stack-site-builder 1.17.5 → 1.19.0

package/src/components/RelatedPapers.astro

@@ -0,0 +1,59 @@
+---
+// "Related papers" card section on a paper detail page, mirroring
+// RelatedConcepts (title + authors/venue meta + description, collapsible grid).
+import { getRelativeLocaleUrl } from 'astro:i18n';
+import { Image } from 'astro:assets';
+import { paperSlugOf, shortAuthors, type PaperEntry } from '../lib/papers';
+import { useTranslations, type Lang } from '../i18n/ui';
+import { inlineMd } from '../lib/inline-md';
+import CollapsibleGrid from './CollapsibleGrid.astro';
+
+interface Props {
+  lang: Lang;
+  papers: PaperEntry[];
+}
+
+const { lang, papers } = Astro.props;
+const t = useTranslations(lang);
+---
+
+{
+  papers.length > 0 && (
+    <section class="mt-8">
+      <h2 class="text-xs font-semibold tracking-wide text-[var(--aas-muted)] uppercase">
+        {t('paper.relatedPapers')}
+      </h2>
+      <CollapsibleGrid lang={lang} count={papers.length}>
+        {papers.map((c) => (
+          <a
+            href={getRelativeLocaleUrl(lang, `paper/${paperSlugOf(c)}/`)}
+            class="aas-lift flex items-stretch overflow-hidden rounded-2xl border border-[var(--aas-border)] bg-[var(--aas-panel)] no-underline"
+          >
+            {c.data.image && (
+              <Image src={c.data.image} alt="" class="w-28 shrink-0 self-stretch object-cover" />
+            )}
+            <div class="min-w-0 p-4">
+              <span class="block font-semibold text-[var(--aas-text)]">
+                {c.data.private && (
+                  <span aria-label={t('private.badge')} title={t('private.badge')}>🔒 </span>
+                )}
+                {c.data.title}
+              </span>
+              <span class="mt-0.5 block text-xs text-[var(--aas-muted)]">
+                {shortAuthors(c.data.authors)}
+                {c.data.authors.length > 0 && (c.data.venue || c.data.year) && ' · '}
+                {c.data.venue}
+                {c.data.venue && c.data.year && ' '}
+                {c.data.year}
+              </span>
+              <span
+                class="aas-md mt-1.5 line-clamp-2 text-xs leading-relaxed text-[var(--aas-muted)] opacity-75"
+                set:html={inlineMd(c.data.private ? (c.data.teaser ?? '') : c.data.description)}
+              />
+            </div>
+          </a>
+        ))}
+      </CollapsibleGrid>
+    </section>
+  )
+}

package/src/components/SlidesIndex.astro

@@ -1,5 +1,6 @@
 ---
 import { getRelativeLocaleUrl } from 'astro:i18n';
+import { listedInIndex } from '../lib/listing';
 import { useTranslations, type Lang } from '../i18n/ui';
 import { getDecks, deckSlugOf } from '../lib/slides';
 
@@ -12,7 +13,7 @@ const t = useTranslations(lang);
 
 // Decks are locale-partitioned (content/slides/<lang>/); list this locale's and
 // link to its localized deck page. `related` points at the concept it summarizes.
-const decks = await getDecks(lang);
+const decks = (await getDecks(lang)).filter((e) => listedInIndex(e.data));
 ---
 
 <section class="py-6">

package/src/components/TagIndex.astro

@@ -2,6 +2,7 @@
 import { getRelativeLocaleUrl } from 'astro:i18n';
 import StackCard from './StackCard.astro';
 import { getStacksByTag, slugOf } from '../lib/stacks';
+import { listedInIndex } from '../lib/listing';
 import { useTranslations, type Lang } from '../i18n/ui';
 
 interface Props {
@@ -11,7 +12,7 @@ interface Props {
 
 const { lang, tag } = Astro.props;
 const t = useTranslations(lang);
-const entries = (await getStacksByTag(lang, tag)).sort((a, b) =>
+const entries = (await getStacksByTag(lang, tag)).filter((e) => listedInIndex(e.data)).sort((a, b) =>
   a.data.name.localeCompare(b.data.name),
 );
 ---

package/src/components/VendorIndex.astro

@@ -2,6 +2,7 @@
 import { getRelativeLocaleUrl } from 'astro:i18n';
 import StackCard from './StackCard.astro';
 import { getStacksByVendor, slugOf } from '../lib/stacks';
+import { listedInIndex } from '../lib/listing';
 import { useTranslations, type Lang } from '../i18n/ui';
 
 interface Props {
@@ -11,7 +12,7 @@ interface Props {
 
 const { lang, vendor } = Astro.props;
 const t = useTranslations(lang);
-const entries = await getStacksByVendor(lang, vendor);
+const entries = (await getStacksByVendor(lang, vendor)).filter((e) => listedInIndex(e.data));
 // The display name is whatever the entries wrote (e.g. "Hugging Face").
 const vendorName = entries[0]?.data.vendor ?? vendor;
 ---

package/src/content.ts

@@ -19,6 +19,7 @@ export function defineAasCollections({
   categoryMap,
   courseCategoryMap,
   productCategoryMap,
+  paperCategoryMap,
 }: {
   categoryMap: Map<string, unknown>;
   /** The site's course category tree (`src/data/course-categories.ts`). Optional
@@ -28,6 +29,9 @@ export function defineAasCollections({
   /** The site's product category tree (`src/data/product-categories.ts`).
    *  Optional like `courseCategoryMap` — `products` is opt-in too. */
   productCategoryMap?: Map<string, unknown>;
+  /** The site's paper category tree (`src/data/paper-categories.ts`).
+   *  Optional like the others — `papers` is opt-in too. */
+  paperCategoryMap?: Map<string, unknown>;
 }) {
   /**
    * The `stacks` collection holds one entry per tool/service used to build
@@ -125,6 +129,10 @@ export function defineAasCollections({
       // See docs/private-content-design.md. Requires the AAS_PRIVATE_* env vars.
       private: z.boolean().default(false),
       teaser: z.string().optional(),
+      // Show this PRIVATE entry on index listings as a locked teaser card.
+      // Default: private entries stay OUT of listings and are reached via
+      // direct links / the related sections on detail pages.
+      listed: z.boolean().default(false),
     }),
   });
 
@@ -169,6 +177,10 @@ export function defineAasCollections({
         // PUBLIC `teaser`). See docs/private-content-design.md.
         private: z.boolean().default(false),
         teaser: z.string().optional(),
+        // Show this PRIVATE entry on index listings as a locked teaser card.
+        // Default: private entries stay OUT of listings and are reached via
+        // direct links / the related sections on detail pages.
+        listed: z.boolean().default(false),
       }),
   });
 
@@ -207,6 +219,10 @@ export function defineAasCollections({
         // PUBLIC `teaser`). See docs/private-content-design.md.
         private: z.boolean().default(false),
         teaser: z.string().optional(),
+        // Show this PRIVATE entry on index listings as a locked teaser card.
+        // Default: private entries stay OUT of listings and are reached via
+        // direct links / the related sections on detail pages.
+        listed: z.boolean().default(false),
       }),
   });
 
@@ -263,6 +279,64 @@ export function defineAasCollections({
         // PUBLIC `teaser`). See docs/private-content-design.md.
         private: z.boolean().default(false),
         teaser: z.string().optional(),
+        // Show this PRIVATE entry on index listings as a locked teaser card.
+        // Default: private entries stay OUT of listings and are reached via
+        // direct links / the related sections on detail pages.
+        listed: z.boolean().default(false),
+      }),
+  });
+
+  /**
+   * The `papers` collection is the reading room — one entry per academic
+   * paper, an opt-in section (`sections: { papers: true }`) for sites that
+   * review the literature behind their stack. Frontmatter powers the cards
+   * (authors, venue/year, open-source availability, links); the body is the
+   * site's own reading/review of the paper. Locale-partitioned:
+   * `papers/<lang>/<slug>.mdx`.
+   */
+  const papers = defineCollection({
+    loader: glob({ pattern: '**/*.{md,mdx}', base: './src/content/papers' }),
+    schema: ({ image }) =>
+      z.object({
+        title: z.string(),
+        // The full author list, in publication order. Cards abbreviate to the
+        // first names + "et al."; the detail page shows everyone.
+        authors: z.array(z.string()).default([]),
+        year: z.number().int().optional(),
+        venue: z.string().optional(), // NeurIPS, ICML, arXiv, JMLR, …
+        description: z.string(), // one-line takeaway, shown on cards
+        // Leaf id from the site's src/data/paper-categories.ts. Validated when
+        // the site passes `paperCategoryMap`; otherwise resolved at render
+        // with an uncategorized fallback.
+        category: (paperCategoryMap
+          ? z.string().refine((id) => paperCategoryMap.has(id), {
+              message:
+                'unknown paper category id — must match a node in the site data paper category tree',
+            })
+          : z.string()
+        ).optional(),
+        image: image().optional(), // key figure / teaser image
+        imageAlt: z.string().optional(),
+        arxiv: z.string().url().optional(),
+        paperUrl: z.string().url().optional(), // publisher / DOI page
+        // Has the paper's code been released? Shown as a badge and filterable
+        // at a glance; `repo` links the released implementation.
+        openSource: z.boolean().default(false),
+        repo: z.string().url().optional(),
+        tools: z.array(z.string()).default([]), // catalog stacks this paper underpins
+        related: z.array(z.string()).default([]), // related paper slugs
+        tags: z.array(z.string()).default([]),
+        // Living-doc metadata for the review itself, mirroring concepts.
+        version: z.string().optional(),
+        updated: z.coerce.date().optional(),
+        draft: z.boolean().default(false),
+        // Login-gated entry (encrypted body; see docs/private-content-design.md).
+        private: z.boolean().default(false),
+        teaser: z.string().optional(),
+        // Show this PRIVATE entry on index listings as a locked teaser card.
+        // Default: private entries stay OUT of listings and are reached via
+        // direct links / the related sections on detail pages.
+        listed: z.boolean().default(false),
       }),
   });
 
@@ -307,6 +381,10 @@ export function defineAasCollections({
       // optional PUBLIC `teaser`). See docs/private-content-design.md.
       private: z.boolean().default(false),
       teaser: z.string().optional(),
+      // Show this PRIVATE entry on index listings as a locked teaser card.
+      // Default: private entries stay OUT of listings and are reached via
+      // direct links / the related sections on detail pages.
+      listed: z.boolean().default(false),
     }),
   });
 
@@ -452,6 +530,10 @@ export function defineAasCollections({
       // Login-gated page (encrypted body; see docs/private-content-design.md).
       private: z.boolean().default(false),
       teaser: z.string().optional(),
+      // Show this PRIVATE entry on index listings as a locked teaser card.
+      // Default: private entries stay OUT of listings and are reached via
+      // direct links / the related sections on detail pages.
+      listed: z.boolean().default(false),
     }),
   });
 
@@ -484,8 +566,12 @@ export function defineAasCollections({
         // PUBLIC `teaser`). See docs/private-content-design.md.
         private: z.boolean().default(false),
         teaser: z.string().optional(),
+        // Show this PRIVATE entry on index listings as a locked teaser card.
+        // Default: private entries stay OUT of listings and are reached via
+        // direct links / the related sections on detail pages.
+        listed: z.boolean().default(false),
       }),
   });
 
-  return { stacks, articles, concepts, courses, slides, products, pages };
+  return { stacks, articles, concepts, courses, papers, slides, products, pages };
 }

package/src/i18n/ui.ts

@@ -60,6 +60,7 @@ export const ui = {
     'nav.concepts': 'Concepts',
     'nav.courses': 'Courses',
     'nav.products': 'Products',
+    'nav.papers': 'Papers',
     'nav.blog': 'Writing',
     'nav.samples': 'Samples',
     'nav.slides': 'Slides',
@@ -70,6 +71,7 @@ export const ui = {
     'code.copy': 'Copy code',
     'code.copied': 'Copied',
     'private.badge': 'Private',
+    'private.login': 'Log in',
     'private.locked': 'This content is private. Log in to view it.',
     'private.id': 'ID',
     'private.password': 'Password',
@@ -129,6 +131,17 @@ export const ui = {
     'course.updated': 'Updated',
     'course.relatedCourses': 'Related courses',
     'course.slides': 'Slides',
+    'paper.title': 'Papers',
+    'paper.tagline': 'Paper readings and reviews — what matters and why.',
+    'paper.empty': 'No papers yet.',
+    'paper.backToPapers': 'All papers',
+    'paper.authors': 'Authors',
+    'paper.openSource': 'Code available',
+    'paper.arxiv': 'arXiv',
+    'paper.paper': 'Paper',
+    'paper.code': 'Code',
+    'paper.relatedPapers': 'Related papers',
+    'paper.updated': 'Updated',
     'products.title': 'Products',
     'products.tagline': 'What we build and offer.',
     'products.empty': 'No products yet.',
@@ -224,6 +237,7 @@ export const ui = {
     'nav.concepts': '개념',
     'nav.courses': '강의',
     'nav.products': '제품',
+    'nav.papers': '논문',
     'nav.blog': '글',
     'nav.samples': '샘플',
     'nav.slides': '슬라이드',
@@ -234,6 +248,7 @@ export const ui = {
     'code.copy': '코드 복사',
     'code.copied': '복사됨',
     'private.badge': '비공개',
+    'private.login': '로그인',
     'private.locked': '비공개 콘텐츠입니다. 로그인 후 볼 수 있습니다.',
     'private.id': '아이디',
     'private.password': '비밀번호',
@@ -292,6 +307,17 @@ export const ui = {
     'course.updated': '업데이트',
     'course.relatedCourses': '관련 강의',
     'course.slides': '슬라이드',
+    'paper.title': '논문',
+    'paper.tagline': '논문을 읽고 정리합니다 — 무엇이, 왜 중요한지.',
+    'paper.empty': '아직 논문이 없습니다.',
+    'paper.backToPapers': '논문 전체',
+    'paper.authors': '저자',
+    'paper.openSource': '코드 공개',
+    'paper.arxiv': 'arXiv',
+    'paper.paper': '원문',
+    'paper.code': '코드',
+    'paper.relatedPapers': '관련 논문',
+    'paper.updated': '업데이트',
     'products.title': '제품',
     'products.tagline': '우리가 만들고 제공하는 것.',
     'products.empty': '아직 제품이 없습니다.',

package/src/layouts/BaseLayout.astro

@@ -8,6 +8,8 @@ import ThemeToggle from '../components/ThemeToggle.astro';
 import BackToTop from '../components/BackToTop.astro';
 import { getNavPages, pageSlugOf } from '../lib/pages';
 import { getNavProducts, getTopProducts, productSlugOf } from '../lib/products';
+import { getDecks } from '../lib/slides';
+import { listedInIndex } from '../lib/listing';
 import { homeTemplate } from '../lib/home';
 import { sectionEnabled, type SectionKey } from '../lib/sections';
 import { siteIcons } from '../lib/icons';
@@ -50,6 +52,9 @@ const navPages = await getNavPages(lang);
 // the Products-index link, which appears once the locale has any product.
 const navProducts = await getNavProducts(lang);
 const hasProducts = (await getTopProducts(lang)).length > 0;
+// The slides nav item only makes sense when the index actually lists decks —
+// a site whose decks are all private+unlisted reaches them from course pages.
+const hasListedDecks = (await getDecks(lang)).some((d) => listedInIndex(d.data));
 // The header's GitHub link — hidden for sites whose repo is private
 // (`repoNav: false` in site.ts) or that declare no repoUrl at all.
 const showRepoLink =
@@ -95,6 +100,12 @@ const allNavItems: {
     section: 'courses',
     svg: '<path d="M21.42 10.922a1 1 0 0 0-.019-1.838L12.83 5.18a2 2 0 0 0-1.66 0L2.6 9.08a1 1 0 0 0 0 1.832l8.57 3.908a2 2 0 0 0 1.66 0z"/><path d="M22 10v6"/><path d="M6 12.5V16a6 3 0 0 0 12 0v-3.5"/>',
   },
+  {
+    href: getRelativeLocaleUrl(lang, 'paper/'),
+    label: t('nav.papers'),
+    section: 'papers' as SectionKey,
+    svg: '<path d="M4 19.5v-15A2.5 2.5 0 0 1 6.5 2H20v20H6.5a2.5 2.5 0 0 1 0-5H20"/>',
+  },
   {
     href: getRelativeLocaleUrl(lang, 'concept/'),
     label: t('nav.concepts'),
@@ -113,12 +124,16 @@ const allNavItems: {
     section: 'samples',
     svg: '<polyline points="4 17 10 11 4 5"/><line x1="12" x2="20" y1="19" y2="19"/>',
   },
-  {
-    href: getRelativeLocaleUrl(lang, 'slides/'),
-    label: t('nav.slides'),
-    section: 'slides',
-    svg: '<path d="M2 3h20"/><path d="M21 3v11a2 2 0 0 1-2 2H5a2 2 0 0 1-2-2V3"/><path d="m7 21 5-5 5 5"/><path d="M12 12v9"/>',
-  },
+  ...(hasListedDecks
+    ? [
+        {
+          href: getRelativeLocaleUrl(lang, 'slides/'),
+          label: t('nav.slides'),
+          section: 'slides' as SectionKey,
+          svg: '<path d="M2 3h20"/><path d="M21 3v11a2 2 0 0 1-2 2H5a2 2 0 0 1-2-2V3"/><path d="m7 21 5-5 5 5"/><path d="M12 12v9"/>',
+        },
+      ]
+    : []),
   {
     href: getRelativeLocaleUrl(lang, 'glossary/'),
     label: t('nav.glossary'),
@@ -257,6 +272,53 @@ const navItems = allNavItems.filter((item) => !item.section || sectionEnabled(it
               ))
             }
           </div>
+          {/* Member login/logout for private content — hidden until
+              /aas-auth.json reports the site has login users configured. */}
+          <details class="aas-menu relative" data-auth hidden>
+            <summary
+              class="flex cursor-pointer list-none items-center rounded-lg border border-[var(--aas-border)] px-2.5 py-1 text-[var(--aas-text)] select-none"
+              aria-label={t('private.login')}
+              title={t('private.login')}
+            >
+              <svg width="20" height="20" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" aria-hidden="true"><path d="M19 21v-2a4 4 0 0 0-4-4H9a4 4 0 0 0-4 4v2"/><circle cx="12" cy="7" r="4"/></svg>
+            </summary>
+            <div
+              class="absolute right-0 z-20 mt-1 w-64 rounded-lg border border-[var(--aas-border)] bg-[var(--aas-panel)] p-3 shadow-lg"
+            >
+              <form data-auth-form class="flex flex-col gap-2">
+                <input
+                  name="id"
+                  required
+                  autocomplete="username"
+                  placeholder={t('private.id')}
+                  class="rounded-lg border border-[var(--aas-border)] bg-[var(--aas-bg)] px-3 py-1.5 text-sm text-[var(--aas-text)]"
+                />
+                <input
+                  name="password"
+                  type="password"
+                  required
+                  autocomplete="current-password"
+                  placeholder={t('private.password')}
+                  class="rounded-lg border border-[var(--aas-border)] bg-[var(--aas-bg)] px-3 py-1.5 text-sm text-[var(--aas-text)]"
+                />
+                <p data-auth-error hidden class="text-xs text-[var(--aas-accent)]">{t('private.error')}</p>
+                <button
+                  type="submit"
+                  class="rounded-lg bg-[var(--aas-accent)] px-3 py-1.5 text-sm font-semibold text-white"
+                >
+                  {t('private.submit')}
+                </button>
+              </form>
+              <button
+                type="button"
+                data-auth-logout
+                hidden
+                class="w-full rounded-lg border border-[var(--aas-border)] px-3 py-1.5 text-sm text-[var(--aas-text)] hover:bg-[var(--aas-tint)]"
+              >
+                🔓 {t('private.logout')}
+              </button>
+            </div>
+          </details>
           <ThemeToggle lang={lang} />
           <LanguageSwitcher lang={lang} path={path} />
           <details class="aas-menu relative sm:hidden">
@@ -322,6 +384,55 @@ const navItems = allNavItems.filter((item) => !item.section || sectionEnabled(it
     <BackToTop lang={lang} />
 
     <script>
+      import {
+        hasSession,
+        clearSession,
+        loginWithCredentials,
+        type AuthData,
+      } from '../lib/private-client';
+
+      // Header member login/logout: reveal the control only when the site has
+      // login users configured (/aas-auth.json — { enabled: false } otherwise).
+      const authCtrl = document.querySelector<HTMLDetailsElement>('[data-auth]');
+      if (authCtrl) {
+        (async () => {
+          try {
+            const base = import.meta.env.BASE_URL.replace(/\/$/, '');
+            const res = await fetch(`${base}/aas-auth.json`);
+            const data = (await res.json()) as { enabled: boolean } & AuthData;
+            if (!data.enabled) return;
+            authCtrl.hidden = false;
+            const form = authCtrl.querySelector<HTMLFormElement>('[data-auth-form]')!;
+            const logoutBtn = authCtrl.querySelector<HTMLButtonElement>('[data-auth-logout]')!;
+            const errorEl = authCtrl.querySelector<HTMLElement>('[data-auth-error]')!;
+            const sync = () => {
+              const on = hasSession(data.days);
+              form.hidden = on;
+              logoutBtn.hidden = !on;
+            };
+            sync();
+            logoutBtn.addEventListener('click', () => {
+              clearSession();
+              location.reload();
+            });
+            form.addEventListener('submit', async (e) => {
+              e.preventDefault();
+              errorEl.hidden = true;
+              const fd = new FormData(form);
+              const ok = await loginWithCredentials(
+                data,
+                String(fd.get('id') ?? ''),
+                String(fd.get('password') ?? ''),
+              );
+              if (ok) location.reload();
+              else errorEl.hidden = false;
+            });
+          } catch {
+            /* endpoint unavailable — control stays hidden */
+          }
+        })();
+      }
+
       import { initOnReady } from '../lib/reinit';
 
       // Clicking a heading's "#" anchor copies that section's URL to the

package/src/lib/listing.ts

@@ -0,0 +1,9 @@
+/**
+ * Whether an entry belongs on index listings. Public entries always do;
+ * PRIVATE entries only when they opt in with `listed: true` (shown as a
+ * locked teaser card). Unlisted private entries still build and stay
+ * reachable via direct links and the related-entry sections on detail pages —
+ * that's the discovery path for gated content.
+ */
+export const listedInIndex = (d: { private?: boolean; listed?: boolean }): boolean =>
+  !d.private || d.listed === true;

package/src/lib/papers.ts

@@ -0,0 +1,25 @@
+import { getCollection, type CollectionEntry } from 'astro:content';
+import type { Lang } from '../i18n/ui';
+
+export type PaperEntry = CollectionEntry<'papers'>;
+
+/** The url slug of a paper, i.e. its id with the `<lang>/` prefix removed. */
+export function paperSlugOf(entry: PaperEntry): string {
+  return entry.id.replace(/^[a-z]{2}\//, '');
+}
+
+/** Published papers for one locale — newest publication year first, then title. */
+export async function getPapers(lang: Lang): Promise<PaperEntry[]> {
+  const all = await getCollection('papers');
+  return all
+    .filter((e) => e.id.startsWith(`${lang}/`) && !e.data.draft)
+    .sort(
+      (a, b) => (b.data.year ?? 0) - (a.data.year ?? 0) || a.data.title.localeCompare(b.data.title),
+    );
+}
+
+/** Cards abbreviate the author list: first `max` names, then "et al.". */
+export function shortAuthors(authors: string[], max = 3): string {
+  if (authors.length === 0) return '';
+  return authors.length <= max ? authors.join(', ') : `${authors.slice(0, max).join(', ')} et al.`;
+}

package/src/lib/private-client.ts

@@ -60,7 +60,7 @@ function storedKey(days: number): Uint8Array | null {
   }
 }
 
-function clearSession(): void {
+export function clearSession(): void {
   try {
     localStorage.removeItem(STORE);
   } catch {
@@ -68,6 +68,50 @@ function clearSession(): void {
   }
 }
 
+/** The user table a login form needs — a GateData without the content. */
+export interface AuthData {
+  users: { h: string; s: string; iv: string; w: string }[];
+  salt: string;
+  days: number;
+}
+
+/** Whether this device holds a live session key. */
+export function hasSession(days: number): boolean {
+  return storedKey(days) !== null;
+}
+
+/**
+ * Verify credentials by unwrapping the site key (AES-GCM authentication
+ * fails on a wrong password) and store the session on success. Shared by
+ * the per-page gate form and the header login control.
+ */
+export async function loginWithCredentials(
+  data: AuthData,
+  id: string,
+  password: string,
+): Promise<boolean> {
+  const salt = dec(data.salt);
+  const idBytes = new TextEncoder().encode(id.trim().toLowerCase());
+  const joined = new Uint8Array(salt.length + idBytes.length);
+  joined.set(salt);
+  joined.set(idBytes, salt.length);
+  const h = await sha256Hex(joined);
+  const user = data.users.find((u) => u.h === h);
+  if (!user) return false;
+  try {
+    const kek = await deriveKek(password, dec(user.s));
+    const k = new Uint8Array(await aesDecrypt(kek, dec(user.iv), dec(user.w)));
+    try {
+      localStorage.setItem(STORE, JSON.stringify({ k: enc(k), t: Date.now() }));
+    } catch {
+      /* private browsing — session just won't persist */
+    }
+    return true;
+  } catch {
+    return false; // wrong password (unwrap failed)
+  }
+}
+
 /** Swap the gate for the decrypted HTML; re-run inline scripts; notify re-init hooks. */
 function inject(gate: HTMLElement, html: string, logoutLabel: string): void {
   const host = document.createElement('div');

package/src/lib/sections.ts

@@ -21,6 +21,7 @@ export type SectionKey =
   | 'articles'
   | 'courses'
   | 'products'
+  | 'papers'
   | 'samples'
   | 'slides'
   | 'glossary'
@@ -31,6 +32,7 @@ const DEFAULTS: Record<SectionKey, boolean> = {
   articles: true,
   courses: false, // opt-in: needs src/data/course-categories.ts on the site
   products: false, // opt-in: needs src/data/product-categories.ts on the site
+  papers: false, // opt-in: needs src/data/paper-categories.ts on the site
   samples: true,
   slides: true,
   glossary: true,

package/src/pages/[...lang]/paper/[...id].astro

@@ -0,0 +1,35 @@
+---
+import { site } from '@aas-data/site';
+import type { GetStaticPaths } from 'astro';
+import BaseLayout from '../../../layouts/BaseLayout.astro';
+import PaperDetail from '../../../components/PaperDetail.astro';
+import PrivateGate from '../../../components/PrivateGate.astro';
+import { getPapers, paperSlugOf } from '../../../lib/papers';
+import { allLocales, langParam } from '../../../lib/locales';
+
+export const getStaticPaths = (async () => {
+  const paths: Awaited<ReturnType<GetStaticPaths>> = [];
+  for (const lang of allLocales) {
+    for (const entry of await getPapers(lang)) {
+      paths.push({ params: { lang: langParam(lang), id: paperSlugOf(entry) }, props: { lang, entry } });
+    }
+  }
+  return paths;
+}) satisfies GetStaticPaths;
+
+const { lang, entry } = Astro.props;
+const slug = paperSlugOf(entry);
+const priv = entry.data.private;
+---
+
+<BaseLayout
+  title={`${entry.data.title} — ${site.name}`}
+  description={priv ? entry.data.teaser : entry.data.description}
+  lang={lang}
+  path={`paper/${slug}/`}
+  noindex={priv}
+>
+  <PrivateGate enabled={priv} lang={lang} title={entry.data.title} teaser={entry.data.teaser}>
+    <PaperDetail entry={entry} lang={lang} />
+  </PrivateGate>
+</BaseLayout>

package/src/pages/[...lang]/paper/category/[id].astro

@@ -0,0 +1,25 @@
+---
+import { site } from '@aas-data/site';
+import type { GetStaticPaths } from 'astro';
+import BaseLayout from '../../../../layouts/BaseLayout.astro';
+import PapersIndex from '../../../../components/PapersIndex.astro';
+import { paperTree } from '@aas-data/paper-categories';
+import { allLocales, langParam } from '../../../../lib/locales';
+
+export const getStaticPaths = (() => {
+  const paths: Awaited<ReturnType<GetStaticPaths>> = [];
+  for (const lang of allLocales) {
+    for (const id of paperTree.allIds) {
+      paths.push({ params: { lang: langParam(lang), id }, props: { lang, id } });
+    }
+  }
+  return paths;
+}) satisfies GetStaticPaths;
+
+const { lang, id } = Astro.props as { lang: string; id: string };
+const node = paperTree.map.get(id)!;
+---
+
+<BaseLayout title={`${node.label[lang]} — ${site.name}`} lang={lang} path={`paper/category/${id}/`}>
+  <PapersIndex lang={lang} categoryId={id} />
+</BaseLayout>