@blamejs/blamejs-shop 0.0.44

package/lib/vendor/blamejs/examples/wiki/test/validate-site-coverage.js

@@ -0,0 +1,252 @@
+"use strict";
+// validate-site-coverage — enforce that nav, cards, page seeders, and
+// curation entries are all consistent with site.config.js.
+//
+// Invariants checked:
+//
+//   1. Every entry in site.config.js's ENTRIES array resolves to one
+//      seeded page in the DB (groupName=slug, slug="index").
+//
+//   2. Every seeded DB page is referenced by at least one ENTRIES
+//      entry. Orphan rows fail the gate (catch when a hand-authored
+//      seeder is added but never registered in site.config).
+//
+//   3. Every nav-group entry (group !== null AND !hidden) maps to an
+//      existing page slug.
+//
+//   4. Every home-card entry (card.description set) resolves to an
+//      existing page slug.
+//
+//   5. Every concept entry's `concept` value resolves to a @concept
+//      block somewhere under lib/. The page-generator's missing-block
+//      placeholder is INTENTIONAL behavior to surface drift; the
+//      validator promotes it to a hard fail.
+//
+//   6. Every namespaces entry has at least one @primitive block under
+//      a matching b.X namespace in lib/.
+//
+//   7. Every harvest entry resolves to a harvester module
+//      (examples/wiki/lib/harvest-<id>.js) that exports both
+//      `harvest()` and `render()`.
+//
+//   8. Every nav group has ≥1 visible entry (no empty groups).
+//
+//   9. Every entry has either `handAuthored` OR exactly one of
+//      `concept` / `namespaces` / `harvest` (no double-typing).
+//
+// Run standalone (boots in-process via buildApp to read the seeded
+// DB; or pass --db-path to point at an existing data dir):
+//   node examples/wiki/test/validate-site-coverage.js
+//   node examples/wiki/test/validate-site-coverage.js --db-path=./data
+//   node examples/wiki/test/validate-site-coverage.js --report
+
+var fs   = require("node:fs");
+var path = require("node:path");
+
+var site = require("../site.config");
+
+var REPORT_ONLY = process.argv.indexOf("--report") !== -1;
+var DB_PATH_ARG = process.argv.find(function (a) { return a.indexOf("--db-path=") === 0; });
+var DB_PATH = DB_PATH_ARG ? DB_PATH_ARG.split("=")[1] : path.join(__dirname, "..", "data", "blamejs.db");
+
+var LIB_DIR = path.join(__dirname, "..", "..", "..", "lib");
+
+function _seededSlugs(dbPath) {
+  // Pages table holds (groupName, slug). Landing pages have
+  // slug="index" and groupName=<page-slug>; that's the slug we want.
+  // Use node:sqlite directly to avoid needing the framework boot.
+  var sqlite = require("node:sqlite");
+  var db;
+  try { db = new sqlite.DatabaseSync(dbPath); }
+  catch (e) {
+    return { ok: false, reason: "cannot open " + dbPath + ": " + (e && e.message) };
+  }
+  try {
+    var rows = db.prepare("SELECT groupName, slug FROM pages WHERE slug = 'index'").all();
+    return { ok: true, slugs: rows.map(function (r) { return r.groupName; }) };
+  } finally {
+    db.close();
+  }
+}
+
+function _libConceptIds() {
+  var ids = {};
+  var parser = require("../lib/source-doc-parser");
+  var docs = parser.parseTree(LIB_DIR);
+  Object.keys(docs).forEach(function (file) {
+    (docs[file].concepts || []).forEach(function (c) {
+      if (c.tags && c.tags.concept) ids[c.tags.concept] = file;
+    });
+  });
+  return ids;
+}
+
+function _libNamespacesWithPrimitives() {
+  var ns = {};
+  var parser = require("../lib/source-doc-parser");
+  var docs = parser.parseTree(LIB_DIR);
+  Object.keys(docs).forEach(function (file) {
+    (docs[file].primitives || []).forEach(function (p) {
+      var sig = p.tags && p.tags.primitive;
+      if (!sig) return;
+      // Index every prefix of the bare path so a curated namespace
+      // entry like `httpClient.cache` / `middleware.clearSiteData` /
+      // `mail.bimi` resolves to the @primitive block whose bare path
+      // equals OR descends from the namespace. Plain first-segment
+      // matching only covers `httpClient` / `middleware` / `mail` and
+      // rejects every nested-namespace curation entry.
+      var bare = String(sig).replace(/\([^)]*\)/g, "").replace(/\s+/g, "")
+        .replace(/^b\./, "");
+      var parts = bare.split(".");
+      for (var i = 1; i <= parts.length; i += 1) {
+        ns[parts.slice(0, i).join(".")] = true;
+      }
+    });
+  });
+  return ns;
+}
+
+function _resolveHarvester(id) {
+  var p = path.join(__dirname, "..", "lib", "harvest-" + id + ".js");
+  if (!fs.existsSync(p)) return { ok: false, reason: "module not found at " + path.relative(process.cwd(), p) };
+  var mod;
+  try { mod = require(p); }
+  catch (e) { return { ok: false, reason: "module load error: " + (e && e.message) }; }
+  if (typeof mod.harvest !== "function") return { ok: false, reason: "module does not export harvest()" };
+  if (typeof mod.render !== "function") return { ok: false, reason: "module does not export render()" };
+  return { ok: true };
+}
+
+function validate(opts) {
+  var findings = [];
+  var dbPath = (opts && opts.dbPath) || DB_PATH;
+  var entries = site.ENTRIES;
+  var entryBySlug = {};
+  entries.forEach(function (e) { entryBySlug[e.slug] = e; });
+
+  // 9. Schema: each entry has exactly one source-of-truth declaration.
+  entries.forEach(function (e) {
+    var kindCount =
+      (e.handAuthored ? 1 : 0) +
+      (e.concept ? 1 : 0) +
+      (Array.isArray(e.namespaces) ? 1 : 0) +
+      (e.harvest ? 1 : 0);
+    if (kindCount === 0) {
+      findings.push({ kind: "schema", slug: e.slug, msg: "entry has no kind — set one of `handAuthored`, `concept`, `namespaces`, or `harvest`" });
+    }
+    if (kindCount > 1) {
+      findings.push({ kind: "schema", slug: e.slug, msg: "entry has multiple kinds set — pick exactly one" });
+    }
+  });
+
+  // 5. Concept references resolve.
+  var conceptIds = _libConceptIds();
+  entries.forEach(function (e) {
+    if (e.concept && !conceptIds[e.concept]) {
+      findings.push({
+        kind: "concept-missing", slug: e.slug,
+        msg: "@concept `" + e.concept + "` not found anywhere under lib/",
+      });
+    }
+  });
+
+  // 6. Namespace references have at least one @primitive.
+  var nsWith = _libNamespacesWithPrimitives();
+  entries.forEach(function (e) {
+    if (Array.isArray(e.namespaces)) {
+      e.namespaces.forEach(function (ns) {
+        if (!nsWith[ns]) {
+          findings.push({
+            kind: "namespace-missing", slug: e.slug,
+            msg: "namespace `b." + ns + "` has no @primitive blocks anywhere under lib/",
+          });
+        }
+      });
+    }
+  });
+
+  // 7. Harvester modules exist + export the right surface.
+  entries.forEach(function (e) {
+    if (e.harvest) {
+      var r = _resolveHarvester(e.harvest);
+      if (!r.ok) {
+        findings.push({
+          kind: "harvest-missing", slug: e.slug,
+          msg: "harvester `" + e.harvest + "`: " + r.reason,
+        });
+      }
+    }
+  });
+
+  // 4. Card references — homeCards() filters to entries with
+  //    card.description; verify each card resolves to a real entry.
+  site.homeCards().forEach(function (c) {
+    if (!entryBySlug[c.slug]) {
+      findings.push({ kind: "card-orphan", slug: c.slug, msg: "home card slug has no matching entry" });
+    }
+    if (!c.description || c.description.length < 5) {
+      findings.push({ kind: "card-empty", slug: c.slug, msg: "home card description is missing or too short" });
+    }
+  });
+
+  // 8. No empty nav groups.
+  site.navGroups().forEach(function (g) {
+    if (g.items.length === 0) {
+      findings.push({ kind: "empty-nav-group", slug: "(group:" + g.name + ")", msg: "nav group has zero visible items" });
+    }
+  });
+
+  // 1+2. DB ↔ ENTRIES correspondence.
+  var seeded = _seededSlugs(dbPath);
+  if (!seeded.ok) {
+    findings.push({
+      kind: "db-unavailable", slug: "(db)",
+      msg: seeded.reason + ". Run the wiki app once to seed, or pass --db-path=<path>.",
+    });
+  } else {
+    var seededSet = {};
+    seeded.slugs.forEach(function (s) { seededSet[s] = true; });
+    entries.forEach(function (e) {
+      if (!seededSet[e.slug]) {
+        findings.push({
+          kind: "page-missing", slug: e.slug,
+          msg: "site.config entry has no corresponding seeded page in the DB (page-generator failed or seeder skipped)",
+        });
+      }
+    });
+    seeded.slugs.forEach(function (s) {
+      if (!entryBySlug[s]) {
+        findings.push({
+          kind: "page-orphan", slug: s,
+          msg: "DB has a seeded page with no entry in site.config — register it (handAuthored) or remove the seeder",
+        });
+      }
+    });
+  }
+
+  return findings;
+}
+
+function _report(findings) {
+  if (findings.length === 0) {
+    var entries = site.ENTRIES;
+    var groups = site.navGroups();
+    var cards  = site.homeCards();
+    var curation = site.curationPages();
+    console.log("[validate-site-coverage] OK");
+    console.log("  " + entries.length + " entries; " + groups.length + " nav groups; " + cards.length + " cards; " + curation.length + " generated pages");
+    return 0;
+  }
+  console.log("[validate-site-coverage] " + findings.length + " finding(s):");
+  findings.forEach(function (f, i) {
+    console.log("  " + (i + 1) + ". [" + f.kind + "] " + f.slug);
+    console.log("     " + f.msg);
+  });
+  return REPORT_ONLY ? 0 : 1;
+}
+
+if (require.main === module) {
+  process.exit(_report(validate()));
+}
+
+module.exports = { validate: validate };

package/lib/vendor/blamejs/examples/wiki/test/validate-source-comment-blocks.js

@@ -0,0 +1,107 @@
+"use strict";
+// validate-source-comment-blocks — e2e gate for the source-driven
+// wiki pipeline (lib/<file>.js -> wiki.config.js -> page-generator.js).
+//
+// The validation engine itself lives in
+// examples/wiki/lib/source-comment-block-validator so the framework's
+// static-gates step (scripts/validate-source-comment-blocks.js) can
+// invoke the same checks from a clean checkout — no
+// `cd examples/wiki && npm install` round-trip.
+//
+// This file is the wiki-e2e entry: wires the wiki's local
+// source-doc-parser + opts-resolver + curation + seeder-index into
+// the shared engine, and adds the historical CLI surface
+// (--report / --task-list).
+//
+// Checks the engine performs (every @primitive block):
+//
+//   1. @primitive carries @signature + prose body + example
+//   2. @signature starts with `b.` and matches @primitive's namespace
+//   3. @status is stable | experimental | deprecated
+//   4. @since looks like semver
+//   5. @compliance values are drawn from the posture catalog
+//   6. @related references resolve to a documented primitive OR a
+//      heading in a hand-authored page seeder
+//   7. The first segment of @primitive matches the @module namespace
+//   8. Every namespace listed in wiki.config.js has at least one
+//      primitive somewhere under lib/
+//   9. Every public export in a @module-tagged file's module.exports
+//      has a matching @primitive block. Missing blocks become tasks.
+//  10. @signature parameter count matches the actual function arity
+//  11. @example bodies parse as valid JavaScript
+//  12. @example bodies contain no unexecutable placeholders
+//  13. proseAfterMultiLine — prose placed AFTER a multi-line tag
+//      (gets swallowed by the tag)
+//
+// Run standalone:
+//   node examples/wiki/test/validate-source-comment-blocks.js
+//   node examples/wiki/test/validate-source-comment-blocks.js --report
+//   node examples/wiki/test/validate-source-comment-blocks.js --task-list
+//     (writes wiki-migration-tasks.json + prints task summary; exits 0)
+
+var fs   = require("node:fs");
+var path = require("node:path");
+
+var engine       = require("../lib/source-comment-block-validator");
+var parser       = require("../lib/source-doc-parser");
+var optsResolver = require("../lib/opts-resolver");
+var curation     = require("../wiki.config");
+
+var LIB_DIR      = path.join(__dirname, "..", "..", "..", "lib");
+var SEEDER_INDEX = path.join(__dirname, "..", "seeders", "prod", "pages", "_index");
+var TASK_OUT     = path.join(__dirname, "..", "..", "..", "wiki-migration-tasks.json");
+
+var REPORT_ONLY = process.argv.indexOf("--report") !== -1;
+var TASK_LIST   = process.argv.indexOf("--task-list") !== -1;
+
+function validate() {
+  return engine.validate({
+    libDir:        LIB_DIR,
+    curationPages: curation.pages,
+    parser:        parser,
+    optsResolver:  optsResolver,
+    seederIndex:   SEEDER_INDEX,
+  });
+}
+
+function _emitTaskList(findings) {
+  var grouped = {};
+  findings.forEach(function (f) {
+    var key = f.file + (f.primitive ? ":" + f.primitive : "");
+    if (!grouped[key]) grouped[key] = { file: f.file, primitive: f.primitive || null, issues: [] };
+    grouped[key].issues.push({ kind: f.kind, msg: f.msg });
+  });
+  var tasks = Object.keys(grouped).map(function (k, i) {
+    return Object.assign({ id: i + 1 }, grouped[k]);
+  });
+  fs.writeFileSync(TASK_OUT, JSON.stringify({ generatedAt: new Date().toISOString(), taskCount: tasks.length, tasks: tasks }, null, 2));
+  console.log("[validate-source-comment-blocks] wrote " + tasks.length + " task(s) to " + path.relative(process.cwd(), TASK_OUT));
+  // Group summary by kind for the operator.
+  var byKind = {};
+  findings.forEach(function (f) { byKind[f.kind] = (byKind[f.kind] || 0) + 1; });
+  console.log("by kind:");
+  Object.keys(byKind).sort().forEach(function (k) { console.log("  " + k.padEnd(22) + " " + byKind[k]); });
+}
+
+function _report(findings) {
+  if (TASK_LIST) {
+    _emitTaskList(findings);
+    return 0;
+  }
+  if (findings.length === 0) {
+    console.log("[validate-source-comment-blocks] OK - no findings");
+    return 0;
+  }
+  console.log("[validate-source-comment-blocks] " + findings.length + " finding(s):");
+  findings.forEach(function (f, i) {
+    console.log("  " + (i + 1) + ". [" + f.kind + "] " + f.file + (f.primitive ? " :: " + f.primitive : ""));
+    console.log("     " + f.msg);
+  });
+  return REPORT_ONLY ? 0 : 1;
+}
+
+if (require.main === module) {
+  process.exit(_report(validate()));
+}
+
+module.exports = { validate: validate };

package/lib/vendor/blamejs/examples/wiki/views/_layout.html

@@ -0,0 +1,115 @@
+<!DOCTYPE html>
+<html lang="{{ locale }}" dir="{{ dir }}">
+<head>
+<meta charset="utf-8">
+<title>{{ title }} &middot; blamejs</title>
+<meta name="viewport" content="width=device-width, initial-scale=1">
+<meta name="description" content="{{ description }}">
+<meta name="theme-color" content="#0b0b12">
+<link rel="canonical" href="{{ canonical }}">
+<link rel="icon" type="image/png" href="/img/blamejs-logo.png">
+<link rel="stylesheet" href="{{ assets.css }}">
+<link rel="stylesheet" href="/vendor/prism.css">
+
+<meta property="og:type" content="{{ ogType }}">
+<meta property="og:title" content="{{ title }} · blamejs">
+<meta property="og:description" content="{{ description }}">
+<meta property="og:url" content="{{ canonical }}">
+<meta property="og:site_name" content="blamejs">
+<meta property="og:image" content="{{ ogImage }}">
+<meta property="og:image:alt" content="blamejs logo — neon-magenta shield with terminal prompt and JS mark">
+<meta property="og:locale" content="{{ locale }}">
+
+<meta name="twitter:card" content="summary_large_image">
+<meta name="twitter:title" content="{{ title }} · blamejs">
+<meta name="twitter:description" content="{{ description }}">
+<meta name="twitter:image" content="{{ ogImage }}">
+<meta name="twitter:image:alt" content="blamejs logo">
+
+<script type="application/ld+json" nonce="{{ cspNonce }}">
+{
+  "@context": "https://schema.org",
+  "@type": "{% if ogType == 'article' %}TechArticle{% else %}WebSite{% endif %}",
+  "name": "blamejs",
+  "headline": "{{ title }}",
+  "description": "{{ description }}",
+  "url": "{{ canonical }}",
+  "image": "{{ ogImage }}",
+  "publisher": {
+    "@type": "Organization",
+    "name": "blamejs",
+    "url": "{{ siteUrl }}",
+    "logo": {
+      "@type": "ImageObject",
+      "url": "{{ ogImage }}"
+    }
+  }
+}
+</script>
+</head>
+<body>
+<a href="#main" class="skip-link">Skip to content</a>
+<div class="shell">
+
+  <aside class="rail" aria-label="Site navigation">
+    <div class="rail-brand">
+      <a href="/">
+        <img src="/img/blamejs-logo.png" alt="blamejs">
+        <span>blamejs</span>
+      </a>
+    </div>
+
+    <form class="rail-search" action="/search" method="get" role="search">
+      <label for="rail-q" class="visually-hidden">Search</label>
+      <input id="rail-q" type="search" name="q" placeholder="Search the docs" value="{{ searchQuery }}">
+    </form>
+
+    <div class="symbol-search" role="search">
+      <label for="symbol-q" class="visually-hidden">Find primitive by signature</label>
+      <input id="symbol-q" type="search" autocomplete="off" placeholder="Find b.X.Y…" data-symbol-search>
+      <ul class="symbol-results" data-symbol-results role="listbox" hidden></ul>
+    </div>
+
+    <p class="rail-nav-title">Concern groups</p>
+    <ul class="rail-nav">
+      {{> nav }}
+    </ul>
+
+    <p class="rail-nav-title">External</p>
+    <ul class="rail-nav">
+      <li><a href="https://github.com/blamejs/blamejs">GitHub</a></li>
+      <li><a href="https://blamejs.com">blamejs.com</a></li>
+    </ul>
+
+    <div class="rail-foot">
+      {% if user %}
+        <p>Signed in as <strong>{{ user.email }}</strong></p>
+        <p><a href="/admin">Admin dashboard</a></p>
+        <form class="logout-form" method="post" action="/logout">
+          <input type="hidden" name="csrf" value="{{ csrfToken }}">
+          <button type="submit" class="btn">Log out</button>
+        </form>
+      {% else %}
+        <p><a href="/login">Admin login</a></p>
+      {% endif %}
+    </div>
+  </aside>
+
+  <main id="main" role="main">
+    {% block content %}{% endblock %}
+  </main>
+
+  {% block onthispage %}
+    <aside class="onthispage" aria-labelledby="onthispage-title">
+      <p id="onthispage-title" class="onthispage-title">On this page</p>
+      <ul data-toc></ul>
+    </aside>
+  {% endblock %}
+
+</div>
+
+<script src="/vendor/prism.js" nonce="{{ cspNonce }}"></script>
+<script src="{{ assets.wiki }}" nonce="{{ cspNonce }}"></script>
+{% block scripts %}{% endblock %}
+</body>
+</html>

package/lib/vendor/blamejs/examples/wiki/views/admin/api-keys.html

@@ -0,0 +1,51 @@
+{% extends "_layout" %}
+{% block onthispage %}{% endblock %}
+{% block content %}
+<h1>API Keys</h1>
+<p>Issue API keys for content-management automation. Each key carries a scope set; the framework's <code>b.apiKey.verify</code> gates downstream requests against these scopes.</p>
+
+{% if issued %}
+<aside class="callout callout-warning">
+  <p class="callout-title">Save this secret now</p>
+  <p>The plaintext key value is shown <strong>only once</strong>. Copy it before navigating away — the framework stores only a SHAKE256 envelope hash and cannot reveal the original.</p>
+  <pre><code class="language-bash">{{ issued.key }}</code></pre>
+  <p class="muted">id: <code>{{ issued.id }}</code> · scopes: <code>{{ issued.scopes }}</code></p>
+</aside>
+{% endif %}
+
+<h2 id="issue">Issue a key <a class="anchor" href="#issue">#</a></h2>
+<form class="editor" method="post" action="/admin/api-keys/issue">
+  <input type="hidden" name="csrf" value="{{ csrfToken }}">
+  <label for="label">Label</label>
+  <input id="label" type="text" name="label" placeholder="e.g. ci-pipeline">
+  <label for="scopes">Scopes <span class="muted">(comma-separated; defaults to <code>wiki:read</code>)</span></label>
+  <input id="scopes" type="text" name="scopes" placeholder="wiki:read, wiki:write">
+  <p><button type="submit">Issue key</button></p>
+</form>
+
+<h2 id="active">Active keys <a class="anchor" href="#active">#</a></h2>
+{% if keys.length == 0 %}
+  <p class="muted">No keys issued yet.</p>
+{% else %}
+<table>
+  <thead><tr><th>id</th><th>scopes</th><th>last used</th><th>created</th><th></th></tr></thead>
+  <tbody>
+  {% for k in keys %}
+    <tr>
+      <td><code>{{ k.id }}</code></td>
+      <td><code>{{ k.scopes }}</code></td>
+      <td>{{ k.lastUsedAt }}</td>
+      <td>{{ k.createdAt }}</td>
+      <td>
+        <form class="logout-form" method="post" action="/admin/api-keys/revoke">
+          <input type="hidden" name="csrf" value="{{ csrfToken }}">
+          <input type="hidden" name="id" value="{{ k.id }}">
+          <button type="submit" class="btn">Revoke</button>
+        </form>
+      </td>
+    </tr>
+  {% endfor %}
+  </tbody>
+</table>
+{% endif %}
+{% endblock %}

package/lib/vendor/blamejs/examples/wiki/views/admin/dashboard.html

@@ -0,0 +1,22 @@
+{% extends "_layout" %}
+{% block onthispage %}{% endblock %}
+{% block content %}
+<h1>Admin dashboard</h1>
+<p>{{ pages.length }} pages currently published.</p>
+<p><a href="/admin/edit">Create a new page</a></p>
+<table>
+  <thead><tr><th>Group</th><th>Slug</th><th>Title</th><th>Last updated</th><th>By</th><th></th></tr></thead>
+  <tbody>
+  {% for p in pages %}
+    <tr>
+      <td><code>{{ p.groupName }}</code></td>
+      <td><code>{{ p.slug }}</code></td>
+      <td>{{ p.title }}</td>
+      <td>{{ p.updatedAtIso }}</td>
+      <td>{{ p.updatedBy }}</td>
+      <td><a href="/admin/edit/{{ p.groupName }}/{{ p.slug }}">Edit</a> &middot; <a href="/{{ p.groupName }}/{{ p.slug }}">View</a></td>
+    </tr>
+  {% endfor %}
+  </tbody>
+</table>
+{% endblock %}

package/lib/vendor/blamejs/examples/wiki/views/admin/edit.html

@@ -0,0 +1,17 @@
+{% extends "_layout" %}
+{% block onthispage %}{% endblock %}
+{% block scripts %}
+<script src="{{ assets.editor }}"></script>
+{% endblock %}
+{% block content %}
+<h1>{% if isNew %}New page{% else %}Edit {{ groupName }}/{{ slug }}{% endif %}</h1>
+{% if error %}<p class="form-error"><strong>{{ error }}</strong></p>{% endif %}
+<form method="post" action="/admin/save" autocomplete="off">
+  <input type="hidden" name="csrf" value="{{ csrfToken }}">
+  <p><label>Group<br><input type="text" name="groupName" required value="{{ groupName }}" pattern="[a-z0-9-]+"{% if !isNew %} readonly{% endif %}></label></p>
+  <p><label>Slug<br><input type="text" name="slug" required value="{{ slug }}" pattern="[a-z0-9-]+"{% if !isNew %} readonly{% endif %}></label></p>
+  <p><label>Title<br><input type="text" name="title" required value="{{ titleField }}"></label></p>
+  <p><label>Body (HTML — operator-trusted, rendered raw)<br><textarea name="body" rows="20" cols="80" required>{{ body }}</textarea></label></p>
+  <p><button type="submit">Save</button> {% if !isNew %}<a href="/{{ groupName }}/{{ slug }}">Cancel</a>{% else %}<a href="/admin">Cancel</a>{% endif %}</p>
+</form>
+{% endblock %}

package/lib/vendor/blamejs/examples/wiki/views/home.html

@@ -0,0 +1,85 @@
+{% extends "_layout" %}
+{% block content %}
+<section class="hero" aria-labelledby="hero-title">
+  <div class="hero-inner">
+    <div class="hero-mark">
+      <img src="/img/blamejs-logo.png" alt="" width="128" height="128">
+    </div>
+    <div class="hero-text">
+      <p class="hero-eyebrow">Apache-2.0</p>
+      <h1 id="hero-title" class="hero-title">BlameJS</h1>
+      <p class="hero-tagline">The Node framework that <span class="hero-em">owns its stack</span>.</p>
+      <p class="hero-sub">Zero npm runtime dependencies. Post-quantum crypto from line zero. Sealed-by-default storage. Audit chain on every operator action.</p>
+      <div class="hero-cta">
+        <a href="#quick-start" class="btn-brand">Quick start</a>
+        <a href="https://github.com/blamejs/blamejs" class="btn-ghost" rel="noopener">View on GitHub</a>
+      </div>
+    </div>
+  </div>
+  <ul class="hero-pills" aria-label="Default posture">
+    <li>Zero npm deps</li>
+    <li>PQC by default</li>
+    <li>Sealed storage</li>
+    <li>Audit chain</li>
+    <li>Server-rendered</li>
+  </ul>
+</section>
+
+<p class="hero-aside">This site is the docs <em>and</em> a working reference app &mdash; every page you read renders through the framework's own primitives.</p>
+
+<h2 id="quick-start">Quick start <a class="anchor" href="#quick-start">#</a></h2>
+<pre><code class="language-bash">npm install @blamejs/core
+node -e 'require("@blamejs/core").createApp({ dataDir: "./data" })'</code></pre>
+
+<p>Or browse the source layout of this very wiki for a full reference app:</p>
+
+<pre><code class="language-javascript">var b = require("@blamejs/core");
+var app = await b.createApp({
+  dataDir: "./data",
+  routes: function (router) {
+    router.get("/", function (req, res) {
+      b.render.htmlString(res, "&lt;h1&gt;Hello from blamejs&lt;/h1&gt;");
+    });
+  },
+});
+await app.listen({ port: 3000 });</code></pre>
+
+<aside class="callout">
+  <p class="callout-title">Note</p>
+  <p>blamejs targets Node.js Active LTS (24+). It uses <code>node:sqlite</code>, <code>Intl.PluralRules</code>, modern <code>crypto</code> primitives, and other recent built-ins. There is no transpilation step.</p>
+</aside>
+
+<h2 id="concern-groups">Concern groups <a class="anchor" href="#concern-groups">#</a></h2>
+<p>Pick the area you're working on:</p>
+
+<div class="card-grid">
+  {% for c in homeCards %}
+    <a href="/{{ c.slug }}" class="card">
+      <h3>{{ c.title }}</h3>
+      <p>{{ c.description }}</p>
+    </a>
+  {% endfor %}
+</div>
+
+<h2 id="design-tenets">Design tenets <a class="anchor" href="#design-tenets">#</a></h2>
+<ul>
+  <li><strong>Zero npm runtime deps.</strong> Every dependency is vendored under <code>lib/vendor/</code> with a manifest pinning version + license + provenance.</li>
+  <li><strong>PQC from the start.</strong> ML-KEM-1024 + P-384 hybrid KEM, XChaCha20-Poly1305 cipher, SHAKE256 KDF, SLH-DSA-SHAKE-256f signatures. No classical-only fallbacks.</li>
+  <li><strong>Sealed-by-default storage.</strong> Every database field except IDs / timestamps / FK references goes through <code>vault.seal()</code> or a derived hash.</li>
+  <li><strong>Audit chain on every operator action.</strong> Login, page edit, cache clear, key rotation — all emit with the 5 W's (WHO / WHAT / WHEN / WHERE / HOW).</li>
+</ul>
+
+<h2 id="thanks">Special thanks <a class="anchor" href="#thanks">#</a></h2>
+<p>blamejs vendors a small set of exceptional third-party libraries. Their work is the foundation the framework is built on — every cryptographic operation, passkey handshake, and certificate the framework signs runs through their code. All MIT-licensed; full attribution lives in <a href="https://github.com/blamejs/blamejs/blob/main/NOTICE">NOTICE</a>.</p>
+<ul>
+  <li><a href="https://github.com/paulmillr">Paul Miller</a> &mdash; <a href="https://github.com/paulmillr/noble-ciphers">@noble/ciphers</a> (XChaCha20-Poly1305 AEAD) and <a href="https://github.com/paulmillr/noble-post-quantum">@noble/post-quantum</a> (FIPS 203 ML-KEM, FIPS 204 ML-DSA, FIPS 205 SLH-DSA &mdash; the pure-JS PQC suite behind <code>b.pqcSoftware</code>)</li>
+  <li><a href="https://github.com/MasterKale">Matthew Miller</a> &mdash; <a href="https://github.com/MasterKale/SimpleWebAuthn">@simplewebauthn/server</a> (WebAuthn / passkey verification)</li>
+  <li><a href="https://github.com/PeculiarVentures">Peculiar Ventures</a> &mdash; <a href="https://github.com/PeculiarVentures/x509">@peculiar/x509</a> + <a href="https://github.com/PeculiarVentures/PKI.js">pkijs</a> (pure-JS X.509 + PKCS#12 stack behind <code>b.mtlsCa</code>)</li>
+  <li><a href="https://github.com/PrismJS/prism">Lea Verou + contributors</a> &mdash; <a href="https://prismjs.com/">Prism</a> (syntax highlighting in the wiki you're reading)</li>
+</ul>
+
+<aside class="callout callout-tip">
+  <p class="callout-title">Tip</p>
+  <p>The wiki is in active migration to a fully source-driven model. The Concepts pages explain the framework's posture; the Reference pages enumerate operator-facing surface auto-harvested from the codebase; the Generated section is the in-progress per-namespace migration of every <code>b.X.Y</code> primitive to source comment blocks.</p>
+</aside>
+{% endblock %}