@pokoblog/next 1.0.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Disrex V.O.F.
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,214 @@
+# PokoBlog for Next.js
+
+Server components and metadata helpers for rendering a PokoBlog blog in the App
+Router. Built and tested against **Next.js 16.3**.
+
+## Installing
+
+```sh
+npm install @pokoblog/next
+```
+
+Peer dependencies: `next@^16`, `react@^19`.
+
+## Everything here runs on the server
+
+That is not a default this package picked; it is the product. These articles
+exist to be found by search engines and by AI crawlers, and GPTBot, ClaudeBot
+and PerplexityBot fetch HTML and read what comes back — they do not run
+JavaScript. A blog fetched in the browser after hydration is an empty div to all
+of them.
+
+So there is no `"use client"` anywhere in this package, no hook and no
+`useEffect`, and `./components` imports `server-only`: put these components in a
+client component and the **build fails** rather than shipping a blog nothing can
+read.
+
+## Setup
+
+```ts
+// lib/pokoblog.ts
+import { createPokoBlog } from "@pokoblog/next";
+
+export const poko = createPokoBlog({
+  url: process.env.POKOBLOG_URL!,
+  token: process.env.POKOBLOG_TOKEN!, // Connections → Embed
+});
+```
+
+`fetch` in Next 16 does not cache unless asked, so this asks: `revalidate`
+defaults to 300 seconds, matching the `max-age` PokoBlog sends. Pass
+`revalidate: false` with `tags` if you would rather cache indefinitely and drop
+it from a webhook route handler with `revalidateTag()`.
+
+## The blog index
+
+```tsx
+// app/blog/page.tsx
+import { ArticleList, blogMetadata } from "@pokoblog/next";
+
+import { poko } from "@/lib/pokoblog";
+
+import type { Metadata } from "next";
+
+export const metadata: Metadata = blogMetadata({
+  title: "Blog",
+  description: "Wat we schrijven over Magento.",
+});
+
+export default function BlogIndex() {
+  return <ArticleList client={poko} limit={20} />;
+}
+```
+
+One request. A card needs a title, an excerpt, a date and a picture, and the
+list carries all four — there is no call per article here and there must not be
+one.
+
+`ArticleList` renders semantic HTML with no styling and no class names of ours,
+because a blog index has to look like the site it is in. Pass `className`, or
+`renderItem` to replace the card entirely; the `<li>` and the paging stay ours.
+
+## One article, with its metadata
+
+```tsx
+// app/blog/[slug]/page.tsx
+import { notFound } from "next/navigation";
+
+import {
+  ArticleView,
+  articleMetadata,
+  PokoBlogNotFoundError,
+} from "@pokoblog/next";
+
+import { poko } from "@/lib/pokoblog";
+
+import type { Metadata } from "next";
+
+// `params` is a Promise in Next 16. Awaiting it is not optional.
+type Props = { params: Promise<{ slug: string }> };
+
+export async function generateMetadata({ params }: Props): Promise<Metadata> {
+  const { slug } = await params;
+
+  try {
+    return articleMetadata({
+      article: await poko.article(slug),
+      url: `https://example.com/blog/${slug}`,
+      siteName: "Example",
+      locale: "nl_NL",
+    });
+  } catch (failure) {
+    if (failure instanceof PokoBlogNotFoundError) return {};
+
+    throw failure;
+  }
+}
+
+export default async function ArticlePage({ params }: Props) {
+  const { slug } = await params;
+
+  try {
+    return <ArticleView article={await poko.article(slug)} />;
+  } catch (failure) {
+    if (failure instanceof PokoBlogNotFoundError) notFound();
+
+    throw failure;
+  }
+}
+```
+
+**Fetching the article twice costs one request.** `fetch` GETs with the same URL
+and options are memoised across `generateMetadata`, layouts and the page within
+one render pass. That is why this package hands you a function of an article
+rather than asking you to thread one from the metadata into the page.
+
+`articleMetadata` sets the title, the description, `og:type: article` with
+`article:published_time` and `article:modified_time`, the picture with the alt
+text the author wrote, and a Twitter card sized to whether there is a picture at
+all. It falls back from the meta description to the excerpt — they are different
+fields on purpose, but a page with no description at all gets whatever sentence
+a search engine picks out of the body.
+
+## Static generation
+
+```tsx
+export async function generateStaticParams() {
+  return (await poko.slugs()).map((slug) => ({ slug }));
+}
+```
+
+`slugs()` walks every page. The walk is a consistent snapshot: an article
+published while it runs lands in front of the walk and arrives on the next
+build.
+
+## Dropping the cache when PokoBlog publishes
+
+```ts
+// app/api/pokoblog/route.ts
+import { revalidateTag } from "next/cache";
+
+export async function POST(request: Request) {
+  const body = await request.text(); // raw bytes: the signature is over these
+
+  // Verify `Poko-Signature` before trusting this. `t=<unix>,v1=<hex>` is
+  // HMAC-SHA256 over `<t>.<body>`; compare with `crypto.timingSafeEqual`,
+  // never `===`, and refuse anything more than 300 seconds old.
+
+  revalidateTag("pokoblog", "max");
+
+  return new Response(null, { status: 204 });
+}
+```
+
+Create the client with `tags: ["pokoblog"]` for this to reach it.
+
+**The second argument is not optional in Next 16.** `revalidateTag(tag)` on its
+own is deprecated and does not type-check; `"max"` gives stale-while-revalidate,
+which is what a blog wants. `updateTag(tag)` expires the entry immediately
+instead, at the cost of making the next visitor wait for the refetch.
+
+## The body
+
+`ArticleView` renders `article.html` through `dangerouslySetInnerHTML`. That is
+correct here for a specific reason: `html` is the output of PokoBlog's allowlist
+renderer — a closed set of tags, every scrap of text escaped on the way in — and
+is the identical string PokoBlog writes into a WordPress post.
+
+**`markdown` is not interchangeable.** It is the unsanitized source and accepts
+raw HTML on purpose, because the renderer escapes it on the way out. Putting it
+through this prop, or through a markdown renderer with raw HTML enabled (which
+is most of them by default), undoes the sanitizing that has already happened.
+
+## Pictures
+
+The components use a plain `<img>`, not `next/image`, because `next/image`
+requires the article CDN's hostname in `images.remotePatterns` and a component
+that silently needed a config change would fail in your build with an error
+about a hostname rather than about this package. Once that host is configured,
+swap it in through `renderItem`.
+
+`imageAlt` is `null` when nobody wrote alt text, which is **not** the same as
+`alt=""`, and this package never substitutes the title — it describes the
+article, not the picture. The rendered `<img>` uses `alt=""` for the null case,
+which is the honest reading beside a heading carrying the same meaning; the
+metadata omits the attribute entirely.
+
+## The token
+
+The token is the **embed** connector's. Rotating it invalidates every URL built
+from the old one, and **disconnecting the embed connector switches this API off
+too** — the widget and the JSON API are the same connector row. Both arrive as a
+`PokoBlogNotFoundError`, which is deliberately indistinguishable from a slug
+that does not exist.
+
+## Tests
+
+```sh
+cd clients/nextjs && npx vitest run
+npx tsc --noEmit
+```
+
+The suite runs under the `react-server` resolve condition, which is how Next
+resolves a server component and the only way to load a module that imports
+`server-only` at all.

package/dist/client.d.ts

@@ -0,0 +1,94 @@
+import type { Article, ArticleBody, ArticlePage } from "./types.js";
+/**
+ * Reading a PokoBlog blog from a Next.js server component.
+ *
+ * ## Everything here runs on the server, and that is the product
+ *
+ * These articles exist to be found by search engines and by AI crawlers.
+ * GPTBot, ClaudeBot and PerplexityBot fetch HTML and read what comes back; they
+ * do not run JavaScript. A blog fetched in the browser after hydration is, to
+ * every one of them, an empty div -- which is the exact failure the embed
+ * widget has and the reason this package exists beside it.
+ *
+ * So there is no `"use client"` anywhere in this package, no hook, and no
+ * `useEffect`. The functions here are `async` and are meant to be awaited
+ * inside a server component, which is the App Router default: a component
+ * without `"use client"` renders on the server and its output is in the HTML.
+ * Nothing has to be configured to get that; it has to be *avoided* to lose it.
+ *
+ * The one way to lose it is to call these from a component that has
+ * `"use client"` at the top. `./components` imports `server-only` so that this
+ * fails the build instead of shipping a blog nothing can read.
+ *
+ * ## Caching
+ *
+ * `fetch` in Next 16 does not cache unless asked, so this asks: `revalidate`
+ * defaults to 300 seconds, matching the `max-age` PokoBlog itself sends. Two
+ * consequences worth knowing:
+ *
+ * - Two calls for the same URL in one render pass are **memoised** into one
+ *   request. That is what makes calling `article()` in both `generateMetadata`
+ *   and the page component free, and it is why this package does not ask you to
+ *   thread the article down from one to the other.
+ * - `tags` lets you drop the cache on demand with `revalidateTag()`, which is
+ *   what to call from a route handler receiving PokoBlog's publish webhook.
+ */
+/** The API's own default page size, and its ceiling. Outside 1..100 is a 422. */
+export declare const PAGE = 50;
+export declare const MAX_PAGE = 100;
+export interface PokoBlogOptions {
+    /** The origin PokoBlog is served from, e.g. `https://app.example.com`. */
+    readonly url: string;
+    /** The **embed** connector's token, from Connections → Embed. */
+    readonly token: string;
+    /**
+     * Seconds before a cached answer is refetched. `false` caches indefinitely,
+     * which is what a build that revalidates by tag wants; `0` disables caching.
+     */
+    readonly revalidate?: number | false;
+    /** Cache tags, for `revalidateTag()` from a webhook route handler. */
+    readonly tags?: readonly string[];
+    /** Swappable for tests. Defaults to the global `fetch`. */
+    readonly fetch?: typeof globalThis.fetch;
+}
+/** Something the API said no to. `code` is the stable part; branch on it. */
+export declare class PokoBlogError extends Error {
+    readonly status: number;
+    readonly code: string | null;
+    constructor(message: string, status: number, code: string | null);
+}
+/**
+ * The address reaches nothing.
+ *
+ * Deliberately ambiguous at the server and the ambiguity travels: a rotated
+ * token, a disconnected embed connector, a slug that is still a draft and a
+ * slug that never existed all answer this. That is what stops a stranger
+ * confirming a draft's address by asking for it.
+ *
+ * In a page, this is the one to turn into `notFound()`.
+ */
+export declare class PokoBlogNotFoundError extends PokoBlogError {
+    constructor(message: string, code: string | null);
+}
+export interface PokoBlogClient {
+    /** One page of articles, newest first. */
+    readonly page: (options?: {
+        readonly limit?: number;
+        readonly cursor?: string;
+    }) => Promise<ArticlePage>;
+    /** Every article, paging handled. Lazy: stop reading and it stops fetching. */
+    readonly articles: (options?: {
+        readonly perPage?: number;
+    }) => AsyncGenerator<Article, void, undefined>;
+    /** One article, body and all. */
+    readonly article: (slug: string) => Promise<ArticleBody>;
+    /** Every slug, for `generateStaticParams`. */
+    readonly slugs: () => Promise<string[]>;
+    readonly listUrl: (options?: {
+        readonly limit?: number;
+        readonly cursor?: string;
+    }) => string;
+    readonly articleUrl: (slug: string) => string;
+}
+export declare const createPokoBlog: ({ url, token, revalidate, tags, fetch: fetcher, }: PokoBlogOptions) => PokoBlogClient;
+//# sourceMappingURL=client.d.ts.map

package/dist/client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../src/client.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAY,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAE9E;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiCG;AAEH,iFAAiF;AACjF,eAAO,MAAM,IAAI,KAAK,CAAC;AACvB,eAAO,MAAM,QAAQ,MAAM,CAAC;AAE5B,MAAM,WAAW,eAAe;IAC9B,0EAA0E;IAC1E,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,iEAAiE;IACjE,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB;;;OAGG;IACH,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,GAAG,KAAK,CAAC;IACrC,sEAAsE;IACtE,QAAQ,CAAC,IAAI,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAClC,2DAA2D;IAC3D,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,UAAU,CAAC,KAAK,CAAC;CAC1C;AAED,6EAA6E;AAC7E,qBAAa,aAAc,SAAQ,KAAK;IACtC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IAE7B,YAAY,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,IAAI,EAK/D;CACF;AAED;;;;;;;;;GASG;AACH,qBAAa,qBAAsB,SAAQ,aAAa;IACtD,YAAY,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,IAAI,EAG/C;CACF;AAED,MAAM,WAAW,cAAc;IAC7B,0CAA0C;IAC1C,QAAQ,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,EAAE;QACxB,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;QACxB,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;KAC1B,KAAK,OAAO,CAAC,WAAW,CAAC,CAAC;IAC3B,+EAA+E;IAC/E,QAAQ,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,EAAE;QAC5B,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;KAC3B,KAAK,cAAc,CAAC,OAAO,EAAE,IAAI,EAAE,SAAS,CAAC,CAAC;IAC/C,iCAAiC;IACjC,QAAQ,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,WAAW,CAAC,CAAC;IACzD,8CAA8C;IAC9C,QAAQ,CAAC,KAAK,EAAE,MAAM,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;IACxC,QAAQ,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,EAAE;QAC3B,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;QACxB,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;KAC1B,KAAK,MAAM,CAAC;IACb,QAAQ,CAAC,UAAU,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,MAAM,CAAC;CAC/C;AAED,eAAO,MAAM,cAAc,sDAMxB,eAAe,KAAG,cAoHpB,CAAC"}

package/dist/client.js

@@ -0,0 +1,219 @@
+/**
+ * Reading a PokoBlog blog from a Next.js server component.
+ *
+ * ## Everything here runs on the server, and that is the product
+ *
+ * These articles exist to be found by search engines and by AI crawlers.
+ * GPTBot, ClaudeBot and PerplexityBot fetch HTML and read what comes back; they
+ * do not run JavaScript. A blog fetched in the browser after hydration is, to
+ * every one of them, an empty div -- which is the exact failure the embed
+ * widget has and the reason this package exists beside it.
+ *
+ * So there is no `"use client"` anywhere in this package, no hook, and no
+ * `useEffect`. The functions here are `async` and are meant to be awaited
+ * inside a server component, which is the App Router default: a component
+ * without `"use client"` renders on the server and its output is in the HTML.
+ * Nothing has to be configured to get that; it has to be *avoided* to lose it.
+ *
+ * The one way to lose it is to call these from a component that has
+ * `"use client"` at the top. `./components` imports `server-only` so that this
+ * fails the build instead of shipping a blog nothing can read.
+ *
+ * ## Caching
+ *
+ * `fetch` in Next 16 does not cache unless asked, so this asks: `revalidate`
+ * defaults to 300 seconds, matching the `max-age` PokoBlog itself sends. Two
+ * consequences worth knowing:
+ *
+ * - Two calls for the same URL in one render pass are **memoised** into one
+ *   request. That is what makes calling `article()` in both `generateMetadata`
+ *   and the page component free, and it is why this package does not ask you to
+ *   thread the article down from one to the other.
+ * - `tags` lets you drop the cache on demand with `revalidateTag()`, which is
+ *   what to call from a route handler receiving PokoBlog's publish webhook.
+ */
+/** The API's own default page size, and its ceiling. Outside 1..100 is a 422. */
+export const PAGE = 50;
+export const MAX_PAGE = 100;
+/** Something the API said no to. `code` is the stable part; branch on it. */
+export class PokoBlogError extends Error {
+    status;
+    code;
+    constructor(message, status, code) {
+        super(message);
+        this.name = "PokoBlogError";
+        this.status = status;
+        this.code = code;
+    }
+}
+/**
+ * The address reaches nothing.
+ *
+ * Deliberately ambiguous at the server and the ambiguity travels: a rotated
+ * token, a disconnected embed connector, a slug that is still a draft and a
+ * slug that never existed all answer this. That is what stops a stranger
+ * confirming a draft's address by asking for it.
+ *
+ * In a page, this is the one to turn into `notFound()`.
+ */
+export class PokoBlogNotFoundError extends PokoBlogError {
+    constructor(message, code) {
+        super(message, 404, code);
+        this.name = "PokoBlogNotFoundError";
+    }
+}
+export const createPokoBlog = ({ url, token, revalidate = 300, tags, fetch: fetcher = globalThis.fetch, }) => {
+    const base = url.replace(/\/+$/, "");
+    if (!/^https?:\/\//i.test(base)) {
+        throw new TypeError("PokoBlog: `url` must be an absolute http(s) address");
+    }
+    if (token.trim() === "") {
+        throw new TypeError("PokoBlog: `token` is empty");
+    }
+    const endpoint = (path) => `${base}/api/connectors/${encodeURIComponent(token)}/${path}`;
+    const listUrl = ({ limit = PAGE, cursor, } = {}) => {
+        const query = new URLSearchParams({ limit: String(limit) });
+        if (cursor !== undefined)
+            query.set("cursor", cursor);
+        return `${endpoint("articles")}?${query.toString()}`;
+    };
+    const articleUrl = (slug) => endpoint(`articles/${encodeURIComponent(slug)}`);
+    const read = async (target) => {
+        const response = await fetcher(target, {
+            headers: { accept: "application/json" },
+            /*
+             * `next` rather than `cache`, because the two conflict: Next ignores both
+             * and warns in development when a request sets `revalidate` beside
+             * `cache: "no-store"`. One knob, and `revalidate: 0` is how you turn
+             * caching off.
+             */
+            next: { revalidate, ...(tags ? { tags: [...tags] } : {}) },
+        });
+        if (!response.ok)
+            throw await failure(response);
+        /*
+         * A 200 whose body is not JSON is not a parse error, it is the wrong
+         * address answering: a captive portal, a login wall, a load balancer error
+         * page, a base URL with a typo in it. Left alone, the caller gets
+         * `Unexpected token '<'` from deep inside `Response.json`, which names
+         * neither the cause nor the URL -- and the URL is the answer almost every
+         * time.
+         */
+        try {
+            return (await response.json());
+        }
+        catch {
+            throw malformed("JSON");
+        }
+    };
+    const page = async (options) => asPage(await read(listUrl(options)));
+    async function* articles({ perPage = PAGE, } = {}) {
+        let cursor;
+        for (;;) {
+            const current = await page({
+                limit: perPage,
+                ...(cursor ? { cursor } : {}),
+            });
+            yield* current.articles;
+            if (current.nextCursor === null)
+                return;
+            /*
+             * A cursor that does not move is an infinite loop, and an infinite loop
+             * inside `generateStaticParams` is a build that never finishes. The API
+             * cannot produce one -- the cursor is built from the last row of the page
+             * -- which is exactly why it is checked rather than trusted: what sits
+             * between this and the API is a customer's CDN or a proxy.
+             */
+            if (current.nextCursor === cursor) {
+                throw new PokoBlogError("PokoBlog: the cursor did not advance; refusing to page forever", 200, null);
+            }
+            cursor = current.nextCursor;
+        }
+    }
+    return {
+        page,
+        articles,
+        article: async (slug) => asArticleBody(await read(articleUrl(slug))),
+        slugs: async () => {
+            const found = [];
+            for await (const article of articles({ perPage: MAX_PAGE })) {
+                found.push(article.slug);
+            }
+            return found;
+        },
+        listUrl,
+        articleUrl,
+    };
+};
+const failure = async (response) => {
+    /*
+     * Read defensively. A 502 usually comes from something in front of the API
+     * and its body is usually HTML, so a `json()` that throws must not replace
+     * the status the caller needs to see.
+     */
+    let body = {};
+    try {
+        body = (await response.json());
+    }
+    catch {
+        body = {};
+    }
+    const code = typeof body.code === "string" ? body.code : null;
+    const described = `PokoBlog answered ${response.status}${code ? ` (${code})` : ""}`;
+    return response.status === 404
+        ? new PokoBlogNotFoundError(described, code)
+        : new PokoBlogError(described, response.status, code);
+};
+/*
+ * Narrowing rather than casting.
+ *
+ * `as ArticlePage` would compile and would be a lie the moment anything but the
+ * API answers on that address -- a captive portal, a proxy error page, a base
+ * URL with a typo. The first symptom of the cast version is `articles.map is
+ * not a function` inside a render, which names neither the cause nor the URL.
+ */
+const isRecord = (value) => typeof value === "object" && value !== null && !Array.isArray(value);
+const malformed = (what) => new PokoBlogError(`PokoBlog: the response is not ${what}; check the base URL`, 200, null);
+const asArticle = (value) => {
+    if (!isRecord(value))
+        throw malformed("an article");
+    const { title, slug, excerpt, description, image, imageAlt, published, modified, } = value;
+    if (typeof title !== "string" ||
+        typeof slug !== "string" ||
+        typeof modified !== "string") {
+        throw malformed("an article");
+    }
+    return {
+        title,
+        slug,
+        excerpt: nullableString(excerpt),
+        description: nullableString(description),
+        image: nullableString(image),
+        imageAlt: nullableString(imageAlt),
+        published: nullableString(published),
+        modified,
+    };
+};
+const asArticleBody = (value) => {
+    if (!isRecord(value) || typeof value.html !== "string") {
+        throw malformed("an article with a body");
+    }
+    return {
+        ...asArticle(value),
+        html: value.html,
+        markdown: nullableString(value.markdown),
+    };
+};
+const asPage = (value) => {
+    if (!isRecord(value) || !Array.isArray(value.articles))
+        throw malformed("a listing");
+    const { nextCursor } = value;
+    if (nextCursor !== null && typeof nextCursor !== "string")
+        throw malformed("a listing");
+    return {
+        articles: value.articles.map(asArticle),
+        nextCursor,
+    };
+};
+const nullableString = (value) => typeof value === "string" ? value : null;
+//# sourceMappingURL=client.js.map

package/dist/client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.js","sourceRoot":"","sources":["../src/client.ts"],"names":[],"mappings":"AAEA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiCG;AAEH,iFAAiF;AACjF,MAAM,CAAC,MAAM,IAAI,GAAG,EAAE,CAAC;AACvB,MAAM,CAAC,MAAM,QAAQ,GAAG,GAAG,CAAC;AAkB5B,6EAA6E;AAC7E,MAAM,OAAO,aAAc,SAAQ,KAAK;IAC7B,MAAM,CAAS;IACf,IAAI,CAAgB;IAE7B,YAAY,OAAe,EAAE,MAAc,EAAE,IAAmB;QAC9D,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,eAAe,CAAC;QAC5B,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;IACnB,CAAC;CACF;AAED;;;;;;;;;GASG;AACH,MAAM,OAAO,qBAAsB,SAAQ,aAAa;IACtD,YAAY,OAAe,EAAE,IAAmB;QAC9C,KAAK,CAAC,OAAO,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;QAC1B,IAAI,CAAC,IAAI,GAAG,uBAAuB,CAAC;IACtC,CAAC;CACF;AAuBD,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,EAC7B,GAAG,EACH,KAAK,EACL,UAAU,GAAG,GAAG,EAChB,IAAI,EACJ,KAAK,EAAE,OAAO,GAAG,UAAU,CAAC,KAAK,GACjB,EAAkB,EAAE;IACpC,MAAM,IAAI,GAAG,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IAErC,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QAChC,MAAM,IAAI,SAAS,CAAC,qDAAqD,CAAC,CAAC;IAC7E,CAAC;IAED,IAAI,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;QACxB,MAAM,IAAI,SAAS,CAAC,4BAA4B,CAAC,CAAC;IACpD,CAAC;IAED,MAAM,QAAQ,GAAG,CAAC,IAAY,EAAE,EAAE,CAChC,GAAG,IAAI,mBAAmB,kBAAkB,CAAC,KAAK,CAAC,IAAI,IAAI,EAAE,CAAC;IAEhE,MAAM,OAAO,GAAG,CAAC,EACf,KAAK,GAAG,IAAI,EACZ,MAAM,GACP,GAA0D,EAAE,EAAE,EAAE;QAC/D,MAAM,KAAK,GAAG,IAAI,eAAe,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAE5D,IAAI,MAAM,KAAK,SAAS;YAAE,KAAK,CAAC,GAAG,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QAEtD,OAAO,GAAG,QAAQ,CAAC,UAAU,CAAC,IAAI,KAAK,CAAC,QAAQ,EAAE,EAAE,CAAC;IACvD,CAAC,CAAC;IAEF,MAAM,UAAU,GAAG,CAAC,IAAY,EAAE,EAAE,CAClC,QAAQ,CAAC,YAAY,kBAAkB,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAEnD,MAAM,IAAI,GAAG,KAAK,EAAE,MAAc,EAAoB,EAAE;QACtD,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,MAAM,EAAE;YACrC,OAAO,EAAE,EAAE,MAAM,EAAE,kBAAkB,EAAE;YACvC;;;;;eAKG;YACH,IAAI,EAAE,EAAE,UAAU,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,GAAG,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE;SAC3D,CAAC,CAAC;QAEH,IAAI,CAAC,QAAQ,CAAC,EAAE;YAAE,MAAM,MAAM,OAAO,CAAC,QAAQ,CAAC,CAAC;QAEhD;;;;;;;WAOG;QACH,IAAI,CAAC;YACH,OAAO,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAY,CAAC;QAC5C,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,SAAS,CAAC,MAAM,CAAC,CAAC;QAC1B,CAAC;IACH,CAAC,CAAC;IAEF,MAAM,IAAI,GAAG,KAAK,EAAE,OAGnB,EAAwB,EAAE,CAAC,MAAM,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;IAEjE,KAAK,SAAS,CAAC,CAAC,QAAQ,CAAC,EACvB,OAAO,GAAG,IAAI,GACf,GAAkC,EAAE;QAKnC,IAAI,MAA0B,CAAC;QAE/B,SAAS,CAAC;YACR,MAAM,OAAO,GAAgB,MAAM,IAAI,CAAC;gBACtC,KAAK,EAAE,OAAO;gBACd,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAC9B,CAAC,CAAC;YAEH,KAAK,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC;YAExB,IAAI,OAAO,CAAC,UAAU,KAAK,IAAI;gBAAE,OAAO;YAExC;;;;;;eAMG;YACH,IAAI,OAAO,CAAC,UAAU,KAAK,MAAM,EAAE,CAAC;gBAClC,MAAM,IAAI,aAAa,CACrB,gEAAgE,EAChE,GAAG,EACH,IAAI,CACL,CAAC;YACJ,CAAC;YAED,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC;QAC9B,CAAC;IACH,CAAC;IAED,OAAO;QACL,IAAI;QACJ,QAAQ;QACR,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,aAAa,CAAC,MAAM,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC;QACpE,KAAK,EAAE,KAAK,IAAI,EAAE;YAChB,MAAM,KAAK,GAAa,EAAE,CAAC;YAE3B,IAAI,KAAK,EAAE,MAAM,OAAO,IAAI,QAAQ,CAAC,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC;gBAC5D,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;YAC3B,CAAC;YAED,OAAO,KAAK,CAAC;QACf,CAAC;QACD,OAAO;QACP,UAAU;KACX,CAAC;AACJ,CAAC,CAAC;AAEF,MAAM,OAAO,GAAG,KAAK,EAAE,QAAkB,EAA0B,EAAE;IACnE;;;;OAIG;IACH,IAAI,IAAI,GAAsB,EAAE,CAAC;IAEjC,IAAI,CAAC;QACH,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAsB,CAAC;IACtD,CAAC;IAAC,MAAM,CAAC;QACP,IAAI,GAAG,EAAE,CAAC;IACZ,CAAC;IAED,MAAM,IAAI,GAAG,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;IAC9D,MAAM,SAAS,GAAG,qBAAqB,QAAQ,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;IAEpF,OAAO,QAAQ,CAAC,MAAM,KAAK,GAAG;QAC5B,CAAC,CAAC,IAAI,qBAAqB,CAAC,SAAS,EAAE,IAAI,CAAC;QAC5C,CAAC,CAAC,IAAI,aAAa,CAAC,SAAS,EAAE,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;AAC1D,CAAC,CAAC;AAEF;;;;;;;GAOG;AACH,MAAM,QAAQ,GAAG,CAAC,KAAc,EAAoC,EAAE,CACpE,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAEvE,MAAM,SAAS,GAAG,CAAC,IAAY,EAAE,EAAE,CACjC,IAAI,aAAa,CACf,iCAAiC,IAAI,sBAAsB,EAC3D,GAAG,EACH,IAAI,CACL,CAAC;AAEJ,MAAM,SAAS,GAAG,CAAC,KAAc,EAAW,EAAE;IAC5C,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,MAAM,SAAS,CAAC,YAAY,CAAC,CAAC;IAEpD,MAAM,EACJ,KAAK,EACL,IAAI,EACJ,OAAO,EACP,WAAW,EACX,KAAK,EACL,QAAQ,EACR,SAAS,EACT,QAAQ,GACT,GAAG,KAAK,CAAC;IAEV,IACE,OAAO,KAAK,KAAK,QAAQ;QACzB,OAAO,IAAI,KAAK,QAAQ;QACxB,OAAO,QAAQ,KAAK,QAAQ,EAC5B,CAAC;QACD,MAAM,SAAS,CAAC,YAAY,CAAC,CAAC;IAChC,CAAC;IAED,OAAO;QACL,KAAK;QACL,IAAI;QACJ,OAAO,EAAE,cAAc,CAAC,OAAO,CAAC;QAChC,WAAW,EAAE,cAAc,CAAC,WAAW,CAAC;QACxC,KAAK,EAAE,cAAc,CAAC,KAAK,CAAC;QAC5B,QAAQ,EAAE,cAAc,CAAC,QAAQ,CAAC;QAClC,SAAS,EAAE,cAAc,CAAC,SAAS,CAAC;QACpC,QAAQ;KACT,CAAC;AACJ,CAAC,CAAC;AAEF,MAAM,aAAa,GAAG,CAAC,KAAc,EAAe,EAAE;IACpD,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;QACvD,MAAM,SAAS,CAAC,wBAAwB,CAAC,CAAC;IAC5C,CAAC;IAED,OAAO;QACL,GAAG,SAAS,CAAC,KAAK,CAAC;QACnB,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,QAAQ,EAAE,cAAc,CAAC,KAAK,CAAC,QAAQ,CAAC;KACzC,CAAC;AACJ,CAAC,CAAC;AAEF,MAAM,MAAM,GAAG,CAAC,KAAc,EAAe,EAAE;IAC7C,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC;QACpD,MAAM,SAAS,CAAC,WAAW,CAAC,CAAC;IAE/B,MAAM,EAAE,UAAU,EAAE,GAAG,KAAK,CAAC;IAE7B,IAAI,UAAU,KAAK,IAAI,IAAI,OAAO,UAAU,KAAK,QAAQ;QACvD,MAAM,SAAS,CAAC,WAAW,CAAC,CAAC;IAE/B,OAAO;QACL,QAAQ,EAAE,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC;QACvC,UAAU;KACX,CAAC;AACJ,CAAC,CAAC;AAEF,MAAM,cAAc,GAAG,CAAC,KAAc,EAAiB,EAAE,CACvD,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC"}

package/dist/components.d.ts

@@ -0,0 +1,84 @@
+import "server-only";
+import type { PokoBlogClient } from "./client.js";
+import type { Article, ArticleBody } from "./types.js";
+import type { ReactNode } from "react";
+/**
+ * Server components that put a blog in the HTML.
+ *
+ * ## `import "server-only"` is the whole point of this file
+ *
+ * Everything below could be written as a client component that fetches after
+ * hydration, and it would look identical in a browser and be worthless. AI
+ * crawlers -- GPTBot, ClaudeBot, PerplexityBot -- fetch HTML and read what
+ * comes back; they do not run JavaScript. A blog assembled after load is an
+ * empty div to every one of them, which defeats the reason these articles are
+ * written.
+ *
+ * A comment asking people not to do that would be a comment. `server-only`
+ * makes it a build error: put `"use client"` at the top of a file that imports
+ * this one and the build fails with React's own message instead of shipping a
+ * blog nothing can read.
+ *
+ * ## The markup is deliberately plain
+ *
+ * Semantic HTML, no styling, no class names of ours. A blog index is the part
+ * of a customer's site that has to look like their site, and a component with
+ * opinions about that is a component people copy out of the package and edit --
+ * at which point they own the paging, the dates and the alt text too.
+ *
+ * The parts that are *not* left to the caller are the ones with a correct
+ * answer: `<time dateTime>` in a machine-readable format, alt text that is
+ * absent rather than invented, and `html` rather than `markdown` in the body.
+ * `renderItem` is there for when the rest is not enough.
+ */
+export interface ArticleListProps {
+    readonly client: PokoBlogClient;
+    /** How many to show. Defaults to the API's page size of 50. */
+    readonly limit?: number;
+    /** Where an article lives on your site. Defaults to `/blog/<slug>`. */
+    readonly href?: (article: Article) => string;
+    /** Replace the whole card. The `<li>` is still ours. */
+    readonly renderItem?: (article: Article) => ReactNode;
+    /** Rendered instead of an empty `<ul>` when there are no articles. */
+    readonly empty?: ReactNode;
+    readonly className?: string;
+}
+/**
+ * The blog index, in the HTML of the response.
+ *
+ * One request: a card needs a title, an excerpt, a date and a picture, and the
+ * list carries all four. There is no per-article call here and there must not
+ * be one -- twenty bodies is a megabyte nobody asked for.
+ */
+export declare function ArticleList({ client, limit, href, renderItem, empty, className, }: ArticleListProps): Promise<import("react").JSX.Element>;
+export interface ArticleViewProps {
+    readonly article: ArticleBody;
+    readonly className?: string;
+    /** Rendered above the body, after the heading. */
+    readonly children?: ReactNode;
+}
+/**
+ * One article, body and all, in the HTML of the response.
+ *
+ * Takes the article rather than fetching it, because the page around it needs
+ * the same article for `generateMetadata` and passing it in makes that obvious.
+ * (Fetching it here twice would in fact cost one request -- Next memoises `GET`
+ * fetches within a render pass -- but a component that quietly relied on that
+ * would break the moment somebody wrapped it in a cache with a different key.)
+ *
+ * ## `dangerouslySetInnerHTML`
+ *
+ * Named alarmingly and correct here, and the reason is specific rather than
+ * general. `html` is the output of PokoBlog's allowlist renderer: a closed set
+ * of tags with every scrap of text escaped on the way in, and it is the
+ * identical string PokoBlog writes into a WordPress `wp_posts` row. Rendering
+ * it is the intended use.
+ *
+ * `markdown` is **not** interchangeable here. It is the unsanitized source and
+ * accepts raw HTML on purpose, because the renderer escapes it on the way out.
+ * Putting `markdown` through this prop -- or through a markdown renderer with
+ * raw HTML enabled, which is most of them by default -- undoes the sanitizing
+ * this field exists to have already done.
+ */
+export declare function ArticleView({ article, className, children, }: ArticleViewProps): import("react").JSX.Element;
+//# sourceMappingURL=components.d.ts.map

package/dist/components.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"components.d.ts","sourceRoot":"","sources":["../src/components.tsx"],"names":[],"mappings":"AAAA,OAAO,aAAa,CAAC;AACrB,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAClD,OAAO,KAAK,EAAE,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AACvD,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,OAAO,CAAC;AAEvC;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AAEH,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,MAAM,EAAE,cAAc,CAAC;IAChC,+DAA+D;IAC/D,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,uEAAuE;IACvE,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,OAAO,KAAK,MAAM,CAAC;IAC7C,wDAAwD;IACxD,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC,OAAO,EAAE,OAAO,KAAK,SAAS,CAAC;IACtD,sEAAsE;IACtE,QAAQ,CAAC,KAAK,CAAC,EAAE,SAAS,CAAC;IAC3B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;CAC7B;AAED;;;;;;GAMG;AACH,wBAAsB,WAAW,CAAC,EAChC,MAAM,EACN,KAAK,EACL,IAA2C,EAC3C,UAAU,EACV,KAAK,EACL,SAAS,GACV,EAAE,gBAAgB,wCA0ClB;AAED,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,OAAO,EAAE,WAAW,CAAC;IAC9B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,kDAAkD;IAClD,QAAQ,CAAC,QAAQ,CAAC,EAAE,SAAS,CAAC;CAC/B;AAED;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,wBAAgB,WAAW,CAAC,EAC1B,OAAO,EACP,SAAS,EACT,QAAQ,GACT,EAAE,gBAAgB,+BAalB"}

package/dist/components.js

@@ -0,0 +1,60 @@
+import { Fragment as _Fragment, jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
+import "server-only";
+/**
+ * The blog index, in the HTML of the response.
+ *
+ * One request: a card needs a title, an excerpt, a date and a picture, and the
+ * list carries all four. There is no per-article call here and there must not
+ * be one -- twenty bodies is a megabyte nobody asked for.
+ */
+export async function ArticleList({ client, limit, href = (article) => `/blog/${article.slug}`, renderItem, empty, className, }) {
+    const { articles } = await client.page(limit === undefined ? {} : { limit });
+    if (articles.length === 0 && empty !== undefined)
+        return _jsx(_Fragment, { children: empty });
+    return (_jsx("ul", { className: className, children: articles.map((article) => (_jsx("li", { children: renderItem ? (renderItem(article)) : (_jsxs("article", { children: [article.image ? (_jsx("img", { src: article.image, alt: article.imageAlt ?? "" })) : null, _jsx("h2", { children: _jsx("a", { href: href(article), children: article.title }) }), _jsx(PublishedAt, { article: article }), article.excerpt ? _jsx("p", { children: article.excerpt }) : null] })) }, article.slug))) }));
+}
+/**
+ * One article, body and all, in the HTML of the response.
+ *
+ * Takes the article rather than fetching it, because the page around it needs
+ * the same article for `generateMetadata` and passing it in makes that obvious.
+ * (Fetching it here twice would in fact cost one request -- Next memoises `GET`
+ * fetches within a render pass -- but a component that quietly relied on that
+ * would break the moment somebody wrapped it in a cache with a different key.)
+ *
+ * ## `dangerouslySetInnerHTML`
+ *
+ * Named alarmingly and correct here, and the reason is specific rather than
+ * general. `html` is the output of PokoBlog's allowlist renderer: a closed set
+ * of tags with every scrap of text escaped on the way in, and it is the
+ * identical string PokoBlog writes into a WordPress `wp_posts` row. Rendering
+ * it is the intended use.
+ *
+ * `markdown` is **not** interchangeable here. It is the unsanitized source and
+ * accepts raw HTML on purpose, because the renderer escapes it on the way out.
+ * Putting `markdown` through this prop -- or through a markdown renderer with
+ * raw HTML enabled, which is most of them by default -- undoes the sanitizing
+ * this field exists to have already done.
+ */
+export function ArticleView({ article, className, children, }) {
+    return (_jsxs("article", { className: className, children: [_jsx("h1", { children: article.title }), _jsx(PublishedAt, { article: article }), article.image ? (_jsx("img", { src: article.image, alt: article.imageAlt ?? "" })) : null, children, _jsx("div", { dangerouslySetInnerHTML: { __html: article.html } })] }));
+}
+/**
+ * `<time dateTime="2026-08-25">25 augustus 2026</time>`, or nothing.
+ *
+ * The attribute is the machine-readable half and is what a crawler reads; the
+ * text is for a person. Both, or the date is only half published -- and the
+ * attribute is the ten-character date rather than the full instant, because
+ * that is the form `<time>` is defined for and the one search engines parse
+ * most reliably.
+ *
+ * `published` is null for an article with no publish date, and a `<time>` with
+ * an empty `dateTime` is invalid markup, so there is nothing to render.
+ */
+function PublishedAt({ article }) {
+    if (article.published === null)
+        return null;
+    const date = article.published.slice(0, 10);
+    return _jsx("time", { dateTime: date, children: date });
+}
+//# sourceMappingURL=components.js.map

package/dist/components.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"components.js","sourceRoot":"","sources":["../src/components.tsx"],"names":[],"mappings":";AAAA,OAAO,aAAa,CAAC;AAgDrB;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,EAChC,MAAM,EACN,KAAK,EACL,IAAI,GAAG,CAAC,OAAO,EAAE,EAAE,CAAC,SAAS,OAAO,CAAC,IAAI,EAAE,EAC3C,UAAU,EACV,KAAK,EACL,SAAS,GACQ;IACjB,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;IAE7E,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,4BAAG,KAAK,GAAI,CAAC;IAEtE,OAAO,CACL,aAAI,SAAS,EAAE,SAAS,YACrB,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CACzB,uBACG,UAAU,CAAC,CAAC,CAAC,CACZ,UAAU,CAAC,OAAO,CAAC,CACpB,CAAC,CAAC,CAAC,CACF,8BACG,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAgBf,cAAK,GAAG,EAAE,OAAO,CAAC,KAAK,EAAE,GAAG,EAAE,OAAO,CAAC,QAAQ,IAAI,EAAE,GAAI,CACzD,CAAC,CAAC,CAAC,IAAI,EACR,uBACE,YAAG,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,YAAG,OAAO,CAAC,KAAK,GAAK,GACxC,EACL,KAAC,WAAW,IAAC,OAAO,EAAE,OAAO,GAAI,EAChC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,sBAAI,OAAO,CAAC,OAAO,GAAK,CAAC,CAAC,CAAC,IAAI,IAC1C,CACX,IA7BM,OAAO,CAAC,IAAI,CA8BhB,CACN,CAAC,GACC,CACN,CAAC;AACJ,CAAC;AASD;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,MAAM,UAAU,WAAW,CAAC,EAC1B,OAAO,EACP,SAAS,EACT,QAAQ,GACS;IACjB,OAAO,CACL,mBAAS,SAAS,EAAE,SAAS,aAC3B,uBAAK,OAAO,CAAC,KAAK,GAAM,EACxB,KAAC,WAAW,IAAC,OAAO,EAAE,OAAO,GAAI,EAChC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAEf,cAAK,GAAG,EAAE,OAAO,CAAC,KAAK,EAAE,GAAG,EAAE,OAAO,CAAC,QAAQ,IAAI,EAAE,GAAI,CACzD,CAAC,CAAC,CAAC,IAAI,EACP,QAAQ,EACT,cAAK,uBAAuB,EAAE,EAAE,MAAM,EAAE,OAAO,CAAC,IAAI,EAAE,GAAI,IAClD,CACX,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;GAWG;AACH,SAAS,WAAW,CAAC,EAAE,OAAO,EAAiC;IAC7D,IAAI,OAAO,CAAC,SAAS,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAE5C,MAAM,IAAI,GAAG,OAAO,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAE5C,OAAO,eAAM,QAAQ,EAAE,IAAI,YAAG,IAAI,GAAQ,CAAC;AAC7C,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,8 @@
+export { createPokoBlog, PokoBlogError, PokoBlogNotFoundError, MAX_PAGE, PAGE, } from "./client.js";
+export { ArticleList, ArticleView } from "./components.js";
+export { articleMetadata, blogMetadata } from "./metadata.js";
+export type { PokoBlogClient, PokoBlogOptions } from "./client.js";
+export type { ArticleListProps, ArticleViewProps } from "./components.js";
+export type { ArticleMetadataOptions, BlogMetadataOptions, } from "./metadata.js";
+export type { ApiError, Article, ArticleBody, ArticlePage } from "./types.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,cAAc,EACd,aAAa,EACb,qBAAqB,EACrB,QAAQ,EACR,IAAI,GACL,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AAC3D,OAAO,EAAE,eAAe,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAE9D,YAAY,EAAE,cAAc,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AACnE,YAAY,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AAC1E,YAAY,EACV,sBAAsB,EACtB,mBAAmB,GACpB,MAAM,eAAe,CAAC;AACvB,YAAY,EAAE,QAAQ,EAAE,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC"}

package/dist/index.js

@@ -0,0 +1,4 @@
+export { createPokoBlog, PokoBlogError, PokoBlogNotFoundError, MAX_PAGE, PAGE, } from "./client.js";
+export { ArticleList, ArticleView } from "./components.js";
+export { articleMetadata, blogMetadata } from "./metadata.js";
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,cAAc,EACd,aAAa,EACb,qBAAqB,EACrB,QAAQ,EACR,IAAI,GACL,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AAC3D,OAAO,EAAE,eAAe,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC"}

package/dist/metadata.d.ts

@@ -0,0 +1,51 @@
+import type { Article, ArticleBody } from "./types.js";
+import type { Metadata } from "next";
+/**
+ * The `<head>` for one article, built from the article.
+ *
+ * ## Why this is not a component
+ *
+ * Metadata in the App Router is a returned object, not markup. Next resolves
+ * `generateMetadata` as part of rendering the page and puts the tags in the
+ * **initial HTML** -- which is the only version a crawler that does not run
+ * JavaScript will ever see, and those are the crawlers this product is for. A
+ * component rendering `<meta>` tags into the body would not be in the head, and
+ * a client component setting `document.title` would not be in the response at
+ * all.
+ *
+ * ## Calling it costs nothing extra
+ *
+ * `generateMetadata` and the page component both need the article, and both
+ * fetching it is the obvious worry. It is not one: `fetch` GETs with the same
+ * URL and options are memoised across `generateMetadata`, layouts and the page
+ * within a single render pass, so the second call is the first call's result.
+ * That is why this package hands you a function of an article rather than
+ * asking you to thread one down from the metadata into the page.
+ */
+export interface ArticleMetadataOptions {
+    /** The article. Either shape -- the body is not used. */
+    readonly article: Article | ArticleBody;
+    /**
+     * The canonical address of this page on *your* site.
+     *
+     * Absolute, or relative to the `metadataBase` in your root layout. Worth
+     * passing: it is what stops the same article being indexed separately under
+     * every query string that reaches it.
+     */
+    readonly url?: string;
+    /** Your site's name, for `og:site_name`. */
+    readonly siteName?: string;
+    /** e.g. `"nl_NL"`. */
+    readonly locale?: string;
+}
+export declare const articleMetadata: ({ article, url, siteName, locale, }: ArticleMetadataOptions) => Metadata;
+export interface BlogMetadataOptions {
+    readonly title: string;
+    readonly description?: string;
+    readonly url?: string;
+    readonly siteName?: string;
+    readonly locale?: string;
+}
+/** The `<head>` for the index page. `website`, not `article`. */
+export declare const blogMetadata: ({ title, description, url, siteName, locale, }: BlogMetadataOptions) => Metadata;
+//# sourceMappingURL=metadata.d.ts.map

package/dist/metadata.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"metadata.d.ts","sourceRoot":"","sources":["../src/metadata.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AACvD,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,MAAM,CAAC;AAErC;;;;;;;;;;;;;;;;;;;;;GAqBG;AAEH,MAAM,WAAW,sBAAsB;IACrC,yDAAyD;IACzD,QAAQ,CAAC,OAAO,EAAE,OAAO,GAAG,WAAW,CAAC;IACxC;;;;;;OAMG;IACH,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC;IACtB,4CAA4C;IAC5C,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,sBAAsB;IACtB,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED,eAAO,MAAM,eAAe,wCAKzB,sBAAsB,KAAG,QAgE3B,CAAC;AAEF,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED,iEAAiE;AACjE,eAAO,MAAM,YAAY,mDAMtB,mBAAmB,KAAG,QAYvB,CAAC"}

package/dist/metadata.js

@@ -0,0 +1,78 @@
+export const articleMetadata = ({ article, url, siteName, locale, }) => {
+    /*
+     * The meta description if there is one, the excerpt if there is not.
+     *
+     * They are different fields on purpose -- the description is written for a
+     * search result and the excerpt is the line under a title in a list -- so
+     * this is a fallback and not an equivalence. It exists because the failure it
+     * prevents is worse than the imprecision it accepts: a page with no
+     * description at all gets whatever sentence the search engine picks out of
+     * the body, and for an article whose first line is a heading that is usually
+     * the heading.
+     */
+    const description = article.description ?? article.excerpt ?? undefined;
+    /*
+     * The alt travels with the image and is not invented when it is missing.
+     *
+     * `imageAlt: null` means nobody has written alt text, which is not the same
+     * as `alt=""`. Substituting the title here would describe the article rather
+     * than the picture, in the one place a screen reader is most likely to read
+     * it out.
+     */
+    const images = article.image
+        ? [
+            {
+                url: article.image,
+                ...(article.imageAlt === null ? {} : { alt: article.imageAlt }),
+            },
+        ]
+        : undefined;
+    return {
+        title: article.title,
+        ...(description ? { description } : {}),
+        ...(url ? { alternates: { canonical: url } } : {}),
+        openGraph: {
+            /*
+             * `article`, not `website`. It is what carries `article:published_time`
+             * and `article:modified_time`, and those are how a reader -- or a model
+             * summarising the page -- knows whether they are looking at something
+             * from this week or from 2019.
+             */
+            type: "article",
+            title: article.title,
+            ...(description ? { description } : {}),
+            ...(url ? { url } : {}),
+            ...(siteName ? { siteName } : {}),
+            ...(locale ? { locale } : {}),
+            ...(article.published ? { publishedTime: article.published } : {}),
+            modifiedTime: article.modified,
+            ...(images ? { images } : {}),
+        },
+        twitter: {
+            /*
+             * `summary_large_image` when there is a picture and `summary` when there
+             * is not. Claiming the large card without an image gets a card with a
+             * blank rectangle where the picture should be.
+             */
+            card: article.image ? "summary_large_image" : "summary",
+            title: article.title,
+            ...(description ? { description } : {}),
+            ...(images ? { images } : {}),
+        },
+    };
+};
+/** The `<head>` for the index page. `website`, not `article`. */
+export const blogMetadata = ({ title, description, url, siteName, locale, }) => ({
+    title,
+    ...(description ? { description } : {}),
+    ...(url ? { alternates: { canonical: url } } : {}),
+    openGraph: {
+        type: "website",
+        title,
+        ...(description ? { description } : {}),
+        ...(url ? { url } : {}),
+        ...(siteName ? { siteName } : {}),
+        ...(locale ? { locale } : {}),
+    },
+});
+//# sourceMappingURL=metadata.js.map

package/dist/metadata.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"metadata.js","sourceRoot":"","sources":["../src/metadata.ts"],"names":[],"mappings":"AA2CA,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,EAC9B,OAAO,EACP,GAAG,EACH,QAAQ,EACR,MAAM,GACiB,EAAY,EAAE;IACrC;;;;;;;;;;OAUG;IACH,MAAM,WAAW,GAAG,OAAO,CAAC,WAAW,IAAI,OAAO,CAAC,OAAO,IAAI,SAAS,CAAC;IAExE;;;;;;;OAOG;IACH,MAAM,MAAM,GAAG,OAAO,CAAC,KAAK;QAC1B,CAAC,CAAC;YACE;gBACE,GAAG,EAAE,OAAO,CAAC,KAAK;gBAClB,GAAG,CAAC,OAAO,CAAC,QAAQ,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC,QAAQ,EAAE,CAAC;aAChE;SACF;QACH,CAAC,CAAC,SAAS,CAAC;IAEd,OAAO;QACL,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACvC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,EAAE,SAAS,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAClD,SAAS,EAAE;YACT;;;;;eAKG;YACH,IAAI,EAAE,SAAS;YACf,KAAK,EAAE,OAAO,CAAC,KAAK;YACpB,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACvC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACvB,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACjC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC7B,GAAG,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAClE,YAAY,EAAE,OAAO,CAAC,QAAQ;YAC9B,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC9B;QACD,OAAO,EAAE;YACP;;;;eAIG;YACH,IAAI,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,SAAS;YACvD,KAAK,EAAE,OAAO,CAAC,KAAK;YACpB,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACvC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC9B;KACF,CAAC;AACJ,CAAC,CAAC;AAUF,iEAAiE;AACjE,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,EAC3B,KAAK,EACL,WAAW,EACX,GAAG,EACH,QAAQ,EACR,MAAM,GACc,EAAY,EAAE,CAAC,CAAC;IACpC,KAAK;IACL,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IACvC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,EAAE,SAAS,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IAClD,SAAS,EAAE;QACT,IAAI,EAAE,SAAS;QACf,KAAK;QACL,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACvC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACvB,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACjC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC9B;CACF,CAAC,CAAC"}

package/dist/types.d.ts

@@ -0,0 +1,64 @@
+/**
+ * The shapes `GET /api/connectors/:token/articles` actually answers with.
+ *
+ * Written from responses that were recorded off the running API rather than
+ * from the server's own types: a type copied across agrees with the server it
+ * was copied from and with nothing else, and the day the two repositories drift
+ * is the day the copy stops being a check on anything.
+ *
+ * Every field is `readonly`. These objects come out of a network response and
+ * nothing downstream has any business editing one in place -- a component that
+ * did would be editing an object another component is also rendering, since a
+ * `fetch` inside one render pass is memoised and hands the same value to
+ * everybody who asked.
+ */
+/** One published article, as the list answers. No body -- see {@link ArticleBody}. */
+export interface Article {
+    readonly title: string;
+    readonly slug: string;
+    /** The line under the title in a list. Not the meta description. */
+    readonly excerpt: string | null;
+    /** The sentence written for a search result. Not the excerpt. */
+    readonly description: string | null;
+    readonly image: string | null;
+    /**
+     * The alt text, and `null` when there is none.
+     *
+     * `null` is not `alt=""`. The empty string tells a screen reader the picture
+     * is decoration, which is a claim the article's author did not make. Decide
+     * once, in your own component, what to do when it is null.
+     */
+    readonly imageAlt: string | null;
+    /** ISO 8601, UTC. */
+    readonly published: string | null;
+    /** ISO 8601, UTC. The row's last write, which a publish also moves. */
+    readonly modified: string;
+}
+/**
+ * One article with its body.
+ *
+ * **`html` is the field to render.** It is the output of PokoBlog's allowlist
+ * renderer and is the identical string PokoBlog writes into a WordPress post.
+ *
+ * **`markdown` is the source and it is not sanitized.** It is here for
+ * consumers that genuinely re-render -- an MDX pipeline, a native app, a search
+ * index -- and any renderer pointed at it must have raw HTML disabled. It is
+ * `null` for an article written before the field existed.
+ */
+export interface ArticleBody extends Article {
+    readonly html: string;
+    readonly markdown: string | null;
+}
+/** One page of the list, and where the next one starts. */
+export interface ArticlePage {
+    readonly articles: readonly Article[];
+    /** `null` on the last page, and never absent. */
+    readonly nextCursor: string | null;
+}
+/** The error body every non-2xx on this API carries. */
+export interface ApiError {
+    readonly code: string;
+    readonly message: string;
+    readonly status: number;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,sFAAsF;AACtF,MAAM,WAAW,OAAO;IACtB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,oEAAoE;IACpE,QAAQ,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,iEAAiE;IACjE,QAAQ,CAAC,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IACpC,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B;;;;;;OAMG;IACH,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,qBAAqB;IACrB,QAAQ,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IAClC,uEAAuE;IACvE,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;CAC3B;AAED;;;;;;;;;;GAUG;AACH,MAAM,WAAW,WAAY,SAAQ,OAAO;IAC1C,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;CAClC;AAED,2DAA2D;AAC3D,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,QAAQ,EAAE,SAAS,OAAO,EAAE,CAAC;IACtC,iDAAiD;IACjD,QAAQ,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;CACpC;AAED,wDAAwD;AACxD,MAAM,WAAW,QAAQ;IACvB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB"}

package/dist/types.js

@@ -0,0 +1,16 @@
+/**
+ * The shapes `GET /api/connectors/:token/articles` actually answers with.
+ *
+ * Written from responses that were recorded off the running API rather than
+ * from the server's own types: a type copied across agrees with the server it
+ * was copied from and with nothing else, and the day the two repositories drift
+ * is the day the copy stops being a check on anything.
+ *
+ * Every field is `readonly`. These objects come out of a network response and
+ * nothing downstream has any business editing one in place -- a component that
+ * did would be editing an object another component is also rendering, since a
+ * `fetch` inside one render pass is memoised and hands the same value to
+ * everybody who asked.
+ */
+export {};
+//# sourceMappingURL=types.js.map

package/dist/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG"}

package/package.json

@@ -0,0 +1,49 @@
+{
+  "name": "@pokoblog/next",
+  "version": "1.0.0",
+  "description": "Server components and metadata helpers for rendering a PokoBlog blog in Next.js.",
+  "license": "MIT",
+  "files": [
+    "dist"
+  ],
+  "type": "module",
+  "sideEffects": false,
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "default": "./dist/index.js"
+    },
+    "./client": {
+      "types": "./dist/client.d.ts",
+      "default": "./dist/client.js"
+    },
+    "./metadata": {
+      "types": "./dist/metadata.d.ts",
+      "default": "./dist/metadata.js"
+    }
+  },
+  "scripts": {
+    "build": "tsc -p tsconfig.build.json",
+    "test": "vitest run",
+    "typecheck": "tsc --noEmit",
+    "prepublishOnly": "npm run build"
+  },
+  "dependencies": {
+    "server-only": "0.0.1"
+  },
+  "peerDependencies": {
+    "next": "^16.0.0",
+    "react": "^19.0.0"
+  },
+  "devDependencies": {
+    "@types/node": "^24.0.0",
+    "@types/react": "19.2.18",
+    "next": "16.3.1",
+    "react": "19.2.8",
+    "react-dom": "19.2.8",
+    "typescript": "7.0.2",
+    "vitest": "4.1.10"
+  }
+}