hd-garden 0.3.0

package/app/layout.tsx

@@ -0,0 +1,102 @@
+import type { Metadata } from "next";
+import { Geist_Mono } from "next/font/google";
+import "katex/dist/katex.min.css";
+import "./globals.css";
+import { SiteChrome } from "./components/SiteChrome";
+import {
+  getSiteUrl,
+  siteDescription,
+  webmentionEndpoint,
+} from "./lib/site";
+import { githubUrl, siteConfig } from "./site.config";
+
+const geistMono = Geist_Mono({
+  variable: "--font-geist-mono",
+  subsets: ["latin"],
+});
+
+export async function generateMetadata(): Promise<Metadata> {
+  const siteUrl = await getSiteUrl();
+
+  return {
+    metadataBase: new URL(siteUrl),
+    title: {
+      default: siteConfig.name,
+      template: `%s · ${siteConfig.name}`,
+    },
+    description: siteDescription,
+    authors: [{ name: siteConfig.author.name, url: githubUrl }],
+    alternates: {
+      types: {
+        "application/rss+xml": "/rss.xml",
+      },
+    },
+    icons: {
+      icon: "/favicon.svg",
+    },
+    robots: {
+      index: true,
+      follow: true,
+      googleBot: {
+        index: true,
+        follow: true,
+        "max-image-preview": "large",
+        "max-snippet": -1,
+        "max-video-preview": -1,
+      },
+    },
+    openGraph: {
+      title: siteConfig.name,
+      description: siteConfig.tagline,
+      type: "website",
+      locale: siteConfig.locale,
+      images: [
+        {
+          url: "/og.png",
+          width: 1731,
+          height: 909,
+          alt: `${siteConfig.name} · ${siteConfig.pages.home.title.replace("\n", "")}`,
+        },
+      ],
+    },
+    twitter: {
+      card: "summary_large_image",
+      title: siteConfig.name,
+      description: siteConfig.tagline,
+      images: ["/og.png"],
+    },
+  };
+}
+
+export default function RootLayout({
+  children,
+}: Readonly<{
+  children: React.ReactNode;
+}>) {
+  const mentionEndpoint = webmentionEndpoint();
+  const analyticsDomain = process.env.NEXT_PUBLIC_ANALYTICS_DOMAIN;
+  const analyticsScript =
+    process.env.NEXT_PUBLIC_ANALYTICS_SCRIPT ??
+    "https://plausible.io/js/script.js";
+
+  return (
+    <html lang="zh-CN" suppressHydrationWarning>
+      <head>
+        {mentionEndpoint && <link rel="webmention" href={mentionEndpoint} />}
+        {analyticsDomain && (
+          <script
+            defer
+            data-domain={analyticsDomain}
+            src={analyticsScript}
+          />
+        )}
+      </head>
+      <body className={geistMono.variable}>
+        <a className="skip-link" href="#main-content">
+          跳到正文
+        </a>
+        <SiteChrome>{children}</SiteChrome>
+      </body>
+    </html>
+  );
+}

package/app/lib/admin-auth.ts

@@ -0,0 +1,134 @@
+import { cookies } from "next/headers";
+import { createHmac, timingSafeEqual } from "node:crypto";
+
+const SESSION_COOKIE = "hedon_admin_session";
+const SESSION_LIFETIME_SECONDS = 60 * 60 * 24 * 7;
+
+export type GitHubAdminUser = {
+  login: string;
+  avatarUrl: string;
+};
+
+type SessionPayload = GitHubAdminUser & { expiresAt: number };
+
+const encoder = new TextEncoder();
+
+function configuredLogins() {
+  return new Set(
+    (process.env.ADMIN_GITHUB_LOGINS ?? "")
+      .split(",")
+      .map((login) => login.trim().toLowerCase())
+      .filter(Boolean),
+  );
+}
+
+export function isGitHubLoginAllowed(login: string) {
+  return configuredLogins().has(login.trim().toLowerCase());
+}
+
+export function isGitHubOAuthConfigured() {
+  return Boolean(
+    process.env.GITHUB_OAUTH_CLIENT_ID &&
+      process.env.GITHUB_OAUTH_CLIENT_SECRET &&
+      process.env.GITHUB_SESSION_SECRET,
+  );
+}
+
+function toBase64Url(value: Uint8Array | string) {
+  const bytes = typeof value === "string" ? encoder.encode(value) : value;
+  let binary = "";
+  bytes.forEach((byte) => {
+    binary += String.fromCharCode(byte);
+  });
+  return btoa(binary).replaceAll("+", "-").replaceAll("/", "_").replaceAll("=", "");
+}
+
+function fromBase64Url(value: string) {
+  const padded = value.replaceAll("-", "+").replaceAll("_", "/").padEnd(
+    Math.ceil(value.length / 4) * 4,
+    "=",
+  );
+  const binary = atob(padded);
+  return Uint8Array.from(binary, (character) => character.charCodeAt(0));
+}
+
+function sign(value: string) {
+  const secret = process.env.GITHUB_SESSION_SECRET;
+  if (!secret) return null;
+  return toBase64Url(createHmac("sha256", secret).update(value).digest());
+}
+
+function signaturesMatch(actual: string, expected: string) {
+  const actualBytes = encoder.encode(actual);
+  const expectedBytes = encoder.encode(expected);
+  return (
+    actualBytes.byteLength === expectedBytes.byteLength &&
+    timingSafeEqual(actualBytes, expectedBytes)
+  );
+}
+
+export async function createAdminSession(user: GitHubAdminUser) {
+  const payload: SessionPayload = {
+    ...user,
+    expiresAt: Date.now() + SESSION_LIFETIME_SECONDS * 1000,
+  };
+  const body = toBase64Url(JSON.stringify(payload));
+  const signature = sign(body);
+  return signature ? `${body}.${signature}` : null;
+}
+
+async function readSession(value: string | undefined): Promise<GitHubAdminUser | null> {
+  if (!value) return null;
+  const [body, signature, ...rest] = value.split(".");
+  if (!body || !signature || rest.length) return null;
+  const expected = sign(body);
+  if (!expected || !signaturesMatch(signature, expected)) return null;
+  try {
+    const payload = JSON.parse(
+      new TextDecoder().decode(fromBase64Url(body)),
+    ) as SessionPayload;
+    if (
+      !payload.login ||
+      !payload.avatarUrl ||
+      payload.expiresAt < Date.now() ||
+      !isGitHubLoginAllowed(payload.login)
+    ) {
+      return null;
+    }
+    return { login: payload.login, avatarUrl: payload.avatarUrl };
+  } catch {
+    return null;
+  }
+}
+
+export async function getAdminUser() {
+  const store = await cookies();
+  return readSession(store.get(SESSION_COOKIE)?.value);
+}
+
+export function sessionCookie(value: string) {
+  return `${SESSION_COOKIE}=${value}; Path=/; HttpOnly; Secure; SameSite=Lax; Max-Age=${SESSION_LIFETIME_SECONDS}`;
+}
+
+export function clearSessionCookie() {
+  return `${SESSION_COOKIE}=; Path=/; HttpOnly; Secure; SameSite=Lax; Max-Age=0`;
+}
+
+export async function requireAdminApi() {
+  const user = await getAdminUser();
+  if (!user) {
+    return Response.json({ error: "请先使用 GitHub 登录管理后台。" }, { status: 401 });
+  }
+  return user;
+}
+
+/** Reject browser cross-site state changes even if a cookie policy is weakened. */
+export async function requireAdminMutation(request: Request) {
+  const origin = request.headers.get("origin");
+  const fetchSite = request.headers.get("sec-fetch-site");
+  const ownOrigin = new URL(request.url).origin;
+  if ((origin && origin !== ownOrigin) || fetchSite === "cross-site") {
+    return Response.json({ error: "不接受跨站后台请求。" }, { status: 403 });
+  }
+  return requireAdminApi();
+}

package/app/lib/content.ts

@@ -0,0 +1,112 @@
+import { markdownPlugins } from "./markdown-plugins";
+import {
+  columns,
+  posts,
+  thoughts,
+  type ContentEntry,
+  type MediaItem,
+} from "@garden/generated-content";
+import GithubSlugger from "github-slugger";
+import { toString } from "mdast-util-to-string";
+import remarkParse from "remark-parse";
+import { unified } from "unified";
+import { visit } from "unist-util-visit";
+
+export { columns, posts, thoughts };
+export type { ContentEntry, MediaItem };
+
+export const postHref = (post: Pick<ContentEntry, "path">) => `/blog/${post.path}`;
+export const columnEntryPath = (entry: Pick<ContentEntry, "column" | "path">) => {
+  const prefix = entry.column ? `${entry.column}/` : "";
+  return prefix && entry.path.startsWith(prefix) ? entry.path.slice(prefix.length) : entry.path;
+};
+export const columnHref = (entry: Pick<ContentEntry, "column" | "path">) =>
+  `/columns/${entry.column}/${columnEntryPath(entry)}`;
+
+export const formatDate = (value: string, withTime = false) =>
+  new Intl.DateTimeFormat("zh-CN", {
+    year: "numeric",
+    month: "2-digit",
+    day: "2-digit",
+    ...(withTime ? { hour: "2-digit", minute: "2-digit" } : {}),
+  }).format(new Date(value));
+
+/**
+ * Parses the same Markdown heading text that ReactMarkdown sends to
+ * rehype-slug. Every heading depth advances the slugger so headings outside
+ * the H2-H5 TOC range cannot shift the IDs shown in the directory.
+ */
+export const extractHeadings = (markdown: string) => {
+  const slugger = new GithubSlugger();
+  const headings: Array<{ depth: number; text: string; id: string }> = [];
+  const tree = unified().use(remarkParse).use(markdownPlugins).parse(markdown);
+
+  visit(tree, "heading", (node) => {
+    const text = toString(node).trim();
+    const id = slugger.slug(text);
+    if (text && node.depth >= 2 && node.depth <= 5) {
+      headings.push({ depth: node.depth, text, id });
+    }
+  });
+
+  return headings;
+};
+
+const toSearchableText = (markdown: string) =>
+  markdown
+    .replace(/```[^\n]*\n([\s\S]*?)```/g, " $1 ")
+    .replace(/!\[([^\]]*)\]\([^)]+\)/g, " $1 ")
+    .replace(/\[([^\]]+)\]\([^)]+\)/g, " $1 ")
+    .replace(/<[^>]+>/g, " ")
+    .replace(/[#>*_~`|[\]{}()]/g, " ")
+    .replace(/\s+/g, " ")
+    .trim();
+
+export const estimateWordCount = (markdown: string) => {
+  const text = toSearchableText(markdown);
+  const hanCharacters = text.match(/[\u3400-\u9fff]/gu)?.length ?? 0;
+  const otherWords = text
+    .replace(/[\u3400-\u9fff]/gu, " ")
+    .match(/[\p{L}\p{N}]+/gu)?.length ?? 0;
+  return hanCharacters + otherWords;
+};
+
+export const searchRecords = [
+  ...posts.map((item) => ({
+    title: item.title,
+    description: item.description ?? "",
+    topic: item.topic ?? "博文",
+    path: postHref(item),
+    content: toSearchableText(item.content),
+  })),
+  ...columns.map((item) => ({
+    title: item.title,
+    description: item.description ?? "",
+    topic: item.columnTitle ?? "专栏",
+    path: columnHref(item),
+    content: toSearchableText(item.content),
+  })),
+  ...thoughts.map((item) => ({
+    title: item.title,
+    description: toSearchableText(item.content),
+    topic: "随想",
+    path: `/thoughts/${item.slug}`,
+    content: toSearchableText(item.content),
+  })),
+];
+
+export const topics = Array.from(
+  new Set(posts.map((post) => post.topic).filter(Boolean)),
+) as string[];
+
+export const findPost = (path: string): ContentEntry | undefined =>
+  posts.find((post) => post.path === path);
+
+export const findThought = (slug: string): ContentEntry | undefined =>
+  thoughts.find((thought) => thought.slug === slug);
+
+export const findColumnEntry = (
+  column: string,
+  path: string,
+): ContentEntry | undefined =>
+  columns.find((entry) => entry.column === column && columnEntryPath(entry) === path);

package/app/lib/fallback-site-config.ts

@@ -0,0 +1,56 @@
+export const siteConfig = {
+  name: "Garden",
+  tagline: "写作 · 构建 · 保持好奇",
+  description: "一个可 fork、可长期维护的 Markdown 个人博客系统。",
+  locale: "zh_CN",
+  author: {
+    name: "Your Name",
+    github: "your-github-id",
+    githubBio: "Write a short introduction for your GitHub profile card.",
+    githubPinned: [] as string[],
+  },
+  pages: {
+    home: {
+      title: "把复杂的事，\n慢慢想明白。",
+      subtitle: "在这里记录产品、工程、学习与日常生活中值得慢慢想明白的事。",
+    },
+    blog: {
+      title: "长期写下去，偶尔回头整理。",
+      subtitle: "这里是完整文章：有明确主题、有持续论证，也允许自己在更新里修正旧判断。",
+    },
+    thoughts: {
+      title: "不够写成文章的，也值得留下。",
+      subtitle: "私人朋友圈式的轻量记录：短文字、照片、声音、影像，以及偶然遇见的链接。",
+    },
+    columns: {
+      title: "把一个主题，写到足够深入。",
+      subtitle: "专栏不是标签集合，而是一条有顺序的阅读路径。左侧章节导航会在阅读时始终陪着你。",
+    },
+    about: {
+      title: "你好，我是 Your Name。",
+      subtitle: "在这里写下你关心的问题、长期的方向，以及你希望如何与世界保持联系。",
+      heading: "这个网站为什么存在",
+      paragraphs: [
+        "我需要一个不被信息流推着走的地方。长文可以慢慢展开，随想可以轻轻放下；同一个主题也可以沿着清晰的顺序持续生长。",
+        "所有文章都从本地 Markdown 文件开始。这意味着我可以继续在 Typora 里写作，也意味着内容不会被某个编辑器或平台锁住。",
+      ],
+      quote: "写作不是把已经想明白的东西记下来，而是在句子之间发现自己还没有想明白什么。",
+      focus: [
+        "将自己的关注方向写在这里",
+        "用文章积累可迁移的知识",
+        "为长期写作留出稳定的空间",
+      ],
+      cta: {
+        href: "/blog",
+        label: "从博文开始",
+      },
+    },
+    garden: {
+      title: "一个基于 Markdown 的个人博客框架。",
+      subtitle: "",
+    },
+  },
+  footer: "保持独立，持续写作。",
+};
+
+export const githubUrl = `https://github.com/${siteConfig.author.github}`;