@plumix/core 0.1.0

package/dist/runtime/errors.d.ts

@@ -0,0 +1,29 @@
+type AppBootErrorCode = "schema_export_conflict" | "plugin_id_collides_with_core_rpc_namespace" | "rest_resource_path_conflict" | "rest_resource_shadows_core";
+export declare class AppBootError extends Error {
+    readonly code: AppBootErrorCode;
+    readonly pluginId: string | undefined;
+    readonly schemaKey: string | undefined;
+    readonly previousOwner: string | undefined;
+    private constructor();
+    static schemaExportConflict(ctx: {
+        pluginId: string;
+        schemaKey: string;
+        previousOwner: string;
+    }): AppBootError;
+    static pluginIdCollidesWithCoreRpcNamespace(ctx: {
+        pluginId: string;
+    }): AppBootError;
+    static restResourcePathConflict(ctx: {
+        pluginId: string;
+        otherPluginId: string;
+        method: string;
+        path: string;
+    }): AppBootError;
+    static restResourceShadowsCore(ctx: {
+        pluginId: string;
+        method: string;
+        path: string;
+    }): AppBootError;
+}
+export {};
+//# sourceMappingURL=errors.d.ts.map

package/dist/runtime/errors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../../src/runtime/errors.ts"],"names":[],"mappings":"AAAA,KAAK,gBAAgB,GACjB,wBAAwB,GACxB,4CAA4C,GAC5C,6BAA6B,GAC7B,4BAA4B,CAAC;AAEjC,qBAAa,YAAa,SAAQ,KAAK;IAKrC,QAAQ,CAAC,IAAI,EAAE,gBAAgB,CAAC;IAChC,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,SAAS,CAAC;IACtC,QAAQ,CAAC,SAAS,EAAE,MAAM,GAAG,SAAS,CAAC;IACvC,QAAQ,CAAC,aAAa,EAAE,MAAM,GAAG,SAAS,CAAC;IAE3C,OAAO;IAgBP,MAAM,CAAC,oBAAoB,CAAC,GAAG,EAAE;QAC/B,QAAQ,EAAE,MAAM,CAAC;QACjB,SAAS,EAAE,MAAM,CAAC;QAClB,aAAa,EAAE,MAAM,CAAC;KACvB,GAAG,YAAY;IAQhB,MAAM,CAAC,oCAAoC,CAAC,GAAG,EAAE;QAC/C,QAAQ,EAAE,MAAM,CAAC;KAClB,GAAG,YAAY;IAShB,MAAM,CAAC,wBAAwB,CAAC,GAAG,EAAE;QACnC,QAAQ,EAAE,MAAM,CAAC;QACjB,aAAa,EAAE,MAAM,CAAC;QACtB,MAAM,EAAE,MAAM,CAAC;QACf,IAAI,EAAE,MAAM,CAAC;KACd,GAAG,YAAY;IAShB,MAAM,CAAC,uBAAuB,CAAC,GAAG,EAAE;QAClC,QAAQ,EAAE,MAAM,CAAC;QACjB,MAAM,EAAE,MAAM,CAAC;QACf,IAAI,EAAE,MAAM,CAAC;KACd,GAAG,YAAY;CAQjB"}

package/dist/runtime/errors.js

@@ -0,0 +1,32 @@
+export class AppBootError extends Error {
+    static {
+        AppBootError.prototype.name = "AppBootError";
+    }
+    code;
+    pluginId;
+    schemaKey;
+    previousOwner;
+    constructor(code, message, fields) {
+        super(message);
+        this.code = code;
+        this.pluginId = fields.pluginId;
+        this.schemaKey = fields.schemaKey;
+        this.previousOwner = fields.previousOwner;
+    }
+    static schemaExportConflict(ctx) {
+        return new AppBootError("schema_export_conflict", `Plugin "${ctx.pluginId}" redefines schema export "${ctx.schemaKey}" (already defined by "${ctx.previousOwner}")`, ctx);
+    }
+    static pluginIdCollidesWithCoreRpcNamespace(ctx) {
+        return new AppBootError("plugin_id_collides_with_core_rpc_namespace", `Plugin id "${ctx.pluginId}" collides with a core RPC namespace ` +
+            `at buildApp; rename the plugin.`, ctx);
+    }
+    static restResourcePathConflict(ctx) {
+        return new AppBootError("rest_resource_path_conflict", `Plugin "${ctx.pluginId}" registers REST resource "${ctx.method} ${ctx.path}" ` +
+            `already registered by "${ctx.otherPluginId}".`, { pluginId: ctx.pluginId, previousOwner: ctx.otherPluginId });
+    }
+    static restResourceShadowsCore(ctx) {
+        return new AppBootError("rest_resource_shadows_core", `Plugin "${ctx.pluginId}" REST resource "${ctx.method} ${ctx.path}" ` +
+            `shadows a reserved core path.`, { pluginId: ctx.pluginId });
+    }
+}
+//# sourceMappingURL=errors.js.map

package/dist/runtime/errors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.js","sourceRoot":"","sources":["../../src/runtime/errors.ts"],"names":[],"mappings":"AAMA,MAAM,OAAO,YAAa,SAAQ,KAAK;IACrC;QACE,YAAY,CAAC,SAAS,CAAC,IAAI,GAAG,cAAc,CAAC;IAC/C,CAAC;IAEQ,IAAI,CAAmB;IACvB,QAAQ,CAAqB;IAC7B,SAAS,CAAqB;IAC9B,aAAa,CAAqB;IAE3C,YACE,IAAsB,EACtB,OAAe,EACf,MAIC;QAED,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC;QAChC,IAAI,CAAC,SAAS,GAAG,MAAM,CAAC,SAAS,CAAC;QAClC,IAAI,CAAC,aAAa,GAAG,MAAM,CAAC,aAAa,CAAC;IAC5C,CAAC;IAED,MAAM,CAAC,oBAAoB,CAAC,GAI3B;QACC,OAAO,IAAI,YAAY,CACrB,wBAAwB,EACxB,WAAW,GAAG,CAAC,QAAQ,8BAA8B,GAAG,CAAC,SAAS,0BAA0B,GAAG,CAAC,aAAa,IAAI,EACjH,GAAG,CACJ,CAAC;IACJ,CAAC;IAED,MAAM,CAAC,oCAAoC,CAAC,GAE3C;QACC,OAAO,IAAI,YAAY,CACrB,4CAA4C,EAC5C,cAAc,GAAG,CAAC,QAAQ,uCAAuC;YAC/D,iCAAiC,EACnC,GAAG,CACJ,CAAC;IACJ,CAAC;IAED,MAAM,CAAC,wBAAwB,CAAC,GAK/B;QACC,OAAO,IAAI,YAAY,CACrB,6BAA6B,EAC7B,WAAW,GAAG,CAAC,QAAQ,8BAA8B,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,IAAI,IAAI;YAC7E,0BAA0B,GAAG,CAAC,aAAa,IAAI,EACjD,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE,aAAa,EAAE,GAAG,CAAC,aAAa,EAAE,CAC7D,CAAC;IACJ,CAAC;IAED,MAAM,CAAC,uBAAuB,CAAC,GAI9B;QACC,OAAO,IAAI,YAAY,CACrB,4BAA4B,EAC5B,WAAW,GAAG,CAAC,QAAQ,oBAAoB,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,IAAI,IAAI;YACnE,+BAA+B,EACjC,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE,CAC3B,CAAC;IACJ,CAAC;CACF"}

package/dist/runtime/http.d.ts

@@ -0,0 +1,10 @@
+export declare function withHeaders(response: Response, mutate: (headers: Headers) => void): Response;
+export declare function jsonResponse(body: unknown, init?: ResponseInit): Response;
+export declare function notFound(hint?: string): Response;
+export declare function methodNotAllowed(allowed: readonly string[]): Response;
+export declare function unauthorized(): Response;
+export declare function forbidden(reason: string): Response;
+export declare function redirectTo(location: string, extraHeaders?: Record<string, string>): Response;
+export declare function permanentRedirect(location: string): Response;
+export declare function loginErrorRedirect(loginPath: string, paramName: string, code: string): Response;
+//# sourceMappingURL=http.d.ts.map

package/dist/runtime/http.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"http.d.ts","sourceRoot":"","sources":["../../src/runtime/http.ts"],"names":[],"mappings":"AAEA,wBAAgB,WAAW,CACzB,QAAQ,EAAE,QAAQ,EAClB,MAAM,EAAE,CAAC,OAAO,EAAE,OAAO,KAAK,IAAI,GACjC,QAAQ,CAQV;AAED,wBAAgB,YAAY,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,GAAE,YAAiB,GAAG,QAAQ,CAM7E;AAED,wBAAgB,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,QAAQ,CAIhD;AAED,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,SAAS,MAAM,EAAE,GAAG,QAAQ,CAQrE;AAED,wBAAgB,YAAY,IAAI,QAAQ,CAEvC;AAED,wBAAgB,SAAS,CAAC,MAAM,EAAE,MAAM,GAAG,QAAQ,CAElD;AAED,wBAAgB,UAAU,CACxB,QAAQ,EAAE,MAAM,EAChB,YAAY,GAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAM,GACxC,QAAQ,CAGV;AAED,wBAAgB,iBAAiB,CAAC,QAAQ,EAAE,MAAM,GAAG,QAAQ,CAE5D;AAED,wBAAgB,kBAAkB,CAChC,SAAS,EAAE,MAAM,EACjB,SAAS,EAAE,MAAM,EACjB,IAAI,EAAE,MAAM,GACX,QAAQ,CAGV"}

package/dist/runtime/http.js

@@ -0,0 +1,51 @@
+// Clone a response, preserving its body/status, with mutated headers — for
+// adding headers to a response produced elsewhere (CORS, cache directives).
+export function withHeaders(response, mutate) {
+    const headers = new Headers(response.headers);
+    mutate(headers);
+    return new Response(response.body, {
+        status: response.status,
+        statusText: response.statusText,
+        headers,
+    });
+}
+export function jsonResponse(body, init = {}) {
+    const headers = new Headers(init.headers);
+    if (!headers.has("content-type")) {
+        headers.set("content-type", "application/json; charset=utf-8");
+    }
+    return new Response(JSON.stringify(body), { ...init, headers });
+}
+export function notFound(hint) {
+    const headers = new Headers({ "content-type": "text/plain; charset=utf-8" });
+    if (hint)
+        headers.set("x-plumix-hint", hint);
+    return new Response("Not Found", { status: 404, headers });
+}
+export function methodNotAllowed(allowed) {
+    return new Response("Method Not Allowed", {
+        status: 405,
+        headers: {
+            allow: allowed.join(", "),
+            "content-type": "text/plain; charset=utf-8",
+        },
+    });
+}
+export function unauthorized() {
+    return jsonResponse({ error: "unauthorized" }, { status: 401 });
+}
+export function forbidden(reason) {
+    return jsonResponse({ error: "forbidden", reason }, { status: 403 });
+}
+export function redirectTo(location, extraHeaders = {}) {
+    const headers = new Headers({ Location: location, ...extraHeaders });
+    return new Response(null, { status: 302, headers });
+}
+export function permanentRedirect(location) {
+    return new Response(null, { status: 301, headers: { Location: location } });
+}
+export function loginErrorRedirect(loginPath, paramName, code) {
+    const params = new URLSearchParams({ [paramName]: code });
+    return redirectTo(`${loginPath}?${params.toString()}`);
+}
+//# sourceMappingURL=http.js.map

package/dist/runtime/http.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"http.js","sourceRoot":"","sources":["../../src/runtime/http.ts"],"names":[],"mappings":"AAAA,2EAA2E;AAC3E,4EAA4E;AAC5E,MAAM,UAAU,WAAW,CACzB,QAAkB,EAClB,MAAkC;IAElC,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;IAC9C,MAAM,CAAC,OAAO,CAAC,CAAC;IAChB,OAAO,IAAI,QAAQ,CAAC,QAAQ,CAAC,IAAI,EAAE;QACjC,MAAM,EAAE,QAAQ,CAAC,MAAM;QACvB,UAAU,EAAE,QAAQ,CAAC,UAAU;QAC/B,OAAO;KACR,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,IAAa,EAAE,OAAqB,EAAE;IACjE,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC1C,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,EAAE,CAAC;QACjC,OAAO,CAAC,GAAG,CAAC,cAAc,EAAE,iCAAiC,CAAC,CAAC;IACjE,CAAC;IACD,OAAO,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;AAClE,CAAC;AAED,MAAM,UAAU,QAAQ,CAAC,IAAa;IACpC,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC,EAAE,cAAc,EAAE,2BAA2B,EAAE,CAAC,CAAC;IAC7E,IAAI,IAAI;QAAE,OAAO,CAAC,GAAG,CAAC,eAAe,EAAE,IAAI,CAAC,CAAC;IAC7C,OAAO,IAAI,QAAQ,CAAC,WAAW,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC,CAAC;AAC7D,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,OAA0B;IACzD,OAAO,IAAI,QAAQ,CAAC,oBAAoB,EAAE;QACxC,MAAM,EAAE,GAAG;QACX,OAAO,EAAE;YACP,KAAK,EAAE,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC;YACzB,cAAc,EAAE,2BAA2B;SAC5C;KACF,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,YAAY;IAC1B,OAAO,YAAY,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;AAClE,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,MAAc;IACtC,OAAO,YAAY,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;AACvE,CAAC;AAED,MAAM,UAAU,UAAU,CACxB,QAAgB,EAChB,eAAuC,EAAE;IAEzC,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC,EAAE,QAAQ,EAAE,QAAQ,EAAE,GAAG,YAAY,EAAE,CAAC,CAAC;IACrE,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC,CAAC;AACtD,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,QAAgB;IAChD,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,QAAQ,EAAE,QAAQ,EAAE,EAAE,CAAC,CAAC;AAC9E,CAAC;AAED,MAAM,UAAU,kBAAkB,CAChC,SAAiB,EACjB,SAAiB,EACjB,IAAY;IAEZ,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC,EAAE,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC;IAC1D,OAAO,UAAU,CAAC,GAAG,SAAS,IAAI,MAAM,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;AACzD,CAAC"}

package/dist/runtime/load-user-for-public-request.d.ts

@@ -0,0 +1,3 @@
+import type { AppContext } from "../context/app.js";
+export declare function loadUserForPublicRequest(ctx: AppContext): Promise<AppContext>;
+//# sourceMappingURL=load-user-for-public-request.d.ts.map

package/dist/runtime/load-user-for-public-request.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"load-user-for-public-request.d.ts","sourceRoot":"","sources":["../../src/runtime/load-user-for-public-request.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAIpD,wBAAsB,wBAAwB,CAC5C,GAAG,EAAE,UAAU,GACd,OAAO,CAAC,UAAU,CAAC,CASrB"}

package/dist/runtime/load-user-for-public-request.js

@@ -0,0 +1,13 @@
+import { readSessionCookie } from "../auth/cookies.js";
+import { withUser } from "../context/app.js";
+export async function loadUserForPublicRequest(ctx) {
+    if (readSessionCookie(ctx.request) === null) {
+        return ctx;
+    }
+    const result = await ctx.authenticator.authenticate(ctx.request, ctx.db);
+    if (result === null) {
+        return ctx;
+    }
+    return withUser(ctx, result.user, result.tokenScopes ?? null);
+}
+//# sourceMappingURL=load-user-for-public-request.js.map

package/dist/runtime/load-user-for-public-request.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"load-user-for-public-request.js","sourceRoot":"","sources":["../../src/runtime/load-user-for-public-request.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AACvD,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAE7C,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAC5C,GAAe;IAEf,IAAI,iBAAiB,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,IAAI,EAAE,CAAC;QAC5C,OAAO,GAAG,CAAC;IACb,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,aAAa,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;IACzE,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;QACpB,OAAO,GAAG,CAAC;IACb,CAAC;IACD,OAAO,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,WAAW,IAAI,IAAI,CAAC,CAAC;AAChE,CAAC"}

package/dist/runtime/memory-storage.d.ts

@@ -0,0 +1,8 @@
+import type { ObjectStorage } from "./slots.js";
+export interface MemoryStorageConfig {
+    /** Default `/_plumix/memory-storage/`. */
+    readonly publicUrlBase?: string;
+    readonly seed?: Readonly<Record<string, Uint8Array>>;
+}
+export declare function memoryStorage(config?: MemoryStorageConfig): ObjectStorage;
+//# sourceMappingURL=memory-storage.d.ts.map

package/dist/runtime/memory-storage.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"memory-storage.d.ts","sourceRoot":"","sources":["../../src/runtime/memory-storage.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAMV,aAAa,EAId,MAAM,YAAY,CAAC;AAWpB,MAAM,WAAW,mBAAmB;IAClC,0CAA0C;IAC1C,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,IAAI,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC,CAAC;CACtD;AAED,wBAAgB,aAAa,CAAC,MAAM,GAAE,mBAAwB,GAAG,aAAa,CAgH7E"}

package/dist/runtime/memory-storage.js

@@ -0,0 +1,166 @@
+export function memoryStorage(config = {}) {
+    const store = new Map();
+    const publicUrlBase = config.publicUrlBase ?? "/_plumix/memory-storage/";
+    if (config.seed) {
+        const now = new Date();
+        for (const [key, bytes] of Object.entries(config.seed)) {
+            store.set(key, {
+                bytes,
+                etag: computeEtag(bytes),
+                uploaded: now,
+            });
+        }
+    }
+    const connected = {
+        async put(key, body, opts) {
+            const bytes = await bodyToBytes(body);
+            store.set(key, {
+                bytes,
+                contentType: opts?.contentType,
+                cacheControl: opts?.cacheControl,
+                customMetadata: opts?.customMetadata,
+                etag: computeEtag(bytes),
+                uploaded: new Date(),
+            });
+        },
+        // eslint-disable-next-line @typescript-eslint/require-await
+        async get(key, opts) {
+            const entry = store.get(key);
+            if (!entry)
+                return null;
+            const slice = opts?.range
+                ? entry.bytes.subarray(opts.range.offset, opts.range.offset + opts.range.length)
+                : entry.bytes;
+            return {
+                body: streamFromBytes(slice),
+                size: slice.byteLength,
+                contentType: entry.contentType,
+                etag: entry.etag,
+                customMetadata: entry.customMetadata,
+                arrayBuffer: () => Promise.resolve(toFreshArrayBuffer(slice)),
+            };
+        },
+        // eslint-disable-next-line @typescript-eslint/require-await
+        async head(key) {
+            const entry = store.get(key);
+            if (!entry)
+                return null;
+            return {
+                size: entry.bytes.byteLength,
+                contentType: entry.contentType,
+                etag: entry.etag,
+                customMetadata: entry.customMetadata,
+            };
+        },
+        // eslint-disable-next-line @typescript-eslint/require-await
+        async delete(key) {
+            store.delete(key);
+        },
+        // eslint-disable-next-line @typescript-eslint/require-await
+        async list(prefix, opts = {}) {
+            const limit = Math.min(opts.limit ?? 1000, 1000);
+            const filtered = [];
+            for (const [key, entry] of store) {
+                if (prefix && !key.startsWith(prefix))
+                    continue;
+                filtered.push({
+                    key,
+                    size: entry.bytes.byteLength,
+                    etag: entry.etag,
+                    uploaded: entry.uploaded,
+                });
+            }
+            filtered.sort((a, b) => a.key.localeCompare(b.key));
+            const startIndex = opts.cursor ? Number(opts.cursor) || 0 : 0;
+            const page = filtered.slice(startIndex, startIndex + limit);
+            const nextIndex = startIndex + page.length;
+            return {
+                items: page,
+                cursor: nextIndex < filtered.length ? String(nextIndex) : undefined,
+                truncated: nextIndex < filtered.length,
+            };
+        },
+        // eslint-disable-next-line @typescript-eslint/require-await
+        async url(key, _opts) {
+            return `${publicUrlBase}${encodeURIComponent(key)}`;
+        },
+        // eslint-disable-next-line @typescript-eslint/require-await
+        async presignPut(key, opts) {
+            const expiresIn = opts.expiresIn ?? 300;
+            return {
+                url: `${publicUrlBase}${encodeURIComponent(key)}`,
+                method: "PUT",
+                headers: { "content-type": opts.contentType },
+                expiresAt: Math.floor(Date.now() / 1000) + expiresIn,
+            };
+        },
+    };
+    return {
+        kind: "memory",
+        connect: () => connected,
+    };
+}
+async function bodyToBytes(body) {
+    if (body === null)
+        return new Uint8Array(0);
+    if (typeof body === "string")
+        return new TextEncoder().encode(body);
+    if (body instanceof Uint8Array)
+        return body.slice();
+    if (body instanceof ArrayBuffer) {
+        const out = new Uint8Array(body.byteLength);
+        out.set(new Uint8Array(body));
+        return out;
+    }
+    if (ArrayBuffer.isView(body)) {
+        const src = new Uint8Array(body.buffer, body.byteOffset, body.byteLength);
+        const out = new Uint8Array(src.byteLength);
+        out.set(src);
+        return out;
+    }
+    if (body instanceof Blob) {
+        return new Uint8Array(await body.arrayBuffer());
+    }
+    // ReadableStream<Uint8Array>
+    const reader = body.getReader();
+    const chunks = [];
+    let total = 0;
+    for (;;) {
+        const { done, value } = await reader.read();
+        if (done)
+            break;
+        chunks.push(value);
+        total += value.byteLength;
+    }
+    const joined = new Uint8Array(total);
+    let offset = 0;
+    for (const chunk of chunks) {
+        joined.set(chunk, offset);
+        offset += chunk.byteLength;
+    }
+    return joined;
+}
+// Avoids the `SharedArrayBuffer` union that `.slice()` introduces.
+function toFreshArrayBuffer(bytes) {
+    const out = new ArrayBuffer(bytes.byteLength);
+    new Uint8Array(out).set(bytes);
+    return out;
+}
+function streamFromBytes(bytes) {
+    return new ReadableStream({
+        start(controller) {
+            controller.enqueue(bytes);
+            controller.close();
+        },
+    });
+}
+// FNV-1a — fast, non-cryptographic, sufficient for dev cache validation.
+function computeEtag(bytes) {
+    let hash = 0x811c9dc5;
+    for (let i = 0; i < bytes.byteLength; i++) {
+        hash ^= bytes[i] ?? 0;
+        hash = Math.imul(hash, 0x01000193);
+    }
+    return `"${bytes.byteLength.toString(16)}-${(hash >>> 0).toString(16)}"`;
+}
+//# sourceMappingURL=memory-storage.js.map

package/dist/runtime/memory-storage.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"memory-storage.js","sourceRoot":"","sources":["../../src/runtime/memory-storage.ts"],"names":[],"mappings":"AA2BA,MAAM,UAAU,aAAa,CAAC,SAA8B,EAAE;IAC5D,MAAM,KAAK,GAAG,IAAI,GAAG,EAAuB,CAAC;IAC7C,MAAM,aAAa,GAAG,MAAM,CAAC,aAAa,IAAI,0BAA0B,CAAC;IAEzE,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC;QAChB,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;YACvD,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE;gBACb,KAAK;gBACL,IAAI,EAAE,WAAW,CAAC,KAAK,CAAC;gBACxB,QAAQ,EAAE,GAAG;aACd,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,MAAM,SAAS,GAA2B;QACxC,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,EAAE,IAAI;YACvB,MAAM,KAAK,GAAG,MAAM,WAAW,CAAC,IAAI,CAAC,CAAC;YACtC,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE;gBACb,KAAK;gBACL,WAAW,EAAE,IAAI,EAAE,WAAW;gBAC9B,YAAY,EAAE,IAAI,EAAE,YAAY;gBAChC,cAAc,EAAE,IAAI,EAAE,cAAc;gBACpC,IAAI,EAAE,WAAW,CAAC,KAAK,CAAC;gBACxB,QAAQ,EAAE,IAAI,IAAI,EAAE;aACrB,CAAC,CAAC;QACL,CAAC;QACD,4DAA4D;QAC5D,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI;YACjB,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YAC7B,IAAI,CAAC,KAAK;gBAAE,OAAO,IAAI,CAAC;YACxB,MAAM,KAAK,GAAG,IAAI,EAAE,KAAK;gBACvB,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,CAClB,IAAI,CAAC,KAAK,CAAC,MAAM,EACjB,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CACtC;gBACH,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC;YAChB,OAAO;gBACL,IAAI,EAAE,eAAe,CAAC,KAAK,CAAC;gBAC5B,IAAI,EAAE,KAAK,CAAC,UAAU;gBACtB,WAAW,EAAE,KAAK,CAAC,WAAW;gBAC9B,IAAI,EAAE,KAAK,CAAC,IAAI;gBAChB,cAAc,EAAE,KAAK,CAAC,cAAc;gBACpC,WAAW,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,kBAAkB,CAAC,KAAK,CAAC,CAAC;aAC9D,CAAC;QACJ,CAAC;QACD,4DAA4D;QAC5D,KAAK,CAAC,IAAI,CAAC,GAAG;YACZ,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YAC7B,IAAI,CAAC,KAAK;gBAAE,OAAO,IAAI,CAAC;YACxB,OAAO;gBACL,IAAI,EAAE,KAAK,CAAC,KAAK,CAAC,UAAU;gBAC5B,WAAW,EAAE,KAAK,CAAC,WAAW;gBAC9B,IAAI,EAAE,KAAK,CAAC,IAAI;gBAChB,cAAc,EAAE,KAAK,CAAC,cAAc;aACrC,CAAC;QACJ,CAAC;QACD,4DAA4D;QAC5D,KAAK,CAAC,MAAM,CAAC,GAAG;YACd,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACpB,CAAC;QACD,4DAA4D;QAC5D,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,OAAoB,EAAE;YACvC,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,IAAI,IAAI,EAAE,IAAI,CAAC,CAAC;YACjD,MAAM,QAAQ,GAKR,EAAE,CAAC;YACT,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,KAAK,EAAE,CAAC;gBACjC,IAAI,MAAM,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC;oBAAE,SAAS;gBAChD,QAAQ,CAAC,IAAI,CAAC;oBACZ,GAAG;oBACH,IAAI,EAAE,KAAK,CAAC,KAAK,CAAC,UAAU;oBAC5B,IAAI,EAAE,KAAK,CAAC,IAAI;oBAChB,QAAQ,EAAE,KAAK,CAAC,QAAQ;iBACzB,CAAC,CAAC;YACL,CAAC;YACD,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;YACpD,MAAM,UAAU,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YAC9D,MAAM,IAAI,GAAG,QAAQ,CAAC,KAAK,CAAC,UAAU,EAAE,UAAU,GAAG,KAAK,CAAC,CAAC;YAC5D,MAAM,SAAS,GAAG,UAAU,GAAG,IAAI,CAAC,MAAM,CAAC;YAC3C,OAAO;gBACL,KAAK,EAAE,IAAI;gBACX,MAAM,EAAE,SAAS,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS;gBACnE,SAAS,EAAE,SAAS,GAAG,QAAQ,CAAC,MAAM;aACvC,CAAC;QACJ,CAAC;QACD,4DAA4D;QAC5D,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,KAAkB;YAC/B,OAAO,GAAG,aAAa,GAAG,kBAAkB,CAAC,GAAG,CAAC,EAAE,CAAC;QACtD,CAAC;QACD,4DAA4D;QAC5D,KAAK,CAAC,UAAU,CACd,GAAG,EACH,IAAuB;YAEvB,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,GAAG,CAAC;YACxC,OAAO;gBACL,GAAG,EAAE,GAAG,aAAa,GAAG,kBAAkB,CAAC,GAAG,CAAC,EAAE;gBACjD,MAAM,EAAE,KAAK;gBACb,OAAO,EAAE,EAAE,cAAc,EAAE,IAAI,CAAC,WAAW,EAAE;gBAC7C,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,GAAG,SAAS;aACrD,CAAC;QACJ,CAAC;KACF,CAAC;IAEF,OAAO;QACL,IAAI,EAAE,QAAQ;QACd,OAAO,EAAE,GAAG,EAAE,CAAC,SAAS;KACzB,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,WAAW,CAAC,IAAgB;IACzC,IAAI,IAAI,KAAK,IAAI;QAAE,OAAO,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC;IAC5C,IAAI,OAAO,IAAI,KAAK,QAAQ;QAAE,OAAO,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IACpE,IAAI,IAAI,YAAY,UAAU;QAAE,OAAO,IAAI,CAAC,KAAK,EAAE,CAAC;IACpD,IAAI,IAAI,YAAY,WAAW,EAAE,CAAC;QAChC,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QAC5C,GAAG,CAAC,GAAG,CAAC,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC;QAC9B,OAAO,GAAG,CAAC;IACb,CAAC;IACD,IAAI,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;QAC7B,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC;QAC1E,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QAC3C,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACb,OAAO,GAAG,CAAC;IACb,CAAC;IACD,IAAI,IAAI,YAAY,IAAI,EAAE,CAAC;QACzB,OAAO,IAAI,UAAU,CAAC,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC;IAClD,CAAC;IACD,6BAA6B;IAC7B,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;IAChC,MAAM,MAAM,GAAiB,EAAE,CAAC;IAChC,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,SAAS,CAAC;QACR,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;QAC5C,IAAI,IAAI;YAAE,MAAM;QAChB,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACnB,KAAK,IAAI,KAAK,CAAC,UAAU,CAAC;IAC5B,CAAC;IACD,MAAM,MAAM,GAAG,IAAI,UAAU,CAAC,KAAK,CAAC,CAAC;IACrC,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,MAAM,CAAC,GAAG,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;QAC1B,MAAM,IAAI,KAAK,CAAC,UAAU,CAAC;IAC7B,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,mEAAmE;AACnE,SAAS,kBAAkB,CAAC,KAAiB;IAC3C,MAAM,GAAG,GAAG,IAAI,WAAW,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IAC9C,IAAI,UAAU,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IAC/B,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,eAAe,CAAC,KAAiB;IACxC,OAAO,IAAI,cAAc,CAAC;QACxB,KAAK,CAAC,UAAU;YACd,UAAU,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;YAC1B,UAAU,CAAC,KAAK,EAAE,CAAC;QACrB,CAAC;KACF,CAAC,CAAC;AACL,CAAC;AAED,yEAAyE;AACzE,SAAS,WAAW,CAAC,KAAiB;IACpC,IAAI,IAAI,GAAG,UAAU,CAAC;IACtB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,UAAU,EAAE,CAAC,EAAE,EAAE,CAAC;QAC1C,IAAI,IAAI,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QACtB,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;IACrC,CAAC;IACD,OAAO,IAAI,KAAK,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,GAAG,CAAC;AAC3E,CAAC"}

package/dist/runtime/register-core-scheduled-tasks.d.ts

@@ -0,0 +1,7 @@
+import type { MutablePluginRegistry } from "../plugin/manifest.js";
+/**
+ * Register core's built-in scheduled tasks. Called at app boot before plugins
+ * install, so their tasks join `app.scheduledTasks` alongside plugin ones.
+ */
+export declare function registerCoreScheduledTasks(registry: MutablePluginRegistry): void;
+//# sourceMappingURL=register-core-scheduled-tasks.d.ts.map

package/dist/runtime/register-core-scheduled-tasks.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"register-core-scheduled-tasks.d.ts","sourceRoot":"","sources":["../../src/runtime/register-core-scheduled-tasks.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,uBAAuB,CAAC;AAanE;;;GAGG;AACH,wBAAgB,0BAA0B,CACxC,QAAQ,EAAE,qBAAqB,GAC9B,IAAI,CAgCN"}

package/dist/runtime/register-core-scheduled-tasks.js

@@ -0,0 +1,38 @@
+import { pruneExpiredSessions } from "../auth/sessions.js";
+import { publishDueScheduledEntries } from "../rpc/procedures/entry/publish-scheduled.js";
+// Daily at 03:00 UTC. Only fires if the deploy declares a matching
+// `triggers.crons` entry in wrangler config; otherwise expired sessions
+// stay filtered-at-read and simply accumulate (harmless, just rows).
+const SESSION_CLEANUP_CRON = "0 3 * * *";
+// Every 5 minutes — the worst-case lag between an entry's scheduled time and
+// its actual publish. Needs a matching `triggers.crons` entry to fire.
+const PUBLISH_SCHEDULED_CRON = "*/5 * * * *";
+/**
+ * Register core's built-in scheduled tasks. Called at app boot before plugins
+ * install, so their tasks join `app.scheduledTasks` alongside plugin ones.
+ */
+export function registerCoreScheduledTasks(registry) {
+    registry.scheduledTasks.push({
+        id: "session-cleanup",
+        cron: SESSION_CLEANUP_CRON,
+        registeredBy: "core",
+        handler: async (ctx) => {
+            const reaped = await pruneExpiredSessions(ctx.db);
+            if (reaped > 0) {
+                ctx.logger.info(`[plumix] session-cleanup reaped ${String(reaped)} expired session${reaped === 1 ? "" : "s"}`);
+            }
+        },
+    });
+    registry.scheduledTasks.push({
+        id: "publish-scheduled",
+        cron: PUBLISH_SCHEDULED_CRON,
+        registeredBy: "core",
+        handler: async (ctx) => {
+            const published = await publishDueScheduledEntries(ctx);
+            if (published > 0) {
+                ctx.logger.info(`[plumix] publish-scheduled published ${String(published)} entr${published === 1 ? "y" : "ies"}`);
+            }
+        },
+    });
+}
+//# sourceMappingURL=register-core-scheduled-tasks.js.map

package/dist/runtime/register-core-scheduled-tasks.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"register-core-scheduled-tasks.js","sourceRoot":"","sources":["../../src/runtime/register-core-scheduled-tasks.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AAC3D,OAAO,EAAE,0BAA0B,EAAE,MAAM,8CAA8C,CAAC;AAE1F,mEAAmE;AACnE,wEAAwE;AACxE,qEAAqE;AACrE,MAAM,oBAAoB,GAAG,WAAW,CAAC;AAEzC,6EAA6E;AAC7E,uEAAuE;AACvE,MAAM,sBAAsB,GAAG,aAAa,CAAC;AAE7C;;;GAGG;AACH,MAAM,UAAU,0BAA0B,CACxC,QAA+B;IAE/B,QAAQ,CAAC,cAAc,CAAC,IAAI,CAAC;QAC3B,EAAE,EAAE,iBAAiB;QACrB,IAAI,EAAE,oBAAoB;QAC1B,YAAY,EAAE,MAAM;QACpB,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;YACrB,MAAM,MAAM,GAAG,MAAM,oBAAoB,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAClD,IAAI,MAAM,GAAG,CAAC,EAAE,CAAC;gBACf,GAAG,CAAC,MAAM,CAAC,IAAI,CACb,mCAAmC,MAAM,CAAC,MAAM,CAAC,mBAC/C,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GACtB,EAAE,CACH,CAAC;YACJ,CAAC;QACH,CAAC;KACF,CAAC,CAAC;IAEH,QAAQ,CAAC,cAAc,CAAC,IAAI,CAAC;QAC3B,EAAE,EAAE,mBAAmB;QACvB,IAAI,EAAE,sBAAsB;QAC5B,YAAY,EAAE,MAAM;QACpB,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;YACrB,MAAM,SAAS,GAAG,MAAM,0BAA0B,CAAC,GAAG,CAAC,CAAC;YACxD,IAAI,SAAS,GAAG,CAAC,EAAE,CAAC;gBAClB,GAAG,CAAC,MAAM,CAAC,IAAI,CACb,wCAAwC,MAAM,CAAC,SAAS,CAAC,QACvD,SAAS,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,KAC1B,EAAE,CACH,CAAC;YACJ,CAAC;QACH,CAAC;KACF,CAAC,CAAC;AACL,CAAC"}

package/dist/runtime/scheduled.d.ts

@@ -0,0 +1,17 @@
+import type { AppContext } from "../context/app.js";
+import type { PlumixApp } from "./app.js";
+/**
+ * Run the registered scheduled tasks against the given `AppContext`. Each task
+ * is wrapped in its own `try/catch` so a single failure can't abort siblings —
+ * failures are surfaced through `ctx.logger.error` with `{ taskId, cron }`.
+ *
+ * `firedCron` is the schedule that triggered this invocation (Cloudflare's
+ * `event.cron`). A task with a declared `cron` runs only when it matches; a
+ * task with no `cron` runs on every invocation. When `firedCron` is omitted
+ * (tests, runtimes that don't surface it), every task runs.
+ *
+ * Runtime adapters call this from their `buildScheduledHandler` after
+ * constructing a scheduled-flavor `AppContext`.
+ */
+export declare function runScheduledTasks(app: PlumixApp, ctx: AppContext, firedCron?: string): Promise<void>;
+//# sourceMappingURL=scheduled.d.ts.map

package/dist/runtime/scheduled.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"scheduled.d.ts","sourceRoot":"","sources":["../../src/runtime/scheduled.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AACpD,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,UAAU,CAAC;AAG1C;;;;;;;;;;;;GAYG;AACH,wBAAsB,iBAAiB,CACrC,GAAG,EAAE,SAAS,EACd,GAAG,EAAE,UAAU,EACf,SAAS,CAAC,EAAE,MAAM,GACjB,OAAO,CAAC,IAAI,CAAC,CAuBf"}

package/dist/runtime/scheduled.js

@@ -0,0 +1,33 @@
+import { flushPurgeTags } from "../cache/purge.js";
+/**
+ * Run the registered scheduled tasks against the given `AppContext`. Each task
+ * is wrapped in its own `try/catch` so a single failure can't abort siblings —
+ * failures are surfaced through `ctx.logger.error` with `{ taskId, cron }`.
+ *
+ * `firedCron` is the schedule that triggered this invocation (Cloudflare's
+ * `event.cron`). A task with a declared `cron` runs only when it matches; a
+ * task with no `cron` runs on every invocation. When `firedCron` is omitted
+ * (tests, runtimes that don't surface it), every task runs.
+ *
+ * Runtime adapters call this from their `buildScheduledHandler` after
+ * constructing a scheduled-flavor `AppContext`.
+ */
+export async function runScheduledTasks(app, ctx, firedCron) {
+    for (const task of app.scheduledTasks) {
+        if (firedCron !== undefined &&
+            task.cron !== undefined &&
+            task.cron !== firedCron) {
+            continue;
+        }
+        try {
+            await task.handler(ctx);
+        }
+        catch (error) {
+            ctx.logger.error(`[plumix] scheduled task "${task.registeredBy}:${task.id}" failed: ${error instanceof Error ? error.message : String(error)}`, { error, taskId: task.id, plugin: task.registeredBy, cron: task.cron });
+        }
+    }
+    // A scheduled publish fires `entry:published`; flush the batched edge-cache
+    // purge it accumulated, the same request-end seam the dispatcher uses.
+    flushPurgeTags(ctx);
+}
+//# sourceMappingURL=scheduled.js.map

package/dist/runtime/scheduled.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"scheduled.js","sourceRoot":"","sources":["../../src/runtime/scheduled.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AAEnD;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,GAAc,EACd,GAAe,EACf,SAAkB;IAElB,KAAK,MAAM,IAAI,IAAI,GAAG,CAAC,cAAc,EAAE,CAAC;QACtC,IACE,SAAS,KAAK,SAAS;YACvB,IAAI,CAAC,IAAI,KAAK,SAAS;YACvB,IAAI,CAAC,IAAI,KAAK,SAAS,EACvB,CAAC;YACD,SAAS;QACX,CAAC;QACD,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAC1B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,GAAG,CAAC,MAAM,CAAC,KAAK,CACd,4BAA4B,IAAI,CAAC,YAAY,IAAI,IAAI,CAAC,EAAE,aACtD,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CACvD,EAAE,EACF,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,YAAY,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CACvE,CAAC;QACJ,CAAC;IACH,CAAC;IACD,4EAA4E;IAC5E,uEAAuE;IACvE,cAAc,CAAC,GAAG,CAAC,CAAC;AACtB,CAAC"}

package/dist/runtime/shortcode-registry.d.ts

@@ -0,0 +1,10 @@
+import type { ShortcodeRegistry, ShortcodeSpec } from "@plumix/blocks";
+/**
+ * Merge the three shortcode sources into the registry `expandShortcodes`
+ * reads, with last-wins precedence: core < plugin < theme. A theme may
+ * deliberately override a plugin's or core's tag; plugin↔plugin collisions
+ * are already rejected at registration. Tags are flat and unprefixed to
+ * preserve the `[year]` authoring ergonomic.
+ */
+export declare function assembleShortcodeRegistry(core: readonly ShortcodeSpec[], plugin: readonly ShortcodeSpec[], theme: readonly ShortcodeSpec[]): ShortcodeRegistry;
+//# sourceMappingURL=shortcode-registry.d.ts.map

package/dist/runtime/shortcode-registry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"shortcode-registry.d.ts","sourceRoot":"","sources":["../../src/runtime/shortcode-registry.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,iBAAiB,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAEvE;;;;;;GAMG;AACH,wBAAgB,yBAAyB,CACvC,IAAI,EAAE,SAAS,aAAa,EAAE,EAC9B,MAAM,EAAE,SAAS,aAAa,EAAE,EAChC,KAAK,EAAE,SAAS,aAAa,EAAE,GAC9B,iBAAiB,CAMnB"}

package/dist/runtime/shortcode-registry.js

@@ -0,0 +1,15 @@
+/**
+ * Merge the three shortcode sources into the registry `expandShortcodes`
+ * reads, with last-wins precedence: core < plugin < theme. A theme may
+ * deliberately override a plugin's or core's tag; plugin↔plugin collisions
+ * are already rejected at registration. Tags are flat and unprefixed to
+ * preserve the `[year]` authoring ergonomic.
+ */
+export function assembleShortcodeRegistry(core, plugin, theme) {
+    const map = new Map();
+    for (const spec of [...core, ...plugin, ...theme]) {
+        map.set(spec.name, spec);
+    }
+    return map;
+}
+//# sourceMappingURL=shortcode-registry.js.map

package/dist/runtime/shortcode-registry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"shortcode-registry.js","sourceRoot":"","sources":["../../src/runtime/shortcode-registry.ts"],"names":[],"mappings":"AAEA;;;;;;GAMG;AACH,MAAM,UAAU,yBAAyB,CACvC,IAA8B,EAC9B,MAAgC,EAChC,KAA+B;IAE/B,MAAM,GAAG,GAAG,IAAI,GAAG,EAAyB,CAAC;IAC7C,KAAK,MAAM,IAAI,IAAI,CAAC,GAAG,IAAI,EAAE,GAAG,MAAM,EAAE,GAAG,KAAK,CAAC,EAAE,CAAC;QAClD,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IAC3B,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC"}