@morphemecms/cms 0.1.0 → 0.2.0-next-20261104150211

package/worker/editor-github.js

@@ -1,167 +1,167 @@
-// What the editor asks of GitHub, through the Worker (packages/editor/src/github.ts): the browser never has the token
-// (packages/editor/worker/session.js), so every request to GitHub goes from here with it. The site's files come through the cache in
-// R2 (packages/editor/worker/files.js), and only to a sign-in GitHub says may read the repository (`access`, ten minutes).
-//   GET  /api/github/head          the branch's commit and root tree (always from GitHub)
-//   POST /api/github/files         { tree?, folders?, depth?, paths? }: the files in folders (`depth` levels down) and at
-//                                  paths, at a root tree, or at the branch's head
-//   POST /api/github/trees         { at: [{ root, path }] }: the folders at paths under root trees, with their entries
-//   POST /api/github/texts         { oids }: files' texts by their blob ids (at most 100)
-//   GET  /api/github/blob/<oid>    a file's bytes; ?repo=<owner>/<name> from another repository (the store), not cached
-//   POST /api/github/commit        { message, changes: [{ path, content (base64) | null, oid | null }] }: one commit,
-//                                  refused (409) when a file was changed or created elsewhere since the editor loaded it
-//   POST /api/github/graphql       any other question to GitHub's GraphQL API (who is signed in, the history, the
-//                                  store): only questions, never a change
-//   POST /api/github/logout        "Log ud": the cookie goes, and GitHub forgets the token
-import { config } from '@site/config';
-import { access, forget, noSession, sessionToken } from './session.js';
-import { filesOf, GitHubError } from './files.js';
-import { json } from './not-found.js';
-
-const OID = /^[0-9a-f]{40}([0-9a-f]{24})?$/;
-const isOid = (s) => typeof s === 'string' && OID.test(s);
-const isPath = (s) => typeof s === 'string' && s.length > 0 && s.length <= 1000 && !s.startsWith('/') && !s.split('/').includes('..');
-
-export async function handleGitHub(request, env, ctx) {
-  const route = new URL(request.url).pathname.slice('/api/github/'.length);
-  const method = request.method;
-  if (route === 'logout' && method === 'POST') return logout(request, env, ctx);
-  const token = sessionToken(request);
-  if (!token) return json({ error: 'signed out' }, 401);
-  const files = filesOf(env, token, ctx);
-  try {
-    if (route === 'graphql' && method === 'POST') return await question(request, files);
-    // The site's own files: only to someone GitHub says may read the repository.
-    const may = await access(request, files.ask);
-    if (!may) return json({ error: 'signed out' }, 401);
-    if (!may.read) return json({ error: 'forbidden' }, 403);
-    if (route === 'head' && method === 'GET') return json(await files.head());
-    if (route.startsWith('blob/') && method === 'GET') return await blob(request, route.slice('blob/'.length), files);
-    if (method !== 'POST') return json({ error: 'method' }, 405);
-    const body = await request.json().catch(() => ({}));
-    if (route === 'files') return await listed(body, files);
-    if (route === 'trees') return await folders(body, files);
-    if (route === 'texts') return await texts(body, files);
-    if (route === 'commit') return await commit(body, files);
-    return json({ error: 'not found' }, 404);
-  } catch (e) {
-    if (e instanceof GitHubError) return json({ error: e.message || undefined, status: e.status }, e.status === 401 ? 401 : 502);
-    throw e;
-  } finally {
-    await files.finish(route.replace(/\/.*/, ''));
-  }
-}
-
-// A question to GitHub's GraphQL API as it is, and GitHub's answer. A change (a mutation) only goes through `commit`.
-async function question(request, files) {
-  const body = await request.text();
-  let query;
-  try {
-    ({ query } = JSON.parse(body));
-  } catch {}
-  if (typeof query !== 'string' || /\b(mutation|subscription)\b/.test(withoutStrings(query))) return json({ error: 'only questions' }, 400);
-  const res = await files.ask('https://api.github.com/graphql', { method: 'POST', headers: { 'content-type': 'application/json' }, body });
-  return new Response(res.body, { status: res.status, headers: { 'content-type': 'application/json', 'cache-control': 'no-store' } });
-}
-
-// GraphQL without its strings and comments, where a file's name could say anything.
-const withoutStrings = (query) => query.replace(/"""[\s\S]*?"""|"(?:\\.|[^"\\])*"|#[^\n]*/g, '""');
-
-async function listed({ tree, folders = [], depth = 3, paths = [] }, files) {
-  if (
-    (tree !== undefined && !isOid(tree)) ||
-    !Array.isArray(folders) ||
-    !folders.every(isPath) ||
-    !Array.isArray(paths) ||
-    !paths.every(isPath) ||
-    !Number.isInteger(depth) ||
-    depth < 1 ||
-    depth > 20
-  )
-    return json({ error: 'request' }, 400);
-  const at = tree ? { tree } : await files.head();
-  const [lists, entries] = await Promise.all([files.filesIn(at.tree, folders, depth), files.entriesAt(at.tree, paths)]);
-  return json({
-    ...at,
-    folders: lists,
-    // At a path: a file, or anything else git has there (a folder), whose text is never asked.
-    paths: entries.map((e, i) => e && { path: paths[i], oid: e.oid, binary: e.type !== 'blob' || e.binary === true }),
-  });
-}
-
-async function folders({ at }, files) {
-  if (!Array.isArray(at) || at.length > 200 || !at.every((a) => isOid(a?.root) && (a.path === '' || isPath(a.path))))
-    return json({ error: 'request' }, 400);
-  const oids = await files.foldersAt(at);
-  const trees = await files.treesOf(oids.filter(Boolean));
-  return json({
-    trees: oids.map((oid) => {
-      const entries = oid && trees.get(oid);
-      return entries ? { oid, entries: entries.map((e) => ({ name: e.name, oid: e.oid, type: e.type, binary: e.binary === true })) } : null;
-    }),
-  });
-}
-
-async function texts({ oids }, files) {
-  if (!Array.isArray(oids) || oids.length > 100 || !oids.every(isOid)) return json({ error: 'request' }, 400);
-  const found = await files.texts(oids);
-  return json({ texts: Object.fromEntries([...found].filter(([, text]) => text !== undefined)) });
-}
-
-async function blob(request, oid, files) {
-  const repo = new URL(request.url).searchParams.get('repo')?.split('/');
-  if (!isOid(oid) || (repo && (repo.length !== 2 || !repo.every((p) => /^[\w.-]+$/.test(p))))) return json({ error: 'request' }, 400);
-  const bytes = await files.bytes(oid, repo ? { owner: repo[0], name: repo[1] } : config.repo);
-  if (!bytes) return json({ error: 'not found' }, 404);
-  // A blob id's bytes never change.
-  return new Response(bytes, {
-    headers: { 'content-type': 'application/octet-stream', 'cache-control': 'private, max-age=31536000, immutable' },
-  });
-}
-
-async function commit({ message, changes }, files) {
-  if (
-    typeof message !== 'string' ||
-    !message ||
-    !Array.isArray(changes) ||
-    !changes.length ||
-    !changes.every((c) => isPath(c?.path) && (c.content === null || typeof c.content === 'string') && (c.oid === null || isOid(c.oid)))
-  )
-    return json({ error: 'request' }, 400);
-  // The branch's commit, then the files in that same commit, so a push in between cannot slip past the check (the
-  // commit is refused unless the branch is still at this commit).
-  const at = await files.head();
-  const now = await files.entriesAt(
-    at.tree,
-    changes.map((c) => c.path),
-  );
-  const conflict = changes.findIndex((c, i) => (now[i]?.oid ?? null) !== c.oid);
-  if (conflict >= 0) return json({ conflict: changes[conflict].oid ? 'changed' : 'exists' }, 409);
-  return json(
-    await files.save(
-      at,
-      message,
-      changes.map((c) => ({ path: c.path, contents: c.content })),
-    ),
-  );
-}
-
-async function logout(request, env, ctx) {
-  const token = sessionToken(request);
-  if (token) {
-    await forget(token);
-    // GitHub forgets the token too, so it is no good to anyone after "Log ud".
-    if (env.GITHUB_CLIENT_ID && env.GITHUB_CLIENT_SECRET)
-      ctx.waitUntil(
-        fetch(`https://api.github.com/applications/${env.GITHUB_CLIENT_ID}/token`, {
-          method: 'DELETE',
-          headers: {
-            authorization: `Basic ${btoa(`${env.GITHUB_CLIENT_ID}:${env.GITHUB_CLIENT_SECRET}`)}`,
-            accept: 'application/vnd.github+json',
-            'user-agent': `${config.repo.name}-worker`,
-          },
-          body: JSON.stringify({ access_token: token }),
-        }).catch(() => {}),
-      );
-  }
-  return new Response(null, { status: 204, headers: { 'set-cookie': noSession(), 'cache-control': 'no-store' } });
-}
+// What the editor asks of GitHub, through the Worker (packages/editor/src/github.ts): the browser never has the token
+// (packages/editor/worker/session.js), so every request to GitHub goes from here with it. The site's files come through the cache in
+// R2 (packages/editor/worker/files.js), and only to a sign-in GitHub says may read the repository (`access`, ten minutes).
+//   GET  /api/github/head          the branch's commit and root tree (always from GitHub)
+//   POST /api/github/files         { tree?, folders?, depth?, paths? }: the files in folders (`depth` levels down) and at
+//                                  paths, at a root tree, or at the branch's head
+//   POST /api/github/trees         { at: [{ root, path }] }: the folders at paths under root trees, with their entries
+//   POST /api/github/texts         { oids }: files' texts by their blob ids (at most 100)
+//   GET  /api/github/blob/<oid>    a file's bytes; ?repo=<owner>/<name> from another repository (the store), not cached
+//   POST /api/github/commit        { message, changes: [{ path, content (base64) | null, oid | null }] }: one commit,
+//                                  refused (409) when a file was changed or created elsewhere since the editor loaded it
+//   POST /api/github/graphql       any other question to GitHub's GraphQL API (who is signed in, the history, the
+//                                  store): only questions, never a change
+//   POST /api/github/logout        "Log ud": the cookie goes, and GitHub forgets the token
+import { config } from '@site/config';
+import { access, forget, noSession, sessionToken } from './session.js';
+import { filesOf, GitHubError } from './files.js';
+import { json } from './not-found.js';
+
+const OID = /^[0-9a-f]{40}([0-9a-f]{24})?$/;
+const isOid = (s) => typeof s === 'string' && OID.test(s);
+const isPath = (s) => typeof s === 'string' && s.length > 0 && s.length <= 1000 && !s.startsWith('/') && !s.split('/').includes('..');
+
+export async function handleGitHub(request, env, ctx) {
+  const route = new URL(request.url).pathname.slice('/api/github/'.length);
+  const method = request.method;
+  if (route === 'logout' && method === 'POST') return logout(request, env, ctx);
+  const token = sessionToken(request);
+  if (!token) return json({ error: 'signed out' }, 401);
+  const files = filesOf(env, token, ctx);
+  try {
+    if (route === 'graphql' && method === 'POST') return await question(request, files);
+    // The site's own files: only to someone GitHub says may read the repository.
+    const may = await access(request, files.ask);
+    if (!may) return json({ error: 'signed out' }, 401);
+    if (!may.read) return json({ error: 'forbidden' }, 403);
+    if (route === 'head' && method === 'GET') return json(await files.head());
+    if (route.startsWith('blob/') && method === 'GET') return await blob(request, route.slice('blob/'.length), files);
+    if (method !== 'POST') return json({ error: 'method' }, 405);
+    const body = await request.json().catch(() => ({}));
+    if (route === 'files') return await listed(body, files);
+    if (route === 'trees') return await folders(body, files);
+    if (route === 'texts') return await texts(body, files);
+    if (route === 'commit') return await commit(body, files);
+    return json({ error: 'not found' }, 404);
+  } catch (e) {
+    if (e instanceof GitHubError) return json({ error: e.message || undefined, status: e.status }, e.status === 401 ? 401 : 502);
+    throw e;
+  } finally {
+    await files.finish(route.replace(/\/.*/, ''));
+  }
+}
+
+// A question to GitHub's GraphQL API as it is, and GitHub's answer. A change (a mutation) only goes through `commit`.
+async function question(request, files) {
+  const body = await request.text();
+  let query;
+  try {
+    ({ query } = JSON.parse(body));
+  } catch {}
+  if (typeof query !== 'string' || /\b(mutation|subscription)\b/.test(withoutStrings(query))) return json({ error: 'only questions' }, 400);
+  const res = await files.ask('https://api.github.com/graphql', { method: 'POST', headers: { 'content-type': 'application/json' }, body });
+  return new Response(res.body, { status: res.status, headers: { 'content-type': 'application/json', 'cache-control': 'no-store' } });
+}
+
+// GraphQL without its strings and comments, where a file's name could say anything.
+const withoutStrings = (query) => query.replace(/"""[\s\S]*?"""|"(?:\\.|[^"\\])*"|#[^\n]*/g, '""');
+
+async function listed({ tree, folders = [], depth = 3, paths = [] }, files) {
+  if (
+    (tree !== undefined && !isOid(tree)) ||
+    !Array.isArray(folders) ||
+    !folders.every(isPath) ||
+    !Array.isArray(paths) ||
+    !paths.every(isPath) ||
+    !Number.isInteger(depth) ||
+    depth < 1 ||
+    depth > 20
+  )
+    return json({ error: 'request' }, 400);
+  const at = tree ? { tree } : await files.head();
+  const [lists, entries] = await Promise.all([files.filesIn(at.tree, folders, depth), files.entriesAt(at.tree, paths)]);
+  return json({
+    ...at,
+    folders: lists,
+    // At a path: a file, or anything else git has there (a folder), whose text is never asked.
+    paths: entries.map((e, i) => e && { path: paths[i], oid: e.oid, binary: e.type !== 'blob' || e.binary === true }),
+  });
+}
+
+async function folders({ at }, files) {
+  if (!Array.isArray(at) || at.length > 200 || !at.every((a) => isOid(a?.root) && (a.path === '' || isPath(a.path))))
+    return json({ error: 'request' }, 400);
+  const oids = await files.foldersAt(at);
+  const trees = await files.treesOf(oids.filter(Boolean));
+  return json({
+    trees: oids.map((oid) => {
+      const entries = oid && trees.get(oid);
+      return entries ? { oid, entries: entries.map((e) => ({ name: e.name, oid: e.oid, type: e.type, binary: e.binary === true })) } : null;
+    }),
+  });
+}
+
+async function texts({ oids }, files) {
+  if (!Array.isArray(oids) || oids.length > 100 || !oids.every(isOid)) return json({ error: 'request' }, 400);
+  const found = await files.texts(oids);
+  return json({ texts: Object.fromEntries([...found].filter(([, text]) => text !== undefined)) });
+}
+
+async function blob(request, oid, files) {
+  const repo = new URL(request.url).searchParams.get('repo')?.split('/');
+  if (!isOid(oid) || (repo && (repo.length !== 2 || !repo.every((p) => /^[\w.-]+$/.test(p))))) return json({ error: 'request' }, 400);
+  const bytes = await files.bytes(oid, repo ? { owner: repo[0], name: repo[1] } : config.repo);
+  if (!bytes) return json({ error: 'not found' }, 404);
+  // A blob id's bytes never change.
+  return new Response(bytes, {
+    headers: { 'content-type': 'application/octet-stream', 'cache-control': 'private, max-age=31536000, immutable' },
+  });
+}
+
+async function commit({ message, changes }, files) {
+  if (
+    typeof message !== 'string' ||
+    !message ||
+    !Array.isArray(changes) ||
+    !changes.length ||
+    !changes.every((c) => isPath(c?.path) && (c.content === null || typeof c.content === 'string') && (c.oid === null || isOid(c.oid)))
+  )
+    return json({ error: 'request' }, 400);
+  // The branch's commit, then the files in that same commit, so a push in between cannot slip past the check (the
+  // commit is refused unless the branch is still at this commit).
+  const at = await files.head();
+  const now = await files.entriesAt(
+    at.tree,
+    changes.map((c) => c.path),
+  );
+  const conflict = changes.findIndex((c, i) => (now[i]?.oid ?? null) !== c.oid);
+  if (conflict >= 0) return json({ conflict: changes[conflict].oid ? 'changed' : 'exists' }, 409);
+  return json(
+    await files.save(
+      at,
+      message,
+      changes.map((c) => ({ path: c.path, contents: c.content })),
+    ),
+  );
+}
+
+async function logout(request, env, ctx) {
+  const token = sessionToken(request);
+  if (token) {
+    await forget(token);
+    // GitHub forgets the token too, so it is no good to anyone after "Log ud".
+    if (env.GITHUB_CLIENT_ID && env.GITHUB_CLIENT_SECRET)
+      ctx.waitUntil(
+        fetch(`https://api.github.com/applications/${env.GITHUB_CLIENT_ID}/token`, {
+          method: 'DELETE',
+          headers: {
+            authorization: `Basic ${btoa(`${env.GITHUB_CLIENT_ID}:${env.GITHUB_CLIENT_SECRET}`)}`,
+            accept: 'application/vnd.github+json',
+            'user-agent': `${config.repo.name}-worker`,
+          },
+          body: JSON.stringify({ access_token: token }),
+        }).catch(() => {}),
+      );
+  }
+  return new Response(null, { status: 204, headers: { 'set-cookie': noSession(), 'cache-control': 'no-store' } });
+}

package/worker/editor-host.js

@@ -1,74 +1,74 @@
-// The editor on its own address (EDITOR_HOST, e.g. editor.example.dk), apart from the public
-// site: the editor's GitHub sign-in is a cookie no script can read (packages/editor/worker/session.js), but a script on the
-// same address (the site's third-party scripts, Google after consent, Calendly) could ask the Worker in the
-// editor's name, and read what the editor keeps in the browser. See docs/editor.md.
-// Without EDITOR_HOST (a variable on the Worker) the editor is at /editor/ on every address, as before.
-//   On EDITOR_HOST: the editor (/editor/), the sign-in (/oauth/), what the editor asks the Worker
-//     (/api/, packages/editor/worker/not-found.js) and files (scripts, styles, images)
-//     are served; the address alone opens the editor; any other page goes to the public site
-//     (PUBLIC_HOST, else EDITOR_HOST without "editor."), so no page of the site runs there.
-//   On any other address: the editor, the sign-in and /api/ go to EDITOR_HOST. The editor's page first
-//     removes what the editor kept on that address (the sign-in's cookie above all).
-//   A page the editor fetches as text for its preview ("Forhåndsvis", packages/editor/src/pagePreview.tsx,
-//     with the header X-Editor-Preview) is served on EDITOR_HOST too; the editor shows it without the
-//     site's scripts.
-
-import { noSession } from './session.js';
-
-// The site's pages and feeds: no file ending, or one of these.
-const PAGE = /(^|\/)[^./]*$|\.(html?|xml)$/i;
-
-/** A response for a request that belongs on the other address, or undefined to serve it here. */
-export function editorHost(url, env, request) {
-  const editor = env.EDITOR_HOST?.trim().toLowerCase();
-  if (!editor) return undefined;
-  const own =
-    url.pathname.startsWith('/editor/') ||
-    url.pathname === '/editor' ||
-    url.pathname.startsWith('/oauth/') ||
-    url.pathname.startsWith('/api/');
-
-  if (url.hostname === editor) {
-    if (url.pathname === '/' && !url.search) return redirect(`https://${editor}/editor/`, 302);
-    if (own || !PAGE.test(url.pathname) || request?.headers.get('x-editor-preview')) return undefined;
-    const site = env.PUBLIC_HOST?.trim() || editor.replace(/^editor\./, '');
-    return redirect(`https://${site}${url.pathname}${url.search}`, 302);
-  }
-
-  if (!own) return undefined;
-  const to = `https://${editor}${url.pathname}${url.search}`;
-  if (url.pathname === '/editor/' || url.pathname === '/editor') return cleanUp(to);
-  return redirect(to, 301);
-}
-
-const redirect = (location, status) => new Response(null, { status, headers: { location, 'cache-control': 'no-store' } });
-
-// The editor's page on the old address: removes the sign-in (its cookie), the editor's settings and its copy of the
-// files (IndexedDB "editor") and its service worker there, then opens the editor on its own address,
-// with what came after "#" (the open screen).
-function cleanUp(to) {
-  const js = JSON.stringify(to).replace(/</g, '\\u003c');
-  const html = `<!doctype html><html lang="da"><head><meta charset="utf-8"><meta name="viewport" content="width=device-width, initial-scale=1"><meta name="robots" content="noindex"><title>Editoren er flyttet</title></head>
-<body style="font-family: system-ui, sans-serif; padding: 2rem"><p>Editoren er flyttet til <a href=${JSON.stringify(to)}>${to.replace(/^https:\/\//, '').replace(/[?#].*$/, '')}</a> …</p><script>
-(async () => {
-  try {
-    for (const key of Object.keys(localStorage)) if (key.startsWith('editor-')) localStorage.removeItem(key);
-  } catch {}
-  try {
-    indexedDB.deleteDatabase('editor');
-  } catch {}
-  try {
-    for (const r of (await navigator.serviceWorker?.getRegistrations()) ?? []) if (new URL(r.scope).pathname.startsWith('/editor/')) await r.unregister();
-  } catch {}
-  location.replace(${js} + location.hash);
-})();
-</script></body></html>`;
-  return new Response(html, {
-    headers: {
-      'content-type': 'text/html; charset=utf-8',
-      'cache-control': 'no-store',
-      'x-robots-tag': 'noindex',
-      'set-cookie': noSession(),
-    },
-  });
-}
+// The editor on its own address (EDITOR_HOST, e.g. editor.example.dk), apart from the public
+// site: the editor's GitHub sign-in is a cookie no script can read (packages/editor/worker/session.js), but a script on the
+// same address (the site's third-party scripts, Google after consent, Calendly) could ask the Worker in the
+// editor's name, and read what the editor keeps in the browser. See docs/editor.md.
+// Without EDITOR_HOST (a variable on the Worker) the editor is at /editor/ on every address, as before.
+//   On EDITOR_HOST: the editor (/editor/), the sign-in (/oauth/), what the editor asks the Worker
+//     (/api/, packages/editor/worker/not-found.js) and files (scripts, styles, images)
+//     are served; the address alone opens the editor; any other page goes to the public site
+//     (PUBLIC_HOST, else EDITOR_HOST without "editor."), so no page of the site runs there.
+//   On any other address: the editor, the sign-in and /api/ go to EDITOR_HOST. The editor's page first
+//     removes what the editor kept on that address (the sign-in's cookie above all).
+//   A page the editor fetches as text for its preview ("Forhåndsvis", packages/editor/src/pagePreview.tsx,
+//     with the header X-Editor-Preview) is served on EDITOR_HOST too; the editor shows it without the
+//     site's scripts.
+
+import { noSession } from './session.js';
+
+// The site's pages and feeds: no file ending, or one of these.
+const PAGE = /(^|\/)[^./]*$|\.(html?|xml)$/i;
+
+/** A response for a request that belongs on the other address, or undefined to serve it here. */
+export function editorHost(url, env, request) {
+  const editor = env.EDITOR_HOST?.trim().toLowerCase();
+  if (!editor) return undefined;
+  const own =
+    url.pathname.startsWith('/editor/') ||
+    url.pathname === '/editor' ||
+    url.pathname.startsWith('/oauth/') ||
+    url.pathname.startsWith('/api/');
+
+  if (url.hostname === editor) {
+    if (url.pathname === '/' && !url.search) return redirect(`https://${editor}/editor/`, 302);
+    if (own || !PAGE.test(url.pathname) || request?.headers.get('x-editor-preview')) return undefined;
+    const site = env.PUBLIC_HOST?.trim() || editor.replace(/^editor\./, '');
+    return redirect(`https://${site}${url.pathname}${url.search}`, 302);
+  }
+
+  if (!own) return undefined;
+  const to = `https://${editor}${url.pathname}${url.search}`;
+  if (url.pathname === '/editor/' || url.pathname === '/editor') return cleanUp(to);
+  return redirect(to, 301);
+}
+
+const redirect = (location, status) => new Response(null, { status, headers: { location, 'cache-control': 'no-store' } });
+
+// The editor's page on the old address: removes the sign-in (its cookie), the editor's settings and its copy of the
+// files (IndexedDB "editor") and its service worker there, then opens the editor on its own address,
+// with what came after "#" (the open screen).
+function cleanUp(to) {
+  const js = JSON.stringify(to).replace(/</g, '\\u003c');
+  const html = `<!doctype html><html lang="da"><head><meta charset="utf-8"><meta name="viewport" content="width=device-width, initial-scale=1"><meta name="robots" content="noindex"><title>Editoren er flyttet</title></head>
+<body style="font-family: system-ui, sans-serif; padding: 2rem"><p>Editoren er flyttet til <a href=${JSON.stringify(to)}>${to.replace(/^https:\/\//, '').replace(/[?#].*$/, '')}</a> …</p><script>
+(async () => {
+  try {
+    for (const key of Object.keys(localStorage)) if (key.startsWith('editor-')) localStorage.removeItem(key);
+  } catch {}
+  try {
+    indexedDB.deleteDatabase('editor');
+  } catch {}
+  try {
+    for (const r of (await navigator.serviceWorker?.getRegistrations()) ?? []) if (new URL(r.scope).pathname.startsWith('/editor/')) await r.unregister();
+  } catch {}
+  location.replace(${js} + location.hash);
+})();
+</script></body></html>`;
+  return new Response(html, {
+    headers: {
+      'content-type': 'text/html; charset=utf-8',
+      'cache-control': 'no-store',
+      'x-robots-tag': 'noindex',
+      'set-cookie': noSession(),
+    },
+  });
+}