@geekity/cms 0.35.0 → 0.37.0

package/themes/default/layouts/base.njk

@@ -32,8 +32,10 @@
   Two partials, empty here, are included outside every block so that no layout
   can drop them: `partials/head-end.njk` last in <head> and
   `partials/body-end.njk` last in <body>. A site theme fills either one to add
-  analytics or a widget to every page without overriding a layout. The
-  editor's preview in the admin sets `editorPreview` and leaves both out.
+  analytics or a widget to every page without overriding a layout. Just
+  before each, `pluginTags.headEnd` and `pluginTags.bodyEnd` draw the tags the
+  running plugins add. The editor's preview in the admin sets `editorPreview`
+  and leaves all four out.
 #}{% import "partials/feeds.njk" as feeds %}
 {%- import "partials/menu.njk" as nav %}
 {#- Whether this is the front page, which is the one page the header and the
@@ -262,7 +264,7 @@
     <link rel="manifest" href="{{ "/manifest.webmanifest" | url }}">
     {% include "partials/jsonld.njk" %}
     {% endblock %}
-    {% if not editorPreview %}{% include "partials/head-end.njk" %}{% endif %}
+    {% if not editorPreview %}{{ pluginTags.headEnd }}{% include "partials/head-end.njk" %}{% endif %}
   </head>
   <body>
     <a class="screen-reader-text" href="#main">Skip to content</a>
@@ -348,6 +350,6 @@
     <script src="{{ "highlight.js" | asset }}" defer></script>
     {% endif %}
     {% endblock %}
-    {% if not editorPreview %}{% include "partials/body-end.njk" %}{% endif %}
+    {% if not editorPreview %}{{ pluginTags.bodyEnd }}{% include "partials/body-end.njk" %}{% endif %}
   </body>
 </html>

package/dist/comments/routes.d.ts

@@ -1,65 +0,0 @@
-import type { Hono } from 'hono';
-import type { AdminStore } from '../store/admin-store.ts';
-import type { Document } from '../content/document.ts';
-import type { GeekityEnv } from '../web/env.ts';
-import type { CommentFormContext, CommentViewer } from './form.ts';
-import type { Conversation } from './conversation.ts';
-/**
- * The one public endpoint comments add: where the form under a post posts to.
- *
- * It is a single path rather than one per post because the post is a field of
- * the form. That keeps it out of the way of every permalink a site might ever
- * mint — a path under `/_geekity/` is the CMS's own, like the health check —
- * and means the route table does not grow with the site.
- *
- * Everything it answers is either a redirect or the post's own page rendered
- * again with the form still filled in. There is no JSON, no fragment and no
- * script: a comment form has worked without JavaScript since 2003 and there is
- * no reason for this one to stop.
- */
-export { COMMENT_POST_PATH, COMMENT_REPLY_PARAM } from './form.ts';
-/** Register the comment endpoint. Mounted by the public site. */
-export declare function mountComments(app: Hono<GeekityEnv>): void;
-/**
- * The thank-you a reader is shown after posting, from the query the redirect
- * carried, or `undefined` when the URL says nothing.
- *
- * A query rather than a flash message, because a reader has no session to hang
- * one on, and because a comment form that only works for people with cookies
- * is not a comment form.
- */
-export declare function commentNoticeFor(query: string | undefined): string | undefined;
-/**
- * The comment a `?reply_to=` query points at, as the theme needs it, or an
- * empty object when the query names nothing on this post.
- *
- * Checked against the index rather than trusted, so a made-up id — or one from
- * another page — cannot put a stranger's name on somebody's reply form, and so
- * a comment waiting for a moderator cannot be discovered by guessing. With the
- * post's `thread`, which is handed over for somebody signed in (TASK-300), any
- * entry a reader can see is answerable: a webmention, a fediverse reply or a
- * reply post as well as a comment.
- */
-export declare function commentReplyTarget(options: {
-    admin: AdminStore;
-    document: Document;
-    id: string | undefined;
-    thread?: Conversation | undefined;
-}): Record<string, unknown>;
-/**
- * The form for a post, or `undefined` when it is not taking comments.
- *
- * What the renderer is handed at boot. It reads the settings and the clock on
- * every render, so a post that closed an hour ago stops offering a form on the
- * very next request.
- */
-export declare function commentFormFor(options: {
-    document: Document;
-    site: Record<string, unknown>;
-    now: Date;
-    /** Whether the site can send mail, which is whether the box is offered. */
-    notifiable?: boolean | undefined;
-    /** Who the request's session says is reading, when it says anybody. */
-    viewer?: CommentViewer | undefined;
-}): CommentFormContext | undefined;
-//# sourceMappingURL=routes.d.ts.map

package/dist/comments/routes.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"routes.d.ts","sourceRoot":"","sources":["../../src/comments/routes.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAW,IAAI,EAAE,MAAM,MAAM,CAAC;AAG1C,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,yBAAyB,CAAC;AAG1D,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,wBAAwB,CAAC;AACvD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAahD,OAAO,KAAK,EAAE,kBAAkB,EAAE,aAAa,EAAE,MAAM,WAAW,CAAC;AAGnE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAWtD;;;;;;;;;;;;GAYG;AAEH,OAAO,EAAE,iBAAiB,EAAE,mBAAmB,EAAE,MAAM,WAAW,CAAC;AAEnE,iEAAiE;AACjE,wBAAgB,aAAa,CAAC,GAAG,EAAE,IAAI,CAAC,UAAU,CAAC,GAAG,IAAI,CAkHzD;AA2DD;;;;;;;GAOG;AACH,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,GAAG,SAAS,CAE9E;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,kBAAkB,CAAC,OAAO,EAAE;IAC1C,KAAK,EAAE,UAAU,CAAC;IAClB,QAAQ,EAAE,QAAQ,CAAC;IACnB,EAAE,EAAE,MAAM,GAAG,SAAS,CAAC;IACvB,MAAM,CAAC,EAAE,YAAY,GAAG,SAAS,CAAC;CACnC,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAe1B;AAED;;;;;;GAMG;AACH,wBAAgB,cAAc,CAAC,OAAO,EAAE;IACtC,QAAQ,EAAE,QAAQ,CAAC;IACnB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC9B,GAAG,EAAE,IAAI,CAAC;IACV,2EAA2E;IAC3E,UAAU,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;IACjC,uEAAuE;IACvE,MAAM,CAAC,EAAE,aAAa,GAAG,SAAS,CAAC;CACpC,GAAG,kBAAkB,GAAG,SAAS,CAKjC"}

package/dist/comments/routes.js

@@ -1,235 +0,0 @@
-import { CROSS_SITE_REFUSAL, crossSiteWrite, csrfTokenMatches } from '../web/session.js';
-import { clientAddress, createLoginThrottle } from '../web/throttle.js';
-import { documentSite } from '../admin/documents.js';
-import { stringOrEmpty } from '../util/forms.js';
-import { isServed } from '../content/served.js';
-import { COMMENT_NOTICE_PARAM, COMMENT_NOTICES, COMMENT_POST_PATH, commentForm, refilledCommentForm, signedInCommentForm, valuesOf, } from './form.js';
-import { commentPolicyOf, commentsOpen } from './policy.js';
-import { commentAnchor, visibleReply } from './conversation.js';
-import { COMMENT_FIELDS, COMMENT_RATE_LIMIT, COMMENT_RATE_WINDOW_SECONDS, submitComment, } from './submission.js';
-import { submitReplyPost } from './reply-post.js';
-import { commenterOf } from './viewer.js';
-/**
- * The one public endpoint comments add: where the form under a post posts to.
- *
- * It is a single path rather than one per post because the post is a field of
- * the form. That keeps it out of the way of every permalink a site might ever
- * mint — a path under `/_geekity/` is the CMS's own, like the health check —
- * and means the route table does not grow with the site.
- *
- * Everything it answers is either a redirect or the post's own page rendered
- * again with the form still filled in. There is no JSON, no fragment and no
- * script: a comment form has worked without JavaScript since 2003 and there is
- * no reason for this one to stop.
- */
-export { COMMENT_POST_PATH, COMMENT_REPLY_PARAM } from './form.js';
-/** Register the comment endpoint. Mounted by the public site. */
-export function mountComments(app) {
-    // One limiter for the whole mount, built on the first submission because the
-    // clock is on the context. It holds nothing but recent submissions, so it
-    // belongs to the process rather than the database: a restart clears it,
-    // which is the right trade for state an anonymous caller can create.
-    let limiter;
-    function throttle(config) {
-        limiter ??= createLoginThrottle({
-            attempts: COMMENT_RATE_LIMIT,
-            lockoutSeconds: COMMENT_RATE_WINDOW_SECONDS,
-            now: config.now,
-        });
-        return limiter;
-    }
-    app.post(COMMENT_POST_PATH, async (c) => {
-        const { store, admin, renderer, config } = c.var;
-        const body = await c.req.parseBody();
-        const form = formOf(body);
-        // Who the session says this is, read before anything else is decided: it
-        // settles the token, the attribution and where the comment lands.
-        const account = c.var.signedIn;
-        const viewer = account === undefined ? undefined : commenterOf(account);
-        // A form that acts on nobody's behalf needs no token, and the public one
-        // still carries none. This one posts under somebody's name, so without a
-        // matching token a page on another site could make them say something they
-        // never typed. Refused in the words and with the status the admin guard
-        // uses, because it is the same check on the same token.
-        //
-        // Fetch Metadata first, as in the admin: a browser that says the form was
-        // on another site is refused whatever token it carries. A stranger's form
-        // is left alone, because it acts on nobody's behalf.
-        if (viewer !== undefined && crossSiteWrite(c))
-            return c.text(CROSS_SITE_REFUSAL, 403);
-        if (viewer !== undefined && !csrfTokenMatches(viewer.csrfToken, form.csrf)) {
-            return c.text('That form was stale or came from somewhere else. Reload and try again.', 403);
-        }
-        const document = store.getBySlug(form.post);
-        if (document === undefined || !isServed(document, store.now())) {
-            return c.text('There is no such post to comment on.', 404);
-        }
-        const now = config.now();
-        if (!commentsOpen(document, commentPolicyOf(renderer.site()), now)) {
-            // 403 rather than 404: the post is there, and the reader can see for
-            // themselves that it is. Saying so is more honest than pretending the
-            // URL is wrong, and a closed post is a state rather than a mistake.
-            return page(c, document, 403, viewer, {
-                ...drawnFor(refilledCommentForm(document, valuesOf(form), {}, now), viewer),
-                error: 'This post is not taking comments any more.',
-            });
-        }
-        if (viewer !== undefined) {
-            const answered = await submitReplyPost({
-                site: documentSite(c, viewer.username),
-                document,
-                conversation: c.var.conversation.thread(document),
-                form,
-                throttle: throttle(config),
-                address: clientAddress(c, config),
-            });
-            if (answered.kind === 'saved') {
-                const reply = c.var.conversation.replyNamed(document, answered.saved.permalink);
-                const anchor = reply === undefined ? 'comments' : commentAnchor(reply.key);
-                return c.redirect(`${document.permalink}?${COMMENT_NOTICE_PARAM}=posted#${anchor}`, 303);
-            }
-            return refusedPage(c, document, viewer, form, answered.refusal, now);
-        }
-        const outcome = await submitComment({
-            records: { admin, contentDir: config.contentDir, dataDir: config.dataDir },
-            document,
-            cited: (url) => c.var.replyContexts.read(url),
-            form,
-            dataDir: config.dataDir,
-            baseUrl: config.baseUrl,
-            checker: config.commentChecker,
-            // Who hears about what lands is the intake's to decide, and neither
-            // message is awaited: the reader is redirected now and they go out
-            // behind them (TASK-55).
-            notices: c.var.notifications,
-            address: clientAddress(c, config),
-            userAgent: c.req.header('user-agent'),
-            referrer: c.req.header('referer'),
-            throttle: throttle(config),
-            // Whether the box on the form meant anything, read per submission so a
-            // credential saved a moment ago is honoured now (TASK-55).
-            notifiable: c.var.mail.configured(),
-            now,
-        });
-        if (outcome.kind === 'stored') {
-            const stored = outcome.comment;
-            // A redirect rather than a rendered page, so a refresh does not post the
-            // comment a second time. An approved comment is on the page already, so
-            // the reader is sent to it; one waiting for a moderator has nothing to
-            // point at, so the reader is sent to the form they just used.
-            const anchor = stored.status === 'approved' ? commentAnchor(stored.id) : 'respond';
-            const notice = stored.status === 'approved' ? 'posted' : 'pending';
-            return c.redirect(`${document.permalink}?${COMMENT_NOTICE_PARAM}=${notice}#${anchor}`, 303);
-        }
-        const refusal = outcome.refusal;
-        if (refusal.kind === 'discarded') {
-            // Nothing is said about why. A robot that filled the honeypot, or that a
-            // checker recognised, learns exactly as much from this as from a
-            // successful post — which is the point of both defences.
-            return c.redirect(`${document.permalink}?${COMMENT_NOTICE_PARAM}=pending#respond`, 303);
-        }
-        return refusedPage(c, document, viewer, form, refusal, now);
-    });
-}
-/** The post's page again, with the form refilled and what went wrong on it. */
-function refusedPage(c, document, viewer, form, refusal, now) {
-    if (refusal.kind === 'rate-limited') {
-        c.header('Retry-After', String(refusal.retryAfter));
-        return page(c, document, 429, viewer, {
-            ...drawnFor(refilledCommentForm(document, valuesOf(form), {}, now), viewer),
-            error: 'That is a lot of comments in a short time. Try again in a few minutes.',
-        });
-    }
-    const message = refusal.kind === 'too-quick'
-        ? 'That was posted faster than anybody types. Try again.'
-        : refusal.kind === 'stale'
-            ? 'That form had been open a long time. Here it is again — the words are still there.'
-            : undefined;
-    return page(c, document, 400, viewer, {
-        ...drawnFor(refilledCommentForm(document, valuesOf(form), problemsOf(refusal), now), viewer),
-        ...(message === undefined ? {} : { error: message }),
-    });
-}
-/**
- * The same form drawn for whoever is filling it in: the short one when the
- * site knows them, and the stranger's one when it does not.
- */
-function drawnFor(form, viewer) {
-    return viewer === undefined ? form : signedInCommentForm(form, viewer);
-}
-function page(c, document, status, viewer, form) {
-    c.status(status);
-    return c.html(c.var.renderer.renderDocument(document, { commentForm: form }, viewer));
-}
-/** The per-field messages a refusal carries, if it carries any. */
-function problemsOf(refusal) {
-    return refusal.kind === 'invalid' ? (refusal.problems ?? {}) : {};
-}
-/**
- * The thank-you a reader is shown after posting, from the query the redirect
- * carried, or `undefined` when the URL says nothing.
- *
- * A query rather than a flash message, because a reader has no session to hang
- * one on, and because a comment form that only works for people with cookies
- * is not a comment form.
- */
-export function commentNoticeFor(query) {
-    return query === undefined ? undefined : COMMENT_NOTICES[query];
-}
-/**
- * The comment a `?reply_to=` query points at, as the theme needs it, or an
- * empty object when the query names nothing on this post.
- *
- * Checked against the index rather than trusted, so a made-up id — or one from
- * another page — cannot put a stranger's name on somebody's reply form, and so
- * a comment waiting for a moderator cannot be discovered by guessing. With the
- * post's `thread`, which is handed over for somebody signed in (TASK-300), any
- * entry a reader can see is answerable: a webmention, a fediverse reply or a
- * reply post as well as a comment.
- */
-export function commentReplyTarget(options) {
-    if (options.id === undefined || options.id === '')
-        return {};
-    if (options.thread !== undefined) {
-        const reply = visibleReply(options.thread.replies, options.id);
-        return reply === undefined
-            ? {}
-            : { commentReplyTo: reply.key, commentReplyingTo: reply.author.name };
-    }
-    const parent = options.admin.getComment(options.id);
-    if (parent === undefined || parent.slug !== options.document.slug)
-        return {};
-    if (parent.status !== 'approved')
-        return {};
-    return { commentReplyTo: parent.id, commentReplyingTo: parent.author.name };
-}
-/**
- * The form for a post, or `undefined` when it is not taking comments.
- *
- * What the renderer is handed at boot. It reads the settings and the clock on
- * every render, so a post that closed an hour ago stops offering a form on the
- * very next request.
- */
-export function commentFormFor(options) {
-    if (!commentsOpen(options.document, commentPolicyOf(options.site), options.now))
-        return undefined;
-    const form = commentForm(options.document, options.now, options.notifiable ?? false);
-    return drawnFor(form, options.viewer);
-}
-/** A submitted body as the form it is, every field a string. */
-function formOf(body) {
-    return {
-        post: stringOrEmpty(body[COMMENT_FIELDS.post]),
-        name: stringOrEmpty(body[COMMENT_FIELDS.name]),
-        email: stringOrEmpty(body[COMMENT_FIELDS.email]),
-        url: stringOrEmpty(body[COMMENT_FIELDS.url]),
-        body: stringOrEmpty(body[COMMENT_FIELDS.body]),
-        inReplyTo: stringOrEmpty(body[COMMENT_FIELDS.inReplyTo]),
-        trap: stringOrEmpty(body[COMMENT_FIELDS.trap]),
-        loaded: stringOrEmpty(body[COMMENT_FIELDS.loaded]),
-        notify: stringOrEmpty(body[COMMENT_FIELDS.notify]),
-        csrf: stringOrEmpty(body[COMMENT_FIELDS.csrf]),
-        listed: stringOrEmpty(body[COMMENT_FIELDS.listed]),
-    };
-}
-//# sourceMappingURL=routes.js.map

package/dist/comments/routes.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"routes.js","sourceRoot":"","sources":["../../src/comments/routes.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,kBAAkB,EAAE,cAAc,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AAEzF,OAAO,EAAE,aAAa,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AAIxE,OAAO,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AACrD,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AACjD,OAAO,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AAChD,OAAO,EACL,oBAAoB,EACpB,eAAe,EACf,iBAAiB,EACjB,WAAW,EACX,mBAAmB,EACnB,mBAAmB,EACnB,QAAQ,GACT,MAAM,WAAW,CAAC;AAEnB,OAAO,EAAE,eAAe,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC5D,OAAO,EAAE,aAAa,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAEhE,OAAO,EACL,cAAc,EACd,kBAAkB,EAClB,2BAA2B,EAC3B,aAAa,GACd,MAAM,iBAAiB,CAAC;AAEzB,OAAO,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAClD,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAE1C;;;;;;;;;;;;GAYG;AAEH,OAAO,EAAE,iBAAiB,EAAE,mBAAmB,EAAE,MAAM,WAAW,CAAC;AAEnE,iEAAiE;AACjE,MAAM,UAAU,aAAa,CAAC,GAAqB;IACjD,6EAA6E;IAC7E,0EAA0E;IAC1E,wEAAwE;IACxE,qEAAqE;IACrE,IAAI,OAAoC,CAAC;IAEzC,SAAS,QAAQ,CAAC,MAAsB;QACtC,OAAO,KAAK,mBAAmB,CAAC;YAC9B,QAAQ,EAAE,kBAAkB;YAC5B,cAAc,EAAE,2BAA2B;YAC3C,GAAG,EAAE,MAAM,CAAC,GAAG;SAChB,CAAC,CAAC;QACH,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,GAAG,CAAC,IAAI,CAAC,iBAAiB,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QACtC,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC;QACjD,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,SAAS,EAAE,CAAC;QACrC,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC;QAC1B,yEAAyE;QACzE,kEAAkE;QAClE,MAAM,OAAO,GAAG,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC;QAC/B,MAAM,MAAM,GAAG,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;QAExE,yEAAyE;QACzE,yEAAyE;QACzE,2EAA2E;QAC3E,wEAAwE;QACxE,wDAAwD;QACxD,EAAE;QACF,0EAA0E;QAC1E,0EAA0E;QAC1E,qDAAqD;QACrD,IAAI,MAAM,KAAK,SAAS,IAAI,cAAc,CAAC,CAAC,CAAC;YAAE,OAAO,CAAC,CAAC,IAAI,CAAC,kBAAkB,EAAE,GAAG,CAAC,CAAC;QACtF,IAAI,MAAM,KAAK,SAAS,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,SAAS,EAAE,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YAC3E,OAAO,CAAC,CAAC,IAAI,CAAC,wEAAwE,EAAE,GAAG,CAAC,CAAC;QAC/F,CAAC;QAED,MAAM,QAAQ,GAAG,KAAK,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC5C,IAAI,QAAQ,KAAK,SAAS,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC;YAC/D,OAAO,CAAC,CAAC,IAAI,CAAC,sCAAsC,EAAE,GAAG,CAAC,CAAC;QAC7D,CAAC;QAED,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG,EAAE,CAAC;QACzB,IAAI,CAAC,YAAY,CAAC,QAAQ,EAAE,eAAe,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC;YACnE,qEAAqE;YACrE,sEAAsE;YACtE,oEAAoE;YACpE,OAAO,IAAI,CAAC,CAAC,EAAE,QAAQ,EAAE,GAAG,EAAE,MAAM,EAAE;gBACpC,GAAG,QAAQ,CAAC,mBAAmB,CAAC,QAAQ,EAAE,QAAQ,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE,MAAM,CAAC;gBAC3E,KAAK,EAAE,4CAA4C;aACpD,CAAC,CAAC;QACL,CAAC;QAED,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACzB,MAAM,QAAQ,GAAG,MAAM,eAAe,CAAC;gBACrC,IAAI,EAAE,YAAY,CAAC,CAAC,EAAE,MAAM,CAAC,QAAQ,CAAC;gBACtC,QAAQ;gBACR,YAAY,EAAE,CAAC,CAAC,GAAG,CAAC,YAAY,CAAC,MAAM,CAAC,QAAQ,CAAC;gBACjD,IAAI;gBACJ,QAAQ,EAAE,QAAQ,CAAC,MAAM,CAAC;gBAC1B,OAAO,EAAE,aAAa,CAAC,CAAC,EAAE,MAAM,CAAC;aAClC,CAAC,CAAC;YACH,IAAI,QAAQ,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;gBAC9B,MAAM,KAAK,GAAG,CAAC,CAAC,GAAG,CAAC,YAAY,CAAC,UAAU,CAAC,QAAQ,EAAE,QAAQ,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;gBAChF,MAAM,MAAM,GAAG,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,aAAa,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;gBAC3E,OAAO,CAAC,CAAC,QAAQ,CAAC,GAAG,QAAQ,CAAC,SAAS,IAAI,oBAAoB,WAAW,MAAM,EAAE,EAAE,GAAG,CAAC,CAAC;YAC3F,CAAC;YACD,OAAO,WAAW,CAAC,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;QACvE,CAAC;QAED,MAAM,OAAO,GAAG,MAAM,aAAa,CAAC;YAClC,OAAO,EAAE,EAAE,KAAK,EAAE,UAAU,EAAE,MAAM,CAAC,UAAU,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE;YAC1E,QAAQ;YACR,KAAK,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,aAAa,CAAC,IAAI,CAAC,GAAG,CAAC;YAC7C,IAAI;YACJ,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,OAAO,EAAE,MAAM,CAAC,cAAc;YAC9B,oEAAoE;YACpE,mEAAmE;YACnE,yBAAyB;YACzB,OAAO,EAAE,CAAC,CAAC,GAAG,CAAC,aAAa;YAC5B,OAAO,EAAE,aAAa,CAAC,CAAC,EAAE,MAAM,CAAC;YACjC,SAAS,EAAE,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,YAAY,CAAC;YACrC,QAAQ,EAAE,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC;YACjC,QAAQ,EAAE,QAAQ,CAAC,MAAM,CAAC;YAC1B,uEAAuE;YACvE,2DAA2D;YAC3D,UAAU,EAAE,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,UAAU,EAAE;YACnC,GAAG;SACJ,CAAC,CAAC;QAEH,IAAI,OAAO,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC9B,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;YAC/B,yEAAyE;YACzE,wEAAwE;YACxE,uEAAuE;YACvE,8DAA8D;YAC9D,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,KAAK,UAAU,CAAC,CAAC,CAAC,aAAa,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YACnF,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,KAAK,UAAU,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YACnE,OAAO,CAAC,CAAC,QAAQ,CAAC,GAAG,QAAQ,CAAC,SAAS,IAAI,oBAAoB,IAAI,MAAM,IAAI,MAAM,EAAE,EAAE,GAAG,CAAC,CAAC;QAC9F,CAAC;QAED,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC;QAChC,IAAI,OAAO,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;YACjC,yEAAyE;YACzE,iEAAiE;YACjE,yDAAyD;YACzD,OAAO,CAAC,CAAC,QAAQ,CAAC,GAAG,QAAQ,CAAC,SAAS,IAAI,oBAAoB,kBAAkB,EAAE,GAAG,CAAC,CAAC;QAC1F,CAAC;QACD,OAAO,WAAW,CAAC,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC;IAC9D,CAAC,CAAC,CAAC;AACL,CAAC;AAED,+EAA+E;AAC/E,SAAS,WAAW,CAClB,CAAsB,EACtB,QAAkB,EAClB,MAAiC,EACjC,IAAiB,EACjB,OAAuB,EACvB,GAAS;IAET,IAAI,OAAO,CAAC,IAAI,KAAK,cAAc,EAAE,CAAC;QACpC,CAAC,CAAC,MAAM,CAAC,aAAa,EAAE,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC;QACpD,OAAO,IAAI,CAAC,CAAC,EAAE,QAAQ,EAAE,GAAG,EAAE,MAAM,EAAE;YACpC,GAAG,QAAQ,CAAC,mBAAmB,CAAC,QAAQ,EAAE,QAAQ,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE,MAAM,CAAC;YAC3E,KAAK,EAAE,wEAAwE;SAChF,CAAC,CAAC;IACL,CAAC;IAED,MAAM,OAAO,GACX,OAAO,CAAC,IAAI,KAAK,WAAW;QAC1B,CAAC,CAAC,uDAAuD;QACzD,CAAC,CAAC,OAAO,CAAC,IAAI,KAAK,OAAO;YACxB,CAAC,CAAC,oFAAoF;YACtF,CAAC,CAAC,SAAS,CAAC;IAElB,OAAO,IAAI,CAAC,CAAC,EAAE,QAAQ,EAAE,GAAG,EAAE,MAAM,EAAE;QACpC,GAAG,QAAQ,CAAC,mBAAmB,CAAC,QAAQ,EAAE,QAAQ,CAAC,IAAI,CAAC,EAAE,UAAU,CAAC,OAAO,CAAC,EAAE,GAAG,CAAC,EAAE,MAAM,CAAC;QAC5F,GAAG,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC;KACrD,CAAC,CAAC;AACL,CAAC;AAKD;;;GAGG;AACH,SAAS,QAAQ,CAAC,IAAwB,EAAE,MAAiC;IAC3E,OAAO,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,mBAAmB,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;AACzE,CAAC;AAED,SAAS,IAAI,CACX,CAAsB,EACtB,QAAkB,EAClB,MAAqB,EACrB,MAAiC,EACjC,IAAwB;IAExB,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACjB,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,cAAc,CAAC,QAAQ,EAAE,EAAE,WAAW,EAAE,IAAI,EAAE,EAAE,MAAM,CAAC,CAAC,CAAC;AACxF,CAAC;AAED,mEAAmE;AACnE,SAAS,UAAU,CAAC,OAA6C;IAC/D,OAAO,OAAO,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAE,CAAC,OAAO,CAAC,QAAQ,IAAI,EAAE,CAA4B,CAAC,CAAC,CAAC,EAAE,CAAC;AAChG,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,gBAAgB,CAAC,KAAyB;IACxD,OAAO,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC;AAClE,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,kBAAkB,CAAC,OAKlC;IACC,IAAI,OAAO,CAAC,EAAE,KAAK,SAAS,IAAI,OAAO,CAAC,EAAE,KAAK,EAAE;QAAE,OAAO,EAAE,CAAC;IAE7D,IAAI,OAAO,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QACjC,MAAM,KAAK,GAAG,YAAY,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,EAAE,OAAO,CAAC,EAAE,CAAC,CAAC;QAC/D,OAAO,KAAK,KAAK,SAAS;YACxB,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC,EAAE,cAAc,EAAE,KAAK,CAAC,GAAG,EAAE,iBAAiB,EAAE,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;IAC1E,CAAC;IAED,MAAM,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IACpD,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,CAAC,IAAI,KAAK,OAAO,CAAC,QAAQ,CAAC,IAAI;QAAE,OAAO,EAAE,CAAC;IAC7E,IAAI,MAAM,CAAC,MAAM,KAAK,UAAU;QAAE,OAAO,EAAE,CAAC;IAE5C,OAAO,EAAE,cAAc,EAAE,MAAM,CAAC,EAAE,EAAE,iBAAiB,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;AAC9E,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,cAAc,CAAC,OAQ9B;IACC,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,QAAQ,EAAE,eAAe,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,OAAO,CAAC,GAAG,CAAC;QAAE,OAAO,SAAS,CAAC;IAElG,MAAM,IAAI,GAAG,WAAW,CAAC,OAAO,CAAC,QAAQ,EAAE,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC,UAAU,IAAI,KAAK,CAAC,CAAC;IACrF,OAAO,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;AACxC,CAAC;AAED,gEAAgE;AAChE,SAAS,MAAM,CAAC,IAA6B;IAC3C,OAAO;QACL,IAAI,EAAE,aAAa,CAAC,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC;QAC9C,IAAI,EAAE,aAAa,CAAC,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC;QAC9C,KAAK,EAAE,aAAa,CAAC,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;QAChD,GAAG,EAAE,aAAa,CAAC,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC;QAC5C,IAAI,EAAE,aAAa,CAAC,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC;QAC9C,SAAS,EAAE,aAAa,CAAC,IAAI,CAAC,cAAc,CAAC,SAAS,CAAC,CAAC;QACxD,IAAI,EAAE,aAAa,CAAC,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC;QAC9C,MAAM,EAAE,aAAa,CAAC,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC;QAClD,MAAM,EAAE,aAAa,CAAC,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC;QAClD,IAAI,EAAE,aAAa,CAAC,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC;QAC9C,MAAM,EAAE,aAAa,CAAC,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC;KACnD,CAAC;AACJ,CAAC"}

package/dist/content/media.d.ts

@@ -1,85 +0,0 @@
-/**
- * What may be uploaded into `content/uploads/`, described once.
- *
- * The upload endpoint is the only door into the content directory that does
- * not write Markdown, so what it accepts is a list rather than a judgement:
- * an extension the CMS has never heard of is refused, and one it has is
- * checked against the media type the browser declared and, where the format
- * has one, against the bytes the file actually starts with.
- *
- * The table lives here rather than beside the endpoint because
- * {@link ResolvedConfig} validates a site's allowlist against it, and config
- * may not depend on the admin.
- */
-/** Bytes a file of some format carries at a fixed offset. */
-export interface UploadSignature {
-    /** Where in the file the bytes are. */
-    offset: number;
-    /** The bytes themselves. */
-    bytes: readonly number[];
-}
-/**
- * What an upload is for, which decides what the CMS offers to do with it.
- *
- * An image is embedded and gets variants, audio and video can be a post's
- * enclosure and are held to their own size limit, and a document is linked.
- */
-export type UploadKind = 'image' | 'audio' | 'video' | 'document';
-/** One kind of file the upload endpoint knows about. */
-export interface UploadMediaType {
-    /**
-     * Media types a browser may declare for this extension. An empty string is
-     * always accepted alongside these: a browser that does not recognise a file
-     * sends no type at all, and there is then nothing to disagree with.
-     */
-    declared: readonly string[];
-    /** What the file is for. */
-    kind: UploadKind;
-    /**
-     * Byte patterns that identify the format, as alternatives: a file matches
-     * when every part of any one of them matches. Absent for the text formats,
-     * which have no header to check.
-     */
-    signatures?: readonly (readonly UploadSignature[])[] | undefined;
-    /** Whether the file is text, served with its character set named. */
-    text?: true;
-}
-/**
- * Every extension the upload endpoint can accept, and what it takes to be one.
- *
- * SVG is deliberately absent. An SVG is a document that may carry script, and
- * an upload is served from the site's own origin, so accepting one would hand
- * anybody who can reach the editor a stored cross-site scripting hole. A site
- * that wants them anyway can put `.svg` in `uploadTypes` — and then it has
- * chosen that, which is the point.
- */
-export declare const UPLOAD_MEDIA_TYPES: ReadonlyMap<string, UploadMediaType>;
-/** The extensions a site may put in its allowlist, sorted. */
-export declare const KNOWN_UPLOAD_TYPES: readonly string[];
-/**
- * An extension as the allowlist spells it: lower case, with the dot.
- *
- * `PNG`, `.Png` and `png` are all the same thing to somebody writing a config
- * file, so they are the same thing here.
- */
-export declare function normalizeUploadType(value: string): string;
-/**
- * The media type a feed or an attachment announces for this kind of file: the
- * first one {@link UploadMediaType.declared} lists, which is the registered
- * name where a browser may also send an older one.
- */
-export declare function canonicalType(media: UploadMediaType): string | undefined;
-/**
- * The `Content-Type` an upload of this kind is served with: its
- * {@link canonicalType}, with the character set when it is text.
- */
-export declare function servedType(media: UploadMediaType): string;
-/**
- * Whether the first bytes of a file are the ones its extension implies.
- *
- * A format with no signature — the text ones — matches anything, because there
- * is nothing to compare. Returns `false` for a file too short to hold the
- * header it claims.
- */
-export declare function matchesSignature(media: UploadMediaType, bytes: Uint8Array): boolean;
-//# sourceMappingURL=media.d.ts.map

package/dist/content/media.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"media.d.ts","sourceRoot":"","sources":["../../src/content/media.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,6DAA6D;AAC7D,MAAM,WAAW,eAAe;IAC9B,uCAAuC;IACvC,MAAM,EAAE,MAAM,CAAC;IACf,4BAA4B;IAC5B,KAAK,EAAE,SAAS,MAAM,EAAE,CAAC;CAC1B;AAED;;;;;GAKG;AACH,MAAM,MAAM,UAAU,GAAG,OAAO,GAAG,OAAO,GAAG,OAAO,GAAG,UAAU,CAAC;AAElE,wDAAwD;AACxD,MAAM,WAAW,eAAe;IAC9B;;;;OAIG;IACH,QAAQ,EAAE,SAAS,MAAM,EAAE,CAAC;IAC5B,4BAA4B;IAC5B,IAAI,EAAE,UAAU,CAAC;IACjB;;;;OAIG;IACH,UAAU,CAAC,EAAE,SAAS,CAAC,SAAS,eAAe,EAAE,CAAC,EAAE,GAAG,SAAS,CAAC;IACjE,qEAAqE;IACrE,IAAI,CAAC,EAAE,IAAI,CAAC;CACb;AAgBD;;;;;;;;GAQG;AACH,eAAO,MAAM,kBAAkB,EAAE,WAAW,CAAC,MAAM,EAAE,eAAe,CAkKlE,CAAC;AAEH,8DAA8D;AAC9D,eAAO,MAAM,kBAAkB,EAAE,SAAS,MAAM,EAA0C,CAAC;AAE3F;;;;;GAKG;AACH,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAIzD;AAED;;;;GAIG;AACH,wBAAgB,aAAa,CAAC,KAAK,EAAE,eAAe,GAAG,MAAM,GAAG,SAAS,CAExE;AAED;;;GAGG;AACH,wBAAgB,UAAU,CAAC,KAAK,EAAE,eAAe,GAAG,MAAM,CAGzD;AAED;;;;;;GAMG;AACH,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,eAAe,EAAE,KAAK,EAAE,UAAU,GAAG,OAAO,CASnF"}