@velastack/cms 0.1.0 → 0.2.1

package/dist/backend/store/migrations/0001-init.d.ts

@@ -0,0 +1 @@
+export declare const sql = "\n-- Live published state for pages. One row per (project, locale, route, params).\n-- Hot-path read: GET /docs?kind=page&... is one PK lookup against this table.\nCREATE TABLE published_pages (\n  project_id          TEXT NOT NULL,\n  locale              TEXT NOT NULL,\n  route_id            TEXT NOT NULL,\n  params_hash         TEXT NOT NULL,\n  params              TEXT NOT NULL,\n  tree                TEXT NOT NULL,\n  tombstone           TEXT,\n  updated_at          TEXT NOT NULL,\n  updated_by_release  TEXT NOT NULL,\n  PRIMARY KEY (project_id, locale, route_id, params_hash)\n) WITHOUT ROWID;\nCREATE INDEX idx_pp_listing ON published_pages (project_id, locale, route_id);\nCREATE INDEX idx_pp_param_values ON published_pages (project_id, route_id);\n\n-- Live published state for layouts. One row per (project, locale, route).\nCREATE TABLE published_layouts (\n  project_id          TEXT NOT NULL,\n  locale              TEXT NOT NULL,\n  route_id            TEXT NOT NULL,\n  tree                TEXT NOT NULL,\n  updated_at          TEXT NOT NULL,\n  updated_by_release  TEXT NOT NULL,\n  PRIMARY KEY (project_id, locale, route_id)\n) WITHOUT ROWID;\n\n-- Published release headers, in monotonic order (`seq` per project).\nCREATE TABLE releases (\n  id            TEXT PRIMARY KEY,\n  project_id    TEXT NOT NULL,\n  seq           INTEGER NOT NULL,\n  name          TEXT,\n  published_by  TEXT NOT NULL,\n  published_at  TEXT NOT NULL,\n  preview_key   TEXT NOT NULL,\n  reverted_at   TEXT\n);\nCREATE UNIQUE INDEX idx_releases_seq ON releases (project_id, seq DESC);\nCREATE UNIQUE INDEX idx_releases_preview ON releases (project_id, preview_key);\nCREATE INDEX idx_releases_history ON releases (project_id, published_at DESC);\n\n-- Append-only log of every published item. Drives ?version=<key> reads,\n-- revert (capture priorTree at publish, replay to undo), and history view.\nCREATE TABLE release_items (\n  id              INTEGER PRIMARY KEY AUTOINCREMENT,\n  release_id      TEXT NOT NULL REFERENCES releases(id) ON DELETE CASCADE,\n  project_id      TEXT NOT NULL,\n  seq             INTEGER NOT NULL,\n  kind            TEXT NOT NULL CHECK (kind IN ('page', 'layout', 'page-delete')),\n  route_id        TEXT NOT NULL,\n  locale          TEXT NOT NULL,\n  params_hash     TEXT,\n  params          TEXT,\n  tree            TEXT,\n  prior_tree      TEXT,\n  outcome         TEXT,\n  prior_tombstone TEXT,\n  added_at        TEXT NOT NULL\n);\nCREATE INDEX idx_ri_release ON release_items (release_id);\nCREATE INDEX idx_ri_replay ON release_items (project_id, seq DESC);\nCREATE INDEX idx_ri_scope ON release_items\n  (project_id, locale, route_id, params_hash, seq DESC);\n\n-- One open (draft) release per (project, user). Drafts overlay published reads\n-- when a request carries ?preview=<open_releases.preview_key>.\nCREATE TABLE open_releases (\n  project_id  TEXT NOT NULL,\n  user_id     TEXT NOT NULL,\n  name        TEXT,\n  created_at  TEXT NOT NULL,\n  preview_key TEXT NOT NULL,\n  PRIMARY KEY (project_id, user_id)\n);\nCREATE UNIQUE INDEX idx_or_preview ON open_releases (project_id, preview_key);\n\n-- Items in open releases. UNIQUE on scope so addReleaseItems can UPSERT-merge.\n-- params_hash is '' (canonical empty) for layouts to fit the unique constraint.\nCREATE TABLE open_release_items (\n  id           INTEGER PRIMARY KEY AUTOINCREMENT,\n  project_id   TEXT NOT NULL,\n  user_id      TEXT NOT NULL,\n  kind         TEXT NOT NULL CHECK (kind IN ('page', 'layout', 'page-delete')),\n  route_id     TEXT NOT NULL,\n  locale       TEXT NOT NULL,\n  params_hash  TEXT NOT NULL DEFAULT '',\n  params       TEXT,\n  tree         TEXT,\n  outcome      TEXT,\n  added_at     TEXT NOT NULL,\n  FOREIGN KEY (project_id, user_id)\n    REFERENCES open_releases(project_id, user_id) ON DELETE CASCADE\n);\nCREATE INDEX idx_ori_release ON open_release_items (project_id, user_id);\nCREATE UNIQUE INDEX idx_ori_scope ON open_release_items\n  (project_id, user_id, kind, route_id, locale, params_hash);\n\n-- Media library metadata. Files themselves live on disk under static/uploads/.\nCREATE TABLE media_items (\n  id            TEXT PRIMARY KEY,\n  project_id    TEXT NOT NULL,\n  filename      TEXT NOT NULL,\n  original_name TEXT NOT NULL,\n  mime          TEXT NOT NULL,\n  size          INTEGER NOT NULL,\n  url           TEXT NOT NULL,\n  uploaded_at   TEXT NOT NULL,\n  uploaded_by   TEXT NOT NULL\n);\nCREATE INDEX idx_media_listing ON media_items (project_id, uploaded_at DESC, id);\n\n-- Per-project version stamp. Bumped on every publish. Used as an ETag basis\n-- and to invalidate the in-process LRU cache.\nCREATE TABLE project_state (\n  project_id        TEXT PRIMARY KEY,\n  cms_version       INTEGER NOT NULL DEFAULT 0,\n  last_release_seq  INTEGER NOT NULL DEFAULT 0\n);\n";

package/dist/backend/store/migrations/0001-init.js

@@ -0,0 +1,129 @@
+// Verbatim copy of the original `0001_init.sql`, inlined as a template literal.
+//
+// The runner used `import.meta.glob('./migrations/*.sql', { query: '?raw' })`,
+// which is a Vite-only API: it resolves to nothing once this code is a compiled
+// dependency inside a consumer's node_modules. Inlining is what makes the
+// migrations portable. Escaping: backticks and `${` must be escaped here, and
+// nothing else changes.
+export const sql = `
+-- Live published state for pages. One row per (project, locale, route, params).
+-- Hot-path read: GET /docs?kind=page&... is one PK lookup against this table.
+CREATE TABLE published_pages (
+  project_id          TEXT NOT NULL,
+  locale              TEXT NOT NULL,
+  route_id            TEXT NOT NULL,
+  params_hash         TEXT NOT NULL,
+  params              TEXT NOT NULL,
+  tree                TEXT NOT NULL,
+  tombstone           TEXT,
+  updated_at          TEXT NOT NULL,
+  updated_by_release  TEXT NOT NULL,
+  PRIMARY KEY (project_id, locale, route_id, params_hash)
+) WITHOUT ROWID;
+CREATE INDEX idx_pp_listing ON published_pages (project_id, locale, route_id);
+CREATE INDEX idx_pp_param_values ON published_pages (project_id, route_id);
+
+-- Live published state for layouts. One row per (project, locale, route).
+CREATE TABLE published_layouts (
+  project_id          TEXT NOT NULL,
+  locale              TEXT NOT NULL,
+  route_id            TEXT NOT NULL,
+  tree                TEXT NOT NULL,
+  updated_at          TEXT NOT NULL,
+  updated_by_release  TEXT NOT NULL,
+  PRIMARY KEY (project_id, locale, route_id)
+) WITHOUT ROWID;
+
+-- Published release headers, in monotonic order (\`seq\` per project).
+CREATE TABLE releases (
+  id            TEXT PRIMARY KEY,
+  project_id    TEXT NOT NULL,
+  seq           INTEGER NOT NULL,
+  name          TEXT,
+  published_by  TEXT NOT NULL,
+  published_at  TEXT NOT NULL,
+  preview_key   TEXT NOT NULL,
+  reverted_at   TEXT
+);
+CREATE UNIQUE INDEX idx_releases_seq ON releases (project_id, seq DESC);
+CREATE UNIQUE INDEX idx_releases_preview ON releases (project_id, preview_key);
+CREATE INDEX idx_releases_history ON releases (project_id, published_at DESC);
+
+-- Append-only log of every published item. Drives ?version=<key> reads,
+-- revert (capture priorTree at publish, replay to undo), and history view.
+CREATE TABLE release_items (
+  id              INTEGER PRIMARY KEY AUTOINCREMENT,
+  release_id      TEXT NOT NULL REFERENCES releases(id) ON DELETE CASCADE,
+  project_id      TEXT NOT NULL,
+  seq             INTEGER NOT NULL,
+  kind            TEXT NOT NULL CHECK (kind IN ('page', 'layout', 'page-delete')),
+  route_id        TEXT NOT NULL,
+  locale          TEXT NOT NULL,
+  params_hash     TEXT,
+  params          TEXT,
+  tree            TEXT,
+  prior_tree      TEXT,
+  outcome         TEXT,
+  prior_tombstone TEXT,
+  added_at        TEXT NOT NULL
+);
+CREATE INDEX idx_ri_release ON release_items (release_id);
+CREATE INDEX idx_ri_replay ON release_items (project_id, seq DESC);
+CREATE INDEX idx_ri_scope ON release_items
+  (project_id, locale, route_id, params_hash, seq DESC);
+
+-- One open (draft) release per (project, user). Drafts overlay published reads
+-- when a request carries ?preview=<open_releases.preview_key>.
+CREATE TABLE open_releases (
+  project_id  TEXT NOT NULL,
+  user_id     TEXT NOT NULL,
+  name        TEXT,
+  created_at  TEXT NOT NULL,
+  preview_key TEXT NOT NULL,
+  PRIMARY KEY (project_id, user_id)
+);
+CREATE UNIQUE INDEX idx_or_preview ON open_releases (project_id, preview_key);
+
+-- Items in open releases. UNIQUE on scope so addReleaseItems can UPSERT-merge.
+-- params_hash is '' (canonical empty) for layouts to fit the unique constraint.
+CREATE TABLE open_release_items (
+  id           INTEGER PRIMARY KEY AUTOINCREMENT,
+  project_id   TEXT NOT NULL,
+  user_id      TEXT NOT NULL,
+  kind         TEXT NOT NULL CHECK (kind IN ('page', 'layout', 'page-delete')),
+  route_id     TEXT NOT NULL,
+  locale       TEXT NOT NULL,
+  params_hash  TEXT NOT NULL DEFAULT '',
+  params       TEXT,
+  tree         TEXT,
+  outcome      TEXT,
+  added_at     TEXT NOT NULL,
+  FOREIGN KEY (project_id, user_id)
+    REFERENCES open_releases(project_id, user_id) ON DELETE CASCADE
+);
+CREATE INDEX idx_ori_release ON open_release_items (project_id, user_id);
+CREATE UNIQUE INDEX idx_ori_scope ON open_release_items
+  (project_id, user_id, kind, route_id, locale, params_hash);
+
+-- Media library metadata. Files themselves live on disk under static/uploads/.
+CREATE TABLE media_items (
+  id            TEXT PRIMARY KEY,
+  project_id    TEXT NOT NULL,
+  filename      TEXT NOT NULL,
+  original_name TEXT NOT NULL,
+  mime          TEXT NOT NULL,
+  size          INTEGER NOT NULL,
+  url           TEXT NOT NULL,
+  uploaded_at   TEXT NOT NULL,
+  uploaded_by   TEXT NOT NULL
+);
+CREATE INDEX idx_media_listing ON media_items (project_id, uploaded_at DESC, id);
+
+-- Per-project version stamp. Bumped on every publish. Used as an ETag basis
+-- and to invalidate the in-process LRU cache.
+CREATE TABLE project_state (
+  project_id        TEXT PRIMARY KEY,
+  cms_version       INTEGER NOT NULL DEFAULT 0,
+  last_release_seq  INTEGER NOT NULL DEFAULT 0
+);
+`;

package/dist/backend/store/migrations/0002-site.d.ts

@@ -0,0 +1 @@
+export declare const sql = "\n-- Add the `site` kind: a single project-scoped tree of non-localized,\n-- non-route-bound settings (business name, logo, contact, analytics, \u2026).\n--\n-- Three changes:\n--   1. New `published_site` table, one row per project.\n--   2. Extend the kind CHECK on `open_release_items` and `release_items` so a\n--      site draft item can land in the same release flow as page/layout items.\n--      SQLite can't ALTER a CHECK constraint in place, so we rebuild the two\n--      tables. Site items use sentinel `__site__` values for the route_id /\n--      locale / params_hash columns to satisfy the existing NOT NULL columns\n--      and the (kind, route_id, locale, params_hash) unique index \u2014 only one\n--      site draft per user.\n\nPRAGMA foreign_keys = OFF;\n\nCREATE TABLE published_site (\n  project_id          TEXT NOT NULL PRIMARY KEY,\n  tree                TEXT NOT NULL,\n  updated_at          TEXT NOT NULL,\n  updated_by_release  TEXT NOT NULL\n) WITHOUT ROWID;\n\n-- Rebuild open_release_items with 'site' added to the kind CHECK.\nCREATE TABLE open_release_items_new (\n  id           INTEGER PRIMARY KEY AUTOINCREMENT,\n  project_id   TEXT NOT NULL,\n  user_id      TEXT NOT NULL,\n  kind         TEXT NOT NULL CHECK (kind IN ('page', 'layout', 'page-delete', 'site')),\n  route_id     TEXT NOT NULL,\n  locale       TEXT NOT NULL,\n  params_hash  TEXT NOT NULL DEFAULT '',\n  params       TEXT,\n  tree         TEXT,\n  outcome      TEXT,\n  added_at     TEXT NOT NULL,\n  FOREIGN KEY (project_id, user_id)\n    REFERENCES open_releases(project_id, user_id) ON DELETE CASCADE\n);\nINSERT INTO open_release_items_new\n  (id, project_id, user_id, kind, route_id, locale, params_hash, params, tree, outcome, added_at)\n  SELECT id, project_id, user_id, kind, route_id, locale, params_hash, params, tree, outcome, added_at\n  FROM open_release_items;\nDROP TABLE open_release_items;\nALTER TABLE open_release_items_new RENAME TO open_release_items;\nCREATE INDEX idx_ori_release ON open_release_items (project_id, user_id);\nCREATE UNIQUE INDEX idx_ori_scope ON open_release_items\n  (project_id, user_id, kind, route_id, locale, params_hash);\n\n-- Rebuild release_items with 'site' added to the kind CHECK.\nCREATE TABLE release_items_new (\n  id              INTEGER PRIMARY KEY AUTOINCREMENT,\n  release_id      TEXT NOT NULL REFERENCES releases(id) ON DELETE CASCADE,\n  project_id      TEXT NOT NULL,\n  seq             INTEGER NOT NULL,\n  kind            TEXT NOT NULL CHECK (kind IN ('page', 'layout', 'page-delete', 'site')),\n  route_id        TEXT NOT NULL,\n  locale          TEXT NOT NULL,\n  params_hash     TEXT,\n  params          TEXT,\n  tree            TEXT,\n  prior_tree      TEXT,\n  outcome         TEXT,\n  prior_tombstone TEXT,\n  added_at        TEXT NOT NULL\n);\nINSERT INTO release_items_new\n  (id, release_id, project_id, seq, kind, route_id, locale, params_hash, params, tree, prior_tree, outcome, prior_tombstone, added_at)\n  SELECT id, release_id, project_id, seq, kind, route_id, locale, params_hash, params, tree, prior_tree, outcome, prior_tombstone, added_at\n  FROM release_items;\nDROP TABLE release_items;\nALTER TABLE release_items_new RENAME TO release_items;\nCREATE INDEX idx_ri_release ON release_items (release_id);\nCREATE INDEX idx_ri_replay ON release_items (project_id, seq DESC);\nCREATE INDEX idx_ri_scope ON release_items\n  (project_id, locale, route_id, params_hash, seq DESC);\n\nPRAGMA foreign_keys = ON;\n";

package/dist/backend/store/migrations/0002-site.js

@@ -0,0 +1,86 @@
+// Verbatim copy of the original `0002_site.sql`, inlined as a template literal.
+//
+// The runner used `import.meta.glob('./migrations/*.sql', { query: '?raw' })`,
+// which is a Vite-only API: it resolves to nothing once this code is a compiled
+// dependency inside a consumer's node_modules. Inlining is what makes the
+// migrations portable. Escaping: backticks and `${` must be escaped here, and
+// nothing else changes.
+export const sql = `
+-- Add the \`site\` kind: a single project-scoped tree of non-localized,
+-- non-route-bound settings (business name, logo, contact, analytics, …).
+--
+-- Three changes:
+--   1. New \`published_site\` table, one row per project.
+--   2. Extend the kind CHECK on \`open_release_items\` and \`release_items\` so a
+--      site draft item can land in the same release flow as page/layout items.
+--      SQLite can't ALTER a CHECK constraint in place, so we rebuild the two
+--      tables. Site items use sentinel \`__site__\` values for the route_id /
+--      locale / params_hash columns to satisfy the existing NOT NULL columns
+--      and the (kind, route_id, locale, params_hash) unique index — only one
+--      site draft per user.
+
+PRAGMA foreign_keys = OFF;
+
+CREATE TABLE published_site (
+  project_id          TEXT NOT NULL PRIMARY KEY,
+  tree                TEXT NOT NULL,
+  updated_at          TEXT NOT NULL,
+  updated_by_release  TEXT NOT NULL
+) WITHOUT ROWID;
+
+-- Rebuild open_release_items with 'site' added to the kind CHECK.
+CREATE TABLE open_release_items_new (
+  id           INTEGER PRIMARY KEY AUTOINCREMENT,
+  project_id   TEXT NOT NULL,
+  user_id      TEXT NOT NULL,
+  kind         TEXT NOT NULL CHECK (kind IN ('page', 'layout', 'page-delete', 'site')),
+  route_id     TEXT NOT NULL,
+  locale       TEXT NOT NULL,
+  params_hash  TEXT NOT NULL DEFAULT '',
+  params       TEXT,
+  tree         TEXT,
+  outcome      TEXT,
+  added_at     TEXT NOT NULL,
+  FOREIGN KEY (project_id, user_id)
+    REFERENCES open_releases(project_id, user_id) ON DELETE CASCADE
+);
+INSERT INTO open_release_items_new
+  (id, project_id, user_id, kind, route_id, locale, params_hash, params, tree, outcome, added_at)
+  SELECT id, project_id, user_id, kind, route_id, locale, params_hash, params, tree, outcome, added_at
+  FROM open_release_items;
+DROP TABLE open_release_items;
+ALTER TABLE open_release_items_new RENAME TO open_release_items;
+CREATE INDEX idx_ori_release ON open_release_items (project_id, user_id);
+CREATE UNIQUE INDEX idx_ori_scope ON open_release_items
+  (project_id, user_id, kind, route_id, locale, params_hash);
+
+-- Rebuild release_items with 'site' added to the kind CHECK.
+CREATE TABLE release_items_new (
+  id              INTEGER PRIMARY KEY AUTOINCREMENT,
+  release_id      TEXT NOT NULL REFERENCES releases(id) ON DELETE CASCADE,
+  project_id      TEXT NOT NULL,
+  seq             INTEGER NOT NULL,
+  kind            TEXT NOT NULL CHECK (kind IN ('page', 'layout', 'page-delete', 'site')),
+  route_id        TEXT NOT NULL,
+  locale          TEXT NOT NULL,
+  params_hash     TEXT,
+  params          TEXT,
+  tree            TEXT,
+  prior_tree      TEXT,
+  outcome         TEXT,
+  prior_tombstone TEXT,
+  added_at        TEXT NOT NULL
+);
+INSERT INTO release_items_new
+  (id, release_id, project_id, seq, kind, route_id, locale, params_hash, params, tree, prior_tree, outcome, prior_tombstone, added_at)
+  SELECT id, release_id, project_id, seq, kind, route_id, locale, params_hash, params, tree, prior_tree, outcome, prior_tombstone, added_at
+  FROM release_items;
+DROP TABLE release_items;
+ALTER TABLE release_items_new RENAME TO release_items;
+CREATE INDEX idx_ri_release ON release_items (release_id);
+CREATE INDEX idx_ri_replay ON release_items (project_id, seq DESC);
+CREATE INDEX idx_ri_scope ON release_items
+  (project_id, locale, route_id, params_hash, seq DESC);
+
+PRAGMA foreign_keys = ON;
+`;

package/dist/backend/store/migrations/0003-editors.d.ts

@@ -0,0 +1 @@
+export declare const sql = "\nCREATE TABLE cms_editors (\n  id            TEXT PRIMARY KEY,\n  email         TEXT NOT NULL,\n  -- Lookups are case-insensitive, but the address is shown back as entered.\n  email_lower   TEXT NOT NULL UNIQUE,\n  name          TEXT NOT NULL,\n  password_hash TEXT NOT NULL,\n  created_at    TEXT NOT NULL,\n  disabled_at   TEXT\n);\n\n-- Authorization. One row per (project, editor) the editor may edit; the absence\n-- of a row is a 403. No FK on project_id for the reason above.\nCREATE TABLE cms_project_editors (\n  project_id  TEXT NOT NULL,\n  editor_id   TEXT NOT NULL REFERENCES cms_editors(id) ON DELETE CASCADE,\n  role        TEXT NOT NULL DEFAULT 'editor',\n  granted_at  TEXT NOT NULL,\n  PRIMARY KEY (project_id, editor_id)\n) WITHOUT ROWID;\nCREATE INDEX idx_cpe_editor ON cms_project_editors (editor_id);\n\n-- Sessions are stored by SHA-256 of the token, never the token itself, so a\n-- database read (a backup, a leaked file) yields nothing that can be replayed\n-- as a cookie. The cookie carries the raw token.\nCREATE TABLE cms_sessions (\n  token_hash   TEXT PRIMARY KEY,\n  editor_id    TEXT NOT NULL REFERENCES cms_editors(id) ON DELETE CASCADE,\n  created_at   TEXT NOT NULL,\n  expires_at   TEXT NOT NULL,\n  last_seen_at TEXT\n) WITHOUT ROWID;\nCREATE INDEX idx_cms_sessions_editor ON cms_sessions (editor_id);\n";

package/dist/backend/store/migrations/0003-editors.js

@@ -0,0 +1,44 @@
+// Editors, project grants, and sessions for the built-in `localEditors()` auth
+// adapter.
+//
+// Purely additive: three new tables, nothing existing is altered or rebuilt, so
+// this applies to a live database in place. `project_id` stays an unconstrained
+// TEXT key, exactly as it is in every other table here — there is no project
+// registry to keep in step. A project is reachable for writes precisely when
+// some editor has been granted it, which is what closes the old
+// "any [project_id] string creates a tenant on first write" hole.
+export const sql = `
+CREATE TABLE cms_editors (
+  id            TEXT PRIMARY KEY,
+  email         TEXT NOT NULL,
+  -- Lookups are case-insensitive, but the address is shown back as entered.
+  email_lower   TEXT NOT NULL UNIQUE,
+  name          TEXT NOT NULL,
+  password_hash TEXT NOT NULL,
+  created_at    TEXT NOT NULL,
+  disabled_at   TEXT
+);
+
+-- Authorization. One row per (project, editor) the editor may edit; the absence
+-- of a row is a 403. No FK on project_id for the reason above.
+CREATE TABLE cms_project_editors (
+  project_id  TEXT NOT NULL,
+  editor_id   TEXT NOT NULL REFERENCES cms_editors(id) ON DELETE CASCADE,
+  role        TEXT NOT NULL DEFAULT 'editor',
+  granted_at  TEXT NOT NULL,
+  PRIMARY KEY (project_id, editor_id)
+) WITHOUT ROWID;
+CREATE INDEX idx_cpe_editor ON cms_project_editors (editor_id);
+
+-- Sessions are stored by SHA-256 of the token, never the token itself, so a
+-- database read (a backup, a leaked file) yields nothing that can be replayed
+-- as a cookie. The cookie carries the raw token.
+CREATE TABLE cms_sessions (
+  token_hash   TEXT PRIMARY KEY,
+  editor_id    TEXT NOT NULL REFERENCES cms_editors(id) ON DELETE CASCADE,
+  created_at   TEXT NOT NULL,
+  expires_at   TEXT NOT NULL,
+  last_seen_at TEXT
+) WITHOUT ROWID;
+CREATE INDEX idx_cms_sessions_editor ON cms_sessions (editor_id);
+`;

package/dist/backend/store/migrations/index.d.ts

@@ -0,0 +1,15 @@
+export type Migration = {
+    name: string;
+    sql: string;
+};
+/**
+ * Every migration, in apply order.
+ *
+ * ⚠ The `name` values are the primary key of the `_migrations` table on every
+ * database already in production. `0001_init.sql` and `0002_site.sql` are the
+ * exact strings recorded there — including the `.sql` suffix these are no
+ * longer stored in. Rename one and the runner stops recognising it as applied,
+ * re-runs `CREATE TABLE published_pages` against live data, and the app fails
+ * to boot. `migrations.test.ts` pins these strings for that reason.
+ */
+export declare const MIGRATIONS: Migration[];

package/dist/backend/store/migrations/index.js

@@ -0,0 +1,18 @@
+import { sql as init } from './0001-init.js';
+import { sql as site } from './0002-site.js';
+import { sql as editors } from './0003-editors.js';
+/**
+ * Every migration, in apply order.
+ *
+ * ⚠ The `name` values are the primary key of the `_migrations` table on every
+ * database already in production. `0001_init.sql` and `0002_site.sql` are the
+ * exact strings recorded there — including the `.sql` suffix these are no
+ * longer stored in. Rename one and the runner stops recognising it as applied,
+ * re-runs `CREATE TABLE published_pages` against live data, and the app fails
+ * to boot. `migrations.test.ts` pins these strings for that reason.
+ */
+export const MIGRATIONS = [
+    { name: '0001_init.sql', sql: init },
+    { name: '0002_site.sql', sql: site },
+    { name: '0003_editors.sql', sql: editors }
+];

package/dist/backend/store/queries.d.ts

@@ -0,0 +1,67 @@
+import { type PageEntry, type PageDeleteOutcome } from '../../core/page-entry.js';
+import { type Tree } from '../../core/path.js';
+import type { AddReleaseItemInput, CreatePageResult, DiscardItemTarget, ListMediaOptions, ListMediaResult, MediaItem, OpenRelease, PageMapRoute, PublishedRelease, ReleaseItem, RenamePageResult, StagePageDeleteResult } from '../../core/wire.js';
+import type { SqliteDb } from './sqlite.js';
+/** The locale a request falls back to when it names none. */
+export declare const DEFAULT_LOCALE = "en";
+/** An opaque, unguessable key for a release's preview URL. */
+export declare const generatePreviewKey: () => string;
+/**
+ * Every SQL statement and every piece of CMS domain logic, bound to one
+ * database connection.
+ *
+ * This was a module of top-level functions reading a process-wide `getDb()`
+ * singleton. Closing over `db` instead is what lets a test file hold its own
+ * `':memory:'` database (so the suites run in parallel rather than serialised
+ * behind a shared file) and what stops a host from being limited to one CMS per
+ * process. The statement helpers below are memoised per instance as a side
+ * effect — they previously re-`prepare`d on every single call.
+ *
+ * The body is otherwise a verbatim move.
+ */
+export declare const createStore: (db: SqliteDb) => {
+    __resetProjectForTests: (projectId: string) => void;
+    addReleaseItems: (projectId: string, userId: string, inputs: AddReleaseItemInput[]) => OpenRelease;
+    allPageRouteIds: (projectId: string) => string[];
+    buildStateAtRelease: (projectId: string, releaseId: string) => {
+        layoutSnap: Record<string, Record<string, Tree>>;
+        pageSnap: Record<string, Record<string, PageEntry[]>>;
+        siteSnap: Tree;
+    } | null;
+    createMediaItem: (projectId: string, input: Omit<MediaItem, "id" | "uploadedAt">) => MediaItem;
+    createPage: (projectId: string, userId: string, routeId: string, locale: string, params: Record<string, string>, metadata?: Record<string, unknown>) => CreatePageResult;
+    deleteMediaItem: (projectId: string, id: string) => MediaItem | null;
+    discardOpenRelease: (projectId: string, userId: string) => boolean;
+    discardReleaseItem: (projectId: string, userId: string, target: DiscardItemTarget) => boolean;
+    findMediaItem: (projectId: string, id: string) => MediaItem | null;
+    findOpenReleaseByPreviewKey: (projectId: string, key: string) => OpenRelease | null;
+    findPublishedReleaseByPreviewKey: (projectId: string, key: string) => PublishedRelease | null;
+    getCmsVersion: (projectId: string) => number;
+    getOpenRelease: (projectId: string, userId: string) => OpenRelease | null;
+    getPublishedLayoutTree: (projectId: string, locale: string, routeId: string) => Tree | null;
+    getPublishedPageEntries: (projectId: string, locale: string, routeId: string) => PageEntry[];
+    getPublishedPageEntry: (projectId: string, locale: string, routeId: string, params: Record<string, string>) => PageEntry | null;
+    getPublishedSiteTree: (projectId: string) => Tree;
+    getReleaseHistory: (projectId: string) => PublishedRelease[];
+    listAllPages: (projectId: string, userId: string, locale: string) => PageMapRoute[];
+    listMediaItems: (projectId: string, { offset, limit }?: ListMediaOptions) => ListMediaResult;
+    listPageParamValues: (projectId: string, routeId: string, param: string) => string[];
+    lookupReleaseByPreviewKey: (projectId: string, key: string) => {
+        id: string;
+        items: ReleaseItem[];
+    } | null;
+    publishRelease: (projectId: string, userId: string, name?: string) => PublishedRelease | null;
+    regeneratePreviewKey: (projectId: string, userId: string) => string | null;
+    regeneratePublishedPreviewKey: (projectId: string, releaseId: string) => string | null;
+    renamePage: (projectId: string, userId: string, args: {
+        routeId: string;
+        locale: string;
+        fromParams: Record<string, string>;
+        toParams: Record<string, string>;
+        toUrl: string;
+    }) => RenamePageResult;
+    revertRelease: (projectId: string, releaseId: string, userId: string) => PublishedRelease | null;
+    seedPublishedDocs: (projectId: string, layouts: Record<string, Record<string, Tree>>, pages: Record<string, Record<string, PageEntry[]>>) => void;
+    stagePageDelete: (projectId: string, userId: string, routeId: string, locale: string, params: Record<string, string>, outcome?: PageDeleteOutcome) => StagePageDeleteResult;
+};
+export type CmsStore = ReturnType<typeof createStore>;