edgepress 2026.10.13 → 2026.10.14

package/README.md

@@ -8,7 +8,7 @@ EdgePress automatically registers page-specific native WebMCP tools for reading
 
 Document previews use the browser-only `document-viewer` package: PDF, DOC/DOCX, PPT/PPTX and XLS/XLSX render inside the page automatically without moving keyboard focus. Articles accept `!document[Report](/documents/report.docx)`; Pages support `type: document`. Remote direct-file URLs require a configured consent service and CORS. See the theme-development guide.
 
-The dependency is pinned to a full commit in the public [document-viewer repository](https://github.com/jsw-teams/document-viewer). Cloud `npm ci` needs no sibling checkout, bundled source snapshot or Office conversion software. Publish and validate document-viewer first, then update the dependency URL and lockfile here. Sites can consume the resulting pinned EdgePress commit without copying either implementation.
+The dependency is pinned to a full commit in the public [document-viewer repository](https://github.com/jsw-teams/document-viewer). Cloud `npm install` needs no sibling checkout, bundled source snapshot or Office conversion software. Publish and validate document-viewer first, then update the dependency URL and lockfile here. Sites can consume the resulting pinned EdgePress commit without copying either implementation.
 
 [![Deploy to Cloudflare](https://deploy.workers.cloudflare.com/button)](https://deploy.workers.cloudflare.com/?url=https://github.com/jsw-teams/edgepress)
 [![Deploy to EdgeOne Pages](https://cdnstatic.tencentcs.com/edgeone/pages/deploy.svg)](https://edgeone.ai/pages/new?repository-url=https%3A%2F%2Fgithub.com%2Fjsw-teams%2Fedgepress&build-command=npm%20run%20build&install-command=npm%20ci&output-directory=dist)
@@ -36,7 +36,7 @@ Buttons open repository setup. Cloudflare, Vercel, Netlify and EdgeOne support r
 
 ## Quick start
 
-The commands below install the published npm release and initialize a new project directory. For the latest GitHub changes, use the deployment buttons or clone this repository, then run `npm ci` and `npm run dev` from its root:
+The commands below install the published npm release and initialize a new project directory. For the latest GitHub changes, use the deployment buttons or clone this repository, then run `npm install` and `npm run dev` from its root:
 
     mkdir my-edgepress-site
     cd my-edgepress-site
@@ -45,7 +45,7 @@ The commands below install the published npm release and initialize a new projec
     npm install
     npm run dev
 
-Use Node.js 22.12 or newer. Set the real site URL and operator contact in config.yml before publishing. Deploy with edgepress deploy. When developing EdgePress itself, use `npm ci`, then `npm link` to expose the local CLI.
+Use Node.js 22.12 or newer. Set the real site URL and operator contact in config.yml before publishing. Deploy with edgepress deploy. When developing EdgePress itself, use `npm install`, then `npm link` to expose the local CLI.
 
 Run `edgepress init` in a new project directory to scaffold a site pinned to the installed EdgePress release. The initializer keeps the existing package name and scripts.
 
@@ -59,6 +59,23 @@ To publish new source, a repository maintainer opens **Actions → Publish npm a
 
 **Recovery:** If a run fails *after* pushing its version tag, do not launch a new release blindly: check whether the tag, npm version or GitHub Release already exists and reconcile the incomplete publish first. npm versions cannot be overwritten. Protected branches must explicitly permit the GitHub Actions bot to create the release commit/tag or use a maintainer-approved release branch process.
 
+## Visual Pages editor / 可视化页面编辑器
+
+Run `npm run editor` (or `npx edgepress editor` in an initialized site), then open **http://127.0.0.1:4178/**. The editor now supports **＋ 新建页面**: choose a title, optional URL slug and configured language; the new JSON Page opens immediately in the visual canvas. Existing Pages can still be selected, arranged into 1–4 columns and edited without touching JSON.
+
+从命令行也可以新建页面：
+
+```sh
+edgepress new pages "About our project" --lang en --slug about
+edgepress new pages "关于我们" --lang zh-cn --slug about
+```
+
+The shortcut `edgepress new page` is also accepted. By default, the CLI creates `content/pages/<slug>/<locale>.json` in the site's default language. Existing pages, legacy `.md` equivalents, and symlinked directories cannot be overwritten. The generated `$schema` reference points to the installed framework (or the local development schema). Run `npm run editor` to continue editing, and `npm run build` to validate the actual generated site.
+
+**Shared block catalog:** `src/page-block-catalog.json` ships with the npm package and defines starter templates for **all 30 supported Pages block types**. This includes site-reusable `link-directory`, `media-text`, `feature-grid`, `privacy-controller`, `document`, `media-viewer` and consent-controlled integrations used by other frontends. Reuse the public EdgePress catalog from site projects (including private ones); do not copy private pages or integrate site-specific services into the framework. Third-party service, CAPTCHA, ad and local-tool blocks are available as templates but **require site configuration and valid resource URLs** before a build; inserting the template does not activate a service.
+
+The editor runs **only on 127.0.0.1**, never on deployed static sites. It enforces origin checks, path restrictions, revision-conflict detection and atomic saves. Unrecognized block properties are kept; complex nested fields can still be edited in the inspector's advanced JSON input. The canvas previews structure, not theme-perfect output. Articles remain Markdown.
+
 ## External link prompts
 
 The optional local prompt shows the complete destination URL (including path, query and fragment) once, with no duplicate hostname, and lets the visitor return or continue. It makes no request to the destination before confirmation. Configure exact origins, not wildcard domains:
@@ -271,3 +288,5 @@ Real static website output demonstrates what the builder produces. Product recor
 Project recordings use manual play/pause and a seekable progress bar, with theme colors and keyboard support. The reproducible CLI/editor workbench lives in [tools/recordings/demo-workbench.mjs](tools/recordings/demo-workbench.mjs); see [the recording guide](content/guides/product-demos.md). Built-in navigation and page icons come from the pinned Lucide 1.52 library, bundled locally with its license.
 
 Development files: tests/ contains regression tests and fixtures; tools/assets/ maintains source assets; tools/recordings/ contains desktop capture workflows; tools/verification/ contains browser audits; tools/reports/ holds generated evidence. Run npm test and npm run check after changes.
+
+Dependency maintenance uses compatible release ranges without retained lockfiles. The media and document viewers follow Git semver release ranges; audits resolve fresh dependency snapshots outside the checkout and remove them after use. Dependabot checks daily, including security updates; changed dependencies must pass the full browser suite before release.

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "edgepress",
   "license": "MIT",
-  "version": "2026.10.13",
+  "version": "2026.10.14",
   "description": "Static websites from Markdown and editable pages, with themes, consent-controlled embeds and readable article updates.",
   "type": "module",
   "bin": {
@@ -63,11 +63,13 @@
     "deploy:edgeone": "node src/cli.js deploy edgeone",
     "deploy:esa": "node src/cli.js deploy esa",
     "deploy:netlify": "node src/cli.js deploy netlify",
-    "fonts:sync": "node tools/assets/sync-fonts.mjs"
+    "fonts:sync": "node tools/assets/sync-fonts.mjs",
+    "editor": "node src/cli.js editor",
+    "audit": "node tools/maintenance/audit-dependencies.mjs low"
   },
   "dependencies": {
-    "@jsw-teams/document-viewer": "https://codeload.github.com/jsw-teams/document-viewer/tar.gz/ab21d0ee9c078d084b2abee373ffad302928978c",
-    "@jsw-teams/media-viewer": "https://codeload.github.com/jsw-teams/media-viewer/tar.gz/12eb8983c2df1eabb3aaece44b232c56b4a9e1fe",
+    "@jsw-teams/document-viewer": "git+https://github.com/jsw-teams/document-viewer.git#semver:^2026.10.1",
+    "@jsw-teams/media-viewer": "git+https://github.com/jsw-teams/media-viewer.git#semver:^2026.10.1",
     "esbuild": "^0.28.2",
     "htmlparser2": "^12.0.0",
     "image-size": "^2.0.4",
@@ -78,13 +80,14 @@
   },
   "overrides": {
     "@file-viewer/doc": {
-      "dompurify": "3.4.17"
-    }
+      "dompurify": "^3.4.17"
+    },
+    "undici": "^7.30.1"
   },
   "devDependencies": {
-    "lucide-static": "1.55.0",
+    "lucide-static": "^1.55.0",
     "playwright": "^1.63.0",
     "vscode-json-languageservice": "^6.0.0-next.3",
-    "wrangler": "^4.149.0"
+    "wrangler": "^4.152.0"
   }
 }

package/src/cli.js

@@ -9,12 +9,14 @@ import { spawn } from 'node:child_process';
 import { acquireBuildLock, buildSite } from './build.js';
 import { loadConfig } from './config.js';
 import { slugify } from './content.js';
+import { createPage } from './page-scaffold.js';
 import { checkPages } from './page-check.js';
 import { checkCompatibility, writeIterationPlan } from './maintenance.js';
 import { loadLanguagePacks, translate } from './i18n.js';
 import { postTemplate } from './post-template.js';
 import {deploySite} from './deploy.js';
 import {formatPages} from '../tools/assets/format-pages.mjs';
+import {startPageEditor} from './page-editor.js';
 
 const siteGitignore = ['node_modules/', 'dist/', '.edgepress/', '.wrangler/', '.dev.vars', '.vercel/', '.netlify/', '.edgeone/', '.esa/', '.env', '.env.*', '!.env.example', '*.tgz', ''].join('\n');
 const siteReadme = [
@@ -29,7 +31,7 @@ const siteReadme = [
   '',
   'Create an article with `npm run new -- post "My first article"`. Open the printed file path and write Markdown below the second `---` line. The command fills the title, date, and language. Run `npm run dev` to preview and `npm run build` before publishing.',
   '',
-  'Pages use localized JSON files such as `content/pages/home/en.json`; VS Code can fold each row, cell and element and read the local schema. Articles stay in Markdown. Page layouts and theme customization are optional for everyday writing.',
+  'Run `npm run editor` to create and edit Pages visually at http://127.0.0.1:4178/. Or run `npx edgepress new pages "About us" --lang en` to create a JSON Page from the CLI. All Page blocks use shared framework templates; articles remain Markdown.',
   '',
   '## Deploy a static website',
   '',
@@ -81,6 +83,7 @@ async function initializeProject() {
       generate: 'edgepress generate',
       build: 'edgepress build',
       dev: 'edgepress server',
+      editor: 'edgepress editor',
       preview: 'edgepress server',
       check: 'edgepress check',
       doctor: 'edgepress doctor',
@@ -248,6 +251,27 @@ async function manageTheme(args, config) {
   console.log('Selected theme ' + selected.id + '.');
 }
 
+async function newPage(args, config) {
+  let lang, slug;
+  const words = [];
+  for (let i = 0; i < args.length; i += 1) {
+    const arg = args[i];
+    if (arg === '--lang' || arg === '--slug') {
+      if (!args[i + 1] || args[i + 1].startsWith('--')) throw new Error('Missing value for ' + arg);
+      if (arg === '--lang') lang = args[++i];
+      else slug = args[++i];
+    } else if (arg.startsWith('--')) throw new Error('Unknown new pages option: ' + arg);
+    else words.push(arg);
+  }
+  const title = words.join(' ').trim();
+  if (!title) throw new Error('Usage: edgepress new pages "Page title" [--lang en] [--slug page-slug]');
+  const page = await createPage(config.root, {
+    title, lang, slug, locales: config.i18n.locales, defaultLocale: config.i18n.defaultLocale
+  });
+  console.log('Created Page: ' + relative(config.root, page.file));
+  console.log('Open the local editor with: npm run editor');
+}
+
 async function createPost(title, config) {
   if (!title) throw new Error('Usage: edgepress new post "Post title"');
   const releaseLock = await acquireBuildLock(config.resolvedPaths.cache);
@@ -331,11 +355,19 @@ try {
     ? await loadConfig()
     : null;
   if (command === '--help' || command === '-h' || command === 'help') {
-    console.log('EdgePress commands: init, new, build, generate, server, check, doctor, iterate, theme, security, deploy, clean');
+    console.log('EdgePress commands: init, new, build, generate, server, editor, check, doctor, iterate, theme, security, deploy, clean');
+    console.log('Create a Page: edgepress new pages "Page title" [--lang en] [--slug page-slug]');
   }
   else if (command === 'build' || command === 'generate') await buildSite();
   else if (command === 'init') await initializeProject();
   else if (command === 'preview' || command === 'dev' || command === 'server') await import('./preview.js');
+  else if (command === 'editor') {
+    const portText = args[0] === '--port' ? args[1] : args[0]?.startsWith('--port=') ? args[0].slice(7) : args.length ? null : '4178';
+    if (!/^\d{1,5}$/.test(portText || '') || Number(portText) < 1 || Number(portText) > 65535) throw new Error('Usage: edgepress editor [--port 4178]');
+    const editorConfig = await loadConfig();
+    const editor = await startPageEditor({ port: Number(portText), root: editorConfig.root, locales: editorConfig.i18n.locales, defaultLocale: editorConfig.i18n.defaultLocale });
+    console.log('Local Pages editor: ' + editor.url + ' (Ctrl+C to stop)');
+  }
   else if (command === 'deploy') {
     const platform = args[0] && !args[0].startsWith('-') ? args.shift() : 'cloudflare';
     const built = process.env.WORKERS_CI === '1' ? {output:(await loadConfig()).resolvedPaths.output} : await buildSite();
@@ -343,7 +375,10 @@ try {
   }
   else if (command === 'theme') await manageTheme(args, await loadConfig());
   else if (command === 'security') await runSecurityAudit();
-  else if (command === 'new') await createPost((args[0] === 'post' ? args.slice(1) : args).join(' ').trim(), config);
+  else if (command === 'new') {
+    if (args[0] === 'pages' || args[0] === 'page') await newPage(args.slice(1), config);
+    else await createPost((args[0] === 'post' ? args.slice(1) : args).join(' ').trim(), config);
+  }
   else if (command === 'clean') await clean(config);
   else if (command === 'check') {
     await buildSite(config.root);
@@ -362,7 +397,7 @@ try {
     const compatibilityReport = await checkCompatibility(config);
     const plan = await writeIterationPlan(config, pageReport, compatibilityReport);
     await showReport('Safe iteration plan', plan, resolve(config.resolvedPaths.cache, 'reports/iteration-plan.md'));
-  } else throw new Error('Commands: init, build|generate, server, deploy, new, clean, check, doctor, iterate, theme list|create|install|use, security');
+  } else throw new Error('Commands: init, build|generate, server, editor [--port 4178], deploy, new, clean, check, doctor, iterate, theme list|create|install|use, security');
 } catch (error) {
   console.error(error?.stack || error);
   process.exitCode = 1;

package/src/page-block-catalog.json

@@ -0,0 +1,345 @@
+{
+  "version": 1,
+  "description": "Shared, public EdgePress page-block presets. Templates are examples, not configuration-specific integrations.",
+  "blocks": {
+    "hero": {
+      "label": "横幅 Hero",
+      "category": "layout",
+      "template": {
+        "type": "hero",
+        "title": "页面横幅",
+        "text": "介绍页面内容"
+      }
+    },
+    "section": {
+      "label": "分区 Section",
+      "category": "layout",
+      "template": {
+        "type": "section",
+        "title": "新分区",
+        "blocks": [
+          {
+            "type": "text",
+            "text": "分区内容"
+          }
+        ]
+      }
+    },
+    "heading": {
+      "label": "标题 Heading",
+      "category": "text",
+      "template": {
+        "type": "heading",
+        "level": 2,
+        "text": "新的标题"
+      }
+    },
+    "text": {
+      "label": "文字 Text",
+      "category": "text",
+      "template": {
+        "type": "text",
+        "text": "在此编辑文字"
+      }
+    },
+    "media-text": {
+      "label": "图文 Media + Text",
+      "category": "media",
+      "template": {
+        "type": "media-text",
+        "mediaType": "image",
+        "src": "/images/example.png",
+        "alt": "图片说明",
+        "title": "图文标题",
+        "text": "图文描述",
+        "placement": "left"
+      }
+    },
+    "display-text": {
+      "label": "展示文字 Display Text",
+      "category": "text",
+      "template": {
+        "type": "display-text",
+        "level": 2,
+        "style": "editorial",
+        "text": "强调文字"
+      }
+    },
+    "link-list": {
+      "label": "链接列表 Link List",
+      "category": "links",
+      "template": {
+        "type": "link-list",
+        "title": "链接列表",
+        "items": [
+          {
+            "label": "链接",
+            "url": "/"
+          }
+        ]
+      }
+    },
+    "steps": {
+      "label": "步骤 Steps",
+      "category": "lists",
+      "template": {
+        "type": "steps",
+        "title": "操作步骤",
+        "items": [
+          {
+            "title": "第一步",
+            "text": "操作说明"
+          }
+        ]
+      }
+    },
+    "code": {
+      "label": "代码 Code",
+      "category": "text",
+      "template": {
+        "type": "code",
+        "language": "text",
+        "code": "示例代码"
+      }
+    },
+    "data-table": {
+      "label": "数据表 Data Table",
+      "category": "lists",
+      "template": {
+        "type": "data-table",
+        "title": "表格标题",
+        "headers": [
+          "字段",
+          "内容"
+        ],
+        "rows": [
+          [
+            "示例",
+            "填写内容"
+          ]
+        ]
+      }
+    },
+    "list": {
+      "label": "列表 List",
+      "category": "lists",
+      "template": {
+        "type": "list",
+        "title": "列表标题",
+        "items": [
+          "项目一",
+          "项目二"
+        ],
+        "ordered": false
+      }
+    },
+    "notice": {
+      "label": "提示 Notice",
+      "category": "text",
+      "template": {
+        "type": "notice",
+        "title": "提示",
+        "text": "提示信息",
+        "tone": "info"
+      }
+    },
+    "privacy-services": {
+      "label": "隐私服务清单",
+      "category": "privacy",
+      "template": {
+        "type": "privacy-services",
+        "emptyText": "暂无已配置的服务"
+      }
+    },
+    "privacy-consent": {
+      "label": "隐私同意信息",
+      "category": "privacy",
+      "template": {
+        "type": "privacy-consent",
+        "storageLabel": "存储位置",
+        "expiryLabel": "保留期限",
+        "proposedDateLabel": "建议日期",
+        "effectiveDateLabel": "生效日期",
+        "expiryText": "{days} 天"
+      }
+    },
+    "privacy-controller": {
+      "label": "隐私管理者信息",
+      "category": "privacy",
+      "template": {
+        "type": "privacy-controller",
+        "missingTitle": "管理者信息未配置",
+        "missingText": "请在站点配置中填写管理者信息",
+        "nameLabel": "管理者",
+        "contactLabel": "联系方式"
+      }
+    },
+    "link-directory": {
+      "label": "链接目录 Link Directory",
+      "category": "links",
+      "template": {
+        "type": "link-directory",
+        "title": "站点目录",
+        "items": [
+          {
+            "title": "参考网站",
+            "text": "站点简介",
+            "url": "https://example.com"
+          }
+        ]
+      }
+    },
+    "feature-grid": {
+      "label": "功能卡片 Feature Grid",
+      "category": "layout",
+      "template": {
+        "type": "feature-grid",
+        "title": "功能特点",
+        "items": [
+          {
+            "title": "功能名称",
+            "text": "功能说明"
+          }
+        ]
+      }
+    },
+    "image": {
+      "label": "图片 Image",
+      "category": "media",
+      "template": {
+        "type": "image",
+        "src": "/images/example.png",
+        "alt": "替换为图片文字描述"
+      }
+    },
+    "quote": {
+      "label": "引用 Quote",
+      "category": "text",
+      "template": {
+        "type": "quote",
+        "text": "引用内容",
+        "attribution": "来源"
+      }
+    },
+    "cta": {
+      "label": "行动按钮 CTA",
+      "category": "links",
+      "template": {
+        "type": "cta",
+        "title": "开始使用",
+        "text": "行动说明",
+        "label": "查看详情",
+        "url": "/"
+      }
+    },
+    "faq": {
+      "label": "常见问题 FAQ",
+      "category": "lists",
+      "template": {
+        "type": "faq",
+        "title": "常见问题",
+        "items": [
+          {
+            "question": "这里写问题",
+            "answer": "这里写回答"
+          }
+        ]
+      }
+    },
+    "oembed": {
+      "label": "外部嵌入 oEmbed",
+      "category": "integrations",
+      "requiresSetup": true,
+      "template": {
+        "type": "oembed",
+        "integration": "configure-service-id",
+        "url": "https://example.com/",
+        "title": "第三方嵌入"
+      }
+    },
+    "service": {
+      "label": "第三方服务 Service",
+      "category": "integrations",
+      "requiresSetup": true,
+      "template": {
+        "type": "service",
+        "integration": "configure-service-id"
+      }
+    },
+    "post-list": {
+      "label": "文章列表 Post List",
+      "category": "content",
+      "template": {
+        "type": "post-list",
+        "title": "文章列表",
+        "count": 3
+      }
+    },
+    "latest-posts": {
+      "label": "最新文章 Latest Posts",
+      "category": "content",
+      "template": {
+        "type": "latest-posts",
+        "title": "最新文章",
+        "count": 3,
+        "paginate": false
+      }
+    },
+    "ad-slot": {
+      "label": "广告位置 Ad Slot",
+      "category": "integrations",
+      "requiresSetup": true,
+      "template": {
+        "type": "ad-slot",
+        "integration": "configure-service-id",
+        "label": "广告"
+      }
+    },
+    "captcha": {
+      "label": "验证码 CAPTCHA",
+      "category": "integrations",
+      "requiresSetup": true,
+      "template": {
+        "type": "captcha",
+        "provider": "cloudflare-turnstile",
+        "label": "人机验证"
+      }
+    },
+    "document": {
+      "label": "文档预览 Document",
+      "category": "media",
+      "template": {
+        "type": "document",
+        "title": "文档预览",
+        "src": "/documents/sample.pdf"
+      }
+    },
+    "media-viewer": {
+      "label": "媒体浏览器 Media Viewer",
+      "category": "media",
+      "template": {
+        "type": "media-viewer",
+        "title": "图片集",
+        "items": [
+          {
+            "type": "image",
+            "src": "/images/example.png",
+            "alt": "图片说明"
+          }
+        ]
+      }
+    },
+    "local-tool": {
+      "label": "本地工具 Local Tool",
+      "category": "integrations",
+      "requiresSetup": true,
+      "template": {
+        "type": "local-tool",
+        "id": "my-local-tool",
+        "title": "本地工具",
+        "script": "/assets/tool.js",
+        "fallback": "JavaScript 未启用时的提示文字"
+      }
+    }
+  }
+}