@plumix/core 0.1.0

package/dist/rpc/router.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"router.d.ts","sourceRoot":"","sources":["../../src/rpc/router.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAUjD,eAAO,MAAM,SAAS;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAQZ,CAAC;AAEX,MAAM,MAAM,SAAS,GAAG,OAAO,SAAS,CAAC;AAGzC,MAAM,MAAM,eAAe,GAAG,YAAY,CAAC,SAAS,CAAC,CAAC"}

package/dist/rpc/router.js

@@ -0,0 +1,17 @@
+import { authRouter } from "./procedures/auth/index.js";
+import { entryRouter } from "./procedures/entry/index.js";
+import { lookupRouter } from "./procedures/lookup/index.js";
+import { searchRouter } from "./procedures/search/index.js";
+import { settingsRouter } from "./procedures/settings/index.js";
+import { termRouter } from "./procedures/term/index.js";
+import { userRouter } from "./procedures/user/index.js";
+export const appRouter = {
+    auth: authRouter,
+    entry: entryRouter,
+    term: termRouter,
+    user: userRouter,
+    lookup: lookupRouter,
+    search: searchRouter,
+    settings: settingsRouter,
+};
+//# sourceMappingURL=router.js.map

package/dist/rpc/router.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"router.js","sourceRoot":"","sources":["../../src/rpc/router.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,UAAU,EAAE,MAAM,4BAA4B,CAAC;AACxD,OAAO,EAAE,WAAW,EAAE,MAAM,6BAA6B,CAAC;AAC1D,OAAO,EAAE,YAAY,EAAE,MAAM,8BAA8B,CAAC;AAC5D,OAAO,EAAE,YAAY,EAAE,MAAM,8BAA8B,CAAC;AAC5D,OAAO,EAAE,cAAc,EAAE,MAAM,gCAAgC,CAAC;AAChE,OAAO,EAAE,UAAU,EAAE,MAAM,4BAA4B,CAAC;AACxD,OAAO,EAAE,UAAU,EAAE,MAAM,4BAA4B,CAAC;AAExD,MAAM,CAAC,MAAM,SAAS,GAAG;IACvB,IAAI,EAAE,UAAU;IAChB,KAAK,EAAE,WAAW;IAClB,IAAI,EAAE,UAAU;IAChB,IAAI,EAAE,UAAU;IAChB,MAAM,EAAE,YAAY;IACpB,MAAM,EAAE,YAAY;IACpB,QAAQ,EAAE,cAAc;CAChB,CAAC"}

package/dist/rpc/schemas.d.ts

@@ -0,0 +1,3 @@
+import * as v from "valibot";
+export declare const slugSchema: v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.TrimAction, v.MinLengthAction<string, 1, undefined>, v.MaxLengthAction<string, 200, undefined>, v.RegexAction<string, "slug must be kebab-case ASCII">]>;
+//# sourceMappingURL=schemas.d.ts.map

package/dist/rpc/schemas.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"schemas.d.ts","sourceRoot":"","sources":["../../src/rpc/schemas.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,SAAS,CAAC;AAS7B,eAAO,MAAM,UAAU,kNAMtB,CAAC"}

package/dist/rpc/schemas.js

@@ -0,0 +1,9 @@
+import * as v from "valibot";
+// Slug shape shared across RPC inputs — matches the URL-safe kebab-case
+// convention used for post and term slugs. Kept loose on length (200) since
+// neither table enforces a tighter limit at the schema level; individual
+// routers can tighten further via v.pipe(slugSchema, v.maxLength(N)) if a
+// stricter bound emerges.
+const slugPattern = /^[a-z0-9]+(?:-[a-z0-9]+)*$/;
+export const slugSchema = v.pipe(v.string(), v.trim(), v.minLength(1), v.maxLength(200), v.regex(slugPattern, "slug must be kebab-case ASCII"));
+//# sourceMappingURL=schemas.js.map

package/dist/rpc/schemas.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"schemas.js","sourceRoot":"","sources":["../../src/rpc/schemas.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,SAAS,CAAC;AAE7B,wEAAwE;AACxE,4EAA4E;AAC5E,yEAAyE;AACzE,0EAA0E;AAC1E,0BAA0B;AAC1B,MAAM,WAAW,GAAG,4BAA4B,CAAC;AAEjD,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,CAAC,IAAI,CAC9B,CAAC,CAAC,MAAM,EAAE,EACV,CAAC,CAAC,IAAI,EAAE,EACR,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EACd,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,EAChB,CAAC,CAAC,KAAK,CAAC,WAAW,EAAE,+BAA+B,CAAC,CACtD,CAAC"}

package/dist/rpc/validation.d.ts

@@ -0,0 +1,58 @@
+import * as v from "valibot";
+export { setI18nResolver, vMessage } from "./vmessage.js";
+export type { I18nResolver } from "./vmessage.js";
+/**
+ * The descriptors behind the shared field schemas. Exported so admin's
+ * extraction mirror (`core-validation-i18n.ts`) can re-declare these ids
+ * for `lingui extract` and assert lockstep against this source.
+ */
+export declare const VALIDATION_DESCRIPTORS: {
+    emailRequired: {
+        id: string;
+        message: string;
+    };
+    emailMaxLength: {
+        id: string;
+        message: string;
+    };
+    emailInvalid: {
+        id: string;
+        message: string;
+    };
+    nameMaxLength: {
+        id: string;
+        message: string;
+    };
+    idFormat: {
+        id: string;
+        message: string;
+    };
+};
+/** RFC 5321 caps email at 254 chars. */
+export declare const emailField: v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.TrimAction, v.MinLengthAction<string, 1, () => string>, v.MaxLengthAction<string, 254, () => string>, v.EmailAction<string, () => string>]>;
+/** Display name. Empty is allowed at the schema level; required-ness is
+ * a per-form decision handled via `v.optional` / presence checks. */
+export declare const nameField: v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.TrimAction, v.MaxLengthAction<string, 200, () => string>]>;
+/**
+ * Canonical row-id shape for RPC inputs. MAX_SAFE_INTEGER cap rejects
+ * integer-valued numbers like `1e21` that pass `v.integer()` but lose
+ * precision in cache keys and DB comparisons.
+ */
+export declare const idParam: v.SchemaWithPipe<readonly [v.NumberSchema<undefined>, v.IntegerAction<number, undefined>, v.MinValueAction<number, 1, undefined>, v.MaxValueAction<number, number, undefined>]>;
+/**
+ * String-to-int coercer for URL path params. The regex is tighter than
+ * `Number()` — it rejects hex (`"0x1F"`), exponential (`"5e2"`), signed,
+ * whitespace-wrapped, leading-zero, and empty strings, all of which
+ * `Number()` would otherwise coerce to a valid positive int.
+ */
+export declare const idPathParam: v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.RegexAction<string, () => string>, v.TransformAction<string, number>, v.NumberSchema<undefined>, v.IntegerAction<number, undefined>, v.MinValueAction<number, 1, undefined>, v.MaxValueAction<number, number, undefined>]>;
+/**
+ * The `meta` bag accepted by the `entry` / `term` / `user` inputs that carry
+ * one. Per-key value validation runs in each handler against that entity's
+ * registered meta box types; here we enforce only the outer shape and the key
+ * cap. Values stay `unknown` because the registry drives their shape.
+ */
+export declare const metaInputSchema: v.SchemaWithPipe<readonly [v.RecordSchema<v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.TrimAction, v.MinLengthAction<string, 1, undefined>, v.MaxLengthAction<string, 200, undefined>, v.RegexAction<string, "meta key must be alphanumeric/_/:/-">]>, v.UnknownSchema, undefined>, v.CheckAction<{
+    [x: string]: unknown;
+}, "meta accepts at most 200 keys per request">]>;
+//# sourceMappingURL=validation.d.ts.map

package/dist/rpc/validation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"validation.d.ts","sourceRoot":"","sources":["../../src/rpc/validation.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,CAAC,MAAM,SAAS,CAAC;AAI7B,OAAO,EAAE,eAAe,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAC1D,YAAY,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAclD;;;;GAIG;AACH,eAAO,MAAM,sBAAsB;;;;;;;;;;;;;;;;;;;;;CAqBU,CAAC;AAE9C,wCAAwC;AACxC,eAAO,MAAM,UAAU,qMAMtB,CAAC;AAEF;qEACqE;AACrE,eAAO,MAAM,SAAS,oHAIrB,CAAC;AAEF;;;;GAIG;AACH,eAAO,MAAM,OAAO,iLAKnB,CAAC;AAEF;;;;;GAKG;AACH,eAAO,MAAM,WAAW,oRAQvB,CAAC;AAeF;;;;;GAKG;AACH,eAAO,MAAM,eAAe;;iDAM3B,CAAC"}

package/dist/rpc/validation.js

@@ -0,0 +1,72 @@
+import * as v from "valibot";
+import { vMessage } from "./vmessage.js";
+export { setI18nResolver, vMessage } from "./vmessage.js";
+// Shared leaf-level field schemas. Consumed server-side by RPC procedure
+// input schemas AND client-side by admin forms — same rules on both ends so
+// a submit that passes client validation can't then fail server validation
+// on shape alone. Messages flow through `vMessage` so admin's `bootI18n`
+// resolver can translate them; descriptors are inlined plain literals (not
+// `defineMessage(...)`) because core builds with plain `tsc`, no Lingui
+// macro pass.
+//
+// Per-callsite procedure schemas (`procedures/auth/**/schemas.ts`) stay in
+// English — they only surface to direct RPC consumers, not admin forms,
+// which build their own client-side schemas with locally-wrapped messages.
+/**
+ * The descriptors behind the shared field schemas. Exported so admin's
+ * extraction mirror (`core-validation-i18n.ts`) can re-declare these ids
+ * for `lingui extract` and assert lockstep against this source.
+ */
+export const VALIDATION_DESCRIPTORS = {
+    emailRequired: {
+        id: "validate.email.required",
+        message: "Enter an email address.",
+    },
+    emailMaxLength: {
+        id: "validate.email.maxLength",
+        message: "Email is too long.",
+    },
+    emailInvalid: {
+        id: "validate.email.invalid",
+        message: "Enter a valid email address.",
+    },
+    nameMaxLength: {
+        id: "validate.name.maxLength",
+        message: "Name is too long.",
+    },
+    idFormat: {
+        id: "validate.id.format",
+        message: "id must be a positive decimal integer",
+    },
+};
+/** RFC 5321 caps email at 254 chars. */
+export const emailField = v.pipe(v.string(), v.trim(), v.minLength(1, vMessage(VALIDATION_DESCRIPTORS.emailRequired)), v.maxLength(254, vMessage(VALIDATION_DESCRIPTORS.emailMaxLength)), v.email(vMessage(VALIDATION_DESCRIPTORS.emailInvalid)));
+/** Display name. Empty is allowed at the schema level; required-ness is
+ * a per-form decision handled via `v.optional` / presence checks. */
+export const nameField = v.pipe(v.string(), v.trim(), v.maxLength(200, vMessage(VALIDATION_DESCRIPTORS.nameMaxLength)));
+/**
+ * Canonical row-id shape for RPC inputs. MAX_SAFE_INTEGER cap rejects
+ * integer-valued numbers like `1e21` that pass `v.integer()` but lose
+ * precision in cache keys and DB comparisons.
+ */
+export const idParam = v.pipe(v.number(), v.integer(), v.minValue(1), v.maxValue(Number.MAX_SAFE_INTEGER));
+/**
+ * String-to-int coercer for URL path params. The regex is tighter than
+ * `Number()` — it rejects hex (`"0x1F"`), exponential (`"5e2"`), signed,
+ * whitespace-wrapped, leading-zero, and empty strings, all of which
+ * `Number()` would otherwise coerce to a valid positive int.
+ */
+export const idPathParam = v.pipe(v.string(), v.regex(/^[1-9]\d*$/, vMessage(VALIDATION_DESCRIPTORS.idFormat)), v.transform((s) => Number(s)), v.number(), v.integer(), v.minValue(1), v.maxValue(Number.MAX_SAFE_INTEGER));
+// A defensive cap on meta keys per request so a malformed client can't ship a
+// huge object at us. Not translated: these outer-shape errors surface only to
+// direct RPC consumers, never admin forms (which build their own client schemas).
+const MAX_META_KEYS_PER_REQUEST = 200;
+const metaKeySchema = v.pipe(v.string(), v.trim(), v.minLength(1), v.maxLength(200), v.regex(/^[a-zA-Z0-9_:-]+$/, "meta key must be alphanumeric/_/:/-"));
+/**
+ * The `meta` bag accepted by the `entry` / `term` / `user` inputs that carry
+ * one. Per-key value validation runs in each handler against that entity's
+ * registered meta box types; here we enforce only the outer shape and the key
+ * cap. Values stay `unknown` because the registry drives their shape.
+ */
+export const metaInputSchema = v.pipe(v.record(metaKeySchema, v.unknown()), v.check((val) => Object.keys(val).length <= MAX_META_KEYS_PER_REQUEST, `meta accepts at most ${MAX_META_KEYS_PER_REQUEST} keys per request`));
+//# sourceMappingURL=validation.js.map

package/dist/rpc/validation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"validation.js","sourceRoot":"","sources":["../../src/rpc/validation.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,CAAC,MAAM,SAAS,CAAC;AAE7B,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAEzC,OAAO,EAAE,eAAe,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAG1D,yEAAyE;AACzE,4EAA4E;AAC5E,2EAA2E;AAC3E,yEAAyE;AACzE,2EAA2E;AAC3E,wEAAwE;AACxE,cAAc;AACd,EAAE;AACF,2EAA2E;AAC3E,wEAAwE;AACxE,2EAA2E;AAE3E;;;;GAIG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG;IACpC,aAAa,EAAE;QACb,EAAE,EAAE,yBAAyB;QAC7B,OAAO,EAAE,yBAAyB;KACnC;IACD,cAAc,EAAE;QACd,EAAE,EAAE,0BAA0B;QAC9B,OAAO,EAAE,oBAAoB;KAC9B;IACD,YAAY,EAAE;QACZ,EAAE,EAAE,wBAAwB;QAC5B,OAAO,EAAE,8BAA8B;KACxC;IACD,aAAa,EAAE;QACb,EAAE,EAAE,yBAAyB;QAC7B,OAAO,EAAE,mBAAmB;KAC7B;IACD,QAAQ,EAAE;QACR,EAAE,EAAE,oBAAoB;QACxB,OAAO,EAAE,uCAAuC;KACjD;CAC0C,CAAC;AAE9C,wCAAwC;AACxC,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,CAAC,IAAI,CAC9B,CAAC,CAAC,MAAM,EAAE,EACV,CAAC,CAAC,IAAI,EAAE,EACR,CAAC,CAAC,SAAS,CAAC,CAAC,EAAE,QAAQ,CAAC,sBAAsB,CAAC,aAAa,CAAC,CAAC,EAC9D,CAAC,CAAC,SAAS,CAAC,GAAG,EAAE,QAAQ,CAAC,sBAAsB,CAAC,cAAc,CAAC,CAAC,EACjE,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,sBAAsB,CAAC,YAAY,CAAC,CAAC,CACvD,CAAC;AAEF;qEACqE;AACrE,MAAM,CAAC,MAAM,SAAS,GAAG,CAAC,CAAC,IAAI,CAC7B,CAAC,CAAC,MAAM,EAAE,EACV,CAAC,CAAC,IAAI,EAAE,EACR,CAAC,CAAC,SAAS,CAAC,GAAG,EAAE,QAAQ,CAAC,sBAAsB,CAAC,aAAa,CAAC,CAAC,CACjE,CAAC;AAEF;;;;GAIG;AACH,MAAM,CAAC,MAAM,OAAO,GAAG,CAAC,CAAC,IAAI,CAC3B,CAAC,CAAC,MAAM,EAAE,EACV,CAAC,CAAC,OAAO,EAAE,EACX,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,EACb,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,gBAAgB,CAAC,CACpC,CAAC;AAEF;;;;;GAKG;AACH,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,CAAC,IAAI,CAC/B,CAAC,CAAC,MAAM,EAAE,EACV,CAAC,CAAC,KAAK,CAAC,YAAY,EAAE,QAAQ,CAAC,sBAAsB,CAAC,QAAQ,CAAC,CAAC,EAChE,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAC7B,CAAC,CAAC,MAAM,EAAE,EACV,CAAC,CAAC,OAAO,EAAE,EACX,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,EACb,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,gBAAgB,CAAC,CACpC,CAAC;AAEF,8EAA8E;AAC9E,8EAA8E;AAC9E,kFAAkF;AAClF,MAAM,yBAAyB,GAAG,GAAG,CAAC;AAEtC,MAAM,aAAa,GAAG,CAAC,CAAC,IAAI,CAC1B,CAAC,CAAC,MAAM,EAAE,EACV,CAAC,CAAC,IAAI,EAAE,EACR,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EACd,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,EAChB,CAAC,CAAC,KAAK,CAAC,mBAAmB,EAAE,qCAAqC,CAAC,CACpE,CAAC;AAEF;;;;;GAKG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,CAAC,IAAI,CACnC,CAAC,CAAC,MAAM,CAAC,aAAa,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,EACpC,CAAC,CAAC,KAAK,CACL,CAAC,GAAG,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,MAAM,IAAI,yBAAyB,EAC7D,wBAAwB,yBAAyB,mBAAmB,CACrE,CACF,CAAC"}

package/dist/rpc/vmessage.d.ts

@@ -0,0 +1,21 @@
+import type { MessageDescriptor } from "@lingui/core";
+/**
+ * Lazy descriptor-to-string resolver for valibot validator messages.
+ * Admin's `bootI18n` registers a Lingui-backed resolver via
+ * `setI18nResolver`; server-side bundles never register, so the
+ * returned thunk falls back to `descriptor.message`. The thunk is
+ * evaluated by valibot at issue-construction time, after admin's
+ * boot has run — not at schema-definition time.
+ */
+export type I18nResolver = (descriptor: MessageDescriptor) => string;
+/** Register the descriptor resolver. Admin calls this from `bootI18n`
+ *  with a Lingui-backed implementation. Server-side bundles never
+ *  call this; their `vMessage` calls fall back to `descriptor.message`.
+ *  Passing `null` un-registers — useful for test isolation. */
+export declare function setI18nResolver(resolver: I18nResolver | null): void;
+/** Wrap a `MessageDescriptor` for valibot's message slot. The returned
+ *  function resolves the descriptor when called — through the
+ *  registered resolver if one is set, otherwise via the source-locale
+ *  `descriptor.message` (or `descriptor.id` as a final fallback). */
+export declare function vMessage(descriptor: MessageDescriptor): () => string;
+//# sourceMappingURL=vmessage.d.ts.map

package/dist/rpc/vmessage.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"vmessage.d.ts","sourceRoot":"","sources":["../../src/rpc/vmessage.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AAEtD;;;;;;;GAOG;AAEH,MAAM,MAAM,YAAY,GAAG,CAAC,UAAU,EAAE,iBAAiB,KAAK,MAAM,CAAC;AAIrE;;;+DAG+D;AAC/D,wBAAgB,eAAe,CAAC,QAAQ,EAAE,YAAY,GAAG,IAAI,GAAG,IAAI,CAEnE;AAED;;;qEAGqE;AACrE,wBAAgB,QAAQ,CAAC,UAAU,EAAE,iBAAiB,GAAG,MAAM,MAAM,CAKpE"}

package/dist/rpc/vmessage.js

@@ -0,0 +1,20 @@
+let currentResolver = null;
+/** Register the descriptor resolver. Admin calls this from `bootI18n`
+ *  with a Lingui-backed implementation. Server-side bundles never
+ *  call this; their `vMessage` calls fall back to `descriptor.message`.
+ *  Passing `null` un-registers — useful for test isolation. */
+export function setI18nResolver(resolver) {
+    currentResolver = resolver;
+}
+/** Wrap a `MessageDescriptor` for valibot's message slot. The returned
+ *  function resolves the descriptor when called — through the
+ *  registered resolver if one is set, otherwise via the source-locale
+ *  `descriptor.message` (or `descriptor.id` as a final fallback). */
+export function vMessage(descriptor) {
+    return () => {
+        if (currentResolver !== null)
+            return currentResolver(descriptor);
+        return descriptor.message ?? descriptor.id;
+    };
+}
+//# sourceMappingURL=vmessage.js.map

package/dist/rpc/vmessage.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"vmessage.js","sourceRoot":"","sources":["../../src/rpc/vmessage.ts"],"names":[],"mappings":"AAaA,IAAI,eAAe,GAAwB,IAAI,CAAC;AAEhD;;;+DAG+D;AAC/D,MAAM,UAAU,eAAe,CAAC,QAA6B;IAC3D,eAAe,GAAG,QAAQ,CAAC;AAC7B,CAAC;AAED;;;qEAGqE;AACrE,MAAM,UAAU,QAAQ,CAAC,UAA6B;IACpD,OAAO,GAAG,EAAE;QACV,IAAI,eAAe,KAAK,IAAI;YAAE,OAAO,eAAe,CAAC,UAAU,CAAC,CAAC;QACjE,OAAO,UAAU,CAAC,OAAO,IAAI,UAAU,CAAC,EAAE,CAAC;IAC7C,CAAC,CAAC;AACJ,CAAC"}

package/dist/runtime/adapter.d.ts

@@ -0,0 +1,38 @@
+import type { PlumixApp } from "./app.js";
+export type FetchHandler = (request: Request, env: any, ctx: any) => Response | Promise<Response>;
+export interface ScheduledEvent {
+    readonly scheduledTime: number;
+    readonly cron: string;
+}
+export type ScheduledHandler = (event: ScheduledEvent, env: any, ctx: any) => void | Promise<void>;
+export interface CommandContext {
+    readonly app: PlumixApp;
+    readonly cwd: string;
+    readonly configPath: string;
+    readonly argv: readonly string[];
+    /**
+     * Subcommands the active runtime contributes to the built-in `migrate`
+     * verb. The CLI populates this from the runtime's commands module
+     * (`export const migrate: CommandRegistry`); `migrate apply` delegates
+     * here so D1-/Postgres-/etc.-specific apply logic lives with its
+     * runtime.
+     */
+    readonly runtimeMigrate: CommandRegistry;
+}
+export interface CommandDefinition {
+    readonly describe: string;
+    run(ctx: CommandContext): Promise<void> | void;
+}
+export type CommandRegistry = Readonly<Record<string, CommandDefinition>>;
+export interface RuntimeAdapter {
+    readonly name: string;
+    buildFetchHandler(app: PlumixApp): FetchHandler;
+    buildScheduledHandler?(app: PlumixApp): ScheduledHandler;
+    /**
+     * Module specifier imported by the CLI to load runtime-contributed
+     * commands. Kept out of the worker-facing adapter so dev/build/deploy
+     * tooling never ends up in the worker bundle.
+     */
+    readonly commandsModule?: string;
+}
+//# sourceMappingURL=adapter.d.ts.map

package/dist/runtime/adapter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"adapter.d.ts","sourceRoot":"","sources":["../../src/runtime/adapter.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,UAAU,CAAC;AAM1C,MAAM,MAAM,YAAY,GAAG,CACzB,OAAO,EAAE,OAAO,EAChB,GAAG,EAAE,GAAG,EACR,GAAG,EAAE,GAAG,KACL,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;AAElC,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,MAAM,gBAAgB,GAAG,CAC7B,KAAK,EAAE,cAAc,EACrB,GAAG,EAAE,GAAG,EACR,GAAG,EAAE,GAAG,KACL,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;AAG1B,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,GAAG,EAAE,SAAS,CAAC;IACxB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,CAAC;IACjC;;;;;;OAMG;IACH,QAAQ,CAAC,cAAc,EAAE,eAAe,CAAC;CAC1C;AAED,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,GAAG,CAAC,GAAG,EAAE,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;CAChD;AAED,MAAM,MAAM,eAAe,GAAG,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,iBAAiB,CAAC,CAAC,CAAC;AAE1E,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,iBAAiB,CAAC,GAAG,EAAE,SAAS,GAAG,YAAY,CAAC;IAChD,qBAAqB,CAAC,CAAC,GAAG,EAAE,SAAS,GAAG,gBAAgB,CAAC;IACzD;;;;OAIG;IACH,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;CAClC"}

package/dist/runtime/adapter.js

@@ -0,0 +1 @@
+//# sourceMappingURL=adapter.js.map

package/dist/runtime/adapter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"adapter.js","sourceRoot":"","sources":["../../src/runtime/adapter.ts"],"names":[],"mappings":""}

package/dist/runtime/admin-shell.d.ts

@@ -0,0 +1,11 @@
+import type { ResolvedLocale } from "../i18n/locale-registry.js";
+export declare function rewriteAdminShellLangDir(html: string, locale: ResolvedLocale): string;
+/**
+ * Insert a `<base href>` at the top of the admin shell's `<head>` so the
+ * relative-based client bundle resolves its assets — and the client router /
+ * RPC base — against the directory the admin is actually mounted under
+ * (`/custom-directory/_plumix/admin/` behind a subdirectory proxy, plain
+ * `/_plumix/admin/` at the root). No-op when there's no `<head>` to anchor to.
+ */
+export declare function injectAdminBaseHref(html: string, href: string): string;
+//# sourceMappingURL=admin-shell.d.ts.map

package/dist/runtime/admin-shell.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"admin-shell.d.ts","sourceRoot":"","sources":["../../src/runtime/admin-shell.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,4BAA4B,CAAC;AAEjE,wBAAgB,wBAAwB,CACtC,IAAI,EAAE,MAAM,EACZ,MAAM,EAAE,cAAc,GACrB,MAAM,CAKR;AAED;;;;;;GAMG;AACH,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,CAKtE"}

package/dist/runtime/admin-shell.js

@@ -0,0 +1,14 @@
+export function rewriteAdminShellLangDir(html, locale) {
+    return html.replace(/<html\b[^>]*>/i, `<html lang="${locale.code}" dir="${locale.direction}">`);
+}
+/**
+ * Insert a `<base href>` at the top of the admin shell's `<head>` so the
+ * relative-based client bundle resolves its assets — and the client router /
+ * RPC base — against the directory the admin is actually mounted under
+ * (`/custom-directory/_plumix/admin/` behind a subdirectory proxy, plain
+ * `/_plumix/admin/` at the root). No-op when there's no `<head>` to anchor to.
+ */
+export function injectAdminBaseHref(html, href) {
+    return html.replace(/<head\b[^>]*>/i, (head) => `${head}<base href="${href}">`);
+}
+//# sourceMappingURL=admin-shell.js.map

package/dist/runtime/admin-shell.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"admin-shell.js","sourceRoot":"","sources":["../../src/runtime/admin-shell.ts"],"names":[],"mappings":"AAEA,MAAM,UAAU,wBAAwB,CACtC,IAAY,EACZ,MAAsB;IAEtB,OAAO,IAAI,CAAC,OAAO,CACjB,gBAAgB,EAChB,eAAe,MAAM,CAAC,IAAI,UAAU,MAAM,CAAC,SAAS,IAAI,CACzD,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,mBAAmB,CAAC,IAAY,EAAE,IAAY;IAC5D,OAAO,IAAI,CAAC,OAAO,CACjB,gBAAgB,EAChB,CAAC,IAAI,EAAE,EAAE,CAAC,GAAG,IAAI,eAAe,IAAI,IAAI,CACzC,CAAC;AACJ,CAAC"}

package/dist/runtime/app.d.ts

@@ -0,0 +1,165 @@
+import type { RPCHandler } from "@orpc/server/fetch";
+import type { BlockRegistry, HtmlAllowlist, MarkSpec, ShortcodeRegistry } from "@plumix/blocks";
+import type { RequestAuthenticator } from "../auth/authenticator.js";
+import type { ResolvedPasskeyConfig } from "../auth/passkey/config.js";
+import type { CapabilityResolver } from "../auth/rbac.js";
+import type { SessionPolicy } from "../auth/sessions.js";
+import type { PlumixConfig } from "../config.js";
+import type { AppContext } from "../context/app.js";
+import type { PluginRegistry, RegisteredRawRoute, RegisteredScheduledTask } from "../plugin/manifest.js";
+import type { ContextExtensionEntry } from "../plugin/provides-context.js";
+import type { RestDispatch } from "../rest/build-handler.js";
+import type { RouteRule } from "../route/intent.js";
+import type { AssetManifest } from "../route/render/asset-manifest.js";
+import type { DocumentManifest } from "../theme.js";
+import { HookRegistry } from "../hooks/registry.js";
+export interface OAuthProviderSummary {
+    /** Map key in `auth.oauth.providers`; the URL path segment. */
+    readonly key: string;
+    /** Human-readable name for the login button ("GitHub", "Google", …). */
+    readonly label: string;
+}
+export interface PlumixApp {
+    readonly config: PlumixConfig;
+    readonly hooks: HookRegistry;
+    readonly plugins: PluginRegistry;
+    /**
+     * Lazily builds (and memoizes) the merged oRPC handler on first call. Cold-
+     * path-only — deferred so the heavy procedure graph + oRPC runtime never
+     * evaluate on the public render cold-start path. The dispatcher awaits this
+     * on an RPC request; nothing on the public path touches it.
+     */
+    readonly loadRpcHandler: () => Promise<RPCHandler<AppContext>>;
+    /**
+     * Lazily builds (and memoizes) the REST dispatcher on first call. Cold-path-
+     * only and gated by `config.api` — deferred so the `@orpc/openapi` handler,
+     * its router, and the spec generator never evaluate on the public render
+     * cold-start path. Mirrors `loadRpcHandler`.
+     */
+    readonly loadRestHandler: () => Promise<RestDispatch>;
+    /**
+     * Canonical site origin (e.g. `https://cms.example.com`). Sourced from
+     * the passkey config for now since that's the only place it lives in
+     * user-facing config; exposed at the top level so CSRF / admin / future
+     * features don't have to reach into `passkey.*` to learn it.
+     */
+    readonly origin: string;
+    /**
+     * Normalized subdirectory prefix from `config.basePath` (`""` for a root
+     * deployment). Hoisted alongside `origin` so the dispatcher and runtime
+     * adapters thread it onto each per-request `AppContext` without reaching
+     * into `config`.
+     */
+    readonly basePath: string;
+    /** See RuntimeContext.devCsrfLocalhost — false in production builds. */
+    readonly devCsrfLocalhost: boolean;
+    readonly passkey: ResolvedPasskeyConfig;
+    readonly sessionPolicy: SessionPolicy;
+    /**
+     * Resolved request authenticator. Defaults to the session-cookie
+     * guard; an operator override (e.g. `cfAccess()`) replaces it. The
+     * dispatcher and RPC middleware both call this on every authed
+     * request to map request → user.
+     */
+    readonly authenticator: RequestAuthenticator;
+    /**
+     * Resolved boolean form of `auth.bootstrapVia`. True when external
+     * sign-in flows (magic-link, OAuth, custom guard) may mint the very
+     * first admin on a fresh deploy; false (default) keeps the bootstrap
+     * rail passkey-only.
+     */
+    readonly bootstrapAllowed: boolean;
+    /**
+     * Public summary of configured OAuth providers — `{ key, label }` per
+     * entry, derived from the user's `oauth.providers` map at app build
+     * time. The login screen reads this verbatim through the
+     * `auth.oauthProviders` RPC; secrets never leave config.
+     */
+    readonly oauthProviders: readonly OAuthProviderSummary[];
+    readonly schema: Record<string, unknown>;
+    /**
+     * Sorted route map compiled once at `buildApp` from the plugin registry.
+     * Module-scoped module-less equivalent: CF Worker isolates reuse this
+     * across requests without re-derivation.
+     */
+    readonly routeMap: readonly RouteRule[];
+    readonly rawRoutes: readonly RegisteredRawRoute[];
+    readonly capabilityResolver: CapabilityResolver;
+    /**
+     * Plugin-contributed AppContext entries from `extendAppContext`.
+     * Runtime adapters spread these onto every per-request `AppContext`
+     * via `createAppContext({ appContextExtensions })`.
+     */
+    readonly appContextExtensions: ReadonlyMap<string, ContextExtensionEntry>;
+    /**
+     * Plugin-contributed scheduled tasks from `registerScheduledTask`.
+     * Runtime adapters' `buildScheduledHandler` iterates this list on
+     * every scheduled invocation; `runScheduledTasks(app, ctx)` is the
+     * shared dispatch helper.
+     */
+    readonly scheduledTasks: readonly RegisteredScheduledTask[];
+    /**
+     * Merged block registry: `@plumix/blocks` core specs + plugin
+     * contributions from `ctx.registerBlock`, built once at boot.
+     */
+    readonly blocks: BlockRegistry;
+    /**
+     * Aggregated mark catalogue: the 13 core marks from `@plumix/blocks` +
+     * plugin contributions from `ctx.registerMark`. Surfaces in the manifest
+     * + admin bubble menu; the rendering path uses the hardcoded
+     * `renderInline` walker, not a per-spec component dispatch.
+     */
+    readonly marks: readonly MarkSpec[];
+    /**
+     * Merged shortcode registry the public render path threads into the
+     * block walker (rich-text body expansion) and the resolve step (entry
+     * title expansion): `coreShortcodes` < plugin `registerShortcode` <
+     * `theme.shortcodes`, last-wins, built once at boot.
+     */
+    readonly shortcodes: ShortcodeRegistry;
+    /**
+     * Sanitizer allowlist `core/html` reads at render time. Built once
+     * from the intrinsic baseline + `config.blocks.htmlAllowlist`.
+     * Themes thread this through `<EntryContent htmlAllowlist={...}>`
+     * so operator-extended tags / attrs actually reach the rendered
+     * output rather than being silently swapped with the baseline.
+     */
+    readonly htmlAllowlist: HtmlAllowlist;
+    /**
+     * Document manifest after the `theme:document` filter chain runs.
+     * Resolved once at boot from `config.theme.document ?? {}` so plugin
+     * contributions surface in every SSR render without per-request merge
+     * cost. Frozen post-resolution to keep the contract immutable.
+     */
+    readonly document: DocumentManifest;
+    /**
+     * Vite-emitted asset manifest baked into the worker bundle via
+     * `virtual:plumix/asset-manifest`. The renderer reads this to inject
+     * `<link rel="stylesheet">` tags for bundled theme CSS. Empty `{}`
+     * in dev (Vite serves source directly) and when no client entries
+     * exist (e.g. tests that don't run a full Vite build).
+     */
+    readonly assetManifest: AssetManifest;
+    /**
+     * Per-template merged document manifest. Each entry is the result
+     * of `mergeDocumentManifest(app.document, template.document)`,
+     * resolved once at boot and frozen. The renderer looks up by the
+     * matched template slot (`single`, `archive`, `index`, etc.) so
+     * per-request renders pay zero merge cost.
+     */
+    readonly templateDocuments: ReadonlyMap<string, DocumentManifest>;
+}
+interface RuntimeContext {
+    readonly assetManifest?: AssetManifest;
+    /**
+     * Dev-server opt-in: treat any localhost origin as same-origin for
+     * CSRF. `plumix dev` serves through vite on a port the user's config
+     * cannot reliably predict (5173 by default, auto-incremented when
+     * taken), so the generated worker passes `import.meta.env.DEV` here —
+     * statically false in production builds.
+     */
+    readonly devCsrfLocalhost?: boolean;
+}
+export declare function buildApp(config: PlumixConfig, runtime?: RuntimeContext): Promise<PlumixApp>;
+export {};
+//# sourceMappingURL=app.d.ts.map

package/dist/runtime/app.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"app.d.ts","sourceRoot":"","sources":["../../src/runtime/app.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAErD,OAAO,KAAK,EACV,aAAa,EACb,aAAa,EACb,QAAQ,EACR,iBAAiB,EAClB,MAAM,gBAAgB,CAAC;AAUxB,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,0BAA0B,CAAC;AACrE,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,2BAA2B,CAAC;AACvE,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,iBAAiB,CAAC;AAC1D,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACzD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AACjD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AACpD,OAAO,KAAK,EACV,cAAc,EACd,kBAAkB,EAClB,uBAAuB,EACxB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,+BAA+B,CAAC;AAC3E,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAC;AAE7D,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AACpD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,mCAAmC,CAAC;AACvE,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AASpD,OAAO,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AAkBpD,MAAM,WAAW,oBAAoB;IACnC,+DAA+D;IAC/D,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,wEAAwE;IACxE,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,SAAS;IACxB,QAAQ,CAAC,MAAM,EAAE,YAAY,CAAC;IAC9B,QAAQ,CAAC,KAAK,EAAE,YAAY,CAAC;IAC7B,QAAQ,CAAC,OAAO,EAAE,cAAc,CAAC;IACjC;;;;;OAKG;IACH,QAAQ,CAAC,cAAc,EAAE,MAAM,OAAO,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC,CAAC;IAC/D;;;;;OAKG;IACH,QAAQ,CAAC,eAAe,EAAE,MAAM,OAAO,CAAC,YAAY,CAAC,CAAC;IACtD;;;;;OAKG;IACH,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB;;;;;OAKG;IACH,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,wEAAwE;IACxE,QAAQ,CAAC,gBAAgB,EAAE,OAAO,CAAC;IACnC,QAAQ,CAAC,OAAO,EAAE,qBAAqB,CAAC;IACxC,QAAQ,CAAC,aAAa,EAAE,aAAa,CAAC;IACtC;;;;;OAKG;IACH,QAAQ,CAAC,aAAa,EAAE,oBAAoB,CAAC;IAC7C;;;;;OAKG;IACH,QAAQ,CAAC,gBAAgB,EAAE,OAAO,CAAC;IACnC;;;;;OAKG;IACH,QAAQ,CAAC,cAAc,EAAE,SAAS,oBAAoB,EAAE,CAAC;IACzD,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACzC;;;;OAIG;IACH,QAAQ,CAAC,QAAQ,EAAE,SAAS,SAAS,EAAE,CAAC;IACxC,QAAQ,CAAC,SAAS,EAAE,SAAS,kBAAkB,EAAE,CAAC;IAClD,QAAQ,CAAC,kBAAkB,EAAE,kBAAkB,CAAC;IAChD;;;;OAIG;IACH,QAAQ,CAAC,oBAAoB,EAAE,WAAW,CAAC,MAAM,EAAE,qBAAqB,CAAC,CAAC;IAC1E;;;;;OAKG;IACH,QAAQ,CAAC,cAAc,EAAE,SAAS,uBAAuB,EAAE,CAAC;IAC5D;;;OAGG;IACH,QAAQ,CAAC,MAAM,EAAE,aAAa,CAAC;IAC/B;;;;;OAKG;IACH,QAAQ,CAAC,KAAK,EAAE,SAAS,QAAQ,EAAE,CAAC;IACpC;;;;;OAKG;IACH,QAAQ,CAAC,UAAU,EAAE,iBAAiB,CAAC;IACvC;;;;;;OAMG;IACH,QAAQ,CAAC,aAAa,EAAE,aAAa,CAAC;IACtC;;;;;OAKG;IACH,QAAQ,CAAC,QAAQ,EAAE,gBAAgB,CAAC;IACpC;;;;;;OAMG;IACH,QAAQ,CAAC,aAAa,EAAE,aAAa,CAAC;IACtC;;;;;;OAMG;IACH,QAAQ,CAAC,iBAAiB,EAAE,WAAW,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC;CACnE;AAMD,UAAU,cAAc;IACtB,QAAQ,CAAC,aAAa,CAAC,EAAE,aAAa,CAAC;IACvC;;;;;;OAMG;IACH,QAAQ,CAAC,gBAAgB,CAAC,EAAE,OAAO,CAAC;CACrC;AAED,wBAAsB,QAAQ,CAC5B,MAAM,EAAE,YAAY,EACpB,OAAO,GAAE,cAAmB,GAC3B,OAAO,CAAC,SAAS,CAAC,CAqLpB"}