barakopress 0.2.0

package/dist/config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAkFH,6FAA6F;AAC7F,MAAM,cAAc,GAA0C;IAC1D,KAAK,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,UAAU,EAAE;IAC/D,MAAM,EAAE;QACJ,KAAK,EAAE,OAAO;QACd,IAAI,EAAE,MAAM;QACZ,OAAO,EAAE,SAAS;QAClB,IAAI,EAAE,MAAM;QACZ,UAAU,EAAE,YAAY;QACxB,aAAa,EAAE,eAAe;QAC9B,WAAW,EAAE,aAAa;QAC1B,QAAQ,EAAE,UAAU;QACpB,IAAI,EAAE,MAAM;QACZ,MAAM,EAAE,QAAQ;QAChB,QAAQ,EAAE,UAAU;KACvB;CACJ,CAAC;AAEF,SAAS,SAAS,CAAC,IAAY;IAC3B,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;AACpC,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,YAAY,CAAC,KAAgD;IACzE,MAAM,MAAM,GAAG,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,QAAQ,EAAE,aAAa,EAAE,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC;IAE/F,OAAO;QACH,KAAK,EAAE,EAAE,GAAG,cAAc,CAAC,KAAK,EAAE,GAAG,KAAK,CAAC,KAAK,EAAE;QAClD,MAAM,EAAE,EAAE,GAAG,cAAc,CAAC,MAAM,EAAE,GAAG,KAAK,CAAC,MAAM,EAAE;QACrD,MAAM,EAAE;YACJ,IAAI,EAAE,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC;YAC5B,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS;YAC5D,QAAQ,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS;SACrE;QACD,IAAI,EAAE,EAAE,GAAG,KAAK,CAAC,IAAI,EAAE,GAAG,EAAE,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE;QACvD,SAAS,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,GAAG,KAAK,CAAC,SAAS,EAAE;QAClF,QAAQ,EAAE,KAAK,CAAC,QAAQ,IAAI,KAAK;QACjC,eAAe,EAAE,KAAK,CAAC,eAAe,IAAI,GAAG;QAC7C,MAAM,EAAE,KAAK,CAAC,MAAM,IAAI,OAAO;QAC/B,MAAM,EAAE,SAAS,CAAC,KAAK,CAAC,MAAM,IAAI,OAAO,CAAC,GAAG,CAAC,OAAO,IAAI,uBAAuB,CAAC;QACjF,MAAM,EAAE,KAAK,CAAC,MAAM,IAAI,OAAO,CAAC,GAAG,CAAC,UAAU,IAAI,SAAS;KAC9D,CAAC;AACN,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,WAAW,CAAC,MAAmB;IAC3C,MAAM,MAAM,GAA2B;QACnC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS;QACtD,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS;KAC7D,CAAC;IACF,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;AACzD,CAAC"}

package/dist/delivery.d.ts

@@ -0,0 +1,45 @@
+import type { PressConfig } from "./config.js";
+export interface PublicContent {
+    id: string;
+    slug?: string;
+    contentType?: string;
+    createdAt?: string;
+    updatedAt?: string;
+    data: Record<string, unknown>;
+    seo?: Seo;
+}
+export interface Seo {
+    title?: string;
+    description?: string;
+    canonicalUrl?: string;
+    imageUrl?: string;
+    noIndex?: boolean;
+}
+export interface Paged<T> {
+    items: T[];
+    page: number;
+    pageSize: number;
+    totalItems: number;
+    totalPages: number;
+    hasNextPage: boolean;
+}
+export interface ListOptions {
+    page?: number;
+    pageSize?: number;
+    /** Reference fields to resolve in the same request. The API caps this at five. */
+    include?: string[];
+    /** `[field, op, value]`, for example ["Author", "eq", id]. The API caps this at five. */
+    filter?: [string, string, string][];
+    /** Sent to the API, so ordering covers every row rather than the page that came back. */
+    sort?: string;
+}
+export declare function list(config: PressConfig, type: string, opts?: ListOptions): Promise<Paged<PublicContent>>;
+export declare function bySlug(config: PressConfig, type: string, slug: string): Promise<PublicContent | null>;
+/**
+ * A draft, read with a preview token an editor minted from `POST /api/preview`.
+ *
+ * An invalid or expired token is not an error: the API falls back to published-only, so this
+ * returns whatever is public, or null. That is the safe direction to fail in.
+ */
+export declare function bySlugPreview(config: PressConfig, type: string, slug: string, token: string): Promise<PublicContent | null>;
+//# sourceMappingURL=delivery.d.ts.map

package/dist/delivery.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"delivery.d.ts","sourceRoot":"","sources":["../src/delivery.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAmB/C,MAAM,WAAW,aAAa;IAC1B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC9B,GAAG,CAAC,EAAE,GAAG,CAAC;CACb;AAED,MAAM,WAAW,GAAG;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,OAAO,CAAC,EAAE,OAAO,CAAC;CACrB;AAED,MAAM,WAAW,KAAK,CAAC,CAAC;IACpB,KAAK,EAAE,CAAC,EAAE,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,OAAO,CAAC;CACxB;AA+BD,MAAM,WAAW,WAAW;IACxB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,kFAAkF;IAClF,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;IACnB,yFAAyF;IACzF,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC;IACpC,yFAAyF;IACzF,IAAI,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,wBAAsB,IAAI,CACtB,MAAM,EAAE,WAAW,EACnB,IAAI,EAAE,MAAM,EACZ,IAAI,GAAE,WAAgB,GACvB,OAAO,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,CAQ/B;AAED,wBAAsB,MAAM,CACxB,MAAM,EAAE,WAAW,EACnB,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,MAAM,GACb,OAAO,CAAC,aAAa,GAAG,IAAI,CAAC,CAW/B;AAED;;;;;GAKG;AACH,wBAAsB,aAAa,CAC/B,MAAM,EAAE,WAAW,EACnB,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,MAAM,EACZ,KAAK,EAAE,MAAM,GACd,OAAO,CAAC,aAAa,GAAG,IAAI,CAAC,CAK/B"}

package/dist/delivery.js

@@ -0,0 +1,62 @@
+function headers(config) {
+    return config.tenant ? { "X-Tenant": config.tenant } : {};
+}
+/** A cached, tagged read. Everything a visitor sees comes through here. */
+async function get(config, path) {
+    const res = await fetch(`${config.cmsUrl}${path}`, {
+        headers: headers(config),
+        next: {
+            tags: [config.cacheTag],
+            // Zero means no backstop, which Next spells as false.
+            revalidate: config.backstopSeconds > 0 ? config.backstopSeconds : false,
+        },
+    });
+    if (!res.ok)
+        throw new Error(`${path} answered ${res.status}`);
+    return (await res.json());
+}
+/** An uncached read, for a draft. A cached draft would be served to the next visitor. */
+async function getFresh(config, path) {
+    const res = await fetch(`${config.cmsUrl}${path}`, {
+        headers: headers(config),
+        cache: "no-store",
+    });
+    if (res.status === 404)
+        return null;
+    if (!res.ok)
+        throw new Error(`${path} answered ${res.status}`);
+    return (await res.json());
+}
+export async function list(config, type, opts = {}) {
+    const q = new URLSearchParams();
+    q.set("page", String(opts.page ?? 1));
+    q.set("pageSize", String(opts.pageSize ?? config.pageSizes.index));
+    if (opts.include?.length)
+        q.set("include", opts.include.join(","));
+    if (opts.sort)
+        q.set("sort", opts.sort);
+    for (const [field, op, value] of opts.filter ?? [])
+        q.set(`filter[${field}][${op}]`, value);
+    return get(config, `/api/public/${encodeURIComponent(type)}?${q}`);
+}
+export async function bySlug(config, type, slug) {
+    try {
+        return await get(config, `/api/public/${encodeURIComponent(type)}/${encodeURIComponent(slug)}`);
+    }
+    catch (e) {
+        // A missing entry is a not-found page, not a broken site.
+        if (e instanceof Error && e.message.includes("404"))
+            return null;
+        throw e;
+    }
+}
+/**
+ * A draft, read with a preview token an editor minted from `POST /api/preview`.
+ *
+ * An invalid or expired token is not an error: the API falls back to published-only, so this
+ * returns whatever is public, or null. That is the safe direction to fail in.
+ */
+export async function bySlugPreview(config, type, slug, token) {
+    return getFresh(config, `/api/public/${encodeURIComponent(type)}/${encodeURIComponent(slug)}?preview=${encodeURIComponent(token)}`);
+}
+//# sourceMappingURL=delivery.js.map

package/dist/delivery.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"delivery.js","sourceRoot":"","sources":["../src/delivery.ts"],"names":[],"mappings":"AA8CA,SAAS,OAAO,CAAC,MAAmB;IAChC,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;AAC9D,CAAC;AAED,2EAA2E;AAC3E,KAAK,UAAU,GAAG,CAAI,MAAmB,EAAE,IAAY;IACnD,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,MAAM,CAAC,MAAM,GAAG,IAAI,EAAE,EAAE;QAC/C,OAAO,EAAE,OAAO,CAAC,MAAM,CAAC;QACxB,IAAI,EAAE;YACF,IAAI,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC;YACvB,sDAAsD;YACtD,UAAU,EAAE,MAAM,CAAC,eAAe,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC,CAAC,KAAK;SAC1E;KACJ,CAAC,CAAC;IACH,IAAI,CAAC,GAAG,CAAC,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,aAAa,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC;IAC/D,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAM,CAAC;AACnC,CAAC;AAED,yFAAyF;AACzF,KAAK,UAAU,QAAQ,CAAI,MAAmB,EAAE,IAAY;IACxD,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,MAAM,CAAC,MAAM,GAAG,IAAI,EAAE,EAAE;QAC/C,OAAO,EAAE,OAAO,CAAC,MAAM,CAAC;QACxB,KAAK,EAAE,UAAU;KACpB,CAAC,CAAC;IACH,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG;QAAE,OAAO,IAAI,CAAC;IACpC,IAAI,CAAC,GAAG,CAAC,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,aAAa,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC;IAC/D,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAM,CAAC;AACnC,CAAC;AAaD,MAAM,CAAC,KAAK,UAAU,IAAI,CACtB,MAAmB,EACnB,IAAY,EACZ,IAAI,GAAgB,EAAE;IAEtB,MAAM,CAAC,GAAG,IAAI,eAAe,EAAE,CAAC;IAChC,CAAC,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC;IACtC,CAAC,CAAC,GAAG,CAAC,UAAU,EAAE,MAAM,CAAC,IAAI,CAAC,QAAQ,IAAI,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC;IACnE,IAAI,IAAI,CAAC,OAAO,EAAE,MAAM;QAAE,CAAC,CAAC,GAAG,CAAC,SAAS,EAAE,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IACnE,IAAI,IAAI,CAAC,IAAI;QAAE,CAAC,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;IACxC,KAAK,MAAM,CAAC,KAAK,EAAE,EAAE,EAAE,KAAK,CAAC,IAAI,IAAI,CAAC,MAAM,IAAI,EAAE;QAAE,CAAC,CAAC,GAAG,CAAC,UAAU,KAAK,KAAK,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC;IAC5F,OAAO,GAAG,CAAuB,MAAM,EAAE,eAAe,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;AAC7F,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,MAAM,CACxB,MAAmB,EACnB,IAAY,EACZ,IAAY;IAEZ,IAAI,CAAC;QACD,OAAO,MAAM,GAAG,CACZ,MAAM,EACN,eAAe,kBAAkB,CAAC,IAAI,CAAC,IAAI,kBAAkB,CAAC,IAAI,CAAC,EAAE,CACxE,CAAC;IACN,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACT,0DAA0D;QAC1D,IAAI,CAAC,YAAY,KAAK,IAAI,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;QACjE,MAAM,CAAC,CAAC;IACZ,CAAC;AACL,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CAC/B,MAAmB,EACnB,IAAY,EACZ,IAAY,EACZ,KAAa;IAEb,OAAO,QAAQ,CACX,MAAM,EACN,eAAe,kBAAkB,CAAC,IAAI,CAAC,IAAI,kBAAkB,CAAC,IAAI,CAAC,YAAY,kBAAkB,CAAC,KAAK,CAAC,EAAE,CAC7G,CAAC;AACN,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,17 @@
+export { defineConfig, includesFor } from "./config.js";
+export type { PressConfig, PressConfigInput, TypeNames, FieldMap, RouteMap, PageSizes, SiteIdentity, } from "./config.js";
+export { list, bySlug, bySlugPreview } from "./delivery.js";
+export type { PublicContent, Seo, ListOptions, Paged } from "./delivery.js";
+export { listPosts, getPost, getPostPreview, listPostsBy, getTerm, toPost, formatDate, } from "./cms.js";
+export type { Post, Ref, Term } from "./cms.js";
+export { renderMarkdown, isSafeHref, anchor } from "./markdown.js";
+export { createBlogIndex, Card } from "./screens/blog-index.js";
+export { createBlogPost, createBlogPostPreview, createPostMetadata, createPostStaticParams, } from "./screens/blog-post.js";
+export { createArchive, createArchiveStaticParams } from "./screens/archive.js";
+export { PostView } from "./screens/post-view.js";
+export { createRevalidateRoute } from "./routes/revalidate.js";
+export type { RevalidateOptions } from "./routes/revalidate.js";
+export { createFeed } from "./routes/feed.js";
+export { createSitemap } from "./routes/sitemap.js";
+export { createRobots } from "./routes/robots.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AA2BA,OAAO,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AACxD,YAAY,EACR,WAAW,EACX,gBAAgB,EAChB,SAAS,EACT,QAAQ,EACR,QAAQ,EACR,SAAS,EACT,YAAY,GACf,MAAM,aAAa,CAAC;AAErB,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAC5D,YAAY,EAAE,aAAa,EAAE,GAAG,EAAE,WAAW,EAAE,KAAK,EAAE,MAAM,eAAe,CAAC;AAE5E,OAAO,EACH,SAAS,EACT,OAAO,EACP,cAAc,EACd,WAAW,EACX,OAAO,EACP,MAAM,EACN,UAAU,GACb,MAAM,UAAU,CAAC;AAClB,YAAY,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,UAAU,CAAC;AAEhD,OAAO,EAAE,cAAc,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,eAAe,CAAC;AAEnE,OAAO,EAAE,eAAe,EAAE,IAAI,EAAE,MAAM,yBAAyB,CAAC;AAChE,OAAO,EACH,cAAc,EACd,qBAAqB,EACrB,kBAAkB,EAClB,sBAAsB,GACzB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,aAAa,EAAE,yBAAyB,EAAE,MAAM,sBAAsB,CAAC;AAChF,OAAO,EAAE,QAAQ,EAAE,MAAM,wBAAwB,CAAC;AAElD,OAAO,EAAE,qBAAqB,EAAE,MAAM,wBAAwB,CAAC;AAC/D,YAAY,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAChE,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAC9C,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACpD,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC"}

package/dist/index.js

@@ -0,0 +1,39 @@
+/*
+ * The barakoPress engine.
+ *
+ * A site depends on this and re-exports the pieces it wants from its own route files, because
+ * Next decides routes by file path and a package cannot create files in someone else's app.
+ *
+ * Everything that differs between sites is in the config passed to these factories: the content
+ * type names, the field map, where the routes are mounted, page sizes, site identity, the cache
+ * tag and the backstop. barakoCMS content types are defined at runtime, so a client's posts are
+ * as likely to be `article` with a `Headline` as the blueprint's `post` and `Title`. An engine
+ * that compiled one shape in would be one blog wearing a package name.
+ *
+ * A consumer's app/page.tsx:
+ *
+ *     import { createBlogIndex } from "barakopress";
+ *     import { config } from "@/press.config";
+ *     export default createBlogIndex(config);
+ *     export const revalidate = 300;
+ *
+ * Route segment config stays in the consumer's file: Next reads it from the file that owns the
+ * route and does not reliably follow a re-export, and the caching window is their decision.
+ *
+ * The screens live in src/screens rather than src/pages because Next claims both `pages` and
+ * `app` as router directories, and a `src/pages` inside a transpiled package is read as a second
+ * router.
+ */
+export { defineConfig, includesFor } from "./config.js";
+export { list, bySlug, bySlugPreview } from "./delivery.js";
+export { listPosts, getPost, getPostPreview, listPostsBy, getTerm, toPost, formatDate, } from "./cms.js";
+export { renderMarkdown, isSafeHref, anchor } from "./markdown.js";
+export { createBlogIndex, Card } from "./screens/blog-index.js";
+export { createBlogPost, createBlogPostPreview, createPostMetadata, createPostStaticParams, } from "./screens/blog-post.js";
+export { createArchive, createArchiveStaticParams } from "./screens/archive.js";
+export { PostView } from "./screens/post-view.js";
+export { createRevalidateRoute } from "./routes/revalidate.js";
+export { createFeed } from "./routes/feed.js";
+export { createSitemap } from "./routes/sitemap.js";
+export { createRobots } from "./routes/robots.js";
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAEH,OAAO,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAWxD,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAG5D,OAAO,EACH,SAAS,EACT,OAAO,EACP,cAAc,EACd,WAAW,EACX,OAAO,EACP,MAAM,EACN,UAAU,GACb,MAAM,UAAU,CAAC;AAGlB,OAAO,EAAE,cAAc,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,eAAe,CAAC;AAEnE,OAAO,EAAE,eAAe,EAAE,IAAI,EAAE,MAAM,yBAAyB,CAAC;AAChE,OAAO,EACH,cAAc,EACd,qBAAqB,EACrB,kBAAkB,EAClB,sBAAsB,GACzB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,aAAa,EAAE,yBAAyB,EAAE,MAAM,sBAAsB,CAAC;AAChF,OAAO,EAAE,QAAQ,EAAE,MAAM,wBAAwB,CAAC;AAElD,OAAO,EAAE,qBAAqB,EAAE,MAAM,wBAAwB,CAAC;AAE/D,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAC9C,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACpD,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC"}

package/dist/markdown.d.ts

@@ -0,0 +1,5 @@
+export declare function isSafeHref(href: string): boolean;
+/** Turns a heading into a stable id, so "On this page" links and deep links work. */
+export declare function anchor(text: string): string;
+export declare function renderMarkdown(source: string): string;
+//# sourceMappingURL=markdown.d.ts.map

package/dist/markdown.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"markdown.d.ts","sourceRoot":"","sources":["../src/markdown.ts"],"names":[],"mappings":"AAwBA,wBAAgB,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAUhD;AAWD,qFAAqF;AACrF,wBAAgB,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAM3C;AAwCD,wBAAgB,cAAc,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAGrD"}

package/dist/markdown.js

@@ -0,0 +1,91 @@
+import { Marked } from "marked";
+/*
+ * Markdown to HTML, treating the markdown as untrusted.
+ *
+ * An editor is authenticated, so this is not the first line of defence. It is the second, and it
+ * matters because the body of a post is the one field on this site that becomes markup. The
+ * threats it closes: an editor account that gets taken over, a contributor who is trusted to write
+ * but not to run script on the domain, and content imported in bulk from somewhere else.
+ *
+ * Three rules:
+ *   1. Raw HTML in the source is escaped, never passed through. That removes script tags, event
+ *      handler attributes and iframes in one move, instead of trying to enumerate them.
+ *   2. A link or image destination must be http, https or mailto. That kills javascript: and
+ *      data: URLs, which are the two that execute.
+ *   3. Text is escaped on the way into every attribute, so an alt or a title cannot close its own
+ *      quote and add another attribute.
+ *
+ * The trade is real and deliberate: an author cannot embed a YouTube iframe or any raw HTML. When
+ * that is wanted, the answer is a content field the frontend renders deliberately, not a hole here.
+ */
+const SAFE_SCHEMES = ["http:", "https:", "mailto:"];
+export function isSafeHref(href) {
+    const trimmed = href.trim();
+    // A relative or anchor link has no scheme and cannot execute.
+    if (trimmed.startsWith("/") || trimmed.startsWith("#"))
+        return true;
+    try {
+        return SAFE_SCHEMES.includes(new URL(trimmed).protocol);
+    }
+    catch {
+        // Unparseable means it is not a URL this should emit.
+        return false;
+    }
+}
+function escapeHtml(value) {
+    return value
+        .replace(/&/g, "&")
+        .replace(/</g, "&lt;")
+        .replace(/>/g, "&gt;")
+        .replace(/"/g, "&quot;")
+        .replace(/'/g, "&#39;");
+}
+/** Turns a heading into a stable id, so "On this page" links and deep links work. */
+export function anchor(text) {
+    return text
+        .toLowerCase()
+        .replace(/[^\w\s-]/g, "")
+        .trim()
+        .replace(/\s+/g, "-");
+}
+function buildRenderer() {
+    const marked = new Marked({ gfm: true, breaks: false });
+    marked.use({
+        renderer: {
+            // Raw HTML blocks and inline HTML are emitted as visible text, not as markup.
+            html({ text }) {
+                return escapeHtml(text);
+            },
+            link({ href, title, tokens }) {
+                const label = this.parser.parseInline(tokens);
+                if (!isSafeHref(href)) {
+                    // Keep the words, drop the destination. A reader still sees what was written.
+                    return label;
+                }
+                const t = title ? ` title="${escapeHtml(title)}"` : "";
+                const external = /^https?:/.test(href.trim());
+                const rel = external ? ' rel="noopener noreferrer"' : "";
+                return `<a href="${escapeHtml(href.trim())}"${t}${rel}>${label}</a>`;
+            },
+            image({ href, title, text }) {
+                if (!isSafeHref(href))
+                    return escapeHtml(text ?? "");
+                const t = title ? ` title="${escapeHtml(title)}"` : "";
+                return `<img src="${escapeHtml(href.trim())}" alt="${escapeHtml(text ?? "")}"${t} loading="lazy">`;
+            },
+            heading({ tokens, depth }) {
+                const label = this.parser.parseInline(tokens);
+                const plain = tokens.map((t) => ("raw" in t ? t.raw : "")).join("");
+                return `<h${depth} id="${escapeHtml(anchor(plain))}">${label}</h${depth}>`;
+            },
+        },
+    });
+    return marked;
+}
+const renderer = buildRenderer();
+export function renderMarkdown(source) {
+    if (!source)
+        return "";
+    return renderer.parse(source, { async: false });
+}
+//# sourceMappingURL=markdown.js.map

package/dist/markdown.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"markdown.js","sourceRoot":"","sources":["../src/markdown.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAe,MAAM,QAAQ,CAAC;AAE7C;;;;;;;;;;;;;;;;;;GAkBG;AAEH,MAAM,YAAY,GAAG,CAAC,OAAO,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC;AAEpD,MAAM,UAAU,UAAU,CAAC,IAAY;IACnC,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;IAC5B,8DAA8D;IAC9D,IAAI,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IACpE,IAAI,CAAC;QACD,OAAO,YAAY,CAAC,QAAQ,CAAC,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC,QAAQ,CAAC,CAAC;IAC5D,CAAC;IAAC,MAAM,CAAC;QACL,sDAAsD;QACtD,OAAO,KAAK,CAAC;IACjB,CAAC;AACL,CAAC;AAED,SAAS,UAAU,CAAC,KAAa;IAC7B,OAAO,KAAK;SACP,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC;SACtB,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC;SACrB,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC;SACrB,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC;SACvB,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;AAChC,CAAC;AAED,qFAAqF;AACrF,MAAM,UAAU,MAAM,CAAC,IAAY;IAC/B,OAAO,IAAI;SACN,WAAW,EAAE;SACb,OAAO,CAAC,WAAW,EAAE,EAAE,CAAC;SACxB,IAAI,EAAE;SACN,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;AAC9B,CAAC;AAED,SAAS,aAAa;IAClB,MAAM,MAAM,GAAG,IAAI,MAAM,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;IAExD,MAAM,CAAC,GAAG,CAAC;QACP,QAAQ,EAAE;YACN,8EAA8E;YAC9E,IAAI,CAAC,EAAE,IAAI,EAA4B;gBACnC,OAAO,UAAU,CAAC,IAAI,CAAC,CAAC;YAC5B,CAAC;YACD,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE;gBACxB,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;gBAC9C,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;oBACpB,8EAA8E;oBAC9E,OAAO,KAAK,CAAC;gBACjB,CAAC;gBACD,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,WAAW,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;gBACvD,MAAM,QAAQ,GAAG,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;gBAC9C,MAAM,GAAG,GAAG,QAAQ,CAAC,CAAC,CAAC,4BAA4B,CAAC,CAAC,CAAC,EAAE,CAAC;gBACzD,OAAO,YAAY,UAAU,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,GAAG,GAAG,IAAI,KAAK,MAAM,CAAC;YACzE,CAAC;YACD,KAAK,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE;gBACvB,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;oBAAE,OAAO,UAAU,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;gBACrD,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,WAAW,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;gBACvD,OAAO,aAAa,UAAU,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,UAAU,UAAU,CAAC,IAAI,IAAI,EAAE,CAAC,IAAI,CAAC,kBAAkB,CAAC;YACvG,CAAC;YACD,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE;gBACrB,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;gBAC9C,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;gBACpE,OAAO,KAAK,KAAK,QAAQ,UAAU,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,KAAK,MAAM,KAAK,GAAG,CAAC;YAC/E,CAAC;SACJ;KACJ,CAAC,CAAC;IAEH,OAAO,MAAM,CAAC;AAClB,CAAC;AAED,MAAM,QAAQ,GAAG,aAAa,EAAE,CAAC;AAEjC,MAAM,UAAU,cAAc,CAAC,MAAc;IACzC,IAAI,CAAC,MAAM;QAAE,OAAO,EAAE,CAAC;IACvB,OAAO,QAAQ,CAAC,KAAK,CAAC,MAAM,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAW,CAAC;AAC9D,CAAC"}

package/dist/routes/feed.d.ts

@@ -0,0 +1,3 @@
+import type { PressConfig } from "../config.js";
+export declare function createFeed(config: PressConfig): () => Promise<Response>;
+//# sourceMappingURL=feed.d.ts.map

package/dist/routes/feed.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"feed.d.ts","sourceRoot":"","sources":["../../src/routes/feed.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAsBhD,wBAAgB,UAAU,CAAC,MAAM,EAAE,WAAW,2BAwD7C"}

package/dist/routes/feed.js

@@ -0,0 +1,73 @@
+import { listPosts } from "../cms.js";
+/*
+ * RSS, built here rather than proxied from the CMS.
+ *
+ * barakoCMS serves /api/public/{type}/feed.xml and it is correct, but its item links come from a
+ * server-side config template that has to be kept in step with the site's routes by hand. Built
+ * here, the routes have one owner: config.routes. It also costs nothing, because it is the same
+ * cached, tagged read the index uses.
+ */
+/** XML text escaping. Every value below is content someone typed, so none of it is trusted. */
+function xml(value) {
+    return value
+        .replace(/&/g, "&")
+        .replace(/</g, "&lt;")
+        .replace(/>/g, "&gt;")
+        .replace(/"/g, "&quot;")
+        .replace(/'/g, "&apos;");
+}
+export function createFeed(config) {
+    return async function GET() {
+        let posts = [];
+        try {
+            ({ posts } = await listPosts(config, { pageSize: config.pageSizes.feed }));
+        }
+        catch {
+            // An unreachable CMS yields an empty channel, not a failure. This route is prerendered
+            // when the consumer gives it a revalidate window, so a throw fails their build, and at
+            // runtime it would hand a feed reader a 500.
+            posts = [];
+        }
+        const items = posts
+            .map((p) => {
+            const url = `${config.site.url}${config.routes.post}/${p.slug}`;
+            const date = p.publishedAt ? new Date(p.publishedAt) : null;
+            const pubDate = date && !Number.isNaN(date.getTime())
+                ? `      <pubDate>${date.toUTCString()}</pubDate>`
+                : "";
+            return [
+                "    <item>",
+                `      <title>${xml(p.title)}</title>`,
+                `      <link>${xml(url)}</link>`,
+                `      <guid isPermaLink="true">${xml(url)}</guid>`,
+                // Plain text, not rendered HTML: a feed reader that trusts markup is not this
+                // site's problem to create.
+                p.excerpt ? `      <description>${xml(p.excerpt)}</description>` : "",
+                pubDate,
+                p.category ? `      <category>${xml(p.category.name)}</category>` : "",
+                "    </item>",
+            ]
+                .filter(Boolean)
+                .join("\n");
+        })
+            .join("\n");
+        const body = `<?xml version="1.0" encoding="UTF-8"?>
+<rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom">
+  <channel>
+    <title>${xml(config.site.name)}</title>
+    <link>${xml(config.site.url)}</link>
+    <description>${xml(config.site.tagline ?? config.site.name)}</description>
+    <atom:link href="${xml(`${config.site.url}/feed.xml`)}" rel="self" type="application/rss+xml"/>
+${items}
+  </channel>
+</rss>
+`;
+        return new Response(body, {
+            headers: {
+                "content-type": "application/rss+xml; charset=utf-8",
+                "cache-control": "public, max-age=300",
+            },
+        });
+    };
+}
+//# sourceMappingURL=feed.js.map

package/dist/routes/feed.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"feed.js","sourceRoot":"","sources":["../../src/routes/feed.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AAEtC;;;;;;;GAOG;AAEH,+FAA+F;AAC/F,SAAS,GAAG,CAAC,KAAa;IACtB,OAAO,KAAK;SACP,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC;SACtB,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC;SACrB,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC;SACrB,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC;SACvB,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;AACjC,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,MAAmB;IAC1C,OAAO,KAAK,UAAU,GAAG;QACrB,IAAI,KAAK,GAAmD,EAAE,CAAC;QAC/D,IAAI,CAAC;YACD,CAAC,EAAE,KAAK,EAAE,GAAG,MAAM,SAAS,CAAC,MAAM,EAAE,EAAE,QAAQ,EAAE,MAAM,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;QAC/E,CAAC;QAAC,MAAM,CAAC;YACL,uFAAuF;YACvF,uFAAuF;YACvF,6CAA6C;YAC7C,KAAK,GAAG,EAAE,CAAC;QACf,CAAC;QAED,MAAM,KAAK,GAAG,KAAK;aACd,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;YACP,MAAM,GAAG,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC;YAChE,MAAM,IAAI,GAAG,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;YAC5D,MAAM,OAAO,GACT,IAAI,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;gBACjC,CAAC,CAAC,kBAAkB,IAAI,CAAC,WAAW,EAAE,YAAY;gBAClD,CAAC,CAAC,EAAE,CAAC;YACb,OAAO;gBACH,YAAY;gBACZ,gBAAgB,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,UAAU;gBACtC,eAAe,GAAG,CAAC,GAAG,CAAC,SAAS;gBAChC,kCAAkC,GAAG,CAAC,GAAG,CAAC,SAAS;gBACnD,8EAA8E;gBAC9E,4BAA4B;gBAC5B,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,sBAAsB,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC,CAAC,EAAE;gBACrE,OAAO;gBACP,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,mBAAmB,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE;gBACtE,aAAa;aAChB;iBACI,MAAM,CAAC,OAAO,CAAC;iBACf,IAAI,CAAC,IAAI,CAAC,CAAC;QACpB,CAAC,CAAC;aACD,IAAI,CAAC,IAAI,CAAC,CAAC;QAEhB,MAAM,IAAI,GAAG;;;aAGR,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC;YACtB,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC;mBACb,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC;uBACxC,GAAG,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,WAAW,CAAC;EACvD,KAAK;;;CAGN,CAAC;QAEM,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAE;YACtB,OAAO,EAAE;gBACL,cAAc,EAAE,oCAAoC;gBACpD,eAAe,EAAE,qBAAqB;aACzC;SACJ,CAAC,CAAC;IACP,CAAC,CAAC;AACN,CAAC"}

package/dist/routes/revalidate.d.ts

@@ -0,0 +1,25 @@
+import { NextResponse, type NextRequest } from "next/server";
+import type { PressConfig } from "../config.js";
+export interface RevalidateOptions {
+    /** Defaults to REVALIDATE_SECRET. */
+    secret?: string;
+    /** Seconds a signature stays valid. Shorter is safer; the sender's clock has to be close. */
+    toleranceSeconds?: number;
+    maxBodyBytes?: number;
+}
+export declare function createRevalidateRoute(config: PressConfig, options?: RevalidateOptions): {
+    POST: (request: NextRequest) => Promise<NextResponse<{
+        error: string;
+    }> | NextResponse<{
+        revalidated: boolean;
+        repeated: boolean;
+    }> | NextResponse<{
+        revalidated: boolean;
+        tag: string;
+        delivery: string;
+    }>>;
+    GET: () => Promise<NextResponse<{
+        ok: boolean;
+    }>>;
+};
+//# sourceMappingURL=revalidate.d.ts.map

package/dist/routes/revalidate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"revalidate.d.ts","sourceRoot":"","sources":["../../src/routes/revalidate.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,YAAY,EAAE,KAAK,WAAW,EAAE,MAAM,aAAa,CAAC;AAC7D,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AA+BhD,MAAM,WAAW,iBAAiB;IAC9B,qCAAqC;IACrC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,6FAA6F;IAC7F,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,YAAY,CAAC,EAAE,MAAM,CAAC;CACzB;AA6BD,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,WAAW,EAAE,OAAO,GAAE,iBAAsB;oBAKzD,WAAW;;;;;;;;;;;;;EAkF3C"}

package/dist/routes/revalidate.js

@@ -0,0 +1,136 @@
+import { createHmac, timingSafeEqual } from "node:crypto";
+import { revalidateTag } from "next/cache";
+import { NextResponse } from "next/server";
+/*
+ * The endpoint that makes the cache correct.
+ *
+ * barakoCMS fires a signed webhook when content changes and this drops the cache tag, so the next
+ * request renders fresh. It is the only writer to the cache and it is reachable by anyone who
+ * finds the URL, so the order of the checks matters as much as the checks.
+ *
+ * The signing recipe is barakoCMS docs/webhooks.md:
+ *
+ *   X-Barako-Timestamp   unix seconds when it was signed
+ *   X-Barako-Signature   "sha256=" + lowercase hex HMAC-SHA256 over "<timestamp>.<raw body>"
+ *   X-Barako-Delivery    the delivery log row id
+ *
+ * Four things are load-bearing:
+ *
+ *   1. The signature covers the RAW body bytes. Parse the JSON first and you have re-serialised
+ *      it into a different string that will never verify.
+ *   2. Constant-time compare, or a few thousand requests recover the expected signature.
+ *   3. An old timestamp is refused, so a captured delivery cannot be replayed forever.
+ *   4. Cheap checks come first. Reading an unbounded body into memory before authenticating lets
+ *      an anonymous caller spend this server's memory, so the length is checked first and the
+ *      read is capped.
+ */
+const TOLERANCE_SECONDS = 300;
+/** A signed delivery is small. Anything larger did not come from the CMS. */
+const MAX_BODY_BYTES = 64 * 1024;
+/** Constant-time compare that does not leak length through an early return either. */
+function sameSignature(a, b) {
+    const left = Buffer.from(a, "utf8");
+    const right = Buffer.from(b, "utf8");
+    if (left.length !== right.length)
+        return false;
+    return timingSafeEqual(left, right);
+}
+/*
+ * A replayed delivery is honoured once.
+ *
+ * A captured signature stays valid for the whole tolerance window, and each accepted purge costs
+ * a re-render of every cached page. Remembering what has already been honoured turns "unlimited
+ * work for five minutes" into "one". In-process, which is the same scope as the cache it
+ * protects: another instance has its own cache and would do its own single purge anyway.
+ */
+function makeReplayGuard(windowSeconds) {
+    const seen = new Map();
+    return function alreadyHonoured(signature) {
+        const now = Date.now() / 1000;
+        for (const [sig, at] of seen)
+            if (now - at > windowSeconds)
+                seen.delete(sig);
+        if (seen.has(signature))
+            return true;
+        seen.set(signature, now);
+        return false;
+    };
+}
+export function createRevalidateRoute(config, options = {}) {
+    const tolerance = options.toleranceSeconds ?? TOLERANCE_SECONDS;
+    const maxBody = options.maxBodyBytes ?? MAX_BODY_BYTES;
+    const alreadyHonoured = makeReplayGuard(tolerance);
+    async function POST(request) {
+        const secret = options.secret ?? process.env.REVALIDATE_SECRET;
+        if (!secret) {
+            // Refuse rather than accept unsigned. An unconfigured deployment that quietly accepts
+            // anything is an open cache-purge endpoint, which is a free denial of service.
+            console.error("revalidate: no secret configured, refusing every delivery");
+            return NextResponse.json({ error: "not configured" }, { status: 503 });
+        }
+        const timestamp = request.headers.get("x-barako-timestamp");
+        const signature = request.headers.get("x-barako-signature");
+        if (!timestamp || !signature) {
+            return NextResponse.json({ error: "unsigned" }, { status: 401 });
+        }
+        const sent = Number(timestamp);
+        if (!Number.isFinite(sent)) {
+            return NextResponse.json({ error: "bad timestamp" }, { status: 401 });
+        }
+        if (Math.abs(Date.now() / 1000 - sent) > tolerance) {
+            // Also catches a receiver whose clock has drifted, which looks identical from here.
+            return NextResponse.json({ error: "stale" }, { status: 401 });
+        }
+        // Length before content: the last check that costs nothing.
+        const declared = Number(request.headers.get("content-length") ?? "0");
+        if (Number.isFinite(declared) && declared > maxBody) {
+            return NextResponse.json({ error: "too large" }, { status: 413 });
+        }
+        const raw = Buffer.from(await request.arrayBuffer());
+        if (raw.byteLength > maxBody) {
+            // A chunked request declares no length, so the read is bounded again here.
+            return NextResponse.json({ error: "too large" }, { status: 413 });
+        }
+        const material = Buffer.concat([Buffer.from(`${timestamp}.`, "utf8"), raw]);
+        const expected = "sha256=" + createHmac("sha256", secret).update(material).digest("hex");
+        if (!sameSignature(expected, signature)) {
+            return NextResponse.json({ error: "bad signature" }, { status: 401 });
+        }
+        if (alreadyHonoured(signature)) {
+            // Honest 200: the purge this delivery asked for has already happened, so the CMS has
+            // no reason to retry. A 401 here would make a legitimate retry look like an attack.
+            return NextResponse.json({ revalidated: true, repeated: true });
+        }
+        /*
+         * No cache warming here, deliberately.
+         *
+         * An earlier version fetched the main pages after purging, on the theory that Next serves
+         * one stale response after a purge and this server should absorb it. Measured against a
+         * CMS that logs every read, those fetches caused zero reads and re-rendered nothing:
+         * `{ expire: 0 }` already makes the next request a blocking miss, and a page that was
+         * never in the warm list was equally fresh for its first reader.
+         *
+         * It could not have worked in the shipped stack anyway. Caddy sets X-Forwarded-Proto, so
+         * the origin resolved to https against the plain HTTP server inside this container, and
+         * the failure was swallowed without a log line. Three requests per delivery, latency on
+         * the response, and triple the work an attacker gets from one captured signature, for
+         * nothing.
+         */
+        revalidateTag(config.cacheTag, { expire: 0 });
+        // The delivery id is echoed only after the signature verified, so an anonymous caller
+        // cannot put text of their choosing into this server's log.
+        const delivery = request.headers.get("x-barako-delivery") ?? "unknown";
+        console.log(`revalidate: dropped tag "${config.cacheTag}" for delivery ${delivery}`);
+        return NextResponse.json({ revalidated: true, tag: config.cacheTag, delivery });
+    }
+    /*
+     * GET answers "is this wired up" without a signed request, and reveals nothing: not whether a
+     * secret is set, not the tag, not the last delivery. A health check that leaks configuration
+     * is how someone learns what to forge.
+     */
+    async function GET() {
+        return NextResponse.json({ ok: true });
+    }
+    return { POST, GET };
+}
+//# sourceMappingURL=revalidate.js.map

package/dist/routes/revalidate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"revalidate.js","sourceRoot":"","sources":["../../src/routes/revalidate.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAC1D,OAAO,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAC3C,OAAO,EAAE,YAAY,EAAoB,MAAM,aAAa,CAAC;AAG7D;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAEH,MAAM,iBAAiB,GAAG,GAAG,CAAC;AAE9B,6EAA6E;AAC7E,MAAM,cAAc,GAAG,EAAE,GAAG,IAAI,CAAC;AAUjC,sFAAsF;AACtF,SAAS,aAAa,CAAC,CAAS,EAAE,CAAS;IACvC,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;IACpC,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;IACrC,IAAI,IAAI,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IAC/C,OAAO,eAAe,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;AACxC,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,eAAe,CAAC,aAAqB;IAC1C,MAAM,IAAI,GAAG,IAAI,GAAG,EAAkB,CAAC;IACvC,OAAO,SAAS,eAAe,CAAC,SAAiB;QAC7C,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;QAC9B,KAAK,MAAM,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,IAAI;YAAE,IAAI,GAAG,GAAG,EAAE,GAAG,aAAa;gBAAE,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC7E,IAAI,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC;YAAE,OAAO,IAAI,CAAC;QACrC,IAAI,CAAC,GAAG,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC;QACzB,OAAO,KAAK,CAAC;IACjB,CAAC,CAAC;AACN,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,MAAmB,EAAE,OAAO,GAAsB,EAAE;IACtF,MAAM,SAAS,GAAG,OAAO,CAAC,gBAAgB,IAAI,iBAAiB,CAAC;IAChE,MAAM,OAAO,GAAG,OAAO,CAAC,YAAY,IAAI,cAAc,CAAC;IACvD,MAAM,eAAe,GAAG,eAAe,CAAC,SAAS,CAAC,CAAC;IAEnD,KAAK,UAAU,IAAI,CAAC,OAAoB;QACpC,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC;QAC/D,IAAI,CAAC,MAAM,EAAE,CAAC;YACV,sFAAsF;YACtF,+EAA+E;YAC/E,OAAO,CAAC,KAAK,CAAC,2DAA2D,CAAC,CAAC;YAC3E,OAAO,YAAY,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,gBAAgB,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;QAC3E,CAAC;QAED,MAAM,SAAS,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAC;QAC5D,MAAM,SAAS,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAC;QAC5D,IAAI,CAAC,SAAS,IAAI,CAAC,SAAS,EAAE,CAAC;YAC3B,OAAO,YAAY,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,UAAU,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;QACrE,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,CAAC,SAAS,CAAC,CAAC;QAC/B,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;YACzB,OAAO,YAAY,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,eAAe,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;QAC1E,CAAC;QACD,IAAI,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC,GAAG,SAAS,EAAE,CAAC;YACjD,oFAAoF;YACpF,OAAO,YAAY,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;QAClE,CAAC;QAED,4DAA4D;QAC5D,MAAM,QAAQ,GAAG,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,IAAI,GAAG,CAAC,CAAC;QACtE,IAAI,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,QAAQ,GAAG,OAAO,EAAE,CAAC;YAClD,OAAO,YAAY,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;QACtE,CAAC;QAED,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC;QACrD,IAAI,GAAG,CAAC,UAAU,GAAG,OAAO,EAAE,CAAC;YAC3B,2EAA2E;YAC3E,OAAO,YAAY,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;QACtE,CAAC;QAED,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,SAAS,GAAG,EAAE,MAAM,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;QAC5E,MAAM,QAAQ,GAAG,SAAS,GAAG,UAAU,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACzF,IAAI,CAAC,aAAa,CAAC,QAAQ,EAAE,SAAS,CAAC,EAAE,CAAC;YACtC,OAAO,YAAY,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,eAAe,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;QAC1E,CAAC;QAED,IAAI,eAAe,CAAC,SAAS,CAAC,EAAE,CAAC;YAC7B,qFAAqF;YACrF,oFAAoF;YACpF,OAAO,YAAY,CAAC,IAAI,CAAC,EAAE,WAAW,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;QACpE,CAAC;QAED;;;;;;;;;;;;;;WAcG;QACH,aAAa,CAAC,MAAM,CAAC,QAAQ,EAAE,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC,CAAC;QAE9C,sFAAsF;QACtF,4DAA4D;QAC5D,MAAM,QAAQ,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC,IAAI,SAAS,CAAC;QACvE,OAAO,CAAC,GAAG,CAAC,4BAA4B,MAAM,CAAC,QAAQ,kBAAkB,QAAQ,EAAE,CAAC,CAAC;QACrF,OAAO,YAAY,CAAC,IAAI,CAAC,EAAE,WAAW,EAAE,IAAI,EAAE,GAAG,EAAE,MAAM,CAAC,QAAQ,EAAE,QAAQ,EAAE,CAAC,CAAC;IACpF,CAAC;IAED;;;;OAIG;IACH,KAAK,UAAU,GAAG;QACd,OAAO,YAAY,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;IAC3C,CAAC;IAED,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC;AACzB,CAAC"}

package/dist/routes/robots.d.ts

@@ -0,0 +1,4 @@
+import type { MetadataRoute } from "next";
+import type { PressConfig } from "../config.js";
+export declare function createRobots(config: PressConfig): () => MetadataRoute.Robots;
+//# sourceMappingURL=robots.d.ts.map

package/dist/routes/robots.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"robots.d.ts","sourceRoot":"","sources":["../../src/routes/robots.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,MAAM,CAAC;AAC1C,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAWhD,wBAAgB,YAAY,CAAC,MAAM,EAAE,WAAW,SAClB,aAAa,CAAC,MAAM,CAMjD"}

package/dist/routes/robots.js

@@ -0,0 +1,18 @@
+/*
+ * Generated, because the Sitemap line has to be an absolute URL and the domain is per deployment.
+ * A relative Sitemap: is ignored.
+ *
+ * The URL comes from config rather than process.env read at module scope. That distinction is the
+ * whole bug it fixes: this route is prerendered at build, so an env read baked the build
+ * machine's value in permanently, and production advertised a localhost sitemap that no cache
+ * purge could ever correct.
+ */
+export function createRobots(config) {
+    return function robots() {
+        return {
+            rules: { userAgent: "*", allow: "/" },
+            sitemap: `${config.site.url}/sitemap.xml`,
+        };
+    };
+}
+//# sourceMappingURL=robots.js.map

package/dist/routes/robots.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"robots.js","sourceRoot":"","sources":["../../src/routes/robots.ts"],"names":[],"mappings":"AAGA;;;;;;;;GAQG;AACH,MAAM,UAAU,YAAY,CAAC,MAAmB;IAC5C,OAAO,SAAS,MAAM;QAClB,OAAO;YACH,KAAK,EAAE,EAAE,SAAS,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE;YACrC,OAAO,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,cAAc;SAC5C,CAAC;IACN,CAAC,CAAC;AACN,CAAC"}

package/dist/routes/sitemap.d.ts

@@ -0,0 +1,4 @@
+import type { MetadataRoute } from "next";
+import type { PressConfig } from "../config.js";
+export declare function createSitemap(config: PressConfig): () => Promise<MetadataRoute.Sitemap>;
+//# sourceMappingURL=sitemap.d.ts.map

package/dist/routes/sitemap.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sitemap.d.ts","sourceRoot":"","sources":["../../src/routes/sitemap.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,MAAM,CAAC;AAC1C,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAWhD,wBAAgB,aAAa,CAAC,MAAM,EAAE,WAAW,SACZ,OAAO,CAAC,aAAa,CAAC,OAAO,CAAC,CAqBlE"}