@xtrable-ltd/nanoesis 0.1.20 → 0.1.22

package/dist/{chunk-26VCV3IE.js → chunk-SHGYQTZ7.js}

@@ -1,4 +1,5 @@
 import {
+  IndexedStore,
   analyzeTemplate,
   applyMigration,
   baseTemplateName,
@@ -12,6 +13,7 @@ import {
   loadComponents,
   loadTemplate,
   pendingMigrations,
+  publishSite,
   renderReferenceMarkdown,
   validateSite,
   workingStoreRoundTripDiagnostic
@@ -633,202 +635,6 @@ function authorDirectory(users) {
   };
 }
 
-// ../editor-api/src/mcp.ts
-function str(args, key) {
-  const value = args[key];
-  return typeof value === "string" ? value : "";
-}
-function request(method, path, query, bodyText, token) {
-  const body = bodyText === void 0 ? new Uint8Array() : new TextEncoder().encode(bodyText);
-  return {
-    method,
-    path,
-    query: new URLSearchParams(query),
-    getHeader: (name) => name.toLowerCase() === "authorization" && token !== void 0 ? `Bearer ${token}` : void 0,
-    body: async () => body
-  };
-}
-var pathArg = {
-  type: "string",
-  description: 'Site-relative path with forward slashes, e.g. "content/blog/post.json".'
-};
-var TOOL_SPECS = [
-  {
-    name: "list_dir",
-    description: "List the immediate children (files and folders) of a site directory. Use '' or omit for the site root; the top-level folders are content/ (pages), templates/, components/, and public/.",
-    inputSchema: {
-      type: "object",
-      properties: {
-        path: { type: "string", description: "Directory path, '' for the site root." }
-      },
-      additionalProperties: false
-    },
-    toRequest: (args, token) => request("GET", "/api/list", { dir: str(args, "path") }, void 0, token)
-  },
-  {
-    name: "read_file",
-    description: "Read a file's text contents (content JSON, a template/component's HTML, CSS, etc.). Reports an error if the file does not exist.",
-    inputSchema: {
-      type: "object",
-      properties: { path: pathArg },
-      required: ["path"],
-      additionalProperties: false
-    },
-    toRequest: (args, token) => request("GET", "/api/read", { path: str(args, "path") }, void 0, token)
-  },
-  {
-    name: "describe_template",
-    description: "List the fields a template defines (name, type, label, whether required, length limits), so you know what a page using it needs. Pass the template name without its path or extension, e.g. 'article' for templates/article.html.",
-    inputSchema: {
-      type: "object",
-      properties: {
-        name: {
-          type: "string",
-          description: 'Template name without path or extension, e.g. "article".'
-        }
-      },
-      required: ["name"],
-      additionalProperties: false
-    },
-    toRequest: (args, token) => request("GET", "/api/template-fields", { name: str(args, "name") }, void 0, token)
-  },
-  {
-    name: "write_file",
-    description: "Create or overwrite a text file. content/ requires the author role; templates/, components/, and public/ require the developer role. Read the nanoesis://reference resource first for the authoring syntax. For template/component paths the response includes `schemaDelta` (added/removed/typeChanged fields) \u2014 if `typeChanged` contains `destructive: true` or `removed` is non-empty, an auto-stamp has been written and authored content may need migration, so surface to the user before further edits. For content/*.json writes the response may include `parseDiagnostics.unknownTopLevelKeys` \u2014 top-level keys the parser dropped because they are not system keys; content values belong under `fields` (system keys are case-sensitive: `isPublished`, not `IsPublished`). See the reference's 'Authoring guardrails for LLMs' section for the common pitfalls (notably: `data-*` annotations bind to the element, not the token inside it \u2014 moving a token out of its annotated container silently strips them).",
-    inputSchema: {
-      type: "object",
-      properties: {
-        path: pathArg,
-        contents: { type: "string", description: "The full new text contents of the file." }
-      },
-      required: ["path", "contents"],
-      additionalProperties: false
-    },
-    toRequest: (args, token) => request("POST", "/api/write", { path: str(args, "path") }, str(args, "contents"), token)
-  },
-  {
-    name: "delete_path",
-    description: "Delete a file or a whole folder subtree. Same role rules as write_file. Deleting a path that does not exist is a no-op.",
-    inputSchema: {
-      type: "object",
-      properties: { path: pathArg },
-      required: ["path"],
-      additionalProperties: false
-    },
-    toRequest: (args, token) => request("POST", "/api/delete", { path: str(args, "path") }, void 0, token)
-  },
-  {
-    name: "rename_path",
-    description: "Move or rename a file or folder subtree. Refuses to overwrite an existing destination. Requires write rights at both the source and the destination. Renaming a template also requires updating every content item bound to the old name (the validation gate will catch unbound items on publish, but `list_pending_migrations` is the cheaper check).",
-    inputSchema: {
-      type: "object",
-      properties: {
-        from: { type: "string", description: "The current path." },
-        to: { type: "string", description: "The new path." }
-      },
-      required: ["from", "to"],
-      additionalProperties: false
-    },
-    toRequest: (args, token) => request(
-      "POST",
-      "/api/rename",
-      { from: str(args, "from"), to: str(args, "to") },
-      void 0,
-      token
-    )
-  },
-  {
-    name: "validate",
-    description: "Run the validation gate over the whole site and return its diagnostics, without publishing. Use it to check your work: errors would block a publish, warnings (e.g. length constraints) only inform.",
-    inputSchema: { type: "object", properties: {}, additionalProperties: false },
-    toRequest: (_args, token) => request("GET", "/api/validate", {}, void 0, token)
-  },
-  {
-    name: "publish",
-    description: "Compile and publish the whole site. Runs the validation gate first; if anything would break, it reports the problems and writes nothing.",
-    inputSchema: { type: "object", properties: {}, additionalProperties: false },
-    toRequest: (_args, token) => request("POST", "/api/publish", {}, void 0, token)
-  },
-  {
-    name: "list_pending_migrations",
-    description: "List content items whose JSON fields don't match their bound template's schema (orphan fields or missing required fields). Use this after a destructive template edit (you'll see a `stamped` record on write_file) to see what needs migrating, or any time to check site-wide drift.",
-    inputSchema: { type: "object", properties: {}, additionalProperties: false },
-    toRequest: (_args, token) => request("GET", "/api/migrations", {}, void 0, token)
-  },
-  {
-    name: "preview_migration",
-    description: 'For one content item, return the current template HTML, the best-fit snapshot HTML (the "before"), the list of orphan fields with their values, and the names of fields the current template defines. Use this to plan how to migrate (drop, rename, or keep each orphan).',
-    inputSchema: {
-      type: "object",
-      properties: { path: pathArg },
-      required: ["path"],
-      additionalProperties: false
-    },
-    toRequest: (args, token) => request("GET", "/api/migrations/preview", { path: str(args, "path") }, void 0, token)
-  },
-  {
-    name: "apply_migration",
-    description: "Resolve a content item's schema drift in one go. `resolution` is a JSON object: `drop` (array of orphan field names to delete), `rename` (object mapping orphan field name \u2192 current template field name to copy the value into), `keep` (array of orphan field names to leave untouched), and `fill` (object mapping current template field name \u2192 value, for missing required fields). Returns the refreshed pending list.",
-    inputSchema: {
-      type: "object",
-      properties: {
-        path: pathArg,
-        resolution: {
-          type: "string",
-          description: 'A JSON object encoded as a string: { "drop": string[], "rename": { from: to }, "keep": string[], "fill": { name: value } }.'
-        }
-      },
-      required: ["path", "resolution"],
-      additionalProperties: false
-    },
-    toRequest: (args, token) => request(
-      "POST",
-      "/api/migrations/apply",
-      {},
-      JSON.stringify({
-        path: str(args, "path"),
-        resolution: parseResolutionArg(str(args, "resolution"))
-      }),
-      token
-    )
-  }
-];
-function parseResolutionArg(raw) {
-  if (raw === "") return {};
-  try {
-    return JSON.parse(raw);
-  } catch {
-    return {};
-  }
-}
-var MCP_TOOLS = TOOL_SPECS.map(
-  ({ name, description, inputSchema }) => ({ name, description, inputSchema })
-);
-function toResult(response) {
-  const text = typeof response.body === "string" ? response.body : response.body === void 0 ? "" : new TextDecoder().decode(response.body);
-  return { text, isError: response.status >= 400 };
-}
-async function callMcpTool(deps, name, args = {}, options = {}) {
-  const spec = TOOL_SPECS.find((tool) => tool.name === name);
-  if (spec === void 0) return { text: `Unknown tool: ${name}`, isError: true };
-  return toResult(await handleApi(deps, spec.toRequest(args, options.token)));
-}
-var REFERENCE_URI = "nanoesis://reference";
-var MCP_RESOURCES = [
-  {
-    uri: REFERENCE_URI,
-    name: "nanoesis authoring reference",
-    description: "The generated reference for nanoesis templates and content: tokens, field types, annotations, loops, components, and the document shell. Read this before writing templates or content.",
-    mimeType: "text/markdown"
-  }
-];
-function readMcpResource(uri) {
-  if (uri === REFERENCE_URI) {
-    return { text: renderReferenceMarkdown(buildAuthoringReference()), mimeType: "text/markdown" };
-  }
-  return void 0;
-}
-
 // ../editor-api/src/diagnose.ts
 function buildDefaultDiagnostics() {
   const registry = createDiagnosticRegistry();
@@ -1101,8 +907,313 @@ async function anyPublishedContentItem(store, dir = "content") {
   return false;
 }
 
+// ../editor-api/src/create-editor.ts
+function asSink(storage) {
+  const encoder = new TextEncoder();
+  return {
+    write: (path, contents) => storage.put(path, typeof contents === "string" ? encoder.encode(contents) : contents)
+  };
+}
+function createEditor(config) {
+  const working = new IndexedStore(config.editorFiles);
+  const sink = asSink(config.website);
+  const wipeBeforePublish = config.wipeBeforePublish ?? true;
+  const reconcile = config.enumerate === void 0 ? void 0 : async () => working.reconcile([...await config.enumerate()]);
+  const publish = async () => {
+    const validation = await validateSite(working);
+    if (validation.ok && wipeBeforePublish && config.website.wipe !== void 0) {
+      await config.website.wipe();
+    }
+    const dir = config.users === void 0 ? void 0 : authorDirectory(await config.users());
+    const prebuild = typeof config.prebuild === "function" ? await config.prebuild() : config.prebuild;
+    return publishSite(working, sink, {
+      ...config.images !== void 0 && { imageEncoder: config.images },
+      ...config.purge !== void 0 && { purge: config.purge },
+      ...config.baseUrl !== void 0 && { baseUrl: config.baseUrl },
+      ...dir !== void 0 && { authorDirectory: dir },
+      ...prebuild !== void 0 && { prebuild }
+    });
+  };
+  const users = config.users;
+  const deps = {
+    store: working,
+    identity: config.login,
+    publish,
+    diagnostics: config.diagnostics ?? buildDefaultDiagnostics(),
+    ...reconcile !== void 0 && { reconcile },
+    ...config.authEndpoints !== void 0 && { authEndpoints: config.authEndpoints },
+    ...config.userAdmin !== void 0 && { userAdmin: config.userAdmin },
+    ...config.branding !== void 0 && { branding: config.branding },
+    ...users !== void 0 && { authors: async () => authorOptions(await users()) }
+  };
+  return {
+    handleApi: (req) => handleApi(deps, req),
+    publish,
+    store: working,
+    deps
+  };
+}
+function devNoAuth() {
+  console.warn(
+    "[nanoesis] devNoAuth(): every request is treated as an admin. Do not use in production."
+  );
+  return {
+    authenticate: async () => ({
+      userId: "dev",
+      username: "dev",
+      roles: ["author", "developer", "admin"]
+    })
+  };
+}
+
+// ../editor-api/src/serve-asset.ts
+import { readFile } from "fs/promises";
+import { resolve, sep } from "path";
+var MIME = {
+  ".html": "text/html; charset=utf-8",
+  ".js": "application/javascript; charset=utf-8",
+  ".mjs": "application/javascript; charset=utf-8",
+  ".css": "text/css; charset=utf-8",
+  ".json": "application/json; charset=utf-8",
+  ".svg": "image/svg+xml",
+  ".png": "image/png",
+  ".jpg": "image/jpeg",
+  ".jpeg": "image/jpeg",
+  ".ico": "image/x-icon",
+  ".woff": "font/woff",
+  ".woff2": "font/woff2",
+  ".map": "application/json; charset=utf-8"
+};
+function mimeFor(path) {
+  const dot = path.lastIndexOf(".");
+  return dot < 0 ? "application/octet-stream" : MIME[path.slice(dot).toLowerCase()] ?? "application/octet-stream";
+}
+async function serveEditorAsset(distDir, pathname, options = {}) {
+  if (pathname === "/config.json" && options.config !== void 0) {
+    return {
+      status: 200,
+      headers: { "content-type": "application/json; charset=utf-8", "cache-control": "no-store" },
+      body: JSON.stringify(options.config)
+    };
+  }
+  const base = resolve(distDir);
+  const requested = pathname === "/" || pathname === "" ? "/index.html" : pathname;
+  const filePath = resolve(base, requested.replace(/^\/+/, ""));
+  if (filePath !== base && !filePath.startsWith(base + sep)) {
+    return { status: 403, headers: { "content-type": "text/plain" }, body: "Forbidden" };
+  }
+  try {
+    const bytes = new Uint8Array(await readFile(filePath));
+    return { status: 200, headers: { "content-type": mimeFor(filePath) }, body: bytes };
+  } catch (error) {
+    if (error.code !== "ENOENT") throw error;
+    const indexBytes = new Uint8Array(await readFile(resolve(base, "index.html")));
+    return {
+      status: 200,
+      headers: { "content-type": "text/html; charset=utf-8" },
+      body: indexBytes
+    };
+  }
+}
+
+// ../editor-api/src/mcp.ts
+function str(args, key) {
+  const value = args[key];
+  return typeof value === "string" ? value : "";
+}
+function request(method, path, query, bodyText, token) {
+  const body = bodyText === void 0 ? new Uint8Array() : new TextEncoder().encode(bodyText);
+  return {
+    method,
+    path,
+    query: new URLSearchParams(query),
+    getHeader: (name) => name.toLowerCase() === "authorization" && token !== void 0 ? `Bearer ${token}` : void 0,
+    body: async () => body
+  };
+}
+var pathArg = {
+  type: "string",
+  description: 'Site-relative path with forward slashes, e.g. "content/blog/post.json".'
+};
+var TOOL_SPECS = [
+  {
+    name: "list_dir",
+    description: "List the immediate children (files and folders) of a site directory. Use '' or omit for the site root; the top-level folders are content/ (pages), templates/, components/, and public/.",
+    inputSchema: {
+      type: "object",
+      properties: {
+        path: { type: "string", description: "Directory path, '' for the site root." }
+      },
+      additionalProperties: false
+    },
+    toRequest: (args, token) => request("GET", "/api/list", { dir: str(args, "path") }, void 0, token)
+  },
+  {
+    name: "read_file",
+    description: "Read a file's text contents (content JSON, a template/component's HTML, CSS, etc.). Reports an error if the file does not exist.",
+    inputSchema: {
+      type: "object",
+      properties: { path: pathArg },
+      required: ["path"],
+      additionalProperties: false
+    },
+    toRequest: (args, token) => request("GET", "/api/read", { path: str(args, "path") }, void 0, token)
+  },
+  {
+    name: "describe_template",
+    description: "List the fields a template defines (name, type, label, whether required, length limits), so you know what a page using it needs. Pass the template name without its path or extension, e.g. 'article' for templates/article.html.",
+    inputSchema: {
+      type: "object",
+      properties: {
+        name: {
+          type: "string",
+          description: 'Template name without path or extension, e.g. "article".'
+        }
+      },
+      required: ["name"],
+      additionalProperties: false
+    },
+    toRequest: (args, token) => request("GET", "/api/template-fields", { name: str(args, "name") }, void 0, token)
+  },
+  {
+    name: "write_file",
+    description: "Create or overwrite a text file. content/ requires the author role; templates/, components/, and public/ require the developer role. Read the nanoesis://reference resource first for the authoring syntax. For template/component paths the response includes `schemaDelta` (added/removed/typeChanged fields) \u2014 if `typeChanged` contains `destructive: true` or `removed` is non-empty, an auto-stamp has been written and authored content may need migration, so surface to the user before further edits. For content/*.json writes the response may include `parseDiagnostics.unknownTopLevelKeys` \u2014 top-level keys the parser dropped because they are not system keys; content values belong under `fields` (system keys are case-sensitive: `isPublished`, not `IsPublished`). See the reference's 'Authoring guardrails for LLMs' section for the common pitfalls (notably: `data-*` annotations bind to the element, not the token inside it \u2014 moving a token out of its annotated container silently strips them).",
+    inputSchema: {
+      type: "object",
+      properties: {
+        path: pathArg,
+        contents: { type: "string", description: "The full new text contents of the file." }
+      },
+      required: ["path", "contents"],
+      additionalProperties: false
+    },
+    toRequest: (args, token) => request("POST", "/api/write", { path: str(args, "path") }, str(args, "contents"), token)
+  },
+  {
+    name: "delete_path",
+    description: "Delete a file or a whole folder subtree. Same role rules as write_file. Deleting a path that does not exist is a no-op.",
+    inputSchema: {
+      type: "object",
+      properties: { path: pathArg },
+      required: ["path"],
+      additionalProperties: false
+    },
+    toRequest: (args, token) => request("POST", "/api/delete", { path: str(args, "path") }, void 0, token)
+  },
+  {
+    name: "rename_path",
+    description: "Move or rename a file or folder subtree. Refuses to overwrite an existing destination. Requires write rights at both the source and the destination. Renaming a template also requires updating every content item bound to the old name (the validation gate will catch unbound items on publish, but `list_pending_migrations` is the cheaper check).",
+    inputSchema: {
+      type: "object",
+      properties: {
+        from: { type: "string", description: "The current path." },
+        to: { type: "string", description: "The new path." }
+      },
+      required: ["from", "to"],
+      additionalProperties: false
+    },
+    toRequest: (args, token) => request(
+      "POST",
+      "/api/rename",
+      { from: str(args, "from"), to: str(args, "to") },
+      void 0,
+      token
+    )
+  },
+  {
+    name: "validate",
+    description: "Run the validation gate over the whole site and return its diagnostics, without publishing. Use it to check your work: errors would block a publish, warnings (e.g. length constraints) only inform.",
+    inputSchema: { type: "object", properties: {}, additionalProperties: false },
+    toRequest: (_args, token) => request("GET", "/api/validate", {}, void 0, token)
+  },
+  {
+    name: "publish",
+    description: "Compile and publish the whole site. Runs the validation gate first; if anything would break, it reports the problems and writes nothing.",
+    inputSchema: { type: "object", properties: {}, additionalProperties: false },
+    toRequest: (_args, token) => request("POST", "/api/publish", {}, void 0, token)
+  },
+  {
+    name: "list_pending_migrations",
+    description: "List content items whose JSON fields don't match their bound template's schema (orphan fields or missing required fields). Use this after a destructive template edit (you'll see a `stamped` record on write_file) to see what needs migrating, or any time to check site-wide drift.",
+    inputSchema: { type: "object", properties: {}, additionalProperties: false },
+    toRequest: (_args, token) => request("GET", "/api/migrations", {}, void 0, token)
+  },
+  {
+    name: "preview_migration",
+    description: 'For one content item, return the current template HTML, the best-fit snapshot HTML (the "before"), the list of orphan fields with their values, and the names of fields the current template defines. Use this to plan how to migrate (drop, rename, or keep each orphan).',
+    inputSchema: {
+      type: "object",
+      properties: { path: pathArg },
+      required: ["path"],
+      additionalProperties: false
+    },
+    toRequest: (args, token) => request("GET", "/api/migrations/preview", { path: str(args, "path") }, void 0, token)
+  },
+  {
+    name: "apply_migration",
+    description: "Resolve a content item's schema drift in one go. `resolution` is a JSON object: `drop` (array of orphan field names to delete), `rename` (object mapping orphan field name \u2192 current template field name to copy the value into), `keep` (array of orphan field names to leave untouched), and `fill` (object mapping current template field name \u2192 value, for missing required fields). Returns the refreshed pending list.",
+    inputSchema: {
+      type: "object",
+      properties: {
+        path: pathArg,
+        resolution: {
+          type: "string",
+          description: 'A JSON object encoded as a string: { "drop": string[], "rename": { from: to }, "keep": string[], "fill": { name: value } }.'
+        }
+      },
+      required: ["path", "resolution"],
+      additionalProperties: false
+    },
+    toRequest: (args, token) => request(
+      "POST",
+      "/api/migrations/apply",
+      {},
+      JSON.stringify({
+        path: str(args, "path"),
+        resolution: parseResolutionArg(str(args, "resolution"))
+      }),
+      token
+    )
+  }
+];
+function parseResolutionArg(raw) {
+  if (raw === "") return {};
+  try {
+    return JSON.parse(raw);
+  } catch {
+    return {};
+  }
+}
+var MCP_TOOLS = TOOL_SPECS.map(
+  ({ name, description, inputSchema }) => ({ name, description, inputSchema })
+);
+function toResult(response) {
+  const text = typeof response.body === "string" ? response.body : response.body === void 0 ? "" : new TextDecoder().decode(response.body);
+  return { text, isError: response.status >= 400 };
+}
+async function callMcpTool(deps, name, args = {}, options = {}) {
+  const spec = TOOL_SPECS.find((tool) => tool.name === name);
+  if (spec === void 0) return { text: `Unknown tool: ${name}`, isError: true };
+  return toResult(await handleApi(deps, spec.toRequest(args, options.token)));
+}
+var REFERENCE_URI = "nanoesis://reference";
+var MCP_RESOURCES = [
+  {
+    uri: REFERENCE_URI,
+    name: "nanoesis authoring reference",
+    description: "The generated reference for nanoesis templates and content: tokens, field types, annotations, loops, components, and the document shell. Read this before writing templates or content.",
+    mimeType: "text/markdown"
+  }
+];
+function readMcpResource(uri) {
+  if (uri === REFERENCE_URI) {
+    return { text: renderReferenceMarkdown(buildAuthoringReference()), mimeType: "text/markdown" };
+  }
+  return void 0;
+}
+
 // ../editor-api/src/branding.ts
-import { mkdir, readFile, rename, rm, writeFile } from "fs/promises";
+import { mkdir, readFile as readFile2, rename, rm, writeFile } from "fs/promises";
 import { dirname, join } from "path";
 var EMPTY = { name: null, logo: null };
 var InMemoryBrandingStore = class {
@@ -1144,7 +1255,7 @@ var FileBrandingStore = class {
   logoPath;
   async loadMeta() {
     try {
-      const raw = await readFile(this.metaPath, "utf8");
+      const raw = await readFile2(this.metaPath, "utf8");
       const text = raw.charCodeAt(0) === 65279 ? raw.slice(1) : raw;
       const parsed = JSON.parse(text);
       return {
@@ -1172,7 +1283,7 @@ var FileBrandingStore = class {
     const meta = await this.loadMeta();
     if (meta.logo === null) return null;
     try {
-      const bytes = await readFile(this.logoPath);
+      const bytes = await readFile2(this.logoPath);
       return { bytes: new Uint8Array(bytes), contentType: meta.logo.contentType };
     } catch (error) {
       if (error.code === "ENOENT") return null;
@@ -1203,10 +1314,6 @@ export {
   handleApi,
   authorOptions,
   authorDirectory,
-  MCP_TOOLS,
-  callMcpTool,
-  MCP_RESOURCES,
-  readMcpResource,
   buildDefaultDiagnostics,
   homeTemplateMissingDiagnostic,
   recreateHomeTemplateRepair,
@@ -1216,6 +1323,13 @@ export {
   templateSuffixConflictDiagnostic,
   copySnapshotToCurrentRepair,
   pendingMigrationsDiagnostic,
+  createEditor,
+  devNoAuth,
+  serveEditorAsset,
+  MCP_TOOLS,
+  callMcpTool,
+  MCP_RESOURCES,
+  readMcpResource,
   InMemoryBrandingStore,
   FileBrandingStore
 };