domma-cms 0.44.0 → 0.45.1

package/server/services/markdown.js

@@ -52,10 +52,10 @@ function escapeHtmlText(str) {
  *
  * Two attribute styles are recognised and merged (with where_* taking precedence):
  *
- *   1. Legacy `where="field1=value1,field2=value2"` — equality only, comma-separated.
+ *   1. Legacy `where="field1=value1,field2=value2"` - equality only, comma-separated.
  *      Predates the structured DSL; preserved for backward compat.
  *
- *   2. New `where_<field>[_<op>]="value"` attributes — full operator support.
+ *   2. New `where_<field>[_<op>]="value"` attributes - full operator support.
  *      Example: `where_location="London" where_salary_gte="50000"
  *               where_tags_in="remote,hybrid"`.
  *      Maps directly onto the filterEngine DSL.
@@ -130,7 +130,7 @@ async function loadBlockCss(blockName) {
  */
 /**
  * Format a Date (or ISO string) using moment.js-style tokens.
- * Returns null when the input can't be parsed as a valid date — lets callers
+ * Returns null when the input can't be parsed as a valid date - lets callers
  * fall back to the raw value so non-date fields passed with a format don't
  * silently blank out.
  *
@@ -199,7 +199,7 @@ export function resolveExportConfig(schemaExport, attrs, defaultRole) {
 }
 
 /**
- * The role names permitted by an `access` setting — the named role plus every
+ * The role names permitted by an `access` setting - the named role plus every
  * more-privileged one above it.
  *
  * The browser cannot do this itself: it learns the visitor's role name from
@@ -223,7 +223,7 @@ function rolesAtOrAbove(access) {
 /**
  * Build the `data-ctx` attribute that powers the public-site right-click
  * search/filter menu (public/js/collection-context.js). The payload carries
- * ONLY the fields the display actually renders — never the full entry data —
+ * ONLY the fields the display actually renders - never the full entry data -
  * so hidden/allowlisted-away fields can't leak through the attribute.
  *
  * @param {Array<{name: string, label?: string}>} fields - displayed fields
@@ -266,10 +266,10 @@ function buildBlockStyleTag(blockName, css) {
 /**
  * Interpolate a block template against a single collection entry.
  *
- * Triple-brace `{{{field}}}` — raw HTML pass-through (no escape). Use for
+ * Triple-brace `{{{field}}}` - raw HTML pass-through (no escape). Use for
  * fields that contain pre-rendered HTML. Must be processed BEFORE double-brace
  * so the outer `{`/`}` of a triple match aren't consumed by the double-brace
- * regex. Double-brace `{{field}}` — HTML-escaped (default, safe), with an
+ * regex. Double-brace `{{field}}` - HTML-escaped (default, safe), with an
  * optional `:format` suffix (e.g. `{{_createdAt:DD MMM YYYY}}`) that applies
  * moment-style date formatting when the value parses as a Date.
  *
@@ -312,8 +312,8 @@ function renderCollectionBlocks(entries, blockTemplate, emptyMsg, ctaOpts, cols,
     }
 
     // Every entry gets a neutral wrapper carrying data-entry-id (needed by the
-    // public right-click filter menu); the data-block attribute — which scopes
-    // the block's CSS — is only added when the block actually carries CSS.
+    // public right-click filter menu); the data-block attribute - which scopes
+    // the block's CSS - is only added when the block actually carries CSS.
     const hasCss = !!(blockCss && blockCss.trim());
     const blockAttr = hasCss && blockName ? ` data-block="${escapeAttr(blockName)}"` : '';
 
@@ -441,7 +441,7 @@ async function processStaticBlocks(content, tagSet) {
 }
 
 /**
- * Detect a stored file reference — the object shape produced by the form's
+ * Detect a stored file reference - the object shape produced by the form's
  * multipart parser: { url, name, size?, mime? }.
  */
 function isFileRef(v) {
@@ -480,7 +480,7 @@ function displayValue(entry, field) {
  * As `displayValue` but returns an HTML fragment. References with a
  * `linkTemplate` render as `<a>`; file references render as `<img>` (image
  * mimes) or `<a download>` (everything else). The caller is responsible
- * for sanitisation — values pass through `escapeHtmlText`/`escapeAttr`.
+ * for sanitisation - values pass through `escapeHtmlText`/`escapeAttr`.
  */
 function displayValueHtml(entry, field) {
     if (field.type === 'reference') {
@@ -664,7 +664,7 @@ function renderCollectionTimeline(entries, opts, ctxOpts = {}) {
 }
 
 /**
- * Render a collection as a Domma carousel — one slide per entry.
+ * Render a collection as a Domma carousel - one slide per entry.
  * Output mirrors processCarouselBlocks so site.js's `.carousel` auto-init
  * (Domma.elements.carousel) picks it up unchanged.
  *
@@ -724,7 +724,7 @@ function renderCollectionCarousel(entries, opts, ctxOpts = {}) {
 }
 
 /**
- * Render a collection as a Domma list group — one item per entry.
+ * Render a collection as a Domma list group - one item per entry.
  * Output mirrors processListGroupBlocks (pure CSS component, no JS init).
  *
  * Per-item content comes either from a block template (interpolated per
@@ -752,7 +752,7 @@ function blockNotFoundHtml(blockName) {
 /**
  * Load a block's template + CSS when a block attr is present.
  * Returns {tpl: '', css: '', missing: false} when no block was requested,
- * and {missing: true} when the named block can't be loaded — callers show
+ * and {missing: true} when the named block can't be loaded - callers show
  * blockNotFoundHtml() rather than silently falling back to field rendering.
  *
  * @param {string} [blockName]
@@ -842,7 +842,7 @@ async function processViewBlocks(markdown, tagSet) {
         }
         tagSet?.add(`view:${slug}`);
 
-        // Interactive `[view]` — when searchable / sortable / paginate is set,
+        // Interactive `[view]` - when searchable / sortable / paginate is set,
         // emit a Collection Browser shell against the view's executed dataset.
         // No filter rail (views own their own filter logic) but search, sort,
         // and pagination work as on `[collection]`. This is how cross-collection
@@ -881,7 +881,7 @@ async function processViewBlocks(markdown, tagSet) {
             const entries = results.map(doc => ({id: doc.id || '', data: doc.data || doc}));
 
             // Resolve the view's underlying collection schema to compute export
-            // permission. Views don't own a schema themselves — [dis]allowing
+            // permission. Views don't own a schema themselves - [dis]allowing
             // export must fall back CLOSED if the source collection can't be
             // resolved, since an open fallback would be a permission bypass.
             const sourceSlug = viewConfig?.pipeline?.source || '';
@@ -978,7 +978,7 @@ async function processViewBlocks(markdown, tagSet) {
                 replacement = renderCollectionTable(`view:${slug}`, entries, fields, attrs, ctaOpts, ctxOpts);
             }
         } catch {
-            // View not found or pipeline error — show empty state
+            // View not found or pipeline error - show empty state
         }
 
         if (attrs.class || attrs.id) {
@@ -1022,7 +1022,7 @@ async function processCollectionBlocks(markdown, tagSet) {
         // scope="mine" can't share the per-role page cache (data is per-user),
         // so emit a hydration placeholder. The public site JS POSTs the raw
         // attrs to /api/collections/render-scope, which re-runs renderCollectionFragment
-        // server-side with `createdBy = <current user>` injected — keeping rendering
+        // server-side with `createdBy = <current user>` injected - keeping rendering
         // logic in ONE place (no client-side template duplication).
         if (attrs.scope === 'mine') {
             const encoded    = Buffer.from(JSON.stringify(attrs), 'utf8').toString('base64');
@@ -1037,7 +1037,7 @@ async function processCollectionBlocks(markdown, tagSet) {
             continue;
         }
 
-        // Interactive Collection Browser — searchable / filterable / sortable
+        // Interactive Collection Browser - searchable / filterable / sortable
         // turns the block into a full client-side browser with auto-derived
         // filter UI, sort dropdown, search box, and pagination. We still emit
         // a server-rendered fragment as the no-JS fallback (visible until the
@@ -1084,18 +1084,18 @@ function isTruthyAttr(v) {
  * Build the hydration shell for the Collection Browser component.
  *
  * The shell ships three things to the client:
- *   1. **config**  — display mode, columns, page size, which fields are
+ *   1. **config**  - display mode, columns, page size, which fields are
  *                    sortable/filterable, mode (client|server), labels.
- *   2. **schema**  — the collection's field definitions, used to auto-derive
+ *   2. **schema**  - the collection's field definitions, used to auto-derive
  *                    the right filter control per field type (text → input,
  *                    select → dropdown, number → range, date → from/to, etc.).
- *   3. **data**    — for mode=client, ALL entries (capped at `maxClientEntries`)
+ *   3. **data**    - for mode=client, ALL entries (capped at `maxClientEntries`)
  *                    so filtering is instant. For mode=server, only the first
  *                    page is shipped and subsequent pages are fetched via the
  *                    existing `/api/collections/:slug/public` endpoint with
  *                    `filter[…]`, `sort`, `order`, `page`, `limit` params.
  *
- * A static server-rendered fragment is also embedded as the no-JS fallback —
+ * A static server-rendered fragment is also embedded as the no-JS fallback -
  * visible until `collection-browser.js` hydrates and replaces the shell.
  *
  * @param {Record<string, string>} attrs - Parsed shortcode attributes
@@ -1122,7 +1122,7 @@ async function renderCollectionBrowserShell(attrs) {
         schema = await getCollection(slug);
         if (!schema) throw new Error('not found');
 
-        // Build the seed listEntries() opts — push any author-baked where_* filter
+        // Build the seed listEntries() opts - push any author-baked where_* filter
         // and the initial sort/order down to the adapter, just like the static path.
         const seedFilter = buildShortcodeFilter(attrs);
         const seedOpts   = {
@@ -1136,7 +1136,7 @@ async function renderCollectionBrowserShell(attrs) {
         if (mode === 'client') {
             // Cap the inline payload to avoid bloating cached HTML for huge collections.
             // If we hit the cap, transparently downgrade to mode=server so pagination
-            // still works — the author gets correct UX even on misconfigured pages.
+            // still works - the author gets correct UX even on misconfigured pages.
             seedOpts.limit = maxClientEntries + 1;
             const r = await listEntries(slug, seedOpts);
             if (r.total > maxClientEntries) {
@@ -1151,7 +1151,7 @@ async function renderCollectionBrowserShell(attrs) {
                 total   = r.total;
             }
         } else {
-            // mode=server — ship only the first page; subsequent pages fetched live.
+            // mode=server - ship only the first page; subsequent pages fetched live.
             seedOpts.limit = pageSize;
             seedOpts.page  = 1;
             const r = await listEntries(slug, seedOpts);
@@ -1159,7 +1159,7 @@ async function renderCollectionBrowserShell(attrs) {
             total   = r.total;
         }
     } catch {
-        // Slug unknown / read error — emit an empty shell so the page still renders.
+        // Slug unknown / read error - emit an empty shell so the page still renders.
         schema  = {fields: [], title: attrs.slug};
         entries = [];
         total   = 0;
@@ -1198,12 +1198,12 @@ async function renderCollectionBrowserShell(attrs) {
             style:   attrs['cta-style']   || 'primary',
             confirm: attrs['cta-confirm'] || ''
         } : null,
-        baked: buildShortcodeFilter(attrs),                        // author's where_* filter — locked in, not user-tweakable
+        baked: buildShortcodeFilter(attrs),                        // author's where_* filter - locked in, not user-tweakable
         initial: { sort: attrs.sort || 'createdAt', order: attrs.order || 'desc' },
         syncUrl: !isTruthyAttr(attrs['no-url-sync'])               // default ON
     };
 
-    // No-JS fallback — render the same first-page state with the static renderer.
+    // No-JS fallback - render the same first-page state with the static renderer.
     const fallbackAttrs = {...attrs, limit: String(pageSize)};
     const fallback      = await renderCollectionFragment(fallbackAttrs);
 
@@ -1224,7 +1224,7 @@ async function renderCollectionBrowserShell(attrs) {
 
 /**
  * Interactive `[view]` hydration shell. Saved views compose collections,
- * joins, and pre-filters that aren't expressible in plain `where_*` syntax —
+ * joins, and pre-filters that aren't expressible in plain `where_*` syntax -
  * so the browser treats a view as a read-only data source: search, sort,
  * and pagination work; the filter rail is off by default (the view's own
  * filter logic is the authoritative source). Authors can still expose user
@@ -1248,7 +1248,7 @@ async function renderViewBrowserShell(attrs) {
         viewConfig = await getView(slug).catch(() => null);
 
         if (declaredMode === 'client') {
-            // For views we cap aggressively — views can be expensive aggregations.
+            // For views we cap aggressively - views can be expensive aggregations.
             const r = await executeView(slug, {page: 1, limit: 500});
             entries = (r.results || []).map(doc => ({id: doc.id || '', data: doc.data || doc}));
             total   = r.total ?? entries.length;
@@ -1258,7 +1258,7 @@ async function renderViewBrowserShell(attrs) {
             total   = r.total ?? entries.length;
         }
     } catch {
-        // executeView errored (view missing or pipeline error) — emit empty shell.
+        // executeView errored (view missing or pipeline error) - emit empty shell.
     }
 
     // Derive a schema-like fields list from the first row so the browser can
@@ -1332,12 +1332,12 @@ async function renderViewBrowserShell(attrs) {
  *   - The collection hydration endpoint (client-side render when scope="mine"
  *     forces per-user data that can't share the page cache)
  *
- * `extraFilter` is merged on top of any filter derived from `where_*` attrs —
+ * `extraFilter` is merged on top of any filter derived from `where_*` attrs -
  * this is how the hydration endpoint injects `createdBy = <current user>`
  * for scope=mine without trusting the client to set it.
  *
  * Returns a complete HTML fragment including the optional outer wrapper for
- * `class=` / `id=` attributes. Always succeeds — render errors fall back to
+ * `class=` / `id=` attributes. Always succeeds - render errors fall back to
  * the empty-state HTML rather than throwing, so a typo in a single shortcode
  * can't break a whole page render.
  *
@@ -1472,7 +1472,7 @@ export async function renderCollectionFragment(attrs, { extraFilter = null } = {
             replacement = renderCollectionTable(slug, entries, fields, attrs, ctaOpts, ctxOpts);
         }
     } catch {
-        // Collection not found or read error — show empty message
+        // Collection not found or read error - show empty message
     }
 
     if (attrs.class || attrs.id) {
@@ -1491,7 +1491,7 @@ export async function renderCollectionFragment(attrs, { extraFilter = null } = {
  */
 export function parseShortcodeAttrs(attrStr) {
   const attrs = {};
-  // Pass 1: quoted key="value" or key='value' pairs — proper disjunction so
+  // Pass 1: quoted key="value" or key='value' pairs - proper disjunction so
   // a double-quoted value can contain apostrophes (and vice versa) without
   // the opposite quote terminating the match.
   for (const [, key, dq, sq] of attrStr.matchAll(/([\w-]+)=(?:"([^"]*)"|'([^']*)')/g)) {
@@ -1499,7 +1499,7 @@ export function parseShortcodeAttrs(attrStr) {
   }
   // Pass 2: unquoted key=value (a value with no whitespace or quotes). Authors
   // type `slug=main` constantly; without this pass it parsed as the two flags
-  // `slug` and `main`, so the shortcode silently lost its argument — and a
+  // `slug` and `main`, so the shortcode silently lost its argument - and a
   // [menu] with a boolean slug then resolved to nothing and vanished.
   let stripped = attrStr.replace(/([\w-]+)=(?:"[^"]*"|'[^']*')/g, m => ' '.repeat(m.length));
   for (const [, key, val] of stripped.matchAll(/([\w-]+)=([^\s"'\]]+)/g)) {
@@ -1527,7 +1527,7 @@ export function parseShortcodeAttrs(attrStr) {
  * NEST: a shortcode handler may run nested processors (processCardBlocks,
  * processGridBlocks, …) on an already-scrubbed body, and each of those scrubs
  * again. Without a per-call id, the inner restore's regex also matched the
- * OUTER call's placeholders and looked them up in the wrong store —
+ * OUTER call's placeholders and looked them up in the wrong store -
  * `store[idx]` → undefined, which surfaced as literal "undefined" strings
  * wherever inline code appeared inside [reveal]/effects bodies. With the id,
  * each restore only touches its own placeholders and the outer restore picks
@@ -1645,7 +1645,7 @@ function processEffectsBlocks(markdown) {
         return `<div class="dm-fx-celebrate"${dataAttrs}></div>`;
     });
 
-    // Named celebration shortcodes — sugar for [celebrate theme="..."] with override support
+    // Named celebration shortcodes - sugar for [celebrate theme="..."] with override support
     ['christmas', 'halloween', 'st-patricks', 'valentines', 'guy-fawkes',
         'st-andrews', 'st-davids', 'st-georges'].forEach(themeName => {
         apply(themeName, (attrStr) => {
@@ -1704,7 +1704,7 @@ function processEffectsBlocks(markdown) {
                 else if (uAttrs.count) actions.push({undoRender: parseInt(uAttrs.count, 10)});
                 else actions.push({undoRender: true});
             } else {
-                // [redraw] — sugar for [undo all="true" /] + [render]
+                // [redraw] - sugar for [undo all="true" /] + [render]
                 const rAttrs = parseShortcodeAttrs(match[5] || '');
                 actions.push({undoRender: 'all'});
                 const action = {render: match[6].trim()};
@@ -1746,7 +1746,7 @@ function processEffectsBlocks(markdown) {
 
     // [butterflies /]            → full-page overlay (mode=page)
     // [butterflies] body [/butterflies] → container-scoped (mode=container)
-    // [strobe /] / [strobe] body [/strobe] — same shape
+    // [strobe /] / [strobe] body [/strobe] - same shape
     for (const name of ['butterflies', 'strobe']) {
         apply(name, (attrStr, body) => {
             const attrs = parseShortcodeAttrs(attrStr);
@@ -1790,7 +1790,7 @@ function processEffectsBlocks(markdown) {
 /**
  * Pre-process [row], [grid], and [col] shortcodes before running through marked.
  *
- * Uses Domma's native CSS Grid system — NOT the .col compatibility layer.
+ * Uses Domma's native CSS Grid system - NOT the .col compatibility layer.
  *
  * Supported shortcodes:
  *
@@ -1842,7 +1842,7 @@ function processGridBlocks(markdown) {
       const allClasses = [baseCls, ...injected.effectClasses].join(' ');
       const cls = ` class="${allClasses}"`;
       const id = attrs.id ? ` id="${escapeAttr(attrs.id)}"` : '';
-      // Restore the col body before passing it downstream — otherwise the
+      // Restore the col body before passing it downstream - otherwise the
       // scrub placeholders from this processor's store get carried into
       // processCardBlocks, which creates its own empty store and fails to
       // decode them, producing the literal string "undefined" in place of
@@ -1905,8 +1905,8 @@ function processGridBlocks(markdown) {
  */
 /**
  * Process component references on a Markdown body in two injection forms:
- *   1. [component name="x" attr="y" /]   — shortcode (rewritten to form 2)
- *   2. <dm-x attr="y"></dm-x>            — raw custom-element tag
+ *   1. [component name="x" attr="y" /]   - shortcode (rewritten to form 2)
+ *   2. <dm-x attr="y"></dm-x>            - raw custom-element tag
  *
  * Rewrites form 1 to form 2 in-place, and collects every dm-<name> tag encountered
  * into a de-duplicated Set so the renderer can inject only the scripts this page uses.
@@ -2270,7 +2270,7 @@ LAYOUT_RENDERERS['avatar-profile'] = (attrs, body) => {
 
 LAYOUT_RENDERERS['stat-metric'] = (attrs, _body) => {
     const title = escapeAttr(attrs.title || '');
-    const value = escapeAttr(attrs.value || '—');
+    const value = escapeAttr(attrs.value || '-');
     const delta = escapeAttr(attrs.delta || '');
     const progress = Math.min(100, Math.max(0, parseInt(attrs.progress || '0', 10)));
     const isPos = delta && !delta.startsWith('-') && !delta.startsWith('↓');
@@ -2543,7 +2543,7 @@ function renderLegacyCard(attrs, body, markedInstance, escAttr) {
 
     const injected = extractInjectedEffects(attrs, CARD_INJECTABLE);
 
-    // Root class list — delegate to the shared helper so variant="gradient",
+    // Root class list - delegate to the shared helper so variant="gradient",
     // gradient="<name>", glass/accent/dark/glow, font, shadow, rounded, etc.
     // all work on legacy cards (cards without a `layout` attribute).
     const classes = cardVariantClasses(attrs);
@@ -2575,7 +2575,7 @@ function renderLegacyCard(attrs, body, markedInstance, escAttr) {
         }
     );
 
-    // Header — sub-tag wins over attributes; attributes only used when no sub-tag
+    // Header - sub-tag wins over attributes; attributes only used when no sub-tag
     let headerHtml = '';
     if (headerContent !== null) {
         headerHtml = `<div class="card-header">${markedInstance.parse(headerContent)}</div>`;
@@ -2610,7 +2610,7 @@ function renderLegacyCard(attrs, body, markedInstance, escAttr) {
 }
 
 // ---------------------------------------------------------------------------
-// processCardBlocks — routing entry point
+// processCardBlocks - routing entry point
 // ---------------------------------------------------------------------------
 
 /**
@@ -2956,7 +2956,7 @@ function processTimelineBlocks(markdown) {
  *   [badge variant="danger" outline pill]Deprecated[/badge]
  *   [badge variant="warning" size="small"]Beta[/badge]
  *
- * Syntax (self-closing, renders empty badge — useful for coloured dots):
+ * Syntax (self-closing, renders empty badge - useful for coloured dots):
  *   [badge variant="primary" pill /]
  *
  * Supported attributes:
@@ -2992,7 +2992,7 @@ function processBadgeBlocks(markdown) {
   // Self-closing: [badge ... /]
   let result = scrubbed.replace(/\[badge([^\]]*?)\/\]/gi, (_, attrStr) => buildBadge(attrStr, ''));
 
-  // Paired: [badge ...]...[/badge]  (inline only — no newlines inside)
+  // Paired: [badge ...]...[/badge]  (inline only - no newlines inside)
   result = result.replace(/\[badge([^\]]*)\]([^\n]*?)\[\/badge\]/gi, (_, attrStr, inner) => {
     return buildBadge(attrStr, inner.trim());
   });
@@ -3262,7 +3262,7 @@ function processTableBlocks(markdown) {
  *                  "gradient-forest", "gradient-night"
  *                theme-specific (26): "gradient-{theme}-{mode}" where theme is one of
  *                  ocean, forest, sunset, royal, lemon, silver, charcoal, christmas,
- *                  unicorn, dreamy, grayve, mint, wedding — and mode is light or dark
+ *                  unicorn, dreamy, grayve, mint, wedding - and mode is light or dark
  *                → .hero-{variant}
  *   image      - URL for background-image + adds .hero-cover
  *   overlay    - "light", "dark", "darker", "gradient", "gradient-reverse" → .hero-overlay-{overlay}
@@ -3270,10 +3270,10 @@ function processTableBlocks(markdown) {
  *   bg / color - Background colour (any safe CSS colour value)
  *   min-height - Minimum height (px, em, rem, vh, vw, %)
  *   fullwidth  - "true" breaks out of the page container to span the full viewport width (adds .hero-breakout).
- *                Must be the literal string "true" — the attribute is otherwise ignored.
- *   twinkle         - Flag attribute — adds particle overlay (requires Effects plugin)
+ *                Must be the literal string "true" - the attribute is otherwise ignored.
+ *   twinkle         - Flag attribute - adds particle overlay (requires Effects plugin)
  *   twinkle-*       - Any prefixed attribute is forwarded as data-fx-* (see extractInjectedEffects)
- *   blobs           - Flag attribute — adds ambient blob background
+ *   blobs           - Flag attribute - adds ambient blob background
  *   blobs-type      - Blob animation type (default: "float-blobs")
  *   class      - Extra classes appended to .hero
  *   id         - Element id attribute
@@ -3389,7 +3389,7 @@ function processCenterBlocks(markdown) {
             const classAttr = attrs.class ? ` class="${escapeAttr(attrs.class)}"` : '';
             // Emit the wrapper with blank lines around the body so CommonMark
             // parses markdown inside the div. DO NOT eagerly call marked.parse
-            // here — that HTML-escapes attribute quotes on any unprocessed
+            // here - that HTML-escapes attribute quotes on any unprocessed
             // shortcodes inside (e.g. [button href="..."] becomes href=&quot;...),
             // which breaks every later shortcode processor in the pipeline.
             return `\n<div style="text-align:center;"${classAttr}>\n\n${body.trim()}\n\n</div>\n`;
@@ -3429,11 +3429,11 @@ function processIconBlocks(markdown) {
   ));
 }
 
-// ─── [embed] — video / iframe embeds ───────────────────────────────────────
+// ─── [embed] - video / iframe embeds ───────────────────────────────────────
 
 /**
  * Classify an embed URL into one of: youtube, vimeo, video (self-hosted),
- * iframe (generic) or invalid. Pure — no allow-list logic here; the host
+ * iframe (generic) or invalid. Pure - no allow-list logic here; the host
  * allow-list is applied at render time for the generic-iframe case only.
  *
  * @param {string} url
@@ -3444,23 +3444,23 @@ export function classifyEmbedUrl(url) {
   if (!u) return {type: 'invalid'};
 
   let m;
-  // YouTube — watch?v=, youtu.be/, /embed/, /shorts/, /live/. Any non-empty
+  // YouTube - watch?v=, youtu.be/, /embed/, /shorts/, /live/. Any non-empty
   // id token counts so a YouTube host never falls through to the generic
   // iframe path (which would show a misleading "not allow-listed" message).
   if ((m = u.match(/(?:youtube(?:-nocookie)?\.com\/(?:watch\?(?:[^#]*&)?v=|embed\/|shorts\/|live\/)|youtu\.be\/)([\w-]+)/i))) {
     return {type: 'youtube', id: m[1], src: `https://www.youtube-nocookie.com/embed/${m[1]}`};
   }
-  // Vimeo — vimeo.com/ID or player.vimeo.com/video/ID
+  // Vimeo - vimeo.com/ID or player.vimeo.com/video/ID
   if ((m = u.match(/vimeo\.com\/(?:video\/)?(\d+)/i))) {
     return {type: 'vimeo', id: m[1], src: `https://player.vimeo.com/video/${m[1]}`};
   }
-  // Self-hosted video — by file extension (optional query/hash suffix)
+  // Self-hosted video - by file extension (optional query/hash suffix)
   if ((m = u.match(/\.(mp4|webm|ogg|ogv)(?:\?[^#]*)?(?:#.*)?$/i))) {
     const ext = m[1].toLowerCase();
     const mime = ext === 'mp4' ? 'video/mp4' : ext === 'webm' ? 'video/webm' : 'video/ogg';
     return {type: 'video', src: u, mime};
   }
-  // Generic http(s) — host decides allow/deny at render time
+  // Generic http(s) - host decides allow/deny at render time
   if (/^https?:\/\//i.test(u)) {
     try {
       return {type: 'iframe', src: u, host: new URL(u).hostname};
@@ -3510,7 +3510,7 @@ export function renderEmbed(attrs, allowedHosts = []) {
   const loop = _embedFlag(attrs.loop);
   const muted = _embedFlag(attrs.muted);
 
-  // Outer <figure> — width + alignment.
+  // Outer <figure> - width + alignment.
   const figStyles = ['margin:1.5rem 0'];
   if (attrs.width) {
     const w = /^\d+%$/.test(attrs.width) ? attrs.width : `${parseInt(attrs.width, 10) || 0}px`;
@@ -3560,7 +3560,7 @@ export function renderEmbed(attrs, allowedHosts = []) {
 
 /**
  * Read the generic-iframe host allow-list from config/embeds.json. A missing
- * file yields no extra hosts — YouTube/Vimeo and self-hosted video still work.
+ * file yields no extra hosts - YouTube/Vimeo and self-hosted video still work.
  *
  * @returns {string[]}
  */
@@ -3623,7 +3623,7 @@ const FORMS_DIR = path.resolve(__dirname_md, '../../content/forms');
  * Transform `type: 'reference'` fields on a form definition into select-style
  * fields populated from the target collection. Mutates the form in place.
  *
- * Strategy: lazy server-side expansion at render time — the embedded form
+ * Strategy: lazy server-side expansion at render time - the embedded form
  * doesn't know about references, it just sees a select with options. This
  * keeps the client-side form engine (`F.create`) ignorant of the schema
  * vocabulary and works without any extra round-trips at form render time.
@@ -3670,7 +3670,7 @@ async function expandReferenceFields(form) {
                 _ref: {collection: targetSlug, displayField, originalType: 'reference'}
             };
         } catch {
-            // Target collection missing — render a disabled input with an explanatory placeholder.
+            // Target collection missing - render a disabled input with an explanatory placeholder.
             fields[i] = {
                 ...f,
                 type: 'text',
@@ -3747,7 +3747,7 @@ function processHeroBlocks(markdown) {
       const HERO_INJECTABLE = ['reveal', 'breathe', 'pulse', 'twinkle', 'ticker-tape', 'butterflies', 'strobe', 'ambient', 'animate'];
       const injected = extractInjectedEffects(attrs, HERO_INJECTABLE);
 
-      // Legacy ad-hoc 'blobs' flag — keep for backward compat. Different keyspace
+      // Legacy ad-hoc 'blobs' flag - keep for backward compat. Different keyspace
       // (bg-ambient-* CSS class), not folded into the generic helper.
       const blobs = 'blobs' in attrs;
       const blobsType = attrs['blobs-type'] || 'float-blobs';
@@ -3774,7 +3774,7 @@ function processHeroBlocks(markdown) {
       const idAttr = id ? ` id="${escapeAttr(id)}"` : '';
 
       // Button/link/cta must run before marked.parse so their quoted attributes
-      // aren't HTML-escaped to &quot; — that mangles parseShortcodeAttrs and
+      // aren't HTML-escaped to &quot; - that mangles parseShortcodeAttrs and
       // turns `href="/x"` into a bare flag (attrs.href = true → href="true").
       const processedBody = processCtaBlocks(processLinkBlocks(processButtonBlocks(
           processTextBlocks(processBadgeBlocks(processCardBlocks(processGridBlocks(restore(body.trim())))))
@@ -3934,12 +3934,12 @@ async function processMenuBlocks(markdown, user, ctx = {}) {
         const attrs = parseShortcodeAttrs(m[1] || '');
         // A bare `slug` / `location` with no value parses as the boolean `true`
         // (flag syntax). Treat that as "not supplied" rather than looking up a
-        // menu called "true" — otherwise the shortcode vanished with no clue why.
+        // menu called "true" - otherwise the shortcode vanished with no clue why.
         const slugAttr     = typeof attrs.slug     === 'string' ? attrs.slug     : '';
         const locationAttr = typeof attrs.location === 'string' ? attrs.location : '';
 
         if (!slugAttr && !locationAttr) {
-            out = out.replace(m[0], menuError('[menu] needs a slug or location — e.g. [menu slug="main" /]'));
+            out = out.replace(m[0], menuError('[menu] needs a slug or location - e.g. [menu slug="main" /]'));
             continue;
         }
 
@@ -3954,8 +3954,8 @@ async function processMenuBlocks(markdown, user, ctx = {}) {
                 out = out.replace(m[0], menuError(`Menu not found: ${slugAttr}`));
             } else {
                 // An unmapped slot is a legitimate configuration state (no menu
-                // assigned yet) — render nothing, but leave a trace in the log.
-                console.warn(`[menu] location "${locationAttr}" resolves to no menu — rendering nothing`);
+                // assigned yet) - render nothing, but leave a trace in the log.
+                console.warn(`[menu] location "${locationAttr}" resolves to no menu - rendering nothing`);
                 out = out.replace(m[0], '');
             }
             continue;
@@ -3982,7 +3982,7 @@ async function processMenuBlocks(markdown, user, ctx = {}) {
     return out;
 }
 
-/** Visible diagnostic for an unusable [menu] shortcode — mirrors [form]'s. */
+/** Visible diagnostic for an unusable [menu] shortcode - mirrors [form]'s. */
 function menuError(message) {
     return `<div class="dm-menu-missing" role="note"><em>${escapeHtmlText(message)}</em></div>`;
 }
@@ -3990,7 +3990,7 @@ function menuError(message) {
 /**
  * Project a URL belongs to, for menu-binding lookups. Dynamically imported so
  * the markdown service keeps no load-time dependency on the projects service.
- * Failures resolve to null — a missing project only means project bindings
+ * Failures resolve to null - a missing project only means project bindings
  * don't match, never a broken page.
  *
  * @param   {string} urlPath
@@ -4032,7 +4032,7 @@ function processDConfigBlocks(markdown) {
         const encoded = Buffer.from(jsonStr.trim(), 'utf8').toString('base64');
         return `<div class="dm-page-config" style="display:none" data-config="${encoded}"></div>\n`;
       } catch {
-        return ''; // invalid JSON — drop silently
+        return ''; // invalid JSON - drop silently
       }
     }
   );
@@ -4091,7 +4091,7 @@ function processCtaBlocks(markdown) {
  * @param {object} [opts]
  * @param {object|null} [opts.user] - Authenticated user (`{role, additionalRoles}`)
  *   or null for anonymous. Used to filter menu items gated by `visibility` in
- *   the `[menu]` shortcode. Backwards compatible — defaults to anonymous.
+ *   the `[menu]` shortcode. Backwards compatible - defaults to anonymous.
  * @param {string} [opts.urlPath] - URL of the page being parsed. Lets
  *   `[menu location="…"]` honour menus bound to this page or its project.
  * @param {string|null} [opts.project] - Project the page belongs to; resolved
@@ -4166,7 +4166,7 @@ export async function parseMarkdown(raw, opts = {}) {
       // per-block custom CSS can reach the page. Admin-trust: block authors
       // are admins, same security model as site-wide content/custom.css.
       'style',
-      // dm-<name> custom-element tags — one per registered component. Refreshed
+      // dm-<name> custom-element tags - one per registered component. Refreshed
       // by refreshComponentTagAllowlist() on startup and after create/delete.
       // Component authors are super-admins, same trust model as plugin code.
       ..._dmTagAllowlist,
@@ -4195,7 +4195,7 @@ export async function parseMarkdown(raw, opts = {}) {
       source: ['src', 'type'],
       // Allow any attribute on every registered dm-* tag. Props are
       // author-defined and enumerating them at sanitise time has no security
-      // benefit — custom-element attributes cannot execute JS on their own,
+      // benefit - custom-element attributes cannot execute JS on their own,
       // and `on*` handlers + `javascript:` URLs are still stripped globally.
       ..._dmTagAllowlist.reduce((acc, tag) => { acc[tag] = ['*']; return acc; }, {}),
       ...extensions.attributes
@@ -4204,7 +4204,7 @@ export async function parseMarkdown(raw, opts = {}) {
 
   const html = applyTransforms('markdown:afterParse', sanitized);
 
-  // Only emit component scripts for components that actually exist — missing
+  // Only emit component scripts for components that actually exist - missing
   // references are already harmless (sanitiser strips the tag) but we also
   // don't want a 404 on /api/components/missing.js polluting the console.
   const allowed = new Set(_dmTagAllowlist.map(t => t.replace(/^dm-/, '')));