@goodfellow-cms/admin 0.9.0 → 0.10.1

package/dist/index.js

@@ -1,8 +1,8 @@
-import { A as duplicatePageData, B as pageFileChange, C as checkPageAddress, D as customCssFileChange, E as collectionSettingsChanges, F as menusFileChange, G as storedCss, H as redirectsFileChange, I as moveEntryChanges, J as syncedBlockFileChange, K as storedData, L as movePageChanges, M as itemLinkRemovalChanges, N as layoutFileChange, O as deleteCollectionChanges, P as mediaFileChange, R as newCollectionSettings, S as checkEntrySlug, T as collectionFileChange$1, U as siteSettingsFileChange, V as pageTitle$1, W as slugify, X as updateSettingsFileChange, Y as uniqueName, _ as mediaUrl, b as uploadName, f as fileName$1, j as entryFileChange$1, k as deleteSyncedBlockChanges, r as createMediaPreviews, t as installCustomFonts, u as allMedia, w as codeFileChanges, x as addressPatternFor, y as siteImages, z as newPageData } from "./custom-font-faces-DJ2AF2oN.js";
-import { $ as hasUnsavedChanges, A as useOutsideHost, B as useFrameServices, E as MediaScreen, F as mayChange, I as useMayChange, J as shortcutFor, K as isTyping, L as FrameServicesProvider, M as usePluginFrame, N as usePluginHost, O as AppLink, P as PublishFailure, Q as entryEditorHref, R as reloadFrames, S as REGISTRY_VERSION, T as MediaField, U as findPlaces, V as useFrameUpdates, W as goToPlaces, X as SETTINGS_SECTIONS, Y as usesCommandKey, Z as collectionHref, _ as useThemeChoice$1, _t as useDebounced, a as applyEditorChange, at as useUnsavedChanges, b as ScheduleStatus, ct as draftStarted, d as useCanChangeSettings, dt as ErrorMessage, et as navigate, f as useSiteContent, ft as Field, g as useDarkMode, gt as docsLink, h as useApplyThemeChoice, ht as TextField, it as useRoute, j as PluginScreenFrame, k as prepareUpload, l as AdminProvider, lt as Button, mt as PublishedNotice, n as formValues, nt as sectionId, o as findBlock, ot as EditorTextContext, p as setDarkMode, pt as InfoBubble, q as onShortcut, r as PreviewFrame, rt as syncedBlockEditorHref, t as SCHEDULE_PROP, tt as pageEditorHref, u as useAdmin, ut as Dialog, v as ComingUp, vt as describeContrast, x as scheduleSettingsChanges, y as ScheduleFields, z as useFrame } from "./entry-values-FcVgwQkJ.js";
-import { i as useStrings, n as defaultStrings, r as useStringTable, t as StringsProvider } from "./strings-D94noZrv.js";
-import { a as languageStatus, c as sourcesToTranslate, d as PUCK_ENGLISH, i as labelSources, l as withEdits, n as entryOf, o as sourceKey, r as filterSources, s as sourceState, t as adminTextSources, u as withTranslations } from "./admin-text-sources-BTZJPlVK.js";
-import { ADMIN_TEXT_INDEX, APP_API_HEADER, BROKER_AI_ADDRESS, BROKER_CONNECT_MESSAGE, BROKER_READY_MESSAGE, CODE_PURPOSES, CODE_THEMES, COLLECTIONS_DIR, CONFIG_FILE, CONSENT_DAYS, CONSENT_KINDS, CONTENT_DIR, CommentsError, ConflictError, ContentError, DEFAULT_CODE_THEMES, DEFAULT_DARK_THEME_COLORS, DEFAULT_THEME_COLORS, DEMO_CONTENT_PATH, DISQUS_CREATE_URL, DomainError, EditorsError, FIELD_TYPES, FONT_CATEGORIES, FOOTER_FILE, GARRUL_URL, GISCUS_APP_URL, GOODFELLOW_VERSION, GROUP_FIELD_TYPES, HEADER_FILE, HIDE_REASONS, HeadCodeError, INSTALLED_PLUGINS_FILE, INSTALLED_RECORD_FILE, MAX_CONSENT_DAYS, MAX_CUSTOM_FONTS, MAX_FONT_BYTES, MAX_FONT_FILES, MAX_GROUP_FIELDS, MEDIA_DIR, NIGHTLY_MODES, NPM_REGISTRY, PUBLISHED_ADMIN_TEXT_DIR, PackageError, PluginInstallError, PluginTaskError, REDIRECT_LINK_PLACEHOLDER, REDIRECT_MESSAGE, RELEASE_AGE_DAYS, RegistryError, STATS_SERVICES, SYNCED_BLOCK, SYNCED_BLOCKS_DIR, SYNCED_BLOCK_PROP, SetupError, SignInError, THEME_COLORS, THEME_FILE, THEME_RELEASE_AGE_DAYS, TITLE_FIELD, ThemeError, UPDATES_FILE, UpdatesError, VERSION_PACKAGE, addressPatternProblem, adminOrigin, adminTextFile, adminTextFileChange, adminTextOverlay, adminTextProblem, adminTextTable, allPages, availableBlocks, availableUpdates, blockUses, brokerAddressProblem, brokerOrigin, brokerReleaseUrl, checkAdminAddress, checkEditedData, checkPuckData, checkRecords, chooseLanguagePackRelease, chooseRelease, chooseThemeRelease, collectionFileSchema, collectionsLinkingTo, compareReleases, configAdmin, configBroker, consentDefaults, consentInLanguage, consentKinds, consentSchema, contentInLanguage, contrastProblems, credentialStorage, customFont, customFontFileChanges, decodeBase64, demoContentStore, demoStore, describeSiteChanges, describedConfig, disqusModerationUrl, disqusShortname, domainZone, encodeBase64Bytes, endsHeldTemplate, entryAddress, entryLanguage, entryPathIn, entrySourceHash, entryTitle, entryTranslations, eventValueProblem, expandSyncedBlocks, fetchBrokerRelease, fetchLanguagePack, fetchPluginPackage, fetchTheme, findEntry, findSyncedBlock, fontFileName, formTarget, garrulAddress, garrulModerationUrl, getPageHead, googleFontsUrl, guessFontFamily, guessFontFile, hasLanguages, inRange, isAddressSegment, isDisqus, isEmptyValue, isGarrul, isLanguageCode, isLanguageHome, isReservedPagePath, isWoff2, itemsLinkingTo, languageLayoutFile, languageName, languagePackReleases, languagePrefix, loadSiteContent, mainLanguage, mayInstallEarly, mediaDetailsOf, menusFileSchema, normalizeDomain, pageLanguage, pageLinks, pageSourceHash, pageTitle, pageTranslations, parseAdminTextFile, parseAdminTextIndex, parseDemoContent, parseHeadCode, parseInstalledPlugins, parseInstalledRecord, parseThemeRecord, parseUpdateSettings, pathLanguage, permissionChanges, permissionsFileChange, planBlockChanges, planBroker, planLanguagePack, planPluginInstall, planPluginRemove, planTheme, pluginReleases, pluginsOutOfRange, readAdminText, readProvenanceSource, readStatsCode, recordsInPlace, redirectFrom, redirectProblems, registrarName, releaseVersions, remoteBackend, reviewPluginPackages, scheduleOf, scheduleProblem, searchLanguagePacks, searchPlugins, searchThemes, serializeContent, siteChangesSince, siteHistory, siteLanguages, siteRestoreChanges, siteSettingsSchema, siteVersion, statsDashboard, statsElements, storedRedirects, syncedBlockUses, themeFileUrl, themeLabel, themeLoads, themeReleases, themeToCss, themeUnknownBlocks, todayIn, translationState, trimChars, withAdminConfig, withBrokerConfig, withSchedule, writesEarlyLockfile, writesLockfile } from "@goodfellow-cms/core";
+import { A as duplicatePageData, B as pageFileChange, C as checkPageAddress, D as customCssFileChange, E as collectionSettingsChanges, F as menusFileChange, G as storedCss, H as redirectsFileChange, I as moveEntryChanges, J as syncedBlockFileChange, K as storedData, L as movePageChanges, M as itemLinkRemovalChanges, N as layoutFileChange, O as deleteCollectionChanges, P as mediaFileChange, R as newCollectionSettings, S as checkEntrySlug, T as collectionFileChange$1, U as siteSettingsFileChange, V as pageTitle$1, W as slugify, X as updateSettingsFileChange, Y as uniqueName, _ as mediaUrl, b as uploadName, f as fileName$1, j as entryFileChange$1, k as deleteSyncedBlockChanges, r as createMediaPreviews, t as installCustomFonts, u as allMedia, w as codeFileChanges, x as addressPatternFor, y as siteImages, z as newPageData } from "./custom-font-faces-DCan2jgW.js";
+import { $ as hasUnsavedChanges, A as useOutsideHost, B as useFrameServices, E as MediaScreen, F as mayChange, I as useMayChange, J as shortcutFor, K as isTyping, L as FrameServicesProvider, M as usePluginFrame, N as usePluginHost, O as AppLink, P as PublishFailure, Q as entryEditorHref, R as reloadFrames, S as REGISTRY_VERSION, T as MediaField, U as findPlaces, V as useFrameUpdates, W as goToPlaces, X as SETTINGS_SECTIONS, Y as usesCommandKey, Z as collectionHref, _ as useThemeChoice$1, _t as useDebounced, a as applyEditorChange, at as useUnsavedChanges, b as ScheduleStatus, ct as draftStarted, d as useCanChangeSettings, dt as ErrorMessage, et as navigate, f as useSiteContent, ft as Field, g as useDarkMode, gt as docsLink, h as useApplyThemeChoice, ht as TextField, it as useRoute, j as PluginScreenFrame, k as prepareUpload, l as AdminProvider, lt as Button, mt as PublishedNotice, n as formValues, nt as sectionId, o as findBlock, ot as EditorTextContext, p as setDarkMode, pt as InfoBubble, q as onShortcut, r as PreviewFrame, rt as syncedBlockEditorHref, t as SCHEDULE_PROP, tt as pageEditorHref, u as useAdmin, ut as Dialog, v as ComingUp, vt as describeContrast, x as scheduleSettingsChanges, y as ScheduleFields, z as useFrame } from "./entry-values-DWZqC5ZZ.js";
+import { i as useStrings, n as defaultStrings, r as useStringTable, t as StringsProvider } from "./strings-CgC6pd6k.js";
+import { a as languageStatus, c as sourcesToTranslate, d as PUCK_ENGLISH, i as labelSources, l as withEdits, n as entryOf, o as sourceKey, r as filterSources, s as sourceState, t as adminTextSources, u as withTranslations } from "./admin-text-sources-B1CoPEu6.js";
+import { ADMIN_TEXT_INDEX, APP_API_HEADER, BROKER_AI_ADDRESS, BROKER_CONNECT_MESSAGE, BROKER_READY_MESSAGE, CODE_PURPOSES, CODE_THEMES, COLLECTIONS_DIR, CONFIG_FILE, CONSENT_DAYS, CONSENT_KINDS, CONTENT_DIR, CommentsError, ConflictError, ContentError, DEFAULT_CODE_THEMES, DEFAULT_DARK_THEME_COLORS, DEFAULT_THEME_COLORS, DEMO_CONTENT_PATH, DISQUS_CREATE_URL, DomainError, EditorsError, FIELD_TYPES, FONT_CATEGORIES, FOOTER_FILE, GARRUL_URL, GISCUS_APP_URL, GOODFELLOW_REGISTRY, GOODFELLOW_VERSION, GROUP_FIELD_TYPES, HEADER_FILE, HIDE_REASONS, HeadCodeError, INSTALLED_PLUGINS_FILE, INSTALLED_RECORD_FILE, MAX_CONSENT_DAYS, MAX_CUSTOM_FONTS, MAX_FONT_BYTES, MAX_FONT_FILES, MAX_GROUP_FIELDS, MAX_UPLOAD_BYTES, MEDIA_DIR, NIGHTLY_MODES, NPM_REGISTRY, PUBLISHED_ADMIN_TEXT_DIR, PackageError, PluginInstallError, PluginTaskError, REDIRECT_LINK_PLACEHOLDER, REDIRECT_MESSAGE, RELEASE_AGE_DAYS, RegistryError, STATS_SERVICES, SYNCED_BLOCK, SYNCED_BLOCKS_DIR, SYNCED_BLOCK_PROP, SetupError, SignInError, SiteImportError, THEME_COLORS, THEME_FILE, THEME_RELEASE_AGE_DAYS, TITLE_FIELD, TRANSFER_FOLDERS, TRANSFER_RECORDS, ThemeError, UPDATES_FILE, UpdatesError, VERSION_PACKAGE, addressPatternProblem, adminOrigin, adminTextFile, adminTextFileChange, adminTextOverlay, adminTextProblem, adminTextTable, allPages, availableBlocks, availableUpdates, blockUses, brokerAddressProblem, brokerOrigin, brokerReleaseUrl, checkAdminAddress, checkEditedData, checkPuckData, checkRecords, chooseLanguagePackRelease, chooseRelease, chooseThemeRelease, collectionFileSchema, collectionsLinkingTo, compareReleases, configAdmin, configBackendHost, configBackendOption, configBroker, consentDefaults, consentInLanguage, consentKinds, consentSchema, contentInLanguage, contrastProblems, credentialStorage, customFont, customFontFileChanges, decodeBase64, demoContentStore, demoStore, describeSiteChanges, describedConfig, disqusModerationUrl, disqusShortname, domainZone, encodeBase64Bytes, endsHeldTemplate, entryAddress, entryLanguage, entryPathIn, entrySourceHash, entryTitle, entryTranslations, eventValueProblem, expandSyncedBlocks, fetchBrokerRelease, fetchLanguagePack, fetchPluginPackage, fetchTheme, findEntry, findSyncedBlock, fontFileName, formTarget, garrulAddress, garrulModerationUrl, getPageHead, googleFontsUrl, guessFontFamily, guessFontFile, hasLanguages, inRange, isAddressSegment, isDisqus, isEmptyValue, isGarrul, isLanguageCode, isLanguageHome, isReservedPagePath, isWoff2, itemsLinkingTo, languageLayoutFile, languageName, languagePackReleases, languagePrefix, loadSiteContent, mainLanguage, mayInstallEarly, mediaDetailsOf, mediaKind, menusFileSchema, normalizeDomain, pageLanguage, pageLinks, pageSourceHash, pageTitle, pageTranslations, parseAdminTextFile, parseAdminTextIndex, parseDemoContent, parseHeadCode, parseInstalledPlugins, parseInstalledRecord, parseThemeRecord, parseUpdateSettings, pathLanguage, permissionChanges, permissionsFileChange, planBlockChanges, planBroker, planLanguagePack, planPluginInstall, planPluginRemove, planSiteImport, planTheme, pluginReleases, pluginsOutOfRange, readAdminText, readProvenanceSource, readStatsCode, recordsInPlace, redirectFrom, redirectProblems, registrarName, releaseVersions, remoteBackend, reviewPluginPackages, scheduleOf, scheduleProblem, searchLanguagePacks, searchPlugins, searchThemes, serializeContent, signInClientIdProblem, signInRedirectAddresses, signInServiceProblem, siteChangesSince, siteHistory, siteLanguages, siteRestoreChanges, siteSettingsSchema, siteVersion, statsDashboard, statsElements, storedRedirects, syncedBlockUses, themeFileUrl, themeLabel, themeLoads, themeReleases, themeToCss, themeUnknownBlocks, todayIn, transferManifestFile, transferName, transferPaths, translationState, trimChars, withAdminConfig, withBackendOption, withBrokerConfig, withSchedule, writesEarlyLockfile, writesLockfile } from "@goodfellow-cms/core";
 import { Braces, ChartColumn, CodeXml, FileInput, Globe, History, Languages, Menu, MessageSquare, MessageSquareText, Moon, Palette, PanelLeftClose, PanelLeftOpen, Plug, Puzzle, RefreshCw, Settings, ShieldCheck, Signpost, Sun, SwatchBook, Users, X } from "lucide-react";
 import { Fragment, createContext, useCallback, useContext, useEffect, useId, useMemo, useRef, useState, useSyncExternalStore } from "react";
 import { createRoot } from "react-dom/client";
@@ -24,7 +24,7 @@ const ENGLISH = {
 	labels: {}
 };
 /** Each language Goodfellow ships but English, loaded only when someone chooses it, so the admin panel stays small for everyone else. */
-const LOADERS = { es: () => import("./es-ChxY0KVH.js").then((module) => module.spanish) };
+const LOADERS = { es: () => import("./es-Z-QY8sdc.js").then((module) => module.spanish) };
 const builtIn = (code) => ADMIN_LANGUAGES.some((language) => language.code === code);
 const listeners = /* @__PURE__ */ new Set();
 let siteText = {
@@ -3805,7 +3805,7 @@ function problemKey(error) {
 	if (error instanceof SyntaxError) return "ai.error.answer";
 	return "ai.error.service";
 }
-function ServiceSettings({ providers, settings, onChange, siteAi }) {
+function ServiceSettings$1({ providers, settings, onChange, siteAi }) {
 	const t = useStrings();
 	const info = PROVIDERS[settings.provider];
 	const sitePays = siteAi?.services.includes(settings.provider) ?? false;
@@ -4339,7 +4339,7 @@ function AiPanel({ context, editor }) {
 				className: "gfa-ai-service",
 				open: settingsOpen,
 				onToggle: (event) => setSettingsOpen(event.currentTarget.open),
-				children: [/* @__PURE__ */ jsx("summary", { children: t("ai.settings", { service }) }), /* @__PURE__ */ jsx(ServiceSettings, {
+				children: [/* @__PURE__ */ jsx("summary", { children: t("ai.settings", { service }) }), /* @__PURE__ */ jsx(ServiceSettings$1, {
 					providers,
 					settings: chosen,
 					onChange: updateSettings,
@@ -4794,7 +4794,7 @@ function useDefaults(code) {
 	useEffect(() => {
 		if (code !== "es" || spanish) return;
 		let live = true;
-		import("./es-ChxY0KVH.js").then((module) => live && setSpanish(module.spanish));
+		import("./es-Z-QY8sdc.js").then((module) => live && setSpanish(module.spanish));
 		return () => {
 			live = false;
 		};
@@ -5081,7 +5081,7 @@ function AdminLanguagesScreen() {
 				}),
 				!ai.ready && /* @__PURE__ */ jsx("p", { children: t("adminText.noService") }),
 				ai.settings.provider === "manual" && /* @__PURE__ */ jsx("p", { children: t("adminText.manual") }),
-				/* @__PURE__ */ jsx(ServiceSettings, {
+				/* @__PURE__ */ jsx(ServiceSettings$1, {
 					providers: ai.providers,
 					settings: ai.chosen,
 					onChange: ai.updateSettings,
@@ -5420,13 +5420,13 @@ function AppSignInGate({ api, children }) {
 }
 //#endregion
 //#region src/blocks-screen.tsx
-const fetchJson = async (url) => {
+const fetchJson$1 = async (url) => {
 	const response = await fetch(url);
 	if (!response.ok) throw new Error(`${url} answered ${response.status}.`);
 	return response.json();
 };
 /** What went wrong with a block registry, in plain words. */
-function problemText$1(t, problem, name) {
+function problemText$2(t, problem, name) {
 	const key = `blocks.error.${problem.code}`;
 	if (problem.code === "packages") return t(key, { packages: problem.packages.join(", ") });
 	if (problem.code === "file-exists" || problem.code === "unsupported-file") return t(key, { path: problem.path });
@@ -5546,7 +5546,7 @@ function BlocksScreen() {
 	}, [readFile, revision]);
 	const loadAvailable = useCallback(() => {
 		setLoadError(void 0);
-		availableBlocks(registries, fetchJson).then(setAvailable, setLoadError);
+		availableBlocks(registries, fetchJson$1).then(setAvailable, setLoadError);
 	}, [registries]);
 	useEffect(loadAvailable, [loadAvailable]);
 	const isPendingAdd = (block) => pending.some((change) => change.kind === "add" && change.block.ref === block.ref);
@@ -5583,7 +5583,7 @@ function BlocksScreen() {
 			const plan = await planBlockChanges({
 				changes: pending.map((item) => item.kind === "add" ? { add: item.block.ref } : { remove: item.name }),
 				registries,
-				fetchJson,
+				fetchJson: fetchJson$1,
 				readFile,
 				record,
 				blocks: Object.keys(blocks),
@@ -5616,7 +5616,7 @@ function BlocksScreen() {
 		} catch (error) {
 			setNotice({
 				type: "failed",
-				message: error instanceof RegistryError ? problemText$1(t, error.problem, failedTitle(error)) : t("publish.error"),
+				message: error instanceof RegistryError ? problemText$2(t, error.problem, failedTitle(error)) : t("publish.error"),
 				error
 			});
 		}
@@ -5735,7 +5735,7 @@ function BlocksScreen() {
 				error: recordError
 			}),
 			loadError !== void 0 && /* @__PURE__ */ jsx(ErrorMessage, {
-				message: loadError instanceof RegistryError ? problemText$1(t, loadError.problem, "") : t("blocks.error.unreachable"),
+				message: loadError instanceof RegistryError ? problemText$2(t, loadError.problem, "") : t("blocks.error.unreachable"),
 				error: loadError,
 				action: /* @__PURE__ */ jsx(Button, {
 					onClick: loadAvailable,
@@ -9014,12 +9014,19 @@ function ConnectedDomain({ domain, onRemoved, admin = false }) {
 		className: "gfa-form",
 		children: [
 			/* @__PURE__ */ jsx("p", { children: /* @__PURE__ */ jsx("strong", { children: t(admin ? "domain.admin.connected" : "domain.connected", { domain }) }) }),
-			account?.redirectAddressesListed && /* @__PURE__ */ jsx("p", {
+			account?.redirectAddressesListed && /* @__PURE__ */ jsxs("p", {
 				className: "gfa-notice",
-				children: t("domain.signIn", {
-					host,
-					address: `${address}/admin/`
-				})
+				children: [
+					t("domain.signIn", {
+						host,
+						address: `${address}/admin/`
+					}),
+					" ",
+					/* @__PURE__ */ jsx(AppLink, {
+						href: "#/settings/security",
+						children: t("domain.signInSettings")
+					})
+				]
 			}),
 			done && /* @__PURE__ */ jsx("p", {
 				className: "gfa-notice gfa-notice-success",
@@ -9558,7 +9565,7 @@ const ROLE_LABELS = {
 	viewer: "editors.role.viewer"
 };
 /** Plain words for why a change to the editors didn't work. */
-function problemText(error) {
+function problemText$1(error) {
 	return error instanceof EditorsError ? `editors.error.${error.problem}` : "editors.error.other";
 }
 /** Who edits the site: inviting people, changing what they can do, and removing them. */
@@ -9648,7 +9655,7 @@ function EditorsPanel() {
 			})]
 		}),
 		problem !== void 0 && /* @__PURE__ */ jsx(ErrorMessage, {
-			message: t(problemText(problem), { host }),
+			message: t(problemText$1(problem), { host }),
 			error: problem
 		}),
 		/* @__PURE__ */ jsxs("table", {
@@ -9841,6 +9848,271 @@ function EntryEditorScreen({ collectionId, slug }) {
 	});
 }
 //#endregion
+//#region src/site-download.ts
+/**
+* A copy of the site to keep: its content, its media library and the records
+* of the blocks and plugins it installed, as one zip file, read at the
+* revision the admin panel loaded. fflate is loaded only when a copy is made.
+* No React or DOM, so it's tested in Node.
+*/
+/** The folders a copy holds whole. */
+const DOWNLOAD_FOLDERS = TRANSFER_FOLDERS;
+/** Single files a copy holds where the site has them: which blocks and plugins it installed, to add them again. */
+const DOWNLOAD_RECORDS = TRANSFER_RECORDS;
+/** How many files are read at once. */
+const READ_AT_ONCE = 6;
+/** Files that are already compressed are stored as they are, which is as small and much quicker. */
+const COMPRESSED = /\.(jpe?g|png|webp|gif|avif|mp4|webm|mov|m4v|mp3|m4a|ogg|oga|wav|pdf|woff2?|zip|gz)$/i;
+/** Every file a copy holds, sorted, from the folders and records the site has. */
+async function downloadPaths(list) {
+	const folders = await Promise.all(DOWNLOAD_FOLDERS.map((dir) => list(dir)));
+	const records = await Promise.all(DOWNLOAD_RECORDS.map(async (path) => {
+		return (await list(path.slice(0, path.lastIndexOf("/")))).includes(path) ? [path] : [];
+	}));
+	return [.../* @__PURE__ */ new Set([...folders.flat(), ...records.flat()])].sort();
+}
+/**
+* The copy's file name: the site's title in plain letters, then the day,
+* `st-anne-parish-2026-11-01.zip`, or `site-…` for a title with none.
+*/
+const downloadName = transferName;
+/**
+* Zips the files, read with `read`, in the order given, a few at a time, and
+* returns the zip in pieces, for a `Blob`. A file that's gone since it was
+* listed is left out. Throws what reading throws.
+*/
+async function siteArchive(paths, read, onProgress) {
+	const { Zip, ZipDeflate, ZipPassThrough } = await import("fflate");
+	const chunks = [];
+	let finish = () => {};
+	let fail = () => {};
+	const finished = new Promise((resolve, reject) => {
+		finish = resolve;
+		fail = reject;
+	});
+	const zip = new Zip((error, chunk, final) => {
+		if (error) return fail(error);
+		chunks.push(chunk);
+		if (final) finish();
+	});
+	let done = 0;
+	onProgress?.({
+		done,
+		total: paths.length
+	});
+	try {
+		for (let start = 0; start < paths.length; start += READ_AT_ONCE) {
+			const batch = paths.slice(start, start + READ_AT_ONCE);
+			const files = await Promise.all(batch.map((path) => read(path)));
+			batch.forEach((path, index) => {
+				const bytes = files[index];
+				if (bytes) {
+					const entry = COMPRESSED.test(path) ? new ZipPassThrough(path) : new ZipDeflate(path, { level: 6 });
+					zip.add(entry);
+					entry.push(bytes, true);
+				}
+				done += 1;
+			});
+			onProgress?.({
+				done,
+				total: paths.length
+			});
+		}
+	} catch (error) {
+		zip.terminate();
+		throw error;
+	}
+	zip.end();
+	await finished;
+	return chunks;
+}
+/**
+* A copy of the site as one zip, with the manifest that lets another
+* Goodfellow site import it (`TRANSFER_MANIFEST`), in pieces for a `Blob`.
+*/
+async function siteCopyArchive(list, readBytes, content, onProgress) {
+	const paths = await downloadPaths(list);
+	const manifest = transferManifestFile(content);
+	const bytes = new TextEncoder().encode(manifest.content);
+	return siteArchive([...paths, manifest.path], async (path) => path === manifest.path ? bytes : readBytes(path), onProgress);
+}
+//#endregion
+//#region src/markdown-export.tsx
+/** What a Markdown export couldn't bring across as it was, in words. */
+function noteText$3(t, note, blockName) {
+	const listed = (items) => {
+		const shown = items.slice(0, 3).join(", ");
+		return items.length > 3 ? t("import.note.more", {
+			items: shown,
+			count: String(items.length - 3)
+		}) : shown;
+	};
+	switch (note.kind) {
+		case "left-out-block": return t("markdownExport.note.leftOutBlock", {
+			name: blockName(note.name),
+			items: listed(note.items)
+		});
+		case "scheduled": return t(note.included ? "markdownExport.note.scheduledIncluded" : "markdownExport.note.scheduledLeftOut", { items: listed(note.items) });
+		case "no-pages": return t("markdownExport.note.noPages", { collections: listed(note.collections) });
+		case "templates": return t("markdownExport.note.templates", { collections: listed(note.collections) });
+		case "redirects": return t("markdownExport.note.redirects", { count: String(note.count) });
+		case "layout": return t("markdownExport.note.layout");
+	}
+}
+/**
+* Writes the site as a folder of Markdown files (`markdownExport()`), zipped
+* in the browser with the media library, for other static sites, notes apps
+* and AI tools, on Site Settings' Import tab beside the WordPress export.
+*/
+function MarkdownExportSection() {
+	const t = useStrings();
+	const { blocks, readBytes } = useAdmin();
+	const { content, media } = useSiteContent();
+	const [scheduled, setScheduled] = useState(false);
+	const [links, setLinks] = useState("site");
+	const [result, setResult] = useState();
+	const [progress, setProgress] = useState();
+	const [problem, setProblem] = useState();
+	const busy = progress !== void 0;
+	const blockName = (name) => blocks[name]?.label ?? name;
+	const stored = Object.keys(content.mediaStorage?.files ?? {}).length > 0;
+	const exportSite = async () => {
+		setProblem(void 0);
+		setResult(void 0);
+		setProgress({
+			done: 0,
+			total: 0
+		});
+		try {
+			const { markdownExport, markdownExportName } = await import("@goodfellow-cms/core/wordpress");
+			const written = markdownExport(content, {
+				mediaFiles: media,
+				scheduled,
+				links
+			});
+			const folder = markdownExportName(content);
+			const texts = new Map(written.files.map((file) => [`${folder}/${file.path}`, file.content]));
+			const copies = new Map(written.media.map((file) => [`${folder}/${file.path}`, file.from]));
+			const encoder = new TextEncoder();
+			const chunks = await siteArchive([...texts.keys(), ...copies.keys()], async (path) => {
+				const text = texts.get(path);
+				if (text !== void 0) return encoder.encode(text);
+				const from = copies.get(path);
+				return from ? readBytes(from) : void 0;
+			}, setProgress);
+			const url = URL.createObjectURL(new Blob(chunks, { type: "application/zip" }));
+			const link = document.createElement("a");
+			link.href = url;
+			link.download = `${folder}.zip`;
+			document.body.append(link);
+			link.click();
+			link.remove();
+			setTimeout(() => URL.revokeObjectURL(url), 6e4);
+			setResult(written);
+		} catch (error) {
+			setProblem(error ?? /* @__PURE__ */ new Error("Export failed"));
+		} finally {
+			setProgress(void 0);
+		}
+	};
+	return /* @__PURE__ */ jsxs("section", {
+		"aria-labelledby": "gfa-markdown-export-title",
+		children: [
+			/* @__PURE__ */ jsx("h2", {
+				id: "gfa-markdown-export-title",
+				className: "gfa-section-title",
+				children: t("markdownExport.title")
+			}),
+			/* @__PURE__ */ jsx("p", { children: t("markdownExport.intro") }),
+			/* @__PURE__ */ jsx("p", {
+				className: "gfa-hint",
+				children: t("markdownExport.limits")
+			}),
+			stored && /* @__PURE__ */ jsx("p", {
+				className: "gfa-hint",
+				children: t("markdownExport.stored")
+			}),
+			/* @__PURE__ */ jsxs("fieldset", {
+				className: "gfa-fieldset",
+				children: [
+					/* @__PURE__ */ jsx("legend", { children: t("markdownExport.links") }),
+					/* @__PURE__ */ jsxs("label", {
+						className: "gfa-checkbox",
+						children: [/* @__PURE__ */ jsx("input", {
+							type: "radio",
+							name: "gfa-markdown-links",
+							checked: links === "site",
+							disabled: busy,
+							onChange: () => setLinks("site")
+						}), t("markdownExport.links.site")]
+					}),
+					/* @__PURE__ */ jsxs("label", {
+						className: "gfa-checkbox",
+						children: [/* @__PURE__ */ jsx("input", {
+							type: "radio",
+							name: "gfa-markdown-links",
+							checked: links === "files",
+							disabled: busy,
+							onChange: () => setLinks("files")
+						}), t("markdownExport.links.files")]
+					})
+				]
+			}),
+			/* @__PURE__ */ jsxs("label", {
+				className: "gfa-checkbox",
+				children: [/* @__PURE__ */ jsx("input", {
+					type: "checkbox",
+					checked: scheduled,
+					disabled: busy,
+					onChange: (event) => setScheduled(event.target.checked)
+				}), t("markdownExport.scheduled")]
+			}),
+			problem !== void 0 && /* @__PURE__ */ jsx(ErrorMessage, {
+				message: t("markdownExport.error"),
+				error: problem
+			}),
+			/* @__PURE__ */ jsx("p", {
+				className: "gfa-import-actions",
+				children: /* @__PURE__ */ jsx(Button, {
+					onClick: () => void exportSite(),
+					disabled: busy,
+					children: t("markdownExport.download")
+				})
+			}),
+			progress && progress.total > 0 && /* @__PURE__ */ jsx("p", {
+				role: "status",
+				children: t("markdownExport.working", {
+					done: String(progress.done),
+					total: String(progress.total)
+				})
+			}),
+			result && /* @__PURE__ */ jsxs(Fragment$1, { children: [
+				/* @__PURE__ */ jsx("p", {
+					role: "status",
+					className: "gfa-notice gfa-notice-success",
+					children: t("markdownExport.done")
+				}),
+				/* @__PURE__ */ jsxs("ul", {
+					className: "gfa-import-summary",
+					children: [
+						/* @__PURE__ */ jsx("li", { children: t("export.summary.pages", { count: String(result.summary.pages) }) }),
+						/* @__PURE__ */ jsx("li", { children: t("markdownExport.summary.items", { count: String(result.summary.items) }) }),
+						/* @__PURE__ */ jsx("li", { children: t("import.summary.menus", { count: String(result.summary.menus) }) }),
+						/* @__PURE__ */ jsx("li", { children: t("markdownExport.summary.media", { count: String(result.summary.media) }) })
+					]
+				}),
+				result.notes.length > 0 && /* @__PURE__ */ jsxs(Fragment$1, { children: [/* @__PURE__ */ jsx("h3", {
+					className: "gfa-section-title",
+					children: t("import.check")
+				}), /* @__PURE__ */ jsx("ul", {
+					className: "gfa-import-notes",
+					children: result.notes.map((note) => /* @__PURE__ */ jsx("li", { children: noteText$3(t, note, blockName) }, JSON.stringify(note)))
+				})] })
+			] })
+		]
+	});
+}
+//#endregion
 //#region src/markdown-import.tsx
 const NOTES = {
 	drafts: "markdownImport.note.drafts",
@@ -9852,7 +10124,7 @@ const NOTES = {
 	"template-code": "markdownImport.note.templateCode",
 	html: "markdownImport.note.html"
 };
-function listed(t, items) {
+function listed$1(t, items) {
 	const shown = items.slice(0, 3).join(", ");
 	return items.length > 3 ? t("import.note.more", {
 		items: shown,
@@ -9860,12 +10132,12 @@ function listed(t, items) {
 	}) : shown;
 }
 /** What the import couldn't bring across as it was, in words. */
-function noteText$1(t, note) {
+function noteText$2(t, note) {
 	switch (note.kind) {
-		case "fields": return t("markdownImport.note.fields", { names: listed(t, note.names) });
-		case "converted": return t("markdownImport.note.converted", { items: listed(t, note.files) });
+		case "fields": return t("markdownImport.note.fields", { names: listed$1(t, note.names) });
+		case "converted": return t("markdownImport.note.converted", { items: listed$1(t, note.files) });
 		default: return t(NOTES[note.kind], {
-			items: listed(t, note.files),
+			items: listed$1(t, note.files),
 			count: String(note.files.length)
 		});
 	}
@@ -10206,45 +10478,578 @@ function Notes$1({ plan }) {
 		children: t("import.check")
 	}), /* @__PURE__ */ jsx("ul", {
 		className: "gfa-import-notes",
-		children: plan.notes.map((note) => /* @__PURE__ */ jsx("li", { children: noteText$1(t, note) }, JSON.stringify(note)))
+		children: plan.notes.map((note) => /* @__PURE__ */ jsx("li", { children: noteText$2(t, note) }, JSON.stringify(note)))
 	})] });
 }
 //#endregion
-//#region src/import-screen.tsx
-/** How many media files are downloaded at once. */
-const DOWNLOADS = 4;
-const CONVERTED = {
-	block: "import.note.block",
-	dropped: "import.note.dropped",
-	shortcode: "import.note.shortcode",
-	embed: "import.note.embed",
-	form: "import.note.form",
-	script: "import.note.script",
-	table: "import.note.table",
-	posts: "import.note.posts",
-	video: "import.note.video"
-};
-const LEFT_OUT = {
-	drafts: "import.note.leftOut.drafts",
-	private: "import.note.leftOut.private",
-	trash: "import.note.leftOut.trash",
-	comments: "import.note.leftOut.comments"
+//#region src/site-transfer.tsx
+const fetchJson = async (url) => {
+	const response = await fetch(url);
+	if (!response.ok) throw new Error(`${url} answered ${response.status}.`);
+	return response.json();
 };
-/** What the import couldn't bring across as it was, in words. */
-function noteText(t, note) {
-	switch (note.kind) {
-		case "left-out": return t(LEFT_OUT[note.what] ?? "import.note.leftOut.other", {
-			count: String(note.count),
-			name: note.what
+/** Saves zip pieces as a download. */
+function saveZip(chunks, name) {
+	const url = URL.createObjectURL(new Blob(chunks, { type: "application/zip" }));
+	const link = document.createElement("a");
+	link.href = url;
+	link.download = name;
+	document.body.append(link);
+	link.click();
+	link.remove();
+	setTimeout(() => URL.revokeObjectURL(url), 6e4);
+}
+/** Downloads the site's content and media as one zip, with its manifest, for another Goodfellow site to import. */
+function SiteExportSection() {
+	const t = useStrings();
+	const { listFiles, readBytes } = useAdmin();
+	const { content } = useSiteContent();
+	const [progress, setProgress] = useState();
+	const [error, setError] = useState();
+	const stored = Object.keys(content.mediaStorage?.files ?? {}).length > 0;
+	const download = async () => {
+		setError(void 0);
+		setProgress({
+			done: 0,
+			total: 0
 		});
-		case "converted": {
-			const shown = note.items.slice(0, 3).join(", ");
-			const items = note.items.length > 3 ? t("import.note.more", {
-				items: shown,
-				count: String(note.items.length - 3)
-			}) : shown;
-			return t(CONVERTED[note.note] ?? "import.note.block", {
-				name: note.name,
+		try {
+			saveZip(await siteCopyArchive(listFiles, readBytes, content, setProgress), downloadName(content.settings.title, /* @__PURE__ */ new Date()));
+		} catch (caught) {
+			setError(caught);
+		} finally {
+			setProgress(void 0);
+		}
+	};
+	return /* @__PURE__ */ jsxs("section", {
+		"aria-labelledby": "gfa-site-export-title",
+		children: [
+			/* @__PURE__ */ jsx("h2", {
+				id: "gfa-site-export-title",
+				className: "gfa-section-title",
+				children: t("siteTransfer.export.title")
+			}),
+			/* @__PURE__ */ jsx("p", { children: t("siteTransfer.export.intro") }),
+			stored && /* @__PURE__ */ jsx("p", {
+				className: "gfa-hint",
+				children: t("siteTransfer.export.stored")
+			}),
+			/* @__PURE__ */ jsx("p", {
+				className: "gfa-import-actions",
+				children: /* @__PURE__ */ jsx(Button, {
+					onClick: () => void download(),
+					disabled: progress !== void 0,
+					children: t("siteTransfer.export.button")
+				})
+			}),
+			progress && progress.total > 0 && /* @__PURE__ */ jsx("p", {
+				role: "status",
+				children: t("siteTransfer.export.working", {
+					done: String(progress.done),
+					total: String(progress.total)
+				})
+			}),
+			error !== void 0 && /* @__PURE__ */ jsx(ErrorMessage, {
+				message: t("siteTransfer.export.error"),
+				error
+			})
+		]
+	});
+}
+const NO_CHOICES = {
+	replace: false,
+	menus: false,
+	settings: false,
+	layout: false,
+	redirects: false,
+	withoutMissingBlocks: false,
+	take: /* @__PURE__ */ new Set(),
+	install: /* @__PURE__ */ new Set()
+};
+const decoder = new TextDecoder();
+/** The export's files, as `planSiteImport()` reads them. */
+function transferFiles(files) {
+	return {
+		paths: [...files.keys()],
+		read: (path) => {
+			const bytes = files.get(path);
+			return bytes && decoder.decode(bytes);
+		}
+	};
+}
+function listed(t, items) {
+	const shown = items.slice(0, 3).join(", ");
+	return items.length > 3 ? t("import.note.more", {
+		items: shown,
+		count: String(items.length - 3)
+	}) : shown;
+}
+function noteText$1(t, note, blockName) {
+	switch (note.kind) {
+		case "missing-block": return t("siteTransfer.note.missingBlock", {
+			name: blockName(note.name),
+			items: listed(t, note.items)
+		});
+		case "left-out": return t("siteTransfer.note.leftOut", { items: listed(t, note.items) });
+		case "without-blocks": return t("siteTransfer.note.withoutBlocks", { items: listed(t, note.items) });
+		case "taken": return t("siteTransfer.note.taken", { items: listed(t, note.items) });
+		case "collection-differs": return t("siteTransfer.note.collectionDiffers", { collections: listed(t, note.collections) });
+		case "uncopied": return t("siteTransfer.note.uncopied", { items: listed(t, note.files) });
+		case "stored-media": return t(note.merged ? "siteTransfer.note.storedMerged" : "siteTransfer.note.stored", { count: String(note.count) });
+		case "languages": return t("siteTransfer.note.languages", { codes: note.codes.join(", ") });
+		case "plugins": return t("siteTransfer.note.plugins", { names: listed(t, note.names) });
+		case "code": return t("siteTransfer.note.code");
+		case "kept": return t("siteTransfer.note.kept", { things: note.things.map((thing) => t(`siteTransfer.kept.${thing}`)).join(", ") });
+	}
+}
+function conflictText(t, conflict) {
+	const values = {
+		name: conflict.name,
+		detail: conflict.detail ?? ""
+	};
+	switch (conflict.kind) {
+		case "page": return t("siteTransfer.conflict.page", values);
+		case "item": return t("siteTransfer.conflict.item", values);
+		case "collection": return t("siteTransfer.conflict.collection", values);
+		case "synced-block": return t("siteTransfer.conflict.syncedBlock", values);
+		case "media": return t("siteTransfer.conflict.media", values);
+	}
+}
+function problemText(t, error) {
+	if (error instanceof SiteImportError) {
+		if (error.problem === "not-a-site") return t("siteTransfer.error.notASite");
+		if (error.problem === "newer") return t("siteTransfer.error.newer");
+		return t("siteTransfer.error.invalid");
+	}
+	return t("siteTransfer.error.other");
+}
+/**
+* Brings another Goodfellow site's export into this one with
+* `planSiteImport()`: added to its content, with a choice for each thing both
+* have differently, or in place of it, then published in one go, with blocks
+* from Goodfellow's registry it lacks added in the same publish where the
+* site's code can be changed from here.
+*/
+function SiteImportSection() {
+	const t = useStrings();
+	const { blocks, publish, mediaPreviews, listFiles, readBytes, readFile, registries } = useAdmin();
+	const { contentOnly, demo, account, site } = useAdmin();
+	const { content } = useSiteContent();
+	const [loaded, setLoaded] = useState();
+	const [choices, setChoices] = useState(NO_CHOICES);
+	const [plan, setPlan] = useState();
+	const [reading, setReading] = useState(false);
+	const [publishing, setPublishing] = useState(false);
+	const [done, setDone] = useState();
+	const [problem, setProblem] = useState();
+	const [failure, setFailure] = useState(null);
+	const mayInstall = !contentOnly && !demo && !account?.codeReview;
+	const blockName = (name) => blocks[name]?.label ?? name;
+	useEffect(() => {
+		if (!loaded) return;
+		let current = true;
+		planSiteImport(transferFiles(loaded.files), {
+			content,
+			files: loaded.siteFiles,
+			read: readFile
+		}, {
+			...choices,
+			blocks: Object.keys(blocks),
+			installing: [...choices.install],
+			plugins: loaded.plugins,
+			sameMedia: loaded.same,
+			uncopied: loaded.uncopied
+		}).then((next) => current && setPlan(next), (error) => {
+			if (!current) return;
+			setProblem({
+				message: problemText(t, error),
+				error
+			});
+			setLoaded(void 0);
+			setPlan(void 0);
+		});
+		return () => {
+			current = false;
+		};
+	}, [
+		loaded,
+		choices,
+		content,
+		blocks,
+		readFile,
+		t
+	]);
+	const choose = async (file) => {
+		setProblem(void 0);
+		setFailure(null);
+		setDone(void 0);
+		setPlan(void 0);
+		setReading(true);
+		try {
+			const { unzipSync } = await import("fflate");
+			const archive = unzipSync(new Uint8Array(await file.arrayBuffer()));
+			const paths = transferPaths(Object.keys(archive));
+			if (paths.size === 0) throw new SiteImportError("not-a-site");
+			const files = /* @__PURE__ */ new Map();
+			for (const [path, at] of paths) {
+				const bytes = archive[at];
+				if (bytes) files.set(path, bytes);
+			}
+			const siteFiles = [...await listFiles(CONTENT_DIR), ...await listFiles(MEDIA_DIR)];
+			const same = /* @__PURE__ */ new Set();
+			const uncopied = /* @__PURE__ */ new Set();
+			const mine = new Set(siteFiles);
+			for (const [path, bytes] of files) {
+				if (!path.startsWith(`${MEDIA_DIR}/`)) continue;
+				if (bytes.length > MAX_UPLOAD_BYTES || !mediaKind(fileName$1(path))) uncopied.add(path);
+				else if (mine.has(path)) {
+					const own = await readBytes(path);
+					if (own && own.length === bytes.length && own.every((byte, index) => byte === bytes[index])) same.add(path);
+				}
+			}
+			let plugins = (site.description.plugins ?? []).map((plugin) => plugin.name);
+			try {
+				const text = await readFile(INSTALLED_PLUGINS_FILE);
+				if (text) plugins = [...plugins, ...Object.keys(JSON.parse(text).plugins ?? {})];
+			} catch {}
+			setChoices(NO_CHOICES);
+			setLoaded({
+				name: file.name,
+				files,
+				siteFiles,
+				same,
+				uncopied,
+				plugins
+			});
+		} catch (error) {
+			setProblem({
+				message: problemText(t, error),
+				error
+			});
+		} finally {
+			setReading(false);
+		}
+	};
+	const importNow = async () => {
+		if (!loaded || !plan) return;
+		setPublishing(true);
+		setFailure(null);
+		setProblem(void 0);
+		try {
+			let blockChanges = [];
+			const install = plan.installable.filter((block) => choices.install.has(block.name));
+			if (install.length > 0) try {
+				const record = parseInstalledRecord(await readFile(INSTALLED_RECORD_FILE));
+				blockChanges = (await planBlockChanges({
+					changes: install.map((block) => ({ add: block.source })),
+					registries: { [GOODFELLOW_REGISTRY]: registries[GOODFELLOW_REGISTRY] },
+					fetchJson,
+					readFile,
+					record,
+					blocks: Object.keys(blocks),
+					content
+				})).changes;
+			} catch (error) {
+				setProblem({
+					message: t("siteTransfer.error.blocks"),
+					error
+				});
+				setPublishing(false);
+				return;
+			}
+			const media = plan.media.flatMap((path) => {
+				const bytes = loaded.files.get(path);
+				return bytes ? [{
+					path,
+					bytes
+				}] : [];
+			});
+			for (const file of media) if ("bytes" in file) mediaPreviews.remember(mediaUrl(file.path), file.bytes);
+			const title = plan.summary.title || loaded.name;
+			const result = await publish([
+				...plan.changes,
+				...media,
+				...blockChanges
+			], t("siteTransfer.import.message", { title }));
+			if (result.ok) {
+				setDone(title);
+				setLoaded(void 0);
+				setPlan(void 0);
+			} else setFailure(result);
+		} finally {
+			setPublishing(false);
+		}
+	};
+	const toggle = (key, label) => /* @__PURE__ */ jsxs("label", {
+		className: "gfa-checkbox",
+		children: [/* @__PURE__ */ jsx("input", {
+			type: "checkbox",
+			checked: choices[key],
+			disabled: publishing,
+			onChange: (event) => setChoices({
+				...choices,
+				[key]: event.target.checked
+			})
+		}), t(label)]
+	});
+	const setTake = (keys) => setChoices({
+		...choices,
+		take: new Set(keys)
+	});
+	const leftOut = plan?.notes.some((note) => note.kind === "left-out" || note.kind === "without-blocks");
+	const nothing = plan !== void 0 && plan.changes.length === 0 && plan.media.length === 0 && choices.install.size === 0;
+	return /* @__PURE__ */ jsxs("section", {
+		"aria-labelledby": "gfa-site-import-title",
+		children: [
+			/* @__PURE__ */ jsx("h2", {
+				id: "gfa-site-import-title",
+				className: "gfa-section-title",
+				children: t("siteTransfer.import.title")
+			}),
+			done && /* @__PURE__ */ jsxs(Fragment$1, { children: [/* @__PURE__ */ jsx("p", {
+				role: "status",
+				className: "gfa-notice gfa-notice-success",
+				children: t("siteTransfer.import.done", { title: done })
+			}), /* @__PURE__ */ jsx("p", {
+				className: "gfa-import-actions",
+				children: /* @__PURE__ */ jsx(AppLink, {
+					href: "#/pages",
+					className: "gfa-button gfa-button-primary",
+					children: t("import.viewPages")
+				})
+			})] }),
+			!loaded ? /* @__PURE__ */ jsxs(Fragment$1, { children: [
+				/* @__PURE__ */ jsx("p", { children: t("siteTransfer.import.intro") }),
+				problem && /* @__PURE__ */ jsx(ErrorMessage, {
+					message: problem.message,
+					error: problem.error
+				}),
+				/* @__PURE__ */ jsxs("label", {
+					className: "gfa-field",
+					children: [
+						/* @__PURE__ */ jsx("span", {
+							className: "gfa-label",
+							children: t("siteTransfer.import.file")
+						}),
+						/* @__PURE__ */ jsx("input", {
+							type: "file",
+							className: "gfa-input",
+							accept: ".zip,application/zip",
+							disabled: reading,
+							onChange: (event) => {
+								const chosen = event.target.files?.[0];
+								event.target.value = "";
+								if (chosen) choose(chosen);
+							}
+						}),
+						/* @__PURE__ */ jsx("span", {
+							className: "gfa-hint",
+							children: t("siteTransfer.import.fileHint")
+						})
+					]
+				}),
+				reading && /* @__PURE__ */ jsx("p", {
+					role: "status",
+					children: t("siteTransfer.import.reading")
+				})
+			] }) : /* @__PURE__ */ jsxs(Fragment$1, { children: [
+				/* @__PURE__ */ jsx("p", { children: t("siteTransfer.import.ready", { title: plan?.summary.title || loaded.name }) }),
+				/* @__PURE__ */ jsxs("fieldset", {
+					className: "gfa-fieldset",
+					children: [
+						/* @__PURE__ */ jsx("legend", { children: t("siteTransfer.import.mode") }),
+						/* @__PURE__ */ jsxs("label", {
+							className: "gfa-checkbox",
+							children: [/* @__PURE__ */ jsx("input", {
+								type: "radio",
+								name: "gfa-site-import-mode",
+								checked: !choices.replace,
+								disabled: publishing,
+								onChange: () => setChoices({
+									...choices,
+									replace: false
+								})
+							}), t("siteTransfer.import.mode.add")]
+						}),
+						/* @__PURE__ */ jsxs("label", {
+							className: "gfa-checkbox",
+							children: [/* @__PURE__ */ jsx("input", {
+								type: "radio",
+								name: "gfa-site-import-mode",
+								checked: choices.replace,
+								disabled: publishing,
+								onChange: () => setChoices({
+									...choices,
+									replace: true
+								})
+							}), t("siteTransfer.import.mode.replace")]
+						})
+					]
+				}),
+				choices.replace ? /* @__PURE__ */ jsx("p", {
+					className: "gfa-notice gfa-notice-warning",
+					children: t("siteTransfer.import.replaceWarning")
+				}) : /* @__PURE__ */ jsxs("fieldset", {
+					className: "gfa-fieldset",
+					children: [
+						/* @__PURE__ */ jsx("legend", { children: t("siteTransfer.import.also") }),
+						toggle("menus", "siteTransfer.import.menus"),
+						toggle("settings", "siteTransfer.import.settings"),
+						toggle("layout", "siteTransfer.import.layout"),
+						toggle("redirects", "siteTransfer.import.redirects")
+					]
+				}),
+				plan && mayInstall && plan.installable.length > 0 && /* @__PURE__ */ jsxs("fieldset", {
+					className: "gfa-fieldset",
+					children: [
+						/* @__PURE__ */ jsx("legend", { children: t("siteTransfer.import.blocks") }),
+						plan.installable.map((block) => /* @__PURE__ */ jsxs("label", {
+							className: "gfa-checkbox",
+							children: [/* @__PURE__ */ jsx("input", {
+								type: "checkbox",
+								checked: choices.install.has(block.name),
+								disabled: publishing,
+								onChange: (event) => {
+									const install = new Set(choices.install);
+									if (event.target.checked) install.add(block.name);
+									else install.delete(block.name);
+									setChoices({
+										...choices,
+										install
+									});
+								}
+							}), t("siteTransfer.import.install", { title: block.title })]
+						}, block.name)),
+						/* @__PURE__ */ jsx("p", {
+							className: "gfa-hint",
+							children: t("siteTransfer.import.installHint")
+						})
+					]
+				}),
+				leftOut && toggle("withoutMissingBlocks", "siteTransfer.import.withoutBlocks"),
+				plan && plan.conflicts.length > 0 && /* @__PURE__ */ jsxs("fieldset", {
+					className: "gfa-fieldset",
+					children: [
+						/* @__PURE__ */ jsx("legend", { children: t("siteTransfer.import.conflicts") }),
+						/* @__PURE__ */ jsx("p", {
+							className: "gfa-hint",
+							children: t("siteTransfer.import.conflictsHint")
+						}),
+						/* @__PURE__ */ jsxs("p", {
+							className: "gfa-import-actions",
+							children: [/* @__PURE__ */ jsx(Button, {
+								onClick: () => setTake(plan.conflicts.map((conflict) => conflict.key)),
+								disabled: publishing,
+								children: t("siteTransfer.import.useAllTheirs")
+							}), /* @__PURE__ */ jsx(Button, {
+								onClick: () => setTake([]),
+								disabled: publishing,
+								children: t("siteTransfer.import.useAllMine")
+							})]
+						}),
+						plan.conflicts.map((conflict) => /* @__PURE__ */ jsxs("label", {
+							className: "gfa-checkbox",
+							children: [/* @__PURE__ */ jsx("input", {
+								type: "checkbox",
+								checked: choices.take.has(conflict.key),
+								disabled: publishing,
+								onChange: (event) => {
+									const take = new Set(choices.take);
+									if (event.target.checked) take.add(conflict.key);
+									else take.delete(conflict.key);
+									setTake(take);
+								}
+							}), t("siteTransfer.import.useTheirs", { what: conflictText(t, conflict) })]
+						}, conflict.key))
+					]
+				}),
+				plan && /* @__PURE__ */ jsxs(Fragment$1, { children: [nothing ? /* @__PURE__ */ jsx("p", {
+					className: "gfa-notice",
+					children: t("siteTransfer.summary.nothing")
+				}) : /* @__PURE__ */ jsxs("ul", {
+					className: "gfa-import-summary",
+					children: [
+						/* @__PURE__ */ jsx("li", { children: t("siteTransfer.summary.pages", { count: String(plan.summary.pages) }) }),
+						/* @__PURE__ */ jsx("li", { children: t("siteTransfer.summary.items", { count: String(plan.summary.items) }) }),
+						plan.summary.collections > 0 && /* @__PURE__ */ jsx("li", { children: t("siteTransfer.summary.collections", { count: String(plan.summary.collections) }) }),
+						plan.summary.syncedBlocks > 0 && /* @__PURE__ */ jsx("li", { children: t("siteTransfer.summary.syncedBlocks", { count: String(plan.summary.syncedBlocks) }) }),
+						/* @__PURE__ */ jsx("li", { children: t("siteTransfer.summary.media", { count: String(plan.summary.media) }) }),
+						plan.summary.menus && /* @__PURE__ */ jsx("li", { children: t("siteTransfer.summary.menus") }),
+						plan.summary.settings && /* @__PURE__ */ jsx("li", { children: t("siteTransfer.summary.settings") }),
+						plan.summary.layout && /* @__PURE__ */ jsx("li", { children: t("siteTransfer.summary.layout") }),
+						plan.summary.redirects && /* @__PURE__ */ jsx("li", { children: t("siteTransfer.summary.redirects") }),
+						plan.summary.removed > 0 && /* @__PURE__ */ jsx("li", { children: t("siteTransfer.summary.removed", { count: String(plan.summary.removed) }) })
+					]
+				}), plan.notes.length > 0 && /* @__PURE__ */ jsxs(Fragment$1, { children: [/* @__PURE__ */ jsx("h3", {
+					className: "gfa-section-title",
+					children: t("import.check")
+				}), /* @__PURE__ */ jsx("ul", {
+					className: "gfa-import-notes",
+					children: plan.notes.map((note) => /* @__PURE__ */ jsx("li", { children: noteText$1(t, note, blockName) }, JSON.stringify(note)))
+				})] })] }),
+				problem && /* @__PURE__ */ jsx(ErrorMessage, {
+					message: problem.message,
+					error: problem.error
+				}),
+				/* @__PURE__ */ jsx(PublishFailure, { failure }),
+				publishing ? /* @__PURE__ */ jsx("p", {
+					role: "status",
+					children: t("import.publishing")
+				}) : /* @__PURE__ */ jsxs("p", {
+					className: "gfa-import-actions",
+					children: [/* @__PURE__ */ jsx(Button, {
+						variant: "primary",
+						onClick: () => void importNow(),
+						disabled: !plan || nothing,
+						children: t("import.start")
+					}), /* @__PURE__ */ jsx(Button, {
+						onClick: () => {
+							setLoaded(void 0);
+							setPlan(void 0);
+						},
+						children: t("siteTransfer.import.another")
+					})]
+				})
+			] })
+		]
+	});
+}
+//#endregion
+//#region src/import-screen.tsx
+/** How many media files are downloaded at once. */
+const DOWNLOADS = 4;
+const CONVERTED = {
+	block: "import.note.block",
+	dropped: "import.note.dropped",
+	shortcode: "import.note.shortcode",
+	embed: "import.note.embed",
+	form: "import.note.form",
+	script: "import.note.script",
+	table: "import.note.table",
+	posts: "import.note.posts",
+	video: "import.note.video"
+};
+const LEFT_OUT = {
+	drafts: "import.note.leftOut.drafts",
+	private: "import.note.leftOut.private",
+	trash: "import.note.leftOut.trash",
+	comments: "import.note.leftOut.comments"
+};
+/** What the import couldn't bring across as it was, in words. */
+function noteText(t, note) {
+	switch (note.kind) {
+		case "left-out": return t(LEFT_OUT[note.what] ?? "import.note.leftOut.other", {
+			count: String(note.count),
+			name: note.what
+		});
+		case "converted": {
+			const shown = note.items.slice(0, 3).join(", ");
+			const items = note.items.length > 3 ? t("import.note.more", {
+				items: shown,
+				count: String(note.items.length - 3)
+			}) : shown;
+			return t(CONVERTED[note.note] ?? "import.note.block", {
+				name: note.name,
 				items
 			});
 		}
@@ -10600,7 +11405,10 @@ function ImportScreen() {
 					children: t("import.reading")
 				}),
 				/* @__PURE__ */ jsx(MarkdownImportSection, {}),
-				/* @__PURE__ */ jsx(ExportSection, {})
+				/* @__PURE__ */ jsx(SiteImportSection, {}),
+				/* @__PURE__ */ jsx(ExportSection, {}),
+				/* @__PURE__ */ jsx(MarkdownExportSection, {}),
+				/* @__PURE__ */ jsx(SiteExportSection, {})
 			] }) : stage.kind === "done" ? /* @__PURE__ */ jsxs(Fragment$1, { children: [
 				/* @__PURE__ */ jsx("p", {
 					role: "status",
@@ -11817,73 +12625,437 @@ function PluginDetails({ name, installed, record, canInstall, canInstallEarly =
 		]
 	});
 }
-/** Packages every site has, which reviews leave out: Goodfellow's own, React and Puck. */
-const KNOWN_PACKAGES = [
-	"react",
-	"react-dom",
-	"@puckeditor/core",
-	"@goodfellow-cms/core",
-	"@goodfellow-cms/react",
-	"@goodfellow-cms/blocks",
-	"@goodfellow-cms/admin"
-];
-const NOTE_KINDS = [
-	"network",
-	"programs",
-	"eval",
-	"native",
-	"install-script"
-];
-/** One sentence on what the packages read could do, for the confirmation. */
-function noteSummary(t, reviews) {
-	const kinds = NOTE_KINDS.filter((kind) => reviews.some((review) => (review.counts[kind] ?? 0) > 0));
-	const unread = reviews.filter((review) => review.unread).length;
-	return [kinds.length > 0 ? t("plugins.code.summary", { list: kinds.map((kind) => t(`plugins.note.${kind}`)).join("; ") }) : t("plugins.code.nothing"), ...unread > 0 ? [t("plugins.code.unreadSummary", { count: String(unread) })] : []].join(" ");
-}
-/** What each package's code could do, as the review found it. */
-function CodeReview({ reviews }) {
+/** Packages every site has, which reviews leave out: Goodfellow's own, React and Puck. */
+const KNOWN_PACKAGES = [
+	"react",
+	"react-dom",
+	"@puckeditor/core",
+	"@goodfellow-cms/core",
+	"@goodfellow-cms/react",
+	"@goodfellow-cms/blocks",
+	"@goodfellow-cms/admin"
+];
+const NOTE_KINDS = [
+	"network",
+	"programs",
+	"eval",
+	"native",
+	"install-script"
+];
+/** One sentence on what the packages read could do, for the confirmation. */
+function noteSummary(t, reviews) {
+	const kinds = NOTE_KINDS.filter((kind) => reviews.some((review) => (review.counts[kind] ?? 0) > 0));
+	const unread = reviews.filter((review) => review.unread).length;
+	return [kinds.length > 0 ? t("plugins.code.summary", { list: kinds.map((kind) => t(`plugins.note.${kind}`)).join("; ") }) : t("plugins.code.nothing"), ...unread > 0 ? [t("plugins.code.unreadSummary", { count: String(unread) })] : []].join(" ");
+}
+/** What each package's code could do, as the review found it. */
+function CodeReview({ reviews }) {
+	const t = useStrings();
+	return /* @__PURE__ */ jsx("ul", {
+		className: "gfa-plugin-review",
+		children: reviews.map((review) => {
+			const kinds = NOTE_KINDS.filter((kind) => (review.counts[kind] ?? 0) > 0);
+			return /* @__PURE__ */ jsxs("li", { children: [
+				/* @__PURE__ */ jsxs("p", { children: [
+					/* @__PURE__ */ jsxs("code", { children: [
+						review.name,
+						" ",
+						review.version
+					] }),
+					" ",
+					review.via.length > 0 && /* @__PURE__ */ jsx("span", {
+						className: "gfa-hint",
+						children: t("plugins.code.via", { via: review.via.join(" → ") })
+					})
+				] }),
+				kinds.length === 0 && !review.unread && /* @__PURE__ */ jsx("p", {
+					className: "gfa-hint",
+					children: t("plugins.code.none")
+				}),
+				kinds.map((kind) => /* @__PURE__ */ jsxs("details", { children: [/* @__PURE__ */ jsxs("summary", { children: [
+					t(`plugins.note.${kind}`),
+					" (",
+					review.counts[kind],
+					")"
+				] }), /* @__PURE__ */ jsx("ul", { children: review.notes.filter((note) => note.kind === kind).map((note) => /* @__PURE__ */ jsxs("li", { children: [
+					/* @__PURE__ */ jsxs("span", {
+						className: "gfa-hint",
+						children: [note.file, note.line ? `:${note.line}` : ""]
+					}),
+					" ",
+					/* @__PURE__ */ jsx("code", { children: note.excerpt })
+				] }, `${note.file}:${note.line ?? 0}:${note.excerpt}`)) })] }, kind)),
+				review.unread && /* @__PURE__ */ jsx("p", {
+					className: "gfa-hint",
+					children: t(`plugins.unread.${review.unread}`)
+				})
+			] }, `${review.name}@${review.version}`);
+		})
+	});
+}
+const DEPLOY_TO_CLOUDFLARE = `https://deploy.workers.cloudflare.com/?url=https://github.com/goodfellow-cms/goodfellow-sign-in`;
+const HOST_NAMES = {
+	github: "GitHub",
+	gitlab: "GitLab",
+	bitbucket: "Bitbucket"
+};
+/** The permissions a Bitbucket consumer needs, as Bitbucket's form names them. */
+const BITBUCKET_PERMISSIONS = "Account: Read, Repositories: Write, Pull requests: Write, Pipelines: Write";
+function SignInSection({ config: given, contentOnly, hostName, save }) {
+	const t = useStrings();
+	const config = given ?? "";
+	const fromAccount = Object.entries(HOST_NAMES).find(([, name]) => name === hostName)?.[0];
+	const host = (given ? configBackendHost(given) : void 0) ?? (contentOnly ? fromAccount : void 0);
+	if (!host) return null;
+	const key = host === "github" ? "signIn" : "clientId";
+	const current = configBackendOption(config, key);
+	const writable = !contentOnly && withBackendOption(config, key, "placeholder-value") !== void 0;
+	const publish = async (value, message) => {
+		const next = withBackendOption(config, key, value);
+		if (next === void 0) throw new Error("goodfellow.config.tsx's backend line can't be changed here.");
+		await save(next, message);
+	};
+	return /* @__PURE__ */ jsxs("section", {
+		className: "gfa-form",
+		"aria-labelledby": "gfa-sign-in",
+		children: [/* @__PURE__ */ jsx("h2", {
+			className: "gfa-section-title",
+			id: "gfa-sign-in",
+			children: t(host === "github" ? "signInSetup.service.title" : "signInSetup.app.title", { host: HOST_NAMES[host] })
+		}), host === "github" ? /* @__PURE__ */ jsx(ServiceSettings, {
+			current,
+			writable,
+			contentOnly,
+			publish
+		}) : /* @__PURE__ */ jsx(AppSettings, {
+			host,
+			config,
+			current,
+			writable,
+			contentOnly,
+			publish
+		})]
+	});
+}
+function Current({ text, remove }) {
+	const t = useStrings();
+	const [busy, setBusy] = useState(false);
+	const [error, setError] = useState();
+	return /* @__PURE__ */ jsxs("div", {
+		className: "gfa-form",
+		children: [
+			/* @__PURE__ */ jsx("p", {
+				className: "gfa-notice gfa-notice-success",
+				role: "status",
+				children: text
+			}),
+			error !== void 0 && /* @__PURE__ */ jsx(ErrorMessage, {
+				message: t("signInSetup.error"),
+				error
+			}),
+			remove && /* @__PURE__ */ jsx("div", { children: /* @__PURE__ */ jsx(Button, {
+				variant: "ghost",
+				disabled: busy,
+				onClick: async () => {
+					setBusy(true);
+					setError(void 0);
+					try {
+						await remove();
+					} catch (caught) {
+						setError(caught);
+					} finally {
+						setBusy(false);
+					}
+				},
+				children: t("signInSetup.remove")
+			}) })
+		]
+	});
+}
+/** What a developer runs where the config is in the code's repository. */
+function Command({ command }) {
+	const t = useStrings();
+	return /* @__PURE__ */ jsxs(Fragment$1, { children: [/* @__PURE__ */ jsx("p", { children: t("signInSetup.contentOnly") }), /* @__PURE__ */ jsx("pre", { children: command })] });
+}
+function ServiceSettings({ current, writable, contentOnly, publish }) {
+	const t = useStrings();
+	const [input, setInput] = useState("");
+	const [problem, setProblem] = useState();
+	const [busy, setBusy] = useState(false);
+	const [error, setError] = useState();
+	if (current) return /* @__PURE__ */ jsx(Current, {
+		text: t("signInSetup.service.using", { address: current }),
+		remove: writable ? () => publish(void 0, t("signInSetup.service.removeMessage", { address: current })) : void 0
+	});
+	const submit = async () => {
+		const url = input.trim().replace(/\/+$/, "");
+		if (signInServiceProblem(url)) {
+			setProblem("invalid");
+			return;
+		}
+		setBusy(true);
+		setError(void 0);
+		try {
+			const origin = new URL(url).origin;
+			const health = await fetch(`${origin}/health`).then((response) => response.ok ? response.json() : void 0, () => void 0);
+			if (!health) {
+				setProblem("unreachable");
+				return;
+			}
+			if (health.ok !== true) {
+				setProblem("unset");
+				return;
+			}
+			await publish(origin, t("signInSetup.service.message", { address: origin }));
+		} catch (caught) {
+			setError(caught);
+		} finally {
+			setBusy(false);
+		}
+	};
+	return /* @__PURE__ */ jsxs(Fragment$1, { children: [
+		/* @__PURE__ */ jsx("p", { children: t("signInSetup.service.intro") }),
+		/* @__PURE__ */ jsxs("ol", {
+			className: "gfa-steps",
+			children: [
+				/* @__PURE__ */ jsxs("li", { children: [
+					t("signInSetup.service.step.deploy"),
+					" ",
+					/* @__PURE__ */ jsx("a", {
+						href: DEPLOY_TO_CLOUDFLARE,
+						target: "_blank",
+						rel: "noopener noreferrer",
+						children: t("signInSetup.service.deploy")
+					})
+				] }),
+				/* @__PURE__ */ jsx("li", { children: t("signInSetup.service.step.setup") }),
+				/* @__PURE__ */ jsx("li", { children: t("signInSetup.service.step.use") })
+			]
+		}),
+		/* @__PURE__ */ jsx("p", {
+			className: "gfa-hint",
+			children: /* @__PURE__ */ jsx("a", {
+				href: docsLink("sign-in-service"),
+				target: "_blank",
+				rel: "noopener noreferrer",
+				children: t("signInSetup.service.more")
+			})
+		}),
+		contentOnly ? /* @__PURE__ */ jsx(Command, { command: "npx goodfellow sign-in service https://sign-in.your-name.workers.dev" }) : !writable ? /* @__PURE__ */ jsx("p", { children: t("signInSetup.handWritten", { key: "signIn" }) }) : /* @__PURE__ */ jsxs("form", {
+			className: "gfa-form",
+			onSubmit: (event) => {
+				event.preventDefault();
+				submit();
+			},
+			children: [
+				/* @__PURE__ */ jsx(TextField, {
+					label: t("signInSetup.service.field"),
+					hint: t("signInSetup.service.fieldHint"),
+					placeholder: "https://sign-in.your-name.workers.dev",
+					value: input,
+					error: problem ? t(`signInSetup.service.problem.${problem}`) : void 0,
+					onChange: (value) => {
+						setInput(value);
+						setProblem(void 0);
+					}
+				}),
+				error !== void 0 && /* @__PURE__ */ jsx(ErrorMessage, {
+					message: t("signInSetup.error"),
+					error
+				}),
+				/* @__PURE__ */ jsx("div", { children: /* @__PURE__ */ jsx(Button, {
+					variant: "primary",
+					type: "submit",
+					disabled: busy || !input.trim(),
+					children: t("signInSetup.service.use")
+				}) })
+			]
+		})
+	] });
+}
+function CopyValue({ label, value }) {
+	const t = useStrings();
+	const [copied, setCopied] = useState(false);
+	return /* @__PURE__ */ jsxs("div", {
+		className: "gfa-copy-value",
+		children: [
+			/* @__PURE__ */ jsx("span", {
+				className: "gfa-copy-label",
+				children: label
+			}),
+			/* @__PURE__ */ jsx("code", { children: value }),
+			/* @__PURE__ */ jsx(Button, {
+				variant: "ghost",
+				onClick: () => {
+					navigator.clipboard?.writeText(value).then(() => setCopied(true), () => {});
+				},
+				children: copied ? t("signInSetup.copied") : t("signInSetup.copy")
+			})
+		]
+	});
+}
+function AppSettings({ host, config, current, writable, contentOnly, publish }) {
 	const t = useStrings();
-	return /* @__PURE__ */ jsx("ul", {
-		className: "gfa-plugin-review",
-		children: reviews.map((review) => {
-			const kinds = NOTE_KINDS.filter((kind) => (review.counts[kind] ?? 0) > 0);
-			return /* @__PURE__ */ jsxs("li", { children: [
-				/* @__PURE__ */ jsxs("p", { children: [
-					/* @__PURE__ */ jsxs("code", { children: [
-						review.name,
+	const { content } = useSiteContent();
+	const [input, setInput] = useState("");
+	const [problem, setProblem] = useState(false);
+	const [busy, setBusy] = useState(false);
+	const [error, setError] = useState();
+	const name = HOST_NAMES[host];
+	const admin = configAdmin(config);
+	const addresses = signInRedirectAddresses(content.settings.url, {
+		admin: admin?.url,
+		broker: configBroker(config)?.url
+	});
+	if (current) return /* @__PURE__ */ jsxs(Fragment$1, { children: [/* @__PURE__ */ jsx(Current, {
+		text: t("signInSetup.app.on", { host: name }),
+		remove: writable ? () => publish(void 0, t("signInSetup.app.removeMessage", { host: name })) : void 0
+	}), addresses.length > 0 && /* @__PURE__ */ jsx("p", {
+		className: "gfa-hint",
+		children: t(host === "gitlab" ? "signInSetup.app.gitlab.keep" : "signInSetup.app.bitbucket.keep", { addresses: addresses.join(", ") })
+	})] });
+	const submit = async () => {
+		const id = input.trim();
+		if (signInClientIdProblem(id)) {
+			setProblem(true);
+			return;
+		}
+		setBusy(true);
+		setError(void 0);
+		try {
+			await publish(id, t("signInSetup.app.message", { host: name }));
+		} catch (caught) {
+			setError(caught);
+		} finally {
+			setBusy(false);
+		}
+	};
+	const title = `Goodfellow ${content.settings.title ?? ""}`.trim().slice(0, 100);
+	let steps;
+	if (host === "gitlab") {
+		const web = (configBackendOption(config, "url") ?? "https://gitlab.com").replace(/\/$/, "");
+		const project = configBackendOption(config, "project") ?? "";
+		const group = project.includes("/") ? project.slice(0, project.lastIndexOf("/")) : void 0;
+		steps = /* @__PURE__ */ jsxs("ol", {
+			className: "gfa-steps",
+			children: [
+				/* @__PURE__ */ jsxs("li", { children: [
+					t("signInSetup.app.gitlab.open"),
+					" ",
+					group && /* @__PURE__ */ jsxs(Fragment$1, { children: [
+						/* @__PURE__ */ jsx("a", {
+							href: `${web}/groups/${group}/-/settings/applications`,
+							target: "_blank",
+							rel: "noopener noreferrer",
+							children: t("signInSetup.app.gitlab.group", { group })
+						}),
 						" ",
-						review.version
+						t("signInSetup.or"),
+						" "
 					] }),
+					/* @__PURE__ */ jsx("a", {
+						href: `${web}/-/user_settings/applications`,
+						target: "_blank",
+						rel: "noopener noreferrer",
+						children: t("signInSetup.app.gitlab.own")
+					})
+				] }),
+				/* @__PURE__ */ jsxs("li", { children: [
+					t("signInSetup.app.gitlab.fill"),
+					/* @__PURE__ */ jsx(CopyValue, {
+						label: t("signInSetup.app.name"),
+						value: title
+					}),
+					/* @__PURE__ */ jsx(CopyValue, {
+						label: t("signInSetup.app.gitlab.redirect"),
+						value: addresses.join("\n")
+					}),
+					/* @__PURE__ */ jsx("p", {
+						className: "gfa-hint",
+						children: t("signInSetup.app.gitlab.settings")
+					})
+				] }),
+				/* @__PURE__ */ jsx("li", { children: t("signInSetup.app.gitlab.copyId") })
+			]
+		});
+	} else {
+		const workspace = (configBackendOption(config, "repo") ?? "").split("/")[0] ?? "";
+		const callback = admin?.checked ? addresses.find((address) => address.startsWith(new URL(admin.url).origin)) : addresses[0];
+		steps = /* @__PURE__ */ jsxs("ol", {
+			className: "gfa-steps",
+			children: [
+				/* @__PURE__ */ jsxs("li", { children: [
+					t("signInSetup.app.bitbucket.open"),
 					" ",
-					review.via.length > 0 && /* @__PURE__ */ jsx("span", {
+					/* @__PURE__ */ jsx("a", {
+						href: `https://bitbucket.org/${workspace}/workspace/settings/api`,
+						target: "_blank",
+						rel: "noopener noreferrer",
+						children: t("signInSetup.app.bitbucket.consumers", { workspace })
+					})
+				] }),
+				/* @__PURE__ */ jsxs("li", { children: [
+					t("signInSetup.app.bitbucket.fill"),
+					/* @__PURE__ */ jsx(CopyValue, {
+						label: t("signInSetup.app.name"),
+						value: title
+					}),
+					callback && /* @__PURE__ */ jsx(CopyValue, {
+						label: t("signInSetup.app.bitbucket.callback"),
+						value: callback
+					}),
+					/* @__PURE__ */ jsx(CopyValue, {
+						label: t("signInSetup.app.bitbucket.permissions"),
+						value: BITBUCKET_PERMISSIONS
+					}),
+					/* @__PURE__ */ jsx("p", {
 						className: "gfa-hint",
-						children: t("plugins.code.via", { via: review.via.join(" → ") })
+						children: t("signInSetup.app.bitbucket.settings")
 					})
 				] }),
-				kinds.length === 0 && !review.unread && /* @__PURE__ */ jsx("p", {
-					className: "gfa-hint",
-					children: t("plugins.code.none")
+				/* @__PURE__ */ jsx("li", { children: t("signInSetup.app.bitbucket.copyId") })
+			]
+		});
+	}
+	return /* @__PURE__ */ jsxs(Fragment$1, { children: [
+		/* @__PURE__ */ jsx("p", { children: t("signInSetup.app.intro", { host: name }) }),
+		addresses.length === 0 ? /* @__PURE__ */ jsx("p", {
+			className: "gfa-notice",
+			children: t("signInSetup.app.noAddress")
+		}) : steps,
+		contentOnly ? /* @__PURE__ */ jsx(Command, { command: "npx goodfellow sign-in client-id <the id>" }) : !writable ? /* @__PURE__ */ jsx("p", { children: t("signInSetup.handWritten", { key: "clientId" }) }) : /* @__PURE__ */ jsxs("form", {
+			className: "gfa-form",
+			onSubmit: (event) => {
+				event.preventDefault();
+				submit();
+			},
+			children: [
+				/* @__PURE__ */ jsx(TextField, {
+					label: t(host === "gitlab" ? "signInSetup.app.gitlab.field" : "signInSetup.app.bitbucket.field"),
+					value: input,
+					error: problem ? t("signInSetup.app.problem", { host: name }) : void 0,
+					onChange: (value) => {
+						setInput(value);
+						setProblem(false);
+					}
 				}),
-				kinds.map((kind) => /* @__PURE__ */ jsxs("details", { children: [/* @__PURE__ */ jsxs("summary", { children: [
-					t(`plugins.note.${kind}`),
-					" (",
-					review.counts[kind],
-					")"
-				] }), /* @__PURE__ */ jsx("ul", { children: review.notes.filter((note) => note.kind === kind).map((note) => /* @__PURE__ */ jsxs("li", { children: [
-					/* @__PURE__ */ jsxs("span", {
-						className: "gfa-hint",
-						children: [note.file, note.line ? `:${note.line}` : ""]
-					}),
-					" ",
-					/* @__PURE__ */ jsx("code", { children: note.excerpt })
-				] }, `${note.file}:${note.line ?? 0}:${note.excerpt}`)) })] }, kind)),
-				review.unread && /* @__PURE__ */ jsx("p", {
+				error !== void 0 && /* @__PURE__ */ jsx(ErrorMessage, {
+					message: t("signInSetup.error"),
+					error
+				}),
+				/* @__PURE__ */ jsx("div", { children: /* @__PURE__ */ jsx(Button, {
+					variant: "primary",
+					type: "submit",
+					disabled: busy || !input.trim(),
+					children: t("signInSetup.app.turnOn", { host: name })
+				}) }),
+				/* @__PURE__ */ jsx("p", {
 					className: "gfa-hint",
-					children: t(`plugins.unread.${review.unread}`)
+					children: t("signInSetup.app.after", { host: name })
 				})
-			] }, `${review.name}@${review.version}`);
+			]
 		})
-	});
+	] });
 }
 //#endregion
 //#region src/security-screen.tsx
@@ -11891,7 +13063,8 @@ function CodeReview({ reviews }) {
 * Site Settings' Security tab: the site's token broker, a sign-in page on an
 * address of its own that keeps editors' sign-in and AI keys and shows the
 * admin panel in a frame. Owners publish its address in the config's `broker`
-* line (`withBrokerConfig()`), or remove it.
+* line (`withBrokerConfig()`), or remove it. Below it, how editors sign in:
+* the sign-in service or OAuth application (`SignInSection`).
 */
 /**
 * Whether editors sign in where the site's own pages could reach their
@@ -11931,6 +13104,14 @@ function SecurityScreen() {
 		if (!result.ok) throw result.error;
 		setConfig(next);
 	}, [config, publish]);
+	const saveConfig = useCallback(async (next, message) => {
+		const result = await publish([{
+			path: CONFIG_FILE$1,
+			content: next
+		}], message, { checks: false });
+		if (!result.ok) throw result.error;
+		setConfig(next);
+	}, [publish]);
 	let body;
 	if (demo) body = /* @__PURE__ */ jsx("p", { children: t("security.demo") });
 	else if (!versions) body = /* @__PURE__ */ jsx("p", { children: t("security.local") });
@@ -11981,27 +13162,36 @@ function SecurityScreen() {
 	}
 	return /* @__PURE__ */ jsxs("div", {
 		className: "gfa-screen",
-		children: [/* @__PURE__ */ jsx("div", {
-			className: "gfa-screen-header",
-			children: /* @__PURE__ */ jsx("h1", { children: t("settings.tab.security") })
-		}), /* @__PURE__ */ jsxs("section", {
-			className: "gfa-form",
-			"aria-labelledby": "gfa-broker",
-			children: [
-				/* @__PURE__ */ jsx("h2", {
-					className: "gfa-section-title",
-					id: "gfa-broker",
-					children: t("security.broker.title")
-				}),
-				/* @__PURE__ */ jsx("p", { children: t("security.broker.intro") }),
-				exposed === "site" && /* @__PURE__ */ jsx("p", {
-					className: "gfa-notice",
-					role: "note",
-					children: t("security.exposed")
-				}),
-				body
-			]
-		})]
+		children: [
+			/* @__PURE__ */ jsx("div", {
+				className: "gfa-screen-header",
+				children: /* @__PURE__ */ jsx("h1", { children: t("settings.tab.security") })
+			}),
+			/* @__PURE__ */ jsxs("section", {
+				className: "gfa-form",
+				"aria-labelledby": "gfa-broker",
+				children: [
+					/* @__PURE__ */ jsx("h2", {
+						className: "gfa-section-title",
+						id: "gfa-broker",
+						children: t("security.broker.title")
+					}),
+					/* @__PURE__ */ jsx("p", { children: t("security.broker.intro") }),
+					exposed === "site" && /* @__PURE__ */ jsx("p", {
+						className: "gfa-notice",
+						role: "note",
+						children: t("security.exposed")
+					}),
+					body
+				]
+			}),
+			!demo && versions && config !== void 0 && account?.role === void 0 && /* @__PURE__ */ jsx(SignInSection, {
+				config,
+				contentOnly,
+				hostName: account?.hostName ?? "",
+				save: saveConfig
+			})
+		]
 	});
 }
 function BrokerForm({ initial, check, host, listed, save }) {
@@ -14955,91 +16145,6 @@ function SettingsScreen({ tab, section }) {
 	});
 }
 //#endregion
-//#region src/site-download.ts
-/**
-* A copy of the site to keep: its content, its media library and the records
-* of the blocks and plugins it installed, as one zip file, read at the
-* revision the admin panel loaded. fflate is loaded only when a copy is made.
-* No React or DOM, so it's tested in Node.
-*/
-/** The folders a copy holds whole. */
-const DOWNLOAD_FOLDERS = [CONTENT_DIR, MEDIA_DIR];
-/** Single files a copy holds where the site has them: which blocks and plugins it installed, to add them again. */
-const DOWNLOAD_RECORDS = [INSTALLED_RECORD_FILE, INSTALLED_PLUGINS_FILE];
-/** How many files are read at once. */
-const READ_AT_ONCE = 6;
-/** Files that are already compressed are stored as they are, which is as small and much quicker. */
-const COMPRESSED = /\.(jpe?g|png|webp|gif|avif|mp4|webm|mov|m4v|mp3|m4a|ogg|oga|wav|pdf|woff2?|zip|gz)$/i;
-/** Every file a copy holds, sorted, from the folders and records the site has. */
-async function downloadPaths(list) {
-	const folders = await Promise.all(DOWNLOAD_FOLDERS.map((dir) => list(dir)));
-	const records = await Promise.all(DOWNLOAD_RECORDS.map(async (path) => {
-		return (await list(path.slice(0, path.lastIndexOf("/")))).includes(path) ? [path] : [];
-	}));
-	return [.../* @__PURE__ */ new Set([...folders.flat(), ...records.flat()])].sort();
-}
-/**
-* The copy's file name: the site's title in plain letters, then the day,
-* `st-anne-parish-2026-11-01.zip`, or `site-…` for a title with none.
-*/
-function downloadName(title, date) {
-	return `${(title ?? "").normalize("NFKD").replace(/[̀-ͯ]/g, "").toLowerCase().replace(/[^a-z0-9]+/g, "-").replace(/^-+|-+$/g, "").slice(0, 60).replace(/-+$/, "") || "site"}-${[
-		date.getFullYear(),
-		date.getMonth() + 1,
-		date.getDate()
-	].map((part) => String(part).padStart(2, "0")).join("-")}.zip`;
-}
-/**
-* Zips the files, read with `read`, in the order given, a few at a time, and
-* returns the zip in pieces, for a `Blob`. A file that's gone since it was
-* listed is left out. Throws what reading throws.
-*/
-async function siteArchive(paths, read, onProgress) {
-	const { Zip, ZipDeflate, ZipPassThrough } = await import("fflate");
-	const chunks = [];
-	let finish = () => {};
-	let fail = () => {};
-	const finished = new Promise((resolve, reject) => {
-		finish = resolve;
-		fail = reject;
-	});
-	const zip = new Zip((error, chunk, final) => {
-		if (error) return fail(error);
-		chunks.push(chunk);
-		if (final) finish();
-	});
-	let done = 0;
-	onProgress?.({
-		done,
-		total: paths.length
-	});
-	try {
-		for (let start = 0; start < paths.length; start += READ_AT_ONCE) {
-			const batch = paths.slice(start, start + READ_AT_ONCE);
-			const files = await Promise.all(batch.map((path) => read(path)));
-			batch.forEach((path, index) => {
-				const bytes = files[index];
-				if (bytes) {
-					const entry = COMPRESSED.test(path) ? new ZipPassThrough(path) : new ZipDeflate(path, { level: 6 });
-					zip.add(entry);
-					entry.push(bytes, true);
-				}
-				done += 1;
-			});
-			onProgress?.({
-				done,
-				total: paths.length
-			});
-		}
-	} catch (error) {
-		zip.terminate();
-		throw error;
-	}
-	zip.end();
-	await finished;
-	return chunks;
-}
-//#endregion
 //#region src/site-history-screen.tsx
 const PER_PAGE = 20;
 /**
@@ -15084,7 +16189,7 @@ function DownloadCopy() {
 			total: 0
 		});
 		try {
-			const chunks = await siteArchive(await downloadPaths(listFiles), readBytes, setProgress);
+			const chunks = await siteCopyArchive(listFiles, readBytes, content, setProgress);
 			const url = URL.createObjectURL(new Blob(chunks, { type: "application/zip" }));
 			const link = document.createElement("a");
 			link.href = url;