project-logbook 0.3.3 → 0.4.0

package/dist/lib/lint-runner.js

@@ -1,4 +1,4 @@
-import chalk from 'chalk';
+import { error, info, warning } from './theme.js';
 import { linters } from '../linters/index.js';
 export async function runLinters(context) {
     const issues = [];
@@ -8,23 +8,23 @@ export async function runLinters(context) {
             issues.push(...result);
         }
         catch (err) {
-            console.error(chalk.red(`Error running linter '${linter.name}':`), err);
+            console.error(error(`Error running linter '${linter.name}':`), err);
         }
     }
     if (issues.length === 0) {
         return true;
     }
     if (context.entryName) {
-        console.log(chalk.blue(`\nEntry: ${context.entryName}`));
+        console.log(info(`\nEntry: ${context.entryName}`));
     }
     let hasErrors = false;
     for (const issue of issues) {
         if (issue.level === 'error') {
-            console.error(chalk.red(`  [${issue.category.toUpperCase()}] ${issue.message}`));
+            console.error(error(`  [${issue.category.toUpperCase()}] ${issue.message}`));
             hasErrors = true;
         }
         else {
-            console.warn(chalk.yellow(`  [${issue.category.toUpperCase()}] ${issue.message}`));
+            console.warn(warning(`  [${issue.category.toUpperCase()}] ${issue.message}`));
         }
     }
     return !hasErrors;

package/dist/lib/markdown-processors.d.ts

@@ -0,0 +1,22 @@
+import { unified } from 'unified';
+import type { Plugin } from 'unified';
+import type { Root } from 'hast';
+/**
+ * Rehype plugin: rewrite relative .md links to /index.html equivalents.
+ */
+export declare const rehypeRewriteMdLinks: Plugin<[], Root>;
+/**
+ * General markdown processor for project files (README.md, etc.)
+ * Used for files that don't need image path rewriting
+ */
+export declare function createGeneralMarkdownProcessor(rehypeRewriteMdLinks: Plugin<[], Root>): ReturnType<typeof unified.prototype.use>;
+/**
+ * Entry markdown processor with image path rewriting
+ * Used for logbook entry content (index.md, ticket.md, log.md)
+ */
+export declare function createEntryMarkdownProcessor(rehypeRewriteMdLinks: Plugin<[], Root>, rehypeRewriteImagePaths: Plugin<[], Root>): ReturnType<typeof unified.prototype.use>;
+/**
+ * Image collection processor
+ * Collects all image paths during markdown-to-html conversion
+ */
+export declare function createImageCollectionProcessor(imageCollectionPlugin: Plugin<[], Root>, rehypeRewriteImagePaths: Plugin<[], Root>, rehypeRewriteMdLinks?: Plugin<[], Root>): ReturnType<typeof unified.prototype.use>;

package/dist/lib/markdown-processors.js

@@ -0,0 +1,68 @@
+import { unified } from 'unified';
+import remarkParse from 'remark-parse';
+import remarkGfm from 'remark-gfm';
+import remarkRehype from 'remark-rehype';
+import rehypeSlug from 'rehype-slug';
+import rehypeFormat from 'rehype-format';
+import rehypeStringify from 'rehype-stringify';
+import { visitHastElements } from './hast-helpers.js';
+import { isExternalUrlOrAnchor } from './url-helpers.js';
+/**
+ * Rehype plugin: rewrite relative .md links to /index.html equivalents.
+ */
+export const rehypeRewriteMdLinks = () => {
+    return (tree) => {
+        visitHastElements(tree, 'a', (node) => {
+            const href = node.properties?.href;
+            if (typeof href !== 'string')
+                return;
+            if (isExternalUrlOrAnchor(href))
+                return;
+            const mdMatch = href.match(/^(.*?)\.md(#.*)?$/i);
+            if (!mdMatch)
+                return;
+            const base = mdMatch[1];
+            const fragment = mdMatch[2] ?? '';
+            node.properties.href = `${base}/index.html${fragment}`;
+        });
+    };
+};
+/**
+ * Create a markdown processor with custom rehype plugins
+ *
+ * @param plugins - Array of rehype plugins to inject before formatting
+ * @returns A unified processor
+ */
+function createMarkdownProcessor(plugins = []) {
+    const processor = unified().use(remarkParse).use(remarkGfm).use(remarkRehype);
+    // Apply custom plugins before formatting
+    for (const plugin of plugins) {
+        processor.use(plugin);
+    }
+    return processor.use(rehypeSlug).use(rehypeFormat).use(rehypeStringify);
+}
+/**
+ * General markdown processor for project files (README.md, etc.)
+ * Used for files that don't need image path rewriting
+ */
+export function createGeneralMarkdownProcessor(rehypeRewriteMdLinks) {
+    return createMarkdownProcessor([rehypeRewriteMdLinks]);
+}
+/**
+ * Entry markdown processor with image path rewriting
+ * Used for logbook entry content (index.md, ticket.md, log.md)
+ */
+export function createEntryMarkdownProcessor(rehypeRewriteMdLinks, rehypeRewriteImagePaths) {
+    return createMarkdownProcessor([rehypeRewriteMdLinks, rehypeRewriteImagePaths]);
+}
+/**
+ * Image collection processor
+ * Collects all image paths during markdown-to-html conversion
+ */
+export function createImageCollectionProcessor(imageCollectionPlugin, rehypeRewriteImagePaths, rehypeRewriteMdLinks) {
+    const plugins = [imageCollectionPlugin, rehypeRewriteImagePaths];
+    if (rehypeRewriteMdLinks) {
+        plugins.unshift(rehypeRewriteMdLinks);
+    }
+    return createMarkdownProcessor(plugins);
+}

package/dist/lib/package-version.d.ts

@@ -0,0 +1,5 @@
+/**
+ * Get the package version from package.json
+ * This centralizes version reading across the CLI to avoid duplication and path inconsistencies
+ */
+export declare function getPackageVersion(): string;

package/dist/lib/package-version.js

@@ -0,0 +1,16 @@
+import fs from 'fs-extra';
+import { join, dirname } from 'node:path';
+import { fileURLToPath } from 'node:url';
+/**
+ * Get the package version from package.json
+ * This centralizes version reading across the CLI to avoid duplication and path inconsistencies
+ */
+export function getPackageVersion() {
+    // Get the directory of this file (src/lib/)
+    const __filename = fileURLToPath(import.meta.url);
+    const __dirname = dirname(__filename);
+    // Navigate from src/lib to dist/lib (compiled) or keep as-is for ESM
+    const pkgPath = join(__dirname, '../../package.json');
+    const pkg = JSON.parse(fs.readFileSync(pkgPath, 'utf8'));
+    return pkg.version || '0.0.0';
+}

package/dist/lib/rss.d.ts

@@ -0,0 +1,29 @@
+import type { TimelineEntry } from './template-types.js';
+/**
+ * Configuration for RSS feed generation.
+ * Used by generateRssFeed() to create properly formatted RSS 2.0 feeds.
+ */
+interface RssFeedConfig {
+    title: string;
+    description: string;
+    language: string;
+    feed_url: string;
+    site_url: string;
+    image_url?: string;
+    generator?: string;
+}
+/**
+ * Generate RSS 2.0 feed XML from logbook entries
+ * @param entries - Array of timeline entries (will use latest 50)
+ * @param config - RSS feed configuration
+ * @param baseUrl - Base URL for the site (used for absolute feed URLs)
+ * @returns RSS XML string
+ */
+export declare function generateRssFeed(entries: TimelineEntry[], config: RssFeedConfig, baseUrl?: string): string;
+/**
+ * Validate RSS XML structure (basic validation)
+ * @param xml - RSS XML string
+ * @returns true if valid RSS structure
+ */
+export declare function validateRssXml(xml: string): boolean;
+export {};

package/dist/lib/rss.js

@@ -0,0 +1,77 @@
+import RSS from 'rss';
+import { formatDateTimeForRss } from '../utils/date.js';
+/**
+ * Generate RSS 2.0 feed XML from logbook entries
+ * @param entries - Array of timeline entries (will use latest 50)
+ * @param config - RSS feed configuration
+ * @param baseUrl - Base URL for the site (used for absolute feed URLs)
+ * @returns RSS XML string
+ */
+export function generateRssFeed(entries, config, baseUrl = '') {
+    // Use only the latest 50 entries
+    const limitedEntries = entries.slice(0, 50);
+    const feed = new RSS({
+        title: config.title,
+        description: config.description,
+        language: config.language,
+        feed_url: config.feed_url,
+        site_url: config.site_url,
+        image_url: config.image_url,
+        generator: config.generator,
+        ttl: 60, // Time to live in minutes
+    });
+    for (const entry of limitedEntries) {
+        const itemUrl = `${baseUrl}${entry.slug}/`;
+        const pubDate = formatDateTimeForRss(entry.dateStart);
+        feed.item({
+            title: entry.title || entry.slug,
+            description: stripMarkdown(entry.summary),
+            url: itemUrl,
+            guid: entry.slug,
+            date: pubDate,
+            author: entry.prompter || undefined,
+        });
+    }
+    return feed.xml({ indent: true });
+}
+/**
+ * Strip markdown formatting from text for RSS description
+ * Removes bold, italic, code, and heading markers
+ */
+function stripMarkdown(text) {
+    return text
+        .replace(/`([^`]+)`/g, '$1') // Remove inline code backticks
+        .replace(/\*\*([^*]+)\*\*/g, '$1') // Remove bold
+        .replace(/\*([^*]+)\*/g, '$1') // Remove italic
+        .replace(/#{1,6}\s+/g, '') // Remove heading markers
+        .replace(/\n+/g, ' ') // Replace newlines with spaces
+        .trim();
+}
+/**
+ * Validate RSS XML structure (basic validation)
+ * @param xml - RSS XML string
+ * @returns true if valid RSS structure
+ */
+export function validateRssXml(xml) {
+    try {
+        // Basic structure checks
+        if (!xml.includes('<?xml version'))
+            return false;
+        if (!xml.includes('<rss'))
+            return false;
+        if (!xml.includes('<channel>'))
+            return false;
+        if (!xml.includes('</channel>'))
+            return false;
+        if (!xml.includes('<item>'))
+            return false;
+        // Check for required RSS 2.0 elements
+        const hasTitle = xml.includes('<title>');
+        const hasLink = xml.includes('<link>');
+        const hasDescription = xml.includes('<description>');
+        return hasTitle && hasLink && hasDescription;
+    }
+    catch {
+        return false;
+    }
+}

package/dist/lib/styles.js

@@ -1,13 +1,16 @@
 import { readFileSync } from 'node:fs';
 import { join, dirname } from 'node:path';
 import { fileURLToPath } from 'node:url';
+import { isValidHexColor } from './html-escape.js';
 const __dirname = dirname(fileURLToPath(import.meta.url));
 export function getStyles(primaryColor) {
     const cssPath = join(__dirname, '../templates/styles.css');
     const staticCss = readFileSync(cssPath, 'utf8');
+    // Validate the primary color to prevent CSS injection
+    const validatedColor = isValidHexColor(primaryColor) ? primaryColor : '#2563eb';
     const root = `:root {
-    --primary: ${primaryColor};
-    --primary-soft: ${primaryColor}15;
+    --primary: ${validatedColor};
+    --primary-soft: ${validatedColor}15;
     --bg: #fdfdfd;
     --text: #1a1a1a;
     --text-muted: #666666;

package/dist/lib/template-helpers.d.ts

@@ -1,8 +1,9 @@
 import type { TimelineEntry, TimelineCommitItem, TimelineTagItem, EntryLink, GitCommit } from './template-types.js';
+export declare const html: (strings: TemplateStringsArray, ...values: unknown[]) => string;
 export declare const navLink: (entry: EntryLink, dir: "prev" | "next") => string;
 export declare const renderTagsAndWorkspaces: (tags: string[] | undefined, workspaces: string[] | undefined) => string;
-export declare const renderCommits: (commits: GitCommit[] | undefined) => string;
+export declare const renderCommits: (commits: GitCommit[] | undefined, repositoryUrl?: string) => string;
 export declare const renderTimelineEntryItem: (e: TimelineEntry) => string;
-export declare const renderTimelineCommitItem: (c: TimelineCommitItem, jiraBaseUrl?: string, jiraPrefix?: string) => string;
-export declare const renderTimelineTagItem: (t: TimelineTagItem) => string;
+export declare const renderTimelineCommitItem: (c: TimelineCommitItem, jiraBaseUrl?: string, jiraPrefix?: string, repositoryUrl?: string) => string;
+export declare const renderTimelineTagItem: (t: TimelineTagItem, repositoryUrl?: string) => string;
 export declare const paginationLinks: (currentPage: number, totalPages: number) => string;

package/dist/lib/template-helpers.js

@@ -1,20 +1,26 @@
 import { linkJiraIds } from './jira-helpers.js';
-const html = (strings, ...values) => {
+import { formatAbsoluteDate } from '../utils/date.js';
+import { escapeHtml } from './html-escape.js';
+import { getCommitUrl, getTagUrl } from './git-helpers.js';
+import { ATTR_ENTRY_SLUG, ATTR_DATA_DATE, CLASS_COMMIT_SHA, CLASS_COMMIT_TIME, CLASS_COMMIT_MESSAGE, } from './html-attributes.js';
+export const html = (strings, ...values) => {
     return strings.reduce((acc, str, i) => acc + str + (values[i] ?? ''), '');
 };
 export const navLink = (entry, dir) => {
     const label = dir === 'prev' ? '← Previous' : 'Next →';
-    const t = `${entry.ticket ? `${entry.ticket}: ` : ''}${entry.title}`;
+    const ticket = entry.ticket ? escapeHtml(entry.ticket) : '';
+    const title = escapeHtml(entry.title);
+    const t = `${ticket ? `${ticket}: ` : ''}${title}`;
     return `<a href="../${entry.slug}/index.html" class="post-nav-link"><span class="post-nav-label">${label}</span><span class="post-nav-title">${t}</span></a>`;
 };
 const renderWorkspaces = (workspaces) => {
     if (!workspaces || workspaces.length === 0)
         return '';
-    return workspaces.map((ws) => `<span class="tag-badge tag-workspace">${ws}</span>`).join('');
+    return workspaces.map((ws) => `<span class="tag-badge tag-workspace">${escapeHtml(ws)}</span>`).join('');
 };
 export const renderTagsAndWorkspaces = (tags, workspaces) => {
     const tagsHtml = tags && tags.length > 0
-        ? tags.map((tag) => `<span class="tag-badge tag-${tag.replace('#', '')}">${tag}</span>`).join('')
+        ? tags.map((tag) => `<span class="tag-badge tag-${tag.replace('#', '')}">${escapeHtml(tag)}</span>`).join('')
         : '';
     const wsHtml = renderWorkspaces(workspaces);
     if (!tagsHtml && !wsHtml)
@@ -22,47 +28,65 @@ export const renderTagsAndWorkspaces = (tags, workspaces) => {
     return html `<div class="tags-wrapper">${tagsHtml}${wsHtml}</div>`;
 };
 // Renders a compact list of git commits to embed in the Technical Log tab.
-export const renderCommits = (commits) => {
+export const renderCommits = (commits, repositoryUrl) => {
     if (!commits || commits.length === 0)
         return '';
     const rows = commits
-        .map((c) => `<div class="commit-item"><span class="commit-sha">${c.sha}</span><span class="commit-message">${c.message}</span><span class="commit-time" title="${c.timestamp}">${c.relativeTime}</span></div>`)
+        .map((c) => {
+        const formatted = formatAbsoluteDate(c.timestamp);
+        const sha = escapeHtml(c.sha);
+        const message = escapeHtml(c.message);
+        const commitUrl = getCommitUrl(repositoryUrl, c.sha);
+        const shaHtml = commitUrl
+            ? `<a href="${escapeHtml(commitUrl)}" class="${CLASS_COMMIT_SHA}" target="_blank" rel="noopener noreferrer">${sha}</a>`
+            : `<span class="${CLASS_COMMIT_SHA}">${sha}</span>`;
+        return `<div class="commit-item">${shaHtml}<span class="${CLASS_COMMIT_MESSAGE}">${message}</span><span class="${CLASS_COMMIT_TIME}" title="${c.timestamp}" ${ATTR_DATA_DATE}="${c.timestamp}">${formatted}</span></div>`;
+    })
         .join('');
     return `<div class="commit-list"><h3 class="commit-list-heading">Git Commits</h3>${rows}</div>`;
 };
-export const renderTimelineEntryItem = (e) => html `<div class="timeline-item" data-entry-slug="${e.slug}">
+export const renderTimelineEntryItem = (e) => {
+    const ticket = e.ticket ? escapeHtml(e.ticket) : '';
+    const title = e.title ? escapeHtml(e.title) : '';
+    const llm = e.llm ? escapeHtml(e.llm) : '';
+    const harness = e.harness ? escapeHtml(e.harness) : '';
+    const prompter = e.prompter ? escapeHtml(e.prompter) : '';
+    const summary = e.summary ? escapeHtml(e.summary) : '';
+    return html `<div class="timeline-item" ${ATTR_ENTRY_SLUG}="${e.slug}">
     <a class="timeline-card" href="./${e.slug}/index.html"
       ><div class="item-content">
         <div class="item-meta">
-          <span data-date="${e.dateStart}">${e.displayDate}</span> • <span class="sort-time">${e.sortTime}</span> •
-          ${e.llm ? ` ${e.llm} via ` : ''}${e.harness}${e.prompter ? ` / ${e.prompter}` : ''}
+          <span ${ATTR_DATA_DATE}="${e.dateStart}">${e.displayDate}</span> •
+          ${llm ? ` ${llm} via ` : ''}${harness}${prompter ? ` / ${prompter}` : ''}
         </div>
         <h3 class="item-title">
-          <span class="new-badge" style="display:none;">NEW</span>${e.ticket ? `${e.ticket}: ` : ''}${e.title}
+          <span class="new-badge" style="display:none;">NEW</span>${ticket ? `${ticket}: ` : ''}${title}
         </h3>
-        <div class="item-summary">${e.summary}</div>
+        <div class="item-summary">${summary}</div>
         ${renderTagsAndWorkspaces(e.tags, e.workspaces)}
       </div>
       <span class="item-arrow">›</span></a
     >
   </div>`;
-export const renderTimelineCommitItem = (c, jiraBaseUrl, jiraPrefix) => {
-    const message = jiraBaseUrl && jiraPrefix ? linkJiraIds(c.message, jiraBaseUrl, jiraPrefix) : c.message;
-    return `<div class="timeline-item timeline-item--commit"><div class="commit-chip"><span class="commit-sha">${c.sha}</span><span class="commit-message">${message}</span><span class="commit-time" title="${c.timestamp}" data-date="${c.timestamp}">${c.relativeTime}</span></div></div>`;
 };
-export const renderTimelineTagItem = (t) => {
-    const formatted = new Date(t.timestamp)
-        .toLocaleString('de-DE', {
-        year: 'numeric',
-        month: '2-digit',
-        day: '2-digit',
-        hour: '2-digit',
-        minute: '2-digit',
-        second: '2-digit',
-        hour12: false,
-    })
-        .replace(',', '');
-    return `<div class="timeline-item timeline-item--tag"><div class="tag-chip"><span class="tag-chip-icon">🏷</span><span class="tag-chip-name">${t.name}</span><span class="tag-chip-date" title="${t.timestamp}">${formatted}</span></div></div>`;
+export const renderTimelineCommitItem = (c, jiraBaseUrl, jiraPrefix, repositoryUrl) => {
+    const message = jiraBaseUrl && jiraPrefix ? linkJiraIds(c.message, jiraBaseUrl, jiraPrefix) : escapeHtml(c.message);
+    const formatted = formatAbsoluteDate(c.timestamp);
+    const sha = escapeHtml(c.sha);
+    const commitUrl = getCommitUrl(repositoryUrl, c.sha);
+    const shaHtml = commitUrl
+        ? `<a href="${escapeHtml(commitUrl)}" class="${CLASS_COMMIT_SHA}" target="_blank" rel="noopener noreferrer">${sha}</a>`
+        : `<span class="${CLASS_COMMIT_SHA}">${sha}</span>`;
+    return `<div class="timeline-item timeline-item--commit"><div class="commit-chip">${shaHtml}<span class="${CLASS_COMMIT_MESSAGE}">${message}</span><span class="${CLASS_COMMIT_TIME}" title="${c.timestamp}" ${ATTR_DATA_DATE}="${c.timestamp}">${formatted}</span></div></div>`;
+};
+export const renderTimelineTagItem = (t, repositoryUrl) => {
+    const formatted = formatAbsoluteDate(t.timestamp);
+    const name = escapeHtml(t.name);
+    const tagUrl = getTagUrl(repositoryUrl, t.name);
+    const tagHtml = tagUrl
+        ? `<a href="${escapeHtml(tagUrl)}" class="tag-chip-name" target="_blank" rel="noopener noreferrer">${name}</a>`
+        : `<span class="tag-chip-name">${name}</span>`;
+    return `<div class="timeline-item timeline-item--tag"><div class="tag-chip"><span class="tag-chip-icon">🏷</span>${tagHtml}<span class="tag-chip-date" title="${t.timestamp}" ${ATTR_DATA_DATE}="${t.timestamp}">${formatted}</span></div></div>`;
 };
 export const paginationLinks = (currentPage, totalPages) => {
     let links = '';

package/dist/lib/template-types.d.ts

@@ -18,6 +18,7 @@ export interface TimelineTemplateProps {
     aboutHtml: string;
     jiraBaseUrl?: string;
     jiraPrefix?: string;
+    repositoryUrl?: string;
     currentPage?: number;
     totalPages?: number;
 }
@@ -60,7 +61,6 @@ export interface TimelineCommitItem {
     sha: string;
     message: string;
     timestamp: string;
-    relativeTime: string;
     displayDate: string;
     monthGroup: string;
     sortTime: string;
@@ -83,7 +83,6 @@ export interface GitCommit {
     sha: string;
     message: string;
     timestamp: string;
-    relativeTime: string;
 }
 /**
  * Configuration for the post template
@@ -103,6 +102,7 @@ export interface PostTemplateProps {
     commits?: GitCommit[];
     version: string;
     jiraUrl?: string;
+    repositoryUrl?: string;
     prevEntry: EntryLink | null;
     nextEntry: EntryLink | null;
     slug?: string;

package/dist/lib/templates.d.ts

@@ -1,6 +1,6 @@
 import type { TabConfig, TimelineTemplateProps, PostTemplateProps } from './template-types.js';
 export declare const tabsComponent: (tabs: TabConfig[], defaultActive?: number) => string;
-export declare const layout: ({ title, header, content, projectName, basePath, description, bodySlug, buildMeta, }: {
+export declare const layout: ({ title, header, content, projectName, basePath, description, bodySlug, buildMeta, includeRssLink, }: {
     title: string;
     header: string;
     content: string;
@@ -9,6 +9,15 @@ export declare const layout: ({ title, header, content, projectName, basePath, d
     description?: string;
     bodySlug?: string;
     buildMeta?: string;
+    includeRssLink?: boolean;
 }) => string;
-export declare const timelineTemplate: (props: TimelineTemplateProps) => string;
-export declare const postTemplate: (props: PostTemplateProps) => string;
+export declare const timelineTemplate: (props: TimelineTemplateProps & {
+    includeRssLink?: boolean;
+}) => {
+    header: string;
+    content: string;
+};
+export declare const postTemplate: (props: PostTemplateProps) => {
+    header: string;
+    content: string;
+};

package/dist/lib/templates.js

@@ -1,35 +1,37 @@
-import { navLink, renderTagsAndWorkspaces, renderCommits, renderTimelineEntryItem, renderTimelineCommitItem, renderTimelineTagItem, paginationLinks, } from './template-helpers.js';
-const html = (strings, ...values) => {
-    return strings.reduce((acc, str, i) => acc + str + (values[i] ?? ''), '');
-};
+import { ATTR_PAGE_SLUG, ATTR_DATA_DATE } from './html-attributes.js';
+import { escapeHtml, validateUrlScheme } from './html-escape.js';
+import { html, navLink, renderTagsAndWorkspaces, renderCommits, renderTimelineEntryItem, renderTimelineCommitItem, renderTimelineTagItem, paginationLinks, } from './template-helpers.js';
 export const tabsComponent = (tabs, defaultActive = 0) => {
     const tabsHtml = tabs
-        .map((tab, index) => `<div class="tab ${index === defaultActive ? 'active' : ''}" role="tab" aria-selected="${index === defaultActive}" aria-controls="${tab.id}" tabindex="${index === defaultActive ? '0' : '-1'}" onclick="showTab(event, '${tab.id}')">${tab.title}</div>`)
+        .map((tab, index) => `<div class="tab ${index === defaultActive ? 'active' : ''}" role="tab" aria-selected="${index === defaultActive}" aria-controls="${escapeHtml(tab.id)}" tabindex="${index === defaultActive ? '0' : '-1'}" onclick="showTab(event, '${escapeHtml(tab.id)}')">${escapeHtml(tab.title)}</div>`)
         .join('');
     const sectionsHtml = tabs
-        .map((tab, index) => `<div id="${tab.id}" class="content-section" role="tabpanel" style="${index === defaultActive ? '' : 'display:none;'}">${tab.content}</div>`)
+        .map((tab, index) => `<div id="${escapeHtml(tab.id)}" class="content-section" role="tabpanel" style="${index === defaultActive ? '' : 'display:none;'}">${tab.content}</div>`)
         .join('');
     return html `<div class="tabs-wrapper">
     <div class="tabs" id="tabs" role="tablist" aria-label="Navigation tabs">${tabsHtml}</div>
     ${sectionsHtml}
   </div>`;
 };
-export const layout = ({ title, header, content, projectName, basePath = './', description, bodySlug, buildMeta, }) => html `<!DOCTYPE html>
+export const layout = ({ title, header, content, projectName, basePath = './', description, bodySlug, buildMeta, includeRssLink = false, }) => html `<!DOCTYPE html>
 <html lang="en">
 <head>
     <meta charset="UTF-8"><meta name="viewport" content="width=device-width, initial-scale=1.0">
-    <title>${title} | ${projectName}</title>
-    ${description ? `<meta name="description" content="${description.replace(/"/g, '"').substring(0, 160)}">` : ''}
+    <title>${escapeHtml(title)} | ${escapeHtml(projectName)}</title>
+    ${description ? `<meta name="description" content="${escapeHtml(description).replace(/"/g, '&quot;').substring(0, 160)}">` : ''}
+    ${includeRssLink ? `<link rel="alternate" type="application/rss+xml" title="Subscribe to Project RSS Feed" href="${basePath}rss.xml">` : ''}
     <link rel="icon" type="image/svg+xml" href="${basePath}favicon.svg">
     <link rel="stylesheet" href="${basePath}style.css">
 </head>
-<body${bodySlug ? ` data-page-slug="${bodySlug}"` : ''}>
+<body${bodySlug ? ` ${ATTR_PAGE_SLUG}="${bodySlug}"` : ''}>
     ${header}<main>${content}</main>
-    <footer>${buildMeta ? `<p class="build-time">${buildMeta}</p>` : ''}</footer>
+    <footer>
+      ${buildMeta ? `<p class="build-time">${buildMeta}${includeRssLink ? ` • <a href="${basePath}rss.xml">RSS Feed</a>` : ''}</p>` : ''}
+    </footer>
     <script src="${basePath}logbook.js"></script>
 </body></html>`;
 export const timelineTemplate = (props) => {
-    const { projectName, groups, readmeHtml, aboutHtml, jiraBaseUrl, jiraPrefix, currentPage, totalPages } = props;
+    const { projectName, groups, readmeHtml, aboutHtml, jiraBaseUrl, jiraPrefix, repositoryUrl, currentPage, totalPages, } = props;
     const timelineTab = html `<div class="timeline">
     ${groups
         .map((g) => html `<section class="month-group">
@@ -39,59 +41,64 @@ export const timelineTemplate = (props) => {
         if (item.kind === 'entry')
             return renderTimelineEntryItem(item);
         if (item.kind === 'tag')
-            return renderTimelineTagItem(item);
-        return renderTimelineCommitItem(item, jiraBaseUrl, jiraPrefix);
+            return renderTimelineTagItem(item, repositoryUrl);
+        return renderTimelineCommitItem(item, jiraBaseUrl, jiraPrefix, repositoryUrl);
     })
         .join('')}
           </section>`)
         .join('')}
     ${paginationLinks(currentPage, totalPages)}
   </div>`;
-    return html `<header>
-      <h1><a href="./index.html">${projectName}</a></h1>
-      <p class="tagline">A brief summary of the recent changes to the project.</p>
-    </header>
-    ${tabsComponent([
+    const header = html `<header>
+    <h1><a href="./index.html">${escapeHtml(projectName)}</a></h1>
+    <p class="tagline">A brief summary of the recent changes to the project.</p>
+  </header>`;
+    const content = tabsComponent([
         { id: 'timeline', title: 'Timeline', content: timelineTab },
         { id: 'readme', title: 'Project Readme', content: readmeHtml || '<p>No README available.</p>' },
         { id: 'about', title: 'About this Logbook', content: aboutHtml || '<p>No information available.</p>' },
-    ], 0)}`;
+    ], 0);
+    return { header, content };
 };
 export const postTemplate = (props) => {
-    const { title, displayDate, dateStart, harness, llm, prompter, content, ticketHtml, logHtml, commits, version, jiraUrl, prevEntry, nextEntry, tags, workspaces } = props; // prettier-ignore
-    const jiraBtn = jiraUrl
-        ? `<a href="${jiraUrl}" class="jira-link-btn" target="_blank" rel="noopener noreferrer">View in Jira ↗</a>`
+    const { title, displayDate, dateStart, harness, llm, prompter, content, ticketHtml, logHtml, commits, version, jiraUrl, repositoryUrl, prevEntry, nextEntry, tags, workspaces } = props; // prettier-ignore
+    // Validate jiraUrl scheme to prevent javascript: URLs
+    const validatedJiraUrl = jiraUrl ? validateUrlScheme(jiraUrl) : undefined;
+    const jiraBtn = validatedJiraUrl
+        ? `<a href="${escapeHtml(validatedJiraUrl)}" class="jira-link-btn" target="_blank" rel="noopener noreferrer">View in Jira ↗</a>`
         : '';
-    const tabBtn = (id, label, active = false) => `<div class="tab${active ? ' active' : ''}" role="tab" aria-selected="${active}" aria-controls="${id}" tabindex="${active ? '0' : '-1'}" onclick="showTab(event, '${id}')">${label}</div>`;
-    return html `<header>
-      <h1>${title}</h1>
-      <div class="tagline">
-        <span data-date="${dateStart}">${displayDate}</span> •
-        ${llm ? `${llm} via ` : ''}${harness}${prompter ? ` / ${prompter}` : ''} • v${version}
-      </div>
-    </header>
-    <article class="tabs-wrapper">
-      <div class="action-bar">
-        <a href="../index.html" class="back-link">← Back to Timeline</a>
-        <div class="action-tabs-wrapper">
-          <div class="tabs" role="tablist" aria-label="Entry sections">
-            ${tabBtn('story', 'Story', true)}${tabBtn('spec', 'Original Spec')}${tabBtn('log', 'Technical Log')}
-          </div>
+    const tabBtn = (id, label, active = false) => `<div class="tab${active ? ' active' : ''}" role="tab" aria-selected="${active}" aria-controls="${escapeHtml(id)}" tabindex="${active ? '0' : '-1'}" onclick="showTab(event, '${escapeHtml(id)}')">${escapeHtml(label)}</div>`;
+    const header = html `<header>
+    <h1>${escapeHtml(title)}</h1>
+    <div class="tagline">
+      <span ${ATTR_DATA_DATE}="${dateStart}">${displayDate}</span> •
+      ${llm ? `${escapeHtml(llm)} via ` : ''}${escapeHtml(harness)}${prompter ? ` / ${escapeHtml(prompter)}` : ''} •
+      v${version}
+    </div>
+  </header>`;
+    const mainContent = html `<article class="tabs-wrapper">
+    <div class="action-bar">
+      <a href="../index.html" class="back-link">← Back to Timeline</a>
+      <div class="action-tabs-wrapper">
+        <div class="tabs" role="tablist" aria-label="Entry sections">
+          ${tabBtn('story', 'Story', true)}${tabBtn('spec', 'Original Spec')}${tabBtn('log', 'Technical Log')}
         </div>
-        ${jiraBtn ? `${jiraBtn}` : ''}
       </div>
-      <div class="content-sections">
-        <div id="story" class="content-section" role="tabpanel">
-          ${renderTagsAndWorkspaces(tags, workspaces)}${content}
-        </div>
-        <div id="spec" class="content-section" role="tabpanel" style="display:none;">${ticketHtml}</div>
-        <div id="log" class="content-section" role="tabpanel" style="display:none;">
-          ${logHtml}${renderCommits(commits)}
-        </div>
+      ${jiraBtn ? `${jiraBtn}` : ''}
+    </div>
+    <div class="content-sections">
+      <div id="story" class="content-section" role="tabpanel">
+        ${renderTagsAndWorkspaces(tags, workspaces)}${content}
+      </div>
+      <div id="spec" class="content-section" role="tabpanel" style="display:none;">${ticketHtml}</div>
+      <div id="log" class="content-section" role="tabpanel" style="display:none;">
+        ${logHtml}${renderCommits(commits, repositoryUrl)}
       </div>
-      <nav class="post-nav">
-        <div class="post-nav-prev">${prevEntry ? navLink(prevEntry, 'prev') : '<span></span>'}</div>
-        <div class="post-nav-next">${nextEntry ? navLink(nextEntry, 'next') : '<span></span>'}</div>
-      </nav>
-    </article>`;
+    </div>
+    <nav class="post-nav">
+      <div class="post-nav-prev">${prevEntry ? navLink(prevEntry, 'prev') : '<span></span>'}</div>
+      <div class="post-nav-next">${nextEntry ? navLink(nextEntry, 'next') : '<span></span>'}</div>
+    </nav>
+  </article>`;
+    return { header, content: mainContent };
 };