@rigel-cms/rigel 0.1.0-beta.1 → 0.1.3-beta.1

package/README.md

@@ -4,6 +4,14 @@ A CMS for Astro sites. You edit the text, git keeps the history.
 
 `@rigel-cms/rigel` is a beta package and a work in progress. Expect bugs and breaking changes.
 
+## Collection validation
+
+New collection drafts initialize every configured field, including Rigel's automatic `description`, `metaTitle`, and `ogImage` strings. Existing content is never filled in automatically; unknown properties are preserved and missing optional fields remain allowed.
+
+Rigel validates configured collection field types and `required: true` on load and before local or GitHub saves. Required strings must contain non-whitespace text, required arrays must contain an item, and `false` is a valid required boolean. Dates use real `YYYY-MM-DD` calendar dates; optional dates may be empty. Tags are arrays of strings and references must select configured entries.
+
+Astro content schemas remain the host site's contract: Rigel does not discover or execute them. Align Rigel field types and requiredness with the host schema. For example, Astro's `z.string()` accepts an initialized empty description; `z.string().min(1)` also needs Rigel's `required: true`.
+
 ## License
 
 [Apache-2.0](LICENSE). Copyright 2026 [Alex Zappa](https://alex.zappa.dev/) ([FreshJuice](https://freshjuice.dev/)).

package/package.json

@@ -1,6 +1,10 @@
 {
   "name": "@rigel-cms/rigel",
-  "version": "0.1.0-beta.1",
+  "version": "0.1.3-beta.1",
+  "publishConfig": {
+    "access": "public",
+    "tag": "beta"
+  },
   "description": "Rigel CMS — the copy editor for Astro sites. Clients edit text, git keeps the history.",
   "author": {
     "name": "FreshJuice",
@@ -28,7 +32,8 @@
   "scripts": {
     "build": "pnpm typecheck",
     "test": "vitest run",
-    "typecheck": "tsc --noEmit"
+    "typecheck": "tsc --noEmit",
+    "publish:beta": "npm publish --access public --tag beta"
   },
   "exports": {
     ".": "./src/index.ts",

package/src/config.ts

@@ -3,6 +3,7 @@ import { validateSchema } from "./schema/validate";
 import type { Schema } from "./schema/types";
 import { validateSidebar, type SidebarEntry } from "./manifest/navigation";
 import { withSeoFields } from "./manifest/seo";
+import { previewBaseUrl } from "./preview-urls";
 
 export interface RigelConfig {
   copyDir: string;
@@ -41,6 +42,10 @@ export function parseConfig(options: Partial<RigelConfig> = {}): RigelConfig {
   const cfg = { ...DEFAULTS, ...options };
   if (cfg.demo === undefined) cfg.demo = true;
   if (typeof cfg.demo !== "boolean") throw new Error("rigel: demo must be boolean");
+  if (cfg.preview) {
+    cfg.preview = { ...cfg.preview };
+    for (const key of ["liveUrl", "draftUrl"] as const) if (cfg.preview[key] !== undefined) cfg.preview[key] = previewBaseUrl(cfg.preview[key]);
+  }
   if (cfg.mediaDir !== undefined && (typeof cfg.mediaDir !== "string" || !cfg.mediaDir.split("/").every(part => /^[a-zA-Z0-9_-][a-zA-Z0-9_. -]*$/.test(part)))) throw new Error("rigel: mediaDir must be a relative folder inside publicDir");
   if (cfg.backend === "github") {
     if (typeof cfg.repo !== "string" || !/^[a-zA-Z0-9](?:[a-zA-Z0-9-]*[a-zA-Z0-9])?\/[a-zA-Z0-9_.-]+$/.test(cfg.repo) || [".", ".."].includes(cfg.repo.split("/")[1])) throw new Error("rigel: github backend requires `repo: owner/name`");
@@ -82,6 +87,7 @@ export function parseConfig(options: Partial<RigelConfig> = {}): RigelConfig {
   if (cfg.collections) cfg.collections = cfg.collections.map(collection => ({ ...collection, fields: withSeoFields(collection.fields) }));
   for (const collection of cfg.collections ?? []) {
     for (const field of collection.fields) {
+      if (field.required !== undefined && typeof field.required !== "boolean") throw new Error(`rigel: ${collection.name}.${field.key}: required must be boolean`);
       if (field.type !== "reference") continue;
       if (field.multiple !== undefined && typeof field.multiple !== "boolean") throw new Error(`rigel: ${collection.name}.${field.key}: multiple must be boolean`);
       if ((field.to !== undefined ? 1 : 0) + (field.options !== undefined ? 1 : 0) !== 1) throw new Error(`rigel: ${collection.name}.${field.key}: reference requires either to or options`);

package/src/editor/App.svelte

@@ -15,6 +15,7 @@
   import SchemaPanel from "./lib/SchemaPanel.svelte";
   import { collectionPreviewValues, referenceLabel, referenceOptions } from "../manifest/references";
   import { isSeoField } from "../manifest/seo";
+  import { initialCollectionValues } from "../manifest/collections";
   import { slugify } from "./lib/slugify";
   import Icon from "./lib/Icon.svelte";
   import SidebarIcon from "./lib/SidebarIcon.svelte";
@@ -27,7 +28,7 @@
   import ActionDialog from "./lib/ActionDialog.svelte";
   import VisualEditor from "./lib/VisualEditor.svelte";
   import { newDocumentFromTemplate } from "../schema/paths";
-  import { previewPath } from "../preview";
+  import { previewUrl } from "../preview";
   import type { ContentDocument, Schema } from "../schema/types";
   import { buildSidebar, navigationKey, type Selection } from "../manifest/navigation";
   import { startGitHubLogin, checkGitHubAccess, type GitHubAccess } from "./lib/github-auth";
@@ -220,6 +221,8 @@
   let settings = $state(getSettings());
   let settingsError = $state("");
   const userName = $derived(githubMode ? githubAccess?.user.login ?? "GitHub user" : "Local user");
+  const userAvatar = $derived(githubMode && /^https:\/\/avatars\.githubusercontent\.com\//.test(githubAccess?.user.avatar_url ?? "") ? githubAccess!.user.avatar_url : "");
+  let failedAvatar = $state("");
   const userMode = $derived(githubMode ? `${manifest.github?.repo} · ${manifest.github?.branch}` : "Local mode");
   let content: HTMLDivElement;
   let contentWidth = $state(0);
@@ -369,10 +372,10 @@
     if (current?.kind === "document") map[current.id] = draft;
     return map;
   });
-  const previewDocPath = $derived.by(() => {
+  function documentPreview(mode: "live" | "draft") {
     if (sel?.kind !== "document" || newDocument?.id === sel.id) return null;
-    return previewPath(manifest.preview ?? {}, { kind: "document", type: sel.type, slug: sel.id.slice(sel.type.length + 1) });
-  });
+    return previewUrl(manifest.preview ?? {}, { kind: "document", type: sel.type, slug: sel.id.slice(sel.type.length + 1) }, mode);
+  }
   const standaloneDocument = $derived(sel?.kind === "document" && activeDocType?.shared === true);
   const visualSelection = $derived(sel?.kind === "post" || (sel?.kind === "document" && !standaloneDocument));
 
@@ -596,7 +599,7 @@
         const slug = slugify(title);
         if (!slug) throw new Error("Enter a title containing letters or numbers.");
         if (c.posts.some((p) => p.slug === slug)) throw new Error(`A post with slug "${slug}" already exists.`);
-        newEntry = { collection: c.name, post: { slug, frontmatter: { title, date: new Date().toISOString().slice(0, 10), author: "", draft: true, ...Object.fromEntries(c.fields.filter(field => field.type === "reference" && field.multiple).map(field => [field.key, []])) }, body: emptyBody() } };
+        newEntry = { collection: c.name, post: { slug, frontmatter: initialCollectionValues(c.fields, title), body: emptyBody() } };
         openSelection({ kind: "post", collection: c.name, slug });
       },
     };
@@ -626,6 +629,16 @@
 
 </script>
 
+{#snippet avatar()}
+  <span class="avatar">
+    {#if userAvatar && failedAvatar !== userAvatar}
+      <img src={userAvatar} alt="" width="36" height="36" referrerpolicy="no-referrer" onerror={() => { failedAvatar = userAvatar; }} />
+    {:else}
+      <Icon name="user" size={20} />
+    {/if}
+  </span>
+{/snippet}
+
 <svelte:window
   onresize={endPreviewResize}
   onblur={endPreviewResize}
@@ -651,31 +664,26 @@
       {#if loadError}<p class="connection-error" role="alert">{loadError}</p><button class="primary" onclick={loadBlueprint}>Retry loading</button>
       {:else}<p role="status">Loading the editor configuration…</p>{/if}
     {:else if manifest.github}
-      <p>Content repository <strong>{manifest.github.repo}</strong></p>
       {#if githubAccess}
         <p>Signed in as <strong>{githubAccess.user.login}</strong>.</p>
-        {#if githubAccess.status === "read-only"}
-          <p>Editing needs write access from both your account and the GitHub App. Ask an administrator to check repository permissions and the App installation, then check again.</p>
-        {:else if githubAccess.status === "installation-required"}
-          <p>Install or configure the Rigel GitHub App for this repository. On GitHub, choose your account or organization, select <strong>Only select repositories</strong>, and include <strong>{manifest.github.repo}</strong>.</p>
-          <p>If your organization requires approval, its administrator must approve the installation first.</p>
+        {#if githubAccess.status === "read-only" || githubAccess.status === "installation-required"}
+          <p>You don’t have editing access. Contact the website administrator.</p>
         {:else}
-          <p role="status">{connectionBusy ? "Loading the shared drafts workspace…" : "Repository access verified. Retry loading the drafts workspace."}</p>
+          <p role="status">{connectionBusy ? "Opening the editor…" : "Access confirmed. Try opening the editor again."}</p>
         {/if}
         {#if githubAccess.status !== "ready"}
-          <a id="github-install" class="primary" href={githubAccess.installUrl} target="_blank" rel="noopener noreferrer">Install / configure GitHub access</a>
-          <p>Keep this tab open. Return here after configuring access on GitHub.</p>
+          <a id="github-install" class="primary" href={githubAccess.installUrl} target="_blank" rel="noopener noreferrer">Manage GitHub access</a>
         {/if}
       {:else}
-        <p>Sign in, then choose which repositories the Rigel GitHub App may access. The editor opens only after GitHub confirms write access to this repository.</p>
+        <p>Sign in to edit this website.</p>
       {/if}
       <div class="connection-actions">
         {#if sessionExpiresAt && !tokenExpired}
-          <button id="github-check-access" class="primary" disabled={connectionBusy} onclick={recheckGitHub}>{connectionBusy ? "Checking access…" : githubAccess?.status === "ready" ? "Retry loading drafts" : "Check repository access"}</button>
+          <button id="github-check-access" class="primary" disabled={connectionBusy} onclick={recheckGitHub}>{connectionBusy ? "Checking access…" : githubAccess?.status === "ready" ? "Open editor" : "Check access"}</button>
         {/if}
         <button id="github-sign-in" class:primary={!sessionExpiresAt || tokenExpired} class:outlined={sessionExpiresAt > 0 && !tokenExpired} disabled={connectionBusy} onclick={connectGitHub}>{connectionBusy && !sessionExpiresAt ? "Signing in…" : sessionExpiresAt ? "Sign in again" : "Sign in with GitHub"}</button>
       </div>
-      <p class="connection-note">Save writes to <strong>{manifest.github.branch}</strong>, not <strong>{manifest.github.publishBranch}</strong>. Publishing is a separate pull request.</p>
+      <p class="connection-note">By continuing, you agree to the <a href="https://rigelcms.dev/terms" target="_blank" rel="noopener noreferrer">Terms of Use</a> and acknowledge the <a href="https://rigelcms.dev/privacy" target="_blank" rel="noopener noreferrer">Privacy Policy</a>.</p>
     {/if}
     {#if connectionError}<p class="connection-error" role="alert">{connectionError}</p>{/if}
   </main>
@@ -723,14 +731,14 @@
     <div class="aside-foot">
       <div class="user-menu-wrap">
         <button class="user-btn" aria-label={githubMode ? "GitHub user menu" : "Local user menu"} title={githubMode ? "GitHub user menu" : "Local user menu"} aria-haspopup="menu" aria-expanded={userOpen} onclick={() => (userOpen = !userOpen)}>
-          <span class="avatar"><Icon name="user" size={20} /></span>
+          {@render avatar()}
           <span class="user-details"><span class="uname">{userName}</span><small>{userMode}</small></span>
           <span class="user-menu-icon"><Icon name="dotsThreeOutlineVertical" size={18} /></span>
         </button>
         {#if userOpen}
           <div class="user-menu" role="menu">
             <div class="user-menu-head">
-              <span class="avatar"><Icon name="user" size={20} /></span>
+              {@render avatar()}
               <div class="user-details"><strong>{userName}</strong><small>{userMode}</small></div>
             </div>
             <div class="divider"></div>
@@ -876,7 +884,8 @@
           docType={activeDocType}
           values={draft}
           documents={draftDocuments}
-          previewPath={previewDocPath}
+          previewPath={documentPreview("draft")}
+          livePath={documentPreview("live")}
           creating={newDocument?.id === sel.id}
           devMode={settings.devMode}
           reloadToken={documentReload}
@@ -923,8 +932,8 @@
             body={bodyDraft}
             bodyInline={settings.userPref.editorExperience === "inline"}
             onbody={(value) => { bodyDraft = value; touch(); }}
-            previewPath={manifest.preview ? previewPath(manifest.preview, sel, !!newEntry) : null}
-            livePath={manifest.preview ? previewPath(manifest.preview, sel) : null}
+            previewPath={manifest.preview ? previewUrl(manifest.preview, sel, "draft", !!newEntry) : null}
+            livePath={manifest.preview ? previewUrl(manifest.preview, sel, "live") : null}
             creating={!!newEntry}
             devMode={settings.devMode}
             onchange={(next) => { draft = next; touch(); }}

package/src/editor/lib/PreviewFrame.svelte

@@ -0,0 +1,45 @@
+<script lang="ts">
+  import { untrack } from "svelte";
+  import { fetchPreview } from "./preview-frame";
+
+  let { url, title, frame = $bindable(), reloadToken = 0, onload, onloading, onerror }: {
+    url: string;
+    title: string;
+    frame?: HTMLIFrameElement;
+    reloadToken?: number;
+    onload: () => void;
+    onloading: () => void;
+    onerror: (message: string) => void;
+  } = $props();
+  let source = $state<{ src?: string; srcdoc?: string } | null>(null);
+
+  $effect(() => {
+    const target = new URL(url, location.href);
+    void reloadToken;
+    source = null;
+    untrack(onloading);
+    const controller = new AbortController();
+    if (target.origin === location.origin) source = { src: target.href };
+    else fetchPreview(target, controller.signal).then(srcdoc => {
+      if (!controller.signal.aborted) source = { srcdoc };
+    }).catch(cause => {
+      if (!controller.signal.aborted) onerror(cause instanceof Error ? cause.message : "Preview unavailable");
+    });
+    return () => controller.abort();
+  });
+
+  function ready() {
+    const doc = frame?.contentDocument;
+    if (!doc || (source?.src && new URL(doc.URL).pathname.replace(/\/$/, "") !== new URL(source.src).pathname.replace(/\/$/, ""))) {
+      onerror("The prepared page could not be loaded. Check its URL and framing headers.");
+      return;
+    }
+    onload();
+  }
+</script>
+
+{#if source}
+  {#key source}
+  <iframe bind:this={frame} {title} sandbox="allow-same-origin" referrerpolicy="no-referrer" src={source.src} srcdoc={source.srcdoc} onload={ready}></iframe>
+  {/key}
+{/if}

package/src/editor/lib/SitePreview.svelte

@@ -1,12 +1,13 @@
 <script lang="ts">
   import { untrack } from "svelte";
   import Icon from "./Icon.svelte";
-  import { patchPreview, previewPath, type PreviewConfig, type PreviewTarget } from "../../preview";
+  import { patchPreview, previewUrl, type PreviewConfig, type PreviewTarget } from "../../preview";
+  import PreviewFrame from "./PreviewFrame.svelte";
   let { target, config, values, body, isNew = false, devMode = false }: { target: PreviewTarget; config: PreviewConfig; values: Record<string, unknown>; body: "" | import("../../article-body").ArticleBody; isNew?: boolean; devMode?: boolean } = $props();
 
-  const livePath = $derived(previewPath(config, target));
+  const livePath = $derived(previewUrl(config, target, "live"));
   const key = $derived(`${target.kind}:${target.collection ?? ""}:${target.slug}`);
-  let frame: HTMLIFrameElement;
+  let frame: HTMLIFrameElement | undefined = $state();
   let loaded = $state(false);
   let error = $state("");
   let path = $state<string | null>(null);
@@ -14,7 +15,7 @@
     void key;
     loaded = false;
     error = "";
-    path = untrack(() => previewPath(config, target, isNew));
+    path = untrack(() => previewUrl(config, target, "draft", isNew));
   });
   function patch() {
     if (!loaded || !frame?.contentDocument) return;
@@ -22,9 +23,9 @@
   }
   function onload() {
     try {
-      const doc = frame.contentDocument;
+      const doc = frame?.contentDocument;
       doc?.addEventListener("contextmenu", event => { if (!devMode) event.preventDefault(); }, true);
-      if (!doc || new URL(doc.URL).pathname !== path) throw new Error("The prepared same-origin page could not be loaded.");
+      if (!doc) throw new Error("The prepared page could not be loaded.");
       if (!doc.querySelector('[data-rigel-text], [data-rigel-richtext], [data-rigel-image]')) throw new Error("This page has no prepared Rigel anchors.");
       doc.addEventListener("click", event => event.preventDefault(), true);
       doc.addEventListener("submit", event => event.preventDefault(), true);
@@ -42,7 +43,7 @@
   </div>
   {#if error}<p role="status" class="preview-error">{error}</p>{/if}
   {#if path}
-    {#key key}<iframe bind:this={frame} title="Live website draft preview" sandbox="allow-same-origin" referrerpolicy="no-referrer" src={path} {onload}></iframe>{/key}
+    {#key key}<PreviewFrame bind:frame url={path} title="Live website draft preview" {onload} onloading={() => { loaded = false; error = ""; }} onerror={(message) => { loaded = false; error = message; }} />{/key}
     <small>Prepared template · Scripts, navigation and forms disabled. Unanchored fields and lists are not previewed.</small>
   {:else}
     <p role="status">{target.kind === "menu" ? "Menu preview is not supported." : "No prepared preview URL is mapped to this content."}</p>

package/src/editor/lib/VisualEditor.svelte

@@ -8,6 +8,7 @@
   import SchemaPanel from "./SchemaPanel.svelte";
   import SidebarIcon from "./SidebarIcon.svelte";
   import Icon from "./Icon.svelte";
+  import PreviewFrame from "./PreviewFrame.svelte";
   import { fieldForPath, replaceAt, type SelectedField } from "./schema-edit";
   import type { ContentDocument, DocumentDef, Schema } from "../../schema/types";
 
@@ -338,7 +339,6 @@
       doc.addEventListener("mouseout", onOut, true);
       doc.addEventListener("submit", (event) => event.preventDefault(), true);
       doc.defaultView?.addEventListener("scroll", () => closeInline(), { passive: true });
-      if (previewPath && new URL(doc.URL).pathname.replace(/\/$/, "") !== previewPath.replace(/\/$/, "")) throw new Error("The prepared page could not be loaded.");
       if (!doc.querySelector(schema ? `[data-rigel-doc="${docId}"]` : "[data-rigel-text],[data-rigel-richtext],[data-rigel-image]")) throw new Error("This page isn’t set up for live editing. Changes won’t appear in this preview.");
       loaded = true;
       bodyAvailable = !schema && !!body && !!doc.querySelector('[data-rigel-richtext="$body"]');
@@ -448,9 +448,7 @@
       {#if !previewPath}
         <p class="visual-error" role="status">{creating ? "New page — Save writes the file. The route renders once the site has it." : "No preview URL is mapped to this document. Use the properties panel to edit."}</p>
       {:else}
-        {#key `${previewPath}:${reloadToken}`}
-          <iframe bind:this={frame} title="Website page editor" sandbox="allow-same-origin" referrerpolicy="no-referrer" src={previewPath} onload={onLoad}></iframe>
-        {/key}
+        <PreviewFrame bind:frame url={previewPath} {reloadToken} title="Website page editor" onload={onLoad} onloading={() => { stopBodyEdit(); inline = null; loaded = false; error = ""; }} onerror={(message) => { loaded = false; error = message; }} />
       {/if}
       {#if inline}
         <input

package/src/editor/lib/github-backend.ts

@@ -2,7 +2,7 @@ import type { Manifest } from "../../manifest/types";
 import type { Selection } from "../../manifest/navigation";
 import { validateBody, type ArticleBody } from "../../article-body";
 import { validateMenu } from "../../manifest/menu";
-import { validateCollectionReferences } from "../../manifest/references";
+import { validateCollectionValues } from "../../manifest/collections";
 import { documentIndex, isPlainObject, validateDocument, validateDocumentId, validateSchema } from "../../schema/validate";
 import { applyValues, readValues } from "../../routes/serialize";
 
@@ -163,7 +163,7 @@ export async function loadManifestRemote(ctx: GitContext, blueprint: Manifest):
     for (const file of list(folder,POST_SLUG)) {
       const post = parseJson(await read(file.path));
       if (!isPlainObject(post) || !isPlainObject(post.frontmatter)) throw new Error("Invalid remote article");
-      validateBody(post.body); validateCollectionReferences(collection.fields,post.frontmatter,manifest.documents);
+      validateBody(post.body); validateCollectionValues(collection.fields,post.frontmatter,manifest.documents);
       collection.posts.push({slug:file.slug,frontmatter:post.frontmatter,body:post.body});
     }
   }
@@ -236,7 +236,7 @@ export async function saveRemoteSelection(ctx: GitContext, manifest: Manifest, s
     const folder = cfg.collections.find(c => c.name === selection.collection)?.folder;
     const collection = manifest.collections?.find(c => c.name === selection.collection);
     if (!folder || !collection) throw new Error("Unknown collection");
-    validateBody(body); validateCollectionReferences(collection.fields,values,manifest.documents ?? []);
+    validateBody(body); validateCollectionValues(collection.fields,values,manifest.documents ?? []);
     path = filePath(ctx,manifest,folder,selection.slug,"json",POST_SLUG);
     data = {frontmatter:{...values,slug:selection.slug},body};
   } else if (selection.kind === "document") {

package/src/editor/lib/preview-frame.ts

@@ -0,0 +1,29 @@
+import DOMPurify from "dompurify";
+
+export async function fetchPreview(url: URL, signal: AbortSignal): Promise<string> {
+  let response: Response;
+  try {
+    response = await fetch(url, { mode: "cors", credentials: "omit", referrerPolicy: "no-referrer", redirect: "error", signal: AbortSignal.any([signal, AbortSignal.timeout(15000)]) });
+  } catch {
+    throw new Error("Draft preview could not be fetched. Check the URL, HTTPS, CORS (Access-Control-Allow-Origin for this editor), redirects and the editor’s connect-src policy. Authentication cookies are not sent.");
+  }
+  if (!response.ok) throw new Error(`Draft preview returned HTTP ${response.status}. Check the draft deployment and mapped route.`);
+  if (!response.headers.get("content-type")?.toLowerCase().includes("text/html")) throw new Error("Draft preview did not return HTML. Check the mapped route and Content-Type header.");
+  const root = DOMPurify.sanitize(await response.text(), {
+    WHOLE_DOCUMENT: true,
+    RETURN_DOM: true,
+    ADD_TAGS: ["link"],
+    FORBID_TAGS: ["script", "base", "meta", "iframe", "object", "embed", "form"],
+    FORBID_ATTR: ["srcdoc", "action", "formaction", "autofocus"],
+  }) as HTMLElement;
+  for (const link of root.querySelectorAll("link")) {
+    if (link.getAttribute("rel")?.toLowerCase() !== "stylesheet") link.remove();
+  }
+  const head = root.querySelector("head")!;
+  const base = document.createElement("base"); base.href = url.href;
+  const policy = document.createElement("meta"); policy.httpEquiv = "Content-Security-Policy";
+  policy.content = "default-src 'none'; script-src 'none'; style-src https: http: 'unsafe-inline'; img-src https: http: data: blob:; font-src https: http: data:; media-src https: http:; connect-src 'none'; frame-src 'none'; object-src 'none'; form-action 'none'; base-uri " + url.origin;
+  const referrer = document.createElement("meta"); referrer.name = "referrer"; referrer.content = "no-referrer";
+  head.prepend(policy, referrer, base);
+  return "<!doctype html>" + root.outerHTML;
+}

package/src/editor/styles.css

@@ -263,6 +263,7 @@
   justify-content: center;
   flex-shrink: 0;
 }
+.rigel .avatar img { display: block; width: 100%; height: 100%; object-fit: cover; }
 .rigel .uname { flex: 1; white-space: nowrap; overflow: hidden; text-overflow: ellipsis; }
 .rigel .user-details { display: flex; flex: 1; min-width: 0; flex-direction: column; gap: 0.125rem; }
 .rigel .user-details small { color: var(--text-muted); font-size: 0.75rem; font-weight: 400; }

package/src/manifest/collections.ts

@@ -0,0 +1,27 @@
+import type { CollectionField } from "./types";
+import type { ContentDocument } from "../schema/types";
+import { validateCollectionReferences } from "./references";
+
+export function initialCollectionValues(fields: CollectionField[], title: string): Record<string, unknown> {
+  return Object.fromEntries(fields.map(field => [field.key,
+    field.type === "boolean" ? field.key === "draft" :
+    field.type === "tags" || (field.type === "reference" && field.multiple) ? [] :
+    field.type === "date" ? new Date().toISOString().slice(0, 10) :
+    field.key === "title" && field.type === "string" ? title : "",
+  ]));
+}
+
+export function validateCollectionValues(fields: CollectionField[], values: Record<string, unknown>, documents: ContentDocument[] = []): void {
+  if (!values || typeof values !== "object" || Array.isArray(values)) throw new Error("Invalid article frontmatter");
+  for (const field of fields) {
+    const value = values[field.key];
+    if (field.required && (value === undefined || value === null || (typeof value === "string" && !value.trim()) || (Array.isArray(value) && !value.length))) throw new Error(`${field.label}: required`);
+    if (value === undefined || field.type === "reference") continue;
+    const valid = field.type === "boolean" ? typeof value === "boolean" :
+      field.type === "tags" ? Array.isArray(value) && value.every(tag => typeof tag === "string") :
+      field.type === "date" ? typeof value === "string" && (value === "" || (/^\d{4}-\d{2}-\d{2}$/.test(value) && Number.isFinite(Date.parse(value)) && new Date(value).toISOString().slice(0, 10) === value)) :
+      typeof value === "string";
+    if (!valid) throw new Error(`${field.label}: expected ${field.type}`);
+  }
+  validateCollectionReferences(fields, values, documents);
+}

package/src/manifest/types.ts

@@ -52,6 +52,7 @@ export interface CollectionField {
   type: "string" | "text" | "boolean" | "date" | "tags" | "markdown" | "image" | "reference";
   to?: string;
   multiple?: boolean;
+  required?: boolean;
   options?: import("./references").ReferenceOption[];
 }
 

package/src/preview-urls.ts

@@ -1,3 +1,12 @@
 export function safePreviewUrl(value: string, image = false): boolean {
   return !!value && !/[ \t\r\n\f\v\u0000-\u001f\u007f\\]/.test(value) && !value.startsWith("//") && (!/^[a-z][a-z\d+.-]*:/i.test(value) || (image ? /^https?:/i : /^(https?:|mailto:)/i).test(value));
 }
+
+export function previewBaseUrl(value: unknown): string {
+  try {
+    if (typeof value !== "string" || !/^https?:\/\/[^/@]+(?:\/|$)/.test(value) || /[\s\u0000-\u001f\u007f\\%?#]/.test(value) || value.split("/").some(part => part === "." || part === "..")) throw new Error();
+    const url = new URL(value);
+    if (url.username || url.password || (url.protocol !== "https:" && !["localhost", "127.0.0.1", "[::1]"].includes(url.hostname))) throw new Error();
+    return `${url.origin}${url.pathname.replace(/\/$/, "")}/`;
+  } catch { throw new Error("rigel: preview.liveUrl and preview.draftUrl must be absolute HTTPS base URLs without credentials, query or fragment (HTTP allowed on loopback)"); }
+}

package/src/preview.ts

@@ -2,7 +2,7 @@ import MarkdownIt from "markdown-it";
 import DOMPurify from "dompurify";
 import { pageRoute } from "./schema/paths";
 import { renderArticle } from "./article-render";
-import { safePreviewUrl } from "./preview-urls";
+import { safePreviewUrl, previewBaseUrl } from "./preview-urls";
 export { safePreviewUrl } from "./preview-urls";
 
 export interface PreviewDocumentMapping {
@@ -11,6 +11,8 @@ export interface PreviewDocumentMapping {
 }
 
 export interface PreviewConfig {
+  liveUrl?: string;
+  draftUrl?: string;
   pages?: Record<string, string>;
   collections?: Record<string, { url: string; new: string }>;
   documents?: Record<string, PreviewDocumentMapping>;
@@ -23,10 +25,16 @@ export interface PreviewTarget {
 }
 
 export function previewPath(config: PreviewConfig, target: PreviewTarget, isNew = false): string | null {
-  if (target.kind === "document") return pageRoute(target.slug, config.documents?.[target.type ?? ""]);
   const mapping = target.kind === "post" ? config.collections?.[target.collection ?? ""] : undefined;
-  const path = target.kind === "page" ? config.pages?.[target.slug] : mapping ? (isNew ? mapping.new : mapping.url.replaceAll("{slug}", encodeURIComponent(target.slug))) : undefined;
-  return typeof path === "string" && /^\/(?!\/)/.test(path) && !/[\\\s?#]/.test(path) && !path.split("/").includes("..") && !/^\/rigel(?:\/|$)/.test(path) ? path : null;
+  const path = target.kind === "document" ? pageRoute(target.slug, config.documents?.[target.type ?? ""]) : target.kind === "page" ? config.pages?.[target.slug] : mapping ? (isNew ? mapping.new : mapping.url.replaceAll("{slug}", encodeURIComponent(target.slug))) : undefined;
+  return typeof path === "string" && /^\/(?!\/)/.test(path) && !/[\\\s?#]/.test(path) && !/%(?:2e|2f|5c)/i.test(path) && !path.split("/").some(part => part === "." || part === "..") && !/^\/rigel(?:\/|$)/.test(path) ? path : null;
+}
+
+export function previewUrl(config: PreviewConfig, target: PreviewTarget, mode: "live" | "draft" = "draft", isNew = false): string | null {
+  const path = previewPath(config, target, mode === "draft" && isNew);
+  const base = mode === "live" ? config.liveUrl : config.draftUrl;
+  if (!path || base === undefined) return path;
+  try { return new URL(path.slice(1), previewBaseUrl(base)).href; } catch { return null; }
 }
 
 export function anchorValue(values: unknown, path: string): { found: boolean; value: unknown } {

package/src/routes/local-post.ts

@@ -5,7 +5,7 @@ import path from "node:path";
 
 import { validateBody, type ArticleBody } from "../article-body";
 import config from "virtual:rigel-config";
-import { validateCollectionReferences } from "../manifest/references";
+import { validateCollectionValues } from "../manifest/collections";
 import { readDocuments } from "../schema/store";
 import { fileURLToPath } from "node:url";
 import type { CollectionConfig } from "../config";
@@ -46,9 +46,9 @@ export const POST: APIRoute = async ({ request, params }) => {
     validateBody(body.body);
     const fields = config.collections?.find((collection: CollectionConfig) => collection.name === params.collection)?.fields ?? [];
     const documents = config.schema && config.root ? await readDocuments(config.schema, fileURLToPath(config.root)) : [];
-    validateCollectionReferences(fields, body.frontmatter, documents);
+    validateCollectionValues(fields, body.frontmatter, documents);
   } catch (error) {
-    return new Response(error instanceof Error ? error.message : "Invalid references", { status: 400 });
+    return new Response(error instanceof Error ? error.message : "Invalid article", { status: 400 });
   }
   await mkdir(path.dirname(file), { recursive: true });
   const fm = { ...body.frontmatter, slug };

package/src/vite/manifest-plugin.ts

@@ -50,6 +50,7 @@ const __rigelReservedSlugs = new Set(documents.filter((doc) => !documentTypes.fi
     ).map(([path, raw]) => {
       const post = JSON.parse(raw);
       __rigelValidateBody(post.body);
+      __rigelValidateCollectionValues(${JSON.stringify(c.fields)}, post.frontmatter, documents);
       post.slug = path.split("/").pop().replace(/\\.json$/, "");
       return post;
     }),
@@ -165,6 +166,7 @@ export function derefDocument(value) { return deref(value, __rigelIndex); }
       }
       return `
 import { validateBody as __rigelValidateBody } from ${JSON.stringify(fileURLToPath(new URL("../article-body.ts", import.meta.url)))};
+import { validateCollectionValues as __rigelValidateCollectionValues } from ${JSON.stringify(fileURLToPath(new URL("../manifest/collections.ts", import.meta.url)))};
 const modules = import.meta.glob(${JSON.stringify(pattern)}, { eager: true });
 const loaded = Object.values(modules).map((m) => m.default);
 ${documentsSrc}