@glw907/cairn-cms 0.5.0 → 0.5.1

package/dist/components/NavTree.svelte

@@ -0,0 +1,128 @@
+<script lang="ts">
+  // The navigation tree editor (Pass L). Edits a local copy of the menu tree and posts the whole
+  // tree as JSON to the `save` action. DaisyUI primitives under the Warm Stone admin theme. Drag a
+  // row up or down to reorder within its level; use Indent/Outdent to nest under the previous
+  // sibling or promote a level (capped at the menu's maxDepth). The engine validates on save.
+  import { untrack } from 'svelte';
+  import type { NavLoadData } from '../sveltekit';
+  import type { NavNode } from '../nav';
+
+  let { data }: { data: NavLoadData } = $props();
+
+  // A flat, ordered working model is far simpler to drag-edit than a recursive one: each row
+  // carries an explicit depth, and the tree is rebuilt from (order + depth) only at submit time.
+  interface Row {
+    id: number;
+    depth: number;
+    label: string;
+    url: string;
+  }
+
+  let nextId = 1;
+  function flatten(nodes: NavNode[], depth: number, out: Row[]): Row[] {
+    for (const n of nodes) {
+      out.push({ id: nextId++, depth, label: n.label, url: n.url ?? '' });
+      if (n.children?.length) flatten(n.children, depth + 1, out);
+    }
+    return out;
+  }
+
+  let rows = $state<Row[]>(untrack(() => flatten(data.tree, 0, [])));
+  const maxDepthIndex = $derived(data.menu.maxDepth - 1); // depth is 0-based here
+
+  // Rebuild the nested tree from the flat rows by depth, then serialize for the hidden field.
+  function toTree(list: Row[]): NavNode[] {
+    const root: NavNode[] = [];
+    const stack: { depth: number; node: NavNode }[] = [];
+    for (const r of list) {
+      const node: NavNode = { label: r.label.trim() };
+      if (r.url.trim()) node.url = r.url.trim();
+      while (stack.length && stack[stack.length - 1].depth >= r.depth) stack.pop();
+      if (stack.length) (stack[stack.length - 1].node.children ??= []).push(node);
+      else root.push(node);
+      stack.push({ depth: r.depth, node });
+    }
+    return root;
+  }
+
+  const treeJson = $derived(JSON.stringify(toTree(rows)));
+
+  function addRow() {
+    rows = [...rows, { id: nextId++, depth: 0, label: 'New item', url: '' }];
+  }
+  function removeRow(id: number) {
+    rows = rows.filter((r) => r.id !== id);
+  }
+  function indent(i: number) {
+    // A row may nest at most one level deeper than the row above it, and never past the cap.
+    if (i === 0) return;
+    const ceiling = Math.min(rows[i - 1].depth + 1, maxDepthIndex);
+    if (rows[i].depth < ceiling) rows[i].depth += 1;
+  }
+  function outdent(i: number) {
+    if (rows[i].depth > 0) rows[i].depth -= 1;
+  }
+
+  let dragFrom = $state<number | null>(null);
+  function onDrop(to: number) {
+    if (dragFrom === null || dragFrom === to) return;
+    const next = [...rows];
+    const [moved] = next.splice(dragFrom, 1);
+    next.splice(to, 0, moved);
+    rows = next;
+    dragFrom = null;
+  }
+</script>
+
+<div class="cairn-admin">
+  <div class="flex items-center justify-between">
+    <h1 class="text-xl font-semibold">{data.menu.label}</h1>
+    <button type="button" class="btn btn-sm" onclick={addRow}>Add item</button>
+  </div>
+
+  {#if data.saved}
+    <div class="alert alert-success mt-3">Navigation saved.</div>
+  {/if}
+  {#if data.error}
+    <div class="alert alert-error mt-3">{data.error}</div>
+  {/if}
+
+  <form method="POST" action="?/save" class="mt-4">
+    <input type="hidden" name="tree" value={treeJson} />
+    <ul class="menu w-full gap-1">
+      {#each rows as row, i (row.id)}
+        <li
+          draggable="true"
+          ondragstart={() => (dragFrom = i)}
+          ondragover={(e) => e.preventDefault()}
+          ondrop={() => onDrop(i)}
+          style={`margin-left:${row.depth * 1.5}rem`}
+        >
+          <div class="flex items-center gap-2 p-2">
+            <span class="cursor-grab opacity-40" aria-hidden="true">&#x283F;</span>
+            <input class="input input-sm input-bordered flex-1" placeholder="Label" bind:value={row.label} />
+            <input
+              class="input input-sm input-bordered flex-1"
+              placeholder="/path or https://…"
+              list="cairn-nav-pages"
+              bind:value={row.url}
+            />
+            <button type="button" class="btn btn-xs btn-ghost" onclick={() => outdent(i)} aria-label="Outdent">&larr;</button>
+            <button type="button" class="btn btn-xs btn-ghost" onclick={() => indent(i)} aria-label="Indent">&rarr;</button>
+            <button type="button" class="btn btn-xs btn-ghost text-error" onclick={() => removeRow(row.id)} aria-label="Remove">&times;</button>
+          </div>
+        </li>
+      {/each}
+    </ul>
+
+    <datalist id="cairn-nav-pages">
+      {#each data.pages as p (p.url)}
+        <option value={p.url}>{p.label}</option>
+      {/each}
+    </datalist>
+
+    <div class="mt-4">
+      <button type="submit" class="btn btn-primary btn-sm">Save navigation</button>
+    </div>
+  </form>
+</div>

package/dist/components/NavTree.svelte.d.ts

@@ -0,0 +1,8 @@
+import type { NavLoadData } from '../sveltekit';
+type $$ComponentProps = {
+    data: NavLoadData;
+};
+declare const NavTree: import("svelte").Component<$$ComponentProps, {}, "">;
+type NavTree = ReturnType<typeof NavTree>;
+export default NavTree;
+//# sourceMappingURL=NavTree.svelte.d.ts.map

package/dist/components/NavTree.svelte.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"NavTree.svelte.d.ts","sourceRoot":"","sources":["../../src/lib/components/NavTree.svelte.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAY/C,KAAK,gBAAgB,GAAI;IAAE,IAAI,EAAE,WAAW,CAAA;CAAE,CAAC;AAiHhD,QAAA,MAAM,OAAO,sDAAwC,CAAC;AACtD,KAAK,OAAO,GAAG,UAAU,CAAC,OAAO,OAAO,CAAC,CAAC;AAC1C,eAAe,OAAO,CAAC"}

package/dist/components/index.d.ts

@@ -1,7 +1,9 @@
 export { default as AdminLayout } from './AdminLayout.svelte';
-export { default as AdminList } from './AdminList.svelte';
+export { default as CollectionList } from './CollectionList.svelte';
 export { default as LoginPage } from './LoginPage.svelte';
 export { default as ConfirmPage } from './ConfirmPage.svelte';
 export { default as EditPage } from './EditPage.svelte';
 export { default as ManageAdmins } from './ManageAdmins.svelte';
+export { default as ComponentPalette } from './ComponentPalette.svelte';
+export { default as NavTree } from './NavTree.svelte';
 //# sourceMappingURL=index.d.ts.map

package/dist/components/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/lib/components/index.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,OAAO,IAAI,WAAW,EAAE,MAAM,sBAAsB,CAAC;AAC9D,OAAO,EAAE,OAAO,IAAI,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAC1D,OAAO,EAAE,OAAO,IAAI,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAC1D,OAAO,EAAE,OAAO,IAAI,WAAW,EAAE,MAAM,sBAAsB,CAAC;AAC9D,OAAO,EAAE,OAAO,IAAI,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AACxD,OAAO,EAAE,OAAO,IAAI,YAAY,EAAE,MAAM,uBAAuB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/lib/components/index.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,OAAO,IAAI,WAAW,EAAE,MAAM,sBAAsB,CAAC;AAC9D,OAAO,EAAE,OAAO,IAAI,cAAc,EAAE,MAAM,yBAAyB,CAAC;AACpE,OAAO,EAAE,OAAO,IAAI,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAC1D,OAAO,EAAE,OAAO,IAAI,WAAW,EAAE,MAAM,sBAAsB,CAAC;AAC9D,OAAO,EAAE,OAAO,IAAI,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AACxD,OAAO,EAAE,OAAO,IAAI,YAAY,EAAE,MAAM,uBAAuB,CAAC;AAChE,OAAO,EAAE,OAAO,IAAI,gBAAgB,EAAE,MAAM,2BAA2B,CAAC;AACxE,OAAO,EAAE,OAAO,IAAI,OAAO,EAAE,MAAM,kBAAkB,CAAC"}

package/dist/components/index.js

@@ -1,8 +1,10 @@
 // cairn-cms admin UI shell. Consumers import from 'cairn-cms/components'; each site's
 // admin route `.svelte` files are one-line shims around these.
 export { default as AdminLayout } from './AdminLayout.svelte';
-export { default as AdminList } from './AdminList.svelte';
+export { default as CollectionList } from './CollectionList.svelte';
 export { default as LoginPage } from './LoginPage.svelte';
 export { default as ConfirmPage } from './ConfirmPage.svelte';
 export { default as EditPage } from './EditPage.svelte';
 export { default as ManageAdmins } from './ManageAdmins.svelte';
+export { default as ComponentPalette } from './ComponentPalette.svelte';
+export { default as NavTree } from './NavTree.svelte';

package/dist/editor.d.ts

@@ -0,0 +1,25 @@
+interface CartaInput {
+    getSelection(): {
+        start: number;
+        end: number;
+        direction: string;
+        slice: string;
+    };
+    insertAt(position: number, text: string): void;
+}
+interface CartaLike {
+    input?: CartaInput;
+}
+/** The programmatic editing surface the admin relies on. */
+export interface MarkdownEditor {
+    /** Insert a component or template at the current cursor position. */
+    insertComponent(template: string): void;
+}
+/**
+ * Wrap a Carta instance as a MarkdownEditor. Takes a getter (not the instance) because the
+ * EditPage component creates the Carta instance once and `carta.input` is only populated after
+ * the editor mounts; reading it lazily at call time avoids capturing an undefined `input`.
+ */
+export declare function cartaEditor(getCarta: () => CartaLike): MarkdownEditor;
+export {};
+//# sourceMappingURL=editor.d.ts.map

package/dist/editor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"editor.d.ts","sourceRoot":"","sources":["../src/lib/editor.ts"],"names":[],"mappings":"AAQA,UAAU,UAAU;IAClB,YAAY,IAAI;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC;IACjF,QAAQ,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;CAChD;AAED,UAAU,SAAS;IACjB,KAAK,CAAC,EAAE,UAAU,CAAC;CACpB;AAED,4DAA4D;AAC5D,MAAM,WAAW,cAAc;IAC7B,qEAAqE;IACrE,eAAe,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;CACzC;AAED;;;;GAIG;AACH,wBAAgB,WAAW,CAAC,QAAQ,EAAE,MAAM,SAAS,GAAG,cAAc,CASrE"}

package/dist/editor.js

@@ -0,0 +1,20 @@
+// cairn-core: the editor cursor seam (decision P3). The component palette and any later insert
+// control talk to MarkdownEditor, never to Carta directly, so a swap to a different editing
+// engine is contained to this file. Verified against carta-md@4.11: `input.getSelection()` and
+// `input.insertAt(pos, text)` are public on the InputEnhancer.
+/**
+ * Wrap a Carta instance as a MarkdownEditor. Takes a getter (not the instance) because the
+ * EditPage component creates the Carta instance once and `carta.input` is only populated after
+ * the editor mounts; reading it lazily at call time avoids capturing an undefined `input`.
+ */
+export function cartaEditor(getCarta) {
+    return {
+        insertComponent(template) {
+            const input = getCarta().input;
+            if (!input)
+                return; // editor not mounted yet; nothing to insert into
+            const { start } = input.getSelection();
+            input.insertAt(start, template);
+        },
+    };
+}

package/dist/frontmatter.d.ts

@@ -0,0 +1,3 @@
+/** A frontmatter date value (Date or string) to the `YYYY-MM-DD` an `<input type="date">` expects. */
+export declare function dateInputValue(value: unknown): string;
+//# sourceMappingURL=frontmatter.d.ts.map

package/dist/frontmatter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"frontmatter.d.ts","sourceRoot":"","sources":["../src/lib/frontmatter.ts"],"names":[],"mappings":"AAMA,sGAAsG;AACtG,wBAAgB,cAAc,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CASrD"}

package/dist/frontmatter.js

@@ -0,0 +1,16 @@
+// cairn-core: coerce a frontmatter value to the YYYY-MM-DD string an <input type="date"> wants.
+// gray-matter parses an unquoted YAML date (date: 2026-05-14) into a JS Date, so a string-only
+// read leaves the date input empty and drops the date on save. This normalizes a Date or an
+// ISO-ish string to YYYY-MM-DD. A parsed YAML date is UTC midnight, so slicing the ISO string
+// avoids a local-timezone shift. Internal (not re-exported from the barrel), like utils.ts.
+/** A frontmatter date value (Date or string) to the `YYYY-MM-DD` an `<input type="date">` expects. */
+export function dateInputValue(value) {
+    if (value instanceof Date) {
+        return Number.isNaN(value.getTime()) ? '' : value.toISOString().slice(0, 10);
+    }
+    if (typeof value === 'string') {
+        const match = value.match(/^\d{4}-\d{2}-\d{2}/);
+        return match ? match[0] : '';
+    }
+    return '';
+}

package/dist/index.d.ts

@@ -3,5 +3,7 @@ export * from './github';
 export * from './carta';
 export * from './content';
 export * from './adapter';
+export * from './slug';
 export * from './render';
+export * from './nav';
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/lib/index.ts"],"names":[],"mappings":"AAEA,cAAc,SAAS,CAAC;AACxB,cAAc,UAAU,CAAC;AACzB,cAAc,SAAS,CAAC;AACxB,cAAc,WAAW,CAAC;AAC1B,cAAc,WAAW,CAAC;AAC1B,cAAc,UAAU,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/lib/index.ts"],"names":[],"mappings":"AAEA,cAAc,SAAS,CAAC;AACxB,cAAc,UAAU,CAAC;AACzB,cAAc,SAAS,CAAC;AACxB,cAAc,WAAW,CAAC;AAC1B,cAAc,WAAW,CAAC;AAC1B,cAAc,QAAQ,CAAC;AACvB,cAAc,UAAU,CAAC;AACzB,cAAc,OAAO,CAAC"}

package/dist/index.js

@@ -5,4 +5,6 @@ export * from './github';
 export * from './carta';
 export * from './content';
 export * from './adapter';
+export * from './slug';
 export * from './render';
+export * from './nav';

package/dist/nav.d.ts

@@ -0,0 +1,58 @@
+/** One navigation node. `url` omitted/empty is a label-only grouping header; `children` omitted is a leaf. */
+export interface NavNode {
+    label: string;
+    url?: string;
+    children?: NavNode[];
+}
+/** Total node cap across the whole tree, a guard against a runaway payload. */
+export declare const MAX_NAV_NODES = 200;
+export declare class NavValidationError extends Error {
+    constructor(message: string);
+}
+/**
+ * Validate and normalize an untrusted value into a NavNode[]: arrays only, non-empty labels,
+ * depth within `maxDepth` (1 = flat), bounded node count, and only the three known keys kept.
+ * Throws NavValidationError on any violation. Used by `navSave` before writing.
+ */
+export declare function validateNavTree(value: unknown, maxDepth: number): NavNode[];
+/**
+ * Shape of the YAML site-config file. Unknown keys are ignored so the file can grow without
+ * an engine change. Read at build time by the public site.
+ */
+export interface SiteConfig {
+    siteName: string;
+    description?: string;
+    author?: string;
+    url?: string;
+    locale?: string;
+    /** Named navigation menus, each a NavNode[] (normalized by extractMenu). */
+    menus?: Record<string, unknown>;
+    email?: {
+        sender?: string;
+        senderName?: string;
+    };
+    footer?: {
+        copyrightName?: string;
+    };
+    settings?: {
+        feedMaxItems?: number;
+        homepageFeaturedCount?: number;
+        postTags?: string[];
+        [key: string]: unknown;
+    };
+}
+export declare class SiteConfigError extends Error {
+    constructor(message: string);
+}
+/** Parse the YAML site-config text into a typed object. Throws SiteConfigError on a malformed root. */
+export declare function parseSiteConfig(raw: string): SiteConfig;
+/** Extract one named menu from a parsed config and validate it. Returns [] when the menu is absent. */
+export declare function extractMenu(config: SiteConfig, name: string, maxDepth: number): NavNode[];
+/**
+ * Replace one named menu in the YAML site-config text and re-serialize, preserving every other
+ * top-level key (siteName, other menus, settings, ...). The `/admin/nav` editor commits the result.
+ * Parses into a Document so the rest of the file round-trips; YAML comments are not preserved
+ * (an accepted trade), but data keys are. A leaf node serializes without `url`/`children` keys.
+ */
+export declare function setMenu(raw: string, name: string, tree: NavNode[]): string;
+//# sourceMappingURL=nav.d.ts.map

package/dist/nav.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"nav.d.ts","sourceRoot":"","sources":["../src/lib/nav.ts"],"names":[],"mappings":"AAOA,8GAA8G;AAC9G,MAAM,WAAW,OAAO;IACtB,KAAK,EAAE,MAAM,CAAC;IACd,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,QAAQ,CAAC,EAAE,OAAO,EAAE,CAAC;CACtB;AAED,+EAA+E;AAC/E,eAAO,MAAM,aAAa,MAAM,CAAC;AAEjC,qBAAa,kBAAmB,SAAQ,KAAK;gBAC/B,OAAO,EAAE,MAAM;CAI5B;AAED;;;;GAIG;AACH,wBAAgB,eAAe,CAAC,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,EAAE,CAuB3E;AAED;;;GAGG;AACH,MAAM,WAAW,UAAU;IACzB,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,4EAA4E;IAC5E,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAChC,KAAK,CAAC,EAAE;QAAE,MAAM,CAAC,EAAE,MAAM,CAAC;QAAC,UAAU,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IACjD,MAAM,CAAC,EAAE;QAAE,aAAa,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IACpC,QAAQ,CAAC,EAAE;QACT,YAAY,CAAC,EAAE,MAAM,CAAC;QACtB,qBAAqB,CAAC,EAAE,MAAM,CAAC;QAC/B,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;QACpB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;KACxB,CAAC;CACH;AAED,qBAAa,eAAgB,SAAQ,KAAK;gBAC5B,OAAO,EAAE,MAAM;CAI5B;AAED,uGAAuG;AACvG,wBAAgB,eAAe,CAAC,GAAG,EAAE,MAAM,GAAG,UAAU,CAUvD;AAED,uGAAuG;AACvG,wBAAgB,WAAW,CAAC,MAAM,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,EAAE,CAIzF;AAED;;;;;GAKG;AACH,wBAAgB,OAAO,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,MAAM,CAO1E"}

package/dist/nav.js

@@ -0,0 +1,86 @@
+// cairn-core: the navigation tree. A menu lives in the site's git-committed `site.config.yaml`
+// under `menus.<name>`, read at build time by the public layout and edited from `/admin/nav`,
+// which commits the file back through the GitHub-App pipeline. The engine returns data only; each
+// site renders the tree with its own header markup.
+import { parse as parseYaml, parseDocument } from 'yaml';
+/** Total node cap across the whole tree, a guard against a runaway payload. */
+export const MAX_NAV_NODES = 200;
+export class NavValidationError extends Error {
+    constructor(message) {
+        super(message);
+        this.name = 'NavValidationError';
+    }
+}
+/**
+ * Validate and normalize an untrusted value into a NavNode[]: arrays only, non-empty labels,
+ * depth within `maxDepth` (1 = flat), bounded node count, and only the three known keys kept.
+ * Throws NavValidationError on any violation. Used by `navSave` before writing.
+ */
+export function validateNavTree(value, maxDepth) {
+    let count = 0;
+    function walk(nodes, depth) {
+        if (!Array.isArray(nodes))
+            throw new NavValidationError('Navigation must be a list of items');
+        if (depth > maxDepth)
+            throw new NavValidationError(`Navigation is nested deeper than ${maxDepth} levels`);
+        return nodes.map((raw) => {
+            if (typeof raw !== 'object' || raw === null)
+                throw new NavValidationError('Each item must be an object');
+            const item = raw;
+            const label = typeof item.label === 'string' ? item.label.trim() : '';
+            if (!label)
+                throw new NavValidationError('Each item needs a label');
+            if (++count > MAX_NAV_NODES)
+                throw new NavValidationError('Too many navigation items');
+            const node = { label };
+            if (typeof item.url === 'string' && item.url.trim())
+                node.url = item.url.trim();
+            if (item.children !== undefined) {
+                const children = walk(item.children, depth + 1);
+                if (children.length)
+                    node.children = children;
+            }
+            return node;
+        });
+    }
+    return walk(value, 1);
+}
+export class SiteConfigError extends Error {
+    constructor(message) {
+        super(message);
+        this.name = 'SiteConfigError';
+    }
+}
+/** Parse the YAML site-config text into a typed object. Throws SiteConfigError on a malformed root. */
+export function parseSiteConfig(raw) {
+    const parsed = parseYaml(raw);
+    if (typeof parsed !== 'object' || parsed === null || Array.isArray(parsed)) {
+        throw new SiteConfigError('Site config must be a YAML mapping');
+    }
+    const { siteName } = parsed;
+    if (typeof siteName !== 'string' || !siteName.trim()) {
+        throw new SiteConfigError('Site config needs a siteName');
+    }
+    return parsed;
+}
+/** Extract one named menu from a parsed config and validate it. Returns [] when the menu is absent. */
+export function extractMenu(config, name, maxDepth) {
+    const menu = config.menus?.[name];
+    if (menu === undefined)
+        return [];
+    return validateNavTree(menu, maxDepth);
+}
+/**
+ * Replace one named menu in the YAML site-config text and re-serialize, preserving every other
+ * top-level key (siteName, other menus, settings, ...). The `/admin/nav` editor commits the result.
+ * Parses into a Document so the rest of the file round-trips; YAML comments are not preserved
+ * (an accepted trade), but data keys are. A leaf node serializes without `url`/`children` keys.
+ */
+export function setMenu(raw, name, tree) {
+    const doc = parseDocument(raw);
+    if (doc.get('siteName') === undefined) {
+        throw new SiteConfigError('Site config must be a mapping with a siteName');
+    }
+    doc.setIn(['menus', name], tree);
+    return doc.toString();
+}

package/dist/slug.d.ts

@@ -0,0 +1,7 @@
+/**
+ * Lowercase a title into a filename-safe slug stem.
+ * Apostrophes are dropped so "Geoff's" becomes "geoffs" (no spurious hyphen).
+ * All other non-alphanumeric runs become a single hyphen; leading/trailing hyphens are trimmed.
+ */
+export declare function slugify(title: string): string;
+//# sourceMappingURL=slug.d.ts.map

package/dist/slug.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"slug.d.ts","sourceRoot":"","sources":["../src/lib/slug.ts"],"names":[],"mappings":"AAIA;;;;GAIG;AACH,wBAAgB,OAAO,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAM7C"}

package/dist/slug.js

@@ -0,0 +1,15 @@
+// cairn-core: derive a filename-safe slug stem from a human title, for the create-entry form.
+// The admin is filename-based (Pass E): this produces the editable stem an author can adjust,
+// matching the server-side SLUG_RE (lowercase alphanumerics and internal hyphens). Pure.
+/**
+ * Lowercase a title into a filename-safe slug stem.
+ * Apostrophes are dropped so "Geoff's" becomes "geoffs" (no spurious hyphen).
+ * All other non-alphanumeric runs become a single hyphen; leading/trailing hyphens are trimmed.
+ */
+export function slugify(title) {
+    return title
+        .toLowerCase()
+        .replace(/'/g, '')
+        .replace(/[^a-z0-9]+/g, '-')
+        .replace(/^-+|-+$/g, '');
+}

package/dist/sveltekit/index.d.ts

@@ -1,6 +1,6 @@
 import type { CairnUser } from '../auth/guard';
-import { type RepoFile } from '../github';
 import { type CairnAdapter, type CairnField } from '../adapter';
+import { type NavNode } from '../nav';
 /** The `platform.env` bindings the content routes read. All optional; the handlers guard. */
 export interface AdminEnv {
     GITHUB_APP_ID?: string;
@@ -12,17 +12,31 @@ interface PlatformEvent {
         env?: AdminEnv;
     };
 }
+/** A collection reduced to what the sidebar nav needs (no plugin graph crosses to the client). */
+export interface NavCollection {
+    type: string;
+    label: string;
+}
 export interface AdminLayoutData {
     user: CairnUser | null;
     siteName: string;
     pathname: string;
+    collections: NavCollection[];
+    /** Managed menus (name+label only) so the shell can show a Navigation entry. */
+    navMenus: {
+        name: string;
+        label: string;
+    }[];
+    /** Whether the viewer may manage navigation (gates the Navigation nav entry). */
+    canManageNav: boolean;
 }
 /**
- * Branding + session for every admin page. `siteName` flows from the adapter without pulling
- * its plugin graph into client bundles; the import stays server-side in the layout load.
- * `pathname` lets the shared shell highlight the active nav item without a `$app/*` import
- * (those kit virtual modules have no types outside a kit app, so they can't live in the
- * package); reading `event.url` here also opts the layout load into rerunning on navigation.
+ * Branding, session, and collection nav for every admin page. `siteName` and the collection
+ * list flow from the adapter without pulling its plugin graph into client bundles (the import
+ * stays server-side in the layout load; only `{type,label}` crosses). `pathname` lets the
+ * shared shell highlight the active nav item without a `$app/*` import (those kit virtual
+ * modules have no types outside a kit app); reading `event.url` also opts the layout load into
+ * rerunning on navigation, keeping the active class correct.
  */
 export declare function adminLayoutLoad(event: {
     locals: {
@@ -30,20 +44,66 @@ export declare function adminLayoutLoad(event: {
     };
     url: URL;
 }, adapter: CairnAdapter): AdminLayoutData;
-export interface AdminCollectionList {
+/**
+ * The `/admin` index has no content of its own now that each collection is its own page; send
+ * the editor straight to the first collection's entries list (a Sveltia-style landing).
+ */
+export declare function adminIndexRedirect(adapter: CairnAdapter): never;
+/** One entry row: id (filename stem), display title, optional date, draft flag. */
+export interface CollectionEntry {
+    id: string;
+    path: string;
+    title: string;
+    date: string | null;
+    draft: boolean;
+}
+export interface CollectionListData {
     type: string;
     label: string;
-    files: RepoFile[];
+    kind: 'page' | 'story';
+    entries: CollectionEntry[];
+    /** Set when the directory listing itself failed (rate limit, network). */
     error?: string;
+    /** A create-flow error bounced back via `?error=` (an invalid or taken slug). */
+    formError: string | null;
+    /** Whether the viewer may create an entry in this collection (page-create is owner-only). */
+    canCreate: boolean;
 }
-/** List every collection's markdown files. A failed listing degrades to an inline error. */
-export declare function adminListLoad(event: PlatformEvent, adapter: CairnAdapter): Promise<{
-    collections: AdminCollectionList[];
-}>;
+/**
+ * List one collection's entries, reading each file's frontmatter for the display title, date,
+ * and draft badge. Reads run in parallel; a single failed read degrades that row to the slug
+ * (rather than failing the page), and a failed directory listing returns an inline `error`.
+ * Collections are small here; the 1,000-entry / Git-Trees sharding concern is risk #11, deferred.
+ */
+export declare function collectionListLoad(event: PlatformEvent & {
+    params: {
+        collection: string;
+    };
+    url: URL;
+    locals: {
+        user: CairnUser | null;
+    };
+}, adapter: CairnAdapter): Promise<CollectionListData>;
+/**
+ * The "New entry" form action. Validates the requested slug, rejects one that already exists,
+ * then redirects into the editor in create mode (`?new=1`, where `editLoad` serves a blank
+ * document and `saveCommit`'s create path commits a new file). cairn is filename-based, so the
+ * slug is the filename stem the author types; a title-driven auto-slug is a later (Pass K) concern.
+ */
+export declare function createEntry(event: PlatformEvent & {
+    params: {
+        collection: string;
+    };
+    locals: {
+        user: CairnUser | null;
+    };
+    request: Request;
+}, adapter: CairnAdapter): Promise<never>;
 export interface EditData {
     type: string;
     id: string;
     label: string;
+    kind: 'page' | 'story';
     fields: CairnField[];
     path: string;
     body: string;
@@ -51,6 +111,8 @@ export interface EditData {
     title: string;
     saved: boolean;
     error: string | null;
+    /** True when editing a not-yet-committed new entry (reached via `?new=1`). */
+    isNew: boolean;
 }
 export declare function editLoad(event: PlatformEvent & {
     params: {
@@ -65,6 +127,34 @@ export declare function saveCommit(event: PlatformEvent & {
         user: CairnUser | null;
     };
 }, adapter: CairnAdapter): Promise<never>;
+/** A page the picker can insert: its display label and the URL the nav item points at. */
+export interface NavPageOption {
+    label: string;
+    url: string;
+}
+export interface NavLoadData {
+    menu: {
+        name: string;
+        label: string;
+        maxDepth: number;
+    };
+    tree: NavNode[];
+    pages: NavPageOption[];
+    saved: boolean;
+    error: string | null;
+}
+export declare function navLoad(event: PlatformEvent & {
+    locals: {
+        user: CairnUser | null;
+    };
+    url: URL;
+}, adapter: CairnAdapter): Promise<NavLoadData>;
+export declare function navSave(event: PlatformEvent & {
+    locals: {
+        user: CairnUser | null;
+    };
+    request: Request;
+}, adapter: CairnAdapter): Promise<never>;
 export interface HealthData {
     ok: boolean;
     checks: {

package/dist/sveltekit/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/lib/sveltekit/index.ts"],"names":[],"mappings":"AAYA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,eAAe,CAAC;AAC/C,OAAO,EAOL,KAAK,QAAQ,EACd,MAAM,WAAW,CAAC;AAEnB,OAAO,EAAuC,KAAK,YAAY,EAAE,KAAK,UAAU,EAAE,MAAM,YAAY,CAAC;AAErG,6FAA6F;AAC7F,MAAM,WAAW,QAAQ;IACvB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,0BAA0B,CAAC,EAAE,MAAM,CAAC;IACpC,0BAA0B,CAAC,EAAE,MAAM,CAAC;CACrC;AAED,UAAU,aAAa;IACrB,QAAQ,CAAC,EAAE;QAAE,GAAG,CAAC,EAAE,QAAQ,CAAA;KAAE,CAAC;CAC/B;AA2BD,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,SAAS,GAAG,IAAI,CAAC;IACvB,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED;;;;;;GAMG;AACH,wBAAgB,eAAe,CAC7B,KAAK,EAAE;IAAE,MAAM,EAAE;QAAE,IAAI,EAAE,SAAS,GAAG,IAAI,CAAA;KAAE,CAAC;IAAC,GAAG,EAAE,GAAG,CAAA;CAAE,EACvD,OAAO,EAAE,YAAY,GACpB,eAAe,CAEjB;AAID,MAAM,WAAW,mBAAmB;IAClC,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,QAAQ,EAAE,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,4FAA4F;AAC5F,wBAAsB,aAAa,CACjC,KAAK,EAAE,aAAa,EACpB,OAAO,EAAE,YAAY,GACpB,OAAO,CAAC;IAAE,WAAW,EAAE,mBAAmB,EAAE,CAAA;CAAE,CAAC,CAajD;AAID,MAAM,WAAW,QAAQ;IACvB,IAAI,EAAE,MAAM,CAAC;IACb,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,UAAU,EAAE,CAAC;IACrB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACrC,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,OAAO,CAAC;IACf,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;CACtB;AAED,wBAAsB,QAAQ,CAC5B,KAAK,EAAE,aAAa,GAAG;IAAE,MAAM,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,EAAE,EAAE,MAAM,CAAA;KAAE,CAAC;IAAC,GAAG,EAAE,GAAG,CAAA;CAAE,EACzE,OAAO,EAAE,YAAY,GACpB,OAAO,CAAC,QAAQ,CAAC,CAyBnB;AAID,wBAAsB,UAAU,CAC9B,KAAK,EAAE,aAAa,GAAG;IAAE,OAAO,EAAE,OAAO,CAAC;IAAC,MAAM,EAAE;QAAE,IAAI,EAAE,SAAS,GAAG,IAAI,CAAA;KAAE,CAAA;CAAE,EAC/E,OAAO,EAAE,YAAY,GACpB,OAAO,CAAC,KAAK,CAAC,CAoDhB;AAID,MAAM,WAAW,UAAU;IACzB,EAAE,EAAE,OAAO,CAAC;IACZ,MAAM,EAAE;QAAE,gBAAgB,EAAE;YAAE,EAAE,EAAE,OAAO,CAAC;YAAC,MAAM,CAAC,EAAE,MAAM,CAAA;SAAE,CAAA;KAAE,CAAC;CAChE;AAED;;;;GAIG;AACH,wBAAsB,UAAU,CAAC,KAAK,EAAE,aAAa,GAAG,OAAO,CAAC,UAAU,CAAC,CAS1E"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/lib/sveltekit/index.ts"],"names":[],"mappings":"AAYA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,eAAe,CAAC;AAY/C,OAAO,EAAuC,KAAK,YAAY,EAAE,KAAK,UAAU,EAAE,MAAM,YAAY,CAAC;AACrG,OAAO,EAA0D,KAAK,OAAO,EAAE,MAAM,QAAQ,CAAC;AAE9F,6FAA6F;AAC7F,MAAM,WAAW,QAAQ;IACvB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,0BAA0B,CAAC,EAAE,MAAM,CAAC;IACpC,0BAA0B,CAAC,EAAE,MAAM,CAAC;CACrC;AAED,UAAU,aAAa;IACrB,QAAQ,CAAC,EAAE;QAAE,GAAG,CAAC,EAAE,QAAQ,CAAA;KAAE,CAAC;CAC/B;AA2BD,kGAAkG;AAClG,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,SAAS,GAAG,IAAI,CAAC;IACvB,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,aAAa,EAAE,CAAC;IAC7B,gFAAgF;IAChF,QAAQ,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;IAC5C,iFAAiF;IACjF,YAAY,EAAE,OAAO,CAAC;CACvB;AAED;;;;;;;GAOG;AACH,wBAAgB,eAAe,CAC7B,KAAK,EAAE;IAAE,MAAM,EAAE;QAAE,IAAI,EAAE,SAAS,GAAG,IAAI,CAAA;KAAE,CAAC;IAAC,GAAG,EAAE,GAAG,CAAA;CAAE,EACvD,OAAO,EAAE,YAAY,GACpB,eAAe,CASjB;AAED;;;GAGG;AACH,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,YAAY,GAAG,KAAK,CAI/D;AAID,mFAAmF;AACnF,MAAM,WAAW,eAAe;IAC9B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,KAAK,EAAE,OAAO,CAAC;CAChB;AAED,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC;IACvB,OAAO,EAAE,eAAe,EAAE,CAAC;IAC3B,0EAA0E;IAC1E,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,iFAAiF;IACjF,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,6FAA6F;IAC7F,SAAS,EAAE,OAAO,CAAC;CACpB;AASD;;;;;GAKG;AACH,wBAAsB,kBAAkB,CACtC,KAAK,EAAE,aAAa,GAAG;IAAE,MAAM,EAAE;QAAE,UAAU,EAAE,MAAM,CAAA;KAAE,CAAC;IAAC,GAAG,EAAE,GAAG,CAAC;IAAC,MAAM,EAAE;QAAE,IAAI,EAAE,SAAS,GAAG,IAAI,CAAA;KAAE,CAAA;CAAE,EACvG,OAAO,EAAE,YAAY,GACpB,OAAO,CAAC,kBAAkB,CAAC,CA0D7B;AAOD;;;;;GAKG;AACH,wBAAsB,WAAW,CAC/B,KAAK,EAAE,aAAa,GAAG;IACrB,MAAM,EAAE;QAAE,UAAU,EAAE,MAAM,CAAA;KAAE,CAAC;IAC/B,MAAM,EAAE;QAAE,IAAI,EAAE,SAAS,GAAG,IAAI,CAAA;KAAE,CAAC;IACnC,OAAO,EAAE,OAAO,CAAC;CAClB,EACD,OAAO,EAAE,YAAY,GACpB,OAAO,CAAC,KAAK,CAAC,CAsBhB;AAID,MAAM,WAAW,QAAQ;IACvB,IAAI,EAAE,MAAM,CAAC;IACb,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC;IACvB,MAAM,EAAE,UAAU,EAAE,CAAC;IACrB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACrC,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,OAAO,CAAC;IACf,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,8EAA8E;IAC9E,KAAK,EAAE,OAAO,CAAC;CAChB;AAED,wBAAsB,QAAQ,CAC5B,KAAK,EAAE,aAAa,GAAG;IAAE,MAAM,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,EAAE,EAAE,MAAM,CAAA;KAAE,CAAC;IAAC,GAAG,EAAE,GAAG,CAAA;CAAE,EACzE,OAAO,EAAE,YAAY,GACpB,OAAO,CAAC,QAAQ,CAAC,CAqCnB;AAID,wBAAsB,UAAU,CAC9B,KAAK,EAAE,aAAa,GAAG;IAAE,OAAO,EAAE,OAAO,CAAC;IAAC,MAAM,EAAE;QAAE,IAAI,EAAE,SAAS,GAAG,IAAI,CAAA;KAAE,CAAA;CAAE,EAC/E,OAAO,EAAE,YAAY,GACpB,OAAO,CAAC,KAAK,CAAC,CAqDhB;AAID,0FAA0F;AAC1F,MAAM,WAAW,aAAa;IAC5B,KAAK,EAAE,MAAM,CAAC;IACd,GAAG,EAAE,MAAM,CAAC;CACb;AAED,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAA;KAAE,CAAC;IACxD,IAAI,EAAE,OAAO,EAAE,CAAC;IAChB,KAAK,EAAE,aAAa,EAAE,CAAC;IACvB,KAAK,EAAE,OAAO,CAAC;IACf,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;CACtB;AAmBD,wBAAsB,OAAO,CAC3B,KAAK,EAAE,aAAa,GAAG;IAAE,MAAM,EAAE;QAAE,IAAI,EAAE,SAAS,GAAG,IAAI,CAAA;KAAE,CAAC;IAAC,GAAG,EAAE,GAAG,CAAA;CAAE,EACvE,OAAO,EAAE,YAAY,GACpB,OAAO,CAAC,WAAW,CAAC,CAyBtB;AAED,wBAAsB,OAAO,CAC3B,KAAK,EAAE,aAAa,GAAG;IAAE,MAAM,EAAE;QAAE,IAAI,EAAE,SAAS,GAAG,IAAI,CAAA;KAAE,CAAC;IAAC,OAAO,EAAE,OAAO,CAAA;CAAE,EAC/E,OAAO,EAAE,YAAY,GACpB,OAAO,CAAC,KAAK,CAAC,CAgDhB;AAID,MAAM,WAAW,UAAU;IACzB,EAAE,EAAE,OAAO,CAAC;IACZ,MAAM,EAAE;QAAE,gBAAgB,EAAE;YAAE,EAAE,EAAE,OAAO,CAAC;YAAC,MAAM,CAAC,EAAE,MAAM,CAAA;SAAE,CAAA;KAAE,CAAC;CAChE;AAED;;;;GAIG;AACH,wBAAsB,UAAU,CAAC,KAAK,EAAE,aAAa,GAAG,OAAO,CAAC,UAAU,CAAC,CAS1E"}