@goodfellow-cms/admin 0.5.0 → 0.7.0

package/dist/{entry-values-ocbalc9U.js → entry-values-DO01xZ9L.js}

@@ -1,4 +1,5 @@
-import { COLOR_SCHEME_ATTRIBUTE, ConflictError, DraftError, FOOTER_FILE, GOODFELLOW_REGISTRY, HEADER_FILE, MAX_UPLOAD_BYTES, MEDIA_DIR, MENUS_FILE, REDIRECTS_FILE, SHADCN_NAMESPACE, SHADCN_REGISTRY, SITE_FILE, ScheduledBuildsError, SignInError, addressPatternFor, adminOrigin, allPages, checkEntrySlug, checkPageAddress, checkSite, codeFileChanges, collectionFileChange, collectionFileChange as collectionFileChange$1, customCssFileChange, deleteCollectionChanges, describedConfig, duplicatePageData, entryFileChange, entryFileChange as entryFileChange$1, entryLanguage, entryPathIn, entryTitle, escapeStyleText, extensionOf, fileName, goodfellowRegistryUrl, googleFontsUrl, isDemoStore, keptDrafts, layoutFileChange, loadSiteContent, markdownToHtml, mediaFileChange, mediaKind, mediaKind as mediaKind$1, memoryKeeper, menusFileChange, moveEntryChanges, movePageChanges, newCollectionSettings, newDraftName, newPageData, outsideHost, pageFileChange, pageTitle, publishProblems, redirectsFileChange, relinkSite, relinkedChanges, scheduleOf, scheduleProblem, scheduleState, siteLanguages, siteSettingsFileChange, slugify, storedCss, storedData, storedEntryFields, themeToCss, todayIn, trimChars, uniqueName, upcomingChanges, updateSettingsFileChange, uploadName, wallClock, withoutCredits, writeChanges } from "@goodfellow-cms/core";
+import { n as CONNECT_MESSAGE, r as createChannel } from "./plugin-protocol-DkvBDqsF.js";
+import { APP_API_HEADER, COLOR_SCHEME_ATTRIBUTE, ConflictError, DraftError, FOOTER_FILE, GOODFELLOW_REGISTRY, HEADER_FILE, MAX_UPLOAD_BYTES, MEDIA_DIR, MENUS_FILE, PluginTaskError, REDIRECTS_FILE, SHADCN_NAMESPACE, SHADCN_REGISTRY, SITE_FILE, ScheduledBuildsError, SignInError, TASK_INPUT_LIMIT, addressPatternFor, adminOrigin, allPages, checkEntrySlug, checkPageAddress, checkSite, codeFileChanges, collectionFileChange, collectionFileChange as collectionFileChange$1, customCssFileChange, deleteCollectionChanges, describedConfig, duplicatePageData, entryFileChange, entryFileChange as entryFileChange$1, entryLanguage, entryPathIn, entryTitle, escapeStyleText, extensionOf, fileName, goodfellowRegistryUrl, googleFontsUrl, isDemoStore, isStorableAddress, keptDrafts, layoutFileChange, limitsFor, loadSiteContent, markdownToHtml, mayChangeEntry, mayChangeLayout, mayChangeMedia, mayChangeMenus, mayChangePage, mediaFileChange, mediaKind, mediaKind as mediaKind$1, mediaStorageFileChange, memoryKeeper, menusFileChange, moveEntryChanges, movePageChanges, newCollectionSettings, newDraftName, newPageData, newTaskRequestId, openTaskAnswer, outsideHost, outsideLimits, pageFileChange, pageTitle as pageTitle$1, pluginFrameUrl, pluginMayList, pluginMayUse, publishProblems, redirectsFileChange, relinkSite, relinkedChanges, reviewersFor, scheduleOf, scheduleProblem, scheduleState, siteLanguages, siteSettingsFileChange, slugify, storedCss, storedData, storedEntryFields, storedMediaUrl, taskKeys, themeToCss, todayIn, trimChars, uniqueName, upcomingChanges, updateSettingsFileChange, uploadName, wallClock, withStoredFiles, withoutCredits, writeChanges } from "@goodfellow-cms/core";
 import { createContext, useCallback, useContext, useEffect, useId, useLayoutEffect, useMemo, useRef, useState, useSyncExternalStore } from "react";
 import TurndownService from "turndown";
 import { gfm } from "turndown-plugin-gfm";
@@ -155,6 +156,12 @@ function mediaPath(url) {
 	if (!rest || rest.split("/").some((part) => part === "" || part === "." || part === "..")) return void 0;
 	return `${MEDIA_DIR}/${decodeURIComponent(rest)}`;
 }
+/** A file size in words: `2.4 MB`. */
+function formatSize(bytes) {
+	if (bytes < 1024) return `${bytes} B`;
+	if (bytes < 1048576) return `${Math.round(bytes / 1024)} KB`;
+	return `${(bytes / 1048576).toFixed(1)} MB`;
+}
 /** Where a media file is used, by name, so editors know what deleting or replacing it affects. */
 function mediaUsage(content, url, names) {
 	const uses = (value) => JSON.stringify(value).includes(url);
@@ -162,7 +169,7 @@ function mediaUsage(content, url, names) {
 	if (uses(content.settings)) used.push(names.settings);
 	if (uses(content.header)) used.push(names.header);
 	if (uses(content.footer)) used.push(names.footer);
-	for (const page of content.pages) if (uses(page.content)) used.push(pageTitle(page));
+	for (const page of content.pages) if (uses(page.content)) used.push(pageTitle$1(page));
 	for (const collection of content.collections) {
 		if (uses(collection.settings)) used.push(collection.settings.name);
 		for (const entry of collection.entries) if (uses(entry.content)) used.push(entryTitle(entry));
@@ -174,12 +181,25 @@ function mediaUsage(content, url, names) {
 function siteImages(media) {
 	return media.filter((path) => mediaKind(path) === "image").map(mediaUrl);
 }
+/**
+* Every media file the site has, as `public/media/…` paths: those in the
+* site's own files and those a plugin keeps outside them
+* (`content/media-storage.json`), which content refers to the same way.
+*/
+function allMedia(content, media) {
+	const stored = Object.keys(content.mediaStorage?.files ?? {}).flatMap((url) => mediaPath(url) ?? []);
+	return [.../* @__PURE__ */ new Set([...media, ...stored])];
+}
+/** Whether a plugin keeps a media file outside the site's own files. */
+function isStoredMedia(content, url) {
+	return Object.hasOwn(content.mediaStorage?.files ?? {}, url);
+}
 //#endregion
 //#region src/site-code.ts
 /**
 * What the admin panel needs the site's own code for: the pages its blocks add
-* (a calendar's months, a list's later pages), and pages rendered to check a
-* publish. The admin panel's page never runs that code: it asks the frame that
+* (a calendar's months, a list's later pages), pages rendered to check a
+* publish, and blocks drawn for editor plugins. The admin panel's page never runs that code: it asks the frame that
 * does (`frameSiteCode()` in `frame/host.tsx`), which answers with `localSiteCode()` (`frame/local-code.ts`).
 */
 /** The page at an address, as `findSitePage()` gives it: a page a build writes, or "Page not found". */
@@ -301,7 +321,7 @@ function problemPlace(t, content, file) {
 	if (file === SITE_FILE) return t("checks.place.settings");
 	if (file === REDIRECTS_FILE) return t("checks.place.redirects");
 	const page = content.pages.find((candidate) => candidate.file === file);
-	if (page) return t("checks.place.page", { title: pageTitle(page) });
+	if (page) return t("checks.place.page", { title: pageTitle$1(page) });
 	for (const collection of content.collections) {
 		if (collection.file === file) return t("checks.place.design", { collection: collection.settings.name });
 		const entry = collection.entries.find((candidate) => candidate.file === file);
@@ -399,6 +419,7 @@ const defaultStrings = {
 	"signIn.token.create": "Create a token on {host}",
 	"signIn.token.createBroad": "Create a broader token instead",
 	"signIn.token.createBroadHint": "Use this if the site belongs to someone else and the first link doesn't let you choose it. This kind of token can change everything your account can.",
+	"signIn.token.apiTokenHint": "Use this if you can't create a token for the site itself. Paste your Atlassian account's email address, a colon, then the token, such as name@example.org:ATATT3x…, and give the token permission to read and write repositories, pull requests and pipelines.",
 	"signIn.token.chooseSite": "If {host} asks what the token can access, choose this site.",
 	"signIn.token.step2": "Copy the token and paste it here:",
 	"signIn.token.label": "Access token",
@@ -471,6 +492,18 @@ const defaultStrings = {
 	"editor.viewport.phone": "Phone",
 	"editor.failed": "The editor stopped working. Reload the page to start it again.",
 	"editor.frame": "Editing {title}",
+	"editor.choose": "Editor",
+	"editor.blockSearch": "Search blocks",
+	"editor.blockSearchNone": "No blocks match. Try another word, such as \"picture\" or \"columns\".",
+	"editor.blockSearchFound": "Blocks found",
+	"editor.standard": "Standard editor",
+	"editor.plugin.switchLoses": "Some of what you changed in {editor} can't be kept in the other editor, so switching now leaves behind everything you changed since you opened {editor}. Switch anyway?\n\n{problems}",
+	"editor.plugin.pageSettings": "The page's settings",
+	"editor.plugin.problem": "{block}: {message}",
+	"editor.plugin.problemField": "{block}, {field}: {message}",
+	"editor.plugin.loading": "Opening {editor}…",
+	"editor.plugin.failed": "{editor} didn't start. Choose the standard editor to keep editing.",
+	"editor.plugin.invalid": "{editor} gave back something this site can't publish, so nothing was published. Try again, or choose the standard editor.",
 	"publish.publishing": "Publishing…",
 	"publish.done": "Published.",
 	"publish.conflict": "Someone else changed the site since you opened this page, so your changes weren't published. Reload to see their changes, then make yours again.",
@@ -497,6 +530,9 @@ const defaultStrings = {
 	"draft.leave": "Back to the live site",
 	"draft.waiting": "A draft started {date} is waiting to be published.",
 	"draft.waitingMany": "{count} drafts are waiting to be published.",
+	"draft.reviewWaiting": "A draft is waiting for review: {title}.",
+	"draft.reviewWaitingMany": "{count} drafts are waiting for review.",
+	"draft.inReview": "Submitted for review.",
 	"draft.choose": "Draft to open",
 	"draft.started": "Started {date}",
 	"draft.open": "Open",
@@ -516,6 +552,22 @@ const defaultStrings = {
 	"checks.alsoWarnings": "These could be better too:",
 	"checks.publishAnyway": "Publish anyway",
 	"checks.goBack": "Go back",
+	"limits.title": "Some of this is outside what you can change",
+	"limits.intro": "An owner has limited what you can change on this site, and these changes are outside it:",
+	"limits.review": "Submit them for review instead: the site's reviewers are asked to look, and can publish them for you.",
+	"limits.noReview": "Ask an owner to make these changes for you, or to let you make them on Site Settings' Editors screen.",
+	"limits.goBack": "Go back",
+	"limits.submitting": "Submitting for review…",
+	"limits.submitted": "Submitted for review. The live site stays as it is until a reviewer publishes it.",
+	"limits.submitError": "The changes couldn't be submitted for review. Check your connection and try again.",
+	"limits.page": "The page {name}",
+	"limits.entry": "{name}, in {collection}",
+	"limits.media": "The media library",
+	"limits.layout": "The header and footer",
+	"limits.menus": "The menus",
+	"limits.other": "The site's settings, or other things only owners change",
+	"limits.readOnly": "You can look at this, but an owner has limited what you can change, and it's outside it.",
+	"limits.mediaReadOnly": "An owner has limited what you can change, and the media library is outside it. You can still use its files on pages you can change.",
 	"checks.missing-page": "{place} links to {target}, which isn't a page on the site.",
 	"checks.missing-media": "{place} uses {target}, which isn't in the media library.",
 	"checks.no-title": "{place} has no title, so browser tabs and search results show only the site's name.",
@@ -547,6 +599,7 @@ const defaultStrings = {
 	"pages.empty": "This site has no pages yet.",
 	"pages.column.title": "Title",
 	"pages.column.address": "Address",
+	"pages.look": "Look",
 	"pages.edit": "Edit",
 	"pages.move": "Change address",
 	"pages.duplicate": "Duplicate",
@@ -608,7 +661,7 @@ const defaultStrings = {
 	"deletePage.submit": "Delete page",
 	"deletePage.message": "Delete page \"{title}\"",
 	"address.invalid": "Use lowercase letters, numbers and hyphens, with / between parts, such as /about-us.",
-	"address.reserved": "This address is used by the admin panel. Choose another.",
+	"address.reserved": "This address can't be used: the admin panel uses it, or it ends in /index, which is the page above it. Choose another.",
 	"address.taken": "Another page already uses this address.",
 	"field.required": "This can't be empty.",
 	"editPage.message": "Update page \"{title}\"",
@@ -619,7 +672,7 @@ const defaultStrings = {
 	"versions.back": "Back to editing",
 	"versions.intro": "Every version that's been published, newest first. Choose one to see it, then restore it to put it back. Something that was moved to a new address starts a new history there.",
 	"versions.notFound": "There's no history to show here. It may have been moved or deleted.",
-	"versions.local": "Version history is in the published site's admin panel, where you sign in with GitHub or GitLab.",
+	"versions.local": "Version history is in the published site's admin panel, where you sign in with GitHub, GitLab or Bitbucket.",
 	"versions.demo": "Version history isn't kept in a demo.",
 	"versions.loading": "Loading versions…",
 	"versions.loadingVersion": "Loading this version…",
@@ -686,7 +739,7 @@ const defaultStrings = {
 	"newEntry.addressHint": "The last part of the page's address, as in {example}.",
 	"newEntry.message": "Add {entry} \"{title}\"",
 	"entryName.invalid": "Use lowercase letters, numbers and hyphens only, such as easter-vigil.",
-	"entryName.reserved": "This address is used by the admin panel. Choose another.",
+	"entryName.reserved": "This address can't be used: the admin panel uses it, or it ends in /index, which is the page above it. Choose another.",
 	"entryName.taken": "Something else on the site already uses this address.",
 	"moveEntry.message": "Move {entry} \"{title}\" from {from} to {to}",
 	"deleteEntry.body": "{title} will be removed from {name}.",
@@ -863,14 +916,96 @@ const defaultStrings = {
 	"media.error.size": "{name} is too large: files can be up to 25 MB. For long videos, upload them to YouTube or Vimeo and link to them instead.",
 	"media.error.unreadable": "{name} couldn't be read. It may be damaged, or in a format browsers can't open, such as HEIC. Save it as a JPEG and try again.",
 	"media.choose": "Choose image",
+	"media.chooseAudio": "Choose sound file",
 	"media.chooseFile": "Choose file",
 	"media.chooseVideo": "Choose video",
 	"media.pickerTitle": "Choose an image",
+	"media.pickerTitleAudio": "Choose a sound file",
 	"media.pickerTitleFile": "Choose a file",
 	"media.pickerTitleVideo": "Choose a video",
 	"media.pickerEmpty": "Nothing has been uploaded yet. Upload a file to use it here.",
 	"media.clear": "Remove",
+	"table.addRow": "Add a row",
+	"table.addColumn": "Add a column",
+	"table.removeRow": "Remove this row",
+	"table.removeRowNumber": "Remove row {row}",
+	"table.removeColumn": "Remove this column",
+	"table.removeColumnNumber": "Remove column {column}",
+	"table.cell": "Row {row}, column {column}",
+	"style.align": "Text alignment",
+	"style.align.default": "As the block has it",
+	"style.align.left": "Left",
+	"style.align.center": "Centered",
+	"style.align.right": "Right",
+	"style.align.justify": "Justified",
+	"style.fontSize": "Text size",
+	"style.fontSize.xs": "Extra small",
+	"style.fontSize.sm": "Small",
+	"style.fontSize.base": "Normal",
+	"style.fontSize.lg": "Large",
+	"style.fontSize.xl": "Extra large",
+	"style.fontSize.2xl": "Very large",
+	"style.fontSize.3xl": "Huge",
+	"style.fontSize.4xl": "Very huge",
+	"style.fontSize.5xl": "Giant",
+	"style.fontSize.6xl": "Enormous",
+	"style.color": "Text color",
+	"style.background": "Background color",
+	"style.colorDefault": "As the block has it",
+	"style.colorCustom": "Choose a color",
+	"style.contrast": "This text may be hard to read on this background. Try colors further apart.",
+	"style.padding": "Space inside",
+	"style.margin": "Space around",
+	"style.eachSide": "Set each side",
+	"style.side.top": "Top",
+	"style.side.right": "Right",
+	"style.side.bottom": "Bottom",
+	"style.side.left": "Left",
+	"style.allSides": "All sides",
+	"style.none": "None",
+	"style.radius": "Rounded corners",
+	"style.radius.none": "Square",
+	"style.radius.sm": "Slightly rounded",
+	"style.radius.md": "Rounded",
+	"style.radius.lg": "The theme's rounding",
+	"style.radius.xl": "Very rounded",
+	"style.radius.full": "Round",
+	"style.default": "As the block has it",
+	"style.custom": "Your own…",
+	"style.customLength": "Your own size, such as 12px or 1.5rem",
+	"style.customLengthInvalid": "Write a number with px, rem, em or %, such as 12px.",
+	"style.other": "Other CSS classes",
+	"style.otherHint": "Tailwind classes, or your own from Custom CSS, separated by spaces.",
+	"style.reset": "Back to the block's own look",
 	"media.credit": "Credit: {credit}",
+	"media.stored": "Kept by {plugin}",
+	"media.error.storageSize": "{name} is too large: {plugin} takes files up to {size}.",
+	"media.storage.title": "Where media is kept",
+	"media.storage.intro": "{plugin} keeps the site's media in its storage, including large files such as long videos. It keeps {count} files now. Pages show them from there, at the same addresses.",
+	"media.storage.missing": "{count} files are kept in storage by {plugin}, which the site no longer has. Pages still show them, but new files go into the site's own files.",
+	"media.storage.notReady": "{plugin} can't take files yet. {message}",
+	"media.storage.unavailable": "{plugin} didn't answer. Reload the admin panel and try again.",
+	"media.storage.settings": "Open {plugin}'s settings",
+	"media.storage.failed": "{plugin} couldn't keep {name}.",
+	"media.storage.uploading": "Uploading to {plugin}… This takes about a minute.",
+	"media.storage.wait": "Each group of files takes about a minute.",
+	"media.move.button": "Move {count} files to {plugin}",
+	"media.move.title": "Move the site's media to {plugin}?",
+	"media.move.body": "{plugin} will keep these files, and pages will show them from its storage at the same addresses, so nothing on them changes. They're taken out of the site's own files; Version history keeps them.",
+	"media.move.moving": "Moved {done} of {total}…",
+	"media.move.busy": "Moving…",
+	"media.move.nothing": "No files were moved.",
+	"media.move.some": "Moved {count} files to {plugin}, then stopped.",
+	"media.move.done": "Moved {count} files to {plugin}.",
+	"media.move.message": "Move media to {plugin}",
+	"media.back.button": "Move back to the site",
+	"media.back.title": "Move the media back from {plugin}?",
+	"media.back.body": "The files {plugin} keeps are copied back into the site's own files, at the same addresses, and new files go there too. Each can be up to 25 MB.",
+	"media.back.empty": "{plugin} keeps no files now. New files will go into the site's own files.",
+	"media.back.large": "These are larger than 25 MB, so {plugin} keeps them: {names}",
+	"media.back.failed": "{name} couldn't be copied back from {plugin}'s storage, which may not allow it.",
+	"media.back.done": "Moved {count} files back from {plugin}.",
+	"media.back.message": "Move media back from {plugin}",
 	"ai.label": "AI",
 	"ai.title": "Write with AI",
 	"ai.mode.add": "Describe what to add to this page, and AI will write it at the end of the page.",
@@ -952,9 +1087,10 @@ const defaultStrings = {
 	"settings.previewEmpty": "Add a home page to see a preview here.",
 	"domain.intro": "Connect a domain you own, such as example.org, so the site is at that address.",
 	"domain.current": "The site is at {address} now.",
+	"domain.copy": "This admin panel is a copy of the site's, such as a staging site, at {address}. That address is set where the copy is built, so the domain this screen connects is the main site's.",
 	"domain.connected": "Connected to {domain}.",
 	"domain.signIn": "Editors sign in by going to {host} and coming back here. Add {address} to the redirect URIs of the application they sign in with on {host}, or signing in will stop working once the site moves.",
-	"domain.local": "Domains are connected in the published site's admin panel, where you sign in with GitHub or GitLab.",
+	"domain.local": "Domains are connected in the published site's admin panel, where you sign in with GitHub, GitLab or Bitbucket.",
 	"domain.admin.title": "Admin address",
 	"domain.admin.intro": "An address of its own for the admin panel, such as admin.example.org, keeps the site's pages from reaching what the admin panel keeps, such as editors' sign-in. Editors then sign in there. Blocks from registries other than Goodfellow's can be added only once the admin panel has one.",
 	"domain.admin.unsupported": "{host} serves each site at one address, so the admin panel can't have one of its own here.",
@@ -1047,7 +1183,7 @@ const defaultStrings = {
 	"owner.token.paste": "Copy the token and paste it here:",
 	"settings.tab.security": "Security",
 	"security.demo": "A demo has no sign-in to keep safe.",
-	"security.local": "The sign-in page is set in the published site's admin panel, where you sign in with GitHub or GitLab.",
+	"security.local": "The sign-in page is set in the published site's admin panel, where you sign in with GitHub, GitLab or Bitbucket.",
 	"security.contentOnly": "The sign-in page is set in the site's code, which is kept apart from its content, so a developer sets it there.",
 	"security.broker.title": "Sign-in page",
 	"security.broker.intro": "A sign-in page of its own, called a token broker, keeps editors' sign-in and AI keys at an address that holds nothing else, and shows the admin panel from there, so nothing on the site's pages can reach them. It asks the editor before publishing the site's code. It needs an address of its own, such as signin.example.org, that serves nothing else.",
@@ -1124,8 +1260,186 @@ const defaultStrings = {
 	"settings.tab.updates": "Updates",
 	"settings.tab.history": "Site history",
 	"settings.tab.import": "WordPress",
+	"settings.tab.themes": "Themes",
+	"plugins.notFound": "The site has no plugin screen at this address.",
+	"plugins.failed": "{plugin}'s screen couldn't start. If it keeps happening, the plugin may need updating.",
+	"themes.intro": "A theme changes your site's look: its colors, fonts and the styles of its blocks, and sometimes its header and footer. Themes are only settings and styles, with no code, and you can change anything a theme sets afterwards in Colors & fonts and Custom CSS.",
+	"themes.installed": "Installed theme",
+	"themes.noneInstalled": "No theme is installed. Your site uses its own colors and fonts.",
+	"themes.installedBadge": "Installed",
+	"themes.release": "version {version}",
+	"themes.updateAvailable": "Version {version} is out",
+	"themes.updateTo": "Update to {version}",
+	"themes.seeVersion": "See version {version}",
+	"themes.upToDate": "Up to date",
+	"themes.show": "Show",
+	"themes.showLabel": "Show {name}",
+	"themes.find": "Find a theme",
+	"themes.search": "Search themes",
+	"themes.searchButton": "Search",
+	"themes.loading": "Looking for themes…",
+	"themes.noneFound": "No themes were found.",
+	"themes.byPublisher": "{name}, published by {publisher}",
+	"themes.releaseDetails": "{name}, version {version}, published {date}",
+	"themes.provenance": "Built from {source}, which npm checked when it was published.",
+	"themes.noProvenance": "There's no record of where this version was built, so nobody has checked it came from its publisher's own code.",
+	"themes.waiting": "Version {version} can be installed once it's {days} days old, since most harmful versions are found by then.",
+	"themes.incompatible": "Version {version} doesn't say it works with Goodfellow {goodfellow}.",
+	"themes.tooNew": "This theme's versions are too new to install. Versions can be installed once they're {days} days old.",
+	"themes.notCompatible": "No version of this theme says it works with Goodfellow {version}.",
+	"themes.imageAlt": "A site with the {title} theme",
+	"themes.loads": "This theme asks visitors' browsers for these files from other sites, which can tell those sites who visits yours:",
+	"themes.useLayout": "Use the theme's header and footer in place of yours. Your menus, logo and contact details stay as they are.",
+	"themes.layoutUnknown": "The theme's header and footer use blocks a theme can't add, or that your site doesn't have ({blocks}), so they can't be used.",
+	"themes.kept": "You changed these since the version before, so they stay as you set them: {list}.",
+	"themes.replaced": "You changed these, and installing this theme replaces your changes: {list}.",
+	"themes.changed.css": "the theme's CSS",
+	"themes.preview": "Your site with {title}",
+	"themes.previewPage": "Page to look at",
+	"themes.install": "Install and publish",
+	"themes.installDemo": "Install",
+	"themes.installMessage": "Install the {title} theme, version {version}",
+	"themes.updateMessage": "Update the {title} theme to version {version}",
+	"themes.installedNotice": "{title} is installed. Your site will show it once it's rebuilt.",
+	"themes.updated": "{title} is updated to version {version}.",
+	"themes.remove": "Remove",
+	"themes.removeTitle": "Remove {title}?",
+	"themes.removeBody": "Colors, fonts and styles the theme set go back to Goodfellow's defaults, and its CSS is removed. Anything you changed yourself, and your header and footer, stay as they are.",
+	"themes.removeReplaced": "Removing it also removes your changes to: {list}.",
+	"themes.removeMessage": "Remove the {title} theme",
+	"themes.removed": "{title} is removed.",
+	"themes.error.record": "The record of which theme is installed can't be read.",
+	"themes.error.unreachable": "Themes can't be looked up right now. Check your internet connection and try again.",
+	"themes.error.badFile": "This theme has a problem in its files, so it can't be installed. Its publisher needs to fix it.",
+	"themes.error.notATheme": "This package isn't a Goodfellow theme.",
+	"settings.tab.plugins": "Plugins",
+	"plugins.intro": "Plugins add to what your site and this admin panel can do, such as blocks, screens here, and steps when your site is built. Unlike themes, they have code, which is included when your site is built and runs on its pages, so install only plugins you trust. Before you install one, this screen shows what it asks to do and reads its code for things to look at.",
+	"plugins.where.none": "Plugins can be installed here once the admin panel has an address of its own, or a token broker, where your site's pages can't reach it: see the Domain and Security tabs. Until then, a developer can add plugins to the site's code.",
+	"plugins.where.contentOnly": "This site's code is kept apart from its content, so a developer adds plugins there.",
+	"plugins.where.demo": "Plugins can't be installed in a demo.",
+	"plugins.where.local": "On this computer, a developer adds plugins with npm and lists them in goodfellow.config.tsx. The published admin panel installs them.",
+	"plugins.where.setup": "Your site's build doesn't write the list of its packages' versions yet, which plugins installed here need. A developer needs to update its build setup to the starter's first.",
+	"plugins.installed": "Installed plugins",
+	"plugins.noneInstalled": "No plugins are installed.",
+	"plugins.inCode": "Added by a developer",
+	"plugins.installedBadge": "Installed",
+	"plugins.release": "version {version}",
+	"plugins.updateAvailable": "Version {version} is out",
+	"plugins.updateTo": "Update to {version}",
+	"plugins.seeVersion": "See version {version}",
+	"plugins.upToDate": "Up to date",
+	"plugins.show": "Show",
+	"plugins.showLabel": "Show {name}",
+	"plugins.find": "Find a plugin",
+	"plugins.search": "Search plugins",
+	"plugins.searchButton": "Search",
+	"plugins.loading": "Looking for plugins…",
+	"plugins.noneFound": "No plugins were found.",
+	"plugins.byPublisher": "{name}, published by {publisher}",
+	"plugins.releaseDetails": "{name}, version {version}, published {date}",
+	"plugins.provenance": "Built from {source}, which npm checked when it was published.",
+	"plugins.noProvenance": "There's no record of where this version was built, so nobody has checked it came from its publisher's own code.",
+	"plugins.waiting": "Version {version} can be installed once it's {days} days old, since most harmful versions are found by then.",
+	"plugins.incompatible": "Version {version} doesn't say it works with Goodfellow {goodfellow}.",
+	"plugins.tooNew": "This plugin's versions are too new to install. Versions can be installed once they're {days} days old.",
+	"plugins.notCompatible": "No version of this plugin says it works with Goodfellow {version}.",
+	"plugins.asks": "What it asks to do",
+	"plugins.asks.connect": "Reach these addresses from the admin panel: {list}",
+	"plugins.asks.files": "Read and publish these files: {list}",
+	"plugins.asks.secrets": "Get these secrets when your site is built: {list}",
+	"plugins.asks.read": "Read these parts of your site when it's built: {list}",
+	"plugins.asks.write": "Write these parts of the built site: {list}",
+	"plugins.asks.blocks": "Add these blocks: {list}",
+	"plugins.asks.admin": "Run in the admin panel, in a frame of its own that can't reach your sign-in",
+	"plugins.asks.screens": "Add these screens to Site Settings: {list}",
+	"plugins.asks.build": "Run these steps when your site is built: {list}",
+	"plugins.asks.tasks": "Run these tasks with its secrets when the admin panel asks, each taking about a minute: {list}",
+	"plugins.secrets.github.title": "Add them on GitHub",
+	"plugins.secrets.github.link": "Open GitHub's form for a new secret",
+	"plugins.secrets.github.open": "Open GitHub's form for a new secret with the link below. Add each key there, one at a time, opening the form again for the next.",
+	"plugins.secrets.github.add": "For {name}: type {name} in Name, paste its value in Secret, and choose Add secret.",
+	"plugins.secrets.github.who": "Only the site's owners on GitHub can open the form.",
+	"plugins.secrets.github.kind": "This form adds secrets for this site alone, which is all it needs. GitHub's environment and organization secrets are for other things, so you can leave them alone.",
+	"plugins.secrets.gitlab.title": "Add them on GitLab",
+	"plugins.secrets.gitlab.link": "Open the site's CI/CD settings on GitLab",
+	"plugins.secrets.gitlab.open": "Open the site's CI/CD settings on GitLab with the link below, and expand Variables. Add each key there, one at a time.",
+	"plugins.secrets.gitlab.add": "For {name}: choose Add variable, choose Masked under Visibility, keep Protect variable ticked, type {name} in Key, paste its value in Value, and choose Add variable.",
+	"plugins.secrets.gitlab.who": "Only the site's owners (Maintainers) on GitLab can change its CI/CD settings.",
+	"plugins.secrets.bitbucket.title": "Add them on Bitbucket",
+	"plugins.secrets.bitbucket.link": "Open the site's Pipelines variables on Bitbucket",
+	"plugins.secrets.bitbucket.open": "Open the site's Pipelines variables on Bitbucket with the link below. Add each key there, one at a time. If Bitbucket says Pipelines isn't turned on, turn it on under Settings first.",
+	"plugins.secrets.bitbucket.add": "For {name}: type {name} in Name, paste its value in Value, tick Secured, and choose Add.",
+	"plugins.secrets.bitbucket.who": "Only the site's owners (with Admin permission) on Bitbucket can change its variables.",
+	"plugins.secrets.development.title": "Add them on this computer",
+	"plugins.secrets.development.file": "In the site's folder, beside package.json, open the file .env.local, or make it, and add a line for each of {names}:",
+	"plugins.secrets.development.values": "Put each value after its =, save the file, and try again. There's no need to restart the development server.",
+	"plugins.secrets.development.local": "This is only for trying the site on this computer: .env.local is never published. The live site needs them in its own secrets too.",
+	"plugins.secrets.server.title": "Add them to the site's server",
+	"plugins.secrets.server.add": "Add {names} as environment variables where the site's server runs, such as the project's Settings → Environment Variables on Vercel.",
+	"plugins.secrets.server.deploy": "Then deploy the site again so the server has them.",
+	"plugins.secrets.server.who": "Whoever set up the site's server knows where its environment variables are. Without them there, the build service's secrets below are used instead, which is slower.",
+	"plugins.task.missing": "Your site's setup can't run plugins' tasks yet. A developer needs to copy the starter's plugin-task setup into the site.",
+	"plugins.task.not-allowed": "Your sign-in can't run plugins' tasks. Ask the site's owner to let you publish.",
+	"plugins.task.timeout": "The site's build service didn't answer in time. Try again in a few minutes.",
+	"plugins.task.failed": "The site's build service couldn't run the plugin's task. Try again, or ask a developer to look at the site's builds.",
+	"plugins.asks.server": "Answer requests on your site's server, with everything the server can do",
+	"plugins.asks.mediaStorage": "Keep your site's media in a storage service, outside the site's own files",
+	"plugins.asks.editor": "Offer its own page editor, {title}, which anyone editing the site can choose in place of the usual one, and which is given what they edit there",
+	"plugins.asks.always": "Like any plugin, its code is included when your site is built, and its blocks run on your site's pages, where nothing holds them to what it asks.",
+	"plugins.asks.new": "This version asks for more than the one installed:",
+	"plugins.code": "What its code does",
+	"plugins.code.intro": "The plugin's code, and the code of the packages it needs, read as text for things to look at. Code can hide what it does, so this is a place to start, not a promise.",
+	"plugins.code.reading": "Reading its code…",
+	"plugins.code.via": "needed by {via}",
+	"plugins.code.none": "Nothing to look at was found.",
+	"plugins.code.summary": "Its code: {list}.",
+	"plugins.code.nothing": "Nothing to look at was found in its code.",
+	"plugins.code.unreadSummary": "{count} of its packages couldn't be read in full.",
+	"plugins.note.network": "makes network requests",
+	"plugins.note.programs": "runs other programs on the computer that builds your site",
+	"plugins.note.eval": "runs code made from text, which can't be read beforehand",
+	"plugins.note.native": "includes native code, which can't be read",
+	"plugins.note.install-script": "has a script npm would run when installing it, which your site's build doesn't run, since it installs packages with scripts turned off",
+	"plugins.unread.too-large": "Too large to read in full.",
+	"plugins.unread.too-many": "Not read: the plugin needs too many packages to read them all.",
+	"plugins.unread.no-release": "No version of it is old enough yet, so your site couldn't be built with this plugin.",
+	"plugins.unread.range": "Comes from somewhere other than npm, so it wasn't read.",
+	"plugins.unread.unavailable": "Couldn't be read.",
+	"plugins.install": "Install",
+	"plugins.confirmTitle": "Install {title}?",
+	"plugins.confirmIntro": "{name} version {version} asks to:",
+	"plugins.confirmConfig": "Your site's settings file is changed too, to list the plugins installed here, since it didn't yet.",
+	"plugins.confirmBuild": "Your site's build then writes down the versions of the packages it needs, without running any of their code, and rebuilds your site with it, which takes a few minutes.",
+	"plugins.confirmReview": "Your site's server holds its secrets, so installing a plugin is submitted for review, for a developer to accept.",
+	"plugins.confirmInstall": "Install and publish",
+	"plugins.submit": "Submit for review",
+	"plugins.reviewIntro": "Installs {name} version {version}, from the admin panel's Plugins screen. It asks to:",
+	"plugins.installMessage": "Install the {title} plugin, version {version}",
+	"plugins.updateMessage": "Update the {title} plugin to version {version}",
+	"plugins.installedNotice": "{title} is installed. Your site will have it once it's rebuilt, in a few minutes.",
+	"plugins.updated": "{title} is updated to version {version}.",
+	"plugins.submitted": "The change to {title} is submitted for review.",
+	"plugins.seeReview": "See it",
+	"plugins.remove": "Remove",
+	"plugins.removeReview": "Submit for review",
+	"plugins.removeTitle": "Remove {title}?",
+	"plugins.removeBody": "Its code is taken out of your site when it's next built. Files it kept in your site's content stay where they are.",
+	"plugins.removeUsed": "Pages use its blocks ({blocks}), so it can't be removed. Take them off those pages first.",
+	"plugins.removeKeepsMedia": "{title} keeps your site's media, which pages show from its storage. Move the media back into the site's own files on the Media screen first.",
+	"plugins.removeMessage": "Remove the {title} plugin",
+	"plugins.removed": "{title} is removed.",
+	"plugins.error.record": "The record of which plugins are installed can't be read.",
+	"plugins.error.unreachable": "Plugins can't be looked up right now. Check your internet connection and try again.",
+	"plugins.error.badFile": "This plugin has a problem in its files, so it can't be installed. Its publisher needs to fix it.",
+	"plugins.error.notAPlugin": "This package isn't a Goodfellow plugin.",
+	"plugins.error.config": "Your site's settings file lists plugins of its own, so a developer needs to add the ones installed here to it first.",
+	"plugins.error.inCode": "A developer added this plugin to the site's code, so it's changed there.",
+	"plugins.error.blockClash": "This plugin's blocks have the same names as ones your site has: {blocks}.",
+	"plugins.error.notInstalled": "This plugin wasn't installed here.",
+	"updates.pluginRange": "{title}, a plugin installed here, says it works with Goodfellow {range}, so your site may not build with Goodfellow {version} until the plugin has a newer version.",
+	"updates.themeRange": "Your theme, {title}, says it works with Goodfellow {range}. Goodfellow {version} may change how it looks, so check Themes for a newer version of it after updating.",
 	"siteHistory.intro": "Every publish that changed the site's pages, items, settings or media, newest first. Choose one to see how the site looked after it and what has changed since, then restore the whole site as it was.",
-	"siteHistory.local": "Site history is in the published site's admin panel, where you sign in with GitHub or GitLab.",
+	"siteHistory.local": "Site history is in the published site's admin panel, where you sign in with GitHub, GitLab or Bitbucket.",
 	"siteHistory.demo": "Site history isn't kept in a demo.",
 	"siteHistory.error": "The site's history couldn't be loaded. Check your connection and try again.",
 	"siteHistory.current": "The site now",
@@ -1153,6 +1467,7 @@ const defaultStrings = {
 	"siteHistory.subject.redirects": "Redirects",
 	"siteHistory.subject.credits": "Photo credits",
 	"siteHistory.subject.css": "Custom CSS",
+	"siteHistory.subject.theme": "Which theme is installed",
 	"siteHistory.subject.code": "Code added to every page",
 	"import.title": "Import from WordPress",
 	"import.intro": "Bring a WordPress site's pages, posts, categories, tags, menus and media into this site. Pages keep their addresses, posts become a collection, and old addresses send visitors on to the new ones. You'll see what comes across before anything changes.",
@@ -1190,7 +1505,7 @@ const defaultStrings = {
 	"import.note.embed": "Something from {name} is now a link to it: {items}.",
 	"import.note.form": "A form was left out. Add a Form block in its place: {items}.",
 	"import.note.script": "A script was left out: {items}.",
-	"import.note.table": "A table became text, since pages have no tables: {items}.",
+	"import.note.table": "A table became text, since the site has no Table block: {items}.",
 	"import.note.posts": "A list of the latest posts was left out of a post: {items}.",
 	"import.note.video": "A video is now a link to it, since posts show videos as links: {items}.",
 	"import.note.oldLinks": "Links that still go to the WordPress site, to pages that weren't imported: {count}, such as {url}.",
@@ -1232,7 +1547,7 @@ const defaultStrings = {
 	"updates.code.link": "See it on {host}",
 	"updates.noAccess": "Your sign-in can't see the site's code, at {place}, where its updates are installed. Ask the site's developer to give you access to it. On GitHub, an access token needs to reach it too, or with Sign in with GitHub, Goodfellow's app needs to be installed there.",
 	"updates.back.skip": "Don't install Goodfellow {version} again",
-	"updates.local": "Updates are shown in the published site's admin panel, where you sign in with GitHub or GitLab.",
+	"updates.local": "Updates are shown in the published site's admin panel, where you sign in with GitHub, GitLab or Bitbucket.",
 	"updates.demo": "Updates aren't installed in a demo.",
 	"updates.loading": "Checking for updates…",
 	"updates.current": "This site uses Goodfellow {version}.",
@@ -1299,8 +1614,8 @@ const defaultStrings = {
 	"updates.error.save": "The change couldn't be saved. Try again in a moment.",
 	"updates.error.other": "Something went wrong. Try again in a moment.",
 	"editors.intro": "The people who can edit this site.",
-	"editors.roles": "Editors can change and publish everything in the admin panel. Owners can also invite and remove editors, and connect a domain.",
-	"editors.local": "Editors are invited in the published site's admin panel, where you sign in with GitHub or GitLab.",
+	"editors.roles": "Editors can change and publish everything in the admin panel, unless their limits below say otherwise. Owners can also invite and remove editors, limit what they can change, and connect a domain.",
+	"editors.local": "Editors are invited in the published site's admin panel, where you sign in with GitHub, GitLab or Bitbucket.",
 	"editors.demo": "Editors can't be invited in a demo.",
 	"editors.loading": "Loading editors…",
 	"editors.onlyOwners": "Only the site's owners can invite and remove editors.",
@@ -1325,6 +1640,7 @@ const defaultStrings = {
 	"editors.invite.title": "Invite someone",
 	"editors.invite.field": "Their {host} username",
 	"editors.invite.hint": "They need a {host} account. {host} emails them an invitation, which they accept before they can sign in here.",
+	"editors.invite.hintMembers": "They need to be in the site's {host} workspace already. They can edit as soon as you add them.",
 	"editors.invite.fieldEmail": "Their email address or {host} username",
 	"editors.invite.hintEmail": "With an email address, {host} emails them an invitation, and they make an account if they don't have one.",
 	"editors.invite.submit": "Invite",
@@ -1334,6 +1650,33 @@ const defaultStrings = {
 	"editors.error.invalid": "That isn't a username or email address that {host} accepts.",
 	"editors.error.already": "They already edit the site, or have been invited.",
 	"editors.error.other": "Something went wrong. Try again in a moment.",
+	"permissions.title": "Limits",
+	"permissions.intro": "Limit what someone can change: some pages, some collections, the media library, the header and footer, or the menus. Anyone not listed here can change everything their role allows. Changes outside someone's limits go to a reviewer, who publishes them or not.",
+	"permissions.where": "The admin panel keeps people to their limits, so nobody changes the wrong page by mistake. People who can publish to the site on {host} could still change other files there, so only a site with its own server holds everyone to them.",
+	"permissions.whereServer": "The site's server holds everyone to their limits, whatever they try.",
+	"permissions.host": "the site's host",
+	"permissions.person": "Their username",
+	"permissions.personHint": "The name they sign in with, as the list above shows it.",
+	"permissions.add": "Limit what they can change",
+	"permissions.change": "Change",
+	"permissions.remove": "Remove limits",
+	"permissions.nothing": "Nothing yet",
+	"permissions.allPages": "Every page",
+	"permissions.editTitle": "What {name} can change",
+	"permissions.editIntro": "Tick what they can change. They can look at everything else, and submit changes to it for review.",
+	"permissions.pages": "Pages",
+	"permissions.pagesHint": "Each with the pages under it, and their translations.",
+	"permissions.collections": "Collections' items",
+	"permissions.more": "Also",
+	"permissions.languages": "Languages",
+	"permissions.everyLanguage": "Every language",
+	"permissions.save": "Publish limits",
+	"permissions.message": "Change what {name} can change",
+	"permissions.removeMessage": "Let {name} change everything",
+	"permissions.reviewers": "Who reviews changes outside someone's limits",
+	"permissions.reviewersHint": "Usernames, separated by commas. Leave it empty for every owner.",
+	"permissions.saveReviewers": "Publish reviewers",
+	"permissions.reviewersMessage": "Change who reviews changes outside editors' limits",
 	"general.siteTitle": "Site name",
 	"general.description": "Description",
 	"general.descriptionHint": "Shown by search engines when a page doesn't have its own description.",
@@ -1411,6 +1754,12 @@ const defaultStrings = {
 	"theme.bodyFont": "Text",
 	"theme.radius": "Corner rounding",
 	"theme.radiusHint": "Such as 0.5rem, or 0 for square corners.",
+	"theme.parts": "Blocks' parts",
+	"theme.partsHint": "Give a part of every block of one kind classes, such as rounded-xl shadow-sm, to change how they all look. They come after the block's own classes and before what's chosen for each block.",
+	"theme.partsBlock": "Block",
+	"theme.partsBlockStyled": "{block} ({count} styled)",
+	"theme.partsName": "Its name is {name}, for custom CSS.",
+	"theme.partsNone": "This site's blocks have no named parts.",
 	"theme.color.background": "Background",
 	"theme.color.foreground": "Text",
 	"theme.color.primary": "Main color",
@@ -1766,120 +2115,6 @@ function draftStarted(name) {
 	});
 }
 //#endregion
-//#region src/frame/channel.ts
-/**
-* Requests and events between the admin panel and a frame running the site's
-* code, over one `MessagePort`. The admin panel's side treats everything a
-* frame sends as untrusted: the site's blocks run there, and could send anything.
-*/
-/** The message the admin panel's page sends a frame once it has loaded, with the port to talk on. */
-const CONNECT_MESSAGE = "goodfellow:connect";
-/** A request the other side refused or couldn't answer. */
-var ChannelError = class extends Error {
-	name = "ChannelError";
-};
-function isMessage(data) {
-	if (typeof data !== "object" || data === null) return false;
-	const type = data.type;
-	return type === "request" || type === "response" || type === "event";
-}
-/** What an error says, as text: errors can't cross the port as they are. */
-function errorText(error) {
-	return error instanceof Error ? error.message : String(error);
-}
-function createChannel(port, handlers = {}) {
-	const own = { ...handlers };
-	const pending = /* @__PURE__ */ new Map();
-	const listeners = /* @__PURE__ */ new Map();
-	let next = 1;
-	let closed = false;
-	port.onmessage = async (event) => {
-		const message = event.data;
-		if (!isMessage(message)) return;
-		if (message.type === "response") {
-			const waiting = pending.get(message.id);
-			if (!waiting) return;
-			pending.delete(message.id);
-			if (message.ok) waiting.resolve(message.result);
-			else waiting.reject(new ChannelError(message.error));
-			return;
-		}
-		if (message.type === "event") {
-			for (const listener of listeners.get(message.name) ?? []) listener(message.payload);
-			return;
-		}
-		const handler = typeof message.method === "string" ? Object.hasOwn(own, message.method) && own[message.method] : void 0;
-		if (!handler) {
-			port.postMessage({
-				type: "response",
-				id: message.id,
-				ok: false,
-				error: `No such request: ${message.method}`
-			});
-			return;
-		}
-		try {
-			const result = await handler(message.params);
-			if (!closed) port.postMessage({
-				type: "response",
-				id: message.id,
-				ok: true,
-				result
-			});
-		} catch (error) {
-			if (!closed) port.postMessage({
-				type: "response",
-				id: message.id,
-				ok: false,
-				error: errorText(error)
-			});
-		}
-	};
-	return {
-		call(method, params, transfer = []) {
-			if (closed) return Promise.reject(new ChannelError("The frame has closed."));
-			const id = next++;
-			return new Promise((resolve, reject) => {
-				pending.set(id, {
-					resolve,
-					reject
-				});
-				port.postMessage({
-					type: "request",
-					id,
-					method,
-					params
-				}, transfer);
-			});
-		},
-		emit(name, payload) {
-			if (!closed) port.postMessage({
-				type: "event",
-				name,
-				payload
-			});
-		},
-		on(name, listener) {
-			const set = listeners.get(name) ?? /* @__PURE__ */ new Set();
-			listeners.set(name, set);
-			set.add(listener);
-			return () => set.delete(listener);
-		},
-		handle(method, handler) {
-			own[method] = handler;
-			return () => {
-				if (own[method] === handler) delete own[method];
-			};
-		},
-		close() {
-			closed = true;
-			port.close();
-			for (const waiting of pending.values()) waiting.reject(new ChannelError("The frame has closed."));
-			pending.clear();
-		}
-	};
-}
-//#endregion
 //#region src/frame/protocol.ts
 /** A frame sends this to the admin panel's page once it's listening, and the page answers with a port. */
 const READY_MESSAGE = "goodfellow:frame-ready";
@@ -1894,7 +2129,7 @@ function frameClient(channel) {
 	};
 }
 /** How many times a frame may start again, such as after the development server reloads it, before it's given up on. */
-const MAX_CONNECTIONS = 5;
+const MAX_CONNECTIONS$1 = 5;
 /** Each frame's way of loading its page again, for `reloadFrames()`. */
 const reloaders = /* @__PURE__ */ new Set();
 /**
@@ -1919,7 +2154,7 @@ function useFrameServices() {
 	return value;
 }
 /** Whether a frame asked to go somewhere it may: one of the admin panel's own screens. */
-function isAdminScreen(href) {
+function isAdminScreen$1(href) {
 	return typeof href === "string" && /^#\/[\w\-/?=&%.]*$/.test(href);
 }
 /** Makes a frame of the site's code and connects to it. */
@@ -1945,13 +2180,17 @@ function useFrame({ mode, onConnect, media }) {
 		let stopped = false;
 		const handlers = {
 			navigate: (href) => {
-				if (isAdminScreen(href)) latest.current.services.navigate(href);
+				if (isAdminScreen$1(href)) latest.current.services.navigate(href);
 			},
 			"media.choose": (params) => {
 				const kind = params?.kind;
-				if (kind !== "image" && kind !== "video" && kind !== "file") return null;
+				if (kind !== "image" && kind !== "video" && kind !== "audio" && kind !== "file") return null;
 				return latest.current.services.chooseMedia(kind, typeof params.value === "string" ? params.value : "");
 			},
+			"plugin.call": (params) => {
+				if (mode !== "editor" || typeof params?.plugin !== "string" || typeof params.method !== "string") return null;
+				return latest.current.services.callPlugin(params.plugin, params.method, Array.isArray(params.args) ? params.args : []);
+			},
 			"media.bytes": async (url) => {
 				if (typeof url !== "string" || !url.startsWith("/media/") || url.includes("..")) return null;
 				return await (latest.current.media ?? latest.current.services.mediaPreviews).bytes(url) ?? null;
@@ -1963,7 +2202,7 @@ function useFrame({ mode, onConnect, media }) {
 			current?.close();
 			setClient(void 0);
 			connections += 1;
-			if (connections > MAX_CONNECTIONS) {
+			if (connections > MAX_CONNECTIONS$1) {
 				setFailed(true);
 				return;
 			}
@@ -2065,10 +2304,16 @@ function frameSiteCode(client) {
 				targets,
 				today
 			});
+		},
+		async drawBlock(content, target) {
+			return (await client()).call("code.drawBlock", {
+				content,
+				target
+			});
 		}
 	};
 }
-const HIDDEN = {
+const HIDDEN$1 = {
 	position: "absolute",
 	width: 0,
 	height: 0,
@@ -2086,138 +2331,884 @@ function SiteCodeFrame({ onClient }) {
 		title: "",
 		"aria-hidden": "true",
 		tabIndex: -1,
-		style: HIDDEN,
+		style: HIDDEN$1,
 		...frameProps
 	});
 }
 //#endregion
-//#region src/publish-failure.tsx
-/** Explains why a publish from a dialog or form didn't go through. */
-function PublishFailure({ failure }) {
+//#region src/limits-dialog.tsx
+/** What a change outside someone's limits touches, in words. Files that are none of those are named once, together. */
+function describeLimitProblems(t, content, problems) {
+	const described = /* @__PURE__ */ new Set();
+	const pages = allPages(content);
+	for (const problem of problems) if (problem.kind === "page") {
+		const title = (pages.find((found) => found.path === problem.address)?.content.data.root.props)?.title;
+		described.add(t("limits.page", { name: typeof title === "string" && title ? title : problem.address }));
+	} else if (problem.kind === "entry") {
+		const collection = content.collections.find((found) => found.id === problem.collection);
+		const title = (collection?.entries.find((found) => found.slug === problem.slug))?.content.fields.title;
+		described.add(t("limits.entry", {
+			name: typeof title === "string" && title ? title : problem.slug,
+			collection: collection?.settings.name ?? problem.collection
+		}));
+	} else described.add(t(`limits.${problem.kind}`));
+	return [...described];
+}
+/**
+* Changes outside what someone may change: listed, with what they can do
+* instead, submitting them for review where the site can take one.
+*/
+function LimitsDialog({ problems, content, onSubmit, onClose }) {
 	const t = useStrings();
-	if (!failure || failure.reason === "checks") return null;
-	return /* @__PURE__ */ jsx(ErrorMessage, {
-		message: t(failure.reason === "conflict" ? "publish.conflict" : "publish.error"),
-		error: failure.error
+	const [state, setState] = useState({ type: "asking" });
+	const submit = async () => {
+		if (!onSubmit) return;
+		setState({ type: "submitting" });
+		try {
+			setState({
+				type: "submitted",
+				...await onSubmit()
+			});
+		} catch (error) {
+			setState({
+				type: "error",
+				error
+			});
+		}
+	};
+	return /* @__PURE__ */ jsxs(Dialog, {
+		title: t("limits.title"),
+		onClose,
+		children: [
+			/* @__PURE__ */ jsx("p", { children: t("limits.intro") }),
+			/* @__PURE__ */ jsx("ul", {
+				className: "gfa-check-list",
+				children: describeLimitProblems(t, content, problems).map((line) => /* @__PURE__ */ jsx("li", { children: line }, line))
+			}),
+			state.type === "submitted" ? /* @__PURE__ */ jsxs("p", {
+				role: "status",
+				children: [
+					t("limits.submitted"),
+					" ",
+					state.url && /* @__PURE__ */ jsx("a", {
+						href: state.url,
+						target: "_blank",
+						rel: "noreferrer",
+						children: t("draft.seeReview")
+					})
+				]
+			}) : /* @__PURE__ */ jsx("p", { children: t(onSubmit ? "limits.review" : "limits.noReview") }),
+			state.type === "error" && /* @__PURE__ */ jsx(ErrorMessage, {
+				message: t("limits.submitError"),
+				error: state.error
+			}),
+			/* @__PURE__ */ jsxs("div", {
+				className: "gfa-dialog-actions",
+				children: [/* @__PURE__ */ jsx(Button, {
+					onClick: onClose,
+					children: t(state.type === "submitted" ? "action.close" : "limits.goBack")
+				}), onSubmit && state.type !== "submitted" && /* @__PURE__ */ jsx(Button, {
+					variant: "primary",
+					disabled: state.type === "submitting",
+					onClick: () => void submit(),
+					children: t(state.type === "submitting" ? "limits.submitting" : "draft.submit")
+				})]
+			})
+		]
 	});
 }
 //#endregion
-//#region src/site-host.ts
+//#region src/limits.ts
 /**
-* The host outside GitHub and GitLab that builds the site, as its setup files
-* say, such as Cloudflare Pages: `undefined` while they're read, `null` for none.
-* They're outside the folders the site's files are read from, so they're read
-* as version history reads files, at the loaded revision.
+* What the signed-in person may change, for screens that show the rest
+* read-only. Publishing checks every change again (`outsideLimits()`), so
+* these only spare people changes they couldn't publish.
 */
-function useOutsideHost() {
-	const { readFile, versions, state } = useAdmin();
-	const revision = state.status === "ready" ? state.revision : void 0;
-	const [host, setHost] = useState();
-	useEffect(() => {
-		let cancelled = false;
-		outsideHost(versions && revision ? (path) => versions.readAt(path, revision) : readFile).then((found) => !cancelled && setHost(found ?? null), () => !cancelled && setHost(null));
-		return () => {
-			cancelled = true;
-		};
-	}, [
-		readFile,
-		versions,
-		revision
-	]);
-	return host;
+/** Whether someone with `limits` may change what's open. Collections' templates are their settings, which limits never cover. */
+function mayChange(content, limits, what) {
+	if (!limits) return true;
+	switch (what.kind) {
+		case "page": {
+			const page = content.pages.find((found) => found.path === what.path);
+			return mayChangePage(content, limits, page ?? { path: what.path });
+		}
+		case "header":
+		case "footer": return mayChangeLayout(content, limits, what.language);
+		case "template": return false;
+		case "entry": {
+			const entry = content.collections.find((found) => found.id === what.collection)?.entries.find((found) => found.slug === what.entry);
+			return entry ? mayChangeEntry(content, limits, entry) : (limits.collections ?? []).includes(what.collection);
+		}
+		case "media": return mayChangeMedia(limits);
+		case "menus": return mayChangeMenus(content, limits, what.language);
+	}
+}
+/** Whether the signed-in person may change what's open, once the site has loaded. */
+function useMayChange(what) {
+	const { state, limits } = useAdmin();
+	return state.status !== "ready" || mayChange(state.content, limits, what);
 }
 //#endregion
-//#region src/upload.ts
-/** Photos are made no larger than this on their longest side, which is plenty for any screen. */
-const MAX_IMAGE_SIDE = 2400;
-var UploadError = class extends Error {
-	problem;
-	file;
-	name = "UploadError";
-	constructor(problem, file, message) {
-		super(message);
-		this.problem = problem;
-		this.file = file;
-	}
-};
-const REENCODED = {
+//#region src/media-previews.ts
+const TYPES = {
 	jpg: "image/jpeg",
 	jpeg: "image/jpeg",
 	png: "image/png",
-	webp: "image/webp"
+	gif: "image/gif",
+	webp: "image/webp",
+	avif: "image/avif",
+	svg: "image/svg+xml",
+	ico: "image/x-icon",
+	pdf: "application/pdf",
+	mp3: "audio/mpeg",
+	m4a: "audio/mp4",
+	mp4: "video/mp4",
+	webm: "video/webm",
+	vtt: "text/vtt"
 };
-async function canvasBlob(canvas, type) {
-	return new Promise((resolve) => canvas.toBlob(resolve, type, .85));
+/** The type to show a file as, from its name. Needed so browsers display SVGs from memory. */
+function mediaType(name) {
+	return TYPES[extensionOf(name)] ?? "application/octet-stream";
 }
-/**
-* Re-saves a photo: smaller if it's larger than any screen needs, and always
-* for JPEGs, which drops details hidden in the file such as where it was taken.
-* Returns `undefined` to keep the file as it is.
-*/
-async function resized(file, extension) {
-	const type = REENCODED[extension];
-	if (!type || typeof createImageBitmap !== "function") return void 0;
-	let bitmap;
-	try {
-		bitmap = await createImageBitmap(file, { imageOrientation: "from-image" });
-	} catch {
-		throw new UploadError("unreadable", file.name, `${file.name} couldn't be read as an image.`);
-	}
-	const scale = Math.min(1, MAX_IMAGE_SIDE / Math.max(bitmap.width, bitmap.height));
-	if (scale === 1 && type !== "image/jpeg") {
-		bitmap.close();
-		return;
-	}
-	const canvas = document.createElement("canvas");
-	canvas.width = Math.round(bitmap.width * scale);
-	canvas.height = Math.round(bitmap.height * scale);
-	canvas.getContext("2d")?.drawImage(bitmap, 0, 0, canvas.width, canvas.height);
-	bitmap.close();
-	const blob = await canvasBlob(canvas, type);
-	return blob && (scale < 1 || blob.size < file.size) ? blob : void 0;
+function createMediaPreviews(store, siteUrl, storage = () => void 0) {
+	const local = /* @__PURE__ */ new Map();
+	const remembered = /* @__PURE__ */ new Map();
+	const listeners = /* @__PURE__ */ new Set();
+	const loading = /* @__PURE__ */ new Map();
+	const base = trimChars(siteUrl, "/", { start: false });
+	const remember = (url, bytes) => {
+		const previous = local.get(url);
+		if (previous) URL.revokeObjectURL(previous);
+		remembered.set(url, bytes);
+		for (const listener of listeners) listener(url, bytes);
+		local.set(url, URL.createObjectURL(new Blob([new Uint8Array(bytes)], { type: mediaType(url) })));
+	};
+	return {
+		resolve(url) {
+			if (!url.startsWith("/media/")) return url;
+			const end = url.search(/[?#]/);
+			const stored = local.has(url) ? void 0 : storedMediaUrl(storage(), end < 0 ? url : url.slice(0, end));
+			return stored ? `${stored}${end < 0 ? "" : url.slice(end)}` : local.get(url) ?? `${base}${url}`;
+		},
+		remember,
+		onRemember(listener) {
+			for (const [url, bytes] of remembered) listener(url, bytes);
+			listeners.add(listener);
+			return () => listeners.delete(listener);
+		},
+		async bytes(url) {
+			const known = remembered.get(url);
+			if (known) return known;
+			const path = mediaPath(url);
+			return path ? await store.readBytes(path).catch(() => void 0) : void 0;
+		},
+		load(url) {
+			const known = local.get(url);
+			if (known) return Promise.resolve(known);
+			const path = mediaPath(url);
+			if (!path) return Promise.resolve(void 0);
+			let pending = loading.get(url);
+			if (!pending) {
+				pending = store.readBytes(path).then((bytes) => {
+					if (!bytes) return void 0;
+					remember(url, bytes);
+					return local.get(url);
+				}).catch(() => void 0);
+				loading.set(url, pending);
+			}
+			return pending;
+		}
+	};
 }
-const UNSAFE_SVG_ELEMENTS = [
-	"script",
-	"foreignObject",
-	"iframe",
-	"embed",
-	"object",
-	"audio",
-	"video"
+const URL_ATTRIBUTES = [
+	"src",
+	"href",
+	"poster"
 ];
+const MEDIA_IN_STYLE = /url\((['"]?)(\/media\/[^'")]+)\1\)/g;
 /**
-* Removes anything from an SVG that could run code if someone opens the
-* file directly: scripts, embedded pages, event handlers, and javascript:, vbscript:
-* and data: links other than images.
+* Keeps media in a preview document showing: rewrites `/media/…` addresses in
+* images, links and inline styles as the preview changes, and if an image
+* still doesn't load, reads it from the repository instead.
 */
-function cleanSvg(text) {
-	const doc = new DOMParser().parseFromString(text, "image/svg+xml");
-	if (doc.querySelector("parsererror") || doc.documentElement.nodeName.toLowerCase() !== "svg") return void 0;
-	for (const name of UNSAFE_SVG_ELEMENTS) for (const element of [...doc.getElementsByTagName(name)]) element.remove();
-	for (const element of [doc.documentElement, ...doc.documentElement.querySelectorAll("*")]) for (const attribute of [...element.attributes]) {
-		const value = attribute.value.trim().toLowerCase();
-		if (attribute.name.toLowerCase().startsWith("on") || value.startsWith("javascript:") || value.startsWith("vbscript:") || value.startsWith("data:") && !value.startsWith("data:image/")) element.removeAttribute(attribute.name);
-	}
-	return new XMLSerializer().serializeToString(doc);
-}
-/** Checks a file chosen for upload and gets it ready: photos made web-sized, SVGs made safe. */
-async function prepareUpload(file) {
-	const extension = extensionOf(file.name);
-	if (!mediaKind$1(file.name)) throw new UploadError("type", file.name, `${file.name} isn't a kind of file the site can use.`);
-	let blob = file;
-	if (extension === "svg") {
-		const cleaned = cleanSvg(await file.text());
-		if (cleaned === void 0) throw new UploadError("unreadable", file.name, `${file.name} isn't a valid SVG image.`);
-		blob = new Blob([cleaned], { type: "image/svg+xml" });
-	} else blob = await resized(file, extension) ?? file;
-	if (blob.size > MAX_UPLOAD_BYTES) throw new UploadError("size", file.name, `${file.name} is ${blob.size} bytes, over the ${MAX_UPLOAD_BYTES}-byte limit.`);
-	return {
-		name: file.name,
-		bytes: new Uint8Array(await blob.arrayBuffer()),
-		type: blob.type || file.type
-	};
-}
-//#endregion
+function showMediaInPreview(doc, previews) {
+	const fix = (element) => {
+		for (const attribute of URL_ATTRIBUTES) {
+			const value = element.getAttribute(attribute);
+			if (!value?.startsWith("/media/")) continue;
+			const resolved = previews.resolve(value);
+			if (resolved !== value) {
+				element.setAttribute(`data-gf-${attribute}`, value);
+				element.setAttribute(attribute, resolved);
+			}
+		}
+		const style = element.getAttribute("style");
+		if (style?.includes("/media/")) {
+			const resolved = style.replace(MEDIA_IN_STYLE, (_match, quote, url) => `url(${quote}${previews.resolve(url)}${quote})`);
+			if (resolved !== style) element.setAttribute("style", resolved);
+		}
+	};
+	const fixTree = (root) => {
+		fix(root);
+		for (const element of root.querySelectorAll("[src], [href], [poster], [style]")) fix(element);
+	};
+	const observer = new MutationObserver((records) => {
+		for (const record of records) {
+			if (record.type === "attributes" && record.target.nodeType === 1) fix(record.target);
+			for (const node of record.addedNodes) if (node.nodeType === 1) fixTree(node);
+		}
+	});
+	observer.observe(doc.documentElement, {
+		subtree: true,
+		childList: true,
+		attributes: true,
+		attributeFilter: [...URL_ATTRIBUTES, "style"]
+	});
+	fixTree(doc.documentElement);
+	const onError = (event) => {
+		const image = event.target;
+		if (image?.tagName !== "IMG") return;
+		const original = image.getAttribute("data-gf-src") ?? image.getAttribute("src") ?? "";
+		if (!original.startsWith("/media/") || image.hasAttribute("data-gf-loaded")) return;
+		image.setAttribute("data-gf-loaded", "");
+		previews.load(original).then((url) => {
+			if (url) {
+				image.setAttribute("data-gf-src", original);
+				image.setAttribute("src", url);
+			}
+		});
+	};
+	doc.addEventListener("error", onError, true);
+	return () => {
+		observer.disconnect();
+		doc.removeEventListener("error", onError, true);
+	};
+}
+//#endregion
+//#region src/plugin-frames.tsx
+/**
+* The admin panel's side of plugins' admin frames: making them, connecting to
+* them, and answering only for what each plugin declared. Everything a frame
+* sends is treated as the plugin's code may have written it.
+*/
+/** A plugin's frame asked for something it didn't declare, or that isn't there. */
+var RefusedError = class extends Error {
+	name = "RefusedError";
+};
+/** How many times a plugin's frame may start again before it's given up on. */
+const MAX_CONNECTIONS = 5;
+/** How long a service call waits for the plugin's frame to start. */
+const START_TIMEOUT = 2e4;
+function isAdminScreen(href) {
+	return typeof href === "string" && /^#\/[\w\-/?=&%.]*$/.test(href);
+}
+function strings(value, what) {
+	if (!Array.isArray(value) || !value.every((item) => typeof item === "string")) throw new RefusedError(`Say which ${what}.`);
+	return value;
+}
+/** A plugin's file change, as the admin panel publishes it, if the plugin declared its file. */
+function toFileChange(plugin, value) {
+	if (typeof value !== "object" || value === null) throw new RefusedError("That isn't a change.");
+	const change = value;
+	if (typeof change.path !== "string" || !pluginMayUse(plugin.permissions, change.path)) throw new RefusedError(`${plugin.title} didn't ask to change ${String(change.path)}.`);
+	if (change.delete === true) return {
+		path: change.path,
+		delete: true
+	};
+	if (typeof change.text === "string") return {
+		path: change.path,
+		content: change.text
+	};
+	if (change.bytes instanceof Uint8Array) return {
+		path: change.path,
+		bytes: change.bytes
+	};
+	throw new RefusedError("That isn't a change.");
+}
+/** The tallest a screen's frame is made, whatever it says. */
+const MAX_SCREEN_HEIGHT = 2e4;
+const MEDIA_KINDS = /* @__PURE__ */ new Set([
+	"image",
+	"video",
+	"audio",
+	"file"
+]);
+/** The answers a plugin's frame gets, each checked against what the plugin declared. */
+function pluginHandlers(plugin, host, onResize, editor) {
+	/** The page edited with the plugin's editor, for requests only its editor frame may make. */
+	const editing = (what) => {
+		const hooks = editor();
+		if (!hooks) throw new RefusedError(`Only an editor's frame may ${what}.`);
+		return hooks;
+	};
+	const secretsLinks = /* @__PURE__ */ new Set();
+	return {
+		read: async (params) => {
+			const paths = strings(params?.paths, "files");
+			const refused = paths.find((path) => !pluginMayUse(plugin.permissions, path));
+			if (refused) throw new RefusedError(`${plugin.title} didn't ask to read ${refused}.`);
+			const read = await Promise.all(paths.map(async (path) => [path, await host().read(path) ?? null]));
+			return Object.fromEntries(read);
+		},
+		readBytes: async (params) => {
+			const path = params?.path;
+			if (typeof path !== "string" || !pluginMayUse(plugin.permissions, path)) throw new RefusedError(`${plugin.title} didn't ask to read ${String(path)}.`);
+			return await host().readBytes(path) ?? null;
+		},
+		list: async (params) => {
+			const folder = params?.folder;
+			if (typeof folder !== "string" || !pluginMayList(plugin.permissions, folder)) throw new RefusedError(`${plugin.title} didn't ask to list ${String(folder)}.`);
+			return (await host().list(folder.replace(/\/+$/, ""))).filter((path) => pluginMayUse(plugin.permissions, path));
+		},
+		publish: async (params) => {
+			if (!Array.isArray(params?.changes) || params.changes.length === 0 || typeof params.message !== "string") throw new RefusedError("That isn't a publish.");
+			const changes = params.changes.map((change) => toFileChange(plugin, change));
+			return { published: await host().publish(changes, params.message.slice(0, 500)) };
+		},
+		server: async (params) => {
+			const base = host().server;
+			if (!plugin.server || !base) throw new RefusedError(`${plugin.title} has no server here.`);
+			const path = params?.path;
+			if (typeof path !== "string" || path.includes("..") || /^[a-z]+:/i.test(path)) throw new RefusedError("That isn't one of the plugin's addresses.");
+			const method = typeof params.method === "string" ? params.method.toUpperCase() : "GET";
+			const headers = Object.fromEntries(Object.entries(params.headers ?? {}).filter(([name, value]) => typeof value === "string" && /^(content-type|accept|x-goodfellow-plugin-[\w-]+)$/i.test(name)));
+			const response = await fetch(`${base.replace(/\/+$/, "")}/${encodeURIComponent(plugin.id)}/${path.replace(/^\/+/, "")}`, {
+				method,
+				headers: {
+					...headers,
+					[APP_API_HEADER]: "1"
+				},
+				...typeof params.body === "string" && method !== "GET" && method !== "HEAD" && { body: params.body },
+				credentials: "same-origin",
+				cache: "no-store"
+			});
+			return {
+				status: response.status,
+				body: await response.text()
+			};
+		},
+		navigate: (href) => {
+			if (isAdminScreen(href)) host().navigate(href);
+		},
+		"secrets.help": async () => {
+			const help = await host().secretsHelp?.(plugin) ?? [];
+			for (const { link } of help) if (link) secretsLinks.add(link.url);
+			return help;
+		},
+		"secrets.open": (params) => {
+			const url = params?.url;
+			if (typeof url !== "string" || !secretsLinks.has(url)) throw new RefusedError("That isn't one of the links given.");
+			window.open(url, "_blank", "noopener,noreferrer");
+		},
+		resize: (params) => {
+			const height = params?.height;
+			if (typeof height === "number" && Number.isFinite(height)) onResize(Math.min(Math.max(0, Math.ceil(height)), MAX_SCREEN_HEIGHT));
+		},
+		"editor.change": (params) => {
+			const hooks = editing("say what's edited");
+			if (typeof params !== "object" || params === null || typeof params.data !== "object" || params.data === null) throw new RefusedError("That isn't what's edited.");
+			const state = typeof params.state === "object" && params.state !== null ? params.state : {};
+			hooks.onChange({
+				data: params.data,
+				state: {
+					past: state.past === true,
+					future: state.future === true,
+					selected: typeof state.selected === "string" ? state.selected : null
+				}
+			});
+		},
+		"media.choose": (params) => {
+			const hooks = editing("choose media");
+			const kind = params?.kind;
+			if (typeof kind !== "string" || !MEDIA_KINDS.has(kind)) throw new RefusedError("That isn't a kind of media.");
+			return hooks.chooseMedia(kind, typeof params.value === "string" ? params.value : "");
+		},
+		"editor.sharePreview": (params) => {
+			return editing("preview a shared link").sharePreview(params?.root);
+		},
+		"editor.draw": (params) => {
+			const hooks = editing("draw blocks");
+			const block = params?.block;
+			if (typeof block !== "object" || block === null || typeof block.type !== "string" || typeof block.props !== "object" || block.props === null) throw new RefusedError("That isn't a block.");
+			return hooks.draw(block);
+		},
+		"editor.styles": () => editing("read the site's styles").styles(),
+		task: async (params) => {
+			const id = params?.id;
+			if (typeof id !== "string" || !plugin.tasks?.some((task) => task.id === id)) throw new RefusedError(`${plugin.title} has no task called ${String(id)}.`);
+			const run = host().runTask;
+			if (!run) throw new RefusedError(`${plugin.title}'s tasks can't run here.`);
+			let input;
+			try {
+				input = JSON.stringify(params.input ?? null);
+			} catch {
+				throw new RefusedError("A task's input must be plain data.");
+			}
+			if (input.length > TASK_INPUT_LIMIT) throw new RefusedError("That's too much for one task.");
+			const keys = await taskKeys();
+			const sealed = await run({
+				id: newTaskRequestId(),
+				plugin: plugin.id,
+				task: id,
+				input,
+				key: keys.publicKey
+			});
+			const answer = await openTaskAnswer(sealed, keys.privateKey);
+			if (!answer.ok) throw new Error(answer.error.slice(0, 2e3));
+			return answer.output;
+		}
+	};
+}
+/** Makes one of a plugin's frames and connects to it; an editor's frame with `editor`. */
+function usePluginFrame(plugin, host, mode, screen, editor) {
+	const element = useRef(null);
+	const [channel, setChannel] = useState();
+	const [failed, setFailed] = useState(false);
+	const [height, setHeight] = useState();
+	const latest = useRef(host);
+	latest.current = host;
+	const latestEditor = useRef(editor);
+	latestEditor.current = editor;
+	useEffect(() => {
+		let current;
+		let connections = 0;
+		let stopped = false;
+		const onMessage = (event) => {
+			const frame = element.current?.contentWindow;
+			if (!frame || event.source !== frame || event.data !== "goodfellow:plugin-ready") return;
+			current?.close();
+			setChannel(void 0);
+			connections += 1;
+			if (connections > MAX_CONNECTIONS) {
+				setFailed(true);
+				return;
+			}
+			const { port1, port2 } = new MessageChannel();
+			const next = createChannel(port1, pluginHandlers(plugin, () => latest.current, (next) => {
+				if (mode === "screen") setHeight(next);
+			}, () => mode === "editor" ? latestEditor.current : void 0));
+			current = next;
+			frame.postMessage({ type: CONNECT_MESSAGE }, "*", [port2]);
+			const opening = mode === "editor" ? latestEditor.current?.open() : void 0;
+			const init = {
+				mode,
+				...screen && { screen },
+				...opening && { editor: opening },
+				plugin,
+				siteUrl: latest.current.siteUrl,
+				theme: latest.current.theme
+			};
+			next.call("init", init).then((opened) => {
+				if (stopped || current !== next) return;
+				setChannel(next);
+				if (mode === "editor") {
+					const said = opened ?? {};
+					latestEditor.current?.onOpened({
+						set: said.set === true,
+						undo: said.undo === true
+					}, next);
+				}
+			}, () => {
+				if (!stopped && current === next) setFailed(true);
+			});
+		};
+		window.addEventListener("message", onMessage);
+		return () => {
+			stopped = true;
+			window.removeEventListener("message", onMessage);
+			current?.close();
+		};
+	}, [
+		plugin,
+		mode,
+		screen
+	]);
+	useEffect(() => {
+		channel?.call("theme", host.theme).catch(() => {});
+	}, [channel, host.theme]);
+	return {
+		channel,
+		failed,
+		frameProps: {
+			ref: useCallback((frame) => {
+				element.current = frame;
+			}, []),
+			sandbox: FRAME_SANDBOX,
+			src: pluginFrameUrl(host.editorUrl, plugin.id),
+			...height !== void 0 && { style: { height } }
+		}
+	};
+}
+const HIDDEN = {
+	position: "absolute",
+	width: 0,
+	height: 0,
+	border: 0,
+	visibility: "hidden"
+};
+/** One plugin's hidden frame for its services, which tells `onChannel` once it has started. */
+function ServiceFrame({ plugin, host, onChannel }) {
+	const { channel, frameProps } = usePluginFrame(plugin, host, "service");
+	useEffect(() => onChannel(plugin.id, channel), [
+		plugin.id,
+		channel,
+		onChannel
+	]);
+	return /* @__PURE__ */ jsx("iframe", {
+		title: "",
+		"aria-hidden": "true",
+		tabIndex: -1,
+		...frameProps,
+		style: HIDDEN
+	});
+}
+const PluginHostContext = createContext(null);
+const PluginMediaContext = createContext(null);
+/**
+* The plugin keeping the site's media, by its name in
+* `content/media-storage.json`, where the site has it and it says it keeps
+* media. Outside `PluginServices`, such as in the site's frames, none.
+*/
+function usePluginMedia(name) {
+	const media = useContext(PluginMediaContext);
+	return name && media ? media(name) : void 0;
+}
+/** What a plugin's frame said about being ready, as the admin panel shows it: its message is the plugin's own words. */
+function readyAnswer(plugin, value) {
+	const answer = value ?? {};
+	if (answer.ready === true) return { ready: true };
+	const screen = typeof answer.screen === "string" && plugin.screens?.some((own) => own.id === answer.screen) ? answer.screen : void 0;
+	return {
+		ready: false,
+		message: typeof answer.message === "string" ? answer.message.slice(0, 500) : "",
+		...screen && { screen }
+	};
+}
+/** What plugins' screens are given, inside `PluginServices`. */
+function usePluginHost() {
+	const value = useContext(PluginHostContext);
+	if (!value) throw new Error("Plugins' frames need the admin panel around them.");
+	return value;
+}
+/**
+* Plugins' services for the editor's blocks: each plugin's hidden frame is
+* made the first time something asks it. `onCall` gets the function that
+* asks, `(plugin name, method, arguments)`.
+*/
+function PluginServices({ plugins, host, onCall, children }) {
+	const [started, setStarted] = useState([]);
+	const ready = useRef(/* @__PURE__ */ new Map());
+	const waiting = useRef(/* @__PURE__ */ new Map());
+	const onChannel = useCallback((id, channel) => {
+		if (!channel) {
+			ready.current.delete(id);
+			return;
+		}
+		ready.current.set(id, channel);
+		for (const resolve of waiting.current.get(id)?.splice(0) ?? []) resolve(channel);
+	}, []);
+	const channelFor = useCallback(async (plugin) => {
+		const channel = ready.current.get(plugin.id);
+		if (channel) return channel;
+		setStarted((current) => current.includes(plugin.id) ? current : [...current, plugin.id]);
+		return await new Promise((resolve, reject) => {
+			const list = waiting.current.get(plugin.id) ?? [];
+			list.push(resolve);
+			waiting.current.set(plugin.id, list);
+			setTimeout(() => reject(/* @__PURE__ */ new Error(`${plugin.title} didn't start.`)), START_TIMEOUT);
+		});
+	}, []);
+	const call = useCallback(async (name, method, args) => {
+		const plugin = plugins.find((candidate) => candidate.name === name && candidate.admin);
+		if (!plugin) throw new Error(`The site has no plugin called ${name} with services.`);
+		return (await channelFor(plugin)).call("call", {
+			method,
+			args
+		});
+	}, [plugins, channelFor]);
+	useEffect(() => onCall(call), [call, onCall]);
+	const media = useCallback((name) => {
+		const plugin = plugins.find((candidate) => candidate.name === name && candidate.admin && candidate.mediaStorage);
+		if (!plugin) return void 0;
+		return {
+			plugin,
+			ready: async () => readyAnswer(plugin, await (await channelFor(plugin)).call("media.ready")),
+			upload: async (files) => {
+				await (await channelFor(plugin)).call("media.upload", { files });
+			},
+			remove: async (addresses) => {
+				await (await channelFor(plugin)).call("media.remove", { addresses });
+			}
+		};
+	}, [plugins, channelFor]);
+	return /* @__PURE__ */ jsxs(PluginHostContext.Provider, {
+		value: host,
+		children: [/* @__PURE__ */ jsx(PluginMediaContext.Provider, {
+			value: media,
+			children
+		}), plugins.filter((plugin) => started.includes(plugin.id)).map((plugin) => /* @__PURE__ */ jsx(ServiceFrame, {
+			plugin,
+			host,
+			onChannel
+		}, plugin.id))]
+	});
+}
+/** One of a plugin's screens, drawn by its admin module in a frame of its own. */
+function PluginScreenFrame({ plugin, screen, failedText }) {
+	const { failed, frameProps } = usePluginFrame(plugin, usePluginHost(), "screen", screen.id);
+	if (failed) return /* @__PURE__ */ jsx("p", {
+		className: "gfa-error",
+		children: failedText
+	});
+	return /* @__PURE__ */ jsx("iframe", {
+		title: screen.title,
+		className: "gfa-plugin-screen",
+		...frameProps
+	});
+}
+//#endregion
+//#region src/publish-failure.tsx
+/** Explains why a publish from a dialog or form didn't go through. */
+function PublishFailure({ failure }) {
+	const t = useStrings();
+	if (!failure || failure.reason === "checks") return null;
+	return /* @__PURE__ */ jsx(ErrorMessage, {
+		message: t(failure.reason === "conflict" ? "publish.conflict" : "publish.error"),
+		error: failure.error
+	});
+}
+//#endregion
+//#region src/site-host.ts
+/**
+* The host outside GitHub, GitLab and Bitbucket that builds the site, as its setup files
+* say, such as Cloudflare Pages: `undefined` while they're read, `null` for none.
+* They're outside the folders the site's files are read from, so they're read
+* as version history reads files, at the loaded revision.
+*/
+function useOutsideHost() {
+	const { readFile, versions, state } = useAdmin();
+	const revision = state.status === "ready" ? state.revision : void 0;
+	const [host, setHost] = useState();
+	useEffect(() => {
+		let cancelled = false;
+		outsideHost(versions && revision ? (path) => versions.readAt(path, revision) : readFile).then((found) => !cancelled && setHost(found ?? null), () => !cancelled && setHost(null));
+		return () => {
+			cancelled = true;
+		};
+	}, [
+		readFile,
+		versions,
+		revision
+	]);
+	return host;
+}
+//#endregion
+//#region src/upload.ts
+/** Photos are made no larger than this on their longest side, which is plenty for any screen. */
+const MAX_IMAGE_SIDE = 2400;
+var UploadError = class extends Error {
+	problem;
+	file;
+	name = "UploadError";
+	constructor(problem, file, message) {
+		super(message);
+		this.problem = problem;
+		this.file = file;
+	}
+};
+const REENCODED = {
+	jpg: "image/jpeg",
+	jpeg: "image/jpeg",
+	png: "image/png",
+	webp: "image/webp"
+};
+async function canvasBlob(canvas, type) {
+	return new Promise((resolve) => canvas.toBlob(resolve, type, .85));
+}
+/**
+* Re-saves a photo: smaller if it's larger than any screen needs, and always
+* for JPEGs, which drops details hidden in the file such as where it was taken.
+* Returns `undefined` to keep the file as it is.
+*/
+async function resized(file, extension) {
+	const type = REENCODED[extension];
+	if (!type || typeof createImageBitmap !== "function") return void 0;
+	let bitmap;
+	try {
+		bitmap = await createImageBitmap(file, { imageOrientation: "from-image" });
+	} catch {
+		throw new UploadError("unreadable", file.name, `${file.name} couldn't be read as an image.`);
+	}
+	const scale = Math.min(1, MAX_IMAGE_SIDE / Math.max(bitmap.width, bitmap.height));
+	if (scale === 1 && type !== "image/jpeg") {
+		bitmap.close();
+		return;
+	}
+	const canvas = document.createElement("canvas");
+	canvas.width = Math.round(bitmap.width * scale);
+	canvas.height = Math.round(bitmap.height * scale);
+	canvas.getContext("2d")?.drawImage(bitmap, 0, 0, canvas.width, canvas.height);
+	bitmap.close();
+	const blob = await canvasBlob(canvas, type);
+	return blob && (scale < 1 || blob.size < file.size) ? blob : void 0;
+}
+const UNSAFE_SVG_ELEMENTS = [
+	"script",
+	"foreignObject",
+	"iframe",
+	"embed",
+	"object",
+	"audio",
+	"video"
+];
+/**
+* Removes anything from an SVG that could run code if someone opens the
+* file directly: scripts, embedded pages, event handlers, and javascript:, vbscript:
+* and data: links other than images.
+*/
+function cleanSvg(text) {
+	const doc = new DOMParser().parseFromString(text, "image/svg+xml");
+	if (doc.querySelector("parsererror") || doc.documentElement.nodeName.toLowerCase() !== "svg") return void 0;
+	for (const name of UNSAFE_SVG_ELEMENTS) for (const element of [...doc.getElementsByTagName(name)]) element.remove();
+	for (const element of [doc.documentElement, ...doc.documentElement.querySelectorAll("*")]) for (const attribute of [...element.attributes]) {
+		const value = attribute.value.trim().toLowerCase();
+		if (attribute.name.toLowerCase().startsWith("on") || value.startsWith("javascript:") || value.startsWith("vbscript:") || value.startsWith("data:") && !value.startsWith("data:image/")) element.removeAttribute(attribute.name);
+	}
+	return new XMLSerializer().serializeToString(doc);
+}
+/** A file checked and made ready, as a `Blob`: photos made web-sized, SVGs made safe, other files as they are. */
+async function prepared(file, maxBytes) {
+	const extension = extensionOf(file.name);
+	if (!mediaKind$1(file.name)) throw new UploadError("type", file.name, `${file.name} isn't a kind of file the site can use.`);
+	let blob = file;
+	if (extension === "svg") {
+		const cleaned = cleanSvg(await file.text());
+		if (cleaned === void 0) throw new UploadError("unreadable", file.name, `${file.name} isn't a valid SVG image.`);
+		blob = new Blob([cleaned], { type: "image/svg+xml" });
+	} else if (mediaKind$1(file.name) === "image") blob = await resized(file, extension) ?? file;
+	if (blob.size > maxBytes) throw new UploadError("size", file.name, `${file.name} is ${blob.size} bytes, over the ${maxBytes}-byte limit.`);
+	return blob;
+}
+/** Checks a file chosen for upload and gets it ready: photos made web-sized, SVGs made safe. */
+async function prepareUpload(file) {
+	const blob = await prepared(file, MAX_UPLOAD_BYTES);
+	return {
+		name: file.name,
+		bytes: new Uint8Array(await blob.arrayBuffer()),
+		type: blob.type || file.type
+	};
+}
+/** Reads a picture's size in pixels, or nothing where the browser can't. */
+async function imageSize(blob, name) {
+	if (mediaKind$1(name) !== "image" || extensionOf(name) === "svg" || typeof createImageBitmap !== "function") return;
+	try {
+		const bitmap = await createImageBitmap(blob);
+		const size = {
+			width: bitmap.width,
+			height: bitmap.height
+		};
+		bitmap.close();
+		return size.width > 0 && size.height > 0 ? size : void 0;
+	} catch {
+		return;
+	}
+}
+/**
+* Checks a file for media storage and gets it ready as `prepareUpload()`
+* does, up to the storage's largest file rather than the site's own 25 MB.
+*/
+async function prepareStoredUpload(file, maxBytes) {
+	const blob = await prepared(file, maxBytes);
+	const type = blob.type || file.type || mediaType(file.name);
+	return {
+		name: file.name,
+		blob,
+		type,
+		...await imageSize(blob, file.name)
+	};
+}
+//#endregion
+//#region src/router.tsx
+function parseHash(hash) {
+	const [path = "", query = ""] = hash.replace(/^#\/?/, "").split("?");
+	return {
+		segments: path.split("/").filter(Boolean),
+		params: new URLSearchParams(query)
+	};
+}
+function subscribe$1(onChange) {
+	window.addEventListener("hashchange", onChange);
+	return () => window.removeEventListener("hashchange", onChange);
+}
+function useRoute() {
+	return parseHash(useSyncExternalStore(subscribe$1, () => window.location.hash, () => ""));
+}
+const guards = /* @__PURE__ */ new Set();
+/** Whether any screen has unpublished changes. */
+function hasUnsavedChanges() {
+	return [...guards].some((isDirty) => isDirty());
+}
+/**
+* Registers a screen's unpublished changes, so leaving it (inside the admin
+* panel or by closing the tab) asks for confirmation first.
+*/
+function useUnsavedChanges(isDirty) {
+	useEffect(() => {
+		if (!isDirty) return;
+		const guard = () => true;
+		guards.add(guard);
+		const onBeforeUnload = (event) => event.preventDefault();
+		window.addEventListener("beforeunload", onBeforeUnload);
+		return () => {
+			guards.delete(guard);
+			window.removeEventListener("beforeunload", onBeforeUnload);
+		};
+	}, [isDirty]);
+}
+/** Goes to another screen, asking first if there are unpublished changes. Returns whether it navigated. */
+function navigate(to, confirmLeave) {
+	if (hasUnsavedChanges() && !confirmLeave()) return false;
+	guards.clear();
+	window.location.hash = to;
+	return true;
+}
+/** Sections of Site Settings' General tab that links can scroll to, as `#/settings/general?section=forms`. */
+const SETTINGS_SECTIONS = {
+	contact: "contact",
+	forms: "forms"
+};
+function pageEditorHref(path) {
+	return `#/pages/edit?path=${encodeURIComponent(path)}`;
+}
+/** An in-app link that asks before leaving a screen with unpublished changes. */
+function Link({ href, confirmLeave, ...props }) {
+	return /* @__PURE__ */ jsx("a", {
+		...props,
+		href,
+		onClick: (event) => {
+			if (event.defaultPrevented || event.button !== 0 || event.metaKey || event.ctrlKey || event.shiftKey) return;
+			event.preventDefault();
+			navigate(href, confirmLeave);
+		}
+	});
+}
+function collectionHref(id, tab = "entries") {
+	return tab === "entries" ? `#/collections/${id}` : `#/collections/${id}/${tab}`;
+}
+function entryEditorHref(collection, slug) {
+	return `#/collections/${collection}/edit?slug=${encodeURIComponent(slug)}`;
+}
+//#endregion
+//#region src/use-link.tsx
+/** `Link`, with the standard "leave without publishing?" confirmation. */
+function AppLink(props) {
+	const t = useStrings();
+	return /* @__PURE__ */ jsx(Link, {
+		...props,
+		confirmLeave: () => window.confirm(t("unsaved.confirm"))
+	});
+}
+//#endregion
 //#region src/media-library.tsx
 /** A media file's picture: the image itself, or its kind of file for anything else. */
 function MediaThumb({ url, className }) {
@@ -2268,16 +3259,148 @@ const uploadProblems = {
 	size: "media.error.size",
 	unreadable: "media.error.unreadable"
 };
+/** The plugin keeping the site's media, where the site has one and it's there to ask. */
+function useMediaStorage() {
+	const { content } = useSiteContent();
+	const storage = content.mediaStorage;
+	const client = usePluginMedia(storage?.plugin);
+	return {
+		storage,
+		...client && { client }
+	};
+}
+/** How many files moving media hands the plugin at once. */
+const MOVE_BATCH = 20;
+/** Whether the storage plugin can take files now, or why not, with a link to where that's fixed. */
+async function storageReady(t, client, tasks) {
+	const { plugin } = client;
+	if (plugin.tasks?.length && !await tasks?.supported().catch(() => false)) return {
+		ok: false,
+		message: t("plugins.task.missing")
+	};
+	let ready;
+	try {
+		ready = await client.ready();
+	} catch (error) {
+		return {
+			ok: false,
+			message: t("media.storage.unavailable", { plugin: plugin.title }),
+			error
+		};
+	}
+	if (ready.ready) return void 0;
+	return {
+		ok: false,
+		message: t("media.storage.notReady", {
+			plugin: plugin.title,
+			message: ready.message
+		}),
+		...ready.screen && { action: {
+			href: `#/settings/plugin/${encodeURIComponent(plugin.id)}/${encodeURIComponent(ready.screen)}`,
+			label: t("media.storage.settings", { plugin: plugin.title })
+		} }
+	};
+}
+/** A file's size for content's list of stored media, with a picture's size where it's known. */
+function storedFile(size, picture) {
+	return {
+		size,
+		...picture.width && picture.height && {
+			width: picture.width,
+			height: picture.height
+		}
+	};
+}
 /**
 * Uploads files to the media folder in one publish, and shows them in the
 * admin panel straight away. `replace` overwrites one existing file instead.
+* Where a plugin keeps the site's media, it keeps the files, larger ones
+* too, and the publish lists them in `content/media-storage.json`.
 */
 function useUploadMedia() {
 	const t = useStrings();
-	const { publish, mediaPreviews } = useAdmin();
+	const { publish, mediaPreviews, tasks } = useAdmin();
 	const { content, media } = useSiteContent();
+	const { storage, client } = useMediaStorage();
+	const published = async (changes, message, urls) => {
+		const result = await publish(changes, message, { checks: false });
+		if (!result.ok) return {
+			ok: false,
+			message: t(result.reason === "conflict" ? "publish.conflict" : "publish.error"),
+			failure: result
+		};
+		return {
+			ok: true,
+			urls
+		};
+	};
+	const toStorage = async (files, replace) => {
+		if (!storage || !client) return {
+			ok: false,
+			message: t("publish.error")
+		};
+		const problem = await storageReady(t, client, tasks);
+		if (problem) return problem;
+		const { plugin } = client;
+		const maxBytes = plugin.mediaStorage?.maxBytes ?? MAX_UPLOAD_BYTES;
+		const taken = allMedia(content, media).map(fileName);
+		const added = {};
+		const batch = [];
+		for (const file of files) {
+			let ready;
+			try {
+				ready = await prepareStoredUpload(file, maxBytes);
+			} catch (error) {
+				if (error instanceof UploadError && error.problem === "size") return {
+					ok: false,
+					message: t("media.error.storageSize", {
+						name: file.name,
+						size: formatSize(maxBytes),
+						plugin: plugin.title
+					})
+				};
+				return {
+					ok: false,
+					message: error instanceof UploadError ? t(uploadProblems[error.problem], { name: error.file }) : String(error)
+				};
+			}
+			const url = replace ? mediaUrl(replace) : `${MEDIA_URL_PREFIX}${uploadName(file.name, taken)}`;
+			taken.push(fileName(url));
+			batch.push({
+				address: url,
+				type: ready.type,
+				size: ready.blob.size,
+				data: ready.blob
+			});
+			added[url] = storedFile(ready.blob.size, ready);
+		}
+		try {
+			await client.upload(batch);
+		} catch (error) {
+			const name = batch.map((file) => fileName(file.address)).join(", ");
+			return {
+				ok: false,
+				message: t("media.storage.failed", {
+					name,
+					plugin: plugin.title
+				}),
+				error
+			};
+		}
+		const urls = Object.keys(added);
+		const changes = [mediaStorageFileChange(withStoredFiles(storage, added))];
+		if (replace && media.includes(replace)) changes.push({
+			path: replace,
+			delete: true
+		});
+		const credits = replace ? withoutCredits(content.credits, [mediaUrl(replace)]) : void 0;
+		if (credits) changes.push(credits);
+		const names = urls.map(fileName).join(", ");
+		return published(changes, replace ? t("media.replaceMessage", { name: names }) : t("media.uploadMessage", { names }), urls);
+	};
 	return async (files, replace) => {
-		const taken = media.map(fileName);
+		if (storage && client && (!replace || isStorableAddress(mediaUrl(replace)))) return toStorage(files, replace);
+		const taken = allMedia(content, media).map(fileName);
 		const changes = [];
 		const uploads = [];
 		for (const file of files) {
@@ -2304,16 +3427,12 @@ function useUploadMedia() {
 		for (const upload of uploads) mediaPreviews.remember(upload.url, upload.bytes);
 		const names = changes.map((change) => fileName(change.path)).join(", ");
 		const credits = replace ? withoutCredits(content.credits, [mediaUrl(replace)]) : void 0;
-		const result = await publish(credits ? [...changes, credits] : changes, replace ? t("media.replaceMessage", { name: names }) : t("media.uploadMessage", { names }), { checks: false });
-		if (!result.ok) return {
-			ok: false,
-			message: t(result.reason === "conflict" ? "publish.conflict" : "publish.error"),
-			failure: result
-		};
-		return {
-			ok: true,
-			urls: uploads.map((upload) => upload.url)
-		};
+		const unstored = replace && storage && isStoredMedia(content, mediaUrl(replace)) ? mediaStorageFileChange(withStoredFiles(storage, {}, [mediaUrl(replace)])) : void 0;
+		return published([
+			...changes,
+			...credits ? [credits] : [],
+			...unstored ? [unstored] : []
+		], replace ? t("media.replaceMessage", { name: names }) : t("media.uploadMessage", { names }), uploads.map((upload) => upload.url));
 	};
 }
 function DeleteMediaDialog({ url, onClose }) {
@@ -2329,18 +3448,21 @@ function DeleteMediaDialog({ url, onClose }) {
 		settings: t("nav.settings"),
 		css: t("settings.tab.css")
 	});
+	const { storage, client } = useMediaStorage();
 	const onDelete = async () => {
 		const path = mediaPath(url);
 		if (!path) return;
 		setBusy(true);
 		const credits = withoutCredits(content.credits, [url]);
-		const result = await publish([{
+		const stored = storage && isStoredMedia(content, url);
+		const result = await publish([stored ? mediaStorageFileChange(withStoredFiles(storage, {}, [url])) : {
 			path,
 			delete: true
 		}, ...credits ? [credits] : []], t("media.deleteMessage", { name }));
 		setBusy(false);
-		if (result.ok) onClose();
-		else setFailure(result);
+		if (!result.ok) return setFailure(result);
+		if (stored) client?.remove([url]).catch(() => {});
+		onClose();
 	};
 	return /* @__PURE__ */ jsxs(Dialog, {
 		title: t("media.deleteTitle", { name }),
@@ -2408,26 +3530,41 @@ function UploadStatus({ status }) {
 	const t = useStrings();
 	if (status.type === "uploading") return /* @__PURE__ */ jsx("p", {
 		className: "gfa-notice",
-		children: t("media.uploading")
+		role: "status",
+		children: status.plugin ? t("media.storage.uploading", { plugin: status.plugin }) : t("media.uploading")
 	});
 	if (status.type === "done") return /* @__PURE__ */ jsx("p", {
 		className: "gfa-notice gfa-notice-success",
 		role: "status",
 		children: t("media.uploaded")
 	});
-	if (status.type === "failed") return status.failure ? /* @__PURE__ */ jsx(PublishFailure, { failure: status.failure }) : /* @__PURE__ */ jsx(ErrorMessage, { message: status.message });
+	if (status.type === "failed") {
+		if (status.failure) return /* @__PURE__ */ jsx(PublishFailure, { failure: status.failure });
+		return /* @__PURE__ */ jsx(ErrorMessage, {
+			message: status.message,
+			error: status.error,
+			action: status.action && /* @__PURE__ */ jsx(AppLink, {
+				href: status.action.href,
+				children: status.action.label
+			})
+		});
+	}
 	return null;
 }
 function useUploads() {
 	const upload = useUploadMedia();
+	const { storage, client } = useMediaStorage();
 	const [status, setStatus] = useState({ type: "idle" });
 	const run = async (files, replace) => {
-		setStatus({ type: "uploading" });
+		const waits = storage && client?.plugin.tasks?.length && (!replace || isStorableAddress(mediaUrl(replace)));
+		setStatus({
+			type: "uploading",
+			...waits && { plugin: client.plugin.title }
+		});
 		const result = await upload(files, replace);
 		setStatus(result.ok ? { type: "done" } : {
 			type: "failed",
-			message: result.message,
-			failure: result.failure
+			...result
 		});
 		return result;
 	};
@@ -2436,17 +3573,280 @@ function useUploads() {
 		run
 	};
 }
+/** Moves the site's own media files to the plugin that keeps media, in one publish once each is kept. */
+function MoveToStorageDialog({ client, paths, onClose }) {
+	const t = useStrings();
+	const { publish, readBytes, tasks } = useAdmin();
+	const { storage } = useMediaStorage();
+	const [progress, setProgress] = useState();
+	const [problem, setProblem] = useState();
+	const [failure, setFailure] = useState(null);
+	const plugin = client.plugin.title;
+	const move = async () => {
+		if (!storage) return;
+		setProblem(void 0);
+		setFailure(null);
+		const unready = await storageReady(t, client, tasks);
+		if (unready) return setProblem(unready);
+		setProgress({ done: 0 });
+		const added = {};
+		let failed;
+		for (let start = 0; start < paths.length && !failed; start += MOVE_BATCH) {
+			const batch = [];
+			const sizes = {};
+			try {
+				for (const path of paths.slice(start, start + MOVE_BATCH)) {
+					const url = mediaUrl(path);
+					const bytes = await readBytes(path);
+					if (!bytes) continue;
+					const blob = new Blob([new Uint8Array(bytes)], { type: mediaType(path) });
+					batch.push({
+						address: url,
+						type: blob.type,
+						size: blob.size,
+						data: blob
+					});
+					sizes[url] = storedFile(blob.size, await imageSize(blob, path) ?? {});
+				}
+				if (batch.length > 0) await client.upload(batch);
+				Object.assign(added, sizes);
+			} catch (error) {
+				const name = batch.map((file) => fileName(file.address)).join(", ");
+				failed = {
+					ok: false,
+					message: t("media.storage.failed", {
+						name,
+						plugin
+					}),
+					error
+				};
+			}
+			setProgress({ done: Math.min(start + MOVE_BATCH, paths.length) });
+		}
+		const moved = Object.keys(added);
+		if (moved.length === 0) {
+			setProgress(void 0);
+			return setProblem(failed ?? {
+				ok: false,
+				message: t("media.move.nothing")
+			});
+		}
+		const result = await publish([mediaStorageFileChange(withStoredFiles(storage, added)), ...moved.flatMap((url) => {
+			const path = mediaPath(url);
+			return path ? [{
+				path,
+				delete: true
+			}] : [];
+		})], t("media.move.message", { plugin }), { checks: false });
+		setProgress(void 0);
+		if (!result.ok) return setFailure(result);
+		if (failed) return setProblem({
+			...failed,
+			message: `${t("media.move.some", {
+				count: String(moved.length),
+				plugin
+			})} ${failed.message}`
+		});
+		onClose(t("media.move.done", {
+			count: String(moved.length),
+			plugin
+		}));
+	};
+	return /* @__PURE__ */ jsxs(Dialog, {
+		title: t("media.move.title", { plugin }),
+		onClose: () => onClose(),
+		children: [
+			/* @__PURE__ */ jsx("p", { children: t("media.move.body", { plugin }) }),
+			progress && /* @__PURE__ */ jsxs("p", {
+				className: "gfa-notice",
+				role: "status",
+				children: [t("media.move.moving", {
+					done: String(progress.done),
+					total: String(paths.length)
+				}), client.plugin.tasks?.length ? ` ${t("media.storage.wait")}` : ""]
+			}),
+			problem && /* @__PURE__ */ jsx(ErrorMessage, {
+				message: problem.message,
+				error: problem.error,
+				action: problem.action && /* @__PURE__ */ jsx(AppLink, {
+					href: problem.action.href,
+					children: problem.action.label
+				})
+			}),
+			/* @__PURE__ */ jsx(PublishFailure, { failure }),
+			/* @__PURE__ */ jsxs("div", {
+				className: "gfa-dialog-actions",
+				children: [/* @__PURE__ */ jsx(Button, {
+					onClick: () => onClose(),
+					children: t("action.cancel")
+				}), /* @__PURE__ */ jsx(Button, {
+					variant: "primary",
+					disabled: progress !== void 0,
+					onClick: () => void move(),
+					children: progress ? t("media.move.busy") : t("media.move.button", {
+						count: String(paths.length),
+						plugin
+					})
+				})]
+			})
+		]
+	});
+}
+/**
+* Copies the files a plugin keeps back into the site's own files, from their
+* public addresses, up to the site's own 25 MB each, which needs no plugin.
+* Once none are left, the site stops keeping media outside its files.
+*/
+function MoveBackDialog({ plugin, onClose }) {
+	const t = useStrings();
+	const { publish } = useAdmin();
+	const { content } = useSiteContent();
+	const { storage, client } = useMediaStorage();
+	const [busy, setBusy] = useState(false);
+	const [problem, setProblem] = useState();
+	const [failure, setFailure] = useState(null);
+	const files = Object.entries(storage?.files ?? {});
+	const large = files.filter(([, file]) => file.size > MAX_UPLOAD_BYTES).map(([url]) => fileName(url));
+	const moveBack = async () => {
+		if (!storage) return;
+		setBusy(true);
+		setProblem(void 0);
+		setFailure(null);
+		const changes = [];
+		const moved = [];
+		for (const [url, file] of files) {
+			const path = mediaPath(url);
+			const from = storedMediaUrl(storage, url);
+			if (!path || !from || file.size > MAX_UPLOAD_BYTES) continue;
+			try {
+				const response = await fetch(from, { cache: "no-store" });
+				if (!response.ok) throw new Error(`${response.status} ${response.statusText}`);
+				changes.push({
+					path,
+					bytes: new Uint8Array(await response.arrayBuffer())
+				});
+				moved.push(url);
+			} catch (error) {
+				setBusy(false);
+				return setProblem({
+					message: t("media.back.failed", {
+						name: fileName(url),
+						plugin
+					}),
+					error
+				});
+			}
+		}
+		const left = withStoredFiles(storage, {}, moved);
+		changes.push(mediaStorageFileChange(Object.keys(left.files).length > 0 ? left : void 0));
+		const result = await publish(changes, t("media.back.message", { plugin }), { checks: false });
+		setBusy(false);
+		if (!result.ok) return setFailure(result);
+		if (moved.length > 0) client?.remove(moved).catch(() => {});
+		onClose(t("media.back.done", {
+			count: String(moved.length),
+			plugin
+		}));
+	};
+	return /* @__PURE__ */ jsxs(Dialog, {
+		title: t("media.back.title", { plugin }),
+		onClose: () => onClose(),
+		children: [
+			/* @__PURE__ */ jsx("p", { children: files.length > 0 ? t("media.back.body", { plugin }) : t("media.back.empty", { plugin }) }),
+			large.length > 0 && /* @__PURE__ */ jsx("p", { children: t("media.back.large", {
+				names: large.join(", "),
+				plugin
+			}) }),
+			content.mediaStorage && problem && /* @__PURE__ */ jsx(ErrorMessage, {
+				message: problem.message,
+				error: problem.error
+			}),
+			/* @__PURE__ */ jsx(PublishFailure, { failure }),
+			/* @__PURE__ */ jsxs("div", {
+				className: "gfa-dialog-actions",
+				children: [/* @__PURE__ */ jsx(Button, {
+					onClick: () => onClose(),
+					children: t("action.cancel")
+				}), /* @__PURE__ */ jsx(Button, {
+					variant: "primary",
+					disabled: busy,
+					onClick: () => void moveBack(),
+					children: busy ? t("media.move.busy") : t("media.back.button")
+				})]
+			})
+		]
+	});
+}
+/** Where a plugin keeps the site's media: what it keeps, and moving the site's own files there or back. */
+function StorageSection({ onDone }) {
+	const t = useStrings();
+	const { content, media } = useSiteContent();
+	const { storage, client } = useMediaStorage();
+	const [moving, setMoving] = useState();
+	if (!storage) return null;
+	const plugin = client?.plugin.title ?? storage.plugin;
+	const count = String(Object.keys(storage.files).length);
+	const movable = media.filter((path) => isStorableAddress(mediaUrl(path)) && !isStoredMedia(content, mediaUrl(path)));
+	const close = (message) => {
+		setMoving(void 0);
+		if (message) onDone(message);
+	};
+	return /* @__PURE__ */ jsxs("section", {
+		className: "gfa-media-storage",
+		"aria-label": t("media.storage.title"),
+		children: [
+			/* @__PURE__ */ jsx("p", {
+				className: "gfa-notice",
+				role: "note",
+				children: client ? t("media.storage.intro", {
+					plugin,
+					count
+				}) : t("media.storage.missing", {
+					plugin,
+					count
+				})
+			}),
+			/* @__PURE__ */ jsxs("div", {
+				className: "gfa-dialog-actions",
+				children: [client && movable.length > 0 && /* @__PURE__ */ jsx(Button, {
+					variant: "primary",
+					onClick: () => setMoving("to"),
+					children: t("media.move.button", {
+						count: String(movable.length),
+						plugin
+					})
+				}), /* @__PURE__ */ jsx(Button, {
+					variant: "ghost",
+					onClick: () => setMoving("back"),
+					children: t("media.back.button")
+				})]
+			}),
+			moving === "to" && client && /* @__PURE__ */ jsx(MoveToStorageDialog, {
+				client,
+				paths: movable,
+				onClose: close
+			}),
+			moving === "back" && /* @__PURE__ */ jsx(MoveBackDialog, {
+				plugin,
+				onClose: close
+			})
+		]
+	});
+}
 /** Every uploaded image and file, with buttons to upload, replace and delete them. */
 /** Cloudflare's terms for its CDN, which limit serving video on its free plans. */
 const CLOUDFLARE_TERMS = "https://www.cloudflare.com/service-specific-terms-application-services/";
 function MediaScreen() {
 	const t = useStrings();
-	const { content, media } = useSiteContent();
+	const { content, media: own } = useSiteContent();
+	const media = useMemo(() => allMedia(content, own), [content, own]);
 	const { status, run } = useUploads();
 	const [query, setQuery] = useState("");
 	const [deleting, setDeleting] = useState(null);
 	const [copied, setCopied] = useState(null);
+	const [moved, setMoved] = useState();
 	const searchId = useId();
+	const mayChange = useMayChange({ kind: "media" });
 	useEffect(() => {
 		const stop = (event) => {
 			if (event.dataTransfer?.types.includes("Files")) event.preventDefault();
@@ -2465,7 +3865,7 @@ function MediaScreen() {
 		children: [
 			/* @__PURE__ */ jsxs("div", {
 				className: "gfa-screen-header",
-				children: [/* @__PURE__ */ jsx("h1", { children: t("media.title") }), /* @__PURE__ */ jsx(UploadButton, {
+				children: [/* @__PURE__ */ jsx("h1", { children: t("media.title") }), mayChange && /* @__PURE__ */ jsx(UploadButton, {
 					label: t("media.upload"),
 					disabled: status.type === "uploading",
 					onFiles: (files) => void run(files)
@@ -2475,6 +3875,11 @@ function MediaScreen() {
 				className: "gfa-hint",
 				children: t("media.intro")
 			}),
+			!mayChange && /* @__PURE__ */ jsx("p", {
+				className: "gfa-notice",
+				role: "note",
+				children: t("limits.mediaReadOnly")
+			}),
 			cloudflareVideos && /* @__PURE__ */ jsxs("p", {
 				className: "gfa-notice",
 				role: "note",
@@ -2489,6 +3894,12 @@ function MediaScreen() {
 					})
 				]
 			}),
+			mayChange && /* @__PURE__ */ jsx(StorageSection, { onDone: setMoved }),
+			moved && /* @__PURE__ */ jsx("p", {
+				className: "gfa-notice gfa-notice-success",
+				role: "status",
+				children: moved
+			}),
 			/* @__PURE__ */ jsx(UploadStatus, { status }),
 			media.length > 0 && /* @__PURE__ */ jsxs("div", {
 				className: "gfa-field gfa-media-search",
@@ -2505,7 +3916,7 @@ function MediaScreen() {
 				})]
 			}),
 			/* @__PURE__ */ jsx(DropZone, {
-				onFiles: (files) => void run(files),
+				onFiles: (files) => void (mayChange && run(files)),
 				children: media.length === 0 ? /* @__PURE__ */ jsx("p", { children: t("media.empty") }) : urls.length === 0 ? /* @__PURE__ */ jsx("p", { children: t("media.noMatches") }) : /* @__PURE__ */ jsx("ul", {
 					className: "gfa-media-grid",
 					children: urls.map((url) => /* @__PURE__ */ jsxs("li", {
@@ -2518,27 +3929,27 @@ function MediaScreen() {
 								children: fileName(url)
 							}),
 							content.credits?.[url] && /* @__PURE__ */ jsx(MediaCredit, { credit: content.credits[url] }),
+							isStoredMedia(content, url) && /* @__PURE__ */ jsx("span", {
+								className: "gfa-badge",
+								children: t("media.stored", { plugin: content.mediaStorage?.plugin ?? "" })
+							}),
 							/* @__PURE__ */ jsxs("div", {
 								className: "gfa-media-actions",
-								children: [
-									/* @__PURE__ */ jsx(Button, {
-										variant: "ghost",
-										onClick: () => void navigator.clipboard?.writeText(url).then(() => setCopied(url), () => setCopied(null)),
-										children: copied === url ? t("media.copied") : t("media.copy")
-									}),
-									/* @__PURE__ */ jsx(UploadButton, {
-										label: t("media.replace"),
-										variant: "secondary",
-										multiple: false,
-										disabled: status.type === "uploading",
-										onFiles: (files) => void run(files.slice(0, 1), mediaPath(url))
-									}),
-									/* @__PURE__ */ jsx(Button, {
-										variant: "ghost",
-										onClick: () => setDeleting(url),
-										children: t("media.delete")
-									})
-								]
+								children: [/* @__PURE__ */ jsx(Button, {
+									variant: "ghost",
+									onClick: () => void navigator.clipboard?.writeText(url).then(() => setCopied(url), () => setCopied(null)),
+									children: copied === url ? t("media.copied") : t("media.copy")
+								}), mayChange && /* @__PURE__ */ jsxs(Fragment$1, { children: [/* @__PURE__ */ jsx(UploadButton, {
+									label: t("media.replace"),
+									variant: "secondary",
+									multiple: false,
+									disabled: status.type === "uploading",
+									onFiles: (files) => void run(files.slice(0, 1), mediaPath(url))
+								}), /* @__PURE__ */ jsx(Button, {
+									variant: "ghost",
+									onClick: () => setDeleting(url),
+									children: t("media.delete")
+								})] })]
 							})
 						]
 					}, url))
@@ -2554,22 +3965,26 @@ function MediaScreen() {
 const PICKER_TITLES = {
 	image: "media.pickerTitle",
 	video: "media.pickerTitleVideo",
+	audio: "media.pickerTitleAudio",
 	file: "media.pickerTitleFile"
 };
 const CHOOSE_LABELS = {
 	image: "media.choose",
 	video: "media.chooseVideo",
+	audio: "media.chooseAudio",
 	file: "media.chooseFile"
 };
 const ACCEPT = {
 	image: "image/*",
 	video: "video/mp4,video/webm",
+	audio: "audio/mpeg,audio/mp4,.mp3,.m4a",
 	file: void 0
 };
 /** Picks a file from the media library, or uploads a new one, for a field. */
 function MediaPickerDialog({ kind, onSelect, onClose }) {
 	const t = useStrings();
-	const { media } = useSiteContent();
+	const { content, media: own } = useSiteContent();
+	const media = allMedia(content, own);
 	const { status, run } = useUploads();
 	const urls = media.map(mediaUrl).filter((url) => kind === "file" || mediaKind$1(url) === kind).sort((a, b) => fileName(a).localeCompare(fileName(b)));
 	return /* @__PURE__ */ jsx(Dialog, {
@@ -2684,214 +4099,91 @@ function MediaField({ label, hint, error, value, kind = "image", onChange }) {
 	});
 }
 //#endregion
-//#region src/media-previews.ts
-const TYPES = {
-	jpg: "image/jpeg",
-	jpeg: "image/jpeg",
-	png: "image/png",
-	gif: "image/gif",
-	webp: "image/webp",
-	avif: "image/avif",
-	svg: "image/svg+xml",
-	ico: "image/x-icon",
-	pdf: "application/pdf",
-	mp3: "audio/mpeg",
-	m4a: "audio/mp4",
-	mp4: "video/mp4",
-	webm: "video/webm",
-	vtt: "text/vtt"
-};
-/** The type to show a file as, from its name. Needed so browsers display SVGs from memory. */
-function mediaType(name) {
-	return TYPES[extensionOf(name)] ?? "application/octet-stream";
+//#region src/plugin-secrets.ts
+/** The lines a plugin's secrets take in `.env.local`, each waiting for its value after the `=`. */
+function envLines(names) {
+	return names.map((name) => `${name}=`).join("\n");
 }
-function createMediaPreviews(store, siteUrl) {
-	const local = /* @__PURE__ */ new Map();
-	const remembered = /* @__PURE__ */ new Map();
-	const listeners = /* @__PURE__ */ new Set();
-	const loading = /* @__PURE__ */ new Map();
-	const base = trimChars(siteUrl, "/", { start: false });
-	const remember = (url, bytes) => {
-		const previous = local.get(url);
-		if (previous) URL.revokeObjectURL(previous);
-		remembered.set(url, bytes);
-		for (const listener of listeners) listener(url, bytes);
-		local.set(url, URL.createObjectURL(new Blob([new Uint8Array(bytes)], { type: mediaType(url) })));
-	};
-	return {
-		resolve(url) {
-			if (!url.startsWith("/media/")) return url;
-			return local.get(url) ?? `${base}${url}`;
-		},
-		remember,
-		onRemember(listener) {
-			for (const [url, bytes] of remembered) listener(url, bytes);
-			listeners.add(listener);
-			return () => listeners.delete(listener);
-		},
-		async bytes(url) {
-			const known = remembered.get(url);
-			if (known) return known;
-			const path = mediaPath(url);
-			return path ? await store.readBytes(path).catch(() => void 0) : void 0;
-		},
-		load(url) {
-			const known = local.get(url);
-			if (known) return Promise.resolve(known);
-			const path = mediaPath(url);
-			if (!path) return Promise.resolve(void 0);
-			let pending = loading.get(url);
-			if (!pending) {
-				pending = store.readBytes(path).then((bytes) => {
-					if (!bytes) return void 0;
-					remember(url, bytes);
-					return local.get(url);
-				}).catch(() => void 0);
-				loading.set(url, pending);
-			}
-			return pending;
-		}
-	};
+/** How to add a plugin's secrets where a site keeps them, as its screens show it, in the admin panel's words. */
+function helpFor(place, names, t) {
+	const list = names.join(", ");
+	switch (place.kind) {
+		case "github": return {
+			where: "github",
+			title: t("plugins.secrets.github.title"),
+			link: {
+				url: place.url,
+				label: t("plugins.secrets.github.link")
+			},
+			steps: [{ text: t("plugins.secrets.github.open") }, ...names.map((name) => ({
+				text: t("plugins.secrets.github.add", { name }),
+				code: name
+			}))],
+			notes: [t("plugins.secrets.github.who"), t("plugins.secrets.github.kind")]
+		};
+		case "gitlab": return {
+			where: "gitlab",
+			title: t("plugins.secrets.gitlab.title"),
+			link: {
+				url: place.url,
+				label: t("plugins.secrets.gitlab.link")
+			},
+			steps: [{ text: t("plugins.secrets.gitlab.open") }, ...names.map((name) => ({
+				text: t("plugins.secrets.gitlab.add", { name }),
+				code: name
+			}))],
+			notes: [t("plugins.secrets.gitlab.who")]
+		};
+		case "bitbucket": return {
+			where: "bitbucket",
+			title: t("plugins.secrets.bitbucket.title"),
+			link: {
+				url: place.url,
+				label: t("plugins.secrets.bitbucket.link")
+			},
+			steps: [{ text: t("plugins.secrets.bitbucket.open") }, ...names.map((name) => ({
+				text: t("plugins.secrets.bitbucket.add", { name }),
+				code: name
+			}))],
+			notes: [t("plugins.secrets.bitbucket.who")]
+		};
+		case "goodfellow-dev":
+		case "next-dev": return {
+			where: "development",
+			title: t("plugins.secrets.development.title"),
+			steps: [{
+				text: t("plugins.secrets.development.file", { names: list }),
+				code: envLines(names)
+			}, { text: t("plugins.secrets.development.values") }],
+			notes: [t("plugins.secrets.development.local")]
+		};
+		case "server": return {
+			where: "server",
+			title: t("plugins.secrets.server.title"),
+			steps: [{ text: t("plugins.secrets.server.add", { names: list }) }, { text: t("plugins.secrets.server.deploy") }],
+			notes: [t("plugins.secrets.server.who")]
+		};
+	}
 }
-const URL_ATTRIBUTES = [
-	"src",
-	"href",
-	"poster"
-];
-const MEDIA_IN_STYLE = /url\((['"]?)(\/media\/[^'")]+)\1\)/g;
 /**
-* Keeps media in a preview document showing: rewrites `/media/…` addresses in
-* images, links and inline styles as the preview changes, and if an image
-* still doesn't load, reads it from the repository instead.
+* How the site's owner adds the secrets a plugin declared, for this site as
+* it's set up: where its tasks get them, and, on a full-stack site whose
+* plugin has a server module, the server first, with the CI as well.
 */
-function showMediaInPreview(doc, previews) {
-	const fix = (element) => {
-		for (const attribute of URL_ATTRIBUTES) {
-			const value = element.getAttribute(attribute);
-			if (!value?.startsWith("/media/")) continue;
-			const resolved = previews.resolve(value);
-			if (resolved !== value) {
-				element.setAttribute(`data-gf-${attribute}`, value);
-				element.setAttribute(attribute, resolved);
-			}
-		}
-		const style = element.getAttribute("style");
-		if (style?.includes("/media/")) {
-			const resolved = style.replace(MEDIA_IN_STYLE, (_match, quote, url) => `url(${quote}${previews.resolve(url)}${quote})`);
-			if (resolved !== style) element.setAttribute("style", resolved);
-		}
-	};
-	const fixTree = (root) => {
-		fix(root);
-		for (const element of root.querySelectorAll("[src], [href], [poster], [style]")) fix(element);
-	};
-	const observer = new MutationObserver((records) => {
-		for (const record of records) {
-			if (record.type === "attributes" && record.target.nodeType === 1) fix(record.target);
-			for (const node of record.addedNodes) if (node.nodeType === 1) fixTree(node);
-		}
-	});
-	observer.observe(doc.documentElement, {
-		subtree: true,
-		childList: true,
-		attributes: true,
-		attributeFilter: [...URL_ATTRIBUTES, "style"]
-	});
-	fixTree(doc.documentElement);
-	const onError = (event) => {
-		const image = event.target;
-		if (image?.tagName !== "IMG") return;
-		const original = image.getAttribute("data-gf-src") ?? image.getAttribute("src") ?? "";
-		if (!original.startsWith("/media/") || image.hasAttribute("data-gf-loaded")) return;
-		image.setAttribute("data-gf-loaded", "");
-		previews.load(original).then((url) => {
-			if (url) {
-				image.setAttribute("data-gf-src", original);
-				image.setAttribute("src", url);
-			}
-		});
-	};
-	doc.addEventListener("error", onError, true);
-	return () => {
-		observer.disconnect();
-		doc.removeEventListener("error", onError, true);
-	};
+function pluginSecretsHelp(place, plugin, t) {
+	const names = plugin.permissions.secrets ?? [];
+	if (!place || names.length === 0) return [];
+	if (place.kind === "server") {
+		const ci = place.ci && helpFor(place.ci, names, t);
+		return [plugin.server ? helpFor(place, names, t) : void 0, ci].filter((help) => help !== void 0);
+	}
+	const help = helpFor(place, names, t);
+	return help ? [help] : [];
 }
 //#endregion
 //#region src/registry-version.ts
 /** The release of Goodfellow's block registry this admin panel was built with, so a site gets blocks that match it. */
-const REGISTRY_VERSION = "0.5.0";
-//#endregion
-//#region src/router.tsx
-function parseHash(hash) {
-	const [path = "", query = ""] = hash.replace(/^#\/?/, "").split("?");
-	return {
-		segments: path.split("/").filter(Boolean),
-		params: new URLSearchParams(query)
-	};
-}
-function subscribe$1(onChange) {
-	window.addEventListener("hashchange", onChange);
-	return () => window.removeEventListener("hashchange", onChange);
-}
-function useRoute() {
-	return parseHash(useSyncExternalStore(subscribe$1, () => window.location.hash, () => ""));
-}
-const guards = /* @__PURE__ */ new Set();
-/** Whether any screen has unpublished changes. */
-function hasUnsavedChanges() {
-	return [...guards].some((isDirty) => isDirty());
-}
-/**
-* Registers a screen's unpublished changes, so leaving it (inside the admin
-* panel or by closing the tab) asks for confirmation first.
-*/
-function useUnsavedChanges(isDirty) {
-	useEffect(() => {
-		if (!isDirty) return;
-		const guard = () => true;
-		guards.add(guard);
-		const onBeforeUnload = (event) => event.preventDefault();
-		window.addEventListener("beforeunload", onBeforeUnload);
-		return () => {
-			guards.delete(guard);
-			window.removeEventListener("beforeunload", onBeforeUnload);
-		};
-	}, [isDirty]);
-}
-/** Goes to another screen, asking first if there are unpublished changes. Returns whether it navigated. */
-function navigate(to, confirmLeave) {
-	if (hasUnsavedChanges() && !confirmLeave()) return false;
-	guards.clear();
-	window.location.hash = to;
-	return true;
-}
-/** Sections of Site Settings' General tab that links can scroll to, as `#/settings/general?section=forms`. */
-const SETTINGS_SECTIONS = {
-	contact: "contact",
-	forms: "forms"
-};
-function pageEditorHref(path) {
-	return `#/pages/edit?path=${encodeURIComponent(path)}`;
-}
-/** An in-app link that asks before leaving a screen with unpublished changes. */
-function Link({ href, confirmLeave, ...props }) {
-	return /* @__PURE__ */ jsx("a", {
-		...props,
-		href,
-		onClick: (event) => {
-			if (event.defaultPrevented || event.button !== 0 || event.metaKey || event.ctrlKey || event.shiftKey) return;
-			event.preventDefault();
-			navigate(href, confirmLeave);
-		}
-	});
-}
-function collectionHref(id, tab = "entries") {
-	return tab === "entries" ? `#/collections/${id}` : `#/collections/${id}/${tab}`;
-}
-function entryEditorHref(collection, slug) {
-	return `#/collections/${collection}/edit?slug=${encodeURIComponent(slug)}`;
-}
+const REGISTRY_VERSION = "0.7.0";
 //#endregion
 //#region src/schedule.tsx
 /** The computer's own time zone, which a site without one takes when something is first scheduled. */
@@ -3242,11 +4534,15 @@ function AdminProvider({ site, frames, store, account, preview, siteUrl, registr
 	const [draftPaths, setDraftPaths] = useState([]);
 	const content = draft?.store ?? store;
 	const [checking, setChecking] = useState();
+	const [limiting, setLimiting] = useState();
+	const [draftReviews, setDraftReviews] = useState([]);
 	const blocks = useMemo(() => describedConfig(site.description, "template").components, [site.description]);
-	const mediaPreviews = useMemo(() => createMediaPreviews(content, siteUrl), [content, siteUrl]);
+	const storage = useRef(void 0);
+	storage.current = state.status === "ready" ? state.content.mediaStorage : void 0;
+	const mediaPreviews = useMemo(() => createMediaPreviews(content, siteUrl, () => storage.current), [content, siteUrl]);
 	const outOfReach = registry !== void 0 || atAdminAddress(site.admin) || site.broker !== void 0;
 	const registries = useMemo(() => ({
-		[GOODFELLOW_REGISTRY]: registry ?? goodfellowRegistryUrl("0.5.0"),
+		[GOODFELLOW_REGISTRY]: registry ?? goodfellowRegistryUrl("0.7.0"),
 		...outOfReach && {
 			[SHADCN_NAMESPACE]: SHADCN_REGISTRY,
 			...site.registries
@@ -3273,6 +4569,7 @@ function AdminProvider({ site, frames, store, account, preview, siteUrl, registr
 	useEffect(() => favicon ? showSiteIcon(document, favicon, mediaPreviews) : void 0, [favicon, mediaPreviews]);
 	const readFile = useCallback((path) => content.read(path), [content]);
 	const listFiles = useCallback((dir) => content.list(dir), [content]);
+	const readBytes = useCallback((path) => content.readBytes(path), [content]);
 	const demo = isDemoStore(store) ? store : void 0;
 	const pages = isGitBackend(store) ? store.pages : void 0;
 	const versions = isGitBackend(store) ? store : void 0;
@@ -3281,6 +4578,7 @@ function AdminProvider({ site, frames, store, account, preview, siteUrl, registr
 	const updates = isGitBackend(store) ? store.updates : void 0;
 	const contentOnly = isGitBackend(store) && store.contentOnly === true;
 	const scheduledBuilds = isGitBackend(store) ? store.scheduledBuilds : void 0;
+	const tasks = "tasks" in store ? store.tasks : void 0;
 	const repositoryVisibility = useMemo(() => isGitBackend(store) ? store.repositoryVisibility?.bind(store) : void 0, [store]);
 	const [scheduleSyncProblem, setScheduleSyncProblem] = useState();
 	const backendOwner = isGitBackend(store) ? store.ownerAccess : void 0;
@@ -3342,9 +4640,14 @@ function AdminProvider({ site, frames, store, account, preview, siteUrl, registr
 		reload
 	]);
 	const refreshDrafts = useCallback(async (current) => {
-		const [names, paths] = await Promise.all([siteDrafts.list().catch(() => []), current ? current.paths().catch(() => []) : []]);
+		const [names, paths, reviews] = await Promise.all([
+			siteDrafts.list().catch(() => []),
+			current ? current.paths().catch(() => []) : [],
+			siteDrafts.reviews().catch(() => [])
+		]);
 		setDraftNames(names);
 		setDraftPaths(paths);
+		setDraftReviews(reviews);
 	}, [siteDrafts]);
 	useEffect(() => {
 		if (draftFound) refreshDrafts(draft);
@@ -3364,12 +4667,64 @@ function AdminProvider({ site, frames, store, account, preview, siteUrl, registr
 		setChecking(void 0);
 		return go;
 	}, []);
+	const limits = useMemo(() => state.status === "ready" ? limitsFor(state.content.permissions, account?.user.login) : void 0, [state, account]);
+	/** Who's asked to review: those the permissions name, else every owner, never the one asking. */
+	const reviewers = useCallback(async () => {
+		const owners = await editors?.list().then((list) => list.editors.flatMap((editor) => editor.role === "owner" && editor.login ? [editor.login] : [])).catch(() => []);
+		const self = account?.user.login.toLowerCase();
+		const permissions = state.status === "ready" ? state.content.permissions : void 0;
+		return reviewersFor(permissions, owners ?? []).filter((login) => login.toLowerCase() !== self);
+	}, [
+		editors,
+		account,
+		state
+	]);
+	/** Shows what's outside someone's limits, and lets them submit it for review where the site can take one. */
+	const askLimits = useCallback((problems, shown, submit) => new Promise((done) => setLimiting({
+		problems,
+		content: shown,
+		...submit && { submit },
+		done
+	})), []);
 	const publish = useCallback(async (changes, message, options) => {
 		if (state.status !== "ready") return {
 			ok: false,
 			reason: "error",
 			error: /* @__PURE__ */ new Error("The site isn't loaded.")
 		};
+		const outside = draft || options?.draft ? [] : outsideLimits(state.content, limits, changes);
+		if (outside.length > 0) {
+			const from = state.revision;
+			const description = [
+				t("draft.reviewDescription"),
+				"",
+				...changes.map((change) => `- \`${change.path}\``)
+			].join("\n");
+			const submit = backendDrafts ? async () => {
+				const review = await siteDrafts.create(newDraftName(), { from });
+				await writeChanges(review.store, changes, {
+					message,
+					expectedRevision: await review.store.revision()
+				});
+				const { url } = await review.submitForReview({
+					title: message,
+					description,
+					reviewers: await reviewers()
+				});
+				refreshDrafts(void 0);
+				return { url };
+			} : account?.review ? () => account.review?.(changes, {
+				title: message,
+				description,
+				from
+			}) ?? Promise.resolve({}) : void 0;
+			await askLimits(outside, state.content, submit);
+			return {
+				ok: false,
+				reason: "checks",
+				error: void 0
+			};
+		}
 		const checks = options?.checks === false ? void 0 : await checkPublish(content, state, changes, {
 			blocks,
 			code
@@ -3424,7 +4779,13 @@ function AdminProvider({ site, frames, store, account, preview, siteUrl, registr
 		confirmChecks,
 		refreshDrafts,
 		loadFrom,
-		onSignInError
+		onSignInError,
+		limits,
+		backendDrafts,
+		account,
+		askLimits,
+		reviewers,
+		t
 	]);
 	const openDraft = useCallback(async (name) => {
 		if (name === draft?.name) return true;
@@ -3468,6 +4829,29 @@ function AdminProvider({ site, frames, store, account, preview, siteUrl, registr
 			reason: "error",
 			error: live.status === "error" && live.error
 		};
+		const outside = outsideLimits(live.content, limitsFor(live.content.permissions, account?.user.login), changes);
+		if (outside.length > 0) {
+			const current = draft;
+			const submit = backendDrafts ? async () => {
+				const paths = changes.map((change) => change.path);
+				return current.submitForReview({
+					title: t("draft.reviewTitle", { name: current.name }),
+					description: [
+						t("draft.reviewDescription"),
+						"",
+						...paths.map((path) => `- \`${path}\``)
+					].join("\n"),
+					reviewers: await reviewers()
+				});
+			} : void 0;
+			await askLimits(outside, live.content, submit);
+			refreshDrafts(current);
+			return {
+				ok: false,
+				reason: "checks",
+				error: void 0
+			};
+		}
 		if (!await confirmChecks(await checkPublish(store, live, changes, {
 			blocks,
 			code
@@ -3504,7 +4888,12 @@ function AdminProvider({ site, frames, store, account, preview, siteUrl, registr
 		key,
 		t,
 		confirmChecks,
-		onSignInError
+		onSignInError,
+		account,
+		backendDrafts,
+		askLimits,
+		reviewers,
+		refreshDrafts
 	]);
 	const submitDraft = useCallback(async () => {
 		if (!draft) return {
@@ -3519,8 +4908,10 @@ function AdminProvider({ site, frames, store, account, preview, siteUrl, registr
 					t("draft.reviewDescription"),
 					"",
 					...paths.map((path) => `- \`${path}\``)
-				].join("\n")
+				].join("\n"),
+				reviewers: await reviewers()
 			});
+			refreshDrafts(draft);
 			return {
 				ok: true,
 				url
@@ -3531,7 +4922,12 @@ function AdminProvider({ site, frames, store, account, preview, siteUrl, registr
 				error
 			};
 		}
-	}, [draft, t]);
+	}, [
+		draft,
+		t,
+		reviewers,
+		refreshDrafts
+	]);
 	const discardDraft = useCallback(async () => {
 		if (!draft) return { ok: true };
 		try {
@@ -3550,6 +4946,7 @@ function AdminProvider({ site, frames, store, account, preview, siteUrl, registr
 	const drafts = useMemo(() => ({
 		kept: backendDrafts === void 0,
 		names: draftNames,
+		reviews: draftReviews,
 		...draft && { current: {
 			name: draft.name,
 			paths: draftPaths
@@ -3561,6 +4958,7 @@ function AdminProvider({ site, frames, store, account, preview, siteUrl, registr
 	}), [
 		backendDrafts,
 		draftNames,
+		draftReviews,
 		draft,
 		draftPaths,
 		openDraft,
@@ -3609,8 +5007,10 @@ function AdminProvider({ site, frames, store, account, preview, siteUrl, registr
 			state: "building"
 		});
 	}, [state, store]);
+	const pluginInstalls = demo || contentOnly ? void 0 : account?.review ? "review" : atAdminAddress(site.admin) || site.broker !== void 0 ? "publish" : void 0;
 	const value = useMemo(() => ({
 		site,
+		...limits && { limits },
 		blocks,
 		code,
 		preview,
@@ -3624,8 +5024,10 @@ function AdminProvider({ site, frames, store, account, preview, siteUrl, registr
 		drafts,
 		readFile,
 		listFiles,
+		readBytes,
 		registries,
 		outOfReach,
+		pluginInstalls,
 		demo,
 		pages,
 		versions,
@@ -3637,9 +5039,11 @@ function AdminProvider({ site, frames, store, account, preview, siteUrl, registr
 		scheduledBuilds,
 		repositoryVisibility,
 		scheduleSyncProblem,
-		followBuild
+		followBuild,
+		tasks
 	}), [
 		site,
+		limits,
 		blocks,
 		code,
 		preview,
@@ -3653,8 +5057,10 @@ function AdminProvider({ site, frames, store, account, preview, siteUrl, registr
 		drafts,
 		readFile,
 		listFiles,
+		readBytes,
 		registries,
 		outOfReach,
+		pluginInstalls,
 		demo,
 		pages,
 		versions,
@@ -3666,7 +5072,8 @@ function AdminProvider({ site, frames, store, account, preview, siteUrl, registr
 		scheduledBuilds,
 		repositoryVisibility,
 		scheduleSyncProblem,
-		followBuild
+		followBuild,
+		tasks
 	]);
 	const table = useStringTable();
 	const strings = useMemo(() => draft ? {
@@ -3679,16 +5086,28 @@ function AdminProvider({ site, frames, store, account, preview, siteUrl, registr
 		value,
 		children: /* @__PURE__ */ jsxs(StringsProvider, {
 			strings,
-			children: [state.status === "ready" ? /* @__PURE__ */ jsx(SiteFrames, {
-				frames,
-				state,
-				onCodeClient,
-				children
-			}) : children, checking && /* @__PURE__ */ jsx(ChecksDialog, {
-				checks: checking.checks,
-				content: checking.content,
-				onDecide: checking.decide
-			})]
+			children: [
+				state.status === "ready" ? /* @__PURE__ */ jsx(SiteFrames, {
+					frames,
+					state,
+					onCodeClient,
+					children
+				}) : children,
+				checking && /* @__PURE__ */ jsx(ChecksDialog, {
+					checks: checking.checks,
+					content: checking.content,
+					onDecide: checking.decide
+				}),
+				limiting && /* @__PURE__ */ jsx(LimitsDialog, {
+					problems: limiting.problems,
+					content: limiting.content,
+					...limiting.submit && { onSubmit: limiting.submit },
+					onClose: () => {
+						setLimiting(void 0);
+						limiting.done();
+					}
+				})
+			]
 		})
 	});
 }
@@ -3711,7 +5130,7 @@ function SiteFrames({ frames, state, onCodeClient, children }) {
 	const t = useStrings();
 	const strings = useStringTable();
 	const theme = useThemeChoice();
-	const { preview, siteUrl, mediaPreviews, account, scheduledBuilds, repositoryVisibility, scheduleSyncProblem } = useAdmin();
+	const { site, preview, siteUrl, mediaPreviews, account, scheduledBuilds, repositoryVisibility, scheduleSyncProblem, readFile, readBytes, listFiles, publish, tasks } = useAdmin();
 	const { timing, visibility } = useScheduleInfoOf(scheduledBuilds, repositoryVisibility);
 	const schedule = useMemo(() => ({
 		...timing && { timing },
@@ -3725,11 +5144,48 @@ function SiteFrames({ frames, state, onCodeClient, children }) {
 	const siteCss = useSiteCss(preview.stylesheets);
 	const [choosing, setChoosing] = useState();
 	const confirmLeave = t("unsaved.confirm");
+	const plugins = useMemo(() => site.description.plugins ?? [], [site.description.plugins]);
+	const pluginHost = useMemo(() => ({
+		editorUrl: frames.url,
+		siteUrl,
+		theme,
+		read: readFile,
+		readBytes,
+		list: listFiles,
+		publish: async (changes, message) => (await publish(changes, message)).ok,
+		...account?.plugins && { server: account.plugins },
+		navigate: (href) => navigate(href, () => window.confirm(confirmLeave)),
+		secretsHelp: async (plugin) => pluginSecretsHelp(await tasks?.secretsPlace().catch(() => void 0), plugin, t),
+		...tasks && { runTask: async (request) => {
+			try {
+				return await tasks.run(request);
+			} catch (error) {
+				if (error instanceof PluginTaskError) throw new Error(t(`plugins.task.${error.problem}`));
+				throw error;
+			}
+		} }
+	}), [
+		frames.url,
+		siteUrl,
+		theme,
+		readFile,
+		readBytes,
+		listFiles,
+		publish,
+		account,
+		confirmLeave,
+		tasks,
+		t
+	]);
+	const callPlugin = useRef(void 0);
+	const onPluginCall = useCallback((call) => {
+		callPlugin.current = call;
+	}, []);
 	const services = useMemo(() => ({
 		source: frames,
 		init: {
 			content: state.content,
-			media: state.media,
+			media: allMedia(state.content, state.media),
 			schedule,
 			siteUrl,
 			preview,
@@ -3748,7 +5204,8 @@ function SiteFrames({ frames, state, onCodeClient, children }) {
 				};
 			});
 		}),
-		navigate: (href) => navigate(href, () => window.confirm(confirmLeave))
+		navigate: (href) => navigate(href, () => window.confirm(confirmLeave)),
+		callPlugin: (plugin, method, args) => callPlugin.current ? callPlugin.current(plugin, method, args) : Promise.reject(/* @__PURE__ */ new Error("Plugins haven't started."))
 	}), [
 		frames,
 		state,
@@ -3765,7 +5222,12 @@ function SiteFrames({ frames, state, onCodeClient, children }) {
 	return /* @__PURE__ */ jsxs(FrameServicesProvider, {
 		value: services,
 		children: [
-			children,
+			/* @__PURE__ */ jsx(PluginServices, {
+				plugins,
+				host: pluginHost,
+				onCall: onPluginCall,
+				children
+			}),
 			/* @__PURE__ */ jsx(SiteCodeFrame, { onClient: onCodeClient }),
 			choosing && /* @__PURE__ */ jsx(MediaPickerDialog, {
 				kind: choosing.kind,
@@ -3949,4 +5411,4 @@ function formValues(collection, entry) {
 	return values;
 }
 //#endregion
-export { defaultStrings as $, MediaChoiceContext as A, storedCss as At, useFrameUpdates as B, navigate as C, newCollectionSettings as Ct, REGISTRY_VERSION as D, redirectsFileChange as Dt, useUnsavedChanges as E, pageTitle as Et, useOutsideHost as F, editedMarkdown as Ft, Button as G, CONNECT_MESSAGE as H, PublishFailure as I, formattedHtml as It, Field as J, Dialog as K, FrameServicesProvider as L, MediaField as M, storedEntryFields as Mt, MediaScreen as N, uniqueName as Nt, createMediaPreviews as O, siteSettingsFileChange as Ot, prepareUpload as P, updateSettingsFileChange as Pt, StringsProvider as Q, reloadFrames as R, hasUnsavedChanges as S, movePageChanges as St, useRoute as T, pageFileChange as Tt, createChannel as U, READY_MESSAGE as V, draftStarted as W, TextField as X, PublishedNotice as Y, useDebounced as Z, scheduleSettingsChanges as _, entryFileChange$1 as _t, AdminContext as a, mediaUrl as at, collectionHref as b, menusFileChange as bt, useCanChangeSettings as c, addressPatternFor as ct, useApplyThemeChoice as d, codeFileChanges as dt, useStringTable as et, useDarkMode as f, collectionFileChange$1 as ft, ScheduleStatus as g, duplicatePageData as gt, ScheduleFields as h, deleteCollectionChanges as ht, usePreviewStyles as i, fileName as it, MediaChooser as j, storedData as jt, showMediaInPreview as k, slugify as kt, useSiteContent as l, checkEntrySlug as lt, ComingUp as m, customCssFileChange as mt, formValues as n, describeContrast as nt, AdminProvider as o, siteImages as ot, useThemeChoice as p, collectionSettingsChanges as pt, ErrorMessage as q, PreviewFrame as r, findPage as rt, useAdmin as s, uploadName as st, SCHEDULE_PROP as t, useStrings as tt, setThemeChoice as u, checkPageAddress as ut, Link as v, layoutFileChange as vt, pageEditorHref as w, newPageData as wt, entryEditorHref as x, moveEntryChanges as xt, SETTINGS_SECTIONS as y, mediaFileChange as yt, useFrame as z };
+export { PublishedNotice as $, useRoute as A, pageFileChange as At, mayChange as B, editedMarkdown as Bt, AppLink as C, layoutFileChange as Ct, hasUnsavedChanges as D, movePageChanges as Dt, entryEditorHref as E, moveEntryChanges as Et, PluginScreenFrame as F, storedCss as Ft, useFrameServices as G, FrameServicesProvider as H, usePluginFrame as I, storedData as It, draftStarted as J, useFrameUpdates as K, usePluginHost as L, storedEntryFields as Lt, prepareUpload as M, redirectsFileChange as Mt, useOutsideHost as N, siteSettingsFileChange as Nt, navigate as O, newCollectionSettings as Ot, PublishFailure as P, slugify as Pt, Field as Q, createMediaPreviews as R, uniqueName as Rt, MediaScreen as S, entryFileChange$1 as St, collectionHref as T, menusFileChange as Tt, reloadFrames as U, useMayChange as V, formattedHtml as Vt, useFrame as W, Dialog as X, Button as Y, ErrorMessage as Z, scheduleSettingsChanges as _, collectionFileChange$1 as _t, AdminContext as a, useStrings as at, MediaChooser as b, deleteCollectionChanges as bt, useCanChangeSettings as c, allMedia as ct, useApplyThemeChoice as d, siteImages as dt, TextField as et, useDarkMode as f, uploadName as ft, ScheduleStatus as g, codeFileChanges as gt, ScheduleFields as h, checkPageAddress as ht, usePreviewStyles as i, useStringTable as it, useUnsavedChanges as j, pageTitle$1 as jt, pageEditorHref as k, newPageData as kt, useSiteContent as l, fileName as lt, ComingUp as m, checkEntrySlug as mt, formValues as n, StringsProvider as nt, AdminProvider as o, describeContrast as ot, useThemeChoice as p, addressPatternFor as pt, READY_MESSAGE as q, PreviewFrame as r, defaultStrings as rt, useAdmin as s, findPage as st, SCHEDULE_PROP as t, useDebounced as tt, setThemeChoice as u, mediaUrl as ut, REGISTRY_VERSION as v, collectionSettingsChanges as vt, SETTINGS_SECTIONS as w, mediaFileChange as wt, MediaField as x, duplicatePageData as xt, MediaChoiceContext as y, customCssFileChange as yt, showMediaInPreview as z, updateSettingsFileChange as zt };