edgepress 2026.10.14 → 2026.10.15

package/README.md

@@ -11,7 +11,7 @@ Document previews use the browser-only `document-viewer` package: PDF, DOC/DOCX,
 The dependency is pinned to a full commit in the public [document-viewer repository](https://github.com/jsw-teams/document-viewer). Cloud `npm install` needs no sibling checkout, bundled source snapshot or Office conversion software. Publish and validate document-viewer first, then update the dependency URL and lockfile here. Sites can consume the resulting pinned EdgePress commit without copying either implementation.
 
 [![Deploy to Cloudflare](https://deploy.workers.cloudflare.com/button)](https://deploy.workers.cloudflare.com/?url=https://github.com/jsw-teams/edgepress)
-[![Deploy to EdgeOne Pages](https://cdnstatic.tencentcs.com/edgeone/pages/deploy.svg)](https://edgeone.ai/pages/new?repository-url=https%3A%2F%2Fgithub.com%2Fjsw-teams%2Fedgepress&build-command=npm%20run%20build&install-command=npm%20ci&output-directory=dist)
+[![Deploy to EdgeOne Pages](https://cdnstatic.tencentcs.com/edgeone/pages/deploy.svg)](https://edgeone.ai/pages/new?repository-url=https%3A%2F%2Fgithub.com%2Fjsw-teams%2Fedgepress&build-command=npm%20run%20build&install-command=npm%20install&output-directory=dist)
 [![Deploy to Vercel](https://vercel.com/button)](https://vercel.com/new/clone?repository-url=https%3A%2F%2Fgithub.com%2Fjsw-teams%2Fedgepress)
 [![Deploy to Netlify](https://www.netlify.com/img/deploy/button.svg)](https://app.netlify.com/start/deploy?repository=https://github.com/jsw-teams/edgepress)
 [![Import into ESA Pages](content/assets/edgepress/brand/deploy-esa.svg)](https://esa.console.aliyun.com/edge/pages/creation)
@@ -34,9 +34,15 @@ The builder automatically explains the latest article edit. Readers see formatte
 
 Buttons open repository setup. Cloudflare, Vercel, Netlify and EdgeOne support repository templates; ESA opens its official import screen, where you authorize GitHub and select the repository. Every static platform uses `npm run build` and `dist/`; no database or website Function is required. Write posts in Markdown, compose pages from editable rows and elements, choose a shared theme, and build the site into dist/.
 
+Real VM recording: the actual CLI creates a post, Geany saves its Markdown, and `npm run deploy:local` starts the preview before navigating from the homepage to the article. Playback is manual.
+
+[![Real CLI, editor and browser demonstration](content/assets/images/previews/edgepress-cli-local.1b61974af33b2bb1.webp)](content/assets/images/previews/edgepress-cli-local.065373ef0ebd26fa.mp4)
+
+[Play recording](content/assets/images/previews/edgepress-cli-local.065373ef0ebd26fa.mp4) · [GIF](content/assets/images/previews/edgepress-cli-local.9697a9de52bef936.gif)
+
 ## Quick start
 
-The commands below install the published npm release and initialize a new project directory. For the latest GitHub changes, use the deployment buttons or clone this repository, then run `npm install` and `npm run dev` from its root:
+The commands below install the published npm release and initialize a new project directory. For the latest GitHub changes, use the deployment buttons or clone this repository, then run `npm install` and `npm run deploy:local` from its root:
 
     mkdir my-edgepress-site
     cd my-edgepress-site
@@ -45,9 +51,9 @@ The commands below install the published npm release and initialize a new projec
     npm install
     npm run dev
 
-Use Node.js 22.12 or newer. Set the real site URL and operator contact in config.yml before publishing. Deploy with edgepress deploy. When developing EdgePress itself, use `npm install`, then `npm link` to expose the local CLI.
+Use Node.js 22.12 or newer. Set the real site URL and operator contact in config.yml before publishing. Deploy with `npm run deploy:cloudflare`, `npm run deploy:vercel`, `npm run deploy:netlify`, `npm run deploy:esa` or `npm run deploy:edgeone`. `npm run deploy:local` starts the loopback preview without uploading a site. When developing EdgePress itself, use `npm install`, then `npm link` to expose the local CLI.
 
-Run `edgepress init` in a new project directory to scaffold a site pinned to the installed EdgePress release. The initializer keeps the existing package name and scripts.
+Run `edgepress init` in a new project directory to scaffold a site pinned to the installed EdgePress release. The initializer keeps the existing package name and adds the site's CLI scripts.
 
 ## Maintainer npm and GitHub releases
 
@@ -289,4 +295,6 @@ Project recordings use manual play/pause and a seekable progress bar, with theme
 
 Development files: tests/ contains regression tests and fixtures; tools/assets/ maintains source assets; tools/recordings/ contains desktop capture workflows; tools/verification/ contains browser audits; tools/reports/ holds generated evidence. Run npm test and npm run check after changes.
 
-Dependency maintenance uses compatible release ranges without retained lockfiles. The media and document viewers follow Git semver release ranges; audits resolve fresh dependency snapshots outside the checkout and remove them after use. Dependabot checks daily, including security updates; changed dependencies must pass the full browser suite before release.
+Dependency maintenance uses compatible release ranges without retained lockfiles. The media and document viewers follow Git semver release ranges; audits resolve fresh dependency snapshots outside the checkout and remove them after use. Dependabot checks weekly, including security updates; changed dependencies must pass the full browser suite before release.
+
+Weekly automatic dependency maintenance resolves compatible updates, audits and runs this project's regression suite with read-only access, then uses a separate job to commit verified manifest-only repairs. Failed checks or branch protection retain a repair PR; major upgrades are not forced. No lockfiles are retained. The existing package release process remains separate.

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "edgepress",
   "license": "MIT",
-  "version": "2026.10.14",
+  "version": "2026.10.15",
   "description": "Static websites from Markdown and editable pages, with themes, consent-controlled embeds and readable article updates.",
   "type": "module",
   "bin": {
@@ -65,7 +65,8 @@
     "deploy:netlify": "node src/cli.js deploy netlify",
     "fonts:sync": "node tools/assets/sync-fonts.mjs",
     "editor": "node src/cli.js editor",
-    "audit": "node tools/maintenance/audit-dependencies.mjs low"
+    "audit": "node tools/maintenance/audit-dependencies.mjs low",
+    "deploy:local": "node src/cli.js server"
   },
   "dependencies": {
     "@jsw-teams/document-viewer": "git+https://github.com/jsw-teams/document-viewer.git#semver:^2026.10.1",
@@ -73,8 +74,8 @@
     "esbuild": "^0.28.2",
     "htmlparser2": "^12.0.0",
     "image-size": "^2.0.4",
-    "marked": "^18.0.13",
-    "postcss": "^8.5.15",
+    "marked": "^18.1.1",
+    "postcss": "^8.5.31",
     "sanitize-html": "^2.18.1",
     "yaml": "^2.9.1"
   },
@@ -85,8 +86,8 @@
     "undici": "^7.30.1"
   },
   "devDependencies": {
-    "lucide-static": "^1.55.0",
-    "playwright": "^1.63.0",
+    "lucide-static": "^1.61.0",
+    "playwright": "^1.64.1",
     "vscode-json-languageservice": "^6.0.0-next.3",
     "wrangler": "^4.152.0"
   }

package/src/cli.js

@@ -92,7 +92,8 @@ async function initializeProject() {
       'deploy:netlify': 'edgepress deploy netlify',
       'deploy:vercel': 'edgepress deploy vercel',
       'deploy:edgeone': 'edgepress deploy edgeone',
-      'deploy:esa': 'edgepress deploy esa'
+      'deploy:esa': 'edgepress deploy esa',
+      'deploy:local': 'edgepress server'
     },
     overrides: {
       ...(packageData.overrides || {}),

package/tools/recordings/capture-cli-demo.mjs

@@ -0,0 +1,32 @@
+// Capture real guest terminal/editor/browser interactions, never host input or drawn terminal frames.
+import assert from 'node:assert/strict';
+import {mkdir,writeFile} from 'node:fs/promises';
+import {resolve} from 'node:path';
+import {chromium} from 'playwright';
+import {workbench} from './demo-workbench.mjs';
+import {recordingContext,record,closeRecording} from './desktop-recording.mjs';
+import {activate,pointAt} from './vm-desktop.mjs';
+
+const root=resolve(import.meta.dirname,'../..'),artifact=resolve(root,'tools/.recordings/cli-native');
+const output=resolve(root,'content/assets/images/previews');
+await mkdir(artifact,{recursive:true});await mkdir(output,{recursive:true});
+const browser=await chromium.connectOverCDP('http://127.0.0.1:9222');
+const context=await recordingContext(browser,{locale:'en'},artifact);
+let bench;
+try{
+ bench=await workbench({artifact,packageRoot:root,locale:'en',context});
+ const page=await context.newPage(),errors=[];page.on('pageerror',error=>errors.push(error.message));
+ await record(page,'edgepress-cli-local',async({omitWait})=>{
+  await bench.activateTerminal();await bench.newPost();
+  await bench.editPost('## A working local site\n\nThis article was created in the real CLI and saved in Geany.\n\nThe local preview runs with **npm run deploy:local**.');
+  await bench.activateTerminal();await bench.startServer({omitWait,command:'npm run deploy:local --'});
+  await activate('Chromium');await page.goto('https://edgepress-demo.test/');
+  const link=page.getByRole('link',{name:bench.title,exact:true}).first();
+  await link.waitFor();await pointAt(page,link);await link.click();
+  await page.getByRole('heading',{name:'A working local site',exact:true}).waitFor();
+  await new Promise(done=>setTimeout(done,2400));
+ },{foreground:()=>bench.activateTerminal()});
+ assert.deepEqual(errors,[]);
+ const entries=await closeRecording(context,{artifact,output,source:'tools/recordings/capture-cli-demo.mjs'});
+ await writeFile(resolve(artifact,'result.json'),JSON.stringify(entries,null,2)+'\n');
+}finally{await bench?.dispose();await browser.close();}

package/tools/recordings/demo-workbench.mjs

@@ -2,7 +2,7 @@
 // Geany edits the actual generated file. Nothing is installed into production.
 import assert from 'node:assert/strict';
 import {readFile,writeFile,mkdir,rm,cp} from 'node:fs/promises';
-import {resolve,sep,extname} from 'node:path';
+import {resolve,sep} from 'node:path';
 import {spawn} from 'node:child_process';
 import {pathToFileURL} from 'node:url';
 import {guest,guestPath,typeCommand,editFile,openApp,activate} from './vm-desktop.mjs';
@@ -23,7 +23,7 @@ export async function workbench({artifact,packageRoot,photoPath,locale,context,e
  await rm(resolve(root,'content/pages'),{recursive:true,force:true});await mkdir(resolve(root,'content/pages/home'),{recursive:true});
  await writeFile(resolve(root,'content/pages/home',locale.toLowerCase()+'.json'),JSON.stringify({title:settings.site.title,lang:locale,slug:'home',homepage:true,blocks:[{columns:1,cells:[[{type:'hero',eyebrow:chinese?'生活里的小事':'Notes from everyday life',title:settings.site.title,text:settings.site.description}]]},{columns:1,cells:[[{type:'post-list',title:chinese?'最近的文章':'Recent stories',category:'uncategorized',count:3}]]}]},null,2)+'\n');
  if(embedding){settings.plugins.consent.services=[{id:'ishare',provider:'oembed',backendUrl:'https://ishare.js.gripe',enabled:true,name:chinese?'爱分享':'ishare',purpose:chinese?'在你同意后显示作者分享的图片与视频。':'Show the author’s shared photos and videos after you agree.',dataCategories:chinese?'请求的媒体和 IP 地址。':'Requested media and IP address.',recipient:'ishare',retention:chinese?'直到发布者删除。':'Until the publisher deletes it.',privacyUrl:'https://ishare.js.gripe/privacy/'}];await writeFile(resolve(root,'config.yml'),stringify(settings));}
- await mkdir(resolve(root,'content/assets/photos'),{recursive:true});await cp(photoPath,resolve(root,'content/assets/photos/seaside.jpg'));
+ if(photoPath){await mkdir(resolve(root,'content/assets/photos'),{recursive:true});await cp(photoPath,resolve(root,'content/assets/photos/seaside.jpg'));}
  let file=null,port;
  const terminalTitle='EdgePress '+locale;
  const {loadConfig}=await import(pathToFileURL(resolve(upstream,'src/config.js')));const {readDocuments}=await import(pathToFileURL(resolve(upstream,'src/content.js')));
@@ -37,9 +37,9 @@ export async function workbench({artifact,packageRoot,photoPath,locale,context,e
  async function createPost(){await run(['new','post',title]);const article=await findPost();assert.ok(article);return file;}
  async function newPost(){await typeCommand(root,terminalTitle,"edgepress new post '"+title+"'");for(let attempt=0;attempt<30;attempt++){const article=await findPost();if(article)return;await new Promise(done=>setTimeout(done,300));}throw Error('CLI did not create the post');}
  async function editPost(body){assert.ok(file);const front=(await readFile(file,'utf8')).split('---')[1];await editFile(root,file,'---'+front+'---\n\n'+body+'\n');}
- async function startServer({omitWait=task=>task()}={}){
+ async function startServer({omitWait=task=>task(),command='edgepress server'}={}){
   const {createServer}=await import('node:net');const socket=createServer();await new Promise(done=>socket.listen(0,'127.0.0.1',done));port=socket.address().port;await new Promise(done=>socket.close(done));
-  await typeCommand(root,terminalTitle,'edgepress server --port '+port);
+  await typeCommand(root,terminalTitle,command+' --port '+port);
   await new Promise(done=>setTimeout(done,1600));
   await omitWait(async()=>{for(let attempt=0;attempt<180;attempt++){try{const response=await fetch('http://127.0.0.1:'+port+'/',{signal:AbortSignal.timeout(1200)});if(response.ok)return;}catch{}await new Promise(done=>setTimeout(done,500));}throw Error('Guest preview did not become ready');});
  }

package/tools/recordings/desktop-recording.mjs

@@ -57,7 +57,7 @@ export async function record(page, name, story, {foreground} = {}) {
 }
 
 // Export the VM desktop master after the browser fixture has been disposed.
-export async function closeRecording(context, {artifact, output}) {
+export async function closeRecording(context, {artifact, output, source='tools/recordings/desktop-recording.mjs', kind}) {
   await context.close();
   const session = sessions.get(context);
   const entries = [];
@@ -81,7 +81,7 @@ export async function closeRecording(context, {artifact, output}) {
     const poster = name + '.' + hash(await readFile(posterPath)) + '.webp';
     for (const [source, target] of [[gif, file], [movie, movieFile], [posterPath, poster]]) await cp(source, resolve(output, target));
     const entry = {name, file, poster, movie:movieFile, movieBytes:movieBytes.length, duration, bytes:bytes.length,
-      date:new Date().toISOString().slice(0, 10), kind:'FFmpeg recording of an isolated WSL2 desktop; '+(name.startsWith('edgepress-')||name.startsWith('ishare-sharing-')?'real terminal, editor and Chromium; preview startup wait shortened':'actual Chromium interface')+'; isolated service fixtures', source:'tools/recordings/capture-project-demos.mjs'};
+      date:new Date().toISOString().slice(0, 10), kind:kind||'FFmpeg recording of an isolated WSL2 desktop; '+(name.startsWith('edgepress-')||name.startsWith('ishare-sharing-')?'real terminal, editor and Chromium; preview startup wait shortened':'actual Chromium interface')+'; isolated service fixtures', source};
     entries.push(entry);
     const manifest = resolve(artifact, 'manifest.json'), previous = await readFile(manifest, 'utf8').then(JSON.parse).catch(() => []);
     await writeFile(manifest, JSON.stringify([...previous.filter(item => item.name !== name), entry], null, 2) + '\n');