@acms-subir/core 0.2.0 → 0.3.0

package/src/pages/calendar/index.astro

@@ -0,0 +1,191 @@
+---
+import Site from '../../layouts/Site.astro';
+import { getRepo } from '../../lib/repo';
+import { effectiveSettings } from '../../lib/designPreview';
+import { siteOrigin } from '../../lib/seo';
+import { siteLocale } from '../../lib/dates';
+import { CALENDAR, calendarFeedUrl, calendarPageUrl } from '../../lib/calendar/config';
+import { calendarWindow, renderCalendarView } from '../../lib/calendar/render';
+import { collectViewEvents, type ViewEvent } from '../../lib/calendar/data';
+import { eventCardHtml } from '../../lib/calendar/cards';
+import { safeColor } from '../../lib/calendar/events';
+import { tzParts } from '../../lib/calendar/ics';
+
+// The main calendar page: filter chips per public calendar, Month / Week /
+// List views (the same renderer as the calendar card), image cards for
+// what's coming up, and subscribe links for every calendar app. On phones the
+// month grid gives way to a two-week day strip over the agenda.
+if (!CALENDAR.enabled) return new Response(null, { status: 404, statusText: 'Not found' });
+
+const repo = await getRepo(Astro.locals);
+const settings = await effectiveSettings(await repo.getSettings(), Astro.url, Astro.cookies, Astro.locals);
+const now = Date.now();
+const tz = settings.timezone || 'UTC';
+const locale = siteLocale(settings);
+const origin = siteOrigin(settings, Astro.url);
+
+const all = await repo.listCalendars();
+const listed = all.filter((c) => c.visibility === 'public');
+const calSlug = Astro.url.searchParams.get('cal') ?? '';
+// unlisted calendars work when linked directly, they just aren't offered
+const active = calSlug ? all.find((c) => c.slug === calSlug && c.visibility !== 'private') ?? null : null;
+const viewParam = Astro.url.searchParams.get('view');
+const view = (['month', 'week', 'list'] as const).find((v) => v === viewParam) ?? CALENDAR.defaultView;
+const explicitView = Boolean(viewParam);
+const monthParam = /^(\d{4})-(\d{2})$/.exec(Astro.url.searchParams.get('m') ?? '');
+
+const win = calendarWindow(settings, now);
+const { events, calendars, errors } = await collectViewEvents(repo, settings, win, {
+  audience: 'public',
+  ...(active ? { calendarIds: [active.id] } : {}),
+});
+
+const calendarHtml = renderCalendarView(events, settings, now, {
+  view: view === 'list' ? 'upcoming' : view,
+  limit: 50,
+  multi: !active && calendars.length > 1,
+  emptyText: 'Nothing on the calendar yet.',
+  focus: monthParam ? { y: Number(monthParam[1]), m: Number(monthParam[2]) } : undefined,
+});
+
+// coming up: the next occurrence of each distinct native event
+const seen = new Set<string>();
+const comingUp: ViewEvent[] = [];
+for (const v of events) {
+  if (!v.event || v.end <= now || seen.has(v.event.id)) continue;
+  seen.add(v.event.id);
+  comingUp.push(v);
+  if (comingUp.length >= 6) break;
+}
+
+// agenda (list view + phones): next 60 days grouped by local day
+const pad = (n: number) => String(n).padStart(2, '0');
+const dayKey = (ms: number) => { const p = tzParts(ms, tz); return `${p.y}-${pad(p.m)}-${pad(p.d)}`; };
+const horizon = now + 60 * 86_400_000;
+const agenda = new Map<string, ViewEvent[]>();
+for (const v of events) {
+  if (v.end <= now || v.start > horizon) continue;
+  // events already underway are listed under today
+  const k = dayKey(Math.max(v.start, now));
+  if (!agenda.has(k)) agenda.set(k, []);
+  agenda.get(k)!.push(v);
+}
+const fmt = (o: Intl.DateTimeFormatOptions) => new Intl.DateTimeFormat(locale, { ...o, timeZone: tz });
+const dayLabel = fmt({ weekday: 'long', month: 'long', day: 'numeric' });
+const timeLabel = fmt({ hour: 'numeric', minute: '2-digit' });
+const stripDays = Array.from({ length: 14 }, (_, i) => {
+  const ms = now + i * 86_400_000;
+  const k = dayKey(ms);
+  return { k, dow: fmt({ weekday: 'narrow' }).format(ms), d: tzParts(ms, tz).d, has: agenda.has(k), today: i === 0 };
+});
+
+const feed = origin + calendarFeedUrl(active?.slug);
+const webcal = feed.replace(/^https?:\/\//, 'webcal://');
+const googleAdd = `https://calendar.google.com/calendar/r?cid=${encodeURIComponent(webcal)}`;
+const outlookAdd = `https://outlook.live.com/calendar/0/addfromweb?url=${encodeURIComponent(feed)}&name=${encodeURIComponent(active?.name ?? settings.siteTitle)}`;
+const viewHref = (v: string) => {
+  const p = new URLSearchParams(Astro.url.search);
+  p.set('view', v);
+  p.delete('m');
+  return `${CALENDAR.base}?${p}`;
+};
+const title = active ? active.name : 'Calendar';
+const lede = active?.description || `What’s happening at ${settings.siteTitle}. Subscribe to keep it in your own calendar.`;
+const zoneName = fmt({ timeZoneName: 'long' }).formatToParts(now).find((p) => p.type === 'timeZoneName')?.value ?? tz;
+---
+
+<Site title={title} description={lede}>
+  <div class={`pc-calpage view-${view}${explicitView ? ' is-explicit' : ''}`}>
+    <header class="pc-calpage-head">
+      <h1>{title}</h1>
+      <p>{lede}</p>
+    </header>
+
+    <div class="pc-calpage-bar">
+      {(listed.length > 1 || active) && (
+        <nav class="pc-calpage-chips" aria-label="Calendars">
+          <a class={!active ? 'is-on' : ''} href={CALENDAR.base} aria-current={!active ? 'page' : undefined}>All</a>
+          {listed.map((c) => (
+            <a class={active?.id === c.id ? 'is-on' : ''} href={calendarPageUrl(c.slug)} aria-current={active?.id === c.id ? 'page' : undefined}>
+              <i style={`background:${safeColor(c.color)}`} aria-hidden="true" />{c.name}
+            </a>
+          ))}
+          {active && active.visibility !== 'public' && <a class="is-on" href={calendarPageUrl(active.slug)}><i style={`background:${safeColor(active.color)}`} aria-hidden="true" />{active.name}</a>}
+        </nav>
+      )}
+      <div class="pc-calpage-tools">
+        <nav class="pc-calpage-views" aria-label="View">
+          <a class={view === 'month' ? 'is-on' : ''} href={viewHref('month')}>Month</a>
+          <a class={view === 'week' ? 'is-on' : ''} href={viewHref('week')}>Week</a>
+          <a class={view === 'list' ? 'is-on' : ''} href={viewHref('list')}>List</a>
+        </nav>
+        <details class="pc-calpage-sub">
+          <summary>
+            <svg viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="1.8" stroke-linecap="round" stroke-linejoin="round" aria-hidden="true"><path d="M12 4v11M7 10l5 5 5-5M5 20h14" /></svg>
+            Subscribe
+          </summary>
+          <div class="pc-calpage-sub-menu">
+            <p>Add {active ? `“${active.name}”` : 'this calendar'} to your calendar app. New events show up on their own.</p>
+            <a href={googleAdd} target="_blank" rel="noopener">Google Calendar</a>
+            <a href={webcal}>Apple Calendar</a>
+            <a href={outlookAdd} target="_blank" rel="noopener">Outlook</a>
+            <button type="button" data-copy={feed}>Copy link</button>
+          </div>
+        </details>
+      </div>
+    </div>
+
+    <div class="pc-calpage-strip" aria-label="Next two weeks">
+      {stripDays.map((d) => (
+        <a class={`${d.has ? 'has' : ''}${d.today ? ' today' : ''}`} href={d.has ? `#d-${d.k}` : undefined} aria-label={d.k}>
+          <small>{d.dow}</small><b>{d.d}</b><i aria-hidden="true" />
+        </a>
+      ))}
+    </div>
+
+    <div class="pc-calpage-view" set:html={calendarHtml} />
+
+    <section class="pc-calpage-agenda" aria-label="Agenda">
+      {agenda.size === 0 ? <p class="pc-cal-empty">Nothing in the next two months.</p> : [...agenda.entries()].map(([k, list]) => (
+        <div class="pc-agenda-day" id={`d-${k}`}>
+          <h3>{dayLabel.format(list[0].start < now ? now : list[0].start)}</h3>
+          {list.map((v) => (
+            <a class={`pc-agenda-row${v.cancelled ? ' is-cancelled' : ''}`} href={v.url ?? undefined}>
+              <span class="t">{v.allDay ? 'All day' : timeLabel.format(v.start)}</span>
+              <span class="ti">
+                {v.color && <i style={`background:${v.color}`} aria-hidden="true" />}
+                <b>{v.title}</b>
+                {v.location && <small>{v.location}</small>}
+              </span>
+            </a>
+          ))}
+        </div>
+      ))}
+    </section>
+
+    {view !== 'list' && comingUp.length > 0 && (
+      <section class="pc-calpage-up">
+        <h2>Coming up</h2>
+        <div class="pc-ev-cards" data-layout="grid" set:html={comingUp.map((v) => eventCardHtml({ event: v.event!, start: v.start, end: v.end, allDay: v.allDay, days: v.days }, settings, { showImage: true })).join('')} />
+      </section>
+    )}
+
+    <footer class="pc-calpage-foot">
+      <span>Times in {zoneName}</span>
+      {errors.length > 0 && <span>Some linked calendars couldn’t be loaded right now.</span>}
+    </footer>
+  </div>
+  <script>
+    document.addEventListener('click', async (e) => {
+      const b = e.target instanceof Element ? e.target.closest<HTMLButtonElement>('[data-copy]') : null;
+      if (b) {
+        await navigator.clipboard.writeText(b.dataset.copy ?? '');
+        b.textContent = 'Link copied';
+        setTimeout(() => (b.textContent = 'Copy link'), 1400);
+      }
+      document.querySelectorAll<HTMLDetailsElement>('details.pc-calpage-sub[open]').forEach((d) => {
+        if (!(e.target instanceof Node && d.contains(e.target))) d.open = false;
+      });
+    });
+  </script>
+</Site>

package/src/pages/embed/book/[resource]/[link].astro

@@ -0,0 +1,33 @@
+---
+import Site from '../../../../layouts/Site.astro';
+import BookingFlow from '../../../../components/booking/BookingFlow.astro';
+import { getRepo } from '../../../../lib/repo';
+import { bookingLinkUrl, bookingsEnabled } from '../../../../lib/calendar/config';
+import { availabilityContext } from '../../../../lib/booking/service';
+
+// Embeddable picker for other sites: day + time selection happens inside the
+// iframe; choosing a time opens the full booking page (top window) to finish.
+if (!bookingsEnabled()) return new Response(null, { status: 404 });
+const repo = await getRepo(Astro.locals);
+const resource = await repo.getResourceBySlug(Astro.params.resource ?? '');
+const link = resource ? await repo.getBookingLinkBySlug(resource.id, Astro.params.link ?? '') : null;
+if (!resource || !link || !link.active) return new Response(null, { status: 404 });
+const settings = await repo.getSettings();
+// a chosen time hands off to the real page, where the form lives
+if (Astro.url.searchParams.get('start')) {
+  return Astro.redirect(`${bookingLinkUrl(resource.slug, link.slug)}${Astro.url.search}`);
+}
+const ctx = await availabilityContext(repo, resource, link, settings);
+Astro.response.headers.set('Content-Security-Policy', 'frame-ancestors *');
+---
+
+<Site title={link.name} bare noindex>
+  <BookingFlow resource={resource} link={link} ctx={ctx} settings={settings} url={Astro.url} embed />
+  <script is:inline>
+    (function () {
+      var send = function () { parent.postMessage({ acmsBookingEmbed: true, height: document.documentElement.scrollHeight }, '*'); };
+      window.addEventListener('load', send);
+      if (window.ResizeObserver) new ResizeObserver(send).observe(document.documentElement);
+    })();
+  </script>
+</Site>

package/src/pages/embed/calendar/[slug].astro

@@ -0,0 +1,43 @@
+---
+import Site from '../../../layouts/Site.astro';
+import { getRepo } from '../../../lib/repo';
+import { CALENDAR } from '../../../lib/calendar/config';
+import { calendarWindow, renderCalendarView } from '../../../lib/calendar/render';
+import { collectViewEvents } from '../../../lib/calendar/data';
+import { upcomingEvents, eventCardHtml } from '../../../lib/calendar/cards';
+
+// Embeddable calendar for other websites:
+//   <iframe src="https://site/embed/calendar/all?view=month" …>
+// slug 'all' = every public calendar. view: month | week | list | cards.
+// Links open in the parent window; height is posted to the parent so a
+// small script can auto-size the iframe.
+if (!CALENDAR.enabled) return new Response(null, { status: 404 });
+const repo = await getRepo(Astro.locals);
+const settings = await repo.getSettings();
+const slug = Astro.params.slug ?? 'all';
+const cal = slug === 'all' ? null : await repo.getCalendarBySlug(slug);
+if (slug !== 'all' && (!cal || cal.visibility === 'private')) return new Response(null, { status: 404 });
+const view = (['month', 'week', 'list', 'cards'] as const).find((v) => v === Astro.url.searchParams.get('view')) ?? 'month';
+const now = Date.now();
+let html: string;
+if (view === 'cards') {
+  const items = await upcomingEvents(repo, settings, now, { calendarIds: cal ? [cal.id] : undefined, limit: Math.min(12, Number(Astro.url.searchParams.get('limit')) || 6) });
+  html = `<section class="pc-ev-cards" data-layout="grid">${items.map((o) => eventCardHtml(o, settings, { showImage: true })).join('') || '<p class="pc-ev-empty">No upcoming events.</p>'}</section>`;
+} else {
+  const { events, calendars } = await collectViewEvents(repo, settings, calendarWindow(settings, now), { audience: 'public', ...(cal ? { calendarIds: [cal.id] } : {}) });
+  html = renderCalendarView(events, settings, now, { view: view === 'list' ? 'upcoming' : view, limit: 30, multi: !cal && calendars.length > 1 });
+}
+Astro.response.headers.set('Content-Security-Policy', "frame-ancestors *");
+---
+
+<Site title={cal?.name ?? 'Calendar'} bare noindex>
+  <base target="_top" />
+  <div class="pc-embed" set:html={html} />
+  <script is:inline>
+    (function () {
+      var send = function () { parent.postMessage({ acmsCalendarEmbed: true, height: document.documentElement.scrollHeight }, '*'); };
+      window.addEventListener('load', send);
+      if (window.ResizeObserver) new ResizeObserver(send).observe(document.documentElement);
+    })();
+  </script>
+</Site>

package/src/pages/events/[slug].astro

@@ -0,0 +1,74 @@
+---
+import Site from '../../layouts/Site.astro';
+import EventPage from '../../components/EventPage.astro';
+import { getRepo } from '../../lib/repo';
+import { expandDynamicBlocks } from '../../lib/dynamicBlocks';
+import { highlightCodeHtml } from '../../lib/highlightCode';
+import { validateSession, SESSION_COOKIE } from '../../lib/auth';
+import { effectiveSettings } from '../../lib/designPreview';
+import { resolveDesign } from '../../lib/theme';
+import { siteOrigin } from '../../lib/seo';
+import { CALENDAR, eventUrl } from '../../lib/calendar/config';
+import { eventIsPublic, featuredOccurrence } from '../../lib/calendar/events';
+import { eventJsonLd } from '../../lib/calendar/seo';
+import { upcomingEvents } from '../../lib/calendar/cards';
+import { createRsvp, seatsTaken, BookingError } from '../../lib/booking/service';
+import { manageUrl } from '../../lib/calendar/config';
+import { waitUntilFrom } from '../../lib/webhooks';
+
+// Public event page. Drafts and private-calendar events 404 for visitors
+// (admins see them with a banner). ?on=YYYY-MM-DD shows one occurrence of a
+// repeating event — the calendar grid links carry it.
+if (!CALENDAR.enabled) return new Response(null, { status: 404, statusText: 'Not found' });
+const repo = await getRepo(Astro.locals);
+const event = await repo.getEventBySlug(Astro.params.slug ?? '');
+const [rawSettings, allCalendars] = await Promise.all([repo.getSettings(), repo.listCalendars()]);
+const calMap = new Map(allCalendars.map((c) => [c.id, c]));
+const isAdmin = (await validateSession(Astro.cookies.get(SESSION_COOKIE)?.value, Astro.locals));
+if (!event || (!eventIsPublic(event, calMap) && !isAdmin)) return new Response(null, { status: 404, statusText: 'Not found' });
+
+const settings = await effectiveSettings(rawSettings, Astro.url, Astro.cookies, Astro.locals);
+const now = Date.now();
+const on = Astro.url.searchParams.get('on') ?? undefined;
+const occurrence = featuredOccurrence(event, settings, now, on && /^\d{4}-\d{2}-\d{2}$/.test(on) ? on : undefined);
+if (!occurrence) return new Response(null, { status: 404, statusText: 'Not found' });
+const origin = siteOrigin(settings, Astro.url);
+// RSVP: "Save my seat" posts back here and lands on the manage page
+let rsvpError = '';
+if (Astro.request.method === 'POST' && event.rsvp.enabled && event.status === 'published') {
+  const form = await Astro.request.formData();
+  try {
+    const b = await createRsvp(repo, {
+      event, start: occurrence.start, end: occurrence.end, seats: Number(form.get('seats')) || 1,
+      booker: { name: String(form.get('name') ?? ''), email: String(form.get('email') ?? '') },
+    }, { origin, locals: Astro.locals, waitUntil: waitUntilFrom(Astro.locals) });
+    return Astro.redirect(`${manageUrl(b.manageToken)}?new=1`);
+  } catch (err) {
+    rsvpError = err instanceof BookingError ? err.message : 'Couldn’t save your RSVP. Please try again.';
+  }
+}
+const taken = event.rsvp.enabled ? await seatsTaken(repo, event.id, occurrence.start) : 0;
+const rsvp = event.rsvp.enabled
+  ? { going: taken, left: event.rsvp.capacity ? Math.max(0, event.rsvp.capacity - taken) : null, maxSeats: event.rsvp.maxSeats, error: rsvpError, open: occurrence.end > now && !event.cancelled }
+  : null;
+const calendars = event.calendarIds.map((id) => calMap.get(id)).filter((c): c is NonNullable<typeof c> => Boolean(c) && c!.visibility !== 'private');
+const html = highlightCodeHtml(await expandDynamicBlocks(event.bodyHtml, repo));
+const upcoming = (await upcomingEvents(repo, settings, now, { limit: 4 })).filter((u) => u.event.id !== event.id).slice(0, 3);
+const pageUrl = origin + eventUrl(event.slug);
+const jsonLd = eventJsonLd(event, occurrence, settings, origin, pageUrl);
+// eslint-disable-next-line @typescript-eslint/no-explicit-any
+const Template = resolveDesign(settings).theme.EventTemplate as any;
+const props = { event, occurrence, settings, calendars, html, upcoming, origin, preview: event.status !== 'published', rsvp };
+---
+
+<Site
+  title={event.seoTitle || event.title}
+  exactTitle={Boolean(event.seoTitle)}
+  description={event.seoDesc || event.excerpt || undefined}
+  image={event.cover || undefined}
+  imageAlt={event.coverAlt || undefined}
+  jsonLd={jsonLd}
+  noindex={event.status !== 'published'}
+>
+  {Template ? <Template {...props} /> : <EventPage {...props} />}
+</Site>

package/src/pages/events/[slug].ics.ts

@@ -0,0 +1,25 @@
+import type { APIRoute } from 'astro';
+import { getRepo } from '../../lib/repo';
+import { siteOrigin } from '../../lib/seo';
+import { CALENDAR, eventUrl } from '../../lib/calendar/config';
+import { eventIsPublic } from '../../lib/calendar/events';
+import { buildFeed } from '../../lib/calendar/ics-write';
+import { icsResponse } from '../../lib/calendar/feeds';
+
+// Single-event .ics behind "Add to calendar → Apple / Download". Served
+// inline so iPhones open it straight in Calendar.
+export const GET: APIRoute = async ({ locals, url, params }) => {
+  if (!CALENDAR.enabled) return new Response(null, { status: 404 });
+  const repo = await getRepo(locals);
+  const event = await repo.getEventBySlug(params.slug ?? '');
+  const calendars = await repo.listCalendars();
+  const map = new Map(calendars.map((c) => [c.id, c]));
+  if (!event || !eventIsPublic(event, map)) return new Response(null, { status: 404 });
+  const settings = await repo.getSettings();
+  const origin = siteOrigin(settings, url);
+  const body = buildFeed([event], settings.timezone, {
+    name: event.title, origin, host: new URL(origin).host, tz: settings.timezone || 'UTC',
+    eventUrl: (e) => eventUrl(e.slug), calendars: map, refreshMinutes: 1440,
+  });
+  return icsResponse(body, `${event.slug}.ics`);
+};

package/src/pages/index.astro

@@ -1,4 +1,5 @@
 ---
+import ThemeSections from '../components/ThemeSections.astro';
 import Site from '../layouts/Site.astro';
 import WidgetRenderer from '../components/WidgetRenderer.astro';
 import { getRepo } from '../lib/repo';
@@ -17,7 +18,7 @@ let [home, rawSettings] = await Promise.all([
   repo.getSettings(),
 ]);
 // ?designPreview=1 (admin-only) renders the staged Design-screen changes
-const settings = effectiveSettings(rawSettings, Astro.url, Astro.cookies);
+const settings = await effectiveSettings(rawSettings, Astro.url, Astro.cookies, Astro.locals);
 // a locale home that isn't authored yet falls back to the default home —
 // /es must never 404 mid-setup
 if (wantsLocaleHome && !home) home = await repo.getHomePage();
@@ -26,7 +27,7 @@ if (wantsLocaleHome && !home) home = await repo.getHomePage();
 // isHome content page unless the Design screen forces 'content'. The template
 // receives the page (its body renders as the hero) plus published posts/tags.
 const design = resolveDesign(settings);
-const HomeTemplate = design.homeMode !== 'content' ? (design.HomeTemplate as any) : null;
+const HomeTemplate = design.homeMode !== 'content' && (!home || settings.sectionPages?.[home.id]?.mode !== 'content') ? (design.HomeTemplate as any) : null;
 // theme homepages are blog-shaped — they receive the built-in collection only
 const [posts, tags] = HomeTemplate
   ? await Promise.all([repo.listPublishedPosts('posts'), repo.listTags()])
@@ -38,7 +39,9 @@ const homeForTemplate = home ? { ...home, bodyHtml: homeHtml } : null;
 ---
 
 <Site title={home?.seoTitle || undefined} description={home?.seoDesc || undefined}>
-  {HomeTemplate ? (
+  {home && settings.sectionPages?.[home.id]?.mode === 'sections' ? (
+    <ThemeSections page={home} settings={settings} />
+  ) : HomeTemplate ? (
     <HomeTemplate settings={settings} page={homeForTemplate} posts={posts} tags={tags} />
   ) : home ? (
     home.bodyHtml ? (

package/src/pages/legal/privacy.astro

@@ -0,0 +1,4 @@
+---
+import LegalPage from '../../components/LegalPage.astro';
+---
+<LegalPage policy="privacy" />

package/src/pages/legal/terms.astro

@@ -0,0 +1,4 @@
+---
+import LegalPage from '../../components/LegalPage.astro';
+---
+<LegalPage policy="terms" />

package/src/pages/links.astro

@@ -2,9 +2,17 @@
 import Site from '../layouts/Site.astro';
 import { getRepo } from '../lib/repo';
 import { cleanEventName } from '../lib/analytics';
+import { socialIconPath, socialIconSvg } from '../lib/socialIcons';
+import { effectiveNav } from '../lib/designPreview';
 
 const repo = await getRepo(Astro.locals);
-const [links, settings] = await Promise.all([repo.listLinks(), repo.getSettings()]);
+const [links, settings, liveNav] = await Promise.all([repo.listLinks(), repo.getSettings(), repo.listNavItems()]);
+// staged social links show up in design preview mode
+const navItems = await effectiveNav(liveNav, Astro.url, Astro.cookies, Astro.locals);
+// the site's social links (Navigation → Social) as an icon row under the bio
+const socials = navItems
+  .filter((n) => n.area === 'social')
+  .map((n) => ({ ...n, path: socialIconPath(n.url) }));
 
 // links page has its own identity; falls back to the site's until it's set
 const profileName = settings.linksName || settings.siteTitle;
@@ -71,8 +79,10 @@ function vcardHref(l: (typeof links)[number]): string {
   return `data:text/vcard;charset=utf-8,${encodeURIComponent(lines.join('\r\n'))}`;
 }
 
-// incomplete buttons (no destination yet) stay hidden on the public page
+// incomplete buttons (no destination yet) and blocks switched off in the
+// admin (meta.hidden) stay hidden on the public page
 const visible = links.filter((l) => {
+  if (l.meta?.hidden) return false;
   if (l.kind === 'link' || l.kind === 'email' || l.kind === 'phone') return Boolean(l.url.trim());
   if (l.kind === 'heading' || l.kind === 'text') return Boolean((l.kind === 'heading' ? l.label : l.html).trim());
   if (l.kind === 'html') return Boolean(l.html.trim());
@@ -85,6 +95,15 @@ const visible = links.filter((l) => {
     {settings.linksAvatar && <img class="links-avatar" src={settings.linksAvatar} alt={profileName} />}
     <h1>{profileName}</h1>
     {profileBio && <p class="tagline">{profileBio}</p>}
+    {socials.length > 0 && (
+      <nav class="social-nav" aria-label="Social">
+        {socials.map((n) => (
+          <a href={n.url} class:list={[{ 'has-icon': n.path }]} aria-label={n.path ? n.label : undefined} title={n.path ? n.label : undefined} target="_blank" rel="noopener me">
+            {n.path ? <Fragment set:html={socialIconSvg(n.path)} /> : n.label}
+          </a>
+        ))}
+      </nav>
+    )}
     {visible.map((l) => {
       const ico = iconInfo(l);
       const icon =
@@ -111,6 +130,7 @@ const visible = links.filter((l) => {
           return <a class="link-btn" style={buttonStyle(l)} href={`/go/${l.id}`} rel="noopener" data-umami-event={linkEvent(l.label)}>{icon}<span class="link-label">{l.label}</span></a>;
       }
     })}
-    {visible.length === 0 && <p>No links yet.</p>}
+    {visible.length === 0 && <p class="muted-note">No links yet.</p>}
+    <p class="links-foot"><a href="/">{settings.siteTitle}</a></p>
   </div>
 </Site>

package/src/pages/llms.txt.ts

@@ -35,6 +35,10 @@ export const GET: APIRoute = async ({ locals, url }) => {
         .map((p) => `- [${p.title}](${origin}${collectionUrl(key, p.slug)})${p.excerpt ? `: ${p.excerpt}` : ''}`),
     ]),
     '',
+    '## Agent editing',
+    '',
+    `- [Agent API documentation](${origin}/api/agent/docs) — authenticated HTTP and MCP access; generate a key in admin settings.`,
+    '',
     '## Feeds',
     '',
     `- [RSS](${origin}/rss.xml)`,

package/src/pages/preview/[type]/[id].astro

@@ -6,17 +6,20 @@ import { renderMarkdown } from '../../../lib/markdown';
 import { verifyPreviewToken } from '../../../lib/preview';
 import { expandDynamicBlocks } from '../../../lib/dynamicBlocks';
 import { highlightCodeHtml } from '../../../lib/highlightCode';
-import { verifySessionToken, SESSION_COOKIE } from '../../../lib/auth';
-import { mergePageDraft, mergePostDraft } from '../../../lib/drafts';
+import { validateSession, SESSION_COOKIE } from '../../../lib/auth';
+import { mergeEventDraft, mergePageDraft, mergePostDraft } from '../../../lib/drafts';
+import EventPage from '../../../components/EventPage.astro';
+import { featuredOccurrence } from '../../../lib/calendar/events';
+import { siteOrigin } from '../../../lib/seo';
 
 // Draft preview, any status. Reachable by a logged-in admin (the editor's
 // preview iframe) or by anyone holding a signed share token. Live documents
 // with pending edits render the PENDING version — exactly what Update will
 // publish — while the public URL keeps serving the live one.
 const { type, id } = Astro.params;
-if (type !== 'post' && type !== 'page') return new Response(null, { status: 404 });
+if (type !== 'post' && type !== 'page' && type !== 'event') return new Response(null, { status: 404 });
 
-const isAdmin = verifySessionToken(Astro.cookies.get(SESSION_COOKIE)?.value);
+const isAdmin = (await validateSession(Astro.cookies.get(SESSION_COOKIE)?.value, Astro.locals));
 const token = Astro.url.searchParams.get('token') ?? undefined;
 if (!isAdmin && !verifyPreviewToken(type, id!, token)) {
   return new Response(null, { status: 404 });
@@ -25,7 +28,22 @@ if (!isAdmin && !verifyPreviewToken(type, id!, token)) {
 const repo = await getRepo(Astro.locals);
 const livePost = type === 'post' ? await repo.getPost(id!) : null;
 const livePage = type === 'page' ? await repo.getPage(id!) : null;
-if (!livePost && !livePage) return new Response(null, { status: 404 });
+const liveEvent = type === 'event' ? await repo.getEvent(id!) : null;
+if (!livePost && !livePage && !liveEvent) return new Response(null, { status: 404 });
+// events render through the real event page component, draft merged in
+const event = liveEvent ? mergeEventDraft(liveEvent) : null;
+const eventView = event
+  ? await (async () => {
+      const [settings, calendars] = await Promise.all([repo.getSettings(), repo.listCalendars()]);
+      const occurrence = featuredOccurrence(event, settings, Date.now());
+      return {
+        settings, occurrence,
+        calendars: event.calendarIds.map((cid) => calendars.find((c) => c.id === cid)).filter((c): c is NonNullable<typeof c> => Boolean(c)),
+        html: highlightCodeHtml(await expandDynamicBlocks(event.bodyHtml, repo)),
+        origin: siteOrigin(settings, Astro.url),
+      };
+    })()
+  : null;
 const post = livePost ? mergePostDraft(livePost) : null;
 const page = livePage ? mergePageDraft(livePage) : null;
 
@@ -35,7 +53,10 @@ const fmt = (ts: number | null) =>
   ts ? new Date(ts).toLocaleDateString('en-US', { year: 'numeric', month: 'long', day: 'numeric' }) : '';
 ---
 
-<Site title={post?.title ?? page?.seoTitle ?? page?.title}>
+<Site title={post?.title ?? event?.title ?? page?.seoTitle ?? page?.title}>
+  {event && eventView?.occurrence && (
+    <EventPage event={event} occurrence={eventView.occurrence} settings={eventView.settings} calendars={eventView.calendars} html={eventView.html} upcoming={[]} origin={eventView.origin} preview />
+  )}
   {post && (
     <article>
       <h1>{post.title}</h1>

package/src/pages/search.astro

@@ -6,6 +6,9 @@ import { collectionUrl, tagUrl } from '../lib/content';
 import { authorSlug } from '../lib/schema';
 import { I18N, localeFromPath, localeHomeUrl, normalizePageLocale } from '../lib/i18n';
 import { searchStrings } from '../lib/search-i18n';
+import { CALENDAR, eventUrl } from '../lib/calendar/config';
+import { eventIsPublic, featuredOccurrence, formatOccurrence } from '../lib/calendar/events';
+import { siteLocale } from '../lib/dates';
 
 // The no-JS search surface (the modal's form falls back here). Serves both
 // /search and the locale-prefixed /<locale>/search routes — the locale comes
@@ -20,8 +23,10 @@ const locale = normalizePageLocale(reqLocale);
 const t = searchStrings((reqLocale || siteLang(settings)).slice(0, 2));
 const results = q
   ? await repo.searchPublished(q, { locale })
-  : { posts: [], pages: [], tags: [], authors: [] };
-const total = results.posts.length + results.pages.length + results.tags.length + results.authors.length;
+  : { posts: [], pages: [], events: [], tags: [], authors: [] };
+const calMap = new Map((await repo.listCalendars()).map((c) => [c.id, c]));
+const events = CALENDAR.enabled ? results.events.filter(({ doc }) => eventIsPublic(doc, calMap)).slice(0, 10) : [];
+const total = results.posts.length + results.pages.length + events.length + results.tags.length + results.authors.length;
 ---
 
 <Site title={q ? `${t.label}: ${q}` : t.label} description={`${t.label} · ${settings.siteTitle}`} noindex={Boolean(q)}>
@@ -88,6 +93,26 @@ const total = results.posts.length + results.pages.length + results.tags.length
     </section>
   )}
 
+  {events.length > 0 && (
+    <section class="search-section">
+      <h2>{t.events}</h2>
+      <ul class="post-list">
+        {events.map(({ doc: e, snippet }) => {
+          const o = featuredOccurrence(e, settings, Date.now());
+          return (
+            <li class="post-item">
+              <div>
+                <a href={eventUrl(e.slug)}>{e.title}</a>
+                {o && <span class="search-loc">{formatOccurrence(o, settings.timezone || 'UTC', siteLocale(settings)).range}</span>}
+                {snippet && <p class="post-excerpt" set:html={snippet} />}
+              </div>
+            </li>
+          );
+        })}
+      </ul>
+    </section>
+  )}
+
   {results.tags.length > 0 && (
     <section class="search-section">
       <h2>{t.tags}</h2>
@@ -118,31 +143,26 @@ const total = results.posts.length + results.pages.length + results.tags.length
 </Site>
 
 <style>
-  .search-hero { margin: 24px 0 8px; }
-  .search-form { display: flex; gap: 10px; margin: 18px 0; }
-  .search-form input {
-    flex: 1; font: inherit; padding: 10px 14px; border: 1px solid var(--line);
-    border-radius: 9px; background: var(--panel); color: var(--ink);
-  }
-  .search-form input:focus { outline: 2px solid var(--accent); outline-offset: 1px; border-color: transparent; }
+  .search-hero { padding: calc(20px * var(--space)) 0 0; }
+  .search-hero h1 { font-size: clamp(34px, 5vw, 46px); margin: 0 0 18px; }
+  .search-form { display: flex; gap: 6px; padding: 5px; margin: 0 0 18px; background: var(--panel); border: 1px solid var(--line-2); border-radius: 14px; box-shadow: var(--sh-1); }
+  .search-form:focus-within { border-color: var(--accent); box-shadow: 0 0 0 3px var(--accent-soft); }
+  .search-form input { flex: 1; min-width: 0; font: inherit; padding: 0 12px; border: 0; background: none; color: var(--ink); outline: none; }
   .search-form button {
-    font: inherit; font-weight: 600; padding: 10px 20px; border: 0; border-radius: 9px;
-    background: var(--accent); color: #fff; cursor: pointer;
+    font: 550 15px/1 var(--font-body); height: 42px; padding: 0 18px; border: 0; border-radius: 10px;
+    background: var(--btn); color: var(--btn-ink); cursor: pointer;
   }
-  .search-count { color: var(--muted); }
-  .search-section h2 { font-size: 1.1rem; margin-top: 2rem; }
+  .search-count { color: var(--muted); font-size: 14.5px; margin: 0 0 8px; }
+  .search-section h2 { font-size: 13px; font-weight: 550; letter-spacing: 0; color: var(--muted); margin: 36px 0 4px; font-family: var(--font-body); }
+  .post-list :global(.post-excerpt) { color: var(--muted); font-size: 15px; margin: 4px 0 0; }
   /* snippets arrive pre-escaped with <mark> around matches (set:html), so
      the highlight style must reach into the injected fragment */
   .post-excerpt :global(mark) {
     background: color-mix(in srgb, var(--accent) 22%, transparent);
     color: inherit; border-radius: 3px; padding: 0 1px;
   }
-  .search-loc {
-    font-size: 11px; font-weight: 700; letter-spacing: 0.06em; color: var(--muted);
-    border: 1px solid var(--line); border-radius: 5px; padding: 1px 5px; margin-left: 8px;
-    vertical-align: 2px;
-  }
-  .search-tags { display: flex; flex-wrap: wrap; gap: 8px; margin-top: 10px; }
-  .search-tag-count { color: var(--muted); }
+  .search-loc { font-size: 12.5px; font-weight: 550; color: var(--muted); margin-left: 10px; }
+  .search-tags { display: flex; flex-wrap: wrap; gap: 8px 16px; margin-top: 12px; }
+  .search-tag-count { color: var(--muted); font-weight: 400; }
   .search-avatar { width: 44px; height: 44px; border-radius: 50%; object-fit: cover; flex: none; }
 </style>