@krantho/server 0.0.0-stage → 1.0.0

package/dist/page-request.d.ts

@@ -0,0 +1,26 @@
+/** How one page request reads content */
+export interface PageRequestOptions {
+    /** Serve every content loader read from the current version, draft included */
+    preview: boolean;
+}
+/** What a page request rendered, and the cache tags of every read it made */
+export interface PageRequestResult<T> {
+    value: T;
+    /** Deduplicated, in first-read order */
+    tags: string[];
+}
+/**
+ * Render one page inside a request scope.
+ *
+ * While `render` runs, every content loader read records its cache tags into
+ * the scope, and with `preview: true` every read is served from the loader's
+ * preview view. Each call has its own scope, so concurrent and nested renders
+ * never share tags or the preview flag. Outside a scope the loader behaves as
+ * it always does.
+ */
+export declare function runPageRequest<T>(options: PageRequestOptions, render: () => Promise<T>): Promise<PageRequestResult<T>>;
+/** Whether the active page request, if any, reads previews */
+export declare function inPreviewRequest(): boolean;
+/** Record a read's cache tags into the active page request; no-op outside one */
+export declare function recordReadTags(tags: readonly string[]): void;
+//# sourceMappingURL=page-request.d.ts.map

package/dist/page-request.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"page-request.d.ts","sourceRoot":"","sources":["../src/page-request.ts"],"names":[],"mappings":"AAEA,yCAAyC;AACzC,MAAM,WAAW,kBAAkB;IACjC,+EAA+E;IAC/E,OAAO,EAAE,OAAO,CAAA;CACjB;AAED,6EAA6E;AAC7E,MAAM,WAAW,iBAAiB,CAAC,CAAC;IAClC,KAAK,EAAE,CAAC,CAAA;IACR,wCAAwC;IACxC,IAAI,EAAE,MAAM,EAAE,CAAA;CACf;AAUD;;;;;;;;GAQG;AACH,wBAAsB,cAAc,CAAC,CAAC,EACpC,OAAO,EAAE,kBAAkB,EAC3B,MAAM,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,GACvB,OAAO,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,CAI/B;AAED,8DAA8D;AAC9D,wBAAgB,gBAAgB,IAAI,OAAO,CAE1C;AAED,iFAAiF;AACjF,wBAAgB,cAAc,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,GAAG,IAAI,CAI5D"}

package/dist/page-request.js

@@ -0,0 +1,29 @@
+import { AsyncLocalStorage } from 'node:async_hooks';
+const scopes = new AsyncLocalStorage();
+/**
+ * Render one page inside a request scope.
+ *
+ * While `render` runs, every content loader read records its cache tags into
+ * the scope, and with `preview: true` every read is served from the loader's
+ * preview view. Each call has its own scope, so concurrent and nested renders
+ * never share tags or the preview flag. Outside a scope the loader behaves as
+ * it always does.
+ */
+export async function runPageRequest(options, render) {
+    const scope = { preview: options.preview, tags: new Set() };
+    const value = await scopes.run(scope, render);
+    return { value, tags: [...scope.tags] };
+}
+/** Whether the active page request, if any, reads previews */
+export function inPreviewRequest() {
+    return scopes.getStore()?.preview ?? false;
+}
+/** Record a read's cache tags into the active page request; no-op outside one */
+export function recordReadTags(tags) {
+    const scope = scopes.getStore();
+    if (!scope)
+        return;
+    for (const tag of tags)
+        scope.tags.add(tag);
+}
+//# sourceMappingURL=page-request.js.map

package/dist/page-request.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"page-request.js","sourceRoot":"","sources":["../src/page-request.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAA;AAqBpD,MAAM,MAAM,GAAG,IAAI,iBAAiB,EAAoB,CAAA;AAExD;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,OAA2B,EAC3B,MAAwB;IAExB,MAAM,KAAK,GAAqB,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,IAAI,EAAE,IAAI,GAAG,EAAE,EAAE,CAAA;IAC7E,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,GAAG,CAAC,KAAK,EAAE,MAAM,CAAC,CAAA;IAC7C,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,EAAE,CAAA;AACzC,CAAC;AAED,8DAA8D;AAC9D,MAAM,UAAU,gBAAgB;IAC9B,OAAO,MAAM,CAAC,QAAQ,EAAE,EAAE,OAAO,IAAI,KAAK,CAAA;AAC5C,CAAC;AAED,iFAAiF;AACjF,MAAM,UAAU,cAAc,CAAC,IAAuB;IACpD,MAAM,KAAK,GAAG,MAAM,CAAC,QAAQ,EAAE,CAAA;IAC/B,IAAI,CAAC,KAAK;QAAE,OAAM;IAClB,KAAK,MAAM,GAAG,IAAI,IAAI;QAAE,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;AAC7C,CAAC"}

package/dist/persistence.d.ts

@@ -0,0 +1,36 @@
+import type { ContentSection, PersistenceSection, PostgresPersistenceSection, SiteSection } from '@krantho/config';
+import type { ICheckpointAdapter, IContentMigrationAdapter, IPersistenceAdapter } from '@krantho/persistence';
+/** Result of creating a persistence adapter */
+export interface AdapterResult {
+    adapter: IPersistenceAdapter;
+    checkpointAdapter?: ICheckpointAdapter | undefined;
+    contentMigrationAdapter?: IContentMigrationAdapter | undefined;
+    authAdapter?: import('@krantho/persistence').IAuthAdapter | undefined;
+    /** Raw database handle for sub-adapter creation (SQLite Database or Postgres Sql) */
+    lockDb?: unknown | undefined;
+    schemaVersion: number;
+}
+/**
+ * Create a persistence adapter from configuration.
+ *
+ * Filesystem is loaded directly. SQLite and Postgres are loaded via dynamic import
+ * to avoid pulling in native modules when they're not needed.
+ *
+ * Every read and write that names no locale uses `site.defaultLocale`. The
+ * filesystem adapter keeps each collection's files in that collection's
+ * `directory`.
+ */
+export declare function createAdapter(config: PersistenceSection, site: Pick<SiteSection, 'defaultLocale'>, content: Pick<ContentSection, 'defaultStatus'>, collections: ReadonlyMap<string, {
+    directory?: string | undefined;
+}>): Promise<AdapterResult>;
+/**
+ * Driver options from the configuration. Only the leaves that are set are
+ * passed, so an unset leaf keeps the driver's own default — including any
+ * value given as a query parameter on the connection URL.
+ */
+export declare function postgresClientOptions(config: PostgresPersistenceSection): {
+    max?: number;
+    prepare?: boolean;
+    idle_timeout?: number;
+};
+//# sourceMappingURL=persistence.d.ts.map

package/dist/persistence.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"persistence.d.ts","sourceRoot":"","sources":["../src/persistence.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,cAAc,EACd,kBAAkB,EAClB,0BAA0B,EAC1B,WAAW,EACZ,MAAM,iBAAiB,CAAA;AACxB,OAAO,KAAK,EACV,kBAAkB,EAClB,wBAAwB,EACxB,mBAAmB,EACpB,MAAM,sBAAsB,CAAA;AAG7B,+CAA+C;AAC/C,MAAM,WAAW,aAAa;IAC5B,OAAO,EAAE,mBAAmB,CAAA;IAC5B,iBAAiB,CAAC,EAAE,kBAAkB,GAAG,SAAS,CAAA;IAClD,uBAAuB,CAAC,EAAE,wBAAwB,GAAG,SAAS,CAAA;IAC9D,WAAW,CAAC,EAAE,OAAO,sBAAsB,EAAE,YAAY,GAAG,SAAS,CAAA;IACrE,qFAAqF;IACrF,MAAM,CAAC,EAAE,OAAO,GAAG,SAAS,CAAA;IAC5B,aAAa,EAAE,MAAM,CAAA;CACtB;AAED;;;;;;;;;GASG;AACH,wBAAsB,aAAa,CACjC,MAAM,EAAE,kBAAkB,EAC1B,IAAI,EAAE,IAAI,CAAC,WAAW,EAAE,eAAe,CAAC,EACxC,OAAO,EAAE,IAAI,CAAC,cAAc,EAAE,eAAe,CAAC,EAC9C,WAAW,EAAE,WAAW,CAAC,MAAM,EAAE;IAAE,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;CAAE,CAAC,GACnE,OAAO,CAAC,aAAa,CAAC,CAyExB;AAqBD;;;;GAIG;AACH,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,0BAA0B,GAAG;IACzE,GAAG,CAAC,EAAE,MAAM,CAAA;IACZ,OAAO,CAAC,EAAE,OAAO,CAAA;IACjB,YAAY,CAAC,EAAE,MAAM,CAAA;CACtB,CAMA"}

package/dist/persistence.js

@@ -0,0 +1,108 @@
+import { FileSystemAdapter } from '@krantho/persistence-fs';
+/**
+ * Create a persistence adapter from configuration.
+ *
+ * Filesystem is loaded directly. SQLite and Postgres are loaded via dynamic import
+ * to avoid pulling in native modules when they're not needed.
+ *
+ * Every read and write that names no locale uses `site.defaultLocale`. The
+ * filesystem adapter keeps each collection's files in that collection's
+ * `directory`.
+ */
+export async function createAdapter(config, site, content, collections) {
+    const defaultStatus = content.defaultStatus;
+    const defaultLocale = site.defaultLocale;
+    switch (config.provider) {
+        case 'filesystem':
+            return {
+                adapter: new FileSystemAdapter({
+                    contentPath: config.filesystem.contentPath,
+                    directories: collectionDirectories(collections),
+                    defaultLocale,
+                    defaultStatus: defaultStatus.filesystem,
+                }),
+                schemaVersion: 0,
+            };
+        case 'sqlite': {
+            const { SQLiteAdapter, SqliteCheckpointAdapter, SqliteContentMigrationAdapter, SqliteAuthAdapter, getSchemaVersion, } = await import('@krantho/persistence-sqlite');
+            const adapter = new SQLiteAdapter(config.sqlite.path, {
+                busyTimeoutMs: config.sqlite.busyTimeoutMs,
+                walRetries: config.sqlite.walRetries,
+                walRetryDelayMs: config.sqlite.walRetryDelayMs,
+                defaultLocale,
+                defaultStatus,
+            });
+            const checkpointAdapter = new SqliteCheckpointAdapter(adapter.database);
+            const contentMigrationAdapter = new SqliteContentMigrationAdapter(adapter.database);
+            const authAdapter = new SqliteAuthAdapter(adapter.database);
+            const schemaVersion = getSchemaVersion(adapter.database);
+            return {
+                adapter,
+                checkpointAdapter,
+                contentMigrationAdapter,
+                authAdapter,
+                lockDb: adapter.database,
+                schemaVersion,
+            };
+        }
+        case 'postgres': {
+            const { pg, adapter: { PostgresAdapter, PostgresContentMigrationAdapter, PostgresAuthAdapter, PostgresCheckpointAdapter, getSchemaVersion, }, } = await importPostgresPackages();
+            // Validated at resolve time: a postgres provider without a URL never reaches here.
+            const sql = pg.default(config.postgres.url, postgresClientOptions(config.postgres));
+            const adapter = await PostgresAdapter.create(sql, { defaultLocale, defaultStatus });
+            const checkpointAdapter = new PostgresCheckpointAdapter(sql);
+            const contentMigrationAdapter = new PostgresContentMigrationAdapter(sql);
+            const authAdapter = new PostgresAuthAdapter(sql);
+            const schemaVersion = await getSchemaVersion(sql);
+            return {
+                adapter,
+                checkpointAdapter,
+                contentMigrationAdapter,
+                authAdapter,
+                lockDb: sql,
+                schemaVersion,
+            };
+        }
+    }
+}
+/**
+ * Load the Postgres adapter package and driver. Both are optional peers of
+ * `@krantho/server`, so an app that selects the postgres provider must list
+ * them in its own dependencies.
+ */
+async function importPostgresPackages() {
+    try {
+        const adapter = await import('@krantho/persistence-postgres');
+        const pg = await import('postgres');
+        return { adapter, pg };
+    }
+    catch (err) {
+        throw new Error('persistence.provider is "postgres", but @krantho/persistence-postgres or postgres could not be loaded. ' +
+            'Add both to the dependencies of the app that runs krantho.', { cause: err });
+    }
+}
+/**
+ * Driver options from the configuration. Only the leaves that are set are
+ * passed, so an unset leaf keeps the driver's own default — including any
+ * value given as a query parameter on the connection URL.
+ */
+export function postgresClientOptions(config) {
+    const options = {};
+    if (config.maxConnections !== undefined)
+        options.max = config.maxConnections;
+    if (config.prepare !== undefined)
+        options.prepare = config.prepare;
+    if (config.idleTimeoutSec !== undefined)
+        options.idle_timeout = config.idleTimeoutSec;
+    return options;
+}
+/** Each collection's directory, for the collections that name one */
+function collectionDirectories(collections) {
+    const directories = new Map();
+    for (const [name, { directory }] of collections) {
+        if (directory)
+            directories.set(name, directory);
+    }
+    return directories;
+}
+//# sourceMappingURL=persistence.js.map

package/dist/persistence.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"persistence.js","sourceRoot":"","sources":["../src/persistence.ts"],"names":[],"mappings":"AAWA,OAAO,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAA;AAa3D;;;;;;;;;GASG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,MAA0B,EAC1B,IAAwC,EACxC,OAA8C,EAC9C,WAAoE;IAEpE,MAAM,aAAa,GAAG,OAAO,CAAC,aAAa,CAAA;IAC3C,MAAM,aAAa,GAAG,IAAI,CAAC,aAAa,CAAA;IAExC,QAAQ,MAAM,CAAC,QAAQ,EAAE,CAAC;QACxB,KAAK,YAAY;YACf,OAAO;gBACL,OAAO,EAAE,IAAI,iBAAiB,CAAC;oBAC7B,WAAW,EAAE,MAAM,CAAC,UAAU,CAAC,WAAW;oBAC1C,WAAW,EAAE,qBAAqB,CAAC,WAAW,CAAC;oBAC/C,aAAa;oBACb,aAAa,EAAE,aAAa,CAAC,UAAU;iBACxC,CAAC;gBACF,aAAa,EAAE,CAAC;aACjB,CAAA;QAEH,KAAK,QAAQ,CAAC,CAAC,CAAC;YACd,MAAM,EACJ,aAAa,EACb,uBAAuB,EACvB,6BAA6B,EAC7B,iBAAiB,EACjB,gBAAgB,GACjB,GAAG,MAAM,MAAM,CAAC,6BAA6B,CAAC,CAAA;YAC/C,MAAM,OAAO,GAAG,IAAI,aAAa,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE;gBACpD,aAAa,EAAE,MAAM,CAAC,MAAM,CAAC,aAAa;gBAC1C,UAAU,EAAE,MAAM,CAAC,MAAM,CAAC,UAAU;gBACpC,eAAe,EAAE,MAAM,CAAC,MAAM,CAAC,eAAe;gBAC9C,aAAa;gBACb,aAAa;aACd,CAAC,CAAA;YACF,MAAM,iBAAiB,GAAG,IAAI,uBAAuB,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAA;YACvE,MAAM,uBAAuB,GAAG,IAAI,6BAA6B,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAA;YACnF,MAAM,WAAW,GAAG,IAAI,iBAAiB,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAA;YAC3D,MAAM,aAAa,GAAG,gBAAgB,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAA;YACxD,OAAO;gBACL,OAAO;gBACP,iBAAiB;gBACjB,uBAAuB;gBACvB,WAAW;gBACX,MAAM,EAAE,OAAO,CAAC,QAAQ;gBACxB,aAAa;aACd,CAAA;QACH,CAAC;QAED,KAAK,UAAU,CAAC,CAAC,CAAC;YAChB,MAAM,EACJ,EAAE,EACF,OAAO,EAAE,EACP,eAAe,EACf,+BAA+B,EAC/B,mBAAmB,EACnB,yBAAyB,EACzB,gBAAgB,GACjB,GACF,GAAG,MAAM,sBAAsB,EAAE,CAAA;YAClC,mFAAmF;YACnF,MAAM,GAAG,GAAG,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAa,EAAE,qBAAqB,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAA;YAC7F,MAAM,OAAO,GAAG,MAAM,eAAe,CAAC,MAAM,CAAC,GAAG,EAAE,EAAE,aAAa,EAAE,aAAa,EAAE,CAAC,CAAA;YACnF,MAAM,iBAAiB,GAAG,IAAI,yBAAyB,CAAC,GAAG,CAAC,CAAA;YAC5D,MAAM,uBAAuB,GAAG,IAAI,+BAA+B,CAAC,GAAG,CAAC,CAAA;YACxE,MAAM,WAAW,GAAG,IAAI,mBAAmB,CAAC,GAAG,CAAC,CAAA;YAChD,MAAM,aAAa,GAAG,MAAM,gBAAgB,CAAC,GAAG,CAAC,CAAA;YACjD,OAAO;gBACL,OAAO;gBACP,iBAAiB;gBACjB,uBAAuB;gBACvB,WAAW;gBACX,MAAM,EAAE,GAAG;gBACX,aAAa;aACd,CAAA;QACH,CAAC;IACH,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,KAAK,UAAU,sBAAsB;IACnC,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,+BAA+B,CAAC,CAAA;QAC7D,MAAM,EAAE,GAAG,MAAM,MAAM,CAAC,UAAU,CAAC,CAAA;QACnC,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE,CAAA;IACxB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,KAAK,CACb,yGAAyG;YACvG,4DAA4D,EAC9D,EAAE,KAAK,EAAE,GAAG,EAAE,CACf,CAAA;IACH,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,qBAAqB,CAAC,MAAkC;IAKtE,MAAM,OAAO,GAA+D,EAAE,CAAA;IAC9E,IAAI,MAAM,CAAC,cAAc,KAAK,SAAS;QAAE,OAAO,CAAC,GAAG,GAAG,MAAM,CAAC,cAAc,CAAA;IAC5E,IAAI,MAAM,CAAC,OAAO,KAAK,SAAS;QAAE,OAAO,CAAC,OAAO,GAAG,MAAM,CAAC,OAAO,CAAA;IAClE,IAAI,MAAM,CAAC,cAAc,KAAK,SAAS;QAAE,OAAO,CAAC,YAAY,GAAG,MAAM,CAAC,cAAc,CAAA;IACrF,OAAO,OAAO,CAAA;AAChB,CAAC;AAED,qEAAqE;AACrE,SAAS,qBAAqB,CAC5B,WAAoE;IAEpE,MAAM,WAAW,GAAG,IAAI,GAAG,EAAkB,CAAA;IAC7C,KAAK,MAAM,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,CAAC,IAAI,WAAW,EAAE,CAAC;QAChD,IAAI,SAAS;YAAE,WAAW,CAAC,GAAG,CAAC,IAAI,EAAE,SAAS,CAAC,CAAA;IACjD,CAAC;IACD,OAAO,WAAW,CAAA;AACpB,CAAC"}

package/dist/preview-token.d.ts

@@ -0,0 +1,9 @@
+import type { KranthoConfig } from '@krantho/config';
+/**
+ * Whether a page request carries a valid signed preview token
+ * (`?krantho-preview=`, from `GET /api/preview` in `signed-url` mode): signed
+ * for this URL's path and not expired, with the secret the API signs with —
+ * `auth.jwtSecret`, or the process's ephemeral secret when none is configured.
+ */
+export declare function verifyPreviewRequest(url: URL, config: Pick<KranthoConfig, 'auth'>): boolean;
+//# sourceMappingURL=preview-token.d.ts.map

package/dist/preview-token.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"preview-token.d.ts","sourceRoot":"","sources":["../src/preview-token.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAA;AAEpD;;;;;GAKG;AACH,wBAAgB,oBAAoB,CAAC,GAAG,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,aAAa,EAAE,MAAM,CAAC,GAAG,OAAO,CAI3F"}

package/dist/preview-token.js

@@ -0,0 +1,14 @@
+import { PREVIEW_PARAM, resolveJwtSecret, verifyPreviewToken } from '@krantho/api';
+/**
+ * Whether a page request carries a valid signed preview token
+ * (`?krantho-preview=`, from `GET /api/preview` in `signed-url` mode): signed
+ * for this URL's path and not expired, with the secret the API signs with —
+ * `auth.jwtSecret`, or the process's ephemeral secret when none is configured.
+ */
+export function verifyPreviewRequest(url, config) {
+    const token = url.searchParams.get(PREVIEW_PARAM);
+    if (!token)
+        return false;
+    return verifyPreviewToken(token, url.pathname, resolveJwtSecret(config.auth));
+}
+//# sourceMappingURL=preview-token.js.map

package/dist/preview-token.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"preview-token.js","sourceRoot":"","sources":["../src/preview-token.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAA;AAGlF;;;;;GAKG;AACH,MAAM,UAAU,oBAAoB,CAAC,GAAQ,EAAE,MAAmC;IAChF,MAAM,KAAK,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,aAAa,CAAC,CAAA;IACjD,IAAI,CAAC,KAAK;QAAE,OAAO,KAAK,CAAA;IACxB,OAAO,kBAAkB,CAAC,KAAK,EAAE,GAAG,CAAC,QAAQ,EAAE,gBAAgB,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAA;AAC/E,CAAC"}

package/dist/read-cache.d.ts

@@ -0,0 +1,17 @@
+/** The content cache settings (`content.cache` in the configuration tree) */
+export interface ReadCacheSettings {
+    enabled: boolean;
+    ttlMs: number;
+    maxEntries: number;
+}
+/** A keyed cache of reads, each kept for a time-to-live */
+export interface ReadCache {
+    read<T>(key: string, load: () => Promise<T>): Promise<T>;
+}
+/**
+ * Cache reads per key for `ttlMs`, keeping at most `maxEntries` (oldest first
+ * out). Concurrent reads of one key share a single load; a failed load is not
+ * kept. Disabled, every read loads.
+ */
+export declare function createReadCache(settings: ReadCacheSettings): ReadCache;
+//# sourceMappingURL=read-cache.d.ts.map

package/dist/read-cache.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"read-cache.d.ts","sourceRoot":"","sources":["../src/read-cache.ts"],"names":[],"mappings":"AAAA,6EAA6E;AAC7E,MAAM,WAAW,iBAAiB;IAChC,OAAO,EAAE,OAAO,CAAA;IAChB,KAAK,EAAE,MAAM,CAAA;IACb,UAAU,EAAE,MAAM,CAAA;CACnB;AAED,2DAA2D;AAC3D,MAAM,WAAW,SAAS;IACxB,IAAI,CAAC,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAAA;CACzD;AAED;;;;GAIG;AACH,wBAAgB,eAAe,CAAC,QAAQ,EAAE,iBAAiB,GAAG,SAAS,CA0BtE"}

package/dist/read-cache.js

@@ -0,0 +1,33 @@
+/**
+ * Cache reads per key for `ttlMs`, keeping at most `maxEntries` (oldest first
+ * out). Concurrent reads of one key share a single load; a failed load is not
+ * kept. Disabled, every read loads.
+ */
+export function createReadCache(settings) {
+    const entries = new Map();
+    return {
+        read(key, load) {
+            if (!settings.enabled)
+                return load();
+            const entry = entries.get(key);
+            if (entry && Date.now() - entry.storedAt < settings.ttlMs) {
+                return entry.value;
+            }
+            const value = load();
+            entries.delete(key);
+            entries.set(key, { value, storedAt: Date.now() });
+            value.catch(() => {
+                if (entries.get(key)?.value === value)
+                    entries.delete(key);
+            });
+            while (entries.size > settings.maxEntries) {
+                const oldest = entries.keys().next().value;
+                if (oldest === undefined)
+                    break;
+                entries.delete(oldest);
+            }
+            return value;
+        },
+    };
+}
+//# sourceMappingURL=read-cache.js.map

package/dist/read-cache.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"read-cache.js","sourceRoot":"","sources":["../src/read-cache.ts"],"names":[],"mappings":"AAYA;;;;GAIG;AACH,MAAM,UAAU,eAAe,CAAC,QAA2B;IACzD,MAAM,OAAO,GAAG,IAAI,GAAG,EAAyD,CAAA;IAEhF,OAAO;QACL,IAAI,CAAI,GAAW,EAAE,IAAsB;YACzC,IAAI,CAAC,QAAQ,CAAC,OAAO;gBAAE,OAAO,IAAI,EAAE,CAAA;YAEpC,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;YAC9B,IAAI,KAAK,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC,QAAQ,GAAG,QAAQ,CAAC,KAAK,EAAE,CAAC;gBAC1D,OAAO,KAAK,CAAC,KAAmB,CAAA;YAClC,CAAC;YAED,MAAM,KAAK,GAAG,IAAI,EAAE,CAAA;YACpB,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAA;YACnB,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,CAAA;YACjD,KAAK,CAAC,KAAK,CAAC,GAAG,EAAE;gBACf,IAAI,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,KAAK,KAAK,KAAK;oBAAE,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAA;YAC5D,CAAC,CAAC,CAAA;YACF,OAAO,OAAO,CAAC,IAAI,GAAG,QAAQ,CAAC,UAAU,EAAE,CAAC;gBAC1C,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC,KAAK,CAAA;gBAC1C,IAAI,MAAM,KAAK,SAAS;oBAAE,MAAK;gBAC/B,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAA;YACxB,CAAC;YACD,OAAO,KAAK,CAAA;QACd,CAAC;KACF,CAAA;AACH,CAAC"}

package/dist/route-matcher.d.ts

@@ -0,0 +1,21 @@
+/**
+ * Route-scope pattern matching and specificity scoring.
+ *
+ * Pattern syntax:
+ * - Literal segments: `/services/consulting` — exact match
+ * - Single-segment wildcard: `/services/*` — matches one segment
+ * - Multi-segment wildcard: `/services/**` — matches one or more segments
+ *   (deliberately requires at least one segment, unlike standard glob zero-or-more)
+ *
+ * Specificity: more literal segments = higher specificity.
+ * Used to determine which route-scope config wins when multiple patterns match.
+ */
+/** Test whether a URL path matches a route pattern. */
+export declare function matchRoute(pattern: string, url: string): boolean;
+/**
+ * Compute a specificity score for a route pattern.
+ * Higher score = more specific = higher precedence.
+ * Literal segments score 2, single wildcards 1, multi-wildcards 0.
+ */
+export declare function routeSpecificity(pattern: string): number;
+//# sourceMappingURL=route-matcher.d.ts.map

package/dist/route-matcher.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"route-matcher.d.ts","sourceRoot":"","sources":["../src/route-matcher.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,uDAAuD;AACvD,wBAAgB,UAAU,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAIhE;AAED;;;;GAIG;AACH,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAaxD"}

package/dist/route-matcher.js

@@ -0,0 +1,75 @@
+/**
+ * Route-scope pattern matching and specificity scoring.
+ *
+ * Pattern syntax:
+ * - Literal segments: `/services/consulting` — exact match
+ * - Single-segment wildcard: `/services/*` — matches one segment
+ * - Multi-segment wildcard: `/services/**` — matches one or more segments
+ *   (deliberately requires at least one segment, unlike standard glob zero-or-more)
+ *
+ * Specificity: more literal segments = higher specificity.
+ * Used to determine which route-scope config wins when multiple patterns match.
+ */
+/** Test whether a URL path matches a route pattern. */
+export function matchRoute(pattern, url) {
+    const patternParts = splitPath(pattern);
+    const urlParts = splitPath(url);
+    return matchParts(patternParts, urlParts, 0, 0);
+}
+/**
+ * Compute a specificity score for a route pattern.
+ * Higher score = more specific = higher precedence.
+ * Literal segments score 2, single wildcards 1, multi-wildcards 0.
+ */
+export function routeSpecificity(pattern) {
+    const parts = splitPath(pattern);
+    let score = 0;
+    for (const part of parts) {
+        if (part === '**') {
+            // Globstar contributes nothing — least specific
+        }
+        else if (part === '*') {
+            score += 1;
+        }
+        else {
+            score += 2;
+        }
+    }
+    return score;
+}
+// ---------------------------------------------------------------------------
+// Internals
+// ---------------------------------------------------------------------------
+function splitPath(path) {
+    return path.split('/').filter(Boolean);
+}
+function matchParts(pattern, url, pi, ui) {
+    // Both exhausted — match
+    if (pi === pattern.length && ui === url.length)
+        return true;
+    // Pattern exhausted, URL has more — no match
+    if (pi === pattern.length)
+        return false;
+    const segment = pattern[pi];
+    // Multi-segment wildcard — matches one or more remaining URL segments
+    if (segment === '**') {
+        for (let skip = 1; skip <= url.length - ui; skip++) {
+            if (matchParts(pattern, url, pi + 1, ui + skip))
+                return true;
+        }
+        return false;
+    }
+    // URL exhausted but pattern still has non-** segments — no match
+    if (ui === url.length)
+        return false;
+    // Single-segment wildcard — matches any one segment
+    if (segment === '*') {
+        return matchParts(pattern, url, pi + 1, ui + 1);
+    }
+    // Literal segment — must match exactly
+    if (segment === url[ui]) {
+        return matchParts(pattern, url, pi + 1, ui + 1);
+    }
+    return false;
+}
+//# sourceMappingURL=route-matcher.js.map

package/dist/route-matcher.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"route-matcher.js","sourceRoot":"","sources":["../src/route-matcher.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,uDAAuD;AACvD,MAAM,UAAU,UAAU,CAAC,OAAe,EAAE,GAAW;IACrD,MAAM,YAAY,GAAG,SAAS,CAAC,OAAO,CAAC,CAAA;IACvC,MAAM,QAAQ,GAAG,SAAS,CAAC,GAAG,CAAC,CAAA;IAC/B,OAAO,UAAU,CAAC,YAAY,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC,CAAC,CAAA;AACjD,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,gBAAgB,CAAC,OAAe;IAC9C,MAAM,KAAK,GAAG,SAAS,CAAC,OAAO,CAAC,CAAA;IAChC,IAAI,KAAK,GAAG,CAAC,CAAA;IACb,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;YAClB,gDAAgD;QAClD,CAAC;aAAM,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;YACxB,KAAK,IAAI,CAAC,CAAA;QACZ,CAAC;aAAM,CAAC;YACN,KAAK,IAAI,CAAC,CAAA;QACZ,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAA;AACd,CAAC;AAED,8EAA8E;AAC9E,YAAY;AACZ,8EAA8E;AAE9E,SAAS,SAAS,CAAC,IAAY;IAC7B,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAA;AACxC,CAAC;AAED,SAAS,UAAU,CAAC,OAAiB,EAAE,GAAa,EAAE,EAAU,EAAE,EAAU;IAC1E,yBAAyB;IACzB,IAAI,EAAE,KAAK,OAAO,CAAC,MAAM,IAAI,EAAE,KAAK,GAAG,CAAC,MAAM;QAAE,OAAO,IAAI,CAAA;IAE3D,6CAA6C;IAC7C,IAAI,EAAE,KAAK,OAAO,CAAC,MAAM;QAAE,OAAO,KAAK,CAAA;IAEvC,MAAM,OAAO,GAAG,OAAO,CAAC,EAAE,CAAE,CAAA;IAE5B,sEAAsE;IACtE,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;QACrB,KAAK,IAAI,IAAI,GAAG,CAAC,EAAE,IAAI,IAAI,GAAG,CAAC,MAAM,GAAG,EAAE,EAAE,IAAI,EAAE,EAAE,CAAC;YACnD,IAAI,UAAU,CAAC,OAAO,EAAE,GAAG,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE,GAAG,IAAI,CAAC;gBAAE,OAAO,IAAI,CAAA;QAC9D,CAAC;QACD,OAAO,KAAK,CAAA;IACd,CAAC;IAED,iEAAiE;IACjE,IAAI,EAAE,KAAK,GAAG,CAAC,MAAM;QAAE,OAAO,KAAK,CAAA;IAEnC,oDAAoD;IACpD,IAAI,OAAO,KAAK,GAAG,EAAE,CAAC;QACpB,OAAO,UAAU,CAAC,OAAO,EAAE,GAAG,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC,CAAA;IACjD,CAAC;IAED,uCAAuC;IACvC,IAAI,OAAO,KAAK,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC;QACxB,OAAO,UAAU,CAAC,OAAO,EAAE,GAAG,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC,CAAA;IACjD,CAAC;IAED,OAAO,KAAK,CAAA;AACd,CAAC"}

package/dist/secret-vault.d.ts

@@ -0,0 +1,20 @@
+import type { KranthoConfig } from '@krantho/config';
+import type { ISecretVault } from '@krantho/persistence';
+/**
+ * The vault that encrypts with a key from the environment: AES-256-GCM under a
+ * subkey derived (HKDF) from `key`, a fresh IV for each value, and the setting
+ * name as authenticated data, so a sealed value copied to another setting does
+ * not open.
+ */
+export declare function createLocalSecretVault(key: string): ISecretVault;
+/**
+ * Build the vault `secrets.provider` selects, or undefined when the provider has
+ * no key to work with — a site then stores no secrets in its database. The local
+ * vault refuses a signing-secret fallback shorter than `secrets.local.key` may be.
+ *
+ * A new vault (a cloud key service) is one provider name in `@krantho/config`, one
+ * package that implements `ISecretVault`, and one case here, loaded by a literal
+ * dynamic import like the media file stores.
+ */
+export declare function createSecretVault(config: Pick<KranthoConfig, 'secrets' | 'auth'>): Promise<ISecretVault | undefined>;
+//# sourceMappingURL=secret-vault.d.ts.map

package/dist/secret-vault.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"secret-vault.d.ts","sourceRoot":"","sources":["../src/secret-vault.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,aAAa,EAAmB,MAAM,iBAAiB,CAAA;AACrE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAA;AAWxD;;;;;GAKG;AACH,wBAAgB,sBAAsB,CAAC,GAAG,EAAE,MAAM,GAAG,YAAY,CAyBhE;AAED;;;;;;;;GAQG;AACH,wBAAsB,iBAAiB,CACrC,MAAM,EAAE,IAAI,CAAC,aAAa,EAAE,SAAS,GAAG,MAAM,CAAC,GAC9C,OAAO,CAAC,YAAY,GAAG,SAAS,CAAC,CAQnC"}

package/dist/secret-vault.js

@@ -0,0 +1,60 @@
+import { createCipheriv, createDecipheriv, hkdfSync, randomBytes } from 'node:crypto';
+const IV_BYTES = 12;
+const TAG_BYTES = 16;
+/** The shortest key the vault accepts: HKDF derives a subkey, it does not stretch a weak secret */
+const MIN_KEY_LENGTH = 32;
+/** Subkey label: a key derived for stored secrets is never the key another purpose uses */
+const KEY_PURPOSE = 'krantho stored secrets';
+/**
+ * The vault that encrypts with a key from the environment: AES-256-GCM under a
+ * subkey derived (HKDF) from `key`, a fresh IV for each value, and the setting
+ * name as authenticated data, so a sealed value copied to another setting does
+ * not open.
+ */
+export function createLocalSecretVault(key) {
+    const subkey = Buffer.from(hkdfSync('sha256', key, '', KEY_PURPOSE, 32));
+    return {
+        label: 'Local key',
+        async seal(name, plaintext) {
+            const iv = randomBytes(IV_BYTES);
+            const cipher = createCipheriv('aes-256-gcm', subkey, iv);
+            cipher.setAAD(Buffer.from(name));
+            const body = Buffer.concat([cipher.update(plaintext, 'utf8'), cipher.final()]);
+            return Buffer.concat([iv, body, cipher.getAuthTag()]).toString('base64url');
+        },
+        async open(name, sealed) {
+            const raw = Buffer.from(sealed, 'base64url');
+            if (raw.length < IV_BYTES + TAG_BYTES)
+                return null;
+            try {
+                const decipher = createDecipheriv('aes-256-gcm', subkey, raw.subarray(0, IV_BYTES));
+                decipher.setAAD(Buffer.from(name));
+                decipher.setAuthTag(raw.subarray(raw.length - TAG_BYTES));
+                const body = raw.subarray(IV_BYTES, raw.length - TAG_BYTES);
+                return Buffer.concat([decipher.update(body), decipher.final()]).toString('utf8');
+            }
+            catch {
+                return null;
+            }
+        },
+    };
+}
+/**
+ * Build the vault `secrets.provider` selects, or undefined when the provider has
+ * no key to work with — a site then stores no secrets in its database. The local
+ * vault refuses a signing-secret fallback shorter than `secrets.local.key` may be.
+ *
+ * A new vault (a cloud key service) is one provider name in `@krantho/config`, one
+ * package that implements `ISecretVault`, and one case here, loaded by a literal
+ * dynamic import like the media file stores.
+ */
+export async function createSecretVault(config) {
+    const provider = config.secrets.provider;
+    switch (provider) {
+        case 'local': {
+            const key = config.secrets.local.key ?? config.auth.jwtSecret;
+            return key && key.length >= MIN_KEY_LENGTH ? createLocalSecretVault(key) : undefined;
+        }
+    }
+}
+//# sourceMappingURL=secret-vault.js.map

package/dist/secret-vault.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"secret-vault.js","sourceRoot":"","sources":["../src/secret-vault.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,gBAAgB,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,aAAa,CAAA;AAIrF,MAAM,QAAQ,GAAG,EAAE,CAAA;AACnB,MAAM,SAAS,GAAG,EAAE,CAAA;AAEpB,mGAAmG;AACnG,MAAM,cAAc,GAAG,EAAE,CAAA;AAEzB,2FAA2F;AAC3F,MAAM,WAAW,GAAG,wBAAwB,CAAA;AAE5C;;;;;GAKG;AACH,MAAM,UAAU,sBAAsB,CAAC,GAAW;IAChD,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,EAAE,WAAW,EAAE,EAAE,CAAC,CAAC,CAAA;IACxE,OAAO;QACL,KAAK,EAAE,WAAW;QAClB,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS;YACxB,MAAM,EAAE,GAAG,WAAW,CAAC,QAAQ,CAAC,CAAA;YAChC,MAAM,MAAM,GAAG,cAAc,CAAC,aAAa,EAAE,MAAM,EAAE,EAAE,CAAC,CAAA;YACxD,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAA;YAChC,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAA;YAC9E,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,MAAM,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAA;QAC7E,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM;YACrB,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,WAAW,CAAC,CAAA;YAC5C,IAAI,GAAG,CAAC,MAAM,GAAG,QAAQ,GAAG,SAAS;gBAAE,OAAO,IAAI,CAAA;YAClD,IAAI,CAAC;gBACH,MAAM,QAAQ,GAAG,gBAAgB,CAAC,aAAa,EAAE,MAAM,EAAE,GAAG,CAAC,QAAQ,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC,CAAA;gBACnF,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAA;gBAClC,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC,CAAA;gBACzD,MAAM,IAAI,GAAG,GAAG,CAAC,QAAQ,CAAC,QAAQ,EAAE,GAAG,CAAC,MAAM,GAAG,SAAS,CAAC,CAAA;gBAC3D,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAA;YAClF,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,IAAI,CAAA;YACb,CAAC;QACH,CAAC;KACF,CAAA;AACH,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,MAA+C;IAE/C,MAAM,QAAQ,GAAoB,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAA;IACzD,QAAQ,QAAQ,EAAE,CAAC;QACjB,KAAK,OAAO,CAAC,CAAC,CAAC;YACb,MAAM,GAAG,GAAG,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,SAAS,CAAA;YAC7D,OAAO,GAAG,IAAI,GAAG,CAAC,MAAM,IAAI,cAAc,CAAC,CAAC,CAAC,sBAAsB,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;QACtF,CAAC;IACH,CAAC;AACH,CAAC"}

package/dist/seo-config-io.d.ts

@@ -0,0 +1,51 @@
+/**
+ * SEO configuration export and import, and seeding the stored configuration.
+ *
+ * Writes per-entity YAML files in the layout `@krantho/config/node` reads
+ * definition files from (`readSeoDefinitions`), so production state
+ * round-trips into a project's `seo.configDir`.
+ *
+ * Layout:
+ *   krantho.seo/
+ *   ├── site/                          ← site-scope entities
+ *   │   ├── professional-service.yaml
+ *   │   ├── website.yaml
+ *   │   ├── founder.person.yaml        ← role.type.yaml
+ *   │   └── _field-mappings.yaml
+ *   ├── collections/{name}/            ← collection-scope entities
+ *   └── routes/{slug-encoded}.yaml
+ */
+import type { ISeoConfigAdapter } from '@krantho/persistence';
+import type { SeoConfigData } from '@krantho/seo-shared';
+/** What a seed writes: scopes of SEO configuration, as definition files or code define them */
+export interface SeoSeedConfig {
+    /** Site-level configuration */
+    site?: SeoConfigData | null | undefined;
+    /** Per-collection configuration, keyed by collection name */
+    collections?: Record<string, SeoConfigData> | undefined;
+    /** Per-route configuration, keyed by URL pattern */
+    routes?: Record<string, SeoConfigData> | undefined;
+}
+export interface ExportResult {
+    scopesExported: number;
+    entitiesExported: number;
+    filesWritten: string[];
+}
+export interface ImportResult {
+    scopesImported: number;
+    entitiesImported: number;
+    skipped: string[];
+    errors: Array<{
+        file: string;
+        message: string;
+    }>;
+}
+/** Export all SEO config from the database to a directory. */
+export declare function exportSeoConfig(adapter: ISeoConfigAdapter, targetDir: string): Promise<ExportResult>;
+/** Import SEO config from a directory into the database. */
+export declare function importSeoConfig(adapter: ISeoConfigAdapter, sourceDir: string, options?: {
+    mode?: 'seed' | 'overwrite' | undefined;
+} | undefined): Promise<ImportResult>;
+/** Apply a SeoSeedConfig to the database. */
+export declare function applySeedConfig(adapter: ISeoConfigAdapter, config: SeoSeedConfig, mode?: 'seed' | 'overwrite'): Promise<ImportResult>;
+//# sourceMappingURL=seo-config-io.d.ts.map

package/dist/seo-config-io.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"seo-config-io.d.ts","sourceRoot":"","sources":["../src/seo-config-io.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAKH,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAA;AAC7D,OAAO,KAAK,EAAE,aAAa,EAAmB,MAAM,qBAAqB,CAAA;AAOzE,+FAA+F;AAC/F,MAAM,WAAW,aAAa;IAC5B,+BAA+B;IAC/B,IAAI,CAAC,EAAE,aAAa,GAAG,IAAI,GAAG,SAAS,CAAA;IACvC,6DAA6D;IAC7D,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,aAAa,CAAC,GAAG,SAAS,CAAA;IACvD,oDAAoD;IACpD,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,aAAa,CAAC,GAAG,SAAS,CAAA;CACnD;AAED,MAAM,WAAW,YAAY;IAC3B,cAAc,EAAE,MAAM,CAAA;IACtB,gBAAgB,EAAE,MAAM,CAAA;IACxB,YAAY,EAAE,MAAM,EAAE,CAAA;CACvB;AAED,MAAM,WAAW,YAAY;IAC3B,cAAc,EAAE,MAAM,CAAA;IACtB,gBAAgB,EAAE,MAAM,CAAA;IACxB,OAAO,EAAE,MAAM,EAAE,CAAA;IACjB,MAAM,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;CACjD;AAMD,8DAA8D;AAC9D,wBAAsB,eAAe,CACnC,OAAO,EAAE,iBAAiB,EAC1B,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC,YAAY,CAAC,CAoDvB;AAMD,4DAA4D;AAC5D,wBAAsB,eAAe,CACnC,OAAO,EAAE,iBAAiB,EAC1B,SAAS,EAAE,MAAM,EACjB,OAAO,CAAC,EAAE;IAAE,IAAI,CAAC,EAAE,MAAM,GAAG,WAAW,GAAG,SAAS,CAAA;CAAE,GAAG,SAAS,GAChE,OAAO,CAAC,YAAY,CAAC,CAGvB;AAMD,6CAA6C;AAC7C,wBAAsB,eAAe,CACnC,OAAO,EAAE,iBAAiB,EAC1B,MAAM,EAAE,aAAa,EACrB,IAAI,GAAE,MAAM,GAAG,WAAoB,GAClC,OAAO,CAAC,YAAY,CAAC,CAmCvB"}