@tensorix/metahub 0.1.8 → 0.1.9

package/dist/cli.js

@@ -1116,7 +1116,7 @@ var init_crdt = __esm(() => {
     },
     documents: {
       table: "documents",
-      cols: new Set(["title", "body", "database_id", "parent_id", "created_hlc", "__deleted"])
+      cols: new Set(["title", "body", "database_id", "parent_id", "created_hlc", "order_key", "__deleted"])
     },
     doc_blocks: {
       table: "doc_blocks",
@@ -1172,6 +1172,24 @@ function inferContentType(path) {
   const ext = path.slice(path.lastIndexOf(".") + 1).toLowerCase();
   return MIME[ext] ?? "application/octet-stream";
 }
+function normalizeSiteName(raw) {
+  const slug = raw.trim().toLowerCase().replace(/[^a-z0-9-]+/g, "-").replace(/^-+|-+$/g, "");
+  if (!slug)
+    throw new Error(`invalid site name: ${JSON.stringify(raw)}`);
+  return slug;
+}
+function normalizeSitePath(raw) {
+  const segs = [];
+  for (const seg of raw.split("/")) {
+    if (seg === "" || seg === ".")
+      continue;
+    if (seg === "..")
+      segs.pop();
+    else
+      segs.push(seg);
+  }
+  return segs.join("/");
+}
 function isTextType(contentType) {
   const ct = contentType.toLowerCase();
   return ct.startsWith("text/") || ct.startsWith("application/json") || ct.startsWith("application/manifest+json") || ct.startsWith("application/xml") || ct.startsWith("text/javascript") || ct.startsWith("application/javascript") || ct.startsWith("image/svg+xml");
@@ -1182,10 +1200,11 @@ function toBytes(data) {
   return data instanceof Uint8Array ? data : new Uint8Array(data);
 }
 function createSite(db, opts) {
-  if (getSiteByName(db, opts.name))
-    throw new Error(`site name already exists: ${opts.name}`);
-  const id = newId("site", opts.name);
-  const first = emit(db, "sites", id, "name", opts.name);
+  const name = normalizeSiteName(opts.name);
+  if (getSiteByName(db, name))
+    throw new Error(`site name already exists: ${name}`);
+  const id = newId("site", name);
+  const first = emit(db, "sites", id, "name", name);
   emit(db, "sites", id, "created_hlc", first.hlc);
   if (opts.title !== undefined)
     emit(db, "sites", id, "title", opts.title);
@@ -1195,7 +1214,13 @@ function getSite(db, id) {
   return db.query("SELECT id, name, title, created_hlc FROM sites WHERE id = ? AND __deleted = 0").get(id);
 }
 function getSiteByName(db, name) {
-  return db.query("SELECT id, name, title, created_hlc FROM sites WHERE name = ? AND __deleted = 0 ORDER BY created_hlc DESC LIMIT 1").get(name);
+  let slug;
+  try {
+    slug = normalizeSiteName(name);
+  } catch {
+    return null;
+  }
+  return db.query("SELECT id, name, title, created_hlc FROM sites WHERE name = ? AND __deleted = 0 ORDER BY created_hlc DESC LIMIT 1").get(slug);
 }
 function listSites(db) {
   return db.query("SELECT id, name, title, created_hlc FROM sites WHERE __deleted = 0 ORDER BY created_hlc").all();
@@ -1207,6 +1232,20 @@ function resolveSite(db, ref) {
     throw new Error(`no such site: ${ref}`);
   return site;
 }
+function updateSite(db, id, opts) {
+  if (!getSite(db, id))
+    throw new Error(`no such site: ${id}`);
+  if (opts.name !== undefined) {
+    const name = normalizeSiteName(opts.name);
+    const dup = getSiteByName(db, name);
+    if (dup && dup.id !== id)
+      throw new Error(`site name already exists: ${name}`);
+    emit(db, "sites", id, "name", name);
+  }
+  if (opts.title !== undefined)
+    emit(db, "sites", id, "title", opts.title);
+  return getSite(db, id);
+}
 function deleteSite(db, id) {
   if (!getSite(db, id))
     return false;
@@ -1221,7 +1260,10 @@ function fileIdFor(db, siteId, path) {
   return row?.id ?? null;
 }
 async function putFile(db, siteId, path, opts) {
-  const contentType = opts.contentType ?? inferContentType(path);
+  const cleanPath = normalizeSitePath(path);
+  if (!cleanPath)
+    throw new Error(`invalid file path: ${JSON.stringify(path)}`);
+  const contentType = opts.contentType ?? inferContentType(cleanPath);
   const bytes = toBytes(opts.data);
   let encoding;
   let content;
@@ -1235,11 +1277,11 @@ async function putFile(db, siteId, path, opts) {
     encoding = "blob";
     content = (await putBlob(bytes)).hash;
   }
-  const existing = fileIdFor(db, siteId, path);
-  const id = existing ?? newId("sf", path);
+  const existing = fileIdFor(db, siteId, cleanPath);
+  const id = existing ?? newId("sf", cleanPath);
   if (!existing) {
     const first = emit(db, "site_files", id, "site_id", siteId);
-    emit(db, "site_files", id, "path", path);
+    emit(db, "site_files", id, "path", cleanPath);
     emit(db, "site_files", id, "created_hlc", first.hlc);
   }
   emit(db, "site_files", id, "content_type", contentType);
@@ -1252,7 +1294,7 @@ function listFiles(db, siteId) {
   return db.query("SELECT id, site_id, path, content_type, encoding FROM site_files WHERE site_id = ? AND __deleted = 0 ORDER BY path").all(siteId);
 }
 function deleteFile(db, siteId, path) {
-  const id = fileIdFor(db, siteId, path);
+  const id = fileIdFor(db, siteId, normalizeSitePath(path));
   if (!id)
     return false;
   const live = db.query("SELECT __deleted AS d FROM site_files WHERE id = ?").get(id);
@@ -1262,7 +1304,10 @@ function deleteFile(db, siteId, path) {
   return true;
 }
 async function getFileForServe(db, siteId, path) {
-  const p = path === "" || path.endsWith("/") ? `${path}index.html` : path;
+  const withIndex = path === "" || path.endsWith("/") ? `${path}index.html` : path;
+  const p = normalizeSitePath(withIndex);
+  if (!p)
+    return null;
   const row = db.query("SELECT content_type, encoding, content FROM site_files WHERE site_id = ? AND path = ? AND __deleted = 0 ORDER BY created_hlc LIMIT 1").get(siteId, p);
   if (!row)
     return null;
@@ -1516,7 +1561,7 @@ var HTML = `<!doctype html>
   .sb-section-head .add { opacity:0; padding:3px; border-radius:5px; color:var(--muted); transition:opacity .12s; }
   .sb-section:hover .add { opacity:1; }
   .sb-section-head .add:hover { background:var(--hover-2); color:var(--fg); }
-  .navitem { display:flex; align-items:center; gap:3px; width:100%; text-align:left; padding:5px 6px; border-radius:var(--radius-sm);
+  .navitem { display:flex; align-items:center; gap:3px; width:100%; text-align:left; padding:5px 6px; margin-bottom:2px; border-radius:var(--radius-sm);
     color:var(--fg-soft); font-size:13.5px; position:relative; white-space:nowrap; transition:background .1s; }
   .navitem:hover { background:var(--hover-2); }
   .navitem.active { background:var(--bg); color:var(--fg); font-weight:600; box-shadow:var(--shadow-sm); }
@@ -1625,6 +1670,9 @@ var HTML = `<!doctype html>
   body.desktop-mac .sb-head .iconbtn { -webkit-app-region:no-drag; }
   body.desktop-mac .topbar { -webkit-app-region:drag; }
   body.desktop-mac .topbar .iconbtn, body.desktop-mac .topbar .btn { -webkit-app-region:no-drag; }
+  /* peek drawer header overlaps the topbar drag region \u2192 clear its buttons so they stay clickable */
+  body.desktop-mac .peek-head { -webkit-app-region:drag; }
+  body.desktop-mac .peek-head .iconbtn, body.desktop-mac .peek-head .btn { -webkit-app-region:no-drag; }
   /* sidebar collapsed \u2192 traffic lights sit over the main header; clear the hamburger */
   body.desktop-mac .sidebar.collapsed ~ .main .topbar { padding-left:80px; }
 
@@ -1859,6 +1907,83 @@ var HTML = `<!doctype html>
   .gridfoot { display:flex; gap:18px; color:var(--muted); font-size:12px; padding:8px 2px; }
   input.inlineedit { width:100%; border:0; outline:2px solid var(--accent); border-radius:4px; padding:7px 9px; background:var(--bg); color:var(--fg); font:inherit; }
 
+  /* ---- sites (\u7AD9\u70B9\u7BA1\u7406) ---- */
+  .sites-grid { display:grid; grid-template-columns:repeat(auto-fill, minmax(264px, 1fr)); gap:14px; margin-top:6px; }
+  .site-card { display:flex; flex-direction:column; gap:13px; padding:16px 16px 14px; background:var(--bg); border:1px solid var(--line);
+    border-radius:var(--radius); box-shadow:var(--shadow-sm); cursor:pointer; transition:box-shadow .16s, border-color .16s, transform .16s; }
+  .site-card:hover { box-shadow:var(--shadow-md); border-color:var(--line-strong); transform:translateY(-1px); }
+  .site-card-head { display:flex; align-items:center; gap:11px; min-width:0; }
+  .site-card .si { width:40px; height:40px; border-radius:11px; background:var(--accent-soft); color:var(--accent); display:grid; place-items:center; flex:none; }
+  .site-card .si svg { width:20px; height:20px; }
+  .site-card-id { min-width:0; }
+  .site-card .slug { font-family:var(--mono); font-weight:600; font-size:14.5px; color:var(--fg); overflow:hidden; text-overflow:ellipsis; white-space:nowrap; }
+  .site-card .ttl { font-size:12px; color:var(--fg-soft); margin-top:1px; overflow:hidden; text-overflow:ellipsis; white-space:nowrap; }
+  .site-card .ttl.muted { color:var(--muted); font-style:italic; }
+  .site-addr { display:flex; align-items:center; gap:6px; width:100%; text-align:left; background:var(--surface); border:1px solid var(--line);
+    border-radius:var(--radius-sm); padding:6px 9px; color:var(--muted); font-family:var(--mono); font-size:11.5px; transition:border-color .12s, color .12s; }
+  .site-addr svg { flex:none; }
+  .site-addr span { overflow:hidden; text-overflow:ellipsis; white-space:nowrap; }
+  .site-addr:hover { border-color:var(--accent); color:var(--accent); }
+  .site-card-meta { display:flex; align-items:center; gap:7px; font-size:12px; color:var(--muted); }
+  .site-card-meta b { color:var(--fg-soft); font-weight:600; font-variant-numeric:tabular-nums; }
+  .site-card-meta .dot { color:var(--line-strong); }
+  .site-card-foot { display:flex; align-items:center; gap:6px; padding-top:12px; margin-top:1px; border-top:1px solid var(--line); }
+  .site-card-foot .btn-secondary { padding:6px 12px; justify-content:center; }
+
+  .site-empty { text-align:center; color:var(--muted); border:1px dashed var(--line-strong); border-radius:var(--radius); padding:48px 24px; margin-top:8px; }
+  .site-empty .ei { font-size:30px; margin-bottom:10px; }
+  .site-empty .et { font-size:14px; color:var(--fg-soft); margin-bottom:4px; font-weight:600; }
+  .site-empty .ed { font-size:12.5px; margin-bottom:16px; }
+
+  /* site peek: access bar + file manager */
+  .acc-link { display:flex; align-items:center; gap:6px; background:var(--surface); border:1px solid var(--line); border-radius:var(--radius-sm); padding:7px 8px 7px 11px; margin-bottom:16px; }
+  .acc-link .url { flex:1; font-family:var(--mono); font-size:12.5px; color:var(--fg-soft); overflow:hidden; text-overflow:ellipsis; white-space:nowrap; }
+  .acc-link button { width:28px; height:28px; display:grid; place-items:center; border-radius:6px; color:var(--muted); flex:none; }
+  .acc-link button:hover { background:var(--hover-2); color:var(--fg); }
+  .acc-link button.accent { color:var(--accent); }
+  .site-meta { display:flex; gap:18px; color:var(--muted); font-size:12px; margin-bottom:20px; }
+  .site-meta b { color:var(--fg); font-weight:600; }
+  .files-head { display:flex; align-items:center; justify-content:space-between; font-size:11px; font-weight:600; text-transform:uppercase; letter-spacing:.05em; color:var(--muted); margin:0 0 4px; }
+  .filerow { display:flex; align-items:center; gap:10px; padding:9px 8px; border-radius:var(--radius-sm); cursor:pointer; border-bottom:1px solid var(--line); }
+  .filerow:last-child { border-bottom:0; }
+  .filerow:hover { background:var(--hover); }
+  .filerow .fi { color:var(--muted); display:grid; place-items:center; flex:none; }
+  .filerow .fpath { flex:1; font-family:var(--mono); font-size:12.5px; color:var(--fg); overflow:hidden; text-overflow:ellipsis; white-space:nowrap; }
+  .filerow .facts { display:flex; gap:1px; opacity:0; flex:none; }
+  .filerow:hover .facts { opacity:1; }
+  .filerow .facts button { width:27px; height:27px; display:grid; place-items:center; border-radius:6px; color:var(--muted); }
+  .filerow .facts button:hover { background:var(--hover-2); color:var(--fg); }
+  .filerow .facts button.del:hover { color:var(--danger); }
+  .enc-badge { display:inline-flex; align-items:center; font-family:var(--mono); font-size:10.5px; font-weight:500; letter-spacing:.02em;
+    padding:2px 6px; border-radius:5px; background:var(--surface-2); color:var(--fg-soft); border:1px solid var(--line); }
+  .enc-badge.blob { color:var(--accent); background:var(--accent-soft); border-color:transparent; }
+
+  /* file preview (inside modal) */
+  .preview-box { font-family:var(--mono); font-size:12.5px; background:var(--surface-2); border:1px solid var(--line); border-radius:var(--radius);
+    padding:14px 16px; max-height:52vh; overflow:auto; white-space:pre-wrap; line-height:1.6; color:var(--fg); }
+  .preview-bin { text-align:center; color:var(--muted); border:1px dashed var(--line-strong); border-radius:var(--radius); padding:40px 20px; }
+  .preview-bin .pi { font-size:28px; margin-bottom:8px; }
+  .preview-bin .pt { color:var(--fg-soft); font-size:13px; }
+
+  /* in-app site preview (browser-framed iframe) */
+  .spv-scrim { position:fixed; inset:0; background:rgba(15,15,25,.5); z-index:85; display:grid; place-items:center; padding:28px;
+    opacity:0; pointer-events:none; transition:opacity .16s; animation:spv-in .16s forwards; }
+  @keyframes spv-in { to { opacity:1; pointer-events:auto; } }
+  .spv-scrim.open { opacity:1; pointer-events:auto; }
+  .spv { width:min(1100px, 92vw); height:88vh; background:var(--bg); border-radius:14px; box-shadow:var(--shadow-lg);
+    display:flex; flex-direction:column; overflow:hidden; }
+  .spv-chrome { display:flex; align-items:center; gap:10px; padding:9px 12px; border-bottom:1px solid var(--line); background:var(--surface); }
+  .spv-dots { display:flex; gap:6px; flex:none; }
+  .spv-dots i { width:11px; height:11px; border-radius:50%; background:var(--line-strong); }
+  .spv-url { flex:1; display:flex; align-items:center; gap:6px; min-width:0; background:var(--bg); border:1px solid var(--line);
+    border-radius:7px; padding:5px 10px; color:var(--fg-soft); font-family:var(--mono); font-size:12px; }
+  .spv-url svg { color:var(--muted); flex:none; }
+  .spv-url span { overflow:hidden; text-overflow:ellipsis; white-space:nowrap; }
+  .spv-btn { display:inline-flex; align-items:center; gap:5px; flex:none; padding:6px 10px; border-radius:7px; color:var(--fg-soft); font-size:12.5px; font-weight:500; }
+  .spv-btn:hover { background:var(--hover-2); color:var(--fg); }
+  .spv-btn.icon { padding:6px; }
+  .spv-frame { flex:1; width:100%; border:0; background:#fff; }
+
   .selbar { position:fixed; bottom:24px; left:50%; transform:translateX(-50%); z-index:65; display:flex; align-items:center; gap:4px;
     background:var(--fg); color:var(--bg); padding:7px 8px 7px 14px; border-radius:11px; box-shadow:var(--shadow-lg); }
   .selbar .cnt { font-size:13px; font-weight:600; margin-right:6px; }
@@ -3605,7 +3730,7 @@ async function runMain(cmd, opts = {}) {
 // package.json
 var package_default = {
   name: "@tensorix/metahub",
-  version: "0.1.8",
+  version: "0.1.9",
   description: "Metahub core library and CLI",
   license: "AGPL-3.0-only",
   type: "module",
@@ -3756,6 +3881,7 @@ CREATE TABLE IF NOT EXISTS documents (
   database_id TEXT,
   parent_id   TEXT,
   created_hlc TEXT,
+  order_key   TEXT,        -- fractional index among siblings (same parent_id); ties broken by created_hlc,id
   __deleted   INTEGER NOT NULL DEFAULT 0
 );
 
@@ -4398,6 +4524,291 @@ function deleteRecord(db, id) {
   return true;
 }
 
+// src/core/documents.ts
+init_ids();
+init_crdt();
+function liveBlocks(db, docId) {
+  return db.query("SELECT id, text, order_key, blank_after FROM doc_blocks WHERE doc_id = ? AND __deleted = 0 ORDER BY order_key, id").all(docId);
+}
+function makeBlockId(text) {
+  return newId("blk", text.split(`
+`, 1)[0] ?? "");
+}
+function emitBlock(db, docId, fields) {
+  const id = makeBlockId(fields.text);
+  emit(db, "doc_blocks", id, "doc_id", docId);
+  emit(db, "doc_blocks", id, "order_key", fields.order_key);
+  if (fields.blankAfter)
+    emit(db, "doc_blocks", id, "blank_after", fields.blankAfter);
+  emit(db, "doc_blocks", id, "text", fields.text);
+}
+function insertBlocks(db, docId, blocks, after, before) {
+  const keys = keysBetween(after, before, blocks.length);
+  blocks.forEach((b2, i2) => emitBlock(db, docId, { text: b2.text, order_key: keys[i2], blankAfter: b2.blankAfter }));
+}
+function ensureBlocks(db, docId) {
+  if (db.query("SELECT 1 AS x FROM doc_blocks WHERE doc_id = ? LIMIT 1").get(docId))
+    return;
+  const row = db.query("SELECT body FROM documents WHERE id = ?").get(docId);
+  const blocks = parseDocBlocks(row?.body ?? "");
+  if (blocks.length)
+    insertBlocks(db, docId, blocks, null, null);
+}
+function reconcileBody(db, docId, body) {
+  const old = liveBlocks(db, docId);
+  const next = parseDocBlocks(body);
+  const plan = reconcile(old.map((b2) => b2.text), next.map((b2) => b2.text));
+  for (const oi of plan.deleted)
+    emit(db, "doc_blocks", old[oi].id, "__deleted", 1);
+  const { items } = plan;
+  let i2 = 0;
+  while (i2 < items.length) {
+    const it = items[i2];
+    if ("keep" in it) {
+      const oldB = old[it.keep];
+      const want = next[i2].blankAfter;
+      if ((oldB.blank_after ?? 0) !== want)
+        emit(db, "doc_blocks", oldB.id, "blank_after", want);
+      i2++;
+      continue;
+    }
+    let j = i2;
+    while (j < items.length && "insert" in items[j])
+      j++;
+    const left = i2 > 0 ? old[items[i2 - 1].keep].order_key : null;
+    const right = j < items.length ? old[items[j].keep].order_key : null;
+    insertBlocks(db, docId, next.slice(i2, j), left, right);
+    i2 = j;
+  }
+}
+function documentVersion(db, id) {
+  const row = db.query(`SELECT MAX(hlc) AS h FROM crdt_changes
+       WHERE (dataset = 'documents' AND row_id = ?)
+          OR (dataset = 'doc_blocks' AND row_id IN (SELECT id FROM doc_blocks WHERE doc_id = ?))`).get(id, id);
+  return row.h ?? "";
+}
+function createDocument(db, opts) {
+  const id = newId("doc", opts.title);
+  const first = emit(db, "documents", id, "title", opts.title);
+  emit(db, "documents", id, "created_hlc", first.hlc);
+  if (opts.database_id !== undefined)
+    emit(db, "documents", id, "database_id", opts.database_id);
+  if (opts.parent_id !== undefined)
+    emit(db, "documents", id, "parent_id", opts.parent_id);
+  placeInSiblings(db, id, opts.parent_id ?? null);
+  if (opts.body !== undefined) {
+    const blocks = parseDocBlocks(opts.body);
+    if (blocks.length)
+      insertBlocks(db, id, blocks, null, null);
+  }
+  return getDocument(db, id);
+}
+function getDocument(db, id) {
+  return db.query("SELECT id, title, body, database_id, parent_id, created_hlc, order_key FROM documents WHERE id = ? AND __deleted = 0").get(id);
+}
+var ORDER_BY = "ORDER BY order_key IS NULL, order_key, created_hlc, id";
+function listDocuments(db, opts = {}) {
+  const cols = "SELECT id, title, database_id, parent_id, created_hlc, order_key FROM documents WHERE __deleted = 0";
+  if (opts.parent_id !== undefined)
+    return db.query(`${cols} AND parent_id = ? ${ORDER_BY}`).all(opts.parent_id);
+  if (opts.database_id)
+    return db.query(`${cols} AND database_id = ? ${ORDER_BY}`).all(opts.database_id);
+  return db.query(`${cols} ${ORDER_BY}`).all();
+}
+function siblingWhere(parentId) {
+  return parentId === null ? { clause: "parent_id IS NULL", args: [] } : { clause: "parent_id = ?", args: [parentId] };
+}
+function canEmitOrderKeys2(db) {
+  return tableExists2(db, "meta") && tableExists2(db, "crdt_changes");
+}
+function tableExists2(db, table) {
+  return db.query("SELECT 1 AS ok FROM sqlite_master WHERE type = 'table' AND name = ?").get(table) != null;
+}
+function lastSiblingOrderKey(db, parentId, excludeId) {
+  const w2 = siblingWhere(parentId);
+  const exclude = excludeId ? " AND id <> ?" : "";
+  const row = db.query(`SELECT order_key FROM documents WHERE ${w2.clause}${exclude}
+       AND __deleted = 0 AND order_key IS NOT NULL
+       ORDER BY order_key DESC, id DESC LIMIT 1`).get(...w2.args, ...excludeId ? [excludeId] : []);
+  return row?.order_key ?? null;
+}
+function orderedSiblings(db, parentId) {
+  const w2 = siblingWhere(parentId);
+  return db.query(`SELECT id, order_key FROM documents WHERE ${w2.clause} AND __deleted = 0 ${ORDER_BY}`).all(...w2.args);
+}
+function rebalanceSiblings(db, parentId) {
+  const rows = orderedSiblings(db, parentId);
+  const keys = keysBetween(null, null, rows.length);
+  rows.forEach((row, i2) => {
+    if (row.order_key !== keys[i2])
+      emit(db, "documents", row.id, "order_key", keys[i2]);
+  });
+}
+function backfillSiblings(db, parentId) {
+  const emitChange = canEmitOrderKeys2(db);
+  const w2 = siblingWhere(parentId);
+  const missing = db.query(`SELECT id FROM documents WHERE ${w2.clause} AND __deleted = 0 AND order_key IS NULL
+       ORDER BY created_hlc, id`).all(...w2.args);
+  if (!missing.length)
+    return;
+  const keys = keysBetween(lastSiblingOrderKey(db, parentId), null, missing.length);
+  missing.forEach((row, i2) => {
+    if (emitChange)
+      emit(db, "documents", row.id, "order_key", keys[i2]);
+    else
+      db.query("UPDATE documents SET order_key = ? WHERE id = ?").run(keys[i2], row.id);
+  });
+}
+function backfillDocumentOrderKeys(db) {
+  const parents = db.query("SELECT DISTINCT parent_id FROM documents WHERE __deleted = 0 AND order_key IS NULL").all();
+  for (const p of parents)
+    backfillSiblings(db, p.parent_id);
+}
+function placeInSiblings(db, id, parentId, anchor) {
+  let cur = parentId;
+  while (cur) {
+    if (cur === id)
+      throw new Error(`cannot set parent_id: would create a cycle (${id})`);
+    cur = getDocument(db, cur)?.parent_id ?? null;
+  }
+  const current = getDocument(db, id);
+  if (current && (current.parent_id ?? null) !== parentId)
+    emit(db, "documents", id, "parent_id", parentId);
+  let key;
+  if (!anchor) {
+    key = keyBetween(lastSiblingOrderKey(db, parentId, id), null);
+  } else {
+    backfillSiblings(db, parentId);
+    const neighbors = () => {
+      const rows = orderedSiblings(db, parentId).filter((r3) => r3.id !== id);
+      const to = rows.findIndex((r3) => r3.id === anchor.targetId);
+      if (to < 0)
+        throw new Error(`no such target document: ${anchor.targetId}`);
+      return anchor.where === "before" ? [rows[to - 1]?.order_key ?? null, rows[to].order_key] : [rows[to].order_key, rows[to + 1]?.order_key ?? null];
+    };
+    let [left, right] = neighbors();
+    if (left !== null && right !== null && left >= right) {
+      rebalanceSiblings(db, parentId);
+      [left, right] = neighbors();
+    }
+    key = keyBetween(left, right);
+  }
+  emit(db, "documents", id, "order_key", key);
+}
+function moveDocument(db, id, targetId, where) {
+  const src2 = getDocument(db, id);
+  if (!src2)
+    throw new Error(`no such document: ${id}`);
+  if (id === targetId)
+    return src2;
+  const target = getDocument(db, targetId);
+  if (!target)
+    throw new Error(`no such target document: ${targetId}`);
+  if (where === "into")
+    placeInSiblings(db, id, targetId);
+  else
+    placeInSiblings(db, id, target.parent_id, { targetId, where });
+  return getDocument(db, id);
+}
+function updateDocument(db, id, fields) {
+  if (!getDocument(db, id))
+    throw new Error(`no such document: ${id}`);
+  if (fields.title !== undefined)
+    emit(db, "documents", id, "title", fields.title);
+  if (fields.database_id !== undefined)
+    emit(db, "documents", id, "database_id", fields.database_id);
+  if (fields.parent_id !== undefined) {
+    const next = fields.parent_id ?? null;
+    if ((getDocument(db, id).parent_id ?? null) !== next)
+      placeInSiblings(db, id, next);
+  }
+  if (fields.body !== undefined) {
+    ensureBlocks(db, id);
+    reconcileBody(db, id, fields.body);
+  }
+  return getDocument(db, id);
+}
+function editDocument(db, id, opts) {
+  if (!getDocument(db, id))
+    throw new Error(`no such document: ${id}`);
+  if (opts.ifMatch !== undefined && documentVersion(db, id) !== opts.ifMatch)
+    throw new Error(`stale: document changed since ${opts.ifMatch}; re-read first`);
+  if (opts.old === "")
+    throw new Error("--old must not be empty");
+  ensureBlocks(db, id);
+  const blocks = liveBlocks(db, id);
+  const body = serializeDocBlocks(blocks.map((b2) => ({ text: b2.text, blankAfter: b2.blank_after })));
+  const count = countOccurrences(body, opts.old);
+  if (count === 0)
+    throw new Error(`anchor not found: no match for --old`);
+  if (count > 1 && !opts.replaceAll)
+    throw new Error(`${count} matches for --old; add surrounding context or use --replace-all`);
+  if (!opts.old.includes(`
+
+`)) {
+    const affected = blocks.filter((b2) => b2.text.includes(opts.old));
+    const next = affected.map((b2) => opts.replaceAll ? b2.text.replaceAll(opts.old, opts.new) : b2.text.replace(opts.old, opts.new));
+    if (next.every((t2) => t2.length > 0 && !t2.includes(`
+
+`))) {
+      const targets = opts.replaceAll ? affected : affected.slice(0, 1);
+      targets.forEach((b2, i2) => emit(db, "doc_blocks", b2.id, "text", next[i2]));
+      return { id, changed: true, replaced: opts.replaceAll ? count : 1, version: documentVersion(db, id) };
+    }
+  }
+  const newBody = opts.replaceAll ? body.replaceAll(opts.old, opts.new) : body.replace(opts.old, opts.new);
+  reconcileBody(db, id, newBody);
+  return { id, changed: newBody !== body, replaced: opts.replaceAll ? count : 1, version: documentVersion(db, id) };
+}
+function appendDocument(db, id, body) {
+  if (!getDocument(db, id))
+    throw new Error(`no such document: ${id}`);
+  ensureBlocks(db, id);
+  const next = parseDocBlocks(body);
+  if (next.length) {
+    const blocks = liveBlocks(db, id);
+    const last = blocks.length ? blocks[blocks.length - 1].order_key : null;
+    insertBlocks(db, id, next, last, null);
+  }
+  return { id, changed: next.length > 0, replaced: next.length, version: documentVersion(db, id) };
+}
+function prependDocument(db, id, body) {
+  if (!getDocument(db, id))
+    throw new Error(`no such document: ${id}`);
+  ensureBlocks(db, id);
+  const next = parseDocBlocks(body);
+  if (next.length) {
+    const blocks = liveBlocks(db, id);
+    const first = blocks.length ? blocks[0].order_key : null;
+    insertBlocks(db, id, next, null, first);
+  }
+  return { id, changed: next.length > 0, replaced: next.length, version: documentVersion(db, id) };
+}
+function deleteDocument(db, id) {
+  if (!getDocument(db, id))
+    return false;
+  emit(db, "documents", id, "__deleted", 1);
+  for (const b2 of liveChildIds(db, "doc_blocks", "doc_id", id))
+    emit(db, "doc_blocks", b2, "__deleted", 1);
+  for (const c3 of liveChildIds(db, "documents", "parent_id", id))
+    emit(db, "documents", c3, "parent_id", null);
+  return true;
+}
+function liveChildIds(db, table, col, parentId) {
+  return db.query(`SELECT id FROM ${table} WHERE ${col} = ? AND __deleted = 0`).all(parentId).map((r3) => r3.id);
+}
+function countOccurrences(haystack, needle) {
+  if (needle === "")
+    return 0;
+  let n2 = 0;
+  let i2 = haystack.indexOf(needle);
+  while (i2 !== -1) {
+    n2++;
+    i2 = haystack.indexOf(needle, i2 + needle.length);
+  }
+  return n2;
+}
+
 // src/core/db.ts
 function ensureDirs() {
   mkdirSync(metahubHome(), { recursive: true });
@@ -4417,7 +4828,7 @@ function hasColumn(db, table, column) {
   const cols = db.query(`PRAGMA table_info(${table})`).all();
   return cols.some((c3) => c3.name === column);
 }
-function tableExists2(db, table) {
+function tableExists3(db, table) {
   return db.query("SELECT 1 AS ok FROM sqlite_master WHERE type = 'table' AND name = ?").get(table) != null;
 }
 function migrateRecords(db) {
@@ -4425,7 +4836,7 @@ function migrateRecords(db) {
     db.exec("ALTER TABLE records ADD COLUMN data TEXT NOT NULL DEFAULT '{}'");
   if (!hasColumn(db, "records", "order_key"))
     db.exec("ALTER TABLE records ADD COLUMN order_key TEXT");
-  if (!tableExists2(db, "record_values"))
+  if (!tableExists3(db, "record_values"))
     return;
   const tx = db.transaction(() => {
     db.exec(`
@@ -4460,6 +4871,11 @@ function migrateDocBlocks(db) {
   if (!hasColumn(db, "doc_blocks", "blank_after"))
     db.exec("ALTER TABLE doc_blocks ADD COLUMN blank_after INTEGER NOT NULL DEFAULT 0");
 }
+function migrateDocuments(db) {
+  if (!hasColumn(db, "documents", "order_key"))
+    db.exec("ALTER TABLE documents ADD COLUMN order_key TEXT");
+  backfillDocumentOrderKeys(db);
+}
 function openMetahub() {
   ensureDirs();
   const db = new Database(dbPath(), { create: true });
@@ -4468,6 +4884,7 @@ function openMetahub() {
   migrateRecords(db);
   migratePeers(db);
   migrateDocBlocks(db);
+  migrateDocuments(db);
   return db;
 }
 
@@ -4635,198 +5052,6 @@ var use_default = defineCommand({
   })
 });
 
-// src/core/documents.ts
-init_ids();
-init_crdt();
-function liveBlocks(db, docId) {
-  return db.query("SELECT id, text, order_key, blank_after FROM doc_blocks WHERE doc_id = ? AND __deleted = 0 ORDER BY order_key, id").all(docId);
-}
-function makeBlockId(text) {
-  return newId("blk", text.split(`
-`, 1)[0] ?? "");
-}
-function emitBlock(db, docId, fields) {
-  const id = makeBlockId(fields.text);
-  emit(db, "doc_blocks", id, "doc_id", docId);
-  emit(db, "doc_blocks", id, "order_key", fields.order_key);
-  if (fields.blankAfter)
-    emit(db, "doc_blocks", id, "blank_after", fields.blankAfter);
-  emit(db, "doc_blocks", id, "text", fields.text);
-}
-function insertBlocks(db, docId, blocks, after, before) {
-  const keys = keysBetween(after, before, blocks.length);
-  blocks.forEach((b2, i2) => emitBlock(db, docId, { text: b2.text, order_key: keys[i2], blankAfter: b2.blankAfter }));
-}
-function ensureBlocks(db, docId) {
-  if (db.query("SELECT 1 AS x FROM doc_blocks WHERE doc_id = ? LIMIT 1").get(docId))
-    return;
-  const row = db.query("SELECT body FROM documents WHERE id = ?").get(docId);
-  const blocks = parseDocBlocks(row?.body ?? "");
-  if (blocks.length)
-    insertBlocks(db, docId, blocks, null, null);
-}
-function reconcileBody(db, docId, body) {
-  const old = liveBlocks(db, docId);
-  const next = parseDocBlocks(body);
-  const plan = reconcile(old.map((b2) => b2.text), next.map((b2) => b2.text));
-  for (const oi of plan.deleted)
-    emit(db, "doc_blocks", old[oi].id, "__deleted", 1);
-  const { items } = plan;
-  let i2 = 0;
-  while (i2 < items.length) {
-    const it = items[i2];
-    if ("keep" in it) {
-      const oldB = old[it.keep];
-      const want = next[i2].blankAfter;
-      if ((oldB.blank_after ?? 0) !== want)
-        emit(db, "doc_blocks", oldB.id, "blank_after", want);
-      i2++;
-      continue;
-    }
-    let j = i2;
-    while (j < items.length && "insert" in items[j])
-      j++;
-    const left = i2 > 0 ? old[items[i2 - 1].keep].order_key : null;
-    const right = j < items.length ? old[items[j].keep].order_key : null;
-    insertBlocks(db, docId, next.slice(i2, j), left, right);
-    i2 = j;
-  }
-}
-function documentVersion(db, id) {
-  const row = db.query(`SELECT MAX(hlc) AS h FROM crdt_changes
-       WHERE (dataset = 'documents' AND row_id = ?)
-          OR (dataset = 'doc_blocks' AND row_id IN (SELECT id FROM doc_blocks WHERE doc_id = ?))`).get(id, id);
-  return row.h ?? "";
-}
-function createDocument(db, opts) {
-  const id = newId("doc", opts.title);
-  const first = emit(db, "documents", id, "title", opts.title);
-  emit(db, "documents", id, "created_hlc", first.hlc);
-  if (opts.database_id !== undefined)
-    emit(db, "documents", id, "database_id", opts.database_id);
-  if (opts.parent_id !== undefined)
-    emit(db, "documents", id, "parent_id", opts.parent_id);
-  if (opts.body !== undefined) {
-    const blocks = parseDocBlocks(opts.body);
-    if (blocks.length)
-      insertBlocks(db, id, blocks, null, null);
-  }
-  return getDocument(db, id);
-}
-function getDocument(db, id) {
-  return db.query("SELECT id, title, body, database_id, parent_id, created_hlc FROM documents WHERE id = ? AND __deleted = 0").get(id);
-}
-function listDocuments(db, opts = {}) {
-  const cols = "SELECT id, title, database_id, parent_id, created_hlc FROM documents WHERE __deleted = 0";
-  if (opts.parent_id !== undefined)
-    return db.query(`${cols} AND parent_id = ? ORDER BY created_hlc`).all(opts.parent_id);
-  if (opts.database_id)
-    return db.query(`${cols} AND database_id = ? ORDER BY created_hlc`).all(opts.database_id);
-  return db.query(`${cols} ORDER BY created_hlc`).all();
-}
-function updateDocument(db, id, fields) {
-  if (!getDocument(db, id))
-    throw new Error(`no such document: ${id}`);
-  if (fields.title !== undefined)
-    emit(db, "documents", id, "title", fields.title);
-  if (fields.database_id !== undefined)
-    emit(db, "documents", id, "database_id", fields.database_id);
-  if (fields.parent_id !== undefined) {
-    let cur = fields.parent_id;
-    while (cur) {
-      if (cur === id)
-        throw new Error(`cannot set parent_id: would create a cycle (${id})`);
-      cur = getDocument(db, cur)?.parent_id ?? null;
-    }
-    emit(db, "documents", id, "parent_id", fields.parent_id);
-  }
-  if (fields.body !== undefined) {
-    ensureBlocks(db, id);
-    reconcileBody(db, id, fields.body);
-  }
-  return getDocument(db, id);
-}
-function editDocument(db, id, opts) {
-  if (!getDocument(db, id))
-    throw new Error(`no such document: ${id}`);
-  if (opts.ifMatch !== undefined && documentVersion(db, id) !== opts.ifMatch)
-    throw new Error(`stale: document changed since ${opts.ifMatch}; re-read first`);
-  if (opts.old === "")
-    throw new Error("--old must not be empty");
-  ensureBlocks(db, id);
-  const blocks = liveBlocks(db, id);
-  const body = serializeDocBlocks(blocks.map((b2) => ({ text: b2.text, blankAfter: b2.blank_after })));
-  const count = countOccurrences(body, opts.old);
-  if (count === 0)
-    throw new Error(`anchor not found: no match for --old`);
-  if (count > 1 && !opts.replaceAll)
-    throw new Error(`${count} matches for --old; add surrounding context or use --replace-all`);
-  if (!opts.old.includes(`
-
-`)) {
-    const affected = blocks.filter((b2) => b2.text.includes(opts.old));
-    const next = affected.map((b2) => opts.replaceAll ? b2.text.replaceAll(opts.old, opts.new) : b2.text.replace(opts.old, opts.new));
-    if (next.every((t2) => t2.length > 0 && !t2.includes(`
-
-`))) {
-      const targets = opts.replaceAll ? affected : affected.slice(0, 1);
-      targets.forEach((b2, i2) => emit(db, "doc_blocks", b2.id, "text", next[i2]));
-      return { id, changed: true, replaced: opts.replaceAll ? count : 1, version: documentVersion(db, id) };
-    }
-  }
-  const newBody = opts.replaceAll ? body.replaceAll(opts.old, opts.new) : body.replace(opts.old, opts.new);
-  reconcileBody(db, id, newBody);
-  return { id, changed: newBody !== body, replaced: opts.replaceAll ? count : 1, version: documentVersion(db, id) };
-}
-function appendDocument(db, id, body) {
-  if (!getDocument(db, id))
-    throw new Error(`no such document: ${id}`);
-  ensureBlocks(db, id);
-  const next = parseDocBlocks(body);
-  if (next.length) {
-    const blocks = liveBlocks(db, id);
-    const last = blocks.length ? blocks[blocks.length - 1].order_key : null;
-    insertBlocks(db, id, next, last, null);
-  }
-  return { id, changed: next.length > 0, replaced: next.length, version: documentVersion(db, id) };
-}
-function prependDocument(db, id, body) {
-  if (!getDocument(db, id))
-    throw new Error(`no such document: ${id}`);
-  ensureBlocks(db, id);
-  const next = parseDocBlocks(body);
-  if (next.length) {
-    const blocks = liveBlocks(db, id);
-    const first = blocks.length ? blocks[0].order_key : null;
-    insertBlocks(db, id, next, null, first);
-  }
-  return { id, changed: next.length > 0, replaced: next.length, version: documentVersion(db, id) };
-}
-function deleteDocument(db, id) {
-  if (!getDocument(db, id))
-    return false;
-  emit(db, "documents", id, "__deleted", 1);
-  for (const b2 of liveChildIds(db, "doc_blocks", "doc_id", id))
-    emit(db, "doc_blocks", b2, "__deleted", 1);
-  for (const c3 of liveChildIds(db, "documents", "parent_id", id))
-    emit(db, "documents", c3, "parent_id", null);
-  return true;
-}
-function liveChildIds(db, table2, col, parentId) {
-  return db.query(`SELECT id FROM ${table2} WHERE ${col} = ? AND __deleted = 0`).all(parentId).map((r3) => r3.id);
-}
-function countOccurrences(haystack, needle) {
-  if (needle === "")
-    return 0;
-  let n2 = 0;
-  let i2 = haystack.indexOf(needle);
-  while (i2 !== -1) {
-    n2++;
-    i2 = haystack.indexOf(needle, i2 + needle.length);
-  }
-  return n2;
-}
-
 // src/cli/commands/get.ts
 var get_default = defineCommand({
   meta: { name: "get", description: "Look up any entity by ref (id/prefix/name), type auto-detected" },
@@ -22770,7 +22995,7 @@ var PropertySchema = exports_external.object({
 var RecordSchema = exports_external.object({
   id: exports_external.string(),
   database_id: exports_external.string(),
-  values: exports_external.record(exports_external.string(), exports_external.any())
+  values: exports_external.record(exports_external.string(), exports_external.any()).describe('Field values keyed by property name (e.g. {"Amount":35}). Reads nest cells here; writes take a flat {column: value} map.')
 });
 var MoveRecordReq = exports_external.object({
   target: exports_external.string(),
@@ -22781,7 +23006,12 @@ var DocumentSummarySchema = exports_external.object({
   title: exports_external.string(),
   database_id: exports_external.string().nullable(),
   parent_id: exports_external.string().nullable(),
-  created_hlc: exports_external.string()
+  created_hlc: exports_external.string(),
+  order_key: exports_external.string().nullable()
+});
+var MoveDocumentReq = exports_external.object({
+  target: exports_external.string(),
+  where: exports_external.enum(["before", "after", "into"])
 });
 var DocumentSchema = DocumentSummarySchema.extend({ body: exports_external.string().nullable() });
 var SearchHitSchema = exports_external.object({
@@ -22810,7 +23040,7 @@ var UpdatePropertyReq = exports_external.object({
   position: exports_external.number().optional()
 });
 var SetWidthReq = exports_external.object({ width: exports_external.number() });
-var RecordValuesReq = exports_external.record(exports_external.string(), exports_external.any());
+var RecordValuesReq = exports_external.record(exports_external.string(), exports_external.any()).describe("Flat { column: value } cell patch (keyed by property name).");
 var CreateDocumentReq = exports_external.object({
   title: exports_external.string(),
   body: exports_external.string().optional(),
@@ -23037,6 +23267,17 @@ var webuiRoutes = [
       return updateDocument(db, need(req, "id"), body);
     })
   },
+  {
+    method: "PATCH",
+    path: "/api/document/move",
+    summary: "Move a document before/after another, or into it as a child. Query: ?id=<id>",
+    request: MoveDocumentReq,
+    response: DocumentSchema,
+    handler: handle(async (req, { db }) => {
+      const body = await req.json();
+      return moveDocument(db, need(req, "id"), body.target, body.where);
+    })
+  },
   {
     method: "DELETE",
     path: "/api/document",
@@ -23064,6 +23305,7 @@ var SiteSchema = exports_external.object({
   title: exports_external.string().nullable(),
   created_hlc: exports_external.string()
 });
+var SiteWithCountSchema = SiteSchema.extend({ file_count: exports_external.number() });
 var SiteFileSchema = exports_external.object({
   id: exports_external.string(),
   site_id: exports_external.string(),
@@ -23071,6 +23313,8 @@ var SiteFileSchema = exports_external.object({
   content_type: exports_external.string(),
   encoding: exports_external.string()
 });
+var CreateSiteBody = exports_external.object({ name: exports_external.string(), title: exports_external.string().optional() });
+var UpdateSiteBody = exports_external.object({ name: exports_external.string().optional(), title: exports_external.string().optional() });
 function need2(req, key) {
   const v3 = new URL(req.url).searchParams.get(key);
   if (!v3)
@@ -23090,9 +23334,9 @@ var sitesRoutes = [
   {
     method: "GET",
     path: "/api/sites",
-    summary: "List published sites",
-    response: exports_external.array(SiteSchema),
-    handler: handle2((_req, { db }) => listSites(db))
+    summary: "List published sites (with file counts)",
+    response: exports_external.array(SiteWithCountSchema),
+    handler: handle2((_req, { db }) => listSites(db).map((s2) => ({ ...s2, file_count: listFiles(db, s2.id).length })))
   },
   {
     method: "GET",
@@ -23100,6 +23344,60 @@ var sitesRoutes = [
     summary: "List a site's files (manifest). Query: ?site=<id|name>",
     response: exports_external.array(SiteFileSchema),
     handler: handle2((req, { db }) => listFiles(db, resolveSite(db, need2(req, "site")).id))
+  },
+  {
+    method: "POST",
+    path: "/api/sites",
+    summary: "Create a site",
+    request: CreateSiteBody,
+    response: SiteSchema,
+    handler: handle2(async (req, { db }) => {
+      const body = CreateSiteBody.parse(await req.json());
+      return createSite(db, body);
+    })
+  },
+  {
+    method: "PATCH",
+    path: "/api/site",
+    summary: "Rename a site or change its title. Query: ?id=<id>",
+    request: UpdateSiteBody,
+    response: SiteSchema,
+    handler: handle2(async (req, { db }) => {
+      const body = UpdateSiteBody.parse(await req.json());
+      return updateSite(db, need2(req, "id"), body);
+    })
+  },
+  {
+    method: "DELETE",
+    path: "/api/site",
+    summary: "Delete a site and its files. Query: ?id=<id>",
+    response: exports_external.object({ ok: exports_external.boolean() }),
+    handler: handle2((req, { db }) => ({ ok: deleteSite(db, need2(req, "id")) }))
+  },
+  {
+    method: "POST",
+    path: "/api/site/file",
+    summary: "Upload/replace a file. Query: ?site=<id|name>&path=<path>; body is raw bytes",
+    response: SiteFileSchema,
+    handler: handle2(async (req, { db }) => {
+      const site = resolveSite(db, need2(req, "site"));
+      const ct3 = req.headers.get("content-type");
+      const file2 = await putFile(db, site.id, need2(req, "path"), {
+        data: await req.arrayBuffer(),
+        contentType: ct3 && ct3 !== "application/octet-stream" ? ct3 : undefined
+      });
+      const { content: _content, ...summary } = file2;
+      return summary;
+    })
+  },
+  {
+    method: "DELETE",
+    path: "/api/site/file",
+    summary: "Delete a file. Query: ?site=<id|name>&path=<path>",
+    response: exports_external.object({ ok: exports_external.boolean() }),
+    handler: handle2((req, { db }) => ({
+      ok: deleteFile(db, resolveSite(db, need2(req, "site")).id, need2(req, "path"))
+    }))
   }
 ];
 
@@ -23726,7 +24024,9 @@ USAGE
 CONCEPTS
   database (db)    A typed table. Owns properties and records.
   property (prop)  A column with a type (text|number|...). Belongs to a db.
-  record (rec)     A row: a { column: value } map inside a db.
+  record (rec)     A row of cells. Write a flat { column: value } map; reads
+                   wrap them as { id, database_id, values: { column: value } }
+                   \u2014 field values live under "values", keyed by property name.
   document (doc)   A markdown doc, stored as ordered blocks (block-level CRDT).
   site (site)      A named bucket of files (HTML/CSS/JS) served at /sites/<name>/.
   Every id is "<kind>_<slug>-<rand>", e.g. db_tasks-k3f9c1, rec_fix-login-7j02an.
@@ -23823,6 +24123,13 @@ AI WORKFLOW  (edit a doc without clobbering concurrent changes)
   mh doc edit <ref> --old "old text" --new "new text" --if-match <version>
   mh doc append <ref> --body "a new paragraph"
 
+SITE DATA  (read a table from a hosted page \u2014 field values nest under "values")
+  // a page served at /sites/<name>/ reads this library same-origin:
+  const rs = await fetch('/api/records?db=tasks').then(r => r.json());
+  // rs.records: [{ id, database_id, values: { Title, Status } }]
+  rs.records.forEach(r => render(r.values.Title, r.values.Status));
+  // NOTE: writes take a flat { column: value } map; reads wrap cells in .values
+
 Run 'mh <command> --help' for arguments and examples of a specific command.`;
 var EXAMPLES = {
   init: ["mh init", "METAHUB_HOME=/tmp/mh mh init   # use an alternate home"],
@@ -24006,4 +24313,4 @@ if (argv2.includes("--server")) {
   runMain(main, { showUsage: showUsage2 });
 }
 
-//# debugId=BD44ACF4937BFB2064756E2164756E21
+//# debugId=740ECE016A65928164756E2164756E21