@plumix/core 0.1.0

package/dist/runtime/slots.d.ts

@@ -0,0 +1,203 @@
+export interface RequestScopedDbArgs {
+    readonly env: unknown;
+    readonly request: Request;
+    readonly schema: Record<string, unknown>;
+    /**
+     * Heuristic: true when the request carries a Plumix session cookie.
+     * Adapters should treat this as "maybe signed in" — use it to gate whether
+     * per-request state (e.g. a bookmark cookie) is worth persisting. Not a
+     * substitute for validating the session inside handlers.
+     */
+    readonly isAuthenticated: boolean;
+    /** True when the request method is not GET/HEAD/OPTIONS. */
+    readonly isWrite: boolean;
+}
+export interface RequestScopedDb {
+    readonly db: unknown;
+    /**
+     * Called exactly once after the dispatcher returns. Attach per-request
+     * state (e.g. a Set-Cookie header for the D1 Sessions API bookmark) to
+     * the response and return it. Idempotent adapters may return `response`
+     * unchanged.
+     */
+    commit(response: Response): Response;
+}
+export interface DatabaseAdapter<TSchema = Record<string, unknown>> {
+    readonly kind: string;
+    connect(env: unknown, request: Request, schema: TSchema): {
+        db: unknown;
+    };
+    /**
+     * Optional per-request database hook. When present, runtime adapters
+     * prefer this over `connect`: the returned `db` becomes `ctx.db` for the
+     * request, and `commit` runs on the response path. Returning `null` means
+     * "fall through to `connect` for this request" — useful when the adapter
+     * is configured but the feature (e.g. Sessions API) is disabled.
+     *
+     * Declared as a property (not a method) so that `this`-less bare
+     * references — common in test fixtures and wrappers — are safe.
+     */
+    readonly connectRequest?: (args: RequestScopedDbArgs) => RequestScopedDb | null;
+    /**
+     * Env bindings this adapter requires at runtime. Runtime adapters (CF,
+     * Bun, Node) validate these against the actual env on first request so
+     * a misconfigured deploy fails fast with a readable error instead of an
+     * opaque 500 on the first query.
+     *
+     * Optional: adapters that don't consume runtime bindings (e.g. the test
+     * stub) can omit. Populate as an empty array when explicitly "no bindings
+     * needed"; omit to opt out of the check entirely.
+     */
+    readonly requiredBindings?: readonly string[];
+}
+export type ObjectBody = ReadableStream<Uint8Array> | ArrayBuffer | ArrayBufferView | string | Blob | null;
+export interface PutOptions {
+    readonly contentType?: string;
+    readonly contentLength?: number;
+    readonly cacheControl?: string;
+    readonly customMetadata?: Readonly<Record<string, string>>;
+}
+export interface GetResult {
+    readonly body: ReadableStream<Uint8Array>;
+    readonly size: number;
+    readonly contentType?: string;
+    readonly etag: string;
+    readonly customMetadata?: Readonly<Record<string, string>>;
+    arrayBuffer(): Promise<ArrayBuffer>;
+}
+export interface ListOptions {
+    readonly limit?: number;
+    readonly cursor?: string;
+    readonly delimiter?: string;
+}
+export interface ListItem {
+    readonly key: string;
+    readonly size: number;
+    readonly etag: string;
+    readonly uploaded: Date;
+}
+export interface ListResult {
+    readonly items: readonly ListItem[];
+    readonly cursor?: string;
+    readonly truncated: boolean;
+}
+export interface UrlOptions {
+    readonly expiresIn?: number;
+}
+export interface PresignPutOptions {
+    readonly contentType: string;
+    readonly maxBytes?: number;
+    /** Default 300. */
+    readonly expiresIn?: number;
+}
+export interface PresignedPutResult {
+    readonly url: string;
+    readonly method: "PUT";
+    readonly headers: Readonly<Record<string, string>>;
+    /** Unix epoch seconds. */
+    readonly expiresAt: number;
+}
+export interface HeadResult {
+    readonly size: number;
+    readonly contentType?: string;
+    readonly etag: string;
+    readonly customMetadata?: Readonly<Record<string, string>>;
+}
+export interface GetOptions {
+    /**
+     * Read only the given byte range from the object. Inclusive offset,
+     * exclusive end (matches the `[offset, offset+length)` half-open
+     * convention). Useful for magic-byte sniffing or partial-content
+     * preview without fetching the whole body.
+     */
+    readonly range?: {
+        readonly offset: number;
+        readonly length: number;
+    };
+}
+export interface ConnectedObjectStorage {
+    put(key: string, body: ObjectBody, opts?: PutOptions): Promise<void>;
+    get(key: string, opts?: GetOptions): Promise<GetResult | null>;
+    /**
+     * Object existence + lightweight metadata without fetching the body.
+     * Plugins use this to verify a presigned PUT actually landed before
+     * committing a draft media row to `published`. Returns `null` if the
+     * object doesn't exist.
+     */
+    head(key: string): Promise<HeadResult | null>;
+    delete(key: string): Promise<void>;
+    list(prefix?: string, opts?: ListOptions): Promise<ListResult>;
+    /**
+     * Resolve a public URL for the object, or `null` if the bucket isn't
+     * publicly addressable (private bucket without a custom domain). When
+     * null, the plugin layer is expected to mint a worker-proxied URL
+     * (e.g. media plugin's `/_plumix/media/serve/<id>` route).
+     */
+    url(key: string, opts?: UrlOptions): Promise<string | null>;
+    presignPut?(key: string, opts: PresignPutOptions): Promise<PresignedPutResult>;
+}
+export interface ObjectStorage {
+    readonly kind: string;
+    readonly requiredBindings?: readonly string[];
+    connect(env: unknown): ConnectedObjectStorage;
+}
+export interface KV {
+    readonly kind: string;
+}
+/**
+ * An edge cache bound for the current isolate. Backs the public read-through
+ * cache: `match` reads a stored response, `put` writes a fresh one tagged with
+ * `tags`, and `purgeTags` invalidates every stored response carrying any of the
+ * given tags. The canonical implementation (Cloudflare's `edge()`) is the
+ * Workers Cache API plus the zone purge-by-tag REST API.
+ */
+export interface ConnectedCache {
+    match(request: Request): Promise<Response | undefined>;
+    put(request: Request, response: Response, tags: readonly string[]): Promise<void>;
+    purgeTags(tags: readonly string[]): Promise<void>;
+}
+/**
+ * Edge-cache slot. `connect(env)` returns a {@link ConnectedCache} when the
+ * runtime has everything it needs to cache safely, or `null` to disable
+ * caching for this deploy (e.g. a Cloudflare deploy with no zone credentials,
+ * where pages must render live). Mirrors the `storage:` slot's connect shape.
+ */
+export interface CacheProvider {
+    readonly kind: string;
+    connect(env: unknown): ConnectedCache | null;
+}
+export interface TransformOpts {
+    readonly width?: number;
+    readonly height?: number;
+    readonly fit?: "cover" | "contain" | "scale-down";
+    readonly quality?: number;
+    readonly format?: "auto" | "webp" | "avif" | "jpeg";
+    readonly dpr?: number;
+}
+/**
+ * On-the-fly image delivery — pairs with `storage:` to serve resized /
+ * format-converted images from a CDN. The contract is pure URL math: take
+ * a source URL (already publicly reachable, typically through the bucket's
+ * custom domain) plus `TransformOpts` and return the transformed URL.
+ *
+ * No `connect(env)` step today: the canonical implementation (Cloudflare
+ * Image Transformations) only needs a zone hostname known at config time.
+ * If a future implementation needs request-time / env-time resolution, add
+ * an optional `connect(env)` method — existing implementations stay valid
+ * because the dispatcher would fall back to the bare object.
+ */
+export interface ImageDelivery {
+    readonly kind: string;
+    url(sourceUrl: string, opts?: TransformOpts): string;
+}
+/**
+ * Runtime-provided static asset serving. Exposed so the core dispatcher can
+ * serve admin SPA deep-links (`/_plumix/admin/<anything>`) by delegating
+ * back to the platform's asset layer — Cloudflare's `env.ASSETS` binding
+ * today, equivalents in future Node/Bun adapters. Omitted when the runtime
+ * has no asset layer, in which case deep-link requests 404 with a hint.
+ */
+export interface AssetsBinding {
+    fetch(request: Request): Promise<Response>;
+}
+//# sourceMappingURL=slots.d.ts.map

package/dist/runtime/slots.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"slots.d.ts","sourceRoot":"","sources":["../../src/runtime/slots.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,GAAG,EAAE,OAAO,CAAC;IACtB,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACzC;;;;;OAKG;IACH,QAAQ,CAAC,eAAe,EAAE,OAAO,CAAC;IAClC,4DAA4D;IAC5D,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;CAC3B;AAED,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,EAAE,EAAE,OAAO,CAAC;IACrB;;;;;OAKG;IACH,MAAM,CAAC,QAAQ,EAAE,QAAQ,GAAG,QAAQ,CAAC;CACtC;AAED,MAAM,WAAW,eAAe,CAAC,OAAO,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;IAChE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,OAAO,CACL,GAAG,EAAE,OAAO,EACZ,OAAO,EAAE,OAAO,EAChB,MAAM,EAAE,OAAO,GACd;QACD,EAAE,EAAE,OAAO,CAAC;KACb,CAAC;IACF;;;;;;;;;OASG;IACH,QAAQ,CAAC,cAAc,CAAC,EAAE,CACxB,IAAI,EAAE,mBAAmB,KACtB,eAAe,GAAG,IAAI,CAAC;IAC5B;;;;;;;;;OASG;IACH,QAAQ,CAAC,gBAAgB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CAC/C;AAED,MAAM,MAAM,UAAU,GAClB,cAAc,CAAC,UAAU,CAAC,GAC1B,WAAW,GACX,eAAe,GACf,MAAM,GACN,IAAI,GACJ,IAAI,CAAC;AAET,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,cAAc,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;CAC5D;AAED,MAAM,WAAW,SAAS;IACxB,QAAQ,CAAC,IAAI,EAAE,cAAc,CAAC,UAAU,CAAC,CAAC;IAC1C,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,cAAc,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IAC3D,WAAW,IAAI,OAAO,CAAC,WAAW,CAAC,CAAC;CACrC;AAED,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;CAC7B;AAED,MAAM,WAAW,QAAQ;IACvB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,QAAQ,EAAE,IAAI,CAAC;CACzB;AAED,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,KAAK,EAAE,SAAS,QAAQ,EAAE,CAAC;IACpC,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC;CAC7B;AAED,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;CAC7B;AAED,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,mBAAmB;IACnB,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;CAC7B;AAED,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,MAAM,EAAE,KAAK,CAAC;IACvB,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IACnD,0BAA0B;IAC1B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC5B;AAED,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,cAAc,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;CAC5D;AAED,MAAM,WAAW,UAAU;IACzB;;;;;OAKG;IACH,QAAQ,CAAC,KAAK,CAAC,EAAE;QAAE,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC;CACvE;AAED,MAAM,WAAW,sBAAsB;IACrC,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,CAAC,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACrE,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,UAAU,GAAG,OAAO,CAAC,SAAS,GAAG,IAAI,CAAC,CAAC;IAC/D;;;;;OAKG;IACH,IAAI,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC,CAAC;IAC9C,MAAM,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACnC,IAAI,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;IAC/D;;;;;OAKG;IACH,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,UAAU,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IAC5D,UAAU,CAAC,CACT,GAAG,EAAE,MAAM,EACX,IAAI,EAAE,iBAAiB,GACtB,OAAO,CAAC,kBAAkB,CAAC,CAAC;CAChC;AAED,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,gBAAgB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC9C,OAAO,CAAC,GAAG,EAAE,OAAO,GAAG,sBAAsB,CAAC;CAC/C;AAED,MAAM,WAAW,EAAE;IACjB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;CACvB;AAED;;;;;;GAMG;AACH,MAAM,WAAW,cAAc;IAC7B,KAAK,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,QAAQ,GAAG,SAAS,CAAC,CAAC;IACvD,GAAG,CACD,OAAO,EAAE,OAAO,EAChB,QAAQ,EAAE,QAAQ,EAClB,IAAI,EAAE,SAAS,MAAM,EAAE,GACtB,OAAO,CAAC,IAAI,CAAC,CAAC;IACjB,SAAS,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACnD;AAED;;;;;GAKG;AACH,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,OAAO,CAAC,GAAG,EAAE,OAAO,GAAG,cAAc,GAAG,IAAI,CAAC;CAC9C;AAED,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,GAAG,CAAC,EAAE,OAAO,GAAG,SAAS,GAAG,YAAY,CAAC;IAClD,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,MAAM,GAAG,MAAM,CAAC;IACpD,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC;CACvB;AAED;;;;;;;;;;;GAWG;AACH,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,GAAG,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,aAAa,GAAG,MAAM,CAAC;CACtD;AAED;;;;;;GAMG;AACH,MAAM,WAAW,aAAa;IAC5B,KAAK,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;CAC5C"}

package/dist/runtime/slots.js

@@ -0,0 +1 @@
+//# sourceMappingURL=slots.js.map

package/dist/runtime/slots.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"slots.js","sourceRoot":"","sources":["../../src/runtime/slots.ts"],"names":[],"mappings":""}

package/dist/search/admin-search.d.ts

@@ -0,0 +1,37 @@
+import type { AppContext } from "../context/app.js";
+import type { HookExecutor } from "../hooks/registry.js";
+import type { Label } from "../i18n/label.js";
+export interface AdminSearchInput {
+    readonly query: string;
+    readonly limit: number;
+}
+export interface SearchResultItem {
+    readonly id: string;
+    readonly title: string;
+    readonly subtitle?: string;
+    readonly url?: string;
+}
+/**
+ * One result group, e.g. "Posts", "Tags", "Users". `label` is a `Label`
+ * (string | descriptor) the client resolves with `useLabel`. `priority`
+ * orders groups in the palette (lower first).
+ */
+export interface SearchGroup {
+    readonly key: string;
+    readonly label: Label;
+    readonly priority: number;
+    readonly items: readonly SearchResultItem[];
+}
+declare module "../hooks/types.js" {
+    interface FilterRegistry {
+        "admin:search:results": (input: AdminSearchInput, ctx: AppContext) => readonly SearchGroup[] | Promise<readonly SearchGroup[]>;
+    }
+}
+/**
+ * Run every `admin:search:results` handler concurrently and merge their
+ * groups. Each handler is isolated: a throwing or rejecting one degrades
+ * to no contribution instead of breaking the palette. Empty groups are
+ * dropped; the rest are ordered by `priority`.
+ */
+export declare function runAdminSearch(hooks: Pick<HookExecutor, "getFilterHandlers">, input: AdminSearchInput, ctx: AppContext): Promise<readonly SearchGroup[]>;
+//# sourceMappingURL=admin-search.d.ts.map

package/dist/search/admin-search.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"admin-search.d.ts","sourceRoot":"","sources":["../../src/search/admin-search.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AACpD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AACzD,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,kBAAkB,CAAC;AAE9C,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC;CACvB;AAED;;;;GAIG;AACH,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAC;IACtB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,KAAK,EAAE,SAAS,gBAAgB,EAAE,CAAC;CAC7C;AAED,OAAO,QAAQ,mBAAmB,CAAC;IACjC,UAAU,cAAc;QAGtB,sBAAsB,EAAE,CACtB,KAAK,EAAE,gBAAgB,EACvB,GAAG,EAAE,UAAU,KACZ,SAAS,WAAW,EAAE,GAAG,OAAO,CAAC,SAAS,WAAW,EAAE,CAAC,CAAC;KAC/D;CACF;AAED;;;;;GAKG;AACH,wBAAsB,cAAc,CAClC,KAAK,EAAE,IAAI,CAAC,YAAY,EAAE,mBAAmB,CAAC,EAC9C,KAAK,EAAE,gBAAgB,EACvB,GAAG,EAAE,UAAU,GACd,OAAO,CAAC,SAAS,WAAW,EAAE,CAAC,CAoBjC"}

package/dist/search/admin-search.js

@@ -0,0 +1,24 @@
+/**
+ * Run every `admin:search:results` handler concurrently and merge their
+ * groups. Each handler is isolated: a throwing or rejecting one degrades
+ * to no contribution instead of breaking the palette. Empty groups are
+ * dropped; the rest are ordered by `priority`.
+ */
+export async function runAdminSearch(hooks, input, ctx) {
+    const produced = await Promise.all(hooks
+        .getFilterHandlers("admin:search:results")
+        .map(async ({ fn, plugin }) => {
+        try {
+            return await fn(input, ctx);
+        }
+        catch (error) {
+            console.error(`[plumix] admin:search:results handler failed plugin=${plugin ?? "core"}`, error);
+            return [];
+        }
+    }));
+    return produced
+        .flat()
+        .filter((group) => group.items.length > 0)
+        .sort((a, b) => a.priority - b.priority);
+}
+//# sourceMappingURL=admin-search.js.map

package/dist/search/admin-search.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"admin-search.js","sourceRoot":"","sources":["../../src/search/admin-search.ts"],"names":[],"mappings":"AAuCA;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,KAA8C,EAC9C,KAAuB,EACvB,GAAe;IAEf,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,GAAG,CAChC,KAAK;SACF,iBAAiB,CAAC,sBAAsB,CAAC;SACzC,GAAG,CAAC,KAAK,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE;QAC5B,IAAI,CAAC;YACH,OAAO,MAAM,EAAE,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QAC9B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,KAAK,CACX,uDAAuD,MAAM,IAAI,MAAM,EAAE,EACzE,KAAK,CACN,CAAC;YACF,OAAO,EAA4B,CAAC;QACtC,CAAC;IACH,CAAC,CAAC,CACL,CAAC;IACF,OAAO,QAAQ;SACZ,IAAI,EAAE;SACN,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC;SACzC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAC;AAC7C,CAAC"}

package/dist/search/entries-handler.d.ts

@@ -0,0 +1,10 @@
+import type { AppContext } from "../context/app.js";
+import type { AdminSearchInput, SearchGroup } from "./admin-search.js";
+/**
+ * `admin:search:results` handler for the `entries` domain. Matches
+ * title+excerpt (LIKE) across every entry type the caller can read, in a
+ * single query, and returns one group per type. Drafts are included only
+ * for types the caller can edit-any; everything is capped per group.
+ */
+export declare function entriesSearchHandler(input: AdminSearchInput, ctx: AppContext): Promise<readonly SearchGroup[]>;
+//# sourceMappingURL=entries-handler.d.ts.map

package/dist/search/entries-handler.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"entries-handler.d.ts","sourceRoot":"","sources":["../../src/search/entries-handler.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAGpD,OAAO,KAAK,EACV,gBAAgB,EAChB,WAAW,EAEZ,MAAM,mBAAmB,CAAC;AAgB3B;;;;;GAKG;AACH,wBAAsB,oBAAoB,CACxC,KAAK,EAAE,gBAAgB,EACvB,GAAG,EAAE,UAAU,GACd,OAAO,CAAC,SAAS,WAAW,EAAE,CAAC,CA0DjC"}

package/dist/search/entries-handler.js

@@ -0,0 +1,77 @@
+import { and, desc, eq, not, or, sql } from "../db/index.js";
+import { entries } from "../db/schema/entries.js";
+import { entryCapability } from "../rpc/procedures/entry/lifecycle.js";
+import { escapeLikePattern, tokenizeSearchQuery, } from "../rpc/procedures/entry/search-terms.js";
+// Max rows scanned across all types for one query. Title+excerpt LIKE has
+// no relevance ranking, so we take the most recently updated matches and
+// bucket them; a search plugin replaces this handler with real ranking.
+const SCAN_LIMIT = 50;
+// Group priority base; terms (100..) and later domains sort after Content.
+const PRIORITY_BASE = 10;
+/**
+ * `admin:search:results` handler for the `entries` domain. Matches
+ * title+excerpt (LIKE) across every entry type the caller can read, in a
+ * single query, and returns one group per type. Drafts are included only
+ * for types the caller can edit-any; everything is capped per group.
+ */
+export async function entriesSearchHandler(input, ctx) {
+    const tokens = tokenizeSearchQuery(input.query);
+    if (tokens.length === 0)
+        return [];
+    const readable = [...ctx.plugins.entryTypes.entries()].filter(([type]) => ctx.auth.can(entryCapability(type, "read")));
+    if (readable.length === 0)
+        return [];
+    // Mirror `canReadEntry`'s visibility, minus trash (a browse surface
+    // hides the bin, like the entries list default): published is always
+    // visible; `edit_any` sees any non-trash; `edit_own` additionally sees
+    // its own non-trash; everyone else sees published only.
+    const userId = ctx.user?.id ?? null;
+    const notTrash = not(eq(entries.status, "trash"));
+    const typeClauses = readable.map(([type]) => {
+        const ofType = eq(entries.type, type);
+        if (ctx.auth.can(entryCapability(type, "edit_any"))) {
+            return and(ofType, notTrash);
+        }
+        if (userId !== null && ctx.auth.can(entryCapability(type, "edit_own"))) {
+            return and(ofType, notTrash, or(eq(entries.status, "published"), eq(entries.authorId, userId)));
+        }
+        return and(ofType, eq(entries.status, "published"));
+    });
+    const rows = await ctx.db
+        .select({ id: entries.id, type: entries.type, title: entries.title })
+        .from(entries)
+        .where(and(or(...typeClauses), ...tokens.map(titleExcerptCondition)))
+        .orderBy(desc(entries.updatedAt))
+        .limit(SCAN_LIMIT);
+    const byType = new Map();
+    for (const row of rows) {
+        const items = byType.get(row.type) ?? [];
+        if (items.length >= input.limit)
+            continue;
+        items.push({ id: String(row.id), title: row.title });
+        byType.set(row.type, items);
+    }
+    const groups = [];
+    let priority = PRIORITY_BASE;
+    for (const [type, spec] of readable) {
+        const items = byType.get(type);
+        if (!items || items.length === 0)
+            continue;
+        groups.push({
+            key: `entry:${type}`,
+            label: spec.labels?.plural ?? spec.label,
+            priority: priority++,
+            items,
+        });
+    }
+    return groups;
+}
+function titleExcerptCondition(term) {
+    const pattern = `%${escapeLikePattern(term.value)}%`;
+    const match = sql `(
+    COALESCE(${entries.title}, '') LIKE ${pattern} ESCAPE '\\'
+    OR COALESCE(${entries.excerpt}, '') LIKE ${pattern} ESCAPE '\\'
+  )`;
+    return term.exclude ? not(match) : match;
+}
+//# sourceMappingURL=entries-handler.js.map

package/dist/search/entries-handler.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"entries-handler.js","sourceRoot":"","sources":["../../src/search/entries-handler.ts"],"names":[],"mappings":"AAQA,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE,GAAG,EAAE,MAAM,gBAAgB,CAAC;AAC7D,OAAO,EAAE,OAAO,EAAE,MAAM,yBAAyB,CAAC;AAClD,OAAO,EAAE,eAAe,EAAE,MAAM,sCAAsC,CAAC;AACvE,OAAO,EACL,iBAAiB,EACjB,mBAAmB,GACpB,MAAM,yCAAyC,CAAC;AAEjD,0EAA0E;AAC1E,yEAAyE;AACzE,wEAAwE;AACxE,MAAM,UAAU,GAAG,EAAE,CAAC;AACtB,2EAA2E;AAC3E,MAAM,aAAa,GAAG,EAAE,CAAC;AAEzB;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,KAAuB,EACvB,GAAe;IAEf,MAAM,MAAM,GAAG,mBAAmB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IAChD,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IAEnC,MAAM,QAAQ,GAAG,CAAC,GAAG,GAAG,CAAC,OAAO,CAAC,UAAU,CAAC,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,CACvE,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,eAAe,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAC5C,CAAC;IACF,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IAErC,oEAAoE;IACpE,qEAAqE;IACrE,uEAAuE;IACvE,wDAAwD;IACxD,MAAM,MAAM,GAAG,GAAG,CAAC,IAAI,EAAE,EAAE,IAAI,IAAI,CAAC;IACpC,MAAM,QAAQ,GAAG,GAAG,CAAC,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IAClD,MAAM,WAAW,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE;QAC1C,MAAM,MAAM,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QACtC,IAAI,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,eAAe,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC,EAAE,CAAC;YACpD,OAAO,GAAG,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;QAC/B,CAAC;QACD,IAAI,MAAM,KAAK,IAAI,IAAI,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,eAAe,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC,EAAE,CAAC;YACvE,OAAO,GAAG,CACR,MAAM,EACN,QAAQ,EACR,EAAE,CAAC,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,WAAW,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,CAClE,CAAC;QACJ,CAAC;QACD,OAAO,GAAG,CAAC,MAAM,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC,CAAC;IACtD,CAAC,CAAC,CAAC;IAEH,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,EAAE;SACtB,MAAM,CAAC,EAAE,EAAE,EAAE,OAAO,CAAC,EAAE,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC;SACpE,IAAI,CAAC,OAAO,CAAC;SACb,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,WAAW,CAAC,EAAE,GAAG,MAAM,CAAC,GAAG,CAAC,qBAAqB,CAAC,CAAC,CAAC;SACpE,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;SAChC,KAAK,CAAC,UAAU,CAAC,CAAC;IAErB,MAAM,MAAM,GAAG,IAAI,GAAG,EAA8B,CAAC;IACrD,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;QACzC,IAAI,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,KAAK;YAAE,SAAS;QAC1C,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC;QACrD,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IAC9B,CAAC;IAED,MAAM,MAAM,GAAkB,EAAE,CAAC;IACjC,IAAI,QAAQ,GAAG,aAAa,CAAC;IAC7B,KAAK,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,QAAQ,EAAE,CAAC;QACpC,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAC/B,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;YAAE,SAAS;QAC3C,MAAM,CAAC,IAAI,CAAC;YACV,GAAG,EAAE,SAAS,IAAI,EAAE;YACpB,KAAK,EAAE,IAAI,CAAC,MAAM,EAAE,MAAM,IAAI,IAAI,CAAC,KAAK;YACxC,QAAQ,EAAE,QAAQ,EAAE;YACpB,KAAK;SACN,CAAC,CAAC;IACL,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,qBAAqB,CAAC,IAAgB;IAC7C,MAAM,OAAO,GAAG,IAAI,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC;IACrD,MAAM,KAAK,GAAG,GAAG,CAAA;eACJ,OAAO,CAAC,KAAK,cAAc,OAAO;kBAC/B,OAAO,CAAC,OAAO,cAAc,OAAO;IAClD,CAAC;IACH,OAAO,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;AAC3C,CAAC"}

package/dist/search/register-core-handlers.d.ts

@@ -0,0 +1,8 @@
+import type { HookRegistry } from "../hooks/registry.js";
+/**
+ * Register core's built-in `admin:search:results` domains. Called at app
+ * boot alongside the other core hook registrations. Plugins register
+ * their own domains (or replace these) via the same filter.
+ */
+export declare function registerCoreSearchHandlers(hooks: HookRegistry): void;
+//# sourceMappingURL=register-core-handlers.d.ts.map

package/dist/search/register-core-handlers.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"register-core-handlers.d.ts","sourceRoot":"","sources":["../../src/search/register-core-handlers.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AAKzD;;;;GAIG;AACH,wBAAgB,0BAA0B,CAAC,KAAK,EAAE,YAAY,GAAG,IAAI,CAUpE"}

package/dist/search/register-core-handlers.js

@@ -0,0 +1,20 @@
+import { entriesSearchHandler } from "./entries-handler.js";
+import { termsSearchHandler } from "./terms-handler.js";
+import { usersSearchHandler } from "./users-handler.js";
+/**
+ * Register core's built-in `admin:search:results` domains. Called at app
+ * boot alongside the other core hook registrations. Plugins register
+ * their own domains (or replace these) via the same filter.
+ */
+export function registerCoreSearchHandlers(hooks) {
+    hooks.addFilter("admin:search:results", entriesSearchHandler, {
+        priority: 10,
+    });
+    hooks.addFilter("admin:search:results", termsSearchHandler, {
+        priority: 20,
+    });
+    hooks.addFilter("admin:search:results", usersSearchHandler, {
+        priority: 30,
+    });
+}
+//# sourceMappingURL=register-core-handlers.js.map

package/dist/search/register-core-handlers.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"register-core-handlers.js","sourceRoot":"","sources":["../../src/search/register-core-handlers.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAC;AAC5D,OAAO,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AACxD,OAAO,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AAExD;;;;GAIG;AACH,MAAM,UAAU,0BAA0B,CAAC,KAAmB;IAC5D,KAAK,CAAC,SAAS,CAAC,sBAAsB,EAAE,oBAAoB,EAAE;QAC5D,QAAQ,EAAE,EAAE;KACb,CAAC,CAAC;IACH,KAAK,CAAC,SAAS,CAAC,sBAAsB,EAAE,kBAAkB,EAAE;QAC1D,QAAQ,EAAE,EAAE;KACb,CAAC,CAAC;IACH,KAAK,CAAC,SAAS,CAAC,sBAAsB,EAAE,kBAAkB,EAAE;QAC1D,QAAQ,EAAE,EAAE;KACb,CAAC,CAAC;AACL,CAAC"}

package/dist/search/terms-handler.d.ts

@@ -0,0 +1,9 @@
+import type { AppContext } from "../context/app.js";
+import type { AdminSearchInput, SearchGroup } from "./admin-search.js";
+/**
+ * `admin:search:results` handler for the `terms` domain. Matches
+ * name+slug (LIKE) across every taxonomy the caller can read, in a single
+ * query, and returns one group per taxonomy.
+ */
+export declare function termsSearchHandler(input: AdminSearchInput, ctx: AppContext): Promise<readonly SearchGroup[]>;
+//# sourceMappingURL=terms-handler.d.ts.map

package/dist/search/terms-handler.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"terms-handler.d.ts","sourceRoot":"","sources":["../../src/search/terms-handler.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAGpD,OAAO,KAAK,EACV,gBAAgB,EAChB,WAAW,EAEZ,MAAM,mBAAmB,CAAC;AAiB3B;;;;GAIG;AACH,wBAAsB,kBAAkB,CACtC,KAAK,EAAE,gBAAgB,EACvB,GAAG,EAAE,UAAU,GACd,OAAO,CAAC,SAAS,WAAW,EAAE,CAAC,CA6CjC"}

package/dist/search/terms-handler.js

@@ -0,0 +1,61 @@
+import { and, asc, inArray, not, sql } from "../db/index.js";
+import { terms } from "../db/schema/terms.js";
+import { escapeLikePattern, tokenizeSearchQuery, } from "../rpc/procedures/entry/search-terms.js";
+import { taxonomyCapability } from "../rpc/procedures/term/helpers.js";
+// Max rows scanned across all taxonomies for one query; bucketed per
+// group afterward. Terms carry no draft/trash status — visibility is
+// just the per-taxonomy read capability.
+const SCAN_LIMIT = 50;
+// Group priority base, after the entries domain (10..) so Content sorts
+// above Terms in the palette.
+const PRIORITY_BASE = 100;
+/**
+ * `admin:search:results` handler for the `terms` domain. Matches
+ * name+slug (LIKE) across every taxonomy the caller can read, in a single
+ * query, and returns one group per taxonomy.
+ */
+export async function termsSearchHandler(input, ctx) {
+    const tokens = tokenizeSearchQuery(input.query);
+    if (tokens.length === 0)
+        return [];
+    const readable = [...ctx.plugins.termTaxonomies.entries()].filter(([name]) => ctx.auth.can(taxonomyCapability(name, "read")));
+    if (readable.length === 0)
+        return [];
+    const rows = await ctx.db
+        .select({ id: terms.id, taxonomy: terms.taxonomy, name: terms.name })
+        .from(terms)
+        .where(and(inArray(terms.taxonomy, readable.map(([name]) => name)), ...tokens.map(nameSlugCondition)))
+        .orderBy(asc(terms.name))
+        .limit(SCAN_LIMIT);
+    const byTaxonomy = new Map();
+    for (const row of rows) {
+        const items = byTaxonomy.get(row.taxonomy) ?? [];
+        if (items.length >= input.limit)
+            continue;
+        items.push({ id: String(row.id), title: row.name });
+        byTaxonomy.set(row.taxonomy, items);
+    }
+    const groups = [];
+    let priority = PRIORITY_BASE;
+    for (const [name, spec] of readable) {
+        const items = byTaxonomy.get(name);
+        if (!items || items.length === 0)
+            continue;
+        groups.push({
+            key: `term:${name}`,
+            label: spec.labels?.plural ?? spec.label,
+            priority: priority++,
+            items,
+        });
+    }
+    return groups;
+}
+function nameSlugCondition(term) {
+    const pattern = `%${escapeLikePattern(term.value)}%`;
+    const match = sql `(
+    ${terms.name} LIKE ${pattern} ESCAPE '\\'
+    OR ${terms.slug} LIKE ${pattern} ESCAPE '\\'
+  )`;
+    return term.exclude ? not(match) : match;
+}
+//# sourceMappingURL=terms-handler.js.map

package/dist/search/terms-handler.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"terms-handler.js","sourceRoot":"","sources":["../../src/search/terms-handler.ts"],"names":[],"mappings":"AAQA,OAAO,EAAE,GAAG,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,GAAG,EAAE,MAAM,gBAAgB,CAAC;AAC7D,OAAO,EAAE,KAAK,EAAE,MAAM,uBAAuB,CAAC;AAC9C,OAAO,EACL,iBAAiB,EACjB,mBAAmB,GACpB,MAAM,yCAAyC,CAAC;AACjD,OAAO,EAAE,kBAAkB,EAAE,MAAM,mCAAmC,CAAC;AAEvE,qEAAqE;AACrE,qEAAqE;AACrE,yCAAyC;AACzC,MAAM,UAAU,GAAG,EAAE,CAAC;AACtB,wEAAwE;AACxE,8BAA8B;AAC9B,MAAM,aAAa,GAAG,GAAG,CAAC;AAE1B;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,KAAuB,EACvB,GAAe;IAEf,MAAM,MAAM,GAAG,mBAAmB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IAChD,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IAEnC,MAAM,QAAQ,GAAG,CAAC,GAAG,GAAG,CAAC,OAAO,CAAC,cAAc,CAAC,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,CAC3E,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,kBAAkB,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAC/C,CAAC;IACF,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IAErC,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,EAAE;SACtB,MAAM,CAAC,EAAE,EAAE,EAAE,KAAK,CAAC,EAAE,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC;SACpE,IAAI,CAAC,KAAK,CAAC;SACX,KAAK,CACJ,GAAG,CACD,OAAO,CACL,KAAK,CAAC,QAAQ,EACd,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,CAC/B,EACD,GAAG,MAAM,CAAC,GAAG,CAAC,iBAAiB,CAAC,CACjC,CACF;SACA,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;SACxB,KAAK,CAAC,UAAU,CAAC,CAAC;IAErB,MAAM,UAAU,GAAG,IAAI,GAAG,EAA8B,CAAC;IACzD,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;QACjD,IAAI,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,KAAK;YAAE,SAAS;QAC1C,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;QACpD,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;IACtC,CAAC;IAED,MAAM,MAAM,GAAkB,EAAE,CAAC;IACjC,IAAI,QAAQ,GAAG,aAAa,CAAC;IAC7B,KAAK,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,QAAQ,EAAE,CAAC;QACpC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACnC,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;YAAE,SAAS;QAC3C,MAAM,CAAC,IAAI,CAAC;YACV,GAAG,EAAE,QAAQ,IAAI,EAAE;YACnB,KAAK,EAAE,IAAI,CAAC,MAAM,EAAE,MAAM,IAAI,IAAI,CAAC,KAAK;YACxC,QAAQ,EAAE,QAAQ,EAAE;YACpB,KAAK;SACN,CAAC,CAAC;IACL,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,iBAAiB,CAAC,IAAgB;IACzC,MAAM,OAAO,GAAG,IAAI,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC;IACrD,MAAM,KAAK,GAAG,GAAG,CAAA;MACb,KAAK,CAAC,IAAI,SAAS,OAAO;SACvB,KAAK,CAAC,IAAI,SAAS,OAAO;IAC/B,CAAC;IACH,OAAO,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;AAC3C,CAAC"}

package/dist/search/users-handler.d.ts

@@ -0,0 +1,9 @@
+import type { AppContext } from "../context/app.js";
+import type { AdminSearchInput, SearchGroup } from "./admin-search.js";
+/**
+ * `admin:search:results` handler for the `users` domain. Gated by the
+ * single `user:list` capability; matches name+email (LIKE) and returns one
+ * "Users" group. Names are optional, so the email is the fallback title.
+ */
+export declare function usersSearchHandler(input: AdminSearchInput, ctx: AppContext): Promise<readonly SearchGroup[]>;
+//# sourceMappingURL=users-handler.d.ts.map

package/dist/search/users-handler.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"users-handler.d.ts","sourceRoot":"","sources":["../../src/search/users-handler.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAGpD,OAAO,KAAK,EAAE,gBAAgB,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAevE;;;;GAIG;AACH,wBAAsB,kBAAkB,CACtC,KAAK,EAAE,gBAAgB,EACvB,GAAG,EAAE,UAAU,GACd,OAAO,CAAC,SAAS,WAAW,EAAE,CAAC,CAyBjC"}

package/dist/search/users-handler.js

@@ -0,0 +1,49 @@
+import { and, asc, not, sql } from "../db/index.js";
+import { users } from "../db/schema/users.js";
+import { escapeLikePattern, tokenizeSearchQuery, } from "../rpc/procedures/entry/search-terms.js";
+// Group priority base, after entries (10..) and terms (100..).
+const PRIORITY_BASE = 200;
+// Reuses the existing nav label so the group localizes via the admin
+// catalog with no new message.
+const USERS_LABEL = { id: "core.adminNav.item.users", message: "Users" };
+/**
+ * `admin:search:results` handler for the `users` domain. Gated by the
+ * single `user:list` capability; matches name+email (LIKE) and returns one
+ * "Users" group. Names are optional, so the email is the fallback title.
+ */
+export async function usersSearchHandler(input, ctx) {
+    const tokens = tokenizeSearchQuery(input.query);
+    if (tokens.length === 0)
+        return [];
+    if (!ctx.auth.can("user:list"))
+        return [];
+    const rows = await ctx.db
+        .select({ id: users.id, name: users.name, email: users.email })
+        .from(users)
+        .where(and(...tokens.map(nameEmailCondition)))
+        .orderBy(asc(users.email))
+        .limit(input.limit);
+    if (rows.length === 0)
+        return [];
+    return [
+        {
+            key: "users",
+            label: USERS_LABEL,
+            priority: PRIORITY_BASE,
+            items: rows.map((row) => ({
+                id: String(row.id),
+                title: row.name ?? row.email,
+                ...(row.name ? { subtitle: row.email } : {}),
+            })),
+        },
+    ];
+}
+function nameEmailCondition(term) {
+    const pattern = `%${escapeLikePattern(term.value)}%`;
+    const match = sql `(
+    COALESCE(${users.name}, '') LIKE ${pattern} ESCAPE '\\'
+    OR ${users.email} LIKE ${pattern} ESCAPE '\\'
+  )`;
+    return term.exclude ? not(match) : match;
+}
+//# sourceMappingURL=users-handler.js.map

package/dist/search/users-handler.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"users-handler.js","sourceRoot":"","sources":["../../src/search/users-handler.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,MAAM,gBAAgB,CAAC;AACpD,OAAO,EAAE,KAAK,EAAE,MAAM,uBAAuB,CAAC;AAC9C,OAAO,EACL,iBAAiB,EACjB,mBAAmB,GACpB,MAAM,yCAAyC,CAAC;AAEjD,+DAA+D;AAC/D,MAAM,aAAa,GAAG,GAAG,CAAC;AAE1B,qEAAqE;AACrE,+BAA+B;AAC/B,MAAM,WAAW,GAAG,EAAE,EAAE,EAAE,0BAA0B,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;AAEzE;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,KAAuB,EACvB,GAAe;IAEf,MAAM,MAAM,GAAG,mBAAmB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IAChD,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IACnC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,WAAW,CAAC;QAAE,OAAO,EAAE,CAAC;IAE1C,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,EAAE;SACtB,MAAM,CAAC,EAAE,EAAE,EAAE,KAAK,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC;SAC9D,IAAI,CAAC,KAAK,CAAC;SACX,KAAK,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC,CAAC;SAC7C,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;SACzB,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACtB,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IAEjC,OAAO;QACL;YACE,GAAG,EAAE,OAAO;YACZ,KAAK,EAAE,WAAW;YAClB,QAAQ,EAAE,aAAa;YACvB,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;gBACxB,EAAE,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;gBAClB,KAAK,EAAE,GAAG,CAAC,IAAI,IAAI,GAAG,CAAC,KAAK;gBAC5B,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAC7C,CAAC,CAAC;SACJ;KACF,CAAC;AACJ,CAAC;AAED,SAAS,kBAAkB,CAAC,IAAgB;IAC1C,MAAM,OAAO,GAAG,IAAI,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC;IACrD,MAAM,KAAK,GAAG,GAAG,CAAA;eACJ,KAAK,CAAC,IAAI,cAAc,OAAO;SACrC,KAAK,CAAC,KAAK,SAAS,OAAO;IAChC,CAAC;IACH,OAAO,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;AAC3C,CAAC"}

package/dist/seo/canonical.d.ts

@@ -0,0 +1,31 @@
+import type { AppContext } from "../context/app.js";
+import type { DocumentManifest } from "../theme.js";
+/**
+ * The single source of truth for a request's canonical URL: the configured
+ * site origin + the request path normalized to the fixed slash-less shape
+ * (query and fragment dropped so URL variants consolidate). Drives the
+ * `<link rel="canonical">` tag and the 301 normalizer + sitemap/og:url, so
+ * they can never disagree.
+ */
+export declare function canonicalUrl(ctx: AppContext): string;
+/**
+ * Paths the 301 normalizer must never touch: the root, the plumix surface, the
+ * SEO machine endpoints (robots, feeds), and asset/extension-like paths (a dot
+ * in the last segment — covers `sitemap*.xml`, `favicon.ico`, etc.). Everything
+ * else is a public page route whose shape we normalize.
+ */
+export declare function isCanonicalExempt(pathname: string): boolean;
+/**
+ * The canonical URL to 301-redirect this request to, or null when it's already
+ * canonical or exempt. Shares {@link canonicalUrl} with the `<link rel=canonical>`
+ * tag so the redirect target and the tag can never disagree; the query string
+ * is preserved, and an already-canonical path returns null (loop-safe).
+ */
+export declare function canonicalRedirectTarget(ctx: AppContext): string | null;
+/**
+ * Gap-filler: emit `<link rel="canonical">` only when neither the template nor
+ * a `render:document` subscriber already set one — so a higher layer's canonical
+ * always wins and the tag never duplicates.
+ */
+export declare function applyCanonical(manifest: DocumentManifest, ctx: AppContext): DocumentManifest;
+//# sourceMappingURL=canonical.d.ts.map

package/dist/seo/canonical.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"canonical.d.ts","sourceRoot":"","sources":["../../src/seo/canonical.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AACpD,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAcpD;;;;;;GAMG;AACH,wBAAgB,YAAY,CAAC,GAAG,EAAE,UAAU,GAAG,MAAM,CAKpD;AAED;;;;;GAKG;AACH,wBAAgB,iBAAiB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAS3D;AAED;;;;;GAKG;AACH,wBAAgB,uBAAuB,CAAC,GAAG,EAAE,UAAU,GAAG,MAAM,GAAG,IAAI,CAQtE;AAMD;;;;GAIG;AACH,wBAAgB,cAAc,CAC5B,QAAQ,EAAE,gBAAgB,EAC1B,GAAG,EAAE,UAAU,GACd,gBAAgB,CASlB"}