@caretcms/core 0.1.2 → 0.2.0

package/dist/loader.js

@@ -1,8 +1,8 @@
 /**
  * Astro LiveLoader backed by the configured StorageAdapter.
  *
- * Compatible with Astro 6 (stable live content collections) and Astro 5.10+
- * (where the feature lives behind `experimental.liveContentCollections`).
+ * Compatible with Astro 6 and 7 (stable live content collections). On Astro 7
+ * the loader also attaches `cacheHint` tags for publish-time purging.
  *
  * Usage in src/caret.config.ts:
  *
@@ -16,6 +16,7 @@
  */
 import { getRequestContext, requireRequestContext, } from "./runtime/request-context.js";
 import { stegaCombine } from "./runtime/stega.js";
+import { stripBodyOverlay } from "./runtime/utils.js";
 export class CaretLoaderError extends Error {
     constructor(message, cause) {
         super(message);
@@ -70,9 +71,15 @@ function requireAdapter() {
             "(the integration registers it with order: 'pre').", cause);
     }
 }
+/** Cache tags for a collection / entry: publishing can purge by these (Astro 7). */
+const collectionTag = (collection) => `caret:${collection}`;
+const entryTags = (collection, id) => [
+    `caret:${collection}`,
+    `caret:${collection}::${id}`,
+];
 /**
  * Create an Astro LiveLoader that reads from the configured StorageAdapter.
- * Works on Astro 6 (stable) and Astro 5.10+ (experimental flag required).
+ * Works on Astro 6 and 7.
  *
  * @param collection - The collection name (must be known to the adapter).
  */
@@ -86,10 +93,15 @@ export function caretLoader(collection) {
                 const entry = await adapter.getEntry(collection, id);
                 if (!entry)
                     return undefined;
-                const data = isEditorRequest()
-                    ? encodeEntryData(collection, entry.id, entry.data)
-                    : entry.data;
-                return { id: entry.id, data };
+                const editor = isEditorRequest();
+                const clean = stripBodyOverlay(entry.data);
+                const data = editor ? encodeEntryData(collection, entry.id, clean) : clean;
+                const result = { id: entry.id, data };
+                // Published content is cache-taggable so a publish can purge it by tag.
+                // Editor/draft requests get NO hint — edits must show immediately.
+                if (!editor)
+                    result.cacheHint = { tags: entryTags(collection, entry.id) };
+                return result;
             }
             catch (error) {
                 return {
@@ -102,14 +114,21 @@ export function caretLoader(collection) {
                 const adapter = requireAdapter();
                 const allEntries = await adapter.listEntries(collection);
                 const editor = isEditorRequest();
-                return {
-                    entries: allEntries.map((entry) => ({
+                const entries = allEntries.map((entry) => {
+                    const clean = stripBodyOverlay(entry.data);
+                    const mapped = {
                         id: entry.id,
-                        data: editor
-                            ? encodeEntryData(collection, entry.id, entry.data)
-                            : entry.data,
-                    })),
-                };
+                        data: editor ? encodeEntryData(collection, entry.id, clean) : clean,
+                    };
+                    if (!editor)
+                        mapped.cacheHint = { tags: entryTags(collection, entry.id) };
+                    return mapped;
+                });
+                const result = { entries };
+                // Collection-level tag (merged with per-entry tags by Astro); drafts unhinted.
+                if (!editor)
+                    result.cacheHint = { tags: [collectionTag(collection)] };
+                return result;
             }
             catch (error) {
                 return {

package/dist/loader.js.map

@@ -1 +1 @@
-{"version":3,"file":"loader.js","sourceRoot":"","sources":["../src/loader.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAGH,OAAO,EACL,iBAAiB,EACjB,qBAAqB,GACtB,MAAM,8BAA8B,CAAC;AACtC,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAElD,MAAM,OAAO,gBAAiB,SAAQ,KAAK;IACzC,YAAY,OAAe,EAAE,KAAe;QAC1C,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,kBAAkB,CAAC;QAC/B,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACvB,IAAoC,CAAC,KAAK,GAAG,KAAK,CAAC;QACtD,CAAC;IACH,CAAC;CACF;AAED;;;;;;;;GAQG;AACH,SAAS,eAAe,CACtB,UAAkB,EAClB,EAAU,EACV,IAA6B;IAE7B,MAAM,IAAI,GAAG,CAAC,KAAc,EAAE,IAAY,EAAW,EAAE;QACrD,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC9B,OAAO,YAAY,CAAC,KAAK,EAAE,GAAG,UAAU,KAAK,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC;QAC9D,CAAC;QACD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YACzB,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,IAAI,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;QAC5D,CAAC;QACD,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YACvC,MAAM,GAAG,GAA4B,EAAE,CAAC;YACxC,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAgC,CAAC,EAAE,CAAC;gBACtE,GAAG,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,EAAE,GAAG,IAAI,IAAI,CAAC,EAAE,CAAC,CAAC;YACnC,CAAC;YACD,OAAO,GAAG,CAAC;QACb,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC,CAAC;IAEF,MAAM,GAAG,GAA4B,EAAE,CAAC;IACxC,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC;QAAE,GAAG,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IAC/D,OAAO,GAAG,CAAC;AACb,CAAC;AAED,8EAA8E;AAC9E,SAAS,eAAe;IACtB,OAAO,iBAAiB,EAAE,EAAE,MAAM,KAAK,IAAI,CAAC;AAC9C,CAAC;AAED,SAAS,cAAc;IACrB,IAAI,CAAC;QACH,OAAO,qBAAqB,EAAE,CAAC,OAAO,CAAC;IACzC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,gBAAgB,CACxB,kCAAkC;YAChC,8DAA8D;YAC9D,mDAAmD,EACrD,KAAK,CACN,CAAC;IACJ,CAAC;AACH,CAAC;AA2CD;;;;;GAKG;AACH,MAAM,UAAU,WAAW,CACzB,UAAkB;IAElB,OAAO;QACL,IAAI,EAAE,SAAS,UAAU,EAAE;QAE3B,KAAK,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE;YACxB,IAAI,CAAC;gBACH,MAAM,OAAO,GAAG,cAAc,EAAE,CAAC;gBACjC,MAAM,EAAE,GAAG,MAAM,CAAC,EAAE,CAAC;gBACrB,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,QAAQ,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;gBACrD,IAAI,CAAC,KAAK;oBAAE,OAAO,SAAS,CAAC;gBAC7B,MAAM,IAAI,GAAG,eAAe,EAAE;oBAC5B,CAAC,CAAC,eAAe,CAAC,UAAU,EAAE,KAAK,CAAC,EAAE,EAAE,KAAK,CAAC,IAAI,CAAC;oBACnD,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC;gBACf,OAAO,EAAE,EAAE,EAAE,KAAK,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC;YAChC,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,OAAO;oBACL,KAAK,EAAE,IAAI,gBAAgB,CACzB,wBAAwB,UAAU,KAAK,MAAM,CAAC,EAAE,EAAE,EAClD,KAAK,CACN;iBACF,CAAC;YACJ,CAAC;QACH,CAAC;QAED,KAAK,CAAC,cAAc;YAClB,IAAI,CAAC;gBACH,MAAM,OAAO,GAAG,cAAc,EAAE,CAAC;gBACjC,MAAM,UAAU,GAAgB,MAAM,OAAO,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC;gBACtE,MAAM,MAAM,GAAG,eAAe,EAAE,CAAC;gBACjC,OAAO;oBACL,OAAO,EAAE,UAAU,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;wBAClC,EAAE,EAAE,KAAK,CAAC,EAAE;wBACZ,IAAI,EAAE,MAAM;4BACV,CAAC,CAAC,eAAe,CAAC,UAAU,EAAE,KAAK,CAAC,EAAE,EAAE,KAAK,CAAC,IAAI,CAAC;4BACnD,CAAC,CAAC,KAAK,CAAC,IAAI;qBACf,CAAC,CAAC;iBACJ,CAAC;YACJ,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,OAAO;oBACL,KAAK,EAAE,IAAI,gBAAgB,CACzB,6BAA6B,UAAU,EAAE,EACzC,KAAK,CACN;iBACF,CAAC;YACJ,CAAC;QACH,CAAC;KACF,CAAC;AACJ,CAAC"}
+{"version":3,"file":"loader.js","sourceRoot":"","sources":["../src/loader.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAGH,OAAO,EACL,iBAAiB,EACjB,qBAAqB,GACtB,MAAM,8BAA8B,CAAC;AACtC,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AAEtD,MAAM,OAAO,gBAAiB,SAAQ,KAAK;IACzC,YAAY,OAAe,EAAE,KAAe;QAC1C,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,kBAAkB,CAAC;QAC/B,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACvB,IAAoC,CAAC,KAAK,GAAG,KAAK,CAAC;QACtD,CAAC;IACH,CAAC;CACF;AAED;;;;;;;;GAQG;AACH,SAAS,eAAe,CACtB,UAAkB,EAClB,EAAU,EACV,IAA6B;IAE7B,MAAM,IAAI,GAAG,CAAC,KAAc,EAAE,IAAY,EAAW,EAAE;QACrD,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC9B,OAAO,YAAY,CAAC,KAAK,EAAE,GAAG,UAAU,KAAK,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC;QAC9D,CAAC;QACD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YACzB,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,IAAI,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;QAC5D,CAAC;QACD,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YACvC,MAAM,GAAG,GAA4B,EAAE,CAAC;YACxC,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAgC,CAAC,EAAE,CAAC;gBACtE,GAAG,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,EAAE,GAAG,IAAI,IAAI,CAAC,EAAE,CAAC,CAAC;YACnC,CAAC;YACD,OAAO,GAAG,CAAC;QACb,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC,CAAC;IAEF,MAAM,GAAG,GAA4B,EAAE,CAAC;IACxC,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC;QAAE,GAAG,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IAC/D,OAAO,GAAG,CAAC;AACb,CAAC;AAED,8EAA8E;AAC9E,SAAS,eAAe;IACtB,OAAO,iBAAiB,EAAE,EAAE,MAAM,KAAK,IAAI,CAAC;AAC9C,CAAC;AAED,SAAS,cAAc;IACrB,IAAI,CAAC;QACH,OAAO,qBAAqB,EAAE,CAAC,OAAO,CAAC;IACzC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,gBAAgB,CACxB,kCAAkC;YAChC,8DAA8D;YAC9D,mDAAmD,EACrD,KAAK,CACN,CAAC;IACJ,CAAC;AACH,CAAC;AA6BD,oFAAoF;AACpF,MAAM,aAAa,GAAG,CAAC,UAAkB,EAAE,EAAE,CAAC,SAAS,UAAU,EAAE,CAAC;AACpE,MAAM,SAAS,GAAG,CAAC,UAAkB,EAAE,EAAU,EAAE,EAAE,CAAC;IACpD,SAAS,UAAU,EAAE;IACrB,SAAS,UAAU,KAAK,EAAE,EAAE;CAC7B,CAAC;AA4BF;;;;;GAKG;AACH,MAAM,UAAU,WAAW,CACzB,UAAkB;IAElB,OAAO;QACL,IAAI,EAAE,SAAS,UAAU,EAAE;QAE3B,KAAK,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE;YACxB,IAAI,CAAC;gBACH,MAAM,OAAO,GAAG,cAAc,EAAE,CAAC;gBACjC,MAAM,EAAE,GAAG,MAAM,CAAC,EAAE,CAAC;gBACrB,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,QAAQ,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;gBACrD,IAAI,CAAC,KAAK;oBAAE,OAAO,SAAS,CAAC;gBAC7B,MAAM,MAAM,GAAG,eAAe,EAAE,CAAC;gBACjC,MAAM,KAAK,GAAG,gBAAgB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;gBAC3C,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,CAAC,eAAe,CAAC,UAAU,EAAE,KAAK,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;gBAC3E,MAAM,MAAM,GAAuB,EAAE,EAAE,EAAE,KAAK,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC;gBAC1D,wEAAwE;gBACxE,mEAAmE;gBACnE,IAAI,CAAC,MAAM;oBAAE,MAAM,CAAC,SAAS,GAAG,EAAE,IAAI,EAAE,SAAS,CAAC,UAAU,EAAE,KAAK,CAAC,EAAE,CAAC,EAAE,CAAC;gBAC1E,OAAO,MAAM,CAAC;YAChB,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,OAAO;oBACL,KAAK,EAAE,IAAI,gBAAgB,CACzB,wBAAwB,UAAU,KAAK,MAAM,CAAC,EAAE,EAAE,EAClD,KAAK,CACN;iBACF,CAAC;YACJ,CAAC;QACH,CAAC;QAED,KAAK,CAAC,cAAc;YAClB,IAAI,CAAC;gBACH,MAAM,OAAO,GAAG,cAAc,EAAE,CAAC;gBACjC,MAAM,UAAU,GAAgB,MAAM,OAAO,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC;gBACtE,MAAM,MAAM,GAAG,eAAe,EAAE,CAAC;gBACjC,MAAM,OAAO,GAAyB,UAAU,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE;oBAC7D,MAAM,KAAK,GAAG,gBAAgB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;oBAC3C,MAAM,MAAM,GAAuB;wBACjC,EAAE,EAAE,KAAK,CAAC,EAAE;wBACZ,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,eAAe,CAAC,UAAU,EAAE,KAAK,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK;qBACpE,CAAC;oBACF,IAAI,CAAC,MAAM;wBAAE,MAAM,CAAC,SAAS,GAAG,EAAE,IAAI,EAAE,SAAS,CAAC,UAAU,EAAE,KAAK,CAAC,EAAE,CAAC,EAAE,CAAC;oBAC1E,OAAO,MAAM,CAAC;gBAChB,CAAC,CAAC,CAAC;gBACH,MAAM,MAAM,GAA4B,EAAE,OAAO,EAAE,CAAC;gBACpD,+EAA+E;gBAC/E,IAAI,CAAC,MAAM;oBAAE,MAAM,CAAC,SAAS,GAAG,EAAE,IAAI,EAAE,CAAC,aAAa,CAAC,UAAU,CAAC,CAAC,EAAE,CAAC;gBACtE,OAAO,MAAM,CAAC;YAChB,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,OAAO;oBACL,KAAK,EAAE,IAAI,gBAAgB,CACzB,6BAA6B,UAAU,EAAE,EACzC,KAAK,CACN;iBACF,CAAC;YACJ,CAAC;QACH,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/markdown/block-context.d.ts

@@ -0,0 +1,21 @@
+/**
+ * Derive a block's serialization context from its SOURCE, not from client
+ * claims. A forged context could change a block's type (paragraph -> heading)
+ * or smuggle a hard break into a container-nested block (corrupting `> `/list
+ * structure on publish), so both facts are read off the canonical body at the
+ * verified source range instead of being accepted from the request.
+ */
+import type { BlockContext } from "./serialize.js";
+import type { MdSrc } from "./contracts.js";
+/**
+ * Block context for the range `src` in `canonical` (the canonical body the
+ * range was hash-verified against):
+ *
+ * - Heading when the slice starts with ATX markers — the level comes from the
+ *   marker count (heading ranges include their `#`s).
+ * - Otherwise a paragraph; `nested` is true when anything (a `> ` marker, list
+ *   indent) precedes the range on its line — nested blocks are single-line by
+ *   the stamping contract, and `nested` makes the serializer refuse `<br>`.
+ */
+export declare function deriveBlockContext(canonical: string, src: MdSrc): BlockContext;
+//# sourceMappingURL=block-context.d.ts.map

package/dist/markdown/block-context.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"block-context.d.ts","sourceRoot":"","sources":["../../src/markdown/block-context.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AACnD,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,gBAAgB,CAAC;AAI5C;;;;;;;;;GASG;AACH,wBAAgB,kBAAkB,CAAC,SAAS,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK,GAAG,YAAY,CAO9E"}

package/dist/markdown/block-context.js

@@ -0,0 +1,27 @@
+/**
+ * Derive a block's serialization context from its SOURCE, not from client
+ * claims. A forged context could change a block's type (paragraph -> heading)
+ * or smuggle a hard break into a container-nested block (corrupting `> `/list
+ * structure on publish), so both facts are read off the canonical body at the
+ * verified source range instead of being accepted from the request.
+ */
+const HEADING_RE = /^(#{1,6})[ \t]/;
+/**
+ * Block context for the range `src` in `canonical` (the canonical body the
+ * range was hash-verified against):
+ *
+ * - Heading when the slice starts with ATX markers — the level comes from the
+ *   marker count (heading ranges include their `#`s).
+ * - Otherwise a paragraph; `nested` is true when anything (a `> ` marker, list
+ *   indent) precedes the range on its line — nested blocks are single-line by
+ *   the stamping contract, and `nested` makes the serializer refuse `<br>`.
+ */
+export function deriveBlockContext(canonical, src) {
+    const slice = canonical.slice(src.start, src.end);
+    const heading = HEADING_RE.exec(slice);
+    if (heading)
+        return { block: "heading", level: heading[1].length };
+    const lineStart = canonical.lastIndexOf("\n", src.start - 1) + 1;
+    return { block: "paragraph", nested: lineStart < src.start };
+}
+//# sourceMappingURL=block-context.js.map

package/dist/markdown/block-context.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"block-context.js","sourceRoot":"","sources":["../../src/markdown/block-context.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAKH,MAAM,UAAU,GAAG,gBAAgB,CAAC;AAEpC;;;;;;;;;GASG;AACH,MAAM,UAAU,kBAAkB,CAAC,SAAiB,EAAE,GAAU;IAC9D,MAAM,KAAK,GAAG,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,CAAC,GAAG,CAAC,CAAC;IAClD,MAAM,OAAO,GAAG,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACvC,IAAI,OAAO;QAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;IAEnE,MAAM,SAAS,GAAG,SAAS,CAAC,WAAW,CAAC,IAAI,EAAE,GAAG,CAAC,KAAK,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC;IACjE,OAAO,EAAE,KAAK,EAAE,WAAW,EAAE,MAAM,EAAE,SAAS,GAAG,GAAG,CAAC,KAAK,EAAE,CAAC;AAC/D,CAAC"}

package/dist/markdown/canonical-body.d.ts

@@ -0,0 +1,30 @@
+/**
+ * Canonical body base for markdown block offsets.
+ *
+ * Astro feeds the markdown processor a DIFFERENT source string per render path
+ * (verified against Astro 7.0.6): direct `.md` imports blank the frontmatter
+ * with equal-length whitespace, while content collections strip the
+ * frontmatter and `.trim()` the body. Raw mdast offsets are therefore not
+ * portable. Every `data-caret-md-src` offset is instead defined against ONE
+ * canonical base — the frontmatter-stripped, trimmed body — so the stamping
+ * plugin (any pipeline) and the server splicer agree on coordinates.
+ *
+ * Plugin side: `canonicalOffset = nodeOffset - (source.length - source.trimStart().length)`.
+ * Server side: this module maps canonical offsets back to file offsets for the
+ * publish splice.
+ */
+export interface CanonicalBody {
+    /** The frontmatter-stripped, trimmed body — the offset base. */
+    body: string;
+    /** Map a canonical body offset to an absolute offset in the source file. */
+    fileOffsetOf: (canonicalOffset: number) => number;
+}
+/**
+ * Derive the canonical body and its offset mapping from a full source file.
+ *
+ * `body === fileSource.slice(bodyStart).trim()`, and `fileOffsetOf(0)` is the
+ * first non-whitespace byte after the frontmatter fence. Trailing-whitespace
+ * trimming does not affect the mapping (it only shortens `body`).
+ */
+export declare function canonicalBody(fileSource: string): CanonicalBody;
+//# sourceMappingURL=canonical-body.d.ts.map

package/dist/markdown/canonical-body.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"canonical-body.d.ts","sourceRoot":"","sources":["../../src/markdown/canonical-body.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,MAAM,WAAW,aAAa;IAC5B,gEAAgE;IAChE,IAAI,EAAE,MAAM,CAAC;IACb,4EAA4E;IAC5E,YAAY,EAAE,CAAC,eAAe,EAAE,MAAM,KAAK,MAAM,CAAC;CACnD;AAwBD;;;;;;GAMG;AACH,wBAAgB,aAAa,CAAC,UAAU,EAAE,MAAM,GAAG,aAAa,CAS/D"}

package/dist/markdown/canonical-body.js

@@ -0,0 +1,54 @@
+/**
+ * Canonical body base for markdown block offsets.
+ *
+ * Astro feeds the markdown processor a DIFFERENT source string per render path
+ * (verified against Astro 7.0.6): direct `.md` imports blank the frontmatter
+ * with equal-length whitespace, while content collections strip the
+ * frontmatter and `.trim()` the body. Raw mdast offsets are therefore not
+ * portable. Every `data-caret-md-src` offset is instead defined against ONE
+ * canonical base — the frontmatter-stripped, trimmed body — so the stamping
+ * plugin (any pipeline) and the server splicer agree on coordinates.
+ *
+ * Plugin side: `canonicalOffset = nodeOffset - (source.length - source.trimStart().length)`.
+ * Server side: this module maps canonical offsets back to file offsets for the
+ * publish splice.
+ */
+/**
+ * Frontmatter fence matcher, MIRRORING Astro's own
+ * (`@astrojs/internal-helpers/dist/frontmatter.js` `frontmatterRE`) byte for
+ * byte. This must agree with what Astro strips before rendering — a stricter
+ * hand-rolled detector diverged on three legal shapes (UTF-8 BOM before the
+ * fence, blank lines before the fence, a `----` close line whose first three
+ * chars satisfy Astro's close) and every body save on such files 409'd as
+ * "stale" because plugin-side and server-side offsets disagreed.
+ */
+const ASTRO_FRONTMATTER_RE = /(?:^\uFEFF?|^\s*\n)(?:---|\+\+\+)([\s\S]*?\n)(?:---|\+\+\+)/;
+/**
+ * Byte offset where the markdown body begins (0 when there is no frontmatter
+ * fence) — everything Astro's stripper would remove, including any BOM or
+ * leading blank lines consumed by its match.
+ */
+function bodyOffset(source) {
+    const match = ASTRO_FRONTMATTER_RE.exec(source);
+    if (!match)
+        return 0;
+    return match.index + match[0].length;
+}
+/**
+ * Derive the canonical body and its offset mapping from a full source file.
+ *
+ * `body === fileSource.slice(bodyStart).trim()`, and `fileOffsetOf(0)` is the
+ * first non-whitespace byte after the frontmatter fence. Trailing-whitespace
+ * trimming does not affect the mapping (it only shortens `body`).
+ */
+export function canonicalBody(fileSource) {
+    const start = bodyOffset(fileSource);
+    const afterFm = fileSource.slice(start);
+    const leading = afterFm.length - afterFm.trimStart().length;
+    const base = start + leading;
+    return {
+        body: afterFm.trim(),
+        fileOffsetOf: (canonicalOffset) => base + canonicalOffset,
+    };
+}
+//# sourceMappingURL=canonical-body.js.map

package/dist/markdown/canonical-body.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"canonical-body.js","sourceRoot":"","sources":["../../src/markdown/canonical-body.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AASH;;;;;;;;GAQG;AACH,MAAM,oBAAoB,GAAG,6DAA6D,CAAC;AAE3F;;;;GAIG;AACH,SAAS,UAAU,CAAC,MAAc;IAChC,MAAM,KAAK,GAAG,oBAAoB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAChD,IAAI,CAAC,KAAK;QAAE,OAAO,CAAC,CAAC;IACrB,OAAO,KAAK,CAAC,KAAK,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;AACvC,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,aAAa,CAAC,UAAkB;IAC9C,MAAM,KAAK,GAAG,UAAU,CAAC,UAAU,CAAC,CAAC;IACrC,MAAM,OAAO,GAAG,UAAU,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACxC,MAAM,OAAO,GAAG,OAAO,CAAC,MAAM,GAAG,OAAO,CAAC,SAAS,EAAE,CAAC,MAAM,CAAC;IAC5D,MAAM,IAAI,GAAG,KAAK,GAAG,OAAO,CAAC;IAC7B,OAAO;QACL,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE;QACpB,YAAY,EAAE,CAAC,eAAuB,EAAE,EAAE,CAAC,IAAI,GAAG,eAAe;KAClE,CAAC;AACJ,CAAC"}

package/dist/markdown/contracts.d.ts

@@ -0,0 +1,66 @@
+/**
+ * Contract surface for markdown BODY inline editing (v0.3.0).
+ *
+ * These identifiers gate a security- and correctness-critical path: the
+ * `data-caret-md` attribute binds a rendered block back to a byte range in a
+ * source `.md` file, and a Publish splices edited markdown into that range.
+ * The grammar, the source-hint format, and the content hash are therefore a
+ * compatibility promise shared across the render-time stamping plugins, the
+ * mutation engine, the publish splicer, and the browser editor.
+ *
+ * Zero-dependency by policy (core ships no runtime deps). The browser editor
+ * ships as raw unbundled JS and hand-mirrors the pieces it needs
+ * (`static/cms/editor/md-serialize.js`); a parity test holds the mirror to
+ * this source of truth.
+ */
+/** Attribute carrying the block binding (`collection::id::body::blockPath`). */
+export declare const CARET_MD_ATTR = "data-caret-md";
+/** Attribute carrying the source hint (`start:end:hash`). */
+export declare const CARET_MD_SRC_ATTR = "data-caret-md-src";
+/**
+ * Reserved field name for the body-draft map inside an entry's draft overlay
+ * `data`. Read boundaries strip it so it never surfaces to schema/loader
+ * consumers.
+ */
+export declare const BODY_OVERLAY_KEY = "__body";
+/** The synthetic field segment identifying a body binding (vs a `data-caret` field). */
+export declare const BODY_FIELD = "body";
+/**
+ * A block path: dot-joined child indexes from the mdast root to the block node
+ * (`"4"` = fifth top-level block; `"6.2"` = third child of the seventh block).
+ * Stable identity for the block within an entry across edits.
+ */
+export declare const BLOCK_PATH_RE: RegExp;
+export interface MdBinding {
+    collection: string;
+    id: string;
+    blockPath: string;
+}
+/** Format a block path from root-to-node child indexes. */
+export declare function formatBlockPath(indexes: readonly number[]): string;
+/** Parse a block path into its child indexes, or `null` if malformed. */
+export declare function parseBlockPath(raw: string): number[] | null;
+/** Format a `data-caret-md` binding value. */
+export declare function formatMdBinding(b: MdBinding): string;
+/** Parse a `data-caret-md` binding value, or `null` if it fails the grammar. */
+export declare function parseMdBinding(raw: string): MdBinding | null;
+export interface MdSrc {
+    /** Start offset in the canonical body (see `canonical-body.ts`). */
+    start: number;
+    /** End offset (exclusive) in the canonical body. */
+    end: number;
+    /** `fnv1a32` of the canonical body slice `[start, end)`. */
+    hash: string;
+}
+/** Format a `data-caret-md-src` hint value. */
+export declare function formatMdSrc(s: MdSrc): string;
+/** Parse a `data-caret-md-src` hint, validating bounds and hash shape. */
+export declare function parseMdSrc(raw: string): MdSrc | null;
+/**
+ * FNV-1a (32-bit) hash as an 8-char lowercase hex string. Not cryptographic —
+ * a staleness fingerprint over a source slice, chosen for a dependency-free,
+ * byte-identical implementation on both the TS and browser-JS sides. Iterates
+ * UTF-16 code units, so the two sides must hash the same string form.
+ */
+export declare function fnv1a32(str: string): string;
+//# sourceMappingURL=contracts.d.ts.map

package/dist/markdown/contracts.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"contracts.d.ts","sourceRoot":"","sources":["../../src/markdown/contracts.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAIH,gFAAgF;AAChF,eAAO,MAAM,aAAa,kBAAkB,CAAC;AAE7C,6DAA6D;AAC7D,eAAO,MAAM,iBAAiB,sBAAsB,CAAC;AAErD;;;;GAIG;AACH,eAAO,MAAM,gBAAgB,WAAW,CAAC;AAEzC,wFAAwF;AACxF,eAAO,MAAM,UAAU,SAAS,CAAC;AAEjC;;;;GAIG;AACH,eAAO,MAAM,aAAa,QAAoB,CAAC;AAE/C,MAAM,WAAW,SAAS;IACxB,UAAU,EAAE,MAAM,CAAC;IACnB,EAAE,EAAE,MAAM,CAAC;IACX,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,2DAA2D;AAC3D,wBAAgB,eAAe,CAAC,OAAO,EAAE,SAAS,MAAM,EAAE,GAAG,MAAM,CAElE;AAED,yEAAyE;AACzE,wBAAgB,cAAc,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,EAAE,GAAG,IAAI,CAG3D;AAED,8CAA8C;AAC9C,wBAAgB,eAAe,CAAC,CAAC,EAAE,SAAS,GAAG,MAAM,CAEpD;AAED,gFAAgF;AAChF,wBAAgB,cAAc,CAAC,GAAG,EAAE,MAAM,GAAG,SAAS,GAAG,IAAI,CAS5D;AAED,MAAM,WAAW,KAAK;IACpB,oEAAoE;IACpE,KAAK,EAAE,MAAM,CAAC;IACd,oDAAoD;IACpD,GAAG,EAAE,MAAM,CAAC;IACZ,4DAA4D;IAC5D,IAAI,EAAE,MAAM,CAAC;CACd;AAID,+CAA+C;AAC/C,wBAAgB,WAAW,CAAC,CAAC,EAAE,KAAK,GAAG,MAAM,CAE5C;AAED,0EAA0E;AAC1E,wBAAgB,UAAU,CAAC,GAAG,EAAE,MAAM,GAAG,KAAK,GAAG,IAAI,CAWpD;AAED;;;;;GAKG;AACH,wBAAgB,OAAO,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAO3C"}

package/dist/markdown/contracts.js

@@ -0,0 +1,102 @@
+/**
+ * Contract surface for markdown BODY inline editing (v0.3.0).
+ *
+ * These identifiers gate a security- and correctness-critical path: the
+ * `data-caret-md` attribute binds a rendered block back to a byte range in a
+ * source `.md` file, and a Publish splices edited markdown into that range.
+ * The grammar, the source-hint format, and the content hash are therefore a
+ * compatibility promise shared across the render-time stamping plugins, the
+ * mutation engine, the publish splicer, and the browser editor.
+ *
+ * Zero-dependency by policy (core ships no runtime deps). The browser editor
+ * ships as raw unbundled JS and hand-mirrors the pieces it needs
+ * (`static/cms/editor/md-serialize.js`); a parity test holds the mirror to
+ * this source of truth.
+ */
+import { COLLECTION_NAME_RE, ENTRY_ID_RE } from "../runtime/storage/id-contracts.js";
+/** Attribute carrying the block binding (`collection::id::body::blockPath`). */
+export const CARET_MD_ATTR = "data-caret-md";
+/** Attribute carrying the source hint (`start:end:hash`). */
+export const CARET_MD_SRC_ATTR = "data-caret-md-src";
+/**
+ * Reserved field name for the body-draft map inside an entry's draft overlay
+ * `data`. Read boundaries strip it so it never surfaces to schema/loader
+ * consumers.
+ */
+export const BODY_OVERLAY_KEY = "__body";
+/** The synthetic field segment identifying a body binding (vs a `data-caret` field). */
+export const BODY_FIELD = "body";
+/**
+ * A block path: dot-joined child indexes from the mdast root to the block node
+ * (`"4"` = fifth top-level block; `"6.2"` = third child of the seventh block).
+ * Stable identity for the block within an entry across edits.
+ */
+export const BLOCK_PATH_RE = /^\d+(?:\.\d+)*$/;
+/** Format a block path from root-to-node child indexes. */
+export function formatBlockPath(indexes) {
+    return indexes.join(".");
+}
+/** Parse a block path into its child indexes, or `null` if malformed. */
+export function parseBlockPath(raw) {
+    if (!BLOCK_PATH_RE.test(raw))
+        return null;
+    return raw.split(".").map(Number);
+}
+/** Format a `data-caret-md` binding value. */
+export function formatMdBinding(b) {
+    return `${b.collection}::${b.id}::${BODY_FIELD}::${b.blockPath}`;
+}
+/** Parse a `data-caret-md` binding value, or `null` if it fails the grammar. */
+export function parseMdBinding(raw) {
+    const parts = raw.split("::");
+    if (parts.length !== 4)
+        return null;
+    const [collection, id, field, blockPath] = parts;
+    if (field !== BODY_FIELD)
+        return null;
+    if (!COLLECTION_NAME_RE.test(collection))
+        return null;
+    if (!ENTRY_ID_RE.test(id))
+        return null;
+    if (!BLOCK_PATH_RE.test(blockPath))
+        return null;
+    return { collection, id, blockPath };
+}
+const HASH_RE = /^[0-9a-f]{8}$/;
+/** Format a `data-caret-md-src` hint value. */
+export function formatMdSrc(s) {
+    return `${s.start}:${s.end}:${s.hash}`;
+}
+/** Parse a `data-caret-md-src` hint, validating bounds and hash shape. */
+export function parseMdSrc(raw) {
+    const parts = raw.split(":");
+    if (parts.length !== 3)
+        return null;
+    const [startStr, endStr, hash] = parts;
+    if (!/^\d+$/.test(startStr) || !/^\d+$/.test(endStr))
+        return null;
+    if (!HASH_RE.test(hash))
+        return null;
+    const start = Number(startStr);
+    const end = Number(endStr);
+    if (!Number.isSafeInteger(start) || !Number.isSafeInteger(end))
+        return null;
+    if (start >= end)
+        return null;
+    return { start, end, hash };
+}
+/**
+ * FNV-1a (32-bit) hash as an 8-char lowercase hex string. Not cryptographic —
+ * a staleness fingerprint over a source slice, chosen for a dependency-free,
+ * byte-identical implementation on both the TS and browser-JS sides. Iterates
+ * UTF-16 code units, so the two sides must hash the same string form.
+ */
+export function fnv1a32(str) {
+    let h = 0x811c9dc5;
+    for (let i = 0; i < str.length; i++) {
+        h ^= str.charCodeAt(i);
+        h = Math.imul(h, 0x01000193);
+    }
+    return (h >>> 0).toString(16).padStart(8, "0");
+}
+//# sourceMappingURL=contracts.js.map

package/dist/markdown/contracts.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"contracts.js","sourceRoot":"","sources":["../../src/markdown/contracts.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,EAAE,kBAAkB,EAAE,WAAW,EAAE,MAAM,oCAAoC,CAAC;AAErF,gFAAgF;AAChF,MAAM,CAAC,MAAM,aAAa,GAAG,eAAe,CAAC;AAE7C,6DAA6D;AAC7D,MAAM,CAAC,MAAM,iBAAiB,GAAG,mBAAmB,CAAC;AAErD;;;;GAIG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG,QAAQ,CAAC;AAEzC,wFAAwF;AACxF,MAAM,CAAC,MAAM,UAAU,GAAG,MAAM,CAAC;AAEjC;;;;GAIG;AACH,MAAM,CAAC,MAAM,aAAa,GAAG,iBAAiB,CAAC;AAQ/C,2DAA2D;AAC3D,MAAM,UAAU,eAAe,CAAC,OAA0B;IACxD,OAAO,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAC3B,CAAC;AAED,yEAAyE;AACzE,MAAM,UAAU,cAAc,CAAC,GAAW;IACxC,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IAC1C,OAAO,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;AACpC,CAAC;AAED,8CAA8C;AAC9C,MAAM,UAAU,eAAe,CAAC,CAAY;IAC1C,OAAO,GAAG,CAAC,CAAC,UAAU,KAAK,CAAC,CAAC,EAAE,KAAK,UAAU,KAAK,CAAC,CAAC,SAAS,EAAE,CAAC;AACnE,CAAC;AAED,gFAAgF;AAChF,MAAM,UAAU,cAAc,CAAC,GAAW;IACxC,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC9B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACpC,MAAM,CAAC,UAAU,EAAE,EAAE,EAAE,KAAK,EAAE,SAAS,CAAC,GAAG,KAAK,CAAC;IACjD,IAAI,KAAK,KAAK,UAAU;QAAE,OAAO,IAAI,CAAC;IACtC,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,UAAU,CAAC;QAAE,OAAO,IAAI,CAAC;IACtD,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC;QAAE,OAAO,IAAI,CAAC;IACvC,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,SAAS,CAAC;QAAE,OAAO,IAAI,CAAC;IAChD,OAAO,EAAE,UAAU,EAAE,EAAE,EAAE,SAAS,EAAE,CAAC;AACvC,CAAC;AAWD,MAAM,OAAO,GAAG,eAAe,CAAC;AAEhC,+CAA+C;AAC/C,MAAM,UAAU,WAAW,CAAC,CAAQ;IAClC,OAAO,GAAG,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC;AACzC,CAAC;AAED,0EAA0E;AAC1E,MAAM,UAAU,UAAU,CAAC,GAAW;IACpC,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC7B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACpC,MAAM,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,CAAC,GAAG,KAAK,CAAC;IACvC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC;QAAE,OAAO,IAAI,CAAC;IAClE,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IACrC,MAAM,KAAK,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC;IAC/B,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC;IAC3B,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IAC5E,IAAI,KAAK,IAAI,GAAG;QAAE,OAAO,IAAI,CAAC;IAC9B,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC;AAC9B,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,OAAO,CAAC,GAAW;IACjC,IAAI,CAAC,GAAG,UAAU,CAAC;IACnB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACpC,CAAC,IAAI,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;QACvB,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC;IAC/B,CAAC;IACD,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;AACjD,CAAC"}

package/dist/markdown/html-to-snodes.d.ts

@@ -0,0 +1,26 @@
+/**
+ * Server-side inline-HTML → SNode parser for the markdown body write path.
+ *
+ * Exists so the server NEVER trusts client-supplied markdown: an `md_block`
+ * mutation carries only HTML, which is re-sanitized against the rich allowlist
+ * and then converted here into the same minimal tree `serializeBlock` consumes.
+ * The markdown that eventually gets spliced into a source file is therefore
+ * always derived server-side, and anything outside the closed set hard-fails
+ * in the serializer.
+ *
+ * Deliberately tiny and strict — this only needs to parse the SANITIZER'S
+ * output (balanced inline tags, double-quoted attributes, standard entities),
+ * not arbitrary HTML. Malformed input throws; the mutation returns 400.
+ */
+import type { SNode } from "./serialize.js";
+export declare class HtmlParseError extends Error {
+    constructor(message: string);
+}
+/**
+ * Parse a sanitized inline-HTML fragment into SNodes. Throws
+ * {@link HtmlParseError} on anything structurally unexpected (unbalanced tags,
+ * malformed tag syntax, comments/doctypes/CDATA) — the sanitizer never emits
+ * those, so their presence means the input didn't come through it.
+ */
+export declare function htmlToSNodes(html: string): SNode[];
+//# sourceMappingURL=html-to-snodes.d.ts.map

package/dist/markdown/html-to-snodes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"html-to-snodes.d.ts","sourceRoot":"","sources":["../../src/markdown/html-to-snodes.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,gBAAgB,CAAC;AAE5C,qBAAa,cAAe,SAAQ,KAAK;gBAC3B,OAAO,EAAE,MAAM;CAI5B;AAiCD;;;;;GAKG;AACH,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,KAAK,EAAE,CA+DlD"}

package/dist/markdown/html-to-snodes.js

@@ -0,0 +1,118 @@
+/**
+ * Server-side inline-HTML → SNode parser for the markdown body write path.
+ *
+ * Exists so the server NEVER trusts client-supplied markdown: an `md_block`
+ * mutation carries only HTML, which is re-sanitized against the rich allowlist
+ * and then converted here into the same minimal tree `serializeBlock` consumes.
+ * The markdown that eventually gets spliced into a source file is therefore
+ * always derived server-side, and anything outside the closed set hard-fails
+ * in the serializer.
+ *
+ * Deliberately tiny and strict — this only needs to parse the SANITIZER'S
+ * output (balanced inline tags, double-quoted attributes, standard entities),
+ * not arbitrary HTML. Malformed input throws; the mutation returns 400.
+ */
+export class HtmlParseError extends Error {
+    constructor(message) {
+        super(message);
+        this.name = "HtmlParseError";
+    }
+}
+const NAMED_ENTITIES = {
+    amp: "&",
+    lt: "<",
+    gt: ">",
+    quot: '"',
+    apos: "'",
+    nbsp: " ",
+};
+function decodeEntities(text) {
+    return text.replace(/&(#x?[0-9a-fA-F]+|[a-zA-Z]+);/g, (whole, body) => {
+        if (body.startsWith("#x") || body.startsWith("#X")) {
+            const cp = Number.parseInt(body.slice(2), 16);
+            return Number.isNaN(cp) ? whole : safeFromCodePoint(cp, whole);
+        }
+        if (body.startsWith("#")) {
+            const cp = Number.parseInt(body.slice(1), 10);
+            return Number.isNaN(cp) ? whole : safeFromCodePoint(cp, whole);
+        }
+        return NAMED_ENTITIES[body.toLowerCase()] ?? whole;
+    });
+}
+function safeFromCodePoint(cp, fallback) {
+    if (cp < 0 || cp > 0x10ffff || (cp >= 0xd800 && cp <= 0xdfff))
+        return fallback;
+    return String.fromCodePoint(cp);
+}
+const TAG_NAME_RE = /^[a-zA-Z][a-zA-Z0-9]*$/;
+const VOID_TAGS = new Set(["br"]);
+/**
+ * Parse a sanitized inline-HTML fragment into SNodes. Throws
+ * {@link HtmlParseError} on anything structurally unexpected (unbalanced tags,
+ * malformed tag syntax, comments/doctypes/CDATA) — the sanitizer never emits
+ * those, so their presence means the input didn't come through it.
+ */
+export function htmlToSNodes(html) {
+    const roots = [];
+    const stack = [];
+    const push = (node) => {
+        if (stack.length > 0)
+            stack[stack.length - 1].children.push(node);
+        else
+            roots.push(node);
+    };
+    let i = 0;
+    while (i < html.length) {
+        if (html[i] !== "<") {
+            const next = html.indexOf("<", i);
+            const end = next === -1 ? html.length : next;
+            push({ type: "text", value: decodeEntities(html.slice(i, end)) });
+            i = end;
+            continue;
+        }
+        const gt = html.indexOf(">", i);
+        if (gt === -1)
+            throw new HtmlParseError("unterminated tag");
+        const raw = html.slice(i + 1, gt);
+        i = gt + 1;
+        if (raw.startsWith("/")) {
+            const name = raw.slice(1).trim().toLowerCase();
+            const top = stack.pop();
+            if (!top || top.tag !== name) {
+                throw new HtmlParseError(`unbalanced closing tag </${name}>`);
+            }
+            push({ type: "element", tag: top.tag, attrs: top.attrs, children: top.children });
+            continue;
+        }
+        if (raw.startsWith("!") || raw.startsWith("?")) {
+            throw new HtmlParseError("comments and declarations are not allowed");
+        }
+        const selfClosing = raw.endsWith("/");
+        const tagBody = selfClosing ? raw.slice(0, -1) : raw;
+        const spaceIdx = tagBody.search(/[\s]/);
+        const name = (spaceIdx === -1 ? tagBody : tagBody.slice(0, spaceIdx)).toLowerCase();
+        if (!TAG_NAME_RE.test(name))
+            throw new HtmlParseError(`malformed tag <${raw}>`);
+        const attrs = {};
+        const attrSrc = spaceIdx === -1 ? "" : tagBody.slice(spaceIdx);
+        const attrRe = /([a-zA-Z-]+)(?:="([^"]*)")?/g;
+        for (let m; (m = attrRe.exec(attrSrc));) {
+            // Only carry href — the sole attribute the closed set represents. Other
+            // sanitizer-permitted attributes (target/rel/class) don't round-trip to
+            // markdown and are regenerated at render time.
+            if (m[1].toLowerCase() === "href")
+                attrs.href = decodeEntities(m[2] ?? "");
+        }
+        if (VOID_TAGS.has(name) || selfClosing) {
+            push({ type: "element", tag: name, attrs, children: [] });
+        }
+        else {
+            stack.push({ tag: name, attrs, children: [] });
+        }
+    }
+    if (stack.length > 0) {
+        throw new HtmlParseError(`unclosed tag <${stack[stack.length - 1].tag}>`);
+    }
+    return roots;
+}
+//# sourceMappingURL=html-to-snodes.js.map

package/dist/markdown/html-to-snodes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"html-to-snodes.js","sourceRoot":"","sources":["../../src/markdown/html-to-snodes.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAIH,MAAM,OAAO,cAAe,SAAQ,KAAK;IACvC,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,gBAAgB,CAAC;IAC/B,CAAC;CACF;AAED,MAAM,cAAc,GAA2B;IAC7C,GAAG,EAAE,GAAG;IACR,EAAE,EAAE,GAAG;IACP,EAAE,EAAE,GAAG;IACP,IAAI,EAAE,GAAG;IACT,IAAI,EAAE,GAAG;IACT,IAAI,EAAE,GAAG;CACV,CAAC;AAEF,SAAS,cAAc,CAAC,IAAY;IAClC,OAAO,IAAI,CAAC,OAAO,CAAC,gCAAgC,EAAE,CAAC,KAAK,EAAE,IAAY,EAAE,EAAE;QAC5E,IAAI,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;YACnD,MAAM,EAAE,GAAG,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YAC9C,OAAO,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,iBAAiB,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;QACjE,CAAC;QACD,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YACzB,MAAM,EAAE,GAAG,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YAC9C,OAAO,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,iBAAiB,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;QACjE,CAAC;QACD,OAAO,cAAc,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,IAAI,KAAK,CAAC;IACrD,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,iBAAiB,CAAC,EAAU,EAAE,QAAgB;IACrD,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,GAAG,QAAQ,IAAI,CAAC,EAAE,IAAI,MAAM,IAAI,EAAE,IAAI,MAAM,CAAC;QAAE,OAAO,QAAQ,CAAC;IAC/E,OAAO,MAAM,CAAC,aAAa,CAAC,EAAE,CAAC,CAAC;AAClC,CAAC;AAED,MAAM,WAAW,GAAG,wBAAwB,CAAC;AAC7C,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;AAElC;;;;;GAKG;AACH,MAAM,UAAU,YAAY,CAAC,IAAY;IACvC,MAAM,KAAK,GAAY,EAAE,CAAC;IAC1B,MAAM,KAAK,GAA6E,EAAE,CAAC;IAC3F,MAAM,IAAI,GAAG,CAAC,IAAW,EAAQ,EAAE;QACjC,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;YAAE,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;;YAC7D,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACxB,CAAC,CAAC;IAEF,IAAI,CAAC,GAAG,CAAC,CAAC;IACV,OAAO,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;QACvB,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,GAAG,EAAE,CAAC;YACpB,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;YAClC,MAAM,GAAG,GAAG,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC;YAC7C,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC;YAClE,CAAC,GAAG,GAAG,CAAC;YACR,SAAS;QACX,CAAC;QAED,MAAM,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QAChC,IAAI,EAAE,KAAK,CAAC,CAAC;YAAE,MAAM,IAAI,cAAc,CAAC,kBAAkB,CAAC,CAAC;QAC5D,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC;QAClC,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QAEX,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YACxB,MAAM,IAAI,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;YAC/C,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,EAAE,CAAC;YACxB,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,GAAG,KAAK,IAAI,EAAE,CAAC;gBAC7B,MAAM,IAAI,cAAc,CAAC,4BAA4B,IAAI,GAAG,CAAC,CAAC;YAChE,CAAC;YACD,IAAI,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC;YAClF,SAAS;QACX,CAAC;QACD,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YAC/C,MAAM,IAAI,cAAc,CAAC,2CAA2C,CAAC,CAAC;QACxE,CAAC;QAED,MAAM,WAAW,GAAG,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;QACtC,MAAM,OAAO,GAAG,WAAW,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;QACrD,MAAM,QAAQ,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QACxC,MAAM,IAAI,GAAG,CAAC,QAAQ,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;QACpF,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,MAAM,IAAI,cAAc,CAAC,kBAAkB,GAAG,GAAG,CAAC,CAAC;QAEhF,MAAM,KAAK,GAA2B,EAAE,CAAC;QACzC,MAAM,OAAO,GAAG,QAAQ,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QAC/D,MAAM,MAAM,GAAG,8BAA8B,CAAC;QAC9C,KAAK,IAAI,CAAC,EAAE,CAAC,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,GAAI,CAAC;YACzC,wEAAwE;YACxE,wEAAwE;YACxE,+CAA+C;YAC/C,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,KAAK,MAAM;gBAAE,KAAK,CAAC,IAAI,GAAG,cAAc,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;QAC7E,CAAC;QAED,IAAI,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,WAAW,EAAE,CAAC;YACvC,IAAI,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,CAAC;QAC5D,CAAC;aAAM,CAAC;YACN,KAAK,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,CAAC;QACjD,CAAC;IACH,CAAC;IAED,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACrB,MAAM,IAAI,cAAc,CAAC,iBAAiB,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC;IAC5E,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/markdown/remark.d.ts

@@ -0,0 +1,35 @@
+/**
+ * Remark plugin that stamps `data-caret-md` bindings (Astro 6 / unified
+ * holdouts). Behaviour-identical to the Sätteri frontend — both call the shared
+ * `computeStamp`/`planParagraph`, and a parity test runs the two over the same
+ * trees. A tiny internal walker avoids a `unist-util-visit` dependency.
+ */
+interface CaretRemarkOptions {
+    contentRoot: string;
+}
+interface Pos {
+    start?: {
+        offset?: number;
+    };
+    end?: {
+        offset?: number;
+    };
+}
+interface MdNode {
+    type: string;
+    position?: Pos;
+    children?: MdNode[];
+    data?: Record<string, unknown> & {
+        hProperties?: Record<string, unknown>;
+    };
+}
+interface VFileLike {
+    value?: unknown;
+    path?: string;
+    toString(): string;
+}
+/** Remark transformer (returned by the attacher). Exposed for direct testing. */
+export declare function transformCaretRemark(tree: MdNode, file: VFileLike, contentRoot: string): void;
+export declare function caretRemarkPlugin(options: CaretRemarkOptions): () => (tree: MdNode, file: VFileLike) => void;
+export {};
+//# sourceMappingURL=remark.d.ts.map

package/dist/markdown/remark.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"remark.d.ts","sourceRoot":"","sources":["../../src/markdown/remark.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAIH,UAAU,kBAAkB;IAC1B,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,UAAU,GAAG;IACX,KAAK,CAAC,EAAE;QAAE,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAC5B,GAAG,CAAC,EAAE;QAAE,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;CAC3B;AACD,UAAU,MAAM;IACd,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,CAAC,EAAE,GAAG,CAAC;IACf,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;IACpB,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG;QAAE,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;KAAE,CAAC;CAC5E;AACD,UAAU,SAAS;IACjB,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,QAAQ,IAAI,MAAM,CAAC;CACpB;AAOD,iFAAiF;AACjF,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,GAAG,IAAI,CAoD7F;AAED,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,kBAAkB,UAG/B,MAAM,MAAM,EAAE,MAAM,SAAS,KAAG,IAAI,CAIjE"}