@kywi-software/core 0.1.0

package/dist/hooks/plugin-loader.js

@@ -0,0 +1,163 @@
+/** Stable identity for a plugin — its `package` specifier, else its `name`. */
+export function pluginKeyOf(plugin) {
+    return plugin.package ?? plugin.name ?? '';
+}
+/** Resolve a plugin's static runtime config (`config`, falling back to `options`). */
+export function pluginRuntimeConfig(plugin) {
+    return plugin.config ?? plugin.options ?? {};
+}
+function extractSiteId(payload) {
+    const p = payload;
+    if (!p || typeof p !== 'object')
+        return undefined;
+    if (typeof p['siteId'] === 'string')
+        return p['siteId'];
+    const content = p['content'];
+    if (content && typeof content['siteId'] === 'string')
+        return content['siteId'];
+    return undefined;
+}
+/**
+ * Resolve a plugin's `scopeExtensions` to a plain object, invoking the factory
+ * form with the runtime context so config-bound helpers can be produced.
+ */
+export function resolvePluginScopeExtensions(plugin) {
+    const ext = plugin.scopeExtensions;
+    if (!ext)
+        return {};
+    if (typeof ext === 'function') {
+        return ext({ config: pluginRuntimeConfig(plugin) });
+    }
+    return ext;
+}
+/**
+ * Register a plugin's hooks on the registry and return its non-hook
+ * contributions (contentTypes / modules / scopeExtensions / adminExtensions).
+ *
+ * Each hook handler is wrapped so that at emit time it is skipped when:
+ *   - `plugin.siteIds` is set and the payload's siteId is not in the allow-list, or
+ *   - `options.isActive(pluginKey, siteId)` returns false (per-site deactivation).
+ * The plugin's runtime context ({ config }) is passed as the handler's 2nd arg.
+ */
+export function loadPluginHooks(plugin, registry, options) {
+    const key = pluginKeyOf(plugin);
+    const context = { config: pluginRuntimeConfig(plugin) };
+    const allowedSites = plugin.siteIds && plugin.siteIds.length > 0 ? new Set(plugin.siteIds) : null;
+    const isActive = options?.isActive;
+    if (plugin.hooks) {
+        for (const [eventName, handler] of Object.entries(plugin.hooks)) {
+            const gatedHandler = async (payload) => {
+                const siteId = extractSiteId(payload);
+                if (allowedSites && siteId !== undefined && !allowedSites.has(siteId))
+                    return;
+                if (isActive && !isActive(key, siteId))
+                    return;
+                return handler(payload, context);
+            };
+            registry.on(eventName, gatedHandler);
+        }
+    }
+    return {
+        contentTypes: plugin.contentTypes ?? [],
+        modules: plugin.modules ?? [],
+        scopeExtensions: resolvePluginScopeExtensions(plugin),
+        adminExtensions: plugin.adminExtensions,
+    };
+}
+function mergeResult(into, from) {
+    into.contentTypes.push(...from.contentTypes);
+    into.modules.push(...from.modules);
+    Object.assign(into.scopeExtensions, from.scopeExtensions);
+    if (from.adminExtensions) {
+        if (!into.adminExtensions)
+            into.adminExtensions = { navItems: [] };
+        into.adminExtensions.navItems.push(...from.adminExtensions.navItems);
+    }
+}
+/**
+ * Synchronous inline loader (back-compat). Registers hooks for every inline
+ * plugin definition and aggregates their contributions. Does NOT resolve
+ * `package`-only entries (see `loadAllPlugins` for the dynamic path).
+ */
+export function loadAllPluginHooks(plugins, registry, options) {
+    const result = { contentTypes: [], modules: [], scopeExtensions: {} };
+    for (const plugin of plugins) {
+        mergeResult(result, loadPluginHooks(plugin, registry, options));
+    }
+    return result;
+}
+/**
+ * Dynamically import a `package`-only plugin entry. Relative specifiers
+ * (starting with '.' or '/') are resolved against `baseDir`; bare names load
+ * from node_modules. The module's default export (or a named `plugin` export)
+ * is expected to be a `PluginDefinition`.
+ */
+export async function resolvePluginModule(spec, baseDir) {
+    let target = spec;
+    if (spec.startsWith('.') || spec.startsWith('/')) {
+        const path = await import('node:path');
+        const url = await import('node:url');
+        target = url.pathToFileURL(path.resolve(baseDir, spec)).href;
+    }
+    const mod = (await import(target));
+    const def = (mod['default'] ?? mod['plugin']);
+    if (!def || typeof def !== 'object') {
+        throw new Error(`Plugin "${spec}" did not export a plugin definition (default or "plugin")`);
+    }
+    return def;
+}
+/**
+ * Full plugin loader: resolves `package`-only entries via dynamic import, runs
+ * each plugin's `init(context)`, registers gated hooks, and aggregates
+ * contributions. A plugin that fails to resolve or init is skipped with a
+ * console error (one bad plugin must not take down boot).
+ */
+export async function loadAllPlugins(plugins, registry, options) {
+    const baseDir = options?.baseDir ?? process.cwd();
+    const result = { contentTypes: [], modules: [], scopeExtensions: {} };
+    for (const entry of plugins) {
+        try {
+            const isInline = !!entry.hooks ||
+                !!entry.contentTypes ||
+                !!entry.modules ||
+                !!entry.scopeExtensions ||
+                !!entry.adminExtensions ||
+                !!entry.init;
+            const plugin = isInline || !entry.package
+                ? entry
+                : { ...(await resolvePluginModule(entry.package, baseDir)), package: entry.package };
+            // Carry static config from the config entry onto a dynamically-loaded
+            // definition so init/hooks see the app author's config.
+            if (!isInline && (entry.config || entry.options)) {
+                plugin.config = entry.config ?? entry.options ?? {};
+            }
+            if (plugin.init) {
+                await plugin.init({ config: pluginRuntimeConfig(plugin) });
+            }
+            mergeResult(result, loadPluginHooks(plugin, registry, options));
+        }
+        catch (err) {
+            console.error(`[KywiPlugin] Failed to load plugin "${pluginKeyOf(entry)}":`, err);
+        }
+    }
+    return result;
+}
+/**
+ * Collect a plugin array's non-hook contributions WITHOUT touching a registry.
+ * Used by config resolution and scope construction, which must merge plugin
+ * contentTypes/modules/scopeExtensions without (re-)registering hooks. Inline
+ * definitions only — `package`-only entries are resolved by `loadAllPlugins`.
+ */
+export function collectPluginContributions(plugins) {
+    const result = { contentTypes: [], modules: [], scopeExtensions: {} };
+    for (const plugin of plugins) {
+        mergeResult(result, {
+            contentTypes: plugin.contentTypes ?? [],
+            modules: plugin.modules ?? [],
+            scopeExtensions: resolvePluginScopeExtensions(plugin),
+            adminExtensions: plugin.adminExtensions,
+        });
+    }
+    return result;
+}
+//# sourceMappingURL=plugin-loader.js.map

package/dist/hooks/plugin-loader.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"plugin-loader.js","sourceRoot":"","sources":["../../src/hooks/plugin-loader.ts"],"names":[],"mappings":"AAuEA,+EAA+E;AAC/E,MAAM,UAAU,WAAW,CAAC,MAAwB;IAClD,OAAO,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,IAAI,IAAI,EAAE,CAAA;AAC5C,CAAC;AAED,sFAAsF;AACtF,MAAM,UAAU,mBAAmB,CAAC,MAAwB;IAC1D,OAAO,MAAM,CAAC,MAAM,IAAI,MAAM,CAAC,OAAO,IAAI,EAAE,CAAA;AAC9C,CAAC;AAED,SAAS,aAAa,CAAC,OAAgB;IACrC,MAAM,CAAC,GAAG,OAAqD,CAAA;IAC/D,IAAI,CAAC,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAA;IACjD,IAAI,OAAO,CAAC,CAAC,QAAQ,CAAC,KAAK,QAAQ;QAAE,OAAO,CAAC,CAAC,QAAQ,CAAW,CAAA;IACjE,MAAM,OAAO,GAAG,CAAC,CAAC,SAAS,CAAwC,CAAA;IACnE,IAAI,OAAO,IAAI,OAAO,OAAO,CAAC,QAAQ,CAAC,KAAK,QAAQ;QAAE,OAAO,OAAO,CAAC,QAAQ,CAAW,CAAA;IACxF,OAAO,SAAS,CAAA;AAClB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,4BAA4B,CAAC,MAAwB;IACnE,MAAM,GAAG,GAAG,MAAM,CAAC,eAAe,CAAA;IAClC,IAAI,CAAC,GAAG;QAAE,OAAO,EAAE,CAAA;IACnB,IAAI,OAAO,GAAG,KAAK,UAAU,EAAE,CAAC;QAC9B,OAAO,GAAG,CAAC,EAAE,MAAM,EAAE,mBAAmB,CAAC,MAAM,CAAC,EAAE,CAAC,CAAA;IACrD,CAAC;IACD,OAAO,GAAG,CAAA;AACZ,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,eAAe,CAC7B,MAAwB,EACxB,QAAsB,EACtB,OAA2B;IAE3B,MAAM,GAAG,GAAG,WAAW,CAAC,MAAM,CAAC,CAAA;IAC/B,MAAM,OAAO,GAAyB,EAAE,MAAM,EAAE,mBAAmB,CAAC,MAAM,CAAC,EAAE,CAAA;IAC7E,MAAM,YAAY,GAChB,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;IAC9E,MAAM,QAAQ,GAAG,OAAO,EAAE,QAAQ,CAAA;IAElC,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;QACjB,KAAK,MAAM,CAAC,SAAS,EAAE,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;YAChE,MAAM,YAAY,GAAG,KAAK,EAAE,OAAgB,EAAE,EAAE;gBAC9C,MAAM,MAAM,GAAG,aAAa,CAAC,OAAO,CAAC,CAAA;gBACrC,IAAI,YAAY,IAAI,MAAM,KAAK,SAAS,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC;oBAAE,OAAM;gBAC7E,IAAI,QAAQ,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;oBAAE,OAAM;gBAC9C,OAAO,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,CAAA;YAClC,CAAC,CAAA;YACD,QAAQ,CAAC,EAAE,CAAC,SAAS,EAAE,YAAmB,CAAC,CAAA;QAC7C,CAAC;IACH,CAAC;IAED,OAAO;QACL,YAAY,EAAE,MAAM,CAAC,YAAY,IAAI,EAAE;QACvC,OAAO,EAAE,MAAM,CAAC,OAAO,IAAI,EAAE;QAC7B,eAAe,EAAE,4BAA4B,CAAC,MAAM,CAAC;QACrD,eAAe,EAAE,MAAM,CAAC,eAAe;KACxC,CAAA;AACH,CAAC;AAED,SAAS,WAAW,CAAC,IAAsB,EAAE,IAAsB;IACjE,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,YAAY,CAAC,CAAA;IAC5C,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,CAAA;IAClC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,eAAe,EAAE,IAAI,CAAC,eAAe,CAAC,CAAA;IACzD,IAAI,IAAI,CAAC,eAAe,EAAE,CAAC;QACzB,IAAI,CAAC,IAAI,CAAC,eAAe;YAAE,IAAI,CAAC,eAAe,GAAG,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAA;QAClE,IAAI,CAAC,eAAe,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,eAAe,CAAC,QAAQ,CAAC,CAAA;IACtE,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,kBAAkB,CAChC,OAA2B,EAC3B,QAAsB,EACtB,OAA2B;IAE3B,MAAM,MAAM,GAAqB,EAAE,YAAY,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,eAAe,EAAE,EAAE,EAAE,CAAA;IACvF,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,WAAW,CAAC,MAAM,EAAE,eAAe,CAAC,MAAM,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAA;IACjE,CAAC;IACD,OAAO,MAAM,CAAA;AACf,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,IAAY,EACZ,OAAe;IAEf,IAAI,MAAM,GAAG,IAAI,CAAA;IACjB,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QACjD,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,WAAW,CAAC,CAAA;QACtC,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,UAAU,CAAC,CAAA;QACpC,MAAM,GAAG,GAAG,CAAC,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC,IAAI,CAAA;IAC9D,CAAC;IACD,MAAM,GAAG,GAAG,CAAC,MAAM,MAAM,CAAC,MAAM,CAAC,CAA4B,CAAA;IAC7D,MAAM,GAAG,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,CAAiC,CAAA;IAC7E,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;QACpC,MAAM,IAAI,KAAK,CAAC,WAAW,IAAI,4DAA4D,CAAC,CAAA;IAC9F,CAAC;IACD,OAAO,GAAG,CAAA;AACZ,CAAC;AAOD;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,OAA2B,EAC3B,QAAsB,EACtB,OAA+B;IAE/B,MAAM,OAAO,GAAG,OAAO,EAAE,OAAO,IAAI,OAAO,CAAC,GAAG,EAAE,CAAA;IACjD,MAAM,MAAM,GAAqB,EAAE,YAAY,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,eAAe,EAAE,EAAE,EAAE,CAAA;IAEvF,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,IAAI,CAAC;YACH,MAAM,QAAQ,GACZ,CAAC,CAAC,KAAK,CAAC,KAAK;gBACb,CAAC,CAAC,KAAK,CAAC,YAAY;gBACpB,CAAC,CAAC,KAAK,CAAC,OAAO;gBACf,CAAC,CAAC,KAAK,CAAC,eAAe;gBACvB,CAAC,CAAC,KAAK,CAAC,eAAe;gBACvB,CAAC,CAAC,KAAK,CAAC,IAAI,CAAA;YACd,MAAM,MAAM,GACV,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO;gBACxB,CAAC,CAAC,KAAK;gBACP,CAAC,CAAC,EAAE,GAAG,CAAC,MAAM,mBAAmB,CAAC,KAAK,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAA;YAExF,sEAAsE;YACtE,wDAAwD;YACxD,IAAI,CAAC,QAAQ,IAAI,CAAC,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;gBACjD,MAAM,CAAC,MAAM,GAAG,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,OAAO,IAAI,EAAE,CAAA;YACrD,CAAC;YAED,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC;gBAChB,MAAM,MAAM,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,mBAAmB,CAAC,MAAM,CAAC,EAAE,CAAC,CAAA;YAC5D,CAAC;YAED,WAAW,CAAC,MAAM,EAAE,eAAe,CAAC,MAAM,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAA;QACjE,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,KAAK,CAAC,uCAAuC,WAAW,CAAC,KAAK,CAAC,IAAI,EAAE,GAAG,CAAC,CAAA;QACnF,CAAC;IACH,CAAC;IAED,OAAO,MAAM,CAAA;AACf,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,0BAA0B,CAAC,OAA2B;IACpE,MAAM,MAAM,GAAqB,EAAE,YAAY,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,eAAe,EAAE,EAAE,EAAE,CAAA;IACvF,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,WAAW,CAAC,MAAM,EAAE;YAClB,YAAY,EAAE,MAAM,CAAC,YAAY,IAAI,EAAE;YACvC,OAAO,EAAE,MAAM,CAAC,OAAO,IAAI,EAAE;YAC7B,eAAe,EAAE,4BAA4B,CAAC,MAAM,CAAC;YACrD,eAAe,EAAE,MAAM,CAAC,eAAe;SACxC,CAAC,CAAA;IACJ,CAAC;IACD,OAAO,MAAM,CAAA;AACf,CAAC"}

package/dist/hooks/registry.d.ts

@@ -0,0 +1,12 @@
+export type HookHandler = (payload: unknown) => Promise<unknown>;
+export interface HookRegistry {
+    on(event: string, handler: HookHandler): void;
+    off(event: string, handler: HookHandler): void;
+    emit(event: string, payload: unknown): Promise<void>;
+    renderEmit(event: string, payload: unknown): Promise<string>;
+    collectRender(event: string, payload: unknown): Promise<string[]>;
+}
+export declare function createHookRegistry(): HookRegistry;
+export declare function announceKywiEvent(registry: HookRegistry, name: string, payload: unknown): Promise<void>;
+export declare function renderKywiEvent(registry: HookRegistry, name: string, payload: unknown): Promise<string>;
+//# sourceMappingURL=registry.d.ts.map

package/dist/hooks/registry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"registry.d.ts","sourceRoot":"","sources":["../../src/hooks/registry.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,WAAW,GAAG,CAAC,OAAO,EAAE,OAAO,KAAK,OAAO,CAAC,OAAO,CAAC,CAAA;AAEhE,MAAM,WAAW,YAAY;IAC3B,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,WAAW,GAAG,IAAI,CAAA;IAC7C,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,WAAW,GAAG,IAAI,CAAA;IAC9C,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IACpD,UAAU,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,CAAA;IAC5D,aAAa,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAAA;CAClE;AAED,wBAAgB,kBAAkB,IAAI,YAAY,CAuDjD;AAED,wBAAsB,iBAAiB,CAAC,QAAQ,EAAE,YAAY,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CAE7G;AAED,wBAAsB,eAAe,CAAC,QAAQ,EAAE,YAAY,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,CAE7G"}

package/dist/hooks/registry.js

@@ -0,0 +1,76 @@
+export function createHookRegistry() {
+    const handlers = new Map();
+    return {
+        on(event, handler) {
+            const list = handlers.get(event);
+            if (list) {
+                list.push(handler);
+            }
+            else {
+                handlers.set(event, [handler]);
+            }
+        },
+        off(event, handler) {
+            const list = handlers.get(event);
+            if (list) {
+                const idx = list.indexOf(handler);
+                if (idx >= 0)
+                    list.splice(idx, 1);
+            }
+        },
+        async emit(event, payload) {
+            const list = handlers.get(event);
+            if (!list)
+                return;
+            for (const h of list) {
+                try {
+                    await h(payload);
+                }
+                catch (err) {
+                    console.error(`[KywiHook] Error in handler for "${event}":`, err);
+                }
+            }
+        },
+        async renderEmit(event, payload) {
+            const list = handlers.get(event);
+            if (!list)
+                return '';
+            const parts = [];
+            for (const h of list) {
+                try {
+                    const result = await h(payload);
+                    if (typeof result === 'string')
+                        parts.push(result);
+                }
+                catch (err) {
+                    console.error(`[KywiHook] Error in render handler for "${event}":`, err);
+                }
+            }
+            return parts.join('');
+        },
+        async collectRender(event, payload) {
+            const list = handlers.get(event);
+            if (!list)
+                return [];
+            const parts = [];
+            for (const h of list) {
+                try {
+                    const result = await h(payload);
+                    if (typeof result === 'string')
+                        parts.push(result);
+                }
+                catch (err) {
+                    console.error(`[KywiHook] Error in render handler for "${event}":`, err);
+                }
+            }
+            return parts;
+        },
+    };
+}
+export async function announceKywiEvent(registry, name, payload) {
+    return registry.emit(name, payload);
+}
+export async function renderKywiEvent(registry, name, payload) {
+    return registry.renderEmit(name, payload);
+}
+//# sourceMappingURL=registry.js.map

package/dist/hooks/registry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"registry.js","sourceRoot":"","sources":["../../src/hooks/registry.ts"],"names":[],"mappings":"AAUA,MAAM,UAAU,kBAAkB;IAChC,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAyB,CAAA;IAEjD,OAAO;QACL,EAAE,CAAC,KAAK,EAAE,OAAO;YACf,MAAM,IAAI,GAAG,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,CAAA;YAChC,IAAI,IAAI,EAAE,CAAC;gBAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;YAAC,CAAC;iBAAM,CAAC;gBAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,OAAO,CAAC,CAAC,CAAA;YAAC,CAAC;QAC1E,CAAC;QACD,GAAG,CAAC,KAAK,EAAE,OAAO;YAChB,MAAM,IAAI,GAAG,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,CAAA;YAChC,IAAI,IAAI,EAAE,CAAC;gBACT,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAA;gBACjC,IAAI,GAAG,IAAI,CAAC;oBAAE,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,CAAA;YACnC,CAAC;QACH,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,KAAK,EAAE,OAAO;YACvB,MAAM,IAAI,GAAG,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,CAAA;YAChC,IAAI,CAAC,IAAI;gBAAE,OAAM;YACjB,KAAK,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;gBACrB,IAAI,CAAC;oBACH,MAAM,CAAC,CAAC,OAAO,CAAC,CAAA;gBAClB,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACb,OAAO,CAAC,KAAK,CAAC,oCAAoC,KAAK,IAAI,EAAE,GAAG,CAAC,CAAA;gBACnE,CAAC;YACH,CAAC;QACH,CAAC;QACD,KAAK,CAAC,UAAU,CAAC,KAAK,EAAE,OAAO;YAC7B,MAAM,IAAI,GAAG,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,CAAA;YAChC,IAAI,CAAC,IAAI;gBAAE,OAAO,EAAE,CAAA;YACpB,MAAM,KAAK,GAAa,EAAE,CAAA;YAC1B,KAAK,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;gBACrB,IAAI,CAAC;oBACH,MAAM,MAAM,GAAG,MAAM,CAAC,CAAC,OAAO,CAAC,CAAA;oBAC/B,IAAI,OAAO,MAAM,KAAK,QAAQ;wBAAE,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;gBACpD,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACb,OAAO,CAAC,KAAK,CAAC,2CAA2C,KAAK,IAAI,EAAE,GAAG,CAAC,CAAA;gBAC1E,CAAC;YACH,CAAC;YACD,OAAO,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;QACvB,CAAC;QACD,KAAK,CAAC,aAAa,CAAC,KAAK,EAAE,OAAO;YAChC,MAAM,IAAI,GAAG,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,CAAA;YAChC,IAAI,CAAC,IAAI;gBAAE,OAAO,EAAE,CAAA;YACpB,MAAM,KAAK,GAAa,EAAE,CAAA;YAC1B,KAAK,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;gBACrB,IAAI,CAAC;oBACH,MAAM,MAAM,GAAG,MAAM,CAAC,CAAC,OAAO,CAAC,CAAA;oBAC/B,IAAI,OAAO,MAAM,KAAK,QAAQ;wBAAE,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;gBACpD,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACb,OAAO,CAAC,KAAK,CAAC,2CAA2C,KAAK,IAAI,EAAE,GAAG,CAAC,CAAA;gBAC1E,CAAC;YACH,CAAC;YACD,OAAO,KAAK,CAAA;QACd,CAAC;KACF,CAAA;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,QAAsB,EAAE,IAAY,EAAE,OAAgB;IAC5F,OAAO,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC,CAAA;AACrC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,QAAsB,EAAE,IAAY,EAAE,OAAgB;IAC1F,OAAO,QAAQ,CAAC,UAAU,CAAC,IAAI,EAAE,OAAO,CAAC,CAAA;AAC3C,CAAC"}

package/dist/hooks/stats-hooks.d.ts

@@ -0,0 +1,8 @@
+import type { HookRegistry } from './registry.js';
+import type { KywiDb } from '../db/client.js';
+/**
+ * Wire up hook listeners that keep kywi_content_stats.commentCount in sync
+ * with comment create/delete events.
+ */
+export declare function wireCommentStatsHooks(registry: HookRegistry, db: KywiDb): void;
+//# sourceMappingURL=stats-hooks.d.ts.map

package/dist/hooks/stats-hooks.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"stats-hooks.d.ts","sourceRoot":"","sources":["../../src/hooks/stats-hooks.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,eAAe,CAAA;AACjD,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,iBAAiB,CAAA;AAG7C;;;GAGG;AACH,wBAAgB,qBAAqB,CAAC,QAAQ,EAAE,YAAY,EAAE,EAAE,EAAE,MAAM,GAAG,IAAI,CAc9E"}

package/dist/hooks/stats-hooks.js

@@ -0,0 +1,22 @@
+import { incrementCommentCount, decrementCommentCount } from '../db/stats-queries.js';
+/**
+ * Wire up hook listeners that keep kywi_content_stats.commentCount in sync
+ * with comment create/delete events.
+ */
+export function wireCommentStatsHooks(registry, db) {
+    registry.on('comment:afterCreate', async (payload) => {
+        const { comment } = payload;
+        const contentId = comment?.contentId;
+        if (typeof contentId !== 'string')
+            return;
+        await incrementCommentCount(db, contentId);
+    });
+    registry.on('comment:afterDelete', async (payload) => {
+        const { comment } = payload;
+        const contentId = comment?.contentId;
+        if (typeof contentId !== 'string')
+            return;
+        await decrementCommentCount(db, contentId);
+    });
+}
+//# sourceMappingURL=stats-hooks.js.map

package/dist/hooks/stats-hooks.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"stats-hooks.js","sourceRoot":"","sources":["../../src/hooks/stats-hooks.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,qBAAqB,EAAE,qBAAqB,EAAE,MAAM,wBAAwB,CAAA;AAErF;;;GAGG;AACH,MAAM,UAAU,qBAAqB,CAAC,QAAsB,EAAE,EAAU;IACtE,QAAQ,CAAC,EAAE,CAAC,qBAAqB,EAAE,KAAK,EAAE,OAAgB,EAAE,EAAE;QAC5D,MAAM,EAAE,OAAO,EAAE,GAAG,OAA+C,CAAA;QACnE,MAAM,SAAS,GAAG,OAAO,EAAE,SAAS,CAAA;QACpC,IAAI,OAAO,SAAS,KAAK,QAAQ;YAAE,OAAM;QACzC,MAAM,qBAAqB,CAAC,EAAE,EAAE,SAAS,CAAC,CAAA;IAC5C,CAAC,CAAC,CAAA;IAEF,QAAQ,CAAC,EAAE,CAAC,qBAAqB,EAAE,KAAK,EAAE,OAAgB,EAAE,EAAE;QAC5D,MAAM,EAAE,OAAO,EAAE,GAAG,OAA+C,CAAA;QACnE,MAAM,SAAS,GAAG,OAAO,EAAE,SAAS,CAAA;QACpC,IAAI,OAAO,SAAS,KAAK,QAAQ;YAAE,OAAM;QACzC,MAAM,qBAAqB,CAAC,EAAE,EAAE,SAAS,CAAC,CAAA;IAC5C,CAAC,CAAC,CAAA;AACJ,CAAC"}

package/dist/hooks/webhook-dispatch.d.ts

@@ -0,0 +1,4 @@
+import type { KywiDb } from '../db/client.js';
+import type { HookRegistry } from './registry.js';
+export declare function wireWebhookDispatch(db: KywiDb, registry: HookRegistry, siteId: string): void;
+//# sourceMappingURL=webhook-dispatch.d.ts.map

package/dist/hooks/webhook-dispatch.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"webhook-dispatch.d.ts","sourceRoot":"","sources":["../../src/hooks/webhook-dispatch.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,iBAAiB,CAAA;AAC7C,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,eAAe,CAAA;AAgBjD,wBAAgB,mBAAmB,CAAC,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,YAAY,EAAE,MAAM,EAAE,MAAM,GAAG,IAAI,CAe5F"}

package/dist/hooks/webhook-dispatch.js

@@ -0,0 +1,59 @@
+import { createHmac } from 'node:crypto';
+import { listEndpointsForEvent, createDelivery, updateDeliveryStatus } from '../db/webhook-queries.js';
+const WEBHOOK_EVENTS = [
+    'content:afterCreate',
+    'content:afterUpdate',
+    'content:afterDelete',
+    'content:afterPublish',
+    'comment:afterCreate',
+    'comment:afterApprove',
+    'comment:afterDelete',
+    'category:afterCreate',
+    'category:afterUpdate',
+    'category:afterDelete',
+];
+export function wireWebhookDispatch(db, registry, siteId) {
+    for (const event of WEBHOOK_EVENTS) {
+        registry.on(event, async (payload) => {
+            const endpoints = await listEndpointsForEvent(db, siteId, event);
+            for (const endpoint of endpoints) {
+                const delivery = await createDelivery(db, {
+                    endpointId: endpoint.id,
+                    event,
+                    payload: payload,
+                });
+                // Fire-and-forget — webhook delivery shouldn't block the request
+                deliverWebhook(endpoint.url, endpoint.secret, event, payload, delivery.id, db).catch(() => { });
+            }
+        });
+    }
+}
+async function deliverWebhook(url, secret, event, payload, deliveryId, db) {
+    const body = JSON.stringify({ event, data: payload, timestamp: Date.now() });
+    const signature = createHmac('sha256', secret).update(body).digest('hex');
+    try {
+        const res = await fetch(url, {
+            method: 'POST',
+            headers: {
+                'Content-Type': 'application/json',
+                'X-Kywi-Signature': signature,
+                'X-Kywi-Event': event,
+            },
+            body,
+            signal: AbortSignal.timeout(10000),
+        });
+        await updateDeliveryStatus(db, deliveryId, {
+            status: res.ok ? 'delivered' : 'failed',
+            httpStatus: res.status,
+            attempts: 1,
+        });
+    }
+    catch {
+        await updateDeliveryStatus(db, deliveryId, {
+            status: 'failed',
+            attempts: 1,
+            nextRetryAt: new Date(Date.now() + 60000), // retry in 1 minute
+        });
+    }
+}
+//# sourceMappingURL=webhook-dispatch.js.map

package/dist/hooks/webhook-dispatch.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"webhook-dispatch.js","sourceRoot":"","sources":["../../src/hooks/webhook-dispatch.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AAGxC,OAAO,EAAE,qBAAqB,EAAE,cAAc,EAAE,oBAAoB,EAAE,MAAM,0BAA0B,CAAA;AAEtG,MAAM,cAAc,GAAG;IACrB,qBAAqB;IACrB,qBAAqB;IACrB,qBAAqB;IACrB,sBAAsB;IACtB,qBAAqB;IACrB,sBAAsB;IACtB,qBAAqB;IACrB,sBAAsB;IACtB,sBAAsB;IACtB,sBAAsB;CACvB,CAAA;AAED,MAAM,UAAU,mBAAmB,CAAC,EAAU,EAAE,QAAsB,EAAE,MAAc;IACpF,KAAK,MAAM,KAAK,IAAI,cAAc,EAAE,CAAC;QACnC,QAAQ,CAAC,EAAE,CAAC,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;YACnC,MAAM,SAAS,GAAG,MAAM,qBAAqB,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,CAAC,CAAA;YAChE,KAAK,MAAM,QAAQ,IAAI,SAAS,EAAE,CAAC;gBACjC,MAAM,QAAQ,GAAG,MAAM,cAAc,CAAC,EAAE,EAAE;oBACxC,UAAU,EAAE,QAAQ,CAAC,EAAE;oBACvB,KAAK;oBACL,OAAO,EAAE,OAAkC;iBAC5C,CAAC,CAAA;gBACF,iEAAiE;gBACjE,cAAc,CAAC,QAAQ,CAAC,GAAG,EAAE,QAAQ,CAAC,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAA;YAChG,CAAC;QACH,CAAC,CAAC,CAAA;IACJ,CAAC;AACH,CAAC;AAED,KAAK,UAAU,cAAc,CAC3B,GAAW,EACX,MAAc,EACd,KAAa,EACb,OAAgB,EAChB,UAAkB,EAClB,EAAU;IAEV,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,CAAA;IAC5E,MAAM,SAAS,GAAG,UAAU,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;IAEzE,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;YAC3B,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,cAAc,EAAE,kBAAkB;gBAClC,kBAAkB,EAAE,SAAS;gBAC7B,cAAc,EAAE,KAAK;aACtB;YACD,IAAI;YACJ,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,KAAK,CAAC;SACnC,CAAC,CAAA;QACF,MAAM,oBAAoB,CAAC,EAAE,EAAE,UAAU,EAAE;YACzC,MAAM,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,QAAQ;YACvC,UAAU,EAAE,GAAG,CAAC,MAAM;YACtB,QAAQ,EAAE,CAAC;SACZ,CAAC,CAAA;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,oBAAoB,CAAC,EAAE,EAAE,UAAU,EAAE;YACzC,MAAM,EAAE,QAAQ;YAChB,QAAQ,EAAE,CAAC;YACX,WAAW,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC,EAAE,oBAAoB;SAChE,CAAC,CAAA;IACJ,CAAC;AACH,CAAC"}

package/dist/hooks/webhook-retry.d.ts

@@ -0,0 +1,26 @@
+import type { KywiDb } from '../db/client.js';
+interface WebhookDelivery {
+    id: string;
+    endpointId: string;
+    event: string;
+    payload: Record<string, unknown>;
+    status: string;
+    attempts: number;
+    nextRetryAt: Date | null;
+}
+interface WebhookEndpoint {
+    id: string;
+    url: string;
+    secret: string;
+    isActive: boolean;
+}
+interface RetryDeps {
+    listPendingRetries: (db: KywiDb) => Promise<WebhookDelivery[]>;
+    getEndpointById: (db: KywiDb, id: string) => Promise<WebhookEndpoint | null>;
+}
+export interface WebhookRetryWorker {
+    tick(): Promise<void>;
+}
+export declare function createWebhookRetryWorker(db: KywiDb, deps: RetryDeps): WebhookRetryWorker;
+export {};
+//# sourceMappingURL=webhook-retry.d.ts.map

package/dist/hooks/webhook-retry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"webhook-retry.d.ts","sourceRoot":"","sources":["../../src/hooks/webhook-retry.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,iBAAiB,CAAA;AAG7C,UAAU,eAAe;IACvB,EAAE,EAAE,MAAM,CAAA;IACV,UAAU,EAAE,MAAM,CAAA;IAClB,KAAK,EAAE,MAAM,CAAA;IACb,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IAChC,MAAM,EAAE,MAAM,CAAA;IACd,QAAQ,EAAE,MAAM,CAAA;IAChB,WAAW,EAAE,IAAI,GAAG,IAAI,CAAA;CACzB;AAED,UAAU,eAAe;IACvB,EAAE,EAAE,MAAM,CAAA;IACV,GAAG,EAAE,MAAM,CAAA;IACX,MAAM,EAAE,MAAM,CAAA;IACd,QAAQ,EAAE,OAAO,CAAA;CAClB;AAED,UAAU,SAAS;IACjB,kBAAkB,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,OAAO,CAAC,eAAe,EAAE,CAAC,CAAA;IAC9D,eAAe,EAAE,CAAC,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,KAAK,OAAO,CAAC,eAAe,GAAG,IAAI,CAAC,CAAA;CAC7E;AAED,MAAM,WAAW,kBAAkB;IACjC,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC,CAAA;CACtB;AASD,wBAAgB,wBAAwB,CACtC,EAAE,EAAE,MAAM,EACV,IAAI,EAAE,SAAS,GACd,kBAAkB,CAwBpB"}

package/dist/hooks/webhook-retry.js

@@ -0,0 +1,65 @@
+import { createHmac } from 'node:crypto';
+import { updateDeliveryStatus } from '../db/webhook-queries.js';
+// Exponential backoff: 1min, 5min, 15min, 60min, ...
+function computeNextRetryDelay(attempts) {
+    const base = 60_000; // 1 minute
+    const factor = Math.min(attempts, 5);
+    return base * Math.pow(2, factor - 1);
+}
+export function createWebhookRetryWorker(db, deps) {
+    return {
+        async tick() {
+            const pending = await deps.listPendingRetries(db);
+            for (const delivery of pending) {
+                const endpoint = await deps.getEndpointById(db, delivery.endpointId);
+                if (!endpoint || !endpoint.isActive)
+                    continue;
+                // Fire-and-forget the retry delivery
+                retryDeliver(endpoint.url, endpoint.secret, delivery.event, delivery.payload, delivery.id, delivery.attempts, db).catch(() => { });
+                // Give fire-and-forget time to settle in the same tick
+                await new Promise(r => setTimeout(r, 5));
+            }
+        },
+    };
+}
+async function retryDeliver(url, secret, event, payload, deliveryId, previousAttempts, db) {
+    const body = JSON.stringify({ event, data: payload, timestamp: Date.now() });
+    const signature = createHmac('sha256', secret).update(body).digest('hex');
+    const newAttempts = previousAttempts + 1;
+    try {
+        const res = await fetch(url, {
+            method: 'POST',
+            headers: {
+                'Content-Type': 'application/json',
+                'X-Kywi-Signature': signature,
+                'X-Kywi-Event': event,
+            },
+            body,
+            signal: AbortSignal.timeout(10000),
+        });
+        if (res.ok) {
+            await updateDeliveryStatus(db, deliveryId, {
+                status: 'delivered',
+                httpStatus: res.status,
+                attempts: newAttempts,
+                nextRetryAt: null,
+            });
+        }
+        else {
+            await updateDeliveryStatus(db, deliveryId, {
+                status: 'failed',
+                httpStatus: res.status,
+                attempts: newAttempts,
+                nextRetryAt: new Date(Date.now() + computeNextRetryDelay(newAttempts)),
+            });
+        }
+    }
+    catch {
+        await updateDeliveryStatus(db, deliveryId, {
+            status: 'failed',
+            attempts: newAttempts,
+            nextRetryAt: new Date(Date.now() + computeNextRetryDelay(newAttempts)),
+        });
+    }
+}
+//# sourceMappingURL=webhook-retry.js.map

package/dist/hooks/webhook-retry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"webhook-retry.js","sourceRoot":"","sources":["../../src/hooks/webhook-retry.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AAExC,OAAO,EAAE,oBAAoB,EAAE,MAAM,0BAA0B,CAAA;AA4B/D,qDAAqD;AACrD,SAAS,qBAAqB,CAAC,QAAgB;IAC7C,MAAM,IAAI,GAAG,MAAM,CAAA,CAAC,WAAW;IAC/B,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAA;IACpC,OAAO,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,GAAG,CAAC,CAAC,CAAA;AACvC,CAAC;AAED,MAAM,UAAU,wBAAwB,CACtC,EAAU,EACV,IAAe;IAEf,OAAO;QACL,KAAK,CAAC,IAAI;YACR,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,EAAE,CAAC,CAAA;YACjD,KAAK,MAAM,QAAQ,IAAI,OAAO,EAAE,CAAC;gBAC/B,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,EAAE,EAAE,QAAQ,CAAC,UAAU,CAAC,CAAA;gBACpE,IAAI,CAAC,QAAQ,IAAI,CAAC,QAAQ,CAAC,QAAQ;oBAAE,SAAQ;gBAE7C,qCAAqC;gBACrC,YAAY,CACV,QAAQ,CAAC,GAAG,EACZ,QAAQ,CAAC,MAAM,EACf,QAAQ,CAAC,KAAK,EACd,QAAQ,CAAC,OAAO,EAChB,QAAQ,CAAC,EAAE,EACX,QAAQ,CAAC,QAAQ,EACjB,EAAE,CACH,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAA;gBAEjB,uDAAuD;gBACvD,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAA;YAC1C,CAAC;QACH,CAAC;KACF,CAAA;AACH,CAAC;AAED,KAAK,UAAU,YAAY,CACzB,GAAW,EACX,MAAc,EACd,KAAa,EACb,OAAgB,EAChB,UAAkB,EAClB,gBAAwB,EACxB,EAAU;IAEV,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,CAAA;IAC5E,MAAM,SAAS,GAAG,UAAU,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;IACzE,MAAM,WAAW,GAAG,gBAAgB,GAAG,CAAC,CAAA;IAExC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;YAC3B,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,cAAc,EAAE,kBAAkB;gBAClC,kBAAkB,EAAE,SAAS;gBAC7B,cAAc,EAAE,KAAK;aACtB;YACD,IAAI;YACJ,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,KAAK,CAAC;SACnC,CAAC,CAAA;QAEF,IAAI,GAAG,CAAC,EAAE,EAAE,CAAC;YACX,MAAM,oBAAoB,CAAC,EAAE,EAAE,UAAU,EAAE;gBACzC,MAAM,EAAE,WAAW;gBACnB,UAAU,EAAE,GAAG,CAAC,MAAM;gBACtB,QAAQ,EAAE,WAAW;gBACrB,WAAW,EAAE,IAAI;aAClB,CAAC,CAAA;QACJ,CAAC;aAAM,CAAC;YACN,MAAM,oBAAoB,CAAC,EAAE,EAAE,UAAU,EAAE;gBACzC,MAAM,EAAE,QAAQ;gBAChB,UAAU,EAAE,GAAG,CAAC,MAAM;gBACtB,QAAQ,EAAE,WAAW;gBACrB,WAAW,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,qBAAqB,CAAC,WAAW,CAAC,CAAC;aACvE,CAAC,CAAA;QACJ,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,oBAAoB,CAAC,EAAE,EAAE,UAAU,EAAE;YACzC,MAAM,EAAE,QAAQ;YAChB,QAAQ,EAAE,WAAW;YACrB,WAAW,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,qBAAqB,CAAC,WAAW,CAAC,CAAC;SACvE,CAAC,CAAA;IACJ,CAAC;AACH,CAAC"}

package/dist/host/index.d.ts

@@ -0,0 +1,66 @@
+export { assertProductionAuthSecret, isDevFallbackSecret, DEV_FALLBACK_SECRETS, } from '../auth/auth-secret.js';
+/** httpOnly cookie holding the short-lived access JWT (type=access). */
+export declare const ACCESS_COOKIE = "kywi_access_token";
+/** httpOnly cookie holding the long-lived refresh JWT (type=refresh). */
+export declare const REFRESH_COOKIE = "kywi_refresh_token";
+export declare const ACCESS_TTL_SECONDS: number;
+export declare const REFRESH_TTL_SECONDS: number;
+/**
+ * Refresh proactively once the access token has fewer than this many seconds of
+ * life left, so an in-flight request never races the expiry boundary.
+ */
+export declare const NEAR_EXPIRY_SECONDS = 120;
+/**
+ * Endpoints whose 2xx body carries fresh tokens the route handler persists into
+ * cookies. Enumerated explicitly (rather than "any auth/*") so delegated
+ * responses and error responses are never rewritten. `auth/refresh` returns only
+ * an access token; the others also return a refresh token at initial sign-in.
+ */
+export declare const TOKEN_ISSUING_PATHS: ReadonlySet<string>;
+export type AccessTokenStatus = 
+/** Verified, type=access, and comfortably before expiry — use as-is. */
+'valid'
+/** Verifiable but expired (or within NEAR_EXPIRY_SECONDS) — refresh it. */
+ | 'stale'
+/** Missing, malformed, wrong type, or bad signature — cannot be used. */
+ | 'invalid';
+/**
+ * Classify an access-token cookie value against the host's auth secret (which
+ * must be the same value handed to `createKywiApiHandler`, i.e.
+ * `config.auth.secret`). A well-formed token that only failed verification
+ * because it expired is still refreshable ('stale'); anything else is 'invalid'.
+ */
+export declare function classifyAccessToken(token: string | undefined, secret: string): Promise<AccessTokenStatus>;
+/**
+ * Pull the access/refresh tokens out of a token-issuing endpoint's JSON body
+ * (`{ data: { accessToken, refreshToken } }`). Missing/non-string fields and
+ * non-JSON bodies degrade to an empty object.
+ */
+export declare function parseSessionTokens(bodyText: string): {
+    accessToken?: string;
+    refreshToken?: string;
+};
+/** Options accepted by a Next.js cookie `set()` — declared structurally so this
+ * module needs no `next` import. */
+export interface SessionCookieOptions {
+    httpOnly: boolean;
+    sameSite: 'lax';
+    path: string;
+    secure: boolean;
+    maxAge: number;
+}
+/** A response whose cookies can be mutated — NextResponse satisfies this. */
+export interface CookieSettable {
+    cookies: {
+        set(name: string, value: string, options?: SessionCookieOptions): unknown;
+    };
+}
+/** Cookie options for the access token (maxAge 0 to clear). */
+export declare function accessCookieOptions(maxAge?: number): SessionCookieOptions;
+/** Cookie options for the refresh token (maxAge 0 to clear). */
+export declare function refreshCookieOptions(maxAge?: number): SessionCookieOptions;
+export declare function setAccessCookie(res: CookieSettable, token: string): void;
+export declare function setRefreshCookie(res: CookieSettable, token: string): void;
+/** Expire both session cookies (logout, or a dead/unrefreshable session). */
+export declare function clearSessionCookies(res: CookieSettable): void;
+//# sourceMappingURL=index.d.ts.map

package/dist/host/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/host/index.ts"],"names":[],"mappings":"AA8BA,OAAO,EACL,0BAA0B,EAC1B,mBAAmB,EACnB,oBAAoB,GACrB,MAAM,wBAAwB,CAAA;AAE/B,wEAAwE;AACxE,eAAO,MAAM,aAAa,sBAAsB,CAAA;AAChD,yEAAyE;AACzE,eAAO,MAAM,cAAc,uBAAuB,CAAA;AAGlD,eAAO,MAAM,kBAAkB,QAAU,CAAA;AACzC,eAAO,MAAM,mBAAmB,QAAmB,CAAA;AAEnD;;;GAGG;AACH,eAAO,MAAM,mBAAmB,MAAM,CAAA;AAEtC;;;;;GAKG;AACH,eAAO,MAAM,mBAAmB,EAAE,WAAW,CAAC,MAAM,CAMlD,CAAA;AAEF,MAAM,MAAM,iBAAiB;AAC3B,wEAAwE;AACtE,OAAO;AACT,2EAA2E;GACzE,OAAO;AACT,yEAAyE;GACvE,SAAS,CAAA;AAcb;;;;;GAKG;AACH,wBAAsB,mBAAmB,CACvC,KAAK,EAAE,MAAM,GAAG,SAAS,EACzB,MAAM,EAAE,MAAM,GACb,OAAO,CAAC,iBAAiB,CAAC,CAa5B;AAED;;;;GAIG;AACH,wBAAgB,kBAAkB,CAAC,QAAQ,EAAE,MAAM,GAAG;IACpD,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,YAAY,CAAC,EAAE,MAAM,CAAA;CACtB,CAUA;AAED;oCACoC;AACpC,MAAM,WAAW,oBAAoB;IACnC,QAAQ,EAAE,OAAO,CAAA;IACjB,QAAQ,EAAE,KAAK,CAAA;IACf,IAAI,EAAE,MAAM,CAAA;IACZ,MAAM,EAAE,OAAO,CAAA;IACf,MAAM,EAAE,MAAM,CAAA;CACf;AAED,6EAA6E;AAC7E,MAAM,WAAW,cAAc;IAC7B,OAAO,EAAE;QAAE,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,oBAAoB,GAAG,OAAO,CAAA;KAAE,CAAA;CACvF;AAkBD,+DAA+D;AAC/D,wBAAgB,mBAAmB,CAAC,MAAM,SAAqB,GAAG,oBAAoB,CAErF;AAED,gEAAgE;AAChE,wBAAgB,oBAAoB,CAAC,MAAM,SAAsB,GAAG,oBAAoB,CAEvF;AAED,wBAAgB,eAAe,CAAC,GAAG,EAAE,cAAc,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI,CAExE;AAED,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,cAAc,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI,CAEzE;AAED,6EAA6E;AAC7E,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,cAAc,GAAG,IAAI,CAG7D"}