@we8/cms 0.1.0

package/dist/middleware/request-id.js

@@ -0,0 +1,11 @@
+import { createMiddleware } from 'hono/factory';
+/** Assigns a request id and adds X-Request-Id / X-Response-Time to every response. */
+export const requestId = createMiddleware(async (c, next) => {
+    const id = crypto.randomUUID();
+    const start = Date.now();
+    c.set('requestId', id);
+    await next();
+    c.res.headers.set('X-Request-Id', id);
+    c.res.headers.set('X-Response-Time', `${Date.now() - start}ms`);
+});
+//# sourceMappingURL=request-id.js.map

package/dist/middleware/request-id.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"request-id.js","sourceRoot":"","sources":["../../src/middleware/request-id.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAMhD,sFAAsF;AACtF,MAAM,CAAC,MAAM,SAAS,GAAG,gBAAgB,CAAoC,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE;IAC7F,MAAM,EAAE,GAAG,MAAM,CAAC,UAAU,EAAE,CAAC;IAC/B,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACzB,CAAC,CAAC,GAAG,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;IAEvB,MAAM,IAAI,EAAE,CAAC;IAEb,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,EAAE,EAAE,CAAC,CAAC;IACtC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,iBAAiB,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,IAAI,CAAC,CAAC;AAClE,CAAC,CAAC,CAAC"}

package/dist/modules/aeo/checks.d.ts

@@ -0,0 +1,41 @@
+import { type AeoContentCheck, type AeoCrawlerStats, type AeoReport, type PostStatus, type PostType } from '../../shared/index.js';
+interface CheckablePostRow {
+    id: string;
+    slug: string;
+    title: string;
+    type: PostType;
+    status: PostStatus;
+    excerpt: string | null;
+    og_description: string | null;
+    answer_summary: string | null;
+    question_heading: string | null;
+    current_version_id: string | null;
+}
+/**
+ * The findings for one post.
+ *
+ * Every check is a concrete, locally verifiable absence. Nothing here scores a
+ * page, guesses at ranking, or calls an external service: an AEO tool that
+ * tells a site owner they are "72 percent optimized" is telling them nothing,
+ * whereas "this post has no answer summary and is not in your sitemap" is a
+ * fact they can act on in a minute.
+ *
+ * `publisherConfigured` and `seoEnabled` are passed in rather than read here
+ * because they are site-wide and this runs once per post.
+ */
+export declare function checkPost(row: CheckablePostRow, options: {
+    publisherConfigured: boolean;
+    seoEnabled: boolean;
+}): AeoContentCheck;
+/** The whole site's report: every post, every document, and the totals. */
+export declare function buildAeoReport(db: D1Database): Promise<AeoReport>;
+/** One post's findings, for the editor's own AEO panel. 404s on an unknown id. */
+export declare function checkOnePost(db: D1Database, postId: string): Promise<AeoContentCheck>;
+/**
+ * Crawler activity, read straight out of the visit log's user-agent class.
+ * This is the other half of AEO: the checks say what the content is missing,
+ * this says who actually came to read it.
+ */
+export declare function getCrawlerStats(db: D1Database, days: number): Promise<AeoCrawlerStats>;
+export {};
+//# sourceMappingURL=checks.d.ts.map

package/dist/modules/aeo/checks.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"checks.d.ts","sourceRoot":"","sources":["../../../src/modules/aeo/checks.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,KAAK,eAAe,EACpB,KAAK,eAAe,EAGpB,KAAK,SAAS,EACd,KAAK,UAAU,EACf,KAAK,QAAQ,EAEd,MAAM,uBAAuB,CAAC;AAK/B,UAAU,gBAAgB;IACxB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,QAAQ,CAAC;IACf,MAAM,EAAE,UAAU,CAAC;IACnB,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,kBAAkB,EAAE,MAAM,GAAG,IAAI,CAAC;CACnC;AAUD;;;;;;;;;;;GAWG;AACH,wBAAgB,SAAS,CACvB,GAAG,EAAE,gBAAgB,EACrB,OAAO,EAAE;IAAE,mBAAmB,EAAE,OAAO,CAAC;IAAC,UAAU,EAAE,OAAO,CAAA;CAAE,GAC7D,eAAe,CAqCjB;AAED,2EAA2E;AAC3E,wBAAsB,cAAc,CAAC,EAAE,EAAE,UAAU,GAAG,OAAO,CAAC,SAAS,CAAC,CAgCvE;AAED,kFAAkF;AAClF,wBAAsB,YAAY,CAAC,EAAE,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,CAAC,CAY3F;AAED;;;;GAIG;AACH,wBAAsB,eAAe,CAAC,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,CAAC,CA4C5F"}

package/dist/modules/aeo/checks.js

@@ -0,0 +1,127 @@
+import { AEO_FINDINGS, } from '../../shared/index.js';
+import { getSettings } from '../../env.js';
+import { HttpError } from '../../lib/errors.js';
+import { listDocuments } from '../site-documents/service.js';
+const POST_SELECT = `SELECT id, slug, title, type, status, excerpt, og_description,
+    answer_summary, question_heading, current_version_id
+  FROM posts`;
+function isBlank(value) {
+    return value === null || value.trim().length === 0;
+}
+/**
+ * The findings for one post.
+ *
+ * Every check is a concrete, locally verifiable absence. Nothing here scores a
+ * page, guesses at ranking, or calls an external service: an AEO tool that
+ * tells a site owner they are "72 percent optimized" is telling them nothing,
+ * whereas "this post has no answer summary and is not in your sitemap" is a
+ * fact they can act on in a minute.
+ *
+ * `publisherConfigured` and `seoEnabled` are passed in rather than read here
+ * because they are site-wide and this runs once per post.
+ */
+export function checkPost(row, options) {
+    const findings = [];
+    // Something has to describe the page. An engine that finds neither an
+    // excerpt nor an OG description has to invent one from the body.
+    if (isBlank(row.excerpt) && isBlank(row.og_description)) {
+        findings.push('missing_description');
+    }
+    if (isBlank(row.answer_summary)) {
+        findings.push('missing_answer_summary');
+    }
+    if (isBlank(row.question_heading)) {
+        findings.push('missing_question_heading');
+    }
+    // JSON-LD is emitted on the public post response, but only for a published
+    // post, and its publisher block only exists when the site has configured
+    // one. Both absences are reported as the same missing structured data,
+    // because the effect on a crawler is the same.
+    const published = row.status === 'published' && row.current_version_id !== null;
+    if (!published || !options.publisherConfigured) {
+        findings.push('missing_json_ld');
+    }
+    // The sitemap lists published posts, and only when the seo module is on.
+    if (!published || !options.seoEnabled) {
+        findings.push('not_in_sitemap');
+    }
+    return {
+        id: row.id,
+        slug: row.slug,
+        title: row.title,
+        type: row.type,
+        status: row.status,
+        findings,
+    };
+}
+/** The whole site's report: every post, every document, and the totals. */
+export async function buildAeoReport(db) {
+    const settings = await getSettings(db);
+    const options = {
+        publisherConfigured: settings.publisher !== undefined,
+        seoEnabled: settings.modules.seo,
+    };
+    const { results } = await db
+        .prepare(`${POST_SELECT} ORDER BY created_at DESC`)
+        .all();
+    const posts = results.map((row) => checkPost(row, options));
+    const documents = (await listDocuments(db))
+        .filter((document) => document.content.trim().length > 0)
+        .map((document) => ({
+        kind: document.kind,
+        findings: isBlank(document.answerSummary) ? ['missing_answer_summary'] : [],
+    }));
+    // Seeded with every finding at zero, so the admin renders a stable set of
+    // counters instead of a shape that changes with the data.
+    const totals = Object.fromEntries(AEO_FINDINGS.map((finding) => [finding, 0]));
+    for (const check of [...posts, ...documents]) {
+        for (const finding of check.findings) {
+            totals[finding] += 1;
+        }
+    }
+    return { posts, documents, totals, checkedAt: new Date().toISOString() };
+}
+/** One post's findings, for the editor's own AEO panel. 404s on an unknown id. */
+export async function checkOnePost(db, postId) {
+    const row = await db
+        .prepare(`${POST_SELECT} WHERE id = ?1`)
+        .bind(postId)
+        .first();
+    if (!row)
+        throw new HttpError('not_found', 'post not found');
+    const settings = await getSettings(db);
+    return checkPost(row, {
+        publisherConfigured: settings.publisher !== undefined,
+        seoEnabled: settings.modules.seo,
+    });
+}
+/**
+ * Crawler activity, read straight out of the visit log's user-agent class.
+ * This is the other half of AEO: the checks say what the content is missing,
+ * this says who actually came to read it.
+ */
+export async function getCrawlerStats(db, days) {
+    const since = `-${days} days`;
+    const byClass = (await db
+        .prepare(`SELECT user_agent_class as userAgentClass, COUNT(*) as count FROM page_visits
+          WHERE visited_at > datetime('now', ?1) AND user_agent_class != 'human'
+          GROUP BY user_agent_class ORDER BY count DESC`)
+        .bind(since)
+        .all()).results;
+    const topCrawlers = (await db
+        .prepare(`SELECT bot_name as botName, user_agent_class as userAgentClass,
+                COUNT(*) as count, MAX(visited_at) as lastSeenAt
+           FROM page_visits
+          WHERE visited_at > datetime('now', ?1) AND bot_name IS NOT NULL
+          GROUP BY bot_name, user_agent_class ORDER BY count DESC LIMIT 20`)
+        .bind(since)
+        .all()).results;
+    const daily = (await db
+        .prepare(`SELECT date(visited_at) as date, COUNT(*) as count FROM page_visits
+          WHERE visited_at > datetime('now', ?1) AND user_agent_class != 'human'
+          GROUP BY date(visited_at) ORDER BY date ASC`)
+        .bind(since)
+        .all()).results;
+    return { byClass, topCrawlers, daily };
+}
+//# sourceMappingURL=checks.js.map

package/dist/modules/aeo/checks.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"checks.js","sourceRoot":"","sources":["../../../src/modules/aeo/checks.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,YAAY,GASb,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAC3C,OAAO,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAChD,OAAO,EAAE,aAAa,EAAE,MAAM,8BAA8B,CAAC;AAe7D,MAAM,WAAW,GAAG;;aAEP,CAAC;AAEd,SAAS,OAAO,CAAC,KAAoB;IACnC,OAAO,KAAK,KAAK,IAAI,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,CAAC;AACrD,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,SAAS,CACvB,GAAqB,EACrB,OAA8D;IAE9D,MAAM,QAAQ,GAAiB,EAAE,CAAC;IAElC,sEAAsE;IACtE,iEAAiE;IACjE,IAAI,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,EAAE,CAAC;QACxD,QAAQ,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC;IACvC,CAAC;IACD,IAAI,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,EAAE,CAAC;QAChC,QAAQ,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC;IAC1C,CAAC;IACD,IAAI,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,EAAE,CAAC;QAClC,QAAQ,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC;IAC5C,CAAC;IAED,2EAA2E;IAC3E,yEAAyE;IACzE,uEAAuE;IACvE,+CAA+C;IAC/C,MAAM,SAAS,GAAG,GAAG,CAAC,MAAM,KAAK,WAAW,IAAI,GAAG,CAAC,kBAAkB,KAAK,IAAI,CAAC;IAChF,IAAI,CAAC,SAAS,IAAI,CAAC,OAAO,CAAC,mBAAmB,EAAE,CAAC;QAC/C,QAAQ,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;IACnC,CAAC;IAED,yEAAyE;IACzE,IAAI,CAAC,SAAS,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,CAAC;QACtC,QAAQ,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;IAClC,CAAC;IAED,OAAO;QACL,EAAE,EAAE,GAAG,CAAC,EAAE;QACV,IAAI,EAAE,GAAG,CAAC,IAAI;QACd,KAAK,EAAE,GAAG,CAAC,KAAK;QAChB,IAAI,EAAE,GAAG,CAAC,IAAI;QACd,MAAM,EAAE,GAAG,CAAC,MAAM;QAClB,QAAQ;KACT,CAAC;AACJ,CAAC;AAED,2EAA2E;AAC3E,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,EAAc;IACjD,MAAM,QAAQ,GAAG,MAAM,WAAW,CAAC,EAAE,CAAC,CAAC;IACvC,MAAM,OAAO,GAAG;QACd,mBAAmB,EAAE,QAAQ,CAAC,SAAS,KAAK,SAAS;QACrD,UAAU,EAAE,QAAQ,CAAC,OAAO,CAAC,GAAG;KACjC,CAAC;IAEF,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,EAAE;SACzB,OAAO,CAAC,GAAG,WAAW,2BAA2B,CAAC;SAClD,GAAG,EAAoB,CAAC;IAC3B,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC,CAAC;IAE5D,MAAM,SAAS,GAAuB,CAAC,MAAM,aAAa,CAAC,EAAE,CAAC,CAAC;SAC5D,MAAM,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC;SACxD,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;QAClB,IAAI,EAAE,QAAQ,CAAC,IAAI;QACnB,QAAQ,EAAE,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC,CAAC,CAAE,CAAC,wBAAwB,CAAkB,CAAC,CAAC,CAAC,EAAE;KAC9F,CAAC,CAAC,CAAC;IAEN,0EAA0E;IAC1E,0DAA0D;IAC1D,MAAM,MAAM,GAAG,MAAM,CAAC,WAAW,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAG5E,CAAC;IACF,KAAK,MAAM,KAAK,IAAI,CAAC,GAAG,KAAK,EAAE,GAAG,SAAS,CAAC,EAAE,CAAC;QAC7C,KAAK,MAAM,OAAO,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;YACrC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QACvB,CAAC;IACH,CAAC;IAED,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC;AAC3E,CAAC;AAED,kFAAkF;AAClF,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,EAAc,EAAE,MAAc;IAC/D,MAAM,GAAG,GAAG,MAAM,EAAE;SACjB,OAAO,CAAC,GAAG,WAAW,gBAAgB,CAAC;SACvC,IAAI,CAAC,MAAM,CAAC;SACZ,KAAK,EAAoB,CAAC;IAC7B,IAAI,CAAC,GAAG;QAAE,MAAM,IAAI,SAAS,CAAC,WAAW,EAAE,gBAAgB,CAAC,CAAC;IAE7D,MAAM,QAAQ,GAAG,MAAM,WAAW,CAAC,EAAE,CAAC,CAAC;IACvC,OAAO,SAAS,CAAC,GAAG,EAAE;QACpB,mBAAmB,EAAE,QAAQ,CAAC,SAAS,KAAK,SAAS;QACrD,UAAU,EAAE,QAAQ,CAAC,OAAO,CAAC,GAAG;KACjC,CAAC,CAAC;AACL,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,EAAc,EAAE,IAAY;IAChE,MAAM,KAAK,GAAG,IAAI,IAAI,OAAO,CAAC;IAE9B,MAAM,OAAO,GAAG,CACd,MAAM,EAAE;SACL,OAAO,CACN;;wDAEgD,CACjD;SACA,IAAI,CAAC,KAAK,CAAC;SACX,GAAG,EAAqD,CAC5D,CAAC,OAAO,CAAC;IAEV,MAAM,WAAW,GAAG,CAClB,MAAM,EAAE;SACL,OAAO,CACN;;;;2EAImE,CACpE;SACA,IAAI,CAAC,KAAK,CAAC;SACX,GAAG,EAKA,CACP,CAAC,OAAO,CAAC;IAEV,MAAM,KAAK,GAAG,CACZ,MAAM,EAAE;SACL,OAAO,CACN;;sDAE8C,CAC/C;SACA,IAAI,CAAC,KAAK,CAAC;SACX,GAAG,EAAmC,CAC1C,CAAC,OAAO,CAAC;IAEV,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC;AACzC,CAAC"}

package/dist/modules/aeo/llms.d.ts

@@ -0,0 +1,24 @@
+/**
+ * Builds /llms.txt from the site's own settings and its published content.
+ *
+ * The format follows the llmstxt.org convention: an H1 with the site name, a
+ * blockquote holding the one-sentence summary, then link sections. Nothing
+ * here calls out to anything: the document is a plain projection of what this
+ * database already holds, which is the whole point. An answer engine that
+ * fetches it gets the site's own account of itself rather than whatever it
+ * managed to scrape.
+ *
+ * Ordering is newest first and the list is capped by settings, so a site with
+ * ten thousand posts publishes an index rather than a dump.
+ */
+export declare function buildLlmsTxt(db: D1Database, siteUrl: string): Promise<string>;
+/**
+ * The document served at /llms.txt, or null when the site has turned it off.
+ *
+ * An author-written `llms-txt` site document wins outright: a site owner who
+ * has taken the trouble to write the file by hand means it, and silently
+ * regenerating over them would be the CMS overruling its own user. Everything
+ * else falls through to generation.
+ */
+export declare function resolveLlmsTxt(db: D1Database, siteUrl: string): Promise<string | null>;
+//# sourceMappingURL=llms.d.ts.map

package/dist/modules/aeo/llms.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"llms.d.ts","sourceRoot":"","sources":["../../../src/modules/aeo/llms.ts"],"names":[],"mappings":"AA+BA;;;;;;;;;;;;GAYG;AACH,wBAAsB,YAAY,CAAC,EAAE,EAAE,UAAU,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAqDnF;AAED;;;;;;;GAOG;AACH,wBAAsB,cAAc,CAAC,EAAE,EAAE,UAAU,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAM5F"}

package/dist/modules/aeo/llms.js

@@ -0,0 +1,92 @@
+import { resolveContentPath } from '../../shared/index.js';
+import { getSettings } from '../../env.js';
+import { getDocument } from '../site-documents/service.js';
+/**
+ * One llms.txt line per post. The description is the answer summary when the
+ * author wrote one, because that is the sentence written to be quoted; the
+ * excerpt is the fallback, and a post with neither gets a bare link rather
+ * than an invented description.
+ */
+function postLine(siteUrl, row, path) {
+    const url = `${siteUrl}${path}/${row.slug}`;
+    const label = row.question_heading ?? row.title;
+    const description = row.answer_summary ?? row.excerpt;
+    return description ? `- [${label}](${url}): ${description}` : `- [${label}](${url})`;
+}
+/**
+ * Builds /llms.txt from the site's own settings and its published content.
+ *
+ * The format follows the llmstxt.org convention: an H1 with the site name, a
+ * blockquote holding the one-sentence summary, then link sections. Nothing
+ * here calls out to anything: the document is a plain projection of what this
+ * database already holds, which is the whole point. An answer engine that
+ * fetches it gets the site's own account of itself rather than whatever it
+ * managed to scrape.
+ *
+ * Ordering is newest first and the list is capped by settings, so a site with
+ * ten thousand posts publishes an index rather than a dump.
+ */
+export async function buildLlmsTxt(db, siteUrl) {
+    const settings = await getSettings(db);
+    const name = settings.publisher?.name ?? settings.seo.defaultTitle ?? siteUrl;
+    const summary = settings.aeo.siteSummary ?? settings.seo.metaDescription ?? null;
+    const lines = [`# ${name}`, ''];
+    if (summary) {
+        lines.push(`> ${summary}`, '');
+    }
+    lines.push(`Site: ${siteUrl}`, '');
+    const { results } = await db
+        .prepare(`SELECT posts.slug, posts.type, pv.title, pv.excerpt, pv.answer_summary, pv.question_heading, pv.published_at
+         FROM posts JOIN post_versions pv ON pv.id = posts.current_version_id
+        WHERE posts.status = 'published'
+        ORDER BY pv.published_at DESC
+        LIMIT ?1`)
+        .bind(settings.aeo.llmsTxtMaxPosts)
+        .all();
+    // Grouped by content type so a section header carries meaning ("Research",
+    // "News") instead of one flat list of everything the site has ever written.
+    const byType = new Map();
+    for (const row of results) {
+        const bucket = byType.get(row.type);
+        if (bucket)
+            bucket.push(row);
+        else
+            byType.set(row.type, [row]);
+    }
+    for (const [type, rows] of byType) {
+        lines.push(`## ${type}`, '');
+        const path = resolveContentPath(type, settings);
+        for (const row of rows) {
+            lines.push(postLine(siteUrl, row, path));
+        }
+        lines.push('');
+    }
+    const design = await getDocument(db, 'design-md');
+    if (design.content.length > 0) {
+        lines.push('## Documents', '');
+        const description = design.answerSummary;
+        const link = `- [design.md](${siteUrl}/design.md)`;
+        lines.push(description ? `${link}: ${description}` : link);
+        lines.push('');
+    }
+    lines.push(`## Sitemap`, '', `- [sitemap.xml](${siteUrl}/sitemap.xml)`, '');
+    return lines.join('\n');
+}
+/**
+ * The document served at /llms.txt, or null when the site has turned it off.
+ *
+ * An author-written `llms-txt` site document wins outright: a site owner who
+ * has taken the trouble to write the file by hand means it, and silently
+ * regenerating over them would be the CMS overruling its own user. Everything
+ * else falls through to generation.
+ */
+export async function resolveLlmsTxt(db, siteUrl) {
+    const settings = await getSettings(db);
+    const authored = await getDocument(db, 'llms-txt');
+    if (authored.content.trim().length > 0)
+        return authored.content;
+    if (!settings.aeo.llmsTxtEnabled)
+        return null;
+    return buildLlmsTxt(db, siteUrl);
+}
+//# sourceMappingURL=llms.js.map

package/dist/modules/aeo/llms.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"llms.js","sourceRoot":"","sources":["../../../src/modules/aeo/llms.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAiB,MAAM,uBAAuB,CAAC;AAC1E,OAAO,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAC3C,OAAO,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAY3D;;;;;GAKG;AACH,SAAS,QAAQ,CACf,OAAe,EACf,GAAgB,EAChB,IAAY;IAEZ,MAAM,GAAG,GAAG,GAAG,OAAO,GAAG,IAAI,IAAI,GAAG,CAAC,IAAI,EAAE,CAAC;IAC5C,MAAM,KAAK,GAAG,GAAG,CAAC,gBAAgB,IAAI,GAAG,CAAC,KAAK,CAAC;IAChD,MAAM,WAAW,GAAG,GAAG,CAAC,cAAc,IAAI,GAAG,CAAC,OAAO,CAAC;IACtD,OAAO,WAAW,CAAC,CAAC,CAAC,MAAM,KAAK,KAAK,GAAG,MAAM,WAAW,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,KAAK,GAAG,GAAG,CAAC;AACvF,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,EAAc,EAAE,OAAe;IAChE,MAAM,QAAQ,GAAG,MAAM,WAAW,CAAC,EAAE,CAAC,CAAC;IAEvC,MAAM,IAAI,GAAG,QAAQ,CAAC,SAAS,EAAE,IAAI,IAAI,QAAQ,CAAC,GAAG,CAAC,YAAY,IAAI,OAAO,CAAC;IAC9E,MAAM,OAAO,GAAG,QAAQ,CAAC,GAAG,CAAC,WAAW,IAAI,QAAQ,CAAC,GAAG,CAAC,eAAe,IAAI,IAAI,CAAC;IAEjF,MAAM,KAAK,GAAa,CAAC,KAAK,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;IAC1C,IAAI,OAAO,EAAE,CAAC;QACZ,KAAK,CAAC,IAAI,CAAC,KAAK,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC;IACjC,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,SAAS,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC;IAEnC,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,EAAE;SACzB,OAAO,CACN;;;;iBAIW,CACZ;SACA,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,eAAe,CAAC;SAClC,GAAG,EAAe,CAAC;IAEtB,2EAA2E;IAC3E,4EAA4E;IAC5E,MAAM,MAAM,GAAG,IAAI,GAAG,EAA2B,CAAC;IAClD,KAAK,MAAM,GAAG,IAAI,OAAO,EAAE,CAAC;QAC1B,MAAM,MAAM,GAAG,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACpC,IAAI,MAAM;YAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;;YACxB,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACnC,CAAC;IAED,KAAK,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,MAAM,EAAE,CAAC;QAClC,KAAK,CAAC,IAAI,CAAC,MAAM,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;QAC7B,MAAM,IAAI,GAAG,kBAAkB,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;QAChD,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;YACvB,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC;QAC3C,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACjB,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,EAAE,EAAE,WAAW,CAAC,CAAC;IAClD,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC9B,KAAK,CAAC,IAAI,CAAC,cAAc,EAAE,EAAE,CAAC,CAAC;QAC/B,MAAM,WAAW,GAAG,MAAM,CAAC,aAAa,CAAC;QACzC,MAAM,IAAI,GAAG,iBAAiB,OAAO,aAAa,CAAC;QACnD,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,GAAG,IAAI,KAAK,WAAW,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QAC3D,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACjB,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,YAAY,EAAE,EAAE,EAAE,mBAAmB,OAAO,eAAe,EAAE,EAAE,CAAC,CAAC;IAE5E,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,EAAc,EAAE,OAAe;IAClE,MAAM,QAAQ,GAAG,MAAM,WAAW,CAAC,EAAE,CAAC,CAAC;IACvC,MAAM,QAAQ,GAAG,MAAM,WAAW,CAAC,EAAE,EAAE,UAAU,CAAC,CAAC;IACnD,IAAI,QAAQ,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,QAAQ,CAAC,OAAO,CAAC;IAChE,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,cAAc;QAAE,OAAO,IAAI,CAAC;IAC9C,OAAO,YAAY,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC;AACnC,CAAC"}

package/dist/modules/aeo/routes.admin.d.ts

@@ -0,0 +1,12 @@
+import { Hono } from 'hono';
+import type { Bindings } from '../../env.js';
+/**
+ * The admin side of the AEO surface: what the content is missing, who has been
+ * crawling it, and a preview of the document that gets published. Open to a
+ * member, like the rest of the editorial admin API; nothing here is personal
+ * data or configuration.
+ */
+export declare const aeoAdminRoutes: Hono<{
+    Bindings: Bindings;
+}, import("hono/types").BlankSchema, "/">;
+//# sourceMappingURL=routes.admin.d.ts.map

package/dist/modules/aeo/routes.admin.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"routes.admin.d.ts","sourceRoot":"","sources":["../../../src/modules/aeo/routes.admin.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAC5B,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,cAAc,CAAC;AAK7C;;;;;GAKG;AACH,eAAO,MAAM,cAAc;cAAwB,QAAQ;yCAAK,CAAC"}

package/dist/modules/aeo/routes.admin.js

@@ -0,0 +1,37 @@
+import { ok, statsQuerySchema, VISIT_STATS_MAX_DAYS } from '../../shared/index.js';
+import { Hono } from 'hono';
+import { parseOrThrow } from '../../lib/validate.js';
+import { buildAeoReport, checkOnePost, getCrawlerStats } from './checks.js';
+import { buildLlmsTxt } from './llms.js';
+/**
+ * The admin side of the AEO surface: what the content is missing, who has been
+ * crawling it, and a preview of the document that gets published. Open to a
+ * member, like the rest of the editorial admin API; nothing here is personal
+ * data or configuration.
+ */
+export const aeoAdminRoutes = new Hono();
+aeoAdminRoutes.get('/checks', async (c) => {
+    const report = await buildAeoReport(c.env.DB);
+    return c.json(ok({ report }));
+});
+// Registered BEFORE /checks/:postId would be reached by anything literal.
+aeoAdminRoutes.get('/checks/:postId', async (c) => {
+    const check = await checkOnePost(c.env.DB, c.req.param('postId'));
+    return c.json(ok({ check }));
+});
+aeoAdminRoutes.get('/crawlers', async (c) => {
+    const query = parseOrThrow(statsQuerySchema(VISIT_STATS_MAX_DAYS), c.req.query());
+    const stats = await getCrawlerStats(c.env.DB, query.days);
+    return c.json(ok(stats));
+});
+/**
+ * The generated document, as the public route would serve it. Deliberately
+ * ignores both the enabled flag and the authored override, because this is the
+ * "show me what generation produces" view the admin needs while deciding
+ * whether to publish it at all.
+ */
+aeoAdminRoutes.get('/llms.txt', async (c) => {
+    const body = await buildLlmsTxt(c.env.DB, c.env.SITE_URL);
+    return c.body(body, 200, { 'Content-Type': 'text/plain; charset=UTF-8' });
+});
+//# sourceMappingURL=routes.admin.js.map

package/dist/modules/aeo/routes.admin.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"routes.admin.js","sourceRoot":"","sources":["../../../src/modules/aeo/routes.admin.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,EAAE,EAAE,gBAAgB,EAAE,oBAAoB,EAAE,MAAM,uBAAuB,CAAC;AACnF,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAE5B,OAAO,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AACrD,OAAO,EAAE,cAAc,EAAE,YAAY,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAC5E,OAAO,EAAE,YAAY,EAAE,MAAM,WAAW,CAAC;AAEzC;;;;;GAKG;AACH,MAAM,CAAC,MAAM,cAAc,GAAG,IAAI,IAAI,EAA0B,CAAC;AAEjE,cAAc,CAAC,GAAG,CAAC,SAAS,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;IACxC,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAC9C,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC;AAChC,CAAC,CAAC,CAAC;AAEH,0EAA0E;AAC1E,cAAc,CAAC,GAAG,CAAC,iBAAiB,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;IAChD,MAAM,KAAK,GAAG,MAAM,YAAY,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC;IAClE,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;AAC/B,CAAC,CAAC,CAAC;AAEH,cAAc,CAAC,GAAG,CAAC,WAAW,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;IAC1C,MAAM,KAAK,GAAG,YAAY,CAAC,gBAAgB,CAAC,oBAAoB,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC;IAClF,MAAM,KAAK,GAAG,MAAM,eAAe,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;IAC1D,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC;AAC3B,CAAC,CAAC,CAAC;AAEH;;;;;GAKG;AACH,cAAc,CAAC,GAAG,CAAC,WAAW,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;IAC1C,MAAM,IAAI,GAAG,MAAM,YAAY,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IAC1D,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE,cAAc,EAAE,2BAA2B,EAAE,CAAC,CAAC;AAC5E,CAAC,CAAC,CAAC"}

package/dist/modules/analytics/db.d.ts

@@ -0,0 +1,24 @@
+import type { PageVisitRecord, UserAgentClass } from '../../shared/index.js';
+export interface PageVisitRow {
+    id: number;
+    visited_at: string;
+    pathname: string;
+    referrer: string | null;
+    country: string | null;
+    ip_hash: string | null;
+    user_agent: string | null;
+    is_bot: number;
+    bot_name: string | null;
+    bot_score: number | null;
+    user_agent_class: UserAgentClass;
+    session_id: string | null;
+}
+export declare function toPageVisitRecord(row: PageVisitRow): PageVisitRecord;
+/**
+ * All analytics reads go through this. The D1 Sessions API with
+ * `first-unconstrained` lets a read land on whichever replica is closest,
+ * which is the right trade for a visit log where a moment of staleness in an
+ * aggregate costs nothing.
+ */
+export declare function analyticsSession(db: D1Database): D1DatabaseSession;
+//# sourceMappingURL=db.d.ts.map

package/dist/modules/analytics/db.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"db.d.ts","sourceRoot":"","sources":["../../../src/modules/analytics/db.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAE7E,MAAM,WAAW,YAAY;IAC3B,EAAE,EAAE,MAAM,CAAC;IACX,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,gBAAgB,EAAE,cAAc,CAAC;IACjC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;CAC3B;AAED,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,YAAY,GAAG,eAAe,CAapE;AAED;;;;;GAKG;AACH,wBAAgB,gBAAgB,CAAC,EAAE,EAAE,UAAU,GAAG,iBAAiB,CAElE"}

package/dist/modules/analytics/db.js

@@ -0,0 +1,24 @@
+export function toPageVisitRecord(row) {
+    return {
+        id: String(row.id),
+        visitedAt: row.visited_at,
+        pathname: row.pathname,
+        referrer: row.referrer,
+        country: row.country,
+        isBot: row.is_bot === 1,
+        botName: row.bot_name,
+        botScore: row.bot_score,
+        userAgentClass: row.user_agent_class,
+        sessionId: row.session_id,
+    };
+}
+/**
+ * All analytics reads go through this. The D1 Sessions API with
+ * `first-unconstrained` lets a read land on whichever replica is closest,
+ * which is the right trade for a visit log where a moment of staleness in an
+ * aggregate costs nothing.
+ */
+export function analyticsSession(db) {
+    return db.withSession('first-unconstrained');
+}
+//# sourceMappingURL=db.js.map

package/dist/modules/analytics/db.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"db.js","sourceRoot":"","sources":["../../../src/modules/analytics/db.ts"],"names":[],"mappings":"AAiBA,MAAM,UAAU,iBAAiB,CAAC,GAAiB;IACjD,OAAO;QACL,EAAE,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;QAClB,SAAS,EAAE,GAAG,CAAC,UAAU;QACzB,QAAQ,EAAE,GAAG,CAAC,QAAQ;QACtB,QAAQ,EAAE,GAAG,CAAC,QAAQ;QACtB,OAAO,EAAE,GAAG,CAAC,OAAO;QACpB,KAAK,EAAE,GAAG,CAAC,MAAM,KAAK,CAAC;QACvB,OAAO,EAAE,GAAG,CAAC,QAAQ;QACrB,QAAQ,EAAE,GAAG,CAAC,SAAS;QACvB,cAAc,EAAE,GAAG,CAAC,gBAAgB;QACpC,SAAS,EAAE,GAAG,CAAC,UAAU;KAC1B,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,gBAAgB,CAAC,EAAc;IAC7C,OAAO,EAAE,CAAC,WAAW,CAAC,qBAAqB,CAAC,CAAC;AAC/C,CAAC"}

package/dist/modules/analytics/routes.admin.d.ts

@@ -0,0 +1,6 @@
+import { Hono } from 'hono';
+import type { Bindings } from '../../env.js';
+export declare const analyticsAdminRoutes: Hono<{
+    Bindings: Bindings;
+}, import("hono/types").BlankSchema, "/">;
+//# sourceMappingURL=routes.admin.d.ts.map

package/dist/modules/analytics/routes.admin.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"routes.admin.d.ts","sourceRoot":"","sources":["../../../src/modules/analytics/routes.admin.ts"],"names":[],"mappings":"AAOA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAC5B,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,cAAc,CAAC;AAI7C,eAAO,MAAM,oBAAoB;cAAwB,QAAQ;yCAAK,CAAC"}

package/dist/modules/analytics/routes.admin.js

@@ -0,0 +1,21 @@
+import { CONSENT_STATS_MAX_DAYS, ok, statsQuerySchema, VISIT_STATS_MAX_DAYS, visitListQuerySchema, } from '../../shared/index.js';
+import { Hono } from 'hono';
+import { parseOrThrow } from '../../lib/validate.js';
+import { getConsentStats, getVisitStats, listVisitsAdmin } from './service.js';
+export const analyticsAdminRoutes = new Hono();
+analyticsAdminRoutes.get('/visits', async (c) => {
+    const query = parseOrThrow(visitListQuerySchema, c.req.query());
+    const { items, total } = await listVisitsAdmin(c.env.DB, query);
+    return c.json(ok({ items, page: query.page, pageSize: query.pageSize, total }));
+});
+analyticsAdminRoutes.get('/visits/stats', async (c) => {
+    const query = parseOrThrow(statsQuerySchema(VISIT_STATS_MAX_DAYS), c.req.query());
+    const stats = await getVisitStats(c.env.DB, query.days);
+    return c.json(ok(stats));
+});
+analyticsAdminRoutes.get('/consent/stats', async (c) => {
+    const query = parseOrThrow(statsQuerySchema(CONSENT_STATS_MAX_DAYS), c.req.query());
+    const stats = await getConsentStats(c.env.DB, query.days);
+    return c.json(ok(stats));
+});
+//# sourceMappingURL=routes.admin.js.map

package/dist/modules/analytics/routes.admin.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"routes.admin.js","sourceRoot":"","sources":["../../../src/modules/analytics/routes.admin.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,sBAAsB,EACtB,EAAE,EACF,gBAAgB,EAChB,oBAAoB,EACpB,oBAAoB,GACrB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAE5B,OAAO,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AACrD,OAAO,EAAE,eAAe,EAAE,aAAa,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAE/E,MAAM,CAAC,MAAM,oBAAoB,GAAG,IAAI,IAAI,EAA0B,CAAC;AAEvE,oBAAoB,CAAC,GAAG,CAAC,SAAS,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;IAC9C,MAAM,KAAK,GAAG,YAAY,CAAC,oBAAoB,EAAE,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC;IAChE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,MAAM,eAAe,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;IAChE,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;AAClF,CAAC,CAAC,CAAC;AAEH,oBAAoB,CAAC,GAAG,CAAC,eAAe,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;IACpD,MAAM,KAAK,GAAG,YAAY,CAAC,gBAAgB,CAAC,oBAAoB,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC;IAClF,MAAM,KAAK,GAAG,MAAM,aAAa,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;IACxD,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC;AAC3B,CAAC,CAAC,CAAC;AAEH,oBAAoB,CAAC,GAAG,CAAC,gBAAgB,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;IACrD,MAAM,KAAK,GAAG,YAAY,CAAC,gBAAgB,CAAC,sBAAsB,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC;IACpF,MAAM,KAAK,GAAG,MAAM,eAAe,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;IAC1D,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC;AAC3B,CAAC,CAAC,CAAC"}

package/dist/modules/analytics/routes.public.d.ts

@@ -0,0 +1,6 @@
+import { Hono } from 'hono';
+import type { Bindings } from '../../env.js';
+export declare const analyticsPublicRoutes: Hono<{
+    Bindings: Bindings;
+}, import("hono/types").BlankSchema, "/">;
+//# sourceMappingURL=routes.public.d.ts.map

package/dist/modules/analytics/routes.public.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"routes.public.d.ts","sourceRoot":"","sources":["../../../src/modules/analytics/routes.public.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAC5B,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,cAAc,CAAC;AAM7C,eAAO,MAAM,qBAAqB;cAAwB,QAAQ;yCAAK,CAAC"}

package/dist/modules/analytics/routes.public.js

@@ -0,0 +1,33 @@
+import { consentEventInputSchema, ok, visitEventInputSchema } from '../../shared/index.js';
+import { Hono } from 'hono';
+import { parseOrThrow } from '../../lib/validate.js';
+import { corsMiddleware, enforceOrigin } from '../../middleware/cors.js';
+import { rateLimit } from '../../middleware/rate-limit.js';
+import { recordConsent, recordVisit } from './service.js';
+export const analyticsPublicRoutes = new Hono();
+analyticsPublicRoutes.use('/visit', corsMiddleware('publicWrite'), enforceOrigin, rateLimit('engagement'));
+analyticsPublicRoutes.use('/consent', corsMiddleware('publicWrite'), enforceOrigin, rateLimit('engagement'));
+analyticsPublicRoutes.post('/visit', async (c) => {
+    const input = parseOrThrow(visitEventInputSchema, await c.req.json());
+    await recordVisit(c.env.DB, c.env.SITE_URL, input, {
+        country: c.req.header('CF-IPCountry') ?? null,
+        userAgent: c.req.header('User-Agent') ?? null,
+        ip: c.req.header('CF-Connecting-IP') ?? null,
+        // Request.cf is typed as a union covering both an incoming request's
+        // populated properties AND the much smaller shape used when
+        // constructing an outbound fetch() (RequestInitCfProperties). c.req.raw
+        // is always the actual incoming request here, so it's genuinely the
+        // former; the union just can't express that distinction statically.
+        cf: c.req.raw.cf,
+    });
+    return c.json(ok({}));
+});
+analyticsPublicRoutes.post('/consent', async (c) => {
+    const input = parseOrThrow(consentEventInputSchema, await c.req.json());
+    await recordConsent(c.env.DB, c.env.SITE_URL, input, {
+        ip: c.req.header('CF-Connecting-IP') ?? null,
+        userAgent: c.req.header('User-Agent') ?? null,
+    });
+    return c.json(ok({}));
+});
+//# sourceMappingURL=routes.public.js.map

package/dist/modules/analytics/routes.public.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"routes.public.js","sourceRoot":"","sources":["../../../src/modules/analytics/routes.public.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,uBAAuB,EAAE,EAAE,EAAE,qBAAqB,EAAE,MAAM,uBAAuB,CAAC;AAC3F,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAE5B,OAAO,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AACrD,OAAO,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAC;AACzE,OAAO,EAAE,SAAS,EAAE,MAAM,gCAAgC,CAAC;AAC3D,OAAO,EAAE,aAAa,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAE1D,MAAM,CAAC,MAAM,qBAAqB,GAAG,IAAI,IAAI,EAA0B,CAAC;AAExE,qBAAqB,CAAC,GAAG,CACvB,QAAQ,EACR,cAAc,CAAC,aAAa,CAAC,EAC7B,aAAa,EACb,SAAS,CAAC,YAAY,CAAC,CACxB,CAAC;AACF,qBAAqB,CAAC,GAAG,CACvB,UAAU,EACV,cAAc,CAAC,aAAa,CAAC,EAC7B,aAAa,EACb,SAAS,CAAC,YAAY,CAAC,CACxB,CAAC;AAEF,qBAAqB,CAAC,IAAI,CAAC,QAAQ,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;IAC/C,MAAM,KAAK,GAAG,YAAY,CAAC,qBAAqB,EAAE,MAAM,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;IACtE,MAAM,WAAW,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,KAAK,EAAE;QACjD,OAAO,EAAE,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,cAAc,CAAC,IAAI,IAAI;QAC7C,SAAS,EAAE,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,YAAY,CAAC,IAAI,IAAI;QAC7C,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,kBAAkB,CAAC,IAAI,IAAI;QAC5C,qEAAqE;QACrE,4DAA4D;QAC5D,wEAAwE;QACxE,oEAAoE;QACpE,oEAAoE;QACpE,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,EAA6C;KAC5D,CAAC,CAAC;IACH,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;AACxB,CAAC,CAAC,CAAC;AAEH,qBAAqB,CAAC,IAAI,CAAC,UAAU,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;IACjD,MAAM,KAAK,GAAG,YAAY,CAAC,uBAAuB,EAAE,MAAM,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;IACxE,MAAM,aAAa,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,KAAK,EAAE;QACnD,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,kBAAkB,CAAC,IAAI,IAAI;QAC5C,SAAS,EAAE,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,YAAY,CAAC,IAAI,IAAI;KAC9C,CAAC,CAAC;IACH,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;AACxB,CAAC,CAAC,CAAC"}

package/dist/modules/analytics/service.d.ts

@@ -0,0 +1,16 @@
+import { type ConsentEventInput, type ConsentStats, type PageVisitRecord, type VisitEventInput, type VisitListQuery, type VisitStats } from '../../shared/index.js';
+export interface RequestSignals {
+    country: string | null;
+    userAgent: string | null;
+    ip: string | null;
+    cf: IncomingRequestCfProperties | undefined;
+}
+export declare function recordVisit(db: D1Database, siteUrl: string, input: VisitEventInput, signals: RequestSignals): Promise<void>;
+export declare function recordConsent(db: D1Database, siteUrl: string, input: ConsentEventInput, signals: Pick<RequestSignals, 'ip' | 'userAgent'>): Promise<void>;
+export declare function listVisitsAdmin(db: D1Database, query: VisitListQuery): Promise<{
+    items: PageVisitRecord[];
+    total: number;
+}>;
+export declare function getVisitStats(db: D1Database, days: number): Promise<VisitStats>;
+export declare function getConsentStats(db: D1Database, days: number): Promise<ConsentStats>;
+//# sourceMappingURL=service.d.ts.map

package/dist/modules/analytics/service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"service.d.ts","sourceRoot":"","sources":["../../../src/modules/analytics/service.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,KAAK,iBAAiB,EACtB,KAAK,YAAY,EACjB,KAAK,eAAe,EACpB,KAAK,eAAe,EACpB,KAAK,cAAc,EAEnB,KAAK,UAAU,EAChB,MAAM,uBAAuB,CAAC;AAI/B,MAAM,WAAW,cAAc;IAC7B,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,EAAE,EAAE,MAAM,GAAG,IAAI,CAAC;IAClB,EAAE,EAAE,2BAA2B,GAAG,SAAS,CAAC;CAC7C;AAYD,wBAAsB,WAAW,CAC/B,EAAE,EAAE,UAAU,EACd,OAAO,EAAE,MAAM,EACf,KAAK,EAAE,eAAe,EACtB,OAAO,EAAE,cAAc,GACtB,OAAO,CAAC,IAAI,CAAC,CAsBf;AAED,wBAAsB,aAAa,CACjC,EAAE,EAAE,UAAU,EACd,OAAO,EAAE,MAAM,EACf,KAAK,EAAE,iBAAiB,EACxB,OAAO,EAAE,IAAI,CAAC,cAAc,EAAE,IAAI,GAAG,WAAW,CAAC,GAChD,OAAO,CAAC,IAAI,CAAC,CAiBf;AAED,wBAAsB,eAAe,CACnC,EAAE,EAAE,UAAU,EACd,KAAK,EAAE,cAAc,GACpB,OAAO,CAAC;IAAE,KAAK,EAAE,eAAe,EAAE,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC,CA2CtD;AAED,wBAAsB,aAAa,CAAC,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC,CAwFrF;AAED,wBAAsB,eAAe,CAAC,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,CAAC,CAyCzF"}