@geekity/cms 0.34.0 → 0.36.1

package/dist/comments/routes.js

@@ -1,235 +0,0 @@
-import { CROSS_SITE_REFUSAL, crossSiteWrite, csrfTokenMatches } from '../web/session.js';
-import { clientAddress, createLoginThrottle } from '../web/throttle.js';
-import { documentSite } from '../admin/documents.js';
-import { stringOrEmpty } from '../util/forms.js';
-import { isServed } from '../content/served.js';
-import { COMMENT_NOTICE_PARAM, COMMENT_NOTICES, COMMENT_POST_PATH, commentForm, refilledCommentForm, signedInCommentForm, valuesOf, } from './form.js';
-import { commentPolicyOf, commentsOpen } from './policy.js';
-import { commentAnchor, visibleReply } from './conversation.js';
-import { COMMENT_FIELDS, COMMENT_RATE_LIMIT, COMMENT_RATE_WINDOW_SECONDS, submitComment, } from './submission.js';
-import { submitReplyPost } from './reply-post.js';
-import { commenterOf } from './viewer.js';
-/**
- * The one public endpoint comments add: where the form under a post posts to.
- *
- * It is a single path rather than one per post because the post is a field of
- * the form. That keeps it out of the way of every permalink a site might ever
- * mint — a path under `/_geekity/` is the CMS's own, like the health check —
- * and means the route table does not grow with the site.
- *
- * Everything it answers is either a redirect or the post's own page rendered
- * again with the form still filled in. There is no JSON, no fragment and no
- * script: a comment form has worked without JavaScript since 2003 and there is
- * no reason for this one to stop.
- */
-export { COMMENT_POST_PATH, COMMENT_REPLY_PARAM } from './form.js';
-/** Register the comment endpoint. Mounted by the public site. */
-export function mountComments(app) {
-    // One limiter for the whole mount, built on the first submission because the
-    // clock is on the context. It holds nothing but recent submissions, so it
-    // belongs to the process rather than the database: a restart clears it,
-    // which is the right trade for state an anonymous caller can create.
-    let limiter;
-    function throttle(config) {
-        limiter ??= createLoginThrottle({
-            attempts: COMMENT_RATE_LIMIT,
-            lockoutSeconds: COMMENT_RATE_WINDOW_SECONDS,
-            now: config.now,
-        });
-        return limiter;
-    }
-    app.post(COMMENT_POST_PATH, async (c) => {
-        const { store, admin, renderer, config } = c.var;
-        const body = await c.req.parseBody();
-        const form = formOf(body);
-        // Who the session says this is, read before anything else is decided: it
-        // settles the token, the attribution and where the comment lands.
-        const account = c.var.signedIn;
-        const viewer = account === undefined ? undefined : commenterOf(account);
-        // A form that acts on nobody's behalf needs no token, and the public one
-        // still carries none. This one posts under somebody's name, so without a
-        // matching token a page on another site could make them say something they
-        // never typed. Refused in the words and with the status the admin guard
-        // uses, because it is the same check on the same token.
-        //
-        // Fetch Metadata first, as in the admin: a browser that says the form was
-        // on another site is refused whatever token it carries. A stranger's form
-        // is left alone, because it acts on nobody's behalf.
-        if (viewer !== undefined && crossSiteWrite(c))
-            return c.text(CROSS_SITE_REFUSAL, 403);
-        if (viewer !== undefined && !csrfTokenMatches(viewer.csrfToken, form.csrf)) {
-            return c.text('That form was stale or came from somewhere else. Reload and try again.', 403);
-        }
-        const document = store.getBySlug(form.post);
-        if (document === undefined || !isServed(document, store.now())) {
-            return c.text('There is no such post to comment on.', 404);
-        }
-        const now = config.now();
-        if (!commentsOpen(document, commentPolicyOf(renderer.site()), now)) {
-            // 403 rather than 404: the post is there, and the reader can see for
-            // themselves that it is. Saying so is more honest than pretending the
-            // URL is wrong, and a closed post is a state rather than a mistake.
-            return page(c, document, 403, viewer, {
-                ...drawnFor(refilledCommentForm(document, valuesOf(form), {}, now), viewer),
-                error: 'This post is not taking comments any more.',
-            });
-        }
-        if (viewer !== undefined) {
-            const answered = await submitReplyPost({
-                site: documentSite(c, viewer.username),
-                document,
-                conversation: c.var.conversation.thread(document),
-                form,
-                throttle: throttle(config),
-                address: clientAddress(c, config),
-            });
-            if (answered.kind === 'saved') {
-                const reply = c.var.conversation.replyNamed(document, answered.saved.permalink);
-                const anchor = reply === undefined ? 'comments' : commentAnchor(reply.key);
-                return c.redirect(`${document.permalink}?${COMMENT_NOTICE_PARAM}=posted#${anchor}`, 303);
-            }
-            return refusedPage(c, document, viewer, form, answered.refusal, now);
-        }
-        const outcome = await submitComment({
-            records: { admin, contentDir: config.contentDir, dataDir: config.dataDir },
-            document,
-            cited: (url) => c.var.replyContexts.read(url),
-            form,
-            dataDir: config.dataDir,
-            baseUrl: config.baseUrl,
-            checker: config.commentChecker,
-            // Who hears about what lands is the intake's to decide, and neither
-            // message is awaited: the reader is redirected now and they go out
-            // behind them (TASK-55).
-            notices: c.var.notifications,
-            address: clientAddress(c, config),
-            userAgent: c.req.header('user-agent'),
-            referrer: c.req.header('referer'),
-            throttle: throttle(config),
-            // Whether the box on the form meant anything, read per submission so a
-            // credential saved a moment ago is honoured now (TASK-55).
-            notifiable: c.var.mail.configured(),
-            now,
-        });
-        if (outcome.kind === 'stored') {
-            const stored = outcome.comment;
-            // A redirect rather than a rendered page, so a refresh does not post the
-            // comment a second time. An approved comment is on the page already, so
-            // the reader is sent to it; one waiting for a moderator has nothing to
-            // point at, so the reader is sent to the form they just used.
-            const anchor = stored.status === 'approved' ? commentAnchor(stored.id) : 'respond';
-            const notice = stored.status === 'approved' ? 'posted' : 'pending';
-            return c.redirect(`${document.permalink}?${COMMENT_NOTICE_PARAM}=${notice}#${anchor}`, 303);
-        }
-        const refusal = outcome.refusal;
-        if (refusal.kind === 'discarded') {
-            // Nothing is said about why. A robot that filled the honeypot, or that a
-            // checker recognised, learns exactly as much from this as from a
-            // successful post — which is the point of both defences.
-            return c.redirect(`${document.permalink}?${COMMENT_NOTICE_PARAM}=pending#respond`, 303);
-        }
-        return refusedPage(c, document, viewer, form, refusal, now);
-    });
-}
-/** The post's page again, with the form refilled and what went wrong on it. */
-function refusedPage(c, document, viewer, form, refusal, now) {
-    if (refusal.kind === 'rate-limited') {
-        c.header('Retry-After', String(refusal.retryAfter));
-        return page(c, document, 429, viewer, {
-            ...drawnFor(refilledCommentForm(document, valuesOf(form), {}, now), viewer),
-            error: 'That is a lot of comments in a short time. Try again in a few minutes.',
-        });
-    }
-    const message = refusal.kind === 'too-quick'
-        ? 'That was posted faster than anybody types. Try again.'
-        : refusal.kind === 'stale'
-            ? 'That form had been open a long time. Here it is again — the words are still there.'
-            : undefined;
-    return page(c, document, 400, viewer, {
-        ...drawnFor(refilledCommentForm(document, valuesOf(form), problemsOf(refusal), now), viewer),
-        ...(message === undefined ? {} : { error: message }),
-    });
-}
-/**
- * The same form drawn for whoever is filling it in: the short one when the
- * site knows them, and the stranger's one when it does not.
- */
-function drawnFor(form, viewer) {
-    return viewer === undefined ? form : signedInCommentForm(form, viewer);
-}
-function page(c, document, status, viewer, form) {
-    c.status(status);
-    return c.html(c.var.renderer.renderDocument(document, { commentForm: form }, viewer));
-}
-/** The per-field messages a refusal carries, if it carries any. */
-function problemsOf(refusal) {
-    return refusal.kind === 'invalid' ? (refusal.problems ?? {}) : {};
-}
-/**
- * The thank-you a reader is shown after posting, from the query the redirect
- * carried, or `undefined` when the URL says nothing.
- *
- * A query rather than a flash message, because a reader has no session to hang
- * one on, and because a comment form that only works for people with cookies
- * is not a comment form.
- */
-export function commentNoticeFor(query) {
-    return query === undefined ? undefined : COMMENT_NOTICES[query];
-}
-/**
- * The comment a `?reply_to=` query points at, as the theme needs it, or an
- * empty object when the query names nothing on this post.
- *
- * Checked against the index rather than trusted, so a made-up id — or one from
- * another page — cannot put a stranger's name on somebody's reply form, and so
- * a comment waiting for a moderator cannot be discovered by guessing. With the
- * post's `thread`, which is handed over for somebody signed in (TASK-300), any
- * entry a reader can see is answerable: a webmention, a fediverse reply or a
- * reply post as well as a comment.
- */
-export function commentReplyTarget(options) {
-    if (options.id === undefined || options.id === '')
-        return {};
-    if (options.thread !== undefined) {
-        const reply = visibleReply(options.thread.replies, options.id);
-        return reply === undefined
-            ? {}
-            : { commentReplyTo: reply.key, commentReplyingTo: reply.author.name };
-    }
-    const parent = options.admin.getComment(options.id);
-    if (parent === undefined || parent.slug !== options.document.slug)
-        return {};
-    if (parent.status !== 'approved')
-        return {};
-    return { commentReplyTo: parent.id, commentReplyingTo: parent.author.name };
-}
-/**
- * The form for a post, or `undefined` when it is not taking comments.
- *
- * What the renderer is handed at boot. It reads the settings and the clock on
- * every render, so a post that closed an hour ago stops offering a form on the
- * very next request.
- */
-export function commentFormFor(options) {
-    if (!commentsOpen(options.document, commentPolicyOf(options.site), options.now))
-        return undefined;
-    const form = commentForm(options.document, options.now, options.notifiable ?? false);
-    return drawnFor(form, options.viewer);
-}
-/** A submitted body as the form it is, every field a string. */
-function formOf(body) {
-    return {
-        post: stringOrEmpty(body[COMMENT_FIELDS.post]),
-        name: stringOrEmpty(body[COMMENT_FIELDS.name]),
-        email: stringOrEmpty(body[COMMENT_FIELDS.email]),
-        url: stringOrEmpty(body[COMMENT_FIELDS.url]),
-        body: stringOrEmpty(body[COMMENT_FIELDS.body]),
-        inReplyTo: stringOrEmpty(body[COMMENT_FIELDS.inReplyTo]),
-        trap: stringOrEmpty(body[COMMENT_FIELDS.trap]),
-        loaded: stringOrEmpty(body[COMMENT_FIELDS.loaded]),
-        notify: stringOrEmpty(body[COMMENT_FIELDS.notify]),
-        csrf: stringOrEmpty(body[COMMENT_FIELDS.csrf]),
-        listed: stringOrEmpty(body[COMMENT_FIELDS.listed]),
-    };
-}
-//# sourceMappingURL=routes.js.map

package/dist/comments/routes.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"routes.js","sourceRoot":"","sources":["../../src/comments/routes.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,kBAAkB,EAAE,cAAc,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AAEzF,OAAO,EAAE,aAAa,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AAIxE,OAAO,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AACrD,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AACjD,OAAO,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AAChD,OAAO,EACL,oBAAoB,EACpB,eAAe,EACf,iBAAiB,EACjB,WAAW,EACX,mBAAmB,EACnB,mBAAmB,EACnB,QAAQ,GACT,MAAM,WAAW,CAAC;AAEnB,OAAO,EAAE,eAAe,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC5D,OAAO,EAAE,aAAa,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAEhE,OAAO,EACL,cAAc,EACd,kBAAkB,EAClB,2BAA2B,EAC3B,aAAa,GACd,MAAM,iBAAiB,CAAC;AAEzB,OAAO,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAClD,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAE1C;;;;;;;;;;;;GAYG;AAEH,OAAO,EAAE,iBAAiB,EAAE,mBAAmB,EAAE,MAAM,WAAW,CAAC;AAEnE,iEAAiE;AACjE,MAAM,UAAU,aAAa,CAAC,GAAqB;IACjD,6EAA6E;IAC7E,0EAA0E;IAC1E,wEAAwE;IACxE,qEAAqE;IACrE,IAAI,OAAoC,CAAC;IAEzC,SAAS,QAAQ,CAAC,MAAsB;QACtC,OAAO,KAAK,mBAAmB,CAAC;YAC9B,QAAQ,EAAE,kBAAkB;YAC5B,cAAc,EAAE,2BAA2B;YAC3C,GAAG,EAAE,MAAM,CAAC,GAAG;SAChB,CAAC,CAAC;QACH,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,GAAG,CAAC,IAAI,CAAC,iBAAiB,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QACtC,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC;QACjD,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,SAAS,EAAE,CAAC;QACrC,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC;QAC1B,yEAAyE;QACzE,kEAAkE;QAClE,MAAM,OAAO,GAAG,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC;QAC/B,MAAM,MAAM,GAAG,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;QAExE,yEAAyE;QACzE,yEAAyE;QACzE,2EAA2E;QAC3E,wEAAwE;QACxE,wDAAwD;QACxD,EAAE;QACF,0EAA0E;QAC1E,0EAA0E;QAC1E,qDAAqD;QACrD,IAAI,MAAM,KAAK,SAAS,IAAI,cAAc,CAAC,CAAC,CAAC;YAAE,OAAO,CAAC,CAAC,IAAI,CAAC,kBAAkB,EAAE,GAAG,CAAC,CAAC;QACtF,IAAI,MAAM,KAAK,SAAS,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,SAAS,EAAE,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YAC3E,OAAO,CAAC,CAAC,IAAI,CAAC,wEAAwE,EAAE,GAAG,CAAC,CAAC;QAC/F,CAAC;QAED,MAAM,QAAQ,GAAG,KAAK,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC5C,IAAI,QAAQ,KAAK,SAAS,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC;YAC/D,OAAO,CAAC,CAAC,IAAI,CAAC,sCAAsC,EAAE,GAAG,CAAC,CAAC;QAC7D,CAAC;QAED,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG,EAAE,CAAC;QACzB,IAAI,CAAC,YAAY,CAAC,QAAQ,EAAE,eAAe,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC;YACnE,qEAAqE;YACrE,sEAAsE;YACtE,oEAAoE;YACpE,OAAO,IAAI,CAAC,CAAC,EAAE,QAAQ,EAAE,GAAG,EAAE,MAAM,EAAE;gBACpC,GAAG,QAAQ,CAAC,mBAAmB,CAAC,QAAQ,EAAE,QAAQ,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE,MAAM,CAAC;gBAC3E,KAAK,EAAE,4CAA4C;aACpD,CAAC,CAAC;QACL,CAAC;QAED,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACzB,MAAM,QAAQ,GAAG,MAAM,eAAe,CAAC;gBACrC,IAAI,EAAE,YAAY,CAAC,CAAC,EAAE,MAAM,CAAC,QAAQ,CAAC;gBACtC,QAAQ;gBACR,YAAY,EAAE,CAAC,CAAC,GAAG,CAAC,YAAY,CAAC,MAAM,CAAC,QAAQ,CAAC;gBACjD,IAAI;gBACJ,QAAQ,EAAE,QAAQ,CAAC,MAAM,CAAC;gBAC1B,OAAO,EAAE,aAAa,CAAC,CAAC,EAAE,MAAM,CAAC;aAClC,CAAC,CAAC;YACH,IAAI,QAAQ,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;gBAC9B,MAAM,KAAK,GAAG,CAAC,CAAC,GAAG,CAAC,YAAY,CAAC,UAAU,CAAC,QAAQ,EAAE,QAAQ,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;gBAChF,MAAM,MAAM,GAAG,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,aAAa,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;gBAC3E,OAAO,CAAC,CAAC,QAAQ,CAAC,GAAG,QAAQ,CAAC,SAAS,IAAI,oBAAoB,WAAW,MAAM,EAAE,EAAE,GAAG,CAAC,CAAC;YAC3F,CAAC;YACD,OAAO,WAAW,CAAC,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;QACvE,CAAC;QAED,MAAM,OAAO,GAAG,MAAM,aAAa,CAAC;YAClC,OAAO,EAAE,EAAE,KAAK,EAAE,UAAU,EAAE,MAAM,CAAC,UAAU,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE;YAC1E,QAAQ;YACR,KAAK,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,aAAa,CAAC,IAAI,CAAC,GAAG,CAAC;YAC7C,IAAI;YACJ,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,OAAO,EAAE,MAAM,CAAC,cAAc;YAC9B,oEAAoE;YACpE,mEAAmE;YACnE,yBAAyB;YACzB,OAAO,EAAE,CAAC,CAAC,GAAG,CAAC,aAAa;YAC5B,OAAO,EAAE,aAAa,CAAC,CAAC,EAAE,MAAM,CAAC;YACjC,SAAS,EAAE,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,YAAY,CAAC;YACrC,QAAQ,EAAE,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC;YACjC,QAAQ,EAAE,QAAQ,CAAC,MAAM,CAAC;YAC1B,uEAAuE;YACvE,2DAA2D;YAC3D,UAAU,EAAE,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,UAAU,EAAE;YACnC,GAAG;SACJ,CAAC,CAAC;QAEH,IAAI,OAAO,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC9B,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;YAC/B,yEAAyE;YACzE,wEAAwE;YACxE,uEAAuE;YACvE,8DAA8D;YAC9D,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,KAAK,UAAU,CAAC,CAAC,CAAC,aAAa,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YACnF,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,KAAK,UAAU,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YACnE,OAAO,CAAC,CAAC,QAAQ,CAAC,GAAG,QAAQ,CAAC,SAAS,IAAI,oBAAoB,IAAI,MAAM,IAAI,MAAM,EAAE,EAAE,GAAG,CAAC,CAAC;QAC9F,CAAC;QAED,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC;QAChC,IAAI,OAAO,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;YACjC,yEAAyE;YACzE,iEAAiE;YACjE,yDAAyD;YACzD,OAAO,CAAC,CAAC,QAAQ,CAAC,GAAG,QAAQ,CAAC,SAAS,IAAI,oBAAoB,kBAAkB,EAAE,GAAG,CAAC,CAAC;QAC1F,CAAC;QACD,OAAO,WAAW,CAAC,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC;IAC9D,CAAC,CAAC,CAAC;AACL,CAAC;AAED,+EAA+E;AAC/E,SAAS,WAAW,CAClB,CAAsB,EACtB,QAAkB,EAClB,MAAiC,EACjC,IAAiB,EACjB,OAAuB,EACvB,GAAS;IAET,IAAI,OAAO,CAAC,IAAI,KAAK,cAAc,EAAE,CAAC;QACpC,CAAC,CAAC,MAAM,CAAC,aAAa,EAAE,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC;QACpD,OAAO,IAAI,CAAC,CAAC,EAAE,QAAQ,EAAE,GAAG,EAAE,MAAM,EAAE;YACpC,GAAG,QAAQ,CAAC,mBAAmB,CAAC,QAAQ,EAAE,QAAQ,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE,MAAM,CAAC;YAC3E,KAAK,EAAE,wEAAwE;SAChF,CAAC,CAAC;IACL,CAAC;IAED,MAAM,OAAO,GACX,OAAO,CAAC,IAAI,KAAK,WAAW;QAC1B,CAAC,CAAC,uDAAuD;QACzD,CAAC,CAAC,OAAO,CAAC,IAAI,KAAK,OAAO;YACxB,CAAC,CAAC,oFAAoF;YACtF,CAAC,CAAC,SAAS,CAAC;IAElB,OAAO,IAAI,CAAC,CAAC,EAAE,QAAQ,EAAE,GAAG,EAAE,MAAM,EAAE;QACpC,GAAG,QAAQ,CAAC,mBAAmB,CAAC,QAAQ,EAAE,QAAQ,CAAC,IAAI,CAAC,EAAE,UAAU,CAAC,OAAO,CAAC,EAAE,GAAG,CAAC,EAAE,MAAM,CAAC;QAC5F,GAAG,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC;KACrD,CAAC,CAAC;AACL,CAAC;AAKD;;;GAGG;AACH,SAAS,QAAQ,CAAC,IAAwB,EAAE,MAAiC;IAC3E,OAAO,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,mBAAmB,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;AACzE,CAAC;AAED,SAAS,IAAI,CACX,CAAsB,EACtB,QAAkB,EAClB,MAAqB,EACrB,MAAiC,EACjC,IAAwB;IAExB,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACjB,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,cAAc,CAAC,QAAQ,EAAE,EAAE,WAAW,EAAE,IAAI,EAAE,EAAE,MAAM,CAAC,CAAC,CAAC;AACxF,CAAC;AAED,mEAAmE;AACnE,SAAS,UAAU,CAAC,OAA6C;IAC/D,OAAO,OAAO,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAE,CAAC,OAAO,CAAC,QAAQ,IAAI,EAAE,CAA4B,CAAC,CAAC,CAAC,EAAE,CAAC;AAChG,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,gBAAgB,CAAC,KAAyB;IACxD,OAAO,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC;AAClE,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,kBAAkB,CAAC,OAKlC;IACC,IAAI,OAAO,CAAC,EAAE,KAAK,SAAS,IAAI,OAAO,CAAC,EAAE,KAAK,EAAE;QAAE,OAAO,EAAE,CAAC;IAE7D,IAAI,OAAO,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QACjC,MAAM,KAAK,GAAG,YAAY,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,EAAE,OAAO,CAAC,EAAE,CAAC,CAAC;QAC/D,OAAO,KAAK,KAAK,SAAS;YACxB,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC,EAAE,cAAc,EAAE,KAAK,CAAC,GAAG,EAAE,iBAAiB,EAAE,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;IAC1E,CAAC;IAED,MAAM,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IACpD,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,CAAC,IAAI,KAAK,OAAO,CAAC,QAAQ,CAAC,IAAI;QAAE,OAAO,EAAE,CAAC;IAC7E,IAAI,MAAM,CAAC,MAAM,KAAK,UAAU;QAAE,OAAO,EAAE,CAAC;IAE5C,OAAO,EAAE,cAAc,EAAE,MAAM,CAAC,EAAE,EAAE,iBAAiB,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;AAC9E,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,cAAc,CAAC,OAQ9B;IACC,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,QAAQ,EAAE,eAAe,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,OAAO,CAAC,GAAG,CAAC;QAAE,OAAO,SAAS,CAAC;IAElG,MAAM,IAAI,GAAG,WAAW,CAAC,OAAO,CAAC,QAAQ,EAAE,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC,UAAU,IAAI,KAAK,CAAC,CAAC;IACrF,OAAO,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;AACxC,CAAC;AAED,gEAAgE;AAChE,SAAS,MAAM,CAAC,IAA6B;IAC3C,OAAO;QACL,IAAI,EAAE,aAAa,CAAC,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC;QAC9C,IAAI,EAAE,aAAa,CAAC,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC;QAC9C,KAAK,EAAE,aAAa,CAAC,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;QAChD,GAAG,EAAE,aAAa,CAAC,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC;QAC5C,IAAI,EAAE,aAAa,CAAC,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC;QAC9C,SAAS,EAAE,aAAa,CAAC,IAAI,CAAC,cAAc,CAAC,SAAS,CAAC,CAAC;QACxD,IAAI,EAAE,aAAa,CAAC,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC;QAC9C,MAAM,EAAE,aAAa,CAAC,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC;QAClD,MAAM,EAAE,aAAa,CAAC,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC;QAClD,IAAI,EAAE,aAAa,CAAC,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC;QAC9C,MAAM,EAAE,aAAa,CAAC,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC;KACnD,CAAC;AACJ,CAAC"}

package/dist/content/media.d.ts

@@ -1,85 +0,0 @@
-/**
- * What may be uploaded into `content/uploads/`, described once.
- *
- * The upload endpoint is the only door into the content directory that does
- * not write Markdown, so what it accepts is a list rather than a judgement:
- * an extension the CMS has never heard of is refused, and one it has is
- * checked against the media type the browser declared and, where the format
- * has one, against the bytes the file actually starts with.
- *
- * The table lives here rather than beside the endpoint because
- * {@link ResolvedConfig} validates a site's allowlist against it, and config
- * may not depend on the admin.
- */
-/** Bytes a file of some format carries at a fixed offset. */
-export interface UploadSignature {
-    /** Where in the file the bytes are. */
-    offset: number;
-    /** The bytes themselves. */
-    bytes: readonly number[];
-}
-/**
- * What an upload is for, which decides what the CMS offers to do with it.
- *
- * An image is embedded and gets variants, audio and video can be a post's
- * enclosure and are held to their own size limit, and a document is linked.
- */
-export type UploadKind = 'image' | 'audio' | 'video' | 'document';
-/** One kind of file the upload endpoint knows about. */
-export interface UploadMediaType {
-    /**
-     * Media types a browser may declare for this extension. An empty string is
-     * always accepted alongside these: a browser that does not recognise a file
-     * sends no type at all, and there is then nothing to disagree with.
-     */
-    declared: readonly string[];
-    /** What the file is for. */
-    kind: UploadKind;
-    /**
-     * Byte patterns that identify the format, as alternatives: a file matches
-     * when every part of any one of them matches. Absent for the text formats,
-     * which have no header to check.
-     */
-    signatures?: readonly (readonly UploadSignature[])[] | undefined;
-    /** Whether the file is text, served with its character set named. */
-    text?: true;
-}
-/**
- * Every extension the upload endpoint can accept, and what it takes to be one.
- *
- * SVG is deliberately absent. An SVG is a document that may carry script, and
- * an upload is served from the site's own origin, so accepting one would hand
- * anybody who can reach the editor a stored cross-site scripting hole. A site
- * that wants them anyway can put `.svg` in `uploadTypes` — and then it has
- * chosen that, which is the point.
- */
-export declare const UPLOAD_MEDIA_TYPES: ReadonlyMap<string, UploadMediaType>;
-/** The extensions a site may put in its allowlist, sorted. */
-export declare const KNOWN_UPLOAD_TYPES: readonly string[];
-/**
- * An extension as the allowlist spells it: lower case, with the dot.
- *
- * `PNG`, `.Png` and `png` are all the same thing to somebody writing a config
- * file, so they are the same thing here.
- */
-export declare function normalizeUploadType(value: string): string;
-/**
- * The media type a feed or an attachment announces for this kind of file: the
- * first one {@link UploadMediaType.declared} lists, which is the registered
- * name where a browser may also send an older one.
- */
-export declare function canonicalType(media: UploadMediaType): string | undefined;
-/**
- * The `Content-Type` an upload of this kind is served with: its
- * {@link canonicalType}, with the character set when it is text.
- */
-export declare function servedType(media: UploadMediaType): string;
-/**
- * Whether the first bytes of a file are the ones its extension implies.
- *
- * A format with no signature — the text ones — matches anything, because there
- * is nothing to compare. Returns `false` for a file too short to hold the
- * header it claims.
- */
-export declare function matchesSignature(media: UploadMediaType, bytes: Uint8Array): boolean;
-//# sourceMappingURL=media.d.ts.map

package/dist/content/media.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"media.d.ts","sourceRoot":"","sources":["../../src/content/media.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,6DAA6D;AAC7D,MAAM,WAAW,eAAe;IAC9B,uCAAuC;IACvC,MAAM,EAAE,MAAM,CAAC;IACf,4BAA4B;IAC5B,KAAK,EAAE,SAAS,MAAM,EAAE,CAAC;CAC1B;AAED;;;;;GAKG;AACH,MAAM,MAAM,UAAU,GAAG,OAAO,GAAG,OAAO,GAAG,OAAO,GAAG,UAAU,CAAC;AAElE,wDAAwD;AACxD,MAAM,WAAW,eAAe;IAC9B;;;;OAIG;IACH,QAAQ,EAAE,SAAS,MAAM,EAAE,CAAC;IAC5B,4BAA4B;IAC5B,IAAI,EAAE,UAAU,CAAC;IACjB;;;;OAIG;IACH,UAAU,CAAC,EAAE,SAAS,CAAC,SAAS,eAAe,EAAE,CAAC,EAAE,GAAG,SAAS,CAAC;IACjE,qEAAqE;IACrE,IAAI,CAAC,EAAE,IAAI,CAAC;CACb;AAgBD;;;;;;;;GAQG;AACH,eAAO,MAAM,kBAAkB,EAAE,WAAW,CAAC,MAAM,EAAE,eAAe,CAkKlE,CAAC;AAEH,8DAA8D;AAC9D,eAAO,MAAM,kBAAkB,EAAE,SAAS,MAAM,EAA0C,CAAC;AAE3F;;;;;GAKG;AACH,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAIzD;AAED;;;;GAIG;AACH,wBAAgB,aAAa,CAAC,KAAK,EAAE,eAAe,GAAG,MAAM,GAAG,SAAS,CAExE;AAED;;;GAGG;AACH,wBAAgB,UAAU,CAAC,KAAK,EAAE,eAAe,GAAG,MAAM,CAGzD;AAED;;;;;;GAMG;AACH,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,eAAe,EAAE,KAAK,EAAE,UAAU,GAAG,OAAO,CASnF"}

package/dist/content/media.js

@@ -1,237 +0,0 @@
-/**
- * What may be uploaded into `content/uploads/`, described once.
- *
- * The upload endpoint is the only door into the content directory that does
- * not write Markdown, so what it accepts is a list rather than a judgement:
- * an extension the CMS has never heard of is refused, and one it has is
- * checked against the media type the browser declared and, where the format
- * has one, against the bytes the file actually starts with.
- *
- * The table lives here rather than beside the endpoint because
- * {@link ResolvedConfig} validates a site's allowlist against it, and config
- * may not depend on the admin.
- */
-/** The bytes of an ASCII string, for spelling a signature readably. */
-function ascii(value) {
-    return [...value].map((character) => character.charCodeAt(0));
-}
-/**
- * An ISO base media file — MP4, M4A, M4V — whatever its brand: a box length,
- * then `ftyp`.
- */
-const ISO_BASE_MEDIA = [{ offset: 4, bytes: ascii('ftyp') }];
-/** An Ogg page, whatever codec is inside it. */
-const OGG = [{ offset: 0, bytes: ascii('OggS') }];
-/**
- * Every extension the upload endpoint can accept, and what it takes to be one.
- *
- * SVG is deliberately absent. An SVG is a document that may carry script, and
- * an upload is served from the site's own origin, so accepting one would hand
- * anybody who can reach the editor a stored cross-site scripting hole. A site
- * that wants them anyway can put `.svg` in `uploadTypes` — and then it has
- * chosen that, which is the point.
- */
-export const UPLOAD_MEDIA_TYPES = new Map([
-    [
-        '.png',
-        {
-            declared: ['image/png'],
-            kind: 'image',
-            signatures: [[{ offset: 0, bytes: [0x89, 0x50, 0x4e, 0x47, 0x0d, 0x0a, 0x1a, 0x0a] }]],
-        },
-    ],
-    [
-        '.jpg',
-        {
-            declared: ['image/jpeg', 'image/jpg'],
-            kind: 'image',
-            signatures: [[{ offset: 0, bytes: [0xff, 0xd8, 0xff] }]],
-        },
-    ],
-    [
-        '.jpeg',
-        {
-            declared: ['image/jpeg', 'image/jpg'],
-            kind: 'image',
-            signatures: [[{ offset: 0, bytes: [0xff, 0xd8, 0xff] }]],
-        },
-    ],
-    [
-        '.gif',
-        {
-            declared: ['image/gif'],
-            kind: 'image',
-            signatures: [
-                [{ offset: 0, bytes: ascii('GIF87a') }],
-                [{ offset: 0, bytes: ascii('GIF89a') }],
-            ],
-        },
-    ],
-    [
-        '.webp',
-        {
-            declared: ['image/webp'],
-            kind: 'image',
-            // A WebP is a RIFF container whose form type is WEBP, so both halves of
-            // the header have to be there.
-            signatures: [
-                [
-                    { offset: 0, bytes: ascii('RIFF') },
-                    { offset: 8, bytes: ascii('WEBP') },
-                ],
-            ],
-        },
-    ],
-    [
-        '.avif',
-        {
-            declared: ['image/avif'],
-            kind: 'image',
-            // An ISO base media file: a length, then `ftyp`, then the brand.
-            signatures: [
-                [
-                    { offset: 4, bytes: ascii('ftyp') },
-                    { offset: 8, bytes: ascii('avif') },
-                ],
-                [
-                    { offset: 4, bytes: ascii('ftyp') },
-                    { offset: 8, bytes: ascii('avis') },
-                ],
-            ],
-        },
-    ],
-    [
-        '.pdf',
-        {
-            declared: ['application/pdf'],
-            kind: 'document',
-            signatures: [[{ offset: 0, bytes: ascii('%PDF-') }]],
-        },
-    ],
-    // The two text formats have no header. Nothing is sniffed, and nothing needs
-    // to be: they are served as text, and `application/octet-stream` is allowed
-    // because that is what a browser sends for a file type it does not know.
-    ['.txt', { declared: ['text/plain', 'application/octet-stream'], kind: 'document', text: true }],
-    [
-        '.md',
-        {
-            declared: ['text/markdown', 'text/x-markdown', 'text/plain', 'application/octet-stream'],
-            kind: 'document',
-            text: true,
-        },
-    ],
-    // WebVTT opens with its name, after a byte order mark when the editor that
-    // wrote it added one. SubRip has no header, so it is taken as text like the
-    // two formats above.
-    [
-        '.vtt',
-        {
-            declared: ['text/vtt', 'text/plain', 'application/octet-stream'],
-            kind: 'document',
-            text: true,
-            signatures: [
-                [{ offset: 0, bytes: ascii('WEBVTT') }],
-                [{ offset: 0, bytes: [0xef, 0xbb, 0xbf, ...ascii('WEBVTT')] }],
-            ],
-        },
-    ],
-    [
-        '.srt',
-        {
-            declared: ['application/x-subrip', 'text/srt', 'text/plain', 'application/octet-stream'],
-            kind: 'document',
-            text: true,
-        },
-    ],
-    [
-        '.mp3',
-        {
-            declared: ['audio/mpeg', 'audio/mp3'],
-            kind: 'audio',
-            // An ID3 tag, or straight into an MPEG audio frame: eleven sync bits,
-            // then MPEG-1 or MPEG-2 layer III, with or without a CRC.
-            signatures: [
-                [{ offset: 0, bytes: ascii('ID3') }],
-                [{ offset: 0, bytes: [0xff, 0xfb] }],
-                [{ offset: 0, bytes: [0xff, 0xfa] }],
-                [{ offset: 0, bytes: [0xff, 0xf3] }],
-                [{ offset: 0, bytes: [0xff, 0xf2] }],
-            ],
-        },
-    ],
-    [
-        '.m4a',
-        {
-            declared: ['audio/mp4', 'audio/x-m4a', 'audio/m4a'],
-            kind: 'audio',
-            signatures: [ISO_BASE_MEDIA],
-        },
-    ],
-    [
-        '.aac',
-        {
-            declared: ['audio/aac', 'audio/x-aac', 'audio/aacp'],
-            kind: 'audio',
-            // A raw ADTS stream: twelve sync bits, MPEG-4 or MPEG-2, no CRC.
-            signatures: [[{ offset: 0, bytes: [0xff, 0xf1] }], [{ offset: 0, bytes: [0xff, 0xf9] }]],
-        },
-    ],
-    ['.ogg', { declared: ['audio/ogg', 'application/ogg'], kind: 'audio', signatures: [OGG] }],
-    ['.oga', { declared: ['audio/ogg', 'application/ogg'], kind: 'audio', signatures: [OGG] }],
-    ['.opus', { declared: ['audio/ogg', 'audio/opus'], kind: 'audio', signatures: [OGG] }],
-    ['.mp4', { declared: ['video/mp4'], kind: 'video', signatures: [ISO_BASE_MEDIA] }],
-    ['.m4v', { declared: ['video/mp4', 'video/x-m4v'], kind: 'video', signatures: [ISO_BASE_MEDIA] }],
-    [
-        '.webm',
-        {
-            declared: ['video/webm', 'audio/webm'],
-            kind: 'video',
-            // The EBML header every Matroska file, WebM included, opens with.
-            signatures: [[{ offset: 0, bytes: [0x1a, 0x45, 0xdf, 0xa3] }]],
-        },
-    ],
-]);
-/** The extensions a site may put in its allowlist, sorted. */
-export const KNOWN_UPLOAD_TYPES = [...UPLOAD_MEDIA_TYPES.keys()].sort();
-/**
- * An extension as the allowlist spells it: lower case, with the dot.
- *
- * `PNG`, `.Png` and `png` are all the same thing to somebody writing a config
- * file, so they are the same thing here.
- */
-export function normalizeUploadType(value) {
-    const trimmed = value.trim().toLowerCase();
-    if (trimmed === '')
-        return '';
-    return trimmed.startsWith('.') ? trimmed : `.${trimmed}`;
-}
-/**
- * The media type a feed or an attachment announces for this kind of file: the
- * first one {@link UploadMediaType.declared} lists, which is the registered
- * name where a browser may also send an older one.
- */
-export function canonicalType(media) {
-    return media.declared[0];
-}
-/**
- * The `Content-Type` an upload of this kind is served with: its
- * {@link canonicalType}, with the character set when it is text.
- */
-export function servedType(media) {
-    const type = media.declared[0] ?? 'application/octet-stream';
-    return media.text === true ? `${type}; charset=utf-8` : type;
-}
-/**
- * Whether the first bytes of a file are the ones its extension implies.
- *
- * A format with no signature — the text ones — matches anything, because there
- * is nothing to compare. Returns `false` for a file too short to hold the
- * header it claims.
- */
-export function matchesSignature(media, bytes) {
-    const alternatives = media.signatures;
-    if (alternatives === undefined)
-        return true;
-    return alternatives.some((signature) => signature.every((part) => part.bytes.every((byte, index) => bytes[part.offset + index] === byte)));
-}
-//# sourceMappingURL=media.js.map

package/dist/content/media.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"media.js","sourceRoot":"","sources":["../../src/content/media.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAsCH,uEAAuE;AACvE,SAAS,KAAK,CAAC,KAAa;IAC1B,OAAO,CAAC,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC;AAChE,CAAC;AAED;;;GAGG;AACH,MAAM,cAAc,GAA+B,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;AAEzF,gDAAgD;AAChD,MAAM,GAAG,GAA+B,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;AAE9E;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAyC,IAAI,GAAG,CAG7E;IACA;QACE,MAAM;QACN;YACE,QAAQ,EAAE,CAAC,WAAW,CAAC;YACvB,IAAI,EAAE,OAAO;YACb,UAAU,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC;SACvF;KACF;IACD;QACE,MAAM;QACN;YACE,QAAQ,EAAE,CAAC,YAAY,EAAE,WAAW,CAAC;YACrC,IAAI,EAAE,OAAO;YACb,UAAU,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC;SACzD;KACF;IACD;QACE,OAAO;QACP;YACE,QAAQ,EAAE,CAAC,YAAY,EAAE,WAAW,CAAC;YACrC,IAAI,EAAE,OAAO;YACb,UAAU,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC;SACzD;KACF;IACD;QACE,MAAM;QACN;YACE,QAAQ,EAAE,CAAC,WAAW,CAAC;YACvB,IAAI,EAAE,OAAO;YACb,UAAU,EAAE;gBACV,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC;gBACvC,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC;aACxC;SACF;KACF;IACD;QACE,OAAO;QACP;YACE,QAAQ,EAAE,CAAC,YAAY,CAAC;YACxB,IAAI,EAAE,OAAO;YACb,wEAAwE;YACxE,+BAA+B;YAC/B,UAAU,EAAE;gBACV;oBACE,EAAE,MAAM,EAAE,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE;oBACnC,EAAE,MAAM,EAAE,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE;iBACpC;aACF;SACF;KACF;IACD;QACE,OAAO;QACP;YACE,QAAQ,EAAE,CAAC,YAAY,CAAC;YACxB,IAAI,EAAE,OAAO;YACb,iEAAiE;YACjE,UAAU,EAAE;gBACV;oBACE,EAAE,MAAM,EAAE,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE;oBACnC,EAAE,MAAM,EAAE,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE;iBACpC;gBACD;oBACE,EAAE,MAAM,EAAE,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE;oBACnC,EAAE,MAAM,EAAE,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE;iBACpC;aACF;SACF;KACF;IACD;QACE,MAAM;QACN;YACE,QAAQ,EAAE,CAAC,iBAAiB,CAAC;YAC7B,IAAI,EAAE,UAAU;YAChB,UAAU,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;SACrD;KACF;IACD,6EAA6E;IAC7E,4EAA4E;IAC5E,yEAAyE;IACzE,CAAC,MAAM,EAAE,EAAE,QAAQ,EAAE,CAAC,YAAY,EAAE,0BAA0B,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IAChG;QACE,KAAK;QACL;YACE,QAAQ,EAAE,CAAC,eAAe,EAAE,iBAAiB,EAAE,YAAY,EAAE,0BAA0B,CAAC;YACxF,IAAI,EAAE,UAAU;YAChB,IAAI,EAAE,IAAI;SACX;KACF;IACD,2EAA2E;IAC3E,4EAA4E;IAC5E,qBAAqB;IACrB;QACE,MAAM;QACN;YACE,QAAQ,EAAE,CAAC,UAAU,EAAE,YAAY,EAAE,0BAA0B,CAAC;YAChE,IAAI,EAAE,UAAU;YAChB,IAAI,EAAE,IAAI;YACV,UAAU,EAAE;gBACV,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC;gBACvC,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC;aAC/D;SACF;KACF;IACD;QACE,MAAM;QACN;YACE,QAAQ,EAAE,CAAC,sBAAsB,EAAE,UAAU,EAAE,YAAY,EAAE,0BAA0B,CAAC;YACxF,IAAI,EAAE,UAAU;YAChB,IAAI,EAAE,IAAI;SACX;KACF;IACD;QACE,MAAM;QACN;YACE,QAAQ,EAAE,CAAC,YAAY,EAAE,WAAW,CAAC;YACrC,IAAI,EAAE,OAAO;YACb,sEAAsE;YACtE,0DAA0D;YAC1D,UAAU,EAAE;gBACV,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;gBACpC,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,CAAC;gBACpC,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,CAAC;gBACpC,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,CAAC;gBACpC,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,CAAC;aACrC;SACF;KACF;IACD;QACE,MAAM;QACN;YACE,QAAQ,EAAE,CAAC,WAAW,EAAE,aAAa,EAAE,WAAW,CAAC;YACnD,IAAI,EAAE,OAAO;YACb,UAAU,EAAE,CAAC,cAAc,CAAC;SAC7B;KACF;IACD;QACE,MAAM;QACN;YACE,QAAQ,EAAE,CAAC,WAAW,EAAE,aAAa,EAAE,YAAY,CAAC;YACpD,IAAI,EAAE,OAAO;YACb,iEAAiE;YACjE,UAAU,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC;SACzF;KACF;IACD,CAAC,MAAM,EAAE,EAAE,QAAQ,EAAE,CAAC,WAAW,EAAE,iBAAiB,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,UAAU,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC;IAC1F,CAAC,MAAM,EAAE,EAAE,QAAQ,EAAE,CAAC,WAAW,EAAE,iBAAiB,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,UAAU,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC;IAC1F,CAAC,OAAO,EAAE,EAAE,QAAQ,EAAE,CAAC,WAAW,EAAE,YAAY,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,UAAU,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC;IACtF,CAAC,MAAM,EAAE,EAAE,QAAQ,EAAE,CAAC,WAAW,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,UAAU,EAAE,CAAC,cAAc,CAAC,EAAE,CAAC;IAClF,CAAC,MAAM,EAAE,EAAE,QAAQ,EAAE,CAAC,WAAW,EAAE,aAAa,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,UAAU,EAAE,CAAC,cAAc,CAAC,EAAE,CAAC;IACjG;QACE,OAAO;QACP;YACE,QAAQ,EAAE,CAAC,YAAY,EAAE,YAAY,CAAC;YACtC,IAAI,EAAE,OAAO;YACb,kEAAkE;YAClE,UAAU,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC;SAC/D;KACF;CACF,CAAC,CAAC;AAEH,8DAA8D;AAC9D,MAAM,CAAC,MAAM,kBAAkB,GAAsB,CAAC,GAAG,kBAAkB,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;AAE3F;;;;;GAKG;AACH,MAAM,UAAU,mBAAmB,CAAC,KAAa;IAC/C,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC3C,IAAI,OAAO,KAAK,EAAE;QAAE,OAAO,EAAE,CAAC;IAC9B,OAAO,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,OAAO,EAAE,CAAC;AAC3D,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,aAAa,CAAC,KAAsB;IAClD,OAAO,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;AAC3B,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,UAAU,CAAC,KAAsB;IAC/C,MAAM,IAAI,GAAG,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,0BAA0B,CAAC;IAC7D,OAAO,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,GAAG,IAAI,iBAAiB,CAAC,CAAC,CAAC,IAAI,CAAC;AAC/D,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,gBAAgB,CAAC,KAAsB,EAAE,KAAiB;IACxE,MAAM,YAAY,GAAG,KAAK,CAAC,UAAU,CAAC;IACtC,IAAI,YAAY,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IAE5C,OAAO,YAAY,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CACrC,SAAS,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE,CACvB,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC,KAAK,IAAI,CAAC,CACvE,CACF,CAAC;AACJ,CAAC"}

package/dist/content/read-form.d.ts

@@ -1,31 +0,0 @@
-import type { FieldError } from './form-error.ts';
-import type { Read, ReadOf } from './read.ts';
-export interface ReadOfForm {
-    name: string;
-    author: string;
-    uid: string;
-    url: string;
-    photo: string;
-    photoAlt: string;
-}
-export declare const READ_FIELDS: {
-    readonly status: 'read-status';
-    readonly name: 'read-of-name';
-    readonly author: 'read-of-author';
-    readonly uid: 'read-of-uid';
-    readonly url: 'read-of-url';
-    readonly photo: 'read-of-photo';
-    readonly photoAlt: 'read-of-photo-alt';
-};
-export declare function submittedReadOfForm(body: Readonly<Record<string, unknown>>): ReadOfForm;
-export declare const BLANK_READ_OF_FORM: ReadOfForm;
-export declare function readOfForm(of: ReadOf | undefined): ReadOfForm;
-export declare function resolveRead(status: string, of: ReadOfForm, contentDir: string): {
-    read: Read | undefined;
-} | FieldError;
-export declare function readOfFromMicropub(values: readonly unknown[], refuse: (message: string) => void, baseUrl: string): ReadOfForm;
-export declare function readCite({ photo, ...of }: ReadOf, baseUrl: string): {
-    type: string[];
-    properties: Record<string, unknown[]>;
-};
-//# sourceMappingURL=read-form.d.ts.map

package/dist/content/read-form.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"read-form.d.ts","sourceRoot":"","sources":["../../src/content/read-form.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAGlD,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,WAAW,CAAC;AAE9C,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,eAAO,MAAM,WAAW;aACtB,MAAM,EAAE,aAAa;aACrB,IAAI,EAAE,cAAc;aACpB,MAAM,EAAE,gBAAgB;aACxB,GAAG,EAAE,aAAa;aAClB,GAAG,EAAE,aAAa;aAClB,KAAK,EAAE,eAAe;aACtB,QAAQ,EAAE,mBAAmB;CACrB,CAAC;AAEX,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,GAAG,UAAU,CASvF;AAED,eAAO,MAAM,kBAAkB,EAAE,UAOhC,CAAC;AAEF,wBAAgB,UAAU,CAAC,EAAE,EAAE,MAAM,GAAG,SAAS,GAAG,UAAU,CAS7D;AAED,wBAAgB,WAAW,CACzB,MAAM,EAAE,MAAM,EACd,EAAE,EAAE,UAAU,EACd,UAAU,EAAE,MAAM,GACjB;IAAE,IAAI,EAAE,IAAI,GAAG,SAAS,CAAA;CAAE,GAAG,UAAU,CAmDzC;AAKD,wBAAgB,kBAAkB,CAChC,MAAM,EAAE,SAAS,OAAO,EAAE,EAC1B,MAAM,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,EACjC,OAAO,EAAE,MAAM,GACd,UAAU,CAiDZ;AAED,wBAAgB,QAAQ,CACtB,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE,EAAE,MAAM,EACxB,OAAO,EAAE,MAAM,GACd;IACD,IAAI,EAAE,MAAM,EAAE,CAAC;IACf,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC;CACvC,CAWA"}