{post.title}
++ ID: {post.id} | Slug: {post.slug} |{" "} + {post.published ? "已发布" : "草稿"} +
+
+ 编辑
+ setPosts((p) => p.filter((x) => x.id !== post.id))} />
+
+ 加载站点配置…
+
+
+ 
+
+
+
+
+
+ {siteTitle}
+
+ {siteTitleEn}
+
+
+
+
+ );
+}
diff --git a/client/src/components/CwdComments.tsx b/client/src/components/CwdComments.tsx
new file mode 100644
index 0000000..0abf8eb
--- /dev/null
+++ b/client/src/components/CwdComments.tsx
@@ -0,0 +1,134 @@
+import { useEffect } from "react";
+import { useSiteConfig } from "../ConfigContext";
+
+declare global {
+ interface Window {
+ CWDComments?: new (opts: {
+ el: string;
+ apiBaseUrl: string;
+ postSlug: string;
+ lang?: string;
+ siteId?: string;
+ }) => { mount: () => void };
+ __cwdLikeStatusQueryPatched?: boolean;
+ }
+}
+
+/** 修正 cwd-widget 点赞 GET 使用完整 URL 导致计数为 0 的问题（沿用旧脚本逻辑） */
+function patchCwdLikeGetQuery(apiBaseNorm: string, postSlug: string): void {
+ if (window.__cwdLikeStatusQueryPatched) return;
+ window.__cwdLikeStatusQueryPatched = true;
+
+ const base = apiBaseNorm;
+ const orig = window.fetch.bind(window);
+ window.fetch = function fetchPatched(input: RequestInfo | URL, init?: RequestInit) {
+ let url =
+ typeof input === "string"
+ ? input
+ : input instanceof URL
+ ? input.toString()
+ : input.url;
+ let method = "GET";
+ if (init?.method) method = String(init.method).toUpperCase();
+ else if (typeof Request !== "undefined" && input instanceof Request) {
+ method = String(input.method || "GET").toUpperCase();
+ }
+ if (
+ url &&
+ url.indexOf(base) === 0 &&
+ url.indexOf("/api/like?") !== -1 &&
+ method === "GET"
+ ) {
+ try {
+ const u = new URL(url);
+ const ps = u.searchParams.get("post_slug") || "";
+ if (ps.indexOf("://") !== -1) {
+ u.searchParams.set("post_slug", postSlug);
+ if (typeof input === "string") {
+ input = u.toString();
+ } else if (typeof Request !== "undefined" && input instanceof Request) {
+ input = new Request(u.toString(), input);
+ } else if (input instanceof URL) {
+ input = u;
+ }
+ }
+ } catch {
+ /* ignore */
+ }
+ }
+ return orig(input as RequestInfo, init);
+ };
+}
+
+export function CwdComments({ postSlug }: { postSlug: string }) {
+ const { cwdApiBase, cwdSiteId } = useSiteConfig();
+
+ useEffect(() => {
+ const apiNorm = (cwdApiBase || "").replace(/\/$/, "");
+ patchCwdLikeGetQuery(apiNorm, postSlug);
+
+ function loadScript(src: string): Promise
+ setToken(e.target.value)}
+ onKeyDown={(e) => {
+ if (e.key === "Enter") {
+ e.preventDefault();
+ submit();
+ }
+ }}
+ />
+
+
+
+ + 评论 +
+ +加载中…
'; + let cancelled = false; + (async () => { + try { + await renderMarkdownInto(el, markdown); + if (!cancelled) initPostToc(el); + } catch { + if (!cancelled) { + el.innerHTML = "渲染失败。
"; + el.classList.remove("markdown-pending"); + } + } + })(); + return () => { + cancelled = true; + teardownPostTocUi(); + }; + }, [markdown]); + + return ; +} diff --git a/client/src/lib/markdown.ts b/client/src/lib/markdown.ts new file mode 100644 index 0000000..afd0762 --- /dev/null +++ b/client/src/lib/markdown.ts @@ -0,0 +1,73 @@ +import { marked } from "marked"; +import markedKatex from "marked-katex-extension"; +import hljs from "highlight.js"; + +marked.use( + markedKatex({ + throwOnError: false, + nonStandard: true + }) +); +marked.setOptions({ gfm: true, breaks: true }); + +function decodeHtmlEntities(str: string): string { + return String(str) + .replace(/ /g, "\u00a0") + .replace(/&/g, "&") + .replace(/</g, "<") + .replace(/>/g, ">") + .replace(/"/g, '"') + .replace(/'/g, "'") + .replace(/&#(\d+);/g, (_, n) => { + const code = Number(n); + return code >= 0 && code <= 0x10ffff ? String.fromCharCode(code) : ""; + }) + .replace(/&#x([0-9a-fA-F]+);/g, (_, h) => { + const code = parseInt(h, 16); + return code >= 0 && code <= 0x10ffff ? String.fromCharCode(code) : ""; + }); +} + +function escapeHtml(s: string): string { + return String(s) + .replace(/&/g, "&") + .replace(//g, ">") + .replace(/"/g, """) + .replace(/'/g, "'"); +} + +function mermaidFencedToDiv(html: string): string { + return html.replace( + /([\s\S]*?)<\/code><\/pre>/gi,
+ (_, inner: string) => {
+ const raw = decodeHtmlEntities(inner);
+ return `${escapeHtml(raw)}`;
+ }
+ );
+}
+
+/** 将 Markdown 渲染进元素（含 KaTeX、高亮、Mermaid） */
+export async function renderMarkdownInto(
+ el: HTMLElement,
+ markdown: string
+): Promise {
+ let html = marked.parse(markdown, { async: false }) as string;
+ if (typeof html !== "string") html = "";
+ html = mermaidFencedToDiv(html);
+ el.innerHTML = html;
+ el.classList.remove("markdown-pending");
+ el.querySelectorAll("pre code").forEach((block) => {
+ try {
+ hljs.highlightElement(block as HTMLElement);
+ } catch {
+ /* ignore */
+ }
+ });
+ const mNodes = el.querySelectorAll(".mermaid");
+ if (mNodes.length) {
+ const mermaid = (await import("mermaid")).default;
+ mermaid.initialize({ startOnLoad: false, theme: "neutral" });
+ await mermaid.run({ nodes: [...mNodes] as HTMLElement[] });
+ }
+}
diff --git a/client/src/lib/postToc.ts b/client/src/lib/postToc.ts
new file mode 100644
index 0000000..fc1845c
--- /dev/null
+++ b/client/src/lib/postToc.ts
@@ -0,0 +1,246 @@
+/**
+ * 文章目录（由旧 post-toc.js 迁移）
+ */
+const HEADING_SEL = "h2, h3, h4";
+
+function headingText(h: Element): string {
+ return (h.textContent || "").replace(/\s+/g, " ").trim();
+}
+
+function makeHeadingIds(headings: Element[]): void {
+ const used = new Set();
+ headings.forEach((h) => {
+ if (h.id && !used.has(h.id)) {
+ used.add(h.id);
+ return;
+ }
+ const raw = headingText(h);
+ let base =
+ raw
+ .toLowerCase()
+ .replace(/\s+/g, "-")
+ .replace(/[^a-z0-9\u2e80-\u9fff-]/gi, "-")
+ .replace(/-+/g, "-")
+ .replace(/^-|-$/g, "") || "section";
+ let id = base;
+ let n = 0;
+ while (used.has(id) || document.getElementById(id)) id = `${base}-${++n}`;
+ h.id = id;
+ used.add(id);
+ });
+}
+
+function buildTocOl(headings: Element[]) {
+ const ol = document.createElement("ol");
+ ol.className = "toc-tree";
+ const links: HTMLAnchorElement[] = [];
+ const path: { level: number; li: HTMLLIElement }[] = [];
+
+ for (const h of headings) {
+ const level = parseInt(h.tagName[1], 10);
+ if (level < 2 || level > 6) continue;
+
+ const li = document.createElement("li");
+ li.className = "toc-item";
+ const a = document.createElement("a");
+ a.className = "toc-link";
+ a.href = "#" + h.id;
+ a.textContent = headingText(h);
+ a.dataset.targetId = h.id;
+ li.appendChild(a);
+ links.push(a);
+
+ while (path.length && path[path.length - 1].level >= level) path.pop();
+
+ if (path.length === 0) {
+ ol.appendChild(li);
+ } else {
+ const parentLi = path[path.length - 1].li;
+ let sub = parentLi.querySelector(":scope > ol.toc-sub");
+ if (!sub) {
+ sub = document.createElement("ol");
+ sub.className = "toc-sub";
+ parentLi.appendChild(sub);
+ }
+ sub.appendChild(li);
+ }
+ path.push({ level, li });
+ }
+
+ return { ol, links };
+}
+
+function setActive(
+ linkGroups: HTMLAnchorElement[][],
+ activeId: string | null
+): void {
+ for (const links of linkGroups) {
+ for (const a of links) {
+ const on = a.dataset.targetId === activeId;
+ a.classList.toggle("toc-link--active", !!on);
+ }
+ }
+}
+
+function bindScrollSpy(
+ headings: Element[],
+ linkGroups: HTMLAnchorElement[][],
+ desktopAside: HTMLElement | null,
+ mobileFab: HTMLElement | null,
+ scope: Element | null | undefined
+): void {
+ const OFFSET = 100;
+
+ function update() {
+ const inArticle = scope ? scope.getBoundingClientRect().bottom > 120 : true;
+ if (desktopAside)
+ desktopAside.classList.toggle("post-toc--hidden", !inArticle);
+ if (mobileFab) mobileFab.classList.toggle("toc-fab--hidden", !inArticle);
+
+ const y = window.scrollY + OFFSET;
+ let current: string | null = headings[0]?.id || null;
+ for (const h of headings) {
+ if (h.getBoundingClientRect().top + window.scrollY <= y)
+ current = h.id || null;
+ }
+ if (current) setActive(linkGroups, current);
+ }
+
+ let ticking = false;
+ function onScroll() {
+ if (ticking) return;
+ ticking = true;
+ requestAnimationFrame(() => {
+ update();
+ ticking = false;
+ });
+ }
+
+ window.addEventListener("scroll", onScroll, { passive: true });
+ window.addEventListener("resize", onScroll, { passive: true });
+ update();
+}
+
+function bindTocLinks(
+ container: HTMLElement,
+ onNavigate?: (() => void) | null
+): void {
+ container.addEventListener("click", (e) => {
+ const t = e.target as HTMLElement | null;
+ const a = t?.closest("a.toc-link") as HTMLAnchorElement | null;
+ if (!a) return;
+ const id = a.getAttribute("href")?.slice(1);
+ if (!id) return;
+ const target = document.getElementById(id);
+ if (target) {
+ e.preventDefault();
+ target.scrollIntoView({ behavior: "smooth", block: "start" });
+ history.replaceState(null, "", "#" + id);
+ onNavigate?.();
+ }
+ });
+}
+
+function initDesktop(
+ aside: HTMLElement,
+ nav: HTMLElement,
+ headings: Element[]
+): HTMLAnchorElement[] {
+ const { ol, links } = buildTocOl(headings);
+ nav.innerHTML = "";
+ nav.appendChild(ol);
+ aside.hidden = false;
+ bindTocLinks(nav, null);
+ return links;
+}
+
+function initMobile(headings: Element[]) {
+ if (document.getElementById("toc-fab")) return { links: [] as HTMLAnchorElement[], fab: null as HTMLElement | null };
+
+ const { ol, links } = buildTocOl(headings);
+
+ const panel = document.createElement("div");
+ panel.id = "toc-panel";
+ panel.setAttribute("aria-label", "文章目录");
+ panel.setAttribute("role", "navigation");
+ const panelTitle = document.createElement("p");
+ panelTitle.className = "toc-panel__title";
+ panelTitle.textContent = "目录";
+ panel.appendChild(panelTitle);
+ panel.appendChild(ol);
+ document.body.appendChild(panel);
+
+ const fab = document.createElement("button");
+ fab.id = "toc-fab";
+ fab.type = "button";
+ fab.setAttribute("aria-label", "打开文章目录");
+ fab.setAttribute("aria-controls", "toc-panel");
+ fab.setAttribute("aria-expanded", "false");
+ fab.innerHTML = `
+ `;
+ document.body.appendChild(fab);
+
+ function openPanel() {
+ panel.classList.add("toc-panel--open");
+ fab.setAttribute("aria-expanded", "true");
+ fab.setAttribute("aria-label", "关闭文章目录");
+ fab.classList.add("toc-fab--open");
+ }
+ function closePanel() {
+ panel.classList.remove("toc-panel--open");
+ fab.setAttribute("aria-expanded", "false");
+ fab.setAttribute("aria-label", "打开文章目录");
+ fab.classList.remove("toc-fab--open");
+ }
+
+ fab.addEventListener("click", () => {
+ panel.classList.contains("toc-panel--open") ? closePanel() : openPanel();
+ });
+
+ document.addEventListener("keydown", (e) => {
+ if (e.key === "Escape") closePanel();
+ });
+
+ bindTocLinks(panel, closePanel);
+
+ return { links, fab };
+}
+
+export function teardownPostTocUi(): void {
+ document.getElementById("toc-fab")?.remove();
+ document.getElementById("toc-panel")?.remove();
+}
+
+export function initPostToc(markdownBody: HTMLElement | null): void {
+ const aside = document.getElementById("post-toc");
+ const nav = document.getElementById("post-toc-nav");
+ if (!markdownBody) return;
+
+ const headings = [...markdownBody.querySelectorAll(HEADING_SEL)];
+ if (headings.length === 0) {
+ if (aside) aside.hidden = true;
+ return;
+ }
+
+ makeHeadingIds(headings);
+ const scope = markdownBody.closest(".post-with-toc");
+
+ let desktopLinks: HTMLAnchorElement[] = [];
+ if (aside && nav) {
+ desktopLinks = initDesktop(aside, nav, headings);
+ }
+
+ const { links: mobileLinks, fab: mobileElem } = initMobile(headings);
+
+ const fab = mobileElem || document.getElementById("toc-fab");
+ bindScrollSpy(headings, [desktopLinks, mobileLinks], aside, fab, scope);
+
+ if (location.hash.length > 1) {
+ const id = decodeURIComponent(location.hash.slice(1));
+ if (headings.some((h) => h.id === id)) {
+ setActive([desktopLinks, mobileLinks], id);
+ }
+ }
+}
diff --git a/utils.js b/client/src/lib/text.ts
similarity index 50%
rename from utils.js
rename to client/src/lib/text.ts
index d7fd3d0..d1ea2c7 100644
--- a/utils.js
+++ b/client/src/lib/text.ts
@@ -1,37 +1,4 @@
-export function cleanText(value) {
- return String(value ?? "").trim();
-}
-
-export function isTruthy(value) {
- return value === true || value === "true" || value === "1" || value === 1 || value === "on" || value === "yes";
-}
-
-export function escapeHtml(value) {
- return String(value ?? "")
- .replace(/&/g, "&")
- .replace(//g, ">")
- .replace(/"/g, """)
- .replace(/'/g, "'");
-}
-
-export function escapeAttr(value) {
- return escapeHtml(value).replace(/`/g, "`");
-}
-
-export function formatDateTime(value) {
- if (!value) return "";
- const date = new Date(value);
- if (Number.isNaN(date.getTime())) return escapeHtml(value);
- const yyyy = date.getFullYear();
- const mm = String(date.getMonth() + 1).padStart(2, "0");
- const dd = String(date.getDate()).padStart(2, "0");
- const hh = String(date.getHours()).padStart(2, "0");
- const mi = String(date.getMinutes()).padStart(2, "0");
- return `${yyyy}-${mm}-${dd} ${hh}:${mi}`;
-}
-
-export function stripMarkdown(text) {
+export function stripMarkdown(text: unknown): string {
return String(text ?? "")
.replace(/```[\s\S]*?```/g, " ")
.replace(/\$\$[\s\S]*?\$\$/g, " ")
@@ -47,6 +14,14 @@ export function stripMarkdown(text) {
.trim();
}
-export function b64EncodeUtf8(str) {
- return btoa(unescape(encodeURIComponent(str)));
+export function formatDateTime(value: unknown): string {
+ if (!value) return "";
+ const date = new Date(String(value));
+ if (Number.isNaN(date.getTime())) return String(value);
+ const yyyy = date.getFullYear();
+ const mm = String(date.getMonth() + 1).padStart(2, "0");
+ const dd = String(date.getDate()).padStart(2, "0");
+ const hh = String(date.getHours()).padStart(2, "0");
+ const mi = String(date.getMinutes()).padStart(2, "0");
+ return `${yyyy}-${mm}-${dd} ${hh}:${mi}`;
}
diff --git a/client/src/main.tsx b/client/src/main.tsx
new file mode 100644
index 0000000..4835fb3
--- /dev/null
+++ b/client/src/main.tsx
@@ -0,0 +1,11 @@
+import { StrictMode } from "react";
+import { createRoot } from "react-dom/client";
+import { App } from "./App";
+import "./styles/app.css";
+import "./styles/markdown.css";
+
+createRoot(document.getElementById("root")!).render(
+
+
+);
diff --git a/client/src/pages/Admin.tsx b/client/src/pages/Admin.tsx
new file mode 100644
index 0000000..3045d13
--- /dev/null
+++ b/client/src/pages/Admin.tsx
@@ -0,0 +1,234 @@
+import { FormEvent, useEffect, useState } from "react";
+import { Link, useNavigate, useParams, useSearchParams } from "react-router-dom";
+import {
+ deletePostApi,
+ fetchPost,
+ fetchPosts,
+ savePost,
+ type Post
+} from "../api";
+import { useSiteConfig } from "../ConfigContext";
+
+export function AdminDashboard() {
+ const { siteTitle } = useSiteConfig();
+ const [q, setQ] = useState("");
+ const [inputQ, setInputQ] = useState("");
+ const [posts, setPosts] = useState([]);
+
+ useEffect(() => {
+ document.title = `后台 - ${siteTitle}`;
+ }, [siteTitle]);
+
+ useEffect(() => {
+ const id = window.setTimeout(() => setQ(inputQ.trim()), 300);
+ return () => clearTimeout(id);
+ }, [inputQ]);
+
+ useEffect(() => {
+ let cancelled = false;
+ (async () => {
+ try {
+ const list = await fetchPosts(q || undefined, {
+ credentials: "include"
+ });
+ if (!cancelled) setPosts(list);
+ } catch {
+ if (!cancelled) setPosts([]);
+ }
+ })();
+ return () => {
+ cancelled = true;
+ };
+ }, [q]);
+
+ return (
+ <>
+
+ 返回
+
+ 后台
+
+ 新建文章
+
+
+ 文章列表
+
+ {posts.length ? (
+ posts.map((post) => (
+
+
+ ))
+ ) : (
+ 没有找到文章。
+ )}
+
+
+ );
+}
+
+function DeleteButton({
+ postId,
+ onDone
+}: {
+ postId: number;
+ onDone: () => void;
+}) {
+ return (
+
+ );
+}
+
+export function AdminEditor() {
+ const { id: idParam } = useParams();
+ const [search] = useSearchParams();
+ const navigate = useNavigate();
+ const { siteTitle } = useSiteConfig();
+ const id = idParam ? Number(idParam) : Number(search.get("id") || "") || null;
+
+ const [title, setTitle] = useState("");
+ const [slug, setSlug] = useState("");
+ const [excerpt, setExcerpt] = useState("");
+ const [content, setContent] = useState("");
+ const [published, setPublished] = useState(true);
+
+ useEffect(() => {
+ document.title = `后台 - ${siteTitle}`;
+ }, [siteTitle]);
+
+ useEffect(() => {
+ if (!id) {
+ setTitle("");
+ setSlug("");
+ setExcerpt("");
+ setContent("");
+ setPublished(true);
+ return;
+ }
+ let cancelled = false;
+ (async () => {
+ try {
+ const post = await fetchPost(String(id), false, {
+ credentials: "include"
+ });
+ if (cancelled) return;
+ setTitle(post.title);
+ setSlug(post.slug);
+ setExcerpt(post.excerpt || "");
+ setContent(post.content || "");
+ setPublished(!!post.published);
+ } catch {
+ if (!cancelled) alert("加载文章失败");
+ }
+ })();
+ return () => {
+ cancelled = true;
+ };
+ }, [id]);
+
+ async function onSubmit(e: FormEvent) {
+ e.preventDefault();
+ try {
+ const payload = {
+ title,
+ slug,
+ excerpt,
+ content,
+ published: published ? 1 : 0,
+ id: id || undefined
+ };
+ const saved = await savePost(payload, id);
+ navigate(`/admin/edit/${saved.id}?saved=1`, { replace: true });
+ } catch (er) {
+ alert(er instanceof Error ? er.message : "保存失败");
+ }
+ }
+
+ return (
+ <>
+
+ 返回后台
+
+ {id ? `编辑 #${id}` : "新建文章"}
+
-
-
-
-
-
- 文章列表
-
- ${posts.length ? posts.map(renderAdminCard).join("") : "没有找到文章。
"}
-
- `, env));
-}
-
-async function handleAdminSave(request, env, url) {
- const auth = await requireAdmin(request, env);
- if (auth) return auth;
-
- const data = await readBody(request);
- const rawId = data.id ? Number(data.id) : null;
- const id = Number.isFinite(rawId) && rawId > 0 ? rawId : null;
- const title = cleanText(data.title);
- const content = cleanText(data.content);
- const excerpt = cleanText(data.excerpt);
- const slugBase = cleanText(data.slug) || title;
- const published = isTruthy(data.published) ? 1 : 0;
-
- if (!title || !content) {
- return htmlResponse(renderLayout("表单错误", `
- 标题和内容不能为空
-
- `, env), 400);
- }
-
- const slug = await uniqueSlug(env.DB, slugify(slugBase), id);
- const now = new Date().toISOString();
-
- if (id) {
- const exists = await getPostById(env.DB, id);
- if (!exists) return notFoundPage(env);
- await env.DB.prepare(`
- UPDATE posts
- SET title = ?, slug = ?, excerpt = ?, content = ?, published = ?, updated_at = ?
- WHERE id = ?
- `).bind(title, slug, excerpt, content, published, now, id).run();
- } else {
- const result = await env.DB.prepare(`
- INSERT INTO posts (title, slug, excerpt, content, published, created_at, updated_at)
- VALUES (?, ?, ?, ?, ?, ?, ?)
- `).bind(title, slug, excerpt, content, published, now, now).run();
- return Response.redirect(new URL(`/admin?id=${result.meta.last_row_id}&saved=1`, url), 303);
- }
-
- return Response.redirect(new URL(`/admin?id=${id}&saved=1`, url), 303);
-}
-
-async function handleAdminDelete(request, env, url) {
- const auth = await requireAdmin(request, env);
- if (auth) return auth;
-
- const data = await readBody(request);
- const id = Number(data.id);
- if (!Number.isFinite(id) || id <= 0) {
- return htmlResponse(renderLayout("表单错误", `
- 无效的文章 ID
-
- `, env), 400);
- }
-
- await env.DB.prepare("DELETE FROM posts WHERE id = ?").bind(id).run();
- return Response.redirect(new URL(`/admin?deleted=1`, url), 303);
-}
-
-async function handleAdminSession(request, env) {
- const password = cleanText(env.ADMIN_PASSWORD);
- if (!password) {
- return jsonResponse({ ok: false, error: "not_configured" }, 503);
- }
-
- const data = await readBody(request);
- const token = cleanText(data.token);
- if (token !== password) {
- return jsonResponse({ ok: false, error: "invalid" }, 401);
- }
-
- const value = await adminSessionCookieValue(env);
- const maxAge = 60 * 60 * 24 * 7;
- const secure = new URL(request.url).protocol === "https:";
- const parts = [`sb_admin=${value}`, "Path=/", "HttpOnly", "SameSite=Lax", `Max-Age=${maxAge}`];
- if (secure) parts.push("Secure");
-
- return jsonResponse({ ok: true }, 200, {
- "Set-Cookie": parts.join("; ")
- });
-}
-
-async function handleApiList(env, url) {
- const q = (url.searchParams.get("q") || "").trim();
- const posts = await listPosts(env.DB, { publishedOnly: false, q });
- return jsonResponse({ ok: true, posts });
-}
-
-async function handleApiRead(env, idOrSlug) {
- const post = await readPost(env.DB, idOrSlug);
- if (!post) return jsonResponse({ ok: false, error: "Not found" }, 404);
- return jsonResponse({ ok: true, post });
-}
-
-async function handleApiCreate(request, env) {
- const auth = await requireAdmin(request, env);
- if (auth) return auth;
-
- const data = await readBody(request);
- const created = await createOrUpdatePost(env.DB, data, null);
- return jsonResponse({ ok: true, post: created }, 201);
-}
-
-async function handleApiUpdate(request, env, idOrSlug) {
- const auth = await requireAdmin(request, env);
- if (auth) return auth;
-
- const data = await readBody(request);
- const existing = await readPost(env.DB, idOrSlug);
- if (!existing) return jsonResponse({ ok: false, error: "Not found" }, 404);
- const updated = await createOrUpdatePost(env.DB, data, existing.id);
- return jsonResponse({ ok: true, post: updated });
-}
-
-async function handleApiDelete(request, env, idOrSlug) {
- const auth = await requireAdmin(request, env);
- if (auth) return auth;
-
- const post = await readPost(env.DB, idOrSlug);
- if (!post) return jsonResponse({ ok: false, error: "Not found" }, 404);
- await env.DB.prepare("DELETE FROM posts WHERE id = ?").bind(post.id).run();
- return jsonResponse({ ok: true, deleted: post.id });
-}
-
-async function createOrUpdatePost(db, data, currentId) {
- const rawId = currentId ? Number(currentId) : null;
- const id = Number.isFinite(rawId) && rawId > 0 ? rawId : null;
- const title = cleanText(data.title);
- const content = cleanText(data.content);
- const excerpt = cleanText(data.excerpt);
- const slugBase = cleanText(data.slug) || title;
- const published = isTruthy(data.published) ? 1 : 0;
-
- if (!title || !content) {
- throw new Error("title 和 content 不能为空");
- }
-
- const slug = await uniqueSlug(db, slugify(slugBase), id);
- const now = new Date().toISOString();
-
- if (id) {
- await db.prepare(`
- UPDATE posts
- SET title = ?, slug = ?, excerpt = ?, content = ?, published = ?, updated_at = ?
- WHERE id = ?
- `).bind(title, slug, excerpt, content, published, now, id).run();
- return await getPostById(db, id);
- }
-
- const result = await db.prepare(`
- INSERT INTO posts (title, slug, excerpt, content, published, created_at, updated_at)
- VALUES (?, ?, ?, ?, ?, ?, ?)
- `).bind(title, slug, excerpt, content, published, now, now).run();
- return await getPostById(db, result.meta.last_row_id);
-}
-
-async function readPost(db, idOrSlug) {
- if (!idOrSlug) return null;
- const trimmed = decodeURIComponent(String(idOrSlug)).trim();
- if (/^\d+$/.test(trimmed)) {
- return await getPostById(db, Number(trimmed));
- }
- return await db.prepare("SELECT * FROM posts WHERE slug = ? LIMIT 1").bind(trimmed).first();
-}
-
-async function getPostById(db, id) {
- return await db.prepare("SELECT * FROM posts WHERE id = ? LIMIT 1").bind(Number(id)).first();
-}
-
-async function listPosts(db, { publishedOnly = true, q = "" } = {}) {
- const params = [];
- const where = [];
- if (publishedOnly) where.push("published = 1");
- if (q) {
- where.push("(title LIKE ? OR slug LIKE ? OR excerpt LIKE ? OR content LIKE ?)");
- const like = `%${q}%`;
- params.push(like, like, like, like);
- }
- const sql = `
- SELECT * FROM posts
- ${where.length ? `WHERE ${where.join(" AND ")}` : ""}
- ORDER BY published DESC, updated_at DESC, id DESC
- `;
- const statement = db.prepare(sql);
- const { results } = params.length ? await statement.bind(...params).all() : await statement.all();
- return results || [];
-}
-
-async function uniqueSlug(db, baseSlug, currentId) {
- let slug = baseSlug || "post";
- let suffix = 2;
-
- while (true) {
- const existing = await db.prepare("SELECT id FROM posts WHERE slug = ? LIMIT 1").bind(slug).first();
- if (!existing || Number(existing.id) === Number(currentId)) return slug;
- slug = `${baseSlug || "post"}-${suffix++}`;
- }
-}
-
-function slugify(value) {
- const raw = cleanText(value);
- const slug = raw
- .normalize("NFKD")
- .replace(/[\u0300-\u036f]/g, "")
- .replace(/[^\p{L}\p{N}]+/gu, "-")
- .replace(/^-+|-+$/g, "")
- .replace(/-+/g, "-")
- .toLowerCase();
- return slug || "post";
-}
-function normalizePath(pathname) {
- if (pathname === "/") return "/";
- return pathname.replace(/\/+$/, "");
-}
-
-function htmlResponse(html, status = 200, headers = {}) {
- return new Response(html, {
- status,
- headers: {
- "content-type": "text/html; charset=UTF-8",
- ...headers
- }
- });
-}
-
-function jsonResponse(data, status = 200, extraHeaders = {}) {
- return new Response(JSON.stringify(data, null, 2), {
- status,
- headers: {
- "content-type": "application/json; charset=UTF-8",
- ...corsHeaders(),
- ...extraHeaders
- }
- });
-}
-
-function notFoundPage(env) {
- return htmlResponse(renderLayout("404", `
- 404
- 页面不存在。
-
- `, env), 404);
-}
-
-function corsHeaders() {
- return {
- "access-control-allow-origin": "*",
- "access-control-allow-methods": "GET, POST, PUT, DELETE, OPTIONS",
- "access-control-allow-headers": "*"
- };
-}
-
-async function requireAdmin(request, env) {
- const password = cleanText(env.ADMIN_PASSWORD);
- if (!password) return null;
-
- const cookies = parseCookie(request.headers.get("Cookie") || "");
- const expected = await adminSessionCookieValue(env);
- if (cookies.sb_admin && cookies.sb_admin === expected) {
- return null;
- }
-
- const header = request.headers.get("Authorization") || "";
- if (header.startsWith("Basic ")) {
- try {
- const decoded = atob(header.slice(6));
- const split = decoded.indexOf(":");
- const inputPassword = split >= 0 ? decoded.slice(split + 1) : "";
- if (inputPassword === password) return null;
- } catch {
- // ignore
- }
- }
-
- return unauthorized();
-}
-
-function parseCookie(header) {
- const out = {};
- if (!header) return out;
- for (const part of header.split(";")) {
- const idx = part.indexOf("=");
- if (idx === -1) continue;
- const k = part.slice(0, idx).trim();
- const v = part.slice(idx + 1).trim();
- try {
- out[k] = decodeURIComponent(v);
- } catch {
- out[k] = v;
- }
- }
- return out;
-}
-
-async function adminSessionCookieValue(env) {
- const password = cleanText(env.ADMIN_PASSWORD);
- const enc = new TextEncoder();
- const data = enc.encode(`${password}\0sproutblog_admin_v1`);
- const hash = await crypto.subtle.digest("SHA-256", data);
- return [...new Uint8Array(hash)].map((b) => b.toString(16).padStart(2, "0")).join("");
-}
-
-function unauthorized() {
- return new Response("Authentication required", {
- status: 401,
- headers: {
- "content-type": "text/plain; charset=UTF-8"
- }
- });
-}
-
-async function readBody(request) {
- const type = request.headers.get("content-type") || "";
- if (type.includes("application/json")) {
- return await request.json();
- }
-
- if (type.includes("multipart/form-data") || type.includes("application/x-www-form-urlencoded")) {
- const form = await request.formData();
- const data = {};
- for (const [key, value] of form.entries()) {
- data[key] = value;
- }
- return data;
- }
-
- return {};
-}
-function blankPost() {
- return {
- id: "",
- title: "",
- slug: "",
- excerpt: "",
- content: "",
- published: 1
- };
-}
-
diff --git a/src/api/router.ts b/src/api/router.ts
new file mode 100644
index 0000000..f2e1c06
--- /dev/null
+++ b/src/api/router.ts
@@ -0,0 +1,56 @@
+import { jsonResponse, corsHeaders } from "../lib/http";
+import { normalizePath } from "../lib/slug";
+import { handleConfigGet } from "./routes/config";
+import { handleAdminSessionPost } from "./routes/admin-session";
+import {
+ handlePostsCollection,
+ handlePostItem
+} from "./routes/posts";
+
+export async function handleApi(request: Request, env: Env): Promise {
+ if (!env.DB) {
+ return jsonResponse({ ok: false, error: "db_not_configured" }, 500);
+ }
+
+ if (request.method === "OPTIONS") {
+ return new Response(null, { headers: corsHeaders() });
+ }
+
+ const url = new URL(request.url);
+ const path = normalizePath(url.pathname);
+ const segments = path.split("/").filter(Boolean);
+
+ if (segments[0] !== "api") {
+ return jsonResponse({ ok: false, error: "Not found" }, 404);
+ }
+
+ const parts = segments.slice(1);
+
+ if (
+ parts[0] === "config" &&
+ parts.length === 1 &&
+ request.method === "GET"
+ ) {
+ return handleConfigGet(env);
+ }
+
+ if (
+ parts[0] === "admin" &&
+ parts[1] === "session" &&
+ parts.length === 2 &&
+ request.method === "POST"
+ ) {
+ return handleAdminSessionPost(request, env);
+ }
+
+ if (parts[0] === "posts") {
+ if (parts.length === 1) {
+ return handlePostsCollection(request, env, url);
+ }
+ if (parts.length === 2) {
+ return handlePostItem(request, env, url, parts[1]);
+ }
+ }
+
+ return jsonResponse({ ok: false, error: "Not found" }, 404);
+}
diff --git a/src/api/routes/admin-session.ts b/src/api/routes/admin-session.ts
new file mode 100644
index 0000000..b3ef30d
--- /dev/null
+++ b/src/api/routes/admin-session.ts
@@ -0,0 +1,29 @@
+import { jsonResponse, readBody, getAdminPassword } from "../../lib/http";
+import { cleanText } from "../../lib/text";
+import { adminSessionCookieValue } from "../../lib/auth";
+
+export async function handleAdminSessionPost(
+ request: Request,
+ env: Env
+): Promise {
+ const password = getAdminPassword(env);
+ if (!password) {
+ return jsonResponse({ ok: false, error: "not_configured" }, 503);
+ }
+
+ const data = await readBody(request);
+ const token = cleanText(data.token);
+ if (token !== password) {
+ return jsonResponse({ ok: false, error: "invalid" }, 401);
+ }
+
+ const value = await adminSessionCookieValue(env);
+ const maxAge = 60 * 60 * 24 * 7;
+ const secure = new URL(request.url).protocol === "https:";
+ const parts = [`sb_admin=${value}`, "Path=/", "HttpOnly", "SameSite=Lax", `Max-Age=${maxAge}`];
+ if (secure) parts.push("Secure");
+
+ return jsonResponse({ ok: true }, 200, {
+ "Set-Cookie": parts.join("; ")
+ });
+}
diff --git a/src/api/routes/config.ts b/src/api/routes/config.ts
new file mode 100644
index 0000000..66c4ae2
--- /dev/null
+++ b/src/api/routes/config.ts
@@ -0,0 +1,17 @@
+import { jsonResponse } from "../../lib/http";
+import { cleanText } from "../../lib/text";
+
+export function handleConfigGet(env: Env): Response {
+ const cwdApiBase =
+ cleanText(env.CWD_API_BASE) || "https://cwd.api.smyhub.com";
+ const cwdSiteId = cleanText(env.CWD_SITE_ID) || "";
+ return jsonResponse({
+ ok: true,
+ config: {
+ siteTitle: cleanText(env.SITE_TITLE) || "萌芽小窝",
+ siteTitleEn: cleanText(env.SITE_TITLE_EN) || "SproutBlog",
+ cwdApiBase,
+ cwdSiteId: cwdSiteId || undefined
+ }
+ });
+}
diff --git a/src/api/routes/posts.ts b/src/api/routes/posts.ts
new file mode 100644
index 0000000..654d7ed
--- /dev/null
+++ b/src/api/routes/posts.ts
@@ -0,0 +1,113 @@
+import { jsonResponse, readBody } from "../../lib/http";
+import { requireAdmin, canAccessDrafts, hasValidAdminSession } from "../../lib/auth";
+import {
+ listPosts,
+ readPost,
+ createOrUpdatePost,
+ bumpViewCount,
+ deletePost,
+ type PostRow
+} from "../../db/posts";
+
+function numPublished(p: PostRow): number {
+ return Number(p.published) ? 1 : 0;
+}
+
+async function listForRequest(
+ request: Request,
+ env: Env,
+ url: URL
+): Promise {
+ const q = (url.searchParams.get("q") || "").trim();
+ const seeAll = await canAccessDrafts(request, env);
+ const publishedOnly = !seeAll;
+ const posts = await listPosts(env.DB, { publishedOnly, q });
+ return jsonResponse({ ok: true, posts });
+}
+
+export async function handlePostsCollection(
+ request: Request,
+ env: Env,
+ url: URL
+): Promise {
+ if (request.method === "GET") {
+ return listForRequest(request, env, url);
+ }
+
+ if (request.method === "POST") {
+ const denied = await requireAdmin(request, env);
+ if (denied) return denied;
+ const data = await readBody(request);
+ try {
+ const created = await createOrUpdatePost(env.DB, data, null);
+ return jsonResponse({ ok: true, post: created }, 201);
+ } catch (e) {
+ const msg = e instanceof Error ? e.message : String(e);
+ return jsonResponse({ ok: false, error: msg }, 400);
+ }
+ }
+
+ return jsonResponse({ ok: false, error: "Method not allowed" }, 405);
+}
+
+export async function handlePostItem(
+ request: Request,
+ env: Env,
+ url: URL,
+ idOrSlug: string
+): Promise {
+ const bump = url.searchParams.get("bump") === "1";
+
+ if (request.method === "GET") {
+ const post = await readPost(env.DB, idOrSlug);
+ if (!post) return jsonResponse({ ok: false, error: "Not found" }, 404);
+
+ const draftsOk = await canAccessDrafts(request, env);
+ if (!draftsOk && numPublished(post) !== 1) {
+ return jsonResponse({ ok: false, error: "Not found" }, 404);
+ }
+
+ let row = post;
+ const shouldBump =
+ bump &&
+ numPublished(post) === 1 &&
+ !(await hasValidAdminSession(request, env));
+ if (shouldBump) {
+ await bumpViewCount(env.DB, Number(post.id));
+ const refreshed = await readPost(env.DB, idOrSlug);
+ if (refreshed) row = refreshed;
+ }
+
+ return jsonResponse({ ok: true, post: row });
+ }
+
+ if (request.method === "PUT") {
+ const denied = await requireAdmin(request, env);
+ if (denied) return denied;
+ const data = await readBody(request);
+ const existing = await readPost(env.DB, idOrSlug);
+ if (!existing) return jsonResponse({ ok: false, error: "Not found" }, 404);
+ try {
+ const updated = await createOrUpdatePost(
+ env.DB,
+ data,
+ Number(existing.id)
+ );
+ return jsonResponse({ ok: true, post: updated });
+ } catch (e) {
+ const msg = e instanceof Error ? e.message : String(e);
+ return jsonResponse({ ok: false, error: msg }, 400);
+ }
+ }
+
+ if (request.method === "DELETE") {
+ const denied = await requireAdmin(request, env);
+ if (denied) return denied;
+ const post = await readPost(env.DB, idOrSlug);
+ if (!post) return jsonResponse({ ok: false, error: "Not found" }, 404);
+ await deletePost(env.DB, Number(post.id));
+ return jsonResponse({ ok: true, deleted: post.id });
+ }
+
+ return jsonResponse({ ok: false, error: "Method not allowed" }, 405);
+}
diff --git a/src/bindings.d.ts b/src/bindings.d.ts
new file mode 100644
index 0000000..005d59a
--- /dev/null
+++ b/src/bindings.d.ts
@@ -0,0 +1,9 @@
+interface Env {
+ DB: D1Database;
+ ASSETS: Fetcher;
+ SITE_TITLE: string;
+ SITE_TITLE_EN: string;
+ ADMIN_PASSWORD?: string;
+ CWD_API_BASE?: string;
+ CWD_SITE_ID?: string;
+}
diff --git a/src/db/posts.ts b/src/db/posts.ts
new file mode 100644
index 0000000..279676f
--- /dev/null
+++ b/src/db/posts.ts
@@ -0,0 +1,135 @@
+import { cleanText, isTruthy } from "../lib/text";
+import { slugify } from "../lib/slug";
+
+type Db = Env["DB"];
+
+export type PostRow = Record;
+
+export function blankPost(): PostRow {
+ return {
+ id: "",
+ title: "",
+ slug: "",
+ excerpt: "",
+ content: "",
+ published: 1
+ };
+}
+
+export async function getPostById(db: Db, id: number): Promise {
+ return (await db
+ .prepare("SELECT * FROM posts WHERE id = ? LIMIT 1")
+ .bind(Number(id))
+ .first()) as PostRow | null;
+}
+
+export async function readPost(db: Db, idOrSlug: string): Promise {
+ if (!idOrSlug) return null;
+ const trimmed = decodeURIComponent(String(idOrSlug)).trim();
+ if (/^\d+$/.test(trimmed)) {
+ return getPostById(db, Number(trimmed));
+ }
+ return (await db
+ .prepare("SELECT * FROM posts WHERE slug = ? LIMIT 1")
+ .bind(trimmed)
+ .first()) as PostRow | null;
+}
+
+export async function listPosts(
+ db: Db,
+ { publishedOnly = true, q = "" } = {}
+): Promise {
+ const params: string[] = [];
+ const where: string[] = [];
+ if (publishedOnly) where.push("published = 1");
+ if (q) {
+ where.push("(title LIKE ? OR slug LIKE ? OR excerpt LIKE ? OR content LIKE ?)");
+ const like = `%${q}%`;
+ params.push(like, like, like, like);
+ }
+ const sql = `
+ SELECT * FROM posts
+ ${where.length ? `WHERE ${where.join(" AND ")}` : ""}
+ ORDER BY published DESC, updated_at DESC, id DESC
+ `;
+ const statement = db.prepare(sql);
+ const { results } = params.length
+ ? await statement.bind(...params).all()
+ : await statement.all();
+ return (results || []) as PostRow[];
+}
+
+export async function uniqueSlug(
+ db: Db,
+ baseSlug: string,
+ currentId: number | null
+): Promise {
+ let slug = baseSlug || "post";
+ let suffix = 2;
+
+ while (true) {
+ const existing = (await db
+ .prepare("SELECT id FROM posts WHERE slug = ? LIMIT 1")
+ .bind(slug)
+ .first()) as { id: number } | null;
+ if (!existing || Number(existing.id) === Number(currentId)) return slug;
+ slug = `${baseSlug || "post"}-${suffix++}`;
+ }
+}
+
+export async function createOrUpdatePost(
+ db: Db,
+ data: Record,
+ currentId: number | null
+): Promise {
+ const rawId = currentId != null ? Number(currentId) : NaN;
+ const id = Number.isFinite(rawId) && rawId > 0 ? rawId : null;
+ const title = cleanText(data.title);
+ const content = cleanText(data.content);
+ const excerpt = cleanText(data.excerpt);
+ const slugBase = cleanText(data.slug) || title;
+ const published = isTruthy(data.published) ? 1 : 0;
+
+ if (!title || !content) {
+ throw new Error("title 和 content 不能为空");
+ }
+
+ const slug = await uniqueSlug(db, slugify(slugBase), id);
+ const now = new Date().toISOString();
+
+ if (id) {
+ await db
+ .prepare(`
+ UPDATE posts
+ SET title = ?, slug = ?, excerpt = ?, content = ?, published = ?, updated_at = ?
+ WHERE id = ?
+ `)
+ .bind(title, slug, excerpt, content, published, now, id)
+ .run();
+ return getPostById(db, id);
+ }
+
+ const result = await db
+ .prepare(`
+ INSERT INTO posts (title, slug, excerpt, content, published, created_at, updated_at)
+ VALUES (?, ?, ?, ?, ?, ?, ?)
+ `)
+ .bind(title, slug, excerpt, content, published, now, now)
+ .run();
+ const newId = result.meta?.last_row_id;
+ if (newId == null) return null;
+ return getPostById(db, Number(newId));
+}
+
+export async function bumpViewCount(db: Db, postId: number): Promise {
+ await db
+ .prepare(
+ "UPDATE posts SET view_count = COALESCE(view_count, 0) + 1 WHERE id = ?"
+ )
+ .bind(postId)
+ .run();
+}
+
+export async function deletePost(db: Db, id: number): Promise {
+ await db.prepare("DELETE FROM posts WHERE id = ?").bind(id).run();
+}
diff --git a/src/lib/auth.ts b/src/lib/auth.ts
new file mode 100644
index 0000000..57e4c75
--- /dev/null
+++ b/src/lib/auth.ts
@@ -0,0 +1,78 @@
+import { cleanText } from "./text";
+import { getAdminPassword, unauthorized } from "./http";
+
+export function parseCookie(header: string): Record {
+ const out: Record = {};
+ if (!header) return out;
+ for (const part of header.split(";")) {
+ const idx = part.indexOf("=");
+ if (idx === -1) continue;
+ const k = part.slice(0, idx).trim();
+ const v = part.slice(idx + 1).trim();
+ try {
+ out[k] = decodeURIComponent(v);
+ } catch {
+ out[k] = v;
+ }
+ }
+ return out;
+}
+
+export async function adminSessionCookieValue(env: Env): Promise {
+ const password = getAdminPassword(env);
+ const enc = new TextEncoder();
+ const data = enc.encode(`${password}\0sproutblog_admin_v1`);
+ const hash = await crypto.subtle.digest("SHA-256", data);
+ return [...new Uint8Array(hash)]
+ .map((b) => b.toString(16).padStart(2, "0"))
+ .join("");
+}
+
+/**
+ * 需要后台权限的接口：未配置密码则放行；否则校验 Cookie 或 Basic Auth。
+ * 返回 null 表示已通过；返回 Response 为 401。
+ */
+export async function requireAdmin(
+ request: Request,
+ env: Env
+): Promise {
+ const password = getAdminPassword(env);
+ if (!password) return null;
+
+ const cookies = parseCookie(request.headers.get("Cookie") || "");
+ const expected = await adminSessionCookieValue(env);
+ if (cookies.sb_admin && cookies.sb_admin === expected) {
+ return null;
+ }
+
+ const header = request.headers.get("Authorization") || "";
+ if (header.startsWith("Basic ")) {
+ try {
+ const decoded = atob(header.slice(6));
+ const split = decoded.indexOf(":");
+ const inputPassword = split >= 0 ? decoded.slice(split + 1) : "";
+ if (inputPassword === password) return null;
+ } catch {
+ /* ignore */
+ }
+ }
+
+ return unauthorized();
+}
+
+/** 已配置密码且当前请求具备后台凭证（Cookie / Basic） */
+export async function hasValidAdminSession(
+ request: Request,
+ env: Env
+): Promise {
+ const password = getAdminPassword(env);
+ if (!password) return false;
+ return (await requireAdmin(request, env)) === null;
+}
+
+/** 是否可列出/阅读草稿（未配置密码时保持原先「全量可见」行为） */
+export async function canAccessDrafts(request: Request, env: Env): Promise {
+ const password = getAdminPassword(env);
+ if (!password) return true;
+ return (await requireAdmin(request, env)) === null;
+}
diff --git a/src/lib/http.ts b/src/lib/http.ts
new file mode 100644
index 0000000..89c4c87
--- /dev/null
+++ b/src/lib/http.ts
@@ -0,0 +1,63 @@
+import { cleanText } from "./text";
+
+export function corsHeaders(): Record {
+ return {
+ "access-control-allow-origin": "*",
+ "access-control-allow-methods": "GET, POST, PUT, DELETE, OPTIONS",
+ "access-control-allow-headers": "*"
+ };
+}
+
+export function jsonResponse(
+ data: unknown,
+ status = 200,
+ extraHeaders: Record = {}
+): Response {
+ return new Response(JSON.stringify(data, null, 2), {
+ status,
+ headers: {
+ "content-type": "application/json; charset=UTF-8",
+ ...corsHeaders(),
+ ...extraHeaders
+ }
+ });
+}
+
+export async function readBody(request: Request): Promise> {
+ const type = request.headers.get("content-type") || "";
+ if (type.includes("application/json")) {
+ try {
+ return (await request.json()) as Record;
+ } catch {
+ return {};
+ }
+ }
+
+ if (
+ type.includes("multipart/form-data") ||
+ type.includes("application/x-www-form-urlencoded")
+ ) {
+ const form = await request.formData();
+ const data: Record = {};
+ for (const [key, value] of form.entries()) {
+ data[key] = value;
+ }
+ return data;
+ }
+
+ return {};
+}
+
+export function unauthorized(): Response {
+ return new Response("Authentication required", {
+ status: 401,
+ headers: {
+ "content-type": "text/plain; charset=UTF-8"
+ }
+ });
+}
+
+/** Basic Auth / Cookie 中的密码校验用原始字符串 */
+export function getAdminPassword(env: Pick): string {
+ return cleanText(env.ADMIN_PASSWORD);
+}
diff --git a/src/lib/slug.ts b/src/lib/slug.ts
new file mode 100644
index 0000000..3c08f1c
--- /dev/null
+++ b/src/lib/slug.ts
@@ -0,0 +1,18 @@
+import { cleanText } from "./text";
+
+export function normalizePath(pathname: string): string {
+ if (pathname === "/") return "/";
+ return pathname.replace(/\/+$/, "");
+}
+
+export function slugify(value: unknown): string {
+ const raw = cleanText(value);
+ const slug = raw
+ .normalize("NFKD")
+ .replace(/[\u0300-\u036f]/g, "")
+ .replace(/[^\p{L}\p{N}]+/gu, "-")
+ .replace(/^-+|-+$/g, "")
+ .replace(/-+/g, "-")
+ .toLowerCase();
+ return slug || "post";
+}
diff --git a/src/lib/text.ts b/src/lib/text.ts
new file mode 100644
index 0000000..762de8d
--- /dev/null
+++ b/src/lib/text.ts
@@ -0,0 +1,16 @@
+/** 文本与表单常用工具（Worker 侧） */
+
+export function cleanText(value: unknown): string {
+ return String(value ?? "").trim();
+}
+
+export function isTruthy(value: unknown): boolean {
+ return (
+ value === true ||
+ value === "true" ||
+ value === "1" ||
+ value === 1 ||
+ value === "on" ||
+ value === "yes"
+ );
+}
diff --git a/src/worker/index.ts b/src/worker/index.ts
new file mode 100644
index 0000000..b3049ba
--- /dev/null
+++ b/src/worker/index.ts
@@ -0,0 +1,15 @@
+import { handleApi } from "../api/router";
+
+export default {
+ async fetch(
+ request: Request,
+ env: Env,
+ _ctx: ExecutionContext
+ ): Promise {
+ const url = new URL(request.url);
+ if (url.pathname.startsWith("/api/")) {
+ return handleApi(request, env);
+ }
+ return env.ASSETS.fetch(request);
+ }
+};
diff --git a/tsconfig.worker.json b/tsconfig.worker.json
new file mode 100644
index 0000000..263a559
--- /dev/null
+++ b/tsconfig.worker.json
@@ -0,0 +1,13 @@
+{
+ "compilerOptions": {
+ "target": "ES2022",
+ "module": "ESNext",
+ "moduleResolution": "bundler",
+ "lib": ["ES2022"],
+ "types": ["@cloudflare/workers-types"],
+ "strict": true,
+ "skipLibCheck": true,
+ "noEmit": true
+ },
+ "include": ["src/**/*.ts", "src/**/*.d.ts"]
+}
diff --git a/worker.js b/worker.js
deleted file mode 100644
index c3a2e14..0000000
--- a/worker.js
+++ /dev/null
@@ -1,3 +0,0 @@
-import app from "./server.js";
-
-export default app;
diff --git a/wrangler.toml b/wrangler.toml
index 3b2cb98..6823be7 100644
--- a/wrangler.toml
+++ b/wrangler.toml
@@ -1,5 +1,5 @@
name = "sproutblog"
-main = "worker.js"
+main = "src/worker/index.ts"
compatibility_date = "2026-04-13"
routes = [
@@ -7,7 +7,10 @@ routes = [
]
[assets]
-directory = "./public/"
+directory = "./dist"
+binding = "ASSETS"
+not_found_handling = "single-page-application"
+run_worker_first = [ "/api/*" ]
[vars]
SITE_TITLE = "萌芽小窝"