kizlo 0.1.0 → 0.2.0

package/dist/cli/wp/utils.js

@@ -1,7 +1,8 @@
-import { CONFIG_FILES, CREDENTIALS_REL, SEED_MARKER_OPTION, SEED_VERSION } from "./constants.js";
+import { isLocalPlugin } from "./types.js";
 import { compose, wpCli } from "./docker.js";
-import { dirname, resolve } from "node:path";
+import { CONFIG_FILES, CREDENTIALS_REL, SEED_MARKER_OPTION, SEED_VERSION } from "./constants.js";
 import { existsSync, readFileSync } from "node:fs";
+import { basename, dirname, resolve } from "node:path";
 
 //#region src/cli/wp/utils.ts
 /**
@@ -32,6 +33,14 @@ async function isSeeded() {
 function githubRelease(repo, tag) {
 	return `https://github.com/${repo}/releases/download/${tag}/${tag}.zip`;
 }
+/**
+* Download URL for a Kizlo plugin's latest release, served by kizlo.io (it 302s to
+* the current GitHub release asset). Always tracks the newest published version —
+* use {@link githubRelease} instead to pin a specific tag.
+*/
+function kizloRelease(slug) {
+	return `https://kizlo.io/plugins/${slug}/download`;
+}
 /** Resolve a `PluginSource` to the `(name, source)` pair `ensurePlugin` needs. */
 function resolvePluginSource(plugin) {
 	return typeof plugin === "string" ? [plugin, plugin] : [plugin.name, plugin.source];
@@ -76,6 +85,39 @@ async function ensurePlugin(name, source) {
 	]);
 }
 /**
+* Activate a bind-mounted local plugin by its directory basename (the slug the
+* mount lands at under `wp-content/plugins`). Idempotent: the files arrive via the
+* compose bind, so there's nothing to install — just activate if it isn't already.
+*/
+async function activateLocalPlugin(pluginPath) {
+	const slug = basename(pluginPath);
+	if ((await compose([
+		"exec",
+		"-T",
+		"wp-cli",
+		"wp",
+		"plugin",
+		"is-active",
+		slug
+	])).code !== 0) await wpCli([
+		"plugin",
+		"activate",
+		slug
+	]);
+}
+/**
+* Ensure every plugin is active. Installable sources go first so a bind-mounted
+* local plugin that depends on one (e.g. a WooCommerce extension) finds it already
+* present; then each {@link LocalPlugin} is activated by basename. A local plugin
+* whose slug matches an installable (e.g. mounting `kizlo` over the released
+* `kizlo`) is seen as already installed, so `ensurePlugin` activates the live
+* files instead of downloading over them.
+*/
+async function ensurePlugins(plugins) {
+	for (const plugin of plugins) if (!isLocalPlugin(plugin)) await ensurePlugin(...resolvePluginSource(plugin));
+	for (const plugin of plugins) if (isLocalPlugin(plugin)) await activateLocalPlugin(plugin.path);
+}
+/**
 * The directory holding `kizlo.config.*`, found by walking up from `cwd` (falling
 * back to `cwd` when none is found). Anchoring the credentials artifact here —
 * rather than each process's cwd — is what lets the CLI writer and the test reader
@@ -100,6 +142,22 @@ function getTestCredentials() {
 	cached = JSON.parse(readFileSync(credentialsPath(), "utf-8"));
 	return cached;
 }
+/**
+* The host port the credentials artifact advertises, if it exists — the port a warm test
+* stack is pinned to. Tests connect via this URL, so a reused stack must come back up on
+* the same port; `undefined` means no stack has ever been seeded here (a cold boot).
+*/
+function recordedPort() {
+	const path$1 = credentialsPath();
+	if (!existsSync(path$1)) return void 0;
+	try {
+		const { url } = JSON.parse(readFileSync(path$1, "utf-8"));
+		const port = new URL(url).port;
+		return port ? Number(port) : void 0;
+	} catch {
+		return;
+	}
+}
 
 //#endregion
-export { credentialsPath, ensurePlugin, findConfigDir, getTestCredentials, githubRelease, isSeeded, resolvePluginSource };
+export { activateLocalPlugin, credentialsPath, ensurePlugin, ensurePlugins, findConfigDir, getTestCredentials, githubRelease, isSeeded, kizloRelease, recordedPort, resolvePluginSource };

package/dist/cli/wp/watchdog.d.ts

@@ -0,0 +1 @@
+export { };

package/dist/cli/wp/watchdog.js

@@ -0,0 +1,45 @@
+import { execFile } from "node:child_process";
+import { promisify } from "node:util";
+
+//#region src/cli/wp/watchdog.ts
+const exec = promisify(execFile);
+/**
+* Standalone watchdog process spawned (detached, in its own session) by a foreground
+* `kizlo dev`. It polls the parent PID and, the moment the parent is gone — for *any*
+* reason the parent itself couldn't handle: terminal/tab closed, SIGHUP, SIGKILL, a
+* crash — stops that project's containers. This is the guarantee the in-process signal
+* handlers can't give, because a dying process can't be trusted to finish async work.
+*
+* Invoked as: `node watchdog.js <parentPid> <composeProject>`.
+*/
+const parentPid = Number(process.argv[2]);
+const project = process.argv[3];
+function parentAlive() {
+	try {
+		process.kill(parentPid, 0);
+		return true;
+	} catch {
+		return false;
+	}
+}
+async function stopStack() {
+	try {
+		const { stdout } = await exec("docker", [
+			"ps",
+			"-q",
+			"--filter",
+			`label=com.docker.compose.project=${project}`
+		]);
+		const ids = stdout.split("\n").filter(Boolean);
+		if (ids.length) await exec("docker", ["stop", ...ids]);
+	} catch {}
+}
+if (!parentPid || !project) process.exit(1);
+const timer = setInterval(() => {
+	if (parentAlive()) return;
+	clearInterval(timer);
+	stopStack().then(() => process.exit(0));
+}, 1e3);
+
+//#endregion
+export {  };

package/dist/client.d.ts

@@ -15,7 +15,7 @@ declare class KizloClient<TRouter extends AnyProcedureRouter> {
 }
 /**
  * Creates a browser client for a generated contract. Defaults the URL to the
- * current origin; framework packages wrap this to resolve it from their env.
+ * current origin (`window.location.origin`); framework packages wrap this to resolve it from their env.
  */
 declare function createKizloClient<T extends AnyProcedureRouter>(contract: T, options?: {
   url?: string;

package/dist/client.js

@@ -37,12 +37,12 @@ var KizloClient = class {
 		})));
 	}
 	getUrl() {
-		return this.config.url ?? window.location.href;
+		return this.config.url ?? window.location.origin;
 	}
 };
 /**
 * Creates a browser client for a generated contract. Defaults the URL to the
-* current origin; framework packages wrap this to resolve it from their env.
+* current origin (`window.location.origin`); framework packages wrap this to resolve it from their env.
 */
 function createKizloClient(contract, options) {
 	return new KizloClient({

package/dist/config.d.ts

@@ -2,9 +2,48 @@ import { Fixture } from "./cli/wp/types.js";
 import "./test.js";
 
 //#region src/config.d.ts
-interface KizloTestConfig {
+interface KizloDevConfig {
+  /**
+   * Folder where your local WordPress install lives, relative to the config dir.
+   * The entire install (core, themes, uploads, plugins) is bind-mounted here, so
+   * you browse and edit every file from your file manager and your changes are
+   * live. This is your persistent dev site — pick a real, visible folder (e.g.
+   * `"wordpress"`), not a hidden one, and don't delete it. `reset` wipes it.
+   */
+  path: string;
   /** Published WP port (default 8080). */
   port?: number;
+  /**
+   * Adopt an existing WordPress site instead of provisioning a blank one. Points at a
+   * `.tar.gz` archive (path relative to the config dir) whose root holds a `wordpress/`
+   * directory (the install) and a single `.sql` dump (the database). Applied when the
+   * stack is fresh — the first `kizlo dev`, or after a `kizlo dev reset` — and ignored
+   * once the stack is provisioned. Keep the archive outside `path` (reset wipes that).
+   */
+  byo?: string;
+  /**
+   * Host port the dev MySQL is published on (default 3307), bound to `127.0.0.1` so
+   * you can point a SQL client (TablePlus, DBeaver, `mysql`) at the database to
+   * inspect or edit tables directly. Connect with db `wordpress`, user `wordpress`,
+   * password `wppass`. Pick a port that's free — change it if you run multiple stacks
+   * or already have MySQL on the default.
+   */
+  dbPort?: number;
+  /**
+   * Code-defined seed data for a **fresh** dev stack — the same {@link Fixture}s the
+   * test stack uses, so you can populate your dev site from versioned code instead of a
+   * blank install. Each fixture also declares the plugins it needs — wp.org slugs / zip
+   * sources to install, or `{ path }` local directories bind-mounted live so your edits
+   * show up without a reinstall — which the dev stack ensures every run. Each fixture's
+   * `seed` runs once over REST (and may drop to wp-cli) on the first `kizlo dev` and
+   * after `kizlo dev reset`; existing stacks are left alone. Mutually exclusive with
+   * {@link byo} (which brings its own data).
+   */
+  fixtures?: Fixture[];
+}
+interface KizloTestConfig {
+  /** Published WP port (default 8889). */
+  port?: number;
   /** Extension fixtures to install + seed. */
   fixtures?: Fixture[];
   /**
@@ -31,9 +70,16 @@ interface KizloGlobalConfig {
    * tsconfig at init; omit (or empty) to use relative imports.
    */
   alias?: string;
-  /** WordPress test environment used by `kizlo wp` and `kizlo test`. */
+  /**
+   * Base name for the local Docker stacks (`<name>-dev`, `<name>-test`). Defaults
+   * to the sanitized `package.json` name, falling back to the config dir basename.
+   */
+  name?: string;
+  /** Local WordPress dev stack used by `kizlo dev`. */
+  dev?: KizloDevConfig;
+  /** WordPress test environment used by `kizlo test`. */
   test?: KizloTestConfig;
 }
 declare function defineConfig(config: KizloGlobalConfig): KizloGlobalConfig;
 //#endregion
-export { KizloGlobalConfig, KizloTestConfig, defineConfig };
+export { KizloDevConfig, KizloGlobalConfig, KizloTestConfig, defineConfig };

package/dist/context.d.ts

@@ -1,9 +1,9 @@
 import { WordPressCredentials } from "./wordpress/types.js";
 import "./wordpress/index.js";
 import { AuthUser } from "./adapters/auth.js";
+import { PreviewTokenPayload } from "./shared/schema.js";
 import { ConnInfo } from "./adapters/geo.js";
 import { Logger } from "./adapters/logger.js";
-import { PreviewTokenPayload } from "./shared/schema.js";
 import { CookiesStorage } from "./cookie.js";
 import { ServiceAdapters } from "./kizlo.js";
 import { Service } from "./service.js";
@@ -19,16 +19,27 @@ type ConnInfoFn = () => Promise<ConnInfo | null>;
 type VerifyCaptchaFn = (token: string) => Promise<boolean>;
 type VerifyPreviewTokenFn = (token: string) => Promise<PreviewTokenPayload | null>;
 interface ServerContext {
+  /** The incoming HTTP `Request`, or `null` for server-side (non-HTTP) invocations. */
   request: Request | null;
+  /** Response headers to be sent (e.g. `Set-Cookie`), or `null` server-side. */
   headers: Headers | null;
+  /** The configured logger adapter. */
   logger: Logger;
+  /** Typed service clients — the WordPress client at `service.wordpress`, with more services added over time. */
   service: Service;
+  /** The resolved context config: site secret, adapters, and WordPress credentials. */
   config: ContextConfig;
+  /** Resolve the caller's connection info (IP, geo) via the geo adapter, or `null`. */
   getConnInfo: ConnInfoFn;
+  /** Resolve the authenticated user via the auth adapter, or `null`. */
   getAuthUser: AuthUserFn;
+  /** Read and write cookies through the cookies adapter. */
   cookies: CookiesStorage;
+  /** Verify a CAPTCHA token via the captcha adapter. */
   verifyCaptcha: VerifyCaptchaFn;
+  /** Verify a preview token and return its payload, or `null`. */
   verifyPreviewToken: VerifyPreviewTokenFn;
+  /** How the procedure was called: `"client"` (over HTTP) or `"server"` (direct server invocation). */
   invokedBy: "client" | "server";
 }
 declare class Context {

package/dist/context.js

@@ -20,7 +20,7 @@ var Context = class {
 		const headers = new Headers();
 		return {
 			headers,
-			request,
+			request: request.clone(),
 			config: this.config,
 			logger: this.logger,
 			service: this.service,

package/dist/index.d.ts

@@ -14,20 +14,25 @@ import { CommentService } from "./wordpress/comment/service.js";
 import { CART_HASH_HEADER_KEY, SAFE_REQUEST_TIMEOUT, UNEXPECTED_BODY_SNIPPET_LENGTH, WC_CORE_BASE, WC_STORE_BASE, WP_AUTH_HEADER_KEY, WP_AUTH_TYPE, WP_CORE_BASE, WP_KIZLO_BASE } from "./wordpress/constants.js";
 import { isWordPressResourceError } from "./wordpress/utils.js";
 import "./wordpress/index.js";
-import { AuthAdapter, AuthUser, authMock } from "./adapters/auth.js";
-import { CaptchaAdapter, altcha, arkose, friendlyCaptcha, hcaptcha, recaptcha, turnstile } from "./adapters/captcha.js";
-import { ConnInfo, GeoAdapter, geoMock } from "./adapters/geo.js";
-import { geoVercelNext } from "./adapters/geo.vercel.js";
-import { ConsoleLogAdapterOptions, Environment, LogLevel, LogPayload, Logger, LoggerAdapter, consoleLog, noopAdapter } from "./adapters/logger.js";
+import { DevPluginSource, Fixture, FixtureCleanupFn, FixtureSeedFn, JsonValue, LocalPlugin, PluginSource, SeedContext, TestAdminUser, TestCredentials, TestUser, defineFixture, isLocalPlugin } from "./cli/wp/types.js";
+import { AuthAdapter, AuthGetUser, AuthUser, authMock, createAuthAdapter } from "./adapters/auth.js";
+import { CaptchaAdapter, altcha, arkose, createCaptchaAdapter, friendlyCaptcha, hcaptcha, recaptcha, turnstile } from "./adapters/captcha.js";
 import { CurrencyFormat, IdentifierInput, LIST_ORDER, ListMetadata, ListOrder, Media, PreviewTokenData, PreviewTokenPayload } from "./shared/schema.js";
-import { AnyContext, AnyNestedClient, CookiesAdapter, HTTPMethod, List, MaybeOptionalOptions, RedirectInput, RedirectStatus } from "./shared/types.js";
-import { AnyWebhookEventSchema, AnyWebhookEvents, EventHandler, InferWebhookEventUnion, WebhookHandlerFn, WebhookOptions, createEventHandler, createWebhookRouter } from "./webhook/index.js";
+import { AnyContext, AnyNestedClient, CookiesAdapter, CookiesDeleteAll, CookiesGetAll, CookiesSetAll, HTTPMethod, List, MaybeOptionalOptions, RedirectInput, RedirectStatus } from "./shared/types.js";
+import { createCookiesAdapter } from "./adapters/cookies.js";
+import { ConnInfo, GeoAdapter, GeoGetConnInfo, createGeoAdapter, geoMock } from "./adapters/geo.js";
+import { geoVercelNext } from "./adapters/geo.vercel.js";
+import { ConsoleLogAdapterOptions, Environment, LogLevel, LogPayload, Logger, LoggerAdapter, consoleLog, createLoggerAdapter, noopAdapter } from "./adapters/logger.js";
+import { AnyEventSchema, AnyEvents, EventHandler, EventHandlerFn, InferEventUnion, WebhookOptions, createEventHandler, createWebhookRouter } from "./webhook/index.js";
 import { AnyExtension, Extension, ExtensionInitFn, ExtensionInitOptions, ExtensionInitResult, ExtractExtensionRouter, InferExtensionRouter, createExtension } from "./shared/extension.js";
-import { COMMON_ERRORS, CommonErrorCode, CommonErrorLiteral, CommonErrorMap, DefinedErrorLike, DefinedErrorMapLike, KizloError, KizloErrorOptions, ThrowableErrorFn, ThrowableErrorMap, WithCommonErrorMap, createThrowableErrorMap, defineErrorMap, isKizloError, toKizloError } from "./shared/error.js";
-import { AnyKizloConfig, CreateKizloOptions, Kizlo, KizloConfig, RootRouter, S2SClient, ServiceAdapters, createKizlo, resolveKizloConfig } from "./kizlo.js";
+import { COMMON_ERRORS, CommonErrorCode, CommonErrorLiteral, CommonErrorMap, DefinedErrorMapLike, ErrorDefinition, KizloError, KizloErrorOptions, ThrowableErrorFn, ThrowableErrorMap, WithCommonErrorMap, createThrowableErrorMap, defineErrorMap, isKizloError, toKizloError } from "./shared/error.js";
+import { AnyKizloConfig, CreateKizloOptions, Kizlo, KizloConfig, KizloTarget, RootRouter, S2SClient, ServiceAdapters, createKizlo, resolveKizloConfig } from "./kizlo.js";
+import { KizloAuthorsSettings, KizloAuthorsSettingsInput, KizloCrawlingSettings, KizloCrawlingSettingsInput, KizloIdentitySettings, KizloIdentitySettingsInput, KizloMedia, KizloOrganizationFounder, KizloOrganizationSettings, KizloOrganizationSettingsInput, KizloPersonSettings, KizloPersonSettingsInput, KizloPostStatus, KizloPostTypeSettings, KizloPostTypeSettingsInput, KizloSettings, KizloSiteSettings, KizloSiteSettingsInput, KizloSocialProfile, KizloTaxonomySettings, KizloTaxonomySettingsInput, KizloWebhookSettings, KizloWebhookSettingsInput } from "./settings/service.interface.js";
+import { KizloSettingsService } from "./settings/service.js";
 import { Service, ServiceConfig } from "./service.js";
 import { AuthUserFn, ConnInfoFn, Context, ContextConfig, ServerContext, VerifyCaptchaFn, VerifyPreviewTokenFn } from "./context.js";
-import { AnyMiddleware, AnyProcedure, AnyProcedureRouter, ExtractMiddlewareContextOutput, ExtractParams, ExtractProcedureByScope, InvocationScope, Middleware, MiddlewareHandler, MiddlewareNextFn, MiddlewareOptions, MiddlewareResult, OpenapiPart, Procedure, ProcedureContext, ProcedureHandler, ProcedureOptions, ResolveParamsPart, ResolvedSchemaInput, ResolvedSchemaOutput, RouterDepthTuple, SchemaIO, buildProcedure, combineDetailed, createMiddleware, createProcedure, handleUnexpectedError, schemaType } from "./shared/procedure.js";
+import { AnyMiddleware, ExtractMiddlewareContextOutput, InferUses, Middleware, MiddlewareHandler, MiddlewareNextFn, MiddlewareOptions, MiddlewareResult, createMiddleware } from "./shared/middleware.js";
+import { AnyProcedure, AnyProcedureRouter, BaseHandlerOptions, ExtractParams, ExtractProcedureByScope, InvocationScope, OpenapiPart, Procedure, ProcedureContext, ProcedureErrors, ProcedureHandler, ProcedureOptions, ResolveParamsPart, ResolvedSchemaInput, ResolvedSchemaOutput, RouterDepthTuple, SchemaIO, buildProcedure, combineDetailed, createProcedure, handleUnexpectedError, schemaType } from "./shared/procedure.js";
 import { KizloClient, KizloClientConfig, createKizloClient } from "./client.js";
 import { CONTENT_TYPES, ContentType, ListSitemapUrlInput, ListSitemapUrlInputBase, Robots, RobotsRule, Seo, SeoHead, SeoSchema, Sitemap, SitemapList, SitemapUrl, SitemapUrlImage, SitemapUrlList } from "./seo/schema.js";
 import { WPK_ListSitemapUrlInput, WPK_RobotRule, WPK_Robots, WPK_Seo, WPK_Sitemap, WPK_SitemapContentType, WPK_SitemapUrl, WPK_SitemapUrlImage } from "./seo/types.js";
@@ -36,4 +41,4 @@ import { compare, hash, hmac } from "./shared/crypto.js";
 import { Identifier, parseIdentifier } from "./shared/identifier.js";
 import { createOrpcRouter } from "./shared/router.js";
 import { deserializeCurrencyFormat, deserializeListMetadata, emptyList, serializeCurrencyFormat } from "./shared/serialize.js";
-export { AnyContext, AnyExtension, AnyKizloConfig, AnyMiddleware, AnyNestedClient, AnyProcedure, AnyProcedureRouter, AnyWebhookEventSchema, AnyWebhookEvents, AuthAdapter, AuthUser, AuthUserFn, CART_HASH_HEADER_KEY, COMMON_ERRORS, CONTENT_TYPES, CaptchaAdapter, CommentService, CommonErrorCode, CommonErrorLiteral, CommonErrorMap, ConnInfo, ConnInfoFn, ConsoleLogAdapterOptions, ContentType, Context, ContextConfig, Contract, ContractProcedure, CookiesAdapter, CreateKizloOptions, CurrencyFormat, DefinedErrorLike, DefinedErrorMapLike, Environment, EventHandler, Extension, ExtensionInitFn, ExtensionInitOptions, ExtensionInitResult, ExtractExtensionRouter, ExtractMiddlewareContextOutput, ExtractParams, ExtractProcedureByScope, GeoAdapter, HTTPMethod, Identifier, IdentifierInput, InferExtensionRouter, InferWebhookEventUnion, InvocationScope, Kizlo, KizloClient, KizloClientConfig, KizloConfig, KizloError, KizloErrorOptions, LIST_ORDER, List, ListMetadata, ListOrder, ListSitemapUrlInput, ListSitemapUrlInputBase, LogLevel, LogPayload, Logger, LoggerAdapter, MaybeOptionalOptions, Media, MenuItemService, MenuService, Middleware, MiddlewareHandler, MiddlewareNextFn, MiddlewareOptions, MiddlewareResult, OpenapiPart, PostService, PreviewTokenData, PreviewTokenPayload, Procedure, ProcedureContext, ProcedureHandler, ProcedureOptions, RedirectInput, RedirectStatus, ResolveParamsPart, ResolvedSchemaInput, ResolvedSchemaOutput, Robots, RobotsRule, RootRouter, RouterDepthTuple, S2SClient, SAFE_REQUEST_TIMEOUT, SchemaIO, Seo, SeoHead, SeoSchema, ServerContext, Service, ServiceAdapters, ServiceConfig, Sitemap, SitemapList, SitemapUrl, SitemapUrlImage, SitemapUrlList, ThrowableErrorFn, ThrowableErrorMap, UNEXPECTED_BODY_SNIPPET_LENGTH, UserService, VerifyCaptchaFn, VerifyPreviewTokenFn, WC_CORE_BASE, WC_STORE_BASE, WPK_ListSitemapUrlInput, WPK_RobotRule, WPK_Robots, WPK_Seo, WPK_Sitemap, WPK_SitemapContentType, WPK_SitemapUrl, WPK_SitemapUrlImage, WP_AUTH_HEADER_KEY, WP_AUTH_TYPE, WP_CORE_BASE, WP_Comment, WP_CommentAvatarUrls, WP_CommentContent, WP_CommentContentInput, WP_CommentCreateErrorCode, WP_CommentCreateInput, WP_CommentDeleteErrorCode, WP_CommentDeleteInput, WP_CommentDeleteResponse, WP_CommentLinks, WP_CommentListErrorCode, WP_CommentListInput, WP_CommentOrderBy, WP_CommentRetrieveErrorCode, WP_CommentRetrieveInput, WP_CommentStatus, WP_CommentStatusFilter, WP_CommentStatusInput, WP_CommentType, WP_CommentUpdateErrorCode, WP_CommentUpdateInput, WP_CommonErrorCode, WP_Context, WP_CurrencyFormat, WP_Error, WP_ErrorData, WP_KIZLO_BASE, WP_Link, WP_List, WP_ListMetadata, WP_ListOrder, WP_Menu, WP_MenuCreateErrorCode, WP_MenuCreateInput, WP_MenuDeleteErrorCode, WP_MenuDeleteInput, WP_MenuDeleteResponse, WP_MenuItem, WP_MenuItemCreateErrorCode, WP_MenuItemCreateInput, WP_MenuItemDeleteErrorCode, WP_MenuItemDeleteInput, WP_MenuItemDeleteResponse, WP_MenuItemLinks, WP_MenuItemListErrorCode, WP_MenuItemListInput, WP_MenuItemOrderBy, WP_MenuItemRetrieveErrorCode, WP_MenuItemRetrieveInput, WP_MenuItemStatus, WP_MenuItemStatusFilter, WP_MenuItemTarget, WP_MenuItemTaxRelation, WP_MenuItemTitle, WP_MenuItemTitleInput, WP_MenuItemType, WP_MenuItemUpdateErrorCode, WP_MenuItemUpdateInput, WP_MenuLinks, WP_MenuListErrorCode, WP_MenuListInput, WP_MenuOrderBy, WP_MenuRetrieveErrorCode, WP_MenuRetrieveInput, WP_MenuUpdateErrorCode, WP_MenuUpdateInput, WP_Post, WP_PostCommentStatus, WP_PostContent, WP_PostContentInput, WP_PostCreateErrorCode, WP_PostCreateInput, WP_PostDeleteErrorCode, WP_PostDeleteInput, WP_PostDeleteResponse, WP_PostExcerpt, WP_PostExcerptInput, WP_PostFormat, WP_PostGuid, WP_PostLinks, WP_PostListErrorCode, WP_PostListInput, WP_PostOrderBy, WP_PostRetrieveErrorCode, WP_PostRetrieveInput, WP_PostStatus, WP_PostStatusFilter, WP_PostTaxRelation, WP_PostTitle, WP_PostTitleInput, WP_PostUpdateErrorCode, WP_PostUpdateInput, WP_RequestInput, WP_Result, WP_User, WP_UserAvatarUrls, WP_UserCapabilities, WP_UserCreateErrorCode, WP_UserCreateInput, WP_UserDeleteErrorCode, WP_UserDeleteInput, WP_UserDeleteMeErrorCode, WP_UserDeleteMeInput, WP_UserDeleteMeResponse, WP_UserDeleteResponse, WP_UserLinks, WP_UserListErrorCode, WP_UserListInput, WP_UserOrderBy, WP_UserRetrieveErrorCode, WP_UserRetrieveInput, WP_UserRetrieveMeErrorCode, WP_UserRetrieveMeInput, WP_UserUpdateErrorCode, WP_UserUpdateInput, WP_UserUpdateMeErrorCode, WP_UserUpdateMeInput, WP_UserWho, WebhookHandlerFn, WebhookOptions, WithCommonErrorMap, WordPressCredentials, WordPressService, altcha, arkose, authMock, buildProcedure, combineDetailed, compare, consoleLog, createEventHandler, createExtension, createKizlo, createKizloClient, createMiddleware, createOrpcRouter, createProcedure, createThrowableErrorMap, createWebhookRouter, defineErrorMap, deserializeCurrencyFormat, deserializeListMetadata, emptyList, friendlyCaptcha, generateContract, geoMock, geoVercelNext, handleUnexpectedError, hash, hcaptcha, hmac, isContractProcedure, isKizloError, isWordPressResourceError, noopAdapter, parseIdentifier, recaptcha, resolveKizloConfig, restoreContract, schemaType, serializeCurrencyFormat, toKizloError, turnstile };
+export { AnyContext, AnyEventSchema, AnyEvents, AnyExtension, AnyKizloConfig, AnyMiddleware, AnyNestedClient, AnyProcedure, AnyProcedureRouter, AuthAdapter, AuthGetUser, AuthUser, AuthUserFn, BaseHandlerOptions, CART_HASH_HEADER_KEY, COMMON_ERRORS, CONTENT_TYPES, CaptchaAdapter, CommentService, CommonErrorCode, CommonErrorLiteral, CommonErrorMap, ConnInfo, ConnInfoFn, ConsoleLogAdapterOptions, ContentType, Context, ContextConfig, Contract, ContractProcedure, CookiesAdapter, CookiesDeleteAll, CookiesGetAll, CookiesSetAll, CreateKizloOptions, CurrencyFormat, DefinedErrorMapLike, DevPluginSource, Environment, ErrorDefinition, EventHandler, EventHandlerFn, Extension, ExtensionInitFn, ExtensionInitOptions, ExtensionInitResult, ExtractExtensionRouter, ExtractMiddlewareContextOutput, ExtractParams, ExtractProcedureByScope, Fixture, FixtureCleanupFn, FixtureSeedFn, GeoAdapter, GeoGetConnInfo, HTTPMethod, Identifier, IdentifierInput, InferEventUnion, InferExtensionRouter, InferUses, InvocationScope, JsonValue, Kizlo, KizloAuthorsSettings, KizloAuthorsSettingsInput, KizloClient, KizloClientConfig, KizloConfig, KizloCrawlingSettings, KizloCrawlingSettingsInput, KizloError, KizloErrorOptions, KizloIdentitySettings, KizloIdentitySettingsInput, KizloMedia, KizloOrganizationFounder, KizloOrganizationSettings, KizloOrganizationSettingsInput, KizloPersonSettings, KizloPersonSettingsInput, KizloPostStatus, KizloPostTypeSettings, KizloPostTypeSettingsInput, KizloSettings, KizloSettingsService, KizloSiteSettings, KizloSiteSettingsInput, KizloSocialProfile, KizloTarget, KizloTaxonomySettings, KizloTaxonomySettingsInput, KizloWebhookSettings, KizloWebhookSettingsInput, LIST_ORDER, List, ListMetadata, ListOrder, ListSitemapUrlInput, ListSitemapUrlInputBase, LocalPlugin, LogLevel, LogPayload, Logger, LoggerAdapter, MaybeOptionalOptions, Media, MenuItemService, MenuService, Middleware, MiddlewareHandler, MiddlewareNextFn, MiddlewareOptions, MiddlewareResult, OpenapiPart, PluginSource, PostService, PreviewTokenData, PreviewTokenPayload, Procedure, ProcedureContext, ProcedureErrors, ProcedureHandler, ProcedureOptions, RedirectInput, RedirectStatus, ResolveParamsPart, ResolvedSchemaInput, ResolvedSchemaOutput, Robots, RobotsRule, RootRouter, RouterDepthTuple, S2SClient, SAFE_REQUEST_TIMEOUT, SchemaIO, SeedContext, Seo, SeoHead, SeoSchema, ServerContext, Service, ServiceAdapters, ServiceConfig, Sitemap, SitemapList, SitemapUrl, SitemapUrlImage, SitemapUrlList, TestAdminUser, TestCredentials, TestUser, ThrowableErrorFn, ThrowableErrorMap, UNEXPECTED_BODY_SNIPPET_LENGTH, UserService, VerifyCaptchaFn, VerifyPreviewTokenFn, WC_CORE_BASE, WC_STORE_BASE, WPK_ListSitemapUrlInput, WPK_RobotRule, WPK_Robots, WPK_Seo, WPK_Sitemap, WPK_SitemapContentType, WPK_SitemapUrl, WPK_SitemapUrlImage, WP_AUTH_HEADER_KEY, WP_AUTH_TYPE, WP_CORE_BASE, WP_Comment, WP_CommentAvatarUrls, WP_CommentContent, WP_CommentContentInput, WP_CommentCreateErrorCode, WP_CommentCreateInput, WP_CommentDeleteErrorCode, WP_CommentDeleteInput, WP_CommentDeleteResponse, WP_CommentLinks, WP_CommentListErrorCode, WP_CommentListInput, WP_CommentOrderBy, WP_CommentRetrieveErrorCode, WP_CommentRetrieveInput, WP_CommentStatus, WP_CommentStatusFilter, WP_CommentStatusInput, WP_CommentType, WP_CommentUpdateErrorCode, WP_CommentUpdateInput, WP_CommonErrorCode, WP_Context, WP_CurrencyFormat, WP_Error, WP_ErrorData, WP_KIZLO_BASE, WP_Link, WP_List, WP_ListMetadata, WP_ListOrder, WP_Menu, WP_MenuCreateErrorCode, WP_MenuCreateInput, WP_MenuDeleteErrorCode, WP_MenuDeleteInput, WP_MenuDeleteResponse, WP_MenuItem, WP_MenuItemCreateErrorCode, WP_MenuItemCreateInput, WP_MenuItemDeleteErrorCode, WP_MenuItemDeleteInput, WP_MenuItemDeleteResponse, WP_MenuItemLinks, WP_MenuItemListErrorCode, WP_MenuItemListInput, WP_MenuItemOrderBy, WP_MenuItemRetrieveErrorCode, WP_MenuItemRetrieveInput, WP_MenuItemStatus, WP_MenuItemStatusFilter, WP_MenuItemTarget, WP_MenuItemTaxRelation, WP_MenuItemTitle, WP_MenuItemTitleInput, WP_MenuItemType, WP_MenuItemUpdateErrorCode, WP_MenuItemUpdateInput, WP_MenuLinks, WP_MenuListErrorCode, WP_MenuListInput, WP_MenuOrderBy, WP_MenuRetrieveErrorCode, WP_MenuRetrieveInput, WP_MenuUpdateErrorCode, WP_MenuUpdateInput, WP_Post, WP_PostCommentStatus, WP_PostContent, WP_PostContentInput, WP_PostCreateErrorCode, WP_PostCreateInput, WP_PostDeleteErrorCode, WP_PostDeleteInput, WP_PostDeleteResponse, WP_PostExcerpt, WP_PostExcerptInput, WP_PostFormat, WP_PostGuid, WP_PostLinks, WP_PostListErrorCode, WP_PostListInput, WP_PostOrderBy, WP_PostRetrieveErrorCode, WP_PostRetrieveInput, WP_PostStatus, WP_PostStatusFilter, WP_PostTaxRelation, WP_PostTitle, WP_PostTitleInput, WP_PostUpdateErrorCode, WP_PostUpdateInput, WP_RequestInput, WP_Result, WP_User, WP_UserAvatarUrls, WP_UserCapabilities, WP_UserCreateErrorCode, WP_UserCreateInput, WP_UserDeleteErrorCode, WP_UserDeleteInput, WP_UserDeleteMeErrorCode, WP_UserDeleteMeInput, WP_UserDeleteMeResponse, WP_UserDeleteResponse, WP_UserLinks, WP_UserListErrorCode, WP_UserListInput, WP_UserOrderBy, WP_UserRetrieveErrorCode, WP_UserRetrieveInput, WP_UserRetrieveMeErrorCode, WP_UserRetrieveMeInput, WP_UserUpdateErrorCode, WP_UserUpdateInput, WP_UserUpdateMeErrorCode, WP_UserUpdateMeInput, WP_UserWho, WebhookOptions, WithCommonErrorMap, WordPressCredentials, WordPressService, altcha, arkose, authMock, buildProcedure, combineDetailed, compare, consoleLog, createAuthAdapter, createCaptchaAdapter, createCookiesAdapter, createEventHandler, createExtension, createGeoAdapter, createKizlo, createKizloClient, createLoggerAdapter, createMiddleware, createOrpcRouter, createProcedure, createThrowableErrorMap, createWebhookRouter, defineErrorMap, defineFixture, deserializeCurrencyFormat, deserializeListMetadata, emptyList, friendlyCaptcha, generateContract, geoMock, geoVercelNext, handleUnexpectedError, hash, hcaptcha, hmac, isContractProcedure, isKizloError, isLocalPlugin, isWordPressResourceError, noopAdapter, parseIdentifier, recaptcha, resolveKizloConfig, restoreContract, schemaType, serializeCurrencyFormat, toKizloError, turnstile };

package/dist/index.js

@@ -1,10 +1,12 @@
-import { authMock } from "./adapters/auth.js";
-import { altcha, arkose, friendlyCaptcha, hcaptcha, recaptcha, turnstile } from "./adapters/captcha.js";
-import { geoMock } from "./adapters/geo.js";
+import { authMock, createAuthAdapter } from "./adapters/auth.js";
+import { altcha, arkose, createCaptchaAdapter, friendlyCaptcha, hcaptcha, recaptcha, turnstile } from "./adapters/captcha.js";
+import { createCookiesAdapter } from "./adapters/cookies.js";
+import { createGeoAdapter, geoMock } from "./adapters/geo.js";
 import { geoVercelNext } from "./adapters/geo.vercel.js";
-import { consoleLog, noopAdapter } from "./adapters/logger.js";
+import { consoleLog, createLoggerAdapter, noopAdapter } from "./adapters/logger.js";
+import { defineFixture, isLocalPlugin } from "./cli/wp/types.js";
 import { COMMON_ERRORS, KizloError, createThrowableErrorMap, defineErrorMap, isKizloError, toKizloError } from "./shared/error.js";
-import { buildProcedure, combineDetailed, createMiddleware, createProcedure, handleUnexpectedError, schemaType } from "./shared/procedure.js";
+import { buildProcedure, combineDetailed, createProcedure, handleUnexpectedError, schemaType } from "./shared/procedure.js";
 import { createOrpcRouter } from "./shared/router.js";
 import { generateContract, isContractProcedure, restoreContract } from "./shared/contract.js";
 import { CurrencyFormat, IdentifierInput, LIST_ORDER, ListMetadata, ListOrder, Media, PreviewTokenData, PreviewTokenPayload } from "./shared/schema.js";
@@ -18,6 +20,7 @@ import { PostService } from "./wordpress/post/service.js";
 import { UserService } from "./wordpress/user/service.js";
 import { isWordPressResourceError } from "./wordpress/utils.js";
 import { WordPressService } from "./wordpress/service.js";
+import { KizloSettingsService } from "./settings/service.js";
 import { Service } from "./service.js";
 import { compare, hash, hmac } from "./shared/crypto.js";
 import { Context } from "./context.js";
@@ -27,5 +30,6 @@ import { CONTENT_TYPES, ContentType, ListSitemapUrlInput, ListSitemapUrlInputBas
 import { createEventHandler, createWebhookRouter } from "./webhook/index.js";
 import { Kizlo, createKizlo, resolveKizloConfig } from "./kizlo.js";
 import { createExtension } from "./shared/extension.js";
+import { createMiddleware } from "./shared/middleware.js";
 
-export { CART_HASH_HEADER_KEY, COMMON_ERRORS, CONTENT_TYPES, CommentService, ContentType, Context, CurrencyFormat, IdentifierInput, Kizlo, KizloClient, KizloError, LIST_ORDER, ListMetadata, ListOrder, ListSitemapUrlInput, ListSitemapUrlInputBase, Media, MenuItemService, MenuService, PostService, PreviewTokenData, PreviewTokenPayload, Robots, RobotsRule, SAFE_REQUEST_TIMEOUT, Seo, SeoHead, SeoSchema, Service, Sitemap, SitemapList, SitemapUrl, SitemapUrlImage, SitemapUrlList, UNEXPECTED_BODY_SNIPPET_LENGTH, UserService, WC_CORE_BASE, WC_STORE_BASE, WP_AUTH_HEADER_KEY, WP_AUTH_TYPE, WP_CORE_BASE, WP_Error, WP_KIZLO_BASE, WordPressService, altcha, arkose, authMock, buildProcedure, combineDetailed, compare, consoleLog, createEventHandler, createExtension, createKizlo, createKizloClient, createMiddleware, createOrpcRouter, createProcedure, createThrowableErrorMap, createWebhookRouter, defineErrorMap, deserializeCurrencyFormat, deserializeListMetadata, emptyList, friendlyCaptcha, generateContract, geoMock, geoVercelNext, handleUnexpectedError, hash, hcaptcha, hmac, isContractProcedure, isKizloError, isWordPressResourceError, noopAdapter, parseIdentifier, recaptcha, resolveKizloConfig, restoreContract, schemaType, serializeCurrencyFormat, toKizloError, turnstile };
+export { CART_HASH_HEADER_KEY, COMMON_ERRORS, CONTENT_TYPES, CommentService, ContentType, Context, CurrencyFormat, IdentifierInput, Kizlo, KizloClient, KizloError, KizloSettingsService, LIST_ORDER, ListMetadata, ListOrder, ListSitemapUrlInput, ListSitemapUrlInputBase, Media, MenuItemService, MenuService, PostService, PreviewTokenData, PreviewTokenPayload, Robots, RobotsRule, SAFE_REQUEST_TIMEOUT, Seo, SeoHead, SeoSchema, Service, Sitemap, SitemapList, SitemapUrl, SitemapUrlImage, SitemapUrlList, UNEXPECTED_BODY_SNIPPET_LENGTH, UserService, WC_CORE_BASE, WC_STORE_BASE, WP_AUTH_HEADER_KEY, WP_AUTH_TYPE, WP_CORE_BASE, WP_Error, WP_KIZLO_BASE, WordPressService, altcha, arkose, authMock, buildProcedure, combineDetailed, compare, consoleLog, createAuthAdapter, createCaptchaAdapter, createCookiesAdapter, createEventHandler, createExtension, createGeoAdapter, createKizlo, createKizloClient, createLoggerAdapter, createMiddleware, createOrpcRouter, createProcedure, createThrowableErrorMap, createWebhookRouter, defineErrorMap, defineFixture, deserializeCurrencyFormat, deserializeListMetadata, emptyList, friendlyCaptcha, generateContract, geoMock, geoVercelNext, handleUnexpectedError, hash, hcaptcha, hmac, isContractProcedure, isKizloError, isLocalPlugin, isWordPressResourceError, noopAdapter, parseIdentifier, recaptcha, resolveKizloConfig, restoreContract, schemaType, serializeCurrencyFormat, toKizloError, turnstile };

package/dist/integrations/nextjs/kizlo.server.d.ts

@@ -5,7 +5,7 @@ import { CreateKizloOptions, Kizlo } from "../../kizlo.js";
 type KizloServerOptions<TExts extends readonly AnyExtension[] = []> = CreateKizloOptions<TExts>;
 /**
  * Creates a Kizlo server for Next.js — same as the base `createKizlo`, but reads
- * the public base URL from `NEXT_PUBLIC_SERVER_BASE_URL`.
+ * the public base URL from `NEXT_PUBLIC_KIZLO_BACKEND_URL`.
  */
 declare function createKizlo<TExts extends readonly AnyExtension[] = []>(options?: CreateKizloOptions<TExts>): Kizlo<TExts>;
 //#endregion

package/dist/integrations/nextjs/kizlo.server.js

@@ -3,10 +3,10 @@ import { Kizlo, resolveKizloConfig } from "../../kizlo.js";
 //#region src/integrations/nextjs/kizlo.server.ts
 /**
 * Creates a Kizlo server for Next.js — same as the base `createKizlo`, but reads
-* the public base URL from `NEXT_PUBLIC_SERVER_BASE_URL`.
+* the public base URL from `NEXT_PUBLIC_KIZLO_BACKEND_URL`.
 */
 function createKizlo(options) {
-	return new Kizlo(resolveKizloConfig(options, { baseUrlEnvKey: "NEXT_PUBLIC_SERVER_BASE_URL" }));
+	return new Kizlo(resolveKizloConfig(options, { baseUrlEnvKey: "NEXT_PUBLIC_KIZLO_BACKEND_URL" }));
 }
 
 //#endregion

package/dist/integrations/nextjs/utils.js

@@ -2,8 +2,8 @@ import { KizloError } from "../../shared/error.js";
 
 //#region src/integrations/nextjs/utils.ts
 function getServerBaseUrl() {
-	const baseUrl = process.env.NEXT_PUBLIC_SERVER_BASE_URL;
-	if (!baseUrl) throw new KizloError("MISSING_ENV_VARIABLE", { message: "Please define NEXT_PUBLIC_SERVER_BASE_URL in you .env file." });
+	const baseUrl = process.env.NEXT_PUBLIC_KIZLO_BACKEND_URL;
+	if (!baseUrl) throw new KizloError("MISSING_ENV_VARIABLE", { message: "Please define NEXT_PUBLIC_KIZLO_BACKEND_URL in your .env file." });
 	return baseUrl;
 }
 

package/dist/kizlo.d.ts

@@ -2,25 +2,30 @@ import { WordPressCredentials } from "./wordpress/types.js";
 import "./wordpress/index.js";
 import { AuthAdapter } from "./adapters/auth.js";
 import { CaptchaAdapter } from "./adapters/captcha.js";
+import { CookiesAdapter } from "./shared/types.js";
 import { GeoAdapter } from "./adapters/geo.js";
 import { Environment, LoggerAdapter } from "./adapters/logger.js";
-import { CookiesAdapter } from "./shared/types.js";
 import { RouterMap } from "./router.js";
 import { AnyExtension, InferExtensionRouter } from "./shared/extension.js";
 import { ResultClient } from "./shared/result.js";
 import { Context } from "./context.js";
-import { Pathname } from "@kizlo/shared";
 
 //#region src/kizlo.d.ts
 type AnyKizloConfig = KizloConfig<any>;
+/**
+ * Which credential set to read from the environment. Independent of `environment`
+ * (which carries logging semantics off `NODE_ENV`): `"dev"` reads the `KIZLO_DEV_WORDPRESS_*`
+ * / `KIZLO_DEV_SITE_SECRET` keys the local stack manages, `"production"` reads `KIZLO_WORDPRESS_*` / `KIZLO_SITE_SECRET`.
+ */
+type KizloTarget = "dev" | "production";
 interface KizloConfig<TExts extends readonly AnyExtension[]> {
   baseUrl: string;
   siteSecret: string;
   extensions?: TExts;
   environment: Environment;
+  target: KizloTarget;
   adapters?: ServiceAdapters;
   credentials: WordPressCredentials;
-  webhookPath?: Pathname;
 }
 interface ServiceAdapters {
   geo?: GeoAdapter;
@@ -45,11 +50,27 @@ declare class Kizlo<TExts extends readonly AnyExtension[] = []> {
   private registerExtensions;
 }
 interface CreateKizloOptions<TExts extends readonly AnyExtension[] = []> {
+  /** Public base URL of your Kizlo server, used to route requests. Falls back to the `KIZLO_BACKEND_URL` env var. */
   baseUrl?: string;
+  /** Secret shared with the WordPress plugin to sign and verify webhooks. Falls back to the `KIZLO_SITE_SECRET` env var (target-selected). */
   siteSecret?: string;
+  /** Extensions to register, built with `createExtension` — mounts their namespaces on the client and their routes and event handlers on the handler. */
   extensions?: TExts;
+  /** Runtime environment. Falls back to `NODE_ENV`, then `"development"`. */
   environment?: Environment;
+  /**
+   * Which credential set to use. Falls back to the `KIZLO_TARGET` env var, then `"production"`.
+   * Independent of `environment`: `"dev"` reads `KIZLO_DEV_WORDPRESS_*` / `KIZLO_DEV_SITE_SECRET` (the keys the
+   * local dev stack manages), `"production"` reads `KIZLO_WORDPRESS_*` / `KIZLO_SITE_SECRET`.
+   */
+  target?: KizloTarget;
+  /** Service adapters: auth, captcha, geo, logger, and cookies. */
   adapters?: ServiceAdapters;
+  /**
+   * WordPress connection. Each credential falls back to a target-selected env var: with the default
+   * `"production"` target to `KIZLO_WORDPRESS_URL` / `KIZLO_WORDPRESS_USERNAME` / `KIZLO_WORDPRESS_APPLICATION_PASSWORD`,
+   * and with the `"dev"` target to their `KIZLO_DEV_WORDPRESS_*` counterparts.
+   */
   wordpress?: {
     credentials?: Partial<WordPressCredentials>;
   };
@@ -64,10 +85,10 @@ declare function resolveKizloConfig<TExts extends readonly AnyExtension[]>(optio
   adapters?: ServiceAdapters;
 }): KizloConfig<TExts>;
 /**
- * Creates a Kizlo server from the environment (`SERVER_BASE_URL`, `SITE_SECRET`,
- * `WORDPRESS_*`), with options taking precedence. Framework packages wrap this
+ * Creates a Kizlo server from the environment (`KIZLO_BACKEND_URL`, `KIZLO_SITE_SECRET`,
+ * `KIZLO_WORDPRESS_*`), with options taking precedence. Framework packages wrap this
  * with their own URL convention and adapters.
  */
 declare function createKizlo<TExts extends readonly AnyExtension[] = []>(options?: CreateKizloOptions<TExts>): Kizlo<TExts>;
 //#endregion
-export { AnyKizloConfig, CreateKizloOptions, Kizlo, KizloConfig, RootRouter, S2SClient, ServiceAdapters, createKizlo, resolveKizloConfig };
+export { AnyKizloConfig, CreateKizloOptions, Kizlo, KizloConfig, KizloTarget, RootRouter, S2SClient, ServiceAdapters, createKizlo, resolveKizloConfig };

package/dist/kizlo.js

@@ -30,10 +30,7 @@ var Kizlo = class {
 		this.router = Object.assign(Object.assign({}, {
 			...extensions.router,
 			...ROUTER_MAP
-		}), { webhooks: createWebhookRouter({
-			path: this.config.webhookPath,
-			events: extensions.events
-		}) });
+		}), { webhooks: createWebhookRouter({ events: extensions.events }) });
 		const orpcRouter = createOrpcRouter(this.router);
 		this.client = createResultClient(createRouterClient(orpcRouter, { context: this.context }));
 		this.remoteHandler = new RPCHandler(orpcRouter, {
@@ -108,6 +105,19 @@ function requireEnv(name) {
 	if (!value) throw new KizloError("MISSING_ENV_VARIABLE", { message: `Please define ${name} in your .env file.` });
 	return value;
 }
+function resolveTarget(option) {
+	return option ?? (process.env.KIZLO_TARGET === "dev" ? "dev" : "production");
+}
+/** Env var names for a credential set: `KIZLO_DEV_WORDPRESS_URL` / `KIZLO_DEV_SITE_SECRET` for dev, `KIZLO_WORDPRESS_URL` / `KIZLO_SITE_SECRET` for production. */
+function targetEnvKeys(target) {
+	const prefix = target === "dev" ? "KIZLO_DEV_" : "KIZLO_";
+	return {
+		siteSecret: `${prefix}SITE_SECRET`,
+		url: `${prefix}WORDPRESS_URL`,
+		username: `${prefix}WORDPRESS_USERNAME`,
+		password: `${prefix}WORDPRESS_APPLICATION_PASSWORD`
+	};
+}
 /**
 * Resolves a full `KizloConfig` from options and the environment. Shared by the
 * base `createKizlo` and each framework factory — the single place env values
@@ -115,29 +125,32 @@ function requireEnv(name) {
 */
 function resolveKizloConfig(options, defaults) {
 	const credentials = options?.wordpress?.credentials;
+	const target = resolveTarget(options?.target);
+	const keys = targetEnvKeys(target);
 	return {
 		baseUrl: options?.baseUrl ?? requireEnv(defaults.baseUrlEnvKey),
-		siteSecret: options?.siteSecret ?? requireEnv("SITE_SECRET"),
+		siteSecret: options?.siteSecret ?? requireEnv(keys.siteSecret),
 		environment: options?.environment ?? process.env.NODE_ENV ?? "development",
+		target,
 		extensions: options?.extensions,
 		adapters: {
 			...defaults.adapters,
 			...options?.adapters
 		},
 		credentials: {
-			url: credentials?.url ?? requireEnv("WORDPRESS_URL"),
-			username: credentials?.username ?? requireEnv("WORDPRESS_USERNAME"),
-			password: credentials?.password ?? requireEnv("WORDPRESS_APPLICATION_PASSWORD")
+			url: credentials?.url ?? requireEnv(keys.url),
+			username: credentials?.username ?? requireEnv(keys.username),
+			password: credentials?.password ?? requireEnv(keys.password)
 		}
 	};
 }
 /**
-* Creates a Kizlo server from the environment (`SERVER_BASE_URL`, `SITE_SECRET`,
-* `WORDPRESS_*`), with options taking precedence. Framework packages wrap this
+* Creates a Kizlo server from the environment (`KIZLO_BACKEND_URL`, `KIZLO_SITE_SECRET`,
+* `KIZLO_WORDPRESS_*`), with options taking precedence. Framework packages wrap this
 * with their own URL convention and adapters.
 */
 function createKizlo(options) {
-	return new Kizlo(resolveKizloConfig(options, { baseUrlEnvKey: "SERVER_BASE_URL" }));
+	return new Kizlo(resolveKizloConfig(options, { baseUrlEnvKey: "KIZLO_BACKEND_URL" }));
 }
 
 //#endregion

package/dist/menu/fixture.d.ts

@@ -1,5 +1,5 @@
 import { Fixture } from "../cli/wp/types.js";
-import "../test.js";
+import "../index.js";
 
 //#region src/menu/fixture.d.ts
 /** Core menu fixture: seeds a `primary` nav menu + items so the menu suite has content to read. */

package/dist/package.js

@@ -1,5 +1,5 @@
 //#region package.json
-var version = "0.1.0";
+var version = "0.2.0";
 
 //#endregion
 export { version };

package/dist/post/fixture.d.ts

@@ -1,5 +1,5 @@
 import { Fixture } from "../cli/wp/types.js";
-import "../test.js";
+import "../index.js";
 
 //#region src/post/fixture.d.ts
 /** Core post fixture: seeds sample posts + comments so the post/comment suites have content to read. */

package/dist/service.d.ts

@@ -2,6 +2,7 @@ import { WordPressCredentials } from "./wordpress/types.js";
 import { WordPressService } from "./wordpress/service.js";
 import "./wordpress/index.js";
 import { EmailService } from "./email/service.js";
+import { KizloSettingsService } from "./settings/service.js";
 
 //#region src/service.d.ts
 interface ServiceConfig {
@@ -9,6 +10,7 @@ interface ServiceConfig {
 }
 declare class Service {
   readonly email: EmailService;
+  readonly settings: KizloSettingsService;
   readonly wordpress: WordPressService;
   private readonly config;
   constructor(config: ServiceConfig);

package/dist/service.js

@@ -1,14 +1,17 @@
 import { WordPressService } from "./wordpress/service.js";
 import { EmailService } from "./email/service.js";
+import { KizloSettingsService } from "./settings/service.js";
 
 //#region src/service.ts
 var Service = class {
 	email;
+	settings;
 	wordpress;
 	config;
 	constructor(config) {
 		this.config = config;
 		this.email = new EmailService(this);
+		this.settings = new KizloSettingsService(this);
 		this.wordpress = new WordPressService(this.config);
 	}
 };