@hollware/core 0.9.0 → 0.10.0

package/dist/index.mjs

@@ -55,6 +55,170 @@ var Problems = class {
 	}
 };
 //#endregion
+//#region src/config/values.ts
+/** A value with keys: not null, not an array. */
+function isRecord$3(value) {
+	return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+/** A string as the messages show it: quoted, with what could break a line escaped. */
+function quote$1(text) {
+	return JSON.stringify(text);
+}
+/** Text of an error that someone else wrote, on one line, so that a problem stays one line. */
+function oneLine(text) {
+	return text.replace(/\s+/g, " ").trim();
+}
+/** What a value is, for a message: `"es"`, `42`, `null`, `an array`. */
+function found(value) {
+	if (value === null) return "null";
+	switch (typeof value) {
+		case "string": return quote$1(value);
+		case "number":
+		case "boolean":
+		case "bigint": return String(value);
+		case "function": return "a function";
+		case "symbol": return "a symbol";
+		default: return Array.isArray(value) ? "an array" : "an object";
+	}
+}
+/** `is 42; it must be a string`, or `is missing; …` when the value is not there. */
+function wrongType(value, expected) {
+	return `${value === void 0 ? "is missing" : `is ${found(value)}`}; it must be ${expected}`;
+}
+/** An optional string: `null` when it is absent, and a problem when it is anything else. */
+function readOptionalString(path, value, fix, problems) {
+	if (value === void 0) return null;
+	if (typeof value === "string") return value;
+	problems.add(path, wrongType(value, "a string"), fix);
+	return null;
+}
+const PLAIN_KEY = /^[A-Za-z0-9_-]+$/;
+/** The path of a key inside `parent`: `sites.demo`, or `sites["my site"]` for an odd key. */
+function keyPath(parent, key) {
+	return PLAIN_KEY.test(key) ? `${parent}.${key}` : `${parent}[${quote$1(key)}]`;
+}
+/** The path of an item of an array: `sites.demo.locales[1]`. */
+function itemPath(parent, index) {
+	return `${parent}[${index}]`;
+}
+//#endregion
+//#region src/config/events.ts
+/** The name of a Worker secret or variable: what `wrangler secret put` takes. */
+const BINDING_NAME = /^[A-Z][A-Z0-9_]*$/;
+/**
+* The Worker secrets a definition may not name: Hollware's own (its master secret, its analytics
+* token) and Cloudflare's. A site's definition is written by its owner or an agent with
+* schema:admin, who need not hold the account, so it names only secrets made for its webhooks.
+*/
+const RESERVED_SECRET = /^(HOLLWARE|CLOUDFLARE|CF)_/;
+/**
+* An IndexNow key, which is public by design (search engines fetch it at `/<key>.txt`): the
+* definition holds the key itself, never the name of a Worker secret, so no value of the Worker
+* can be sent to IndexNow (T-69 of docs/security/threat-model.md).
+*/
+const INDEXNOW_KEY = /^[A-Za-z0-9-]{8,128}$/;
+/** A subscriber's name: lowercase words joined by hyphens. */
+const NAME$1 = /^[a-z0-9]+(?:-[a-z0-9]+)*$/;
+/** The public URL of a site: an absolute http or https URL with no path, query or fragment. */
+function readSiteUrl(path, raw, problems) {
+	if (raw === void 0) return null;
+	const fix = "Write the public origin of the site, such as \"https://example.com\".";
+	if (typeof raw !== "string" || !URL.canParse(raw)) {
+		problems.add(path, wrongType(raw, "an absolute URL"), fix);
+		return null;
+	}
+	const url = new URL(raw);
+	if (url.protocol !== "https:" && url.protocol !== "http:" || url.pathname !== "/" || url.search !== "" || url.hash !== "") {
+		problems.add(path, `${quote$1(raw)} is not an origin`, fix);
+		return null;
+	}
+	return url.origin;
+}
+/** The origins of a site's pages that may read its published content from the browser. */
+function readCors(path, raw, problems) {
+	if (raw === void 0) return { origins: [] };
+	if (!isRecord$3(raw) || !Array.isArray(raw["origins"])) {
+		problems.add(path, wrongType(raw, "an object with origins"), "Declare it as { origins: [\"https://example.com\"] }, or remove it.");
+		return { origins: [] };
+	}
+	const origins = [];
+	for (const [index, origin] of raw["origins"].entries()) {
+		const read = readSiteUrl(itemPath(keyPath(path, "origins"), index), origin, problems);
+		if (read !== null && !origins.includes(read)) origins.push(read);
+	}
+	return { origins };
+}
+function readBindingName(path, raw, problems) {
+	if (typeof raw === "string" && BINDING_NAME.test(raw) && RESERVED_SECRET.test(raw)) {
+		problems.add(path, `names ${quote$1(raw)}, a secret of Hollware or of Cloudflare, which no webhook may use`, "Leave the secret out, and Hollware makes one for the webhook (make_webhook_secret).");
+		return null;
+	}
+	if (typeof raw === "string" && BINDING_NAME.test(raw)) return raw;
+	problems.add(path, wrongType(raw, "the name of a Worker secret"), "Name the secret that holds the value, such as \"WEBHOOK_SECRET\", and set it with wrangler secret put.");
+	return null;
+}
+function readWebhook(path, raw, problems) {
+	if (!isRecord$3(raw)) {
+		problems.add(path, wrongType(raw, "a webhook"), "Declare it as { name: \"newsletter\", url: \"https://…\", secret: \"WEBHOOK_SECRET\" }.");
+		return null;
+	}
+	const name = raw["name"];
+	if (typeof name !== "string" || !NAME$1.test(name)) problems.add(keyPath(path, "name"), wrongType(name, "a name"), "Name it with lowercase words joined by hyphens, such as \"newsletter\".");
+	const url = raw["url"];
+	const urlOk = typeof url === "string" && URL.canParse(url) && new URL(url).protocol === "https:";
+	if (!urlOk) problems.add(keyPath(path, "url"), wrongType(url, "an https URL"), "Give the https URL that receives the events.");
+	const secret = raw["secret"] === void 0 ? null : readBindingName(keyPath(path, "secret"), raw["secret"], problems);
+	if (typeof name !== "string" || !NAME$1.test(name) || !urlOk) return null;
+	if (raw["secret"] !== void 0 && secret === null) return null;
+	return {
+		name,
+		url: String(url),
+		secret
+	};
+}
+/** Who hears about publications (ADR-025): webhooks, and IndexNow when the site has a URL. */
+function readEvents(path, raw, siteUrl, problems) {
+	const events = {
+		webhooks: [],
+		indexNow: null
+	};
+	if (raw === void 0) return events;
+	if (!isRecord$3(raw)) {
+		problems.add(path, wrongType(raw, "an object"), "Declare { webhooks: [ … ], indexNow: { … } }.");
+		return events;
+	}
+	const webhooks = raw["webhooks"];
+	if (webhooks !== void 0) {
+		if (!Array.isArray(webhooks)) problems.add(keyPath(path, "webhooks"), wrongType(webhooks, "a list"), "List the webhooks.");
+		else {
+			const seen = /* @__PURE__ */ new Set();
+			webhooks.forEach((item, index) => {
+				const webhook = readWebhook(itemPath(keyPath(path, "webhooks"), index), item, problems);
+				if (webhook === null) return;
+				if (seen.has(webhook.name)) {
+					problems.add(itemPath(keyPath(path, "webhooks"), index), `repeats the name ${quote$1(webhook.name)}`, "Give each webhook a name of its own.");
+					return;
+				}
+				seen.add(webhook.name);
+				events.webhooks.push(webhook);
+			});
+		}
+	}
+	const indexNow = raw["indexNow"];
+	if (indexNow !== void 0) {
+		const indexPath = keyPath(path, "indexNow");
+		if (!isRecord$3(indexNow)) problems.add(indexPath, wrongType(indexNow, "an object"), "Declare { key: \"<your IndexNow key>\" }.");
+		else {
+			const raw = indexNow["key"];
+			const key = typeof raw === "string" && INDEXNOW_KEY.test(raw) ? raw : null;
+			if (key === null) problems.add(keyPath(indexPath, "key"), wrongType(raw, "an IndexNow key: 8 to 128 letters, digits or hyphens"), "Put the key itself, the one your site serves at /<key>.txt, not the name of a secret.");
+			if (siteUrl === null) problems.add(indexPath, "needs the URL of the site", "Set url on the site: IndexNow is told the public URLs of the entries.");
+			else if (key !== null) events.indexNow = { key };
+		}
+	}
+	return events;
+}
+//#endregion
 //#region src/config/constants.ts
 /** The largest Markdown file a collection accepts when its config does not say, 512 KiB. */
 const DEFAULT_MAX_MARKDOWN_BYTES = 524288;
@@ -70,7 +234,7 @@ const MAX_MARKDOWN_BYTES_CEILING = 786432;
 * letter, at most 63 characters. A component name is what Markdown writes after the colons
 * (`::callout`). A site key has its own rule (`site-key.ts`).
 */
-const NAME$1 = /^[a-z][a-z0-9-]{0,62}$/;
+const NAME = /^[a-z][a-z0-9-]{0,62}$/;
 /** A language tag: a language, then an optional script and region: `es`, `pt-BR`, `zh-Hant-TW`. */
 const LOCALE_TAG = /^[a-z]{2,3}(?:-[A-Z][a-z]{3})?(?:-(?:[A-Z]{2}|[0-9]{3}))?$/;
 /** The id of a contract: lowercase words joined by single hyphens. */
@@ -125,7 +289,7 @@ function runtimeOf(contractId, context) {
 */
 /** The most characters of the entry's own text that a message repeats. */
 const MAX_ECHO_LENGTH = 80;
-function isRecord$3(value) {
+function isRecord$2(value) {
 	return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 /** Orders two texts by UTF-16 code units: the same in every runtime, unlike `localeCompare`. */
@@ -140,7 +304,7 @@ function clip(text, max = MAX_ECHO_LENGTH) {
 	return `${last >= 55296 && last <= 56319 ? head.slice(0, -1) : head}…`;
 }
 /** Text from the entry as a message shows it: clipped, in JSON quotes, control characters escaped. */
-function quote$1(text) {
+function quote(text) {
 	return JSON.stringify(clip(text));
 }
 /** A JSON Pointer (RFC 6901) from its segments: `['tags', '0']` is `/tags/0`, none is the root. */
@@ -178,11 +342,11 @@ function fragmentAt(schema, segments) {
 	let node = schema;
 	for (const segment of segments) {
 		const properties = node.properties;
-		if (isRecord$3(properties) && Object.hasOwn(properties, segment)) {
+		if (isRecord$2(properties) && Object.hasOwn(properties, segment)) {
 			const next = properties[segment];
-			if (!isRecord$3(next)) return void 0;
+			if (!isRecord$2(next)) return void 0;
 			node = next;
-		} else if (/^\d+$/.test(segment) && isRecord$3(node.items)) node = node.items;
+		} else if (/^\d+$/.test(segment) && isRecord$2(node.items)) node = node.items;
 		else return;
 	}
 	return node;
@@ -190,7 +354,7 @@ function fragmentAt(schema, segments) {
 function valueAt(input, segments) {
 	let node = input;
 	for (const segment of segments) if (Array.isArray(node) && /^\d+$/.test(segment)) node = node[Number(segment)];
-	else if (isRecord$3(node) && Object.hasOwn(node, segment)) node = node[segment];
+	else if (isRecord$2(node) && Object.hasOwn(node, segment)) node = node[segment];
 	else return void 0;
 	return node;
 }
@@ -226,11 +390,11 @@ function numberExpectation(type, schema) {
 }
 function arrayExpectation(schema) {
 	const size = range(schema.minItems, schema.maxItems, "item");
-	const items = isRecord$3(schema.items) ? expectation(schema.items) : void 0;
+	const items = isRecord$2(schema.items) ? expectation(schema.items) : void 0;
 	return `an array${size === void 0 ? "" : ` of ${size}`}${items === void 0 ? "" : `, each ${items}`}`;
 }
 function objectExpectation(schema) {
-	const keys = isRecord$3(schema.properties) ? Object.keys(schema.properties) : [];
+	const keys = isRecord$2(schema.properties) ? Object.keys(schema.properties) : [];
 	return keys.length === 0 ? "an object" : `an object with the keys ${keys.join(", ")}`;
 }
 function typeExpectation(type, schema) {
@@ -253,26 +417,26 @@ function expectation(schema) {
 	if ("const" in schema) return `exactly ${JSON.stringify(schema.const)}`;
 	if (Array.isArray(schema.enum)) return `one of ${listValues(schema.enum)}`;
 	const alternatives = schema.anyOf ?? schema.oneOf;
-	const parts = Array.isArray(alternatives) ? alternatives.map((option) => isRecord$3(option) ? expectation(option) : void 0) : (Array.isArray(schema.type) ? schema.type : [schema.type]).map((type) => typeExpectation(type, schema));
+	const parts = Array.isArray(alternatives) ? alternatives.map((option) => isRecord$2(option) ? expectation(option) : void 0) : (Array.isArray(schema.type) ? schema.type : [schema.type]).map((type) => typeExpectation(type, schema));
 	return parts.every((part) => part !== void 0) ? parts.join(" or ") : void 0;
 }
 /** The keys of `value` that an object schema closed to other keys does not list. */
 function unknownKeys(fragment, value) {
 	const { additionalProperties, properties } = fragment;
-	if (additionalProperties !== false || !isRecord$3(properties) || !isRecord$3(value)) return [];
+	if (additionalProperties !== false || !isRecord$2(properties) || !isRecord$2(value)) return [];
 	return Object.keys(value).filter((key) => !Object.hasOwn(properties, key));
 }
 /** The fix for one issue: imperative, naming the field and what the schema accepts there. */
 function fixForIssue({ subject, schema, input, segments, message }) {
-	const target = segments.length === 0 ? subject.container : `the ${subject.noun} ${quote$1(label(segments))}`;
+	const target = segments.length === 0 ? subject.container : `the ${subject.noun} ${quote(label(segments))}`;
 	const fragment = schema === null ? void 0 : fragmentAt(schema, segments);
 	if (fragment !== void 0) {
 		const unknown = unknownKeys(fragment, valueAt(input, segments));
 		if (unknown.length > 0) {
-			const allowed = isRecord$3(fragment.properties) ? Object.keys(fragment.properties) : [];
+			const allowed = isRecord$2(fragment.properties) ? Object.keys(fragment.properties) : [];
 			const nouns = unknown.length === 1 ? subject.noun : `${subject.noun}s`;
 			const where = allowed.length === 0 ? `no ${subject.noun}s are allowed there` : `the ${subject.noun}s allowed there are: ${allowed.join(", ")}`;
-			return `Remove the ${nouns} ${unknown.map((key) => quote$1(key)).join(", ")} from ${target}; ${where}.`;
+			return `Remove the ${nouns} ${unknown.map((key) => quote(key)).join(", ")} from ${target}; ${where}.`;
 		}
 	}
 	const expected = fragment === void 0 ? void 0 : expectation(fragment);
@@ -354,15 +518,15 @@ const COMPONENTS = registerBuiltIn({
 			const result = await definition.props["~standard"].validate(use.props);
 			if (!result.issues) continue;
 			const subject = {
-				container: `the component ${quote$1(use.name)}`,
+				container: `the component ${quote(use.name)}`,
 				noun: "prop"
 			};
 			for (const issue of result.issues) {
 				const segments = issueSegments(issue);
-				const which = segments.length === 0 ? "The props" : `The prop ${quote$1(label(segments))}`;
+				const which = segments.length === 0 ? "The props" : `The prop ${quote(label(segments))}`;
 				findings.push({
 					path: "/body",
-					message: `${which} of the component ${quote$1(use.name)} ${segments.length === 0 ? "are" : "is"} invalid: ${issue.message}`,
+					message: `${which} of the component ${quote(use.name)} ${segments.length === 0 ? "are" : "is"} invalid: ${issue.message}`,
 					fix: fixForIssue({
 						subject,
 						schema: schemas.get(use.name) ?? null,
@@ -429,16 +593,16 @@ const RAW_HTML = markerContract("raw-html", "The body holds Markdown and the com
 const UNKNOWN_COMPONENT = markerContract("unknown-component", "The body uses only the components that the collection declares.", (marker, collection) => {
 	const components = allowedComponents(collection);
 	return {
-		message: `The component ${quote$1(marker.name)} does not exist in this collection.`,
+		message: `The component ${quote(marker.name)} does not exist in this collection.`,
 		fix: components.length === 0 ? "This collection allows no components: remove it and use Markdown." : `Use one of the allowed components: ${components.join(", ")}.`
 	};
 });
 const DISALLOWED_ATTRIBUTE = markerContract("disallowed-attribute", "Links, images and code carry only the attributes Markdown produces, and a component only the props its schema declares.", (marker) => ({
-	message: `The attribute ${quote$1(marker.name)} is not allowed.`,
-	fix: `Remove the attribute ${quote$1(marker.name)}. Links keep href and title, images keep src, alt, title, width and height, and a component takes only the props its schema declares.`
+	message: `The attribute ${quote(marker.name)} is not allowed.`,
+	fix: `Remove the attribute ${quote(marker.name)}. Links keep href and title, images keep src, alt, title, width and height, and a component takes only the props its schema declares.`
 }));
 const UNSAFE_URL = markerContract("unsafe-url", "Links and images use an https:, http: or mailto: URL, a path of the site or an anchor.", (marker) => ({
-	message: `The URL ${quote$1(marker.name)} is not allowed.`,
+	message: `The URL ${quote(marker.name)} is not allowed.`,
 	fix: "Use an https: or http: URL, a mailto: address, a path of this site that starts with /, or an anchor that starts with #."
 }));
 //#endregion
@@ -622,7 +786,7 @@ function chunksOf(entry) {
 //#endregion
 //#region src/contracts/rules.ts
 function present(frontmatter, field) {
-	return isRecord$3(frontmatter) ? frontmatter[field] : void 0;
+	return isRecord$2(frontmatter) ? frontmatter[field] : void 0;
 }
 const GRAPHEMES = new Intl.Segmenter(void 0, { granularity: "grapheme" });
 /** The length of a value as a reader counts it: characters of a text (an emoji is one), items of a list. */
@@ -633,11 +797,11 @@ function lengthOf(value) {
 /** A text, or a list, of a field has between `min` and `max` characters or items. */
 function fieldLength(params, options = {}) {
 	const bounds = [params.min === void 0 ? null : `at least ${params.min}`, params.max === void 0 ? null : `at most ${params.max}`].filter((bound) => bound !== null);
-	const unless = params.unless === void 0 ? "" : `, unless ${quote$1(params.unless)} is given`;
+	const unless = params.unless === void 0 ? "" : `, unless ${quote(params.unless)} is given`;
 	return registerBuiltIn({
 		id: options.id ?? "field-length",
 		severity: options.severity ?? "error",
-		description: `${quote$1(params.field)} has ${bounds.join(" and ")} characters or items${unless}.`,
+		description: `${quote(params.field)} has ${bounds.join(" and ")} characters or items${unless}.`,
 		rule: {
 			name: "field-length",
 			params: { ...params }
@@ -651,13 +815,13 @@ function fieldLength(params, options = {}) {
 			const path = `/frontmatter/${params.field}`;
 			if (params.max !== void 0 && length > params.max) return [{
 				path,
-				message: `${quote$1(params.field)} has ${count(length, unit)}; the most is ${params.max}.`,
-				fix: `Shorten ${quote$1(params.field)} to ${count(params.max, unit)} or fewer${params.unless === void 0 ? "" : `, or add ${quote$1(params.unless)}`}.`
+				message: `${quote(params.field)} has ${count(length, unit)}; the most is ${params.max}.`,
+				fix: `Shorten ${quote(params.field)} to ${count(params.max, unit)} or fewer${params.unless === void 0 ? "" : `, or add ${quote(params.unless)}`}.`
 			}];
 			if (params.min !== void 0 && length < params.min) return [{
 				path,
-				message: `${quote$1(params.field)} has ${count(length, unit)}; the least is ${params.min}.`,
-				fix: `Lengthen ${quote$1(params.field)} to ${count(params.min, unit)} or more.`
+				message: `${quote(params.field)} has ${count(length, unit)}; the least is ${params.min}.`,
+				fix: `Lengthen ${quote(params.field)} to ${count(params.min, unit)} or more.`
 			}];
 			return [];
 		}
@@ -669,7 +833,7 @@ function fieldPattern(params, options = {}) {
 	return registerBuiltIn({
 		id: options.id ?? "field-pattern",
 		severity: options.severity ?? "error",
-		description: `${quote$1(params.field)} is ${params.description}.`,
+		description: `${quote(params.field)} is ${params.description}.`,
 		rule: {
 			name: "field-pattern",
 			params: { ...params }
@@ -679,8 +843,8 @@ function fieldPattern(params, options = {}) {
 			if (typeof value !== "string" || pattern.test(value)) return [];
 			return [{
 				path: `/frontmatter/${params.field}`,
-				message: `${quote$1(params.field)} is not ${params.description}.`,
-				fix: `Write ${quote$1(params.field)} as ${params.description}.`
+				message: `${quote(params.field)} is not ${params.description}.`,
+				fix: `Write ${quote(params.field)} as ${params.description}.`
 			}];
 		}
 	}, { readsFrontmatter: true });
@@ -692,15 +856,15 @@ function requiredToPublish(params, options = {}) {
 		id: options.id ?? "required-to-publish",
 		severity: options.severity ?? "error",
 		phases: ["publish"],
-		description: `To publish, ${params.fields.map(quote$1).join(", ")} must have a value.`,
+		description: `To publish, ${params.fields.map(quote).join(", ")} must have a value.`,
 		rule: {
 			name: "required-to-publish",
 			params: { fields: [...params.fields] }
 		},
 		check: ({ frontmatter }) => params.fields.filter((field) => empty(present(frontmatter, field))).map((field) => ({
 			path: `/frontmatter/${field}`,
-			message: `${quote$1(field)} is empty, and the entry cannot be published without it.`,
-			fix: `Give ${quote$1(field)} a value, then publish.`
+			message: `${quote(field)} is empty, and the entry cannot be published without it.`,
+			fix: `Give ${quote(field)} a value, then publish.`
 		}))
 	}, { readsFrontmatter: true });
 }
@@ -716,7 +880,7 @@ function bannedWords(params, options = {}) {
 	return registerBuiltIn({
 		id: options.id ?? "banned-words",
 		severity: options.severity ?? "error",
-		description: `None of these words: ${words.map(quote$1).join(", ")}${because}.`,
+		description: `None of these words: ${words.map(quote).join(", ")}${because}.`,
 		rule: {
 			name: "banned-words",
 			params: {
@@ -727,19 +891,19 @@ function bannedWords(params, options = {}) {
 		check: (context) => {
 			if (pattern === null) return [];
 			const findings = [];
-			const frontmatter = isRecord$3(context.frontmatter) ? context.frontmatter : {};
+			const frontmatter = isRecord$2(context.frontmatter) ? context.frontmatter : {};
 			for (const [field, value] of Object.entries(frontmatter)) {
 				if (typeof value !== "string") continue;
 				for (const word of found(value)) findings.push({
 					path: `/frontmatter/${field}`,
-					message: `${quote$1(field)} uses ${quote$1(word)}.`,
-					fix: `Write ${quote$1(field)} without ${quote$1(word)}${because}.`
+					message: `${quote(field)} uses ${quote(word)}.`,
+					fix: `Write ${quote(field)} without ${quote(word)}${because}.`
 				});
 			}
 			for (const word of found(documentText(context.markdown.document))) findings.push({
 				path: "/body",
-				message: `The body uses ${quote$1(word)}.`,
-				fix: `Rewrite the body without ${quote$1(word)}${because}.`
+				message: `The body uses ${quote(word)}.`,
+				fix: `Rewrite the body without ${quote(word)}${because}.`
 			});
 			return findings;
 		}
@@ -768,7 +932,7 @@ function translationPair(options = {}) {
 			const field = collection.translationGroupField;
 			if (field === null) return [];
 			const path = `/frontmatter${pointer([field])}`;
-			const group = isRecord$3(context.frontmatter) ? context.frontmatter[field] : void 0;
+			const group = isRecord$2(context.frontmatter) ? context.frontmatter[field] : void 0;
 			if (typeof group !== "string" || group === "") return [{
 				path,
 				message: `The entry has no translation group: its frontmatter field ${field} is empty.`,
@@ -778,8 +942,8 @@ function translationPair(options = {}) {
 			const present = /* @__PURE__ */ new Set([context.locale, ...found.map((entry) => entry.locale)]);
 			return site.locales.filter((locale) => !present.has(locale)).map((locale) => ({
 				path,
-				message: `The ${locale} version of the translation group ${quote$1(group)} does not exist.`,
-				fix: `Create the entry in ${locale} with ${field}: ${quote$1(group)} in its frontmatter before publishing.`
+				message: `The ${locale} version of the translation group ${quote(group)} does not exist.`,
+				fix: `Create the entry in ${locale} with ${field}: ${quote(group)} in its frontmatter before publishing.`
 			}));
 		}
 	}, { readsFrontmatter: true });
@@ -826,7 +990,7 @@ function internalLinksResolve(options = {}) {
 				const entry = `the entry ${clip(`${target.collection}/${target.locale}/${target.slug}`)}`;
 				findings.push({
 					path: "/body",
-					message: found === null ? `The link ${quote$1(link.href)} points at ${entry}, which does not exist.` : `The link ${quote$1(link.href)} points at ${entry}, which is not published yet (${found.status}).`,
+					message: found === null ? `The link ${quote(link.href)} points at ${entry}, which does not exist.` : `The link ${quote(link.href)} points at ${entry}, which is not published yet (${found.status}).`,
 					fix: found === null ? `Create and publish ${entry}, point the link at an entry that is published, or remove the link.` : `Publish ${entry} first, point the link at an entry that is published, or remove the link.`,
 					line: link.line
 				});
@@ -859,7 +1023,7 @@ function imagesHaveAlt(options = {}) {
 		description: "Every image has alt text that describes it.",
 		check: (context) => context.markdown.extracted.images.filter((image) => image.alt.trim() === "").map((image) => ({
 			path: "/body",
-			message: `The image ${quote$1(image.src)} has no alt text.`,
+			message: `The image ${quote(image.src)} has no alt text.`,
 			fix: `Add alt text that describes the image, as in ![a short description](${clip(image.src)}).`,
 			line: image.line
 		}))
@@ -1026,7 +1190,7 @@ function toViolations(contract, findings) {
 		severity: contract.severity,
 		path: finding.path,
 		message: finding.message,
-		fix: finding.fix.trim() === "" ? `Change the entry so that the rule ${quote$1(contract.id)} passes: ${contract.description}` : finding.fix,
+		fix: finding.fix.trim() === "" ? `Change the entry so that the rule ${quote(contract.id)} passes: ${contract.description}` : finding.fix,
 		...finding.line === void 0 ? {} : { line: finding.line }
 	}));
 }
@@ -1043,8 +1207,8 @@ function thrown(contract, error) {
 		contract: contract.id,
 		severity: "error",
 		path: "",
-		message: `The contract ${quote$1(contract.id)} failed with an error while it checked this entry: ${clip(describeError(error), 200)}`,
-		fix: `This is a problem in the config of the site, not in the entry: report it to whoever maintains the config, naming the contract ${quote$1(contract.id)}.`
+		message: `The contract ${quote(contract.id)} failed with an error while it checked this entry: ${clip(describeError(error), 200)}`,
+		fix: `This is a problem in the config of the site, not in the entry: report it to whoever maintains the config, naming the contract ${quote(contract.id)}.`
 	};
 }
 async function settle(contract, context) {
@@ -1169,57 +1333,10 @@ function uniqueTranslationViolation(holder, field) {
 		severity: "error",
 		path: `/frontmatter${pointer([field])}`,
 		message: `Another entry of this collection and locale, ${holder}, already belongs to this translation group.`,
-		fix: `Give ${quote$1(field)} another value, or change the entry ${holder} with update_draft: a translation group holds one entry per locale.`
+		fix: `Give ${quote(field)} another value, or change the entry ${holder} with update_draft: a translation group holds one entry per locale.`
 	};
 }
 //#endregion
-//#region src/config/values.ts
-/** A value with keys: not null, not an array. */
-function isRecord$2(value) {
-	return typeof value === "object" && value !== null && !Array.isArray(value);
-}
-/** A string as the messages show it: quoted, with what could break a line escaped. */
-function quote(text) {
-	return JSON.stringify(text);
-}
-/** Text of an error that someone else wrote, on one line, so that a problem stays one line. */
-function oneLine(text) {
-	return text.replace(/\s+/g, " ").trim();
-}
-/** What a value is, for a message: `"es"`, `42`, `null`, `an array`. */
-function found(value) {
-	if (value === null) return "null";
-	switch (typeof value) {
-		case "string": return quote(value);
-		case "number":
-		case "boolean":
-		case "bigint": return String(value);
-		case "function": return "a function";
-		case "symbol": return "a symbol";
-		default: return Array.isArray(value) ? "an array" : "an object";
-	}
-}
-/** `is 42; it must be a string`, or `is missing; …` when the value is not there. */
-function wrongType(value, expected) {
-	return `${value === void 0 ? "is missing" : `is ${found(value)}`}; it must be ${expected}`;
-}
-/** An optional string: `null` when it is absent, and a problem when it is anything else. */
-function readOptionalString(path, value, fix, problems) {
-	if (value === void 0) return null;
-	if (typeof value === "string") return value;
-	problems.add(path, wrongType(value, "a string"), fix);
-	return null;
-}
-const PLAIN_KEY = /^[A-Za-z0-9_-]+$/;
-/** The path of a key inside `parent`: `sites.demo`, or `sites["my site"]` for an odd key. */
-function keyPath(parent, key) {
-	return PLAIN_KEY.test(key) ? `${parent}.${key}` : `${parent}[${quote(key)}]`;
-}
-/** The path of an item of an array: `sites.demo.locales[1]`. */
-function itemPath(parent, index) {
-	return `${parent}[${index}]`;
-}
-//#endregion
 //#region src/config/json-schema.ts
 /**
 * JSON Schema as the config uses it: what agents see of a schema, and what the checks read of it
@@ -1233,7 +1350,7 @@ const TARGET = "draft-2020-12";
 */
 function toJsonSchema$1(schema) {
 	const converted = schema["~standard"].jsonSchema.input({ target: TARGET });
-	if (!isRecord$2(converted)) throw new TypeError(`the library ${wrongType(converted, "a JSON Schema object")}`);
+	if (!isRecord$3(converted)) throw new TypeError(`the library ${wrongType(converted, "a JSON Schema object")}`);
 	return JSON.parse(JSON.stringify(converted));
 }
 /** Reference chains longer than this are cycles. */
@@ -1245,7 +1362,7 @@ function pointTo(root, ref) {
 	let node = root;
 	for (const part of ref.slice(2).split("/")) {
 		const key = part.replaceAll("~1", "/").replaceAll("~0", "~");
-		if (!isRecord$2(node) || !Object.hasOwn(node, key)) return void 0;
+		if (!isRecord$3(node) || !Object.hasOwn(node, key)) return void 0;
 		node = node[key];
 	}
 	return node;
@@ -1257,7 +1374,7 @@ function pointTo(root, ref) {
 function resolveSchema(root, schema) {
 	let node = schema;
 	for (let hop = 0; hop <= MAX_REF_HOPS; hop += 1) {
-		if (!isRecord$2(node)) return null;
+		if (!isRecord$3(node)) return null;
 		const ref = node["$ref"];
 		if (typeof ref !== "string") return node;
 		node = pointTo(root, ref);
@@ -1374,14 +1491,14 @@ function standardProps(value) {
 /** A Standard Schema that also converts to JSON Schema, which is what a collection needs. */
 function isDescribedSchema(value) {
 	const standard = standardProps(value);
-	if (!isRecord$2(standard) || typeof standard["validate"] !== "function") return false;
+	if (!isRecord$3(standard) || typeof standard["validate"] !== "function") return false;
 	const converter = standard["jsonSchema"];
-	return isRecord$2(converter) && typeof converter["input"] === "function";
+	return isRecord$3(converter) && typeof converter["input"] === "function";
 }
 /** What `isDescribedSchema` found missing, for the message. */
 function whyNotDescribed(value) {
 	const standard = standardProps(value);
-	if (!isRecord$2(standard)) return wrongType(value, "a Standard Schema with JSON Schema");
+	if (!isRecord$3(standard)) return wrongType(value, "a Standard Schema with JSON Schema");
 	if (typeof standard["validate"] !== "function") return "has no ~standard.validate function, so it is no Standard Schema";
 	return "has no ~standard.jsonSchema.input function, so describe_site could not show it to agents";
 }
@@ -1429,12 +1546,12 @@ const SLUG_PLACEHOLDER = /:slug(?![A-Za-z0-9_])/g;
 function isRoutePattern(path, route, problems) {
 	let valid = true;
 	if (!route.startsWith("/")) {
-		problems.add(path, `${quote(route)} does not start with "/"`, "Write the path from the root of the site, such as \"/blog/:slug/\".");
+		problems.add(path, `${quote$1(route)} does not start with "/"`, "Write the path from the root of the site, such as \"/blog/:slug/\".");
 		valid = false;
 	}
 	const slugs = [...route.matchAll(SLUG_PLACEHOLDER)].length;
 	if (slugs !== 1) {
-		problems.add(path, slugs === 0 ? `${quote(route)} has no :slug` : `${quote(route)} has :slug ${slugs} times`, "Use :slug exactly once, where the slug of the entry goes, such as \"/blog/:slug/\".");
+		problems.add(path, slugs === 0 ? `${quote$1(route)} has no :slug` : `${quote$1(route)} has :slug ${slugs} times`, "Use :slug exactly once, where the slug of the entry goes, such as \"/blog/:slug/\".");
 		valid = false;
 	}
 	return valid;
@@ -1447,11 +1564,11 @@ function claimRoute(route, path, site, problems) {
 		site.routes.set(pattern, path);
 		return;
 	}
-	problems.add(path, `${quote(route)} is the same pattern as the route at ${owner}`, "Give every route of the site its own path: internal links are matched against them.");
+	problems.add(path, `${quote$1(route)} is the same pattern as the route at ${owner}`, "Give every route of the site its own path: internal links are matched against them.");
 }
 /** The route of each locale, in the order of the site's locales. */
 function readRoutes(path, raw, collection, site, problems) {
-	if (!isRecord$2(raw)) {
+	if (!isRecord$3(raw)) {
 		problems.add(path, wrongType(raw, "an object with one path per locale"), ROUTES_FIX);
 		return {};
 	}
@@ -1459,12 +1576,12 @@ function readRoutes(path, raw, collection, site, problems) {
 		const routePath = keyPath(path, locale);
 		const route = raw[locale];
 		const known = !site.localesOk || site.locales.includes(locale);
-		if (!known) problems.add(routePath, `is a route for ${quote(locale)}, which is not a locale of the site (${site.locales.join(", ")})`, `Remove it, or add ${quote(locale)} to the locales of the site.`);
+		if (!known) problems.add(routePath, `is a route for ${quote$1(locale)}, which is not a locale of the site (${site.locales.join(", ")})`, `Remove it, or add ${quote$1(locale)} to the locales of the site.`);
 		if (typeof route !== "string") problems.add(routePath, wrongType(route, "a path such as \"/blog/:slug/\""), ROUTES_FIX);
 		else if (isRoutePattern(routePath, route, problems) && known) claimRoute(route, routePath, site, problems);
 	}
 	if (site.localesOk) {
-		for (const locale of site.locales) if (!Object.hasOwn(raw, locale)) problems.add(path, `has no route for the locale ${quote(locale)}`, `Add ${keyPath("routes", locale)}, a path such as ${quote(`/${locale}/${collection}/:slug/`)}.`);
+		for (const locale of site.locales) if (!Object.hasOwn(raw, locale)) problems.add(path, `has no route for the locale ${quote$1(locale)}`, `Add ${keyPath("routes", locale)}, a path such as ${quote$1(`/${locale}/${collection}/:slug/`)}.`);
 	}
 	const routes = {};
 	for (const locale of site.locales) {
@@ -1476,12 +1593,12 @@ function readRoutes(path, raw, collection, site, problems) {
 const GROUP_BY = {
 	mustBe: "a string",
 	accepts: isStringSchema,
-	fix: (field) => `Declare ${quote(field)} as z.string() in the schema, or name another field.`
+	fix: (field) => `Declare ${quote$1(field)} as z.string() in the schema, or name another field.`
 };
 const TAGS = {
 	mustBe: "an array of strings",
 	accepts: isStringArraySchema,
-	fix: (field) => `Declare ${quote(field)} as z.array(z.string()) in the schema, or name another field.`
+	fix: (field) => `Declare ${quote$1(field)} as z.array(z.string()) in the schema, or name another field.`
 };
 /**
 * Listings sort by this field as text, which is chronological only for ISO 8601 dates. A string
@@ -1490,7 +1607,7 @@ const TAGS = {
 const SORT_BY = {
 	mustBe: "a string with the \"date\" or \"date-time\" format",
 	accepts: isDateSchema,
-	fix: (field) => `Declare ${quote(field)} as z.iso.date() or z.iso.datetime() in the schema, or name another field.`
+	fix: (field) => `Declare ${quote$1(field)} as z.iso.date() or z.iso.datetime() in the schema, or name another field.`
 };
 /** The name of a field of the frontmatter, checked against the schema when there is one. */
 function readField(path, raw, schema, kind, problems) {
@@ -1499,16 +1616,16 @@ function readField(path, raw, schema, kind, problems) {
 		return null;
 	}
 	if (schema === null) return raw;
-	const properties = isRecord$2(schema.object["properties"]) ? schema.object["properties"] : {};
+	const properties = isRecord$3(schema.object["properties"]) ? schema.object["properties"] : {};
 	if (!Object.hasOwn(properties, raw)) {
 		const names = Object.keys(properties);
-		problems.add(path, `${quote(raw)} is not a property of the schema${names.length === 0 ? ", which declares none" : ` (its properties are ${names.map(quote).join(", ")})`}`, `Name a field that the schema declares, or add ${quote(raw)} to the schema.`);
-	} else if (!kind.accepts(schema.document, properties[raw])) problems.add(path, `${quote(raw)} is declared as ${describeShape(schema.document, properties[raw])}, but it must be ${kind.mustBe}`, kind.fix(raw));
+		problems.add(path, `${quote$1(raw)} is not a property of the schema${names.length === 0 ? ", which declares none" : ` (its properties are ${names.map(quote$1).join(", ")})`}`, `Name a field that the schema declares, or add ${quote$1(raw)} to the schema.`);
+	} else if (!kind.accepts(schema.document, properties[raw])) problems.add(path, `${quote$1(raw)} is declared as ${describeShape(schema.document, properties[raw])}, but it must be ${kind.mustBe}`, kind.fix(raw));
 	return raw;
 }
 function readTranslations(path, raw, schema, problems) {
 	if (raw === void 0) return null;
-	if (!isRecord$2(raw)) {
+	if (!isRecord$3(raw)) {
 		problems.add(path, wrongType(raw, "an object like { groupBy: \"translationGroup\" }"), "Set it to { groupBy: \"<field>\" }, the field of the frontmatter that holds the key the translations of an entry share, or remove it.");
 		return null;
 	}
@@ -1516,8 +1633,8 @@ function readTranslations(path, raw, schema, problems) {
 }
 const COMPONENT_FIX = "Declare it with defineComponent({ props: z.strictObject({ … }) }).";
 function readComponent(path, name, raw, problems) {
-	if (!NAME$1.test(name)) problems.add(path, `${quote(name)} is not a valid component name`, nameFix("callout"));
-	if (!isRecord$2(raw)) {
+	if (!NAME.test(name)) problems.add(path, `${quote$1(name)} is not a valid component name`, nameFix("callout"));
+	if (!isRecord$3(raw)) {
 		problems.add(path, wrongType(raw, "a component"), COMPONENT_FIX);
 		return null;
 	}
@@ -1535,7 +1652,7 @@ function readComponent(path, name, raw, problems) {
 function readComponents(path, raw, problems) {
 	const components = /* @__PURE__ */ new Map();
 	if (raw === void 0) return components;
-	if (!isRecord$2(raw)) {
+	if (!isRecord$3(raw)) {
 		problems.add(path, wrongType(raw, "an object that maps each component name to its definition"), COMPONENT_FIX);
 		return components;
 	}
@@ -1567,7 +1684,7 @@ function checkPhases(path, raw, problems) {
 	for (let index = 0; index < phases.length; index += 1) {
 		const phase = phases[index];
 		if (!isPhase(phase)) problems.add(itemPath(path, index), wrongType(phase, "\"write\" or \"publish\""), PHASES_FIX);
-		else if (seen.has(phase)) problems.add(itemPath(path, index), `repeats ${quote(phase)}`, PHASES_FIX);
+		else if (seen.has(phase)) problems.add(itemPath(path, index), `repeats ${quote$1(phase)}`, PHASES_FIX);
 		seen.add(phase);
 	}
 }
@@ -1576,7 +1693,7 @@ function checkPhases(path, raw, problems) {
 * what makes it a `Contract`. Whether it may have its id is a question for `checkIdentity`.
 */
 function isContract(item, path, problems) {
-	if (!isRecord$2(item)) {
+	if (!isRecord$3(item)) {
 		problems.add(path, wrongType(item, "a contract"), "Write it as { id, severity, description, check }.");
 		return false;
 	}
@@ -1599,7 +1716,7 @@ function isContract(item, path, problems) {
 */
 function checkIdentity(id, own, path, ids, problems) {
 	if (RESERVED.has(id) && !own) {
-		problems.add(keyPath(path, "id"), `${quote(id)} is the id of a built-in contract`, `Choose another id: ${BUILT_IN_CONTRACT_IDS.join(", ")} belong to Hollware's built-in contracts, and the opt-in ones are listed as contracts.translationPair(), contracts.internalLinksResolve() and contracts.imagesHaveAlt().`);
+		problems.add(keyPath(path, "id"), `${quote$1(id)} is the id of a built-in contract`, `Choose another id: ${BUILT_IN_CONTRACT_IDS.join(", ")} belong to Hollware's built-in contracts, and the opt-in ones are listed as contracts.translationPair(), contracts.internalLinksResolve() and contracts.imagesHaveAlt().`);
 		return;
 	}
 	const first = ids.get(id);
@@ -1607,7 +1724,7 @@ function checkIdentity(id, own, path, ids, problems) {
 		ids.set(id, path);
 		return;
 	}
-	problems.add(keyPath(path, "id"), `${quote(id)} is already the id of the contract at ${first}`, "Give every contract of the collection its own id.");
+	problems.add(keyPath(path, "id"), `${quote$1(id)} is already the id of the contract at ${first}`, "Give every contract of the collection its own id.");
 }
 function readContracts(path, raw, problems) {
 	const contracts = [];
@@ -1624,7 +1741,7 @@ function readContracts(path, raw, problems) {
 		if (isContract(item, itemAt, problems)) {
 			checkIdentity(item.id, isBuiltInContract(item), itemAt, ids, problems);
 			contracts.push(item);
-		} else if (isRecord$2(item) && typeof item["id"] === "string" && CONTRACT_ID.test(item["id"])) checkIdentity(item["id"], false, itemAt, ids, problems);
+		} else if (isRecord$3(item) && typeof item["id"] === "string" && CONTRACT_ID.test(item["id"])) checkIdentity(item["id"], false, itemAt, ids, problems);
 	}
 	return contracts;
 }
@@ -1639,8 +1756,8 @@ function readMaxMarkdownBytes(path, raw, problems) {
 * problem already: `resolveConfig` throws when there is any, so nothing else keeps track of them.
 */
 function readCollection(path, name, raw, site, problems) {
-	if (!NAME$1.test(name)) problems.add(path, `${quote(name)} is not a valid collection name`, nameFix("blog"));
-	if (!isRecord$2(raw)) {
+	if (!NAME.test(name)) problems.add(path, `${quote$1(name)} is not a valid collection name`, nameFix("blog"));
+	if (!isRecord$3(raw)) {
 		problems.add(path, wrongType(raw, "a collection"), "Declare it with defineCollection({ schema, routes, … }).");
 		return null;
 	}
@@ -1668,105 +1785,6 @@ function readCollection(path, name, raw, site, problems) {
 	};
 }
 //#endregion
-//#region src/config/events.ts
-/** The name of a Worker secret or variable: what `wrangler secret put` takes. */
-const BINDING_NAME = /^[A-Z][A-Z0-9_]*$/;
-/** A subscriber's name: lowercase words joined by hyphens. */
-const NAME = /^[a-z0-9]+(?:-[a-z0-9]+)*$/;
-/** The public URL of a site: an absolute http or https URL with no path, query or fragment. */
-function readSiteUrl(path, raw, problems) {
-	if (raw === void 0) return null;
-	const fix = "Write the public origin of the site, such as \"https://example.com\".";
-	if (typeof raw !== "string" || !URL.canParse(raw)) {
-		problems.add(path, wrongType(raw, "an absolute URL"), fix);
-		return null;
-	}
-	const url = new URL(raw);
-	if (url.protocol !== "https:" && url.protocol !== "http:" || url.pathname !== "/" || url.search !== "" || url.hash !== "") {
-		problems.add(path, `${quote(raw)} is not an origin`, fix);
-		return null;
-	}
-	return url.origin;
-}
-/** The origins of a site's pages that may read its published content from the browser. */
-function readCors(path, raw, problems) {
-	if (raw === void 0) return { origins: [] };
-	if (!isRecord$2(raw) || !Array.isArray(raw["origins"])) {
-		problems.add(path, wrongType(raw, "an object with origins"), "Declare it as { origins: [\"https://example.com\"] }, or remove it.");
-		return { origins: [] };
-	}
-	const origins = [];
-	for (const [index, origin] of raw["origins"].entries()) {
-		const read = readSiteUrl(itemPath(keyPath(path, "origins"), index), origin, problems);
-		if (read !== null && !origins.includes(read)) origins.push(read);
-	}
-	return { origins };
-}
-function readBindingName(path, raw, problems) {
-	if (typeof raw === "string" && BINDING_NAME.test(raw)) return raw;
-	problems.add(path, wrongType(raw, "the name of a Worker secret"), "Name the secret that holds the value, such as \"WEBHOOK_SECRET\", and set it with wrangler secret put.");
-	return null;
-}
-function readWebhook(path, raw, problems) {
-	if (!isRecord$2(raw)) {
-		problems.add(path, wrongType(raw, "a webhook"), "Declare it as { name: \"newsletter\", url: \"https://…\", secret: \"WEBHOOK_SECRET\" }.");
-		return null;
-	}
-	const name = raw["name"];
-	if (typeof name !== "string" || !NAME.test(name)) problems.add(keyPath(path, "name"), wrongType(name, "a name"), "Name it with lowercase words joined by hyphens, such as \"newsletter\".");
-	const url = raw["url"];
-	const urlOk = typeof url === "string" && URL.canParse(url) && new URL(url).protocol === "https:";
-	if (!urlOk) problems.add(keyPath(path, "url"), wrongType(url, "an https URL"), "Give the https URL that receives the events.");
-	const secret = raw["secret"] === void 0 ? null : readBindingName(keyPath(path, "secret"), raw["secret"], problems);
-	if (typeof name !== "string" || !NAME.test(name) || !urlOk) return null;
-	if (raw["secret"] !== void 0 && secret === null) return null;
-	return {
-		name,
-		url: String(url),
-		secret
-	};
-}
-/** Who hears about publications (ADR-025): webhooks, and IndexNow when the site has a URL. */
-function readEvents(path, raw, siteUrl, problems) {
-	const events = {
-		webhooks: [],
-		indexNow: null
-	};
-	if (raw === void 0) return events;
-	if (!isRecord$2(raw)) {
-		problems.add(path, wrongType(raw, "an object"), "Declare { webhooks: [ … ], indexNow: { … } }.");
-		return events;
-	}
-	const webhooks = raw["webhooks"];
-	if (webhooks !== void 0) {
-		if (!Array.isArray(webhooks)) problems.add(keyPath(path, "webhooks"), wrongType(webhooks, "a list"), "List the webhooks.");
-		else {
-			const seen = /* @__PURE__ */ new Set();
-			webhooks.forEach((item, index) => {
-				const webhook = readWebhook(itemPath(keyPath(path, "webhooks"), index), item, problems);
-				if (webhook === null) return;
-				if (seen.has(webhook.name)) {
-					problems.add(itemPath(keyPath(path, "webhooks"), index), `repeats the name ${quote(webhook.name)}`, "Give each webhook a name of its own.");
-					return;
-				}
-				seen.add(webhook.name);
-				events.webhooks.push(webhook);
-			});
-		}
-	}
-	const indexNow = raw["indexNow"];
-	if (indexNow !== void 0) {
-		const indexPath = keyPath(path, "indexNow");
-		if (!isRecord$2(indexNow)) problems.add(indexPath, wrongType(indexNow, "an object"), "Declare { key: \"INDEXNOW_KEY\" }.");
-		else {
-			const key = readBindingName(keyPath(indexPath, "key"), indexNow["key"], problems);
-			if (siteUrl === null) problems.add(indexPath, "needs the URL of the site", "Set url on the site: IndexNow is told the public URLs of the entries.");
-			else if (key !== null) events.indexNow = { key };
-		}
-	}
-	return events;
-}
-//#endregion
 //#region src/config/site-key.ts
 /**
 * The key of a site, which is the id of its row in the database: lowercase letters and digits
@@ -1816,14 +1834,14 @@ function readLocales(path, raw, problems) {
 		}
 		locales.push(tag);
 		if (!LOCALE_TAG.test(tag)) {
-			problems.add(tagPath, `${quote(tag)} is not a language tag`, LOCALE_FIX);
+			problems.add(tagPath, `${quote$1(tag)} is not a language tag`, LOCALE_FIX);
 			ok = false;
 			continue;
 		}
 		const first = firstAt.get(tag);
 		if (first === void 0) firstAt.set(tag, index);
 		else {
-			problems.add(tagPath, `${quote(tag)} is already listed at ${itemPath(path, first)}`, "List each locale once.");
+			problems.add(tagPath, `${quote$1(tag)} is already listed at ${itemPath(path, first)}`, "List each locale once.");
 			ok = false;
 		}
 	}
@@ -1837,13 +1855,13 @@ function readDefaultLocale(path, raw, locales, problems) {
 		problems.add(path, wrongType(raw, "one of the locales"), "Set it to the main language of the site, one of its locales.");
 		return "";
 	}
-	if (locales.length > 0 && !locales.includes(raw)) problems.add(path, `is ${quote(raw)}, which is not one of the locales (${locales.map(quote).join(", ")})`, `Set it to one of ${locales.map(quote).join(", ")}, or add ${quote(raw)} to locales.`);
+	if (locales.length > 0 && !locales.includes(raw)) problems.add(path, `is ${quote$1(raw)}, which is not one of the locales (${locales.map(quote$1).join(", ")})`, `Set it to one of ${locales.map(quote$1).join(", ")}, or add ${quote$1(raw)} to locales.`);
 	return raw;
 }
 const COLLECTIONS_FIX = "Declare at least one: collections: { blog: defineCollection({ schema, routes }) }.";
 function readCollections(path, raw, site, problems) {
 	const collections = /* @__PURE__ */ new Map();
-	if (!isRecord$2(raw)) {
+	if (!isRecord$3(raw)) {
 		problems.add(path, wrongType(raw, "an object that maps each collection name to its collection"), COLLECTIONS_FIX);
 		return collections;
 	}
@@ -1858,8 +1876,8 @@ function readCollections(path, raw, site, problems) {
 /** Checks one site; `null` when it is no object, which is a problem already. */
 function readSite(key, raw, problems) {
 	const path = keyPath("sites", key);
-	if (!isSiteKey(key)) problems.add(path, `${quote(key)} is not a valid site key`, SITE_KEY_FIX);
-	if (!isRecord$2(raw)) {
+	if (!isSiteKey(key)) problems.add(path, `${quote$1(key)} is not a valid site key`, SITE_KEY_FIX);
+	if (!isRecord$3(raw)) {
 		problems.add(path, wrongType(raw, "a site"), "Declare it as { locales: [\"en\"], defaultLocale: \"en\", collections: { … } }.");
 		return null;
 	}
@@ -1886,7 +1904,7 @@ function readSite(key, raw, problems) {
 }
 function readSites(raw, problems) {
 	const sites = /* @__PURE__ */ new Map();
-	if (!isRecord$2(raw)) {
+	if (!isRecord$3(raw)) {
 		problems.add("sites", wrongType(raw, "an object that maps the site key to the site"), SITE_FIX);
 		return sites;
 	}
@@ -1901,7 +1919,7 @@ function readSites(raw, problems) {
 /** `auth` of the config: absent, or an object whose `dynamicClientRegistration` is a boolean. */
 function readAuth(raw, problems) {
 	if (raw === void 0) return { dynamicClientRegistration: false };
-	if (!isRecord$2(raw)) {
+	if (!isRecord$3(raw)) {
 		problems.add("auth", wrongType(raw, "an object"), "Write auth: { dynamicClientRegistration: true }, or leave auth out.");
 		return { dynamicClientRegistration: false };
 	}
@@ -1943,7 +1961,7 @@ function resolveConfig(config) {
 	const problems = new Problems();
 	let sites = /* @__PURE__ */ new Map();
 	let auth = { dynamicClientRegistration: false };
-	if (isRecord$2(config)) {
+	if (isRecord$3(config)) {
 		sites = readSites(config["sites"], problems);
 		auth = readAuth(config["auth"], problems);
 	} else problems.add("config", wrongType(config, "an object"), "Export the result of defineConfig({ sites: { … } }) from hollware.config.ts.");
@@ -3828,6 +3846,7 @@ const entrySummary = z.object({
 	hasUnpublishedChanges: z.boolean().describe("Whether the latest revision differs from the published one."),
 	publishedAt: z.string().nullable().describe("When the entry was first published, or null."),
 	scheduledAt: z.string().nullable().describe("When a scheduled entry will be published, or null for one that is not scheduled."),
+	deletedAt: z.string().nullable().describe("When the entry went to the trash, or null for one that is not in the trash."),
 	updatedAt: z.string()
 });
 const publication = z.object({
@@ -3958,12 +3977,13 @@ const describeSite = defineOperation({
 const listEntries = defineOperation({
 	name: "list_entries",
 	title: "List entries",
-	description: "Lists the entries of a collection, newest first, filtered by locale, tag or status. Pass the nextCursor of an answer as cursor to get the next page.",
+	description: "Lists the entries of a collection, newest first, filtered by locale, tag or status. Pass the nextCursor of an answer as cursor to get the next page. Entries in the trash are left out, unless trashed asks for them.",
 	input: z.strictObject({
 		collection: collectionName,
 		locale: locale.optional(),
 		tag: z.string().min(1).optional(),
 		status: entryStatus.optional(),
+		trashed: z.boolean().optional().describe("true to list the entries in the trash, last trashed first, instead of the others."),
 		limit: z.number().int().min(1).max(100).default(20),
 		cursor: z.string().min(1).optional()
 	}),
@@ -4046,7 +4066,7 @@ const getTranslations = defineOperation({
 const createDraft = defineOperation({
 	name: "create_draft",
 	title: "Create a draft",
-	description: "Creates an entry from a Markdown file and saves it as a draft at version 1. Contract errors do not stop the draft: it is saved, and the verdict says what to fix before publishing. It is refused only when it cannot be stored: the file is too large, its frontmatter or syntax does not parse, or the slug or translation is taken.",
+	description: "Creates an entry from a Markdown file and saves it as a draft at version 1. Contract errors do not stop the draft: it is saved, and the verdict says what to fix before publishing. It is refused only when it cannot be stored: the file is too large, its frontmatter or syntax does not parse, or the slug or translation is taken. An entry in the trash keeps its slug and translation: the answer is in_trash with that entry, and restore_entry brings it back.",
 	input: z.strictObject({
 		collection: collectionName,
 		locale,
@@ -4054,15 +4074,20 @@ const createDraft = defineOperation({
 		markdown
 	}),
 	output: z.object({
-		outcome: z.enum(["saved", "refused"]),
-		entry: entrySummary.optional(),
+		outcome: z.enum([
+			"saved",
+			"refused",
+			"in_trash"
+		]),
+		entry: entrySummary.optional().describe("With saved, the new draft; with in_trash, the entry in the trash that holds it."),
 		verdict: verdict.optional()
 	}),
 	scopes: ["content:write"],
 	effect: "write",
 	outcomes: {
 		saved: { isError: false },
-		refused: { isError: true }
+		refused: { isError: true },
+		in_trash: { isError: true }
 	}
 });
 const updateDraft = defineOperation({
@@ -4172,6 +4197,54 @@ const unpublish = defineOperation({
 		not_found: { isError: true }
 	}
 });
+const deleteEntry = defineOperation({
+	name: "delete_entry",
+	title: "Move an entry to the trash",
+	description: "Moves a draft to the trash, if it is still at the version you read: every operation treats it as gone, its pending review is cancelled, and nothing is deleted. It keeps its slug and translation, and restore_entry brings it back as the draft it was. A published or scheduled entry answers published: unpublish it first.",
+	input: z.strictObject({
+		id: entryId,
+		version
+	}),
+	output: z.object({
+		outcome: z.enum([
+			"trashed",
+			"published",
+			"conflict",
+			"not_found"
+		]),
+		entry: entrySummary.optional(),
+		conflict: conflict.optional()
+	}),
+	scopes: ["content:write"],
+	effect: "destructive",
+	outcomes: {
+		trashed: { isError: false },
+		published: { isError: true },
+		conflict: { isError: true },
+		not_found: { isError: true }
+	}
+});
+const restoreEntry = defineOperation({
+	name: "restore_entry",
+	title: "Bring an entry back from the trash",
+	description: "Brings an entry back from the trash as the draft it was, with its revisions, at the next version. An entry that is not in the trash answers not_trashed.",
+	input: z.strictObject({ id: entryId }),
+	output: z.object({
+		outcome: z.enum([
+			"restored",
+			"not_trashed",
+			"not_found"
+		]),
+		entry: entrySummary.optional()
+	}),
+	scopes: ["content:write"],
+	effect: "write",
+	outcomes: {
+		restored: { isError: false },
+		not_trashed: { isError: true },
+		not_found: { isError: true }
+	}
+});
 const listReviews = defineOperation({
 	name: "list_reviews",
 	title: "List the reviews",
@@ -4487,6 +4560,7 @@ const OPERATIONS = [
 	contentStats,
 	createDraft,
 	createSite,
+	deleteEntry,
 	deleteSite,
 	describeSite,
 	getEntry,
@@ -4518,6 +4592,7 @@ const OPERATIONS = [
 	publish,
 	requestChanges,
 	requestReview,
+	restoreEntry,
 	restoreSite,
 	search,
 	setCollection,
@@ -4638,6 +4713,63 @@ async function verifyWebhook(check) {
 	return sameText(signature, await signWebhook(check.secret, timestamp, check.body));
 }
 //#endregion
+//#region src/events.ts
+/**
+* What Hollware sends to a site's webhooks (ADR-025), signed as `signWebhook` signs it: an event
+* about an entry that was published or unpublished, or about a change of the site's structure
+* (ADR-033). Every event carries the cache tags it invalidates (`@hollware/core`'s cache tags), so
+* a site that caches its pages purges them with no lookup. A receiver checks the signature with
+* `verifyWebhook`, then reads the body with `parseHollwareEvent`. Fields may be added in a minor
+* version, and kinds too: a receiver ignores a kind it does not know.
+*/
+const base = {
+	/** The id of the event: the same on every retry of its delivery. */
+	id: z.string(),
+	/** The key of the site. */
+	site: z.string(),
+	/** When the change was written, in ISO 8601. */
+	at: z.string(),
+	/** The cache tags the change invalidates. */
+	cacheTags: z.array(z.string())
+};
+/** A publish or an unpublish: the entry, and where it lives on the site. */
+const entryEvent = z.object({
+	...base,
+	kind: z.enum(["entry.published", "entry.unpublished"]),
+	entry: z.object({
+		id: z.string(),
+		collection: z.string(),
+		locale: z.string(),
+		slug: z.string(),
+		translationGroup: z.string().nullable()
+	}),
+	/** The path of the entry on the site, from the route of its collection and locale. */
+	path: z.string().nullable(),
+	/** The URL of the entry, when the site has a `url`. */
+	url: z.string().nullable()
+});
+/** A change of the site's structure: no entry, the tags to purge. */
+const siteEvent = z.object({
+	...base,
+	kind: z.literal("site.changed")
+});
+/** Every event a webhook gets. */
+const hollwareEvent = z.discriminatedUnion("kind", [entryEvent, siteEvent]);
+/**
+* The event of a webhook's body, once its signature holds, or `null` for a body that is not one
+* of the events this version knows (a newer kind, say): a receiver skips it.
+*/
+function parseHollwareEvent(body) {
+	let json;
+	try {
+		json = JSON.parse(body);
+	} catch {
+		return null;
+	}
+	const parsed = hollwareEvent.safeParse(json);
+	return parsed.success ? parsed.data : null;
+}
+//#endregion
 //#region src/cache.ts
 /**
 * The cache tags of Hollware's content (S8): one name for each thing a page can show, so that a
@@ -4688,8 +4820,19 @@ function tagsOfChange(entry) {
 		...entry.translationGroup === null ? [] : [groupTag(entry.collection, entry.translationGroup)]
 	];
 }
+/**
+* The tags a change of a site's structure invalidates (ADR-033): the pages that show the structure
+* (`site`, such as a navigation), and every list of its collections in each locale and in every
+* locale, as a list may change with a schema, a route or a collection that goes. `collections` and
+* `locales` are those of the definition before and after the change, together.
+*/
+function tagsOfSiteChange(collections, locales) {
+	const tags = /* @__PURE__ */ new Set([SITE_TAG]);
+	for (const collection of collections) for (const locale of [...locales, "*"]) tags.add(listTag(collection, locale));
+	return [...tags];
+}
 //#endregion
 //#region src/index.ts
 const name = "@hollware/core";
 //#endregion
-export { BUILT_IN_CONTRACT_IDS, CATALOG, CHUNKER_VERSION, CHUNK_LIMITS, COMARK_VERSION, ConfigError, DEFAULT_MAX_MARKDOWN_BYTES, ERROR_CODES, EVENT_ID_HEADER, EVERY_LOCALE, HollwareError, ID_PREFIXES, MAX_MARKDOWN_BYTES_CEILING, OPERATIONS, PERSONAL_TOKEN_PREFIX, PERSONAL_TOKEN_TTL_DAYS, PIPELINE_VERSION, PRESETS, READ_TOKEN_PREFIX, REFUSAL_CONTRACT_IDS, SCOPES, SIGNATURE_HEADER, SITE_KEY_MAX_LENGTH, SITE_KEY_PATTERN, SITE_TAG, TIMESTAMP_HEADER, approveReview, canonicalJson, catalogRule, chunksOf, collectionDefinitionData, collectionPreset, commentReview, compileSites, componentDefinitionData, contentStats, contracts, createDraft, defineCollection, defineComponent, defineConfig, defineContract, defineOperation, definitionsFromConfig, describeBuiltInContracts, describeCatalog, describeContract, describeResolvedSite, describeSite, describedSchemaOf, entryTag, generatePersonalToken, generateReadToken, getEntry, getTranslations, groupTag, hashPersonalToken, isBuiltInContract, isId, isPersonalToken, isReadToken, isScope, isSiteKey, listEntries, listReviews, listTag, name, newId, processMarkdown, publish, renderHtml, requestChanges, requestReview, resolveConfig, routesFor, ruleDefinition, runContracts, schemas_exports as schemas, search, signWebhook, siteDefinitionData, sitePreset, sizeLimitViolation, tagsOfChange, tagsOfEntries, ulid, uniqueSlugViolation, uniqueTranslationViolation, unpublish, updateDraft, validate, verifyWebhook, webhookDefinition };
+export { BUILT_IN_CONTRACT_IDS, CATALOG, CHUNKER_VERSION, CHUNK_LIMITS, COMARK_VERSION, ConfigError, DEFAULT_MAX_MARKDOWN_BYTES, ERROR_CODES, EVENT_ID_HEADER, EVERY_LOCALE, HollwareError, ID_PREFIXES, INDEXNOW_KEY, MAX_MARKDOWN_BYTES_CEILING, OPERATIONS, PERSONAL_TOKEN_PREFIX, PERSONAL_TOKEN_TTL_DAYS, PIPELINE_VERSION, PRESETS, READ_TOKEN_PREFIX, REFUSAL_CONTRACT_IDS, SCOPES, SIGNATURE_HEADER, SITE_KEY_MAX_LENGTH, SITE_KEY_PATTERN, SITE_TAG, TIMESTAMP_HEADER, approveReview, canonicalJson, catalogRule, chunksOf, collectionDefinitionData, collectionPreset, commentReview, compileSites, componentDefinitionData, contentStats, contracts, createDraft, defineCollection, defineComponent, defineConfig, defineContract, defineOperation, definitionsFromConfig, deleteEntry, describeBuiltInContracts, describeCatalog, describeContract, describeResolvedSite, describeSite, describedSchemaOf, entryEvent, entryTag, generatePersonalToken, generateReadToken, getEntry, getTranslations, groupTag, hashPersonalToken, hollwareEvent, isBuiltInContract, isId, isPersonalToken, isReadToken, isScope, isSiteKey, listEntries, listReviews, listTag, name, newId, parseHollwareEvent, processMarkdown, publish, renderHtml, requestChanges, requestReview, resolveConfig, restoreEntry, routesFor, ruleDefinition, runContracts, schemas_exports as schemas, search, signWebhook, siteDefinitionData, siteEvent, sitePreset, sizeLimitViolation, tagsOfChange, tagsOfEntries, tagsOfSiteChange, ulid, uniqueSlugViolation, uniqueTranslationViolation, unpublish, updateDraft, validate, verifyWebhook, webhookDefinition };