@ampless/runtime 1.0.0-alpha.49 → 1.0.0-alpha.51

package/dist/index.js

@@ -239,8 +239,8 @@ function createSeo(cmsConfig, settingsApi) {
 
 // src/plugin-head.ts
 import {
-  Fragment,
-  createElement
+  Fragment as Fragment2,
+  createElement as createElement2
 } from "react";
 import sanitizeHtml from "sanitize-html";
 import {
@@ -248,1100 +248,1435 @@ import {
   resolvePluginSettings
 } from "ampless";
 
-// src/plugin-package-manifest.ts
-var TRUST_LEVELS = ["untrusted", "trusted", "privileged"];
-function getNodeApi() {
-  if (typeof window !== "undefined") return null;
-  const proc = typeof process !== "undefined" ? process : void 0;
-  if (typeof proc?.getBuiltinModule !== "function") return null;
-  if (typeof import.meta.resolve !== "function") return null;
-  try {
-    const fs = proc.getBuiltinModule("node:fs");
-    const url = proc.getBuiltinModule("node:url");
-    if (!fs || !url) return null;
-    const resolve = import.meta.resolve.bind(import.meta);
-    return {
-      readFile: (u) => fs.readFileSync(url.fileURLToPath(u), "utf8"),
-      resolve
-    };
-  } catch {
-    return null;
-  }
+// src/rendering.ts
+import {
+  Fragment,
+  createElement
+} from "react";
+import { marked } from "marked";
+function escape(s) {
+  return s.replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;");
 }
-function isValidManifest(value) {
-  if (typeof value !== "object" || value === null) return false;
-  const v = value;
-  if (typeof v.apiVersion !== "number") return false;
-  if (typeof v.name !== "string") return false;
-  if (typeof v.trustLevel !== "string") return false;
-  if (!TRUST_LEVELS.includes(v.trustLevel)) return false;
-  if (!Array.isArray(v.capabilities)) return false;
-  for (const c of v.capabilities) {
-    if (typeof c !== "string") return false;
+function textAlignStyle(attrs) {
+  const v = attrs?.textAlign;
+  if (v === "left" || v === "center" || v === "right" || v === "justify") {
+    return ` style="text-align: ${v}"`;
   }
-  return true;
+  return "";
 }
-function loadPackageManifest(packageName) {
-  const node = getNodeApi();
-  if (!node) return null;
-  let resolvedUrl;
-  try {
-    resolvedUrl = node.resolve(`${packageName}/package.json`);
-  } catch {
-    return null;
-  }
-  let raw;
-  try {
-    raw = node.readFile(resolvedUrl);
-  } catch {
-    return null;
-  }
-  let pkg;
-  try {
-    pkg = JSON.parse(raw);
-  } catch {
-    return null;
+function renderTiptapString(node) {
+  if (node.type === "text") {
+    let html = escape(node.text ?? "");
+    for (const mark of node.marks ?? []) {
+      if (mark.type === "bold") html = `<strong>${html}</strong>`;
+      else if (mark.type === "italic") html = `<em>${html}</em>`;
+      else if (mark.type === "code") html = `<code>${html}</code>`;
+      else if (mark.type === "strike") html = `<s>${html}</s>`;
+      else if (mark.type === "underline") html = `<u>${html}</u>`;
+      else if (mark.type === "highlight") html = `<mark>${html}</mark>`;
+      else if (mark.type === "link") {
+        const href = escape(String(mark.attrs?.href ?? "#"));
+        html = `<a href="${href}" target="_blank" rel="noopener">${html}</a>`;
+      }
+    }
+    return html;
   }
-  if (typeof pkg !== "object" || pkg === null || !("amplessPlugin" in pkg)) {
-    return null;
+  const children = (node.content ?? []).map(renderTiptapString).join("");
+  switch (node.type) {
+    case "doc":
+      return children;
+    case "paragraph":
+      return `<p${textAlignStyle(node.attrs)}>${children}</p>`;
+    case "heading": {
+      const level = Number(node.attrs?.level ?? 1);
+      return `<h${level}${textAlignStyle(node.attrs)}>${children}</h${level}>`;
+    }
+    case "bulletList":
+      return `<ul>${children}</ul>`;
+    case "orderedList":
+      return `<ol>${children}</ol>`;
+    case "listItem":
+      return `<li>${children}</li>`;
+    case "codeBlock": {
+      const lang = node.attrs?.language ? ` class="language-${escape(String(node.attrs.language))}"` : "";
+      return `<pre><code${lang}>${children}</code></pre>`;
+    }
+    case "blockquote":
+      return `<blockquote>${children}</blockquote>`;
+    case "hardBreak":
+      return "<br />";
+    case "horizontalRule":
+      return "<hr />";
+    case "image": {
+      const src = escape(String(node.attrs?.src ?? ""));
+      const alt = escape(String(node.attrs?.alt ?? ""));
+      const title = node.attrs?.title ? ` title="${escape(String(node.attrs.title))}"` : "";
+      const display = node.attrs?.display ? ` data-display="${escape(String(node.attrs.display))}"` : "";
+      return `<img src="${src}" alt="${alt}"${title}${display} loading="lazy" />`;
+    }
+    case "table":
+      return `<table class="tiptap-table"><tbody>${children}</tbody></table>`;
+    case "tableRow":
+      return `<tr>${children}</tr>`;
+    case "tableHeader":
+      return `<th${tableCellAttrs(node.attrs)}>${children}</th>`;
+    case "tableCell":
+      return `<td${tableCellAttrs(node.attrs)}>${children}</td>`;
+    case "taskList":
+      return `<ul data-type="taskList">${children}</ul>`;
+    case "taskItem": {
+      const checked = node.attrs?.checked === true ? "true" : "false";
+      return `<li data-type="taskItem" data-checked="${checked}">${children}</li>`;
+    }
+    default:
+      return children;
   }
-  const manifest = pkg.amplessPlugin;
-  if (!isValidManifest(manifest)) return null;
-  return manifest;
-}
-var SUPPORTED_API_VERSION = 1;
-
-// src/plugin-head.ts
-function isPlugin2(p) {
-  return typeof p === "object" && p !== null && "apiVersion" in p;
-}
-var ALLOWED_ATTRS = /* @__PURE__ */ new Set([
-  "crossorigin",
-  "referrerpolicy",
-  "integrity",
-  "fetchpriority",
-  // `nonce` is intentionally NOT in the allowlist for Phase 1. CSP
-  // nonce propagation is scoped out of Phase 1 (see spec §7); attrs
-  // shouldn't let plugins smuggle nonces past the design decision.
-  // The CSP nonce RFP will reintroduce it through `cspNonce` on
-  // PluginPublicRenderContext + `inlineScript.nonce: 'auto'`, not via
-  // the `attrs` bag.
-  "loading",
-  // iframe lazy-loading
-  "sandbox",
-  // iframe sandbox attribute
-  "allow",
-  // iframe permissions policy
-  "allowfullscreen"
-  // iframe fullscreen
-]);
-function isAllowedAttr(name) {
-  if (name.startsWith("data-")) return true;
-  return ALLOWED_ATTRS.has(name.toLowerCase());
-}
-function isSafeUrl(value) {
-  const trimmed = value.trim();
-  if (trimmed.length === 0) return false;
-  const schemeMatch = trimmed.match(/^([a-zA-Z][a-zA-Z0-9+.-]*):/);
-  if (!schemeMatch) return true;
-  const scheme = schemeMatch[1].toLowerCase();
-  return scheme === "http" || scheme === "https";
-}
-function isDev() {
-  const env = typeof process !== "undefined" && process.env ? process.env.NODE_ENV : void 0;
-  return env !== "production";
-}
-function warn(message) {
-  if (!isDev()) return;
-  console.warn(`[ampless plugin-head] ${message}`);
 }
-function crossCheckStaticManifest(plugin, label) {
-  const packageName = plugin.packageName;
-  const manifest = loadPackageManifest(packageName);
-  if (!manifest) return;
-  if (typeof manifest.apiVersion !== "number") {
-    throw new Error(
-      `${label}: package.json#amplessPlugin.apiVersion is not a number (got ${JSON.stringify(manifest.apiVersion)}). Update the plugin's package.json or remove the amplessPlugin field.`
-    );
-  }
-  if (manifest.apiVersion > SUPPORTED_API_VERSION) {
-    throw new Error(
-      `${label}: package.json#amplessPlugin.apiVersion ${manifest.apiVersion} is newer than this runtime supports (max ${SUPPORTED_API_VERSION}). Upgrade @ampless/runtime, or pin an older version of the plugin.`
-    );
-  }
-  if (manifest.apiVersion !== plugin.apiVersion) {
-    throw new Error(
-      `${label}: apiVersion mismatch \u2014 package.json declares ${manifest.apiVersion}, factory declares ${plugin.apiVersion}. The two must agree.`
-    );
-  }
-  if (manifest.name !== plugin.name) {
-    warn(
-      `${label}: name mismatch \u2014 package.json#amplessPlugin.name is "${manifest.name}", factory returns name="${plugin.name}". Align them so admin UI / capability gates can identify the plugin consistently.`
-    );
-  }
-  if (manifest.trustLevel !== plugin.trust_level) {
-    warn(
-      `${label}: trustLevel mismatch \u2014 package.json declares "${manifest.trustLevel}", factory declares trust_level="${plugin.trust_level}". The processor IAM policies are wired off trust_level; drift here usually means the deployment lambda runs in the wrong context.`
-    );
-  }
-  const factoryCaps = Array.isArray(plugin.capabilities) ? plugin.capabilities : [];
-  const manifestCaps = manifest.capabilities;
-  if (!setsEqual(factoryCaps, manifestCaps)) {
-    warn(
-      `${label}: capabilities mismatch \u2014 package.json declares [${manifestCaps.join(", ")}], factory declares [${factoryCaps.join(", ")}]. The static manifest is what npm registry / admin UI surfaces show before the plugin loads, so it should match what the factory actually returns.`
-    );
+function tableCellAttrs(attrs) {
+  let out = "";
+  const colspan = Number(attrs?.colspan ?? 1);
+  if (colspan > 1) out += ` colspan="${colspan}"`;
+  const rowspan = Number(attrs?.rowspan ?? 1);
+  if (rowspan > 1) out += ` rowspan="${rowspan}"`;
+  const colwidth = attrs?.colwidth;
+  if (Array.isArray(colwidth) && colwidth.length > 0) {
+    const w = Number(colwidth[0]);
+    if (Number.isFinite(w) && w > 0) out += ` style="width: ${w}px"`;
   }
+  return out;
 }
-function setsEqual(a, b) {
-  const sa = new Set(a);
-  const sb = new Set(b);
-  if (sa.size !== sb.size) return false;
-  for (const c of sb) if (!sa.has(c)) return false;
-  return true;
+function renderMarkdownString(md) {
+  return marked.parse(md, { gfm: true, breaks: false, async: false });
 }
-function applyAttrs(target, attrs, ownerLabel) {
-  if (!attrs) return;
-  for (const [k, v] of Object.entries(attrs)) {
-    if (!isAllowedAttr(k)) {
-      warn(
-        `${ownerLabel}: attr "${k}" not in allowlist (data-* / crossorigin / referrerpolicy / integrity / fetchpriority / loading / sandbox / allow / allowfullscreen). skipping.`
-      );
-      continue;
+function buildContentFieldRegistry(plugins) {
+  const tiptap = /* @__PURE__ */ new Map();
+  const seenMarkdownPatterns = /* @__PURE__ */ new Set();
+  const markdownUrl = [];
+  for (const plugin of plugins) {
+    const fields = plugin.contentFields;
+    if (!fields) continue;
+    for (const field of fields) {
+      if (field.kind === "tiptap") {
+        if (tiptap.has(field.nodeType)) {
+          throw new Error(
+            `[ampless contentFields] duplicate tiptap nodeType "${field.nodeType}" \u2014 already registered by another plugin. Each nodeType may be claimed by at most one plugin.`
+          );
+        }
+        tiptap.set(field.nodeType, { plugin, renderer: field });
+      } else if (field.kind === "markdown-url") {
+        const key = field.pattern.source;
+        if (seenMarkdownPatterns.has(key)) {
+          throw new Error(
+            `[ampless contentFields] duplicate markdown-url pattern "${key}" \u2014 already registered by another plugin. Each pattern may be claimed by at most one plugin.`
+          );
+        }
+        seenMarkdownPatterns.add(key);
+        markdownUrl.push({ plugin, renderer: field });
+      }
     }
-    target[k] = v;
   }
+  return { tiptap, markdownUrl };
 }
-function escapeJsonLdInlineBody(value) {
-  return value.replace(/</g, "\\u003c").replace(/>/g, "\\u003e").replace(/&/g, "\\u0026").replace(/\u2028/g, "\\u2028").replace(/\u2029/g, "\\u2029");
+function htmlPassthrough(html) {
+  return createElement("span", { dangerouslySetInnerHTML: { __html: html } });
 }
-function inlineScriptTypeAllowed(surface, scriptType) {
-  if (scriptType === "application/ld+json") return true;
-  if (scriptType === void 0) {
-    return surface === "head" || surface === "body-end";
-  }
-  return false;
+function htmlPassthroughBlock(html, key) {
+  const props = { dangerouslySetInnerHTML: { __html: html } };
+  if (key !== void 0) props.key = key;
+  return createElement("div", props);
 }
-function renderInlineScript(descriptor, pluginLabel, index, surface) {
-  if (!descriptor.id) {
-    warn(
-      `${pluginLabel}: inlineScript descriptor #${index} dropped \u2014 missing required "id".`
-    );
-    return null;
+function renderTiptapNode(node, opts, key) {
+  const reg = opts.contentFields?.tiptap.get(node.type);
+  if (reg) {
+    const ctx = opts.ctxForPlugin?.(reg.plugin);
+    if (!ctx) {
+      return null;
+    }
+    try {
+      const out = reg.renderer.render(node, ctx);
+      return createElement(Fragment, { key }, out);
+    } catch (err) {
+      console.warn(
+        `[ampless renderBody] plugin "${reg.plugin.instanceId ?? reg.plugin.name}" threw inside contentFields tiptap renderer for nodeType "${node.type}": ${err instanceof Error ? err.message : String(err)}`
+      );
+      return null;
+    }
   }
-  if (!inlineScriptTypeAllowed(surface, descriptor.scriptType)) {
-    const got = descriptor.scriptType === void 0 ? "undefined" : `"${descriptor.scriptType}"`;
-    const allowed = surface === "body-for-post" ? `"application/ld+json" (required on publicBodyForPost \u2014 the per-post surface is scoped to JSON-LD)` : `undefined or "application/ld+json"`;
-    warn(
-      `${pluginLabel}: inlineScript "${descriptor.id}" dropped \u2014 scriptType ${got} not allowed on ${surface}. Allowed: ${allowed}.`
-    );
-    return null;
+  if (node.type === "text") {
+    return htmlPassthrough(renderTiptapString(node));
   }
-  const body = descriptor.scriptType === "application/ld+json" ? escapeJsonLdInlineBody(descriptor.body) : descriptor.body;
-  const props = {
-    id: descriptor.id,
-    dangerouslySetInnerHTML: { __html: body }
-  };
-  if (descriptor.scriptType) props.type = descriptor.scriptType;
-  return {
-    id: descriptor.id,
-    element: createElement("script", props)
-  };
-}
-function renderHeadDescriptor(descriptor, pluginLabel, index) {
-  switch (descriptor.type) {
-    case "script": {
-      if (!isSafeUrl(descriptor.src)) {
-        warn(
-          `${pluginLabel}: script descriptor #${index} dropped \u2014 unsafe src "${descriptor.src}".`
-        );
-        return null;
-      }
-      const props = {
-        src: descriptor.src
-      };
-      if (descriptor.id) props.id = descriptor.id;
-      const hasAsync = typeof descriptor.async === "boolean";
-      const hasDefer = typeof descriptor.defer === "boolean";
-      if (hasAsync) props.async = descriptor.async;
-      if (hasDefer) props.defer = descriptor.defer;
-      if (!hasAsync && !hasDefer) {
-        if (descriptor.strategy === "lazyOnload") {
-          props.defer = true;
-        } else {
-          props.async = true;
-        }
-      }
-      applyAttrs(props, descriptor.attrs, `${pluginLabel} script#${descriptor.id ?? index}`);
-      return {
-        id: descriptor.id ?? null,
-        element: createElement("script", props)
-      };
+  const childNodes = node.content ?? [];
+  const children = childNodes.map(
+    (c, i) => renderTiptapNode(c, opts, `${key}.${i}`)
+  );
+  switch (node.type) {
+    case "doc":
+      return createElement(Fragment, { key }, ...children);
+    case "paragraph": {
+      const align = textAlignStyleProp(node.attrs);
+      return createElement("p", { key, ...align }, ...children);
     }
-    case "inlineScript":
-      return renderInlineScript(descriptor, pluginLabel, index, "head");
-    case "meta": {
-      const props = { content: descriptor.content };
-      if (descriptor.name) props.name = descriptor.name;
-      if (descriptor.property) props.property = descriptor.property;
-      return {
-        // meta has no id channel in the descriptor. Don't derive a
-        // dedup id from name/property — multiple `<meta name=...>`
-        // entries with the same name are legitimate (e.g. theme-color
-        // media variants, and two plugins emitting overlapping names
-        // is a real case the runtime shouldn't silently collapse).
-        // Position-based React keys handle the stable-key requirement.
-        id: null,
-        element: createElement("meta", props)
-      };
+    case "heading": {
+      const level = Number(node.attrs?.level ?? 1);
+      const tag = `h${level}`;
+      const align = textAlignStyleProp(node.attrs);
+      return createElement(tag, { key, ...align }, ...children);
     }
-    case "link": {
-      if (!isSafeUrl(descriptor.href)) {
-        warn(
-          `${pluginLabel}: link descriptor #${index} dropped \u2014 unsafe href "${descriptor.href}".`
-        );
-        return null;
+    case "bulletList":
+      return createElement("ul", { key }, ...children);
+    case "orderedList":
+      return createElement("ol", { key }, ...children);
+    case "listItem":
+      return createElement("li", { key }, ...children);
+    case "codeBlock": {
+      const codeProps = {};
+      if (node.attrs?.language) {
+        codeProps.className = `language-${String(node.attrs.language)}`;
       }
-      const props = {
-        rel: descriptor.rel,
-        href: descriptor.href
-      };
-      if (descriptor.as) props.as = descriptor.as;
-      if (descriptor.typeAttr) props.type = descriptor.typeAttr;
-      return {
-        id: null,
-        element: createElement("link", props)
-      };
+      return createElement(
+        "pre",
+        { key },
+        createElement("code", codeProps, ...children)
+      );
     }
-    case "noscript": {
+    case "blockquote":
+      return createElement("blockquote", { key }, ...children);
+    case "hardBreak":
+      return createElement("br", { key });
+    case "horizontalRule":
+      return createElement("hr", { key });
+    case "image": {
+      const src = String(node.attrs?.src ?? "");
+      const alt = String(node.attrs?.alt ?? "");
+      const title = node.attrs?.title ? String(node.attrs.title) : void 0;
+      const display = node.attrs?.display ? String(node.attrs.display) : void 0;
       const props = {
-        dangerouslySetInnerHTML: { __html: descriptor.html }
-      };
-      if (descriptor.id) props.id = descriptor.id;
-      return {
-        id: descriptor.id ?? null,
-        element: createElement("noscript", props)
+        key,
+        src,
+        alt,
+        loading: "lazy"
       };
+      if (title) props.title = title;
+      if (display) props["data-display"] = display;
+      return createElement("img", props);
     }
-  }
-}
-function renderBodyDescriptor(descriptor, pluginLabel, index) {
-  if (descriptor.type === "iframe") {
-    if (!isSafeUrl(descriptor.src)) {
-      warn(
-        `${pluginLabel}: iframe descriptor #${index} dropped \u2014 unsafe src "${descriptor.src}".`
+    case "table":
+      return createElement(
+        "table",
+        { key, className: "tiptap-table" },
+        createElement("tbody", null, ...children)
+      );
+    case "tableRow":
+      return createElement("tr", { key }, ...children);
+    case "tableHeader":
+      return createElement("th", { key, ...tableCellProps(node.attrs) }, ...children);
+    case "tableCell":
+      return createElement("td", { key, ...tableCellProps(node.attrs) }, ...children);
+    case "taskList":
+      return createElement("ul", { key, "data-type": "taskList" }, ...children);
+    case "taskItem": {
+      const checked = node.attrs?.checked === true ? "true" : "false";
+      return createElement(
+        "li",
+        { key, "data-type": "taskItem", "data-checked": checked },
+        ...children
       );
-      return null;
     }
-    const props = {
-      src: descriptor.src
-    };
-    if (descriptor.id) props.id = descriptor.id;
-    if (descriptor.title) props.title = descriptor.title;
-    if (typeof descriptor.width === "number") props.width = descriptor.width;
-    if (typeof descriptor.height === "number") props.height = descriptor.height;
-    applyAttrs(props, descriptor.attrs, `${pluginLabel} iframe#${descriptor.id ?? index}`);
-    return {
-      id: descriptor.id ?? null,
-      element: createElement("iframe", props)
-    };
-  }
-  if (descriptor.type === "inlineScript") {
-    return renderInlineScript(descriptor, pluginLabel, index, "body-end");
+    default:
+      return createElement(Fragment, { key }, ...children);
   }
-  return renderHeadDescriptor(descriptor, pluginLabel, index);
 }
-function renderPostBodyDescriptor(descriptor, pluginLabel, index) {
-  if (descriptor.type !== "inlineScript") {
-    warn(
-      `${pluginLabel}: publicBodyForPost descriptor #${index} dropped \u2014 only inlineScript with scriptType "application/ld+json" is allowed on this surface.`
-    );
-    return null;
+function textAlignStyleProp(attrs) {
+  const v = attrs?.textAlign;
+  if (v === "left" || v === "center" || v === "right" || v === "justify") {
+    return { style: { textAlign: v } };
   }
-  return renderInlineScript(descriptor, pluginLabel, index, "body-for-post");
+  return {};
 }
-function dedupeAndKey(entries) {
-  const lastIndexById = /* @__PURE__ */ new Map();
-  for (let i = 0; i < entries.length; i++) {
-    const id = entries[i].id;
-    if (id === null) continue;
-    if (lastIndexById.has(id)) {
-      warn(`duplicate descriptor id "${id}" \u2014 keeping the last occurrence.`);
-    }
-    lastIndexById.set(id, i);
-  }
-  const kept = [];
-  for (let i = 0; i < entries.length; i++) {
-    const { id, element } = entries[i];
-    if (id !== null && lastIndexById.get(id) !== i) continue;
-    const key = id ?? `__pos-${i}`;
-    const existingProps = element.props;
-    kept.push(createElement(element.type, { ...existingProps, key }));
+function tableCellProps(attrs) {
+  const out = {};
+  const colspan = Number(attrs?.colspan ?? 1);
+  if (colspan > 1) out.colSpan = colspan;
+  const rowspan = Number(attrs?.rowspan ?? 1);
+  if (rowspan > 1) out.rowSpan = rowspan;
+  const colwidth = attrs?.colwidth;
+  if (Array.isArray(colwidth) && colwidth.length > 0) {
+    const w = Number(colwidth[0]);
+    if (Number.isFinite(w) && w > 0) out.style = { width: `${w}px` };
   }
-  return kept;
+  return out;
 }
-function makeCtx(plugin, site, snapshot) {
-  const instanceId = plugin.instanceId ?? plugin.name;
-  const stored = snapshot.get(instanceId) ?? {};
-  const resolved = resolvePluginSettings(plugin.settings, stored);
-  return {
-    site,
-    setting(key) {
-      if (!isValidPluginKey(key)) return void 0;
-      const v = resolved[key];
-      return v === void 0 ? void 0 : v;
-    }
+function renderMarkdownNode(md, opts) {
+  const tokens = marked.lexer(md, { gfm: true, breaks: false });
+  const children = [];
+  let pending = [];
+  let chunk = 0;
+  const flush = () => {
+    if (pending.length === 0) return;
+    const html = marked.parser(pending, { gfm: true, breaks: false });
+    children.push(htmlPassthroughBlock(html, `md-html-${chunk++}`));
+    pending = [];
   };
+  tokens.forEach((token, i) => {
+    const match = matchMarkdownUrlEmbed(token, opts);
+    if (match) {
+      flush();
+      children.push(createElement(Fragment, { key: `md-embed-${i}` }, match));
+    } else {
+      pending.push(token);
+    }
+  });
+  flush();
+  return createElement(Fragment, null, ...children);
 }
-function collectFor(plugins, site, snapshot, surface, renderOne) {
-  const entries = [];
-  for (const plugin of plugins) {
-    const factory = surface(plugin);
-    if (!factory) continue;
-    const ctx = makeCtx(plugin, site, snapshot);
-    let descriptors;
+function matchMarkdownUrlEmbed(token, opts) {
+  if (!opts.contentFields || opts.contentFields.markdownUrl.length === 0) {
+    return null;
+  }
+  if (token.type !== "paragraph") return null;
+  const para = token;
+  const url = extractSingleUrl(para);
+  if (!url) return null;
+  for (const entry of opts.contentFields.markdownUrl) {
+    const m = url.match(entry.renderer.pattern);
+    if (!m) continue;
+    const ctx = opts.ctxForPlugin?.(entry.plugin);
+    if (!ctx) return null;
     try {
-      descriptors = factory.call(plugin, ctx) ?? [];
+      return entry.renderer.render({ match: m, raw: url }, ctx);
     } catch (err) {
-      warn(
-        `plugin "${plugin.instanceId ?? plugin.name}" threw inside descriptor callback: ${err instanceof Error ? err.message : String(err)}`
+      console.warn(
+        `[ampless renderBody] plugin "${entry.plugin.instanceId ?? entry.plugin.name}" threw inside contentFields markdown-url renderer for pattern "${entry.renderer.pattern.source}": ${err instanceof Error ? err.message : String(err)}`
       );
-      continue;
-    }
-    const label = `plugin "${plugin.instanceId ?? plugin.name}"`;
-    for (let i = 0; i < descriptors.length; i++) {
-      const entry = renderOne(descriptors[i], label, i);
-      if (entry) entries.push(entry);
+      return null;
     }
   }
-  if (entries.length === 0) return null;
-  const keyed = dedupeAndKey(entries);
-  return createElement(Fragment, null, ...keyed);
+  return null;
 }
-var SANITIZE_OPTIONS = {
-  allowedTags: ["p", "span", "strong", "em", "a", "code", "br", "ul", "ol", "li"],
-  allowedAttributes: {
-    "*": ["class", "data-words", "data-minutes", "data-ampless-*"],
-    a: ["href", "rel", "target"]
-  },
-  allowedSchemes: ["http", "https"],
-  allowedSchemesAppliedToAttributes: ["href"],
-  allowProtocolRelative: false,
-  transformTags: {
-    a: (tagName, attribs) => {
-      const out = { ...attribs };
-      if (out["target"] === "_blank") {
-        const parts = (out["rel"] ?? "").split(/\s+/).filter(Boolean);
-        if (!parts.includes("noopener")) parts.push("noopener");
-        if (!parts.includes("noreferrer")) parts.push("noreferrer");
-        out["rel"] = parts.join(" ");
-      }
-      return { tagName, attribs: out };
-    }
+function extractSingleUrl(para) {
+  const tokens = para.tokens ?? [];
+  if (tokens.length === 0) return null;
+  const trimmed = tokens.filter((t2) => {
+    if (t2.type === "text") return (t2.raw ?? "").trim().length > 0;
+    return true;
+  });
+  if (trimmed.length !== 1) return null;
+  const t = trimmed[0];
+  if (t.type === "link") {
+    const link = t;
+    const href = (link.href ?? "").trim();
+    const raw = (link.raw ?? "").trim();
+    if (!href || raw !== href) return null;
+    return href;
   }
-};
-function validateHtmlDescriptor(descriptor, pluginLabel, index) {
-  if (descriptor === null || typeof descriptor !== "object") {
-    warn(
-      `${pluginLabel}: publicHtmlForPost descriptor #${index} dropped \u2014 must be an object.`
-    );
-    return false;
+  if (t.type === "text") {
+    const text = (t.text ?? "").trim();
+    return text || null;
   }
-  const d = descriptor;
-  if (d.type !== "html") {
-    warn(
-      `${pluginLabel}: publicHtmlForPost descriptor #${index} dropped \u2014 "type" must be "html" (got ${typeof d.type === "string" ? `"${d.type}"` : typeof d.type}).`
-    );
-    return false;
+  return null;
+}
+function renderBody(post, opts = {}) {
+  if (post.format === "html") {
+    return htmlPassthroughBlock(String(post.body));
   }
-  if (typeof d.id !== "string") {
-    warn(
-      `${pluginLabel}: publicHtmlForPost descriptor #${index} dropped \u2014 "id" must be a string.`
-    );
-    return false;
+  if (post.format === "markdown") {
+    return renderMarkdownNode(String(post.body), opts);
   }
-  if (typeof d.body !== "string") {
-    warn(
-      `${pluginLabel}: publicHtmlForPost descriptor "${d.id}" dropped \u2014 "body" must be a string.`
-    );
-    return false;
-  }
-  if (d.position !== "beforeContent" && d.position !== "afterContent") {
-    warn(
-      `${pluginLabel}: publicHtmlForPost descriptor "${d.id}" dropped \u2014 "position" must be "beforeContent" or "afterContent" (got ${typeof d.position === "string" ? `"${d.position}"` : typeof d.position}).`
-    );
-    return false;
+  if (post.format === "tiptap") {
+    if (typeof post.body === "string") {
+      return htmlPassthroughBlock(post.body);
+    }
+    return renderTiptapNode(post.body, opts, "root");
   }
-  return true;
+  return null;
 }
-function validateHtmlId(id, pluginLabel) {
-  if (id.length === 0) {
-    warn(`${pluginLabel}: publicHtmlForPost descriptor dropped \u2014 "id" must not be empty.`);
-    return false;
-  }
-  if (/[\x00-\x1f]/.test(id)) {
-    warn(
-      `${pluginLabel}: publicHtmlForPost descriptor "${id}" dropped \u2014 "id" contains control characters.`
-    );
-    return false;
-  }
-  if (id.length > 64) {
-    warn(
-      `${pluginLabel}: publicHtmlForPost descriptor "${id.slice(0, 32)}\u2026" dropped \u2014 "id" exceeds 64 characters.`
-    );
-    return false;
+function renderBodyHtmlString(post) {
+  if (post.format === "html") return String(post.body);
+  if (post.format === "markdown") return renderMarkdownString(String(post.body));
+  if (post.format === "tiptap") {
+    if (typeof post.body === "string") return post.body;
+    return renderTiptapString(post.body);
   }
-  return true;
+  return "";
 }
-function collectForPost(plugins, site, snapshot, post) {
-  const entries = [];
-  for (const plugin of plugins) {
-    const factory = plugin.publicBodyForPost;
-    if (!factory) continue;
-    const ctx = makeCtx(plugin, site, snapshot);
-    let descriptors;
-    try {
-      descriptors = factory.call(plugin, post, ctx) ?? [];
-    } catch (err) {
-      warn(
-        `plugin "${plugin.instanceId ?? plugin.name}" threw inside publicBodyForPost callback: ${err instanceof Error ? err.message : String(err)}`
-      );
-      continue;
-    }
-    const label = `plugin "${plugin.instanceId ?? plugin.name}"`;
-    for (let i = 0; i < descriptors.length; i++) {
-      const entry = renderPostBodyDescriptor(descriptors[i], label, i);
-      if (entry) entries.push(entry);
-    }
-  }
-  if (entries.length === 0) return null;
-  const keyed = dedupeAndKey(entries);
-  return createElement(Fragment, null, ...keyed);
+function tiptapToHtml(doc) {
+  if (typeof doc === "string") return doc;
+  return renderTiptapString(doc);
 }
-function collectHtmlForPost(plugins, site, snapshot, post) {
-  const before = [];
-  const after = [];
-  const seenBefore = /* @__PURE__ */ new Set();
-  const seenAfter = /* @__PURE__ */ new Set();
-  for (const plugin of plugins) {
-    const factory = plugin.publicHtmlForPost;
-    if (!factory) continue;
-    const namespace = plugin.instanceId ?? plugin.name;
-    const label = `plugin "${plugin.instanceId ?? plugin.name}"`;
-    const ctx = makeCtx(plugin, site, snapshot);
-    let descriptors;
-    try {
-      descriptors = factory.call(plugin, post, ctx) ?? [];
-    } catch (err) {
-      warn(
-        `${label}: threw inside publicHtmlForPost callback: ${err instanceof Error ? err.message : String(err)}`
-      );
-      continue;
-    }
-    for (let i = 0; i < descriptors.length; i++) {
-      const raw = descriptors[i];
-      if (!validateHtmlDescriptor(raw, label, i)) continue;
-      const descriptor = raw;
-      if (!validateHtmlId(descriptor.id, label)) continue;
-      const dedupeKey = `${namespace}:${descriptor.id}`;
-      const position = descriptor.position;
-      const seenSet = position === "beforeContent" ? seenBefore : seenAfter;
-      const bucket = position === "beforeContent" ? before : after;
-      if (seenSet.has(dedupeKey)) {
-        warn(
-          `${label}: publicHtmlForPost descriptor "${descriptor.id}" at position "${position}" is a duplicate \u2014 keeping the first occurrence.`
-        );
-        continue;
-      }
-      seenSet.add(dedupeKey);
-      const cleanHtml = sanitizeHtml(descriptor.body, SANITIZE_OPTIONS);
-      bucket.push({ key: dedupeKey, cleanHtml, namespace });
+function markdownToHtml(md) {
+  return renderMarkdownString(md);
+}
+function tiptapToMarkdown(doc) {
+  if (typeof doc === "string") return htmlToMarkdown(doc);
+  const node = doc;
+  return tiptapNodeToMarkdown(node).trim() + "\n";
+}
+function tiptapNodeToMarkdown(node) {
+  if (node.type === "text") {
+    let txt = node.text ?? "";
+    for (const mark of node.marks ?? []) {
+      if (mark.type === "bold") txt = `**${txt}**`;
+      else if (mark.type === "italic") txt = `*${txt}*`;
+      else if (mark.type === "code") txt = `\`${txt}\``;
+      else if (mark.type === "strike") txt = `~~${txt}~~`;
+      else if (mark.type === "underline") txt = `<u>${txt}</u>`;
+      else if (mark.type === "highlight") txt = `<mark>${txt}</mark>`;
+      else if (mark.type === "link") txt = `[${txt}](${String(mark.attrs?.href ?? "#")})`;
     }
+    return txt;
   }
-  function toReactNode(entries, position) {
-    if (entries.length === 0) return null;
-    const elements = entries.map(
-      ({ key, cleanHtml, namespace }) => createElement("div", {
-        key,
-        "data-ampless-plugin": namespace,
-        "data-ampless-position": position,
-        dangerouslySetInnerHTML: { __html: cleanHtml }
-      })
-    );
-    return createElement(Fragment, null, ...elements);
-  }
-  return {
-    beforeContent: toReactNode(before, "beforeContent"),
-    afterContent: toReactNode(after, "afterContent")
-  };
-}
-function createPluginHead(cmsConfig, pluginSettings) {
-  const plugins = (cmsConfig.plugins ?? []).filter(isPlugin2);
-  const validPlugins = [];
-  const seenNamespaces = /* @__PURE__ */ new Set();
-  for (const plugin of plugins) {
-    const ns = plugin.instanceId ?? plugin.name;
-    const label = plugin.instanceId ? `${plugin.name}#${plugin.instanceId}` : plugin.name;
-    if (!isValidPluginKey(ns)) {
-      warn(
-        `${label}: plugin namespace "${ns}" violates ${`/^[a-zA-Z0-9_-]+$/`}. Use a simple identifier (letters / digits / "-" / "_"). Skipping plugin.`
-      );
-      continue;
+  const children = (node.content ?? []).map(tiptapNodeToMarkdown).join("");
+  switch (node.type) {
+    case "doc":
+      return children;
+    case "paragraph":
+      return children + "\n\n";
+    case "heading": {
+      const level = Math.max(1, Math.min(6, Number(node.attrs?.level ?? 1)));
+      return "#".repeat(level) + " " + children + "\n\n";
     }
-    if (seenNamespaces.has(ns)) {
-      warn(
-        `duplicate plugin namespace "${ns}" detected in cms.config.plugins. Set distinct \`instanceId\` on each instance to disambiguate.`
-      );
+    case "bulletList":
+      return children + "\n";
+    case "orderedList":
+      return children + "\n";
+    case "listItem": {
+      const trimmed = children.replace(/\n+$/, "");
+      return "- " + trimmed + "\n";
     }
-    seenNamespaces.add(ns);
-    if (plugin.settings?.public) {
-      for (const field of plugin.settings.public) {
-        if (!isValidPluginKey(field.key)) {
-          warn(
-            `${label}: settings.public field key "${field.key}" violates ${`/^[a-zA-Z0-9_-]+$/`}. The field will not be readable through ctx.setting(). Rename the field key.`
-          );
-        }
-      }
+    case "codeBlock": {
+      const lang = node.attrs?.language ? String(node.attrs.language) : "";
+      return "```" + lang + "\n" + children + "\n```\n\n";
     }
-    validPlugins.push(plugin);
-    if (plugin.packageName) {
-      crossCheckStaticManifest(plugin, label);
+    case "blockquote":
+      return children.replace(/\n+$/, "").split("\n").map((l) => "> " + l).join("\n") + "\n\n";
+    case "hardBreak":
+      return "  \n";
+    case "horizontalRule":
+      return "\n---\n\n";
+    case "image": {
+      const src = String(node.attrs?.src ?? "");
+      const alt = String(node.attrs?.alt ?? "");
+      return `![${alt}](${src})`;
     }
-    const caps = plugin.capabilities;
-    if (caps) {
-      if (caps.includes("publicHead") && !plugin.publicHead) {
-        warn(
-          `${label}: declares capability "publicHead" but no \`publicHead\` implementation. Drop the capability or add the function.`
-        );
-      }
-      if (caps.includes("publicBody") && !plugin.publicBodyEnd) {
-        warn(
-          `${label}: declares capability "publicBody" but no \`publicBodyEnd\` implementation. Drop the capability or add the function.`
-        );
-      }
-      if (plugin.publicHead && !caps.includes("publicHead")) {
-        warn(
-          `${label}: implements \`publicHead\` but "publicHead" is not in declared capabilities. Add it so admin UI / capability gates see the surface.`
-        );
-      }
-      if (plugin.publicBodyEnd && !caps.includes("publicBody")) {
-        warn(
-          `${label}: implements \`publicBodyEnd\` but "publicBody" is not in declared capabilities. Add it so admin UI / capability gates see the surface.`
-        );
-      }
-      if (caps.includes("schema") && !plugin.publicBodyForPost) {
-        warn(
-          `${label}: declares capability "schema" but no \`publicBodyForPost\` implementation. Drop the capability or add the function.`
-        );
-      }
-      if (plugin.publicBodyForPost && !caps.includes("schema")) {
-        warn(
-          `${label}: implements \`publicBodyForPost\` but "schema" is not in declared capabilities. Add it so admin UI / capability gates see the surface.`
-        );
-      }
-      if (caps.includes("publicHtmlForPost") && !plugin.publicHtmlForPost) {
-        warn(
-          `${label}: declares capability "publicHtmlForPost" but no \`publicHtmlForPost\` implementation. Drop the capability or add the function.`
-        );
-      }
-      if (plugin.publicHtmlForPost && !caps.includes("publicHtmlForPost")) {
-        warn(
-          `${label}: implements \`publicHtmlForPost\` but "publicHtmlForPost" is not in declared capabilities. Add it so admin UI / capability gates see the surface.`
-        );
-      }
+    case "table":
+      return tiptapTableToMarkdown(node);
+    case "taskList":
+      return children + "\n";
+    case "taskItem": {
+      const checked = node.attrs?.checked === true ? "x" : " ";
+      const inner = children.replace(/\n+$/, "");
+      const [first, ...rest] = inner.split("\n");
+      const cont = rest.map((l) => l ? "  " + l : l).join("\n");
+      return `- [${checked}] ${first ?? ""}${cont ? "\n" + cont : ""}
+`;
     }
+    default:
+      return children;
   }
-  return {
-    async renderHead() {
-      const snapshot = await pluginSettings.loadAll();
-      return collectFor(
-        validPlugins,
-        cmsConfig.site,
-        snapshot,
-        (p) => p.publicHead,
-        renderHeadDescriptor
-      );
-    },
-    async renderBodyEnd() {
-      const snapshot = await pluginSettings.loadAll();
-      return collectFor(
-        validPlugins,
-        cmsConfig.site,
-        snapshot,
-        (p) => p.publicBodyEnd,
-        renderBodyDescriptor
+}
+function tiptapTableToMarkdown(node) {
+  const rows = node.content ?? [];
+  if (rows.length === 0) return "";
+  const renderedRows = [];
+  let headerIdx = -1;
+  for (let i = 0; i < rows.length; i++) {
+    const row = rows[i];
+    const cells = row.content ?? [];
+    const cellTexts = cells.map((c) => {
+      const inner = (c.content ?? []).map(tiptapNodeToMarkdown).join("");
+      return inner.replace(/\n+$/, "").replace(/\n/g, "<br>").replace(/\|/g, "\\|");
+    });
+    renderedRows.push(cellTexts);
+    if (headerIdx === -1 && cells.some((c) => c.type === "tableHeader")) headerIdx = i;
+  }
+  if (headerIdx === -1) headerIdx = 0;
+  const header = renderedRows[headerIdx] ?? [];
+  const body = renderedRows.filter((_, i) => i !== headerIdx);
+  const cols = header.length;
+  const headerLine = "| " + header.join(" | ") + " |";
+  const sepLine = "| " + Array.from({ length: cols }, () => "---").join(" | ") + " |";
+  const bodyLines = body.map((r) => {
+    const cells = Array.from({ length: cols }, (_, i) => r[i] ?? "");
+    return "| " + cells.join(" | ") + " |";
+  });
+  return "\n" + [headerLine, sepLine, ...bodyLines].join("\n") + "\n\n";
+}
+function htmlToMarkdown(html) {
+  let md = html;
+  md = md.replace(/<table[^>]*>([\s\S]*?)<\/table>/gi, (_, inner) => {
+    return "\n" + convertHtmlTable(String(inner)) + "\n";
+  });
+  md = md.replace(/<h([1-6])[^>]*>([\s\S]*?)<\/h\1>/gi, (_, level, text) => {
+    return "\n" + "#".repeat(Number(level)) + " " + String(text).trim() + "\n\n";
+  });
+  md = md.replace(
+    /<pre[^>]*><code[^>]*(?:\sclass="language-([^"]+)")?[^>]*>([\s\S]*?)<\/code><\/pre>/gi,
+    (_, lang, code) => {
+      return "\n```" + (lang ?? "") + "\n" + String(code) + "\n```\n\n";
+    }
+  );
+  md = md.replace(/<blockquote[^>]*>([\s\S]*?)<\/blockquote>/gi, (_, content) => {
+    return "\n" + String(content).trim().split("\n").map((l) => "> " + l).join("\n") + "\n\n";
+  });
+  md = md.replace(/<ul[^>]*data-type="taskList"[^>]*>([\s\S]*?)<\/ul>/gi, (_, items) => {
+    return "\n" + convertHtmlTaskList(String(items)) + "\n";
+  });
+  md = md.replace(/<ul[^>]*>([\s\S]*?)<\/ul>/gi, (_, items) => {
+    return "\n" + String(items).replace(/<li[^>]*>([\s\S]*?)<\/li>/gi, "- $1\n") + "\n";
+  });
+  md = md.replace(/<ol[^>]*>([\s\S]*?)<\/ol>/gi, (_, items) => {
+    let i = 1;
+    return "\n" + String(items).replace(/<li[^>]*>([\s\S]*?)<\/li>/gi, () => `${i++}. $1
+`) + "\n";
+  });
+  md = md.replace(/<hr\s*\/?>/gi, "\n---\n\n");
+  md = md.replace(/<br\s*\/?>/gi, "  \n");
+  md = md.replace(/<p[^>]*>([\s\S]*?)<\/p>/gi, "$1\n\n");
+  md = md.replace(/<img[^>]*?src="([^"]*)"[^>]*?alt="([^"]*)"[^>]*?\/?>/gi, "![$2]($1)");
+  md = md.replace(/<img[^>]*?alt="([^"]*)"[^>]*?src="([^"]*)"[^>]*?\/?>/gi, "![$1]($2)");
+  md = md.replace(/<img[^>]*?src="([^"]*)"[^>]*?\/?>/gi, "![]($1)");
+  md = md.replace(/<a[^>]*?href="([^"]*)"[^>]*>([\s\S]*?)<\/a>/gi, "[$2]($1)");
+  md = md.replace(/<(strong|b)>([\s\S]*?)<\/\1>/gi, "**$2**");
+  md = md.replace(/<(em|i)>([\s\S]*?)<\/\1>/gi, "*$2*");
+  md = md.replace(/<s>([\s\S]*?)<\/s>/gi, "~~$1~~");
+  md = md.replace(/<code>([\s\S]*?)<\/code>/gi, "`$1`");
+  const PH_U_OPEN = "AMP_U_OPEN";
+  const PH_U_CLOSE = "AMP_U_CLOSE";
+  const PH_MARK_OPEN = "AMP_MARK_OPEN";
+  const PH_MARK_CLOSE = "AMP_MARK_CLOSE";
+  md = md.replace(/<u>([\s\S]*?)<\/u>/gi, `${PH_U_OPEN}$1${PH_U_CLOSE}`);
+  md = md.replace(/<mark>([\s\S]*?)<\/mark>/gi, `${PH_MARK_OPEN}$1${PH_MARK_CLOSE}`);
+  md = md.replace(/<\/?[^>]+>/g, "");
+  md = md.split(PH_U_OPEN).join("<u>").split(PH_U_CLOSE).join("</u>").split(PH_MARK_OPEN).join("<mark>").split(PH_MARK_CLOSE).join("</mark>");
+  md = md.replace(/&amp;/g, "&").replace(/&lt;/g, "<").replace(/&gt;/g, ">").replace(/&quot;/g, '"').replace(/&#39;/g, "'").replace(/&nbsp;/g, " ");
+  md = md.replace(/\n{3,}/g, "\n\n");
+  return md.trim() + "\n";
+}
+function convertHtmlTable(inner) {
+  const stripped = inner.replace(/<\/?(thead|tbody)[^>]*>/gi, "");
+  const rowRe = /<tr[^>]*>([\s\S]*?)<\/tr>/gi;
+  const rows = [];
+  let m;
+  while ((m = rowRe.exec(stripped)) !== null) {
+    const rowHtml = m[1] ?? "";
+    const cellRe = /<(th|td)[^>]*>([\s\S]*?)<\/\1>/gi;
+    const cells = [];
+    let isHeader = false;
+    let cm;
+    while ((cm = cellRe.exec(rowHtml)) !== null) {
+      if ((cm[1] ?? "").toLowerCase() === "th") isHeader = true;
+      cells.push(normalizeTableCell(cm[2] ?? ""));
+    }
+    if (cells.length > 0) rows.push({ isHeader, cells });
+  }
+  if (rows.length === 0) return "";
+  let headerIdx = rows.findIndex((r) => r.isHeader);
+  if (headerIdx === -1) headerIdx = 0;
+  const header = rows[headerIdx].cells;
+  const body = rows.filter((_, i) => i !== headerIdx).map((r) => r.cells);
+  const cols = header.length;
+  const headerLine = "| " + header.join(" | ") + " |";
+  const sepLine = "| " + Array.from({ length: cols }, () => "---").join(" | ") + " |";
+  const bodyLines = body.map((cells) => {
+    const padded = Array.from({ length: cols }, (_, i) => cells[i] ?? "");
+    return "| " + padded.join(" | ") + " |";
+  });
+  return [headerLine, sepLine, ...bodyLines].join("\n") + "\n";
+}
+function normalizeTableCell(html) {
+  return html.replace(/<br\s*\/?>/gi, " ").replace(/<\/?[^>]+>/g, "").replace(/\|/g, "\\|").replace(/\s+/g, " ").trim();
+}
+function convertHtmlTaskList(items) {
+  const liRe = /<li[^>]*data-checked="(true|false)"[^>]*>([\s\S]*?)<\/li>/gi;
+  const out = [];
+  let m;
+  while ((m = liRe.exec(items)) !== null) {
+    const checked = m[1] === "true" ? "x" : " ";
+    const inner = String(m[2] ?? "").replace(/<\/?p[^>]*>/gi, "").trim();
+    out.push(`- [${checked}] ${inner}`);
+  }
+  return out.join("\n");
+}
+
+// src/plugin-package-manifest.ts
+var TRUST_LEVELS = ["untrusted", "trusted", "privileged"];
+function getNodeApi() {
+  if (typeof window !== "undefined") return null;
+  const proc = typeof process !== "undefined" ? process : void 0;
+  if (typeof proc?.getBuiltinModule !== "function") return null;
+  if (typeof import.meta.resolve !== "function") return null;
+  try {
+    const fs = proc.getBuiltinModule("node:fs");
+    const url = proc.getBuiltinModule("node:url");
+    if (!fs || !url) return null;
+    const resolve = import.meta.resolve.bind(import.meta);
+    return {
+      readFile: (u) => fs.readFileSync(url.fileURLToPath(u), "utf8"),
+      resolve
+    };
+  } catch {
+    return null;
+  }
+}
+function isValidManifest(value) {
+  if (typeof value !== "object" || value === null) return false;
+  const v = value;
+  if (typeof v.apiVersion !== "number") return false;
+  if (typeof v.name !== "string") return false;
+  if (typeof v.trustLevel !== "string") return false;
+  if (!TRUST_LEVELS.includes(v.trustLevel)) return false;
+  if (!Array.isArray(v.capabilities)) return false;
+  for (const c of v.capabilities) {
+    if (typeof c !== "string") return false;
+  }
+  return true;
+}
+function loadPackageManifest(packageName) {
+  const node = getNodeApi();
+  if (!node) return null;
+  let resolvedUrl;
+  try {
+    resolvedUrl = node.resolve(`${packageName}/package.json`);
+  } catch {
+    return null;
+  }
+  let raw;
+  try {
+    raw = node.readFile(resolvedUrl);
+  } catch {
+    return null;
+  }
+  let pkg;
+  try {
+    pkg = JSON.parse(raw);
+  } catch {
+    return null;
+  }
+  if (typeof pkg !== "object" || pkg === null || !("amplessPlugin" in pkg)) {
+    return null;
+  }
+  const manifest = pkg.amplessPlugin;
+  if (!isValidManifest(manifest)) return null;
+  return manifest;
+}
+var SUPPORTED_API_VERSION = 1;
+
+// src/plugin-head.ts
+function isPlugin2(p) {
+  return typeof p === "object" && p !== null && "apiVersion" in p;
+}
+var ALLOWED_ATTRS = /* @__PURE__ */ new Set([
+  "crossorigin",
+  "referrerpolicy",
+  "integrity",
+  "fetchpriority",
+  // `nonce` is intentionally NOT in the allowlist for Phase 1. CSP
+  // nonce propagation is scoped out of Phase 1 (see spec §7); attrs
+  // shouldn't let plugins smuggle nonces past the design decision.
+  // The CSP nonce RFP will reintroduce it through `cspNonce` on
+  // PluginPublicRenderContext + `inlineScript.nonce: 'auto'`, not via
+  // the `attrs` bag.
+  "loading",
+  // iframe lazy-loading
+  "sandbox",
+  // iframe sandbox attribute
+  "allow",
+  // iframe permissions policy
+  "allowfullscreen"
+  // iframe fullscreen
+]);
+function isAllowedAttr(name) {
+  if (name.startsWith("data-")) return true;
+  return ALLOWED_ATTRS.has(name.toLowerCase());
+}
+function isSafeUrl(value) {
+  const trimmed = value.trim();
+  if (trimmed.length === 0) return false;
+  const schemeMatch = trimmed.match(/^([a-zA-Z][a-zA-Z0-9+.-]*):/);
+  if (!schemeMatch) return true;
+  const scheme = schemeMatch[1].toLowerCase();
+  return scheme === "http" || scheme === "https";
+}
+function isDev() {
+  const env = typeof process !== "undefined" && process.env ? process.env.NODE_ENV : void 0;
+  return env !== "production";
+}
+function warn(message) {
+  if (!isDev()) return;
+  console.warn(`[ampless plugin-head] ${message}`);
+}
+function crossCheckStaticManifest(plugin, label) {
+  const packageName = plugin.packageName;
+  const manifest = loadPackageManifest(packageName);
+  if (!manifest) return;
+  if (typeof manifest.apiVersion !== "number") {
+    throw new Error(
+      `${label}: package.json#amplessPlugin.apiVersion is not a number (got ${JSON.stringify(manifest.apiVersion)}). Update the plugin's package.json or remove the amplessPlugin field.`
+    );
+  }
+  if (manifest.apiVersion > SUPPORTED_API_VERSION) {
+    throw new Error(
+      `${label}: package.json#amplessPlugin.apiVersion ${manifest.apiVersion} is newer than this runtime supports (max ${SUPPORTED_API_VERSION}). Upgrade @ampless/runtime, or pin an older version of the plugin.`
+    );
+  }
+  if (manifest.apiVersion !== plugin.apiVersion) {
+    throw new Error(
+      `${label}: apiVersion mismatch \u2014 package.json declares ${manifest.apiVersion}, factory declares ${plugin.apiVersion}. The two must agree.`
+    );
+  }
+  if (manifest.name !== plugin.name) {
+    warn(
+      `${label}: name mismatch \u2014 package.json#amplessPlugin.name is "${manifest.name}", factory returns name="${plugin.name}". Align them so admin UI / capability gates can identify the plugin consistently.`
+    );
+  }
+  if (manifest.trustLevel !== plugin.trust_level) {
+    warn(
+      `${label}: trustLevel mismatch \u2014 package.json declares "${manifest.trustLevel}", factory declares trust_level="${plugin.trust_level}". The processor IAM policies are wired off trust_level; drift here usually means the deployment lambda runs in the wrong context.`
+    );
+  }
+  const factoryCaps = Array.isArray(plugin.capabilities) ? plugin.capabilities : [];
+  const manifestCaps = manifest.capabilities;
+  if (!setsEqual(factoryCaps, manifestCaps)) {
+    warn(
+      `${label}: capabilities mismatch \u2014 package.json declares [${manifestCaps.join(", ")}], factory declares [${factoryCaps.join(", ")}]. The static manifest is what npm registry / admin UI surfaces show before the plugin loads, so it should match what the factory actually returns.`
+    );
+  }
+}
+function setsEqual(a, b) {
+  const sa = new Set(a);
+  const sb = new Set(b);
+  if (sa.size !== sb.size) return false;
+  for (const c of sb) if (!sa.has(c)) return false;
+  return true;
+}
+function applyAttrs(target, attrs, ownerLabel) {
+  if (!attrs) return;
+  for (const [k, v] of Object.entries(attrs)) {
+    if (!isAllowedAttr(k)) {
+      warn(
+        `${ownerLabel}: attr "${k}" not in allowlist (data-* / crossorigin / referrerpolicy / integrity / fetchpriority / loading / sandbox / allow / allowfullscreen). skipping.`
+      );
+      continue;
+    }
+    target[k] = v;
+  }
+}
+function escapeJsonLdInlineBody(value) {
+  return value.replace(/</g, "\\u003c").replace(/>/g, "\\u003e").replace(/&/g, "\\u0026").replace(/\u2028/g, "\\u2028").replace(/\u2029/g, "\\u2029");
+}
+function inlineScriptTypeAllowed(surface, scriptType) {
+  if (scriptType === "application/ld+json") return true;
+  if (scriptType === void 0) {
+    return surface === "head" || surface === "body-end";
+  }
+  return false;
+}
+function renderInlineScript(descriptor, pluginLabel, index, surface) {
+  if (!descriptor.id) {
+    warn(
+      `${pluginLabel}: inlineScript descriptor #${index} dropped \u2014 missing required "id".`
+    );
+    return null;
+  }
+  if (!inlineScriptTypeAllowed(surface, descriptor.scriptType)) {
+    const got = descriptor.scriptType === void 0 ? "undefined" : `"${descriptor.scriptType}"`;
+    const allowed = surface === "body-for-post" ? `"application/ld+json" (required on publicBodyForPost \u2014 the per-post surface is scoped to JSON-LD)` : `undefined or "application/ld+json"`;
+    warn(
+      `${pluginLabel}: inlineScript "${descriptor.id}" dropped \u2014 scriptType ${got} not allowed on ${surface}. Allowed: ${allowed}.`
+    );
+    return null;
+  }
+  const body = descriptor.scriptType === "application/ld+json" ? escapeJsonLdInlineBody(descriptor.body) : descriptor.body;
+  const props = {
+    id: descriptor.id,
+    dangerouslySetInnerHTML: { __html: body }
+  };
+  if (descriptor.scriptType) props.type = descriptor.scriptType;
+  return {
+    id: descriptor.id,
+    element: createElement2("script", props)
+  };
+}
+function renderHeadDescriptor(descriptor, pluginLabel, index) {
+  switch (descriptor.type) {
+    case "script": {
+      if (!isSafeUrl(descriptor.src)) {
+        warn(
+          `${pluginLabel}: script descriptor #${index} dropped \u2014 unsafe src "${descriptor.src}".`
+        );
+        return null;
+      }
+      const props = {
+        src: descriptor.src
+      };
+      if (descriptor.id) props.id = descriptor.id;
+      const hasAsync = typeof descriptor.async === "boolean";
+      const hasDefer = typeof descriptor.defer === "boolean";
+      if (hasAsync) props.async = descriptor.async;
+      if (hasDefer) props.defer = descriptor.defer;
+      if (!hasAsync && !hasDefer) {
+        if (descriptor.strategy === "lazyOnload") {
+          props.defer = true;
+        } else {
+          props.async = true;
+        }
+      }
+      applyAttrs(props, descriptor.attrs, `${pluginLabel} script#${descriptor.id ?? index}`);
+      return {
+        id: descriptor.id ?? null,
+        element: createElement2("script", props)
+      };
+    }
+    case "inlineScript":
+      return renderInlineScript(descriptor, pluginLabel, index, "head");
+    case "meta": {
+      const props = { content: descriptor.content };
+      if (descriptor.name) props.name = descriptor.name;
+      if (descriptor.property) props.property = descriptor.property;
+      return {
+        // meta has no id channel in the descriptor. Don't derive a
+        // dedup id from name/property — multiple `<meta name=...>`
+        // entries with the same name are legitimate (e.g. theme-color
+        // media variants, and two plugins emitting overlapping names
+        // is a real case the runtime shouldn't silently collapse).
+        // Position-based React keys handle the stable-key requirement.
+        id: null,
+        element: createElement2("meta", props)
+      };
+    }
+    case "link": {
+      if (!isSafeUrl(descriptor.href)) {
+        warn(
+          `${pluginLabel}: link descriptor #${index} dropped \u2014 unsafe href "${descriptor.href}".`
+        );
+        return null;
+      }
+      const props = {
+        rel: descriptor.rel,
+        href: descriptor.href
+      };
+      if (descriptor.as) props.as = descriptor.as;
+      if (descriptor.typeAttr) props.type = descriptor.typeAttr;
+      return {
+        id: null,
+        element: createElement2("link", props)
+      };
+    }
+    case "noscript": {
+      const props = {
+        dangerouslySetInnerHTML: { __html: descriptor.html }
+      };
+      if (descriptor.id) props.id = descriptor.id;
+      return {
+        id: descriptor.id ?? null,
+        element: createElement2("noscript", props)
+      };
+    }
+  }
+}
+function renderBodyDescriptor(descriptor, pluginLabel, index) {
+  if (descriptor.type === "iframe") {
+    if (!isSafeUrl(descriptor.src)) {
+      warn(
+        `${pluginLabel}: iframe descriptor #${index} dropped \u2014 unsafe src "${descriptor.src}".`
+      );
+      return null;
+    }
+    const props = {
+      src: descriptor.src
+    };
+    if (descriptor.id) props.id = descriptor.id;
+    if (descriptor.title) props.title = descriptor.title;
+    if (typeof descriptor.width === "number") props.width = descriptor.width;
+    if (typeof descriptor.height === "number") props.height = descriptor.height;
+    applyAttrs(props, descriptor.attrs, `${pluginLabel} iframe#${descriptor.id ?? index}`);
+    return {
+      id: descriptor.id ?? null,
+      element: createElement2("iframe", props)
+    };
+  }
+  if (descriptor.type === "inlineScript") {
+    return renderInlineScript(descriptor, pluginLabel, index, "body-end");
+  }
+  return renderHeadDescriptor(descriptor, pluginLabel, index);
+}
+function renderPostBodyDescriptor(descriptor, pluginLabel, index) {
+  if (descriptor.type !== "inlineScript") {
+    warn(
+      `${pluginLabel}: publicBodyForPost descriptor #${index} dropped \u2014 only inlineScript with scriptType "application/ld+json" is allowed on this surface.`
+    );
+    return null;
+  }
+  return renderInlineScript(descriptor, pluginLabel, index, "body-for-post");
+}
+function dedupeAndKey(entries) {
+  const lastIndexById = /* @__PURE__ */ new Map();
+  for (let i = 0; i < entries.length; i++) {
+    const id = entries[i].id;
+    if (id === null) continue;
+    if (lastIndexById.has(id)) {
+      warn(`duplicate descriptor id "${id}" \u2014 keeping the last occurrence.`);
+    }
+    lastIndexById.set(id, i);
+  }
+  const kept = [];
+  for (let i = 0; i < entries.length; i++) {
+    const { id, element } = entries[i];
+    if (id !== null && lastIndexById.get(id) !== i) continue;
+    const key = id ?? `__pos-${i}`;
+    const existingProps = element.props;
+    kept.push(createElement2(element.type, { ...existingProps, key }));
+  }
+  return kept;
+}
+function makeCtx(plugin, site, snapshot) {
+  const instanceId = plugin.instanceId ?? plugin.name;
+  const stored = snapshot.get(instanceId) ?? {};
+  const resolved = resolvePluginSettings(plugin.settings, stored);
+  return {
+    site,
+    setting(key) {
+      if (!isValidPluginKey(key)) return void 0;
+      const v = resolved[key];
+      return v === void 0 ? void 0 : v;
+    }
+  };
+}
+function collectFor(plugins, site, snapshot, surface, renderOne) {
+  const entries = [];
+  for (const plugin of plugins) {
+    const factory = surface(plugin);
+    if (!factory) continue;
+    const ctx = makeCtx(plugin, site, snapshot);
+    let descriptors;
+    try {
+      descriptors = factory.call(plugin, ctx) ?? [];
+    } catch (err) {
+      warn(
+        `plugin "${plugin.instanceId ?? plugin.name}" threw inside descriptor callback: ${err instanceof Error ? err.message : String(err)}`
+      );
+      continue;
+    }
+    const label = `plugin "${plugin.instanceId ?? plugin.name}"`;
+    for (let i = 0; i < descriptors.length; i++) {
+      const entry = renderOne(descriptors[i], label, i);
+      if (entry) entries.push(entry);
+    }
+  }
+  if (entries.length === 0) return null;
+  const keyed = dedupeAndKey(entries);
+  return createElement2(Fragment2, null, ...keyed);
+}
+var SANITIZE_OPTIONS = {
+  allowedTags: ["p", "span", "strong", "em", "a", "code", "br", "ul", "ol", "li"],
+  allowedAttributes: {
+    "*": ["class", "data-words", "data-minutes", "data-ampless-*"],
+    a: ["href", "rel", "target"]
+  },
+  allowedSchemes: ["http", "https"],
+  allowedSchemesAppliedToAttributes: ["href"],
+  allowProtocolRelative: false,
+  transformTags: {
+    a: (tagName, attribs) => {
+      const out = { ...attribs };
+      if (out["target"] === "_blank") {
+        const parts = (out["rel"] ?? "").split(/\s+/).filter(Boolean);
+        if (!parts.includes("noopener")) parts.push("noopener");
+        if (!parts.includes("noreferrer")) parts.push("noreferrer");
+        out["rel"] = parts.join(" ");
+      }
+      return { tagName, attribs: out };
+    }
+  }
+};
+function validateHtmlDescriptor(descriptor, pluginLabel, index) {
+  if (descriptor === null || typeof descriptor !== "object") {
+    warn(
+      `${pluginLabel}: publicHtmlForPost descriptor #${index} dropped \u2014 must be an object.`
+    );
+    return false;
+  }
+  const d = descriptor;
+  if (d.type !== "html") {
+    warn(
+      `${pluginLabel}: publicHtmlForPost descriptor #${index} dropped \u2014 "type" must be "html" (got ${typeof d.type === "string" ? `"${d.type}"` : typeof d.type}).`
+    );
+    return false;
+  }
+  if (typeof d.id !== "string") {
+    warn(
+      `${pluginLabel}: publicHtmlForPost descriptor #${index} dropped \u2014 "id" must be a string.`
+    );
+    return false;
+  }
+  if (typeof d.body !== "string") {
+    warn(
+      `${pluginLabel}: publicHtmlForPost descriptor "${d.id}" dropped \u2014 "body" must be a string.`
+    );
+    return false;
+  }
+  if (d.position !== "beforeContent" && d.position !== "afterContent") {
+    warn(
+      `${pluginLabel}: publicHtmlForPost descriptor "${d.id}" dropped \u2014 "position" must be "beforeContent" or "afterContent" (got ${typeof d.position === "string" ? `"${d.position}"` : typeof d.position}).`
+    );
+    return false;
+  }
+  return true;
+}
+function validateHtmlId(id, pluginLabel) {
+  if (id.length === 0) {
+    warn(`${pluginLabel}: publicHtmlForPost descriptor dropped \u2014 "id" must not be empty.`);
+    return false;
+  }
+  if (/[\x00-\x1f]/.test(id)) {
+    warn(
+      `${pluginLabel}: publicHtmlForPost descriptor "${id}" dropped \u2014 "id" contains control characters.`
+    );
+    return false;
+  }
+  if (id.length > 64) {
+    warn(
+      `${pluginLabel}: publicHtmlForPost descriptor "${id.slice(0, 32)}\u2026" dropped \u2014 "id" exceeds 64 characters.`
+    );
+    return false;
+  }
+  return true;
+}
+function collectForPost(plugins, site, snapshot, post) {
+  const entries = [];
+  for (const plugin of plugins) {
+    const factory = plugin.publicBodyForPost;
+    if (!factory) continue;
+    const ctx = makeCtx(plugin, site, snapshot);
+    let descriptors;
+    try {
+      descriptors = factory.call(plugin, post, ctx) ?? [];
+    } catch (err) {
+      warn(
+        `plugin "${plugin.instanceId ?? plugin.name}" threw inside publicBodyForPost callback: ${err instanceof Error ? err.message : String(err)}`
       );
-    },
-    async renderBodyForPost(post) {
-      const snapshot = await pluginSettings.loadAll();
-      return collectForPost(validPlugins, cmsConfig.site, snapshot, post);
-    },
-    async renderHtmlForPost(post) {
-      const snapshot = await pluginSettings.loadAll();
-      return collectHtmlForPost(validPlugins, cmsConfig.site, snapshot, post);
+      continue;
     }
-  };
-}
-
-// src/plugin-settings.ts
-import { unflattenSettings as unflattenSettings2 } from "ampless";
-function createPluginSettings(storage) {
-  return {
-    async loadAll() {
-      const out = /* @__PURE__ */ new Map();
-      if (!storage.isStorageConfigured()) return out;
-      let url;
-      try {
-        url = storage.publicAssetUrl("public/site-settings.json");
-      } catch {
-        return out;
-      }
-      let flat;
-      try {
-        const res = await fetch(url, {
-          // Same revalidate + tag as site-settings.ts so a single
-          // request to the public route hits the JSON once and both
-          // helpers share the cached body.
-          next: { revalidate: 60, tags: ["site-settings"] }
-        });
-        if (!res.ok) return out;
-        flat = await res.json();
-      } catch {
-        return out;
-      }
-      const nested = unflattenSettings2(flat);
-      const pluginsBlock = nested.plugins;
-      if (!pluginsBlock || typeof pluginsBlock !== "object") return out;
-      for (const [instanceId, block] of Object.entries(pluginsBlock)) {
-        if (!block || typeof block !== "object" || Array.isArray(block)) continue;
-        out.set(instanceId, { ...block });
-      }
-      return out;
+    const label = `plugin "${plugin.instanceId ?? plugin.name}"`;
+    for (let i = 0; i < descriptors.length; i++) {
+      const entry = renderPostBodyDescriptor(descriptors[i], label, i);
+      if (entry) entries.push(entry);
     }
-  };
+  }
+  if (entries.length === 0) return null;
+  const keyed = dedupeAndKey(entries);
+  return createElement2(Fragment2, null, ...keyed);
 }
-
-// src/theme-active.ts
-import { headers } from "next/headers";
-function createThemeActive(registry, storage) {
-  function settingsUrl() {
-    if (!storage.isStorageConfigured()) return null;
+function collectHtmlForPost(plugins, site, snapshot, post) {
+  const before = [];
+  const after = [];
+  const seenBefore = /* @__PURE__ */ new Set();
+  const seenAfter = /* @__PURE__ */ new Set();
+  for (const plugin of plugins) {
+    const factory = plugin.publicHtmlForPost;
+    if (!factory) continue;
+    const namespace = plugin.instanceId ?? plugin.name;
+    const label = `plugin "${plugin.instanceId ?? plugin.name}"`;
+    const ctx = makeCtx(plugin, site, snapshot);
+    let descriptors;
     try {
-      return storage.publicAssetUrl("public/site-settings.json");
-    } catch {
-      return null;
+      descriptors = factory.call(plugin, post, ctx) ?? [];
+    } catch (err) {
+      warn(
+        `${label}: threw inside publicHtmlForPost callback: ${err instanceof Error ? err.message : String(err)}`
+      );
+      continue;
     }
-  }
-  async function fetchActiveFromCache() {
-    const url = settingsUrl();
-    if (!url) return null;
-    const res = await fetch(url, {
-      next: { revalidate: 60, tags: ["site-settings"] }
-    });
-    if (!res.ok) return null;
-    const flat = await res.json();
-    const v = flat["theme.active"];
-    return typeof v === "string" ? v : null;
-  }
-  async function fetchActiveFresh() {
-    const url = settingsUrl();
-    if (!url) return null;
-    const res = await fetch(url, { cache: "no-store" });
-    if (!res.ok) return null;
-    const flat = await res.json();
-    const v = flat["theme.active"];
-    return typeof v === "string" ? v : null;
-  }
-  return {
-    readStoredActiveThemeFresh: () => fetchActiveFresh(),
-    async resolveActiveTheme() {
-      let previewOverride = null;
-      try {
-        const h = await headers();
-        previewOverride = h.get("x-preview-theme");
-      } catch {
-      }
-      if (previewOverride && previewOverride in registry.themes) {
-        const mod2 = registry.themes[previewOverride];
-        if (mod2) return { name: previewOverride, module: mod2 };
-      }
-      const stored = await fetchActiveFromCache().catch(() => null);
-      const name = stored && stored in registry.themes ? stored : registry.defaultTheme;
-      const mod = registry.themes[name] ?? registry.themes[registry.defaultTheme];
-      if (!mod) {
-        throw new Error(
-          `themes registry is empty \u2014 at least one theme must be registered before resolveActiveTheme is called`
+    for (let i = 0; i < descriptors.length; i++) {
+      const raw = descriptors[i];
+      if (!validateHtmlDescriptor(raw, label, i)) continue;
+      const descriptor = raw;
+      if (!validateHtmlId(descriptor.id, label)) continue;
+      const dedupeKey = `${namespace}:${descriptor.id}`;
+      const position = descriptor.position;
+      const seenSet = position === "beforeContent" ? seenBefore : seenAfter;
+      const bucket = position === "beforeContent" ? before : after;
+      if (seenSet.has(dedupeKey)) {
+        warn(
+          `${label}: publicHtmlForPost descriptor "${descriptor.id}" at position "${position}" is a duplicate \u2014 keeping the first occurrence.`
         );
+        continue;
       }
-      return { name, module: mod };
+      seenSet.add(dedupeKey);
+      const cleanHtml = sanitizeHtml(descriptor.body, SANITIZE_OPTIONS);
+      bucket.push({ key: dedupeKey, cleanHtml, namespace });
     }
+  }
+  function toReactNode(entries, position) {
+    if (entries.length === 0) return null;
+    const elements = entries.map(
+      ({ key, cleanHtml, namespace }) => createElement2("div", {
+        key,
+        "data-ampless-plugin": namespace,
+        "data-ampless-position": position,
+        dangerouslySetInnerHTML: { __html: cleanHtml }
+      })
+    );
+    return createElement2(Fragment2, null, ...elements);
+  }
+  return {
+    beforeContent: toReactNode(before, "beforeContent"),
+    afterContent: toReactNode(after, "afterContent")
   };
 }
-
-// src/theme-config.ts
-import {
-  resolveThemeValues,
-  themeSettingKey
-} from "ampless";
-var DEFAULT_COLOR_SCHEME = "auto";
-var COLOR_SCHEME_SETTING_KEY = "theme.colorScheme";
-function validateColorScheme(raw) {
-  if (raw === "light" || raw === "dark" || raw === "auto") return raw;
-  return DEFAULT_COLOR_SCHEME;
-}
-function createThemeConfig(themeActive, storage) {
-  async function fetchRemote() {
-    if (!storage.isStorageConfigured()) return null;
-    let url;
-    try {
-      url = storage.publicAssetUrl("public/site-settings.json");
-    } catch {
-      return null;
+function createPluginHead(cmsConfig, pluginSettings) {
+  const plugins = (cmsConfig.plugins ?? []).filter(isPlugin2);
+  const validPlugins = [];
+  const seenNamespaces = /* @__PURE__ */ new Set();
+  for (const plugin of plugins) {
+    const ns = plugin.instanceId ?? plugin.name;
+    const label = plugin.instanceId ? `${plugin.name}#${plugin.instanceId}` : plugin.name;
+    if (!isValidPluginKey(ns)) {
+      warn(
+        `${label}: plugin namespace "${ns}" violates ${`/^[a-zA-Z0-9_-]+$/`}. Use a simple identifier (letters / digits / "-" / "_"). Skipping plugin.`
+      );
+      continue;
     }
-    const res = await fetch(url, { next: { revalidate: 60, tags: ["site-settings"] } });
-    if (!res.ok) return null;
-    return await res.json();
-  }
-  return {
-    async loadThemeConfig() {
-      const [active, flat] = await Promise.all([
-        themeActive.resolveActiveTheme(),
-        fetchRemote().catch(() => null)
-      ]);
-      const manifest = active.module.manifest;
-      const stored = {};
-      if (flat) {
-        for (const field of manifest.fields) {
-          const k = themeSettingKey(field.key);
-          if (k in flat) stored[k] = flat[k];
+    if (seenNamespaces.has(ns)) {
+      warn(
+        `duplicate plugin namespace "${ns}" detected in cms.config.plugins. Set distinct \`instanceId\` on each instance to disambiguate.`
+      );
+    }
+    seenNamespaces.add(ns);
+    if (plugin.settings?.public) {
+      for (const field of plugin.settings.public) {
+        if (!isValidPluginKey(field.key)) {
+          warn(
+            `${label}: settings.public field key "${field.key}" violates ${`/^[a-zA-Z0-9_-]+$/`}. The field will not be readable through ctx.setting(). Rename the field key.`
+          );
         }
       }
-      const values = resolveThemeValues(manifest, stored);
-      const cssVars = collectCssVars(manifest.fields, values);
-      const colorScheme = validateColorScheme(flat?.[COLOR_SCHEME_SETTING_KEY]);
-      return { activeTheme: active.name, manifest, values, cssVars, colorScheme };
-    }
-  };
-}
-function collectCssVars(fields, values) {
-  const out = {};
-  for (const field of fields) {
-    if (field.type === "linkList") continue;
-    if (!field.cssVar) continue;
-    const v = values[field.key];
-    if (v) out[field.cssVar] = v;
-  }
-  return out;
-}
-function renderThemeCss(cssVars) {
-  const lines = Object.entries(cssVars).map(([name, value]) => `  ${name}: ${value};`);
-  if (lines.length === 0) return "";
-  return `:root {
-${lines.join("\n")}
-}`;
-}
-
-// src/rendering.ts
-import { marked } from "marked";
-function escape(s) {
-  return s.replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;");
-}
-function textAlignStyle(attrs) {
-  const v = attrs?.textAlign;
-  if (v === "left" || v === "center" || v === "right" || v === "justify") {
-    return ` style="text-align: ${v}"`;
-  }
-  return "";
-}
-function renderTiptap(node) {
-  if (node.type === "text") {
-    let html = escape(node.text ?? "");
-    for (const mark of node.marks ?? []) {
-      if (mark.type === "bold") html = `<strong>${html}</strong>`;
-      else if (mark.type === "italic") html = `<em>${html}</em>`;
-      else if (mark.type === "code") html = `<code>${html}</code>`;
-      else if (mark.type === "strike") html = `<s>${html}</s>`;
-      else if (mark.type === "underline") html = `<u>${html}</u>`;
-      else if (mark.type === "highlight") html = `<mark>${html}</mark>`;
-      else if (mark.type === "link") {
-        const href = escape(String(mark.attrs?.href ?? "#"));
-        html = `<a href="${href}" target="_blank" rel="noopener">${html}</a>`;
+    }
+    validPlugins.push(plugin);
+    if (plugin.packageName) {
+      crossCheckStaticManifest(plugin, label);
+    }
+    const caps = plugin.capabilities;
+    if (caps) {
+      if (caps.includes("publicHead") && !plugin.publicHead) {
+        warn(
+          `${label}: declares capability "publicHead" but no \`publicHead\` implementation. Drop the capability or add the function.`
+        );
+      }
+      if (caps.includes("publicBody") && !plugin.publicBodyEnd) {
+        warn(
+          `${label}: declares capability "publicBody" but no \`publicBodyEnd\` implementation. Drop the capability or add the function.`
+        );
+      }
+      if (plugin.publicHead && !caps.includes("publicHead")) {
+        warn(
+          `${label}: implements \`publicHead\` but "publicHead" is not in declared capabilities. Add it so admin UI / capability gates see the surface.`
+        );
+      }
+      if (plugin.publicBodyEnd && !caps.includes("publicBody")) {
+        warn(
+          `${label}: implements \`publicBodyEnd\` but "publicBody" is not in declared capabilities. Add it so admin UI / capability gates see the surface.`
+        );
+      }
+      if (caps.includes("schema") && !plugin.publicBodyForPost) {
+        warn(
+          `${label}: declares capability "schema" but no \`publicBodyForPost\` implementation. Drop the capability or add the function.`
+        );
+      }
+      if (plugin.publicBodyForPost && !caps.includes("schema")) {
+        warn(
+          `${label}: implements \`publicBodyForPost\` but "schema" is not in declared capabilities. Add it so admin UI / capability gates see the surface.`
+        );
+      }
+      if (caps.includes("publicHtmlForPost") && !plugin.publicHtmlForPost) {
+        warn(
+          `${label}: declares capability "publicHtmlForPost" but no \`publicHtmlForPost\` implementation. Drop the capability or add the function.`
+        );
+      }
+      if (plugin.publicHtmlForPost && !caps.includes("publicHtmlForPost")) {
+        warn(
+          `${label}: implements \`publicHtmlForPost\` but "publicHtmlForPost" is not in declared capabilities. Add it so admin UI / capability gates see the surface.`
+        );
       }
     }
-    return html;
   }
-  const children = (node.content ?? []).map(renderTiptap).join("");
-  switch (node.type) {
-    case "doc":
-      return children;
-    case "paragraph":
-      return `<p${textAlignStyle(node.attrs)}>${children}</p>`;
-    case "heading": {
-      const level = Number(node.attrs?.level ?? 1);
-      return `<h${level}${textAlignStyle(node.attrs)}>${children}</h${level}>`;
+  const contentFieldsRegistry = buildContentFieldRegistry(validPlugins);
+  for (const plugin of validPlugins) {
+    const caps = plugin.capabilities;
+    if (!caps) continue;
+    const label = plugin.instanceId ? `${plugin.name}#${plugin.instanceId}` : plugin.name;
+    if (caps.includes("contentFields") && !plugin.contentFields) {
+      warn(
+        `${label}: declares capability "contentFields" but no \`contentFields\` array. Drop the capability or add the renderers.`
+      );
     }
-    case "bulletList":
-      return `<ul>${children}</ul>`;
-    case "orderedList":
-      return `<ol>${children}</ol>`;
-    case "listItem":
-      return `<li>${children}</li>`;
-    case "codeBlock": {
-      const lang = node.attrs?.language ? ` class="language-${escape(String(node.attrs.language))}"` : "";
-      return `<pre><code${lang}>${children}</code></pre>`;
+    if (plugin.contentFields && !caps.includes("contentFields")) {
+      warn(
+        `${label}: implements \`contentFields\` but "contentFields" is not in declared capabilities. Add it so admin UI / capability gates see the surface.`
+      );
     }
-    case "blockquote":
-      return `<blockquote>${children}</blockquote>`;
-    case "hardBreak":
-      return "<br />";
-    case "horizontalRule":
-      return "<hr />";
-    case "image": {
-      const src = escape(String(node.attrs?.src ?? ""));
-      const alt = escape(String(node.attrs?.alt ?? ""));
-      const title = node.attrs?.title ? ` title="${escape(String(node.attrs.title))}"` : "";
-      const display = node.attrs?.display ? ` data-display="${escape(String(node.attrs.display))}"` : "";
-      return `<img src="${src}" alt="${alt}"${title}${display} loading="lazy" />`;
+    if (caps.includes("publicPostScript") && !plugin.publicPostScript) {
+      warn(
+        `${label}: declares capability "publicPostScript" but no \`publicPostScript\` implementation. Drop the capability or add the function.`
+      );
     }
-    case "table":
-      return `<table class="tiptap-table"><tbody>${children}</tbody></table>`;
-    case "tableRow":
-      return `<tr>${children}</tr>`;
-    case "tableHeader":
-      return `<th${tableCellAttrs(node.attrs)}>${children}</th>`;
-    case "tableCell":
-      return `<td${tableCellAttrs(node.attrs)}>${children}</td>`;
-    case "taskList":
-      return `<ul data-type="taskList">${children}</ul>`;
-    case "taskItem": {
-      const checked = node.attrs?.checked === true ? "true" : "false";
-      return `<li data-type="taskItem" data-checked="${checked}">${children}</li>`;
+    if (plugin.publicPostScript && !caps.includes("publicPostScript")) {
+      warn(
+        `${label}: implements \`publicPostScript\` but "publicPostScript" is not in declared capabilities. Add it so admin UI / capability gates see the surface.`
+      );
     }
-    default:
-      return children;
-  }
-}
-function tableCellAttrs(attrs) {
-  let out = "";
-  const colspan = Number(attrs?.colspan ?? 1);
-  if (colspan > 1) out += ` colspan="${colspan}"`;
-  const rowspan = Number(attrs?.rowspan ?? 1);
-  if (rowspan > 1) out += ` rowspan="${rowspan}"`;
-  const colwidth = attrs?.colwidth;
-  if (Array.isArray(colwidth) && colwidth.length > 0) {
-    const w = Number(colwidth[0]);
-    if (Number.isFinite(w) && w > 0) out += ` style="width: ${w}px"`;
-  }
-  return out;
-}
-function renderMarkdown(md) {
-  return marked.parse(md, { gfm: true, breaks: false, async: false });
-}
-function renderBody(post) {
-  if (post.format === "html") return String(post.body);
-  if (post.format === "markdown") return renderMarkdown(String(post.body));
-  if (post.format === "tiptap") {
-    if (typeof post.body === "string") return post.body;
-    return renderTiptap(post.body);
   }
-  return "";
-}
-function tiptapToHtml(doc) {
-  if (typeof doc === "string") return doc;
-  return renderTiptap(doc);
-}
-function markdownToHtml(md) {
-  return renderMarkdown(md);
-}
-function tiptapToMarkdown(doc) {
-  if (typeof doc === "string") return htmlToMarkdown(doc);
-  const node = doc;
-  return tiptapNodeToMarkdown(node).trim() + "\n";
+  return {
+    async renderHead() {
+      const snapshot = await pluginSettings.loadAll();
+      return collectFor(
+        validPlugins,
+        cmsConfig.site,
+        snapshot,
+        (p) => p.publicHead,
+        renderHeadDescriptor
+      );
+    },
+    async renderBodyEnd() {
+      const snapshot = await pluginSettings.loadAll();
+      return collectFor(
+        validPlugins,
+        cmsConfig.site,
+        snapshot,
+        (p) => p.publicBodyEnd,
+        renderBodyDescriptor
+      );
+    },
+    async renderBodyForPost(post) {
+      const snapshot = await pluginSettings.loadAll();
+      return collectForPost(validPlugins, cmsConfig.site, snapshot, post);
+    },
+    async renderHtmlForPost(post) {
+      const snapshot = await pluginSettings.loadAll();
+      return collectHtmlForPost(validPlugins, cmsConfig.site, snapshot, post);
+    },
+    async renderPostScriptsForPage(posts) {
+      const snapshot = await pluginSettings.loadAll();
+      return collectPostScriptsForPage(validPlugins, cmsConfig.site, snapshot, posts);
+    },
+    contentFieldsRegistry,
+    async contextForPlugins() {
+      const snapshot = await pluginSettings.loadAll();
+      return (plugin) => makeCtx(plugin, cmsConfig.site, snapshot);
+    }
+  };
 }
-function tiptapNodeToMarkdown(node) {
-  if (node.type === "text") {
-    let txt = node.text ?? "";
-    for (const mark of node.marks ?? []) {
-      if (mark.type === "bold") txt = `**${txt}**`;
-      else if (mark.type === "italic") txt = `*${txt}*`;
-      else if (mark.type === "code") txt = `\`${txt}\``;
-      else if (mark.type === "strike") txt = `~~${txt}~~`;
-      else if (mark.type === "underline") txt = `<u>${txt}</u>`;
-      else if (mark.type === "highlight") txt = `<mark>${txt}</mark>`;
-      else if (mark.type === "link") txt = `[${txt}](${String(mark.attrs?.href ?? "#")})`;
+function collectPostScriptsForPage(plugins, site, snapshot, posts) {
+  const seen = /* @__PURE__ */ new Set();
+  const elements = [];
+  for (const post of posts) {
+    for (const plugin of plugins) {
+      const factory = plugin.publicPostScript;
+      if (!factory) continue;
+      const ctx = makeCtx(plugin, site, snapshot);
+      const label = `plugin "${plugin.instanceId ?? plugin.name}"`;
+      let descriptors;
+      try {
+        descriptors = factory.call(plugin, post, ctx) ?? [];
+      } catch (err) {
+        warn(
+          `${label}: threw inside publicPostScript callback: ${err instanceof Error ? err.message : String(err)}`
+        );
+        continue;
+      }
+      for (let i = 0; i < descriptors.length; i++) {
+        const d = descriptors[i];
+        if (!d || typeof d !== "object") {
+          warn(`${label}: publicPostScript descriptor #${i} dropped \u2014 not an object.`);
+          continue;
+        }
+        if (typeof d.id !== "string" || d.id.length === 0) {
+          warn(
+            `${label}: publicPostScript descriptor #${i} dropped \u2014 "id" must be a non-empty string.`
+          );
+          continue;
+        }
+        if (typeof d.src !== "string" || !isSafeUrl(d.src)) {
+          warn(
+            `${label}: publicPostScript descriptor "${d.id}" dropped \u2014 unsafe / missing src.`
+          );
+          continue;
+        }
+        if (seen.has(d.id)) continue;
+        seen.add(d.id);
+        const props = { key: d.id, src: d.src };
+        const hasAsync = typeof d.async === "boolean";
+        const hasDefer = typeof d.defer === "boolean";
+        if (hasAsync) props.async = d.async;
+        if (hasDefer) props.defer = d.defer;
+        if (!hasAsync && !hasDefer) {
+          props.async = true;
+          props.defer = true;
+        }
+        elements.push(createElement2("script", props));
+      }
     }
-    return txt;
   }
-  const children = (node.content ?? []).map(tiptapNodeToMarkdown).join("");
-  switch (node.type) {
-    case "doc":
-      return children;
-    case "paragraph":
-      return children + "\n\n";
-    case "heading": {
-      const level = Math.max(1, Math.min(6, Number(node.attrs?.level ?? 1)));
-      return "#".repeat(level) + " " + children + "\n\n";
-    }
-    case "bulletList":
-      return children + "\n";
-    case "orderedList":
-      return children + "\n";
-    case "listItem": {
-      const trimmed = children.replace(/\n+$/, "");
-      return "- " + trimmed + "\n";
-    }
-    case "codeBlock": {
-      const lang = node.attrs?.language ? String(node.attrs.language) : "";
-      return "```" + lang + "\n" + children + "\n```\n\n";
-    }
-    case "blockquote":
-      return children.replace(/\n+$/, "").split("\n").map((l) => "> " + l).join("\n") + "\n\n";
-    case "hardBreak":
-      return "  \n";
-    case "horizontalRule":
-      return "\n---\n\n";
-    case "image": {
-      const src = String(node.attrs?.src ?? "");
-      const alt = String(node.attrs?.alt ?? "");
-      return `![${alt}](${src})`;
+  if (elements.length === 0) return null;
+  return createElement2(Fragment2, null, ...elements);
+}
+
+// src/plugin-settings.ts
+import { unflattenSettings as unflattenSettings2 } from "ampless";
+function createPluginSettings(storage) {
+  return {
+    async loadAll() {
+      const out = /* @__PURE__ */ new Map();
+      if (!storage.isStorageConfigured()) return out;
+      let url;
+      try {
+        url = storage.publicAssetUrl("public/site-settings.json");
+      } catch {
+        return out;
+      }
+      let flat;
+      try {
+        const res = await fetch(url, {
+          // Same revalidate + tag as site-settings.ts so a single
+          // request to the public route hits the JSON once and both
+          // helpers share the cached body.
+          next: { revalidate: 60, tags: ["site-settings"] }
+        });
+        if (!res.ok) return out;
+        flat = await res.json();
+      } catch {
+        return out;
+      }
+      const nested = unflattenSettings2(flat);
+      const pluginsBlock = nested.plugins;
+      if (!pluginsBlock || typeof pluginsBlock !== "object") return out;
+      for (const [instanceId, block] of Object.entries(pluginsBlock)) {
+        if (!block || typeof block !== "object" || Array.isArray(block)) continue;
+        out.set(instanceId, { ...block });
+      }
+      return out;
     }
-    case "table":
-      return tiptapTableToMarkdown(node);
-    case "taskList":
-      return children + "\n";
-    case "taskItem": {
-      const checked = node.attrs?.checked === true ? "x" : " ";
-      const inner = children.replace(/\n+$/, "");
-      const [first, ...rest] = inner.split("\n");
-      const cont = rest.map((l) => l ? "  " + l : l).join("\n");
-      return `- [${checked}] ${first ?? ""}${cont ? "\n" + cont : ""}
-`;
+  };
+}
+
+// src/theme-active.ts
+import { headers } from "next/headers";
+function createThemeActive(registry, storage) {
+  function settingsUrl() {
+    if (!storage.isStorageConfigured()) return null;
+    try {
+      return storage.publicAssetUrl("public/site-settings.json");
+    } catch {
+      return null;
     }
-    default:
-      return children;
   }
-}
-function tiptapTableToMarkdown(node) {
-  const rows = node.content ?? [];
-  if (rows.length === 0) return "";
-  const renderedRows = [];
-  let headerIdx = -1;
-  for (let i = 0; i < rows.length; i++) {
-    const row = rows[i];
-    const cells = row.content ?? [];
-    const cellTexts = cells.map((c) => {
-      const inner = (c.content ?? []).map(tiptapNodeToMarkdown).join("");
-      return inner.replace(/\n+$/, "").replace(/\n/g, "<br>").replace(/\|/g, "\\|");
+  async function fetchActiveFromCache() {
+    const url = settingsUrl();
+    if (!url) return null;
+    const res = await fetch(url, {
+      next: { revalidate: 60, tags: ["site-settings"] }
     });
-    renderedRows.push(cellTexts);
-    if (headerIdx === -1 && cells.some((c) => c.type === "tableHeader")) headerIdx = i;
+    if (!res.ok) return null;
+    const flat = await res.json();
+    const v = flat["theme.active"];
+    return typeof v === "string" ? v : null;
   }
-  if (headerIdx === -1) headerIdx = 0;
-  const header = renderedRows[headerIdx] ?? [];
-  const body = renderedRows.filter((_, i) => i !== headerIdx);
-  const cols = header.length;
-  const headerLine = "| " + header.join(" | ") + " |";
-  const sepLine = "| " + Array.from({ length: cols }, () => "---").join(" | ") + " |";
-  const bodyLines = body.map((r) => {
-    const cells = Array.from({ length: cols }, (_, i) => r[i] ?? "");
-    return "| " + cells.join(" | ") + " |";
-  });
-  return "\n" + [headerLine, sepLine, ...bodyLines].join("\n") + "\n\n";
-}
-function htmlToMarkdown(html) {
-  let md = html;
-  md = md.replace(/<table[^>]*>([\s\S]*?)<\/table>/gi, (_, inner) => {
-    return "\n" + convertHtmlTable(String(inner)) + "\n";
-  });
-  md = md.replace(/<h([1-6])[^>]*>([\s\S]*?)<\/h\1>/gi, (_, level, text) => {
-    return "\n" + "#".repeat(Number(level)) + " " + String(text).trim() + "\n\n";
-  });
-  md = md.replace(
-    /<pre[^>]*><code[^>]*(?:\sclass="language-([^"]+)")?[^>]*>([\s\S]*?)<\/code><\/pre>/gi,
-    (_, lang, code) => {
-      return "\n```" + (lang ?? "") + "\n" + String(code) + "\n```\n\n";
+  async function fetchActiveFresh() {
+    const url = settingsUrl();
+    if (!url) return null;
+    const res = await fetch(url, { cache: "no-store" });
+    if (!res.ok) return null;
+    const flat = await res.json();
+    const v = flat["theme.active"];
+    return typeof v === "string" ? v : null;
+  }
+  return {
+    readStoredActiveThemeFresh: () => fetchActiveFresh(),
+    async resolveActiveTheme() {
+      let previewOverride = null;
+      try {
+        const h = await headers();
+        previewOverride = h.get("x-preview-theme");
+      } catch {
+      }
+      if (previewOverride && previewOverride in registry.themes) {
+        const mod2 = registry.themes[previewOverride];
+        if (mod2) return { name: previewOverride, module: mod2 };
+      }
+      const stored = await fetchActiveFromCache().catch(() => null);
+      const name = stored && stored in registry.themes ? stored : registry.defaultTheme;
+      const mod = registry.themes[name] ?? registry.themes[registry.defaultTheme];
+      if (!mod) {
+        throw new Error(
+          `themes registry is empty \u2014 at least one theme must be registered before resolveActiveTheme is called`
+        );
+      }
+      return { name, module: mod };
     }
-  );
-  md = md.replace(/<blockquote[^>]*>([\s\S]*?)<\/blockquote>/gi, (_, content) => {
-    return "\n" + String(content).trim().split("\n").map((l) => "> " + l).join("\n") + "\n\n";
-  });
-  md = md.replace(/<ul[^>]*data-type="taskList"[^>]*>([\s\S]*?)<\/ul>/gi, (_, items) => {
-    return "\n" + convertHtmlTaskList(String(items)) + "\n";
-  });
-  md = md.replace(/<ul[^>]*>([\s\S]*?)<\/ul>/gi, (_, items) => {
-    return "\n" + String(items).replace(/<li[^>]*>([\s\S]*?)<\/li>/gi, "- $1\n") + "\n";
-  });
-  md = md.replace(/<ol[^>]*>([\s\S]*?)<\/ol>/gi, (_, items) => {
-    let i = 1;
-    return "\n" + String(items).replace(/<li[^>]*>([\s\S]*?)<\/li>/gi, () => `${i++}. $1
-`) + "\n";
-  });
-  md = md.replace(/<hr\s*\/?>/gi, "\n---\n\n");
-  md = md.replace(/<br\s*\/?>/gi, "  \n");
-  md = md.replace(/<p[^>]*>([\s\S]*?)<\/p>/gi, "$1\n\n");
-  md = md.replace(/<img[^>]*?src="([^"]*)"[^>]*?alt="([^"]*)"[^>]*?\/?>/gi, "![$2]($1)");
-  md = md.replace(/<img[^>]*?alt="([^"]*)"[^>]*?src="([^"]*)"[^>]*?\/?>/gi, "![$1]($2)");
-  md = md.replace(/<img[^>]*?src="([^"]*)"[^>]*?\/?>/gi, "![]($1)");
-  md = md.replace(/<a[^>]*?href="([^"]*)"[^>]*>([\s\S]*?)<\/a>/gi, "[$2]($1)");
-  md = md.replace(/<(strong|b)>([\s\S]*?)<\/\1>/gi, "**$2**");
-  md = md.replace(/<(em|i)>([\s\S]*?)<\/\1>/gi, "*$2*");
-  md = md.replace(/<s>([\s\S]*?)<\/s>/gi, "~~$1~~");
-  md = md.replace(/<code>([\s\S]*?)<\/code>/gi, "`$1`");
-  const PH_U_OPEN = "AMP_U_OPEN";
-  const PH_U_CLOSE = "AMP_U_CLOSE";
-  const PH_MARK_OPEN = "AMP_MARK_OPEN";
-  const PH_MARK_CLOSE = "AMP_MARK_CLOSE";
-  md = md.replace(/<u>([\s\S]*?)<\/u>/gi, `${PH_U_OPEN}$1${PH_U_CLOSE}`);
-  md = md.replace(/<mark>([\s\S]*?)<\/mark>/gi, `${PH_MARK_OPEN}$1${PH_MARK_CLOSE}`);
-  md = md.replace(/<\/?[^>]+>/g, "");
-  md = md.split(PH_U_OPEN).join("<u>").split(PH_U_CLOSE).join("</u>").split(PH_MARK_OPEN).join("<mark>").split(PH_MARK_CLOSE).join("</mark>");
-  md = md.replace(/&amp;/g, "&").replace(/&lt;/g, "<").replace(/&gt;/g, ">").replace(/&quot;/g, '"').replace(/&#39;/g, "'").replace(/&nbsp;/g, " ");
-  md = md.replace(/\n{3,}/g, "\n\n");
-  return md.trim() + "\n";
+  };
 }
-function convertHtmlTable(inner) {
-  const stripped = inner.replace(/<\/?(thead|tbody)[^>]*>/gi, "");
-  const rowRe = /<tr[^>]*>([\s\S]*?)<\/tr>/gi;
-  const rows = [];
-  let m;
-  while ((m = rowRe.exec(stripped)) !== null) {
-    const rowHtml = m[1] ?? "";
-    const cellRe = /<(th|td)[^>]*>([\s\S]*?)<\/\1>/gi;
-    const cells = [];
-    let isHeader = false;
-    let cm;
-    while ((cm = cellRe.exec(rowHtml)) !== null) {
-      if ((cm[1] ?? "").toLowerCase() === "th") isHeader = true;
-      cells.push(normalizeTableCell(cm[2] ?? ""));
+
+// src/theme-config.ts
+import {
+  resolveThemeValues,
+  themeSettingKey
+} from "ampless";
+var DEFAULT_COLOR_SCHEME = "auto";
+var COLOR_SCHEME_SETTING_KEY = "theme.colorScheme";
+function validateColorScheme(raw) {
+  if (raw === "light" || raw === "dark" || raw === "auto") return raw;
+  return DEFAULT_COLOR_SCHEME;
+}
+function createThemeConfig(themeActive, storage) {
+  async function fetchRemote() {
+    if (!storage.isStorageConfigured()) return null;
+    let url;
+    try {
+      url = storage.publicAssetUrl("public/site-settings.json");
+    } catch {
+      return null;
     }
-    if (cells.length > 0) rows.push({ isHeader, cells });
+    const res = await fetch(url, { next: { revalidate: 60, tags: ["site-settings"] } });
+    if (!res.ok) return null;
+    return await res.json();
   }
-  if (rows.length === 0) return "";
-  let headerIdx = rows.findIndex((r) => r.isHeader);
-  if (headerIdx === -1) headerIdx = 0;
-  const header = rows[headerIdx].cells;
-  const body = rows.filter((_, i) => i !== headerIdx).map((r) => r.cells);
-  const cols = header.length;
-  const headerLine = "| " + header.join(" | ") + " |";
-  const sepLine = "| " + Array.from({ length: cols }, () => "---").join(" | ") + " |";
-  const bodyLines = body.map((cells) => {
-    const padded = Array.from({ length: cols }, (_, i) => cells[i] ?? "");
-    return "| " + padded.join(" | ") + " |";
-  });
-  return [headerLine, sepLine, ...bodyLines].join("\n") + "\n";
-}
-function normalizeTableCell(html) {
-  return html.replace(/<br\s*\/?>/gi, " ").replace(/<\/?[^>]+>/g, "").replace(/\|/g, "\\|").replace(/\s+/g, " ").trim();
+  return {
+    async loadThemeConfig() {
+      const [active, flat] = await Promise.all([
+        themeActive.resolveActiveTheme(),
+        fetchRemote().catch(() => null)
+      ]);
+      const manifest = active.module.manifest;
+      const stored = {};
+      if (flat) {
+        for (const field of manifest.fields) {
+          const k = themeSettingKey(field.key);
+          if (k in flat) stored[k] = flat[k];
+        }
+      }
+      const values = resolveThemeValues(manifest, stored);
+      const cssVars = collectCssVars(manifest.fields, values);
+      const colorScheme = validateColorScheme(flat?.[COLOR_SCHEME_SETTING_KEY]);
+      return { activeTheme: active.name, manifest, values, cssVars, colorScheme };
+    }
+  };
 }
-function convertHtmlTaskList(items) {
-  const liRe = /<li[^>]*data-checked="(true|false)"[^>]*>([\s\S]*?)<\/li>/gi;
-  const out = [];
-  let m;
-  while ((m = liRe.exec(items)) !== null) {
-    const checked = m[1] === "true" ? "x" : " ";
-    const inner = String(m[2] ?? "").replace(/<\/?p[^>]*>/gi, "").trim();
-    out.push(`- [${checked}] ${inner}`);
+function collectCssVars(fields, values) {
+  const out = {};
+  for (const field of fields) {
+    if (field.type === "linkList") continue;
+    if (!field.cssVar) continue;
+    const v = values[field.key];
+    if (v) out[field.cssVar] = v;
   }
-  return out.join("\n");
+  return out;
+}
+function renderThemeCss(cssVars) {
+  const lines = Object.entries(cssVars).map(([name, value]) => `  ${name}: ${value};`);
+  if (lines.length === 0) return "";
+  return `:root {
+${lines.join("\n")}
+}`;
 }
 
 // src/index.ts
@@ -1371,7 +1706,15 @@ function createAmpless(opts) {
     publicBodyEnd: () => pluginHead.renderBodyEnd(),
     publicBodyForPost: (post) => pluginHead.renderBodyForPost(post),
     publicHtmlForPost: (post) => pluginHead.renderHtmlForPost(post),
-    renderBody: (post) => renderBody(post),
+    publicPostScriptsForPage: (posts2) => pluginHead.renderPostScriptsForPage(posts2),
+    renderBody: async (post) => {
+      const ctxForPlugin = await pluginHead.contextForPlugins();
+      return renderBody(post, {
+        contentFields: pluginHead.contentFieldsRegistry,
+        ctxForPlugin
+      });
+    },
+    renderBodyHtmlString: (post) => renderBodyHtmlString(post),
     renderThemeCss: (cssVars) => renderThemeCss(cssVars),
     publicAssetUrl: (key) => storage.publicAssetUrl(key),
     isStorageConfigured: () => storage.isStorageConfigured(),
@@ -1394,6 +1737,7 @@ export {
   DEFAULT_COLOR_SCHEME,
   SUPPORTED_API_VERSION,
   _resetStreamS3Cache,
+  buildContentFieldRegistry,
   createAmpless,
   createPluginHead,
   createPluginSettings,
@@ -1402,6 +1746,7 @@ export {
   loadPackageManifest,
   markdownToHtml,
   renderBody,
+  renderBodyHtmlString,
   renderThemeCss,
   streamS3Object,
   streamS3ObjectWithRunner,