@micacms/runtime 0.2.0

package/dist/context.d.ts

@@ -0,0 +1,121 @@
+/**
+ * The runtime's composition: one site, its services, and nothing about who
+ * is allowed in.
+ *
+ * Everything is constructed here and passed down explicitly — no module-level
+ * singletons, no service locator. The composing app builds the connector and,
+ * where one exists, the draft store and the database; the runtime receives
+ * them and never asks where they came from. That is what keeps this package
+ * authentication-neutral and database-free on a developer's machine: the
+ * local editor simply never hands it either.
+ */
+import { type ContentStore } from "@micacms/connectors";
+import type { DraftStore, RepositoryConnector, Site } from "@micacms/core";
+import type { RuntimeConfig } from "./config.js";
+import { type Logger } from "./lib/logger.js";
+import { type RateLimiter } from "./lib/rate-limit.js";
+import { type MediaService } from "./services/media.js";
+import { type ContentStagingService } from "./services/staging.js";
+/**
+ * The site this process serves. One, explicitly.
+ *
+ * Explicit rather than implicit even though there is only ever one: a runtime
+ * that names its site is testable and has no global state, and a runtime that
+ * *assumes* its site is the one that quietly grows a second. Several sites
+ * means several processes.
+ */
+export interface SiteContext {
+    /** Identifies this site in logs. Constant while one runtime serves one site. */
+    id: string;
+    /** The content model, read from the repository at startup. */
+    model: Site;
+    /**
+     * What everything reads and saves through. With a draft store this is the
+     * staged overlay — saves land in the draft, and only the staging service's
+     * Publish reaches the repository itself.
+     */
+    contentRepository: RepositoryConnector;
+    /**
+     * Revision of `.mica/schema.json` when the model was loaded. The publish
+     * drift gate compares against it — see decisions.md.
+     */
+    schemaRevision: string | null;
+}
+export declare const DEFAULT_SITE_ID = "default";
+/**
+ * What the composing app wants the System page to say about itself — the
+ * facts the runtime cannot know because they belong to the composition:
+ * whether there is a database, how this deployment authenticates, and which
+ * rule admits people.
+ */
+export interface OperationalInfo {
+    /** How this deployment authenticates, in words. */
+    auth: string;
+    /** Null where there is no database, which is the local editor's answer. */
+    database: {
+        path: string;
+        sessions: number;
+        version: number;
+        bytes: number | null;
+    } | null;
+    /** What decides who may edit, in the operator's own words. */
+    admission?: string;
+    dataDir?: string;
+    sessionTtlHours?: number;
+    sessionIdleHours?: number;
+    /** Names of the secrets this process generated for itself. */
+    generatedSecrets?: string[];
+}
+export interface RuntimeContext {
+    config: RuntimeConfig;
+    site: SiteContext;
+    logger: Logger;
+    services: {
+        content: ContentStore;
+        media: MediaService;
+        staging: ContentStagingService;
+    };
+    limiters: {
+        api: RateLimiter;
+    };
+    /** App-supplied: what the System page says about the composition. */
+    operational(): OperationalInfo;
+    /** App-supplied active probes for /health. Absent means nothing to probe. */
+    health: {
+        database?: () => void;
+    };
+    /** Releases timers, and whatever the app added on top. */
+    shutdown(): Promise<void>;
+}
+export interface CreateRuntimeContextOptions {
+    config: RuntimeConfig;
+    model: Site;
+    /** How the content repository is reached. The app builds it. */
+    connector: RepositoryConnector;
+    /**
+     * Where saves accumulate when the repository is remote. Absent means the
+     * working tree is the draft workspace — the local editor, or a self-hosted
+     * deployment with a checkout beside it.
+     */
+    drafts?: DraftStore;
+    /** Revision of the manifest the model was read from. Null when unknown. */
+    schemaRevision?: string | null;
+    siteId?: string;
+    logger?: Logger;
+    operational?: () => OperationalInfo;
+    health?: {
+        database?: () => void;
+    };
+    onShutdown?: () => void | Promise<void>;
+}
+export declare function createRuntimeContext(options: CreateRuntimeContextOptions): RuntimeContext;
+/**
+ * The one place that decides how Mica reaches a configured content
+ * repository. Every mode produces the same interface, so nothing downstream
+ * can tell which one it got.
+ *
+ * The local editor does not call this — it *is* the local connector — but the
+ * self-hosted app serves whichever repository its environment names.
+ */
+export declare function createConnector(config: RuntimeConfig): RepositoryConnector;
+//# sourceMappingURL=context.d.ts.map

package/dist/context.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"context.d.ts","sourceRoot":"","sources":["../src/context.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EAML,KAAK,YAAY,EAClB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,KAAK,EAAE,UAAU,EAAE,mBAAmB,EAAE,IAAI,EAAE,MAAM,eAAe,CAAC;AAE3E,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AACjD,OAAO,EAAgB,KAAK,MAAM,EAAE,MAAM,iBAAiB,CAAC;AAC5D,OAAO,EAAqB,KAAK,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAC1E,OAAO,EAAsB,KAAK,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAC5E,OAAO,EAA6B,KAAK,qBAAqB,EAAE,MAAM,uBAAuB,CAAC;AAG9F;;;;;;;GAOG;AACH,MAAM,WAAW,WAAW;IAC1B,gFAAgF;IAChF,EAAE,EAAE,MAAM,CAAC;IACX,8DAA8D;IAC9D,KAAK,EAAE,IAAI,CAAC;IACZ;;;;OAIG;IACH,iBAAiB,EAAE,mBAAmB,CAAC;IACvC;;;OAGG;IACH,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;CAC/B;AAED,eAAO,MAAM,eAAe,YAAY,CAAC;AAEzC;;;;;GAKG;AACH,MAAM,WAAW,eAAe;IAC9B,mDAAmD;IACnD,IAAI,EAAE,MAAM,CAAC;IACb,2EAA2E;IAC3E,QAAQ,EAAE;QACR,IAAI,EAAE,MAAM,CAAC;QACb,QAAQ,EAAE,MAAM,CAAC;QACjB,OAAO,EAAE,MAAM,CAAC;QAChB,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;KACtB,GAAG,IAAI,CAAC;IACT,8DAA8D;IAC9D,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,8DAA8D;IAC9D,gBAAgB,CAAC,EAAE,MAAM,EAAE,CAAC;CAC7B;AAED,MAAM,WAAW,cAAc;IAC7B,MAAM,EAAE,aAAa,CAAC;IACtB,IAAI,EAAE,WAAW,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE;QACR,OAAO,EAAE,YAAY,CAAC;QACtB,KAAK,EAAE,YAAY,CAAC;QACpB,OAAO,EAAE,qBAAqB,CAAC;KAChC,CAAC;IACF,QAAQ,EAAE;QACR,GAAG,EAAE,WAAW,CAAC;KAClB,CAAC;IACF,qEAAqE;IACrE,WAAW,IAAI,eAAe,CAAC;IAC/B,6EAA6E;IAC7E,MAAM,EAAE;QACN,QAAQ,CAAC,EAAE,MAAM,IAAI,CAAC;KACvB,CAAC;IACF,0DAA0D;IAC1D,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CAC3B;AAED,MAAM,WAAW,2BAA2B;IAC1C,MAAM,EAAE,aAAa,CAAC;IACtB,KAAK,EAAE,IAAI,CAAC;IACZ,gEAAgE;IAChE,SAAS,EAAE,mBAAmB,CAAC;IAC/B;;;;OAIG;IACH,MAAM,CAAC,EAAE,UAAU,CAAC;IACpB,2EAA2E;IAC3E,cAAc,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,WAAW,CAAC,EAAE,MAAM,eAAe,CAAC;IACpC,MAAM,CAAC,EAAE;QAAE,QAAQ,CAAC,EAAE,MAAM,IAAI,CAAA;KAAE,CAAC;IACnC,UAAU,CAAC,EAAE,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACzC;AAED,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,2BAA2B,GAAG,cAAc,CAgEzF;AAED;;;;;;;GAOG;AACH,wBAAgB,eAAe,CAAC,MAAM,EAAE,aAAa,GAAG,mBAAmB,CAqC1E"}

package/dist/context.js

@@ -0,0 +1,117 @@
+/**
+ * The runtime's composition: one site, its services, and nothing about who
+ * is allowed in.
+ *
+ * Everything is constructed here and passed down explicitly — no module-level
+ * singletons, no service locator. The composing app builds the connector and,
+ * where one exists, the draft store and the database; the runtime receives
+ * them and never asks where they came from. That is what keeps this package
+ * authentication-neutral and database-free on a developer's machine: the
+ * local editor simply never hands it either.
+ */
+import { createContentStore, githubConnector, gitlabConnector, localConnector, stagedConnector, } from "@micacms/connectors";
+import { createLogger } from "./lib/logger.js";
+import { createRateLimiter } from "./lib/rate-limit.js";
+import { createMediaService } from "./services/media.js";
+import { createDraftStagingService } from "./services/staging.js";
+import { createWorkingTreeStagingService } from "./services/staging-local.js";
+export const DEFAULT_SITE_ID = "default";
+export function createRuntimeContext(options) {
+    const { config, model, drafts } = options;
+    const logger = options.logger ??
+        createLogger({
+            level: config.LOG_LEVEL,
+            pretty: !config.isProduction,
+        });
+    const schemaRevision = options.schemaRevision ?? null;
+    const site = {
+        id: options.siteId ?? DEFAULT_SITE_ID,
+        model,
+        contentRepository: drafts ? stagedConnector(options.connector, drafts) : options.connector,
+        schemaRevision,
+    };
+    const services = {
+        content: createContentStore(model, site.contentRepository),
+        media: createMediaService({
+            connector: site.contentRepository,
+            maxBytes: config.MAX_UPLOAD_BYTES,
+        }),
+        staging: drafts
+            ? createDraftStagingService({
+                model,
+                drafts,
+                repository: options.connector,
+                overlay: site.contentRepository,
+                schemaRevision,
+            })
+            : createWorkingTreeStagingService({
+                model,
+                connector: site.contentRepository,
+                contentRoot: config.contentRoot,
+                schemaRevision,
+                publishEnabled: config.MICA_LOCAL_PUBLISH,
+                logger,
+            }),
+    };
+    const limiters = {
+        // Generous: this exists to blunt runaway scripts, not to shape traffic.
+        api: createRateLimiter({ limit: 600, windowMs: 60_000 }),
+    };
+    return {
+        config,
+        site,
+        logger,
+        services,
+        limiters,
+        operational: options.operational ??
+            (() => ({ auth: "unspecified", database: null })),
+        health: options.health ?? {},
+        async shutdown() {
+            limiters.api.stop();
+            await options.onShutdown?.();
+        },
+    };
+}
+/**
+ * The one place that decides how Mica reaches a configured content
+ * repository. Every mode produces the same interface, so nothing downstream
+ * can tell which one it got.
+ *
+ * The local editor does not call this — it *is* the local connector — but the
+ * self-hosted app serves whichever repository its environment names.
+ */
+export function createConnector(config) {
+    const author = { name: "Mica CMS", email: "mica@localhost" };
+    const require = (value, what) => {
+        if (!value) {
+            throw new Error(`REPOSITORY is "${config.REPOSITORY}" but ${what} is not set.`);
+        }
+        return value;
+    };
+    switch (config.REPOSITORY) {
+        case "github": {
+            const project = require(config.REPOSITORY_PROJECT, "REPOSITORY_PROJECT");
+            return githubConnector({
+                owner: project.split("/")[0],
+                repo: project.split("/").slice(1).join("/"),
+                branch: config.REPOSITORY_BRANCH,
+                root: config.REPOSITORY_ROOT,
+                token: require(config.REPOSITORY_TOKEN, "REPOSITORY_TOKEN"),
+                apiBase: config.REPOSITORY_API_BASE,
+                author,
+            });
+        }
+        case "gitlab":
+            return gitlabConnector({
+                project: require(config.REPOSITORY_PROJECT, "REPOSITORY_PROJECT"),
+                branch: config.REPOSITORY_BRANCH,
+                root: config.REPOSITORY_ROOT,
+                token: require(config.REPOSITORY_TOKEN, "REPOSITORY_TOKEN"),
+                apiBase: config.REPOSITORY_API_BASE,
+                author,
+            });
+        case "local":
+            return localConnector({ root: config.contentRoot });
+    }
+}
+//# sourceMappingURL=context.js.map

package/dist/context.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"context.js","sourceRoot":"","sources":["../src/context.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EACL,kBAAkB,EAClB,eAAe,EACf,eAAe,EACf,cAAc,EACd,eAAe,GAEhB,MAAM,qBAAqB,CAAC;AAI7B,OAAO,EAAE,YAAY,EAAe,MAAM,iBAAiB,CAAC;AAC5D,OAAO,EAAE,iBAAiB,EAAoB,MAAM,qBAAqB,CAAC;AAC1E,OAAO,EAAE,kBAAkB,EAAqB,MAAM,qBAAqB,CAAC;AAC5E,OAAO,EAAE,yBAAyB,EAA8B,MAAM,uBAAuB,CAAC;AAC9F,OAAO,EAAE,+BAA+B,EAAE,MAAM,6BAA6B,CAAC;AA4B9E,MAAM,CAAC,MAAM,eAAe,GAAG,SAAS,CAAC;AAqEzC,MAAM,UAAU,oBAAoB,CAAC,OAAoC;IACvE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC;IAE1C,MAAM,MAAM,GACV,OAAO,CAAC,MAAM;QACd,YAAY,CAAC;YACX,KAAK,EAAE,MAAM,CAAC,SAAS;YACvB,MAAM,EAAE,CAAC,MAAM,CAAC,YAAY;SAC7B,CAAC,CAAC;IAEL,MAAM,cAAc,GAAG,OAAO,CAAC,cAAc,IAAI,IAAI,CAAC;IAEtD,MAAM,IAAI,GAAgB;QACxB,EAAE,EAAE,OAAO,CAAC,MAAM,IAAI,eAAe;QACrC,KAAK;QACL,iBAAiB,EAAE,MAAM,CAAC,CAAC,CAAC,eAAe,CAAC,OAAO,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,SAAS;QAC1F,cAAc;KACf,CAAC;IAEF,MAAM,QAAQ,GAAG;QACf,OAAO,EAAE,kBAAkB,CAAC,KAAK,EAAE,IAAI,CAAC,iBAAiB,CAAC;QAC1D,KAAK,EAAE,kBAAkB,CAAC;YACxB,SAAS,EAAE,IAAI,CAAC,iBAAiB;YACjC,QAAQ,EAAE,MAAM,CAAC,gBAAgB;SAClC,CAAC;QACF,OAAO,EAAE,MAAM;YACb,CAAC,CAAC,yBAAyB,CAAC;gBACxB,KAAK;gBACL,MAAM;gBACN,UAAU,EAAE,OAAO,CAAC,SAAS;gBAC7B,OAAO,EAAE,IAAI,CAAC,iBAAiB;gBAC/B,cAAc;aACf,CAAC;YACJ,CAAC,CAAC,+BAA+B,CAAC;gBAC9B,KAAK;gBACL,SAAS,EAAE,IAAI,CAAC,iBAAiB;gBACjC,WAAW,EAAE,MAAM,CAAC,WAAW;gBAC/B,cAAc;gBACd,cAAc,EAAE,MAAM,CAAC,kBAAkB;gBACzC,MAAM;aACP,CAAC;KACP,CAAC;IAEF,MAAM,QAAQ,GAAG;QACf,wEAAwE;QACxE,GAAG,EAAE,iBAAiB,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC;KACzD,CAAC;IAEF,OAAO;QACL,MAAM;QACN,IAAI;QACJ,MAAM;QACN,QAAQ;QACR,QAAQ;QACR,WAAW,EACT,OAAO,CAAC,WAAW;YACnB,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;QACnD,MAAM,EAAE,OAAO,CAAC,MAAM,IAAI,EAAE;QAE5B,KAAK,CAAC,QAAQ;YACZ,QAAQ,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;YACpB,MAAM,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC;QAC/B,CAAC;KACF,CAAC;AACJ,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,eAAe,CAAC,MAAqB;IACnD,MAAM,MAAM,GAAG,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,gBAAgB,EAAE,CAAC;IAE7D,MAAM,OAAO,GAAG,CAAC,KAAyB,EAAE,IAAY,EAAU,EAAE;QAClE,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,MAAM,IAAI,KAAK,CAAC,kBAAkB,MAAM,CAAC,UAAU,SAAS,IAAI,cAAc,CAAC,CAAC;QAClF,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC,CAAC;IAEF,QAAQ,MAAM,CAAC,UAAU,EAAE,CAAC;QAC1B,KAAK,QAAQ,CAAC,CAAC,CAAC;YACd,MAAM,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,kBAAkB,EAAE,oBAAoB,CAAC,CAAC;YACzE,OAAO,eAAe,CAAC;gBACrB,KAAK,EAAE,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAE;gBAC7B,IAAI,EAAE,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC;gBAC3C,MAAM,EAAE,MAAM,CAAC,iBAAiB;gBAChC,IAAI,EAAE,MAAM,CAAC,eAAe;gBAC5B,KAAK,EAAE,OAAO,CAAC,MAAM,CAAC,gBAAgB,EAAE,kBAAkB,CAAC;gBAC3D,OAAO,EAAE,MAAM,CAAC,mBAAmB;gBACnC,MAAM;aACP,CAAC,CAAC;QACL,CAAC;QAED,KAAK,QAAQ;YACX,OAAO,eAAe,CAAC;gBACrB,OAAO,EAAE,OAAO,CAAC,MAAM,CAAC,kBAAkB,EAAE,oBAAoB,CAAC;gBACjE,MAAM,EAAE,MAAM,CAAC,iBAAiB;gBAChC,IAAI,EAAE,MAAM,CAAC,eAAe;gBAC5B,KAAK,EAAE,OAAO,CAAC,MAAM,CAAC,gBAAgB,EAAE,kBAAkB,CAAC;gBAC3D,OAAO,EAAE,MAAM,CAAC,mBAAmB;gBACnC,MAAM;aACP,CAAC,CAAC;QAEL,KAAK,OAAO;YACV,OAAO,cAAc,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC;IACxD,CAAC;AACH,CAAC"}

package/dist/db/driver.d.ts

@@ -0,0 +1,35 @@
+/**
+ * SQLite driver.
+ *
+ * Everything above this file talks to `SqlDatabase`, never to `node:sqlite`
+ * directly, so the driver can be swapped (better-sqlite3, libsql, a Postgres
+ * adapter) without touching the repositories.
+ *
+ * `node:sqlite` is the default because it ships with Node — no native build
+ * step, no prebuilt-binary mismatch inside the container.
+ */
+export type SqlValue = string | number | bigint | null | Uint8Array;
+export type SqlParams = readonly SqlValue[];
+export interface RunResult {
+    changes: number;
+    lastInsertRowid: number | bigint;
+}
+export interface SqlDatabase {
+    all<T = Record<string, unknown>>(sql: string, params?: SqlParams): T[];
+    get<T = Record<string, unknown>>(sql: string, params?: SqlParams): T | undefined;
+    run(sql: string, params?: SqlParams): RunResult;
+    exec(sql: string): void;
+    /** Runs `fn` in a transaction, rolling back if it throws. Safe to nest. */
+    transaction<T>(fn: () => T): T;
+    /** Consistent on-line snapshot to `destination`, safe while writes continue. */
+    snapshot(destination: string): void;
+    close(): void;
+}
+export interface SqliteOptions {
+    /** Milliseconds a blocked writer waits before returning SQLITE_BUSY. */
+    busyTimeoutMs?: number;
+    /** WAL is the right default for a server; `false` is useful for :memory:. */
+    wal?: boolean;
+}
+export declare function openSqlite(filename: string, options?: SqliteOptions): SqlDatabase;
+//# sourceMappingURL=driver.d.ts.map

package/dist/db/driver.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"driver.d.ts","sourceRoot":"","sources":["../../src/db/driver.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAIH,MAAM,MAAM,QAAQ,GAAG,MAAM,GAAG,MAAM,GAAG,MAAM,GAAG,IAAI,GAAG,UAAU,CAAC;AACpE,MAAM,MAAM,SAAS,GAAG,SAAS,QAAQ,EAAE,CAAC;AAE5C,MAAM,WAAW,SAAS;IACxB,OAAO,EAAE,MAAM,CAAC;IAChB,eAAe,EAAE,MAAM,GAAG,MAAM,CAAC;CAClC;AAED,MAAM,WAAW,WAAW;IAC1B,GAAG,CAAC,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,SAAS,GAAG,CAAC,EAAE,CAAC;IACvE,GAAG,CAAC,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,SAAS,GAAG,CAAC,GAAG,SAAS,CAAC;IACjF,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,SAAS,GAAG,SAAS,CAAC;IAChD,IAAI,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,2EAA2E;IAC3E,WAAW,CAAC,CAAC,EAAE,EAAE,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC;IAC/B,gFAAgF;IAChF,QAAQ,CAAC,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IACpC,KAAK,IAAI,IAAI,CAAC;CACf;AAED,MAAM,WAAW,aAAa;IAC5B,wEAAwE;IACxE,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,6EAA6E;IAC7E,GAAG,CAAC,EAAE,OAAO,CAAC;CACf;AAED,wBAAgB,UAAU,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,GAAE,aAAkB,GAAG,WAAW,CA2FrF"}

package/dist/db/driver.js

@@ -0,0 +1,95 @@
+/**
+ * SQLite driver.
+ *
+ * Everything above this file talks to `SqlDatabase`, never to `node:sqlite`
+ * directly, so the driver can be swapped (better-sqlite3, libsql, a Postgres
+ * adapter) without touching the repositories.
+ *
+ * `node:sqlite` is the default because it ships with Node — no native build
+ * step, no prebuilt-binary mismatch inside the container.
+ */
+import { DatabaseSync } from "node:sqlite";
+export function openSqlite(filename, options = {}) {
+    const db = new DatabaseSync(filename);
+    const cache = new Map();
+    let depth = 0;
+    db.exec("PRAGMA foreign_keys = ON");
+    db.exec(`PRAGMA busy_timeout = ${options.busyTimeoutMs ?? 5000}`);
+    if (options.wal !== false) {
+        // WAL lets the Astro build read while an editor writes.
+        db.exec("PRAGMA journal_mode = WAL");
+        // NORMAL is durable across process crashes; only an OS-level crash can lose
+        // the last transactions. The right trade-off for a content database.
+        db.exec("PRAGMA synchronous = NORMAL");
+    }
+    const prepare = (sql) => {
+        let statement = cache.get(sql);
+        if (!statement) {
+            statement = db.prepare(sql);
+            cache.set(sql, statement);
+        }
+        return statement;
+    };
+    // Rows arrive as null-prototype objects; callers expect ordinary ones.
+    const plain = (row) => ({ ...row });
+    return {
+        all(sql, params = []) {
+            return prepare(sql)
+                .all(...params)
+                .map((row) => plain(row));
+        },
+        get(sql, params = []) {
+            const row = prepare(sql).get(...params);
+            return row === undefined ? undefined : plain(row);
+        },
+        run(sql, params = []) {
+            const result = prepare(sql).run(...params);
+            return {
+                changes: Number(result.changes),
+                lastInsertRowid: result.lastInsertRowid,
+            };
+        },
+        exec(sql) {
+            db.exec(sql);
+        },
+        transaction(fn) {
+            // Nested calls use savepoints so an inner rollback does not discard the
+            // outer transaction's work.
+            const name = `sp_${depth}`;
+            const begin = depth === 0 ? "BEGIN IMMEDIATE" : `SAVEPOINT ${name}`;
+            const commit = depth === 0 ? "COMMIT" : `RELEASE ${name}`;
+            const rollback = depth === 0 ? "ROLLBACK" : `ROLLBACK TO ${name}`;
+            db.exec(begin);
+            depth++;
+            try {
+                const result = fn();
+                depth--;
+                db.exec(commit);
+                return result;
+            }
+            catch (error) {
+                depth--;
+                try {
+                    db.exec(rollback);
+                    if (depth > 0)
+                        db.exec(`RELEASE ${name}`);
+                }
+                catch {
+                    // The rollback itself failing means the connection is unusable;
+                    // surface the original error rather than masking it.
+                }
+                throw error;
+            }
+        },
+        snapshot(destination) {
+            // VACUUM INTO takes a read lock only, so editors are not blocked and the
+            // resulting file is a defragmented, fully consistent database.
+            db.exec(`VACUUM INTO '${destination.replace(/'/g, "''")}'`);
+        },
+        close() {
+            cache.clear();
+            db.close();
+        },
+    };
+}
+//# sourceMappingURL=driver.js.map

package/dist/db/driver.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"driver.js","sourceRoot":"","sources":["../../src/db/driver.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAAE,YAAY,EAAsB,MAAM,aAAa,CAAC;AA6B/D,MAAM,UAAU,UAAU,CAAC,QAAgB,EAAE,UAAyB,EAAE;IACtE,MAAM,EAAE,GAAG,IAAI,YAAY,CAAC,QAAQ,CAAC,CAAC;IACtC,MAAM,KAAK,GAAG,IAAI,GAAG,EAAyB,CAAC;IAC/C,IAAI,KAAK,GAAG,CAAC,CAAC;IAEd,EAAE,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC;IACpC,EAAE,CAAC,IAAI,CAAC,yBAAyB,OAAO,CAAC,aAAa,IAAI,IAAI,EAAE,CAAC,CAAC;IAElE,IAAI,OAAO,CAAC,GAAG,KAAK,KAAK,EAAE,CAAC;QAC1B,wDAAwD;QACxD,EAAE,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAC;QACrC,4EAA4E;QAC5E,qEAAqE;QACrE,EAAE,CAAC,IAAI,CAAC,6BAA6B,CAAC,CAAC;IACzC,CAAC;IAED,MAAM,OAAO,GAAG,CAAC,GAAW,EAAiB,EAAE;QAC7C,IAAI,SAAS,GAAG,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAC/B,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,SAAS,GAAG,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;YAC5B,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;QAC5B,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC,CAAC;IAEF,uEAAuE;IACvE,MAAM,KAAK,GAAG,CAAI,GAAY,EAAK,EAAE,CAAC,CAAC,EAAE,GAAI,GAAc,EAAE,CAAM,CAAC;IAEpE,OAAO;QACL,GAAG,CAAI,GAAW,EAAE,SAAoB,EAAE;YACxC,OAAO,OAAO,CAAC,GAAG,CAAC;iBAChB,GAAG,CAAC,GAAI,MAAqB,CAAC;iBAC9B,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,KAAK,CAAI,GAAG,CAAC,CAAC,CAAC;QACjC,CAAC;QAED,GAAG,CAAI,GAAW,EAAE,SAAoB,EAAE;YACxC,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,GAAI,MAAqB,CAAC,CAAC;YACxD,OAAO,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAI,GAAG,CAAC,CAAC;QACvD,CAAC;QAED,GAAG,CAAC,GAAW,EAAE,SAAoB,EAAE;YACrC,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,GAAI,MAAqB,CAAC,CAAC;YAC3D,OAAO;gBACL,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC;gBAC/B,eAAe,EAAE,MAAM,CAAC,eAAe;aACxC,CAAC;QACJ,CAAC;QAED,IAAI,CAAC,GAAW;YACd,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACf,CAAC;QAED,WAAW,CAAI,EAAW;YACxB,wEAAwE;YACxE,4BAA4B;YAC5B,MAAM,IAAI,GAAG,MAAM,KAAK,EAAE,CAAC;YAC3B,MAAM,KAAK,GAAG,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,aAAa,IAAI,EAAE,CAAC;YACpE,MAAM,MAAM,GAAG,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,WAAW,IAAI,EAAE,CAAC;YAC1D,MAAM,QAAQ,GAAG,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,eAAe,IAAI,EAAE,CAAC;YAElE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACf,KAAK,EAAE,CAAC;YACR,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,EAAE,EAAE,CAAC;gBACpB,KAAK,EAAE,CAAC;gBACR,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;gBAChB,OAAO,MAAM,CAAC;YAChB,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,KAAK,EAAE,CAAC;gBACR,IAAI,CAAC;oBACH,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;oBAClB,IAAI,KAAK,GAAG,CAAC;wBAAE,EAAE,CAAC,IAAI,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC;gBAC5C,CAAC;gBAAC,MAAM,CAAC;oBACP,gEAAgE;oBAChE,qDAAqD;gBACvD,CAAC;gBACD,MAAM,KAAK,CAAC;YACd,CAAC;QACH,CAAC;QAED,QAAQ,CAAC,WAAmB;YAC1B,yEAAyE;YACzE,+DAA+D;YAC/D,EAAE,CAAC,IAAI,CAAC,gBAAgB,WAAW,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC;QAC9D,CAAC;QAED,KAAK;YACH,KAAK,CAAC,KAAK,EAAE,CAAC;YACd,EAAE,CAAC,KAAK,EAAE,CAAC;QACb,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/http.d.ts

@@ -0,0 +1,40 @@
+/**
+ * Shared HTTP types and small request helpers.
+ */
+import type { Context } from "hono";
+import type { AccessContext } from "@micacms/core";
+import type { RuntimeContext } from "./context.js";
+import type { Logger } from "./lib/logger.js";
+export interface Env {
+    Variables: {
+        ctx: RuntimeContext;
+        logger: Logger;
+        requestId: string;
+        /**
+         * Who this request acts as. Set by the auth surface's gate — the OIDC
+         * gate in the self-hosted app, `allowAll()` in the local editor — and
+         * therefore present on every admin route. The runtime consumes it and
+         * never produces it: which is the whole of being authentication-neutral.
+         */
+        access: AccessContext;
+    };
+}
+/**
+ * Client IP. `X-Forwarded-For` is only consulted when TRUST_PROXY is set —
+ * otherwise a client could spoof its own address and bypass rate limiting.
+ */
+export declare function clientIp(c: Context<Env>): string;
+/**
+ * Who to name as the author of a commit.
+ *
+ * Null in the local editor, where the connector falls back to the developer's
+ * own Git identity — which is the right name for a change made on their
+ * machine, and one Mica has no business overwriting.
+ */
+export declare function actorOf(c: Context<Env>): {
+    id: string;
+    email: string;
+} | null;
+/** Parses a positive integer query parameter, falling back when absent. */
+export declare function intParam(value: string | undefined, fallback: number, max: number): number;
+//# sourceMappingURL=http.d.ts.map

package/dist/http.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"http.d.ts","sourceRoot":"","sources":["../src/http.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,MAAM,CAAC;AAEpC,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAEnD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AACnD,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,iBAAiB,CAAC;AAE9C,MAAM,WAAW,GAAG;IAClB,SAAS,EAAE;QACT,GAAG,EAAE,cAAc,CAAC;QACpB,MAAM,EAAE,MAAM,CAAC;QACf,SAAS,EAAE,MAAM,CAAC;QAClB;;;;;WAKG;QACH,MAAM,EAAE,aAAa,CAAC;KACvB,CAAC;CACH;AAED;;;GAGG;AACH,wBAAgB,QAAQ,CAAC,CAAC,EAAE,OAAO,CAAC,GAAG,CAAC,GAAG,MAAM,CAYhD;AAED;;;;;;GAMG;AACH,wBAAgB,OAAO,CAAC,CAAC,EAAE,OAAO,CAAC,GAAG,CAAC,GAAG;IAAE,EAAE,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,CAG7E;AAED,2EAA2E;AAC3E,wBAAgB,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,MAAM,CAIzF"}

package/dist/http.js

@@ -0,0 +1,38 @@
+/**
+ * Shared HTTP types and small request helpers.
+ */
+/**
+ * Client IP. `X-Forwarded-For` is only consulted when TRUST_PROXY is set —
+ * otherwise a client could spoof its own address and bypass rate limiting.
+ */
+export function clientIp(c) {
+    const { config } = c.get("ctx");
+    if (config.TRUST_PROXY) {
+        const forwarded = c.req.header("x-forwarded-for");
+        // The left-most entry is the original client; the rest are proxies.
+        const first = forwarded?.split(",")[0]?.trim();
+        if (first)
+            return first;
+    }
+    const info = c.env;
+    return info?.incoming?.socket?.remoteAddress ?? "unknown";
+}
+/**
+ * Who to name as the author of a commit.
+ *
+ * Null in the local editor, where the connector falls back to the developer's
+ * own Git identity — which is the right name for a change made on their
+ * machine, and one Mica has no business overwriting.
+ */
+export function actorOf(c) {
+    const identity = c.get("access")?.identity;
+    return identity ? { id: identity.subject, email: identity.email } : null;
+}
+/** Parses a positive integer query parameter, falling back when absent. */
+export function intParam(value, fallback, max) {
+    const parsed = Number(value);
+    if (!Number.isFinite(parsed) || parsed < 0)
+        return fallback;
+    return Math.min(Math.floor(parsed), max);
+}
+//# sourceMappingURL=http.js.map

package/dist/http.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"http.js","sourceRoot":"","sources":["../src/http.ts"],"names":[],"mappings":"AAAA;;GAEG;AAwBH;;;GAGG;AACH,MAAM,UAAU,QAAQ,CAAC,CAAe;IACtC,MAAM,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IAEhC,IAAI,MAAM,CAAC,WAAW,EAAE,CAAC;QACvB,MAAM,SAAS,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC;QAClD,oEAAoE;QACpE,MAAM,KAAK,GAAG,SAAS,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC;QAC/C,IAAI,KAAK;YAAE,OAAO,KAAK,CAAC;IAC1B,CAAC;IAED,MAAM,IAAI,GAAG,CAAC,CAAC,GAAyE,CAAC;IACzF,OAAO,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,aAAa,IAAI,SAAS,CAAC;AAC5D,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,OAAO,CAAC,CAAe;IACrC,MAAM,QAAQ,GAAG,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,QAAQ,CAAC;IAC3C,OAAO,QAAQ,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,QAAQ,CAAC,OAAO,EAAE,KAAK,EAAE,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;AAC3E,CAAC;AAED,2EAA2E;AAC3E,MAAM,UAAU,QAAQ,CAAC,KAAyB,EAAE,QAAgB,EAAE,GAAW;IAC/E,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IAC7B,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,MAAM,GAAG,CAAC;QAAE,OAAO,QAAQ,CAAC;IAC5D,OAAO,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,GAAG,CAAC,CAAC;AAC3C,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,31 @@
+/**
+ * @micacms/runtime — the single-site Mica runtime, authentication-neutral.
+ *
+ * One Hono API over one `SiteContext`: content, media, staging and system
+ * routes, with the question "who is this request?" answered by whatever
+ * `AuthSurface` the composing app hands in. `@micacms/editor` composes it
+ * with no authentication at all behind a loopback bind; `@micacms/self-hosted`
+ * composes it behind `@micacms/auth-oidc`. This package must never import an
+ * auth implementation — that direction is what protects the local
+ * distribution.
+ */
+export { createApp, allowAll, type AuthSurface, type CreateAppOptions } from "./app.js";
+export { createConnector, createRuntimeContext, DEFAULT_SITE_ID, type CreateRuntimeContextOptions, type OperationalInfo, type RuntimeContext, type SiteContext, } from "./context.js";
+export { bool, ConfigError, deriveRuntime, describeConfigIssues, list, loadEnvFile, LOOPBACK, requireRepositoryConfig, runtimeEnv, withoutBlanks, type RuntimeConfig, type RuntimeEnv, } from "./config.js";
+export { startServer, type StartServerOptions } from "./server.js";
+export { actorOf, clientIp, intParam, type Env } from "./http.js";
+export { checkSchema, loadSchema, SchemaError, schemaFingerprint, schemaOrigin } from "./schema.js";
+export { allowedOrigins, errorHandler, originGuard, rateLimit, requestContext, securityHeaders, } from "./middleware/index.js";
+export { adminAssetsExist } from "./routes/admin-spa.js";
+export { ApiError, badRequest, conflict, forbidden, notFound, unauthenticated, validationFailed, type ApiErrorBody, type ErrorCode, } from "./lib/errors.js";
+export { createLogger, type Logger } from "./lib/logger.js";
+export { createRateLimiter, type RateLimiter } from "./lib/rate-limit.js";
+export { randomToken } from "./lib/id.js";
+export { DEFAULT_BASE_URL, DEFAULT_PORT } from "./lib/ports.js";
+export { VERSION } from "./lib/version.js";
+export { openSqlite, type RunResult, type SqlDatabase, type SqlParams, type SqlValue } from "./db/driver.js";
+export { createDraftStagingService, analyseChanges, classifyPath, type AnnotatedChange, type ChangeOwner, type ContentStagingService, type DraftStagingDeps, type PublishInput, type StagingProblem, type StagingStatus, type StagingValidation, } from "./services/staging.js";
+export { createWorkingTreeStagingService, type WorkingTreeStagingDeps, } from "./services/staging-local.js";
+export { createMediaService, formatBytes, type MediaFile, type MediaService } from "./services/media.js";
+export { schemaStats } from "./lib/schema-stats.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,KAAK,WAAW,EAAE,KAAK,gBAAgB,EAAE,MAAM,UAAU,CAAC;AACxF,OAAO,EACL,eAAe,EACf,oBAAoB,EACpB,eAAe,EACf,KAAK,2BAA2B,EAChC,KAAK,eAAe,EACpB,KAAK,cAAc,EACnB,KAAK,WAAW,GACjB,MAAM,cAAc,CAAC;AACtB,OAAO,EACL,IAAI,EACJ,WAAW,EACX,aAAa,EACb,oBAAoB,EACpB,IAAI,EACJ,WAAW,EACX,QAAQ,EACR,uBAAuB,EACvB,UAAU,EACV,aAAa,EACb,KAAK,aAAa,EAClB,KAAK,UAAU,GAChB,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,WAAW,EAAE,KAAK,kBAAkB,EAAE,MAAM,aAAa,CAAC;AACnE,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK,GAAG,EAAE,MAAM,WAAW,CAAC;AAClE,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,WAAW,EAAE,iBAAiB,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AACpG,OAAO,EACL,cAAc,EACd,YAAY,EACZ,WAAW,EACX,SAAS,EACT,cAAc,EACd,eAAe,GAChB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AACzD,OAAO,EACL,QAAQ,EACR,UAAU,EACV,QAAQ,EACR,SAAS,EACT,QAAQ,EACR,eAAe,EACf,gBAAgB,EAChB,KAAK,YAAY,EACjB,KAAK,SAAS,GACf,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAAE,YAAY,EAAE,KAAK,MAAM,EAAE,MAAM,iBAAiB,CAAC;AAC5D,OAAO,EAAE,iBAAiB,EAAE,KAAK,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAC1E,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,gBAAgB,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAChE,OAAO,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAC3C,OAAO,EAAE,UAAU,EAAE,KAAK,SAAS,EAAE,KAAK,WAAW,EAAE,KAAK,SAAS,EAAE,KAAK,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAC7G,OAAO,EACL,yBAAyB,EACzB,cAAc,EACd,YAAY,EACZ,KAAK,eAAe,EACpB,KAAK,WAAW,EAChB,KAAK,qBAAqB,EAC1B,KAAK,gBAAgB,EACrB,KAAK,YAAY,EACjB,KAAK,cAAc,EACnB,KAAK,aAAa,EAClB,KAAK,iBAAiB,GACvB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,+BAA+B,EAC/B,KAAK,sBAAsB,GAC5B,MAAM,6BAA6B,CAAC;AACrC,OAAO,EAAE,kBAAkB,EAAE,WAAW,EAAE,KAAK,SAAS,EAAE,KAAK,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACzG,OAAO,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC"}

package/dist/index.js

@@ -0,0 +1,31 @@
+/**
+ * @micacms/runtime — the single-site Mica runtime, authentication-neutral.
+ *
+ * One Hono API over one `SiteContext`: content, media, staging and system
+ * routes, with the question "who is this request?" answered by whatever
+ * `AuthSurface` the composing app hands in. `@micacms/editor` composes it
+ * with no authentication at all behind a loopback bind; `@micacms/self-hosted`
+ * composes it behind `@micacms/auth-oidc`. This package must never import an
+ * auth implementation — that direction is what protects the local
+ * distribution.
+ */
+export { createApp, allowAll } from "./app.js";
+export { createConnector, createRuntimeContext, DEFAULT_SITE_ID, } from "./context.js";
+export { bool, ConfigError, deriveRuntime, describeConfigIssues, list, loadEnvFile, LOOPBACK, requireRepositoryConfig, runtimeEnv, withoutBlanks, } from "./config.js";
+export { startServer } from "./server.js";
+export { actorOf, clientIp, intParam } from "./http.js";
+export { checkSchema, loadSchema, SchemaError, schemaFingerprint, schemaOrigin } from "./schema.js";
+export { allowedOrigins, errorHandler, originGuard, rateLimit, requestContext, securityHeaders, } from "./middleware/index.js";
+export { adminAssetsExist } from "./routes/admin-spa.js";
+export { ApiError, badRequest, conflict, forbidden, notFound, unauthenticated, validationFailed, } from "./lib/errors.js";
+export { createLogger } from "./lib/logger.js";
+export { createRateLimiter } from "./lib/rate-limit.js";
+export { randomToken } from "./lib/id.js";
+export { DEFAULT_BASE_URL, DEFAULT_PORT } from "./lib/ports.js";
+export { VERSION } from "./lib/version.js";
+export { openSqlite } from "./db/driver.js";
+export { createDraftStagingService, analyseChanges, classifyPath, } from "./services/staging.js";
+export { createWorkingTreeStagingService, } from "./services/staging-local.js";
+export { createMediaService, formatBytes } from "./services/media.js";
+export { schemaStats } from "./lib/schema-stats.js";
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EAAE,SAAS,EAAE,QAAQ,EAA2C,MAAM,UAAU,CAAC;AACxF,OAAO,EACL,eAAe,EACf,oBAAoB,EACpB,eAAe,GAKhB,MAAM,cAAc,CAAC;AACtB,OAAO,EACL,IAAI,EACJ,WAAW,EACX,aAAa,EACb,oBAAoB,EACpB,IAAI,EACJ,WAAW,EACX,QAAQ,EACR,uBAAuB,EACvB,UAAU,EACV,aAAa,GAGd,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,WAAW,EAA2B,MAAM,aAAa,CAAC;AACnE,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAY,MAAM,WAAW,CAAC;AAClE,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,WAAW,EAAE,iBAAiB,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AACpG,OAAO,EACL,cAAc,EACd,YAAY,EACZ,WAAW,EACX,SAAS,EACT,cAAc,EACd,eAAe,GAChB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AACzD,OAAO,EACL,QAAQ,EACR,UAAU,EACV,QAAQ,EACR,SAAS,EACT,QAAQ,EACR,eAAe,EACf,gBAAgB,GAGjB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAAE,YAAY,EAAe,MAAM,iBAAiB,CAAC;AAC5D,OAAO,EAAE,iBAAiB,EAAoB,MAAM,qBAAqB,CAAC;AAC1E,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,gBAAgB,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAChE,OAAO,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAC3C,OAAO,EAAE,UAAU,EAAmE,MAAM,gBAAgB,CAAC;AAC7G,OAAO,EACL,yBAAyB,EACzB,cAAc,EACd,YAAY,GASb,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,+BAA+B,GAEhC,MAAM,6BAA6B,CAAC;AACrC,OAAO,EAAE,kBAAkB,EAAE,WAAW,EAAqC,MAAM,qBAAqB,CAAC;AACzG,OAAO,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC"}

package/dist/lib/errors.d.ts

@@ -0,0 +1,39 @@
+/**
+ * Error taxonomy.
+ *
+ * Every failure the API reports on purpose is an `ApiError` carrying a stable
+ * machine-readable `code`. Anything else that reaches the error middleware is
+ * treated as a bug: logged with its stack, reported as a bare 500.
+ */
+import type { FieldIssue } from "@micacms/core";
+export type ErrorCode = "bad_request" | "validation_failed" | "unauthenticated" | "invalid_credentials" | "forbidden" | "not_found" | "conflict" | "payload_too_large" | "unsupported_media_type" | "rate_limited" | "internal_error"
+/** An identity provider Mica depends on could not be reached. */
+ | "service_unavailable";
+export interface ApiErrorBody {
+    error: {
+        code: ErrorCode;
+        message: string;
+        issues?: FieldIssue[];
+    };
+}
+export declare class ApiError extends Error {
+    name: string;
+    readonly code: ErrorCode;
+    readonly status: number;
+    readonly issues?: FieldIssue[];
+    /** Extra response headers, e.g. `Retry-After` on a rate limit. */
+    readonly headers?: Record<string, string>;
+    constructor(code: ErrorCode, message: string, options?: {
+        issues?: FieldIssue[];
+        headers?: Record<string, string>;
+        cause?: unknown;
+    });
+    toBody(): ApiErrorBody;
+}
+export declare const badRequest: (message: string) => ApiError;
+export declare const unauthenticated: (message?: string) => ApiError;
+export declare const forbidden: (message?: string) => ApiError;
+export declare const notFound: (message?: string) => ApiError;
+export declare const conflict: (message: string) => ApiError;
+export declare const validationFailed: (issues: FieldIssue[], message?: string) => ApiError;
+//# sourceMappingURL=errors.d.ts.map

package/dist/lib/errors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../../src/lib/errors.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAEhD,MAAM,MAAM,SAAS,GACjB,aAAa,GACb,mBAAmB,GACnB,iBAAiB,GACjB,qBAAqB,GACrB,WAAW,GACX,WAAW,GACX,UAAU,GACV,mBAAmB,GACnB,wBAAwB,GACxB,cAAc,GACd,gBAAgB;AAClB,iEAAiE;GAC/D,qBAAqB,CAAC;AAiB1B,MAAM,WAAW,YAAY;IAC3B,KAAK,EAAE;QACL,IAAI,EAAE,SAAS,CAAC;QAChB,OAAO,EAAE,MAAM,CAAC;QAChB,MAAM,CAAC,EAAE,UAAU,EAAE,CAAC;KACvB,CAAC;CACH;AAED,qBAAa,QAAS,SAAQ,KAAK;IACxB,IAAI,SAAc;IAC3B,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC;IACzB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,MAAM,CAAC,EAAE,UAAU,EAAE,CAAC;IAC/B,kEAAkE;IAClE,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;gBAGxC,IAAI,EAAE,SAAS,EACf,OAAO,EAAE,MAAM,EACf,OAAO,GAAE;QAAE,MAAM,CAAC,EAAE,UAAU,EAAE,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAAC,KAAK,CAAC,EAAE,OAAO,CAAA;KAAO;IAS5F,MAAM,IAAI,YAAY;CASvB;AAED,eAAO,MAAM,UAAU,GAAI,SAAS,MAAM,aAAyC,CAAC;AACpF,eAAO,MAAM,eAAe,GAAI,gBAAoC,aAC1B,CAAC;AAC3C,eAAO,MAAM,SAAS,GAAI,gBAAoD,aAC1C,CAAC;AACrC,eAAO,MAAM,QAAQ,GAAI,gBAAsB,aAAuC,CAAC;AACvF,eAAO,MAAM,QAAQ,GAAI,SAAS,MAAM,aAAsC,CAAC;AAC/E,eAAO,MAAM,gBAAgB,GAAI,QAAQ,UAAU,EAAE,EAAE,gBAAqC,aACpC,CAAC"}