@krantho/server 0.0.0-stage → 1.0.1

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Descoped
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/dist/cdn/cloudfront.d.ts

@@ -0,0 +1,9 @@
+import type { CdnInvalidator } from './types.js';
+/**
+ * CloudFront purges through `CreateInvalidation` with `@aws-sdk/client-cloudfront`
+ * (an optional peer); credentials come from the SDK's default chain. A tag
+ * invalidates as a `#`-prefixed path. CloudFront only deletes, so the mode is
+ * ignored.
+ */
+export declare function createCloudFrontInvalidator(distributionId: string): CdnInvalidator;
+//# sourceMappingURL=cloudfront.d.ts.map

package/dist/cdn/cloudfront.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cloudfront.d.ts","sourceRoot":"","sources":["../../src/cdn/cloudfront.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,YAAY,CAAA;AAKhD;;;;;GAKG;AACH,wBAAgB,2BAA2B,CAAC,cAAc,EAAE,MAAM,GAAG,cAAc,CA0BlF"}

package/dist/cdn/cloudfront.js

@@ -0,0 +1,35 @@
+import { randomUUID } from 'node:crypto';
+import { purgeWithRetry } from './retry.js';
+/** CloudFront's API is global; requests are signed for us-east-1 */
+const CLOUDFRONT_REGION = 'us-east-1';
+/**
+ * CloudFront purges through `CreateInvalidation` with `@aws-sdk/client-cloudfront`
+ * (an optional peer); credentials come from the SDK's default chain. A tag
+ * invalidates as a `#`-prefixed path. CloudFront only deletes, so the mode is
+ * ignored.
+ */
+export function createCloudFrontInvalidator(distributionId) {
+    let client;
+    async function invalidate(items) {
+        if (items.length === 0)
+            return;
+        // One reference per purge: a retry of the same batch is idempotent.
+        const callerReference = `krantho-${Date.now()}-${randomUUID()}`;
+        await purgeWithRetry('cloudfront', async () => {
+            const sdk = await import('@aws-sdk/client-cloudfront');
+            client ??= new sdk.CloudFrontClient({ region: CLOUDFRONT_REGION });
+            await client.send(new sdk.CreateInvalidationCommand({
+                DistributionId: distributionId,
+                InvalidationBatch: {
+                    CallerReference: callerReference,
+                    Paths: { Quantity: items.length, Items: items },
+                },
+            }));
+        });
+    }
+    return {
+        purgeTags: (tags) => invalidate(tags.map((tag) => `#${tag}`)),
+        purgePaths: (paths) => invalidate([...paths]),
+    };
+}
+//# sourceMappingURL=cloudfront.js.map

package/dist/cdn/cloudfront.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cloudfront.js","sourceRoot":"","sources":["../../src/cdn/cloudfront.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AAExC,OAAO,EAAE,cAAc,EAAE,MAAM,YAAY,CAAA;AAG3C,oEAAoE;AACpE,MAAM,iBAAiB,GAAG,WAAW,CAAA;AAErC;;;;;GAKG;AACH,MAAM,UAAU,2BAA2B,CAAC,cAAsB;IAChE,IAAI,MAAoC,CAAA;IAExC,KAAK,UAAU,UAAU,CAAC,KAAe;QACvC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;YAAE,OAAM;QAC9B,oEAAoE;QACpE,MAAM,eAAe,GAAG,WAAW,IAAI,CAAC,GAAG,EAAE,IAAI,UAAU,EAAE,EAAE,CAAA;QAC/D,MAAM,cAAc,CAAC,YAAY,EAAE,KAAK,IAAI,EAAE;YAC5C,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,4BAA4B,CAAC,CAAA;YACtD,MAAM,KAAK,IAAI,GAAG,CAAC,gBAAgB,CAAC,EAAE,MAAM,EAAE,iBAAiB,EAAE,CAAC,CAAA;YAClE,MAAM,MAAM,CAAC,IAAI,CACf,IAAI,GAAG,CAAC,yBAAyB,CAAC;gBAChC,cAAc,EAAE,cAAc;gBAC9B,iBAAiB,EAAE;oBACjB,eAAe,EAAE,eAAe;oBAChC,KAAK,EAAE,EAAE,QAAQ,EAAE,KAAK,CAAC,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE;iBAChD;aACF,CAAC,CACH,CAAA;QACH,CAAC,CAAC,CAAA;IACJ,CAAC;IAED,OAAO;QACL,SAAS,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,GAAG,EAAE,CAAC,CAAC;QAC7D,UAAU,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC;KAC9C,CAAA;AACH,CAAC"}

package/dist/cdn/gcp.d.ts

@@ -0,0 +1,15 @@
+import type { CdnInvalidator } from './types.js';
+export interface GcpInvalidatorOptions {
+    project: string;
+    urlMap: string;
+    /** A fixed bearer token; without one, tokens come from the metadata server */
+    accessToken?: string | undefined;
+}
+/**
+ * Cloud CDN purges through the URL map's `invalidateCache`: tags in chunks
+ * to the `beta` endpoint, each path to `v1`. The bearer token is the
+ * configured one, or a metadata-server token reused until it expires. Cloud
+ * CDN only deletes, so the mode is ignored.
+ */
+export declare function createGcpInvalidator(options: GcpInvalidatorOptions): CdnInvalidator;
+//# sourceMappingURL=gcp.d.ts.map

package/dist/cdn/gcp.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"gcp.d.ts","sourceRoot":"","sources":["../../src/cdn/gcp.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,YAAY,CAAA;AAUhD,MAAM,WAAW,qBAAqB;IACpC,OAAO,EAAE,MAAM,CAAA;IACf,MAAM,EAAE,MAAM,CAAA;IACd,8EAA8E;IAC9E,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;CACjC;AAOD;;;;;GAKG;AACH,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,qBAAqB,GAAG,cAAc,CA2BnF"}

package/dist/cdn/gcp.js

@@ -0,0 +1,60 @@
+import { purgeWithRetry } from './retry.js';
+const COMPUTE_API = 'https://compute.googleapis.com/compute';
+const METADATA_TOKEN_URL = 'http://metadata.google.internal/computeMetadata/v1/instance/service-accounts/default/token';
+/** Cloud CDN accepts at most this many tags per invalidation request */
+const TAGS_PER_REQUEST = 10;
+/** Refresh a metadata token this long before it expires */
+const TOKEN_EXPIRY_MARGIN_MS = 60_000;
+/**
+ * Cloud CDN purges through the URL map's `invalidateCache`: tags in chunks
+ * to the `beta` endpoint, each path to `v1`. The bearer token is the
+ * configured one, or a metadata-server token reused until it expires. Cloud
+ * CDN only deletes, so the mode is ignored.
+ */
+export function createGcpInvalidator(options) {
+    const token = createTokenSource(options.accessToken);
+    const mapPath = `projects/${encodeURIComponent(options.project)}/global/urlMaps/${encodeURIComponent(options.urlMap)}/invalidateCache`;
+    function invalidate(version, body) {
+        return purgeWithRetry('gcp', async () => {
+            const response = await fetch(`${COMPUTE_API}/${version}/${mapPath}`, {
+                method: 'POST',
+                headers: { Authorization: `Bearer ${await token()}`, 'Content-Type': 'application/json' },
+                body: JSON.stringify(body),
+            });
+            if (!response.ok)
+                throw new Error(`invalidateCache answered ${response.status}`);
+        });
+    }
+    return {
+        async purgeTags(tags) {
+            for (let i = 0; i < tags.length; i += TAGS_PER_REQUEST) {
+                await invalidate('beta', { cacheTags: tags.slice(i, i + TAGS_PER_REQUEST) });
+            }
+        },
+        async purgePaths(paths) {
+            for (const path of paths) {
+                await invalidate('v1', { path });
+            }
+        },
+    };
+}
+/** The configured token, or a metadata-server token cached until shortly before it expires */
+function createTokenSource(accessToken) {
+    if (accessToken !== undefined)
+        return async () => accessToken;
+    let cached;
+    return async () => {
+        if (cached !== undefined && Date.now() < cached.expiresAt)
+            return cached.value;
+        const response = await fetch(METADATA_TOKEN_URL, { headers: { 'Metadata-Flavor': 'Google' } });
+        if (!response.ok)
+            throw new Error(`metadata server answered ${response.status}`);
+        const body = (await response.json());
+        cached = {
+            value: body.access_token,
+            expiresAt: Date.now() + body.expires_in * 1000 - TOKEN_EXPIRY_MARGIN_MS,
+        };
+        return cached.value;
+    };
+}
+//# sourceMappingURL=gcp.js.map

package/dist/cdn/gcp.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"gcp.js","sourceRoot":"","sources":["../../src/cdn/gcp.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,YAAY,CAAA;AAG3C,MAAM,WAAW,GAAG,wCAAwC,CAAA;AAC5D,MAAM,kBAAkB,GACtB,4FAA4F,CAAA;AAC9F,wEAAwE;AACxE,MAAM,gBAAgB,GAAG,EAAE,CAAA;AAC3B,2DAA2D;AAC3D,MAAM,sBAAsB,GAAG,MAAM,CAAA;AAcrC;;;;;GAKG;AACH,MAAM,UAAU,oBAAoB,CAAC,OAA8B;IACjE,MAAM,KAAK,GAAG,iBAAiB,CAAC,OAAO,CAAC,WAAW,CAAC,CAAA;IACpD,MAAM,OAAO,GAAG,YAAY,kBAAkB,CAAC,OAAO,CAAC,OAAO,CAAC,mBAAmB,kBAAkB,CAAC,OAAO,CAAC,MAAM,CAAC,kBAAkB,CAAA;IAEtI,SAAS,UAAU,CAAC,OAAsB,EAAE,IAA6B;QACvE,OAAO,cAAc,CAAC,KAAK,EAAE,KAAK,IAAI,EAAE;YACtC,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,WAAW,IAAI,OAAO,IAAI,OAAO,EAAE,EAAE;gBACnE,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,MAAM,KAAK,EAAE,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;gBACzF,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;aAC3B,CAAC,CAAA;YACF,IAAI,CAAC,QAAQ,CAAC,EAAE;gBAAE,MAAM,IAAI,KAAK,CAAC,4BAA4B,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAA;QAClF,CAAC,CAAC,CAAA;IACJ,CAAC;IAED,OAAO;QACL,KAAK,CAAC,SAAS,CAAC,IAAI;YAClB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,IAAI,gBAAgB,EAAE,CAAC;gBACvD,MAAM,UAAU,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,GAAG,gBAAgB,CAAC,EAAE,CAAC,CAAA;YAC9E,CAAC;QACH,CAAC;QACD,KAAK,CAAC,UAAU,CAAC,KAAK;YACpB,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;gBACzB,MAAM,UAAU,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,CAAC,CAAA;YAClC,CAAC;QACH,CAAC;KACF,CAAA;AACH,CAAC;AAED,8FAA8F;AAC9F,SAAS,iBAAiB,CAAC,WAA+B;IACxD,IAAI,WAAW,KAAK,SAAS;QAAE,OAAO,KAAK,IAAI,EAAE,CAAC,WAAW,CAAA;IAC7D,IAAI,MAAwD,CAAA;IAC5D,OAAO,KAAK,IAAI,EAAE;QAChB,IAAI,MAAM,KAAK,SAAS,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC,SAAS;YAAE,OAAO,MAAM,CAAC,KAAK,CAAA;QAC9E,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,kBAAkB,EAAE,EAAE,OAAO,EAAE,EAAE,iBAAiB,EAAE,QAAQ,EAAE,EAAE,CAAC,CAAA;QAC9F,IAAI,CAAC,QAAQ,CAAC,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,4BAA4B,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAA;QAChF,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAkB,CAAA;QACrD,MAAM,GAAG;YACP,KAAK,EAAE,IAAI,CAAC,YAAY;YACxB,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,UAAU,GAAG,IAAI,GAAG,sBAAsB;SACxE,CAAA;QACD,OAAO,MAAM,CAAC,KAAK,CAAA;IACrB,CAAC,CAAA;AACH,CAAC"}

package/dist/cdn/index.d.ts

@@ -0,0 +1,9 @@
+import type { CacheSection } from '@krantho/config';
+import type { CdnInvalidator } from './types.js';
+export type { CdnInvalidator } from './types.js';
+/**
+ * The CDN invalidator for the configured provider; null when no CDN is
+ * configured. Configuration validation guarantees each provider's settings.
+ */
+export declare function createCdnInvalidator(cache: CacheSection): CdnInvalidator | null;
+//# sourceMappingURL=index.d.ts.map

package/dist/cdn/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/cdn/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAA;AAGnD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,YAAY,CAAA;AAGhD,YAAY,EAAE,cAAc,EAAE,MAAM,YAAY,CAAA;AAEhD;;;GAGG;AACH,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,YAAY,GAAG,cAAc,GAAG,IAAI,CAkB/E"}

package/dist/cdn/index.js

@@ -0,0 +1,30 @@
+import { createCloudFrontInvalidator } from './cloudfront.js';
+import { createGcpInvalidator } from './gcp.js';
+import { createVercelInvalidator } from './vercel.js';
+/**
+ * The CDN invalidator for the configured provider; null when no CDN is
+ * configured. Configuration validation guarantees each provider's settings.
+ */
+export function createCdnInvalidator(cache) {
+    const { cdn } = cache;
+    switch (cdn.provider) {
+        case 'none':
+            return null;
+        case 'vercel':
+            return createVercelInvalidator();
+        case 'cloudfront':
+            return createCloudFrontInvalidator(required(cdn.cloudfront.distributionId, 'cache.cdn.cloudfront.distributionId'));
+        case 'gcp':
+            return createGcpInvalidator({
+                project: required(cdn.gcp.project, 'cache.cdn.gcp.project'),
+                urlMap: required(cdn.gcp.urlMap, 'cache.cdn.gcp.urlMap'),
+                accessToken: cdn.gcp.accessToken,
+            });
+    }
+}
+function required(value, name) {
+    if (value === undefined || value === '')
+        throw new Error(`${name} is required for this CDN provider`);
+    return value;
+}
+//# sourceMappingURL=index.js.map

package/dist/cdn/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/cdn/index.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,2BAA2B,EAAE,MAAM,iBAAiB,CAAA;AAC7D,OAAO,EAAE,oBAAoB,EAAE,MAAM,UAAU,CAAA;AAE/C,OAAO,EAAE,uBAAuB,EAAE,MAAM,aAAa,CAAA;AAIrD;;;GAGG;AACH,MAAM,UAAU,oBAAoB,CAAC,KAAmB;IACtD,MAAM,EAAE,GAAG,EAAE,GAAG,KAAK,CAAA;IACrB,QAAQ,GAAG,CAAC,QAAQ,EAAE,CAAC;QACrB,KAAK,MAAM;YACT,OAAO,IAAI,CAAA;QACb,KAAK,QAAQ;YACX,OAAO,uBAAuB,EAAE,CAAA;QAClC,KAAK,YAAY;YACf,OAAO,2BAA2B,CAChC,QAAQ,CAAC,GAAG,CAAC,UAAU,CAAC,cAAc,EAAE,qCAAqC,CAAC,CAC/E,CAAA;QACH,KAAK,KAAK;YACR,OAAO,oBAAoB,CAAC;gBAC1B,OAAO,EAAE,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,OAAO,EAAE,uBAAuB,CAAC;gBAC3D,MAAM,EAAE,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,EAAE,sBAAsB,CAAC;gBACxD,WAAW,EAAE,GAAG,CAAC,GAAG,CAAC,WAAW;aACjC,CAAC,CAAA;IACN,CAAC;AACH,CAAC;AAED,SAAS,QAAQ,CAAC,KAAyB,EAAE,IAAY;IACvD,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,EAAE;QACrC,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,oCAAoC,CAAC,CAAA;IAC9D,OAAO,KAAK,CAAA;AACd,CAAC"}

package/dist/cdn/listener.d.ts

@@ -0,0 +1,14 @@
+import type { CacheSection } from '@krantho/config';
+import type { ContentChangeListener } from '@krantho/core';
+import type { CdnInvalidator } from './types.js';
+/**
+ * The change listener that purges a CDN in front of the site, or null when
+ * nothing needs purging: `pages: 'cdn'` purges by tag, `pages: 'next-isr'`
+ * purges every path. Next.js on Vercel needs no listener — `revalidateTag`
+ * already purges Vercel's edge.
+ *
+ * A purge runs in the background: the listener returns at once, hands the
+ * purge to `waitUntil` when the host gives one, and never fails the write.
+ */
+export declare function cdnChangeListener(cache: CacheSection, invalidator: CdnInvalidator, waitUntil?: ((work: Promise<unknown>) => void) | undefined): ContentChangeListener | null;
+//# sourceMappingURL=listener.d.ts.map

package/dist/cdn/listener.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"listener.d.ts","sourceRoot":"","sources":["../../src/cdn/listener.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAA;AACnD,OAAO,KAAK,EAAqB,qBAAqB,EAAoB,MAAM,eAAe,CAAA;AAE/F,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,YAAY,CAAA;AAEhD;;;;;;;;GAQG;AACH,wBAAgB,iBAAiB,CAC/B,KAAK,EAAE,YAAY,EACnB,WAAW,EAAE,cAAc,EAC3B,SAAS,CAAC,EAAE,CAAC,CAAC,IAAI,EAAE,OAAO,CAAC,OAAO,CAAC,KAAK,IAAI,CAAC,GAAG,SAAS,GACzD,qBAAqB,GAAG,IAAI,CAe9B"}

package/dist/cdn/listener.js

@@ -0,0 +1,53 @@
+import { invalidationsFor } from '@krantho/core';
+/**
+ * The change listener that purges a CDN in front of the site, or null when
+ * nothing needs purging: `pages: 'cdn'` purges by tag, `pages: 'next-isr'`
+ * purges every path. Next.js on Vercel needs no listener — `revalidateTag`
+ * already purges Vercel's edge.
+ *
+ * A purge runs in the background: the listener returns at once, hands the
+ * purge to `waitUntil` when the host gives one, and never fails the write.
+ */
+export function cdnChangeListener(cache, invalidator, waitUntil) {
+    const purge = purgeFor(cache, invalidator);
+    if (!purge)
+        return null;
+    return (change) => {
+        const invalidations = invalidationsFor(change);
+        if (invalidations.length === 0)
+            return;
+        const work = Promise.resolve()
+            .then(() => purge(invalidations))
+            .catch((error) => console.error('[cdn] purge failed:', error));
+        try {
+            waitUntil?.(work);
+        }
+        catch (error) {
+            console.error('[cdn] waitUntil rejected the purge:', error);
+        }
+    };
+}
+function purgeFor(cache, invalidator) {
+    if (cache.pages === 'cdn')
+        return (invalidations) => purgeTags(invalidator, invalidations);
+    if (cache.pages === 'next-isr' && cache.cdn.provider !== 'vercel') {
+        // Every live change purges every path: a published document also shows on
+        // list pages whose paths krantho cannot know, and a per-path purge would
+        // leave them stale until `s-maxage`. The CDN's origin is Next's warm ISR
+        // cache, so a full purge costs only cheap origin hits.
+        return (invalidations) => {
+            const mode = invalidations.some((i) => i.mode === 'expire') ? 'expire' : 'stale';
+            return invalidator.purgePaths(['/*'], mode);
+        };
+    }
+    return null;
+}
+/** One tag purge per mode */
+async function purgeTags(invalidator, invalidations) {
+    const byMode = new Map();
+    for (const { tags, mode } of invalidations) {
+        byMode.set(mode, [...(byMode.get(mode) ?? []), ...tags]);
+    }
+    await Promise.all([...byMode].map(([mode, tags]) => invalidator.purgeTags(tags, mode)));
+}
+//# sourceMappingURL=listener.js.map

package/dist/cdn/listener.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"listener.js","sourceRoot":"","sources":["../../src/cdn/listener.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAA;AAGhD;;;;;;;;GAQG;AACH,MAAM,UAAU,iBAAiB,CAC/B,KAAmB,EACnB,WAA2B,EAC3B,SAA0D;IAE1D,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,EAAE,WAAW,CAAC,CAAA;IAC1C,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAA;IACvB,OAAO,CAAC,MAAM,EAAE,EAAE;QAChB,MAAM,aAAa,GAAG,gBAAgB,CAAC,MAAM,CAAC,CAAA;QAC9C,IAAI,aAAa,CAAC,MAAM,KAAK,CAAC;YAAE,OAAM;QACtC,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,EAAE;aAC3B,IAAI,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;aAChC,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,qBAAqB,EAAE,KAAK,CAAC,CAAC,CAAA;QACzE,IAAI,CAAC;YACH,SAAS,EAAE,CAAC,IAAI,CAAC,CAAA;QACnB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,KAAK,CAAC,qCAAqC,EAAE,KAAK,CAAC,CAAA;QAC7D,CAAC;IACH,CAAC,CAAA;AACH,CAAC;AAID,SAAS,QAAQ,CAAC,KAAmB,EAAE,WAA2B;IAChE,IAAI,KAAK,CAAC,KAAK,KAAK,KAAK;QAAE,OAAO,CAAC,aAAa,EAAE,EAAE,CAAC,SAAS,CAAC,WAAW,EAAE,aAAa,CAAC,CAAA;IAC1F,IAAI,KAAK,CAAC,KAAK,KAAK,UAAU,IAAI,KAAK,CAAC,GAAG,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAClE,0EAA0E;QAC1E,yEAAyE;QACzE,yEAAyE;QACzE,uDAAuD;QACvD,OAAO,CAAC,aAAa,EAAE,EAAE;YACvB,MAAM,IAAI,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAA;YAChF,OAAO,WAAW,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC,CAAA;QAC7C,CAAC,CAAA;IACH,CAAC;IACD,OAAO,IAAI,CAAA;AACb,CAAC;AAED,6BAA6B;AAC7B,KAAK,UAAU,SAAS,CACtB,WAA2B,EAC3B,aAA2C;IAE3C,MAAM,MAAM,GAAG,IAAI,GAAG,EAA8B,CAAA;IACpD,KAAK,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,aAAa,EAAE,CAAC;QAC3C,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,EAAE,GAAG,IAAI,CAAC,CAAC,CAAA;IAC1D,CAAC;IACD,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,WAAW,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,CAAA;AACzF,CAAC"}

package/dist/cdn/retry.d.ts

@@ -0,0 +1,3 @@
+/** Runs one purge request, retries it once on failure, then logs — never throws */
+export declare function purgeWithRetry(provider: string, request: () => Promise<void>): Promise<void>;
+//# sourceMappingURL=retry.d.ts.map

package/dist/cdn/retry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"retry.d.ts","sourceRoot":"","sources":["../../src/cdn/retry.ts"],"names":[],"mappings":"AAAA,mFAAmF;AACnF,wBAAsB,cAAc,CAClC,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,GAC3B,OAAO,CAAC,IAAI,CAAC,CAYf"}

package/dist/cdn/retry.js

@@ -0,0 +1,17 @@
+/** Runs one purge request, retries it once on failure, then logs — never throws */
+export async function purgeWithRetry(provider, request) {
+    try {
+        await request();
+        return;
+    }
+    catch {
+        // Retried once below; the second failure is the one logged.
+    }
+    try {
+        await request();
+    }
+    catch (error) {
+        console.error(`[cdn] ${provider} purge failed after a retry:`, error);
+    }
+}
+//# sourceMappingURL=retry.js.map

package/dist/cdn/retry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"retry.js","sourceRoot":"","sources":["../../src/cdn/retry.ts"],"names":[],"mappings":"AAAA,mFAAmF;AACnF,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,QAAgB,EAChB,OAA4B;IAE5B,IAAI,CAAC;QACH,MAAM,OAAO,EAAE,CAAA;QACf,OAAM;IACR,CAAC;IAAC,MAAM,CAAC;QACP,4DAA4D;IAC9D,CAAC;IACD,IAAI,CAAC;QACH,MAAM,OAAO,EAAE,CAAA;IACjB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,KAAK,CAAC,SAAS,QAAQ,8BAA8B,EAAE,KAAK,CAAC,CAAA;IACvE,CAAC;AACH,CAAC"}

package/dist/cdn/types.d.ts

@@ -0,0 +1,12 @@
+import type { InvalidationMode } from '@krantho/core';
+/**
+ * Purges cached pages from a CDN. A purge never throws: a failed request is
+ * retried once, then logged — a lost purge is bounded by the page's `s-maxage`.
+ */
+export interface CdnInvalidator {
+    /** Purge every cached response carrying any of the tags */
+    purgeTags(tags: readonly string[], mode: InvalidationMode): Promise<void>;
+    /** Purge cached responses by path (`/about`, `/about*`, `/*`) */
+    purgePaths(paths: readonly string[], mode: InvalidationMode): Promise<void>;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/cdn/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/cdn/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAA;AAErD;;;GAGG;AACH,MAAM,WAAW,cAAc;IAC7B,2DAA2D;IAC3D,SAAS,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,EAAE,IAAI,EAAE,gBAAgB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IACzE,iEAAiE;IACjE,UAAU,CAAC,KAAK,EAAE,SAAS,MAAM,EAAE,EAAE,IAAI,EAAE,gBAAgB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;CAC5E"}

package/dist/cdn/types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=types.js.map

package/dist/cdn/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/cdn/types.ts"],"names":[],"mappings":""}

package/dist/cdn/vercel.d.ts

@@ -0,0 +1,9 @@
+import type { CdnInvalidator } from './types.js';
+/**
+ * Vercel purges by tag through `@vercel/functions` (an optional peer). Both
+ * calls work inside a Vercel function and resolve as no-ops elsewhere.
+ * `expire` deletes, so the next request renders; `stale` serves the old page
+ * while it refreshes. Vercel has no path purge.
+ */
+export declare function createVercelInvalidator(): CdnInvalidator;
+//# sourceMappingURL=vercel.d.ts.map

package/dist/cdn/vercel.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"vercel.d.ts","sourceRoot":"","sources":["../../src/cdn/vercel.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,YAAY,CAAA;AAEhD;;;;;GAKG;AACH,wBAAgB,uBAAuB,IAAI,cAAc,CAoBxD"}

package/dist/cdn/vercel.js

@@ -0,0 +1,31 @@
+import { purgeWithRetry } from './retry.js';
+/**
+ * Vercel purges by tag through `@vercel/functions` (an optional peer). Both
+ * calls work inside a Vercel function and resolve as no-ops elsewhere.
+ * `expire` deletes, so the next request renders; `stale` serves the old page
+ * while it refreshes. Vercel has no path purge.
+ */
+export function createVercelInvalidator() {
+    let warnedPaths = false;
+    return {
+        async purgeTags(tags, mode) {
+            if (tags.length === 0)
+                return;
+            await purgeWithRetry('vercel', async () => {
+                const vercel = await import('@vercel/functions');
+                if (mode === 'expire') {
+                    await vercel.dangerouslyDeleteByTag([...tags], { revalidationDeadlineSeconds: 0 });
+                    return;
+                }
+                await vercel.invalidateByTag([...tags]);
+            });
+        },
+        async purgePaths() {
+            if (warnedPaths)
+                return;
+            warnedPaths = true;
+            console.warn('[cdn] vercel purges by tag only; path purges are ignored');
+        },
+    };
+}
+//# sourceMappingURL=vercel.js.map

package/dist/cdn/vercel.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"vercel.js","sourceRoot":"","sources":["../../src/cdn/vercel.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,YAAY,CAAA;AAG3C;;;;;GAKG;AACH,MAAM,UAAU,uBAAuB;IACrC,IAAI,WAAW,GAAG,KAAK,CAAA;IACvB,OAAO;QACL,KAAK,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI;YACxB,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;gBAAE,OAAM;YAC7B,MAAM,cAAc,CAAC,QAAQ,EAAE,KAAK,IAAI,EAAE;gBACxC,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,mBAAmB,CAAC,CAAA;gBAChD,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;oBACtB,MAAM,MAAM,CAAC,sBAAsB,CAAC,CAAC,GAAG,IAAI,CAAC,EAAE,EAAE,2BAA2B,EAAE,CAAC,EAAE,CAAC,CAAA;oBAClF,OAAM;gBACR,CAAC;gBACD,MAAM,MAAM,CAAC,eAAe,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,CAAA;YACzC,CAAC,CAAC,CAAA;QACJ,CAAC;QACD,KAAK,CAAC,UAAU;YACd,IAAI,WAAW;gBAAE,OAAM;YACvB,WAAW,GAAG,IAAI,CAAA;YAClB,OAAO,CAAC,IAAI,CAAC,0DAA0D,CAAC,CAAA;QAC1E,CAAC;KACF,CAAA;AACH,CAAC"}

package/dist/content-conflicts.d.ts

@@ -0,0 +1,18 @@
+import type { ContentConflict, IContentMigrationAdapter } from '@krantho/persistence';
+/** A conflict as a deployment records it */
+type NewConflict = Parameters<IContentMigrationAdapter['recordConflict']>[0];
+/**
+ * The document a conflict is about. Without a locale (a new file in the default locale, with
+ * no document yet) it matches the document in any locale.
+ */
+export interface ConflictDocument {
+    collection: string;
+    slug: string;
+    locale: string | undefined;
+}
+/** An imported document's open conflicts are settled: the repository's version now stands */
+export declare function resolveConflictsOf(migrationAdapter: IContentMigrationAdapter, open: readonly ContentConflict[], document: ConflictDocument): Promise<void>;
+/** Record a conflict unless the same one is still open from an earlier deployment */
+export declare function recordNewConflict(migrationAdapter: IContentMigrationAdapter, open: readonly ContentConflict[], conflict: NewConflict): Promise<void>;
+export {};
+//# sourceMappingURL=content-conflicts.d.ts.map

package/dist/content-conflicts.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"content-conflicts.d.ts","sourceRoot":"","sources":["../src/content-conflicts.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,wBAAwB,EAAE,MAAM,sBAAsB,CAAA;AAErF,4CAA4C;AAC5C,KAAK,WAAW,GAAG,UAAU,CAAC,wBAAwB,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;AAE5E;;;GAGG;AACH,MAAM,WAAW,gBAAgB;IAC/B,UAAU,EAAE,MAAM,CAAA;IAClB,IAAI,EAAE,MAAM,CAAA;IACZ,MAAM,EAAE,MAAM,GAAG,SAAS,CAAA;CAC3B;AAUD,6FAA6F;AAC7F,wBAAsB,kBAAkB,CACtC,gBAAgB,EAAE,wBAAwB,EAC1C,IAAI,EAAE,SAAS,eAAe,EAAE,EAChC,QAAQ,EAAE,gBAAgB,GACzB,OAAO,CAAC,IAAI,CAAC,CAMf;AAED,qFAAqF;AACrF,wBAAsB,iBAAiB,CACrC,gBAAgB,EAAE,wBAAwB,EAC1C,IAAI,EAAE,SAAS,eAAe,EAAE,EAChC,QAAQ,EAAE,WAAW,GACpB,OAAO,CAAC,IAAI,CAAC,CAQf"}

package/dist/content-conflicts.js

@@ -0,0 +1,22 @@
+function isConflictOf(conflict, document) {
+    return (conflict.collection === document.collection &&
+        conflict.slug === document.slug &&
+        (document.locale === undefined || conflict.locale === document.locale));
+}
+/** An imported document's open conflicts are settled: the repository's version now stands */
+export async function resolveConflictsOf(migrationAdapter, open, document) {
+    for (const conflict of open) {
+        if (isConflictOf(conflict, document)) {
+            await migrationAdapter.resolveConflict(conflict.id, 'use_repo');
+        }
+    }
+}
+/** Record a conflict unless the same one is still open from an earlier deployment */
+export async function recordNewConflict(migrationAdapter, open, conflict) {
+    const recorded = open.some((o) => isConflictOf(o, conflict) &&
+        o.repoChecksum === conflict.repoChecksum &&
+        o.dbChecksum === conflict.dbChecksum);
+    if (!recorded)
+        await migrationAdapter.recordConflict(conflict);
+}
+//# sourceMappingURL=content-conflicts.js.map

package/dist/content-conflicts.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"content-conflicts.js","sourceRoot":"","sources":["../src/content-conflicts.ts"],"names":[],"mappings":"AAeA,SAAS,YAAY,CAAC,QAAyB,EAAE,QAA0B;IACzE,OAAO,CACL,QAAQ,CAAC,UAAU,KAAK,QAAQ,CAAC,UAAU;QAC3C,QAAQ,CAAC,IAAI,KAAK,QAAQ,CAAC,IAAI;QAC/B,CAAC,QAAQ,CAAC,MAAM,KAAK,SAAS,IAAI,QAAQ,CAAC,MAAM,KAAK,QAAQ,CAAC,MAAM,CAAC,CACvE,CAAA;AACH,CAAC;AAED,6FAA6F;AAC7F,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,gBAA0C,EAC1C,IAAgC,EAChC,QAA0B;IAE1B,KAAK,MAAM,QAAQ,IAAI,IAAI,EAAE,CAAC;QAC5B,IAAI,YAAY,CAAC,QAAQ,EAAE,QAAQ,CAAC,EAAE,CAAC;YACrC,MAAM,gBAAgB,CAAC,eAAe,CAAC,QAAQ,CAAC,EAAE,EAAE,UAAU,CAAC,CAAA;QACjE,CAAC;IACH,CAAC;AACH,CAAC;AAED,qFAAqF;AACrF,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,gBAA0C,EAC1C,IAAgC,EAChC,QAAqB;IAErB,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CACxB,CAAC,CAAC,EAAE,EAAE,CACJ,YAAY,CAAC,CAAC,EAAE,QAAQ,CAAC;QACzB,CAAC,CAAC,YAAY,KAAK,QAAQ,CAAC,YAAY;QACxC,CAAC,CAAC,UAAU,KAAK,QAAQ,CAAC,UAAU,CACvC,CAAA;IACD,IAAI,CAAC,QAAQ;QAAE,MAAM,gBAAgB,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAA;AAChE,CAAC"}

package/dist/content-dates.d.ts

@@ -0,0 +1,35 @@
+/** The file in the content directory that holds each content file's last change */
+export declare const CONTENT_DATES_FILE = "dates.json";
+/**
+ * When each content file last changed, keyed by its path relative to the
+ * content directory with forward slashes (`docs/install.md`), as ISO 8601.
+ */
+export type ContentDates = Readonly<Record<string, string>>;
+/** The key a content file has in {@link ContentDates} */
+export declare function contentDateKey(contentDir: string, filePath: string): string;
+/**
+ * Write `<contentDir>/dates.json`: each markdown file's last git commit date.
+ *
+ * Run at build time, where the repository's history is available; the server
+ * reads the file when it imports content, so a page that was never edited in
+ * Studio carries the date its file last changed, not the date of the
+ * import. Answers null and writes nothing when the history is missing or
+ * shallow (a CI checkout without `fetch-depth: 0`) — every file would then
+ * carry the latest commit's date. A file that is not committed yet is left out.
+ */
+export declare function generateContentDates(contentDir: string): Promise<ContentDates | null>;
+/**
+ * The content's version: when the last commit that touched the content
+ * directory was made, in seconds since the epoch. It grows with every content
+ * change, including a deleted file. Null without the full history.
+ */
+export declare function contentVersion(contentDir: string): Promise<number | null>;
+/** The commit the content is built from (`git rev-parse HEAD`), or null outside a git checkout */
+export declare function contentCommit(contentDir: string): Promise<string | null>;
+/** Read `<contentDir>/dates.json`, or no dates when the build wrote none */
+export declare function loadContentDates(contentDir: string): Promise<ContentDates>;
+/** When a content file last changed, by its path; undefined dates the import now */
+export type ContentDateOf = (filePath: string) => string | undefined;
+/** Look up a content file's date in the dates the build wrote for `contentDir` */
+export declare function contentDateLookup(contentDir: string): Promise<ContentDateOf>;
+//# sourceMappingURL=content-dates.d.ts.map

package/dist/content-dates.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"content-dates.d.ts","sourceRoot":"","sources":["../src/content-dates.ts"],"names":[],"mappings":"AAOA,mFAAmF;AACnF,eAAO,MAAM,kBAAkB,eAAe,CAAA;AAE9C;;;GAGG;AACH,MAAM,MAAM,YAAY,GAAG,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAA;AAE3D,yDAAyD;AACzD,wBAAgB,cAAc,CAAC,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,MAAM,CAE3E;AAmBD;;;;;;;;;GASG;AACH,wBAAsB,oBAAoB,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,GAAG,IAAI,CAAC,CAe3F;AAED;;;;GAIG;AACH,wBAAsB,cAAc,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAK/E;AAED,kGAAkG;AAClG,wBAAsB,aAAa,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAG9E;AAED,4EAA4E;AAC5E,wBAAsB,gBAAgB,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,CAAC,CAYhF;AAED,oFAAoF;AACpF,MAAM,MAAM,aAAa,GAAG,CAAC,QAAQ,EAAE,MAAM,KAAK,MAAM,GAAG,SAAS,CAAA;AAEpE,kFAAkF;AAClF,wBAAsB,iBAAiB,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,CAAC,CAGlF"}

package/dist/content-dates.js

@@ -0,0 +1,85 @@
+import { execFile } from 'node:child_process';
+import { readdir, readFile, writeFile } from 'node:fs/promises';
+import { join, relative, sep } from 'node:path';
+import { promisify } from 'node:util';
+const run = promisify(execFile);
+/** The file in the content directory that holds each content file's last change */
+export const CONTENT_DATES_FILE = 'dates.json';
+/** The key a content file has in {@link ContentDates} */
+export function contentDateKey(contentDir, filePath) {
+    return relative(contentDir, filePath).split(sep).join('/');
+}
+async function git(cwd, args) {
+    try {
+        const { stdout } = await run('git', args, { cwd });
+        return stdout.trim();
+    }
+    catch {
+        return null;
+    }
+}
+/** Every markdown file under `dir`, recursively */
+async function markdownFiles(dir) {
+    const entries = await readdir(dir, { withFileTypes: true, recursive: true });
+    return entries
+        .filter((entry) => entry.isFile() && entry.name.endsWith('.md'))
+        .map((entry) => join(entry.parentPath, entry.name));
+}
+/**
+ * Write `<contentDir>/dates.json`: each markdown file's last git commit date.
+ *
+ * Run at build time, where the repository's history is available; the server
+ * reads the file when it imports content, so a page that was never edited in
+ * Studio carries the date its file last changed, not the date of the
+ * import. Answers null and writes nothing when the history is missing or
+ * shallow (a CI checkout without `fetch-depth: 0`) — every file would then
+ * carry the latest commit's date. A file that is not committed yet is left out.
+ */
+export async function generateContentDates(contentDir) {
+    const shallow = await git(contentDir, ['rev-parse', '--is-shallow-repository']);
+    if (shallow !== 'false')
+        return null;
+    const dates = {};
+    for (const file of await markdownFiles(contentDir)) {
+        const date = await git(contentDir, ['log', '-1', '--format=%cI', '--', file]);
+        if (date)
+            dates[contentDateKey(contentDir, file)] = new Date(date).toISOString();
+    }
+    await writeFile(join(contentDir, CONTENT_DATES_FILE), `${JSON.stringify(dates, null, 2)}\n`, 'utf-8');
+    return dates;
+}
+/**
+ * The content's version: when the last commit that touched the content
+ * directory was made, in seconds since the epoch. It grows with every content
+ * change, including a deleted file. Null without the full history.
+ */
+export async function contentVersion(contentDir) {
+    const shallow = await git(contentDir, ['rev-parse', '--is-shallow-repository']);
+    if (shallow !== 'false')
+        return null;
+    const seconds = Number(await git(contentDir, ['log', '-1', '--format=%ct', '--', '.']));
+    return Number.isInteger(seconds) && seconds > 0 ? seconds : null;
+}
+/** The commit the content is built from (`git rev-parse HEAD`), or null outside a git checkout */
+export async function contentCommit(contentDir) {
+    const commit = await git(contentDir, ['rev-parse', 'HEAD']);
+    return commit && /^[0-9a-f]{40}$/.test(commit) ? commit : null;
+}
+/** Read `<contentDir>/dates.json`, or no dates when the build wrote none */
+export async function loadContentDates(contentDir) {
+    try {
+        const raw = JSON.parse(await readFile(join(contentDir, CONTENT_DATES_FILE), 'utf-8'));
+        if (typeof raw !== 'object' || raw === null || Array.isArray(raw))
+            return {};
+        return Object.fromEntries(Object.entries(raw).filter((entry) => typeof entry[1] === 'string'));
+    }
+    catch {
+        return {};
+    }
+}
+/** Look up a content file's date in the dates the build wrote for `contentDir` */
+export async function contentDateLookup(contentDir) {
+    const dates = await loadContentDates(contentDir);
+    return (filePath) => dates[contentDateKey(contentDir, filePath)];
+}
+//# sourceMappingURL=content-dates.js.map

package/dist/content-dates.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"content-dates.js","sourceRoot":"","sources":["../src/content-dates.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAA;AAC7C,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAA;AAC/D,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,EAAE,MAAM,WAAW,CAAA;AAC/C,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAA;AAErC,MAAM,GAAG,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAA;AAE/B,mFAAmF;AACnF,MAAM,CAAC,MAAM,kBAAkB,GAAG,YAAY,CAAA;AAQ9C,yDAAyD;AACzD,MAAM,UAAU,cAAc,CAAC,UAAkB,EAAE,QAAgB;IACjE,OAAO,QAAQ,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;AAC5D,CAAC;AAED,KAAK,UAAU,GAAG,CAAC,GAAW,EAAE,IAAc;IAC5C,IAAI,CAAC;QACH,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,GAAG,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,GAAG,EAAE,CAAC,CAAA;QAClD,OAAO,MAAM,CAAC,IAAI,EAAE,CAAA;IACtB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAA;IACb,CAAC;AACH,CAAC;AAED,mDAAmD;AACnD,KAAK,UAAU,aAAa,CAAC,GAAW;IACtC,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,GAAG,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;IAC5E,OAAO,OAAO;SACX,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,EAAE,IAAI,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;SAC/D,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC,CAAA;AACvD,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,UAAkB;IAC3D,MAAM,OAAO,GAAG,MAAM,GAAG,CAAC,UAAU,EAAE,CAAC,WAAW,EAAE,yBAAyB,CAAC,CAAC,CAAA;IAC/E,IAAI,OAAO,KAAK,OAAO;QAAE,OAAO,IAAI,CAAA;IAEpC,MAAM,KAAK,GAA2B,EAAE,CAAA;IACxC,KAAK,MAAM,IAAI,IAAI,MAAM,aAAa,CAAC,UAAU,CAAC,EAAE,CAAC;QACnD,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,UAAU,EAAE,CAAC,KAAK,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,CAAA;QAC7E,IAAI,IAAI;YAAE,KAAK,CAAC,cAAc,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,CAAA;IAClF,CAAC;IACD,MAAM,SAAS,CACb,IAAI,CAAC,UAAU,EAAE,kBAAkB,CAAC,EACpC,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EACrC,OAAO,CACR,CAAA;IACD,OAAO,KAAK,CAAA;AACd,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,UAAkB;IACrD,MAAM,OAAO,GAAG,MAAM,GAAG,CAAC,UAAU,EAAE,CAAC,WAAW,EAAE,yBAAyB,CAAC,CAAC,CAAA;IAC/E,IAAI,OAAO,KAAK,OAAO;QAAE,OAAO,IAAI,CAAA;IACpC,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,GAAG,CAAC,UAAU,EAAE,CAAC,KAAK,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC,CAAA;IACvF,OAAO,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAA;AAClE,CAAC;AAED,kGAAkG;AAClG,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,UAAkB;IACpD,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,UAAU,EAAE,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC,CAAA;IAC3D,OAAO,MAAM,IAAI,gBAAgB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAA;AAChE,CAAC;AAED,4EAA4E;AAC5E,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,UAAkB;IACvD,IAAI,CAAC;QACH,MAAM,GAAG,GAAY,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,IAAI,CAAC,UAAU,EAAE,kBAAkB,CAAC,EAAE,OAAO,CAAC,CAAC,CAAA;QAC9F,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC;YAAE,OAAO,EAAE,CAAA;QAC5E,OAAO,MAAM,CAAC,WAAW,CACvB,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,CACxB,CAAC,KAAK,EAA6B,EAAE,CAAC,OAAO,KAAK,CAAC,CAAC,CAAC,KAAK,QAAQ,CACnE,CACF,CAAA;IACH,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAA;IACX,CAAC;AACH,CAAC;AAKD,kFAAkF;AAClF,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,UAAkB;IACxD,MAAM,KAAK,GAAG,MAAM,gBAAgB,CAAC,UAAU,CAAC,CAAA;IAChD,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,KAAK,CAAC,cAAc,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC,CAAA;AAClE,CAAC"}