smoodly 0.0.52 → 0.0.54

package/dist/image/markup.js

@@ -1,4 +1,4 @@
-// One image markup for both frameworks (spec 2026-10-18 media on R2 and Images §7; plan (c) decision 5): what
+// One image markup for both frameworks (spec 2026-10-18 media on R2 and Images §7): what
 // <SmoodlyImage> (React) and <Image> (Astro) render, decided here so both are only markup and a test holds them equal.
 // Plain HTML, no optimizer and no Smoodly JavaScript: a box, an <img> whose srcset lists the cut's widths, or a
 // <picture> with one <source> per crop the view places. Without a cut (locally, an SVG) the original is framed in CSS

package/dist/index.d.ts

@@ -30,8 +30,8 @@ export { assetErrors, kindOf, extensionFor, objectPath, PAGE_SIZE as ASSET_PAGE_
 export type { AssetStore, UploadTicket, FinishInput, AssetQuery, AssetPage, BeginUploadInput, CreateAssetInput } from "./asset-store.ts";
 export { imageDimensions } from "./image-dimensions.ts";
 export type { ImageQuality } from "./media-cut.ts";
-export { sortMembers, memberErrors } from "./member-store.ts";
-export type { MemberStore, MemberRecord, InviteInput, InviteResult } from "./member-store.ts";
+export { sortMembers } from "./member-store.ts";
+export type { MemberStore, MemberRecord } from "./member-store.ts";
 export { MEMBER_ROLES, can, normalizeRole, isMemberRole } from "./permissions.ts";
 export type { MemberRole, Capability } from "./permissions.ts";
 export { collectEntryRefs, collectTreeRefs } from "./refs.ts";

package/dist/index.js

@@ -21,7 +21,7 @@ export { defineConfig } from "./config.js";
 export { draftToken, sameToken, isDraftToken, assertFresh, StaleDraftError } from "./draft-token.js";
 export { assetErrors, kindOf, extensionFor, objectPath, PAGE_SIZE as ASSET_PAGE_SIZE } from "./asset-store.js";
 export { imageDimensions } from "./image-dimensions.js";
-export { sortMembers, memberErrors } from "./member-store.js";
+export { sortMembers } from "./member-store.js";
 export { MEMBER_ROLES, can, normalizeRole, isMemberRole } from "./permissions.js";
 export { collectEntryRefs, collectTreeRefs } from "./refs.js";
 export { richtextBlocks, elementSchemas, IMAGE_NODE, ELEMENT_NODE } from "./richtext-walk.js";

package/dist/media-cut.d.ts

@@ -6,7 +6,7 @@ export type PixelRect = {
     height: number;
 };
 /** The qualities a cut is made at: unsigned in the address like the width, so a list bounds what Images is asked to
- *  make (spec 2026-10-18 image quality and max width §2). 75 matched Vercel's optimizer in step 6's speed round. */
+ *  make (spec 2026-10-18 image quality and max width §2). 75 matched Vercel's optimizer in the 2026-10-18 speed round. */
 export declare const IMAGE_QUALITIES: readonly [50, 60, 75, 85, 95, 100];
 export type ImageQuality = (typeof IMAGE_QUALITIES)[number];
 export declare const DEFAULT_QUALITY: ImageQuality;

package/dist/media-cut.js

@@ -1,10 +1,10 @@
 /** The widths a cut is served at, plus the cut's own width; a wider one is never served (upscaling sells nothing).
  *  From 640 to 1080 they are Next's device sizes, so a phone gets what `next/image` gave it (a 412-pixel screen at 1.75
- *  finds 750, not 960; step 6 plan (d)'s speed round); 1536 spares a 1366- or 1440-wide laptop the 1920 (spec 2026-10-18
+ *  finds 750, not 960; the 2026-10-18 speed round); 1536 spares a 1366- or 1440-wide laptop the 1920 (spec 2026-10-18
  *  image quality and max width §5). */
 const CUT_WIDTHS = [320, 640, 750, 828, 1080, 1280, 1536, 1920, 2560];
 /** The qualities a cut is made at: unsigned in the address like the width, so a list bounds what Images is asked to
- *  make (spec 2026-10-18 image quality and max width §2). 75 matched Vercel's optimizer in step 6's speed round. */
+ *  make (spec 2026-10-18 image quality and max width §2). 75 matched Vercel's optimizer in the 2026-10-18 speed round. */
 export const IMAGE_QUALITIES = [50, 60, 75, 85, 95, 100];
 export const DEFAULT_QUALITY = 75;
 export const isImageQuality = (n) => IMAGE_QUALITIES.includes(n);

package/dist/media.d.ts

@@ -115,7 +115,7 @@ export declare const ASSET_COLLECTION = "asset";
 export declare const MEDIA_TYPES: ReadonlySet<string>;
 /** Cache lifetime of a media object, in seconds — a year. Objects are
  *  immutable (no upsert; Replace picks a new id), so the CDN, the browser
- *  and next/image may keep one for as long as they like. */
+ *  may keep one for as long as they like. */
 export declare const MEDIA_CACHE_SECONDS = 31536000;
 /** The largest file a space may accept (spec 2026-10-18 media on R2 and Images §4): Cloudflare's request body limit on
  *  Free and Pro, since every upload streams through the Worker; a pushed `media.maxSize` over it is refused. */

package/dist/media.js

@@ -5,7 +5,7 @@ export const ASSET_COLLECTION = "asset";
 export const MEDIA_TYPES = new Set(["image", "video", "file"]);
 /** Cache lifetime of a media object, in seconds — a year. Objects are
  *  immutable (no upsert; Replace picks a new id), so the CDN, the browser
- *  and next/image may keep one for as long as they like. */
+ *  may keep one for as long as they like. */
 export const MEDIA_CACHE_SECONDS = 31536000;
 /** The largest file a space may accept (spec 2026-10-18 media on R2 and Images §4): Cloudflare's request body limit on
  *  Free and Pro, since every upload streams through the Worker; a pushed `media.maxSize` over it is refused. */
@@ -113,7 +113,7 @@ const namedCropsOf = (d) => d.crops && typeof d.crops === "object" && Object.key
  *  `crop` saved before the field declared crops (under `aspect`) is the first crop's when its ratio is the first's
  *  within 1%, else ignored. The first crop's cut is the image's. */
 /** A stored crop counts only at the ratio its field declares now, within 1%: a ratio changed in code makes it follow
- *  the hotspot at the new one, so the box, the cut and the crop window agree (the final review of plan (c)). */
+ *  the hotspot at the new one, so the box, the cut and the crop window agree. */
 const atRatio = (crop, ratio, imageAspect) => Math.abs(cropAspect(crop, imageAspect) / parseAspect(ratio) - 1) <= 0.01;
 /** A named crop's framed rectangle, or undefined when it follows the hotspot: its stored entry, or for the first crop a
  *  `crop` saved under `aspect`, at the crop's ratio (spec §6; the resolver and the crop window agree). */

package/dist/member-store.d.ts

@@ -1,42 +1,13 @@
-import type { MemberRole } from "./permissions.ts";
 export type MemberRecord = {
     userId: string;
     email: string | null;
     role: string;
 };
-export type InviteInput = {
-    email: string;
-    role: MemberRole;
-    redirectTo: string;
-};
-/** `invited` false = the email already had a confirmed account, so no mail was sent; the row was added. (A pending invitee is re-invited: same account, mail again, `invited` true.) */
-export type InviteResult = {
-    member: MemberRecord;
-    invited: boolean;
-};
 export interface MemberStore {
     /** Every member of the current space, by email then user id. */
     list(): Promise<MemberRecord[]>;
-    /** The space's console URL when the control plane manages its members; null in self-host. */
-    consoleUrl(): Promise<string | null>;
-    /** Creates or finds the Auth user for the email, mails the invite when it created one, upserts the row (spec 2026-09-25 members management §3). */
-    invite(input: InviteInput): Promise<InviteResult>;
-    /** Creates the Auth user with a password (confirmed, no mail) and upserts the row — the installer's first editor, `add-admin`.
-     *  An existing account keeps its password and only gains the membership. */
-    createAccount(input: {
-        email: string;
-        password: string;
-        role: MemberRole;
-    }): Promise<MemberRecord>;
-    setRole(userId: string, role: MemberRole): Promise<MemberRecord>;
-    /** Deletes the member row only; the Auth account stays. */
-    remove(userId: string): Promise<void>;
     /** The whole list at once, as the management API sets it (spec 2026-10-16 the control plane §3). */
     replaceAll(members: MemberRecord[]): Promise<void>;
 }
-export declare const memberErrors: {
-    notFound: (userId: string) => Error;
-    managed: () => Error;
-};
 /** Email first (case-insensitive), rows without one last, ties by user id. */
 export declare function sortMembers(rows: MemberRecord[]): MemberRecord[];

package/dist/member-store.js

@@ -1,7 +1,3 @@
-export const memberErrors = {
-    notFound: (userId) => new Error(`smoodly: no member "${userId}".`),
-    managed: () => new Error("smoodly: members are managed at smoodly.io."),
-};
 /** Email first (case-insensitive), rows without one last, ties by user id. */
 export function sortMembers(rows) {
     return [...rows].sort((a, b) => {

package/dist/paths.d.ts

@@ -102,7 +102,7 @@ export declare function collectionSegment(path: string | Record<string, string>
  * it is a non-empty string — absent, null, or `""` all mean "no URL".
  * There is no sibling-slug index: sibling uniqueness is the primary key
  * of `paths` plus the pre-check each store makes per locale before it
- * writes (spec 2026-09-06 §12), so Postgres and memory agree on which
+ * writes (spec 2026-09-06 §12), so every store agrees on which
  * entries can collide. */
 export declare const slugOf: (fields: Record<string, unknown>) => string | null;
 /** The entry's segment in one locale: its row's slug. An absent locale

package/dist/paths.js

@@ -162,7 +162,7 @@ export function collectionSegment(path, locale, set) {
  * it is a non-empty string — absent, null, or `""` all mean "no URL".
  * There is no sibling-slug index: sibling uniqueness is the primary key
  * of `paths` plus the pre-check each store makes per locale before it
- * writes (spec 2026-09-06 §12), so Postgres and memory agree on which
+ * writes (spec 2026-09-06 §12), so every store agrees on which
  * entries can collide. */
 export const slugOf = (fields) => {
     const slug = fields.slug;

package/dist/revalidate.d.ts

@@ -26,7 +26,7 @@ export declare const addressesTag: () => string;
 /** Every published response of a space carries it (spec 2026-10-16 the control plane §4): a push that changed the
  *  registry purges this one tag, and the new schema applies on the next read. */
 export declare const spaceTag: (space: string) => string;
-/** An asset's original and every cut of it at the edge (plan 2026-10-18 media (c) decision 4): its delete purges it. */
+/** An asset's original and every cut of it at the edge (spec 2026-10-18 media on R2 and Images §5): its delete purges it. */
 export declare const mediaTag: (asset: string) => string;
 /** Every media file of a space at the edge: the space's delete purges it. Never a content tag, so a publish purges no bytes. */
 export declare const mediaSpaceTag: (space: string) => string;

package/dist/revalidate.js

@@ -25,7 +25,7 @@ export const addressesTag = () => "addresses";
 /** Every published response of a space carries it (spec 2026-10-16 the control plane §4): a push that changed the
  *  registry purges this one tag, and the new schema applies on the next read. */
 export const spaceTag = (space) => `space:${space}`;
-/** An asset's original and every cut of it at the edge (plan 2026-10-18 media (c) decision 4): its delete purges it. */
+/** An asset's original and every cut of it at the edge (spec 2026-10-18 media on R2 and Images §5): its delete purges it. */
 export const mediaTag = (asset) => `media:${asset}`;
 /** Every media file of a space at the edge: the space's delete purges it. Never a content tag, so a publish purges no bytes. */
 export const mediaSpaceTag = (space) => `media-space:${space}`;

package/dist/space-transfer.d.ts

@@ -27,7 +27,7 @@ export type Manifest = {
 export declare const INSERT_ORDER: readonly ContentTable[];
 /** A row's identity inside one space: its primary key without `space_id`. */
 export declare const ROW_KEY: Record<ContentTable, readonly string[]>;
-/** The primary key as Postgres declares it — what "on conflict do nothing" names. */
+/** The primary key, in column order — what the import's skip-duplicates names. */
 export declare const CONFLICT_COLUMNS: Record<ContentTable, string>;
 export declare const rowKey: (table: ContentTable, row: Row) => string;
 /** Sorted by key, so two exports of an unchanged space diff cleanly (spec §7). */

package/dist/space-transfer.js

@@ -37,7 +37,7 @@ export const ROW_KEY = {
     paths: ["locale", "anchor", "path"],
     assets: ["id"],
 };
-/** The primary key as Postgres declares it — what "on conflict do nothing" names. */
+/** The primary key, in column order — what the import's skip-duplicates names. */
 export const CONFLICT_COLUMNS = Object.fromEntries(CONTENT_TABLES.map((t) => [t, (t === "paths" ? ["space_id", ...ROW_KEY[t]] : ROW_KEY[t]).join(",")]));
 export const rowKey = (table, row) => JSON.stringify(ROW_KEY[table].map((c) => row[c]));
 /** Sorted by key, so two exports of an unchanged space diff cleanly (spec §7). */

package/dist/version.d.ts

@@ -1 +1 @@
-export declare const SMOODLY_VERSION = "0.0.52";
+export declare const SMOODLY_VERSION = "0.0.54";

package/dist/version.js

@@ -1,2 +1,2 @@
 // Generated by scripts/write-version.mjs from package.json — do not edit.
-export const SMOODLY_VERSION = "0.0.52";
+export const SMOODLY_VERSION = "0.0.54";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "smoodly",
-  "version": "0.0.52",
+  "version": "0.0.54",
   "description": "Open-source, code-first CMS for Astro and Next.js: define a component once, it becomes a typed, editable building block.",
   "license": "MIT",
   "repository": {

package/dist/admin/auth-config.d.ts

@@ -1,7 +0,0 @@
-/** Where the admin sends a person to sign in, and the dashboard its account menu and Members page link to (spec
- *  2026-10-16 sign-in and the dashboard §1, §6): `GET /v1/auth` answers it from the Worker's env; the handler and the
- *  page data carry it. Public values only. */
-export type SignInConfig = {
-    signInUrl: string;
-    consoleUrl: string;
-};

package/dist/admin/auth-config.js

@@ -1 +0,0 @@
-export {};

package/dist/admin/browser/fetch-op.d.ts

@@ -1,10 +0,0 @@
-import type { AdminOpAction } from "../ops.ts";
-/** JSON has no `undefined`: in an array it becomes null, which several ops read as a value (`expected:
- *  null` is "no draft", `undefined` is "skip the check"). Trailing ones are dropped; one between two
- *  arguments cannot be sent and is named here. */
-export declare function wireArgs(args: unknown[]): unknown[];
-/** `fetcher` is the test seam. A network failure rejects; every answer resolves to a typed result.
- *  One operation at a time, in call order: Next queued server actions per browser, and the admin's reads
- *  and writes rely on it (a read sent after a save must see that save's token; a save typed during a
- *  publish must follow the publish). A call that fails does not hold the ones behind it. */
-export declare function fetchOp(url: string, fetcher?: typeof fetch): AdminOpAction;

package/dist/admin/browser/fetch-op.js

@@ -1,45 +0,0 @@
-/** JSON has no `undefined`: in an array it becomes null, which several ops read as a value (`expected:
- *  null` is "no draft", `undefined` is "skip the check"). Trailing ones are dropped; one between two
- *  arguments cannot be sent and is named here. */
-export function wireArgs(args) {
-    let end = args.length;
-    while (end > 0 && args[end - 1] === undefined)
-        end--;
-    const out = args.slice(0, end);
-    if (out.some((a) => a === undefined)) {
-        throw new Error("smoodly: an operation argument is undefined between two others — pass null or a value; JSON cannot carry undefined.");
-    }
-    return out;
-}
-const noResult = (status) => ({ ok: false, code: "internal", message: `smoodly: the admin API answered ${status} without a result — see the server log.` });
-/** `fetcher` is the test seam. A network failure rejects; every answer resolves to a typed result.
- *  One operation at a time, in call order: Next queued server actions per browser, and the admin's reads
- *  and writes rely on it (a read sent after a save must see that save's token; a save typed during a
- *  publish must follow the publish). A call that fails does not hold the ones behind it. */
-export function fetchOp(url, fetcher = fetch) {
-    const send = async (call) => {
-        const res = await fetcher(url, {
-            method: "POST",
-            // The endpoint is the service's origin; the session rides the header, no cookie crosses.
-            credentials: "omit",
-            headers: { "content-type": "application/json", ...(call.token ? { authorization: `Bearer ${call.token}` } : {}) },
-            body: JSON.stringify({ path: call.path, args: wireArgs(call.args) }),
-        });
-        let body;
-        try {
-            body = await res.json();
-        }
-        catch {
-            return noResult(res.status);
-        }
-        if (typeof body === "object" && body !== null && typeof body.ok === "boolean")
-            return body;
-        return noResult(res.status);
-    };
-    let last = Promise.resolve();
-    return (call) => {
-        const run = last.then(() => send(call));
-        last = run.catch(() => { });
-        return run;
-    };
-}

package/dist/admin/browser/main.d.ts

@@ -1 +0,0 @@
-export {};

package/dist/admin/browser/main.js

@@ -1,27 +0,0 @@
-import { jsx as _jsx } from "react/jsx-runtime";
-// packages/smoodly/src/admin/browser/main.tsx
-// The prebuilt admin's entry (spec 2026-10-02 astro cloud fit §4): reads the page's data, writes the
-// stylesheet into the document and mounts the shell. Bundled by scripts/build-admin.ts; no app compiles it.
-import { createRoot } from "react-dom/client";
-import { ADMIN_DATA_ID, ADMIN_ROOT_ID } from "../page-data.js";
-import { setCanvasMarks, setPreviewBase, setPreviewUrl } from "../editor/canvas-address.js";
-import { setDelivery } from "../delivery-mode.js";
-import { AdminApp } from "../shell/AdminApp.js";
-import { setConsole } from "../shell/console-links.js";
-import { fontFaceCss } from "../ui/fonts.js";
-import { ADMIN_CSS } from "../ui/theme.js";
-import { fetchOp } from "./fetch-op.js";
-const data = JSON.parse(document.getElementById(ADMIN_DATA_ID).textContent ?? "");
-setPreviewBase(data.previewBase ?? "");
-setCanvasMarks(data.canvasMarks ?? "query");
-setPreviewUrl(data.previewUrl ?? "");
-setDelivery(data.delivery ?? "live");
-setConsole(data.signIn.consoleUrl, data.spaceId);
-// One <style>, fonts first: the canvas copies this element's text into the site's frame (editor/useInlineSession.ts).
-const style = document.createElement("style");
-style.setAttribute("data-smoodly-admin-styles", "");
-style.textContent = `${fontFaceCss(data.filesBase)}\n${ADMIN_CSS}`;
-document.head.appendChild(style);
-// The page's own background rules did their job (admin/page.ts): the stylesheet owns the look now.
-document.querySelector("style[data-smoodly-boot]")?.remove();
-createRoot(document.getElementById(ADMIN_ROOT_ID)).render(_jsx(AdminApp, { registry: data.registry, op: fetchOp(data.opUrl), signIn: data.signIn, api: { apiUrl: data.apiUrl, spaceId: data.spaceId }, presenceConfig: data.presence ?? undefined }));