@geekity/cms 0.30.0 → 0.32.0

package/dist/index.js

@@ -1,840 +1,4 @@
-import { Server as NetServer } from 'node:net';
-import { MemoryKvStore } from '@fedify/fedify';
-import { serve as serveNode } from '@hono/node-server';
-import { Hono } from 'hono';
-import { createAccessLog } from './access-log.js';
-import { createWriteGate } from './drain.js';
-import { createSettlingQueue } from './federation/queue.js';
-import { leavingWriteGate } from './supervisor/supervision.js';
-import { refuseWritesUnder } from './files/atomic.js';
-import { compression } from './web/compression.js';
-import { createAvatarService } from './avatars/index.js';
-import { createRetentionService } from './privacy/retention.js';
-import { baselineSecurityHeaders, effectiveBaseUrl, listUsers, migrateSettingsToFile, migrateUsersToFile, mountAdmin, openAdminStore, readSiteSettings, } from './admin/index.js';
-import { withRebuiltDatabase } from './cache.js';
-import { resolveConfig } from './config.js';
-import { createContentSync, createScheduler, openContentStore } from './content/index.js';
-import { shareLocation } from './content/location.js';
-import { postLocations } from './content/locations.js';
-import { createMailService } from './mail/index.js';
-import { readEnabledPlugins } from './plugins/enabled.js';
-import { mountPluginRoutes, pluginLifecycle } from './plugins/mount.js';
-import { pluginFederation } from './plugins/federation.js';
-import { sitePluginRegistry } from './plugins/site.js';
-import { createCommentDigest, createCommentNotifier } from './notifications/index.js';
-import { assertActorKeysUsable, createActorProfileService, createDeliveryService, createRelayService, createSiteFederation, migrateActorKeysToFiles, migrateFederationToFiles, mountFederation, rebuildFederationIndexes, signedProfileLoader, } from './federation/index.js';
-import { createReplyBackfill, signedRepliesLoader } from './federation/backfill.js';
-import { citedPostReader } from './federation/cited-post.js';
-import { handleLearner } from './federation/handles.js';
-import { createFeedNotifier } from './notify.js';
-import { createIndexNowNotifier } from './indexnow.js';
-import { commentFormFor, createAkismetChecker, followAllMovedComments, followMovedComments, migrateCommentEmails, migrateCommentKeys, rebuildCommentIndexes, } from './comments/index.js';
-import { contactFormFor } from './contact/index.js';
-import { settleImageVariants } from './images/variants.js';
-import { createMaintenanceSwitch } from './maintenance.js';
-import { enterDevMode } from './dev-mode.js';
-import { createConversation, createRedirectSource, createRenderer, createSiteDataSource, createThemeSource, frontPageSlugs, maintenanceGate, mountHealth, mountPublicSite, mountWellKnown, redirectBy, serverError, themeName, } from './web/index.js';
-import { activityLogSettled } from './indieauth/activity-log.js';
-import { mountAuthorizationEndpoint } from './indieauth/consent.js';
-import { mountIndieAuthDiscovery } from './indieauth/discovery.js';
-import { createIndieAuthState } from './indieauth/grants.js';
-import { mountTokenEndpoint, mountTokenInfoEndpoints } from './indieauth/token.js';
-import { mountMicropub } from './micropub/endpoint.js';
-import { mountMicropubMedia } from './micropub/media.js';
-import { createReplyContextService, createWebmentionService, followMovedWebmentions, } from './webmention/index.js';
-import { heldReplyContext } from './webmention/reply-context.js';
-import { createReplyNotices } from './comments/reply-notices.js';
-import { selectedTargets, syndicationCopies, syndicationTargetProblems, syndicationTargetsReader, } from './webmention/syndication.js';
-export { createFeedNotifier, NOTIFY_TIMEOUT_MS } from './notify.js';
-export { createIndexNowNotifier, defaultIndexNowBackoffMs, INDEXNOW_ENDPOINT } from './indexnow.js';
-export { LANGUAGE_TAG_PATTERN, COMMENT_ACTIONS, COMMENT_ADMIN_FIELDS, COMMENT_KINDS, COMMENT_SOURCES, COMMENT_STATUSES, COMMENT_TABS, COMMENTS_MODERATE_PATH, COMMENTS_PATH, COMMENTS_PER_PAGE, COMMENTS_REPLY_PATH, COMMENTS_SECTION, commentListUrl, mountCommentsScreen, pendingComments, MESSAGE_FIELDS, MESSAGE_TABS, MESSAGES_DELETE_PATH, MESSAGES_PATH, MESSAGES_PER_PAGE, MESSAGES_READ_PATH, MESSAGES_SECTION, messageListUrl, mountMessagesScreen, unreadMessages, DELIVERY_STATUSES, RELAY_STATES, ADMIN_ASSET_MAX_AGE, ADMIN_ASSET_PREFIX, ADMIN_PREFIX, ADMIN_SECTIONS, ADMIN_STATIC_DIR, ADMIN_TEMPLATES, actorSummary, addUserProblems, adminAssetResponse, adminContentSecurityPolicy, adminSecurityHeaders, akismetPanel, AKISMET_FIELDS, AKISMET_PATH, AKISMET_REMOVE, EMAIL_PATTERN, MAIL_FIELDS, MAIL_PATH, MAIL_REMOVE, MAIL_TEST_FIELDS, MAIL_TEST_PATH, MAIL_TEST_TEMPLATE, mailPanel, ARGON2_PARAMETERS, baselineSecurityHeaders, blankForm, CHANGE_PASSWORD_PATH, changePasswordProblems, clearSessionCookie, createAdminTemplateEnvironment, createLoginThrottle, createNonce, credentialProblem, clientAddress, countUsers, createUser, CSRF_FIELD, csrfTokenMatches, DASHBOARD_RECENT_POSTS, describeWait, DEFAULT_SITE_SETTINGS, DELETE_USER_PATH, deleteUser, deleteUserRefusal, deliveryRows, DOCUMENT_FILTERS, documentFilter, DOCUMENTS_PER_PAGE, editorPath, effectiveBaseUrl, EXCLUDE_KEY, DuplicateUsernameError, emailProblem, FEDERATION_FIELDS, FEDERATION_PATH, FEDERATION_RECENT, FEDERATION_SETTINGS_PATH, findAdminAsset, findBySlug, findUser, findUserById, findUserByIdentifier, followerRow, FORGOT_PATH, formatInTimezone, formFor, applyTermChange, CATEGORY_KIND, deletePath, formFromSettings, flash, GENERATED_PASSWORD_ALPHABET, GENERATED_PASSWORD_LENGTH, generatePassword, guard, hashPassword, HSTS_MAX_AGE, HSTS_VALUE, INBOX_INTERACTIONS, inboxRows, LOCKOUT_GROWTH_LIMIT, LOGIN_PATH, LOGOUT_PATH, listingUrl, listOptionsFor, listUsers, localPosts, loginKeys, MAXIMUM_USERNAME_LENGTH, migrateSettingsToFile, migrateUsersToFile, MINIMUM_PASSWORD_LENGTH, mountAdmin, mountDocumentScreens, mountFederationScreen, mountPreview, mountRecovery, mountSettings, mountTaxonomyScreens, mountUploads, mountUsers, newEditorPath, newPasswordProblem, NONCE_BYTES, openAdminStore, PAGE_KIND, PACKAGED_ADMIN_DIR, PASSWORD_CHANGED_TEMPLATE, passwordProblem, postEditorPath, POST_KIND, primaryUser, PREVIEW_PATH, readSiteSettings, RECOVERY_ANSWER, RECOVERY_FIELDS, RELAY_RETRY_PATH, RELAY_STATE_LABELS, relayList, relayRow, renamePath, renameProblem, RESEND_PATH, resendMessage, RESET_PATH, RESET_TEMPLATE, RESET_TOKEN_LIFETIME_SECONDS, resetLink, rewriteTerm, MEDIA_DELETE_PATH, MEDIA_FIELDS, MEDIA_PATH, MEDIA_PER_PAGE, MEDIA_SECTION, MEDIA_UPLOAD_PATH, mediaPageUrl, mentionsUpload, mountMediaScreen, deleteUpload, describeUpload, listUploads, referencesTo, resolveUpload, uploadMarkdown, normalizeRelayInbox, refusedUpload, refuseOversizedUpload, returnPath, SECURE_SESSION_COOKIE, SESSION_COOKIE, sessionCookieName, SESSION_ID_BYTES, sessionIdFrom, setSessionCookie, SETTINGS_FIELDS, SETTINGS_PATH, settingsFromForm, settingsFromSiteJson, settingsProblems, SETUP_PATH, siteDataPath, siteJsonFor, splitTags, storeUpload, TAG_KIND, takeFlash, TAXONOMY_FIELDS, TAXONOMY_KINDS, tooLargeMessage, updateSiteSettings, UPLOAD_ENVELOPE_BYTES, UPLOAD_FIELD, UPLOADS_PATH, setUserEmail, setUserPassword, setUserProfile, setUserActorId, ConflictingActorIdError, UnknownUserError, USER_EMAIL_PATH, USER_FIELDS, USERNAME_PATTERN, usernameProblem, USERS_FILE, USERS_FILE_MODE, usersFile, USERS_PATH, usesSecureCookies, verifyPasswordHash, verifyUserPassword, writeSiteJson, } from './admin/index.js';
-// The database as a file a site may act on: where it is, how to throw it away,
-// and the two refusals a boot can raise over one. The migration machinery
-// behind them stays inside the package, because a site has no business running
-// somebody else's ledger.
-export { databaseFile, databaseFiles, DATABASE_SUFFIXES, discardDatabase, OutdatedDatabaseError, UnusableDatabaseError, } from './cache.js';
-export { DEFAULT_IMAGE_FORMATS, DEFAULT_IMAGE_WIDTHS, DEFAULT_SECURITY_HEADERS, DEFAULT_UPLOAD_MAX_BYTES, DEFAULT_UPLOAD_MEDIA_MAX_BYTES, DEFAULT_UPLOAD_TYPES, defineConfig, KNOWN_IMAGE_FORMATS, resolveConfig, } from './config.js';
-// Native comments: the files they live in, the restricted Markdown they are
-// rendered with, the rules that decide whether a post is still taking them, the
-// one seam a spam checker plugs into, and the Akismet checker that plugs into
-// it when the site has a key.
-export { addComment, AKISMET_ENDPOINT, AKISMET_KEY_FILE, AKISMET_TIMEOUT_MS, AKISMET_USER_AGENT, akismetKeyPath, blankValues, COMMENT_FIELDS, COMMENT_NOTICE_PARAM, COMMENT_NOTICES, COMMENT_POST_PATH, COMMENT_RATE_LIMIT, COMMENT_RATE_WINDOW_SECONDS, COMMENT_REPLY_PARAM, COMMENT_EMAILS_DIRECTORY, COMMENT_EMAILS_FILE_MODE, COMMENT_SALT_FILE, COMMENTS_DATA_DIRECTORY, COMMENTS_FRONT_MATTER_KEY, commentForm, commentFormFor, commentKeys, commentNoticeFor, commentPolicyOf, commentProblems, commentEmailsFile, commentsDirectory, commentsFile, commentsOpen, createAkismetChecker, DEFAULT_COMMENTS_CLOSE_AFTER_DAYS, deleteComment, hashClientAddress, heldWebmention, intakeComment, isModerationAction, migrateCommentEmails, migrateCommentKeys, MAXIMUM_BODY_LENGTH, MAXIMUM_FORM_AGE_SECONDS, MAXIMUM_NAME_LENGTH, MAXIMUM_URL_LENGTH, MINIMUM_SUBMIT_SECONDS, moderateComment, MODERATION_ACTIONS, mountComments, normalizeWebsite, readAkismetKey, readComments, rebuildCommentIndexes, refilledCommentForm, removeAkismetKey, renderCommentMarkdown, signedInCommenter, signedInCommentForm, submitComment, updateComment, valuesOf, verifyAkismetKey, writeAkismetKey, } from './comments/index.js';
-// The contact form (TASK-56): the front matter key a page opts in with, the
-// endpoint the form posts to, the files under `data/contact/` that hold what
-// it collected, and the message that carries one on to the site's address.
-export { addContactMessage, blankContactValues, CONTACT_ANCHOR, CONTACT_DATA_DIRECTORY, CONTACT_FIELDS, CONTACT_FRONT_MATTER_KEY, CONTACT_MESSAGE_TEMPLATE, CONTACT_NOTICE_PARAM, CONTACT_NOTICES, CONTACT_POST_PATH, CONTACT_RATE_LIMIT, CONTACT_RATE_WINDOW_SECONDS, contactDirectory, contactForm, contactFormFor, contactKeys, contactMessageFile, contactMessageId, contactNoticeFor, contactOpen, contactProblems, contactRecipient, contactValuesOf, countContactMessagesByStatus, countUnreadContactMessages, deleteContactMessage, listContactMessages, MAXIMUM_CONTACT_EMAIL_LENGTH, MAXIMUM_CONTACT_MESSAGE_LENGTH, MAXIMUM_CONTACT_NAME_LENGTH, MAXIMUM_CONTACT_SUBJECT_LENGTH, mountContact, readContactMessage, refilledContactForm, sendContactMessage, setContactMessageRead, submitContactMessage, } from './contact/index.js';
-// The defences every public form here shares (TASK-56): the honeypot, the age
-// of a rendered form, and the salted hash of where a submission came from.
-export { ADDRESS_SALT_FILE, FORM_LOADED_FIELD, FORM_TRAP_FIELD, formAgeSeconds, formTimingRefusal, trapped, } from './forms/protection.js';
-export { readFileIfPresentSync, updateFileAtomically, withFileLock, writeFileAtomically, writeFileAtomicallySync, } from './files/index.js';
-export { DirectoryNotEmptyError, initSite, SITE_TEMPLATE_DIR, siteManifest } from './init.js';
-export { definePlugin, HOST_API_VERSION } from './plugin.js';
-export { DuplicatePluginError, pluginDataFolder } from './plugins/registry.js';
-export { pluginSite } from './plugins/site.js';
-export { PLUGINS_PATH } from './admin/plugins.js';
-export { describeImage, findImageVariant, generateImageVariants, imageMediaType, IMAGE_DIRECTORY, IMAGE_RECORD_NAME, IMAGE_SIZES, removeImageVariants, responsiveImages, iconSetting, manifestIcons, siteIcons, siteImageMarkup, variantUrl, VARIANT_ASSET_PREFIX, } from './images/index.js';
-export { calendarDayIn, contentFilePath, createContentSync, createScheduler, DATABASE_FILE, dateSortKey, DEFAULT_DEBOUNCE_MS, DEFAULT_TIMEZONE, defaultPermalink, documentContent, documentFrontMatter, ENCLOSURE_FRONT_MATTER_KEY, enclosureOf, freeSlug, DuplicatePermalinkError, hashDocument, htmlToText, isCaptions, isScheduled, isTrashedPath, KNOWN_FRONT_MATTER_KEYS, KNOWN_UPLOAD_TYPES, matchesSignature, MAXIMUM_DELAY_MS, MAXIMUM_QUERY_TERMS, normalizeBody, normalizeUploadType, openContentStore, parseDocument, PHOTO_FRONT_MATTER_KEY, photoAlt, photosOf, playsAsVideo, renderMarkdown, saveDocument, SCHEDULE_ORIGIN, scheduledFor, searchExpression, searchText, serializeDocument, slugify, SNIPPET_CLOSE, SNIPPET_OPEN, systemClock, systemTimers, toUtcInstant, TRANSCRIPT_TYPES, TRASH_DIRECTORY, typeForPath, UPLOAD_MEDIA_TYPES, wallClockIn, zoneLabel, } from './content/index.js';
-// Notifications: who is told about a comment, the switchboard that decides,
-// and the signed one-click links the messages carry (TASK-55).
-export { addCommentOptOut, COMMENT_DIGEST_TEMPLATE, COMMENT_OPTOUTS_FILE, COMMENT_PENDING_TEMPLATE, COMMENT_REPLY_TEMPLATE, commentOptOutsFile, COMMENTS_NOTIFICATION, createCommentDigest, createCommentNotifier, DEFAULT_DELIVERY_MODE, DELIVERY_MODE_LABELS, DELIVERY_WINDOW_MS, deliveryMode, DIGEST_MAX_ITEMS, DIGEST_TICK_MS, DIGEST_TIMES_FILE, digestTimesFile, hasOptedOut, isBatchedMode, MODERATE_PATH, MODERATION_TOKEN_LIFETIME_SECONDS, moderationLink, mountNotificationLinks, NOTIFICATION_DELIVERY_MODES, NOTIFICATION_EVENTS, NOTIFICATION_FIELDS, NOTIFICATION_SECRET_FILE, notificationEvent, notificationMode, notificationRecipients, notificationSwitches, notificationTokenExpiry, notificationWanted, readCommentOptOuts, readDigestTimes, readNotificationToken, recordDigestTimes, signNotificationToken, systemNotificationTimers, UNSUBSCRIBE_ACTION, UNSUBSCRIBE_PATH, UNSUBSCRIBE_TOKEN_LIFETIME_SECONDS, unsubscribeLink, withNotification, withNotificationMode, } from './notifications/index.js';
-// Email: the one seam a mail service plugs into, the two providers the package
-// ships, the in-memory one a test observes, and the service every feature that
-// emails goes through.
-export { BREVO_ENDPOINT, BREVO_TIMEOUT_MS, createBrevoProvider, createMailService, createMailTemplates, createMemoryMailProvider, createSmtpProvider, DEFAULT_MAIL_ATTEMPTS, defaultMailBackoffMs, MAIL_CREDENTIALS_FILE, MAIL_PROVIDERS, mailCredentialsPath, mailTemplateFiles, readMailCredentials, removeMailCredentials, SMTP_TIMEOUT_MS, writeMailCredentials, } from './mail/index.js';
-export { acceptedRelays, acceptRelay, addFollower, appendInboxActivity, ACTOR_KEY_ALGORITHMS, ACTOR_PATH, assertActorKeysUsable, actorKeyFile, actorKeysDir, articleObjectId, actorAliases, actorId, avatarUrl, keyIdFor, mainKeyId, multikeyId, senderKeyPairs, userActor, userByUsername, createActivityId, createDeliveryService, createRelayService, createSiteFederation, deleteActivityId, deliveryTargets, documentAuthor, federatedPost, federatedUsernames, FEDERATION_DATA_DIRECTORY, federationOrigin, acctOf, handleHref, userDirectory, webFingerSubject, WEBFINGER_PATH, followerFrom, followerRecipient, FOLLOWERS_FILE, FOLLOWERS_PAGE_SIZE, FOLLOWERS_PATH, actorHandle, followersFile, followersPage, FOLLOWING_PATH, groupByInbox, handleAccept, handleDelete, handleFollow, handleLoggedActivity, handleReject, handleUndo, INBOX_PATH, isFederatedDocument, lastFollowersCursor, inboxDirectory, inboxFile, inboxMonth, INBOX_DIRECTORY, inboxRowFrom, loadActorKeyPairs, logActivity, migrateActorKeysToFiles, migrateFederationToFiles, mountFederation, NODEINFO_PATH, OUTBOX_PAGE_SIZE, OUTBOX_PATH, postCreateActivity, postDeleteActivity, postObject, postUpdateActivity, readFollowers, readInboxLog, rebuildFederationIndexes, rejectRelay, relayAnswering, relayRecipient, REPLY_ACTIVITY_TYPE, replyFrom, replyTargetOf, SHARED_INBOX_PATH, SOFTWARE_NAME, SOURCE_MEDIA_TYPE, toInstant, updateActivityId, } from './federation/index.js';
-export { absoluteUrl, ACTIVITY_STREAMS_MEDIA_TYPES, activityStreamsId, alternateLinks, archiveMonths, ARCHIVE_FRONT_MATTER_KEY, archiveOpen, assetNotModified, assetResponse, atomEntry, atomFeed, AUTHOR_BASE, authorContext, authorFeedHref, authorHref, authorName, authorNames, categoryHref, commentAnchor, commentsFeedHref, commentsFeedPath, REPLIES_ROOT, repliesFeedPath, repliesKey, commentsFeedResponse, commentsRssFeed, COMMENTS_ROOT, COMMENTS_TITLE_PREFIX, contentEtag, createConversation, createRenderer, createSiteDataSource, createTemplateEnvironment, CREATIVE_COMMONS_LICENSES, CREATIVE_COMMONS_NAMESPACE, DEFAULT_FEED_SIZE, DEFAULT_MENU_NAME, DEFAULT_TAXONOMY_BASES, DEFAULT_POSTS_PER_PAGE, DOCUMENT_REPRESENTATIONS, documentContext, cdata, contentTypeOf, DC_NAMESPACE, DEFAULT_FEED_LANGUAGE, DEFAULT_NOTIFY_SERVER, documentJson, escapeXml, excerptFromHtml, EXCERPT_WORDS, FEED_ALIASES, FEED_CONTENT_TYPES, FEED_FORMATS, FEED_GENERATOR, FEED_GENERATOR_URI, FEED_ITEM_REVISION, FEED_SEGMENT, FEED_SEGMENTS, feedComments, feedExcerpt, feedHref, feedItem, feedItems, feedLanguage, feedLinkHeader, feedPathUnder, feedResponse, feedSize, findAsset, findThemeAsset, findThemeFile, findUpload, forgetTerm, formatDate, frontPageSlugs, homeHref, INBOX_BASE, isLinkUrl, isNotModified, isListed, isServed, ITUNES_NAMESPACE, JSON_FEED_VERSION, JSON_SCHEMA_VERSION, jsonFeed, jsonFeedItem, lastModifiedOf, latestModified, LINK_REL_RULE, LINK_URL_RULE, listingPageHref, LISTING_REPRESENTATIONS, matchesEtag, MAXIMUM_QUERY_LENGTH, MEDIA_TYPES, MENU_NAME_MAX_LENGTH, MENU_NAME_PATTERN, menuItemLineProblem, menuItemOf, menuItemsFromText, menuItemsText, menuNameProblem, menusOf, mountPublicSite, navigationItems, navigationItemsOf, navigationMenu, navigationMenus, notAcceptableResponse, NOTIFY_CLOUD_PORT, NOTIFY_CLOUD_PROTOCOL, NOTIFY_PATHS, notifyEndpoints, notifyServerOf, offsetForPage, PACKAGED_THEME_DIR, PAGE_SEGMENT, paginate, parseAccept, parseAuthorPath, PODCAST_NAMESPACE, postObjectId, postsPerPage, prefersActivityStreams, profileContext, publicDocumentAt, resolveLicense, recordTermRename, redirectedTerm, REPRESENTATION_EXTENSIONS, representationEtag, REL_VALUE_PATTERN, relText, relValuesOf, representationHref, representationResponse, RESERVED_TOP_LEVEL_PATHS, rfc822, spokenIn, robotsResponse, robotsTxt, ROBOTS_CONTENT_TYPE, ROBOTS_PATH, rssFeed, rssItem, readTheme, sanitizeCommentHtml, searchHref, searchJson, searchPageIndex, searchQuery, SEARCH_PAGE_PARAM, SEARCH_PATH, SEARCH_QUERY_PARAM, selectRepresentation, SITE_DATA_FILE, SITE_THEME_KIND, sitemapChildPath, sitemapDate, sitemapIndexXml, sitemapResponse, sitemapXml, SITEMAP_CHILD_ROUTE, SITEMAP_CONTENT_TYPE, SITEMAP_MAX_URLS, SITEMAP_NAMESPACE, SITEMAP_PATH, snippetHtml, SOURCE_NAMESPACE, siteAuthorContext, siteAuthorName, siteMenus, siteTimezone, splitFeedPath, splitLinkRel, splitRepresentationExtension, tagHref, TAXONOMIES, userForAuthor, TAXONOMY_BASE_PATTERN, TAXONOMY_LABELS, taxonomyBaseProblems, taxonomyBases, taxonomyBasesOrDefault, taxonomyForSegment, taxonomyRedirectsOf, OPTIONAL_TEMPLATES, TEMPLATES, termHref, termRedirects, themeAssetNotModified, themeAssetResponse, THEME_ASSET_MAX_AGE, THEME_ASSET_PREFIX, THEME_STATIC_DIR, THEME_MANIFEST_FILE, themeSearchPath, UPLOAD_ASSET_MAX_AGE, UPLOAD_ASSET_PREFIX, UPLOAD_DIRECTORY, WFW_NAMESPACE, } from './web/index.js';
-export { classesOf, createWebmentionService, discoverEndpoint, DISCOVERY_MAX_BYTES, DISCOVERY_TIMEOUT_MS, elementsIn, endpointInHeader, endpointInHtml, externalLinks, innerHtmlOf, isElement, itemsIn, linksTo, parseHtml, rawTextOf, readCapped, SEND_TIMEOUT_MS, sourceEntry, textOf, WEBMENTION_USER_AGENT, createReplyContextService, fetchReplyContext, readReplyContext, REPLY_CONTEXTS_FILE, systemHostLookup, parseSyndicationTargets, selectedTargets, SYNDICATE_TO_FRONT_MATTER_KEY, SYNDICATION_FILE, SYNDICATION_FRONT_MATTER_KEY, SYNDICATION_TARGETS_FILE, syndicationTargetsReader, } from './webmention/index.js';
-export { AVATAR_PATH_PREFIX, AVATAR_SIZE, avatarHref, avatarSourceOf, createAvatarService, mountAvatars, } from './avatars/index.js';
-export { RECOMMENDED_ADDRESS_HASH_RETENTION_DAYS, RECOMMENDED_COMMENT_EMAIL_RETENTION_DAYS, RECOMMENDED_CONTACT_MESSAGE_RETENTION_DAYS, } from './privacy/policy.js';
-export { createRetentionService, RETENTION_SWEEP_MS } from './privacy/retention.js';
-/**
- * Where the scheduler's watermark lives in {@link AdminStore.getState}: the
- * instant up to which scheduled documents have been announced.
- */
-export const SCHEDULE_WATERMARK_KEY = 'schedule.watermark';
-/** Where the instant the scheduler first ran on this site lives in {@link AdminStore.getState}. */
-export const SCHEDULE_FIRST_RUN_KEY = 'schedule.firstRun';
-/**
- * The two connections a boot takes on the one database, opened together so
- * that either both of them survive it or neither does.
- *
- * The database is a cache (decision-9), so a version of it this package cannot
- * carry forward is thrown away and read back from the files rather than being
- * a thing anybody has to do something about. That is what
- * {@link withRebuiltDatabase} does with an {@link OutdatedDatabaseError} — and
- * why the content store is closed before the admin store's failure is allowed
- * to leave here: the file cannot be deleted while a connection holds it.
- *
- * The failure it does not recover from is a database written by a newer
- * `@geekity/cms`, or one damaged past opening. Both refuse the boot naming the
- * file, because a downgrade is usually a mistake and because a database from
- * before decision-9 still carries the settings, key and account rows the
- * migrations below write out as files — deleting one of those to get past an
- * error would destroy an actor's private keys. `geekity rebuild` is the door
- * for a person who has looked and decided.
- */
-function openCache(resolved) {
-    return withRebuiltDatabase(resolved.dataDir, () => {
-        const { dataDir, baseUrl } = resolved;
-        const store = openContentStore({ dataDir, baseUrl, now: resolved.now });
-        try {
-            return { store, admin: openAdminStore({ dataDir }) };
-        }
-        catch (error) {
-            store.close();
-            throw error;
-        }
-    });
-}
-/**
- * Build a CMS around a site's config.
- *
- * The returned app is a plain Hono app: the public site, the admin UI and the
- * federation endpoints are all mounted on it as later milestones land. Booting
- * opens the SQLite cache under `dataDir` (creating the directory) and applies
- * any migrations, so `close()` has to be called to release it. A missing
- * database is built and read back out of the files; see {@link openCache} for
- * what happens to one this version cannot use.
- */
-export function createCms(config = {}, context = {}) {
-    const resolved = resolveConfig(config);
-    if (resolved.devMode)
-        enterDevMode(resolved.dataDir, 'config');
-    const plugins = sitePluginRegistry(resolved, context.folderPlugins);
-    const { store, admin } = openCache(resolved);
-    // A site upgrading from the version that kept its settings in SQLite has
-    // rows nothing would read again: they become content/_data/site.json here,
-    // once, and the table goes (decision-9). A site that has already been
-    // through it does nothing but check.
-    migrateSettingsToFile({ admin, contentDir: resolved.contentDir });
-    // And the same for its actor's key pairs, which become JWK files under
-    // data/keys. This is the migration that must not fail: an actor whose
-    // private key is lost is one every follower stops being able to verify, so
-    // the rows are written out before the table is dropped, and a file that is
-    // already there always wins.
-    migrateActorKeysToFiles({ admin, dataDir: resolved.dataDir });
-    // And the accounts, which become data/users.json. The ids come with them, so
-    // a session the database already holds still names the person it was made
-    // for, and the file wins where there already is one.
-    migrateUsersToFile({ admin, dataDir: resolved.dataDir });
-    // And the log of what the inbox was told, which becomes
-    // content/_data/federation/inbox/{yyyy}-{mm}.jsonl. Unlike the three above,
-    // no table is dropped: `ap_inbox` and `followers` stay as indexes of the
-    // files, which is why the rebuild is next and runs on every boot rather than
-    // once. The site actor's followers are not migrated: decision-14 replaced it
-    // with one actor per user, and nobody inherits a follow made with somebody
-    // who no longer exists.
-    migrateFederationToFiles({ admin, contentDir: resolved.contentDir });
-    rebuildFederationIndexes({ admin, contentDir: resolved.contentDir });
-    // And the comments, which are files under content/_data/comments/ with
-    // their authors' emails under data/comments/ (TASK-50, TASK-182). A comment
-    // file that still holds an email, from before they moved or from a hand
-    // edit, has it moved first; then the index is rebuilt, on every boot for the
-    // same reason the federation one is.
-    const commentRecords = { admin, contentDir: resolved.contentDir, dataDir: resolved.dataDir };
-    migrateCommentEmails(commentRecords);
-    migrateCommentKeys(commentRecords);
-    rebuildCommentIndexes(commentRecords);
-    // And, once the files are the whole story, that every user's keys are
-    // readable. This is the one thing here that can stop a boot: an actor that
-    // publishes no key is one no follower can verify, and Fedify would serve
-    // exactly that rather than complain. A minute of downtime with the file
-    // named is the better failure. A user who has never federated has no key
-    // files at all, which is not damage and does not stop anything.
-    for (const user of listUsers(resolved.dataDir)) {
-        assertActorKeysUsable(resolved.dataDir, user.username);
-    }
-    // The one thing the settings decide before a request arrives. It is settled
-    // here, at boot, rather than per request: `baseUrl` also decides whether the
-    // session cookie is `Secure`, and flipping that under a signed-in admin
-    // would log them out of the form they just submitted.
-    resolved.baseUrl = effectiveBaseUrl(resolved, readSiteSettings(resolved.contentDir));
-    // Akismet, when the site has not named a checker of its own (TASK-52). A
-    // config that names one wins outright, because a site that has written a
-    // checker meant it; this is the one the settings screen turns on with a key
-    // rather than a deployment.
-    //
-    // Built whether or not there is a key in `data/akismet.json`: it reads that
-    // file on every call, so a key pasted into the settings screen filters the
-    // next comment and a key removed stops filtering at once, neither of them
-    // needing a restart. With no key it sends nothing anywhere.
-    resolved.commentChecker ??= createAkismetChecker({
-        dataDir: resolved.dataDir,
-        // Read when a comment arrives rather than now, so a change of language on
-        // the settings screen reaches Akismet without a restart either.
-        language: () => readSiteSettings(resolved.contentDir).language,
-    });
-    // Which theme this site renders through (decision-15). One source for the
-    // whole CMS: the pages, the `/theme/` assets and the site's email all read
-    // it, so they cannot disagree about which theme is in use and a choice that
-    // cannot be honoured is reported once rather than three times. It reads the
-    // site data rather than holding a directory, so a theme chosen on the
-    // Appearance screen — or written into `site.json` by hand — is the one the
-    // next request renders through, with no restart and with the watcher off.
-    const siteData = createSiteDataSource(resolved);
-    const themes = createThemeSource({
-        themesDir: resolved.themesDir,
-        chosen: () => themeName(siteData.read()),
-    });
-    // Asked once here so a site whose chosen theme is missing says so at boot,
-    // rather than at whatever moment the first request happens to arrive.
-    themes.current();
-    // The site's declared redirects (TASK-128), read per request for the reason
-    // the site data is. Asked once here for the reason the theme is: an entry
-    // that cannot be served, or a loop, is reported at boot.
-    const redirects = createRedirectSource({ contentDir: resolved.contentDir });
-    redirects.current();
-    const content = createContentSync({
-        store,
-        contentDir: resolved.contentDir,
-        watch: resolved.watch,
-    });
-    // A watched change waits for its burst to settle, as a scan does: a git
-    // pull that moves a post and adds another at its old URL must not hand the
-    // new post's comments to the moved one before the new one is indexed.
-    content.events.on('change', async (change) => {
-        if (change.origin === 'scan' || change.origin === 'watch' || change.next === undefined) {
-            return;
-        }
-        await followMovedComments(commentRecords, store, change.next);
-        followMovedWebmentions(admin, store, resolved.baseUrl);
-    });
-    content.onSettled(async () => {
-        await followAllMovedComments(commentRecords, store);
-        followMovedWebmentions(admin, store, resolved.baseUrl);
-    });
-    // Email. Built whether or not the site has a provider or a credential, for
-    // the reason the Akismet checker is: the settings and `data/mail.json` are
-    // read per send, so a key pasted into the settings screen sends the next
-    // message and one removed stops the message after it, neither needing a
-    // restart. With nothing configured, sending is a line in the log.
-    const mail = createMailService({ config: resolved, themes, ...resolved.mail });
-    // The one reader of the two indexes a conversation is made of. The page, the
-    // per-post comments feed, `/comments/feed/` and the `source:comments` count
-    // on a post feed are all drawn from it, so a reader cannot be shown one
-    // thing on the page and another in the feed (TASK-62).
-    const conversation = createConversation({
-        admin,
-        store,
-        contentDir: resolved.contentDir,
-        baseUrl: resolved.baseUrl,
-        users: () => listUsers(resolved.dataDir),
-    });
-    // What a reply shows of the post it answers. Built before the renderer,
-    // which reads the stored contexts, and subscribed to the index below with
-    // the other services that reach out to the web.
-    // The syndication targets the site declares and the copies they answered
-    // with, both files in the content directory (TASK-155, decision-26).
-    const syndicationTargets = syndicationTargetsReader(resolved.contentDir);
-    const copies = syndicationCopies(resolved.contentDir);
-    const locations = postLocations(resolved.dataDir);
-    const replyContexts = createReplyContextService({
-        store,
-        config: resolved,
-        lookup: resolved.hostLookup,
-        fediverse: citedPostReader(() => federationContext()),
-        held: (target) => {
-            const found = conversation.heldAt(target);
-            return found === undefined ? undefined : heldReplyContext(target, found);
-        },
-        onStored: (target, previous) => {
-            delivery.citedPageStored(target, previous);
-            const original = replyContexts.read(target)?.original;
-            if (original !== undefined && original !== previous?.original) {
-                webmentions.originalFound(target, original);
-            }
-        },
-    });
-    // The faces in a conversation, fetched here and served from here so a
-    // reader's address never reaches the servers they live on (TASK-134).
-    const avatars = createAvatarService({ admin, config: resolved });
-    // What keeps a site from holding its readers' personal data for longer than
-    // its settings say (TASK-135).
-    const retention = createRetentionService({ admin, config: resolved });
-    const renderer = createRenderer({
-        config: resolved,
-        themes,
-        // The stored context of a reply's target: a file read, never a fetch, so
-        // a page is drawn without waiting on anybody's server (TASK-123).
-        replyContext: (target) => replyContexts.read(target),
-        // The targets a post links to and the copies they made of it (TASK-155),
-        // read from the site's files like the reply contexts.
-        syndication: (document) => ({
-            targets: selectedTargets(document, syndicationTargets(), readSiteSettings(resolved.contentDir).language),
-            copies: Object.values(copies.read(document.permalink)),
-        }),
-        location: (document) => shareLocation(locations.read(document.permalink), readSiteSettings(resolved.contentDir).locationSharing),
-        // The pages that put themselves in the site menu are found by asking for
-        // every public page and reading their front matter, rather than by an
-        // index of their own: a site has a handful of pages, the query is the
-        // same one the listing index already serves, and doing it per render is
-        // what makes a page flagged in the editor appear in the menu at once.
-        pages: () => store.listAll({ type: 'page', draft: false, trashed: false, scheduled: false }),
-        // Who may sign in, for the byline under a post and the heading of an
-        // author archive (TASK-67). Read per render for the reason the pages are:
-        // `data/users.json` is the truth about who exists (decision-9), and a
-        // display name saved on the users screen a second ago belongs on the very
-        // next page drawn.
-        users: () => listUsers(resolved.dataDir),
-        // What has been said about a post, from every source at once and read per
-        // render for the same reason: a reply logged or a comment approved a
-        // second ago is on the page the next request draws (TASK-49, TASK-50).
-        // One dependency, and the very reader the comments feeds are published
-        // from, so the page and the feed cannot disagree.
-        conversation: conversation.thread,
-        // And the form under it, when the post is still taking comments. Asked per
-        // render because whether it is depends on the clock: a post that closed an
-        // hour ago stops offering one on the very next request.
-        commentForm: (document, viewer) => commentFormFor({
-            document,
-            site: renderer.site(),
-            now: resolved.now(),
-            // And who is reading it, when a session says: the short form for
-            // somebody signed in to this site, the stranger's form for everybody
-            // else (TASK-103). The route reads the session and hands it down, so
-            // one render of one request cannot disagree with itself.
-            viewer,
-            // Whether "tell me about replies" is worth offering, asked per render
-            // for the same reason: a credential pasted into the settings screen
-            // puts the box on the next page drawn (TASK-55).
-            notifiable: mail.configured(),
-        }),
-        // And the contact form, for a page whose front matter asks for one. Asked
-        // per render for the same reason: a `contact: true` saved in the editor a
-        // moment ago puts a form on the page the next request draws (TASK-56).
-        contactForm: (document) => contactFormFor({ document, now: resolved.now() }),
-        // The posts either side of one, for the links under an entry (TASK-79).
-        // Two indexed lookups per post rather than a walk of the archive, and
-        // asked per render for the reason the conversation is: a post published a
-        // minute ago is already the neighbour of the one before it.
-        neighbours: (document) => store.neighbours(document),
-        // And the site's own posts and pages that link to it (TASK-322), asked per
-        // render for the same reason: a post published a minute ago that cites
-        // this one is already one of its backlinks, and so does one whose link
-        // reaches it through a redirect declared a minute ago (TASK-330). A link
-        // to `/` lands on the page the Reading setting puts there, which is the
-        // page its slug names, as the routes resolve it.
-        backlinks: (document) => {
-            const { homepage } = frontPageSlugs(siteData.read());
-            return store.listBacklinks(document, {
-                redirects: redirects.current(),
-                home: document.type === 'page' &&
-                    homepage !== '' &&
-                    store.getBySlug(homepage)?.path === document.path,
-            });
-        },
-        newestPosts: (count) => store.listPosts({ limit: count }),
-        // And every published post, for a page that says `archive: true`. The one
-        // listing with no paging, so it is asked for only by the page that prints
-        // it (TASK-85).
-        archivePosts: () => store.listPosts(),
-    });
-    const federationKv = resolved.federation.kv ?? new MemoryKvStore();
-    const federationQueue = resolved.federation.queue === undefined ? createSettlingQueue() : undefined;
-    const federation = createSiteFederation({
-        baseUrl: resolved.baseUrl,
-        ...resolved.federation,
-        ...(federationQueue === undefined ? {} : { queue: federationQueue }),
-        kv: federationKv,
-    });
-    // Federation listens to the index rather than to the admin, so a post edited
-    // on disk federates exactly as one saved through the editor does (doc-4).
-    // It is built before the app because a handler reads it off the context: the
-    // admin's Resend button is a request that sends a post out again.
-    // The names and faces of the actors who are not followers (TASK-184),
-    // fetched in the background when one is heard from and on a sweep.
-    const actorProfiles = createActorProfileService({
-        admin,
-        config: resolved,
-        load: signedProfileLoader(() => federation.createContext(new URL(resolved.baseUrl), {
-            admin,
-            store,
-            config: resolved,
-            actorProfiles,
-            cited: (url) => replyContexts.read(url),
-        })),
-    });
-    const federationContext = () => federation.createContext(new URL(resolved.baseUrl), {
-        admin,
-        store,
-        config: resolved,
-        actorProfiles,
-        cited: (url) => replyContexts.read(url),
-    });
-    const learnHandles = handleLearner(federationContext);
-    const replyBackfill = createReplyBackfill({
-        admin,
-        store,
-        conversation,
-        config: resolved,
-        load: signedRepliesLoader(federationContext),
-        heard: (actorId) => {
-            actorProfiles.capture(actorId);
-        },
-    });
-    const delivery = createDeliveryService({
-        federation,
-        admin,
-        store,
-        config: resolved,
-        actorProfiles,
-        cited: (url) => replyContexts.read(url),
-    });
-    content.events.on('change', (change) => delivery.handle(change));
-    // Who hears about a comment (TASK-55). It reads the users file and the mail
-    // settings per message rather than at boot, so an address added on the users
-    // screen is written to by the very next comment.
-    const notifications = createCommentNotifier({
-        admin,
-        store,
-        mail,
-        config: resolved,
-        cited: (url) => replyContexts.read(url),
-    });
-    const replyNotices = createReplyNotices({
-        admin,
-        store,
-        conversation,
-        notices: notifications,
-        config: resolved,
-    });
-    content.events.on('change', (change) => {
-        replyNotices.handle(change);
-    });
-    admin.onConversationWrite((written) => {
-        replyNotices.heard(written);
-    });
-    // And the other half of it (TASK-60): a user who asked for an hourly or a
-    // daily digest hears nothing above and one message per window from here,
-    // listing whatever is still pending when their window comes up. It reads the
-    // users file and the record of what it has sent per run, for the same
-    // reason: a mode chosen on the users screen takes effect at the next tick.
-    const digests = createCommentDigest({
-        admin,
-        store,
-        mail,
-        config: resolved,
-        cited: (url) => replyContexts.read(url),
-    });
-    // And so does the webmention sender: telling the pages a post links to is
-    // the same news as telling the followers, and it should not matter which
-    // door the post came in by (TASK-51).
-    const webmentions = createWebmentionService({
-        admin,
-        store,
-        config: resolved,
-        notifications,
-        originalOf: (url) => replyContexts.read(url)?.original,
-        conversation,
-    });
-    content.events.on('change', (change) => {
-        webmentions.handle(change);
-    });
-    // A reply under a reply post or a comment's page changes what its page
-    // says, whichever door it came in by, and the page tells what it answers
-    // (a salmention, TASK-320).
-    admin.onConversationWrite((written) => {
-        webmentions.heard(written);
-    });
-    content.events.on('change', (change) => {
-        replyContexts.handle(change);
-    });
-    // The notify server listens to the index for the same reason: a post edited
-    // on disk changed the same feeds as one saved through the editor.
-    const notifier = createFeedNotifier({ config: resolved });
-    content.events.on('change', (change) => notifier.handle(change));
-    // IndexNow listens for the same reason, and wants the pages as well as the
-    // posts: a search engine indexes both (TASK-151).
-    const indexNow = createIndexNowNotifier({ config: resolved });
-    content.events.on('change', (change) => {
-        indexNow.handle(change);
-    });
-    // A post whose date is in the future is held back (TASK-44), and nothing
-    // watches a clock: this is what notices that one has come due and reports it
-    // as the publish it is, so delivery, the notifier and a site's `onPublish`
-    // all run without knowing a timer was involved. Subscribed to every change
-    // so a save that moves a date moves the timer with it.
-    const scheduler = createScheduler({
-        store,
-        announce: (change) => content.announce(change),
-        watermark: {
-            read: () => admin.getState(SCHEDULE_WATERMARK_KEY),
-            write: (instant) => {
-                admin.setState(SCHEDULE_WATERMARK_KEY, instant);
-            },
-            readFirstRun: () => admin.getState(SCHEDULE_FIRST_RUN_KEY),
-            writeFirstRun: (instant) => {
-                admin.setState(SCHEDULE_FIRST_RUN_KEY, instant);
-            },
-        },
-    });
-    content.events.on('change', (change) => {
-        scheduler.handle(change);
-    });
-    // Relay subscriptions (FEP-ae0c). The list is a setting and the handshake is
-    // a record, so booting reconciles the two: a relay the file names and the
-    // database has never heard of is followed here, which is what makes a
-    // rebuilt database catch up rather than silently stop federating to it.
-    const relays = createRelayService({
-        federation,
-        admin,
-        store,
-        config: resolved,
-        actorProfiles,
-        cited: (url) => replyContexts.read(url),
-    });
-    relays.sync();
-    const maintenance = createMaintenanceSwitch({
-        dataDir: resolved.dataDir,
-        forced: resolved.maintenance,
-        now: resolved.now,
-    });
-    const indieauth = createIndieAuthState(resolved.now);
-    const app = new Hono();
-    // A handler that throws is answered here rather than with Hono's plain-text
-    // 500. The middleware above the handler still runs on the way out, so the
-    // baseline and admin headers land on this response like any other.
-    app.onError(serverError);
-    // One line per request, before anything else is registered so that every
-    // route is on it: /healthz, the federation endpoints, the admin and the
-    // public site alike, and a request whose handler threw as well. Off unless
-    // the site asked for it; `geekity serve` asks.
-    if (resolved.accessLog) {
-        app.use('*', createAccessLog({
-            config: resolved,
-            ...(resolved.accessLogWriter === undefined ? {} : { write: resolved.accessLogWriter }),
-        }));
-    }
-    // Outside everything after it, so it compresses the body the client is
-    // about to get, the error pages and the 503 included (TASK-139).
-    if (resolved.compression)
-        app.use('*', compression());
-    const writes = createWriteGate();
-    app.use('*', writes.middleware);
-    app.use('*', async (c, next) => {
-        c.set('store', store);
-        c.set('admin', admin);
-        c.set('config', resolved);
-        c.set('renderer', renderer);
-        c.set('conversation', conversation);
-        c.set('avatars', avatars);
-        c.set('actorProfiles', actorProfiles);
-        c.set('announce', (change) => content.announce(change));
-        c.set('rescan', () => content.sync());
-        c.set('delivery', delivery);
-        c.set('relays', relays);
-        c.set('webmentions', webmentions);
-        c.set('replyContexts', replyContexts);
-        c.set('learnHandles', learnHandles);
-        c.set('mail', mail);
-        c.set('notifications', notifications);
-        c.set('redirects', redirects);
-        c.set('maintenance', maintenance);
-        c.set('indieauth', indieauth);
-        c.set('supervision', leavingWriteGate(context.supervision, () => writes.leave(c)));
-        await next();
-    });
-    app.use('*', pluginLifecycle(plugins, () => writes.refusing));
-    // The baseline on everything the CMS answers, admin and public alike, and
-    // outside everything below so redirects, the 503, 404s and the onError 500
-    // carry it too. The admin sets stricter values of its own inside it; none of
-    // it restricts what a theme may reference.
-    app.use('*', baselineSecurityHeaders);
-    // And one on every redirect, whichever part of the CMS sent it.
-    app.use('*', redirectBy);
-    // Maintenance mode (TASK-130) turns away everything after it but the health
-    // checks, the admin and the theme's files, so it goes in front of all of
-    // them: federation's inboxes included.
-    app.use('*', maintenanceGate);
-    app.get('/_geekity/health', (c) => c.json({ status: 'ok' }));
-    // The health check a container orchestrator or an uptime monitor probes
-    // (TASK-87). It goes on before federation, the admin and the public site,
-    // so no permalink can ever shadow it.
-    mountHealth(app);
-    // The two well-known files a site answers for itself (TASK-133), before the
-    // public site can claim either path as a permalink.
-    mountWellKnown(app);
-    // IndieAuth's authorization server metadata (TASK-157), the endpoint that
-    // starts a sign-in (TASK-158), the one that issues tokens (TASK-160) and
-    // the ones that answer for a token once issued (TASK-161), here for the
-    // reason the well-known files are.
-    mountIndieAuthDiscovery(app);
-    mountAuthorizationEndpoint(app);
-    mountTokenEndpoint(app);
-    mountTokenInfoEndpoints(app);
-    // Micropub (TASK-163) and its media endpoint (TASK-165), which stand on
-    // those tokens.
-    mountMicropub(app);
-    mountMicropubMedia(app);
-    // Federation goes on first. It answers its own paths and falls through on
-    // every other, so putting it in front costs the rest of the app nothing and
-    // is the only place it can go: the public site claims every unmatched path
-    // in its not-found handler.
-    mountFederation(app, federation, {
-        plugins: pluginFederation({
-            registry: plugins,
-            canonical: federation,
-            kv: federationKv,
-            allowPrivateAddress: resolved.federation.allowPrivateAddress ?? false,
-        }),
-    });
-    // The admin goes on before the public site, for the same reason.
-    mountAdmin(app);
-    mountPluginRoutes(app, plugins);
-    mountPublicSite(app);
-    /**
-     * Subscribe a site's hook to one event.
-     *
-     * The emitter already contains a hook that throws; this also contains one
-     * that rejects, so an `async` hook whose delivery fails is reported rather
-     * than surfacing as an unhandled rejection that would take the process down.
-     */
-    function subscribe(event, hook) {
-        return content.events.on(event, (change) => {
-            // A hook's return is ignored, but an `async` one hands back a promise
-            // whose unhandled rejection would take the whole process down.
-            const result = hook(change);
-            if (result instanceof Promise) {
-                result.catch((error) => {
-                    const message = error instanceof Error ? error.message : String(error);
-                    console.warn(`A ${event} hook rejected: ${message}`);
-                });
-            }
-        });
-    }
-    if (resolved.onDocumentChange !== undefined)
-        subscribe('change', resolved.onDocumentChange);
-    if (resolved.onPublish !== undefined)
-        subscribe('published', resolved.onPublish);
-    let server;
-    let releaseFiles;
-    /** Everything that runs on its own once the site serves, after the scan. */
-    async function startServices() {
-        // The index is brought up to date before the first request, so a site
-        // never serves a stale document, and the watcher takes over from there.
-        await content.start();
-        // After the scan, because the catch-up reads the index: a post whose
-        // date passed while nothing was running is published here, once.
-        await scheduler.start();
-        // And a reply whose target the contexts file holds nothing for is
-        // fetched now, in the background, for the same reason (TASK-123).
-        replyContexts.catchUp();
-        // And the avatars the conversations show are fetched or refreshed in the
-        // background now and on a timer from here on, so a reader almost never
-        // waits on a stranger's server for one (TASK-134).
-        avatars.start();
-        // And the profiles of whoever is in the inbox log without being a
-        // follower: missing ones are fetched now, which is the backfill of a log
-        // written before profiles were kept, and stale ones on a timer (TASK-184).
-        actorProfiles.start();
-        replyBackfill.start();
-        // And whatever personal data has outlived its period is removed now and
-        // every few hours from here on (TASK-135).
-        retention.start();
-        // The digests tick from here on. Nothing is caught up first: a digest is
-        // whatever is pending when a window comes up, so a site that was down
-        // over one simply sends the next one, with everything still waiting in it.
-        digests.start();
-        await plugins.reconcile(readEnabledPlugins(resolved.contentDir));
-    }
-    function stopTimers() {
-        scheduler.stop();
-        digests.stop();
-        avatars.stop();
-        actorProfiles.stop();
-        replyBackfill.stop();
-        retention.stop();
-    }
-    /**
-     * Anything already on its way out is allowed to finish, so stopping never
-     * leaves a delivery half recorded or a queued one unsent.
-     */
-    async function settleQueues() {
-        await scheduler.settled();
-        await digests.settled();
-        await delivery.settled();
-        await relays.settled();
-        await federationQueue?.settled();
-        await webmentions.settled();
-        await replyContexts.settled();
-        await avatars.settled();
-        await actorProfiles.settled();
-        await replyBackfill.settled();
-        await retention.settled();
-        await notifier.settled();
-    }
-    /** What is left once the queues are empty: the mail, the image encodes, the activity log. */
-    async function settleWrites() {
-        await mail.settled();
-        // A page render derives an upload's variants in the background; the
-        // encode finishes before the directories it writes into can be removed.
-        await settleImageVariants(resolved);
-        await activityLogSettled(resolved.dataDir);
-    }
-    return {
-        app,
-        config: resolved,
-        store,
-        admin,
-        federation,
-        delivery,
-        relays,
-        webmentions,
-        replyContexts,
-        avatars,
-        actorProfiles,
-        replyBackfill,
-        retention,
-        notifier,
-        indexNow,
-        mail,
-        notifications,
-        digests,
-        scheduler,
-        events: content.events,
-        onDocumentChange(hook) {
-            return subscribe('change', hook);
-        },
-        onPublish(hook) {
-            return subscribe('published', hook);
-        },
-        notifyFeeds(urls) {
-            return notifier.notify(urls);
-        },
-        sync() {
-            return content.sync();
-        },
-        async serve() {
-            if (server !== undefined) {
-                throw new Error('This CMS is already serving; call close() before serving again.');
-            }
-            await startServices();
-            // A syndication target the site declares badly is ignored everywhere,
-            // and said so once here rather than on every page (TASK-155).
-            for (const problem of syndicationTargetProblems(resolved.contentDir))
-                console.warn(problem);
-            return new Promise((resolve) => {
-                server = serveNode({ fetch: app.fetch, port: resolved.port }, (info) => {
-                    resolve({ port: info.port });
-                });
-            });
-        },
-        async drain() {
-            await writes.refuse();
-            await plugins.reconcile(new Set());
-            stopTimers();
-            await content.stop();
-            await settleQueues();
-            await indexNow.settled();
-            await settleWrites();
-            store.setReadOnly(true);
-            admin.setReadOnly(true);
-            releaseFiles ??= refuseWritesUnder([resolved.dataDir, resolved.contentDir]);
-        },
-        async resume() {
-            releaseFiles?.();
-            releaseFiles = undefined;
-            store.setReadOnly(false);
-            admin.setReadOnly(false);
-            await startServices();
-            writes.reopen();
-        },
-        async close() {
-            const running = server;
-            server = undefined;
-            const handingOver = running !== undefined && writes.refusing ? closeServer(running, true) : undefined;
-            if (writes.refusing)
-                writes.handOver();
-            await plugins.close();
-            stopTimers();
-            await content.stop();
-            await settleQueues();
-            // What was gathered and not yet sent is dropped rather than sent on the
-            // way down; a batch already going out finishes.
-            indexNow.close();
-            await indexNow.settled();
-            await settleWrites();
-            federationQueue?.close();
-            if (running !== undefined)
-                await (handingOver ?? closeServer(running, false));
-            releaseFiles?.();
-            releaseFiles = undefined;
-            admin.close();
-            store.close();
-        },
-    };
-}
-/** How long a drained server waits for its connections to end before it closes them. */
-const GENTLE_CLOSE_MS = 30_000;
-/**
- * Stop listening and resolve once every connection has ended.
- *
- * A drained server closes gently. `http.Server#close` closes idle keep-alive
- * connections at once, racing a client that is about to reuse one, which
- * then sees a reset. `net.Server#close` leaves them: each one either carries
- * `Connection: close` on its next response or ends on the keep-alive timeout
- * the client was told, which a client honours by closing first.
- */
-function closeServer(running, gently) {
-    return new Promise((resolve, reject) => {
-        const done = (err) => {
-            if (err)
-                reject(err);
-            else
-                resolve();
-        };
-        if (!gently) {
-            running.close(done);
-            return;
-        }
-        const timer = setTimeout(() => running.closeAllConnections(), GENTLE_CLOSE_MS);
-        NetServer.prototype.close.call(running, (err) => {
-            clearTimeout(timer);
-            // The http server's own close clears its connection-checking interval;
-            // the listener is already gone, so the error it reports is expected.
-            running.close(() => undefined);
-            done(err);
-        });
-    });
-}
+export * from './exports.js';
+export { settleConfig } from './cms/boot.js';
+export { createCms } from './cms/create.js';
 //# sourceMappingURL=index.js.map