@acms-subir/core 0.0.1

package/src/pages/blog/[slug].astro

@@ -0,0 +1,240 @@
+---
+import Site from '../../layouts/Site.astro';
+import { getRepo } from '../../lib/repo';
+import { renderMarkdown } from '../../lib/markdown';
+import { expandDynamicBlocks } from '../../lib/dynamicBlocks';
+import { highlightCodeHtml } from '../../lib/highlightCode';
+import { verifySessionToken, SESSION_COOKIE } from '../../lib/auth';
+import { slugify, authorSlug, publicTags } from '../../lib/schema';
+import { resolveDesign } from '../../lib/theme';
+import { siteOrigin } from '../../lib/seo';
+import { formatDate } from '../../lib/dates';
+import { collectionFromPath, collectionUrl, tagUrl } from '../../lib/content';
+
+// shared post page for every collection — resolved from the request path
+const col = collectionFromPath(Astro.url.pathname);
+if (!col) return new Response(null, { status: 404, statusText: 'Not found' });
+
+const { slug } = Astro.params;
+const repo = await getRepo(Astro.locals);
+const post = slug ? await repo.getPostBySlug(slug, col.key) : null;
+
+const isAdmin = verifySessionToken(Astro.cookies.get(SESSION_COOKIE)?.value);
+if (!post || (post.status !== 'published' && !isAdmin)) {
+  return new Response(null, { status: 404, statusText: 'Not found' });
+}
+const authorIds = post.authorIds.length ? post.authorIds : post.authorId ? [post.authorId] : [];
+const [tags, allUsers, allPosts, settings, allMedia] = await Promise.all([
+  repo.listTags(),
+  authorIds.length ? repo.listUsers() : Promise.resolve([]),
+  repo.listPublishedPosts(col.key), // related reading stays within the collection
+  repo.getSettings(),
+  post.cover.startsWith('/media/') ? repo.listMedia() : Promise.resolve([]),
+]);
+// ordered author objects; the first is the primary (gets the author card)
+const authors = authorIds
+  .map((id) => allUsers.find((u) => u.id === id))
+  .filter((u): u is NonNullable<typeof u> => Boolean(u));
+const author = authors[0] ?? null;
+const visibleTags = publicTags(post.tags);
+// intrinsic dimensions + srcset for the cover (CLS + responsive loading);
+// only resolvable for library uploads, external cover URLs render as-is
+const coverMedia = post.cover.startsWith('/media/')
+  ? allMedia.find((m) => `/media/${m.key}` === post.cover) ?? null
+  : null;
+const coverSrcset = coverMedia?.variants.length
+  ? [...coverMedia.variants.map((v) => `/media/${v.key} ${v.w}w`), `${post.cover} ${coverMedia.width}w`].join(', ')
+  : undefined;
+// post-page display options: theme defaults, overridable in /admin/design
+const design = resolveDesign(settings);
+const po = design.post;
+// eslint-disable-next-line @typescript-eslint/no-explicit-any
+const PostTemplate = (post.template ? design.theme.postTemplates[post.template] : null) as any;
+const tagSlug = (name: string) =>
+  tags.find((t) => t.name.toLowerCase() === name.toLowerCase())?.slug ?? slugify(name);
+const html = highlightCodeHtml(await expandDynamicBlocks(post.bodyHtml || renderMarkdown(post.body), repo));
+const fmt = (ts: number | null) => formatDate(ts, settings);
+const words = (post.bodyHtml || post.body).replace(/<[^>]+>/g, ' ').split(/\s+/).filter(Boolean).length;
+const readMins = Math.max(1, Math.round(words / 220));
+const metaBits = [
+  po.showDate ? fmt(post.publishedAt) : '',
+  po.showReadingTime ? `${readMins} min read` : '',
+].filter(Boolean).join(' \u00b7 ');
+
+// related reading: shared tags first (most overlap wins), newest as tiebreak;
+// topped up with the latest other posts so the section is never empty
+const byOverlap = allPosts
+  .filter((p) => p.id !== post.id)
+  .map((p) => ({ p, shared: p.tags.filter((t) => post.tags.some((pt) => pt.toLowerCase() === t.toLowerCase())).length }))
+  .sort((a, b) => b.shared - a.shared || (b.p.publishedAt ?? 0) - (a.p.publishedAt ?? 0))
+  .map((r) => r.p);
+const related = byOverlap.slice(0, 3);
+
+const heroOverlay = po.cover === 'overlay' && Boolean(post.cover);
+const iso = (ts: number | null) => (ts ? new Date(ts).toISOString() : undefined);
+const articleJsonLd = {
+  '@context': 'https://schema.org',
+  '@type': 'Article',
+  headline: post.title,
+  ...(post.excerpt ? { description: post.excerpt } : {}),
+  ...(post.cover ? { image: [new URL(post.cover, siteOrigin(settings, Astro.url)).href] } : {}),
+  ...(post.publishedAt ? { datePublished: iso(post.publishedAt) } : {}),
+  dateModified: iso(post.updatedAt),
+  ...(authors.length
+    ? { author: authors.map((a) => ({ '@type': 'Person', name: a.name, url: new URL(`/author/${authorSlug(a)}`, siteOrigin(settings, Astro.url)).href })) }
+    : {}),
+  ...(visibleTags.length ? { keywords: visibleTags.join(', ') } : {}),
+  publisher: { '@type': 'Organization', name: settings.siteTitle },
+  mainEntityOfPage: new URL(Astro.url.pathname, siteOrigin(settings, Astro.url)).href,
+};
+const shareUrl = new URL(Astro.url.pathname, siteOrigin(settings, Astro.url)).href;
+const shareX = `https://twitter.com/intent/tweet?url=${encodeURIComponent(shareUrl)}&text=${encodeURIComponent(post.title)}`;
+const shareLi = `https://www.linkedin.com/sharing/share-offsite/?url=${encodeURIComponent(shareUrl)}`;
+---
+
+<Site
+  title={post.seoTitle || post.title}
+  exactTitle={Boolean(post.seoTitle)}
+  description={post.seoDesc || post.excerpt || undefined}
+  type="article"
+  image={post.cover || undefined}
+  imageAlt={post.coverAlt || undefined}
+  publishedAt={post.publishedAt}
+  modifiedAt={post.updatedAt}
+  authorName={author?.name}
+  jsonLd={articleJsonLd}
+  noindex={post.status !== 'published'}
+>
+  {PostTemplate ? (
+    <PostTemplate post={post} html={html} authors={authors} settings={settings} related={related} />
+  ) : (
+  <article>
+    {post.status !== 'published' && (
+      <p style="background:#fff3cd;border:1px solid #ffe08a;border-radius:8px;padding:8px 14px;font-size:14px;">
+        Draft preview — only you can see this post.
+      </p>
+    )}
+    {heroOverlay ? (
+      <header class="post-hero">
+        <img
+          class="post-hero-img"
+          src={post.cover}
+          alt={post.coverAlt}
+          width={coverMedia?.width || undefined}
+          height={coverMedia?.height || undefined}
+          srcset={coverSrcset}
+          sizes={coverSrcset ? '100vw' : undefined}
+        />
+        <div class="post-hero-scrim" aria-hidden="true" />
+        <div class="post-hero-content">
+          <div class="post-kicker">
+            {visibleTags.map((t) => <a class="tag" href={tagUrl(tagSlug(t))}>{t}</a>)}
+          </div>
+          <h1>{post.title}</h1>
+          {(metaBits || (po.byline && author)) && (
+            <div class="post-meta">
+              {po.showDate && post.publishedAt && <time datetime={iso(post.publishedAt)}>{fmt(post.publishedAt)}</time>}
+              {po.showDate && post.publishedAt && po.showReadingTime && ' \u00b7 '}
+              {po.showReadingTime && `${readMins} min read`}
+              {po.byline && author && (
+                <span class="byline">{metaBits && '\u00b7 '}by {authors.map((a, i) => (
+                  <>{i > 0 && (i === authors.length - 1 ? ' & ' : ', ')}<a href={`/author/${authorSlug(a)}`}>{a.name}</a></>
+                ))}</span>
+              )}
+            </div>
+          )}
+        </div>
+      </header>
+    ) : (
+      <header class="post-header">
+        <div class="post-kicker">
+          {visibleTags.map((t) => <a class="tag" href={tagUrl(tagSlug(t))}>{t}</a>)}
+        </div>
+        <h1>{post.title}</h1>
+        {(metaBits || (po.byline && author)) && (
+          <div class="post-meta">
+            {po.showDate && post.publishedAt && <time datetime={iso(post.publishedAt)}>{fmt(post.publishedAt)}</time>}
+            {po.showDate && post.publishedAt && po.showReadingTime && ' \u00b7 '}
+            {po.showReadingTime && `${readMins} min read`}
+            {po.byline && author && (
+              <span class="byline">{metaBits && '\u00b7 '}by {authors.map((a, i) => (
+                  <>{i > 0 && (i === authors.length - 1 ? ' & ' : ', ')}<a href={`/author/${authorSlug(a)}`}>{a.name}</a></>
+                ))}</span>
+            )}
+          </div>
+        )}
+      </header>
+    )}
+    {post.cover && !heroOverlay && po.cover !== 'hidden' && (
+      <img
+        class={`post-cover ${po.cover === 'full' ? 'is-full' : ''}`}
+        src={post.cover}
+        alt={post.coverAlt}
+        width={coverMedia?.width || undefined}
+        height={coverMedia?.height || undefined}
+        srcset={coverSrcset}
+        sizes={coverSrcset ? '(max-width: 760px) 100vw, 760px' : undefined}
+      />
+    )}
+
+    <div class="post-layout">
+      <div class="post-content" set:html={html} />
+      {po.share && (
+      <aside class="post-share" aria-label="Share this post">
+        <span class="post-share-label">Share</span>
+        <a href={shareX} target="_blank" rel="noopener" aria-label="Share on X">
+          <svg width="15" height="15" viewBox="0 0 24 24" fill="currentColor"><path d="M18.9 2H22l-6.8 7.8L23.2 22h-6.3l-4.9-6.4L6.4 22H3.3l7.3-8.3L1.6 2H8l4.4 5.9L18.9 2zm-1.1 18h1.7L7.1 3.7H5.3L17.8 20z"/></svg>
+        </a>
+        <a href={shareLi} target="_blank" rel="noopener" aria-label="Share on LinkedIn">
+          <svg width="15" height="15" viewBox="0 0 24 24" fill="currentColor"><path d="M20.4 20.4h-3.5v-5.6c0-1.3 0-3-1.9-3s-2.1 1.4-2.1 2.9v5.7H9.4V9h3.4v1.6a3.7 3.7 0 0 1 3.3-1.8c3.6 0 4.2 2.3 4.2 5.4v6.2zM5.3 7.4a2 2 0 1 1 0-4.1 2 2 0 0 1 0 4.1zM7.1 20.4H3.6V9h3.5v11.4z"/></svg>
+        </a>
+        <button type="button" class="post-share-copy" data-url={shareUrl} aria-label="Copy link">
+          <svg width="15" height="15" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="1.8"><path d="M10 14a4 4 0 0 0 6 0l3-3a4 4 0 0 0-6-6l-1.5 1.5M14 10a4 4 0 0 0-6 0l-3 3a4 4 0 0 0 6 6l1.5-1.5"/></svg>
+        </button>
+      </aside>
+      )}
+    </div>
+
+    {po.authorCard && author && (
+      <aside class="author-card">
+        {author.avatar ? (
+          <img class="author-avatar" src={author.avatar} alt={author.name} />
+        ) : (
+          <span class="author-avatar author-initial" aria-hidden="true">{author.name.slice(0, 1)}</span>
+        )}
+        <div>
+          <h2 class="author-card-name"><a href={`/author/${authorSlug(author)}`}>{author.name}</a></h2>
+          {author.bio && <p class="author-card-bio">{author.bio}</p>}
+          <a class="author-card-more" href={`/author/${authorSlug(author)}`}>More posts</a>
+        </div>
+      </aside>
+    )}
+
+    {po.related && related.length > 0 && (
+      <section class="related">
+        <h2 class="related-title">Related reading</h2>
+        <div class="related-grid">
+          {related.map((p) => (
+            <article class="related-card">
+              {p.cover && (
+                <a class="related-thumb" href={collectionUrl(col.key, p.slug)}><img src={p.cover} alt={p.coverAlt} loading="lazy" /></a>
+              )}
+              <div class="post-meta">{p.publishedAt && <time datetime={iso(p.publishedAt)}>{fmt(p.publishedAt)}</time>}</div>
+              <h3><a href={collectionUrl(col.key, p.slug)}>{p.title}</a></h3>
+              {p.excerpt && <p class="related-excerpt">{p.excerpt}</p>}
+            </article>
+          ))}
+        </div>
+      </section>
+    )}
+  </article>
+  )}
+  <script>
+    document.querySelector<HTMLButtonElement>('.post-share-copy')?.addEventListener('click', async (e) => {
+      const btn = e.currentTarget as HTMLButtonElement;
+      await navigator.clipboard.writeText(btn.dataset.url ?? location.href);
+      btn.classList.add('is-copied');
+      setTimeout(() => btn.classList.remove('is-copied'), 1200);
+    });
+  </script>
+</Site>

package/src/pages/blog/index.astro

@@ -0,0 +1,51 @@
+---
+import Site from '../../layouts/Site.astro';
+import { getRepo } from '../../lib/repo';
+import { publicTags, slugify } from '../../lib/schema';
+import { formatDate } from '../../lib/dates';
+import { collectionFromPath, collectionUrl, tagUrl } from '../../lib/content';
+
+// One file serves every collection's index — injectRoute can't pass props,
+// so the collection is resolved from the request path.
+const col = collectionFromPath(Astro.url.pathname);
+if (!col) return new Response(null, { status: 404, statusText: 'Not found' });
+
+const PAGE_SIZE = 10;
+const repo = await getRepo(Astro.locals);
+const [allPosts, tags, users, settings] = await Promise.all([repo.listPublishedPosts(col.key), repo.listTags(), repo.listUsers(), repo.getSettings()]);
+
+const pageCount = Math.max(1, Math.ceil(allPosts.length / PAGE_SIZE));
+const pageNum = Math.min(pageCount, Math.max(1, Number(Astro.url.searchParams.get('page')) || 1));
+const posts = allPosts.slice((pageNum - 1) * PAGE_SIZE, pageNum * PAGE_SIZE);
+
+const tagSlug = (name: string) =>
+  tags.find((t) => t.name.toLowerCase() === name.toLowerCase())?.slug ?? slugify(name);
+const authorName = (id: string | null) => (id ? users.find((u) => u.id === id)?.name : undefined);
+const fmt = (ts: number | null) =>
+  formatDate(ts, settings, 'short');
+---
+
+<Site title={col.plural}>
+  <h1>{col.plural}</h1>
+  {posts.length === 0 && <p>No {col.plural.toLowerCase()} yet.</p>}
+  <ul class="post-list">
+    {posts.map((p) => (
+      <li>
+        <a href={collectionUrl(col.key, p.slug)}>{p.title}</a>
+        <div class="post-meta">
+          {fmt(p.publishedAt)}
+          {authorName(p.authorId) && <span class="byline">· {authorName(p.authorId)}</span>}
+          {publicTags(p.tags).map((t) => <a class="tag" href={tagUrl(tagSlug(t))}>{t}</a>)}
+        </div>
+        {p.excerpt && <p class="post-excerpt">{p.excerpt}</p>}
+      </li>
+    ))}
+  </ul>
+  {pageCount > 1 && (
+    <nav class="pager" aria-label="Pagination">
+      {pageNum > 1 ? <a href={pageNum === 2 ? col.base : `${col.base}?page=${pageNum - 1}`}>← Newer</a> : <span />}
+      <span class="pager-status">Page {pageNum} of {pageCount}</span>
+      {pageNum < pageCount ? <a href={`${col.base}?page=${pageNum + 1}`}>Older →</a> : <span />}
+    </nav>
+  )}
+</Site>

package/src/pages/blog/tag/[slug].astro

@@ -0,0 +1,83 @@
+---
+import Site from '../../../layouts/Site.astro';
+import { getRepo } from '../../../lib/repo';
+import { isInternalTag } from '../../../lib/schema';
+import { formatDate } from '../../../lib/dates';
+import { CONTENT, collectionUrl, postsIndexUrl, tagUrl } from '../../../lib/content';
+
+const PAGE_SIZE = 10;
+const { slug } = Astro.params;
+const repo = await getRepo(Astro.locals);
+const [tag, settings] = await Promise.all([slug ? repo.getTagBySlug(slug) : Promise.resolve(null), repo.getSettings()]);
+// internal (#-prefixed) tags never get a public archive
+if (!tag || isInternalTag(tag.name)) return new Response(null, { status: 404, statusText: 'Not found' });
+
+// Tags are shared across collections — the archive lists every match.
+// Posts store tag names; the registry maps slug → name for filtering.
+const allPosts = (await repo.listPublishedPosts()).filter((p) =>
+  p.tags.some((t) => t.toLowerCase() === tag.name.toLowerCase())
+);
+const pageCount = Math.max(1, Math.ceil(allPosts.length / PAGE_SIZE));
+const pageNum = Math.min(pageCount, Math.max(1, Number(Astro.url.searchParams.get('page')) || 1));
+const posts = allPosts.slice((pageNum - 1) * PAGE_SIZE, pageNum * PAGE_SIZE);
+const base = tagUrl(tag.slug);
+
+// With several collections configured, the page groups entries under each
+// collection's heading (config order); a single collection renders the flat
+// list exactly as before.
+const multi = Object.keys(CONTENT.collections).length > 1;
+const groups = multi
+  ? Object.entries(CONTENT.collections)
+      .map(([key, c]) => ({ key, plural: c.plural, posts: posts.filter((p) => p.collection === key) }))
+      .filter((g) => g.posts.length > 0)
+  : [{ key: 'posts', plural: '', posts }];
+
+const countNoun = multi
+  ? allPosts.length === 1 ? 'entry' : 'entries'
+  : (allPosts.length === 1 ? CONTENT.posts.singular : CONTENT.posts.plural).toLowerCase();
+
+const fmt = (ts: number | null) =>
+  formatDate(ts, settings, 'short');
+const readMins = (p: (typeof posts)[number]) =>
+  Math.max(1, Math.round((p.bodyHtml || p.body).replace(/<[^>]+>/g, ' ').split(/\s+/).filter(Boolean).length / 220));
+---
+
+<Site title={tag.name} description={tag.description || `Tagged ${tag.name}`}>
+  <header class="tag-hero">
+    <p class="tag-kicker">Collection · {allPosts.length} {countNoun}</p>
+    <h1>{tag.name}</h1>
+    {tag.description && <p class="tag-desc">{tag.description}</p>}
+  </header>
+  {posts.length === 0 && <p>Nothing with this tag yet.</p>}
+  {groups.map((g) => (
+    <>
+      {multi && <h2 class="tag-group">{g.plural}</h2>}
+      <ul class="post-list">
+        {g.posts.map((p) => (
+          <li class="post-item">
+            {p.cover && (
+              <a class="post-thumb" href={collectionUrl(p.collection, p.slug)}><img src={p.cover} alt={p.coverAlt} loading="lazy" /></a>
+            )}
+            <div>
+              <a href={collectionUrl(p.collection, p.slug)}>{p.title}</a>
+              <div class="post-meta">{fmt(p.publishedAt)} · {readMins(p)} min read</div>
+              {p.excerpt && <p class="post-excerpt">{p.excerpt}</p>}
+            </div>
+          </li>
+        ))}
+      </ul>
+    </>
+  ))}
+  {pageCount > 1 && (
+    <nav class="pager" aria-label="Pagination">
+      {pageNum > 1 ? <a href={pageNum === 2 ? base : `${base}?page=${pageNum - 1}`}>← Newer</a> : <span />}
+      <span class="pager-status">Page {pageNum} of {pageCount}</span>
+      {pageNum < pageCount ? <a href={`${base}?page=${pageNum + 1}`}>Older →</a> : <span />}
+    </nav>
+  )}
+  <p style="margin-top:28px"><a href={postsIndexUrl()}>← All {CONTENT.posts.plural.toLowerCase()}</a></p>
+</Site>
+
+<style>
+  .tag-group { font-size: 1.05rem; margin: 1.6rem 0 0.2rem; color: var(--muted, inherit); }
+</style>

package/src/pages/embed/[pageId]/[blockId].ts

@@ -0,0 +1,45 @@
+import type { APIRoute } from 'astro';
+import { getRepo } from '../../../lib/repo';
+import { parseConfig } from '../../../lib/schema';
+
+// Serves a Custom HTML/JS widget as its own document, rendered inside a
+// sandboxed iframe (sandbox="allow-scripts") on the public page. The script
+// runs here, isolated from the parent page, cookies, and the admin session.
+export const GET: APIRoute = async ({ params, locals }) => {
+  const repo = await getRepo(locals);
+  const page = await repo.getPage(params.pageId!);
+  const block = page?.blocks.find((b) => b.id === params.blockId && b.type === 'customHtml');
+  if (!page || !block) return new Response(null, { status: 404 });
+
+  const cfg = parseConfig('customHtml', block.config);
+  const doc = `<!doctype html>
+<html>
+<head>
+<meta charset="utf-8">
+<style>
+  html, body { margin: 0; font-family: system-ui, sans-serif; }
+  ${cfg.css}
+</style>
+</head>
+<body>
+${cfg.html}
+<script>${cfg.js}<\/script>
+<script>
+  (function () {
+    var send = function () {
+      parent.postMessage({ acmsEmbedId: ${JSON.stringify(block.id)}, height: document.documentElement.scrollHeight }, '*');
+    };
+    window.addEventListener('load', send);
+    new ResizeObserver(send).observe(document.documentElement);
+  })();
+<\/script>
+</body>
+</html>`;
+
+  return new Response(doc, {
+    headers: {
+      'Content-Type': 'text/html; charset=utf-8',
+      'Cache-Control': 'no-store',
+    },
+  });
+};

package/src/pages/go/[id].ts

@@ -0,0 +1,10 @@
+import type { APIRoute } from 'astro';
+import { getRepo } from '../../lib/repo';
+
+// Tracked redirect for the links page — increments the click counter.
+export const GET: APIRoute = async ({ params, locals }) => {
+  const repo = await getRepo(locals);
+  const url = await repo.trackClick(params.id!);
+  if (!url) return new Response(null, { status: 404 });
+  return new Response(null, { status: 302, headers: { Location: url } });
+};

package/src/pages/index.astro

@@ -0,0 +1,52 @@
+---
+import Site from '../layouts/Site.astro';
+import WidgetRenderer from '../components/WidgetRenderer.astro';
+import { getRepo } from '../lib/repo';
+import { resolveDesign } from '../lib/theme';
+import { expandDynamicBlocks } from '../lib/dynamicBlocks';
+import { I18N, localeFromPath } from '../lib/i18n';
+
+const repo = await getRepo(Astro.locals);
+// this file also serves /<locale> for every non-default locale; the locale is
+// resolved from the request path (injectRoute can't pass props)
+const locale = I18N.enabled ? localeFromPath(Astro.url.pathname) : I18N.defaultLocale;
+const wantsLocaleHome = I18N.enabled && locale !== I18N.defaultLocale;
+let [home, settings] = await Promise.all([
+  repo.getHomePage(wantsLocaleHome ? locale : undefined),
+  repo.getSettings(),
+]);
+// a locale home that isn't authored yet falls back to the default home —
+// /es must never 404 mid-setup
+if (wantsLocaleHome && !home) home = await repo.getHomePage();
+
+// A theme may ship templates/home.astro — a coded homepage that wins over the
+// isHome content page unless the Design screen forces 'content'. The template
+// receives the page (its body renders as the hero) plus published posts/tags.
+const design = resolveDesign(settings);
+const HomeTemplate = design.homeMode !== 'content' ? (design.HomeTemplate as any) : null;
+// theme homepages are blog-shaped — they receive the built-in collection only
+const [posts, tags] = HomeTemplate
+  ? await Promise.all([repo.listPublishedPosts('posts'), repo.listTags()])
+  : [[], []];
+// expand dynamic blocks (post lists) in the page body for BOTH paths — a theme
+// template injects the body as its hero, so it must receive expanded HTML too
+const homeHtml = home?.bodyHtml ? await expandDynamicBlocks(home.bodyHtml, repo) : '';
+const homeForTemplate = home ? { ...home, bodyHtml: homeHtml } : null;
+---
+
+<Site title={home?.seoTitle || undefined} description={home?.seoDesc || undefined}>
+  {HomeTemplate ? (
+    <HomeTemplate settings={settings} page={homeForTemplate} posts={posts} tags={tags} />
+  ) : home ? (
+    home.bodyHtml ? (
+      <article class="page-body" set:html={homeHtml} />
+    ) : (
+      <WidgetRenderer pageId={home.id} blocks={home.blocks} />
+    )
+  ) : (
+    <section class="w-hero center">
+      <h1>Welcome</h1>
+      <p class="sub">No home page yet — create one in <a href="/admin">the admin</a> and mark it as home.</p>
+    </section>
+  )}
+</Site>

package/src/pages/links.astro

@@ -0,0 +1,110 @@
+---
+import Site from '../layouts/Site.astro';
+import { getRepo } from '../lib/repo';
+
+const repo = await getRepo(Astro.locals);
+const [links, settings] = await Promise.all([repo.listLinks(), repo.getSettings()]);
+
+// links page has its own identity; falls back to the site's until it's set
+const profileName = settings.linksName || settings.siteTitle;
+const profileBio = settings.linksBio || settings.tagline;
+
+const SPACER_PX: Record<string, number> = { s: 16, m: 36, l: 72 };
+
+// icon column convention: '<svg…' inline markup, http/​/ image URL,
+// 'favicon' derive from the link's host, anything else = emoji/text
+function iconInfo(l: (typeof links)[number]): { type: 'svg' | 'img' | 'emoji' | 'none'; value: string } {
+  const icon = l.icon.trim();
+  if (!icon) return { type: 'none', value: '' };
+  if (icon.startsWith('<svg')) return { type: 'svg', value: icon };
+  if (icon === 'favicon') {
+    try {
+      const host = new URL(l.url).hostname;
+      return { type: 'img', value: `https://www.google.com/s2/favicons?domain=${host}&sz=64` };
+    } catch {
+      return { type: 'none', value: '' };
+    }
+  }
+  if (icon.startsWith('http') || icon.startsWith('/')) return { type: 'img', value: icon };
+  return { type: 'emoji', value: icon };
+}
+
+const HEX = /^#[0-9a-f]{6}$/i;
+
+function buttonStyle(l: (typeof links)[number]): string | undefined {
+  const color = typeof l.meta.color === 'string' && HEX.test(l.meta.color) ? l.meta.color : '';
+  const textColor = typeof l.meta.textColor === 'string' && HEX.test(l.meta.textColor) ? l.meta.textColor : '';
+  const parts: string[] = [];
+  if (color) {
+    parts.push(`background:${color}`, `border-color:${color}`);
+    if (!textColor) {
+      const [r, g, b] = [1, 3, 5].map((i) => parseInt(color.slice(i, i + 2), 16));
+      const light = (0.299 * r + 0.587 * g + 0.114 * b) / 255 > 0.62;
+      parts.push(`color:${light ? '#1e1f24' : '#fff'}`);
+    }
+  }
+  if (textColor) parts.push(`color:${textColor}`);
+  return parts.length ? parts.join(';') : undefined;
+}
+
+function vcardHref(l: (typeof links)[number]): string {
+  const m = l.meta as Record<string, string>;
+  const first = m.firstName ?? '';
+  const last = m.lastName ?? '';
+  const lines = [
+    'BEGIN:VCARD',
+    'VERSION:3.0',
+    `N:${last};${first};;;`,
+    `FN:${[first, last].filter(Boolean).join(' ')}`,
+    m.org ? `ORG:${m.org}` : '',
+    m.phone ? `TEL;TYPE=CELL:${m.phone}` : '',
+    m.email ? `EMAIL:${m.email}` : '',
+    m.url ? `URL:${m.url}` : '',
+    'END:VCARD',
+  ].filter(Boolean);
+  return `data:text/vcard;charset=utf-8,${encodeURIComponent(lines.join('\r\n'))}`;
+}
+
+// incomplete buttons (no destination yet) stay hidden on the public page
+const visible = links.filter((l) => {
+  if (l.kind === 'link' || l.kind === 'email' || l.kind === 'phone') return Boolean(l.url.trim());
+  if (l.kind === 'heading' || l.kind === 'text') return Boolean((l.kind === 'heading' ? l.label : l.html).trim());
+  if (l.kind === 'html') return Boolean(l.html.trim());
+  return true;
+});
+---
+
+<Site title="Links" bare>
+  <div class="links-page">
+    {settings.linksAvatar && <img class="links-avatar" src={settings.linksAvatar} alt={profileName} />}
+    <h1>{profileName}</h1>
+    {profileBio && <p class="tagline">{profileBio}</p>}
+    {visible.map((l) => {
+      const ico = iconInfo(l);
+      const icon =
+        ico.type === 'svg' ? <span class="link-ico" set:html={ico.value} /> :
+        ico.type === 'img' ? <span class="link-ico"><img src={ico.value} alt="" loading="lazy" /></span> :
+        ico.type === 'emoji' ? <span class="link-ico link-ico-emoji">{ico.value}</span> :
+        null;
+      switch (l.kind) {
+        case 'heading':
+          return <h2 class="link-heading">{l.label}</h2>;
+        case 'text':
+          return <p class="link-text">{l.html}</p>;
+        case 'spacer':
+          return <div class="link-spacer" style={`height:${SPACER_PX[String(l.meta.size)] ?? SPACER_PX.m}px`} />;
+        case 'html':
+          return <div class="link-html" set:html={l.html} />;
+        case 'email':
+          return <a class="link-btn" style={buttonStyle(l)} href={`mailto:${l.url}`}>{icon}<span class="link-label">{l.label || l.url}</span></a>;
+        case 'phone':
+          return <a class="link-btn" style={buttonStyle(l)} href={`tel:${l.url.replace(/[^+\d]/g, '')}`}>{icon}<span class="link-label">{l.label || l.url}</span></a>;
+        case 'vcard':
+          return <a class="link-btn" style={buttonStyle(l)} href={vcardHref(l)} download={`${(l.meta.firstName as string) || 'contact'}.vcf`}>{icon}<span class="link-label">{l.label || 'Save contact'}</span></a>;
+        default:
+          return <a class="link-btn" style={buttonStyle(l)} href={`/go/${l.id}`} rel="noopener">{icon}<span class="link-label">{l.label}</span></a>;
+      }
+    })}
+    {visible.length === 0 && <p>No links yet.</p>}
+  </div>
+</Site>

package/src/pages/llms.txt.ts

@@ -0,0 +1,47 @@
+import type { APIRoute } from 'astro';
+import { getRepo } from '../lib/repo';
+import { siteOrigin } from '../lib/seo';
+import { CONTENT, collectionUrl } from '../lib/content';
+
+// llms.txt (https://llmstxt.org): a markdown site summary for AI search and
+// discovery systems — what the site is, plus links to its published content.
+
+export const GET: APIRoute = async ({ locals, url }) => {
+  const repo = await getRepo(locals);
+  const [settings, pages, posts] = await Promise.all([
+    repo.getSettings(),
+    repo.listPages(),
+    repo.listPublishedPosts(),
+  ]);
+  const origin = siteOrigin(settings, url);
+  const publishedPages = pages.filter((p) => p.status === 'published' && !p.isHome);
+
+  const lines = [
+    `# ${settings.siteTitle}`,
+    '',
+    ...(settings.tagline ? [`> ${settings.tagline}`, ''] : []),
+    '## Pages',
+    '',
+    `- [Home](${origin}/)`,
+    ...publishedPages.map((p) => `- [${p.title}](${origin}/${p.slug})`),
+    ...Object.values(CONTENT.collections).map((c) => `- [${c.plural}](${origin}${c.base})`),
+    // one section per collection, in config order
+    ...Object.entries(CONTENT.collections).flatMap(([key, c]) => [
+      '',
+      `## ${c.plural}`,
+      '',
+      ...posts
+        .filter((p) => p.collection === key)
+        .map((p) => `- [${p.title}](${origin}${collectionUrl(key, p.slug)})${p.excerpt ? `: ${p.excerpt}` : ''}`),
+    ]),
+    '',
+    '## Feeds',
+    '',
+    `- [RSS](${origin}/rss.xml)`,
+    `- [Sitemap](${origin}/sitemap.xml)`,
+    '',
+  ];
+  return new Response(lines.join('\n'), {
+    headers: { 'Content-Type': 'text/plain; charset=utf-8', 'Cache-Control': 'public, max-age=3600' },
+  });
+};

package/src/pages/media/[...key].ts

@@ -0,0 +1,18 @@
+import type { APIRoute } from 'astro';
+import { getMediaStore } from '../../lib/media/store';
+
+// Serves uploaded media. Keys are content-addressed (uuid-prefixed), so
+// responses are safely immutable.
+export const GET: APIRoute = async ({ params, locals }) => {
+  const key = params.key;
+  if (!key || key.includes('..')) return new Response(null, { status: 404 });
+  const store = getMediaStore(locals);
+  const obj = await store.get(key);
+  if (!obj) return new Response(null, { status: 404 });
+  return new Response(obj.body, {
+    headers: {
+      'Content-Type': obj.contentType,
+      'Cache-Control': 'public, max-age=31536000, immutable',
+    },
+  });
+};