@rathnasgala/theme 0.0.1 → 0.0.5

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@rathnasgala/theme",
-  "version": "0.0.1",
+  "version": "0.0.5",
   "description": "Managed Gala static-site theme payload",
   "license": "MIT",
   "repository": {
@@ -15,6 +15,6 @@
     "provenance": true
   },
   "engines": {
-    "node": ">=18"
+    "node": ">=20"
   }
 }

package/payload/.gala/managed-files.json

@@ -2,7 +2,7 @@
   "schemaVersion": 1,
   "themePackage": {
     "name": "@rathnasgala/theme",
-    "version": "0.0.1",
+    "version": "0.0.5",
     "availableDesignThemes": [
       "editorial"
     ],
@@ -11,33 +11,36 @@
   "files": {
     ".gitignore": "b5fa24e10155097a0d372926fd2e59e6072e7cc2cb6399bbfb4beb8b33ea315b",
     ".gala/publish.yml.template": "73080241d89bd09964b797a8bcc8e18471412e11bc873efad76305b60f497d08",
-    "eleventy.config.js": "0b8c753a28afecdf733ea650cab5fd0691a87f996bc186820c5f949003891cc9",
-    "package.json": "86e1e9922fda15122fe4eb5325d30d145cbdb2877e24307914702d0b64cf1ce9",
-    "package-lock.json": "92372b1bfbdeedf53a8942b3a4e774da3f708ebbf177d92f2b6280e83981df67",
+    "eleventy.config.js": "24f25bd69108f17c80d85807f1bbf6851a44b77dfdddc8d8e234b85462cb2e04",
+    "package.json": "cccea6fc4edf4b4b653bd5cfc0901ab20dd92ac8975408fb01ae3670005da641",
+    "package-lock.json": "c97a6a2f794aef083a39a8d2628eccc4a3c484e1c6225899b77ec1fb7c466d9e",
     "lib/build-manifest.js": "88949f0112d683ca809bb67ca969e15634792423559a67bc79a534cd807e5535",
-    "lib/site-config.js": "9eebf302e1ee5e7fa7b41e50cd0540cf71f917fda25c511fe1db3b035359b091",
+    "lib/site-config.js": "83aa8ea678e06ae0e85096c841a2d6084ee23c7f236191ea426bbeda99567d16",
+    "lib/performance-budget.js": "124c43494c092a956accec46d1463ea063ed73363d0db01f24aaea987459d683",
     "lib/engagement-snapshot.js": "298c11b1ab135a3a98a4e31b6320ab60dfd7fda6a9d9053df37d86282a5a6687",
     "lib/publication-state.js": "1b59c29a18bbb1193bddea898dac3a4fb832c7bc4751263be086f3d64392dea0",
-    "lib/render-markdown.js": "3c493e50264711ee537bf34db826ee39780a6caad5c82174919f48e18fc76ae8",
-    "lib/seo.js": "609ae1c3a1b484dd7c37592d672d13c9aad8005471e2223caaabd2a8e800d194",
+    "lib/render-markdown.js": "c7dac7e3599af445830825e76e285166e85835163caa8bef2c3a970a307ac750",
+    "lib/seo.js": "107de8804931945b8e73894877fc394d6b535a9d0d969a4ba5b68f2e136e0a17",
+    "lib/share-targets.js": "5820466526ab2dcd2cd1689c163117c34df0a675dfa92e28e853f690423299b3",
+    "lib/provider-fixtures/share-intents.v1.json": "2535cee63962f38691cb7b8c47d2414bf9cacbcee5cadba0bec0172e7b3961e4",
     "src/404.njk": "be0d44370ac5402156aaf3d32ea581057bc61ec94c1a5f92bb809733af7a8a20",
-    "src/_includes/layouts/base.njk": "4def165838c1314c5d7b3759830d268ad48ee6a966dafe492ae7b0bb5018a7c7",
-    "src/_includes/layouts/post.njk": "ced9783eae1b4ca51b950edf19224cd4022294775c9dcc78964b65e504e9d497",
-    "src/_includes/components/ui.njk": "774a82eade4fa21b9203f6455995de4a274eb0b2a452a54288f5fc4b5c16f233",
+    "src/_includes/layouts/base.njk": "47ad79e1ce9520caacb4e564f3257335efc8889c242b2064ce2ed27c98d2cfcc",
+    "src/_includes/layouts/post.njk": "1accd2832064ad19ee7bf18daf5fa1e60569f32c9b7a547934a6361f747d7eb7",
+    "src/_includes/components/ui.njk": "3a0eeb0f7b8f0ea46ed39d4c53b810a33b997766cbae540ef063c8ecdf641809",
     "src/_data/buildManifest.js": "628163305984e0d3537e27b0d4050f5ba5ead12a834878266d2ce8004ffe1b1e",
     "src/_data/engagementSnapshot.js": "9217dacebfaf008f7a0ad67ff4e8d1fa8fba609a9dc7e3430c78c5b32024da0e",
     "src/_data/feedLinks.js": "06c93352ebd888acb431a1c9a8be6ecff757895468e9f2d336761038751c2d5e",
     "src/_data/languages.js": "1358748f7fa2f74406d3295a030827d6229a53e94da72cf712e719d7a356aeac",
     "src/_data/site.js": "d9c001f4cc12a34027dd92303530b11b5402d47613459bb997e22c4bcbea326d",
-    "src/assets/theme-mode.js": "67cfd8f950ee002d9b6364b7c90db0ad30341d78ac331b649d884ac00a3d6089",
-    "src/assets/interactions.js": "1f68c7e80208c43a40390356009d6101f76f56200f23c654e19ddd253b10b677",
+    "src/assets/theme-mode.js": "3797c84dbaa090b5b21427a31928b5dd97f13d04d99833f5e1e74c6b50e01dcc",
+    "src/assets/interactions.js": "611e54376f03d9cd8abd55ef4fcbebe917a174c673dd15fcb3c4073cc6e79836",
     "src/assets/preferences.js": "789127bee013ed6a1bbf8cefd7b9109291c16220e7a6e09314e3c93c54731d1d",
-    "src/assets/search.js": "5571697e2a5377c465e5446f77f2225948a5c0bdc58d0be44b579341e756909f",
-    "src/assets/theme.css": "c1ea914cd4a4a23afce8265548feafcb730254c993fe55853779915491356a5c",
+    "src/assets/search.js": "df425f0239277792ad39f2138bc89cb66cc4ecda5ed59042d46abc2f05372088",
+    "src/assets/theme.css": "8cad6e82e0017e7b62a5355f0386d854fb62e774c520b3ce25aaea5b19b4fa61",
     "src/index.njk": "5c313f0fcdad3ddbfb79376bc9671b3f37539ef70c14bdbbd26d6e2e6de250e8",
     "src/feed.11ty.js": "009bd2384e08e02a9405683bab1653bab3aeaec16accb0fd01ba69b24c777da9",
     "src/languages.11ty.js": "399559199c65570d7d5efd88e20254838e316f81c06d7b28ec34990e963db915",
-    "src/posts.11ty.js": "2967f9e17fa7fcec5bf44387ab5bdee7bf8b8c85cfdc589f2105829995fc1d0e",
+    "src/posts.11ty.js": "2f9d738075eab68961d7c8fe9286b61f12c2c677f7dad9d4858927ef51b66ff8",
     "src/redirects.11ty.js": "3c163246a59f5364861db6a6f05ae88afc938a5379d86cf42776d8d49b0031f3",
     "src/search-index.11ty.js": "700dc2a2be0ef20de3a828a4612fcf7a082691eade29c6e1d75f09c24b6c6024",
     "src/search.njk": "63f2e8aeebb63c90da2e375eece639ce096cad1eff7f28628cafc46faf7ceee6",

package/payload/eleventy.config.js

@@ -1,5 +1,7 @@
 import { markdownLibrary } from './lib/render-markdown.js';
 import { readBuildManifest } from './lib/build-manifest.js';
+import { loadSiteConfiguration } from './lib/site-config.js';
+import { enforcePerformanceBudgets } from './lib/performance-budget.js';
 import { lstat, realpath } from 'node:fs/promises';
 import path from 'node:path';
 
@@ -20,7 +22,7 @@ async function verifiedMediaSource(postSource, mediaSource) {
 }
 
 export default async function (eleventyConfig) {
-  const manifest = await readBuildManifest();
+  const [manifest, site] = await Promise.all([readBuildManifest(), loadSiteConfiguration()]);
   eleventyConfig.setLibrary('md', markdownLibrary);
   eleventyConfig.addPassthroughCopy({ static: '/' });
   eleventyConfig.addPassthroughCopy({ 'src/assets': 'assets' });
@@ -34,6 +36,12 @@ export default async function (eleventyConfig) {
   eleventyConfig.addCollection('posts', (collectionApi) =>
     collectionApi.getAll().filter((item) => item.data.post?.publicationState === 'published')
   );
+  eleventyConfig.on('eleventy.after', async () => {
+    await enforcePerformanceBudgets({
+      outputDirectory: path.resolve('_site'),
+      budgets: site.performance.budgets
+    });
+  });
 
   return {
     dir: {
@@ -42,6 +50,6 @@ export default async function (eleventyConfig) {
       includes: '_includes',
       data: '_data'
     },
-    pathPrefix: process.env.GALA_PATH_PREFIX ?? '/'
+    pathPrefix: site.hosting.pathPrefix === '' ? '/' : site.hosting.pathPrefix
   };
 }

package/payload/lib/performance-budget.js

@@ -0,0 +1,39 @@
+import { readdir, stat } from 'node:fs/promises';
+import path from 'node:path';
+
+async function filesBelow(directory) {
+  const entries = await readdir(directory, { withFileTypes: true });
+  const nested = await Promise.all(entries.map(async (entry) => {
+    const file = path.join(directory, entry.name);
+    return entry.isDirectory() ? filesBelow(file) : entry.isFile() ? [file] : [];
+  }));
+  return nested.flat();
+}
+
+async function totalBytes(files) {
+  return (await Promise.all(files.map(async (file) => (await stat(file)).size)))
+    .reduce((total, size) => total + size, 0);
+}
+
+function assertWithin(actual, maximum, label) {
+  if (actual > maximum) {
+    throw new Error(`${label} performance budget exceeded: ${actual} bytes > ${maximum} bytes`);
+  }
+}
+
+export async function enforcePerformanceBudgets({ outputDirectory, budgets }) {
+  const output = path.resolve(outputDirectory);
+  const files = await filesBelow(output);
+  const managedAssets = files.filter((file) => path.dirname(file) === path.join(output, 'assets'));
+  const javascriptBytes = await totalBytes(managedAssets.filter((file) => file.endsWith('.js')));
+  const cssBytes = await totalBytes(managedAssets.filter((file) => file.endsWith('.css')));
+  assertWithin(javascriptBytes, budgets.managedJavaScriptBytes, 'Managed JavaScript');
+  assertWithin(cssBytes, budgets.managedCssBytes, 'Managed CSS');
+
+  for (const file of files.filter((candidate) => candidate.endsWith('.html'))) {
+    const bytes = (await stat(file)).size;
+    assertWithin(bytes, budgets.ordinaryHtmlBytes, path.relative(output, file));
+  }
+
+  return Object.freeze({ javascriptBytes, cssBytes });
+}

package/payload/lib/provider-fixtures/share-intents.v1.json

@@ -0,0 +1,13 @@
+{
+  "schemaVersion": 1,
+  "providers": {
+    "bluesky": { "source": "https://docs.bsky.app/docs/advanced-guides/intent-links", "verifiedOn": "2026-08-13", "status": "verified", "template": "https://bsky.app/intent/compose?text={text}" },
+    "x": { "source": "https://developer.x.com/en/docs/twitter-for-websites/tweet-button/guides/web-intent", "verifiedOn": "2026-08-13", "status": "verified", "template": "https://twitter.com/intent/tweet?text={text}&url={url}" },
+    "linkedin": { "source": "https://www.linkedin.com/help/linkedin/answer/a522735", "status": "blocked-public-intent-contract-unverified" },
+    "reddit": { "source": "https://www.reddit.com/dev/api/#POST_api_submit", "status": "blocked-public-intent-contract-unverified" },
+    "hacker-news": { "source": "https://news.ycombinator.com/bookmarklet.html", "verifiedOn": "2026-08-13", "status": "verified", "template": "https://news.ycombinator.com/submitlink?u={url}&t={title}" },
+    "whatsapp": { "source": "https://faq.whatsapp.com/5913398998672934", "status": "blocked-public-intent-contract-unverified" },
+    "email": { "source": "https://www.rfc-editor.org/rfc/rfc6068", "verifiedOn": "2026-08-13", "status": "verified", "template": "mailto:?subject={title}&body={text}" },
+    "mastodon": { "source": "https://docs.joinmastodon.org/user/external/#share", "verifiedOn": "2026-08-13", "status": "verified", "template": "https://{instance}/share?text={text}", "requiresInstance": true }
+  }
+}

package/payload/lib/render-markdown.js

@@ -1,6 +1,19 @@
 import MarkdownIt from 'markdown-it';
 import footnote from 'markdown-it-footnote';
 import sanitizeHtml from 'sanitize-html';
+import { createHighlighter } from 'shiki';
+import GithubSlugger from 'github-slugger';
+import { randomBytes } from 'node:crypto';
+
+const SHIKI_THEMES = Object.freeze({ light: 'github-light', dark: 'github-dark' });
+const SHIKI_LANGUAGES = Object.freeze([
+  'bash', 'css', 'html', 'java', 'javascript', 'json', 'jsx', 'markdown',
+  'shellscript', 'sql', 'typescript', 'tsx', 'yaml'
+]);
+const highlighter = await createHighlighter({
+  themes: Object.values(SHIKI_THEMES),
+  langs: SHIKI_LANGUAGES
+});
 
 const ADMONITION_TYPES = new Set(['NOTE', 'TIP', 'IMPORTANT', 'WARNING', 'CAUTION']);
 
@@ -38,9 +51,44 @@ function admonitions(markdown) {
   });
 }
 
+function headingAnchors(markdown) {
+  markdown.core.ruler.push('gala_heading_anchors', (state) => {
+    const slugger = new GithubSlugger();
+    const toc = [];
+    for (let index = 0; index < state.tokens.length - 1; index += 1) {
+      const open = state.tokens[index];
+      if (open.type !== 'heading_open') continue;
+      const inline = state.tokens[index + 1];
+      const id = slugger.slug(inline.content);
+      open.attrSet('id', id);
+      if (open.tag === 'h2' || open.tag === 'h3') toc.push({ id, text: inline.content });
+    }
+    state.env.galaToc = toc.length >= 3 ? toc : [];
+  });
+}
+
 const markdown = new MarkdownIt({ html: true, linkify: true, typographer: false })
   .use(footnote)
-  .use(admonitions);
+  .use(admonitions)
+  .use(headingAnchors);
+
+const defaultFence = markdown.renderer.rules.fence.bind(markdown.renderer.rules);
+markdown.renderer.rules.fence = (tokens, index, options, environment, self) => {
+  const language = tokens[index].info.trim().split(/\s+/, 1)[0].toLowerCase();
+  if (!SHIKI_LANGUAGES.includes(language)) {
+    return defaultFence(tokens, index, options, environment, self);
+  }
+  const highlights = environment.galaHighlights ??= [];
+  const token = randomBytes(18).toString('hex');
+  highlights.push(highlighter.codeToHtml(tokens[index].content, {
+    lang: language,
+    themes: SHIKI_THEMES,
+    defaultColor: false
+  }));
+  const tokensByIndex = environment.galaHighlightTokens ??= [];
+  tokensByIndex.push(token);
+  return `<div class="gala-highlight-placeholder" data-highlight-token="${token}"></div>`;
+};
 
 const sanitizeOptions = {
   allowedTags: [
@@ -53,7 +101,13 @@ const sanitizeOptions = {
     a: ['href', 'title', 'rel'],
     aside: ['class', 'role'],
     code: ['class'],
-    div: ['class', 'id'],
+    div: ['class', 'id', 'data-highlight-token'],
+    h1: ['id'],
+    h2: ['id'],
+    h3: ['id'],
+    h4: ['id'],
+    h5: ['id'],
+    h6: ['id'],
     img: ['src', 'alt', 'title', 'width', 'height', 'loading', 'decoding'],
     li: ['id'],
     ol: ['class'],
@@ -67,6 +121,7 @@ const sanitizeOptions = {
       'admonition', 'admonition-note', 'admonition-tip', 'admonition-important',
       'admonition-warning', 'admonition-caution'
     ],
+    div: ['gala-highlight-placeholder'],
     code: [/^language-[a-z0-9_-]+$/],
     ol: ['footnotes-list'],
     span: ['footnote-backref'],
@@ -81,16 +136,40 @@ const sanitizeOptions = {
   enforceHtmlBoundary: true
 };
 
+function render(source, inline, suppliedEnvironment) {
+  const environment = suppliedEnvironment ?? {};
+  environment.galaHighlights = [];
+  environment.galaHighlightTokens = [];
+  const unsafe = inline
+    ? markdown.renderInline(source, environment)
+    : markdown.render(source, environment);
+  let safe = sanitizeHtml(unsafe, sanitizeOptions);
+  for (let index = 0; index < environment.galaHighlights.length; index += 1) {
+    safe = safe.replace(
+      `<div class="gala-highlight-placeholder" data-highlight-token="${environment.galaHighlightTokens[index]}"></div>`,
+      environment.galaHighlights[index]
+    );
+  }
+  return safe;
+}
+
 export function renderMarkdown(source) {
   if (typeof source !== 'string') throw new TypeError('Markdown source must be a string');
-  return sanitizeHtml(markdown.render(source), sanitizeOptions);
+  return render(source, false);
+}
+
+export function renderMarkdownDocument(source) {
+  if (typeof source !== 'string') throw new TypeError('Markdown source must be a string');
+  const environment = {};
+  const html = render(source, false, environment);
+  return Object.freeze({ html, tableOfContents: Object.freeze(environment.galaToc ?? []) });
 }
 
 export const markdownLibrary = Object.assign(Object.create(markdown), {
   render(source, environment) {
-    return sanitizeHtml(markdown.render(source, environment), sanitizeOptions);
+    return render(source, false, environment);
   },
   renderInline(source, environment) {
-    return sanitizeHtml(markdown.renderInline(source, environment), sanitizeOptions);
+    return render(source, true, environment);
   }
 });

package/payload/lib/seo.js

@@ -84,9 +84,19 @@ function urlPath(value, field) {
 }
 
 export function siteUrl({ canonicalBaseUrl, pathPrefix = '/', relativePath = '/' }) {
+  let suppliedBase;
+  try {
+    suppliedBase = new URL(canonicalBaseUrl);
+  } catch {
+    throw new TypeError('canonicalBaseUrl must be an absolute URL');
+  }
   const base = absoluteHttpsUrl(canonicalBaseUrl, 'canonicalBaseUrl');
+  if (base.pathname !== '/' || suppliedBase.search !== '' || suppliedBase.hash !== '') {
+    throw new TypeError('canonicalBaseUrl must be an origin only; put the URL path in pathPrefix');
+  }
+  const normalizedPrefix = pathPrefix === '' ? '/' : pathPrefix;
   const parts = [
-    ...urlPath(pathPrefix, 'pathPrefix'),
+    ...urlPath(normalizedPrefix, 'pathPrefix'),
     ...urlPath(relativePath, 'relativePath')
   ].map(encodeURIComponent);
   base.pathname = parts.length === 0

package/payload/lib/share-targets.js

@@ -0,0 +1,63 @@
+import { readFileSync } from 'node:fs';
+
+const fixture = JSON.parse(readFileSync(
+  new URL('./provider-fixtures/share-intents.v1.json', import.meta.url),
+  'utf8'
+));
+
+const LABELS = Object.freeze({
+  bluesky: 'Bluesky',
+  x: 'X',
+  'hacker-news': 'Hacker News',
+  email: 'Email',
+  mastodon: 'Mastodon'
+});
+
+export function resolveShareTargets({ configured, title, canonicalUrl, socialProfiles = {} }) {
+  if (!Array.isArray(configured)) throw new TypeError('sharing.targets must be an array');
+  if (typeof title !== 'string' || title.trim() === '') throw new TypeError('share title is required');
+  const canonical = requireHttpsUrl(canonicalUrl, 'canonical URL');
+  return configured.map((provider) => resolveProvider(provider, title, canonical, socialProfiles));
+}
+
+function resolveProvider(provider, title, canonical, socialProfiles) {
+  const contract = fixture.providers?.[provider];
+  if (contract?.status !== 'verified' || typeof contract.template !== 'string') {
+    throw new TypeError(`Share target ${provider} has no verified public intent contract`);
+  }
+  let instance = '';
+  if (contract.requiresInstance) {
+    const profile = requireHttpsUrl(socialProfiles.mastodon, 'sharing.socialProfiles.mastodon');
+    instance = profile.host;
+  }
+  const text = provider === 'bluesky' || provider === 'mastodon'
+    ? `${title}\n${canonical.href}`
+    : provider === 'email' ? canonical.href : title;
+  const replacements = {
+    text: encodeURIComponent(text),
+    title: encodeURIComponent(title),
+    url: encodeURIComponent(canonical.href),
+    instance
+  };
+  const rendered = contract.template.replace(/\{(text|title|url|instance)\}/g,
+    (placeholder, name) => replacements[name]);
+  if (/\{[^}]+\}/.test(rendered)) throw new TypeError(`Share target ${provider} fixture is incomplete`);
+  const destination = new URL(rendered);
+  if (!['https:', 'mailto:'].includes(destination.protocol)) {
+    throw new TypeError(`Share target ${provider} produced an unsafe URL`);
+  }
+  return Object.freeze({ provider, label: LABELS[provider], url: destination.href });
+}
+
+function requireHttpsUrl(value, field) {
+  let parsed;
+  try {
+    parsed = new URL(value);
+  } catch {
+    throw new TypeError(`${field} must be an absolute HTTPS URL`);
+  }
+  if (parsed.protocol !== 'https:' || parsed.username !== '' || parsed.password !== '') {
+    throw new TypeError(`${field} must be an absolute credential-free HTTPS URL`);
+  }
+  return parsed;
+}

package/payload/lib/site-config.js

@@ -2,6 +2,29 @@ import { lstat, readFile } from 'node:fs/promises';
 import path from 'node:path';
 import { parse } from 'yaml';
 
+const BUDGET_KEYS = Object.freeze([
+  'managedJavaScriptBytes',
+  'managedCssBytes',
+  'ordinaryHtmlBytes'
+]);
+
+export function validatePerformanceBudgets(value) {
+  if (value == null || Array.isArray(value) || typeof value !== 'object') {
+    throw new TypeError('performance.budgets must be a mapping');
+  }
+  const keys = Object.keys(value);
+  const unknown = keys.filter((key) => !BUDGET_KEYS.includes(key));
+  if (unknown.length > 0) {
+    throw new TypeError(`Unsupported performance budget: ${unknown.join(', ')}`);
+  }
+  for (const key of BUDGET_KEYS) {
+    if (!Number.isSafeInteger(value[key]) || value[key] <= 0) {
+      throw new TypeError(`performance.budgets.${key} must be a positive integer byte count`);
+    }
+  }
+  return Object.freeze(Object.fromEntries(BUDGET_KEYS.map((key) => [key, value[key]])));
+}
+
 export async function loadSiteConfiguration({
   root = process.cwd(),
   configPath = process.env.GALA_CONFIG_PATH ?? 'site.config.yml'
@@ -19,5 +42,7 @@ export async function loadSiteConfiguration({
   if (!metadata.isFile() || metadata.isSymbolicLink()) {
     throw new TypeError('site configuration must be a regular file');
   }
-  return parse(await readFile(file, 'utf8'));
+  const config = parse(await readFile(file, 'utf8'));
+  validatePerformanceBudgets(config?.performance?.budgets);
+  return config;
 }