@cancia/astro 0.7.0 → 0.9.0

package/dist/{chunk-L2VKQJPY.js → chunk-2NVZWZPE.js}

@@ -67,6 +67,52 @@ function hashRev(value) {
 import { readFileSync as readFileSync2, writeFileSync as writeFileSync2, existsSync as existsSync2, mkdirSync as mkdirSync2, readdirSync, rmSync } from "fs";
 import { dirname as dirname2, join } from "path";
 import { randomUUID } from "crypto";
+
+// src/storage/order.ts
+function applyOrder(order, ids) {
+  const result = [];
+  const seen = /* @__PURE__ */ new Set();
+  for (const id of order) {
+    if (ids.has(id)) {
+      result.push(id);
+      seen.add(id);
+    }
+  }
+  const extras = [...ids].filter((id) => !seen.has(id)).sort();
+  return [...result, ...extras];
+}
+function orderAfterCreate(order, id) {
+  return order.includes(id) ? order : [...order, id];
+}
+function orderAfterDelete(order, id, stillExistsElsewhere) {
+  if (stillExistsElsewhere) return order;
+  const next = order.filter((existingId) => existingId !== id);
+  return next.length === order.length ? order : next;
+}
+var UnknownEntryError = class extends Error {
+  constructor(id, listName) {
+    super(`Cannot reorder: entry "${id}" not found in "${listName}"`);
+    this.id = id;
+    this.listName = listName;
+    this.name = "UnknownEntryError";
+  }
+};
+function planReorder(ids, allIds, listName) {
+  for (const id of ids) {
+    if (!allIds.has(id)) throw new UnknownEntryError(id, listName);
+  }
+  const keep = new Set(ids);
+  const dropped = [...allIds].filter((id) => !keep.has(id));
+  return { order: ids, dropped };
+}
+function entryExistsMessage(id, listName, locale) {
+  return `List entry "${id}" already exists in "${listName}" (${locale})`;
+}
+function entryNotFoundMessage(id, listName, locale) {
+  return `List entry "${id}" not found in "${listName}" (${locale})`;
+}
+
+// src/storage/json-file-v2.ts
 function readJsonFile(filePath, fallback) {
   if (!existsSync2(filePath)) return fallback;
   try {
@@ -168,18 +214,6 @@ function makeListStore(listsDir) {
   function writeEntry(site, listName, locale, entry) {
     writeJsonFile(entryPath(listsDir, listName, site, locale, entry.id), entry);
   }
-  function applyOrder(order, ids) {
-    const result = [];
-    const seen = /* @__PURE__ */ new Set();
-    for (const id of order) {
-      if (ids.has(id)) {
-        result.push(id);
-        seen.add(id);
-      }
-    }
-    const extras = [...ids].filter((id) => !seen.has(id)).sort();
-    return [...result, ...extras];
-  }
   return {
     async list(site, listName, locale) {
       const order = readOrder(listsDir, listName, site);
@@ -218,7 +252,7 @@ function makeListStore(listsDir) {
       const finalId = id ?? randomUUID();
       const existing = readEntry(site, listName, finalId, locale);
       if (existing) {
-        throw new Error(`List entry "${finalId}" already exists in "${listName}" (${locale})`);
+        throw new Error(entryExistsMessage(finalId, listName, locale));
       }
       const now = (/* @__PURE__ */ new Date()).toISOString();
       const entry = {
@@ -230,15 +264,14 @@ function makeListStore(listsDir) {
       };
       writeEntry(site, listName, locale, entry);
       const order = readOrder(listsDir, listName, site);
-      if (!order.includes(finalId)) {
-        writeOrder(listsDir, listName, site, [...order, finalId]);
-      }
+      const nextOrder = orderAfterCreate(order, finalId);
+      if (nextOrder !== order) writeOrder(listsDir, listName, site, nextOrder);
       return toEntry(entry);
     },
     async update(site, listName, id, locale, data, rev) {
       const existing = readEntry(site, listName, id, locale);
       if (!existing) {
-        throw new Error(`List entry "${id}" not found in "${listName}" (${locale})`);
+        throw new Error(entryNotFoundMessage(id, listName, locale));
       }
       if (hashRev(existing.data) !== rev) throw new RevConflictError();
       const updated = {
@@ -254,13 +287,9 @@ function makeListStore(listsDir) {
       if (!existsSync2(path)) return;
       rmSync(path);
       const stillExists = listLocales(listsDir, listName, site).some((loc) => existsSync2(entryPath(listsDir, listName, site, loc, id)));
-      if (!stillExists) {
-        const order = readOrder(listsDir, listName, site);
-        const next = order.filter((existingId) => existingId !== id);
-        if (next.length !== order.length) {
-          writeOrder(listsDir, listName, site, next);
-        }
-      }
+      const order = readOrder(listsDir, listName, site);
+      const next = orderAfterDelete(order, id, stillExists);
+      if (next !== order) writeOrder(listsDir, listName, site, next);
     },
     async reorder(site, listName, ids) {
       const locales = listLocales(listsDir, listName, site);
@@ -270,20 +299,14 @@ function makeListStore(listsDir) {
           allIds.add(id);
         }
       }
-      for (const id of ids) {
-        if (!allIds.has(id)) {
-          throw new Error(`Cannot reorder: entry "${id}" not found in "${listName}"`);
-        }
-      }
-      const supplied = new Set(ids);
-      for (const id of allIds) {
-        if (supplied.has(id)) continue;
+      const { order, dropped } = planReorder(ids, allIds, listName);
+      for (const id of dropped) {
         for (const loc of locales) {
           const path = entryPath(listsDir, listName, site, loc, id);
           if (existsSync2(path)) rmSync(path);
         }
       }
-      writeOrder(listsDir, listName, site, ids);
+      writeOrder(listsDir, listName, site, order);
     },
     async translations(site, listName) {
       const locales = listLocales(listsDir, listName, site);
@@ -320,5 +343,11 @@ export {
   createJsonFileAdapter,
   canonicalize,
   hashRev,
+  applyOrder,
+  orderAfterCreate,
+  orderAfterDelete,
+  planReorder,
+  entryExistsMessage,
+  entryNotFoundMessage,
   createJsonFileAdapterV2
 };

package/dist/{chunk-22DJVJBR.js → chunk-DIV2FFYX.js}

@@ -1,6 +1,6 @@
 import {
   loadListSchema
-} from "./chunk-NG5GJME5.js";
+} from "./chunk-VL6FO446.js";
 import {
   RevConflictError
 } from "./chunk-7IA5B5CF.js";

package/dist/{chunk-UR5WC3RA.js → chunk-GBTFXQEA.js}

@@ -1,15 +1,21 @@
 import {
   createJsonFileAdapterV2
-} from "./chunk-L2VKQJPY.js";
+} from "./chunk-2NVZWZPE.js";
+import {
+  isDraft
+} from "./chunk-WVHTCFE6.js";
 
 // src/loader/index.ts
 import { join } from "path";
 function makeId(locale, entryId) {
   return `${locale}/${entryId}`;
 }
-async function syncOnce(ctx, lists, list, site) {
+async function syncOnce(ctx, lists, list, site, schema, includeDrafts) {
   ctx.store.clear();
-  const entries = await lists.list(site, list);
+  const all = await lists.list(site, list);
+  const drafts = schema?.draftField && !includeDrafts ? all.filter((e) => isDraft(schema, e.data)) : [];
+  const draftIds = new Set(drafts.map((e) => `${e.locale}/${e.id}`));
+  const entries = draftIds.size ? all.filter((e) => !draftIds.has(`${e.locale}/${e.id}`)) : all;
   for (const entry of entries) {
     const id = makeId(entry.locale, entry.id);
     const data = {
@@ -24,8 +30,9 @@ async function syncOnce(ctx, lists, list, site) {
       digest: entry._rev
     });
   }
+  const skipped = drafts.length ? ` (${drafts.length} draft${drafts.length === 1 ? "" : "s"} skipped)` : "";
   ctx.logger.info(
-    `cancia: loaded ${entries.length} entr${entries.length === 1 ? "y" : "ies"} from list "${list}"`
+    `cancia: loaded ${entries.length} entr${entries.length === 1 ? "y" : "ies"} from list "${list}"${skipped}`
   );
 }
 function canciaLoader(opts) {
@@ -41,7 +48,7 @@ function canciaLoader(opts) {
         projectRoot: opts.projectRoot ?? process.cwd()
       });
       const { lists } = storage;
-      await syncOnce(ctx, lists, opts.list, opts.site);
+      await syncOnce(ctx, lists, opts.list, opts.site, opts.schema, opts.includeDrafts);
       if (ctx.watcher && !watcherAttached) {
         watcherAttached = true;
         const root = opts.projectRoot ?? process.cwd();
@@ -53,7 +60,14 @@ function canciaLoader(opts) {
             pendingTimer = null;
             inflight = inflight.catch(() => {
             }).then(
-              () => syncOnce(latestCtx, lists, opts.list, opts.site).catch((err) => {
+              () => syncOnce(
+                latestCtx,
+                lists,
+                opts.list,
+                opts.site,
+                opts.schema,
+                opts.includeDrafts
+              ).catch((err) => {
                 latestCtx.logger.error(`cancia: resync failed \u2014 ${err.message}`);
               })
             );

package/dist/chunk-GJIX7MWC.js

@@ -0,0 +1,55 @@
+// src/auth-core.ts
+var MAX_FAILURES = 5;
+var WINDOW_MS = 6e4;
+function createRateLimiter() {
+  return /* @__PURE__ */ new Map();
+}
+function getIp(req) {
+  return req.headers.get("x-forwarded-for")?.split(",")[0].trim() ?? req.headers.get("x-real-ip") ?? "unknown";
+}
+function isRateLimited(limiter, ip, now = Date.now()) {
+  const bucket = limiter.get(ip);
+  if (!bucket || now > bucket.resetAt) return false;
+  return bucket.failures >= MAX_FAILURES;
+}
+function recordFailure(limiter, ip, now = Date.now()) {
+  const bucket = limiter.get(ip);
+  if (!bucket || now > bucket.resetAt) {
+    limiter.set(ip, { failures: 1, resetAt: now + WINDOW_MS });
+  } else {
+    bucket.failures += 1;
+  }
+}
+function clearFailures(limiter, ip) {
+  limiter.delete(ip);
+}
+var json = (body, status) => new Response(JSON.stringify(body), {
+  status,
+  headers: { "Content-Type": "application/json" }
+});
+async function runAuth(cfg) {
+  const { request, secret, limiter } = cfg;
+  const now = cfg.now ?? Date.now();
+  const ip = getIp(request);
+  if (isRateLimited(limiter, ip, now)) {
+    return json({ error: "Too many attempts. Try again in a minute." }, 429);
+  }
+  let token;
+  try {
+    const body = await request.json();
+    token = body?.token;
+  } catch {
+    return json({ error: "Invalid request body" }, 400);
+  }
+  if (!token || !secret || token !== secret) {
+    recordFailure(limiter, ip, now);
+    return json({ error: "Invalid token" }, 401);
+  }
+  clearFailures(limiter, ip);
+  return json({ ok: true }, 200);
+}
+
+export {
+  createRateLimiter,
+  runAuth
+};

package/dist/{chunk-VFMOVGMC.js → chunk-HQIGNRIU.js}

@@ -1,9 +1,9 @@
 import {
   loadSchemas
-} from "./chunk-NG5GJME5.js";
+} from "./chunk-VL6FO446.js";
 import {
   describeList
-} from "./chunk-UMCBQXB6.js";
+} from "./chunk-WVHTCFE6.js";
 
 // src/routes/schemas.ts
 function json(body, status = 200) {

package/dist/{chunk-BOIQNZAO.js → chunk-KHCFVVYV.js}

@@ -53,6 +53,56 @@ var ptBlockSchema = z.object({
   }
 });
 var portableTextSubsetSchema = z.array(ptBlockSchema);
+function parseRichValue(raw) {
+  if (raw == null) return [];
+  let candidate = raw;
+  if (typeof raw === "string") {
+    const trimmed = raw.trim();
+    if (trimmed === "") return [];
+    if (trimmed.startsWith("[")) {
+      try {
+        candidate = JSON.parse(trimmed);
+      } catch {
+        return [];
+      }
+    } else {
+      return [textBlock(raw)];
+    }
+  }
+  if (!Array.isArray(candidate)) return [];
+  const sanitised = candidate.map(stripUnsafeHrefs);
+  const parsed = portableTextSubsetSchema.safeParse(sanitised);
+  return parsed.success ? parsed.data : [];
+}
+function serializeRichValue(value) {
+  return value.length === 0 ? "" : JSON.stringify(value);
+}
+function textBlock(text) {
+  return {
+    _type: "block",
+    _key: "legacy",
+    style: "normal",
+    markDefs: [],
+    children: [{ _type: "span", _key: "legacy0", text, marks: [] }]
+  };
+}
+function stripUnsafeHrefs(block) {
+  if (!block || typeof block !== "object") return block;
+  const b = block;
+  if (!Array.isArray(b.markDefs)) return block;
+  const dropped = /* @__PURE__ */ new Set();
+  const markDefs = b.markDefs.filter((def) => {
+    const href = def?.href;
+    if (typeof href === "string" && isSafeHref(href)) return true;
+    if (typeof def?._key === "string") dropped.add(def._key);
+    return false;
+  });
+  if (dropped.size === 0) return block;
+  const children = Array.isArray(b.children) ? b.children.map(
+    (span) => Array.isArray(span?.marks) ? { ...span, marks: span.marks.filter((m) => !dropped.has(m)) } : span
+  ) : b.children;
+  return { ...b, markDefs, children };
+}
 
 export {
   PT_STYLES,
@@ -60,5 +110,7 @@ export {
   PT_DECORATORS,
   isSafeHref,
   ptBlockSchema,
-  portableTextSubsetSchema
+  portableTextSubsetSchema,
+  parseRichValue,
+  serializeRichValue
 };

package/dist/{chunk-AGNPUTKS.js → chunk-LJSSPOSW.js}

@@ -5,11 +5,11 @@ import {
 import {
   createGitBackedAdapter,
   createSqliteAdapterV2
-} from "./chunk-GNWD7EL2.js";
+} from "./chunk-MXVOJRAM.js";
 import {
   createJsonFileAdapter,
   createJsonFileAdapterV2
-} from "./chunk-L2VKQJPY.js";
+} from "./chunk-2NVZWZPE.js";
 
 // src/routes/upload.ts
 import { writeFile, mkdir } from "fs/promises";

package/dist/{chunk-GNWD7EL2.js → chunk-MXVOJRAM.js}

@@ -2,8 +2,14 @@ import {
   createGitHubClient
 } from "./chunk-U7V53JX7.js";
 import {
-  hashRev
-} from "./chunk-L2VKQJPY.js";
+  applyOrder,
+  entryExistsMessage,
+  entryNotFoundMessage,
+  hashRev,
+  orderAfterCreate,
+  orderAfterDelete,
+  planReorder
+} from "./chunk-2NVZWZPE.js";
 import {
   RevConflictError
 } from "./chunk-7IA5B5CF.js";
@@ -119,18 +125,6 @@ function rowToEntry(row) {
     _rev: hashRev(data)
   };
 }
-function applyOrder(order, ids) {
-  const result = [];
-  const seen = /* @__PURE__ */ new Set();
-  for (const id of order) {
-    if (ids.has(id)) {
-      result.push(id);
-      seen.add(id);
-    }
-  }
-  const extras = [...ids].filter((id) => !seen.has(id)).sort();
-  return [...result, ...extras];
-}
 function makeListStore(db) {
   const getOrderStmt = db.prepare("SELECT ids FROM list_order WHERE site=? AND list=?");
   const upsertOrderStmt = db.prepare(
@@ -178,32 +172,25 @@ function makeListStore(db) {
     (site, listName, id, locale, dataJson, now) => {
       insertEntryStmt.run(site, listName, id, locale, dataJson, now, now);
       const order = readOrder(site, listName);
-      if (!order.includes(id)) {
-        writeOrder(site, listName, [...order, id]);
-      }
+      const next = orderAfterCreate(order, id);
+      if (next !== order) writeOrder(site, listName, next);
     }
   );
   const deleteTx = db.transaction((site, listName, id, locale) => {
     deleteEntryStmt.run(site, listName, id, locale);
     const stillExists = distinctIds(site, listName).has(id);
-    if (!stillExists) {
-      const order = readOrder(site, listName);
-      const next = order.filter((existingId) => existingId !== id);
-      if (next.length !== order.length) {
-        writeOrder(site, listName, next);
-      }
-    }
+    const order = readOrder(site, listName);
+    const next = orderAfterDelete(order, id, stillExists);
+    if (next !== order) writeOrder(site, listName, next);
   });
-  const reorderTx = db.transaction((site, listName, ids) => {
-    const all = distinctIds(site, listName);
-    const supplied = new Set(ids);
-    for (const id of all) {
-      if (!supplied.has(id)) {
+  const reorderTx = db.transaction(
+    (site, listName, order, dropped) => {
+      for (const id of dropped) {
         deleteEntryAllLocalesStmt.run(site, listName, id);
       }
+      writeOrder(site, listName, order);
     }
-    writeOrder(site, listName, ids);
-  });
+  );
   return {
     async list(site, listName, locale) {
       const order = readOrder(site, listName);
@@ -244,7 +231,7 @@ function makeListStore(db) {
       const finalId = id ?? randomUUID();
       const existing = getEntryStmt.get(site, listName, finalId, locale);
       if (existing) {
-        throw new Error(`List entry "${finalId}" already exists in "${listName}" (${locale})`);
+        throw new Error(entryExistsMessage(finalId, listName, locale));
       }
       const now = (/* @__PURE__ */ new Date()).toISOString();
       createTx(site, listName, finalId, locale, JSON.stringify(data), now);
@@ -260,7 +247,7 @@ function makeListStore(db) {
     async update(site, listName, id, locale, data, rev) {
       const existing = getEntryStmt.get(site, listName, id, locale);
       if (!existing) {
-        throw new Error(`List entry "${id}" not found in "${listName}" (${locale})`);
+        throw new Error(entryNotFoundMessage(id, listName, locale));
       }
       const existingData = JSON.parse(existing.data);
       if (hashRev(existingData) !== rev) throw new RevConflictError();
@@ -282,12 +269,8 @@ function makeListStore(db) {
     },
     async reorder(site, listName, ids) {
       const all = distinctIds(site, listName);
-      for (const id of ids) {
-        if (!all.has(id)) {
-          throw new Error(`Cannot reorder: entry "${id}" not found in "${listName}"`);
-        }
-      }
-      reorderTx(site, listName, ids);
+      const { order, dropped } = planReorder(ids, all, listName);
+      reorderTx(site, listName, order, dropped);
     },
     async translations(site, listName) {
       const rows = allEntriesStmt.all(site, listName);

package/dist/{chunk-NG5GJME5.js → chunk-VL6FO446.js}

@@ -32,8 +32,15 @@ async function loadListSchema(projectRoot, listName, overridePath) {
   const schemas = await loadSchemas(projectRoot, overridePath);
   return schemas[listName] ?? null;
 }
+function clearSchemaCache() {
+  _cache = null;
+  _cachedPath = null;
+  _cachedMtime = 0;
+}
 
 export {
+  resolveSchemasPath,
   loadSchemas,
-  loadListSchema
+  loadListSchema,
+  clearSchemaCache
 };

package/dist/{chunk-UMCBQXB6.js → chunk-WVHTCFE6.js}

@@ -1,10 +1,14 @@
 import {
   isSafeHref,
   portableTextSubsetSchema
-} from "./chunk-BOIQNZAO.js";
+} from "./chunk-KHCFVVYV.js";
 
 // src/schema/index.ts
 import { z } from "zod";
+function isDraft(schema, data) {
+  if (!schema.draftField) return false;
+  return data[schema.draftField] === true;
+}
 function defineList(opts) {
   return {
     label: opts.label,
@@ -12,6 +16,7 @@ function defineList(opts) {
     titleField: opts.titleField,
     bodyField: opts.bodyField,
     slugField: opts.slugField,
+    draftField: opts.draftField,
     fields: opts.fields,
     validator: z.object(opts.fields)
   };
@@ -23,6 +28,15 @@ var defineField = {
   email: (o) => z.string().email().meta({ widget: "email", ...o }),
   datetime: (o) => z.string().datetime().meta({ widget: "datetime", ...o }),
   checkbox: (o) => z.boolean().meta({ widget: "checkbox", ...o }),
+  /**
+   * The draft flag for a list's `draftField`. A checkbox that DEFAULTS to
+   * false, which is what makes it safe to add to an existing list: every
+   * stored entry that predates the field validates and reads as published
+   * rather than vanishing from the built site.
+   *
+   * Label defaults to "Draft" so the affordance reads the same on every list.
+   */
+  draft: (o) => z.boolean().default(false).meta({ widget: "checkbox", label: "Draft", ...o }),
   number: (o) => {
     let n = z.number();
     if (o?.min != null) n = n.min(o.min);
@@ -167,6 +181,7 @@ function describeList(name, schema) {
     titleField: schema.titleField,
     bodyField: schema.bodyField,
     slugField: schema.slugField,
+    draftField: schema.draftField,
     fields
   };
 }
@@ -202,6 +217,7 @@ function isExternalHref(href) {
 
 export {
   z,
+  isDraft,
   defineList,
   defineField,
   slugify,

package/dist/content.d.ts

@@ -9,6 +9,20 @@ interface LinkValue {
 }
 /** Resolve a link field, falling back to the values authored in the page. */
 type TranslateLink = (key: string, fallback: LinkValue) => LinkValue;
+/**
+ * Resolve a rich-text region (plan 051).
+ *
+ * Returns `null` when there is NO stored override — which the region renders as
+ * "show the markup authored in the page". That is deliberate and load-bearing:
+ * a rich fallback cannot be a JS string, so the authored markup IS the fallback,
+ * which is what keeps an empty DB rendering byte-identically.
+ *
+ * `[]` is a different answer from `null`: it means a stored, deliberately empty
+ * value — the client removed the prose on purpose — and renders nothing.
+ */
+type TranslateRich = (key: string) => RichValue | null;
+/** A Portable-Text subset document. Structurally typed to keep this subpath Vite-free. */
+type RichValue = Record<string, unknown>[];
 interface ContentReaderOptions {
     /** Site id (the `?site=` query param and the storage `site` column). */
     site: string;
@@ -57,10 +71,18 @@ interface ContentReader {
      * authored in the page. Never throws; drops an unsafe href.
      */
     makeTLink(cms: ContentMap): TranslateLink;
-    /** Sugar: `const { t, tLink, cms } = await reader.get()` in frontmatter. */
+    /**
+     * Build a rich-text resolver over a content map. Returns `null` when no
+     * override is stored, which a rich region renders as "show the markup
+     * authored in the page" — the reason an empty DB still renders identically.
+     * `[]` means a stored, deliberately empty value and renders nothing.
+     */
+    makeRich(cms: ContentMap): TranslateRich;
+    /** Sugar: `const { t, tLink, tRich, cms } = await reader.get()` in frontmatter. */
     get(): Promise<{
         t: Translate;
         tLink: TranslateLink;
+        tRich: TranslateRich;
         cms: ContentMap;
     }>;
 }
@@ -71,4 +93,4 @@ interface ContentReader {
  */
 declare function createContentReader(opts: ContentReaderOptions): ContentReader;
 
-export { type ContentMap, type ContentReader, type ContentReaderOptions, type LinkValue, type Translate, type TranslateLink, createContentReader };
+export { type ContentMap, type ContentReader, type ContentReaderOptions, type LinkValue, type RichValue, type Translate, type TranslateLink, type TranslateRich, createContentReader };

package/dist/content.js

@@ -2,9 +2,9 @@ import "./chunk-FOSOWSXV.js";
 import "./chunk-CJDIVWO3.js";
 import {
   createSqliteAdapterV2
-} from "./chunk-GNWD7EL2.js";
+} from "./chunk-MXVOJRAM.js";
 import "./chunk-U7V53JX7.js";
-import "./chunk-L2VKQJPY.js";
+import "./chunk-2NVZWZPE.js";
 import "./chunk-7IA5B5CF.js";
 
 // src/content.ts
@@ -37,6 +37,46 @@ function parseLink(raw, fallback) {
   }
   return { label: raw, href: fallback.href };
 }
+function parseRich(raw) {
+  if (raw === void 0) return null;
+  const trimmed = raw.trim();
+  if (trimmed === "") return [];
+  if (!trimmed.startsWith("[")) {
+    return [
+      {
+        _type: "block",
+        _key: "legacy",
+        style: "normal",
+        markDefs: [],
+        children: [{ _type: "span", _key: "legacy0", text: raw, marks: [] }]
+      }
+    ];
+  }
+  try {
+    const parsed = JSON.parse(trimmed);
+    if (!Array.isArray(parsed)) return [];
+    return parsed.map(stripUnsafeMarkDefs);
+  } catch {
+    return [];
+  }
+}
+function stripUnsafeMarkDefs(block) {
+  if (!block || typeof block !== "object") return block;
+  const b = block;
+  if (!Array.isArray(b.markDefs)) return block;
+  const dropped = /* @__PURE__ */ new Set();
+  const markDefs = b.markDefs.filter((def) => {
+    const href = def?.href;
+    if (typeof href === "string" && isSafeHref(href)) return true;
+    if (typeof def?._key === "string") dropped.add(def._key);
+    return false;
+  });
+  if (dropped.size === 0) return block;
+  const children = Array.isArray(b.children) ? b.children.map(
+    (span) => Array.isArray(span?.marks) ? { ...span, marks: span.marks.filter((m) => !dropped.has(m)) } : span
+  ) : b.children;
+  return { ...b, markDefs, children };
+}
 function createContentReader(opts) {
   const site = opts.site;
   const lang = opts.lang ?? "en";
@@ -73,11 +113,14 @@ function createContentReader(opts) {
   function makeTLink(cms) {
     return (key, fallback) => parseLink(cms[`${key}.${lang}`], fallback);
   }
+  function makeRich(cms) {
+    return (key) => parseRich(cms[`${key}.${lang}`]);
+  }
   async function get() {
     const cms = await getCMS();
-    return { t: makeT(cms), tLink: makeTLink(cms), cms };
+    return { t: makeT(cms), tLink: makeTLink(cms), tRich: makeRich(cms), cms };
   }
-  return { getCMS, makeT, makeTLink, get };
+  return { getCMS, makeT, makeTLink, makeRich, get };
 }
 export {
   createContentReader