@micacms/editor 0.2.0

package/README.md

@@ -0,0 +1,89 @@
+# Mica Editor
+
+> **Experimental.** Pre-1.0: the CLI, the API and the content format can still
+> change without notice. Use it at your own risk.
+
+The local Mica editor: `@micacms/runtime` and `@micacms/editor-ui` composed for
+a developer's own machine. No authentication, no user, no database — the
+content directory is the only thing this process writes, and loopback plus a
+Host allowlist are what make that safe.
+
+```
+localhost:6422
+       │
+       ▼
+      Hono ── /api/*   /admin/*   /health
+       │                  │
+   connector           Vue SPA (from @micacms/editor-ui)
+       │
+ your working tree  ←— the draft workspace
+```
+
+## Running it against a project
+
+```bash
+npx @micacms/editor --content ./content
+```
+
+The published package carries the API and the built admin, so this is one
+command and no clone. It binds to **loopback** and refuses anything else,
+answers only to `localhost` / `127.0.0.1` / `[::1]` — any other Host gets a 403
+pointing at the self-hosted distribution — and prints a banner instead of
+startup log lines before opening a browser on the editor.
+
+There is no sign-in, because there is nothing to sign in to: no identity
+provider, no account, no session, and no `@micacms/auth-oidc` anywhere in the
+dependency graph — a boundary test walks the graph to keep it that way. There
+is no database either: a save is a file in your working tree, which your
+site's dev server hot-reloads, and Publish turns the reviewed changes into one
+commit pushed with your own Git configuration (`MICA_LOCAL_PUBLISH=false`
+keeps Publish out of the editor entirely).
+
+## Working on Mica itself
+
+```bash
+rush update
+rush build --to tag:packages
+
+cd apps/local-editor
+cp .env.example .env
+
+rush dev                               # API on :6422, admin on :5173
+```
+
+`CONTENT_ROOT=../../examples/muster-consulting/content` is the default, so the
+server edits the example project's content. There is nothing to seed: the
+content is already there, in Git.
+
+The server has no content model of its own. It reads one from the content
+directory at `.mica/schema.json`, which the Astro project publishes and the
+developer commits. If it is not there, the server says so and exits.
+
+Then open <http://localhost:5173/admin/>. The editor opens directly — no name,
+no avatar and no account menu, because there is nothing behind them.
+
+`rush dev` runs this app and the Vite dev server together. Vite
+proxies `/api` to the API; the API still needs
+`ADMIN_ORIGINS=http://localhost:5173` for its Origin check, which
+`.env.example` already sets.
+
+## What lives where
+
+```
+src/
+├── cli.ts        the `mica` bin: flags, checks, environment, hand-off
+├── index.ts      the composition: local connector + runtime + editor UI
+├── config.ts     the local slice of the environment, and the refusals
+├── guards.ts     the Host allowlist
+└── banner.ts     what a person sees instead of log lines
+```
+
+Everything of substance is elsewhere: the API and services in
+`@micacms/runtime`, the SPA in `@micacms/editor-ui`, the content rules in
+`@micacms/core` and `@micacms/connectors`. This package is the composition the
+architecture calls `apps/local-editor`, published under the name the command
+deserves.
+
+A deployment other people can reach is the other composition:
+`@micacms/self-hosted`, with an OIDC provider in front — see
+[docs/self-hosting.md](../../docs/self-hosting.md).

package/dist/admin-dir.d.ts

@@ -0,0 +1,3 @@
+/** Where the built editor UI lives: inside the @micacms/editor-ui package. */
+export declare function editorUiDist(): string | undefined;
+//# sourceMappingURL=admin-dir.d.ts.map

package/dist/admin-dir.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"admin-dir.d.ts","sourceRoot":"","sources":["../src/admin-dir.ts"],"names":[],"mappings":"AAAA,8EAA8E;AAO9E,wBAAgB,YAAY,IAAI,MAAM,GAAG,SAAS,CAQjD"}

package/dist/admin-dir.js

@@ -0,0 +1,15 @@
+/** Where the built editor UI lives: inside the @micacms/editor-ui package. */
+import { createRequire } from "node:module";
+import path from "node:path";
+const require = createRequire(import.meta.url);
+export function editorUiDist() {
+    try {
+        return path.join(path.dirname(require.resolve("@micacms/editor-ui/package.json")), "dist");
+    }
+    catch {
+        // Running from source before an install has linked the package. The app
+        // falls back to its 503 explainer, which names the fix.
+        return undefined;
+    }
+}
+//# sourceMappingURL=admin-dir.js.map

package/dist/admin-dir.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"admin-dir.js","sourceRoot":"","sources":["../src/admin-dir.ts"],"names":[],"mappings":"AAAA,8EAA8E;AAE9E,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,MAAM,OAAO,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAE/C,MAAM,UAAU,YAAY;IAC1B,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,iCAAiC,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;IAC7F,CAAC;IAAC,MAAM,CAAC;QACP,wEAAwE;QACxE,wDAAwD;QACxD,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC"}

package/dist/banner.d.ts

@@ -0,0 +1,46 @@
+/**
+ * What `npx @micacms/editor` says when it works.
+ *
+ * The startup log lines are written for whoever is reading a container's
+ * output later: every field that could matter, flat, greppable, and in no
+ * particular order of importance. A person who has just typed a command needs
+ * the opposite — the address to open, the directory being edited, and what
+ * pressing Save will do to their repository. Three facts, in that order,
+ * because the first minute decides whether there is a second one.
+ *
+ * Everything here is decoration over information the server already has. It is
+ * printed instead of the startup log lines, never as well: two accounts of the
+ * same event, disagreeing in tone, is worse than either alone.
+ */
+export interface Banner {
+    version: string;
+    /** The origin the person should open, without the `/admin/` path. */
+    url: string;
+    contentRoot: string;
+    collections: number;
+    singletons: number;
+}
+/** ANSI, or nothing at all when the output is not a terminal. */
+export declare function colors(enabled: boolean): {
+    bold: (text: string) => string;
+    dim: (text: string) => string;
+    brand: (text: string) => string;
+    label: (text: string) => string;
+};
+/**
+ * True unless something says otherwise.
+ *
+ * `NO_COLOR` is the convention (no-color.org); a pipe or a file is the other
+ * case, and escape codes in a redirected log help nobody.
+ */
+export declare function supportsColor(stream: {
+    isTTY?: boolean;
+}, env: NodeJS.ProcessEnv): boolean;
+export declare function startupBanner(banner: Banner, useColor: boolean): string;
+/**
+ * The one failure this command is most likely to hit, and the one the operating
+ * system explains worst: `EADDRINUSE` alone tells nobody which port or what to
+ * do instead.
+ */
+export declare function portInUse(port: number, host: string, useColor: boolean): string;
+//# sourceMappingURL=banner.d.ts.map

package/dist/banner.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"banner.d.ts","sourceRoot":"","sources":["../src/banner.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAIH,MAAM,WAAW,MAAM;IACrB,OAAO,EAAE,MAAM,CAAC;IAChB,qEAAqE;IACrE,GAAG,EAAE,MAAM,CAAC;IACZ,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,iEAAiE;AACjE,wBAAgB,MAAM,CAAC,OAAO,EAAE,OAAO;iBACC,MAAM;gBAAN,MAAM;kBAAN,MAAM;kBAAN,MAAM;EAO7C;AAED;;;;;GAKG;AACH,wBAAgB,aAAa,CAAC,MAAM,EAAE;IAAE,KAAK,CAAC,EAAE,OAAO,CAAA;CAAE,EAAE,GAAG,EAAE,MAAM,CAAC,UAAU,GAAG,OAAO,CAI1F;AAkBD,wBAAgB,aAAa,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,GAAG,MAAM,CAuBvE;AAED;;;;GAIG;AACH,wBAAgB,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,GAAG,MAAM,CAQ/E"}

package/dist/banner.js

@@ -0,0 +1,88 @@
+/**
+ * What `npx @micacms/editor` says when it works.
+ *
+ * The startup log lines are written for whoever is reading a container's
+ * output later: every field that could matter, flat, greppable, and in no
+ * particular order of importance. A person who has just typed a command needs
+ * the opposite — the address to open, the directory being edited, and what
+ * pressing Save will do to their repository. Three facts, in that order,
+ * because the first minute decides whether there is a second one.
+ *
+ * Everything here is decoration over information the server already has. It is
+ * printed instead of the startup log lines, never as well: two accounts of the
+ * same event, disagreeing in tone, is worse than either alone.
+ */
+import path from "node:path";
+/** ANSI, or nothing at all when the output is not a terminal. */
+export function colors(enabled) {
+    const wrap = (code) => (text) => (enabled ? `[${code}m${text}` : text);
+    return {
+        bold: wrap("1"),
+        dim: wrap("2"),
+        brand: wrap("36"),
+        label: wrap("2"),
+    };
+}
+/**
+ * True unless something says otherwise.
+ *
+ * `NO_COLOR` is the convention (no-color.org); a pipe or a file is the other
+ * case, and escape codes in a redirected log help nobody.
+ */
+export function supportsColor(stream, env) {
+    if (env["NO_COLOR"])
+        return false;
+    if (env["FORCE_COLOR"])
+        return true;
+    return Boolean(stream.isTTY);
+}
+/** Paths inside the working directory read better as the relative ones. */
+function readable(target, cwd = process.cwd()) {
+    const relative = path.relative(cwd, target);
+    if (!relative || relative.startsWith("..") || path.isAbsolute(relative))
+        return target;
+    return `./${relative}`;
+}
+/** "3 collections and 2 singletons", or whichever half is not zero. */
+function modelSummary(collections, singletons) {
+    const plural = (count, word) => `${count} ${word}${count === 1 ? "" : "s"}`;
+    const parts = [];
+    if (collections > 0)
+        parts.push(plural(collections, "collection"));
+    if (singletons > 0)
+        parts.push(plural(singletons, "singleton"));
+    return parts.join(" and ") || "an empty model";
+}
+export function startupBanner(banner, useColor) {
+    const c = colors(useColor);
+    const editor = `${banner.url}/admin/`;
+    const row = (label, value) => `  ${c.label(label.padEnd(9))}  ${value}`;
+    const lines = [
+        "",
+        `  ${c.brand("◆")} ${c.bold("Mica")} ${c.dim(banner.version)}`,
+        "",
+        row("Editor", c.bold(editor)),
+        row("Content", `${readable(banner.contentRoot)} ${c.dim(`— ${modelSummary(banner.collections, banner.singletons)}`)}`),
+        row("Saving", c.dim("writes files into that directory; Publish commits and pushes them.")),
+        "",
+        `  ${c.dim("No sign-in on your own machine — the link above opens straight into the editor.")}`,
+        `  ${c.dim("Mica keeps no state of its own here: everything you save is a file in that directory.")}`,
+        "",
+        `  ${c.dim("Run your site's dev server beside this to see the changes. Ctrl+C stops Mica.")}`,
+        "",
+    ];
+    return `${lines.join("\n")}\n`;
+}
+/**
+ * The one failure this command is most likely to hit, and the one the operating
+ * system explains worst: `EADDRINUSE` alone tells nobody which port or what to
+ * do instead.
+ */
+export function portInUse(port, host, useColor) {
+    const c = colors(useColor);
+    return (`\n  ${c.bold(`Port ${port} is already in use on ${host}.`)}\n\n` +
+        `  Something else is listening there — another Mica, most likely.\n` +
+        `  Stop it, or give this one a different port:\n\n` +
+        `    npx @micacms/editor --port ${port + 1}\n\n`);
+}
+//# sourceMappingURL=banner.js.map

package/dist/banner.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"banner.js","sourceRoot":"","sources":["../src/banner.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,IAAI,MAAM,WAAW,CAAC;AAW7B,iEAAiE;AACjE,MAAM,UAAU,MAAM,CAAC,OAAgB;IACrC,MAAM,IAAI,GAAG,CAAC,IAAY,EAAE,EAAE,CAAC,CAAC,IAAY,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,IAAI,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IAC5F,OAAO;QACL,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC;QACf,GAAG,EAAE,IAAI,CAAC,GAAG,CAAC;QACd,KAAK,EAAE,IAAI,CAAC,IAAI,CAAC;QACjB,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC;KACjB,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,aAAa,CAAC,MAA2B,EAAE,GAAsB;IAC/E,IAAI,GAAG,CAAC,UAAU,CAAC;QAAE,OAAO,KAAK,CAAC;IAClC,IAAI,GAAG,CAAC,aAAa,CAAC;QAAE,OAAO,IAAI,CAAC;IACpC,OAAO,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC/B,CAAC;AAED,2EAA2E;AAC3E,SAAS,QAAQ,CAAC,MAAc,EAAE,GAAG,GAAG,OAAO,CAAC,GAAG,EAAE;IACnD,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IAC5C,IAAI,CAAC,QAAQ,IAAI,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC;QAAE,OAAO,MAAM,CAAC;IACvF,OAAO,KAAK,QAAQ,EAAE,CAAC;AACzB,CAAC;AAED,uEAAuE;AACvE,SAAS,YAAY,CAAC,WAAmB,EAAE,UAAkB;IAC3D,MAAM,MAAM,GAAG,CAAC,KAAa,EAAE,IAAY,EAAE,EAAE,CAAC,GAAG,KAAK,IAAI,IAAI,GAAG,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC;IAC5F,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,IAAI,WAAW,GAAG,CAAC;QAAE,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,YAAY,CAAC,CAAC,CAAC;IACnE,IAAI,UAAU,GAAG,CAAC;QAAE,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE,WAAW,CAAC,CAAC,CAAC;IAChE,OAAO,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,gBAAgB,CAAC;AACjD,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,MAAc,EAAE,QAAiB;IAC7D,MAAM,CAAC,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC;IAC3B,MAAM,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG,SAAS,CAAC;IAEtC,MAAM,GAAG,GAAG,CAAC,KAAa,EAAE,KAAa,EAAU,EAAE,CACnD,KAAK,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,KAAK,KAAK,EAAE,CAAC;IAE5C,MAAM,KAAK,GAAG;QACZ,EAAE;QACF,KAAK,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE;QAC9D,EAAE;QACF,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC7B,GAAG,CAAC,SAAS,EAAE,GAAG,QAAQ,CAAC,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,KAAK,YAAY,CAAC,MAAM,CAAC,WAAW,EAAE,MAAM,CAAC,UAAU,CAAC,EAAE,CAAC,EAAE,CAAC;QACtH,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC,GAAG,CAAC,oEAAoE,CAAC,CAAC;QAC1F,EAAE;QACF,KAAK,CAAC,CAAC,GAAG,CAAC,iFAAiF,CAAC,EAAE;QAC/F,KAAK,CAAC,CAAC,GAAG,CAAC,uFAAuF,CAAC,EAAE;QACrG,EAAE;QACF,KAAK,CAAC,CAAC,GAAG,CAAC,+EAA+E,CAAC,EAAE;QAC7F,EAAE;KACH,CAAC;IAEF,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC;AACjC,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,SAAS,CAAC,IAAY,EAAE,IAAY,EAAE,QAAiB;IACrE,MAAM,CAAC,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC;IAC3B,OAAO,CACL,OAAO,CAAC,CAAC,IAAI,CAAC,QAAQ,IAAI,yBAAyB,IAAI,GAAG,CAAC,MAAM;QACjE,oEAAoE;QACpE,mDAAmD;QACnD,kCAAkC,IAAI,GAAG,CAAC,MAAM,CACjD,CAAC;AACJ,CAAC"}

package/dist/cli.d.ts

@@ -0,0 +1,43 @@
+#!/usr/bin/env node
+/**
+ * `npx @micacms/editor` — Mica against a project on this machine.
+ *
+ * The point of this file is that adopting Mica should not mean adopting this
+ * repository. Everything it does is set environment variables and hand over to
+ * the same entry point a container runs, so there is one server with one
+ * configuration path and this is a front door rather than a second one.
+ *
+ * Two defaults differ from a container's, and both are deliberate:
+ *
+ *   - it binds to loopback. A container binds 0.0.0.0 because it has to; a
+ *     laptop does not, and this editor has no authentication. Anything
+ *     reachable by anyone else runs @micacms/self-hosted with an identity
+ *     provider — see docs/self-hosting.md.
+ *   - it talks to a person instead of to a log collector: one short banner
+ *     saying where the editor is and what happens when you save, and the
+ *     browser opened on it. `MICA_CLI` is how the server is told which of the
+ *     two audiences it has.
+ *
+ * There is no state to keep anywhere: the local editor has no database, no
+ * account and no session, so nothing is written outside the content
+ * directory.
+ *
+ * Explicit environment wins over every flag default here, and a flag wins over
+ * a `.env` file, because `loadConfig` leaves already-set variables alone.
+ */
+export interface Options {
+    content: string;
+    port?: string;
+    host?: string;
+    /** Undefined means "decide from the terminal" — see `shouldOpenBrowser`. */
+    open?: boolean;
+}
+export declare function parse(argv: string[]): Options;
+/**
+ * Opening a browser is a courtesy, so it is offered only where it can be
+ * welcome: an interactive terminal that somebody is sitting at. A script, a
+ * container and a CI job all get a server and no surprises.
+ */
+export declare function shouldOpenBrowser(options: Options, env: NodeJS.ProcessEnv): boolean;
+export declare function main(): Promise<void>;
+//# sourceMappingURL=cli.d.ts.map

package/dist/cli.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli.d.ts","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":";AACA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AASH,MAAM,WAAW,OAAO;IACtB,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,4EAA4E;IAC5E,IAAI,CAAC,EAAE,OAAO,CAAC;CAChB;AAsBD,wBAAgB,KAAK,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAgD7C;AAkBD;;;;GAIG;AACH,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,CAAC,UAAU,GAAG,OAAO,CAGnF;AAED,wBAAsB,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC,CAoD1C"}

package/dist/cli.js

@@ -0,0 +1,184 @@
+#!/usr/bin/env node
+/**
+ * `npx @micacms/editor` — Mica against a project on this machine.
+ *
+ * The point of this file is that adopting Mica should not mean adopting this
+ * repository. Everything it does is set environment variables and hand over to
+ * the same entry point a container runs, so there is one server with one
+ * configuration path and this is a front door rather than a second one.
+ *
+ * Two defaults differ from a container's, and both are deliberate:
+ *
+ *   - it binds to loopback. A container binds 0.0.0.0 because it has to; a
+ *     laptop does not, and this editor has no authentication. Anything
+ *     reachable by anyone else runs @micacms/self-hosted with an identity
+ *     provider — see docs/self-hosting.md.
+ *   - it talks to a person instead of to a log collector: one short banner
+ *     saying where the editor is and what happens when you save, and the
+ *     browser opened on it. `MICA_CLI` is how the server is told which of the
+ *     two audiences it has.
+ *
+ * There is no state to keep anywhere: the local editor has no database, no
+ * account and no session, so nothing is written outside the content
+ * directory.
+ *
+ * Explicit environment wins over every flag default here, and a flag wins over
+ * a `.env` file, because `loadConfig` leaves already-set variables alone.
+ */
+import { existsSync, realpathSync } from "node:fs";
+import path from "node:path";
+import { pathToFileURL } from "node:url";
+import { MANIFEST_PATH } from "@micacms/core";
+import { DEFAULT_PORT, VERSION } from "@micacms/runtime";
+const USAGE = `
+  mica — edit your Astro project's content, on this machine
+
+  Usage
+    $ npx @micacms/editor [content directory]
+
+  Options
+    -c, --content <dir>   The content root (default: ./content)
+    -p, --port <number>   Port to listen on (default: ${DEFAULT_PORT})
+        --host <address>  Address to bind (default: 127.0.0.1)
+        --no-open         Do not open the browser
+    -h, --help            Show this
+    -v, --version         Print the version
+
+  There is no sign-in here, because there is nothing to sign in to: this mode
+  has no identity provider, no account and no user. That is right for your own
+  machine and wrong everywhere else — a Mica other people reach runs as a
+  container with an identity provider. See docs/self-hosting.md.
+`;
+export function parse(argv) {
+    const options = { content: "./content" };
+    for (let index = 0; index < argv.length; index++) {
+        const flag = argv[index];
+        const value = () => {
+            const next = argv[++index];
+            if (next === undefined || next.startsWith("-"))
+                fail(`${flag} needs a value.`);
+            return next;
+        };
+        switch (flag) {
+            case "-c":
+            case "--content":
+                options.content = value();
+                break;
+            case "-p":
+            case "--port":
+                options.port = value();
+                break;
+            case "--host":
+                options.host = value();
+                break;
+            case "--open":
+                options.open = true;
+                break;
+            case "--no-open":
+                options.open = false;
+                break;
+            case "-h":
+            case "--help":
+                process.stdout.write(`${USAGE}\n`);
+                process.exit(0);
+            case "-v":
+            case "--version":
+                process.stdout.write(`${VERSION}\n`);
+                process.exit(0);
+            default:
+                // A bare path is the content root, so `npx @micacms/editor ./site/content`
+                // does what it looks like it does.
+                if (!flag.startsWith("-"))
+                    options.content = flag;
+                else
+                    fail(`Unknown option "${flag}".`);
+        }
+    }
+    return options;
+}
+/**
+ * A problem the person can fix, said the way a person reads.
+ *
+ * The title is the fact, the lines under it are what to do about it. Anything
+ * printed here has already decided the command is over: the caller exits.
+ */
+function report(title, lines) {
+    const body = lines.map((line) => (line ? `  ${line}` : "")).join("\n");
+    process.stderr.write(`\n  ${title}\n\n${body}\n\n`);
+}
+function fail(message) {
+    report(message, ["Run `npx @micacms/editor --help` to see every option."]);
+    process.exit(64); // EX_USAGE
+}
+/**
+ * Opening a browser is a courtesy, so it is offered only where it can be
+ * welcome: an interactive terminal that somebody is sitting at. A script, a
+ * container and a CI job all get a server and no surprises.
+ */
+export function shouldOpenBrowser(options, env) {
+    if (options.open !== undefined)
+        return options.open;
+    return Boolean(process.stdout.isTTY) && !env["CI"];
+}
+export async function main() {
+    const options = parse(process.argv.slice(2));
+    const content = path.resolve(options.content);
+    if (!existsSync(content)) {
+        report(`There is no content directory at ${content}.`, [
+            "Mica edits the directory your Astro project publishes content into —",
+            "the `root` in your `defineSite({ root: \"./content\" })`.",
+            "",
+            "  npx @micacms/editor ./path/to/content",
+            "",
+            "If this is a new project, create the directory and Mica writes the first",
+            "entry into it.",
+        ]);
+        process.exit(64); // EX_USAGE
+    }
+    // A far more useful message than the server's, because here we know the
+    // project is on this machine and can name the command that fixes it.
+    if (!existsSync(path.join(content, MANIFEST_PATH))) {
+        report(`There is no content model at ${path.join(content, MANIFEST_PATH)}.`, [
+            "Mica ships without one: your Astro project defines the model, and building",
+            "the project writes it there. Run this in the project, then start Mica again:",
+            "",
+            "  npx astro build        # or start the dev server once",
+            "",
+            "If you have not defined a model yet, docs/getting-started.md is five minutes.",
+        ]);
+        process.exit(78); // EX_CONFIG
+    }
+    const defaults = {
+        CONTENT_ROOT: content,
+        HOST: options.host ?? "127.0.0.1",
+        PORT: options.port ?? String(DEFAULT_PORT),
+        // Tells the server it is talking to a person: one banner instead of the
+        // startup log lines a collector wants.
+        MICA_CLI: "true",
+        MICA_OPEN: String(shouldOpenBrowser(options, process.env)),
+    };
+    for (const [key, value] of Object.entries(defaults)) {
+        process.env[key] ??= value;
+    }
+    // MICA_PUBLIC_URL has to agree with the port, and only matters here for
+    // cookie scope and the Origin check — both of which are this process's own
+    // address.
+    process.env["MICA_PUBLIC_URL"] ??= `http://localhost:${process.env["PORT"]}`;
+    // The server is imported rather than spawned: one process, one signal
+    // handler, and a stack trace that points at the real thing.
+    await import("./index.js");
+}
+// Only when this file *is* the command. Importing it — which the tests do, and
+// which a future `mica init` would — must not start a server.
+//
+// `realpathSync` matters: npm and npx run this file through a symlink in
+// `node_modules/.bin`, and Node resolves `import.meta.url` to the symlink's
+// real target. Comparing against the raw `argv[1]` never matched there, so
+// `npx @micacms/editor` silently did nothing.
+if (process.argv[1] && import.meta.url === pathToFileURL(realpathSync(process.argv[1])).href) {
+    main().catch((error) => {
+        process.stderr.write(`\n${error instanceof Error ? error.stack : String(error)}\n`);
+        process.exit(1);
+    });
+}
+//# sourceMappingURL=cli.js.map

package/dist/cli.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli.js","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":";AACA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAEH,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAEzC,OAAO,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAC9C,OAAO,EAAE,YAAY,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAUzD,MAAM,KAAK,GAAG;;;;;;;;wDAQ0C,YAAY;;;;;;;;;;CAUnE,CAAC;AAEF,MAAM,UAAU,KAAK,CAAC,IAAc;IAClC,MAAM,OAAO,GAAY,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC;IAElD,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC;QACjD,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAE,CAAC;QAC1B,MAAM,KAAK,GAAG,GAAW,EAAE;YACzB,MAAM,IAAI,GAAG,IAAI,CAAC,EAAE,KAAK,CAAC,CAAC;YAC3B,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;gBAAE,IAAI,CAAC,GAAG,IAAI,iBAAiB,CAAC,CAAC;YAC/E,OAAO,IAAK,CAAC;QACf,CAAC,CAAC;QAEF,QAAQ,IAAI,EAAE,CAAC;YACb,KAAK,IAAI,CAAC;YACV,KAAK,WAAW;gBACd,OAAO,CAAC,OAAO,GAAG,KAAK,EAAE,CAAC;gBAC1B,MAAM;YACR,KAAK,IAAI,CAAC;YACV,KAAK,QAAQ;gBACX,OAAO,CAAC,IAAI,GAAG,KAAK,EAAE,CAAC;gBACvB,MAAM;YACR,KAAK,QAAQ;gBACX,OAAO,CAAC,IAAI,GAAG,KAAK,EAAE,CAAC;gBACvB,MAAM;YACR,KAAK,QAAQ;gBACX,OAAO,CAAC,IAAI,GAAG,IAAI,CAAC;gBACpB,MAAM;YACR,KAAK,WAAW;gBACd,OAAO,CAAC,IAAI,GAAG,KAAK,CAAC;gBACrB,MAAM;YACR,KAAK,IAAI,CAAC;YACV,KAAK,QAAQ;gBACX,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,KAAK,IAAI,CAAC,CAAC;gBACnC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAElB,KAAK,IAAI,CAAC;YACV,KAAK,WAAW;gBACd,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,OAAO,IAAI,CAAC,CAAC;gBACrC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAElB;gBACE,2EAA2E;gBAC3E,mCAAmC;gBACnC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;oBAAE,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC;;oBAC7C,IAAI,CAAC,mBAAmB,IAAI,IAAI,CAAC,CAAC;QAC3C,CAAC;IACH,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;;;GAKG;AACH,SAAS,MAAM,CAAC,KAAa,EAAE,KAAe;IAC5C,MAAM,IAAI,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACvE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,KAAK,OAAO,IAAI,MAAM,CAAC,CAAC;AACtD,CAAC;AAED,SAAS,IAAI,CAAC,OAAe;IAC3B,MAAM,CAAC,OAAO,EAAE,CAAC,uDAAuD,CAAC,CAAC,CAAC;IAC3E,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,WAAW;AAC/B,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,iBAAiB,CAAC,OAAgB,EAAE,GAAsB;IACxE,IAAI,OAAO,CAAC,IAAI,KAAK,SAAS;QAAE,OAAO,OAAO,CAAC,IAAI,CAAC;IACpD,OAAO,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;AACrD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,IAAI;IACxB,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IAC7C,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IAE9C,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;QACzB,MAAM,CAAC,oCAAoC,OAAO,GAAG,EAAE;YACrD,sEAAsE;YACtE,2DAA2D;YAC3D,EAAE;YACF,yCAAyC;YACzC,EAAE;YACF,0EAA0E;YAC1E,gBAAgB;SACjB,CAAC,CAAC;QACH,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,WAAW;IAC/B,CAAC;IAED,wEAAwE;IACxE,qEAAqE;IACrE,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC,EAAE,CAAC;QACnD,MAAM,CAAC,gCAAgC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,aAAa,CAAC,GAAG,EAAE;YAC3E,4EAA4E;YAC5E,8EAA8E;YAC9E,EAAE;YACF,yDAAyD;YACzD,EAAE;YACF,+EAA+E;SAChF,CAAC,CAAC;QACH,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,YAAY;IAChC,CAAC;IAED,MAAM,QAAQ,GAA2B;QACvC,YAAY,EAAE,OAAO;QACrB,IAAI,EAAE,OAAO,CAAC,IAAI,IAAI,WAAW;QACjC,IAAI,EAAE,OAAO,CAAC,IAAI,IAAI,MAAM,CAAC,YAAY,CAAC;QAC1C,wEAAwE;QACxE,uCAAuC;QACvC,QAAQ,EAAE,MAAM;QAChB,SAAS,EAAE,MAAM,CAAC,iBAAiB,CAAC,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC;KAC3D,CAAC;IAEF,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;QACpD,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,KAAK,CAAC;IAC7B,CAAC;IACD,wEAAwE;IACxE,2EAA2E;IAC3E,WAAW;IACX,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC,KAAK,oBAAoB,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;IAE7E,sEAAsE;IACtE,4DAA4D;IAC5D,MAAM,MAAM,CAAC,YAAY,CAAC,CAAC;AAC7B,CAAC;AAED,+EAA+E;AAC/E,8DAA8D;AAC9D,EAAE;AACF,yEAAyE;AACzE,4EAA4E;AAC5E,2EAA2E;AAC3E,8CAA8C;AAC9C,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,KAAK,aAAa,CAAC,YAAY,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAC7F,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE;QAC9B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACpF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/config.d.ts

@@ -0,0 +1,21 @@
+/**
+ * The local editor's configuration.
+ *
+ * Small on purpose: the variables the runtime reads, minus everything that
+ * describes a deployment. There is no `REPOSITORY` — this app *is* the local
+ * connector against a checkout — no `DATA_DIR`, because it keeps no state,
+ * and no OIDC or admission variable exists to be set, which is a stronger
+ * statement than ignoring one.
+ *
+ * The refusals are the containment for a server with no authentication:
+ * production is refused, a non-local public URL is refused, and any listening
+ * address but loopback is refused, with no override. Remote access is what
+ * the self-hosted distribution is.
+ */
+import { type RuntimeConfig } from "@micacms/runtime";
+export type LocalConfig = RuntimeConfig & {
+    MICA_CLI: boolean;
+    MICA_OPEN: boolean;
+};
+export declare function loadConfig(env?: NodeJS.ProcessEnv): LocalConfig;
+//# sourceMappingURL=config.d.ts.map

package/dist/config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAIH,OAAO,EASL,KAAK,aAAa,EACnB,MAAM,kBAAkB,CAAC;AAsD1B,MAAM,MAAM,WAAW,GAAG,aAAa,GAAG;IAAE,QAAQ,EAAE,OAAO,CAAC;IAAC,SAAS,EAAE,OAAO,CAAA;CAAE,CAAC;AAEpF,wBAAgB,UAAU,CAAC,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,WAAW,CAkD5E"}

package/dist/config.js

@@ -0,0 +1,96 @@
+/**
+ * The local editor's configuration.
+ *
+ * Small on purpose: the variables the runtime reads, minus everything that
+ * describes a deployment. There is no `REPOSITORY` — this app *is* the local
+ * connector against a checkout — no `DATA_DIR`, because it keeps no state,
+ * and no OIDC or admission variable exists to be set, which is a stronger
+ * statement than ignoring one.
+ *
+ * The refusals are the containment for a server with no authentication:
+ * production is refused, a non-local public URL is refused, and any listening
+ * address but loopback is refused, with no override. Remote access is what
+ * the self-hosted distribution is.
+ */
+import { z } from "zod";
+import { bool, ConfigError, deriveRuntime, describeConfigIssues, loadEnvFile, LOOPBACK, runtimeEnv, withoutBlanks, } from "@micacms/runtime";
+const { NODE_ENV, LOG_LEVEL, HOST, PORT, MICA_PUBLIC_URL, CONTENT_ROOT, MICA_LOCAL_PUBLISH, MAX_UPLOAD_BYTES, ADMIN_ORIGINS, ADMIN_DIR, } = runtimeEnv;
+const schema = z
+    .object({
+    NODE_ENV,
+    LOG_LEVEL,
+    HOST,
+    PORT,
+    MICA_PUBLIC_URL,
+    CONTENT_ROOT,
+    MICA_LOCAL_PUBLISH,
+    MAX_UPLOAD_BYTES,
+    ADMIN_ORIGINS,
+    ADMIN_DIR,
+    /**
+     * Set by the `mica` bin, and by nothing else. The audience for the
+     * startup output: a person at a terminal gets one banner, a log collector
+     * gets the structured lines.
+     */
+    MICA_CLI: bool(false),
+    /** Whether that front door should open a browser once it is listening. */
+    MICA_OPEN: bool(false),
+})
+    .transform((env) => ({
+    ...deriveRuntime({
+        ...env,
+        // Fixed, not configurable: the local editor edits a checkout. A remote
+        // repository is the self-hosted app's job.
+        REPOSITORY: "local",
+        REPOSITORY_ROOT: "content",
+        REPOSITORY_BRANCH: "main",
+        REPOSITORY_TOKEN: undefined,
+        REPOSITORY_PROJECT: undefined,
+        REPOSITORY_API_BASE: undefined,
+        // There is no proxy in front of a loopback server to trust.
+        TRUST_PROXY: false,
+    }),
+    HOST: env.HOST ?? "127.0.0.1",
+}));
+export function loadConfig(env = process.env) {
+    // Only when reading the ambient environment: tests pass an explicit object
+    // and must not pick up whatever `.env` sits in the working directory.
+    if (env === process.env)
+        loadEnvFile();
+    const parsed = schema.safeParse(withoutBlanks(env));
+    if (!parsed.success)
+        throw new ConfigError(describeConfigIssues(parsed.error));
+    const config = parsed.data;
+    /**
+     * The local editor has no authentication. It must never be reachable.
+     *
+     * This is the single most dangerous configuration Mica can be in, so it is
+     * refused at the three points where it stops being a developer's
+     * convenience: a production build, a base URL that is not the local
+     * machine, and a listening address that is not the local machine either.
+     */
+    if (config.isProduction) {
+        throw new ConfigError("The local editor has no authentication, and NODE_ENV=production.\n" +
+            "  There is no identity provider and no user: every request is allowed.\n" +
+            "  A deployment runs @micacms/self-hosted with an OIDC provider instead —\n" +
+            "  see docs/self-hosting.md.");
+    }
+    const host = new URL(config.MICA_PUBLIC_URL).hostname;
+    if (!LOOPBACK.has(host)) {
+        throw new ConfigError(`The local editor has no authentication, but MICA_PUBLIC_URL points at "${host}".\n` +
+            "  It is for a developer's own machine only. Anything reachable by anyone\n" +
+            "  else runs @micacms/self-hosted with an identity provider.");
+    }
+    /**
+     * The same rule for the socket. A base URL saying `localhost` while the
+     * process listens on `0.0.0.0` leaves an unauthenticated editor open to the
+     * whole network. There is deliberately no override.
+     */
+    if (!LOOPBACK.has(config.HOST) && config.HOST !== "::1") {
+        throw new ConfigError(`The local editor has no authentication, but HOST is "${config.HOST}".\n` +
+            "  It binds to the loopback address and nothing else. Use HOST=127.0.0.1,\n" +
+            "  or run @micacms/self-hosted with an identity provider.");
+    }
+    return config;
+}
+//# sourceMappingURL=config.js.map

package/dist/config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EACL,IAAI,EACJ,WAAW,EACX,aAAa,EACb,oBAAoB,EACpB,WAAW,EACX,QAAQ,EACR,UAAU,EACV,aAAa,GAEd,MAAM,kBAAkB,CAAC;AAE1B,MAAM,EACJ,QAAQ,EACR,SAAS,EACT,IAAI,EACJ,IAAI,EACJ,eAAe,EACf,YAAY,EACZ,kBAAkB,EAClB,gBAAgB,EAChB,aAAa,EACb,SAAS,GACV,GAAG,UAAU,CAAC;AAEf,MAAM,MAAM,GAAG,CAAC;KACb,MAAM,CAAC;IACN,QAAQ;IACR,SAAS;IACT,IAAI;IACJ,IAAI;IACJ,eAAe;IACf,YAAY;IACZ,kBAAkB;IAClB,gBAAgB;IAChB,aAAa;IACb,SAAS;IAET;;;;OAIG;IACH,QAAQ,EAAE,IAAI,CAAC,KAAK,CAAC;IACrB,0EAA0E;IAC1E,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC;CACvB,CAAC;KACD,SAAS,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;IACnB,GAAG,aAAa,CAAC;QACf,GAAG,GAAG;QACN,uEAAuE;QACvE,2CAA2C;QAC3C,UAAU,EAAE,OAAgB;QAC5B,eAAe,EAAE,SAAS;QAC1B,iBAAiB,EAAE,MAAM;QACzB,gBAAgB,EAAE,SAAS;QAC3B,kBAAkB,EAAE,SAAS;QAC7B,mBAAmB,EAAE,SAAS;QAC9B,4DAA4D;QAC5D,WAAW,EAAE,KAAK;KACnB,CAAC;IACF,IAAI,EAAE,GAAG,CAAC,IAAI,IAAI,WAAW;CAC9B,CAAC,CAAC,CAAC;AAIN,MAAM,UAAU,UAAU,CAAC,MAAyB,OAAO,CAAC,GAAG;IAC7D,2EAA2E;IAC3E,sEAAsE;IACtE,IAAI,GAAG,KAAK,OAAO,CAAC,GAAG;QAAE,WAAW,EAAE,CAAC;IAEvC,MAAM,MAAM,GAAG,MAAM,CAAC,SAAS,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC;IACpD,IAAI,CAAC,MAAM,CAAC,OAAO;QAAE,MAAM,IAAI,WAAW,CAAC,oBAAoB,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;IAE/E,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC;IAE3B;;;;;;;OAOG;IACH,IAAI,MAAM,CAAC,YAAY,EAAE,CAAC;QACxB,MAAM,IAAI,WAAW,CACnB,oEAAoE;YAClE,0EAA0E;YAC1E,4EAA4E;YAC5E,6BAA6B,CAChC,CAAC;IACJ,CAAC;IAED,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC,QAAQ,CAAC;IACtD,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;QACxB,MAAM,IAAI,WAAW,CACnB,0EAA0E,IAAI,MAAM;YAClF,4EAA4E;YAC5E,6DAA6D,CAChE,CAAC;IACJ,CAAC;IAED;;;;OAIG;IACH,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,MAAM,CAAC,IAAI,KAAK,KAAK,EAAE,CAAC;QACxD,MAAM,IAAI,WAAW,CACnB,wDAAwD,MAAM,CAAC,IAAI,MAAM;YACvE,4EAA4E;YAC5E,0DAA0D,CAC7D,CAAC;IACJ,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/guards.d.ts

@@ -0,0 +1,18 @@
+/**
+ * The Host allowlist — what replaced the local session's cookie.
+ *
+ * Under DNS rebinding, a page re-resolves its own name to `127.0.0.1` and the
+ * browser then treats requests to it as same-origin. Writes still fail on the
+ * Origin check; *reads* would succeed, and the only thing that used to stop
+ * them was a session cookie scoped to `localhost` that the rebound name never
+ * received. The cookie is gone — local mode keeps no session, no token and no
+ * database — so the rule is stated directly instead: this server answers only
+ * to names that are this machine.
+ *
+ * Smaller than what it replaces, standard for exactly this, and applied in
+ * front of everything, /health included.
+ */
+import type { MiddlewareHandler } from "hono";
+import type { Env } from "@micacms/runtime";
+export declare function hostGuard(): MiddlewareHandler<Env>;
+//# sourceMappingURL=guards.d.ts.map

package/dist/guards.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"guards.d.ts","sourceRoot":"","sources":["../src/guards.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,MAAM,CAAC;AAE9C,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,kBAAkB,CAAC;AAa5C,wBAAgB,SAAS,IAAI,iBAAiB,CAAC,GAAG,CAAC,CAgBlD"}

package/dist/guards.js

@@ -0,0 +1,36 @@
+/**
+ * The Host allowlist — what replaced the local session's cookie.
+ *
+ * Under DNS rebinding, a page re-resolves its own name to `127.0.0.1` and the
+ * browser then treats requests to it as same-origin. Writes still fail on the
+ * Origin check; *reads* would succeed, and the only thing that used to stop
+ * them was a session cookie scoped to `localhost` that the rebound name never
+ * received. The cookie is gone — local mode keeps no session, no token and no
+ * database — so the rule is stated directly instead: this server answers only
+ * to names that are this machine.
+ *
+ * Smaller than what it replaces, standard for exactly this, and applied in
+ * front of everything, /health included.
+ */
+const ALLOWED = new Set(["localhost", "127.0.0.1", "[::1]", "::1"]);
+/** The hostname part of a Host header, brackets kept for IPv6. */
+function hostnameOf(header) {
+    if (header.startsWith("[")) {
+        const end = header.indexOf("]");
+        return end < 0 ? header : header.slice(0, end + 1);
+    }
+    return header.split(":")[0] ?? "";
+}
+export function hostGuard() {
+    return async (c, next) => {
+        const host = c.req.header("host") ?? "";
+        if (!ALLOWED.has(hostnameOf(host).toLowerCase())) {
+            return c.text("This is a local Mica editor. It answers only to this machine —\n" +
+                `"${host}" is not it.\n\n` +
+                "To let other people edit, deploy @micacms/self-hosted with an identity\n" +
+                "provider: https://github.com/amuedespacher/micacms/blob/main/docs/self-hosting.md\n", 403);
+        }
+        await next();
+    };
+}
+//# sourceMappingURL=guards.js.map

package/dist/guards.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"guards.js","sourceRoot":"","sources":["../src/guards.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAMH,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,CAAC,WAAW,EAAE,WAAW,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC;AAEpE,kEAAkE;AAClE,SAAS,UAAU,CAAC,MAAc;IAChC,IAAI,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QAC3B,MAAM,GAAG,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAChC,OAAO,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,GAAG,CAAC,CAAC,CAAC;IACrD,CAAC;IACD,OAAO,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;AACpC,CAAC;AAED,MAAM,UAAU,SAAS;IACvB,OAAO,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE;QACvB,MAAM,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;QAExC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC,EAAE,CAAC;YACjD,OAAO,CAAC,CAAC,IAAI,CACX,kEAAkE;gBAChE,IAAI,IAAI,kBAAkB;gBAC1B,0EAA0E;gBAC1E,qFAAqF,EACvF,GAAG,CACJ,CAAC;QACJ,CAAC;QAED,MAAM,IAAI,EAAE,CAAC;IACf,CAAC,CAAC;AACJ,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,11 @@
+/**
+ * The local editor's process entry point.
+ *
+ * The whole composition, in one page: the local connector, the
+ * auth-neutral runtime with `allowAll()`, the Host allowlist, and nothing
+ * else. No session service, no admission policy, no database — `npx
+ * @micacms/editor` writes nothing outside the content directory, and there is
+ * no auth code here to misconfigure because none is installed.
+ */
+export {};
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG"}

package/dist/index.js

@@ -0,0 +1,104 @@
+/**
+ * The local editor's process entry point.
+ *
+ * The whole composition, in one page: the local connector, the
+ * auth-neutral runtime with `allowAll()`, the Host allowlist, and nothing
+ * else. No session service, no admission policy, no database — `npx
+ * @micacms/editor` writes nothing outside the content directory, and there is
+ * no auth code here to misconfigure because none is installed.
+ */
+import { localConnector } from "@micacms/connectors";
+import { MANIFEST_PATH } from "@micacms/core";
+import { ConfigError, createApp, createLogger, createRuntimeContext, loadSchema, SchemaError, schemaFingerprint, schemaOrigin, startServer, VERSION, } from "@micacms/runtime";
+import { editorUiDist } from "./admin-dir.js";
+import { portInUse, startupBanner, supportsColor } from "./banner.js";
+import { loadConfig } from "./config.js";
+import { hostGuard } from "./guards.js";
+import { openInBrowser } from "./open.js";
+async function main() {
+    let config;
+    try {
+        config = loadConfig();
+    }
+    catch (error) {
+        if (error instanceof ConfigError) {
+            process.stderr.write(`\n${error.message}\n\n`);
+            process.exit(78); // EX_CONFIG
+        }
+        throw error;
+    }
+    const logger = createLogger({ level: config.LOG_LEVEL, pretty: true });
+    // The repository comes first, because the content model is in it. A bad or
+    // absent model is a project mistake rather than a crash: exit the way a bad
+    // environment does, with the message on stderr instead of a stack trace.
+    const connector = localConnector({ root: config.contentRoot });
+    let model;
+    try {
+        model = await loadSchema(connector);
+    }
+    catch (error) {
+        if (error instanceof SchemaError) {
+            process.stderr.write(`\n${error.message}\n\n`);
+            process.exit(78); // EX_CONFIG
+        }
+        throw error;
+    }
+    const schemaRevision = await connector.revision(MANIFEST_PATH);
+    const ctx = createRuntimeContext({
+        config,
+        model,
+        connector,
+        schemaRevision,
+        logger,
+        operational: () => ({
+            auth: "none — the local editor has no accounts and no sign-in",
+            database: null,
+        }),
+    });
+    const app = createApp(ctx, {
+        guards: [hostGuard()],
+        adminDir: config.ADMIN_DIR ?? editorUiDist(),
+    });
+    const fingerprint = await schemaFingerprint(model);
+    startServer({
+        app,
+        host: config.HOST,
+        port: config.PORT,
+        logger,
+        onListening() {
+            /**
+             * Two audiences, one event: the person who just typed a command gets an
+             * address and three facts; a log collector gets every field.
+             */
+            if (config.MICA_CLI) {
+                const useColor = supportsColor(process.stdout, process.env);
+                process.stdout.write(startupBanner({
+                    version: VERSION,
+                    url: config.MICA_PUBLIC_URL,
+                    contentRoot: connector.origin,
+                    collections: Object.keys(model.collections).length,
+                    singletons: Object.keys(model.singletons).length,
+                }, useColor));
+                if (config.MICA_OPEN)
+                    openInBrowser(`${config.MICA_PUBLIC_URL}/admin/`);
+                return;
+            }
+            logger.info("Mica local editor started", {
+                url: config.MICA_PUBLIC_URL,
+                listening: `${config.HOST}:${config.PORT}`,
+                auth: "none (local editor; loopback only)",
+                content: connector.origin,
+                schema: schemaOrigin(connector),
+                schemaFingerprint: fingerprint,
+                collections: Object.keys(model.collections).length,
+            });
+        },
+        portInUseMessage: () => portInUse(config.PORT, config.HOST, supportsColor(process.stderr, process.env)),
+        shutdown: () => ctx.shutdown(),
+    });
+}
+main().catch((error) => {
+    process.stderr.write(`Failed to start: ${error instanceof Error ? error.stack : String(error)}\n`);
+    process.exit(1);
+});
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AACrD,OAAO,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAC9C,OAAO,EACL,WAAW,EACX,SAAS,EACT,YAAY,EACZ,oBAAoB,EACpB,UAAU,EACV,WAAW,EACX,iBAAiB,EACjB,YAAY,EACZ,WAAW,EACX,OAAO,GACR,MAAM,kBAAkB,CAAC;AAE1B,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAC9C,OAAO,EAAE,SAAS,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AACtE,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AACxC,OAAO,EAAE,aAAa,EAAE,MAAM,WAAW,CAAC;AAE1C,KAAK,UAAU,IAAI;IACjB,IAAI,MAAM,CAAC;IACX,IAAI,CAAC;QACH,MAAM,GAAG,UAAU,EAAE,CAAC;IACxB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,WAAW,EAAE,CAAC;YACjC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,KAAK,CAAC,OAAO,MAAM,CAAC,CAAC;YAC/C,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,YAAY;QAChC,CAAC;QACD,MAAM,KAAK,CAAC;IACd,CAAC;IAED,MAAM,MAAM,GAAG,YAAY,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;IAEvE,2EAA2E;IAC3E,4EAA4E;IAC5E,yEAAyE;IACzE,MAAM,SAAS,GAAG,cAAc,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC;IAE/D,IAAI,KAAK,CAAC;IACV,IAAI,CAAC;QACH,KAAK,GAAG,MAAM,UAAU,CAAC,SAAS,CAAC,CAAC;IACtC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,WAAW,EAAE,CAAC;YACjC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,KAAK,CAAC,OAAO,MAAM,CAAC,CAAC;YAC/C,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,YAAY;QAChC,CAAC;QACD,MAAM,KAAK,CAAC;IACd,CAAC;IAED,MAAM,cAAc,GAAG,MAAM,SAAS,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC;IAE/D,MAAM,GAAG,GAAG,oBAAoB,CAAC;QAC/B,MAAM;QACN,KAAK;QACL,SAAS;QACT,cAAc;QACd,MAAM;QACN,WAAW,EAAE,GAAG,EAAE,CAAC,CAAC;YAClB,IAAI,EAAE,wDAAwD;YAC9D,QAAQ,EAAE,IAAI;SACf,CAAC;KACH,CAAC,CAAC;IAEH,MAAM,GAAG,GAAG,SAAS,CAAC,GAAG,EAAE;QACzB,MAAM,EAAE,CAAC,SAAS,EAAE,CAAC;QACrB,QAAQ,EAAE,MAAM,CAAC,SAAS,IAAI,YAAY,EAAE;KAC7C,CAAC,CAAC;IAEH,MAAM,WAAW,GAAG,MAAM,iBAAiB,CAAC,KAAK,CAAC,CAAC;IAEnD,WAAW,CAAC;QACV,GAAG;QACH,IAAI,EAAE,MAAM,CAAC,IAAI;QACjB,IAAI,EAAE,MAAM,CAAC,IAAI;QACjB,MAAM;QAEN,WAAW;YACT;;;eAGG;YACH,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;gBACpB,MAAM,QAAQ,GAAG,aAAa,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC;gBAE5D,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,aAAa,CACX;oBACE,OAAO,EAAE,OAAO;oBAChB,GAAG,EAAE,MAAM,CAAC,eAAe;oBAC3B,WAAW,EAAE,SAAS,CAAC,MAAM;oBAC7B,WAAW,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,MAAM;oBAClD,UAAU,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,MAAM;iBACjD,EACD,QAAQ,CACT,CACF,CAAC;gBAEF,IAAI,MAAM,CAAC,SAAS;oBAAE,aAAa,CAAC,GAAG,MAAM,CAAC,eAAe,SAAS,CAAC,CAAC;gBACxE,OAAO;YACT,CAAC;YAED,MAAM,CAAC,IAAI,CAAC,2BAA2B,EAAE;gBACvC,GAAG,EAAE,MAAM,CAAC,eAAe;gBAC3B,SAAS,EAAE,GAAG,MAAM,CAAC,IAAI,IAAI,MAAM,CAAC,IAAI,EAAE;gBAC1C,IAAI,EAAE,oCAAoC;gBAC1C,OAAO,EAAE,SAAS,CAAC,MAAM;gBACzB,MAAM,EAAE,YAAY,CAAC,SAAS,CAAC;gBAC/B,iBAAiB,EAAE,WAAW;gBAC9B,WAAW,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,MAAM;aACnD,CAAC,CAAC;QACL,CAAC;QAED,gBAAgB,EAAE,GAAG,EAAE,CACrB,SAAS,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,aAAa,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC;QAEjF,QAAQ,EAAE,GAAG,EAAE,CAAC,GAAG,CAAC,QAAQ,EAAE;KAC/B,CAAC,CAAC;AACL,CAAC;AAED,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE;IAC9B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,oBAAoB,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACnG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC,CAAC"}

package/dist/open.d.ts

@@ -0,0 +1,9 @@
+/**
+ * Opens a URL in whatever the desktop considers a browser.
+ *
+ * A courtesy, and treated as one: every failure is swallowed. A machine with no
+ * desktop session — over SSH, in a container, in CI — has nothing to open, and
+ * a server that refused to start because of it would be absurd.
+ */
+export declare function openInBrowser(url: string): void;
+//# sourceMappingURL=open.d.ts.map

package/dist/open.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"open.d.ts","sourceRoot":"","sources":["../src/open.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAIH,wBAAgB,aAAa,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAmB/C"}

package/dist/open.js

@@ -0,0 +1,28 @@
+/**
+ * Opens a URL in whatever the desktop considers a browser.
+ *
+ * A courtesy, and treated as one: every failure is swallowed. A machine with no
+ * desktop session — over SSH, in a container, in CI — has nothing to open, and
+ * a server that refused to start because of it would be absurd.
+ */
+import { spawn } from "node:child_process";
+export function openInBrowser(url) {
+    const [command, args] = process.platform === "darwin"
+        ? ["open", [url]]
+        : process.platform === "win32"
+            ? // The empty string is `start`'s window title. Without it, a quoted URL
+                // is taken as the title and nothing opens.
+                ["cmd", ["/c", "start", "", url]]
+            : ["xdg-open", [url]];
+    try {
+        const child = spawn(command, args, { stdio: "ignore", detached: true });
+        child.on("error", () => { });
+        // Detached and unreferenced, so a browser that outlives Mica does not keep
+        // the Node process alive after Ctrl+C.
+        child.unref();
+    }
+    catch {
+        // There is no browser here. That is not an error.
+    }
+}
+//# sourceMappingURL=open.js.map

package/dist/open.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"open.js","sourceRoot":"","sources":["../src/open.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAE3C,MAAM,UAAU,aAAa,CAAC,GAAW;IACvC,MAAM,CAAC,OAAO,EAAE,IAAI,CAAC,GACnB,OAAO,CAAC,QAAQ,KAAK,QAAQ;QAC3B,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC;QACjB,CAAC,CAAC,OAAO,CAAC,QAAQ,KAAK,OAAO;YAC5B,CAAC,CAAC,uEAAuE;gBACvE,2CAA2C;gBAC3C,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,GAAG,CAAC,CAAC;YACnC,CAAC,CAAC,CAAC,UAAU,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAE5B,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,KAAK,CAAC,OAAQ,EAAE,IAAgB,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;QACrF,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;QAC5B,2EAA2E;QAC3E,uCAAuC;QACvC,KAAK,CAAC,KAAK,EAAE,CAAC;IAChB,CAAC;IAAC,MAAM,CAAC;QACP,kDAAkD;IACpD,CAAC;AACH,CAAC"}

package/package.json

@@ -0,0 +1,49 @@
+{
+  "name": "@micacms/editor",
+  "version": "0.2.0",
+  "type": "module",
+  "description": "The local Mica editor — `npx @micacms/editor` against a checkout on your own machine. No authentication, no database, loopback only.",
+  "license": "MIT",
+  "author": "Alexander Müdespacher",
+  "keywords": [
+    "mica",
+    "cms",
+    "astro",
+    "git",
+    "markdoc",
+    "headless-cms"
+  ],
+  "bin": {
+    "mica": "./dist/cli.js"
+  },
+  "files": [
+    "dist",
+    "README.md"
+  ],
+  "dependencies": {
+    "hono": "^4.6.20",
+    "zod": "^4.3.6",
+    "@micacms/editor-ui": "0.2.0",
+    "@micacms/core": "0.2.0",
+    "@micacms/runtime": "0.2.0",
+    "@micacms/connectors": "0.2.0"
+  },
+  "devDependencies": {
+    "@types/node": "^22.20.1",
+    "tsx": "^4.19.2",
+    "typescript": "^5.7.3"
+  },
+  "engines": {
+    "node": ">=22.12.0"
+  },
+  "publishConfig": {
+    "access": "public"
+  },
+  "scripts": {
+    "build": "tsc -p tsconfig.json",
+    "dev": "tsx watch --clear-screen=false --include ../../examples/muster-consulting/content/.mica/schema.json src/index.ts",
+    "start": "node dist/index.js",
+    "typecheck": "tsc -p tsconfig.test.json",
+    "test": "tsc -p tsconfig.test.json && node --test --import tsx test/*.test.ts"
+  }
+}