@hollware/core 0.1.0 → 0.3.0

package/dist/index.d.mts

@@ -288,6 +288,21 @@ interface SiteDefinition {
   readonly collections: Readonly<Record<string, CollectionDefinition>>;
   /** Guidance for whoever writes anywhere in the site, in Markdown. */
   readonly styleGuide?: string;
+  /** The public origin of the site, such as `https://example.com`: entries' URLs start with it. */
+  readonly url?: string;
+  /** Who hears about publications (ADR-025). */
+  readonly events?: {
+    /** Each gets every event, signed with HMAC-SHA256 by the Worker secret named in `secret`. */
+    readonly webhooks?: readonly {
+      readonly name: string;
+      readonly url: string;
+      readonly secret: string;
+    }[];
+    /** Tells IndexNow the URLs that changed; `key` names the Worker secret with the key. */
+    readonly indexNow?: {
+      readonly key: string;
+    };
+  };
 }
 /** What `hollware.config.ts` exports. */
 interface HollwareConfig {
@@ -296,6 +311,17 @@ interface HollwareConfig {
    * content exists. v0.1 serves exactly one site per deployment.
    */
   readonly sites: Readonly<Record<string, SiteDefinition>>;
+  /** How MCP clients and the admin get tokens (ADR-026). */
+  readonly auth?: AuthDefinition;
+}
+/** The OAuth server of a deployment. */
+interface AuthDefinition {
+  /**
+   * Whether a client may register itself (RFC 7591), for MCP clients that cannot present a
+   * Client ID Metadata Document. Off by default: a registration is a write to KV that anyone can
+   * make, and MCP 2026-07-28 prefers metadata documents.
+   */
+  readonly dynamicClientRegistration?: boolean;
 }
 /** A collection once the config is resolved: checked, with every default filled in. */
 interface ResolvedCollection {
@@ -318,10 +344,31 @@ interface ResolvedSite {
   readonly defaultLocale: string;
   readonly styleGuide: string | null;
   readonly collections: ReadonlyMap<string, ResolvedCollection>;
+  /** The public origin of the site, or `null`. */
+  readonly url: string | null;
+  readonly events: ResolvedEvents;
+}
+/** A webhook of a site; `secret` names the Worker secret that signs its deliveries. */
+interface ResolvedWebhook {
+  readonly name: string;
+  readonly url: string;
+  readonly secret: string;
+}
+/** Who hears about the publications of a site. */
+interface ResolvedEvents {
+  readonly webhooks: readonly ResolvedWebhook[];
+  readonly indexNow: {
+    readonly key: string;
+  } | null;
 }
 /** The config once resolved, at the start of the Worker. v0.1 holds exactly one site. */
 interface ResolvedConfig {
   readonly sites: ReadonlyMap<string, ResolvedSite>;
+  readonly auth: ResolvedAuth;
+}
+/** The OAuth server once the config is resolved. */
+interface ResolvedAuth {
+  readonly dynamicClientRegistration: boolean;
 }
 /**
  * Checks a config and fills in its defaults. It throws one error that lists every problem, each
@@ -381,7 +428,7 @@ export declare const DEFAULT_MAX_MARKDOWN_BYTES = 524288;
  */
 export declare const MAX_MARKDOWN_BYTES_CEILING = 786432;
 declare namespace schemas_d_exports {
-  export { acknowledgedWarning, collectionDescription, collectionName, componentDescription, conflict, contractDescription, document, entry, entryId, entryStatus, entrySummary, format, locale, markdown, phase, publication, revisionId, severity, siteDescription, slug, verdict, version, violation };
+  export { acknowledgedWarning, collectionDescription, collectionName, componentDescription, conflict, contractDescription, document, entry, entryId, entryStatus, entrySummary, format, locale, markdown, phase, publication, review, reviewId, reviewStatus, revisionId, severity, siteDescription, slug, verdict, version, violation };
 }
 /**
  * The pieces the operation schemas share. Their descriptions become the JSON Schema that agents
@@ -608,6 +655,34 @@ declare const entry: z.ZodObject<{
   }, z.core.$strip>>;
   html: z.ZodOptional<z.ZodString>;
 }, z.core.$strip>;
+declare const reviewId: z.ZodString;
+declare const reviewStatus: z.ZodEnum<{
+  approved: "approved";
+  cancelled: "cancelled";
+  changes_requested: "changes_requested";
+  pending: "pending";
+}>;
+/**
+ * A request to publish a revision, made by someone who may write but not publish, and what a
+ * person who may publish decided about it.
+ */
+declare const review: z.ZodObject<{
+  id: z.ZodString;
+  entryId: z.ZodString;
+  revision: z.ZodString;
+  status: z.ZodEnum<{
+    approved: "approved";
+    cancelled: "cancelled";
+    changes_requested: "changes_requested";
+    pending: "pending";
+  }>;
+  requestedBy: z.ZodString;
+  requestedByName: z.ZodNullable<z.ZodString>;
+  requestedAt: z.ZodString;
+  decidedBy: z.ZodNullable<z.ZodString>;
+  decidedAt: z.ZodNullable<z.ZodString>;
+  note: z.ZodNullable<z.ZodString>;
+}, z.core.$strip>;
 declare const conflict: z.ZodObject<{
   currentVersion: z.ZodNumber;
   headRevision: z.ZodString;
@@ -960,10 +1035,19 @@ export declare class HollwareError extends Error {
  */
 /** The kinds of ids and their prefixes. A new kind adds its prefix here. */
 export declare const ID_PREFIXES: {
+  readonly challenge: 'chl';
+  readonly delivery: 'dlv';
   readonly entry: 'ent';
+  readonly event: 'evt';
+  readonly invitation: 'inv';
+  readonly member: 'mbr';
+  readonly passkey: 'pky';
   readonly publication: 'pub';
   readonly revision: 'rev';
   readonly revisionTag: 'tag';
+  readonly review: 'rvw';
+  readonly schedule: 'sch';
+  readonly session: 'ses';
   readonly token: 'tok';
   readonly user: 'usr';
 };
@@ -1152,6 +1236,7 @@ export declare const getEntry: OperationSpec<"get_entry", z.ZodObject<{
     html: "html";
     markdown: "markdown";
   }>>>;
+  published: z.ZodDefault<z.ZodBoolean>;
 }, z.core.$strict>, z.ZodObject<{
   outcome: z.ZodEnum<{
     not_found: "not_found";
@@ -1450,13 +1535,20 @@ export declare const publish: OperationSpec<"publish", z.ZodObject<{
     contract: z.ZodString;
     path: z.ZodString;
   }, z.core.$strip>>>;
+  group: z.ZodDefault<z.ZodArray<z.ZodObject<{
+    id: z.ZodString;
+    version: z.ZodNumber;
+  }, z.core.$strict>>>;
+  publishAt: z.ZodOptional<z.ZodISODateTime>;
 }, z.core.$strict>, z.ZodObject<{
   outcome: z.ZodEnum<{
     blocked: "blocked";
     conflict: "conflict";
     needs_acknowledgement: "needs_acknowledgement";
     not_found: "not_found";
+    pending_review: "pending_review";
     published: "published";
+    scheduled: "scheduled";
   }>;
   entry: z.ZodOptional<z.ZodObject<{
     id: z.ZodString;
@@ -1510,6 +1602,24 @@ export declare const publish: OperationSpec<"publish", z.ZodObject<{
     currentVersion: z.ZodNumber;
     headRevision: z.ZodString;
   }, z.core.$strip>>;
+  review: z.ZodOptional<z.ZodObject<{
+    id: z.ZodString;
+    entryId: z.ZodString;
+    revision: z.ZodString;
+    status: z.ZodEnum<{
+      approved: "approved";
+      cancelled: "cancelled";
+      changes_requested: "changes_requested";
+      pending: "pending";
+    }>;
+    requestedBy: z.ZodString;
+    requestedByName: z.ZodNullable<z.ZodString>;
+    requestedAt: z.ZodString;
+    decidedBy: z.ZodNullable<z.ZodString>;
+    decidedAt: z.ZodNullable<z.ZodString>;
+    note: z.ZodNullable<z.ZodString>;
+  }, z.core.$strip>>;
+  failedEntry: z.ZodOptional<z.ZodString>;
 }, z.core.$strip>>;
 export declare const unpublish: OperationSpec<"unpublish", z.ZodObject<{
   id: z.ZodString;
@@ -1537,8 +1647,242 @@ export declare const unpublish: OperationSpec<"unpublish", z.ZodObject<{
     updatedAt: z.ZodString;
   }, z.core.$strip>>;
 }, z.core.$strip>>;
-/** Every operation of v0.1, sorted by name: the order of `tools/list`. */
-export declare const OPERATIONS: readonly [OperationSpec<"create_draft", z.ZodObject<{
+export declare const listReviews: OperationSpec<"list_reviews", z.ZodObject<{
+  status: z.ZodDefault<z.ZodEnum<{
+    approved: "approved";
+    cancelled: "cancelled";
+    changes_requested: "changes_requested";
+    pending: "pending";
+  }>>;
+  limit: z.ZodDefault<z.ZodNumber>;
+}, z.core.$strict>, z.ZodObject<{
+  outcome: z.ZodEnum<{
+    ok: "ok";
+  }>;
+  reviews: z.ZodArray<z.ZodObject<{
+    id: z.ZodString;
+    entryId: z.ZodString;
+    revision: z.ZodString;
+    status: z.ZodEnum<{
+      approved: "approved";
+      cancelled: "cancelled";
+      changes_requested: "changes_requested";
+      pending: "pending";
+    }>;
+    requestedBy: z.ZodString;
+    requestedByName: z.ZodNullable<z.ZodString>;
+    requestedAt: z.ZodString;
+    decidedBy: z.ZodNullable<z.ZodString>;
+    decidedAt: z.ZodNullable<z.ZodString>;
+    note: z.ZodNullable<z.ZodString>;
+    entry: z.ZodObject<{
+      id: z.ZodString;
+      collection: z.ZodString;
+      locale: z.ZodString;
+      slug: z.ZodString;
+      translationGroup: z.ZodNullable<z.ZodString>;
+      status: z.ZodEnum<{
+        draft: "draft";
+        published: "published";
+        scheduled: "scheduled";
+      }>;
+      version: z.ZodNumber;
+      frontmatter: z.ZodRecord<z.ZodString, z.ZodUnknown>;
+      tags: z.ZodArray<z.ZodString>;
+      hasUnpublishedChanges: z.ZodBoolean;
+      publishedAt: z.ZodNullable<z.ZodString>;
+      updatedAt: z.ZodString;
+    }, z.core.$strip>;
+  }, z.core.$strip>>;
+}, z.core.$strip>>;
+export declare const approveReview: OperationSpec<"approve_review", z.ZodObject<{
+  id: z.ZodString;
+  acknowledgeWarnings: z.ZodDefault<z.ZodArray<z.ZodObject<{
+    contract: z.ZodString;
+    path: z.ZodString;
+  }, z.core.$strip>>>;
+}, z.core.$strict>, z.ZodObject<{
+  outcome: z.ZodEnum<{
+    blocked: "blocked";
+    needs_acknowledgement: "needs_acknowledgement";
+    not_found: "not_found";
+    not_pending: "not_pending";
+    published: "published";
+  }>;
+  review: z.ZodOptional<z.ZodObject<{
+    id: z.ZodString;
+    entryId: z.ZodString;
+    revision: z.ZodString;
+    status: z.ZodEnum<{
+      approved: "approved";
+      cancelled: "cancelled";
+      changes_requested: "changes_requested";
+      pending: "pending";
+    }>;
+    requestedBy: z.ZodString;
+    requestedByName: z.ZodNullable<z.ZodString>;
+    requestedAt: z.ZodString;
+    decidedBy: z.ZodNullable<z.ZodString>;
+    decidedAt: z.ZodNullable<z.ZodString>;
+    note: z.ZodNullable<z.ZodString>;
+  }, z.core.$strip>>;
+  entry: z.ZodOptional<z.ZodObject<{
+    id: z.ZodString;
+    collection: z.ZodString;
+    locale: z.ZodString;
+    slug: z.ZodString;
+    translationGroup: z.ZodNullable<z.ZodString>;
+    status: z.ZodEnum<{
+      draft: "draft";
+      published: "published";
+      scheduled: "scheduled";
+    }>;
+    version: z.ZodNumber;
+    frontmatter: z.ZodRecord<z.ZodString, z.ZodUnknown>;
+    tags: z.ZodArray<z.ZodString>;
+    hasUnpublishedChanges: z.ZodBoolean;
+    publishedAt: z.ZodNullable<z.ZodString>;
+    updatedAt: z.ZodString;
+  }, z.core.$strip>>;
+  verdict: z.ZodOptional<z.ZodObject<{
+    ok: z.ZodBoolean;
+    phase: z.ZodEnum<{
+      publish: "publish";
+      write: "write";
+    }>;
+    errors: z.ZodArray<z.ZodObject<{
+      contract: z.ZodString;
+      severity: z.ZodEnum<{
+        error: "error";
+        warning: "warning";
+      }>;
+      path: z.ZodString;
+      message: z.ZodString;
+      fix: z.ZodString;
+      line: z.ZodOptional<z.ZodNumber>;
+    }, z.core.$strip>>;
+    warnings: z.ZodArray<z.ZodObject<{
+      contract: z.ZodString;
+      severity: z.ZodEnum<{
+        error: "error";
+        warning: "warning";
+      }>;
+      path: z.ZodString;
+      message: z.ZodString;
+      fix: z.ZodString;
+      line: z.ZodOptional<z.ZodNumber>;
+    }, z.core.$strip>>;
+    contractsHash: z.ZodString;
+  }, z.core.$strip>>;
+}, z.core.$strip>>;
+export declare const requestChanges: OperationSpec<"request_changes", z.ZodObject<{
+  id: z.ZodString;
+  note: z.ZodString;
+}, z.core.$strict>, z.ZodObject<{
+  outcome: z.ZodEnum<{
+    changes_requested: "changes_requested";
+    not_found: "not_found";
+    not_pending: "not_pending";
+  }>;
+  review: z.ZodOptional<z.ZodObject<{
+    id: z.ZodString;
+    entryId: z.ZodString;
+    revision: z.ZodString;
+    status: z.ZodEnum<{
+      approved: "approved";
+      cancelled: "cancelled";
+      changes_requested: "changes_requested";
+      pending: "pending";
+    }>;
+    requestedBy: z.ZodString;
+    requestedByName: z.ZodNullable<z.ZodString>;
+    requestedAt: z.ZodString;
+    decidedBy: z.ZodNullable<z.ZodString>;
+    decidedAt: z.ZodNullable<z.ZodString>;
+    note: z.ZodNullable<z.ZodString>;
+  }, z.core.$strip>>;
+}, z.core.$strip>>;
+/** Every operation, sorted by name: the order of `tools/list`. */
+export declare const OPERATIONS: readonly [OperationSpec<"approve_review", z.ZodObject<{
+  id: z.ZodString;
+  acknowledgeWarnings: z.ZodDefault<z.ZodArray<z.ZodObject<{
+    contract: z.ZodString;
+    path: z.ZodString;
+  }, z.core.$strip>>>;
+}, z.core.$strict>, z.ZodObject<{
+  outcome: z.ZodEnum<{
+    blocked: "blocked";
+    needs_acknowledgement: "needs_acknowledgement";
+    not_found: "not_found";
+    not_pending: "not_pending";
+    published: "published";
+  }>;
+  review: z.ZodOptional<z.ZodObject<{
+    id: z.ZodString;
+    entryId: z.ZodString;
+    revision: z.ZodString;
+    status: z.ZodEnum<{
+      approved: "approved";
+      cancelled: "cancelled";
+      changes_requested: "changes_requested";
+      pending: "pending";
+    }>;
+    requestedBy: z.ZodString;
+    requestedByName: z.ZodNullable<z.ZodString>;
+    requestedAt: z.ZodString;
+    decidedBy: z.ZodNullable<z.ZodString>;
+    decidedAt: z.ZodNullable<z.ZodString>;
+    note: z.ZodNullable<z.ZodString>;
+  }, z.core.$strip>>;
+  entry: z.ZodOptional<z.ZodObject<{
+    id: z.ZodString;
+    collection: z.ZodString;
+    locale: z.ZodString;
+    slug: z.ZodString;
+    translationGroup: z.ZodNullable<z.ZodString>;
+    status: z.ZodEnum<{
+      draft: "draft";
+      published: "published";
+      scheduled: "scheduled";
+    }>;
+    version: z.ZodNumber;
+    frontmatter: z.ZodRecord<z.ZodString, z.ZodUnknown>;
+    tags: z.ZodArray<z.ZodString>;
+    hasUnpublishedChanges: z.ZodBoolean;
+    publishedAt: z.ZodNullable<z.ZodString>;
+    updatedAt: z.ZodString;
+  }, z.core.$strip>>;
+  verdict: z.ZodOptional<z.ZodObject<{
+    ok: z.ZodBoolean;
+    phase: z.ZodEnum<{
+      publish: "publish";
+      write: "write";
+    }>;
+    errors: z.ZodArray<z.ZodObject<{
+      contract: z.ZodString;
+      severity: z.ZodEnum<{
+        error: "error";
+        warning: "warning";
+      }>;
+      path: z.ZodString;
+      message: z.ZodString;
+      fix: z.ZodString;
+      line: z.ZodOptional<z.ZodNumber>;
+    }, z.core.$strip>>;
+    warnings: z.ZodArray<z.ZodObject<{
+      contract: z.ZodString;
+      severity: z.ZodEnum<{
+        error: "error";
+        warning: "warning";
+      }>;
+      path: z.ZodString;
+      message: z.ZodString;
+      fix: z.ZodString;
+      line: z.ZodOptional<z.ZodNumber>;
+    }, z.core.$strip>>;
+    contractsHash: z.ZodString;
+  }, z.core.$strip>>;
+}, z.core.$strip>>, OperationSpec<"create_draft", z.ZodObject<{
   collection: z.ZodString;
   locale: z.ZodString;
   slug: z.ZodString;
@@ -1643,6 +1987,7 @@ export declare const OPERATIONS: readonly [OperationSpec<"create_draft", z.ZodOb
     html: "html";
     markdown: "markdown";
   }>>>;
+  published: z.ZodDefault<z.ZodBoolean>;
 }, z.core.$strict>, z.ZodObject<{
   outcome: z.ZodEnum<{
     not_found: "not_found";
@@ -1802,6 +2147,53 @@ export declare const OPERATIONS: readonly [OperationSpec<"create_draft", z.ZodOb
     updatedAt: z.ZodString;
   }, z.core.$strip>>;
   nextCursor: z.ZodNullable<z.ZodString>;
+}, z.core.$strip>>, OperationSpec<"list_reviews", z.ZodObject<{
+  status: z.ZodDefault<z.ZodEnum<{
+    approved: "approved";
+    cancelled: "cancelled";
+    changes_requested: "changes_requested";
+    pending: "pending";
+  }>>;
+  limit: z.ZodDefault<z.ZodNumber>;
+}, z.core.$strict>, z.ZodObject<{
+  outcome: z.ZodEnum<{
+    ok: "ok";
+  }>;
+  reviews: z.ZodArray<z.ZodObject<{
+    id: z.ZodString;
+    entryId: z.ZodString;
+    revision: z.ZodString;
+    status: z.ZodEnum<{
+      approved: "approved";
+      cancelled: "cancelled";
+      changes_requested: "changes_requested";
+      pending: "pending";
+    }>;
+    requestedBy: z.ZodString;
+    requestedByName: z.ZodNullable<z.ZodString>;
+    requestedAt: z.ZodString;
+    decidedBy: z.ZodNullable<z.ZodString>;
+    decidedAt: z.ZodNullable<z.ZodString>;
+    note: z.ZodNullable<z.ZodString>;
+    entry: z.ZodObject<{
+      id: z.ZodString;
+      collection: z.ZodString;
+      locale: z.ZodString;
+      slug: z.ZodString;
+      translationGroup: z.ZodNullable<z.ZodString>;
+      status: z.ZodEnum<{
+        draft: "draft";
+        published: "published";
+        scheduled: "scheduled";
+      }>;
+      version: z.ZodNumber;
+      frontmatter: z.ZodRecord<z.ZodString, z.ZodUnknown>;
+      tags: z.ZodArray<z.ZodString>;
+      hasUnpublishedChanges: z.ZodBoolean;
+      publishedAt: z.ZodNullable<z.ZodString>;
+      updatedAt: z.ZodString;
+    }, z.core.$strip>;
+  }, z.core.$strip>>;
 }, z.core.$strip>>, OperationSpec<"publish", z.ZodObject<{
   id: z.ZodString;
   version: z.ZodNumber;
@@ -1809,13 +2201,20 @@ export declare const OPERATIONS: readonly [OperationSpec<"create_draft", z.ZodOb
     contract: z.ZodString;
     path: z.ZodString;
   }, z.core.$strip>>>;
+  group: z.ZodDefault<z.ZodArray<z.ZodObject<{
+    id: z.ZodString;
+    version: z.ZodNumber;
+  }, z.core.$strict>>>;
+  publishAt: z.ZodOptional<z.ZodISODateTime>;
 }, z.core.$strict>, z.ZodObject<{
   outcome: z.ZodEnum<{
     blocked: "blocked";
     conflict: "conflict";
     needs_acknowledgement: "needs_acknowledgement";
     not_found: "not_found";
+    pending_review: "pending_review";
     published: "published";
+    scheduled: "scheduled";
   }>;
   entry: z.ZodOptional<z.ZodObject<{
     id: z.ZodString;
@@ -1869,6 +2268,50 @@ export declare const OPERATIONS: readonly [OperationSpec<"create_draft", z.ZodOb
     currentVersion: z.ZodNumber;
     headRevision: z.ZodString;
   }, z.core.$strip>>;
+  review: z.ZodOptional<z.ZodObject<{
+    id: z.ZodString;
+    entryId: z.ZodString;
+    revision: z.ZodString;
+    status: z.ZodEnum<{
+      approved: "approved";
+      cancelled: "cancelled";
+      changes_requested: "changes_requested";
+      pending: "pending";
+    }>;
+    requestedBy: z.ZodString;
+    requestedByName: z.ZodNullable<z.ZodString>;
+    requestedAt: z.ZodString;
+    decidedBy: z.ZodNullable<z.ZodString>;
+    decidedAt: z.ZodNullable<z.ZodString>;
+    note: z.ZodNullable<z.ZodString>;
+  }, z.core.$strip>>;
+  failedEntry: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>>, OperationSpec<"request_changes", z.ZodObject<{
+  id: z.ZodString;
+  note: z.ZodString;
+}, z.core.$strict>, z.ZodObject<{
+  outcome: z.ZodEnum<{
+    changes_requested: "changes_requested";
+    not_found: "not_found";
+    not_pending: "not_pending";
+  }>;
+  review: z.ZodOptional<z.ZodObject<{
+    id: z.ZodString;
+    entryId: z.ZodString;
+    revision: z.ZodString;
+    status: z.ZodEnum<{
+      approved: "approved";
+      cancelled: "cancelled";
+      changes_requested: "changes_requested";
+      pending: "pending";
+    }>;
+    requestedBy: z.ZodString;
+    requestedByName: z.ZodNullable<z.ZodString>;
+    requestedAt: z.ZodString;
+    decidedBy: z.ZodNullable<z.ZodString>;
+    decidedAt: z.ZodNullable<z.ZodString>;
+    note: z.ZodNullable<z.ZodString>;
+  }, z.core.$strip>>;
 }, z.core.$strip>>, OperationSpec<"unpublish", z.ZodObject<{
   id: z.ZodString;
 }, z.core.$strict>, z.ZodObject<{
@@ -2026,7 +2469,34 @@ export declare function isPersonalToken(value: string): boolean;
 /** The SHA-256 of a token, in lowercase hex: what the `tokens` table stores and looks up. */
 export declare function hashPersonalToken(token: string): Promise<string>;
 //#endregion
+//#region src/webhooks.d.ts
+/**
+ * The signature of Hollware's webhooks (ADR-025), for the Worker that sends them and for whoever
+ * receives them: HMAC-SHA256 of `<timestamp>.<body>` with the webhook's secret, sent as
+ * `hollware-signature: v1=<hex>` with `hollware-timestamp` (seconds since the epoch) and
+ * `hollware-event-id`. Web Crypto only, so it runs in any runtime.
+ */
+export declare const SIGNATURE_HEADER = "hollware-signature";
+export declare const TIMESTAMP_HEADER = "hollware-timestamp";
+export declare const EVENT_ID_HEADER = "hollware-event-id";
+/** The value of `hollware-signature` for a body sent at `timestamp` (seconds). */
+export declare function signWebhook(secret: string, timestamp: number, body: string): Promise<string>;
+export interface WebhookCheck {
+  readonly secret: string;
+  /** The raw body, as received: a parsed and re-serialized body no longer matches. */
+  readonly body: string;
+  readonly headers: Headers;
+  /** Now, in seconds since the epoch; the system clock when absent. */
+  readonly now?: number;
+  readonly toleranceSeconds?: number;
+}
+/**
+ * Whether a request is a webhook of Hollware: its signature matches the body and the secret, and
+ * its timestamp is within the tolerance, so a captured request cannot be replayed later.
+ */
+export declare function verifyWebhook(check: WebhookCheck): Promise<boolean>;
+//#endregion
 //#region src/index.d.ts
 export declare const name = "@hollware/core";
 //#endregion
-export { type AcknowledgedWarning, type BuiltInContractId, type BuiltInOptions, type CollectionDefinition, type ComponentDefinition, type ComponentUse, type ConfigProblem, type Contract, type ContractContext, type ContractDescription, type ContractFinding, type ContractText, type CustomContractOptions, type DescribedSchema, type DisallowedMarker, type Effect, type EntryDocument, type EntryFacts, type EntryLookup, type EntryRef, type ErrorCode, type ExtractedContent, type Heading, type HollwareConfig, type IdPrefix, type ImageRef, type LinkRef, type LinkTarget, type Operation, type OperationByName, type OperationName, type OperationSpec, type OutcomeInfo, type OutcomeOf, type Phase, type ProcessMarkdown, type ProcessMarkdownOptions, type ProcessResult, type ProcessedMarkdown, type RenderHtml, type ResolveConfig, type ResolvedCollection, type ResolvedConfig, type ResolvedSite, type RunContractsInput, type SchemaOutput, type Scope, type Severity, type SiteDefinition, type SiteDescription, type Verdict, type Violation, schemas_d_exports as schemas };
+export { type AcknowledgedWarning, type AuthDefinition, type BuiltInContractId, type BuiltInOptions, type CollectionDefinition, type ComponentDefinition, type ComponentUse, type ConfigProblem, type Contract, type ContractContext, type ContractDescription, type ContractFinding, type ContractText, type CustomContractOptions, type DescribedSchema, type DisallowedMarker, type Effect, type EntryDocument, type EntryFacts, type EntryLookup, type EntryRef, type ErrorCode, type ExtractedContent, type Heading, type HollwareConfig, type IdPrefix, type ImageRef, type LinkRef, type LinkTarget, type Operation, type OperationByName, type OperationName, type OperationSpec, type OutcomeInfo, type OutcomeOf, type Phase, type ProcessMarkdown, type ProcessMarkdownOptions, type ProcessResult, type ProcessedMarkdown, type RenderHtml, type ResolveConfig, type ResolvedAuth, type ResolvedCollection, type ResolvedConfig, type ResolvedSite, type RunContractsInput, type SchemaOutput, type Scope, type Severity, type SiteDefinition, type SiteDescription, type Verdict, type Violation, schemas_d_exports as schemas };

package/dist/index.mjs

@@ -69,7 +69,7 @@ const MAX_MARKDOWN_BYTES_CEILING = 786432;
 * letter, at most 63 characters. A component name is what Markdown writes after the colons
 * (`::callout`). A site key has its own rule (`site-key.ts`).
 */
-const NAME = /^[a-z][a-z0-9-]{0,62}$/;
+const NAME$1 = /^[a-z][a-z0-9-]{0,62}$/;
 /** A language tag: a language, then an optional script and region: `es`, `pt-BR`, `zh-Hant-TW`. */
 const LOCALE_TAG = /^[a-z]{2,3}(?:-[A-Z][a-z]{3})?(?:-(?:[A-Z]{2}|[0-9]{3}))?$/;
 /** The id of a contract: lowercase words joined by single hyphens. */
@@ -1224,7 +1224,7 @@ function readTranslations(path, raw, schema, problems) {
 }
 const COMPONENT_FIX = "Declare it with defineComponent({ props: z.strictObject({ … }) }).";
 function readComponent(path, name, raw, problems) {
-	if (!NAME.test(name)) problems.add(path, `${quote(name)} is not a valid component name`, nameFix("callout"));
+	if (!NAME$1.test(name)) problems.add(path, `${quote(name)} is not a valid component name`, nameFix("callout"));
 	if (!isRecord$1(raw)) {
 		problems.add(path, wrongType(raw, "a component"), COMPONENT_FIX);
 		return null;
@@ -1347,7 +1347,7 @@ function readMaxMarkdownBytes(path, raw, problems) {
 * problem already: `resolveConfig` throws when there is any, so nothing else keeps track of them.
 */
 function readCollection(path, name, raw, site, problems) {
-	if (!NAME.test(name)) problems.add(path, `${quote(name)} is not a valid collection name`, nameFix("blog"));
+	if (!NAME$1.test(name)) problems.add(path, `${quote(name)} is not a valid collection name`, nameFix("blog"));
 	if (!isRecord$1(raw)) {
 		problems.add(path, wrongType(raw, "a collection"), "Declare it with defineCollection({ schema, routes, … }).");
 		return null;
@@ -1376,6 +1376,90 @@ function readCollection(path, name, raw, site, problems) {
 	};
 }
 //#endregion
+//#region src/config/events.ts
+/** The name of a Worker secret or variable: what `wrangler secret put` takes. */
+const BINDING_NAME = /^[A-Z][A-Z0-9_]*$/;
+/** A subscriber's name: lowercase words joined by hyphens. */
+const NAME = /^[a-z0-9]+(?:-[a-z0-9]+)*$/;
+/** The public URL of a site: an absolute http or https URL with no path, query or fragment. */
+function readSiteUrl(path, raw, problems) {
+	if (raw === void 0) return null;
+	const fix = "Write the public origin of the site, such as \"https://example.com\".";
+	if (typeof raw !== "string" || !URL.canParse(raw)) {
+		problems.add(path, wrongType(raw, "an absolute URL"), fix);
+		return null;
+	}
+	const url = new URL(raw);
+	if (url.protocol !== "https:" && url.protocol !== "http:" || url.pathname !== "/" || url.search !== "" || url.hash !== "") {
+		problems.add(path, `${quote(raw)} is not an origin`, fix);
+		return null;
+	}
+	return url.origin;
+}
+function readBindingName(path, raw, problems) {
+	if (typeof raw === "string" && BINDING_NAME.test(raw)) return raw;
+	problems.add(path, wrongType(raw, "the name of a Worker secret"), "Name the secret that holds the value, such as \"WEBHOOK_SECRET\", and set it with wrangler secret put.");
+	return null;
+}
+function readWebhook(path, raw, problems) {
+	if (!isRecord$1(raw)) {
+		problems.add(path, wrongType(raw, "a webhook"), "Declare it as { name: \"newsletter\", url: \"https://…\", secret: \"WEBHOOK_SECRET\" }.");
+		return null;
+	}
+	const name = raw["name"];
+	if (typeof name !== "string" || !NAME.test(name)) problems.add(keyPath(path, "name"), wrongType(name, "a name"), "Name it with lowercase words joined by hyphens, such as \"newsletter\".");
+	const url = raw["url"];
+	const urlOk = typeof url === "string" && URL.canParse(url) && new URL(url).protocol === "https:";
+	if (!urlOk) problems.add(keyPath(path, "url"), wrongType(url, "an https URL"), "Give the https URL that receives the events.");
+	const secret = readBindingName(keyPath(path, "secret"), raw["secret"], problems);
+	if (typeof name !== "string" || !NAME.test(name) || !urlOk || secret === null) return null;
+	return {
+		name,
+		url: String(url),
+		secret
+	};
+}
+/** Who hears about publications (ADR-025): webhooks, and IndexNow when the site has a URL. */
+function readEvents(path, raw, siteUrl, problems) {
+	const events = {
+		webhooks: [],
+		indexNow: null
+	};
+	if (raw === void 0) return events;
+	if (!isRecord$1(raw)) {
+		problems.add(path, wrongType(raw, "an object"), "Declare { webhooks: [ … ], indexNow: { … } }.");
+		return events;
+	}
+	const webhooks = raw["webhooks"];
+	if (webhooks !== void 0) {
+		if (!Array.isArray(webhooks)) problems.add(keyPath(path, "webhooks"), wrongType(webhooks, "a list"), "List the webhooks.");
+		else {
+			const seen = /* @__PURE__ */ new Set();
+			webhooks.forEach((item, index) => {
+				const webhook = readWebhook(itemPath(keyPath(path, "webhooks"), index), item, problems);
+				if (webhook === null) return;
+				if (seen.has(webhook.name)) {
+					problems.add(itemPath(keyPath(path, "webhooks"), index), `repeats the name ${quote(webhook.name)}`, "Give each webhook a name of its own.");
+					return;
+				}
+				seen.add(webhook.name);
+				events.webhooks.push(webhook);
+			});
+		}
+	}
+	const indexNow = raw["indexNow"];
+	if (indexNow !== void 0) {
+		const indexPath = keyPath(path, "indexNow");
+		if (!isRecord$1(indexNow)) problems.add(indexPath, wrongType(indexNow, "an object"), "Declare { key: \"INDEXNOW_KEY\" }.");
+		else {
+			const key = readBindingName(keyPath(indexPath, "key"), indexNow["key"], problems);
+			if (siteUrl === null) problems.add(indexPath, "needs the URL of the site", "Set url on the site: IndexNow is told the public URLs of the entries.");
+			else if (key !== null) events.indexNow = { key };
+		}
+	}
+	return events;
+}
+//#endregion
 //#region src/config/site-key.ts
 /**
 * The key of a site, which is the id of its row in the database: lowercase letters and digits
@@ -1480,12 +1564,16 @@ function readSite(key, raw, problems) {
 		localesOk: ok,
 		routes: /* @__PURE__ */ new Map()
 	}, problems);
+	const styleGuide = readOptionalString(keyPath(path, "styleGuide"), raw["styleGuide"], "Write the guidance as a Markdown string, or remove it.", problems);
+	const url = readSiteUrl(keyPath(path, "url"), raw["url"], problems);
 	return {
 		key,
 		locales,
 		defaultLocale,
-		styleGuide: readOptionalString(keyPath(path, "styleGuide"), raw["styleGuide"], "Write the guidance as a Markdown string, or remove it.", problems),
-		collections
+		styleGuide,
+		collections,
+		url,
+		events: readEvents(keyPath(path, "events"), raw["events"], url, problems)
 	};
 }
 function readSites(raw, problems) {
@@ -1503,6 +1591,21 @@ function readSites(raw, problems) {
 	}
 	return sites;
 }
+/** `auth` of the config: absent, or an object whose `dynamicClientRegistration` is a boolean. */
+function readAuth(raw, problems) {
+	if (raw === void 0) return { dynamicClientRegistration: false };
+	if (!isRecord$1(raw)) {
+		problems.add("auth", wrongType(raw, "an object"), "Write auth: { dynamicClientRegistration: true }, or leave auth out.");
+		return { dynamicClientRegistration: false };
+	}
+	const value = raw["dynamicClientRegistration"];
+	if (value === void 0) return { dynamicClientRegistration: false };
+	if (typeof value !== "boolean") {
+		problems.add("auth.dynamicClientRegistration", wrongType(value, "true or false"), "Write true to let MCP clients register themselves, or leave it out.");
+		return { dynamicClientRegistration: false };
+	}
+	return { dynamicClientRegistration: value };
+}
 /**
 * Checks the config of the deployment and fills in its defaults, or throws a `ConfigError` with
 * every problem it found, so that a broken `hollware.config.ts` stops the Worker at startup with
@@ -1532,10 +1635,16 @@ function readSites(raw, problems) {
 function resolveConfig(config) {
 	const problems = new Problems();
 	let sites = /* @__PURE__ */ new Map();
-	if (isRecord$1(config)) sites = readSites(config["sites"], problems);
-	else problems.add("config", wrongType(config, "an object"), "Export the result of defineConfig({ sites: { … } }) from hollware.config.ts.");
+	let auth = { dynamicClientRegistration: false };
+	if (isRecord$1(config)) {
+		sites = readSites(config["sites"], problems);
+		auth = readAuth(config["auth"], problems);
+	} else problems.add("config", wrongType(config, "an object"), "Export the result of defineConfig({ sites: { … } }) from hollware.config.ts.");
 	if (problems.list.length > 0) throw new ConfigError(problems.list);
-	return { sites };
+	return {
+		sites,
+		auth
+	};
 }
 //#endregion
 //#region src/errors.ts
@@ -1577,10 +1686,19 @@ var HollwareError = class extends Error {
 const CROCKFORD = "0123456789ABCDEFGHJKMNPQRSTVWXYZ";
 /** The kinds of ids and their prefixes. A new kind adds its prefix here. */
 const ID_PREFIXES = {
+	challenge: "chl",
+	delivery: "dlv",
 	entry: "ent",
+	event: "evt",
+	invitation: "inv",
+	member: "mbr",
+	passkey: "pky",
 	publication: "pub",
 	revision: "rev",
 	revisionTag: "tag",
+	review: "rvw",
+	schedule: "sch",
+	session: "ses",
 	token: "tok",
 	user: "usr"
 };
@@ -2916,6 +3034,9 @@ var schemas_exports = /* @__PURE__ */ __exportAll({
 	markdown: () => markdown,
 	phase: () => phase,
 	publication: () => publication,
+	review: () => review,
+	reviewId: () => reviewId,
+	reviewStatus: () => reviewStatus,
 	revisionId: () => revisionId,
 	severity: () => severity,
 	siteDescription: () => siteDescription,
@@ -2995,6 +3116,29 @@ const entry = entrySummary.extend({
 	document: document.optional(),
 	html: z.string().optional()
 });
+const reviewId = z.string().regex(/^rvw_[0-9A-HJKMNP-TV-Z]{26}$/).describe("The id of a review (rvw_…), as publish and list_reviews return it.");
+const reviewStatus = z.enum([
+	"pending",
+	"approved",
+	"changes_requested",
+	"cancelled"
+]);
+/**
+* A request to publish a revision, made by someone who may write but not publish, and what a
+* person who may publish decided about it.
+*/
+const review = z.object({
+	id: reviewId,
+	entryId,
+	revision: revisionId.describe("The revision asked for."),
+	status: reviewStatus.describe("pending until someone decides; cancelled when a new revision of the entry is saved."),
+	requestedBy: z.string().describe("The user who asked."),
+	requestedByName: z.string().nullable().describe("The name of the user who asked, if they gave one."),
+	requestedAt: z.string(),
+	decidedBy: z.string().nullable(),
+	decidedAt: z.string().nullable(),
+	note: z.string().nullable().describe("What the reviewer asked to change, or null.")
+});
 const conflict = z.object({
 	currentVersion: z.number().int().min(1),
 	headRevision: revisionId
@@ -3090,7 +3234,8 @@ const getEntry = defineOperation({
 		collection: collectionName,
 		locale,
 		slug,
-		formats: z.array(format).min(1).default(["markdown"]).describe("What to return of the revision: markdown, the Comark document, or html.")
+		formats: z.array(format).min(1).default(["markdown"]).describe("What to return of the revision: markdown, the Comark document, or html."),
+		published: z.boolean().default(false).describe("Read the revision that is live instead of the latest one: not_found when the entry is not published.")
 	}),
 	output: z.object({
 		outcome: z.enum(["ok", "not_found"]),
@@ -3196,30 +3341,41 @@ const validate = defineOperation({
 const publish = defineOperation({
 	name: "publish",
 	title: "Publish an entry",
-	description: "Publishes the latest revision of an entry, if the entry is still at the version you read. It is blocked while the contracts report errors. Warnings have to be acknowledged: an answer of needs_acknowledgement lists them, and publish again with them in acknowledgeWarnings.",
+	description: "Publishes the latest revision of an entry, if the entry is still at the version you read, and with group, other entries in the same step. It is blocked while the contracts report errors. Warnings have to be acknowledged: an answer of needs_acknowledgement lists them, and publish again with them in acknowledgeWarnings. Publish entries that link to each other as one group. Without content:publish, the same checks run and the answer is pending_review: a person who may publish approves the revision or asks for changes, and a new revision of the entry cancels the request. A review is for one entry, now: never with group or publishAt.",
 	input: z.strictObject({
 		id: entryId,
 		version,
-		acknowledgeWarnings: z.array(acknowledgedWarning).default([]).describe("The warnings you accept, as needs_acknowledgement listed them.")
+		acknowledgeWarnings: z.array(acknowledgedWarning).default([]).describe("The warnings you accept, as needs_acknowledgement listed them."),
+		group: z.array(z.strictObject({
+			id: entryId,
+			version
+		})).max(99).default([]).describe("Other entries to publish in the same step, each with the version you read: all of them are published, or none. A link between two of them counts as published, and an acknowledged warning holds for every entry that reports it."),
+		publishAt: z.iso.datetime({ offset: true }).optional().describe("Publish at this time instead of now, as an ISO 8601 date and time: the entry is checked now and waits as scheduled, and it is published within a minute of the time, if nobody changes it before. One entry at a time, never with group.")
 	}),
 	output: z.object({
 		outcome: z.enum([
 			"published",
+			"scheduled",
 			"blocked",
 			"needs_acknowledgement",
+			"pending_review",
 			"conflict",
 			"not_found"
 		]),
 		entry: entrySummary.optional(),
 		verdict: verdict.optional(),
-		conflict: conflict.optional()
+		conflict: conflict.optional(),
+		review: review.optional().describe("With pending_review: the request, as list_reviews shows it."),
+		failedEntry: entryId.optional().describe("In a group, the entry that kept the group from being published: blocked, stale, missing, or with a warning to acknowledge.")
 	}),
-	scopes: ["content:publish"],
+	scopes: ["content:write"],
 	effect: "write",
 	outcomes: {
 		published: { isError: false },
+		scheduled: { isError: false },
 		blocked: { isError: true },
 		needs_acknowledgement: { isError: false },
+		pending_review: { isError: false },
 		conflict: { isError: true },
 		not_found: { isError: true }
 	}
@@ -3240,14 +3396,87 @@ const unpublish = defineOperation({
 		not_found: { isError: true }
 	}
 });
-/** Every operation of v0.1, sorted by name: the order of `tools/list`. */
+const listReviews = defineOperation({
+	name: "list_reviews",
+	title: "List the reviews",
+	description: "Lists the requests to publish, newest first, with the entry each one is for: the pending ones unless you name another status.",
+	input: z.strictObject({
+		status: reviewStatus.default("pending"),
+		limit: z.number().int().min(1).max(100).default(50)
+	}),
+	output: z.object({
+		outcome: z.enum(["ok"]),
+		reviews: z.array(review.extend({ entry: entrySummary }))
+	}),
+	scopes: ["content:read"],
+	effect: "read",
+	outcomes: { ok: { isError: false } }
+});
+const approveReview = defineOperation({
+	name: "approve_review",
+	title: "Approve a review",
+	description: "Publishes the revision a review asked for, in your name, after the contracts run again as publish runs them. The warnings the request acknowledged count as acknowledged; a new one answers needs_acknowledgement, and you approve again with it in acknowledgeWarnings.",
+	input: z.strictObject({
+		id: reviewId,
+		acknowledgeWarnings: z.array(acknowledgedWarning).default([]).describe("Warnings you accept besides those the request acknowledged.")
+	}),
+	output: z.object({
+		outcome: z.enum([
+			"published",
+			"blocked",
+			"needs_acknowledgement",
+			"not_pending",
+			"not_found"
+		]),
+		review: review.optional(),
+		entry: entrySummary.optional(),
+		verdict: verdict.optional()
+	}),
+	scopes: ["content:publish"],
+	effect: "write",
+	outcomes: {
+		published: { isError: false },
+		blocked: { isError: true },
+		needs_acknowledgement: { isError: false },
+		not_pending: { isError: true },
+		not_found: { isError: true }
+	}
+});
+const requestChanges = defineOperation({
+	name: "request_changes",
+	title: "Ask for changes",
+	description: "Closes a pending review without publishing, with a note that says what to change. The author saves a new revision and asks again.",
+	input: z.strictObject({
+		id: reviewId,
+		note: z.string().trim().min(1).max(4e3).describe("What to change, for the author.")
+	}),
+	output: z.object({
+		outcome: z.enum([
+			"changes_requested",
+			"not_pending",
+			"not_found"
+		]),
+		review: review.optional()
+	}),
+	scopes: ["content:publish"],
+	effect: "edit",
+	outcomes: {
+		changes_requested: { isError: false },
+		not_pending: { isError: true },
+		not_found: { isError: true }
+	}
+});
+/** Every operation, sorted by name: the order of `tools/list`. */
 const OPERATIONS = [
+	approveReview,
 	createDraft,
 	describeSite,
 	getEntry,
 	getTranslations,
 	listEntries,
+	listReviews,
 	publish,
+	requestChanges,
 	unpublish,
 	updateDraft,
 	validate
@@ -3303,7 +3532,51 @@ async function hashPersonalToken(token) {
 	return Array.from(new Uint8Array(digest), (byte) => byte.toString(16).padStart(2, "0")).join("");
 }
 //#endregion
+//#region src/webhooks.ts
+/**
+* The signature of Hollware's webhooks (ADR-025), for the Worker that sends them and for whoever
+* receives them: HMAC-SHA256 of `<timestamp>.<body>` with the webhook's secret, sent as
+* `hollware-signature: v1=<hex>` with `hollware-timestamp` (seconds since the epoch) and
+* `hollware-event-id`. Web Crypto only, so it runs in any runtime.
+*/
+const SIGNATURE_HEADER = "hollware-signature";
+const TIMESTAMP_HEADER = "hollware-timestamp";
+const EVENT_ID_HEADER = "hollware-event-id";
+/** How far a timestamp may be from the receiver's clock, by default: five minutes. */
+const TOLERANCE_SECONDS = 300;
+const encoder = new TextEncoder();
+async function hmac(secret, text) {
+	const key = await crypto.subtle.importKey("raw", encoder.encode(secret), {
+		name: "HMAC",
+		hash: "SHA-256"
+	}, false, ["sign"]);
+	return [...new Uint8Array(await crypto.subtle.sign("HMAC", key, encoder.encode(text)))].map((byte) => byte.toString(16).padStart(2, "0")).join("");
+}
+/** The value of `hollware-signature` for a body sent at `timestamp` (seconds). */
+async function signWebhook(secret, timestamp, body) {
+	return `v1=${await hmac(secret, `${timestamp}.${body}`)}`;
+}
+/** Compares two strings in time that does not depend on where they differ. */
+function sameText(a, b) {
+	if (a.length !== b.length) return false;
+	let difference = 0;
+	for (let index = 0; index < a.length; index++) difference |= a.charCodeAt(index) ^ b.charCodeAt(index);
+	return difference === 0;
+}
+/**
+* Whether a request is a webhook of Hollware: its signature matches the body and the secret, and
+* its timestamp is within the tolerance, so a captured request cannot be replayed later.
+*/
+async function verifyWebhook(check) {
+	const signature = check.headers.get(SIGNATURE_HEADER);
+	const timestamp = Number(check.headers.get(TIMESTAMP_HEADER));
+	if (signature === null || !Number.isInteger(timestamp)) return false;
+	const now = check.now ?? Math.floor(Date.now() / 1e3);
+	if (Math.abs(now - timestamp) > (check.toleranceSeconds ?? TOLERANCE_SECONDS)) return false;
+	return sameText(signature, await signWebhook(check.secret, timestamp, check.body));
+}
+//#endregion
 //#region src/index.ts
 const name = "@hollware/core";
 //#endregion
-export { BUILT_IN_CONTRACT_IDS, COMARK_VERSION, ConfigError, DEFAULT_MAX_MARKDOWN_BYTES, ERROR_CODES, HollwareError, ID_PREFIXES, MAX_MARKDOWN_BYTES_CEILING, OPERATIONS, PERSONAL_TOKEN_PREFIX, PERSONAL_TOKEN_TTL_DAYS, PIPELINE_VERSION, REFUSAL_CONTRACT_IDS, SCOPES, SITE_KEY_MAX_LENGTH, SITE_KEY_PATTERN, contracts, createDraft, defineCollection, defineComponent, defineConfig, defineContract, defineOperation, describeBuiltInContracts, describeContract, describeResolvedSite, describeSite, generatePersonalToken, getEntry, getTranslations, hashPersonalToken, isBuiltInContract, isId, isPersonalToken, isScope, isSiteKey, listEntries, name, newId, processMarkdown, publish, renderHtml, resolveConfig, runContracts, schemas_exports as schemas, sizeLimitViolation, ulid, uniqueSlugViolation, uniqueTranslationViolation, unpublish, updateDraft, validate };
+export { BUILT_IN_CONTRACT_IDS, COMARK_VERSION, ConfigError, DEFAULT_MAX_MARKDOWN_BYTES, ERROR_CODES, EVENT_ID_HEADER, HollwareError, ID_PREFIXES, MAX_MARKDOWN_BYTES_CEILING, OPERATIONS, PERSONAL_TOKEN_PREFIX, PERSONAL_TOKEN_TTL_DAYS, PIPELINE_VERSION, REFUSAL_CONTRACT_IDS, SCOPES, SIGNATURE_HEADER, SITE_KEY_MAX_LENGTH, SITE_KEY_PATTERN, TIMESTAMP_HEADER, approveReview, contracts, createDraft, defineCollection, defineComponent, defineConfig, defineContract, defineOperation, describeBuiltInContracts, describeContract, describeResolvedSite, describeSite, generatePersonalToken, getEntry, getTranslations, hashPersonalToken, isBuiltInContract, isId, isPersonalToken, isScope, isSiteKey, listEntries, listReviews, name, newId, processMarkdown, publish, renderHtml, requestChanges, resolveConfig, runContracts, schemas_exports as schemas, signWebhook, sizeLimitViolation, ulid, uniqueSlugViolation, uniqueTranslationViolation, unpublish, updateDraft, validate, verifyWebhook };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@hollware/core",
-  "version": "0.1.0",
+  "version": "0.3.0",
   "description": "Contracts, operation specs, schemas and the Markdown pipeline of Hollware. No Cloudflare dependencies.",
   "homepage": "https://hollware.com",
   "bugs": {
@@ -33,7 +33,7 @@
     "comark": "0.7.0"
   },
   "devDependencies": {
-    "@cloudflare/vitest-plugin": "1.4.0",
+    "@cloudflare/vitest-plugin": "1.4.1",
     "@types/node": "24.19.2",
     "publint": "0.3.25",
     "typescript": "7.0.2",