edgepress 2026.9.6 → 2026.9.8

package/README.md

@@ -67,6 +67,6 @@ The main navigation includes a Posts entry to the localized article archive. The
 
 Project guides are published from content/pages/: project introduction, quick start, theme development, plugin development, and privacy policy. The starter config uses `https://edgepress.js.gripe` and credits `toewpq`; the privacy policy still reports that its real operator name and working privacy contact must be added before publication.
 
-Version 2026.9.6 records the sixth requested release update for September 2026. It is available as the `edgepress` npm package. See the [request 1 notes](content/posts/2026-09-24-edgepress-release-2026-9-1/), [request 2 notes](content/posts/2026-09-25-edgepress-release-2026-9-2/), [request 3 notes](content/posts/2026-09-25-edgepress-release-2026-9-3/), [request 4 notes](content/posts/2026-09-25-edgepress-release-2026-9-4/), [request 5 notes](content/posts/2026-09-25-edgepress-release-2026-9-5/), and [request 6 notes](content/posts/2026-09-25-edgepress-release-2026-9-6/).
+Version 2026.9.8 records the eighth requested release update for September 2026. It is available as the `edgepress` npm package. See the [request 1 notes](content/posts/2026-09-24-edgepress-release-2026-9-1/), [request 2 notes](content/posts/2026-09-25-edgepress-release-2026-9-2/), [request 3 notes](content/posts/2026-09-25-edgepress-release-2026-9-3/), [request 4 notes](content/posts/2026-09-25-edgepress-release-2026-9-4/), [request 5 notes](content/posts/2026-09-25-edgepress-release-2026-9-5/), [request 6 notes](content/posts/2026-09-25-edgepress-release-2026-9-6/), [request 7 notes](content/posts/2026-09-26-edgepress-release-2026-9-7/), and [request 8 notes](content/posts/2026-09-26-edgepress-release-2026-9-8/).
 
-The release also adds shared icons, EdgePress brand artwork, paginated homepage post lists, and article author bylines. See [CHANGELOG.txt](CHANGELOG.txt) for the complete entry.
+This release adds Markdown video syntax for posts, locale-deduplicated chronological archives, Markdown-rendered post excerpts, date-based consent policy metadata, localized service disclosures, and separate consent-component layout checks. Optional services remain disabled until a visitor makes an explicit choice.

package/config.yml

@@ -84,68 +84,115 @@ privacy:
 plugins:
   consent:
     enabled: true
-    version: "1"
+    # Drafting date; set effectiveDate when a revised notice takes effect.
+    proposedDate: "2026-09-26"
+    effectiveDate: "2026-09-26"
     expiresDays: 180
-  tracking:
-    enabled: true
-    services: []
-    # Example:
-    # - id: tag-manager
-    #   provider: google-tag-manager
-    #   purpose: Load consented campaign tags.
-    #   retention: Set and disclose the applicable retention period.
-    #   containerId: GTM-ABCD123
-    # - id: social-pixel
-    #   provider: meta-pixel
-    #   purpose: Measure consented campaign traffic.
-    #   retention: Set and disclose the provider's retention period.
-    #   pixelId: "123456789012345"
-  statistics:
-    enabled: true
-    services: []
-    # Examples use public provider IDs only.
-    # - id: primary-analytics
-    #   provider: google-analytics
-    #   purpose: Measure consented site visits.
-    #   retention: Set and disclose the provider's retention period.
-    #   measurementId: G-ABC12345
-    # - id: edge-analytics
-    #   provider: cloudflare-web-analytics
-    #   purpose: Measure consented site visits.
-    #   retention: Set and disclose the applicable retention period.
-    #   token: 01234567-89ab-cdef-0123-456789abcdef
-    # - id: baidu-analytics
-    #   provider: baidu-tongji
-    #   purpose: Measure consented site visits.
-    #   retention: Set and disclose the provider's retention period.
-    #   siteId: abcdef0123456789abcdef01
-  advertising:
-    enabled: true
-    services: []
-    # Example:
-    # - id: display-ads
-    #   provider: google-adsense
-    #   purpose: Display consented advertising.
-    #   retention: Set and disclose the provider's retention period.
-    #   clientId: ca-pub-1234567890123456
-  captcha:
-    enabled: true
-    services: []
-    # Choose a provider for each CAPTCHA block. Never add its secret key here.
-    # - id: contact-form-check
-    #   provider: cloudflare-turnstile
-    #   purpose: Reduce automated contact form submissions.
-    #   retention: Configure and disclose the provider's retention period.
-    #   siteKey: 0x4AAAAAAABBBBBBBBCCCCCCDDDD
-    # - id: signup-form-check
-    #   provider: google-recaptcha
-    #   purpose: Reduce automated signup submissions.
-    #   retention: Configure and disclose the provider's retention period.
-    #   siteKey: 6LcAbCdEfGhIjKlMnOpQrStUvWxYz0123456789a
-    # - id: support-form-check
-    #   provider: hcaptcha
-    #   purpose: Reduce automated support requests.
-    #   retention: Configure and disclose the provider's retention period.
-    #   siteKey: 0123456789abcdefghijklmnopqrstuvwx
-# Add browser services under these groups after filling the real site operator details above.
+    tracking:
+      enabled: true
+      services: []
+      # Example:
+      # - id: tag-manager
+      #   provider: google-tag-manager
+      #   name: { en: Google Tag Manager, zh-CN: Google 跟踪代码管理器 }
+      #   purpose: { en: Load campaign tags after consent., zh-CN: 经同意后加载营销标签。 }
+      #   dataCategories: { en: Describe data sent by this container., zh-CN: 填写此容器发送的数据类别。 }
+      #   recipient: { en: Google LLC, zh-CN: Google LLC }
+      #   retention: { en: Configure the retention period., zh-CN: 填写适用的数据保留期限。 }
+      #   containerId: GTM-ABCD123
+      # - id: social-pixel
+      #   provider: meta-pixel
+      #   name: { en: Meta Pixel, zh-CN: Meta Pixel }
+      #   purpose: { en: Measure campaign traffic after consent., zh-CN: 经同意后衡量营销流量。 }
+      #   dataCategories: { en: Describe data sent by this pixel., zh-CN: 填写此像素发送的数据类别。 }
+      #   recipient: { en: Meta Platforms, Inc., zh-CN: Meta Platforms, Inc. }
+      #   retention: { en: Configure the provider's retention period., zh-CN: 填写供应商的数据保留期限。 }
+      #   pixelId: "123456789012345"
+    statistics:
+      enabled: true
+      services:
+        - id: cloudflare-web-analytics
+          provider: cloudflare-web-analytics
+          name:
+            en: Cloudflare Web Analytics
+            zh-CN: Cloudflare 网站分析
+          purpose:
+            en: Measure page views and page-load performance after consent.
+            zh-CN: 经访客同意后衡量页面浏览量和页面加载性能。
+          dataCategories:
+            en: Performance timing and page-view metrics. Report dimensions can include page path, referrer, device type, browser, operating system, and country.
+            zh-CN: 性能计时和页面浏览指标。报告维度可能包括页面路径、来源页、设备类型、浏览器、操作系统和国家或地区。
+          recipient:
+            en: Cloudflare, Inc.
+            zh-CN: Cloudflare, Inc.
+          retention:
+            en: Unsampled beacon data is kept for 7 days, then aggregated to about 10% for long-term storage. Dashboard history is available for 6 months.
+            zh-CN: 未采样的信标数据保留 7 天，之后会汇总为约 10% 的长期数据。仪表板可查看最近 6 个月的历史记录。
+          token: "8347d72ba9f84e6783bf441e7832a80e"
+      # Examples use public provider IDs only.
+      # - id: primary-analytics
+      #   provider: google-analytics
+      #   name: { en: Google Analytics, zh-CN: Google Analytics }
+      #   purpose: { en: Measure site visits after consent., zh-CN: 经访客同意后衡量网站访问情况。 }
+      #   dataCategories: { en: Describe the data processed by this property., zh-CN: 填写此媒体资源处理的数据类别。 }
+      #   recipient: { en: Google LLC, zh-CN: Google LLC }
+      #   retention: { en: Configure the provider's retention period., zh-CN: 填写供应商的数据保留期限。 }
+      #   measurementId: G-ABC12345
+      # - id: edge-analytics
+      #   provider: cloudflare-web-analytics
+      #   name: { en: Cloudflare Web Analytics, zh-CN: Cloudflare 网站分析 }
+      #   purpose: { en: Measure site visits after consent., zh-CN: 经访客同意后衡量网站访问情况。 }
+      #   dataCategories: { en: Describe the data processed by this site., zh-CN: 填写此站点处理的数据类别。 }
+      #   recipient: { en: Cloudflare, Inc., zh-CN: Cloudflare, Inc. }
+      #   retention: { en: Configure the retention period., zh-CN: 填写数据保留期限。 }
+      #   token: 01234567-89ab-cdef-0123-456789abcdef
+      # - id: baidu-analytics
+      #   provider: baidu-tongji
+      #   name: { en: Baidu Tongji, zh-CN: 百度统计 }
+      #   purpose: { en: Measure site visits after consent., zh-CN: 经访客同意后衡量网站访问情况。 }
+      #   dataCategories: { en: Describe data sent to this site ID., zh-CN: 填写此站点编号接收的数据类别。 }
+      #   recipient: { en: Baidu, Inc., zh-CN: 百度 }
+      #   retention: { en: Configure the provider's retention period., zh-CN: 填写供应商的数据保留期限。 }
+      #   siteId: abcdef0123456789abcdef01
+    advertising:
+      enabled: true
+      services: []
+      # Example:
+      # - id: display-ads
+      #   provider: google-adsense
+      #   name: { en: Google AdSense, zh-CN: Google AdSense }
+      #   purpose: { en: Display ads after consent., zh-CN: 经访客同意后展示广告。 }
+      #   dataCategories: { en: Describe the data processed for ad delivery., zh-CN: 填写广告投放处理的数据类别。 }
+      #   recipient: { en: Google LLC, zh-CN: Google LLC }
+      #   retention: { en: Configure the provider's retention period., zh-CN: 填写供应商的数据保留期限。 }
+      #   clientId: ca-pub-1234567890123456
+    captcha:
+      enabled: true
+      services: []
+      # Choose a provider for each CAPTCHA block. Never add its secret key here.
+      # - id: contact-form-check
+      #   provider: cloudflare-turnstile
+      #   name: { en: Cloudflare Turnstile, zh-CN: Cloudflare Turnstile }
+      #   purpose: { en: Reduce automated contact form submissions., zh-CN: 减少联系表单中的自动化提交。 }
+      #   dataCategories: { en: Describe challenge and response data., zh-CN: 填写验证挑战和响应处理的数据类别。 }
+      #   recipient: { en: Cloudflare, Inc., zh-CN: Cloudflare, Inc. }
+      #   retention: { en: Configure the provider's retention period., zh-CN: 填写供应商的数据保留期限。 }
+      #   siteKey: 0x4AAAAAAABBBBBBBBCCCCCCDDDD
+      # - id: signup-form-check
+      #   provider: google-recaptcha
+      #   name: { en: Google reCAPTCHA, zh-CN: Google reCAPTCHA }
+      #   purpose: { en: Reduce automated signup submissions., zh-CN: 减少注册表单中的自动化提交。 }
+      #   dataCategories: { en: Describe challenge and response data., zh-CN: 填写验证挑战和响应处理的数据类别。 }
+      #   recipient: { en: Google LLC, zh-CN: Google LLC }
+      #   retention: { en: Configure the provider's retention period., zh-CN: 填写供应商的数据保留期限。 }
+      #   siteKey: 6LcAbCdEfGhIjKlMnOpQrStUvWxYz0123456789a
+      # - id: support-form-check
+      #   provider: hcaptcha
+      #   name: { en: hCaptcha, zh-CN: hCaptcha }
+      #   purpose: { en: Reduce automated support requests., zh-CN: 减少自动化的支持请求。 }
+      #   dataCategories: { en: Describe challenge and response data., zh-CN: 填写验证挑战和响应处理的数据类别。 }
+      #   recipient: { en: Intuition Machines, Inc., zh-CN: Intuition Machines, Inc. }
+      #   retention: { en: Configure the provider's retention period., zh-CN: 填写供应商的数据保留期限。 }
+      #   siteKey: 0123456789abcdefghijklmnopqrstuvwx
+# Add browser services under plugins.consent after filling the real site operator details above.
 # Every configured service waits for the visitor's explicit consent before its vendor code loads.

package/content/pages/home/en.md

@@ -17,8 +17,16 @@ blocks:
           eyebrow: A project built for the edge
           title: Build a fast website from clear, editable source files.
           text: EdgePress turns Markdown posts, page layouts, themes, and consent-aware integrations into a static site served by Cloudflare Workers.
-          mascotSrc: /edgepress/brand/mascot.png
+          mascotSrc: /edgepress/brand/mascot-418.png
           mascotAlt: A curious sparrow folded from layered paper pages, EdgePress's project mascot.
+          mascotWidth: 418
+          mascotHeight: 440
+          mascotSizes: 209px
+          mascotWebpSrcset:
+            - src: /edgepress/brand/mascot-209.webp
+              width: 209
+            - src: /edgepress/brand/mascot-418.webp
+              width: 418
           cta:
             label: Start with the quick guide
             url: /quick-start/

package/content/pages/home/zh-cn.md

@@ -17,8 +17,16 @@ blocks:
           eyebrow: 为边缘网络构建
           title: 用清晰、可编辑的源文件构建快速网站。
           text: EdgePress 将 Markdown 文章、页面布局、主题和遵循同意状态的集成构建为由 Cloudflare Workers 提供服务的静态网站。
-          mascotSrc: /edgepress/brand/mascot.png
+          mascotSrc: /edgepress/brand/mascot-418.png
           mascotAlt: EdgePress 吉祥物，一只由层叠折页构成、神情好奇的小鸟。
+          mascotWidth: 418
+          mascotHeight: 440
+          mascotSizes: 209px
+          mascotWebpSrcset:
+            - src: /edgepress/brand/mascot-209.webp
+              width: 209
+            - src: /edgepress/brand/mascot-418.webp
+              width: 418
           cta:
             label: 从快速入门开始
             url: /quick-start/

package/content/pages/plugin-development/en.md

@@ -43,9 +43,10 @@ blocks:
           blocks:
             - type: text
               paragraphs:
-                - Add browser providers in config.yml under plugins.tracking, plugins.statistics, plugins.advertising, or plugins.captcha. Each entry needs a unique ID, purpose, retention description, and a public provider identifier.
+                - Add browser providers in config.yml under plugins.consent.tracking, plugins.consent.statistics, plugins.consent.advertising, or plugins.consent.captcha. Each service needs a unique ID, provider, purpose, dataCategories, recipient, retention, and its public site identifier. Localized fields are maps keyed by every enabled locale, such as en and zh-CN.
                 - Available providers include Google Tag Manager and Meta Pixel; Cloudflare Web Analytics, Google Analytics, and Baidu Tongji; Google AdSense; and Cloudflare Turnstile, Google reCAPTCHA, and hCaptcha.
-                - Provider code is imported only after the visitor accepts that integration. Keep CAPTCHA secret keys out of config.yml and client code. The server must submit each CAPTCHA response to the provider verification API before accepting a form.
+                - Set plugins.consent.proposedDate to the YYYY-MM-DD date the notice was drafted. Set effectiveDate when the notice takes effect; omit it while no effective date has been set. Updating either date makes saved consent stale, so visitors are asked again.
+                - Provider code is imported only after the visitor accepts that integration. The first layer offers accept and reject together; service data and individual switches are available in its details. Keep CAPTCHA secret keys out of config.yml and client code. The server must submit each CAPTCHA response to the provider verification API before accepting a form.
             - type: notice
               title: Operator details
               text: Fill privacy.controller.name, privacy.controller.contact, and privacy.policyUrl before configuring any browser provider. The build rejects provider services when the controller name or contact is blank.
@@ -85,8 +86,8 @@ blocks:
               items:
                 - label: Cloudflare Turnstile Siteverify
                   url: https://developers.cloudflare.com/turnstile/get-started/server-side-validation/
-                - label: Consent guidelines from the EDPB
-                  url: https://www.edpb.europa.eu/sites/default/files/files/file1/edpb_guidelines_202005_consent_en.pdf
+                - label: EDPB consent summary
+                  url: https://www.edpb.europa.eu/system/files/2026-04/edpb-summary-consent_en.pdf
   - columns: 1
     cells:
       -

package/content/pages/plugin-development/zh-cn.md

@@ -43,9 +43,10 @@ blocks:
           blocks:
             - type: text
               paragraphs:
-                - 在 config.yml 的 plugins.tracking、plugins.statistics、plugins.advertising 或 plugins.captcha 下添加浏览器供应商。每项需要唯一 ID、用途、保留期限说明和公开供应商标识。
+                - 在 config.yml 的 plugins.consent.tracking、plugins.consent.statistics、plugins.consent.advertising 或 plugins.consent.captcha 下添加浏览器供应商。每项需要唯一 ID、provider、purpose、dataCategories、recipient、retention 和公开站点标识。多语言字段需使用语言映射，覆盖已启用的每种语言，例如 en 与 zh-CN。
                 - 可用供应商包括 Google Tag Manager 和 Meta Pixel；Cloudflare Web Analytics、Google Analytics 和百度统计；Google AdSense；以及 Cloudflare Turnstile、Google reCAPTCHA 和 hCaptcha。
-                - 只有访客接受对应集成后才会导入供应商代码。不要把 CAPTCHA 密钥放入 config.yml 或客户端代码。服务器必须在接受表单前将每个 CAPTCHA 响应提交给供应商验证 API。
+                - plugins.consent.proposedDate 必须设置为 YYYY-MM-DD 格式的告知拟定日期。告知生效后再设置 effectiveDate；尚未生效时可以省略。修改任一日期都会使旧的同意记录失效，并重新询问访客。
+                - 只有访客接受对应集成后才会导入供应商代码。首层同时提供接受和拒绝，数据详情与逐项开关位于展开内容中。不要把 CAPTCHA 密钥放入 config.yml 或客户端代码。服务器必须在接受表单前将每个 CAPTCHA 响应提交给供应商验证 API。
             - type: notice
               title: 运营者信息
               text: 配置浏览器供应商前，请填写 privacy.controller.name、privacy.controller.contact 和 privacy.policyUrl。控制者名称或联系方式为空时，构建器会拒绝启用供应商服务。
@@ -85,8 +86,8 @@ blocks:
               items:
                 - label: Cloudflare Turnstile Siteverify
                   url: https://developers.cloudflare.com/turnstile/get-started/server-side-validation/
-                - label: EDPB 同意指南
-                  url: https://www.edpb.europa.eu/sites/default/files/files/file1/edpb_guidelines_202005_consent_en.pdf
+                - label: EDPB 同意摘要
+                  url: https://www.edpb.europa.eu/system/files/2026-04/edpb-summary-consent_en.pdf
   - columns: 1
     cells:
       -

package/content/pages/privacy-policy/en.md

@@ -32,7 +32,7 @@ blocks:
           title: Optional browser services
           blocks:
             - type: text
-              text: The current configuration has no tracking, statistics, advertising, or human-verification providers in its service lists. If the operator adds a service, the list below is generated from its configured provider, purpose, and retention description.
+              text: This list is regenerated on each build from enabled browser services in config.yml under plugins.consent. It shows each service name, provider category, purpose, data categories, recipient, and configured retention period.
             - type: privacy-services
               emptyText: No optional third-party browser services are configured in this source build.
   - columns: 1
@@ -44,12 +44,14 @@ blocks:
           blocks:
             - type: text
               paragraphs:
-                - Browser integrations are loaded only after the visitor accepts a configured service. The consent interface stores a first-party preference in local browser storage when a choice can be saved. It is not a server-side audit log.
-                - Visitors can reopen Privacy settings to change a choice. If they withdraw a previously active service, the page reloads so that the integration can stop running.
+                - Optional browser integrations stay off until a visitor actively accepts them. No service is selected on a first visit. Accept and reject are both available at the same level; visitors can also open the service details and save a granular choice.
+                - The interface stores the selected service IDs in first-party browser storage for the configured period. This preference record is stored on the visitor's device; it is not a server-side audit log.
+                - Visitors can reopen Privacy settings to change or withdraw a choice. If they withdraw a previously active service, the page reloads so the integration can stop running.
             - type: privacy-consent
               storageLabel: Browser storage key
               expiryLabel: Preference expiry
-              versionLabel: Consent configuration version
+              proposedDateLabel: Notice proposed
+              effectiveDateLabel: Notice effective
               expiryText: "{days} days after saving"
   - columns: 1
     cells:
@@ -61,6 +63,7 @@ blocks:
               paragraphs:
                 - Before enabling a provider, the operator must document the information it receives, purposes, recipients, applicable retention, and any cross-border transfers. Public site identifiers may be configured in the browser; CAPTCHA secret keys must stay on a trusted server, which must verify each response token.
                 - This starter configuration cannot determine the operator's jurisdiction, legal bases, retention obligations, or the rights that apply to a particular deployment. Complete this policy for the actual site and seek qualified advice where needed.
+                - Review the current privacy information and terms for every provider listed above. Confirm that its actual data collection, recipients, retention, and transfer practices match this policy before publication and whenever the configuration changes.
             - type: link-list
               title: Primary legal references
               items:

package/content/pages/privacy-policy/zh-cn.md

@@ -32,7 +32,7 @@ blocks:
           title: 可选浏览器服务
           blocks:
             - type: text
-              text: 当前配置的跟踪、统计、广告和人机验证服务列表均为空。运营者添加服务后，下方列表会根据所配置的供应商、用途和保留期限自动生成。
+              text: 下方列表会在每次构建时根据 config.yml 中 plugins.consent 下已启用的浏览器服务重新生成，显示服务名称、供应商类别、用途、数据类别、接收方和配置的保留期限。
             - type: privacy-services
               emptyText: 此源项目当前没有配置可选的第三方浏览器服务。
   - columns: 1
@@ -44,12 +44,14 @@ blocks:
           blocks:
             - type: text
               paragraphs:
-                - 浏览器集成只有在访客接受已配置服务后才会加载。存在可保存的选择时，同意界面会将第一方偏好存储在本地浏览器中；它不是服务器端审计日志。
-                - 访客可以重新打开“隐私设置”更改选择。撤回之前已启用的服务后，页面会重新载入，以停止该集成继续运行。
+                - 可选浏览器集成只有在访客主动接受后才会加载。首次访问时没有预先选中的服务；接受和拒绝选项处于同一层级，访客也可以展开服务详情并保存逐项选择。
+                - 同意界面会在第一方浏览器存储中保存访客选择的服务 ID，并遵循下方配置的有效期限。该偏好记录只保存在访客设备上，不是服务器端审计日志。
+                - 访客可以重新打开“隐私设置”更改或撤回选择。撤回之前已启用的服务后，页面会重新载入，以停止该集成继续运行。
             - type: privacy-consent
               storageLabel: 浏览器存储键
               expiryLabel: 偏好过期时间
-              versionLabel: 同意配置版本
+              proposedDateLabel: 隐私告知拟定日期
+              effectiveDateLabel: 隐私告知生效日期
               expiryText: "保存后 {days} 天"
   - columns: 1
     cells:
@@ -61,6 +63,7 @@ blocks:
               paragraphs:
                 - 启用供应商前，运营者应记录供应商接收的信息、处理目的、接收方、适用保留期限和跨境传输情况。浏览器配置中只能填写公开站点标识；CAPTCHA 密钥必须保存在可信服务器中，并由服务器验证每个响应令牌。
                 - 此起始配置无法确定实际部署的运营者所在地、法律依据、数据保留义务或适用的个人权利。请根据实际网站完成政策，必要时咨询合格的专业人员。
+                - 请核对上方每个供应商当前的隐私说明和适用条款，确认其实际收集的数据、接收方、保留期限和传输方式与本政策一致。发布前以及配置变更后都应重新检查。
             - type: link-list
               title: 主要法律资料
               items:

package/content/pages/theme-development/en.md

@@ -66,6 +66,7 @@ blocks:
                 - Each page and locale is a Markdown file, but the page body after front matter must stay empty. The editor data lives in its blocks YAML.
                 - "Order the data from the outside inward: set each row's columns count first, provide one cells entry per column, select an element type inside a cell, then edit that element's fields. The validator rejects mismatched column counts and empty cells."
                 - Pages do not use the post Markdown renderer. Posts remain Markdown articles and use the built-in sanitizing renderer.
+                - Hero blocks can use mascotWebpSrcset with ascending path-and-width candidates, mascotSizes matching the rendered width, and mascotWidth/mascotHeight matching the fallback image. mascotSrc remains the fallback for browsers without WebP support.
             - type: data-table
               title: Available element families
               headers:

package/content/pages/theme-development/zh-cn.md

@@ -66,6 +66,7 @@ blocks:
                 - 每个页面和语言版本都是一个 Markdown 文件，但 front matter 之后必须保持空白。页面编辑数据放在 YAML blocks 中。
                 - 数据从外向内排列：先设每行的 columns 栏数，再为每栏设置一个 cells 项，然后在栏内选择元素类型，最后编辑该元素字段。验证器会拒绝栏数不匹配或空白的栏。
                 - 页面不使用文章 Markdown 渲染器。文章仍使用 Markdown 撰写，并由内置安全渲染器输出。
+                - hero 元素可用 mascotWebpSrcset 提供按宽度递增的路径候选项，并设置与显示宽度一致的 mascotSizes，以及匹配备用图片尺寸的 mascotWidth 和 mascotHeight。mascotSrc 会留作不支持 WebP 的浏览器备用图。
             - type: data-table
               title: 可用元素类别
               headers:

package/content/posts/2026-09-23-edgepress-on-the-edge/en.md

@@ -104,6 +104,14 @@ Images use the same shape as links, with an exclamation mark and useful alternat
 
 ![A diagram showing Markdown source passing through EdgePress rendering and HTML sanitization to a published post](/edgepress-markdown-guide.svg "The EdgePress post pipeline")
 
+Posts also accept a direct video file in the same image-shaped syntax. The alt text describes the video for assistive technology, and the optional title becomes its caption:
+
+```markdown
+![A kite passing over a field](https://media.example.org/field-recording.mp4 "Wind test, early morning")
+```
+
+MP4, WebM, OGV, and OGG files are rendered in a native video player with controls. Media uses `preload="none"` so the browser waits for playback before downloading the video. Embedded video players and arbitrary iframe markup are not supported.
+
 ## Lists, including nested combinations
 
 Start unordered items with `-`, `+`, or `*`; start ordered items with a number and a period. Indent child items by at least two spaces. Inline emphasis, code, and links work inside either level:
@@ -160,7 +168,7 @@ Small semantic HTML elements such as <kbd>Ctrl</kbd> can be useful inside Markdo
 
 <script>alert('unsafe');</script>
 
-Use a page's media-text element for video; embedded frames and arbitrary scripts are not allowed in posts.
+Use the Markdown image-shaped syntax above for a direct video file; embedded frames and arbitrary scripts are not allowed in posts.
 
 This is the complete enabled post dialect: CommonMark block and inline syntax plus GFM tables, autolinks, task lists, and strikethrough. Extensions such as footnotes, math notation, Mermaid diagrams, underline syntax, and definition lists are not enabled by this project. They remain ordinary text unless you add a trusted renderer extension.
 

package/content/posts/2026-09-23-edgepress-on-the-edge/zh-cn.md

@@ -104,6 +104,14 @@ CommonMark 也支持每行缩进四个空格的代码块：
 
 ![Markdown 源文件依次经过 EdgePress 渲染与 HTML 清理，生成发布文章的流程图](/edgepress-markdown-guide.svg "EdgePress 文章生成流程")
 
+文章也支持使用图片形状的 Markdown 语法插入直接视频文件。替代文字用于向辅助技术描述视频，可选标题会显示为视频说明：
+
+```markdown
+![一只风筝掠过田野](https://media.example.org/field-recording.mp4 "清晨的风况测试")
+```
+
+MP4、WebM、OGV 和 OGG 文件会渲染为带控制按钮的原生视频播放器，并设置 `preload="none"`，在访客播放前不预加载视频。文章不支持嵌入式播放器或任意 iframe 标记。
+
 ## 列表与嵌套组合
 
 无序列表项以 `-`、`+` 或 `*` 开头；有序列表项以数字和句点开头。子项目缩进至少两个空格。两种列表都可以包含强调、代码和链接：
@@ -160,7 +168,7 @@ GFM 也会把 `www.example.com` 与 `https://example.com` 转换成链接，并
 
 <script>alert('unsafe');</script>
 
-视频请使用页面的「媒体与文字」元素；文章不允许嵌入框架或任意脚本。
+视频请使用上面的图片形状 Markdown 语法；文章不允许嵌入播放器框架或任意脚本。
 
 本项目启用的文章语法范围是：CommonMark 的块级和行内语法，加上 GFM 表格、自动链接、任务列表与删除线。脚注、数学公式、Mermaid 图表、下划线语法和定义列表等扩展没有启用；除非添加受信任的渲染扩展，否则它们会作为普通文字显示。
 

package/content/posts/2026-09-25-edgepress-release-2026-9-6/en.md

@@ -22,9 +22,9 @@ Generated code blocks now have an accessible copy button. Theme styles wrap long
 
 The project compatibility history is updated to version `2026.9.6`.
 
-## Site identity and themes
+## Theme palettes
 
-The starter canonical URL is `https://edgepress.js.gripe` and the configured author is `toewpq`. The bundled themes have refreshed, higher-contrast palettes. The privacy policy continues to call for a real operator name and working privacy contact before publication.
+The bundled themes have refreshed, higher-contrast palettes.
 
 ## A clearer visual identity and reading path
 

package/content/posts/2026-09-25-edgepress-release-2026-9-6/zh-cn.md

@@ -22,9 +22,9 @@ tags:
 
 项目兼容性历史已更新至 `2026.9.6`。
 
-## 站点信息和主题配色
+## 主题配色
 
-起始配置的规范网址为 `https://edgepress.js.gripe`，作者设为 `toewpq`。内置主题已换成对比度更清晰、视觉更鲜明的新配色。隐私政策仍会提示：发布前需要填写真实运营者名称和有效的隐私联系方式。
+内置主题已换成对比度更清晰、视觉更鲜明的新配色。
 
 ## 更清晰的视觉识别与阅读路径
 

package/content/posts/2026-09-26-edgepress-release-2026-9-7/en.md

@@ -0,0 +1,26 @@
+---
+title: "EdgePress September 2026 update: request 7"
+author: toewpq
+date: 2026-09-26
+lang: en
+slug: edgepress-release-2026-9-7
+tags:
+  - release
+  - performance
+  - privacy
+
+---
+
+This is the seventh requested EdgePress update for September 2026.
+
+## Consent and privacy disclosures
+
+Cloudflare Web Analytics is configured as a statistics service and remains behind the visitor's explicit consent. Browser service groups now live under `plugins.consent` in `config.yml`. The privacy policy lists each enabled service's provider, category, purpose, and retention period when the site is built.
+
+## Images and article lists
+
+The homepage uses smaller responsive mascot images. Article archives are sorted newest-first across all available languages, while homepage latest-post lists stay in the current language. Post excerpts now remove Markdown syntax before display.
+
+## Mobile controls and maintenance
+
+The consent panel has a responsive mobile layout, clearer service details, and larger touch targets. The unused integrations directory and obsolete cleanup paths for retired audit files have been removed.

package/content/posts/2026-09-26-edgepress-release-2026-9-7/zh-cn.md

@@ -0,0 +1,26 @@
+---
+title: EdgePress 2026 年 9 月更新：第 7 次需求
+author: toewpq
+date: 2026-09-26
+lang: zh-CN
+slug: edgepress-release-2026-9-7
+tags:
+  - 发布
+  - 性能
+  - 隐私
+
+---
+
+这是 EdgePress 在 2026 年 9 月针对第 7 次需求的更新。
+
+## 同意管理和隐私披露
+
+Cloudflare Web Analytics 已作为统计服务接入，并继续等待访客明确同意后才会加载。`config.yml` 中的浏览器服务组现在统一放在 `plugins.consent` 下。每次构建时，隐私政策都会列出已启用服务的供应商、类别、用途和保留期限。
+
+## 图片和文章列表
+
+首页现在使用较小的自适应吉祥物图片。文章归档会跨语言按发布时间从新到旧排列；首页最新文章列表仍按当前语言显示。文章摘要在显示前会去除 Markdown 标记。
+
+## 移动端控件和维护
+
+同意面板改进了移动端布局和服务说明，并扩大了按钮触控区域。未使用的 integrations 空目录和已废弃审计文件清理路径也已移除。

package/content/posts/2026-09-26-edgepress-release-2026-9-8/en.md

@@ -0,0 +1,26 @@
+---
+title: "EdgePress September 2026 update: request 8"
+author: toewpq
+date: 2026-09-26
+lang: en
+slug: edgepress-release-2026-9-8
+tags:
+  - release
+  - privacy
+  - Markdown
+
+---
+
+This is the eighth requested EdgePress update for September 2026.
+
+## Date-based consent and localized disclosures
+
+Consent settings use a required `proposedDate` and an optional `effectiveDate` instead of a version counter. The generated privacy policy displays these dates and lists configured services with localized names, purposes, data categories, recipients, and retention details. Accept and reject controls have equal prominence, optional services start unchecked, and visitors can expand the panel to make a granular choice. The consent component has scoped theme styles and its own viewport checks and screenshots, separate from page-content layout checks.
+
+## Video in Markdown posts
+
+Posts can insert direct MP4, WebM, OGV, and OGG files using image-shaped Markdown syntax. The renderer creates an accessible native player with controls and `preload="none"`.
+
+## Post lists and summaries
+
+Archives now choose one language version per post and sort equal-date release notes by their numeric sequence. The homepage continues to show the latest posts in the current language. Archive, tag, and homepage cards render Markdown formatting in summaries.

package/content/posts/2026-09-26-edgepress-release-2026-9-8/zh-cn.md

@@ -0,0 +1,26 @@
+---
+title: EdgePress 2026 年 9 月更新：第 8 次需求
+author: toewpq
+date: 2026-09-26
+lang: zh-CN
+slug: edgepress-release-2026-9-8
+tags:
+  - 发布
+  - 隐私
+  - Markdown
+
+---
+
+这是 EdgePress 在 2026 年 9 月针对第 8 次需求的更新。
+
+## 日期化同意配置与多语言披露
+
+同意设置使用必填的 `proposedDate` 拟定日期和可选的 `effectiveDate` 生效日期，取代版本计数。生成的隐私政策会显示这两个日期，并列出已配置服务的多语言名称、用途、数据类别、接收方和保留期限。接受与拒绝按钮具有同等醒目程度，可选服务默认不勾选；访客可以展开面板逐项设置。组件样式限定在同意管理器内，其视口检查和截图也与页面内容布局检测分开。
+
+## Markdown 文章中的视频
+
+文章可使用图片形状的 Markdown 语法插入 MP4、WebM、OGV 和 OGG 直接视频文件。渲染器会生成带控制按钮的原生播放器，并设置 `preload="none"`。
+
+## 文章列表和摘要
+
+归档现在会为每篇文章选择一个语言版本，并在日期相同时按数字序号从新到旧排列发布记录。首页仍按当前语言显示最新文章。归档、标签和首页卡片的摘要都会渲染 Markdown 格式。

package/languages/base/en.json

@@ -36,8 +36,8 @@
   "latestPosts": "Latest posts",
   "postAuthor": "By {author}",
   "privacySettings": "Privacy settings",
-  "privacyNotice": "Optional services",
-  "privacyIntro": "Choose which optional services may load. Nothing is enabled until you save or accept your choices.",
+  "privacyNotice": "Privacy choices",
+  "privacyIntro": "Optional services stay off until you choose. Accept or reject them now, or review each service before saving a custom choice.",
   "acceptOptional": "Accept all",
   "rejectOptional": "Reject optional",
   "savePreferences": "Save choices",
@@ -46,7 +46,12 @@
   "privacyPolicy": "Privacy policy",
   "privacyController": "Site operator",
   "servicePurpose": "Purpose",
+  "serviceDataCategories": "Data used",
+  "serviceRecipient": "Recipient",
   "serviceRetention": "Retention",
+  "reviewDetails": "Review data and service settings",
+  "managePrivacy": "Manage choices",
+  "essentialStorage": "Your choice is saved in this browser for up to {days} days. This preference storage is required to remember your choice.",
   "pluginTracking": "Tracking",
   "pluginStatistics": "Statistics",
   "pluginAdvertising": "Advertising",

package/languages/packs/zh-CN.json

@@ -36,8 +36,8 @@
   "latestPosts": "最新文章",
   "postAuthor": "作者：{author}",
   "privacySettings": "隐私设置",
-  "privacyNotice": "可选服务",
-  "privacyIntro": "请选择允许加载的可选服务。保存或接受之前，不会启用任何服务。",
+  "privacyNotice": "隐私选择",
+  "privacyIntro": "可选服务默认关闭。你可以立即全部接受或拒绝，也可以先查看各项服务并保存自定义选择。",
   "acceptOptional": "全部接受",
   "rejectOptional": "拒绝可选服务",
   "savePreferences": "保存选择",
@@ -46,7 +46,12 @@
   "privacyPolicy": "隐私政策",
   "privacyController": "网站运营者",
   "servicePurpose": "用途",
+  "serviceDataCategories": "涉及的数据",
+  "serviceRecipient": "接收方",
   "serviceRetention": "保留期限",
+  "reviewDetails": "查看数据详情并管理服务",
+  "managePrivacy": "管理选择",
+  "essentialStorage": "此浏览器会保存你的选择，最长 {days} 天。这项偏好存储用于记住你的选择。",
   "pluginTracking": "跟踪",
   "pluginStatistics": "统计",
   "pluginAdvertising": "广告",