@marktiderman/genesis-sites 0.0.0-stage → 0.1.0

package/dist/store-BzGw2i5J.d.ts

@@ -0,0 +1,377 @@
+import { F as FontChoice, a as SiteDoc, A as AnySectionDefinition, R as ReleasePage, o as ReleaseSnapshot, m as Release, j as PageMeta, P as PageDoc, d as PageKind, n as ReleaseMeta, c as SiteDocInput } from './registry-CdgVymsu.js';
+import { CanonicalBrand } from '@marktiderman/genesis-design-system';
+
+/**
+ * URL and path rules shared by the schemas, the renderer and the database.
+ *
+ * Every link a site renders comes from stored props, so every link is
+ * untrusted. A link is safe when it is a site path (`/about`), a fragment
+ * (`#pricing`), or an absolute `https:`, `http:`, `mailto:` or `tel:` URL.
+ * Everything else (`javascript:`, `data:`, `vbscript:`, protocol-relative
+ * `//host`, a backslash trick, a control character) is refused, both when a
+ * document is parsed and again when it is rendered.
+ */
+/** The longest URL a site stores. */
+declare const MAX_URL_LENGTH = 2048;
+/** Is this a link a site may render: a site path, a fragment, or an http(s), mailto or tel URL? */
+declare function isSafeHref(value: unknown): value is string;
+/** Is this a URL an image may load from: a site path or an `https:` URL? */
+declare function isSafeImageSrc(value: unknown): value is string;
+/** Is this an external (absolute) link, opened with `rel="noopener noreferrer"`? */
+declare function isExternalHref(href: string): boolean;
+/**
+ * A page's path: `/`, or lowercase segments of letters, digits and hyphens
+ * (`/about`, `/classes/strength`). No trailing slash, no dots, at most 8
+ * segments and 200 characters. The database checks the same pattern.
+ */
+declare const PAGE_PATH: RegExp;
+declare const MAX_PAGE_PATH_LENGTH = 200;
+/**
+ * Paths a site never owns, because it shares its hostname with the host app:
+ * the app's API and server functions, its auth callbacks, and this package's
+ * own assets. A host passes its own list (or a predicate) to
+ * `handleSiteRequest` and `validatePagePath`; the database's default is the
+ * same list (`genesis_sites.reserved_paths()`).
+ */
+declare const DEFAULT_RESERVED_PATHS: readonly string[];
+/** A reserved-path rule: a list of path prefixes, or a predicate. */
+type ReservedPaths = readonly string[] | ((path: string) => boolean);
+/** Is `path` reserved: equal to a reserved prefix, or under it (`/api`, `/api/x`, not `/apiary`)? */
+declare function isReservedPath(path: string, reserved?: ReservedPaths): boolean;
+/** Problems with a page path, empty when it is fine. */
+declare function pagePathProblems(path: unknown, reserved?: ReservedPaths): string[];
+/** Throws when the path can't be a page's. */
+declare function validatePagePath(path: string, reserved?: ReservedPaths): string;
+/**
+ * The page path a request path asks for: decoded, lowercase, without a
+ * trailing slash. Returns null for a path that can't name a page (so the
+ * caller falls through to the host app).
+ */
+declare function normalizeRequestPath(pathname: string): string | null;
+
+/**
+ * A site's theme, from its brand: one `<style>` of CSS variables per site.
+ *
+ * The brand comes from the host (`BrandSource`) at render time, never copied
+ * into the site. A publish checks the brand's colours and records its hash;
+ * a page rendered with a different brand (edited since) is served with a
+ * short cache and a warning until the site is published again, which checks
+ * the new colours and purges the old pages. It
+ * may be a full `CanonicalBrand` or the minimal shape a brand screen collects
+ * (`SiteBrand`: a name, a primary colour for light and dark, a heading and a
+ * body font from a fixed list, a logo).
+ *
+ * The variables are design-system `themeFromBrand(brand).variables` (the
+ * brand's scales, `--color-*`) plus the genesis-ui roles the sections are
+ * styled with (`--primary`, `--background`, `--font-display`, ...), so the
+ * one shared stylesheet serves every brand. Foregrounds are picked for
+ * contrast: the text on a primary button is whichever of the brand's light
+ * or dark text reads better, and the focus ring falls back to the text
+ * colour when the primary is too faint on the page.
+ */
+
+/** The minimal brand: what a brand screen collects. */
+interface SiteBrand {
+    name: string;
+    colors: {
+        /** The primary colour in light mode, as #rrggbb. */
+        primary: string;
+        /** The primary in dark mode. Default: the light primary, lightened. */
+        primaryDark?: string;
+    };
+    fonts?: {
+        heading?: FontChoice;
+        body?: FontChoice;
+    };
+    /** The logo, shown in the header and footer and named in JSON-LD. */
+    logo?: {
+        src: string;
+        alt?: string;
+    };
+}
+/** What a `BrandSource` may return: the minimal brand, or a full design-system brand (with an optional logo). */
+type BrandInput = SiteBrand | (CanonicalBrand & {
+    logo?: {
+        src: string;
+        alt?: string;
+    };
+    displayName?: string;
+});
+/** The host's brand, read at render time. */
+interface BrandSource {
+    getBrand(siteId: string): Promise<BrandInput | null> | BrandInput | null;
+}
+interface FontInfo {
+    label: string;
+    /** The CSS font stack. */
+    stack: string;
+    /** The Google Fonts `family=` value, when it isn't a system font. */
+    google?: string;
+}
+/** The fonts a brand or site may choose. */
+declare const FONT_CHOICES: Readonly<Record<FontChoice, FontInfo>>;
+/** `#abc` / `#aabbcc` → [r, g, b] (0–255). Throws on anything else. */
+declare function parseHex(hex: string): [number, number, number];
+/** WCAG relative luminance. */
+declare function luminance(hex: string): number;
+/** WCAG contrast ratio (1–21) of two colours. */
+declare function contrastRatio(a: string, b: string): number;
+/** Mix a colour toward white (`amount` > 0) or black (< 0), 0–1. */
+declare function mix(hex: string, amount: number): string;
+/** `#4f46e5` → `243 75% 59%`: the HSL triplet genesis-ui's variables hold. */
+declare function hexToHslTriplet(hex: string): string;
+declare function isSiteBrand(brand: BrandInput): brand is SiteBrand;
+/** The minimal brand as a design-system brand (Genesis's neutrals and status colours, the brand's primary and fonts). */
+declare function toCanonicalBrand(brand: BrandInput): CanonicalBrand;
+/** The brand's display name: the minimal brand's `name`, a canonical brand's `displayName` or `name`. */
+declare function brandDisplayName(brand: BrandInput): string;
+interface ThemePair {
+    /** What the pair is, for an accessibility issue: "body text on the page". */
+    name: string;
+    mode: "light" | "dark";
+    foreground: string;
+    background: string;
+    /** The ratio it must reach: 4.5 for text, 3 for the focus ring. */
+    minimum: number;
+}
+interface SiteTheme {
+    light: Record<string, string>;
+    dark: Record<string, string>;
+    colorScheme: "light" | "dark" | "auto";
+    /** The fonts the site uses, to load. */
+    fonts: FontInfo[];
+    /** The colour pairs the sections draw, for the contrast check. */
+    pairs: ThemePair[];
+    /** Hash of the brand and overrides it was made from (recorded on a release). */
+    brandHash: string;
+}
+/** FNV-1a, 32 bits twice: a short, stable hash for cache keys and release records (not for security). */
+declare function stableHash(value: unknown): string;
+/**
+ * The site's theme: variables for light and dark, the fonts to load, the
+ * pairs the contrast check reads, and a hash of what it was made from.
+ *
+ * @stability Beta
+ */
+declare function siteTheme(brand: BrandInput, theme?: Partial<SiteDoc["theme"]>): SiteTheme;
+/** The site's `<style>` body: the light variables on `:root`, the dark ones by scheme. */
+declare function themeCss(theme: SiteTheme): string;
+
+interface SiteIssue {
+    severity: "error" | "warning";
+    code: string;
+    message: string;
+    pageId?: string;
+    path?: string;
+    sectionId?: string;
+}
+declare const isPublishable: (issues: readonly SiteIssue[]) => boolean;
+type Lookup = (type: string) => AnySectionDefinition | undefined;
+/** Issues on one page: its sections, limits and the h1. */
+declare function checkPage(page: ReleasePage, lookup?: Lookup, reserved?: ReservedPaths): SiteIssue[];
+/** Issues with the site's own parts: header, footer, redirects. */
+declare function checkSiteDoc(site: SiteDoc, lookup?: Lookup): SiteIssue[];
+/** Colour pairs below their minimum (1.4.3 text, 1.4.11 focus ring). */
+declare function checkContrast(theme: SiteTheme): SiteIssue[];
+interface CheckReleaseOptions {
+    /** The brand's theme: adds the contrast check. */
+    theme?: SiteTheme;
+    lookup?: Lookup;
+    reserved?: ReservedPaths;
+}
+/**
+ * Everything a publish checks, for a whole release.
+ *
+ * @stability Beta
+ */
+declare function checkRelease(snapshot: ReleaseSnapshot, options?: CheckReleaseOptions): SiteIssue[];
+/**
+ * A rendered page's outline, from its HTML: one `h1`, no skipped heading
+ * level, every `<img>` with an `alt` attribute. For tests and for hosts that
+ * want to audit what was actually served.
+ */
+declare function checkHtmlOutline(html: string): SiteIssue[];
+
+/**
+ * Where sites live: the `SiteStore` contract, the publish pipeline every
+ * store shares, cache invalidation, and an in-memory store for tests, demos
+ * and previews. `@marktiderman/genesis-sites/supabase` has the Postgres one.
+ */
+
+type SaveResult<T> = {
+    rev: number;
+} | {
+    conflict: T;
+    rev: number;
+};
+declare const isConflict: <T>(result: SaveResult<T>) => result is {
+    conflict: T;
+    rev: number;
+};
+interface AssetMeta {
+    alt?: string;
+    width?: number;
+    height?: number;
+    /** The file's name, for the storage key. */
+    name?: string;
+}
+interface Asset {
+    id: string;
+    siteId: string;
+    /** The storage key: always `sites/<siteId>/...`, so storage policies can scope by site. */
+    path: string;
+    /** Where the browser loads it. */
+    url: string;
+    mime: string;
+    alt: string | null;
+    width: number | null;
+    height: number | null;
+}
+interface PublishOptions {
+    note?: string;
+    /** The brand to check contrast against (and record the hash of). Required: a publish without it is blocked. */
+    brand?: BrandInput | null;
+    reserved?: ReservedPaths;
+}
+interface NewPage {
+    path: string;
+    kind?: PageKind;
+    doc: PageDoc;
+}
+interface SiteDraft {
+    site: SiteDoc;
+    rev: number;
+}
+interface PageDraft {
+    doc: PageDoc;
+    rev: number;
+    siteId: string;
+    path: string;
+    kind: PageKind;
+}
+/**
+ * A site's storage.
+ *
+ * Drafts change by compare-and-swap on a revision: a save names the revision
+ * it started from and gets the new one, or the current document when someone
+ * saved first. A publish checks the drafts (`checkRelease`) and freezes them
+ * into an immutable release that the live site points at; a rollback moves
+ * the pointer back. `getLive` is the public read and needs no session.
+ *
+ * @stability Beta
+ */
+interface SiteStore {
+    /** The release the live site serves, or null (not published, archived, or unknown). */
+    getLive(siteId: string): Promise<Release | null>;
+    getDraft(siteId: string): Promise<SiteDraft | null>;
+    saveSiteDraft(siteId: string, rev: number, site: SiteDoc): Promise<SaveResult<SiteDoc>>;
+    listPages(siteId: string): Promise<PageMeta[]>;
+    getPageDraft(pageId: string): Promise<PageDraft | null>;
+    savePageDraft(pageId: string, rev: number, doc: PageDoc): Promise<SaveResult<PageDoc>>;
+    createPage(siteId: string, page: NewPage): Promise<PageMeta>;
+    /** Move a page to a new path; the old path redirects to it (301). */
+    movePage(pageId: string, path: string): Promise<PageMeta>;
+    deletePage(pageId: string): Promise<void>;
+    publish(siteId: string, options?: PublishOptions): Promise<Release>;
+    rollback(siteId: string, releaseId: string): Promise<Release>;
+    listReleases(siteId: string): Promise<ReleaseMeta[]>;
+    putAsset?(siteId: string, file: Blob, meta?: AssetMeta): Promise<Asset>;
+}
+/** A publish the checks refused: `issues` lists why. */
+declare class PublishBlockedError extends Error {
+    readonly issues: SiteIssue[];
+    constructor(issues: SiteIssue[]);
+}
+/** Someone saved first; the store's current document is in the result of the save that raised this. */
+declare class SiteConflictError extends Error {
+    constructor(message?: string);
+}
+interface PreparedRelease {
+    snapshot: ReleaseSnapshot;
+    issues: SiteIssue[];
+    /** Drafts whose props a migration changed: a store saves these before it publishes. */
+    migratedPages: {
+        id: string;
+        doc: PageDoc;
+    }[];
+    migratedSite: SiteDoc | null;
+    brandHash: string | null;
+}
+/**
+ * The publish pipeline every store shares: migrate every node, freeze the
+ * drafts into a snapshot, and check it. Throws `PublishBlockedError` when a
+ * check fails. Pages come in the order they are listed.
+ *
+ * @stability Beta
+ */
+declare function prepareRelease(site: SiteDoc, pages: readonly {
+    id: string;
+    path: string;
+    kind: PageKind;
+    doc: PageDoc;
+}[], options?: PublishOptions): PreparedRelease;
+/** The cache tag every response of a site carries (`Vercel-Cache-Tag`). */
+declare function siteCacheTag(siteId: string): string;
+/** The cache tag of every page that embeds a form: purge it when the host changes that form. */
+declare function formCacheTag(slug: string): string;
+/** Why a site's cache is being purged. */
+interface InvalidationInfo {
+    siteId: string;
+    action: "publish" | "rollback";
+}
+/**
+ * A store that purges the site's cached pages after every publish and
+ * rollback: `invalidate` gets `["site:<id>"]` and what happened.
+ *
+ * Mind what your CDN's purge does. On Vercel, `invalidateByTag` marks pages
+ * stale, so each cached URL serves the old release once more while it
+ * regenerates (no stampede); `dangerouslyDeleteByTag` drops them, so the
+ * next request waits for a render. Use the delete for a rollback that takes
+ * something down:
+ *
+ *   withCacheInvalidation(store, (tags, { action }) =>
+ *     action === "rollback" ? dangerouslyDeleteByTag(tags) : invalidateByTag(tags));
+ *
+ * Archiving a site goes through your own server or the database (the
+ * `genesis_sites` notification), so purge there too. A failed purge is
+ * logged and rethrown, so the editor shows that the live site may be stale.
+ *
+ * @stability Beta
+ */
+declare function withCacheInvalidation(store: SiteStore, invalidate: (tags: string[], info: InvalidationInfo) => Promise<void> | void): SiteStore;
+interface NewSite {
+    id?: string;
+    /** The site document (defaults applied). */
+    site: SiteDocInput;
+    pages: {
+        id?: string;
+        path: string;
+        kind?: PageKind;
+        doc: PageDoc;
+    }[];
+}
+interface MemorySiteStore extends SiteStore {
+    createSite(input: NewSite): Promise<{
+        siteId: string;
+        pageIds: string[];
+    }>;
+    /** Archive (or bring back) a site: an archived site serves nothing. */
+    setStatus(siteId: string, status: "draft" | "live" | "archived"): Promise<void>;
+}
+interface MemoryStoreOptions {
+    reserved?: ReservedPaths;
+    /** Who may edit (default: everyone). Mirrors the database's `can_edit` hook, for tests. */
+    canEdit?: (siteId: string) => boolean;
+    now?: () => Date;
+}
+/**
+ * An in-memory `SiteStore`: the same rules as the database (compare-and-swap
+ * revisions, path checks, redirects on move, immutable releases), for tests,
+ * demos and local previews. Documents are copied in and out, so callers
+ * can't change stored state by mutating what they hold.
+ *
+ * @stability Beta
+ */
+declare function createMemorySiteStore(options?: MemoryStoreOptions): MemorySiteStore;
+
+export { siteTheme as $, type Asset as A, type BrandInput as B, type CheckReleaseOptions as C, DEFAULT_RESERVED_PATHS as D, hexToHslTriplet as E, FONT_CHOICES as F, isConflict as G, isExternalHref as H, type InvalidationInfo as I, isPublishable as J, isReservedPath as K, isSafeHref as L, MAX_PAGE_PATH_LENGTH as M, type NewPage as N, isSafeImageSrc as O, PAGE_PATH as P, isSiteBrand as Q, type ReservedPaths as R, type SiteBrand as S, type ThemePair as T, luminance as U, mix as V, normalizeRequestPath as W, pagePathProblems as X, parseHex as Y, prepareRelease as Z, siteCacheTag as _, type AssetMeta as a, stableHash as a0, themeCss as a1, toCanonicalBrand as a2, validatePagePath as a3, withCacheInvalidation as a4, type BrandSource as b, type FontInfo as c, MAX_URL_LENGTH as d, type MemorySiteStore as e, type MemoryStoreOptions as f, type NewSite as g, type PageDraft as h, type PreparedRelease as i, PublishBlockedError as j, type PublishOptions as k, type SaveResult as l, SiteConflictError as m, type SiteDraft as n, type SiteIssue as o, type SiteStore as p, type SiteTheme as q, brandDisplayName as r, checkContrast as s, checkHtmlOutline as t, checkPage as u, checkRelease as v, checkSiteDoc as w, contrastRatio as x, createMemorySiteStore as y, formCacheTag as z };

package/dist/supabase.d.ts

@@ -0,0 +1,41 @@
+import { SupabaseClient } from '@supabase/supabase-js';
+import { p as SiteStore } from './store-BzGw2i5J.js';
+import './registry-CdgVymsu.js';
+import 'react';
+import 'zod';
+import '@marktiderman/genesis-design-system';
+
+/**
+ * @marktiderman/genesis-sites/supabase: `createSupabaseSiteStore`, the
+ * `SiteStore` over the `genesis_sites` schema (migration
+ * `migrations/0001_genesis_sites.sql`).
+ *
+ * Pass a client signed in as the editor for drafts and publishing (row level
+ * security and `can_edit` / `can_view` decide), or an anonymous one for the
+ * public read (`getLive`, through `genesis_sites.live_release`). The schema
+ * must be exposed to the API.
+ *
+ * @packageDocumentation
+ */
+
+declare const SITES_SCHEMA = "genesis_sites";
+/** The file types a site asset may be, as the database checks them. */
+declare const ASSET_TYPES: readonly string[];
+interface SupabaseSiteStoreOptions {
+    /** The storage bucket for `putAsset`. Default `site-assets`. */
+    bucket?: string;
+}
+/** A database error with its SQLSTATE (`GS409` a conflict, `42501` not allowed). */
+declare class SiteStoreError extends Error {
+    readonly code: string | undefined;
+    readonly detail?: string | undefined;
+    constructor(message: string, code: string | undefined, detail?: string | undefined);
+}
+/**
+ * A `SiteStore` on Supabase.
+ *
+ * @stability Beta
+ */
+declare function createSupabaseSiteStore(client: SupabaseClient, options?: SupabaseSiteStoreOptions): SiteStore;
+
+export { ASSET_TYPES, SITES_SCHEMA, SiteStoreError, type SupabaseSiteStoreOptions, createSupabaseSiteStore };

package/dist/supabase.js

@@ -0,0 +1,174 @@
+import { prepareRelease } from './chunk-GA7U3CIN.js';
+import { PageDoc, SiteDoc, parseSnapshot, ReleaseSnapshot } from './chunk-KEF3V5ZN.js';
+
+// src/supabase/index.ts
+var SITES_SCHEMA = "genesis_sites";
+var ASSET_TYPES = Object.freeze(["image/png", "image/jpeg", "image/webp", "image/avif", "image/gif", "application/pdf"]);
+var SiteStoreError = class extends Error {
+  constructor(message, code, detail) {
+    super(message);
+    this.code = code;
+    this.detail = detail;
+    this.name = "SiteStoreError";
+  }
+  code;
+  detail;
+};
+function fail(error, what) {
+  throw new SiteStoreError(`${what}: ${error.message}`, error.code, error.details);
+}
+var metaOf = (r) => ({ id: r.id, siteId: r.siteId, number: r.number, note: r.note, createdAt: r.createdAt, publishedAt: r.publishedAt, brandHash: r.brandHash });
+var fromRow = (r) => ({
+  id: r.id,
+  siteId: r.site_id,
+  number: r.number,
+  note: r.note,
+  createdAt: r.created_at,
+  publishedAt: r.published_at,
+  brandHash: r.brand_hash,
+  ...r.snapshot !== void 0 ? { snapshot: r.snapshot } : {}
+});
+var pageMeta = (r) => ({ id: r.id, siteId: r.site_id, path: r.path, kind: r.kind, title: r.title ?? "", sort: r.sort, rev: r.draft_rev });
+function createSupabaseSiteStore(client, options = {}) {
+  const db = client.schema(SITES_SCHEMA);
+  const bucket = options.bucket ?? "site-assets";
+  async function release(id) {
+    const { data, error } = await db.from("site_releases").select("id, site_id, number, note, created_at, published_at, brand_hash, snapshot").eq("id", id).single();
+    if (error) fail(error, "reading the release");
+    const r = fromRow(data);
+    return { ...metaOf(r), snapshot: ReleaseSnapshot.parse(r.snapshot) };
+  }
+  async function pageRows(siteId, withDraft) {
+    const columns = withDraft ? "id, site_id, path, kind, sort, draft_rev, draft" : "id, site_id, path, kind, sort, draft_rev, title:draft->root->props->>title";
+    const { data, error } = await db.from("site_pages").select(columns).eq("site_id", siteId).is("deleted_at", null).order("sort").order("path");
+    if (error) fail(error, "listing pages");
+    return data ?? [];
+  }
+  const store = {
+    async getLive(siteId) {
+      const { data, error } = await db.rpc("live_release", { site_id: siteId });
+      if (error) fail(error, "reading the live site");
+      if (!data) return null;
+      const r = data;
+      const snapshot = parseSnapshot(r.snapshot, (m) => console.error(`[genesis-sites] the live release of site ${siteId}: ${m}`));
+      if (!snapshot) return null;
+      return { ...metaOf(r), snapshot };
+    },
+    async getDraft(siteId) {
+      const { data, error } = await db.from("sites").select("draft, draft_rev").eq("id", siteId).maybeSingle();
+      if (error) fail(error, "reading the site");
+      if (!data) return null;
+      return { site: SiteDoc.parse(data.draft), rev: data.draft_rev };
+    },
+    async saveSiteDraft(siteId, rev, site) {
+      const doc = SiteDoc.parse(site);
+      const { data, error } = await db.rpc("save_site_draft", { site_id: siteId, expected_rev: rev, doc });
+      if (error?.code === "GS409") {
+        const current = await store.getDraft(siteId);
+        if (!current) fail(error, "saving the site");
+        return { conflict: current.site, rev: current.rev };
+      }
+      if (error) fail(error, "saving the site");
+      return { rev: data };
+    },
+    async listPages(siteId) {
+      return (await pageRows(siteId, false)).map(pageMeta);
+    },
+    async getPageDraft(pageId) {
+      const { data, error } = await db.from("site_pages").select("id, site_id, path, kind, draft, draft_rev").eq("id", pageId).is("deleted_at", null).maybeSingle();
+      if (error) fail(error, "reading the page");
+      if (!data) return null;
+      const row = data;
+      return { doc: PageDoc.parse(row.draft), rev: row.draft_rev, siteId: row.site_id, path: row.path, kind: row.kind };
+    },
+    async savePageDraft(pageId, rev, doc) {
+      const parsed = PageDoc.parse(doc);
+      const { data, error } = await db.rpc("save_page_draft", { page_id: pageId, expected_rev: rev, doc: parsed });
+      if (error?.code === "GS409") {
+        const current = await store.getPageDraft(pageId);
+        if (!current) fail(error, "saving the page");
+        return { conflict: current.doc, rev: current.rev };
+      }
+      if (error) fail(error, "saving the page");
+      return { rev: data };
+    },
+    async createPage(siteId, page) {
+      const doc = PageDoc.parse(page.doc);
+      const { data, error } = await db.rpc("create_page", { site_id: siteId, path: page.path, kind: page.kind ?? "page", doc });
+      if (error) fail(error, "creating the page");
+      const meta = (await store.listPages(siteId)).find((p) => p.id === data);
+      if (!meta) throw new SiteStoreError("The page was created but can't be read back.", void 0);
+      return meta;
+    },
+    async movePage(pageId, path) {
+      const { error } = await db.rpc("move_page", { page_id: pageId, new_path: path });
+      if (error) fail(error, "moving the page");
+      const draft = await store.getPageDraft(pageId);
+      if (!draft) throw new SiteStoreError("The page moved but can't be read back.", void 0);
+      const meta = (await store.listPages(draft.siteId)).find((p) => p.id === pageId);
+      return meta;
+    },
+    async deletePage(pageId) {
+      const { error } = await db.rpc("delete_page", { page_id: pageId });
+      if (error) fail(error, "deleting the page");
+    },
+    async publish(siteId, opts = {}) {
+      const draft = await store.getDraft(siteId);
+      if (!draft) throw new SiteStoreError(`No site ${siteId} (or you can't see it).`, "P0002");
+      const rows = await pageRows(siteId, true);
+      const pages = rows.map((r) => ({ id: r.id, path: r.path, kind: r.kind, doc: PageDoc.parse(r.draft), rev: r.draft_rev }));
+      const prepared = prepareRelease(draft.site, pages, opts);
+      const revs = Object.fromEntries(pages.map((p) => [p.id, p.rev]));
+      let siteRev = draft.rev;
+      for (const m of prepared.migratedPages) {
+        const saved = await store.savePageDraft(m.id, revs[m.id], m.doc);
+        if ("conflict" in saved) throw new SiteStoreError("A page changed while publishing; check again.", "GS409");
+        revs[m.id] = saved.rev;
+      }
+      if (prepared.migratedSite) {
+        const saved = await store.saveSiteDraft(siteId, siteRev, prepared.migratedSite);
+        if ("conflict" in saved) throw new SiteStoreError("The site changed while publishing; check again.", "GS409");
+        siteRev = saved.rev;
+      }
+      const { data, error } = await db.rpc("publish_site", {
+        site_id: siteId,
+        expected_site_rev: siteRev,
+        expected_pages: revs,
+        note: opts.note ?? null,
+        brand_hash: prepared.brandHash
+      });
+      if (error) fail(error, "publishing");
+      return release(data.id);
+    },
+    async rollback(siteId, releaseId) {
+      const { data, error } = await db.rpc("rollback_site", { site_id: siteId, release_id: releaseId });
+      if (error) fail(error, "rolling back");
+      return release(data.id);
+    },
+    async listReleases(siteId) {
+      const { data, error } = await db.from("site_releases").select("id, site_id, number, note, created_at, published_at, brand_hash").eq("site_id", siteId).order("number", { ascending: false });
+      if (error) fail(error, "listing releases");
+      return (data ?? []).map((r) => metaOf(fromRow(r)));
+    },
+    async putAsset(siteId, file, meta = {}) {
+      const name = (meta.name ?? "file").toLowerCase().replace(/[^a-z0-9.]+/g, "-").replace(/\.{2,}/g, ".").slice(0, 80) || "file";
+      const path = `sites/${siteId}/${crypto.randomUUID()}-${name}`;
+      const mime = file.type || "application/octet-stream";
+      if (!ASSET_TYPES.includes(mime)) throw new SiteStoreError(`uploading: ${mime} isn't an image (PNG, JPEG, WebP, AVIF, GIF) or a PDF.`, "22023");
+      const upload = await client.storage.from(bucket).upload(path, file, { contentType: mime, upsert: false });
+      if (upload.error) throw new SiteStoreError(`uploading: ${upload.error.message}`, void 0);
+      const { data, error } = await db.from("site_assets").insert({ site_id: siteId, path, mime, alt: meta.alt ?? null, width: meta.width ?? null, height: meta.height ?? null }).select("id").single();
+      if (error) {
+        await client.storage.from(bucket).remove([path]);
+        fail(error, "recording the upload");
+      }
+      const url = client.storage.from(bucket).getPublicUrl(path).data.publicUrl;
+      return { id: data.id, siteId, path, url, mime, alt: meta.alt ?? null, width: meta.width ?? null, height: meta.height ?? null };
+    }
+  };
+  return store;
+}
+
+export { ASSET_TYPES, SITES_SCHEMA, SiteStoreError, createSupabaseSiteStore };
+//# sourceMappingURL=supabase.js.map
+//# sourceMappingURL=supabase.js.map

package/dist/supabase.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/supabase/index.ts"],"names":[],"mappings":";;;;AAgBO,IAAM,YAAA,GAAe;AAGrB,IAAM,WAAA,GAAiC,MAAA,CAAO,MAAA,CAAO,CAAC,WAAA,EAAa,cAAc,YAAA,EAAc,YAAA,EAAc,WAAA,EAAa,iBAAiB,CAAC;AAQ5I,IAAM,cAAA,GAAN,cAA6B,KAAA,CAAM;AAAA,EACxC,WAAA,CACE,OAAA,EACS,IAAA,EACA,MAAA,EACT;AACA,IAAA,KAAA,CAAM,OAAO,CAAA;AAHJ,IAAA,IAAA,CAAA,IAAA,GAAA,IAAA;AACA,IAAA,IAAA,CAAA,MAAA,GAAA,MAAA;AAGT,IAAA,IAAA,CAAK,IAAA,GAAO,gBAAA;AAAA,EACd;AAAA,EALW,IAAA;AAAA,EACA,MAAA;AAKb;AAQA,SAAS,IAAA,CAAK,OAAgB,IAAA,EAAqB;AACjD,EAAA,MAAM,IAAI,cAAA,CAAe,CAAA,EAAG,IAAI,CAAA,EAAA,EAAK,KAAA,CAAM,OAAO,CAAA,CAAA,EAAI,KAAA,CAAM,IAAA,EAAM,KAAA,CAAM,OAAO,CAAA;AACjF;AAaA,IAAM,MAAA,GAAS,CAAC,CAAA,MAAiC,EAAE,EAAA,EAAI,EAAE,EAAA,EAAI,MAAA,EAAQ,CAAA,CAAE,MAAA,EAAQ,MAAA,EAAQ,CAAA,CAAE,QAAQ,IAAA,EAAM,CAAA,CAAE,IAAA,EAAM,SAAA,EAAW,CAAA,CAAE,SAAA,EAAW,aAAa,CAAA,CAAE,WAAA,EAAa,SAAA,EAAW,CAAA,CAAE,SAAA,EAAU,CAAA;AAa1L,IAAM,OAAA,GAAU,CAAC,CAAA,MAAgC;AAAA,EAC/C,IAAI,CAAA,CAAE,EAAA;AAAA,EACN,QAAQ,CAAA,CAAE,OAAA;AAAA,EACV,QAAQ,CAAA,CAAE,MAAA;AAAA,EACV,MAAM,CAAA,CAAE,IAAA;AAAA,EACR,WAAW,CAAA,CAAE,UAAA;AAAA,EACb,aAAa,CAAA,CAAE,YAAA;AAAA,EACf,WAAW,CAAA,CAAE,UAAA;AAAA,EACb,GAAI,EAAE,QAAA,KAAa,MAAA,GAAY,EAAE,QAAA,EAAU,CAAA,CAAE,QAAA,EAAS,GAAI;AAC5D,CAAA,CAAA;AAaA,IAAM,QAAA,GAAW,CAAC,CAAA,MAA0B,EAAE,EAAA,EAAI,EAAE,EAAA,EAAI,MAAA,EAAQ,CAAA,CAAE,OAAA,EAAS,IAAA,EAAM,CAAA,CAAE,MAAM,IAAA,EAAM,CAAA,CAAE,IAAA,EAAM,KAAA,EAAO,CAAA,CAAE,KAAA,IAAS,EAAA,EAAI,IAAA,EAAM,CAAA,CAAE,IAAA,EAAM,GAAA,EAAK,CAAA,CAAE,SAAA,EAAU,CAAA;AAOrJ,SAAS,uBAAA,CAAwB,MAAA,EAAwB,OAAA,GAAoC,EAAC,EAAc;AACjH,EAAA,MAAM,EAAA,GAAK,MAAA,CAAO,MAAA,CAAO,YAAY,CAAA;AACrC,EAAA,MAAM,MAAA,GAAS,QAAQ,MAAA,IAAU,aAAA;AAEjC,EAAA,eAAe,QAAQ,EAAA,EAA8B;AACnD,IAAA,MAAM,EAAE,IAAA,EAAM,KAAA,EAAM,GAAI,MAAM,GAAG,IAAA,CAAK,eAAe,CAAA,CAAE,MAAA,CAAO,2EAA2E,CAAA,CAAE,EAAA,CAAG,IAAA,EAAM,EAAE,EAAE,MAAA,EAAO;AAC/J,IAAA,IAAI,KAAA,EAAO,IAAA,CAAK,KAAA,EAAO,qBAAqB,CAAA;AAC5C,IAAA,MAAM,CAAA,GAAI,QAAQ,IAAkB,CAAA;AACpC,IAAA,OAAO,EAAE,GAAG,MAAA,CAAO,CAAC,CAAA,EAAG,UAAU,eAAA,CAAgB,KAAA,CAAM,CAAA,CAAE,QAAQ,CAAA,EAAE;AAAA,EACrE;AAEA,EAAA,eAAe,QAAA,CAAS,QAAgB,SAAA,EAAwC;AAC9E,IAAA,MAAM,OAAA,GAAU,YAAY,iDAAA,GAAoD,4EAAA;AAChF,IAAA,MAAM,EAAE,IAAA,EAAM,KAAA,EAAM,GAAI,MAAM,GAAG,IAAA,CAAK,YAAY,CAAA,CAAE,MAAA,CAAO,OAAO,CAAA,CAAE,GAAG,SAAA,EAAW,MAAM,CAAA,CAAE,EAAA,CAAG,YAAA,EAAc,IAAI,EAAE,KAAA,CAAM,MAAM,CAAA,CAAE,KAAA,CAAM,MAAM,CAAA;AAC3I,IAAA,IAAI,KAAA,EAAO,IAAA,CAAK,KAAA,EAAO,eAAe,CAAA;AACtC,IAAA,OAAQ,QAAQ,EAAC;AAAA,EACnB;AAEA,EAAA,MAAM,KAAA,GAAmB;AAAA,IACvB,MAAM,QAAQ,MAAA,EAAQ;AACpB,MAAA,MAAM,EAAE,IAAA,EAAM,KAAA,EAAM,GAAI,MAAM,EAAA,CAAG,GAAA,CAAI,cAAA,EAAgB,EAAE,OAAA,EAAS,MAAA,EAAQ,CAAA;AACxE,MAAA,IAAI,KAAA,EAAO,IAAA,CAAK,KAAA,EAAO,uBAAuB,CAAA;AAC9C,MAAA,IAAI,CAAC,MAAM,OAAO,IAAA;AAClB,MAAA,MAAM,CAAA,GAAI,IAAA;AAEV,MAAA,MAAM,QAAA,GAAW,aAAA,CAAc,CAAA,CAAE,QAAA,EAAU,CAAC,CAAA,KAAM,OAAA,CAAQ,KAAA,CAAM,CAAA,yCAAA,EAA4C,MAAM,CAAA,EAAA,EAAK,CAAC,EAAE,CAAC,CAAA;AAC3H,MAAA,IAAI,CAAC,UAAU,OAAO,IAAA;AACtB,MAAA,OAAO,EAAE,GAAG,MAAA,CAAO,CAAC,GAAG,QAAA,EAAS;AAAA,IAClC,CAAA;AAAA,IACA,MAAM,SAAS,MAAA,EAAQ;AACrB,MAAA,MAAM,EAAE,IAAA,EAAM,KAAA,EAAM,GAAI,MAAM,GAAG,IAAA,CAAK,OAAO,CAAA,CAAE,MAAA,CAAO,kBAAkB,CAAA,CAAE,EAAA,CAAG,IAAA,EAAM,MAAM,EAAE,WAAA,EAAY;AACvG,MAAA,IAAI,KAAA,EAAO,IAAA,CAAK,KAAA,EAAO,kBAAkB,CAAA;AACzC,MAAA,IAAI,CAAC,MAAM,OAAO,IAAA;AAClB,MAAA,OAAO,EAAE,MAAM,OAAA,CAAQ,KAAA,CAAO,KAA4B,KAAK,CAAA,EAAG,GAAA,EAAM,IAAA,CAA+B,SAAA,EAAU;AAAA,IACnH,CAAA;AAAA,IACA,MAAM,aAAA,CAAc,MAAA,EAAQ,GAAA,EAAK,IAAA,EAAoC;AACnE,MAAA,MAAM,GAAA,GAAM,OAAA,CAAQ,KAAA,CAAM,IAAI,CAAA;AAC9B,MAAA,MAAM,EAAE,IAAA,EAAM,KAAA,EAAM,GAAI,MAAM,EAAA,CAAG,GAAA,CAAI,iBAAA,EAAmB,EAAE,OAAA,EAAS,MAAA,EAAQ,YAAA,EAAc,GAAA,EAAK,KAAK,CAAA;AACnG,MAAA,IAAI,KAAA,EAAO,SAAS,OAAA,EAAS;AAC3B,QAAA,MAAM,OAAA,GAAU,MAAM,KAAA,CAAM,QAAA,CAAS,MAAM,CAAA;AAC3C,QAAA,IAAI,CAAC,OAAA,EAAS,IAAA,CAAK,KAAA,EAAO,iBAAiB,CAAA;AAC3C,QAAA,OAAO,EAAE,QAAA,EAAU,OAAA,CAAQ,IAAA,EAAM,GAAA,EAAK,QAAQ,GAAA,EAAI;AAAA,MACpD;AACA,MAAA,IAAI,KAAA,EAAO,IAAA,CAAK,KAAA,EAAO,iBAAiB,CAAA;AACxC,MAAA,OAAO,EAAE,KAAK,IAAA,EAAe;AAAA,IAC/B,CAAA;AAAA,IACA,MAAM,UAAU,MAAA,EAAQ;AACtB,MAAA,OAAA,CAAQ,MAAM,QAAA,CAAS,MAAA,EAAQ,KAAK,CAAA,EAAG,IAAI,QAAQ,CAAA;AAAA,IACrD,CAAA;AAAA,IACA,MAAM,aAAa,MAAA,EAAQ;AACzB,MAAA,MAAM,EAAE,MAAM,KAAA,EAAM,GAAI,MAAM,EAAA,CAAG,IAAA,CAAK,YAAY,CAAA,CAAE,MAAA,CAAO,2CAA2C,CAAA,CAAE,EAAA,CAAG,MAAM,MAAM,CAAA,CAAE,GAAG,YAAA,EAAc,IAAI,EAAE,WAAA,EAAY;AAC5J,MAAA,IAAI,KAAA,EAAO,IAAA,CAAK,KAAA,EAAO,kBAAkB,CAAA;AACzC,MAAA,IAAI,CAAC,MAAM,OAAO,IAAA;AAClB,MAAA,MAAM,GAAA,GAAM,IAAA;AACZ,MAAA,OAAO,EAAE,GAAA,EAAK,OAAA,CAAQ,MAAM,GAAA,CAAI,KAAK,GAAG,GAAA,EAAK,GAAA,CAAI,SAAA,EAAW,MAAA,EAAQ,IAAI,OAAA,EAAS,IAAA,EAAM,IAAI,IAAA,EAAM,IAAA,EAAM,IAAI,IAAA,EAAK;AAAA,IAClH,CAAA;AAAA,IACA,MAAM,aAAA,CAAc,MAAA,EAAQ,GAAA,EAAK,GAAA,EAAmC;AAClE,MAAA,MAAM,MAAA,GAAS,OAAA,CAAQ,KAAA,CAAM,GAAG,CAAA;AAChC,MAAA,MAAM,EAAE,IAAA,EAAM,KAAA,EAAM,GAAI,MAAM,EAAA,CAAG,GAAA,CAAI,iBAAA,EAAmB,EAAE,SAAS,MAAA,EAAQ,YAAA,EAAc,GAAA,EAAK,GAAA,EAAK,QAAQ,CAAA;AAC3G,MAAA,IAAI,KAAA,EAAO,SAAS,OAAA,EAAS;AAC3B,QAAA,MAAM,OAAA,GAAU,MAAM,KAAA,CAAM,YAAA,CAAa,MAAM,CAAA;AAC/C,QAAA,IAAI,CAAC,OAAA,EAAS,IAAA,CAAK,KAAA,EAAO,iBAAiB,CAAA;AAC3C,QAAA,OAAO,EAAE,QAAA,EAAU,OAAA,CAAQ,GAAA,EAAK,GAAA,EAAK,QAAQ,GAAA,EAAI;AAAA,MACnD;AACA,MAAA,IAAI,KAAA,EAAO,IAAA,CAAK,KAAA,EAAO,iBAAiB,CAAA;AACxC,MAAA,OAAO,EAAE,KAAK,IAAA,EAAe;AAAA,IAC/B,CAAA;AAAA,IACA,MAAM,UAAA,CAAW,MAAA,EAAQ,IAAA,EAAM;AAC7B,MAAA,MAAM,GAAA,GAAM,OAAA,CAAQ,KAAA,CAAM,IAAA,CAAK,GAAG,CAAA;AAClC,MAAA,MAAM,EAAE,IAAA,EAAM,KAAA,KAAU,MAAM,EAAA,CAAG,IAAI,aAAA,EAAe,EAAE,SAAS,MAAA,EAAQ,IAAA,EAAM,KAAK,IAAA,EAAM,IAAA,EAAM,KAAK,IAAA,IAAQ,MAAA,EAAQ,KAAK,CAAA;AACxH,MAAA,IAAI,KAAA,EAAO,IAAA,CAAK,KAAA,EAAO,mBAAmB,CAAA;AAC1C,MAAA,MAAM,IAAA,GAAA,CAAQ,MAAM,KAAA,CAAM,SAAA,CAAU,MAAM,CAAA,EAAG,IAAA,CAAK,CAAC,CAAA,KAAM,CAAA,CAAE,EAAA,KAAO,IAAI,CAAA;AACtE,MAAA,IAAI,CAAC,IAAA,EAAM,MAAM,IAAI,cAAA,CAAe,gDAAgD,MAAS,CAAA;AAC7F,MAAA,OAAO,IAAA;AAAA,IACT,CAAA;AAAA,IACA,MAAM,QAAA,CAAS,MAAA,EAAQ,IAAA,EAAM;AAC3B,MAAA,MAAM,EAAE,KAAA,EAAM,GAAI,MAAM,EAAA,CAAG,GAAA,CAAI,WAAA,EAAa,EAAE,OAAA,EAAS,MAAA,EAAQ,QAAA,EAAU,IAAA,EAAM,CAAA;AAC/E,MAAA,IAAI,KAAA,EAAO,IAAA,CAAK,KAAA,EAAO,iBAAiB,CAAA;AACxC,MAAA,MAAM,KAAA,GAAQ,MAAM,KAAA,CAAM,YAAA,CAAa,MAAM,CAAA;AAC7C,MAAA,IAAI,CAAC,KAAA,EAAO,MAAM,IAAI,cAAA,CAAe,0CAA0C,MAAS,CAAA;AACxF,MAAA,MAAM,IAAA,GAAA,CAAQ,MAAM,KAAA,CAAM,SAAA,CAAU,KAAA,CAAM,MAAM,CAAA,EAAG,IAAA,CAAK,CAAC,CAAA,KAAM,CAAA,CAAE,EAAA,KAAO,MAAM,CAAA;AAC9E,MAAA,OAAO,IAAA;AAAA,IACT,CAAA;AAAA,IACA,MAAM,WAAW,MAAA,EAAQ;AACvB,MAAA,MAAM,EAAE,KAAA,EAAM,GAAI,MAAM,EAAA,CAAG,IAAI,aAAA,EAAe,EAAE,OAAA,EAAS,MAAA,EAAQ,CAAA;AACjE,MAAA,IAAI,KAAA,EAAO,IAAA,CAAK,KAAA,EAAO,mBAAmB,CAAA;AAAA,IAC5C,CAAA;AAAA,IACA,MAAM,OAAA,CAAQ,MAAA,EAAQ,IAAA,GAAuB,EAAC,EAAG;AAC/C,MAAA,MAAM,KAAA,GAAQ,MAAM,KAAA,CAAM,QAAA,CAAS,MAAM,CAAA;AACzC,MAAA,IAAI,CAAC,OAAO,MAAM,IAAI,eAAe,CAAA,QAAA,EAAW,MAAM,2BAA2B,OAAO,CAAA;AACxF,MAAA,MAAM,IAAA,GAAO,MAAM,QAAA,CAAS,MAAA,EAAQ,IAAI,CAAA;AACxC,MAAA,MAAM,KAAA,GAAQ,IAAA,CAAK,GAAA,CAAI,CAAC,CAAA,MAAO,EAAE,EAAA,EAAI,CAAA,CAAE,EAAA,EAAI,IAAA,EAAM,CAAA,CAAE,IAAA,EAAM,MAAM,CAAA,CAAE,IAAA,EAAM,GAAA,EAAK,OAAA,CAAQ,KAAA,CAAM,CAAA,CAAE,KAAK,CAAA,EAAG,GAAA,EAAK,CAAA,CAAE,SAAA,EAAU,CAAE,CAAA;AAEvH,MAAA,MAAM,QAAA,GAAW,cAAA,CAAe,KAAA,CAAM,IAAA,EAAM,OAAO,IAAI,CAAA;AAEvD,MAAA,MAAM,IAAA,GAA+B,MAAA,CAAO,WAAA,CAAY,KAAA,CAAM,GAAA,CAAI,CAAC,CAAA,KAAM,CAAC,CAAA,CAAE,EAAA,EAAI,CAAA,CAAE,GAAG,CAAC,CAAC,CAAA;AACvF,MAAA,IAAI,UAAU,KAAA,CAAM,GAAA;AACpB,MAAA,KAAA,MAAW,CAAA,IAAK,SAAS,aAAA,EAAe;AACtC,QAAA,MAAM,KAAA,GAAQ,MAAM,KAAA,CAAM,aAAA,CAAc,CAAA,CAAE,EAAA,EAAI,IAAA,CAAK,CAAA,CAAE,EAAE,CAAA,EAAI,CAAA,CAAE,GAAG,CAAA;AAChE,QAAA,IAAI,cAAc,KAAA,EAAO,MAAM,IAAI,cAAA,CAAe,iDAAiD,OAAO,CAAA;AAC1G,QAAA,IAAA,CAAK,CAAA,CAAE,EAAE,CAAA,GAAI,KAAA,CAAM,GAAA;AAAA,MACrB;AACA,MAAA,IAAI,SAAS,YAAA,EAAc;AACzB,QAAA,MAAM,QAAQ,MAAM,KAAA,CAAM,cAAc,MAAA,EAAQ,OAAA,EAAS,SAAS,YAAY,CAAA;AAC9E,QAAA,IAAI,cAAc,KAAA,EAAO,MAAM,IAAI,cAAA,CAAe,mDAAmD,OAAO,CAAA;AAC5G,QAAA,OAAA,GAAU,KAAA,CAAM,GAAA;AAAA,MAClB;AACA,MAAA,MAAM,EAAE,IAAA,EAAM,KAAA,KAAU,MAAM,EAAA,CAAG,IAAI,cAAA,EAAgB;AAAA,QACnD,OAAA,EAAS,MAAA;AAAA,QACT,iBAAA,EAAmB,OAAA;AAAA,QACnB,cAAA,EAAgB,IAAA;AAAA,QAChB,IAAA,EAAM,KAAK,IAAA,IAAQ,IAAA;AAAA,QACnB,YAAY,QAAA,CAAS;AAAA,OACtB,CAAA;AACD,MAAA,IAAI,KAAA,EAAO,IAAA,CAAK,KAAA,EAAO,YAAY,CAAA;AACnC,MAAA,OAAO,OAAA,CAAS,KAAqB,EAAE,CAAA;AAAA,IACzC,CAAA;AAAA,IACA,MAAM,QAAA,CAAS,MAAA,EAAQ,SAAA,EAAW;AAChC,MAAA,MAAM,EAAE,IAAA,EAAM,KAAA,EAAM,GAAI,MAAM,EAAA,CAAG,GAAA,CAAI,eAAA,EAAiB,EAAE,OAAA,EAAS,MAAA,EAAQ,UAAA,EAAY,WAAW,CAAA;AAChG,MAAA,IAAI,KAAA,EAAO,IAAA,CAAK,KAAA,EAAO,cAAc,CAAA;AACrC,MAAA,OAAO,OAAA,CAAS,KAAqB,EAAE,CAAA;AAAA,IACzC,CAAA;AAAA,IACA,MAAM,aAAa,MAAA,EAAQ;AACzB,MAAA,MAAM,EAAE,MAAM,KAAA,EAAM,GAAI,MAAM,EAAA,CAAG,IAAA,CAAK,eAAe,CAAA,CAAE,MAAA,CAAO,iEAAiE,CAAA,CAAE,EAAA,CAAG,WAAW,MAAM,CAAA,CAAE,MAAM,QAAA,EAAU,EAAE,SAAA,EAAW,KAAA,EAAO,CAAA;AAC3L,MAAA,IAAI,KAAA,EAAO,IAAA,CAAK,KAAA,EAAO,kBAAkB,CAAA;AACzC,MAAA,OAAA,CAAS,IAAA,IAAQ,EAAC,EAAoB,GAAA,CAAI,CAAC,MAAM,MAAA,CAAO,OAAA,CAAQ,CAAC,CAAC,CAAC,CAAA;AAAA,IACrE,CAAA;AAAA,IACA,MAAM,QAAA,CAAS,MAAA,EAAQ,IAAA,EAAY,IAAA,GAAkB,EAAC,EAAmB;AACvE,MAAA,MAAM,QAAQ,IAAA,CAAK,IAAA,IAAQ,MAAA,EAAQ,WAAA,GAAc,OAAA,CAAQ,cAAA,EAAgB,GAAG,CAAA,CAAE,QAAQ,SAAA,EAAW,GAAG,EAAE,KAAA,CAAM,CAAA,EAAG,EAAE,CAAA,IAAK,MAAA;AACtH,MAAA,MAAM,IAAA,GAAO,SAAS,MAAM,CAAA,CAAA,EAAI,OAAO,UAAA,EAAY,IAAI,IAAI,CAAA,CAAA;AAC3D,MAAA,MAAM,IAAA,GAAO,KAAK,IAAA,IAAQ,0BAAA;AAG1B,MAAA,IAAI,CAAC,WAAA,CAAY,QAAA,CAAS,IAAI,CAAA,EAAG,MAAM,IAAI,cAAA,CAAe,CAAA,WAAA,EAAc,IAAI,CAAA,sDAAA,CAAA,EAA0D,OAAO,CAAA;AAC7I,MAAA,MAAM,MAAA,GAAS,MAAM,MAAA,CAAO,OAAA,CAAQ,KAAK,MAAM,CAAA,CAAE,MAAA,CAAO,IAAA,EAAM,MAAM,EAAE,WAAA,EAAa,IAAA,EAAM,MAAA,EAAQ,OAAO,CAAA;AACxG,MAAA,IAAI,MAAA,CAAO,KAAA,EAAO,MAAM,IAAI,cAAA,CAAe,cAAc,MAAA,CAAO,KAAA,CAAM,OAAO,CAAA,CAAA,EAAI,MAAS,CAAA;AAC1F,MAAA,MAAM,EAAE,IAAA,EAAM,KAAA,EAAM,GAAI,MAAM,EAAA,CAC3B,IAAA,CAAK,aAAa,CAAA,CAClB,MAAA,CAAO,EAAE,OAAA,EAAS,MAAA,EAAQ,MAAM,IAAA,EAAM,GAAA,EAAK,IAAA,CAAK,GAAA,IAAO,IAAA,EAAM,KAAA,EAAO,IAAA,CAAK,KAAA,IAAS,MAAM,MAAA,EAAQ,IAAA,CAAK,MAAA,IAAU,IAAA,EAAM,CAAA,CACrH,MAAA,CAAO,IAAI,EACX,MAAA,EAAO;AACV,MAAA,IAAI,KAAA,EAAO;AACT,QAAA,MAAM,MAAA,CAAO,QAAQ,IAAA,CAAK,MAAM,EAAE,MAAA,CAAO,CAAC,IAAI,CAAC,CAAA;AAC/C,QAAA,IAAA,CAAK,OAAO,sBAAsB,CAAA;AAAA,MACpC;AACA,MAAA,MAAM,GAAA,GAAM,OAAO,OAAA,CAAQ,IAAA,CAAK,MAAM,CAAA,CAAE,YAAA,CAAa,IAAI,CAAA,CAAE,IAAA,CAAK,SAAA;AAChE,MAAA,OAAO,EAAE,EAAA,EAAK,IAAA,CAAwB,IAAI,MAAA,EAAQ,IAAA,EAAM,KAAK,IAAA,EAAM,GAAA,EAAK,KAAK,GAAA,IAAO,IAAA,EAAM,OAAO,IAAA,CAAK,KAAA,IAAS,MAAM,MAAA,EAAQ,IAAA,CAAK,UAAU,IAAA,EAAK;AAAA,IACnJ;AAAA,GACF;AACA,EAAA,OAAO,KAAA;AACT","file":"supabase.js","sourcesContent":["/**\n * @marktiderman/genesis-sites/supabase: `createSupabaseSiteStore`, the\n * `SiteStore` over the `genesis_sites` schema (migration\n * `migrations/0001_genesis_sites.sql`).\n *\n * Pass a client signed in as the editor for drafts and publishing (row level\n * security and `can_edit` / `can_view` decide), or an anonymous one for the\n * public read (`getLive`, through `genesis_sites.live_release`). The schema\n * must be exposed to the API.\n *\n * @packageDocumentation\n */\nimport type { SupabaseClient } from \"@supabase/supabase-js\";\nimport { PageDoc, ReleaseSnapshot, SiteDoc, parseSnapshot, type PageKind, type PageMeta, type Release, type ReleaseMeta } from \"../core/schemas\";\nimport { prepareRelease, type Asset, type AssetMeta, type PublishOptions, type SaveResult, type SiteStore } from \"../core/store\";\n\nexport const SITES_SCHEMA = \"genesis_sites\";\n\n/** The file types a site asset may be, as the database checks them. */\nexport const ASSET_TYPES: readonly string[] = Object.freeze([\"image/png\", \"image/jpeg\", \"image/webp\", \"image/avif\", \"image/gif\", \"application/pdf\"]);\n\nexport interface SupabaseSiteStoreOptions {\n  /** The storage bucket for `putAsset`. Default `site-assets`. */\n  bucket?: string;\n}\n\n/** A database error with its SQLSTATE (`GS409` a conflict, `42501` not allowed). */\nexport class SiteStoreError extends Error {\n  constructor(\n    message: string,\n    readonly code: string | undefined,\n    readonly detail?: string,\n  ) {\n    super(message);\n    this.name = \"SiteStoreError\";\n  }\n}\n\ninterface PgError {\n  message: string;\n  code?: string;\n  details?: string;\n}\n\nfunction fail(error: PgError, what: string): never {\n  throw new SiteStoreError(`${what}: ${error.message}`, error.code, error.details);\n}\n\ninterface ReleaseJson {\n  id: string;\n  siteId: string;\n  number: number;\n  note: string | null;\n  createdAt: string;\n  publishedAt: string | null;\n  brandHash: string | null;\n  snapshot?: unknown;\n}\n\nconst metaOf = (r: ReleaseJson): ReleaseMeta => ({ id: r.id, siteId: r.siteId, number: r.number, note: r.note, createdAt: r.createdAt, publishedAt: r.publishedAt, brandHash: r.brandHash });\n\ninterface ReleaseRow {\n  id: string;\n  site_id: string;\n  number: number;\n  note: string | null;\n  created_at: string;\n  published_at: string | null;\n  brand_hash: string | null;\n  snapshot?: unknown;\n}\n\nconst fromRow = (r: ReleaseRow): ReleaseJson => ({\n  id: r.id,\n  siteId: r.site_id,\n  number: r.number,\n  note: r.note,\n  createdAt: r.created_at,\n  publishedAt: r.published_at,\n  brandHash: r.brand_hash,\n  ...(r.snapshot !== undefined ? { snapshot: r.snapshot } : {}),\n});\n\ninterface PageRow {\n  id: string;\n  site_id: string;\n  path: string;\n  kind: PageKind;\n  sort: number;\n  draft_rev: number;\n  title?: string | null;\n  draft?: unknown;\n}\n\nconst pageMeta = (r: PageRow): PageMeta => ({ id: r.id, siteId: r.site_id, path: r.path, kind: r.kind, title: r.title ?? \"\", sort: r.sort, rev: r.draft_rev });\n\n/**\n * A `SiteStore` on Supabase.\n *\n * @stability Beta\n */\nexport function createSupabaseSiteStore(client: SupabaseClient, options: SupabaseSiteStoreOptions = {}): SiteStore {\n  const db = client.schema(SITES_SCHEMA);\n  const bucket = options.bucket ?? \"site-assets\";\n\n  async function release(id: string): Promise<Release> {\n    const { data, error } = await db.from(\"site_releases\").select(\"id, site_id, number, note, created_at, published_at, brand_hash, snapshot\").eq(\"id\", id).single();\n    if (error) fail(error, \"reading the release\");\n    const r = fromRow(data as ReleaseRow);\n    return { ...metaOf(r), snapshot: ReleaseSnapshot.parse(r.snapshot) };\n  }\n\n  async function pageRows(siteId: string, withDraft: boolean): Promise<PageRow[]> {\n    const columns = withDraft ? \"id, site_id, path, kind, sort, draft_rev, draft\" : \"id, site_id, path, kind, sort, draft_rev, title:draft->root->props->>title\";\n    const { data, error } = await db.from(\"site_pages\").select(columns).eq(\"site_id\", siteId).is(\"deleted_at\", null).order(\"sort\").order(\"path\");\n    if (error) fail(error, \"listing pages\");\n    return (data ?? []) as unknown as PageRow[];\n  }\n\n  const store: SiteStore = {\n    async getLive(siteId) {\n      const { data, error } = await db.rpc(\"live_release\", { site_id: siteId });\n      if (error) fail(error, \"reading the live site\");\n      if (!data) return null;\n      const r = data as ReleaseJson;\n      // Page by page: a stored page that no longer parses is left out (and logged), not the whole site.\n      const snapshot = parseSnapshot(r.snapshot, (m) => console.error(`[genesis-sites] the live release of site ${siteId}: ${m}`));\n      if (!snapshot) return null;\n      return { ...metaOf(r), snapshot };\n    },\n    async getDraft(siteId) {\n      const { data, error } = await db.from(\"sites\").select(\"draft, draft_rev\").eq(\"id\", siteId).maybeSingle();\n      if (error) fail(error, \"reading the site\");\n      if (!data) return null;\n      return { site: SiteDoc.parse((data as { draft: unknown }).draft), rev: (data as { draft_rev: number }).draft_rev };\n    },\n    async saveSiteDraft(siteId, rev, site): Promise<SaveResult<SiteDoc>> {\n      const doc = SiteDoc.parse(site);\n      const { data, error } = await db.rpc(\"save_site_draft\", { site_id: siteId, expected_rev: rev, doc });\n      if (error?.code === \"GS409\") {\n        const current = await store.getDraft(siteId);\n        if (!current) fail(error, \"saving the site\");\n        return { conflict: current.site, rev: current.rev };\n      }\n      if (error) fail(error, \"saving the site\");\n      return { rev: data as number };\n    },\n    async listPages(siteId) {\n      return (await pageRows(siteId, false)).map(pageMeta);\n    },\n    async getPageDraft(pageId) {\n      const { data, error } = await db.from(\"site_pages\").select(\"id, site_id, path, kind, draft, draft_rev\").eq(\"id\", pageId).is(\"deleted_at\", null).maybeSingle();\n      if (error) fail(error, \"reading the page\");\n      if (!data) return null;\n      const row = data as PageRow;\n      return { doc: PageDoc.parse(row.draft), rev: row.draft_rev, siteId: row.site_id, path: row.path, kind: row.kind };\n    },\n    async savePageDraft(pageId, rev, doc): Promise<SaveResult<PageDoc>> {\n      const parsed = PageDoc.parse(doc);\n      const { data, error } = await db.rpc(\"save_page_draft\", { page_id: pageId, expected_rev: rev, doc: parsed });\n      if (error?.code === \"GS409\") {\n        const current = await store.getPageDraft(pageId);\n        if (!current) fail(error, \"saving the page\");\n        return { conflict: current.doc, rev: current.rev };\n      }\n      if (error) fail(error, \"saving the page\");\n      return { rev: data as number };\n    },\n    async createPage(siteId, page) {\n      const doc = PageDoc.parse(page.doc);\n      const { data, error } = await db.rpc(\"create_page\", { site_id: siteId, path: page.path, kind: page.kind ?? \"page\", doc });\n      if (error) fail(error, \"creating the page\");\n      const meta = (await store.listPages(siteId)).find((p) => p.id === data);\n      if (!meta) throw new SiteStoreError(\"The page was created but can't be read back.\", undefined);\n      return meta;\n    },\n    async movePage(pageId, path) {\n      const { error } = await db.rpc(\"move_page\", { page_id: pageId, new_path: path });\n      if (error) fail(error, \"moving the page\");\n      const draft = await store.getPageDraft(pageId);\n      if (!draft) throw new SiteStoreError(\"The page moved but can't be read back.\", undefined);\n      const meta = (await store.listPages(draft.siteId)).find((p) => p.id === pageId)!;\n      return meta;\n    },\n    async deletePage(pageId) {\n      const { error } = await db.rpc(\"delete_page\", { page_id: pageId });\n      if (error) fail(error, \"deleting the page\");\n    },\n    async publish(siteId, opts: PublishOptions = {}) {\n      const draft = await store.getDraft(siteId);\n      if (!draft) throw new SiteStoreError(`No site ${siteId} (or you can't see it).`, \"P0002\");\n      const rows = await pageRows(siteId, true);\n      const pages = rows.map((r) => ({ id: r.id, path: r.path, kind: r.kind, doc: PageDoc.parse(r.draft), rev: r.draft_rev }));\n      // Throws PublishBlockedError when a check fails.\n      const prepared = prepareRelease(draft.site, pages, opts);\n      // Migrated props go back into the drafts first, so the release holds them.\n      const revs: Record<string, number> = Object.fromEntries(pages.map((p) => [p.id, p.rev]));\n      let siteRev = draft.rev;\n      for (const m of prepared.migratedPages) {\n        const saved = await store.savePageDraft(m.id, revs[m.id]!, m.doc);\n        if (\"conflict\" in saved) throw new SiteStoreError(\"A page changed while publishing; check again.\", \"GS409\");\n        revs[m.id] = saved.rev;\n      }\n      if (prepared.migratedSite) {\n        const saved = await store.saveSiteDraft(siteId, siteRev, prepared.migratedSite);\n        if (\"conflict\" in saved) throw new SiteStoreError(\"The site changed while publishing; check again.\", \"GS409\");\n        siteRev = saved.rev;\n      }\n      const { data, error } = await db.rpc(\"publish_site\", {\n        site_id: siteId,\n        expected_site_rev: siteRev,\n        expected_pages: revs,\n        note: opts.note ?? null,\n        brand_hash: prepared.brandHash,\n      });\n      if (error) fail(error, \"publishing\");\n      return release((data as ReleaseJson).id);\n    },\n    async rollback(siteId, releaseId) {\n      const { data, error } = await db.rpc(\"rollback_site\", { site_id: siteId, release_id: releaseId });\n      if (error) fail(error, \"rolling back\");\n      return release((data as ReleaseJson).id);\n    },\n    async listReleases(siteId) {\n      const { data, error } = await db.from(\"site_releases\").select(\"id, site_id, number, note, created_at, published_at, brand_hash\").eq(\"site_id\", siteId).order(\"number\", { ascending: false });\n      if (error) fail(error, \"listing releases\");\n      return ((data ?? []) as ReleaseRow[]).map((r) => metaOf(fromRow(r)));\n    },\n    async putAsset(siteId, file: Blob, meta: AssetMeta = {}): Promise<Asset> {\n      const name = (meta.name ?? \"file\").toLowerCase().replace(/[^a-z0-9.]+/g, \"-\").replace(/\\.{2,}/g, \".\").slice(0, 80) || \"file\";\n      const path = `sites/${siteId}/${crypto.randomUUID()}-${name}`;\n      const mime = file.type || \"application/octet-stream\";\n      // The types the database records (no SVG or HTML: a browser runs them as pages). Checked before the upload,\n      // so a refused file never reaches the bucket.\n      if (!ASSET_TYPES.includes(mime)) throw new SiteStoreError(`uploading: ${mime} isn't an image (PNG, JPEG, WebP, AVIF, GIF) or a PDF.`, \"22023\");\n      const upload = await client.storage.from(bucket).upload(path, file, { contentType: mime, upsert: false });\n      if (upload.error) throw new SiteStoreError(`uploading: ${upload.error.message}`, undefined);\n      const { data, error } = await db\n        .from(\"site_assets\")\n        .insert({ site_id: siteId, path, mime, alt: meta.alt ?? null, width: meta.width ?? null, height: meta.height ?? null })\n        .select(\"id\")\n        .single();\n      if (error) {\n        await client.storage.from(bucket).remove([path]);\n        fail(error, \"recording the upload\");\n      }\n      const url = client.storage.from(bucket).getPublicUrl(path).data.publicUrl;\n      return { id: (data as { id: string }).id, siteId, path, url, mime, alt: meta.alt ?? null, width: meta.width ?? null, height: meta.height ?? null };\n    },\n  };\n  return store;\n}\n"]}