@sourcepress/server 0.1.0

package/dist/__tests__/media-routes.test.js

@@ -0,0 +1,88 @@
+import { Hono } from "hono";
+import { describe, expect, it, vi } from "vitest";
+import { mediaRoutes } from "../routes/media.js";
+const sampleRef = {
+    path: "assets/hero.webp",
+    content_type: "image/webp",
+    size_bytes: 50000,
+    hash: "abc123",
+    source: "uploaded",
+    uploaded_at: "2026-04-04T10:00:00Z",
+    uploaded_by: "test-user",
+    alt: "Hero image",
+};
+function createMockMedia() {
+    return {
+        upload: vi.fn().mockResolvedValue(sampleRef),
+        get: vi.fn().mockResolvedValue(Buffer.from("data")),
+        delete: vi.fn().mockResolvedValue(undefined),
+        list: vi.fn().mockResolvedValue([sampleRef]),
+        getMeta: vi.fn().mockResolvedValue(sampleRef),
+        updateMeta: vi.fn().mockResolvedValue({ ...sampleRef, alt: "Updated" }),
+    };
+}
+function createApp(media) {
+    const engine = { media };
+    const app = new Hono().basePath("/api");
+    app.route("/", mediaRoutes(engine));
+    return app;
+}
+describe("media routes", () => {
+    it("GET /api/media — lists media", async () => {
+        const media = createMockMedia();
+        const app = createApp(media);
+        const res = await app.request("/api/media");
+        expect(res.status).toBe(200);
+        // biome-ignore lint/suspicious/noExplicitAny: typed JSON response parsing in tests
+        const body = (await res.json());
+        expect(body.items).toHaveLength(1);
+        expect(body.items[0].path).toBe("assets/hero.webp");
+    });
+    it("GET /api/media/:path — returns metadata", async () => {
+        const media = createMockMedia();
+        const app = createApp(media);
+        const res = await app.request("/api/media/assets/hero.webp");
+        expect(res.status).toBe(200);
+        // biome-ignore lint/suspicious/noExplicitAny: typed JSON response parsing in tests
+        const body = (await res.json());
+        expect(body.path).toBe("assets/hero.webp");
+        expect(body.alt).toBe("Hero image");
+    });
+    it("GET /api/media/:path — 404 for missing file", async () => {
+        const media = createMockMedia();
+        media.getMeta.mockResolvedValueOnce(null);
+        const app = createApp(media);
+        const res = await app.request("/api/media/assets/missing.webp");
+        expect(res.status).toBe(404);
+    });
+    it("PUT /api/media/:path — updates metadata", async () => {
+        const media = createMockMedia();
+        const app = createApp(media);
+        const res = await app.request("/api/media/assets/hero.webp", {
+            method: "PUT",
+            headers: { "Content-Type": "application/json" },
+            body: JSON.stringify({ alt: "Updated" }),
+        });
+        expect(res.status).toBe(200);
+        // biome-ignore lint/suspicious/noExplicitAny: typed JSON response parsing in tests
+        const body = (await res.json());
+        expect(body.alt).toBe("Updated");
+    });
+    it("DELETE /api/media/:path — deletes file", async () => {
+        const media = createMockMedia();
+        const app = createApp(media);
+        const res = await app.request("/api/media/assets/hero.webp", {
+            method: "DELETE",
+        });
+        expect(res.status).toBe(200);
+        // biome-ignore lint/suspicious/noExplicitAny: typed JSON response parsing in tests
+        const body = (await res.json());
+        expect(body.deleted).toBe(true);
+    });
+    it("returns 501 when media is not configured", async () => {
+        const app = createApp(undefined);
+        const res = await app.request("/api/media");
+        expect(res.status).toBe(501);
+    });
+});
+//# sourceMappingURL=media-routes.test.js.map

package/dist/__tests__/media-routes.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"media-routes.test.js","sourceRoot":"","sources":["../../src/__tests__/media-routes.test.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAC5B,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAElD,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAEjD,MAAM,SAAS,GAAa;IAC3B,IAAI,EAAE,kBAAkB;IACxB,YAAY,EAAE,YAAY;IAC1B,UAAU,EAAE,KAAK;IACjB,IAAI,EAAE,QAAQ;IACd,MAAM,EAAE,UAAU;IAClB,WAAW,EAAE,sBAAsB;IACnC,WAAW,EAAE,WAAW;IACxB,GAAG,EAAE,YAAY;CACjB,CAAC;AAEF,SAAS,eAAe;IACvB,OAAO;QACN,MAAM,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,SAAS,CAAC;QAC5C,GAAG,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACnD,MAAM,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,SAAS,CAAC;QAC5C,IAAI,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,CAAC,SAAS,CAAC,CAAC;QAC5C,OAAO,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,SAAS,CAAC;QAC7C,UAAU,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,EAAE,GAAG,SAAS,EAAE,GAAG,EAAE,SAAS,EAAE,CAAC;KACvE,CAAC;AACH,CAAC;AAED,SAAS,SAAS,CAAC,KAAoB;IACtC,MAAM,MAAM,GAAG,EAAE,KAAK,EAAmB,CAAC;IAC1C,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IACxC,GAAG,CAAC,KAAK,CAAC,GAAG,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC;IACpC,OAAO,GAAG,CAAC;AACZ,CAAC;AAED,QAAQ,CAAC,cAAc,EAAE,GAAG,EAAE;IAC7B,EAAE,CAAC,8BAA8B,EAAE,KAAK,IAAI,EAAE;QAC7C,MAAM,KAAK,GAAG,eAAe,EAAE,CAAC;QAChC,MAAM,GAAG,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC;QAE7B,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;QAC5C,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAE7B,mFAAmF;QACnF,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAQ,CAAC;QACvC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QACnC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;IACrD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yCAAyC,EAAE,KAAK,IAAI,EAAE;QACxD,MAAM,KAAK,GAAG,eAAe,EAAE,CAAC;QAChC,MAAM,GAAG,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC;QAE7B,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,OAAO,CAAC,6BAA6B,CAAC,CAAC;QAC7D,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAE7B,mFAAmF;QACnF,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAQ,CAAC;QACvC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;QAC3C,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IACrC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6CAA6C,EAAE,KAAK,IAAI,EAAE;QAC5D,MAAM,KAAK,GAAG,eAAe,EAAE,CAAC;QAC/B,KAAK,CAAC,OAAoC,CAAC,qBAAqB,CAAC,IAAI,CAAC,CAAC;QACxE,MAAM,GAAG,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC;QAE7B,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,OAAO,CAAC,gCAAgC,CAAC,CAAC;QAChE,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC9B,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yCAAyC,EAAE,KAAK,IAAI,EAAE;QACxD,MAAM,KAAK,GAAG,eAAe,EAAE,CAAC;QAChC,MAAM,GAAG,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC;QAE7B,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,OAAO,CAAC,6BAA6B,EAAE;YAC5D,MAAM,EAAE,KAAK;YACb,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;YAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,EAAE,SAAS,EAAE,CAAC;SACxC,CAAC,CAAC;QACH,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAE7B,mFAAmF;QACnF,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAQ,CAAC;QACvC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IAClC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wCAAwC,EAAE,KAAK,IAAI,EAAE;QACvD,MAAM,KAAK,GAAG,eAAe,EAAE,CAAC;QAChC,MAAM,GAAG,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC;QAE7B,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,OAAO,CAAC,6BAA6B,EAAE;YAC5D,MAAM,EAAE,QAAQ;SAChB,CAAC,CAAC;QACH,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAE7B,mFAAmF;QACnF,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAQ,CAAC;QACvC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACjC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0CAA0C,EAAE,KAAK,IAAI,EAAE;QACzD,MAAM,GAAG,GAAG,SAAS,CAAC,SAAS,CAAC,CAAC;QAEjC,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;QAC5C,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC9B,CAAC,CAAC,CAAC;AACJ,CAAC,CAAC,CAAC"}

package/dist/__tests__/schema.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=schema.test.d.ts.map

package/dist/__tests__/schema.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema.test.d.ts","sourceRoot":"","sources":["../../src/__tests__/schema.test.ts"],"names":[],"mappings":""}

package/dist/__tests__/schema.test.js

@@ -0,0 +1,92 @@
+import { Hono } from "hono";
+import { beforeEach, describe, expect, it, vi } from "vitest";
+import { errorHandler } from "../middleware/error-handler.js";
+import { schemaRoutes } from "../routes/schema.js";
+const mockCollections = {
+    posts: {
+        name: "Blog Posts",
+        path: "content/posts",
+        format: "mdx",
+        fields: {
+            title: { type: "string", required: true },
+            draft: { type: "boolean", default: true },
+        },
+    },
+    team: {
+        name: "Team",
+        path: "content/team",
+        format: "yaml",
+        fields: {
+            name: { type: "string", required: true },
+            role: { type: "string" },
+        },
+    },
+};
+function createMockEngine() {
+    return {
+        // biome-ignore lint/suspicious/noExplicitAny: partial mock of EngineContext
+        config: {},
+        // biome-ignore lint/suspicious/noExplicitAny: partial mock of EngineContext
+        github: {},
+        // biome-ignore lint/suspicious/noExplicitAny: partial mock of EngineContext
+        knowledge: {},
+        // biome-ignore lint/suspicious/noExplicitAny: partial mock of EngineContext
+        knowledgeStore: {},
+        // biome-ignore lint/suspicious/noExplicitAny: partial mock of EngineContext
+        cache: {},
+        // biome-ignore lint/suspicious/noExplicitAny: partial mock of EngineContext
+        budget: {},
+        // biome-ignore lint/suspicious/noExplicitAny: partial mock of EngineContext
+        provider: {},
+        listContent: vi.fn().mockResolvedValue([]),
+        getContent: vi.fn().mockResolvedValue(null),
+        getCollectionDef: vi.fn().mockImplementation((name) => {
+            // biome-ignore lint/suspicious/noExplicitAny: index access on typed const object
+            return mockCollections[name] ?? null;
+        }),
+        listCollections: vi.fn().mockReturnValue(["posts", "team"]),
+    };
+}
+function createTestApp(engine) {
+    const app = new Hono().basePath("/api");
+    app.use("*", errorHandler());
+    app.route("/", schemaRoutes(engine));
+    return app;
+}
+describe("Schema routes", () => {
+    let engine;
+    let app;
+    beforeEach(() => {
+        engine = createMockEngine();
+        app = createTestApp(engine);
+    });
+    describe("GET /api/schema", () => {
+        it("returns all collection schemas", async () => {
+            const res = await app.request("/api/schema");
+            expect(res.status).toBe(200);
+            // biome-ignore lint/suspicious/noExplicitAny: typed JSON response parsing in tests
+            const body = (await res.json());
+            expect(body.total).toBe(2);
+            expect(body.collections.posts.name).toBe("Blog Posts");
+            expect(body.collections.team.name).toBe("Team");
+        });
+    });
+    describe("GET /api/schema/:collection", () => {
+        it("returns schema for a valid collection", async () => {
+            const res = await app.request("/api/schema/posts");
+            expect(res.status).toBe(200);
+            // biome-ignore lint/suspicious/noExplicitAny: typed JSON response parsing in tests
+            const body = (await res.json());
+            expect(body.name).toBe("Blog Posts");
+            expect(body.fields.title.type).toBe("string");
+        });
+        it("returns 404 for unknown collection", async () => {
+            const res = await app.request("/api/schema/unknown");
+            expect(res.status).toBe(404);
+            // biome-ignore lint/suspicious/noExplicitAny: typed JSON response parsing in tests
+            const body = (await res.json());
+            expect(body.code).toBe("COLLECTION_NOT_FOUND");
+        });
+    });
+});
+//# sourceMappingURL=schema.test.js.map

package/dist/__tests__/schema.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema.test.js","sourceRoot":"","sources":["../../src/__tests__/schema.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAC5B,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAE9D,OAAO,EAAE,YAAY,EAAE,MAAM,gCAAgC,CAAC;AAC9D,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAEnD,MAAM,eAAe,GAAG;IACvB,KAAK,EAAE;QACN,IAAI,EAAE,YAAY;QAClB,IAAI,EAAE,eAAe;QACrB,MAAM,EAAE,KAAc;QACtB,MAAM,EAAE;YACP,KAAK,EAAE,EAAE,IAAI,EAAE,QAAiB,EAAE,QAAQ,EAAE,IAAI,EAAE;YAClD,KAAK,EAAE,EAAE,IAAI,EAAE,SAAkB,EAAE,OAAO,EAAE,IAAI,EAAE;SAClD;KACD;IACD,IAAI,EAAE;QACL,IAAI,EAAE,MAAM;QACZ,IAAI,EAAE,cAAc;QACpB,MAAM,EAAE,MAAe;QACvB,MAAM,EAAE;YACP,IAAI,EAAE,EAAE,IAAI,EAAE,QAAiB,EAAE,QAAQ,EAAE,IAAI,EAAE;YACjD,IAAI,EAAE,EAAE,IAAI,EAAE,QAAiB,EAAE;SACjC;KACD;CACD,CAAC;AAEF,SAAS,gBAAgB;IACxB,OAAO;QACN,4EAA4E;QAC5E,MAAM,EAAE,EAAS;QACjB,4EAA4E;QAC5E,MAAM,EAAE,EAAS;QACjB,4EAA4E;QAC5E,SAAS,EAAE,EAAS;QACpB,4EAA4E;QAC5E,cAAc,EAAE,EAAS;QACzB,4EAA4E;QAC5E,KAAK,EAAE,EAAS;QAChB,4EAA4E;QAC5E,MAAM,EAAE,EAAS;QACjB,4EAA4E;QAC5E,QAAQ,EAAE,EAAS;QACnB,WAAW,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,EAAE,CAAC;QAC1C,UAAU,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,IAAI,CAAC;QAC3C,gBAAgB,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,kBAAkB,CAAC,CAAC,IAAY,EAAE,EAAE;YAC7D,iFAAiF;YACjF,OAAQ,eAAuB,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC;QAC/C,CAAC,CAAC;QACF,eAAe,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,eAAe,CAAC,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;KAC3D,CAAC;AACH,CAAC;AAED,SAAS,aAAa,CAAC,MAAqB;IAC3C,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IACxC,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,YAAY,EAAE,CAAC,CAAC;IAC7B,GAAG,CAAC,KAAK,CAAC,GAAG,EAAE,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC;IACrC,OAAO,GAAG,CAAC;AACZ,CAAC;AAED,QAAQ,CAAC,eAAe,EAAE,GAAG,EAAE;IAC9B,IAAI,MAAqB,CAAC;IAC1B,IAAI,GAAS,CAAC;IAEd,UAAU,CAAC,GAAG,EAAE;QACf,MAAM,GAAG,gBAAgB,EAAE,CAAC;QAC5B,GAAG,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC;IAC7B,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,iBAAiB,EAAE,GAAG,EAAE;QAChC,EAAE,CAAC,gCAAgC,EAAE,KAAK,IAAI,EAAE;YAC/C,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;YAC7C,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAC7B,mFAAmF;YACnF,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAQ,CAAC;YACvC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAC3B,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;YACvD,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACjD,CAAC,CAAC,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,6BAA6B,EAAE,GAAG,EAAE;QAC5C,EAAE,CAAC,uCAAuC,EAAE,KAAK,IAAI,EAAE;YACtD,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,OAAO,CAAC,mBAAmB,CAAC,CAAC;YACnD,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAC7B,mFAAmF;YACnF,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAQ,CAAC;YACvC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;YACrC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC/C,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,oCAAoC,EAAE,KAAK,IAAI,EAAE;YACnD,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,OAAO,CAAC,qBAAqB,CAAC,CAAC;YACrD,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAC7B,mFAAmF;YACnF,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAQ,CAAC;YACvC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC;QAChD,CAAC,CAAC,CAAC;IACJ,CAAC,CAAC,CAAC;AACJ,CAAC,CAAC,CAAC"}

package/dist/app.d.ts

@@ -0,0 +1,7 @@
+import type { EngineContext } from "./engine.js";
+/**
+ * Create a fully wired SourcePress API app.
+ * If no engine is provided, only health endpoint is available.
+ */
+export declare function createApp(engine?: EngineContext, apiKeys?: string[]): import("hono/hono-base").HonoBase<import("hono/types").BlankEnv, import("hono/types").BlankSchema, "/api", "/api">;
+//# sourceMappingURL=app.d.ts.map

package/dist/app.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"app.d.ts","sourceRoot":"","sources":["../src/app.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAejD;;;GAGG;AACH,wBAAgB,SAAS,CAAC,MAAM,CAAC,EAAE,aAAa,EAAE,OAAO,CAAC,EAAE,MAAM,EAAE,sHAsEnE"}

package/dist/app.js

@@ -0,0 +1,85 @@
+import { Hono } from "hono";
+import { secureHeaders } from "hono/secure-headers";
+import { authMiddleware, corsMiddleware, errorHandler, requireAuth } from "./middleware/index.js";
+import { aiRateLimit, generalRateLimit } from "./middleware/rate-limit.js";
+import { approvalRoutes } from "./routes/approval.js";
+import { contentRoutes } from "./routes/content.js";
+import { evalRoutes } from "./routes/eval.js";
+import { graphRoutes } from "./routes/graph.js";
+import { healthRoutes } from "./routes/health.js";
+import { importRoutes } from "./routes/import.js";
+import { intentRoutes } from "./routes/intent.js";
+import { jobRoutes } from "./routes/jobs.js";
+import { knowledgeRoutes } from "./routes/knowledge.js";
+import { mediaRoutes } from "./routes/media.js";
+import { schemaRoutes } from "./routes/schema.js";
+/**
+ * Create a fully wired SourcePress API app.
+ * If no engine is provided, only health endpoint is available.
+ */
+export function createApp(engine, apiKeys) {
+    const app = new Hono().basePath("/api");
+    // Global middleware
+    app.use("*", secureHeaders());
+    app.use("*", corsMiddleware());
+    app.use("*", errorHandler());
+    app.use("*", authMiddleware(apiKeys));
+    app.use("*", generalRateLimit());
+    // Tighter rate limits for AI-consuming endpoints
+    app.use("/eval/*", aiRateLimit());
+    app.use("/knowledge", aiRateLimit());
+    app.use("/knowledge/import/*", aiRateLimit());
+    app.use("/knowledge/import", aiRateLimit());
+    app.use("/graph/rebuild", aiRateLimit());
+    // Protect all write endpoints
+    app.use("/content/*", async (c, next) => {
+        if (c.req.method === "POST" || c.req.method === "PUT" || c.req.method === "DELETE") {
+            return requireAuth()(c, next);
+        }
+        await next();
+    });
+    app.use("/knowledge", async (c, next) => {
+        if (c.req.method === "POST") {
+            return requireAuth()(c, next);
+        }
+        await next();
+    });
+    app.use("/knowledge/import/*", requireAuth());
+    app.use("/knowledge/import", requireAuth());
+    app.use("/graph/rebuild", requireAuth());
+    app.use("/eval/*", async (c, next) => {
+        if (c.req.method === "POST" || c.req.method === "PUT") {
+            return requireAuth()(c, next);
+        }
+        await next();
+    });
+    app.use("/approval/*", async (c, next) => {
+        if (c.req.method === "POST" || c.req.method === "PUT" || c.req.method === "DELETE") {
+            return requireAuth()(c, next);
+        }
+        await next();
+    });
+    app.use("/media/*", async (c, next) => {
+        if (c.req.method === "POST" || c.req.method === "PUT" || c.req.method === "DELETE") {
+            return requireAuth()(c, next);
+        }
+        await next();
+    });
+    // Health is always available
+    app.route("/", healthRoutes());
+    // Engine-dependent routes
+    if (engine) {
+        app.route("/", contentRoutes(engine));
+        app.route("/", knowledgeRoutes(engine));
+        app.route("/", graphRoutes(engine));
+        app.route("/", schemaRoutes(engine));
+        app.route("/", intentRoutes(engine));
+        app.route("/", evalRoutes(engine));
+        app.route("/", mediaRoutes(engine));
+        app.route("/", jobRoutes(engine));
+        app.route("/", importRoutes(engine));
+        app.route("/", approvalRoutes(engine));
+    }
+    return app;
+}
+//# sourceMappingURL=app.js.map

package/dist/app.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"app.js","sourceRoot":"","sources":["../src/app.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAC5B,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAEpD,OAAO,EAAE,cAAc,EAAE,cAAc,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AAClG,OAAO,EAAE,WAAW,EAAE,gBAAgB,EAAE,MAAM,4BAA4B,CAAC;AAC3E,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AACtD,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACpD,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAC9C,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAChD,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAC7C,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AACxD,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAChD,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAElD;;;GAGG;AACH,MAAM,UAAU,SAAS,CAAC,MAAsB,EAAE,OAAkB;IACnE,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IAExC,oBAAoB;IACpB,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,aAAa,EAAE,CAAC,CAAC;IAC9B,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,cAAc,EAAE,CAAC,CAAC;IAC/B,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,YAAY,EAAE,CAAC,CAAC;IAC7B,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,cAAc,CAAC,OAAO,CAAC,CAAC,CAAC;IACtC,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,gBAAgB,EAAE,CAAC,CAAC;IAEjC,iDAAiD;IACjD,GAAG,CAAC,GAAG,CAAC,SAAS,EAAE,WAAW,EAAE,CAAC,CAAC;IAClC,GAAG,CAAC,GAAG,CAAC,YAAY,EAAE,WAAW,EAAE,CAAC,CAAC;IACrC,GAAG,CAAC,GAAG,CAAC,qBAAqB,EAAE,WAAW,EAAE,CAAC,CAAC;IAC9C,GAAG,CAAC,GAAG,CAAC,mBAAmB,EAAE,WAAW,EAAE,CAAC,CAAC;IAC5C,GAAG,CAAC,GAAG,CAAC,gBAAgB,EAAE,WAAW,EAAE,CAAC,CAAC;IAEzC,8BAA8B;IAC9B,GAAG,CAAC,GAAG,CAAC,YAAY,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE;QACvC,IAAI,CAAC,CAAC,GAAG,CAAC,MAAM,KAAK,MAAM,IAAI,CAAC,CAAC,GAAG,CAAC,MAAM,KAAK,KAAK,IAAI,CAAC,CAAC,GAAG,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;YACpF,OAAO,WAAW,EAAE,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;QAC/B,CAAC;QACD,MAAM,IAAI,EAAE,CAAC;IACd,CAAC,CAAC,CAAC;IACH,GAAG,CAAC,GAAG,CAAC,YAAY,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE;QACvC,IAAI,CAAC,CAAC,GAAG,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;YAC7B,OAAO,WAAW,EAAE,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;QAC/B,CAAC;QACD,MAAM,IAAI,EAAE,CAAC;IACd,CAAC,CAAC,CAAC;IACH,GAAG,CAAC,GAAG,CAAC,qBAAqB,EAAE,WAAW,EAAE,CAAC,CAAC;IAC9C,GAAG,CAAC,GAAG,CAAC,mBAAmB,EAAE,WAAW,EAAE,CAAC,CAAC;IAC5C,GAAG,CAAC,GAAG,CAAC,gBAAgB,EAAE,WAAW,EAAE,CAAC,CAAC;IACzC,GAAG,CAAC,GAAG,CAAC,SAAS,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE;QACpC,IAAI,CAAC,CAAC,GAAG,CAAC,MAAM,KAAK,MAAM,IAAI,CAAC,CAAC,GAAG,CAAC,MAAM,KAAK,KAAK,EAAE,CAAC;YACvD,OAAO,WAAW,EAAE,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;QAC/B,CAAC;QACD,MAAM,IAAI,EAAE,CAAC;IACd,CAAC,CAAC,CAAC;IACH,GAAG,CAAC,GAAG,CAAC,aAAa,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE;QACxC,IAAI,CAAC,CAAC,GAAG,CAAC,MAAM,KAAK,MAAM,IAAI,CAAC,CAAC,GAAG,CAAC,MAAM,KAAK,KAAK,IAAI,CAAC,CAAC,GAAG,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;YACpF,OAAO,WAAW,EAAE,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;QAC/B,CAAC;QACD,MAAM,IAAI,EAAE,CAAC;IACd,CAAC,CAAC,CAAC;IACH,GAAG,CAAC,GAAG,CAAC,UAAU,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE;QACrC,IAAI,CAAC,CAAC,GAAG,CAAC,MAAM,KAAK,MAAM,IAAI,CAAC,CAAC,GAAG,CAAC,MAAM,KAAK,KAAK,IAAI,CAAC,CAAC,GAAG,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;YACpF,OAAO,WAAW,EAAE,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;QAC/B,CAAC;QACD,MAAM,IAAI,EAAE,CAAC;IACd,CAAC,CAAC,CAAC;IAEH,6BAA6B;IAC7B,GAAG,CAAC,KAAK,CAAC,GAAG,EAAE,YAAY,EAAE,CAAC,CAAC;IAE/B,0BAA0B;IAC1B,IAAI,MAAM,EAAE,CAAC;QACZ,GAAG,CAAC,KAAK,CAAC,GAAG,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC;QACtC,GAAG,CAAC,KAAK,CAAC,GAAG,EAAE,eAAe,CAAC,MAAM,CAAC,CAAC,CAAC;QACxC,GAAG,CAAC,KAAK,CAAC,GAAG,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC;QACpC,GAAG,CAAC,KAAK,CAAC,GAAG,EAAE,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC;QACrC,GAAG,CAAC,KAAK,CAAC,GAAG,EAAE,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC;QACrC,GAAG,CAAC,KAAK,CAAC,GAAG,EAAE,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC;QACnC,GAAG,CAAC,KAAK,CAAC,GAAG,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC;QACpC,GAAG,CAAC,KAAK,CAAC,GAAG,EAAE,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC;QAClC,GAAG,CAAC,KAAK,CAAC,GAAG,EAAE,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC;QACrC,GAAG,CAAC,KAAK,CAAC,GAAG,EAAE,cAAc,CAAC,MAAM,CAAC,CAAC,CAAC;IACxC,CAAC;IAED,OAAO,GAAG,CAAC;AACZ,CAAC"}

package/dist/engine.d.ts

@@ -0,0 +1,38 @@
+import { BudgetTracker } from "@sourcepress/ai";
+import type { ResolvedProvider } from "@sourcepress/ai";
+import type { CacheProvider } from "@sourcepress/cache";
+import type { ApprovalProvider, CollectionDefinition, ContentFile, SourcePressConfig } from "@sourcepress/core";
+import { GitHubClient } from "@sourcepress/github";
+import type { JobProvider } from "@sourcepress/jobs";
+import { KnowledgeEngine } from "@sourcepress/knowledge";
+import type { KnowledgeStoreBackend } from "@sourcepress/knowledge";
+import type { MediaStorage } from "@sourcepress/media";
+export interface EngineContext {
+    config: SourcePressConfig;
+    github: GitHubClient;
+    knowledge: KnowledgeEngine;
+    knowledgeStore: KnowledgeStoreBackend;
+    cache: CacheProvider;
+    budget: BudgetTracker;
+    provider: ResolvedProvider;
+    media?: MediaStorage;
+    jobs?: JobProvider;
+    approval?: ApprovalProvider;
+    listContent(collection: string): Promise<ContentFile[]>;
+    getContent(collection: string, slug: string): Promise<ContentFile | null>;
+    getCollectionDef(collection: string): CollectionDefinition | null;
+    listCollections(): string[];
+}
+export declare function resolveApprovalRule(config: SourcePressConfig, collection: string, path: string): "pr" | "direct";
+export interface CreateEngineOptions {
+    config: SourcePressConfig;
+    githubToken: string;
+    aiApiKey?: string;
+    apiKeys?: string[];
+    knowledgeStore?: KnowledgeStoreBackend;
+    cache?: CacheProvider;
+    media?: MediaStorage;
+    jobs?: JobProvider;
+}
+export declare function createEngine(options: CreateEngineOptions): Promise<EngineContext>;
+//# sourceMappingURL=engine.d.ts.map

package/dist/engine.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"engine.d.ts","sourceRoot":"","sources":["../src/engine.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,aAAa,EAAmB,MAAM,iBAAiB,CAAC;AACjE,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AAExD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AACxD,OAAO,KAAK,EACX,gBAAgB,EAChB,oBAAoB,EACpB,WAAW,EACX,iBAAiB,EACjB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EACN,YAAY,EAKZ,MAAM,qBAAqB,CAAC;AAE7B,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AACrD,OAAO,EAAyC,eAAe,EAAE,MAAM,wBAAwB,CAAC;AAChG,OAAO,KAAK,EAAkB,qBAAqB,EAAE,MAAM,wBAAwB,CAAC;AAEpF,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAEvD,MAAM,WAAW,aAAa;IAC7B,MAAM,EAAE,iBAAiB,CAAC;IAC1B,MAAM,EAAE,YAAY,CAAC;IACrB,SAAS,EAAE,eAAe,CAAC;IAC3B,cAAc,EAAE,qBAAqB,CAAC;IACtC,KAAK,EAAE,aAAa,CAAC;IACrB,MAAM,EAAE,aAAa,CAAC;IACtB,QAAQ,EAAE,gBAAgB,CAAC;IAC3B,KAAK,CAAC,EAAE,YAAY,CAAC;IACrB,IAAI,CAAC,EAAE,WAAW,CAAC;IACnB,QAAQ,CAAC,EAAE,gBAAgB,CAAC;IAG5B,WAAW,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC;IACxD,UAAU,CAAC,UAAU,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC,CAAC;IAC1E,gBAAgB,CAAC,UAAU,EAAE,MAAM,GAAG,oBAAoB,GAAG,IAAI,CAAC;IAClE,eAAe,IAAI,MAAM,EAAE,CAAC;CAC5B;AAED,wBAAgB,mBAAmB,CAClC,MAAM,EAAE,iBAAiB,EACzB,UAAU,EAAE,MAAM,EAClB,IAAI,EAAE,MAAM,GACV,IAAI,GAAG,QAAQ,CAQjB;AAED,MAAM,WAAW,mBAAmB;IACnC,MAAM,EAAE,iBAAiB,CAAC;IAC1B,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;IACnB,cAAc,CAAC,EAAE,qBAAqB,CAAC;IACvC,KAAK,CAAC,EAAE,aAAa,CAAC;IACtB,KAAK,CAAC,EAAE,YAAY,CAAC;IACrB,IAAI,CAAC,EAAE,WAAW,CAAC;CACnB;AAED,wBAAsB,YAAY,CAAC,OAAO,EAAE,mBAAmB,GAAG,OAAO,CAAC,aAAa,CAAC,CAkGvF"}

package/dist/engine.js

@@ -0,0 +1,106 @@
+import { join } from "node:path";
+import { BudgetTracker, resolveProvider } from "@sourcepress/ai";
+import { MemoryCache } from "@sourcepress/cache";
+import { GitHubClient, GitHubPRApprovalProvider, getContentFile, listContentFiles, } from "@sourcepress/github";
+import { InProcessJobProvider } from "@sourcepress/jobs";
+import { InMemoryKnowledgeStore, JsonFileStore, KnowledgeEngine } from "@sourcepress/knowledge";
+import { GitMediaStorage } from "@sourcepress/media";
+export function resolveApprovalRule(config, collection, path) {
+    if (!config.approval?.rules)
+        return "direct";
+    for (const [pattern, rule] of Object.entries(config.approval.rules)) {
+        if (path.startsWith(pattern.replace("/*", "/")) || path === pattern) {
+            return rule;
+        }
+    }
+    return "direct";
+}
+export async function createEngine(options) {
+    const { config, githubToken, aiApiKey } = options;
+    // GitHub client
+    const github = new GitHubClient({
+        owner: config.repository.owner,
+        repo: config.repository.repo,
+        branch: config.repository.branch,
+        token: githubToken,
+    });
+    // AI provider + budget
+    const provider = resolveProvider({
+        provider: config.ai.provider,
+        model: config.ai.model,
+        apiKey: aiApiKey,
+    });
+    const budget = new BudgetTracker({
+        daily_limit_usd: config.ai.daily_limit_usd ?? 5.0,
+        warn_at_usd: config.ai.warn_at_usd ?? 3.0,
+    });
+    // Knowledge store + engine
+    const knowledgeStore = options.knowledgeStore ??
+        (config.knowledge.graph.backend === "local"
+            ? new JsonFileStore(join(process.cwd(), ".sourcepress"))
+            : new InMemoryKnowledgeStore());
+    const knowledge = new KnowledgeEngine(knowledgeStore, provider, budget);
+    await knowledge.initialize();
+    // Cache
+    const cache = options.cache ?? new MemoryCache();
+    // Media storage (optional — only if configured)
+    let media;
+    if (config.media) {
+        media = options.media ?? new GitMediaStorage(github, config.media);
+    }
+    // Job provider (always available, default is in-process)
+    const jobs = options.jobs ?? new InProcessJobProvider();
+    // Approval provider (optional — only if configured)
+    let approval;
+    if (config.approval?.provider === "github-pr") {
+        approval = new GitHubPRApprovalProvider(github);
+    }
+    // Convenience methods
+    async function listContent(collection) {
+        const collDef = config.collections[collection];
+        if (!collDef)
+            return [];
+        const paths = await listContentFiles(github, collDef.path);
+        const files = [];
+        for (const path of paths) {
+            const file = await getContentFile(github, path, collection);
+            if (file)
+                files.push(file);
+        }
+        return files;
+    }
+    async function getContent(collection, slug) {
+        const collDef = config.collections[collection];
+        if (!collDef)
+            return null;
+        if (!/^[a-z0-9-]+$/.test(slug))
+            return null;
+        const ext = collDef.format === "yaml" ? "yaml" : collDef.format === "json" ? "json" : collDef.format;
+        const basePath = collDef.path.replace(/\/+$/, "");
+        const path = `${basePath}/${slug}.${ext}`;
+        return getContentFile(github, path, collection);
+    }
+    function getCollectionDef(collection) {
+        return config.collections[collection] ?? null;
+    }
+    function listCollections() {
+        return Object.keys(config.collections);
+    }
+    return {
+        config,
+        github,
+        knowledge,
+        knowledgeStore,
+        cache,
+        budget,
+        provider,
+        media,
+        jobs,
+        approval,
+        listContent,
+        getContent,
+        getCollectionDef,
+        listCollections,
+    };
+}
+//# sourceMappingURL=engine.js.map

package/dist/engine.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"engine.js","sourceRoot":"","sources":["../src/engine.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,aAAa,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAEjE,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAQjD,OAAO,EACN,YAAY,EACZ,wBAAwB,EACxB,cAAc,EACd,gBAAgB,GAEhB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAC;AAEzD,OAAO,EAAE,sBAAsB,EAAE,aAAa,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AAEhG,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AAsBrD,MAAM,UAAU,mBAAmB,CAClC,MAAyB,EACzB,UAAkB,EAClB,IAAY;IAEZ,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,KAAK;QAAE,OAAO,QAAQ,CAAC;IAC7C,KAAK,MAAM,CAAC,OAAO,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QACrE,IAAI,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,IAAI,IAAI,KAAK,OAAO,EAAE,CAAC;YACrE,OAAO,IAAI,CAAC;QACb,CAAC;IACF,CAAC;IACD,OAAO,QAAQ,CAAC;AACjB,CAAC;AAaD,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,OAA4B;IAC9D,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,QAAQ,EAAE,GAAG,OAAO,CAAC;IAElD,gBAAgB;IAChB,MAAM,MAAM,GAAG,IAAI,YAAY,CAAC;QAC/B,KAAK,EAAE,MAAM,CAAC,UAAU,CAAC,KAAK;QAC9B,IAAI,EAAE,MAAM,CAAC,UAAU,CAAC,IAAI;QAC5B,MAAM,EAAE,MAAM,CAAC,UAAU,CAAC,MAAM;QAChC,KAAK,EAAE,WAAW;KAClB,CAAC,CAAC;IAEH,uBAAuB;IACvB,MAAM,QAAQ,GAAG,eAAe,CAAC;QAChC,QAAQ,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ;QAC5B,KAAK,EAAE,MAAM,CAAC,EAAE,CAAC,KAAK;QACtB,MAAM,EAAE,QAAQ;KAChB,CAAC,CAAC;IAEH,MAAM,MAAM,GAAG,IAAI,aAAa,CAAC;QAChC,eAAe,EAAE,MAAM,CAAC,EAAE,CAAC,eAAe,IAAI,GAAG;QACjD,WAAW,EAAE,MAAM,CAAC,EAAE,CAAC,WAAW,IAAI,GAAG;KACzC,CAAC,CAAC;IAEH,2BAA2B;IAC3B,MAAM,cAAc,GACnB,OAAO,CAAC,cAAc;QACtB,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,OAAO,KAAK,OAAO;YAC1C,CAAC,CAAC,IAAI,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,cAAc,CAAC,CAAC;YACxD,CAAC,CAAC,IAAI,sBAAsB,EAAE,CAAC,CAAC;IAClC,MAAM,SAAS,GAAG,IAAI,eAAe,CAAC,cAAc,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC;IACxE,MAAM,SAAS,CAAC,UAAU,EAAE,CAAC;IAE7B,QAAQ;IACR,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,IAAI,WAAW,EAAE,CAAC;IAEjD,gDAAgD;IAChD,IAAI,KAA+B,CAAC;IACpC,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;QAClB,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,IAAI,eAAe,CAAC,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC;IACpE,CAAC;IAED,yDAAyD;IACzD,MAAM,IAAI,GAAgB,OAAO,CAAC,IAAI,IAAI,IAAI,oBAAoB,EAAE,CAAC;IAErE,oDAAoD;IACpD,IAAI,QAAsC,CAAC;IAC3C,IAAI,MAAM,CAAC,QAAQ,EAAE,QAAQ,KAAK,WAAW,EAAE,CAAC;QAC/C,QAAQ,GAAG,IAAI,wBAAwB,CAAC,MAAM,CAAC,CAAC;IACjD,CAAC;IAED,sBAAsB;IACtB,KAAK,UAAU,WAAW,CAAC,UAAkB;QAC5C,MAAM,OAAO,GAAG,MAAM,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC;QAC/C,IAAI,CAAC,OAAO;YAAE,OAAO,EAAE,CAAC;QACxB,MAAM,KAAK,GAAG,MAAM,gBAAgB,CAAC,MAAM,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;QAC3D,MAAM,KAAK,GAAkB,EAAE,CAAC;QAChC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YAC1B,MAAM,IAAI,GAAG,MAAM,cAAc,CAAC,MAAM,EAAE,IAAI,EAAE,UAAU,CAAC,CAAC;YAC5D,IAAI,IAAI;gBAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC5B,CAAC;QACD,OAAO,KAAK,CAAC;IACd,CAAC;IAED,KAAK,UAAU,UAAU,CAAC,UAAkB,EAAE,IAAY;QACzD,MAAM,OAAO,GAAG,MAAM,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC;QAC/C,IAAI,CAAC,OAAO;YAAE,OAAO,IAAI,CAAC;QAC1B,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,OAAO,IAAI,CAAC;QAC5C,MAAM,GAAG,GACR,OAAO,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC;QAC1F,MAAM,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QAClD,MAAM,IAAI,GAAG,GAAG,QAAQ,IAAI,IAAI,IAAI,GAAG,EAAE,CAAC;QAC1C,OAAO,cAAc,CAAC,MAAM,EAAE,IAAI,EAAE,UAAU,CAAC,CAAC;IACjD,CAAC;IAED,SAAS,gBAAgB,CAAC,UAAkB;QAC3C,OAAO,MAAM,CAAC,WAAW,CAAC,UAAU,CAAC,IAAI,IAAI,CAAC;IAC/C,CAAC;IAED,SAAS,eAAe;QACvB,OAAO,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;IACxC,CAAC;IAED,OAAO;QACN,MAAM;QACN,MAAM;QACN,SAAS;QACT,cAAc;QACd,KAAK;QACL,MAAM;QACN,QAAQ;QACR,KAAK;QACL,IAAI;QACJ,QAAQ;QACR,WAAW;QACX,UAAU;QACV,gBAAgB;QAChB,eAAe;KACf,CAAC;AACH,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,8 @@
+export { createApp } from "./app.js";
+export { createEngine, resolveApprovalRule } from "./engine.js";
+export type { EngineContext, CreateEngineOptions } from "./engine.js";
+export { approvalRoutes, healthRoutes, contentRoutes, knowledgeRoutes, graphRoutes, schemaRoutes, intentRoutes, evalRoutes, mediaRoutes, jobRoutes, importRoutes, } from "./routes/index.js";
+export type { HealthStatus } from "./routes/health.js";
+export { corsMiddleware, errorHandler, authMiddleware, SourcePressError, } from "./middleware/index.js";
+export type { ApiError, AuthContext } from "./middleware/index.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,SAAS,EAAE,MAAM,UAAU,CAAC;AAGrC,OAAO,EAAE,YAAY,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AAChE,YAAY,EAAE,aAAa,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AAGtE,OAAO,EACN,cAAc,EACd,YAAY,EACZ,aAAa,EACb,eAAe,EACf,WAAW,EACX,YAAY,EACZ,YAAY,EACZ,UAAU,EACV,WAAW,EACX,SAAS,EACT,YAAY,GACZ,MAAM,mBAAmB,CAAC;AAC3B,YAAY,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAGvD,OAAO,EACN,cAAc,EACd,YAAY,EACZ,cAAc,EACd,gBAAgB,GAChB,MAAM,uBAAuB,CAAC;AAC/B,YAAY,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC"}

package/dist/index.js

@@ -0,0 +1,9 @@
+// App factory
+export { createApp } from "./app.js";
+// Engine
+export { createEngine, resolveApprovalRule } from "./engine.js";
+// Routes
+export { approvalRoutes, healthRoutes, contentRoutes, knowledgeRoutes, graphRoutes, schemaRoutes, intentRoutes, evalRoutes, mediaRoutes, jobRoutes, importRoutes, } from "./routes/index.js";
+// Middleware
+export { corsMiddleware, errorHandler, authMiddleware, SourcePressError, } from "./middleware/index.js";
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc;AACd,OAAO,EAAE,SAAS,EAAE,MAAM,UAAU,CAAC;AAErC,SAAS;AACT,OAAO,EAAE,YAAY,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AAGhE,SAAS;AACT,OAAO,EACN,cAAc,EACd,YAAY,EACZ,aAAa,EACb,eAAe,EACf,WAAW,EACX,YAAY,EACZ,YAAY,EACZ,UAAU,EACV,WAAW,EACX,SAAS,EACT,YAAY,GACZ,MAAM,mBAAmB,CAAC;AAG3B,aAAa;AACb,OAAO,EACN,cAAc,EACd,YAAY,EACZ,cAAc,EACd,gBAAgB,GAChB,MAAM,uBAAuB,CAAC"}

package/dist/middleware/auth.d.ts

@@ -0,0 +1,17 @@
+import type { Context, Next } from "hono";
+export interface AuthContext {
+    authenticated: boolean;
+    user?: string;
+    method?: "api-key" | "bearer" | "none";
+}
+export declare function authMiddleware(apiKeys?: string[]): (c: Context, next: Next) => Promise<void>;
+/**
+ * Middleware that rejects unauthenticated requests with 401.
+ * Apply to write endpoints (POST, PUT, DELETE).
+ */
+export declare function requireAuth(): (c: Context, next: Next) => Promise<(Response & import("hono").TypedResponse<{
+    status: number;
+    message: string;
+    code: string;
+}, 401, "json">) | undefined>;
+//# sourceMappingURL=auth.d.ts.map

package/dist/middleware/auth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../../src/middleware/auth.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAE1C,MAAM,WAAW,WAAW;IAC3B,aAAa,EAAE,OAAO,CAAC;IACvB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,SAAS,GAAG,QAAQ,GAAG,MAAM,CAAC;CACvC;AAaD,wBAAgB,cAAc,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,IAClC,GAAG,OAAO,EAAE,MAAM,IAAI,mBA8BpC;AAED;;;GAGG;AACH,wBAAgB,WAAW,KACZ,GAAG,OAAO,EAAE,MAAM,IAAI;;;;8BAOpC"}

package/dist/middleware/auth.js

@@ -0,0 +1,54 @@
+import { timingSafeEqual } from "node:crypto";
+function safeCompare(a, b) {
+    const aBuf = Buffer.from(a, "utf-8");
+    const bBuf = Buffer.from(b, "utf-8");
+    if (aBuf.length !== bBuf.length) {
+        // Still run comparison on equal-length buffers to avoid timing leak on length
+        timingSafeEqual(aBuf, aBuf);
+        return false;
+    }
+    return timingSafeEqual(aBuf, bBuf);
+}
+export function authMiddleware(apiKeys) {
+    return async (c, next) => {
+        const authHeader = c.req.header("Authorization");
+        const auth = {
+            authenticated: false,
+            method: "none",
+        };
+        if (authHeader?.startsWith("Bearer ") || authHeader?.startsWith("ApiKey ")) {
+            const scheme = authHeader.startsWith("Bearer ") ? "bearer" : "api-key";
+            const token = authHeader.slice(scheme === "bearer" ? 7 : 7);
+            if (!apiKeys || apiKeys.length === 0) {
+                // No keys configured — accept any token (warn once is gone; engine should configure keys)
+                auth.authenticated = true;
+                auth.method = scheme;
+                auth.user = "anonymous";
+            }
+            else {
+                const matched = apiKeys.some((key) => safeCompare(token, key));
+                if (matched) {
+                    auth.authenticated = true;
+                    auth.method = scheme;
+                    auth.user = "api-client";
+                }
+            }
+        }
+        c.set("auth", auth);
+        await next();
+    };
+}
+/**
+ * Middleware that rejects unauthenticated requests with 401.
+ * Apply to write endpoints (POST, PUT, DELETE).
+ */
+export function requireAuth() {
+    return async (c, next) => {
+        const auth = c.get("auth");
+        if (!auth?.authenticated) {
+            return c.json({ status: 401, message: "Unauthorized", code: "UNAUTHORIZED" }, 401);
+        }
+        await next();
+    };
+}
+//# sourceMappingURL=auth.js.map

package/dist/middleware/auth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.js","sourceRoot":"","sources":["../../src/middleware/auth.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAS9C,SAAS,WAAW,CAAC,CAAS,EAAE,CAAS;IACxC,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;IACrC,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;IACrC,IAAI,IAAI,CAAC,MAAM,KAAK,IAAI,CAAC,MAAM,EAAE,CAAC;QACjC,8EAA8E;QAC9E,eAAe,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QAC5B,OAAO,KAAK,CAAC;IACd,CAAC;IACD,OAAO,eAAe,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;AACpC,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,OAAkB;IAChD,OAAO,KAAK,EAAE,CAAU,EAAE,IAAU,EAAE,EAAE;QACvC,MAAM,UAAU,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC;QAEjD,MAAM,IAAI,GAAgB;YACzB,aAAa,EAAE,KAAK;YACpB,MAAM,EAAE,MAAM;SACd,CAAC;QAEF,IAAI,UAAU,EAAE,UAAU,CAAC,SAAS,CAAC,IAAI,UAAU,EAAE,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;YAC5E,MAAM,MAAM,GAAG,UAAU,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YACvE,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YAE5D,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACtC,0FAA0F;gBAC1F,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC;gBAC1B,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;gBACrB,IAAI,CAAC,IAAI,GAAG,WAAW,CAAC;YACzB,CAAC;iBAAM,CAAC;gBACP,MAAM,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,WAAW,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,CAAC;gBAC/D,IAAI,OAAO,EAAE,CAAC;oBACb,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC;oBAC1B,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;oBACrB,IAAI,CAAC,IAAI,GAAG,YAAY,CAAC;gBAC1B,CAAC;YACF,CAAC;QACF,CAAC;QAED,CAAC,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QACpB,MAAM,IAAI,EAAE,CAAC;IACd,CAAC,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,WAAW;IAC1B,OAAO,KAAK,EAAE,CAAU,EAAE,IAAU,EAAE,EAAE;QACvC,MAAM,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAA4B,CAAC;QACtD,IAAI,CAAC,IAAI,EAAE,aAAa,EAAE,CAAC;YAC1B,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,cAAc,EAAE,IAAI,EAAE,cAAc,EAAE,EAAE,GAAG,CAAC,CAAC;QACpF,CAAC;QACD,MAAM,IAAI,EAAE,CAAC;IACd,CAAC,CAAC;AACH,CAAC"}

package/dist/middleware/cors.d.ts

@@ -0,0 +1,2 @@
+export declare function corsMiddleware(origins?: string | string[]): import("hono").MiddlewareHandler;
+//# sourceMappingURL=cors.d.ts.map

package/dist/middleware/cors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cors.d.ts","sourceRoot":"","sources":["../../src/middleware/cors.ts"],"names":[],"mappings":"AAKA,wBAAgB,cAAc,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,oCASzD"}

package/dist/middleware/cors.js

@@ -0,0 +1,13 @@
+import { cors } from "hono/cors";
+// Default to localhost only when no origins are configured (deny-by-default in production)
+const DEFAULT_ORIGINS = ["http://localhost:3000", "http://localhost:4321", "http://localhost:5173"];
+export function corsMiddleware(origins) {
+    const origin = origins ?? DEFAULT_ORIGINS;
+    return cors({
+        origin,
+        allowMethods: ["GET", "POST", "PUT", "DELETE", "OPTIONS"],
+        allowHeaders: ["Content-Type", "Authorization"],
+        maxAge: 86400,
+    });
+}
+//# sourceMappingURL=cors.js.map

package/dist/middleware/cors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cors.js","sourceRoot":"","sources":["../../src/middleware/cors.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,2FAA2F;AAC3F,MAAM,eAAe,GAAG,CAAC,uBAAuB,EAAE,uBAAuB,EAAE,uBAAuB,CAAC,CAAC;AAEpG,MAAM,UAAU,cAAc,CAAC,OAA2B;IACzD,MAAM,MAAM,GAAG,OAAO,IAAI,eAAe,CAAC;IAE1C,OAAO,IAAI,CAAC;QACX,MAAM;QACN,YAAY,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,SAAS,CAAC;QACzD,YAAY,EAAE,CAAC,cAAc,EAAE,eAAe,CAAC;QAC/C,MAAM,EAAE,KAAK;KACb,CAAC,CAAC;AACJ,CAAC"}

package/dist/middleware/error-handler.d.ts

@@ -0,0 +1,24 @@
+import type { Context, Next } from "hono";
+export interface ApiError {
+    status: number;
+    message: string;
+    code: string;
+    details?: unknown;
+}
+export declare class SourcePressError extends Error {
+    status: number;
+    code: string;
+    details?: unknown;
+    constructor(status: number, code: string, message: string, details?: unknown);
+}
+export declare function errorHandler(): (c: Context, next: Next) => Promise<(Response & import("hono").TypedResponse<{
+    status: number;
+    message: string;
+    code: string;
+}, 500, "json">) | (Response & import("hono").TypedResponse<{
+    status: number;
+    message: string;
+    code: string;
+    details?: import("hono/utils/types").JSONValue | undefined;
+}, import("hono/utils/http-status").ContentfulStatusCode, "json">) | undefined>;
+//# sourceMappingURL=error-handler.d.ts.map