@glw907/cairn-cms 0.58.0 → 0.60.0

package/CHANGELOG.md

@@ -2,6 +2,90 @@
 
 All notable changes to this project are recorded here, most recent first.
 
+## 0.60.0
+
+<!-- release-size: minor -->
+
+The editor learns to copy-edit. Two features land together on the markdown source: a spellcheck that
+runs as you write, and an opt-in tidy that reads a draft once with a language model and proposes a
+light copy-edit you review before any of it lands.
+
+Spellcheck is on by default. Misspelled words pick up a quiet amber underline, and the correction
+popover offers ranked suggestions, an add-to-dictionary action, and an ignore-for-this-session
+action, all keyboard-reachable. It runs locally on a Web Worker, so no text leaves the browser, and
+it reads the markdown structure: code, links, frontmatter, layout-block machinery, and `media:`
+tokens are never flagged. A second quiet layer catches the objective slips spellcheck misses: a
+doubled word, a double space inside a line, a stray run of punctuation. The dialect is declared once
+per site under `spellcheck.dialect` (default `en-us`), so a British site loads the British word list
+and "colour" reads as correct. The personal dictionary is a git-committed file at
+`src/content/.cairn/dictionary.txt`, so a word one editor adds is shared with the rest through the
+same commit pipeline the content uses.
+
+Tidy is opt-in and off until a developer enables it. When on, an editor runs it over the whole
+document or a selection, and cairn reads the draft once through the Anthropic API and computes the
+diff locally. The review is a step-in diff dialog: insertions show in green, deletions struck through
+in red, and the author's original stays in the buffer until they apply. Objective fixes come pre-kept;
+a judgment edit (a configured style normalization, a grammar reword) carries a review-this treatment
+and a plain-language reason, and it is not swept by Accept fixes until confirmed. The prompt is built
+from the site's own convention config and never harmonizes to the author's habits or guesses an
+undeclared style, so an author's voice is preserved. Output is validated as a proofread, not a
+restructure: a result that changes the heading structure, the frontmatter, a `media:` token, a code
+block, or more than a bounded fraction of the wording is discarded with an honest message and the
+document is left untouched. Conventions are edited in a two-tier settings screen and stored in the
+committed site config under `tidy.conventions`.
+
+New dependencies: `@codemirror/lint` (the surfacing layer for both spellcheck and the objective-error
+underlines), `@anthropic-ai/sdk` (the Worker-side tidy model call, guarded off the client), and
+`spellchecker-wasm` plus its bundled English dictionary asset (the spellcheck engine, delivered from
+the packaged `dist` so the Worker and the word list reach a consumer build).
+
+No consumer action is required for an existing site. Both features are additive. Spellcheck replaces
+the browser's native spell checking with cairn's own, so an upgrading editor sees the new amber
+underline and the in-editor correction popover in place of the browser's right-click menu, with no
+config change needed. Tidy gives a site nothing until a developer turns it on: set `tidy.enabled: true`
+in the site config, add the `ANTHROPIC_API_KEY` Worker secret, and optionally pick a model and
+conventions. `cairn doctor` checks that the key is configured once tidy is enabled. The editor
+walkthrough is in [write in the editor](docs/guides/write-in-the-editor.md), the developer setup is in
+[enable tidy and the editor copy-edit](docs/guides/enable-tidy.md), and the design rationale is in
+[the editor copy-edit](docs/explanation/editor-copyedit.md).
+
+## 0.59.0
+
+<!-- release-size: minor -->
+
+The Media Library learns to clear out images in bulk and to collect the files nothing uses any more.
+Two surfaces ship together, sharing one safety floor: a strict cross-branch usage index built fresh
+per action, and a refusal that commits nothing when usage cannot be verified.
+
+Multi-select lands in both the grid and the table. Tick the images you mean, a sticky bar shows the
+count, and one Delete runs the single safe-delete gate across the whole selection. cairn deletes the
+assets nothing references and skips any still in use, reporting them rather than force-deleting one.
+The batch is one commit that removes the manifest rows before the R2 objects, so a bulk delete is
+recoverable from git history the same way a single safe-delete is. The dialog is a plain confirm with
+the count, since nothing in use can be removed this way.
+
+Find orphaned files collects stored bytes that drifted loose from content. It pairs a storage
+reconcile with a strict usage read and reports two populations. Orphaned files are stored R2 bytes
+with no manifest row and no reference anywhere across `main` and every open branch; a branch-only
+upload is excluded, because the branch that uploaded it still references it. Broken references are the
+reverse, a manifest row whose bytes are gone, shown as a read-only data-integrity readout with no
+delete. The scan fails closed at detection: a branch it cannot read produces no result and an offer
+to check again, rather than a half-answer that might call an in-use file orphaned.
+
+The byte purge is the one irreversible media action. Everything else in the Library edits git-tracked
+state and can be walked back from history, but raw R2 bytes carry no git record, so a purge cannot be
+undone. It gates on a typed-count confirm, and at action time it re-derives the orphan set and
+re-checks the strict usage index, so a key claimed by a new manifest row or referenced on a branch
+since the scan is skipped, never purged. The shipped "Unused" triage facet is renamed to "No
+references found", with the raw-HTML caveat stated where an editor acts: absence of a found reference
+is not proof of disuse, since cairn cannot see an image hidden in raw HTML or a URL hardcoded in a
+template.
+
+No consumer action is required. The whole surface is admin-side and additive, with no public surface
+change and no content-format change. An editor walkthrough is in
+[manage the media library](docs/guides/manage-the-media-library.md), and the design rationale is in
+[media storage](docs/explanation/media-storage.md).
+
 ## 0.58.0
 
 <!-- release-size: minor -->

package/dist/components/CairnAdmin.svelte

@@ -14,6 +14,7 @@ mount inside `AdminLayout`. No styling or wrapper elements of its own.
   import ManageEditors from './ManageEditors.svelte';
   import NavTree from './NavTree.svelte';
   import CairnMediaLibrary from './CairnMediaLibrary.svelte';
+  import CairnTidySettings from './CairnTidySettings.svelte';
   import type { AdminData } from '../sveltekit/cairn-admin.js';
   import type { ContentFormFailure } from '../sveltekit/content-routes.js';
   import type { ComponentRegistry } from '../render/registry.js';
@@ -69,6 +70,8 @@ mount inside `AdminLayout`. No styling or wrapper elements of its own.
       <NavTree data={data.page} />
     {:else if data.view === 'media'}
       <CairnMediaLibrary data={data.page} {form} />
+    {:else if data.view === 'settings'}
+      <CairnTidySettings data={data.page} />
     {/if}
   </AdminLayout>
 {/if}