r}`},async head(r){let i=await t.head(r);if(!i)return null;return{key:r,size:i.size,contentType:i.httpMetadata?.contentType??"application/octet-stream",...i.uploaded?{lastModified:i.uploaded}:{}}}}}function G(t){return typeof t==="object"&&t!==null&&typeof t.get==="function"&&typeof t.put==="function"&&typeof t.head==="function"}function Y(t,r){let i=new URL(t);return i.host=`${r}.${i.host}`,i.toString().replace(/\/+$/,"")}function w(t){return globalThis.process?.env?.[t]}function U(t,r,i,s){if(t)return t;throw new e(`${r} needs ${i}; pass it in the configuration or set ${s}`,{status:500,code:"storage_credentials_missing"})}function X(t){if(t===void 0)return;return typeof t==="number"?t:Math.floor(b(t)/1000)}var V=new Set(["image/jpeg","image/png","image/webp","image/avif","image/gif","image/tiff"]),C;async function Z(){return C??=(async()=>{try{let r=await import("sharp");return r.default??r}catch{throw new e("sharpImages() needs the optional `sharp` package; install it, or configure uploads.images without transformations.",{status:500,code:"image_processor_missing"})}})(),C}function Q(t={}){return{id:"sharp",supports:(r)=>V.has(r.toLowerCase()),async transform(r,i,s){let o=(await Z())(r,{...t.limitInputPixels===void 0?{}:{limitInputPixels:t.limitInputPixels}});if(t.autoOrient!==!1)o=o.rotate();let{width:c,height:g}=s,d=J(c,g,i);if(d)o=o.extract(d),c=d.width,g=d.height;if(i.width!==void 0||i.height!==void 0)o=o.resize({...i.width===void 0?{}:{width:i.width},...i.height===void 0?{}:{height:i.height},fit:i.fit??"inside",withoutEnlargement:!0});let p=i.format??te(s.contentType);if(o=o.toFormat(p,{...i.quality===void 0?{}:{quality:i.quality}}),i.stripMetadata===!1)o=o.keepMetadata();let u=await o.toBuffer({resolveWithObject:!0});return{data:u.data,contentType:`image/${u.info.format}`,width:u.info.width,height:u.info.height}}}}function J(t,r,i){if(t<=0||r<=0)return null;let s=i.crop&&ee(i.crop,t,r),a=s||{left:0,top:0,width:t,height:r},o=i.fit==="cover"&&i.position&&i.width&&i.height?q(a.width,a.height,i.width/i.height,{x:(i.position.x*t-a.left)/a.width,y:(i.position.y*r-a.top)/a.height}):null;if(!o)return s||null;return{left:a.left+o.left,top:a.top+o.top,width:o.width,height:o.height}}function q(t,r,i,s){if(t<=0||r<=0||!Number.isFinite(i)||i<=0)return null;let a=t/r,o=a>i?m(Math.round(r*i),1,t):t,c=a>i?r:m(Math.round(t/i),1,r);if(o>=t&&c>=r)return null;return{left:m(Math.round(s.x*t-o/2),0,t-o),top:m(Math.round(s.y*r-c/2),0,r-c),width:o,height:c}}function ee(t,r,i){let s=m(Math.round(t.x),0,Math.max(r-1,0)),a=m(Math.round(t.y),0,Math.max(i-1,0)),o=m(Math.round(t.width),1,r-s),c=m(Math.round(t.height),1,i-a);if(o<=0||c<=0)return null;return{left:s,top:a,width:o,height:c}}function m(t,r,i){return Math.min(Math.max(t,r),Math.max(r,i))}function te(t){let r=t.split("/")[1]??"jpeg";return r==="jpg"?"jpeg":r}export{v as azure,f as encodeKey,at as extensionFor,H as gcs,A as httpStorage,mo as imageContentType,T as local,j as memory,st as probeImage,F as r2,B as s3,Q as sharpImages,x as signAwsV4,I as signAzure,ut as stripImageMetadata};

package/dist/webhooks/index.d.ts

@@ -0,0 +1,10 @@
+/**
+ * Webhook delivery (section 7).
+ *
+ * The outbox decides *that* an event happened; this directory decides who
+ * hears about it and keeps trying until they do.
+ */
+export { createWebhooks, type WebhookRuntime } from "./service";
+export { webhookRetryJob } from "./job";
+export { signatureHeader, signPayload, verifySignature } from "./sign";
+//# sourceMappingURL=index.d.ts.map

package/dist/webhooks/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/webhooks/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,OAAO,EAAE,cAAc,EAAE,KAAK,cAAc,EAAE,MAAM,WAAW,CAAC;AAChE,OAAO,EAAE,eAAe,EAAE,MAAM,OAAO,CAAC;AACxC,OAAO,EAAE,eAAe,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,QAAQ,CAAC"}

package/dist/webhooks/job.d.ts

@@ -0,0 +1,17 @@
+import type { JobDefinition } from "../engine/jobs";
+import type { WebhookRuntime } from "./service";
+/**
+ * The retry sweep.
+ *
+ * Registered in `cms.jobs` only when webhooks are enabled, so
+ * `cms.inspect().jobs` lists what will actually run. The first attempt
+ * happens inline, right after the commit: this is for the ones that did not
+ * land, and it is the reason an outage at a subscriber costs them a delay
+ * rather than the event.
+ *
+ * `exists` next to `lte` for the same reason the scheduled-change sweep needs
+ * it: on MongoDB a missing `next_attempt_at` compares below a date, so a
+ * delivery that has never been attempted would look due on every pass.
+ */
+export declare function webhookRetryJob(webhooks: WebhookRuntime): JobDefinition;
+//# sourceMappingURL=job.d.ts.map

package/dist/webhooks/job.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"job.d.ts","sourceRoot":"","sources":["../../src/webhooks/job.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,aAAa,EAAW,MAAM,gBAAgB,CAAC;AAE7D,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AAIhD;;;;;;;;;;;;GAYG;AACH,wBAAgB,eAAe,CAAC,QAAQ,EAAE,cAAc,GAAG,aAAa,CAgCvE"}