@we8/cms 0.1.0

package/dist/shared/schemas/settings.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"settings.d.ts","sourceRoot":"","sources":["../../../src/shared/schemas/settings.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAc,KAAK,QAAQ,EAAE,MAAM,iBAAiB,CAAC;AAG5D,eAAO,MAAM,iBAAiB;;;;;;;;;;;;;;;;;;EAM5B,CAAC;AAEH,eAAO,MAAM,uBAAuB;;;;;;;;;EAGlC,CAAC;AAEH,eAAO,MAAM,uBAAuB;;;;;;;;;EAGlC,CAAC;AAEH,oGAAoG;AACpG,eAAO,MAAM,uBAAuB;;;;;;;;;EAGlC,CAAC;AAQH;;;;;;;;GAQG;AACH,eAAO,MAAM,kBAAkB;;;;;;;;;;;;;;;;;;;;;EAO7B,CAAC;AAEH,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAE9D;;;;GAIG;AACH,wBAAgB,kBAAkB,CAChC,IAAI,EAAE,QAAQ,EACd,QAAQ,EAAE;IAAE,YAAY,CAAC,EAAE,YAAY,GAAG,SAAS,CAAC;IAAC,eAAe,EAAE,MAAM,CAAA;CAAE,GAC7E,MAAM,CAER;AAED,uFAAuF;AACvF,wBAAgB,sBAAsB,CAAC,QAAQ,EAAE;IAC/C,YAAY,CAAC,EAAE,YAAY,GAAG,SAAS,CAAC;IACxC,eAAe,EAAE,MAAM,CAAC;CACzB,GAAG,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,CAI3B;AAED;;;;;;;GAOG;AACH,eAAO,MAAM,iBAAiB;;;;;;;;;;;;;;;;;;;;;;;;;;;EAS5B,CAAC;AAeH;;;;;;;;;GASG;AACH,eAAO,MAAM,mBAAmB;;;;;;;;;;;;;;;;;;;;;;;;;;;EAS9B,CAAC;AAEH;;;;;;GAMG;AACH,eAAO,MAAM,iBAAiB;;;;;;;;;;;;EAI5B,CAAC;AAEH,eAAO,MAAM,kBAAkB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;IAwB7B;;;;OAIG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAQH,CAAC;AA0CH,eAAO,MAAM,6BAA6B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAUxC,CAAC;AAEH;;;;;GAKG;AACH,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,OAAO,EAAE,MAAM,CAAC;IAChB,GAAG,EAAE,WAAW,CAAC;IACjB,SAAS,EAAE,iBAAiB,GAAG,IAAI,CAAC;IACpC,oEAAoE;IACpE,eAAe,EAAE,MAAM,CAAC;IACxB,kFAAkF;IAClF,YAAY,EAAE,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IACvC,oFAAoF;IACpF,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,KAAK,EAAE,aAAa,CAAC;CACtB;AAED,MAAM,MAAM,WAAW,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC;AAC5D,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAC;AACxE,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAC;AACxE,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAC;AACxE,MAAM,MAAM,WAAW,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC;AAC5D,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAChE,MAAM,MAAM,WAAW,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC;AAC5D,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAC9D,MAAM,MAAM,uBAAuB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,6BAA6B,CAAC,CAAC"}

package/dist/shared/schemas/settings.js

@@ -0,0 +1,202 @@
+import { z } from 'zod';
+import { POST_TYPES } from '../constants.js';
+import { webhookConfigSchema } from './webhook.js';
+export const moduleFlagsSchema = z.object({
+    content: z.boolean().default(true),
+    forms: z.boolean().default(true),
+    analytics: z.boolean().default(true),
+    media: z.boolean().default(true),
+    seo: z.boolean().default(true),
+});
+export const retentionSettingsSchema = z.object({
+    visits: z.number().int().min(1).max(3650).default(90),
+    consent: z.number().int().min(1).max(3650).default(365),
+});
+export const turnstileSettingsSchema = z.object({
+    enabled: z.boolean().default(false),
+    sitekey: z.string().optional(),
+});
+/** schema.org Organization, minimal shape. Used as JSON-LD `publisher` on post detail responses. */
+export const publisherSettingsSchema = z.object({
+    name: z.string().min(1),
+    logoUrl: z.string().url().optional(),
+});
+const pathPrefixSchema = z
+    .string()
+    .min(1)
+    .max(100)
+    .regex(/^\/[a-z0-9\-/]*$/, 'path must start with / and be lowercase kebab segments');
+/**
+ * Per-type URL sections: a PARTIAL map from post type to the path prefix the
+ * site serves that section at, e.g. `{ blog: "/insights", news: "/newsroom" }`.
+ * Types absent from the map fall back to `postsPathPrefix`, the universal
+ * prefix, so an empty map behaves exactly as a site with one section does. All
+ * fields optional, so the object replaces wholesale on update. Explicit
+ * optional keys instead of z.record: a record with an enum key types as a FULL
+ * Record while parsing partially, a lie the resolver would trip on.
+ */
+export const contentPathsSchema = z.object({
+    blog: pathPrefixSchema.optional(),
+    article: pathPrefixSchema.optional(),
+    news: pathPrefixSchema.optional(),
+    research: pathPrefixSchema.optional(),
+    whitepaper: pathPrefixSchema.optional(),
+    'case-study': pathPrefixSchema.optional(),
+});
+/**
+ * THE resolution rule, defined once: a type's own path, else the legacy
+ * universal prefix. Sitemap, JSON-LD, the public site config, and the astro
+ * postUrl helper must all route through this so they can never disagree.
+ */
+export function resolveContentPath(type, settings) {
+    return settings.contentPaths?.[type] ?? settings.postsPathPrefix;
+}
+/** The fully-resolved map served in the public site config (every type has a path). */
+export function resolveAllContentPaths(settings) {
+    return Object.fromEntries(POST_TYPES.map((type) => [type, resolveContentPath(type, settings)]));
+}
+/**
+ * Site-level SEO FALLBACKS: a template's own values always win, and these fill
+ * the gaps when it omits one (the code-first merge lives in @we8/astro, not
+ * here). titleTemplate uses "%s" as the page-title placeholder, e.g.
+ * "%s | Acme Co". discourageSearchEngines is advertised in the public site
+ * config so a template can emit a disallow robots.txt and a noindex tag; this
+ * package only stores and serves it.
+ */
+export const seoSettingsSchema = z.object({
+    defaultTitle: z.string().max(120).optional(),
+    titleTemplate: z.string().max(160).optional(),
+    metaDescription: z.string().max(300).optional(),
+    ogTitle: z.string().max(120).optional(),
+    ogDescription: z.string().max(300).optional(),
+    ogImageUrl: z.string().url().optional(),
+    twitterHandle: z.string().max(30).optional(),
+    discourageSearchEngines: z.boolean().default(false),
+});
+/**
+ * A flat optional scalar, not a nested object: there is exactly one value to
+ * configure, so nesting would only reproduce the all-or-nothing footgun the
+ * update-variant comment below exists to avoid, for no benefit.
+ * ""-accepted-then-normalized-to-null on read, the same clear protocol the
+ * post content fields use, since JSON can express "" but not undefined.
+ */
+const gaMeasurementIdSchema = z
+    .string()
+    .regex(/^G-[A-Z0-9]{4,}$/, 'must look like a GA4 measurement ID (G-XXXXXXX)')
+    .or(z.literal(''))
+    .optional();
+/**
+ * Brand asset slots: media URLs for the minimal icon set (favicon.ico,
+ * icon.svg, apple-touch-icon, 192 and 512 plus maskable) and the display logos.
+ * Every slot is optional and the object defaults to `{}`, so a site owner who
+ * never opens the Brand screen still gets a fully-formed object rather than
+ * undefined, and consumers never need optional chaining. The OG default is not
+ * duplicated here; `seo.ogImageUrl` already covers it. Generating the icon set
+ * from one source image is out of scope, since it drags in image resizing;
+ * each slot is an already-correctly-sized upload.
+ */
+export const brandSettingsSchema = z.object({
+    logoUrl: z.string().url().optional(),
+    logoDarkUrl: z.string().url().optional(),
+    iconSvgUrl: z.string().url().optional(),
+    faviconIcoUrl: z.string().url().optional(),
+    appleTouchIconUrl: z.string().url().optional(),
+    icon192Url: z.string().url().optional(),
+    icon512Url: z.string().url().optional(),
+    icon512MaskUrl: z.string().url().optional(),
+});
+/**
+ * AEO settings (0.1 headline feature). `siteSummary` is the one sentence an
+ * answer engine should be able to lift about the site as a whole; it heads the
+ * generated llms.txt and is the site-level counterpart of a post's
+ * `answerSummary`. The generated document can be turned off entirely, and the
+ * post cap bounds it so a large site does not publish a megabyte of index.
+ */
+export const aeoSettingsSchema = z.object({
+    siteSummary: z.string().max(1000).optional(),
+    llmsTxtEnabled: z.boolean().default(true),
+    llmsTxtMaxPosts: z.number().int().min(1).max(500).default(100),
+});
+export const siteSettingsSchema = z.object({
+    allowedOrigins: z.array(z.string()).default([]),
+    modules: moduleFlagsSchema.default({
+        content: true,
+        forms: true,
+        analytics: true,
+        media: true,
+        seo: true,
+    }),
+    webhooks: z.array(webhookConfigSchema).default([]),
+    // Capped: a form notification pings a handful of site admins, not a mailing
+    // list, and the bound belongs at the source rather than at the sender.
+    notifyEmails: z.array(z.string().email()).max(10).default([]),
+    retentionDays: retentionSettingsSchema.default({ visits: 90, consent: 365 }),
+    turnstile: turnstileSettingsSchema.default({ enabled: false }),
+    sitemapStatic: z
+        .array(z.object({
+        path: z.string(),
+        changefreq: z.string().optional(),
+        priority: z.number().min(0).max(1).optional(),
+    }))
+        .default([]),
+    /**
+     * Where the frontend serves individual posts, e.g. "/insights" for
+     * SITE_URL + "/insights/:slug". Needed to build absolute sitemap <loc> URLs
+     * and the JSON-LD `mainEntityOfPage`.
+     */
+    postsPathPrefix: z.string().default('/insights'),
+    contentPaths: contentPathsSchema.default({}),
+    publisher: publisherSettingsSchema.optional(),
+    seo: seoSettingsSchema.default({}),
+    aeo: aeoSettingsSchema.default({ llmsTxtEnabled: true, llmsTxtMaxPosts: 100 }),
+    gaMeasurementId: gaMeasurementIdSchema,
+    brand: brandSettingsSchema.default({}),
+});
+/**
+ * Update-input variants of the nested settings objects with every field
+ * REQUIRED and no defaults. The write path (setSettings) shallow-merges the
+ * patch at the TOP level and re-parses the result through
+ * siteSettingsSchema, whose per-field .default()s would otherwise turn a
+ * partial nested object into a silent reset of the omitted siblings:
+ * PATCH {modules: {content: false}} would flip the other four flags back
+ * to true, {turnstile: {sitekey}} would silently disable turnstile
+ * (enabled defaults false), {retentionDays: {visits: 30}} would reset
+ * consent to 365. Nested objects are therefore all-or-nothing on update:
+ * a partial one is a 400, never a silent surprise. Arrays (webhooks,
+ * sitemapStatic, allowedOrigins, notifyEmails) replace wholesale, which
+ * is the intuitive PATCH semantic for lists, and publisher already
+ * requires its one non-optional field.
+ */
+const moduleFlagsUpdateSchema = z.object({
+    content: z.boolean(),
+    forms: z.boolean(),
+    analytics: z.boolean(),
+    media: z.boolean(),
+    seo: z.boolean(),
+});
+const retentionUpdateSchema = z.object({
+    visits: z.number().int().min(1).max(3650),
+    consent: z.number().int().min(1).max(3650),
+});
+const turnstileUpdateSchema = z.object({
+    enabled: z.boolean(),
+    sitekey: z.string().optional(),
+});
+/** All-required for the same reason as the three above: two of its fields default. */
+const aeoUpdateSchema = z.object({
+    siteSummary: z.string().max(1000).optional(),
+    llmsTxtEnabled: z.boolean(),
+    llmsTxtMaxPosts: z.number().int().min(1).max(500),
+});
+export const siteSettingsUpdateInputSchema = siteSettingsSchema.partial().extend({
+    modules: moduleFlagsUpdateSchema.optional(),
+    retentionDays: retentionUpdateSchema.optional(),
+    turnstile: turnstileUpdateSchema.optional(),
+    aeo: aeoUpdateSchema.optional(),
+    // seo and brand need no update variant: every field in both is optional,
+    // so the object replaces wholesale when present (the nested-update
+    // convention; omitted optional fields mean cleared, discourageSearchEngines
+    // re-fills its false default). Their screens always send the complete
+    // object.
+});
+//# sourceMappingURL=settings.js.map

package/dist/shared/schemas/settings.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"settings.js","sourceRoot":"","sources":["../../../src/shared/schemas/settings.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,UAAU,EAAiB,MAAM,iBAAiB,CAAC;AAC5D,OAAO,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAC;AAEnD,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,CAAC,MAAM,CAAC;IACxC,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;IAClC,KAAK,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;IAChC,SAAS,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;IACpC,KAAK,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;IAChC,GAAG,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;CAC/B,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC9C,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IACrD,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC;CACxD,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC9C,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;IACnC,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAC/B,CAAC,CAAC;AAEH,oGAAoG;AACpG,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC9C,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACvB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;CACrC,CAAC,CAAC;AAEH,MAAM,gBAAgB,GAAG,CAAC;KACvB,MAAM,EAAE;KACR,GAAG,CAAC,CAAC,CAAC;KACN,GAAG,CAAC,GAAG,CAAC;KACR,KAAK,CAAC,kBAAkB,EAAE,wDAAwD,CAAC,CAAC;AAEvF;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC,MAAM,CAAC;IACzC,IAAI,EAAE,gBAAgB,CAAC,QAAQ,EAAE;IACjC,OAAO,EAAE,gBAAgB,CAAC,QAAQ,EAAE;IACpC,IAAI,EAAE,gBAAgB,CAAC,QAAQ,EAAE;IACjC,QAAQ,EAAE,gBAAgB,CAAC,QAAQ,EAAE;IACrC,UAAU,EAAE,gBAAgB,CAAC,QAAQ,EAAE;IACvC,YAAY,EAAE,gBAAgB,CAAC,QAAQ,EAAE;CAC1C,CAAC,CAAC;AAIH;;;;GAIG;AACH,MAAM,UAAU,kBAAkB,CAChC,IAAc,EACd,QAA8E;IAE9E,OAAO,QAAQ,CAAC,YAAY,EAAE,CAAC,IAAI,CAAC,IAAI,QAAQ,CAAC,eAAe,CAAC;AACnE,CAAC;AAED,uFAAuF;AACvF,MAAM,UAAU,sBAAsB,CAAC,QAGtC;IACC,OAAO,MAAM,CAAC,WAAW,CACvB,UAAU,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,kBAAkB,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC,CACzC,CAAC;AAChC,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,CAAC,MAAM,CAAC;IACxC,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;IAC5C,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;IAC7C,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;IAC/C,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;IACvC,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;IAC7C,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IACvC,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAE;IAC5C,uBAAuB,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;CACpD,CAAC,CAAC;AAEH;;;;;;GAMG;AACH,MAAM,qBAAqB,GAAG,CAAC;KAC5B,MAAM,EAAE;KACR,KAAK,CAAC,kBAAkB,EAAE,iDAAiD,CAAC;KAC5E,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;KACjB,QAAQ,EAAE,CAAC;AAEd;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC1C,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IACpC,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IACxC,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IACvC,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IAC1C,iBAAiB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IAC9C,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IACvC,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IACvC,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;CAC5C,CAAC,CAAC;AAEH;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,CAAC,MAAM,CAAC;IACxC,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE;IAC5C,cAAc,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;IACzC,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC;CAC/D,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC,MAAM,CAAC;IACzC,cAAc,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IAC/C,OAAO,EAAE,iBAAiB,CAAC,OAAO,CAAC;QACjC,OAAO,EAAE,IAAI;QACb,KAAK,EAAE,IAAI;QACX,SAAS,EAAE,IAAI;QACf,KAAK,EAAE,IAAI;QACX,GAAG,EAAE,IAAI;KACV,CAAC;IACF,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IAClD,4EAA4E;IAC5E,uEAAuE;IACvE,YAAY,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IAC7D,aAAa,EAAE,uBAAuB,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC;IAC5E,SAAS,EAAE,uBAAuB,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IAC9D,aAAa,EAAE,CAAC;SACb,KAAK,CACJ,CAAC,CAAC,MAAM,CAAC;QACP,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;QAChB,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QACjC,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;KAC9C,CAAC,CACH;SACA,OAAO,CAAC,EAAE,CAAC;IACd;;;;OAIG;IACH,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,WAAW,CAAC;IAChD,YAAY,EAAE,kBAAkB,CAAC,OAAO,CAAC,EAAE,CAAC;IAC5C,SAAS,EAAE,uBAAuB,CAAC,QAAQ,EAAE;IAC7C,GAAG,EAAE,iBAAiB,CAAC,OAAO,CAAC,EAAE,CAAC;IAClC,GAAG,EAAE,iBAAiB,CAAC,OAAO,CAAC,EAAE,cAAc,EAAE,IAAI,EAAE,eAAe,EAAE,GAAG,EAAE,CAAC;IAC9E,eAAe,EAAE,qBAAqB;IACtC,KAAK,EAAE,mBAAmB,CAAC,OAAO,CAAC,EAAE,CAAC;CACvC,CAAC,CAAC;AAEH;;;;;;;;;;;;;;GAcG;AACH,MAAM,uBAAuB,GAAG,CAAC,CAAC,MAAM,CAAC;IACvC,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE;IACpB,KAAK,EAAE,CAAC,CAAC,OAAO,EAAE;IAClB,SAAS,EAAE,CAAC,CAAC,OAAO,EAAE;IACtB,KAAK,EAAE,CAAC,CAAC,OAAO,EAAE;IAClB,GAAG,EAAE,CAAC,CAAC,OAAO,EAAE;CACjB,CAAC,CAAC;AAEH,MAAM,qBAAqB,GAAG,CAAC,CAAC,MAAM,CAAC;IACrC,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC;IACzC,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC;CAC3C,CAAC,CAAC;AAEH,MAAM,qBAAqB,GAAG,CAAC,CAAC,MAAM,CAAC;IACrC,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE;IACpB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAC/B,CAAC,CAAC;AAEH,sFAAsF;AACtF,MAAM,eAAe,GAAG,CAAC,CAAC,MAAM,CAAC;IAC/B,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE;IAC5C,cAAc,EAAE,CAAC,CAAC,OAAO,EAAE;IAC3B,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;CAClD,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,6BAA6B,GAAG,kBAAkB,CAAC,OAAO,EAAE,CAAC,MAAM,CAAC;IAC/E,OAAO,EAAE,uBAAuB,CAAC,QAAQ,EAAE;IAC3C,aAAa,EAAE,qBAAqB,CAAC,QAAQ,EAAE;IAC/C,SAAS,EAAE,qBAAqB,CAAC,QAAQ,EAAE;IAC3C,GAAG,EAAE,eAAe,CAAC,QAAQ,EAAE;IAC/B,yEAAyE;IACzE,mEAAmE;IACnE,4EAA4E;IAC5E,sEAAsE;IACtE,UAAU;CACX,CAAC,CAAC"}

package/dist/shared/schemas/site-document.d.ts

@@ -0,0 +1,38 @@
+import { z } from 'zod';
+export declare const siteDocumentKindSchema: z.ZodEnum<["design-md", "llms-txt"]>;
+export declare const siteDocumentRecordSchema: z.ZodObject<{
+    kind: z.ZodEnum<["design-md", "llms-txt"]>;
+    content: z.ZodString;
+    /**
+     * AEO (0.1): the same answer-oriented summary posts carry, on the site's
+     * standing documents. A document is often the page an answer engine lands on
+     * first, and the body of a design.md or an llms.txt is a long structured
+     * text with no quotable opening; this gives it one.
+     */
+    answerSummary: z.ZodNullable<z.ZodString>;
+    updatedAt: z.ZodNullable<z.ZodString>;
+}, "strip", z.ZodTypeAny, {
+    updatedAt: string | null;
+    content: string;
+    answerSummary: string | null;
+    kind: "design-md" | "llms-txt";
+}, {
+    updatedAt: string | null;
+    content: string;
+    answerSummary: string | null;
+    kind: "design-md" | "llms-txt";
+}>;
+export declare const siteDocumentUpdateInputSchema: z.ZodObject<{
+    content: z.ZodString;
+    /** "" clears, matching the clear protocol every other optional string uses. */
+    answerSummary: z.ZodOptional<z.ZodString>;
+}, "strip", z.ZodTypeAny, {
+    content: string;
+    answerSummary?: string | undefined;
+}, {
+    content: string;
+    answerSummary?: string | undefined;
+}>;
+export type SiteDocumentRecord = z.infer<typeof siteDocumentRecordSchema>;
+export type SiteDocumentUpdateInput = z.infer<typeof siteDocumentUpdateInputSchema>;
+//# sourceMappingURL=site-document.d.ts.map

package/dist/shared/schemas/site-document.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"site-document.d.ts","sourceRoot":"","sources":["../../../src/shared/schemas/site-document.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB,eAAO,MAAM,sBAAsB,sCAA8B,CAAC;AAElE,eAAO,MAAM,wBAAwB;;;IAGnC;;;;;OAKG;;;;;;;;;;;;;EAGH,CAAC;AAEH,eAAO,MAAM,6BAA6B;;IAExC,+EAA+E;;;;;;;;EAE/E,CAAC;AAEH,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAC;AAC1E,MAAM,MAAM,uBAAuB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,6BAA6B,CAAC,CAAC"}

package/dist/shared/schemas/site-document.js

@@ -0,0 +1,21 @@
+import { z } from 'zod';
+import { SITE_DOCUMENT_KINDS } from '../constants.js';
+export const siteDocumentKindSchema = z.enum(SITE_DOCUMENT_KINDS);
+export const siteDocumentRecordSchema = z.object({
+    kind: siteDocumentKindSchema,
+    content: z.string(),
+    /**
+     * AEO (0.1): the same answer-oriented summary posts carry, on the site's
+     * standing documents. A document is often the page an answer engine lands on
+     * first, and the body of a design.md or an llms.txt is a long structured
+     * text with no quotable opening; this gives it one.
+     */
+    answerSummary: z.string().nullable(),
+    updatedAt: z.string().nullable(),
+});
+export const siteDocumentUpdateInputSchema = z.object({
+    content: z.string().max(100_000),
+    /** "" clears, matching the clear protocol every other optional string uses. */
+    answerSummary: z.string().max(600).optional(),
+});
+//# sourceMappingURL=site-document.js.map

package/dist/shared/schemas/site-document.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"site-document.js","sourceRoot":"","sources":["../../../src/shared/schemas/site-document.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,mBAAmB,EAAE,MAAM,iBAAiB,CAAC;AAEtD,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;AAElE,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC/C,IAAI,EAAE,sBAAsB;IAC5B,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;IACnB;;;;;OAKG;IACH,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACpC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CACjC,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,6BAA6B,GAAG,CAAC,CAAC,MAAM,CAAC;IACpD,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC;IAChC,+EAA+E;IAC/E,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;CAC9C,CAAC,CAAC"}

package/dist/shared/schemas/webhook.d.ts

@@ -0,0 +1,39 @@
+import { z } from 'zod';
+export declare const webhookEventNameSchema: z.ZodEnum<["post.published", "post.unpublished", "form.submission.created"]>;
+export declare const webhookConfigSchema: z.ZodObject<{
+    url: z.ZodString;
+    events: z.ZodArray<z.ZodEnum<["post.published", "post.unpublished", "form.submission.created"]>, "many">;
+    secret: z.ZodString;
+}, "strip", z.ZodTypeAny, {
+    url: string;
+    events: ("post.published" | "post.unpublished" | "form.submission.created")[];
+    secret: string;
+}, {
+    url: string;
+    events: ("post.published" | "post.unpublished" | "form.submission.created")[];
+    secret: string;
+}>;
+/**
+ * What a receiver gets. `site` is the site's public URL, which is the only
+ * identity a standalone install has (managed we8 sends a tenant id here; there
+ * is no tenant to name in this one).
+ */
+export declare const webhookEnvelopeSchema: z.ZodObject<{
+    event: z.ZodEnum<["post.published", "post.unpublished", "form.submission.created"]>;
+    site: z.ZodString;
+    data: z.ZodRecord<z.ZodString, z.ZodUnknown>;
+    timestamp: z.ZodString;
+}, "strip", z.ZodTypeAny, {
+    event: "post.published" | "post.unpublished" | "form.submission.created";
+    site: string;
+    data: Record<string, unknown>;
+    timestamp: string;
+}, {
+    event: "post.published" | "post.unpublished" | "form.submission.created";
+    site: string;
+    data: Record<string, unknown>;
+    timestamp: string;
+}>;
+export type WebhookConfig = z.infer<typeof webhookConfigSchema>;
+export type WebhookEnvelope = z.infer<typeof webhookEnvelopeSchema>;
+//# sourceMappingURL=webhook.d.ts.map

package/dist/shared/schemas/webhook.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"webhook.d.ts","sourceRoot":"","sources":["../../../src/shared/schemas/webhook.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB,eAAO,MAAM,sBAAsB,8EAAyB,CAAC;AAE7D,eAAO,MAAM,mBAAmB;;;;;;;;;;;;EAI9B,CAAC;AAEH;;;;GAIG;AACH,eAAO,MAAM,qBAAqB;;;;;;;;;;;;;;;EAKhC,CAAC;AAEH,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAChE,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC"}

package/dist/shared/schemas/webhook.js

@@ -0,0 +1,20 @@
+import { z } from 'zod';
+import { WEBHOOK_EVENTS } from '../constants.js';
+export const webhookEventNameSchema = z.enum(WEBHOOK_EVENTS);
+export const webhookConfigSchema = z.object({
+    url: z.string().url(),
+    events: z.array(webhookEventNameSchema).min(1),
+    secret: z.string().min(16),
+});
+/**
+ * What a receiver gets. `site` is the site's public URL, which is the only
+ * identity a standalone install has (managed we8 sends a tenant id here; there
+ * is no tenant to name in this one).
+ */
+export const webhookEnvelopeSchema = z.object({
+    event: webhookEventNameSchema,
+    site: z.string(),
+    data: z.record(z.string(), z.unknown()),
+    timestamp: z.string(),
+});
+//# sourceMappingURL=webhook.js.map

package/dist/shared/schemas/webhook.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"webhook.js","sourceRoot":"","sources":["../../../src/shared/schemas/webhook.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AAEjD,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;AAE7D,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC1C,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE;IACrB,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,sBAAsB,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IAC9C,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC;CAC3B,CAAC,CAAC;AAEH;;;;GAIG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC5C,KAAK,EAAE,sBAAsB;IAC7B,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC;IACvC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;CACtB,CAAC,CAAC"}

package/dist/spa.d.ts

@@ -0,0 +1,9 @@
+import type { Bindings } from './env.js';
+export declare function isApiPath(pathname: string): boolean;
+export declare function wantsHtml(request: Request): boolean;
+/**
+ * The SPA shell for a client-side route, or null when this request is not one
+ * (or when no admin bundle is deployed at all).
+ */
+export declare function serveSpaShell(request: Request, env: Bindings): Promise<Response | null>;
+//# sourceMappingURL=spa.d.ts.map

package/dist/spa.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"spa.d.ts","sourceRoot":"","sources":["../src/spa.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,UAAU,CAAC;AA4BzC,wBAAgB,SAAS,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAInD;AAED,wBAAgB,SAAS,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAEnD;AAED;;;GAGG;AACH,wBAAsB,aAAa,CAAC,OAAO,EAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,GAAG,OAAO,CAAC,QAAQ,GAAG,IAAI,CAAC,CAsB7F"}

package/dist/spa.js

@@ -0,0 +1,57 @@
+/**
+ * Serving the admin portal out of this same worker.
+ *
+ * The portal is a single-page application, so every one of its routes has to
+ * answer with the same index.html and let the client-side router take over.
+ * Cloudflare's asset serving handles the files that really exist; what it
+ * cannot know is which of the remaining paths are the SPA's own routes and
+ * which are this worker's API. This does: the API prefixes are checked first,
+ * and only a document request that is none of them falls through to the shell.
+ *
+ * Two conditions keep the fallback narrow. It answers GET only, and only when
+ * the request actually asked for HTML, so a fetch for a missing JSON file gets
+ * the API's 404 envelope rather than a page of markup that would fail to parse
+ * somewhere far from the cause.
+ *
+ * The whole thing is optional. A deployment that binds no assets, which is the
+ * API-only mode a headless install runs in, has no ASSETS binding, and this
+ * returns null so the normal 404 stands.
+ */
+/** Path prefixes this worker owns. Anything under them is never the SPA. */
+const API_PREFIXES = ['/v1/', '/api/'];
+/** Exact paths this worker owns that carry no trailing segment. */
+const API_PATHS = ['/v1', '/api', '/llms.txt'];
+export function isApiPath(pathname) {
+    return (API_PATHS.includes(pathname) || API_PREFIXES.some((prefix) => pathname.startsWith(prefix)));
+}
+export function wantsHtml(request) {
+    return request.method === 'GET' && (request.headers.get('Accept') ?? '').includes('text/html');
+}
+/**
+ * The SPA shell for a client-side route, or null when this request is not one
+ * (or when no admin bundle is deployed at all).
+ */
+export async function serveSpaShell(request, env) {
+    const assets = env.ASSETS;
+    if (!assets)
+        return null;
+    const url = new URL(request.url);
+    if (isApiPath(url.pathname) || !wantsHtml(request))
+        return null;
+    const shell = await assets.fetch(new Request(new URL('/index.html', url), { method: 'GET' }));
+    // An assets binding with no bundle behind it answers 404 for index.html too,
+    // which is the API-only case: fall through rather than serving that 404 as
+    // though it were the admin.
+    if (!shell.ok)
+        return null;
+    return new Response(shell.body, {
+        status: 200,
+        headers: {
+            'Content-Type': 'text/html; charset=UTF-8',
+            // The shell names hashed asset files, so it must never be the stale copy
+            // pointing at a bundle that no longer exists.
+            'Cache-Control': 'no-cache',
+        },
+    });
+}
+//# sourceMappingURL=spa.js.map

package/dist/spa.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"spa.js","sourceRoot":"","sources":["../src/spa.ts"],"names":[],"mappings":"AAEA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,4EAA4E;AAC5E,MAAM,YAAY,GAAG,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;AAEvC,mEAAmE;AACnE,MAAM,SAAS,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,WAAW,CAAC,CAAC;AAE/C,MAAM,UAAU,SAAS,CAAC,QAAgB;IACxC,OAAO,CACL,SAAS,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,YAAY,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,QAAQ,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAC3F,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,OAAgB;IACxC,OAAO,OAAO,CAAC,MAAM,KAAK,KAAK,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;AACjG,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,OAAgB,EAAE,GAAa;IACjE,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC;IAC1B,IAAI,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IAEzB,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACjC,IAAI,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC;QAAE,OAAO,IAAI,CAAC;IAEhE,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,KAAK,CAAC,IAAI,OAAO,CAAC,IAAI,GAAG,CAAC,aAAa,EAAE,GAAG,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;IAC9F,6EAA6E;IAC7E,2EAA2E;IAC3E,4BAA4B;IAC5B,IAAI,CAAC,KAAK,CAAC,EAAE;QAAE,OAAO,IAAI,CAAC;IAE3B,OAAO,IAAI,QAAQ,CAAC,KAAK,CAAC,IAAI,EAAE;QAC9B,MAAM,EAAE,GAAG;QACX,OAAO,EAAE;YACP,cAAc,EAAE,0BAA0B;YAC1C,yEAAyE;YACzE,8CAA8C;YAC9C,eAAe,EAAE,UAAU;SAC5B;KACF,CAAC,CAAC;AACL,CAAC"}

package/migrations/0001_settings.sql

@@ -0,0 +1,39 @@
+-- 0001: site settings plus the two operational tables every later module
+-- leans on (rate limiting and the webhook delivery log).
+--
+-- This sequence is a fresh single-site schema, not a replay of managed we8's
+-- migration history: every later ALTER there is folded into the CREATE here,
+-- so a self-hosted database starts at the shape the code actually reads.
+--
+-- Id strategy: operational tables use INTEGER PRIMARY KEY AUTOINCREMENT (cheap,
+-- nothing outside the database references them); public-facing entities use
+-- TEXT ids the application generates with crypto.randomUUID().
+
+CREATE TABLE site_settings (
+  key TEXT PRIMARY KEY,
+  value TEXT NOT NULL, -- JSON, one row per top-level settings key
+  updated_at TEXT NOT NULL DEFAULT (datetime('now'))
+);
+
+CREATE TABLE rate_events (
+  id INTEGER PRIMARY KEY AUTOINCREMENT,
+  bucket TEXT NOT NULL,
+  ip_hash TEXT NOT NULL,
+  created_at TEXT NOT NULL DEFAULT (datetime('now'))
+);
+
+CREATE INDEX idx_rate_events_bucket_ip_created
+  ON rate_events (bucket, ip_hash, created_at);
+
+CREATE TABLE webhook_deliveries (
+  id INTEGER PRIMARY KEY AUTOINCREMENT,
+  event TEXT NOT NULL,
+  url TEXT NOT NULL,
+  status TEXT NOT NULL DEFAULT 'pending', -- pending | delivered | failed
+  response_code INTEGER,
+  attempts INTEGER NOT NULL DEFAULT 0,
+  created_at TEXT NOT NULL DEFAULT (datetime('now')),
+  delivered_at TEXT
+);
+
+CREATE INDEX idx_webhook_deliveries_created ON webhook_deliveries (created_at DESC);

package/migrations/0002_content.sql

@@ -0,0 +1,135 @@
+-- 0002: the CMS proper. posts / post_drafts / post_versions is the
+-- draft-stage plus immutable-snapshot pattern: `posts` holds the working copy
+-- and the mirror of the live version, `post_drafts` stages an edit to an
+-- already-published post, and `post_versions` is insert-only history that
+-- public reads are served from.
+--
+-- answer_summary and question_heading are the 0.1 AEO content fields. They sit
+-- on all three content-carrying tables so they flow through the same
+-- working-copy, draft, and publish machinery as every other content field,
+-- with no separate code path.
+--
+-- Foreign keys are declared for documentation; D1 does not enforce them by
+-- default, so delete cascades happen in the application layer.
+
+CREATE TABLE authors (
+  id TEXT PRIMARY KEY,
+  slug TEXT NOT NULL UNIQUE,
+  name TEXT NOT NULL,
+  type TEXT NOT NULL DEFAULT 'team' CHECK (type IN ('team', 'guest', 'advisor', 'partner')),
+  role_title TEXT,
+  avatar_url TEXT,
+  bio TEXT,
+  links TEXT NOT NULL DEFAULT '[]', -- JSON {label,url}[]
+  created_at TEXT NOT NULL DEFAULT (datetime('now')),
+  updated_at TEXT NOT NULL DEFAULT (datetime('now'))
+);
+
+CREATE INDEX idx_authors_slug ON authors (slug);
+
+CREATE TABLE posts (
+  id TEXT PRIMARY KEY,
+  slug TEXT NOT NULL UNIQUE,
+  -- Structural, like slug: type picks the site section and the JSON-LD type,
+  -- so it is editable only while never-published and locked after.
+  type TEXT NOT NULL DEFAULT 'blog',
+  title TEXT NOT NULL,
+  excerpt TEXT,
+  content TEXT NOT NULL,
+  cover_image_url TEXT,
+  category TEXT,
+  tags TEXT NOT NULL DEFAULT '[]', -- JSON string[]
+  status TEXT NOT NULL DEFAULT 'draft' CHECK (status IN ('draft', 'published', 'archived')),
+  og_title TEXT,
+  og_description TEXT,
+  og_image_url TEXT,
+  answer_summary TEXT,
+  question_heading TEXT,
+  cta TEXT, -- JSON Cta, NULL means no CTA configured
+  current_version_id TEXT,
+  current_version_number INTEGER,
+  view_count INTEGER NOT NULL DEFAULT 0,
+  like_count INTEGER NOT NULL DEFAULT 0,
+  word_count INTEGER,
+  published_at TEXT,
+  created_at TEXT NOT NULL DEFAULT (datetime('now')),
+  updated_at TEXT NOT NULL DEFAULT (datetime('now'))
+);
+
+CREATE INDEX idx_posts_slug ON posts (slug);
+CREATE INDEX idx_posts_status ON posts (status);
+CREATE INDEX idx_posts_type ON posts (type);
+CREATE INDEX idx_posts_published_at ON posts (published_at DESC);
+
+CREATE TABLE post_drafts (
+  post_id TEXT PRIMARY KEY REFERENCES posts (id),
+  title TEXT NOT NULL,
+  excerpt TEXT,
+  content TEXT NOT NULL,
+  cover_image_url TEXT,
+  category TEXT,
+  tags TEXT NOT NULL DEFAULT '[]',
+  og_title TEXT,
+  og_description TEXT,
+  og_image_url TEXT,
+  answer_summary TEXT,
+  question_heading TEXT,
+  cta TEXT,
+  author_ids TEXT NOT NULL DEFAULT '[]', -- JSON string[]
+  updated_at TEXT NOT NULL DEFAULT (datetime('now'))
+);
+
+CREATE TABLE post_versions (
+  id TEXT PRIMARY KEY,
+  post_id TEXT NOT NULL REFERENCES posts (id),
+  version INTEGER NOT NULL,
+  title TEXT NOT NULL,
+  excerpt TEXT,
+  content TEXT NOT NULL,
+  cover_image_url TEXT,
+  category TEXT,
+  tags TEXT NOT NULL DEFAULT '[]',
+  og_title TEXT,
+  og_description TEXT,
+  og_image_url TEXT,
+  answer_summary TEXT,
+  question_heading TEXT,
+  cta TEXT,
+  author_ids TEXT NOT NULL DEFAULT '[]',
+  word_count INTEGER,
+  note TEXT,
+  published_at TEXT NOT NULL DEFAULT (datetime('now')),
+  published_by TEXT,
+  UNIQUE (post_id, version)
+);
+
+CREATE INDEX idx_post_versions_post_version ON post_versions (post_id, version DESC);
+
+CREATE TABLE post_authors (
+  post_id TEXT NOT NULL REFERENCES posts (id),
+  author_id TEXT NOT NULL REFERENCES authors (id),
+  position INTEGER NOT NULL DEFAULT 0,
+  PRIMARY KEY (post_id, author_id)
+);
+
+CREATE INDEX idx_post_authors_post_position ON post_authors (post_id, position);
+CREATE INDEX idx_post_authors_author ON post_authors (author_id);
+
+-- version_number stamps which version was live when the view or like happened.
+-- Nullable because a row can be recorded against a post that has never been
+-- published, which has no version to attribute to.
+CREATE TABLE post_views (
+  post_id TEXT NOT NULL REFERENCES posts (id),
+  session_id TEXT NOT NULL,
+  version_number INTEGER,
+  viewed_at TEXT NOT NULL DEFAULT (datetime('now')),
+  PRIMARY KEY (post_id, session_id)
+);
+
+CREATE TABLE post_likes (
+  post_id TEXT NOT NULL REFERENCES posts (id),
+  session_id TEXT NOT NULL,
+  version_number INTEGER,
+  liked_at TEXT NOT NULL DEFAULT (datetime('now')),
+  PRIMARY KEY (post_id, session_id)
+);

package/migrations/0003_forms.sql

@@ -0,0 +1,35 @@
+-- 0003: forms and their submissions. A form is a first-class, named, typed
+-- entity embedded by its stable `form_key`; the submissions table is the
+-- inbox of record, which is why a form with submissions is archived rather
+-- than deleted.
+
+CREATE TABLE forms (
+  id TEXT PRIMARY KEY,
+  form_key TEXT NOT NULL UNIQUE,
+  name TEXT NOT NULL,
+  type TEXT NOT NULL DEFAULT 'custom',
+  settings TEXT NOT NULL DEFAULT '{}', -- JSON: {notifyEmails?, turnstileEnabled?, honeypotField?, successMessage?}
+  created_at TEXT NOT NULL DEFAULT (datetime('now')),
+  updated_at TEXT,
+  archived_at TEXT
+);
+
+CREATE TABLE submissions (
+  id TEXT PRIMARY KEY,
+  form_id TEXT NOT NULL REFERENCES forms (id),
+  submitted_at TEXT NOT NULL DEFAULT (datetime('now')),
+  payload TEXT NOT NULL, -- JSON: the full submitted body, capped by the application
+  email TEXT,
+  name TEXT,
+  status TEXT NOT NULL DEFAULT 'new' CHECK (status IN ('new', 'reviewing', 'resolved', 'spam', 'archived')),
+  notes TEXT,
+  ip_hash TEXT,
+  user_agent TEXT,
+  source_page TEXT,
+  referrer TEXT
+);
+
+CREATE INDEX idx_submissions_submitted_at ON submissions (submitted_at DESC);
+CREATE INDEX idx_submissions_status ON submissions (status);
+CREATE INDEX idx_submissions_email ON submissions (email);
+CREATE INDEX idx_submissions_form ON submissions (form_id);