chore(deps): bump the go-dependencies group with 2 updates

.github/FUNDING.yml

@@ -0,0 +1,4 @@
+ko_fi: shizhi
+
+custom:
+  - "https://afdian.com/a/shi-zhi"

.github/dependabot.yml

@@ -0,0 +1,46 @@
+version: 2
+updates:
+  - package-ecosystem: "npm"
+    directory: "/"
+    schedule:
+      interval: "weekly"
+    versioning-strategy: "increase"
+    groups:
+      build-tools:
+        patterns:
+          - "esbuild"
+          - "fontkit"
+          - "playwright"
+          - "sharp"
+          - "subset-font"
+          - "typescript"
+        update-types: ["minor", "patch"]
+      fonts-and-icons:
+        patterns:
+          - "@chinese-fonts/*"
+          - "@fontsource/*"
+          - "@fontsource-variable/*"
+          - "lxgw-wenkai-screen-web"
+          - "material-symbols"
+        update-types: ["minor", "patch"]
+      katex:
+        patterns: ["katex"]
+        update-types: ["minor", "patch"]
+
+  - package-ecosystem: "gomod"
+    directory: "/"
+    schedule:
+      interval: "weekly"
+    groups:
+      go-dependencies:
+        patterns: ["*"]
+        update-types: ["minor", "patch"]
+
+  - package-ecosystem: "github-actions"
+    directory: "/"
+    schedule:
+      interval: "weekly"
+    groups:
+      github-actions:
+        patterns: ["*"]
+        update-types: ["minor", "patch"]

.github/workflows/ci.yml

@@ -0,0 +1,109 @@
+name: CI
+
+on:
+  push:
+    branches:
+      - main
+  pull_request:
+
+permissions:
+  contents: read
+
+jobs:
+  check-unix:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v7
+
+      - name: Setup Node.js
+        uses: actions/setup-node@v7
+        with:
+          node-version: '24'
+
+      - name: Setup Go
+        uses: actions/setup-go@v7
+        with:
+          go-version-file: 'go.mod'
+
+      - name: Install dependencies
+        run: npm ci
+
+      - name: Install OG runtime and Chromium system dependencies
+        run: go run ./cmd/daybook setup-og --with-deps
+
+      - name: Check POSIX syntax
+        run: shellcheck -s sh scripts/install.sh
+
+      - name: Test OG rendering without root in a minimal Ubuntu image
+        run: bash scripts/test-og-user-deps.sh
+
+      - name: Run checks
+        run: ./scripts/check.sh
+
+  check-windows:
+    runs-on: windows-latest
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v7
+
+      - name: Setup Go
+        uses: actions/setup-go@v7
+        with:
+          go-version-file: 'go.mod'
+
+      - name: Build Native Binary
+        run: |
+          go build -o daybook.exe ./cmd/daybook
+          .\daybook.exe --version
+
+      - name: Verify cross-build capability (arm64)
+        run: |
+          $env:GOOS = "windows"
+          $env:GOARCH = "arm64"
+          go build -o daybook_arm64.exe ./cmd/daybook
+        shell: powershell
+
+      - name: Test Architecture Mapping (WOW64)
+        shell: powershell
+        run: |
+          $ScriptCode = Get-Content -Raw -Path scripts\install.ps1
+          $FunctionOnly = ($ScriptCode -split "# 1. Detect OS & Architecture")[0]
+
+          # Simulate WOW64 (x86 PowerShell on x64 Windows)
+          $env:PROCESSOR_ARCHITECTURE = "x86"
+          $env:PROCESSOR_ARCHITEW6432 = "AMD64"
+
+          $ArchResult = Invoke-Command -ScriptBlock ([scriptblock]::Create($FunctionOnly + "`nGet-DaybookArchitecture"))
+          if ($ArchResult -ne "amd64") {
+              throw "WOW64 Simulation failed. Expected amd64, got $ArchResult"
+          }
+
+          # Simulate ARM64
+          $env:PROCESSOR_ARCHITECTURE = "ARM64"
+          Remove-Item Env:\PROCESSOR_ARCHITEW6432 -ErrorAction SilentlyContinue
+
+          $ArchResult2 = Invoke-Command -ScriptBlock ([scriptblock]::Create($FunctionOnly + "`nGet-DaybookArchitecture"))
+          if ($ArchResult2 -ne "arm64") {
+              throw "ARM64 Simulation failed. Expected arm64, got $ArchResult2"
+          }
+
+      - name: Test Installer (PowerShell 5.1)
+        shell: powershell
+        run: |
+          $env:DAYBOOK_INSTALL_DIR = "$env:RUNNER_TEMP\daybook-test-ps5"
+          & .\scripts\install.ps1
+
+          if (-not (Test-Path "$env:DAYBOOK_INSTALL_DIR\daybook.exe")) {
+              throw "Executable not found in install dir"
+          }
+
+      - name: Test Installer (PowerShell 7)
+        shell: pwsh
+        run: |
+          $env:DAYBOOK_INSTALL_DIR = "$env:RUNNER_TEMP\daybook-test-pwsh"
+          & .\scripts\install.ps1
+
+          if (-not (Test-Path "$env:DAYBOOK_INSTALL_DIR\daybook.exe")) {
+              throw "Executable not found in install dir"
+          }

.github/workflows/release.yml

@@ -0,0 +1,108 @@
+name: Release
+
+on:
+  push:
+    tags:
+      - 'v*'
+
+jobs:
+  build-and-release:
+    name: Build and Release
+    runs-on: ubuntu-latest
+    permissions:
+      contents: write
+      actions: read
+
+    steps:
+      - name: Checkout Code
+        uses: actions/checkout@v7
+
+      - name: Require successful CI for this commit
+        env:
+          GH_TOKEN: ${{ github.token }}
+        run: |
+          successful_runs=$(gh api --method GET "repos/$GITHUB_REPOSITORY/actions/workflows/ci.yml/runs" \
+            -f head_sha="$GITHUB_SHA" -f event=push -f branch=main -f status=success \
+            --jq '.workflow_runs | length')
+          if [ "$successful_runs" -eq 0 ]; then
+            echo "::error::This release commit has no successful main-branch CI run. Wait for its CI to pass, then rerun this release workflow."
+            exit 1
+          fi
+
+      - name: Setup Node.js
+        uses: actions/setup-node@v7
+        with:
+          node-version: '24'
+          cache: 'npm'
+
+      - name: Setup Go
+        uses: actions/setup-go@v7
+        with:
+          go-version-file: 'go.mod'
+          cache: true
+
+      - name: Build Frontend Assets
+        run: |
+          npm ci
+          npm run typecheck
+          npm run build:js
+          npm run build:vendor
+
+      - name: Build Binaries
+        env:
+          CGO_ENABLED: 0
+        run: |
+          VERSION=${GITHUB_REF_NAME}
+          LDFLAGS="-s -w -X 'main.Version=daybook ${VERSION}'"
+
+          build_target() {
+            local os=$1
+            local arch=$2
+            local ext=$3
+            local outdir="release/${os}_${arch}"
+            mkdir -p "$outdir"
+            cp LICENSE "$outdir/"
+
+            local bin_name="daybook"
+            if [ "$os" = "windows" ]; then
+              bin_name="daybook.exe"
+            fi
+
+            GOOS=$os GOARCH=$arch go build -ldflags "${LDFLAGS}" -o "$outdir/$bin_name" ./cmd/daybook
+
+            cd "$outdir"
+            if [ "$ext" = "zip" ]; then
+              zip -q "../../daybook_${VERSION}_${os}_${arch}.zip" "$bin_name" LICENSE
+            else
+              tar -czf "../../daybook_${VERSION}_${os}_${arch}.tar.gz" "$bin_name" LICENSE
+            fi
+            cd ../..
+          }
+
+          # Matrix targets
+          build_target linux amd64 tar.gz
+          build_target linux arm64 tar.gz
+          build_target darwin amd64 tar.gz
+          build_target darwin arm64 tar.gz
+          build_target windows amd64 zip
+          build_target windows arm64 zip
+          build_target freebsd amd64 tar.gz
+          build_target openbsd amd64 tar.gz
+          build_target openbsd arm64 tar.gz
+          build_target netbsd amd64 tar.gz
+          build_target dragonfly amd64 tar.gz
+
+      - name: Generate Checksums
+        run: |
+          sha256sum daybook_*.tar.gz daybook_*.zip > checksums.txt
+
+      - name: Release
+        uses: softprops/action-gh-release@v3
+        with:
+          files: |
+            daybook_*.tar.gz
+            daybook_*.zip
+            checksums.txt
+            scripts/install.sh
+            scripts/install.ps1
+          generate_release_notes: true

.gitignore

@@ -0,0 +1,50 @@
+# Build output
+/public/
+/daybook
+/bin/
+/.preview/
+
+# Go generated files
+*.test
+coverage.out
+*.prof
+
+# Future search output
+/.pagefind/
+
+# Local caches
+/.cache/
+/tmp/
+/temp/
+
+# Temporary files
+*.tmp
+*.log
+
+# macOS
+.DS_Store
+
+# Obsidian
+**/.obsidian/*
+!**/.obsidian/app.json
+
+# Keep directory placeholders
+Thumbs.db
+
+# Local environment
+.env
+.env.*
+!.env.example
+/config.yaml
+
+# Editors
+.vscode/
+.idea/
+
+# Dependencies
+node_modules/
+
+# README files in subdirectories
+[Rr][Ee][Aa][Dd][Mm][Ee].*
+!/README.md
+!/readme.md

AGENTS.md

@@ -0,0 +1,49 @@
+# AGENTS.md
+
+## Project Overview
+
+`daybook` is a minimalist static blog generator for Go and HTML beginners. The project is currently in the **Maintenance and Refactoring Phase**. The architecture has been migrated to a fully standalone CLI model.
+
+## Standalone Architecture
+
+**CRITICAL**: `StatIndet/daybook` is the Daybook CLI source repository. It is **NOT** a blog vault. There is no `content/` folder, no root `daybook.yaml`, and no Cloudflare Pages Functions in this repository. 
+
+The directory structure is strictly separated into source code and embedded assets:
+
+* `assets/ts/`: First-party TypeScript source code.
+* `internal/embedded/`: The root directory for embedded templates and static assets.
+  * `internal/embedded/templates/`: Go HTML templates (`layouts/`, `pages/`, `partials/`).
+  * `internal/embedded/static/css/`: Global CSS and page-specific styles.
+  * `internal/embedded/static/js/`: **Generated** JavaScript files.
+  * `internal/embedded/static/vendor/`: **Generated** third-party runtime assets (Fonts, KaTeX).
+* `cmd/daybook/`: The CLI entry point.
+* `internal/`: Core Go application logic.
+
+### User Vaults
+The CLI operates on a user's Vault, which is an external working directory independent of this repository. A user vault contains `daybook.yaml` and `notes/`. 
+The `daybook build` command reads the current working directory as the vault and outputs to `public/`.
+
+## Development Guidelines
+
+### Frontend & Vendors
+* **Do not directly modify files in `internal/embedded/static/js/`.** Modify `assets/ts/*.ts` and run `npm run build:js`.
+* **Do not directly modify files in `internal/embedded/static/vendor/`.** npm packages in `package.json` are the single source of truth. Updates to vendors should be done by bumping npm versions and running `npm run build:vendor`.
+* Release builds will strictly rebuild vendor assets from `node_modules`.
+
+### Workflow
+When making changes, follow this pipeline:
+1. Source code changes (Go, TS, HTML, CSS).
+2. `npm run build:js` or `npm run build:vendor` if applicable.
+3. `go build` to verify compilation.
+4. Run `./scripts/check.sh` to perform integrity checks and a temporary external vault smoke test.
+
+### Protected Layout & Design
+The UI/UX is considered stable. Do not modify the existing UI layout, View Transitions, side navigation, persistent logos, or typography unless explicitly requested by the user. Ensure CSS modifications only target the specific components intended.
+
+### Cloudflare Deployment
+Cloudflare deployment is a concern of the user's vault and output deployment workflow, not this source repository. There is no longer a Cloudflare Pages Functions architecture embedded within the Daybook source tree.
+
+## Commit & PR Rules
+* Provide clean, logical commits. At the end of requested implementation work, commit completed changes in logical batches and leave the working tree clean; do not discard unrelated changes or push unless requested.
+* Make sure `npm ci && npm run typecheck && npm run build:js && npm run build:vendor` pass locally before pushing.
+* `check.sh` is the definitive gating script for PRs and local validation.