@geekity/cms 0.3.0

package/dist/admin/passwords.d.ts

@@ -0,0 +1,49 @@
+/**
+ * Argon2id parameters, close to the OWASP baseline for a server that also
+ * serves pages: 19 MiB of memory, two passes, one lane.
+ *
+ * They are written into every hash (see {@link hashPassword}), so raising them
+ * later does not invalidate a password stored under the old ones.
+ */
+export declare const ARGON2_PARAMETERS: {
+    /** Memory cost in KiB. */
+    readonly memory: 19456;
+    /** Time cost: how many passes over that memory. */
+    readonly passes: 2;
+    /** Lanes. One, because a web request has no cores to spare. */
+    readonly parallelism: 1;
+    /** Length of the derived tag, in bytes. */
+    readonly tagLength: 32;
+    /** Salt length, in bytes. */
+    readonly saltLength: 16;
+    /**
+     * The Argon2 version the encoding records. 19 is 0x13, the current one, and
+     * the only one `node:crypto` computes: it has no version parameter. The
+     * number is written into the hash so a reader can see which it is, and a
+     * hash claiming any other version is refused rather than mis-verified.
+     */
+    readonly version: 19;
+};
+/**
+ * Hash a password with argon2id, encoded as a PHC string:
+ *
+ * ```
+ * $argon2id$v=19$m=19456,t=2,p=1$<salt>$<tag>
+ * ```
+ *
+ * The salt and the cost parameters travel with the hash, so
+ * {@link verifyPasswordHash} needs nothing but the stored string, and a later
+ * change to {@link ARGON2_PARAMETERS} leaves existing passwords verifiable.
+ *
+ * Node 24 hashes natively, so there is no argon2 dependency to build.
+ */
+export declare function hashPassword(password: string): string;
+/**
+ * Whether `password` is the one `encoded` was made from.
+ *
+ * A hash this function cannot parse is a `false`, not a throw: a corrupted row
+ * must fail the login rather than take the request down. The comparison is
+ * constant time.
+ */
+export declare function verifyPasswordHash(encoded: string, password: string): boolean;
+//# sourceMappingURL=passwords.d.ts.map

package/dist/admin/passwords.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"passwords.d.ts","sourceRoot":"","sources":["../../src/admin/passwords.ts"],"names":[],"mappings":"AAEA;;;;;;GAMG;AACH,eAAO,MAAM,iBAAiB;IAC5B,0BAA0B;aAC1B,MAAM,EAAE,KAAK;IACb,mDAAmD;aACnD,MAAM,EAAE,CAAC;IACT,+DAA+D;aAC/D,WAAW,EAAE,CAAC;IACd,2CAA2C;aAC3C,SAAS,EAAE,EAAE;IACb,6BAA6B;aAC7B,UAAU,EAAE,EAAE;IACd;;;;;OAKG;aACH,OAAO,EAAE,EAAE;CACH,CAAC;AAEX;;;;;;;;;;;;GAYG;AACH,wBAAgB,YAAY,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAWrD;AAED;;;;;;GAMG;AACH,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAY7E"}

package/dist/admin/passwords.js

@@ -0,0 +1,122 @@
+import { argon2Sync, randomBytes, timingSafeEqual } from 'node:crypto';
+/**
+ * Argon2id parameters, close to the OWASP baseline for a server that also
+ * serves pages: 19 MiB of memory, two passes, one lane.
+ *
+ * They are written into every hash (see {@link hashPassword}), so raising them
+ * later does not invalidate a password stored under the old ones.
+ */
+export const ARGON2_PARAMETERS = {
+    /** Memory cost in KiB. */
+    memory: 19456,
+    /** Time cost: how many passes over that memory. */
+    passes: 2,
+    /** Lanes. One, because a web request has no cores to spare. */
+    parallelism: 1,
+    /** Length of the derived tag, in bytes. */
+    tagLength: 32,
+    /** Salt length, in bytes. */
+    saltLength: 16,
+    /**
+     * The Argon2 version the encoding records. 19 is 0x13, the current one, and
+     * the only one `node:crypto` computes: it has no version parameter. The
+     * number is written into the hash so a reader can see which it is, and a
+     * hash claiming any other version is refused rather than mis-verified.
+     */
+    version: 19,
+};
+/**
+ * Hash a password with argon2id, encoded as a PHC string:
+ *
+ * ```
+ * $argon2id$v=19$m=19456,t=2,p=1$<salt>$<tag>
+ * ```
+ *
+ * The salt and the cost parameters travel with the hash, so
+ * {@link verifyPasswordHash} needs nothing but the stored string, and a later
+ * change to {@link ARGON2_PARAMETERS} leaves existing passwords verifiable.
+ *
+ * Node 24 hashes natively, so there is no argon2 dependency to build.
+ */
+export function hashPassword(password) {
+    const salt = randomBytes(ARGON2_PARAMETERS.saltLength);
+    const tag = derive(password, salt, {
+        memory: ARGON2_PARAMETERS.memory,
+        passes: ARGON2_PARAMETERS.passes,
+        parallelism: ARGON2_PARAMETERS.parallelism,
+        tagLength: ARGON2_PARAMETERS.tagLength,
+    });
+    const parameters = `m=${String(ARGON2_PARAMETERS.memory)},t=${String(ARGON2_PARAMETERS.passes)},p=${String(ARGON2_PARAMETERS.parallelism)}`;
+    return `$argon2id$v=${String(ARGON2_PARAMETERS.version)}$${parameters}$${base64(salt)}$${base64(tag)}`;
+}
+/**
+ * Whether `password` is the one `encoded` was made from.
+ *
+ * A hash this function cannot parse is a `false`, not a throw: a corrupted row
+ * must fail the login rather than take the request down. The comparison is
+ * constant time.
+ */
+export function verifyPasswordHash(encoded, password) {
+    const parsed = parsePhc(encoded);
+    if (parsed === undefined)
+        return false;
+    const tag = derive(password, parsed.salt, {
+        memory: parsed.memory,
+        passes: parsed.passes,
+        parallelism: parsed.parallelism,
+        tagLength: parsed.tag.length,
+    });
+    return tag.length === parsed.tag.length && timingSafeEqual(tag, parsed.tag);
+}
+function derive(password, salt, parameters) {
+    return Buffer.from(argon2Sync('argon2id', {
+        message: Buffer.from(password, 'utf8'),
+        nonce: salt,
+        memory: parameters.memory,
+        passes: parameters.passes,
+        parallelism: parameters.parallelism,
+        tagLength: parameters.tagLength,
+    }));
+}
+/** The PHC string back apart, or `undefined` when it is not one of ours. */
+function parsePhc(encoded) {
+    const parts = encoded.split('$');
+    // ['', 'argon2id', 'v=19', 'm=..,t=..,p=..', salt, tag]
+    if (parts.length !== 6 || parts[0] !== '' || parts[1] !== 'argon2id')
+        return undefined;
+    // Only 0x13 is computable here, so any other version is unverifiable rather
+    // than merely unusual.
+    if (parts[2] !== `v=${String(ARGON2_PARAMETERS.version)}`)
+        return undefined;
+    const costs = new Map((parts[3] ?? '').split(',').map((pair) => {
+        const [key, value] = pair.split('=');
+        return [key ?? '', Number(value)];
+    }));
+    const memory = costs.get('m');
+    const passes = costs.get('t');
+    const parallelism = costs.get('p');
+    if (!isPositiveInteger(memory) || !isPositiveInteger(passes) || !isPositiveInteger(parallelism)) {
+        return undefined;
+    }
+    const salt = fromBase64(parts[4]);
+    const tag = fromBase64(parts[5]);
+    if (salt === undefined || tag === undefined || salt.length === 0 || tag.length === 0) {
+        return undefined;
+    }
+    return { memory, passes, parallelism, tagLength: tag.length, salt, tag };
+}
+function isPositiveInteger(value) {
+    return value !== undefined && Number.isInteger(value) && value > 0;
+}
+/** PHC uses unpadded standard base64. */
+function base64(value) {
+    return value.toString('base64').replace(/=+$/, '');
+}
+function fromBase64(value) {
+    if (value === undefined || value === '')
+        return undefined;
+    if (!/^[A-Za-z0-9+/]+$/.test(value))
+        return undefined;
+    return Buffer.from(value, 'base64');
+}
+//# sourceMappingURL=passwords.js.map

package/dist/admin/passwords.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"passwords.js","sourceRoot":"","sources":["../../src/admin/passwords.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAEvE;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG;IAC/B,0BAA0B;IAC1B,MAAM,EAAE,KAAK;IACb,mDAAmD;IACnD,MAAM,EAAE,CAAC;IACT,+DAA+D;IAC/D,WAAW,EAAE,CAAC;IACd,2CAA2C;IAC3C,SAAS,EAAE,EAAE;IACb,6BAA6B;IAC7B,UAAU,EAAE,EAAE;IACd;;;;;OAKG;IACH,OAAO,EAAE,EAAE;CACH,CAAC;AAEX;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,YAAY,CAAC,QAAgB;IAC3C,MAAM,IAAI,GAAG,WAAW,CAAC,iBAAiB,CAAC,UAAU,CAAC,CAAC;IACvD,MAAM,GAAG,GAAG,MAAM,CAAC,QAAQ,EAAE,IAAI,EAAE;QACjC,MAAM,EAAE,iBAAiB,CAAC,MAAM;QAChC,MAAM,EAAE,iBAAiB,CAAC,MAAM;QAChC,WAAW,EAAE,iBAAiB,CAAC,WAAW;QAC1C,SAAS,EAAE,iBAAiB,CAAC,SAAS;KACvC,CAAC,CAAC;IAEH,MAAM,UAAU,GAAG,KAAK,MAAM,CAAC,iBAAiB,CAAC,MAAM,CAAC,MAAM,MAAM,CAAC,iBAAiB,CAAC,MAAM,CAAC,MAAM,MAAM,CAAC,iBAAiB,CAAC,WAAW,CAAC,EAAE,CAAC;IAC5I,OAAO,eAAe,MAAM,CAAC,iBAAiB,CAAC,OAAO,CAAC,IAAI,UAAU,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;AACzG,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,kBAAkB,CAAC,OAAe,EAAE,QAAgB;IAClE,MAAM,MAAM,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC;IACjC,IAAI,MAAM,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IAEvC,MAAM,GAAG,GAAG,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,IAAI,EAAE;QACxC,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,WAAW,EAAE,MAAM,CAAC,WAAW;QAC/B,SAAS,EAAE,MAAM,CAAC,GAAG,CAAC,MAAM;KAC7B,CAAC,CAAC;IAEH,OAAO,GAAG,CAAC,MAAM,KAAK,MAAM,CAAC,GAAG,CAAC,MAAM,IAAI,eAAe,CAAC,GAAG,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC;AAC9E,CAAC;AASD,SAAS,MAAM,CAAC,QAAgB,EAAE,IAAY,EAAE,UAA4B;IAC1E,OAAO,MAAM,CAAC,IAAI,CAChB,UAAU,CAAC,UAAU,EAAE;QACrB,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,QAAQ,EAAE,MAAM,CAAC;QACtC,KAAK,EAAE,IAAI;QACX,MAAM,EAAE,UAAU,CAAC,MAAM;QACzB,MAAM,EAAE,UAAU,CAAC,MAAM;QACzB,WAAW,EAAE,UAAU,CAAC,WAAW;QACnC,SAAS,EAAE,UAAU,CAAC,SAAS;KAChC,CAAC,CACH,CAAC;AACJ,CAAC;AAOD,4EAA4E;AAC5E,SAAS,QAAQ,CAAC,OAAe;IAC/B,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACjC,wDAAwD;IACxD,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,EAAE,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,UAAU;QAAE,OAAO,SAAS,CAAC;IAEvF,4EAA4E;IAC5E,uBAAuB;IACvB,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,KAAK,MAAM,CAAC,iBAAiB,CAAC,OAAO,CAAC,EAAE;QAAE,OAAO,SAAS,CAAC;IAE5E,MAAM,KAAK,GAAG,IAAI,GAAG,CACnB,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;QACvC,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACrC,OAAO,CAAC,GAAG,IAAI,EAAE,EAAE,MAAM,CAAC,KAAK,CAAC,CAAU,CAAC;IAC7C,CAAC,CAAC,CACH,CAAC;IACF,MAAM,MAAM,GAAG,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAC9B,MAAM,MAAM,GAAG,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAC9B,MAAM,WAAW,GAAG,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IACnC,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC,IAAI,CAAC,iBAAiB,CAAC,WAAW,CAAC,EAAE,CAAC;QAChG,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,MAAM,IAAI,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IAClC,MAAM,GAAG,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IACjC,IAAI,IAAI,KAAK,SAAS,IAAI,GAAG,KAAK,SAAS,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACrF,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,SAAS,EAAE,GAAG,CAAC,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC;AAC3E,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAyB;IAClD,OAAO,KAAK,KAAK,SAAS,IAAI,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,CAAC;AACrE,CAAC;AAED,yCAAyC;AACzC,SAAS,MAAM,CAAC,KAAa;IAC3B,OAAO,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;AACrD,CAAC;AAED,SAAS,UAAU,CAAC,KAAyB;IAC3C,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,EAAE;QAAE,OAAO,SAAS,CAAC;IAC1D,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IACtD,OAAO,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;AACtC,CAAC"}

package/dist/admin/preview.d.ts

@@ -0,0 +1,18 @@
+import type { Hono } from 'hono';
+import type { GeekityEnv } from '../env.ts';
+/** Where the editor posts a body it wants to see rendered. */
+export declare const PREVIEW_PATH = "/admin/preview";
+/**
+ * Render an unsaved body the way the public site would render it.
+ *
+ * The point of a preview is that it is not a second renderer. This builds the
+ * same {@link Document} shape the parser produces, runs the body through the
+ * same {@link renderMarkdown}, hands it to the same `documentContext`, and
+ * renders it through the theme's own post or page layout — so what the preview
+ * shows is what publishing would put on the site, theme overrides included.
+ *
+ * Nothing is written and nothing is indexed: the document exists for the
+ * length of one response.
+ */
+export declare function mountPreview(app: Hono<GeekityEnv>): void;
+//# sourceMappingURL=preview.d.ts.map

package/dist/admin/preview.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"preview.d.ts","sourceRoot":"","sources":["../../src/admin/preview.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAW,IAAI,EAAE,MAAM,MAAM,CAAC;AAM1C,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AAM5C,8DAA8D;AAC9D,eAAO,MAAM,YAAY,mBAA4B,CAAC;AAEtD;;;;;;;;;;;GAWG;AACH,wBAAgB,YAAY,CAAC,GAAG,EAAE,IAAI,CAAC,UAAU,CAAC,GAAG,IAAI,CAYxD"}

package/dist/admin/preview.js

@@ -0,0 +1,83 @@
+import { renderMarkdown } from '../content/markdown.js';
+import { defaultPermalink, slugify } from '../content/slug.js';
+import { normalizeBody } from '../content/writer.js';
+import { documentContext } from '../web/context.js';
+import { TEMPLATES } from '../web/render.js';
+import { splitTags } from './documents.js';
+import { ADMIN_PREFIX } from './session.js';
+/** Where the editor posts a body it wants to see rendered. */
+export const PREVIEW_PATH = `${ADMIN_PREFIX}/preview`;
+/**
+ * Render an unsaved body the way the public site would render it.
+ *
+ * The point of a preview is that it is not a second renderer. This builds the
+ * same {@link Document} shape the parser produces, runs the body through the
+ * same {@link renderMarkdown}, hands it to the same `documentContext`, and
+ * renders it through the theme's own post or page layout — so what the preview
+ * shows is what publishing would put on the site, theme overrides included.
+ *
+ * Nothing is written and nothing is indexed: the document exists for the
+ * length of one response.
+ */
+export function mountPreview(app) {
+    app.post(PREVIEW_PATH, async (c) => {
+        const body = await c.req.parseBody();
+        const type = text(body['type']) === 'page' ? 'page' : 'post';
+        return c.html(c.var.renderer.render(type === 'post' ? TEMPLATES.post : TEMPLATES.page, documentContext(previewDocument(c, { type, body }))));
+    });
+}
+/** What a submitted editor form looks like as a document nobody has saved. */
+function previewDocument(c, input) {
+    const { type, body } = input;
+    const title = text(body['title']).trim();
+    const date = type === 'post' ? orNow(text(body['date']).trim()) : undefined;
+    const slug = slugify(text(body['slug']).trim()) || slugify(title) || 'preview';
+    const markdown = normalizeBody(text(body['body']));
+    return {
+        type,
+        // A path and a permalink the preview needs to have, because the theme
+        // prints them; neither is ever written anywhere.
+        path: `${type === 'post' ? 'posts' : 'pages'}/${slug}.md`,
+        slug,
+        permalink: permalinkFor({ type, slug, date, submitted: text(body['permalink']).trim() }),
+        title: title === '' ? 'Untitled' : title,
+        ...(date === undefined ? {} : { date }),
+        tags: splitTags(text(body['tags'])),
+        draft: body['draft'] !== undefined,
+        ...(text(body['description']) === '' ? {} : { description: text(body['description']).trim() }),
+        ...(currentUsername(c) === undefined ? {} : { author: currentUsername(c) }),
+        extra: {},
+        body: markdown,
+        html: renderMarkdown(markdown),
+        // A preview is not a version of anything, so it has no hash to be
+        // mistaken for one.
+        hash: '',
+    };
+}
+/** The permalink to show: the one the form carried, or the one the slug implies. */
+function permalinkFor(input) {
+    if (input.submitted !== '')
+        return input.submitted;
+    try {
+        return defaultPermalink({ type: input.type, slug: input.slug, date: input.date });
+    }
+    catch {
+        return '/';
+    }
+}
+/** A date field that is empty or unusable becomes now, so the layout has one. */
+function orNow(value) {
+    return /^\d{4}-\d{2}-\d{2}/.test(value) ? value : new Date().toISOString();
+}
+/** The signed-in user's login, so a byline in the theme has something to print. */
+function currentUsername(c) {
+    const userId = c.var.session?.userId;
+    if (userId == null)
+        return undefined;
+    return c.var.admin.getUserById(userId)?.username;
+}
+/** A form field as a string. A file upload, or a missing field, is the empty one. */
+function text(value) {
+    return typeof value === 'string' ? value : '';
+}
+//# sourceMappingURL=preview.js.map

package/dist/admin/preview.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"preview.js","sourceRoot":"","sources":["../../src/admin/preview.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AACxD,OAAO,EAAE,gBAAgB,EAAE,OAAO,EAAE,MAAM,oBAAoB,CAAC;AAC/D,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAErD,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AACpD,OAAO,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAC7C,OAAO,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAC3C,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAE5C,8DAA8D;AAC9D,MAAM,CAAC,MAAM,YAAY,GAAG,GAAG,YAAY,UAAU,CAAC;AAEtD;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,YAAY,CAAC,GAAqB;IAChD,GAAG,CAAC,IAAI,CAAC,YAAY,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QACjC,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,SAAS,EAAE,CAAC;QACrC,MAAM,IAAI,GAAiB,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,KAAK,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC;QAE3E,OAAO,CAAC,CAAC,IAAI,CACX,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,CACnB,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,EACjD,eAAe,CAAC,eAAe,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CACpD,CACF,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC;AAED,8EAA8E;AAC9E,SAAS,eAAe,CACtB,CAAsB,EACtB,KAA4D;IAE5D,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,KAAK,CAAC;IAE7B,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IACzC,MAAM,IAAI,GAAG,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAC5E,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,OAAO,CAAC,KAAK,CAAC,IAAI,SAAS,CAAC;IAC/E,MAAM,QAAQ,GAAG,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;IAEnD,OAAO;QACL,IAAI;QACJ,sEAAsE;QACtE,iDAAiD;QACjD,IAAI,EAAE,GAAG,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,IAAI,IAAI,KAAK;QACzD,IAAI;QACJ,SAAS,EAAE,YAAY,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;QACxF,KAAK,EAAE,KAAK,KAAK,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,KAAK;QACxC,GAAG,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC;QACvC,IAAI,EAAE,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC;QACnC,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC,KAAK,SAAS;QAClC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;QAC9F,GAAG,CAAC,eAAe,CAAC,CAAC,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,eAAe,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3E,KAAK,EAAE,EAAE;QACT,IAAI,EAAE,QAAQ;QACd,IAAI,EAAE,cAAc,CAAC,QAAQ,CAAC;QAC9B,kEAAkE;QAClE,oBAAoB;QACpB,IAAI,EAAE,EAAE;KACT,CAAC;AACJ,CAAC;AAED,oFAAoF;AACpF,SAAS,YAAY,CAAC,KAKrB;IACC,IAAI,KAAK,CAAC,SAAS,KAAK,EAAE;QAAE,OAAO,KAAK,CAAC,SAAS,CAAC;IACnD,IAAI,CAAC;QACH,OAAO,gBAAgB,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;IACpF,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,GAAG,CAAC;IACb,CAAC;AACH,CAAC;AAED,iFAAiF;AACjF,SAAS,KAAK,CAAC,KAAa;IAC1B,OAAO,oBAAoB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;AAC7E,CAAC;AAED,mFAAmF;AACnF,SAAS,eAAe,CAAC,CAAsB;IAC7C,MAAM,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC;IACrC,IAAI,MAAM,IAAI,IAAI;QAAE,OAAO,SAAS,CAAC;IACrC,OAAO,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC,MAAM,CAAC,EAAE,QAAQ,CAAC;AACnD,CAAC;AAED,qFAAqF;AACrF,SAAS,IAAI,CAAC,KAAc;IAC1B,OAAO,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;AAChD,CAAC"}

package/dist/admin/routes.d.ts

@@ -0,0 +1,54 @@
+import type { Hono, MiddlewareHandler } from 'hono';
+import type { GeekityEnv } from '../env.ts';
+/** Where the login form lives. */
+export declare const LOGIN_PATH = "/admin/login";
+/** Where the first-run form lives. */
+export declare const SETUP_PATH = "/admin/setup";
+/** Where the logout form posts. */
+export declare const LOGOUT_PATH = "/admin/logout";
+/** Where the dashboard's quick draft form posts. */
+export declare const QUICK_DRAFT_PATH = "/admin/quick-draft";
+/** One entry in the admin's left-hand navigation. */
+export interface AdminSection {
+    /** The name a screen passes as `section` to mark itself current. */
+    section: string;
+    /** What the link says. */
+    label: string;
+    /** Where it goes. */
+    url: string;
+}
+/**
+ * The sections of the admin, in the order doc-5 lists them.
+ *
+ * Every screen renders the same list and marks one of them, so a screen added
+ * later only has to name its section. The screens behind most of these links
+ * are still placeholders; the navigation is the shape of the whole admin, not
+ * of the part that is built.
+ */
+export declare const ADMIN_SECTIONS: readonly AdminSection[];
+/** How many recent posts the dashboard lists. */
+export declare const DASHBOARD_RECENT_POSTS = 5;
+/** Where the editor for a post lives. */
+export declare function postEditorPath(slug: string): string;
+/**
+ * Register the admin on a Hono app.
+ *
+ * Everything under `/admin` goes through one guard, registered as middleware
+ * rather than per route, so a path with no handler of its own — `/admin/posts`
+ * before TASK-11 builds it — still redirects an anonymous visitor to the login
+ * form instead of falling through to the public site's 404.
+ *
+ * The guard decides three things, in order: whether the site has any users at
+ * all (none means every admin URL is the setup form), whether the request
+ * carries a live session, and, for anything but a GET, whether it carries this
+ * session's CSRF token.
+ */
+export declare function mountAdmin(app: Hono<GeekityEnv>): void;
+/**
+ * The one gate in front of every admin URL.
+ *
+ * It is exported so a site that mounts its own admin routes can put them
+ * behind the same guard, and so the ordering is testable.
+ */
+export declare const guard: MiddlewareHandler<GeekityEnv>;
+//# sourceMappingURL=routes.d.ts.map

package/dist/admin/routes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"routes.d.ts","sourceRoot":"","sources":["../../src/admin/routes.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAW,IAAI,EAAE,iBAAiB,EAAE,MAAM,MAAM,CAAC;AAM7D,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AAsB5C,kCAAkC;AAClC,eAAO,MAAM,UAAU,iBAA0B,CAAC;AAClD,sCAAsC;AACtC,eAAO,MAAM,UAAU,iBAA0B,CAAC;AAClD,mCAAmC;AACnC,eAAO,MAAM,WAAW,kBAA2B,CAAC;AACpD,oDAAoD;AACpD,eAAO,MAAM,gBAAgB,uBAAgC,CAAC;AAE9D,qDAAqD;AACrD,MAAM,WAAW,YAAY;IAC3B,oEAAoE;IACpE,OAAO,EAAE,MAAM,CAAC;IAChB,0BAA0B;IAC1B,KAAK,EAAE,MAAM,CAAC;IACd,qBAAqB;IACrB,GAAG,EAAE,MAAM,CAAC;CACb;AAED;;;;;;;GAOG;AACH,eAAO,MAAM,cAAc,EAAE,SAAS,YAAY,EAOjD,CAAC;AAEF,iDAAiD;AACjD,eAAO,MAAM,sBAAsB,IAAI,CAAC;AAExC,yCAAyC;AACzC,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAEnD;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,UAAU,CAAC,GAAG,EAAE,IAAI,CAAC,UAAU,CAAC,GAAG,IAAI,CA2RtD;AAKD;;;;;GAKG;AACH,eAAO,MAAM,KAAK,EAAE,iBAAiB,CAAC,UAAU,CA+B/C,CAAC"}