@morphemecms/cms 0.1.0 → 0.2.0-next-20261104150211

package/scripts/built-site.mjs

@@ -1,99 +1,134 @@
-// The built site served on this computer, with what the editor asks of GitHub (through the site's Worker) answered from
-// the files in this repository, for the scripts that open the editor in a browser (editor-screens.mjs,
-// app-screenshots.mjs): no sign-in, and nothing changes.
-import { createServer } from 'node:http';
-import { existsSync, readFileSync, readdirSync, statSync } from 'node:fs';
-import { extname, join, posix } from 'node:path';
-
-const ROOT = `${process.cwd()}/`;
-
-// The built site, as the host serves it: a folder is its index.html.
-const types = {
-  '.html': 'text/html',
-  '.js': 'text/javascript',
-  '.css': 'text/css',
-  '.json': 'application/json',
-  '.svg': 'image/svg+xml',
-  '.jpg': 'image/jpeg',
-  '.png': 'image/png',
-  '.webp': 'image/webp',
-  '.webmanifest': 'application/manifest+json',
-};
-
-/** Serves the built site in `dist`; gives the server and its address. */
-export async function serveBuilt(dist) {
-  const server = createServer((req, res) => {
-    let path = join(dist, decodeURIComponent(new URL(req.url, 'http://x').pathname));
-    if (existsSync(path) && statSync(path).isDirectory()) path = join(path, 'index.html');
-    if (!existsSync(path)) return res.writeHead(404).end();
-    res.writeHead(200, { 'content-type': types[extname(path)] ?? 'application/octet-stream' }).end(readFileSync(path));
-  });
-  await new Promise((done) => server.listen(0, '127.0.0.1', done));
-  return { server, site: `http://127.0.0.1:${server.address().port}` };
-}
-
-// GitHub, as the site's Worker answers the editor (packages/editor/worker/editor-github.js), answered from the files on disk: who is
-// signed in (with write access), the commit the branch is at, the files in the folders and at the paths asked for, and
-// their texts (a file's blob id is "blob:<path>"). A question about anything else (the versions of a file, what was
-// deleted) gets no data, as for a file without history. `texts`: files with other texts than on disk, by their paths.
-const TEXT = /\.(md|mdx|jsonc?|ya?ml|txt|ts|js|mjs|css|astro|svg)$/;
-const listed = (path, texts) => ({ path, oid: `blob:${path}`, binary: !(path in texts) && !TEXT.test(path) });
-function filesIn(dir, depth, texts) {
-  if (!existsSync(join(ROOT, dir)) || !statSync(join(ROOT, dir)).isDirectory()) return [];
-  const files = readdirSync(join(ROOT, dir), { withFileTypes: true }).flatMap((d) => {
-    const path = posix.join(dir, d.name);
-    if (d.isDirectory()) return depth > 1 ? filesIn(path, depth - 1, texts) : [];
-    return [listed(path, texts)];
-  });
-  // The files given that are not on disk, in their folder.
-  const more = Object.keys(texts)
-    .filter((path) => posix.dirname(path) === dir && !files.some((f) => f.path === path))
-    .map((path) => listed(path, texts));
-  return [...files, ...more];
-}
-function answer(query, texts) {
-  const repository = { ref: { target: { oid: 'head' } }, viewerPermission: 'ADMIN' };
-  for (const [, key, path] of query.matchAll(/(f\d+): object\(expression: "[^:"]+:([^"]+)"\)/g)) {
-    const full = join(ROOT, path);
-    if (path in texts) repository[key] = { oid: `blob:${path}`, text: texts[path] };
-    else if (!existsSync(full) || statSync(full).isDirectory()) repository[key] = null;
-    else repository[key] = { oid: `blob:${path}`, text: TEXT.test(path) ? readFileSync(full, 'utf8') : null };
-  }
-  return { data: { viewer: { login: 'editor-screens', name: 'Anna Jensen' }, repository } };
-}
-function workerAnswer(route, body, texts) {
-  if (route === 'graphql') return answer(body.query ?? '', texts);
-  if (route === 'head') return { commit: 'head', tree: 'root' };
-  if (route === 'files')
-    return {
-      commit: 'head',
-      tree: 'root',
-      folders: (body.folders ?? []).map((dir) => filesIn(dir, body.depth ?? 3, texts)),
-      paths: (body.paths ?? []).map((path) =>
-        path in texts || (existsSync(join(ROOT, path)) && statSync(join(ROOT, path)).isFile()) ? listed(path, texts) : null,
-      ),
-    };
-  if (route === 'trees') return { trees: (body.at ?? []).map(() => null) };
-  if (route === 'texts') {
-    const paths = (body.oids ?? []).map((oid) => oid.replace(/^blob:/, ''));
-    return { texts: Object.fromEntries(paths.map((path) => [`blob:${path}`, texts[path] ?? readFileSync(join(ROOT, path), 'utf8')])) };
-  }
-  return null;
-}
-
-/** Opens the editor (/editor/) of the site at `site` in `page`, signed in, with GitHub answered from the files on disk
- * (`texts`: some with other texts), and waits until it has loaded the site. */
-export async function openEditor(page, site, texts = {}) {
-  // R2 caching under "Avanceret": Cloudflare has the bucket (packages/editor/worker/r2-status.js).
-  await page.route(`${site}/api/r2?**`, (r) =>
-    r.fulfill({ contentType: 'application/json', body: JSON.stringify({ bound: false, bucket: 'ready' }) }),
-  );
-  await page.route(`${site}/api/github/**`, (r) => {
-    const route = new URL(r.request().url()).pathname.slice('/api/github/'.length);
-    const found = workerAnswer(route, JSON.parse(r.request().postData() || '{}'), texts);
-    return found ? r.fulfill({ contentType: 'application/json', body: JSON.stringify(found) }) : r.fulfill({ status: 404 });
-  });
-  await page.goto(`${site}/editor/`);
-  // The editor has loaded the site when the start screen has its links.
-  await page.waitForFunction(() => document.querySelectorAll('a[href^="#"]').length > 3, null, { timeout: 60_000 });
-}
+// The built site served on this computer, with what the editor asks of GitHub (through the site's Worker) answered from
+// the files in this repository, and the app store from a made-up catalog, for the scripts that open the editor in a
+// browser (editor-screens.mjs, app-screenshots.mjs): no sign-in, and nothing changes.
+import { createServer } from 'node:http';
+import { existsSync, readFileSync, readdirSync, statSync } from 'node:fs';
+import { extname, join, posix } from 'node:path';
+import { APP_API, THEME_API } from '../lib/contracts.mjs';
+
+const ROOT = `${process.cwd()}/`;
+
+// The built site, as the host serves it: a folder is its index.html.
+const types = {
+  '.html': 'text/html',
+  '.js': 'text/javascript',
+  '.css': 'text/css',
+  '.json': 'application/json',
+  '.svg': 'image/svg+xml',
+  '.jpg': 'image/jpeg',
+  '.png': 'image/png',
+  '.webp': 'image/webp',
+  '.webmanifest': 'application/manifest+json',
+};
+
+/** Serves the built site in `dist`; gives the server and its address. */
+export async function serveBuilt(dist) {
+  const server = createServer((req, res) => {
+    let path = join(dist, decodeURIComponent(new URL(req.url, 'http://x').pathname));
+    if (existsSync(path) && statSync(path).isDirectory()) path = join(path, 'index.html');
+    if (!existsSync(path)) return res.writeHead(404).end();
+    res.writeHead(200, { 'content-type': types[extname(path)] ?? 'application/octet-stream' }).end(readFileSync(path));
+  });
+  await new Promise((done) => server.listen(0, '127.0.0.1', done));
+  return { server, site: `http://127.0.0.1:${server.address().port}` };
+}
+
+// GitHub, as the site's Worker answers the editor (packages/editor/worker/editor-github.js), answered from the files on disk: who is
+// signed in (with write access), the commit the branch is at, the files in the folders and at the paths asked for, and
+// their texts (a file's blob id is "blob:<path>"). A question about anything else (the versions of a file, what was
+// deleted) gets no data, as for a file without history. `texts`: files with other texts than on disk, by their paths.
+const TEXT = /\.(md|mdx|jsonc?|ya?ml|txt|ts|js|mjs|css|astro|svg)$/;
+const listed = (path, texts) => ({ path, oid: `blob:${path}`, binary: !(path in texts) && !TEXT.test(path) });
+function filesIn(dir, depth, texts) {
+  if (!existsSync(join(ROOT, dir)) || !statSync(join(ROOT, dir)).isDirectory()) return [];
+  const files = readdirSync(join(ROOT, dir), { withFileTypes: true }).flatMap((d) => {
+    const path = posix.join(dir, d.name);
+    if (d.isDirectory()) return depth > 1 ? filesIn(path, depth - 1, texts) : [];
+    return [listed(path, texts)];
+  });
+  // The files given that are not on disk, in their folder.
+  const more = Object.keys(texts)
+    .filter((path) => posix.dirname(path) === dir && !files.some((f) => f.path === path))
+    .map((path) => listed(path, texts));
+  return [...files, ...more];
+}
+function answer(query, texts) {
+  const repository = { ref: { target: { oid: 'head' } }, viewerPermission: 'ADMIN' };
+  for (const [, key, path] of query.matchAll(/(f\d+): object\(expression: "[^:"]+:([^"]+)"\)/g)) {
+    const full = join(ROOT, path);
+    if (path in texts) repository[key] = { oid: `blob:${path}`, text: texts[path] };
+    else if (!existsSync(full) || statSync(full).isDirectory()) repository[key] = null;
+    else repository[key] = { oid: `blob:${path}`, text: TEXT.test(path) ? readFileSync(full, 'utf8') : null };
+  }
+  return { data: { viewer: { login: 'editor-screens', name: 'Anna Jensen' }, repository } };
+}
+function workerAnswer(route, body, texts) {
+  if (route === 'graphql') return answer(body.query ?? '', texts);
+  if (route === 'head') return { commit: 'head', tree: 'root' };
+  if (route === 'files')
+    return {
+      commit: 'head',
+      tree: 'root',
+      folders: (body.folders ?? []).map((dir) => filesIn(dir, body.depth ?? 3, texts)),
+      paths: (body.paths ?? []).map((path) =>
+        path in texts || (existsSync(join(ROOT, path)) && statSync(join(ROOT, path)).isFile()) ? listed(path, texts) : null,
+      ),
+    };
+  if (route === 'trees') return { trees: (body.at ?? []).map(() => null) };
+  if (route === 'texts') {
+    const paths = (body.oids ?? []).map((oid) => oid.replace(/^blob:/, ''));
+    return { texts: Object.fromEntries(paths.map((path) => [`blob:${path}`, texts[path] ?? readFileSync(join(ROOT, path), 'utf8')])) };
+  }
+  return null;
+}
+
+// The app store, as the site's Worker passes it on (packages/editor/worker/store.js), made up: one app and one theme in
+// the catalog's shape, and no file by any id.
+const STORE_CATALOG = {
+  apps: [
+    {
+      id: 'sample-app',
+      version: '1.0.0',
+      api: APP_API,
+      label: 'Sample app',
+      publisher: 'Example Studio',
+      icon: 'star',
+      hint: 'A made-up app for the checks.',
+      adds: { blocks: [], lists: [], kinds: [] },
+      files: [{ path: 'index.ts', oid: '0'.repeat(40) }],
+    },
+  ],
+  themes: [
+    {
+      id: 'sample-theme',
+      version: '1.0.0',
+      api: THEME_API,
+      name: 'Sample theme',
+      author: 'Example Studio',
+      icon: 'palette',
+      files: [{ path: 'theme.json', oid: '1'.repeat(40) }],
+    },
+  ],
+};
+
+/** Opens the editor (/editor/) of the site at `site` in `page`, signed in, with GitHub answered from the files on disk
+ * (`texts`: some with other texts), and waits until it has loaded the site. */
+export async function openEditor(page, site, texts = {}) {
+  // R2 caching under "Avanceret": Cloudflare has the bucket (packages/editor/worker/r2-status.js).
+  await page.route(`${site}/api/r2?**`, (r) =>
+    r.fulfill({ contentType: 'application/json', body: JSON.stringify({ bound: false, bucket: 'ready' }) }),
+  );
+  await page.route(`${site}/api/store/**`, (r) =>
+    new URL(r.request().url()).pathname === '/api/store/catalog'
+      ? r.fulfill({ contentType: 'application/json', body: JSON.stringify(STORE_CATALOG) })
+      : r.fulfill({ status: 404 }),
+  );
+  await page.route(`${site}/api/github/**`, (r) => {
+    const route = new URL(r.request().url()).pathname.slice('/api/github/'.length);
+    const found = workerAnswer(route, JSON.parse(r.request().postData() || '{}'), texts);
+    return found ? r.fulfill({ contentType: 'application/json', body: JSON.stringify(found) }) : r.fulfill({ status: 404 });
+  });
+  await page.goto(`${site}/editor/`);
+  // The editor has loaded the site when the start screen has its links.
+  await page.waitForFunction(() => document.querySelectorAll('a[href^="#"]').length > 3, null, { timeout: 60_000 });
+}

package/scripts/check-consent.mjs

@@ -1,113 +1,113 @@
-// Checks the consent log (packages/editor/worker/consent.js): the Worker's own code with D1 played by Node's SQLite (node:sqlite) and
-// GitHub's answer about a sign-in played here. An answer from the site's own page is kept with the build's commit;
-// one from another site, with a wrong consent id or with a category the banner does not have is not; only someone
-// who can save the site reads, saves as CSV or deletes them; the hourly clean-up deletes those older than two years,
-// and without the binding nothing is kept. Nothing goes to GitHub or Cloudflare. Run: npm run check:worker
-import { DatabaseSync } from 'node:sqlite';
-import { workerModules } from './worker-modules.mjs';
-
-const [{ forgetOldConsents, handleConsent, KEEP_DAYS }] = await workerModules('consent.js');
-
-const problems = [];
-const expect = (ok, what) => ok || problems.push(what);
-
-/** D1, as much of it as the Worker uses, on an SQLite database in memory. */
-function d1() {
-  const db = new DatabaseSync(':memory:');
-  const statement = (sql, args = []) => ({
-    bind: (...values) => statement(sql, values),
-    run: async () => ({ meta: { changes: Number(db.prepare(sql).run(...args).changes) } }),
-    all: async () => ({ results: db.prepare(sql).all(...args) }),
-    first: async (column) => db.prepare(sql).get(...args)?.[column] ?? null,
-  });
-  return { db, prepare: (sql) => statement(sql), batch: async (list) => Promise.all(list.map((s) => s.run())) };
-}
-
-// GitHub: the token "editor" may save the site, "guest" may only read it.
-globalThis.fetch = async (url, init) => {
-  const token = init?.headers?.authorization?.replace('Bearer ', '');
-  if (!String(url).startsWith('https://api.github.com/')) return new Response(null, { status: 404 });
-  if (token === 'editor') return Response.json({ permissions: { pull: true, push: true } });
-  if (token === 'guest') return Response.json({ permissions: { pull: true, push: false } });
-  return new Response(null, { status: 401 });
-};
-
-const SITE = 'https://site.example';
-const COMMIT = 'abc123';
-const ASSETS = { fetch: async () => Response.json({ commit: COMMIT }) };
-const ID = '0f8fad5b-d9cb-469f-a165-70867728950e';
-const OTHER = '7c9e6679-7425-40de-944b-e07fc1f90ae7';
-
-const visitor = (body, origin = SITE) =>
-  new Request(`${SITE}/api/consent`, { method: 'POST', headers: { origin, 'content-type': 'text/plain' }, body: JSON.stringify(body) });
-const editor = (token, path = '', init = {}) =>
-  new Request(`${SITE}/api/consent${path}`, {
-    ...init,
-    headers: { cookie: `editor_session=${token}`, 'sec-fetch-site': 'same-origin', ...init.headers },
-  });
-
-const store = d1();
-const env = { CONSENT: store, ASSETS };
-
-// What a visitor sends.
-const sent = async (body, origin) => (await handleConsent(visitor(body, origin), env)).status;
-expect((await sent({ id: ID, choices: { statistics: true, marketing: false } })) === 204, 'et svar fra sitet blev ikke gemt');
-expect((await sent({ id: OTHER, choices: { statistics: false } })) === 204, 'et andet svar fra sitet blev ikke gemt');
-expect(
-  (await sent({ id: ID, choices: { statistics: true } }, 'https://other.example')) === 403,
-  'et svar fra en anden side blev taget imod',
-);
-expect((await sent({ id: 'not-an-id', choices: { statistics: true } })) === 400, 'et svar med et forkert id blev taget imod');
-expect((await sent({ id: ID, choices: { necessary: true } })) === 400, 'et svar om nødvendige cookies blev taget imod');
-expect((await sent({ id: ID, choices: { statistics: 'yes' } })) === 400, 'et svar, der ikke er ja eller nej, blev taget imod');
-expect((await sent({ id: ID, choices: {} })) === 400, 'et svar uden kategorier blev taget imod');
-const kept = store.db.prepare('SELECT * FROM consents ORDER BY row').all();
-expect(kept.length === 2, `der blev gemt ${kept.length} svar, ikke 2`);
-expect(kept[0]?.version === COMMIT, `svaret blev gemt med versionen ${kept[0]?.version}, ikke ${COMMIT}`);
-expect(
-  !JSON.stringify(kept).includes('origin') && Object.keys(kept[0] ?? {}).join() === 'row,id,at,choices,version',
-  'der blev gemt mere end svaret',
-);
-
-// Who reads them.
-expect((await handleConsent(editor('guest'), env)).status === 403, 'en, der ikke kan gemme sitet, kunne læse samtykkerne');
-expect((await handleConsent(editor('nobody'), env)).status === 403, 'en uden login kunne læse samtykkerne');
-const listed = await (await handleConsent(editor('editor'), env)).json();
-expect(listed.total === 2 && listed.entries.length === 2, `listen havde ${listed.entries?.length} af ${listed.total} svar, ikke 2`);
-expect(listed.entries.find((e) => e.id === ID)?.choices.statistics === true, 'listen gav ikke svaret, som det blev givet');
-const found = await (await handleConsent(editor('editor', `?q=${ID.slice(0, 8)}`), env)).json();
-expect(found.entries.length === 1 && found.entries[0].id === ID, 'søgningen på et id fandt ikke kun det id');
-
-// As a file.
-const file = await handleConsent(editor('editor', '?format=csv'), env);
-const lines = (await file.text()).trim().split('\r\n');
-expect(file.headers.get('content-disposition')?.startsWith('attachment'), 'CSV-filen hentes ikke som en fil');
-expect(lines[0] === '"id","at","statistics","marketing","version"', `CSV-filens første linje er ${lines[0]}`);
-expect(lines.length === 3, `CSV-filen har ${lines.length - 1} svar, ikke 2`);
-
-// Deleted, when a visitor asks.
-const removed = await handleConsent(editor('editor', '', { method: 'DELETE', body: JSON.stringify({ id: OTHER }) }), env);
-expect((await removed.json()).deleted === 1, 'svaret blev ikke slettet');
-expect(
-  (await handleConsent(editor('guest', '', { method: 'DELETE', body: JSON.stringify({ id: ID }) }), env)).status === 403,
-  'en, der ikke kan gemme sitet, kunne slette et svar',
-);
-
-// Those older than two years are deleted each hour; the others stay.
-const old = new Date(Date.now() - (KEEP_DAYS + 1) * 24 * 60 * 60 * 1000).toISOString();
-store.db.prepare('INSERT INTO consents (id, at, choices, version) VALUES (?, ?, ?, ?)').run(OTHER, old, '{"statistics":true}', COMMIT);
-await forgetOldConsents(env);
-const left = store.db.prepare('SELECT id FROM consents').all();
-expect(left.length === 1 && left[0].id === ID, `efter oprydningen er der ${left.length} svar, ikke kun det nye`);
-
-// Without the binding (a preview of a branch) nothing is kept, and the editor is told so.
-const none = { ASSETS };
-expect((await handleConsent(visitor({ id: ID, choices: { statistics: true } }), none)).status === 204, 'et svar uden D1 gav en fejl');
-expect((await handleConsent(editor('editor'), none)).status === 503, 'editoren fik ikke at vide, at der ikke gemmes samtykker');
-await forgetOldConsents(none);
-
-if (problems.length) {
-  console.error(`${problems.length} fejl i samtykkeloggen:\n${problems.join('\n')}`);
-  process.exit(1);
-}
-console.log('Samtykkeloggen virker: svarene gemmes med sitets version, kun editoren kan læse, hente og slette dem, og gamle slettes.');
+// Checks the consent log (packages/editor/worker/consent.js): the Worker's own code with D1 played by Node's SQLite (node:sqlite) and
+// GitHub's answer about a sign-in played here. An answer from the site's own page is kept with the build's commit;
+// one from another site, with a wrong consent id or with a category the banner does not have is not; only someone
+// who can save the site reads, saves as CSV or deletes them; the hourly clean-up deletes those older than two years,
+// and without the binding nothing is kept. Nothing goes to GitHub or Cloudflare. Run: npm run check:worker
+import { DatabaseSync } from 'node:sqlite';
+import { workerModules } from './worker-modules.mjs';
+
+const [{ forgetOldConsents, handleConsent, KEEP_DAYS }] = await workerModules('consent.js');
+
+const problems = [];
+const expect = (ok, what) => ok || problems.push(what);
+
+/** D1, as much of it as the Worker uses, on an SQLite database in memory. */
+function d1() {
+  const db = new DatabaseSync(':memory:');
+  const statement = (sql, args = []) => ({
+    bind: (...values) => statement(sql, values),
+    run: async () => ({ meta: { changes: Number(db.prepare(sql).run(...args).changes) } }),
+    all: async () => ({ results: db.prepare(sql).all(...args) }),
+    first: async (column) => db.prepare(sql).get(...args)?.[column] ?? null,
+  });
+  return { db, prepare: (sql) => statement(sql), batch: async (list) => Promise.all(list.map((s) => s.run())) };
+}
+
+// GitHub: the token "editor" may save the site, "guest" may only read it.
+globalThis.fetch = async (url, init) => {
+  const token = init?.headers?.authorization?.replace('Bearer ', '');
+  if (!String(url).startsWith('https://api.github.com/')) return new Response(null, { status: 404 });
+  if (token === 'editor') return Response.json({ permissions: { pull: true, push: true } });
+  if (token === 'guest') return Response.json({ permissions: { pull: true, push: false } });
+  return new Response(null, { status: 401 });
+};
+
+const SITE = 'https://site.example';
+const COMMIT = 'abc123';
+const ASSETS = { fetch: async () => Response.json({ commit: COMMIT }) };
+const ID = '0f8fad5b-d9cb-469f-a165-70867728950e';
+const OTHER = '7c9e6679-7425-40de-944b-e07fc1f90ae7';
+
+const visitor = (body, origin = SITE) =>
+  new Request(`${SITE}/api/consent`, { method: 'POST', headers: { origin, 'content-type': 'text/plain' }, body: JSON.stringify(body) });
+const editor = (token, path = '', init = {}) =>
+  new Request(`${SITE}/api/consent${path}`, {
+    ...init,
+    headers: { cookie: `editor_session=${token}`, 'sec-fetch-site': 'same-origin', ...init.headers },
+  });
+
+const store = d1();
+const env = { CONSENT: store, ASSETS };
+
+// What a visitor sends.
+const sent = async (body, origin) => (await handleConsent(visitor(body, origin), env)).status;
+expect((await sent({ id: ID, choices: { statistics: true, marketing: false } })) === 204, 'et svar fra sitet blev ikke gemt');
+expect((await sent({ id: OTHER, choices: { statistics: false } })) === 204, 'et andet svar fra sitet blev ikke gemt');
+expect(
+  (await sent({ id: ID, choices: { statistics: true } }, 'https://other.example')) === 403,
+  'et svar fra en anden side blev taget imod',
+);
+expect((await sent({ id: 'not-an-id', choices: { statistics: true } })) === 400, 'et svar med et forkert id blev taget imod');
+expect((await sent({ id: ID, choices: { necessary: true } })) === 400, 'et svar om nødvendige cookies blev taget imod');
+expect((await sent({ id: ID, choices: { statistics: 'yes' } })) === 400, 'et svar, der ikke er ja eller nej, blev taget imod');
+expect((await sent({ id: ID, choices: {} })) === 400, 'et svar uden kategorier blev taget imod');
+const kept = store.db.prepare('SELECT * FROM consents ORDER BY row').all();
+expect(kept.length === 2, `der blev gemt ${kept.length} svar, ikke 2`);
+expect(kept[0]?.version === COMMIT, `svaret blev gemt med versionen ${kept[0]?.version}, ikke ${COMMIT}`);
+expect(
+  !JSON.stringify(kept).includes('origin') && Object.keys(kept[0] ?? {}).join() === 'row,id,at,choices,version',
+  'der blev gemt mere end svaret',
+);
+
+// Who reads them.
+expect((await handleConsent(editor('guest'), env)).status === 403, 'en, der ikke kan gemme sitet, kunne læse samtykkerne');
+expect((await handleConsent(editor('nobody'), env)).status === 403, 'en uden login kunne læse samtykkerne');
+const listed = await (await handleConsent(editor('editor'), env)).json();
+expect(listed.total === 2 && listed.entries.length === 2, `listen havde ${listed.entries?.length} af ${listed.total} svar, ikke 2`);
+expect(listed.entries.find((e) => e.id === ID)?.choices.statistics === true, 'listen gav ikke svaret, som det blev givet');
+const found = await (await handleConsent(editor('editor', `?q=${ID.slice(0, 8)}`), env)).json();
+expect(found.entries.length === 1 && found.entries[0].id === ID, 'søgningen på et id fandt ikke kun det id');
+
+// As a file.
+const file = await handleConsent(editor('editor', '?format=csv'), env);
+const lines = (await file.text()).trim().split('\r\n');
+expect(file.headers.get('content-disposition')?.startsWith('attachment'), 'CSV-filen hentes ikke som en fil');
+expect(lines[0] === '"id","at","statistics","marketing","version"', `CSV-filens første linje er ${lines[0]}`);
+expect(lines.length === 3, `CSV-filen har ${lines.length - 1} svar, ikke 2`);
+
+// Deleted, when a visitor asks.
+const removed = await handleConsent(editor('editor', '', { method: 'DELETE', body: JSON.stringify({ id: OTHER }) }), env);
+expect((await removed.json()).deleted === 1, 'svaret blev ikke slettet');
+expect(
+  (await handleConsent(editor('guest', '', { method: 'DELETE', body: JSON.stringify({ id: ID }) }), env)).status === 403,
+  'en, der ikke kan gemme sitet, kunne slette et svar',
+);
+
+// Those older than two years are deleted each hour; the others stay.
+const old = new Date(Date.now() - (KEEP_DAYS + 1) * 24 * 60 * 60 * 1000).toISOString();
+store.db.prepare('INSERT INTO consents (id, at, choices, version) VALUES (?, ?, ?, ?)').run(OTHER, old, '{"statistics":true}', COMMIT);
+await forgetOldConsents(env);
+const left = store.db.prepare('SELECT id FROM consents').all();
+expect(left.length === 1 && left[0].id === ID, `efter oprydningen er der ${left.length} svar, ikke kun det nye`);
+
+// Without the binding (a preview of a branch) nothing is kept, and the editor is told so.
+const none = { ASSETS };
+expect((await handleConsent(visitor({ id: ID, choices: { statistics: true } }), none)).status === 204, 'et svar uden D1 gav en fejl');
+expect((await handleConsent(editor('editor'), none)).status === 503, 'editoren fik ikke at vide, at der ikke gemmes samtykker');
+await forgetOldConsents(none);
+
+if (problems.length) {
+  console.error(`${problems.length} fejl i samtykkeloggen:\n${problems.join('\n')}`);
+  process.exit(1);
+}
+console.log('Samtykkeloggen virker: svarene gemmes med sitets version, kun editoren kan læse, hente og slette dem, og gamle slettes.');