kizlo 0.6.0 → 0.7.0

package/dist/brand/icons.d.ts

@@ -7,29 +7,27 @@ interface IconDescriptor {
   type: string;
   /** `"any"` for scalable/single sources; omitted for `.ico`. */
   sizes?: string;
-  /** Media query for scheme-specific variants, e.g. `(prefers-color-scheme: dark)`. */
-  media?: string;
 }
 interface ManifestIcon {
   src: string;
   type: string;
   sizes: string;
-  /**
-   * `"maskable"` marks art with a safe zone the launcher may crop to any
-   * adaptive shape; omitted (default `"any"`) sources render uncropped.
-   */
-  purpose?: "any" | "maskable";
 }
 interface ResolvedIcons {
-  /** `rel="icon"` candidates: the light source plus an optional dark variant. */
+  /**
+   * `rel="icon"` candidate: a single scheme-agnostic source, or empty. Browsers
+   * disagree on scheme-swapping favicons (Safari ignores the `media` attribute
+   * and never re-evaluates an SVG's internal `@media`), so one icon that reads
+   * on both light and dark tab bars is the only cross-browser-safe surface.
+   */
   icon: IconDescriptor[];
   /** `rel="apple-touch-icon"` candidate (raster-guarded), or empty. */
   appleTouch: IconDescriptor[];
   /**
-   * Web-manifest icon entries (raster or SVG): the square brand icon as the
-   * default `"any"` source — expanded to one entry per real square rendition —
-   * plus the dedicated Android icon as `"maskable"` when provided. Either may
-   * be absent.
+   * Web-manifest icon entries (raster or SVG): a single square source —
+   * expanded to one entry per real square rendition — that every non-iOS
+   * install surface (Android, Chrome, macOS Safari) renders uncropped. Absent
+   * when no manifest-compatible source exists.
    */
   manifestIcons: ManifestIcon[];
 }

package/dist/brand/icons.js

@@ -32,12 +32,20 @@ function manifestSource(media) {
 function pixelSize(media) {
 	return media.width && media.height ? `${media.width}x${media.height}` : "any";
 }
-function toDescriptor(media, extra) {
+/**
+* Append the attachment id as a `?v=` cache-buster. Safari (and every browser)
+* keys its favicon cache by URL, so tying the version to the attachment id means
+* the URL changes when a different icon is chosen — busting the stale cache —
+* while staying stable across renders when the icon is unchanged.
+*/
+function versioned(src, id) {
+	return `${src}${src.includes("?") ? "&" : "?"}v=${id}`;
+}
+function toDescriptor(media) {
 	return {
-		url: media.src,
+		url: versioned(media.src, media.id),
 		type: media.mime ?? "",
-		sizes: media.mime && ICO_MIMES.has(media.mime) ? void 0 : pixelSize(media),
-		...extra
+		sizes: media.mime && ICO_MIMES.has(media.mime) ? void 0 : pixelSize(media)
 	};
 }
 /**
@@ -47,14 +55,12 @@ function toDescriptor(media, extra) {
 * or above the floor so browsers get genuine 192/512-ish icons; if none qualify
 * (e.g. a non-square upload) the original is used as-is.
 */
-function toManifestIcons(media, purpose) {
+function toManifestIcons(media) {
 	const type = media.mime ?? "";
-	const withPurpose = purpose ? { purpose } : {};
 	if (media.mime === SVG_MIME) return [{
 		src: media.src,
 		type,
-		sizes: "any",
-		...withPurpose
+		sizes: "any"
 	}];
 	const square = [{
 		src: media.src,
@@ -75,8 +81,7 @@ function toManifestIcons(media, purpose) {
 		icons.push({
 			src: r.src,
 			type,
-			sizes,
-			...withPurpose
+			sizes
 		});
 	}
 	return icons;
@@ -87,16 +92,13 @@ function toManifestIcons(media, purpose) {
 */
 function resolveIcons(brand) {
 	const icon = [];
-	const light = brand.favicon ?? brand.logo_icon;
-	if (light) icon.push(toDescriptor(light));
-	if (brand.favicon_dark) icon.push(toDescriptor(brand.favicon_dark, { media: "(prefers-color-scheme: dark)" }));
-	const apple = raster(brand.ios_app_icon) ?? raster(brand.favicon);
+	const primary = brand.favicon ?? brand.logo_icon;
+	if (primary) icon.push(toDescriptor(primary));
+	const apple = raster(brand.app_icon) ?? raster(brand.favicon);
 	const appleTouch = apple ? [toDescriptor(apple)] : [];
 	const manifestIcons = [];
-	const anySource = manifestSource(brand.logo_icon) ?? manifestSource(brand.favicon);
+	const anySource = manifestSource(brand.app_icon) ?? manifestSource(brand.logo_icon) ?? manifestSource(brand.favicon);
 	if (anySource) manifestIcons.push(...toManifestIcons(anySource));
-	const maskable = manifestSource(brand.android_app_icon);
-	if (maskable) manifestIcons.push(...toManifestIcons(maskable, "maskable"));
 	return {
 		icon,
 		appleTouch,

package/dist/cli/commands/dev.js

@@ -7,11 +7,10 @@ import { bootstrapDev } from "../wp/dev.js";
 import { reapOrphans, registerSession, removeProjectContainers, spawnWatchdog, unregisterSession } from "../wp/session.js";
 import { syncSiteSettings } from "../wp/settings.js";
 import { devStack } from "../wp/stack.js";
-import { existsSync, readFileSync, rmSync, writeFileSync } from "node:fs";
 import { join } from "node:path";
+import { existsSync, readFileSync, rmSync, writeFileSync } from "node:fs";
 import { defineCommand } from "citty";
 import { randomBytes } from "node:crypto";
-import { networkInterfaces } from "node:os";
 
 //#region src/cli/commands/dev.ts
 async function resolve$1(cwd) {
@@ -26,22 +25,17 @@ function note(text) {
 	const { dim, reset } = palette();
 	process.stdout.write(`   ${dim}${text}${reset}\n`);
 }
-/** First non-internal IPv4 address, for the LAN-reachable "Network" URL (undefined when offline). */
-function lanAddress() {
-	for (const ifaces of Object.values(networkInterfaces())) for (const iface of ifaces ?? []) if (iface.family === "IPv4" && !iface.internal) return iface.address;
-}
 /**
-* Print the connection summary as an aligned, Next.js-style block. Shows the wp-admin
-* URL on localhost ("Local") and — when a LAN address exists — on the network, so the
-* stack can be opened from other devices. On a fresh install, also show the one-time
-* wp-admin password (it's never stored, so this is the only chance to see it).
+* Print the connection summary as an aligned, Next.js-style block. Shows the wp-admin URL on
+* the loopback ("Local") and — when the stack is installed on a LAN address rather than
+* localhost — on the network, so it can be opened from other devices. On a fresh install, also
+* show the one-time wp-admin password (it's never stored, so this is the only chance to see it).
 */
 function printSummary(info) {
 	const { cyan, dim, reset } = palette();
-	const port = new URL(info.url).port;
-	const lan = lanAddress();
-	const rows = [["WP Local", `${info.url}/wp-admin`]];
-	if (lan) rows.push(["WP Network", `http://${lan}:${port}/wp-admin`]);
+	const { port, hostname } = new URL(info.url);
+	const rows = [["WP Local", `http://localhost:${port}/wp-admin`]];
+	if (hostname !== "localhost") rows.push(["WP Network", `${info.url}/wp-admin`]);
 	rows.push(["Database Connection", `127.0.0.1:${info.dbPort}`]);
 	const width = Math.max(...rows.map(([label]) => label.length)) + 1;
 	const lines = ["", ...rows.map(([label, value]) => `   ${dim}- ${`${label}:`.padEnd(width)}${reset} ${cyan}${value}${reset}`)];
@@ -104,6 +98,23 @@ function updateWpEnv(cfg, info) {
 	};
 }
 /**
+* Re-point `KIZLO_DEV_WORDPRESS_URL` at the current dev URL on a warm resume, so a LAN address that
+* changed since the last session (a new DHCP lease, a different network) doesn't leave the app talking
+* to a dead IP. Only this one key is rewritten — the credentials and secret from the fresh install are
+* preserved — and it's a no-op when `.env` is absent (nothing provisioned yet) or already current.
+* The full fresh-install write goes through {@link updateWpEnv} instead; this covers the resume path it
+* skips. Returns true when it changed the file. The app still needs a restart to read the new value.
+*/
+function syncDevUrl(cfg, url) {
+	const envPath = join(cfg.configDir, ".env");
+	if (!existsSync(envPath)) return false;
+	const existing = readFileSync(envPath, "utf8");
+	if (readEnvValue(existing, "KIZLO_DEV_WORDPRESS_URL") === url) return false;
+	const { content } = mergeEnv(existing, { KIZLO_DEV_WORDPRESS_URL: url }, new Set(["KIZLO_DEV_WORDPRESS_URL"]), envGroups("KIZLO_BACKEND_URL"));
+	writeFileSync(envPath, content);
+	return true;
+}
+/**
 * Arm the foreground teardown — call this *before* the containers start, so a cancel at
 * any point (even mid-startup, with mysql up but wordpress still booting) stops whatever
 * already came up. The teardown is owned by a detached **watchdog** process, not by this
@@ -189,7 +200,7 @@ async function startForeground(cfg) {
 			});
 			if (!sync.ok) note(`Could not sync the site settings to WordPress (${sync.error}) — make sure the kizlo plugin is active, then set them from the Kizlo settings.`);
 		}
-	}
+	} else if (syncDevUrl(ready, creds.url)) note("Updated .env WordPress URL to the current network address — restart your app to pick it up");
 	printSummary(creds);
 	const { green, dim, bold, reset } = palette();
 	const ms = Date.now() - start;

package/dist/cli/commands/init.js

@@ -10,8 +10,8 @@ import { syncSiteSettings } from "../wp/settings.js";
 import { devStack } from "../wp/stack.js";
 import { PRESETS, detectPreset, getPreset } from "../presets/index.js";
 import z from "zod/v4";
-import fs from "node:fs";
 import path from "node:path";
+import fs from "node:fs";
 import { defineCommand } from "citty";
 import * as p from "@clack/prompts";
 import { randomBytes } from "node:crypto";

package/dist/cli/daemon/config.js

@@ -2,8 +2,8 @@ import { credentialsPath, findConfigDir } from "../wp/utils.js";
 import { log } from "./logger.js";
 import { detectPackageManager } from "../utils.js";
 import z from "zod/v4";
-import fs from "node:fs";
 import path from "node:path";
+import fs from "node:fs";
 import { createJiti } from "jiti";
 
 //#region src/cli/daemon/config.ts

package/dist/cli/daemon/generate.js

@@ -1,7 +1,7 @@
 import { generateContract } from "../../shared/contract.js";
 import { loadEnvFiles } from "../utils.js";
-import fs from "node:fs";
 import path from "node:path";
+import fs from "node:fs";
 import { createJiti } from "jiti";
 
 //#region src/cli/daemon/generate.ts

package/dist/cli/daemon/lock.js

@@ -1,5 +1,5 @@
-import fs from "node:fs";
 import path from "node:path";
+import fs from "node:fs";
 
 //#region src/cli/daemon/lock.ts
 function lockPath(cwd) {

package/dist/cli/utils.js

@@ -1,9 +1,9 @@
 import { log } from "./daemon/logger.js";
 import { PortInUseError, resolveHostPort } from "./wp/ports.js";
-import { spawnSync } from "node:child_process";
-import fs from "node:fs";
 import path from "node:path";
 import { fileURLToPath } from "node:url";
+import { spawnSync } from "node:child_process";
+import fs from "node:fs";
 import * as p from "@clack/prompts";
 
 //#region src/cli/utils.ts

package/dist/cli/wp/bootstrap.js

@@ -1,5 +1,5 @@
-import { compose, composeUp, wpCli } from "./docker.js";
 import { DEFAULT_PLUGINS, DEFAULT_PORT, SEED_MARKER_OPTION, SEED_VERSION, TEST_ADMIN, TEST_USER } from "./constants.js";
+import { compose, composeUp, wpCli } from "./docker.js";
 import { ensurePlugins } from "./utils.js";
 
 //#region src/cli/wp/bootstrap.ts

package/dist/cli/wp/byo.js

@@ -1,6 +1,6 @@
+import { join, resolve, sep } from "node:path";
 import { execFileSync } from "node:child_process";
 import { cpSync, createReadStream, existsSync, mkdirSync, readdirSync, renameSync, rmSync } from "node:fs";
-import { join, resolve, sep } from "node:path";
 import { createInterface } from "node:readline";
 
 //#region src/cli/wp/byo.ts

package/dist/cli/wp/compose/override.js

@@ -1,6 +1,6 @@
 import { OPCACHE_INI, REMAP_ENTRYPOINT } from "../constants.js";
-import { mkdirSync, writeFileSync } from "node:fs";
 import { basename, dirname, isAbsolute, resolve } from "node:path";
+import { mkdirSync, writeFileSync } from "node:fs";
 
 //#region src/cli/wp/compose/override.ts
 /** Generated dev override location, relative to the config root. */

package/dist/cli/wp/compose/override.test.ts

@@ -72,7 +72,6 @@ describe("writeDevOverride", () => {
 		expect(body).toContain(`- "${REMAP_ENTRYPOINT}:/usr/local/bin/kizlo-remap-entrypoint.sh:ro"`)
 		expect(body).toContain('KIZLO_PUID: "1000"')
 		expect(body).toContain('KIZLO_PGID: "1000"')
-		// wp-cli runs directly as the host user (no entrypoint wrapper needed there).
 		expect(body).toContain('user: "1000:1000"')
 	})
 })
@@ -96,7 +95,6 @@ describe("writeTestOverride", () => {
 		const pluginBind = `- "${path.join(dir, "plugins/kizlo-woocommerce")}:/var/www/html/wp-content/plugins/kizlo-woocommerce"`
 		expect(body).toContain("  wordpress:")
 		expect(body).toContain("  wp-cli:")
-		// One bind per service.
 		expect(body.split(pluginBind).length - 1).toBe(2)
 	})
 

package/dist/cli/wp/compose/override.ts

@@ -84,8 +84,6 @@ export function writeDevOverride(configDir: string, opts: DevOverrideOptions): s
 	const rootBind = bind(opts.wordpressDir, WP_ROOT)
 	const remap = opts.hostUser
 		? {
-				// Run the wrapper as root so it can retag www-data, then it hands off to
-				// the normal entrypoint; wp-cli just runs directly as the host user.
 				wordpress: {
 					user: "0:0",
 					entrypoint: ["sh", REMAP_TARGET],
@@ -104,8 +102,6 @@ export function writeDevOverride(configDir: string, opts: DevOverrideOptions): s
 	}
 	const wpCli: ServiceBlock = { user: remap?.wpCliUser, volumes: [rootBind, ...mounts] }
 
-	// Publish MySQL on a host port (loopback only) so advanced users can point a SQL
-	// client at the dev database. Internal-only when no port is configured.
 	const services = [renderService("wordpress", wordpress), renderService("wp-cli", wpCli)]
 	if (opts.dbPort) services.push(renderService("mysql", { ports: [`127.0.0.1:${opts.dbPort}:3306`] }))
 

package/dist/cli/wp/constants.d.ts

@@ -0,0 +1,35 @@
+import { PluginSource, TestAdminUser, TestUser } from "./types.js";
+
+//#region src/cli/wp/constants.d.ts
+declare const DEFAULT_PORT = 8080;
+/** Build a GitHub release-zip URL for `PluginSource.source` (asset named `<tag>.zip`). */
+declare function githubRelease(repo: string, tag: string): string;
+/**
+ * Download URL for a Kizlo plugin's latest release, served by kizlo.io (it 302s to
+ * the current GitHub release asset). Always tracks the newest published version —
+ * use {@link githubRelease} instead to pin a specific tag.
+ */
+declare function kizloRelease(slug: string): string;
+/** The docker-compose file shipped alongside this module (in both `src/` and `dist/`). */
+declare const COMPOSE_FILE: string;
+/** Dev PHP OPcache config, shipped alongside this module and bind-mounted into the dev stack. */
+declare const OPCACHE_INI: string;
+/** Linux-only entrypoint that retags www-data to the host user (see the script for why). */
+declare const REMAP_ENTRYPOINT: string;
+declare const CONFIG_FILES: string[];
+/** Credentials artifact location, relative to the config root. */
+declare const CREDENTIALS_REL = ".kizlo/test-credentials.json";
+/**
+ * DB-side marker written as the final bootstrap step and checked by `isSeeded`.
+ * It records that this database holds a completed bootstrap — independent of any
+ * fixture content, which is optional and varies per consumer. Bump `SEED_VERSION`
+ * to force a reseed when the bootstrap contract changes.
+ */
+declare const SEED_MARKER_OPTION = "kizlo_test_seeded";
+declare const SEED_VERSION = "1";
+/** The kizlo core WordPress plugin, always installed during bootstrap. */
+declare const DEFAULT_PLUGINS: PluginSource[];
+declare const TEST_ADMIN: Omit<TestAdminUser, "id" | "applicationPassword">;
+declare const TEST_USER: Omit<TestUser, "id">;
+//#endregion
+export { COMPOSE_FILE, CONFIG_FILES, CREDENTIALS_REL, DEFAULT_PLUGINS, DEFAULT_PORT, OPCACHE_INI, REMAP_ENTRYPOINT, SEED_MARKER_OPTION, SEED_VERSION, TEST_ADMIN, TEST_USER, githubRelease, kizloRelease };

package/dist/cli/wp/constants.js

@@ -1,9 +1,20 @@
-import { kizloRelease } from "./utils.js";
 import { dirname, resolve } from "node:path";
 import { fileURLToPath } from "node:url";
 
 //#region src/cli/wp/constants.ts
 const DEFAULT_PORT = 8080;
+/** Build a GitHub release-zip URL for `PluginSource.source` (asset named `<tag>.zip`). */
+function githubRelease(repo, tag) {
+	return `https://github.com/${repo}/releases/download/${tag}/${tag}.zip`;
+}
+/**
+* Download URL for a Kizlo plugin's latest release, served by kizlo.io (it 302s to
+* the current GitHub release asset). Always tracks the newest published version —
+* use {@link githubRelease} instead to pin a specific tag.
+*/
+function kizloRelease(slug) {
+	return `https://kizlo.io/plugins/${slug}/download`;
+}
 const HERE = dirname(fileURLToPath(import.meta.url));
 /** The docker-compose file shipped alongside this module (in both `src/` and `dist/`). */
 const COMPOSE_FILE = resolve(HERE, "compose/docker-compose.yml");
@@ -48,4 +59,4 @@ const TEST_USER = {
 };
 
 //#endregion
-export { COMPOSE_FILE, CONFIG_FILES, CREDENTIALS_REL, DEFAULT_PLUGINS, DEFAULT_PORT, OPCACHE_INI, REMAP_ENTRYPOINT, SEED_MARKER_OPTION, SEED_VERSION, TEST_ADMIN, TEST_USER };
+export { COMPOSE_FILE, CONFIG_FILES, CREDENTIALS_REL, DEFAULT_PLUGINS, DEFAULT_PORT, OPCACHE_INI, REMAP_ENTRYPOINT, SEED_MARKER_OPTION, SEED_VERSION, TEST_ADMIN, TEST_USER, githubRelease, kizloRelease };

package/dist/cli/wp/dev.js

@@ -1,18 +1,33 @@
 import { WordPressService } from "../../wordpress/service.js";
-import { compose, composeUp, wpCli } from "./docker.js";
 import { DEFAULT_PLUGINS, TEST_ADMIN } from "./constants.js";
+import { compose, composeUp, wpCli } from "./docker.js";
 import { ensurePlugins } from "./utils.js";
 import { createAdminAppPassword, seedUsers } from "./bootstrap.js";
 import { prepareByo } from "./byo.js";
-import { existsSync, rmSync } from "node:fs";
 import { join } from "node:path";
+import { existsSync, rmSync } from "node:fs";
 import { randomBytes } from "node:crypto";
+import { networkInterfaces } from "node:os";
 
 //#region src/cli/wp/dev.ts
 /** A strong random admin password (144 bits, URL/JSON/CLI-safe characters). */
 function generatePassword() {
 	return randomBytes(18).toString("base64url");
 }
+/** First non-internal IPv4 address — the router-assigned LAN address (undefined when offline). */
+function lanAddress() {
+	for (const ifaces of Object.values(networkInterfaces())) for (const iface of ifaces ?? []) if (iface.family === "IPv4" && !iface.internal) return iface.address;
+}
+/**
+* The URL the dev stack is provisioned at. We prefer the router-assigned LAN address over `localhost`
+* so it's reachable from off the host (the app in a container or on another device). Serving WordPress
+* under the request host is already handled by the container's `WORDPRESS_CONFIG_EXTRA` (it derives
+* `WP_HOME`/`WP_SITEURL` from `HTTP_HOST` per request), so this is only the address we write into `.env`
+* and print. Falls back to `localhost` when the machine is offline, so bare local dev still works.
+*/
+function devUrl(port) {
+	return `http://${lanAddress() ?? "localhost"}:${port}`;
+}
 /**
 * Seed `dev.fixtures` into a freshly installed dev stack, reusing the test seeding
 * primitives: seed the default subscriber so `ctx.userId` exists, then run each `seed`
@@ -58,7 +73,7 @@ async function seedDevFixtures(cfg, url) {
 * concern.
 */
 async function bootstrapDev(cfg) {
-	const url = `http://localhost:${cfg.port}`;
+	const url = devUrl(cfg.port);
 	const byo = !existsSync(join(cfg.wordpressDir, "wp-includes", "version.php")) && cfg.byo ? await prepareByo(cfg.byo, cfg.wordpressDir, cfg.configDir) : void 0;
 	await composeUp();
 	const installed = (await compose([

package/dist/cli/wp/phpunit.js

@@ -1,8 +1,8 @@
 import { isLocalPlugin } from "./types.js";
 import { compose } from "./docker.js";
 import { log } from "../daemon/logger.js";
-import { existsSync } from "node:fs";
 import { basename, isAbsolute, resolve } from "node:path";
+import { existsSync } from "node:fs";
 
 //#region src/cli/wp/phpunit.ts
 const PLUGINS_DIR = `/var/www/html/wp-content/plugins`;

package/dist/cli/wp/session.js

@@ -1,7 +1,7 @@
-import { execFile, spawn } from "node:child_process";
-import { existsSync, mkdirSync, readFileSync, writeFileSync } from "node:fs";
 import { dirname, join } from "node:path";
 import { fileURLToPath } from "node:url";
+import { execFile, spawn } from "node:child_process";
+import { existsSync, mkdirSync, readFileSync, writeFileSync } from "node:fs";
 import { promisify } from "node:util";
 import { homedir } from "node:os";
 

package/dist/cli/wp/setup.js

@@ -1,8 +1,8 @@
 import { WordPressService } from "../../wordpress/service.js";
 import { credentialsPath } from "./utils.js";
 import { bootstrapWp } from "./bootstrap.js";
-import { mkdirSync, writeFileSync } from "node:fs";
 import { dirname } from "node:path";
+import { mkdirSync, writeFileSync } from "node:fs";
 
 //#region src/cli/wp/setup.ts
 /**

package/dist/cli/wp/utils.d.ts

@@ -14,14 +14,6 @@ import { DevPluginSource, PluginSource, TestCredentials } from "./types.js";
  * Bumping `SEED_VERSION` invalidates older marks and forces a reseed.
  */
 declare function isSeeded(): Promise<boolean>;
-/** Build a GitHub release-zip URL for `PluginSource.source` (asset named `<tag>.zip`). */
-declare function githubRelease(repo: string, tag: string): string;
-/**
- * Download URL for a Kizlo plugin's latest release, served by kizlo.io (it 302s to
- * the current GitHub release asset). Always tracks the newest published version —
- * use {@link githubRelease} instead to pin a specific tag.
- */
-declare function kizloRelease(slug: string): string;
 /** Resolve a `PluginSource` to the `(name, source)` pair `ensurePlugin` needs. */
 declare function resolvePluginSource(plugin: PluginSource): [name: string, source: string];
 /**
@@ -63,4 +55,4 @@ declare function getTestCredentials(): TestCredentials;
  */
 declare function recordedPort(): number | undefined;
 //#endregion
-export { activateLocalPlugin, credentialsPath, ensurePlugin, ensurePlugins, findConfigDir, getTestCredentials, githubRelease, isSeeded, kizloRelease, recordedPort, resolvePluginSource };
+export { activateLocalPlugin, credentialsPath, ensurePlugin, ensurePlugins, findConfigDir, getTestCredentials, isSeeded, recordedPort, resolvePluginSource };

package/dist/cli/wp/utils.js

@@ -1,8 +1,8 @@
 import { isLocalPlugin } from "./types.js";
-import { compose, wpCli } from "./docker.js";
 import { CONFIG_FILES, CREDENTIALS_REL, SEED_MARKER_OPTION, SEED_VERSION } from "./constants.js";
-import { existsSync, readFileSync } from "node:fs";
+import { compose, wpCli } from "./docker.js";
 import { basename, dirname, resolve } from "node:path";
+import { existsSync, readFileSync } from "node:fs";
 
 //#region src/cli/wp/utils.ts
 /**
@@ -29,18 +29,6 @@ async function isSeeded() {
 	]);
 	return marker.code === 0 && marker.stdout.trim() === SEED_VERSION;
 }
-/** Build a GitHub release-zip URL for `PluginSource.source` (asset named `<tag>.zip`). */
-function githubRelease(repo, tag) {
-	return `https://github.com/${repo}/releases/download/${tag}/${tag}.zip`;
-}
-/**
-* Download URL for a Kizlo plugin's latest release, served by kizlo.io (it 302s to
-* the current GitHub release asset). Always tracks the newest published version —
-* use {@link githubRelease} instead to pin a specific tag.
-*/
-function kizloRelease(slug) {
-	return `https://kizlo.io/plugins/${slug}/download`;
-}
 /** Resolve a `PluginSource` to the `(name, source)` pair `ensurePlugin` needs. */
 function resolvePluginSource(plugin) {
 	return typeof plugin === "string" ? [plugin, plugin] : [plugin.name, plugin.source];
@@ -160,4 +148,4 @@ function recordedPort() {
 }
 
 //#endregion
-export { activateLocalPlugin, credentialsPath, ensurePlugin, ensurePlugins, findConfigDir, getTestCredentials, githubRelease, isSeeded, kizloRelease, recordedPort, resolvePluginSource };
+export { activateLocalPlugin, credentialsPath, ensurePlugin, ensurePlugins, findConfigDir, getTestCredentials, isSeeded, recordedPort, resolvePluginSource };

package/dist/index.d.ts

@@ -17,20 +17,19 @@ import "./wordpress/index.js";
 import { DevPluginSource, Fixture, FixtureCleanupFn, FixtureSeedFn, JsonValue, LocalPlugin, PluginSource, SeedContext, TestAdminUser, TestCredentials, TestUser, defineFixture, isLocalPlugin } from "./cli/wp/types.js";
 import { AuthAdapter, AuthGetUser, AuthUser, authMock, createAuthAdapter } from "./adapters/auth.js";
 import { CaptchaAdapter, altcha, arkose, createCaptchaAdapter, friendlyCaptcha, hcaptcha, recaptcha, turnstile } from "./adapters/captcha.js";
-import { CONTENT_TYPES, ContentType, ListSitemapUrlInput, ListSitemapUrlInputBase, Robots, RobotsRule, Seo, SeoHead, SeoSchema, Sitemap, SitemapIndex, SitemapList, SitemapUrl, SitemapUrlImage, SitemapUrlList } from "./seo/schema.js";
-import { WPK_ListSitemapUrlInput, WPK_RobotRule, WPK_Robots, WPK_Seo, WPK_Sitemap, WPK_SitemapContentType, WPK_SitemapIndex, WPK_SitemapUrl, WPK_SitemapUrlImage } from "./seo/types.js";
-import { SitemapIndexEntry } from "./seo/utils.js";
 import { CurrencyFormat, IdentifierInput, LIST_ORDER, ListMetadata, ListOrder, Media, PreviewTokenData, PreviewTokenPayload } from "./shared/schema.js";
 import { AnyContext, AnyNestedClient, CookiesAdapter, CookiesDeleteAll, CookiesGetAll, CookiesSetAll, HTTPMethod, List, MaybeOptionalOptions, RedirectInput, RedirectStatus } from "./shared/types.js";
 import { createCookiesAdapter } from "./adapters/cookies.js";
 import { ConnInfo, GeoAdapter, GeoGetConnInfo, createGeoAdapter, geoMock } from "./adapters/geo.js";
 import { geoVercelNext } from "./adapters/geo.vercel.js";
 import { ConsoleLogAdapterOptions, Environment, LogLevel, LogPayload, Logger, LoggerAdapter, consoleLog, createLoggerAdapter, noopAdapter } from "./adapters/logger.js";
-import { AuthorsSettings, AuthorsSettingsInput, BrandSettings, BrandSettingsInput, CrawlingSettings, CrawlingSettingsInput, IdentitySettings, IdentitySettingsInput, OrganizationFounder, OrganizationSettings, OrganizationSettingsInput, PersonSettings, PersonSettingsInput, PostStatusDefinition, PostTypeSettings, PostTypeSettingsInput, Settings, SiteSettings, SiteSettingsInput, SocialProfile, TaxonomySettings, TaxonomySettingsInput, WebhookSettings, WebhookSettingsInput } from "./settings/service.interface.js";
+import { AuthorsSettings, AuthorsSettingsInput, BrandSettings, BrandSettingsInput, CrawlingSettings, CrawlingSettingsInput, IdentitySettings, IdentitySettingsInput, OrganizationFounder, OrganizationSettings, OrganizationSettingsInput, PersonSettings, PersonSettingsInput, PostStatusDefinition, PostTypeSettings, PostTypeSettingsInput, Settings, SiteSettings, SiteSettingsInput, SocialProfile, TaxonomySettings, TaxonomySettingsInput, UploadsSettings, UploadsSettingsInput, WebhookSettings, WebhookSettingsInput } from "./settings/service.interface.js";
 import { IconDescriptor, ManifestIcon, ResolvedIcons, resolveIcons } from "./brand/icons.js";
+import { CookiesStorage } from "./cookie.js";
 import { SettingsService } from "./settings/service.js";
 import { Service, ServiceConfig } from "./service.js";
 import { AuthUserFn, ConnInfoFn, Context, ContextConfig, ServerContext, VerifyCaptchaFn, VerifyPreviewTokenFn } from "./context.js";
+import { ROUTER_MAP, RouterMap } from "./router.js";
 import { AnyEventSchema, AnyEvents, EventHandler, EventHandlerFn, InferEventUnion, WebhookOptions, createEventHandler, createWebhookRouter } from "./webhook/index.js";
 import { COMMON_ERRORS, CommonErrorCode, CommonErrorLiteral, CommonErrorMap, DefinedErrorMapLike, ErrorDefinition, KizloError, KizloErrorOptions, ThrowableErrorFn, ThrowableErrorMap, WithCommonErrorMap, createThrowableErrorMap, defineErrorMap, isKizloError, toKizloError } from "./shared/error.js";
 import { AnyMiddleware, ExtractMiddlewareContextOutput, InferUses, Middleware, MiddlewareHandler, MiddlewareNextFn, MiddlewareOptions, MiddlewareResult, createMiddleware } from "./shared/middleware.js";
@@ -40,10 +39,13 @@ import { AnyKizloConfig, CreateKizloOptions, Kizlo, KizloConfig, KizloTarget, Ro
 import { WEB_MANIFEST_ROUTE, WebManifest, buildWebManifest, createManifestRoute } from "./brand/manifest.js";
 import "./brand/index.js";
 import { KizloClient, KizloClientConfig, createKizloClient } from "./client.js";
+import { CONTENT_TYPES, ContentType, ListSitemapUrlInput, ListSitemapUrlInputBase, Robots, RobotsRule, Seo, SeoHead, SeoSchema, Sitemap, SitemapIndex, SitemapList, SitemapUrl, SitemapUrlImage, SitemapUrlList } from "./seo/schema.js";
+import { WPK_ListSitemapUrlInput, WPK_RobotRule, WPK_Robots, WPK_Seo, WPK_Sitemap, WPK_SitemapContentType, WPK_SitemapIndex, WPK_SitemapUrl, WPK_SitemapUrlImage } from "./seo/types.js";
+import { SitemapIndexEntry, deserializeSeo, parseSitemapSlug, renderSitemapIndex, renderUrlSet, sitemapEntryPath, xmlResponse } from "./seo/utils.js";
 import { CreateSitemapRouteOptions, SITEMAP_BASE, SITEMAP_INDEX_SLUG, SitemapRouteExtra, createSitemapRoute } from "./seo/sitemap.js";
 import { Contract, ContractProcedure, generateContract, isContractProcedure, restoreContract } from "./shared/contract.js";
 import { ShaAlgorithm, compare, hash, hmac } from "./shared/crypto.js";
 import { Identifier, parseIdentifier } from "./shared/identifier.js";
 import { createOrpcRouter } from "./shared/router.js";
 import { deserializeCurrencyFormat, deserializeListMetadata, emptyList, serializeCurrencyFormat } from "./shared/serialize.js";
-export { AnyContext, AnyEventSchema, AnyEvents, AnyExtension, AnyKizloConfig, AnyMiddleware, AnyNestedClient, AnyProcedure, AnyProcedureRouter, AuthAdapter, AuthGetUser, AuthUser, AuthUserFn, AuthorsSettings, AuthorsSettingsInput, BaseHandlerOptions, BrandSettings, BrandSettingsInput, CART_HASH_HEADER_KEY, COMMON_ERRORS, CONTENT_TYPES, CaptchaAdapter, CommentService, CommonErrorCode, CommonErrorLiteral, CommonErrorMap, ConnInfo, ConnInfoFn, ConsoleLogAdapterOptions, ContentType, Context, ContextConfig, Contract, ContractProcedure, CookiesAdapter, CookiesDeleteAll, CookiesGetAll, CookiesSetAll, CrawlingSettings, CrawlingSettingsInput, CreateKizloOptions, CreateSitemapRouteOptions, CurrencyFormat, DefinedErrorMapLike, DevPluginSource, Environment, ErrorDefinition, EventHandler, EventHandlerFn, Extension, ExtensionInitFn, ExtensionInitOptions, ExtensionInitResult, ExtractExtensionRouter, ExtractMiddlewareContextOutput, ExtractParams, ExtractProcedureByScope, Fixture, FixtureCleanupFn, FixtureSeedFn, GeoAdapter, GeoGetConnInfo, HTTPMethod, IconDescriptor, Identifier, IdentifierInput, IdentitySettings, IdentitySettingsInput, InferEventUnion, InferExtensionRouter, InferUses, InvocationScope, JsonValue, Kizlo, KizloClient, KizloClientConfig, KizloConfig, KizloError, KizloErrorOptions, KizloTarget, LIST_ORDER, List, ListMetadata, ListOrder, ListSitemapUrlInput, ListSitemapUrlInputBase, LocalPlugin, LogLevel, LogPayload, Logger, LoggerAdapter, ManifestIcon, MaybeOptionalOptions, Media, MenuItemService, MenuService, Middleware, MiddlewareHandler, MiddlewareNextFn, MiddlewareOptions, MiddlewareResult, OpenapiPart, OrganizationFounder, OrganizationSettings, OrganizationSettingsInput, PersonSettings, PersonSettingsInput, PluginSource, PostService, PostStatusDefinition, PostTypeSettings, PostTypeSettingsInput, PreviewTokenData, PreviewTokenPayload, Procedure, ProcedureContext, ProcedureErrors, ProcedureHandler, ProcedureOptions, RedirectInput, RedirectStatus, ResolveParamsPart, ResolvedIcons, ResolvedSchemaInput, ResolvedSchemaOutput, Robots, RobotsRule, RootRouter, RouterDepthTuple, S2SClient, SAFE_REQUEST_TIMEOUT, SITEMAP_BASE, SITEMAP_INDEX_SLUG, SchemaIO, SeedContext, Seo, SeoHead, SeoSchema, ServerContext, Service, ServiceAdapters, ServiceConfig, Settings, SettingsService, ShaAlgorithm, SiteSettings, SiteSettingsInput, Sitemap, SitemapIndex, type SitemapIndexEntry, SitemapList, SitemapRouteExtra, SitemapUrl, SitemapUrlImage, SitemapUrlList, SocialProfile, TaxonomySettings, TaxonomySettingsInput, TestAdminUser, TestCredentials, TestUser, ThrowableErrorFn, ThrowableErrorMap, UNEXPECTED_BODY_SNIPPET_LENGTH, UserService, VerifyCaptchaFn, VerifyPreviewTokenFn, WC_CORE_BASE, WC_STORE_BASE, WEB_MANIFEST_ROUTE, WPK_ListSitemapUrlInput, WPK_RobotRule, WPK_Robots, WPK_Seo, WPK_Sitemap, WPK_SitemapContentType, WPK_SitemapIndex, WPK_SitemapUrl, WPK_SitemapUrlImage, WP_AUTH_HEADER_KEY, WP_AUTH_TYPE, WP_CORE_BASE, WP_Comment, WP_CommentAvatarUrls, WP_CommentContent, WP_CommentContentInput, WP_CommentCreateErrorCode, WP_CommentCreateInput, WP_CommentDeleteErrorCode, WP_CommentDeleteInput, WP_CommentDeleteResponse, WP_CommentLinks, WP_CommentListErrorCode, WP_CommentListInput, WP_CommentOrderBy, WP_CommentRetrieveErrorCode, WP_CommentRetrieveInput, WP_CommentStatus, WP_CommentStatusFilter, WP_CommentStatusInput, WP_CommentType, WP_CommentUpdateErrorCode, WP_CommentUpdateInput, WP_CommonErrorCode, WP_Context, WP_CurrencyFormat, WP_Error, WP_ErrorData, WP_KIZLO_BASE, WP_Link, WP_List, WP_ListMetadata, WP_ListOrder, WP_Menu, WP_MenuCreateErrorCode, WP_MenuCreateInput, WP_MenuDeleteErrorCode, WP_MenuDeleteInput, WP_MenuDeleteResponse, WP_MenuItem, WP_MenuItemCreateErrorCode, WP_MenuItemCreateInput, WP_MenuItemDeleteErrorCode, WP_MenuItemDeleteInput, WP_MenuItemDeleteResponse, WP_MenuItemLinks, WP_MenuItemListErrorCode, WP_MenuItemListInput, WP_MenuItemOrderBy, WP_MenuItemRetrieveErrorCode, WP_MenuItemRetrieveInput, WP_MenuItemStatus, WP_MenuItemStatusFilter, WP_MenuItemTarget, WP_MenuItemTaxRelation, WP_MenuItemTitle, WP_MenuItemTitleInput, WP_MenuItemType, WP_MenuItemUpdateErrorCode, WP_MenuItemUpdateInput, WP_MenuLinks, WP_MenuListErrorCode, WP_MenuListInput, WP_MenuOrderBy, WP_MenuRetrieveErrorCode, WP_MenuRetrieveInput, WP_MenuUpdateErrorCode, WP_MenuUpdateInput, WP_Post, WP_PostCommentStatus, WP_PostContent, WP_PostContentInput, WP_PostCreateErrorCode, WP_PostCreateInput, WP_PostDeleteErrorCode, WP_PostDeleteInput, WP_PostDeleteResponse, WP_PostExcerpt, WP_PostExcerptInput, WP_PostFormat, WP_PostGuid, WP_PostLinks, WP_PostListErrorCode, WP_PostListInput, WP_PostOrderBy, WP_PostRetrieveErrorCode, WP_PostRetrieveInput, WP_PostStatus, WP_PostStatusFilter, WP_PostTaxRelation, WP_PostTitle, WP_PostTitleInput, WP_PostUpdateErrorCode, WP_PostUpdateInput, WP_RequestInput, WP_Result, WP_User, WP_UserAvatarUrls, WP_UserCapabilities, WP_UserCreateErrorCode, WP_UserCreateInput, WP_UserDeleteErrorCode, WP_UserDeleteInput, WP_UserDeleteMeErrorCode, WP_UserDeleteMeInput, WP_UserDeleteMeResponse, WP_UserDeleteResponse, WP_UserLinks, WP_UserListErrorCode, WP_UserListInput, WP_UserOrderBy, WP_UserRetrieveErrorCode, WP_UserRetrieveInput, WP_UserRetrieveMeErrorCode, WP_UserRetrieveMeInput, WP_UserUpdateErrorCode, WP_UserUpdateInput, WP_UserUpdateMeErrorCode, WP_UserUpdateMeInput, WP_UserWho, WebManifest, WebhookOptions, WebhookSettings, WebhookSettingsInput, WithCommonErrorMap, WordPressCredentials, WordPressService, altcha, arkose, authMock, buildProcedure, buildWebManifest, combineDetailed, compare, consoleLog, createAuthAdapter, createCaptchaAdapter, createCookiesAdapter, createEventHandler, createExtension, createGeoAdapter, createKizlo, createKizloClient, createLoggerAdapter, createManifestRoute, createMiddleware, createOrpcRouter, createProcedure, createSitemapRoute, createThrowableErrorMap, createWebhookRouter, defineErrorMap, defineFixture, deserializeCurrencyFormat, deserializeListMetadata, emptyList, friendlyCaptcha, generateContract, geoMock, geoVercelNext, handleUnexpectedError, hash, hcaptcha, hmac, isContractProcedure, isKizloError, isLocalPlugin, isWordPressResourceError, noopAdapter, parseIdentifier, recaptcha, resolveIcons, resolveKizloConfig, restoreContract, schemaType, serializeCurrencyFormat, toKizloError, turnstile };
+export { AnyContext, AnyEventSchema, AnyEvents, AnyExtension, AnyKizloConfig, AnyMiddleware, AnyNestedClient, AnyProcedure, AnyProcedureRouter, AuthAdapter, AuthGetUser, AuthUser, AuthUserFn, AuthorsSettings, AuthorsSettingsInput, BaseHandlerOptions, BrandSettings, BrandSettingsInput, CART_HASH_HEADER_KEY, COMMON_ERRORS, CONTENT_TYPES, CaptchaAdapter, CommentService, CommonErrorCode, CommonErrorLiteral, CommonErrorMap, ConnInfo, ConnInfoFn, ConsoleLogAdapterOptions, ContentType, Context, ContextConfig, Contract, ContractProcedure, CookiesAdapter, CookiesDeleteAll, CookiesGetAll, CookiesSetAll, CookiesStorage, CrawlingSettings, CrawlingSettingsInput, CreateKizloOptions, CreateSitemapRouteOptions, CurrencyFormat, DefinedErrorMapLike, DevPluginSource, Environment, ErrorDefinition, EventHandler, EventHandlerFn, Extension, ExtensionInitFn, ExtensionInitOptions, ExtensionInitResult, ExtractExtensionRouter, ExtractMiddlewareContextOutput, ExtractParams, ExtractProcedureByScope, Fixture, FixtureCleanupFn, FixtureSeedFn, GeoAdapter, GeoGetConnInfo, HTTPMethod, IconDescriptor, Identifier, IdentifierInput, IdentitySettings, IdentitySettingsInput, InferEventUnion, InferExtensionRouter, InferUses, InvocationScope, JsonValue, Kizlo, KizloClient, KizloClientConfig, KizloConfig, KizloError, KizloErrorOptions, KizloTarget, LIST_ORDER, List, ListMetadata, ListOrder, ListSitemapUrlInput, ListSitemapUrlInputBase, LocalPlugin, LogLevel, LogPayload, Logger, LoggerAdapter, ManifestIcon, MaybeOptionalOptions, Media, MenuItemService, MenuService, Middleware, MiddlewareHandler, MiddlewareNextFn, MiddlewareOptions, MiddlewareResult, OpenapiPart, OrganizationFounder, OrganizationSettings, OrganizationSettingsInput, PersonSettings, PersonSettingsInput, PluginSource, PostService, PostStatusDefinition, PostTypeSettings, PostTypeSettingsInput, PreviewTokenData, PreviewTokenPayload, Procedure, ProcedureContext, ProcedureErrors, ProcedureHandler, ProcedureOptions, ROUTER_MAP, RedirectInput, RedirectStatus, ResolveParamsPart, ResolvedIcons, ResolvedSchemaInput, ResolvedSchemaOutput, Robots, RobotsRule, RootRouter, RouterDepthTuple, RouterMap, S2SClient, SAFE_REQUEST_TIMEOUT, SITEMAP_BASE, SITEMAP_INDEX_SLUG, SchemaIO, SeedContext, Seo, SeoHead, SeoSchema, ServerContext, Service, ServiceAdapters, ServiceConfig, Settings, SettingsService, ShaAlgorithm, SiteSettings, SiteSettingsInput, Sitemap, SitemapIndex, SitemapIndexEntry, SitemapList, SitemapRouteExtra, SitemapUrl, SitemapUrlImage, SitemapUrlList, SocialProfile, TaxonomySettings, TaxonomySettingsInput, TestAdminUser, TestCredentials, TestUser, ThrowableErrorFn, ThrowableErrorMap, UNEXPECTED_BODY_SNIPPET_LENGTH, UploadsSettings, UploadsSettingsInput, UserService, VerifyCaptchaFn, VerifyPreviewTokenFn, WC_CORE_BASE, WC_STORE_BASE, WEB_MANIFEST_ROUTE, WPK_ListSitemapUrlInput, WPK_RobotRule, WPK_Robots, WPK_Seo, WPK_Sitemap, WPK_SitemapContentType, WPK_SitemapIndex, WPK_SitemapUrl, WPK_SitemapUrlImage, WP_AUTH_HEADER_KEY, WP_AUTH_TYPE, WP_CORE_BASE, WP_Comment, WP_CommentAvatarUrls, WP_CommentContent, WP_CommentContentInput, WP_CommentCreateErrorCode, WP_CommentCreateInput, WP_CommentDeleteErrorCode, WP_CommentDeleteInput, WP_CommentDeleteResponse, WP_CommentLinks, WP_CommentListErrorCode, WP_CommentListInput, WP_CommentOrderBy, WP_CommentRetrieveErrorCode, WP_CommentRetrieveInput, WP_CommentStatus, WP_CommentStatusFilter, WP_CommentStatusInput, WP_CommentType, WP_CommentUpdateErrorCode, WP_CommentUpdateInput, WP_CommonErrorCode, WP_Context, WP_CurrencyFormat, WP_Error, WP_ErrorData, WP_KIZLO_BASE, WP_Link, WP_List, WP_ListMetadata, WP_ListOrder, WP_Menu, WP_MenuCreateErrorCode, WP_MenuCreateInput, WP_MenuDeleteErrorCode, WP_MenuDeleteInput, WP_MenuDeleteResponse, WP_MenuItem, WP_MenuItemCreateErrorCode, WP_MenuItemCreateInput, WP_MenuItemDeleteErrorCode, WP_MenuItemDeleteInput, WP_MenuItemDeleteResponse, WP_MenuItemLinks, WP_MenuItemListErrorCode, WP_MenuItemListInput, WP_MenuItemOrderBy, WP_MenuItemRetrieveErrorCode, WP_MenuItemRetrieveInput, WP_MenuItemStatus, WP_MenuItemStatusFilter, WP_MenuItemTarget, WP_MenuItemTaxRelation, WP_MenuItemTitle, WP_MenuItemTitleInput, WP_MenuItemType, WP_MenuItemUpdateErrorCode, WP_MenuItemUpdateInput, WP_MenuLinks, WP_MenuListErrorCode, WP_MenuListInput, WP_MenuOrderBy, WP_MenuRetrieveErrorCode, WP_MenuRetrieveInput, WP_MenuUpdateErrorCode, WP_MenuUpdateInput, WP_Post, WP_PostCommentStatus, WP_PostContent, WP_PostContentInput, WP_PostCreateErrorCode, WP_PostCreateInput, WP_PostDeleteErrorCode, WP_PostDeleteInput, WP_PostDeleteResponse, WP_PostExcerpt, WP_PostExcerptInput, WP_PostFormat, WP_PostGuid, WP_PostLinks, WP_PostListErrorCode, WP_PostListInput, WP_PostOrderBy, WP_PostRetrieveErrorCode, WP_PostRetrieveInput, WP_PostStatus, WP_PostStatusFilter, WP_PostTaxRelation, WP_PostTitle, WP_PostTitleInput, WP_PostUpdateErrorCode, WP_PostUpdateInput, WP_RequestInput, WP_Result, WP_User, WP_UserAvatarUrls, WP_UserCapabilities, WP_UserCreateErrorCode, WP_UserCreateInput, WP_UserDeleteErrorCode, WP_UserDeleteInput, WP_UserDeleteMeErrorCode, WP_UserDeleteMeInput, WP_UserDeleteMeResponse, WP_UserDeleteResponse, WP_UserLinks, WP_UserListErrorCode, WP_UserListInput, WP_UserOrderBy, WP_UserRetrieveErrorCode, WP_UserRetrieveInput, WP_UserRetrieveMeErrorCode, WP_UserRetrieveMeInput, WP_UserUpdateErrorCode, WP_UserUpdateInput, WP_UserUpdateMeErrorCode, WP_UserUpdateMeInput, WP_UserWho, WebManifest, WebhookOptions, WebhookSettings, WebhookSettingsInput, WithCommonErrorMap, WordPressCredentials, WordPressService, altcha, arkose, authMock, buildProcedure, buildWebManifest, combineDetailed, compare, consoleLog, createAuthAdapter, createCaptchaAdapter, createCookiesAdapter, createEventHandler, createExtension, createGeoAdapter, createKizlo, createKizloClient, createLoggerAdapter, createManifestRoute, createMiddleware, createOrpcRouter, createProcedure, createSitemapRoute, createThrowableErrorMap, createWebhookRouter, defineErrorMap, defineFixture, deserializeCurrencyFormat, deserializeListMetadata, deserializeSeo, emptyList, friendlyCaptcha, generateContract, geoMock, geoVercelNext, handleUnexpectedError, hash, hcaptcha, hmac, isContractProcedure, isKizloError, isLocalPlugin, isWordPressResourceError, noopAdapter, parseIdentifier, parseSitemapSlug, recaptcha, renderSitemapIndex, renderUrlSet, resolveIcons, resolveKizloConfig, restoreContract, schemaType, serializeCurrencyFormat, sitemapEntryPath, toKizloError, turnstile, xmlResponse };

package/dist/index.js

@@ -14,6 +14,7 @@ import { createOrpcRouter } from "./shared/router.js";
 import { generateContract, isContractProcedure, restoreContract } from "./shared/contract.js";
 import { CurrencyFormat, IdentifierInput, LIST_ORDER, ListMetadata, ListOrder, Media, PreviewTokenData, PreviewTokenPayload } from "./shared/schema.js";
 import { KizloClient, createKizloClient } from "./client.js";
+import { CookiesStorage } from "./cookie.js";
 import { CART_HASH_HEADER_KEY, SAFE_REQUEST_TIMEOUT, UNEXPECTED_BODY_SNIPPET_LENGTH, WC_CORE_BASE, WC_STORE_BASE, WP_AUTH_HEADER_KEY, WP_AUTH_TYPE, WP_CORE_BASE, WP_KIZLO_BASE } from "./wordpress/constants.js";
 import { CommentService } from "./wordpress/comment/service.js";
 import { WP_Error } from "./wordpress/error.js";
@@ -29,10 +30,12 @@ import { Context } from "./context.js";
 import { deserializeCurrencyFormat, deserializeListMetadata, emptyList, serializeCurrencyFormat } from "./shared/serialize.js";
 import { parseIdentifier } from "./shared/identifier.js";
 import { CONTENT_TYPES, ContentType, ListSitemapUrlInput, ListSitemapUrlInputBase, Robots, RobotsRule, Seo, SeoHead, SeoSchema, Sitemap, SitemapIndex, SitemapList, SitemapUrl, SitemapUrlImage, SitemapUrlList } from "./seo/schema.js";
+import { deserializeSeo, parseSitemapSlug, renderSitemapIndex, renderUrlSet, sitemapEntryPath, xmlResponse } from "./seo/utils.js";
+import { ROUTER_MAP } from "./router.js";
 import { createEventHandler, createWebhookRouter } from "./webhook/index.js";
 import { Kizlo, createKizlo, resolveKizloConfig } from "./kizlo.js";
 import { SITEMAP_BASE, SITEMAP_INDEX_SLUG, createSitemapRoute } from "./seo/sitemap.js";
 import { createExtension } from "./shared/extension.js";
 import { createMiddleware } from "./shared/middleware.js";
 
-export { CART_HASH_HEADER_KEY, COMMON_ERRORS, CONTENT_TYPES, CommentService, ContentType, Context, CurrencyFormat, IdentifierInput, Kizlo, KizloClient, KizloError, LIST_ORDER, ListMetadata, ListOrder, ListSitemapUrlInput, ListSitemapUrlInputBase, Media, MenuItemService, MenuService, PostService, PreviewTokenData, PreviewTokenPayload, Robots, RobotsRule, SAFE_REQUEST_TIMEOUT, SITEMAP_BASE, SITEMAP_INDEX_SLUG, Seo, SeoHead, SeoSchema, Service, SettingsService, Sitemap, SitemapIndex, SitemapList, SitemapUrl, SitemapUrlImage, SitemapUrlList, UNEXPECTED_BODY_SNIPPET_LENGTH, UserService, WC_CORE_BASE, WC_STORE_BASE, WEB_MANIFEST_ROUTE, WP_AUTH_HEADER_KEY, WP_AUTH_TYPE, WP_CORE_BASE, WP_Error, WP_KIZLO_BASE, WordPressService, altcha, arkose, authMock, buildProcedure, buildWebManifest, combineDetailed, compare, consoleLog, createAuthAdapter, createCaptchaAdapter, createCookiesAdapter, createEventHandler, createExtension, createGeoAdapter, createKizlo, createKizloClient, createLoggerAdapter, createManifestRoute, createMiddleware, createOrpcRouter, createProcedure, createSitemapRoute, createThrowableErrorMap, createWebhookRouter, defineErrorMap, defineFixture, deserializeCurrencyFormat, deserializeListMetadata, emptyList, friendlyCaptcha, generateContract, geoMock, geoVercelNext, handleUnexpectedError, hash, hcaptcha, hmac, isContractProcedure, isKizloError, isLocalPlugin, isWordPressResourceError, noopAdapter, parseIdentifier, recaptcha, resolveIcons, resolveKizloConfig, restoreContract, schemaType, serializeCurrencyFormat, toKizloError, turnstile };
+export { CART_HASH_HEADER_KEY, COMMON_ERRORS, CONTENT_TYPES, CommentService, ContentType, Context, CookiesStorage, CurrencyFormat, IdentifierInput, Kizlo, KizloClient, KizloError, LIST_ORDER, ListMetadata, ListOrder, ListSitemapUrlInput, ListSitemapUrlInputBase, Media, MenuItemService, MenuService, PostService, PreviewTokenData, PreviewTokenPayload, ROUTER_MAP, Robots, RobotsRule, SAFE_REQUEST_TIMEOUT, SITEMAP_BASE, SITEMAP_INDEX_SLUG, Seo, SeoHead, SeoSchema, Service, SettingsService, Sitemap, SitemapIndex, SitemapList, SitemapUrl, SitemapUrlImage, SitemapUrlList, UNEXPECTED_BODY_SNIPPET_LENGTH, UserService, WC_CORE_BASE, WC_STORE_BASE, WEB_MANIFEST_ROUTE, WP_AUTH_HEADER_KEY, WP_AUTH_TYPE, WP_CORE_BASE, WP_Error, WP_KIZLO_BASE, WordPressService, altcha, arkose, authMock, buildProcedure, buildWebManifest, combineDetailed, compare, consoleLog, createAuthAdapter, createCaptchaAdapter, createCookiesAdapter, createEventHandler, createExtension, createGeoAdapter, createKizlo, createKizloClient, createLoggerAdapter, createManifestRoute, createMiddleware, createOrpcRouter, createProcedure, createSitemapRoute, createThrowableErrorMap, createWebhookRouter, defineErrorMap, defineFixture, deserializeCurrencyFormat, deserializeListMetadata, deserializeSeo, emptyList, friendlyCaptcha, generateContract, geoMock, geoVercelNext, handleUnexpectedError, hash, hcaptcha, hmac, isContractProcedure, isKizloError, isLocalPlugin, isWordPressResourceError, noopAdapter, parseIdentifier, parseSitemapSlug, recaptcha, renderSitemapIndex, renderUrlSet, resolveIcons, resolveKizloConfig, restoreContract, schemaType, serializeCurrencyFormat, sitemapEntryPath, toKizloError, turnstile, xmlResponse };

package/dist/integrations/nextjs/manifest.js

@@ -1,17 +1,10 @@
 import { WEB_MANIFEST_ROUTE, createManifestRoute } from "../../brand/manifest.js";
+import { createCachedTextRoute } from "./utils.js";
 
 //#region src/integrations/nextjs/manifest.ts
 const MANIFEST_CACHE_TAG = "kizlo:manifest";
 function createManifestRoute$1(client) {
-	const handler = createManifestRoute(client);
-	let getBody;
-	return async function GET(request) {
-		if (!getBody) {
-			const { unstable_cache } = await import("next/cache");
-			getBody = unstable_cache(async () => (await handler(request)).text(), [MANIFEST_CACHE_TAG], { tags: [MANIFEST_CACHE_TAG] });
-		}
-		return new Response(await getBody(), { headers: { "Content-Type": "application/manifest+json" } });
-	};
+	return createCachedTextRoute(createManifestRoute(client), MANIFEST_CACHE_TAG, "application/manifest+json");
 }
 
 //#endregion

package/dist/integrations/nextjs/metadata.d.ts

@@ -1,5 +1,5 @@
-import { SeoHead } from "../../seo/schema.js";
 import { S2SClient } from "../../kizlo.js";
+import { SeoHead } from "../../seo/schema.js";
 import { Metadata, Viewport } from "next";
 
 //#region src/integrations/nextjs/metadata.d.ts

package/dist/integrations/nextjs/metadata.js

@@ -45,8 +45,7 @@ function toNextIcon(icon) {
 	return {
 		url: icon.url,
 		type: icon.type,
-		sizes: icon.sizes,
-		media: icon.media
+		sizes: icon.sizes
 	};
 }
 function createPageMetadata(head) {

package/dist/integrations/nextjs/revalidate.d.ts

@@ -1,4 +1,6 @@
 import { KizloEvent } from "../../webhook/schema.js";
+import { AnyProcedureRouter } from "../../shared/procedure.js";
+import { Extension } from "../../shared/extension.js";
 import "../../index.js";
 import { Pathname } from "@kizlo/shared";
 
@@ -24,5 +26,6 @@ interface NextRevalidateOptions {
    */
   sitemap?: false | RevalidateTarget | RevalidateTarget[];
 }
+declare function nextRevalidation(options?: NextRevalidateOptions): Extension<"nextjs-revalidation", AnyProcedureRouter>;
 //#endregion
-export { NextRevalidateOptions };
+export { NextRevalidateOptions, RevalidatePathFn, RevalidateTagFn, RevalidateTarget, nextRevalidation };

package/dist/integrations/nextjs/robots.d.ts

@@ -1,6 +1,7 @@
 import { S2SClient } from "../../kizlo.js";
 
 //#region src/integrations/nextjs/robots.d.ts
+declare const ROBOTS_CACHE_TAG = "kizlo:robots";
 declare function createRobotsRoute(client: S2SClient<[]>): (request: Request) => Promise<Response>;
 //#endregion
-export { createRobotsRoute };
+export { ROBOTS_CACHE_TAG, createRobotsRoute };

package/dist/integrations/nextjs/robots.js

@@ -1,17 +1,10 @@
+import { createCachedTextRoute } from "./utils.js";
 import { createRobotsRoute } from "../../seo/robots.js";
 
 //#region src/integrations/nextjs/robots.ts
 const ROBOTS_CACHE_TAG = "kizlo:robots";
 function createRobotsRoute$1(client) {
-	const handler = createRobotsRoute(client);
-	let getBody;
-	return async function GET(request) {
-		if (!getBody) {
-			const { unstable_cache } = await import("next/cache");
-			getBody = unstable_cache(async () => (await handler(request)).text(), [ROBOTS_CACHE_TAG], { tags: [ROBOTS_CACHE_TAG] });
-		}
-		return new Response(await getBody(), { headers: { "Content-Type": "text/plain; charset=utf-8" } });
-	};
+	return createCachedTextRoute(createRobotsRoute(client), ROBOTS_CACHE_TAG, "text/plain; charset=utf-8");
 }
 
 //#endregion

package/dist/integrations/nextjs/utils.d.ts

@@ -0,0 +1,13 @@
+import { CookiesAdapter } from "../../shared/types.js";
+
+//#region src/integrations/nextjs/utils.d.ts
+declare function createNextCookiesInterface(): CookiesAdapter;
+/**
+ * Wrap a core route handler in a lazily-initialised `unstable_cache` keyed by
+ * `cacheTag`, serving the handler's text body with a fixed `Content-Type`. The
+ * cache import is deferred so the module stays loadable outside a Next request.
+ */
+declare function createCachedTextRoute(handler: (request: Request) => Promise<Response>, cacheTag: string, contentType: string): (request: Request) => Promise<Response>;
+declare function getServerBaseUrl(): string;
+//#endregion
+export { createCachedTextRoute, createNextCookiesInterface, getServerBaseUrl };

package/dist/integrations/nextjs/utils.js

@@ -1,6 +1,43 @@
 import { KizloError } from "../../shared/error.js";
 
 //#region src/integrations/nextjs/utils.ts
+function createNextCookiesInterface() {
+	return {
+		getAll: async () => {
+			const cookies = (await import("next/headers")).cookies;
+			return (await cookies()).getAll();
+		},
+		setAll: async (cookieList) => {
+			const cookies = (await import("next/headers")).cookies;
+			const cookieJar = await cookies();
+			try {
+				for (const cookie of cookieList) cookieJar.set(cookie.name, cookie.value, cookie.options);
+			} catch {}
+		},
+		deleteAll: async (cookieList) => {
+			const cookies = (await import("next/headers")).cookies;
+			const cookieJar = await cookies();
+			try {
+				for (const cookie of cookieList) cookieJar.delete(cookie.name);
+			} catch {}
+		}
+	};
+}
+/**
+* Wrap a core route handler in a lazily-initialised `unstable_cache` keyed by
+* `cacheTag`, serving the handler's text body with a fixed `Content-Type`. The
+* cache import is deferred so the module stays loadable outside a Next request.
+*/
+function createCachedTextRoute(handler, cacheTag, contentType) {
+	let getBody;
+	return async function GET(request) {
+		if (!getBody) {
+			const { unstable_cache } = await import("next/cache");
+			getBody = unstable_cache(async () => (await handler(request)).text(), [cacheTag], { tags: [cacheTag] });
+		}
+		return new Response(await getBody(), { headers: { "Content-Type": contentType } });
+	};
+}
 function getServerBaseUrl() {
 	const baseUrl = process.env.NEXT_PUBLIC_KIZLO_BACKEND_URL;
 	if (!baseUrl) throw new KizloError("MISSING_ENV_VARIABLE", { message: "Please define NEXT_PUBLIC_KIZLO_BACKEND_URL in your .env file." });
@@ -8,4 +45,4 @@ function getServerBaseUrl() {
 }
 
 //#endregion
-export { getServerBaseUrl };
+export { createCachedTextRoute, createNextCookiesInterface, getServerBaseUrl };

package/dist/nextjs/server.d.ts

@@ -1,7 +1,9 @@
 import { WEB_MANIFEST_ROUTE } from "../brand/manifest.js";
-import { createRootMetadata, createRootViewport } from "../integrations/nextjs/metadata.js";
+import { NextRevalidateOptions, RevalidatePathFn, RevalidateTagFn, RevalidateTarget, nextRevalidation } from "../integrations/nextjs/revalidate.js";
 import { KizloServerOptions, createKizlo } from "../integrations/nextjs/kizlo.server.js";
 import { MANIFEST_CACHE_TAG, createManifestRoute } from "../integrations/nextjs/manifest.js";
-import { createRobotsRoute } from "../integrations/nextjs/robots.js";
+import { createPageMetadata, createRootMetadata, createRootViewport } from "../integrations/nextjs/metadata.js";
+import { ROBOTS_CACHE_TAG, createRobotsRoute } from "../integrations/nextjs/robots.js";
 import { SITEMAP_CACHE_TAG, SITEMAP_ROUTE, createSitemapRoute } from "../integrations/nextjs/sitemap.js";
-export { KizloServerOptions, MANIFEST_CACHE_TAG, SITEMAP_CACHE_TAG, SITEMAP_ROUTE, WEB_MANIFEST_ROUTE, createKizlo, createManifestRoute, createRobotsRoute, createRootMetadata, createRootViewport, createSitemapRoute };
+import { createCachedTextRoute, createNextCookiesInterface, getServerBaseUrl } from "../integrations/nextjs/utils.js";
+export { KizloServerOptions, MANIFEST_CACHE_TAG, NextRevalidateOptions, ROBOTS_CACHE_TAG, RevalidatePathFn, RevalidateTagFn, RevalidateTarget, SITEMAP_CACHE_TAG, SITEMAP_ROUTE, WEB_MANIFEST_ROUTE, createCachedTextRoute, createKizlo, createManifestRoute, createNextCookiesInterface, createPageMetadata, createRobotsRoute, createRootMetadata, createRootViewport, createSitemapRoute, getServerBaseUrl, nextRevalidation };

package/dist/nextjs/server.js

@@ -1,8 +1,10 @@
 import { WEB_MANIFEST_ROUTE } from "../brand/manifest.js";
-import { createRootMetadata, createRootViewport } from "../integrations/nextjs/metadata.js";
-import { createRobotsRoute } from "../integrations/nextjs/robots.js";
+import { createCachedTextRoute, createNextCookiesInterface, getServerBaseUrl } from "../integrations/nextjs/utils.js";
+import { ROBOTS_CACHE_TAG, createRobotsRoute } from "../integrations/nextjs/robots.js";
 import { SITEMAP_CACHE_TAG, SITEMAP_ROUTE, createSitemapRoute } from "../integrations/nextjs/sitemap.js";
+import { nextRevalidation } from "../integrations/nextjs/revalidate.js";
 import { createKizlo } from "../integrations/nextjs/kizlo.server.js";
 import { MANIFEST_CACHE_TAG, createManifestRoute } from "../integrations/nextjs/manifest.js";
+import { createPageMetadata, createRootMetadata, createRootViewport } from "../integrations/nextjs/metadata.js";
 
-export { MANIFEST_CACHE_TAG, SITEMAP_CACHE_TAG, SITEMAP_ROUTE, WEB_MANIFEST_ROUTE, createKizlo, createManifestRoute, createRobotsRoute, createRootMetadata, createRootViewport, createSitemapRoute };
+export { MANIFEST_CACHE_TAG, ROBOTS_CACHE_TAG, SITEMAP_CACHE_TAG, SITEMAP_ROUTE, WEB_MANIFEST_ROUTE, createCachedTextRoute, createKizlo, createManifestRoute, createNextCookiesInterface, createPageMetadata, createRobotsRoute, createRootMetadata, createRootViewport, createSitemapRoute, getServerBaseUrl, nextRevalidation };

package/dist/nextjs.d.ts

@@ -1,3 +1,2 @@
 import { KizloClientOptions, createKizloClient } from "./integrations/nextjs/kizlo.client.js";
-import { createPageMetadata } from "./integrations/nextjs/metadata.js";
-export { KizloClientOptions, createKizloClient, createPageMetadata };
+export { KizloClientOptions, createKizloClient };

package/dist/nextjs.js

@@ -1,4 +1,3 @@
 import { createKizloClient } from "./integrations/nextjs/kizlo.client.js";
-import { createPageMetadata } from "./integrations/nextjs/metadata.js";
 
-export { createKizloClient, createPageMetadata };
+export { createKizloClient };

package/dist/package.js

@@ -1,5 +1,5 @@
 //#region package.json
-var version = "0.6.0";
+var version = "0.7.0";
 
 //#endregion
 export { version };

package/dist/router.d.ts

@@ -167,7 +167,7 @@ declare const ROUTER_MAP: {
         include?: string | number | (string | number)[] | undefined;
         offset?: string | number | undefined;
         order?: "asc" | "desc" | undefined;
-        orderby?: "date" | "id" | "slug" | "title" | "author" | "include" | "parent" | "relevance" | "include_slugs" | undefined;
+        orderby?: "id" | "date" | "slug" | "title" | "author" | "include" | "parent" | "relevance" | "include_slugs" | undefined;
         searchColumns?: string[] | undefined;
         slug?: string | string[] | undefined;
         taxRelation?: "AND" | "OR" | undefined;
@@ -433,7 +433,7 @@ declare const ROUTER_MAP: {
           include?: string | number | (string | number)[] | undefined;
           offset?: string | number | undefined;
           order?: "asc" | "desc" | undefined;
-          orderby?: "date" | "id" | "slug" | "title" | "author" | "include" | "parent" | "relevance" | "include_slugs" | "menu_order" | undefined;
+          orderby?: "id" | "date" | "slug" | "title" | "author" | "include" | "parent" | "relevance" | "include_slugs" | "menu_order" | undefined;
           searchColumns?: string[] | undefined;
           slug?: string | string[] | undefined;
           taxRelation?: "AND" | "OR" | undefined;
@@ -504,7 +504,7 @@ declare const ROUTER_MAP: {
           include?: string | number | (string | number)[] | undefined;
           offset?: string | number | undefined;
           order?: "asc" | "desc" | undefined;
-          orderby?: "date" | "id" | "slug" | "title" | "author" | "include" | "parent" | "relevance" | "include_slugs" | "menu_order" | undefined;
+          orderby?: "id" | "date" | "slug" | "title" | "author" | "include" | "parent" | "relevance" | "include_slugs" | "menu_order" | undefined;
           searchColumns?: string[] | undefined;
           slug?: string | string[] | undefined;
           taxRelation?: "AND" | "OR" | undefined;
@@ -610,7 +610,7 @@ declare const ROUTER_MAP: {
         include?: string | number | (string | number)[] | undefined;
         offset?: string | number | undefined;
         order?: "asc" | "desc" | undefined;
-        orderby?: "date" | "id" | "post" | "include" | "parent" | undefined;
+        orderby?: "id" | "date" | "post" | "include" | "parent" | undefined;
         parent?: string | number | (string | number)[] | undefined;
         parentExclude?: string | number | (string | number)[] | undefined;
         post?: string | number | (string | number)[] | undefined;
@@ -779,9 +779,7 @@ declare const ROUTER_MAP: {
       logo_wordmark?: number | null | undefined;
       logo_wordmark_dark?: number | null | undefined;
       favicon?: number | null | undefined;
-      favicon_dark?: number | null | undefined;
-      ios_app_icon?: number | null | undefined;
-      android_app_icon?: number | null | undefined;
+      app_icon?: number | null | undefined;
       theme_color?: number | null | undefined;
       theme_color_dark?: number | null | undefined;
       background_color?: number | null | undefined;
@@ -821,6 +819,9 @@ declare const ROUTER_MAP: {
       taxonomies?: string[] | undefined;
       webhook_urls?: string[] | undefined;
     }, null, DefinedErrorMapLike>;
+    updateUploads: Procedure<"internal", {
+      allowed_mimes?: _kizlo_shared0.UploadMime[] | undefined;
+    }, null, DefinedErrorMapLike>;
     updatePostType: Procedure<"internal", {
       slug: string;
       data: {
@@ -854,4 +855,4 @@ declare const ROUTER_MAP: {
 };
 type RouterMap = typeof ROUTER_MAP;
 //#endregion
-export { RouterMap };
+export { ROUTER_MAP, RouterMap };

package/dist/seo/sitemap.d.ts

@@ -1,6 +1,6 @@
+import { S2SClient } from "../kizlo.js";
 import { SitemapUrl } from "./schema.js";
 import { SitemapIndexEntry } from "./utils.js";
-import { S2SClient } from "../kizlo.js";
 
 //#region src/seo/sitemap.d.ts
 

package/dist/seo/utils.d.ts

@@ -1,6 +1,16 @@
-import { Sitemap } from "./schema.js";
+import { Seo, Sitemap, SitemapUrl } from "./schema.js";
+import { WPK_Seo } from "./types.js";
 
 //#region src/seo/utils.d.ts
+declare function deserializeSeo(data: WPK_Seo): Seo;
 type SitemapIndexEntry = Pick<Sitemap, "key" | "pages" | "lastmod">;
+declare function sitemapEntryPath(key: string, page: number): string;
+declare function parseSitemapSlug(slug: string): {
+  key: string;
+  page: number;
+} | null;
+declare function renderSitemapIndex(sitemaps: readonly SitemapIndexEntry[], origin: string): string;
+declare function renderUrlSet(urls: SitemapUrl[]): string;
+declare function xmlResponse(body: string): Response;
 //#endregion
-export { SitemapIndexEntry };
+export { SitemapIndexEntry, deserializeSeo, parseSitemapSlug, renderSitemapIndex, renderUrlSet, sitemapEntryPath, xmlResponse };

package/dist/seo/utils.js

@@ -73,4 +73,4 @@ function xmlResponse(body) {
 }
 
 //#endregion
-export { deserializeSeo, parseSitemapSlug, renderSitemapIndex, renderUrlSet, xmlResponse };
+export { deserializeSeo, parseSitemapSlug, renderSitemapIndex, renderUrlSet, sitemapEntryPath, xmlResponse };

package/dist/settings/index.js

@@ -52,6 +52,11 @@ const SETTINGS_ROUTER_MAP = {
 		input: schemaType(),
 		output: schemaType()
 	}, async ({ context, input, errors }) => resolveUpdate(await context.service.settings.updateWebhook(input), context, errors, "Update webhook settings")),
+	updateUploads: createProcedure({
+		scope: "internal",
+		input: schemaType(),
+		output: schemaType()
+	}, async ({ context, input, errors }) => resolveUpdate(await context.service.settings.updateUploads(input), context, errors, "Update uploads settings")),
 	updatePostType: createProcedure({
 		scope: "internal",
 		input: schemaType(),

package/dist/settings/service.d.ts

@@ -1,5 +1,5 @@
 import { WP_Result } from "../wordpress/types.js";
-import { AuthorsSettingsInput, BrandSettingsInput, CrawlingSettingsInput, IdentitySettingsInput, PostTypeSettingsInput, Settings, SiteSettingsInput, TaxonomySettingsInput, WebhookSettingsInput } from "./service.interface.js";
+import { AuthorsSettingsInput, BrandSettingsInput, CrawlingSettingsInput, IdentitySettingsInput, PostTypeSettingsInput, Settings, SiteSettingsInput, TaxonomySettingsInput, UploadsSettingsInput, WebhookSettingsInput } from "./service.interface.js";
 import { Service } from "../service.js";
 import "../index.js";
 
@@ -15,6 +15,7 @@ declare class SettingsService {
   updateIdentity(input: IdentitySettingsInput): Promise<WP_Result<null, "invalid_param">>;
   updateAuthors(input: AuthorsSettingsInput): Promise<WP_Result<null, "invalid_param">>;
   updateCrawling(input: CrawlingSettingsInput): Promise<WP_Result<null, "invalid_param">>;
+  updateUploads(input: UploadsSettingsInput): Promise<WP_Result<null, "invalid_param">>;
   updatePostType(slug: string, input: PostTypeSettingsInput): Promise<WP_Result<null, "invalid_param">>;
   updateTaxonomy(slug: string, input: TaxonomySettingsInput): Promise<WP_Result<null, "invalid_param">>;
   private update;

package/dist/settings/service.interface.d.ts

@@ -1,4 +1,4 @@
-import { AuthorsSettings, BrandSettings, CrawlingSettings, IdentitySettings, OrganizationFounder, OrganizationSettings, PersonSettings, PostStatusDefinition, PostTypeSettings, Settings, SiteSettings, SocialProfile, TaxonomySettings, WebhookSettings } from "@kizlo/shared";
+import { AuthorsSettings, BrandSettings, CrawlingSettings, IdentitySettings, OrganizationFounder, OrganizationSettings, PersonSettings, PostStatusDefinition, PostTypeSettings, Settings, SiteSettings, SocialProfile, TaxonomySettings, UploadsSettings, WebhookSettings } from "@kizlo/shared";
 
 //#region src/settings/service.interface.d.ts
 type SiteSettingsInput = Partial<Omit<SiteSettings, "fallback_image"> & {
@@ -19,7 +19,8 @@ type IdentitySettingsInput = Partial<{
 }>;
 type AuthorsSettingsInput = Partial<AuthorsSettings>;
 type CrawlingSettingsInput = Partial<CrawlingSettings>;
+type UploadsSettingsInput = Partial<UploadsSettings>;
 type PostTypeSettingsInput = Partial<Pick<PostTypeSettings, "title_structure" | "description_structure" | "search_engine_visibility" | "webpage_type" | "article_type" | "seo_enabled" | "pathname_structure" | "comment_action_structure" | "rest_api_enabled" | "publicly_queryable" | "breadcrumbs">>;
 type TaxonomySettingsInput = Partial<Pick<TaxonomySettings, "title_structure" | "description_structure" | "search_engine_visibility" | "seo_enabled" | "pathname_structure" | "rest_api_enabled" | "publicly_queryable" | "breadcrumbs">>;
 //#endregion
-export { type AuthorsSettings, AuthorsSettingsInput, type BrandSettings, BrandSettingsInput, type CrawlingSettings, CrawlingSettingsInput, type IdentitySettings, IdentitySettingsInput, type OrganizationFounder, type OrganizationSettings, OrganizationSettingsInput, type PersonSettings, PersonSettingsInput, type PostStatusDefinition, type PostTypeSettings, PostTypeSettingsInput, type Settings, type SiteSettings, SiteSettingsInput, type SocialProfile, type TaxonomySettings, TaxonomySettingsInput, type WebhookSettings, WebhookSettingsInput };
+export { type AuthorsSettings, AuthorsSettingsInput, type BrandSettings, BrandSettingsInput, type CrawlingSettings, CrawlingSettingsInput, type IdentitySettings, IdentitySettingsInput, type OrganizationFounder, type OrganizationSettings, OrganizationSettingsInput, type PersonSettings, PersonSettingsInput, type PostStatusDefinition, type PostTypeSettings, PostTypeSettingsInput, type Settings, type SiteSettings, SiteSettingsInput, type SocialProfile, type TaxonomySettings, TaxonomySettingsInput, type UploadsSettings, UploadsSettingsInput, type WebhookSettings, WebhookSettingsInput };

package/dist/settings/service.js

@@ -28,6 +28,9 @@ var SettingsService = class {
 	async updateCrawling(input) {
 		return this.update("/settings/crawling", input);
 	}
+	async updateUploads(input) {
+		return this.update("/settings/uploads", input);
+	}
 	async updatePostType(slug, input) {
 		return this.update(`/settings/post_types/${slug}`, input);
 	}

package/dist/test.d.ts

@@ -1,6 +1,7 @@
-import { DockerStack, RunResult, Stack, compose, composeDown, composeStop, composeUp, createStack, dockerAvailable, wpCli } from "./cli/wp/docker.js";
 import { DevPluginSource, Fixture, FixtureCleanupFn, FixtureSeedFn, JsonValue, LocalPlugin, PluginSource, SeedContext, TestAdminUser, TestCredentials, TestUser, defineFixture, isLocalPlugin } from "./cli/wp/types.js";
-import { activateLocalPlugin, credentialsPath, ensurePlugin, ensurePlugins, findConfigDir, getTestCredentials, githubRelease, isSeeded, kizloRelease, recordedPort, resolvePluginSource } from "./cli/wp/utils.js";
+import { COMPOSE_FILE, CONFIG_FILES, CREDENTIALS_REL, DEFAULT_PLUGINS, DEFAULT_PORT, OPCACHE_INI, REMAP_ENTRYPOINT, SEED_MARKER_OPTION, SEED_VERSION, TEST_ADMIN, TEST_USER, githubRelease, kizloRelease } from "./cli/wp/constants.js";
+import { DockerStack, RunResult, Stack, compose, composeDown, composeStop, composeUp, createStack, dockerAvailable, wpCli } from "./cli/wp/docker.js";
+import { activateLocalPlugin, credentialsPath, ensurePlugin, ensurePlugins, findConfigDir, getTestCredentials, isSeeded, recordedPort, resolvePluginSource } from "./cli/wp/utils.js";
 import { TestAuthAdapterUser, toTestUser } from "./test/users.js";
 import { testAuthAdapter } from "./test/auth.js";
 import { CAPTCHA_TEST_TOKEN_PASS, captchaMock } from "./test/captcha.js";
@@ -9,4 +10,4 @@ import { KizloClientTestInstance, getKizloClientTestInstance } from "./test/clie
 import { menuFixture } from "./menu/fixture.js";
 import { postFixture } from "./post/fixture.js";
 import { coreFixtures } from "./test/fixtures.js";
-export { CAPTCHA_TEST_TOKEN_PASS, DevPluginSource, DockerStack, Fixture, FixtureCleanupFn, FixtureSeedFn, JsonValue, KizloClientTestInstance, KizloTestInstance, LocalPlugin, PluginSource, RunResult, SeedContext, Stack, TestAdminUser, TestAuthAdapterUser, TestCredentials, TestUser, activateLocalPlugin, captchaMock, compose, composeDown, composeStop, composeUp, coreFixtures, createStack, credentialsPath, defineFixture, dockerAvailable, ensurePlugin, ensurePlugins, findConfigDir, getKizloClientTestInstance, getKizloTestInstance, getTestCredentials, githubRelease, isLocalPlugin, isSeeded, kizloRelease, menuFixture, postFixture, recordedPort, resolvePluginSource, testAuthAdapter, toTestUser, wpCli };
+export { CAPTCHA_TEST_TOKEN_PASS, COMPOSE_FILE, CONFIG_FILES, CREDENTIALS_REL, DEFAULT_PLUGINS, DEFAULT_PORT, DevPluginSource, DockerStack, Fixture, FixtureCleanupFn, FixtureSeedFn, JsonValue, KizloClientTestInstance, KizloTestInstance, LocalPlugin, OPCACHE_INI, PluginSource, REMAP_ENTRYPOINT, RunResult, SEED_MARKER_OPTION, SEED_VERSION, SeedContext, Stack, TEST_ADMIN, TEST_USER, TestAdminUser, TestAuthAdapterUser, TestCredentials, TestUser, activateLocalPlugin, captchaMock, compose, composeDown, composeStop, composeUp, coreFixtures, createStack, credentialsPath, defineFixture, dockerAvailable, ensurePlugin, ensurePlugins, findConfigDir, getKizloClientTestInstance, getKizloTestInstance, getTestCredentials, githubRelease, isLocalPlugin, isSeeded, kizloRelease, menuFixture, postFixture, recordedPort, resolvePluginSource, testAuthAdapter, toTestUser, wpCli };

package/dist/test.js

@@ -1,6 +1,7 @@
 import { defineFixture, isLocalPlugin } from "./cli/wp/types.js";
+import { COMPOSE_FILE, CONFIG_FILES, CREDENTIALS_REL, DEFAULT_PLUGINS, DEFAULT_PORT, OPCACHE_INI, REMAP_ENTRYPOINT, SEED_MARKER_OPTION, SEED_VERSION, TEST_ADMIN, TEST_USER, githubRelease, kizloRelease } from "./cli/wp/constants.js";
 import { compose, composeDown, composeStop, composeUp, createStack, dockerAvailable, wpCli } from "./cli/wp/docker.js";
-import { activateLocalPlugin, credentialsPath, ensurePlugin, ensurePlugins, findConfigDir, getTestCredentials, githubRelease, isSeeded, kizloRelease, recordedPort, resolvePluginSource } from "./cli/wp/utils.js";
+import { activateLocalPlugin, credentialsPath, ensurePlugin, ensurePlugins, findConfigDir, getTestCredentials, isSeeded, recordedPort, resolvePluginSource } from "./cli/wp/utils.js";
 import { testAuthAdapter } from "./test/auth.js";
 import { CAPTCHA_TEST_TOKEN_PASS, captchaMock } from "./test/captcha.js";
 import { getKizloClientTestInstance } from "./test/client.js";
@@ -10,4 +11,4 @@ import { coreFixtures } from "./test/fixtures.js";
 import { toTestUser } from "./test/users.js";
 import { getKizloTestInstance } from "./test/server.js";
 
-export { CAPTCHA_TEST_TOKEN_PASS, activateLocalPlugin, captchaMock, compose, composeDown, composeStop, composeUp, coreFixtures, createStack, credentialsPath, defineFixture, dockerAvailable, ensurePlugin, ensurePlugins, findConfigDir, getKizloClientTestInstance, getKizloTestInstance, getTestCredentials, githubRelease, isLocalPlugin, isSeeded, kizloRelease, menuFixture, postFixture, recordedPort, resolvePluginSource, testAuthAdapter, toTestUser, wpCli };
+export { CAPTCHA_TEST_TOKEN_PASS, COMPOSE_FILE, CONFIG_FILES, CREDENTIALS_REL, DEFAULT_PLUGINS, DEFAULT_PORT, OPCACHE_INI, REMAP_ENTRYPOINT, SEED_MARKER_OPTION, SEED_VERSION, TEST_ADMIN, TEST_USER, activateLocalPlugin, captchaMock, compose, composeDown, composeStop, composeUp, coreFixtures, createStack, credentialsPath, defineFixture, dockerAvailable, ensurePlugin, ensurePlugins, findConfigDir, getKizloClientTestInstance, getKizloTestInstance, getTestCredentials, githubRelease, isLocalPlugin, isSeeded, kizloRelease, menuFixture, postFixture, recordedPort, resolvePluginSource, testAuthAdapter, toTestUser, wpCli };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "kizlo",
-  "version": "0.6.0",
+  "version": "0.7.0",
   "type": "module",
   "description": "A headless WordPress toolkit for TypeScript.",
   "keywords": [
@@ -76,7 +76,7 @@
   },
   "dependencies": {
     "@clack/prompts": "^1.5.1",
-    "@kizlo/shared": "0.3.0",
+    "@kizlo/shared": "0.4.0",
     "@orpc/client": "^1.14.3",
     "@orpc/contract": "^1.14.3",
     "@orpc/openapi": "^1.14.3",
@@ -87,7 +87,6 @@
     "consola": "^3.2.3",
     "cookie": "^1.0.2",
     "jiti": "^2.7.0",
-    "jose": "6.1.0",
     "zod": "^4.3.6"
   },
   "peerDependencies": {