@geekity/cms 0.3.0 → 0.4.0

package/dist/admin/messages.js

@@ -0,0 +1,152 @@
+import { countContactMessagesByStatus, countUnreadContactMessages, deleteContactMessage, listContactMessages, setContactMessageRead, } from '../contact/records.js';
+import { flash } from './flash.js';
+import { formatInTimezone } from './formatting.js';
+import { ADMIN_PREFIX } from './session.js';
+import { readSiteSettings } from './settings.js';
+import { ADMIN_TEMPLATES } from './templates.js';
+/**
+ * The inbox: what the contact form left behind (TASK-56).
+ *
+ * A message is a file under `data/contact/` and nothing else — there is no
+ * index, because this screen reads every file to sort them anyway and a second
+ * copy of the truth would only be a second thing to keep true. So the two
+ * actions here are a rewrite and an unlink, and the screen is a view of the
+ * directory as it is at that moment (decision-9).
+ *
+ * Two lists rather than one. A checker's `spam` is an opinion about a message
+ * somebody may really have sent, so it is kept rather than thrown away — but a
+ * run of it must not bury the messages a person actually has to answer.
+ */
+/** Where the Messages screen lives. */
+export const MESSAGES_PATH = `${ADMIN_PREFIX}/messages`;
+/** The navigation section it marks as current. */
+export const MESSAGES_SECTION = 'messages';
+/** Where the Mark read and Mark unread buttons post. */
+export const MESSAGES_READ_PATH = `${MESSAGES_PATH}/read`;
+/** Where the Delete button posts. */
+export const MESSAGES_DELETE_PATH = `${MESSAGES_PATH}/delete`;
+/** The fields the forms on this screen submit. */
+export const MESSAGE_FIELDS = {
+    /** Which message a button is about. */
+    id: 'id',
+    /** Whether Mark read means read or unread. Empty is unread. */
+    read: 'read',
+    /** Which list to go back to afterwards. */
+    status: 'status',
+};
+/** How many messages one page of a list shows. */
+export const MESSAGES_PER_PAGE = 25;
+/** The two lists, in the order the screen offers them. */
+export const MESSAGE_TABS = [
+    { status: 'received', label: 'Inbox' },
+    { status: 'spam', label: 'Spam' },
+];
+/** Register the Messages screen. */
+export function mountMessagesScreen(app, options) {
+    const { render } = options;
+    app.get(MESSAGES_PATH, (c) => {
+        const { dataDir, contentDir } = c.var.config;
+        const status = statusOf(c.req.query('status'));
+        const page = Math.max(1, Math.trunc(Number(c.req.query('page') ?? '1')) || 1);
+        const counts = countContactMessagesByStatus(dataDir);
+        const timezone = readSiteSettings(contentDir).timezone;
+        const rows = listContactMessages(dataDir, { status })
+            .slice((page - 1) * MESSAGES_PER_PAGE, page * MESSAGES_PER_PAGE)
+            .map((message) => messageRow(message, timezone));
+        const pages = Math.max(1, Math.ceil(counts[status] / MESSAGES_PER_PAGE));
+        return render(c, ADMIN_TEMPLATES.messages, {
+            section: MESSAGES_SECTION,
+            child: 'all',
+            heading: 'Messages',
+            status,
+            counts,
+            unread: countUnreadContactMessages(dataDir),
+            tabs: MESSAGE_TABS.map((tab) => ({
+                ...tab,
+                url: listUrl(tab.status),
+                count: counts[tab.status],
+                current: tab.status === status,
+            })),
+            rows,
+            fields: MESSAGE_FIELDS,
+            readUrl: MESSAGES_READ_PATH,
+            deleteUrl: MESSAGES_DELETE_PATH,
+            page,
+            pages,
+            previousUrl: page > 1 ? listUrl(status, page - 1) : undefined,
+            nextUrl: page < pages ? listUrl(status, page + 1) : undefined,
+        });
+    });
+    app.post(MESSAGES_READ_PATH, async (c) => {
+        const body = await c.req.parseBody();
+        const back = listUrl(statusOf(text(body[MESSAGE_FIELDS.status])));
+        // A checkbox submits nothing at all when it is clear, which is what the
+        // empty string here means: this button marks the message unread again.
+        const read = text(body[MESSAGE_FIELDS.read]) !== '';
+        const updated = await setContactMessageRead(c.var.config.dataDir, text(body[MESSAGE_FIELDS.id]), read);
+        if (updated === undefined) {
+            flash(c, 'error', 'That message is not here any more.');
+            return c.redirect(back, 303);
+        }
+        flash(c, 'notice', read
+            ? `Marked ${updated.from.name}’s message read.`
+            : `Marked ${updated.from.name}’s message unread.`);
+        return c.redirect(back, 303);
+    });
+    app.post(MESSAGES_DELETE_PATH, async (c) => {
+        const body = await c.req.parseBody();
+        const back = listUrl(statusOf(text(body[MESSAGE_FIELDS.status])));
+        const id = text(body[MESSAGE_FIELDS.id]);
+        // Read before it goes, so the flash can say whose message it was. An id
+        // that is not one never reaches the filesystem: the records module refuses
+        // anything but the shape it mints.
+        const held = listContactMessages(c.var.config.dataDir).find((message) => message.id === id)
+            ?.from.name;
+        if (!(await deleteContactMessage(c.var.config.dataDir, id))) {
+            flash(c, 'error', 'That message is not here any more.');
+            return c.redirect(back, 303);
+        }
+        flash(c, 'notice', `Deleted ${held ?? 'the'} message.`);
+        return c.redirect(back, 303);
+    });
+}
+/** How many messages are waiting to be read, which is the number on the dashboard. */
+export function unreadMessages(dataDir) {
+    return countUnreadContactMessages(dataDir);
+}
+/** Where one list of the inbox lives. */
+export function listUrl(status, page = 1) {
+    const query = page > 1 ? `&page=${String(page)}` : '';
+    return `${MESSAGES_PATH}?status=${status}${query}`;
+}
+/** A requested status, or the inbox for anything else. */
+function statusOf(value) {
+    return value === 'spam' ? 'spam' : 'received';
+}
+/** One stored message as the screen shows it. */
+function messageRow(message, timezone) {
+    const subject = message.subject === '' ? `A message from ${message.from.name}` : message.subject;
+    return {
+        id: message.id,
+        status: message.status,
+        read: message.read,
+        author: message.from.name,
+        email: message.from.email,
+        subject: message.subject,
+        message: message.message,
+        received: formatInTimezone(message.received, timezone),
+        // The first eight characters are enough to see that two messages came from
+        // one place, which is the only question the hash is there to answer.
+        address: message.addressHash === null ? null : message.addressHash.slice(0, 8),
+        page: message.page.title === '' ? message.page.slug : message.page.title,
+        pageUrl: message.page.permalink === '' ? null : message.page.permalink,
+        // Answering from here rather than from a mail client is one click; the
+        // subject comes back with `Re:` on it the way a reply would.
+        replyUrl: `mailto:${encodeURIComponent(message.from.email)}?subject=${encodeURIComponent(`Re: ${subject}`)}`,
+    };
+}
+/** A form field as a string. A file upload, or a missing field, is the empty one. */
+function text(value) {
+    return typeof value === 'string' ? value : '';
+}
+//# sourceMappingURL=messages.js.map

package/dist/admin/messages.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"messages.js","sourceRoot":"","sources":["../../src/admin/messages.ts"],"names":[],"mappings":"AAEA,OAAO,EACL,4BAA4B,EAC5B,0BAA0B,EAC1B,oBAAoB,EACpB,mBAAmB,EACnB,qBAAqB,GACtB,MAAM,uBAAuB,CAAC;AAI/B,OAAO,EAAE,KAAK,EAAE,MAAM,YAAY,CAAC;AACnC,OAAO,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AACnD,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAC5C,OAAO,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AACjD,OAAO,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AAEjD;;;;;;;;;;;;GAYG;AAEH,uCAAuC;AACvC,MAAM,CAAC,MAAM,aAAa,GAAG,GAAG,YAAY,WAAW,CAAC;AAExD,kDAAkD;AAClD,MAAM,CAAC,MAAM,gBAAgB,GAAG,UAAU,CAAC;AAE3C,wDAAwD;AACxD,MAAM,CAAC,MAAM,kBAAkB,GAAG,GAAG,aAAa,OAAO,CAAC;AAE1D,qCAAqC;AACrC,MAAM,CAAC,MAAM,oBAAoB,GAAG,GAAG,aAAa,SAAS,CAAC;AAE9D,kDAAkD;AAClD,MAAM,CAAC,MAAM,cAAc,GAAG;IAC5B,uCAAuC;IACvC,EAAE,EAAE,IAAI;IACR,+DAA+D;IAC/D,IAAI,EAAE,MAAM;IACZ,2CAA2C;IAC3C,MAAM,EAAE,QAAQ;CACR,CAAC;AAEX,kDAAkD;AAClD,MAAM,CAAC,MAAM,iBAAiB,GAAG,EAAE,CAAC;AAEpC,0DAA0D;AAC1D,MAAM,CAAC,MAAM,YAAY,GAAwD;IAC/E,EAAE,MAAM,EAAE,UAAU,EAAE,KAAK,EAAE,OAAO,EAAE;IACtC,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE;CAClC,CAAC;AAoCF,oCAAoC;AACpC,MAAM,UAAU,mBAAmB,CACjC,GAAqB,EACrB,OAAmC;IAEnC,MAAM,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC;IAE3B,GAAG,CAAC,GAAG,CAAC,aAAa,EAAE,CAAC,CAAC,EAAE,EAAE;QAC3B,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC;QAC7C,MAAM,MAAM,GAAG,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC;QAC/C,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;QAE9E,MAAM,MAAM,GAAG,4BAA4B,CAAC,OAAO,CAAC,CAAC;QACrD,MAAM,QAAQ,GAAG,gBAAgB,CAAC,UAAU,CAAC,CAAC,QAAQ,CAAC;QACvD,MAAM,IAAI,GAAG,mBAAmB,CAAC,OAAO,EAAE,EAAE,MAAM,EAAE,CAAC;aAClD,KAAK,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,GAAG,iBAAiB,EAAE,IAAI,GAAG,iBAAiB,CAAC;aAC/D,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC;QAEnD,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,iBAAiB,CAAC,CAAC,CAAC;QAEzE,OAAO,MAAM,CAAC,CAAC,EAAE,eAAe,CAAC,QAAQ,EAAE;YACzC,OAAO,EAAE,gBAAgB;YACzB,KAAK,EAAE,KAAK;YACZ,OAAO,EAAE,UAAU;YACnB,MAAM;YACN,MAAM;YACN,MAAM,EAAE,0BAA0B,CAAC,OAAO,CAAC;YAC3C,IAAI,EAAE,YAAY,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;gBAC/B,GAAG,GAAG;gBACN,GAAG,EAAE,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC;gBACxB,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC;gBACzB,OAAO,EAAE,GAAG,CAAC,MAAM,KAAK,MAAM;aAC/B,CAAC,CAAC;YACH,IAAI;YACJ,MAAM,EAAE,cAAc;YACtB,OAAO,EAAE,kBAAkB;YAC3B,SAAS,EAAE,oBAAoB;YAC/B,IAAI;YACJ,KAAK;YACL,WAAW,EAAE,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS;YAC7D,OAAO,EAAE,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS;SAC9D,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,IAAI,CAAC,kBAAkB,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QACvC,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,SAAS,EAAE,CAAC;QACrC,MAAM,IAAI,GAAG,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;QAClE,wEAAwE;QACxE,uEAAuE;QACvE,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,CAAC;QAEpD,MAAM,OAAO,GAAG,MAAM,qBAAqB,CACzC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,OAAO,EACpB,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,EAAE,CAAC,CAAC,EAC7B,IAAI,CACL,CAAC;QAEF,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;YAC1B,KAAK,CAAC,CAAC,EAAE,OAAO,EAAE,oCAAoC,CAAC,CAAC;YACxD,OAAO,CAAC,CAAC,QAAQ,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QAC/B,CAAC;QAED,KAAK,CACH,CAAC,EACD,QAAQ,EACR,IAAI;YACF,CAAC,CAAC,UAAU,OAAO,CAAC,IAAI,CAAC,IAAI,kBAAkB;YAC/C,CAAC,CAAC,UAAU,OAAO,CAAC,IAAI,CAAC,IAAI,oBAAoB,CACpD,CAAC;QACF,OAAO,CAAC,CAAC,QAAQ,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IAC/B,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,IAAI,CAAC,oBAAoB,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QACzC,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,SAAS,EAAE,CAAC;QACrC,MAAM,IAAI,GAAG,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;QAClE,MAAM,EAAE,GAAG,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,EAAE,CAAC,CAAC,CAAC;QAEzC,wEAAwE;QACxE,2EAA2E;QAC3E,mCAAmC;QACnC,MAAM,IAAI,GAAG,mBAAmB,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,CAAC;YACzF,EAAE,IAAI,CAAC,IAAI,CAAC;QAEd,IAAI,CAAC,CAAC,MAAM,oBAAoB,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC;YAC5D,KAAK,CAAC,CAAC,EAAE,OAAO,EAAE,oCAAoC,CAAC,CAAC;YACxD,OAAO,CAAC,CAAC,QAAQ,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QAC/B,CAAC;QAED,KAAK,CAAC,CAAC,EAAE,QAAQ,EAAE,WAAW,IAAI,IAAI,KAAK,WAAW,CAAC,CAAC;QACxD,OAAO,CAAC,CAAC,QAAQ,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IAC/B,CAAC,CAAC,CAAC;AACL,CAAC;AAED,sFAAsF;AACtF,MAAM,UAAU,cAAc,CAAC,OAAe;IAC5C,OAAO,0BAA0B,CAAC,OAAO,CAAC,CAAC;AAC7C,CAAC;AAED,yCAAyC;AACzC,MAAM,UAAU,OAAO,CAAC,MAAqB,EAAE,IAAI,GAAG,CAAC;IACrD,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IACtD,OAAO,GAAG,aAAa,WAAW,MAAM,GAAG,KAAK,EAAE,CAAC;AACrD,CAAC;AAED,0DAA0D;AAC1D,SAAS,QAAQ,CAAC,KAAyB;IACzC,OAAO,KAAK,KAAK,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC;AAChD,CAAC;AAED,iDAAiD;AACjD,SAAS,UAAU,CAAC,OAAuB,EAAE,QAAgB;IAC3D,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,KAAK,EAAE,CAAC,CAAC,CAAC,kBAAkB,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC;IAEjG,OAAO;QACL,EAAE,EAAE,OAAO,CAAC,EAAE;QACd,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,MAAM,EAAE,OAAO,CAAC,IAAI,CAAC,IAAI;QACzB,KAAK,EAAE,OAAO,CAAC,IAAI,CAAC,KAAK;QACzB,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,QAAQ,EAAE,gBAAgB,CAAC,OAAO,CAAC,QAAQ,EAAE,QAAQ,CAAC;QACtD,2EAA2E;QAC3E,qEAAqE;QACrE,OAAO,EAAE,OAAO,CAAC,WAAW,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC;QAC9E,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC,KAAK,KAAK,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK;QACxE,OAAO,EAAE,OAAO,CAAC,IAAI,CAAC,SAAS,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS;QACtE,uEAAuE;QACvE,6DAA6D;QAC7D,QAAQ,EAAE,UAAU,kBAAkB,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,YAAY,kBAAkB,CAAC,OAAO,OAAO,EAAE,CAAC,EAAE;KAC7G,CAAC;AACJ,CAAC;AAED,qFAAqF;AACrF,SAAS,IAAI,CAAC,KAAc;IAC1B,OAAO,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;AAChD,CAAC"}

package/dist/admin/preview.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"preview.d.ts","sourceRoot":"","sources":["../../src/admin/preview.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAW,IAAI,EAAE,MAAM,MAAM,CAAC;AAM1C,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AAM5C,8DAA8D;AAC9D,eAAO,MAAM,YAAY,mBAA4B,CAAC;AAEtD;;;;;;;;;;;GAWG;AACH,wBAAgB,YAAY,CAAC,GAAG,EAAE,IAAI,CAAC,UAAU,CAAC,GAAG,IAAI,CAYxD"}
+{"version":3,"file":"preview.d.ts","sourceRoot":"","sources":["../../src/admin/preview.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAW,IAAI,EAAE,MAAM,MAAM,CAAC;AAO1C,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AAS5C,8DAA8D;AAC9D,eAAO,MAAM,YAAY,mBAA4B,CAAC;AAEtD;;;;;;;;;;;GAWG;AACH,wBAAgB,YAAY,CAAC,GAAG,EAAE,IAAI,CAAC,UAAU,CAAC,GAAG,IAAI,CAqBxD"}

package/dist/admin/preview.js

@@ -1,9 +1,13 @@
 import { renderMarkdown } from '../content/markdown.js';
 import { defaultPermalink, slugify } from '../content/slug.js';
+import { calendarDayIn, toUtcInstant } from '../content/time.js';
 import { normalizeBody } from '../content/writer.js';
+import { authorContext } from '../web/authors.js';
 import { documentContext } from '../web/context.js';
+import { findUserById, listUsers } from './accounts.js';
 import { TEMPLATES } from '../web/render.js';
 import { splitTags } from './documents.js';
+import { readSiteSettings } from './settings.js';
 import { ADMIN_PREFIX } from './session.js';
 /** Where the editor posts a body it wants to see rendered. */
 export const PREVIEW_PATH = `${ADMIN_PREFIX}/preview`;
@@ -23,14 +27,24 @@ export function mountPreview(app) {
     app.post(PREVIEW_PATH, async (c) => {
         const body = await c.req.parseBody();
         const type = text(body['type']) === 'page' ? 'page' : 'post';
-        return c.html(c.var.renderer.render(type === 'post' ? TEMPLATES.post : TEMPLATES.page, documentContext(previewDocument(c, { type, body }))));
+        const document = previewDocument(c, { type, body });
+        return c.html(c.var.renderer.render(type === 'post' ? TEMPLATES.post : TEMPLATES.page, 
+        // With the site's image config, so a preview shows the `<picture>` the
+        // published page would show rather than the plain image behind it, and
+        // with the author resolved, so the byline reads the way the published
+        // page's would (TASK-67).
+        documentContext(document, c.var.config, authorContext(listUsers(c.var.config.dataDir), document.author))));
     });
 }
 /** What a submitted editor form looks like as a document nobody has saved. */
 function previewDocument(c, input) {
     const { type, body } = input;
+    const timezone = readSiteSettings(c.var.config.contentDir).timezone;
     const title = text(body['title']).trim();
-    const date = type === 'post' ? orNow(text(body['date']).trim()) : undefined;
+    // The editor's field is wall-clock time in the site's zone (decision-11), so
+    // the preview reads it the way the save will and shows the date the saved
+    // post would show rather than one the server's own zone invented.
+    const date = type === 'post' ? orNow(text(body['date']).trim(), timezone, c.var.store.now()) : undefined;
     const slug = slugify(text(body['slug']).trim()) || slugify(title) || 'preview';
     const markdown = normalizeBody(text(body['body']));
     return {
@@ -39,10 +53,16 @@ function previewDocument(c, input) {
         // prints them; neither is ever written anywhere.
         path: `${type === 'post' ? 'posts' : 'pages'}/${slug}.md`,
         slug,
-        permalink: permalinkFor({ type, slug, date, submitted: text(body['permalink']).trim() }),
+        permalink: permalinkFor({
+            type,
+            slug,
+            date: date === undefined ? undefined : (calendarDayIn(date, timezone) ?? date),
+            submitted: text(body['permalink']).trim(),
+        }),
         title: title === '' ? 'Untitled' : title,
         ...(date === undefined ? {} : { date }),
         tags: splitTags(text(body['tags'])),
+        categories: splitTags(text(body['categories'])),
         draft: body['draft'] !== undefined,
         ...(text(body['description']) === '' ? {} : { description: text(body['description']).trim() }),
         ...(currentUsername(c) === undefined ? {} : { author: currentUsername(c) }),
@@ -65,16 +85,20 @@ function permalinkFor(input) {
         return '/';
     }
 }
-/** A date field that is empty or unusable becomes now, so the layout has one. */
-function orNow(value) {
-    return /^\d{4}-\d{2}-\d{2}/.test(value) ? value : new Date().toISOString();
+/**
+ * The date field as a UTC instant. One that is empty or unusable becomes now,
+ * so the layout always has one to print.
+ */
+function orNow(value, timezone, now) {
+    const instant = /^\d{4}-\d{2}-\d{2}/.test(value) ? toUtcInstant(value, timezone) : undefined;
+    return instant ?? now.toISOString();
 }
 /** The signed-in user's login, so a byline in the theme has something to print. */
 function currentUsername(c) {
     const userId = c.var.session?.userId;
     if (userId == null)
         return undefined;
-    return c.var.admin.getUserById(userId)?.username;
+    return findUserById(c.var.config.dataDir, userId)?.username;
 }
 /** A form field as a string. A file upload, or a missing field, is the empty one. */
 function text(value) {

package/dist/admin/preview.js.map

@@ -1 +1 @@
-{"version":3,"file":"preview.js","sourceRoot":"","sources":["../../src/admin/preview.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AACxD,OAAO,EAAE,gBAAgB,EAAE,OAAO,EAAE,MAAM,oBAAoB,CAAC;AAC/D,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAErD,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AACpD,OAAO,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAC7C,OAAO,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAC3C,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAE5C,8DAA8D;AAC9D,MAAM,CAAC,MAAM,YAAY,GAAG,GAAG,YAAY,UAAU,CAAC;AAEtD;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,YAAY,CAAC,GAAqB;IAChD,GAAG,CAAC,IAAI,CAAC,YAAY,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QACjC,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,SAAS,EAAE,CAAC;QACrC,MAAM,IAAI,GAAiB,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,KAAK,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC;QAE3E,OAAO,CAAC,CAAC,IAAI,CACX,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,CACnB,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,EACjD,eAAe,CAAC,eAAe,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CACpD,CACF,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC;AAED,8EAA8E;AAC9E,SAAS,eAAe,CACtB,CAAsB,EACtB,KAA4D;IAE5D,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,KAAK,CAAC;IAE7B,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IACzC,MAAM,IAAI,GAAG,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAC5E,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,OAAO,CAAC,KAAK,CAAC,IAAI,SAAS,CAAC;IAC/E,MAAM,QAAQ,GAAG,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;IAEnD,OAAO;QACL,IAAI;QACJ,sEAAsE;QACtE,iDAAiD;QACjD,IAAI,EAAE,GAAG,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,IAAI,IAAI,KAAK;QACzD,IAAI;QACJ,SAAS,EAAE,YAAY,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;QACxF,KAAK,EAAE,KAAK,KAAK,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,KAAK;QACxC,GAAG,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC;QACvC,IAAI,EAAE,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC;QACnC,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC,KAAK,SAAS;QAClC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;QAC9F,GAAG,CAAC,eAAe,CAAC,CAAC,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,eAAe,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3E,KAAK,EAAE,EAAE;QACT,IAAI,EAAE,QAAQ;QACd,IAAI,EAAE,cAAc,CAAC,QAAQ,CAAC;QAC9B,kEAAkE;QAClE,oBAAoB;QACpB,IAAI,EAAE,EAAE;KACT,CAAC;AACJ,CAAC;AAED,oFAAoF;AACpF,SAAS,YAAY,CAAC,KAKrB;IACC,IAAI,KAAK,CAAC,SAAS,KAAK,EAAE;QAAE,OAAO,KAAK,CAAC,SAAS,CAAC;IACnD,IAAI,CAAC;QACH,OAAO,gBAAgB,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;IACpF,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,GAAG,CAAC;IACb,CAAC;AACH,CAAC;AAED,iFAAiF;AACjF,SAAS,KAAK,CAAC,KAAa;IAC1B,OAAO,oBAAoB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;AAC7E,CAAC;AAED,mFAAmF;AACnF,SAAS,eAAe,CAAC,CAAsB;IAC7C,MAAM,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC;IACrC,IAAI,MAAM,IAAI,IAAI;QAAE,OAAO,SAAS,CAAC;IACrC,OAAO,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC,MAAM,CAAC,EAAE,QAAQ,CAAC;AACnD,CAAC;AAED,qFAAqF;AACrF,SAAS,IAAI,CAAC,KAAc;IAC1B,OAAO,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;AAChD,CAAC"}
+{"version":3,"file":"preview.js","sourceRoot":"","sources":["../../src/admin/preview.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AACxD,OAAO,EAAE,gBAAgB,EAAE,OAAO,EAAE,MAAM,oBAAoB,CAAC;AAC/D,OAAO,EAAE,aAAa,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AACjE,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAErD,OAAO,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAClD,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AACpD,OAAO,EAAE,YAAY,EAAE,SAAS,EAAE,MAAM,eAAe,CAAC;AACxD,OAAO,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAC7C,OAAO,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAC3C,OAAO,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AACjD,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAE5C,8DAA8D;AAC9D,MAAM,CAAC,MAAM,YAAY,GAAG,GAAG,YAAY,UAAU,CAAC;AAEtD;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,YAAY,CAAC,GAAqB;IAChD,GAAG,CAAC,IAAI,CAAC,YAAY,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QACjC,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,SAAS,EAAE,CAAC;QACrC,MAAM,IAAI,GAAiB,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,KAAK,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC;QAC3E,MAAM,QAAQ,GAAG,eAAe,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QAEpD,OAAO,CAAC,CAAC,IAAI,CACX,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,CACnB,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI;QACjD,uEAAuE;QACvE,uEAAuE;QACvE,sEAAsE;QACtE,0BAA0B;QAC1B,eAAe,CACb,QAAQ,EACR,CAAC,CAAC,GAAG,CAAC,MAAM,EACZ,aAAa,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,CAChE,CACF,CACF,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC;AAED,8EAA8E;AAC9E,SAAS,eAAe,CACtB,CAAsB,EACtB,KAA4D;IAE5D,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,KAAK,CAAC;IAE7B,MAAM,QAAQ,GAAG,gBAAgB,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,QAAQ,CAAC;IACpE,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IACzC,6EAA6E;IAC7E,0EAA0E;IAC1E,kEAAkE;IAClE,MAAM,IAAI,GACR,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAC9F,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,OAAO,CAAC,KAAK,CAAC,IAAI,SAAS,CAAC;IAC/E,MAAM,QAAQ,GAAG,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;IAEnD,OAAO;QACL,IAAI;QACJ,sEAAsE;QACtE,iDAAiD;QACjD,IAAI,EAAE,GAAG,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,IAAI,IAAI,KAAK;QACzD,IAAI;QACJ,SAAS,EAAE,YAAY,CAAC;YACtB,IAAI;YACJ,IAAI;YACJ,IAAI,EAAE,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,IAAI,EAAE,QAAQ,CAAC,IAAI,IAAI,CAAC;YAC9E,SAAS,EAAE,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,EAAE;SAC1C,CAAC;QACF,KAAK,EAAE,KAAK,KAAK,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,KAAK;QACxC,GAAG,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC;QACvC,IAAI,EAAE,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC;QACnC,UAAU,EAAE,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC;QAC/C,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC,KAAK,SAAS;QAClC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;QAC9F,GAAG,CAAC,eAAe,CAAC,CAAC,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,eAAe,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3E,KAAK,EAAE,EAAE;QACT,IAAI,EAAE,QAAQ;QACd,IAAI,EAAE,cAAc,CAAC,QAAQ,CAAC;QAC9B,kEAAkE;QAClE,oBAAoB;QACpB,IAAI,EAAE,EAAE;KACT,CAAC;AACJ,CAAC;AAED,oFAAoF;AACpF,SAAS,YAAY,CAAC,KAKrB;IACC,IAAI,KAAK,CAAC,SAAS,KAAK,EAAE;QAAE,OAAO,KAAK,CAAC,SAAS,CAAC;IACnD,IAAI,CAAC;QACH,OAAO,gBAAgB,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;IACpF,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,GAAG,CAAC;IACb,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,SAAS,KAAK,CAAC,KAAa,EAAE,QAAgB,EAAE,GAAS;IACvD,MAAM,OAAO,GAAG,oBAAoB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAC7F,OAAO,OAAO,IAAI,GAAG,CAAC,WAAW,EAAE,CAAC;AACtC,CAAC;AAED,mFAAmF;AACnF,SAAS,eAAe,CAAC,CAAsB;IAC7C,MAAM,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC;IACrC,IAAI,MAAM,IAAI,IAAI;QAAE,OAAO,SAAS,CAAC;IACrC,OAAO,YAAY,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,EAAE,QAAQ,CAAC;AAC9D,CAAC;AAED,qFAAqF;AACrF,SAAS,IAAI,CAAC,KAAc;IAC1B,OAAO,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;AAChD,CAAC"}

package/dist/admin/recovery.d.ts

@@ -0,0 +1,92 @@
+import type { Context, Hono } from 'hono';
+import type { ResolvedConfig } from '../config.ts';
+import type { GeekityEnv } from '../env.ts';
+import type { AdminRender } from './documents.ts';
+import type { Session } from './store.ts';
+import type { LoginThrottle } from './throttle.ts';
+/**
+ * Forgetting a password, and getting back in without a shell.
+ *
+ * Two unauthenticated screens, built to the OWASP Forgot Password guidance,
+ * and four rules that between them are the whole design:
+ *
+ * - **One answer.** The request form says exactly the same thing to a name
+ *   that exists, a name that does not, and a name whose user has no email
+ *   address. A recovery form that answered differently would be a list of
+ *   which accounts a site has, handed to anybody who asked.
+ * - **The link is the secret.** 256 random bits, in the URL, sent to an
+ *   address somebody put on their own account. The database keeps only its
+ *   SHA-256 (see the `password_resets` migration), so a copy of the cache is
+ *   not a stack of working links, and the token is never rendered into the
+ *   page of the browser that asked for it — only into the message.
+ * - **It is spent when it is used.** Setting a password deletes every reset
+ *   that user had outstanding and ends every session they had, because the
+ *   ordinary reason to reset a password is that somebody else may have had it.
+ * - **It cannot be a lever.** Requests are rate limited exactly as sign-ins
+ *   are (TASK-47), on a throttle of their own, so a flood of recovery requests
+ *   for one username cannot lock that person out of logging in.
+ */
+/** Where the request-a-link form lives. */
+export declare const FORGOT_PATH = "/admin/forgot";
+/** Where the set-a-new-password form lives. The link points here. */
+export declare const RESET_PATH = "/admin/reset";
+/** The fields the two forms submit. */
+export declare const RECOVERY_FIELDS: {
+    /** A username or an email address; the form does not ask which. */
+    readonly identifier: 'identifier';
+    /** The token, carried from the link's query string into the form. */
+    readonly token: 'token';
+    readonly password: 'password';
+    readonly passwordConfirmation: 'password_confirmation';
+};
+/**
+ * How long a link lasts, in seconds.
+ *
+ * An hour, which is what the task asks for and what OWASP calls a reasonable
+ * upper bound: long enough to walk to another machine and read the mail there,
+ * short enough that a link left in an inbox is not a spare key.
+ */
+export declare const RESET_TOKEN_LIFETIME_SECONDS = 3600;
+/** The message asking somebody whether they meant to do this. */
+export declare const RESET_TEMPLATE = "password-reset";
+/** The message telling them it happened. */
+export declare const PASSWORD_CHANGED_TEMPLATE = "password-changed";
+/**
+ * The one thing the request form ever says.
+ *
+ * Spelled once, and rendered whatever happened, so the two paths through the
+ * handler cannot drift into two different answers.
+ */
+export declare const RECOVERY_ANSWER: string;
+/** What {@link mountRecovery} needs from the admin around it. */
+export interface MountRecoveryOptions {
+    /** The admin's renderer, which injects the chrome, the CSRF token and the flash. */
+    render: AdminRender;
+    /**
+     * A session to hang a CSRF token on, made on the spot if the visitor has
+     * none. The same one the login and setup forms use: these pages are reached
+     * by somebody with no login, and a form with no session has no token.
+     */
+    anonymousSession: (c: Context<GeekityEnv>) => Session;
+    /**
+     * The throttle recovery requests are counted against.
+     *
+     * Its own, not the login one. Sharing would mean a stranger could lock
+     * somebody out of signing in by asking for their password to be reset over
+     * and over — turning a recovery feature into a denial of service against the
+     * person it exists to help.
+     */
+    throttle: (config: ResolvedConfig) => LoginThrottle;
+}
+/** Register the forgot-password and reset screens. */
+export declare function mountRecovery(app: Hono<GeekityEnv>, options: MountRecoveryOptions): void;
+/**
+ * What is wrong with the password somebody typed into the reset form.
+ *
+ * The same rules the change-password form and `geekity user add` enforce, so a
+ * password set through a reset link is one every other door would have taken.
+ */
+export declare function newPasswordProblem(password: string, confirmation: string): string | undefined;
+/** The link that goes in the message, absolute because it is read elsewhere. */
+export declare function resetLink(baseUrl: string, token: string): string;
+//# sourceMappingURL=recovery.d.ts.map

package/dist/admin/recovery.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"recovery.d.ts","sourceRoot":"","sources":["../../src/admin/recovery.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAE1C,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AACnD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AAG5C,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAGlD,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,YAAY,CAAC;AAG1C,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAEnD;;;;;;;;;;;;;;;;;;;;;GAqBG;AAEH,2CAA2C;AAC3C,eAAO,MAAM,WAAW,kBAA2B,CAAC;AAEpD,qEAAqE;AACrE,eAAO,MAAM,UAAU,iBAA0B,CAAC;AAElD,uCAAuC;AACvC,eAAO,MAAM,eAAe;IAC1B,mEAAmE;aACnE,UAAU,EAAE,YAAY;IACxB,qEAAqE;aACrE,KAAK,EAAE,OAAO;aACd,QAAQ,EAAE,UAAU;aACpB,oBAAoB,EAAE,uBAAuB;CACrC,CAAC;AAEX;;;;;;GAMG;AACH,eAAO,MAAM,4BAA4B,OAAO,CAAC;AAEjD,iEAAiE;AACjE,eAAO,MAAM,cAAc,mBAAmB,CAAC;AAE/C,4CAA4C;AAC5C,eAAO,MAAM,yBAAyB,qBAAqB,CAAC;AAE5D;;;;;GAKG;AACH,eAAO,MAAM,eAAe,QAEoE,CAAC;AAEjG,iEAAiE;AACjE,MAAM,WAAW,oBAAoB;IACnC,oFAAoF;IACpF,MAAM,EAAE,WAAW,CAAC;IACpB;;;;OAIG;IACH,gBAAgB,EAAE,CAAC,CAAC,EAAE,OAAO,CAAC,UAAU,CAAC,KAAK,OAAO,CAAC;IACtD;;;;;;;OAOG;IACH,QAAQ,EAAE,CAAC,MAAM,EAAE,cAAc,KAAK,aAAa,CAAC;CACrD;AAED,sDAAsD;AACtD,wBAAgB,aAAa,CAAC,GAAG,EAAE,IAAI,CAAC,UAAU,CAAC,EAAE,OAAO,EAAE,oBAAoB,GAAG,IAAI,CA6JxF;AAiBD;;;;;GAKG;AACH,wBAAgB,kBAAkB,CAAC,QAAQ,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAK7F;AAED,gFAAgF;AAChF,wBAAgB,SAAS,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,CAIhE"}

package/dist/admin/recovery.js

@@ -0,0 +1,229 @@
+import { findUserById, findUserByIdentifier, setUserPassword } from './accounts.js';
+import { passwordProblem } from './credentials.js';
+import { flash } from './flash.js';
+import { ADMIN_PREFIX } from './session.js';
+import { ADMIN_TEMPLATES } from './templates.js';
+import { clientAddress, describeWait, loginKeys } from './throttle.js';
+/**
+ * Forgetting a password, and getting back in without a shell.
+ *
+ * Two unauthenticated screens, built to the OWASP Forgot Password guidance,
+ * and four rules that between them are the whole design:
+ *
+ * - **One answer.** The request form says exactly the same thing to a name
+ *   that exists, a name that does not, and a name whose user has no email
+ *   address. A recovery form that answered differently would be a list of
+ *   which accounts a site has, handed to anybody who asked.
+ * - **The link is the secret.** 256 random bits, in the URL, sent to an
+ *   address somebody put on their own account. The database keeps only its
+ *   SHA-256 (see the `password_resets` migration), so a copy of the cache is
+ *   not a stack of working links, and the token is never rendered into the
+ *   page of the browser that asked for it — only into the message.
+ * - **It is spent when it is used.** Setting a password deletes every reset
+ *   that user had outstanding and ends every session they had, because the
+ *   ordinary reason to reset a password is that somebody else may have had it.
+ * - **It cannot be a lever.** Requests are rate limited exactly as sign-ins
+ *   are (TASK-47), on a throttle of their own, so a flood of recovery requests
+ *   for one username cannot lock that person out of logging in.
+ */
+/** Where the request-a-link form lives. */
+export const FORGOT_PATH = `${ADMIN_PREFIX}/forgot`;
+/** Where the set-a-new-password form lives. The link points here. */
+export const RESET_PATH = `${ADMIN_PREFIX}/reset`;
+/** The fields the two forms submit. */
+export const RECOVERY_FIELDS = {
+    /** A username or an email address; the form does not ask which. */
+    identifier: 'identifier',
+    /** The token, carried from the link's query string into the form. */
+    token: 'token',
+    password: 'password',
+    passwordConfirmation: 'password_confirmation',
+};
+/**
+ * How long a link lasts, in seconds.
+ *
+ * An hour, which is what the task asks for and what OWASP calls a reasonable
+ * upper bound: long enough to walk to another machine and read the mail there,
+ * short enough that a link left in an inbox is not a spare key.
+ */
+export const RESET_TOKEN_LIFETIME_SECONDS = 3600;
+/** The message asking somebody whether they meant to do this. */
+export const RESET_TEMPLATE = 'password-reset';
+/** The message telling them it happened. */
+export const PASSWORD_CHANGED_TEMPLATE = 'password-changed';
+/**
+ * The one thing the request form ever says.
+ *
+ * Spelled once, and rendered whatever happened, so the two paths through the
+ * handler cannot drift into two different answers.
+ */
+export const RECOVERY_ANSWER = 'If that matches an account with an email address on it, a link to set a new password is on ' +
+    'its way. The link lasts an hour and works once. Check the spam folder if it does not arrive.';
+/** Register the forgot-password and reset screens. */
+export function mountRecovery(app, options) {
+    const { render, anonymousSession, throttle } = options;
+    app.get(FORGOT_PATH, (c) => {
+        anonymousSession(c);
+        return render(c, ADMIN_TEMPLATES.forgot, forgotScreen(c));
+    });
+    app.post(FORGOT_PATH, async (c) => {
+        const config = c.var.config;
+        const body = await c.req.parseBody();
+        const identifier = field(body[RECOVERY_FIELDS.identifier]).trim();
+        const address = clientAddress(c, config);
+        const keys = loginKeys(identifier, address);
+        const throttled = throttle(config);
+        const wait = throttled.retryAfter(keys);
+        if (wait !== undefined) {
+            anonymousSession(c);
+            c.status(429);
+            c.header('Retry-After', String(wait));
+            return render(c, ADMIN_TEMPLATES.forgot, 
+            // Says nothing about whether that account exists: an unknown name is
+            // counted and locked out exactly as a real one is.
+            forgotScreen(c, { error: `Too many requests. Try again in ${describeWait(wait)}.` }));
+        }
+        // Every request is counted, not only the ones that matched: counting a
+        // match differently would make the lockout itself the answer the rest of
+        // this handler refuses to give.
+        throttled.fail(keys);
+        const user = identifier === '' ? undefined : findUserByIdentifier(config.dataDir, identifier);
+        if (user?.email !== undefined && c.var.mail.configured()) {
+            // A good moment to sweep: resets are rare, and this is the one handler
+            // that writes a row to the table.
+            c.var.admin.prunePasswordResets();
+            const reset = c.var.admin.createPasswordReset({
+                userId: user.id,
+                lifetimeSeconds: RESET_TOKEN_LIFETIME_SECONDS,
+            });
+            // Dropped rather than awaited, for two reasons: the answer is the same
+            // whatever the provider says, and waiting for a provider on one path and
+            // not the other is how the page's timing would start telling people
+            // which usernames exist.
+            void c.var.mail.send({
+                to: user.email,
+                template: RESET_TEMPLATE,
+                data: {
+                    username: user.username,
+                    resetUrl: resetLink(config.baseUrl, reset.token),
+                    expiresAt: reset.expiresAt,
+                    expiresInHours: RESET_TOKEN_LIFETIME_SECONDS / 3600,
+                },
+            });
+        }
+        anonymousSession(c);
+        return render(c, ADMIN_TEMPLATES.forgot, forgotScreen(c, { sent: true }));
+    });
+    app.get(RESET_PATH, (c) => {
+        anonymousSession(c);
+        const token = c.req.query(RECOVERY_FIELDS.token) ?? '';
+        const reset = token === '' ? undefined : c.var.admin.getPasswordReset(token);
+        if (reset === undefined)
+            return refuseToken(c);
+        return render(c, ADMIN_TEMPLATES.reset, resetScreen(token));
+    });
+    app.post(RESET_PATH, async (c) => {
+        const dataDir = c.var.config.dataDir;
+        const body = await c.req.parseBody();
+        const token = field(body[RECOVERY_FIELDS.token]);
+        const password = field(body[RECOVERY_FIELDS.password]);
+        const confirmation = field(body[RECOVERY_FIELDS.passwordConfirmation]);
+        // Checked before the password rules, so a stale link is a stale link
+        // whatever was typed into it — and so a refused form never spends one.
+        const reset = token === '' ? undefined : c.var.admin.getPasswordReset(token);
+        if (reset === undefined)
+            return refuseToken(c);
+        const problem = newPasswordProblem(password, confirmation);
+        if (problem !== undefined) {
+            c.status(400);
+            // Nothing typed is echoed back: both fields are passwords.
+            return render(c, ADMIN_TEMPLATES.reset, resetScreen(token, { problem }));
+        }
+        const user = findUserById(dataDir, reset.userId);
+        if (user === undefined) {
+            // The account went while the link was in flight. The token is worthless
+            // now, and saying so beats a 500 from a write against nobody.
+            c.var.admin.deletePasswordResetsForUser(reset.userId);
+            return refuseToken(c);
+        }
+        await setUserPassword({ dataDir, userId: user.id, password });
+        // Everything that was a way into this account is now closed: the link that
+        // was just used, every other link asked for while it was in flight, and
+        // every browser that was signed in. Nobody is spared, because the person
+        // doing this is not signed in — they are about to be.
+        c.var.admin.deletePasswordResetsForUser(user.id);
+        const ended = c.var.admin.deleteSessionsForUser(user.id);
+        if (user.email !== undefined) {
+            // The other half of the OWASP guidance: whoever owns the address hears
+            // that the password changed, so a reset they did not ask for is
+            // something they find out about rather than something they discover.
+            void c.var.mail.send({
+                to: user.email,
+                template: PASSWORD_CHANGED_TEMPLATE,
+                data: { username: user.username, signedOut: ended },
+            });
+        }
+        flash(c, 'notice', 'Your password was changed. Sign in with the new one.');
+        return c.redirect(LOGIN_REDIRECT, 303);
+    });
+    /** What both handlers say to a token that buys nothing. */
+    function refuseToken(c) {
+        anonymousSession(c);
+        c.status(400);
+        return render(c, ADMIN_TEMPLATES.reset, {
+            forgotUrl: FORGOT_PATH,
+            resetUrl: RESET_PATH,
+            fields: RECOVERY_FIELDS,
+            invalid: true,
+        });
+    }
+    /** Everything the forgot-password template renders. */
+    function forgotScreen(c, extra = {}) {
+        return {
+            forgotUrl: FORGOT_PATH,
+            loginUrl: LOGIN_REDIRECT,
+            fields: RECOVERY_FIELDS,
+            // Read per request, exactly as the mail service reads it: a credential
+            // pasted into the settings screen turns recovery on for the next visitor
+            // without a restart.
+            configured: c.var.mail.configured(),
+            answer: RECOVERY_ANSWER,
+            sent: false,
+            ...extra,
+        };
+    }
+}
+/** Where a finished reset sends the browser. Spelled here to avoid a cycle. */
+const LOGIN_REDIRECT = `${ADMIN_PREFIX}/login`;
+/** Everything the reset template renders for a link that is still good. */
+function resetScreen(token, extra = {}) {
+    return {
+        forgotUrl: FORGOT_PATH,
+        resetUrl: RESET_PATH,
+        fields: RECOVERY_FIELDS,
+        token,
+        invalid: false,
+        ...extra,
+    };
+}
+/**
+ * What is wrong with the password somebody typed into the reset form.
+ *
+ * The same rules the change-password form and `geekity user add` enforce, so a
+ * password set through a reset link is one every other door would have taken.
+ */
+export function newPasswordProblem(password, confirmation) {
+    return (passwordProblem(password) ??
+        (password === confirmation ? undefined : 'The two passwords do not match.'));
+}
+/** The link that goes in the message, absolute because it is read elsewhere. */
+export function resetLink(baseUrl, token) {
+    const url = new URL(RESET_PATH, baseUrl.endsWith('/') ? baseUrl : `${baseUrl}/`);
+    url.searchParams.set(RECOVERY_FIELDS.token, token);
+    return url.href;
+}
+/** A form field as a string. A file upload, or a missing field, is the empty one. */
+function field(value) {
+    return typeof value === 'string' ? value : '';
+}
+//# sourceMappingURL=recovery.js.map

package/dist/admin/recovery.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"recovery.js","sourceRoot":"","sources":["../../src/admin/recovery.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,YAAY,EAAE,oBAAoB,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AACpF,OAAO,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AAEnD,OAAO,EAAE,KAAK,EAAE,MAAM,YAAY,CAAC;AACnC,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAE5C,OAAO,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AACjD,OAAO,EAAE,aAAa,EAAE,YAAY,EAAE,SAAS,EAAE,MAAM,eAAe,CAAC;AAGvE;;;;;;;;;;;;;;;;;;;;;GAqBG;AAEH,2CAA2C;AAC3C,MAAM,CAAC,MAAM,WAAW,GAAG,GAAG,YAAY,SAAS,CAAC;AAEpD,qEAAqE;AACrE,MAAM,CAAC,MAAM,UAAU,GAAG,GAAG,YAAY,QAAQ,CAAC;AAElD,uCAAuC;AACvC,MAAM,CAAC,MAAM,eAAe,GAAG;IAC7B,mEAAmE;IACnE,UAAU,EAAE,YAAY;IACxB,qEAAqE;IACrE,KAAK,EAAE,OAAO;IACd,QAAQ,EAAE,UAAU;IACpB,oBAAoB,EAAE,uBAAuB;CACrC,CAAC;AAEX;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,4BAA4B,GAAG,IAAI,CAAC;AAEjD,iEAAiE;AACjE,MAAM,CAAC,MAAM,cAAc,GAAG,gBAAgB,CAAC;AAE/C,4CAA4C;AAC5C,MAAM,CAAC,MAAM,yBAAyB,GAAG,kBAAkB,CAAC;AAE5D;;;;;GAKG;AACH,MAAM,CAAC,MAAM,eAAe,GAC1B,6FAA6F;IAC7F,8FAA8F,CAAC;AAuBjG,sDAAsD;AACtD,MAAM,UAAU,aAAa,CAAC,GAAqB,EAAE,OAA6B;IAChF,MAAM,EAAE,MAAM,EAAE,gBAAgB,EAAE,QAAQ,EAAE,GAAG,OAAO,CAAC;IAEvD,GAAG,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC,CAAC,EAAE,EAAE;QACzB,gBAAgB,CAAC,CAAC,CAAC,CAAC;QACpB,OAAO,MAAM,CAAC,CAAC,EAAE,eAAe,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC;IAC5D,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,IAAI,CAAC,WAAW,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAChC,MAAM,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC;QAC5B,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,SAAS,EAAE,CAAC;QACrC,MAAM,UAAU,GAAG,KAAK,CAAC,IAAI,CAAC,eAAe,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAElE,MAAM,OAAO,GAAG,aAAa,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;QACzC,MAAM,IAAI,GAAG,SAAS,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;QAC5C,MAAM,SAAS,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC;QAEnC,MAAM,IAAI,GAAG,SAAS,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;QACxC,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;YACvB,gBAAgB,CAAC,CAAC,CAAC,CAAC;YACpB,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACd,CAAC,CAAC,MAAM,CAAC,aAAa,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;YACtC,OAAO,MAAM,CACX,CAAC,EACD,eAAe,CAAC,MAAM;YACtB,qEAAqE;YACrE,mDAAmD;YACnD,YAAY,CAAC,CAAC,EAAE,EAAE,KAAK,EAAE,mCAAmC,YAAY,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CACrF,CAAC;QACJ,CAAC;QAED,uEAAuE;QACvE,yEAAyE;QACzE,gCAAgC;QAChC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAErB,MAAM,IAAI,GAAG,UAAU,KAAK,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,oBAAoB,CAAC,MAAM,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;QAE9F,IAAI,IAAI,EAAE,KAAK,KAAK,SAAS,IAAI,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,UAAU,EAAE,EAAE,CAAC;YACzD,uEAAuE;YACvE,kCAAkC;YAClC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,mBAAmB,EAAE,CAAC;YAClC,MAAM,KAAK,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,mBAAmB,CAAC;gBAC5C,MAAM,EAAE,IAAI,CAAC,EAAE;gBACf,eAAe,EAAE,4BAA4B;aAC9C,CAAC,CAAC;YAEH,uEAAuE;YACvE,yEAAyE;YACzE,oEAAoE;YACpE,yBAAyB;YACzB,KAAK,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC;gBACnB,EAAE,EAAE,IAAI,CAAC,KAAK;gBACd,QAAQ,EAAE,cAAc;gBACxB,IAAI,EAAE;oBACJ,QAAQ,EAAE,IAAI,CAAC,QAAQ;oBACvB,QAAQ,EAAE,SAAS,CAAC,MAAM,CAAC,OAAO,EAAE,KAAK,CAAC,KAAK,CAAC;oBAChD,SAAS,EAAE,KAAK,CAAC,SAAS;oBAC1B,cAAc,EAAE,4BAA4B,GAAG,IAAI;iBACpD;aACF,CAAC,CAAC;QACL,CAAC;QAED,gBAAgB,CAAC,CAAC,CAAC,CAAC;QACpB,OAAO,MAAM,CAAC,CAAC,EAAE,eAAe,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;IAC5E,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,GAAG,CAAC,UAAU,EAAE,CAAC,CAAC,EAAE,EAAE;QACxB,gBAAgB,CAAC,CAAC,CAAC,CAAC;QACpB,MAAM,KAAK,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,eAAe,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;QACvD,MAAM,KAAK,GAAG,KAAK,KAAK,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAC;QAE7E,IAAI,KAAK,KAAK,SAAS;YAAE,OAAO,WAAW,CAAC,CAAC,CAAC,CAAC;QAC/C,OAAO,MAAM,CAAC,CAAC,EAAE,eAAe,CAAC,KAAK,EAAE,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC;IAC9D,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,IAAI,CAAC,UAAU,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAC/B,MAAM,OAAO,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC;QACrC,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,SAAS,EAAE,CAAC;QACrC,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC,CAAC;QACjD,MAAM,QAAQ,GAAG,KAAK,CAAC,IAAI,CAAC,eAAe,CAAC,QAAQ,CAAC,CAAC,CAAC;QACvD,MAAM,YAAY,GAAG,KAAK,CAAC,IAAI,CAAC,eAAe,CAAC,oBAAoB,CAAC,CAAC,CAAC;QAEvE,qEAAqE;QACrE,uEAAuE;QACvE,MAAM,KAAK,GAAG,KAAK,KAAK,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAC;QAC7E,IAAI,KAAK,KAAK,SAAS;YAAE,OAAO,WAAW,CAAC,CAAC,CAAC,CAAC;QAE/C,MAAM,OAAO,GAAG,kBAAkB,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC;QAC3D,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;YAC1B,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACd,2DAA2D;YAC3D,OAAO,MAAM,CAAC,CAAC,EAAE,eAAe,CAAC,KAAK,EAAE,WAAW,CAAC,KAAK,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC;QAC3E,CAAC;QAED,MAAM,IAAI,GAAG,YAAY,CAAC,OAAO,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;QACjD,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;YACvB,wEAAwE;YACxE,8DAA8D;YAC9D,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,2BAA2B,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;YACtD,OAAO,WAAW,CAAC,CAAC,CAAC,CAAC;QACxB,CAAC;QAED,MAAM,eAAe,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC;QAE9D,2EAA2E;QAC3E,wEAAwE;QACxE,yEAAyE;QACzE,sDAAsD;QACtD,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,2BAA2B,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACjD,MAAM,KAAK,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,qBAAqB,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAEzD,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;YAC7B,uEAAuE;YACvE,gEAAgE;YAChE,qEAAqE;YACrE,KAAK,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC;gBACnB,EAAE,EAAE,IAAI,CAAC,KAAK;gBACd,QAAQ,EAAE,yBAAyB;gBACnC,IAAI,EAAE,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,SAAS,EAAE,KAAK,EAAE;aACpD,CAAC,CAAC;QACL,CAAC;QAED,KAAK,CAAC,CAAC,EAAE,QAAQ,EAAE,sDAAsD,CAAC,CAAC;QAC3E,OAAO,CAAC,CAAC,QAAQ,CAAC,cAAc,EAAE,GAAG,CAAC,CAAC;IACzC,CAAC,CAAC,CAAC;IAEH,2DAA2D;IAC3D,SAAS,WAAW,CAAC,CAAsB;QACzC,gBAAgB,CAAC,CAAC,CAAC,CAAC;QACpB,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACd,OAAO,MAAM,CAAC,CAAC,EAAE,eAAe,CAAC,KAAK,EAAE;YACtC,SAAS,EAAE,WAAW;YACtB,QAAQ,EAAE,UAAU;YACpB,MAAM,EAAE,eAAe;YACvB,OAAO,EAAE,IAAI;SACd,CAAC,CAAC;IACL,CAAC;IAED,uDAAuD;IACvD,SAAS,YAAY,CACnB,CAAsB,EACtB,KAAK,GAA4B,EAAE;QAEnC,OAAO;YACL,SAAS,EAAE,WAAW;YACtB,QAAQ,EAAE,cAAc;YACxB,MAAM,EAAE,eAAe;YACvB,uEAAuE;YACvE,yEAAyE;YACzE,qBAAqB;YACrB,UAAU,EAAE,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,UAAU,EAAE;YACnC,MAAM,EAAE,eAAe;YACvB,IAAI,EAAE,KAAK;YACX,GAAG,KAAK;SACT,CAAC;IACJ,CAAC;AACH,CAAC;AAED,+EAA+E;AAC/E,MAAM,cAAc,GAAG,GAAG,YAAY,QAAQ,CAAC;AAE/C,2EAA2E;AAC3E,SAAS,WAAW,CAAC,KAAa,EAAE,KAAK,GAA4B,EAAE;IACrE,OAAO;QACL,SAAS,EAAE,WAAW;QACtB,QAAQ,EAAE,UAAU;QACpB,MAAM,EAAE,eAAe;QACvB,KAAK;QACL,OAAO,EAAE,KAAK;QACd,GAAG,KAAK;KACT,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,kBAAkB,CAAC,QAAgB,EAAE,YAAoB;IACvE,OAAO,CACL,eAAe,CAAC,QAAQ,CAAC;QACzB,CAAC,QAAQ,KAAK,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,iCAAiC,CAAC,CAC5E,CAAC;AACJ,CAAC;AAED,gFAAgF;AAChF,MAAM,UAAU,SAAS,CAAC,OAAe,EAAE,KAAa;IACtD,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,UAAU,EAAE,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,GAAG,CAAC,CAAC;IACjF,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,eAAe,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IACnD,OAAO,GAAG,CAAC,IAAI,CAAC;AAClB,CAAC;AAED,qFAAqF;AACrF,SAAS,KAAK,CAAC,KAAc;IAC3B,OAAO,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;AAChD,CAAC"}

package/dist/admin/routes.d.ts

@@ -6,26 +6,6 @@ export declare const LOGIN_PATH = "/admin/login";
 export declare const SETUP_PATH = "/admin/setup";
 /** Where the logout form posts. */
 export declare const LOGOUT_PATH = "/admin/logout";
-/** Where the dashboard's quick draft form posts. */
-export declare const QUICK_DRAFT_PATH = "/admin/quick-draft";
-/** One entry in the admin's left-hand navigation. */
-export interface AdminSection {
-    /** The name a screen passes as `section` to mark itself current. */
-    section: string;
-    /** What the link says. */
-    label: string;
-    /** Where it goes. */
-    url: string;
-}
-/**
- * The sections of the admin, in the order doc-5 lists them.
- *
- * Every screen renders the same list and marks one of them, so a screen added
- * later only has to name its section. The screens behind most of these links
- * are still placeholders; the navigation is the shape of the whole admin, not
- * of the part that is built.
- */
-export declare const ADMIN_SECTIONS: readonly AdminSection[];
 /** How many recent posts the dashboard lists. */
 export declare const DASHBOARD_RECENT_POSTS = 5;
 /** Where the editor for a post lives. */