@xtrable-ltd/nanoesis 0.1.2 → 0.1.5

package/dist/adapter-azure-blob.js

@@ -1,6 +1,6 @@
 import {
   contentTypeFor
-} from "./chunk-22WHPW5E.js";
+} from "./chunk-S23S4ZAK.js";
 
 // ../../adapters/azure-blob/src/container.ts
 var InMemoryBlobContainer = class {

package/dist/{chunk-22WHPW5E.js → chunk-S23S4ZAK.js}

@@ -2430,8 +2430,9 @@ var noopPurgeService = {
 var DEFAULT_WRITE_CONCURRENCY = 8;
 async function publishSite(source, sink, options = {}) {
   const validation = await validateSite(source);
+  const summary = summarizeTree(await loadContentTree(source));
   if (!validation.ok) {
-    return { ok: false, validation, written: [] };
+    return { ok: false, validation, written: [], summary };
   }
   const {
     purge = noopPurgeService,
@@ -2454,7 +2455,29 @@ async function publishSite(source, sink, options = {}) {
     ([path, contents]) => sink.write(path, contents)
   );
   await purge.purgeAll();
-  return { ok: true, validation, written: [...byPath.keys()].sort() };
+  return { ok: true, validation, written: [...byPath.keys()].sort(), summary };
+}
+function summarizeTree(root) {
+  let published = 0;
+  let drafts = 0;
+  const walk = (node) => {
+    for (const child of node.children) {
+      if (child.kind === "dir") {
+        walk(child);
+      } else if (child.item.isPublished) {
+        published += 1;
+      } else {
+        drafts += 1;
+      }
+    }
+  };
+  walk(root);
+  if (published > 0) return { published, drafts };
+  return {
+    published,
+    drafts,
+    firstPublishWarning: drafts > 0 ? `Your site has no published pages \u2014 ${drafts} draft${drafts === 1 ? "" : "s"} were skipped. Toggle Publish on at least one page to go live.` : "Your site has no published pages. Create a page and toggle Publish on to go live."
+  };
 }
 async function collectPublic(source, publicDir) {
   if (!await source.exists(publicDir)) return [];

package/dist/editor-api.d.ts

@@ -140,8 +140,12 @@ interface ApiDeps {
      */
     readonly authors?: () => Promise<readonly AuthorOption[]>;
 }
-/** Dispatch one API request. The editor is private, so every route requires an editing
- * role (author/developer/admin); writes are further partitioned by path (DESIGN §11). */
+/**
+ * Dispatch one API request. The editor is private, so every route requires an editing
+ * role (author/developer/admin); writes are further partitioned by path (DESIGN §11).
+ * Every response then passes through {@link withDefaultHeaders} so that no `/api/*`
+ * response is silently cached (DESIGN §13).
+ */
 declare function handleApi(deps: ApiDeps, req: ApiRequest): Promise<ApiResponse>;
 
 /** The byline picker's options, display name + stable handle, sorted by display name. */
@@ -212,16 +216,28 @@ declare function readMcpResource(uri: string): {
  * §11d) and bundled here as **pure data**, so the engine's purity is untouched and the
  * scaffold works identically for every host and the MCP server with no per-host wiring.
  *
- * Deliberately minimal (the owner's call, distinct from the fuller `examples/starter`):
- * one home page, a page template, the document shell, and a stylesheet. It is gate-clean
- * by construction — no collection loops (nothing to point at yet), no custom components,
- * no required fields left unset — so a fresh adopter can publish it immediately, and the
- * home page is a **draft** (`isPublished: false`) so going live is a deliberate act.
+ * Auto-fires on first sign-in to an empty store (revised 2026-05-28). The earlier behaviour
+ * — a confirm prompt that the user could dismiss — left a user who said no with no path
+ * forward (the empty Content workspace has no signposted route to the Dev workspace, and
+ * every alternative to scaffolding needs templates to already exist). Removing the choice
+ * removes a concept; the scaffold is idempotent and gate-clean, so doing it always is safe.
+ *
+ * Deliberately minimal (revised 2026-05-28, owner's call):
+ *   - `templates/home.html` is a **full HTML document** (DESIGN §6.10: with no
+ *     `templates/document.html`, a page template is the whole document) — no shared shell.
+ *     The user can extract one later when they add a second page; for the bootstrap state,
+ *     three files is simpler than four.
+ *   - `public/styles.css` for baseline readability — a one-page site without any CSS reads
+ *     poorly, and the styles.css path is the editor's canonical "your site's CSS" location.
+ *   - `content/index.json` with `isPublished: true` (revised 2026-05-28). The earlier
+ *     "draft, so going live is deliberate" framing turned out to be a footgun: a new user
+ *     would hit Publish and get the "nothing went live" warning without obvious cause. A
+ *     published placeholder is honest about what a publish will do; the user's first edit
+ *     is to replace the placeholder copy, not to also remember to toggle a flag.
  */
 /**
  * The starter files, keyed by working-store path. Written through the store's `write`
- * (so the index records each), in this order — templates and styles before the content
- * that depends on them, though the store has no cross-file ordering requirement.
+ * (so the index records each). The store has no cross-file ordering requirement.
  */
 declare const SCAFFOLD_FILES: Readonly<Record<string, string>>;
 

package/dist/editor-api.js

@@ -8,45 +8,32 @@ import {
   loadTemplate,
   renderReferenceMarkdown,
   validateSite
-} from "./chunk-22WHPW5E.js";
+} from "./chunk-S23S4ZAK.js";
 
 // ../editor-api/src/scaffold.ts
-var DOCUMENT_HTML = `<!doctype html>
+var HOME_HTML = `<!doctype html>
 <html lang="en">
   <head>
     <meta charset="utf-8" />
     <meta name="viewport" content="width=device-width, initial-scale=1" />
     <title>{title}</title>
-    <meta name="description" content="{meta_description}" />
     <link rel="stylesheet" href="/styles.css" />
   </head>
   <body>
-    <header class="site-header">
-      <a class="brand" href="/">Your site</a>
-    </header>
     <main>
-      <slot></slot>
+      <h1>{title}</h1>
+      <div class="prose" data-type="richtext">{body}</div>
     </main>
-    <footer class="site-footer">
-      <p>Built with nanoesis \u2014 static HTML, no runtime.</p>
-    </footer>
   </body>
 </html>
 `;
-var HOME_HTML = `<section class="hero">
-  <h1>{title}</h1>
-  <p class="lead">{lead}</p>
-</section>
-<div class="prose" data-type="richtext">{body}</div>
-`;
 var HOME_JSON = `${JSON.stringify(
   {
     template: "home",
     title: "Welcome",
-    isPublished: false,
+    isPublished: true,
     fields: {
-      lead: "Edit this page in the nanoesis editor, then publish when you are ready.",
-      body: "<p>This is your new site. It compiles to plain static HTML \u2014 there is no server and no client framework, and nothing of the editor survives into production.</p>"
+      body: "<p>This is your starter home page. Edit it in the nanoesis editor and click Publish to update your site.</p>"
     }
   },
   null,
@@ -67,30 +54,16 @@ body {
   margin: 0;
 }
 
-.site-header,
-main,
-.site-footer {
+main {
   max-width: var(--max);
   margin-inline: auto;
   padding: 1.5rem 1.25rem;
 }
 
-.site-header .brand {
-  font-weight: 700;
-  text-decoration: none;
-  color: var(--ink);
-}
-
-.hero h1 {
+h1 {
   font-size: 2.25rem;
   letter-spacing: -0.01em;
-  margin: 0 0 0.5rem;
-}
-
-.lead {
-  font-size: 1.2rem;
-  color: var(--muted);
-  margin: 0 0 2rem;
+  margin: 0 0 1rem;
 }
 
 .prose {
@@ -100,15 +73,8 @@ main,
 a {
   color: var(--accent);
 }
-
-.site-footer {
-  color: var(--muted);
-  font-size: 0.9rem;
-  border-top: 1px solid #eee;
-}
 `;
 var SCAFFOLD_FILES = {
-  "templates/document.html": DOCUMENT_HTML,
   "templates/home.html": HOME_HTML,
   "public/styles.css": STYLES_CSS,
   "content/index.json": HOME_JSON
@@ -136,6 +102,14 @@ function json(status, data) {
 function methodNotAllowed() {
   return json(405, { ok: false, error: "POST only" });
 }
+function withDefaultHeaders(response) {
+  const headers = { ...response.headers ?? {} };
+  if (headers["cache-control"] === void 0) {
+    headers["cache-control"] = "no-store";
+    if (headers["vary"] === void 0) headers["vary"] = "Authorization";
+  }
+  return { ...response, headers };
+}
 var BEARER_PREFIX = /^Bearer\s+/i;
 function bearerToken(getHeader) {
   const raw = getHeader("authorization") ?? getHeader("Authorization");
@@ -304,6 +278,9 @@ async function handleBrandingRoute(deps, req) {
   return json(405, { ok: false, error: "method not allowed" });
 }
 async function handleApi(deps, req) {
+  return withDefaultHeaders(await dispatchApi(deps, req));
+}
+async function dispatchApi(deps, req) {
   const authResponse = await handleAuthRoute(deps, req);
   if (authResponse !== void 0) return authResponse;
   const brandingResponse = await handleBrandingRoute(deps, req);
@@ -384,8 +361,18 @@ async function handleApi(deps, req) {
     case "/api/publish": {
       if (req.method !== "POST") return methodNotAllowed();
       const result = await deps.publish();
-      if (result.ok) return json(200, { ok: true, written: result.written.length });
-      return json(422, { ok: false, errors: result.validation.errors.map((e) => e.message) });
+      if (result.ok) {
+        return json(200, {
+          ok: true,
+          written: result.written.length,
+          ...result.summary !== void 0 && { summary: result.summary }
+        });
+      }
+      return json(422, {
+        ok: false,
+        errors: result.validation.errors.map((e) => e.message),
+        ...result.summary !== void 0 && { summary: result.summary }
+      });
     }
     case "/api/scaffold": {
       if (req.method !== "POST") return methodNotAllowed();

package/dist/index.d.ts

@@ -994,6 +994,24 @@ interface PublishOptions extends CompileSiteOptions {
     /** Max sink writes in flight at once (default {@link DEFAULT_WRITE_CONCURRENCY}). */
     readonly writeConcurrency?: number;
 }
+/**
+ * What the publish actually did to *content*, as opposed to artifacts. Counts come from a
+ * walk of the content tree (the same definition the compiler uses, `item.isPublished`).
+ * Surfaced so a host/UI can explain a publish whose written-file count looks surprising,
+ * the silent first-publish footgun: a published site with no published pages.
+ */
+interface PublishSummary {
+    /** Content items with `isPublished: true` — the pages the publish included. */
+    readonly published: number;
+    /** Content items with `isPublished` false/absent — the pages the publish skipped. */
+    readonly drafts: number;
+    /**
+     * A friendly one-liner when `published === 0`, so a UI can warn an operator who just
+     * scaffolded a draft home and hit Publish that nothing went live. Absent when at least
+     * one page is published.
+     */
+    readonly firstPublishWarning?: string;
+}
 interface PublishResult {
     /** True when the validation gate passed and the site was published. */
     readonly ok: boolean;
@@ -1001,6 +1019,8 @@ interface PublishResult {
     readonly validation: ValidationResult;
     /** Output paths written to the sink, sorted; empty when validation blocked the publish. */
     readonly written: readonly string[];
+    /** Per-content counts (the human-readable side of `written`); present when the tree loaded. */
+    readonly summary?: PublishSummary;
 }
 /**
  * Run the Phase-1 publish pipeline (DESIGN §11) through ports: **validate → compile →
@@ -1267,4 +1287,4 @@ declare function escapeJsonStringContent(value: string): string;
  */
 declare function sanitizeUrl(url: string): string;
 
-export { type Artifact, type ArtifactSink, type AuthEndpoints, type AuthResult, type AuthorDirectory, type AuthorEntry, type AuthorOption, type AuthorRef, type AuthoringReference, type BlobStore, type BoundItem, type ChangePasswordRequest, type ChangePasswordSuccess, type CollectionConfig, type CollectionQuery, type CompileInput, type CompilePageOptions, type CompileSiteOptions, type CompiledPage, type ComponentMap, type ContentIndex, type ContentItem, ContentParseError, type ContentSource, type CreateTokenSuccess, type CreateUserRequest, DEFAULT_DIRS, DOCUMENT_SHELL, type DerivedField, type Diagnostic, type DirEntry, type DirNode, type EncodeRequest, type EncodedImage, type EncodedVariant, type EntryKind, FIELD_TYPES, type FieldPrimitive, type FieldRecord, type FieldType, type FieldTypeDef, type FieldValue, type IdentityProvider, type ImageEncoder, type ImageFormat, type ImageInfo, InMemoryArtifactSink, InMemoryBlobStore, InMemoryContentSource, IndexedStore, type ItemNode, type LengthConstraints, type LoginRequest, type LoginSuccess, type MediaResolver, type PageEntry, type PreBuildHook, type Principal, type PublishOptions, type PublishResult, type PurgeService, RESERVED_PREFIX, type ReconcileResult, type RedirectRule, type ReferenceContext, type ReferenceEntry, type ReferenceSection, type RefreshSuccess, type RenameResult, type ResetPasswordRequest, type ResolveContext, type Role, type RssOptions, type Scope, type Severity, type SiteConfig, type SortFile, type TemplateAnalysis, type TokenContext, type TokenRef, type TreeNode, type UpdateUserRequest, type UserAdminEndpoints, type UserSummary, type ValidationResult, type ValueKind, type WorkingStore, analyzeTemplate, buildAuthoringReference, buildContentIndex, buildPictureMarkup, buildRedirects, buildResolveContext, buildRss, buildSitemap, canEdit, compilePage, compileSite, compileTemplate, contentHash, contentTypeFor, deriveFields, emptyIndex, escapeHtmlAttribute, escapeHtmlText, escapeJsonStringContent, findTokens, hasRole, humanize, inferControl, isFieldType, joinAuthors, loadComponentScripts, loadComponentStyles, loadComponents, loadContentTree, loadDocumentShell, loadIndex, loadRedirects, loadSiteConfig, loadTemplate, noopPurgeService, outputPathForItem, parseContentItem, parseRedirects, parseSortFile, processImage, publishSite, reconcileIndex, renderAuthors, renderReferenceMarkdown, sanitizeUrl, saveIndex, slugify, textContent, toAuthorRefs, urlForItem, validateSite, valueKindOf, wholeValueToken };
+export { type Artifact, type ArtifactSink, type AuthEndpoints, type AuthResult, type AuthorDirectory, type AuthorEntry, type AuthorOption, type AuthorRef, type AuthoringReference, type BlobStore, type BoundItem, type ChangePasswordRequest, type ChangePasswordSuccess, type CollectionConfig, type CollectionQuery, type CompileInput, type CompilePageOptions, type CompileSiteOptions, type CompiledPage, type ComponentMap, type ContentIndex, type ContentItem, ContentParseError, type ContentSource, type CreateTokenSuccess, type CreateUserRequest, DEFAULT_DIRS, DOCUMENT_SHELL, type DerivedField, type Diagnostic, type DirEntry, type DirNode, type EncodeRequest, type EncodedImage, type EncodedVariant, type EntryKind, FIELD_TYPES, type FieldPrimitive, type FieldRecord, type FieldType, type FieldTypeDef, type FieldValue, type IdentityProvider, type ImageEncoder, type ImageFormat, type ImageInfo, InMemoryArtifactSink, InMemoryBlobStore, InMemoryContentSource, IndexedStore, type ItemNode, type LengthConstraints, type LoginRequest, type LoginSuccess, type MediaResolver, type PageEntry, type PreBuildHook, type Principal, type PublishOptions, type PublishResult, type PublishSummary, type PurgeService, RESERVED_PREFIX, type ReconcileResult, type RedirectRule, type ReferenceContext, type ReferenceEntry, type ReferenceSection, type RefreshSuccess, type RenameResult, type ResetPasswordRequest, type ResolveContext, type Role, type RssOptions, type Scope, type Severity, type SiteConfig, type SortFile, type TemplateAnalysis, type TokenContext, type TokenRef, type TreeNode, type UpdateUserRequest, type UserAdminEndpoints, type UserSummary, type ValidationResult, type ValueKind, type WorkingStore, analyzeTemplate, buildAuthoringReference, buildContentIndex, buildPictureMarkup, buildRedirects, buildResolveContext, buildRss, buildSitemap, canEdit, compilePage, compileSite, compileTemplate, contentHash, contentTypeFor, deriveFields, emptyIndex, escapeHtmlAttribute, escapeHtmlText, escapeJsonStringContent, findTokens, hasRole, humanize, inferControl, isFieldType, joinAuthors, loadComponentScripts, loadComponentStyles, loadComponents, loadContentTree, loadDocumentShell, loadIndex, loadRedirects, loadSiteConfig, loadTemplate, noopPurgeService, outputPathForItem, parseContentItem, parseRedirects, parseSortFile, processImage, publishSite, reconcileIndex, renderAuthors, renderReferenceMarkdown, sanitizeUrl, saveIndex, slugify, textContent, toAuthorRefs, urlForItem, validateSite, valueKindOf, wholeValueToken };

package/dist/index.js

@@ -61,7 +61,7 @@ import {
   validateSite,
   valueKindOf,
   wholeValueToken
-} from "./chunk-22WHPW5E.js";
+} from "./chunk-S23S4ZAK.js";
 export {
   ContentParseError,
   DEFAULT_DIRS,