@plumix/core 0.1.0

package/dist/rest/plugin-resources.js

@@ -0,0 +1,37 @@
+import * as v from "valibot";
+import { base } from "./base.js";
+// Enforce the declarative route-auth model before a plugin handler runs:
+// `public` is open; `authenticated` requires a real bearer principal (not the
+// anonymous public one); a capability gate defers to the principal's grants.
+function enforceRestAuth(auth, context, errors) {
+    if (auth === "public")
+        return;
+    if (auth === "authenticated") {
+        if (!context.restAuthenticated)
+            throw errors.UNAUTHORIZED();
+        return;
+    }
+    if (!context.auth.can(auth.capability)) {
+        throw errors.FORBIDDEN({ data: { capability: auth.capability } });
+    }
+}
+const EMPTY_INPUT = v.object({});
+// Build oRPC procedures for plugin resources, keyed by index (OpenAPI routing
+// is driven by each procedure's `route`, not the object key).
+export function buildPluginRestRouter(resources) {
+    const router = {};
+    resources.forEach((resource, index) => {
+        router[`pluginResource${index}`] = base
+            // oRPC types `path` as a `/${string}` literal; the leading slash is
+            // enforced by `assertValidRestResourcePath` at registration.
+            .route({ method: resource.method, path: resource.path })
+            .input(resource.input ?? EMPTY_INPUT)
+            .output(resource.output)
+            .handler(({ input, context, errors }) => {
+            enforceRestAuth(resource.auth, context, errors);
+            return resource.handler({ input, context });
+        });
+    });
+    return router;
+}
+//# sourceMappingURL=plugin-resources.js.map

package/dist/rest/plugin-resources.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"plugin-resources.js","sourceRoot":"","sources":["../../src/rest/plugin-resources.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,SAAS,CAAC;AAQ7B,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,yEAAyE;AACzE,8EAA8E;AAC9E,6EAA6E;AAC7E,SAAS,eAAe,CACtB,IAAqB,EACrB,OAAoB,EACpB,MAAkB;IAElB,IAAI,IAAI,KAAK,QAAQ;QAAE,OAAO;IAC9B,IAAI,IAAI,KAAK,eAAe,EAAE,CAAC;QAC7B,IAAI,CAAC,OAAO,CAAC,iBAAiB;YAAE,MAAM,MAAM,CAAC,YAAY,EAAE,CAAC;QAC5D,OAAO;IACT,CAAC;IACD,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;QACvC,MAAM,MAAM,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;IACpE,CAAC;AACH,CAAC;AAED,MAAM,WAAW,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;AAEjC,8EAA8E;AAC9E,8DAA8D;AAC9D,MAAM,UAAU,qBAAqB,CACnC,SAA4C;IAE5C,MAAM,MAAM,GAA4B,EAAE,CAAC;IAC3C,SAAS,CAAC,OAAO,CAAC,CAAC,QAAQ,EAAE,KAAK,EAAE,EAAE;QACpC,MAAM,CAAC,iBAAiB,KAAK,EAAE,CAAC,GAAG,IAAI;YACrC,oEAAoE;YACpE,6DAA6D;aAC5D,KAAK,CAAC,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,IAAI,EAAE,QAAQ,CAAC,IAAoB,EAAE,CAAC;aACvE,KAAK,CAAC,QAAQ,CAAC,KAAK,IAAI,WAAW,CAAC;aACpC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC;aACvB,OAAO,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE;YACtC,eAAe,CAAC,QAAQ,CAAC,IAAI,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;YAChD,OAAO,QAAQ,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;QAC9C,CAAC,CAAC,CAAC;IACP,CAAC,CAAC,CAAC;IACH,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/rest/principal.d.ts

@@ -0,0 +1,19 @@
+import type { AppContext } from "../context/app.js";
+export type RestPrincipal = {
+    readonly kind: "authed";
+    readonly ctx: AppContext;
+} | {
+    readonly kind: "anonymous";
+    readonly ctx: AppContext;
+} | {
+    readonly kind: "unauthorized";
+};
+/**
+ * Resolve the principal for a REST request. No bearer token → anonymous
+ * read-only public principal. A bearer token must be valid: an expired /
+ * revoked / disabled-user / malformed token is rejected outright (`unauthorized`)
+ * rather than silently downgraded to anonymous, so a caller learns its
+ * credential failed.
+ */
+export declare function resolveRestPrincipal(ctx: AppContext): Promise<RestPrincipal>;
+//# sourceMappingURL=principal.d.ts.map

package/dist/rest/principal.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"principal.d.ts","sourceRoot":"","sources":["../../src/rest/principal.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAqB,MAAM,mBAAmB,CAAC;AAevE,MAAM,MAAM,aAAa,GACrB;IAAE,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC;IAAC,QAAQ,CAAC,GAAG,EAAE,UAAU,CAAA;CAAE,GACrD;IAAE,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC;IAAC,QAAQ,CAAC,GAAG,EAAE,UAAU,CAAA;CAAE,GACxD;IAAE,QAAQ,CAAC,IAAI,EAAE,cAAc,CAAA;CAAE,CAAC;AAEtC;;;;;;GAMG;AACH,wBAAsB,oBAAoB,CACxC,GAAG,EAAE,UAAU,GACd,OAAO,CAAC,aAAa,CAAC,CAMxB"}

package/dist/rest/principal.js

@@ -0,0 +1,27 @@
+import { authenticateBearer, hasBearerToken } from "../auth/bearer.js";
+import { withUser } from "../context/app.js";
+// The lowest role: reads published content, holds no edit/admin capability.
+// An anonymous REST request reads through this principal, so the entry
+// services' existing status-clamping and hide-existence (404) policy applies
+// unchanged — no REST-specific status filtering.
+const PUBLIC_PRINCIPAL = {
+    id: 0,
+    email: "",
+    role: "subscriber",
+    meta: {},
+};
+/**
+ * Resolve the principal for a REST request. No bearer token → anonymous
+ * read-only public principal. A bearer token must be valid: an expired /
+ * revoked / disabled-user / malformed token is rejected outright (`unauthorized`)
+ * rather than silently downgraded to anonymous, so a caller learns its
+ * credential failed.
+ */
+export async function resolveRestPrincipal(ctx) {
+    if (!hasBearerToken(ctx.request)) {
+        return { kind: "anonymous", ctx: withUser(ctx, PUBLIC_PRINCIPAL) };
+    }
+    const authed = await authenticateBearer(ctx);
+    return authed ? { kind: "authed", ctx: authed } : { kind: "unauthorized" };
+}
+//# sourceMappingURL=principal.js.map

package/dist/rest/principal.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"principal.js","sourceRoot":"","sources":["../../src/rest/principal.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,kBAAkB,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AACvE,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAE7C,4EAA4E;AAC5E,uEAAuE;AACvE,6EAA6E;AAC7E,iDAAiD;AACjD,MAAM,gBAAgB,GAAsB;IAC1C,EAAE,EAAE,CAAC;IACL,KAAK,EAAE,EAAE;IACT,IAAI,EAAE,YAAY;IAClB,IAAI,EAAE,EAAE;CACT,CAAC;AAOF;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,GAAe;IAEf,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;QACjC,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,GAAG,EAAE,QAAQ,CAAC,GAAG,EAAE,gBAAgB,CAAC,EAAE,CAAC;IACrE,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,kBAAkB,CAAC,GAAG,CAAC,CAAC;IAC7C,OAAO,MAAM,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC;AAC7E,CAAC"}

package/dist/rest/projection.d.ts

@@ -0,0 +1,22 @@
+import type { AppContext } from "../context/app.js";
+import type { Entry } from "../db/schema/entries.js";
+import type { Term } from "../db/schema/terms.js";
+import type { PluginRegistry } from "../plugin/manifest.js";
+import type { PublicAuthor, PublicEntry, PublicTerm } from "./schemas.js";
+export declare function projectTerm(term: Pick<Term, "id" | "name" | "slug">): PublicTerm;
+export declare function apiVisibleMetaKeys(registry: PluginRegistry, entryType: string): Set<string>;
+/**
+ * Explicit allowlist — default-deny. Privileged columns (authorId, sortOrder,
+ * parentId, meta) and the author's email/role never appear because they are
+ * not copied here; adding a column to the entries table does not leak it. The
+ * shape is pinned to `publicEntrySchema`, the surface's documented contract.
+ */
+export declare function projectEntry(entry: Entry, author: PublicAuthor | null, termsByTaxonomy: Record<string, PublicTerm[]>, visibleMetaKeys: Set<string>): PublicEntry;
+export declare function loadPublicAuthors(ctx: AppContext, authorIds: readonly number[]): Promise<Map<number, PublicAuthor>>;
+/**
+ * Batched term embed for a page of entries — one join over `entry_term`, never
+ * a per-entry query. Terms in non-public taxonomies are dropped (default-deny);
+ * within a taxonomy they keep their `entry_term.sortOrder`.
+ */
+export declare function loadEntriesTerms(ctx: AppContext, entryIds: readonly number[]): Promise<Map<number, Record<string, PublicTerm[]>>>;
+//# sourceMappingURL=projection.d.ts.map

package/dist/rest/projection.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"projection.d.ts","sourceRoot":"","sources":["../../src/rest/projection.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AACpD,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,yBAAyB,CAAC;AACrD,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,uBAAuB,CAAC;AAClD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAC5D,OAAO,KAAK,EAAE,YAAY,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAM1E,wBAAgB,WAAW,CACzB,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,GAAG,MAAM,GAAG,MAAM,CAAC,GACvC,UAAU,CAEZ;AAKD,wBAAgB,kBAAkB,CAChC,QAAQ,EAAE,cAAc,EACxB,SAAS,EAAE,MAAM,GAChB,GAAG,CAAC,MAAM,CAAC,CASb;AAaD;;;;;GAKG;AACH,wBAAgB,YAAY,CAC1B,KAAK,EAAE,KAAK,EACZ,MAAM,EAAE,YAAY,GAAG,IAAI,EAC3B,eAAe,EAAE,MAAM,CAAC,MAAM,EAAE,UAAU,EAAE,CAAC,EAC7C,eAAe,EAAE,GAAG,CAAC,MAAM,CAAC,GAC3B,WAAW,CAgBb;AAID,wBAAsB,iBAAiB,CACrC,GAAG,EAAE,UAAU,EACf,SAAS,EAAE,SAAS,MAAM,EAAE,GAC3B,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC,CAQpC;AAED;;;;GAIG;AACH,wBAAsB,gBAAgB,CACpC,GAAG,EAAE,UAAU,EACf,QAAQ,EAAE,SAAS,MAAM,EAAE,GAC1B,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,CA4BpD"}

package/dist/rest/projection.js

@@ -0,0 +1,99 @@
+import { eq, inArray } from "../db/index.js";
+import { entryTerm } from "../db/schema/entry_term.js";
+import { terms } from "../db/schema/terms.js";
+import { users } from "../db/schema/users.js";
+export function projectTerm(term) {
+    return { id: term.id, name: term.name, slug: term.slug };
+}
+// The meta keys an entry type opts into exposing (`showInApi`). Default-deny:
+// a key absent from any registered field, or registered without the flag, is
+// never returned — adding a field can't leak it.
+export function apiVisibleMetaKeys(registry, entryType) {
+    const keys = new Set();
+    for (const box of registry.entryMetaBoxes.values()) {
+        if (!box.entryTypes.includes(entryType))
+            continue;
+        for (const field of box.fields) {
+            if (field.showInApi === true)
+                keys.add(field.key);
+        }
+    }
+    return keys;
+}
+function projectMeta(bag, visibleKeys) {
+    const out = {};
+    for (const key of visibleKeys) {
+        if (key in bag)
+            out[key] = bag[key];
+    }
+    return out;
+}
+/**
+ * Explicit allowlist — default-deny. Privileged columns (authorId, sortOrder,
+ * parentId, meta) and the author's email/role never appear because they are
+ * not copied here; adding a column to the entries table does not leak it. The
+ * shape is pinned to `publicEntrySchema`, the surface's documented contract.
+ */
+export function projectEntry(entry, author, termsByTaxonomy, visibleMetaKeys) {
+    return {
+        id: entry.id,
+        type: entry.type,
+        slug: entry.slug,
+        title: entry.title,
+        excerpt: entry.excerpt,
+        content: entry.content,
+        status: entry.status,
+        publishedAt: entry.publishedAt,
+        createdAt: entry.createdAt,
+        updatedAt: entry.updatedAt,
+        author,
+        terms: termsByTaxonomy,
+        meta: projectMeta(entry.meta, visibleMetaKeys),
+    };
+}
+// Batched author lookup — one `WHERE id IN (...)` for the whole page, never a
+// per-row query.
+export async function loadPublicAuthors(ctx, authorIds) {
+    const ids = [...new Set(authorIds)];
+    if (ids.length === 0)
+        return new Map();
+    const rows = await ctx.db
+        .select({ id: users.id, name: users.name, avatarUrl: users.avatarUrl })
+        .from(users)
+        .where(inArray(users.id, ids));
+    return new Map(rows.map((row) => [row.id, row]));
+}
+/**
+ * Batched term embed for a page of entries — one join over `entry_term`, never
+ * a per-entry query. Terms in non-public taxonomies are dropped (default-deny);
+ * within a taxonomy they keep their `entry_term.sortOrder`.
+ */
+export async function loadEntriesTerms(ctx, entryIds) {
+    const result = new Map();
+    if (entryIds.length === 0)
+        return result;
+    const rows = await ctx.db
+        .select({
+        entryId: entryTerm.entryId,
+        id: terms.id,
+        name: terms.name,
+        slug: terms.slug,
+        taxonomy: terms.taxonomy,
+        sortOrder: entryTerm.sortOrder,
+    })
+        .from(entryTerm)
+        .innerJoin(terms, eq(entryTerm.termId, terms.id))
+        .where(inArray(entryTerm.entryId, [...new Set(entryIds)]))
+        // `id` tiebreaks the default-0 sortOrder so embed order is deterministic.
+        .orderBy(entryTerm.sortOrder, terms.id);
+    for (const row of rows) {
+        if (ctx.plugins.termTaxonomies.get(row.taxonomy)?.isPublic === false) {
+            continue;
+        }
+        const grouped = result.get(row.entryId) ?? {};
+        (grouped[row.taxonomy] ??= []).push(projectTerm(row));
+        result.set(row.entryId, grouped);
+    }
+    return result;
+}
+//# sourceMappingURL=projection.js.map

package/dist/rest/projection.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"projection.js","sourceRoot":"","sources":["../../src/rest/projection.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,EAAE,EAAE,OAAO,EAAE,MAAM,gBAAgB,CAAC;AAC7C,OAAO,EAAE,SAAS,EAAE,MAAM,4BAA4B,CAAC;AACvD,OAAO,EAAE,KAAK,EAAE,MAAM,uBAAuB,CAAC;AAC9C,OAAO,EAAE,KAAK,EAAE,MAAM,uBAAuB,CAAC;AAE9C,MAAM,UAAU,WAAW,CACzB,IAAwC;IAExC,OAAO,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC;AAC3D,CAAC;AAED,8EAA8E;AAC9E,6EAA6E;AAC7E,iDAAiD;AACjD,MAAM,UAAU,kBAAkB,CAChC,QAAwB,EACxB,SAAiB;IAEjB,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,KAAK,MAAM,GAAG,IAAI,QAAQ,CAAC,cAAc,CAAC,MAAM,EAAE,EAAE,CAAC;QACnD,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,QAAQ,CAAC,SAAS,CAAC;YAAE,SAAS;QAClD,KAAK,MAAM,KAAK,IAAI,GAAG,CAAC,MAAM,EAAE,CAAC;YAC/B,IAAI,KAAK,CAAC,SAAS,KAAK,IAAI;gBAAE,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACpD,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,WAAW,CAClB,GAA4B,EAC5B,WAAwB;IAExB,MAAM,GAAG,GAA4B,EAAE,CAAC;IACxC,KAAK,MAAM,GAAG,IAAI,WAAW,EAAE,CAAC;QAC9B,IAAI,GAAG,IAAI,GAAG;YAAE,GAAG,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC;IACtC,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,YAAY,CAC1B,KAAY,EACZ,MAA2B,EAC3B,eAA6C,EAC7C,eAA4B;IAE5B,OAAO;QACL,EAAE,EAAE,KAAK,CAAC,EAAE;QACZ,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,MAAM;QACN,KAAK,EAAE,eAAe;QACtB,IAAI,EAAE,WAAW,CAAC,KAAK,CAAC,IAAI,EAAE,eAAe,CAAC;KAC/C,CAAC;AACJ,CAAC;AAED,8EAA8E;AAC9E,iBAAiB;AACjB,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,GAAe,EACf,SAA4B;IAE5B,MAAM,GAAG,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC;IACpC,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,GAAG,EAAE,CAAC;IACvC,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,EAAE;SACtB,MAAM,CAAC,EAAE,EAAE,EAAE,KAAK,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,CAAC;SACtE,IAAI,CAAC,KAAK,CAAC;SACX,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC,CAAC;IACjC,OAAO,IAAI,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC;AACnD,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,GAAe,EACf,QAA2B;IAE3B,MAAM,MAAM,GAAG,IAAI,GAAG,EAAwC,CAAC;IAC/D,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,MAAM,CAAC;IAEzC,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,EAAE;SACtB,MAAM,CAAC;QACN,OAAO,EAAE,SAAS,CAAC,OAAO;QAC1B,EAAE,EAAE,KAAK,CAAC,EAAE;QACZ,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,SAAS,EAAE,SAAS,CAAC,SAAS;KAC/B,CAAC;SACD,IAAI,CAAC,SAAS,CAAC;SACf,SAAS,CAAC,KAAK,EAAE,EAAE,CAAC,SAAS,CAAC,MAAM,EAAE,KAAK,CAAC,EAAE,CAAC,CAAC;SAChD,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,OAAO,EAAE,CAAC,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;QAC1D,0EAA0E;SACzE,OAAO,CAAC,SAAS,CAAC,SAAS,EAAE,KAAK,CAAC,EAAE,CAAC,CAAC;IAE1C,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,IAAI,GAAG,CAAC,OAAO,CAAC,cAAc,CAAC,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,QAAQ,KAAK,KAAK,EAAE,CAAC;YACrE,SAAS;QACX,CAAC;QACD,MAAM,OAAO,GAAG,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;QAC9C,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC;QACtD,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IACnC,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/rest/rest-base.d.ts

@@ -0,0 +1,14 @@
+import type { PluginRegistry, RegisteredEntryType, RegisteredTermTaxonomy } from "../plugin/manifest.js";
+/**
+ * Resolve a collection rest_base (e.g. `posts`) to its registered public entry
+ * type. Non-public and unknown bases resolve to null so the caller can 404 —
+ * the existence of a non-public type stays hidden.
+ */
+export declare function resolvePublicEntryType(registry: PluginRegistry, restBase: string): RegisteredEntryType | null;
+/**
+ * Resolve a collection rest_base (e.g. `categories`) to its registered public
+ * taxonomy. Entry types and taxonomies share the top-level rest_base namespace
+ * (siblings, as in WordPress), so the dispatcher tries this after entry types.
+ */
+export declare function resolvePublicTaxonomy(registry: PluginRegistry, restBase: string): RegisteredTermTaxonomy | null;
+//# sourceMappingURL=rest-base.d.ts.map

package/dist/rest/rest-base.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"rest-base.d.ts","sourceRoot":"","sources":["../../src/rest/rest-base.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,cAAc,EACd,mBAAmB,EACnB,sBAAsB,EACvB,MAAM,uBAAuB,CAAC;AAW/B;;;;GAIG;AACH,wBAAgB,sBAAsB,CACpC,QAAQ,EAAE,cAAc,EACxB,QAAQ,EAAE,MAAM,GACf,mBAAmB,GAAG,IAAI,CAO5B;AAED;;;;GAIG;AACH,wBAAgB,qBAAqB,CACnC,QAAQ,EAAE,cAAc,EACxB,QAAQ,EAAE,MAAM,GACf,sBAAsB,GAAG,IAAI,CAO/B"}

package/dist/rest/rest-base.js

@@ -0,0 +1,36 @@
+// Naive pluralization; an explicit per-type rest_base override is a later concern.
+function pluralize(name) {
+    if (name.endsWith("y") && !/[aeiou]y$/.test(name)) {
+        return `${name.slice(0, -1)}ies`;
+    }
+    if (/(?:s|x|z|ch|sh)$/.test(name))
+        return `${name}es`;
+    return `${name}s`;
+}
+/**
+ * Resolve a collection rest_base (e.g. `posts`) to its registered public entry
+ * type. Non-public and unknown bases resolve to null so the caller can 404 —
+ * the existence of a non-public type stays hidden.
+ */
+export function resolvePublicEntryType(registry, restBase) {
+    for (const type of registry.entryTypes.values()) {
+        if (type.isPublic !== false && pluralize(type.name) === restBase) {
+            return type;
+        }
+    }
+    return null;
+}
+/**
+ * Resolve a collection rest_base (e.g. `categories`) to its registered public
+ * taxonomy. Entry types and taxonomies share the top-level rest_base namespace
+ * (siblings, as in WordPress), so the dispatcher tries this after entry types.
+ */
+export function resolvePublicTaxonomy(registry, restBase) {
+    for (const taxonomy of registry.termTaxonomies.values()) {
+        if (taxonomy.isPublic !== false && pluralize(taxonomy.name) === restBase) {
+            return taxonomy;
+        }
+    }
+    return null;
+}
+//# sourceMappingURL=rest-base.js.map

package/dist/rest/rest-base.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rest-base.js","sourceRoot":"","sources":["../../src/rest/rest-base.ts"],"names":[],"mappings":"AAMA,mFAAmF;AACnF,SAAS,SAAS,CAAC,IAAY;IAC7B,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QAClD,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC;IACnC,CAAC;IACD,IAAI,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,GAAG,IAAI,IAAI,CAAC;IACtD,OAAO,GAAG,IAAI,GAAG,CAAC;AACpB,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,sBAAsB,CACpC,QAAwB,EACxB,QAAgB;IAEhB,KAAK,MAAM,IAAI,IAAI,QAAQ,CAAC,UAAU,CAAC,MAAM,EAAE,EAAE,CAAC;QAChD,IAAI,IAAI,CAAC,QAAQ,KAAK,KAAK,IAAI,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,QAAQ,EAAE,CAAC;YACjE,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,qBAAqB,CACnC,QAAwB,EACxB,QAAgB;IAEhB,KAAK,MAAM,QAAQ,IAAI,QAAQ,CAAC,cAAc,CAAC,MAAM,EAAE,EAAE,CAAC;QACxD,IAAI,QAAQ,CAAC,QAAQ,KAAK,KAAK,IAAI,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,QAAQ,EAAE,CAAC;YACzE,OAAO,QAAQ,CAAC;QAClB,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/rest/rest-routes.d.ts

@@ -0,0 +1,14 @@
+export interface RestRoute {
+    readonly method: string;
+    readonly path: string;
+}
+/**
+ * Two routes overlap when some URL would match both: same method, same segment
+ * count, and every position is either an exact literal match or a `{param}` on
+ * either side. The matcher ranks static segments above params, so a literal
+ * plugin path inside core's `/{collection}` space would silently shadow it —
+ * overlap (not string equality) is what makes "core paths reserved" real.
+ */
+export declare function routesOverlap(a: RestRoute, b: RestRoute): boolean;
+export declare const CORE_REST_ROUTES: readonly RestRoute[];
+//# sourceMappingURL=rest-routes.d.ts.map

package/dist/rest/rest-routes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"rest-routes.d.ts","sourceRoot":"","sources":["../../src/rest/rest-routes.ts"],"names":[],"mappings":"AAIA,MAAM,WAAW,SAAS;IACxB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;CACvB;AAMD;;;;;;GAMG;AACH,wBAAgB,aAAa,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,SAAS,GAAG,OAAO,CASjE;AAID,eAAO,MAAM,gBAAgB,EAAE,SAAS,SAAS,EAGhD,CAAC"}

package/dist/rest/rest-routes.js

@@ -0,0 +1,32 @@
+// Pure route-overlap helpers — no oRPC imports, so the boot-time collision
+// check (buildApp) can use them without pulling the REST handler graph onto the
+// cold-start path.
+function isParam(segment) {
+    return segment.startsWith("{") && segment.endsWith("}");
+}
+/**
+ * Two routes overlap when some URL would match both: same method, same segment
+ * count, and every position is either an exact literal match or a `{param}` on
+ * either side. The matcher ranks static segments above params, so a literal
+ * plugin path inside core's `/{collection}` space would silently shadow it —
+ * overlap (not string equality) is what makes "core paths reserved" real.
+ */
+export function routesOverlap(a, b) {
+    if (a.method !== b.method)
+        return false;
+    const aSegments = a.path.split("/");
+    const bSegments = b.path.split("/");
+    if (aSegments.length !== bSegments.length)
+        return false;
+    return aSegments.every((segment, i) => {
+        const other = bSegments[i] ?? "";
+        return segment === other || isParam(segment) || isParam(other);
+    });
+}
+// Core's reserved routes. Core owns the entire 1- and 2-segment collection
+// space, so plugin resources must nest deeper (e.g. `/{type}/{id}/comments`).
+export const CORE_REST_ROUTES = [
+    { method: "GET", path: "/{collection}" },
+    { method: "GET", path: "/{collection}/{id}" },
+];
+//# sourceMappingURL=rest-routes.js.map

package/dist/rest/rest-routes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rest-routes.js","sourceRoot":"","sources":["../../src/rest/rest-routes.ts"],"names":[],"mappings":"AAAA,2EAA2E;AAC3E,gFAAgF;AAChF,mBAAmB;AAOnB,SAAS,OAAO,CAAC,OAAe;IAC9B,OAAO,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;AAC1D,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,aAAa,CAAC,CAAY,EAAE,CAAY;IACtD,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IACxC,MAAM,SAAS,GAAG,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACpC,MAAM,SAAS,GAAG,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACpC,IAAI,SAAS,CAAC,MAAM,KAAK,SAAS,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IACxD,OAAO,SAAS,CAAC,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC,EAAE,EAAE;QACpC,MAAM,KAAK,GAAG,SAAS,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QACjC,OAAO,OAAO,KAAK,KAAK,IAAI,OAAO,CAAC,OAAO,CAAC,IAAI,OAAO,CAAC,KAAK,CAAC,CAAC;IACjE,CAAC,CAAC,CAAC;AACL,CAAC;AAED,2EAA2E;AAC3E,8EAA8E;AAC9E,MAAM,CAAC,MAAM,gBAAgB,GAAyB;IACpD,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,eAAe,EAAE;IACxC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,oBAAoB,EAAE;CAC9C,CAAC"}

package/dist/rest/router.d.ts

@@ -0,0 +1,117 @@
+import * as v from "valibot";
+export declare const restRouter: {
+    collectionList: import("@orpc/server").DecoratedProcedure<import("./base.js").RestContext & Record<never, never>, import("./base.js").RestContext, v.ObjectSchema<{
+        readonly collection: v.StringSchema<undefined>;
+    }, undefined>, v.UnionSchema<[v.ObjectSchema<{
+        readonly data: v.ArraySchema<v.ObjectSchema<{
+            readonly id: v.NumberSchema<undefined>;
+            readonly type: v.StringSchema<undefined>;
+            readonly slug: v.StringSchema<undefined>;
+            readonly title: v.StringSchema<undefined>;
+            readonly excerpt: v.NullableSchema<v.StringSchema<undefined>, undefined>;
+            readonly content: v.UnknownSchema;
+            readonly status: v.StringSchema<undefined>;
+            readonly publishedAt: v.NullableSchema<v.DateSchema<undefined>, undefined>;
+            readonly createdAt: v.DateSchema<undefined>;
+            readonly updatedAt: v.DateSchema<undefined>;
+            readonly author: v.NullableSchema<v.ObjectSchema<{
+                readonly id: v.NumberSchema<undefined>;
+                readonly name: v.NullableSchema<v.StringSchema<undefined>, undefined>;
+                readonly avatarUrl: v.NullableSchema<v.StringSchema<undefined>, undefined>;
+            }, undefined>, undefined>;
+            readonly terms: v.RecordSchema<v.StringSchema<undefined>, v.ArraySchema<v.ObjectSchema<{
+                readonly id: v.NumberSchema<undefined>;
+                readonly name: v.StringSchema<undefined>;
+                readonly slug: v.StringSchema<undefined>;
+            }, undefined>, undefined>, undefined>;
+            readonly meta: v.RecordSchema<v.StringSchema<undefined>, v.UnknownSchema, undefined>;
+        }, undefined>, undefined>;
+        readonly meta: v.ObjectSchema<{
+            readonly page: v.NumberSchema<undefined>;
+            readonly per_page: v.NumberSchema<undefined>;
+        }, undefined>;
+        readonly links: v.ObjectSchema<{
+            readonly self: v.StringSchema<undefined>;
+            readonly next: v.OptionalSchema<v.StringSchema<undefined>, undefined>;
+            readonly prev: v.OptionalSchema<v.StringSchema<undefined>, undefined>;
+        }, undefined>;
+    }, undefined>, v.ObjectSchema<{
+        readonly data: v.ArraySchema<v.ObjectSchema<{
+            readonly id: v.NumberSchema<undefined>;
+            readonly name: v.StringSchema<undefined>;
+            readonly slug: v.StringSchema<undefined>;
+        }, undefined>, undefined>;
+        readonly meta: v.ObjectSchema<{
+            readonly page: v.NumberSchema<undefined>;
+            readonly per_page: v.NumberSchema<undefined>;
+        }, undefined>;
+        readonly links: v.ObjectSchema<{
+            readonly self: v.StringSchema<undefined>;
+            readonly next: v.OptionalSchema<v.StringSchema<undefined>, undefined>;
+            readonly prev: v.OptionalSchema<v.StringSchema<undefined>, undefined>;
+        }, undefined>;
+    }, undefined>], undefined>, import("@orpc/server").MergedErrorMap<Record<never, never>, {
+        readonly NOT_FOUND: {
+            readonly message: "Resource not found";
+            readonly data: v.ObjectSchema<{
+                readonly kind: v.StringSchema<undefined>;
+            }, undefined>;
+        };
+        readonly UNAUTHORIZED: {
+            readonly message: "Authentication required";
+        };
+        readonly FORBIDDEN: {
+            readonly message: "Permission denied";
+            readonly data: v.ObjectSchema<{
+                readonly capability: v.StringSchema<undefined>;
+            }, undefined>;
+        };
+    }>, Record<never, never>>;
+    collectionGet: import("@orpc/server").DecoratedProcedure<import("./base.js").RestContext & Record<never, never>, import("./base.js").RestContext, v.ObjectSchema<{
+        readonly collection: v.StringSchema<undefined>;
+        readonly id: v.StringSchema<undefined>;
+    }, undefined>, v.UnionSchema<[v.ObjectSchema<{
+        readonly id: v.NumberSchema<undefined>;
+        readonly type: v.StringSchema<undefined>;
+        readonly slug: v.StringSchema<undefined>;
+        readonly title: v.StringSchema<undefined>;
+        readonly excerpt: v.NullableSchema<v.StringSchema<undefined>, undefined>;
+        readonly content: v.UnknownSchema;
+        readonly status: v.StringSchema<undefined>;
+        readonly publishedAt: v.NullableSchema<v.DateSchema<undefined>, undefined>;
+        readonly createdAt: v.DateSchema<undefined>;
+        readonly updatedAt: v.DateSchema<undefined>;
+        readonly author: v.NullableSchema<v.ObjectSchema<{
+            readonly id: v.NumberSchema<undefined>;
+            readonly name: v.NullableSchema<v.StringSchema<undefined>, undefined>;
+            readonly avatarUrl: v.NullableSchema<v.StringSchema<undefined>, undefined>;
+        }, undefined>, undefined>;
+        readonly terms: v.RecordSchema<v.StringSchema<undefined>, v.ArraySchema<v.ObjectSchema<{
+            readonly id: v.NumberSchema<undefined>;
+            readonly name: v.StringSchema<undefined>;
+            readonly slug: v.StringSchema<undefined>;
+        }, undefined>, undefined>, undefined>;
+        readonly meta: v.RecordSchema<v.StringSchema<undefined>, v.UnknownSchema, undefined>;
+    }, undefined>, v.ObjectSchema<{
+        readonly id: v.NumberSchema<undefined>;
+        readonly name: v.StringSchema<undefined>;
+        readonly slug: v.StringSchema<undefined>;
+    }, undefined>], undefined>, import("@orpc/server").MergedErrorMap<Record<never, never>, {
+        readonly NOT_FOUND: {
+            readonly message: "Resource not found";
+            readonly data: v.ObjectSchema<{
+                readonly kind: v.StringSchema<undefined>;
+            }, undefined>;
+        };
+        readonly UNAUTHORIZED: {
+            readonly message: "Authentication required";
+        };
+        readonly FORBIDDEN: {
+            readonly message: "Permission denied";
+            readonly data: v.ObjectSchema<{
+                readonly capability: v.StringSchema<undefined>;
+            }, undefined>;
+        };
+    }>, Record<never, never>>;
+};
+//# sourceMappingURL=router.d.ts.map

package/dist/rest/router.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"router.d.ts","sourceRoot":"","sources":["../../src/rest/router.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,SAAS,CAAC;AAkD7B,eAAO,MAAM,UAAU;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAGtB,CAAC"}

package/dist/rest/router.js

@@ -0,0 +1,47 @@
+import * as v from "valibot";
+import { base } from "./base.js";
+import { getEntryItem, listEntriesEnvelope } from "./entries-resource.js";
+import { resolvePublicEntryType, resolvePublicTaxonomy } from "./rest-base.js";
+import { collectionItemParamsSchema, collectionParamsSchema, entriesListEnvelopeSchema, publicEntrySchema, publicTermSchema, termsListEnvelopeSchema, } from "./schemas.js";
+import { getTermItem, listTermsEnvelope } from "./terms-resource.js";
+// Entry types and taxonomies are siblings in the top-level `{collection}`
+// rest_base namespace (as in WordPress), so a single pair of routes resolves
+// the rest_base to whichever registry owns it; an unowned base is 404.
+// GET /{collection} — a paginated envelope of a public entry type or taxonomy.
+const collectionList = base
+    .route({ method: "GET", path: "/{collection}" })
+    .input(collectionParamsSchema)
+    .output(v.union([entriesListEnvelopeSchema, termsListEnvelopeSchema]))
+    .handler(async ({ input, context, errors }) => {
+    const url = new URL(context.request.url);
+    const entryType = resolvePublicEntryType(context.plugins, input.collection);
+    if (entryType)
+        return listEntriesEnvelope(context, entryType, url);
+    const taxonomy = resolvePublicTaxonomy(context.plugins, input.collection);
+    if (taxonomy)
+        return listTermsEnvelope(context, taxonomy, url);
+    throw errors.NOT_FOUND({ data: { kind: "collection" } });
+});
+// GET /{collection}/{id} — one entry or term. Missing/unviewable items 404.
+const collectionGet = base
+    .route({ method: "GET", path: "/{collection}/{id}" })
+    .input(collectionItemParamsSchema)
+    .output(v.union([publicEntrySchema, publicTermSchema]))
+    .handler(async ({ input, context, errors }) => {
+    const id = Number(input.id);
+    if (!Number.isInteger(id) || id < 1) {
+        throw errors.NOT_FOUND({ data: { kind: "item" } });
+    }
+    const entryType = resolvePublicEntryType(context.plugins, input.collection);
+    if (entryType)
+        return getEntryItem(context, entryType, id, errors);
+    const taxonomy = resolvePublicTaxonomy(context.plugins, input.collection);
+    if (taxonomy)
+        return getTermItem(context, taxonomy, id, errors);
+    throw errors.NOT_FOUND({ data: { kind: "collection" } });
+});
+export const restRouter = {
+    collectionList,
+    collectionGet,
+};
+//# sourceMappingURL=router.js.map

package/dist/rest/router.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"router.js","sourceRoot":"","sources":["../../src/rest/router.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,SAAS,CAAC;AAE7B,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,YAAY,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AAC1E,OAAO,EAAE,sBAAsB,EAAE,qBAAqB,EAAE,MAAM,gBAAgB,CAAC;AAC/E,OAAO,EACL,0BAA0B,EAC1B,sBAAsB,EACtB,yBAAyB,EACzB,iBAAiB,EACjB,gBAAgB,EAChB,uBAAuB,GACxB,MAAM,cAAc,CAAC;AACtB,OAAO,EAAE,WAAW,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AAErE,0EAA0E;AAC1E,6EAA6E;AAC7E,uEAAuE;AAEvE,+EAA+E;AAC/E,MAAM,cAAc,GAAG,IAAI;KACxB,KAAK,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,eAAe,EAAE,CAAC;KAC/C,KAAK,CAAC,sBAAsB,CAAC;KAC7B,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,yBAAyB,EAAE,uBAAuB,CAAC,CAAC,CAAC;KACrE,OAAO,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE;IAC5C,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACzC,MAAM,SAAS,GAAG,sBAAsB,CAAC,OAAO,CAAC,OAAO,EAAE,KAAK,CAAC,UAAU,CAAC,CAAC;IAC5E,IAAI,SAAS;QAAE,OAAO,mBAAmB,CAAC,OAAO,EAAE,SAAS,EAAE,GAAG,CAAC,CAAC;IACnE,MAAM,QAAQ,GAAG,qBAAqB,CAAC,OAAO,CAAC,OAAO,EAAE,KAAK,CAAC,UAAU,CAAC,CAAC;IAC1E,IAAI,QAAQ;QAAE,OAAO,iBAAiB,CAAC,OAAO,EAAE,QAAQ,EAAE,GAAG,CAAC,CAAC;IAC/D,MAAM,MAAM,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,EAAE,CAAC,CAAC;AAC3D,CAAC,CAAC,CAAC;AAEL,4EAA4E;AAC5E,MAAM,aAAa,GAAG,IAAI;KACvB,KAAK,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,oBAAoB,EAAE,CAAC;KACpD,KAAK,CAAC,0BAA0B,CAAC;KACjC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,iBAAiB,EAAE,gBAAgB,CAAC,CAAC,CAAC;KACtD,OAAO,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE;IAC5C,MAAM,EAAE,GAAG,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IAC5B,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC,IAAI,EAAE,GAAG,CAAC,EAAE,CAAC;QACpC,MAAM,MAAM,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC;IACrD,CAAC;IACD,MAAM,SAAS,GAAG,sBAAsB,CAAC,OAAO,CAAC,OAAO,EAAE,KAAK,CAAC,UAAU,CAAC,CAAC;IAC5E,IAAI,SAAS;QAAE,OAAO,YAAY,CAAC,OAAO,EAAE,SAAS,EAAE,EAAE,EAAE,MAAM,CAAC,CAAC;IACnE,MAAM,QAAQ,GAAG,qBAAqB,CAAC,OAAO,CAAC,OAAO,EAAE,KAAK,CAAC,UAAU,CAAC,CAAC;IAC1E,IAAI,QAAQ;QAAE,OAAO,WAAW,CAAC,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,CAAC,CAAC;IAChE,MAAM,MAAM,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,EAAE,CAAC,CAAC;AAC3D,CAAC,CAAC,CAAC;AAEL,MAAM,CAAC,MAAM,UAAU,GAAG;IACxB,cAAc;IACd,aAAa;CACd,CAAC"}

package/dist/rest/schemas.d.ts

@@ -0,0 +1,102 @@
+import * as v from "valibot";
+export declare const collectionParamsSchema: v.ObjectSchema<{
+    readonly collection: v.StringSchema<undefined>;
+}, undefined>;
+export declare const collectionItemParamsSchema: v.ObjectSchema<{
+    readonly collection: v.StringSchema<undefined>;
+    readonly id: v.StringSchema<undefined>;
+}, undefined>;
+export declare const publicAuthorSchema: v.ObjectSchema<{
+    readonly id: v.NumberSchema<undefined>;
+    readonly name: v.NullableSchema<v.StringSchema<undefined>, undefined>;
+    readonly avatarUrl: v.NullableSchema<v.StringSchema<undefined>, undefined>;
+}, undefined>;
+export declare const publicTermSchema: v.ObjectSchema<{
+    readonly id: v.NumberSchema<undefined>;
+    readonly name: v.StringSchema<undefined>;
+    readonly slug: v.StringSchema<undefined>;
+}, undefined>;
+export declare const publicEntrySchema: v.ObjectSchema<{
+    readonly id: v.NumberSchema<undefined>;
+    readonly type: v.StringSchema<undefined>;
+    readonly slug: v.StringSchema<undefined>;
+    readonly title: v.StringSchema<undefined>;
+    readonly excerpt: v.NullableSchema<v.StringSchema<undefined>, undefined>;
+    readonly content: v.UnknownSchema;
+    readonly status: v.StringSchema<undefined>;
+    readonly publishedAt: v.NullableSchema<v.DateSchema<undefined>, undefined>;
+    readonly createdAt: v.DateSchema<undefined>;
+    readonly updatedAt: v.DateSchema<undefined>;
+    readonly author: v.NullableSchema<v.ObjectSchema<{
+        readonly id: v.NumberSchema<undefined>;
+        readonly name: v.NullableSchema<v.StringSchema<undefined>, undefined>;
+        readonly avatarUrl: v.NullableSchema<v.StringSchema<undefined>, undefined>;
+    }, undefined>, undefined>;
+    readonly terms: v.RecordSchema<v.StringSchema<undefined>, v.ArraySchema<v.ObjectSchema<{
+        readonly id: v.NumberSchema<undefined>;
+        readonly name: v.StringSchema<undefined>;
+        readonly slug: v.StringSchema<undefined>;
+    }, undefined>, undefined>, undefined>;
+    readonly meta: v.RecordSchema<v.StringSchema<undefined>, v.UnknownSchema, undefined>;
+}, undefined>;
+export declare const entriesListEnvelopeSchema: v.ObjectSchema<{
+    readonly data: v.ArraySchema<v.ObjectSchema<{
+        readonly id: v.NumberSchema<undefined>;
+        readonly type: v.StringSchema<undefined>;
+        readonly slug: v.StringSchema<undefined>;
+        readonly title: v.StringSchema<undefined>;
+        readonly excerpt: v.NullableSchema<v.StringSchema<undefined>, undefined>;
+        readonly content: v.UnknownSchema;
+        readonly status: v.StringSchema<undefined>;
+        readonly publishedAt: v.NullableSchema<v.DateSchema<undefined>, undefined>;
+        readonly createdAt: v.DateSchema<undefined>;
+        readonly updatedAt: v.DateSchema<undefined>;
+        readonly author: v.NullableSchema<v.ObjectSchema<{
+            readonly id: v.NumberSchema<undefined>;
+            readonly name: v.NullableSchema<v.StringSchema<undefined>, undefined>;
+            readonly avatarUrl: v.NullableSchema<v.StringSchema<undefined>, undefined>;
+        }, undefined>, undefined>;
+        readonly terms: v.RecordSchema<v.StringSchema<undefined>, v.ArraySchema<v.ObjectSchema<{
+            readonly id: v.NumberSchema<undefined>;
+            readonly name: v.StringSchema<undefined>;
+            readonly slug: v.StringSchema<undefined>;
+        }, undefined>, undefined>, undefined>;
+        readonly meta: v.RecordSchema<v.StringSchema<undefined>, v.UnknownSchema, undefined>;
+    }, undefined>, undefined>;
+    readonly meta: v.ObjectSchema<{
+        readonly page: v.NumberSchema<undefined>;
+        readonly per_page: v.NumberSchema<undefined>;
+    }, undefined>;
+    readonly links: v.ObjectSchema<{
+        readonly self: v.StringSchema<undefined>;
+        readonly next: v.OptionalSchema<v.StringSchema<undefined>, undefined>;
+        readonly prev: v.OptionalSchema<v.StringSchema<undefined>, undefined>;
+    }, undefined>;
+}, undefined>;
+export declare const termsListEnvelopeSchema: v.ObjectSchema<{
+    readonly data: v.ArraySchema<v.ObjectSchema<{
+        readonly id: v.NumberSchema<undefined>;
+        readonly name: v.StringSchema<undefined>;
+        readonly slug: v.StringSchema<undefined>;
+    }, undefined>, undefined>;
+    readonly meta: v.ObjectSchema<{
+        readonly page: v.NumberSchema<undefined>;
+        readonly per_page: v.NumberSchema<undefined>;
+    }, undefined>;
+    readonly links: v.ObjectSchema<{
+        readonly self: v.StringSchema<undefined>;
+        readonly next: v.OptionalSchema<v.StringSchema<undefined>, undefined>;
+        readonly prev: v.OptionalSchema<v.StringSchema<undefined>, undefined>;
+    }, undefined>;
+}, undefined>;
+export type PublicAuthor = v.InferOutput<typeof publicAuthorSchema>;
+export type PublicEntry = v.InferOutput<typeof publicEntrySchema>;
+export type PublicTerm = v.InferOutput<typeof publicTermSchema>;
+interface Pagination {
+    readonly page: number;
+    readonly perPage: number;
+    readonly offset: number;
+}
+export declare function readPagination(url: URL): Pagination;
+export {};
+//# sourceMappingURL=schemas.d.ts.map

package/dist/rest/schemas.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"schemas.d.ts","sourceRoot":"","sources":["../../src/rest/schemas.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,SAAS,CAAC;AAS7B,eAAO,MAAM,sBAAsB;;aAAuC,CAAC;AAC3E,eAAO,MAAM,0BAA0B;;;aAGrC,CAAC;AAKH,eAAO,MAAM,kBAAkB;;;;aAI7B,CAAC;AAGH,eAAO,MAAM,gBAAgB;;;;aAI3B,CAAC;AAEH,eAAO,MAAM,iBAAiB;;;;;;;;;;;;;;;;;;;;;;aAgB5B,CAAC;AAcH,eAAO,MAAM,yBAAyB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;aAAwC,CAAC;AAC/E,eAAO,MAAM,uBAAuB;;;;;;;;;;;;;;;aAAuC,CAAC;AAE5E,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,WAAW,CAAC,OAAO,kBAAkB,CAAC,CAAC;AACpE,MAAM,MAAM,WAAW,GAAG,CAAC,CAAC,WAAW,CAAC,OAAO,iBAAiB,CAAC,CAAC;AAClE,MAAM,MAAM,UAAU,GAAG,CAAC,CAAC,WAAW,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAEhE,UAAU,UAAU;IAClB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB;AAED,wBAAgB,cAAc,CAAC,GAAG,EAAE,GAAG,GAAG,UAAU,CAcnD"}