@geekity/cms 0.3.0

package/dist/config.js

@@ -0,0 +1,184 @@
+import path from 'node:path';
+import { KNOWN_UPLOAD_TYPES, normalizeUploadType } from './content/media.js';
+export const DEFAULT_PORT = 3000;
+export const DEFAULT_CONTENT_DIR = 'content';
+export const DEFAULT_DATA_DIR = 'data';
+export const DEFAULT_THEME_DIR = 'theme';
+/** How long an admin login lasts by default: fourteen days, in seconds. */
+export const DEFAULT_SESSION_LIFETIME = 14 * 24 * 60 * 60;
+/** Largest upload a site accepts by default: ten mebibytes. */
+export const DEFAULT_UPLOAD_MAX_BYTES = 10 * 1024 * 1024;
+/**
+ * What the editor may upload by default: the raster image formats a browser
+ * displays, PDFs, and the two text formats. Everything the CMS knows about
+ * except SVG, which is script-bearing markup served from the site's own origin
+ * and so is opt-in.
+ */
+export const DEFAULT_UPLOAD_TYPES = KNOWN_UPLOAD_TYPES;
+/**
+ * Identity helper that gives a `geekity.config.ts` file type checking and
+ * completion without the site importing the type by hand.
+ */
+export function defineConfig(config) {
+    return config;
+}
+/**
+ * Merge a site's config with environment overrides and defaults.
+ *
+ * Precedence is environment variable, then config file, then default. Relative
+ * directories resolve against `cwd`; absolute ones are left alone.
+ */
+export function resolveConfig(config = {}, context = {}) {
+    const cwd = context.cwd ?? process.cwd();
+    const env = context.env ?? process.env;
+    const port = resolvePort(config.port, env);
+    return {
+        port,
+        contentDir: resolveDir(cwd, env['GEEKITY_CONTENT_DIR'], config.contentDir, DEFAULT_CONTENT_DIR),
+        dataDir: resolveDir(cwd, env['GEEKITY_DATA_DIR'], config.dataDir, DEFAULT_DATA_DIR),
+        themeDir: resolveDir(cwd, env['GEEKITY_THEME_DIR'], config.themeDir, DEFAULT_THEME_DIR),
+        baseUrl: resolveBaseUrl(env['GEEKITY_BASE_URL'], config.baseUrl, port),
+        baseUrlSource: baseUrlSource(env['GEEKITY_BASE_URL'], config.baseUrl),
+        watch: resolveWatch(env['GEEKITY_WATCH'], config.watch),
+        sessionLifetime: resolveSessionLifetime(env['GEEKITY_SESSION_LIFETIME'], config.sessionLifetime),
+        uploadMaxBytes: resolveUploadMaxBytes(env['GEEKITY_UPLOAD_MAX_BYTES'], config.uploadMaxBytes),
+        uploadTypes: resolveUploadTypes(env['GEEKITY_UPLOAD_TYPES'], config.uploadTypes),
+        onDocumentChange: config.onDocumentChange,
+        onPublish: config.onPublish,
+        federation: config.federation ?? {},
+    };
+}
+/** Bytes, a positive whole number of them. */
+function resolveUploadMaxBytes(fromEnv, configured) {
+    if (fromEnv !== undefined && fromEnv !== '') {
+        const parsed = Number(fromEnv);
+        if (!isValidByteCount(parsed)) {
+            throw new TypeError(`GEEKITY_UPLOAD_MAX_BYTES must be a positive whole number of bytes, received ${JSON.stringify(fromEnv)}`);
+        }
+        return parsed;
+    }
+    if (configured === undefined)
+        return DEFAULT_UPLOAD_MAX_BYTES;
+    if (!isValidByteCount(configured)) {
+        throw new TypeError(`config.uploadMaxBytes must be a positive whole number of bytes, received ${JSON.stringify(configured)}`);
+    }
+    return configured;
+}
+function isValidByteCount(value) {
+    return Number.isInteger(value) && value > 0;
+}
+/**
+ * An upload allowlist, normalised and checked.
+ *
+ * A name the CMS has no media type for is refused rather than ignored: a
+ * config that says `.svg` and silently gets nothing would be a config that
+ * lies, and a typo in an allowlist is worth hearing about at boot.
+ */
+function resolveUploadTypes(fromEnv, configured) {
+    if (fromEnv !== undefined && fromEnv !== '') {
+        return checkedUploadTypes(fromEnv.split(','), 'GEEKITY_UPLOAD_TYPES');
+    }
+    if (configured === undefined)
+        return [...DEFAULT_UPLOAD_TYPES];
+    return checkedUploadTypes(configured, 'config.uploadTypes');
+}
+function checkedUploadTypes(values, source) {
+    const types = [];
+    for (const value of values) {
+        const normalized = normalizeUploadType(value);
+        if (normalized === '')
+            continue;
+        if (!KNOWN_UPLOAD_TYPES.includes(normalized)) {
+            throw new TypeError(`${source} names ${JSON.stringify(normalized)}, which the CMS has no media type for. It knows ${KNOWN_UPLOAD_TYPES.join(', ')}.`);
+        }
+        if (!types.includes(normalized))
+            types.push(normalized);
+    }
+    return types;
+}
+/** `true`, `1`, `yes` and `on` mean yes; `false`, `0`, `no` and `off` mean no. */
+function resolveWatch(fromEnv, configured) {
+    if (fromEnv !== undefined && fromEnv !== '') {
+        const normalized = fromEnv.trim().toLowerCase();
+        if (['1', 'true', 'yes', 'on'].includes(normalized))
+            return true;
+        if (['0', 'false', 'no', 'off'].includes(normalized))
+            return false;
+        throw new TypeError(`GEEKITY_WATCH must be a boolean such as true or false, received ${JSON.stringify(fromEnv)}`);
+    }
+    return configured ?? true;
+}
+/** Seconds, positive and finite. Fractions are allowed; zero and below are not. */
+function resolveSessionLifetime(fromEnv, configured) {
+    if (fromEnv !== undefined && fromEnv !== '') {
+        const parsed = Number(fromEnv);
+        if (!isValidLifetime(parsed)) {
+            throw new TypeError(`GEEKITY_SESSION_LIFETIME must be a positive number of seconds, received ${JSON.stringify(fromEnv)}`);
+        }
+        return parsed;
+    }
+    if (configured === undefined)
+        return DEFAULT_SESSION_LIFETIME;
+    if (!isValidLifetime(configured)) {
+        throw new TypeError(`config.sessionLifetime must be a positive number of seconds, received ${JSON.stringify(configured)}`);
+    }
+    return configured;
+}
+function isValidLifetime(value) {
+    return Number.isFinite(value) && value > 0;
+}
+function resolvePort(configured, env) {
+    const fromEnv = env['GEEKITY_PORT'] ?? env['PORT'];
+    if (fromEnv !== undefined && fromEnv !== '') {
+        const parsed = Number(fromEnv);
+        if (!isValidPort(parsed)) {
+            throw new TypeError(`GEEKITY_PORT/PORT must be an integer between 0 and 65535, received ${JSON.stringify(fromEnv)}`);
+        }
+        return parsed;
+    }
+    if (configured === undefined)
+        return DEFAULT_PORT;
+    if (!isValidPort(configured)) {
+        throw new TypeError(`config.port must be an integer between 0 and 65535, received ${JSON.stringify(configured)}`);
+    }
+    return configured;
+}
+function isValidPort(value) {
+    return Number.isInteger(value) && value >= 0 && value <= 65535;
+}
+function resolveDir(cwd, fromEnv, configured, fallback) {
+    const chosen = firstNonEmpty(fromEnv, configured) ?? fallback;
+    return path.resolve(cwd, chosen);
+}
+/** Which of the two doors named the base URL, if either did. */
+function baseUrlSource(fromEnv, configured) {
+    if (fromEnv !== undefined && fromEnv !== '')
+        return 'environment';
+    if (configured !== undefined && configured !== '')
+        return 'config';
+    return 'default';
+}
+function resolveBaseUrl(fromEnv, configured, port) {
+    const chosen = firstNonEmpty(fromEnv, configured);
+    if (chosen === undefined)
+        return `http://localhost:${port}`;
+    let parsed;
+    try {
+        parsed = new URL(chosen);
+    }
+    catch {
+        throw new TypeError(`config.baseUrl must be an absolute URL, received ${JSON.stringify(chosen)}`);
+    }
+    return parsed.origin + stripTrailingSlash(parsed.pathname);
+}
+function stripTrailingSlash(value) {
+    return value.endsWith('/') ? value.slice(0, -1) : value;
+}
+function firstNonEmpty(...values) {
+    for (const value of values) {
+        if (value !== undefined && value !== '')
+            return value;
+    }
+    return undefined;
+}
+//# sourceMappingURL=config.js.map

package/dist/config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,WAAW,CAAC;AAI7B,OAAO,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AAsJ7E,MAAM,CAAC,MAAM,YAAY,GAAG,IAAI,CAAC;AACjC,MAAM,CAAC,MAAM,mBAAmB,GAAG,SAAS,CAAC;AAC7C,MAAM,CAAC,MAAM,gBAAgB,GAAG,MAAM,CAAC;AACvC,MAAM,CAAC,MAAM,iBAAiB,GAAG,OAAO,CAAC;AACzC,2EAA2E;AAC3E,MAAM,CAAC,MAAM,wBAAwB,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC;AAC1D,+DAA+D;AAC/D,MAAM,CAAC,MAAM,wBAAwB,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;AACzD;;;;;GAKG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAsB,kBAAkB,CAAC;AAE1E;;;GAGG;AACH,MAAM,UAAU,YAAY,CAAC,MAAqB;IAChD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,aAAa,CAC3B,MAAM,GAAkB,EAAE,EAC1B,OAAO,GAAyB,EAAE;IAElC,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;IACzC,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC;IAEvC,MAAM,IAAI,GAAG,WAAW,CAAC,MAAM,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IAE3C,OAAO;QACL,IAAI;QACJ,UAAU,EAAE,UAAU,CAAC,GAAG,EAAE,GAAG,CAAC,qBAAqB,CAAC,EAAE,MAAM,CAAC,UAAU,EAAE,mBAAmB,CAAC;QAC/F,OAAO,EAAE,UAAU,CAAC,GAAG,EAAE,GAAG,CAAC,kBAAkB,CAAC,EAAE,MAAM,CAAC,OAAO,EAAE,gBAAgB,CAAC;QACnF,QAAQ,EAAE,UAAU,CAAC,GAAG,EAAE,GAAG,CAAC,mBAAmB,CAAC,EAAE,MAAM,CAAC,QAAQ,EAAE,iBAAiB,CAAC;QACvF,OAAO,EAAE,cAAc,CAAC,GAAG,CAAC,kBAAkB,CAAC,EAAE,MAAM,CAAC,OAAO,EAAE,IAAI,CAAC;QACtE,aAAa,EAAE,aAAa,CAAC,GAAG,CAAC,kBAAkB,CAAC,EAAE,MAAM,CAAC,OAAO,CAAC;QACrE,KAAK,EAAE,YAAY,CAAC,GAAG,CAAC,eAAe,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC;QACvD,eAAe,EAAE,sBAAsB,CACrC,GAAG,CAAC,0BAA0B,CAAC,EAC/B,MAAM,CAAC,eAAe,CACvB;QACD,cAAc,EAAE,qBAAqB,CAAC,GAAG,CAAC,0BAA0B,CAAC,EAAE,MAAM,CAAC,cAAc,CAAC;QAC7F,WAAW,EAAE,kBAAkB,CAAC,GAAG,CAAC,sBAAsB,CAAC,EAAE,MAAM,CAAC,WAAW,CAAC;QAChF,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;QACzC,SAAS,EAAE,MAAM,CAAC,SAAS;QAC3B,UAAU,EAAE,MAAM,CAAC,UAAU,IAAI,EAAE;KACpC,CAAC;AACJ,CAAC;AAED,8CAA8C;AAC9C,SAAS,qBAAqB,CAC5B,OAA2B,EAC3B,UAA8B;IAE9B,IAAI,OAAO,KAAK,SAAS,IAAI,OAAO,KAAK,EAAE,EAAE,CAAC;QAC5C,MAAM,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC;QAC/B,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,EAAE,CAAC;YAC9B,MAAM,IAAI,SAAS,CACjB,+EAA+E,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,CACzG,CAAC;QACJ,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,IAAI,UAAU,KAAK,SAAS;QAAE,OAAO,wBAAwB,CAAC;IAC9D,IAAI,CAAC,gBAAgB,CAAC,UAAU,CAAC,EAAE,CAAC;QAClC,MAAM,IAAI,SAAS,CACjB,4EAA4E,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,EAAE,CACzG,CAAC;IACJ,CAAC;IACD,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAa;IACrC,OAAO,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,CAAC;AAC9C,CAAC;AAED;;;;;;GAMG;AACH,SAAS,kBAAkB,CACzB,OAA2B,EAC3B,UAAgC;IAEhC,IAAI,OAAO,KAAK,SAAS,IAAI,OAAO,KAAK,EAAE,EAAE,CAAC;QAC5C,OAAO,kBAAkB,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,sBAAsB,CAAC,CAAC;IACxE,CAAC;IACD,IAAI,UAAU,KAAK,SAAS;QAAE,OAAO,CAAC,GAAG,oBAAoB,CAAC,CAAC;IAC/D,OAAO,kBAAkB,CAAC,UAAU,EAAE,oBAAoB,CAAC,CAAC;AAC9D,CAAC;AAED,SAAS,kBAAkB,CAAC,MAAgB,EAAE,MAAc;IAC1D,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,MAAM,UAAU,GAAG,mBAAmB,CAAC,KAAK,CAAC,CAAC;QAC9C,IAAI,UAAU,KAAK,EAAE;YAAE,SAAS;QAChC,IAAI,CAAC,kBAAkB,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;YAC7C,MAAM,IAAI,SAAS,CACjB,GAAG,MAAM,UAAU,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,mDAAmD,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CACjI,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,UAAU,CAAC;YAAE,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IAC1D,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,kFAAkF;AAClF,SAAS,YAAY,CAAC,OAA2B,EAAE,UAA+B;IAChF,IAAI,OAAO,KAAK,SAAS,IAAI,OAAO,KAAK,EAAE,EAAE,CAAC;QAC5C,MAAM,UAAU,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QAChD,IAAI,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC;YAAE,OAAO,IAAI,CAAC;QACjE,IAAI,CAAC,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC;YAAE,OAAO,KAAK,CAAC;QACnE,MAAM,IAAI,SAAS,CACjB,mEAAmE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,CAC7F,CAAC;IACJ,CAAC;IACD,OAAO,UAAU,IAAI,IAAI,CAAC;AAC5B,CAAC;AAED,mFAAmF;AACnF,SAAS,sBAAsB,CAC7B,OAA2B,EAC3B,UAA8B;IAE9B,IAAI,OAAO,KAAK,SAAS,IAAI,OAAO,KAAK,EAAE,EAAE,CAAC;QAC5C,MAAM,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC;QAC/B,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,EAAE,CAAC;YAC7B,MAAM,IAAI,SAAS,CACjB,2EAA2E,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,CACrG,CAAC;QACJ,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,IAAI,UAAU,KAAK,SAAS;QAAE,OAAO,wBAAwB,CAAC;IAC9D,IAAI,CAAC,eAAe,CAAC,UAAU,CAAC,EAAE,CAAC;QACjC,MAAM,IAAI,SAAS,CACjB,yEAAyE,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,EAAE,CACtG,CAAC;IACJ,CAAC;IACD,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,SAAS,eAAe,CAAC,KAAa;IACpC,OAAO,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,CAAC;AAC7C,CAAC;AAED,SAAS,WAAW,CAClB,UAA8B,EAC9B,GAAuC;IAEvC,MAAM,OAAO,GAAG,GAAG,CAAC,cAAc,CAAC,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC;IACnD,IAAI,OAAO,KAAK,SAAS,IAAI,OAAO,KAAK,EAAE,EAAE,CAAC;QAC5C,MAAM,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC;QAC/B,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,EAAE,CAAC;YACzB,MAAM,IAAI,SAAS,CACjB,sEAAsE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,CAChG,CAAC;QACJ,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,IAAI,UAAU,KAAK,SAAS;QAAE,OAAO,YAAY,CAAC;IAClD,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,EAAE,CAAC;QAC7B,MAAM,IAAI,SAAS,CACjB,gEAAgE,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,EAAE,CAC7F,CAAC;IACJ,CAAC;IACD,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,SAAS,WAAW,CAAC,KAAa;IAChC,OAAO,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC,IAAI,KAAK,IAAI,KAAK,CAAC;AACjE,CAAC;AAED,SAAS,UAAU,CACjB,GAAW,EACX,OAA2B,EAC3B,UAA8B,EAC9B,QAAgB;IAEhB,MAAM,MAAM,GAAG,aAAa,CAAC,OAAO,EAAE,UAAU,CAAC,IAAI,QAAQ,CAAC;IAC9D,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;AACnC,CAAC;AAED,gEAAgE;AAChE,SAAS,aAAa,CACpB,OAA2B,EAC3B,UAA8B;IAE9B,IAAI,OAAO,KAAK,SAAS,IAAI,OAAO,KAAK,EAAE;QAAE,OAAO,aAAa,CAAC;IAClE,IAAI,UAAU,KAAK,SAAS,IAAI,UAAU,KAAK,EAAE;QAAE,OAAO,QAAQ,CAAC;IACnE,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,cAAc,CACrB,OAA2B,EAC3B,UAA8B,EAC9B,IAAY;IAEZ,MAAM,MAAM,GAAG,aAAa,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;IAClD,IAAI,MAAM,KAAK,SAAS;QAAE,OAAO,oBAAoB,IAAI,EAAE,CAAC;IAE5D,IAAI,MAAW,CAAC;IAChB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC;IAC3B,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,SAAS,CACjB,oDAAoD,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,CAC7E,CAAC;IACJ,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,GAAG,kBAAkB,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;AAC7D,CAAC;AAED,SAAS,kBAAkB,CAAC,KAAa;IACvC,OAAO,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;AAC1D,CAAC;AAED,SAAS,aAAa,CAAC,GAAG,MAA8B;IACtD,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,EAAE;YAAE,OAAO,KAAK,CAAC;IACxD,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC"}

package/dist/content/document.d.ts

@@ -0,0 +1,66 @@
+/** Posts are dated and syndicated; pages are standing content. */
+export type DocumentType = 'post' | 'page';
+/**
+ * The ActivityStreams identity of a document, written back once the post has
+ * been federated so later Update and Delete activities name the same object.
+ * Eleventy ignores the whole block.
+ */
+export interface ActivityPubMetadata {
+    /** The ActivityStreams object id. */
+    id?: string | undefined;
+    /** When the object was first delivered, ISO 8601. */
+    published?: string | undefined;
+}
+/**
+ * One Markdown file, parsed.
+ *
+ * The file on disk is the source of truth; a Document is what the rest of the
+ * CMS reads. Every front-matter key the CMS does not model survives in
+ * {@link Document.extra}, so hand-added data is not lost by an admin save.
+ *
+ * Optional fields are absent rather than `undefined`, so two Documents parsed
+ * from equivalent files compare equal.
+ */
+export interface Document {
+    /** Whether the file lives under `posts/` or `pages/`. */
+    type: DocumentType;
+    /** Path relative to the content directory, with `/` separators. */
+    path: string;
+    /** Last segment of the permalink; the handle the admin UI edits. */
+    slug: string;
+    /** Output URL, always explicit so Eleventy and the CMS agree. Ends in `/`. */
+    permalink: string;
+    /** Display title. */
+    title: string;
+    /** Publish date, ISO 8601 with offset. Required for posts. */
+    date?: string | undefined;
+    /** Last modified date, ISO 8601. Written on every admin save. */
+    updated?: string | undefined;
+    /** Taxonomy. The `post` tag comes from `posts.json`, not from the file. */
+    tags: string[];
+    /** `true` hides the document from the public site and the feeds. */
+    draft: boolean;
+    /** Meta description and excerpt fallback. */
+    description?: string | undefined;
+    /** User login, resolved to a display name at render time. */
+    author?: string | undefined;
+    /** Federation identity, present once the document has been delivered. */
+    activitypub?: ActivityPubMetadata | undefined;
+    /** Front-matter keys the CMS does not model, preserved verbatim. */
+    extra: Record<string, unknown>;
+    /** Markdown body, without the front matter, trimmed. */
+    body: string;
+    /** {@link Document.body} rendered to HTML. */
+    html: string;
+    /**
+     * SHA-256 of the document's canonical file text (what
+     * `serializeDocument` would write). Two files that differ only in
+     * formatting hash the same, so a rewrite that changes nothing is a no-op.
+     */
+    hash: string;
+}
+/** The part of a {@link Document} that a file is written from. */
+export type DocumentContent = Pick<Document, 'title' | 'date' | 'updated' | 'permalink' | 'tags' | 'draft' | 'description' | 'author' | 'activitypub' | 'extra' | 'body'>;
+/** Front-matter keys the CMS models. Everything else lands in `extra`. */
+export declare const KNOWN_FRONT_MATTER_KEYS: readonly ['title', 'date', 'updated', 'permalink', 'tags', 'draft', 'description', 'author', 'activitypub'];
+//# sourceMappingURL=document.d.ts.map

package/dist/content/document.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"document.d.ts","sourceRoot":"","sources":["../../src/content/document.ts"],"names":[],"mappings":"AAAA,kEAAkE;AAClE,MAAM,MAAM,YAAY,GAAG,MAAM,GAAG,MAAM,CAAC;AAE3C;;;;GAIG;AACH,MAAM,WAAW,mBAAmB;IAClC,qCAAqC;IACrC,EAAE,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACxB,qDAAqD;IACrD,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAChC;AAED;;;;;;;;;GASG;AACH,MAAM,WAAW,QAAQ;IACvB,yDAAyD;IACzD,IAAI,EAAE,YAAY,CAAC;IACnB,mEAAmE;IACnE,IAAI,EAAE,MAAM,CAAC;IACb,oEAAoE;IACpE,IAAI,EAAE,MAAM,CAAC;IACb,8EAA8E;IAC9E,SAAS,EAAE,MAAM,CAAC;IAClB,qBAAqB;IACrB,KAAK,EAAE,MAAM,CAAC;IACd,8DAA8D;IAC9D,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC1B,iEAAiE;IACjE,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC7B,2EAA2E;IAC3E,IAAI,EAAE,MAAM,EAAE,CAAC;IACf,oEAAoE;IACpE,KAAK,EAAE,OAAO,CAAC;IACf,6CAA6C;IAC7C,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACjC,6DAA6D;IAC7D,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC5B,yEAAyE;IACzE,WAAW,CAAC,EAAE,mBAAmB,GAAG,SAAS,CAAC;IAC9C,oEAAoE;IACpE,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC/B,wDAAwD;IACxD,IAAI,EAAE,MAAM,CAAC;IACb,8CAA8C;IAC9C,IAAI,EAAE,MAAM,CAAC;IACb;;;;OAIG;IACH,IAAI,EAAE,MAAM,CAAC;CACd;AAED,kEAAkE;AAClE,MAAM,MAAM,eAAe,GAAG,IAAI,CAChC,QAAQ,EACN,OAAO,GACP,MAAM,GACN,SAAS,GACT,WAAW,GACX,MAAM,GACN,OAAO,GACP,aAAa,GACb,QAAQ,GACR,aAAa,GACb,OAAO,GACP,MAAM,CACT,CAAC;AAEF,0EAA0E;AAC1E,eAAO,MAAM,uBAAuB,YAClC,OAAO,EACP,MAAM,EACN,SAAS,EACT,WAAW,EACX,MAAM,EACN,OAAO,EACP,aAAa,EACb,QAAQ,EACR,aAAa,CACL,CAAC"}

package/dist/content/document.js

@@ -0,0 +1,13 @@
+/** Front-matter keys the CMS models. Everything else lands in `extra`. */
+export const KNOWN_FRONT_MATTER_KEYS = [
+    'title',
+    'date',
+    'updated',
+    'permalink',
+    'tags',
+    'draft',
+    'description',
+    'author',
+    'activitypub',
+];
+//# sourceMappingURL=document.js.map

package/dist/content/document.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"document.js","sourceRoot":"","sources":["../../src/content/document.ts"],"names":[],"mappings":"AAgFA,0EAA0E;AAC1E,MAAM,CAAC,MAAM,uBAAuB,GAAG;IACrC,OAAO;IACP,MAAM;IACN,SAAS;IACT,WAAW;IACX,MAAM;IACN,OAAO;IACP,aAAa;IACb,QAAQ;IACR,aAAa;CACL,CAAC"}

package/dist/content/index.d.ts

@@ -0,0 +1,17 @@
+export { KNOWN_FRONT_MATTER_KEYS } from './document.ts';
+export type { ActivityPubMetadata, Document, DocumentContent, DocumentType } from './document.ts';
+export { renderMarkdown } from './markdown.ts';
+export { KNOWN_UPLOAD_TYPES, matchesSignature, normalizeUploadType, UPLOAD_MEDIA_TYPES, } from './media.ts';
+export type { UploadMediaType, UploadSignature } from './media.ts';
+export { hashDocument, parseDocument, typeForPath } from './parser.ts';
+export type { ParseDocumentOptions } from './parser.ts';
+export { contentFilePath, freeSlug, saveDocument } from './save.ts';
+export type { ContentFilePathInput, FreeSlugOptions, SaveDocumentOptions } from './save.ts';
+export { defaultPermalink, slugify } from './slug.ts';
+export type { DefaultPermalinkInput } from './slug.ts';
+export { documentContent, documentFrontMatter, normalizeBody, serializeDocument, } from './writer.ts';
+export { DATABASE_FILE, dateSortKey, DuplicatePermalinkError, isTrashedPath, openContentStore, TRASH_DIRECTORY, } from './store.ts';
+export type { ContentCounts, ContentStore, ListAllOptions, ListByTagOptions, ListOptions, OpenContentStoreOptions, TagCount, } from './store.ts';
+export { createContentSync, DEFAULT_DEBOUNCE_MS } from './sync.ts';
+export type { ChangeOrigin, ContentEventListener, ContentEventMap, ContentEvents, ContentSync, CreateContentSyncOptions, DocumentChange, DocumentChangeType, SyncLogger, SyncResult, } from './sync.ts';
+//# sourceMappingURL=index.d.ts.map

package/dist/content/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/content/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,uBAAuB,EAAE,MAAM,eAAe,CAAC;AACxD,YAAY,EAAE,mBAAmB,EAAE,QAAQ,EAAE,eAAe,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAClG,OAAO,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAC/C,OAAO,EACL,kBAAkB,EAClB,gBAAgB,EAChB,mBAAmB,EACnB,kBAAkB,GACnB,MAAM,YAAY,CAAC;AACpB,YAAY,EAAE,eAAe,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AACnE,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AACvE,YAAY,EAAE,oBAAoB,EAAE,MAAM,aAAa,CAAC;AACxD,OAAO,EAAE,eAAe,EAAE,QAAQ,EAAE,YAAY,EAAE,MAAM,WAAW,CAAC;AACpE,YAAY,EAAE,oBAAoB,EAAE,eAAe,EAAE,mBAAmB,EAAE,MAAM,WAAW,CAAC;AAC5F,OAAO,EAAE,gBAAgB,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACtD,YAAY,EAAE,qBAAqB,EAAE,MAAM,WAAW,CAAC;AACvD,OAAO,EACL,eAAe,EACf,mBAAmB,EACnB,aAAa,EACb,iBAAiB,GAClB,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,aAAa,EACb,WAAW,EACX,uBAAuB,EACvB,aAAa,EACb,gBAAgB,EAChB,eAAe,GAChB,MAAM,YAAY,CAAC;AACpB,YAAY,EACV,aAAa,EACb,YAAY,EACZ,cAAc,EACd,gBAAgB,EAChB,WAAW,EACX,uBAAuB,EACvB,QAAQ,GACT,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,iBAAiB,EAAE,mBAAmB,EAAE,MAAM,WAAW,CAAC;AACnE,YAAY,EACV,YAAY,EACZ,oBAAoB,EACpB,eAAe,EACf,aAAa,EACb,WAAW,EACX,wBAAwB,EACxB,cAAc,EACd,kBAAkB,EAClB,UAAU,EACV,UAAU,GACX,MAAM,WAAW,CAAC"}

package/dist/content/index.js

@@ -0,0 +1,10 @@
+export { KNOWN_FRONT_MATTER_KEYS } from './document.js';
+export { renderMarkdown } from './markdown.js';
+export { KNOWN_UPLOAD_TYPES, matchesSignature, normalizeUploadType, UPLOAD_MEDIA_TYPES, } from './media.js';
+export { hashDocument, parseDocument, typeForPath } from './parser.js';
+export { contentFilePath, freeSlug, saveDocument } from './save.js';
+export { defaultPermalink, slugify } from './slug.js';
+export { documentContent, documentFrontMatter, normalizeBody, serializeDocument, } from './writer.js';
+export { DATABASE_FILE, dateSortKey, DuplicatePermalinkError, isTrashedPath, openContentStore, TRASH_DIRECTORY, } from './store.js';
+export { createContentSync, DEFAULT_DEBOUNCE_MS } from './sync.js';
+//# sourceMappingURL=index.js.map

package/dist/content/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/content/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,uBAAuB,EAAE,MAAM,eAAe,CAAC;AAExD,OAAO,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAC/C,OAAO,EACL,kBAAkB,EAClB,gBAAgB,EAChB,mBAAmB,EACnB,kBAAkB,GACnB,MAAM,YAAY,CAAC;AAEpB,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAEvE,OAAO,EAAE,eAAe,EAAE,QAAQ,EAAE,YAAY,EAAE,MAAM,WAAW,CAAC;AAEpE,OAAO,EAAE,gBAAgB,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEtD,OAAO,EACL,eAAe,EACf,mBAAmB,EACnB,aAAa,EACb,iBAAiB,GAClB,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,aAAa,EACb,WAAW,EACX,uBAAuB,EACvB,aAAa,EACb,gBAAgB,EAChB,eAAe,GAChB,MAAM,YAAY,CAAC;AAUpB,OAAO,EAAE,iBAAiB,EAAE,mBAAmB,EAAE,MAAM,WAAW,CAAC"}

package/dist/content/markdown.d.ts

@@ -0,0 +1,3 @@
+/** Render a Markdown body to the HTML the site and the feeds serve. */
+export declare function renderMarkdown(body: string): string;
+//# sourceMappingURL=markdown.d.ts.map

package/dist/content/markdown.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"markdown.d.ts","sourceRoot":"","sources":["../../src/content/markdown.ts"],"names":[],"mappings":"AAeA,uEAAuE;AACvE,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAEnD"}

package/dist/content/markdown.js

@@ -0,0 +1,39 @@
+import MarkdownIt from 'markdown-it';
+import footnote from 'markdown-it-footnote';
+import { slugify } from './slug.js';
+/**
+ * The renderer: markdown-it with Eleventy's default option (`html: true`),
+ * plus footnotes and heading anchors. Code blocks get a language class and no
+ * highlighting, so a theme can pick its own highlighter on the client.
+ */
+const markdown = new MarkdownIt({ html: true })
+    .use(footnote)
+    .use(headingAnchors);
+/** Render a Markdown body to the HTML the site and the feeds serve. */
+export function renderMarkdown(body) {
+    return markdown.render(body);
+}
+/**
+ * Give every heading an `id` so a URL can point at it. Ids come from the same
+ * slugifier as permalinks, and repeat headings get a numeric suffix so the ids
+ * stay unique within one document.
+ */
+function headingAnchors(md) {
+    md.core.ruler.push('geekity_heading_anchors', (state) => {
+        const used = new Map();
+        let index = 0;
+        for (const [position, token] of state.tokens.entries()) {
+            if (token.type !== 'heading_open')
+                continue;
+            index += 1;
+            const inline = state.tokens[position + 1];
+            const text = inline === undefined ? '' : inline.content;
+            const base = slugify(text) === '' ? `section-${String(index)}` : slugify(text);
+            const seen = used.get(base) ?? 0;
+            used.set(base, seen + 1);
+            token.attrSet('id', seen === 0 ? base : `${base}-${String(seen + 1)}`);
+        }
+        return true;
+    });
+}
+//# sourceMappingURL=markdown.js.map

package/dist/content/markdown.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"markdown.js","sourceRoot":"","sources":["../../src/content/markdown.ts"],"names":[],"mappings":"AAAA,OAAO,UAAU,MAAM,aAAa,CAAC;AAErC,OAAO,QAAQ,MAAM,sBAAsB,CAAC;AAE5C,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEpC;;;;GAIG;AACH,MAAM,QAAQ,GAAuB,IAAI,UAAU,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;KAChE,GAAG,CAAC,QAAQ,CAAC;KACb,GAAG,CAAC,cAAc,CAAC,CAAC;AAEvB,uEAAuE;AACvE,MAAM,UAAU,cAAc,CAAC,IAAY;IACzC,OAAO,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;AAC/B,CAAC;AAED;;;;GAIG;AACH,SAAS,cAAc,CAAC,EAAsB;IAC5C,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,yBAAyB,EAAE,CAAC,KAAK,EAAE,EAAE;QACtD,MAAM,IAAI,GAAG,IAAI,GAAG,EAAkB,CAAC;QACvC,IAAI,KAAK,GAAG,CAAC,CAAC;QAEd,KAAK,MAAM,CAAC,QAAQ,EAAE,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,OAAO,EAAE,EAAE,CAAC;YACvD,IAAI,KAAK,CAAC,IAAI,KAAK,cAAc;gBAAE,SAAS;YAC5C,KAAK,IAAI,CAAC,CAAC;YAEX,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC,QAAQ,GAAG,CAAC,CAAC,CAAC;YAC1C,MAAM,IAAI,GAAG,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC;YACxD,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,WAAW,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;YAE/E,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACjC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,GAAG,CAAC,CAAC,CAAC;YACzB,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,IAAI,IAAI,MAAM,CAAC,IAAI,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC;QACzE,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/content/media.d.ts

@@ -0,0 +1,65 @@
+/**
+ * What may be uploaded into `content/uploads/`, described once.
+ *
+ * The upload endpoint is the only door into the content directory that does
+ * not write Markdown, so what it accepts is a list rather than a judgement:
+ * an extension the CMS has never heard of is refused, and one it has is
+ * checked against the media type the browser declared and, where the format
+ * has one, against the bytes the file actually starts with.
+ *
+ * The table lives here rather than beside the endpoint because
+ * {@link ResolvedConfig} validates a site's allowlist against it, and config
+ * may not depend on the admin.
+ */
+/** Bytes a file of some format carries at a fixed offset. */
+export interface UploadSignature {
+    /** Where in the file the bytes are. */
+    offset: number;
+    /** The bytes themselves. */
+    bytes: readonly number[];
+}
+/** One kind of file the upload endpoint knows about. */
+export interface UploadMediaType {
+    /**
+     * Media types a browser may declare for this extension. An empty string is
+     * always accepted alongside these: a browser that does not recognise a file
+     * sends no type at all, and there is then nothing to disagree with.
+     */
+    declared: readonly string[];
+    /** Whether the Markdown for it is an image embed rather than a link. */
+    image: boolean;
+    /**
+     * Byte patterns that identify the format, as alternatives: a file matches
+     * when every part of any one of them matches. Absent for the text formats,
+     * which have no header to check.
+     */
+    signatures?: readonly (readonly UploadSignature[])[] | undefined;
+}
+/**
+ * Every extension the upload endpoint can accept, and what it takes to be one.
+ *
+ * SVG is deliberately absent. An SVG is a document that may carry script, and
+ * an upload is served from the site's own origin, so accepting one would hand
+ * anybody who can reach the editor a stored cross-site scripting hole. A site
+ * that wants them anyway can put `.svg` in `uploadTypes` — and then it has
+ * chosen that, which is the point.
+ */
+export declare const UPLOAD_MEDIA_TYPES: ReadonlyMap<string, UploadMediaType>;
+/** The extensions a site may put in its allowlist, sorted. */
+export declare const KNOWN_UPLOAD_TYPES: readonly string[];
+/**
+ * An extension as the allowlist spells it: lower case, with the dot.
+ *
+ * `PNG`, `.Png` and `png` are all the same thing to somebody writing a config
+ * file, so they are the same thing here.
+ */
+export declare function normalizeUploadType(value: string): string;
+/**
+ * Whether the first bytes of a file are the ones its extension implies.
+ *
+ * A format with no signature — the text ones — matches anything, because there
+ * is nothing to compare. Returns `false` for a file too short to hold the
+ * header it claims.
+ */
+export declare function matchesSignature(media: UploadMediaType, bytes: Uint8Array): boolean;
+//# sourceMappingURL=media.d.ts.map

package/dist/content/media.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"media.d.ts","sourceRoot":"","sources":["../../src/content/media.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,6DAA6D;AAC7D,MAAM,WAAW,eAAe;IAC9B,uCAAuC;IACvC,MAAM,EAAE,MAAM,CAAC;IACf,4BAA4B;IAC5B,KAAK,EAAE,SAAS,MAAM,EAAE,CAAC;CAC1B;AAED,wDAAwD;AACxD,MAAM,WAAW,eAAe;IAC9B;;;;OAIG;IACH,QAAQ,EAAE,SAAS,MAAM,EAAE,CAAC;IAC5B,wEAAwE;IACxE,KAAK,EAAE,OAAO,CAAC;IACf;;;;OAIG;IACH,UAAU,CAAC,EAAE,SAAS,CAAC,SAAS,eAAe,EAAE,CAAC,EAAE,GAAG,SAAS,CAAC;CAClE;AAOD;;;;;;;;GAQG;AACH,eAAO,MAAM,kBAAkB,EAAE,WAAW,CAAC,MAAM,EAAE,eAAe,CA2FlE,CAAC;AAEH,8DAA8D;AAC9D,eAAO,MAAM,kBAAkB,EAAE,SAAS,MAAM,EAA0C,CAAC;AAE3F;;;;;GAKG;AACH,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAIzD;AAED;;;;;;GAMG;AACH,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,eAAe,EAAE,KAAK,EAAE,UAAU,GAAG,OAAO,CASnF"}

package/dist/content/media.js

@@ -0,0 +1,143 @@
+/**
+ * What may be uploaded into `content/uploads/`, described once.
+ *
+ * The upload endpoint is the only door into the content directory that does
+ * not write Markdown, so what it accepts is a list rather than a judgement:
+ * an extension the CMS has never heard of is refused, and one it has is
+ * checked against the media type the browser declared and, where the format
+ * has one, against the bytes the file actually starts with.
+ *
+ * The table lives here rather than beside the endpoint because
+ * {@link ResolvedConfig} validates a site's allowlist against it, and config
+ * may not depend on the admin.
+ */
+/** The bytes of an ASCII string, for spelling a signature readably. */
+function ascii(value) {
+    return [...value].map((character) => character.charCodeAt(0));
+}
+/**
+ * Every extension the upload endpoint can accept, and what it takes to be one.
+ *
+ * SVG is deliberately absent. An SVG is a document that may carry script, and
+ * an upload is served from the site's own origin, so accepting one would hand
+ * anybody who can reach the editor a stored cross-site scripting hole. A site
+ * that wants them anyway can put `.svg` in `uploadTypes` — and then it has
+ * chosen that, which is the point.
+ */
+export const UPLOAD_MEDIA_TYPES = new Map([
+    [
+        '.png',
+        {
+            declared: ['image/png'],
+            image: true,
+            signatures: [[{ offset: 0, bytes: [0x89, 0x50, 0x4e, 0x47, 0x0d, 0x0a, 0x1a, 0x0a] }]],
+        },
+    ],
+    [
+        '.jpg',
+        {
+            declared: ['image/jpeg', 'image/jpg'],
+            image: true,
+            signatures: [[{ offset: 0, bytes: [0xff, 0xd8, 0xff] }]],
+        },
+    ],
+    [
+        '.jpeg',
+        {
+            declared: ['image/jpeg', 'image/jpg'],
+            image: true,
+            signatures: [[{ offset: 0, bytes: [0xff, 0xd8, 0xff] }]],
+        },
+    ],
+    [
+        '.gif',
+        {
+            declared: ['image/gif'],
+            image: true,
+            signatures: [
+                [{ offset: 0, bytes: ascii('GIF87a') }],
+                [{ offset: 0, bytes: ascii('GIF89a') }],
+            ],
+        },
+    ],
+    [
+        '.webp',
+        {
+            declared: ['image/webp'],
+            image: true,
+            // A WebP is a RIFF container whose form type is WEBP, so both halves of
+            // the header have to be there.
+            signatures: [
+                [
+                    { offset: 0, bytes: ascii('RIFF') },
+                    { offset: 8, bytes: ascii('WEBP') },
+                ],
+            ],
+        },
+    ],
+    [
+        '.avif',
+        {
+            declared: ['image/avif'],
+            image: true,
+            // An ISO base media file: a length, then `ftyp`, then the brand.
+            signatures: [
+                [
+                    { offset: 4, bytes: ascii('ftyp') },
+                    { offset: 8, bytes: ascii('avif') },
+                ],
+                [
+                    { offset: 4, bytes: ascii('ftyp') },
+                    { offset: 8, bytes: ascii('avis') },
+                ],
+            ],
+        },
+    ],
+    [
+        '.pdf',
+        {
+            declared: ['application/pdf'],
+            image: false,
+            signatures: [[{ offset: 0, bytes: ascii('%PDF-') }]],
+        },
+    ],
+    // The two text formats have no header. Nothing is sniffed, and nothing needs
+    // to be: they are served as text, and `application/octet-stream` is allowed
+    // because that is what a browser sends for a file type it does not know.
+    ['.txt', { declared: ['text/plain', 'application/octet-stream'], image: false }],
+    [
+        '.md',
+        {
+            declared: ['text/markdown', 'text/x-markdown', 'text/plain', 'application/octet-stream'],
+            image: false,
+        },
+    ],
+]);
+/** The extensions a site may put in its allowlist, sorted. */
+export const KNOWN_UPLOAD_TYPES = [...UPLOAD_MEDIA_TYPES.keys()].sort();
+/**
+ * An extension as the allowlist spells it: lower case, with the dot.
+ *
+ * `PNG`, `.Png` and `png` are all the same thing to somebody writing a config
+ * file, so they are the same thing here.
+ */
+export function normalizeUploadType(value) {
+    const trimmed = value.trim().toLowerCase();
+    if (trimmed === '')
+        return '';
+    return trimmed.startsWith('.') ? trimmed : `.${trimmed}`;
+}
+/**
+ * Whether the first bytes of a file are the ones its extension implies.
+ *
+ * A format with no signature — the text ones — matches anything, because there
+ * is nothing to compare. Returns `false` for a file too short to hold the
+ * header it claims.
+ */
+export function matchesSignature(media, bytes) {
+    const alternatives = media.signatures;
+    if (alternatives === undefined)
+        return true;
+    return alternatives.some((signature) => signature.every((part) => part.bytes.every((byte, index) => bytes[part.offset + index] === byte)));
+}
+//# sourceMappingURL=media.js.map

package/dist/content/media.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"media.js","sourceRoot":"","sources":["../../src/content/media.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AA4BH,uEAAuE;AACvE,SAAS,KAAK,CAAC,KAAa;IAC1B,OAAO,CAAC,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC;AAChE,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAyC,IAAI,GAAG,CAG7E;IACA;QACE,MAAM;QACN;YACE,QAAQ,EAAE,CAAC,WAAW,CAAC;YACvB,KAAK,EAAE,IAAI;YACX,UAAU,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC;SACvF;KACF;IACD;QACE,MAAM;QACN;YACE,QAAQ,EAAE,CAAC,YAAY,EAAE,WAAW,CAAC;YACrC,KAAK,EAAE,IAAI;YACX,UAAU,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC;SACzD;KACF;IACD;QACE,OAAO;QACP;YACE,QAAQ,EAAE,CAAC,YAAY,EAAE,WAAW,CAAC;YACrC,KAAK,EAAE,IAAI;YACX,UAAU,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC;SACzD;KACF;IACD;QACE,MAAM;QACN;YACE,QAAQ,EAAE,CAAC,WAAW,CAAC;YACvB,KAAK,EAAE,IAAI;YACX,UAAU,EAAE;gBACV,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC;gBACvC,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC;aACxC;SACF;KACF;IACD;QACE,OAAO;QACP;YACE,QAAQ,EAAE,CAAC,YAAY,CAAC;YACxB,KAAK,EAAE,IAAI;YACX,wEAAwE;YACxE,+BAA+B;YAC/B,UAAU,EAAE;gBACV;oBACE,EAAE,MAAM,EAAE,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE;oBACnC,EAAE,MAAM,EAAE,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE;iBACpC;aACF;SACF;KACF;IACD;QACE,OAAO;QACP;YACE,QAAQ,EAAE,CAAC,YAAY,CAAC;YACxB,KAAK,EAAE,IAAI;YACX,iEAAiE;YACjE,UAAU,EAAE;gBACV;oBACE,EAAE,MAAM,EAAE,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE;oBACnC,EAAE,MAAM,EAAE,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE;iBACpC;gBACD;oBACE,EAAE,MAAM,EAAE,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE;oBACnC,EAAE,MAAM,EAAE,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE;iBACpC;aACF;SACF;KACF;IACD;QACE,MAAM;QACN;YACE,QAAQ,EAAE,CAAC,iBAAiB,CAAC;YAC7B,KAAK,EAAE,KAAK;YACZ,UAAU,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;SACrD;KACF;IACD,6EAA6E;IAC7E,4EAA4E;IAC5E,yEAAyE;IACzE,CAAC,MAAM,EAAE,EAAE,QAAQ,EAAE,CAAC,YAAY,EAAE,0BAA0B,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;IAChF;QACE,KAAK;QACL;YACE,QAAQ,EAAE,CAAC,eAAe,EAAE,iBAAiB,EAAE,YAAY,EAAE,0BAA0B,CAAC;YACxF,KAAK,EAAE,KAAK;SACb;KACF;CACF,CAAC,CAAC;AAEH,8DAA8D;AAC9D,MAAM,CAAC,MAAM,kBAAkB,GAAsB,CAAC,GAAG,kBAAkB,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;AAE3F;;;;;GAKG;AACH,MAAM,UAAU,mBAAmB,CAAC,KAAa;IAC/C,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC3C,IAAI,OAAO,KAAK,EAAE;QAAE,OAAO,EAAE,CAAC;IAC9B,OAAO,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,OAAO,EAAE,CAAC;AAC3D,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,gBAAgB,CAAC,KAAsB,EAAE,KAAiB;IACxE,MAAM,YAAY,GAAG,KAAK,CAAC,UAAU,CAAC;IACtC,IAAI,YAAY,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IAE5C,OAAO,YAAY,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CACrC,SAAS,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE,CACvB,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC,KAAK,IAAI,CAAC,CACvE,CACF,CAAC;AACJ,CAAC"}

package/dist/content/parser.d.ts

@@ -0,0 +1,24 @@
+import type { Document, DocumentContent, DocumentType } from './document.ts';
+/** Where the file came from, which is what tells a post from a page. */
+export interface ParseDocumentOptions {
+    /** Path relative to the content directory, e.g. `posts/2026-09-02-hello.md`. */
+    path: string;
+    /** Overrides the type the path implies. Needed for files under `_trash/`. */
+    type?: DocumentType | undefined;
+}
+/**
+ * Parse the text of a Markdown file into a {@link Document}.
+ *
+ * Front matter is read with gray-matter and the body rendered with
+ * markdown-it. Dates become ISO 8601 strings whether the file quoted them or
+ * left YAML to parse them, and every key the CMS does not model is kept.
+ */
+export declare function parseDocument(source: string, options: ParseDocumentOptions): Document;
+/** The SHA-256 a {@link Document} carries: a hash of its canonical file text. */
+export declare function hashDocument(content: DocumentContent): string;
+/**
+ * Decide whether a path holds a post or a page. Only the directory matters, so
+ * a file that moves between `posts/` and `pages/` changes type with it.
+ */
+export declare function typeForPath(path: string): DocumentType;
+//# sourceMappingURL=parser.d.ts.map

package/dist/content/parser.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"parser.d.ts","sourceRoot":"","sources":["../../src/content/parser.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAuB,QAAQ,EAAE,eAAe,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAOlG,wEAAwE;AACxE,MAAM,WAAW,oBAAoB;IACnC,gFAAgF;IAChF,IAAI,EAAE,MAAM,CAAC;IACb,6EAA6E;IAC7E,IAAI,CAAC,EAAE,YAAY,GAAG,SAAS,CAAC;CACjC;AAED;;;;;;GAMG;AACH,wBAAgB,aAAa,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,oBAAoB,GAAG,QAAQ,CAgDrF;AAED,iFAAiF;AACjF,wBAAgB,YAAY,CAAC,OAAO,EAAE,eAAe,GAAG,MAAM,CAE7D;AAED;;;GAGG;AACH,wBAAgB,WAAW,CAAC,IAAI,EAAE,MAAM,GAAG,YAAY,CAQtD"}