@takuhon/api 0.1.0

package/LICENSE

@@ -0,0 +1,202 @@
+
+                                 Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "[]"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright 2026 Takuhon contributors
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.

package/NOTICE

@@ -0,0 +1,10 @@
+@takuhon/api
+Copyright 2026 Takuhon contributors
+
+This product includes software developed by the Takuhon project
+(https://github.com/takuhon-dev/takuhon).
+
+Licensed under the Apache License, Version 2.0 (see LICENSE).
+
+Third-party dependencies retain their own licenses; see this package's
+node_modules listing for details.

package/README.md

@@ -0,0 +1,13 @@
+# @takuhon/api
+
+Hono-based HTTP route handlers, RFC 7807 Problem Details error envelope, and response builders for Takuhon.
+
+Ships:
+
+- `createPublicApp({ storage })` — public profile read endpoints, JSON-LD output, `/.well-known/takuhon.json`
+- `createAdminApiApp({ storage, bearerToken, originAllowlist, cachePurger, auditLogger })` — `PUT`/`DELETE /api/admin/profile` with optimistic locking (`If-Match`), audit logging, and edge-cache purging
+- `createAdminUiApp()` — minimal HTML admin editor (token + JSON textarea + Save/Delete)
+- `CachePurger` and `AuditLogger` dependency-injection interfaces (with `noopCachePurger` / `noopAuditLogger` no-op implementations)
+- `buildProblem` / `problemResponse` helpers and the `ProblemDetails` / `ErrorSlug` types for RFC 7807 error envelopes
+
+The package is framework-agnostic Hono — adapters (`@takuhon/cloudflare`, `@takuhon/static`, …) compose these factories with a storage backend and a runtime.

package/dist/index.d.ts

@@ -0,0 +1,150 @@
+import { Context, Hono } from 'hono';
+import { ContentfulStatusCode } from 'hono/utils/http-status';
+import { TakuhonStorage, Takuhon } from '@takuhon/core';
+
+/**
+ * RFC 7807 problem type slugs used by takuhon. The 11 below are the
+ * Spec-defined values (api.md §5.1); `methodNotAllowed` is added locally
+ * for the 405 path that the Spec leaves unnamed.
+ */
+declare const ERROR_SLUGS: {
+    readonly badRequest: "bad-request";
+    readonly unauthorized: "unauthorized";
+    readonly forbidden: "forbidden";
+    readonly notFound: "not-found";
+    readonly methodNotAllowed: "method-not-allowed";
+    readonly conflict: "conflict";
+    readonly payloadTooLarge: "payload-too-large";
+    readonly unsupportedMediaType: "unsupported-media-type";
+    readonly validationFailed: "validation-failed";
+    readonly tooManyRequests: "too-many-requests";
+    readonly internal: "internal";
+    readonly serviceUnavailable: "service-unavailable";
+};
+type ErrorSlug = (typeof ERROR_SLUGS)[keyof typeof ERROR_SLUGS];
+interface ProblemFieldError {
+    path: string;
+    message: string;
+}
+interface ProblemDetails {
+    type: string;
+    title: string;
+    status: number;
+    detail: string;
+    instance: string;
+    errors?: ProblemFieldError[];
+    currentVersion?: string;
+}
+interface BuildProblemInput {
+    slug: ErrorSlug;
+    status: number;
+    title: string;
+    detail: string;
+    instance: string;
+    errors?: ProblemFieldError[];
+    currentVersion?: string;
+}
+declare function buildProblem(input: BuildProblemInput): ProblemDetails;
+interface ProblemResponseInput {
+    slug: ErrorSlug;
+    status: ContentfulStatusCode;
+    title: string;
+    detail: string;
+    errors?: ProblemFieldError[];
+    currentVersion?: string;
+}
+declare function problemResponse(c: Context, input: ProblemResponseInput): Response;
+
+interface PublicAppDeps {
+    storage: TakuhonStorage;
+    /**
+     * Returned when storage reports NotFoundError. Adapters that ship a
+     * bundled example fixture (e.g. @takuhon/cloudflare) pass a thunk that
+     * returns the validated document so initial-onboarding requests still
+     * succeed before the first admin write.
+     */
+    fallback?: () => Takuhon;
+}
+declare function createPublicApp(deps: PublicAppDeps): Hono;
+
+/**
+ * Structured audit-log emitter for admin actions (per security.md §5).
+ *
+ * Phase 3.4 covers the auth + profile-write events. Asset events
+ * (`admin.asset.upload`, `admin.asset.delete`) join the union when Phase 3.5
+ * lands. Adapters bind a concrete sink (Cloudflare uses `console.log`, which
+ * Workers Tail / Logpush captures); tests inject a `vi.fn()` recorder.
+ */
+type AuditEventType = 'admin.auth.success' | 'admin.auth.failure' | 'admin.profile.update' | 'admin.profile.delete' | 'admin.cache.purge';
+interface AuditEvent {
+    type: AuditEventType;
+    /** ISO-8601 UTC timestamp generated at the call site. */
+    timestamp: string;
+    /**
+     * Actor identity. `tokenHash` is `sha256:<hex>` over the presented Bearer
+     * token, or `sha256:absent` when no token was supplied. The raw token is
+     * never logged.
+     */
+    actor?: {
+        tokenHash: string;
+    };
+    request: {
+        method: string;
+        path: string;
+        /** Originating client IP from `cf-connecting-ip`; undefined off-Cloudflare. */
+        ip?: string;
+    };
+    result: {
+        status: number;
+        /** Opaque storage version emitted by `TakuhonStorage.saveProfile`. */
+        version?: string;
+    };
+}
+type AuditLogger = (event: AuditEvent) => void;
+/** Default sink that discards events; useful for tests and bare runtimes. */
+declare const noopAuditLogger: AuditLogger;
+
+/**
+ * Cache invalidation contract for admin write paths.
+ *
+ * `@takuhon/api` stays adapter-neutral, so the actual edge-cache calls live
+ * in each adapter (Cloudflare's `caches.default.delete`, future runtimes'
+ * equivalents). Tests inject a recording implementation to assert that the
+ * admin handlers fire the right purge after a successful write.
+ */
+interface CachePurger {
+    /** Called after a successful `PUT /api/admin/profile`. */
+    profileUpdated(): Promise<void>;
+    /** Called after a successful `DELETE /api/admin/profile`. */
+    profileDeleted(): Promise<void>;
+}
+/**
+ * No-op default: callers that don't run on an edge cache (Node dev server,
+ * unit tests that don't care about purge calls) can pass this in.
+ */
+declare const noopCachePurger: CachePurger;
+
+interface AdminApiAppDeps {
+    storage: TakuhonStorage;
+    /** Returns the configured admin token, or undefined if no secret is set. */
+    getAdminToken: () => string | undefined;
+    /** Allowlist of origins permitted for browser-originating admin requests. */
+    getAdminOrigins: () => string[];
+    cachePurger: CachePurger;
+    auditLogger: AuditLogger;
+}
+/**
+ * Hono factory for `/api/admin/profile`. Mounted by adapters at `/api/admin`
+ * (so the sub-app sees `/profile` as the route path).
+ */
+declare function createAdminApiApp(deps: AdminApiAppDeps): Hono;
+
+/**
+ * Hono factory for the `/admin` HTML editor. Mounted by adapters at
+ * `/admin` (so the sub-app sees `/` as its root path). Each request gets a
+ * freshly-generated nonce shared between the CSP header and the inline
+ * `<style>` / `<script>` tags.
+ */
+declare function createAdminUiApp(): Hono;
+
+export { type AdminApiAppDeps, type AuditEvent, type AuditEventType, type AuditLogger, type BuildProblemInput, type CachePurger, ERROR_SLUGS, type ErrorSlug, type ProblemDetails, type ProblemFieldError, type ProblemResponseInput, type PublicAppDeps, buildProblem, createAdminApiApp, createAdminUiApp, createPublicApp, noopAuditLogger, noopCachePurger, problemResponse };

package/dist/index.js

@@ -0,0 +1,597 @@
+// src/error-envelope.ts
+var ERROR_SLUGS = {
+  badRequest: "bad-request",
+  unauthorized: "unauthorized",
+  forbidden: "forbidden",
+  notFound: "not-found",
+  methodNotAllowed: "method-not-allowed",
+  conflict: "conflict",
+  payloadTooLarge: "payload-too-large",
+  unsupportedMediaType: "unsupported-media-type",
+  validationFailed: "validation-failed",
+  tooManyRequests: "too-many-requests",
+  internal: "internal",
+  serviceUnavailable: "service-unavailable"
+};
+var TYPE_BASE = "https://takuhon.org/errors";
+function buildProblem(input) {
+  const out = {
+    type: `${TYPE_BASE}/${input.slug}`,
+    title: input.title,
+    status: input.status,
+    detail: input.detail,
+    instance: input.instance
+  };
+  if (input.errors !== void 0) out.errors = input.errors;
+  if (input.currentVersion !== void 0) out.currentVersion = input.currentVersion;
+  return out;
+}
+function problemResponse(c, input) {
+  const body = buildProblem({
+    slug: input.slug,
+    status: input.status,
+    title: input.title,
+    detail: input.detail,
+    instance: new URL(c.req.url).pathname,
+    errors: input.errors,
+    currentVersion: input.currentVersion
+  });
+  return c.body(JSON.stringify(body), input.status, {
+    "content-type": "application/problem+json; charset=utf-8"
+  });
+}
+
+// src/public-app.ts
+import {
+  NotFoundError,
+  SCHEMA_VERSION,
+  generateJsonLd,
+  normalize,
+  resolveLocale,
+  schema
+} from "@takuhon/core";
+import { Hono } from "hono";
+var FALLBACK_VERSION = "bundled-fixture";
+var PUBLIC_CSP = [
+  "default-src 'self'",
+  "img-src 'self' data:",
+  "style-src 'self' 'unsafe-inline'",
+  "script-src 'self'",
+  "font-src 'self'",
+  "connect-src 'self'",
+  "frame-ancestors 'none'",
+  "base-uri 'self'",
+  "form-action 'self'",
+  "upgrade-insecure-requests"
+].join("; ");
+async function loadProfile(deps) {
+  try {
+    return await deps.storage.getProfile();
+  } catch (e) {
+    if (e instanceof NotFoundError && deps.fallback) {
+      return { data: deps.fallback(), version: FALLBACK_VERSION };
+    }
+    throw e;
+  }
+}
+function createPublicApp(deps) {
+  const app = new Hono();
+  app.use("*", async (c, next) => {
+    await next();
+    const h = c.res.headers;
+    h.set("strict-transport-security", "max-age=63072000; includeSubDomains; preload");
+    h.set("x-content-type-options", "nosniff");
+    h.set("x-frame-options", "DENY");
+    h.set("referrer-policy", "strict-origin-when-cross-origin");
+    h.set("permissions-policy", "camera=(), microphone=(), geolocation=(), interest-cohort=()");
+    h.set("content-security-policy", PUBLIC_CSP);
+  });
+  app.onError(
+    (err, c) => problemResponse(c, {
+      slug: ERROR_SLUGS.internal,
+      status: 500,
+      title: "Internal Error",
+      detail: err instanceof Error ? err.message : "Unknown failure"
+    })
+  );
+  app.notFound(
+    (c) => problemResponse(c, {
+      slug: ERROR_SLUGS.notFound,
+      status: 404,
+      title: "Not Found",
+      detail: `No route matches ${new URL(c.req.url).pathname}.`
+    })
+  );
+  app.get("/", (c) => c.text("takuhon \u2014 visit /api/profile or /api/schema\n"));
+  app.get("/api/profile", async (c) => {
+    const lang = c.req.query("lang");
+    const { data, version } = await loadProfile(deps);
+    const localized = resolveLocale(normalize(data), lang);
+    const body = {
+      data: localized,
+      meta: {
+        schemaVersion: localized.schemaVersion,
+        locale: localized.resolvedLocale,
+        updatedAt: localized.meta.updatedAt
+      }
+    };
+    c.header("etag", `"${version}"`);
+    c.header("cache-control", "public, max-age=300, s-maxage=300");
+    return c.json(body);
+  });
+  app.get("/api/schema", (c) => c.json(schema));
+  app.get("/api/jsonld", async (c) => {
+    const lang = c.req.query("lang");
+    const { data, version } = await loadProfile(deps);
+    const localized = resolveLocale(normalize(data), lang);
+    const ld = generateJsonLd(localized);
+    c.header("etag", `"${version}"`);
+    c.header("cache-control", "public, max-age=300, s-maxage=300");
+    c.header("content-type", "application/ld+json; charset=utf-8");
+    return c.body(JSON.stringify(ld));
+  });
+  app.get("/takuhon.json", async (c) => {
+    const { data, version } = await loadProfile(deps);
+    c.header("etag", `"${version}"`);
+    c.header("cache-control", "public, max-age=300");
+    return c.json(data);
+  });
+  app.get("/.well-known/takuhon.json", (c) => {
+    c.header("cache-control", "public, max-age=3600");
+    return c.json({
+      schemaVersion: SCHEMA_VERSION,
+      schemaUrl: "/api/schema",
+      profile: "/api/profile",
+      jsonld: "/api/jsonld",
+      export: "/api/export",
+      canonical: "/takuhon.json"
+    });
+  });
+  app.on(
+    ["POST", "PUT", "PATCH", "DELETE"],
+    "*",
+    (c) => problemResponse(c, {
+      slug: ERROR_SLUGS.methodNotAllowed,
+      status: 405,
+      title: "Method Not Allowed",
+      detail: `${c.req.method} ${new URL(c.req.url).pathname} is not supported on the public app.`
+    })
+  );
+  return app;
+}
+
+// src/admin/admin-api-app.ts
+import {
+  ConflictError,
+  normalize as normalize2,
+  validate
+} from "@takuhon/core";
+import { Hono as Hono2 } from "hono";
+
+// src/admin/bearer.ts
+function constantTimeEqual(a, b) {
+  const len = a.length > b.length ? a.length : b.length;
+  let diff = a.length === b.length ? 0 : 1;
+  for (let i = 0; i < len; i++) {
+    const ai = a[i] ?? 0;
+    const bi = b[i] ?? 0;
+    diff |= ai ^ bi;
+  }
+  return diff === 0;
+}
+async function sha256Hex(input) {
+  const buf = await crypto.subtle.digest("SHA-256", new TextEncoder().encode(input));
+  const bytes = new Uint8Array(buf);
+  let out = "";
+  for (const b of bytes) {
+    out += b.toString(16).padStart(2, "0");
+  }
+  return out;
+}
+async function getActorTokenHash(c) {
+  const header = c.req.header("authorization") ?? "";
+  const m = /^Bearer\s+(.+)$/i.exec(header);
+  const token = m?.[1] ?? "";
+  if (token === "") return "sha256:absent";
+  return `sha256:${await sha256Hex(token)}`;
+}
+function bearerMiddleware(opts) {
+  return async (c, next) => {
+    const expected = opts.getAdminToken();
+    const header = c.req.header("authorization") ?? "";
+    const match = /^Bearer\s+(.+)$/i.exec(header);
+    const presented = match?.[1];
+    const isOk = expected !== void 0 && presented !== void 0 && constantTimeEqual(new TextEncoder().encode(presented), new TextEncoder().encode(expected));
+    const tokenHash = await getActorTokenHash(c);
+    const baseRequest = {
+      method: c.req.method,
+      path: new URL(c.req.url).pathname,
+      ip: c.req.header("cf-connecting-ip")
+    };
+    if (!isOk) {
+      opts.auditLogger({
+        type: "admin.auth.failure",
+        timestamp: (/* @__PURE__ */ new Date()).toISOString(),
+        actor: { tokenHash },
+        request: baseRequest,
+        result: { status: 401 }
+      });
+      return problemResponse(c, {
+        slug: ERROR_SLUGS.unauthorized,
+        status: 401,
+        title: "Unauthorized",
+        detail: "Bearer token missing or invalid."
+      });
+    }
+    opts.auditLogger({
+      type: "admin.auth.success",
+      timestamp: (/* @__PURE__ */ new Date()).toISOString(),
+      actor: { tokenHash },
+      request: baseRequest,
+      result: { status: 200 }
+    });
+    await next();
+  };
+}
+
+// src/admin/origin.ts
+function originMiddleware(opts) {
+  return async (c, next) => {
+    const allow = opts.getAdminOrigins();
+    if (allow.length === 0) {
+      await next();
+      return;
+    }
+    const origin = c.req.header("origin");
+    if (origin !== void 0 && !allow.includes(origin)) {
+      return problemResponse(c, {
+        slug: ERROR_SLUGS.forbidden,
+        status: 403,
+        title: "Forbidden",
+        detail: `Origin ${origin} is not in the admin allowlist.`
+      });
+    }
+    await next();
+  };
+}
+
+// src/admin/admin-api-app.ts
+var ADMIN_API_CSP = ["default-src 'none'", "frame-ancestors 'none'", "base-uri 'none'"].join(
+  "; "
+);
+function toFieldError(e) {
+  return { path: `#${e.pointer}`, message: e.message };
+}
+function stripETag(raw) {
+  const trimmed = raw.trim();
+  if (trimmed.startsWith('"') && trimmed.endsWith('"') && trimmed.length >= 2) {
+    return trimmed.slice(1, -1);
+  }
+  return trimmed;
+}
+function createAdminApiApp(deps) {
+  const app = new Hono2();
+  app.use("*", async (c, next) => {
+    await next();
+    const h = c.res.headers;
+    h.set("strict-transport-security", "max-age=63072000; includeSubDomains; preload");
+    h.set("x-content-type-options", "nosniff");
+    h.set("x-frame-options", "DENY");
+    h.set("referrer-policy", "strict-origin-when-cross-origin");
+    h.set("permissions-policy", "camera=(), microphone=(), geolocation=(), interest-cohort=()");
+    h.set("content-security-policy", ADMIN_API_CSP);
+    h.set("cache-control", "private, no-store");
+  });
+  app.use("*", originMiddleware({ getAdminOrigins: deps.getAdminOrigins }));
+  app.use(
+    "*",
+    bearerMiddleware({ getAdminToken: deps.getAdminToken, auditLogger: deps.auditLogger })
+  );
+  app.onError(
+    (err, c) => problemResponse(c, {
+      slug: ERROR_SLUGS.internal,
+      status: 500,
+      title: "Internal Error",
+      detail: err instanceof Error ? err.message : "Unknown failure"
+    })
+  );
+  app.notFound(
+    (c) => problemResponse(c, {
+      slug: ERROR_SLUGS.notFound,
+      status: 404,
+      title: "Not Found",
+      detail: `No admin route matches ${new URL(c.req.url).pathname}.`
+    })
+  );
+  app.put("/profile", async (c) => {
+    const contentType = c.req.header("content-type") ?? "";
+    if (!contentType.toLowerCase().startsWith("application/json")) {
+      return problemResponse(c, {
+        slug: ERROR_SLUGS.unsupportedMediaType,
+        status: 415,
+        title: "Unsupported Media Type",
+        detail: `Content-Type must be application/json (got "${contentType}").`
+      });
+    }
+    let parsed;
+    try {
+      parsed = await c.req.json();
+    } catch {
+      return problemResponse(c, {
+        slug: ERROR_SLUGS.badRequest,
+        status: 400,
+        title: "Bad Request",
+        detail: "Request body is not valid JSON."
+      });
+    }
+    const result = validate(parsed);
+    if (!result.ok) {
+      return problemResponse(c, {
+        slug: ERROR_SLUGS.validationFailed,
+        status: 422,
+        title: "Validation Failed",
+        detail: `Schema validation failed (${String(result.errors.length)} error(s)).`,
+        errors: result.errors.map(toFieldError)
+      });
+    }
+    const data = result.data;
+    const ifMatchRaw = c.req.header("if-match");
+    const ifMatch = ifMatchRaw !== void 0 ? stripETag(ifMatchRaw) : void 0;
+    let saved;
+    try {
+      saved = await deps.storage.saveProfile(data, ifMatch);
+    } catch (e) {
+      if (e instanceof ConflictError) {
+        return problemResponse(c, {
+          slug: ERROR_SLUGS.conflict,
+          status: 409,
+          title: "Conflict",
+          detail: "Stored profile version does not match If-Match.",
+          currentVersion: e.currentVersion
+        });
+      }
+      throw e;
+    }
+    await deps.cachePurger.profileUpdated();
+    const updatedAt = (/* @__PURE__ */ new Date()).toISOString();
+    const tokenHash = await getActorTokenHash(c);
+    deps.auditLogger({
+      type: "admin.profile.update",
+      timestamp: updatedAt,
+      actor: { tokenHash },
+      request: {
+        method: "PUT",
+        path: new URL(c.req.url).pathname,
+        ip: c.req.header("cf-connecting-ip")
+      },
+      result: { status: 200, version: saved.version }
+    });
+    return c.json({
+      data: normalize2(data),
+      meta: {
+        schemaVersion: data.schemaVersion,
+        version: saved.version,
+        updatedAt
+      }
+    });
+  });
+  app.delete("/profile", async (c) => {
+    await deps.storage.deleteProfile();
+    await deps.cachePurger.profileDeleted();
+    const tokenHash = await getActorTokenHash(c);
+    deps.auditLogger({
+      type: "admin.profile.delete",
+      timestamp: (/* @__PURE__ */ new Date()).toISOString(),
+      actor: { tokenHash },
+      request: {
+        method: "DELETE",
+        path: new URL(c.req.url).pathname,
+        ip: c.req.header("cf-connecting-ip")
+      },
+      result: { status: 204 }
+    });
+    return c.body(null, 204);
+  });
+  app.on(
+    ["POST", "PATCH"],
+    "/profile",
+    (c) => problemResponse(c, {
+      slug: ERROR_SLUGS.methodNotAllowed,
+      status: 405,
+      title: "Method Not Allowed",
+      detail: `${c.req.method} ${new URL(c.req.url).pathname} is not supported on the admin app.`
+    })
+  );
+  return app;
+}
+
+// src/admin/admin-ui-app.ts
+import { Hono as Hono3 } from "hono";
+
+// src/admin/admin-html.ts
+function renderAdminHtml(nonce) {
+  return `<!doctype html>
+<html lang="en">
+<head>
+<meta charset="utf-8">
+<meta name="viewport" content="width=device-width, initial-scale=1">
+<title>takuhon admin</title>
+<style nonce="${nonce}">
+body { font-family: system-ui, -apple-system, sans-serif; max-width: 960px; margin: 2rem auto; padding: 0 1rem; color: #222; }
+h1 { font-size: 1.5rem; }
+p.note { color: #555; }
+label { display: block; margin: 1rem 0 0.25rem; font-weight: 600; }
+input[type=password], textarea { width: 100%; box-sizing: border-box; padding: 0.5rem; font-family: ui-monospace, SFMono-Regular, Menlo, monospace; font-size: 0.9rem; border: 1px solid #999; border-radius: 4px; }
+textarea { min-height: 24rem; }
+.row { display: flex; gap: 0.5rem; margin-top: 1rem; }
+button { padding: 0.5rem 1rem; font-size: 0.95rem; border: 1px solid #444; background: #fafafa; border-radius: 4px; cursor: pointer; }
+button.danger { border-color: #b03; color: #b03; background: #fff5f5; }
+#status { margin-top: 1rem; padding: 0.75rem; border-radius: 4px; white-space: pre-wrap; word-break: break-word; }
+#status.ok { background: #e6f4ea; color: #1b5e20; border: 1px solid #82c891; }
+#status.err { background: #fdecea; color: #b71c1c; border: 1px solid #ef9a9a; }
+small.version { color: #555; }
+</style>
+</head>
+<body>
+<h1>takuhon admin</h1>
+<p class="note">Edit the full <code>takuhon.json</code> document and Save. Optimistic locking via <code>If-Match</code> guards concurrent edits; the token is never sent over the URL.</p>
+<label for="token">Admin token</label>
+<input id="token" type="password" autocomplete="off" spellcheck="false">
+<label for="payload">takuhon.json <small class="version" id="versionLabel"></small></label>
+<textarea id="payload" spellcheck="false" autocapitalize="off" autocomplete="off"></textarea>
+<div class="row">
+  <button id="save" type="button">Save</button>
+  <button id="delete" type="button" class="danger">Delete profile</button>
+  <button id="reload" type="button">Reload current</button>
+</div>
+<div id="status" hidden></div>
+<script nonce="${nonce}">
+(function () {
+  var tokenEl = document.getElementById('token');
+  var payloadEl = document.getElementById('payload');
+  var versionEl = document.getElementById('versionLabel');
+  var statusEl = document.getElementById('status');
+  var ifMatch = '';
+
+  function setStatus(message, ok) {
+    statusEl.textContent = message;
+    statusEl.className = ok ? 'ok' : 'err';
+    statusEl.hidden = false;
+  }
+  function setVersion(etag) {
+    ifMatch = etag || '';
+    versionEl.textContent = ifMatch ? '(current version: ' + ifMatch + ')' : '(no stored version)';
+  }
+  function getToken() {
+    var t = tokenEl.value.trim();
+    if (!t) { setStatus('Admin token is required.', false); return null; }
+    return t;
+  }
+  async function loadCurrent() {
+    try {
+      var res = await fetch('/takuhon.json', { cache: 'no-store' });
+      if (!res.ok) { setStatus('Failed to load /takuhon.json: ' + res.status, false); return; }
+      setVersion(res.headers.get('etag'));
+      var json = await res.json();
+      payloadEl.value = JSON.stringify(json, null, 2);
+      setStatus('Loaded current profile.', true);
+    } catch (e) {
+      setStatus('Network error loading current profile: ' + (e && e.message ? e.message : String(e)), false);
+    }
+  }
+  async function save() {
+    var token = getToken();
+    if (!token) return;
+    var body;
+    try {
+      body = JSON.parse(payloadEl.value);
+    } catch (e) {
+      setStatus('JSON parse error: ' + (e && e.message ? e.message : String(e)), false);
+      return;
+    }
+    var headers = { 'Content-Type': 'application/json', 'Authorization': 'Bearer ' + token };
+    if (ifMatch) headers['If-Match'] = ifMatch;
+    try {
+      var res = await fetch('/api/admin/profile', { method: 'PUT', headers: headers, body: JSON.stringify(body) });
+      var json = await res.json().catch(function () { return null; });
+      if (res.ok && json && json.meta && json.meta.version) {
+        setVersion('"' + json.meta.version + '"');
+        setStatus('Saved. New version: ' + json.meta.version, true);
+      } else {
+        setStatus('Save failed (' + res.status + '): ' + (json ? JSON.stringify(json, null, 2) : 'no body'), false);
+      }
+    } catch (e) {
+      setStatus('Network error during save: ' + (e && e.message ? e.message : String(e)), false);
+    }
+  }
+  async function deleteProfile() {
+    var token = getToken();
+    if (!token) return;
+    if (!confirm('Delete the profile? The bundled onboarding fixture will be shown until you save a new document.')) return;
+    var headers = { 'Authorization': 'Bearer ' + token };
+    try {
+      var res = await fetch('/api/admin/profile', { method: 'DELETE', headers: headers });
+      if (res.ok) {
+        payloadEl.value = '';
+        setVersion('');
+        setStatus('Deleted.', true);
+      } else {
+        var json = await res.json().catch(function () { return null; });
+        setStatus('Delete failed (' + res.status + '): ' + (json ? JSON.stringify(json, null, 2) : 'no body'), false);
+      }
+    } catch (e) {
+      setStatus('Network error during delete: ' + (e && e.message ? e.message : String(e)), false);
+    }
+  }
+
+  document.getElementById('save').addEventListener('click', save);
+  document.getElementById('delete').addEventListener('click', deleteProfile);
+  document.getElementById('reload').addEventListener('click', loadCurrent);
+  loadCurrent();
+})();
+</script>
+</body>
+</html>
+`;
+}
+
+// src/admin/admin-ui-app.ts
+function adminCsp(nonce) {
+  return [
+    "default-src 'self'",
+    "img-src 'self' blob:",
+    `style-src 'self' 'nonce-${nonce}'`,
+    `script-src 'self' 'nonce-${nonce}'`,
+    "font-src 'self'",
+    "connect-src 'self'",
+    "frame-ancestors 'none'",
+    "base-uri 'self'",
+    "form-action 'self'",
+    "require-trusted-types-for 'script'",
+    "upgrade-insecure-requests"
+  ].join("; ");
+}
+function generateNonce() {
+  const bytes = crypto.getRandomValues(new Uint8Array(16));
+  let bin = "";
+  for (const b of bytes) {
+    bin += String.fromCharCode(b);
+  }
+  return btoa(bin);
+}
+function createAdminUiApp() {
+  const app = new Hono3();
+  app.get("/", (c) => {
+    const nonce = generateNonce();
+    c.header("strict-transport-security", "max-age=63072000; includeSubDomains; preload");
+    c.header("x-content-type-options", "nosniff");
+    c.header("x-frame-options", "DENY");
+    c.header("referrer-policy", "strict-origin-when-cross-origin");
+    c.header("permissions-policy", "camera=(), microphone=(), geolocation=(), interest-cohort=()");
+    c.header("content-security-policy", adminCsp(nonce));
+    c.header("cache-control", "private, no-store");
+    return c.html(renderAdminHtml(nonce));
+  });
+  return app;
+}
+
+// src/admin/audit-logger.ts
+var noopAuditLogger = () => {
+};
+
+// src/admin/cache-purger.ts
+var noopCachePurger = {
+  profileUpdated: () => Promise.resolve(),
+  profileDeleted: () => Promise.resolve()
+};
+export {
+  ERROR_SLUGS,
+  buildProblem,
+  createAdminApiApp,
+  createAdminUiApp,
+  createPublicApp,
+  noopAuditLogger,
+  noopCachePurger,
+  problemResponse
+};
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/error-envelope.ts","../src/public-app.ts","../src/admin/admin-api-app.ts","../src/admin/bearer.ts","../src/admin/origin.ts","../src/admin/admin-ui-app.ts","../src/admin/admin-html.ts","../src/admin/audit-logger.ts","../src/admin/cache-purger.ts"],"sourcesContent":["import type { Context } from 'hono';\nimport type { ContentfulStatusCode } from 'hono/utils/http-status';\n\n/**\n * RFC 7807 problem type slugs used by takuhon. The 11 below are the\n * Spec-defined values (api.md §5.1); `methodNotAllowed` is added locally\n * for the 405 path that the Spec leaves unnamed.\n */\nexport const ERROR_SLUGS = {\n  badRequest: 'bad-request',\n  unauthorized: 'unauthorized',\n  forbidden: 'forbidden',\n  notFound: 'not-found',\n  methodNotAllowed: 'method-not-allowed',\n  conflict: 'conflict',\n  payloadTooLarge: 'payload-too-large',\n  unsupportedMediaType: 'unsupported-media-type',\n  validationFailed: 'validation-failed',\n  tooManyRequests: 'too-many-requests',\n  internal: 'internal',\n  serviceUnavailable: 'service-unavailable',\n} as const;\n\nexport type ErrorSlug = (typeof ERROR_SLUGS)[keyof typeof ERROR_SLUGS];\n\nconst TYPE_BASE = 'https://takuhon.org/errors';\n\nexport interface ProblemFieldError {\n  path: string;\n  message: string;\n}\n\nexport interface ProblemDetails {\n  type: string;\n  title: string;\n  status: number;\n  detail: string;\n  instance: string;\n  errors?: ProblemFieldError[];\n  currentVersion?: string;\n}\n\nexport interface BuildProblemInput {\n  slug: ErrorSlug;\n  status: number;\n  title: string;\n  detail: string;\n  instance: string;\n  errors?: ProblemFieldError[];\n  currentVersion?: string;\n}\n\nexport function buildProblem(input: BuildProblemInput): ProblemDetails {\n  const out: ProblemDetails = {\n    type: `${TYPE_BASE}/${input.slug}`,\n    title: input.title,\n    status: input.status,\n    detail: input.detail,\n    instance: input.instance,\n  };\n  if (input.errors !== undefined) out.errors = input.errors;\n  if (input.currentVersion !== undefined) out.currentVersion = input.currentVersion;\n  return out;\n}\n\nexport interface ProblemResponseInput {\n  slug: ErrorSlug;\n  status: ContentfulStatusCode;\n  title: string;\n  detail: string;\n  errors?: ProblemFieldError[];\n  currentVersion?: string;\n}\n\nexport function problemResponse(c: Context, input: ProblemResponseInput): Response {\n  const body = buildProblem({\n    slug: input.slug,\n    status: input.status,\n    title: input.title,\n    detail: input.detail,\n    instance: new URL(c.req.url).pathname,\n    errors: input.errors,\n    currentVersion: input.currentVersion,\n  });\n  return c.body(JSON.stringify(body), input.status, {\n    'content-type': 'application/problem+json; charset=utf-8',\n  });\n}\n","import {\n  NotFoundError,\n  SCHEMA_VERSION,\n  generateJsonLd,\n  normalize,\n  resolveLocale,\n  schema,\n  type Takuhon,\n  type TakuhonStorage,\n} from '@takuhon/core';\nimport { Hono } from 'hono';\n\nimport { ERROR_SLUGS, problemResponse } from './error-envelope.js';\n\nexport interface PublicAppDeps {\n  storage: TakuhonStorage;\n  /**\n   * Returned when storage reports NotFoundError. Adapters that ship a\n   * bundled example fixture (e.g. @takuhon/cloudflare) pass a thunk that\n   * returns the validated document so initial-onboarding requests still\n   * succeed before the first admin write.\n   */\n  fallback?: () => Takuhon;\n}\n\nconst FALLBACK_VERSION = 'bundled-fixture';\n\nconst PUBLIC_CSP = [\n  \"default-src 'self'\",\n  \"img-src 'self' data:\",\n  \"style-src 'self' 'unsafe-inline'\",\n  \"script-src 'self'\",\n  \"font-src 'self'\",\n  \"connect-src 'self'\",\n  \"frame-ancestors 'none'\",\n  \"base-uri 'self'\",\n  \"form-action 'self'\",\n  'upgrade-insecure-requests',\n].join('; ');\n\nasync function loadProfile(deps: PublicAppDeps): Promise<{ data: Takuhon; version: string }> {\n  try {\n    return await deps.storage.getProfile();\n  } catch (e) {\n    if (e instanceof NotFoundError && deps.fallback) {\n      return { data: deps.fallback(), version: FALLBACK_VERSION };\n    }\n    throw e;\n  }\n}\n\nexport function createPublicApp(deps: PublicAppDeps): Hono {\n  const app = new Hono();\n\n  app.use('*', async (c, next) => {\n    await next();\n    const h = c.res.headers;\n    h.set('strict-transport-security', 'max-age=63072000; includeSubDomains; preload');\n    h.set('x-content-type-options', 'nosniff');\n    h.set('x-frame-options', 'DENY');\n    h.set('referrer-policy', 'strict-origin-when-cross-origin');\n    h.set('permissions-policy', 'camera=(), microphone=(), geolocation=(), interest-cohort=()');\n    h.set('content-security-policy', PUBLIC_CSP);\n  });\n\n  app.onError((err, c) =>\n    problemResponse(c, {\n      slug: ERROR_SLUGS.internal,\n      status: 500,\n      title: 'Internal Error',\n      detail: err instanceof Error ? err.message : 'Unknown failure',\n    }),\n  );\n\n  app.notFound((c) =>\n    problemResponse(c, {\n      slug: ERROR_SLUGS.notFound,\n      status: 404,\n      title: 'Not Found',\n      detail: `No route matches ${new URL(c.req.url).pathname}.`,\n    }),\n  );\n\n  app.get('/', (c) => c.text('takuhon — visit /api/profile or /api/schema\\n'));\n\n  app.get('/api/profile', async (c) => {\n    const lang = c.req.query('lang');\n    const { data, version } = await loadProfile(deps);\n    const localized = resolveLocale(normalize(data), lang);\n    const body = {\n      data: localized,\n      meta: {\n        schemaVersion: localized.schemaVersion,\n        locale: localized.resolvedLocale,\n        updatedAt: localized.meta.updatedAt,\n      },\n    };\n    c.header('etag', `\"${version}\"`);\n    c.header('cache-control', 'public, max-age=300, s-maxage=300');\n    return c.json(body);\n  });\n\n  app.get('/api/schema', (c) => c.json(schema));\n\n  app.get('/api/jsonld', async (c) => {\n    const lang = c.req.query('lang');\n    const { data, version } = await loadProfile(deps);\n    const localized = resolveLocale(normalize(data), lang);\n    const ld = generateJsonLd(localized);\n    c.header('etag', `\"${version}\"`);\n    c.header('cache-control', 'public, max-age=300, s-maxage=300');\n    c.header('content-type', 'application/ld+json; charset=utf-8');\n    return c.body(JSON.stringify(ld));\n  });\n\n  app.get('/takuhon.json', async (c) => {\n    const { data, version } = await loadProfile(deps);\n    c.header('etag', `\"${version}\"`);\n    c.header('cache-control', 'public, max-age=300');\n    return c.json(data);\n  });\n\n  app.get('/.well-known/takuhon.json', (c) => {\n    c.header('cache-control', 'public, max-age=3600');\n    return c.json({\n      schemaVersion: SCHEMA_VERSION,\n      schemaUrl: '/api/schema',\n      profile: '/api/profile',\n      jsonld: '/api/jsonld',\n      export: '/api/export',\n      canonical: '/takuhon.json',\n    });\n  });\n\n  app.on(['POST', 'PUT', 'PATCH', 'DELETE'], '*', (c) =>\n    problemResponse(c, {\n      slug: ERROR_SLUGS.methodNotAllowed,\n      status: 405,\n      title: 'Method Not Allowed',\n      detail: `${c.req.method} ${new URL(c.req.url).pathname} is not supported on the public app.`,\n    }),\n  );\n\n  return app;\n}\n","import {\n  ConflictError,\n  normalize,\n  validate,\n  type Takuhon,\n  type TakuhonStorage,\n  type ValidationError,\n} from '@takuhon/core';\nimport { Hono } from 'hono';\n\nimport { ERROR_SLUGS, problemResponse, type ProblemFieldError } from '../error-envelope.js';\n\nimport type { AuditLogger } from './audit-logger.js';\nimport { bearerMiddleware, getActorTokenHash } from './bearer.js';\nimport type { CachePurger } from './cache-purger.js';\nimport { originMiddleware } from './origin.js';\n\n/**\n * Defense-in-depth CSP for JSON-only responses. Nothing renders here, so\n * `'none'` everywhere is the strongest stance the spec leaves room for.\n */\nconst ADMIN_API_CSP = [\"default-src 'none'\", \"frame-ancestors 'none'\", \"base-uri 'none'\"].join(\n  '; ',\n);\n\nexport interface AdminApiAppDeps {\n  storage: TakuhonStorage;\n  /** Returns the configured admin token, or undefined if no secret is set. */\n  getAdminToken: () => string | undefined;\n  /** Allowlist of origins permitted for browser-originating admin requests. */\n  getAdminOrigins: () => string[];\n  cachePurger: CachePurger;\n  auditLogger: AuditLogger;\n}\n\n/**\n * Map a core `ValidationError` to the RFC 7807 field-error shape. The leading\n * `#` produces a JSON Schema-style fragment reference (`#/profile/...`) that\n * matches the example in `api.md §5`.\n */\nfunction toFieldError(e: ValidationError): ProblemFieldError {\n  return { path: `#${e.pointer}`, message: e.message };\n}\n\n/** Strip RFC 7232 double-quote delimiters from an `If-Match` header value. */\nfunction stripETag(raw: string): string {\n  const trimmed = raw.trim();\n  if (trimmed.startsWith('\"') && trimmed.endsWith('\"') && trimmed.length >= 2) {\n    return trimmed.slice(1, -1);\n  }\n  return trimmed;\n}\n\n/**\n * Hono factory for `/api/admin/profile`. Mounted by adapters at `/api/admin`\n * (so the sub-app sees `/profile` as the route path).\n */\nexport function createAdminApiApp(deps: AdminApiAppDeps): Hono {\n  const app = new Hono();\n\n  app.use('*', async (c, next) => {\n    await next();\n    const h = c.res.headers;\n    h.set('strict-transport-security', 'max-age=63072000; includeSubDomains; preload');\n    h.set('x-content-type-options', 'nosniff');\n    h.set('x-frame-options', 'DENY');\n    h.set('referrer-policy', 'strict-origin-when-cross-origin');\n    h.set('permissions-policy', 'camera=(), microphone=(), geolocation=(), interest-cohort=()');\n    h.set('content-security-policy', ADMIN_API_CSP);\n    h.set('cache-control', 'private, no-store');\n  });\n\n  app.use('*', originMiddleware({ getAdminOrigins: deps.getAdminOrigins }));\n  app.use(\n    '*',\n    bearerMiddleware({ getAdminToken: deps.getAdminToken, auditLogger: deps.auditLogger }),\n  );\n\n  app.onError((err, c) =>\n    problemResponse(c, {\n      slug: ERROR_SLUGS.internal,\n      status: 500,\n      title: 'Internal Error',\n      detail: err instanceof Error ? err.message : 'Unknown failure',\n    }),\n  );\n\n  app.notFound((c) =>\n    problemResponse(c, {\n      slug: ERROR_SLUGS.notFound,\n      status: 404,\n      title: 'Not Found',\n      detail: `No admin route matches ${new URL(c.req.url).pathname}.`,\n    }),\n  );\n\n  app.put('/profile', async (c) => {\n    const contentType = c.req.header('content-type') ?? '';\n    if (!contentType.toLowerCase().startsWith('application/json')) {\n      return problemResponse(c, {\n        slug: ERROR_SLUGS.unsupportedMediaType,\n        status: 415,\n        title: 'Unsupported Media Type',\n        detail: `Content-Type must be application/json (got \"${contentType}\").`,\n      });\n    }\n\n    let parsed: unknown;\n    try {\n      parsed = await c.req.json();\n    } catch {\n      return problemResponse(c, {\n        slug: ERROR_SLUGS.badRequest,\n        status: 400,\n        title: 'Bad Request',\n        detail: 'Request body is not valid JSON.',\n      });\n    }\n\n    const result = validate(parsed);\n    if (!result.ok) {\n      return problemResponse(c, {\n        slug: ERROR_SLUGS.validationFailed,\n        status: 422,\n        title: 'Validation Failed',\n        detail: `Schema validation failed (${String(result.errors.length)} error(s)).`,\n        errors: result.errors.map(toFieldError),\n      });\n    }\n\n    const data: Takuhon = result.data;\n    const ifMatchRaw = c.req.header('if-match');\n    const ifMatch = ifMatchRaw !== undefined ? stripETag(ifMatchRaw) : undefined;\n\n    let saved: { version: string };\n    try {\n      saved = await deps.storage.saveProfile(data, ifMatch);\n    } catch (e) {\n      if (e instanceof ConflictError) {\n        return problemResponse(c, {\n          slug: ERROR_SLUGS.conflict,\n          status: 409,\n          title: 'Conflict',\n          detail: 'Stored profile version does not match If-Match.',\n          currentVersion: e.currentVersion,\n        });\n      }\n      throw e;\n    }\n\n    await deps.cachePurger.profileUpdated();\n\n    const updatedAt = new Date().toISOString();\n    const tokenHash = await getActorTokenHash(c);\n    deps.auditLogger({\n      type: 'admin.profile.update',\n      timestamp: updatedAt,\n      actor: { tokenHash },\n      request: {\n        method: 'PUT',\n        path: new URL(c.req.url).pathname,\n        ip: c.req.header('cf-connecting-ip'),\n      },\n      result: { status: 200, version: saved.version },\n    });\n\n    return c.json({\n      data: normalize(data),\n      meta: {\n        schemaVersion: data.schemaVersion,\n        version: saved.version,\n        updatedAt,\n      },\n    });\n  });\n\n  app.delete('/profile', async (c) => {\n    await deps.storage.deleteProfile();\n    await deps.cachePurger.profileDeleted();\n\n    const tokenHash = await getActorTokenHash(c);\n    deps.auditLogger({\n      type: 'admin.profile.delete',\n      timestamp: new Date().toISOString(),\n      actor: { tokenHash },\n      request: {\n        method: 'DELETE',\n        path: new URL(c.req.url).pathname,\n        ip: c.req.header('cf-connecting-ip'),\n      },\n      result: { status: 204 },\n    });\n\n    return c.body(null, 204);\n  });\n\n  app.on(['POST', 'PATCH'], '/profile', (c) =>\n    problemResponse(c, {\n      slug: ERROR_SLUGS.methodNotAllowed,\n      status: 405,\n      title: 'Method Not Allowed',\n      detail: `${c.req.method} ${new URL(c.req.url).pathname} is not supported on the admin app.`,\n    }),\n  );\n\n  return app;\n}\n","import type { Context, Next } from 'hono';\n\nimport { ERROR_SLUGS, problemResponse } from '../error-envelope.js';\n\nimport type { AuditLogger } from './audit-logger.js';\n\n/**\n * Constant-time byte comparison.\n *\n * Iterates over `max(len(a), len(b))` bytes so wall-clock cost is independent\n * of *where* a mismatch occurs and of length differences (within the same\n * length class). Length-mismatch is folded into the accumulator so the\n * boolean result still discriminates correctly.\n *\n * This is intentionally a from-scratch implementation rather than\n * `crypto.subtle.timingSafeEqual`, which Cloudflare Workers exposes but\n * Node lacks — `@takuhon/api` is adapter-neutral.\n */\nexport function constantTimeEqual(a: Uint8Array, b: Uint8Array): boolean {\n  const len = a.length > b.length ? a.length : b.length;\n  let diff = a.length === b.length ? 0 : 1;\n  for (let i = 0; i < len; i++) {\n    const ai = a[i] ?? 0;\n    const bi = b[i] ?? 0;\n    diff |= ai ^ bi;\n  }\n  return diff === 0;\n}\n\n/** SHA-256 hex digest (lowercase) over a UTF-8 string. */\nexport async function sha256Hex(input: string): Promise<string> {\n  const buf = await crypto.subtle.digest('SHA-256', new TextEncoder().encode(input));\n  const bytes = new Uint8Array(buf);\n  let out = '';\n  for (const b of bytes) {\n    out += b.toString(16).padStart(2, '0');\n  }\n  return out;\n}\n\n/**\n * Extracts the Bearer token from the request and returns a stable\n * `sha256:<hex>` digest used as the actor identity in audit logs. Returns\n * `sha256:absent` when no token is present.\n */\nexport async function getActorTokenHash(c: Context): Promise<string> {\n  const header = c.req.header('authorization') ?? '';\n  const m = /^Bearer\\s+(.+)$/i.exec(header);\n  const token = m?.[1] ?? '';\n  if (token === '') return 'sha256:absent';\n  return `sha256:${await sha256Hex(token)}`;\n}\n\nexport interface BearerMiddlewareOptions {\n  /**\n   * Source of the expected admin token. Returns `undefined` when the deploy\n   * has not provisioned a secret — in that case every request is rejected,\n   * mirroring \"no admin access\" semantics.\n   */\n  getAdminToken: () => string | undefined;\n  auditLogger: AuditLogger;\n}\n\n/**\n * Hono middleware that gates downstream handlers on a constant-time Bearer\n * token check. Emits an audit event for both success and failure.\n */\nexport function bearerMiddleware(opts: BearerMiddlewareOptions) {\n  return async (c: Context, next: Next): Promise<Response | void> => {\n    const expected = opts.getAdminToken();\n    const header = c.req.header('authorization') ?? '';\n    const match = /^Bearer\\s+(.+)$/i.exec(header);\n    const presented = match?.[1];\n\n    const isOk =\n      expected !== undefined &&\n      presented !== undefined &&\n      constantTimeEqual(new TextEncoder().encode(presented), new TextEncoder().encode(expected));\n\n    const tokenHash = await getActorTokenHash(c);\n    const baseRequest = {\n      method: c.req.method,\n      path: new URL(c.req.url).pathname,\n      ip: c.req.header('cf-connecting-ip'),\n    };\n\n    if (!isOk) {\n      opts.auditLogger({\n        type: 'admin.auth.failure',\n        timestamp: new Date().toISOString(),\n        actor: { tokenHash },\n        request: baseRequest,\n        result: { status: 401 },\n      });\n      return problemResponse(c, {\n        slug: ERROR_SLUGS.unauthorized,\n        status: 401,\n        title: 'Unauthorized',\n        detail: 'Bearer token missing or invalid.',\n      });\n    }\n\n    opts.auditLogger({\n      type: 'admin.auth.success',\n      timestamp: new Date().toISOString(),\n      actor: { tokenHash },\n      request: baseRequest,\n      result: { status: 200 },\n    });\n\n    await next();\n  };\n}\n","import type { Context, Next } from 'hono';\n\nimport { ERROR_SLUGS, problemResponse } from '../error-envelope.js';\n\nexport interface OriginMiddlewareOptions {\n  /**\n   * Returns the allowlist of admin Origins (e.g.\n   * `['https://admin.example.com']`). Empty list disables the check —\n   * deploys are expected to populate the env before going to production,\n   * with the trade-off documented in the adapter README.\n   */\n  getAdminOrigins: () => string[];\n}\n\n/**\n * Hono middleware that enforces a same-origin / allowlisted-origin policy\n * when configured. Requests without an `Origin` header (curl, server-to-\n * server, native apps) are allowed through; the Bearer token is the primary\n * auth boundary and the absence of `Origin` is itself an indicator that the\n * request did not originate from a browser CSRF context.\n */\nexport function originMiddleware(opts: OriginMiddlewareOptions) {\n  return async (c: Context, next: Next): Promise<Response | void> => {\n    const allow = opts.getAdminOrigins();\n    if (allow.length === 0) {\n      await next();\n      return;\n    }\n    const origin = c.req.header('origin');\n    if (origin !== undefined && !allow.includes(origin)) {\n      return problemResponse(c, {\n        slug: ERROR_SLUGS.forbidden,\n        status: 403,\n        title: 'Forbidden',\n        detail: `Origin ${origin} is not in the admin allowlist.`,\n      });\n    }\n    await next();\n  };\n}\n","import { Hono } from 'hono';\n\nimport { renderAdminHtml } from './admin-html.js';\n\n/**\n * Per-request CSP (security.md §1.3). Differs from the public CSP:\n *  - `img-src` drops `data:` and adds `blob:` for client-side previews.\n *  - `style-src` and `script-src` drop `unsafe-inline` and pin a nonce.\n *  - `require-trusted-types-for 'script'` blocks DOM-XSS sinks.\n */\nfunction adminCsp(nonce: string): string {\n  return [\n    \"default-src 'self'\",\n    \"img-src 'self' blob:\",\n    `style-src 'self' 'nonce-${nonce}'`,\n    `script-src 'self' 'nonce-${nonce}'`,\n    \"font-src 'self'\",\n    \"connect-src 'self'\",\n    \"frame-ancestors 'none'\",\n    \"base-uri 'self'\",\n    \"form-action 'self'\",\n    \"require-trusted-types-for 'script'\",\n    'upgrade-insecure-requests',\n  ].join('; ');\n}\n\nfunction generateNonce(): string {\n  const bytes = crypto.getRandomValues(new Uint8Array(16));\n  let bin = '';\n  for (const b of bytes) {\n    bin += String.fromCharCode(b);\n  }\n  return btoa(bin);\n}\n\n/**\n * Hono factory for the `/admin` HTML editor. Mounted by adapters at\n * `/admin` (so the sub-app sees `/` as its root path). Each request gets a\n * freshly-generated nonce shared between the CSP header and the inline\n * `<style>` / `<script>` tags.\n */\nexport function createAdminUiApp(): Hono {\n  const app = new Hono();\n\n  app.get('/', (c) => {\n    const nonce = generateNonce();\n    c.header('strict-transport-security', 'max-age=63072000; includeSubDomains; preload');\n    c.header('x-content-type-options', 'nosniff');\n    c.header('x-frame-options', 'DENY');\n    c.header('referrer-policy', 'strict-origin-when-cross-origin');\n    c.header('permissions-policy', 'camera=(), microphone=(), geolocation=(), interest-cohort=()');\n    c.header('content-security-policy', adminCsp(nonce));\n    c.header('cache-control', 'private, no-store');\n    return c.html(renderAdminHtml(nonce));\n  });\n\n  return app;\n}\n","/**\n * Inline HTML for the minimal admin editor served at `GET /admin`.\n *\n * Single-page, no build step: a token input, a JSON textarea preloaded from\n * `/takuhon.json`, Save (PUT) and Delete (DELETE) buttons. The page operates\n * under a strict CSP (`script-src 'self' 'nonce-<n>'`,\n * `style-src 'self' 'nonce-<n>'`, `require-trusted-types-for 'script'`), so\n * both the inline `<script>` and `<style>` blocks carry the request-scoped\n * nonce. We avoid `innerHTML`/`eval` so Trusted Types is non-disruptive.\n */\nexport function renderAdminHtml(nonce: string): string {\n  return `<!doctype html>\n<html lang=\"en\">\n<head>\n<meta charset=\"utf-8\">\n<meta name=\"viewport\" content=\"width=device-width, initial-scale=1\">\n<title>takuhon admin</title>\n<style nonce=\"${nonce}\">\nbody { font-family: system-ui, -apple-system, sans-serif; max-width: 960px; margin: 2rem auto; padding: 0 1rem; color: #222; }\nh1 { font-size: 1.5rem; }\np.note { color: #555; }\nlabel { display: block; margin: 1rem 0 0.25rem; font-weight: 600; }\ninput[type=password], textarea { width: 100%; box-sizing: border-box; padding: 0.5rem; font-family: ui-monospace, SFMono-Regular, Menlo, monospace; font-size: 0.9rem; border: 1px solid #999; border-radius: 4px; }\ntextarea { min-height: 24rem; }\n.row { display: flex; gap: 0.5rem; margin-top: 1rem; }\nbutton { padding: 0.5rem 1rem; font-size: 0.95rem; border: 1px solid #444; background: #fafafa; border-radius: 4px; cursor: pointer; }\nbutton.danger { border-color: #b03; color: #b03; background: #fff5f5; }\n#status { margin-top: 1rem; padding: 0.75rem; border-radius: 4px; white-space: pre-wrap; word-break: break-word; }\n#status.ok { background: #e6f4ea; color: #1b5e20; border: 1px solid #82c891; }\n#status.err { background: #fdecea; color: #b71c1c; border: 1px solid #ef9a9a; }\nsmall.version { color: #555; }\n</style>\n</head>\n<body>\n<h1>takuhon admin</h1>\n<p class=\"note\">Edit the full <code>takuhon.json</code> document and Save. Optimistic locking via <code>If-Match</code> guards concurrent edits; the token is never sent over the URL.</p>\n<label for=\"token\">Admin token</label>\n<input id=\"token\" type=\"password\" autocomplete=\"off\" spellcheck=\"false\">\n<label for=\"payload\">takuhon.json <small class=\"version\" id=\"versionLabel\"></small></label>\n<textarea id=\"payload\" spellcheck=\"false\" autocapitalize=\"off\" autocomplete=\"off\"></textarea>\n<div class=\"row\">\n  <button id=\"save\" type=\"button\">Save</button>\n  <button id=\"delete\" type=\"button\" class=\"danger\">Delete profile</button>\n  <button id=\"reload\" type=\"button\">Reload current</button>\n</div>\n<div id=\"status\" hidden></div>\n<script nonce=\"${nonce}\">\n(function () {\n  var tokenEl = document.getElementById('token');\n  var payloadEl = document.getElementById('payload');\n  var versionEl = document.getElementById('versionLabel');\n  var statusEl = document.getElementById('status');\n  var ifMatch = '';\n\n  function setStatus(message, ok) {\n    statusEl.textContent = message;\n    statusEl.className = ok ? 'ok' : 'err';\n    statusEl.hidden = false;\n  }\n  function setVersion(etag) {\n    ifMatch = etag || '';\n    versionEl.textContent = ifMatch ? '(current version: ' + ifMatch + ')' : '(no stored version)';\n  }\n  function getToken() {\n    var t = tokenEl.value.trim();\n    if (!t) { setStatus('Admin token is required.', false); return null; }\n    return t;\n  }\n  async function loadCurrent() {\n    try {\n      var res = await fetch('/takuhon.json', { cache: 'no-store' });\n      if (!res.ok) { setStatus('Failed to load /takuhon.json: ' + res.status, false); return; }\n      setVersion(res.headers.get('etag'));\n      var json = await res.json();\n      payloadEl.value = JSON.stringify(json, null, 2);\n      setStatus('Loaded current profile.', true);\n    } catch (e) {\n      setStatus('Network error loading current profile: ' + (e && e.message ? e.message : String(e)), false);\n    }\n  }\n  async function save() {\n    var token = getToken();\n    if (!token) return;\n    var body;\n    try {\n      body = JSON.parse(payloadEl.value);\n    } catch (e) {\n      setStatus('JSON parse error: ' + (e && e.message ? e.message : String(e)), false);\n      return;\n    }\n    var headers = { 'Content-Type': 'application/json', 'Authorization': 'Bearer ' + token };\n    if (ifMatch) headers['If-Match'] = ifMatch;\n    try {\n      var res = await fetch('/api/admin/profile', { method: 'PUT', headers: headers, body: JSON.stringify(body) });\n      var json = await res.json().catch(function () { return null; });\n      if (res.ok && json && json.meta && json.meta.version) {\n        setVersion('\"' + json.meta.version + '\"');\n        setStatus('Saved. New version: ' + json.meta.version, true);\n      } else {\n        setStatus('Save failed (' + res.status + '): ' + (json ? JSON.stringify(json, null, 2) : 'no body'), false);\n      }\n    } catch (e) {\n      setStatus('Network error during save: ' + (e && e.message ? e.message : String(e)), false);\n    }\n  }\n  async function deleteProfile() {\n    var token = getToken();\n    if (!token) return;\n    if (!confirm('Delete the profile? The bundled onboarding fixture will be shown until you save a new document.')) return;\n    var headers = { 'Authorization': 'Bearer ' + token };\n    try {\n      var res = await fetch('/api/admin/profile', { method: 'DELETE', headers: headers });\n      if (res.ok) {\n        payloadEl.value = '';\n        setVersion('');\n        setStatus('Deleted.', true);\n      } else {\n        var json = await res.json().catch(function () { return null; });\n        setStatus('Delete failed (' + res.status + '): ' + (json ? JSON.stringify(json, null, 2) : 'no body'), false);\n      }\n    } catch (e) {\n      setStatus('Network error during delete: ' + (e && e.message ? e.message : String(e)), false);\n    }\n  }\n\n  document.getElementById('save').addEventListener('click', save);\n  document.getElementById('delete').addEventListener('click', deleteProfile);\n  document.getElementById('reload').addEventListener('click', loadCurrent);\n  loadCurrent();\n})();\n</script>\n</body>\n</html>\n`;\n}\n","/**\n * Structured audit-log emitter for admin actions (per security.md §5).\n *\n * Phase 3.4 covers the auth + profile-write events. Asset events\n * (`admin.asset.upload`, `admin.asset.delete`) join the union when Phase 3.5\n * lands. Adapters bind a concrete sink (Cloudflare uses `console.log`, which\n * Workers Tail / Logpush captures); tests inject a `vi.fn()` recorder.\n */\nexport type AuditEventType =\n  | 'admin.auth.success'\n  | 'admin.auth.failure'\n  | 'admin.profile.update'\n  | 'admin.profile.delete'\n  | 'admin.cache.purge';\n\nexport interface AuditEvent {\n  type: AuditEventType;\n  /** ISO-8601 UTC timestamp generated at the call site. */\n  timestamp: string;\n  /**\n   * Actor identity. `tokenHash` is `sha256:<hex>` over the presented Bearer\n   * token, or `sha256:absent` when no token was supplied. The raw token is\n   * never logged.\n   */\n  actor?: { tokenHash: string };\n  request: {\n    method: string;\n    path: string;\n    /** Originating client IP from `cf-connecting-ip`; undefined off-Cloudflare. */\n    ip?: string;\n  };\n  result: {\n    status: number;\n    /** Opaque storage version emitted by `TakuhonStorage.saveProfile`. */\n    version?: string;\n  };\n}\n\nexport type AuditLogger = (event: AuditEvent) => void;\n\n/** Default sink that discards events; useful for tests and bare runtimes. */\nexport const noopAuditLogger: AuditLogger = () => {\n  /* no-op */\n};\n","/**\n * Cache invalidation contract for admin write paths.\n *\n * `@takuhon/api` stays adapter-neutral, so the actual edge-cache calls live\n * in each adapter (Cloudflare's `caches.default.delete`, future runtimes'\n * equivalents). Tests inject a recording implementation to assert that the\n * admin handlers fire the right purge after a successful write.\n */\nexport interface CachePurger {\n  /** Called after a successful `PUT /api/admin/profile`. */\n  profileUpdated(): Promise<void>;\n  /** Called after a successful `DELETE /api/admin/profile`. */\n  profileDeleted(): Promise<void>;\n}\n\n/**\n * No-op default: callers that don't run on an edge cache (Node dev server,\n * unit tests that don't care about purge calls) can pass this in.\n */\nexport const noopCachePurger: CachePurger = {\n  profileUpdated: () => Promise.resolve(),\n  profileDeleted: () => Promise.resolve(),\n};\n"],"mappings":";AAQO,IAAM,cAAc;AAAA,EACzB,YAAY;AAAA,EACZ,cAAc;AAAA,EACd,WAAW;AAAA,EACX,UAAU;AAAA,EACV,kBAAkB;AAAA,EAClB,UAAU;AAAA,EACV,iBAAiB;AAAA,EACjB,sBAAsB;AAAA,EACtB,kBAAkB;AAAA,EAClB,iBAAiB;AAAA,EACjB,UAAU;AAAA,EACV,oBAAoB;AACtB;AAIA,IAAM,YAAY;AA2BX,SAAS,aAAa,OAA0C;AACrE,QAAM,MAAsB;AAAA,IAC1B,MAAM,GAAG,SAAS,IAAI,MAAM,IAAI;AAAA,IAChC,OAAO,MAAM;AAAA,IACb,QAAQ,MAAM;AAAA,IACd,QAAQ,MAAM;AAAA,IACd,UAAU,MAAM;AAAA,EAClB;AACA,MAAI,MAAM,WAAW,OAAW,KAAI,SAAS,MAAM;AACnD,MAAI,MAAM,mBAAmB,OAAW,KAAI,iBAAiB,MAAM;AACnE,SAAO;AACT;AAWO,SAAS,gBAAgB,GAAY,OAAuC;AACjF,QAAM,OAAO,aAAa;AAAA,IACxB,MAAM,MAAM;AAAA,IACZ,QAAQ,MAAM;AAAA,IACd,OAAO,MAAM;AAAA,IACb,QAAQ,MAAM;AAAA,IACd,UAAU,IAAI,IAAI,EAAE,IAAI,GAAG,EAAE;AAAA,IAC7B,QAAQ,MAAM;AAAA,IACd,gBAAgB,MAAM;AAAA,EACxB,CAAC;AACD,SAAO,EAAE,KAAK,KAAK,UAAU,IAAI,GAAG,MAAM,QAAQ;AAAA,IAChD,gBAAgB;AAAA,EAClB,CAAC;AACH;;;ACvFA;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OAGK;AACP,SAAS,YAAY;AAerB,IAAM,mBAAmB;AAEzB,IAAM,aAAa;AAAA,EACjB;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,EAAE,KAAK,IAAI;AAEX,eAAe,YAAY,MAAkE;AAC3F,MAAI;AACF,WAAO,MAAM,KAAK,QAAQ,WAAW;AAAA,EACvC,SAAS,GAAG;AACV,QAAI,aAAa,iBAAiB,KAAK,UAAU;AAC/C,aAAO,EAAE,MAAM,KAAK,SAAS,GAAG,SAAS,iBAAiB;AAAA,IAC5D;AACA,UAAM;AAAA,EACR;AACF;AAEO,SAAS,gBAAgB,MAA2B;AACzD,QAAM,MAAM,IAAI,KAAK;AAErB,MAAI,IAAI,KAAK,OAAO,GAAG,SAAS;AAC9B,UAAM,KAAK;AACX,UAAM,IAAI,EAAE,IAAI;AAChB,MAAE,IAAI,6BAA6B,8CAA8C;AACjF,MAAE,IAAI,0BAA0B,SAAS;AACzC,MAAE,IAAI,mBAAmB,MAAM;AAC/B,MAAE,IAAI,mBAAmB,iCAAiC;AAC1D,MAAE,IAAI,sBAAsB,8DAA8D;AAC1F,MAAE,IAAI,2BAA2B,UAAU;AAAA,EAC7C,CAAC;AAED,MAAI;AAAA,IAAQ,CAAC,KAAK,MAChB,gBAAgB,GAAG;AAAA,MACjB,MAAM,YAAY;AAAA,MAClB,QAAQ;AAAA,MACR,OAAO;AAAA,MACP,QAAQ,eAAe,QAAQ,IAAI,UAAU;AAAA,IAC/C,CAAC;AAAA,EACH;AAEA,MAAI;AAAA,IAAS,CAAC,MACZ,gBAAgB,GAAG;AAAA,MACjB,MAAM,YAAY;AAAA,MAClB,QAAQ;AAAA,MACR,OAAO;AAAA,MACP,QAAQ,oBAAoB,IAAI,IAAI,EAAE,IAAI,GAAG,EAAE,QAAQ;AAAA,IACzD,CAAC;AAAA,EACH;AAEA,MAAI,IAAI,KAAK,CAAC,MAAM,EAAE,KAAK,oDAA+C,CAAC;AAE3E,MAAI,IAAI,gBAAgB,OAAO,MAAM;AACnC,UAAM,OAAO,EAAE,IAAI,MAAM,MAAM;AAC/B,UAAM,EAAE,MAAM,QAAQ,IAAI,MAAM,YAAY,IAAI;AAChD,UAAM,YAAY,cAAc,UAAU,IAAI,GAAG,IAAI;AACrD,UAAM,OAAO;AAAA,MACX,MAAM;AAAA,MACN,MAAM;AAAA,QACJ,eAAe,UAAU;AAAA,QACzB,QAAQ,UAAU;AAAA,QAClB,WAAW,UAAU,KAAK;AAAA,MAC5B;AAAA,IACF;AACA,MAAE,OAAO,QAAQ,IAAI,OAAO,GAAG;AAC/B,MAAE,OAAO,iBAAiB,mCAAmC;AAC7D,WAAO,EAAE,KAAK,IAAI;AAAA,EACpB,CAAC;AAED,MAAI,IAAI,eAAe,CAAC,MAAM,EAAE,KAAK,MAAM,CAAC;AAE5C,MAAI,IAAI,eAAe,OAAO,MAAM;AAClC,UAAM,OAAO,EAAE,IAAI,MAAM,MAAM;AAC/B,UAAM,EAAE,MAAM,QAAQ,IAAI,MAAM,YAAY,IAAI;AAChD,UAAM,YAAY,cAAc,UAAU,IAAI,GAAG,IAAI;AACrD,UAAM,KAAK,eAAe,SAAS;AACnC,MAAE,OAAO,QAAQ,IAAI,OAAO,GAAG;AAC/B,MAAE,OAAO,iBAAiB,mCAAmC;AAC7D,MAAE,OAAO,gBAAgB,oCAAoC;AAC7D,WAAO,EAAE,KAAK,KAAK,UAAU,EAAE,CAAC;AAAA,EAClC,CAAC;AAED,MAAI,IAAI,iBAAiB,OAAO,MAAM;AACpC,UAAM,EAAE,MAAM,QAAQ,IAAI,MAAM,YAAY,IAAI;AAChD,MAAE,OAAO,QAAQ,IAAI,OAAO,GAAG;AAC/B,MAAE,OAAO,iBAAiB,qBAAqB;AAC/C,WAAO,EAAE,KAAK,IAAI;AAAA,EACpB,CAAC;AAED,MAAI,IAAI,6BAA6B,CAAC,MAAM;AAC1C,MAAE,OAAO,iBAAiB,sBAAsB;AAChD,WAAO,EAAE,KAAK;AAAA,MACZ,eAAe;AAAA,MACf,WAAW;AAAA,MACX,SAAS;AAAA,MACT,QAAQ;AAAA,MACR,QAAQ;AAAA,MACR,WAAW;AAAA,IACb,CAAC;AAAA,EACH,CAAC;AAED,MAAI;AAAA,IAAG,CAAC,QAAQ,OAAO,SAAS,QAAQ;AAAA,IAAG;AAAA,IAAK,CAAC,MAC/C,gBAAgB,GAAG;AAAA,MACjB,MAAM,YAAY;AAAA,MAClB,QAAQ;AAAA,MACR,OAAO;AAAA,MACP,QAAQ,GAAG,EAAE,IAAI,MAAM,IAAI,IAAI,IAAI,EAAE,IAAI,GAAG,EAAE,QAAQ;AAAA,IACxD,CAAC;AAAA,EACH;AAEA,SAAO;AACT;;;AChJA;AAAA,EACE;AAAA,EACA,aAAAA;AAAA,EACA;AAAA,OAIK;AACP,SAAS,QAAAC,aAAY;;;ACUd,SAAS,kBAAkB,GAAe,GAAwB;AACvE,QAAM,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE;AAC/C,MAAI,OAAO,EAAE,WAAW,EAAE,SAAS,IAAI;AACvC,WAAS,IAAI,GAAG,IAAI,KAAK,KAAK;AAC5B,UAAM,KAAK,EAAE,CAAC,KAAK;AACnB,UAAM,KAAK,EAAE,CAAC,KAAK;AACnB,YAAQ,KAAK;AAAA,EACf;AACA,SAAO,SAAS;AAClB;AAGA,eAAsB,UAAU,OAAgC;AAC9D,QAAM,MAAM,MAAM,OAAO,OAAO,OAAO,WAAW,IAAI,YAAY,EAAE,OAAO,KAAK,CAAC;AACjF,QAAM,QAAQ,IAAI,WAAW,GAAG;AAChC,MAAI,MAAM;AACV,aAAW,KAAK,OAAO;AACrB,WAAO,EAAE,SAAS,EAAE,EAAE,SAAS,GAAG,GAAG;AAAA,EACvC;AACA,SAAO;AACT;AAOA,eAAsB,kBAAkB,GAA6B;AACnE,QAAM,SAAS,EAAE,IAAI,OAAO,eAAe,KAAK;AAChD,QAAM,IAAI,mBAAmB,KAAK,MAAM;AACxC,QAAM,QAAQ,IAAI,CAAC,KAAK;AACxB,MAAI,UAAU,GAAI,QAAO;AACzB,SAAO,UAAU,MAAM,UAAU,KAAK,CAAC;AACzC;AAgBO,SAAS,iBAAiB,MAA+B;AAC9D,SAAO,OAAO,GAAY,SAAyC;AACjE,UAAM,WAAW,KAAK,cAAc;AACpC,UAAM,SAAS,EAAE,IAAI,OAAO,eAAe,KAAK;AAChD,UAAM,QAAQ,mBAAmB,KAAK,MAAM;AAC5C,UAAM,YAAY,QAAQ,CAAC;AAE3B,UAAM,OACJ,aAAa,UACb,cAAc,UACd,kBAAkB,IAAI,YAAY,EAAE,OAAO,SAAS,GAAG,IAAI,YAAY,EAAE,OAAO,QAAQ,CAAC;AAE3F,UAAM,YAAY,MAAM,kBAAkB,CAAC;AAC3C,UAAM,cAAc;AAAA,MAClB,QAAQ,EAAE,IAAI;AAAA,MACd,MAAM,IAAI,IAAI,EAAE,IAAI,GAAG,EAAE;AAAA,MACzB,IAAI,EAAE,IAAI,OAAO,kBAAkB;AAAA,IACrC;AAEA,QAAI,CAAC,MAAM;AACT,WAAK,YAAY;AAAA,QACf,MAAM;AAAA,QACN,YAAW,oBAAI,KAAK,GAAE,YAAY;AAAA,QAClC,OAAO,EAAE,UAAU;AAAA,QACnB,SAAS;AAAA,QACT,QAAQ,EAAE,QAAQ,IAAI;AAAA,MACxB,CAAC;AACD,aAAO,gBAAgB,GAAG;AAAA,QACxB,MAAM,YAAY;AAAA,QAClB,QAAQ;AAAA,QACR,OAAO;AAAA,QACP,QAAQ;AAAA,MACV,CAAC;AAAA,IACH;AAEA,SAAK,YAAY;AAAA,MACf,MAAM;AAAA,MACN,YAAW,oBAAI,KAAK,GAAE,YAAY;AAAA,MAClC,OAAO,EAAE,UAAU;AAAA,MACnB,SAAS;AAAA,MACT,QAAQ,EAAE,QAAQ,IAAI;AAAA,IACxB,CAAC;AAED,UAAM,KAAK;AAAA,EACb;AACF;;;AC3FO,SAAS,iBAAiB,MAA+B;AAC9D,SAAO,OAAO,GAAY,SAAyC;AACjE,UAAM,QAAQ,KAAK,gBAAgB;AACnC,QAAI,MAAM,WAAW,GAAG;AACtB,YAAM,KAAK;AACX;AAAA,IACF;AACA,UAAM,SAAS,EAAE,IAAI,OAAO,QAAQ;AACpC,QAAI,WAAW,UAAa,CAAC,MAAM,SAAS,MAAM,GAAG;AACnD,aAAO,gBAAgB,GAAG;AAAA,QACxB,MAAM,YAAY;AAAA,QAClB,QAAQ;AAAA,QACR,OAAO;AAAA,QACP,QAAQ,UAAU,MAAM;AAAA,MAC1B,CAAC;AAAA,IACH;AACA,UAAM,KAAK;AAAA,EACb;AACF;;;AFlBA,IAAM,gBAAgB,CAAC,sBAAsB,0BAA0B,iBAAiB,EAAE;AAAA,EACxF;AACF;AAiBA,SAAS,aAAa,GAAuC;AAC3D,SAAO,EAAE,MAAM,IAAI,EAAE,OAAO,IAAI,SAAS,EAAE,QAAQ;AACrD;AAGA,SAAS,UAAU,KAAqB;AACtC,QAAM,UAAU,IAAI,KAAK;AACzB,MAAI,QAAQ,WAAW,GAAG,KAAK,QAAQ,SAAS,GAAG,KAAK,QAAQ,UAAU,GAAG;AAC3E,WAAO,QAAQ,MAAM,GAAG,EAAE;AAAA,EAC5B;AACA,SAAO;AACT;AAMO,SAAS,kBAAkB,MAA6B;AAC7D,QAAM,MAAM,IAAIC,MAAK;AAErB,MAAI,IAAI,KAAK,OAAO,GAAG,SAAS;AAC9B,UAAM,KAAK;AACX,UAAM,IAAI,EAAE,IAAI;AAChB,MAAE,IAAI,6BAA6B,8CAA8C;AACjF,MAAE,IAAI,0BAA0B,SAAS;AACzC,MAAE,IAAI,mBAAmB,MAAM;AAC/B,MAAE,IAAI,mBAAmB,iCAAiC;AAC1D,MAAE,IAAI,sBAAsB,8DAA8D;AAC1F,MAAE,IAAI,2BAA2B,aAAa;AAC9C,MAAE,IAAI,iBAAiB,mBAAmB;AAAA,EAC5C,CAAC;AAED,MAAI,IAAI,KAAK,iBAAiB,EAAE,iBAAiB,KAAK,gBAAgB,CAAC,CAAC;AACxE,MAAI;AAAA,IACF;AAAA,IACA,iBAAiB,EAAE,eAAe,KAAK,eAAe,aAAa,KAAK,YAAY,CAAC;AAAA,EACvF;AAEA,MAAI;AAAA,IAAQ,CAAC,KAAK,MAChB,gBAAgB,GAAG;AAAA,MACjB,MAAM,YAAY;AAAA,MAClB,QAAQ;AAAA,MACR,OAAO;AAAA,MACP,QAAQ,eAAe,QAAQ,IAAI,UAAU;AAAA,IAC/C,CAAC;AAAA,EACH;AAEA,MAAI;AAAA,IAAS,CAAC,MACZ,gBAAgB,GAAG;AAAA,MACjB,MAAM,YAAY;AAAA,MAClB,QAAQ;AAAA,MACR,OAAO;AAAA,MACP,QAAQ,0BAA0B,IAAI,IAAI,EAAE,IAAI,GAAG,EAAE,QAAQ;AAAA,IAC/D,CAAC;AAAA,EACH;AAEA,MAAI,IAAI,YAAY,OAAO,MAAM;AAC/B,UAAM,cAAc,EAAE,IAAI,OAAO,cAAc,KAAK;AACpD,QAAI,CAAC,YAAY,YAAY,EAAE,WAAW,kBAAkB,GAAG;AAC7D,aAAO,gBAAgB,GAAG;AAAA,QACxB,MAAM,YAAY;AAAA,QAClB,QAAQ;AAAA,QACR,OAAO;AAAA,QACP,QAAQ,+CAA+C,WAAW;AAAA,MACpE,CAAC;AAAA,IACH;AAEA,QAAI;AACJ,QAAI;AACF,eAAS,MAAM,EAAE,IAAI,KAAK;AAAA,IAC5B,QAAQ;AACN,aAAO,gBAAgB,GAAG;AAAA,QACxB,MAAM,YAAY;AAAA,QAClB,QAAQ;AAAA,QACR,OAAO;AAAA,QACP,QAAQ;AAAA,MACV,CAAC;AAAA,IACH;AAEA,UAAM,SAAS,SAAS,MAAM;AAC9B,QAAI,CAAC,OAAO,IAAI;AACd,aAAO,gBAAgB,GAAG;AAAA,QACxB,MAAM,YAAY;AAAA,QAClB,QAAQ;AAAA,QACR,OAAO;AAAA,QACP,QAAQ,6BAA6B,OAAO,OAAO,OAAO,MAAM,CAAC;AAAA,QACjE,QAAQ,OAAO,OAAO,IAAI,YAAY;AAAA,MACxC,CAAC;AAAA,IACH;AAEA,UAAM,OAAgB,OAAO;AAC7B,UAAM,aAAa,EAAE,IAAI,OAAO,UAAU;AAC1C,UAAM,UAAU,eAAe,SAAY,UAAU,UAAU,IAAI;AAEnE,QAAI;AACJ,QAAI;AACF,cAAQ,MAAM,KAAK,QAAQ,YAAY,MAAM,OAAO;AAAA,IACtD,SAAS,GAAG;AACV,UAAI,aAAa,eAAe;AAC9B,eAAO,gBAAgB,GAAG;AAAA,UACxB,MAAM,YAAY;AAAA,UAClB,QAAQ;AAAA,UACR,OAAO;AAAA,UACP,QAAQ;AAAA,UACR,gBAAgB,EAAE;AAAA,QACpB,CAAC;AAAA,MACH;AACA,YAAM;AAAA,IACR;AAEA,UAAM,KAAK,YAAY,eAAe;AAEtC,UAAM,aAAY,oBAAI,KAAK,GAAE,YAAY;AACzC,UAAM,YAAY,MAAM,kBAAkB,CAAC;AAC3C,SAAK,YAAY;AAAA,MACf,MAAM;AAAA,MACN,WAAW;AAAA,MACX,OAAO,EAAE,UAAU;AAAA,MACnB,SAAS;AAAA,QACP,QAAQ;AAAA,QACR,MAAM,IAAI,IAAI,EAAE,IAAI,GAAG,EAAE;AAAA,QACzB,IAAI,EAAE,IAAI,OAAO,kBAAkB;AAAA,MACrC;AAAA,MACA,QAAQ,EAAE,QAAQ,KAAK,SAAS,MAAM,QAAQ;AAAA,IAChD,CAAC;AAED,WAAO,EAAE,KAAK;AAAA,MACZ,MAAMC,WAAU,IAAI;AAAA,MACpB,MAAM;AAAA,QACJ,eAAe,KAAK;AAAA,QACpB,SAAS,MAAM;AAAA,QACf;AAAA,MACF;AAAA,IACF,CAAC;AAAA,EACH,CAAC;AAED,MAAI,OAAO,YAAY,OAAO,MAAM;AAClC,UAAM,KAAK,QAAQ,cAAc;AACjC,UAAM,KAAK,YAAY,eAAe;AAEtC,UAAM,YAAY,MAAM,kBAAkB,CAAC;AAC3C,SAAK,YAAY;AAAA,MACf,MAAM;AAAA,MACN,YAAW,oBAAI,KAAK,GAAE,YAAY;AAAA,MAClC,OAAO,EAAE,UAAU;AAAA,MACnB,SAAS;AAAA,QACP,QAAQ;AAAA,QACR,MAAM,IAAI,IAAI,EAAE,IAAI,GAAG,EAAE;AAAA,QACzB,IAAI,EAAE,IAAI,OAAO,kBAAkB;AAAA,MACrC;AAAA,MACA,QAAQ,EAAE,QAAQ,IAAI;AAAA,IACxB,CAAC;AAED,WAAO,EAAE,KAAK,MAAM,GAAG;AAAA,EACzB,CAAC;AAED,MAAI;AAAA,IAAG,CAAC,QAAQ,OAAO;AAAA,IAAG;AAAA,IAAY,CAAC,MACrC,gBAAgB,GAAG;AAAA,MACjB,MAAM,YAAY;AAAA,MAClB,QAAQ;AAAA,MACR,OAAO;AAAA,MACP,QAAQ,GAAG,EAAE,IAAI,MAAM,IAAI,IAAI,IAAI,EAAE,IAAI,GAAG,EAAE,QAAQ;AAAA,IACxD,CAAC;AAAA,EACH;AAEA,SAAO;AACT;;;AG9MA,SAAS,QAAAC,aAAY;;;ACUd,SAAS,gBAAgB,OAAuB;AACrD,SAAO;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,gBAMO,KAAK;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,iBA6BJ,KAAK;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAwFtB;;;AD5HA,SAAS,SAAS,OAAuB;AACvC,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA,2BAA2B,KAAK;AAAA,IAChC,4BAA4B,KAAK;AAAA,IACjC;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF,EAAE,KAAK,IAAI;AACb;AAEA,SAAS,gBAAwB;AAC/B,QAAM,QAAQ,OAAO,gBAAgB,IAAI,WAAW,EAAE,CAAC;AACvD,MAAI,MAAM;AACV,aAAW,KAAK,OAAO;AACrB,WAAO,OAAO,aAAa,CAAC;AAAA,EAC9B;AACA,SAAO,KAAK,GAAG;AACjB;AAQO,SAAS,mBAAyB;AACvC,QAAM,MAAM,IAAIC,MAAK;AAErB,MAAI,IAAI,KAAK,CAAC,MAAM;AAClB,UAAM,QAAQ,cAAc;AAC5B,MAAE,OAAO,6BAA6B,8CAA8C;AACpF,MAAE,OAAO,0BAA0B,SAAS;AAC5C,MAAE,OAAO,mBAAmB,MAAM;AAClC,MAAE,OAAO,mBAAmB,iCAAiC;AAC7D,MAAE,OAAO,sBAAsB,8DAA8D;AAC7F,MAAE,OAAO,2BAA2B,SAAS,KAAK,CAAC;AACnD,MAAE,OAAO,iBAAiB,mBAAmB;AAC7C,WAAO,EAAE,KAAK,gBAAgB,KAAK,CAAC;AAAA,EACtC,CAAC;AAED,SAAO;AACT;;;AEhBO,IAAM,kBAA+B,MAAM;AAElD;;;ACxBO,IAAM,kBAA+B;AAAA,EAC1C,gBAAgB,MAAM,QAAQ,QAAQ;AAAA,EACtC,gBAAgB,MAAM,QAAQ,QAAQ;AACxC;","names":["normalize","Hono","Hono","normalize","Hono","Hono"]}

package/package.json

@@ -0,0 +1,53 @@
+{
+  "name": "@takuhon/api",
+  "version": "0.1.0",
+  "description": "Hono-based HTTP handlers, RFC 7807 error envelope, and response builders for takuhon",
+  "license": "Apache-2.0",
+  "author": "Takuhon contributors",
+  "homepage": "https://github.com/takuhon-dev/takuhon/tree/main/packages/api#readme",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/takuhon-dev/takuhon.git",
+    "directory": "packages/api"
+  },
+  "bugs": {
+    "url": "https://github.com/takuhon-dev/takuhon/issues"
+  },
+  "keywords": [
+    "takuhon",
+    "profile",
+    "api",
+    "hono",
+    "cloudflare-workers"
+  ],
+  "type": "module",
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js"
+    }
+  },
+  "files": [
+    "dist",
+    "README.md",
+    "LICENSE",
+    "NOTICE"
+  ],
+  "publishConfig": {
+    "access": "public"
+  },
+  "engines": {
+    "node": ">=22.0.0"
+  },
+  "dependencies": {
+    "hono": "^4.12.19",
+    "@takuhon/core": "0.1.0"
+  },
+  "scripts": {
+    "typecheck": "tsc",
+    "build": "tsup src/index.ts --format esm --dts --clean --sourcemap",
+    "test": "vitest run"
+  }
+}