@geekity/cms 0.13.0 → 0.15.0

package/dist/web/license.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"license.d.ts","sourceRoot":"","sources":["../../src/web/license.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,wDAAwD;AACxD,MAAM,WAAW,cAAc;IAC7B,uEAAuE;IACvE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,mCAAmC;IACnC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;CACtB;AAED;;;;;GAKG;AACH,eAAO,MAAM,yBAAyB;;iBAElC,IAAI,EAAE,WAAW;iBACjB,KAAK,EAAE,aAAa;iBACpB,GAAG,EAAE,8CAA8C;;;iBAGnD,IAAI,EAAE,cAAc;iBACpB,KAAK,EAAE,wBAAwB;iBAC/B,GAAG,EAAE,iDAAiD;;;iBAGtD,IAAI,EAAE,cAAc;iBACpB,KAAK,EAAE,2BAA2B;iBAClC,GAAG,EAAE,iDAAiD;;;iBAGtD,IAAI,EAAE,iBAAiB;iBACvB,KAAK,EAAE,sCAAsC;iBAC7C,GAAG,EAAE,oDAAoD;;;iBAGzD,IAAI,EAAE,cAAc;iBACpB,KAAK,EAAE,2BAA2B;iBAClC,GAAG,EAAE,iDAAiD;;;iBAGtD,IAAI,EAAE,iBAAiB;iBACvB,KAAK,EAAE,yCAAyC;iBAChD,GAAG,EAAE,oDAAoD;;;iBAGzD,IAAI,EAAE,SAAS;iBACf,KAAK,EAAE,0BAA0B;iBACjC,GAAG,EAAE,oDAAoD;;CAEmB,CAAC;AAEjF,yDAAyD;AACzD,MAAM,MAAM,kBAAkB,GAAG,MAAM,OAAO,yBAAyB,CAAC;AAExE,+DAA+D;AAC/D,eAAO,MAAM,UAAU,SAAS,CAAC;AAEjC,sEAAsE;AACtE,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC;IAC3B,QAAQ,CAAC,WAAW,CAAC,EAAE,OAAO,CAAC;CAChC;AAED,2DAA2D;AAC3D,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,MAAM,GAAG,KAAK,IAAI,kBAAkB,CAE/E;AAED,4DAA4D;AAC5D,wBAAgB,YAAY,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAOnD;AAED;;;GAGG;AACH,wBAAgB,cAAc,CAC5B,IAAI,EAAE,aAAa,EACnB,IAAI,GAAE,aAAkB,GACvB,cAAc,GAAG,SAAS,CAK5B;AAED;;;GAGG;AACH,wBAAgB,eAAe,CAC7B,KAAK,EAAE,OAAO,GACb;IAAE,GAAG,EAAE,kBAAkB,CAAA;CAAE,GAAG;IAAE,GAAG,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,UAAU,GAAG,SAAS,CAO/E"}

package/dist/web/license.js

@@ -0,0 +1,116 @@
+/**
+ * What readers may do with a site's posts: the license a page is
+ * under, read once from `site.json` and the page's front matter, and printed
+ * by the footer, the JSON-LD and the feeds from that one answer.
+ *
+ * A license value, in `site.json` or in front matter, is one of three things:
+ *
+ * - a Creative Commons key from {@link CREATIVE_COMMONS_LICENSES}, such as
+ *   `cc-by-sa`, in any case;
+ * - an `http` or `https` URL, named by the `licenseName` beside it, else by
+ *   its deed when it is a Creative Commons URL, else by the URL itself;
+ * - `none`, or nothing, which is all rights reserved and prints nothing.
+ *
+ * Anything else is no value at all: a post's typo falls back to the site's
+ * license rather than dropping it.
+ */
+/**
+ * The Creative Commons licenses, at their current versions: 4.0 for the six
+ * licenses and 1.0 for the CC0 public domain dedication. The keys are what
+ * `site.json` and front matter write; `title` is the long name the settings
+ * screen offers beside the short one.
+ */
+export const CREATIVE_COMMONS_LICENSES = {
+    'cc-by': {
+        name: 'CC BY 4.0',
+        title: 'Attribution',
+        url: 'https://creativecommons.org/licenses/by/4.0/',
+    },
+    'cc-by-sa': {
+        name: 'CC BY-SA 4.0',
+        title: 'Attribution-ShareAlike',
+        url: 'https://creativecommons.org/licenses/by-sa/4.0/',
+    },
+    'cc-by-nc': {
+        name: 'CC BY-NC 4.0',
+        title: 'Attribution-NonCommercial',
+        url: 'https://creativecommons.org/licenses/by-nc/4.0/',
+    },
+    'cc-by-nc-sa': {
+        name: 'CC BY-NC-SA 4.0',
+        title: 'Attribution-NonCommercial-ShareAlike',
+        url: 'https://creativecommons.org/licenses/by-nc-sa/4.0/',
+    },
+    'cc-by-nd': {
+        name: 'CC BY-ND 4.0',
+        title: 'Attribution-NoDerivatives',
+        url: 'https://creativecommons.org/licenses/by-nd/4.0/',
+    },
+    'cc-by-nc-nd': {
+        name: 'CC BY-NC-ND 4.0',
+        title: 'Attribution-NonCommercial-NoDerivatives',
+        url: 'https://creativecommons.org/licenses/by-nc-nd/4.0/',
+    },
+    cc0: {
+        name: 'CC0 1.0',
+        title: 'Public domain dedication',
+        url: 'https://creativecommons.org/publicdomain/zero/1.0/',
+    },
+};
+/** The value that says, outright, that there is no license. */
+export const NO_LICENSE = 'none';
+/** Whether a value is one of the Creative Commons keys. */
+export function isCreativeCommonsKey(value) {
+    return Object.hasOwn(CREATIVE_COMMONS_LICENSES, value);
+}
+/** Whether a value is an absolute `http` or `https` URL. */
+export function isLicenseUrl(value) {
+    try {
+        const url = new URL(value);
+        return url.protocol === 'https:' || url.protocol === 'http:';
+    }
+    catch {
+        return false;
+    }
+}
+/**
+ * The license a page is under, or `undefined` for none: the page's own when
+ * its front matter says one (or says `none`), else the site's.
+ */
+export function resolveLicense(site, page = {}) {
+    const own = parseLicense(page);
+    if (own !== 'unsaid')
+        return own;
+    const sites = parseLicense(site);
+    return sites === 'unsaid' ? undefined : sites;
+}
+/**
+ * What one license value says: a Creative Commons key, a URL, `none`, or
+ * `undefined` when it says nothing usable.
+ */
+export function classifyLicense(value) {
+    if (typeof value !== 'string')
+        return undefined;
+    const trimmed = value.trim();
+    const key = trimmed.toLowerCase();
+    if (key === NO_LICENSE)
+        return NO_LICENSE;
+    if (isCreativeCommonsKey(key))
+        return { key };
+    return isLicenseUrl(trimmed) ? { url: trimmed } : undefined;
+}
+function parseLicense(source) {
+    const said = classifyLicense(source.license);
+    if (said === undefined)
+        return 'unsaid';
+    if (said === NO_LICENSE)
+        return undefined;
+    if ('key' in said) {
+        const { name, url } = CREATIVE_COMMONS_LICENSES[said.key];
+        return { name, url };
+    }
+    const name = typeof source.licenseName === 'string' ? source.licenseName.trim() : '';
+    const deed = Object.values(CREATIVE_COMMONS_LICENSES).find((known) => known.url === said.url);
+    return { name: name || deed?.name || said.url, url: said.url };
+}
+//# sourceMappingURL=license.js.map

package/dist/web/license.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"license.js","sourceRoot":"","sources":["../../src/web/license.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAUH;;;;;GAKG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAG;IACvC,OAAO,EAAE;QACP,IAAI,EAAE,WAAW;QACjB,KAAK,EAAE,aAAa;QACpB,GAAG,EAAE,8CAA8C;KACpD;IACD,UAAU,EAAE;QACV,IAAI,EAAE,cAAc;QACpB,KAAK,EAAE,wBAAwB;QAC/B,GAAG,EAAE,iDAAiD;KACvD;IACD,UAAU,EAAE;QACV,IAAI,EAAE,cAAc;QACpB,KAAK,EAAE,2BAA2B;QAClC,GAAG,EAAE,iDAAiD;KACvD;IACD,aAAa,EAAE;QACb,IAAI,EAAE,iBAAiB;QACvB,KAAK,EAAE,sCAAsC;QAC7C,GAAG,EAAE,oDAAoD;KAC1D;IACD,UAAU,EAAE;QACV,IAAI,EAAE,cAAc;QACpB,KAAK,EAAE,2BAA2B;QAClC,GAAG,EAAE,iDAAiD;KACvD;IACD,aAAa,EAAE;QACb,IAAI,EAAE,iBAAiB;QACvB,KAAK,EAAE,yCAAyC;QAChD,GAAG,EAAE,oDAAoD;KAC1D;IACD,GAAG,EAAE;QACH,IAAI,EAAE,SAAS;QACf,KAAK,EAAE,0BAA0B;QACjC,GAAG,EAAE,oDAAoD;KAC1D;CAC6E,CAAC;AAKjF,+DAA+D;AAC/D,MAAM,CAAC,MAAM,UAAU,GAAG,MAAM,CAAC;AAQjC,2DAA2D;AAC3D,MAAM,UAAU,oBAAoB,CAAC,KAAa;IAChD,OAAO,MAAM,CAAC,MAAM,CAAC,yBAAyB,EAAE,KAAK,CAAC,CAAC;AACzD,CAAC;AAED,4DAA4D;AAC5D,MAAM,UAAU,YAAY,CAAC,KAAa;IACxC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;QAC3B,OAAO,GAAG,CAAC,QAAQ,KAAK,QAAQ,IAAI,GAAG,CAAC,QAAQ,KAAK,OAAO,CAAC;IAC/D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,cAAc,CAC5B,IAAmB,EACnB,IAAI,GAAkB,EAAE;IAExB,MAAM,GAAG,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;IAC/B,IAAI,GAAG,KAAK,QAAQ;QAAE,OAAO,GAAG,CAAC;IACjC,MAAM,KAAK,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;IACjC,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC;AAChD,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,eAAe,CAC7B,KAAc;IAEd,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC;IAChD,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IAC7B,MAAM,GAAG,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC;IAClC,IAAI,GAAG,KAAK,UAAU;QAAE,OAAO,UAAU,CAAC;IAC1C,IAAI,oBAAoB,CAAC,GAAG,CAAC;QAAE,OAAO,EAAE,GAAG,EAAE,CAAC;IAC9C,OAAO,YAAY,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;AAC9D,CAAC;AAED,SAAS,YAAY,CAAC,MAAqB;IACzC,MAAM,IAAI,GAAG,eAAe,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAC7C,IAAI,IAAI,KAAK,SAAS;QAAE,OAAO,QAAQ,CAAC;IACxC,IAAI,IAAI,KAAK,UAAU;QAAE,OAAO,SAAS,CAAC;IAC1C,IAAI,KAAK,IAAI,IAAI,EAAE,CAAC;QAClB,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,yBAAyB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC1D,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC;IACvB,CAAC;IAED,MAAM,IAAI,GAAG,OAAO,MAAM,CAAC,WAAW,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IACrF,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,yBAAyB,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,KAAK,IAAI,CAAC,GAAG,CAAC,CAAC;IAC9F,OAAO,EAAE,IAAI,EAAE,IAAI,IAAI,IAAI,EAAE,IAAI,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC;AACjE,CAAC"}

package/dist/web/oembed.d.ts

@@ -0,0 +1,104 @@
+import type { Document } from '../content/document.ts';
+import type { ImageConfig } from '../images/paths.ts';
+import type { AuthorContext } from './authors.ts';
+import type { SiteData } from './context.ts';
+import type { ConditionalHeaders } from './negotiate.ts';
+/**
+ * The oEmbed provider (TASK-205): what WordPress, Discourse and the rest ask
+ * to turn a pasted post URL into a card.
+ *
+ * Under `/_geekity/`, the CMS's own prefix, so no permalink can take it. Each
+ * post and page links it from its head, with its own URL in the query.
+ */
+/** The endpoint's URL. */
+export declare const OEMBED_PATH = "/_geekity/oembed";
+/**
+ * The embed view's URL (TASK-208): the card alone as a page, with the
+ * document's absolute URL in `?url=`, and the one response on the site another
+ * origin may frame.
+ *
+ * WordPress keeps a rich embed from a provider it does not know only when its
+ * html holds an `<iframe>`, so the oEmbed html frames this page after the
+ * blockquote, the way WordPress's own provider does.
+ */
+export declare const EMBED_PATH = "/_geekity/embed";
+/** The formats the spec names. Anything else is a 501. */
+export type OEmbedFormat = 'json' | 'xml';
+/** One request, from its query. */
+export interface OEmbedRequest {
+    /** The URL to embed, as given. */
+    url: string;
+    /** `undefined` for a format this provider does not serve. */
+    format: OEmbedFormat | undefined;
+    maxwidth?: number | undefined;
+    maxheight?: number | undefined;
+}
+/** A `type: rich` response. The thumbnail's three fields come together or not at all. */
+export interface OEmbedRich {
+    version: '1.0';
+    type: 'rich';
+    title: string;
+    author_name?: string;
+    author_url?: string;
+    provider_name: string;
+    provider_url: string;
+    html: string;
+    width: number;
+    height: number;
+    thumbnail_url?: string;
+    thumbnail_width?: number;
+    thumbnail_height?: number;
+}
+/** A query as a request. A missing `format` is JSON, which every consumer reads. */
+export declare function oEmbedRequest(query: (name: string) => string | undefined): OEmbedRequest;
+/** One published document, served at `href`, and what its card names beside it. */
+export interface EmbedSubject {
+    document: Document;
+    href: string;
+    author: AuthorContext | undefined;
+    config: {
+        baseUrl: string;
+    };
+    site: SiteData;
+}
+/**
+ * The embed of one published document, served at `href`.
+ *
+ * The title is the document's, else a note's first words. The html is the
+ * card, then a hidden sandboxed frame of {@link EMBED_PATH}: a consumer that
+ * keeps the html as given shows the blockquote, one that strips iframes still
+ * has it, and WordPress, which keeps only the frame, shows that once the page
+ * inside has told it how tall it is. The thumbnail is the
+ * document's own `image`, never the site's avatar, and only when its size is
+ * recorded: the spec requires the size with the URL, and a render never opens
+ * an image (decision-10). One wider or taller than the consumer allows is left
+ * out, because the spec says it must respect `maxwidth` and `maxheight` too.
+ */
+export declare function oEmbedFor(input: EmbedSubject & {
+    config: ImageConfig & {
+        baseUrl: string;
+    };
+    request: OEmbedRequest;
+}): OEmbedRich;
+/** The embed as a response in `format`, or a 304 to a client that already holds it. */
+export declare function oEmbedResponse(embed: OEmbedRich, format: OEmbedFormat, conditional: ConditionalHeaders | undefined): Response;
+/**
+ * The embed view's page: the card, a style to read it by, and the script that
+ * speaks WordPress's side of the embed.
+ *
+ * Nothing in it depends on who asked. There is no theme, no admin bar and no
+ * session, so a reader of a framing site sees the same card a signed-in admin
+ * would, and nothing about either. `noindex` because the post is the page to
+ * find, not its card.
+ */
+export declare function embedPage(subject: EmbedSubject): string;
+/**
+ * The embed page as a response, or a 304 to a client that already holds it.
+ *
+ * Its policy is its own and complete: the one inline style and the one inline
+ * script by hash, nothing else loaded, and any origin may frame it. The
+ * caller marks the context frameable as well, so the baseline leaves off
+ * `X-Frame-Options`, which has no way to say "anyone".
+ */
+export declare function embedResponse(page: string, conditional: ConditionalHeaders | undefined): Response;
+//# sourceMappingURL=oembed.d.ts.map

package/dist/web/oembed.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"oembed.d.ts","sourceRoot":"","sources":["../../src/web/oembed.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,wBAAwB,CAAC;AAEvD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACtD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAElD,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,cAAc,CAAC;AAI7C,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,gBAAgB,CAAC;AAIzD;;;;;;GAMG;AAEH,0BAA0B;AAC1B,eAAO,MAAM,WAAW,qBAAqB,CAAC;AAE9C;;;;;;;;GAQG;AACH,eAAO,MAAM,UAAU,oBAAoB,CAAC;AAE5C,0DAA0D;AAC1D,MAAM,MAAM,YAAY,GAAG,MAAM,GAAG,KAAK,CAAC;AAe1C,mCAAmC;AACnC,MAAM,WAAW,aAAa;IAC5B,kCAAkC;IAClC,GAAG,EAAE,MAAM,CAAC;IACZ,6DAA6D;IAC7D,MAAM,EAAE,YAAY,GAAG,SAAS,CAAC;IACjC,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC9B,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAChC;AAED,yFAAyF;AACzF,MAAM,WAAW,UAAU;IACzB,OAAO,EAAE,KAAK,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,aAAa,EAAE,MAAM,CAAC;IACtB,YAAY,EAAE,MAAM,CAAC;IACrB,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,gBAAgB,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED,oFAAoF;AACpF,wBAAgB,aAAa,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,MAAM,GAAG,SAAS,GAAG,aAAa,CAQxF;AAED,mFAAmF;AACnF,MAAM,WAAW,YAAY;IAC3B,QAAQ,EAAE,QAAQ,CAAC;IACnB,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,aAAa,GAAG,SAAS,CAAC;IAClC,MAAM,EAAE;QAAE,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;IAC5B,IAAI,EAAE,QAAQ,CAAC;CAChB;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,SAAS,CACvB,KAAK,EAAE,YAAY,GAAG;IAAE,MAAM,EAAE,WAAW,GAAG;QAAE,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;IAAC,OAAO,EAAE,aAAa,CAAA;CAAE,GAC1F,UAAU,CA8CZ;AAED,uFAAuF;AACvF,wBAAgB,cAAc,CAC5B,KAAK,EAAE,UAAU,EACjB,MAAM,EAAE,YAAY,EACpB,WAAW,EAAE,kBAAkB,GAAG,SAAS,GAC1C,QAAQ,CAWV;AAED;;;;;;;;GAQG;AACH,wBAAgB,SAAS,CAAC,OAAO,EAAE,YAAY,GAAG,MAAM,CAkBvD;AAED;;;;;;;GAOG;AACH,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,kBAAkB,GAAG,SAAS,GAAG,QAAQ,CAcjG"}

package/dist/web/oembed.js

@@ -0,0 +1,289 @@
+import { createHash } from 'node:crypto';
+import { postLabel } from '../content/post-type.js';
+import { siteLocale, siteTimezone } from './context.js';
+import { feedExcerpt } from './feed-item.js';
+import { escapeXml } from './feed-xml.js';
+import { absoluteUrl, contentEtag, isNotModified } from './negotiate.js';
+import { shareImage } from './share-image.js';
+import { formatDate } from './templates.js';
+/**
+ * The oEmbed provider (TASK-205): what WordPress, Discourse and the rest ask
+ * to turn a pasted post URL into a card.
+ *
+ * Under `/_geekity/`, the CMS's own prefix, so no permalink can take it. Each
+ * post and page links it from its head, with its own URL in the query.
+ */
+/** The endpoint's URL. */
+export const OEMBED_PATH = '/_geekity/oembed';
+/**
+ * The embed view's URL (TASK-208): the card alone as a page, with the
+ * document's absolute URL in `?url=`, and the one response on the site another
+ * origin may frame.
+ *
+ * WordPress keeps a rich embed from a provider it does not know only when its
+ * html holds an `<iframe>`, so the oEmbed html frames this page after the
+ * blockquote, the way WordPress's own provider does.
+ */
+export const EMBED_PATH = '/_geekity/embed';
+const CONTENT_TYPES = {
+    json: 'application/json; charset=utf-8',
+    xml: 'text/xml; charset=utf-8',
+};
+/**
+ * The size the card asks for. A rich embed must give both, and a blockquote
+ * of words reflows to whatever it is given, so these are what WordPress asks
+ * for its own cards rather than a measurement.
+ */
+const DEFAULT_WIDTH = 600;
+const DEFAULT_HEIGHT = 338;
+/** A query as a request. A missing `format` is JSON, which every consumer reads. */
+export function oEmbedRequest(query) {
+    const format = query('format') ?? 'json';
+    return {
+        url: query('url') ?? '',
+        format: format === 'json' || format === 'xml' ? format : undefined,
+        maxwidth: positiveInteger(query('maxwidth')),
+        maxheight: positiveInteger(query('maxheight')),
+    };
+}
+/**
+ * The embed of one published document, served at `href`.
+ *
+ * The title is the document's, else a note's first words. The html is the
+ * card, then a hidden sandboxed frame of {@link EMBED_PATH}: a consumer that
+ * keeps the html as given shows the blockquote, one that strips iframes still
+ * has it, and WordPress, which keeps only the frame, shows that once the page
+ * inside has told it how tall it is. The thumbnail is the
+ * document's own `image`, never the site's avatar, and only when its size is
+ * recorded: the spec requires the size with the URL, and a render never opens
+ * an image (decision-10). One wider or taller than the consumer allows is left
+ * out, because the spec says it must respect `maxwidth` and `maxheight` too.
+ */
+export function oEmbedFor(input) {
+    const { document, author, config, site, request } = input;
+    const url = (pathname) => absoluteUrl(pathname, config.baseUrl);
+    const title = postLabel(document);
+    const authorUrl = author?.url === undefined ? undefined : url(author.url);
+    const width = Math.min(DEFAULT_WIDTH, request.maxwidth ?? DEFAULT_WIDTH);
+    const height = Math.min(DEFAULT_HEIGHT, request.maxheight ?? DEFAULT_HEIGHT);
+    const image = shareImage({
+        config,
+        image: document.extra['image'],
+        imageAlt: document.extra['imageAlt'],
+        title,
+        fallbacks: [],
+    });
+    const thumbnail = image?.size !== undefined &&
+        image.size.width <= (request.maxwidth ?? Infinity) &&
+        image.size.height <= (request.maxheight ?? Infinity)
+        ? { url: url(image.url), ...image.size }
+        : undefined;
+    return {
+        version: '1.0',
+        type: 'rich',
+        title,
+        ...(author === undefined ? {} : { author_name: author.name }),
+        ...(authorUrl === undefined ? {} : { author_url: authorUrl }),
+        provider_name: site.title,
+        provider_url: url('/'),
+        html: `${embedCard(input)}${embedFrame({
+            src: url(`${EMBED_PATH}?${new URLSearchParams({ url: url(input.href) }).toString()}`),
+            title,
+            width,
+            height,
+        })}`,
+        width,
+        height,
+        ...(thumbnail === undefined
+            ? {}
+            : {
+                thumbnail_url: thumbnail.url,
+                thumbnail_width: thumbnail.width,
+                thumbnail_height: thumbnail.height,
+            }),
+    };
+}
+/** The embed as a response in `format`, or a 304 to a client that already holds it. */
+export function oEmbedResponse(embed, format, conditional) {
+    const body = format === 'json' ? JSON.stringify(embed) : oEmbedXml(embed);
+    const etag = contentEtag(`oembed-${format}`, body);
+    const headers = new Headers({ etag, 'cache-control': 'no-cache' });
+    if (isNotModified(conditional, etag, undefined)) {
+        return new Response(null, { status: 304, headers });
+    }
+    headers.set('content-type', CONTENT_TYPES[format]);
+    return new Response(body, { headers });
+}
+/**
+ * The embed view's page: the card, a style to read it by, and the script that
+ * speaks WordPress's side of the embed.
+ *
+ * Nothing in it depends on who asked. There is no theme, no admin bar and no
+ * session, so a reader of a framing site sees the same card a signed-in admin
+ * would, and nothing about either. `noindex` because the post is the page to
+ * find, not its card.
+ */
+export function embedPage(subject) {
+    return [
+        '<!doctype html>',
+        `<html lang="${escapeXml(siteLocale(subject.site))}">`,
+        '<head>',
+        '<meta charset="utf-8">',
+        '<meta name="viewport" content="width=device-width, initial-scale=1">',
+        '<meta name="robots" content="noindex">',
+        `<title>${escapeXml(postLabel(subject.document))}</title>`,
+        `<style>${EMBED_STYLE}</style>`,
+        '</head>',
+        '<body>',
+        embedCard(subject),
+        `<script>${EMBED_SCRIPT}</script>`,
+        '</body>',
+        '</html>',
+        '',
+    ].join('\n');
+}
+/**
+ * The embed page as a response, or a 304 to a client that already holds it.
+ *
+ * Its policy is its own and complete: the one inline style and the one inline
+ * script by hash, nothing else loaded, and any origin may frame it. The
+ * caller marks the context frameable as well, so the baseline leaves off
+ * `X-Frame-Options`, which has no way to say "anyone".
+ */
+export function embedResponse(page, conditional) {
+    const etag = contentEtag('embed', page);
+    const headers = new Headers({
+        etag,
+        'cache-control': 'no-cache',
+        'content-security-policy': EMBED_CONTENT_SECURITY_POLICY,
+    });
+    if (isNotModified(conditional, etag, undefined)) {
+        return new Response(null, { status: 304, headers });
+    }
+    headers.set('content-type', 'text/html; charset=utf-8');
+    return new Response(page, { headers });
+}
+/**
+ * The card's look inside the frame. Inline, like the script, because the page
+ * loads nothing: one request per embed is all a framing page should cost.
+ */
+const EMBED_STYLE = [
+    'html{color-scheme:light}',
+    'body{margin:0;background:#fff;color:#1f1f1f;font:16px/1.5 system-ui,-apple-system,"Segoe UI",sans-serif}',
+    '.geekity-embed{margin:0;padding:16px 20px;border:1px solid #d6d6d6;border-radius:8px;overflow-wrap:anywhere}',
+    '.geekity-embed p{margin:0 0 8px}',
+    '.geekity-embed p:last-child{margin:0;font-size:14px;color:#595959}',
+    '.geekity-embed a{color:#0b57d0}',
+].join('');
+/**
+ * WordPress's embed protocol, the framed side (wp-includes/js/wp-embed.js is
+ * the other).
+ *
+ * WordPress puts a secret in the frame's URL as `#?secret=` and keeps the
+ * frame hidden until a message with that secret says how tall the page is.
+ * The page says so when it loads, when it is resized, and whenever the host
+ * says it is ready. Its frame is sandboxed with scripts only, so a link cannot
+ * navigate by itself: a click is sent to the host as a `link` message, which
+ * WordPress follows when the link is on this site's host. Opened directly
+ * there is no secret, and the links are ordinary links.
+ */
+const EMBED_SCRIPT = [
+    '(function(){',
+    'var found=/[?&]secret=([A-Za-z0-9]+)/.exec(location.hash);',
+    'if(!found||window.parent===window)return;',
+    'var secret=found[1];',
+    "function send(message,value){window.parent.postMessage({message:message,value:value,secret:secret},'*');}",
+    "function height(){send('height',Math.ceil(document.documentElement.getBoundingClientRect().height));}",
+    "addEventListener('load',height);",
+    "addEventListener('resize',height);",
+    "addEventListener('message',function(event){var data=event.data;if(data&&data.message==='ready'&&data.secret===secret)height();});",
+    "document.addEventListener('click',function(event){var link=event.target instanceof Element?event.target.closest('a[href]'):null;if(!link)return;event.preventDefault();send('link',link.href);});",
+    '})();',
+].join('');
+/** A CSP source naming one inline element's exact contents. */
+function inlineHash(contents) {
+    return `'sha256-${createHash('sha256').update(contents, 'utf8').digest('base64')}'`;
+}
+const EMBED_CONTENT_SECURITY_POLICY = [
+    "default-src 'none'",
+    `style-src ${inlineHash(EMBED_STYLE)}`,
+    `script-src ${inlineHash(EMBED_SCRIPT)}`,
+    "base-uri 'none'",
+    "form-action 'none'",
+    'frame-ancestors *',
+].join('; ');
+/**
+ * The frame of the embed view, in the shape WordPress's own provider sends:
+ * sandboxed, borderless, and hidden until the page inside reports its height.
+ */
+function embedFrame(input) {
+    return [
+        '<iframe sandbox="allow-scripts" security="restricted"',
+        ` src="${escapeXml(input.src)}"`,
+        ` width="${String(input.width)}" height="${String(input.height)}"`,
+        ` title="${escapeXml(input.title)}"`,
+        ' frameborder="0" marginwidth="0" marginheight="0" scrolling="no"',
+        ' style="position: absolute; visibility: hidden;"></iframe>',
+    ].join('');
+}
+/** The XML spelling: one element per field, under `<oembed>`. */
+function oEmbedXml(embed) {
+    const fields = Object.entries(embed).map(([name, value]) => `  <${name}>${escapeXml(String(value))}</${name}>`);
+    return [
+        '<?xml version="1.0" encoding="utf-8" standalone="yes"?>',
+        '<oembed>',
+        ...fields,
+        '</oembed>',
+        '',
+    ].join('\n');
+}
+/**
+ * The card of one document, as both the oEmbed html and the embed page carry
+ * it. A blockquote of escaped text and links, so it needs nothing from this
+ * site to draw and can carry nothing a consumer would run.
+ */
+function embedCard(subject) {
+    const { document, author, site, config } = subject;
+    const url = (pathname) => absoluteUrl(pathname, config.baseUrl);
+    return card({
+        href: url(subject.href),
+        title: postLabel(document),
+        excerpt: document.title === '' ? '' : feedExcerpt(document),
+        author: author === undefined
+            ? undefined
+            : { name: author.name, url: author.url === undefined ? undefined : url(author.url) },
+        date: {
+            iso: formatDate(document.date, 'iso'),
+            readable: formatDate(document.date, 'readable', siteTimezone(site), siteLocale(site)),
+        },
+        site: { name: site.title, url: url('/') },
+    });
+}
+/** The card: a linked title, the excerpt, who and when, and the site it is from. */
+function card(input) {
+    const link = (href, text) => `<a href="${escapeXml(href)}">${escapeXml(text)}</a>`;
+    const { author, date } = input;
+    const byline = [
+        ...(author === undefined
+            ? []
+            : [author.url === undefined ? escapeXml(author.name) : link(author.url, author.name)]),
+        ...(date.iso === ''
+            ? []
+            : [`<time datetime="${escapeXml(date.iso)}">${escapeXml(date.readable)}</time>`]),
+    ];
+    return [
+        `<blockquote class="geekity-embed" cite="${escapeXml(input.href)}">`,
+        `<p><strong>${link(input.href, input.title)}</strong></p>`,
+        ...(input.excerpt === '' ? [] : [`<p>${escapeXml(input.excerpt)}</p>`]),
+        ...(byline.length === 0 ? [] : [`<p>${byline.join(', ')}</p>`]),
+        `<p>${link(input.site.url, input.site.name)}</p>`,
+        '</blockquote>',
+    ].join('');
+}
+function positiveInteger(value) {
+    if (value === undefined || !/^[0-9]+$/.test(value))
+        return undefined;
+    const parsed = Number(value);
+    return parsed > 0 ? parsed : undefined;
+}
+//# sourceMappingURL=oembed.js.map

package/dist/web/oembed.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"oembed.js","sourceRoot":"","sources":["../../src/web/oembed.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAGzC,OAAO,EAAE,SAAS,EAAE,MAAM,yBAAyB,CAAC;AAGpD,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAExD,OAAO,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAC7C,OAAO,EAAE,SAAS,EAAE,MAAM,eAAe,CAAC;AAC1C,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAEzE,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAC9C,OAAO,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AAE5C;;;;;;GAMG;AAEH,0BAA0B;AAC1B,MAAM,CAAC,MAAM,WAAW,GAAG,kBAAkB,CAAC;AAE9C;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,UAAU,GAAG,iBAAiB,CAAC;AAK5C,MAAM,aAAa,GAA2C;IAC5D,IAAI,EAAE,iCAAiC;IACvC,GAAG,EAAE,yBAAyB;CAC/B,CAAC;AAEF;;;;GAIG;AACH,MAAM,aAAa,GAAG,GAAG,CAAC;AAC1B,MAAM,cAAc,GAAG,GAAG,CAAC;AA6B3B,oFAAoF;AACpF,MAAM,UAAU,aAAa,CAAC,KAA2C;IACvE,MAAM,MAAM,GAAG,KAAK,CAAC,QAAQ,CAAC,IAAI,MAAM,CAAC;IACzC,OAAO;QACL,GAAG,EAAE,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE;QACvB,MAAM,EAAE,MAAM,KAAK,MAAM,IAAI,MAAM,KAAK,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS;QAClE,QAAQ,EAAE,eAAe,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;QAC5C,SAAS,EAAE,eAAe,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;KAC/C,CAAC;AACJ,CAAC;AAWD;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,SAAS,CACvB,KAA2F;IAE3F,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,KAAK,CAAC;IAC1D,MAAM,GAAG,GAAG,CAAC,QAAgB,EAAU,EAAE,CAAC,WAAW,CAAC,QAAQ,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC;IAChF,MAAM,KAAK,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;IAClC,MAAM,SAAS,GAAG,MAAM,EAAE,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IAC1E,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,aAAa,EAAE,OAAO,CAAC,QAAQ,IAAI,aAAa,CAAC,CAAC;IACzE,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,cAAc,EAAE,OAAO,CAAC,SAAS,IAAI,cAAc,CAAC,CAAC;IAE7E,MAAM,KAAK,GAAG,UAAU,CAAC;QACvB,MAAM;QACN,KAAK,EAAE,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC;QAC9B,QAAQ,EAAE,QAAQ,CAAC,KAAK,CAAC,UAAU,CAAC;QACpC,KAAK;QACL,SAAS,EAAE,EAAE;KACd,CAAC,CAAC;IACH,MAAM,SAAS,GACb,KAAK,EAAE,IAAI,KAAK,SAAS;QACzB,KAAK,CAAC,IAAI,CAAC,KAAK,IAAI,CAAC,OAAO,CAAC,QAAQ,IAAI,QAAQ,CAAC;QAClD,KAAK,CAAC,IAAI,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,SAAS,IAAI,QAAQ,CAAC;QAClD,CAAC,CAAC,EAAE,GAAG,EAAE,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,GAAG,KAAK,CAAC,IAAI,EAAE;QACxC,CAAC,CAAC,SAAS,CAAC;IAEhB,OAAO;QACL,OAAO,EAAE,KAAK;QACd,IAAI,EAAE,MAAM;QACZ,KAAK;QACL,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC;QAC7D,GAAG,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,SAAS,EAAE,CAAC;QAC7D,aAAa,EAAE,IAAI,CAAC,KAAK;QACzB,YAAY,EAAE,GAAG,CAAC,GAAG,CAAC;QACtB,IAAI,EAAE,GAAG,SAAS,CAAC,KAAK,CAAC,GAAG,UAAU,CAAC;YACrC,GAAG,EAAE,GAAG,CAAC,GAAG,UAAU,IAAI,IAAI,eAAe,CAAC,EAAE,GAAG,EAAE,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC;YACrF,KAAK;YACL,KAAK;YACL,MAAM;SACP,CAAC,EAAE;QACJ,KAAK;QACL,MAAM;QACN,GAAG,CAAC,SAAS,KAAK,SAAS;YACzB,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC;gBACE,aAAa,EAAE,SAAS,CAAC,GAAG;gBAC5B,eAAe,EAAE,SAAS,CAAC,KAAK;gBAChC,gBAAgB,EAAE,SAAS,CAAC,MAAM;aACnC,CAAC;KACP,CAAC;AACJ,CAAC;AAED,uFAAuF;AACvF,MAAM,UAAU,cAAc,CAC5B,KAAiB,EACjB,MAAoB,EACpB,WAA2C;IAE3C,MAAM,IAAI,GAAG,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IAC1E,MAAM,IAAI,GAAG,WAAW,CAAC,UAAU,MAAM,EAAE,EAAE,IAAI,CAAC,CAAC;IACnD,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC,EAAE,IAAI,EAAE,eAAe,EAAE,UAAU,EAAE,CAAC,CAAC;IAEnE,IAAI,aAAa,CAAC,WAAW,EAAE,IAAI,EAAE,SAAS,CAAC,EAAE,CAAC;QAChD,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC,CAAC;IACtD,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,cAAc,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC;IACnD,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC;AACzC,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,SAAS,CAAC,OAAqB;IAC7C,OAAO;QACL,iBAAiB;QACjB,eAAe,SAAS,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI;QACtD,QAAQ;QACR,wBAAwB;QACxB,sEAAsE;QACtE,wCAAwC;QACxC,UAAU,SAAS,CAAC,SAAS,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,UAAU;QAC1D,UAAU,WAAW,UAAU;QAC/B,SAAS;QACT,QAAQ;QACR,SAAS,CAAC,OAAO,CAAC;QAClB,WAAW,YAAY,WAAW;QAClC,SAAS;QACT,SAAS;QACT,EAAE;KACH,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,aAAa,CAAC,IAAY,EAAE,WAA2C;IACrF,MAAM,IAAI,GAAG,WAAW,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IACxC,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC;QAC1B,IAAI;QACJ,eAAe,EAAE,UAAU;QAC3B,yBAAyB,EAAE,6BAA6B;KACzD,CAAC,CAAC;IAEH,IAAI,aAAa,CAAC,WAAW,EAAE,IAAI,EAAE,SAAS,CAAC,EAAE,CAAC;QAChD,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC,CAAC;IACtD,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,cAAc,EAAE,0BAA0B,CAAC,CAAC;IACxD,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC;AACzC,CAAC;AAED;;;GAGG;AACH,MAAM,WAAW,GAAG;IAClB,0BAA0B;IAC1B,0GAA0G;IAC1G,8GAA8G;IAC9G,kCAAkC;IAClC,oEAAoE;IACpE,iCAAiC;CAClC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;AAEX;;;;;;;;;;;GAWG;AACH,MAAM,YAAY,GAAG;IACnB,cAAc;IACd,4DAA4D;IAC5D,2CAA2C;IAC3C,sBAAsB;IACtB,2GAA2G;IAC3G,uGAAuG;IACvG,kCAAkC;IAClC,oCAAoC;IACpC,mIAAmI;IACnI,mMAAmM;IACnM,OAAO;CACR,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;AAEX,+DAA+D;AAC/D,SAAS,UAAU,CAAC,QAAgB;IAClC,OAAO,WAAW,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC;AACtF,CAAC;AAED,MAAM,6BAA6B,GAAG;IACpC,oBAAoB;IACpB,aAAa,UAAU,CAAC,WAAW,CAAC,EAAE;IACtC,cAAc,UAAU,CAAC,YAAY,CAAC,EAAE;IACxC,iBAAiB;IACjB,oBAAoB;IACpB,mBAAmB;CACpB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAEb;;;GAGG;AACH,SAAS,UAAU,CAAC,KAAoE;IACtF,OAAO;QACL,uDAAuD;QACvD,SAAS,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG;QAChC,WAAW,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,aAAa,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG;QAClE,WAAW,SAAS,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG;QACpC,kEAAkE;QAClE,4DAA4D;KAC7D,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;AACb,CAAC;AAED,iEAAiE;AACjE,SAAS,SAAS,CAAC,KAAiB;IAClC,MAAM,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,GAAG,CACtC,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,MAAM,IAAI,IAAI,SAAS,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,IAAI,GAAG,CACtE,CAAC;IACF,OAAO;QACL,yDAAyD;QACzD,UAAU;QACV,GAAG,MAAM;QACT,WAAW;QACX,EAAE;KACH,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC;AAED;;;;GAIG;AACH,SAAS,SAAS,CAAC,OAAqB;IACtC,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC;IACnD,MAAM,GAAG,GAAG,CAAC,QAAgB,EAAU,EAAE,CAAC,WAAW,CAAC,QAAQ,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC;IAChF,OAAO,IAAI,CAAC;QACV,IAAI,EAAE,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC;QACvB,KAAK,EAAE,SAAS,CAAC,QAAQ,CAAC;QAC1B,OAAO,EAAE,QAAQ,CAAC,KAAK,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC,QAAQ,CAAC;QAC3D,MAAM,EACJ,MAAM,KAAK,SAAS;YAClB,CAAC,CAAC,SAAS;YACX,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE;QACxF,IAAI,EAAE;YACJ,GAAG,EAAE,UAAU,CAAC,QAAQ,CAAC,IAAI,EAAE,KAAK,CAAC;YACrC,QAAQ,EAAE,UAAU,CAAC,QAAQ,CAAC,IAAI,EAAE,UAAU,EAAE,YAAY,CAAC,IAAI,CAAC,EAAE,UAAU,CAAC,IAAI,CAAC,CAAC;SACtF;QACD,IAAI,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,KAAK,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,CAAC,EAAE;KAC1C,CAAC,CAAC;AACL,CAAC;AAED,oFAAoF;AACpF,SAAS,IAAI,CAAC,KAQb;IACC,MAAM,IAAI,GAAG,CAAC,IAAY,EAAE,IAAY,EAAU,EAAE,CAClD,YAAY,SAAS,CAAC,IAAI,CAAC,KAAK,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC;IACxD,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,KAAK,CAAC;IAE/B,MAAM,MAAM,GAAG;QACb,GAAG,CAAC,MAAM,KAAK,SAAS;YACtB,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;QACxF,GAAG,CAAC,IAAI,CAAC,GAAG,KAAK,EAAE;YACjB,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC,CAAC,mBAAmB,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;KACpF,CAAC;IAEF,OAAO;QACL,2CAA2C,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI;QACpE,cAAc,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,KAAK,CAAC,eAAe;QAC1D,GAAG,CAAC,KAAK,CAAC,OAAO,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,SAAS,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QACvE,GAAG,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC/D,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM;QACjD,eAAe;KAChB,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;AACb,CAAC;AAED,SAAS,eAAe,CAAC,KAAyB;IAChD,IAAI,KAAK,KAAK,SAAS,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IACrE,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IAC7B,OAAO,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;AACzC,CAAC"}

package/dist/web/opensearch.d.ts

@@ -0,0 +1,35 @@
+import type { ImageConfig } from '../images/paths.ts';
+import type { ConditionalHeaders } from './negotiate.ts';
+/**
+ * The OpenSearch description (TASK-204): what a browser reads to offer the
+ * site's own search from its address bar.
+ *
+ * A fixed route at the root for the reason the manifest is one, so no
+ * permalink can take it, and linked from the head of every page.
+ */
+/** The description's URL. */
+export declare const OPENSEARCH_PATH = "/opensearch.xml";
+/**
+ * The description of one site, as XML.
+ *
+ * The short name is the title cut to 16 characters, and the description is
+ * the tagline, else the title, since the spec requires one. The image is
+ * `/favicon.ico`, whose 16 pixel frame is the size the spec suggests, and is
+ * left out on a site with no icon, where that URL answers 404. Every URL is
+ * absolute, because a browser keeps the template and runs it from its address
+ * bar, with no page to resolve a relative one against.
+ */
+export declare function openSearchDescription(input: {
+    config: ImageConfig & {
+        baseUrl: string;
+    };
+    site: {
+        title: string;
+        tagline?: string | undefined;
+        icon?: unknown;
+        avatar?: unknown;
+    };
+}): string;
+/** The description as a response, or a 304 to a client that already holds it. */
+export declare function openSearchResponse(body: string, conditional: ConditionalHeaders | undefined): Response;
+//# sourceMappingURL=opensearch.d.ts.map

package/dist/web/opensearch.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"opensearch.d.ts","sourceRoot":"","sources":["../../src/web/opensearch.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAItD,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,gBAAgB,CAAC;AAGzD;;;;;;GAMG;AAEH,6BAA6B;AAC7B,eAAO,MAAM,eAAe,oBAAoB,CAAC;AAQjD;;;;;;;;;GASG;AACH,wBAAgB,qBAAqB,CAAC,KAAK,EAAE;IAC3C,MAAM,EAAE,WAAW,GAAG;QAAE,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;IAC1C,IAAI,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QAAC,IAAI,CAAC,EAAE,OAAO,CAAC;QAAC,MAAM,CAAC,EAAE,OAAO,CAAA;KAAE,CAAC;CACzF,GAAG,MAAM,CAsBT;AAED,iFAAiF;AACjF,wBAAgB,kBAAkB,CAChC,IAAI,EAAE,MAAM,EACZ,WAAW,EAAE,kBAAkB,GAAG,SAAS,GAC1C,QAAQ,CAUV"}

package/dist/web/opensearch.js

@@ -0,0 +1,65 @@
+import { iconSetting, siteIconSource } from '../images/icons.js';
+import { FAVICON_PATH } from './manifest.js';
+import { escapeXml } from './feed-xml.js';
+import { absoluteUrl, contentEtag, isNotModified } from './negotiate.js';
+import { SEARCH_PATH } from './search.js';
+/**
+ * The OpenSearch description (TASK-204): what a browser reads to offer the
+ * site's own search from its address bar.
+ *
+ * A fixed route at the root for the reason the manifest is one, so no
+ * permalink can take it, and linked from the head of every page.
+ */
+/** The description's URL. */
+export const OPENSEARCH_PATH = '/opensearch.xml';
+const OPENSEARCH_CONTENT_TYPE = 'application/opensearchdescription+xml; charset=utf-8';
+/** OpenSearch 1.1 caps these two, and a browser may refuse a longer one. */
+const SHORT_NAME_MAX = 16;
+const DESCRIPTION_MAX = 1024;
+/**
+ * The description of one site, as XML.
+ *
+ * The short name is the title cut to 16 characters, and the description is
+ * the tagline, else the title, since the spec requires one. The image is
+ * `/favicon.ico`, whose 16 pixel frame is the size the spec suggests, and is
+ * left out on a site with no icon, where that URL answers 404. Every URL is
+ * absolute, because a browser keeps the template and runs it from its address
+ * bar, with no page to resolve a relative one against.
+ */
+export function openSearchDescription(input) {
+    const { config, site } = input;
+    const url = (pathname) => absoluteUrl(pathname, config.baseUrl);
+    const tagline = site.tagline?.trim() ?? '';
+    const hasIcon = siteIconSource(config, iconSetting(site)) !== undefined;
+    const lines = [
+        '<?xml version="1.0" encoding="UTF-8"?>',
+        '<OpenSearchDescription xmlns="http://a9.com/-/spec/opensearch/1.1/">',
+        `  <ShortName>${escapeXml(cut(site.title, SHORT_NAME_MAX))}</ShortName>`,
+        `  <Description>${escapeXml(cut(tagline || site.title, DESCRIPTION_MAX))}</Description>`,
+        '  <InputEncoding>UTF-8</InputEncoding>',
+        ...(hasIcon
+            ? [
+                `  <Image width="16" height="16" type="image/x-icon">${escapeXml(url(FAVICON_PATH))}</Image>`,
+            ]
+            : []),
+        `  <Url type="text/html" method="get" template="${escapeXml(url(SEARCH_PATH))}?q={searchTerms}"/>`,
+        `  <Url type="application/opensearchdescription+xml" rel="self" template="${escapeXml(url(OPENSEARCH_PATH))}"/>`,
+        '</OpenSearchDescription>',
+    ];
+    return `${lines.join('\n')}\n`;
+}
+/** The description as a response, or a 304 to a client that already holds it. */
+export function openSearchResponse(body, conditional) {
+    const etag = contentEtag('opensearch', body);
+    const headers = new Headers({ etag, 'cache-control': 'no-cache' });
+    if (isNotModified(conditional, etag, undefined)) {
+        return new Response(null, { status: 304, headers });
+    }
+    headers.set('content-type', OPENSEARCH_CONTENT_TYPE);
+    return new Response(body, { headers });
+}
+/** `text` cut to at most `max` characters, never inside a surrogate pair. */
+function cut(text, max) {
+    return [...text].slice(0, max).join('').trimEnd();
+}
+//# sourceMappingURL=opensearch.js.map

package/dist/web/opensearch.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"opensearch.js","sourceRoot":"","sources":["../../src/web/opensearch.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AAEjE,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAC7C,OAAO,EAAE,SAAS,EAAE,MAAM,eAAe,CAAC;AAC1C,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAEzE,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAE1C;;;;;;GAMG;AAEH,6BAA6B;AAC7B,MAAM,CAAC,MAAM,eAAe,GAAG,iBAAiB,CAAC;AAEjD,MAAM,uBAAuB,GAAG,sDAAsD,CAAC;AAEvF,4EAA4E;AAC5E,MAAM,cAAc,GAAG,EAAE,CAAC;AAC1B,MAAM,eAAe,GAAG,IAAI,CAAC;AAE7B;;;;;;;;;GASG;AACH,MAAM,UAAU,qBAAqB,CAAC,KAGrC;IACC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,KAAK,CAAC;IAC/B,MAAM,GAAG,GAAG,CAAC,QAAgB,EAAU,EAAE,CAAC,WAAW,CAAC,QAAQ,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC;IAChF,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IAC3C,MAAM,OAAO,GAAG,cAAc,CAAC,MAAM,EAAE,WAAW,CAAC,IAAI,CAAC,CAAC,KAAK,SAAS,CAAC;IAExE,MAAM,KAAK,GAAG;QACZ,wCAAwC;QACxC,sEAAsE;QACtE,gBAAgB,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,EAAE,cAAc,CAAC,CAAC,cAAc;QACxE,kBAAkB,SAAS,CAAC,GAAG,CAAC,OAAO,IAAI,IAAI,CAAC,KAAK,EAAE,eAAe,CAAC,CAAC,gBAAgB;QACxF,wCAAwC;QACxC,GAAG,CAAC,OAAO;YACT,CAAC,CAAC;gBACE,uDAAuD,SAAS,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,UAAU;aAC9F;YACH,CAAC,CAAC,EAAE,CAAC;QACP,kDAAkD,SAAS,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,qBAAqB;QAClG,4EAA4E,SAAS,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC,KAAK;QAChH,0BAA0B;KAC3B,CAAC;IACF,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC;AACjC,CAAC;AAED,iFAAiF;AACjF,MAAM,UAAU,kBAAkB,CAChC,IAAY,EACZ,WAA2C;IAE3C,MAAM,IAAI,GAAG,WAAW,CAAC,YAAY,EAAE,IAAI,CAAC,CAAC;IAC7C,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC,EAAE,IAAI,EAAE,eAAe,EAAE,UAAU,EAAE,CAAC,CAAC;IAEnE,IAAI,aAAa,CAAC,WAAW,EAAE,IAAI,EAAE,SAAS,CAAC,EAAE,CAAC;QAChD,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC,CAAC;IACtD,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,cAAc,EAAE,uBAAuB,CAAC,CAAC;IACrD,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC;AACzC,CAAC;AAED,6EAA6E;AAC7E,SAAS,GAAG,CAAC,IAAY,EAAE,GAAW;IACpC,OAAO,CAAC,GAAG,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC;AACpD,CAAC"}