@glw907/cairn-cms 0.62.2 → 0.76.0

package/dist/render/sanitize-schema.js

@@ -1,5 +1,6 @@
 import { defaultSchema } from 'hast-util-sanitize';
 import { visit } from 'unist-util-visit';
+import { toString } from 'hast-util-to-string';
 import { dataAttrProp } from './registry.js';
 // The fixed directive markers the stamp writes and the dispatch reads. They are inert data
 // attributes, never a script vector, and must survive the floor so the dispatch still runs.
@@ -16,7 +17,7 @@ const FIXED_MARKERS = ['dataPrimitive', 'dataSlot', 'dataRole', 'dataRise'];
  * allowlist but not weaken the core strip.
  */
 export function buildSanitizeSchema(registry, extend) {
-    const attrMarkers = registry.defs.flatMap((d) => (d.attributes ?? []).map((a) => dataAttrProp(a.key)));
+    const attrMarkers = registry.defs.flatMap((d) => Object.keys(d.attributes ?? {}).map((key) => dataAttrProp(key)));
     const markers = [...FIXED_MARKERS, ...attrMarkers];
     const attributes = defaultSchema.attributes ?? {};
     // defaultSchema's `a` entry carries a className tuple (`['className', 'data-footnote-backref']`)
@@ -58,6 +59,34 @@ export function rehypeAnchorRel(rel) {
         });
     };
 }
+/**
+ * Give every GFM task-list checkbox an accessible name from its item text. remark-gfm emits a real
+ * `<input type="checkbox" disabled>` with no label, which axe's `label` rule flags as a critical
+ * violation even though the control is read-only; the visible label is the surrounding `<li>` text,
+ * not associated programmatically. This sets `aria-label` on each task-list checkbox to its item's
+ * text so the name travels with the control, keeping the engine's real disabled input (the bar's
+ * non-color cue) while clearing the violation on every site. It must run after the sanitize floor,
+ * which does not allow `aria-label`, so the attribute is added once the floor has run.
+ */
+export function rehypeTaskListA11y() {
+    return (tree) => {
+        visit(tree, 'element', (node) => {
+            const className = node.properties?.className;
+            const isTaskItem = node.tagName === 'li' && Array.isArray(className) && className.includes('task-list-item');
+            if (!isTaskItem)
+                return;
+            const checkbox = node.children.find((child) => child.type === 'element' &&
+                child.tagName === 'input' &&
+                child.properties?.type === 'checkbox');
+            if (!checkbox)
+                return;
+            const label = toString(node).trim();
+            // Only when there is text to name it; an empty item leaves the box unnamed rather than blank.
+            if (label)
+                (checkbox.properties ??= {})['ariaLabel'] = label;
+        });
+    };
+}
 // URL-bearing hast properties the post-dispatch guard scheme-checks. hast camelCases attribute
 // names through property-information (srcset -> srcSet, xlink:href -> xLinkHref with a capital L,
 // formaction -> formAction). data is the <object data> URL attribute; data-* attributes camelCase

package/dist/sveltekit/cairn-admin.d.ts

@@ -2,7 +2,7 @@ import { type ContentRoutesDeps, type LayoutData, type ListData, type EditData,
 import { type NavLoadData } from './nav-routes.js';
 import type { AuthBranding, SendMagicLink } from '../email.js';
 import type { AuthEnv, Editor } from '../auth/types.js';
-import type { GithubKeyEnv } from '../github/credentials.js';
+import type { BackendEnv } from '../github/credentials.js';
 import type { CairnRuntime } from '../content/types.js';
 import type { CookieJar, EventBase } from './types.js';
 /**
@@ -10,19 +10,19 @@ import type { CookieJar, EventBase } from './types.js';
  * (ContentEvent minus params, which the dispatcher synthesizes, plus RequestContext's cookies
  * and setHeaders). A real SvelteKit RequestEvent satisfies it.
  */
-export interface AdminEvent extends EventBase<GithubKeyEnv & AuthEnv> {
+export interface AdminEvent extends EventBase<BackendEnv & AuthEnv> {
     cookies: CookieJar;
     setHeaders(headers: Record<string, string>): void;
 }
 /**
  * Injectable dependencies. Branding defaults from the runtime's siteName and sender, so a
- *  site overrides it only to change the magic-link email identity; `send` and `mintToken`
- *  are the same seams the underlying factories take.
+ *  site overrides it only to change the magic-link email identity; `send` is the same seam the
+ *  underlying auth factory takes. The content backend rides `event.locals.backend` (the dev double)
+ *  or the adapter's provider, so it is not a dep here.
  */
 export interface CairnAdminDeps {
     branding?: AuthBranding;
     send?: SendMagicLink;
-    mintToken?: ContentRoutesDeps['mintToken'];
     /**
      * Build the Anthropic client for the tidy action. Forwarded to the content routes; a site that
      *  enables tidy injects a stub here to avoid a real network call. Defaults to the real SDK client.

package/dist/sveltekit/cairn-admin.js

@@ -23,13 +23,12 @@ export function createCairnAdmin(runtime, deps = {}) {
     };
     const auth = createAuthRoutes({ branding, send: deps.send });
     const content = createContentRoutes(runtime, {
-        mintToken: deps.mintToken,
         anthropic: deps.anthropic,
         tidyTimeoutMs: deps.tidyTimeoutMs,
     });
     const editors = createEditorRoutes();
     // The nav surface exists only when the site configures a menu; without one its view is a 404.
-    const nav = runtime.navMenu ? createNavRoutes(runtime, { mintToken: deps.mintToken }) : null;
+    const nav = runtime.navMenu ? createNavRoutes(runtime) : null;
     /**
      * Build the event a wrapped content load reads. The catch-all route carries only a rest
      *  param, so `concept` and `id` are synthesized from the parsed view. The override names
@@ -49,8 +48,8 @@ export function createCairnAdmin(runtime, deps = {}) {
     }
     /**
      * Serve the admin view the pathname names, or a 404 for any shape the parser refuses.
-     *  The authed views run the layout load and the view load concurrently; both mint a GitHub
-     *  token, and the installation-token cache coalesces the mints into one signing.
+     *  The authed views run the layout load and the view load concurrently; both resolve the same
+     *  backend, and the installation-token cache coalesces their lazy mints into one signing.
      */
     async function load(event) {
         const view = parseAdminPath(event.url.pathname, runtime.concepts);

package/dist/sveltekit/content-routes.d.ts

@@ -1,6 +1,7 @@
 import { fail } from '@sveltejs/kit';
 import { type AdvisoryNotice } from '../content/advisories.js';
-import { type GithubKeyEnv } from '../github/credentials.js';
+import type { BackendEnv } from '../github/credentials.js';
+import type { Backend } from '../github/backend.js';
 import { type LinkTarget, type InboundLink } from '../content/manifest.js';
 import { type GettingStarted } from '../content/getting-started.js';
 import { type MarkdownReferenceRow } from '../components/markdown-reference.js';
@@ -13,7 +14,7 @@ import type { RepointPlacement, AltPlacement } from '../content/media-rewrite.js
 import type { BranchRef } from '../media/rewrite-plan.js';
 import type { BulkDeleteSkip } from '../media/bulk-delete-plan.js';
 import type { CookieJar, EventBase } from './types.js';
-import type { CairnRuntime, FrontmatterField, ResolvedPreview } from '../content/types.js';
+import type { CairnRuntime, NamedField, ResolvedPreview } from '../content/types.js';
 import type { Role } from '../auth/types.js';
 export type { AdvisoryNotice, AdvisoryAction } from '../content/advisories.js';
 /** A sidebar concept entry: just enough to render the nav without shipping validators to the client. */
@@ -90,7 +91,7 @@ export interface EditData {
     conceptId: string;
     id: string;
     label: string;
-    fields: FrontmatterField[];
+    fields: NamedField[];
     frontmatter: Record<string, unknown>;
     body: string;
     title: string;
@@ -259,7 +260,7 @@ export interface HelpData {
     supportContact?: string;
 }
 /** The structural event the content routes read; a real SvelteKit RequestEvent satisfies it. */
-export interface ContentEvent extends EventBase<GithubKeyEnv> {
+export interface ContentEvent extends EventBase<BackendEnv> {
     params: Record<string, string>;
     /**
      * SvelteKit's cookie jar. The layout load reads the persisted admin theme and issues the CSRF
@@ -303,10 +304,12 @@ export interface TidyClient {
 }
 export interface ContentRoutesDeps {
     /**
-     * Mint a GitHub App installation token from the Worker env. Defaults to the real signer.
-     *  A bare string works too; the routes await whatever comes back.
+     * Override the resolved content backend. A test injects a live `Backend` (a `makeGithubBackend`
+     *  over a fetch double, or an in-memory fake) so the read and commit paths run with no real token
+     *  mint. When set it replaces the per-handler `locals.backend ?? runtime.backend.connect(env)`
+     *  resolve; a production caller leaves it unset and the dev double rides `event.locals.backend`.
      */
-    mintToken?: (env: GithubKeyEnv) => string | Promise<string>;
+    backend?: Backend;
     /**
      * Build the Anthropic client for the tidy action from the resolved API key. Defaults to the real
      *  SDK client. Injected in tests so `messages.create` is stubbed and no network call (or real key)
@@ -579,5 +582,4 @@ export declare function createContentRoutes(runtime: CairnRuntime, deps?: Conten
     mediaAltApply: (event: ContentEvent) => Promise<ReturnType<typeof fail> | never>;
     addDictionaryWord: (event: ContentEvent) => Promise<ReturnType<typeof fail> | DictionaryAddResult>;
     tidyAction: (event: ContentEvent) => Promise<ReturnType<typeof fail> | TidyResult>;
-    mintToken: (env: GithubKeyEnv) => string | Promise<string>;
 };