[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_164":165,"_166":167},"routes/_app.x.$handle.$name",{"_94":93,"_32":45,"_102":84,"_27":53,"_13":14,"_103":-5,"_11":104,"_105":106,"_107":108,"_109":110,"_111":112,"_20":-5,"_113":-5,"_114":-5,"_115":25,"_116":117,"_118":119,"_120":-5,"_121":-5,"_122":123},"routes/_app.x.$handle.$name.branch.$branch.version.$version.diff",{"_11":12,"_13":14,"_15":16,"_17":-5,"_18":-5},"project",{"_43":44,"_32":45,"_38":46,"_47":-5,"_48":25,"_49":50,"_51":50,"_52":53,"_54":-5,"_18":55,"_56":-5,"_57":25,"_58":-5,"_59":-5,"_60":61,"_62":63,"_64":-5,"_65":-5,"_66":-5,"_67":-5,"_68":69,"_70":69,"_71":72,"_73":72,"_74":72,"_75":69,"_76":69,"_77":78,"_79":80,"_81":82,"_83":25},"version",6,"changes",[19],"aiChatInfo","userId",{"_20":21,"_22":23,"_24":25,"_26":25,"_27":28,"_29":28},"file",{"_30":31,"_32":28,"_33":34,"_35":37,"_38":39,"_40":14,"_41":42,"_24":25},"previous",{"_30":31,"_32":28,"_33":34,"_35":36},"deleted",false,"deletedHere","path","micropub.ts","latestPath","fileId","1708dc0c-76e8-11f1-be5b-1607ee4eb77e","name","fileType","http","content","import { Hono } from \"npm:hono\";\nimport yaml from \"npm:js-yaml@4.1.0\";\nimport { blob } from \"https://esm.town/v/std/blob\";\n\n// Direct-commit Micropub endpoint: translates Micropub create/media requests\n// into commits against the Jekyll repo, reusing the site's own build/optimize\n// workflows rather than a separate publishing pipeline.\n//\n// Auth is a single shared bearer token (MICROPUB_TOKEN) rather than IndieAuth:\n// chosen to prove the loop with the least moving parts. It is swappable for an\n// IndieAuth token check at verifyToken() without touching the rest.\n\nconst REPO = Deno.env.get(\"GITHUB_REPO\") || \"joshbeckman/notes\";\nconst BRANCH = Deno.env.get(\"GIT_BRANCH\") || \"master\";\nconst SITE_URL = (Deno.env.get(\"SITE_URL\") || \"https://www.joshbeckman.org\").replace(/\\/$/, \"\");\nconst SITE_TZ = Deno.env.get(\"SITE_TZ\") || \"America/Chicago\";\nconst GITHUB_TOKEN = Deno.env.get(\"GITHUB_TOKEN\") || \"\";\nconst MICROPUB_TOKEN = Deno.env.get(\"MICROPUB_TOKEN\") || \"\";\nconst GARDEN_PASSWORD = Deno.env.get(\"GARDEN_PASSWORD\") || \"\";\nconst INDIEAUTH_SECRET = Deno.env.get(\"INDIEAUTH_SECRET\") || \"\";\nconst COMMITTER = {\n name: Deno.env.get(\"GIT_COMMITTER_NAME\") || \"micropub-val\",\n email: Deno.env.get(\"GIT_COMMITTER_EMAIL\") || \"josh@joshbeckman.org\",\n};\n\nconst app = new Hono();\n\n// Bearer token can arrive in the Authorization header or, per the Micropub\n// spec, as an access_token form field. Header wins.\nfunction bearerFromHeader(c: any): string | null {\n const auth = c.req.header(\"Authorization\") || \"\";\n const m = auth.match(/^Bearer\\s+(.+)$/i);\n return m ? m[1] : null;\n}\n\n// --- IndieAuth: self-hosted authorization + token endpoints ---\n//\n// Tokens/codes are stateless HMAC-signed blobs (no DB for the happy path).\n// The one place state is required is single-use enforcement of auth codes,\n// which uses std/blob to burn a code's jti on redemption.\n\nfunction b64urlEncode(bytes: Uint8Array): string {\n let bin = \"\";\n for (const b of bytes) bin += String.fromCharCode(b);\n return btoa(bin).replace(/\\+/g, \"-\").replace(/\\//g, \"_\").replace(/=+$/, \"\");\n}\nfunction b64urlDecode(s: string): Uint8Array {\n s = s.replace(/-/g, \"+\").replace(/_/g, \"/\");\n while (s.length % 4) s += \"=\";\n const bin = atob(s);\n const out = new Uint8Array(bin.length);\n for (let i = 0; i < bin.length; i++) out[i] = bin.charCodeAt(i);\n return out;\n}\nconst b64urlStr = (s: string) => b64urlEncode(new TextEncoder().encode(s));\nconst unb64urlStr = (s: string) => new TextDecoder().decode(b64urlDecode(s));\n\nlet _key: CryptoKey | null = null;\nasync function signingKey(): Promise {\n if (!_key) {\n _key = await crypto.subtle.importKey(\n \"raw\",\n new TextEncoder().encode(INDIEAUTH_SECRET),\n { name: \"HMAC\", hash: \"SHA-256\" },\n false,\n [\"sign\"],\n );\n }\n return _key;\n}\nasync function hmac(data: string): Promise {\n const sig = await crypto.subtle.sign(\"HMAC\", await signingKey(), new TextEncoder().encode(data));\n return b64urlEncode(new Uint8Array(sig));\n}\nfunction timingSafeEqual(a: string, b: string): boolean {\n if (a.length !== b.length) return false;\n let out = 0;\n for (let i = 0; i < a.length; i++) out |= a.charCodeAt(i) ^ b.charCodeAt(i);\n return out === 0;\n}\nasync function signPayload(payload: Record): Promise {\n const p = b64urlStr(JSON.stringify(payload));\n return `${p}.${await hmac(p)}`;\n}\nasync function verifyPayload(token: string): Promise | null> {\n const [p, sig] = token.split(\".\");\n if (!p || !sig) return null;\n if (!timingSafeEqual(sig, await hmac(p))) return null;\n let payload: Record;\n try {\n payload = JSON.parse(unb64urlStr(p));\n } catch {\n return null;\n }\n if (payload.exp && Math.floor(Date.now() / 1000) > payload.exp) return null;\n return payload;\n}\nasync function sha256b64url(s: string): Promise {\n const d = await crypto.subtle.digest(\"SHA-256\", new TextEncoder().encode(s));\n return b64urlEncode(new Uint8Array(d));\n}\n\n// Single-use enforcement: an auth code's jti is burned in blob storage on\n// first redemption so a replay within the 5-minute window is rejected.\nasync function codeAlreadyUsed(jti: string): Promise {\n try {\n return !!(await blob.getJSON(`mp_used_code_${jti}`));\n } catch {\n return false;\n }\n}\nasync function burnCode(jti: string): Promise {\n try {\n await blob.setJSON(`mp_used_code_${jti}`, { at: Date.now() });\n } catch {\n // If blob write fails we fail closed at the caller rather than issue a token.\n }\n}\n\nasync function verifyToken(token: string | null): Promise {\n if (!token) return false;\n // Shared secret kept as a fallback for curl/scripts.\n if (MICROPUB_TOKEN && token === MICROPUB_TOKEN) return true;\n const payload = await verifyPayload(token);\n return !!payload && payload.t === \"token\";\n}\n\nfunction toBase64(bytes: Uint8Array): string {\n let binary = \"\";\n const chunk = 0x8000;\n for (let i = 0; i < bytes.length; i += chunk) {\n binary += String.fromCharCode(...bytes.subarray(i, i + chunk));\n }\n return btoa(binary);\n}\n\nfunction textToBase64(text: string): string {\n return toBase64(new TextEncoder().encode(text));\n}\n\nasync function getSha(path: string): Promise {\n const res = await fetch(\n `https://api.github.com/repos/${REPO}/contents/${encodeURI(path)}?ref=${BRANCH}`,\n { headers: ghHeaders() },\n );\n if (res.status === 200) return (await res.json()).sha;\n return undefined;\n}\n\nfunction ghHeaders() {\n return {\n Authorization: `Bearer ${GITHUB_TOKEN}`,\n Accept: \"application/vnd.github+json\",\n \"User-Agent\": \"micropub-val\",\n \"Content-Type\": \"application/json\",\n };\n}\n\nasync function commitFile(path: string, contentBase64: string, message: string) {\n const sha = await getSha(path);\n const res = await fetch(`https://api.github.com/repos/${REPO}/contents/${encodeURI(path)}`, {\n method: \"PUT\",\n headers: ghHeaders(),\n body: JSON.stringify({\n message,\n content: contentBase64,\n branch: BRANCH,\n committer: COMMITTER,\n ...(sha ? { sha } : {}),\n }),\n });\n if (!res.ok) {\n throw new Error(`GitHub commit failed for ${path}: ${res.status} ${await res.text()}`);\n }\n return res.json();\n}\n\nfunction escapeHtml(s: string): string {\n return s\n .replace(/&/g, \"&\")\n .replace(//g, \">\")\n .replace(/\"/g, \""\");\n}\n\nfunction slugify(title: string): string {\n return title.replace(/[^a-zA-Z0-9\\s]/g, \"\").replace(/\\s+/g, \"-\").toLowerCase();\n}\n\n// Match Post#front_matter date format: \"YYYY-MM-DD HH:MM:SS +ZZZZ\" in the\n// site's timezone, so posts land on the right calendar day near midnight.\nfunction formatInTz(date: Date, tz: string): { day: string; full: string } {\n const parts = Object.fromEntries(\n new Intl.DateTimeFormat(\"en-CA\", {\n timeZone: tz,\n year: \"numeric\",\n month: \"2-digit\",\n day: \"2-digit\",\n hour: \"2-digit\",\n minute: \"2-digit\",\n second: \"2-digit\",\n hour12: false,\n timeZoneName: \"longOffset\",\n })\n .formatToParts(date)\n .map((p) => [p.type, p.value]),\n );\n const day = `${parts.year}-${parts.month}-${parts.day}`;\n const hour = parts.hour === \"24\" ? \"00\" : parts.hour;\n const offset = (parts.timeZoneName || \"GMT+00:00\").replace(\"GMT\", \"\").replace(\":\", \"\") || \"+0000\";\n return { day, full: `${day} ${hour}:${parts.minute}:${parts.second} ${offset}` };\n}\n\nfunction firstValue(v: any): string | undefined {\n if (v == null) return undefined;\n if (Array.isArray(v)) v = v[0];\n if (v == null) return undefined;\n if (typeof v === \"object\") return v.html ?? v.value ?? undefined;\n return String(v);\n}\n\nfunction photoUrl(p: any): string | undefined {\n if (typeof p === \"string\") return p;\n if (p && typeof p === \"object\") return p.value ?? p.url ?? undefined;\n return undefined;\n}\n\n// A site-absolute media URL (from our own media endpoint) is rewritten to a\n// repo-relative path so the committed post references the in-repo asset rather\n// than round-tripping through the live CDN.\nfunction toRepoPath(url: string): string {\n if (url.startsWith(SITE_URL + \"/\")) return url.slice(SITE_URL.length);\n return url;\n}\n\ntype Parsed = {\n h: string;\n name?: string;\n content?: string;\n categories: string[];\n photos: string[];\n files: File[];\n published?: string;\n slug?: string;\n token: string | null;\n};\n\nasync function parseRequest(c: any): Promise {\n const ct = c.req.header(\"Content-Type\") || \"\";\n let token = bearerFromHeader(c);\n\n if (ct.includes(\"application/json\")) {\n const body = await c.req.json();\n const props = body.properties || {};\n const type = Array.isArray(body.type) ? body.type[0] : body.type;\n return {\n h: (type || \"h-entry\").replace(/^h-/, \"\"),\n name: firstValue(props.name),\n content: firstValue(props.content),\n categories: (props.category || []).map((x: any) => String(x)),\n photos: (props.photo || []).map(photoUrl).filter(Boolean) as string[],\n files: [],\n published: firstValue(props.published),\n slug: firstValue(props[\"mp-slug\"]),\n token,\n };\n }\n\n const fd = await c.req.formData();\n if (!token) token = (fd.get(\"access_token\") as string) || null;\n const cats = [...fd.getAll(\"category[]\"), ...fd.getAll(\"category\")].filter(\n (v) => typeof v === \"string\",\n ) as string[];\n const rawPhotos = [...fd.getAll(\"photo[]\"), ...fd.getAll(\"photo\")];\n return {\n h: ((fd.get(\"h\") as string) || \"entry\").replace(/^h-/, \"\"),\n name: (fd.get(\"name\") as string) || undefined,\n content: (fd.get(\"content\") as string) || undefined,\n categories: cats,\n photos: rawPhotos.filter((v) => typeof v === \"string\") as string[],\n files: rawPhotos.filter((v) => v instanceof File) as File[],\n published: (fd.get(\"published\") as string) || undefined,\n slug: (fd.get(\"mp-slug\") as string) || undefined,\n token,\n };\n}\n\n// Micropub config query: advertises the media endpoint so clients know where\n// to upload photos.\napp.get(\"/\", (c) => {\n if (c.req.query(\"q\") === \"config\" || c.req.query(\"q\") === \"syndicate-to\") {\n return c.json({\n \"media-endpoint\": `${new URL(c.req.url).origin}/media`,\n \"syndicate-to\": [],\n });\n }\n return c.text(\"Micropub endpoint\", 200);\n});\n\n// Media endpoint: commit an uploaded image and hand back its site-absolute URL.\napp.post(\"/media\", async (c) => {\n if (!(await verifyToken(bearerFromHeader(c)))) return c.text(\"Unauthorized\", 401);\n const fd = await c.req.formData();\n const file = (fd.get(\"file\") || fd.get(\"photo\")) as File | null;\n if (!file) return c.text(\"Missing file\", 400);\n\n const safe = file.name.replace(/[^a-zA-Z0-9._-]/g, \"-\");\n const name = `${Date.now()}-${safe}`;\n const path = `assets/images/${name}`;\n const bytes = new Uint8Array(await file.arrayBuffer());\n await commitFile(path, toBase64(bytes), `new(usr): Upload ${name} via micropub`);\n\n const url = `${SITE_URL}/${path}`;\n c.header(\"Location\", url);\n return c.json({ url }, 201);\n});\n\napp.post(\"/\", async (c) => {\n const parsed = await parseRequest(c);\n if (!(await verifyToken(parsed.token))) return c.text(\"Unauthorized\", 401);\n if (parsed.h !== \"entry\") return c.text(\"Only h-entry is supported\", 400);\n\n // Commit any inline photo files uploaded in the create request itself\n // (clients that skip the media endpoint), collecting their repo paths.\n const inlinePaths: string[] = [];\n for (const file of parsed.files) {\n const safe = file.name.replace(/[^a-zA-Z0-9._-]/g, \"-\");\n const name = `${Date.now()}-${safe}`;\n const path = `assets/images/${name}`;\n const bytes = new Uint8Array(await file.arrayBuffer());\n await commitFile(path, toBase64(bytes), `new(usr): Upload ${name} via micropub`);\n inlinePaths.push(`/${path}`);\n }\n\n let body = parsed.content || \"\";\n\n // Optional YAML frontmatter inside the content overrides Micropub props and\n // defaults, mirroring the site's issue_post frontmatter path so the phone\n // flow behaves \"just like normal Jekyll\".\n let fm: Record = {};\n const fmMatch = body.match(/^---\\n([\\s\\S]*?)\\n---\\n?/);\n if (fmMatch) {\n fm = (yaml.load(fmMatch[1]) as Record) || {};\n body = body.slice(fmMatch[0].length);\n }\n\n const photoPaths = [\n ...parsed.photos.map(toRepoPath),\n ...inlinePaths,\n ];\n\n const title = fm.title || parsed.name;\n if (!title) return c.text(\"A title is required (name or frontmatter title)\", 400);\n\n const category = fm.category || \"blog\";\n const when = fm.date ? new Date(fm.date) : parsed.published ? new Date(parsed.published) : new Date();\n const { day, full } = formatInTz(isNaN(when.getTime()) ? new Date() : when, SITE_TZ);\n const slug = fm.slug || parsed.slug || slugify(title);\n const tags = fm.tags\n ? (Array.isArray(fm.tags) ? fm.tags : String(fm.tags).split(\",\").map((t) => t.trim()))\n : parsed.categories;\n const image = fm.image || (photoPaths.length ? photoPaths[0] : undefined);\n\n // Inline the photos above the body, matching set_album_art's prepend style.\n const imageMd = photoPaths.map((p) => `![](${p})`).join(\"\\n\");\n const finalBody = [imageMd, body.trim()].filter(Boolean).join(\"\\n\\n\");\n\n const front: Record = {\n layout: fm.layout || \"Post\",\n date: full,\n title,\n toc: true,\n };\n if (image) front.image = image;\n if (fm.description) front.description = fm.description;\n if (tags && tags.length) front.tags = tags.map((t: string) => String(t).toLowerCase());\n if (fm.published !== undefined) front.published = fm.published;\n\n const fileContent = `---\\n${yaml.dump(front)}---\\n\\n${finalBody}\\n`;\n const path = `${category}/_posts/${day}-${slug}.md`;\n await commitFile(path, textToBase64(fileContent), `new(usr): Post \"${title}\" via micropub`);\n\n const location = `${SITE_URL}/${category}/${slug}`;\n c.header(\"Location\", location);\n return c.body(null, 201);\n});\n\n// IndieAuth authorization endpoint: approval form. The password gate is the\n// identity check — this val is its own identity provider, so there is no\n// third-party login to delegate to.\napp.get(\"/auth\", (c) => {\n const q = c.req.query();\n const hidden = [\n \"client_id\",\n \"redirect_uri\",\n \"state\",\n \"scope\",\n \"code_challenge\",\n \"code_challenge_method\",\n \"me\",\n \"response_type\",\n ]\n .map((k) => ``)\n .join(\"\\n\");\n return c.html(`\nAuthorize\n\n

Authorize app

${escapeHtml(q.client_id || \"unknown app\")} is requesting\nscope ${escapeHtml(q.scope || \"create\")}.

\n`);\n});\n\napp.post(\"/auth\", async (c) => {\n const fd = await c.req.formData();\n const get = (k: string) => (fd.get(k) as string) || \"\";\n if (!GARDEN_PASSWORD || get(\"password\") !== GARDEN_PASSWORD) {\n return c.text(\"Forbidden\", 403);\n }\n const redirectUri = get(\"redirect_uri\");\n if (!redirectUri) return c.text(\"Missing redirect_uri\", 400);\n\n const code = await signPayload({\n t: \"code\",\n jti: crypto.randomUUID(),\n client_id: get(\"client_id\"),\n redirect_uri: redirectUri,\n scope: get(\"scope\") || \"create\",\n me: get(\"me\") || SITE_URL,\n cc: get(\"code_challenge\"),\n ccm: get(\"code_challenge_method\"),\n exp: Math.floor(Date.now() / 1000) + 300,\n });\n\n const sep = redirectUri.includes(\"?\") ? \"&\" : \"?\";\n const state = get(\"state\");\n const location = `${redirectUri}${sep}code=${encodeURIComponent(code)}${\n state ? `&state=${encodeURIComponent(state)}` : \"\"\n }`;\n return c.body(null, 302, { Location: location });\n});\n\n// IndieAuth token endpoint: exchange a single-use auth code for an access token.\napp.post(\"/token\", async (c) => {\n const fd = await c.req.formData();\n const get = (k: string) => (fd.get(k) as string) || \"\";\n if (get(\"grant_type\") !== \"authorization_code\") {\n return c.json({ error: \"unsupported_grant_type\" }, 400);\n }\n const payload = await verifyPayload(get(\"code\"));\n if (!payload || payload.t !== \"code\") return c.json({ error: \"invalid_grant\" }, 400);\n if (payload.client_id !== get(\"client_id\") || payload.redirect_uri !== get(\"redirect_uri\")) {\n return c.json({ error: \"invalid_grant\" }, 400);\n }\n // PKCE: verify code_verifier against the challenge bound to the code.\n if (payload.cc) {\n const verifier = get(\"code_verifier\");\n if (!verifier) return c.json({ error: \"invalid_grant\" }, 400);\n const challenge = payload.ccm === \"plain\" ? verifier : await sha256b64url(verifier);\n if (!timingSafeEqual(challenge, payload.cc)) return c.json({ error: \"invalid_grant\" }, 400);\n }\n if (await codeAlreadyUsed(payload.jti)) return c.json({ error: \"invalid_grant\" }, 400);\n await burnCode(payload.jti);\n\n const accessToken = await signPayload({\n t: \"token\",\n me: payload.me,\n scope: payload.scope,\n iat: Math.floor(Date.now() / 1000),\n exp: Math.floor(Date.now() / 1000) + 10 * 365 * 24 * 3600,\n });\n return c.json({\n access_token: accessToken,\n token_type: \"Bearer\",\n scope: payload.scope,\n me: payload.me,\n });\n});\n\napp.onError((err) => Promise.reject(err));\n\nexport default app.fetch;\n","import { Hono } from \"npm:hono\";\nimport yaml from \"npm:js-yaml@4.1.0\";\nimport { blob } from \"https://esm.town/v/std/blob\";\n\n// Direct-commit Micropub endpoint: translates Micropub create/media requests\n// into commits against the Jekyll repo, reusing the site's own build/optimize\n// workflows rather than a separate publishing pipeline.\n//\n// Auth is a single shared bearer token (MICROPUB_TOKEN) rather than IndieAuth:\n// chosen to prove the loop with the least moving parts. It is swappable for an\n// IndieAuth token check at verifyToken() without touching the rest.\n\nconst REPO = Deno.env.get(\"GITHUB_REPO\") || \"joshbeckman/notes\";\nconst BRANCH = Deno.env.get(\"GIT_BRANCH\") || \"master\";\nconst SITE_URL = (Deno.env.get(\"SITE_URL\") || \"https://www.joshbeckman.org\").replace(/\\/$/, \"\");\nconst SITE_TZ = Deno.env.get(\"SITE_TZ\") || \"America/Chicago\";\nconst GITHUB_TOKEN = Deno.env.get(\"GITHUB_TOKEN\") || \"\";\nconst MICROPUB_TOKEN = Deno.env.get(\"MICROPUB_TOKEN\") || \"\";\nconst GARDEN_PASSWORD = Deno.env.get(\"GARDEN_PASSWORD\") || \"\";\nconst INDIEAUTH_SECRET = Deno.env.get(\"INDIEAUTH_SECRET\") || \"\";\nconst COMMITTER = {\n name: Deno.env.get(\"GIT_COMMITTER_NAME\") || \"micropub-val\",\n email: Deno.env.get(\"GIT_COMMITTER_EMAIL\") || \"josh@joshbeckman.org\",\n};\n\nconst app = new Hono();\n\n// Bearer token can arrive in the Authorization header or, per the Micropub\n// spec, as an access_token form field. Header wins.\nfunction bearerFromHeader(c: any): string | null {\n const auth = c.req.header(\"Authorization\") || \"\";\n const m = auth.match(/^Bearer\\s+(.+)$/i);\n return m ? m[1] : null;\n}\n\n// --- IndieAuth: self-hosted authorization + token endpoints ---\n//\n// Tokens/codes are stateless HMAC-signed blobs (no DB for the happy path).\n// The one place state is required is single-use enforcement of auth codes,\n// which uses std/blob to burn a code's jti on redemption.\n\nfunction b64urlEncode(bytes: Uint8Array): string {\n let bin = \"\";\n for (const b of bytes) bin += String.fromCharCode(b);\n return btoa(bin).replace(/\\+/g, \"-\").replace(/\\//g, \"_\").replace(/=+$/, \"\");\n}\nfunction b64urlDecode(s: string): Uint8Array {\n s = s.replace(/-/g, \"+\").replace(/_/g, \"/\");\n while (s.length % 4) s += \"=\";\n const bin = atob(s);\n const out = new Uint8Array(bin.length);\n for (let i = 0; i < bin.length; i++) out[i] = bin.charCodeAt(i);\n return out;\n}\nconst b64urlStr = (s: string) => b64urlEncode(new TextEncoder().encode(s));\nconst unb64urlStr = (s: string) => new TextDecoder().decode(b64urlDecode(s));\n\nlet _key: CryptoKey | null = null;\nasync function signingKey(): Promise {\n if (!_key) {\n _key = await crypto.subtle.importKey(\n \"raw\",\n new TextEncoder().encode(INDIEAUTH_SECRET),\n { name: \"HMAC\", hash: \"SHA-256\" },\n false,\n [\"sign\"],\n );\n }\n return _key;\n}\nasync function hmac(data: string): Promise {\n const sig = await crypto.subtle.sign(\"HMAC\", await signingKey(), new TextEncoder().encode(data));\n return b64urlEncode(new Uint8Array(sig));\n}\nfunction timingSafeEqual(a: string, b: string): boolean {\n if (a.length !== b.length) return false;\n let out = 0;\n for (let i = 0; i < a.length; i++) out |= a.charCodeAt(i) ^ b.charCodeAt(i);\n return out === 0;\n}\nasync function signPayload(payload: Record): Promise {\n const p = b64urlStr(JSON.stringify(payload));\n return `${p}.${await hmac(p)}`;\n}\nasync function verifyPayload(token: string): Promise | null> {\n const [p, sig] = token.split(\".\");\n if (!p || !sig) return null;\n if (!timingSafeEqual(sig, await hmac(p))) return null;\n let payload: Record;\n try {\n payload = JSON.parse(unb64urlStr(p));\n } catch {\n return null;\n }\n if (payload.exp && Math.floor(Date.now() / 1000) > payload.exp) return null;\n return payload;\n}\nasync function sha256b64url(s: string): Promise {\n const d = await crypto.subtle.digest(\"SHA-256\", new TextEncoder().encode(s));\n return b64urlEncode(new Uint8Array(d));\n}\n\n// Single-use enforcement: an auth code's jti is burned in blob storage on\n// first redemption so a replay within the 5-minute window is rejected.\nasync function codeAlreadyUsed(jti: string): Promise {\n try {\n return !!(await blob.getJSON(`mp_used_code_${jti}`));\n } catch {\n return false;\n }\n}\nasync function burnCode(jti: string): Promise {\n try {\n await blob.setJSON(`mp_used_code_${jti}`, { at: Date.now() });\n } catch {\n // If blob write fails we fail closed at the caller rather than issue a token.\n }\n}\n\nasync function verifyToken(token: string | null): Promise {\n if (!token) return false;\n // Shared secret kept as a fallback for curl/scripts.\n if (MICROPUB_TOKEN && token === MICROPUB_TOKEN) return true;\n const payload = await verifyPayload(token);\n return !!payload && payload.t === \"token\";\n}\n\nfunction toBase64(bytes: Uint8Array): string {\n let binary = \"\";\n const chunk = 0x8000;\n for (let i = 0; i < bytes.length; i += chunk) {\n binary += String.fromCharCode(...bytes.subarray(i, i + chunk));\n }\n return btoa(binary);\n}\n\nfunction textToBase64(text: string): string {\n return toBase64(new TextEncoder().encode(text));\n}\n\nasync function getSha(path: string): Promise {\n const res = await fetch(\n `https://api.github.com/repos/${REPO}/contents/${encodeURI(path)}?ref=${BRANCH}`,\n { headers: ghHeaders() },\n );\n if (res.status === 200) return (await res.json()).sha;\n return undefined;\n}\n\nfunction ghHeaders() {\n return {\n Authorization: `Bearer ${GITHUB_TOKEN}`,\n Accept: \"application/vnd.github+json\",\n \"User-Agent\": \"micropub-val\",\n \"Content-Type\": \"application/json\",\n };\n}\n\nasync function commitFile(path: string, contentBase64: string, message: string) {\n const sha = await getSha(path);\n const res = await fetch(`https://api.github.com/repos/${REPO}/contents/${encodeURI(path)}`, {\n method: \"PUT\",\n headers: ghHeaders(),\n body: JSON.stringify({\n message,\n content: contentBase64,\n branch: BRANCH,\n committer: COMMITTER,\n ...(sha ? { sha } : {}),\n }),\n });\n if (!res.ok) {\n throw new Error(`GitHub commit failed for ${path}: ${res.status} ${await res.text()}`);\n }\n return res.json();\n}\n\nfunction escapeHtml(s: string): string {\n return s\n .replace(/&/g, \"&\")\n .replace(//g, \">\")\n .replace(/\"/g, \""\");\n}\n\nfunction slugify(title: string): string {\n return title.replace(/[^a-zA-Z0-9\\s]/g, \"\").replace(/\\s+/g, \"-\").toLowerCase();\n}\n\n// Match Post#front_matter date format: \"YYYY-MM-DD HH:MM:SS +ZZZZ\" in the\n// site's timezone, so posts land on the right calendar day near midnight.\nfunction formatInTz(date: Date, tz: string): { day: string; full: string } {\n const parts = Object.fromEntries(\n new Intl.DateTimeFormat(\"en-CA\", {\n timeZone: tz,\n year: \"numeric\",\n month: \"2-digit\",\n day: \"2-digit\",\n hour: \"2-digit\",\n minute: \"2-digit\",\n second: \"2-digit\",\n hour12: false,\n timeZoneName: \"longOffset\",\n })\n .formatToParts(date)\n .map((p) => [p.type, p.value]),\n );\n const day = `${parts.year}-${parts.month}-${parts.day}`;\n const hour = parts.hour === \"24\" ? \"00\" : parts.hour;\n const offset = (parts.timeZoneName || \"GMT+00:00\").replace(\"GMT\", \"\").replace(\":\", \"\") || \"+0000\";\n return { day, full: `${day} ${hour}:${parts.minute}:${parts.second} ${offset}` };\n}\n\nfunction firstValue(v: any): string | undefined {\n if (v == null) return undefined;\n if (Array.isArray(v)) v = v[0];\n if (v == null) return undefined;\n if (typeof v === \"object\") return v.html ?? v.value ?? undefined;\n return String(v);\n}\n\nfunction photoUrl(p: any): string | undefined {\n if (typeof p === \"string\") return p;\n if (p && typeof p === \"object\") return p.value ?? p.url ?? undefined;\n return undefined;\n}\n\n// A site-absolute media URL (from our own media endpoint) is rewritten to a\n// repo-relative path so the committed post references the in-repo asset rather\n// than round-tripping through the live CDN.\nfunction toRepoPath(url: string): string {\n if (url.startsWith(SITE_URL + \"/\")) return url.slice(SITE_URL.length);\n return url;\n}\n\ntype Parsed = {\n h: string;\n name?: string;\n content?: string;\n categories: string[];\n photos: string[];\n files: File[];\n published?: string;\n slug?: string;\n inReplyTo?: string;\n summary?: string;\n syndicateTo: string[];\n token: string | null;\n};\n\nasync function parseRequest(c: any): Promise {\n const ct = c.req.header(\"Content-Type\") || \"\";\n let token = bearerFromHeader(c);\n\n if (ct.includes(\"application/json\")) {\n const body = await c.req.json();\n const props = body.properties || {};\n const type = Array.isArray(body.type) ? body.type[0] : body.type;\n return {\n h: (type || \"h-entry\").replace(/^h-/, \"\"),\n name: firstValue(props.name),\n content: firstValue(props.content),\n categories: (props.category || []).map((x: any) => String(x)),\n photos: (props.photo || []).map(photoUrl).filter(Boolean) as string[],\n files: [],\n published: firstValue(props.published),\n slug: firstValue(props[\"mp-slug\"]),\n inReplyTo: firstValue(props[\"in-reply-to\"]),\n summary: firstValue(props.summary),\n syndicateTo: (props[\"mp-syndicate-to\"] || []).map((x: any) => String(x)),\n token,\n };\n }\n\n const fd = await c.req.formData();\n if (!token) token = (fd.get(\"access_token\") as string) || null;\n const cats = [...fd.getAll(\"category[]\"), ...fd.getAll(\"category\")].filter(\n (v) => typeof v === \"string\",\n ) as string[];\n const rawPhotos = [...fd.getAll(\"photo[]\"), ...fd.getAll(\"photo\")];\n return {\n h: ((fd.get(\"h\") as string) || \"entry\").replace(/^h-/, \"\"),\n name: (fd.get(\"name\") as string) || undefined,\n content: (fd.get(\"content\") as string) || undefined,\n categories: cats,\n photos: rawPhotos.filter((v) => typeof v === \"string\") as string[],\n files: rawPhotos.filter((v) => v instanceof File) as File[],\n published: (fd.get(\"published\") as string) || undefined,\n slug: (fd.get(\"mp-slug\") as string) || undefined,\n inReplyTo: (fd.get(\"in-reply-to\") as string) || undefined,\n summary: (fd.get(\"summary\") as string) || undefined,\n syndicateTo: [...fd.getAll(\"mp-syndicate-to[]\"), ...fd.getAll(\"mp-syndicate-to\")].filter(\n (v) => typeof v === \"string\",\n ) as string[],\n token,\n };\n}\n\n// Syndication targets map Micropub uids to the frontmatter flags the existing\n// POSSE cron looks for; setting the field to `false` marks a post for pickup.\nconst SYNDICATION_TARGETS = [\n { uid: \"mastodon\", name: \"Mastodon\", field: \"mastodon_social_status_url\" },\n { uid: \"bluesky\", name: \"Bluesky\", field: \"bluesky_status_url\" },\n];\n\n// Reuse the site's own tagger val (same one issue_post's suggested_tags hits)\n// so phone posts get auto-tagged when the author supplies none.\nasync function suggestTags(content: string): Promise {\n try {\n const res = await fetch(\"https://joshbeckman-tagger.web.val.run/\", {\n method: \"POST\",\n headers: { \"Content-Type\": \"application/x-www-form-urlencoded\" },\n body: new URLSearchParams({ content }),\n });\n const json = await res.json();\n return Array.isArray(json.suggestedTags) ? json.suggestedTags : [];\n } catch {\n return [];\n }\n}\n\n// Micropub config query: advertises the media endpoint + syndication targets,\n// and serves the site's tag vocabulary for client-side autocomplete.\napp.get(\"/\", async (c) => {\n const q = c.req.query(\"q\");\n if (q === \"config\" || q === \"syndicate-to\") {\n const cfg = {\n \"media-endpoint\": `${new URL(c.req.url).origin}/media`,\n \"syndicate-to\": SYNDICATION_TARGETS.map(({ uid, name }) => ({ uid, name })),\n };\n return c.json(q === \"syndicate-to\" ? { \"syndicate-to\": cfg[\"syndicate-to\"] } : cfg);\n }\n if (q === \"category\") {\n const tags = await fetch(`${SITE_URL}/assets/js/tags.json`)\n .then((r) => r.json())\n .catch(() => []);\n return c.json({ categories: tags.map((t: any) => t.name).filter(Boolean) });\n }\n return c.text(\"Micropub endpoint\", 200);\n});\n\n// Media endpoint: commit an uploaded image and hand back its site-absolute URL.\napp.post(\"/media\", async (c) => {\n if (!(await verifyToken(bearerFromHeader(c)))) return c.text(\"Unauthorized\", 401);\n const fd = await c.req.formData();\n const file = (fd.get(\"file\") || fd.get(\"photo\")) as File | null;\n if (!file) return c.text(\"Missing file\", 400);\n\n const safe = file.name.replace(/[^a-zA-Z0-9._-]/g, \"-\");\n const name = `${Date.now()}-${safe}`;\n const path = `assets/images/${name}`;\n const bytes = new Uint8Array(await file.arrayBuffer());\n await commitFile(path, toBase64(bytes), `new(usr): Upload ${name} via micropub`);\n\n const url = `${SITE_URL}/${path}`;\n c.header(\"Location\", url);\n return c.json({ url }, 201);\n});\n\napp.post(\"/\", async (c) => {\n const parsed = await parseRequest(c);\n if (!(await verifyToken(parsed.token))) return c.text(\"Unauthorized\", 401);\n if (parsed.h !== \"entry\") return c.text(\"Only h-entry is supported\", 400);\n\n // Commit any inline photo files uploaded in the create request itself\n // (clients that skip the media endpoint), collecting their repo paths.\n const inlinePaths: string[] = [];\n for (const file of parsed.files) {\n const safe = file.name.replace(/[^a-zA-Z0-9._-]/g, \"-\");\n const name = `${Date.now()}-${safe}`;\n const path = `assets/images/${name}`;\n const bytes = new Uint8Array(await file.arrayBuffer());\n await commitFile(path, toBase64(bytes), `new(usr): Upload ${name} via micropub`);\n inlinePaths.push(`/${path}`);\n }\n\n let body = parsed.content || \"\";\n\n // Optional YAML frontmatter inside the content overrides Micropub props and\n // defaults, mirroring the site's issue_post frontmatter path so the phone\n // flow behaves \"just like normal Jekyll\".\n let fm: Record = {};\n const fmMatch = body.match(/^---\\n([\\s\\S]*?)\\n---\\n?/);\n if (fmMatch) {\n fm = (yaml.load(fmMatch[1]) as Record) || {};\n body = body.slice(fmMatch[0].length);\n }\n\n const photoPaths = [\n ...parsed.photos.map(toRepoPath),\n ...inlinePaths,\n ];\n\n const title = fm.title || parsed.name;\n if (!title) return c.text(\"A title is required (name or frontmatter title)\", 400);\n\n const category = fm.category || \"blog\";\n const when = fm.date ? new Date(fm.date) : parsed.published ? new Date(parsed.published) : new Date();\n const { day, full } = formatInTz(isNaN(when.getTime()) ? new Date() : when, SITE_TZ);\n const slug = fm.slug || parsed.slug || slugify(title);\n let tags: string[] = fm.tags\n ? (Array.isArray(fm.tags) ? fm.tags : String(fm.tags).split(\",\").map((t) => t.trim()))\n : parsed.categories;\n if (!tags || tags.length === 0) tags = await suggestTags(`${title}\\n${body}`);\n const image = fm.image || (photoPaths.length ? photoPaths[0] : undefined);\n const description = fm.description ?? parsed.summary;\n const inReplyTo = fm.in_reply_to ?? parsed.inReplyTo;\n\n // Generalized passthrough: any frontmatter key the author writes is emitted\n // verbatim, except the routing keys (category/slug → file path) and the keys\n // handled explicitly below. This covers issue_post's long tail (hide_title,\n // photo_feature, canonical, rating, song_link, …) without per-field code.\n const CONTROL_KEYS = new Set([\n \"category\", \"slug\", \"title\", \"date\", \"tags\", \"image\", \"description\",\n \"published\", \"layout\", \"in_reply_to\",\n ]);\n const passthrough: Record = {};\n for (const [k, v] of Object.entries(fm)) {\n if (!CONTROL_KEYS.has(k)) passthrough[k] = v;\n }\n\n // Inline the photos above the body, matching set_album_art's prepend style.\n const imageMd = photoPaths.map((p) => `![](${p})`).join(\"\\n\");\n const finalBody = [imageMd, body.trim()].filter(Boolean).join(\"\\n\\n\");\n\n const front: Record = {\n layout: fm.layout || \"Post\",\n date: full,\n title,\n toc: true,\n };\n if (image) front.image = image;\n if (description) front.description = description;\n if (inReplyTo) front.in_reply_to = inReplyTo;\n Object.assign(front, passthrough);\n // Explicit frontmatter flags win; otherwise selected syndication targets set\n // the POSSE pickup flag.\n for (const t of SYNDICATION_TARGETS) {\n if (parsed.syndicateTo.includes(t.uid) && front[t.field] === undefined) {\n front[t.field] = false;\n }\n }\n if (tags && tags.length) front.tags = tags.map((t: string) => String(t).toLowerCase());\n if (fm.published !== undefined) front.published = fm.published;\n\n const fileContent = `---\\n${yaml.dump(front)}---\\n\\n${finalBody}\\n`;\n const path = `${category}/_posts/${day}-${slug}.md`;\n await commitFile(path, textToBase64(fileContent), `new(usr): Post \"${title}\" via micropub`);\n\n const location = `${SITE_URL}/${category}/${slug}`;\n c.header(\"Location\", location);\n return c.body(null, 201);\n});\n\n// IndieAuth authorization endpoint: approval form. The password gate is the\n// identity check — this val is its own identity provider, so there is no\n// third-party login to delegate to.\napp.get(\"/auth\", (c) => {\n const q = c.req.query();\n const hidden = [\n \"client_id\",\n \"redirect_uri\",\n \"state\",\n \"scope\",\n \"code_challenge\",\n \"code_challenge_method\",\n \"me\",\n \"response_type\",\n ]\n .map((k) => ``)\n .join(\"\\n\");\n return c.html(`\nAuthorize\n\n

Authorize app

${escapeHtml(q.client_id || \"unknown app\")} is requesting\nscope ${escapeHtml(q.scope || \"create\")}.

Diff · v6