@heyo-sh/heyo-cms 0.0.0-stage → 0.2.0

package/dist/types/webhooks.d.ts

@@ -0,0 +1,133 @@
+import type { Actor, OperationSource } from "./actor";
+import type { AnyEventType, CmsEvent } from "./events";
+import type { JsonObject } from "./json";
+/**
+ * Webhooks (stage 9, section 7).
+ *
+ * The delivery half of the outbox. An event is written inside the
+ * transaction that caused it and delivered afterwards, so a rolled back
+ * write sends nothing and a committed one sends even if the process dies a
+ * line later — and a subscriber that is down does not slow a save down, it
+ * accumulates retries.
+ */
+export interface WebhookFilters {
+    collections?: string[];
+    locales?: string[];
+}
+export interface WebhookSubscription {
+    id: string;
+    url: string;
+    /** Event types, or prefixes: `document.*`, or `*` for everything. */
+    events: string[];
+    filters: WebhookFilters | null;
+    headers: Record<string, string> | null;
+    /** Whether this subscription signs with its own secret rather than the global one. */
+    hasSecret: boolean;
+    active: boolean;
+    createdAt: string | null;
+    updatedAt: string | null;
+}
+/**
+ * One attempt to hand one event to one subscriber.
+ *
+ * `pending` is waiting or being retried, `delivered` succeeded, `failed` is
+ * out of attempts — the dead-letter queue is a status rather than a second
+ * table, because a replay has to be able to put the same row back in flight.
+ */
+export type WebhookDeliveryStatus = "pending" | "delivered" | "failed";
+export interface WebhookDelivery {
+    id: string;
+    webhookId: string;
+    eventId: string;
+    eventType: string;
+    status: WebhookDeliveryStatus;
+    attempt: number;
+    responseStatus: number | null;
+    responseBody: string | null;
+    error: string | null;
+    nextAttemptAt: string | null;
+    deliveredAt: string | null;
+    createdAt: string | null;
+    /** The exact body that was signed and sent. Present when asked for. */
+    requestBody?: JsonObject | null;
+}
+export interface WebhookCreateArgs {
+    url: string;
+    events: string[];
+    filters?: WebhookFilters;
+    headers?: Record<string, string>;
+    /** Overrides `webhooks.signing.secret` for this subscription. */
+    secret?: string;
+    active?: boolean;
+    actor?: Actor | null;
+    source?: OperationSource;
+}
+export interface WebhookUpdateArgs extends Partial<WebhookCreateArgs> {
+    id: string;
+}
+export interface WebhookListArgs {
+    /** Includes inactive subscriptions. They are included by default. */
+    active?: boolean;
+}
+export interface WebhookDeliveryListArgs {
+    webhookId?: string;
+    status?: WebhookDeliveryStatus;
+    eventId?: string;
+    limit?: number;
+    cursor?: string;
+    /** Includes the request body, which can be large. */
+    includeBody?: boolean;
+}
+export interface WebhookDeliveryPage {
+    entries: WebhookDelivery[];
+    limit: number;
+    hasNextPage: boolean;
+    cursor: string | null;
+}
+export interface WebhookTestArgs {
+    id: string;
+    actor?: Actor | null;
+}
+export interface WebhookRetryArgs {
+    /** A delivery id. The replay is a new attempt carrying the same event id. */
+    id: string;
+    actor?: Actor | null;
+}
+/** What one sweep of the retry queue did. */
+export interface WebhookDispatchReport {
+    attempted: number;
+    delivered: number;
+    failed: number;
+}
+export interface CmsWebhooks {
+    readonly enabled: boolean;
+    list(args?: WebhookListArgs): Promise<WebhookSubscription[]>;
+    get(id: string): Promise<WebhookSubscription | null>;
+    create(args: WebhookCreateArgs): Promise<WebhookSubscription>;
+    update(args: WebhookUpdateArgs): Promise<WebhookSubscription>;
+    remove(args: {
+        id: string;
+        actor?: Actor | null;
+    }): Promise<boolean>;
+    deliveries(args?: WebhookDeliveryListArgs): Promise<WebhookDeliveryPage>;
+    /** Sends a synthetic `webhook.test` event to one subscription, now. */
+    test(args: WebhookTestArgs): Promise<WebhookDelivery>;
+    /** Replays a delivery: same event, new attempt, new row. */
+    retry(args: WebhookRetryArgs): Promise<WebhookDelivery>;
+    /**
+     * Fans one committed event out to its subscribers.
+     *
+     * Called by the outbox worker after the commit. It never throws: a
+     * subscriber that is down is a retry, not a failed event — making the
+     * outbox row fail would replay the event to every *other* subscriber too.
+     */
+    dispatch(event: CmsEvent): Promise<void>;
+    /** The `webhook-retries` sweep, also registered in `cms.jobs`. */
+    drain(args?: {
+        now?: Date;
+        limit?: number;
+    }): Promise<WebhookDispatchReport>;
+    /** Whether any active subscription wants this event type. */
+    wants(type: AnyEventType): Promise<boolean>;
+}
+//# sourceMappingURL=webhooks.d.ts.map

package/dist/types/webhooks.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"webhooks.d.ts","sourceRoot":"","sources":["../../src/types/webhooks.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,KAAK,EAAE,eAAe,EAAE,MAAM,SAAS,CAAC;AACtD,OAAO,KAAK,EAAE,YAAY,EAAE,QAAQ,EAAE,MAAM,UAAU,CAAC;AACvD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAC;AAEzC;;;;;;;;GAQG;AAEH,MAAM,WAAW,cAAc;IAC7B,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;IACvB,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;CACpB;AAED,MAAM,WAAW,mBAAmB;IAClC,EAAE,EAAE,MAAM,CAAC;IACX,GAAG,EAAE,MAAM,CAAC;IACZ,qEAAqE;IACrE,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,OAAO,EAAE,cAAc,GAAG,IAAI,CAAC;IAC/B,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,IAAI,CAAC;IACvC,sFAAsF;IACtF,SAAS,EAAE,OAAO,CAAC;IACnB,MAAM,EAAE,OAAO,CAAC;IAChB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;CAC1B;AAED;;;;;;GAMG;AACH,MAAM,MAAM,qBAAqB,GAAG,SAAS,GAAG,WAAW,GAAG,QAAQ,CAAC;AAEvE,MAAM,WAAW,eAAe;IAC9B,EAAE,EAAE,MAAM,CAAC;IACX,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,qBAAqB,CAAC;IAC9B,OAAO,EAAE,MAAM,CAAC;IAChB,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,uEAAuE;IACvE,WAAW,CAAC,EAAE,UAAU,GAAG,IAAI,CAAC;CACjC;AAED,MAAM,WAAW,iBAAiB;IAChC,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,OAAO,CAAC,EAAE,cAAc,CAAC;IACzB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACjC,iEAAiE;IACjE,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,KAAK,CAAC,EAAE,KAAK,GAAG,IAAI,CAAC;IACrB,MAAM,CAAC,EAAE,eAAe,CAAC;CAC1B;AAED,MAAM,WAAW,iBAAkB,SAAQ,OAAO,CAAC,iBAAiB,CAAC;IACnE,EAAE,EAAE,MAAM,CAAC;CACZ;AAED,MAAM,WAAW,eAAe;IAC9B,qEAAqE;IACrE,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB;AAED,MAAM,WAAW,uBAAuB;IACtC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,MAAM,CAAC,EAAE,qBAAqB,CAAC;IAC/B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,qDAAqD;IACrD,WAAW,CAAC,EAAE,OAAO,CAAC;CACvB;AAED,MAAM,WAAW,mBAAmB;IAClC,OAAO,EAAE,eAAe,EAAE,CAAC;IAC3B,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,OAAO,CAAC;IACrB,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;CACvB;AAED,MAAM,WAAW,eAAe;IAC9B,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,CAAC,EAAE,KAAK,GAAG,IAAI,CAAC;CACtB;AAED,MAAM,WAAW,gBAAgB;IAC/B,6EAA6E;IAC7E,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,CAAC,EAAE,KAAK,GAAG,IAAI,CAAC;CACtB;AAED,6CAA6C;AAC7C,MAAM,WAAW,qBAAqB;IACpC,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,IAAI,CAAC,IAAI,CAAC,EAAE,eAAe,GAAG,OAAO,CAAC,mBAAmB,EAAE,CAAC,CAAC;IAC7D,GAAG,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,mBAAmB,GAAG,IAAI,CAAC,CAAC;IACrD,MAAM,CAAC,IAAI,EAAE,iBAAiB,GAAG,OAAO,CAAC,mBAAmB,CAAC,CAAC;IAC9D,MAAM,CAAC,IAAI,EAAE,iBAAiB,GAAG,OAAO,CAAC,mBAAmB,CAAC,CAAC;IAC9D,MAAM,CAAC,IAAI,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,KAAK,GAAG,IAAI,CAAA;KAAE,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IACrE,UAAU,CAAC,IAAI,CAAC,EAAE,uBAAuB,GAAG,OAAO,CAAC,mBAAmB,CAAC,CAAC;IACzE,uEAAuE;IACvE,IAAI,CAAC,IAAI,EAAE,eAAe,GAAG,OAAO,CAAC,eAAe,CAAC,CAAC;IACtD,4DAA4D;IAC5D,KAAK,CAAC,IAAI,EAAE,gBAAgB,GAAG,OAAO,CAAC,eAAe,CAAC,CAAC;IACxD;;;;;;OAMG;IACH,QAAQ,CAAC,KAAK,EAAE,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACzC,kEAAkE;IAClE,KAAK,CAAC,IAAI,CAAC,EAAE;QAAE,GAAG,CAAC,EAAE,IAAI,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,qBAAqB,CAAC,CAAC;IAC7E,6DAA6D;IAC7D,KAAK,CAAC,IAAI,EAAE,YAAY,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CAC7C"}

package/dist/types.d.ts

@@ -0,0 +1,8 @@
+/**
+ * The frozen contracts: every type the engine, the adapters and the plugins
+ * agree on. Implementations live elsewhere; this entry point is importable
+ * from anywhere, including a Worker that only needs the shapes.
+ */
+export type * from "./types/index";
+export { CmsError, CmsConfigError } from "./errors";
+//# sourceMappingURL=types.d.ts.map

package/dist/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,mBAAmB,eAAe,CAAC;AACnC,OAAO,EAAE,QAAQ,EAAE,cAAc,EAAE,MAAM,UAAU,CAAC"}

package/dist/types.js

@@ -0,0 +1 @@
+import{e,n}from"./index-x72d1hzh.js";export{n as CmsConfigError,e as CmsError};

package/dist/uploads.d.ts

@@ -0,0 +1,22 @@
+/**
+ * `@heyo-sh/heyo-cms/uploads`.
+ *
+ * Storage adapters, the image processor contract, and the two pieces of image
+ * work the engine does without a codec. Separate from the main entry point so
+ * a Worker bundle that never touches a file does not carry any of it.
+ *
+ * The lifecycle itself — reference counting, orphaning, collection — is not
+ * here: it is part of the engine, because it happens inside the transaction
+ * that saves a document (section 6).
+ */
+export { local, memory } from "./storage/local";
+export type { LocalStorageOptions, MemoryStorageOptions } from "./storage/local";
+export { azure, gcs, r2, s3, type AzureStorageOptions, type GcsStorageOptions, type R2Binding, type R2StorageOptions, type S3StorageOptions, } from "./storage/providers";
+export { encodeKey, httpStorage, type FetchLike, type HttpStorageOptions, type SignableRequest, } from "./storage/http";
+export { signAwsV4, signAzure, type AwsCredentials, type AwsSignRequest, type AzureSignRequest, } from "./storage/sign";
+export { sharpImages, type SharpImagesOptions } from "./media/sharp";
+export { cloudflareImages, type CloudflareImageOutput, type CloudflareImagesBinding, type CloudflareImagesSource, type CloudflareImageTransformer, } from "./media/cloudflare";
+export { extensionFor, imageContentType, probeImage, stripImageMetadata, } from "./media/index";
+export type { ObjectMeta, SignedUrlOptions, StorageAdapter, StorageAdapterFactory, StorageConfig, StoredObject, } from "./types/storage";
+export type { CropRect, FocalPoint, ImageFormat, ImageInfo, ImageProcessor, ImageTransform, MediaDocument, MediaStatus, MediaUsage, ProcessedImage, } from "./types/media";
+//# sourceMappingURL=uploads.d.ts.map

package/dist/uploads.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"uploads.d.ts","sourceRoot":"","sources":["../src/uploads.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,iBAAiB,CAAC;AAChD,YAAY,EAAE,mBAAmB,EAAE,oBAAoB,EAAE,MAAM,iBAAiB,CAAC;AACjF,OAAO,EACL,KAAK,EACL,GAAG,EACH,EAAE,EACF,EAAE,EACF,KAAK,mBAAmB,EACxB,KAAK,iBAAiB,EACtB,KAAK,SAAS,EACd,KAAK,gBAAgB,EACrB,KAAK,gBAAgB,GACtB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,SAAS,EACT,WAAW,EACX,KAAK,SAAS,EACd,KAAK,kBAAkB,EACvB,KAAK,eAAe,GACrB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,SAAS,EACT,SAAS,EACT,KAAK,cAAc,EACnB,KAAK,cAAc,EACnB,KAAK,gBAAgB,GACtB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,WAAW,EAAE,KAAK,kBAAkB,EAAE,MAAM,eAAe,CAAC;AACrE,OAAO,EACL,gBAAgB,EAChB,KAAK,qBAAqB,EAC1B,KAAK,uBAAuB,EAC5B,KAAK,sBAAsB,EAC3B,KAAK,0BAA0B,GAChC,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EACL,YAAY,EACZ,gBAAgB,EAChB,UAAU,EACV,kBAAkB,GACnB,MAAM,eAAe,CAAC;AAEvB,YAAY,EACV,UAAU,EACV,gBAAgB,EAChB,cAAc,EACd,qBAAqB,EACrB,aAAa,EACb,YAAY,GACb,MAAM,iBAAiB,CAAC;AACzB,YAAY,EACV,QAAQ,EACR,UAAU,EACV,WAAW,EACX,SAAS,EACT,cAAc,EACd,cAAc,EACd,aAAa,EACb,WAAW,EACX,UAAU,EACV,cAAc,GACf,MAAM,eAAe,CAAC"}

package/dist/uploads.js

@@ -0,0 +1,9 @@
+import"./index-sgdnp83t.js";import"./index-abfzb1ve.js";import"./index-6m1kjq9g.js";import{xo,Ee,Me,xe,wt,Ve,Yn,vt,Ge}from"./index-kc1j3h6z.js";import"./index-g4crf47y.js";import"./index-91fa1gzf.js";import{w}from"./index-rw0hze6x.js";import{x}from"./index-2ddk43me.js";import{e,n}from"./index-x72d1hzh.js";function j(t={}){let r=new Map,i=x(t.baseUrl??"memory://media");return{id:"memory",async put(s,a,o){r.set(s,{body:await xe(a),meta:o,lastModified:new Date})},async get(s){let a=r.get(s);if(!a)return null;return wt(a.body)},async delete(s){for(let a of s)r.delete(a)},url(s){return`${i}/${s}`},async head(s){let a=r.get(s);if(!a)return null;return{key:s,size:a.body.byteLength,contentType:a.meta.contentType,lastModified:a.lastModified}}}}function L(t){let r=x(t.baseUrl??"/media"),i=async(s)=>{let{join:a,normalize:o,resolve:c}=await import("node:path"),g=c(t.directory),d=c(a(g,o(s)));if(d!==g&&!d.startsWith(`${g}/`))throw new e(`Refusing to write outside the storage root: ${s}`,{status:400,code:"invalid_storage_key"});return d};return{id:"local",...t.prefix===void 0?{}:{prefix:t.prefix},async put(s,a){let{mkdir:o,writeFile:c}=await import("node:fs/promises"),{dirname:g}=await import("node:path"),d=await i(s);await o(g(d),{recursive:!0}),await c(d,await xe(a))},async get(s){let{readFile:a}=await import("node:fs/promises");try{let o=await a(await i(s));return wt(new Uint8Array(o))}catch{return null}},async delete(s){let{rm:a}=await import("node:fs/promises");for(let o of s)await a(await i(o),{force:!0})},url(s){return`${r}/${s}`},async head(s){let{stat:a}=await import("node:fs/promises");try{let o=await a(await i(s));return{key:s,size:o.size,contentType:"application/octet-stream",lastModified:o.mtime}}catch{return null}}}}function I(t){let r=t.fetch??((...a)=>fetch(...a)),i=async(a,o,c={})=>{let g=t.endpoint(o),d=c.body,u=await t.sign({method:a,url:g,headers:{...t.defaultHeaders,...c.headers},payload:d??new Uint8Array(0),contentLength:d?.byteLength??0});return r(g,{method:a,headers:u,...d===void 0?{}:{body:d}})},s=async(a,o,c)=>{let g=(await a.text().catch(()=>"")).slice(0,512);throw new e(`${t.id}: could not ${o} "${c}" (${a.status})${g?`: ${g}`:""}`,{status:502,code:"storage_request_failed"})};return{id:t.id,...t.prefix===void 0?{}:{prefix:t.prefix},async put(a,o,c){let g=await xe(o),d=await i("PUT",a,{body:g,headers:{"content-type":c.contentType,"content-length":String(g.byteLength),...c.cacheControl?{"cache-control":c.cacheControl}:{},...c.contentDisposition?{"content-disposition":c.contentDisposition}:{},...E(t.id,c.metadata)}});if(!d.ok)await s(d,"store",a)},async get(a){let o=await i("GET",a);if(o.status===404)return null;if(!o.ok)await s(o,"read",a);return o.body},async delete(a){for(let o of a){let c=await i("DELETE",o);if(!c.ok&&c.status!==404)await s(c,"delete",o)}},url(a){return t.publicUrl(a)},...t.signedUrl===void 0?{}:{signedUrl:t.signedUrl.bind(t)},async head(a){let o=await i("HEAD",a);if(o.status===404)return null;if(!o.ok)await s(o,"stat",a);let c=o.headers.get("last-modified");return{key:a,size:Number(o.headers.get("content-length")??0),contentType:o.headers.get("content-type")??"application/octet-stream",...c?{lastModified:new Date(c)}:{}}}}}function E(t,r){if(!r)return{};let i=t==="azure"?"x-ms-meta-":"x-amz-meta-";return Object.fromEntries(Object.entries(r).map(([s,a])=>[`${i}${s.toLowerCase()}`,a]))}function h(t){return t.split("/").map((r)=>encodeURIComponent(r)).join("/")}var P="UNSIGNED-PAYLOAD";async function A(t){let i=(t.now??new Date).toISOString().replace(/[-:]/g,"").replace(/\.\d{3}/,""),s=i.slice(0,8),a=t.payload===P?P:Ve(await vt(t.payload)),o={...t.headers,host:t.url.host,"x-amz-date":i,"x-amz-content-sha256":a,...t.credentials.sessionToken?{"x-amz-security-token":t.credentials.sessionToken}:{}},c=Object.entries(o).map(([m,y])=>[m.toLowerCase(),y.trim().replace(/\s+/g," ")]).sort((m,y)=>m[0]<y[0]?-1:m[0]>y[0]?1:0),g=c.map(([m])=>m).join(";"),d=[t.method.toUpperCase(),_(t.url.pathname),B(t.url),`${c.map(([m,y])=>`${m}:${y}`).join(`
+`)}
+`,g,a].join(`
+`),u=`${s}/${t.region}/${t.service}/aws4_request`,l=["AWS4-HMAC-SHA256",i,u,Ve(await vt(d))].join(`
+`),p=await z(t.credentials.secretAccessKey,s,t.region,t.service),T=Ve(await S(p,l));return{...o,authorization:`AWS4-HMAC-SHA256 Credential=${t.credentials.accessKeyId}/${u}, SignedHeaders=${g}, Signature=${T}`}}async function O(t){let r=t.now??new Date,i={...t.headers,"x-ms-date":r.toUTCString(),"x-ms-version":"2021-08-06"},s=Object.entries(i).map(([d,u])=>[d.toLowerCase(),u.trim()]).filter(([d])=>d.startsWith("x-ms-")).sort((d,u)=>d[0]<u[0]?-1:1).map(([d,u])=>`${d}:${u}`).join(`
+`),a=[...t.url.searchParams.keys()].map((d)=>d.toLowerCase()).sort().map((d)=>`${d}:${t.url.searchParams.getAll(d).sort().join(",")}`).join(`
+`),o=`/${t.account}${decodeURIComponent(t.url.pathname)}`+(a?`
+${a}`:""),c=[t.method.toUpperCase(),i["content-encoding"]??"",i["content-language"]??"",t.contentLength?String(t.contentLength):"",i["content-md5"]??"",i["content-type"]??"","","","","","","",s,o].join(`
+`),g=Yn(await S(K(t.key),c));return{...i,authorization:`SharedKey ${t.account}:${g}`}}async function z(t,r,i,s){let o=await S(new TextEncoder().encode(`AWS4${t}`),r);return o=await S(o,i),o=await S(o,s),S(o,"aws4_request")}async function S(t,r){let i=await crypto.subtle.importKey("raw",t,{name:"HMAC",hash:"SHA-256"},!1,["sign"]),s=await crypto.subtle.sign("HMAC",i,new TextEncoder().encode(r));return new Uint8Array(s)}function _(t){return t.split("/").map((r)=>R(decodeURIComponent(r))).join("/")}function B(t){return[...t.searchParams.entries()].map(([r,i])=>[R(r),R(i)]).sort((r,i)=>r[0]<i[0]?-1:1).map(([r,i])=>`${r}=${i}`).join("&")}function R(t){return encodeURIComponent(t).replace(/[!'()*]/g,(r)=>`%${r.charCodeAt(0).toString(16).toUpperCase()}`)}function K(t){let r=atob(t);return Uint8Array.from(r,(i)=>i.charCodeAt(0))}var D="1h";function F(t){if(!t.bucket)throw new n("uploads.storage","s3() needs a bucket");if(!t.region&&!t.endpoint)throw new n("uploads.storage","s3() needs a region, or an endpoint for an S3-compatible service");if(t.signedUrls?.expiresIn)w(t.signedUrls.expiresIn,"uploads.storage.signedUrls");return()=>C("s3",t,"s3")}function H(t){if(Y(t))return()=>G(t);let r=t;if(!r.accountId)throw new n("uploads.storage","r2() needs an accountId, or an R2 bucket binding");return()=>C("r2",{...r,region:"auto",endpoint:`https://${r.accountId}.r2.cloudflarestorage.com`,forcePathStyle:!0},"s3")}function v(t){if(!t.bucket)throw new n("uploads.storage","gcs() needs a bucket");return()=>C("gcs",{...t,region:t.region??"auto",endpoint:"https://storage.googleapis.com",forcePathStyle:!0},"s3")}function W(t){if(!t.account||!t.container)throw new n("uploads.storage","azure() needs an account and a container");return()=>{let r=U(t.accountKey??b("AZURE_STORAGE_KEY"),"azure()","an account key","AZURE_STORAGE_KEY"),i=`https://${t.account}.blob.core.windows.net/${t.container}`,s=x(t.publicUrl??i);return I({id:"azure",...t.fetch===void 0?{}:{fetch:t.fetch},...t.prefix===void 0?{}:{prefix:t.prefix},endpoint:(a)=>new URL(`${i}/${h(a)}`),publicUrl:(a)=>`${s}/${h(a)}`,defaultHeaders:{"x-ms-blob-type":"BlockBlob"},sign:(a)=>O({method:a.method,url:a.url,headers:a.headers,account:t.account,key:r,contentLength:a.contentLength})})}}function C(t,r,i){let s={accessKeyId:U(r.accessKeyId??b("AWS_ACCESS_KEY_ID"),`${t}()`,"an access key id","AWS_ACCESS_KEY_ID"),secretAccessKey:U(r.secretAccessKey??b("AWS_SECRET_ACCESS_KEY"),`${t}()`,"a secret access key","AWS_SECRET_ACCESS_KEY"),...r.sessionToken??b("AWS_SESSION_TOKEN")?{sessionToken:r.sessionToken??b("AWS_SESSION_TOKEN")}:{}},a=r.region??"us-east-1",o=r.forcePathStyle===!0||Boolean(r.endpoint),c=r.endpoint?x(r.endpoint):`https://s3.${a}.amazonaws.com`,g=o?`${c}/${r.bucket}`:X(c,r.bucket),d=x(r.publicUrl??g),u=()=>Math.floor(w(r.signedUrls?.expiresIn??D)/1000);return I({id:t,...r.fetch===void 0?{}:{fetch:r.fetch},...r.prefix===void 0?{}:{prefix:r.prefix},endpoint:(l)=>new URL(`${g}/${h(l)}`),publicUrl:(l)=>`${d}/${h(l)}`,...r.acl===void 0?{}:{defaultHeaders:{"x-amz-acl":r.acl}},sign:(l)=>A({method:l.method,url:l.url,headers:l.headers,payload:l.payload,region:a,service:i,credentials:s}),signedUrl:(l,p)=>N({url:new URL(`${g}/${h(l)}`),region:a,service:i,credentials:s,expiresIn:V(p?.expiresIn)??u(),...p?.download===!0?{disposition:`attachment${p.filename?`; filename="${p.filename}"`:""}`}:{}})})}async function N(t){let r=new Date,i=r.toISOString().replace(/[-:]/g,"").replace(/\.\d{3}/,""),s=`${i.slice(0,8)}/${t.region}/${t.service}/aws4_request`,a=new URL(t.url.toString());if(a.searchParams.set("X-Amz-Algorithm","AWS4-HMAC-SHA256"),a.searchParams.set("X-Amz-Credential",`${t.credentials.accessKeyId}/${s}`),a.searchParams.set("X-Amz-Date",i),a.searchParams.set("X-Amz-Expires",String(t.expiresIn)),a.searchParams.set("X-Amz-SignedHeaders","host"),t.credentials.sessionToken)a.searchParams.set("X-Amz-Security-Token",t.credentials.sessionToken);if(t.disposition)a.searchParams.set("response-content-disposition",t.disposition);let o=await A({method:"GET",url:a,headers:{},payload:"UNSIGNED-PAYLOAD",region:t.region,service:t.service,credentials:{...t.credentials,sessionToken:void 0},now:r}),c=/Signature=([a-f0-9]+)/.exec(o.authorization??"")?.[1];return a.searchParams.set("X-Amz-Signature",c??""),a.toString()}function G(t){return{id:"r2",async put(r,i,s){await t.put(r,i,{httpMetadata:{contentType:s.contentType,...s.cacheControl?{cacheControl:s.cacheControl}:{}},...s.metadata?{customMetadata:s.metadata}:{}})},async get(r){let i=await t.get(r);return i?i.body:null},async delete(r){if(r.length>0)await t.delete(r)},url(r){return`/${r}`},async head(r){let i=await t.head(r);if(!i)return null;return{key:r,size:i.size,contentType:i.httpMetadata?.contentType??"application/octet-stream",...i.uploaded?{lastModified:i.uploaded}:{}}}}}function Y(t){return typeof t==="object"&&t!==null&&typeof t.get==="function"&&typeof t.put==="function"&&typeof t.head==="function"}function X(t,r){let i=new URL(t);return i.host=`${r}.${i.host}`,i.toString().replace(/\/+$/,"")}function b(t){return globalThis.process?.env?.[t]}function U(t,r,i,s){if(t)return t;throw new e(`${r} needs ${i}; pass it in the configuration or set ${s}`,{status:500,code:"storage_credentials_missing"})}function V(t){if(t===void 0)return;return typeof t==="number"?t:Math.floor(w(t)/1000)}var Z=new Set(["image/jpeg","image/png","image/webp","image/avif","image/gif","image/tiff"]),k;async function Q(){return k??=(async()=>{try{let r=await import("sharp");return r.default??r}catch{throw new e("sharpImages() needs the optional `sharp` package; install it, or configure uploads.images without transformations.",{status:500,code:"image_processor_missing"})}})(),k}function J(t={}){return{id:"sharp",supports:(r)=>Z.has(r.toLowerCase()),async transform(r,i,s){let o=(await Q())(r,{...t.limitInputPixels===void 0?{}:{limitInputPixels:t.limitInputPixels}});if(t.autoOrient!==!1)o=o.rotate();let{width:c,height:g}=s,d=M(c,g,i);if(d)o=o.extract(d),c=d.width,g=d.height;if(i.width!==void 0||i.height!==void 0)o=o.resize({...i.width===void 0?{}:{width:i.width},...i.height===void 0?{}:{height:i.height},fit:i.fit??"inside",withoutEnlargement:!0});let u=i.format??te(s.contentType);if(o=o.toFormat(u,{...i.quality===void 0?{}:{quality:i.quality}}),i.stripMetadata===!1)o=o.keepMetadata();let l=await o.toBuffer({resolveWithObject:!0});return{data:l.data,contentType:`image/${l.info.format}`,width:l.info.width,height:l.info.height}}}}function M(t,r,i){if(t<=0||r<=0)return null;let s=i.crop&&ee(i.crop,t,r),a=s||{left:0,top:0,width:t,height:r},o=i.fit==="cover"&&i.position&&i.width&&i.height?q(a.width,a.height,i.width/i.height,{x:(i.position.x*t-a.left)/a.width,y:(i.position.y*r-a.top)/a.height}):null;if(!o)return s||null;return{left:a.left+o.left,top:a.top+o.top,width:o.width,height:o.height}}function q(t,r,i,s){if(t<=0||r<=0||!Number.isFinite(i)||i<=0)return null;let a=t/r,o=a>i?f(Math.round(r*i),1,t):t,c=a>i?r:f(Math.round(t/i),1,r);if(o>=t&&c>=r)return null;return{left:f(Math.round(s.x*t-o/2),0,t-o),top:f(Math.round(s.y*r-c/2),0,r-c),width:o,height:c}}function ee(t,r,i){let s=f(Math.round(t.x),0,Math.max(r-1,0)),a=f(Math.round(t.y),0,Math.max(i-1,0)),o=f(Math.round(t.width),1,r-s),c=f(Math.round(t.height),1,i-a);if(o<=0||c<=0)return null;return{left:s,top:a,width:o,height:c}}function f(t,r,i){return Math.min(Math.max(t,r),Math.max(r,i))}function te(t){let r=t.split("/")[1]??"jpeg";return r==="jpg"?"jpeg":r}var ne=new Set(["image/jpeg","image/png","image/gif","image/webp"]);function re(t){return{id:"cloudflare-images",supports:(r)=>ne.has(r.toLowerCase()),async transform(r,i,s){let a=typeof t==="function"?await t():t;if(!a)throw new e('cloudflareImages() has no Images binding: add `"images": { "binding": "IMAGES" }` to wrangler.json and pass the binding (or a function returning it) to cloudflareImages().',{status:500,code:"image_processor_missing"});let o=ie(s,i),c=a.input(oe(r));if(o.options)c=c.transform(o.options);let g=await c.output({format:i.format?`image/${i.format}`:ae(s.contentType),...i.quality===void 0?{}:{quality:i.quality}}),d=new Uint8Array(await new Response(g.image()).arrayBuffer()),u=Ee(d);return{data:d,contentType:g.contentType(),width:u?.width??o.width,height:u?.height??o.height}}}}function ie(t,r){let i={},s=M(t.width,t.height,r),a=s?.width??t.width,o=s?.height??t.height;if(s)i.trim={top:s.top,left:s.left,width:s.width,height:s.height};let c=a,g=o,{width:d,height:u}=r,l=r.fit??"inside";if(d!==void 0||u!==void 0)if(l==="cover"&&d!==void 0&&u!==void 0){let p=Math.max(d/a,u/o);c=p>1?Math.max(1,Math.round(d/p)):d,g=p>1?Math.max(1,Math.round(u/p)):u,Object.assign(i,{width:c,height:g,fit:"cover"})}else if(l==="contain"&&d!==void 0&&u!==void 0)c=d,g=u,Object.assign(i,{width:c,height:g,fit:"pad"});else if(l==="outside"){let p=Math.min(1,Math.max(d===void 0?0:d/a,u===void 0?0:u/o));c=Math.max(1,Math.round(a*p)),g=Math.max(1,Math.round(o*p)),Object.assign(i,{width:c,height:g,fit:"scale-down"})}else{let p=Math.min(d===void 0?1/0:d/a,u===void 0?1/0:u/o,1);c=Math.max(1,Math.round(a*p)),g=Math.max(1,Math.round(o*p)),Object.assign(i,{...d===void 0?{}:{width:d},...u===void 0?{}:{height:u},fit:"scale-down"})}return{options:Object.keys(i).length>0?i:null,width:c,height:g}}function ae(t){let r=t.toLowerCase().split(";")[0]?.trim()??"";return r==="image/jpg"?"image/jpeg":r}function oe(t){return new ReadableStream({start(r){r.enqueue(t),r.close()}})}export{W as azure,re as cloudflareImages,h as encodeKey,Me as extensionFor,v as gcs,I as httpStorage,xo as imageContentType,L as local,j as memory,Ee as probeImage,H as r2,F as s3,J as sharpImages,A as signAwsV4,O as signAzure,Ge as stripImageMetadata};

package/dist/webhooks/index.d.ts

@@ -0,0 +1,10 @@
+/**
+ * Webhook delivery (section 7).
+ *
+ * The outbox decides *that* an event happened; this directory decides who
+ * hears about it and keeps trying until they do.
+ */
+export { createWebhooks, type WebhookRuntime } from "./service";
+export { webhookRetryJob } from "./job";
+export { signatureHeader, signPayload, verifySignature } from "./sign";
+//# sourceMappingURL=index.d.ts.map

package/dist/webhooks/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/webhooks/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,OAAO,EAAE,cAAc,EAAE,KAAK,cAAc,EAAE,MAAM,WAAW,CAAC;AAChE,OAAO,EAAE,eAAe,EAAE,MAAM,OAAO,CAAC;AACxC,OAAO,EAAE,eAAe,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,QAAQ,CAAC"}

package/dist/webhooks/job.d.ts

@@ -0,0 +1,17 @@
+import type { JobDefinition } from "../engine/jobs";
+import type { WebhookRuntime } from "./service";
+/**
+ * The retry sweep.
+ *
+ * Registered in `cms.jobs` only when webhooks are enabled, so
+ * `cms.inspect().jobs` lists what will actually run. The first attempt
+ * happens inline, right after the commit: this is for the ones that did not
+ * land, and it is the reason an outage at a subscriber costs them a delay
+ * rather than the event.
+ *
+ * `exists` next to `lte` for the same reason the scheduled-change sweep needs
+ * it: on MongoDB a missing `next_attempt_at` compares below a date, so a
+ * delivery that has never been attempted would look due on every pass.
+ */
+export declare function webhookRetryJob(webhooks: WebhookRuntime): JobDefinition;
+//# sourceMappingURL=job.d.ts.map

package/dist/webhooks/job.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"job.d.ts","sourceRoot":"","sources":["../../src/webhooks/job.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,aAAa,EAAW,MAAM,gBAAgB,CAAC;AAE7D,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AAIhD;;;;;;;;;;;;GAYG;AACH,wBAAgB,eAAe,CAAC,QAAQ,EAAE,cAAc,GAAG,aAAa,CAgCvE"}

package/dist/webhooks/service.d.ts

@@ -0,0 +1,53 @@
+import type { ResolvedCmsConfig } from "../types/config";
+import type { DatabaseAdapter } from "../types/database";
+import type { Tx } from "../types/query";
+import type { CmsWebhooks, WebhookDelivery } from "../types/webhooks";
+import type { BufferedEvent, OutboxEntryMeta } from "../engine/outbox";
+/**
+ * The service, plus the one operation only a sweep needs.
+ *
+ * `cms.webhooks` is the public `CmsWebhooks`; the runner holds this. Keeping
+ * "re-attempt this exact row" off the public type is deliberate: a caller
+ * that wants to re-send something wants `retry()`, which records a new
+ * attempt instead of quietly rewriting the history of an old one.
+ */
+export interface WebhookRuntime extends CmsWebhooks {
+    attemptDelivery(id: string, at?: Date): Promise<WebhookDelivery | null>;
+}
+/**
+ * What the service needs from `fetch`, and no more.
+ *
+ * Narrower than `typeof fetch` on purpose: that type carries whatever the
+ * host runtime bolted on — Bun adds `preconnect` — and a package that has to
+ * build the same way on Node, Bun and Workers cannot depend on which one is
+ * compiling it.
+ */
+export type WebhookFetch = (url: string, init: RequestInit) => Promise<Response>;
+export interface WebhookServiceOptions {
+    config: ResolvedCmsConfig;
+    database(): Promise<DatabaseAdapter>;
+    emit(tx: Tx, events: BufferedEvent[], meta: OutboxEntryMeta): Promise<void>;
+    deliver(): void;
+    /** Injectable so a test does not need a socket. Defaults to `fetch`. */
+    fetch?: WebhookFetch;
+    now?: () => Date;
+}
+/**
+ * `cms.webhooks`.
+ *
+ * The contract, in one place, is section 7:
+ *
+ * - **Signed.** Every request carries an HMAC over `timestamp.body`, so a
+ *   receiver can tell a delivery from a stranger with a URL.
+ * - **Identified.** `x-heyo-event-id` and `x-heyo-delivery-id` let a consumer
+ *   be idempotent, which matters because retries are a promise rather than an
+ *   accident.
+ * - **Retried, then parked.** Five attempts with exponential backoff, then
+ *   the delivery is `failed` and stays in the table for replay. A dead letter
+ *   that disappears is a dead letter nobody can act on.
+ * - **Ordered per document, not globally.** The outbox is drained in
+ *   insertion order and a document's events are inserted in the order they
+ *   happened; across documents, parallel delivery is the point.
+ */
+export declare function createWebhooks(options: WebhookServiceOptions): WebhookRuntime;
+//# sourceMappingURL=service.d.ts.map

package/dist/webhooks/service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"service.d.ts","sourceRoot":"","sources":["../../src/webhooks/service.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AACzD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AAGzD,OAAO,KAAK,EAAgB,EAAE,EAAS,MAAM,gBAAgB,CAAC;AAC9D,OAAO,KAAK,EACV,WAAW,EAEX,eAAe,EAUhB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,KAAK,EAAE,aAAa,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AAUvE;;;;;;;GAOG;AACH,MAAM,WAAW,cAAe,SAAQ,WAAW;IACjD,eAAe,CAAC,EAAE,EAAE,MAAM,EAAE,EAAE,CAAC,EAAE,IAAI,GAAG,OAAO,CAAC,eAAe,GAAG,IAAI,CAAC,CAAC;CACzE;AAED;;;;;;;GAOG;AACH,MAAM,MAAM,YAAY,GAAG,CACzB,GAAG,EAAE,MAAM,EACX,IAAI,EAAE,WAAW,KACd,OAAO,CAAC,QAAQ,CAAC,CAAC;AAEvB,MAAM,WAAW,qBAAqB;IACpC,MAAM,EAAE,iBAAiB,CAAC;IAC1B,QAAQ,IAAI,OAAO,CAAC,eAAe,CAAC,CAAC;IACrC,IAAI,CAAC,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,aAAa,EAAE,EAAE,IAAI,EAAE,eAAe,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC5E,OAAO,IAAI,IAAI,CAAC;IAChB,wEAAwE;IACxE,KAAK,CAAC,EAAE,YAAY,CAAC;IACrB,GAAG,CAAC,EAAE,MAAM,IAAI,CAAC;CAClB;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,cAAc,CAAC,OAAO,EAAE,qBAAqB,GAAG,cAAc,CA4gB7E"}

package/dist/webhooks/sign.d.ts

@@ -0,0 +1,26 @@
+/**
+ * The signature a consumer verifies.
+ *
+ * `t=<unix seconds>,v1=<hex hmac>` over `${t}.${body}`, which is the shape
+ * Stripe popularised and most receivers already have code for. The timestamp
+ * is inside the signed string on purpose: without it a captured delivery can
+ * be replayed forever, and the consumer has no way to notice.
+ */
+export declare const signatureHeader = "x-heyo-signature";
+export declare function signPayload(body: string, secret: string, timestamp?: number): Promise<string>;
+/**
+ * Verifies a signature the way a consumer should.
+ *
+ * Exported because the first thing anybody writes after subscribing is this
+ * function, and the second thing they do is get it subtly wrong — comparing
+ * with `===`, or forgetting that the timestamp is part of the signed string.
+ */
+export declare function verifySignature(options: {
+    body: string;
+    header: string;
+    secret: string;
+    /** Rejects a delivery older than this. Defaults to five minutes. */
+    toleranceSeconds?: number;
+    now?: number;
+}): Promise<boolean>;
+//# sourceMappingURL=sign.d.ts.map

package/dist/webhooks/sign.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sign.d.ts","sourceRoot":"","sources":["../../src/webhooks/sign.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,eAAO,MAAM,eAAe,qBAAqB,CAAC;AAElD,wBAAsB,WAAW,CAC/B,IAAI,EAAE,MAAM,EACZ,MAAM,EAAE,MAAM,EACd,SAAS,SAAgC,GACxC,OAAO,CAAC,MAAM,CAAC,CAcjB;AAED;;;;;;GAMG;AACH,wBAAsB,eAAe,CAAC,OAAO,EAAE;IAC7C,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,oEAAoE;IACpE,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,GAAG,CAAC,EAAE,MAAM,CAAC;CACd,GAAG,OAAO,CAAC,OAAO,CAAC,CAuBnB"}

package/dist/webhooks.d.ts

@@ -0,0 +1,10 @@
+/**
+ * `@heyo-sh/heyo-cms/webhooks`.
+ *
+ * Subscriptions are managed through `cms.webhooks` and the routes under
+ * `/webhooks`. What is here is the part a *consumer* needs: the signature
+ * scheme, and a verifier so nobody has to write the HMAC comparison again.
+ */
+export { signatureHeader, signPayload, verifySignature } from "./webhooks/sign";
+export type { CmsWebhooks, WebhookCreateArgs, WebhookDelivery, WebhookDeliveryListArgs, WebhookDeliveryPage, WebhookDeliveryStatus, WebhookDispatchReport, WebhookFilters, WebhookListArgs, WebhookRetryArgs, WebhookSubscription, WebhookTestArgs, WebhookUpdateArgs, } from "./types/webhooks";
+//# sourceMappingURL=webhooks.d.ts.map

package/dist/webhooks.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"webhooks.d.ts","sourceRoot":"","sources":["../src/webhooks.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,EAAE,eAAe,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAChF,YAAY,EACV,WAAW,EACX,iBAAiB,EACjB,eAAe,EACf,uBAAuB,EACvB,mBAAmB,EACnB,qBAAqB,EACrB,qBAAqB,EACrB,cAAc,EACd,eAAe,EACf,gBAAgB,EAChB,mBAAmB,EACnB,eAAe,EACf,iBAAiB,GAClB,MAAM,kBAAkB,CAAC"}

package/dist/webhooks.js

@@ -0,0 +1 @@
+import{Ae,ke,Cn}from"./index-466cwb0b.js";export{ke as signPayload,Ae as signatureHeader,Cn as verifySignature};

package/package.json

@@ -1,6 +1,189 @@
 {
   "name": "@heyo-sh/heyo-cms",
-  "version": "0.0.0-stage",
-  "stub": true,
-  "description": "Temporary package placeholder for staged publishing"
-}
+  "version": "0.2.0",
+  "description": "Framework-agnostic, TypeScript-first headless CMS with its own panel, RBAC, i18n, native AI and first-class media.",
+  "keywords": [
+    "cms",
+    "headless-cms",
+    "typescript",
+    "postgres",
+    "mongodb",
+    "sqlite",
+    "cloudflare-workers",
+    "vercel"
+  ],
+  "homepage": "https://heyo.sh",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/heyo-sh/heyo-cms.git",
+    "directory": "packages/heyo-cms"
+  },
+  "bugs": {
+    "url": "https://github.com/heyo-sh/heyo-cms/issues"
+  },
+  "license": "MIT",
+  "type": "module",
+  "files": [
+    "dist",
+    "LICENSE",
+    "README.md"
+  ],
+  "bin": {
+    "heyo-cms": "./dist/cli.js"
+  },
+  "publishConfig": {
+    "access": "public"
+  },
+  "dependencies": {
+    "typebox": "1.4.2",
+    "zod": "4.6.7"
+  },
+  "peerDependencies": {
+    "@mariozechner/pi-agent-core": "^0.73.0",
+    "@mariozechner/pi-ai": "^0.73.0",
+    "mongodb": "^6.0.0 || ^7.0.0",
+    "pg": "^8.0.0",
+    "sharp": "^0.33.0 || ^0.34.0 || ^0.35.0"
+  },
+  "peerDependenciesMeta": {
+    "@mariozechner/pi-agent-core": {
+      "optional": true
+    },
+    "@mariozechner/pi-ai": {
+      "optional": true
+    },
+    "mongodb": {
+      "optional": true
+    },
+    "pg": {
+      "optional": true
+    },
+    "sharp": {
+      "optional": true
+    }
+  },
+  "devDependencies": {
+    "@electric-sql/pglite": "0.5.10",
+    "@mariozechner/pi-agent-core": "0.73.1",
+    "@mariozechner/pi-ai": "0.73.1",
+    "pg": "8.16.3"
+  },
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "default": "./dist/index.js"
+    },
+    "./types": {
+      "types": "./dist/types.d.ts",
+      "default": "./dist/types.js"
+    },
+    "./config": {
+      "types": "./dist/config.d.ts",
+      "default": "./dist/config.js"
+    },
+    "./fields": {
+      "types": "./dist/fields.d.ts",
+      "default": "./dist/fields.js"
+    },
+    "./http": {
+      "types": "./dist/http.d.ts",
+      "default": "./dist/http.js"
+    },
+    "./client": {
+      "types": "./dist/client.d.ts",
+      "default": "./dist/client.js"
+    },
+    "./content": {
+      "types": "./dist/content.d.ts",
+      "default": "./dist/content.js"
+    },
+    "./telemetry": {
+      "types": "./dist/telemetry.d.ts",
+      "default": "./dist/telemetry.js"
+    },
+    "./next": {
+      "types": "./dist/adapters/next.d.ts",
+      "default": "./dist/adapters/next.js"
+    },
+    "./astro": {
+      "types": "./dist/adapters/astro.d.ts",
+      "default": "./dist/adapters/astro.js"
+    },
+    "./react-router": {
+      "types": "./dist/adapters/react-router.d.ts",
+      "default": "./dist/adapters/react-router.js"
+    },
+    "./sveltekit": {
+      "types": "./dist/adapters/sveltekit.d.ts",
+      "default": "./dist/adapters/sveltekit.js"
+    },
+    "./nuxt": {
+      "types": "./dist/adapters/nuxt.d.ts",
+      "default": "./dist/adapters/nuxt.js"
+    },
+    "./schema": {
+      "types": "./dist/schema.d.ts",
+      "default": "./dist/schema.js"
+    },
+    "./query": {
+      "types": "./dist/query.d.ts",
+      "default": "./dist/query.js"
+    },
+    "./migrations": {
+      "types": "./dist/migrations.d.ts",
+      "default": "./dist/migrations.js"
+    },
+    "./auth": {
+      "types": "./dist/auth.d.ts",
+      "default": "./dist/auth.js"
+    },
+    "./uploads": {
+      "types": "./dist/uploads.d.ts",
+      "default": "./dist/uploads.js"
+    },
+    "./editor": {
+      "types": "./dist/editor.d.ts",
+      "default": "./dist/editor.js"
+    },
+    "./ai": {
+      "types": "./dist/ai.d.ts",
+      "default": "./dist/ai.js"
+    },
+    "./webhooks": {
+      "types": "./dist/webhooks.d.ts",
+      "default": "./dist/webhooks.js"
+    },
+    "./plugins": {
+      "types": "./dist/plugins.d.ts",
+      "default": "./dist/plugins.js"
+    },
+    "./jobs": {
+      "types": "./dist/jobs.d.ts",
+      "default": "./dist/jobs.js"
+    },
+    "./postgres": {
+      "types": "./dist/db/postgres.d.ts",
+      "default": "./dist/db/postgres.js"
+    },
+    "./sqlite": {
+      "types": "./dist/db/sqlite.d.ts",
+      "default": "./dist/db/sqlite.js"
+    },
+    "./d1": {
+      "types": "./dist/db/d1.d.ts",
+      "default": "./dist/db/d1.js"
+    },
+    "./mongodb": {
+      "types": "./dist/db/mongodb.d.ts",
+      "default": "./dist/db/mongodb.js"
+    }
+  },
+  "scripts": {
+    "dev": "bun run build --watch",
+    "build": "rm -rf dist && bun run build:core && bun run build:types",
+    "build:core": "bun build src/index.ts src/types.ts src/config.ts src/fields.ts src/schema.ts src/query.ts src/migrations.ts src/auth.ts src/uploads.ts src/editor.ts src/ai.ts src/webhooks.ts src/plugins.ts src/jobs.ts src/http.ts src/client.ts src/content.ts src/telemetry.ts src/cli.ts src/adapters/next.ts src/adapters/astro.ts src/adapters/react-router.ts src/adapters/sveltekit.ts src/adapters/nuxt.ts src/db/postgres.ts src/db/sqlite.ts src/db/d1.ts src/db/mongodb.ts --outdir dist --root src --target node --production --splitting --external zod --external pg --external mongodb --external sharp --external @mariozechner/pi-ai --external @mariozechner/pi-agent-core --external typebox",
+    "build:types": "tsc -p tsconfig.build.json",
+    "typecheck": "tsc -p tsconfig.json",
+    "test": "bun test"
+  }
+}